@taxdao/fintax-mcp 0.2.0

package/dist/errors/fintax-error.d.ts

@@ -0,0 +1,24 @@
+export type FinTaxErrorCode = 'AUTH_REQUIRED' | 'PERMISSION_DENIED' | 'VALIDATION_FAILED' | 'NOT_FOUND' | 'CONFLICT' | 'CONFIRMATION_REQUIRED' | 'RATE_LIMITED' | 'UPSTREAM_UNAVAILABLE' | 'TIMEOUT' | 'UNKNOWN';
+export interface FieldError {
+    readonly field: string;
+    readonly message: string;
+}
+export interface RecoveryAction {
+    readonly tool: string;
+    readonly input: Readonly<Record<string, unknown>>;
+}
+export interface FinTaxErrorOptions {
+    readonly retryable?: boolean;
+    readonly status?: number;
+    readonly fieldErrors?: readonly FieldError[];
+    readonly recovery?: RecoveryAction;
+    readonly cause?: unknown;
+}
+export declare class FinTaxError extends Error {
+    readonly code: FinTaxErrorCode;
+    readonly retryable: boolean;
+    readonly status?: number;
+    readonly fieldErrors: readonly FieldError[];
+    readonly recovery?: RecoveryAction;
+    constructor(code: FinTaxErrorCode, message: string, options?: FinTaxErrorOptions);
+}

package/dist/errors/fintax-error.js

@@ -0,0 +1,21 @@
+export class FinTaxError extends Error {
+    code;
+    retryable;
+    status;
+    fieldErrors;
+    recovery;
+    constructor(code, message, options = {}) {
+        super(message, { cause: options.cause });
+        this.name = 'FinTaxError';
+        this.code = code;
+        this.retryable = options.retryable ?? false;
+        this.fieldErrors = options.fieldErrors ?? [];
+        if (options.status !== undefined) {
+            this.status = options.status;
+        }
+        if (options.recovery !== undefined) {
+            this.recovery = options.recovery;
+        }
+    }
+}
+//# sourceMappingURL=fintax-error.js.map

package/dist/errors/fintax-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fintax-error.js","sourceRoot":"","sources":["../../src/errors/fintax-error.ts"],"names":[],"mappings":"AA8BA,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,CAAkB;IACtB,SAAS,CAAU;IACnB,MAAM,CAAU;IAChB,WAAW,CAAwB;IACnC,QAAQ,CAAkB;IAEnC,YACE,IAAqB,EACrB,OAAe,EACf,UAA8B,EAAE;QAEhC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAC5C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;QAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC/B,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACnC,CAAC;IACH,CAAC;CACF"}

package/dist/errors/normalize-error.d.ts

@@ -0,0 +1,3 @@
+import { FinTaxError } from './fintax-error.js';
+export declare function httpError(status: number, cause?: unknown): FinTaxError;
+export declare function normalizeError(error: unknown): FinTaxError;

package/dist/errors/normalize-error.js

@@ -0,0 +1,67 @@
+import { z } from 'zod/v4';
+import { FinTaxError } from './fintax-error.js';
+function codeForStatus(status) {
+    if (status === 401)
+        return 'AUTH_REQUIRED';
+    if (status === 403)
+        return 'PERMISSION_DENIED';
+    if (status === 404)
+        return 'NOT_FOUND';
+    if (status === 409)
+        return 'CONFLICT';
+    if (status === 429)
+        return 'RATE_LIMITED';
+    if ([502, 503, 504].includes(status))
+        return 'UPSTREAM_UNAVAILABLE';
+    if (status >= 400 && status < 500)
+        return 'VALIDATION_FAILED';
+    return 'UPSTREAM_UNAVAILABLE';
+}
+function publicMessageForStatus(status) {
+    if (status === 401)
+        return 'FinTax authentication has expired; log in again';
+    if (status === 403)
+        return 'FinTax rejected the request';
+    if (status === 404)
+        return 'The requested FinTax resource does not exist';
+    if (status === 409)
+        return 'The FinTax request conflicts with the current business state';
+    if (status === 429)
+        return 'Too many FinTax requests; retry later';
+    if (status >= 400 && status < 500)
+        return 'FinTax rejected the request';
+    return 'The FinTax service is temporarily unavailable';
+}
+export function httpError(status, cause) {
+    return new FinTaxError(codeForStatus(status), publicMessageForStatus(status), {
+        status,
+        retryable: status === 429 || [502, 503, 504].includes(status),
+        cause,
+    });
+}
+export function normalizeError(error) {
+    if (error instanceof FinTaxError)
+        return error;
+    if (error instanceof z.ZodError) {
+        return new FinTaxError('UNKNOWN', 'FinTax MCP execution failed', {
+            cause: error,
+        });
+    }
+    if (error instanceof DOMException &&
+        (error.name === 'TimeoutError' || error.name === 'AbortError')) {
+        return new FinTaxError('TIMEOUT', 'Upstream request timed out', {
+            retryable: true,
+            cause: error,
+        });
+    }
+    if (error instanceof TypeError) {
+        return new FinTaxError('UPSTREAM_UNAVAILABLE', 'Unable to connect to the FinTax service', {
+            retryable: true,
+            cause: error,
+        });
+    }
+    return new FinTaxError('UNKNOWN', 'FinTax MCP execution failed', {
+        cause: error,
+    });
+}
+//# sourceMappingURL=normalize-error.js.map

package/dist/errors/normalize-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize-error.js","sourceRoot":"","sources":["../../src/errors/normalize-error.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,OAAO,EAAE,WAAW,EAAwB,MAAM,mBAAmB,CAAC;AAEtE,SAAS,aAAa,CAAC,MAAc;IACnC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,eAAe,CAAC;IAC3C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,mBAAmB,CAAC;IAC/C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,WAAW,CAAC;IACvC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,UAAU,CAAC;IACtC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,cAAc,CAAC;IAC1C,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,sBAAsB,CAAC;IACpE,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,mBAAmB,CAAC;IAC9D,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAc;IAC5C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,iDAAiD,CAAC;IAC7E,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,6BAA6B,CAAC;IACzD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,8CAA8C,CAAC;IAC1E,IAAI,MAAM,KAAK,GAAG;QAChB,OAAO,8DAA8D,CAAC;IACxE,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,uCAAuC,CAAC;IACnE,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,6BAA6B,CAAC;IACxE,OAAO,+CAA+C,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,KAAe;IACvD,OAAO,IAAI,WAAW,CACpB,aAAa,CAAC,MAAM,CAAC,EACrB,sBAAsB,CAAC,MAAM,CAAC,EAC9B;QACE,MAAM;QACN,SAAS,EAAE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC7D,KAAK;KACN,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,YAAY,WAAW;QAAE,OAAO,KAAK,CAAC;IAE/C,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChC,OAAO,IAAI,WAAW,CAAC,SAAS,EAAE,6BAA6B,EAAE;YAC/D,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IAED,IACE,KAAK,YAAY,YAAY;QAC7B,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,EAC9D,CAAC;QACD,OAAO,IAAI,WAAW,CAAC,SAAS,EAAE,4BAA4B,EAAE;YAC9D,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;QAC/B,OAAO,IAAI,WAAW,CACpB,sBAAsB,EACtB,yCAAyC,EACzC;YACE,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,KAAK;SACb,CACF,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,WAAW,CAAC,SAAS,EAAE,6BAA6B,EAAE;QAC/D,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;AACL,CAAC"}

package/dist/files/artifact-store.d.ts

@@ -0,0 +1,17 @@
+export interface ArtifactMetadata {
+    readonly artifactId: string;
+    readonly fileName: string;
+    readonly path: string;
+    readonly size: number;
+    readonly sha256: string;
+    readonly createdAt: string;
+    readonly expiresAt: string;
+}
+export declare class ArtifactStore {
+    #private;
+    constructor(directory: string, ttlMs?: number);
+    initialize(): Promise<void>;
+    create(bytes: Uint8Array, requestedFileName: string): Promise<ArtifactMetadata>;
+    resolve(artifactId: string): Promise<ArtifactMetadata>;
+    cleanup(limit: number): Promise<number>;
+}

package/dist/files/artifact-store.js

@@ -0,0 +1,74 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { mkdir, readdir, realpath, stat, unlink, writeFile, } from 'node:fs/promises';
+import path from 'node:path';
+import { FinTaxError } from '../errors/fintax-error.js';
+export class ArtifactStore {
+    #directory;
+    #ttlMs;
+    #artifacts = new Map();
+    constructor(directory, ttlMs = 24 * 60 * 60 * 1000) {
+        this.#directory = path.resolve(directory);
+        this.#ttlMs = ttlMs;
+    }
+    async initialize() {
+        await mkdir(this.#directory, { recursive: true, mode: 0o700 });
+        await this.cleanup(100);
+    }
+    async create(bytes, requestedFileName) {
+        await this.initialize();
+        const artifactId = randomUUID();
+        const extension = path.extname(requestedFileName).toLowerCase();
+        const safeExtension = /^\.[a-z0-9]{1,10}$/.test(extension)
+            ? extension
+            : '.bin';
+        const storedFileName = `${artifactId}${safeExtension}`;
+        const artifactPath = path.join(this.#directory, storedFileName);
+        await writeFile(artifactPath, bytes, { flag: 'wx', mode: 0o600 });
+        const now = Date.now();
+        const metadata = {
+            artifactId,
+            fileName: path.basename(requestedFileName),
+            path: artifactPath,
+            size: bytes.byteLength,
+            sha256: createHash('sha256').update(bytes).digest('hex'),
+            createdAt: new Date(now).toISOString(),
+            expiresAt: new Date(now + this.#ttlMs).toISOString(),
+        };
+        this.#artifacts.set(artifactId, metadata);
+        return metadata;
+    }
+    async resolve(artifactId) {
+        const metadata = this.#artifacts.get(artifactId);
+        if (metadata === undefined ||
+            Date.parse(metadata.expiresAt) <= Date.now()) {
+            throw new FinTaxError('NOT_FOUND', 'Artifact reference does not exist or has expired');
+        }
+        const resolved = await realpath(metadata.path);
+        if (resolved !== metadata.path) {
+            throw new FinTaxError('VALIDATION_FAILED', 'Artifact reference is no longer valid');
+        }
+        const info = await stat(resolved);
+        if (!info.isFile()) {
+            throw new FinTaxError('VALIDATION_FAILED', 'Artifact reference does not point to a regular file');
+        }
+        return metadata;
+    }
+    async cleanup(limit) {
+        await mkdir(this.#directory, { recursive: true, mode: 0o700 });
+        const entries = await readdir(this.#directory, { withFileTypes: true });
+        const cutoff = Date.now() - this.#ttlMs;
+        let removed = 0;
+        for (const entry of entries) {
+            if (removed >= limit || !entry.isFile())
+                continue;
+            const candidate = path.join(this.#directory, entry.name);
+            const info = await stat(candidate);
+            if (info.mtimeMs >= cutoff)
+                continue;
+            await unlink(candidate);
+            removed += 1;
+        }
+        return removed;
+    }
+}
+//# sourceMappingURL=artifact-store.js.map

package/dist/files/artifact-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-store.js","sourceRoot":"","sources":["../../src/files/artifact-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,KAAK,EACL,OAAO,EACP,QAAQ,EACR,IAAI,EACJ,MAAM,EACN,SAAS,GACV,MAAM,kBAAkB,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAYxD,MAAM,OAAO,aAAa;IACf,UAAU,CAAS;IACnB,MAAM,CAAS;IACf,UAAU,GAAG,IAAI,GAAG,EAA4B,CAAC;IAE1D,YAAY,SAAiB,EAAE,KAAK,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;QACxD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAiB,EACjB,iBAAyB;QAEzB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,WAAW,EAAE,CAAC;QAChE,MAAM,aAAa,GAAG,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC;YACxD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC;QACX,MAAM,cAAc,GAAG,GAAG,UAAU,GAAG,aAAa,EAAE,CAAC;QACvD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAChE,MAAM,SAAS,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAElE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAqB;YACjC,UAAU;YACV,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAC1C,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,KAAK,CAAC,UAAU;YACtB,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YACxD,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;YACtC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE;SACrD,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC1C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,UAAkB;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjD,IACE,QAAQ,KAAK,SAAS;YACtB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAC5C,CAAC;YACD,MAAM,IAAI,WAAW,CACnB,WAAW,EACX,kDAAkD,CACnD,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,QAAQ,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,IAAI,WAAW,CACnB,mBAAmB,EACnB,uCAAuC,CACxC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,WAAW,CACnB,mBAAmB,EACnB,qDAAqD,CACtD,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa;QACzB,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACxC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,OAAO,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,SAAS;YAClD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;YACnC,IAAI,IAAI,CAAC,OAAO,IAAI,MAAM;gBAAE,SAAS;YACrC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC,CAAC;QACf,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/files/input-policy.d.ts

@@ -0,0 +1,28 @@
+import type { ArtifactStore } from './artifact-store.js';
+import type { RootsProvider } from './roots-provider.js';
+export interface FileReference {
+    readonly kind: 'local_path' | 'artifact' | 'upload_id';
+    readonly value: string;
+}
+export interface InspectedFileContent {
+    readonly fileName: string;
+    readonly size: number;
+    readonly extension: '.csv' | '.xls' | '.xlsx';
+    readonly mimeType: string;
+    readonly sha256: string;
+}
+export interface InspectedFile extends InspectedFileContent {
+    readonly path: string;
+}
+export declare class InputFilePolicy {
+    #private;
+    constructor(options: {
+        allowedDirectories: readonly string[];
+        maxBytes: number;
+        roots: RootsProvider;
+        artifacts: ArtifactStore;
+    });
+    inspect(reference: FileReference): Promise<InspectedFile>;
+    inspectBytes(bytes: Uint8Array, fileName: string): InspectedFileContent;
+}
+export declare function inspectImportContent(bytes: Uint8Array, fileName: string, maxBytes: number): InspectedFileContent;

package/dist/files/input-policy.js

@@ -0,0 +1,109 @@
+import { createHash } from 'node:crypto';
+import { realpath, stat } from 'node:fs/promises';
+import path from 'node:path';
+import { FinTaxError } from '../errors/fintax-error.js';
+function contains(parent, child) {
+    const relative = path.relative(parent, child);
+    return (relative === '' ||
+        (!relative.startsWith('..') && !path.isAbsolute(relative)));
+}
+export class InputFilePolicy {
+    #allowedDirectories;
+    #maxBytes;
+    #roots;
+    #artifacts;
+    constructor(options) {
+        this.#allowedDirectories = options.allowedDirectories;
+        this.#maxBytes = options.maxBytes;
+        this.#roots = options.roots;
+        this.#artifacts = options.artifacts;
+    }
+    async inspect(reference) {
+        if (reference.kind === 'artifact') {
+            const artifact = await this.#artifacts.resolve(reference.value);
+            return this.#inspectFile(artifact.path, artifact.fileName);
+        }
+        if (reference.kind === 'upload_id') {
+            throw new FinTaxError('VALIDATION_FAILED', 'upload_id cannot be resolved by the current file-input policy');
+        }
+        const clientRoots = await this.#roots.getRoots();
+        if (clientRoots.length === 0) {
+            throw new FinTaxError('PERMISSION_DENIED', 'The MCP client did not declare roots, so local paths cannot be read');
+        }
+        if (this.#allowedDirectories.length === 0) {
+            throw new FinTaxError('PERMISSION_DENIED', 'No allowed import directory is configured on the server');
+        }
+        const resolved = await realpath(reference.value).catch((error) => {
+            throw new FinTaxError('NOT_FOUND', 'Import file does not exist', {
+                cause: error,
+            });
+        });
+        const [allowed, roots] = await Promise.all([
+            Promise.all(this.#allowedDirectories.map((entry) => realpath(entry))),
+            Promise.all(clientRoots.map((entry) => realpath(entry))),
+        ]);
+        if (!allowed.some((directory) => contains(directory, resolved))) {
+            throw new FinTaxError('PERMISSION_DENIED', 'File is outside the server allowlist');
+        }
+        if (!roots.some((directory) => contains(directory, resolved))) {
+            throw new FinTaxError('PERMISSION_DENIED', 'File is outside the MCP root');
+        }
+        return this.#inspectFile(resolved);
+    }
+    inspectBytes(bytes, fileName) {
+        return inspectImportContent(bytes, fileName, this.#maxBytes);
+    }
+    async #inspectFile(filePath, displayFileName = path.basename(filePath)) {
+        const info = await stat(filePath);
+        if (!info.isFile()) {
+            throw new FinTaxError('VALIDATION_FAILED', 'Import target must be a regular file');
+        }
+        const bytes = await import('node:fs/promises').then(({ readFile }) => readFile(filePath));
+        return {
+            path: filePath,
+            ...inspectImportContent(bytes, displayFileName, this.#maxBytes),
+        };
+    }
+}
+export function inspectImportContent(bytes, fileName, maxBytes) {
+    if (bytes.byteLength === 0) {
+        throw new FinTaxError('VALIDATION_FAILED', 'Import file must not be empty');
+    }
+    if (bytes.byteLength > maxBytes) {
+        throw new FinTaxError('VALIDATION_FAILED', 'Import file exceeds the size limit');
+    }
+    const normalizedFileName = path.basename(fileName);
+    const extension = path.extname(normalizedFileName).toLowerCase();
+    if (!['.csv', '.xls', '.xlsx'].includes(extension)) {
+        throw new FinTaxError('VALIDATION_FAILED', 'Only CSV, XLS, and XLSX files are supported');
+    }
+    const header = Buffer.from(bytes.subarray(0, 8));
+    let mimeType;
+    if (extension === '.xlsx') {
+        if (header[0] !== 0x50 || header[1] !== 0x4b) {
+            throw new FinTaxError('VALIDATION_FAILED', 'Invalid XLSX file signature');
+        }
+        mimeType =
+            'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet';
+    }
+    else if (extension === '.xls') {
+        if (header.subarray(0, 4).toString('hex') !== 'd0cf11e0') {
+            throw new FinTaxError('VALIDATION_FAILED', 'Invalid XLS file signature');
+        }
+        mimeType = 'application/vnd.ms-excel';
+    }
+    else {
+        if (header.includes(0)) {
+            throw new FinTaxError('VALIDATION_FAILED', 'CSV file contains binary content');
+        }
+        mimeType = 'text/csv';
+    }
+    return {
+        fileName: normalizedFileName,
+        size: bytes.byteLength,
+        extension: extension,
+        mimeType,
+        sha256: createHash('sha256').update(bytes).digest('hex'),
+    };
+}
+//# sourceMappingURL=input-policy.js.map

package/dist/files/input-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-policy.js","sourceRoot":"","sources":["../../src/files/input-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAqBxD,SAAS,QAAQ,CAAC,MAAc,EAAE,KAAa;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,OAAO,CACL,QAAQ,KAAK,EAAE;QACf,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,eAAe;IACjB,mBAAmB,CAAoB;IACvC,SAAS,CAAS;IAClB,MAAM,CAAgB;IACtB,UAAU,CAAgB;IAEnC,YAAY,OAKX;QACC,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;QACtD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAwB;QACpC,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACnC,MAAM,IAAI,WAAW,CACnB,mBAAmB,EACnB,+DAA+D,CAChE,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACjD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,WAAW,CACnB,mBAAmB,EACnB,qEAAqE,CACtE,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,WAAW,CACnB,mBAAmB,EACnB,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,4BAA4B,EAAE;gBAC/D,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YACrE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;SACzD,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,WAAW,CACnB,mBAAmB,EACnB,sCAAsC,CACvC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,WAAW,CACnB,mBAAmB,EACnB,8BAA8B,CAC/B,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,YAAY,CAAC,KAAiB,EAAE,QAAgB;QAC9C,OAAO,oBAAoB,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,QAAgB,EAChB,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAEzC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,WAAW,CACnB,mBAAmB,EACnB,sCAAsC,CACvC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CACnE,QAAQ,CAAC,QAAQ,CAAC,CACnB,CAAC;QACF,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,GAAG,oBAAoB,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC;SAChE,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAiB,EACjB,QAAgB,EAChB,QAAgB;IAEhB,IAAI,KAAK,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,+BAA+B,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,WAAW,CACnB,mBAAmB,EACnB,oCAAoC,CACrC,CAAC;IACJ,CAAC;IAED,MAAM,kBAAkB,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,WAAW,CACnB,mBAAmB,EACnB,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAEjD,IAAI,QAAgB,CAAC;IACrB,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC7C,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,6BAA6B,CAAC,CAAC;QAC5E,CAAC;QACD,QAAQ;YACN,mEAAmE,CAAC;IACxE,CAAC;SAAM,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QAChC,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,UAAU,EAAE,CAAC;YACzD,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,4BAA4B,CAAC,CAAC;QAC3E,CAAC;QACD,QAAQ,GAAG,0BAA0B,CAAC;IACxC,CAAC;SAAM,CAAC;QACN,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,WAAW,CACnB,mBAAmB,EACnB,kCAAkC,CACnC,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,UAAU,CAAC;IACxB,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,kBAAkB;QAC5B,IAAI,EAAE,KAAK,CAAC,UAAU;QACtB,SAAS,EAAE,SAA8C;QACzD,QAAQ;QACR,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KACzD,CAAC;AACJ,CAAC"}

package/dist/files/roots-provider.d.ts

@@ -0,0 +1,14 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+export interface RootsProvider {
+    getRoots(): Promise<readonly string[]>;
+}
+export declare class StaticRootsProvider implements RootsProvider {
+    #private;
+    constructor(roots: readonly string[]);
+    getRoots(): Promise<readonly string[]>;
+}
+export declare class McpRootsProvider implements RootsProvider {
+    #private;
+    constructor(server: McpServer);
+    getRoots(): Promise<readonly string[]>;
+}

package/dist/files/roots-provider.js

@@ -0,0 +1,47 @@
+import { fileURLToPath } from 'node:url';
+import { RootsListChangedNotificationSchema } from '@modelcontextprotocol/sdk/types.js';
+export class StaticRootsProvider {
+    #roots;
+    constructor(roots) {
+        this.#roots = roots;
+    }
+    getRoots() {
+        return Promise.resolve(this.#roots);
+    }
+}
+export class McpRootsProvider {
+    #server;
+    #roots;
+    constructor(server) {
+        this.#server = server;
+        server.server.setNotificationHandler(RootsListChangedNotificationSchema, async () => {
+            this.#roots = undefined;
+            await this.getRoots();
+        });
+    }
+    async getRoots() {
+        if (this.#roots !== undefined)
+            return this.#roots;
+        if (this.#server.server.getClientCapabilities()?.roots === undefined) {
+            this.#roots = [];
+            return this.#roots;
+        }
+        try {
+            const result = await this.#server.server.listRoots();
+            this.#roots = result.roots.flatMap((root) => {
+                try {
+                    const url = new URL(root.uri);
+                    return url.protocol === 'file:' ? [fileURLToPath(url)] : [];
+                }
+                catch {
+                    return [];
+                }
+            });
+        }
+        catch {
+            this.#roots = [];
+        }
+        return this.#roots;
+    }
+}
+//# sourceMappingURL=roots-provider.js.map

package/dist/files/roots-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roots-provider.js","sourceRoot":"","sources":["../../src/files/roots-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,OAAO,EAAE,kCAAkC,EAAE,MAAM,oCAAoC,CAAC;AAMxF,MAAM,OAAO,mBAAmB;IACrB,MAAM,CAAoB;IAEnC,YAAY,KAAwB;QAClC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,QAAQ;QACN,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;CACF;AAED,MAAM,OAAO,gBAAgB;IAClB,OAAO,CAAY;IAC5B,MAAM,CAAgC;IAEtC,YAAY,MAAiB;QAC3B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAClC,kCAAkC,EAClC,KAAK,IAAI,EAAE;YACT,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACxB,CAAC,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QAClD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,qBAAqB,EAAE,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YACrE,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACrD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC1C,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAC9B,OAAO,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,49 @@
+#!/usr/bin/env node
+import { createApplication } from './app/create-server.js';
+import { loadConfig } from './config/load-config.js';
+import { createStdioTransport } from './transport/stdio.js';
+async function main() {
+    const config = loadConfig();
+    const application = createApplication({ config });
+    const server = application.server;
+    const transport = createStdioTransport();
+    let closing;
+    const close = () => {
+        if (closing !== undefined)
+            return closing;
+        closing = (async () => {
+            const timeout = setTimeout(() => {
+                process.stderr.write(`FinTax MCP shutdown timed out after ${config.FINTAX_SHUTDOWN_TIMEOUT_MS}ms\n`);
+                process.exit(1);
+            }, config.FINTAX_SHUTDOWN_TIMEOUT_MS);
+            try {
+                await application.close();
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : String(error);
+                process.stderr.write(`Failed to close fintax-mcp: ${message}\n`);
+                process.exitCode = 1;
+            }
+            finally {
+                clearTimeout(timeout);
+            }
+        })();
+        return closing;
+    };
+    for (const signal of ['SIGINT', 'SIGTERM', 'SIGHUP']) {
+        process.once(signal, () => {
+            void close();
+        });
+    }
+    process.stdin.once('end', () => {
+        void close();
+    });
+    await server.connect(transport);
+    await closing;
+}
+main().catch((error) => {
+    const message = error instanceof Error ? error.message : String(error);
+    process.stderr.write(`Failed to start fintax-mcp: ${message}\n`);
+    process.exitCode = 1;
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAG,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;IAClC,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;IACzC,IAAI,OAAkC,CAAC;IAEvC,MAAM,KAAK,GAAG,GAAkB,EAAE;QAChC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAC1C,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YACpB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uCAAuC,MAAM,CAAC,0BAA0B,MAAM,CAC/E,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC,EAAE,MAAM,CAAC,0BAA0B,CAAC,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC;YAC5B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,OAAO,IAAI,CAAC,CAAC;gBACjE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvB,CAAC;oBAAS,CAAC;gBACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAU,EAAE,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE;YACxB,KAAK,KAAK,EAAE,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE;QAC7B,KAAK,KAAK,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,OAAO,CAAC;AAChB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,OAAO,IAAI,CAAC,CAAC;IACjE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/logging/logger.d.ts

@@ -0,0 +1,3 @@
+import { type Logger } from 'pino';
+import type { RuntimeConfig } from '../config/schema.js';
+export declare function createLogger(config: RuntimeConfig): Logger;

package/dist/logging/logger.js

@@ -0,0 +1,13 @@
+import pino, {} from 'pino';
+import { redact } from '../policies/redaction.js';
+export function createLogger(config) {
+    return pino({
+        level: config.FINTAX_LOG_LEVEL,
+        base: null,
+        timestamp: pino.stdTimeFunctions.isoTime,
+        serializers: {
+            err: (error) => redact(error),
+        },
+    }, { write: (line) => process.stderr.write(line) });
+}
+//# sourceMappingURL=logger.js.map

package/dist/logging/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/logging/logger.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,EAAE,EAAe,MAAM,MAAM,CAAC;AAGzC,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAElD,MAAM,UAAU,YAAY,CAAC,MAAqB;IAChD,OAAO,IAAI,CACT;QACE,KAAK,EAAE,MAAM,CAAC,gBAAgB;QAC9B,IAAI,EAAE,IAAI;QACV,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO;QACxC,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,KAAc,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;SACvC;KACF,EACD,EAAE,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CACxD,CAAC;AACJ,CAAC"}

package/dist/policies/idempotency.d.ts

@@ -0,0 +1,32 @@
+import type { LockManager } from '../concurrency/lock-manager.js';
+import { FinTaxError } from '../errors/fintax-error.js';
+export interface IdempotencyBinding {
+    readonly tool: string;
+    readonly key: string;
+    readonly fingerprint: string;
+    readonly userId: string;
+    readonly tenantId: string;
+    readonly orgId?: string;
+    readonly recovery?: {
+        readonly tool: string;
+        readonly input: Readonly<Record<string, unknown>>;
+    };
+}
+export type IdempotencyClaim = {
+    readonly kind: 'started';
+} | {
+    readonly kind: 'replayed';
+    readonly result: unknown;
+};
+export declare class IdempotencyManager {
+    #private;
+    constructor(locks: LockManager, options?: {
+        ttlMs?: number;
+        maxEntries?: number;
+        now?: () => number;
+    });
+    begin(binding: IdempotencyBinding): Promise<IdempotencyClaim>;
+    complete(binding: IdempotencyBinding, result: unknown): Promise<void>;
+    fail(binding: IdempotencyBinding, error: FinTaxError): Promise<void>;
+    abandon(binding: IdempotencyBinding): Promise<void>;
+}