@open-mercato/ai-assistant 0.4.2-canary-c02407ff85

package/dist/modules/ai_assistant/lib/mcp-client.js

@@ -0,0 +1,146 @@
+import { spawn } from "node:child_process";
+import { Client } from "@modelcontextprotocol/sdk/client/index.js";
+import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
+import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
+class McpClient {
+  constructor(client, transport, apiKeySecret, childProcess) {
+    this.client = client;
+    this.transport = transport;
+    this.apiKeySecret = apiKeySecret;
+    this.childProcess = childProcess;
+  }
+  /**
+   * Connect to an MCP server via the specified transport.
+   */
+  static async connect(options) {
+    if (options.transport === "stdio") {
+      return McpClient.connectStdio(options);
+    } else {
+      return McpClient.connectHttp(options);
+    }
+  }
+  /**
+   * Connect via stdio transport (spawn subprocess).
+   */
+  static async connectStdio(options) {
+    const command = options.command ?? "yarn";
+    const args = options.args ?? [
+      "mercato",
+      "ai_assistant",
+      "mcp:serve",
+      "--api-key",
+      options.apiKeySecret
+    ];
+    const cwd = options.cwd ?? process.cwd();
+    const childProcess = spawn(command, args, {
+      cwd,
+      stdio: ["pipe", "pipe", "pipe"],
+      env: { ...process.env }
+    });
+    childProcess.stderr?.on("data", (data) => {
+      const message = data.toString().trim();
+      if (message) {
+        console.error(`[MCP Client] ${message}`);
+      }
+    });
+    const transport = new StdioClientTransport({
+      command,
+      args,
+      cwd,
+      env: process.env
+    });
+    const client = new Client(
+      { name: "open-mercato-client", version: "0.1.0" },
+      { capabilities: {} }
+    );
+    await client.connect(transport);
+    return new McpClient(client, transport, options.apiKeySecret, childProcess);
+  }
+  /**
+   * Connect via HTTP transport.
+   */
+  static async connectHttp(options) {
+    const transport = new StreamableHTTPClientTransport(
+      new URL(options.url),
+      {
+        requestInit: {
+          headers: {
+            "x-api-key": options.apiKeySecret
+          }
+        }
+      }
+    );
+    const client = new Client(
+      { name: "open-mercato-client", version: "0.1.0" },
+      { capabilities: {} }
+    );
+    await client.connect(transport);
+    return new McpClient(client, transport, options.apiKeySecret);
+  }
+  /**
+   * List available tools from the server.
+   */
+  async listTools() {
+    const response = await this.client.listTools();
+    return response.tools.map((tool) => ({
+      name: tool.name,
+      description: tool.description ?? "",
+      inputSchema: tool.inputSchema ?? {}
+    }));
+  }
+  /**
+   * Call a tool on the server.
+   */
+  async callTool(name, args) {
+    try {
+      const response = await this.client.callTool({
+        name,
+        arguments: args
+      });
+      const content = response.content;
+      if (!Array.isArray(content) || content.length === 0) {
+        return { success: true, result: null };
+      }
+      const firstContent = content[0];
+      if (firstContent.type === "text") {
+        try {
+          const parsed = JSON.parse(firstContent.text);
+          if (response.isError || parsed.error) {
+            return {
+              success: false,
+              error: parsed.error ?? "Unknown error"
+            };
+          }
+          return { success: true, result: parsed };
+        } catch {
+          return { success: true, result: firstContent.text };
+        }
+      }
+      return { success: true, result: content };
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      return { success: false, error: message };
+    }
+  }
+  /**
+   * Close the client and release resources.
+   */
+  async close() {
+    try {
+      await this.client.close();
+    } catch {
+    }
+    try {
+      await this.transport.close();
+    } catch {
+    }
+    if (this.childProcess) {
+      this.childProcess.kill();
+      this.childProcess = void 0;
+    }
+  }
+}
+export {
+  McpClient
+};
+//# sourceMappingURL=mcp-client.js.map

package/dist/modules/ai_assistant/lib/mcp-client.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/lib/mcp-client.ts"],
+  "sourcesContent": ["import { spawn, type ChildProcess } from 'node:child_process'\nimport { Client } from '@modelcontextprotocol/sdk/client/index.js'\nimport { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js'\nimport { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js'\nimport type { McpClientInterface, ToolInfo, ToolResult } from './types'\n\n/**\n * Options for stdio transport.\n */\nexport type StdioClientOptions = {\n  transport: 'stdio'\n  /** API key secret (passed to server via --api-key) */\n  apiKeySecret: string\n  /** Command to run (default: 'yarn') */\n  command?: string\n  /** Arguments for the command (default: mercato mcp:serve with api-key) */\n  args?: string[]\n  /** Working directory (default: process.cwd()) */\n  cwd?: string\n}\n\n/**\n * Options for HTTP transport.\n */\nexport type HttpClientOptions = {\n  transport: 'http'\n  /** API key secret (sent via x-api-key header) */\n  apiKeySecret: string\n  /** MCP server URL (e.g., 'http://localhost:3001/mcp') */\n  url: string\n}\n\n/**\n * Combined options for McpClient.\n */\nexport type McpClientOptions = StdioClientOptions | HttpClientOptions\n\n/**\n * MCP protocol client for connecting to MCP servers.\n *\n * Supports two transport modes:\n * - stdio: Spawns server as subprocess\n * - http: Connects to HTTP server\n */\nexport class McpClient implements McpClientInterface {\n  private client: Client\n  private transport: StdioClientTransport | StreamableHTTPClientTransport\n  private childProcess?: ChildProcess\n  private apiKeySecret: string\n\n  private constructor(\n    client: Client,\n    transport: StdioClientTransport | StreamableHTTPClientTransport,\n    apiKeySecret: string,\n    childProcess?: ChildProcess\n  ) {\n    this.client = client\n    this.transport = transport\n    this.apiKeySecret = apiKeySecret\n    this.childProcess = childProcess\n  }\n\n  /**\n   * Connect to an MCP server via the specified transport.\n   */\n  static async connect(options: McpClientOptions): Promise<McpClient> {\n    if (options.transport === 'stdio') {\n      return McpClient.connectStdio(options)\n    } else {\n      return McpClient.connectHttp(options)\n    }\n  }\n\n  /**\n   * Connect via stdio transport (spawn subprocess).\n   */\n  private static async connectStdio(options: StdioClientOptions): Promise<McpClient> {\n    const command = options.command ?? 'yarn'\n    const args = options.args ?? [\n      'mercato',\n      'ai_assistant',\n      'mcp:serve',\n      '--api-key',\n      options.apiKeySecret,\n    ]\n    const cwd = options.cwd ?? process.cwd()\n\n    const childProcess = spawn(command, args, {\n      cwd,\n      stdio: ['pipe', 'pipe', 'pipe'],\n      env: { ...process.env },\n    })\n\n    // Forward stderr for debugging\n    childProcess.stderr?.on('data', (data) => {\n      const message = data.toString().trim()\n      if (message) {\n        console.error(`[MCP Client] ${message}`)\n      }\n    })\n\n    const transport = new StdioClientTransport({\n      command,\n      args,\n      cwd,\n      env: process.env as Record<string, string>,\n    })\n\n    const client = new Client(\n      { name: 'open-mercato-client', version: '0.1.0' },\n      { capabilities: {} }\n    )\n\n    await client.connect(transport)\n\n    return new McpClient(client, transport, options.apiKeySecret, childProcess)\n  }\n\n  /**\n   * Connect via HTTP transport.\n   */\n  private static async connectHttp(options: HttpClientOptions): Promise<McpClient> {\n    const transport = new StreamableHTTPClientTransport(\n      new URL(options.url),\n      {\n        requestInit: {\n          headers: {\n            'x-api-key': options.apiKeySecret,\n          },\n        },\n      }\n    )\n\n    const client = new Client(\n      { name: 'open-mercato-client', version: '0.1.0' },\n      { capabilities: {} }\n    )\n\n    await client.connect(transport)\n\n    return new McpClient(client, transport, options.apiKeySecret)\n  }\n\n  /**\n   * List available tools from the server.\n   */\n  async listTools(): Promise<ToolInfo[]> {\n    const response = await this.client.listTools()\n\n    return response.tools.map((tool) => ({\n      name: tool.name,\n      description: tool.description ?? '',\n      inputSchema: (tool.inputSchema ?? {}) as Record<string, unknown>,\n    }))\n  }\n\n  /**\n   * Call a tool on the server.\n   */\n  async callTool(name: string, args: unknown): Promise<ToolResult> {\n    try {\n      const response = await this.client.callTool({\n        name,\n        arguments: args as Record<string, unknown>,\n      })\n\n      // Parse content from response\n      const content = response.content\n      if (!Array.isArray(content) || content.length === 0) {\n        return { success: true, result: null }\n      }\n\n      const firstContent = content[0]\n      if (firstContent.type === 'text') {\n        try {\n          const parsed = JSON.parse(firstContent.text)\n\n          // Check if it's an error response\n          if (response.isError || parsed.error) {\n            return {\n              success: false,\n              error: parsed.error ?? 'Unknown error',\n            }\n          }\n\n          return { success: true, result: parsed }\n        } catch {\n          // Not JSON, return as-is\n          return { success: true, result: firstContent.text }\n        }\n      }\n\n      return { success: true, result: content }\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error)\n      return { success: false, error: message }\n    }\n  }\n\n  /**\n   * Close the client and release resources.\n   */\n  async close(): Promise<void> {\n    try {\n      await this.client.close()\n    } catch {\n      // Ignore close errors\n    }\n\n    try {\n      await this.transport.close()\n    } catch {\n      // Ignore close errors\n    }\n\n    if (this.childProcess) {\n      this.childProcess.kill()\n      this.childProcess = undefined\n    }\n  }\n}\n"],
+  "mappings": "AAAA,SAAS,aAAgC;AACzC,SAAS,cAAc;AACvB,SAAS,4BAA4B;AACrC,SAAS,qCAAqC;AAyCvC,MAAM,UAAwC;AAAA,EAM3C,YACN,QACA,WACA,cACA,cACA;AACA,SAAK,SAAS;AACd,SAAK,YAAY;AACjB,SAAK,eAAe;AACpB,SAAK,eAAe;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,QAAQ,SAA+C;AAClE,QAAI,QAAQ,cAAc,SAAS;AACjC,aAAO,UAAU,aAAa,OAAO;AAAA,IACvC,OAAO;AACL,aAAO,UAAU,YAAY,OAAO;AAAA,IACtC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,aAAqB,aAAa,SAAiD;AACjF,UAAM,UAAU,QAAQ,WAAW;AACnC,UAAM,OAAO,QAAQ,QAAQ;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,IACV;AACA,UAAM,MAAM,QAAQ,OAAO,QAAQ,IAAI;AAEvC,UAAM,eAAe,MAAM,SAAS,MAAM;AAAA,MACxC;AAAA,MACA,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,MAC9B,KAAK,EAAE,GAAG,QAAQ,IAAI;AAAA,IACxB,CAAC;AAGD,iBAAa,QAAQ,GAAG,QAAQ,CAAC,SAAS;AACxC,YAAM,UAAU,KAAK,SAAS,EAAE,KAAK;AACrC,UAAI,SAAS;AACX,gBAAQ,MAAM,gBAAgB,OAAO,EAAE;AAAA,MACzC;AAAA,IACF,CAAC;AAED,UAAM,YAAY,IAAI,qBAAqB;AAAA,MACzC;AAAA,MACA;AAAA,MACA;AAAA,MACA,KAAK,QAAQ;AAAA,IACf,CAAC;AAED,UAAM,SAAS,IAAI;AAAA,MACjB,EAAE,MAAM,uBAAuB,SAAS,QAAQ;AAAA,MAChD,EAAE,cAAc,CAAC,EAAE;AAAA,IACrB;AAEA,UAAM,OAAO,QAAQ,SAAS;AAE9B,WAAO,IAAI,UAAU,QAAQ,WAAW,QAAQ,cAAc,YAAY;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA,EAKA,aAAqB,YAAY,SAAgD;AAC/E,UAAM,YAAY,IAAI;AAAA,MACpB,IAAI,IAAI,QAAQ,GAAG;AAAA,MACnB;AAAA,QACE,aAAa;AAAA,UACX,SAAS;AAAA,YACP,aAAa,QAAQ;AAAA,UACvB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,SAAS,IAAI;AAAA,MACjB,EAAE,MAAM,uBAAuB,SAAS,QAAQ;AAAA,MAChD,EAAE,cAAc,CAAC,EAAE;AAAA,IACrB;AAEA,UAAM,OAAO,QAAQ,SAAS;AAE9B,WAAO,IAAI,UAAU,QAAQ,WAAW,QAAQ,YAAY;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAiC;AACrC,UAAM,WAAW,MAAM,KAAK,OAAO,UAAU;AAE7C,WAAO,SAAS,MAAM,IAAI,CAAC,UAAU;AAAA,MACnC,MAAM,KAAK;AAAA,MACX,aAAa,KAAK,eAAe;AAAA,MACjC,aAAc,KAAK,eAAe,CAAC;AAAA,IACrC,EAAE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,SAAS,MAAc,MAAoC;AAC/D,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,OAAO,SAAS;AAAA,QAC1C;AAAA,QACA,WAAW;AAAA,MACb,CAAC;AAGD,YAAM,UAAU,SAAS;AACzB,UAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,QAAQ,WAAW,GAAG;AACnD,eAAO,EAAE,SAAS,MAAM,QAAQ,KAAK;AAAA,MACvC;AAEA,YAAM,eAAe,QAAQ,CAAC;AAC9B,UAAI,aAAa,SAAS,QAAQ;AAChC,YAAI;AACF,gBAAM,SAAS,KAAK,MAAM,aAAa,IAAI;AAG3C,cAAI,SAAS,WAAW,OAAO,OAAO;AACpC,mBAAO;AAAA,cACL,SAAS;AAAA,cACT,OAAO,OAAO,SAAS;AAAA,YACzB;AAAA,UACF;AAEA,iBAAO,EAAE,SAAS,MAAM,QAAQ,OAAO;AAAA,QACzC,QAAQ;AAEN,iBAAO,EAAE,SAAS,MAAM,QAAQ,aAAa,KAAK;AAAA,QACpD;AAAA,MACF;AAEA,aAAO,EAAE,SAAS,MAAM,QAAQ,QAAQ;AAAA,IAC1C,SAAS,OAAO;AACd,YAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,aAAO,EAAE,SAAS,OAAO,OAAO,QAAQ;AAAA,IAC1C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,QAAuB;AAC3B,QAAI;AACF,YAAM,KAAK,OAAO,MAAM;AAAA,IAC1B,QAAQ;AAAA,IAER;AAEA,QAAI;AACF,YAAM,KAAK,UAAU,MAAM;AAAA,IAC7B,QAAQ;AAAA,IAER;AAEA,QAAI,KAAK,cAAc;AACrB,WAAK,aAAa,KAAK;AACvB,WAAK,eAAe;AAAA,IACtB;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/ai_assistant/lib/mcp-dev-server.js

@@ -0,0 +1,283 @@
+import { createServer } from "node:http";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { z } from "zod";
+import { getToolRegistry } from "./tool-registry.js";
+import { executeTool } from "./tool-executor.js";
+import { loadAllModuleTools, indexToolsForSearch } from "./tool-loader.js";
+import { authenticateMcpRequest, extractApiKeyFromHeaders, hasRequiredFeatures } from "./auth.js";
+import { jsonSchemaToZod } from "./schema-utils.js";
+const DEFAULT_PORT = 3001;
+const log = (message, ...args) => {
+  console.error(`[MCP Dev] ${message}`, ...args);
+};
+async function getApiKeyFromMcpJson() {
+  const { readFile } = await import("node:fs/promises");
+  const { resolve } = await import("node:path");
+  try {
+    const mcpJsonPath = resolve(process.cwd(), ".mcp.json");
+    const content = await readFile(mcpJsonPath, "utf-8");
+    const config = JSON.parse(content);
+    const serverConfig = config?.mcpServers?.["open-mercato"];
+    return serverConfig?.env?.OPEN_MERCATO_API_KEY ?? serverConfig?.headers?.["x-api-key"];
+  } catch {
+    return void 0;
+  }
+}
+const MAX_BODY_SIZE = 1 * 1024 * 1024;
+async function parseJsonBody(req) {
+  return new Promise((resolve, reject) => {
+    const chunks = [];
+    let totalSize = 0;
+    req.on("data", (chunk) => {
+      totalSize += chunk.length;
+      if (totalSize > MAX_BODY_SIZE) {
+        req.destroy();
+        reject(new Error("Request payload too large"));
+        return;
+      }
+      chunks.push(chunk);
+    });
+    req.on("end", () => {
+      try {
+        const body = Buffer.concat(chunks).toString("utf-8");
+        resolve(body ? JSON.parse(body) : void 0);
+      } catch (error) {
+        reject(error);
+      }
+    });
+    req.on("error", reject);
+  });
+}
+function createDevMcpServer(toolContext, authFeatures, isSuperAdmin, debug) {
+  const server = new McpServer(
+    { name: "open-mercato-mcp-dev", version: "0.1.0" },
+    { capabilities: { tools: {} } }
+  );
+  const registry = getToolRegistry();
+  const tools = Array.from(registry.getTools().values());
+  const accessibleTools = tools.filter(
+    (tool) => hasRequiredFeatures(tool.requiredFeatures, authFeatures, isSuperAdmin)
+  );
+  if (debug) {
+    log(`Registering ${accessibleTools.length}/${tools.length} tools (filtered by API key permissions)`);
+  }
+  for (const tool of accessibleTools) {
+    if (debug) {
+      log(`Registering tool: ${tool.name}`);
+    }
+    let safeSchema;
+    if (tool.inputSchema) {
+      try {
+        const jsonSchema = z.toJSONSchema(tool.inputSchema, { unrepresentable: "any" });
+        const converted = jsonSchemaToZod(jsonSchema);
+        safeSchema = converted.passthrough();
+      } catch (error) {
+        if (debug) {
+          log(`Skipping tool ${tool.name} - schema conversion failed:`, error instanceof Error ? error.message : error);
+        }
+        continue;
+      }
+    } else {
+      safeSchema = z.object({}).passthrough();
+    }
+    try {
+      server.registerTool(
+        tool.name,
+        {
+          description: tool.description,
+          inputSchema: safeSchema
+        },
+        async (args) => {
+          const toolArgs = args ?? {};
+          if (debug) {
+            log(`Calling tool: ${tool.name}`, JSON.stringify(toolArgs));
+          }
+          const result = await executeTool(tool.name, toolArgs, toolContext);
+          if (!result.success) {
+            log(`Tool error: ${result.error}`);
+            return {
+              content: [
+                {
+                  type: "text",
+                  text: JSON.stringify({ error: result.error, code: result.errorCode })
+                }
+              ],
+              isError: true
+            };
+          }
+          return {
+            content: [
+              {
+                type: "text",
+                text: JSON.stringify(result.result, null, 2)
+              }
+            ]
+          };
+        }
+      );
+    } catch (error) {
+      if (debug) {
+        log(`Skipping tool ${tool.name} - registration failed:`, error instanceof Error ? error.message : error);
+      }
+      continue;
+    }
+  }
+  return server;
+}
+async function runMcpDevServer() {
+  const envApiKey = process.env.OPEN_MERCATO_API_KEY || await getApiKeyFromMcpJson();
+  const port = parseInt(process.env.MCP_DEV_PORT ?? "", 10) || DEFAULT_PORT;
+  const debug = process.env.MCP_DEBUG === "true";
+  if (!envApiKey) {
+    log("Error: OPEN_MERCATO_API_KEY environment variable is required");
+    log("");
+    log("To get an API key:");
+    log("  1. Log into Open Mercato as an admin");
+    log("  2. Go to Settings > API Keys");
+    log("  3. Create a new key with the required permissions");
+    log("");
+    log("Then either:");
+    log("  - Set environment variable: export OPEN_MERCATO_API_KEY=omk_xxx...");
+    log("  - Or configure in .mcp.json with headers.x-api-key");
+    process.exit(1);
+  }
+  log("Starting development MCP HTTP server...");
+  const { createRequestContainer } = await import("@open-mercato/shared/lib/di/container");
+  const container = await createRequestContainer();
+  log("Authenticating API key...");
+  const authResult = await authenticateMcpRequest(envApiKey, container);
+  if (!authResult.success) {
+    log(`Authentication failed: ${authResult.error}`);
+    process.exit(1);
+  }
+  log(`Authenticated as: ${authResult.keyName}`);
+  log(`Tenant: ${authResult.tenantId ?? "(global)"}`);
+  log(`Organization: ${authResult.organizationId ?? "(none)"}`);
+  log(`Super admin: ${authResult.isSuperAdmin}`);
+  log(`Features: ${authResult.features.length > 0 ? authResult.features.join(", ") : "(none)"}`);
+  log("Loading tools...");
+  await loadAllModuleTools();
+  try {
+    const searchService = container.resolve("searchService");
+    await indexToolsForSearch(searchService);
+    const { indexApiEndpoints } = await import("./api-endpoint-index.js");
+    const endpointCount = await indexApiEndpoints(searchService);
+    if (endpointCount > 0) {
+      log(`Indexed ${endpointCount} API endpoints for discovery`);
+    }
+  } catch {
+    log("Search indexing skipped (search service not available)");
+  }
+  const toolContext = {
+    tenantId: authResult.tenantId,
+    organizationId: authResult.organizationId,
+    userId: authResult.userId,
+    container,
+    userFeatures: authResult.features,
+    isSuperAdmin: authResult.isSuperAdmin,
+    apiKeySecret: envApiKey
+  };
+  const httpServer = createServer(async (req, res) => {
+    const url = new URL(req.url || "/", `http://localhost:${port}`);
+    if (url.pathname === "/health") {
+      res.writeHead(200, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({
+        status: "ok",
+        mode: "development",
+        tools: getToolRegistry().listToolNames().length,
+        tenant: authResult.tenantId,
+        timestamp: (/* @__PURE__ */ new Date()).toISOString()
+      }));
+      return;
+    }
+    if (url.pathname !== "/mcp") {
+      res.writeHead(404, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Not found" }));
+      return;
+    }
+    const headers = {};
+    for (const [key, value] of Object.entries(req.headers)) {
+      headers[key] = Array.isArray(value) ? value[0] : value;
+    }
+    const providedApiKey = extractApiKeyFromHeaders(headers);
+    if (!providedApiKey) {
+      res.writeHead(401, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "API key required (x-api-key header)" }));
+      return;
+    }
+    if (providedApiKey !== envApiKey) {
+      res.writeHead(401, { "Content-Type": "application/json" });
+      res.end(JSON.stringify({ error: "Invalid API key" }));
+      return;
+    }
+    if (debug) {
+      log(`Authenticated request (${req.method})`);
+    }
+    try {
+      const transport = new StreamableHTTPServerTransport({
+        sessionIdGenerator: void 0,
+        enableJsonResponse: req.method === "POST"
+      });
+      const mcpServer = createDevMcpServer(toolContext, authResult.features, authResult.isSuperAdmin, debug);
+      await mcpServer.connect(transport);
+      if (req.method === "POST") {
+        const body = await parseJsonBody(req);
+        await transport.handleRequest(req, res, body);
+      } else {
+        await transport.handleRequest(req, res);
+      }
+      res.on("finish", () => {
+        transport.close();
+        mcpServer.close();
+        if (debug) {
+          log(`Request completed, cleaned up`);
+        }
+      });
+    } catch (error) {
+      log("Error handling request:", error);
+      if (!res.headersSent) {
+        if (error instanceof Error && error.message === "Request payload too large") {
+          res.writeHead(413, { "Content-Type": "application/json" });
+          res.end(JSON.stringify({ error: "Request payload too large (max 1MB)" }));
+          return;
+        }
+        res.writeHead(500, { "Content-Type": "application/json" });
+        res.end(
+          JSON.stringify({
+            jsonrpc: "2.0",
+            error: {
+              code: -32603,
+              message: `Internal server error: ${error instanceof Error ? error.message : String(error)}`
+            },
+            id: null
+          })
+        );
+      }
+    }
+  });
+  const toolCount = getToolRegistry().listToolNames().length;
+  log(`Tools registered: ${toolCount}`);
+  log(`Endpoint: http://localhost:${port}/mcp`);
+  log(`Health: http://localhost:${port}/health`);
+  log(`Mode: Development (API key auth, no session tokens)`);
+  return new Promise((resolve) => {
+    httpServer.listen(port, () => {
+      log(`Server listening on port ${port}`);
+      log("Ready for Claude Code connections");
+    });
+    const shutdown = async () => {
+      log("Shutting down...");
+      httpServer.close(() => {
+        log("Server closed");
+        resolve();
+      });
+    };
+    process.on("SIGINT", shutdown);
+    process.on("SIGTERM", shutdown);
+  });
+}
+export {
+  runMcpDevServer
+};
+//# sourceMappingURL=mcp-dev-server.js.map

package/dist/modules/ai_assistant/lib/mcp-dev-server.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/ai_assistant/lib/mcp-dev-server.ts"],
+  "sourcesContent": ["import { createServer, type IncomingMessage, type ServerResponse } from 'node:http'\nimport { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'\nimport { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js'\nimport { z, type ZodType } from 'zod'\nimport { getToolRegistry } from './tool-registry'\nimport { executeTool } from './tool-executor'\nimport { loadAllModuleTools, indexToolsForSearch } from './tool-loader'\nimport { authenticateMcpRequest, extractApiKeyFromHeaders, hasRequiredFeatures } from './auth'\nimport { jsonSchemaToZod } from './schema-utils'\nimport type { McpToolContext } from './types'\nimport type { SearchService } from '@open-mercato/search/service'\n\nconst DEFAULT_PORT = 3001\n\nconst log = (message: string, ...args: unknown[]) => {\n  console.error(`[MCP Dev] ${message}`, ...args)\n}\n\nasync function getApiKeyFromMcpJson(): Promise<string | undefined> {\n  const { readFile } = await import('node:fs/promises')\n  const { resolve } = await import('node:path')\n\n  try {\n    const mcpJsonPath = resolve(process.cwd(), '.mcp.json')\n    const content = await readFile(mcpJsonPath, 'utf-8')\n    const config = JSON.parse(content)\n    const serverConfig = config?.mcpServers?.['open-mercato']\n\n    // Check env.OPEN_MERCATO_API_KEY first, then headers.x-api-key (HTTP style)\n    return serverConfig?.env?.OPEN_MERCATO_API_KEY ?? serverConfig?.headers?.['x-api-key']\n  } catch {\n    return undefined\n  }\n}\n\n/**\n * Maximum request body size (1MB).\n */\nconst MAX_BODY_SIZE = 1 * 1024 * 1024\n\n/**\n * Parse JSON body from request with size limit.\n */\nasync function parseJsonBody(req: IncomingMessage): Promise<unknown> {\n  return new Promise((resolve, reject) => {\n    const chunks: Buffer[] = []\n    let totalSize = 0\n\n    req.on('data', (chunk: Buffer) => {\n      totalSize += chunk.length\n      if (totalSize > MAX_BODY_SIZE) {\n        req.destroy()\n        reject(new Error('Request payload too large'))\n        return\n      }\n      chunks.push(chunk)\n    })\n    req.on('end', () => {\n      try {\n        const body = Buffer.concat(chunks).toString('utf-8')\n        resolve(body ? JSON.parse(body) : undefined)\n      } catch (error) {\n        reject(error)\n      }\n    })\n    req.on('error', reject)\n  })\n}\n\n/**\n * Create MCP server with tools pre-authenticated for dev use.\n * No session tokens required - uses API key authentication directly.\n */\nfunction createDevMcpServer(\n  toolContext: McpToolContext,\n  authFeatures: string[],\n  isSuperAdmin: boolean,\n  debug: boolean\n): McpServer {\n  const server = new McpServer(\n    { name: 'open-mercato-mcp-dev', version: '0.1.0' },\n    { capabilities: { tools: {} } }\n  )\n\n  const registry = getToolRegistry()\n  const tools = Array.from(registry.getTools().values())\n\n  // Filter tools based on API key permissions\n  const accessibleTools = tools.filter((tool) =>\n    hasRequiredFeatures(tool.requiredFeatures, authFeatures, isSuperAdmin)\n  )\n\n  if (debug) {\n    log(`Registering ${accessibleTools.length}/${tools.length} tools (filtered by API key permissions)`)\n  }\n\n  for (const tool of accessibleTools) {\n    if (debug) {\n      log(`Registering tool: ${tool.name}`)\n    }\n\n    // Convert Zod schema to safe schema without Date types\n    let safeSchema: ZodType | undefined\n    if (tool.inputSchema) {\n      try {\n        const jsonSchema = z.toJSONSchema(tool.inputSchema, { unrepresentable: 'any' }) as Record<string, unknown>\n        const converted = jsonSchemaToZod(jsonSchema)\n        safeSchema = (converted as z.ZodObject<any>).passthrough()\n      } catch (error) {\n        if (debug) {\n          log(`Skipping tool ${tool.name} - schema conversion failed:`, error instanceof Error ? error.message : error)\n        }\n        continue\n      }\n    } else {\n      safeSchema = z.object({}).passthrough()\n    }\n\n    try {\n      server.registerTool(\n        tool.name,\n        {\n          description: tool.description,\n          inputSchema: safeSchema,\n        },\n        async (args: unknown) => {\n          const toolArgs = (args ?? {}) as Record<string, unknown>\n\n          if (debug) {\n            log(`Calling tool: ${tool.name}`, JSON.stringify(toolArgs))\n          }\n\n          const result = await executeTool(tool.name, toolArgs, toolContext)\n\n          if (!result.success) {\n            log(`Tool error: ${result.error}`)\n            return {\n              content: [\n                {\n                  type: 'text' as const,\n                  text: JSON.stringify({ error: result.error, code: result.errorCode }),\n                },\n              ],\n              isError: true,\n            }\n          }\n\n          return {\n            content: [\n              {\n                type: 'text' as const,\n                text: JSON.stringify(result.result, null, 2),\n              },\n            ],\n          }\n        }\n      )\n    } catch (error) {\n      if (debug) {\n        log(`Skipping tool ${tool.name} - registration failed:`, error instanceof Error ? error.message : error)\n      }\n      continue\n    }\n  }\n\n  return server\n}\n\n/**\n * Development MCP server for Claude Code integration.\n *\n * This server uses HTTP transport and authenticates via the\n * OPEN_MERCATO_API_KEY environment variable, .mcp.json file,\n * or x-api-key header.\n *\n * Usage:\n *   OPEN_MERCATO_API_KEY=omk_xxx yarn mcp:dev\n *\n * Or configure in .mcp.json for Claude Code with HTTP transport.\n */\nexport async function runMcpDevServer(): Promise<void> {\n  const envApiKey = process.env.OPEN_MERCATO_API_KEY || (await getApiKeyFromMcpJson())\n  const port = parseInt(process.env.MCP_DEV_PORT ?? '', 10) || DEFAULT_PORT\n  const debug = process.env.MCP_DEBUG === 'true'\n\n  if (!envApiKey) {\n    log('Error: OPEN_MERCATO_API_KEY environment variable is required')\n    log('')\n    log('To get an API key:')\n    log('  1. Log into Open Mercato as an admin')\n    log('  2. Go to Settings > API Keys')\n    log('  3. Create a new key with the required permissions')\n    log('')\n    log('Then either:')\n    log('  - Set environment variable: export OPEN_MERCATO_API_KEY=omk_xxx...')\n    log('  - Or configure in .mcp.json with headers.x-api-key')\n    process.exit(1)\n  }\n\n  log('Starting development MCP HTTP server...')\n\n  // Create DI container\n  const { createRequestContainer } = await import('@open-mercato/shared/lib/di/container')\n  const container = await createRequestContainer()\n\n  // Authenticate the API key upfront\n  log('Authenticating API key...')\n  const authResult = await authenticateMcpRequest(envApiKey, container)\n\n  if (!authResult.success) {\n    log(`Authentication failed: ${authResult.error}`)\n    process.exit(1)\n  }\n\n  log(`Authenticated as: ${authResult.keyName}`)\n  log(`Tenant: ${authResult.tenantId ?? '(global)'}`)\n  log(`Organization: ${authResult.organizationId ?? '(none)'}`)\n  log(`Super admin: ${authResult.isSuperAdmin}`)\n  log(`Features: ${authResult.features.length > 0 ? authResult.features.join(', ') : '(none)'}`)\n\n  // Load tools\n  log('Loading tools...')\n  await loadAllModuleTools()\n\n  // Index tools for search (if search service available)\n  try {\n    const searchService = container.resolve('searchService') as SearchService\n    await indexToolsForSearch(searchService)\n\n    const { indexApiEndpoints } = await import('./api-endpoint-index')\n    const endpointCount = await indexApiEndpoints(searchService)\n    if (endpointCount > 0) {\n      log(`Indexed ${endpointCount} API endpoints for discovery`)\n    }\n  } catch {\n    log('Search indexing skipped (search service not available)')\n  }\n\n  // Create tool context from auth result\n  const toolContext: McpToolContext = {\n    tenantId: authResult.tenantId,\n    organizationId: authResult.organizationId,\n    userId: authResult.userId,\n    container,\n    userFeatures: authResult.features,\n    isSuperAdmin: authResult.isSuperAdmin,\n    apiKeySecret: envApiKey,\n  }\n\n  const httpServer = createServer(async (req: IncomingMessage, res: ServerResponse) => {\n    const url = new URL(req.url || '/', `http://localhost:${port}`)\n\n    // Health check endpoint\n    if (url.pathname === '/health') {\n      res.writeHead(200, { 'Content-Type': 'application/json' })\n      res.end(JSON.stringify({\n        status: 'ok',\n        mode: 'development',\n        tools: getToolRegistry().listToolNames().length,\n        tenant: authResult.tenantId,\n        timestamp: new Date().toISOString(),\n      }))\n      return\n    }\n\n    if (url.pathname !== '/mcp') {\n      res.writeHead(404, { 'Content-Type': 'application/json' })\n      res.end(JSON.stringify({ error: 'Not found' }))\n      return\n    }\n\n    // Extract and validate API key from header\n    const headers: Record<string, string | undefined> = {}\n    for (const [key, value] of Object.entries(req.headers)) {\n      headers[key] = Array.isArray(value) ? value[0] : value\n    }\n\n    const providedApiKey = extractApiKeyFromHeaders(headers)\n    if (!providedApiKey) {\n      res.writeHead(401, { 'Content-Type': 'application/json' })\n      res.end(JSON.stringify({ error: 'API key required (x-api-key header)' }))\n      return\n    }\n\n    // Validate against the configured API key\n    if (providedApiKey !== envApiKey) {\n      res.writeHead(401, { 'Content-Type': 'application/json' })\n      res.end(JSON.stringify({ error: 'Invalid API key' }))\n      return\n    }\n\n    if (debug) {\n      log(`Authenticated request (${req.method})`)\n    }\n\n    try {\n      // Create stateless transport\n      const transport = new StreamableHTTPServerTransport({\n        sessionIdGenerator: undefined,\n        enableJsonResponse: req.method === 'POST',\n      })\n\n      // Create server with pre-authenticated context (no session tokens needed)\n      const mcpServer = createDevMcpServer(toolContext, authResult.features, authResult.isSuperAdmin, debug)\n\n      // Connect server to transport\n      await mcpServer.connect(transport)\n\n      // Handle the request\n      if (req.method === 'POST') {\n        const body = await parseJsonBody(req)\n        await transport.handleRequest(req, res, body)\n      } else {\n        await transport.handleRequest(req, res)\n      }\n\n      // Cleanup after response finishes\n      res.on('finish', () => {\n        transport.close()\n        mcpServer.close()\n        if (debug) {\n          log(`Request completed, cleaned up`)\n        }\n      })\n    } catch (error) {\n      log('Error handling request:', error)\n      if (!res.headersSent) {\n        if (error instanceof Error && error.message === 'Request payload too large') {\n          res.writeHead(413, { 'Content-Type': 'application/json' })\n          res.end(JSON.stringify({ error: 'Request payload too large (max 1MB)' }))\n          return\n        }\n\n        res.writeHead(500, { 'Content-Type': 'application/json' })\n        res.end(\n          JSON.stringify({\n            jsonrpc: '2.0',\n            error: {\n              code: -32603,\n              message: `Internal server error: ${error instanceof Error ? error.message : String(error)}`,\n            },\n            id: null,\n          })\n        )\n      }\n    }\n  })\n\n  const toolCount = getToolRegistry().listToolNames().length\n\n  log(`Tools registered: ${toolCount}`)\n  log(`Endpoint: http://localhost:${port}/mcp`)\n  log(`Health: http://localhost:${port}/health`)\n  log(`Mode: Development (API key auth, no session tokens)`)\n\n  return new Promise<void>((resolve) => {\n    httpServer.listen(port, () => {\n      log(`Server listening on port ${port}`)\n      log('Ready for Claude Code connections')\n    })\n\n    const shutdown = async () => {\n      log('Shutting down...')\n      httpServer.close(() => {\n        log('Server closed')\n        resolve()\n      })\n    }\n\n    process.on('SIGINT', shutdown)\n    process.on('SIGTERM', shutdown)\n  })\n}\n"],
+  "mappings": "AAAA,SAAS,oBAA+D;AACxE,SAAS,iBAAiB;AAC1B,SAAS,qCAAqC;AAC9C,SAAS,SAAuB;AAChC,SAAS,uBAAuB;AAChC,SAAS,mBAAmB;AAC5B,SAAS,oBAAoB,2BAA2B;AACxD,SAAS,wBAAwB,0BAA0B,2BAA2B;AACtF,SAAS,uBAAuB;AAIhC,MAAM,eAAe;AAErB,MAAM,MAAM,CAAC,YAAoB,SAAoB;AACnD,UAAQ,MAAM,aAAa,OAAO,IAAI,GAAG,IAAI;AAC/C;AAEA,eAAe,uBAAoD;AACjE,QAAM,EAAE,SAAS,IAAI,MAAM,OAAO,kBAAkB;AACpD,QAAM,EAAE,QAAQ,IAAI,MAAM,OAAO,WAAW;AAE5C,MAAI;AACF,UAAM,cAAc,QAAQ,QAAQ,IAAI,GAAG,WAAW;AACtD,UAAM,UAAU,MAAM,SAAS,aAAa,OAAO;AACnD,UAAM,SAAS,KAAK,MAAM,OAAO;AACjC,UAAM,eAAe,QAAQ,aAAa,cAAc;AAGxD,WAAO,cAAc,KAAK,wBAAwB,cAAc,UAAU,WAAW;AAAA,EACvF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAKA,MAAM,gBAAgB,IAAI,OAAO;AAKjC,eAAe,cAAc,KAAwC;AACnE,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,SAAmB,CAAC;AAC1B,QAAI,YAAY;AAEhB,QAAI,GAAG,QAAQ,CAAC,UAAkB;AAChC,mBAAa,MAAM;AACnB,UAAI,YAAY,eAAe;AAC7B,YAAI,QAAQ;AACZ,eAAO,IAAI,MAAM,2BAA2B,CAAC;AAC7C;AAAA,MACF;AACA,aAAO,KAAK,KAAK;AAAA,IACnB,CAAC;AACD,QAAI,GAAG,OAAO,MAAM;AAClB,UAAI;AACF,cAAM,OAAO,OAAO,OAAO,MAAM,EAAE,SAAS,OAAO;AACnD,gBAAQ,OAAO,KAAK,MAAM,IAAI,IAAI,MAAS;AAAA,MAC7C,SAAS,OAAO;AACd,eAAO,KAAK;AAAA,MACd;AAAA,IACF,CAAC;AACD,QAAI,GAAG,SAAS,MAAM;AAAA,EACxB,CAAC;AACH;AAMA,SAAS,mBACP,aACA,cACA,cACA,OACW;AACX,QAAM,SAAS,IAAI;AAAA,IACjB,EAAE,MAAM,wBAAwB,SAAS,QAAQ;AAAA,IACjD,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,EAAE;AAAA,EAChC;AAEA,QAAM,WAAW,gBAAgB;AACjC,QAAM,QAAQ,MAAM,KAAK,SAAS,SAAS,EAAE,OAAO,CAAC;AAGrD,QAAM,kBAAkB,MAAM;AAAA,IAAO,CAAC,SACpC,oBAAoB,KAAK,kBAAkB,cAAc,YAAY;AAAA,EACvE;AAEA,MAAI,OAAO;AACT,QAAI,eAAe,gBAAgB,MAAM,IAAI,MAAM,MAAM,0CAA0C;AAAA,EACrG;AAEA,aAAW,QAAQ,iBAAiB;AAClC,QAAI,OAAO;AACT,UAAI,qBAAqB,KAAK,IAAI,EAAE;AAAA,IACtC;AAGA,QAAI;AACJ,QAAI,KAAK,aAAa;AACpB,UAAI;AACF,cAAM,aAAa,EAAE,aAAa,KAAK,aAAa,EAAE,iBAAiB,MAAM,CAAC;AAC9E,cAAM,YAAY,gBAAgB,UAAU;AAC5C,qBAAc,UAA+B,YAAY;AAAA,MAC3D,SAAS,OAAO;AACd,YAAI,OAAO;AACT,cAAI,iBAAiB,KAAK,IAAI,gCAAgC,iBAAiB,QAAQ,MAAM,UAAU,KAAK;AAAA,QAC9G;AACA;AAAA,MACF;AAAA,IACF,OAAO;AACL,mBAAa,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY;AAAA,IACxC;AAEA,QAAI;AACF,aAAO;AAAA,QACL,KAAK;AAAA,QACL;AAAA,UACE,aAAa,KAAK;AAAA,UAClB,aAAa;AAAA,QACf;AAAA,QACA,OAAO,SAAkB;AACvB,gBAAM,WAAY,QAAQ,CAAC;AAE3B,cAAI,OAAO;AACT,gBAAI,iBAAiB,KAAK,IAAI,IAAI,KAAK,UAAU,QAAQ,CAAC;AAAA,UAC5D;AAEA,gBAAM,SAAS,MAAM,YAAY,KAAK,MAAM,UAAU,WAAW;AAEjE,cAAI,CAAC,OAAO,SAAS;AACnB,gBAAI,eAAe,OAAO,KAAK,EAAE;AACjC,mBAAO;AAAA,cACL,SAAS;AAAA,gBACP;AAAA,kBACE,MAAM;AAAA,kBACN,MAAM,KAAK,UAAU,EAAE,OAAO,OAAO,OAAO,MAAM,OAAO,UAAU,CAAC;AAAA,gBACtE;AAAA,cACF;AAAA,cACA,SAAS;AAAA,YACX;AAAA,UACF;AAEA,iBAAO;AAAA,YACL,SAAS;AAAA,cACP;AAAA,gBACE,MAAM;AAAA,gBACN,MAAM,KAAK,UAAU,OAAO,QAAQ,MAAM,CAAC;AAAA,cAC7C;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,OAAO;AACd,UAAI,OAAO;AACT,YAAI,iBAAiB,KAAK,IAAI,2BAA2B,iBAAiB,QAAQ,MAAM,UAAU,KAAK;AAAA,MACzG;AACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAcA,eAAsB,kBAAiC;AACrD,QAAM,YAAY,QAAQ,IAAI,wBAAyB,MAAM,qBAAqB;AAClF,QAAM,OAAO,SAAS,QAAQ,IAAI,gBAAgB,IAAI,EAAE,KAAK;AAC7D,QAAM,QAAQ,QAAQ,IAAI,cAAc;AAExC,MAAI,CAAC,WAAW;AACd,QAAI,8DAA8D;AAClE,QAAI,EAAE;AACN,QAAI,oBAAoB;AACxB,QAAI,wCAAwC;AAC5C,QAAI,gCAAgC;AACpC,QAAI,qDAAqD;AACzD,QAAI,EAAE;AACN,QAAI,cAAc;AAClB,QAAI,sEAAsE;AAC1E,QAAI,sDAAsD;AAC1D,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI,yCAAyC;AAG7C,QAAM,EAAE,uBAAuB,IAAI,MAAM,OAAO,uCAAuC;AACvF,QAAM,YAAY,MAAM,uBAAuB;AAG/C,MAAI,2BAA2B;AAC/B,QAAM,aAAa,MAAM,uBAAuB,WAAW,SAAS;AAEpE,MAAI,CAAC,WAAW,SAAS;AACvB,QAAI,0BAA0B,WAAW,KAAK,EAAE;AAChD,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI,qBAAqB,WAAW,OAAO,EAAE;AAC7C,MAAI,WAAW,WAAW,YAAY,UAAU,EAAE;AAClD,MAAI,iBAAiB,WAAW,kBAAkB,QAAQ,EAAE;AAC5D,MAAI,gBAAgB,WAAW,YAAY,EAAE;AAC7C,MAAI,aAAa,WAAW,SAAS,SAAS,IAAI,WAAW,SAAS,KAAK,IAAI,IAAI,QAAQ,EAAE;AAG7F,MAAI,kBAAkB;AACtB,QAAM,mBAAmB;AAGzB,MAAI;AACF,UAAM,gBAAgB,UAAU,QAAQ,eAAe;AACvD,UAAM,oBAAoB,aAAa;AAEvC,UAAM,EAAE,kBAAkB,IAAI,MAAM,OAAO,sBAAsB;AACjE,UAAM,gBAAgB,MAAM,kBAAkB,aAAa;AAC3D,QAAI,gBAAgB,GAAG;AACrB,UAAI,WAAW,aAAa,8BAA8B;AAAA,IAC5D;AAAA,EACF,QAAQ;AACN,QAAI,wDAAwD;AAAA,EAC9D;AAGA,QAAM,cAA8B;AAAA,IAClC,UAAU,WAAW;AAAA,IACrB,gBAAgB,WAAW;AAAA,IAC3B,QAAQ,WAAW;AAAA,IACnB;AAAA,IACA,cAAc,WAAW;AAAA,IACzB,cAAc,WAAW;AAAA,IACzB,cAAc;AAAA,EAChB;AAEA,QAAM,aAAa,aAAa,OAAO,KAAsB,QAAwB;AACnF,UAAM,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,oBAAoB,IAAI,EAAE;AAG9D,QAAI,IAAI,aAAa,WAAW;AAC9B,UAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;AACzD,UAAI,IAAI,KAAK,UAAU;AAAA,QACrB,QAAQ;AAAA,QACR,MAAM;AAAA,QACN,OAAO,gBAAgB,EAAE,cAAc,EAAE;AAAA,QACzC,QAAQ,WAAW;AAAA,QACnB,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,MACpC,CAAC,CAAC;AACF;AAAA,IACF;AAEA,QAAI,IAAI,aAAa,QAAQ;AAC3B,UAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;AACzD,UAAI,IAAI,KAAK,UAAU,EAAE,OAAO,YAAY,CAAC,CAAC;AAC9C;AAAA,IACF;AAGA,UAAM,UAA8C,CAAC;AACrD,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAAI,OAAO,GAAG;AACtD,cAAQ,GAAG,IAAI,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAAA,IACnD;AAEA,UAAM,iBAAiB,yBAAyB,OAAO;AACvD,QAAI,CAAC,gBAAgB;AACnB,UAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;AACzD,UAAI,IAAI,KAAK,UAAU,EAAE,OAAO,sCAAsC,CAAC,CAAC;AACxE;AAAA,IACF;AAGA,QAAI,mBAAmB,WAAW;AAChC,UAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;AACzD,UAAI,IAAI,KAAK,UAAU,EAAE,OAAO,kBAAkB,CAAC,CAAC;AACpD;AAAA,IACF;AAEA,QAAI,OAAO;AACT,UAAI,0BAA0B,IAAI,MAAM,GAAG;AAAA,IAC7C;AAEA,QAAI;AAEF,YAAM,YAAY,IAAI,8BAA8B;AAAA,QAClD,oBAAoB;AAAA,QACpB,oBAAoB,IAAI,WAAW;AAAA,MACrC,CAAC;AAGD,YAAM,YAAY,mBAAmB,aAAa,WAAW,UAAU,WAAW,cAAc,KAAK;AAGrG,YAAM,UAAU,QAAQ,SAAS;AAGjC,UAAI,IAAI,WAAW,QAAQ;AACzB,cAAM,OAAO,MAAM,cAAc,GAAG;AACpC,cAAM,UAAU,cAAc,KAAK,KAAK,IAAI;AAAA,MAC9C,OAAO;AACL,cAAM,UAAU,cAAc,KAAK,GAAG;AAAA,MACxC;AAGA,UAAI,GAAG,UAAU,MAAM;AACrB,kBAAU,MAAM;AAChB,kBAAU,MAAM;AAChB,YAAI,OAAO;AACT,cAAI,+BAA+B;AAAA,QACrC;AAAA,MACF,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,2BAA2B,KAAK;AACpC,UAAI,CAAC,IAAI,aAAa;AACpB,YAAI,iBAAiB,SAAS,MAAM,YAAY,6BAA6B;AAC3E,cAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;AACzD,cAAI,IAAI,KAAK,UAAU,EAAE,OAAO,sCAAsC,CAAC,CAAC;AACxE;AAAA,QACF;AAEA,YAAI,UAAU,KAAK,EAAE,gBAAgB,mBAAmB,CAAC;AACzD,YAAI;AAAA,UACF,KAAK,UAAU;AAAA,YACb,SAAS;AAAA,YACT,OAAO;AAAA,cACL,MAAM;AAAA,cACN,SAAS,0BAA0B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,YAC3F;AAAA,YACA,IAAI;AAAA,UACN,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AAED,QAAM,YAAY,gBAAgB,EAAE,cAAc,EAAE;AAEpD,MAAI,qBAAqB,SAAS,EAAE;AACpC,MAAI,8BAA8B,IAAI,MAAM;AAC5C,MAAI,4BAA4B,IAAI,SAAS;AAC7C,MAAI,qDAAqD;AAEzD,SAAO,IAAI,QAAc,CAAC,YAAY;AACpC,eAAW,OAAO,MAAM,MAAM;AAC5B,UAAI,4BAA4B,IAAI,EAAE;AACtC,UAAI,mCAAmC;AAAA,IACzC,CAAC;AAED,UAAM,WAAW,YAAY;AAC3B,UAAI,kBAAkB;AACtB,iBAAW,MAAM,MAAM;AACrB,YAAI,eAAe;AACnB,gBAAQ;AAAA,MACV,CAAC;AAAA,IACH;AAEA,YAAQ,GAAG,UAAU,QAAQ;AAC7B,YAAQ,GAAG,WAAW,QAAQ;AAAA,EAChC,CAAC;AACH;",
+  "names": []
+}

package/dist/modules/ai_assistant/lib/mcp-server-config.js

@@ -0,0 +1,160 @@
+const MCP_SERVERS_CONFIG_KEY = "mcp_servers";
+async function getMcpServerConfigs(resolver) {
+  let service;
+  try {
+    service = resolver.resolve("moduleConfigService");
+  } catch {
+    return [];
+  }
+  try {
+    const value = await service.getValue(
+      "ai_assistant",
+      MCP_SERVERS_CONFIG_KEY,
+      { defaultValue: [] }
+    );
+    return value ?? [];
+  } catch {
+    return [];
+  }
+}
+async function getMcpServerConfig(resolver, serverId) {
+  const configs = await getMcpServerConfigs(resolver);
+  return configs.find((c) => c.id === serverId) ?? null;
+}
+async function getEnabledMcpServerConfigs(resolver) {
+  const configs = await getMcpServerConfigs(resolver);
+  return configs.filter((c) => c.enabled);
+}
+async function saveMcpServerConfig(resolver, config) {
+  let service;
+  try {
+    service = resolver.resolve("moduleConfigService");
+  } catch {
+    throw new Error("Configuration service unavailable");
+  }
+  const configs = await getMcpServerConfigs(resolver);
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  let updatedConfigs;
+  let savedConfig;
+  if (config.id) {
+    const existingIndex = configs.findIndex((c) => c.id === config.id);
+    if (existingIndex === -1) {
+      throw new Error(`MCP server config not found: ${config.id}`);
+    }
+    savedConfig = {
+      ...configs[existingIndex],
+      ...config,
+      id: config.id,
+      updatedAt: now
+    };
+    updatedConfigs = [
+      ...configs.slice(0, existingIndex),
+      savedConfig,
+      ...configs.slice(existingIndex + 1)
+    ];
+  } else {
+    savedConfig = {
+      ...config,
+      id: generateId(),
+      createdAt: now,
+      updatedAt: now
+    };
+    updatedConfigs = [...configs, savedConfig];
+  }
+  await service.setValue("ai_assistant", MCP_SERVERS_CONFIG_KEY, updatedConfigs);
+  return savedConfig;
+}
+async function updateMcpServerConfig(resolver, serverId, updates) {
+  let service;
+  try {
+    service = resolver.resolve("moduleConfigService");
+  } catch {
+    throw new Error("Configuration service unavailable");
+  }
+  const configs = await getMcpServerConfigs(resolver);
+  const existingIndex = configs.findIndex((c) => c.id === serverId);
+  if (existingIndex === -1) {
+    throw new Error(`MCP server config not found: ${serverId}`);
+  }
+  const updatedConfig = {
+    ...configs[existingIndex],
+    ...updates,
+    id: serverId,
+    // Ensure ID is preserved
+    updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  const updatedConfigs = [
+    ...configs.slice(0, existingIndex),
+    updatedConfig,
+    ...configs.slice(existingIndex + 1)
+  ];
+  await service.setValue("ai_assistant", MCP_SERVERS_CONFIG_KEY, updatedConfigs);
+  return updatedConfig;
+}
+async function deleteMcpServerConfig(resolver, serverId) {
+  let service;
+  try {
+    service = resolver.resolve("moduleConfigService");
+  } catch {
+    throw new Error("Configuration service unavailable");
+  }
+  const configs = await getMcpServerConfigs(resolver);
+  const existingIndex = configs.findIndex((c) => c.id === serverId);
+  if (existingIndex === -1) {
+    return false;
+  }
+  const updatedConfigs = [
+    ...configs.slice(0, existingIndex),
+    ...configs.slice(existingIndex + 1)
+  ];
+  await service.setValue("ai_assistant", MCP_SERVERS_CONFIG_KEY, updatedConfigs);
+  return true;
+}
+async function toggleMcpServerEnabled(resolver, serverId) {
+  const config = await getMcpServerConfig(resolver, serverId);
+  if (!config) {
+    throw new Error(`MCP server config not found: ${serverId}`);
+  }
+  return updateMcpServerConfig(resolver, serverId, {
+    enabled: !config.enabled
+  });
+}
+function generateId() {
+  return `mcp_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 9)}`;
+}
+function validateMcpServerConfig(config) {
+  if (!config.name?.trim()) {
+    return { valid: false, error: "Name is required" };
+  }
+  if (!["http", "stdio"].includes(config.type)) {
+    return { valid: false, error: 'Type must be "http" or "stdio"' };
+  }
+  if (config.type === "http") {
+    if (!config.url?.trim()) {
+      return { valid: false, error: "URL is required for HTTP servers" };
+    }
+    try {
+      new URL(config.url);
+    } catch {
+      return { valid: false, error: "Invalid URL format" };
+    }
+  }
+  if (config.type === "stdio") {
+    if (!config.command?.trim()) {
+      return { valid: false, error: "Command is required for stdio servers" };
+    }
+  }
+  return { valid: true };
+}
+export {
+  MCP_SERVERS_CONFIG_KEY,
+  deleteMcpServerConfig,
+  getEnabledMcpServerConfigs,
+  getMcpServerConfig,
+  getMcpServerConfigs,
+  saveMcpServerConfig,
+  toggleMcpServerEnabled,
+  updateMcpServerConfig,
+  validateMcpServerConfig
+};
+//# sourceMappingURL=mcp-server-config.js.map