@servicelabsco/slabs-access-manager 1.0.67 → 1.0.69

package/dist/mcp/logging/mcp.call.log.interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.call.log.interceptor.js","sourceRoot":"","sources":["../../../src/mcp/logging/mcp.call.log.interceptor.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoG;AACpG,oFAA8D;AAC9D,+BAAuC;AACvC,oDAAoD;AACpD,+DAAyD;AACzD,mEAAgG;AAOzF,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAG9B,YAA6B,MAAwB;QAAxB,WAAM,GAAN,MAAM,CAAkB;QAFpC,WAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;IAET,CAAC;IAEzD,SAAS,CAAC,OAAyB,EAAE,IAAiB;QAClD,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QAEnC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,QAAiB,CAAC;QACtB,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;QACpB,CAAC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CACrB,IAAA,UAAG,EAAC;YACA,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,IAAI,KAAK,EAAE,IAAI,CAAC;YACrF,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC;SACjF,CAAC,CACL,CAAC;IACN,CAAC;IAEO,SAAS,CAAC,GAA6D;QAC3E,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACzD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACjF,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,OAAO,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3G,IAAI,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC;YAAE,OAAO,MAAM,CAAC;QACzD,OAAO,IAAI,CAAC;IAChB,CAAC;IAEO,YAAY,CAAC,GAAQ,EAAE,MAA+B;QAC1D,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO;QACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAa,EAAE,EAAE;YACzB,MAAM,CAAC,IAAI,CAAC,CAAC;YACb,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC,CAAC;IACN,CAAC;IAEO,UAAU,CAAC,OAAqC,EAAE,GAAQ,EAAE,GAAQ,EAAE,OAAe,EAAE,KAAc,EAAE,KAAc;QACzH,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;YACjE,KAAK,OAAO,CAAC,OAAO,EAAE;iBACjB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;iBACnC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE;gBAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,UAAU,EAAE,OAAO,IAAI,UAAU,EAAE,CAAC,CAAC;YACnF,CAAC,CAAC,CAAC;QACX,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAA0B,UAAoB,EAAE,OAAO,IAAI,UAAU,EAAE,CAAC,CAAC;QAC9F,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAqC,EAAE,GAAQ,EAAE,GAAQ,EAAE,OAAe,EAAE,KAAc,EAAE,KAAc;QACpH,MAAM,IAAI,GAAG,8BAAI,CAAC,IAAI,EAAS,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAA,0CAAkB,EAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACvG,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,GAAG,GAAG,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC;QAClG,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAG,KAAe,EAAE,OAAO,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QAC3F,MAAM,MAAM,GAAG,IAAA,uCAAe,EAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,wCAAgB,CAAC;QAEjC,OAAO;YACH,OAAO;YACP,WAAW,EAAE,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,IAAA,gCAAgB,GAAE,QAAQ,CAAC,CAAC,CAAC,IAAA,gCAAgB,GAAE;YACzF,MAAM,EAAE,GAAG,EAAE,MAAM,IAAI,GAAG,CAAC,MAAM;YACjC,IAAI;YACJ,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7D,GAAG,QAAQ;YACX,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,QAAQ,EAAE;gBACN,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,IAAI,GAAG;gBAC/D,GAAG,MAAM;gBACT,SAAS,EAAE,IAAI,EAAE,SAAS,IAAK,YAAoB,EAAE,SAAS,IAAI,IAAI;aACzE;YACD,SAAS,EAAE;gBACP,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;gBAC3B,EAAE,EAAE,IAAI,EAAE,KAAK,IAAI,IAAI;gBACvB,OAAO,EAAE,IAAI,EAAE,UAAU,IAAI,IAAI;aACpC;YACD,IAAI,EAAE,IAAI;gBACN,CAAC,CAAC;oBACI,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI;oBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI;oBACvC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;iBACpC;gBACH,CAAC,CAAC,SAAS;YACf,UAAU,EAAE,IAAI,IAAI,EAAE;YACtB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,UAAU,CAAC;SACzD,CAAC;IACN,CAAC;IAEO,cAAc,CAAC,GAAQ;QAC3B,IAAI,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACvE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YACjD,IAAI,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACvD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IACxG,CAAC;IAEO,QAAQ,CAAC,GAAQ;QACrB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM;YAAE,OAAO,YAAY,CAAC;QACjG,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,eAAe,CAAC;QACpH,OAAO,YAAY,CAAC;IACxB,CAAC;IAEO,QAAQ,CAAC,KAAc;QAQ3B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACrD,OAAQ,KAAa,CAAC,YAAY,IAAI,IAAI,CAAC;IAC/C,CAAC;CACJ,CAAA;AA3HY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;qCAI4B,sCAAgB;GAH5C,qBAAqB,CA2HjC"}

package/dist/mcp/logging/mcp.call.log.writer.d.ts

@@ -0,0 +1,11 @@
+import { OnModuleInit } from '@nestjs/common';
+import { ModuleRef } from '@nestjs/core';
+export declare class McpCallLogWriter implements OnModuleInit {
+    private readonly moduleRef;
+    private readonly logger;
+    constructor(moduleRef: ModuleRef);
+    onModuleInit(): Promise<void>;
+    record(doc: unknown): Promise<void>;
+    private mongo;
+    private ensureTtlIndex;
+}

package/dist/mcp/logging/mcp.call.log.writer.js

@@ -0,0 +1,62 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var McpCallLogWriter_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpCallLogWriter = void 0;
+const crypto_1 = require("crypto");
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const typeorm_1 = require("@nestjs/typeorm");
+const mcp_call_log_mentity_1 = require("../mentities/mcp.call.log.mentity");
+const sanitize_mcp_call_log_1 = require("./sanitize.mcp.call.log");
+let McpCallLogWriter = McpCallLogWriter_1 = class McpCallLogWriter {
+    constructor(moduleRef) {
+        this.moduleRef = moduleRef;
+        this.logger = new common_1.Logger(McpCallLogWriter_1.name);
+    }
+    async onModuleInit() {
+        await this.ensureTtlIndex();
+    }
+    async record(doc) {
+        const ds = this.mongo();
+        if (!ds?.isInitialized)
+            return;
+        const repo = ds.getMongoRepository(mcp_call_log_mentity_1.McpCallLogMentity);
+        await repo.save(repo.create({ uuid: (0, crypto_1.randomUUID)(), ...doc }));
+    }
+    mongo() {
+        try {
+            return this.moduleRef.get((0, typeorm_1.getDataSourceToken)('mongodb'), { strict: false });
+        }
+        catch {
+            return null;
+        }
+    }
+    async ensureTtlIndex() {
+        const ds = this.mongo();
+        if (!ds?.isInitialized)
+            return;
+        try {
+            const repo = ds.getMongoRepository(mcp_call_log_mentity_1.McpCallLogMentity);
+            await repo.createCollectionIndex({ expire_at: 1 }, { expireAfterSeconds: 0, name: 'mcp_call_logs_ttl' });
+            this.logger.log(`mcp call log TTL index ready (${sanitize_mcp_call_log_1.MCP_LOG_TTL_DAYS}d via expire_at)`);
+        }
+        catch (error) {
+            this.logger.warn(`mcp call log TTL index skipped: ${error?.message ?? error}`);
+        }
+    }
+};
+exports.McpCallLogWriter = McpCallLogWriter;
+exports.McpCallLogWriter = McpCallLogWriter = McpCallLogWriter_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.ModuleRef])
+], McpCallLogWriter);
+//# sourceMappingURL=mcp.call.log.writer.js.map

package/dist/mcp/logging/mcp.call.log.writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.call.log.writer.js","sourceRoot":"","sources":["../../../src/mcp/logging/mcp.call.log.writer.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,mCAAoC;AACpC,2CAAkE;AAClE,uCAAyC;AACzC,6CAAqD;AAErD,4EAAsE;AACtE,mEAA2D;AAOpD,IAAM,gBAAgB,wBAAtB,MAAM,gBAAgB;IAGzB,YAA6B,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;QAFhC,WAAM,GAAG,IAAI,eAAM,CAAC,kBAAgB,CAAC,IAAI,CAAC,CAAC;IAER,CAAC;IAErD,KAAK,CAAC,YAAY;QACd,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAY;QACrB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,EAAE,EAAE,aAAa;YAAE,OAAO;QAC/B,MAAM,IAAI,GAAG,EAAE,CAAC,kBAAkB,CAAC,wCAAiB,CAAC,CAAC;QACtD,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAA,mBAAU,GAAE,EAAE,GAAI,GAAc,EAAS,CAAC,CAAC,CAAC;IACpF,CAAC;IAEO,KAAK;QACT,IAAI,CAAC;YACD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAA,4BAAkB,EAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,cAAc;QACxB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,EAAE,EAAE,aAAa;YAAE,OAAO;QAC/B,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,EAAE,CAAC,kBAAkB,CAAC,wCAAiB,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACzG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iCAAiC,wCAAgB,kBAAkB,CAAC,CAAC;QACzF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAoC,KAAe,EAAE,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;QAC9F,CAAC;IACL,CAAC;CACJ,CAAA;AAnCY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;qCAI+B,gBAAS;GAHxC,gBAAgB,CAmC5B"}

package/dist/mcp/logging/sanitize.mcp.call.log.d.ts

@@ -0,0 +1,44 @@
+export declare const MCP_LOG_BODY_CAP: number;
+export declare const MCP_LOG_TTL_DAYS: number;
+export type McpCaller = {
+    id?: number;
+    auth_attributes?: {
+        business_id?: number;
+        api_key_kind?: string;
+        client_id?: string;
+    };
+};
+export type SanitizedMcpCallLog = {
+    client_id: string | null;
+    user_id: number | null;
+    business_id: number | null;
+    kind: string;
+    request: unknown;
+};
+export declare function sanitizeMcpCallLog(input: {
+    headers?: Record<string, unknown>;
+    request?: unknown;
+    user?: McpCaller | null;
+}): SanitizedMcpCallLog;
+export declare function capResponseBody(body: unknown, cap?: number): {
+    body?: unknown;
+    truncated: boolean;
+    bytes: number;
+};
+export declare function hashCompiledSql(sql: string): string;
+export declare function hottestQueryFamilies(rows: Array<{
+    sql_hash: string;
+    db_ms: number;
+}>, limit?: number): Array<{
+    sql_hash: string;
+    count: number;
+    p95_db_ms: number;
+}>;
+export declare function extractExplainCost(plan: unknown): number | null;
+export declare const SanitizeMcpCallLog: {
+    sanitizeMcpCallLog: typeof sanitizeMcpCallLog;
+    capResponseBody: typeof capResponseBody;
+    hashCompiledSql: typeof hashCompiledSql;
+    hottestQueryFamilies: typeof hottestQueryFamilies;
+    extractExplainCost: typeof extractExplainCost;
+};

package/dist/mcp/logging/sanitize.mcp.call.log.js

@@ -0,0 +1,112 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SanitizeMcpCallLog = exports.MCP_LOG_TTL_DAYS = exports.MCP_LOG_BODY_CAP = void 0;
+exports.sanitizeMcpCallLog = sanitizeMcpCallLog;
+exports.capResponseBody = capResponseBody;
+exports.hashCompiledSql = hashCompiledSql;
+exports.hottestQueryFamilies = hottestQueryFamilies;
+exports.extractExplainCost = extractExplainCost;
+const crypto_1 = require("crypto");
+const extract_client_credentials_1 = require("../../access/libraries/extract.client.credentials");
+exports.MCP_LOG_BODY_CAP = Number(process.env.MCP_LOG_BODY_CAP) > 0 ? Number(process.env.MCP_LOG_BODY_CAP) : 32 * 1024;
+exports.MCP_LOG_TTL_DAYS = Number(process.env.MCP_LOG_TTL_DAYS) > 0 ? Number(process.env.MCP_LOG_TTL_DAYS) : 90;
+const SECRET_HEADER = /^(authorization|cookie|x-client-secret|x-development-key)$/i;
+const SECRET_KEY = /(secret|password|token|authorization|cookie|api[_-]?key|client_secret|development[_-]?key)/i;
+function sanitizeMcpCallLog(input) {
+    const user = input.user;
+    const fromBearer = clientIdFromHeaders(input.headers);
+    return {
+        client_id: user?.auth_attributes?.client_id || fromBearer || null,
+        user_id: user?.id ?? null,
+        business_id: user?.auth_attributes?.business_id ?? null,
+        kind: user?.auth_attributes?.api_key_kind === 'api'
+            ? 'api'
+            : user?.auth_attributes?.api_key_kind === 'user'
+                ? 'user'
+                : fromBearer
+                    ? 'user'
+                    : 'unknown',
+        request: redact(input.request),
+    };
+}
+function capResponseBody(body, cap = exports.MCP_LOG_BODY_CAP) {
+    if (body === undefined)
+        return { truncated: false, bytes: 0 };
+    const bytes = Buffer.byteLength(typeof body === 'string' ? body : JSON.stringify(body), 'utf8');
+    if (bytes > cap)
+        return { truncated: true, bytes };
+    return { body, truncated: false, bytes };
+}
+function hashCompiledSql(sql) {
+    const normalized = String(sql || '')
+        .replace(/\s+/g, ' ')
+        .trim();
+    return (0, crypto_1.createHash)('sha256').update(normalized).digest('hex');
+}
+function hottestQueryFamilies(rows, limit = 10) {
+    const groups = new Map();
+    for (const row of rows) {
+        const list = groups.get(row.sql_hash) || [];
+        list.push(row.db_ms);
+        groups.set(row.sql_hash, list);
+    }
+    return [...groups.entries()]
+        .map(([sql_hash, times]) => {
+        const sorted = [...times].sort((a, b) => a - b);
+        const p95 = sorted[Math.min(sorted.length - 1, Math.ceil(sorted.length * 0.95) - 1)] ?? 0;
+        return { sql_hash, count: times.length, p95_db_ms: p95 };
+    })
+        .sort((a, b) => b.p95_db_ms - a.p95_db_ms || b.count - a.count)
+        .slice(0, limit);
+}
+function extractExplainCost(plan) {
+    const root = unwrapExplain(plan);
+    const cost = root && typeof root === 'object' ? (root['Total Cost'] ?? root.TotalCost) : null;
+    const n = Number(cost);
+    return Number.isFinite(n) ? n : null;
+}
+function unwrapExplain(plan) {
+    if (!plan)
+        return null;
+    if (Array.isArray(plan))
+        return unwrapExplain(plan[0]);
+    if (typeof plan === 'object') {
+        const record = plan;
+        if (record.Plan)
+            return unwrapExplain(record.Plan);
+        if (record['QUERY PLAN'])
+            return unwrapExplain(record['QUERY PLAN']);
+        return record;
+    }
+    return null;
+}
+function clientIdFromHeaders(headers) {
+    if (!headers)
+        return null;
+    const fromHeader = headers['x-client-id'] ?? headers['X-Client-Id'];
+    if (fromHeader)
+        return String(fromHeader);
+    const creds = extract_client_credentials_1.ExtractClientCredentials.fromHeaders(headers);
+    return creds?.clientId || null;
+}
+function redact(value) {
+    if (Array.isArray(value))
+        return value.map(redact);
+    if (!value || typeof value !== 'object')
+        return value;
+    const out = {};
+    for (const [key, nested] of Object.entries(value)) {
+        if (SECRET_HEADER.test(key) || SECRET_KEY.test(key))
+            continue;
+        out[key] = redact(nested);
+    }
+    return out;
+}
+exports.SanitizeMcpCallLog = {
+    sanitizeMcpCallLog,
+    capResponseBody,
+    hashCompiledSql,
+    hottestQueryFamilies,
+    extractExplainCost,
+};
+//# sourceMappingURL=sanitize.mcp.call.log.js.map

package/dist/mcp/logging/sanitize.mcp.call.log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.mcp.call.log.js","sourceRoot":"","sources":["../../../src/mcp/logging/sanitize.mcp.call.log.ts"],"names":[],"mappings":";;;AAsBA,gDAiBC;AAED,0CAKC;AAED,0CAKC;AAED,oDAkBC;AAED,gDAKC;AAhFD,mCAAoC;AACpC,kGAA6F;AAEhF,QAAA,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;AAC/G,QAAA,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAErH,MAAM,aAAa,GAAG,6DAA6D,CAAC;AACpF,MAAM,UAAU,GAAG,6FAA6F,CAAC;AAejH,SAAgB,kBAAkB,CAAC,KAAwF;IACvH,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtD,OAAO;QACH,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,IAAI,UAAU,IAAI,IAAI;QACjE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI;QACzB,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,IAAI,IAAI;QACvD,IAAI,EACA,IAAI,EAAE,eAAe,EAAE,YAAY,KAAK,KAAK;YACzC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,EAAE,eAAe,EAAE,YAAY,KAAK,MAAM;gBAC9C,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,UAAU;oBACV,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,SAAS;QACvB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;KACjC,CAAC;AACN,CAAC;AAED,SAAgB,eAAe,CAAC,IAAa,EAAE,GAAG,GAAG,wBAAgB;IACjE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAChG,IAAI,KAAK,GAAG,GAAG;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACnD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC7C,CAAC;AAED,SAAgB,eAAe,CAAC,GAAW;IACvC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;SAC/B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;IACZ,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,SAAgB,oBAAoB,CAChC,IAAgD,EAChD,KAAK,GAAG,EAAE;IAEV,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1F,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC7D,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;SAC9D,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAgB,kBAAkB,CAAC,IAAa;IAC5C,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAE,IAAY,CAAC,YAAY,CAAC,IAAK,IAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChH,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,IAA+B,CAAC;QAC/C,IAAI,MAAM,CAAC,IAAI;YAAE,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,YAAY,CAAC;YAAE,OAAO,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QACrE,OAAO,MAAM,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAiC;IAC1D,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;IACpE,IAAI,UAAU;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,qDAAwB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC5D,OAAO,KAAK,EAAE,QAAQ,IAAI,IAAI,CAAC;AACnC,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC3E,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAC9D,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAMY,QAAA,kBAAkB,GAAG;IAC9B,kBAAkB;IAClB,eAAe;IACf,eAAe;IACf,oBAAoB;IACpB,kBAAkB;CACrB,CAAC"}

package/dist/mcp/mcp.module.d.ts

@@ -4,7 +4,7 @@ export declare class McpModule {
     static forRoot(options?: McpModuleOptions): DynamicModule;
 }
 export { assertValidCatalog } from './catalog/assert.valid.catalog';
-export { assertPublicMcpBootConfig, MCP_TOOL_REGISTRIES, getHostMcpRegistries, getMcpServerName, mcpToolNameMax, provisionMcpServer, setHostMcpRegistries } from './mcp.constants';
+export { assertPublicMcpBootConfig, MCP_TOOL_REGISTRIES, getHostMcpRegistries, getMcpServerName, mcpToolNameMax, provisionMcpServer, setHostMcpRegistries, } from './mcp.constants';
 export type { McpModuleOptions, McpToolRegistryFactory } from './mcp.constants';
 export { ApToolRegistry } from './tools/ap.tool.registry';
 export { ArToolRegistry } from './tools/ar.tool.registry';

package/dist/mcp/mcp.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.module.js","sourceRoot":"","sources":["../../src/mcp/mcp.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AACvD,0EAAsE;AACtE,4DAAuD;AACvD,mDAAuE;AA0BhE,IAAM,SAAS,iBAAf,MAAM,SAAS;IAClB,MAAM,CAAC,OAAO,CAAC,UAA4B,EAAE;QACzC,IAAA,kCAAkB,EAAC,OAAO,CAAC,CAAC;QAC5B,OAAO;YACH,MAAM,EAAE,WAAS;YACjB,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;YAC3C,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;SAC9C,CAAC;IACN,CAAC;CACJ,CAAA;AATY,8BAAS;oBAAT,SAAS;IAJrB,IAAA,eAAM,EAAC;QACJ,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;QAC3C,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;KAC9C,CAAC;GACW,SAAS,CASrB;AAED,uEAAoE;AAA3D,0HAAA,kBAAkB,OAAA;AAC3B,iDAAmL;AAA1K,0HAAA,yBAAyB,OAAA;AAAE,oHAAA,mBAAmB,OAAA;AAAE,qHAAA,oBAAoB,OAAA;AAAE,iHAAA,gBAAgB,OAAA;AAAE,+GAAA,cAAc,OAAA;AAAE,mHAAA,kBAAkB,OAAA;AAAE,qHAAA,oBAAoB,OAAA;AAEzJ,6DAA0D;AAAjD,kHAAA,cAAc,OAAA;AACvB,6DAA0D;AAAjD,kHAAA,cAAc,OAAA;AACvB,uDAAqD;AAA5C,6GAAA,YAAY,OAAA"}
+{"version":3,"file":"mcp.module.js","sourceRoot":"","sources":["../../src/mcp/mcp.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AACvD,0EAAsE;AACtE,4DAAuD;AACvD,mDAAuE;AAyBhE,IAAM,SAAS,iBAAf,MAAM,SAAS;IAClB,MAAM,CAAC,OAAO,CAAC,UAA4B,EAAE;QACzC,IAAA,kCAAkB,EAAC,OAAO,CAAC,CAAC;QAC5B,OAAO;YACH,MAAM,EAAE,WAAS;YACjB,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;YAC3C,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;SAC9C,CAAC;IACN,CAAC;CACJ,CAAA;AATY,8BAAS;oBAAT,SAAS;IAJrB,IAAA,eAAM,EAAC;QACJ,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;QAC3C,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;KAC9C,CAAC;GACW,SAAS,CASrB;AAED,uEAAoE;AAA3D,0HAAA,kBAAkB,OAAA;AAC3B,iDAQyB;AAPrB,0HAAA,yBAAyB,OAAA;AACzB,oHAAA,mBAAmB,OAAA;AACnB,qHAAA,oBAAoB,OAAA;AACpB,iHAAA,gBAAgB,OAAA;AAChB,+GAAA,cAAc,OAAA;AACd,mHAAA,kBAAkB,OAAA;AAClB,qHAAA,oBAAoB,OAAA;AAGxB,6DAA0D;AAAjD,kHAAA,cAAc,OAAA;AACvB,6DAA0D;AAAjD,kHAAA,cAAc,OAAA;AACvB,uDAAqD;AAA5C,6GAAA,YAAY,OAAA"}

package/dist/mcp/mentities/index.d.ts

@@ -0,0 +1 @@
+export * from './mcp.call.log.mentity';

package/dist/mcp/mentities/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./mcp.call.log.mentity"), exports);
+//# sourceMappingURL=index.js.map

package/dist/mcp/mentities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/mcp/mentities/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAsC"}

package/dist/mcp/mentities/mcp.call.log.mentity.d.ts

@@ -0,0 +1,17 @@
+import { CommonMongoEntity } from '@servicelabsco/nestjs-utility-services';
+export declare class McpCallLogMentity extends CommonMongoEntity {
+    surface: string;
+    server_name: string;
+    method: string;
+    tool: string;
+    path: string;
+    user_id: number;
+    business_id: number;
+    client_id: string;
+    kind: string;
+    request: any;
+    response: any;
+    timing_ms: any;
+    cost: any;
+    expire_at: Date;
+}

package/dist/mcp/mentities/mcp.call.log.mentity.js

@@ -0,0 +1,79 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpCallLogMentity = void 0;
+const nestjs_utility_services_1 = require("@servicelabsco/nestjs-utility-services");
+const typeorm_1 = require("typeorm");
+let McpCallLogMentity = class McpCallLogMentity extends nestjs_utility_services_1.CommonMongoEntity {
+};
+exports.McpCallLogMentity = McpCallLogMentity;
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], McpCallLogMentity.prototype, "surface", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], McpCallLogMentity.prototype, "server_name", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], McpCallLogMentity.prototype, "method", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], McpCallLogMentity.prototype, "tool", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], McpCallLogMentity.prototype, "path", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", Number)
+], McpCallLogMentity.prototype, "user_id", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", Number)
+], McpCallLogMentity.prototype, "business_id", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], McpCallLogMentity.prototype, "client_id", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], McpCallLogMentity.prototype, "kind", void 0);
+__decorate([
+    (0, typeorm_1.Column)('json'),
+    __metadata("design:type", Object)
+], McpCallLogMentity.prototype, "request", void 0);
+__decorate([
+    (0, typeorm_1.Column)('json'),
+    __metadata("design:type", Object)
+], McpCallLogMentity.prototype, "response", void 0);
+__decorate([
+    (0, typeorm_1.Column)('json'),
+    __metadata("design:type", Object)
+], McpCallLogMentity.prototype, "timing_ms", void 0);
+__decorate([
+    (0, typeorm_1.Column)('json'),
+    __metadata("design:type", Object)
+], McpCallLogMentity.prototype, "cost", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    (0, typeorm_1.Index)(),
+    __metadata("design:type", Date)
+], McpCallLogMentity.prototype, "expire_at", void 0);
+exports.McpCallLogMentity = McpCallLogMentity = __decorate([
+    (0, typeorm_1.Entity)('mcp_call_logs'),
+    (0, typeorm_1.Index)('mcp_call_logs_ttl', ['expire_at'])
+], McpCallLogMentity);
+//# sourceMappingURL=mcp.call.log.mentity.js.map

package/dist/mcp/mentities/mcp.call.log.mentity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.call.log.mentity.js","sourceRoot":"","sources":["../../../src/mcp/mentities/mcp.call.log.mentity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAA2E;AAC3E,qCAAgD;AAQzC,IAAM,iBAAiB,GAAvB,MAAM,iBAAkB,SAAQ,2CAAiB;CA2CvD,CAAA;AA3CY,8CAAiB;AAE1B;IADC,IAAA,gBAAM,GAAE;;kDACO;AAGhB;IADC,IAAA,gBAAM,GAAE;;sDACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;iDACM;AAGf;IADC,IAAA,gBAAM,GAAE;;+CACI;AAGb;IADC,IAAA,gBAAM,GAAE;;+CACI;AAGb;IADC,IAAA,gBAAM,GAAE;;kDACO;AAGhB;IADC,IAAA,gBAAM,GAAE;;sDACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;oDACS;AAGlB;IADC,IAAA,gBAAM,GAAE;;+CACI;AAGb;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;;kDACF;AAGb;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;;mDACD;AAGd;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;;oDACA;AAGf;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;;+CACL;AAIV;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,eAAK,GAAE;8BACG,IAAI;oDAAC;4BA1CP,iBAAiB;IAF7B,IAAA,gBAAM,EAAC,eAAe,CAAC;IACvB,IAAA,eAAK,EAAC,mBAAmB,EAAE,CAAC,WAAW,CAAC,CAAC;GAC7B,iBAAiB,CA2C7B"}

package/dist/mcp/tools/index.d.ts

@@ -10,4 +10,7 @@ export * from './reports.list.tool';
 export * from './reports.run.tool';
 export * from './save.listing.preference.tool';
 export * from './tool.registry';
+export * from './view.describe.tool';
+export * from './view.query.tool';
+export * from './views.list.tool';
 export * from './whoami.tool';

package/dist/mcp/tools/index.js

@@ -26,5 +26,8 @@ __exportStar(require("./reports.list.tool"), exports);
 __exportStar(require("./reports.run.tool"), exports);
 __exportStar(require("./save.listing.preference.tool"), exports);
 __exportStar(require("./tool.registry"), exports);
+__exportStar(require("./view.describe.tool"), exports);
+__exportStar(require("./view.query.tool"), exports);
+__exportStar(require("./views.list.tool"), exports);
 __exportStar(require("./whoami.tool"), exports);
 //# sourceMappingURL=index.js.map

package/dist/mcp/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/mcp/tools/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AAAA,qDAAmC;AAAA,kDAAgC;AAAA,mEAAiD;AAAA,0DAAwC;AAAA,uDAAqC;AAAA,uDAAqC;AAAA,6CAA2B;AAAA,sDAAoC;AAAA,qDAAmC;AAAA,iEAA+C;AAAA,kDAAgC;AAAA,gDAA6B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/mcp/tools/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AAAA,qDAAmC;AAAA,kDAAgC;AAAA,mEAAiD;AAAA,0DAAwC;AAAA,uDAAqC;AAAA,uDAAqC;AAAA,6CAA2B;AAAA,sDAAoC;AAAA,qDAAmC;AAAA,iEAA+C;AAAA,kDAAgC;AAAA,uDAAqC;AAAA,oDAAkC;AAAA,oDAAkC;AAAA,gDAA6B"}

package/dist/mcp/tools/reports.run.tool.js.map

@@ -1 +1 @@
-{"version":3,"file":"reports.run.tool.js","sourceRoot":"","sources":["../../../src/mcp/tools/reports.run.tool.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,yCAAqC;AAErC,MAAM,WAAW,GAAG;IAChB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,iEAAiE,CAAC;IAC5G,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uEAAuE,CAAC;IACpI,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACnF,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAC/E,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gEAAgE,CAAC;CACjH,CAAC;AAUF,MAAa,cAAe,SAAQ,kBAAwB;IAA5D;;QACa,SAAI,GAAG,aAAa,CAAC;QACrB,UAAK,GAAG,YAAY,CAAC;QACrB,gBAAW,GAChB,uLAAuL,CAAC;QACnL,gBAAW,GAAG,WAAW,CAAC;QAChB,aAAQ,GAAG,IAAI,CAAC;QAC1B,mBAAc,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAQjD,CAAC;IANG,OAAO,CAAC,IAAqB;QACzB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CACjB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CACtG,CAAC;IACN,CAAC;CACJ;AAfD,wCAeC"}
+{"version":3,"file":"reports.run.tool.js","sourceRoot":"","sources":["../../../src/mcp/tools/reports.run.tool.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,yCAAqC;AAErC,MAAM,WAAW,GAAG;IAChB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,iEAAiE,CAAC;IAC5G,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uEAAuE,CAAC;IACpI,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACnF,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAC/E,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gEAAgE,CAAC;CACjH,CAAC;AAUF,MAAa,cAAe,SAAQ,kBAAwB;IAA5D;;QACa,SAAI,GAAG,aAAa,CAAC;QACrB,UAAK,GAAG,YAAY,CAAC;QACrB,gBAAW,GAChB,uLAAuL,CAAC;QACnL,gBAAW,GAAG,WAAW,CAAC;QAChB,aAAQ,GAAG,IAAI,CAAC;QAC1B,mBAAc,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAMjD,CAAC;IAJG,OAAO,CAAC,IAAqB;QACzB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/H,CAAC;CACJ;AAbD,wCAaC"}

package/dist/mcp/tools/tool.registry.js

@@ -1,33 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ToolRegistry = void 0;
-const ap_tool_registry_1 = require("./ap.tool.registry");
-const ar_tool_registry_1 = require("./ar.tool.registry");
-const delete_listing_preference_tool_1 = require("./delete.listing.preference.tool");
-const listing_describe_tool_1 = require("./listing.describe.tool");
-const listing_query_tool_1 = require("./listing.query.tool");
-const listings_list_tool_1 = require("./listings.list.tool");
-const reports_list_tool_1 = require("./reports.list.tool");
-const reports_run_tool_1 = require("./reports.run.tool");
-const save_listing_preference_tool_1 = require("./save.listing.preference.tool");
 const whoami_tool_1 = require("./whoami.tool");
+const view_describe_tool_1 = require("./view.describe.tool");
+const view_query_tool_1 = require("./view.query.tool");
+const views_list_tool_1 = require("./views.list.tool");
 class ToolRegistry {
     constructor(client) {
         this.client = client;
     }
     tools() {
-        return [
-            new whoami_tool_1.WhoamiTool(this.client),
-            new reports_list_tool_1.ReportsListTool(this.client),
-            new reports_run_tool_1.ReportsRunTool(this.client),
-            new listings_list_tool_1.ListingsListTool(this.client),
-            new listing_describe_tool_1.ListingDescribeTool(this.client),
-            new listing_query_tool_1.ListingQueryTool(this.client),
-            new save_listing_preference_tool_1.SaveListingPreferenceTool(this.client),
-            new delete_listing_preference_tool_1.DeleteListingPreferenceTool(this.client),
-            ...new ap_tool_registry_1.ApToolRegistry(this.client).tools(),
-            ...new ar_tool_registry_1.ArToolRegistry(this.client).tools(),
-        ];
+        return [new whoami_tool_1.WhoamiTool(this.client), new views_list_tool_1.ViewsListTool(this.client), new view_describe_tool_1.ViewDescribeTool(this.client), new view_query_tool_1.ViewQueryTool(this.client)];
     }
 }
 exports.ToolRegistry = ToolRegistry;

package/dist/mcp/tools/tool.registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool.registry.js","sourceRoot":"","sources":["../../../src/mcp/tools/tool.registry.ts"],"names":[],"mappings":";;;AAEA,yDAAoD;AACpD,yDAAoD;AACpD,qFAA+E;AAC/E,mEAA8D;AAC9D,6DAAwD;AACxD,6DAAwD;AACxD,2DAAsD;AACtD,yDAAoD;AACpD,iFAA2E;AAC3E,+CAA2C;AAM3C,MAAa,YAAY;IACrB,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK;QACD,OAAO;YACH,IAAI,wBAAU,CAAC,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,mCAAe,CAAC,IAAI,CAAC,MAAM,CAAC;YAChC,IAAI,iCAAc,CAAC,IAAI,CAAC,MAAM,CAAC;YAC/B,IAAI,qCAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;YACjC,IAAI,2CAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;YACpC,IAAI,qCAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;YACjC,IAAI,wDAAyB,CAAC,IAAI,CAAC,MAAM,CAAC;YAC1C,IAAI,4DAA2B,CAAC,IAAI,CAAC,MAAM,CAAC;YAC5C,GAAG,IAAI,iCAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE;YAC1C,GAAG,IAAI,iCAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE;SAC7C,CAAC;IACN,CAAC;CACJ;AAjBD,oCAiBC"}
+{"version":3,"file":"tool.registry.js","sourceRoot":"","sources":["../../../src/mcp/tools/tool.registry.ts"],"names":[],"mappings":";;;AAEA,+CAA2C;AAC3C,6DAAwD;AACxD,uDAAkD;AAClD,uDAAkD;AAOlD,MAAa,YAAY;IACrB,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK;QACD,OAAO,CAAC,IAAI,wBAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,+BAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,qCAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,+BAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5I,CAAC;CACJ;AAND,oCAMC"}

package/dist/mcp/tools/view.describe.tool.d.ts

@@ -0,0 +1,17 @@
+import { z } from 'zod';
+import { McpToolResultInterface } from '../interfaces/mcp.tool.result.interface';
+import { McpTool } from './mcp.tool';
+type ViewDescribeInput = {
+    name: string;
+};
+export declare class ViewDescribeTool extends McpTool<ViewDescribeInput> {
+    readonly name = "view_describe";
+    readonly title = "Describe analytical view";
+    readonly description = "Full semantic schema of one analytical view: every column with its meaning (in Finnoto vocabulary), type, enum value labels, supported ops, the closed DSL grammar block (read it \u2014 do not guess operators), worked example_queries, and suggested visualizations. Call views_list first, then view_describe before writing a view_query. Column descriptions resolve domain traps; refreshed_at is freshness.";
+    readonly inputSchema: {
+        name: z.ZodString;
+    };
+    protected readonly readOnly = true;
+    execute(args: ViewDescribeInput): Promise<McpToolResultInterface>;
+}
+export {};

package/dist/mcp/tools/view.describe.tool.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ViewDescribeTool = void 0;
+const zod_1 = require("zod");
+const mcp_tool_1 = require("./mcp.tool");
+const inputSchema = {
+    name: zod_1.z.string().min(2).max(40).describe('View name from views_list, e.g. "expenses".'),
+};
+class ViewDescribeTool extends mcp_tool_1.McpTool {
+    constructor() {
+        super(...arguments);
+        this.name = 'view_describe';
+        this.title = 'Describe analytical view';
+        this.description = 'Full semantic schema of one analytical view: every column with its meaning (in Finnoto vocabulary), type, enum value labels, supported ops, the closed DSL grammar block (read it — do not guess operators), worked example_queries, and suggested visualizations. Call views_list first, then view_describe before writing a view_query. Column descriptions resolve domain traps; refreshed_at is freshness.';
+        this.inputSchema = inputSchema;
+        this.readOnly = true;
+    }
+    execute(args) {
+        return this.run(() => this.client.request({ method: 'GET', path: `v1/b/report-views/${encodeURIComponent(args.name)}` }));
+    }
+}
+exports.ViewDescribeTool = ViewDescribeTool;
+//# sourceMappingURL=view.describe.tool.js.map

package/dist/mcp/tools/view.describe.tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"view.describe.tool.js","sourceRoot":"","sources":["../../../src/mcp/tools/view.describe.tool.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,yCAAqC;AAErC,MAAM,WAAW,GAAG;IAChB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC;CAC1F,CAAC;AAOF,MAAa,gBAAiB,SAAQ,kBAA0B;IAAhE;;QACa,SAAI,GAAG,eAAe,CAAC;QACvB,UAAK,GAAG,0BAA0B,CAAC;QACnC,gBAAW,GAChB,gZAAgZ,CAAC;QAC5Y,gBAAW,GAAG,WAAW,CAAC;QAChB,aAAQ,GAAG,IAAI,CAAC;IAKvC,CAAC;IAHG,OAAO,CAAC,IAAuB;QAC3B,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9H,CAAC;CACJ;AAXD,4CAWC"}

package/dist/mcp/tools/view.query.tool.d.ts

@@ -0,0 +1,75 @@
+import { z } from 'zod';
+import { McpToolResultInterface } from '../interfaces/mcp.tool.result.interface';
+import { McpTool } from './mcp.tool';
+type ViewQueryInput = {
+    name: string;
+    columns?: string[];
+    filters?: Array<{
+        column: string;
+        op: string;
+        value?: unknown;
+    }>;
+    group_by?: Array<{
+        column: string;
+        bucket?: string;
+    }>;
+    aggregates?: Array<{
+        fn: string;
+        column?: string;
+        as?: string;
+    }>;
+    sort?: Array<{
+        by: string;
+        dir?: string;
+    }>;
+    limit?: number;
+    offset?: number;
+};
+export declare class ViewQueryTool extends McpTool<ViewQueryInput> {
+    readonly name = "view_query";
+    readonly title = "Query analytical view";
+    readonly description = "Run a structured analytical query against a view: filters, group-by (including month/quarter date buckets), and aggregates (sum, count, avg, min, max). Call views_list then view_describe (read the grammar block and example_queries) before querying. Use contains (bare string, not LIKE). Relative dates: @today / @today-30d \u2014 do not compute today yourself. Enum filters accept labels. Results include format hints and refreshed_at. Not for fetching individual records \u2014 use listing tools for that.";
+    readonly inputSchema: {
+        name: z.ZodString;
+        columns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        filters: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            column: z.ZodString;
+            op: z.ZodString;
+            value: z.ZodOptional<z.ZodUnknown>;
+        }, z.core.$strip>>>;
+        group_by: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            column: z.ZodString;
+            bucket: z.ZodOptional<z.ZodEnum<{
+                year: "year";
+                week: "week";
+                day: "day";
+                month: "month";
+                quarter: "quarter";
+            }>>;
+        }, z.core.$strip>>>;
+        aggregates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            fn: z.ZodEnum<{
+                count: "count";
+                max: "max";
+                min: "min";
+                sum: "sum";
+                avg: "avg";
+                count_distinct: "count_distinct";
+            }>;
+            column: z.ZodOptional<z.ZodString>;
+            as: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+        sort: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            by: z.ZodString;
+            dir: z.ZodOptional<z.ZodEnum<{
+                asc: "asc";
+                desc: "desc";
+            }>>;
+        }, z.core.$strip>>>;
+        limit: z.ZodOptional<z.ZodNumber>;
+        offset: z.ZodOptional<z.ZodNumber>;
+    };
+    protected readonly readOnly = true;
+    execute(args: ViewQueryInput): Promise<McpToolResultInterface>;
+}
+export {};