@bluealba/pae-core 5.6.0 → 5.7.0-feature-mcp-auth-456

package/dist/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@bluealba/pae-core",
     "description": "Core package for the PAE project",
-    "version": "5.6.0",
+    "version": "5.7.0-feature-mcp-auth-456",
     "main": "./dist/src/index.js",
     "types": "./dist/src/index.d.ts",
     "files": [

package/dist/src/authorization/authorization.service.d.ts

@@ -55,7 +55,7 @@ export declare const createPAEAuthorizationService: (config: PAEAuthorizationSer
     getAllowedApplications(username: string): Promise<Application[]>;
     getAllowedOperationsForApplication(data: GetAllowedOperationsForAppDTO): Promise<Operation[]>;
     getAllowedResources(username: string, tenantId?: number): Promise<AllowedResources>;
-    isAuthorized: (module: ModuleMetadata, catalog: ModuleMetadata[], allowedResources: AllowedResources, requestPath?: string, requestMethod?: import("./isAuthorized/http-method").HttpMethod) => boolean;
+    isAuthorized: (module: ModuleMetadata, catalog: ModuleMetadata[], allowedResources: AllowedResources, requestPath?: string, requestMethod?: import("..").HttpMethod) => boolean;
     getAdminUIData(tenantId?: number): Promise<AdminUIData[]>;
     syncAssignments(dto: SyncAssignmentsDTO): Promise<void>;
 };

package/dist/src/authorization/isAuthorized/get-route-operations.d.ts

@@ -2,9 +2,21 @@ import { HttpMethod } from './http-method';
 import { ModuleMetadata } from '../../catalog/entities/module-metadata/module-metadata.entity';
 export declare const ROUTE_PATTERN_WILD_CARD = "(.*)";
 export declare const ROUTE_PATTERN_PARAMETER = ":";
+type RouteAuthorization = NonNullable<NonNullable<ModuleMetadata['authorization']>['routes']>[0];
 /**
  * Given a request to a module it returns the required operations for that route.
  * This computes any routes authorization matching.
  */
 export declare const getRoutesOperations: (module: ModuleMetadata, requestMethod: HttpMethod, requestURL: string) => string[];
+/**
+ * Given a request to a module it returns the most specific RouteAuthorization
+ * matching the request (by pattern and method), or null if none matches.
+ */
+export declare const getMatchingRoute: (module: ModuleMetadata, requestMethod: HttpMethod, requestURL: string) => RouteAuthorization | null;
+/**
+ * Returns true when the route matching the request is explicitly marked as public
+ * (does not require authentication).
+ */
+export declare const isRoutePublic: (module: ModuleMetadata, requestMethod: HttpMethod, requestURL: string) => boolean;
+export {};
 //# sourceMappingURL=get-route-operations.d.ts.map

package/dist/src/authorization/isAuthorized/get-route-operations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-route-operations.d.ts","sourceRoot":"","sources":["../../../../src/authorization/isAuthorized/get-route-operations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,+DAA+D,CAAC;AAE/F,eAAO,MAAM,uBAAuB,SAAS,CAAC;AAE9C,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAM3C;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAAI,QAAQ,cAAc,EAAE,eAAe,UAAU,EAAE,YAAY,MAAM,aAGjG,CAAC"}
+{"version":3,"file":"get-route-operations.d.ts","sourceRoot":"","sources":["../../../../src/authorization/isAuthorized/get-route-operations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,+DAA+D,CAAC;AAE/F,eAAO,MAAM,uBAAuB,SAAS,CAAC;AAE9C,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAE3C,KAAK,kBAAkB,GAAG,WAAW,CAAC,WAAW,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAIjG;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAAI,QAAQ,cAAc,EAAE,eAAe,UAAU,EAAE,YAAY,MAAM,aAGjG,CAAC;AAET;;;GAGG;AACH,eAAO,MAAM,gBAAgB,GAAI,QAAQ,cAAc,EAAE,eAAe,UAAU,EAAE,YAAY,MAAM,KAAG,kBAAkB,GAAG,IAGpH,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,aAAa,GAAI,QAAQ,cAAc,EAAE,eAAe,UAAU,EAAE,YAAY,MAAM,KAAG,OAC9B,CAAC"}

package/dist/src/authorization/isAuthorized/get-route-operations.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getRoutesOperations = exports.ROUTE_PATTERN_PARAMETER = exports.ROUTE_PATTERN_WILD_CARD = void 0;
+exports.isRoutePublic = exports.getMatchingRoute = exports.getRoutesOperations = exports.ROUTE_PATTERN_PARAMETER = exports.ROUTE_PATTERN_WILD_CARD = void 0;
 const path_to_regexp_1 = require("path-to-regexp");
 exports.ROUTE_PATTERN_WILD_CARD = '(.*)';
 exports.ROUTE_PATTERN_PARAMETER = ':';
@@ -15,6 +15,23 @@ const getRoutesOperations = (module, requestMethod, requestURL) => {
         : [];
 };
 exports.getRoutesOperations = getRoutesOperations;
+/**
+ * Given a request to a module it returns the most specific RouteAuthorization
+ * matching the request (by pattern and method), or null if none matches.
+ */
+const getMatchingRoute = (module, requestMethod, requestURL) => {
+    var _a;
+    return ((module === null || module === void 0 ? void 0 : module.authorization) && ((_a = module === null || module === void 0 ? void 0 : module.authorization) === null || _a === void 0 ? void 0 : _a.routes))
+        ? resolveRouteSpecificity(module.authorization.routes, removeQueryString(requestURL), requestMethod)
+        : null;
+};
+exports.getMatchingRoute = getMatchingRoute;
+/**
+ * Returns true when the route matching the request is explicitly marked as public
+ * (does not require authentication).
+ */
+const isRoutePublic = (module, requestMethod, requestURL) => { var _a; return ((_a = (0, exports.getMatchingRoute)(module, requestMethod, requestURL)) === null || _a === void 0 ? void 0 : _a.isPublic) === true; };
+exports.isRoutePublic = isRoutePublic;
 const removeQueryString = (requestURL) => requestURL.indexOf('?') > 0
     ? requestURL.slice(0, requestURL.indexOf('?'))
     : requestURL;

package/dist/src/authorization/isAuthorized/get-route-operations.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-route-operations.js","sourceRoot":"","sources":["../../../../src/authorization/isAuthorized/get-route-operations.ts"],"names":[],"mappings":";;;AAAA,mDAAoD;AAIvC,QAAA,uBAAuB,GAAG,MAAM,CAAC;AAEjC,QAAA,uBAAuB,GAAG,GAAG,CAAC;AAM3C;;;GAGG;AACI,MAAM,mBAAmB,GAAG,CAAC,MAAsB,EAAE,aAAyB,EAAE,UAAkB,EAAE,EAAE;;IAC3G,OAAA,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,aAAa,MAAI,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,aAAa,0CAAE,MAAM,CAAA,CAAC;QACtD,CAAC,CAAC,+BAA+B,CAAC,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,aAAa,0CAAE,MAAM,EAAE,aAAa,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC9G,CAAC,CAAC,EAAE,CAAA;CAAA,CAAC;AAHI,QAAA,mBAAmB,uBAGvB;AAET,MAAM,iBAAiB,GAAG,CAAC,UAAkB,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC,CAAC,UAAU,CAAC;AAEf,MAAM,+BAA+B,GAAG,CAAC,MAA4B,EAAE,aAAyB,EAAE,UAAkB,EAAE,EAAE,WACtH,OAAA,CAAA,MAAA,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,0CAAE,UAAU,KAAI,EAAE,CAAA,EAAA,CAAC;AAE/E,MAAM,uBAAuB,GAAG,CAAC,MAA4B,EAAE,MAAc,EAAE,SAAqB,EAAE,EAAE;IACtG,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAE7E,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,cAAc,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,MAAc,EAAE,SAAqB,EAAE,EAAE,CAAC,CAAC,KAAyB,EAAE,EAAE,CACnG,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,yBAAyB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAE5F,MAAM,yBAAyB,GAAG,CAAC,KAAyB,EAAE,SAAqB,EAAE,EAAE,CACrF,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAE3E,MAAM,mBAAmB,GAAG,CAAC,OAAgB,EAAE,GAAW,EAAE,EAAE,CAAC,IAAA,sBAAS,EAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC;AAEvF,MAAM,4BAA4B,GAAG,CAAC,CAAqB,EAAE,CAAqB,EAAE,EAAE,CACpF,0BAA0B,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,0BAA0B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAEhF,MAAM,0BAA0B,GAAG,CAAC,OAAgB,EAAE,EAAE,CACtD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;KACf,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;IACpB,IAAI,IAAI,KAAK,+BAAuB,EAAE,CAAC;QACrC,OAAO,GAAG,GAAG,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,CAAC,+BAAuB,CAAC,EAAE,CAAC;QAC7C,OAAO,GAAG,GAAG,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,GAAG,GAAG,CAAC,CAAC;AACjB,CAAC,EAAE,CAAC,CAAC,CAAC"}
+{"version":3,"file":"get-route-operations.js","sourceRoot":"","sources":["../../../../src/authorization/isAuthorized/get-route-operations.ts"],"names":[],"mappings":";;;AAAA,mDAAoD;AAIvC,QAAA,uBAAuB,GAAG,MAAM,CAAC;AAEjC,QAAA,uBAAuB,GAAG,GAAG,CAAC;AAM3C;;;GAGG;AACI,MAAM,mBAAmB,GAAG,CAAC,MAAsB,EAAE,aAAyB,EAAE,UAAkB,EAAE,EAAE;;IAC3G,OAAA,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,aAAa,MAAI,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,aAAa,0CAAE,MAAM,CAAA,CAAC;QACtD,CAAC,CAAC,+BAA+B,CAAC,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,aAAa,0CAAE,MAAM,EAAE,aAAa,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC9G,CAAC,CAAC,EAAE,CAAA;CAAA,CAAC;AAHI,QAAA,mBAAmB,uBAGvB;AAET;;;GAGG;AACI,MAAM,gBAAgB,GAAG,CAAC,MAAsB,EAAE,aAAyB,EAAE,UAAkB,EAA6B,EAAE;;IACnI,OAAA,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,aAAa,MAAI,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,aAAa,0CAAE,MAAM,CAAA,CAAC;QACtD,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,iBAAiB,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;QACpG,CAAC,CAAC,IAAI,CAAA;CAAA,CAAC;AAHE,QAAA,gBAAgB,oBAGlB;AAEX;;;GAGG;AACI,MAAM,aAAa,GAAG,CAAC,MAAsB,EAAE,aAAyB,EAAE,UAAkB,EAAW,EAAE,WAC9G,OAAA,CAAA,MAAA,IAAA,wBAAgB,EAAC,MAAM,EAAE,aAAa,EAAE,UAAU,CAAC,0CAAE,QAAQ,MAAK,IAAI,CAAA,EAAA,CAAC;AAD5D,QAAA,aAAa,iBAC+C;AAEzE,MAAM,iBAAiB,GAAG,CAAC,UAAkB,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC,CAAC,UAAU,CAAC;AAEf,MAAM,+BAA+B,GAAG,CAAC,MAA4B,EAAE,aAAyB,EAAE,UAAkB,EAAE,EAAE,WACtH,OAAA,CAAA,MAAA,uBAAuB,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,0CAAE,UAAU,KAAI,EAAE,CAAA,EAAA,CAAC;AAE/E,MAAM,uBAAuB,GAAG,CAAC,MAA4B,EAAE,MAAc,EAAE,SAAqB,EAAE,EAAE;IACtG,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAE7E,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,cAAc,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,MAAc,EAAE,SAAqB,EAAE,EAAE,CAAC,CAAC,KAAyB,EAAE,EAAE,CACnG,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,yBAAyB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAE5F,MAAM,yBAAyB,GAAG,CAAC,KAAyB,EAAE,SAAqB,EAAE,EAAE,CACrF,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAE3E,MAAM,mBAAmB,GAAG,CAAC,OAAgB,EAAE,GAAW,EAAE,EAAE,CAAC,IAAA,sBAAS,EAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC;AAEvF,MAAM,4BAA4B,GAAG,CAAC,CAAqB,EAAE,CAAqB,EAAE,EAAE,CACpF,0BAA0B,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,0BAA0B,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAEhF,MAAM,0BAA0B,GAAG,CAAC,OAAgB,EAAE,EAAE,CACtD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;KACf,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;IACpB,IAAI,IAAI,KAAK,+BAAuB,EAAE,CAAC;QACrC,OAAO,GAAG,GAAG,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,IAAI,CAAC,UAAU,CAAC,+BAAuB,CAAC,EAAE,CAAC;QAC7C,OAAO,GAAG,GAAG,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,GAAG,GAAG,CAAC,CAAC;AACjB,CAAC,EAAE,CAAC,CAAC,CAAC"}

package/dist/src/catalog/api/map-module-to-dto.d.ts

@@ -6,7 +6,7 @@ import { CreateOrUpdateModule } from "../dto";
  */
 declare const mapModuleToDTO: (module: CreateOrUpdateModule) => {
     isPublic?: boolean | undefined;
-    authorization?: import("../entities/module-metadata/authorization.interface").AuthorizationMetadata | undefined;
+    authorization?: import("../..").AuthorizationMetadata | undefined;
     activationRoute?: string | undefined;
     customProps?: import("../..").ModuleProps | undefined;
     shell?: boolean | undefined;
@@ -16,7 +16,7 @@ declare const mapModuleToDTO: (module: CreateOrUpdateModule) => {
     applicationName: string | undefined;
     name: string;
     displayName: string;
-    type: "app" | "tool" | "utility" | "service" | "cloud-function" | "documentation" | "fragment";
+    type: "app" | "tool" | "utility" | "service" | "cloud-function" | "documentation" | "fragment" | "mcp";
     baseUrl: string;
     commonPaths: import("../entities/module-metadata/common-paths.interface").CommonPathsMetadata | undefined;
     dependsOn: string[];

package/dist/src/catalog/entities/module-metadata/authorization.interface.d.ts

@@ -2,7 +2,13 @@ export type HttpMethod = 'GET' | 'HEAD' | 'OPTIONS' | 'PUT' | 'POST' | 'DELETE'
 export interface RouteAuthorization {
     methods?: HttpMethod[];
     pattern: string;
-    operations: string[];
+    operations?: string[];
+    /**
+     * When true, the route does not require authentication (public route).
+     * A public route must not declare operations: authentication is skipped,
+     * so authorization is never evaluated for it.
+     */
+    isPublic?: boolean;
 }
 export interface AuthorizationMetadata {
     operations?: string[];

package/dist/src/catalog/entities/module-metadata/authorization.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authorization.interface.d.ts","sourceRoot":"","sources":["../../../../../src/catalog/entities/module-metadata/authorization.interface.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC;AAEhH,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;CAC/B"}
+{"version":3,"file":"authorization.interface.d.ts","sourceRoot":"","sources":["../../../../../src/catalog/entities/module-metadata/authorization.interface.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC;AAEhH,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC;CAC/B"}

package/dist/src/catalog/entities/module-metadata/mcp-config.interface.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Module type literal for MCP (Model Context Protocol) servers hosted behind
+ * the gateway. Branches the OAuth 2.1 Resource Server behaviour.
+ */
+export declare const MCP_MODULE_TYPE: "mcp";
+/**
+ * Configuration for a module of type `'mcp'` (Model Context Protocol server)
+ * hosted behind the gateway. Drives the OAuth 2.1 Resource Server behaviour:
+ * Protected Resource Metadata (RFC 9728) and audience binding (RFC 8707).
+ */
+export interface McpResourceConfig {
+    /**
+     * Expected `aud` of incoming access tokens (RFC 8707). Optional: when omitted,
+     * the gateway derives it from the request as the canonical resource URI
+     * (`<protocol>://<host><baseUrl>`) — the same value advertised in the PRM and
+     * bound by the AS-facade. Set it only to pin a fixed/override audience.
+     * Validating `aud` is the central Resource Server control (anti token-passthrough).
+     */
+    audience?: string | string[];
+    /** Scopes advertised in the Protected Resource Metadata document. */
+    scopesSupported?: string[];
+    /** Human-readable resource name advertised in the PRM. */
+    resourceName?: string;
+    /**
+     * Name of the `McpAuthServerProvider` to use for this resource. When omitted,
+     * the gateway's configured default provider is used.
+     */
+    authServerProvider?: string;
+    /**
+     * Origin of the MCP server. v1 only supports in-house servers; `'third-party'`
+     * (bearer forwarding) is a planned follow-up.
+     */
+    origin: 'in-house';
+    /**
+     * Future: maps MCP scopes to existing RBAC operations so MCP access can be
+     * translated into `x-forwarded-user-operations` for downstream services.
+     */
+    scopeOperationMap?: Record<string, string[]>;
+}
+/**
+ * Type guard: returns whether the given module is an MCP module.
+ *
+ * Accepts any object exposing a `type` field (e.g. `ModuleMetadata`), so it can
+ * be reused by the gateway guards without coupling to the full entity shape.
+ */
+export declare function isMcpModule(module: {
+    type?: string;
+} | null | undefined): boolean;
+//# sourceMappingURL=mcp-config.interface.d.ts.map

package/dist/src/catalog/entities/module-metadata/mcp-config.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-config.interface.d.ts","sourceRoot":"","sources":["../../../../../src/catalog/entities/module-metadata/mcp-config.interface.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAG,KAAc,CAAC;AAE9C;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE7B,qEAAqE;IACrE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAE3B,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;OAGG;IACH,MAAM,EAAE,UAAU,CAAC;IAEnB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAC9C;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAEjF"}

package/dist/src/catalog/entities/module-metadata/mcp-config.interface.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MCP_MODULE_TYPE = void 0;
+exports.isMcpModule = isMcpModule;
+/**
+ * Module type literal for MCP (Model Context Protocol) servers hosted behind
+ * the gateway. Branches the OAuth 2.1 Resource Server behaviour.
+ */
+exports.MCP_MODULE_TYPE = 'mcp';
+/**
+ * Type guard: returns whether the given module is an MCP module.
+ *
+ * Accepts any object exposing a `type` field (e.g. `ModuleMetadata`), so it can
+ * be reused by the gateway guards without coupling to the full entity shape.
+ */
+function isMcpModule(module) {
+    return (module === null || module === void 0 ? void 0 : module.type) === exports.MCP_MODULE_TYPE;
+}
+//# sourceMappingURL=mcp-config.interface.js.map

package/dist/src/catalog/entities/module-metadata/mcp-config.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-config.interface.js","sourceRoot":"","sources":["../../../../../src/catalog/entities/module-metadata/mcp-config.interface.ts"],"names":[],"mappings":";;;AAoDA,kCAEC;AAtDD;;;GAGG;AACU,QAAA,eAAe,GAAG,KAAc,CAAC;AA0C9C;;;;;GAKG;AACH,SAAgB,WAAW,CAAC,MAA4C;IACtE,OAAO,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,IAAI,MAAK,uBAAe,CAAC;AAC1C,CAAC"}

package/dist/src/catalog/entities/module-metadata/module-metadata.entity.d.ts

@@ -1,6 +1,7 @@
 import { AuthorizationMetadata } from "./authorization.interface";
 import { MODULE_TYPES } from "./module-types.constants";
 import { CloudFunctionConfig } from "./cloud-function.interface";
+import { McpResourceConfig } from "./mcp-config.interface";
 import { ServiceConfig } from "./service-config.interface";
 import { UIConfig } from "./ui-config.interface";
 import { CommonPathsMetadata } from "./common-paths.interface";
@@ -28,6 +29,8 @@ export declare class ModuleMetadata {
      * - `utility`: Shared JS bundle loaded before other modules.
      * - `cloud-function`: Serverless function.
      * - `documentation`: Module that contributes documentation pages.
+     * - `mcp`: Model Context Protocol server hosted behind the gateway, protected
+     *   with the MCP OAuth 2.1 authorization model. Requires `mcp` (`McpResourceConfig`).
      */
     type: typeof MODULE_TYPES[number];
     /**
@@ -63,6 +66,10 @@ export declare class ModuleMetadata {
      * The authorization configuration
      */
     authorization?: AuthorizationMetadata | undefined;
+    /**
+     * MCP resource configuration. Present only for modules of type `'mcp'`.
+     */
+    mcp?: McpResourceConfig | undefined;
     /**
      * The application that this module belongs to
      */
@@ -102,6 +109,8 @@ export declare class ModuleMetadata {
      * - `utility`: Shared JS bundle loaded before other modules.
      * - `cloud-function`: Serverless function.
      * - `documentation`: Module that contributes documentation pages.
+     * - `mcp`: Model Context Protocol server hosted behind the gateway, protected
+     *   with the MCP OAuth 2.1 authorization model. Requires `mcp` (`McpResourceConfig`).
      */
     type: typeof MODULE_TYPES[number], 
     /**
@@ -133,6 +142,10 @@ export declare class ModuleMetadata {
      * The authorization configuration
      */
     authorization?: AuthorizationMetadata | undefined, 
+    /**
+     * MCP resource configuration. Present only for modules of type `'mcp'`.
+     */
+    mcp?: McpResourceConfig | undefined, 
     /**
      * The application that this module belongs to
      */

package/dist/src/catalog/entities/module-metadata/module-metadata.entity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module-metadata.entity.d.ts","sourceRoot":"","sources":["../../../../../src/catalog/entities/module-metadata/module-metadata.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,eAAO,MAAM,qBAAqB,kBAAkB,CAAA;AAUpD,qBAAa,cAAc;IAOvB;;OAEG;IACI,IAAI,EAAE,MAAM;IAEnB;;OAEG;IACI,WAAW,EAAE,MAAM;IAE1B;;;;;;;;;;;;;;OAcG;IACI,IAAI,EAAE,OAAO,YAAY,CAAC,MAAM,CAAC;IAExC;;OAEG;IACI,OAAO,EAAE,MAAM;IAEtB;;OAEG;IACI,OAAO,EAAE,aAAa;IAG7B;;;OAGG;IACI,SAAS,EAAE,MAAM,EAAE;IAEnB,SAAS,EAAE,MAAM;IACjB,SAAS,EAAE,IAAI;IACf,SAAS,EAAE,MAAM;IACjB,SAAS,EAAE,IAAI;IAEtB;;OAEG;IACI,WAAW,CAAC,EAAE,mBAAmB;IAExC;;OAEG;IACI,EAAE,CAAC,EAAE,QAAQ;IAEpB;;OAEG;IACI,aAAa,CAAC,EAAE,mBAAmB;IAE1C;;OAEG;IACI,aAAa,CAAC,EAAE,qBAAqB;IAE5C;;OAEG;IACI,WAAW,CAAC,EAAE,MAAM;IAE3B;;OAEG;IACI,OAAO,CAAC,EAAE,MAAM;IAEvB;;OAEG;IACI,QAAQ,CAAC,EAAE,OAAO;IAxF3B;;SAEK;IACE,EAAE,CAAC,EAAE,MAAM,CAAC;;IAGjB;;OAEG;IACI,IAAI,EAAE,MAAM;IAEnB;;OAEG;IACI,WAAW,EAAE,MAAM;IAE1B;;;;;;;;;;;;;;OAcG;IACI,IAAI,EAAE,OAAO,YAAY,CAAC,MAAM,CAAC;IAExC;;OAEG;IACI,OAAO,EAAE,MAAM;IAEtB;;OAEG;IACI,OAAO,EAAE,aAAa;IAG7B;;;OAGG;IACI,SAAS,EAAE,MAAM,EAAE,EAEnB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,IAAI,EACf,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,IAAI;IAEtB;;OAEG;IACI,WAAW,CAAC,EAAE,mBAAmB,YAAA;IAExC;;OAEG;IACI,EAAE,CAAC,EAAE,QAAQ,YAAA;IAEpB;;OAEG;IACI,aAAa,CAAC,EAAE,mBAAmB,YAAA;IAE1C;;OAEG;IACI,aAAa,CAAC,EAAE,qBAAqB,YAAA;IAE5C;;OAEG;IACI,WAAW,CAAC,EAAE,MAAM,YAAA;IAE3B;;OAEG;IACI,OAAO,CAAC,EAAE,MAAM,YAAA;IAEvB;;OAEG;IACI,QAAQ,CAAC,EAAE,OAAO,YAAA;CAI5B"}
+{"version":3,"file":"module-metadata.entity.d.ts","sourceRoot":"","sources":["../../../../../src/catalog/entities/module-metadata/module-metadata.entity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,eAAO,MAAM,qBAAqB,kBAAkB,CAAA;AAUpD,qBAAa,cAAc;IAOvB;;OAEG;IACI,IAAI,EAAE,MAAM;IAEnB;;OAEG;IACI,WAAW,EAAE,MAAM;IAE1B;;;;;;;;;;;;;;;;OAgBG;IACI,IAAI,EAAE,OAAO,YAAY,CAAC,MAAM,CAAC;IAExC;;OAEG;IACI,OAAO,EAAE,MAAM;IAEtB;;OAEG;IACI,OAAO,EAAE,aAAa;IAG7B;;;OAGG;IACI,SAAS,EAAE,MAAM,EAAE;IAEnB,SAAS,EAAE,MAAM;IACjB,SAAS,EAAE,IAAI;IACf,SAAS,EAAE,MAAM;IACjB,SAAS,EAAE,IAAI;IAEtB;;OAEG;IACI,WAAW,CAAC,EAAE,mBAAmB;IAExC;;OAEG;IACI,EAAE,CAAC,EAAE,QAAQ;IAEpB;;OAEG;IACI,aAAa,CAAC,EAAE,mBAAmB;IAE1C;;OAEG;IACI,aAAa,CAAC,EAAE,qBAAqB;IAE5C;;OAEG;IACI,GAAG,CAAC,EAAE,iBAAiB;IAE9B;;OAEG;IACI,WAAW,CAAC,EAAE,MAAM;IAE3B;;OAEG;IACI,OAAO,CAAC,EAAE,MAAM;IAEvB;;OAEG;IACI,QAAQ,CAAC,EAAE,OAAO;IA/F3B;;SAEK;IACE,EAAE,CAAC,EAAE,MAAM,CAAC;;IAGjB;;OAEG;IACI,IAAI,EAAE,MAAM;IAEnB;;OAEG;IACI,WAAW,EAAE,MAAM;IAE1B;;;;;;;;;;;;;;;;OAgBG;IACI,IAAI,EAAE,OAAO,YAAY,CAAC,MAAM,CAAC;IAExC;;OAEG;IACI,OAAO,EAAE,MAAM;IAEtB;;OAEG;IACI,OAAO,EAAE,aAAa;IAG7B;;;OAGG;IACI,SAAS,EAAE,MAAM,EAAE,EAEnB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,IAAI,EACf,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,IAAI;IAEtB;;OAEG;IACI,WAAW,CAAC,EAAE,mBAAmB,YAAA;IAExC;;OAEG;IACI,EAAE,CAAC,EAAE,QAAQ,YAAA;IAEpB;;OAEG;IACI,aAAa,CAAC,EAAE,mBAAmB,YAAA;IAE1C;;OAEG;IACI,aAAa,CAAC,EAAE,qBAAqB,YAAA;IAE5C;;OAEG;IACI,GAAG,CAAC,EAAE,iBAAiB,YAAA;IAE9B;;OAEG;IACI,WAAW,CAAC,EAAE,MAAM,YAAA;IAE3B;;OAEG;IACI,OAAO,CAAC,EAAE,MAAM,YAAA;IAEvB;;OAEG;IACI,QAAQ,CAAC,EAAE,OAAO,YAAA;CAI5B"}

package/dist/src/catalog/entities/module-metadata/module-metadata.entity.js

@@ -33,6 +33,8 @@ class ModuleMetadata {
      * - `utility`: Shared JS bundle loaded before other modules.
      * - `cloud-function`: Serverless function.
      * - `documentation`: Module that contributes documentation pages.
+     * - `mcp`: Model Context Protocol server hosted behind the gateway, protected
+     *   with the MCP OAuth 2.1 authorization model. Requires `mcp` (`McpResourceConfig`).
      */
     type, 
     /**
@@ -64,6 +66,10 @@ class ModuleMetadata {
      * The authorization configuration
      */
     authorization, 
+    /**
+     * MCP resource configuration. Present only for modules of type `'mcp'`.
+     */
+    mcp, 
     /**
      * The application that this module belongs to
      */
@@ -90,6 +96,7 @@ class ModuleMetadata {
         this.ui = ui;
         this.cloudFunction = cloudFunction;
         this.authorization = authorization;
+        this.mcp = mcp;
         this.application = application;
         this.version = version;
         this.isPublic = isPublic;

package/dist/src/catalog/entities/module-metadata/module-metadata.entity.js.map

@@ -1 +1 @@
-{"version":3,"file":"module-metadata.entity.js","sourceRoot":"","sources":["../../../../../src/catalog/entities/module-metadata/module-metadata.entity.ts"],"names":[],"mappings":";;;AAOa,QAAA,qBAAqB,GAAG,eAAe,CAAA;AAEpD,6FAA6F;AAC7F,gDAAgD;AAChD,uHAAuH;AACvH,sDAAsD;AACtD,sGAAsG;AACtG,0CAA0C;AAC1C,4GAA4G;AAE5G,MAAa,cAAc;IAMzB;IACE;;OAEG;IACI,IAAY;IAEnB;;OAEG;IACI,WAAmB;IAE1B;;;;;;;;;;;;;;OAcG;IACI,IAAiC;IAExC;;OAEG;IACI,OAAe;IAEtB;;OAEG;IACI,OAAsB;IAG7B;;;OAGG;IACI,SAAmB,EAEnB,SAAiB,EACjB,SAAe,EACf,SAAiB,EACjB,SAAe;IAEtB;;OAEG;IACI,WAAiC;IAExC;;OAEG;IACI,EAAa;IAEpB;;OAEG;IACI,aAAmC;IAE1C;;OAEG;IACI,aAAqC;IAE5C;;OAEG;IACI,WAAoB;IAE3B;;OAEG;IACI,OAAgB;IAEvB;;OAEG;IACI,QAAkB;QA/ElB,SAAI,GAAJ,IAAI,CAAQ;QAKZ,gBAAW,GAAX,WAAW,CAAQ;QAiBnB,SAAI,GAAJ,IAAI,CAA6B;QAKjC,YAAO,GAAP,OAAO,CAAQ;QAKf,YAAO,GAAP,OAAO,CAAe;QAOtB,cAAS,GAAT,SAAS,CAAU;QAEnB,cAAS,GAAT,SAAS,CAAQ;QACjB,cAAS,GAAT,SAAS,CAAM;QACf,cAAS,GAAT,SAAS,CAAQ;QACjB,cAAS,GAAT,SAAS,CAAM;QAKf,gBAAW,GAAX,WAAW,CAAsB;QAKjC,OAAE,GAAF,EAAE,CAAW;QAKb,kBAAa,GAAb,aAAa,CAAsB;QAKnC,kBAAa,GAAb,aAAa,CAAwB;QAKrC,gBAAW,GAAX,WAAW,CAAS;QAKpB,YAAO,GAAP,OAAO,CAAS;QAKhB,aAAQ,GAAR,QAAQ,CAAU;IAEvB,CAAC;CAEN;AA7FD,wCA6FC"}
+{"version":3,"file":"module-metadata.entity.js","sourceRoot":"","sources":["../../../../../src/catalog/entities/module-metadata/module-metadata.entity.ts"],"names":[],"mappings":";;;AAQa,QAAA,qBAAqB,GAAG,eAAe,CAAA;AAEpD,6FAA6F;AAC7F,gDAAgD;AAChD,uHAAuH;AACvH,sDAAsD;AACtD,sGAAsG;AACtG,0CAA0C;AAC1C,4GAA4G;AAE5G,MAAa,cAAc;IAMzB;IACE;;OAEG;IACI,IAAY;IAEnB;;OAEG;IACI,WAAmB;IAE1B;;;;;;;;;;;;;;;;OAgBG;IACI,IAAiC;IAExC;;OAEG;IACI,OAAe;IAEtB;;OAEG;IACI,OAAsB;IAG7B;;;OAGG;IACI,SAAmB,EAEnB,SAAiB,EACjB,SAAe,EACf,SAAiB,EACjB,SAAe;IAEtB;;OAEG;IACI,WAAiC;IAExC;;OAEG;IACI,EAAa;IAEpB;;OAEG;IACI,aAAmC;IAE1C;;OAEG;IACI,aAAqC;IAE5C;;OAEG;IACI,GAAuB;IAE9B;;OAEG;IACI,WAAoB;IAE3B;;OAEG;IACI,OAAgB;IAEvB;;OAEG;IACI,QAAkB;QAtFlB,SAAI,GAAJ,IAAI,CAAQ;QAKZ,gBAAW,GAAX,WAAW,CAAQ;QAmBnB,SAAI,GAAJ,IAAI,CAA6B;QAKjC,YAAO,GAAP,OAAO,CAAQ;QAKf,YAAO,GAAP,OAAO,CAAe;QAOtB,cAAS,GAAT,SAAS,CAAU;QAEnB,cAAS,GAAT,SAAS,CAAQ;QACjB,cAAS,GAAT,SAAS,CAAM;QACf,cAAS,GAAT,SAAS,CAAQ;QACjB,cAAS,GAAT,SAAS,CAAM;QAKf,gBAAW,GAAX,WAAW,CAAsB;QAKjC,OAAE,GAAF,EAAE,CAAW;QAKb,kBAAa,GAAb,aAAa,CAAsB;QAKnC,kBAAa,GAAb,aAAa,CAAwB;QAKrC,QAAG,GAAH,GAAG,CAAoB;QAKvB,gBAAW,GAAX,WAAW,CAAS;QAKpB,YAAO,GAAP,OAAO,CAAS;QAKhB,aAAQ,GAAR,QAAQ,CAAU;IAEvB,CAAC;CAEN;AApGD,wCAoGC"}

package/dist/src/catalog/entities/module-metadata/module-types.constants.d.ts

@@ -1,2 +1,2 @@
-export declare const MODULE_TYPES: readonly ["app", "tool", "utility", "service", "cloud-function", "documentation", "fragment"];
+export declare const MODULE_TYPES: readonly ["app", "tool", "utility", "service", "cloud-function", "documentation", "fragment", "mcp"];
 //# sourceMappingURL=module-types.constants.d.ts.map

package/dist/src/catalog/entities/module-metadata/module-types.constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module-types.constants.d.ts","sourceRoot":"","sources":["../../../../../src/catalog/entities/module-metadata/module-types.constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,+FAAgG,CAAC"}
+{"version":3,"file":"module-types.constants.d.ts","sourceRoot":"","sources":["../../../../../src/catalog/entities/module-metadata/module-types.constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,sGAAuG,CAAC"}

package/dist/src/catalog/entities/module-metadata/module-types.constants.js

@@ -1,5 +1,5 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MODULE_TYPES = void 0;
-exports.MODULE_TYPES = ['app', 'tool', 'utility', 'service', 'cloud-function', 'documentation', 'fragment'];
+exports.MODULE_TYPES = ['app', 'tool', 'utility', 'service', 'cloud-function', 'documentation', 'fragment', 'mcp'];
 //# sourceMappingURL=module-types.constants.js.map

package/dist/src/catalog/entities/module-metadata/module-types.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"module-types.constants.js","sourceRoot":"","sources":["../../../../../src/catalog/entities/module-metadata/module-types.constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,YAAY,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,UAAU,CAAU,CAAC"}
+{"version":3,"file":"module-types.constants.js","sourceRoot":"","sources":["../../../../../src/catalog/entities/module-metadata/module-types.constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,YAAY,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,CAAU,CAAC"}

package/dist/src/catalog/pae-modules.constants.d.ts

@@ -5,5 +5,6 @@ export declare const PAE_MODULES_NAMES: {
     ROOMS_SERVICE: string;
     GATEWAY_SERVICE: string;
     DOCUMENTATION: string;
+    PLATFORM_MCP_SERVICE: string;
 };
 //# sourceMappingURL=pae-modules.constants.d.ts.map

package/dist/src/catalog/pae-modules.constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pae-modules.constants.d.ts","sourceRoot":"","sources":["../../../src/catalog/pae-modules.constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iBAAiB;;;;;;;CAO7B,CAAA"}
+{"version":3,"file":"pae-modules.constants.d.ts","sourceRoot":"","sources":["../../../src/catalog/pae-modules.constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iBAAiB;;;;;;;;CAQ7B,CAAA"}

package/dist/src/catalog/pae-modules.constants.js

@@ -8,5 +8,6 @@ exports.PAE_MODULES_NAMES = {
     ROOMS_SERVICE: '@bluealba/pae-rooms-service',
     GATEWAY_SERVICE: '@bluealba/pae-nestjs-gateway-service',
     DOCUMENTATION: '@bluealba/pae-documentation',
+    PLATFORM_MCP_SERVICE: '@bluealba/pae-platform-mcp-service',
 };
 //# sourceMappingURL=pae-modules.constants.js.map

package/dist/src/catalog/pae-modules.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"pae-modules.constants.js","sourceRoot":"","sources":["../../../src/catalog/pae-modules.constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,iBAAiB,GAAG;IAC/B,QAAQ,EAAE,wBAAwB;IAClC,gBAAgB,EAAE,gCAAgC;IAClD,QAAQ,EAAE,wBAAwB;IAClC,aAAa,EAAE,6BAA6B;IAC5C,eAAe,EAAE,sCAAsC;IACvD,aAAa,EAAE,6BAA6B;CAC7C,CAAA"}
+{"version":3,"file":"pae-modules.constants.js","sourceRoot":"","sources":["../../../src/catalog/pae-modules.constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,iBAAiB,GAAG;IAC/B,QAAQ,EAAE,wBAAwB;IAClC,gBAAgB,EAAE,gCAAgC;IAClD,QAAQ,EAAE,wBAAwB;IAClC,aAAa,EAAE,6BAA6B;IAC5C,eAAe,EAAE,sCAAsC;IACvD,aAAa,EAAE,6BAA6B;IAC5C,oBAAoB,EAAE,oCAAoC;CAC3D,CAAA"}

package/dist/src/core/create-pae-service-from-catalog.d.ts

@@ -55,7 +55,7 @@ export declare const createPAEServiceFromCatalog: (catalog: ModuleMetadata[], op
     getAllowedApplications(username: string): Promise<import("..").Application[]>;
     getAllowedOperationsForApplication(data: import("..").GetAllowedOperationsForAppDTO): Promise<import("..").Operation[]>;
     getAllowedResources(username: string, tenantId?: number): Promise<import("..").AllowedResources>;
-    isAuthorized: (module: ModuleMetadata, catalog: ModuleMetadata[], allowedResources: import("..").AllowedResources, requestPath?: string, requestMethod?: import("../authorization/isAuthorized/http-method").HttpMethod) => boolean;
+    isAuthorized: (module: ModuleMetadata, catalog: ModuleMetadata[], allowedResources: import("..").AllowedResources, requestPath?: string, requestMethod?: import("..").HttpMethod) => boolean;
     getAdminUIData(tenantId?: number): Promise<import("../authorization/entities/admin-ui-data.entity").AdminUIData[]>;
     syncAssignments(dto: import("..").SyncAssignmentsDTO): Promise<void>;
     getAllModules: () => Promise<ModuleMetadata[]>;

package/dist/src/core/create-pae-service.d.ts

@@ -56,7 +56,7 @@ export declare const createPAEService: (config: PAEServiceConfig, opts?: Service
     getAllowedApplications(username: string): Promise<import("../authorization").Application[]>;
     getAllowedOperationsForApplication(data: import("../authorization").GetAllowedOperationsForAppDTO): Promise<import("../authorization").Operation[]>;
     getAllowedResources(username: string, tenantId?: number): Promise<import("..").AllowedResources>;
-    isAuthorized: (module: ModuleMetadata, catalog: ModuleMetadata[], allowedResources: import("..").AllowedResources, requestPath?: string, requestMethod?: import("../authorization/isAuthorized/http-method").HttpMethod) => boolean;
+    isAuthorized: (module: ModuleMetadata, catalog: ModuleMetadata[], allowedResources: import("..").AllowedResources, requestPath?: string, requestMethod?: import("..").HttpMethod) => boolean;
     getAdminUIData(tenantId?: number): Promise<import("../authorization/entities/admin-ui-data.entity").AdminUIData[]>;
     syncAssignments(dto: import("../authorization").SyncAssignmentsDTO): Promise<void>;
     getAllModules: () => Promise<ModuleMetadata[]>;
@@ -133,7 +133,7 @@ export declare const createPAE: (catalogURL: string, accessToken: string, opts?:
     getAllowedApplications(username: string): Promise<import("../authorization").Application[]>;
     getAllowedOperationsForApplication(data: import("../authorization").GetAllowedOperationsForAppDTO): Promise<import("../authorization").Operation[]>;
     getAllowedResources(username: string, tenantId?: number): Promise<import("..").AllowedResources>;
-    isAuthorized: (module: ModuleMetadata, catalog: ModuleMetadata[], allowedResources: import("..").AllowedResources, requestPath?: string, requestMethod?: import("../authorization/isAuthorized/http-method").HttpMethod) => boolean;
+    isAuthorized: (module: ModuleMetadata, catalog: ModuleMetadata[], allowedResources: import("..").AllowedResources, requestPath?: string, requestMethod?: import("..").HttpMethod) => boolean;
     getAdminUIData(tenantId?: number): Promise<import("../authorization/entities/admin-ui-data.entity").AdminUIData[]>;
     syncAssignments(dto: import("../authorization").SyncAssignmentsDTO): Promise<void>;
     getAllModules: () => Promise<ModuleMetadata[]>;

package/dist/src/index.d.ts

@@ -7,9 +7,13 @@ export * from './authentication';
 export * from './catalog';
 export { SharedLibrary } from './orchestrator/entities/SharedLibrary.entity';
 export { ApplicationWithOperations } from './authorization/isAuthorized/application-with-operations';
+export { getMatchingRoute, isRoutePublic, getRoutesOperations } from './authorization/isAuthorized/get-route-operations';
+export type { HttpMethod } from './authorization/isAuthorized/http-method';
+export type { RouteAuthorization, AuthorizationMetadata } from './catalog/entities/module-metadata/authorization.interface';
 export { AllowedResources } from './authorization/entities/allowed-resources.entity';
 export * from './authorization/entities/admin-ui/admin-ui';
 export * from './catalog/entities/module-metadata/module-metadata.entity';
+export * from './catalog/entities/module-metadata/mcp-config.interface';
 export * from './catalog/entities/module-metadata/ui-config.interface';
 export * from './catalog/entities/module-metadata/service-config.interface';
 export * from './catalog/entities/module-metadata/compute-is-public';

package/dist/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wCAAwC,CAAC;AAIvD,cAAc,iBAAiB,CAAA;AAC/B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,UAAU,CAAA;AACxB,cAAc,kBAAkB,CAAA;AAChC,cAAc,WAAW,CAAA;AAEzB,OAAO,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,0DAA0D,CAAC;AACrG,OAAO,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AACrF,cAAc,4CAA4C,CAAC;AAG3D,cAAc,2DAA2D,CAAC;AAC1E,cAAc,wDAAwD,CAAC;AACvE,cAAc,6DAA6D,CAAC;AAC5E,cAAc,sDAAsD,CAAC;AAErE,cAAc,0BAA0B,CAAC;AACzC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,QAAQ,CAAC;AACvB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAI/F,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,cAAc,0BAA0B,CAAC;AAIzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAG5C,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wCAAwC,CAAC;AAIvD,cAAc,iBAAiB,CAAA;AAC/B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,UAAU,CAAA;AACxB,cAAc,kBAAkB,CAAA;AAChC,cAAc,WAAW,CAAA;AAEzB,OAAO,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,0DAA0D,CAAC;AACrG,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,mDAAmD,CAAC;AACzH,YAAY,EAAE,UAAU,EAAE,MAAM,0CAA0C,CAAC;AAC3E,YAAY,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,4DAA4D,CAAC;AAC5H,OAAO,EAAE,gBAAgB,EAAE,MAAM,mDAAmD,CAAC;AACrF,cAAc,4CAA4C,CAAC;AAG3D,cAAc,2DAA2D,CAAC;AAC1E,cAAc,yDAAyD,CAAC;AACxE,cAAc,wDAAwD,CAAC;AACvE,cAAc,6DAA6D,CAAC;AAC5E,cAAc,sDAAsD,CAAC;AAErE,cAAc,0BAA0B,CAAC;AACzC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,QAAQ,CAAC;AACvB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAI/F,OAAO,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,cAAc,0BAA0B,CAAC;AAIzC,cAAc,yBAAyB,CAAC;AACxC,cAAc,wBAAwB,CAAC;AACvC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,6BAA6B,CAAC;AAG5C,cAAc,WAAW,CAAC"}

package/dist/src/index.js

@@ -15,7 +15,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PAE_MODULES_NAMES = exports.PLATFORM_APPLICATION_NAME = exports.isAuthenticatedUser = exports.isAnonymousUser = exports.AllowedResources = exports.SharedLibrary = void 0;
+exports.PAE_MODULES_NAMES = exports.PLATFORM_APPLICATION_NAME = exports.isAuthenticatedUser = exports.isAnonymousUser = exports.AllowedResources = exports.getRoutesOperations = exports.isRoutePublic = exports.getMatchingRoute = exports.SharedLibrary = void 0;
 __exportStar(require("./core/create-pae-service"), exports);
 __exportStar(require("./core/create-pae-service-from-catalog"), exports);
 // Exporting entities and other types
@@ -26,11 +26,16 @@ __exportStar(require("./authentication"), exports);
 __exportStar(require("./catalog"), exports);
 var SharedLibrary_entity_1 = require("./orchestrator/entities/SharedLibrary.entity");
 Object.defineProperty(exports, "SharedLibrary", { enumerable: true, get: function () { return SharedLibrary_entity_1.SharedLibrary; } });
+var get_route_operations_1 = require("./authorization/isAuthorized/get-route-operations");
+Object.defineProperty(exports, "getMatchingRoute", { enumerable: true, get: function () { return get_route_operations_1.getMatchingRoute; } });
+Object.defineProperty(exports, "isRoutePublic", { enumerable: true, get: function () { return get_route_operations_1.isRoutePublic; } });
+Object.defineProperty(exports, "getRoutesOperations", { enumerable: true, get: function () { return get_route_operations_1.getRoutesOperations; } });
 var allowed_resources_entity_1 = require("./authorization/entities/allowed-resources.entity");
 Object.defineProperty(exports, "AllowedResources", { enumerable: true, get: function () { return allowed_resources_entity_1.AllowedResources; } });
 __exportStar(require("./authorization/entities/admin-ui/admin-ui"), exports);
 // catalog
 __exportStar(require("./catalog/entities/module-metadata/module-metadata.entity"), exports);
+__exportStar(require("./catalog/entities/module-metadata/mcp-config.interface"), exports);
 __exportStar(require("./catalog/entities/module-metadata/ui-config.interface"), exports);
 __exportStar(require("./catalog/entities/module-metadata/service-config.interface"), exports);
 __exportStar(require("./catalog/entities/module-metadata/compute-is-public"), exports);

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA,aAAa;;;;;;;;;;;;;;;;;AAEb,4DAA0C;AAC1C,yEAAuD;AAEvD,qCAAqC;AAErC,kDAA+B;AAC/B,iDAA8B;AAC9B,2CAAwB;AACxB,mDAAgC;AAChC,4CAAyB;AAEzB,qFAA6E;AAApE,qHAAA,aAAa,OAAA;AAEtB,8FAAqF;AAA5E,4HAAA,gBAAgB,OAAA;AACzB,6EAA2D;AAE3D,UAAU;AACV,4FAA0E;AAC1E,yFAAuE;AACvE,8FAA4E;AAC5E,uFAAqE;AAErE,2DAAyC;AACzC,+DAA6C;AAC7C,yCAAuB;AACvB,mDAA+F;AAA/D,iHAAA,eAAe,OAAA;AAAE,qHAAA,mBAAmB,OAAA;AAEpE,sBAAsB;AAEtB,gFAA+E;AAAtE,sIAAA,yBAAyB,OAAA;AAClC,yEAAoE;AAA3D,0HAAA,iBAAiB,OAAA;AAC1B,2DAAyC;AAEzC,yBAAyB;AAEzB,0DAAwC;AACxC,yDAAuC;AACvC,+DAA6C;AAC7C,8DAA4C;AAE5C,UAAU;AACV,4CAA0B;AAM1B,4FAA4F;AAC5F,kEAAkE;AAClE,qDAAqD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA,aAAa;;;;;;;;;;;;;;;;;AAEb,4DAA0C;AAC1C,yEAAuD;AAEvD,qCAAqC;AAErC,kDAA+B;AAC/B,iDAA8B;AAC9B,2CAAwB;AACxB,mDAAgC;AAChC,4CAAyB;AAEzB,qFAA6E;AAApE,qHAAA,aAAa,OAAA;AAEtB,0FAAyH;AAAhH,wHAAA,gBAAgB,OAAA;AAAE,qHAAA,aAAa,OAAA;AAAE,2HAAA,mBAAmB,OAAA;AAG7D,8FAAqF;AAA5E,4HAAA,gBAAgB,OAAA;AACzB,6EAA2D;AAE3D,UAAU;AACV,4FAA0E;AAC1E,0FAAwE;AACxE,yFAAuE;AACvE,8FAA4E;AAC5E,uFAAqE;AAErE,2DAAyC;AACzC,+DAA6C;AAC7C,yCAAuB;AACvB,mDAA+F;AAA/D,iHAAA,eAAe,OAAA;AAAE,qHAAA,mBAAmB,OAAA;AAEpE,sBAAsB;AAEtB,gFAA+E;AAAtE,sIAAA,yBAAyB,OAAA;AAClC,yEAAoE;AAA3D,0HAAA,iBAAiB,OAAA;AAC1B,2DAAyC;AAEzC,yBAAyB;AAEzB,0DAAwC;AACxC,yDAAuC;AACvC,+DAA6C;AAC7C,8DAA4C;AAE5C,UAAU;AACV,4CAA0B;AAM1B,4FAA4F;AAC5F,kEAAkE;AAClE,qDAAqD"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@bluealba/pae-core",
   "description": "Core package for the PAE project",
-  "version": "5.6.0",
+  "version": "5.7.0-feature-mcp-auth-456",
   "main": "./dist/src/index.js",
   "types": "./dist/src/index.d.ts",
   "files": [