@lenne.tech/nest-server 11.25.6 → 11.26.0

package/dist/core/modules/ai/services/core-ai-interaction.service.js

@@ -0,0 +1,52 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CoreAiInteractionService = exports.AI_INTERACTION_CLASS = exports.AI_INTERACTION_MODEL = void 0;
+const common_1 = require("@nestjs/common");
+const mongoose_1 = require("@nestjs/mongoose");
+const mongoose_2 = require("mongoose");
+const crud_service_1 = require("../../../common/services/crud.service");
+exports.AI_INTERACTION_MODEL = 'AiInteraction';
+exports.AI_INTERACTION_CLASS = 'AI_INTERACTION_CLASS';
+let CoreAiInteractionService = class CoreAiInteractionService extends crud_service_1.CrudService {
+    mainDbModel;
+    mainModelConstructor;
+    constructor(mainDbModel, mainModelConstructor) {
+        super();
+        this.mainDbModel = mainDbModel;
+        this.mainModelConstructor = mainModelConstructor;
+    }
+    async record(rec) {
+        await this.mainDbModel.create({
+            actions: rec.actions,
+            completionTokens: rec.usage?.completionTokens,
+            connectionId: rec.connectionId,
+            iterations: rec.iterations,
+            prompt: rec.prompt,
+            promptTokens: rec.usage?.promptTokens,
+            responseText: rec.responseText,
+            tenantId: rec.tenantId,
+            totalTokens: rec.usage?.totalTokens,
+            userId: rec.userId,
+        });
+    }
+};
+exports.CoreAiInteractionService = CoreAiInteractionService;
+exports.CoreAiInteractionService = CoreAiInteractionService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, mongoose_1.InjectModel)(exports.AI_INTERACTION_MODEL)),
+    __param(1, (0, common_1.Inject)(exports.AI_INTERACTION_CLASS)),
+    __metadata("design:paramtypes", [mongoose_2.Model, Object])
+], CoreAiInteractionService);
+//# sourceMappingURL=core-ai-interaction.service.js.map

package/dist/core/modules/ai/services/core-ai-interaction.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-ai-interaction.service.js","sourceRoot":"","sources":["../../../../../src/core/modules/ai/services/core-ai-interaction.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,+CAA+C;AAC/C,uCAAiC;AAEjC,wEAAoE;AAQvD,QAAA,oBAAoB,GAAG,eAAe,CAAC;AAKvC,QAAA,oBAAoB,GAAG,sBAAsB,CAAC;AAUpD,IAAM,wBAAwB,GAA9B,MAAM,wBAAyB,SAAQ,0BAA8B;IAET;IAEnC;IAH9B,YACiE,WAAyC,EAE5E,oBAA6D;QAEzF,KAAK,EAAE,CAAC;QAJuD,gBAAW,GAAX,WAAW,CAA8B;QAE5E,yBAAoB,GAApB,oBAAoB,CAAyC;IAG3F,CAAC;IAOD,KAAK,CAAC,MAAM,CAAC,GAAwB;QACnC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,gBAAgB,EAAE,GAAG,CAAC,KAAK,EAAE,gBAAgB;YAC7C,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,YAAY,EAAE,GAAG,CAAC,KAAK,EAAE,YAAY;YACrC,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,WAAW,EAAE,GAAG,CAAC,KAAK,EAAE,WAAW;YACnC,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AA5BY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;IAGR,WAAA,IAAA,sBAAW,EAAC,4BAAoB,CAAC,CAAA;IACjC,WAAA,IAAA,eAAM,EAAC,4BAAoB,CAAC,CAAA;qCAD+C,gBAAK;GAFxE,wBAAwB,CA4BpC"}

package/dist/core/modules/ai/services/core-ai-mcp-client.service.d.ts

@@ -0,0 +1,51 @@
+import { Logger } from '@nestjs/common';
+import { RoleEnum } from '../../../common/enums/role.enum';
+import { IAiTool } from '../interfaces/ai-tool.interface';
+import { AiToolRegistry } from '../tools/ai-tool.registry';
+export interface McpLikeClient {
+    callTool(req: {
+        arguments?: Record<string, any>;
+        name: string;
+    }): Promise<{
+        content?: {
+            text?: string;
+            type?: string;
+        }[];
+        isError?: boolean;
+    }>;
+    close?(): Promise<void> | void;
+    listTools(): Promise<{
+        tools: {
+            description?: string;
+            inputSchema?: any;
+            name: string;
+        }[];
+    }>;
+}
+export interface AiMcpClientConfig {
+    client?: McpLikeClient;
+    defaultRoles?: (RoleEnum | string)[];
+    name: string;
+}
+export declare class CoreAiMcpClientService {
+    protected readonly registry: AiToolRegistry;
+    protected readonly logger: Logger;
+    protected readonly registered: Map<string, {
+        client: McpLikeClient;
+        toolNames: string[];
+    }>;
+    constructor(registry: AiToolRegistry);
+    registerExternalClient(config: AiMcpClientConfig): Promise<string[]>;
+    unregisterExternalClient(name: string): Promise<void>;
+    protected buildWrapperTool(namespacedName: string, descriptor: {
+        description?: string;
+        inputSchema?: any;
+        name: string;
+    }, config: AiMcpClientConfig): IAiTool;
+    protected extractText(res: {
+        content?: {
+            text?: string;
+            type?: string;
+        }[];
+    } | undefined): string;
+}

package/dist/core/modules/ai/services/core-ai-mcp-client.service.js

@@ -0,0 +1,123 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var CoreAiMcpClientService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CoreAiMcpClientService = void 0;
+const common_1 = require("@nestjs/common");
+const role_enum_1 = require("../../../common/enums/role.enum");
+const ai_tool_registry_1 = require("../tools/ai-tool.registry");
+let CoreAiMcpClientService = CoreAiMcpClientService_1 = class CoreAiMcpClientService {
+    registry;
+    logger = new common_1.Logger(CoreAiMcpClientService_1.name);
+    registered = new Map();
+    constructor(registry) {
+        this.registry = registry;
+    }
+    async registerExternalClient(config) {
+        if (!config?.name || !config?.client) {
+            throw new Error('McpClientService.registerExternalClient requires { name, client }');
+        }
+        await this.unregisterExternalClient(config.name);
+        let discovered;
+        try {
+            discovered = await config.client.listTools();
+        }
+        catch (err) {
+            this.logger.warn(`MCP listTools for "${config.name}" failed: ${err.message}`);
+            return [];
+        }
+        const registered = [];
+        for (const t of discovered?.tools || []) {
+            if (!t?.name) {
+                continue;
+            }
+            const ns = `${config.name}_${t.name}`;
+            const wrapper = this.buildWrapperTool(ns, t, config);
+            this.registry.register(wrapper);
+            registered.push(ns);
+        }
+        this.registered.set(config.name, { client: config.client, toolNames: registered });
+        if (registered.length) {
+            this.logger.log(`Registered ${registered.length} tool(s) from MCP client "${config.name}": ${registered.join(', ')}`);
+        }
+        return registered;
+    }
+    async unregisterExternalClient(name) {
+        const entry = this.registered.get(name);
+        if (!entry) {
+            return;
+        }
+        for (const toolName of entry.toolNames) {
+            try {
+                this.registry.unregister(toolName);
+            }
+            catch {
+            }
+        }
+        try {
+            await entry.client.close?.();
+        }
+        catch {
+        }
+        this.registered.delete(name);
+    }
+    buildWrapperTool(namespacedName, descriptor, config) {
+        const client = config.client;
+        const tool = {
+            description: descriptor.description || `(External MCP tool from "${config.name}")`,
+            mutating: true,
+            name: namespacedName,
+            parameters: descriptor.inputSchema || { properties: {}, type: 'object' },
+            roles: config.defaultRoles || [role_enum_1.RoleEnum.S_USER],
+            execute: async (args, _context) => {
+                try {
+                    const res = await client.callTool({ arguments: args ?? {}, name: descriptor.name });
+                    if (res?.isError) {
+                        return {
+                            message: this.extractText(res) || `MCP tool "${descriptor.name}" reported an error.`,
+                            success: false,
+                        };
+                    }
+                    const text = this.extractText(res);
+                    let data = text;
+                    if (text) {
+                        try {
+                            data = JSON.parse(text);
+                        }
+                        catch {
+                        }
+                    }
+                    return { data, success: true };
+                }
+                catch (err) {
+                    return { message: err.message, success: false };
+                }
+            },
+        };
+        return tool;
+    }
+    extractText(res) {
+        if (!res?.content?.length) {
+            return '';
+        }
+        return res.content
+            .filter((p) => p?.text)
+            .map((p) => p.text)
+            .join('\n')
+            .trim();
+    }
+};
+exports.CoreAiMcpClientService = CoreAiMcpClientService;
+exports.CoreAiMcpClientService = CoreAiMcpClientService = CoreAiMcpClientService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [ai_tool_registry_1.AiToolRegistry])
+], CoreAiMcpClientService);
+//# sourceMappingURL=core-ai-mcp-client.service.js.map

package/dist/core/modules/ai/services/core-ai-mcp-client.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-ai-mcp-client.service.js","sourceRoot":"","sources":["../../../../../src/core/modules/ai/services/core-ai-mcp-client.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAoD;AAEpD,+DAA2D;AAE3D,gEAA2D;AA4CpD,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IAIF;IAHZ,MAAM,GAAG,IAAI,eAAM,CAAC,wBAAsB,CAAC,IAAI,CAAC,CAAC;IACjD,UAAU,GAAG,IAAI,GAAG,EAA0D,CAAC;IAElG,YAA+B,QAAwB;QAAxB,aAAQ,GAAR,QAAQ,CAAgB;IAAG,CAAC;IAO3D,KAAK,CAAC,sBAAsB,CAAC,MAAyB;QACpD,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,UAAkF,CAAC;QACvF,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,IAAI,aAAc,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACzF,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;gBACb,SAAS;YACX,CAAC;YACD,MAAM,EAAE,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,OAAO,GAAY,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YAC9D,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAChC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QACnF,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,cAAc,UAAU,CAAC,MAAM,6BAA6B,MAAM,CAAC,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrG,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAGD,KAAK,CAAC,wBAAwB,CAAC,IAAY;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QACD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;QAET,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAGS,gBAAgB,CACxB,cAAsB,EACtB,UAAqE,EACrE,MAAyB;QAEzB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAO,CAAC;QAC9B,MAAM,IAAI,GAAY;YACpB,WAAW,EAAE,UAAU,CAAC,WAAW,IAAI,4BAA4B,MAAM,CAAC,IAAI,IAAI;YAGlF,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,UAAU,CAAC,WAAW,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxE,KAAK,EAAE,MAAM,CAAC,YAAY,IAAI,CAAC,oBAAQ,CAAC,MAAM,CAAC;YAE/C,OAAO,EAAE,KAAK,EAAE,IAAyB,EAAE,QAAuB,EAAyB,EAAE;gBAC3F,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;oBACpF,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;wBACjB,OAAO;4BACL,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,aAAa,UAAU,CAAC,IAAI,sBAAsB;4BACpF,OAAO,EAAE,KAAK;yBACf,CAAC;oBACJ,CAAC;oBACD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;oBACnC,IAAI,IAAI,GAAY,IAAI,CAAC;oBACzB,IAAI,IAAI,EAAE,CAAC;wBACT,IAAI,CAAC;4BACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAC1B,CAAC;wBAAC,MAAM,CAAC;wBAET,CAAC;oBACH,CAAC;oBACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBACjC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,OAAO,EAAG,GAAa,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;gBAC7D,CAAC;YACH,CAAC;SACF,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAGS,WAAW,CAAC,GAAiE;QACrF,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,GAAG,CAAC,OAAO;aACf,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;aACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAK,CAAC;aACnB,IAAI,CAAC,IAAI,CAAC;aACV,IAAI,EAAE,CAAC;IACZ,CAAC;CACF,CAAA;AAxHY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,mBAAU,GAAE;qCAK8B,iCAAc;GAJ5C,sBAAsB,CAwHlC"}

package/dist/core/modules/ai/services/core-ai-mcp-oauth.service.d.ts

@@ -0,0 +1,68 @@
+import { Logger, OnModuleInit } from '@nestjs/common';
+import { Connection } from 'mongoose';
+export interface AiMcpOAuthClient {
+    client_id: string;
+    client_name?: string;
+    client_secret?: string;
+    client_secret_expires_at?: number;
+    redirect_uris: string[];
+    token_endpoint_auth_method?: string;
+}
+export interface AiMcpAccessTokenPayload {
+    cid: string;
+    exp: number;
+    sub: string;
+    type: 'mcp_access';
+}
+export declare class CoreAiMcpOAuthService implements OnModuleInit {
+    protected readonly connection: Connection;
+    protected readonly logger: Logger;
+    protected readonly clientsCollection = "aiMcpOAuthClients";
+    protected readonly codesCollection = "aiMcpOAuthCodes";
+    protected readonly refreshCollection = "aiMcpOAuthRefreshTokens";
+    private indexesEnsured;
+    private warnedSecret;
+    constructor(connection: Connection);
+    onModuleInit(): void;
+    assertProductionSafe(): void;
+    protected oauthEnabled(): boolean;
+    protected resolveSecret(): string | undefined;
+    signAccessToken(userId: string, clientId: string, ttlSeconds?: number): string;
+    verifyAccessToken(token: string): AiMcpAccessTokenPayload | null;
+    verifyPkce(verifier: string, challenge: string, method?: string): boolean;
+    generateId(bytes?: number): string;
+    registerClient(client: AiMcpOAuthClient): Promise<AiMcpOAuthClient>;
+    getClient(clientId: string): Promise<AiMcpOAuthClient | null>;
+    saveAuthorizationCode(code: string, data: {
+        clientId: string;
+        codeChallenge: string;
+        userId: string;
+    }): Promise<void>;
+    getAuthorizationCode(code: string): Promise<{
+        clientId: string;
+        codeChallenge: string;
+        userId: string;
+    } | null>;
+    consumeAuthorizationCode(code: string): Promise<{
+        clientId: string;
+        codeChallenge: string;
+        userId: string;
+    } | null>;
+    issueRefreshToken(userId: string, clientId: string): Promise<string>;
+    rotateRefreshToken(token: string, clientId: string): Promise<{
+        clientId: string;
+        newToken: string;
+        userId: string;
+    } | null>;
+    loadUser(userId: string): Promise<{
+        id: string;
+        roles: string[];
+    } | null>;
+    buildOAuthProvider(accessTtlSeconds?: number): Record<string, any>;
+    protected authorizeConsent(_client: any, _params: any, _res: any): Promise<void>;
+    protected hmac(payloadStr: string): string;
+    protected safeEqual(a: string, b: string): boolean;
+    protected getSecret(): string;
+    protected db(): import("mongodb").Db;
+    protected ensureIndexes(): Promise<void>;
+}

package/dist/core/modules/ai/services/core-ai-mcp-oauth.service.js

@@ -0,0 +1,279 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var CoreAiMcpOAuthService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CoreAiMcpOAuthService = void 0;
+const common_1 = require("@nestjs/common");
+const mongoose_1 = require("@nestjs/mongoose");
+const node_crypto_1 = require("node:crypto");
+const mongoose_2 = require("mongoose");
+const cookies_helper_1 = require("../../../common/helpers/cookies.helper");
+const config_service_1 = require("../../../common/services/config.service");
+let CoreAiMcpOAuthService = CoreAiMcpOAuthService_1 = class CoreAiMcpOAuthService {
+    connection;
+    logger = new common_1.Logger(CoreAiMcpOAuthService_1.name);
+    clientsCollection = 'aiMcpOAuthClients';
+    codesCollection = 'aiMcpOAuthCodes';
+    refreshCollection = 'aiMcpOAuthRefreshTokens';
+    indexesEnsured = false;
+    warnedSecret = false;
+    constructor(connection) {
+        this.connection = connection;
+    }
+    onModuleInit() {
+        this.assertProductionSafe();
+    }
+    assertProductionSafe() {
+        if (this.oauthEnabled() && (0, cookies_helper_1.isProductionLikeEnv)(config_service_1.ConfigService.get('env')) && !this.resolveSecret()) {
+            throw new Error('AI MCP OAuth signing secret is required in production/staging when ai.mcp.oauth is enabled, ' +
+                'but none is set (ai.mcp.oauthSecret / ai.encryptionSecret / NSC__AI__ENCRYPTION_SECRET / ' +
+                'SECRETS_ENCRYPTION_KEY). Set a random 32+ char value.');
+        }
+    }
+    oauthEnabled() {
+        const mcp = config_service_1.ConfigService.get('ai.mcp');
+        return typeof mcp === 'object' && mcp?.oauth === true;
+    }
+    resolveSecret() {
+        return (config_service_1.ConfigService.get('ai.mcp.oauthSecret') ||
+            config_service_1.ConfigService.get('ai.encryptionSecret') ||
+            process.env.NSC__AI__ENCRYPTION_SECRET ||
+            process.env.SECRETS_ENCRYPTION_KEY);
+    }
+    signAccessToken(userId, clientId, ttlSeconds = 3600) {
+        const payload = {
+            cid: clientId,
+            exp: Math.floor(Date.now() / 1000) + ttlSeconds,
+            sub: userId,
+            type: 'mcp_access',
+        };
+        const payloadStr = Buffer.from(JSON.stringify(payload)).toString('base64url');
+        return `${payloadStr}.${this.hmac(payloadStr)}`;
+    }
+    verifyAccessToken(token) {
+        if (!token || !token.includes('.')) {
+            return null;
+        }
+        const [payloadStr, signature] = token.split('.');
+        if (!payloadStr || !signature) {
+            return null;
+        }
+        const expected = this.hmac(payloadStr);
+        if (!this.safeEqual(signature, expected)) {
+            return null;
+        }
+        try {
+            const payload = JSON.parse(Buffer.from(payloadStr, 'base64url').toString('utf8'));
+            if (payload.type !== 'mcp_access' || payload.exp <= Math.floor(Date.now() / 1000)) {
+                return null;
+            }
+            return payload;
+        }
+        catch {
+            return null;
+        }
+    }
+    verifyPkce(verifier, challenge, method = 'S256') {
+        if (!verifier || !challenge) {
+            return false;
+        }
+        if (method !== 'S256') {
+            return false;
+        }
+        const computed = (0, node_crypto_1.createHash)('sha256').update(verifier).digest('base64url');
+        return this.safeEqual(computed, challenge);
+    }
+    generateId(bytes = 32) {
+        return (0, node_crypto_1.randomBytes)(bytes).toString('base64url');
+    }
+    async registerClient(client) {
+        await this.ensureIndexes();
+        await this.db()
+            .collection(this.clientsCollection)
+            .insertOne({ ...client, createdAt: new Date() });
+        return client;
+    }
+    async getClient(clientId) {
+        const doc = await this.db().collection(this.clientsCollection).findOne({ client_id: clientId });
+        if (!doc) {
+            return null;
+        }
+        return {
+            client_id: doc.client_id,
+            client_name: doc.client_name,
+            client_secret: doc.client_secret,
+            client_secret_expires_at: doc.client_secret_expires_at,
+            redirect_uris: doc.redirect_uris,
+            token_endpoint_auth_method: doc.token_endpoint_auth_method,
+        };
+    }
+    async saveAuthorizationCode(code, data) {
+        await this.ensureIndexes();
+        await this.db().collection(this.codesCollection).insertOne({
+            clientId: data.clientId,
+            code,
+            codeChallenge: data.codeChallenge,
+            createdAt: new Date(),
+            userId: data.userId,
+        });
+    }
+    async getAuthorizationCode(code) {
+        const doc = await this.db().collection(this.codesCollection).findOne({ code });
+        return doc ? { clientId: doc.clientId, codeChallenge: doc.codeChallenge, userId: doc.userId } : null;
+    }
+    async consumeAuthorizationCode(code) {
+        const doc = await this.db().collection(this.codesCollection).findOneAndDelete({ code });
+        const value = doc?.value ?? doc;
+        if (!value) {
+            return null;
+        }
+        return { clientId: value.clientId, codeChallenge: value.codeChallenge, userId: value.userId };
+    }
+    async issueRefreshToken(userId, clientId) {
+        await this.ensureIndexes();
+        const token = this.generateId();
+        await this.db().collection(this.refreshCollection).insertOne({ clientId, createdAt: new Date(), token, userId });
+        return token;
+    }
+    async rotateRefreshToken(token, clientId) {
+        if (!token || !clientId) {
+            return null;
+        }
+        const doc = await this.db().collection(this.refreshCollection).findOneAndDelete({ clientId, token });
+        const value = doc?.value ?? doc;
+        if (!value) {
+            return null;
+        }
+        const newToken = await this.issueRefreshToken(value.userId, value.clientId);
+        return { clientId: value.clientId, newToken, userId: value.userId };
+    }
+    async loadUser(userId) {
+        try {
+            const { ObjectId } = await Promise.resolve().then(() => require('mongodb'));
+            const query = ObjectId.isValid(userId) ? { _id: new ObjectId(userId) } : { _id: userId };
+            const doc = await this.db()
+                .collection('users')
+                .findOne(query, { projection: { roles: 1 } });
+            if (!doc) {
+                return null;
+            }
+            return { id: userId, roles: Array.isArray(doc.roles) ? doc.roles : [] };
+        }
+        catch {
+            return null;
+        }
+    }
+    buildOAuthProvider(accessTtlSeconds = 3600) {
+        return {
+            authorize: (client, params, res) => this.authorizeConsent(client, params, res),
+            challengeForAuthorizationCode: async (_client, authorizationCode) => {
+                const stored = await this.getAuthorizationCode(authorizationCode);
+                return stored?.codeChallenge ?? '';
+            },
+            clientsStore: {
+                getClient: (clientId) => this.getClient(clientId),
+                registerClient: (client) => this.registerClient(client),
+            },
+            exchangeAuthorizationCode: async (client, authorizationCode) => {
+                const stored = await this.consumeAuthorizationCode(authorizationCode);
+                if (!stored || stored.clientId !== client.client_id) {
+                    throw new Error('invalid_grant');
+                }
+                return {
+                    access_token: this.signAccessToken(stored.userId, stored.clientId, accessTtlSeconds),
+                    expires_in: accessTtlSeconds,
+                    refresh_token: await this.issueRefreshToken(stored.userId, stored.clientId),
+                    token_type: 'Bearer',
+                };
+            },
+            exchangeRefreshToken: async (client, refreshToken) => {
+                const callerClientId = client?.client_id;
+                if (!callerClientId) {
+                    throw new Error('invalid_client');
+                }
+                const rotated = await this.rotateRefreshToken(refreshToken, callerClientId);
+                if (!rotated) {
+                    throw new Error('invalid_grant');
+                }
+                return {
+                    access_token: this.signAccessToken(rotated.userId, rotated.clientId, accessTtlSeconds),
+                    expires_in: accessTtlSeconds,
+                    refresh_token: rotated.newToken,
+                    token_type: 'Bearer',
+                };
+            },
+            verifyAccessToken: async (token) => {
+                const payload = this.verifyAccessToken(token);
+                if (!payload) {
+                    throw new Error('invalid_token');
+                }
+                return { clientId: payload.cid, extra: { userId: payload.sub }, scopes: [], token };
+            },
+        };
+    }
+    async authorizeConsent(_client, _params, _res) {
+        throw new Error('authorizeConsent is not implemented — override CoreAiMcpOAuthService.authorizeConsent to wire your login/consent UI.');
+    }
+    hmac(payloadStr) {
+        return (0, node_crypto_1.createHmac)('sha256', this.getSecret()).update(payloadStr).digest('base64url');
+    }
+    safeEqual(a, b) {
+        const bufA = Buffer.from(a);
+        const bufB = Buffer.from(b);
+        if (bufA.length !== bufB.length) {
+            return false;
+        }
+        return (0, node_crypto_1.timingSafeEqual)(bufA, bufB);
+    }
+    getSecret() {
+        const raw = this.resolveSecret();
+        if (!raw) {
+            if (!this.warnedSecret) {
+                this.logger.warn('No AI MCP OAuth secret set — using an insecure development default. Set ai.mcp.oauthSecret ' +
+                    '(or ai.encryptionSecret / NSC__AI__ENCRYPTION_SECRET) to a random 32+ char value in production.');
+                this.warnedSecret = true;
+            }
+            return 'lt-nest-server-ai-mcp-oauth-dev-only-insecure-default';
+        }
+        return raw;
+    }
+    db() {
+        if (!this.connection.db) {
+            throw new Error('MongoDB connection not available for MCP OAuth');
+        }
+        return this.connection.db;
+    }
+    async ensureIndexes() {
+        if (this.indexesEnsured) {
+            return;
+        }
+        this.indexesEnsured = true;
+        try {
+            await this.db().collection(this.clientsCollection).createIndex({ client_id: 1 }, { unique: true });
+            await this.db().collection(this.codesCollection).createIndex({ createdAt: 1 }, { expireAfterSeconds: 600 });
+            await this.db().collection(this.codesCollection).createIndex({ code: 1 }, { unique: true });
+            await this.db().collection(this.refreshCollection).createIndex({ token: 1 }, { unique: true });
+        }
+        catch (err) {
+            this.logger.warn(`Could not ensure MCP OAuth indexes: ${err.message}`);
+        }
+    }
+};
+exports.CoreAiMcpOAuthService = CoreAiMcpOAuthService;
+exports.CoreAiMcpOAuthService = CoreAiMcpOAuthService = CoreAiMcpOAuthService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(0, (0, mongoose_1.InjectConnection)()),
+    __metadata("design:paramtypes", [mongoose_2.Connection])
+], CoreAiMcpOAuthService);
+//# sourceMappingURL=core-ai-mcp-oauth.service.js.map

package/dist/core/modules/ai/services/core-ai-mcp-oauth.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-ai-mcp-oauth.service.js","sourceRoot":"","sources":["../../../../../src/core/modules/ai/services/core-ai-mcp-oauth.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAkE;AAClE,+CAAoD;AACpD,6CAAmF;AACnF,uCAAsC;AAEtC,2EAA6E;AAC7E,4EAAwE;AA6CjE,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAWmB;IAVhC,MAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;IAGhD,iBAAiB,GAAG,mBAAmB,CAAC;IACxC,eAAe,GAAG,iBAAiB,CAAC;IACpC,iBAAiB,GAAG,yBAAyB,CAAC;IAEzD,cAAc,GAAG,KAAK,CAAC;IACvB,YAAY,GAAG,KAAK,CAAC;IAE7B,YAAmD,UAAsB;QAAtB,eAAU,GAAV,UAAU,CAAY;IAAG,CAAC;IAO7E,YAAY;QACV,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,CAAC;IAGD,oBAAoB;QAClB,IAAI,IAAI,CAAC,YAAY,EAAE,IAAI,IAAA,oCAAmB,EAAC,8BAAa,CAAC,GAAG,CAAS,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;YAC1G,MAAM,IAAI,KAAK,CACb,8FAA8F;gBAC5F,2FAA2F;gBAC3F,uDAAuD,CAC1D,CAAC;QACJ,CAAC;IACH,CAAC;IAGS,YAAY;QACpB,MAAM,GAAG,GAAG,8BAAa,CAAC,GAAG,CAAsB,QAAQ,CAAC,CAAC;QAC7D,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC;IACxD,CAAC;IAGS,aAAa;QACrB,OAAO,CACL,8BAAa,CAAC,GAAG,CAAS,oBAAoB,CAAC;YAC/C,8BAAa,CAAC,GAAG,CAAS,qBAAqB,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,0BAA0B;YACtC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CACnC,CAAC;IACJ,CAAC;IASD,eAAe,CAAC,MAAc,EAAE,QAAgB,EAAE,UAAU,GAAG,IAAI;QACjE,MAAM,OAAO,GAA4B;YACvC,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,UAAU;YAC/C,GAAG,EAAE,MAAM;YACX,IAAI,EAAE,YAAY;SACnB,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC9E,OAAO,GAAG,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;IAClD,CAAC;IAKD,iBAAiB,CAAC,KAAa;QAC7B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B,CAAC;YAC7G,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;gBAClF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAKD,UAAU,CAAC,QAAgB,EAAE,SAAiB,EAAE,MAAM,GAAG,MAAM;QAC7D,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAEtB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC;IAKD,UAAU,CAAC,KAAK,GAAG,EAAE;QACnB,OAAO,IAAA,yBAAW,EAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC;IASD,KAAK,CAAC,cAAc,CAAC,MAAwB;QAC3C,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,CAAC,EAAE,EAAE;aACZ,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC;aAClC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QACnD,OAAO,MAAM,CAAC;IAChB,CAAC;IAWD,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChG,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,wBAAwB,EAAE,GAAG,CAAC,wBAAwB;YACtD,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,0BAA0B,EAAE,GAAG,CAAC,0BAA0B;SAC3D,CAAC;IACJ,CAAC;IAKD,KAAK,CAAC,qBAAqB,CACzB,IAAY,EACZ,IAAiE;QAEjE,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,SAAS,CAAC;YACzD,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI;YACJ,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IAKD,KAAK,CAAC,oBAAoB,CACxB,IAAY;QAEZ,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvG,CAAC;IAKD,KAAK,CAAC,wBAAwB,CAC5B,IAAY;QAEZ,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACxF,MAAM,KAAK,GAAI,GAAW,EAAE,KAAK,IAAI,GAAG,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAChG,CAAC;IAKD,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,QAAgB;QACtD,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAChC,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACjH,OAAO,KAAK,CAAC;IACf,CAAC;IAWD,KAAK,CAAC,kBAAkB,CACtB,KAAa,EACb,QAAgB;QAEhB,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACrG,MAAM,KAAK,GAAI,GAAW,EAAE,KAAK,IAAI,GAAG,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5E,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACtE,CAAC;IAMD,KAAK,CAAC,QAAQ,CAAC,MAAc;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,GAAG,2CAAa,SAAS,EAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAa,EAAE,CAAC;YAChG,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,EAAE;iBACxB,UAAU,CAAC,OAAO,CAAC;iBACnB,OAAO,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAChD,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAUD,kBAAkB,CAAC,gBAAgB,GAAG,IAAI;QACxC,OAAO;YACL,SAAS,EAAE,CAAC,MAAW,EAAE,MAAW,EAAE,GAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC;YAC7F,6BAA6B,EAAE,KAAK,EAAE,OAAY,EAAE,iBAAyB,EAAE,EAAE;gBAC/E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,CAAC;gBAClE,OAAO,MAAM,EAAE,aAAa,IAAI,EAAE,CAAC;YACrC,CAAC;YACD,YAAY,EAAE;gBACZ,SAAS,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;gBACzD,cAAc,EAAE,CAAC,MAAwB,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;aAC1E;YACD,yBAAyB,EAAE,KAAK,EAAE,MAAW,EAAE,iBAAyB,EAAE,EAAE;gBAC1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;gBACtE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;oBACpD,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;gBACnC,CAAC;gBACD,OAAO;oBACL,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;oBACpF,UAAU,EAAE,gBAAgB;oBAC5B,aAAa,EAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC;oBAC3E,UAAU,EAAE,QAAQ;iBACrB,CAAC;YACJ,CAAC;YACD,oBAAoB,EAAE,KAAK,EAAE,MAAW,EAAE,YAAoB,EAAE,EAAE;gBAMhE,MAAM,cAAc,GAAG,MAAM,EAAE,SAAS,CAAC;gBACzC,IAAI,CAAC,cAAc,EAAE,CAAC;oBACpB,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACpC,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;gBAC5E,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;gBACnC,CAAC;gBACD,OAAO;oBACL,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC;oBACtF,UAAU,EAAE,gBAAgB;oBAC5B,aAAa,EAAE,OAAO,CAAC,QAAQ;oBAC/B,UAAU,EAAE,QAAQ;iBACrB,CAAC;YACJ,CAAC;YACD,iBAAiB,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;gBACzC,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;gBACnC,CAAC;gBACD,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;YACtF,CAAC;SACF,CAAC;IACJ,CAAC;IAOS,KAAK,CAAC,gBAAgB,CAAC,OAAY,EAAE,OAAY,EAAE,IAAS;QACpE,MAAM,IAAI,KAAK,CACb,sHAAsH,CACvH,CAAC;IACJ,CAAC;IASS,IAAI,CAAC,UAAkB;QAC/B,OAAO,IAAA,wBAAU,EAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACvF,CAAC;IAKS,SAAS,CAAC,CAAS,EAAE,CAAS;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAA,6BAAe,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAMS,SAAS;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACjC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6FAA6F;oBAC3F,iGAAiG,CACpG,CAAC;gBACF,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YAC3B,CAAC;YACD,OAAO,uDAAuD,CAAC;QACjE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAKS,EAAE;QACV,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;IAC5B,CAAC;IAKS,KAAK,CAAC,aAAa;QAC3B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnG,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5G,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5F,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAwC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;CACF,CAAA;AAzYY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;IAYE,WAAA,IAAA,2BAAgB,GAAE,CAAA;qCAAgC,qBAAU;GAX9D,qBAAqB,CAyYjC"}

package/dist/core/modules/ai/services/core-ai-mcp.service.d.ts

@@ -0,0 +1,22 @@
+import { Logger } from '@nestjs/common';
+import { AiToolRegistry, AiToolUser } from '../tools/ai-tool.registry';
+export interface McpToolDescriptor {
+    description: string;
+    inputSchema: Record<string, any>;
+    name: string;
+}
+export interface McpCallResult {
+    content: {
+        text: string;
+        type: 'text';
+    }[];
+    isError?: boolean;
+}
+export declare class CoreAiMcpService {
+    protected readonly toolRegistry: AiToolRegistry;
+    protected readonly logger: Logger;
+    constructor(toolRegistry: AiToolRegistry);
+    mcpListTools(user: AiToolUser | null | undefined): McpToolDescriptor[];
+    mcpCallTool(user: AiToolUser | null | undefined, name: string, args: Record<string, any>): Promise<McpCallResult>;
+    createServer(user: AiToolUser): Promise<any>;
+}