@nextsparkjs/core 0.1.0-beta.184 → 0.1.0-beta.186

package/dist/lib/mcp/tool-generator.js

@@ -0,0 +1,271 @@
+import { z } from "zod";
+import { buildEntitySchemas } from "./schema-builder.js";
+import { translateApiError } from "./errors.js";
+import {
+  McpToolError
+} from "./types.js";
+function generateEntityTools(entityConfig, operations, override, deps) {
+  const schemas = buildEntitySchemas(entityConfig, {
+    translateOption: deps.translateOption,
+    override
+  });
+  const slug = entityConfig.slug;
+  const singular = toolToken(entityConfig.names.singular);
+  const plural = toolToken(slug);
+  const entityDescription = buildEntityDescription(entityConfig, override, deps.presets);
+  const tools = [];
+  const make = (operation, name, title, description, inputSchema, strictSchema, annotations, run) => {
+    var _a, _b;
+    return {
+      name,
+      title,
+      description: ((_b = (_a = override == null ? void 0 : override.describe) == null ? void 0 : _a.tools) == null ? void 0 : _b[operation]) ?? description,
+      inputSchema,
+      strictSchema,
+      annotations,
+      meta: { entitySlug: slug, operation },
+      handler: async (rawArgs, ctx) => {
+        const parsed = strictSchema.safeParse(rawArgs ?? {});
+        if (!parsed.success) {
+          return errorResult(
+            `Argumentos inv\xE1lidos para ${name}: ${formatZodIssues(parsed.error)}. Revis\xE1 el schema de la tool.`
+          );
+        }
+        try {
+          return await run(parsed.data, ctx);
+        } catch (error) {
+          if (error instanceof McpToolError) return errorResult(error.message);
+          console.error(`[mcp] unexpected error in ${name}:`, error);
+          return errorResult(
+            `Error inesperado ejecutando ${name}: ${error instanceof Error ? error.message : String(error)}`
+          );
+        }
+      }
+    };
+  };
+  const apiError = (result, operation) => errorResult(
+    translateApiError(result, { slug, operation, hints: override == null ? void 0 : override.errorHints })
+  );
+  if (operations.includes("list")) {
+    tools.push(
+      make(
+        "list",
+        `${deps.toolPrefix}_list_${plural}`,
+        `List ${entityConfig.names.plural}`,
+        `Lista ${entityConfig.names.plural} con paginaci\xF3n, orden y filtros. ${entityDescription}${presetExamples(deps.presets, "GET")}`,
+        schemas.listShape,
+        schemas.listStrict,
+        { readOnlyHint: true },
+        async (args, ctx) => {
+          const query = listArgsToQuery(args);
+          const result = await deps.executor({ slug, operation: "list", query }, ctx);
+          if (!result.body.success) return apiError(result, "list");
+          const data = normalizeOutput(result.body.data);
+          const info = result.body.info ?? {};
+          const total = info.total ?? (Array.isArray(data) ? data.length : "?");
+          const page = info.page ?? 1;
+          const totalPages = info.totalPages ?? 1;
+          return {
+            content: [
+              {
+                type: "text",
+                text: `${String(total)} ${entityConfig.names.plural} (p\xE1gina ${String(page)}/${String(totalPages)})`
+              }
+            ],
+            structuredContent: { data, info }
+          };
+        }
+      )
+    );
+  }
+  if (operations.includes("get")) {
+    tools.push(
+      make(
+        "get",
+        `${deps.toolPrefix}_get_${singular}`,
+        `Get ${entityConfig.names.singular}`,
+        `Obtiene un registro de ${entityConfig.names.singular} por ID. ${entityDescription}`,
+        schemas.getShape,
+        schemas.getStrict,
+        { readOnlyHint: true },
+        async (args, ctx) => {
+          const result = await deps.executor(
+            { slug, operation: "get", id: String(args.id) },
+            ctx
+          );
+          if (!result.body.success) return apiError(result, "get");
+          const data = normalizeOutput(result.body.data);
+          return {
+            content: [{ type: "text", text: `${entityConfig.names.singular} encontrado.` }],
+            structuredContent: { data }
+          };
+        }
+      )
+    );
+  }
+  if (operations.includes("create")) {
+    tools.push(
+      make(
+        "create",
+        `${deps.toolPrefix}_create_${singular}`,
+        `Create ${entityConfig.names.singular}`,
+        `Crea un registro de ${entityConfig.names.singular}. ${entityDescription}${presetExamples(deps.presets, "POST")}`,
+        schemas.createShape,
+        schemas.createStrict,
+        {},
+        async (args, ctx) => {
+          const input = (override == null ? void 0 : override.transformInput) ? await override.transformInput("create", args, ctx) : args;
+          const result = await deps.executor({ slug, operation: "create", body: input }, ctx);
+          if (!result.body.success) return apiError(result, "create");
+          const data = normalizeOutput(result.body.data);
+          const id = extractId(data);
+          return {
+            content: [
+              { type: "text", text: `${entityConfig.names.singular} creado${id ? ` (id: ${id})` : ""}.` }
+            ],
+            structuredContent: { data }
+          };
+        }
+      )
+    );
+  }
+  if (operations.includes("update")) {
+    const updateShape = {
+      id: z.string().min(1).describe(`ID del registro de ${entityConfig.names.singular} a modificar (uuid)`),
+      ...schemas.updateShape
+    };
+    tools.push(
+      make(
+        "update",
+        `${deps.toolPrefix}_update_${singular}`,
+        `Update ${entityConfig.names.singular}`,
+        `Modifica campos de un registro de ${entityConfig.names.singular} (PATCH parcial: solo envi\xE1 los campos a cambiar). ${entityDescription}`,
+        updateShape,
+        z.object(updateShape).strict(),
+        { idempotentHint: true },
+        async (args, ctx) => {
+          const { id, ...fields } = args;
+          if (!Object.keys(fields).length) {
+            return errorResult("No enviaste ning\xFAn campo a modificar.");
+          }
+          const input = (override == null ? void 0 : override.transformInput) ? await override.transformInput("update", fields, ctx) : fields;
+          const result = await deps.executor(
+            { slug, operation: "update", id, body: input },
+            ctx
+          );
+          if (!result.body.success) return apiError(result, "update");
+          const data = normalizeOutput(result.body.data);
+          return {
+            content: [{ type: "text", text: `${entityConfig.names.singular} actualizado.` }],
+            structuredContent: { data }
+          };
+        }
+      )
+    );
+  }
+  if (operations.includes("delete")) {
+    const deleteShape = {
+      id: z.string().min(1).describe(`ID del registro de ${entityConfig.names.singular} a eliminar (uuid)`),
+      confirm: z.boolean().describe("true SOLO tras confirmaci\xF3n expl\xEDcita del usuario")
+    };
+    tools.push(
+      make(
+        "delete",
+        `${deps.toolPrefix}_delete_${singular}`,
+        `Delete ${entityConfig.names.singular}`,
+        `Elimina un ${entityConfig.names.singular}. DESTRUCTIVO: mostrale al usuario qu\xE9 vas a borrar y pedile confirmaci\xF3n antes.${deleteWarning(override)}`,
+        deleteShape,
+        z.object(deleteShape).strict(),
+        { destructiveHint: true },
+        async (args, ctx) => {
+          if (args.confirm !== true) {
+            return errorResult(
+              "Eliminaci\xF3n no confirmada: pedile al usuario confirmaci\xF3n expl\xEDcita y reintent\xE1 con confirm: true."
+            );
+          }
+          const result = await deps.executor(
+            { slug, operation: "delete", id: String(args.id) },
+            ctx
+          );
+          if (!result.body.success) return apiError(result, "delete");
+          return {
+            content: [{ type: "text", text: `${entityConfig.names.singular} eliminado (id: ${String(args.id)}).` }]
+          };
+        }
+      )
+    );
+  }
+  return tools;
+}
+function toolToken(name) {
+  return name.toLowerCase().normalize("NFD").replace(/[̀-ͯ]/g, "").replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
+}
+function buildEntityDescription(entityConfig, override, presets) {
+  var _a;
+  if ((_a = override == null ? void 0 : override.describe) == null ? void 0 : _a.entity) return override.describe.entity;
+  return (presets == null ? void 0 : presets.summary) ? `${presets.summary}.` : "";
+}
+function presetExamples(presets, method) {
+  if (!presets) return "";
+  const relevant = presets.presets.filter((p) => (p.method ?? "GET") === method);
+  const example = relevant.find((p) => method === "POST" ? p.payload : p.params);
+  if (!example) return "";
+  const body = method === "POST" ? example.payload : example.params;
+  const label = example.description || example.title || example.id;
+  return ` Ejemplo (${label}): ${JSON.stringify(body)}`;
+}
+function deleteWarning(override) {
+  var _a, _b;
+  const hint = (_b = (_a = override == null ? void 0 : override.describe) == null ? void 0 : _a.tools) == null ? void 0 : _b.delete;
+  return hint ? ` ${hint}` : "";
+}
+function listArgsToQuery(args) {
+  const query = {};
+  const { filters, fields, ...rest } = args;
+  for (const [key, value] of Object.entries(rest)) {
+    if (value === void 0 || value === null || value === "") continue;
+    query[key] = String(value);
+  }
+  for (const [key, value] of Object.entries(filters ?? {})) {
+    if (value === void 0 || value === null || value === "") continue;
+    query[key] = String(value);
+  }
+  if (fields == null ? void 0 : fields.length) query.fields = fields.join(",");
+  return query;
+}
+function normalizeDateFields(row, dateFields) {
+  if (!row || typeof row !== "object" || Array.isArray(row)) return row;
+  const record = { ...row };
+  for (const field of dateFields) {
+    const value = record[field];
+    if (typeof value === "string" && value.length >= 10) {
+      record[field] = value.slice(0, 10);
+    }
+  }
+  return record;
+}
+function normalizeOutput(data) {
+  return data;
+}
+function extractId(data) {
+  if (data && typeof data === "object" && "id" in data) {
+    return String(data.id);
+  }
+  return null;
+}
+function errorResult(message) {
+  return { content: [{ type: "text", text: message }], isError: true };
+}
+function formatZodIssues(error) {
+  return error.issues.slice(0, 6).map((issue) => {
+    const path = issue.path.join(".");
+    return path ? `${path}: ${issue.message}` : issue.message;
+  }).join(" \xB7 ");
+}
+export {
+  errorResult,
+  generateEntityTools,
+  listArgsToQuery,
+  normalizeDateFields,
+  toolToken
+};

package/dist/lib/mcp/transport.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Stateless in-memory Transport for MCP over HTTP (App Router friendly).
+ *
+ * The official StreamableHTTPServerTransport requires Node's
+ * IncomingMessage/ServerResponse, which Next.js App Router does not expose.
+ * This transport bypasses HTTP entirely: the route handler parses the
+ * JSON-RPC body, feeds each message to an ephemeral McpServer through this
+ * transport, and returns the collected responses as plain JSON.
+ *
+ * Stateless by design: one server + one transport per request, no sessions,
+ * no SSE/server-push. Server-originated notifications are dropped.
+ */
+import type { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
+import type { JSONRPCMessage } from '@modelcontextprotocol/sdk/types.js';
+export declare class StatelessJsonRpcTransport implements Transport {
+    onclose?: () => void;
+    onerror?: (error: Error) => void;
+    onmessage?: (message: JSONRPCMessage) => void;
+    private pending;
+    private closed;
+    start(): Promise<void>;
+    /** Called by the McpServer with responses (and notifications, which we drop). */
+    send(message: JSONRPCMessage): Promise<void>;
+    close(): Promise<void>;
+    /**
+     * Feed one client message to the server. Resolves with the server's
+     * response for requests, or null for notifications (no response expected).
+     */
+    handleMessage(message: JSONRPCMessage): Promise<JSONRPCMessage | null>;
+}
+//# sourceMappingURL=transport.d.ts.map

package/dist/lib/mcp/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../src/lib/mcp/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAA;AAC9E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AAMxE,qBAAa,yBAA0B,YAAW,SAAS;IACzD,OAAO,CAAC,EAAE,MAAM,IAAI,CAAA;IACpB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAA;IAChC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAA;IAE7C,OAAO,CAAC,OAAO,CAA8C;IAC7D,OAAO,CAAC,MAAM,CAAQ;IAEhB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B,iFAAiF;IAC3E,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAe5C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAM5B;;;OAGG;IACG,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;CAsB7E"}

package/dist/lib/mcp/transport.js

@@ -0,0 +1,58 @@
+const RESPONSE_TIMEOUT_MS = 3e4;
+class StatelessJsonRpcTransport {
+  onclose;
+  onerror;
+  onmessage;
+  pending = /* @__PURE__ */ new Map();
+  closed = false;
+  async start() {
+  }
+  /** Called by the McpServer with responses (and notifications, which we drop). */
+  async send(message) {
+    if (this.closed) return;
+    const id = message.id;
+    if (id !== void 0 && id !== null && !("method" in message)) {
+      const resolve = this.pending.get(id);
+      if (resolve) {
+        this.pending.delete(id);
+        resolve(message);
+        return;
+      }
+    }
+  }
+  async close() {
+    var _a;
+    this.closed = true;
+    this.pending.clear();
+    (_a = this.onclose) == null ? void 0 : _a.call(this);
+  }
+  /**
+   * Feed one client message to the server. Resolves with the server's
+   * response for requests, or null for notifications (no response expected).
+   */
+  async handleMessage(message) {
+    if (!this.onmessage) {
+      throw new Error("Transport not connected to a server");
+    }
+    const isRequest = "method" in message && "id" in message && message.id !== null;
+    if (!isRequest) {
+      this.onmessage(message);
+      return null;
+    }
+    const request = message;
+    return new Promise((resolve, reject) => {
+      const timer = setTimeout(() => {
+        this.pending.delete(request.id);
+        reject(new Error(`MCP request ${String(request.id)} timed out`));
+      }, RESPONSE_TIMEOUT_MS);
+      this.pending.set(request.id, (response) => {
+        clearTimeout(timer);
+        resolve(response);
+      });
+      this.onmessage(message);
+    });
+  }
+}
+export {
+  StatelessJsonRpcTransport
+};

package/dist/lib/mcp/types.d.ts

@@ -0,0 +1,184 @@
+/**
+ * MCP Engine — shared types.
+ *
+ * The engine is registry-driven: it reads the entity registry passed into
+ * createMcpEngine() and never imports theme files directly. Theme extensions
+ * (overrides, extra tools, translations) are injected via McpEngineOptions,
+ * which the default route template assembles from the generated
+ * MCP_OVERRIDES registry.
+ */
+import type { z } from 'zod';
+import type { EntityConfig } from '../entities/types';
+export type McpOperation = 'list' | 'get' | 'create' | 'update' | 'delete';
+/**
+ * Mutable shape used while building tool input schemas. Assignable to the
+ * SDK's ZodRawShape (zod 4 declares it Readonly<Record<string, $ZodType>>).
+ */
+export type McpShape = Record<string, z.ZodTypeAny>;
+export declare const MUTATION_OPERATIONS: McpOperation[];
+/** Resolved per-request identity, injected into every tool handler. */
+export interface ToolExecutionContext {
+    userId: string;
+    userRole: string;
+    teamId: string;
+    /** Raw Authorization header, forwarded verbatim to in-process handlers. */
+    authHeader: string;
+    /** api_key.id of the caller — required for audit logging. */
+    apiKeyId: string | null;
+    scopes: string[];
+}
+export interface McpToolAnnotations {
+    readOnlyHint?: boolean;
+    destructiveHint?: boolean;
+    idempotentHint?: boolean;
+    openWorldHint?: boolean;
+}
+export interface McpToolResultContent {
+    type: 'text';
+    text: string;
+}
+export interface McpToolResult {
+    content: McpToolResultContent[];
+    structuredContent?: Record<string, unknown>;
+    isError?: boolean;
+}
+export interface McpToolDefinition {
+    name: string;
+    title: string;
+    description: string;
+    /** Raw shape passed to the SDK for tools/list JSON Schema generation. */
+    inputSchema: McpShape;
+    /**
+     * Strict validator run inside the handler before executing. The SDK builds
+     * a non-strict object from inputSchema; this one rejects unknown keys and
+     * enforces cross-field rules (e.g. from/to require dateField).
+     */
+    strictSchema: z.ZodTypeAny;
+    annotations?: McpToolAnnotations;
+    handler: (args: Record<string, unknown>, ctx: ToolExecutionContext) => Promise<McpToolResult>;
+    /** Metadata for audit entries. */
+    meta?: {
+        entitySlug?: string;
+        operation?: McpOperation | 'workflow';
+    };
+}
+/** Thrown by overrides/handlers to short-circuit with an actionable message. */
+export declare class McpToolError extends Error {
+    constructor(message: string);
+}
+/** Result of an in-process entity API invocation. */
+export interface EntityApiResult {
+    status: number;
+    body: {
+        success: boolean;
+        data?: unknown;
+        info?: Record<string, unknown>;
+        error?: string;
+        code?: string;
+        details?: unknown;
+    };
+}
+export interface ExecuteEntityArgs {
+    slug: string;
+    operation: McpOperation;
+    id?: string;
+    query?: Record<string, string>;
+    body?: unknown;
+}
+export type EntityExecutor = (args: ExecuteEntityArgs, ctx: ToolExecutionContext) => Promise<EntityApiResult>;
+/**
+ * API handed to override extraTools factories.
+ *
+ * `execute` and `entitySchemas` are the ENGINE's own wired versions: output
+ * normalization (dates, transformOutput) and schema context (i18n option
+ * labels, overrides) are applied there, so a workflow tool behaves exactly
+ * like a generated one. Building schemas or calling handlers directly from an
+ * override would silently skip both.
+ */
+export interface EngineApi {
+    execute: EntityExecutor;
+    /** Schemas for an entity, built with the engine's i18n + override context. */
+    entitySchemas: (slug: string) => {
+        createShape: McpShape;
+        updateShape: McpShape;
+    };
+    toolPrefix: string;
+    defaultTimezone: string;
+    registry: Record<string, EntityConfig>;
+    translateApiError: (result: EntityApiResult, context: {
+        slug: string;
+        operation: string;
+        hints?: string[];
+    }) => string;
+}
+export interface McpEntityOverride {
+    /** Hide the whole entity from the MCP surface. */
+    exclude?: boolean;
+    /** Hide specific generated tools. First-class security mechanism. */
+    excludeOperations?: McpOperation[];
+    /** Field names that become optional in the MCP input schema even if the API requires them (pair with transformInput enforcement). */
+    relaxRequired?: string[];
+    describe?: {
+        entity?: string;
+        fields?: Record<string, string>;
+        tools?: Partial<Record<McpOperation, string>>;
+    };
+    /** Appended to 500-with-no-code errors (core swallows CHECK violations). */
+    errorHints?: string[];
+    /** May throw McpToolError to reject with an actionable message. */
+    transformInput?: (operation: McpOperation, input: Record<string, unknown>, ctx: ToolExecutionContext) => Record<string, unknown> | Promise<Record<string, unknown>>;
+    transformOutput?: (operation: McpOperation, output: unknown) => unknown;
+    extraTools?: (api: EngineApi) => McpToolDefinition[];
+}
+export interface AuditEntry {
+    apiKeyId: string | null;
+    userId: string;
+    tool: string;
+    entitySlug?: string;
+    operation?: string;
+    recordId?: string;
+    teamId: string;
+    statusCode: number;
+    requestSummary: Record<string, unknown>;
+    responseTimeMs: number;
+}
+export interface EntityPresetInfo {
+    summary?: string;
+    presets: Array<{
+        id: string;
+        title?: string;
+        method?: string;
+        description?: string;
+        params?: Record<string, unknown>;
+        payload?: Record<string, unknown>;
+    }>;
+}
+export interface McpEngineOptions {
+    /** e.g. 'acme' → acme_list_customers. Comes from app/theme config. */
+    toolPrefix: string;
+    serverInfo?: {
+        name: string;
+        version: string;
+    };
+    /** Core/reserved slugs never exposed (e.g. 'patterns'). */
+    excludeSlugs?: string[];
+    /** Operations generated by default for every entity. */
+    defaultOperations?: McpOperation[];
+    overrides?: Record<string, McpEntityOverride>;
+    /**
+     * Per-entity description material harvested from api/presets.ts
+     * (summary → entity description, presets → few-shot examples).
+     */
+    presets?: Record<string, EntityPresetInfo>;
+    /** Resolve the localized label of a select option ("dairy" → "Lácteos"). */
+    translateOption?: (slug: string, fieldName: string, value: string) => string | undefined;
+    /** IANA timezone used to resolve relative dates ("this_week"). */
+    defaultTimezone?: string;
+    /** Extra tools not attached to an entity (e.g. list_team_members). */
+    utilityTools?: (api: EngineApi) => McpToolDefinition[];
+    /** Injectable for tests. Defaults to the api_audit_log writer. */
+    audit?: (entry: AuditEntry) => Promise<void>;
+    /** Injectable for tests. Defaults to the in-process executor. */
+    executor?: EntityExecutor;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/lib/mcp/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/lib/mcp/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAC5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAErD,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAE1E;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA;AAEnD,eAAO,MAAM,mBAAmB,EAAE,YAAY,EAAmC,CAAA;AAEjF,uEAAuE;AACvE,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,2EAA2E;IAC3E,UAAU,EAAE,MAAM,CAAA;IAClB,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,aAAa,CAAC,EAAE,OAAO,CAAA;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,oBAAoB,EAAE,CAAA;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC3C,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,yEAAyE;IACzE,WAAW,EAAE,QAAQ,CAAA;IACrB;;;;OAIG;IACH,YAAY,EAAE,CAAC,CAAC,UAAU,CAAA;IAC1B,WAAW,CAAC,EAAE,kBAAkB,CAAA;IAChC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,oBAAoB,KAAK,OAAO,CAAC,aAAa,CAAC,CAAA;IAC7F,kCAAkC;IAClC,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,YAAY,GAAG,UAAU,CAAA;KAAE,CAAA;CACtE;AAED,gFAAgF;AAChF,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAED,qDAAqD;AACrD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE;QACJ,OAAO,EAAE,OAAO,CAAA;QAChB,IAAI,CAAC,EAAE,OAAO,CAAA;QACd,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC9B,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,OAAO,CAAC,EAAE,OAAO,CAAA;KAClB,CAAA;CACF;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,YAAY,CAAA;IACvB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9B,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AAED,MAAM,MAAM,cAAc,GAAG,CAC3B,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,oBAAoB,KACtB,OAAO,CAAC,eAAe,CAAC,CAAA;AAE7B;;;;;;;;GAQG;AACH,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,cAAc,CAAA;IACvB,8EAA8E;IAC9E,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK;QAAE,WAAW,EAAE,QAAQ,CAAC;QAAC,WAAW,EAAE,QAAQ,CAAA;KAAE,CAAA;IACjF,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,EAAE,MAAM,CAAA;IACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;IACtC,iBAAiB,EAAE,CACjB,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,KAC3D,MAAM,CAAA;CACZ;AAED,MAAM,WAAW,iBAAiB;IAChC,kDAAkD;IAClD,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,YAAY,EAAE,CAAA;IAClC,qIAAqI;IACrI,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,QAAQ,CAAC,EAAE;QACT,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC/B,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAA;KAC9C,CAAA;IACD,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,mEAAmE;IACnE,cAAc,CAAC,EAAE,CACf,SAAS,EAAE,YAAY,EACvB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,EAAE,oBAAoB,KACtB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAC/D,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,KAAK,OAAO,CAAA;IACvE,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,iBAAiB,EAAE,CAAA;CACrD;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACvC,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,KAAK,CAAC;QACb,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAChC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAClC,CAAC,CAAA;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IAC9C,2DAA2D;IAC3D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IACvB,wDAAwD;IACxD,iBAAiB,CAAC,EAAE,YAAY,EAAE,CAAA;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;IAC7C;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IAC1C,4EAA4E;IAC5E,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;IACxF,kEAAkE;IAClE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,sEAAsE;IACtE,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,SAAS,KAAK,iBAAiB,EAAE,CAAA;IACtD,kEAAkE;IAClE,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5C,iEAAiE;IACjE,QAAQ,CAAC,EAAE,cAAc,CAAA;CAC1B"}

package/dist/lib/mcp/types.js

@@ -0,0 +1,11 @@
+const MUTATION_OPERATIONS = ["create", "update", "delete"];
+class McpToolError extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "McpToolError";
+  }
+}
+export {
+  MUTATION_OPERATIONS,
+  McpToolError
+};

package/dist/lib/plugins/hook-system.d.ts

@@ -21,6 +21,18 @@ export declare class HookSystem {
      * Apply filter hooks to data
      */
     applyFilters<T>(hookName: string, data: T, ...args: unknown[]): Promise<T>;
+    /**
+     * Apply filter hooks to data, propagating callback errors instead of
+     * swallowing them.
+     *
+     * `applyFilters` isolates each registered callback so one misbehaving
+     * plugin can't break the others — the right default for cosmetic /
+     * best-effort filters. It is the wrong default for a *validation*
+     * filter: a callback that throws to reject a payload must actually stop
+     * the pipeline, or the hook can never reject anything. Use this variant
+     * for filters where a thrown error is meant to abort the caller.
+     */
+    applyFiltersStrict<T>(hookName: string, data: T, ...args: unknown[]): Promise<T>;
     /**
      * Add an action hook
      * Actions allow plugins to execute code at specific points
@@ -91,6 +103,7 @@ export declare function createHookSystem(): HookSystem;
 export declare function getGlobalHooks(): HookSystem;
 export declare const addFilter: (hookName: string, callback: HookCallback, priority?: number) => void;
 export declare const applyFilters: <T>(hookName: string, data: T, ...args: unknown[]) => Promise<T>;
+export declare const applyFiltersStrict: <T>(hookName: string, data: T, ...args: unknown[]) => Promise<T>;
 export declare const addAction: (hookName: string, callback: HookCallbackVoid, priority?: number) => void;
 export declare const doAction: <T>(hookName: string, data: T, ...args: unknown[]) => Promise<void>;
 export declare const emit: <T>(eventName: string, data: T, ...args: unknown[]) => Promise<void>;

package/dist/lib/plugins/hook-system.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hook-system.d.ts","sourceRoot":"","sources":["../../../src/lib/plugins/hook-system.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,KAAK,YAAY,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;AAChG,KAAK,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;AAE1G;;GAEG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,OAAO,CAAwC;IACvD,OAAO,CAAC,SAAS,CAA0D;IAE3E;;;OAGG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,SAAK,GAAG,IAAI;IAsBxE;;OAEG;IACG,YAAY,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;IAuBhF;;;OAGG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,SAAK,GAAG,IAAI;IAqB5E;;OAEG;IACG,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB/E;;OAEG;IACG,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5E;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,OAAO;IAiB/D;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,GAAG,OAAO;IAiBnE;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAKlC;;OAEG;IACH,WAAW,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE;IAOvD;;OAEG;IACH,OAAO,CAAC,eAAe;IAavB;;OAEG;IACH,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAcrF;;OAEG;IACH,KAAK,IAAI,IAAI;IAOb;;OAEG;IACH,YAAY,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;CAMrD;AAKD,OAAO,CAAC,MAAM,CAAC;IAEb,IAAI,eAAe,EAAE,UAAU,GAAG,SAAS,CAAA;CAC5C;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,UAAU,CAK7C;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,UAAU,CAE3C;AAKD,eAAO,MAAM,SAAS,GAAI,UAAU,MAAM,EAAE,UAAU,YAAY,EAAE,iBAAa,SAClC,CAAA;AAE/C,eAAO,MAAM,YAAY,GAAI,CAAC,EAAE,UAAU,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,OAAO,EAAE,eAChC,CAAA;AAE7C,eAAO,MAAM,SAAS,GAAI,UAAU,MAAM,EAAE,UAAU,gBAAgB,EAAE,iBAAa,SACtC,CAAA;AAE/C,eAAO,MAAM,QAAQ,GAAI,CAAC,EAAE,UAAU,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,OAAO,EAAE,kBAChC,CAAA;AAEzC,eAAO,MAAM,IAAI,GAAI,CAAC,EAAE,WAAW,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,OAAO,EAAE,kBAChC,CAAA;AAEtC,eAAO,MAAM,YAAY,GAAI,UAAU,MAAM,EAAE,UAAU,YAAY,YAC7B,CAAA;AAExC,eAAO,MAAM,YAAY,GAAI,UAAU,MAAM,EAAE,UAAU,gBAAgB,YACjC,CAAA;AAExC,eAAO,MAAM,OAAO,GAAI,UAAU,MAAM,YACf,CAAA;AAEzB,eAAO,MAAM,WAAW;aAlHI,MAAM,EAAE;aAAW,MAAM,EAAE;CAmHlC,CAAA;AAErB,eAAO,MAAM,YAAY;WA3FiB,MAAM;eAAa,MAAM;aAAW,MAAM;EA4F9D,CAAA"}
+{"version":3,"file":"hook-system.d.ts","sourceRoot":"","sources":["../../../src/lib/plugins/hook-system.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,KAAK,YAAY,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;AAChG,KAAK,gBAAgB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;AAE1G;;GAEG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,OAAO,CAAwC;IACvD,OAAO,CAAC,SAAS,CAA0D;IAE3E;;;OAGG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,SAAK,GAAG,IAAI;IAsBxE;;OAEG;IACG,YAAY,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;IA2BhF;;;;;;;;;;OAUG;IACG,kBAAkB,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;IAoBtF;;;OAGG;IACH,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,SAAK,GAAG,IAAI;IAqB5E;;OAEG;IACG,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAoB/E;;OAEG;IACG,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5E;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,OAAO;IAiB/D;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,GAAG,OAAO;IAiBnE;;OAEG;IACH,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAKlC;;OAEG;IACH,WAAW,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE;IAOvD;;OAEG;IACH,OAAO,CAAC,eAAe;IAavB;;OAEG;IACH,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAcrF;;OAEG;IACH,KAAK,IAAI,IAAI;IAOb;;OAEG;IACH,YAAY,IAAI;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;CAMrD;AAKD,OAAO,CAAC,MAAM,CAAC;IAEb,IAAI,eAAe,EAAE,UAAU,GAAG,SAAS,CAAA;CAC5C;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,UAAU,CAK7C;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,UAAU,CAE3C;AAKD,eAAO,MAAM,SAAS,GAAI,UAAU,MAAM,EAAE,UAAU,YAAY,EAAE,iBAAa,SAClC,CAAA;AAE/C,eAAO,MAAM,YAAY,GAAI,CAAC,EAAE,UAAU,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,OAAO,EAAE,eAChC,CAAA;AAE7C,eAAO,MAAM,kBAAkB,GAAI,CAAC,EAAE,UAAU,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,OAAO,EAAE,eAChC,CAAA;AAEnD,eAAO,MAAM,SAAS,GAAI,UAAU,MAAM,EAAE,UAAU,gBAAgB,EAAE,iBAAa,SACtC,CAAA;AAE/C,eAAO,MAAM,QAAQ,GAAI,CAAC,EAAE,UAAU,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,OAAO,EAAE,kBAChC,CAAA;AAEzC,eAAO,MAAM,IAAI,GAAI,CAAC,EAAE,WAAW,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,OAAO,EAAE,kBAChC,CAAA;AAEtC,eAAO,MAAM,YAAY,GAAI,UAAU,MAAM,EAAE,UAAU,YAAY,YAC7B,CAAA;AAExC,eAAO,MAAM,YAAY,GAAI,UAAU,MAAM,EAAE,UAAU,gBAAgB,YACjC,CAAA;AAExC,eAAO,MAAM,OAAO,GAAI,UAAU,MAAM,YACf,CAAA;AAEzB,eAAO,MAAM,WAAW;aArHI,MAAM,EAAE;aAAW,MAAM,EAAE;CAsHlC,CAAA;AAErB,eAAO,MAAM,YAAY;WA9FiB,MAAM;eAAa,MAAM;aAAW,MAAM;EA+F9D,CAAA"}