@nextblock-cms/cortex 0.14.5 → 0.14.6

package/lib/ai-global-agent-tools.d.ts

@@ -3646,7 +3646,7 @@ export declare function createCortexGlobalAgentTools(context?: ToolExecutionCont
             description: string;
             primaryKey: readonly string[];
             readOnly: boolean;
-            table: "site_settings" | "languages" | "pages" | "posts" | "products" | "profiles" | "coupons" | "orders" | "freemius_plans" | "media" | "navigation_items" | "product_variants" | "product_attributes" | "shipping_zones" | "product_attribute_terms" | "blocks" | "cortex_ai_db_mutation_audit" | "coupon_freemius_mappings" | "coupon_products" | "coupon_redemptions" | "currencies" | "freemius_pricing" | "inventory_items" | "logos" | "order_items" | "package_activations" | "page_revisions" | "post_revisions" | "product_media" | "shipping_zone_locations" | "shipping_zone_methods" | "tax_rates" | "translations" | "user_addresses" | "variant_attribute_mapping" | "product_revisions";
+            table: "site_settings" | "languages" | "pages" | "posts" | "products" | "profiles" | "coupons" | "orders" | "freemius_plans" | "media" | "navigation_items" | "product_variants" | "product_attributes" | "shipping_zones" | "product_attribute_terms" | "blocks" | "cortex_ai_db_mutation_audit" | "coupon_freemius_mappings" | "coupon_products" | "coupon_redemptions" | "currencies" | "freemius_pricing" | "inventory_items" | "logos" | "order_items" | "package_activations" | "page_revisions" | "post_revisions" | "product_media" | "product_revisions" | "shipping_zone_locations" | "shipping_zone_methods" | "tax_rates" | "translations" | "user_addresses" | "variant_attribute_mapping";
         }[];
     }>;
     execute_database_action_plan: import('ai').Tool<{
@@ -3710,7 +3710,7 @@ export declare function createCortexGlobalAgentTools(context?: ToolExecutionCont
         sampleTargetIds: string[];
         success: boolean;
         summary: string;
-        table: "site_settings" | "languages" | "pages" | "posts" | "products" | "profiles" | "coupons" | "orders" | "freemius_plans" | "media" | "navigation_items" | "product_variants" | "product_attributes" | "shipping_zones" | "product_attribute_terms" | "blocks" | "cortex_ai_db_mutation_audit" | "coupon_freemius_mappings" | "coupon_products" | "coupon_redemptions" | "currencies" | "freemius_pricing" | "inventory_items" | "logos" | "order_items" | "package_activations" | "page_revisions" | "post_revisions" | "product_media" | "shipping_zone_locations" | "shipping_zone_methods" | "tax_rates" | "translations" | "user_addresses" | "variant_attribute_mapping" | "product_revisions";
+        table: "site_settings" | "languages" | "pages" | "posts" | "products" | "profiles" | "coupons" | "orders" | "freemius_plans" | "media" | "navigation_items" | "product_variants" | "product_attributes" | "shipping_zones" | "product_attribute_terms" | "blocks" | "cortex_ai_db_mutation_audit" | "coupon_freemius_mappings" | "coupon_products" | "coupon_redemptions" | "currencies" | "freemius_pricing" | "inventory_items" | "logos" | "order_items" | "package_activations" | "page_revisions" | "post_revisions" | "product_media" | "product_revisions" | "shipping_zone_locations" | "shipping_zone_methods" | "tax_rates" | "translations" | "user_addresses" | "variant_attribute_mapping";
         auditError?: string | undefined;
         affectedCount: number;
         auditLogged: boolean;
@@ -3719,7 +3719,7 @@ export declare function createCortexGlobalAgentTools(context?: ToolExecutionCont
         mutationExecuted: boolean;
         operation: "delete" | "update" | "insert" | "upsert";
         success: boolean;
-        table: "site_settings" | "languages" | "pages" | "posts" | "products" | "profiles" | "coupons" | "orders" | "freemius_plans" | "media" | "navigation_items" | "product_variants" | "product_attributes" | "shipping_zones" | "product_attribute_terms" | "blocks" | "cortex_ai_db_mutation_audit" | "coupon_freemius_mappings" | "coupon_products" | "coupon_redemptions" | "currencies" | "freemius_pricing" | "inventory_items" | "logos" | "order_items" | "package_activations" | "page_revisions" | "post_revisions" | "product_media" | "shipping_zone_locations" | "shipping_zone_methods" | "tax_rates" | "translations" | "user_addresses" | "variant_attribute_mapping" | "product_revisions";
+        table: "site_settings" | "languages" | "pages" | "posts" | "products" | "profiles" | "coupons" | "orders" | "freemius_plans" | "media" | "navigation_items" | "product_variants" | "product_attributes" | "shipping_zones" | "product_attribute_terms" | "blocks" | "cortex_ai_db_mutation_audit" | "coupon_freemius_mappings" | "coupon_products" | "coupon_redemptions" | "currencies" | "freemius_pricing" | "inventory_items" | "logos" | "order_items" | "package_activations" | "page_revisions" | "post_revisions" | "product_media" | "product_revisions" | "shipping_zone_locations" | "shipping_zone_methods" | "tax_rates" | "translations" | "user_addresses" | "variant_attribute_mapping";
         auditError?: string | undefined;
         auditLogged: boolean;
     }>;
@@ -3743,7 +3743,7 @@ export declare function createCortexGlobalAgentTools(context?: ToolExecutionCont
         offset: number;
         rows: unknown[];
         success: boolean;
-        table: "site_settings" | "languages" | "pages" | "posts" | "products" | "profiles" | "coupons" | "orders" | "freemius_plans" | "media" | "navigation_items" | "product_variants" | "product_attributes" | "shipping_zones" | "product_attribute_terms" | "blocks" | "cortex_ai_db_mutation_audit" | "coupon_freemius_mappings" | "coupon_products" | "coupon_redemptions" | "currencies" | "freemius_pricing" | "inventory_items" | "logos" | "order_items" | "package_activations" | "page_revisions" | "post_revisions" | "product_media" | "shipping_zone_locations" | "shipping_zone_methods" | "tax_rates" | "translations" | "user_addresses" | "variant_attribute_mapping" | "product_revisions";
+        table: "site_settings" | "languages" | "pages" | "posts" | "products" | "profiles" | "coupons" | "orders" | "freemius_plans" | "media" | "navigation_items" | "product_variants" | "product_attributes" | "shipping_zones" | "product_attribute_terms" | "blocks" | "cortex_ai_db_mutation_audit" | "coupon_freemius_mappings" | "coupon_products" | "coupon_redemptions" | "currencies" | "freemius_pricing" | "inventory_items" | "logos" | "order_items" | "package_activations" | "page_revisions" | "post_revisions" | "product_media" | "product_revisions" | "shipping_zone_locations" | "shipping_zone_methods" | "tax_rates" | "translations" | "user_addresses" | "variant_attribute_mapping";
     }>;
 };
 export {};

package/lib/mcp-server.cjs.js

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const _=require("./mcp-tool-registry.cjs.js"),P="nextblock-cortex-ai",M="NextBlock Cortex AI",N="2025-06-18",C="2025-11-25",l="2026-07-28",S=[l,C,"2025-06-18","2025-03-26","2024-11-05"],y=-32700,O=-32600,d=-32601,R=-32602,E=-32603;function u(t,e){return{body:{id:t,jsonrpc:"2.0",result:e},status:200}}function a(t,e,i,r=200,c){return{body:{error:{code:e,message:i},id:t,jsonrpc:"2.0"},status:r}}const s={body:null,status:202};function h(t){return typeof t.method=="string"&&t.id===void 0}function A(t,e){const i=t.params?._meta;if(i&&typeof i=="object"){const r=i["io.modelcontextprotocol/protocolVersion"];if(typeof r=="string"&&r>=l)return!0}return!!(e&&e>=l)}function x(t){return typeof t!="string"||!t?N:S.includes(t)?t:C}function g(t,e){const i=t.scopes.includes("write");return{capabilities:{prompts:{},resources:{},tools:{}},instructions:t.instructions??["NextBlock Cortex AI exposes this CMS through typed tools.","Call get_database_schema first when you are unsure what exists.",i?"Page builds should go through generate_jsonb_layout, which stages a reviewable Live Draft rather than publishing directly.":"This connection is READ-ONLY. Mutating tools are not available on this token."].join(" "),protocolVersion:x(e),serverInfo:{name:P,title:M,version:t.serverVersion,websiteUrl:"https://nextblock.dev"}}}async function I(t,e){if(t===null||typeof t!="object"||Array.isArray(t))return a(null,O,"Expected a single JSON-RPC message.",400);if(typeof t.method!="string")return"result"in t||"error"in t?s:a(t.id??null,O,'Missing "method".',400);const{method:i}=t,r=t.id??null,c=h(t);if(i.startsWith("notifications/"))return s;switch(i){case"initialize":return c?s:u(r,g(e,t.params?.protocolVersion));case"ping":return c?s:u(r,{});case"tools/list":return c?s:u(r,{tools:_.buildCortexMcpToolDefinitions({context:e.context,scopes:e.scopes})});case"tools/call":{if(c)return s;const n=t.params?.name;if(typeof n!="string"||!n)return a(r,R,"tools/call requires params.name.");try{const o=await _.callCortexMcpTool({args:t.params?.arguments,context:e.context,name:n,scopes:e.scopes});return u(r,o)}catch(o){return o instanceof _.CortexMcpUnknownToolError||o instanceof _.CortexMcpForbiddenToolError?a(r,R,o.message):a(r,E,o instanceof Error?o.message:"Tool execution failed.")}}case"resources/list":return c?s:u(r,{resources:_.CORTEX_MCP_RESOURCES});case"resources/templates/list":return c?s:u(r,{resourceTemplates:[]});case"resources/read":{if(c)return s;const n=t.params?.uri;if(typeof n!="string"||!n)return a(r,R,"resources/read requires params.uri.");try{const o=await _.readCortexMcpResource({context:e.context,uri:n});return o?u(r,{contents:[o]}):a(r,R,`Unknown resource: ${n}`)}catch(o){return a(r,E,o instanceof Error?o.message:"Resource read failed.")}}case"prompts/list":return c?s:u(r,{prompts:_.CORTEX_MCP_PROMPTS});case"prompts/get":{if(c)return s;const n=t.params?.name;if(typeof n!="string"||!n)return a(r,R,"prompts/get requires params.name.");const o=t.params?.arguments,p={};if(o&&typeof o=="object")for(const[m,T]of Object.entries(o))typeof T=="string"&&(p[m]=T);const f=_.getCortexMcpPrompt({args:p,name:n});return f?u(r,f):a(r,R,`Unknown prompt: ${n}`)}default:return c?s:a(r,d,`Method not found: ${i}`)}}exports.CORTEX_MCP_DEFAULT_PROTOCOL_VERSION=N;exports.CORTEX_MCP_LATEST_LEGACY_PROTOCOL_VERSION=C;exports.CORTEX_MCP_MODERN_PROTOCOL_VERSION=l;exports.CORTEX_MCP_SERVER_NAME=P;exports.CORTEX_MCP_SERVER_TITLE=M;exports.CORTEX_MCP_SUPPORTED_PROTOCOL_VERSIONS=S;exports.JSON_RPC_INTERNAL_ERROR=E;exports.JSON_RPC_INVALID_PARAMS=R;exports.JSON_RPC_INVALID_REQUEST=O;exports.JSON_RPC_METHOD_NOT_FOUND=d;exports.JSON_RPC_PARSE_ERROR=y;exports.handleCortexMcpMessage=I;exports.isJsonRpcNotification=h;exports.isModernEraMessage=A;

package/lib/mcp-server.d.ts

@@ -0,0 +1,76 @@
+import { CortexMcpToolContext } from './mcp-tool-registry';
+import { CortexAiMcpScope } from './mcp-tokens';
+/**
+ * JSON-RPC 2.0 engine for the Cortex AI MCP server.
+ *
+ * Transport-agnostic on purpose: it takes a parsed message and returns a status +
+ * body, so the Next.js route handler stays a thin HTTP shim and this file is testable
+ * without a server. It imports nothing from `next`.
+ *
+ * ## Why hand-rolled rather than @modelcontextprotocol/sdk
+ *
+ * The protocol surface a CMS tool server needs — initialize, tools/list, tools/call,
+ * resources, prompts, ping — is small and entirely declarative. The v1 SDK pulls in
+ * express, cors, hono and @hono/node-server, which is a lot of transitive weight for
+ * a publishable premium lib that carries only a `next` peer dependency, and its
+ * default transport class is built on Node's IncomingMessage/ServerResponse rather
+ * than the Web Request/Response the App Router hands you.
+ *
+ * ## Dual-era
+ *
+ * The spec forked. `2026-07-28` is stateless: no `initialize` handshake, no session
+ * id, protocol metadata rides in a `_meta` envelope on every request. Everything up
+ * to `2025-11-25` is handshake-based. As of this writing every shipping client
+ * (Claude Code, Claude Desktop, Cursor, VS Code) speaks the legacy era, so that path
+ * has to work; the modern path is handled too so an upgraded client keeps working.
+ * A dual-era server picks its behaviour from how the client opens — an `initialize`
+ * request selects legacy, per-request `_meta` selects modern — which costs us
+ * nothing here because the server is stateless either way.
+ */
+export declare const CORTEX_MCP_SERVER_NAME = "nextblock-cortex-ai";
+export declare const CORTEX_MCP_SERVER_TITLE = "NextBlock Cortex AI";
+/** What we answer an `initialize` with when the client asks for something we don't know. */
+export declare const CORTEX_MCP_DEFAULT_PROTOCOL_VERSION = "2025-06-18";
+export declare const CORTEX_MCP_LATEST_LEGACY_PROTOCOL_VERSION = "2025-11-25";
+export declare const CORTEX_MCP_MODERN_PROTOCOL_VERSION = "2026-07-28";
+export declare const CORTEX_MCP_SUPPORTED_PROTOCOL_VERSIONS: readonly ["2026-07-28", "2025-11-25", "2025-06-18", "2025-03-26", "2024-11-05"];
+export declare const JSON_RPC_PARSE_ERROR = -32700;
+export declare const JSON_RPC_INVALID_REQUEST = -32600;
+export declare const JSON_RPC_METHOD_NOT_FOUND = -32601;
+export declare const JSON_RPC_INVALID_PARAMS = -32602;
+export declare const JSON_RPC_INTERNAL_ERROR = -32603;
+export type JsonRpcId = number | string | null;
+export type JsonRpcMessage = {
+    id?: JsonRpcId;
+    jsonrpc?: string;
+    method?: string;
+    params?: Record<string, unknown>;
+};
+export type CortexMcpResponse = {
+    /** HTTP status the transport should use. */
+    status: number;
+    /** `null` means "no body" — a 202 for a notification. */
+    body: Record<string, unknown> | null;
+};
+export type CortexMcpHandlerDeps = {
+    context?: CortexMcpToolContext;
+    /** Instructions surfaced to the client at initialize time. */
+    instructions?: string;
+    scopes: readonly CortexAiMcpScope[];
+    serverVersion: string;
+};
+export declare function isJsonRpcNotification(message: JsonRpcMessage): boolean;
+/**
+ * True when the client is speaking the stateless 2026-07-28 era.
+ *
+ * Detected from the per-request `_meta` envelope the modern spec requires, with the
+ * transport-supplied `MCP-Protocol-Version` header as a secondary signal.
+ */
+export declare function isModernEraMessage(message: JsonRpcMessage, protocolVersionHeader?: string | null): boolean;
+/**
+ * Handle one JSON-RPC message.
+ *
+ * Returns 202/no-body for notifications and responses (which a server receives but
+ * never answers), and a JSON-RPC envelope for requests.
+ */
+export declare function handleCortexMcpMessage(message: JsonRpcMessage, deps: CortexMcpHandlerDeps): Promise<CortexMcpResponse>;

package/lib/mcp-server.es.js

@@ -0,0 +1,157 @@
+import { getCortexMcpPrompt as P, readCortexMcpResource as d, callCortexMcpTool as h, CortexMcpUnknownToolError as m, CortexMcpForbiddenToolError as M, buildCortexMcpToolDefinitions as x, CORTEX_MCP_PROMPTS as y, CORTEX_MCP_RESOURCES as N } from "./mcp-tool-registry.es.js";
+const S = "nextblock-cortex-ai", b = "NextBlock Cortex AI", g = "2025-06-18", O = "2025-11-25", p = "2026-07-28", A = [
+  p,
+  O,
+  "2025-06-18",
+  "2025-03-26",
+  "2024-11-05"
+], j = -32700, E = -32600, I = -32601, l = -32602, C = -32603;
+function u(t, n) {
+  return { body: { id: t, jsonrpc: "2.0", result: n }, status: 200 };
+}
+function a(t, n, i, r = 200, c) {
+  return {
+    body: {
+      error: { code: n, message: i },
+      id: t,
+      jsonrpc: "2.0"
+    },
+    status: r
+  };
+}
+const s = { body: null, status: 202 };
+function w(t) {
+  return typeof t.method == "string" && t.id === void 0;
+}
+function v(t, n) {
+  const i = t.params?._meta;
+  if (i && typeof i == "object") {
+    const r = i["io.modelcontextprotocol/protocolVersion"];
+    if (typeof r == "string" && r >= p)
+      return !0;
+  }
+  return !!(n && n >= p);
+}
+function L(t) {
+  return typeof t != "string" || !t ? g : A.includes(t) ? t : O;
+}
+function V(t, n) {
+  const i = t.scopes.includes("write");
+  return {
+    capabilities: {
+      // listChanged is deliberately absent: the tool set is static per token, so
+      // advertising change notifications we never send would be a lie a client
+      // could wait on.
+      prompts: {},
+      resources: {},
+      tools: {}
+    },
+    instructions: t.instructions ?? [
+      "NextBlock Cortex AI exposes this CMS through typed tools.",
+      "Call get_database_schema first when you are unsure what exists.",
+      i ? "Page builds should go through generate_jsonb_layout, which stages a reviewable Live Draft rather than publishing directly." : "This connection is READ-ONLY. Mutating tools are not available on this token."
+    ].join(" "),
+    protocolVersion: L(n),
+    serverInfo: {
+      name: S,
+      title: b,
+      version: t.serverVersion,
+      websiteUrl: "https://nextblock.dev"
+    }
+  };
+}
+async function k(t, n) {
+  if (t === null || typeof t != "object" || Array.isArray(t))
+    return a(null, E, "Expected a single JSON-RPC message.", 400);
+  if (typeof t.method != "string")
+    return "result" in t || "error" in t ? s : a(t.id ?? null, E, 'Missing "method".', 400);
+  const { method: i } = t, r = t.id ?? null, c = w(t);
+  if (i.startsWith("notifications/"))
+    return s;
+  switch (i) {
+    case "initialize":
+      return c ? s : u(r, V(n, t.params?.protocolVersion));
+    case "ping":
+      return c ? s : u(r, {});
+    case "tools/list":
+      return c ? s : u(r, {
+        tools: x({ context: n.context, scopes: n.scopes })
+      });
+    case "tools/call": {
+      if (c)
+        return s;
+      const e = t.params?.name;
+      if (typeof e != "string" || !e)
+        return a(r, l, "tools/call requires params.name.");
+      try {
+        const o = await h({
+          args: t.params?.arguments,
+          context: n.context,
+          name: e,
+          scopes: n.scopes
+        });
+        return u(r, o);
+      } catch (o) {
+        return o instanceof m || o instanceof M ? a(r, l, o.message) : a(
+          r,
+          C,
+          o instanceof Error ? o.message : "Tool execution failed."
+        );
+      }
+    }
+    case "resources/list":
+      return c ? s : u(r, { resources: N });
+    case "resources/templates/list":
+      return c ? s : u(r, { resourceTemplates: [] });
+    case "resources/read": {
+      if (c)
+        return s;
+      const e = t.params?.uri;
+      if (typeof e != "string" || !e)
+        return a(r, l, "resources/read requires params.uri.");
+      try {
+        const o = await d({ context: n.context, uri: e });
+        return o ? u(r, { contents: [o] }) : a(r, l, `Unknown resource: ${e}`);
+      } catch (o) {
+        return a(
+          r,
+          C,
+          o instanceof Error ? o.message : "Resource read failed."
+        );
+      }
+    }
+    case "prompts/list":
+      return c ? s : u(r, { prompts: y });
+    case "prompts/get": {
+      if (c)
+        return s;
+      const e = t.params?.name;
+      if (typeof e != "string" || !e)
+        return a(r, l, "prompts/get requires params.name.");
+      const o = t.params?.arguments, f = {};
+      if (o && typeof o == "object")
+        for (const [T, _] of Object.entries(o))
+          typeof _ == "string" && (f[T] = _);
+      const R = P({ args: f, name: e });
+      return R ? u(r, R) : a(r, l, `Unknown prompt: ${e}`);
+    }
+    default:
+      return c ? s : a(r, I, `Method not found: ${i}`);
+  }
+}
+export {
+  g as CORTEX_MCP_DEFAULT_PROTOCOL_VERSION,
+  O as CORTEX_MCP_LATEST_LEGACY_PROTOCOL_VERSION,
+  p as CORTEX_MCP_MODERN_PROTOCOL_VERSION,
+  S as CORTEX_MCP_SERVER_NAME,
+  b as CORTEX_MCP_SERVER_TITLE,
+  A as CORTEX_MCP_SUPPORTED_PROTOCOL_VERSIONS,
+  C as JSON_RPC_INTERNAL_ERROR,
+  l as JSON_RPC_INVALID_PARAMS,
+  E as JSON_RPC_INVALID_REQUEST,
+  I as JSON_RPC_METHOD_NOT_FOUND,
+  j as JSON_RPC_PARSE_ERROR,
+  k as handleCortexMcpMessage,
+  w as isJsonRpcNotification,
+  v as isModernEraMessage
+};

package/lib/mcp-tokens.cjs.js

@@ -0,0 +1 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const c=require("node:crypto"),p="Cortex AI MCP token utilities can only be imported from server-side code.";function l(){if(!(typeof window>"u"))throw new Error(p)}const T="cortex_ai_mcp_settings",u="mcp_access_tokens",i="nbmcp_",A=32,k=8,d=["read","write"],s={allowLocalhostWithoutToken:!0,enabled:!1};function h(e){const t=e&&typeof e=="object"&&!Array.isArray(e)?e:{};return{allowLocalhostWithoutToken:typeof t.allowLocalhostWithoutToken=="boolean"?t.allowLocalhostWithoutToken:s.allowLocalhostWithoutToken,enabled:typeof t.enabled=="boolean"?t.enabled:s.enabled}}async function m(e){if(e)try{const{data:t}=await e.from("site_settings").select("value").eq("key",T).maybeSingle();if(t?.value)return h(t.value)}catch{}return{...s}}function a(e){return l(),c.createHash("sha256").update(e.trim(),"utf8").digest("hex")}function M(){l();const e=`${i}${c.randomBytes(A).toString("base64url")}`;return{token:e,tokenHash:a(e),tokenPrefix:e.slice(0,i.length+k)}}function O(e){const t=e?.trim();if(!t)return null;const o=/^Bearer\s+(.+)$/i.exec(t);return(o?o[1]:t).trim()||null}function y(e){const o=(Array.isArray(e)?e:[]).filter(n=>d.includes(n));return o.length>0?Array.from(new Set(o)):["read"]}async function x(e,t,o=new Date){l();const n=t?.trim();if(!n||n.length<16)return{reason:"malformed",valid:!1};const _=a(n),{data:f,error:E}=await e.from(u).select("id, name, scopes, token_prefix, created_at, created_by, expires_at, last_used_at, revoked_at").eq("token_hash",_).maybeSingle();if(E||!f)return{reason:"unknown",valid:!1};const S=Buffer.from(_,"utf8");if(!c.timingSafeEqual(S,Buffer.from(a(n),"utf8")))return{reason:"unknown",valid:!1};const r=f;return r.revoked_at?{reason:"revoked",valid:!1}:r.expires_at&&new Date(r.expires_at).getTime()<=o.getTime()?{reason:"expired",valid:!1}:{scopes:y(r.scopes),token:r,valid:!0}}async function R(e,t,o=new Date){try{await e.from(u).update({last_used_at:o.toISOString()}).eq("id",t)}catch{}}const v=new Set(["localhost","127.0.0.1","[::1]","::1","0.0.0.0"]);function C(e){const t=e?.trim().toLowerCase();if(!t)return!1;const o=t.startsWith("[")?t.replace(/\]:\d+$/,"]"):t.replace(/:\d+$/,"");return v.has(o)||o.endsWith(".localhost")}function I(e){return!e.settings.allowLocalhostWithoutToken||process.env.NODE_ENV==="production"?!1:C(e.hostHeader)}exports.CORTEX_AI_MCP_SCOPES=d;exports.CORTEX_AI_MCP_SETTINGS_DEFAULTS=s;exports.CORTEX_AI_MCP_SETTINGS_KEY=T;exports.CORTEX_AI_MCP_TOKENS_TABLE=u;exports.CORTEX_AI_MCP_TOKEN_PREFIX=i;exports.hashCortexAiMcpToken=a;exports.isLocalhostHost=C;exports.mintCortexAiMcpToken=M;exports.normalizeCortexAiMcpSettings=h;exports.parseBearerToken=O;exports.resolveCortexAiMcpSettings=m;exports.shouldTrustLocalMcpRequest=I;exports.touchCortexAiMcpToken=R;exports.verifyCortexAiMcpToken=x;

package/lib/mcp-tokens.d.ts

@@ -0,0 +1,95 @@
+export declare const CORTEX_AI_MCP_SETTINGS_KEY = "cortex_ai_mcp_settings";
+export declare const CORTEX_AI_MCP_TOKENS_TABLE = "mcp_access_tokens";
+/** Human-recognisable prefix so a leaked string is greppable and self-identifying. */
+export declare const CORTEX_AI_MCP_TOKEN_PREFIX = "nbmcp_";
+export type CortexAiMcpScope = 'read' | 'write';
+export declare const CORTEX_AI_MCP_SCOPES: readonly CortexAiMcpScope[];
+export type CortexAiMcpSettings = {
+    /**
+     * When false the endpoint answers 404 for everything. Off by default: an MCP server
+     * is a remote write surface onto the CMS, so it must be an explicit opt-in rather
+     * than something a fresh install exposes silently.
+     */
+    enabled: boolean;
+    /**
+     * Trust loopback callers without a token. Convenient for `npx nx serve nextblock`
+     * plus a local Claude Code, and safe because the request must already originate on
+     * the machine running the CMS. Ignored entirely in production (see
+     * `shouldTrustLocalMcpRequest`).
+     */
+    allowLocalhostWithoutToken: boolean;
+};
+export declare const CORTEX_AI_MCP_SETTINGS_DEFAULTS: CortexAiMcpSettings;
+export declare function normalizeCortexAiMcpSettings(raw: unknown): CortexAiMcpSettings;
+type SupabaseLike = {
+    from: (table: string) => any;
+};
+/** Read the MCP server settings row, falling back to defaults on any failure. */
+export declare function resolveCortexAiMcpSettings(supabase?: SupabaseLike | null): Promise<CortexAiMcpSettings>;
+export declare function hashCortexAiMcpToken(token: string): string;
+export type MintedCortexAiMcpToken = {
+    /** Plaintext. Shown to the admin once, never persisted. */
+    token: string;
+    tokenHash: string;
+    tokenPrefix: string;
+};
+export declare function mintCortexAiMcpToken(): MintedCortexAiMcpToken;
+/**
+ * Pull the bearer credential out of an Authorization header.
+ *
+ * Accepts `Bearer <token>` (case-insensitive scheme, per RFC 7235) and also a bare
+ * token, because Claude Desktop's connector UI asks the user to type the scheme by
+ * hand and people routinely paste the token alone.
+ */
+export declare function parseBearerToken(headerValue: string | null | undefined): string | null;
+export type CortexAiMcpTokenRow = {
+    created_at: string;
+    created_by: string | null;
+    expires_at: string | null;
+    id: string;
+    last_used_at: string | null;
+    name: string;
+    revoked_at: string | null;
+    scopes: string[];
+    token_prefix: string;
+};
+export type CortexAiMcpTokenVerification = {
+    reason: 'expired' | 'malformed' | 'revoked' | 'unknown';
+    valid: false;
+} | {
+    scopes: CortexAiMcpScope[];
+    token: CortexAiMcpTokenRow;
+    valid: true;
+};
+/**
+ * Look a plaintext token up by hash and report whether it may be used.
+ *
+ * The lookup is an indexed equality probe on the hash rather than a scan-and-compare,
+ * so there is no per-row timing signal to leak. The `timingSafeEqual` re-check below
+ * costs nothing and keeps the comparison constant-time even if a future caller passes
+ * a candidate row in directly.
+ */
+export declare function verifyCortexAiMcpToken(supabase: SupabaseLike, plaintextToken: string, now?: Date): Promise<CortexAiMcpTokenVerification>;
+/**
+ * Stamp `last_used_at` so an admin can spot a token that is still live but unused.
+ *
+ * Fire-and-forget: a failed bookkeeping write must never fail the MCP call that
+ * already authenticated successfully.
+ */
+export declare function touchCortexAiMcpToken(supabase: SupabaseLike, tokenId: string, now?: Date): Promise<void>;
+/** True when `value` is a loopback host, with or without a port. */
+export declare function isLocalhostHost(value: string | null | undefined): boolean;
+/**
+ * Decide whether a tokenless request may be trusted as local.
+ *
+ * Requires all three of: the setting on, a loopback Host header, and a non-production
+ * `NODE_ENV`. The last condition is the important one — behind a reverse proxy the
+ * Host header is attacker-controllable, so localhost trust is a development
+ * affordance only and must never be the thing standing between the public internet
+ * and a write-capable CMS endpoint.
+ */
+export declare function shouldTrustLocalMcpRequest(params: {
+    hostHeader: string | null | undefined;
+    settings: CortexAiMcpSettings;
+}): boolean;
+export {};

package/lib/mcp-tokens.es.js

@@ -0,0 +1,104 @@
+import { createHash as h, randomBytes as T, timingSafeEqual as p } from "node:crypto";
+const m = "Cortex AI MCP token utilities can only be imported from server-side code.";
+function i() {
+  if (!(typeof window > "u"))
+    throw new Error(m);
+}
+const k = "cortex_ai_mcp_settings", f = "mcp_access_tokens", u = "nbmcp_", E = 32, S = 8, A = ["read", "write"], s = {
+  allowLocalhostWithoutToken: !0,
+  enabled: !1
+};
+function C(e) {
+  const t = e && typeof e == "object" && !Array.isArray(e) ? e : {};
+  return {
+    allowLocalhostWithoutToken: typeof t.allowLocalhostWithoutToken == "boolean" ? t.allowLocalhostWithoutToken : s.allowLocalhostWithoutToken,
+    enabled: typeof t.enabled == "boolean" ? t.enabled : s.enabled
+  };
+}
+async function x(e) {
+  if (e)
+    try {
+      const { data: t } = await e.from("site_settings").select("value").eq("key", k).maybeSingle();
+      if (t?.value)
+        return C(t.value);
+    } catch {
+    }
+  return { ...s };
+}
+function a(e) {
+  return i(), h("sha256").update(e.trim(), "utf8").digest("hex");
+}
+function M() {
+  i();
+  const e = `${u}${T(E).toString(
+    "base64url"
+  )}`;
+  return {
+    token: e,
+    tokenHash: a(e),
+    tokenPrefix: e.slice(
+      0,
+      u.length + S
+    )
+  };
+}
+function g(e) {
+  const t = e?.trim();
+  if (!t)
+    return null;
+  const o = /^Bearer\s+(.+)$/i.exec(t);
+  return (o ? o[1] : t).trim() || null;
+}
+function y(e) {
+  const o = (Array.isArray(e) ? e : []).filter(
+    (n) => A.includes(n)
+  );
+  return o.length > 0 ? Array.from(new Set(o)) : ["read"];
+}
+async function L(e, t, o = /* @__PURE__ */ new Date()) {
+  i();
+  const n = t?.trim();
+  if (!n || n.length < 16)
+    return { reason: "malformed", valid: !1 };
+  const c = a(n), { data: l, error: _ } = await e.from(f).select("id, name, scopes, token_prefix, created_at, created_by, expires_at, last_used_at, revoked_at").eq("token_hash", c).maybeSingle();
+  if (_ || !l)
+    return { reason: "unknown", valid: !1 };
+  const d = Buffer.from(c, "utf8");
+  if (!p(d, Buffer.from(a(n), "utf8")))
+    return { reason: "unknown", valid: !1 };
+  const r = l;
+  return r.revoked_at ? { reason: "revoked", valid: !1 } : r.expires_at && new Date(r.expires_at).getTime() <= o.getTime() ? { reason: "expired", valid: !1 } : { scopes: y(r.scopes), token: r, valid: !0 };
+}
+async function R(e, t, o = /* @__PURE__ */ new Date()) {
+  try {
+    await e.from(f).update({ last_used_at: o.toISOString() }).eq("id", t);
+  } catch {
+  }
+}
+const w = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]", "::1", "0.0.0.0"]);
+function O(e) {
+  const t = e?.trim().toLowerCase();
+  if (!t)
+    return !1;
+  const o = t.startsWith("[") ? t.replace(/\]:\d+$/, "]") : t.replace(/:\d+$/, "");
+  return w.has(o) || o.endsWith(".localhost");
+}
+function b(e) {
+  return !e.settings.allowLocalhostWithoutToken || process.env.NODE_ENV === "production" ? !1 : O(e.hostHeader);
+}
+export {
+  A as CORTEX_AI_MCP_SCOPES,
+  s as CORTEX_AI_MCP_SETTINGS_DEFAULTS,
+  k as CORTEX_AI_MCP_SETTINGS_KEY,
+  f as CORTEX_AI_MCP_TOKENS_TABLE,
+  u as CORTEX_AI_MCP_TOKEN_PREFIX,
+  a as hashCortexAiMcpToken,
+  O as isLocalhostHost,
+  M as mintCortexAiMcpToken,
+  C as normalizeCortexAiMcpSettings,
+  g as parseBearerToken,
+  x as resolveCortexAiMcpSettings,
+  b as shouldTrustLocalMcpRequest,
+  R as touchCortexAiMcpToken,
+  L as verifyCortexAiMcpToken
+};

package/lib/mcp-tool-registry.cjs.js

@@ -0,0 +1,4 @@
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const f=require("./ai-global-agent-tools.cjs.js");require("./zod-config.cjs.js");const w=require("zod"),i={create_cms_page:"write",create_cms_post:"write",create_cms_product:"write",create_custom_block:"write",delete_cms_item:"write",delete_custom_block:"write",describe_database_schema:"read",execute_cms_action_plan:"write",execute_database_action_plan:"write",execute_database_mutation:"write",fetch_ecommerce_stats:"read",fetch_url_content:"read",insert_content_block:"write",list_custom_blocks:"read",prepare_delete_cms_item:"read",read_current_cms_item:"read",read_database_records:"read",rewrite_page_draft:"write",search_documentation:"read",search_stock_photos:"read",set_content_images:"write",translate_page:"write",update_cms_item_field:"write",update_content_block:"write",update_current_cms_fields:"write",update_custom_block:"write",update_footer:"write",update_navigation_bar:"write",update_section_column_block:"write"},s={generate_jsonb_layout:{canonical:"rewrite_page_draft",description:"Generate a complete, strictly-validated JSONB block layout and write it into a target page or post. Blocks are normalized and validated against the NextBlock block schema, then staged as a Live Draft on the target record — nothing goes live until an editor publishes the draft, and publishing snapshots a revision so the change is reversible. Use for whole-page builds and redesigns. Alias of `rewrite_page_draft`.",title:"Generate JSONB layout"},get_database_schema:{canonical:"describe_database_schema",description:"Return the current CMS database structure: every table Cortex AI may read or mutate, its columns, primary keys, and whether it is read-only. Pair with `list_custom_blocks` for the active data-defined block definitions and with the `cortex://schema/blocks` resource for the built-in block types. Read-only. Alias of `describe_database_schema`.",title:"Get database schema"},query_site_analytics:{canonical:"fetch_ecommerce_stats",description:"Query quantitative site analytics: revenue, order counts, order-status breakdowns, and top-selling products over a time range. Read-only. For inventory levels and post/page metrics that this report does not cover, use `read_database_records` against the `products`, `product_variants`, `posts`, or `pages` tables. Alias of `fetch_ecommerce_stats`.",title:"Query site analytics"},search_stock_media:{canonical:"search_stock_photos",description:"Search free stock media (Pexels, then Unsplash) for contextually relevant imagery, returning direct image URLs with dimensions, alt text, and photographer attribution. Drop a returned `url` straight into an image block's `external_url` or a section background. Read-only and zero cost. Requires a stock provider key in CMS Settings → Cortex AI. Alias of `search_stock_photos`.",title:"Search stock media"},update_site_navigation:{canonical:"update_navigation_bar",description:'Alter the public site navigation: header menu items and their nested child hierarchy, per locale. Use mode "append" to add links while preserving the existing menu, "update" to rename or re-point one link, and "replace" only when rebuilding the whole menu. For footer links and copyright use `update_footer`. Alias of `update_navigation_bar`.',title:"Update site navigation"}};function g(e){return e in s?s[e].canonical:e in i?e:null}function b(e){const t=g(e);return t?i[t]:null}function c(e,t){const o=b(t);return o?o==="read"?e.length>0:e.includes("write"):!1}function m(e){return e.split("_").map((o,r)=>r===0?o.charAt(0).toUpperCase()+o.slice(1):o).join(" ")}function h(e){const t={additionalProperties:!1,type:"object"};if(!e||typeof e!="object")return t;try{const o=w.z.toJSONSchema(e,{cycles:"ref",io:"input",reused:"inline",target:"draft-2020-12",unrepresentable:"any"});return delete o.$schema,o.type==="object"?o:t}catch{return t}}function l(e){return f.createCortexGlobalAgentTools(e)}function C(e){const t=Object.keys(l(e)),o=Object.keys(i);return{missingFromRegistry:o.filter(r=>!t.includes(r)),unclassified:t.filter(r=>!o.includes(r))}}function T(e){const t=l(e.context),o=[];for(const[r,a]of Object.entries(t))!(r in i)||!c(e.scopes,r)||o.push({description:a.description??`Cortex AI ${m(r)} tool.`,inputSchema:h(a.inputSchema),name:r,title:m(r)});for(const[r,a]of Object.entries(s)){const n=t[a.canonical];!n||!c(e.scopes,r)||o.push({description:a.description,inputSchema:h(n.inputSchema),name:r,title:a.title})}return o.sort((r,a)=>r.name.localeCompare(a.name))}function _(e,t){return{content:[{text:e,type:"text"}],isError:t}}function S(e){return e.issues.map(t=>`${t.path.length>0?t.path.join("."):"(root)"}: ${t.message}`).join("; ")}class p extends Error{constructor(t){super(`Unknown tool: ${t}`),this.name="CortexMcpUnknownToolError"}}class y extends Error{constructor(t){super(`Tool "${t}" requires the "write" scope. This MCP token is read-only — mint a read+write token in CMS Settings → Cortex AI.`),this.name="CortexMcpForbiddenToolError"}}async function v(e){const t=g(e.name);if(!t)throw new p(e.name);if(!c(e.scopes,e.name))throw new y(e.name);const r=l(e.context)[t];if(!r||typeof r.execute!="function")throw new p(e.name);const a=e.args&&typeof e.args=="object"?e.args:{};if(r.inputSchema&&typeof r.inputSchema.safeParse=="function"){const n=r.inputSchema.safeParse(a);if(!n.success)return _(`Invalid arguments for "${e.name}": ${S(n.error)}`,!0)}try{const n=await r.execute(a),u=JSON.stringify(n??{success:!0},null,2),d=n&&typeof n=="object"&&!Array.isArray(n)?n:null,k=d?.success===!1;return{content:[{text:u,type:"text"}],isError:k,...d?{structuredContent:d}:{}}}catch(n){const u=n instanceof Error?n.message:String(n);return _(`Tool "${e.name}" failed: ${u}`,!0)}}const M=[{description:"The CMS database structure Cortex AI can read and mutate: tables, columns, primary keys, and read-only flags.",mimeType:"application/json",name:"database-schema",title:"NextBlock database schema",uri:"cortex://schema/database"},{description:"The built-in NextBlock block types available when composing page, post, and product layouts.",mimeType:"application/json",name:"block-types",title:"NextBlock block types",uri:"cortex://schema/blocks"},{description:"Data-defined custom block definitions registered in this workspace, keyed by the slug used as a block instance `block_type`.",mimeType:"application/json",name:"custom-blocks",title:"NextBlock custom block definitions",uri:"cortex://schema/custom-blocks"}];async function O(e){const t=l(e.context);if(e.uri==="cortex://schema/database"){const o=await t.describe_database_schema?.execute?.({includeReadOnly:!0});return{mimeType:"application/json",text:JSON.stringify(o??{},null,2),uri:e.uri}}if(e.uri==="cortex://schema/blocks")return{mimeType:"application/json",text:JSON.stringify({blockTypes:f.availableCortexAiBlockTypes},null,2),uri:e.uri};if(e.uri==="cortex://schema/custom-blocks"){const o=await t.list_custom_blocks?.execute?.({});return{mimeType:"application/json",text:JSON.stringify(o??{},null,2),uri:e.uri}}return null}const x=[{arguments:[{description:"What the page is for, and any brand or tone notes.",name:"brief",required:!0},{description:'Slug of the page or post to rewrite, e.g. "home".',name:"slug",required:!0}],description:"Build or redesign a NextBlock page from a brief, following the section-based layout recipe, and stage it as a reviewable Live Draft.",name:"build-page",title:"Build a NextBlock page"},{arguments:[{description:"Source URL to draw structure and copy from.",name:"url",required:!0},{description:"Slug of the page to write the result into.",name:"slug",required:!0}],description:"Read an external page and rebuild an equivalent NextBlock page from it, reusing its imagery where available.",name:"clone-from-url",title:"Rebuild a page from a URL"},{arguments:[{description:'Target language code, e.g. "fr".',name:"languageCode",required:!0},{description:"Slug of the page or post to translate.",name:"slug",required:!0}],description:"Translate an existing page or post into another language, preserving its layout and imagery.",name:"translate-content",title:"Translate a page or post"}],R={"build-page":e=>[`Build the NextBlock page with slug "${e.slug??"<slug>"}" from this brief:`,"",e.brief??"<brief>","","Process:","1. Call get_database_schema and read_current_cms_item (or read_database_records on `pages`) to ground yourself in what exists.",'2. Compose the page from `section` blocks: one column entry per grid track, the first section a hero, alternating none / theme:"muted" / theme:"primary" backgrounds for rhythm. Use discrete heading blocks rather than <h2> inside text HTML.',"3. Call search_stock_media for real photography; copy each photo's attribution fields onto the image block.","4. Write the result with generate_jsonb_layout. It stages a Live Draft — tell the user to preview and publish it."].join(`
+`),"clone-from-url":e=>[`Rebuild the NextBlock page "${e.slug??"<slug>"}" based on ${e.url??"<url>"}.`,"","Process:","1. Call fetch_url_content on the URL first. Use its headings, text, and mainImage — never invent an image URL.","2. Map the source structure onto NextBlock `section` blocks; do not copy its markup verbatim.","3. Write the result with generate_jsonb_layout so it lands as a reviewable Live Draft."].join(`
+`),"translate-content":e=>[`Translate the page or post "${e.slug??"<slug>"}" into "${e.languageCode??"<languageCode>"}".`,"","Use the translate_page tool: it copies layout, structure, and imagery automatically and links the copy to the original translation group. Supply only the text translations — every visible string, including headings, paragraph text, button labels, image alt text, and captions. Do not rebuild the layout and do not search for new imagery."].join(`
+`)};function j(e){const t=x.find(r=>r.name===e.name),o=R[e.name];return!t||!o?null:{description:t.description,messages:[{content:{text:o(e.args??{}),type:"text"},role:"user"}]}}exports.CORTEX_MCP_PROMPTS=x;exports.CORTEX_MCP_RESOURCES=M;exports.CORTEX_MCP_TOOL_ALIASES=s;exports.CORTEX_MCP_TOOL_KINDS=i;exports.CortexMcpForbiddenToolError=y;exports.CortexMcpUnknownToolError=p;exports.assertCortexMcpToolCoverage=C;exports.buildCortexMcpToolDefinitions=T;exports.callCortexMcpTool=v;exports.cortexMcpScopesAllow=c;exports.getCortexMcpPrompt=j;exports.getCortexMcpToolKind=b;exports.readCortexMcpResource=O;exports.resolveCortexMcpToolName=g;