@nextsparkjs/core 0.1.0-beta.184 → 0.1.0-beta.185

package/dist/lib/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAUA,OAAO,EAAgF,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAavH;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQlF;AAED;;;;;;;;;GASG;AACH,wBAAsB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEnF;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA0GD,eAAO,MAAM,IAAI;;;;kGAmXoo9f,CAAC;oBAAyB,CAAC;;sBAAqD,CAAC;;qBAA4D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kGAA8pD,CAAC;oBAAyB,CAAC;;sBAAqD,CAAC;;qBAA4D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAAu1C,CAAC;sCAA4D,CAAC;oCAA0D,CAAC;mCAAyD,CAAC;2BAAkD,CAAC;;6BAAwE,CAAC;mCAAyD,CAAC;oCAA0D,CAAC;iCAAuD,CAAC;;0BAAmF,CAAC;iCAAyD,CAAC;6BAAoD,CAAC;;;sBAAiF,CAAC;;qBAA6D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAAs7N,CAAC;wBAA4B,CAAC;yBAA+C,CAAC;6BAAmD,CAAC;qCAA2D,CAAC;yBAA+C,CAAC;wBAA8C,CAAC;;;;;qBAAsJ,CAAC;wBAA4B,CAAC;yBAA+C,CAAC;6BAAmD,CAAC;qCAA2D,CAAC;yBAA+C,CAAC;wBAA8C,CAAC;;;;;;;uBAA6L,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sCAAyqD,CAAC;kCAA6C,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAAklJ,CAAC;;sBAAqD,CAAC;;qBAA6D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;;;0BAA+G,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAA8j9B,CAAC;8BAAoD,CAAC;;;sBAAkF,CAAC;;qBAA6D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8BAA45K,CAAC;;;sBAAiF,CAAC;;qBAA6D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yBAA28D,CAAC;;;sBAAiF,CAAC;;qBAA6D,CAAC;yBAA6B,CAAC;;;sBAA6F,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAA82D,CAAC;;sBAAqD,CAAC;;;;+BAAkI,CAAC;;;sBAAiF,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAA0vL,CAAC;;;sBAAiF,CAAC;;qBAA6D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAA+7H,CAAC;;;sBAAiF,CAAC;;qBAA6D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;qCAAoiC,CAAC;qCAAkE,CAAC;;;;;;;;;iCAA0Z,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uCAAi3D,CAAC;;;sBAAkF,CAAC;;qBAA6D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qCAA2wD,CAAC;qCAAkE,CAAC;;;;;;;;;iCAA0Z,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAAiuI,CAAC;;qBAA6D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;qCAA6jC,CAAC;qCAAkE,CAAC;;;;;;;;;iCAA0Z,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qCAAi0Z,CAAC;qCAAkE,CAAC;;;;;;;;;iCAA0Z,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAAkgF,CAAC;4BAAkD,CAAC;yBAA+C,CAAC;;;sBAAiF,CAAC;;qBAA6D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;qCAAi7B,CAAC;qCAAkE,CAAC;;;;;;;;;iCAA0Z,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAAs+D,CAAC;;sBAAqD,CAAC;;;;;;;;;;uBAAuQ,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8BAA2wD,CAAC;;;sBAAiF,CAAC;;qBAA6D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAA05D,CAAC;;sBAAqD,CAAC;;;;;;;;;;uBAAuQ,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qCAAuiI,CAAC;qCAAkE,CAAC;;;;;;;;;iCAA0Z,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAAiyC,CAAC;;qBAA6D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;;;0BAA+G,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;qCAAi+B,CAAC;qCAAkE,CAAC;;;;;;;;;iCAA0Z,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAAmrE,CAAC;;sBAAqD,CAAC;;qBAA6D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;;;0BAA+G,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;qCAAy2B,CAAC;qCAAkE,CAAC;;;;;;;;;iCAA0Z,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAAu8C,CAAC;;sBAAqD,CAAC;;qBAA6D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;;;0BAA+G,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;qCAA+4B,CAAC;qCAAkE,CAAC;;;;;;;;;iCAA0Z,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+BAA++C,CAAC;2BAAiD,CAAC;;6BAAwE,CAAC;mCAAyD,CAAC;oCAA0D,CAAC;8BAAoD,CAAC;;iCAA4F,CAAC;0BAAiD,CAAC;oCAA4D,CAAC;;;sBAAiF,CAAC;;qBAA6D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;;;0BAA+G,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qCAA80E,CAAC;qCAAkE,CAAC;;;;;;;;;iCAA0Z,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kGAAwyD,CAAC;oBAAyB,CAAC;;sBAAqD,CAAC;;qBAA4D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qCAAqtC,CAAC;qCAAkE,CAAC;;;;;;;;;iCAA0Z,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAA0uF,CAAC;;sBAAqD,CAAC;;;;+BAAkI,CAAC;;;sBAAiF,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAg7E,CAAC;;;sBAAiF,CAAC;;qBAA6D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;qCAAqiC,CAAC;qCAAkE,CAAC;;;;;;;;;iCAA0Z,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAy1C,CAAC;0BAAgD,CAAC;;;sBAAiF,CAAC;;qBAA6D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAAi6F,CAAC;0BAAgD,CAAC;;;sBAAiF,CAAC;;qBAA6D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;sBAAgzG,CAAC;;qBAA6D,CAAC;;sBAA2E,CAAC;;uBAAgE,CAAC;;uBAAoD,CAAC;;0BAA2D,CAAC;6BAAwC,CAAC;mBAA8B,CAAC;oBAAgD,CAAC;;0BAAsD,CAAC;6BAAuD,CAAC;;;;;;4BAAoS,CAAC;6BAAuC,CAAC;6BAA8C,CAAC;;;;;;;;wBAAqQ,CAAC;yBAAmC,CAAC;yBAA0C,CAAC;;;;;;;;;;;;;;;;qCAA0rB,CAAC;qCAAkE,CAAC;;;;;;;;;iCAA0Z,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAjD7w0pB,CAAC;AAEH,MAAM,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;AACjD,MAAM,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,kBAAkB,EAAE,QAAQ,EAAE,CAAC;CAC/C,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5B,IAAI,EAAE,WAAW,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAO9B"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/lib/auth.ts"],"names":[],"mappings":"AAUA,OAAO,EAAgF,KAAK,QAAQ,EAAE,MAAM,UAAU,CAAC;AAavH;;;;;;;;;;;;;GAaG;AACH,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQlF;AAED;;;;;;;;;GASG;AACH,wBAAsB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEnF;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA0GD,eAAO,MAAM,IAAI,qEAkUf,CAAC;AAEH,MAAM,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;AACjD,MAAM,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,kBAAkB,EAAE,QAAQ,EAAE,CAAC;CAC/C,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5B,IAAI,EAAE,WAAW,CAAC;CACnB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAO9B"}

package/dist/lib/billing/schema.d.ts

@@ -24,8 +24,8 @@ export declare const subscriptionStatusSchema: z.ZodEnum<{
     canceled: "canceled";
 }>;
 export declare const paymentProviderSchema: z.ZodEnum<{
-    stripe: "stripe";
     polar: "polar";
+    stripe: "stripe";
 }>;
 export declare const billingEventTypeSchema: z.ZodEnum<{
     payment: "payment";

package/dist/lib/mcp/audit.d.ts

@@ -0,0 +1,17 @@
+/**
+ * MCP audit trail.
+ *
+ * The core's api_audit_log exists but the generic entity handlers never write
+ * to it directly for in-process invocations (logApiUsage only runs inside
+ * withApiAuth, which the MCP executor's synthesized requests don't go
+ * through). Every MCP tool call is recorded here so destructive actions by an
+ * autonomous agent are at least reconstructable — same insert shape as
+ * `logApiUsage` (packages/core/src/lib/api/helpers.ts), including passing the
+ * caller's userId as RLS context.
+ *
+ * Note for operators: revoking an API key can take up to 5 minutes to become
+ * effective (core apiKeyCache TTL) — the audit log covers that window.
+ */
+import type { AuditEntry } from './types';
+export declare function auditToolCall(entry: AuditEntry): Promise<void>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/lib/mcp/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../src/lib/mcp/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAIzC,wBAAsB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA0CpE"}

package/dist/lib/mcp/audit.js

@@ -0,0 +1,48 @@
+import { mutateWithRLS } from "../db.js";
+const MAX_SUMMARY_LENGTH = 4e3;
+async function auditToolCall(entry) {
+  if (!entry.apiKeyId) {
+    console.warn("[mcp:audit] tool call without apiKeyId \u2014 skipping DB audit", {
+      tool: entry.tool,
+      userId: entry.userId
+    });
+    return;
+  }
+  const requestBody = {
+    tool: entry.tool,
+    entity: entry.entitySlug ?? null,
+    operation: entry.operation ?? null,
+    recordId: entry.recordId ?? null,
+    teamId: entry.teamId,
+    args: truncate(entry.requestSummary)
+  };
+  try {
+    await mutateWithRLS(
+      `INSERT INTO "api_audit_log"
+       ("apiKeyId", "userId", endpoint, method, "statusCode", "ipAddress", "userAgent", "requestBody", "responseTime")
+       VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9)`,
+      [
+        entry.apiKeyId,
+        entry.userId,
+        `mcp:${entry.tool}`,
+        (entry.operation ?? "workflow").toUpperCase(),
+        entry.statusCode,
+        "mcp",
+        "mcp-client",
+        JSON.stringify(requestBody),
+        entry.responseTimeMs
+      ],
+      entry.userId
+    );
+  } catch (error) {
+    console.error("[mcp:audit] failed to write api_audit_log entry:", error);
+  }
+}
+function truncate(args) {
+  const json = JSON.stringify(args);
+  if (json.length <= MAX_SUMMARY_LENGTH) return args;
+  return { truncated: true, preview: json.slice(0, MAX_SUMMARY_LENGTH) };
+}
+export {
+  auditToolCall
+};

package/dist/lib/mcp/engine.d.ts

@@ -0,0 +1,28 @@
+/**
+ * MCP Engine — registry-driven server factory.
+ *
+ * createMcpEngine(registry, options) builds the full tool set from the entity
+ * registry (entities with access.api, minus reserved slugs) plus injected
+ * overrides and utility tools. The engine NEVER imports theme files: overrides
+ * and translations arrive via options — the default route template assembles
+ * them from the generated MCP_OVERRIDES registry.
+ *
+ * Stateless per request: handleJsonRpc creates an ephemeral McpServer bound
+ * to the request's ToolExecutionContext, processes the message(s), and tears
+ * everything down. Every tool call is audited.
+ *
+ * No separate authorization layer runs here: every generated tool's executor
+ * round-trips in-process through the real generic entity handlers, which
+ * already enforce scope + team-role permission + ownership/field guards for
+ * API-key auth (see tool-generator.ts).
+ */
+import type { JSONRPCMessage } from '@modelcontextprotocol/sdk/types.js';
+import type { EntityConfig } from '../entities/types';
+import type { EngineApi, McpEngineOptions, McpToolDefinition, ToolExecutionContext } from './types';
+export interface McpEngine {
+    tools: McpToolDefinition[];
+    handleJsonRpc: (body: unknown, ctx: ToolExecutionContext) => Promise<JSONRPCMessage | JSONRPCMessage[] | null>;
+    api: EngineApi;
+}
+export declare function createMcpEngine(registry: Record<string, EntityConfig>, options: McpEngineOptions): McpEngine;
+//# sourceMappingURL=engine.d.ts.map

package/dist/lib/mcp/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/lib/mcp/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AAExE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAOrD,OAAO,KAAK,EACV,SAAS,EAET,gBAAgB,EAEhB,iBAAiB,EAEjB,oBAAoB,EACrB,MAAM,SAAS,CAAA;AAMhB,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,iBAAiB,EAAE,CAAA;IAC1B,aAAa,EAAE,CACb,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,oBAAoB,KACtB,OAAO,CAAC,cAAc,GAAG,cAAc,EAAE,GAAG,IAAI,CAAC,CAAA;IACtD,GAAG,EAAE,SAAS,CAAA;CACf;AAED,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,EACtC,OAAO,EAAE,gBAAgB,GACxB,SAAS,CA8JX"}

package/dist/lib/mcp/engine.js

@@ -0,0 +1,158 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import { StatelessJsonRpcTransport } from "./transport.js";
+import { generateEntityTools, normalizeDateFields } from "./tool-generator.js";
+import { buildEntitySchemas } from "./schema-builder.js";
+import { executeEntityOperation } from "./executor.js";
+import { auditToolCall } from "./audit.js";
+import { translateApiError } from "./errors.js";
+const DEFAULT_OPERATIONS = ["list", "get", "create", "update", "delete"];
+const DEFAULT_EXCLUDED_SLUGS = ["patterns"];
+const DEFAULT_TIMEZONE = "UTC";
+function createMcpEngine(registry, options) {
+  var _a, _b;
+  const executor = options.executor ?? executeEntityOperation;
+  const audit = options.audit ?? auditToolCall;
+  const excluded = new Set(options.excludeSlugs ?? DEFAULT_EXCLUDED_SLUGS);
+  const defaultOperations = options.defaultOperations ?? DEFAULT_OPERATIONS;
+  const overrides = options.overrides ?? {};
+  const normalizingExecutor = async (args, ctx) => {
+    var _a2;
+    const result = await executor(args, ctx);
+    if (!result.body.success || result.body.data === void 0) return result;
+    const entityConfig = registry[args.slug];
+    const dateFields = ((_a2 = entityConfig == null ? void 0 : entityConfig.fields) == null ? void 0 : _a2.filter((f) => f.type === "date").map((f) => f.name)) ?? [];
+    const override = overrides[args.slug];
+    const normalizeRow = (row) => normalizeDateFields(row, dateFields);
+    let data = Array.isArray(result.body.data) ? result.body.data.map(normalizeRow) : normalizeRow(result.body.data);
+    if (override == null ? void 0 : override.transformOutput) data = override.transformOutput(args.operation, data);
+    return { ...result, body: { ...result.body, data } };
+  };
+  const api = {
+    execute: normalizingExecutor,
+    entitySchemas: (slug) => {
+      const entityConfig = registry[slug];
+      if (!entityConfig) throw new Error(`Unknown entity for MCP schemas: ${slug}`);
+      return buildEntitySchemas(entityConfig, {
+        translateOption: options.translateOption,
+        override: overrides[slug]
+      });
+    },
+    toolPrefix: options.toolPrefix,
+    defaultTimezone: options.defaultTimezone ?? DEFAULT_TIMEZONE,
+    registry,
+    translateApiError
+  };
+  const tools = [];
+  for (const [slug, entityConfig] of Object.entries(registry)) {
+    if (excluded.has(slug)) continue;
+    if (!(entityConfig == null ? void 0 : entityConfig.enabled)) continue;
+    if (!((_a = entityConfig.access) == null ? void 0 : _a.api)) continue;
+    const override = overrides[slug];
+    if (override == null ? void 0 : override.exclude) continue;
+    const operations = defaultOperations.filter(
+      (op) => {
+        var _a2;
+        return !((_a2 = override == null ? void 0 : override.excludeOperations) == null ? void 0 : _a2.includes(op));
+      }
+    );
+    if (!operations.length) continue;
+    tools.push(
+      ...generateEntityTools(entityConfig, operations, override, {
+        executor: normalizingExecutor,
+        toolPrefix: options.toolPrefix,
+        translateOption: options.translateOption,
+        presets: (_b = options.presets) == null ? void 0 : _b[slug]
+      })
+    );
+  }
+  for (const [slug, override] of Object.entries(overrides)) {
+    if (!override.extraTools) continue;
+    if (excluded.has(slug)) continue;
+    tools.push(...override.extraTools(api));
+  }
+  if (options.utilityTools) {
+    tools.push(...options.utilityTools(api));
+  }
+  assertUniqueNames(tools);
+  async function handleJsonRpc(body, ctx) {
+    const server = new McpServer(
+      options.serverInfo ?? { name: `${options.toolPrefix}-mcp`, version: "1.0.0" }
+    );
+    for (const tool of tools) {
+      server.registerTool(
+        tool.name,
+        {
+          title: tool.title,
+          description: tool.description,
+          // A strict ZodObject (not the raw shape): the SDK parses arguments
+          // with it and emits additionalProperties:false in tools/list, so a
+          // misspelled parameter is an error instead of being dropped
+          // silently. Cross-field rules still live in tool.strictSchema,
+          // which the handler applies.
+          inputSchema: z.object(tool.inputSchema).strict(),
+          annotations: tool.annotations
+        },
+        (async (args) => {
+          var _a2, _b2;
+          const startedAt = Date.now();
+          let result;
+          try {
+            result = await tool.handler(args ?? {}, ctx);
+          } catch (error) {
+            result = {
+              content: [
+                {
+                  type: "text",
+                  text: `Error inesperado: ${error instanceof Error ? error.message : String(error)}`
+                }
+              ],
+              isError: true
+            };
+          }
+          await audit({
+            apiKeyId: ctx.apiKeyId,
+            userId: ctx.userId,
+            tool: tool.name,
+            entitySlug: (_a2 = tool.meta) == null ? void 0 : _a2.entitySlug,
+            operation: (_b2 = tool.meta) == null ? void 0 : _b2.operation,
+            recordId: typeof (args == null ? void 0 : args.id) === "string" ? args.id : void 0,
+            teamId: ctx.teamId,
+            statusCode: result.isError ? 400 : 200,
+            requestSummary: args ?? {},
+            responseTimeMs: Date.now() - startedAt
+          });
+          return result;
+        })
+      );
+    }
+    const transport = new StatelessJsonRpcTransport();
+    await server.connect(transport);
+    try {
+      if (Array.isArray(body)) {
+        const responses = [];
+        for (const message of body) {
+          const response = await transport.handleMessage(message);
+          if (response) responses.push(response);
+        }
+        return responses.length ? responses : null;
+      }
+      return await transport.handleMessage(body);
+    } finally {
+      await transport.close();
+    }
+  }
+  return { tools, handleJsonRpc, api };
+}
+function assertUniqueNames(tools) {
+  const seen = /* @__PURE__ */ new Set();
+  for (const tool of tools) {
+    if (seen.has(tool.name)) {
+      throw new Error(`Duplicate MCP tool name: ${tool.name}`);
+    }
+    seen.add(tool.name);
+  }
+}
+export {
+  createMcpEngine
+};

package/dist/lib/mcp/errors.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Translates entity API errors into actionable messages for the LLM.
+ *
+ * Scope/permission failures arrive as HTTP_403, not PERMISSION_DENIED; CHECK
+ * violations (23514) are swallowed by the core as a bare 500 — overrides
+ * supply `errorHints` so those 500s still carry guidance.
+ */
+import type { EntityApiResult } from './types';
+interface ErrorContext {
+    slug: string;
+    operation: string;
+    hints?: string[];
+}
+export declare function translateApiError(result: EntityApiResult, context: ErrorContext): string;
+export {};
+//# sourceMappingURL=errors.d.ts.map

package/dist/lib/mcp/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/lib/mcp/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAA;AAE9C,UAAU,YAAY;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,YAAY,GAAG,MAAM,CA4CxF"}

package/dist/lib/mcp/errors.js

@@ -0,0 +1,66 @@
+function translateApiError(result, context) {
+  var _a;
+  const { status, body } = result;
+  const code = body.code ?? `HTTP_${status}`;
+  const detail = body.error ? ` (API: ${body.error})` : "";
+  switch (code) {
+    case "AUTHENTICATION_FAILED":
+      return "API key inv\xE1lida, expirada o revocada. Gener\xE1 una nueva en Settings \u2192 API Keys y actualiz\xE1 la configuraci\xF3n del cliente MCP.";
+    case "TEAM_CONTEXT_REQUIRED":
+      return "Falta el contexto de equipo (team). Verific\xE1 que tu API key pertenezca a un usuario con un team activo, o envi\xE1 el header x-team-id.";
+    case "TEAM_ACCESS_DENIED":
+      return "El usuario de la API key no es miembro del team indicado. Verific\xE1 el x-team-id o us\xE1 el team por defecto.";
+    case "VALIDATION_ERROR":
+      return `Datos inv\xE1lidos para ${context.slug}.${formatDetails(body.details)} Correg\xED los campos y reintent\xE1.`;
+    case "INVALID_FIELD_VALUE":
+      return `Un campo tiene un valor no permitido${detail}. Revis\xE1 los valores del schema de la tool y reintent\xE1.`;
+    case "UNIQUE_CONSTRAINT_VIOLATION":
+      return `Ya existe un registro de ${context.slug} con ese valor \xFAnico${detail}. Buscalo con la tool de list y actualizalo en vez de crearlo.`;
+    case "RATE_LIMIT_EXCEEDED":
+      return "L\xEDmite de requests alcanzado. Esper\xE1 un minuto antes de reintentar; para cargas grandes us\xE1 las tools de batch si el entity las expone.";
+    default:
+      break;
+  }
+  switch (status) {
+    case 401:
+      return "No autenticado: la API key no fue aceptada. Gener\xE1 una nueva en Settings \u2192 API Keys.";
+    case 403:
+      return `Sin permiso para ${context.operation} en ${context.slug}. Si es un problema de scope, tu API key necesita el scope ${context.slug}:${scopeFor(context.operation)}. Si es un problema de rol, tu rol en el team no permite esta acci\xF3n.`;
+    case 404:
+      return `No se encontr\xF3 el registro de ${context.slug}. El ID puede ser incorrecto o el registro fue eliminado \u2014 us\xE1 la tool de list para encontrar el ID correcto.`;
+    case 409:
+      return `No se puede completar: el registro de ${context.slug} tiene registros relacionados que dependen de \xE9l${detail}. Elimin\xE1 o reasign\xE1 los registros dependientes primero.`;
+    case 429:
+      return "L\xEDmite de requests alcanzado. Esper\xE1 un minuto antes de reintentar.";
+    case 500: {
+      const hints = ((_a = context.hints) == null ? void 0 : _a.length) ? ` Posibles causas conocidas: ${context.hints.join(" \xB7 ")}.` : "";
+      return `Error interno de la API al ejecutar ${context.operation} en ${context.slug}.${hints} Si persiste, reportalo.`;
+    }
+    default:
+      return `Error ${status} (${code}) al ejecutar ${context.operation} en ${context.slug}${detail}.`;
+  }
+}
+function scopeFor(operation) {
+  if (operation === "list" || operation === "get") return "read";
+  if (operation === "delete") return "delete";
+  return "write";
+}
+function formatDetails(details) {
+  if (!details) return "";
+  if (Array.isArray(details)) {
+    const lines = details.map((issue) => {
+      if (issue && typeof issue === "object") {
+        const record = issue;
+        const path = Array.isArray(record.path) ? record.path.join(".") : String(record.path ?? "");
+        const message = String(record.message ?? JSON.stringify(record));
+        return path ? `${path}: ${message}` : message;
+      }
+      return String(issue);
+    }).slice(0, 8);
+    return ` Problemas: ${lines.join(" \xB7 ")}.`;
+  }
+  return ` Detalle: ${JSON.stringify(details).slice(0, 300)}.`;
+}
+export {
+  translateApiError
+};

package/dist/lib/mcp/executor.d.ts

@@ -0,0 +1,15 @@
+/**
+ * In-process entity executor.
+ *
+ * Invokes the core generic handlers directly (exactly like
+ * app/api/v1/[entity]/route.ts does) with a synthesized NextRequest carrying
+ * the caller's Authorization and the resolved x-team-id. NO fetch fallback:
+ * if the in-process path fails it fails loudly; we never degrade to HTTP,
+ * which would send the credential to an env-derived URL.
+ *
+ * Team context is injected in ALL FIVE operations — the handler only reads
+ * the x-team-id header, and validates it on every operation.
+ */
+import type { EntityExecutor } from './types';
+export declare const executeEntityOperation: EntityExecutor;
+//# sourceMappingURL=executor.d.ts.map

package/dist/lib/mcp/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../../src/lib/mcp/executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAUH,OAAO,KAAK,EAAmB,cAAc,EAA2C,MAAM,SAAS,CAAA;AAKvG,eAAO,MAAM,sBAAsB,EAAE,cA8BpC,CAAA"}

package/dist/lib/mcp/executor.js

@@ -0,0 +1,63 @@
+import { NextRequest } from "next/server";
+import {
+  handleGenericList,
+  handleGenericCreate,
+  handleGenericRead,
+  handleGenericUpdate,
+  handleGenericDelete
+} from "../api/entity/generic-handler.js";
+const INTERNAL_ORIGIN = "http://mcp.internal";
+const executeEntityOperation = async (args, ctx) => {
+  const request = buildRequest(args, ctx);
+  const params = Promise.resolve({ entity: args.slug, id: args.id ?? "" });
+  let response;
+  switch (args.operation) {
+    case "list":
+      response = await handleGenericList(request);
+      break;
+    case "create":
+      response = await handleGenericCreate(request);
+      break;
+    case "get":
+      response = await handleGenericRead(request, { params });
+      break;
+    case "update":
+      response = await handleGenericUpdate(request, { params });
+      break;
+    case "delete":
+      response = await handleGenericDelete(request, { params });
+      break;
+    default:
+      throw new Error(`Unsupported entity operation: ${String(args.operation)}`);
+  }
+  const body = await response.json();
+  return { status: response.status, body };
+};
+function buildRequest(args, ctx) {
+  const path = args.id ? `/api/v1/${args.slug}/${args.id}` : `/api/v1/${args.slug}`;
+  const url = new URL(path, INTERNAL_ORIGIN);
+  for (const [key, value] of Object.entries(args.query ?? {})) {
+    if (value !== void 0 && value !== "") url.searchParams.set(key, value);
+  }
+  const method = METHODS[args.operation];
+  const headers = {
+    authorization: ctx.authHeader,
+    "x-team-id": ctx.teamId
+  };
+  let body;
+  if (args.body !== void 0) {
+    body = JSON.stringify(args.body);
+    headers["content-type"] = "application/json";
+  }
+  return new NextRequest(url, { method, headers, body });
+}
+const METHODS = {
+  list: "GET",
+  get: "GET",
+  create: "POST",
+  update: "PATCH",
+  delete: "DELETE"
+};
+export {
+  executeEntityOperation
+};

package/dist/lib/mcp/index.d.ts

@@ -0,0 +1,9 @@
+export { createMcpEngine, type McpEngine } from './engine';
+export { executeEntityOperation } from './executor';
+export { auditToolCall } from './audit';
+export { translateApiError } from './errors';
+export { buildEntitySchemas, type EntitySchemaBundle, type SchemaBuilderContext } from './schema-builder';
+export { StatelessJsonRpcTransport } from './transport';
+export { generateEntityTools, toolToken, listArgsToQuery, normalizeDateFields, errorResult, } from './tool-generator';
+export { McpToolError, MUTATION_OPERATIONS, type AuditEntry, type EngineApi, type EntityApiResult, type EntityExecutor, type EntityPresetInfo, type ExecuteEntityArgs, type McpEngineOptions, type McpEntityOverride, type McpOperation, type McpShape, type McpToolAnnotations, type McpToolDefinition, type McpToolResult, type McpToolResultContent, type ToolExecutionContext, } from './types';
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/mcp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/mcp/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,KAAK,SAAS,EAAE,MAAM,UAAU,CAAA;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AAC5C,OAAO,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,KAAK,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AACzG,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAA;AACvD,OAAO,EACL,mBAAmB,EACnB,SAAS,EACT,eAAe,EACf,mBAAmB,EACnB,WAAW,GACZ,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,QAAQ,EACb,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,GAC1B,MAAM,SAAS,CAAA"}

package/dist/lib/mcp/index.js

@@ -0,0 +1,32 @@
+import { createMcpEngine } from "./engine.js";
+import { executeEntityOperation } from "./executor.js";
+import { auditToolCall } from "./audit.js";
+import { translateApiError } from "./errors.js";
+import { buildEntitySchemas } from "./schema-builder.js";
+import { StatelessJsonRpcTransport } from "./transport.js";
+import {
+  generateEntityTools,
+  toolToken,
+  listArgsToQuery,
+  normalizeDateFields,
+  errorResult
+} from "./tool-generator.js";
+import {
+  McpToolError,
+  MUTATION_OPERATIONS
+} from "./types.js";
+export {
+  MUTATION_OPERATIONS,
+  McpToolError,
+  StatelessJsonRpcTransport,
+  auditToolCall,
+  buildEntitySchemas,
+  createMcpEngine,
+  errorResult,
+  executeEntityOperation,
+  generateEntityTools,
+  listArgsToQuery,
+  normalizeDateFields,
+  toolToken,
+  translateApiError
+};

package/dist/lib/mcp/schema-builder.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Schema builder — derives MCP tool input schemas from entity configs.
+ *
+ * DESIGN NOTE: the core's generateEntitySchemas output cannot back tools/list
+ * — its fields are built as z.union([..., z.undefined()]).transform(...),
+ * which zod 4 cannot convert to JSON Schema ("Undefined cannot be
+ * represented"). So this builder emits PRESENTATION schemas (JSON-Schema-
+ * friendly, LLM-documented) derived from the same field definitions. The core
+ * still validates: every call runs in-process through the generic handler,
+ * which validates with the real core schemas. The MCP layer enforces
+ * shape/enums/strictness; the core enforces semantics. This presentation
+ * layer must never be stricter than what the real API accepts.
+ *
+ * MCP-side hardening against the API's silent failures:
+ * - strict objects: unknown keys are rejected, not stripped
+ * - sortBy: enum of the entity's actually-sortable fields
+ * - filters: only real filterable fields; date/datetime EXCLUDED (the core
+ *   applies `=` equality which never matches a timestamptz → silent [])
+ * - dateField/from/to validated as a trio (a lone `from` is silently ignored)
+ * - search only exposed when the entity has one of name|title|slug|content
+ * - `distinct` NEVER exposed (identifier interpolation risk in the core)
+ */
+import { z } from 'zod';
+import type { EntityConfig } from '../entities/types';
+import type { McpEntityOverride, McpShape } from './types';
+export interface EntitySchemaBundle {
+    createShape: McpShape;
+    createStrict: z.ZodTypeAny;
+    updateShape: McpShape;
+    updateStrict: z.ZodTypeAny;
+    listShape: McpShape;
+    listStrict: z.ZodTypeAny;
+    getShape: McpShape;
+    getStrict: z.ZodTypeAny;
+    /** Field names of type date (DATE column) — outputs get normalized to YYYY-MM-DD. */
+    dateFields: string[];
+    /** Which field the core search param actually scans for this entity (or null). */
+    searchField: string | null;
+}
+export interface SchemaBuilderContext {
+    translateOption?: (slug: string, fieldName: string, value: string) => string | undefined;
+    override?: McpEntityOverride;
+}
+export declare function buildEntitySchemas(entityConfig: EntityConfig, context?: SchemaBuilderContext): EntitySchemaBundle;
+//# sourceMappingURL=schema-builder.d.ts.map

package/dist/lib/mcp/schema-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-builder.d.ts","sourceRoot":"","sources":["../../../src/lib/mcp/schema-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,YAAY,EAAe,MAAM,mBAAmB,CAAA;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AAwB1D,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,QAAQ,CAAA;IACrB,YAAY,EAAE,CAAC,CAAC,UAAU,CAAA;IAC1B,WAAW,EAAE,QAAQ,CAAA;IACrB,YAAY,EAAE,CAAC,CAAC,UAAU,CAAA;IAC1B,SAAS,EAAE,QAAQ,CAAA;IACnB,UAAU,EAAE,CAAC,CAAC,UAAU,CAAA;IACxB,QAAQ,EAAE,QAAQ,CAAA;IAClB,SAAS,EAAE,CAAC,CAAC,UAAU,CAAA;IACvB,qFAAqF;IACrF,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,kFAAkF;IAClF,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;IACxF,QAAQ,CAAC,EAAE,iBAAiB,CAAA;CAC7B;AAED,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,YAAY,EAC1B,OAAO,GAAE,oBAAyB,GACjC,kBAAkB,CAwBpB"}