@servicelabsco/slabs-access-manager 1.0.68 → 1.0.69

package/dist/mcp/logging/sanitize.mcp.call.log.d.ts

@@ -0,0 +1,44 @@
+export declare const MCP_LOG_BODY_CAP: number;
+export declare const MCP_LOG_TTL_DAYS: number;
+export type McpCaller = {
+    id?: number;
+    auth_attributes?: {
+        business_id?: number;
+        api_key_kind?: string;
+        client_id?: string;
+    };
+};
+export type SanitizedMcpCallLog = {
+    client_id: string | null;
+    user_id: number | null;
+    business_id: number | null;
+    kind: string;
+    request: unknown;
+};
+export declare function sanitizeMcpCallLog(input: {
+    headers?: Record<string, unknown>;
+    request?: unknown;
+    user?: McpCaller | null;
+}): SanitizedMcpCallLog;
+export declare function capResponseBody(body: unknown, cap?: number): {
+    body?: unknown;
+    truncated: boolean;
+    bytes: number;
+};
+export declare function hashCompiledSql(sql: string): string;
+export declare function hottestQueryFamilies(rows: Array<{
+    sql_hash: string;
+    db_ms: number;
+}>, limit?: number): Array<{
+    sql_hash: string;
+    count: number;
+    p95_db_ms: number;
+}>;
+export declare function extractExplainCost(plan: unknown): number | null;
+export declare const SanitizeMcpCallLog: {
+    sanitizeMcpCallLog: typeof sanitizeMcpCallLog;
+    capResponseBody: typeof capResponseBody;
+    hashCompiledSql: typeof hashCompiledSql;
+    hottestQueryFamilies: typeof hottestQueryFamilies;
+    extractExplainCost: typeof extractExplainCost;
+};

package/dist/mcp/logging/sanitize.mcp.call.log.js

@@ -0,0 +1,112 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SanitizeMcpCallLog = exports.MCP_LOG_TTL_DAYS = exports.MCP_LOG_BODY_CAP = void 0;
+exports.sanitizeMcpCallLog = sanitizeMcpCallLog;
+exports.capResponseBody = capResponseBody;
+exports.hashCompiledSql = hashCompiledSql;
+exports.hottestQueryFamilies = hottestQueryFamilies;
+exports.extractExplainCost = extractExplainCost;
+const crypto_1 = require("crypto");
+const extract_client_credentials_1 = require("../../access/libraries/extract.client.credentials");
+exports.MCP_LOG_BODY_CAP = Number(process.env.MCP_LOG_BODY_CAP) > 0 ? Number(process.env.MCP_LOG_BODY_CAP) : 32 * 1024;
+exports.MCP_LOG_TTL_DAYS = Number(process.env.MCP_LOG_TTL_DAYS) > 0 ? Number(process.env.MCP_LOG_TTL_DAYS) : 90;
+const SECRET_HEADER = /^(authorization|cookie|x-client-secret|x-development-key)$/i;
+const SECRET_KEY = /(secret|password|token|authorization|cookie|api[_-]?key|client_secret|development[_-]?key)/i;
+function sanitizeMcpCallLog(input) {
+    const user = input.user;
+    const fromBearer = clientIdFromHeaders(input.headers);
+    return {
+        client_id: user?.auth_attributes?.client_id || fromBearer || null,
+        user_id: user?.id ?? null,
+        business_id: user?.auth_attributes?.business_id ?? null,
+        kind: user?.auth_attributes?.api_key_kind === 'api'
+            ? 'api'
+            : user?.auth_attributes?.api_key_kind === 'user'
+                ? 'user'
+                : fromBearer
+                    ? 'user'
+                    : 'unknown',
+        request: redact(input.request),
+    };
+}
+function capResponseBody(body, cap = exports.MCP_LOG_BODY_CAP) {
+    if (body === undefined)
+        return { truncated: false, bytes: 0 };
+    const bytes = Buffer.byteLength(typeof body === 'string' ? body : JSON.stringify(body), 'utf8');
+    if (bytes > cap)
+        return { truncated: true, bytes };
+    return { body, truncated: false, bytes };
+}
+function hashCompiledSql(sql) {
+    const normalized = String(sql || '')
+        .replace(/\s+/g, ' ')
+        .trim();
+    return (0, crypto_1.createHash)('sha256').update(normalized).digest('hex');
+}
+function hottestQueryFamilies(rows, limit = 10) {
+    const groups = new Map();
+    for (const row of rows) {
+        const list = groups.get(row.sql_hash) || [];
+        list.push(row.db_ms);
+        groups.set(row.sql_hash, list);
+    }
+    return [...groups.entries()]
+        .map(([sql_hash, times]) => {
+        const sorted = [...times].sort((a, b) => a - b);
+        const p95 = sorted[Math.min(sorted.length - 1, Math.ceil(sorted.length * 0.95) - 1)] ?? 0;
+        return { sql_hash, count: times.length, p95_db_ms: p95 };
+    })
+        .sort((a, b) => b.p95_db_ms - a.p95_db_ms || b.count - a.count)
+        .slice(0, limit);
+}
+function extractExplainCost(plan) {
+    const root = unwrapExplain(plan);
+    const cost = root && typeof root === 'object' ? (root['Total Cost'] ?? root.TotalCost) : null;
+    const n = Number(cost);
+    return Number.isFinite(n) ? n : null;
+}
+function unwrapExplain(plan) {
+    if (!plan)
+        return null;
+    if (Array.isArray(plan))
+        return unwrapExplain(plan[0]);
+    if (typeof plan === 'object') {
+        const record = plan;
+        if (record.Plan)
+            return unwrapExplain(record.Plan);
+        if (record['QUERY PLAN'])
+            return unwrapExplain(record['QUERY PLAN']);
+        return record;
+    }
+    return null;
+}
+function clientIdFromHeaders(headers) {
+    if (!headers)
+        return null;
+    const fromHeader = headers['x-client-id'] ?? headers['X-Client-Id'];
+    if (fromHeader)
+        return String(fromHeader);
+    const creds = extract_client_credentials_1.ExtractClientCredentials.fromHeaders(headers);
+    return creds?.clientId || null;
+}
+function redact(value) {
+    if (Array.isArray(value))
+        return value.map(redact);
+    if (!value || typeof value !== 'object')
+        return value;
+    const out = {};
+    for (const [key, nested] of Object.entries(value)) {
+        if (SECRET_HEADER.test(key) || SECRET_KEY.test(key))
+            continue;
+        out[key] = redact(nested);
+    }
+    return out;
+}
+exports.SanitizeMcpCallLog = {
+    sanitizeMcpCallLog,
+    capResponseBody,
+    hashCompiledSql,
+    hottestQueryFamilies,
+    extractExplainCost,
+};
+//# sourceMappingURL=sanitize.mcp.call.log.js.map

package/dist/mcp/logging/sanitize.mcp.call.log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.mcp.call.log.js","sourceRoot":"","sources":["../../../src/mcp/logging/sanitize.mcp.call.log.ts"],"names":[],"mappings":";;;AAsBA,gDAiBC;AAED,0CAKC;AAED,0CAKC;AAED,oDAkBC;AAED,gDAKC;AAhFD,mCAAoC;AACpC,kGAA6F;AAEhF,QAAA,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;AAC/G,QAAA,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAErH,MAAM,aAAa,GAAG,6DAA6D,CAAC;AACpF,MAAM,UAAU,GAAG,6FAA6F,CAAC;AAejH,SAAgB,kBAAkB,CAAC,KAAwF;IACvH,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtD,OAAO;QACH,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,IAAI,UAAU,IAAI,IAAI;QACjE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,IAAI;QACzB,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,IAAI,IAAI;QACvD,IAAI,EACA,IAAI,EAAE,eAAe,EAAE,YAAY,KAAK,KAAK;YACzC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,EAAE,eAAe,EAAE,YAAY,KAAK,MAAM;gBAC9C,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,UAAU;oBACV,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,SAAS;QACvB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;KACjC,CAAC;AACN,CAAC;AAED,SAAgB,eAAe,CAAC,IAAa,EAAE,GAAG,GAAG,wBAAgB;IACjE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAChG,IAAI,KAAK,GAAG,GAAG;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACnD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC7C,CAAC;AAED,SAAgB,eAAe,CAAC,GAAW;IACvC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;SAC/B,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;IACZ,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,SAAgB,oBAAoB,CAChC,IAAgD,EAChD,KAAK,GAAG,EAAE;IAEV,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE;QACvB,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1F,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC7D,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;SAC9D,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED,SAAgB,kBAAkB,CAAC,IAAa;IAC5C,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAE,IAAY,CAAC,YAAY,CAAC,IAAK,IAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChH,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,IAA+B,CAAC;QAC/C,IAAI,MAAM,CAAC,IAAI;YAAE,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,YAAY,CAAC;YAAE,OAAO,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QACrE,OAAO,MAAM,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAiC;IAC1D,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;IACpE,IAAI,UAAU;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,qDAAwB,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC5D,OAAO,KAAK,EAAE,QAAQ,IAAI,IAAI,CAAC;AACnC,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC3E,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAC9D,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAMY,QAAA,kBAAkB,GAAG;IAC9B,kBAAkB;IAClB,eAAe;IACf,eAAe;IACf,oBAAoB;IACpB,kBAAkB;CACrB,CAAC"}

package/dist/mcp/mcp.module.d.ts

@@ -4,7 +4,7 @@ export declare class McpModule {
     static forRoot(options?: McpModuleOptions): DynamicModule;
 }
 export { assertValidCatalog } from './catalog/assert.valid.catalog';
-export { assertPublicMcpBootConfig, MCP_TOOL_REGISTRIES, getHostMcpRegistries, getMcpServerName, mcpToolNameMax, provisionMcpServer, setHostMcpRegistries } from './mcp.constants';
+export { assertPublicMcpBootConfig, MCP_TOOL_REGISTRIES, getHostMcpRegistries, getMcpServerName, mcpToolNameMax, provisionMcpServer, setHostMcpRegistries, } from './mcp.constants';
 export type { McpModuleOptions, McpToolRegistryFactory } from './mcp.constants';
 export { ApToolRegistry } from './tools/ap.tool.registry';
 export { ArToolRegistry } from './tools/ar.tool.registry';

package/dist/mcp/mcp.module.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.module.js","sourceRoot":"","sources":["../../src/mcp/mcp.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AACvD,0EAAsE;AACtE,4DAAuD;AACvD,mDAAuE;AA0BhE,IAAM,SAAS,iBAAf,MAAM,SAAS;IAClB,MAAM,CAAC,OAAO,CAAC,UAA4B,EAAE;QACzC,IAAA,kCAAkB,EAAC,OAAO,CAAC,CAAC;QAC5B,OAAO;YACH,MAAM,EAAE,WAAS;YACjB,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;YAC3C,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;SAC9C,CAAC;IACN,CAAC;CACJ,CAAA;AATY,8BAAS;oBAAT,SAAS;IAJrB,IAAA,eAAM,EAAC;QACJ,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;QAC3C,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;KAC9C,CAAC;GACW,SAAS,CASrB;AAED,uEAAoE;AAA3D,0HAAA,kBAAkB,OAAA;AAC3B,iDAAmL;AAA1K,0HAAA,yBAAyB,OAAA;AAAE,oHAAA,mBAAmB,OAAA;AAAE,qHAAA,oBAAoB,OAAA;AAAE,iHAAA,gBAAgB,OAAA;AAAE,+GAAA,cAAc,OAAA;AAAE,mHAAA,kBAAkB,OAAA;AAAE,qHAAA,oBAAoB,OAAA;AAEzJ,6DAA0D;AAAjD,kHAAA,cAAc,OAAA;AACvB,6DAA0D;AAAjD,kHAAA,cAAc,OAAA;AACvB,uDAAqD;AAA5C,6GAAA,YAAY,OAAA"}
+{"version":3,"file":"mcp.module.js","sourceRoot":"","sources":["../../src/mcp/mcp.module.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,2CAAuD;AACvD,0EAAsE;AACtE,4DAAuD;AACvD,mDAAuE;AAyBhE,IAAM,SAAS,iBAAf,MAAM,SAAS;IAClB,MAAM,CAAC,OAAO,CAAC,UAA4B,EAAE;QACzC,IAAA,kCAAkB,EAAC,OAAO,CAAC,CAAC;QAC5B,OAAO;YACH,MAAM,EAAE,WAAS;YACjB,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;YAC3C,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;SAC9C,CAAC;IACN,CAAC;CACJ,CAAA;AATY,8BAAS;oBAAT,SAAS;IAJrB,IAAA,eAAM,EAAC;QACJ,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;QAC3C,OAAO,EAAE,CAAC,+BAAa,EAAE,sCAAiB,CAAC;KAC9C,CAAC;GACW,SAAS,CASrB;AAED,uEAAoE;AAA3D,0HAAA,kBAAkB,OAAA;AAC3B,iDAQyB;AAPrB,0HAAA,yBAAyB,OAAA;AACzB,oHAAA,mBAAmB,OAAA;AACnB,qHAAA,oBAAoB,OAAA;AACpB,iHAAA,gBAAgB,OAAA;AAChB,+GAAA,cAAc,OAAA;AACd,mHAAA,kBAAkB,OAAA;AAClB,qHAAA,oBAAoB,OAAA;AAGxB,6DAA0D;AAAjD,kHAAA,cAAc,OAAA;AACvB,6DAA0D;AAAjD,kHAAA,cAAc,OAAA;AACvB,uDAAqD;AAA5C,6GAAA,YAAY,OAAA"}

package/dist/mcp/mentities/index.d.ts

@@ -0,0 +1 @@
+export * from './mcp.call.log.mentity';

package/dist/mcp/mentities/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./mcp.call.log.mentity"), exports);
+//# sourceMappingURL=index.js.map

package/dist/mcp/mentities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/mcp/mentities/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAsC"}

package/dist/mcp/mentities/mcp.call.log.mentity.d.ts

@@ -0,0 +1,17 @@
+import { CommonMongoEntity } from '@servicelabsco/nestjs-utility-services';
+export declare class McpCallLogMentity extends CommonMongoEntity {
+    surface: string;
+    server_name: string;
+    method: string;
+    tool: string;
+    path: string;
+    user_id: number;
+    business_id: number;
+    client_id: string;
+    kind: string;
+    request: any;
+    response: any;
+    timing_ms: any;
+    cost: any;
+    expire_at: Date;
+}

package/dist/mcp/mentities/mcp.call.log.mentity.js

@@ -0,0 +1,79 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpCallLogMentity = void 0;
+const nestjs_utility_services_1 = require("@servicelabsco/nestjs-utility-services");
+const typeorm_1 = require("typeorm");
+let McpCallLogMentity = class McpCallLogMentity extends nestjs_utility_services_1.CommonMongoEntity {
+};
+exports.McpCallLogMentity = McpCallLogMentity;
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], McpCallLogMentity.prototype, "surface", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], McpCallLogMentity.prototype, "server_name", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], McpCallLogMentity.prototype, "method", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], McpCallLogMentity.prototype, "tool", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], McpCallLogMentity.prototype, "path", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", Number)
+], McpCallLogMentity.prototype, "user_id", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", Number)
+], McpCallLogMentity.prototype, "business_id", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], McpCallLogMentity.prototype, "client_id", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    __metadata("design:type", String)
+], McpCallLogMentity.prototype, "kind", void 0);
+__decorate([
+    (0, typeorm_1.Column)('json'),
+    __metadata("design:type", Object)
+], McpCallLogMentity.prototype, "request", void 0);
+__decorate([
+    (0, typeorm_1.Column)('json'),
+    __metadata("design:type", Object)
+], McpCallLogMentity.prototype, "response", void 0);
+__decorate([
+    (0, typeorm_1.Column)('json'),
+    __metadata("design:type", Object)
+], McpCallLogMentity.prototype, "timing_ms", void 0);
+__decorate([
+    (0, typeorm_1.Column)('json'),
+    __metadata("design:type", Object)
+], McpCallLogMentity.prototype, "cost", void 0);
+__decorate([
+    (0, typeorm_1.Column)(),
+    (0, typeorm_1.Index)(),
+    __metadata("design:type", Date)
+], McpCallLogMentity.prototype, "expire_at", void 0);
+exports.McpCallLogMentity = McpCallLogMentity = __decorate([
+    (0, typeorm_1.Entity)('mcp_call_logs'),
+    (0, typeorm_1.Index)('mcp_call_logs_ttl', ['expire_at'])
+], McpCallLogMentity);
+//# sourceMappingURL=mcp.call.log.mentity.js.map

package/dist/mcp/mentities/mcp.call.log.mentity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.call.log.mentity.js","sourceRoot":"","sources":["../../../src/mcp/mentities/mcp.call.log.mentity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oFAA2E;AAC3E,qCAAgD;AAQzC,IAAM,iBAAiB,GAAvB,MAAM,iBAAkB,SAAQ,2CAAiB;CA2CvD,CAAA;AA3CY,8CAAiB;AAE1B;IADC,IAAA,gBAAM,GAAE;;kDACO;AAGhB;IADC,IAAA,gBAAM,GAAE;;sDACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;iDACM;AAGf;IADC,IAAA,gBAAM,GAAE;;+CACI;AAGb;IADC,IAAA,gBAAM,GAAE;;+CACI;AAGb;IADC,IAAA,gBAAM,GAAE;;kDACO;AAGhB;IADC,IAAA,gBAAM,GAAE;;sDACW;AAGpB;IADC,IAAA,gBAAM,GAAE;;oDACS;AAGlB;IADC,IAAA,gBAAM,GAAE;;+CACI;AAGb;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;;kDACF;AAGb;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;;mDACD;AAGd;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;;oDACA;AAGf;IADC,IAAA,gBAAM,EAAC,MAAM,CAAC;;+CACL;AAIV;IAFC,IAAA,gBAAM,GAAE;IACR,IAAA,eAAK,GAAE;8BACG,IAAI;oDAAC;4BA1CP,iBAAiB;IAF7B,IAAA,gBAAM,EAAC,eAAe,CAAC;IACvB,IAAA,eAAK,EAAC,mBAAmB,EAAE,CAAC,WAAW,CAAC,CAAC;GAC7B,iBAAiB,CA2C7B"}

package/dist/mcp/tools/index.d.ts

@@ -10,4 +10,7 @@ export * from './reports.list.tool';
 export * from './reports.run.tool';
 export * from './save.listing.preference.tool';
 export * from './tool.registry';
+export * from './view.describe.tool';
+export * from './view.query.tool';
+export * from './views.list.tool';
 export * from './whoami.tool';

package/dist/mcp/tools/index.js

@@ -26,5 +26,8 @@ __exportStar(require("./reports.list.tool"), exports);
 __exportStar(require("./reports.run.tool"), exports);
 __exportStar(require("./save.listing.preference.tool"), exports);
 __exportStar(require("./tool.registry"), exports);
+__exportStar(require("./view.describe.tool"), exports);
+__exportStar(require("./view.query.tool"), exports);
+__exportStar(require("./views.list.tool"), exports);
 __exportStar(require("./whoami.tool"), exports);
 //# sourceMappingURL=index.js.map

package/dist/mcp/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/mcp/tools/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AAAA,qDAAmC;AAAA,kDAAgC;AAAA,mEAAiD;AAAA,0DAAwC;AAAA,uDAAqC;AAAA,uDAAqC;AAAA,6CAA2B;AAAA,sDAAoC;AAAA,qDAAmC;AAAA,iEAA+C;AAAA,kDAAgC;AAAA,gDAA6B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/mcp/tools/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AAAA,qDAAmC;AAAA,kDAAgC;AAAA,mEAAiD;AAAA,0DAAwC;AAAA,uDAAqC;AAAA,uDAAqC;AAAA,6CAA2B;AAAA,sDAAoC;AAAA,qDAAmC;AAAA,iEAA+C;AAAA,kDAAgC;AAAA,uDAAqC;AAAA,oDAAkC;AAAA,oDAAkC;AAAA,gDAA6B"}

package/dist/mcp/tools/reports.run.tool.js.map

@@ -1 +1 @@
-{"version":3,"file":"reports.run.tool.js","sourceRoot":"","sources":["../../../src/mcp/tools/reports.run.tool.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,yCAAqC;AAErC,MAAM,WAAW,GAAG;IAChB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,iEAAiE,CAAC;IAC5G,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uEAAuE,CAAC;IACpI,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACnF,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAC/E,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gEAAgE,CAAC;CACjH,CAAC;AAUF,MAAa,cAAe,SAAQ,kBAAwB;IAA5D;;QACa,SAAI,GAAG,aAAa,CAAC;QACrB,UAAK,GAAG,YAAY,CAAC;QACrB,gBAAW,GAChB,uLAAuL,CAAC;QACnL,gBAAW,GAAG,WAAW,CAAC;QAChB,aAAQ,GAAG,IAAI,CAAC;QAC1B,mBAAc,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAQjD,CAAC;IANG,OAAO,CAAC,IAAqB;QACzB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CACjB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CACtG,CAAC;IACN,CAAC;CACJ;AAfD,wCAeC"}
+{"version":3,"file":"reports.run.tool.js","sourceRoot":"","sources":["../../../src/mcp/tools/reports.run.tool.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,yCAAqC;AAErC,MAAM,WAAW,GAAG;IAChB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,iEAAiE,CAAC;IAC5G,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uEAAuE,CAAC;IACpI,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACnF,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAC/E,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gEAAgE,CAAC;CACjH,CAAC;AAUF,MAAa,cAAe,SAAQ,kBAAwB;IAA5D;;QACa,SAAI,GAAG,aAAa,CAAC;QACrB,UAAK,GAAG,YAAY,CAAC;QACrB,gBAAW,GAChB,uLAAuL,CAAC;QACnL,gBAAW,GAAG,WAAW,CAAC;QAChB,aAAQ,GAAG,IAAI,CAAC;QAC1B,mBAAc,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAMjD,CAAC;IAJG,OAAO,CAAC,IAAqB;QACzB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/H,CAAC;CACJ;AAbD,wCAaC"}

package/dist/mcp/tools/tool.registry.js

@@ -1,33 +1,16 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ToolRegistry = void 0;
-const ap_tool_registry_1 = require("./ap.tool.registry");
-const ar_tool_registry_1 = require("./ar.tool.registry");
-const delete_listing_preference_tool_1 = require("./delete.listing.preference.tool");
-const listing_describe_tool_1 = require("./listing.describe.tool");
-const listing_query_tool_1 = require("./listing.query.tool");
-const listings_list_tool_1 = require("./listings.list.tool");
-const reports_list_tool_1 = require("./reports.list.tool");
-const reports_run_tool_1 = require("./reports.run.tool");
-const save_listing_preference_tool_1 = require("./save.listing.preference.tool");
 const whoami_tool_1 = require("./whoami.tool");
+const view_describe_tool_1 = require("./view.describe.tool");
+const view_query_tool_1 = require("./view.query.tool");
+const views_list_tool_1 = require("./views.list.tool");
 class ToolRegistry {
     constructor(client) {
         this.client = client;
     }
     tools() {
-        return [
-            new whoami_tool_1.WhoamiTool(this.client),
-            new reports_list_tool_1.ReportsListTool(this.client),
-            new reports_run_tool_1.ReportsRunTool(this.client),
-            new listings_list_tool_1.ListingsListTool(this.client),
-            new listing_describe_tool_1.ListingDescribeTool(this.client),
-            new listing_query_tool_1.ListingQueryTool(this.client),
-            new save_listing_preference_tool_1.SaveListingPreferenceTool(this.client),
-            new delete_listing_preference_tool_1.DeleteListingPreferenceTool(this.client),
-            ...new ap_tool_registry_1.ApToolRegistry(this.client).tools(),
-            ...new ar_tool_registry_1.ArToolRegistry(this.client).tools(),
-        ];
+        return [new whoami_tool_1.WhoamiTool(this.client), new views_list_tool_1.ViewsListTool(this.client), new view_describe_tool_1.ViewDescribeTool(this.client), new view_query_tool_1.ViewQueryTool(this.client)];
     }
 }
 exports.ToolRegistry = ToolRegistry;

package/dist/mcp/tools/tool.registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool.registry.js","sourceRoot":"","sources":["../../../src/mcp/tools/tool.registry.ts"],"names":[],"mappings":";;;AAEA,yDAAoD;AACpD,yDAAoD;AACpD,qFAA+E;AAC/E,mEAA8D;AAC9D,6DAAwD;AACxD,6DAAwD;AACxD,2DAAsD;AACtD,yDAAoD;AACpD,iFAA2E;AAC3E,+CAA2C;AAM3C,MAAa,YAAY;IACrB,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK;QACD,OAAO;YACH,IAAI,wBAAU,CAAC,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,mCAAe,CAAC,IAAI,CAAC,MAAM,CAAC;YAChC,IAAI,iCAAc,CAAC,IAAI,CAAC,MAAM,CAAC;YAC/B,IAAI,qCAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;YACjC,IAAI,2CAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;YACpC,IAAI,qCAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;YACjC,IAAI,wDAAyB,CAAC,IAAI,CAAC,MAAM,CAAC;YAC1C,IAAI,4DAA2B,CAAC,IAAI,CAAC,MAAM,CAAC;YAC5C,GAAG,IAAI,iCAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE;YAC1C,GAAG,IAAI,iCAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE;SAC7C,CAAC;IACN,CAAC;CACJ;AAjBD,oCAiBC"}
+{"version":3,"file":"tool.registry.js","sourceRoot":"","sources":["../../../src/mcp/tools/tool.registry.ts"],"names":[],"mappings":";;;AAEA,+CAA2C;AAC3C,6DAAwD;AACxD,uDAAkD;AAClD,uDAAkD;AAOlD,MAAa,YAAY;IACrB,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK;QACD,OAAO,CAAC,IAAI,wBAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,+BAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,qCAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,+BAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5I,CAAC;CACJ;AAND,oCAMC"}

package/dist/mcp/tools/view.describe.tool.d.ts

@@ -0,0 +1,17 @@
+import { z } from 'zod';
+import { McpToolResultInterface } from '../interfaces/mcp.tool.result.interface';
+import { McpTool } from './mcp.tool';
+type ViewDescribeInput = {
+    name: string;
+};
+export declare class ViewDescribeTool extends McpTool<ViewDescribeInput> {
+    readonly name = "view_describe";
+    readonly title = "Describe analytical view";
+    readonly description = "Full semantic schema of one analytical view: every column with its meaning (in Finnoto vocabulary), type, enum value labels, supported ops, the closed DSL grammar block (read it \u2014 do not guess operators), worked example_queries, and suggested visualizations. Call views_list first, then view_describe before writing a view_query. Column descriptions resolve domain traps; refreshed_at is freshness.";
+    readonly inputSchema: {
+        name: z.ZodString;
+    };
+    protected readonly readOnly = true;
+    execute(args: ViewDescribeInput): Promise<McpToolResultInterface>;
+}
+export {};

package/dist/mcp/tools/view.describe.tool.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ViewDescribeTool = void 0;
+const zod_1 = require("zod");
+const mcp_tool_1 = require("./mcp.tool");
+const inputSchema = {
+    name: zod_1.z.string().min(2).max(40).describe('View name from views_list, e.g. "expenses".'),
+};
+class ViewDescribeTool extends mcp_tool_1.McpTool {
+    constructor() {
+        super(...arguments);
+        this.name = 'view_describe';
+        this.title = 'Describe analytical view';
+        this.description = 'Full semantic schema of one analytical view: every column with its meaning (in Finnoto vocabulary), type, enum value labels, supported ops, the closed DSL grammar block (read it — do not guess operators), worked example_queries, and suggested visualizations. Call views_list first, then view_describe before writing a view_query. Column descriptions resolve domain traps; refreshed_at is freshness.';
+        this.inputSchema = inputSchema;
+        this.readOnly = true;
+    }
+    execute(args) {
+        return this.run(() => this.client.request({ method: 'GET', path: `v1/b/report-views/${encodeURIComponent(args.name)}` }));
+    }
+}
+exports.ViewDescribeTool = ViewDescribeTool;
+//# sourceMappingURL=view.describe.tool.js.map

package/dist/mcp/tools/view.describe.tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"view.describe.tool.js","sourceRoot":"","sources":["../../../src/mcp/tools/view.describe.tool.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,yCAAqC;AAErC,MAAM,WAAW,GAAG;IAChB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,6CAA6C,CAAC;CAC1F,CAAC;AAOF,MAAa,gBAAiB,SAAQ,kBAA0B;IAAhE;;QACa,SAAI,GAAG,eAAe,CAAC;QACvB,UAAK,GAAG,0BAA0B,CAAC;QACnC,gBAAW,GAChB,gZAAgZ,CAAC;QAC5Y,gBAAW,GAAG,WAAW,CAAC;QAChB,aAAQ,GAAG,IAAI,CAAC;IAKvC,CAAC;IAHG,OAAO,CAAC,IAAuB;QAC3B,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9H,CAAC;CACJ;AAXD,4CAWC"}

package/dist/mcp/tools/view.query.tool.d.ts

@@ -0,0 +1,75 @@
+import { z } from 'zod';
+import { McpToolResultInterface } from '../interfaces/mcp.tool.result.interface';
+import { McpTool } from './mcp.tool';
+type ViewQueryInput = {
+    name: string;
+    columns?: string[];
+    filters?: Array<{
+        column: string;
+        op: string;
+        value?: unknown;
+    }>;
+    group_by?: Array<{
+        column: string;
+        bucket?: string;
+    }>;
+    aggregates?: Array<{
+        fn: string;
+        column?: string;
+        as?: string;
+    }>;
+    sort?: Array<{
+        by: string;
+        dir?: string;
+    }>;
+    limit?: number;
+    offset?: number;
+};
+export declare class ViewQueryTool extends McpTool<ViewQueryInput> {
+    readonly name = "view_query";
+    readonly title = "Query analytical view";
+    readonly description = "Run a structured analytical query against a view: filters, group-by (including month/quarter date buckets), and aggregates (sum, count, avg, min, max). Call views_list then view_describe (read the grammar block and example_queries) before querying. Use contains (bare string, not LIKE). Relative dates: @today / @today-30d \u2014 do not compute today yourself. Enum filters accept labels. Results include format hints and refreshed_at. Not for fetching individual records \u2014 use listing tools for that.";
+    readonly inputSchema: {
+        name: z.ZodString;
+        columns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        filters: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            column: z.ZodString;
+            op: z.ZodString;
+            value: z.ZodOptional<z.ZodUnknown>;
+        }, z.core.$strip>>>;
+        group_by: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            column: z.ZodString;
+            bucket: z.ZodOptional<z.ZodEnum<{
+                year: "year";
+                week: "week";
+                day: "day";
+                month: "month";
+                quarter: "quarter";
+            }>>;
+        }, z.core.$strip>>>;
+        aggregates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            fn: z.ZodEnum<{
+                count: "count";
+                max: "max";
+                min: "min";
+                sum: "sum";
+                avg: "avg";
+                count_distinct: "count_distinct";
+            }>;
+            column: z.ZodOptional<z.ZodString>;
+            as: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+        sort: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            by: z.ZodString;
+            dir: z.ZodOptional<z.ZodEnum<{
+                asc: "asc";
+                desc: "desc";
+            }>>;
+        }, z.core.$strip>>>;
+        limit: z.ZodOptional<z.ZodNumber>;
+        offset: z.ZodOptional<z.ZodNumber>;
+    };
+    protected readonly readOnly = true;
+    execute(args: ViewQueryInput): Promise<McpToolResultInterface>;
+}
+export {};

package/dist/mcp/tools/view.query.tool.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ViewQueryTool = void 0;
+const zod_1 = require("zod");
+const mcp_tool_1 = require("./mcp.tool");
+const filterSchema = zod_1.z.object({
+    column: zod_1.z.string(),
+    op: zod_1.z
+        .string()
+        .describe('Closed grammar: eq, neq, in, not_in, gt, gte, lt, lte, between, contains, is_null, not_null. Date values may be @today or @today-30d.'),
+    value: zod_1.z.unknown().optional(),
+});
+const inputSchema = {
+    name: zod_1.z.string().min(2).max(40).describe('View name from views_list / view_describe.'),
+    columns: zod_1.z.array(zod_1.z.string()).optional().describe('Columns to return in listing mode. Omit when aggregating.'),
+    filters: zod_1.z.array(filterSchema).optional(),
+    group_by: zod_1.z
+        .array(zod_1.z.object({ column: zod_1.z.string(), bucket: zod_1.z.enum(['day', 'week', 'month', 'quarter', 'year']).optional() }))
+        .optional()
+        .describe('At most 3. bucket only on bucketable date columns.'),
+    aggregates: zod_1.z
+        .array(zod_1.z.object({
+        fn: zod_1.z.enum(['count', 'count_distinct', 'sum', 'avg', 'min', 'max']),
+        column: zod_1.z.string().optional(),
+        as: zod_1.z.string().optional(),
+    }))
+        .optional(),
+    sort: zod_1.z.array(zod_1.z.object({ by: zod_1.z.string(), dir: zod_1.z.enum(['asc', 'desc']).optional() })).optional(),
+    limit: zod_1.z.number().int().min(1).max(500).optional(),
+    offset: zod_1.z.number().int().min(0).max(10000).optional(),
+};
+class ViewQueryTool extends mcp_tool_1.McpTool {
+    constructor() {
+        super(...arguments);
+        this.name = 'view_query';
+        this.title = 'Query analytical view';
+        this.description = 'Run a structured analytical query against a view: filters, group-by (including month/quarter date buckets), and aggregates (sum, count, avg, min, max). Call views_list then view_describe (read the grammar block and example_queries) before querying. Use contains (bare string, not LIKE). Relative dates: @today / @today-30d — do not compute today yourself. Enum filters accept labels. Results include format hints and refreshed_at. Not for fetching individual records — use listing tools for that.';
+        this.inputSchema = inputSchema;
+        this.readOnly = true;
+    }
+    execute(args) {
+        const { name, ...body } = args;
+        return this.run(() => this.client.request({
+            method: 'POST',
+            path: `v1/b/report-views/${encodeURIComponent(name)}/query`,
+            body,
+        }));
+    }
+}
+exports.ViewQueryTool = ViewQueryTool;
+//# sourceMappingURL=view.query.tool.js.map

package/dist/mcp/tools/view.query.tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"view.query.tool.js","sourceRoot":"","sources":["../../../src/mcp/tools/view.query.tool.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAExB,yCAAqC;AAErC,MAAM,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;IAClB,EAAE,EAAE,OAAC;SACA,MAAM,EAAE;SACR,QAAQ,CACL,uIAAuI,CAC1I;IACL,KAAK,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG;IAChB,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,4CAA4C,CAAC;IACtF,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2DAA2D,CAAC;IAC7G,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;IACzC,QAAQ,EAAE,OAAC;SACN,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;SAC/G,QAAQ,EAAE;SACV,QAAQ,CAAC,oDAAoD,CAAC;IACnE,UAAU,EAAE,OAAC;SACR,KAAK,CACF,OAAC,CAAC,MAAM,CAAC;QACL,EAAE,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACnE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC5B,CAAC,CACL;SACA,QAAQ,EAAE;IACf,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/F,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;CACxD,CAAC;AAgBF,MAAa,aAAc,SAAQ,kBAAuB;IAA1D;;QACa,SAAI,GAAG,YAAY,CAAC;QACpB,UAAK,GAAG,uBAAuB,CAAC;QAChC,gBAAW,GAChB,kfAAkf,CAAC;QAC9e,gBAAW,GAAG,WAAW,CAAC;QAChB,aAAQ,GAAG,IAAI,CAAC;IAYvC,CAAC;IAVG,OAAO,CAAC,IAAoB;QACxB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;QAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CACjB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAChB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,QAAQ;YAC3D,IAAI;SACP,CAAC,CACL,CAAC;IACN,CAAC;CACJ;AAlBD,sCAkBC"}

package/dist/mcp/tools/views.list.tool.d.ts

@@ -0,0 +1,10 @@
+import { McpToolResultInterface } from '../interfaces/mcp.tool.result.interface';
+import { McpTool } from './mcp.tool';
+export declare class ViewsListTool extends McpTool<Record<string, never>> {
+    readonly name = "views_list";
+    readonly title = "List analytical views";
+    readonly description = "Discover the analytical views available for answering aggregate and analytical questions about your business \u2014 expenses, purchase orders, and related domains. Returns each view's name, title, what it answers, and its data grain. This is the reporting layer: prefer it over listing tools whenever the question involves totals, breakdowns, comparisons, or trends. Follow with view_describe, then view_query.";
+    readonly inputSchema: {};
+    protected readonly readOnly = true;
+    execute(): Promise<McpToolResultInterface>;
+}

package/dist/mcp/tools/views.list.tool.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ViewsListTool = void 0;
+const mcp_tool_1 = require("./mcp.tool");
+const inputSchema = {};
+class ViewsListTool extends mcp_tool_1.McpTool {
+    constructor() {
+        super(...arguments);
+        this.name = 'views_list';
+        this.title = 'List analytical views';
+        this.description = "Discover the analytical views available for answering aggregate and analytical questions about your business — expenses, purchase orders, and related domains. Returns each view's name, title, what it answers, and its data grain. This is the reporting layer: prefer it over listing tools whenever the question involves totals, breakdowns, comparisons, or trends. Follow with view_describe, then view_query.";
+        this.inputSchema = inputSchema;
+        this.readOnly = true;
+    }
+    execute() {
+        return this.run(() => this.client.request({ method: 'GET', path: 'v1/b/report-views' }));
+    }
+}
+exports.ViewsListTool = ViewsListTool;
+//# sourceMappingURL=views.list.tool.js.map

package/dist/mcp/tools/views.list.tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"views.list.tool.js","sourceRoot":"","sources":["../../../src/mcp/tools/views.list.tool.ts"],"names":[],"mappings":";;;AACA,yCAAqC;AAErC,MAAM,WAAW,GAAG,EAAE,CAAC;AAKvB,MAAa,aAAc,SAAQ,kBAA8B;IAAjE;;QACa,SAAI,GAAG,YAAY,CAAC;QACpB,UAAK,GAAG,uBAAuB,CAAC;QAChC,gBAAW,GAChB,uZAAuZ,CAAC;QACnZ,gBAAW,GAAG,WAAW,CAAC;QAChB,aAAQ,GAAG,IAAI,CAAC;IAKvC,CAAC;IAHG,OAAO;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAC7F,CAAC;CACJ;AAXD,sCAWC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@servicelabsco/slabs-access-manager",
-    "version": "1.0.68",
+    "version": "1.0.69",
     "description": "Support for application level menus and dashboards",
     "author": "Hemant Kumar Sah <hemantanshu@gmail.com>",
     "license": "MIT",
@@ -49,7 +49,7 @@
         "csv-parser": "^3.0.0",
         "date-fns": "^4.1.0",
         "exceljs": "^4.4.0",
-        "express-http-context": "^2.0.1",
+        "express-http-context2": "^1.0.0",
         "google-auth-library": "^10.6.1",
         "googleapis": "^171.4.0",
         "nestjs-command": "^3.1.5",

package/dist/accessUtility/types/bulk.upload.item.record.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"bulk.upload.item.record.js","sourceRoot":"","sources":["../../../src/accessUtility/types/bulk.upload.item.record.ts"],"names":[],"mappings":""}

package/dist/accessUtility/types/index.d.ts

@@ -1 +0,0 @@
-export * from './bulk.upload.item.record';