npm - @antonytm/mcp-sitecore-server - Versions diffs - 0.18.0 → 0.19.0 - Mend

@antonytm/mcp-sitecore-server 0.18.0 → 0.19.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (17) hide show

package/dist/bundle.js +114 -87
package/dist/config.d.ts +11 -1
package/dist/config.js +36 -0
package/dist/config.js.map +1 -1
package/dist/const.d.ts +1 -0
package/dist/const.js +1 -1
package/dist/const.js.map +1 -1
package/dist/server.d.ts +2 -1
package/dist/server.js +3 -32
package/dist/server.js.map +1 -1
package/dist/sse.js +27 -14
package/dist/sse.js.map +1 -1
package/dist/stdio.js +2 -1
package/dist/stdio.js.map +1 -1
package/dist/streamable-http.js +44 -36
package/dist/streamable-http.js.map +1 -1
package/package.json +10 -2

package/dist/bundle.js CHANGED Viewed

@@ -1,14 +1,17 @@
 #!/usr/bin/env node
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import fs from 'node:fs';
 import process$1 from 'node:process';
-import fs from 'fs';
-import path from 'path';
-import { fileURLToPath, URL as URL$1 } from 'url';
+import 'fs';
+import require$$0$1 from 'path';
 import 'http';
 import { randomUUID } from 'node:crypto';
 import require$$2$1 from 'statuses';
-import require$$0$1 from 'buffer';
+import require$$0$2 from 'buffer';
 import require$$1$1 from 'string_decoder';
 import contentType from 'content-type';
+import { URL as URL$1 } from 'url';
 import express from 'express';
 var util;
@@ -3979,6 +3982,7 @@ ZodNullable.create;
 objectType({
     name: stringType().default("mcp-sitecore-server"),
+    version: stringType().optional(),
     graphQL: objectType({
         endpoint: stringType().url().min(1, "endpoint is required"),
         schemas: arrayType(stringType()),
@@ -4012,6 +4016,7 @@ objectType({
         password: "b",
         serverUrl: "https://xmcloudcm.localhost/",
     }),
+    authorizationHeader: stringType().default("")
 });
 const envSchema = objectType({
     GRAPHQL_ENDPOINT: stringType().url().optional(),
@@ -4026,6 +4031,7 @@ const envSchema = objectType({
     POWERSHELL_USERNAME: stringType().optional(),
     POWERSHELL_PASSWORD: stringType().optional(),
     POWERSHELL_SERVER_URL: stringType().url().optional(),
+    AUTORIZATION_HEADER: stringType().optional(),
 });
 const envStartSchema = objectType({
     //* The transport to use for the server. Can be one of 'stdio' or 'sse'.
@@ -4041,6 +4047,35 @@ const envStartSchema = objectType({
         return "stdio";
     })
 });
+// Read package.json data
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const packagePath = path.resolve(__dirname, '..', 'package.json');
+const packageData = JSON.parse(fs.readFileSync(packagePath, 'utf8'));
+const { version, name } = packageData;
+const ENV$1 = envSchema.parse(process.env);
+const config = {
+    name: `${name} ${version}`,
+    graphQL: {
+        endpoint: ENV$1.GRAPHQL_ENDPOINT || "https://xmcloudcm.localhost/sitecore/api/graph/",
+        schemas: ENV$1.GRAPHQL_SCHEMAS ? ENV$1.GRAPHQL_SCHEMAS.split(",").map(x => x.trim()) : ["edge", "master"],
+        apiKey: ENV$1.GRAPHQL_API_KEY || "{6D3F291E-66A5-4703-887A-D549AF83D859}",
+        headers: ENV$1.GRAPHQL_HEADERS ? JSON.parse(ENV$1.GRAPHQL_HEADERS) : {},
+    },
+    itemService: {
+        domain: ENV$1.ITEM_SERVICE_DOMAIN || "sitecore",
+        username: ENV$1.ITEM_SERVICE_USERNAME || "admin",
+        password: ENV$1.ITEM_SERVICE_PASSWORD || "b",
+        serverUrl: ENV$1.ITEM_SERVICE_SERVER_URL || "https://xmcloudcm.localhost/",
+    },
+    powershell: {
+        domain: ENV$1.POWERSHELL_DOMAIN || "sitecore",
+        username: ENV$1.POWERSHELL_USERNAME || "admin",
+        password: ENV$1.POWERSHELL_PASSWORD || "b",
+        serverUrl: ENV$1.POWERSHELL_SERVER_URL || "https://xmcloudcm.localhost/",
+    },
+    authorizationHeader: ENV$1.AUTORIZATION_HEADER || "",
+};
 const LATEST_PROTOCOL_VERSION = "2025-03-26";
 const SUPPORTED_PROTOCOL_VERSIONS = [
@@ -26165,41 +26200,13 @@ async function registerAll(server, config) {
     ], server, config);
 }
-// Read package.json data
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-const packagePath = path.resolve(__dirname, '..', 'package.json');
-const packageData = JSON.parse(fs.readFileSync(packagePath, 'utf8'));
-const { version, name } = packageData;
-async function getServer() {
+async function getServer(config) {
     const server = new McpServer({
-        name: `Sitecore MCP Server: ${name}`,
+        name: `Sitecore MCP Server: ${config.name}`,
         description: "Modle Context Protocol for Sitecore",
-        version: version
+        version: config.version || "0.0.1",
     });
-    const ENV = envSchema.parse(process.env);
     // Parse the environment variables and set default values
-    const config = {
-        name: `${name} ${version}`,
-        graphQL: {
-            endpoint: ENV.GRAPHQL_ENDPOINT || "https://xmcloudcm.localhost/sitecore/api/graph/",
-            schemas: ENV.GRAPHQL_SCHEMAS ? ENV.GRAPHQL_SCHEMAS.split(",").map(x => x.trim()) : ["edge", "master"],
-            apiKey: ENV.GRAPHQL_API_KEY || "{6D3F291E-66A5-4703-887A-D549AF83D859}",
-            headers: ENV.GRAPHQL_HEADERS ? JSON.parse(ENV.GRAPHQL_HEADERS) : {},
-        },
-        itemService: {
-            domain: ENV.ITEM_SERVICE_DOMAIN || "sitecore",
-            username: ENV.ITEM_SERVICE_USERNAME || "admin",
-            password: ENV.ITEM_SERVICE_PASSWORD || "b",
-            serverUrl: ENV.ITEM_SERVICE_SERVER_URL || "https://xmcloudcm.localhost/",
-        },
-        powershell: {
-            domain: ENV.POWERSHELL_DOMAIN || "sitecore",
-            username: ENV.POWERSHELL_USERNAME || "admin",
-            password: ENV.POWERSHELL_PASSWORD || "b",
-            serverUrl: ENV.POWERSHELL_SERVER_URL || "https://xmcloudcm.localhost/",
-        },
-    };
     server.resource("config", "config://main", async (uri) => {
         return {
             contents: [{
@@ -26223,7 +26230,7 @@ async function getServer() {
 }
 async function startSTDIO() {
-    const server = await getServer();
+    const server = await getServer(config);
     const transport = new StdioServerTransport();
     await server.connect(transport);
 }
@@ -26425,7 +26432,7 @@ function requireDepd () {
 	 * Module dependencies.
 	 */
-	var relative = path.relative;
+	var relative = require$$0$1.relative;
 	/**
 	 * Module exports.
@@ -27386,7 +27393,7 @@ function requireSafer () {
 	if (hasRequiredSafer) return safer_1;
 	hasRequiredSafer = 1;
-	var buffer = require$$0$1;
+	var buffer = require$$0$2;
 	var Buffer = buffer.Buffer;
 	var safer = {};
@@ -39238,28 +39245,42 @@ class SSEServerTransport {
     }
 }
+const authorizationHeaderName = "Authorization";
 async function startSSE() {
-    const server = await getServer();
+    const server = await getServer(config);
     const app = express();
     // to support multiple simultaneous connections we have a lookup object from
     // sessionId to transport
     const transports = {};
-    app.get("/sse", async (_, res) => {
-        const transport = new SSEServerTransport('/messages', res);
-        transports[transport.sessionId] = transport;
-        res.on("close", () => {
-            delete transports[transport.sessionId];
-        });
-        await server.connect(transport);
+    app.get("/sse", async (req, res) => {
+        if (config.authorizationHeader === ""
+            || config.authorizationHeader === req.headers[authorizationHeaderName]) {
+            const transport = new SSEServerTransport('/messages', res);
+            transports[transport.sessionId] = transport;
+            res.on("close", () => {
+                delete transports[transport.sessionId];
+            });
+            await server.connect(transport);
+        }
+        else {
+            res.status(401).send('Unauthorized');
+        }
     });
     app.post("/messages", async (req, res) => {
-        const sessionId = req.query.sessionId;
-        const transport = transports[sessionId];
-        if (transport) {
-            await transport.handlePostMessage(req, res);
+        if (config.authorizationHeader === ""
+            || config.authorizationHeader === req.headers[authorizationHeaderName]) {
+            const sessionId = req.query.sessionId;
+            const transport = transports[sessionId];
+            if (transport) {
+                await transport.handlePostMessage(req, res);
+            }
+            else {
+                res.status(400).send('No transport found for sessionId');
+            }
         }
         else {
-            res.status(400).send('No transport found for sessionId');
+            res.status(401).send('Unauthorized');
         }
     });
     app.listen(3001);
@@ -39800,45 +39821,51 @@ function startStreamableHTTP() {
     const transports = {};
     // Handle POST requests for client-to-server communication
     app.post('/mcp', async (req, res) => {
-        // Check for existing session ID
-        const sessionId = req.headers['mcp-session-id'];
-        let transport;
-        if (sessionId && transports[sessionId]) {
-            // Reuse existing transport
-            transport = transports[sessionId];
-        }
-        else if (!sessionId && isInitializeRequest(req.body)) {
-            // New initialization request
-            transport = new StreamableHTTPServerTransport({
-                sessionIdGenerator: () => generateUUID(),
-                onsessioninitialized: (sessionId) => {
-                    // Store the transport by session ID
-                    transports[sessionId] = transport;
-                }
-            });
-            // Clean up transport when closed
-            transport.onclose = () => {
-                if (transport.sessionId) {
-                    delete transports[transport.sessionId];
-                }
-            };
-            const server = await getServer();
-            await server.connect(transport);
+        if (config.authorizationHeader === "" ||
+            config.authorizationHeader === req.headers[authorizationHeaderName]) {
+            // Check for existing session ID
+            const sessionId = req.headers['mcp-session-id'];
+            let transport;
+            if (sessionId && transports[sessionId]) {
+                // Reuse existing transport
+                transport = transports[sessionId];
+            }
+            else if (!sessionId && isInitializeRequest(req.body)) {
+                // New initialization request
+                transport = new StreamableHTTPServerTransport({
+                    sessionIdGenerator: () => generateUUID(),
+                    onsessioninitialized: (sessionId) => {
+                        // Store the transport by session ID
+                        transports[sessionId] = transport;
+                    }
+                });
+                // Clean up transport when closed
+                transport.onclose = () => {
+                    if (transport.sessionId) {
+                        delete transports[transport.sessionId];
+                    }
+                };
+                const server = await getServer(config);
+                await server.connect(transport);
+            }
+            else {
+                // Invalid request
+                res.status(400).json({
+                    jsonrpc: '2.0',
+                    error: {
+                        code: -32e3,
+                        message: 'Bad Request: No valid session ID provided',
+                    },
+                    id: null,
+                });
+                return;
+            }
+            // Handle the request
+            await transport.handleRequest(req, res, req.body);
         }
         else {
-            // Invalid request
-            res.status(400).json({
-                jsonrpc: '2.0',
-                error: {
-                    code: -32e3,
-                    message: 'Bad Request: No valid session ID provided',
-                },
-                id: null,
-            });
-            return;
+            res.status(401).send('Unauthorized');
         }
-        // Handle the request
-        await transport.handleRequest(req, res, req.body);
     });
     // Reusable handler for GET and DELETE requests
     const handleSessionRequest = async (req, res) => {

package/dist/config.d.ts CHANGED Viewed

@@ -1,6 +1,7 @@
 import { z } from "zod";
 declare const ConfigSchema: z.ZodObject<{
     name: z.ZodDefault<z.ZodString>;
+    version: z.ZodOptional<z.ZodString>;
     graphQL: z.ZodDefault<z.ZodObject<{
         endpoint: z.ZodString;
         schemas: z.ZodArray<z.ZodString, "many">;
@@ -49,6 +50,7 @@ declare const ConfigSchema: z.ZodObject<{
         password: string;
         serverUrl: string;
     }>>;
+    authorizationHeader: z.ZodDefault<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     name: string;
     graphQL: {
@@ -69,8 +71,11 @@ declare const ConfigSchema: z.ZodObject<{
         password: string;
         serverUrl: string;
     };
+    authorizationHeader: string;
+    version?: string | undefined;
 }, {
     name?: string | undefined;
+    version?: string | undefined;
     graphQL?: {
         endpoint: string;
         schemas: string[];
@@ -89,6 +94,7 @@ declare const ConfigSchema: z.ZodObject<{
         password: string;
         serverUrl: string;
     } | undefined;
+    authorizationHeader?: string | undefined;
 }>;
 export declare const envSchema: z.ZodObject<{
     GRAPHQL_ENDPOINT: z.ZodOptional<z.ZodString>;
@@ -103,6 +109,7 @@ export declare const envSchema: z.ZodObject<{
     POWERSHELL_USERNAME: z.ZodOptional<z.ZodString>;
     POWERSHELL_PASSWORD: z.ZodOptional<z.ZodString>;
     POWERSHELL_SERVER_URL: z.ZodOptional<z.ZodString>;
+    AUTORIZATION_HEADER: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     GRAPHQL_ENDPOINT?: string | undefined;
     GRAPHQL_SCHEMAS?: string | undefined;
@@ -116,6 +123,7 @@ export declare const envSchema: z.ZodObject<{
     POWERSHELL_USERNAME?: string | undefined;
     POWERSHELL_PASSWORD?: string | undefined;
     POWERSHELL_SERVER_URL?: string | undefined;
+    AUTORIZATION_HEADER?: string | undefined;
 }, {
     GRAPHQL_ENDPOINT?: string | undefined;
     GRAPHQL_SCHEMAS?: string | undefined;
@@ -129,6 +137,7 @@ export declare const envSchema: z.ZodObject<{
     POWERSHELL_USERNAME?: string | undefined;
     POWERSHELL_PASSWORD?: string | undefined;
     POWERSHELL_SERVER_URL?: string | undefined;
+    AUTORIZATION_HEADER?: string | undefined;
 }>;
 export declare const envStartSchema: z.ZodObject<{
     TRANSPORT: z.ZodEffects<z.ZodOptional<z.ZodDefault<z.ZodString>>, "stdio" | "sse" | "streamable-http", string | undefined>;
@@ -140,4 +149,5 @@ export declare const envStartSchema: z.ZodObject<{
 export type Config = z.infer<typeof ConfigSchema>;
 export type EnvConfig = z.infer<typeof envSchema>;
 export type EnvStartConfig = z.infer<typeof envStartSchema>;
-export {};
+declare const config: Config;
+export { config };

package/dist/config.js CHANGED Viewed

@@ -1,6 +1,10 @@
+import path from "node:path";
+import { fileURLToPath } from "node:url";
 import { z } from "zod";
+import fs from "node:fs";
 const ConfigSchema = z.object({
     name: z.string().default("mcp-sitecore-server"),
+    version: z.string().optional(),
     graphQL: z.object({
         endpoint: z.string().url().min(1, "endpoint is required"),
         schemas: z.array(z.string()),
@@ -34,6 +38,7 @@ const ConfigSchema = z.object({
         password: "b",
         serverUrl: "https://xmcloudcm.localhost/",
     }),
+    authorizationHeader: z.string().default("")
 });
 export const envSchema = z.object({
     GRAPHQL_ENDPOINT: z.string().url().optional(),
@@ -48,6 +53,7 @@ export const envSchema = z.object({
     POWERSHELL_USERNAME: z.string().optional(),
     POWERSHELL_PASSWORD: z.string().optional(),
     POWERSHELL_SERVER_URL: z.string().url().optional(),
+    AUTORIZATION_HEADER: z.string().optional(),
 });
 export const envStartSchema = z.object({
     //* The transport to use for the server. Can be one of 'stdio' or 'sse'.
@@ -63,4 +69,34 @@ export const envStartSchema = z.object({
         return "stdio";
     })
 });
+// Read package.json data
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const packagePath = path.resolve(__dirname, '..', 'package.json');
+const packageData = JSON.parse(fs.readFileSync(packagePath, 'utf8'));
+const { version, name } = packageData;
+const ENV = envSchema.parse(process.env);
+const config = {
+    name: `${name} ${version}`,
+    graphQL: {
+        endpoint: ENV.GRAPHQL_ENDPOINT || "https://xmcloudcm.localhost/sitecore/api/graph/",
+        schemas: ENV.GRAPHQL_SCHEMAS ? ENV.GRAPHQL_SCHEMAS.split(",").map(x => x.trim()) : ["edge", "master"],
+        apiKey: ENV.GRAPHQL_API_KEY || "{6D3F291E-66A5-4703-887A-D549AF83D859}",
+        headers: ENV.GRAPHQL_HEADERS ? JSON.parse(ENV.GRAPHQL_HEADERS) : {},
+    },
+    itemService: {
+        domain: ENV.ITEM_SERVICE_DOMAIN || "sitecore",
+        username: ENV.ITEM_SERVICE_USERNAME || "admin",
+        password: ENV.ITEM_SERVICE_PASSWORD || "b",
+        serverUrl: ENV.ITEM_SERVICE_SERVER_URL || "https://xmcloudcm.localhost/",
+    },
+    powershell: {
+        domain: ENV.POWERSHELL_DOMAIN || "sitecore",
+        username: ENV.POWERSHELL_USERNAME || "admin",
+        password: ENV.POWERSHELL_PASSWORD || "b",
+        serverUrl: ENV.POWERSHELL_SERVER_URL || "https://xmcloudcm.localhost/",
+    },
+    authorizationHeader: ENV.AUTORIZATION_HEADER || "",
+};
+export { config };
 //# sourceMappingURL=config.js.map

package/dist/config.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;~~AAExB~~,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC;QACzD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACvD,CAAC,CAAC,OAAO,CAAC;QACP,QAAQ,EAAE,iDAAiD;QAC3D,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;QAC3B,MAAM,EAAE,wCAAwC;QAChD,OAAO,EAAE,EAAE;KACd,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;KAC9B,CAAC,CAAC,OAAO,CAAC;QACP,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,GAAG;QACb,SAAS,EAAE,8BAA8B;KAC5C,CAAC;IACF,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;KAC9B,CAAC,CAAC,OAAO,CAAC;QACP,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,GAAG;QACb,SAAS,EAAE,8BAA8B;KAC5C,CAAC;~~CACL~~,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;~~CACrD~~,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,wEAAwE;IACxE,6CAA6C;IAC7C,iDAAiD;IACjD,yEAAyE;IACzE,yCAAyC;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE;QAChE,IAAI,GAAG,EAAE,WAAW,EAAE,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,GAAG,EAAE,WAAW,EAAE,KAAK,iBAAiB;YAAE,OAAO,iBAAiB,CAAC;QACvE,OAAO,OAAO,CAAC;IACnB,CAAC,CAAC;CACL,CAAC,CAAC"}
1	+ {"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,qBAAqB,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC;QACzD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;KACvD,CAAC,CAAC,OAAO,CAAC;QACP,QAAQ,EAAE,iDAAiD;QAC3D,OAAO,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;QAC3B,MAAM,EAAE,wCAAwC;QAChD,OAAO,EAAE,EAAE;KACd,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;KAC9B,CAAC,CAAC,OAAO,CAAC;QACP,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,GAAG;QACb,SAAS,EAAE,8BAA8B;KAC5C,CAAC;IACF,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;QAClB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;KAC9B,CAAC,CAAC,OAAO,CAAC;QACP,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,GAAG;QACb,SAAS,EAAE,8BAA8B;KAC5C,CAAC;IACF,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CAC9C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC7C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5C,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAClD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,wEAAwE;IACxE,6CAA6C;IAC7C,iDAAiD;IACjD,yEAAyE;IACzE,yCAAyC;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE;QAChE,IAAI,GAAG,EAAE,WAAW,EAAE,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,GAAG,EAAE,WAAW,EAAE,KAAK,iBAAiB;YAAE,OAAO,iBAAiB,CAAC;QACvE,OAAO,OAAO,CAAC;IACnB,CAAC,CAAC;CACL,CAAC,CAAC;AAMH,yBAAyB;AACzB,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;AAClE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AACrE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC;AAEtC,MAAM,GAAG,GAAc,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACpD,MAAM,MAAM,GAAW;IACnB,IAAI,EAAE,GAAG,IAAI,IAAI,OAAO,EAAE;IAC1B,OAAO,EAAE;QACL,QAAQ,EAAE,GAAG,CAAC,gBAAgB,IAAI,iDAAiD;QACnF,OAAO,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC;QACrG,MAAM,EAAE,GAAG,CAAC,eAAe,IAAI,wCAAwC;QACvE,OAAO,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE;KACtE;IACD,WAAW,EAAE;QACT,MAAM,EAAE,GAAG,CAAC,mBAAmB,IAAI,UAAU;QAC7C,QAAQ,EAAE,GAAG,CAAC,qBAAqB,IAAI,OAAO;QAC9C,QAAQ,EAAE,GAAG,CAAC,qBAAqB,IAAI,GAAG;QAC1C,SAAS,EAAE,GAAG,CAAC,uBAAuB,IAAI,8BAA8B;KAC3E;IACD,UAAU,EAAE;QACR,MAAM,EAAE,GAAG,CAAC,iBAAiB,IAAI,UAAU;QAC3C,QAAQ,EAAE,GAAG,CAAC,mBAAmB,IAAI,OAAO;QAC5C,QAAQ,EAAE,GAAG,CAAC,mBAAmB,IAAI,GAAG;QACxC,SAAS,EAAE,GAAG,CAAC,qBAAqB,IAAI,8BAA8B;KACzE;IACD,mBAAmB,EAAE,GAAG,CAAC,mBAAmB,IAAI,EAAE;CACrD,CAAC;AAEF,OAAO,EAAE,MAAM,EAAE,CAAC"}

package/dist/const.d.ts CHANGED Viewed

	@@ -0,0 +1 @@
1	+ export declare const authorizationHeaderName = "Authorization";

package/dist/const.js CHANGED Viewed

@@ -1,2 +1,2 @@
-"use strict";
+export const authorizationHeaderName = "Authorization";
 //# sourceMappingURL=const.js.map

package/dist/const.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"const.js","sourceRoot":"","sources":["../src/const.ts"],"names":[],"mappings":""}
1	+ {"version":3,"file":"const.js","sourceRoot":"","sources":["../src/const.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,uBAAuB,GAAG,eAAe,CAAC"}

package/dist/server.d.ts CHANGED Viewed

@@ -1,2 +1,3 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-export declare function getServer(): Promise<McpServer>;
+import { type Config } from "./config.js";
+export declare function getServer(config: Config): Promise<McpServer>;

package/dist/server.js CHANGED Viewed

@@ -2,43 +2,14 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { envSchema } from "./config.js";
 import fs from 'fs';
 import path from 'path';
-import { fileURLToPath } from 'url';
 import { registerAll } from "./register.js";
-// Read package.json data
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-const packagePath = path.resolve(__dirname, '..', 'package.json');
-const packageData = JSON.parse(fs.readFileSync(packagePath, 'utf8'));
-const { version, name } = packageData;
-export async function getServer() {
+export async function getServer(config) {
     const server = new McpServer({
-        name: `Sitecore MCP Server: ${name}`,
+        name: `Sitecore MCP Server: ${config.name}`,
         description: "Modle Context Protocol for Sitecore",
-        version: version
+        version: config.version || "0.0.1",
     });
-    const ENV = envSchema.parse(process.env);
     // Parse the environment variables and set default values
-    const config = {
-        name: `${name} ${version}`,
-        graphQL: {
-            endpoint: ENV.GRAPHQL_ENDPOINT || "https://xmcloudcm.localhost/sitecore/api/graph/",
-            schemas: ENV.GRAPHQL_SCHEMAS ? ENV.GRAPHQL_SCHEMAS.split(",").map(x => x.trim()) : ["edge", "master"],
-            apiKey: ENV.GRAPHQL_API_KEY || "{6D3F291E-66A5-4703-887A-D549AF83D859}",
-            headers: ENV.GRAPHQL_HEADERS ? JSON.parse(ENV.GRAPHQL_HEADERS) : {},
-        },
-        itemService: {
-            domain: ENV.ITEM_SERVICE_DOMAIN || "sitecore",
-            username: ENV.ITEM_SERVICE_USERNAME || "admin",
-            password: ENV.ITEM_SERVICE_PASSWORD || "b",
-            serverUrl: ENV.ITEM_SERVICE_SERVER_URL || "https://xmcloudcm.localhost/",
-        },
-        powershell: {
-            domain: ENV.POWERSHELL_DOMAIN || "sitecore",
-            username: ENV.POWERSHELL_USERNAME || "admin",
-            password: ENV.POWERSHELL_PASSWORD || "b",
-            serverUrl: ENV.POWERSHELL_SERVER_URL || "https://xmcloudcm.localhost/",
-        },
-    };
     server.resource("config", "config://main", async (uri) => {
         return {
             contents: [{

package/dist/server.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,SAAS,EAA+B,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,~~aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,~~WAAW,EAAE,MAAM,eAAe,CAAC;~~AAE5C~~,~~yBAAyB;AACzB,~~MAAM,~~UAAU,GAAG,aAAa,~~CAAC,~~MAAM~~,~~CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,~~UAAU,~~CAAC,CAAC;AAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,~~SAAS,~~EAAE,IAAI,EAAE,cAAc,~~CAAC,~~CAAC~~;~~AAClE~~,MAAM,~~WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,~~MAAM,~~CAAC,CAAC,CAAC;AACrE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,~~GAAG,~~WAAW,CAAC;AAEtC,MAAM,CAAC,KAAK,UAAU,SAAS;IAC3B,MAAM,MAAM,GAAG,~~IAAI,SAAS,CAAC;QACzB,IAAI,EAAE,wBAAwB,~~IAAI,EAAE;QACpC,WAAW,EAAE,qCAAqC;QAClD,OAAO,EAAE,OAAO;KACnB,CAAC,CAAC;IAEH,~~MAAM,~~GAAG,GAAc,SAAS,~~CAAC,~~KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEpD,yDAAyD;IACzD,MAAM,MAAM,GAAW;QACnB,~~IAAI,EAAE~~,GAAG,IAAI,IAAI,OAAO,EAAE~~;~~QAC1B~~,~~OAAO~~,EAAE~~;YACL~~,~~QAAQ,EAAE,GAAG,CAAC,gBAAgB,IAAI,iDAAiD~~;~~YACnF~~,OAAO,EAAE,~~GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,~~MAAM,~~EAAE,QAAQ,~~CAAC~~;YACrG~~,~~MAAM,EAAE,GAAG,CAAC,eAAe,IAAI,wCAAwC;YACvE,~~OAAO,~~EAAE,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,~~IAAI,~~CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE;SACtE;QACD,WAAW,EAAE;YACT,MAAM,EAAE,GAAG,CAAC,mBAAmB,IAAI,UAAU;YAC7C,QAAQ,EAAE,GAAG,CAAC,qBAAqB,IAAI,~~OAAO;~~YAC9C~~,~~QAAQ,EAAE,GAAG,~~CAAC,~~qBAAqB,IAAI,GAAG;YAC1C,SAAS,EAAE,GAAG,~~CAAC~~,uBAAuB,IAAI,8BAA8B~~;~~SAC3E;QACD~~,~~UAAU,EAAE~~;~~YACR~~,MAAM,~~EAAE,GAAG,~~CAAC,~~iBAAiB,IAAI,UAAU;YAC3C,~~QAAQ,~~EAAE,GAAG,CAAC,mBAAmB,IAAI,OAAO;YAC5C,QAAQ,EAAE,GAAG,CAAC,mBAAmB,IAAI,GAAG;YACxC,SAAS,EAAE,GAAG,CAAC,qBAAqB,IAAI,8BAA8B;SACzE;KACJ,CAAC;IAEF,MAAM,CAAC,QAAQ,~~CACX,QAAQ,EACR,eAAe,EACf,KAAK,EAAE,GAAG,EAAE,EAAE;QACV,OAAO;YACH,QAAQ,EAAE,CAAC;oBACP,GAAG,EAAE,GAAG,CAAC,IAAI;oBACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;iBACxC,CAAC;SACL,CAAA;IACL,CAAC,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACP,QAAQ,EACR,sDAAsD,EACtD,EAAE,EACF,KAAK,EAAE,MAAM,EAAE,EAAE;QACb,OAAO;YACH,OAAO,EAAE;gBACL;oBACI,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;iBACxC;aACJ;SACJ,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAElC,OAAO,MAAM,CAAC;AAClB,CAAC"}
1	+ {"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,SAAS,EAA+B,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAI5C,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAc;IAC1C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QACzB,IAAI,EAAE,wBAAwB,MAAM,CAAC,IAAI,EAAE;QAC3C,WAAW,EAAE,qCAAqC;QAClD,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,OAAO;KACrC,CAAC,CAAC;IAEH,yDAAyD;IAEzD,MAAM,CAAC,QAAQ,CACX,QAAQ,EACR,eAAe,EACf,KAAK,EAAE,GAAG,EAAE,EAAE;QACV,OAAO;YACH,QAAQ,EAAE,CAAC;oBACP,GAAG,EAAE,GAAG,CAAC,IAAI;oBACb,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;iBACxC,CAAC;SACL,CAAA;IACL,CAAC,CACJ,CAAC;IAEF,MAAM,CAAC,IAAI,CACP,QAAQ,EACR,sDAAsD,EACtD,EAAE,EACF,KAAK,EAAE,MAAM,EAAE,EAAE;QACb,OAAO;YACH,OAAO,EAAE;gBACL;oBACI,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;iBACxC;aACJ;SACJ,CAAC;IACN,CAAC,CACJ,CAAC;IAEF,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAElC,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/sse.js CHANGED Viewed

@@ -1,29 +1,42 @@
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { SSEServerTransport } from "@modelcontextprotocol/sdk/server/sse.js";
 import express from "express";
 import { getServer } from "./server.js";
+import { config } from "./config.js";
+import { authorizationHeaderName } from "./const.js";
 export async function startSSE() {
-    const server = await getServer();
+    const server = await getServer(config);
     const app = express();
     // to support multiple simultaneous connections we have a lookup object from
     // sessionId to transport
     const transports = {};
-    app.get("/sse", async (_, res) => {
-        const transport = new SSEServerTransport('/messages', res);
-        transports[transport.sessionId] = transport;
-        res.on("close", () => {
-            delete transports[transport.sessionId];
-        });
-        await server.connect(transport);
+    app.get("/sse", async (req, res) => {
+        if (config.authorizationHeader === ""
+            || config.authorizationHeader === req.headers[authorizationHeaderName]) {
+            const transport = new SSEServerTransport('/messages', res);
+            transports[transport.sessionId] = transport;
+            res.on("close", () => {
+                delete transports[transport.sessionId];
+            });
+            await server.connect(transport);
+        }
+        else {
+            res.status(401).send('Unauthorized');
+        }
     });
     app.post("/messages", async (req, res) => {
-        const sessionId = req.query.sessionId;
-        const transport = transports[sessionId];
-        if (transport) {
-            await transport.handlePostMessage(req, res);
+        if (config.authorizationHeader === ""
+            || config.authorizationHeader === req.headers[authorizationHeaderName]) {
+            const sessionId = req.query.sessionId;
+            const transport = transports[sessionId];
+            if (transport) {
+                await transport.handlePostMessage(req, res);
+            }
+            else {
+                res.status(400).send('No transport found for sessionId');
+            }
         }
         else {
-            res.status(400).send('No transport found for sessionId');
+            res.status(401).send('Unauthorized');
         }
     });
     app.listen(3001);

package/dist/sse.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"sse.js","sourceRoot":"","sources":["../src/sse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,~~SAAS~~,EAAE,MAAM,yCAAyC,CAAC;~~AACpE~~,OAAO,EAAE,~~kBAAkB~~,EAAE,MAAM,~~yCAAyC~~,CAAC;~~AAC7E~~,OAAO,~~OAAO~~,MAAM,~~SAAS~~,CAAC;~~AAG9B~~,OAAO,EAAE,~~SAAS~~,EAAE,MAAM,~~aAAa~~,CAAC;~~AAExC~~,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,MAAM,GAAG,MAAM,SAAS,~~EAAE~~,CAAC;~~IAEjC~~,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,4EAA4E;IAC5E,yBAAyB;IACzB,MAAM,UAAU,GAAgD,EAAE,CAAC;IAEnE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,~~CAAU~~,EAAE,GAAa,EAAE,EAAE;~~QAClD~~,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;~~QAC3D~~,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;~~QAC5C~~,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;~~YACnB~~,OAAO,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;~~QACzC~~,CAAC,CAAC,CAAC;~~QACH~~,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;~~IAClC~~,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC1D,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,SAAmB,CAAC;~~QAChD~~,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;~~QACxC~~,IAAI,SAAS,EAAE,CAAC;~~YACd~~,MAAM,SAAS,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;~~QAC9C~~,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,~~kCAAkC~~,CAAC,CAAC;~~QAC3D~~,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC"}
1	+ {"version":3,"file":"sse.js","sourceRoot":"","sources":["../src/sse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,OAAO,MAAM,SAAS,CAAC;AAG9B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IAEvC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IAEtB,4EAA4E;IAC5E,yBAAyB;IACzB,MAAM,UAAU,GAAgD,EAAE,CAAC;IAEnE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAEpD,IAAI,MAAM,CAAC,mBAAmB,KAAK,EAAE;eAChC,MAAM,CAAC,mBAAmB,KAAK,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC;YACzE,MAAM,SAAS,GAAG,IAAI,kBAAkB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YAC3D,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;YAC5C,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACnB,OAAO,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACzC,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC1D,IAAI,MAAM,CAAC,mBAAmB,KAAK,EAAE;eAChC,MAAM,CAAC,mBAAmB,KAAK,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC;YACzE,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,SAAmB,CAAC;YAChD,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;YACxC,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,SAAS,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC"}

package/dist/stdio.js CHANGED Viewed

@@ -1,7 +1,8 @@
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { getServer } from './server.js';
+import { config } from './config.js';
 export async function startSTDIO() {
-    const server = await getServer();
+    const server = await getServer(config);
     const transport = new StdioServerTransport();
     await server.connect(transport);
 }

package/dist/stdio.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"stdio.js","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,MAAM,CAAC,KAAK,UAAU,UAAU;IAC5B,MAAM,MAAM,GAAG,MAAM,SAAS,~~EAAE~~,CAAC;~~IACjC~~,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACpC,CAAC"}
1	+ {"version":3,"file":"stdio.js","sourceRoot":"","sources":["../src/stdio.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,MAAM,CAAC,KAAK,UAAU,UAAU;IAC5B,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACpC,CAAC"}

package/dist/streamable-http.js CHANGED Viewed

@@ -3,6 +3,8 @@ import { generateUUID } from "./utils.js";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
 import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
 import { getServer } from "./server.js";
+import { config } from "./config.js";
+import { authorizationHeaderName } from "./const.js";
 export function startStreamableHTTP() {
     const app = express();
     app.use(express.json());
@@ -10,45 +12,51 @@ export function startStreamableHTTP() {
     const transports = {};
     // Handle POST requests for client-to-server communication
     app.post('/mcp', async (req, res) => {
-        // Check for existing session ID
-        const sessionId = req.headers['mcp-session-id'];
-        let transport;
-        if (sessionId && transports[sessionId]) {
-            // Reuse existing transport
-            transport = transports[sessionId];
-        }
-        else if (!sessionId && isInitializeRequest(req.body)) {
-            // New initialization request
-            transport = new StreamableHTTPServerTransport({
-                sessionIdGenerator: () => generateUUID(),
-                onsessioninitialized: (sessionId) => {
-                    // Store the transport by session ID
-                    transports[sessionId] = transport;
-                }
-            });
-            // Clean up transport when closed
-            transport.onclose = () => {
-                if (transport.sessionId) {
-                    delete transports[transport.sessionId];
-                }
-            };
-            const server = await getServer();
-            await server.connect(transport);
+        if (config.authorizationHeader === "" ||
+            config.authorizationHeader === req.headers[authorizationHeaderName]) {
+            // Check for existing session ID
+            const sessionId = req.headers['mcp-session-id'];
+            let transport;
+            if (sessionId && transports[sessionId]) {
+                // Reuse existing transport
+                transport = transports[sessionId];
+            }
+            else if (!sessionId && isInitializeRequest(req.body)) {
+                // New initialization request
+                transport = new StreamableHTTPServerTransport({
+                    sessionIdGenerator: () => generateUUID(),
+                    onsessioninitialized: (sessionId) => {
+                        // Store the transport by session ID
+                        transports[sessionId] = transport;
+                    }
+                });
+                // Clean up transport when closed
+                transport.onclose = () => {
+                    if (transport.sessionId) {
+                        delete transports[transport.sessionId];
+                    }
+                };
+                const server = await getServer(config);
+                await server.connect(transport);
+            }
+            else {
+                // Invalid request
+                res.status(400).json({
+                    jsonrpc: '2.0',
+                    error: {
+                        code: -32000,
+                        message: 'Bad Request: No valid session ID provided',
+                    },
+                    id: null,
+                });
+                return;
+            }
+            // Handle the request
+            await transport.handleRequest(req, res, req.body);
         }
         else {
-            // Invalid request
-            res.status(400).json({
-                jsonrpc: '2.0',
-                error: {
-                    code: -32000,
-                    message: 'Bad Request: No valid session ID provided',
-                },
-                id: null,
-            });
-            return;
+            res.status(401).send('Unauthorized');
         }
-        // Handle the request
-        await transport.handleRequest(req, res, req.body);
     });
     // Reusable handler for GET and DELETE requests
     const handleSessionRequest = async (req, res) => {

package/dist/streamable-http.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"streamable-http.js","sourceRoot":"","sources":["../src/streamable-http.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;~~AAExC~~,MAAM,UAAU,mBAAmB;IAC/B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAExB,wCAAwC;IACxC,MAAM,UAAU,GAA2D,EAAE,CAAC;IAE9E,0DAA0D;IAC1D,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChC,gCAAgC;~~QAChC~~,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;~~QACtE~~,IAAI,SAAwC,CAAC;~~QAE7C~~,IAAI,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;~~YACrC~~,2BAA2B;~~YAC3B~~,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;~~QACtC~~,CAAC;~~aAAM~~,IAAI,CAAC,SAAS,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;~~YACrD~~,6BAA6B;~~YAC7B~~,SAAS,GAAG,IAAI,6BAA6B,CAAC;~~gBAC1C~~,kBAAkB,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE;~~gBACxC~~,oBAAoB,EAAE,CAAC,SAAS,EAAE,EAAE;~~oBAChC~~,oCAAoC;~~oBACpC~~,UAAU,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;~~gBACtC~~,CAAC;~~aACJ~~,CAAC,CAAC;~~YAEH~~,iCAAiC;~~YACjC~~,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;~~gBACrB~~,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;~~oBACtB~~,OAAO,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;~~gBAC3C~~,CAAC;~~YACL~~,CAAC,CAAC;~~YACF~~,MAAM,MAAM,GAAG,MAAM,SAAS,~~EAAE~~,CAAC;~~YAEjC~~,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;~~QACpC~~,CAAC;~~aAAM~~,CAAC;~~YACJ~~,kBAAkB;~~YAClB~~,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;~~gBACjB~~,OAAO,EAAE,KAAK;~~gBACd~~,KAAK,EAAE;~~oBACH~~,IAAI,EAAE,CAAC,KAAK;~~oBACZ~~,OAAO,EAAE,2CAA2C;~~iBACvD~~;~~gBACD~~,EAAE,EAAE,IAAI;~~aACX~~,CAAC,CAAC;~~YACH~~,OAAO;~~QACX~~,CAAC;~~QAED~~,qBAAqB;~~QACrB~~,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;~~IACtD~~,CAAC,CAAC,CAAC;IAEH,+CAA+C;IAC/C,MAAM,oBAAoB,GAAG,KAAK,EAAE,GAAoB,EAAE,GAAqB,EAAE,EAAE;QAC/E,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;QACtE,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YACtD,OAAO;QACX,CAAC;QAED,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC,CAAC;IAEF,iEAAiE;IACjE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAEtC,iDAAiD;IACjD,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAEzC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC"}
1	+ {"version":3,"file":"streamable-http.js","sourceRoot":"","sources":["../src/streamable-http.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAErD,MAAM,UAAU,mBAAmB;IAC/B,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAExB,wCAAwC;IACxC,MAAM,UAAU,GAA2D,EAAE,CAAC;IAE9E,0DAA0D;IAC1D,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAChC,IAAI,MAAM,CAAC,mBAAmB,KAAK,EAAE;YACjC,MAAM,CAAC,mBAAmB,KAAK,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,EACrE,CAAC;YACC,gCAAgC;YAChC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;YACtE,IAAI,SAAwC,CAAC;YAE7C,IAAI,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrC,2BAA2B;gBAC3B,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;YACtC,CAAC;iBAAM,IAAI,CAAC,SAAS,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,6BAA6B;gBAC7B,SAAS,GAAG,IAAI,6BAA6B,CAAC;oBAC1C,kBAAkB,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE;oBACxC,oBAAoB,EAAE,CAAC,SAAS,EAAE,EAAE;wBAChC,oCAAoC;wBACpC,UAAU,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;oBACtC,CAAC;iBACJ,CAAC,CAAC;gBAEH,iCAAiC;gBACjC,SAAS,CAAC,OAAO,GAAG,GAAG,EAAE;oBACrB,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;wBACtB,OAAO,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;oBAC3C,CAAC;gBACL,CAAC,CAAC;gBACF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;gBAEvC,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACJ,kBAAkB;gBAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACjB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACH,IAAI,EAAE,CAAC,KAAK;wBACZ,OAAO,EAAE,2CAA2C;qBACvD;oBACD,EAAE,EAAE,IAAI;iBACX,CAAC,CAAC;gBACH,OAAO;YACX,CAAC;YAED,qBAAqB;YACrB,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACJ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACzC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,+CAA+C;IAC/C,MAAM,oBAAoB,GAAG,KAAK,EAAE,GAAoB,EAAE,GAAqB,EAAE,EAAE;QAC/E,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;QACtE,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YACtD,OAAO;QACX,CAAC;QAED,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC,CAAC;IAEF,iEAAiE;IACjE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAEtC,iDAAiD;IACjD,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAEzC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC"}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@antonytm/mcp-sitecore-server",
-  "version": "0.18.0",
+  "version": "0.19.0",
   "description": "A Model Context Protocol server for Sitecore",
   "files": [
     "dist",
@@ -23,7 +23,15 @@
     "start:streamable-http": "npm run build && cross-env TRANSPORT=streamable-http node dist/index.js",
     "start:stdio": "npm run build && cross-env TRANSPORT=stdio node dist/index.js",
     "run": "npm run build && node dist/run.js",
-    "test": "npm run build && npm run bundle && vitest run"
+    "test": "npm run build && npm run bundle && vitest run",
+    "docker:windows:build": "docker build -t antonytm/mcp-sitecore-windows:0.19.0 -t antonytm/mcp-sitecore-windows:latest --file .\\docker\\windows\\Dockerfile .",
+    "docker:windows:run": "docker run -it --rm -p 4001:3001 antonytm/mcp-sitecore-windows:latest",
+    "docker:windows:push": "docker push antonytm/mcp-sitecore-windows:0.19.0 && docker push antonytm/mcp-sitecore-windows:latest",
+    "docker:windows": "npm run docker:windows:build && npm run docker:windows:push",
+    "docker:linux:build": "docker build -t antonytm/mcp-sitecore-linux:0.19.0 -t antonytm/mcp-sitecore-linux:latest --file ./docker/linux/Dockerfile .",
+    "docker:linux:run": "docker run -it --rm -p 4001:3001 antonytm/mcp-sitecore-linux:latest",
+    "docker:linux:push": "docker push antonytm/mcp-sitecore-linux:0.19.0 && docker push antonytm/mcp-sitecore-linux:latest",
+    "docker:linux": "npm run docker:linux:build && npm run docker:linux:push"
   },
   "dependencies": {
     "@antonytm/clixml-parser": "latest",