@rubytech/create-realagent-code 0.1.566 → 0.1.568

package/payload/platform/plugins/inventory/lib/mcp-spawn-tee/index.js

@@ -0,0 +1,204 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * MCP spawn-tee — in-process stderr capture + lifecycle observability.
+ *
+ * Claude Code spawns each MCP server itself; the platform never holds a
+ * ChildProcess handle. This shim sits between Claude Code and the real MCP
+ * server: Claude Code runs `node <this> <real-entry>`, and the shim runs the
+ * real entry IN ITS OWN PROCESS via dynamic import() — one node runtime, not
+ * two. Before importing, it replaces process.stderr.write with a tee so every
+ * stderr byte the server writes is mirrored to the log sinks; stdin and stdout
+ * (the JSON-RPC channel) are never touched.
+ *
+ *   Claude Code CLI → shim (this file) = node running <real-entry> in-process
+ *        stdin/stdout : untouched (JSON-RPC channel)
+ *        stderr       : process.stderr.write teed → raw sink + passthrough
+ *
+ * Destinations:
+ *   - `${LOG_DIR}/mcp-<name>-<SESSION_ID>.log`   — raw stderr + lifecycle lines.
+ *     The sole raw sink. Task 1721 retired the per-date twin: its date was
+ *     pinned at spawn, no reader ever parsed it, and a since-removed stderr
+ *     tee wrote the same file, so every line landed twice.
+ *   - `${LOG_DIR}/mcp-<name>-nosession.log`      — the same, for a spawn with
+ *     no SESSION_ID (enumeration). One fixed file per server.
+ *   - `server.log` via the loopback log-ingest route — best-effort mirror of
+ *     the [mcp-helper] lifecycle lines.
+ *
+ * Lifecycle lines, correlation key `session=<id8> server=<name>` — unchanged:
+ *   [mcp-helper] op=spawn ... pid= entry=
+ *   [mcp-helper] op=boot  ... head=<first stderr bytes>
+ *   [mcp-helper] op=exit  ... code= signal= lifetimeMs= stderr-tail=
+ *
+ * Process model (Task 989): the shim IS the server's process. op=exit fires
+ * from process.on("exit"), so it covers a normal exit, a non-zero exit, an
+ * uncaught throw (code 1), and a catchable-signal exit (SIGTERM/SIGINT/SIGHUP,
+ * whose handlers record the signal name). An external SIGKILL is uncatchable
+ * and leaves no op=exit line — the per-session stderr tail already on disk and
+ * Claude Code's own transport-drop are the evidence for that death mode.
+ *
+ * The shim never writes to fd 1 (stdout) — that is the JSON-RPC channel.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const node_url_1 = require("node:url");
+const SERVER_NAME = process.env.MCP_SPAWN_TEE_NAME ?? "unknown";
+const LOG_DIR = process.env.LOG_DIR;
+const SESSION_ID = process.env.SESSION_ID;
+const PLATFORM_PORT = process.env.PLATFORM_PORT;
+const ENTRY = process.argv[2];
+const SESSION_ID8 = SESSION_ID ? SESSION_ID.slice(0, 8) : "—";
+const spawnStamp = Date.now();
+// The one raw sink (Task 1721). A sessionless spawn (rc-daemon stamps
+// SESSION_ID='' — rc-daemon.ts:513 — while still stamping LOG_DIR) shares one
+// fixed file per server rather than a date-named one: the date was never read
+// by any reader and named a process lifetime, not a day. Interleaved spawns in
+// the nosession file are separated by the [mcp-helper] op=spawn pid= lines.
+const rawSinkPath = LOG_DIR
+    ? (0, node_path_1.resolve)(LOG_DIR, SESSION_ID ? `mcp-${SERVER_NAME}-${SESSION_ID}.log` : `mcp-${SERVER_NAME}-nosession.log`)
+    : undefined;
+// Rolling tail of entry stderr for op=exit. Capped so a chatty server cannot
+// grow the buffer without bound.
+const TAIL_CAP = 2048;
+let stderrTail = "";
+let bootEmitted = false;
+let exitEmitted = false;
+let exitSignal;
+// The real stderr writer, captured before the tee replaces it. Lifecycle lines
+// and stderr passthrough both go through this so they are never re-teed into
+// the raw sink nor recursed back into the patched writer.
+const rawStderrWrite = process.stderr.write.bind(process.stderr);
+// LOG_DIR is created once, lazily, on the first successful append — not per
+// chunk. teeWrite runs on the server's own stderr hot path now, so a per-call
+// mkdirSync would be two syscalls per log line for nothing.
+let logDirReady = false;
+function appendSafe(path, data) {
+    if (!path || !LOG_DIR)
+        return;
+    try {
+        if (!logDirReady) {
+            (0, node_fs_1.mkdirSync)(LOG_DIR, { recursive: true });
+            logDirReady = true;
+        }
+        (0, node_fs_1.appendFileSync)(path, data);
+    }
+    catch {
+        /* unwritable destination — never mask primary output */
+    }
+}
+// Best-effort mirror of a lifecycle line to server.log via the loopback
+// log-ingest route. Fire-and-forget: the per-session file is authoritative, so
+// a dropped POST loses nothing. On the "exit" event the loop is stopping, so
+// the op=exit mirror may not flush — the per-session line, written sync, holds.
+function postToServerLog(suffix, level) {
+    if (!PLATFORM_PORT)
+        return;
+    try {
+        const ctrl = new AbortController();
+        const t = setTimeout(() => ctrl.abort(), 500);
+        t.unref?.(); // never let the abort timer keep the shim's event loop alive
+        void fetch(`http://127.0.0.1:${PLATFORM_PORT}/api/admin/log-ingest`, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({ tag: "mcp-helper", level, line: suffix }),
+            signal: ctrl.signal,
+        }).then(() => clearTimeout(t)).catch(() => clearTimeout(t));
+    }
+    catch {
+        /* fetch threw synchronously — best-effort only */
+    }
+}
+// Emit one [mcp-helper] lifecycle line: authoritative per-session file (sync,
+// survives process.exit), the shim's own stderr via the RAW writer (journald /
+// Claude Code visibility, never re-teed), and a best-effort server.log mirror.
+// `suffix` is the line body after the tag and carries no newline (the
+// log-ingest route rejects newlines).
+function emitLifecycle(suffix, level) {
+    const line = `[mcp-helper] ${suffix}\n`;
+    appendSafe(rawSinkPath, line);
+    try {
+        rawStderrWrite(line);
+    }
+    catch { /* stderr closed */ }
+    postToServerLog(suffix, level);
+}
+if (!ENTRY) {
+    emitLifecycle(`op=error session=${SESSION_ID8} server=${SERVER_NAME} reason="no entry given (argv[2] missing)"`, "error");
+    process.exit(2);
+}
+// Replace process.stderr.write with a tee: mirror every server stderr byte to
+// the raw sink, keep a rolling tail for op=exit, emit
+// op=boot on the first bytes, then pass the write through to the real stderr.
+const teeWrite = ((...args) => {
+    const chunk = args[0];
+    appendSafe(rawSinkPath, chunk); // raw sink (Task 1721)
+    const text = typeof chunk === "string" ? chunk : Buffer.from(chunk).toString("utf8");
+    stderrTail = (stderrTail + text).slice(-TAIL_CAP);
+    if (!bootEmitted) {
+        bootEmitted = true;
+        const head = text.split("\n")[0].slice(0, 200);
+        emitLifecycle(`op=boot session=${SESSION_ID8} server=${SERVER_NAME} head=${JSON.stringify(head)}`, "info");
+    }
+    return rawStderrWrite(...args); // passthrough
+});
+process.stderr.write = teeWrite;
+// Catchable-signal handling. The shim drives the exit ONLY when it is the sole
+// listener for the signal — i.e. the imported entry installed no handler of its
+// own. In that case it records the signal (so op=exit carries signal=<sig>) and
+// exits with 128+signum, mirroring the prior wrapper's exit-status convention.
+//
+// When the entry DID install a handler, the shim defers entirely and records
+// nothing: the entry's handler decides the exit code, and op=exit reflects that
+// exit verbatim. This matches the prior two-process model, where a child that
+// caught the signal and exited cleanly was observed as code=0 signal=— (a clean
+// self-exit), not as a signal death. Setting exitSignal here unconditionally
+// would mislabel every graceful signal-driven shutdown as a signal kill.
+function onSignal(sig, code) {
+    return () => {
+        if (process.listenerCount(sig) === 1) {
+            exitSignal = sig;
+            process.exit(code);
+        }
+    };
+}
+process.on("SIGTERM", onSignal("SIGTERM", 143));
+process.on("SIGINT", onSignal("SIGINT", 130));
+process.on("SIGHUP", onSignal("SIGHUP", 129));
+// op=exit, emitted once from the process "exit" event. Sync-only — the loop is
+// stopping. When a catchable signal caused the exit, report code=— signal=<sig>
+// to match the prior wrapper's format; otherwise code=<exit code> signal=—.
+process.on("exit", (code) => {
+    if (exitEmitted)
+        return;
+    exitEmitted = true;
+    const lifetimeMs = Date.now() - spawnStamp;
+    const tail = stderrTail.slice(-200);
+    const codeField = exitSignal ? "—" : String(code);
+    const level = exitSignal || code !== 0 ? "error" : "info";
+    emitLifecycle(`op=exit session=${SESSION_ID8} server=${SERVER_NAME} pid=${process.pid} ` +
+        `code=${codeField} signal=${exitSignal ?? "—"} lifetimeMs=${lifetimeMs} stderr-tail=${JSON.stringify(tail)}`, level);
+});
+emitLifecycle(`op=spawn session=${SESSION_ID8} server=${SERVER_NAME} pid=${process.pid} entry=${ENTRY}`, "info");
+// Task 2356 — present argv as a direct `node <entry>` invocation before the
+// entry loads. The shim is meant to be transparent: an entry that asks the
+// standard "am I the entry module?" question
+// (`import.meta.url === pathToFileURL(realpathSync(process.argv[1])).href`)
+// must get the same answer it gets when Claude Code runs it without the shim.
+// With the shim's own path left in argv[1] the answer is no, so such an entry
+// loads, starts nothing, and exits 0 — measured on the three channel servers,
+// which all gate main() that way. Plugin MCPs connect at module top level and
+// never read argv, so this is inert for them. ENTRY was captured above, before
+// the rewrite. Extra CLI args keep their positions after the entry slot.
+process.argv = [process.argv[0], ENTRY, ...process.argv.slice(3)];
+// Run the real MCP server in THIS process. Dynamic import() (not top-level
+// await — this file compiles to CommonJS) loads the ESM entry; a load-time
+// failure mirrors the old child spawn-error path (op=error, exit 127). The
+// op=exit handler is suppressed on this path so op=error stays the sole record.
+import((0, node_url_1.pathToFileURL)(ENTRY).href).catch((err) => {
+    const msg = err instanceof Error ? err.message : String(err);
+    exitEmitted = true;
+    emitLifecycle(`op=error session=${SESSION_ID8} server=${SERVER_NAME} reason=${JSON.stringify(`import error: ${msg}`)}`, "error");
+    process.exit(127);
+});
+//# sourceMappingURL=index.js.map

package/payload/platform/plugins/inventory/lib/mcp-spawn-tee/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "commonjs"
+}

package/payload/platform/plugins/inventory/mcp/dist/index.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.ts.map

package/payload/platform/plugins/inventory/mcp/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/inventory/mcp/dist/index.js

@@ -0,0 +1,241 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { eagerTool } from "../../../../lib/mcp-eager/dist/index.js";
+import { writeNodeWithEdges } from "../../../../lib/graph-write/dist/index.js";
+import { z } from "zod";
+import { closeDriver, getSession } from "./lib/neo4j.js";
+import { readDemandHistory, readPlanCandidates, resolveLocation, resolveProductBySku, setSupplierTerms, } from "./lib/read.js";
+import { replenishPlan, } from "./tools/replenish-plan.js";
+import { purchaseOrderRecord, } from "./tools/purchase-order-record.js";
+import { forecast } from "./tools/forecast.js";
+import { policySet } from "./tools/policy-set.js";
+import { supplierTermsSet, } from "./tools/supplier-terms-set.js";
+import { stockRecord } from "./tools/stock-record.js";
+import { demandRecord } from "./tools/demand-record.js";
+import { countWriteRejects24h } from "./lib/write-rejects.js";
+const server = new McpServer({ name: "maxy-inventory", version: "0.1.0" });
+// Plugin-system boot tolerance. Module init must never throw: plugin-system
+// spawn enumerates tools/list with empty env, and a boot throw empties the
+// registry for every plugin. Refusal is per call, which preserves account
+// isolation without breaking enumeration.
+const accountId = process.env.ACCOUNT_ID ?? null;
+const logDir = process.env.LOG_DIR;
+const agentSlug = process.env.AGENT_SLUG;
+const sessionId = process.env.SESSION_ID;
+process.stderr.write(`[inventory] boot accountId=${accountId ?? "-"} sessionId=${sessionId || "-"} agentSlug=${agentSlug || "-"}\n`);
+function refuseNoAccount(toolName) {
+    process.stderr.write(`[inventory] tool=${toolName} refuse reason=no-account-context\n`);
+    return {
+        content: [
+            {
+                type: "text",
+                text: `${toolName} cannot execute: this MCP instance was launched without ACCOUNT_ID (plugin-system metadata-only mode). Per-account writes require ACCOUNT_ID at spawn.`,
+            },
+        ],
+        isError: true,
+    };
+}
+// `agent` stays undefined when AGENT_SLUG is unset rather than defaulting to
+// "". graph-write resolves `agent ?? source ?? "unknown"` and an empty string
+// is not nullish, so a default prints a blank agent= on every reject.
+const createdBy = (tool) => ({
+    agent: agentSlug,
+    session: sessionId,
+    tool,
+    source: "inventory",
+});
+// No cast. Casting writeNodeWithEdges is what let a dead write path ship in
+// the ledger plugin.
+const write = writeNodeWithEdges;
+async function withSession(fn) {
+    const session = getSession();
+    try {
+        return await fn(session);
+    }
+    finally {
+        await session.close();
+    }
+}
+const stockRowShape = z.object({
+    sku: z.string().min(1).describe("Product SKU as it appears on the :Product node"),
+    location: z
+        .string()
+        .min(1)
+        .describe("Element id of the existing :StoreLocation. Look it up first; this tool never creates locations"),
+    quantityOnHand: z.number().describe("Units physically in stock at this location"),
+    quantityOnOrder: z
+        .number()
+        .describe("Units already on an open purchase order for this location"),
+    asOf: z.string().describe("ISO timestamp the count was taken, e.g. 2026-08-05T09:00:00Z"),
+});
+eagerTool(server, "inventory-stock-record", "Record measured stock for one or more products at a location. Parse the operator's stock export into rows first. Rows whose SKU or location cannot be resolved are rejected and named back to you; they are never written with a guessed target.", {
+    rows: z.array(stockRowShape).min(1).describe("One entry per product per location"),
+}, async (args) => {
+    if (accountId === null)
+        return refuseNoAccount("inventory-stock-record");
+    return withSession((session) => stockRecord({
+        session,
+        write,
+        resolveProduct: resolveProductBySku,
+        resolveLocation,
+        accountId,
+        createdBy: createdBy("inventory-stock-record"),
+        ...args,
+    }));
+});
+const demandRowShape = z.object({
+    sku: z.string().min(1).describe("Product SKU as it appears on the :Product node"),
+    location: z.string().min(1).describe("Element id of the existing :StoreLocation"),
+    periodStart: z.string().describe("ISO date the period opens, e.g. 2026-07-01"),
+    periodEnd: z.string().describe("ISO date the period closes, must be after periodStart"),
+    quantitySold: z
+        .number()
+        .min(0)
+        .describe("Units sold in the period. Zero is meaningful and is stored; omit the row only when there is genuinely no data"),
+});
+eagerTool(server, "inventory-demand-record", "Record observed sales per product per location per period. Parse the operator's sales export into equal-length periods first, one row per product per location per period. A period with zero sales should be recorded as zero, not omitted, because the forecast reads a missing period differently from a quiet one.", {
+    rows: z
+        .array(demandRowShape)
+        .min(1)
+        .describe("One entry per product per location per period"),
+}, async (args) => {
+    if (accountId === null)
+        return refuseNoAccount("inventory-demand-record");
+    return withSession((session) => demandRecord({
+        session,
+        write,
+        resolveProduct: resolveProductBySku,
+        resolveLocation,
+        accountId,
+        createdBy: createdBy("inventory-demand-record"),
+        ...args,
+    }));
+});
+eagerTool(server, "inventory-policy-set", "Set how hard to try to stay in stock for one product at one location, and how often the operator reviews reordering. Ask the operator for both rather than assuming: a 95% service level and a weekly review are common but neither is a safe default.", {
+    sku: z.string().min(1).describe("Product SKU"),
+    location: z.string().min(1).describe("Element id of the :StoreLocation"),
+    serviceLevel: z
+        .number()
+        .gt(0)
+        .lt(1)
+        .describe("Target in-stock probability, e.g. 0.95. Strictly between 0 and 1"),
+    reviewPeriodDays: z
+        .number()
+        .positive()
+        .describe("Days between reorder reviews, e.g. 7 for a weekly order"),
+}, async (args) => {
+    if (accountId === null)
+        return refuseNoAccount("inventory-policy-set");
+    return withSession((session) => policySet({
+        session,
+        write,
+        resolveProduct: resolveProductBySku,
+        resolveLocation,
+        accountId,
+        createdBy: createdBy("inventory-policy-set"),
+        ...args,
+    }));
+});
+eagerTool(server, "inventory-supplier-terms-set", "Set lead time, minimum order, pack multiple and unit cost for a product from a given supplier. The product must already be linked to the supplier; this tool never creates that link.", {
+    sku: z.string().min(1).describe("Product SKU"),
+    supplierNodeId: z
+        .string()
+        .min(1)
+        .describe("Element id of the existing :Organization the product is SUPPLIED_BY"),
+    leadTimeDays: z
+        .number()
+        .min(0)
+        .describe("Whole days from placing the order to it arriving"),
+    minimumOrderQuantity: z
+        .number()
+        .min(0)
+        .describe("Smallest order the supplier accepts. Use 0 when there is no minimum"),
+    orderMultiple: z
+        .number()
+        .positive()
+        .describe("Pack size orders must be a multiple of. Use 1 when they ship singles"),
+    unitCost: z.number().min(0).describe("Cost per unit in the account's currency"),
+}, async (args) => {
+    if (accountId === null)
+        return refuseNoAccount("inventory-supplier-terms-set");
+    return withSession((session) => supplierTermsSet({
+        session,
+        resolveProduct: resolveProductBySku,
+        setTerms: setSupplierTerms,
+        accountId,
+        ...args,
+    }));
+});
+eagerTool(server, "inventory-forecast", "Expected demand per period for one product at one location, worked out from recorded sales history. Nothing is stored; the figure is derived on every call. An empty history is reported as an error rather than as zero demand, because those mean opposite things.", {
+    sku: z.string().min(1).describe("Product SKU"),
+    location: z.string().min(1).describe("Element id of the :StoreLocation"),
+    window: z
+        .number()
+        .int()
+        .positive()
+        .describe("How many trailing periods to average, e.g. 8 for eight weeks of weekly data"),
+}, async (args) => {
+    if (accountId === null)
+        return refuseNoAccount("inventory-forecast");
+    return withSession((session) => forecast({
+        session,
+        resolveProduct: resolveProductBySku,
+        readHistory: readDemandHistory,
+        accountId,
+        ...args,
+    }));
+});
+eagerTool(server, "inventory-replenish-plan", "What to reorder at one location, how much, and from whom. Returns the oldest and newest stock timestamps it read, so state the age of the data when you report the result. Lines that could not be worked out come back named with the missing input; do not fill those in yourself, ask the operator for the value and record it with the matching set tool.", {
+    location: z.string().min(1).describe("Element id of the :StoreLocation to plan for"),
+    window: z
+        .number()
+        .int()
+        .positive()
+        .describe("How many trailing demand periods to average, e.g. 8"),
+    periodDays: z
+        .number()
+        .positive()
+        .describe("Length of one demand period in days, e.g. 7 when the sales export is weekly"),
+    today: z.string().describe("ISO date to treat as the order date, e.g. 2026-08-05"),
+}, async (args) => {
+    if (accountId === null)
+        return refuseNoAccount("inventory-replenish-plan");
+    return withSession((session) => replenishPlan({
+        session,
+        readCandidates: readPlanCandidates,
+        accountId,
+        recentWriteRejects: logDir ? countWriteRejects24h(logDir, Date.now()) : 0,
+        ...args,
+    }));
+});
+eagerTool(server, "inventory-purchase-order-record", "Record a purchase order the operator has confirmed. Confirm the lines and the supplier with the operator before calling this. It records the order in the graph and does not send anything to the supplier, so tell the operator they still need to place it.", {
+    supplierNodeId: z.string().min(1).describe("Element id of the supplier :Organization"),
+    orderDate: z.string().describe("ISO date the order is placed, e.g. 2026-08-05"),
+    expectedDelivery: z
+        .string()
+        .describe("ISO date the order should arrive, from the plan's expectedArrival"),
+    lines: z
+        .array(z.object({
+        sku: z.string().min(1).describe("Product SKU"),
+        quantity: z.number().positive().describe("Units ordered"),
+    }))
+        .min(1)
+        .describe("The confirmed order lines"),
+}, async (args) => {
+    if (accountId === null)
+        return refuseNoAccount("inventory-purchase-order-record");
+    return withSession((session) => purchaseOrderRecord({
+        session,
+        write,
+        accountId,
+        createdBy: createdBy("inventory-purchase-order-record"),
+        ...args,
+    }));
+});
+const transport = new StdioServerTransport();
+await server.connect(transport);
+process.on("SIGTERM", async () => {
+    await closeDriver();
+    process.exit(0);
+});
+//# sourceMappingURL=index.js.map

package/payload/platform/plugins/inventory/mcp/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAC/E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,aAAa,GAEd,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,mBAAmB,GAEpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAuB,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAwB,MAAM,uBAAuB,CAAC;AACxE,OAAO,EACL,gBAAgB,GAEjB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,WAAW,EAA0B,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAA2B,MAAM,0BAA0B,CAAC;AAEjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAkB9D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAE3E,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,0CAA0C;AAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC;AACjD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;AACnC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;AACzC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;AACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8BAA8B,SAAS,IAAI,GAAG,cAAc,SAAS,IAAI,GAAG,cAAc,SAAS,IAAI,GAAG,IAAI,CAC/G,CAAC;AAEF,SAAS,eAAe,CAAC,QAAgB;IACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,QAAQ,qCAAqC,CAAC,CAAC;IACxF,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,GAAG,QAAQ,wJAAwJ;aAC1K;SACF;QACD,OAAO,EAAE,IAAa;KACvB,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,8EAA8E;AAC9E,sEAAsE;AACtE,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC;IACnC,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,SAAS;IAClB,IAAI;IACJ,MAAM,EAAE,WAAW;CACpB,CAAC,CAAC;AAEH,4EAA4E;AAC5E,qBAAqB;AACrB,MAAM,KAAK,GAAY,kBAAkB,CAAC;AAE1C,KAAK,UAAU,WAAW,CACxB,EAA0D;IAE1D,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IACjF,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,gGAAgG,CACjG;IACH,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACjF,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,QAAQ,CAAC,2DAA2D,CAAC;IACxE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8DAA8D,CAAC;CAC1F,CAAC,CAAC;AAEH,SAAS,CACP,MAAM,EACN,wBAAwB,EACxB,kPAAkP,EAClP;IACE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,oCAAoC,CAAC;CACnF,EACD,KAAK,EAAE,IAA6B,EAAE,EAAE;IACtC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,wBAAwB,CAAC,CAAC;IACzE,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,WAAW,CAAC;QACV,OAAO;QACP,KAAK;QACL,cAAc,EAAE,mBAAmB;QACnC,eAAe;QACf,SAAS;QACT,SAAS,EAAE,SAAS,CAAC,wBAAwB,CAAC;QAC9C,GAAI,IAA2C;KAChD,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gDAAgD,CAAC;IACjF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACjF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IAC9E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IACvF,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACP,+GAA+G,CAChH;CACJ,CAAC,CAAC;AAEH,SAAS,CACP,MAAM,EACN,yBAAyB,EACzB,wTAAwT,EACxT;IACE,IAAI,EAAE,CAAC;SACJ,KAAK,CAAC,cAAc,CAAC;SACrB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,+CAA+C,CAAC;CAC7D,EACD,KAAK,EAAE,IAA6B,EAAE,EAAE;IACtC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,yBAAyB,CAAC,CAAC;IAC1E,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,YAAY,CAAC;QACX,OAAO;QACP,KAAK;QACL,cAAc,EAAE,mBAAmB;QACnC,eAAe;QACf,SAAS;QACT,SAAS,EAAE,SAAS,CAAC,yBAAyB,CAAC;QAC/C,GAAI,IAA4C;KACjD,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,sBAAsB,EACtB,wPAAwP,EACxP;IACE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IACxE,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,EAAE,CAAC,CAAC,CAAC;SACL,EAAE,CAAC,CAAC,CAAC;SACL,QAAQ,CAAC,kEAAkE,CAAC;IAC/E,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,yDAAyD,CAAC;CACvE,EACD,KAAK,EAAE,IAA6B,EAAE,EAAE;IACtC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,sBAAsB,CAAC,CAAC;IACvE,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,SAAS,CAAC;QACR,OAAO;QACP,KAAK;QACL,cAAc,EAAE,mBAAmB;QACnC,eAAe;QACf,SAAS;QACT,SAAS,EAAE,SAAS,CAAC,sBAAsB,CAAC;QAC5C,GAAI,IAAyC;KAC9C,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,8BAA8B,EAC9B,uLAAuL,EACvL;IACE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;IAC9C,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,qEAAqE,CAAC;IAClF,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,kDAAkD,CAAC;IAC/D,oBAAoB,EAAE,CAAC;SACpB,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,qEAAqE,CAAC;IAClF,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,sEAAsE,CAAC;IACnF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yCAAyC,CAAC;CAChF,EACD,KAAK,EAAE,IAA6B,EAAE,EAAE;IACtC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,8BAA8B,CAAC,CAAC;IAC/E,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,gBAAgB,CAAC;QACf,OAAO;QACP,cAAc,EAAE,mBAAmB;QACnC,QAAQ,EAAE,gBAAgB;QAC1B,SAAS;QACT,GAAI,IAAgD;KACrD,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,oBAAoB,EACpB,sQAAsQ,EACtQ;IACE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IACxE,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CACP,6EAA6E,CAC9E;CACJ,EACD,KAAK,EAAE,IAA6B,EAAE,EAAE;IACtC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,oBAAoB,CAAC,CAAC;IACrE,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,QAAQ,CAAC;QACP,OAAO;QACP,cAAc,EAAE,mBAAmB;QACnC,WAAW,EAAE,iBAAiB;QAC9B,SAAS;QACT,GAAI,IAAwC;KAC7C,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,0BAA0B,EAC1B,+VAA+V,EAC/V;IACE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACpF,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CAAC,qDAAqD,CAAC;IAClE,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,6EAA6E,CAC9E;IACH,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sDAAsD,CAAC;CACnF,EACD,KAAK,EAAE,IAA6B,EAAE,EAAE;IACtC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,0BAA0B,CAAC,CAAC;IAC3E,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,aAAa,CAAC;QACZ,OAAO;QACP,cAAc,EAAE,kBAAkB;QAClC,SAAS;QACT,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,GAAI,IAA6C;KAClD,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,SAAS,CACP,MAAM,EACN,iCAAiC,EACjC,+PAA+P,EAC/P;IACE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACtF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;IAC/E,gBAAgB,EAAE,CAAC;SAChB,MAAM,EAAE;SACR,QAAQ,CAAC,mEAAmE,CAAC;IAChF,KAAK,EAAE,CAAC;SACL,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;KAC1D,CAAC,CACH;SACA,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,2BAA2B,CAAC;CACzC,EACD,KAAK,EAAE,IAA6B,EAAE,EAAE;IACtC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC,iCAAiC,CAAC,CAAC;IAClF,OAAO,WAAW,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,mBAAmB,CAAC;QAClB,OAAO;QACP,KAAK;QACL,SAAS;QACT,SAAS,EAAE,SAAS,CAAC,iCAAiC,CAAC;QACvD,GAAI,IAAmD;KACxD,CAAC,CACH,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;AAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAEhC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;IAC/B,MAAM,WAAW,EAAE,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/inventory/mcp/dist/lib/forecast.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Task 2448 — demand forecast.
+ *
+ * A trailing moving average, deliberately: it is the smallest method that is
+ * defensible and testable with plain numbers. It lags a trend and flattens a
+ * seasonal peak; replacing it is Task 2449, and because no forecast is ever
+ * stored, that replacement needs no migration.
+ */
+/**
+ * Mean of the trailing `window` periods.
+ *
+ * A history shorter than the window averages what exists rather than padding
+ * with zeros: padding would read a new product's short history as a collapse
+ * in demand.
+ *
+ * @param quantities units sold per period, oldest first
+ * @param window how many trailing periods to average, at least 1
+ */
+export declare function movingAverage(quantities: number[], window: number): number;
+//# sourceMappingURL=forecast.d.ts.map

package/payload/platform/plugins/inventory/mcp/dist/lib/forecast.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forecast.d.ts","sourceRoot":"","sources":["../../src/lib/forecast.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAU1E"}

package/payload/platform/plugins/inventory/mcp/dist/lib/forecast.js

@@ -0,0 +1,29 @@
+/**
+ * Task 2448 — demand forecast.
+ *
+ * A trailing moving average, deliberately: it is the smallest method that is
+ * defensible and testable with plain numbers. It lags a trend and flattens a
+ * seasonal peak; replacing it is Task 2449, and because no forecast is ever
+ * stored, that replacement needs no migration.
+ */
+/**
+ * Mean of the trailing `window` periods.
+ *
+ * A history shorter than the window averages what exists rather than padding
+ * with zeros: padding would read a new product's short history as a collapse
+ * in demand.
+ *
+ * @param quantities units sold per period, oldest first
+ * @param window how many trailing periods to average, at least 1
+ */
+export function movingAverage(quantities, window) {
+    if (!Number.isFinite(window) || window < 1) {
+        throw new Error(`[inventory] movingAverage: window must be at least 1, got ${window}`);
+    }
+    if (quantities.length === 0)
+        return 0;
+    const slice = quantities.slice(-Math.floor(window));
+    const total = slice.reduce((sum, n) => sum + n, 0);
+    return total / slice.length;
+}
+//# sourceMappingURL=forecast.js.map

package/payload/platform/plugins/inventory/mcp/dist/lib/forecast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forecast.js","sourceRoot":"","sources":["../../src/lib/forecast.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,UAAoB,EAAE,MAAc;IAChE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,6DAA6D,MAAM,EAAE,CACtE,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;AAC9B,CAAC"}

package/payload/platform/plugins/inventory/mcp/dist/lib/neo4j.d.ts

@@ -0,0 +1,5 @@
+import { Driver, Session } from "neo4j-driver";
+export declare function getDriver(): Driver;
+export declare function getSession(): Session;
+export declare function closeDriver(): Promise<void>;
+//# sourceMappingURL=neo4j.d.ts.map

package/payload/platform/plugins/inventory/mcp/dist/lib/neo4j.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"neo4j.d.ts","sourceRoot":"","sources":["../../src/lib/neo4j.ts"],"names":[],"mappings":"AAAA,OAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAuBtD,wBAAgB,SAAS,IAAI,MAAM,CAgBlC;AAED,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAKjD"}

package/payload/platform/plugins/inventory/mcp/dist/lib/neo4j.js

@@ -0,0 +1,40 @@
+import neo4j from "neo4j-driver";
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+let driver = null;
+function readPassword() {
+    if (process.env.NEO4J_PASSWORD)
+        return process.env.NEO4J_PASSWORD;
+    const passwordFile = resolve(process.env.PLATFORM_ROOT ?? resolve(import.meta.dirname, "../../../.."), "config/.neo4j-password");
+    try {
+        return readFileSync(passwordFile, "utf-8").trim();
+    }
+    catch {
+        throw new Error(`Neo4j password not found. Expected at ${passwordFile} or in NEO4J_PASSWORD env var.`);
+    }
+}
+export function getDriver() {
+    if (!driver) {
+        // NEO4J_URI must be explicit. A silent default to :7687 was the vector for
+        // orphan data in one brand's database written by another brand's install.
+        const uri = process.env.NEO4J_URI;
+        if (!uri) {
+            throw new Error("[inventory] NEO4J_URI unset — refusing to default to bolt://localhost:7687");
+        }
+        const user = process.env.NEO4J_USER ?? "neo4j";
+        const password = readPassword();
+        console.error(`[inventory] resolved neo4j_uri=${uri}`);
+        driver = neo4j.driver(uri, neo4j.auth.basic(user, password));
+    }
+    return driver;
+}
+export function getSession() {
+    return getDriver().session();
+}
+export async function closeDriver() {
+    if (driver) {
+        await driver.close();
+        driver = null;
+    }
+}
+//# sourceMappingURL=neo4j.js.map

package/payload/platform/plugins/inventory/mcp/dist/lib/neo4j.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"neo4j.js","sourceRoot":"","sources":["../../src/lib/neo4j.ts"],"names":[],"mappings":"AAAA,OAAO,KAA0B,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,IAAI,MAAM,GAAkB,IAAI,CAAC;AAEjC,SAAS,YAAY;IACnB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAElE,MAAM,YAAY,GAAG,OAAO,CAC1B,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EACxE,wBAAwB,CACzB,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,yCAAyC,YAAY,gCAAgC,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,2EAA2E;QAC3E,0EAA0E;QAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC;QAC/C,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,kCAAkC,GAAG,EAAE,CAAC,CAAC;QACvD,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}

package/payload/platform/plugins/inventory/mcp/dist/lib/read.d.ts

@@ -0,0 +1,28 @@
+import type { Session } from "neo4j-driver";
+import type { PlanCandidate } from "./types.js";
+/** Everything the plan needs for one location, in one query. OPTIONAL MATCH
+ *  throughout rather than MATCH: a product missing its policy or supplier
+ *  terms must still come back, as a skipped line naming what is missing. A
+ *  plain MATCH would drop it and the plan would look complete while silently
+ *  omitting exactly the products that need operator attention. */
+export declare function readPlanCandidates(session: Session, accountId: string, location: string): Promise<PlanCandidate[]>;
+/** Resolves a SKU to a :Product element id on this account. Null when absent
+ *  or when the SKU is ambiguous — two products sharing a SKU is a data fault
+ *  the operator must fix, not something to guess past. */
+export declare function resolveProductBySku(session: Session, accountId: string, sku: string): Promise<string | null>;
+/** Units sold per period for one product at one location, oldest first. */
+export declare function readDemandHistory(session: Session, accountId: string, productNodeId: string, location: string): Promise<number[]>;
+export interface SupplierTerms {
+    leadTimeDays: number;
+    minimumOrderQuantity: number;
+    orderMultiple: number;
+    unitCost: number;
+}
+/** Sets the commercial terms on an existing SUPPLIED_BY edge. Returns false
+ *  when no such edge exists: the edge is the operator's assertion that this
+ *  supplier supplies this product, and creating it here would let a typo
+ *  invent a supply relationship. */
+export declare function setSupplierTerms(session: Session, accountId: string, productNodeId: string, supplierNodeId: string, terms: SupplierTerms): Promise<boolean>;
+/** Confirms a :StoreLocation element id exists on this account. */
+export declare function resolveLocation(session: Session, accountId: string, nodeId: string): Promise<boolean>;
+//# sourceMappingURL=read.d.ts.map

package/payload/platform/plugins/inventory/mcp/dist/lib/read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read.d.ts","sourceRoot":"","sources":["../../src/lib/read.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAUhD;;;;kEAIkE;AAClE,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,aAAa,EAAE,CAAC,CAwC1B;AAED;;0DAE0D;AAC1D,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CASxB;AAED,2EAA2E;AAC3E,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,EAAE,CAAC,CAWnB;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;oCAGoC;AACpC,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,OAAO,CAAC,CAalB;AAED,mEAAmE;AACnE,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CASlB"}