@lyrra/mcp-server 1.1.3 → 1.1.7

package/dist/eduflow-block-docs.js

@@ -0,0 +1,438 @@
+/**
+ * MCP documentation for each EduFlow block type (aligned with the React designer).
+ * Types: apps/frontend/src/types/eduflow.ts, palette apps/frontend/src/lib/eduflow-designer-palette-blueprint.ts
+ */
+export const EDUFLOW_BLOCK_COMMON = `## Shared block data (JSON model)
+
+Each block in \`EduFlow.blocks[]\` includes:
+- \`id\` (UUID), \`type\` (string, e.g. \`quiz_mcq\`), \`position\`, \`connections\` (graph in/out)
+- optional \`isRequired\`, \`isLocked\` (institution-locked block), \`order\`, \`label\`, \`color\`, \`metadata\`
+
+**Object \`data\` (\`BlockData\`)** — shared:
+- \`title\`, \`description\` (rich HTML in the designer)
+- \`descriptionAudioUrl\`: TTS URL for the description (if generated)
+- \`content\`: text or HTML depending on type (e.g. question stem)
+- \`mediaUrl\`: primary media when applicable
+- \`settings\`: \`Record<string, unknown>\` — **type-specific parameters** (see per-block sections below)
+- \`scoring\`: max points, pass threshold, method (\`automatic\` | \`manual\` | \`peer\` | \`ai\`), optional rubric
+- \`timeLimit\` (seconds or minutes depending on screen — e.g. timer UI may use “minutes” while the field is \`timeLimit\`)
+- \`attempts\`: max attempts
+- \`feedback\`: \`onCorrect\`, \`onIncorrect\`, \`onPartial\`, \`showExplanation\`, \`explanation\`
+
+**Accessibility / adaptive replacement** (text, PDF, presentation, video, browser) in the side panel:
+- \`settings.accessibilityMode\`: \`auto\` | \`assist\` | \`manual\`
+- \`settings.forceAccessibleGame\`: boolean
+
+**API persistence**: blocks are saved on the EduFlow document via \`/api/eduflows/:id\` (JSON update).
+`;
+export const EDUFLOW_BLOCK_DOCS = [
+    {
+        id: 'start',
+        category: 'Structure',
+        label: 'Start',
+        summary: 'Entry point of the EduFlow path.',
+        configurationMd: `### Role
+Marks the beginning of the flow; often unique and institution-locked.
+
+### Specifics
+No required \`settings\`. Use title/description as the designer cue.
+
+### Graph
+One or more outputs to the following blocks.`,
+    },
+    {
+        id: 'end',
+        category: 'Structure',
+        label: 'End',
+        summary: 'Path completion / exit.',
+        configurationMd: `### Role
+Ends the path (certificate, wrap-up, exit).
+
+### Specifics
+No mandatory technical fields in the generic designer.
+
+### Graph
+Input(s) from the main path or branches.`,
+    },
+    {
+        id: 'subflow',
+        category: 'Structure',
+        label: 'Subflow',
+        summary: 'Reference or embed another EduFlow.',
+        configurationMd: `### Role
+Chains a submodule (another course or reusable segment).
+
+### Specifics
+Dedicated \`SubflowBlockEditor\`: link to an existing EduFlow (id, embed options). Exact \`settings\` fields depend on the editor (target flow selection, etc.).`,
+    },
+    {
+        id: 'loop',
+        category: 'Structure',
+        label: 'Loop',
+        summary: 'Repeat a segment based on a condition.',
+        configurationMd: `### settings
+- \`loopCondition\`: \`count\` | \`score\` | \`completion\`
+- \`maxIterations\`: integer (1–100, default 3)
+
+### Role
+Revisit a set of blocks until a criterion is met.`,
+    },
+    {
+        id: 'timer',
+        category: 'Structure',
+        label: 'Timer',
+        summary: 'Time limit for a step.',
+        configurationMd: `### data.timeLimit
+Shown in **minutes** in the designer UI (integer ≥ 1).
+
+> Note: the side panel may use a \`duration\` field on other screens; the main canvas uses \`timeLimit\`.`,
+    },
+    {
+        id: 'summary',
+        category: 'Structure',
+        label: 'Summary',
+        summary: 'Recap for the learner.',
+        configurationMd: `### Role
+Consolidation block (structured text, key points).
+
+### Specifics
+\`SummaryBlockEditor\`: rich content and internal options in \`settings\` / \`content\` per editor.`,
+    },
+    {
+        id: 'form',
+        category: 'Structure',
+        label: 'Form',
+        summary: 'Structured data collection (dynamic fields).',
+        configurationMd: `### settings.formFields
+Array of field objects: \`id\`, \`type\` (\`text\` | \`textarea\` | \`email\` | \`number\` | \`select\` | \`checkbox\` | \`radio\` | \`date\` | \`toggle\` | \`subtitle\` | \`file\`), \`label\`, \`placeholder\`, \`required\`, \`options\` (for select/radio), \`defaultValue\`, \`min\` / \`max\`, \`maxLength\`, \`description\`, \`autoFill\` (\`email\` | \`firstName\` | \`lastName\` | \`fullName\`).
+
+### Conditional rules
+\`settings.formRules\`: \`if\` / \`elseif\` / \`else\` rules with conditions on fields.
+
+### data
+Title, description; optional description audio if enabled on the flow.`,
+    },
+    {
+        id: 'split',
+        category: 'Structure',
+        label: 'Split (branch)',
+        summary: 'Multiple optional paths.',
+        configurationMd: `### settings
+- \`splitTitle\`: label shown (e.g. “Choose your path”)
+- \`numOutputs\`: number of branches (2–10)
+
+### Graph
+As many outputs as \`numOutputs\`.`,
+    },
+    {
+        id: 'merge',
+        category: 'Structure',
+        label: 'Merge',
+        summary: 'Join multiple branches.',
+        configurationMd: `### Role
+Convergence after a \`split\` or parallel paths.
+
+### Specifics
+No dedicated fields in the generic UI; title/description for the designer.`,
+    },
+    {
+        id: 'email',
+        category: 'Structure',
+        label: 'Email',
+        summary: 'Send email (template) in the flow.',
+        configurationMd: `### settings
+- \`emailSubject\`: subject line
+- \`emailTemplate\`: HTML body (placeholders e.g. \`{{name}}\`)`,
+    },
+    {
+        id: 'text',
+        category: 'Content',
+        label: 'Text',
+        summary: 'Rich content: article, instructions.',
+        configurationMd: `### data.content
+Body HTML (rich editor).
+
+### settings
+Typography / layout per \`TextBlockEditor\` (fonts, line height, etc. when exposed).`,
+    },
+    {
+        id: 'video',
+        category: 'Content',
+        label: 'Video',
+        summary: 'Video player (upload, YouTube, Vimeo, URL).',
+        configurationMd: `### Source
+\`settings\` control source type (\`upload\` | \`youtube\` | \`vimeo\` | \`url\`), IDs or URL, file metadata.
+
+### Appearance
+Player theme: \`app\` | \`cinema\` | \`glass\` | \`editorial\`; accent color; ratio \`16:9\` | \`21:9\` | \`4:3\` | \`1:1\`; corners \`soft\` | \`rounded\` | \`square\`; shadow \`soft\` | \`glow\` | \`dramatic\`.
+
+### Subtitles
+Tracks per language (fr, en, es, de, it) per editor.
+
+See \`apps/frontend/src/lib/video-block.ts\` for exported keys (\`getVideoBlockConfig\`).`,
+    },
+    {
+        id: 'podcast',
+        category: 'Content',
+        label: 'Podcast',
+        summary: 'Long-form podcast audio (episode / feed).',
+        configurationMd: `### Role
+Long audio playback linked to the podcasts module when configured.
+
+### data / settings
+Media URL, episode metadata in \`settings\` per block editor (series title, episode, artwork).`,
+    },
+    {
+        id: 'audio',
+        category: 'Content',
+        label: 'Audio',
+        summary: 'Audio track (outside podcast module).',
+        configurationMd: `### Role
+Simple audio playback (uploaded file or URL).
+
+### data / settings
+\`mediaUrl\` or upload; \`AudioBlockEditor\`: default volume, loop, waveform, subtitles/transcript when available.`,
+    },
+    {
+        id: 'image',
+        category: 'Content',
+        label: 'Image',
+        summary: 'Static or responsive image.',
+        configurationMd: `### data.mediaUrl or upload
+Image file; \`settings\`: caption, alt, size, clickable link per \`ImageBlockEditor\`.`,
+    },
+    {
+        id: 'pdf',
+        category: 'Content',
+        label: 'PDF',
+        summary: 'Embedded PDF document.',
+        configurationMd: `### Role
+Display / download document.
+
+### data / settings
+PDF URL, toolbar options, default page, embed mode (per \`PDFBlockEditor\`).`,
+    },
+    {
+        id: 'presentation',
+        category: 'Content',
+        label: 'Presentation',
+        summary: 'Slide deck.',
+        configurationMd: `### settings
+Slides: array of objects (title, content, media) managed by \`PresentationBlockEditor\`.`,
+    },
+    {
+        id: 'browser',
+        category: 'Content',
+        label: 'Embedded browser',
+        summary: 'iframe / webview to an external URL.',
+        configurationMd: `### settings
+Allowed URL, sandbox flags, height — via \`BrowserBlockEditor\`.`,
+    },
+    {
+        id: 'chart',
+        category: 'Content',
+        label: 'Chart',
+        summary: 'Chart (bars, line, etc.).',
+        configurationMd: `### settings
+Dataset (series, labels), chart type, colors — \`ChartBlockEditor\`.`,
+    },
+    {
+        id: 'timeline',
+        category: 'Content',
+        label: 'Timeline',
+        summary: 'Dated events on a line.',
+        configurationMd: `### settings
+Event list: date, title, description, media — \`TimelineBlockEditor\`.`,
+    },
+    {
+        id: 'mindmap',
+        category: 'Content',
+        label: 'Mind map',
+        summary: 'Hierarchical nodes and links.',
+        configurationMd: `### settings
+Tree structure (root node, children, styles) — \`MindmapBlockEditor\`.`,
+    },
+    {
+        id: 'visual_ai',
+        category: 'Content',
+        label: 'AI visual',
+        summary: 'AI-generated image or media.',
+        configurationMd: `### settings
+Prompt, style, provider, resulting image (URL or media id) — \`VisualAiBlockEditor\` / related modals.`,
+    },
+    {
+        id: 'quiz_mcq',
+        category: 'Interactive',
+        label: 'MCQ / quiz',
+        summary: 'Multiple choice, true/false, or ordering.',
+        configurationMd: `### Side panel (\`QuizBlockEditor\`)
+- \`settings.quizType\`: \`mcq\` | \`true_false\` | \`ordering\`
+- \`data.content\`: question stem (HTML/text)
+- \`settings.answers\`: array \`{ id, text, isCorrect }\` (MCQ, max 10 answers)
+- \`settings.orderingItems\`: array \`{ id, text, order }\` (ordering mode)
+- \`settings.shuffleAnswers\`: shuffle options
+- \`settings.correctAnswer\`: boolean (T/F mode)
+- \`settings.pointsPerCorrect\`, \`settings.partialScoring\`
+- \`data.attempts\`: max attempts
+- \`data.feedback\`: correct/incorrect messages, \`showExplanation\`, \`explanation\`
+
+### Canvas panel (extended MCQ)
+- \`settings.optionA\` … \`optionD\`: answer texts
+- \`settings.correctAnswer\`: \`A\` | \`B\` | \`C\` | \`D\`
+- \`settings.branchingMode\`: \`none\` | \`correct_incorrect\` | \`per_answer\` (graph branching)
+- \`settings.feedback\`: message after answer`,
+    },
+    {
+        id: 'quiz_open',
+        category: 'Interactive',
+        label: 'Open question',
+        summary: 'Free-text answer.',
+        configurationMd: `### Role
+Learner enters a long answer; manual or AI grading per product settings.
+
+### data
+\`content\`: prompt. \`settings\`: criteria, max length, rubric when present in UI.`,
+    },
+    {
+        id: 'phrase_reveal',
+        category: 'Interactive',
+        label: 'Phrase reveal',
+        summary: 'Words or chunks revealed progressively.',
+        configurationMd: `### settings / content
+Base text, splitting, animation — \`PhraseRevealBlockEditor\`.`,
+    },
+    {
+        id: 'self_assessment',
+        category: 'Interactive',
+        label: 'Self-assessment',
+        summary: 'Self-rated criteria grid.',
+        configurationMd: `### settings.criteria
+Array \`EduFlowSelfAssessmentCriterion\`: \`id\`, \`label\`, \`description\`, \`badgeOptions\` (if empty → free text per criterion).
+
+### Global response type
+\`settings.responseType\`: \`numeric\` | \`stars\` | \`text\` (see \`eduflow.ts\`).`,
+    },
+    {
+        id: 'voice_assessment',
+        category: 'Interactive',
+        label: 'Voice assessment',
+        summary: 'Pronunciation / recitation vs a reference.',
+        configurationMd: `### settings
+- \`referenceText\`: text to recite
+- \`minScore\`: minimum score (0–100%, default 70)`,
+    },
+    {
+        id: 'evaluation',
+        category: 'Interactive',
+        label: 'Evaluation / grading',
+        summary: 'Structured grading rubric.',
+        configurationMd: `### data.scoring
+\`maxPoints\`, \`passingScore\`, \`scoringMethod\`, \`rubric\` (criteria, levels, points).
+
+### settings
+Extra fields in \`EvaluationBlockEditor\` (scales, competencies).`,
+    },
+    {
+        id: 'poll',
+        category: 'Interactive',
+        label: 'Poll',
+        summary: 'Ungraded vote or opinion.',
+        configurationMd: `### settings
+- \`pollQuestion\`: question
+- \`pollOptions\`: multiline text, **one option per line**
+- \`showLiveResults\`: live results`,
+    },
+    {
+        id: 'dys_reader',
+        category: 'Accessibility',
+        label: 'DYS reader',
+        summary: 'Text with reading aids (syllables, TTS).',
+        configurationMd: `### settings
+- \`dysText\`: HTML shown
+- \`ttsEnabled\`: auto audio playback`,
+    },
+    {
+        id: 'dys_reading_practice',
+        category: 'Accessibility',
+        label: 'DYS reading practice',
+        summary: 'Guided reading exercise.',
+        configurationMd: `### settings
+Same as dys_reader: \`dysText\`, \`ttsEnabled\`.`,
+    },
+    {
+        id: 'dys_image_zones',
+        category: 'Accessibility',
+        label: 'DYS image zones',
+        summary: 'Clickable zones on an image for reading support.',
+        configurationMd: `### settings
+Zone definitions (coordinates, labels, audio) per DYS UI; often JSON in \`settings\`.`,
+    },
+    {
+        id: 'dys_clock',
+        category: 'Accessibility',
+        label: 'DYS teaching clock',
+        summary: 'Adapted time representation.',
+        configurationMd: `### settings
+Display format, speed, visual aids (see DYS editor).`,
+    },
+    {
+        id: 'glossary',
+        category: 'Accessibility',
+        label: 'Glossary',
+        summary: 'Terms and definitions in the path.',
+        configurationMd: `### settings.termsJson
+JSON string: array \`{ term, definition, quiz?: boolean }\`.`,
+    },
+    {
+        id: 'html',
+        category: 'Enterprise',
+        label: 'Embedded HTML / JS',
+        summary: 'Controlled HTML or script snippet.',
+        configurationMd: `### settings.htmlCode
+HTML (and possibly inline JS per security policy). Use with care (XSS).`,
+    },
+    {
+        id: 'certification',
+        category: 'Enterprise',
+        label: 'Certification (document)',
+        summary: 'Generate a certificate from a Word template.',
+        configurationMd: `### settings
+- \`templateUrl\`: URL of the .docx template
+- \`variablesJson\`: JSON mapping placeholders → learner fields (\`"{{NAME}}": "learner.lastName"\`, etc.)`,
+    },
+    {
+        id: 'signature',
+        category: 'Enterprise',
+        label: 'Signature',
+        summary: 'Handwritten or electronic signature.',
+        configurationMd: `### settings
+Signature canvas config, legal wording, consent text — per block editor.`,
+    },
+    {
+        id: 'facial_recognition',
+        category: 'Enterprise',
+        label: 'Facial recognition',
+        summary: 'Face-based identity check.',
+        configurationMd: `### settings
+Confidence threshold, GDPR consent, error messages — per implementation and AWS Rekognition on the backend.`,
+    },
+];
+const byId = new Map(EDUFLOW_BLOCK_DOCS.map((e) => [e.id, e]));
+export function renderEduflowBlockMarkdown(typeId) {
+    const e = byId.get(typeId);
+    if (!e) {
+        return `# Unknown block (\`${typeId}\`)\n\nNo dedicated sheet. See \`lyrra_eduflow_blocks_index\` and \`BlockType\` in the frontend.\n\n${EDUFLOW_BLOCK_COMMON}`;
+    }
+    return `# ${e.label} — type \`${e.id}\`
+
+**Category:** ${e.category}
+
+${e.configurationMd}
+
+---
+
+${EDUFLOW_BLOCK_COMMON}`;
+}
+export function eduflowBlockToolName(typeId) {
+    return `lyrra_eduflow_block_${typeId.replace(/[^a-zA-Z0-9_]/g, '_')}`;
+}

package/dist/http-incoming-auth.js

@@ -0,0 +1,48 @@
+function single(h) {
+    if (h === undefined)
+        return undefined;
+    return Array.isArray(h) ? h[0] : h;
+}
+const HOP_BY_HOP = new Set([
+    'connection',
+    'keep-alive',
+    'proxy-authenticate',
+    'proxy-authorization',
+    'te',
+    'trailers',
+    'transfer-encoding',
+    'upgrade',
+    'host',
+    'content-length',
+]);
+/**
+ * En-têtes d’auth reçus sur le MCP HTTP à réutiliser vers l’API Lyrra.
+ * n8n « Header Auth » envoie en général X-Lyrra-Api-Key (ou Authorization).
+ */
+export function pickIncomingAuthHeaders(headers) {
+    const out = {};
+    const auth = single(headers['authorization']);
+    if (auth)
+        out.Authorization = auth;
+    const lyrra = single(headers['x-lyrra-api-key']);
+    if (lyrra)
+        out['X-Lyrra-Api-Key'] = lyrra;
+    const xak = single(headers['x-api-key']);
+    if (xak)
+        out['X-Api-Key'] = xak;
+    const extra = process.env.LYRRA_MCP_EXTRA_INBOUND_HEADERS?.split(',') ?? [];
+    for (const raw of extra) {
+        const display = raw.trim();
+        if (!display)
+            continue;
+        const lower = display.toLowerCase();
+        if (HOP_BY_HOP.has(lower))
+            continue;
+        const val = single(headers[lower]);
+        if (val)
+            out[display] = val;
+    }
+    if (Object.keys(out).length === 0)
+        return null;
+    return out;
+}

package/dist/http-main.js

@@ -0,0 +1,104 @@
+#!/usr/bin/env node
+/**
+ * MCP Streamable HTTP — pour n8n / clients qui attendent une URL https://…/mcp
+ * (Header Auth : X-Lyrra-Api-Key ou Authorization, aligné tableau de bord institution).
+ */
+import express from 'express';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { createLyrraMcpServer } from './lyrra-mcp-core.js';
+import { runWithInboundAuthHeaders, requestOrigin } from './auth-session.js';
+import { pickIncomingAuthHeaders } from './http-incoming-auth.js';
+const PORT = parseInt(process.env.LYRRA_MCP_HTTP_PORT ?? '3457', 10);
+let mcpSingleton = null;
+async function getMcp() {
+    mcpSingleton ??= createLyrraMcpServer().then((r) => r.mcp);
+    return mcpSingleton;
+}
+/** Sérialise les requêtes MCP : un seul transport à la fois sur l’instance McpServer. */
+let mutexChain = Promise.resolve();
+function enqueueMcp(fn) {
+    const next = mutexChain.then(() => fn());
+    mutexChain = next.then(() => undefined, () => undefined);
+    return next;
+}
+async function validateAuth(headers) {
+    const origin = requestOrigin();
+    const url = `${origin}/api/auth/me`;
+    const r = await fetch(url, {
+        headers: { Accept: 'application/json', ...headers },
+    });
+    return r.ok;
+}
+const app = express();
+app.disable('x-powered-by');
+app.use('/mcp', express.json({ limit: '50mb' }));
+app.all('/mcp', async (req, res) => {
+    const auth = pickIncomingAuthHeaders(req.headers);
+    if (!auth) {
+        res.status(401).json({
+            success: false,
+            error: 'Missing auth: use n8n Header Auth with X-Lyrra-Api-Key (institution key) or Authorization Bearer.',
+        });
+        return;
+    }
+    const skipValidate = process.env.LYRRA_MCP_SKIP_AUTH_VALIDATE === '1';
+    if (!skipValidate) {
+        const ok = await validateAuth(auth);
+        if (!ok) {
+            res.status(401).json({
+                success: false,
+                error: 'Invalid Lyrra credentials (GET /api/auth/me failed). Check your Header Auth value.',
+            });
+            return;
+        }
+    }
+    try {
+        await runWithInboundAuthHeaders(auth, async () => enqueueMcp(async () => {
+            const mcp = await getMcp();
+            const transport = new StreamableHTTPServerTransport({
+                sessionIdGenerator: undefined,
+            });
+            await mcp.connect(transport);
+            try {
+                await transport.handleRequest(req, res, req.body);
+            }
+            finally {
+                try {
+                    await transport.close();
+                }
+                catch {
+                    /* ignore */
+                }
+                try {
+                    await mcp.close();
+                }
+                catch {
+                    /* ignore */
+                }
+            }
+        }));
+    }
+    catch (e) {
+        process.stderr.write(`[lyrra-mcp-http] ${e instanceof Error ? e.stack ?? e.message : e}\n`);
+        if (!res.headersSent) {
+            res.status(500).json({
+                jsonrpc: '2.0',
+                error: { code: -32603, message: 'Internal server error' },
+                id: null,
+            });
+        }
+    }
+});
+app.get('/health', (_req, res) => {
+    res.status(200).type('text/plain').send('ok');
+});
+async function main() {
+    await getMcp();
+    app.listen(PORT, '0.0.0.0', () => {
+        process.stderr.write(`[lyrra-mcp-http] listening 0.0.0.0:${PORT}  path /mcp  health /health\n`);
+    });
+}
+main().catch((e) => {
+    process.stderr.write(`[lyrra-mcp-http] Fatal: ${e instanceof Error ? e.stack ?? e.message : e}\n`);
+    process.exit(1);
+});

package/dist/index.js

@@ -1,21 +1,25 @@
 #!/usr/bin/env node
+/**
+ * Lyrra Studio MCP stdio server.
+ * Run: `npm run build && npm start` in apps/mcp-server (or `npm run dev`).
+ * HTTP (n8n URL) : `npm run start:http` → voir http-main.ts
+ */
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { config } from './config.js';
-import { createMcpServer } from './server-factory.js';
-// --- Start server (stdio mode) ---
+import { getLyrraRequestAuthHeaders } from './auth-session.js';
+import { createLyrraMcpServer } from './lyrra-mcp-core.js';
 async function main() {
-    if (!config.clientSecret) {
-        console.error('⚠️  LYRRA_CLIENT_SECRET non défini. Définissez la variable d\'environnement LYRRA_CLIENT_SECRET.');
+    const { mcp } = await createLyrraMcpServer();
+    try {
+        await getLyrraRequestAuthHeaders();
+        process.stderr.write('[lyrra-mcp] API credentials OK.\n');
     }
-    else {
-        console.error('✅ LYRRA Studio MCP connecté (authentification par API Key).');
+    catch (e) {
+        process.stderr.write(`[lyrra-mcp] Auth warning: ${e instanceof Error ? e.message : e}\n`);
     }
-    const server = createMcpServer();
     const transport = new StdioServerTransport();
-    await server.connect(transport);
+    await mcp.connect(transport);
 }
-main().catch((error) => {
-    console.error('Erreur fatale:', error);
+main().catch((e) => {
+    process.stderr.write(`[lyrra-mcp] Fatal: ${e instanceof Error ? e.stack ?? e.message : e}\n`);
     process.exit(1);
 });
-//# sourceMappingURL=index.js.map