@fastybird/smart-panel-backend 1.0.0-beta.3 → 1.1.0-alpha.0

package/dist/modules/mcp/mcp.module.js

@@ -0,0 +1,272 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpModule = void 0;
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const typeorm_1 = require("@nestjs/typeorm");
+const api_module_1 = require("../api/api.module");
+const auth_module_1 = require("../auth/auth.module");
+const module_config_mutation_registry_service_1 = require("../config/services/module-config-mutation-registry.service");
+const modules_type_mapper_service_1 = require("../config/services/modules-type-mapper.service");
+const devices_module_1 = require("../devices/devices.module");
+const energy_module_1 = require("../energy/energy.module");
+const extensions_service_1 = require("../extensions/services/extensions.service");
+const home_context_module_1 = require("../home-context/home-context.module");
+const scenes_module_1 = require("../scenes/scenes.module");
+const security_module_1 = require("../security/security.module");
+const spaces_module_1 = require("../spaces/spaces.module");
+const stats_registry_service_1 = require("../stats/services/stats-registry.service");
+const stats_module_1 = require("../stats/stats.module");
+const api_tag_decorator_1 = require("../swagger/decorators/api-tag.decorator");
+const swagger_models_registry_service_1 = require("../swagger/services/swagger-models-registry.service");
+const swagger_module_1 = require("../swagger/swagger.module");
+const tools_module_1 = require("../tools/tools.module");
+const user_lifecycle_mutation_registry_service_1 = require("../users/services/user-lifecycle-mutation-registry.service");
+const users_module_1 = require("../users/users.module");
+const weather_module_1 = require("../weather/weather.module");
+const mcp_clients_controller_1 = require("./controllers/mcp-clients.controller");
+const mcp_oauth_clients_controller_1 = require("./controllers/mcp-oauth-clients.controller");
+const mcp_oauth_interactions_controller_1 = require("./controllers/mcp-oauth-interactions.controller");
+const mcp_oauth_management_controller_1 = require("./controllers/mcp-oauth-management.controller");
+const mcp_controller_1 = require("./controllers/mcp.controller");
+const update_config_dto_1 = require("./dto/update-config.dto");
+const mcp_client_entity_1 = require("./entities/mcp-client.entity");
+const mcp_installation_entity_1 = require("./entities/mcp-installation.entity");
+const mcp_oauth_entity_1 = require("./entities/mcp-oauth.entity");
+const mcp_client_guard_1 = require("./guards/mcp-client.guard");
+const mcp_config_listener_1 = require("./listeners/mcp-config.listener");
+const mcp_constants_1 = require("./mcp.constants");
+const mcp_openapi_1 = require("./mcp.openapi");
+const config_model_1 = require("./models/config.model");
+const mcp_oauth_provider_factory_1 = require("./oauth/mcp-oauth-provider.factory");
+const mcp_stats_provider_1 = require("./providers/mcp-stats.provider");
+const mcp_audit_service_1 = require("./services/mcp-audit.service");
+const mcp_client_service_1 = require("./services/mcp-client.service");
+const mcp_context_service_1 = require("./services/mcp-context.service");
+const mcp_installation_service_1 = require("./services/mcp-installation.service");
+const mcp_oauth_approver_authority_service_1 = require("./services/mcp-oauth-approver-authority.service");
+const mcp_oauth_artifact_service_1 = require("./services/mcp-oauth-artifact.service");
+const mcp_oauth_bootstrap_service_1 = require("./services/mcp-oauth-bootstrap.service");
+const mcp_oauth_client_service_1 = require("./services/mcp-oauth-client.service");
+const mcp_oauth_endpoint_rate_limit_service_1 = require("./services/mcp-oauth-endpoint-rate-limit.service");
+const mcp_oauth_global_invalidation_service_1 = require("./services/mcp-oauth-global-invalidation.service");
+const mcp_oauth_interaction_service_1 = require("./services/mcp-oauth-interaction.service");
+const mcp_oauth_lifecycle_service_1 = require("./services/mcp-oauth-lifecycle.service");
+const mcp_oauth_management_service_1 = require("./services/mcp-oauth-management.service");
+const mcp_oauth_module_config_mutation_service_1 = require("./services/mcp-oauth-module-config-mutation.service");
+const mcp_oauth_provider_material_service_1 = require("./services/mcp-oauth-provider-material.service");
+const mcp_oauth_proxy_policy_service_1 = require("./services/mcp-oauth-proxy-policy.service");
+const mcp_oauth_public_url_service_1 = require("./services/mcp-oauth-public-url.service");
+const mcp_oauth_readiness_registration_service_1 = require("./services/mcp-oauth-readiness-registration.service");
+const mcp_oauth_readiness_service_1 = require("./services/mcp-oauth-readiness.service");
+const mcp_oauth_refresh_token_service_1 = require("./services/mcp-oauth-refresh-token.service");
+const mcp_oauth_resource_server_service_1 = require("./services/mcp-oauth-resource-server.service");
+const mcp_oauth_route_gate_service_1 = require("./services/mcp-oauth-route-gate.service");
+const mcp_oauth_runtime_service_1 = require("./services/mcp-oauth-runtime.service");
+const mcp_oauth_switch_off_service_1 = require("./services/mcp-oauth-switch-off.service");
+const mcp_policy_service_1 = require("./services/mcp-policy.service");
+const mcp_server_service_1 = require("./services/mcp-server.service");
+const mcp_subscription_registry_service_1 = require("./services/mcp-subscription-registry.service");
+const mcp_read_tool_service_1 = require("./tools/mcp-read-tool.service");
+const mcp_target_discovery_tool_service_1 = require("./tools/mcp-target-discovery-tool.service");
+let McpModule = class McpModule {
+    constructor(swaggerRegistry, modulesMapperService, moduleConfigMutations, moduleConfigMutation, userLifecycleMutations, approverAuthority, extensionsService, statsRegistryService, statsProvider) {
+        this.swaggerRegistry = swaggerRegistry;
+        this.modulesMapperService = modulesMapperService;
+        this.moduleConfigMutations = moduleConfigMutations;
+        this.moduleConfigMutation = moduleConfigMutation;
+        this.userLifecycleMutations = userLifecycleMutations;
+        this.approverAuthority = approverAuthority;
+        this.extensionsService = extensionsService;
+        this.statsRegistryService = statsRegistryService;
+        this.statsProvider = statsProvider;
+    }
+    onModuleInit() {
+        this.modulesMapperService.registerMapping({
+            type: mcp_constants_1.MCP_MODULE_NAME,
+            class: config_model_1.McpConfigModel,
+            configDto: update_config_dto_1.UpdateMcpConfigDto,
+        });
+        this.moduleConfigMutations.register(mcp_constants_1.MCP_MODULE_NAME, (update, commit) => this.moduleConfigMutation.update(update, commit));
+        this.userLifecycleMutations.register(this.approverAuthority);
+        for (const model of mcp_openapi_1.MCP_SWAGGER_EXTRA_MODELS) {
+            this.swaggerRegistry.register(model);
+        }
+        this.statsRegistryService.register(mcp_constants_1.MCP_MODULE_NAME, this.statsProvider);
+        this.extensionsService.registerModuleMetadata({
+            type: mcp_constants_1.MCP_MODULE_NAME,
+            name: 'Model Context Protocol',
+            description: 'Curated, capability-scoped agent access to this Smart Panel installation',
+            author: 'FastyBird',
+            defaultEnabled: false,
+            capabilities: Object.values(mcp_constants_1.McpCapability),
+            readme: `# Model Context Protocol
+
+> Module · by FastyBird
+
+Connects trusted MCP-compatible agents to a curated set of Smart Panel tools and resources. The module is disabled by default and its read, direct-write, and higher-level trigger capabilities can be enabled independently.
+
+## Security posture
+
+- Uses installation-local MCP credentials rather than ordinary user, display, or REST tokens
+- Returns each finite-lived credential once; rotate it if the secret was not saved or may have leaked
+- Exposes only explicitly registered tools and resources; it is not an OpenAPI proxy
+- Rechecks the installation capability ceiling and client grant for every operation
+- Targets trusted LAN or VPN deployments behind HTTPS for the initial static-bearer release
+- Requires users to verify the installation hostname and reported name before approving write or trigger tools
+- Honours forwarded identity headers for OAuth requests only from an immediate peer listed in the
+  \`FB_MCP_OAUTH_TRUSTED_PROXIES\` environment variable or trusted by the platform's shared remote-access
+  proxy registry (for example a connected Tailscale Serve); every other peer's forwarded headers are rejected
+
+## Configuration
+
+| Option | Description | Default |
+|--------|-------------|---------|
+| \`enabled\` | Accept MCP protocol requests | \`false\` |
+| \`oauth_enabled\` | Enable the readiness-gated OAuth authorization profile | \`false\` |
+| \`capabilities\` | Allowed combination of \`read\`, \`write\`, and \`trigger\` | \`read\` |
+| \`allowed_origins\` | Additional browser origins allowed to call the endpoint | empty |
+| \`oauth_public_base_url\` | Canonical external HTTPS base used as the OAuth identity | empty |`,
+            links: {
+                documentation: 'https://smart-panel.fastybird.com/docs/admin-management/mcp',
+                repository: 'https://github.com/FastyBird/smart-panel',
+            },
+        });
+    }
+};
+exports.McpModule = McpModule;
+exports.McpModule = McpModule = __decorate([
+    (0, api_tag_decorator_1.ApiTag)({
+        tagName: mcp_constants_1.MCP_MODULE_NAME,
+        displayName: mcp_constants_1.MCP_MODULE_API_TAG_NAME,
+        description: mcp_constants_1.MCP_MODULE_API_TAG_DESCRIPTION,
+    }),
+    (0, common_1.Module)({
+        imports: [
+            api_module_1.ApiModule,
+            auth_module_1.AuthModule,
+            devices_module_1.DevicesModule,
+            energy_module_1.EnergyModule,
+            home_context_module_1.HomeContextModule,
+            config_1.ConfigModule,
+            scenes_module_1.ScenesModule,
+            security_module_1.SecurityModule,
+            spaces_module_1.SpacesModule,
+            stats_module_1.StatsModule,
+            swagger_module_1.SwaggerModule,
+            typeorm_1.TypeOrmModule.forFeature([
+                mcp_client_entity_1.McpClientEntity,
+                mcp_installation_entity_1.McpInstallationEntity,
+                mcp_oauth_entity_1.McpOAuthAccessTokenEntity,
+                mcp_oauth_entity_1.McpOAuthApproverAuthorityEntity,
+                mcp_oauth_entity_1.McpOAuthAuthorizationCodeEntity,
+                mcp_oauth_entity_1.McpOAuthClientEntity,
+                mcp_oauth_entity_1.McpOAuthGrantEntity,
+                mcp_oauth_entity_1.McpOAuthInteractionEntity,
+                mcp_oauth_entity_1.McpOAuthProviderArtifactEntity,
+                mcp_oauth_entity_1.McpOAuthProviderRefreshFamilyLineageEntity,
+                mcp_oauth_entity_1.McpOAuthProviderRevokedGrantEntity,
+                mcp_oauth_entity_1.McpOAuthProviderRevokedRefreshFamilyEntity,
+                mcp_oauth_entity_1.McpOAuthRefreshTokenEntity,
+                mcp_oauth_entity_1.McpOAuthRefreshTokenFamilyEntity,
+                mcp_oauth_entity_1.McpOAuthServerStateEntity,
+            ]),
+            tools_module_1.ToolsModule,
+            users_module_1.UsersModule,
+            weather_module_1.WeatherModule,
+        ],
+        controllers: [
+            mcp_clients_controller_1.McpClientsController,
+            mcp_oauth_clients_controller_1.McpOAuthClientsController,
+            mcp_oauth_interactions_controller_1.McpOAuthInteractionsController,
+            mcp_oauth_management_controller_1.McpOAuthManagementController,
+            mcp_controller_1.McpController,
+        ],
+        providers: [
+            mcp_client_guard_1.McpClientGuard,
+            mcp_client_service_1.McpClientService,
+            mcp_config_listener_1.McpConfigListener,
+            mcp_context_service_1.McpContextService,
+            mcp_installation_service_1.McpInstallationService,
+            mcp_oauth_artifact_service_1.McpOAuthArtifactService,
+            mcp_oauth_bootstrap_service_1.McpOAuthBootstrapService,
+            mcp_oauth_approver_authority_service_1.McpOAuthApproverAuthorityService,
+            mcp_oauth_client_service_1.McpOAuthClientService,
+            mcp_oauth_endpoint_rate_limit_service_1.McpOAuthEndpointRateLimitService,
+            mcp_oauth_global_invalidation_service_1.McpOAuthGlobalInvalidationService,
+            mcp_oauth_interaction_service_1.McpOAuthInteractionService,
+            mcp_oauth_management_service_1.McpOAuthManagementService,
+            mcp_oauth_module_config_mutation_service_1.McpOAuthModuleConfigMutationService,
+            mcp_oauth_proxy_policy_service_1.McpOAuthProxyPolicyService,
+            mcp_oauth_provider_material_service_1.McpOAuthProviderMaterialService,
+            mcp_oauth_provider_factory_1.McpOAuthProviderFactory,
+            mcp_oauth_public_url_service_1.McpOAuthPublicUrlService,
+            mcp_oauth_readiness_registration_service_1.McpOAuthReadinessRegistrationService,
+            mcp_oauth_readiness_service_1.McpOAuthReadinessService,
+            mcp_oauth_lifecycle_service_1.McpOAuthLifecycleService,
+            mcp_oauth_refresh_token_service_1.McpOAuthRefreshTokenService,
+            mcp_oauth_resource_server_service_1.McpOAuthResourceServerService,
+            mcp_oauth_route_gate_service_1.McpOAuthRouteGateService,
+            mcp_oauth_runtime_service_1.McpOAuthRuntimeService,
+            mcp_oauth_switch_off_service_1.McpOAuthSwitchOffService,
+            mcp_policy_service_1.McpPolicyService,
+            mcp_server_service_1.McpServerService,
+            mcp_audit_service_1.McpAuditService,
+            mcp_stats_provider_1.McpStatsProvider,
+            mcp_subscription_registry_service_1.McpSubscriptionRegistryService,
+            mcp_read_tool_service_1.McpReadToolService,
+            mcp_target_discovery_tool_service_1.McpTargetDiscoveryToolService,
+            {
+                provide: mcp_constants_1.MCP_CATALOG_REGISTRAR,
+                useFactory: (readTools, targetDiscoveryTools) => ({
+                    register(server, authInfo) {
+                        readTools.register(server, authInfo);
+                        targetDiscoveryTools.register(server, authInfo);
+                    },
+                }),
+                inject: [mcp_read_tool_service_1.McpReadToolService, mcp_target_discovery_tool_service_1.McpTargetDiscoveryToolService],
+            },
+        ],
+        exports: [
+            mcp_audit_service_1.McpAuditService,
+            mcp_client_service_1.McpClientService,
+            mcp_installation_service_1.McpInstallationService,
+            mcp_oauth_artifact_service_1.McpOAuthArtifactService,
+            mcp_oauth_bootstrap_service_1.McpOAuthBootstrapService,
+            mcp_oauth_approver_authority_service_1.McpOAuthApproverAuthorityService,
+            mcp_oauth_client_service_1.McpOAuthClientService,
+            mcp_oauth_interaction_service_1.McpOAuthInteractionService,
+            mcp_oauth_management_service_1.McpOAuthManagementService,
+            mcp_oauth_proxy_policy_service_1.McpOAuthProxyPolicyService,
+            mcp_oauth_provider_factory_1.McpOAuthProviderFactory,
+            mcp_oauth_public_url_service_1.McpOAuthPublicUrlService,
+            mcp_oauth_readiness_service_1.McpOAuthReadinessService,
+            mcp_oauth_refresh_token_service_1.McpOAuthRefreshTokenService,
+            mcp_oauth_resource_server_service_1.McpOAuthResourceServerService,
+            mcp_oauth_route_gate_service_1.McpOAuthRouteGateService,
+            mcp_oauth_runtime_service_1.McpOAuthRuntimeService,
+            mcp_oauth_switch_off_service_1.McpOAuthSwitchOffService,
+            mcp_policy_service_1.McpPolicyService,
+            mcp_server_service_1.McpServerService,
+        ],
+    }),
+    __metadata("design:paramtypes", [swagger_models_registry_service_1.SwaggerModelsRegistryService,
+        modules_type_mapper_service_1.ModulesTypeMapperService,
+        module_config_mutation_registry_service_1.ModuleConfigMutationRegistryService,
+        mcp_oauth_module_config_mutation_service_1.McpOAuthModuleConfigMutationService,
+        user_lifecycle_mutation_registry_service_1.UserLifecycleMutationRegistryService,
+        mcp_oauth_approver_authority_service_1.McpOAuthApproverAuthorityService,
+        extensions_service_1.ExtensionsService,
+        stats_registry_service_1.StatsRegistryService,
+        mcp_stats_provider_1.McpStatsProvider])
+], McpModule);
+//# sourceMappingURL=mcp.module.js.map

package/dist/modules/mcp/mcp.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.module.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp.module.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,2CAAsD;AACtD,2CAAkE;AAClE,6CAAgD;AAEhD,kDAA8C;AAC9C,qDAAiD;AACjD,wHAAiH;AACjH,gGAA0F;AAC1F,8DAA0D;AAC1D,2DAAuD;AACvD,kFAA8E;AAC9E,6EAAwE;AACxE,2DAAuD;AACvD,iEAA6D;AAC7D,2DAAuD;AACvD,qFAAgF;AAChF,wDAAoD;AACpD,+EAAiE;AACjE,yGAAmG;AACnG,8DAA0D;AAC1D,wDAAoD;AACpD,yHAAkH;AAClH,wDAAoD;AACpD,8DAA0D;AAE1D,iFAA4E;AAC5E,6FAAuF;AACvF,uGAAiG;AACjG,mGAA6F;AAC7F,iEAA6D;AAC7D,+DAA6D;AAC7D,oEAA+D;AAC/D,gFAA2E;AAC3E,kEAcqC;AACrC,gEAA2D;AAC3D,yEAAoE;AACpE,mDAMyB;AACzB,+CAAyD;AACzD,wDAAuD;AACvD,mFAA6E;AAC7E,uEAAkE;AAClE,oEAA+D;AAC/D,sEAAiE;AACjE,wEAAmE;AACnE,kFAA6E;AAC7E,0GAAmG;AACnG,sFAAgF;AAChF,wFAAkF;AAClF,kFAA4E;AAC5E,4GAAoG;AACpG,4GAAqG;AACrG,4FAAsF;AACtF,wFAAkF;AAClF,0FAAoF;AACpF,kHAA0G;AAC1G,wGAAiG;AACjG,8FAAuF;AACvF,0FAAmF;AACnF,kHAA2G;AAC3G,wFAAkF;AAClF,gGAAyF;AACzF,oGAA6F;AAC7F,0FAAmF;AACnF,oFAA8E;AAC9E,0FAAmF;AACnF,sEAAiE;AACjE,sEAAiE;AACjE,oGAA8F;AAC9F,yEAAmE;AACnE,iGAA0F;AAoHnF,IAAM,SAAS,GAAf,MAAM,SAAS;IACrB,YACkB,eAA6C,EAC7C,oBAA8C,EAC9C,qBAA0D,EAC1D,oBAAyD,EACzD,sBAA4D,EAC5D,iBAAmD,EACnD,iBAAoC,EACpC,oBAA0C,EAC1C,aAA+B;QAR/B,oBAAe,GAAf,eAAe,CAA8B;QAC7C,yBAAoB,GAApB,oBAAoB,CAA0B;QAC9C,0BAAqB,GAArB,qBAAqB,CAAqC;QAC1D,yBAAoB,GAApB,oBAAoB,CAAqC;QACzD,2BAAsB,GAAtB,sBAAsB,CAAsC;QAC5D,sBAAiB,GAAjB,iBAAiB,CAAkC;QACnD,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,kBAAa,GAAb,aAAa,CAAkB;IAC9C,CAAC;IAEJ,YAAY;QACX,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAqC;YAC7E,IAAI,EAAE,+BAAe;YACrB,KAAK,EAAE,6BAAc;YACrB,SAAS,EAAE,sCAAkB;SAC7B,CAAC,CAAC;QACH,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAqB,+BAAe,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAC3F,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAChD,CAAC;QACF,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAE7D,KAAK,MAAM,KAAK,IAAI,sCAAwB,EAAE,CAAC;YAC9C,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,+BAAe,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAExE,IAAI,CAAC,iBAAiB,CAAC,sBAAsB,CAAC;YAC7C,IAAI,EAAE,+BAAe;YACrB,IAAI,EAAE,wBAAwB;YAC9B,WAAW,EAAE,0EAA0E;YACvF,MAAM,EAAE,WAAW;YACnB,cAAc,EAAE,KAAK;YACrB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,6BAAa,CAAC;YAC1C,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;iGA0BsF;YAC9F,KAAK,EAAE;gBACN,aAAa,EAAE,6DAA6D;gBAC5E,UAAU,EAAE,0CAA0C;aACtD;SACD,CAAC,CAAC;IACJ,CAAC;CACD,CAAA;AAtEY,8BAAS;oBAAT,SAAS;IAlHrB,IAAA,0BAAM,EAAC;QACP,OAAO,EAAE,+BAAe;QACxB,WAAW,EAAE,uCAAuB;QACpC,WAAW,EAAE,8CAA8B;KAC3C,CAAC;IACD,IAAA,eAAM,EAAC;QACP,OAAO,EAAE;YACR,sBAAS;YACT,wBAAU;YACV,8BAAa;YACb,4BAAY;YACZ,uCAAiB;YACjB,qBAAgB;YAChB,4BAAY;YACZ,gCAAc;YACd,4BAAY;YACZ,0BAAW;YACX,8BAAa;YACb,uBAAa,CAAC,UAAU,CAAC;gBACxB,mCAAe;gBACf,+CAAqB;gBACrB,4CAAyB;gBACzB,kDAA+B;gBAC/B,kDAA+B;gBAC/B,uCAAoB;gBACpB,sCAAmB;gBACnB,4CAAyB;gBACzB,iDAA8B;gBAC9B,6DAA0C;gBAC1C,qDAAkC;gBAClC,6DAA0C;gBAC1C,6CAA0B;gBAC1B,mDAAgC;gBAChC,4CAAyB;aACzB,CAAC;YACF,0BAAW;YACX,0BAAW;YACX,8BAAa;SACb;QACD,WAAW,EAAE;YACZ,6CAAoB;YACpB,wDAAyB;YACzB,kEAA8B;YAC9B,8DAA4B;YAC5B,8BAAa;SACb;QACD,SAAS,EAAE;YACV,iCAAc;YACd,qCAAgB;YAChB,uCAAiB;YACjB,uCAAiB;YACjB,iDAAsB;YACtB,oDAAuB;YACvB,sDAAwB;YACxB,uEAAgC;YAChC,gDAAqB;YACrB,wEAAgC;YAChC,yEAAiC;YACjC,0DAA0B;YAC1B,wDAAyB;YACzB,8EAAmC;YACnC,2DAA0B;YAC1B,qEAA+B;YAC/B,oDAAuB;YACvB,uDAAwB;YACxB,+EAAoC;YACpC,sDAAwB;YACxB,sDAAwB;YACxB,6DAA2B;YAC3B,iEAA6B;YAC7B,uDAAwB;YACxB,kDAAsB;YACtB,uDAAwB;YACxB,qCAAgB;YAChB,qCAAgB;YAChB,mCAAe;YACf,qCAAgB;YAChB,kEAA8B;YAC9B,0CAAkB;YAClB,iEAA6B;YAC7B;gBACC,OAAO,EAAE,qCAAqB;gBAC9B,UAAU,EAAE,CAAC,SAA6B,EAAE,oBAAmD,EAAE,EAAE,CAAC,CAAC;oBACpG,QAAQ,CAAC,MAAiB,EAAE,QAAmB;wBAC9C,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;wBACrC,oBAAoB,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;oBACjD,CAAC;iBACD,CAAC;gBACF,MAAM,EAAE,CAAC,0CAAkB,EAAE,iEAA6B,CAAC;aAC3D;SACD;QACD,OAAO,EAAE;YACR,mCAAe;YACf,qCAAgB;YAChB,iDAAsB;YACtB,oDAAuB;YACvB,sDAAwB;YACxB,uEAAgC;YAChC,gDAAqB;YACrB,0DAA0B;YAC1B,wDAAyB;YACzB,2DAA0B;YAC1B,oDAAuB;YACvB,uDAAwB;YACxB,sDAAwB;YACxB,6DAA2B;YAC3B,iEAA6B;YAC7B,uDAAwB;YACxB,kDAAsB;YACtB,uDAAwB;YACxB,qCAAgB;YAChB,qCAAgB;SAChB;KACD,CAAC;qCAGkC,8DAA4B;QACvB,sDAAwB;QACvB,6EAAmC;QACpC,8EAAmC;QACjC,+EAAoC;QACzC,uEAAgC;QAChC,sCAAiB;QACd,6CAAoB;QAC3B,qCAAgB;GAVrC,SAAS,CAsErB"}

package/dist/modules/mcp/mcp.openapi.d.ts

@@ -0,0 +1,13 @@
+import { ReqRotateMcpClientTokenDto, ReqUpdateMcpClientDto, RotateMcpClientTokenDto, UpdateMcpClientDto } from './dto/mcp-client.dto';
+import { CreateMcpOAuthClientDto, ReqCreateMcpOAuthClientDto, ReqUpdateMcpOAuthClientDto, UpdateMcpOAuthClientDto } from './dto/mcp-oauth-client.dto';
+import { ReqUpdateMcpOAuthGrantDto, UpdateMcpOAuthGrantDto } from './dto/mcp-oauth-grant.dto';
+import { UpdateMcpConfigDto } from './dto/update-config.dto';
+import { McpConfigModel } from './models/config.model';
+import { McpClientCredentialResponseModel, McpClientsResponseModel } from './models/mcp-client-response.model';
+import { McpClientCredentialModel } from './models/mcp-client.model';
+import { McpOAuthClientsResponseModel } from './models/mcp-oauth-client-response.model';
+import { McpOAuthInteractionCompletionResponseModel, McpOAuthInteractionResponseModel } from './models/mcp-oauth-interaction-response.model';
+import { McpOAuthInteractionCompletionModel, McpOAuthInteractionModel } from './models/mcp-oauth-interaction.model';
+import { McpOAuthAccessTokenResponseModel, McpOAuthAccessTokensResponseModel, McpOAuthGlobalRevocationResponseModel, McpOAuthGrantsResponseModel, McpOAuthRefreshFamiliesResponseModel, McpOAuthRefreshFamilyResponseModel } from './models/mcp-oauth-management-response.model';
+import { McpOAuthAccessTokenModel, McpOAuthGlobalRevocationModel, McpOAuthRefreshFamilyModel } from './models/mcp-oauth-management.model';
+export declare const MCP_SWAGGER_EXTRA_MODELS: (typeof UpdateMcpClientDto | typeof RotateMcpClientTokenDto | typeof ReqUpdateMcpClientDto | typeof ReqRotateMcpClientTokenDto | typeof McpConfigModel | typeof McpClientCredentialModel | typeof McpClientsResponseModel | typeof McpClientCredentialResponseModel | typeof CreateMcpOAuthClientDto | typeof UpdateMcpOAuthClientDto | typeof ReqCreateMcpOAuthClientDto | typeof ReqUpdateMcpOAuthClientDto | typeof McpOAuthClientsResponseModel | typeof UpdateMcpOAuthGrantDto | typeof ReqUpdateMcpOAuthGrantDto | typeof McpOAuthAccessTokenModel | typeof McpOAuthRefreshFamilyModel | typeof McpOAuthGlobalRevocationModel | typeof McpOAuthInteractionModel | typeof McpOAuthInteractionCompletionModel | typeof McpOAuthInteractionResponseModel | typeof McpOAuthInteractionCompletionResponseModel | typeof McpOAuthGrantsResponseModel | typeof McpOAuthAccessTokenResponseModel | typeof McpOAuthAccessTokensResponseModel | typeof McpOAuthRefreshFamilyResponseModel | typeof McpOAuthRefreshFamiliesResponseModel | typeof McpOAuthGlobalRevocationResponseModel | typeof UpdateMcpConfigDto)[];

package/dist/modules/mcp/mcp.openapi.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MCP_SWAGGER_EXTRA_MODELS = void 0;
+const mcp_client_dto_1 = require("./dto/mcp-client.dto");
+const mcp_oauth_client_dto_1 = require("./dto/mcp-oauth-client.dto");
+const mcp_oauth_grant_dto_1 = require("./dto/mcp-oauth-grant.dto");
+const mcp_oauth_interaction_dto_1 = require("./dto/mcp-oauth-interaction.dto");
+const update_config_dto_1 = require("./dto/update-config.dto");
+const mcp_client_entity_1 = require("./entities/mcp-client.entity");
+const config_model_1 = require("./models/config.model");
+const mcp_client_response_model_1 = require("./models/mcp-client-response.model");
+const mcp_client_model_1 = require("./models/mcp-client.model");
+const mcp_oauth_client_response_model_1 = require("./models/mcp-oauth-client-response.model");
+const mcp_oauth_client_model_1 = require("./models/mcp-oauth-client.model");
+const mcp_oauth_interaction_response_model_1 = require("./models/mcp-oauth-interaction-response.model");
+const mcp_oauth_interaction_model_1 = require("./models/mcp-oauth-interaction.model");
+const mcp_oauth_management_response_model_1 = require("./models/mcp-oauth-management-response.model");
+const mcp_oauth_management_model_1 = require("./models/mcp-oauth-management.model");
+exports.MCP_SWAGGER_EXTRA_MODELS = [
+    config_model_1.McpConfigModel,
+    update_config_dto_1.UpdateMcpConfigDto,
+    mcp_client_entity_1.McpClientEntity,
+    mcp_client_dto_1.CreateMcpClientDto,
+    mcp_client_dto_1.UpdateMcpClientDto,
+    mcp_client_dto_1.RotateMcpClientTokenDto,
+    mcp_client_dto_1.ReqCreateMcpClientDto,
+    mcp_client_dto_1.ReqUpdateMcpClientDto,
+    mcp_client_dto_1.ReqRotateMcpClientTokenDto,
+    mcp_client_model_1.McpClientCredentialModel,
+    mcp_client_response_model_1.McpClientResponseModel,
+    mcp_client_response_model_1.McpClientsResponseModel,
+    mcp_client_response_model_1.McpClientCredentialResponseModel,
+    mcp_oauth_client_dto_1.CreateMcpOAuthClientDto,
+    mcp_oauth_client_dto_1.UpdateMcpOAuthClientDto,
+    mcp_oauth_client_dto_1.ReqCreateMcpOAuthClientDto,
+    mcp_oauth_client_dto_1.ReqUpdateMcpOAuthClientDto,
+    mcp_oauth_client_model_1.McpOAuthClientModel,
+    mcp_oauth_client_response_model_1.McpOAuthClientResponseModel,
+    mcp_oauth_client_response_model_1.McpOAuthClientsResponseModel,
+    mcp_oauth_interaction_dto_1.ApproveMcpOAuthInteractionDto,
+    mcp_oauth_interaction_dto_1.ReqApproveMcpOAuthInteractionDto,
+    mcp_oauth_grant_dto_1.UpdateMcpOAuthGrantDto,
+    mcp_oauth_grant_dto_1.ReqUpdateMcpOAuthGrantDto,
+    mcp_oauth_interaction_model_1.McpOAuthInteractionModel,
+    mcp_oauth_interaction_model_1.McpOAuthInteractionCompletionModel,
+    mcp_oauth_interaction_response_model_1.McpOAuthInteractionResponseModel,
+    mcp_oauth_interaction_response_model_1.McpOAuthInteractionCompletionResponseModel,
+    mcp_oauth_management_model_1.McpOAuthGrantModel,
+    mcp_oauth_management_model_1.McpOAuthAccessTokenModel,
+    mcp_oauth_management_model_1.McpOAuthGlobalRevocationModel,
+    mcp_oauth_management_model_1.McpOAuthRefreshFamilyModel,
+    mcp_oauth_management_response_model_1.McpOAuthGrantResponseModel,
+    mcp_oauth_management_response_model_1.McpOAuthGrantsResponseModel,
+    mcp_oauth_management_response_model_1.McpOAuthAccessTokenResponseModel,
+    mcp_oauth_management_response_model_1.McpOAuthAccessTokensResponseModel,
+    mcp_oauth_management_response_model_1.McpOAuthGlobalRevocationResponseModel,
+    mcp_oauth_management_response_model_1.McpOAuthRefreshFamilyResponseModel,
+    mcp_oauth_management_response_model_1.McpOAuthRefreshFamiliesResponseModel,
+];
+//# sourceMappingURL=mcp.openapi.js.map

package/dist/modules/mcp/mcp.openapi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.openapi.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp.openapi.ts"],"names":[],"mappings":";;;AAAA,yDAO8B;AAC9B,qEAKoC;AACpC,mEAA8F;AAC9F,+EAAkH;AAClH,+DAA6D;AAC7D,oEAA+D;AAC/D,wDAAuD;AACvD,kFAI4C;AAC5C,gEAAqE;AACrE,8FAAqH;AACrH,4EAAsE;AACtE,wGAGuD;AACvD,sFAAoH;AACpH,sGAQsD;AACtD,oFAK6C;AAEhC,QAAA,wBAAwB,GAAG;IACvC,6BAAc;IACd,sCAAkB;IAClB,mCAAe;IACf,mCAAkB;IAClB,mCAAkB;IAClB,wCAAuB;IACvB,sCAAqB;IACrB,sCAAqB;IACrB,2CAA0B;IAC1B,2CAAwB;IACxB,kDAAsB;IACtB,mDAAuB;IACvB,4DAAgC;IAChC,8CAAuB;IACvB,8CAAuB;IACvB,iDAA0B;IAC1B,iDAA0B;IAC1B,4CAAmB;IACnB,6DAA2B;IAC3B,8DAA4B;IAC5B,yDAA6B;IAC7B,4DAAgC;IAChC,4CAAsB;IACtB,+CAAyB;IACzB,sDAAwB;IACxB,gEAAkC;IAClC,uEAAgC;IAChC,iFAA0C;IAC1C,+CAAkB;IAClB,qDAAwB;IACxB,0DAA6B;IAC7B,uDAA0B;IAC1B,gEAA0B;IAC1B,iEAA2B;IAC3B,sEAAgC;IAChC,uEAAiC;IACjC,2EAAqC;IACrC,wEAAkC;IAClC,0EAAoC;CACpC,CAAC"}

package/dist/modules/mcp/models/config.model.d.ts

@@ -0,0 +1,10 @@
+import { ModuleConfigModel } from '../../config/models/config.model';
+import { McpCapability } from '../mcp.constants';
+export declare class McpConfigModel extends ModuleConfigModel {
+    type: string;
+    enabled: boolean;
+    oauthEnabled: boolean;
+    capabilities: McpCapability[];
+    allowedOrigins: string[];
+    oauthPublicBaseUrl: string | null;
+}

package/dist/modules/mcp/models/config.model.js

@@ -0,0 +1,106 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpConfigModel = void 0;
+const class_transformer_1 = require("class-transformer");
+const class_validator_1 = require("class-validator");
+const swagger_1 = require("@nestjs/swagger");
+const config_model_1 = require("../../config/models/config.model");
+const mcp_constants_1 = require("../mcp.constants");
+const is_mcp_oauth_public_base_url_validator_1 = require("../validators/is-mcp-oauth-public-base-url.validator");
+const is_mcp_origin_validator_1 = require("../validators/is-mcp-origin.validator");
+let McpConfigModel = class McpConfigModel extends config_model_1.ModuleConfigModel {
+    constructor() {
+        super(...arguments);
+        this.type = mcp_constants_1.MCP_MODULE_NAME;
+        this.enabled = mcp_constants_1.MCP_DEFAULT_ENABLED;
+        this.oauthEnabled = mcp_constants_1.MCP_DEFAULT_OAUTH_ENABLED;
+        this.capabilities = [...mcp_constants_1.MCP_DEFAULT_CAPABILITIES];
+        this.allowedOrigins = [...mcp_constants_1.MCP_DEFAULT_ALLOWED_ORIGINS];
+        this.oauthPublicBaseUrl = mcp_constants_1.MCP_DEFAULT_OAUTH_PUBLIC_BASE_URL;
+    }
+};
+exports.McpConfigModel = McpConfigModel;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Module identifier',
+        type: 'string',
+        example: mcp_constants_1.MCP_MODULE_NAME,
+    }),
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], McpConfigModel.prototype, "type", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Module enabled state',
+        type: 'boolean',
+        example: mcp_constants_1.MCP_DEFAULT_ENABLED,
+    }),
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], McpConfigModel.prototype, "enabled", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        name: 'oauth_enabled',
+        description: 'Whether the readiness-gated MCP OAuth authorization profile is enabled',
+        type: 'boolean',
+        example: mcp_constants_1.MCP_DEFAULT_OAUTH_ENABLED,
+    }),
+    (0, class_transformer_1.Expose)({ name: 'oauth_enabled' }),
+    (0, class_validator_1.IsBoolean)(),
+    __metadata("design:type", Boolean)
+], McpConfigModel.prototype, "oauthEnabled", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Installation-wide ceiling for capabilities that MCP clients may receive',
+        type: 'array',
+        items: { type: 'string', enum: Object.values(mcp_constants_1.McpCapability) },
+        example: [mcp_constants_1.McpCapability.READ],
+    }),
+    (0, class_transformer_1.Expose)(),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayUnique)(),
+    (0, class_validator_1.IsEnum)(mcp_constants_1.McpCapability, { each: true }),
+    __metadata("design:type", Array)
+], McpConfigModel.prototype, "capabilities", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        name: 'allowed_origins',
+        description: 'Additional normalized browser origins permitted to call the MCP endpoint',
+        type: 'array',
+        items: { type: 'string' },
+        example: ['https://panel.example.com'],
+    }),
+    (0, class_transformer_1.Expose)({ name: 'allowed_origins' }),
+    (0, class_validator_1.IsArray)(),
+    (0, class_validator_1.ArrayUnique)(),
+    (0, class_validator_1.Validate)(is_mcp_origin_validator_1.IsMcpOriginConstraint, { each: true }),
+    __metadata("design:type", Array)
+], McpConfigModel.prototype, "allowedOrigins", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        name: 'oauth_public_base_url',
+        description: 'Explicit canonical HTTPS base URL used to derive the MCP OAuth identity',
+        type: 'string',
+        nullable: true,
+        example: 'https://panel.example.com',
+    }),
+    (0, class_transformer_1.Expose)({ name: 'oauth_public_base_url' }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.Validate)(is_mcp_oauth_public_base_url_validator_1.IsMcpOAuthPublicBaseUrlConstraint),
+    __metadata("design:type", String)
+], McpConfigModel.prototype, "oauthPublicBaseUrl", void 0);
+exports.McpConfigModel = McpConfigModel = __decorate([
+    (0, swagger_1.ApiSchema)({ name: 'ConfigModuleDataMcp' })
+], McpConfigModel);
+//# sourceMappingURL=config.model.js.map

package/dist/modules/mcp/models/config.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.model.js","sourceRoot":"","sources":["../../../../src/modules/mcp/models/config.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yDAA2C;AAC3C,qDAA0G;AAE1G,6CAAyD;AAEzD,mEAAqE;AACrE,oDAQ0B;AAC1B,iHAAyG;AACzG,mFAA8E;AAGvE,IAAM,cAAc,GAApB,MAAM,cAAe,SAAQ,gCAAiB;IAA9C;;QAQN,SAAI,GAAW,+BAAe,CAAC;QAStB,YAAO,GAAY,mCAAmB,CAAC;QAUhD,iBAAY,GAAY,yCAAyB,CAAC;QAYlD,iBAAY,GAAoB,CAAC,GAAG,wCAAwB,CAAC,CAAC;QAa9D,mBAAc,GAAa,CAAC,GAAG,2CAA2B,CAAC,CAAC;QAY5D,uBAAkB,GAAkB,iDAAiC,CAAC;IACvE,CAAC;CAAA,CAAA;AAjEY,wCAAc;AAQ1B;IAPC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,mBAAmB;QAChC,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,+BAAe;KACxB,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,0BAAQ,GAAE;;4CACoB;AAStB;IAPR,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,sBAAsB;QACnC,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,mCAAmB;KAC5B,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,2BAAS,GAAE;;+CACoC;AAUhD;IARC,IAAA,qBAAW,EAAC;QACZ,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,wEAAwE;QACrF,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,yCAAyB;KAClC,CAAC;IACD,IAAA,0BAAM,EAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;IACjC,IAAA,2BAAS,GAAE;;oDACsC;AAYlD;IAVC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,yEAAyE;QACtF,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,6BAAa,CAAC,EAAE;QAC7D,OAAO,EAAE,CAAC,6BAAa,CAAC,IAAI,CAAC;KAC7B,CAAC;IACD,IAAA,0BAAM,GAAE;IACR,IAAA,yBAAO,GAAE;IACT,IAAA,6BAAW,GAAE;IACb,IAAA,wBAAM,EAAC,6BAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;oDACwB;AAa9D;IAXC,IAAA,qBAAW,EAAC;QACZ,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,0EAA0E;QACvF,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,OAAO,EAAE,CAAC,2BAA2B,CAAC;KACtC,CAAC;IACD,IAAA,0BAAM,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IACnC,IAAA,yBAAO,GAAE;IACT,IAAA,6BAAW,GAAE;IACb,IAAA,0BAAQ,EAAC,+CAAqB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;;sDACY;AAY5D;IAVC,IAAA,qBAAW,EAAC;QACZ,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,yEAAyE;QACtF,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,2BAA2B;KACpC,CAAC;IACD,IAAA,0BAAM,EAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;IACzC,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,0EAAiC,CAAC;;0DAC0B;yBAhE1D,cAAc;IAD1B,IAAA,mBAAS,EAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;GAC9B,cAAc,CAiE1B"}

package/dist/modules/mcp/models/mcp-client-response.model.d.ts

@@ -0,0 +1,12 @@
+import { BaseSuccessResponseModel } from '../../api/models/api-response.model';
+import { McpClientEntity } from '../entities/mcp-client.entity';
+import { McpClientCredentialModel } from './mcp-client.model';
+export declare class McpClientResponseModel extends BaseSuccessResponseModel<McpClientEntity> {
+    data: McpClientEntity;
+}
+export declare class McpClientsResponseModel extends BaseSuccessResponseModel<McpClientEntity[]> {
+    data: McpClientEntity[];
+}
+export declare class McpClientCredentialResponseModel extends BaseSuccessResponseModel<McpClientCredentialModel> {
+    data: McpClientCredentialModel;
+}

package/dist/modules/mcp/models/mcp-client-response.model.js

@@ -0,0 +1,51 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpClientCredentialResponseModel = exports.McpClientsResponseModel = exports.McpClientResponseModel = void 0;
+const class_transformer_1 = require("class-transformer");
+const swagger_1 = require("@nestjs/swagger");
+const api_response_model_1 = require("../../api/models/api-response.model");
+const mcp_client_entity_1 = require("../entities/mcp-client.entity");
+const mcp_client_model_1 = require("./mcp-client.model");
+let McpClientResponseModel = class McpClientResponseModel extends api_response_model_1.BaseSuccessResponseModel {
+};
+exports.McpClientResponseModel = McpClientResponseModel;
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: () => mcp_client_entity_1.McpClientEntity }),
+    (0, class_transformer_1.Expose)(),
+    __metadata("design:type", mcp_client_entity_1.McpClientEntity)
+], McpClientResponseModel.prototype, "data", void 0);
+exports.McpClientResponseModel = McpClientResponseModel = __decorate([
+    (0, swagger_1.ApiSchema)({ name: 'McpModuleResClient' })
+], McpClientResponseModel);
+let McpClientsResponseModel = class McpClientsResponseModel extends api_response_model_1.BaseSuccessResponseModel {
+};
+exports.McpClientsResponseModel = McpClientsResponseModel;
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: 'array', items: { $ref: (0, swagger_1.getSchemaPath)(mcp_client_entity_1.McpClientEntity) } }),
+    (0, class_transformer_1.Expose)(),
+    __metadata("design:type", Array)
+], McpClientsResponseModel.prototype, "data", void 0);
+exports.McpClientsResponseModel = McpClientsResponseModel = __decorate([
+    (0, swagger_1.ApiSchema)({ name: 'McpModuleResClients' })
+], McpClientsResponseModel);
+let McpClientCredentialResponseModel = class McpClientCredentialResponseModel extends api_response_model_1.BaseSuccessResponseModel {
+};
+exports.McpClientCredentialResponseModel = McpClientCredentialResponseModel;
+__decorate([
+    (0, swagger_1.ApiProperty)({ type: () => mcp_client_model_1.McpClientCredentialModel }),
+    (0, class_transformer_1.Expose)(),
+    __metadata("design:type", mcp_client_model_1.McpClientCredentialModel)
+], McpClientCredentialResponseModel.prototype, "data", void 0);
+exports.McpClientCredentialResponseModel = McpClientCredentialResponseModel = __decorate([
+    (0, swagger_1.ApiSchema)({ name: 'McpModuleResClientCredential' })
+], McpClientCredentialResponseModel);
+//# sourceMappingURL=mcp-client-response.model.js.map

package/dist/modules/mcp/models/mcp-client-response.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-client-response.model.js","sourceRoot":"","sources":["../../../../src/modules/mcp/models/mcp-client-response.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yDAA2C;AAE3C,6CAAwE;AAExE,4EAA+E;AAC/E,qEAAgE;AAEhE,yDAA8D;AAGvD,IAAM,sBAAsB,GAA5B,MAAM,sBAAuB,SAAQ,6CAAyC;CAIpF,CAAA;AAJY,wDAAsB;AAG1B;IAFP,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,mCAAe,EAAE,CAAC;IAC5C,IAAA,0BAAM,GAAE;8BACK,mCAAe;oDAAC;iCAHlB,sBAAsB;IADlC,IAAA,mBAAS,EAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;GAC7B,sBAAsB,CAIlC;AAGM,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,6CAA2C;CAIvF,CAAA;AAJY,0DAAuB;AAG3B;IAFP,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAA,uBAAa,EAAC,mCAAe,CAAC,EAAE,EAAE,CAAC;IAC/E,IAAA,0BAAM,GAAE;;qDACuB;kCAHpB,uBAAuB;IADnC,IAAA,mBAAS,EAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;GAC9B,uBAAuB,CAInC;AAGM,IAAM,gCAAgC,GAAtC,MAAM,gCAAiC,SAAQ,6CAAkD;CAIvG,CAAA;AAJY,4EAAgC;AAGpC;IAFP,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,2CAAwB,EAAE,CAAC;IACrD,IAAA,0BAAM,GAAE;8BACK,2CAAwB;8DAAC;2CAH3B,gCAAgC;IAD5C,IAAA,mBAAS,EAAC,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;GACvC,gCAAgC,CAI5C"}

package/dist/modules/mcp/models/mcp-client.model.d.ts

@@ -0,0 +1,5 @@
+import { McpClientEntity } from '../entities/mcp-client.entity';
+export declare class McpClientCredentialModel {
+    client: McpClientEntity;
+    token: string;
+}

package/dist/modules/mcp/models/mcp-client.model.js

@@ -0,0 +1,35 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpClientCredentialModel = void 0;
+const class_transformer_1 = require("class-transformer");
+const swagger_1 = require("@nestjs/swagger");
+const mcp_client_entity_1 = require("../entities/mcp-client.entity");
+let McpClientCredentialModel = class McpClientCredentialModel {
+};
+exports.McpClientCredentialModel = McpClientCredentialModel;
+__decorate([
+    (0, swagger_1.ApiProperty)({ description: 'Created or rotated client', type: () => mcp_client_entity_1.McpClientEntity }),
+    (0, class_transformer_1.Expose)(),
+    __metadata("design:type", mcp_client_entity_1.McpClientEntity)
+], McpClientCredentialModel.prototype, "client", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'One-time credential value. It cannot be retrieved after this response.',
+        type: 'string',
+    }),
+    (0, class_transformer_1.Expose)(),
+    __metadata("design:type", String)
+], McpClientCredentialModel.prototype, "token", void 0);
+exports.McpClientCredentialModel = McpClientCredentialModel = __decorate([
+    (0, swagger_1.ApiSchema)({ name: 'McpModuleDataClientCredential' })
+], McpClientCredentialModel);
+//# sourceMappingURL=mcp-client.model.js.map

package/dist/modules/mcp/models/mcp-client.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-client.model.js","sourceRoot":"","sources":["../../../../src/modules/mcp/models/mcp-client.model.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,yDAA2C;AAE3C,6CAAyD;AAEzD,qEAAgE;AAGzD,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;CAWpC,CAAA;AAXY,4DAAwB;AAGpC;IAFC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,mCAAe,EAAE,CAAC;IACtF,IAAA,0BAAM,GAAE;8BACD,mCAAe;wDAAC;AAOxB;IALC,IAAA,qBAAW,EAAC;QACZ,WAAW,EAAE,wEAAwE;QACrF,IAAI,EAAE,QAAQ;KACd,CAAC;IACD,IAAA,0BAAM,GAAE;;uDACK;mCAVF,wBAAwB;IADpC,IAAA,mBAAS,EAAC,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC;GACxC,wBAAwB,CAWpC"}

package/dist/modules/mcp/models/mcp-oauth-client-response.model.d.ts

@@ -0,0 +1,8 @@
+import { BaseSuccessResponseModel } from '../../api/models/api-response.model';
+import { McpOAuthClientModel } from './mcp-oauth-client.model';
+export declare class McpOAuthClientResponseModel extends BaseSuccessResponseModel<McpOAuthClientModel> {
+    data: McpOAuthClientModel;
+}
+export declare class McpOAuthClientsResponseModel extends BaseSuccessResponseModel<McpOAuthClientModel[]> {
+    data: McpOAuthClientModel[];
+}