@strapi/core 5.46.1 → 5.47.0

package/dist/services/mcp/middleware/oauthDiscoveryFallback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthDiscoveryFallback.js","sources":["../../../../src/services/mcp/middleware/oauthDiscoveryFallback.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\n\n/**\n * OAuth discovery paths probed by MCP SDK clients during the authentication\n * fallback flow (RFC 8414 § 3, RFC 7591, OpenID Connect Discovery).\n *\n * Strapi is a resource server, not an authorization server, so these paths\n * have no real handler. Without this middleware, Koa returns plain-text\n * 404/405 responses that crash clients expecting JSON (e.g. Claude Code).\n *\n * The middleware only fires when downstream already returned 404 or 405,\n * so user-defined routes on these paths are never shadowed.\n */\nconst OAUTH_DISCOVERY_PROBES: ReadonlyArray<{ method: string; path: string }> = [\n  { method: 'GET', path: '/.well-known/oauth-authorization-server' },\n  { method: 'GET', path: '/.well-known/openid-configuration' },\n  { method: 'POST', path: '/register' },\n];\n\nexport const createOAuthDiscoveryFallbackMiddleware = (): Core.MiddlewareHandler => {\n  return async (ctx, next) => {\n    await next();\n\n    if (ctx.status !== 404 && ctx.status !== 405) {\n      return;\n    }\n\n    const isOAuthProbe = OAUTH_DISCOVERY_PROBES.some(\n      (probe) => ctx.method === probe.method && ctx.path === probe.path\n    );\n\n    if (isOAuthProbe === false) {\n      return;\n    }\n\n    ctx.status = 404;\n    ctx.set('Content-Type', 'application/json');\n    ctx.body = { error: 'not_found', error_description: 'OAuth is not supported' };\n  };\n};\n"],"names":["OAUTH_DISCOVERY_PROBES","method","path","createOAuthDiscoveryFallbackMiddleware","ctx","next","status","isOAuthProbe","some","probe","set","body","error","error_description"],"mappings":";;AAEA;;;;;;;;;;AAUC,IACD,MAAMA,sBAAAA,GAA0E;AAC9E,IAAA;QAAEC,MAAAA,EAAQ,KAAA;QAAOC,IAAAA,EAAM;AAA0C,KAAA;AACjE,IAAA;QAAED,MAAAA,EAAQ,KAAA;QAAOC,IAAAA,EAAM;AAAoC,KAAA;AAC3D,IAAA;QAAED,MAAAA,EAAQ,MAAA;QAAQC,IAAAA,EAAM;AAAY;AACrC,CAAA;MAEYC,sCAAAA,GAAyC,IAAA;AACpD,IAAA,OAAO,OAAOC,GAAAA,EAAKC,IAAAA,GAAAA;QACjB,MAAMA,IAAAA,EAAAA;AAEN,QAAA,IAAID,IAAIE,MAAM,KAAK,OAAOF,GAAAA,CAAIE,MAAM,KAAK,GAAA,EAAK;AAC5C,YAAA;AACF,QAAA;AAEA,QAAA,MAAMC,eAAeP,sBAAAA,CAAuBQ,IAAI,CAC9C,CAACC,QAAUL,GAAAA,CAAIH,MAAM,KAAKQ,KAAAA,CAAMR,MAAM,IAAIG,GAAAA,CAAIF,IAAI,KAAKO,MAAMP,IAAI,CAAA;AAGnE,QAAA,IAAIK,iBAAiB,KAAA,EAAO;AAC1B,YAAA;AACF,QAAA;AAEAH,QAAAA,GAAAA,CAAIE,MAAM,GAAG,GAAA;QACbF,GAAAA,CAAIM,GAAG,CAAC,cAAA,EAAgB,kBAAA,CAAA;AACxBN,QAAAA,GAAAA,CAAIO,IAAI,GAAG;YAAEC,KAAAA,EAAO,WAAA;YAAaC,iBAAAA,EAAmB;AAAyB,SAAA;AAC/E,IAAA,CAAA;AACF;;;;"}

package/dist/services/mcp/middleware/oauthDiscoveryFallback.mjs

@@ -0,0 +1,45 @@
+/**
+ * OAuth discovery paths probed by MCP SDK clients during the authentication
+ * fallback flow (RFC 8414 § 3, RFC 7591, OpenID Connect Discovery).
+ *
+ * Strapi is a resource server, not an authorization server, so these paths
+ * have no real handler. Without this middleware, Koa returns plain-text
+ * 404/405 responses that crash clients expecting JSON (e.g. Claude Code).
+ *
+ * The middleware only fires when downstream already returned 404 or 405,
+ * so user-defined routes on these paths are never shadowed.
+ */ const OAUTH_DISCOVERY_PROBES = [
+    {
+        method: 'GET',
+        path: '/.well-known/oauth-authorization-server'
+    },
+    {
+        method: 'GET',
+        path: '/.well-known/openid-configuration'
+    },
+    {
+        method: 'POST',
+        path: '/register'
+    }
+];
+const createOAuthDiscoveryFallbackMiddleware = ()=>{
+    return async (ctx, next)=>{
+        await next();
+        if (ctx.status !== 404 && ctx.status !== 405) {
+            return;
+        }
+        const isOAuthProbe = OAUTH_DISCOVERY_PROBES.some((probe)=>ctx.method === probe.method && ctx.path === probe.path);
+        if (isOAuthProbe === false) {
+            return;
+        }
+        ctx.status = 404;
+        ctx.set('Content-Type', 'application/json');
+        ctx.body = {
+            error: 'not_found',
+            error_description: 'OAuth is not supported'
+        };
+    };
+};
+
+export { createOAuthDiscoveryFallbackMiddleware };
+//# sourceMappingURL=oauthDiscoveryFallback.mjs.map

package/dist/services/mcp/middleware/oauthDiscoveryFallback.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthDiscoveryFallback.mjs","sources":["../../../../src/services/mcp/middleware/oauthDiscoveryFallback.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\n\n/**\n * OAuth discovery paths probed by MCP SDK clients during the authentication\n * fallback flow (RFC 8414 § 3, RFC 7591, OpenID Connect Discovery).\n *\n * Strapi is a resource server, not an authorization server, so these paths\n * have no real handler. Without this middleware, Koa returns plain-text\n * 404/405 responses that crash clients expecting JSON (e.g. Claude Code).\n *\n * The middleware only fires when downstream already returned 404 or 405,\n * so user-defined routes on these paths are never shadowed.\n */\nconst OAUTH_DISCOVERY_PROBES: ReadonlyArray<{ method: string; path: string }> = [\n  { method: 'GET', path: '/.well-known/oauth-authorization-server' },\n  { method: 'GET', path: '/.well-known/openid-configuration' },\n  { method: 'POST', path: '/register' },\n];\n\nexport const createOAuthDiscoveryFallbackMiddleware = (): Core.MiddlewareHandler => {\n  return async (ctx, next) => {\n    await next();\n\n    if (ctx.status !== 404 && ctx.status !== 405) {\n      return;\n    }\n\n    const isOAuthProbe = OAUTH_DISCOVERY_PROBES.some(\n      (probe) => ctx.method === probe.method && ctx.path === probe.path\n    );\n\n    if (isOAuthProbe === false) {\n      return;\n    }\n\n    ctx.status = 404;\n    ctx.set('Content-Type', 'application/json');\n    ctx.body = { error: 'not_found', error_description: 'OAuth is not supported' };\n  };\n};\n"],"names":["OAUTH_DISCOVERY_PROBES","method","path","createOAuthDiscoveryFallbackMiddleware","ctx","next","status","isOAuthProbe","some","probe","set","body","error","error_description"],"mappings":"AAEA;;;;;;;;;;AAUC,IACD,MAAMA,sBAAAA,GAA0E;AAC9E,IAAA;QAAEC,MAAAA,EAAQ,KAAA;QAAOC,IAAAA,EAAM;AAA0C,KAAA;AACjE,IAAA;QAAED,MAAAA,EAAQ,KAAA;QAAOC,IAAAA,EAAM;AAAoC,KAAA;AAC3D,IAAA;QAAED,MAAAA,EAAQ,MAAA;QAAQC,IAAAA,EAAM;AAAY;AACrC,CAAA;MAEYC,sCAAAA,GAAyC,IAAA;AACpD,IAAA,OAAO,OAAOC,GAAAA,EAAKC,IAAAA,GAAAA;QACjB,MAAMA,IAAAA,EAAAA;AAEN,QAAA,IAAID,IAAIE,MAAM,KAAK,OAAOF,GAAAA,CAAIE,MAAM,KAAK,GAAA,EAAK;AAC5C,YAAA;AACF,QAAA;AAEA,QAAA,MAAMC,eAAeP,sBAAAA,CAAuBQ,IAAI,CAC9C,CAACC,QAAUL,GAAAA,CAAIH,MAAM,KAAKQ,KAAAA,CAAMR,MAAM,IAAIG,GAAAA,CAAIF,IAAI,KAAKO,MAAMP,IAAI,CAAA;AAGnE,QAAA,IAAIK,iBAAiB,KAAA,EAAO;AAC1B,YAAA;AACF,QAAA;AAEAH,QAAAA,GAAAA,CAAIE,MAAM,GAAG,GAAA;QACbF,GAAAA,CAAIM,GAAG,CAAC,cAAA,EAAgB,kBAAA,CAAA;AACxBN,QAAAA,GAAAA,CAAIO,IAAI,GAAG;YAAEC,KAAAA,EAAO,WAAA;YAAaC,iBAAAA,EAAmB;AAAyB,SAAA;AAC/E,IAAA,CAAA;AACF;;;;"}

package/dist/services/mcp/prompt-registry.d.ts

@@ -0,0 +1,16 @@
+import type { McpServer, RegisteredPrompt } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { Core, Modules } from '@strapi/types';
+import { McpCapabilityDefinitionRegistry } from './internal/McpCapabilityDefinitionRegistry';
+import { type McpCapabilityRegistry, McpCapabilityRegistryBase } from './internal/McpCapabilityRegistry';
+export declare const makeMcpPromptDefinition: <Definition extends Modules.MCP.McpPromptDefinition<string, import("zod/v4").ZodObject<Readonly<{
+    [k: string]: import("zod/v4/core").$ZodType<unknown, unknown, import("zod/v4/core").$ZodTypeInternals<unknown, unknown>>;
+}>, import("zod/v4/core").$strip> | undefined, string, string>>(prompt: Definition) => Definition;
+export declare class McpPromptRegistry extends McpCapabilityRegistryBase<'prompt', Modules.MCP.McpPromptDefinition, RegisteredPrompt> implements McpCapabilityRegistry {
+    #private;
+    constructor(ctx: {
+        strapi: Core.Strapi;
+        definitions: McpCapabilityDefinitionRegistry<'prompt', Modules.MCP.McpPromptDefinition>;
+    });
+    bind(mcpServer: McpServer): void;
+}
+//# sourceMappingURL=prompt-registry.d.ts.map

package/dist/services/mcp/prompt-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-registry.d.ts","sourceRoot":"","sources":["../../../src/services/mcp/prompt-registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3F,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAEnD,OAAO,EAAE,+BAA+B,EAAE,MAAM,4CAA4C,CAAC;AAC7F,OAAO,EACL,KAAK,qBAAqB,EAC1B,yBAAyB,EAC1B,MAAM,kCAAkC,CAAC;AAI1C,eAAO,MAAM,uBAAuB;;wEAC1B,UAAU,KACjB,UAAoB,CAAC;AAExB,qBAAa,iBACX,SAAQ,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,gBAAgB,CAC7F,YAAW,qBAAqB;;gBAIpB,GAAG,EAAE;QACf,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;QACpB,WAAW,EAAE,+BAA+B,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;KACzF;IAKD,IAAI,CAAC,SAAS,EAAE,SAAS;CA4D1B"}

package/dist/services/mcp/prompt-registry.js

@@ -0,0 +1,77 @@
+'use strict';
+
+var McpCapabilityRegistry = require('./internal/McpCapabilityRegistry.js');
+var createSafeCapabilityRegistration = require('./utils/createSafeCapabilityRegistration.js');
+var wrapCapabilityHandlerForMetrics = require('./metrics/wrapCapabilityHandlerForMetrics.js');
+
+// eslint-disable-next-line import/extensions
+function _class_private_field_loose_base(receiver, privateKey) {
+    if (!Object.prototype.hasOwnProperty.call(receiver, privateKey)) {
+        throw new TypeError("attempted to use private field on non-instance");
+    }
+    return receiver;
+}
+var id = 0;
+function _class_private_field_loose_key(name) {
+    return "__private_" + id++ + "_" + name;
+}
+var _strapi = /*#__PURE__*/ _class_private_field_loose_key("_strapi");
+class McpPromptRegistry extends McpCapabilityRegistry.McpCapabilityRegistryBase {
+    bind(mcpServer) {
+        const strapi = _class_private_field_loose_base(this, _strapi)[_strapi];
+        super.register((definition)=>{
+            const { name, title, description, argsSchema, createHandler } = definition;
+            return createSafeCapabilityRegistration.createSafeCapabilityRegistration({
+                strapi,
+                capabilityType: 'Prompt',
+                name,
+                createHandler,
+                createFallbackHandler (errorMessage) {
+                    return async ()=>({
+                            messages: [
+                                {
+                                    role: 'user',
+                                    content: {
+                                        type: 'text',
+                                        text: `Prompt "${name}" failed to initialize: ${errorMessage}`
+                                    }
+                                }
+                            ]
+                        });
+                },
+                createErrorResult (error) {
+                    return {
+                        messages: [
+                            {
+                                role: 'user',
+                                content: {
+                                    type: 'text',
+                                    text: `Prompt "${name}" execution failed: ${error.message}`
+                                }
+                            }
+                        ]
+                    };
+                },
+                registerWithSdk (safeHandler) {
+                    const sdkHandler = wrapCapabilityHandlerForMetrics.wrapCapabilityHandlerForMetrics(strapi, 'prompt', name, definition.telemetry, safeHandler);
+                    return mcpServer.registerPrompt(name, {
+                        title,
+                        description,
+                        // @ts-expect-error - Internal handler type mismatch due to optional argsSchema
+                        argsSchema
+                    }, sdkHandler);
+                }
+            });
+        });
+    }
+    constructor(ctx){
+        super(ctx.definitions), Object.defineProperty(this, _strapi, {
+            writable: true,
+            value: void 0
+        });
+        _class_private_field_loose_base(this, _strapi)[_strapi] = ctx.strapi;
+    }
+}
+
+exports.McpPromptRegistry = McpPromptRegistry;
+//# sourceMappingURL=prompt-registry.js.map

package/dist/services/mcp/prompt-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-registry.js","sources":["../../../src/services/mcp/prompt-registry.ts"],"sourcesContent":["// eslint-disable-next-line import/extensions\nimport type { McpServer, RegisteredPrompt } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { Core, Modules } from '@strapi/types';\n\nimport { McpCapabilityDefinitionRegistry } from './internal/McpCapabilityDefinitionRegistry';\nimport {\n  type McpCapabilityRegistry,\n  McpCapabilityRegistryBase,\n} from './internal/McpCapabilityRegistry';\nimport { createSafeCapabilityRegistration } from './utils/createSafeCapabilityRegistration';\nimport { wrapCapabilityHandlerForMetrics } from './metrics/wrapCapabilityHandlerForMetrics';\n\nexport const makeMcpPromptDefinition = <Definition extends Modules.MCP.McpPromptDefinition>(\n  prompt: Definition\n): Definition => prompt;\n\nexport class McpPromptRegistry\n  extends McpCapabilityRegistryBase<'prompt', Modules.MCP.McpPromptDefinition, RegisteredPrompt>\n  implements McpCapabilityRegistry\n{\n  #strapi: Core.Strapi;\n\n  constructor(ctx: {\n    strapi: Core.Strapi;\n    definitions: McpCapabilityDefinitionRegistry<'prompt', Modules.MCP.McpPromptDefinition>;\n  }) {\n    super(ctx.definitions);\n    this.#strapi = ctx.strapi;\n  }\n\n  bind(mcpServer: McpServer) {\n    const strapi = this.#strapi;\n\n    super.register((definition) => {\n      const { name, title, description, argsSchema, createHandler } = definition;\n\n      return createSafeCapabilityRegistration({\n        strapi,\n        capabilityType: 'Prompt',\n        name,\n        createHandler,\n        createFallbackHandler(errorMessage) {\n          return async () => ({\n            messages: [\n              {\n                role: 'user' as const,\n                content: {\n                  type: 'text' as const,\n                  text: `Prompt \"${name}\" failed to initialize: ${errorMessage}`,\n                },\n              },\n            ],\n          });\n        },\n        createErrorResult(error) {\n          return {\n            messages: [\n              {\n                role: 'user' as const,\n                content: {\n                  type: 'text' as const,\n                  text: `Prompt \"${name}\" execution failed: ${error.message}`,\n                },\n              },\n            ],\n          };\n        },\n        registerWithSdk(safeHandler) {\n          const sdkHandler = wrapCapabilityHandlerForMetrics(\n            strapi,\n            'prompt',\n            name,\n            definition.telemetry,\n            safeHandler\n          );\n\n          return mcpServer.registerPrompt(\n            name,\n            {\n              title,\n              description,\n              // @ts-expect-error - Internal handler type mismatch due to optional argsSchema\n              argsSchema,\n            },\n            sdkHandler\n          );\n        },\n      });\n    });\n  }\n}\n"],"names":["McpPromptRegistry","McpCapabilityRegistryBase","bind","mcpServer","strapi","register","definition","name","title","description","argsSchema","createHandler","createSafeCapabilityRegistration","capabilityType","createFallbackHandler","errorMessage","messages","role","content","type","text","createErrorResult","error","message","registerWithSdk","safeHandler","sdkHandler","wrapCapabilityHandlerForMetrics","telemetry","registerPrompt","ctx","definitions"],"mappings":";;;;;;AAAA;;;;;;;;;;;AAoBE,IAAA,OAAA,iBAAA,8BAAA,CAAA,SAAA,CAAA;AAJK,MAAMA,iBAAAA,SACHC,+CAAAA,CAAAA;AAaRC,IAAAA,IAAAA,CAAKC,SAAoB,EAAE;AACzB,QAAA,MAAMC,MAAAA,GAAS,+BAAA,CAAA,IAAI,EAAC,OAAA,CAAA,CAAA,OAAA,CAAA;QAEpB,KAAK,CAACC,SAAS,CAACC,UAAAA,GAAAA;YACd,MAAM,EAAEC,IAAI,EAAEC,KAAK,EAAEC,WAAW,EAAEC,UAAU,EAAEC,aAAa,EAAE,GAAGL,UAAAA;AAEhE,YAAA,OAAOM,iEAAAA,CAAiC;AACtCR,gBAAAA,MAAAA;gBACAS,cAAAA,EAAgB,QAAA;AAChBN,gBAAAA,IAAAA;AACAI,gBAAAA,aAAAA;AACAG,gBAAAA,qBAAAA,CAAAA,CAAsBC,YAAY,EAAA;AAChC,oBAAA,OAAO,WAAa;4BAClBC,QAAAA,EAAU;AACR,gCAAA;oCACEC,IAAAA,EAAM,MAAA;oCACNC,OAAAA,EAAS;wCACPC,IAAAA,EAAM,MAAA;AACNC,wCAAAA,IAAAA,EAAM,CAAC,QAAQ,EAAEb,IAAAA,CAAK,wBAAwB,EAAEQ,YAAAA,CAAAA;AAClD;AACF;AACD;yBACH,CAAA;AACF,gBAAA,CAAA;AACAM,gBAAAA,iBAAAA,CAAAA,CAAkBC,KAAK,EAAA;oBACrB,OAAO;wBACLN,QAAAA,EAAU;AACR,4BAAA;gCACEC,IAAAA,EAAM,MAAA;gCACNC,OAAAA,EAAS;oCACPC,IAAAA,EAAM,MAAA;oCACNC,IAAAA,EAAM,CAAC,QAAQ,EAAEb,IAAAA,CAAK,oBAAoB,EAAEe,KAAAA,CAAMC,OAAO,CAAA;AAC3D;AACF;AACD;AACH,qBAAA;AACF,gBAAA,CAAA;AACAC,gBAAAA,eAAAA,CAAAA,CAAgBC,WAAW,EAAA;AACzB,oBAAA,MAAMC,aAAaC,+DAAAA,CACjBvB,MAAAA,EACA,UACAG,IAAAA,EACAD,UAAAA,CAAWsB,SAAS,EACpBH,WAAAA,CAAAA;oBAGF,OAAOtB,SAAAA,CAAU0B,cAAc,CAC7BtB,IAAAA,EACA;AACEC,wBAAAA,KAAAA;AACAC,wBAAAA,WAAAA;;AAEAC,wBAAAA;qBACF,EACAgB,UAAAA,CAAAA;AAEJ,gBAAA;AACF,aAAA,CAAA;AACF,QAAA,CAAA,CAAA;AACF,IAAA;AAnEA,IAAA,WAAA,CAAYI,GAGX,CAAE;AACD,QAAA,KAAK,CAACA,GAAAA,CAAIC,WAAW,CAAA,EANvB,MAAA,CAAA,cAAA,CAAA,IAAA,EAAA,OAAA,EAAA;;mBAAA;;AAOE,QAAA,+BAAA,CAAA,IAAI,EAAC,OAAA,CAAA,CAAA,OAAA,CAAA,GAAUD,IAAI1B,MAAM;AAC3B,IAAA;AA8DF;;;;"}

package/dist/services/mcp/prompt-registry.mjs

@@ -0,0 +1,75 @@
+import { McpCapabilityRegistryBase } from './internal/McpCapabilityRegistry.mjs';
+import { createSafeCapabilityRegistration } from './utils/createSafeCapabilityRegistration.mjs';
+import { wrapCapabilityHandlerForMetrics } from './metrics/wrapCapabilityHandlerForMetrics.mjs';
+
+// eslint-disable-next-line import/extensions
+function _class_private_field_loose_base(receiver, privateKey) {
+    if (!Object.prototype.hasOwnProperty.call(receiver, privateKey)) {
+        throw new TypeError("attempted to use private field on non-instance");
+    }
+    return receiver;
+}
+var id = 0;
+function _class_private_field_loose_key(name) {
+    return "__private_" + id++ + "_" + name;
+}
+var _strapi = /*#__PURE__*/ _class_private_field_loose_key("_strapi");
+class McpPromptRegistry extends McpCapabilityRegistryBase {
+    bind(mcpServer) {
+        const strapi = _class_private_field_loose_base(this, _strapi)[_strapi];
+        super.register((definition)=>{
+            const { name, title, description, argsSchema, createHandler } = definition;
+            return createSafeCapabilityRegistration({
+                strapi,
+                capabilityType: 'Prompt',
+                name,
+                createHandler,
+                createFallbackHandler (errorMessage) {
+                    return async ()=>({
+                            messages: [
+                                {
+                                    role: 'user',
+                                    content: {
+                                        type: 'text',
+                                        text: `Prompt "${name}" failed to initialize: ${errorMessage}`
+                                    }
+                                }
+                            ]
+                        });
+                },
+                createErrorResult (error) {
+                    return {
+                        messages: [
+                            {
+                                role: 'user',
+                                content: {
+                                    type: 'text',
+                                    text: `Prompt "${name}" execution failed: ${error.message}`
+                                }
+                            }
+                        ]
+                    };
+                },
+                registerWithSdk (safeHandler) {
+                    const sdkHandler = wrapCapabilityHandlerForMetrics(strapi, 'prompt', name, definition.telemetry, safeHandler);
+                    return mcpServer.registerPrompt(name, {
+                        title,
+                        description,
+                        // @ts-expect-error - Internal handler type mismatch due to optional argsSchema
+                        argsSchema
+                    }, sdkHandler);
+                }
+            });
+        });
+    }
+    constructor(ctx){
+        super(ctx.definitions), Object.defineProperty(this, _strapi, {
+            writable: true,
+            value: void 0
+        });
+        _class_private_field_loose_base(this, _strapi)[_strapi] = ctx.strapi;
+    }
+}
+
+export { McpPromptRegistry };
+//# sourceMappingURL=prompt-registry.mjs.map

package/dist/services/mcp/prompt-registry.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-registry.mjs","sources":["../../../src/services/mcp/prompt-registry.ts"],"sourcesContent":["// eslint-disable-next-line import/extensions\nimport type { McpServer, RegisteredPrompt } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { Core, Modules } from '@strapi/types';\n\nimport { McpCapabilityDefinitionRegistry } from './internal/McpCapabilityDefinitionRegistry';\nimport {\n  type McpCapabilityRegistry,\n  McpCapabilityRegistryBase,\n} from './internal/McpCapabilityRegistry';\nimport { createSafeCapabilityRegistration } from './utils/createSafeCapabilityRegistration';\nimport { wrapCapabilityHandlerForMetrics } from './metrics/wrapCapabilityHandlerForMetrics';\n\nexport const makeMcpPromptDefinition = <Definition extends Modules.MCP.McpPromptDefinition>(\n  prompt: Definition\n): Definition => prompt;\n\nexport class McpPromptRegistry\n  extends McpCapabilityRegistryBase<'prompt', Modules.MCP.McpPromptDefinition, RegisteredPrompt>\n  implements McpCapabilityRegistry\n{\n  #strapi: Core.Strapi;\n\n  constructor(ctx: {\n    strapi: Core.Strapi;\n    definitions: McpCapabilityDefinitionRegistry<'prompt', Modules.MCP.McpPromptDefinition>;\n  }) {\n    super(ctx.definitions);\n    this.#strapi = ctx.strapi;\n  }\n\n  bind(mcpServer: McpServer) {\n    const strapi = this.#strapi;\n\n    super.register((definition) => {\n      const { name, title, description, argsSchema, createHandler } = definition;\n\n      return createSafeCapabilityRegistration({\n        strapi,\n        capabilityType: 'Prompt',\n        name,\n        createHandler,\n        createFallbackHandler(errorMessage) {\n          return async () => ({\n            messages: [\n              {\n                role: 'user' as const,\n                content: {\n                  type: 'text' as const,\n                  text: `Prompt \"${name}\" failed to initialize: ${errorMessage}`,\n                },\n              },\n            ],\n          });\n        },\n        createErrorResult(error) {\n          return {\n            messages: [\n              {\n                role: 'user' as const,\n                content: {\n                  type: 'text' as const,\n                  text: `Prompt \"${name}\" execution failed: ${error.message}`,\n                },\n              },\n            ],\n          };\n        },\n        registerWithSdk(safeHandler) {\n          const sdkHandler = wrapCapabilityHandlerForMetrics(\n            strapi,\n            'prompt',\n            name,\n            definition.telemetry,\n            safeHandler\n          );\n\n          return mcpServer.registerPrompt(\n            name,\n            {\n              title,\n              description,\n              // @ts-expect-error - Internal handler type mismatch due to optional argsSchema\n              argsSchema,\n            },\n            sdkHandler\n          );\n        },\n      });\n    });\n  }\n}\n"],"names":["McpPromptRegistry","McpCapabilityRegistryBase","bind","mcpServer","strapi","register","definition","name","title","description","argsSchema","createHandler","createSafeCapabilityRegistration","capabilityType","createFallbackHandler","errorMessage","messages","role","content","type","text","createErrorResult","error","message","registerWithSdk","safeHandler","sdkHandler","wrapCapabilityHandlerForMetrics","telemetry","registerPrompt","ctx","definitions"],"mappings":";;;;AAAA;;;;;;;;;;;AAoBE,IAAA,OAAA,iBAAA,8BAAA,CAAA,SAAA,CAAA;AAJK,MAAMA,iBAAAA,SACHC,yBAAAA,CAAAA;AAaRC,IAAAA,IAAAA,CAAKC,SAAoB,EAAE;AACzB,QAAA,MAAMC,MAAAA,GAAS,+BAAA,CAAA,IAAI,EAAC,OAAA,CAAA,CAAA,OAAA,CAAA;QAEpB,KAAK,CAACC,SAAS,CAACC,UAAAA,GAAAA;YACd,MAAM,EAAEC,IAAI,EAAEC,KAAK,EAAEC,WAAW,EAAEC,UAAU,EAAEC,aAAa,EAAE,GAAGL,UAAAA;AAEhE,YAAA,OAAOM,gCAAAA,CAAiC;AACtCR,gBAAAA,MAAAA;gBACAS,cAAAA,EAAgB,QAAA;AAChBN,gBAAAA,IAAAA;AACAI,gBAAAA,aAAAA;AACAG,gBAAAA,qBAAAA,CAAAA,CAAsBC,YAAY,EAAA;AAChC,oBAAA,OAAO,WAAa;4BAClBC,QAAAA,EAAU;AACR,gCAAA;oCACEC,IAAAA,EAAM,MAAA;oCACNC,OAAAA,EAAS;wCACPC,IAAAA,EAAM,MAAA;AACNC,wCAAAA,IAAAA,EAAM,CAAC,QAAQ,EAAEb,IAAAA,CAAK,wBAAwB,EAAEQ,YAAAA,CAAAA;AAClD;AACF;AACD;yBACH,CAAA;AACF,gBAAA,CAAA;AACAM,gBAAAA,iBAAAA,CAAAA,CAAkBC,KAAK,EAAA;oBACrB,OAAO;wBACLN,QAAAA,EAAU;AACR,4BAAA;gCACEC,IAAAA,EAAM,MAAA;gCACNC,OAAAA,EAAS;oCACPC,IAAAA,EAAM,MAAA;oCACNC,IAAAA,EAAM,CAAC,QAAQ,EAAEb,IAAAA,CAAK,oBAAoB,EAAEe,KAAAA,CAAMC,OAAO,CAAA;AAC3D;AACF;AACD;AACH,qBAAA;AACF,gBAAA,CAAA;AACAC,gBAAAA,eAAAA,CAAAA,CAAgBC,WAAW,EAAA;AACzB,oBAAA,MAAMC,aAAaC,+BAAAA,CACjBvB,MAAAA,EACA,UACAG,IAAAA,EACAD,UAAAA,CAAWsB,SAAS,EACpBH,WAAAA,CAAAA;oBAGF,OAAOtB,SAAAA,CAAU0B,cAAc,CAC7BtB,IAAAA,EACA;AACEC,wBAAAA,KAAAA;AACAC,wBAAAA,WAAAA;;AAEAC,wBAAAA;qBACF,EACAgB,UAAAA,CAAAA;AAEJ,gBAAA;AACF,aAAA,CAAA;AACF,QAAA,CAAA,CAAA;AACF,IAAA;AAnEA,IAAA,WAAA,CAAYI,GAGX,CAAE;AACD,QAAA,KAAK,CAACA,GAAAA,CAAIC,WAAW,CAAA,EANvB,MAAA,CAAA,cAAA,CAAA,IAAA,EAAA,OAAA,EAAA;;mBAAA;;AAOE,QAAA,+BAAA,CAAA,IAAI,EAAC,OAAA,CAAA,CAAA,OAAA,CAAA,GAAUD,IAAI1B,MAAM;AAC3B,IAAA;AA8DF;;;;"}

package/dist/services/mcp/resource-registry.d.ts

@@ -0,0 +1,14 @@
+import type { McpServer, RegisteredResource } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { Core, Modules } from '@strapi/types';
+import { McpCapabilityDefinitionRegistry } from './internal/McpCapabilityDefinitionRegistry';
+import { type McpCapabilityRegistry, McpCapabilityRegistryBase } from './internal/McpCapabilityRegistry';
+export declare const makeMcpResourceDefinition: <Definition extends Modules.MCP.McpResourceDefinition<string>>(resource: Definition) => Definition;
+export declare class McpResourceRegistry extends McpCapabilityRegistryBase<'resource', Modules.MCP.McpResourceDefinition, RegisteredResource> implements McpCapabilityRegistry {
+    #private;
+    constructor(ctx: {
+        strapi: Core.Strapi;
+        definitions: McpCapabilityDefinitionRegistry<'resource', Modules.MCP.McpResourceDefinition>;
+    });
+    bind(mcpServer: McpServer): void;
+}
+//# sourceMappingURL=resource-registry.d.ts.map

package/dist/services/mcp/resource-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-registry.d.ts","sourceRoot":"","sources":["../../../src/services/mcp/resource-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,kBAAkB,EAEnB,MAAM,yCAAyC,CAAC;AACjD,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,+BAA+B,EAAE,MAAM,4CAA4C,CAAC;AAC7F,OAAO,EACL,KAAK,qBAAqB,EAC1B,yBAAyB,EAC1B,MAAM,kCAAkC,CAAC;AAI1C,eAAO,MAAM,yBAAyB,2EAC1B,UAAU,KACnB,UAAsB,CAAC;AAE1B,qBAAa,mBACX,SAAQ,yBAAyB,CAC/B,UAAU,EACV,OAAO,CAAC,GAAG,CAAC,qBAAqB,EACjC,kBAAkB,CAEpB,YAAW,qBAAqB;;gBAIpB,GAAG,EAAE;QACf,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;QACpB,WAAW,EAAE,+BAA+B,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;KAC7F;IAKD,IAAI,CAAC,SAAS,EAAE,SAAS;CA+C1B"}

package/dist/services/mcp/resource-registry.js

@@ -0,0 +1,67 @@
+'use strict';
+
+var McpCapabilityRegistry = require('./internal/McpCapabilityRegistry.js');
+var createSafeCapabilityRegistration = require('./utils/createSafeCapabilityRegistration.js');
+var wrapCapabilityHandlerForMetrics = require('./metrics/wrapCapabilityHandlerForMetrics.js');
+
+function _class_private_field_loose_base(receiver, privateKey) {
+    if (!Object.prototype.hasOwnProperty.call(receiver, privateKey)) {
+        throw new TypeError("attempted to use private field on non-instance");
+    }
+    return receiver;
+}
+var id = 0;
+function _class_private_field_loose_key(name) {
+    return "__private_" + id++ + "_" + name;
+}
+var _strapi = /*#__PURE__*/ _class_private_field_loose_key("_strapi");
+class McpResourceRegistry extends McpCapabilityRegistry.McpCapabilityRegistryBase {
+    bind(mcpServer) {
+        const strapi = _class_private_field_loose_base(this, _strapi)[_strapi];
+        super.register((definition)=>{
+            const { name, uri, metadata, createHandler } = definition;
+            return createSafeCapabilityRegistration.createSafeCapabilityRegistration({
+                strapi,
+                capabilityType: 'Resource',
+                name,
+                createHandler,
+                createFallbackHandler (errorMessage) {
+                    return async (resourceUri)=>({
+                            contents: [
+                                {
+                                    uri: resourceUri.href,
+                                    text: `Resource "${name}" failed to initialize: ${errorMessage}`,
+                                    mimeType: 'text/plain'
+                                }
+                            ]
+                        });
+                },
+                createErrorResult (error, args) {
+                    return {
+                        contents: [
+                            {
+                                uri: args[0] instanceof URL ? args[0].href : uri,
+                                text: `Resource "${name}" execution failed: ${error.message}`,
+                                mimeType: 'text/plain'
+                            }
+                        ]
+                    };
+                },
+                registerWithSdk (safeHandler) {
+                    const sdkHandler = wrapCapabilityHandlerForMetrics.wrapCapabilityHandlerForMetrics(strapi, 'resource', name, definition.telemetry, safeHandler);
+                    return mcpServer.registerResource(name, uri, metadata, sdkHandler);
+                }
+            });
+        });
+    }
+    constructor(ctx){
+        super(ctx.definitions), Object.defineProperty(this, _strapi, {
+            writable: true,
+            value: void 0
+        });
+        _class_private_field_loose_base(this, _strapi)[_strapi] = ctx.strapi;
+    }
+}
+
+exports.McpResourceRegistry = McpResourceRegistry;
+//# sourceMappingURL=resource-registry.js.map

package/dist/services/mcp/resource-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-registry.js","sources":["../../../src/services/mcp/resource-registry.ts"],"sourcesContent":["import type {\n  McpServer,\n  RegisteredResource,\n  // eslint-disable-next-line import/extensions\n} from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { Core, Modules } from '@strapi/types';\nimport { McpCapabilityDefinitionRegistry } from './internal/McpCapabilityDefinitionRegistry';\nimport {\n  type McpCapabilityRegistry,\n  McpCapabilityRegistryBase,\n} from './internal/McpCapabilityRegistry';\nimport { createSafeCapabilityRegistration } from './utils/createSafeCapabilityRegistration';\nimport { wrapCapabilityHandlerForMetrics } from './metrics/wrapCapabilityHandlerForMetrics';\n\nexport const makeMcpResourceDefinition = <Definition extends Modules.MCP.McpResourceDefinition>(\n  resource: Definition\n): Definition => resource;\n\nexport class McpResourceRegistry\n  extends McpCapabilityRegistryBase<\n    'resource',\n    Modules.MCP.McpResourceDefinition,\n    RegisteredResource\n  >\n  implements McpCapabilityRegistry\n{\n  #strapi: Core.Strapi;\n\n  constructor(ctx: {\n    strapi: Core.Strapi;\n    definitions: McpCapabilityDefinitionRegistry<'resource', Modules.MCP.McpResourceDefinition>;\n  }) {\n    super(ctx.definitions);\n    this.#strapi = ctx.strapi;\n  }\n\n  bind(mcpServer: McpServer) {\n    const strapi = this.#strapi;\n\n    super.register((definition) => {\n      const { name, uri, metadata, createHandler } = definition;\n\n      return createSafeCapabilityRegistration({\n        strapi,\n        capabilityType: 'Resource',\n        name,\n        createHandler,\n        createFallbackHandler(errorMessage) {\n          return async (resourceUri) => ({\n            contents: [\n              {\n                uri: resourceUri.href,\n                text: `Resource \"${name}\" failed to initialize: ${errorMessage}`,\n                mimeType: 'text/plain',\n              },\n            ],\n          });\n        },\n        createErrorResult(error, args) {\n          return {\n            contents: [\n              {\n                uri: args[0] instanceof URL ? args[0].href : uri,\n                text: `Resource \"${name}\" execution failed: ${error.message}`,\n                mimeType: 'text/plain',\n              },\n            ],\n          };\n        },\n        registerWithSdk(safeHandler) {\n          const sdkHandler = wrapCapabilityHandlerForMetrics(\n            strapi,\n            'resource',\n            name,\n            definition.telemetry,\n            safeHandler\n          );\n\n          return mcpServer.registerResource(name, uri, metadata, sdkHandler);\n        },\n      });\n    });\n  }\n}\n"],"names":["McpResourceRegistry","McpCapabilityRegistryBase","bind","mcpServer","strapi","register","definition","name","uri","metadata","createHandler","createSafeCapabilityRegistration","capabilityType","createFallbackHandler","errorMessage","resourceUri","contents","href","text","mimeType","createErrorResult","error","args","URL","message","registerWithSdk","safeHandler","sdkHandler","wrapCapabilityHandlerForMetrics","telemetry","registerResource","ctx","definitions"],"mappings":";;;;;;;;;;;;;;;;AA0BE,IAAA,OAAA,iBAAA,8BAAA,CAAA,SAAA,CAAA;AARK,MAAMA,mBAAAA,SACHC,+CAAAA,CAAAA;AAiBRC,IAAAA,IAAAA,CAAKC,SAAoB,EAAE;AACzB,QAAA,MAAMC,MAAAA,GAAS,+BAAA,CAAA,IAAI,EAAC,OAAA,CAAA,CAAA,OAAA,CAAA;QAEpB,KAAK,CAACC,SAAS,CAACC,UAAAA,GAAAA;YACd,MAAM,EAAEC,IAAI,EAAEC,GAAG,EAAEC,QAAQ,EAAEC,aAAa,EAAE,GAAGJ,UAAAA;AAE/C,YAAA,OAAOK,iEAAAA,CAAiC;AACtCP,gBAAAA,MAAAA;gBACAQ,cAAAA,EAAgB,UAAA;AAChBL,gBAAAA,IAAAA;AACAG,gBAAAA,aAAAA;AACAG,gBAAAA,qBAAAA,CAAAA,CAAsBC,YAAY,EAAA;oBAChC,OAAO,OAAOC,eAAiB;4BAC7BC,QAAAA,EAAU;AACR,gCAAA;AACER,oCAAAA,GAAAA,EAAKO,YAAYE,IAAI;AACrBC,oCAAAA,IAAAA,EAAM,CAAC,UAAU,EAAEX,IAAAA,CAAK,wBAAwB,EAAEO,YAAAA,CAAAA,CAAc;oCAChEK,QAAAA,EAAU;AACZ;AACD;yBACH,CAAA;AACF,gBAAA,CAAA;gBACAC,iBAAAA,CAAAA,CAAkBC,KAAK,EAAEC,IAAI,EAAA;oBAC3B,OAAO;wBACLN,QAAAA,EAAU;AACR,4BAAA;gCACER,GAAAA,EAAKc,IAAI,CAAC,CAAA,CAAE,YAAYC,GAAAA,GAAMD,IAAI,CAAC,CAAA,CAAE,CAACL,IAAI,GAAGT,GAAAA;gCAC7CU,IAAAA,EAAM,CAAC,UAAU,EAAEX,IAAAA,CAAK,oBAAoB,EAAEc,KAAAA,CAAMG,OAAO,CAAA,CAAE;gCAC7DL,QAAAA,EAAU;AACZ;AACD;AACH,qBAAA;AACF,gBAAA,CAAA;AACAM,gBAAAA,eAAAA,CAAAA,CAAgBC,WAAW,EAAA;AACzB,oBAAA,MAAMC,aAAaC,+DAAAA,CACjBxB,MAAAA,EACA,YACAG,IAAAA,EACAD,UAAAA,CAAWuB,SAAS,EACpBH,WAAAA,CAAAA;AAGF,oBAAA,OAAOvB,SAAAA,CAAU2B,gBAAgB,CAACvB,IAAAA,EAAMC,KAAKC,QAAAA,EAAUkB,UAAAA,CAAAA;AACzD,gBAAA;AACF,aAAA,CAAA;AACF,QAAA,CAAA,CAAA;AACF,IAAA;AAtDA,IAAA,WAAA,CAAYI,GAGX,CAAE;AACD,QAAA,KAAK,CAACA,GAAAA,CAAIC,WAAW,CAAA,EANvB,MAAA,CAAA,cAAA,CAAA,IAAA,EAAA,OAAA,EAAA;;mBAAA;;AAOE,QAAA,+BAAA,CAAA,IAAI,EAAC,OAAA,CAAA,CAAA,OAAA,CAAA,GAAUD,IAAI3B,MAAM;AAC3B,IAAA;AAiDF;;;;"}

package/dist/services/mcp/resource-registry.mjs

@@ -0,0 +1,65 @@
+import { McpCapabilityRegistryBase } from './internal/McpCapabilityRegistry.mjs';
+import { createSafeCapabilityRegistration } from './utils/createSafeCapabilityRegistration.mjs';
+import { wrapCapabilityHandlerForMetrics } from './metrics/wrapCapabilityHandlerForMetrics.mjs';
+
+function _class_private_field_loose_base(receiver, privateKey) {
+    if (!Object.prototype.hasOwnProperty.call(receiver, privateKey)) {
+        throw new TypeError("attempted to use private field on non-instance");
+    }
+    return receiver;
+}
+var id = 0;
+function _class_private_field_loose_key(name) {
+    return "__private_" + id++ + "_" + name;
+}
+var _strapi = /*#__PURE__*/ _class_private_field_loose_key("_strapi");
+class McpResourceRegistry extends McpCapabilityRegistryBase {
+    bind(mcpServer) {
+        const strapi = _class_private_field_loose_base(this, _strapi)[_strapi];
+        super.register((definition)=>{
+            const { name, uri, metadata, createHandler } = definition;
+            return createSafeCapabilityRegistration({
+                strapi,
+                capabilityType: 'Resource',
+                name,
+                createHandler,
+                createFallbackHandler (errorMessage) {
+                    return async (resourceUri)=>({
+                            contents: [
+                                {
+                                    uri: resourceUri.href,
+                                    text: `Resource "${name}" failed to initialize: ${errorMessage}`,
+                                    mimeType: 'text/plain'
+                                }
+                            ]
+                        });
+                },
+                createErrorResult (error, args) {
+                    return {
+                        contents: [
+                            {
+                                uri: args[0] instanceof URL ? args[0].href : uri,
+                                text: `Resource "${name}" execution failed: ${error.message}`,
+                                mimeType: 'text/plain'
+                            }
+                        ]
+                    };
+                },
+                registerWithSdk (safeHandler) {
+                    const sdkHandler = wrapCapabilityHandlerForMetrics(strapi, 'resource', name, definition.telemetry, safeHandler);
+                    return mcpServer.registerResource(name, uri, metadata, sdkHandler);
+                }
+            });
+        });
+    }
+    constructor(ctx){
+        super(ctx.definitions), Object.defineProperty(this, _strapi, {
+            writable: true,
+            value: void 0
+        });
+        _class_private_field_loose_base(this, _strapi)[_strapi] = ctx.strapi;
+    }
+}
+
+export { McpResourceRegistry };
+//# sourceMappingURL=resource-registry.mjs.map

package/dist/services/mcp/resource-registry.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-registry.mjs","sources":["../../../src/services/mcp/resource-registry.ts"],"sourcesContent":["import type {\n  McpServer,\n  RegisteredResource,\n  // eslint-disable-next-line import/extensions\n} from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { Core, Modules } from '@strapi/types';\nimport { McpCapabilityDefinitionRegistry } from './internal/McpCapabilityDefinitionRegistry';\nimport {\n  type McpCapabilityRegistry,\n  McpCapabilityRegistryBase,\n} from './internal/McpCapabilityRegistry';\nimport { createSafeCapabilityRegistration } from './utils/createSafeCapabilityRegistration';\nimport { wrapCapabilityHandlerForMetrics } from './metrics/wrapCapabilityHandlerForMetrics';\n\nexport const makeMcpResourceDefinition = <Definition extends Modules.MCP.McpResourceDefinition>(\n  resource: Definition\n): Definition => resource;\n\nexport class McpResourceRegistry\n  extends McpCapabilityRegistryBase<\n    'resource',\n    Modules.MCP.McpResourceDefinition,\n    RegisteredResource\n  >\n  implements McpCapabilityRegistry\n{\n  #strapi: Core.Strapi;\n\n  constructor(ctx: {\n    strapi: Core.Strapi;\n    definitions: McpCapabilityDefinitionRegistry<'resource', Modules.MCP.McpResourceDefinition>;\n  }) {\n    super(ctx.definitions);\n    this.#strapi = ctx.strapi;\n  }\n\n  bind(mcpServer: McpServer) {\n    const strapi = this.#strapi;\n\n    super.register((definition) => {\n      const { name, uri, metadata, createHandler } = definition;\n\n      return createSafeCapabilityRegistration({\n        strapi,\n        capabilityType: 'Resource',\n        name,\n        createHandler,\n        createFallbackHandler(errorMessage) {\n          return async (resourceUri) => ({\n            contents: [\n              {\n                uri: resourceUri.href,\n                text: `Resource \"${name}\" failed to initialize: ${errorMessage}`,\n                mimeType: 'text/plain',\n              },\n            ],\n          });\n        },\n        createErrorResult(error, args) {\n          return {\n            contents: [\n              {\n                uri: args[0] instanceof URL ? args[0].href : uri,\n                text: `Resource \"${name}\" execution failed: ${error.message}`,\n                mimeType: 'text/plain',\n              },\n            ],\n          };\n        },\n        registerWithSdk(safeHandler) {\n          const sdkHandler = wrapCapabilityHandlerForMetrics(\n            strapi,\n            'resource',\n            name,\n            definition.telemetry,\n            safeHandler\n          );\n\n          return mcpServer.registerResource(name, uri, metadata, sdkHandler);\n        },\n      });\n    });\n  }\n}\n"],"names":["McpResourceRegistry","McpCapabilityRegistryBase","bind","mcpServer","strapi","register","definition","name","uri","metadata","createHandler","createSafeCapabilityRegistration","capabilityType","createFallbackHandler","errorMessage","resourceUri","contents","href","text","mimeType","createErrorResult","error","args","URL","message","registerWithSdk","safeHandler","sdkHandler","wrapCapabilityHandlerForMetrics","telemetry","registerResource","ctx","definitions"],"mappings":";;;;;;;;;;;;;;AA0BE,IAAA,OAAA,iBAAA,8BAAA,CAAA,SAAA,CAAA;AARK,MAAMA,mBAAAA,SACHC,yBAAAA,CAAAA;AAiBRC,IAAAA,IAAAA,CAAKC,SAAoB,EAAE;AACzB,QAAA,MAAMC,MAAAA,GAAS,+BAAA,CAAA,IAAI,EAAC,OAAA,CAAA,CAAA,OAAA,CAAA;QAEpB,KAAK,CAACC,SAAS,CAACC,UAAAA,GAAAA;YACd,MAAM,EAAEC,IAAI,EAAEC,GAAG,EAAEC,QAAQ,EAAEC,aAAa,EAAE,GAAGJ,UAAAA;AAE/C,YAAA,OAAOK,gCAAAA,CAAiC;AACtCP,gBAAAA,MAAAA;gBACAQ,cAAAA,EAAgB,UAAA;AAChBL,gBAAAA,IAAAA;AACAG,gBAAAA,aAAAA;AACAG,gBAAAA,qBAAAA,CAAAA,CAAsBC,YAAY,EAAA;oBAChC,OAAO,OAAOC,eAAiB;4BAC7BC,QAAAA,EAAU;AACR,gCAAA;AACER,oCAAAA,GAAAA,EAAKO,YAAYE,IAAI;AACrBC,oCAAAA,IAAAA,EAAM,CAAC,UAAU,EAAEX,IAAAA,CAAK,wBAAwB,EAAEO,YAAAA,CAAAA,CAAc;oCAChEK,QAAAA,EAAU;AACZ;AACD;yBACH,CAAA;AACF,gBAAA,CAAA;gBACAC,iBAAAA,CAAAA,CAAkBC,KAAK,EAAEC,IAAI,EAAA;oBAC3B,OAAO;wBACLN,QAAAA,EAAU;AACR,4BAAA;gCACER,GAAAA,EAAKc,IAAI,CAAC,CAAA,CAAE,YAAYC,GAAAA,GAAMD,IAAI,CAAC,CAAA,CAAE,CAACL,IAAI,GAAGT,GAAAA;gCAC7CU,IAAAA,EAAM,CAAC,UAAU,EAAEX,IAAAA,CAAK,oBAAoB,EAAEc,KAAAA,CAAMG,OAAO,CAAA,CAAE;gCAC7DL,QAAAA,EAAU;AACZ;AACD;AACH,qBAAA;AACF,gBAAA,CAAA;AACAM,gBAAAA,eAAAA,CAAAA,CAAgBC,WAAW,EAAA;AACzB,oBAAA,MAAMC,aAAaC,+BAAAA,CACjBxB,MAAAA,EACA,YACAG,IAAAA,EACAD,UAAAA,CAAWuB,SAAS,EACpBH,WAAAA,CAAAA;AAGF,oBAAA,OAAOvB,SAAAA,CAAU2B,gBAAgB,CAACvB,IAAAA,EAAMC,KAAKC,QAAAA,EAAUkB,UAAAA,CAAAA;AACzD,gBAAA;AACF,aAAA,CAAA;AACF,QAAA,CAAA,CAAA;AACF,IAAA;AAtDA,IAAA,WAAA,CAAYI,GAGX,CAAE;AACD,QAAA,KAAK,CAACA,GAAAA,CAAIC,WAAW,CAAA,EANvB,MAAA,CAAA,cAAA,CAAA,IAAA,EAAA,OAAA,EAAA;;mBAAA;;AAOE,QAAA,+BAAA,CAAA,IAAI,EAAC,OAAA,CAAA,CAAA,OAAA,CAAA,GAAUD,IAAI3B,MAAM;AAC3B,IAAA;AAiDF;;;;"}

package/dist/services/mcp/routes.d.ts

@@ -0,0 +1,11 @@
+import type { Core } from '@strapi/types';
+import { McpConfiguration } from './internal/McpConfiguration';
+export type McpRouteHandlers = {
+    handlePost: Core.MiddlewareHandler;
+};
+/**
+ * Creates MCP route definitions for registration with Strapi server.
+ * @internal
+ */
+export declare const createMcpRoutes: (config: McpConfiguration, handlers: McpRouteHandlers) => Omit<Core.Route, 'info'>[];
+//# sourceMappingURL=routes.d.ts.map

package/dist/services/mcp/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/services/mcp/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAgB/D,MAAM,MAAM,gBAAgB,GAAG;IAC7B,UAAU,EAAE,IAAI,CAAC,iBAAiB,CAAC;CACpC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,eAAe,WAClB,gBAAgB,YACd,gBAAgB,KACzB,KAAK,KAAK,KAAK,EAAE,MAAM,CAAC,EAU1B,CAAC"}

package/dist/services/mcp/routes.js

@@ -0,0 +1,58 @@
+'use strict';
+
+var sendJsonRpcError = require('./utils/sendJsonRpcError.js');
+
+/**
+ * Handler for unsupported HTTP methods on /mcp endpoint.
+ * Returns JSON-RPC error instead of plain text so MCP clients can parse it.
+ */ const handleMethodNotAllowed = async (ctx)=>{
+    // Opt out of Koa's response phase — sendJsonRpcError writes directly to ctx.res.
+    ctx.respond = false;
+    // ctx.set() writes to Koa's in-memory headers which are never flushed when ctx.respond = false.
+    // Use res.setHeader() so the header is included when sendJsonRpcError calls res.writeHead().
+    ctx.res.setHeader('Allow', 'POST');
+    sendJsonRpcError.sendJsonRpcError(ctx.res, 'METHOD_NOT_ALLOWED');
+};
+/**
+ * Creates MCP route definitions for registration with Strapi server.
+ * @internal
+ */ const createMcpRoutes = (config, handlers)=>{
+    const noAuth = {
+        auth: false
+    };
+    return [
+        {
+            method: 'POST',
+            path: config.path,
+            handler: handlers.handlePost,
+            config: noAuth
+        },
+        {
+            method: 'GET',
+            path: config.path,
+            handler: handleMethodNotAllowed,
+            config: noAuth
+        },
+        {
+            method: 'DELETE',
+            path: config.path,
+            handler: handleMethodNotAllowed,
+            config: noAuth
+        },
+        {
+            method: 'PUT',
+            path: config.path,
+            handler: handleMethodNotAllowed,
+            config: noAuth
+        },
+        {
+            method: 'PATCH',
+            path: config.path,
+            handler: handleMethodNotAllowed,
+            config: noAuth
+        }
+    ];
+};
+
+exports.createMcpRoutes = createMcpRoutes;
+//# sourceMappingURL=routes.js.map

package/dist/services/mcp/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sources":["../../../src/services/mcp/routes.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\nimport { McpConfiguration } from './internal/McpConfiguration';\nimport { sendJsonRpcError } from './utils/sendJsonRpcError';\n\n/**\n * Handler for unsupported HTTP methods on /mcp endpoint.\n * Returns JSON-RPC error instead of plain text so MCP clients can parse it.\n */\nconst handleMethodNotAllowed: Core.MiddlewareHandler = async (ctx) => {\n  // Opt out of Koa's response phase — sendJsonRpcError writes directly to ctx.res.\n  ctx.respond = false;\n  // ctx.set() writes to Koa's in-memory headers which are never flushed when ctx.respond = false.\n  // Use res.setHeader() so the header is included when sendJsonRpcError calls res.writeHead().\n  ctx.res.setHeader('Allow', 'POST');\n  sendJsonRpcError(ctx.res, 'METHOD_NOT_ALLOWED');\n};\n\nexport type McpRouteHandlers = {\n  handlePost: Core.MiddlewareHandler;\n};\n\n/**\n * Creates MCP route definitions for registration with Strapi server.\n * @internal\n */\nexport const createMcpRoutes = (\n  config: McpConfiguration,\n  handlers: McpRouteHandlers\n): Omit<Core.Route, 'info'>[] => {\n  const noAuth = { auth: false } as const;\n\n  return [\n    { method: 'POST', path: config.path, handler: handlers.handlePost, config: noAuth },\n    { method: 'GET', path: config.path, handler: handleMethodNotAllowed, config: noAuth },\n    { method: 'DELETE', path: config.path, handler: handleMethodNotAllowed, config: noAuth },\n    { method: 'PUT', path: config.path, handler: handleMethodNotAllowed, config: noAuth },\n    { method: 'PATCH', path: config.path, handler: handleMethodNotAllowed, config: noAuth },\n  ];\n};\n"],"names":["handleMethodNotAllowed","ctx","respond","res","setHeader","sendJsonRpcError","createMcpRoutes","config","handlers","noAuth","auth","method","path","handler","handlePost"],"mappings":";;;;AAIA;;;IAIA,MAAMA,yBAAiD,OAAOC,GAAAA,GAAAA;;AAE5DA,IAAAA,GAAAA,CAAIC,OAAO,GAAG,KAAA;;;AAGdD,IAAAA,GAAAA,CAAIE,GAAG,CAACC,SAAS,CAAC,OAAA,EAAS,MAAA,CAAA;IAC3BC,iCAAAA,CAAiBJ,GAAAA,CAAIE,GAAG,EAAE,oBAAA,CAAA;AAC5B,CAAA;AAMA;;;AAGC,IACM,MAAMG,eAAAA,GAAkB,CAC7BC,MAAAA,EACAC,QAAAA,GAAAA;AAEA,IAAA,MAAMC,MAAAA,GAAS;QAAEC,IAAAA,EAAM;AAAM,KAAA;IAE7B,OAAO;AACL,QAAA;YAAEC,MAAAA,EAAQ,MAAA;AAAQC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;AAAEC,YAAAA,OAAAA,EAASL,SAASM,UAAU;YAAEP,MAAAA,EAAQE;AAAO,SAAA;AAClF,QAAA;YAAEE,MAAAA,EAAQ,KAAA;AAAOC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;YAAEC,OAAAA,EAASb,sBAAAA;YAAwBO,MAAAA,EAAQE;AAAO,SAAA;AACpF,QAAA;YAAEE,MAAAA,EAAQ,QAAA;AAAUC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;YAAEC,OAAAA,EAASb,sBAAAA;YAAwBO,MAAAA,EAAQE;AAAO,SAAA;AACvF,QAAA;YAAEE,MAAAA,EAAQ,KAAA;AAAOC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;YAAEC,OAAAA,EAASb,sBAAAA;YAAwBO,MAAAA,EAAQE;AAAO,SAAA;AACpF,QAAA;YAAEE,MAAAA,EAAQ,OAAA;AAASC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;YAAEC,OAAAA,EAASb,sBAAAA;YAAwBO,MAAAA,EAAQE;AAAO;AACvF,KAAA;AACH;;;;"}

package/dist/services/mcp/routes.mjs

@@ -0,0 +1,56 @@
+import { sendJsonRpcError } from './utils/sendJsonRpcError.mjs';
+
+/**
+ * Handler for unsupported HTTP methods on /mcp endpoint.
+ * Returns JSON-RPC error instead of plain text so MCP clients can parse it.
+ */ const handleMethodNotAllowed = async (ctx)=>{
+    // Opt out of Koa's response phase — sendJsonRpcError writes directly to ctx.res.
+    ctx.respond = false;
+    // ctx.set() writes to Koa's in-memory headers which are never flushed when ctx.respond = false.
+    // Use res.setHeader() so the header is included when sendJsonRpcError calls res.writeHead().
+    ctx.res.setHeader('Allow', 'POST');
+    sendJsonRpcError(ctx.res, 'METHOD_NOT_ALLOWED');
+};
+/**
+ * Creates MCP route definitions for registration with Strapi server.
+ * @internal
+ */ const createMcpRoutes = (config, handlers)=>{
+    const noAuth = {
+        auth: false
+    };
+    return [
+        {
+            method: 'POST',
+            path: config.path,
+            handler: handlers.handlePost,
+            config: noAuth
+        },
+        {
+            method: 'GET',
+            path: config.path,
+            handler: handleMethodNotAllowed,
+            config: noAuth
+        },
+        {
+            method: 'DELETE',
+            path: config.path,
+            handler: handleMethodNotAllowed,
+            config: noAuth
+        },
+        {
+            method: 'PUT',
+            path: config.path,
+            handler: handleMethodNotAllowed,
+            config: noAuth
+        },
+        {
+            method: 'PATCH',
+            path: config.path,
+            handler: handleMethodNotAllowed,
+            config: noAuth
+        }
+    ];
+};
+
+export { createMcpRoutes };
+//# sourceMappingURL=routes.mjs.map

package/dist/services/mcp/routes.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.mjs","sources":["../../../src/services/mcp/routes.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\nimport { McpConfiguration } from './internal/McpConfiguration';\nimport { sendJsonRpcError } from './utils/sendJsonRpcError';\n\n/**\n * Handler for unsupported HTTP methods on /mcp endpoint.\n * Returns JSON-RPC error instead of plain text so MCP clients can parse it.\n */\nconst handleMethodNotAllowed: Core.MiddlewareHandler = async (ctx) => {\n  // Opt out of Koa's response phase — sendJsonRpcError writes directly to ctx.res.\n  ctx.respond = false;\n  // ctx.set() writes to Koa's in-memory headers which are never flushed when ctx.respond = false.\n  // Use res.setHeader() so the header is included when sendJsonRpcError calls res.writeHead().\n  ctx.res.setHeader('Allow', 'POST');\n  sendJsonRpcError(ctx.res, 'METHOD_NOT_ALLOWED');\n};\n\nexport type McpRouteHandlers = {\n  handlePost: Core.MiddlewareHandler;\n};\n\n/**\n * Creates MCP route definitions for registration with Strapi server.\n * @internal\n */\nexport const createMcpRoutes = (\n  config: McpConfiguration,\n  handlers: McpRouteHandlers\n): Omit<Core.Route, 'info'>[] => {\n  const noAuth = { auth: false } as const;\n\n  return [\n    { method: 'POST', path: config.path, handler: handlers.handlePost, config: noAuth },\n    { method: 'GET', path: config.path, handler: handleMethodNotAllowed, config: noAuth },\n    { method: 'DELETE', path: config.path, handler: handleMethodNotAllowed, config: noAuth },\n    { method: 'PUT', path: config.path, handler: handleMethodNotAllowed, config: noAuth },\n    { method: 'PATCH', path: config.path, handler: handleMethodNotAllowed, config: noAuth },\n  ];\n};\n"],"names":["handleMethodNotAllowed","ctx","respond","res","setHeader","sendJsonRpcError","createMcpRoutes","config","handlers","noAuth","auth","method","path","handler","handlePost"],"mappings":";;AAIA;;;IAIA,MAAMA,yBAAiD,OAAOC,GAAAA,GAAAA;;AAE5DA,IAAAA,GAAAA,CAAIC,OAAO,GAAG,KAAA;;;AAGdD,IAAAA,GAAAA,CAAIE,GAAG,CAACC,SAAS,CAAC,OAAA,EAAS,MAAA,CAAA;IAC3BC,gBAAAA,CAAiBJ,GAAAA,CAAIE,GAAG,EAAE,oBAAA,CAAA;AAC5B,CAAA;AAMA;;;AAGC,IACM,MAAMG,eAAAA,GAAkB,CAC7BC,MAAAA,EACAC,QAAAA,GAAAA;AAEA,IAAA,MAAMC,MAAAA,GAAS;QAAEC,IAAAA,EAAM;AAAM,KAAA;IAE7B,OAAO;AACL,QAAA;YAAEC,MAAAA,EAAQ,MAAA;AAAQC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;AAAEC,YAAAA,OAAAA,EAASL,SAASM,UAAU;YAAEP,MAAAA,EAAQE;AAAO,SAAA;AAClF,QAAA;YAAEE,MAAAA,EAAQ,KAAA;AAAOC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;YAAEC,OAAAA,EAASb,sBAAAA;YAAwBO,MAAAA,EAAQE;AAAO,SAAA;AACpF,QAAA;YAAEE,MAAAA,EAAQ,QAAA;AAAUC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;YAAEC,OAAAA,EAASb,sBAAAA;YAAwBO,MAAAA,EAAQE;AAAO,SAAA;AACvF,QAAA;YAAEE,MAAAA,EAAQ,KAAA;AAAOC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;YAAEC,OAAAA,EAASb,sBAAAA;YAAwBO,MAAAA,EAAQE;AAAO,SAAA;AACpF,QAAA;YAAEE,MAAAA,EAAQ,OAAA;AAASC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;YAAEC,OAAAA,EAASb,sBAAAA;YAAwBO,MAAAA,EAAQE;AAAO;AACvF,KAAA;AACH;;;;"}

package/dist/services/mcp/tool-registry.d.ts

@@ -0,0 +1,25 @@
+import type { McpServer, RegisteredTool } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { Core, Modules } from '@strapi/types';
+import { z } from '@strapi/utils';
+import { McpCapabilityDefinitionRegistry } from './internal/McpCapabilityDefinitionRegistry';
+import { type McpCapabilityRegistry, McpCapabilityRegistryBase } from './internal/McpCapabilityRegistry';
+import type { McpAdminTokenAbility } from './authentication';
+export declare function makeMcpToolDefinition<Name extends string, Title extends string, Description extends string, OutputSchema extends z.ZodObject<z.ZodRawShape>, InputSchema extends z.ZodObject<z.ZodRawShape> | undefined = undefined, Access extends Modules.MCP.McpCapabilityAccess = Modules.MCP.McpCapabilityAccess>(tool: {
+    name: Name;
+    title: Title;
+    description: Description;
+    resolveInputSchema?: (context: Modules.MCP.McpHandlerContext) => InputSchema;
+    resolveOutputSchema: (context: Modules.MCP.McpHandlerContext) => OutputSchema;
+    createHandler: (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) => Modules.MCP.McpToolHandler<NoInfer<InputSchema>, NoInfer<OutputSchema>>;
+} & Access): Modules.MCP.McpToolDefinition<Name, InputSchema, OutputSchema, Title, Description> & Access;
+export declare class McpToolRegistry extends McpCapabilityRegistryBase<'tool', Modules.MCP.McpToolDefinition, RegisteredTool> implements McpCapabilityRegistry {
+    #private;
+    constructor(ctx: {
+        strapi: Core.Strapi;
+        definitions: McpCapabilityDefinitionRegistry<'tool', Modules.MCP.McpToolDefinition>;
+        ability: McpAdminTokenAbility;
+        user: Modules.MCP.McpHandlerContext['user'];
+    });
+    bind(mcpServer: McpServer): void;
+}
+//# sourceMappingURL=tool-registry.d.ts.map

package/dist/services/mcp/tool-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registry.d.ts","sourceRoot":"","sources":["../../../src/services/mcp/tool-registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAClC,OAAO,EAAE,+BAA+B,EAAE,MAAM,4CAA4C,CAAC;AAC7F,OAAO,EACL,KAAK,qBAAqB,EAC1B,yBAAyB,EAC1B,MAAM,kCAAkC,CAAC;AAG1C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAE7D,wBAAgB,qBAAqB,CACnC,IAAI,SAAS,MAAM,EACnB,KAAK,SAAS,MAAM,EACpB,WAAW,SAAS,MAAM,EAC1B,YAAY,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,EAC/C,WAAW,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,SAAS,GAAG,SAAS,EACtE,MAAM,SAAS,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAEhF,IAAI,EAAE;IACJ,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,KAAK,CAAC;IACb,WAAW,EAAE,WAAW,CAAC;IACzB,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,WAAW,CAAC;IAC7E,mBAAmB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,YAAY,CAAC;IAC9E,aAAa,EAAE,CACb,MAAM,EAAE,IAAI,CAAC,MAAM,EACnB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,KACnC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;CAC9E,GAAG,MAAM,GACT,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,CAAC,GAAG,MAAM,CAS7F;AAED,qBAAa,eACX,SAAQ,yBAAyB,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,cAAc,CACvF,YAAW,qBAAqB;;gBAQpB,GAAG,EAAE;QACf,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;QACpB,WAAW,EAAE,+BAA+B,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACpF,OAAO,EAAE,oBAAoB,CAAC;QAC9B,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;KAC7C;IAOD,IAAI,CAAC,SAAS,EAAE,SAAS;CAwE1B"}