@fastybird/smart-panel-backend 1.0.0-beta.3 → 1.1.0-alpha.1

package/dist/modules/mcp/services/mcp-audit.service.js

@@ -0,0 +1,161 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpAuditService = exports.McpAuditOutcome = void 0;
+const crypto_1 = require("crypto");
+const common_1 = require("@nestjs/common");
+const logger_1 = require("../../../common/logger");
+const mcp_constants_1 = require("../mcp.constants");
+var McpAuditOutcome;
+(function (McpAuditOutcome) {
+    McpAuditOutcome["COMPLETED"] = "completed";
+    McpAuditOutcome["PARTIAL"] = "partial";
+    McpAuditOutcome["FAILED"] = "failed";
+    McpAuditOutcome["TIMED_OUT"] = "timed_out";
+    McpAuditOutcome["DENIED"] = "denied";
+})(McpAuditOutcome || (exports.McpAuditOutcome = McpAuditOutcome = {}));
+let McpAuditService = class McpAuditService {
+    constructor() {
+        this.logger = (0, logger_1.createExtensionLogger)(mcp_constants_1.MCP_MODULE_NAME, 'McpAuditService');
+        this.requestIdHmacKey = (0, crypto_1.randomBytes)(32);
+        this.activeSubscriptions = 0;
+        this.callsByCapability = {
+            [mcp_constants_1.McpCapability.READ]: 0,
+            [mcp_constants_1.McpCapability.WRITE]: 0,
+            [mcp_constants_1.McpCapability.TRIGGER]: 0,
+        };
+        this.callsByTool = new Map();
+        this.failures = 0;
+        this.denials = 0;
+        this.timeouts = 0;
+    }
+    recordAuthenticationFailure(identity, reason) {
+        if (reason === 'authentication_error') {
+            this.failures += 1;
+        }
+        this.log('authentication_failure', identity, { reason });
+    }
+    recordPolicyDenial(identity, reason, options) {
+        this.denials += 1;
+        this.log('policy_denial', identity, {
+            reason,
+            ...(options?.capability ? { capability: options.capability } : {}),
+            ...(options?.tool ? { tool: options.tool } : {}),
+        });
+    }
+    recordRequestFailure(identity, reason) {
+        this.failures += 1;
+        this.log('request_failure', identity, { reason });
+    }
+    recordProtocolRequest(identity, options) {
+        this.log(options.kind, identity, {
+            method: options.method,
+            ...(options.protocolVersion ? { protocol_version: options.protocolVersion } : {}),
+        });
+    }
+    recordSubscriptionOpened(identity, subscriptionId) {
+        this.activeSubscriptions += 1;
+        this.log('subscription_open', identity, { subscription_id: subscriptionId });
+    }
+    recordSubscriptionClosed(identity, subscriptionId, reason) {
+        this.activeSubscriptions = Math.max(0, this.activeSubscriptions - 1);
+        this.log('subscription_close', identity, { subscription_id: subscriptionId, reason });
+    }
+    recordOAuthManagementAction(actorId, artifact, artifactId, action) {
+        this.log('oauth_management', { requestId: 'administrative' }, {
+            actor_id: actorId,
+            artifact,
+            artifact_id: artifactId,
+            action,
+        });
+    }
+    recordOAuthGlobalRevocation(actorId) {
+        this.log('oauth_global_revocation', { requestId: 'administrative' }, {
+            actor_id: actorId,
+            action: 'revoked_all',
+        });
+    }
+    recordOAuthAuthorizationInvalidation(input) {
+        this.log('oauth_authorization_invalidation', { requestId: 'administrative' }, {
+            reasons: [...new Set(input.reasons)],
+            authorization_profile: input.authorizationProfile,
+            outcome: input.outcome,
+            ...(input.target ? { target_type: input.target.type, target_id: input.target.id } : {}),
+        });
+    }
+    recordToolResult(result) {
+        this.callsByCapability[result.capability] += 1;
+        this.callsByTool.set(result.tool, (this.callsByTool.get(result.tool) ?? 0) + 1);
+        if (result.outcome === McpAuditOutcome.TIMED_OUT) {
+            this.timeouts += 1;
+        }
+        else if (result.outcome === McpAuditOutcome.FAILED) {
+            this.failures += 1;
+        }
+        this.log('tool_execution', result, {
+            tool: result.tool,
+            capability: result.capability,
+            duration_ms: Math.max(0, Math.round(result.durationMs)),
+            outcome: result.outcome,
+            ...this.getTargetIds(result.tool, result.arguments),
+        });
+    }
+    getMetricsSnapshot() {
+        return {
+            activeSubscriptions: this.activeSubscriptions,
+            callsByCapability: { ...this.callsByCapability },
+            callsByTool: Object.fromEntries(this.callsByTool),
+            failures: this.failures,
+            denials: this.denials,
+            timeouts: this.timeouts,
+        };
+    }
+    getRequestId(body) {
+        if (!body || typeof body !== 'object' || Array.isArray(body)) {
+            return 'unknown';
+        }
+        const id = body.id;
+        if (typeof id === 'number' && Number.isFinite(id)) {
+            return String(id);
+        }
+        if (typeof id === 'string') {
+            const digest = (0, crypto_1.createHmac)('sha256', this.requestIdHmacKey).update(id).digest('base64url').slice(0, 16);
+            return `string:${digest}`;
+        }
+        return 'unknown';
+    }
+    getTargetIds(tool, args) {
+        if (!args) {
+            return {};
+        }
+        const key = tool === 'set_device_property'
+            ? 'property_id'
+            : tool === 'run_scene'
+                ? 'scene_id'
+                : tool === 'set_space_lighting'
+                    ? 'space_id'
+                    : undefined;
+        if (!key || typeof args[key] !== 'string') {
+            return {};
+        }
+        return { [key]: args[key] };
+    }
+    log(event, identity, details) {
+        this.logger.log('MCP audit event', {
+            event,
+            request_id: identity.requestId,
+            ...(identity.clientId ? { client_id: identity.clientId } : {}),
+            ...details,
+        });
+    }
+};
+exports.McpAuditService = McpAuditService;
+exports.McpAuditService = McpAuditService = __decorate([
+    (0, common_1.Injectable)()
+], McpAuditService);
+//# sourceMappingURL=mcp-audit.service.js.map

package/dist/modules/mcp/services/mcp-audit.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-audit.service.js","sourceRoot":"","sources":["../../../../src/modules/mcp/services/mcp-audit.service.ts"],"names":[],"mappings":";;;;;;;;;AAAA,mCAAiD;AAEjD,2CAA4C;AAE5C,mDAA+D;AAC/D,oDAAkE;AAElE,IAAY,eAMX;AAND,WAAY,eAAe;IAC1B,0CAAuB,CAAA;IACvB,sCAAmB,CAAA;IACnB,oCAAiB,CAAA;IACjB,0CAAuB,CAAA;IACvB,oCAAiB,CAAA;AAClB,CAAC,EANW,eAAe,+BAAf,eAAe,QAM1B;AA2DM,IAAM,eAAe,GAArB,MAAM,eAAe;IAArB;QACW,WAAM,GAAG,IAAA,8BAAqB,EAAC,+BAAe,EAAE,iBAAiB,CAAC,CAAC;QACnE,qBAAgB,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;QAC5C,wBAAmB,GAAG,CAAC,CAAC;QACf,sBAAiB,GAAkC;YACnE,CAAC,6BAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,CAAC,6BAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,CAAC,6BAAa,CAAC,OAAO,CAAC,EAAE,CAAC;SAC1B,CAAC;QACe,gBAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QACjD,aAAQ,GAAG,CAAC,CAAC;QACb,YAAO,GAAG,CAAC,CAAC;QACZ,aAAQ,GAAG,CAAC,CAAC;IAkLtB,CAAC;IAhLA,2BAA2B,CAAC,QAAyB,EAAE,MAA4B;QAClF,IAAI,MAAM,KAAK,sBAAsB,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACpB,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,kBAAkB,CACjB,QAAyB,EACzB,MAA4B,EAC5B,OAAuD;QAEvD,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,QAAQ,EAAE;YACnC,MAAM;YACN,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC;IACJ,CAAC;IAED,oBAAoB,CAAC,QAAyB,EAAE,MAAoC;QACnF,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,qBAAqB,CACpB,QAAyB,EACzB,OAA2F;QAE3F,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE;YAChC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjF,CAAC,CAAC;IACJ,CAAC;IAED,wBAAwB,CAAC,QAAyB,EAAE,cAAsB;QACzE,IAAI,CAAC,mBAAmB,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,QAAQ,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,wBAAwB,CACvB,QAAyB,EACzB,cAAsB,EACtB,MAAkC;QAElC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,QAAQ,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,2BAA2B,CAC1B,OAAe,EACf,QAAoC,EACpC,UAAkB,EAClB,MAAgC;QAEhC,IAAI,CAAC,GAAG,CACP,kBAAkB,EAClB,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAC/B;YACC,QAAQ,EAAE,OAAO;YACjB,QAAQ;YACR,WAAW,EAAE,UAAU;YACvB,MAAM;SACN,CACD,CAAC;IACH,CAAC;IAED,2BAA2B,CAAC,OAAe;QAC1C,IAAI,CAAC,GAAG,CACP,yBAAyB,EACzB,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAC/B;YACC,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,aAAa;SACrB,CACD,CAAC;IACH,CAAC;IAED,oCAAoC,CAAC,KAKpC;QACA,IAAI,CAAC,GAAG,CACP,kCAAkC,EAClC,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAC/B;YACC,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpC,qBAAqB,EAAE,KAAK,CAAC,oBAAoB;YACjD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvF,CACD,CAAC;IACH,CAAC;IAED,gBAAgB,CAAC,MAAkB;QAClC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAEhF,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe,CAAC,SAAS,EAAE,CAAC;YAClD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;YACtD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACpB,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE;YAClC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACvD,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC;SACnD,CAAC,CAAC;IACJ,CAAC;IAED,kBAAkB;QACjB,OAAO;YACN,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,iBAAiB,EAAE,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE;YAChD,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC;YACjD,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACvB,CAAC;IACH,CAAC;IAED,YAAY,CAAC,IAAa;QACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,MAAM,EAAE,GAAI,IAAyB,CAAC,EAAE,CAAC;QAEzC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACnD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAEvG,OAAO,UAAU,MAAM,EAAE,CAAC;QAC3B,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC;IAEO,YAAY,CAAC,IAAY,EAAE,IAA8B;QAChE,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,OAAO,EAAE,CAAC;QACX,CAAC;QAED,MAAM,GAAG,GACR,IAAI,KAAK,qBAAqB;YAC7B,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,IAAI,KAAK,WAAW;gBACrB,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,IAAI,KAAK,oBAAoB;oBAC9B,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,SAAS,CAAC;QAEhB,IAAI,CAAC,GAAG,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3C,OAAO,EAAE,CAAC;QACX,CAAC;QAED,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7B,CAAC;IAEO,GAAG,CAAC,KAAa,EAAE,QAAyB,EAAE,OAAgC;QACrF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,EAAE;YAClC,KAAK;YACL,UAAU,EAAE,QAAQ,CAAC,SAAS;YAC9B,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,OAAO;SACV,CAAC,CAAC;IACJ,CAAC;CACD,CAAA;AA9LY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;GACA,eAAe,CA8L3B"}

package/dist/modules/mcp/services/mcp-client.service.d.ts

@@ -0,0 +1,34 @@
+import { DataSource, Repository } from 'typeorm';
+import { JwtService } from '@nestjs/jwt';
+import { TokensService } from '../../auth/services/tokens.service';
+import { ConfigService } from '../../config/services/config.service';
+import { CreateMcpClientDto, RotateMcpClientTokenDto, UpdateMcpClientDto } from '../dto/mcp-client.dto';
+import { McpClientEntity } from '../entities/mcp-client.entity';
+import { McpCapability } from '../mcp.constants';
+import { McpClientCredentialModel } from '../models/mcp-client.model';
+import { McpInstallationService } from './mcp-installation.service';
+import { McpServerService } from './mcp-server.service';
+export declare class McpClientService {
+    private readonly repository;
+    private readonly dataSource;
+    private readonly tokensService;
+    private readonly jwtService;
+    private readonly configService;
+    private readonly installationService;
+    private readonly serverService;
+    constructor(repository: Repository<McpClientEntity>, dataSource: DataSource, tokensService: TokensService, jwtService: JwtService, configService: ConfigService, installationService: McpInstallationService, serverService: McpServerService);
+    findAll(): Promise<McpClientEntity[]>;
+    findOne(id: string): Promise<McpClientEntity | null>;
+    getOneOrThrow(id: string): Promise<McpClientEntity>;
+    findActiveByToken(tokenId: string, clientId: string): Promise<McpClientEntity | null>;
+    getEffectiveCapabilities(client: McpClientEntity): McpCapability[];
+    create(dto: CreateMcpClientDto, createdById: string): Promise<McpClientCredentialModel>;
+    update(id: string, dto: UpdateMcpClientDto): Promise<McpClientEntity>;
+    rotate(id: string, dto: RotateMcpClientTokenDto): Promise<McpClientCredentialModel>;
+    revoke(id: string): Promise<McpClientEntity>;
+    remove(id: string): Promise<void>;
+    private issueCredential;
+    private assertCapabilitiesAllowed;
+    private sameCapabilities;
+    private getCapabilityCeiling;
+}

package/dist/modules/mcp/services/mcp-client.service.js

@@ -0,0 +1,241 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpClientService = void 0;
+const crypto_1 = require("crypto");
+const typeorm_1 = require("typeorm");
+const common_1 = require("@nestjs/common");
+const jwt_1 = require("@nestjs/jwt");
+const typeorm_2 = require("@nestjs/typeorm");
+const auth_constants_1 = require("../../auth/auth.constants");
+const auth_entity_1 = require("../../auth/entities/auth.entity");
+const tokens_service_1 = require("../../auth/services/tokens.service");
+const config_service_1 = require("../../config/services/config.service");
+const mcp_client_entity_1 = require("../entities/mcp-client.entity");
+const mcp_constants_1 = require("../mcp.constants");
+const mcp_client_model_1 = require("../models/mcp-client.model");
+const mcp_installation_service_1 = require("./mcp-installation.service");
+const mcp_server_service_1 = require("./mcp-server.service");
+const SECONDS_PER_DAY = 24 * 60 * 60;
+let McpClientService = class McpClientService {
+    constructor(repository, dataSource, tokensService, jwtService, configService, installationService, serverService) {
+        this.repository = repository;
+        this.dataSource = dataSource;
+        this.tokensService = tokensService;
+        this.jwtService = jwtService;
+        this.configService = configService;
+        this.installationService = installationService;
+        this.serverService = serverService;
+    }
+    async findAll() {
+        return this.repository.find({ relations: { token: true }, order: { createdAt: 'DESC' } });
+    }
+    async findOne(id) {
+        return this.repository.findOne({ where: { id }, relations: { token: true } });
+    }
+    async getOneOrThrow(id) {
+        const client = await this.findOne(id);
+        if (!client) {
+            throw new common_1.NotFoundException('Requested MCP client does not exist');
+        }
+        return client;
+    }
+    async findActiveByToken(tokenId, clientId) {
+        return this.repository.findOne({
+            where: { id: clientId, tokenId, enabled: true },
+            relations: { token: true },
+        });
+    }
+    getEffectiveCapabilities(client) {
+        const ceiling = this.getCapabilityCeiling();
+        return client.capabilities.filter((capability) => ceiling.includes(capability));
+    }
+    async create(dto, createdById) {
+        this.assertCapabilitiesAllowed(dto.capabilities);
+        const client = await this.repository.save(this.repository.create({
+            name: dto.name,
+            description: dto.description ?? null,
+            enabled: true,
+            capabilities: [...dto.capabilities],
+            createdById,
+            tokenId: null,
+        }));
+        try {
+            return await this.issueCredential(client, dto.expiresInDays);
+        }
+        catch (error) {
+            await this.repository.delete({ id: client.id, tokenId: (0, typeorm_1.IsNull)() });
+            throw error;
+        }
+    }
+    async update(id, dto) {
+        const client = await this.getOneOrThrow(id);
+        const capabilitiesChanged = dto.capabilities !== undefined && !this.sameCapabilities(client.capabilities, dto.capabilities);
+        const resourcesChanged = dto.capabilities !== undefined &&
+            capabilitiesChanged &&
+            client.capabilities.includes(mcp_constants_1.McpCapability.READ) !== dto.capabilities.includes(mcp_constants_1.McpCapability.READ);
+        const updates = {};
+        if (dto.capabilities !== undefined) {
+            this.assertCapabilitiesAllowed(dto.capabilities);
+            updates.capabilities = [...dto.capabilities];
+        }
+        if (dto.name !== undefined)
+            updates.name = dto.name;
+        if (dto.description !== undefined)
+            updates.description = dto.description;
+        if (dto.enabled !== undefined)
+            updates.enabled = dto.enabled;
+        if (Object.keys(updates).length > 0) {
+            await this.dataSource.transaction(async (manager) => {
+                if (dto.enabled === true) {
+                    const token = client.tokenId
+                        ? await manager.getRepository(auth_entity_1.LongLiveTokenEntity).findOne({ where: { id: client.tokenId } })
+                        : null;
+                    if (!token || token.revoked || (token.expiresAt && token.expiresAt < new Date())) {
+                        throw new common_1.ConflictException('Rotate the MCP client credential before enabling this client');
+                    }
+                }
+                const updateResult = await manager
+                    .getRepository(mcp_client_entity_1.McpClientEntity)
+                    .update({ id, tokenId: client.tokenId ?? (0, typeorm_1.IsNull)() }, updates);
+                if (!updateResult.affected) {
+                    throw new common_1.ConflictException('The MCP client credential was changed by another request');
+                }
+            });
+        }
+        if (dto.enabled === false) {
+            await this.serverService.closeClient(id);
+        }
+        else if (capabilitiesChanged) {
+            this.serverService.invalidateClientPolicy(id);
+            this.serverService.notifyToolsChanged(id);
+            if (resourcesChanged) {
+                this.serverService.notifyResourcesChanged(id);
+            }
+        }
+        return this.getOneOrThrow(id);
+    }
+    async rotate(id, dto) {
+        const client = await this.getOneOrThrow(id);
+        const credential = await this.issueCredential(client, dto.expiresInDays, client.token ?? undefined);
+        await this.serverService.closeClient(id);
+        return credential;
+    }
+    async revoke(id) {
+        const client = await this.getOneOrThrow(id);
+        await this.dataSource.transaction(async (manager) => {
+            if (client.token) {
+                await this.tokensService.revoke(client.token.id, manager);
+            }
+            const updateResult = await manager.getRepository(mcp_client_entity_1.McpClientEntity).update({
+                id: client.id,
+                tokenId: client.token ? client.token.id : (0, typeorm_1.IsNull)(),
+            }, { enabled: false });
+            if (!updateResult.affected) {
+                throw new common_1.ConflictException('The MCP client credential was changed by another request');
+            }
+        });
+        await this.serverService.closeClient(id);
+        return this.getOneOrThrow(id);
+    }
+    async remove(id) {
+        const client = await this.getOneOrThrow(id);
+        await this.dataSource.transaction(async (manager) => {
+            if (client.token) {
+                await this.tokensService.revoke(client.token.id, manager);
+            }
+            const deleteResult = await manager.getRepository(mcp_client_entity_1.McpClientEntity).delete({
+                id: client.id,
+                tokenId: client.token ? client.token.id : (0, typeorm_1.IsNull)(),
+            });
+            if (!deleteResult.affected) {
+                throw new common_1.ConflictException('The MCP client credential was changed by another request');
+            }
+        });
+        await this.serverService.closeClient(id);
+    }
+    async issueCredential(client, expiresInDays, previousToken) {
+        const issuedAt = Math.floor(Date.now() / 1000);
+        const expiresIn = expiresInDays * SECONDS_PER_DAY;
+        const rawToken = await this.jwtService.signAsync({
+            sub: client.id,
+            type: auth_constants_1.TokenOwnerType.MCP,
+            iat: issuedAt,
+            jti: (0, crypto_1.randomUUID)(),
+        }, {
+            audience: await this.installationService.getAudience(),
+            expiresIn,
+        });
+        const issuedClient = await this.dataSource.transaction(async (manager) => {
+            const token = await this.tokensService.createLongLiveToken({
+                token: rawToken,
+                ownerType: auth_constants_1.TokenOwnerType.MCP,
+                ownerId: client.id,
+                name: client.name,
+                description: client.description,
+                expiresAt: new Date((issuedAt + expiresIn) * 1000),
+            }, manager);
+            if (previousToken) {
+                await this.tokensService.revoke(previousToken.id, manager);
+            }
+            const clientRepository = manager.getRepository(mcp_client_entity_1.McpClientEntity);
+            const updateResult = await clientRepository.update({
+                id: client.id,
+                tokenId: previousToken ? previousToken.id : (0, typeorm_1.IsNull)(),
+                enabled: client.enabled,
+            }, { tokenId: token.id, enabled: true });
+            if (!updateResult.affected) {
+                throw new common_1.ConflictException('The MCP client credential was changed by another request');
+            }
+            const updatedClient = await clientRepository.findOne({
+                where: { id: client.id },
+                relations: { token: true },
+            });
+            if (!updatedClient) {
+                throw new common_1.NotFoundException('Requested MCP client does not exist');
+            }
+            return updatedClient;
+        });
+        const credential = new mcp_client_model_1.McpClientCredentialModel();
+        credential.client = issuedClient;
+        credential.token = rawToken;
+        return credential;
+    }
+    assertCapabilitiesAllowed(capabilities) {
+        const ceiling = this.getCapabilityCeiling();
+        const disallowed = capabilities.filter((capability) => !ceiling.includes(capability));
+        if (disallowed.length > 0) {
+            throw new common_1.BadRequestException(`Capabilities exceed the module ceiling: ${disallowed.join(', ')}`);
+        }
+    }
+    sameCapabilities(first, second) {
+        return first.length === second.length && first.every((capability) => second.includes(capability));
+    }
+    getCapabilityCeiling() {
+        return this.configService.getModuleConfig(mcp_constants_1.MCP_MODULE_NAME).capabilities;
+    }
+};
+exports.McpClientService = McpClientService;
+exports.McpClientService = McpClientService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, typeorm_2.InjectRepository)(mcp_client_entity_1.McpClientEntity)),
+    __metadata("design:paramtypes", [typeorm_1.Repository,
+        typeorm_1.DataSource,
+        tokens_service_1.TokensService,
+        jwt_1.JwtService,
+        config_service_1.ConfigService,
+        mcp_installation_service_1.McpInstallationService,
+        mcp_server_service_1.McpServerService])
+], McpClientService);
+//# sourceMappingURL=mcp-client.service.js.map

package/dist/modules/mcp/services/mcp-client.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-client.service.js","sourceRoot":"","sources":["../../../../src/modules/mcp/services/mcp-client.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,mCAAoC;AACpC,qCAAyD;AAEzD,2CAAuG;AACvG,qCAAyC;AACzC,6CAAmD;AAEnD,8DAA2D;AAC3D,iEAAsE;AACtE,uEAAmE;AACnE,yEAAqE;AAErE,qEAAgE;AAChE,oDAAkE;AAElE,iEAAsE;AAEtE,yEAAoE;AACpE,6DAAwD;AAExD,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAG9B,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAC5B,YAEkB,UAAuC,EACvC,UAAsB,EACtB,aAA4B,EAC5B,UAAsB,EACtB,aAA4B,EAC5B,mBAA2C,EAC3C,aAA+B;QAN/B,eAAU,GAAV,UAAU,CAA6B;QACvC,eAAU,GAAV,UAAU,CAAY;QACtB,kBAAa,GAAb,aAAa,CAAe;QAC5B,eAAU,GAAV,UAAU,CAAY;QACtB,kBAAa,GAAb,aAAa,CAAe;QAC5B,wBAAmB,GAAnB,mBAAmB,CAAwB;QAC3C,kBAAa,GAAb,aAAa,CAAkB;IAC9C,CAAC;IAEJ,KAAK,CAAC,OAAO;QACZ,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,EAAU;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,EAAU;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,0BAAiB,CAAC,qCAAqC,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAAe,EAAE,QAAgB;QACxD,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;YAC9B,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE;YAC/C,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;SAC1B,CAAC,CAAC;IACJ,CAAC;IAED,wBAAwB,CAAC,MAAuB;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAE5C,OAAO,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAuB,EAAE,WAAmB;QACxD,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CACxC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YACtB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI;YACpC,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC;YACnC,WAAW;YACX,OAAO,EAAE,IAAI;SACb,CAAC,CACF,CAAC;QAEF,IAAI,CAAC;YACJ,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAA,gBAAM,GAAE,EAAE,CAAC,CAAC;YACnE,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,GAAuB;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,mBAAmB,GACxB,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QACjG,MAAM,gBAAgB,GACrB,GAAG,CAAC,YAAY,KAAK,SAAS;YAC9B,mBAAmB;YACnB,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,6BAAa,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,6BAAa,CAAC,IAAI,CAAC,CAAC;QACpG,MAAM,OAAO,GAKT,EAAE,CAAC;QAEP,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACjD,OAAO,CAAC,YAAY,GAAG,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACpD,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS;YAAE,OAAO,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;QACzE,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAE7D,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;gBACnD,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;oBAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO;wBAC3B,CAAC,CAAC,MAAM,OAAO,CAAC,aAAa,CAAC,iCAAmB,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;wBAC7F,CAAC,CAAC,IAAI,CAAC;oBAER,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;wBAClF,MAAM,IAAI,0BAAiB,CAAC,8DAA8D,CAAC,CAAC;oBAC7F,CAAC;gBACF,CAAC;gBAED,MAAM,YAAY,GAAG,MAAM,OAAO;qBAChC,aAAa,CAAC,mCAAe,CAAC;qBAC9B,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAA,gBAAM,GAAE,EAAE,EAAE,OAAO,CAAC,CAAC;gBAE/D,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;oBAC5B,MAAM,IAAI,0BAAiB,CAAC,0DAA0D,CAAC,CAAC;gBACzF,CAAC;YACF,CAAC,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC3B,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC1C,CAAC;aAAM,IAAI,mBAAmB,EAAE,CAAC;YAChC,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;YAC9C,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;YAE1C,IAAI,gBAAgB,EAAE,CAAC;gBACtB,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;YAC/C,CAAC;QACF,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,GAA4B;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAE5C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC;QACpG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAEzC,OAAO,UAAU,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAE5C,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACnD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC3D,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,mCAAe,CAAC,CAAC,MAAM,CACvE;gBACC,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAA,gBAAM,GAAE;aAClD,EACD,EAAE,OAAO,EAAE,KAAK,EAAE,CAClB,CAAC;YAEF,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,0BAAiB,CAAC,0DAA0D,CAAC,CAAC;YACzF,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAEzC,OAAO,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAE5C,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACnD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC3D,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,mCAAe,CAAC,CAAC,MAAM,CAAC;gBACxE,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAA,gBAAM,GAAE;aAClD,CAAC,CAAC;YAEH,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,0BAAiB,CAAC,0DAA0D,CAAC,CAAC;YACzF,CAAC;QACF,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;IAEO,KAAK,CAAC,eAAe,CAC5B,MAAuB,EACvB,aAAqB,EACrB,aAAmC;QAEnC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,aAAa,GAAG,eAAe,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAC/C;YACC,GAAG,EAAE,MAAM,CAAC,EAAE;YACd,IAAI,EAAE,+BAAc,CAAC,GAAG;YACxB,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,IAAA,mBAAU,GAAE;SACjB,EACD;YACC,QAAQ,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE;YACtD,SAAS;SACT,CACD,CAAC;QAEF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACxE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CACzD;gBACC,KAAK,EAAE,QAAQ;gBACf,SAAS,EAAE,+BAAc,CAAC,GAAG;gBAC7B,OAAO,EAAE,MAAM,CAAC,EAAE;gBAClB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,QAAQ,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;aAClD,EACD,OAAO,CACP,CAAC;YAEF,IAAI,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC5D,CAAC;YAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,mCAAe,CAAC,CAAC;YAChE,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,MAAM,CACjD;gBACC,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,IAAA,gBAAM,GAAE;gBACpD,OAAO,EAAE,MAAM,CAAC,OAAO;aACvB,EACD,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CACpC,CAAC;YAEF,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,0BAAiB,CAAC,0DAA0D,CAAC,CAAC;YACzF,CAAC;YAED,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC;gBACpD,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE;gBACxB,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,aAAa,EAAE,CAAC;gBACpB,MAAM,IAAI,0BAAiB,CAAC,qCAAqC,CAAC,CAAC;YACpE,CAAC;YAED,OAAO,aAAa,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,IAAI,2CAAwB,EAAE,CAAC;QAClD,UAAU,CAAC,MAAM,GAAG,YAAY,CAAC;QACjC,UAAU,CAAC,KAAK,GAAG,QAAQ,CAAC;QAE5B,OAAO,UAAU,CAAC;IACnB,CAAC;IAEO,yBAAyB,CAAC,YAA6B;QAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QAEtF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,4BAAmB,CAAC,2CAA2C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnG,CAAC;IACF,CAAC;IAEO,gBAAgB,CAAC,KAAsB,EAAE,MAAuB;QACvE,OAAO,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;IACnG,CAAC;IAEO,oBAAoB;QAC3B,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,CAAiB,+BAAe,CAAC,CAAC,YAAY,CAAC;IACzF,CAAC;CACD,CAAA;AA1QY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;IAGV,WAAA,IAAA,0BAAgB,EAAC,mCAAe,CAAC,CAAA;qCACL,oBAAU;QACV,oBAAU;QACP,8BAAa;QAChB,gBAAU;QACP,8BAAa;QACP,iDAAsB;QAC5B,qCAAgB;GATrC,gBAAgB,CA0Q5B"}

package/dist/modules/mcp/services/mcp-context.service.d.ts

@@ -0,0 +1,32 @@
+import { ConfigService } from '../../config/services/config.service';
+import { HomeContextSpacePageResult } from '../../home-context/models/home-context-result.model';
+import { HomeTimeseriesBucket } from '../../home-context/models/home-state-query.model';
+import { HomeContextQueryService } from '../../home-context/services/home-context-query.service';
+import { HomeStateQueryService } from '../../home-context/services/home-state-query.service';
+import { McpCapability } from '../mcp.constants';
+import { McpInstallationService } from './mcp-installation.service';
+export interface McpInstallationContext {
+    id: string;
+    name: string;
+    version: string;
+    timezone: string;
+    endpoint: string | null;
+    effective_capabilities: McpCapability[];
+}
+export declare class McpContextService {
+    private readonly configService;
+    private readonly installationService;
+    private readonly homeContextQueryService;
+    private readonly homeStateQueryService;
+    constructor(configService: ConfigService, installationService: McpInstallationService, homeContextQueryService: HomeContextQueryService, homeStateQueryService: HomeStateQueryService);
+    getInstallation(effectiveCapabilities: McpCapability[], endpoint?: string): Promise<McpInstallationContext>;
+    getHomeContext(spaceId?: string): Promise<Record<string, unknown>>;
+    getDeviceState(deviceId: string): Promise<Record<string, unknown>>;
+    getPropertyTimeseries(propertyId: string, from: string, to: string, bucket: HomeTimeseriesBucket): Promise<Record<string, unknown>>;
+    getEnergySummary(from?: string, to?: string, spaceId?: string): Promise<Record<string, unknown>>;
+    getWeather(locationId?: string): Promise<Record<string, unknown>>;
+    getSecurityStatus(): Promise<Record<string, unknown>>;
+    listSpaces(cursor?: string): Promise<HomeContextSpacePageResult>;
+    private executeHomeQuery;
+    private rethrowHomeContextError;
+}

package/dist/modules/mcp/services/mcp-context.service.js

@@ -0,0 +1,136 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpContextService = void 0;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const common_1 = require("@nestjs/common");
+const config_service_1 = require("../../config/services/config.service");
+const home_context_pagination_errors_1 = require("../../home-context/home-context-pagination.errors");
+const home_context_constants_1 = require("../../home-context/home-context.constants");
+const home_context_errors_1 = require("../../home-context/home-context.errors");
+const home_state_errors_1 = require("../../home-context/home-state.errors");
+const home_context_query_service_1 = require("../../home-context/services/home-context-query.service");
+const home_state_query_service_1 = require("../../home-context/services/home-state-query.service");
+const system_constants_1 = require("../../system/system.constants");
+const mcp_installation_service_1 = require("./mcp-installation.service");
+const packageJson = JSON.parse((0, fs_1.readFileSync)((0, path_1.resolve)(__dirname, '../../../../package.json'), 'utf-8'));
+let McpContextService = class McpContextService {
+    constructor(configService, installationService, homeContextQueryService, homeStateQueryService) {
+        this.configService = configService;
+        this.installationService = installationService;
+        this.homeContextQueryService = homeContextQueryService;
+        this.homeStateQueryService = homeStateQueryService;
+    }
+    async getInstallation(effectiveCapabilities, endpoint) {
+        let timezone = 'UTC';
+        try {
+            timezone = this.configService.getModuleConfig(system_constants_1.SYSTEM_MODULE_NAME).timezone;
+        }
+        catch {
+        }
+        return {
+            id: await this.installationService.getInstallationId(),
+            name: 'FastyBird Smart Panel',
+            version: packageJson.version,
+            timezone,
+            endpoint: endpoint ?? null,
+            effective_capabilities: [...effectiveCapabilities],
+        };
+    }
+    async getHomeContext(spaceId) {
+        const result = await this.executeHomeQuery(() => this.homeContextQueryService.getHomeSnapshot({
+            profile: home_context_constants_1.HOME_CONTEXT_PROFILE_MCP_COMPATIBILITY,
+            ...(spaceId ? { spaceId } : {}),
+        }));
+        return result;
+    }
+    async getDeviceState(deviceId) {
+        const result = await this.executeHomeQuery(() => this.homeStateQueryService.getDeviceState({
+            deviceId,
+            profile: home_context_constants_1.HOME_CONTEXT_PROFILE_MCP_COMPATIBILITY,
+        }));
+        return result;
+    }
+    async getPropertyTimeseries(propertyId, from, to, bucket) {
+        const result = await this.executeHomeQuery(() => this.homeStateQueryService.getPropertyTimeseries({
+            propertyId,
+            from,
+            to,
+            bucket,
+            profile: home_context_constants_1.HOME_CONTEXT_PROFILE_MCP_COMPATIBILITY,
+        }));
+        return result;
+    }
+    async getEnergySummary(from, to, spaceId) {
+        const result = await this.executeHomeQuery(() => this.homeStateQueryService.getEnergySummary({
+            from,
+            to,
+            spaceId,
+            profile: home_context_constants_1.HOME_CONTEXT_PROFILE_MCP_COMPATIBILITY,
+        }));
+        return result;
+    }
+    async getWeather(locationId) {
+        const result = await this.executeHomeQuery(() => this.homeStateQueryService.getWeather({
+            locationId,
+            profile: home_context_constants_1.HOME_CONTEXT_PROFILE_MCP_COMPATIBILITY,
+        }));
+        return result;
+    }
+    async getSecurityStatus() {
+        const result = await this.executeHomeQuery(() => this.homeStateQueryService.getSecurityStatus({
+            profile: home_context_constants_1.HOME_CONTEXT_PROFILE_MCP_COMPATIBILITY,
+        }));
+        return result;
+    }
+    async listSpaces(cursor) {
+        return this.executeHomeQuery(() => this.homeContextQueryService.listSpaces({
+            cursor,
+            profile: home_context_constants_1.HOME_CONTEXT_PROFILE_MCP_COMPATIBILITY,
+        }));
+    }
+    async executeHomeQuery(callback) {
+        try {
+            return await callback();
+        }
+        catch (error) {
+            this.rethrowHomeContextError(error);
+        }
+    }
+    rethrowHomeContextError(error) {
+        if (error instanceof home_context_errors_1.HomeContextSpaceNotFoundError) {
+            throw new common_1.NotFoundException('Requested space does not exist');
+        }
+        if (error instanceof home_state_errors_1.HomeStateDeviceNotFoundError) {
+            throw new common_1.NotFoundException('Requested device does not exist');
+        }
+        if (error instanceof home_state_errors_1.HomeStatePropertyNotFoundError) {
+            throw new common_1.NotFoundException('Requested property does not exist');
+        }
+        if (error instanceof home_state_errors_1.HomeStateInvalidRangeError || error instanceof home_state_errors_1.HomeStateTimeseriesPointLimitError) {
+            throw new common_1.BadRequestException(error.message);
+        }
+        if (error instanceof home_context_pagination_errors_1.HomeContextInvalidCursorError) {
+            throw new common_1.BadRequestException('The space resource cursor is invalid.');
+        }
+        throw error;
+    }
+};
+exports.McpContextService = McpContextService;
+exports.McpContextService = McpContextService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [config_service_1.ConfigService,
+        mcp_installation_service_1.McpInstallationService,
+        home_context_query_service_1.HomeContextQueryService,
+        home_state_query_service_1.HomeStateQueryService])
+], McpContextService);
+//# sourceMappingURL=mcp-context.service.js.map

package/dist/modules/mcp/services/mcp-context.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-context.service.js","sourceRoot":"","sources":["../../../../src/modules/mcp/services/mcp-context.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2BAAkC;AAClC,+BAA+B;AAE/B,2CAAoF;AAEpF,yEAAqE;AACrE,sGAAkG;AAClG,sFAAmG;AACnG,gFAAuF;AACvF,4EAK8C;AAG9C,uGAAiG;AACjG,mGAA6F;AAE7F,oEAAmE;AAGnE,yEAAoE;AAEpE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,IAAA,cAAO,EAAC,SAAS,EAAE,0BAA0B,CAAC,EAAE,OAAO,CAAC,CAEnG,CAAC;AAYK,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAC7B,YACkB,aAA4B,EAC5B,mBAA2C,EAC3C,uBAAgD,EAChD,qBAA4C;QAH5C,kBAAa,GAAb,aAAa,CAAe;QAC5B,wBAAmB,GAAnB,mBAAmB,CAAwB;QAC3C,4BAAuB,GAAvB,uBAAuB,CAAyB;QAChD,0BAAqB,GAArB,qBAAqB,CAAuB;IAC3D,CAAC;IAEJ,KAAK,CAAC,eAAe,CAAC,qBAAsC,EAAE,QAAiB;QAC9E,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,IAAI,CAAC;YACJ,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,eAAe,CAAoB,qCAAkB,CAAC,CAAC,QAAQ,CAAC;QAC/F,CAAC;QAAC,MAAM,CAAC;QAET,CAAC;QAED,OAAO;YACN,EAAE,EAAE,MAAM,IAAI,CAAC,mBAAmB,CAAC,iBAAiB,EAAE;YACtD,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,QAAQ;YACR,QAAQ,EAAE,QAAQ,IAAI,IAAI;YAC1B,sBAAsB,EAAE,CAAC,GAAG,qBAAqB,CAAC;SAClD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAgB;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAC/C,IAAI,CAAC,uBAAuB,CAAC,eAAe,CAAC;YAC5C,OAAO,EAAE,+DAAsC;YAC/C,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/B,CAAC,CACF,CAAC;QAEF,OAAO,MAA4C,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAC/C,IAAI,CAAC,qBAAqB,CAAC,cAAc,CAAC;YACzC,QAAQ;YACR,OAAO,EAAE,+DAAsC;SAC/C,CAAC,CACF,CAAC;QAEF,OAAO,MAA4C,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,qBAAqB,CAC1B,UAAkB,EAClB,IAAY,EACZ,EAAU,EACV,MAA4B;QAE5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAC/C,IAAI,CAAC,qBAAqB,CAAC,qBAAqB,CAAC;YAChD,UAAU;YACV,IAAI;YACJ,EAAE;YACF,MAAM;YACN,OAAO,EAAE,+DAAsC;SAC/C,CAAC,CACF,CAAC;QAEF,OAAO,MAA4C,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAa,EAAE,EAAW,EAAE,OAAgB;QAClE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAC/C,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,CAAC;YAC3C,IAAI;YACJ,EAAE;YACF,OAAO;YACP,OAAO,EAAE,+DAAsC;SAC/C,CAAC,CACF,CAAC;QAEF,OAAO,MAA4C,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAmB;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAC/C,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC;YACrC,UAAU;YACV,OAAO,EAAE,+DAAsC;SAC/C,CAAC,CACF,CAAC;QAEF,OAAO,MAA4C,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,iBAAiB;QACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAC/C,IAAI,CAAC,qBAAqB,CAAC,iBAAiB,CAAC;YAC5C,OAAO,EAAE,+DAAsC;SAC/C,CAAC,CACF,CAAC;QAEF,OAAO,MAA4C,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAe;QAC/B,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,CACjC,IAAI,CAAC,uBAAuB,CAAC,UAAU,CAAC;YACvC,MAAM;YACN,OAAO,EAAE,+DAAsC;SAC/C,CAAC,CACF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAI,QAA0B;QAC3D,IAAI,CAAC;YACJ,OAAO,MAAM,QAAQ,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;IACF,CAAC;IAEO,uBAAuB,CAAC,KAAc;QAC7C,IAAI,KAAK,YAAY,mDAA6B,EAAE,CAAC;YACpD,MAAM,IAAI,0BAAiB,CAAC,gCAAgC,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,KAAK,YAAY,gDAA4B,EAAE,CAAC;YACnD,MAAM,IAAI,0BAAiB,CAAC,iCAAiC,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,KAAK,YAAY,kDAA8B,EAAE,CAAC;YACrD,MAAM,IAAI,0BAAiB,CAAC,mCAAmC,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,KAAK,YAAY,8CAA0B,IAAI,KAAK,YAAY,sDAAkC,EAAE,CAAC;YACxG,MAAM,IAAI,4BAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,KAAK,YAAY,8DAA6B,EAAE,CAAC;YACpD,MAAM,IAAI,4BAAmB,CAAC,uCAAuC,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,KAAK,CAAC;IACb,CAAC;CACD,CAAA;AA1IY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;qCAGqB,8BAAa;QACP,iDAAsB;QAClB,oDAAuB;QACzB,gDAAqB;GALlD,iBAAiB,CA0I7B"}

package/dist/modules/mcp/services/mcp-installation.service.d.ts

@@ -0,0 +1,9 @@
+import { Repository } from 'typeorm';
+import { McpInstallationEntity } from '../entities/mcp-installation.entity';
+export declare class McpInstallationService {
+    private readonly repository;
+    private installationId?;
+    constructor(repository: Repository<McpInstallationEntity>);
+    getInstallationId(): Promise<string>;
+    getAudience(): Promise<string>;
+}