@silkweave/nestjs 3.2.1 → 4.0.0

package/build/mcp.d.mts

@@ -1,6 +1,6 @@
 import { n as NestSilkweaveAdapter } from "./types-6rbW7fLE.mjs";
 import { t as AuthConfig } from "./index-ByAnTJu5.mjs";
-import { FilterActions } from "@silkweave/mcp";
+import { FilterActions } from "@silkweave/mcp/server";
 import { CorsOptions } from "cors";
 
 //#region src/adapter/mcp.d.ts

package/build/mcp.mjs

@@ -1,4 +1,4 @@
-import { authMiddleware, mcpCors, mcpTransport, oauthRoutes, protectedResourceMetadata, sideloadResource } from "@silkweave/mcp";
+import { authMiddleware, mcpCors, mcpTransport, oauthRoutes, protectedResourceMetadata, sideloadResource } from "@silkweave/mcp/server";
 import express from "express";
 //#region src/adapter/mcp.ts
 function compose(...handlers) {

package/build/mcp.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.mjs","names":[],"sources":["../src/adapter/mcp.ts"],"sourcesContent":["import { AuthConfig } from '@silkweave/auth'\nimport {\n  authMiddleware,\n  mcpCors,\n  mcpTransport,\n  oauthRoutes,\n  protectedResourceMetadata,\n  sideloadResource,\n  type FilterActions\n} from '@silkweave/mcp'\nimport { type CorsOptions } from 'cors'\nimport express, { type RequestHandler } from 'express'\nimport type { NestAdapterRegisterContext, NestSilkweaveAdapter } from '../lib/types.js'\n\nexport interface McpAdapterOptions {\n  /** URL prefix the MCP namespace lives under - the transport itself is at this exact path. Default `'/mcp'`. */\n  basePath?: string\n  /** Optional bearer-token / OAuth 2.1 config. */\n  auth?: AuthConfig\n  /** CORS configuration. `false` to disable, `true`/omitted for permissive defaults, or a `CorsOptions` object. */\n  cors?: CorsOptions | boolean\n  /** Mount the sideload resource route at `${basePath}/resource/:id`. Default `true`. */\n  sideloadResources?: boolean\n  /** Directory the sideload route reads from. Default `'resources'`. */\n  resourceDir?: string\n  /**\n   * Per-request tool filter, applied before tools are registered on every\n   * `POST ${basePath}` (the stateless transport recomputes the tool list per\n   * request, so e.g. API-key permission changes apply on the next\n   * `tools/list`). Receives the synthesized actions (with their `tags`) and a\n   * request stand-in (`headers`/`url`/`method`/`toolName`). A throw surfaces\n   * as its `SilkweaveError.statusCode` (else 500) - never an empty tool list.\n   */\n  filterActions?: FilterActions\n}\n\nfunction compose(...handlers: RequestHandler[]): RequestHandler {\n  return (req, res, next) => {\n    let i = 0\n    const dispatch: () => void = () => {\n      const h = handlers[i++]\n      if (!h) { return next() }\n      h(req, res, (err) => err ? next(err) : dispatch())\n    }\n    dispatch()\n  }\n}\n\n/**\n * MCP adapter for `@silkweave/nestjs`. Registers the MCP Streamable HTTP\n * transport, sideload, well-known and OAuth routes individually on Nest's\n * HTTP adapter at the configured `basePath` (default `/mcp`):\n *\n * - `POST/GET/DELETE ${basePath}` - Streamable HTTP transport\n * - `GET ${basePath}/resource/:id` - sideload (`sideloadResources` opt-out)\n * - `GET ${basePath}/.well-known/oauth-protected-resource` - RFC 9728 metadata (when `auth.resourceUrl`/`auth.authorizationServers` set)\n * - `GET ${basePath}/authorize`, `POST ${basePath}/token`, `POST ${basePath}/register`, `GET ${basePath}${callbackPath}` (when `auth.provider` set)\n *\n * Each route is a real Nest-level route - they show up in\n * `RoutesResolver`'s log and there is no sub-app or middleware-slot\n * indirection.\n */\nexport function mcp(options: McpAdapterOptions = {}): NestSilkweaveAdapter {\n  return {\n    name: 'mcp',\n    register({ httpAdapter, silkweaveOptions, baseContext, actions, onToolCall }: NestAdapterRegisterContext): void {\n      const basePath = (options.basePath ?? '/mcp').replace(/\\/$/, '')\n      if (!basePath) { throw new Error('@silkweave/nestjs mcp(): basePath cannot be empty or \"/\" - pick a path like \"/mcp\".') }\n\n      const adapter = httpAdapter as unknown as {\n        get: (path: string, ...h: RequestHandler[]) => unknown\n        post: (path: string, ...h: RequestHandler[]) => unknown\n        delete: (path: string, ...h: RequestHandler[]) => unknown\n      }\n\n      const corsHandler = mcpCors(options.cors ?? true)\n      const auth = options.auth\n      const guard = auth ? authMiddleware(auth, baseContext) : null\n      const prefix = (...handlers: (RequestHandler | null)[]): RequestHandler[] =>\n        handlers.filter((h): h is RequestHandler => Boolean(h))\n\n      // Public auth-discovery / OAuth routes - registered first so they're\n      // never inadvertently guarded by the auth middleware.\n      if (auth?.authorizationServers?.length && auth.resourceUrl) {\n        adapter.get(\n          `${basePath}/.well-known/oauth-protected-resource`,\n          ...prefix(corsHandler, protectedResourceMetadata(auth))\n        )\n      }\n      if (auth?.provider) {\n        const oauth = oauthRoutes(auth)\n        adapter.get(`${basePath}/.well-known/oauth-authorization-server`, ...prefix(corsHandler, oauth.wellKnownAuthServer))\n        adapter.get(`${basePath}/authorize`, ...prefix(corsHandler, oauth.authorize))\n        adapter.get(`${basePath}${oauth.callbackPath}`, ...prefix(corsHandler, oauth.callback))\n        adapter.post(`${basePath}/token`, ...prefix(corsHandler, ...oauth.token))\n        adapter.post(`${basePath}/register`, ...prefix(corsHandler, ...oauth.register))\n      }\n\n      // Protected routes - wrapped with auth middleware (when configured).\n      const protect = guard ? (h: RequestHandler) => compose(guard, h) : (h: RequestHandler) => h\n\n      if (options.sideloadResources !== false) {\n        adapter.get(`${basePath}/resource/:id`, ...prefix(corsHandler, protect(sideloadResource({ resourceDir: options.resourceDir }))))\n      }\n\n      const transport = mcpTransport(silkweaveOptions, baseContext, actions, { filterActions: options.filterActions, onToolCall })\n      adapter.post(basePath, ...prefix(corsHandler, express.json(), protect(transport.post)))\n    }\n  }\n}\n"],"mappings":";;;AAoCA,SAAS,QAAQ,GAAG,UAA4C;AAC9D,SAAQ,KAAK,KAAK,SAAS;EACzB,IAAI,IAAI;EACR,MAAM,iBAA6B;GACjC,MAAM,IAAI,SAAS;AACnB,OAAI,CAAC,EAAK,QAAO,MAAM;AACvB,KAAE,KAAK,MAAM,QAAQ,MAAM,KAAK,IAAI,GAAG,UAAU,CAAC;;AAEpD,YAAU;;;;;;;;;;;;;;;;;AAkBd,SAAgB,IAAI,UAA6B,EAAE,EAAwB;AACzE,QAAO;EACL,MAAM;EACN,SAAS,EAAE,aAAa,kBAAkB,aAAa,SAAS,cAAgD;GAC9G,MAAM,YAAY,QAAQ,YAAY,QAAQ,QAAQ,OAAO,GAAG;AAChE,OAAI,CAAC,SAAY,OAAM,IAAI,MAAM,0FAAsF;GAEvH,MAAM,UAAU;GAMhB,MAAM,cAAc,QAAQ,QAAQ,QAAQ,KAAK;GACjD,MAAM,OAAO,QAAQ;GACrB,MAAM,QAAQ,OAAO,eAAe,MAAM,YAAY,GAAG;GACzD,MAAM,UAAU,GAAG,aACjB,SAAS,QAAQ,MAA2B,QAAQ,EAAE,CAAC;AAIzD,OAAI,MAAM,sBAAsB,UAAU,KAAK,YAC7C,SAAQ,IACN,GAAG,SAAS,wCACZ,GAAG,OAAO,aAAa,0BAA0B,KAAK,CAAC,CACxD;AAEH,OAAI,MAAM,UAAU;IAClB,MAAM,QAAQ,YAAY,KAAK;AAC/B,YAAQ,IAAI,GAAG,SAAS,0CAA0C,GAAG,OAAO,aAAa,MAAM,oBAAoB,CAAC;AACpH,YAAQ,IAAI,GAAG,SAAS,aAAa,GAAG,OAAO,aAAa,MAAM,UAAU,CAAC;AAC7E,YAAQ,IAAI,GAAG,WAAW,MAAM,gBAAgB,GAAG,OAAO,aAAa,MAAM,SAAS,CAAC;AACvF,YAAQ,KAAK,GAAG,SAAS,SAAS,GAAG,OAAO,aAAa,GAAG,MAAM,MAAM,CAAC;AACzE,YAAQ,KAAK,GAAG,SAAS,YAAY,GAAG,OAAO,aAAa,GAAG,MAAM,SAAS,CAAC;;GAIjF,MAAM,UAAU,SAAS,MAAsB,QAAQ,OAAO,EAAE,IAAI,MAAsB;AAE1F,OAAI,QAAQ,sBAAsB,MAChC,SAAQ,IAAI,GAAG,SAAS,gBAAgB,GAAG,OAAO,aAAa,QAAQ,iBAAiB,EAAE,aAAa,QAAQ,aAAa,CAAC,CAAC,CAAC,CAAC;GAGlI,MAAM,YAAY,aAAa,kBAAkB,aAAa,SAAS;IAAE,eAAe,QAAQ;IAAe;IAAY,CAAC;AAC5H,WAAQ,KAAK,UAAU,GAAG,OAAO,aAAa,QAAQ,MAAM,EAAE,QAAQ,UAAU,KAAK,CAAC,CAAC;;EAE1F"}
+{"version":3,"file":"mcp.mjs","names":[],"sources":["../src/adapter/mcp.ts"],"sourcesContent":["import { AuthConfig } from '@silkweave/auth'\nimport {\n  authMiddleware,\n  mcpCors,\n  mcpTransport,\n  oauthRoutes,\n  protectedResourceMetadata,\n  sideloadResource,\n  type FilterActions\n} from '@silkweave/mcp/server'\nimport { type CorsOptions } from 'cors'\nimport express, { type RequestHandler } from 'express'\nimport type { NestAdapterRegisterContext, NestSilkweaveAdapter } from '../lib/types.js'\n\nexport interface McpAdapterOptions {\n  /** URL prefix the MCP namespace lives under - the transport itself is at this exact path. Default `'/mcp'`. */\n  basePath?: string\n  /** Optional bearer-token / OAuth 2.1 config. */\n  auth?: AuthConfig\n  /** CORS configuration. `false` to disable, `true`/omitted for permissive defaults, or a `CorsOptions` object. */\n  cors?: CorsOptions | boolean\n  /** Mount the sideload resource route at `${basePath}/resource/:id`. Default `true`. */\n  sideloadResources?: boolean\n  /** Directory the sideload route reads from. Default `'resources'`. */\n  resourceDir?: string\n  /**\n   * Per-request tool filter, applied before tools are registered on every\n   * `POST ${basePath}` (the stateless transport recomputes the tool list per\n   * request, so e.g. API-key permission changes apply on the next\n   * `tools/list`). Receives the synthesized actions (with their `tags`) and a\n   * request stand-in (`headers`/`url`/`method`/`toolName`). A throw surfaces\n   * as its `SilkweaveError.statusCode` (else 500) - never an empty tool list.\n   */\n  filterActions?: FilterActions\n}\n\nfunction compose(...handlers: RequestHandler[]): RequestHandler {\n  return (req, res, next) => {\n    let i = 0\n    const dispatch: () => void = () => {\n      const h = handlers[i++]\n      if (!h) { return next() }\n      h(req, res, (err) => err ? next(err) : dispatch())\n    }\n    dispatch()\n  }\n}\n\n/**\n * MCP adapter for `@silkweave/nestjs`. Registers the MCP Streamable HTTP\n * transport, sideload, well-known and OAuth routes individually on Nest's\n * HTTP adapter at the configured `basePath` (default `/mcp`):\n *\n * - `POST/GET/DELETE ${basePath}` - Streamable HTTP transport\n * - `GET ${basePath}/resource/:id` - sideload (`sideloadResources` opt-out)\n * - `GET ${basePath}/.well-known/oauth-protected-resource` - RFC 9728 metadata (when `auth.resourceUrl`/`auth.authorizationServers` set)\n * - `GET ${basePath}/authorize`, `POST ${basePath}/token`, `POST ${basePath}/register`, `GET ${basePath}${callbackPath}` (when `auth.provider` set)\n *\n * Each route is a real Nest-level route - they show up in\n * `RoutesResolver`'s log and there is no sub-app or middleware-slot\n * indirection.\n */\nexport function mcp(options: McpAdapterOptions = {}): NestSilkweaveAdapter {\n  return {\n    name: 'mcp',\n    register({ httpAdapter, silkweaveOptions, baseContext, actions, onToolCall }: NestAdapterRegisterContext): void {\n      const basePath = (options.basePath ?? '/mcp').replace(/\\/$/, '')\n      if (!basePath) { throw new Error('@silkweave/nestjs mcp(): basePath cannot be empty or \"/\" - pick a path like \"/mcp\".') }\n\n      const adapter = httpAdapter as unknown as {\n        get: (path: string, ...h: RequestHandler[]) => unknown\n        post: (path: string, ...h: RequestHandler[]) => unknown\n        delete: (path: string, ...h: RequestHandler[]) => unknown\n      }\n\n      const corsHandler = mcpCors(options.cors ?? true)\n      const auth = options.auth\n      const guard = auth ? authMiddleware(auth, baseContext) : null\n      const prefix = (...handlers: (RequestHandler | null)[]): RequestHandler[] =>\n        handlers.filter((h): h is RequestHandler => Boolean(h))\n\n      // Public auth-discovery / OAuth routes - registered first so they're\n      // never inadvertently guarded by the auth middleware.\n      if (auth?.authorizationServers?.length && auth.resourceUrl) {\n        adapter.get(\n          `${basePath}/.well-known/oauth-protected-resource`,\n          ...prefix(corsHandler, protectedResourceMetadata(auth))\n        )\n      }\n      if (auth?.provider) {\n        const oauth = oauthRoutes(auth)\n        adapter.get(`${basePath}/.well-known/oauth-authorization-server`, ...prefix(corsHandler, oauth.wellKnownAuthServer))\n        adapter.get(`${basePath}/authorize`, ...prefix(corsHandler, oauth.authorize))\n        adapter.get(`${basePath}${oauth.callbackPath}`, ...prefix(corsHandler, oauth.callback))\n        adapter.post(`${basePath}/token`, ...prefix(corsHandler, ...oauth.token))\n        adapter.post(`${basePath}/register`, ...prefix(corsHandler, ...oauth.register))\n      }\n\n      // Protected routes - wrapped with auth middleware (when configured).\n      const protect = guard ? (h: RequestHandler) => compose(guard, h) : (h: RequestHandler) => h\n\n      if (options.sideloadResources !== false) {\n        adapter.get(`${basePath}/resource/:id`, ...prefix(corsHandler, protect(sideloadResource({ resourceDir: options.resourceDir }))))\n      }\n\n      const transport = mcpTransport(silkweaveOptions, baseContext, actions, { filterActions: options.filterActions, onToolCall })\n      adapter.post(basePath, ...prefix(corsHandler, express.json(), protect(transport.post)))\n    }\n  }\n}\n"],"mappings":";;;AAoCA,SAAS,QAAQ,GAAG,UAA4C;AAC9D,SAAQ,KAAK,KAAK,SAAS;EACzB,IAAI,IAAI;EACR,MAAM,iBAA6B;GACjC,MAAM,IAAI,SAAS;AACnB,OAAI,CAAC,EAAK,QAAO,MAAM;AACvB,KAAE,KAAK,MAAM,QAAQ,MAAM,KAAK,IAAI,GAAG,UAAU,CAAC;;AAEpD,YAAU;;;;;;;;;;;;;;;;;AAkBd,SAAgB,IAAI,UAA6B,EAAE,EAAwB;AACzE,QAAO;EACL,MAAM;EACN,SAAS,EAAE,aAAa,kBAAkB,aAAa,SAAS,cAAgD;GAC9G,MAAM,YAAY,QAAQ,YAAY,QAAQ,QAAQ,OAAO,GAAG;AAChE,OAAI,CAAC,SAAY,OAAM,IAAI,MAAM,0FAAsF;GAEvH,MAAM,UAAU;GAMhB,MAAM,cAAc,QAAQ,QAAQ,QAAQ,KAAK;GACjD,MAAM,OAAO,QAAQ;GACrB,MAAM,QAAQ,OAAO,eAAe,MAAM,YAAY,GAAG;GACzD,MAAM,UAAU,GAAG,aACjB,SAAS,QAAQ,MAA2B,QAAQ,EAAE,CAAC;AAIzD,OAAI,MAAM,sBAAsB,UAAU,KAAK,YAC7C,SAAQ,IACN,GAAG,SAAS,wCACZ,GAAG,OAAO,aAAa,0BAA0B,KAAK,CAAC,CACxD;AAEH,OAAI,MAAM,UAAU;IAClB,MAAM,QAAQ,YAAY,KAAK;AAC/B,YAAQ,IAAI,GAAG,SAAS,0CAA0C,GAAG,OAAO,aAAa,MAAM,oBAAoB,CAAC;AACpH,YAAQ,IAAI,GAAG,SAAS,aAAa,GAAG,OAAO,aAAa,MAAM,UAAU,CAAC;AAC7E,YAAQ,IAAI,GAAG,WAAW,MAAM,gBAAgB,GAAG,OAAO,aAAa,MAAM,SAAS,CAAC;AACvF,YAAQ,KAAK,GAAG,SAAS,SAAS,GAAG,OAAO,aAAa,GAAG,MAAM,MAAM,CAAC;AACzE,YAAQ,KAAK,GAAG,SAAS,YAAY,GAAG,OAAO,aAAa,GAAG,MAAM,SAAS,CAAC;;GAIjF,MAAM,UAAU,SAAS,MAAsB,QAAQ,OAAO,EAAE,IAAI,MAAsB;AAE1F,OAAI,QAAQ,sBAAsB,MAChC,SAAQ,IAAI,GAAG,SAAS,gBAAgB,GAAG,OAAO,aAAa,QAAQ,iBAAiB,EAAE,aAAa,QAAQ,aAAa,CAAC,CAAC,CAAC,CAAC;GAGlI,MAAM,YAAY,aAAa,kBAAkB,aAAa,SAAS;IAAE,eAAe,QAAQ;IAAe;IAAY,CAAC;AAC5H,WAAQ,KAAK,UAAU,GAAG,OAAO,aAAa,QAAQ,MAAM,EAAE,QAAQ,UAAU,KAAK,CAAC,CAAC;;EAE1F"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@silkweave/nestjs",
-  "version": "3.2.1",
+  "version": "4.0.0",
   "description": "Silkweave NestJS Adapter",
   "license": "MIT",
   "homepage": "https://www.silkweave.dev",
@@ -47,9 +47,9 @@
     "@trpc/server": "^11.7.1",
     "class-validator": "^0.14.0 || ^0.15.0",
     "rxjs": "^7.0.0",
-    "@silkweave/typegen": "^3.2.1",
-    "@silkweave/trpc": "^3.2.1",
-    "@silkweave/mcp": "^3.2.1"
+    "@silkweave/typegen": "^4.0.0",
+    "@silkweave/mcp": "^4.0.0",
+    "@silkweave/trpc": "^4.0.0"
   },
   "peerDependenciesMeta": {
     "@nestjs/swagger": {
@@ -76,7 +76,7 @@
     "cors": "^2.8.6",
     "express": "^5.2.1",
     "zod": "^3.25.0",
-    "@silkweave/core": "3.2.1"
+    "@silkweave/core": "4.0.0"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
@@ -97,10 +97,10 @@
     "typescript": "^5.9.3",
     "typescript-eslint": "^8.56.1",
     "vitest": "^4.1.9",
-    "@silkweave/auth": "3.2.1",
-    "@silkweave/mcp": "3.2.1",
-    "@silkweave/trpc": "3.2.1",
-    "@silkweave/typegen": "3.2.1"
+    "@silkweave/auth": "4.0.0",
+    "@silkweave/trpc": "4.0.0",
+    "@silkweave/mcp": "4.0.0",
+    "@silkweave/typegen": "4.0.0"
   },
   "scripts": {
     "clean": "rimraf build",