@rekog/mcp-nest 1.9.10 → 2.0.0-alpha.0

package/dist/mcp/transport/transports/streamable-http.transport.js

@@ -0,0 +1,216 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StreamableHttpTransport = void 0;
+const crypto_1 = require("crypto");
+const streamableHttp_js_1 = require("@modelcontextprotocol/sdk/server/streamableHttp.js");
+const http_adapter_factory_1 = require("../../adapters/http-adapter.factory");
+const read_body_1 = require("./read-body");
+class StreamableHttpTransport {
+    constructor(options = {}) {
+        this.kind = 'streamable-http';
+        this.handlersClaimed = false;
+        this.transports = {};
+        this.servers = {};
+        this.endpoint = ensureLeadingSlash(options.endpoint ?? 'mcp');
+        this.endpointExplicit = options.endpoint !== undefined;
+        this.statefulMode = options.statefulMode ?? false;
+        this.enableJsonResponse =
+            options.enableJsonResponse ?? !this.statefulMode;
+        this.sessionIdGenerator =
+            options.sessionIdGenerator ?? (() => (0, crypto_1.randomUUID)());
+        this.mountOption = options.mount;
+    }
+    get httpHandlers() {
+        this.handlersClaimed = true;
+        return {
+            handlePost: (req, res) => this.handlePost(req, res),
+            handleGet: (req, res) => this.handleGet(req, res),
+            handleDelete: (req, res) => this.handleDelete(req, res),
+        };
+    }
+    start(ctx) {
+        this.ctx = ctx;
+        const shouldMount = this.mountOption ?? !this.handlersClaimed;
+        if (!shouldMount) {
+            if (this.endpointExplicit) {
+                ctx.logger.warn(`StreamableHttpTransport: \`endpoint: '${this.endpoint}'\` is ignored because a controller owns the route. Set the path on your @Controller(...) decorator instead (it also picks up global prefix and versioning).`);
+            }
+            ctx.logger.log(`MCP streamable-http transport ready (${this.statefulMode ? 'stateful' : 'stateless'}, self-mount disabled — a controller owns the route)`);
+            return;
+        }
+        if (!ctx.httpAdapter) {
+            throw new Error('StreamableHttpTransport requires an HTTP adapter to self-mount. Pass it via new McpStrategy({ httpAdapter }) or strategy.setHttpAdapter(app.getHttpAdapter()) — or mount your own controller (provide MCP_HTTP_HANDLER with transport.httpHandlers).');
+        }
+        const adapter = ctx.httpAdapter;
+        adapter.post(this.endpoint, (req, res) => this.handlePost(req, res));
+        adapter.get(this.endpoint, (req, res) => this.handleGet(req, res));
+        adapter.delete(this.endpoint, (req, res) => this.handleDelete(req, res));
+        ctx.logger.log(`MCP streamable-http transport mounted at ${this.endpoint} (${this.statefulMode ? 'stateful' : 'stateless'})`);
+    }
+    async close() {
+        for (const sessionId of Object.keys(this.transports)) {
+            await this.cleanupSession(sessionId);
+        }
+    }
+    async handlePost(req, res) {
+        const adapter = http_adapter_factory_1.HttpAdapterFactory.getAdapter(req, res);
+        const adaptedReq = adapter.adaptRequest(req);
+        const adaptedRes = adapter.adaptResponse(res);
+        const body = await (0, read_body_1.readJsonBody)(adaptedReq);
+        try {
+            if (this.statefulMode) {
+                await this.handleStateful(adaptedReq, adaptedRes, body);
+            }
+            else {
+                await this.handleStateless(adaptedReq, adaptedRes, body);
+            }
+        }
+        catch (error) {
+            this.ctx.logger.error('Error handling MCP request', error);
+            if (!adaptedRes.headersSent) {
+                adaptedRes.status(500).json({
+                    jsonrpc: '2.0',
+                    error: { code: -32603, message: 'Internal server error' },
+                    id: null,
+                });
+            }
+        }
+    }
+    async handleStateless(req, res, body) {
+        const transport = new streamableHttp_js_1.StreamableHTTPServerTransport({
+            sessionIdGenerator: undefined,
+            enableJsonResponse: this.enableJsonResponse,
+        });
+        const server = this.ctx.createServer();
+        await server.connect(transport);
+        this.ctx.bindRequestHandlers(server, { transport: this.kind, stateless: true }, req.raw);
+        res.raw.on('finish', () => {
+            void transport.close();
+            void server.close();
+        });
+        await transport.handleRequest(req.raw, res.raw, body);
+    }
+    async handleStateful(req, res, body) {
+        const sessionId = req.headers['mcp-session-id'];
+        if (!sessionId && isInitializeRequest(body)) {
+            const server = this.ctx.createServer();
+            const transport = new streamableHttp_js_1.StreamableHTTPServerTransport({
+                sessionIdGenerator: this.sessionIdGenerator,
+                enableJsonResponse: this.enableJsonResponse,
+                onsessioninitialized: (sid) => {
+                    this.transports[sid] = transport;
+                    this.servers[sid] = server;
+                },
+                onsessionclosed: (sid) => {
+                    void this.cleanupSession(sid);
+                },
+            });
+            await server.connect(transport);
+            this.ctx.bindRequestHandlers(server, { transport: this.kind, stateless: false }, req.raw);
+            await transport.handleRequest(req.raw, res.raw, body);
+            return;
+        }
+        if (sessionId) {
+            const transport = this.transports[sessionId];
+            const server = this.servers[sessionId];
+            if (!transport || !server) {
+                res.status(404).json({
+                    jsonrpc: '2.0',
+                    error: { code: -32001, message: 'Session not found' },
+                    id: null,
+                });
+                return;
+            }
+            this.ctx.bindRequestHandlers(server, { transport: this.kind, stateless: false, sessionId }, req.raw);
+            await transport.handleRequest(req.raw, res.raw, body);
+            return;
+        }
+        res.status(400).json({
+            jsonrpc: '2.0',
+            error: {
+                code: -32000,
+                message: 'Bad Request: Mcp-Session-Id header is required',
+            },
+            id: null,
+        });
+    }
+    async handleGet(req, res) {
+        const adapter = http_adapter_factory_1.HttpAdapterFactory.getAdapter(req, res);
+        const adaptedReq = adapter.adaptRequest(req);
+        const adaptedRes = adapter.adaptResponse(res);
+        if (!this.statefulMode) {
+            adaptedRes.status(405).json({
+                jsonrpc: '2.0',
+                error: {
+                    code: -32000,
+                    message: 'Method not allowed in stateless mode',
+                },
+                id: null,
+            });
+            return;
+        }
+        const sessionId = adaptedReq.headers['mcp-session-id'];
+        const transport = sessionId ? this.transports[sessionId] : undefined;
+        if (!transport) {
+            adaptedRes.status(404).json({
+                jsonrpc: '2.0',
+                error: { code: -32001, message: 'Session not found' },
+                id: null,
+            });
+            return;
+        }
+        await transport.handleRequest(adaptedReq.raw, adaptedRes.raw);
+    }
+    async handleDelete(req, res) {
+        const adapter = http_adapter_factory_1.HttpAdapterFactory.getAdapter(req, res);
+        const adaptedReq = adapter.adaptRequest(req);
+        const adaptedRes = adapter.adaptResponse(res);
+        if (!this.statefulMode) {
+            adaptedRes.status(405).json({
+                jsonrpc: '2.0',
+                error: {
+                    code: -32000,
+                    message: 'Method not allowed in stateless mode',
+                },
+                id: null,
+            });
+            return;
+        }
+        const sessionId = adaptedReq.headers['mcp-session-id'];
+        const transport = sessionId ? this.transports[sessionId] : undefined;
+        if (!transport) {
+            adaptedRes.status(404).json({
+                jsonrpc: '2.0',
+                error: { code: -32001, message: 'Session not found' },
+                id: null,
+            });
+            return;
+        }
+        await transport.handleRequest(adaptedReq.raw, adaptedRes.raw);
+    }
+    async cleanupSession(sessionId) {
+        const transport = this.transports[sessionId];
+        const server = this.servers[sessionId];
+        delete this.transports[sessionId];
+        delete this.servers[sessionId];
+        try {
+            await transport?.close();
+            await server?.close();
+        }
+        catch {
+        }
+    }
+}
+exports.StreamableHttpTransport = StreamableHttpTransport;
+function isInitializeRequest(body) {
+    const isInit = (msg) => typeof msg === 'object' &&
+        msg !== null &&
+        'method' in msg &&
+        msg.method === 'initialize';
+    return Array.isArray(body) ? body.some(isInit) : isInit(body);
+}
+function ensureLeadingSlash(endpoint) {
+    const trimmed = endpoint.trim();
+    return trimmed.startsWith('/') ? trimmed : `/${trimmed}`;
+}
+//# sourceMappingURL=streamable-http.transport.js.map

package/dist/mcp/transport/transports/streamable-http.transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamable-http.transport.js","sourceRoot":"","sources":["../../../../src/mcp/transport/transports/streamable-http.transport.ts"],"names":[],"mappings":";;;AAAA,mCAAoC;AAEpC,0FAAmG;AACnG,8EAAyE;AAIzE,2CAA2C;AAwE3C,MAAa,uBAAuB;IAmBlC,YAAY,UAA0C,EAAE;QAlB/C,SAAI,GAAG,iBAA0B,CAAC;QAWnC,oBAAe,GAAG,KAAK,CAAC;QAEf,eAAU,GACzB,EAAE,CAAC;QACY,YAAO,GAA8B,EAAE,CAAC;QAIvD,IAAI,CAAC,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC;QAC9D,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC;QACvD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC;QAElD,IAAI,CAAC,kBAAkB;YACrB,OAAO,CAAC,kBAAkB,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;QACnD,IAAI,CAAC,kBAAkB;YACrB,OAAO,CAAC,kBAAkB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAA,mBAAU,GAAE,CAAC,CAAC;QACrD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IACnC,CAAC;IAcD,IAAI,YAAY;QACd,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;QAC5B,OAAO;YACL,UAAU,EAAE,CAAC,GAAY,EAAE,GAAY,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;YACrE,SAAS,EAAE,CAAC,GAAY,EAAE,GAAY,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;YACnE,YAAY,EAAE,CAAC,GAAY,EAAE,GAAY,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC;SAC1E,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAwB;QAI5B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QAIf,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;QAE9D,IAAI,CAAC,WAAW,EAAE,CAAC;YAGjB,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC1B,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,yCAAyC,IAAI,CAAC,QAAQ,8JAA8J,CACrN,CAAC;YACJ,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CACZ,wCAAwC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,sDAAsD,CAC3I,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,sPAAsP,CACvP,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,CAAC,WAInB,CAAC;QAEF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACrE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACnE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAEzE,GAAG,CAAC,MAAM,CAAC,GAAG,CACZ,4CAA4C,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,GAAG,CAC9G,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK;QACT,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,GAAQ,EAAE,GAAQ;QACzC,MAAM,OAAO,GAAG,yCAAkB,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAM,IAAA,wBAAY,EAAC,UAAU,CAAC,CAAC;QAE5C,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAc,CAAC,CAAC;YACrE,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;gBAC5B,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC1B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,uBAAuB,EAAE;oBACzD,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,GAEC,EACD,GAAiB,EACjB,IAAa;QAEb,MAAM,SAAS,GAAG,IAAI,iDAA6B,CAAC;YAClD,kBAAkB,EAAE,SAAS;YAC7B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;SAC5C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAI,CAAC,YAAY,EAAE,CAAC;QACxC,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,CAAC,GAAI,CAAC,mBAAmB,CAC3B,MAAM,EACN,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EACzC,GAAG,CAAC,GAAG,CACR,CAAC;QAEF,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACxB,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,GAEC,EACD,GAAiB,EACjB,IAAa;QAEb,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAuB,CAAC;QAEtE,IAAI,CAAC,SAAS,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAI,CAAC,YAAY,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,IAAI,iDAA6B,CAAC;gBAClD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;gBAC3C,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;gBAC3C,oBAAoB,EAAE,CAAC,GAAW,EAAE,EAAE;oBACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;oBACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;gBAC7B,CAAC;gBACD,eAAe,EAAE,CAAC,GAAW,EAAE,EAAE;oBAC/B,KAAK,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;gBAChC,CAAC;aACF,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAChC,IAAI,CAAC,GAAI,CAAC,mBAAmB,CAC3B,MAAM,EACN,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,EAC1C,GAAG,CAAC,GAAG,CACR,CAAC;YACF,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC1B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE;oBACrD,EAAE,EAAE,IAAI;iBACT,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,CAAC,GAAI,CAAC,mBAAmB,CAC3B,MAAM,EACN,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,EACrD,GAAG,CAAC,GAAG,CACR,CAAC;YACF,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;QAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,CAAC,KAAK;gBACZ,OAAO,EAAE,gDAAgD;aAC1D;YACD,EAAE,EAAE,IAAI;SACT,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,GAAQ,EAAE,GAAQ;QACxC,MAAM,OAAO,GAAG,yCAAkB,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAE9C,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,sCAAsC;iBAChD;gBACD,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAExC,CAAC;QACd,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE;gBACrD,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;IAChE,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,GAAQ,EAAE,GAAQ;QAC3C,MAAM,OAAO,GAAG,yCAAkB,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAE9C,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,CAAC,KAAK;oBACZ,OAAO,EAAE,sCAAsC;iBAChD;gBACD,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,gBAAgB,CAExC,CAAC;QACd,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE;gBACrD,EAAE,EAAE,IAAI;aACT,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;IAChE,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,SAAiB;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,SAAS,EAAE,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;QAET,CAAC;IACH,CAAC;CACF;AAlSD,0DAkSC;AAED,SAAS,mBAAmB,CAAC,IAAa;IACxC,MAAM,MAAM,GAAG,CAAC,GAAY,EAAW,EAAE,CACvC,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,QAAQ,IAAI,GAAG;QACd,GAA4B,CAAC,MAAM,KAAK,YAAY,CAAC;IACxD,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;AAC3D,CAAC","sourcesContent":["import { randomUUID } from 'crypto';\nimport { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';\nimport { HttpAdapterFactory } from '../../adapters/http-adapter.factory';\nimport { HttpResponse } from '../../interfaces/http-adapter.interface';\nimport { McpTransport, McpTransportContext } from '../mcp-transport.interface';\nimport type { McpHttpHandler } from '../mcp-http-handler';\nimport { readJsonBody } from './read-body';\n\nexport interface StreamableHttpTransportOptions {\n  /**\n   * Path of the transport's **self-mounted** route.\n   *\n   * This ONLY applies when the transport self-mounts (no controller owns the\n   * route). A self-mounted route is registered directly on the HTTP adapter,\n   * OUTSIDE Nest's routing pipeline — so it does not pick up\n   * `app.setGlobalPrefix(...)`, URI versioning, guards, or interceptors. Use\n   * `endpoint` for a trivial path change on a no-auth server.\n   *\n   * When you bring your own controller, the path comes from your\n   * `@Controller(...)` decorator (and global prefix / versioning apply normally)\n   * — `endpoint` is ignored. The transport logs a warning if you set it anyway.\n   *\n   * @default '/mcp'\n   */\n  endpoint?: string;\n  /**\n   * Enable session management (a long-lived MCP server per session, identified\n   * by the `mcp-session-id` header, with `GET`/`DELETE` support for SSE streams\n   * and session teardown).\n   *\n   * Left off (the default), the transport is **stateless**: every request is\n   * self-contained, a fresh server is created and torn down per request, and\n   * `GET`/`DELETE` return `405`. Stateless is the simplest mode and the right\n   * default for most servers; turn this on only when you need server-initiated\n   * streaming/notifications tied to a session.\n   *\n   * @default false (stateless)\n   */\n  statefulMode?: boolean;\n  /**\n   * Return a single JSON response instead of opening an SSE stream.\n   *\n   * When unset, this **follows the session mode**: `true` in stateless mode (so\n   * a plain POST gets a JSON reply with no stream to manage) and `false` in\n   * stateful mode (SSE, so server-initiated messages can flow). Set it\n   * explicitly to override that pairing.\n   *\n   * @default `!statefulMode` (JSON when stateless, SSE when stateful)\n   */\n  enableJsonResponse?: boolean;\n  /** Custom session id generator (stateful mode). */\n  sessionIdGenerator?: () => string;\n  /**\n   * Whether the transport mounts its own `POST`/`GET`/`DELETE` routes on the\n   * Nest HTTP adapter.\n   *\n   * Leave it unset (the default) for **auto-detection**: the transport\n   * self-mounts UNLESS something has read {@link httpHandlers} — which happens\n   * exactly when you wire a bring-your-own `@Controller` (e.g. via\n   * `{ provide: MCP_HTTP_HANDLER, useValue: transport.httpHandlers }`). So\n   * providing a controller automatically suppresses self-mounting; doing\n   * nothing keeps the zero-config self-mount. This read happens at module\n   * definition time, before the transport starts, so the timing is reliable.\n   *\n   * Set it explicitly to override the heuristic:\n   * - `true`: always self-mount (bypasses the Nest pipeline — no guards).\n   * - `false`: never self-mount (you own the route via a controller).\n   *\n   * @default undefined (auto: self-mount unless `httpHandlers` was accessed)\n   */\n  mount?: boolean;\n}\n\n/**\n * Streamable-HTTP transport. Mounts `POST`/`GET`/`DELETE` on the Nest HTTP server\n * and delegates to the MCP SDK `StreamableHTTPServerTransport`. Supports both the\n * stateless (one server per request) and stateful (session-managed) modes.\n */\nexport class StreamableHttpTransport implements McpTransport {\n  readonly kind = 'streamable-http' as const;\n\n  private readonly endpoint: string;\n  private readonly statefulMode: boolean;\n  private readonly enableJsonResponse: boolean;\n  private readonly sessionIdGenerator: () => string;\n  /** Whether `endpoint` was set explicitly (vs defaulted) — for the ignored-option warning. */\n  private readonly endpointExplicit: boolean;\n  /** Explicit `mount` override; `undefined` means auto-detect. */\n  private readonly mountOption?: boolean;\n  /** Set the first time {@link httpHandlers} is read — implies a BYO controller. */\n  private handlersClaimed = false;\n\n  private readonly transports: Record<string, StreamableHTTPServerTransport> =\n    {};\n  private readonly servers: Record<string, McpServer> = {};\n  private ctx?: McpTransportContext;\n\n  constructor(options: StreamableHttpTransportOptions = {}) {\n    this.endpoint = ensureLeadingSlash(options.endpoint ?? 'mcp');\n    this.endpointExplicit = options.endpoint !== undefined;\n    this.statefulMode = options.statefulMode ?? false;\n    // Default follows the session mode: JSON in stateless, SSE in stateful.\n    this.enableJsonResponse =\n      options.enableJsonResponse ?? !this.statefulMode;\n    this.sessionIdGenerator =\n      options.sessionIdGenerator ?? (() => randomUUID());\n    this.mountOption = options.mount;\n  }\n\n  /**\n   * The HTTP verb handlers, for bring-your-own-controller setups. Provide this\n   * under `MCP_HTTP_HANDLER` and delegate to it from a `@Controller` (see\n   * {@link StreamableHttpController}). The returned functions are bound to this\n   * transport and read their context lazily, so it is safe to grab this getter\n   * at module-construction time — before `start()` has run.\n   *\n   * Reading this getter also marks the route as claimed, so the transport\n   * auto-disables its own self-mount (unless `mount` was set explicitly). That\n   * is how `{ provide: MCP_HTTP_HANDLER, useValue: transport.httpHandlers }`\n   * suppresses self-mounting without any extra flag.\n   */\n  get httpHandlers(): McpHttpHandler {\n    this.handlersClaimed = true;\n    return {\n      handlePost: (req: unknown, res: unknown) => this.handlePost(req, res),\n      handleGet: (req: unknown, res: unknown) => this.handleGet(req, res),\n      handleDelete: (req: unknown, res: unknown) => this.handleDelete(req, res),\n    };\n  }\n\n  start(ctx: McpTransportContext): void {\n    // The context (server factory, request-handler binding, logger) is always\n    // needed — the handlers read it lazily whether we self-mount or a user\n    // controller calls them.\n    this.ctx = ctx;\n\n    // Auto-detect: self-mount unless a controller claimed the route by reading\n    // `httpHandlers`. An explicit `mount` option overrides the heuristic.\n    const shouldMount = this.mountOption ?? !this.handlersClaimed;\n\n    if (!shouldMount) {\n      // The path now comes from the user's @Controller(...), so a self-mount\n      // `endpoint` would be silently ignored. Don't let that pass quietly.\n      if (this.endpointExplicit) {\n        ctx.logger.warn(\n          `StreamableHttpTransport: \\`endpoint: '${this.endpoint}'\\` is ignored because a controller owns the route. Set the path on your @Controller(...) decorator instead (it also picks up global prefix and versioning).`,\n        );\n      }\n      ctx.logger.log(\n        `MCP streamable-http transport ready (${this.statefulMode ? 'stateful' : 'stateless'}, self-mount disabled — a controller owns the route)`,\n      );\n      return;\n    }\n\n    if (!ctx.httpAdapter) {\n      throw new Error(\n        'StreamableHttpTransport requires an HTTP adapter to self-mount. Pass it via new McpStrategy({ httpAdapter }) or strategy.setHttpAdapter(app.getHttpAdapter()) — or mount your own controller (provide MCP_HTTP_HANDLER with transport.httpHandlers).',\n      );\n    }\n    const adapter = ctx.httpAdapter as unknown as {\n      post(path: string, handler: (req: any, res: any) => unknown): unknown;\n      get(path: string, handler: (req: any, res: any) => unknown): unknown;\n      delete(path: string, handler: (req: any, res: any) => unknown): unknown;\n    };\n\n    adapter.post(this.endpoint, (req, res) => this.handlePost(req, res));\n    adapter.get(this.endpoint, (req, res) => this.handleGet(req, res));\n    adapter.delete(this.endpoint, (req, res) => this.handleDelete(req, res));\n\n    ctx.logger.log(\n      `MCP streamable-http transport mounted at ${this.endpoint} (${this.statefulMode ? 'stateful' : 'stateless'})`,\n    );\n  }\n\n  async close(): Promise<void> {\n    for (const sessionId of Object.keys(this.transports)) {\n      await this.cleanupSession(sessionId);\n    }\n  }\n\n  private async handlePost(req: any, res: any): Promise<void> {\n    const adapter = HttpAdapterFactory.getAdapter(req, res);\n    const adaptedReq = adapter.adaptRequest(req);\n    const adaptedRes = adapter.adaptResponse(res);\n    const body = await readJsonBody(adaptedReq);\n\n    try {\n      if (this.statefulMode) {\n        await this.handleStateful(adaptedReq, adaptedRes, body);\n      } else {\n        await this.handleStateless(adaptedReq, adaptedRes, body);\n      }\n    } catch (error) {\n      this.ctx!.logger.error('Error handling MCP request', error as Error);\n      if (!adaptedRes.headersSent) {\n        adaptedRes.status(500).json({\n          jsonrpc: '2.0',\n          error: { code: -32603, message: 'Internal server error' },\n          id: null,\n        });\n      }\n    }\n  }\n\n  private async handleStateless(\n    req: ReturnType<\n      ReturnType<typeof HttpAdapterFactory.getAdapter>['adaptRequest']\n    >,\n    res: HttpResponse,\n    body: unknown,\n  ): Promise<void> {\n    const transport = new StreamableHTTPServerTransport({\n      sessionIdGenerator: undefined,\n      enableJsonResponse: this.enableJsonResponse,\n    });\n    const server = this.ctx!.createServer();\n    await server.connect(transport);\n    this.ctx!.bindRequestHandlers(\n      server,\n      { transport: this.kind, stateless: true },\n      req.raw,\n    );\n\n    res.raw.on('finish', () => {\n      void transport.close();\n      void server.close();\n    });\n\n    await transport.handleRequest(req.raw, res.raw, body);\n  }\n\n  private async handleStateful(\n    req: ReturnType<\n      ReturnType<typeof HttpAdapterFactory.getAdapter>['adaptRequest']\n    >,\n    res: HttpResponse,\n    body: unknown,\n  ): Promise<void> {\n    const sessionId = req.headers['mcp-session-id'] as string | undefined;\n\n    if (!sessionId && isInitializeRequest(body)) {\n      const server = this.ctx!.createServer();\n      const transport = new StreamableHTTPServerTransport({\n        sessionIdGenerator: this.sessionIdGenerator,\n        enableJsonResponse: this.enableJsonResponse,\n        onsessioninitialized: (sid: string) => {\n          this.transports[sid] = transport;\n          this.servers[sid] = server;\n        },\n        onsessionclosed: (sid: string) => {\n          void this.cleanupSession(sid);\n        },\n      });\n      await server.connect(transport);\n      this.ctx!.bindRequestHandlers(\n        server,\n        { transport: this.kind, stateless: false },\n        req.raw,\n      );\n      await transport.handleRequest(req.raw, res.raw, body);\n      return;\n    }\n\n    if (sessionId) {\n      const transport = this.transports[sessionId];\n      const server = this.servers[sessionId];\n      if (!transport || !server) {\n        res.status(404).json({\n          jsonrpc: '2.0',\n          error: { code: -32001, message: 'Session not found' },\n          id: null,\n        });\n        return;\n      }\n      // Re-bind so the per-request auth context is current.\n      this.ctx!.bindRequestHandlers(\n        server,\n        { transport: this.kind, stateless: false, sessionId },\n        req.raw,\n      );\n      await transport.handleRequest(req.raw, res.raw, body);\n      return;\n    }\n\n    res.status(400).json({\n      jsonrpc: '2.0',\n      error: {\n        code: -32000,\n        message: 'Bad Request: Mcp-Session-Id header is required',\n      },\n      id: null,\n    });\n  }\n\n  private async handleGet(req: any, res: any): Promise<void> {\n    const adapter = HttpAdapterFactory.getAdapter(req, res);\n    const adaptedReq = adapter.adaptRequest(req);\n    const adaptedRes = adapter.adaptResponse(res);\n\n    if (!this.statefulMode) {\n      adaptedRes.status(405).json({\n        jsonrpc: '2.0',\n        error: {\n          code: -32000,\n          message: 'Method not allowed in stateless mode',\n        },\n        id: null,\n      });\n      return;\n    }\n    const sessionId = adaptedReq.headers['mcp-session-id'] as\n      | string\n      | undefined;\n    const transport = sessionId ? this.transports[sessionId] : undefined;\n    if (!transport) {\n      adaptedRes.status(404).json({\n        jsonrpc: '2.0',\n        error: { code: -32001, message: 'Session not found' },\n        id: null,\n      });\n      return;\n    }\n    await transport.handleRequest(adaptedReq.raw, adaptedRes.raw);\n  }\n\n  private async handleDelete(req: any, res: any): Promise<void> {\n    const adapter = HttpAdapterFactory.getAdapter(req, res);\n    const adaptedReq = adapter.adaptRequest(req);\n    const adaptedRes = adapter.adaptResponse(res);\n\n    if (!this.statefulMode) {\n      adaptedRes.status(405).json({\n        jsonrpc: '2.0',\n        error: {\n          code: -32000,\n          message: 'Method not allowed in stateless mode',\n        },\n        id: null,\n      });\n      return;\n    }\n    const sessionId = adaptedReq.headers['mcp-session-id'] as\n      | string\n      | undefined;\n    const transport = sessionId ? this.transports[sessionId] : undefined;\n    if (!transport) {\n      adaptedRes.status(404).json({\n        jsonrpc: '2.0',\n        error: { code: -32001, message: 'Session not found' },\n        id: null,\n      });\n      return;\n    }\n    await transport.handleRequest(adaptedReq.raw, adaptedRes.raw);\n  }\n\n  private async cleanupSession(sessionId: string): Promise<void> {\n    const transport = this.transports[sessionId];\n    const server = this.servers[sessionId];\n    delete this.transports[sessionId];\n    delete this.servers[sessionId];\n    try {\n      await transport?.close();\n      await server?.close();\n    } catch {\n      // best-effort cleanup\n    }\n  }\n}\n\nfunction isInitializeRequest(body: unknown): boolean {\n  const isInit = (msg: unknown): boolean =>\n    typeof msg === 'object' &&\n    msg !== null &&\n    'method' in msg &&\n    (msg as { method?: unknown }).method === 'initialize';\n  return Array.isArray(body) ? body.some(isInit) : isInit(body);\n}\n\nfunction ensureLeadingSlash(endpoint: string): string {\n  const trimmed = endpoint.trim();\n  return trimmed.startsWith('/') ? trimmed : `/${trimmed}`;\n}\n"]}

package/dist/mcp/utils/mcp-logger.factory.d.ts

@@ -1,4 +1,8 @@
 import { Logger } from '@nestjs/common';
-import type { McpOptions } from '../interfaces';
-export declare function createMcpLogger(context: string, options: McpOptions | undefined): Logger;
+export interface McpLoggingOptions {
+    logging?: false | {
+        level: ('log' | 'error' | 'warn' | 'debug' | 'verbose')[];
+    };
+}
+export declare function createMcpLogger(context: string, options: McpLoggingOptions | undefined): Logger;
 //# sourceMappingURL=mcp-logger.factory.d.ts.map

package/dist/mcp/utils/mcp-logger.factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-logger.factory.d.ts","sourceRoot":"","sources":["../../../src/mcp/utils/mcp-logger.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAY,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAoFhD,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,GAAG,SAAS,GAC9B,MAAM,CAkBR"}
+{"version":3,"file":"mcp-logger.factory.d.ts","sourceRoot":"","sources":["../../../src/mcp/utils/mcp-logger.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAY,MAAM,gBAAgB,CAAC;AAMlD,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EACJ,KAAK,GACL;QACE,KAAK,EAAE,CAAC,KAAK,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,EAAE,CAAC;KAC3D,CAAC;CACP;AAoFD,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,iBAAiB,GAAG,SAAS,GACrC,MAAM,CAkBR"}

package/dist/mcp/utils/mcp-logger.factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-logger.factory.js","sourceRoot":"","sources":["../../../src/mcp/utils/mcp-logger.factory.ts"],"names":[],"mappings":";;AAqFA,0CAqBC;AA1GD,2CAAkD;AAMlD,MAAM,cAAe,SAAQ,eAAM;IAGjC,YAAY,OAAe,EAAE,aAAyB;QACpD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IAC9C,CAAC;IAED,GAAG,CAAC,OAAY,EAAE,OAAgB;QAChC,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAID,KAAK,CAAC,OAAY,EAAE,GAAG,cAAqB;QAC1C,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,cAAc,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAY,EAAE,OAAgB;QACjC,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAY,EAAE,OAAgB;QAClC,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,OAAO,CAAC,OAAY,EAAE,OAAgB;QACpC,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;CACF;AAKD,MAAM,UAAW,SAAQ,eAAM;IAE7B,GAAG,CAAC,OAAY,EAAE,OAAgB;IAElC,CAAC;IAKD,KAAK,CAAC,OAAY,EAAE,GAAG,cAAqB;IAE5C,CAAC;IAGD,IAAI,CAAC,OAAY,EAAE,OAAgB;IAEnC,CAAC;IAGD,KAAK,CAAC,OAAY,EAAE,OAAgB;IAEpC,CAAC;IAGD,OAAO,CAAC,OAAY,EAAE,OAAgB;IAEtC,CAAC;CACF;AAQD,SAAgB,eAAe,CAC7B,OAAe,EACf,OAA+B;IAG/B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9C,OAAO,IAAI,eAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAGD,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAGD,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAmB,CAAC,CAAC;IAC1E,CAAC;IAGD,OAAO,IAAI,eAAM,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC","sourcesContent":["import { Logger, LogLevel } from '@nestjs/common';\nimport type { McpOptions } from '../interfaces';\n\n/**\n * Logger that filters log messages based on configured log levels\n */\nclass FilteredLogger extends Logger {\n  private enabledLevels: Set<LogLevel>;\n\n  constructor(context: string, enabledLevels: LogLevel[]) {\n    super(context);\n    this.enabledLevels = new Set(enabledLevels);\n  }\n\n  log(message: any, context?: string): void {\n    if (this.enabledLevels.has('log')) {\n      super.log(message, context);\n    }\n  }\n\n  error(message: any, stack?: string, context?: string): void;\n  error(message: any, ...optionalParams: [...any, string?, string?]): void;\n  error(message: any, ...optionalParams: any[]): void {\n    if (this.enabledLevels.has('error')) {\n      super.error(message, ...optionalParams);\n    }\n  }\n\n  warn(message: any, context?: string): void {\n    if (this.enabledLevels.has('warn')) {\n      super.warn(message, context);\n    }\n  }\n\n  debug(message: any, context?: string): void {\n    if (this.enabledLevels.has('debug')) {\n      super.debug(message, context);\n    }\n  }\n\n  verbose(message: any, context?: string): void {\n    if (this.enabledLevels.has('verbose')) {\n      super.verbose(message, context);\n    }\n  }\n}\n\n/**\n * No-op logger that discards all log messages\n */\nclass NoOpLogger extends Logger {\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  log(message: any, context?: string): void {\n    // No-op\n  }\n\n  error(message: any, stack?: string, context?: string): void;\n  error(message: any, ...optionalParams: [...any, string?, string?]): void;\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  error(message: any, ...optionalParams: any[]): void {\n    // No-op\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  warn(message: any, context?: string): void {\n    // No-op\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  debug(message: any, context?: string): void {\n    // No-op\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  verbose(message: any, context?: string): void {\n    // No-op\n  }\n}\n\n/**\n * Factory function to create a logger instance based on MCP logging configuration\n * @param context - Logger context (typically the class name)\n * @param options - MCP options containing logging configuration\n * @returns Logger instance (standard, filtered, or no-op based on configuration)\n */\nexport function createMcpLogger(\n  context: string,\n  options: McpOptions | undefined,\n): Logger {\n  // If no options provided or logging not configured, use standard logger\n  if (!options || options.logging === undefined) {\n    return new Logger(context);\n  }\n\n  // If logging is explicitly disabled, return no-op logger\n  if (options.logging === false) {\n    return new NoOpLogger(context);\n  }\n\n  // If specific log levels are configured, return filtered logger\n  if (options.logging.level && Array.isArray(options.logging.level)) {\n    return new FilteredLogger(context, options.logging.level as LogLevel[]);\n  }\n\n  // Fallback to standard logger\n  return new Logger(context);\n}\n"]}
+{"version":3,"file":"mcp-logger.factory.js","sourceRoot":"","sources":["../../../src/mcp/utils/mcp-logger.factory.ts"],"names":[],"mappings":";;AAgGA,0CAqBC;AArHD,2CAAkD;AAiBlD,MAAM,cAAe,SAAQ,eAAM;IAGjC,YAAY,OAAe,EAAE,aAAyB;QACpD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IAC9C,CAAC;IAED,GAAG,CAAC,OAAY,EAAE,OAAgB;QAChC,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAID,KAAK,CAAC,OAAY,EAAE,GAAG,cAAqB;QAC1C,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,cAAc,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAY,EAAE,OAAgB;QACjC,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAY,EAAE,OAAgB;QAClC,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,OAAO,CAAC,OAAY,EAAE,OAAgB;QACpC,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;CACF;AAKD,MAAM,UAAW,SAAQ,eAAM;IAE7B,GAAG,CAAC,OAAY,EAAE,OAAgB;IAElC,CAAC;IAKD,KAAK,CAAC,OAAY,EAAE,GAAG,cAAqB;IAE5C,CAAC;IAGD,IAAI,CAAC,OAAY,EAAE,OAAgB;IAEnC,CAAC;IAGD,KAAK,CAAC,OAAY,EAAE,OAAgB;IAEpC,CAAC;IAGD,OAAO,CAAC,OAAY,EAAE,OAAgB;IAEtC,CAAC;CACF;AAQD,SAAgB,eAAe,CAC7B,OAAe,EACf,OAAsC;IAGtC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9C,OAAO,IAAI,eAAM,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAGD,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAGD,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAmB,CAAC,CAAC;IAC1E,CAAC;IAGD,OAAO,IAAI,eAAM,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC","sourcesContent":["import { Logger, LogLevel } from '@nestjs/common';\n\n/**\n * The subset of server options the logger factory cares about. Matches the\n * `logging` field on {@link McpServerOptions}.\n */\nexport interface McpLoggingOptions {\n  logging?:\n    | false\n    | {\n        level: ('log' | 'error' | 'warn' | 'debug' | 'verbose')[];\n      };\n}\n\n/**\n * Logger that filters log messages based on configured log levels\n */\nclass FilteredLogger extends Logger {\n  private enabledLevels: Set<LogLevel>;\n\n  constructor(context: string, enabledLevels: LogLevel[]) {\n    super(context);\n    this.enabledLevels = new Set(enabledLevels);\n  }\n\n  log(message: any, context?: string): void {\n    if (this.enabledLevels.has('log')) {\n      super.log(message, context);\n    }\n  }\n\n  error(message: any, stack?: string, context?: string): void;\n  error(message: any, ...optionalParams: [...any, string?, string?]): void;\n  error(message: any, ...optionalParams: any[]): void {\n    if (this.enabledLevels.has('error')) {\n      super.error(message, ...optionalParams);\n    }\n  }\n\n  warn(message: any, context?: string): void {\n    if (this.enabledLevels.has('warn')) {\n      super.warn(message, context);\n    }\n  }\n\n  debug(message: any, context?: string): void {\n    if (this.enabledLevels.has('debug')) {\n      super.debug(message, context);\n    }\n  }\n\n  verbose(message: any, context?: string): void {\n    if (this.enabledLevels.has('verbose')) {\n      super.verbose(message, context);\n    }\n  }\n}\n\n/**\n * No-op logger that discards all log messages\n */\nclass NoOpLogger extends Logger {\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  log(message: any, context?: string): void {\n    // No-op\n  }\n\n  error(message: any, stack?: string, context?: string): void;\n  error(message: any, ...optionalParams: [...any, string?, string?]): void;\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  error(message: any, ...optionalParams: any[]): void {\n    // No-op\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  warn(message: any, context?: string): void {\n    // No-op\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  debug(message: any, context?: string): void {\n    // No-op\n  }\n\n  // eslint-disable-next-line @typescript-eslint/no-unused-vars\n  verbose(message: any, context?: string): void {\n    // No-op\n  }\n}\n\n/**\n * Factory function to create a logger instance based on MCP logging configuration\n * @param context - Logger context (typically the class name)\n * @param options - MCP options containing logging configuration\n * @returns Logger instance (standard, filtered, or no-op based on configuration)\n */\nexport function createMcpLogger(\n  context: string,\n  options: McpLoggingOptions | undefined,\n): Logger {\n  // If no options provided or logging not configured, use standard logger\n  if (!options || options.logging === undefined) {\n    return new Logger(context);\n  }\n\n  // If logging is explicitly disabled, return no-op logger\n  if (options.logging === false) {\n    return new NoOpLogger(context);\n  }\n\n  // If specific log levels are configured, return filtered logger\n  if (options.logging.level && Array.isArray(options.logging.level)) {\n    return new FilteredLogger(context, options.logging.level as LogLevel[]);\n  }\n\n  // Fallback to standard logger\n  return new Logger(context);\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rekog/mcp-nest",
-  "version": "1.9.10",
+  "version": "2.0.0-alpha.0",
   "description": "NestJS module for creating Model Context Protocol (MCP) servers",
   "main": "dist/index.js",
   "license": "MIT",
@@ -11,9 +11,6 @@
     "README.md",
     "LICENSE"
   ],
-  "workspaces": [
-    "playground"
-  ],
   "publishConfig": {
     "access": "public"
   },
@@ -22,86 +19,26 @@
     "url": "https://github.com/rekog-labs/MCP-Nest"
   },
   "scripts": {
-    "build": "tsc -p tsconfig.build.json --sourceMap --inlineSources",
-    "prepare": "npm run build",
-    "smoke": "npm -w playground run smoke:local",
-    "start:playground": "TS_NODE_PROJECT=tsconfig.playground.json ts-node-dev --respawn -r tsconfig-paths/register playground/servers/server-stateful.ts",
-    "start:fastify": "TS_NODE_PROJECT=tsconfig.playground.json ts-node-dev --respawn -r tsconfig-paths/register playground/servers/server-fastify.ts",
-    "start:multi-server": "TS_NODE_PROJECT=tsconfig.playground.json ts-node-dev --respawn -r tsconfig-paths/register playground/servers/multi-server-example/main.ts",
-    "test": "bun test src tests",
-    "test:watch": "bun test src tests --watch",
-    "lint": "eslint \"{src,apps,libs,tests}/**/*.ts\" --fix",
-    "format": "prettier --write \"src/**/*.ts\" \"playground/**/*.ts\" \"tests/**/*.ts\""
+    "build": "tsc -p tsconfig.build.json --sourceMap --inlineSources"
   },
   "peerDependencies": {
     "@modelcontextprotocol/sdk": ">=1.10.0",
     "@nestjs/common": ">=9.0.0",
     "@nestjs/core": ">=9.0.0",
-    "@nestjs/jwt": "^11.0.0",
-    "@nestjs/passport": "^11.0.5",
+    "@nestjs/microservices": ">=9.0.0",
     "@nestjs/platform-fastify": "^11.1.5",
-    "@nestjs/typeorm": ">=9.0.0",
     "express": ">=4.0.0",
     "reflect-metadata": "^0.2.2",
-    "typeorm": ">=0.3.25",
     "zod": "^4.3.5"
   },
   "peerDependenciesMeta": {
     "@nestjs/platform-fastify": {
       "optional": true
-    },
-    "@nestjs/typeorm": {
-      "optional": true
-    },
-    "typeorm": {
-      "optional": true
     }
   },
-  "devDependencies": {
-    "@eslint/eslintrc": "^3.3.3",
-    "@eslint/js": "^9.39.2",
-    "@modelcontextprotocol/sdk": "^1.27.1",
-    "@nestjs/common": "^11.1.14",
-    "@nestjs/core": "^11.1.14",
-    "@nestjs/platform-express": "^11.1.14",
-    "@nestjs/platform-fastify": "^11.1.14",
-    "@nestjs/testing": "^11.1.14",
-    "@nestjs/typeorm": "^11.0.1",
-    "@types/cookie-parser": "^1.4.10",
-    "@types/express": "^5.0.6",
-    "@types/jest": "^29.5.14",
-    "@types/node": "^22.19.7",
-    "@types/passport-github": "^1.1.13",
-    "@types/passport-google-oauth20": "^2.0.17",
-    "@types/supertest": "^6.0.3",
-    "eslint": "^9.39.2",
-    "eslint-config-prettier": "^10.1.8",
-    "eslint-plugin-prettier": "^5.5.5",
-    "express": "^5.2.1",
-    "jest": "^29.7.0",
-    "supertest": "^7.2.2",
-    "ts-jest": "^29.4.6",
-    "ts-node-dev": "^2.0.0",
-    "tsconfig-paths": "^4.2.0",
-    "typeorm": "^1.0.0",
-    "typescript": "^5.9.3",
-    "typescript-eslint": "^8.56.1"
-  },
   "dependencies": {
-    "@nestjs/config": "^4.0.3",
-    "cookie-parser": "^1.4.7",
     "multer": "^2.0.2",
-    "passport": "^0.7.0",
-    "passport-azure-ad-oauth2": "^0.0.4",
-    "passport-github": "^1.1.0",
-    "passport-google-oauth20": "^2.0.0",
     "path-to-regexp": "^8.3.0",
     "rxjs": "^7.8.2"
-  },
-  "overrides": {
-    "qs": "^6.14.1",
-    "body-parser": "^2.2.1",
-    "jws": "^3.2.3",
-    "hono": "^4.11.4"
   }
 }

package/src/index.ts

@@ -1,2 +1 @@
 export * from './mcp';
-export * from './authz';

package/src/mcp/decorators/constants.ts

@@ -2,3 +2,4 @@ export const MCP_TOOL_METADATA_KEY = 'mcp:tool';
 export const MCP_RESOURCE_METADATA_KEY = 'mcp:resource';
 export const MCP_RESOURCE_TEMPLATE_METADATA_KEY = 'mcp:resource-template';
 export const MCP_PROMPT_METADATA_KEY = 'mcp:prompt';
+export const MCP_CONTROLLER_METADATA_KEY = 'mcp:controller';

package/src/mcp/decorators/index.ts

@@ -6,4 +6,6 @@ export * from './prompt.decorator';
 export * from './public.decorator';
 export * from './tool-scopes.decorator';
 export * from './tool-roles.decorator';
-export * from './tool-guards.decorator';
+export * from './mcp-controller.decorator';
+export * from './mcp-message-pattern';
+export * from './raw-request.decorator';

package/src/mcp/decorators/mcp-controller.decorator.ts

@@ -0,0 +1,126 @@
+import {
+  applyDecorators,
+  Controller,
+  ControllerOptions,
+  SetMetadata,
+} from '@nestjs/common';
+import { MCP_CONTROLLER_METADATA_KEY } from './constants';
+import {
+  MCP_SERVER_NAME_METADATA_KEY,
+  mcpTransportFor,
+} from '../transport/mcp-transport.constants';
+
+/**
+ * NestJS-internal metadata keys written by `@MessagePattern`. They are NOT
+ * re-exported from the `@nestjs/microservices` package entry, so we reference
+ * the string literals directly (see `@nestjs/microservices/constants`:
+ * `PATTERN_EXTRAS_METADATA` / `TRANSPORT_METADATA`). The multi-server e2e test
+ * guards against these drifting on a NestJS bump.
+ */
+const PATTERN_EXTRAS_METADATA = 'microservices:pattern_extras';
+const TRANSPORT_METADATA = 'microservices:transport';
+
+/** Options for {@link McpController}: standard `@Controller` options plus a server name. */
+export interface McpControllerOptions extends ControllerOptions {
+  /**
+   * Logical MCP server name. The controller's MCP methods bind ONLY to a
+   * connected `McpStrategy({ server: <name> })`. Omit to use the default shared
+   * server (binds to a plain `McpStrategy()`).
+   */
+  server?: string;
+}
+
+/**
+ * Re-tags every MCP capability method on `target`'s prototype with the given
+ * transport id, overriding the default {@link MCP_TRANSPORT} that the
+ * `@Tool`/`@Resource`/`@Prompt` method decorators wrote.
+ *
+ * This works because class decorators run AFTER the method decorators, and both
+ * `@MessagePattern` and this walk reach the SAME function reference via
+ * `prototype[key]` — so re-defining the transport metadata on it wins. We
+ * recognize MCP methods by the `mcpType` marker stored in their pattern extras.
+ *
+ * Note: `Object.getOwnPropertyNames` only sees methods declared on this class,
+ * not ones inherited from a base class.
+ */
+function retagMcpMethodsTransport(
+  target: Function,
+  transportId: symbol,
+): void {
+  const proto = (target as { prototype?: Record<string, unknown> }).prototype;
+  if (!proto) return;
+  for (const key of Object.getOwnPropertyNames(proto)) {
+    if (key === 'constructor') continue;
+    const fn = proto[key];
+    if (typeof fn !== 'function') continue;
+    const extras = Reflect.getMetadata(PATTERN_EXTRAS_METADATA, fn) as
+      | { mcpType?: unknown }
+      | undefined;
+    if (extras && extras.mcpType) {
+      Reflect.defineMetadata(TRANSPORT_METADATA, transportId, fn);
+    }
+  }
+}
+
+/**
+ * Marks a class as an MCP capability controller.
+ *
+ * NestJS only scans classes registered in a module's `controllers` array for
+ * microservice (`@MessagePattern`) handlers, so MCP tool/resource/prompt classes
+ * MUST be controllers. `@McpController` composes the standard `@Controller()`
+ * decorator (so the framework discovers and binds the `@Tool`/`@Resource`/
+ * `@Prompt` handlers) and adds a marker the {@link McpStrategy} uses to recognize
+ * MCP controllers.
+ *
+ * Because `@Tool`/`@Resource`/`@Prompt` do not add HTTP route decorators, methods
+ * on an `@McpController` are NOT exposed as HTTP routes — they are reachable only
+ * through the MCP transport.
+ *
+ * To run multiple isolated MCP servers in one app, assign a controller to a
+ * named server with `@McpController({ server: 'admin' })`; its tools/resources/
+ * prompts then bind ONLY to a matching `McpStrategy({ server: 'admin' })`.
+ *
+ * @example
+ * ```typescript
+ * @McpController()
+ * export class GreetingTool {
+ *   @Tool({ name: 'hello', description: 'Say hello', parameters: z.object({ name: z.string() }) })
+ *   sayHello(@Payload() { name }: { name: string }, @Ctx() ctx: McpContext) {
+ *     return { content: [{ type: 'text', text: `Hello, ${name}!` }] };
+ *   }
+ * }
+ * ```
+ */
+export function McpController(
+  prefixOrOptions?: string | string[] | McpControllerOptions,
+): ClassDecorator {
+  // Extract the MCP-specific `server` name (if any) and forward the remaining
+  // standard controller options to `@Controller`.
+  let server: string | undefined;
+  let controllerOptions: string | string[] | ControllerOptions | undefined =
+    prefixOrOptions;
+  if (
+    prefixOrOptions &&
+    typeof prefixOrOptions === 'object' &&
+    !Array.isArray(prefixOrOptions) &&
+    'server' in prefixOrOptions
+  ) {
+    const { server: serverName, ...rest } = prefixOrOptions;
+    server = serverName;
+    controllerOptions = rest;
+  }
+
+  return (target: Function) => {
+    applyDecorators(
+      Controller(controllerOptions as ControllerOptions),
+      SetMetadata(MCP_CONTROLLER_METADATA_KEY, true),
+      SetMetadata(MCP_SERVER_NAME_METADATA_KEY, server),
+    )(target);
+    // A named server re-tags this controller's MCP methods with that server's
+    // transport id, so NestJS routes them only to the matching strategy. An
+    // unnamed controller keeps the default MCP_TRANSPORT (single-server) behavior.
+    if (server) {
+      retagMcpMethodsTransport(target, mcpTransportFor(server));
+    }
+  };
+}

package/src/mcp/decorators/mcp-message-pattern.ts

@@ -0,0 +1,38 @@
+import { MessagePattern } from '@nestjs/microservices';
+import {
+  buildMcpHandlerExtras,
+  buildMcpPattern,
+  MCP_TRANSPORT,
+  McpCapabilityType,
+} from '../transport/mcp-transport.constants';
+
+/**
+ * Builds the `@MessagePattern` half of an MCP capability decorator.
+ *
+ * The returned method decorator registers a NestJS RPC handler scoped to the
+ * {@link MCP_TRANSPORT} identifier, with:
+ *  - a structured pattern `{ mcp, name }` so the strategy can deterministically
+ *    map a discovered capability back to its handler, and
+ *  - `extras` `{ mcpType, mcpName }` so the strategy can recognize/prune MCP
+ *    handlers from the shared `messageHandlers` map.
+ *
+ * When `explicitName` is omitted (e.g. a `@Tool` without `name`), the method
+ * name is used — mirroring the name-defaulting in `McpRegistryDiscoveryService`,
+ * so the discovered metadata name and the pattern name stay in sync.
+ */
+export function mcpMessagePattern(
+  type: McpCapabilityType,
+  explicitName?: string,
+): MethodDecorator {
+  return (target, propertyKey, descriptor: PropertyDescriptor) => {
+    const methodKey = String(propertyKey);
+    const name = explicitName ?? methodKey;
+    return MessagePattern(
+      buildMcpPattern(type, name),
+      MCP_TRANSPORT,
+      // `descriptor.value` is the decorated method; the strategy reads all MCP
+      // metadata (tool options + security decorators) off it at listen() time.
+      buildMcpHandlerExtras(type, name, methodKey, descriptor.value),
+    )(target, propertyKey, descriptor);
+  };
+}

package/src/mcp/decorators/prompt.decorator.ts

@@ -1,6 +1,7 @@
-import { SetMetadata } from '@nestjs/common';
+import { applyDecorators, SetMetadata } from '@nestjs/common';
 import { MCP_PROMPT_METADATA_KEY } from './constants';
 import { ZodObject, ZodType } from 'zod';
+import { mcpMessagePattern } from './mcp-message-pattern';
 
 export type PromptArgsRawShape = {
   [k: string]: ZodType;
@@ -19,5 +20,8 @@ export interface PromptOptions {
 }
 
 export const Prompt = (options: PromptOptions) => {
-  return SetMetadata(MCP_PROMPT_METADATA_KEY, options);
+  return applyDecorators(
+    SetMetadata(MCP_PROMPT_METADATA_KEY, options),
+    mcpMessagePattern('prompt', options.name),
+  );
 };

package/src/mcp/decorators/public.decorator.ts

@@ -9,10 +9,10 @@ export const MCP_PUBLIC_METADATA_KEY = 'mcp:public-tool';
  * Decorator to mark a tool as publicly accessible, bypassing authentication requirements.
  *
  * Use this when you want a tool to be available even to unauthenticated users
- * when `allowUnauthenticatedAccess` is enabled in McpModule options.
+ * when `allowUnauthenticatedAccess` is enabled on the {@link McpStrategy}.
  *
- * When applied to a tool method, it allows the tool to be called without authentication,
- * even if the module has guards configured.
+ * When applied to a tool method, it allows the tool to be listed and called
+ * without authentication, even when other tools on the server require it.
  *
  * @example
  * ```typescript