@servicelabsco/slabs-access-manager 1.0.64 → 1.0.67

package/dist/mcp/http/prm.controller.d.ts

@@ -6,5 +6,13 @@ export declare class PrmController {
         bearer_methods_supported: string[];
         resource_documentation: string;
     };
+    protectedResourceMetadataSuffixed(): {
+        resource: string;
+        authorization_servers: string[];
+        scopes_supported: string[];
+        bearer_methods_supported: string[];
+        resource_documentation: string;
+    };
+    private document;
     private baseUrl;
 }

package/dist/mcp/http/prm.controller.js

@@ -13,6 +13,12 @@ exports.PrmController = void 0;
 const common_1 = require("@nestjs/common");
 let PrmController = class PrmController {
     protectedResourceMetadata() {
+        return this.document();
+    }
+    protectedResourceMetadataSuffixed() {
+        return this.document();
+    }
+    document() {
         const resource = process.env.MCP_CANONICAL_URI || `${this.baseUrl()}/mcp`;
         const authorizationServer = process.env.MCP_AUTHORIZATION_SERVER || process.env.SERVER_URL || this.baseUrl();
         const scopes = (process.env.MCP_SCOPES_SUPPORTED || 'mcp,reporting:read')
@@ -39,6 +45,13 @@ __decorate([
     __metadata("design:paramtypes", []),
     __metadata("design:returntype", void 0)
 ], PrmController.prototype, "protectedResourceMetadata", null);
+__decorate([
+    (0, common_1.Get)('oauth-protected-resource/mcp'),
+    (0, common_1.Header)('Cache-Control', 'public, max-age=3600'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", void 0)
+], PrmController.prototype, "protectedResourceMetadataSuffixed", null);
 exports.PrmController = PrmController = __decorate([
     (0, common_1.Controller)('.well-known')
 ], PrmController);

package/dist/mcp/http/prm.controller.js.map

@@ -1 +1 @@
-{"version":3,"file":"prm.controller.js","sourceRoot":"","sources":["../../../src/mcp/http/prm.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAyD;AAOlD,IAAM,aAAa,GAAnB,MAAM,aAAa;IAGtB,yBAAyB;QACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;QAC1E,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7G,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,oBAAoB,CAAC;aACpE,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;QAErB,OAAO;YACH,QAAQ;YACR,qBAAqB,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChE,gBAAgB,EAAE,MAAM;YACxB,wBAAwB,EAAE,CAAC,QAAQ,CAAC;YACpC,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,oCAAoC;SACzG,CAAC;IACN,CAAC;IAEO,OAAO;QACX,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,oBAAoB,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjH,CAAC;CACJ,CAAA;AAvBY,sCAAa;AAGtB;IAFC,IAAA,YAAG,EAAC,0BAA0B,CAAC;IAC/B,IAAA,eAAM,EAAC,eAAe,EAAE,sBAAsB,CAAC;;;;8DAgB/C;wBAlBQ,aAAa;IADzB,IAAA,mBAAU,EAAC,aAAa,CAAC;GACb,aAAa,CAuBzB"}
+{"version":3,"file":"prm.controller.js","sourceRoot":"","sources":["../../../src/mcp/http/prm.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAAyD;AAUlD,IAAM,aAAa,GAAnB,MAAM,aAAa;IAGtB,yBAAyB;QACrB,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC3B,CAAC;IAID,iCAAiC;QAC7B,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC3B,CAAC;IAEO,QAAQ;QACZ,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;QAC1E,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7G,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,oBAAoB,CAAC;aACpE,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;QAErB,OAAO;YACH,QAAQ;YACR,qBAAqB,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChE,gBAAgB,EAAE,MAAM;YACxB,wBAAwB,EAAE,CAAC,QAAQ,CAAC;YACpC,sBAAsB,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,oCAAoC;SACzG,CAAC;IACN,CAAC;IAEO,OAAO;QACX,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,oBAAoB,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjH,CAAC;CACJ,CAAA;AAjCY,sCAAa;AAGtB;IAFC,IAAA,YAAG,EAAC,0BAA0B,CAAC;IAC/B,IAAA,eAAM,EAAC,eAAe,EAAE,sBAAsB,CAAC;;;;8DAG/C;AAID;IAFC,IAAA,YAAG,EAAC,8BAA8B,CAAC;IACnC,IAAA,eAAM,EAAC,eAAe,EAAE,sBAAsB,CAAC;;;;sEAG/C;wBAXQ,aAAa;IADzB,IAAA,mBAAU,EAAC,aAAa,CAAC;GACb,aAAa,CAiCzB"}

package/dist/mcp/http/unauthorized.mcp.response.d.ts

@@ -1,6 +1,7 @@
 import { Response } from 'express';
 export declare class UnauthorizedMcpResponse {
     static error(res: Response, status: number, code: number, message: string): void;
+    static resourceMetadataUrl(): string;
     static challenge(): string;
     static unauthorized(res: Response, message: string): void;
     static internal(res: Response, message: string): void;

package/dist/mcp/http/unauthorized.mcp.response.js

@@ -13,11 +13,14 @@ class UnauthorizedMcpResponse {
             id: null,
         });
     }
-    static challenge() {
+    static resourceMetadataUrl() {
         const resource = process.env.MCP_CANONICAL_URI || `${(process.env.SERVER_URL || 'http://127.0.0.1:4000').replace(/\/+$/, '')}/mcp`;
-        const metadataUrl = `${resource.replace(/\/mcp\/?$/, '')}/.well-known/oauth-protected-resource`;
+        const origin = resource.replace(/\/mcp\/?$/, '');
+        return `${origin}/.well-known/oauth-protected-resource/mcp`;
+    }
+    static challenge() {
         const scope = process.env.MCP_SCOPES_SUPPORTED?.split(',')[0]?.trim() || 'mcp';
-        return `Bearer resource_metadata="${metadataUrl}", scope="${scope}"`;
+        return `Bearer resource_metadata="${UnauthorizedMcpResponse.resourceMetadataUrl()}", scope="${scope}"`;
     }
     static unauthorized(res, message) {
         if (!res.headersSent) {

package/dist/mcp/http/unauthorized.mcp.response.js.map

@@ -1 +1 @@
-{"version":3,"file":"unauthorized.mcp.response.js","sourceRoot":"","sources":["../../../src/mcp/http/unauthorized.mcp.response.ts"],"names":[],"mappings":";;;AAGA,MAAM,oBAAoB,GAAG,CAAC,KAAK,CAAC;AAGpC,MAAM,sBAAsB,GAAG,CAAC,KAAK,CAAC;AAKtC,MAAa,uBAAuB;IAKhC,MAAM,CAAC,KAAK,CAAC,GAAa,EAAE,MAAc,EAAE,IAAY,EAAE,OAAe;QACrE,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO;QAE5B,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YACpB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YACxB,EAAE,EAAE,IAAI;SACX,CAAC,CAAC;IACP,CAAC;IAKD,MAAM,CAAC,SAAS;QACZ,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,uBAAuB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC;QACnI,MAAM,WAAW,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,uCAAuC,CAAC;QAChG,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC;QAE/E,OAAO,6BAA6B,WAAW,aAAa,KAAK,GAAG,CAAC;IACzE,CAAC;IAKD,MAAM,CAAC,YAAY,CAAC,GAAa,EAAE,OAAe;QAC9C,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACnB,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,uBAAuB,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAKD,MAAM,CAAC,QAAQ,CAAC,GAAa,EAAE,OAAe;QAC1C,uBAAuB,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;CACJ;AA1CD,0DA0CC"}
+{"version":3,"file":"unauthorized.mcp.response.js","sourceRoot":"","sources":["../../../src/mcp/http/unauthorized.mcp.response.ts"],"names":[],"mappings":";;;AAGA,MAAM,oBAAoB,GAAG,CAAC,KAAK,CAAC;AAGpC,MAAM,sBAAsB,GAAG,CAAC,KAAK,CAAC;AAKtC,MAAa,uBAAuB;IAKhC,MAAM,CAAC,KAAK,CAAC,GAAa,EAAE,MAAc,EAAE,IAAY,EAAE,OAAe;QACrE,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO;QAE5B,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YACpB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;YACxB,EAAE,EAAE,IAAI;SACX,CAAC,CAAC;IACP,CAAC;IAMD,MAAM,CAAC,mBAAmB;QACtB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,uBAAuB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC;QACnI,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACjD,OAAO,GAAG,MAAM,2CAA2C,CAAC;IAChE,CAAC;IAKD,MAAM,CAAC,SAAS;QACZ,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC;QAC/E,OAAO,6BAA6B,uBAAuB,CAAC,mBAAmB,EAAE,aAAa,KAAK,GAAG,CAAC;IAC3G,CAAC;IAKD,MAAM,CAAC,YAAY,CAAC,GAAa,EAAE,OAAe;QAC9C,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACnB,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,uBAAuB,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,uBAAuB,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAKD,MAAM,CAAC,QAAQ,CAAC,GAAa,EAAE,OAAe;QAC1C,uBAAuB,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;CACJ;AAjDD,0DAiDC"}

package/dist/mcp/index.d.ts

@@ -1,8 +1,10 @@
 export * from './admin';
 export * from './auth';
+export * from './catalog';
 export * from './client';
 export * from './http';
 export * from './interfaces';
 export * from './tools';
+export * from './mcp.constants';
 export * from './mcp.module';
 export * from './slabs.mcp.server';

package/dist/mcp/index.js

@@ -16,10 +16,12 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./admin"), exports);
 __exportStar(require("./auth"), exports);
+__exportStar(require("./catalog"), exports);
 __exportStar(require("./client"), exports);
 __exportStar(require("./http"), exports);
 __exportStar(require("./interfaces"), exports);
 __exportStar(require("./tools"), exports);
+__exportStar(require("./mcp.constants"), exports);
 __exportStar(require("./mcp.module"), exports);
 __exportStar(require("./slabs.mcp.server"), exports);
 //# sourceMappingURL=index.js.map

package/dist/mcp/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB;AAAA,yCAAuB;AAAA,2CAAyB;AAAA,yCAAuB;AAAA,+CAA6B;AAAA,0CAAwB;AAAA,+CAA6B;AAAA,qDAAkC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB;AAAA,yCAAuB;AAAA,4CAA0B;AAAA,2CAAyB;AAAA,yCAAuB;AAAA,+CAA6B;AAAA,0CAAwB;AAAA,kDAAgC;AAAA,+CAA6B;AAAA,qDAAkC"}

package/dist/mcp/interfaces/mcp.tool.interface.d.ts

@@ -1,5 +1,6 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 export interface McpToolInterface {
     readonly name: string;
+    readonly requiredScopes?: string[];
     register(server: McpServer): void;
 }

package/dist/mcp/interfaces/slabs.api.request.interface.d.ts

@@ -4,4 +4,5 @@ export interface SlabsApiRequestInterface {
     path: string;
     body?: unknown;
     auth?: ApiAuthInterface;
+    headers?: Record<string, string>;
 }

package/dist/mcp/mcp.constants.d.ts

@@ -0,0 +1,13 @@
+import { SlabsApiClient } from './client/slabs.api.client';
+import { McpToolInterface } from './interfaces/mcp.tool.interface';
+export declare const MCP_TOOL_REGISTRIES = "MCP_TOOL_REGISTRIES";
+export type McpToolRegistryFactory = (client: SlabsApiClient) => McpToolInterface[];
+export interface McpModuleOptions {
+    registries?: McpToolRegistryFactory[];
+}
+export declare function getMcpServerName(): string;
+export declare function mcpToolNameMax(serverName?: string): number;
+export declare function getHostMcpRegistries(): McpToolRegistryFactory[];
+export declare function setHostMcpRegistries(factories: McpToolRegistryFactory[]): void;
+export declare function provisionMcpServer(options?: McpModuleOptions): void;
+export declare function assertPublicMcpBootConfig(): void;

package/dist/mcp/mcp.constants.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MCP_TOOL_REGISTRIES = void 0;
+exports.getMcpServerName = getMcpServerName;
+exports.mcpToolNameMax = mcpToolNameMax;
+exports.getHostMcpRegistries = getHostMcpRegistries;
+exports.setHostMcpRegistries = setHostMcpRegistries;
+exports.provisionMcpServer = provisionMcpServer;
+exports.assertPublicMcpBootConfig = assertPublicMcpBootConfig;
+exports.MCP_TOOL_REGISTRIES = 'MCP_TOOL_REGISTRIES';
+const SERVER_NAME = /^[a-z0-9][a-z0-9-]{0,23}$/;
+const DEFAULT_SERVER_NAME = 'slabs-access-manager';
+const hostRegistries = [];
+function assertServerName(name) {
+    if (!SERVER_NAME.test(name)) {
+        throw new Error(`MCP_SERVER_NAME '${name}' is invalid (use lowercase alphanumeric + hyphen, max 24 chars, e.g. fn-expense).`);
+    }
+    return name;
+}
+function getMcpServerName() {
+    return assertServerName(process.env.MCP_SERVER_NAME?.trim() || DEFAULT_SERVER_NAME);
+}
+function mcpToolNameMax(serverName = getMcpServerName()) {
+    const prefixLen = `mcp__${serverName}__`.length;
+    return Math.max(1, 64 - prefixLen);
+}
+function getHostMcpRegistries() {
+    return hostRegistries;
+}
+function setHostMcpRegistries(factories) {
+    hostRegistries.splice(0, hostRegistries.length, ...(factories || []));
+}
+function provisionMcpServer(options = {}) {
+    setHostMcpRegistries(options.registries ?? []);
+}
+function assertPublicMcpBootConfig() {
+    const canonical = process.env.MCP_CANONICAL_URI?.trim();
+    const name = process.env.MCP_SERVER_NAME?.trim();
+    if (canonical && !name) {
+        throw new Error('MCP_CANONICAL_URI is set but MCP_SERVER_NAME is missing. Public connector hosts must set MCP_SERVER_NAME (e.g. fn-expense).');
+    }
+}
+//# sourceMappingURL=mcp.constants.js.map

package/dist/mcp/mcp.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.constants.js","sourceRoot":"","sources":["../../src/mcp/mcp.constants.ts"],"names":[],"mappings":";;;AA2BA,4CAEC;AAGD,wCAGC;AAGD,oDAEC;AAED,oDAEC;AAED,gDAEC;AAMD,8DAQC;AA1DY,QAAA,mBAAmB,GAAG,qBAAqB,CAAC;AAUzD,MAAM,WAAW,GAAG,2BAA2B,CAAC;AAChD,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AAEnD,MAAM,cAAc,GAA6B,EAAE,CAAC;AAEpD,SAAS,gBAAgB,CAAC,IAAY;IAClC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,oFAAoF,CAAC,CAAC;IAClI,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAGD,SAAgB,gBAAgB;IAC5B,OAAO,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,mBAAmB,CAAC,CAAC;AACxF,CAAC;AAGD,SAAgB,cAAc,CAAC,UAAU,GAAG,gBAAgB,EAAE;IAC1D,MAAM,SAAS,GAAG,QAAQ,UAAU,IAAI,CAAC,MAAM,CAAC;IAChD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,SAAS,CAAC,CAAC;AACvC,CAAC;AAGD,SAAgB,oBAAoB;IAChC,OAAO,cAAc,CAAC;AAC1B,CAAC;AAED,SAAgB,oBAAoB,CAAC,SAAmC;IACpE,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAgB,kBAAkB,CAAC,UAA4B,EAAE;IAC7D,oBAAoB,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AAMD,SAAgB,yBAAyB;IACrC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACX,6HAA6H,CAChI,CAAC;IACN,CAAC;AACL,CAAC"}

package/dist/mcp/mcp.module.d.ts

@@ -1,2 +1,11 @@
+import { DynamicModule } from '@nestjs/common';
+import { McpModuleOptions } from './mcp.constants';
 export declare class McpModule {
+    static forRoot(options?: McpModuleOptions): DynamicModule;
 }
+export { assertValidCatalog } from './catalog/assert.valid.catalog';
+export { assertPublicMcpBootConfig, MCP_TOOL_REGISTRIES, getHostMcpRegistries, getMcpServerName, mcpToolNameMax, provisionMcpServer, setHostMcpRegistries } from './mcp.constants';
+export type { McpModuleOptions, McpToolRegistryFactory } from './mcp.constants';
+export { ApToolRegistry } from './tools/ap.tool.registry';
+export { ArToolRegistry } from './tools/ar.tool.registry';
+export { ToolRegistry } from './tools/tool.registry';

package/dist/mcp/mcp.module.js

@@ -5,18 +5,44 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
+var McpModule_1;
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.McpModule = void 0;
+exports.ToolRegistry = exports.ArToolRegistry = exports.ApToolRegistry = exports.setHostMcpRegistries = exports.provisionMcpServer = exports.mcpToolNameMax = exports.getMcpServerName = exports.getHostMcpRegistries = exports.MCP_TOOL_REGISTRIES = exports.assertPublicMcpBootConfig = exports.assertValidCatalog = exports.McpModule = void 0;
 const common_1 = require("@nestjs/common");
 const development_module_1 = require("../development/development.module");
 const mcp_http_module_1 = require("./http/mcp.http.module");
-let McpModule = class McpModule {
+const mcp_constants_1 = require("./mcp.constants");
+let McpModule = McpModule_1 = class McpModule {
+    static forRoot(options = {}) {
+        (0, mcp_constants_1.provisionMcpServer)(options);
+        return {
+            module: McpModule_1,
+            imports: [mcp_http_module_1.McpHttpModule, development_module_1.DevelopmentModule],
+            exports: [mcp_http_module_1.McpHttpModule, development_module_1.DevelopmentModule],
+        };
+    }
 };
 exports.McpModule = McpModule;
-exports.McpModule = McpModule = __decorate([
+exports.McpModule = McpModule = McpModule_1 = __decorate([
     (0, common_1.Module)({
         imports: [mcp_http_module_1.McpHttpModule, development_module_1.DevelopmentModule],
         exports: [mcp_http_module_1.McpHttpModule, development_module_1.DevelopmentModule],
     })
 ], McpModule);
+var assert_valid_catalog_1 = require("./catalog/assert.valid.catalog");
+Object.defineProperty(exports, "assertValidCatalog", { enumerable: true, get: function () { return assert_valid_catalog_1.assertValidCatalog; } });
+var mcp_constants_2 = require("./mcp.constants");
+Object.defineProperty(exports, "assertPublicMcpBootConfig", { enumerable: true, get: function () { return mcp_constants_2.assertPublicMcpBootConfig; } });
+Object.defineProperty(exports, "MCP_TOOL_REGISTRIES", { enumerable: true, get: function () { return mcp_constants_2.MCP_TOOL_REGISTRIES; } });
+Object.defineProperty(exports, "getHostMcpRegistries", { enumerable: true, get: function () { return mcp_constants_2.getHostMcpRegistries; } });
+Object.defineProperty(exports, "getMcpServerName", { enumerable: true, get: function () { return mcp_constants_2.getMcpServerName; } });
+Object.defineProperty(exports, "mcpToolNameMax", { enumerable: true, get: function () { return mcp_constants_2.mcpToolNameMax; } });
+Object.defineProperty(exports, "provisionMcpServer", { enumerable: true, get: function () { return mcp_constants_2.provisionMcpServer; } });
+Object.defineProperty(exports, "setHostMcpRegistries", { enumerable: true, get: function () { return mcp_constants_2.setHostMcpRegistries; } });
+var ap_tool_registry_1 = require("./tools/ap.tool.registry");
+Object.defineProperty(exports, "ApToolRegistry", { enumerable: true, get: function () { return ap_tool_registry_1.ApToolRegistry; } });
+var ar_tool_registry_1 = require("./tools/ar.tool.registry");
+Object.defineProperty(exports, "ArToolRegistry", { enumerable: true, get: function () { return ar_tool_registry_1.ArToolRegistry; } });
+var tool_registry_1 = require("./tools/tool.registry");
+Object.defineProperty(exports, "ToolRegistry", { enumerable: true, get: function () { return tool_registry_1.ToolRegistry; } });
 //# sourceMappingURL=mcp.module.js.map

package/dist/mcp/mcp.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.module.js","sourceRoot":"","sources":["../../src/mcp/mcp.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,2CAAwC;AACxC,0EAAsE;AACtE,4DAAuD;AAkBhD,IAAM,SAAS,GAAf,MAAM,SAAS;CAAG,CAAA;AAAZ,8BAAS;oBAAT,SAAS;IAJrB,IAAA,eAAM,EAAC;QACJ,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;QAC3C,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;KAC9C,CAAC;GACW,SAAS,CAAG"}
+{"version":3,"file":"mcp.module.js","sourceRoot":"","sources":["../../src/mcp/mcp.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AACvD,0EAAsE;AACtE,4DAAuD;AACvD,mDAAuE;AA0BhE,IAAM,SAAS,iBAAf,MAAM,SAAS;IAClB,MAAM,CAAC,OAAO,CAAC,UAA4B,EAAE;QACzC,IAAA,kCAAkB,EAAC,OAAO,CAAC,CAAC;QAC5B,OAAO;YACH,MAAM,EAAE,WAAS;YACjB,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;YAC3C,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;SAC9C,CAAC;IACN,CAAC;CACJ,CAAA;AATY,8BAAS;oBAAT,SAAS;IAJrB,IAAA,eAAM,EAAC;QACJ,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;QAC3C,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;KAC9C,CAAC;GACW,SAAS,CASrB;AAED,uEAAoE;AAA3D,0HAAA,kBAAkB,OAAA;AAC3B,iDAAmL;AAA1K,0HAAA,yBAAyB,OAAA;AAAE,oHAAA,mBAAmB,OAAA;AAAE,qHAAA,oBAAoB,OAAA;AAAE,iHAAA,gBAAgB,OAAA;AAAE,+GAAA,cAAc,OAAA;AAAE,mHAAA,kBAAkB,OAAA;AAAE,qHAAA,oBAAoB,OAAA;AAEzJ,6DAA0D;AAAjD,kHAAA,cAAc,OAAA;AACvB,6DAA0D;AAAjD,kHAAA,cAAc,OAAA;AACvB,uDAAqD;AAA5C,6GAAA,YAAY,OAAA"}

package/dist/mcp/tools/ap.tool.registry.d.ts

@@ -0,0 +1,7 @@
+import { SlabsApiClient } from '../client/slabs.api.client';
+import { McpToolInterface } from '../interfaces/mcp.tool.interface';
+export declare class ApToolRegistry {
+    private readonly client;
+    constructor(client: SlabsApiClient);
+    tools(): McpToolInterface[];
+}

package/dist/mcp/tools/ap.tool.registry.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApToolRegistry = void 0;
+const zod_1 = require("zod");
+const catalog_slugs_1 = require("./catalog.slugs");
+const mcp_tool_1 = require("./mcp.tool");
+const listSchema = {
+    search: zod_1.z.string().optional().describe('Free-text search.'),
+    filter_query: zod_1.z.string().optional().describe('Standard listing filter_query.'),
+    limit: zod_1.z.number().int().min(1).max(500).optional().describe('Page size (default 50).'),
+    offset: zod_1.z.number().int().min(0).optional().describe('Rows to skip (default 0).'),
+    date: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional().describe('Portal date filter.'),
+};
+const getSchema = {
+    id: zod_1.z.number().int().positive().describe('Row id to fetch.'),
+};
+class ListingListProxyTool extends mcp_tool_1.McpTool {
+    constructor(client, name, title, description, slugFn) {
+        super(client);
+        this.name = name;
+        this.title = title;
+        this.description = description;
+        this.slugFn = slugFn;
+        this.readOnly = true;
+        this.requiredScopes = ['reporting:read'];
+        this.inputSchema = listSchema;
+    }
+    execute(args) {
+        return this.run(() => this.client.request({
+            method: 'POST',
+            path: `v1/b/listing-page/${encodeURIComponent(this.slugFn())}/query`,
+            body: args,
+        }));
+    }
+}
+class ListingGetProxyTool extends mcp_tool_1.McpTool {
+    constructor(client, name, title, description, slugFn) {
+        super(client);
+        this.name = name;
+        this.title = title;
+        this.description = description;
+        this.slugFn = slugFn;
+        this.readOnly = true;
+        this.requiredScopes = ['reporting:read'];
+        this.inputSchema = getSchema;
+    }
+    execute(args) {
+        return this.run(() => this.client.request({
+            method: 'POST',
+            path: `v1/b/listing-page/${encodeURIComponent(this.slugFn())}/query`,
+            body: { filter_query: `id = ${args.id}`, limit: 1, offset: 0 },
+        }));
+    }
+}
+class ApToolRegistry {
+    constructor(client) {
+        this.client = client;
+    }
+    tools() {
+        return [
+            new ListingListProxyTool(this.client, 'expenses_list', 'List expenses', 'List expenses for the connected business. Use for "what is pending my approval" on AP spend. Line tax math on expenses_get is governed by is_rate_exclusive. Returns { rows, total, limit, offset }.', catalog_slugs_1.CatalogSlugs.expenses),
+            new ListingGetProxyTool(this.client, 'expenses_get', 'Get expense', 'Fetch one expense by id, including line items. is_rate_exclusive governs line tax math. Preferred vendor is a detail field, not a party.', catalog_slugs_1.CatalogSlugs.expenses),
+            new ListingListProxyTool(this.client, 'advances_list', 'List advances', 'List employee advances. Each row exposes four distinct balance figures: outstanding_balance, settlement_balance, attachable_amount (bounded by confirmed payments, NOT the settlement headline), and pending_confirmation. Do not conflate them.', catalog_slugs_1.CatalogSlugs.advances),
+            new ListingGetProxyTool(this.client, 'advances_get', 'Get advance', 'Fetch one advance by id. Returns outstanding_balance, settlement_balance, attachable_amount (bounded by confirmed payments, not the settlement headline), and pending_confirmation as distinct fields.', catalog_slugs_1.CatalogSlugs.advances),
+            new ListingListProxyTool(this.client, 'purchase_requests_list', 'List purchase requests', 'List purchase requests. Two independent status scales: party_status (approval: On Hold/Rejected/Submitted/Approved) and lifecycle_status (Raised…Completed, 3070–3076). Both are filterable and returned. TO = billing business, FROM = requesting employee; preferred vendor is a detail field, not a party.', catalog_slugs_1.CatalogSlugs.purchaseRequests),
+            new ListingGetProxyTool(this.client, 'purchase_requests_get', 'Get purchase request', 'Fetch one purchase request by id with line items. party_status and lifecycle_status are independent. is_rate_exclusive governs line tax math. TO = billing business, FROM = requesting employee.', catalog_slugs_1.CatalogSlugs.purchaseRequests),
+        ];
+    }
+}
+exports.ApToolRegistry = ApToolRegistry;
+//# sourceMappingURL=ap.tool.registry.js.map

package/dist/mcp/tools/ap.tool.registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ap.tool.registry.js","sourceRoot":"","sources":["../../../src/mcp/tools/ap.tool.registry.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAIxB,mDAA+C;AAC/C,yCAAqC;AAErC,MAAM,UAAU,GAAG;IACf,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC;IAC3D,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAC9E,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC;IACtF,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAChF,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;CACrF,CAAC;AAEF,MAAM,SAAS,GAAG;IACd,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;CAC/D,CAAC;AAKF,MAAM,oBAAqB,SAAQ,kBAAkB;IAKjD,YACI,MAAsB,EACb,IAAY,EACZ,KAAa,EACb,WAAmB,EACX,MAAoB;QAErC,KAAK,CAAC,MAAM,CAAC,CAAC;QALL,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAAQ;QACb,gBAAW,GAAX,WAAW,CAAQ;QACX,WAAM,GAAN,MAAM,CAAc;QATtB,aAAQ,GAAG,IAAI,CAAC;QAC1B,mBAAc,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACpC,gBAAW,GAAG,UAAU,CAAC;IAUlC,CAAC;IAED,OAAO,CAAC,IAAe;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CACjB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAChB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ;YACpE,IAAI,EAAE,IAAI;SACb,CAAC,CACL,CAAC;IACN,CAAC;CACJ;AAED,MAAM,mBAAoB,SAAQ,kBAAiB;IAK/C,YACI,MAAsB,EACb,IAAY,EACZ,KAAa,EACb,WAAmB,EACX,MAAoB;QAErC,KAAK,CAAC,MAAM,CAAC,CAAC;QALL,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAAQ;QACb,gBAAW,GAAX,WAAW,CAAQ;QACX,WAAM,GAAN,MAAM,CAAc;QATtB,aAAQ,GAAG,IAAI,CAAC;QAC1B,mBAAc,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACpC,gBAAW,GAAG,SAAS,CAAC;IAUjC,CAAC;IAED,OAAO,CAAC,IAAc;QAClB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CACjB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAChB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ;YACpE,IAAI,EAAE,EAAE,YAAY,EAAE,QAAQ,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;SACjE,CAAC,CACL,CAAC;IACN,CAAC;CACJ;AAMD,MAAa,cAAc;IACvB,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK;QACD,OAAO;YACH,IAAI,oBAAoB,CACpB,IAAI,CAAC,MAAM,EACX,eAAe,EACf,eAAe,EACf,sMAAsM,EACtM,4BAAY,CAAC,QAAQ,CACxB;YACD,IAAI,mBAAmB,CACnB,IAAI,CAAC,MAAM,EACX,cAAc,EACd,aAAa,EACb,0IAA0I,EAC1I,4BAAY,CAAC,QAAQ,CACxB;YACD,IAAI,oBAAoB,CACpB,IAAI,CAAC,MAAM,EACX,eAAe,EACf,eAAe,EACf,kPAAkP,EAClP,4BAAY,CAAC,QAAQ,CACxB;YACD,IAAI,mBAAmB,CACnB,IAAI,CAAC,MAAM,EACX,cAAc,EACd,aAAa,EACb,wMAAwM,EACxM,4BAAY,CAAC,QAAQ,CACxB;YACD,IAAI,oBAAoB,CACpB,IAAI,CAAC,MAAM,EACX,wBAAwB,EACxB,wBAAwB,EACxB,+SAA+S,EAC/S,4BAAY,CAAC,gBAAgB,CAChC;YACD,IAAI,mBAAmB,CACnB,IAAI,CAAC,MAAM,EACX,uBAAuB,EACvB,sBAAsB,EACtB,kMAAkM,EAClM,4BAAY,CAAC,gBAAgB,CAChC;SACJ,CAAC;IACN,CAAC;CACJ;AAjDD,wCAiDC"}

package/dist/mcp/tools/ar.tool.registry.d.ts

@@ -0,0 +1,7 @@
+import { SlabsApiClient } from '../client/slabs.api.client';
+import { McpToolInterface } from '../interfaces/mcp.tool.interface';
+export declare class ArToolRegistry {
+    private readonly client;
+    constructor(client: SlabsApiClient);
+    tools(): McpToolInterface[];
+}

package/dist/mcp/tools/ar.tool.registry.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ArToolRegistry = void 0;
+const zod_1 = require("zod");
+const catalog_slugs_1 = require("./catalog.slugs");
+const mcp_tool_1 = require("./mcp.tool");
+const periodSchema = {
+    date: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional().describe('Portal date filter for the same period as the dashboard.'),
+    start_time: zod_1.z.string().optional(),
+    end_time: zod_1.z.string().optional(),
+};
+const listSchema = {
+    search: zod_1.z.string().optional(),
+    filter_query: zod_1.z.string().optional().describe('Filter by reconciliation state / gateway / channel / settlement dates / ageing / customer.'),
+    limit: zod_1.z.number().int().min(1).max(500).optional(),
+    offset: zod_1.z.number().int().min(0).optional(),
+    date: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
+};
+class ReportRunProxyTool extends mcp_tool_1.McpTool {
+    constructor(client, name, title, description, slugFn) {
+        super(client);
+        this.name = name;
+        this.title = title;
+        this.description = description;
+        this.slugFn = slugFn;
+        this.readOnly = true;
+        this.requiredScopes = ['reporting:read'];
+        this.inputSchema = periodSchema;
+    }
+    execute(args) {
+        return this.run(() => this.client.request({
+            method: 'POST',
+            path: `v1/b/reports/${encodeURIComponent(this.slugFn())}/run`,
+            body: args,
+        }));
+    }
+}
+class ListingListProxyTool extends mcp_tool_1.McpTool {
+    constructor(client, name, title, description, slugFn) {
+        super(client);
+        this.name = name;
+        this.title = title;
+        this.description = description;
+        this.slugFn = slugFn;
+        this.readOnly = true;
+        this.requiredScopes = ['reporting:read'];
+        this.inputSchema = listSchema;
+    }
+    execute(args) {
+        return this.run(() => this.client.request({
+            method: 'POST',
+            path: `v1/b/listing-page/${encodeURIComponent(this.slugFn())}/query`,
+            body: args,
+        }));
+    }
+}
+class ArToolRegistry {
+    constructor(client) {
+        this.client = client;
+    }
+    tools() {
+        return [
+            new ReportRunProxyTool(this.client, 'ar_dashboard_summary', 'AR dashboard summary', 'AR Portal (RECO) reconciliation summary for a period: total transactions; reconciled/excess/deficit/unknown payments (three-way OMS vs PG vs settlement); reconciled orders; refunds pending/processed; cash in transit. Not ARC collections.', catalog_slugs_1.CatalogSlugs.arDashboard),
+            new ListingListProxyTool(this.client, 'ar_transactions_list', 'AR transactions', 'Row-level AR (RECO) transactions by reconciliation state / gateway / channel / settlement dates, including MDR/prepaid charges where available. This is AR Portal data, not ARC receivables.', catalog_slugs_1.CatalogSlugs.arTransactions),
+            new ReportRunProxyTool(this.client, 'arc_collections_overview', 'ARC collections overview', 'ARC collections overview: receivables by invoice status, ageing buckets, DSO, promise-to-pay, period totals. This is ARC, not AR Portal reconciliation.', catalog_slugs_1.CatalogSlugs.arcCollections),
+            new ListingListProxyTool(this.client, 'arc_receivables_list', 'ARC receivables', 'Open ARC invoices by customer, ageing bucket, and due dates. Product/tenancy scoped to the caller. Not AR Portal RECO transactions.', catalog_slugs_1.CatalogSlugs.arcReceivables),
+        ];
+    }
+}
+exports.ArToolRegistry = ArToolRegistry;
+//# sourceMappingURL=ar.tool.registry.js.map

package/dist/mcp/tools/ar.tool.registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ar.tool.registry.js","sourceRoot":"","sources":["../../../src/mcp/tools/ar.tool.registry.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAIxB,mDAA+C;AAC/C,yCAAqC;AAErC,MAAM,YAAY,GAAG;IACjB,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IACvH,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC;AAEF,MAAM,UAAU,GAAG;IACf,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4FAA4F,CAAC;IAC1I,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC;AAKF,MAAM,kBAAmB,SAAQ,kBAAoB;IAKjD,YACI,MAAsB,EACb,IAAY,EACZ,KAAa,EACb,WAAmB,EACX,MAAoB;QAErC,KAAK,CAAC,MAAM,CAAC,CAAC;QALL,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAAQ;QACb,gBAAW,GAAX,WAAW,CAAQ;QACX,WAAM,GAAN,MAAM,CAAc;QATtB,aAAQ,GAAG,IAAI,CAAC;QAC1B,mBAAc,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACpC,gBAAW,GAAG,YAAY,CAAC;IAUpC,CAAC;IAED,OAAO,CAAC,IAAiB;QACrB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CACjB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAChB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM;YAC7D,IAAI,EAAE,IAAI;SACb,CAAC,CACL,CAAC;IACN,CAAC;CACJ;AAED,MAAM,oBAAqB,SAAQ,kBAAkB;IAKjD,YACI,MAAsB,EACb,IAAY,EACZ,KAAa,EACb,WAAmB,EACX,MAAoB;QAErC,KAAK,CAAC,MAAM,CAAC,CAAC;QALL,SAAI,GAAJ,IAAI,CAAQ;QACZ,UAAK,GAAL,KAAK,CAAQ;QACb,gBAAW,GAAX,WAAW,CAAQ;QACX,WAAM,GAAN,MAAM,CAAc;QATtB,aAAQ,GAAG,IAAI,CAAC;QAC1B,mBAAc,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACpC,gBAAW,GAAG,UAAU,CAAC;IAUlC,CAAC;IAED,OAAO,CAAC,IAAe;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CACjB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAChB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ;YACpE,IAAI,EAAE,IAAI;SACb,CAAC,CACL,CAAC;IACN,CAAC;CACJ;AAKD,MAAa,cAAc;IACvB,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK;QACD,OAAO;YACH,IAAI,kBAAkB,CAClB,IAAI,CAAC,MAAM,EACX,sBAAsB,EACtB,sBAAsB,EACtB,+OAA+O,EAC/O,4BAAY,CAAC,WAAW,CAC3B;YACD,IAAI,oBAAoB,CACpB,IAAI,CAAC,MAAM,EACX,sBAAsB,EACtB,iBAAiB,EACjB,8LAA8L,EAC9L,4BAAY,CAAC,cAAc,CAC9B;YACD,IAAI,kBAAkB,CAClB,IAAI,CAAC,MAAM,EACX,0BAA0B,EAC1B,0BAA0B,EAC1B,yJAAyJ,EACzJ,4BAAY,CAAC,cAAc,CAC9B;YACD,IAAI,oBAAoB,CACpB,IAAI,CAAC,MAAM,EACX,sBAAsB,EACtB,iBAAiB,EACjB,qIAAqI,EACrI,4BAAY,CAAC,cAAc,CAC9B;SACJ,CAAC;IACN,CAAC;CACJ;AAnCD,wCAmCC"}

package/dist/mcp/tools/catalog.slugs.d.ts

@@ -0,0 +1,10 @@
+export declare function catalogSlug(envKey: string, fallback: string): string;
+export declare const CatalogSlugs: {
+    expenses: () => string;
+    advances: () => string;
+    purchaseRequests: () => string;
+    arDashboard: () => string;
+    arTransactions: () => string;
+    arcCollections: () => string;
+    arcReceivables: () => string;
+};

package/dist/mcp/tools/catalog.slugs.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CatalogSlugs = void 0;
+exports.catalogSlug = catalogSlug;
+function catalogSlug(envKey, fallback) {
+    return (process.env[envKey] || fallback).trim();
+}
+exports.CatalogSlugs = {
+    expenses: () => catalogSlug('MCP_SLUG_EXPENSES', 'expenses'),
+    advances: () => catalogSlug('MCP_SLUG_ADVANCES', 'advances'),
+    purchaseRequests: () => catalogSlug('MCP_SLUG_PURCHASE_REQUESTS', 'purchase_requests'),
+    arDashboard: () => catalogSlug('MCP_SLUG_AR_DASHBOARD', 'ar.reconciled.payments.dashbaord.summary'),
+    arTransactions: () => catalogSlug('MCP_SLUG_AR_TRANSACTIONS', 'ar.transactions'),
+    arcCollections: () => catalogSlug('MCP_SLUG_ARC_COLLECTIONS', 'arc.collections.overview'),
+    arcReceivables: () => catalogSlug('MCP_SLUG_ARC_RECEIVABLES', 'arc.receivables'),
+};
+//# sourceMappingURL=catalog.slugs.js.map

package/dist/mcp/tools/catalog.slugs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.slugs.js","sourceRoot":"","sources":["../../../src/mcp/tools/catalog.slugs.ts"],"names":[],"mappings":";;;AACA,kCAEC;AAFD,SAAgB,WAAW,CAAC,MAAc,EAAE,QAAgB;IACxD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;AACpD,CAAC;AAEY,QAAA,YAAY,GAAG;IACxB,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,mBAAmB,EAAE,UAAU,CAAC;IAC5D,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,mBAAmB,EAAE,UAAU,CAAC;IAC5D,gBAAgB,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,4BAA4B,EAAE,mBAAmB,CAAC;IACtF,WAAW,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,uBAAuB,EAAE,0CAA0C,CAAC;IACnG,cAAc,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,0BAA0B,EAAE,iBAAiB,CAAC;IAChF,cAAc,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,0BAA0B,EAAE,0BAA0B,CAAC;IACzF,cAAc,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,0BAA0B,EAAE,iBAAiB,CAAC;CACnF,CAAC"}

package/dist/mcp/tools/delete.listing.preference.tool.d.ts

@@ -13,6 +13,7 @@ export declare class DeleteListingPreferenceTool extends McpTool<DeleteListingPr
         slug: z.ZodString;
         id: z.ZodNumber;
     };
+    readonly requiredScopes: string[];
     protected readonly destructive = true;
     execute(args: DeleteListingPreferenceInput): Promise<McpToolResultInterface>;
 }

package/dist/mcp/tools/delete.listing.preference.tool.js

@@ -13,8 +13,9 @@ class DeleteListingPreferenceTool extends mcp_tool_1.McpTool {
         this.name = 'delete_listing_preference';
         this.title = 'Delete listing preference';
         this.description = 'Soft-delete a listing preference by id. Only a preference owned by the calling API user can be deleted; ' +
-            "attempting to delete another owner's preference returns an access error.";
+            "attempting to delete another owner's preference returns an access error. Requires confirm: true. Requires the mcp scope.";
         this.inputSchema = inputSchema;
+        this.requiredScopes = ['mcp'];
         this.destructive = true;
     }
     execute(args) {

package/dist/mcp/tools/delete.listing.preference.tool.js.map

@@ -1 +1 @@
-{"version":3,"file":"delete.listing.preference.tool.js","sourceRoot":"","sources":["../../../src/mcp/tools/delete.listing.preference.tool.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,yCAAqC;AAErC,MAAM,WAAW,GAAG;IAChB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACzF,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;CAC9E,CAAC;AAQF,MAAa,2BAA4B,SAAQ,kBAAqC;IAAtF;;QACa,SAAI,GAAG,2BAA2B,CAAC;QACnC,UAAK,GAAG,2BAA2B,CAAC;QACpC,gBAAW,GAChB,0GAA0G;YAC1G,0EAA0E,CAAC;QACtE,gBAAW,GAAG,WAAW,CAAC;QAChB,gBAAW,GAAG,IAAI,CAAC;IAU1C,CAAC;IARG,OAAO,CAAC,IAAkC;QACtC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CACjB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAChB,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE;SACxE,CAAC,CACL,CAAC;IACN,CAAC;CACJ;AAjBD,kEAiBC"}
+{"version":3,"file":"delete.listing.preference.tool.js","sourceRoot":"","sources":["../../../src/mcp/tools/delete.listing.preference.tool.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,yCAAqC;AAErC,MAAM,WAAW,GAAG;IAChB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IACzF,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;CAC9E,CAAC;AAQF,MAAa,2BAA4B,SAAQ,kBAAqC;IAAtF;;QACa,SAAI,GAAG,2BAA2B,CAAC;QACnC,UAAK,GAAG,2BAA2B,CAAC;QACpC,gBAAW,GAChB,0GAA0G;YAC1G,0HAA0H,CAAC;QACtH,gBAAW,GAAG,WAAW,CAAC;QAC1B,mBAAc,GAAG,CAAC,KAAK,CAAC,CAAC;QACf,gBAAW,GAAG,IAAI,CAAC;IAU1C,CAAC;IARG,OAAO,CAAC,IAAkC;QACtC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CACjB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAChB,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE;SACxE,CAAC,CACL,CAAC;IACN,CAAC;CACJ;AAlBD,kEAkBC"}

package/dist/mcp/tools/index.d.ts

@@ -1,5 +1,13 @@
+export * from './ap.tool.registry';
+export * from './ar.tool.registry';
+export * from './catalog.slugs';
 export * from './delete.listing.preference.tool';
-export * from './get.listing.tool';
+export * from './listing.describe.tool';
+export * from './listing.query.tool';
+export * from './listings.list.tool';
 export * from './mcp.tool';
+export * from './reports.list.tool';
+export * from './reports.run.tool';
 export * from './save.listing.preference.tool';
 export * from './tool.registry';
+export * from './whoami.tool';

package/dist/mcp/tools/index.js

@@ -14,9 +14,17 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./ap.tool.registry"), exports);
+__exportStar(require("./ar.tool.registry"), exports);
+__exportStar(require("./catalog.slugs"), exports);
 __exportStar(require("./delete.listing.preference.tool"), exports);
-__exportStar(require("./get.listing.tool"), exports);
+__exportStar(require("./listing.describe.tool"), exports);
+__exportStar(require("./listing.query.tool"), exports);
+__exportStar(require("./listings.list.tool"), exports);
 __exportStar(require("./mcp.tool"), exports);
+__exportStar(require("./reports.list.tool"), exports);
+__exportStar(require("./reports.run.tool"), exports);
 __exportStar(require("./save.listing.preference.tool"), exports);
 __exportStar(require("./tool.registry"), exports);
+__exportStar(require("./whoami.tool"), exports);
 //# sourceMappingURL=index.js.map

package/dist/mcp/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/mcp/tools/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mEAAiD;AAAA,qDAAmC;AAAA,6CAA2B;AAAA,iEAA+C;AAAA,kDAA+B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/mcp/tools/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AAAA,qDAAmC;AAAA,kDAAgC;AAAA,mEAAiD;AAAA,0DAAwC;AAAA,uDAAqC;AAAA,uDAAqC;AAAA,6CAA2B;AAAA,sDAAoC;AAAA,qDAAmC;AAAA,iEAA+C;AAAA,kDAAgC;AAAA,gDAA6B"}

package/dist/mcp/tools/listing.describe.tool.d.ts

@@ -0,0 +1,18 @@
+import { z } from 'zod';
+import { McpToolResultInterface } from '../interfaces/mcp.tool.result.interface';
+import { McpTool } from './mcp.tool';
+type ListingDescribeInput = {
+    slug: string;
+};
+export declare class ListingDescribeTool extends McpTool<ListingDescribeInput> {
+    readonly name = "listing_describe";
+    readonly title = "Describe listing page";
+    readonly description = "Fetch columns, filters, sort, and visible preferences for a listing page by slug. Returns { definition, preferences, detail }. Call this before listing_query to know which filters and columns exist.";
+    readonly inputSchema: {
+        slug: z.ZodString;
+    };
+    protected readonly readOnly = true;
+    readonly requiredScopes: string[];
+    execute(args: ListingDescribeInput): Promise<McpToolResultInterface>;
+}
+export {};

package/dist/mcp/tools/{get.listing.tool.js → listing.describe.tool.js}

@@ -1,24 +1,24 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.GetListingTool = void 0;
+exports.ListingDescribeTool = void 0;
 const zod_1 = require("zod");
 const mcp_tool_1 = require("./mcp.tool");
 const inputSchema = {
     slug: zod_1.z.string().min(3).max(100).describe('Listing page identifier/slug, e.g. "orders" or "business-users".'),
 };
-class GetListingTool extends mcp_tool_1.McpTool {
+class ListingDescribeTool extends mcp_tool_1.McpTool {
     constructor() {
         super(...arguments);
-        this.name = 'get_listing';
-        this.title = 'Get listing page';
-        this.description = 'Fetch the configuration and data for a listing page by its slug. Returns { definition, preferences, detail }. ' +
-            "Use this to discover a listing's columns and existing preferences before creating or updating one.";
+        this.name = 'listing_describe';
+        this.title = 'Describe listing page';
+        this.description = 'Fetch columns, filters, sort, and visible preferences for a listing page by slug. Returns { definition, preferences, detail }. Call this before listing_query to know which filters and columns exist.';
         this.inputSchema = inputSchema;
         this.readOnly = true;
+        this.requiredScopes = ['reporting:read'];
     }
     execute(args) {
         return this.run(() => this.client.request({ method: 'GET', path: `v1/b/listing-page/${encodeURIComponent(args.slug)}` }));
     }
 }
-exports.GetListingTool = GetListingTool;
-//# sourceMappingURL=get.listing.tool.js.map
+exports.ListingDescribeTool = ListingDescribeTool;
+//# sourceMappingURL=listing.describe.tool.js.map

package/dist/mcp/tools/listing.describe.tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listing.describe.tool.js","sourceRoot":"","sources":["../../../src/mcp/tools/listing.describe.tool.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,yCAAqC;AAErC,MAAM,WAAW,GAAG;IAChB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,kEAAkE,CAAC;CAChH,CAAC;AAQF,MAAa,mBAAoB,SAAQ,kBAA6B;IAAtE;;QACa,SAAI,GAAG,kBAAkB,CAAC;QAC1B,UAAK,GAAG,uBAAuB,CAAC;QAChC,gBAAW,GAChB,wMAAwM,CAAC;QACpM,gBAAW,GAAG,WAAW,CAAC;QAChB,aAAQ,GAAG,IAAI,CAAC;QAC1B,mBAAc,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAKjD,CAAC;IAHG,OAAO,CAAC,IAA0B;QAC9B,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9H,CAAC;CACJ;AAZD,kDAYC"}