@aventara/nest 1.0.0-rc.1 → 1.0.0-rc.2

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # @aventara/nest
 
+## 1.0.0-rc.2
+
+### Patch Changes
+
+- `AventaraModule.forRoot({ config })` reports a Pick layer that names what its parent hid with the sentence first, as
+  `createFramework` does: an inline `client: { exposed: false, exemptions: { resources: { Comment: true } } }` whose
+  root hid `Comment` fails at the key with
+  `Type 'true' is not assignable to type 'true & (readonly ["Error: client cannot expose 'Comment': hidden by root"] & …)'`.
+- 9366e16: MCP endpoint polish:
+
+  - A request with no bearer credentials (no `Authorization` header, or another scheme such as `Basic`) is answered
+    `401` with `WWW-Authenticate: Bearer resource_metadata="…"` and no error code, as RFC 6750 §3.1 asks; its body no
+    longer says "Missing Authorization header". A bad bearer token keeps `error="invalid_token"`.
+  - A `mcp.authorization.verify` that throws is still answered `401`, and is now reported to the `diagnostics` sink as
+    an `AvMcpDiagnostic` holding the error.
+  - With `mcp` configured and `@aventara/mcp` missing, the startup error names the command that installs it at the
+    installed `@aventara/core`'s exact version: `npm install --save-exact @aventara/mcp@<version>`.
+
+- Updated dependencies [9366e16]
+- Updated dependencies [9366e16]
+- Updated dependencies [9366e16]
+- Updated dependencies [9366e16]
+  - @aventara/core@1.0.0-rc.2
+  - @aventara/mcp@1.0.0-rc.2
+
 ## 1.0.0-rc.1
 
 ### Patch Changes
@@ -65,7 +90,6 @@
               nullable: false,
               list: false,
               lifecycle: ["VIRTUAL"],
-              format: "url",
             },
             pipelines: {
               compute: {

package/README.md

@@ -229,15 +229,20 @@ const signedIn: AvGuard = (ctx) => ctx.$state.user !== undefined;
 ## The MCP endpoint
 
 With `mcp` in the configuration, the module also mounts the MCP server of `@aventara/mcp` at that path, on Express and
-Fastify alike, and logs `Aventara mounted the MCP endpoint at /mcp (…)`. Install it beside this package, at the same
-version:
+Fastify alike, and logs `Aventara mounted the MCP endpoint at /mcp (…)`. Install it beside this package, at
+`@aventara/core`'s exact version:
 
 ```bash
-npm install @aventara/mcp@rc
+npm install --save-exact @aventara/mcp@<your @aventara/core version>
 ```
 
 It is an optional peer dependency: an application without `mcp` does not need it, and one with `mcp` and without the
-package refuses to start, naming it. As for the protocol's routes, the module only mounts: the endpoint's body is read
+package refuses to start, naming it and the command, with the version filled in:
+
+```text
+AventaraModule: the configuration has `mcp`, and the package that serves it, @aventara/mcp, is not installed. Install it at @aventara/core's exact version (npm install --save-exact @aventara/mcp@1.0.0-rc.2), or remove `mcp` from the configuration.
+```
+ As for the protocol's routes, the module only mounts: the endpoint's body is read
 raw, the request's URL comes from the platform's `protocol` and `host` (set `trust proxy` on Express or `trustProxy` on
 Fastify behind a proxy), and every answer is `@aventara/mcp`'s. The `state` option seeds each tool call's `ctx.$state`.
 See `@aventara/mcp`'s README for the tools, the contract resource and authorization.

package/dist/aventara.module.d.ts

@@ -11,7 +11,7 @@ export type AventaraModuleOptions<M extends AvAdapterModel = AvAdapterModel, Cfg
     readonly framework: AvFramework;
     readonly config?: never;
 } | {
-    readonly config: Cfg & AvConfig<M, Cfg> & AvConfigExact<M, Cfg>;
+    readonly config: Cfg & AvConfigExact<M, Cfg> & AvConfig<M, Cfg>;
     readonly framework?: never;
 }) & {
     /**

package/dist/mcp-binding.loader.js

@@ -1,5 +1,19 @@
 const MCP_PACKAGE = "@aventara/mcp";
-const missing = (specifier) => `AventaraModule: the configuration has \`mcp\`, and the package that serves it, ${specifier}, is not installed. Install it beside @aventara/nest, at the same version (npm install ${specifier}), or remove \`mcp\` from the configuration.`;
+const missing = (specifier, coreVersion) => `AventaraModule: the configuration has \`mcp\`, and the package that serves it, ${specifier}, is not installed. Install it at @aventara/core's exact version (npm install --save-exact ${specifier}@${coreVersion ?? "<your @aventara/core version>"}), or remove \`mcp\` from the configuration.`;
+async function installedCoreVersion() {
+    try {
+        const manifest = new URL("../package.json", import.meta.resolve("@aventara/core"));
+        const { default: read } = (await import(manifest.href, {
+            with: { type: "json" },
+        }));
+        return read.name === "@aventara/core" && typeof read.version === "string"
+            ? read.version
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
 function isMissing(error, specifier) {
     const { code, message } = (error ?? {});
     return ((code === "ERR_MODULE_NOT_FOUND" || code === "MODULE_NOT_FOUND") &&
@@ -16,7 +30,7 @@ export async function loadMcpBinding(framework, specifier = MCP_PACKAGE) {
     }
     catch (error) {
         if (isMissing(error, specifier)) {
-            throw new Error(missing(specifier));
+            throw new Error(missing(specifier, await installedCoreVersion()));
         }
         throw error;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aventara/nest",
-  "version": "1.0.0-rc.1",
+  "version": "1.0.0-rc.2",
   "license": "SEE LICENSE IN LICENSE",
   "description": "NestJS host integration for Aventara.",
   "type": "module",
@@ -22,10 +22,10 @@
     "CHANGELOG.md"
   ],
   "dependencies": {
-    "@aventara/core": "1.0.0-rc.1"
+    "@aventara/core": "1.0.0-rc.2"
   },
   "peerDependencies": {
-    "@aventara/mcp": "1.0.0-rc.1",
+    "@aventara/mcp": "1.0.0-rc.2",
     "@nestjs/common": "^12.0.0",
     "@nestjs/core": "^12.0.0"
   },
@@ -38,9 +38,9 @@
     "access": "public"
   },
   "devDependencies": {
-    "@aventara/mcp": "1.0.0-rc.1",
-    "@aventara/prisma7-adapter": "1.0.0-rc.1",
-    "@aventara/testing": "1.0.0-rc.1",
+    "@aventara/mcp": "1.0.0-rc.2",
+    "@aventara/prisma7-adapter": "1.0.0-rc.2",
+    "@aventara/testing": "1.0.0-rc.2",
     "@modelcontextprotocol/sdk": "1.30.1",
     "@nestjs/common": "^12.1.2",
     "@nestjs/core": "^12.1.2",