@backstage/plugin-mcp-actions-backend 0.1.2-next.0 → 0.1.2

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @backstage/plugin-mcp-actions-backend
 
+## 0.1.2
+
+### Patch Changes
+
+- Updated dependencies
+  - @backstage/backend-defaults@0.12.0
+  - @backstage/catalog-client@1.11.0
+  - @backstage/plugin-catalog-node@1.18.0
+  - @backstage/backend-plugin-api@1.4.2
+
 ## 0.1.2-next.0
 
 ### Patch Changes

package/dist/plugin.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.cjs.js","sources":["../src/plugin.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  coreServices,\n  createBackendPlugin,\n} from '@backstage/backend-plugin-api';\nimport { json, Router } from 'express';\nimport { McpService } from './services/McpService';\nimport { createStreamableRouter } from './routers/createStreamableRouter';\nimport { createSseRouter } from './routers/createSseRouter';\nimport {\n  actionsRegistryServiceRef,\n  actionsServiceRef,\n} from '@backstage/backend-plugin-api/alpha';\n\n/**\n * mcpPlugin backend plugin\n *\n * @public\n */\nexport const mcpPlugin = createBackendPlugin({\n  pluginId: 'mcp-actions',\n  register(env) {\n    env.registerInit({\n      deps: {\n        logger: coreServices.logger,\n        auth: coreServices.auth,\n        httpAuth: coreServices.httpAuth,\n        httpRouter: coreServices.httpRouter,\n        actions: actionsServiceRef,\n        registry: actionsRegistryServiceRef,\n      },\n      async init({ actions, logger, httpRouter, httpAuth }) {\n        const mcpService = await McpService.create({\n          actions,\n        });\n\n        const sseRouter = createSseRouter({\n          mcpService,\n          httpAuth,\n        });\n\n        const streamableRouter = createStreamableRouter({\n          mcpService,\n          httpAuth,\n          logger,\n        });\n\n        const router = Router();\n        router.use(json());\n\n        router.use('/v1/sse', sseRouter);\n        router.use('/v1', streamableRouter);\n\n        httpRouter.use(router);\n      },\n    });\n  },\n});\n"],"names":["createBackendPlugin","coreServices","actionsServiceRef","actionsRegistryServiceRef","McpService","createSseRouter","createStreamableRouter","Router","json"],"mappings":";;;;;;;;;AAiCO,MAAM,YAAYA,oCAAoB,CAAA;AAAA,EAC3C,QAAU,EAAA,aAAA;AAAA,EACV,SAAS,GAAK,EAAA;AACZ,IAAA,GAAA,CAAI,YAAa,CAAA;AAAA,MACf,IAAM,EAAA;AAAA,QACJ,QAAQC,6BAAa,CAAA,MAAA;AAAA,QACrB,MAAMA,6BAAa,CAAA,IAAA;AAAA,QACnB,UAAUA,6BAAa,CAAA,QAAA;AAAA,QACvB,YAAYA,6BAAa,CAAA,UAAA;AAAA,QACzB,OAAS,EAAAC,uBAAA;AAAA,QACT,QAAU,EAAAC;AAAA,OACZ;AAAA,MACA,MAAM,IAAK,CAAA,EAAE,SAAS,MAAQ,EAAA,UAAA,EAAY,UAAY,EAAA;AACpD,QAAM,MAAA,UAAA,GAAa,MAAMC,qBAAA,CAAW,MAAO,CAAA;AAAA,UACzC;AAAA,SACD,CAAA;AAED,QAAA,MAAM,YAAYC,+BAAgB,CAAA;AAAA,UAChC,UAAA;AAAA,UACA;AAAA,SACD,CAAA;AAED,QAAA,MAAM,mBAAmBC,6CAAuB,CAAA;AAAA,UAC9C,UAAA;AAAA,UACA,QAAA;AAAA,UACA;AAAA,SACD,CAAA;AAED,QAAA,MAAM,SAASC,cAAO,EAAA;AACtB,QAAO,MAAA,CAAA,GAAA,CAAIC,cAAM,CAAA;AAEjB,QAAO,MAAA,CAAA,GAAA,CAAI,WAAW,SAAS,CAAA;AAC/B,QAAO,MAAA,CAAA,GAAA,CAAI,OAAO,gBAAgB,CAAA;AAElC,QAAA,UAAA,CAAW,IAAI,MAAM,CAAA;AAAA;AACvB,KACD,CAAA;AAAA;AAEL,CAAC;;;;"}
+{"version":3,"file":"plugin.cjs.js","sources":["../src/plugin.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport {\n  coreServices,\n  createBackendPlugin,\n} from '@backstage/backend-plugin-api';\nimport { json, Router } from 'express';\nimport { McpService } from './services/McpService';\nimport { createStreamableRouter } from './routers/createStreamableRouter';\nimport { createSseRouter } from './routers/createSseRouter';\nimport {\n  actionsRegistryServiceRef,\n  actionsServiceRef,\n} from '@backstage/backend-plugin-api/alpha';\n\n/**\n * mcpPlugin backend plugin\n *\n * @public\n */\nexport const mcpPlugin = createBackendPlugin({\n  pluginId: 'mcp-actions',\n  register(env) {\n    env.registerInit({\n      deps: {\n        logger: coreServices.logger,\n        auth: coreServices.auth,\n        httpAuth: coreServices.httpAuth,\n        httpRouter: coreServices.httpRouter,\n        actions: actionsServiceRef,\n        registry: actionsRegistryServiceRef,\n      },\n      async init({ actions, logger, httpRouter, httpAuth }) {\n        const mcpService = await McpService.create({\n          actions,\n        });\n\n        const sseRouter = createSseRouter({\n          mcpService,\n          httpAuth,\n        });\n\n        const streamableRouter = createStreamableRouter({\n          mcpService,\n          httpAuth,\n          logger,\n        });\n\n        const router = Router();\n        router.use(json());\n\n        router.use('/v1/sse', sseRouter);\n        router.use('/v1', streamableRouter);\n\n        httpRouter.use(router);\n      },\n    });\n  },\n});\n"],"names":["createBackendPlugin","coreServices","actionsServiceRef","actionsRegistryServiceRef","McpService","createSseRouter","createStreamableRouter","Router","json"],"mappings":";;;;;;;;;AAiCO,MAAM,YAAYA,oCAAA,CAAoB;AAAA,EAC3C,QAAA,EAAU,aAAA;AAAA,EACV,SAAS,GAAA,EAAK;AACZ,IAAA,GAAA,CAAI,YAAA,CAAa;AAAA,MACf,IAAA,EAAM;AAAA,QACJ,QAAQC,6BAAA,CAAa,MAAA;AAAA,QACrB,MAAMA,6BAAA,CAAa,IAAA;AAAA,QACnB,UAAUA,6BAAA,CAAa,QAAA;AAAA,QACvB,YAAYA,6BAAA,CAAa,UAAA;AAAA,QACzB,OAAA,EAASC,uBAAA;AAAA,QACT,QAAA,EAAUC;AAAA,OACZ;AAAA,MACA,MAAM,IAAA,CAAK,EAAE,SAAS,MAAA,EAAQ,UAAA,EAAY,UAAS,EAAG;AACpD,QAAA,MAAM,UAAA,GAAa,MAAMC,qBAAA,CAAW,MAAA,CAAO;AAAA,UACzC;AAAA,SACD,CAAA;AAED,QAAA,MAAM,YAAYC,+BAAA,CAAgB;AAAA,UAChC,UAAA;AAAA,UACA;AAAA,SACD,CAAA;AAED,QAAA,MAAM,mBAAmBC,6CAAA,CAAuB;AAAA,UAC9C,UAAA;AAAA,UACA,QAAA;AAAA,UACA;AAAA,SACD,CAAA;AAED,QAAA,MAAM,SAASC,cAAA,EAAO;AACtB,QAAA,MAAA,CAAO,GAAA,CAAIC,cAAM,CAAA;AAEjB,QAAA,MAAA,CAAO,GAAA,CAAI,WAAW,SAAS,CAAA;AAC/B,QAAA,MAAA,CAAO,GAAA,CAAI,OAAO,gBAAgB,CAAA;AAElC,QAAA,UAAA,CAAW,IAAI,MAAM,CAAA;AAAA,MACvB;AAAA,KACD,CAAA;AAAA,EACH;AACF,CAAC;;;;"}

package/dist/routers/createSseRouter.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"createSseRouter.cjs.js","sources":["../../src/routers/createSseRouter.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport PromiseRouter from 'express-promise-router';\nimport { Router } from 'express';\nimport { McpService } from '../services/McpService';\nimport { SSEServerTransport } from '@modelcontextprotocol/sdk/server/sse.js';\nimport { HttpAuthService } from '@backstage/backend-plugin-api';\n\n/**\n * Legacy SSE endpoint for older clients, hopefully will not be needed for much longer.\n */\nexport const createSseRouter = ({\n  mcpService,\n  httpAuth,\n}: {\n  mcpService: McpService;\n  httpAuth: HttpAuthService;\n}): Router => {\n  const router = PromiseRouter();\n  const transportsToSessionId = new Map<string, SSEServerTransport>();\n\n  router.get('/', async (req, res) => {\n    const server = mcpService.getServer({\n      credentials: await httpAuth.credentials(req),\n    });\n\n    const transport = new SSEServerTransport(\n      `${req.originalUrl}/messages`,\n      res,\n    );\n\n    transportsToSessionId.set(transport.sessionId, transport);\n\n    res.on('close', () => {\n      transportsToSessionId.delete(transport.sessionId);\n    });\n\n    await server.connect(transport);\n  });\n\n  router.post('/messages', async (req, res) => {\n    const sessionId = req.query.sessionId as string;\n\n    if (!sessionId) {\n      res.status(400).contentType('text/plain').write('sessionId is required');\n      return;\n    }\n\n    const transport = transportsToSessionId.get(sessionId);\n    if (transport) {\n      await transport.handlePostMessage(req, res, req.body);\n    } else {\n      res\n        .status(400)\n        .contentType('text/plain')\n        .write(`No transport found for sessionId \"${sessionId}\"`);\n    }\n  });\n  return router;\n};\n"],"names":["PromiseRouter","SSEServerTransport"],"mappings":";;;;;;;;;AAwBO,MAAM,kBAAkB,CAAC;AAAA,EAC9B,UAAA;AAAA,EACA;AACF,CAGc,KAAA;AACZ,EAAA,MAAM,SAASA,8BAAc,EAAA;AAC7B,EAAM,MAAA,qBAAA,uBAA4B,GAAgC,EAAA;AAElE,EAAA,MAAA,CAAO,GAAI,CAAA,GAAA,EAAK,OAAO,GAAA,EAAK,GAAQ,KAAA;AAClC,IAAM,MAAA,MAAA,GAAS,WAAW,SAAU,CAAA;AAAA,MAClC,WAAa,EAAA,MAAM,QAAS,CAAA,WAAA,CAAY,GAAG;AAAA,KAC5C,CAAA;AAED,IAAA,MAAM,YAAY,IAAIC,yBAAA;AAAA,MACpB,CAAA,EAAG,IAAI,WAAW,CAAA,SAAA,CAAA;AAAA,MAClB;AAAA,KACF;AAEA,IAAsB,qBAAA,CAAA,GAAA,CAAI,SAAU,CAAA,SAAA,EAAW,SAAS,CAAA;AAExD,IAAI,GAAA,CAAA,EAAA,CAAG,SAAS,MAAM;AACpB,MAAsB,qBAAA,CAAA,MAAA,CAAO,UAAU,SAAS,CAAA;AAAA,KACjD,CAAA;AAED,IAAM,MAAA,MAAA,CAAO,QAAQ,SAAS,CAAA;AAAA,GAC/B,CAAA;AAED,EAAA,MAAA,CAAO,IAAK,CAAA,WAAA,EAAa,OAAO,GAAA,EAAK,GAAQ,KAAA;AAC3C,IAAM,MAAA,SAAA,GAAY,IAAI,KAAM,CAAA,SAAA;AAE5B,IAAA,IAAI,CAAC,SAAW,EAAA;AACd,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,YAAY,YAAY,CAAA,CAAE,MAAM,uBAAuB,CAAA;AACvE,MAAA;AAAA;AAGF,IAAM,MAAA,SAAA,GAAY,qBAAsB,CAAA,GAAA,CAAI,SAAS,CAAA;AACrD,IAAA,IAAI,SAAW,EAAA;AACb,MAAA,MAAM,SAAU,CAAA,iBAAA,CAAkB,GAAK,EAAA,GAAA,EAAK,IAAI,IAAI,CAAA;AAAA,KAC/C,MAAA;AACL,MACG,GAAA,CAAA,MAAA,CAAO,GAAG,CACV,CAAA,WAAA,CAAY,YAAY,CACxB,CAAA,KAAA,CAAM,CAAqC,kCAAA,EAAA,SAAS,CAAG,CAAA,CAAA,CAAA;AAAA;AAC5D,GACD,CAAA;AACD,EAAO,OAAA,MAAA;AACT;;;;"}
+{"version":3,"file":"createSseRouter.cjs.js","sources":["../../src/routers/createSseRouter.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport PromiseRouter from 'express-promise-router';\nimport { Router } from 'express';\nimport { McpService } from '../services/McpService';\nimport { SSEServerTransport } from '@modelcontextprotocol/sdk/server/sse.js';\nimport { HttpAuthService } from '@backstage/backend-plugin-api';\n\n/**\n * Legacy SSE endpoint for older clients, hopefully will not be needed for much longer.\n */\nexport const createSseRouter = ({\n  mcpService,\n  httpAuth,\n}: {\n  mcpService: McpService;\n  httpAuth: HttpAuthService;\n}): Router => {\n  const router = PromiseRouter();\n  const transportsToSessionId = new Map<string, SSEServerTransport>();\n\n  router.get('/', async (req, res) => {\n    const server = mcpService.getServer({\n      credentials: await httpAuth.credentials(req),\n    });\n\n    const transport = new SSEServerTransport(\n      `${req.originalUrl}/messages`,\n      res,\n    );\n\n    transportsToSessionId.set(transport.sessionId, transport);\n\n    res.on('close', () => {\n      transportsToSessionId.delete(transport.sessionId);\n    });\n\n    await server.connect(transport);\n  });\n\n  router.post('/messages', async (req, res) => {\n    const sessionId = req.query.sessionId as string;\n\n    if (!sessionId) {\n      res.status(400).contentType('text/plain').write('sessionId is required');\n      return;\n    }\n\n    const transport = transportsToSessionId.get(sessionId);\n    if (transport) {\n      await transport.handlePostMessage(req, res, req.body);\n    } else {\n      res\n        .status(400)\n        .contentType('text/plain')\n        .write(`No transport found for sessionId \"${sessionId}\"`);\n    }\n  });\n  return router;\n};\n"],"names":["PromiseRouter","SSEServerTransport"],"mappings":";;;;;;;;;AAwBO,MAAM,kBAAkB,CAAC;AAAA,EAC9B,UAAA;AAAA,EACA;AACF,CAAA,KAGc;AACZ,EAAA,MAAM,SAASA,8BAAA,EAAc;AAC7B,EAAA,MAAM,qBAAA,uBAA4B,GAAA,EAAgC;AAElE,EAAA,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,OAAO,GAAA,EAAK,GAAA,KAAQ;AAClC,IAAA,MAAM,MAAA,GAAS,WAAW,SAAA,CAAU;AAAA,MAClC,WAAA,EAAa,MAAM,QAAA,CAAS,WAAA,CAAY,GAAG;AAAA,KAC5C,CAAA;AAED,IAAA,MAAM,YAAY,IAAIC,yBAAA;AAAA,MACpB,CAAA,EAAG,IAAI,WAAW,CAAA,SAAA,CAAA;AAAA,MAClB;AAAA,KACF;AAEA,IAAA,qBAAA,CAAsB,GAAA,CAAI,SAAA,CAAU,SAAA,EAAW,SAAS,CAAA;AAExD,IAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM;AACpB,MAAA,qBAAA,CAAsB,MAAA,CAAO,UAAU,SAAS,CAAA;AAAA,IAClD,CAAC,CAAA;AAED,IAAA,MAAM,MAAA,CAAO,QAAQ,SAAS,CAAA;AAAA,EAChC,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,IAAA,CAAK,WAAA,EAAa,OAAO,GAAA,EAAK,GAAA,KAAQ;AAC3C,IAAA,MAAM,SAAA,GAAY,IAAI,KAAA,CAAM,SAAA;AAE5B,IAAA,IAAI,CAAC,SAAA,EAAW;AACd,MAAA,GAAA,CAAI,OAAO,GAAG,CAAA,CAAE,YAAY,YAAY,CAAA,CAAE,MAAM,uBAAuB,CAAA;AACvE,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,SAAA,GAAY,qBAAA,CAAsB,GAAA,CAAI,SAAS,CAAA;AACrD,IAAA,IAAI,SAAA,EAAW;AACb,MAAA,MAAM,SAAA,CAAU,iBAAA,CAAkB,GAAA,EAAK,GAAA,EAAK,IAAI,IAAI,CAAA;AAAA,IACtD,CAAA,MAAO;AACL,MAAA,GAAA,CACG,MAAA,CAAO,GAAG,CAAA,CACV,WAAA,CAAY,YAAY,CAAA,CACxB,KAAA,CAAM,CAAA,kCAAA,EAAqC,SAAS,CAAA,CAAA,CAAG,CAAA;AAAA,IAC5D;AAAA,EACF,CAAC,CAAA;AACD,EAAA,OAAO,MAAA;AACT;;;;"}

package/dist/routers/createStreamableRouter.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"createStreamableRouter.cjs.js","sources":["../../src/routers/createStreamableRouter.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport PromiseRouter from 'express-promise-router';\nimport { Router } from 'express';\nimport { McpService } from '../services/McpService';\nimport { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';\nimport { HttpAuthService, LoggerService } from '@backstage/backend-plugin-api';\nimport { isError } from '@backstage/errors';\n\nexport const createStreamableRouter = ({\n  mcpService,\n  httpAuth,\n  logger,\n}: {\n  mcpService: McpService;\n  logger: LoggerService;\n  httpAuth: HttpAuthService;\n}): Router => {\n  const router = PromiseRouter();\n\n  router.post('/', async (req, res) => {\n    try {\n      const server = mcpService.getServer({\n        credentials: await httpAuth.credentials(req),\n      });\n\n      const transport = new StreamableHTTPServerTransport({\n        // stateless implementation for now, so that we can support multiple\n        // instances of the server backend, and avoid sticky sessions.\n        sessionIdGenerator: undefined,\n      });\n\n      await server.connect(transport);\n      await transport.handleRequest(req, res, req.body);\n\n      res.on('close', () => {\n        transport.close();\n        server.close();\n      });\n    } catch (error) {\n      if (isError(error)) {\n        logger.error(error.message);\n      }\n\n      if (!res.headersSent) {\n        res.status(500).json({\n          jsonrpc: '2.0',\n          error: {\n            code: -32603,\n            message: 'Internal server error',\n          },\n          id: null,\n        });\n      }\n    }\n  });\n\n  router.get('/', async (_, res) => {\n    // We only support POST requests, so we return a 405 error for all other methods.\n    res.writeHead(405).end(\n      JSON.stringify({\n        jsonrpc: '2.0',\n        error: {\n          code: -32000,\n          message: 'Method not allowed.',\n        },\n        id: null,\n      }),\n    );\n  });\n\n  router.delete('/', async (_, res) => {\n    // We only support POST requests, so we return a 405 error for all other methods.\n    res.writeHead(405).end(\n      JSON.stringify({\n        jsonrpc: '2.0',\n        error: {\n          code: -32000,\n          message: 'Method not allowed.',\n        },\n        id: null,\n      }),\n    );\n  });\n\n  return router;\n};\n"],"names":["PromiseRouter","StreamableHTTPServerTransport","isError"],"mappings":";;;;;;;;;;AAsBO,MAAM,yBAAyB,CAAC;AAAA,EACrC,UAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAIc,KAAA;AACZ,EAAA,MAAM,SAASA,8BAAc,EAAA;AAE7B,EAAA,MAAA,CAAO,IAAK,CAAA,GAAA,EAAK,OAAO,GAAA,EAAK,GAAQ,KAAA;AACnC,IAAI,IAAA;AACF,MAAM,MAAA,MAAA,GAAS,WAAW,SAAU,CAAA;AAAA,QAClC,WAAa,EAAA,MAAM,QAAS,CAAA,WAAA,CAAY,GAAG;AAAA,OAC5C,CAAA;AAED,MAAM,MAAA,SAAA,GAAY,IAAIC,+CAA8B,CAAA;AAAA;AAAA;AAAA,QAGlD,kBAAoB,EAAA,KAAA;AAAA,OACrB,CAAA;AAED,MAAM,MAAA,MAAA,CAAO,QAAQ,SAAS,CAAA;AAC9B,MAAA,MAAM,SAAU,CAAA,aAAA,CAAc,GAAK,EAAA,GAAA,EAAK,IAAI,IAAI,CAAA;AAEhD,MAAI,GAAA,CAAA,EAAA,CAAG,SAAS,MAAM;AACpB,QAAA,SAAA,CAAU,KAAM,EAAA;AAChB,QAAA,MAAA,CAAO,KAAM,EAAA;AAAA,OACd,CAAA;AAAA,aACM,KAAO,EAAA;AACd,MAAI,IAAAC,cAAA,CAAQ,KAAK,CAAG,EAAA;AAClB,QAAO,MAAA,CAAA,KAAA,CAAM,MAAM,OAAO,CAAA;AAAA;AAG5B,MAAI,IAAA,CAAC,IAAI,WAAa,EAAA;AACpB,QAAI,GAAA,CAAA,MAAA,CAAO,GAAG,CAAA,CAAE,IAAK,CAAA;AAAA,UACnB,OAAS,EAAA,KAAA;AAAA,UACT,KAAO,EAAA;AAAA,YACL,IAAM,EAAA,CAAA,KAAA;AAAA,YACN,OAAS,EAAA;AAAA,WACX;AAAA,UACA,EAAI,EAAA;AAAA,SACL,CAAA;AAAA;AACH;AACF,GACD,CAAA;AAED,EAAA,MAAA,CAAO,GAAI,CAAA,GAAA,EAAK,OAAO,CAAA,EAAG,GAAQ,KAAA;AAEhC,IAAI,GAAA,CAAA,SAAA,CAAU,GAAG,CAAE,CAAA,GAAA;AAAA,MACjB,KAAK,SAAU,CAAA;AAAA,QACb,OAAS,EAAA,KAAA;AAAA,QACT,KAAO,EAAA;AAAA,UACL,IAAM,EAAA,CAAA,IAAA;AAAA,UACN,OAAS,EAAA;AAAA,SACX;AAAA,QACA,EAAI,EAAA;AAAA,OACL;AAAA,KACH;AAAA,GACD,CAAA;AAED,EAAA,MAAA,CAAO,MAAO,CAAA,GAAA,EAAK,OAAO,CAAA,EAAG,GAAQ,KAAA;AAEnC,IAAI,GAAA,CAAA,SAAA,CAAU,GAAG,CAAE,CAAA,GAAA;AAAA,MACjB,KAAK,SAAU,CAAA;AAAA,QACb,OAAS,EAAA,KAAA;AAAA,QACT,KAAO,EAAA;AAAA,UACL,IAAM,EAAA,CAAA,IAAA;AAAA,UACN,OAAS,EAAA;AAAA,SACX;AAAA,QACA,EAAI,EAAA;AAAA,OACL;AAAA,KACH;AAAA,GACD,CAAA;AAED,EAAO,OAAA,MAAA;AACT;;;;"}
+{"version":3,"file":"createStreamableRouter.cjs.js","sources":["../../src/routers/createStreamableRouter.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport PromiseRouter from 'express-promise-router';\nimport { Router } from 'express';\nimport { McpService } from '../services/McpService';\nimport { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';\nimport { HttpAuthService, LoggerService } from '@backstage/backend-plugin-api';\nimport { isError } from '@backstage/errors';\n\nexport const createStreamableRouter = ({\n  mcpService,\n  httpAuth,\n  logger,\n}: {\n  mcpService: McpService;\n  logger: LoggerService;\n  httpAuth: HttpAuthService;\n}): Router => {\n  const router = PromiseRouter();\n\n  router.post('/', async (req, res) => {\n    try {\n      const server = mcpService.getServer({\n        credentials: await httpAuth.credentials(req),\n      });\n\n      const transport = new StreamableHTTPServerTransport({\n        // stateless implementation for now, so that we can support multiple\n        // instances of the server backend, and avoid sticky sessions.\n        sessionIdGenerator: undefined,\n      });\n\n      await server.connect(transport);\n      await transport.handleRequest(req, res, req.body);\n\n      res.on('close', () => {\n        transport.close();\n        server.close();\n      });\n    } catch (error) {\n      if (isError(error)) {\n        logger.error(error.message);\n      }\n\n      if (!res.headersSent) {\n        res.status(500).json({\n          jsonrpc: '2.0',\n          error: {\n            code: -32603,\n            message: 'Internal server error',\n          },\n          id: null,\n        });\n      }\n    }\n  });\n\n  router.get('/', async (_, res) => {\n    // We only support POST requests, so we return a 405 error for all other methods.\n    res.writeHead(405).end(\n      JSON.stringify({\n        jsonrpc: '2.0',\n        error: {\n          code: -32000,\n          message: 'Method not allowed.',\n        },\n        id: null,\n      }),\n    );\n  });\n\n  router.delete('/', async (_, res) => {\n    // We only support POST requests, so we return a 405 error for all other methods.\n    res.writeHead(405).end(\n      JSON.stringify({\n        jsonrpc: '2.0',\n        error: {\n          code: -32000,\n          message: 'Method not allowed.',\n        },\n        id: null,\n      }),\n    );\n  });\n\n  return router;\n};\n"],"names":["PromiseRouter","StreamableHTTPServerTransport","isError"],"mappings":";;;;;;;;;;AAsBO,MAAM,yBAAyB,CAAC;AAAA,EACrC,UAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAAA,KAIc;AACZ,EAAA,MAAM,SAASA,8BAAA,EAAc;AAE7B,EAAA,MAAA,CAAO,IAAA,CAAK,GAAA,EAAK,OAAO,GAAA,EAAK,GAAA,KAAQ;AACnC,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,WAAW,SAAA,CAAU;AAAA,QAClC,WAAA,EAAa,MAAM,QAAA,CAAS,WAAA,CAAY,GAAG;AAAA,OAC5C,CAAA;AAED,MAAA,MAAM,SAAA,GAAY,IAAIC,+CAAA,CAA8B;AAAA;AAAA;AAAA,QAGlD,kBAAA,EAAoB,KAAA;AAAA,OACrB,CAAA;AAED,MAAA,MAAM,MAAA,CAAO,QAAQ,SAAS,CAAA;AAC9B,MAAA,MAAM,SAAA,CAAU,aAAA,CAAc,GAAA,EAAK,GAAA,EAAK,IAAI,IAAI,CAAA;AAEhD,MAAA,GAAA,CAAI,EAAA,CAAG,SAAS,MAAM;AACpB,QAAA,SAAA,CAAU,KAAA,EAAM;AAChB,QAAA,MAAA,CAAO,KAAA,EAAM;AAAA,MACf,CAAC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AACd,MAAA,IAAIC,cAAA,CAAQ,KAAK,CAAA,EAAG;AAClB,QAAA,MAAA,CAAO,KAAA,CAAM,MAAM,OAAO,CAAA;AAAA,MAC5B;AAEA,MAAA,IAAI,CAAC,IAAI,WAAA,EAAa;AACpB,QAAA,GAAA,CAAI,MAAA,CAAO,GAAG,CAAA,CAAE,IAAA,CAAK;AAAA,UACnB,OAAA,EAAS,KAAA;AAAA,UACT,KAAA,EAAO;AAAA,YACL,IAAA,EAAM,MAAA;AAAA,YACN,OAAA,EAAS;AAAA,WACX;AAAA,UACA,EAAA,EAAI;AAAA,SACL,CAAA;AAAA,MACH;AAAA,IACF;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,GAAA,CAAI,GAAA,EAAK,OAAO,CAAA,EAAG,GAAA,KAAQ;AAEhC,IAAA,GAAA,CAAI,SAAA,CAAU,GAAG,CAAA,CAAE,GAAA;AAAA,MACjB,KAAK,SAAA,CAAU;AAAA,QACb,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,KAAA;AAAA,UACN,OAAA,EAAS;AAAA,SACX;AAAA,QACA,EAAA,EAAI;AAAA,OACL;AAAA,KACH;AAAA,EACF,CAAC,CAAA;AAED,EAAA,MAAA,CAAO,MAAA,CAAO,GAAA,EAAK,OAAO,CAAA,EAAG,GAAA,KAAQ;AAEnC,IAAA,GAAA,CAAI,SAAA,CAAU,GAAG,CAAA,CAAE,GAAA;AAAA,MACjB,KAAK,SAAA,CAAU;AAAA,QACb,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,KAAA;AAAA,UACN,OAAA,EAAS;AAAA,SACX;AAAA,QACA,EAAA,EAAI;AAAA,OACL;AAAA,KACH;AAAA,EACF,CAAC,CAAA;AAED,EAAA,OAAO,MAAA;AACT;;;;"}

package/dist/services/McpService.cjs.js.map

@@ -1 +1 @@
-{"version":3,"file":"McpService.cjs.js","sources":["../../src/services/McpService.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { BackstageCredentials } from '@backstage/backend-plugin-api';\nimport { Server as McpServer } from '@modelcontextprotocol/sdk/server/index.js';\nimport {\n  ListToolsRequestSchema,\n  CallToolRequestSchema,\n} from '@modelcontextprotocol/sdk/types.js';\nimport { JsonObject } from '@backstage/types';\nimport { ActionsService } from '@backstage/backend-plugin-api/alpha';\nimport { version } from '@backstage/plugin-mcp-actions-backend/package.json';\nimport { NotFoundError } from '@backstage/errors';\n\nexport class McpService {\n  constructor(private readonly actions: ActionsService) {}\n\n  static async create({ actions }: { actions: ActionsService }) {\n    return new McpService(actions);\n  }\n\n  getServer({ credentials }: { credentials: BackstageCredentials }) {\n    const server = new McpServer(\n      {\n        name: 'backstage',\n        // TODO: this version will most likely change in the future.\n        version,\n      },\n      { capabilities: { tools: {} } },\n    );\n\n    server.setRequestHandler(ListToolsRequestSchema, async () => {\n      // TODO: switch this to be configuration based later\n      const { actions } = await this.actions.list({ credentials });\n\n      return {\n        tools: actions.map(action => ({\n          inputSchema: action.schema.input,\n          // todo(blam): this is unfortunately not supported by most clients yet.\n          // When this is provided you need to provide structuredContent instead.\n          // outputSchema: action.schema.output,\n          name: action.name,\n          description: action.description,\n          annotations: {\n            title: action.title,\n            destructiveHint: action.attributes.destructive,\n            idempotentHint: action.attributes.idempotent,\n            readOnlyHint: action.attributes.readOnly,\n            openWorldHint: false,\n          },\n        })),\n      };\n    });\n\n    server.setRequestHandler(CallToolRequestSchema, async ({ params }) => {\n      const { actions } = await this.actions.list({ credentials });\n      const action = actions.find(a => a.name === params.name);\n\n      if (!action) {\n        throw new NotFoundError(`Action \"${params.name}\" not found`);\n      }\n\n      const { output } = await this.actions.invoke({\n        id: action.id,\n        input: params.arguments as JsonObject,\n        credentials,\n      });\n\n      return {\n        // todo(blam): unfortunately structuredContent is not supported by most clients yet.\n        // so the validation for the output happens in the default actions registry\n        // and we return it as json text instead for now.\n        content: [\n          {\n            type: 'text',\n            text: ['```json', JSON.stringify(output, null, 2), '```'].join(\n              '\\n',\n            ),\n          },\n        ],\n      };\n    });\n\n    return server;\n  }\n}\n"],"names":["McpServer","version","ListToolsRequestSchema","CallToolRequestSchema","NotFoundError"],"mappings":";;;;;;;AA0BO,MAAM,UAAW,CAAA;AAAA,EACtB,YAA6B,OAAyB,EAAA;AAAzB,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAAA;AAA0B,EAEvD,aAAa,MAAA,CAAO,EAAE,OAAA,EAAwC,EAAA;AAC5D,IAAO,OAAA,IAAI,WAAW,OAAO,CAAA;AAAA;AAC/B,EAEA,SAAA,CAAU,EAAE,WAAA,EAAsD,EAAA;AAChE,IAAA,MAAM,SAAS,IAAIA,eAAA;AAAA,MACjB;AAAA,QACE,IAAM,EAAA,WAAA;AAAA;AAAA,iBAENC;AAAA,OACF;AAAA,MACA,EAAE,YAAc,EAAA,EAAE,KAAO,EAAA,IAAK;AAAA,KAChC;AAEA,IAAO,MAAA,CAAA,iBAAA,CAAkBC,iCAAwB,YAAY;AAE3D,MAAM,MAAA,EAAE,SAAY,GAAA,MAAM,KAAK,OAAQ,CAAA,IAAA,CAAK,EAAE,WAAA,EAAa,CAAA;AAE3D,MAAO,OAAA;AAAA,QACL,KAAA,EAAO,OAAQ,CAAA,GAAA,CAAI,CAAW,MAAA,MAAA;AAAA,UAC5B,WAAA,EAAa,OAAO,MAAO,CAAA,KAAA;AAAA;AAAA;AAAA;AAAA,UAI3B,MAAM,MAAO,CAAA,IAAA;AAAA,UACb,aAAa,MAAO,CAAA,WAAA;AAAA,UACpB,WAAa,EAAA;AAAA,YACX,OAAO,MAAO,CAAA,KAAA;AAAA,YACd,eAAA,EAAiB,OAAO,UAAW,CAAA,WAAA;AAAA,YACnC,cAAA,EAAgB,OAAO,UAAW,CAAA,UAAA;AAAA,YAClC,YAAA,EAAc,OAAO,UAAW,CAAA,QAAA;AAAA,YAChC,aAAe,EAAA;AAAA;AACjB,SACA,CAAA;AAAA,OACJ;AAAA,KACD,CAAA;AAED,IAAA,MAAA,CAAO,iBAAkB,CAAAC,8BAAA,EAAuB,OAAO,EAAE,QAAa,KAAA;AACpE,MAAM,MAAA,EAAE,SAAY,GAAA,MAAM,KAAK,OAAQ,CAAA,IAAA,CAAK,EAAE,WAAA,EAAa,CAAA;AAC3D,MAAA,MAAM,SAAS,OAAQ,CAAA,IAAA,CAAK,OAAK,CAAE,CAAA,IAAA,KAAS,OAAO,IAAI,CAAA;AAEvD,MAAA,IAAI,CAAC,MAAQ,EAAA;AACX,QAAA,MAAM,IAAIC,oBAAA,CAAc,CAAW,QAAA,EAAA,MAAA,CAAO,IAAI,CAAa,WAAA,CAAA,CAAA;AAAA;AAG7D,MAAA,MAAM,EAAE,MAAO,EAAA,GAAI,MAAM,IAAA,CAAK,QAAQ,MAAO,CAAA;AAAA,QAC3C,IAAI,MAAO,CAAA,EAAA;AAAA,QACX,OAAO,MAAO,CAAA,SAAA;AAAA,QACd;AAAA,OACD,CAAA;AAED,MAAO,OAAA;AAAA;AAAA;AAAA;AAAA,QAIL,OAAS,EAAA;AAAA,UACP;AAAA,YACE,IAAM,EAAA,MAAA;AAAA,YACN,IAAA,EAAM,CAAC,SAAA,EAAW,IAAK,CAAA,SAAA,CAAU,QAAQ,IAAM,EAAA,CAAC,CAAG,EAAA,KAAK,CAAE,CAAA,IAAA;AAAA,cACxD;AAAA;AACF;AACF;AACF,OACF;AAAA,KACD,CAAA;AAED,IAAO,OAAA,MAAA;AAAA;AAEX;;;;"}
+{"version":3,"file":"McpService.cjs.js","sources":["../../src/services/McpService.ts"],"sourcesContent":["/*\n * Copyright 2025 The Backstage Authors\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\nimport { BackstageCredentials } from '@backstage/backend-plugin-api';\nimport { Server as McpServer } from '@modelcontextprotocol/sdk/server/index.js';\nimport {\n  ListToolsRequestSchema,\n  CallToolRequestSchema,\n} from '@modelcontextprotocol/sdk/types.js';\nimport { JsonObject } from '@backstage/types';\nimport { ActionsService } from '@backstage/backend-plugin-api/alpha';\nimport { version } from '@backstage/plugin-mcp-actions-backend/package.json';\nimport { NotFoundError } from '@backstage/errors';\n\nexport class McpService {\n  constructor(private readonly actions: ActionsService) {}\n\n  static async create({ actions }: { actions: ActionsService }) {\n    return new McpService(actions);\n  }\n\n  getServer({ credentials }: { credentials: BackstageCredentials }) {\n    const server = new McpServer(\n      {\n        name: 'backstage',\n        // TODO: this version will most likely change in the future.\n        version,\n      },\n      { capabilities: { tools: {} } },\n    );\n\n    server.setRequestHandler(ListToolsRequestSchema, async () => {\n      // TODO: switch this to be configuration based later\n      const { actions } = await this.actions.list({ credentials });\n\n      return {\n        tools: actions.map(action => ({\n          inputSchema: action.schema.input,\n          // todo(blam): this is unfortunately not supported by most clients yet.\n          // When this is provided you need to provide structuredContent instead.\n          // outputSchema: action.schema.output,\n          name: action.name,\n          description: action.description,\n          annotations: {\n            title: action.title,\n            destructiveHint: action.attributes.destructive,\n            idempotentHint: action.attributes.idempotent,\n            readOnlyHint: action.attributes.readOnly,\n            openWorldHint: false,\n          },\n        })),\n      };\n    });\n\n    server.setRequestHandler(CallToolRequestSchema, async ({ params }) => {\n      const { actions } = await this.actions.list({ credentials });\n      const action = actions.find(a => a.name === params.name);\n\n      if (!action) {\n        throw new NotFoundError(`Action \"${params.name}\" not found`);\n      }\n\n      const { output } = await this.actions.invoke({\n        id: action.id,\n        input: params.arguments as JsonObject,\n        credentials,\n      });\n\n      return {\n        // todo(blam): unfortunately structuredContent is not supported by most clients yet.\n        // so the validation for the output happens in the default actions registry\n        // and we return it as json text instead for now.\n        content: [\n          {\n            type: 'text',\n            text: ['```json', JSON.stringify(output, null, 2), '```'].join(\n              '\\n',\n            ),\n          },\n        ],\n      };\n    });\n\n    return server;\n  }\n}\n"],"names":["McpServer","version","ListToolsRequestSchema","CallToolRequestSchema","NotFoundError"],"mappings":";;;;;;;AA0BO,MAAM,UAAA,CAAW;AAAA,EACtB,YAA6B,OAAA,EAAyB;AAAzB,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAAA,EAA0B;AAAA,EAEvD,aAAa,MAAA,CAAO,EAAE,OAAA,EAAQ,EAAgC;AAC5D,IAAA,OAAO,IAAI,WAAW,OAAO,CAAA;AAAA,EAC/B;AAAA,EAEA,SAAA,CAAU,EAAE,WAAA,EAAY,EAA0C;AAChE,IAAA,MAAM,SAAS,IAAIA,eAAA;AAAA,MACjB;AAAA,QACE,IAAA,EAAM,WAAA;AAAA;AAAA,iBAENC;AAAA,OACF;AAAA,MACA,EAAE,YAAA,EAAc,EAAE,KAAA,EAAO,IAAG;AAAE,KAChC;AAEA,IAAA,MAAA,CAAO,iBAAA,CAAkBC,iCAAwB,YAAY;AAE3D,MAAA,MAAM,EAAE,SAAQ,GAAI,MAAM,KAAK,OAAA,CAAQ,IAAA,CAAK,EAAE,WAAA,EAAa,CAAA;AAE3D,MAAA,OAAO;AAAA,QACL,KAAA,EAAO,OAAA,CAAQ,GAAA,CAAI,CAAA,MAAA,MAAW;AAAA,UAC5B,WAAA,EAAa,OAAO,MAAA,CAAO,KAAA;AAAA;AAAA;AAAA;AAAA,UAI3B,MAAM,MAAA,CAAO,IAAA;AAAA,UACb,aAAa,MAAA,CAAO,WAAA;AAAA,UACpB,WAAA,EAAa;AAAA,YACX,OAAO,MAAA,CAAO,KAAA;AAAA,YACd,eAAA,EAAiB,OAAO,UAAA,CAAW,WAAA;AAAA,YACnC,cAAA,EAAgB,OAAO,UAAA,CAAW,UAAA;AAAA,YAClC,YAAA,EAAc,OAAO,UAAA,CAAW,QAAA;AAAA,YAChC,aAAA,EAAe;AAAA;AACjB,SACF,CAAE;AAAA,OACJ;AAAA,IACF,CAAC,CAAA;AAED,IAAA,MAAA,CAAO,iBAAA,CAAkBC,8BAAA,EAAuB,OAAO,EAAE,QAAO,KAAM;AACpE,MAAA,MAAM,EAAE,SAAQ,GAAI,MAAM,KAAK,OAAA,CAAQ,IAAA,CAAK,EAAE,WAAA,EAAa,CAAA;AAC3D,MAAA,MAAM,SAAS,OAAA,CAAQ,IAAA,CAAK,OAAK,CAAA,CAAE,IAAA,KAAS,OAAO,IAAI,CAAA;AAEvD,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA,MAAM,IAAIC,oBAAA,CAAc,CAAA,QAAA,EAAW,MAAA,CAAO,IAAI,CAAA,WAAA,CAAa,CAAA;AAAA,MAC7D;AAEA,MAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,IAAA,CAAK,QAAQ,MAAA,CAAO;AAAA,QAC3C,IAAI,MAAA,CAAO,EAAA;AAAA,QACX,OAAO,MAAA,CAAO,SAAA;AAAA,QACd;AAAA,OACD,CAAA;AAED,MAAA,OAAO;AAAA;AAAA;AAAA;AAAA,QAIL,OAAA,EAAS;AAAA,UACP;AAAA,YACE,IAAA,EAAM,MAAA;AAAA,YACN,IAAA,EAAM,CAAC,SAAA,EAAW,IAAA,CAAK,SAAA,CAAU,QAAQ,IAAA,EAAM,CAAC,CAAA,EAAG,KAAK,CAAA,CAAE,IAAA;AAAA,cACxD;AAAA;AACF;AACF;AACF,OACF;AAAA,IACF,CAAC,CAAA;AAED,IAAA,OAAO,MAAA;AAAA,EACT;AACF;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@backstage/plugin-mcp-actions-backend",
-  "version": "0.1.2-next.0",
+  "version": "0.1.2",
   "backstage": {
     "role": "backend-plugin",
     "pluginId": "mcp-actions",
@@ -37,20 +37,20 @@
     "test": "backstage-cli package test"
   },
   "dependencies": {
-    "@backstage/backend-defaults": "0.11.2-next.0",
-    "@backstage/backend-plugin-api": "1.4.2-next.0",
-    "@backstage/catalog-client": "1.11.0-next.0",
-    "@backstage/errors": "1.2.7",
-    "@backstage/plugin-catalog-node": "1.18.0-next.0",
-    "@backstage/types": "1.2.1",
+    "@backstage/backend-defaults": "^0.12.0",
+    "@backstage/backend-plugin-api": "^1.4.2",
+    "@backstage/catalog-client": "^1.11.0",
+    "@backstage/errors": "^1.2.7",
+    "@backstage/plugin-catalog-node": "^1.18.0",
+    "@backstage/types": "^1.2.1",
     "@modelcontextprotocol/sdk": "^1.12.3",
     "express": "^4.17.1",
     "express-promise-router": "^4.1.0",
     "zod": "^3.22.4"
   },
   "devDependencies": {
-    "@backstage/backend-test-utils": "1.7.1-next.0",
-    "@backstage/cli": "0.33.2-next.0",
+    "@backstage/backend-test-utils": "^1.8.0",
+    "@backstage/cli": "^0.34.0",
     "@types/express": "^4.17.6"
   },
   "typesVersions": {