@strapi/core 5.46.1 → 5.47.0

package/dist/services/mcp/internal/syncMcpSessionCapabilities.js

@@ -0,0 +1,76 @@
+'use strict';
+
+const canUseAuthorizedCapability = ({ ability, auth })=>auth.policies.some(({ action, subject })=>subject !== undefined ? ability.can(action, subject) : ability.can(action));
+const canUseMcpCapability = ({ ability, definition, isDevMode })=>{
+    if (definition.devModeOnly === true) {
+        return isDevMode === true;
+    }
+    if (definition.auth === undefined) {
+        return false;
+    }
+    // Session capability availability is a coarse allowlist. Field/entity conditions must be
+    // enforced by capability handlers with request-specific context.
+    return canUseAuthorizedCapability({
+        ability,
+        auth: definition.auth
+    });
+};
+const syncMcpSessionCapabilities = ({ registries, definitions, ability, isDevMode })=>{
+    const summary = {
+        enabled: [],
+        disabled: []
+    };
+    definitions.tools.forEach((definition)=>{
+        const allowed = canUseMcpCapability({
+            ability,
+            definition,
+            isDevMode
+        });
+        const status = registries.tools.status(definition.name);
+        if (status === 'disabled' && allowed === true) {
+            registries.tools.enable(definition.name);
+            summary.enabled.push(definition.name);
+        }
+        if (status === 'enabled' && allowed === false) {
+            registries.tools.disable(definition.name);
+            summary.disabled.push(definition.name);
+        }
+    });
+    definitions.prompts.forEach((definition)=>{
+        const allowed = canUseMcpCapability({
+            ability,
+            definition,
+            isDevMode
+        });
+        const status = registries.prompts.status(definition.name);
+        if (status === 'disabled' && allowed === true) {
+            registries.prompts.enable(definition.name);
+            summary.enabled.push(definition.name);
+        }
+        if (status === 'enabled' && allowed === false) {
+            registries.prompts.disable(definition.name);
+            summary.disabled.push(definition.name);
+        }
+    });
+    definitions.resources.forEach((definition)=>{
+        const allowed = canUseMcpCapability({
+            ability,
+            definition,
+            isDevMode
+        });
+        const status = registries.resources.status(definition.name);
+        if (status === 'disabled' && allowed === true) {
+            registries.resources.enable(definition.name);
+            summary.enabled.push(definition.name);
+        }
+        if (status === 'enabled' && allowed === false) {
+            registries.resources.disable(definition.name);
+            summary.disabled.push(definition.name);
+        }
+    });
+    return summary;
+};
+
+exports.canUseMcpCapability = canUseMcpCapability;
+exports.syncMcpSessionCapabilities = syncMcpSessionCapabilities;
+//# sourceMappingURL=syncMcpSessionCapabilities.js.map

package/dist/services/mcp/internal/syncMcpSessionCapabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncMcpSessionCapabilities.js","sources":["../../../../src/services/mcp/internal/syncMcpSessionCapabilities.ts"],"sourcesContent":["import type { Modules } from '@strapi/types';\nimport type { McpAdminTokenAbility } from '../authentication';\nimport type { McpCapabilityDefinitions, McpRegistries } from './McpServerFactory';\n\ntype CanUseAuthorizedCapabilityParams = {\n  ability: McpAdminTokenAbility;\n  auth: Modules.MCP.McpCapabilityAuth;\n};\n\nexport type CanUseMcpCapabilityParams = {\n  ability: McpAdminTokenAbility;\n  definition: Modules.MCP.McpCapabilityDefinition;\n  isDevMode: boolean;\n};\n\nexport type SyncMcpSessionCapabilitiesParams = {\n  registries: McpRegistries;\n  definitions: McpCapabilityDefinitions;\n  ability: McpAdminTokenAbility;\n  isDevMode: boolean;\n};\n\nexport type SyncMcpSessionCapabilitiesSummary = {\n  enabled: string[];\n  disabled: string[];\n};\n\nconst canUseAuthorizedCapability = ({ ability, auth }: CanUseAuthorizedCapabilityParams): boolean =>\n  auth.policies.some(({ action, subject }) =>\n    subject !== undefined\n      ? ability.can(action, subject)\n      : // @ts-expect-error ability.can expects 2 arguments, but runtime allows 1\n        ability.can(action)\n  );\n\nexport const canUseMcpCapability = ({\n  ability,\n  definition,\n  isDevMode,\n}: CanUseMcpCapabilityParams): boolean => {\n  if (definition.devModeOnly === true) {\n    return isDevMode === true;\n  }\n\n  if (definition.auth === undefined) {\n    return false;\n  }\n\n  // Session capability availability is a coarse allowlist. Field/entity conditions must be\n  // enforced by capability handlers with request-specific context.\n  return canUseAuthorizedCapability({ ability, auth: definition.auth });\n};\n\nexport const syncMcpSessionCapabilities = ({\n  registries,\n  definitions,\n  ability,\n  isDevMode,\n}: SyncMcpSessionCapabilitiesParams): SyncMcpSessionCapabilitiesSummary => {\n  const summary: SyncMcpSessionCapabilitiesSummary = {\n    enabled: [],\n    disabled: [],\n  };\n\n  definitions.tools.forEach((definition) => {\n    const allowed = canUseMcpCapability({ ability, definition, isDevMode });\n    const status = registries.tools.status(definition.name);\n\n    if (status === 'disabled' && allowed === true) {\n      registries.tools.enable(definition.name);\n      summary.enabled.push(definition.name);\n    }\n\n    if (status === 'enabled' && allowed === false) {\n      registries.tools.disable(definition.name);\n      summary.disabled.push(definition.name);\n    }\n  });\n\n  definitions.prompts.forEach((definition) => {\n    const allowed = canUseMcpCapability({ ability, definition, isDevMode });\n    const status = registries.prompts.status(definition.name);\n\n    if (status === 'disabled' && allowed === true) {\n      registries.prompts.enable(definition.name);\n      summary.enabled.push(definition.name);\n    }\n\n    if (status === 'enabled' && allowed === false) {\n      registries.prompts.disable(definition.name);\n      summary.disabled.push(definition.name);\n    }\n  });\n\n  definitions.resources.forEach((definition) => {\n    const allowed = canUseMcpCapability({ ability, definition, isDevMode });\n    const status = registries.resources.status(definition.name);\n\n    if (status === 'disabled' && allowed === true) {\n      registries.resources.enable(definition.name);\n      summary.enabled.push(definition.name);\n    }\n\n    if (status === 'enabled' && allowed === false) {\n      registries.resources.disable(definition.name);\n      summary.disabled.push(definition.name);\n    }\n  });\n\n  return summary;\n};\n"],"names":["canUseAuthorizedCapability","ability","auth","policies","some","action","subject","undefined","can","canUseMcpCapability","definition","isDevMode","devModeOnly","syncMcpSessionCapabilities","registries","definitions","summary","enabled","disabled","tools","forEach","allowed","status","name","enable","push","disable","prompts","resources"],"mappings":";;AA2BA,MAAMA,0BAAAA,GAA6B,CAAC,EAAEC,OAAO,EAAEC,IAAI,EAAoC,GACrFA,IAAAA,CAAKC,QAAQ,CAACC,IAAI,CAAC,CAAC,EAAEC,MAAM,EAAEC,OAAO,EAAE,GACrCA,OAAAA,KAAYC,SAAAA,GACRN,OAAAA,CAAQO,GAAG,CAACH,MAAAA,EAAQC,OAAAA,CAAAA,GAEpBL,OAAAA,CAAQO,GAAG,CAACH,MAAAA,CAAAA,CAAAA;AAGb,MAAMI,sBAAsB,CAAC,EAClCR,OAAO,EACPS,UAAU,EACVC,SAAS,EACiB,GAAA;IAC1B,IAAID,UAAAA,CAAWE,WAAW,KAAK,IAAA,EAAM;AACnC,QAAA,OAAOD,SAAAA,KAAc,IAAA;AACvB,IAAA;IAEA,IAAID,UAAAA,CAAWR,IAAI,KAAKK,SAAAA,EAAW;QACjC,OAAO,KAAA;AACT,IAAA;;;AAIA,IAAA,OAAOP,0BAAAA,CAA2B;AAAEC,QAAAA,OAAAA;AAASC,QAAAA,IAAAA,EAAMQ,WAAWR;AAAK,KAAA,CAAA;AACrE;AAEO,MAAMW,0BAAAA,GAA6B,CAAC,EACzCC,UAAU,EACVC,WAAW,EACXd,OAAO,EACPU,SAAS,EACwB,GAAA;AACjC,IAAA,MAAMK,OAAAA,GAA6C;AACjDC,QAAAA,OAAAA,EAAS,EAAE;AACXC,QAAAA,QAAAA,EAAU;AACZ,KAAA;AAEAH,IAAAA,WAAAA,CAAYI,KAAK,CAACC,OAAO,CAAC,CAACV,UAAAA,GAAAA;AACzB,QAAA,MAAMW,UAAUZ,mBAAAA,CAAoB;AAAER,YAAAA,OAAAA;AAASS,YAAAA,UAAAA;AAAYC,YAAAA;AAAU,SAAA,CAAA;AACrE,QAAA,MAAMW,SAASR,UAAAA,CAAWK,KAAK,CAACG,MAAM,CAACZ,WAAWa,IAAI,CAAA;QAEtD,IAAID,MAAAA,KAAW,UAAA,IAAcD,OAAAA,KAAY,IAAA,EAAM;AAC7CP,YAAAA,UAAAA,CAAWK,KAAK,CAACK,MAAM,CAACd,WAAWa,IAAI,CAAA;AACvCP,YAAAA,OAAAA,CAAQC,OAAO,CAACQ,IAAI,CAACf,WAAWa,IAAI,CAAA;AACtC,QAAA;QAEA,IAAID,MAAAA,KAAW,SAAA,IAAaD,OAAAA,KAAY,KAAA,EAAO;AAC7CP,YAAAA,UAAAA,CAAWK,KAAK,CAACO,OAAO,CAAChB,WAAWa,IAAI,CAAA;AACxCP,YAAAA,OAAAA,CAAQE,QAAQ,CAACO,IAAI,CAACf,WAAWa,IAAI,CAAA;AACvC,QAAA;AACF,IAAA,CAAA,CAAA;AAEAR,IAAAA,WAAAA,CAAYY,OAAO,CAACP,OAAO,CAAC,CAACV,UAAAA,GAAAA;AAC3B,QAAA,MAAMW,UAAUZ,mBAAAA,CAAoB;AAAER,YAAAA,OAAAA;AAASS,YAAAA,UAAAA;AAAYC,YAAAA;AAAU,SAAA,CAAA;AACrE,QAAA,MAAMW,SAASR,UAAAA,CAAWa,OAAO,CAACL,MAAM,CAACZ,WAAWa,IAAI,CAAA;QAExD,IAAID,MAAAA,KAAW,UAAA,IAAcD,OAAAA,KAAY,IAAA,EAAM;AAC7CP,YAAAA,UAAAA,CAAWa,OAAO,CAACH,MAAM,CAACd,WAAWa,IAAI,CAAA;AACzCP,YAAAA,OAAAA,CAAQC,OAAO,CAACQ,IAAI,CAACf,WAAWa,IAAI,CAAA;AACtC,QAAA;QAEA,IAAID,MAAAA,KAAW,SAAA,IAAaD,OAAAA,KAAY,KAAA,EAAO;AAC7CP,YAAAA,UAAAA,CAAWa,OAAO,CAACD,OAAO,CAAChB,WAAWa,IAAI,CAAA;AAC1CP,YAAAA,OAAAA,CAAQE,QAAQ,CAACO,IAAI,CAACf,WAAWa,IAAI,CAAA;AACvC,QAAA;AACF,IAAA,CAAA,CAAA;AAEAR,IAAAA,WAAAA,CAAYa,SAAS,CAACR,OAAO,CAAC,CAACV,UAAAA,GAAAA;AAC7B,QAAA,MAAMW,UAAUZ,mBAAAA,CAAoB;AAAER,YAAAA,OAAAA;AAASS,YAAAA,UAAAA;AAAYC,YAAAA;AAAU,SAAA,CAAA;AACrE,QAAA,MAAMW,SAASR,UAAAA,CAAWc,SAAS,CAACN,MAAM,CAACZ,WAAWa,IAAI,CAAA;QAE1D,IAAID,MAAAA,KAAW,UAAA,IAAcD,OAAAA,KAAY,IAAA,EAAM;AAC7CP,YAAAA,UAAAA,CAAWc,SAAS,CAACJ,MAAM,CAACd,WAAWa,IAAI,CAAA;AAC3CP,YAAAA,OAAAA,CAAQC,OAAO,CAACQ,IAAI,CAACf,WAAWa,IAAI,CAAA;AACtC,QAAA;QAEA,IAAID,MAAAA,KAAW,SAAA,IAAaD,OAAAA,KAAY,KAAA,EAAO;AAC7CP,YAAAA,UAAAA,CAAWc,SAAS,CAACF,OAAO,CAAChB,WAAWa,IAAI,CAAA;AAC5CP,YAAAA,OAAAA,CAAQE,QAAQ,CAACO,IAAI,CAACf,WAAWa,IAAI,CAAA;AACvC,QAAA;AACF,IAAA,CAAA,CAAA;IAEA,OAAOP,OAAAA;AACT;;;;;"}

package/dist/services/mcp/internal/syncMcpSessionCapabilities.mjs

@@ -0,0 +1,73 @@
+const canUseAuthorizedCapability = ({ ability, auth })=>auth.policies.some(({ action, subject })=>subject !== undefined ? ability.can(action, subject) : ability.can(action));
+const canUseMcpCapability = ({ ability, definition, isDevMode })=>{
+    if (definition.devModeOnly === true) {
+        return isDevMode === true;
+    }
+    if (definition.auth === undefined) {
+        return false;
+    }
+    // Session capability availability is a coarse allowlist. Field/entity conditions must be
+    // enforced by capability handlers with request-specific context.
+    return canUseAuthorizedCapability({
+        ability,
+        auth: definition.auth
+    });
+};
+const syncMcpSessionCapabilities = ({ registries, definitions, ability, isDevMode })=>{
+    const summary = {
+        enabled: [],
+        disabled: []
+    };
+    definitions.tools.forEach((definition)=>{
+        const allowed = canUseMcpCapability({
+            ability,
+            definition,
+            isDevMode
+        });
+        const status = registries.tools.status(definition.name);
+        if (status === 'disabled' && allowed === true) {
+            registries.tools.enable(definition.name);
+            summary.enabled.push(definition.name);
+        }
+        if (status === 'enabled' && allowed === false) {
+            registries.tools.disable(definition.name);
+            summary.disabled.push(definition.name);
+        }
+    });
+    definitions.prompts.forEach((definition)=>{
+        const allowed = canUseMcpCapability({
+            ability,
+            definition,
+            isDevMode
+        });
+        const status = registries.prompts.status(definition.name);
+        if (status === 'disabled' && allowed === true) {
+            registries.prompts.enable(definition.name);
+            summary.enabled.push(definition.name);
+        }
+        if (status === 'enabled' && allowed === false) {
+            registries.prompts.disable(definition.name);
+            summary.disabled.push(definition.name);
+        }
+    });
+    definitions.resources.forEach((definition)=>{
+        const allowed = canUseMcpCapability({
+            ability,
+            definition,
+            isDevMode
+        });
+        const status = registries.resources.status(definition.name);
+        if (status === 'disabled' && allowed === true) {
+            registries.resources.enable(definition.name);
+            summary.enabled.push(definition.name);
+        }
+        if (status === 'enabled' && allowed === false) {
+            registries.resources.disable(definition.name);
+            summary.disabled.push(definition.name);
+        }
+    });
+    return summary;
+};
+
+export { canUseMcpCapability, syncMcpSessionCapabilities };
+//# sourceMappingURL=syncMcpSessionCapabilities.mjs.map

package/dist/services/mcp/internal/syncMcpSessionCapabilities.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncMcpSessionCapabilities.mjs","sources":["../../../../src/services/mcp/internal/syncMcpSessionCapabilities.ts"],"sourcesContent":["import type { Modules } from '@strapi/types';\nimport type { McpAdminTokenAbility } from '../authentication';\nimport type { McpCapabilityDefinitions, McpRegistries } from './McpServerFactory';\n\ntype CanUseAuthorizedCapabilityParams = {\n  ability: McpAdminTokenAbility;\n  auth: Modules.MCP.McpCapabilityAuth;\n};\n\nexport type CanUseMcpCapabilityParams = {\n  ability: McpAdminTokenAbility;\n  definition: Modules.MCP.McpCapabilityDefinition;\n  isDevMode: boolean;\n};\n\nexport type SyncMcpSessionCapabilitiesParams = {\n  registries: McpRegistries;\n  definitions: McpCapabilityDefinitions;\n  ability: McpAdminTokenAbility;\n  isDevMode: boolean;\n};\n\nexport type SyncMcpSessionCapabilitiesSummary = {\n  enabled: string[];\n  disabled: string[];\n};\n\nconst canUseAuthorizedCapability = ({ ability, auth }: CanUseAuthorizedCapabilityParams): boolean =>\n  auth.policies.some(({ action, subject }) =>\n    subject !== undefined\n      ? ability.can(action, subject)\n      : // @ts-expect-error ability.can expects 2 arguments, but runtime allows 1\n        ability.can(action)\n  );\n\nexport const canUseMcpCapability = ({\n  ability,\n  definition,\n  isDevMode,\n}: CanUseMcpCapabilityParams): boolean => {\n  if (definition.devModeOnly === true) {\n    return isDevMode === true;\n  }\n\n  if (definition.auth === undefined) {\n    return false;\n  }\n\n  // Session capability availability is a coarse allowlist. Field/entity conditions must be\n  // enforced by capability handlers with request-specific context.\n  return canUseAuthorizedCapability({ ability, auth: definition.auth });\n};\n\nexport const syncMcpSessionCapabilities = ({\n  registries,\n  definitions,\n  ability,\n  isDevMode,\n}: SyncMcpSessionCapabilitiesParams): SyncMcpSessionCapabilitiesSummary => {\n  const summary: SyncMcpSessionCapabilitiesSummary = {\n    enabled: [],\n    disabled: [],\n  };\n\n  definitions.tools.forEach((definition) => {\n    const allowed = canUseMcpCapability({ ability, definition, isDevMode });\n    const status = registries.tools.status(definition.name);\n\n    if (status === 'disabled' && allowed === true) {\n      registries.tools.enable(definition.name);\n      summary.enabled.push(definition.name);\n    }\n\n    if (status === 'enabled' && allowed === false) {\n      registries.tools.disable(definition.name);\n      summary.disabled.push(definition.name);\n    }\n  });\n\n  definitions.prompts.forEach((definition) => {\n    const allowed = canUseMcpCapability({ ability, definition, isDevMode });\n    const status = registries.prompts.status(definition.name);\n\n    if (status === 'disabled' && allowed === true) {\n      registries.prompts.enable(definition.name);\n      summary.enabled.push(definition.name);\n    }\n\n    if (status === 'enabled' && allowed === false) {\n      registries.prompts.disable(definition.name);\n      summary.disabled.push(definition.name);\n    }\n  });\n\n  definitions.resources.forEach((definition) => {\n    const allowed = canUseMcpCapability({ ability, definition, isDevMode });\n    const status = registries.resources.status(definition.name);\n\n    if (status === 'disabled' && allowed === true) {\n      registries.resources.enable(definition.name);\n      summary.enabled.push(definition.name);\n    }\n\n    if (status === 'enabled' && allowed === false) {\n      registries.resources.disable(definition.name);\n      summary.disabled.push(definition.name);\n    }\n  });\n\n  return summary;\n};\n"],"names":["canUseAuthorizedCapability","ability","auth","policies","some","action","subject","undefined","can","canUseMcpCapability","definition","isDevMode","devModeOnly","syncMcpSessionCapabilities","registries","definitions","summary","enabled","disabled","tools","forEach","allowed","status","name","enable","push","disable","prompts","resources"],"mappings":"AA2BA,MAAMA,0BAAAA,GAA6B,CAAC,EAAEC,OAAO,EAAEC,IAAI,EAAoC,GACrFA,IAAAA,CAAKC,QAAQ,CAACC,IAAI,CAAC,CAAC,EAAEC,MAAM,EAAEC,OAAO,EAAE,GACrCA,OAAAA,KAAYC,SAAAA,GACRN,OAAAA,CAAQO,GAAG,CAACH,MAAAA,EAAQC,OAAAA,CAAAA,GAEpBL,OAAAA,CAAQO,GAAG,CAACH,MAAAA,CAAAA,CAAAA;AAGb,MAAMI,sBAAsB,CAAC,EAClCR,OAAO,EACPS,UAAU,EACVC,SAAS,EACiB,GAAA;IAC1B,IAAID,UAAAA,CAAWE,WAAW,KAAK,IAAA,EAAM;AACnC,QAAA,OAAOD,SAAAA,KAAc,IAAA;AACvB,IAAA;IAEA,IAAID,UAAAA,CAAWR,IAAI,KAAKK,SAAAA,EAAW;QACjC,OAAO,KAAA;AACT,IAAA;;;AAIA,IAAA,OAAOP,0BAAAA,CAA2B;AAAEC,QAAAA,OAAAA;AAASC,QAAAA,IAAAA,EAAMQ,WAAWR;AAAK,KAAA,CAAA;AACrE;AAEO,MAAMW,0BAAAA,GAA6B,CAAC,EACzCC,UAAU,EACVC,WAAW,EACXd,OAAO,EACPU,SAAS,EACwB,GAAA;AACjC,IAAA,MAAMK,OAAAA,GAA6C;AACjDC,QAAAA,OAAAA,EAAS,EAAE;AACXC,QAAAA,QAAAA,EAAU;AACZ,KAAA;AAEAH,IAAAA,WAAAA,CAAYI,KAAK,CAACC,OAAO,CAAC,CAACV,UAAAA,GAAAA;AACzB,QAAA,MAAMW,UAAUZ,mBAAAA,CAAoB;AAAER,YAAAA,OAAAA;AAASS,YAAAA,UAAAA;AAAYC,YAAAA;AAAU,SAAA,CAAA;AACrE,QAAA,MAAMW,SAASR,UAAAA,CAAWK,KAAK,CAACG,MAAM,CAACZ,WAAWa,IAAI,CAAA;QAEtD,IAAID,MAAAA,KAAW,UAAA,IAAcD,OAAAA,KAAY,IAAA,EAAM;AAC7CP,YAAAA,UAAAA,CAAWK,KAAK,CAACK,MAAM,CAACd,WAAWa,IAAI,CAAA;AACvCP,YAAAA,OAAAA,CAAQC,OAAO,CAACQ,IAAI,CAACf,WAAWa,IAAI,CAAA;AACtC,QAAA;QAEA,IAAID,MAAAA,KAAW,SAAA,IAAaD,OAAAA,KAAY,KAAA,EAAO;AAC7CP,YAAAA,UAAAA,CAAWK,KAAK,CAACO,OAAO,CAAChB,WAAWa,IAAI,CAAA;AACxCP,YAAAA,OAAAA,CAAQE,QAAQ,CAACO,IAAI,CAACf,WAAWa,IAAI,CAAA;AACvC,QAAA;AACF,IAAA,CAAA,CAAA;AAEAR,IAAAA,WAAAA,CAAYY,OAAO,CAACP,OAAO,CAAC,CAACV,UAAAA,GAAAA;AAC3B,QAAA,MAAMW,UAAUZ,mBAAAA,CAAoB;AAAER,YAAAA,OAAAA;AAASS,YAAAA,UAAAA;AAAYC,YAAAA;AAAU,SAAA,CAAA;AACrE,QAAA,MAAMW,SAASR,UAAAA,CAAWa,OAAO,CAACL,MAAM,CAACZ,WAAWa,IAAI,CAAA;QAExD,IAAID,MAAAA,KAAW,UAAA,IAAcD,OAAAA,KAAY,IAAA,EAAM;AAC7CP,YAAAA,UAAAA,CAAWa,OAAO,CAACH,MAAM,CAACd,WAAWa,IAAI,CAAA;AACzCP,YAAAA,OAAAA,CAAQC,OAAO,CAACQ,IAAI,CAACf,WAAWa,IAAI,CAAA;AACtC,QAAA;QAEA,IAAID,MAAAA,KAAW,SAAA,IAAaD,OAAAA,KAAY,KAAA,EAAO;AAC7CP,YAAAA,UAAAA,CAAWa,OAAO,CAACD,OAAO,CAAChB,WAAWa,IAAI,CAAA;AAC1CP,YAAAA,OAAAA,CAAQE,QAAQ,CAACO,IAAI,CAACf,WAAWa,IAAI,CAAA;AACvC,QAAA;AACF,IAAA,CAAA,CAAA;AAEAR,IAAAA,WAAAA,CAAYa,SAAS,CAACR,OAAO,CAAC,CAACV,UAAAA,GAAAA;AAC7B,QAAA,MAAMW,UAAUZ,mBAAAA,CAAoB;AAAER,YAAAA,OAAAA;AAASS,YAAAA,UAAAA;AAAYC,YAAAA;AAAU,SAAA,CAAA;AACrE,QAAA,MAAMW,SAASR,UAAAA,CAAWc,SAAS,CAACN,MAAM,CAACZ,WAAWa,IAAI,CAAA;QAE1D,IAAID,MAAAA,KAAW,UAAA,IAAcD,OAAAA,KAAY,IAAA,EAAM;AAC7CP,YAAAA,UAAAA,CAAWc,SAAS,CAACJ,MAAM,CAACd,WAAWa,IAAI,CAAA;AAC3CP,YAAAA,OAAAA,CAAQC,OAAO,CAACQ,IAAI,CAACf,WAAWa,IAAI,CAAA;AACtC,QAAA;QAEA,IAAID,MAAAA,KAAW,SAAA,IAAaD,OAAAA,KAAY,KAAA,EAAO;AAC7CP,YAAAA,UAAAA,CAAWc,SAAS,CAACF,OAAO,CAAChB,WAAWa,IAAI,CAAA;AAC5CP,YAAAA,OAAAA,CAAQE,QAAQ,CAACO,IAAI,CAACf,WAAWa,IAAI,CAAA;AACvC,QAAA;AACF,IAAA,CAAA,CAAA;IAEA,OAAOP,OAAAA;AACT;;;;"}

package/dist/services/mcp/metrics/metrics.d.ts

@@ -0,0 +1,29 @@
+import type { Core } from '@strapi/types';
+import type { McpCapabilityIdentity } from './normalizeMcpCapability';
+/** Rate-limited via core telemetry `LIMITED_EVENTS`. */
+export declare const MCP_LIMITED_TELEMETRY_EVENTS: {
+    readonly didStartMcpServer: "didStartMcpServer";
+    readonly didUseMcpServer: "didUseMcpServer";
+    readonly didNotAuthenticateMcpRequest: "didNotAuthenticateMcpRequest";
+    readonly didNotHandleMcpRequest: "didNotHandleMcpRequest";
+};
+export type McpLimitedTelemetryEvent = (typeof MCP_LIMITED_TELEMETRY_EVENTS)[keyof typeof MCP_LIMITED_TELEMETRY_EVENTS];
+export type McpAuthErrorClass = 'missing_token' | 'invalid_token';
+export type McpRequestErrorClass = 'timeout' | 'error';
+export type McpCapabilityErrorClass = 'execution_error';
+export type McpStartTelemetryProperties = {
+    path: string;
+    numberOfTools: number;
+    numberOfPrompts: number;
+    numberOfResources: number;
+};
+/** Resets in-memory capability metrics state (unit tests only). */
+export declare const resetMcpMetricsStateForTests: () => void;
+export declare const classifyMcpRequestFailure: (error: unknown) => McpRequestErrorClass;
+export declare const sendDidStartMcpServer: (strapi: Core.Strapi, properties: McpStartTelemetryProperties) => void;
+export declare const sendDidUseMcpServer: (strapi: Core.Strapi) => void;
+export declare const sendDidNotAuthenticateMcpRequest: (strapi: Core.Strapi, errorClass: McpAuthErrorClass) => void;
+export declare const sendDidNotHandleMcpRequest: (strapi: Core.Strapi, errorClass: McpRequestErrorClass) => void;
+export declare const sendDidExecuteMcpCapability: (strapi: Core.Strapi, identity: McpCapabilityIdentity) => void;
+export declare const sendDidNotExecuteMcpCapability: (strapi: Core.Strapi, identity: McpCapabilityIdentity, errorClass: McpCapabilityErrorClass) => void;
+//# sourceMappingURL=metrics.d.ts.map

package/dist/services/mcp/metrics/metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../../../../src/services/mcp/metrics/metrics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAE1C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEtE,wDAAwD;AACxD,eAAO,MAAM,4BAA4B;;;;;CAK/B,CAAC;AAEX,MAAM,MAAM,wBAAwB,GAClC,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,OAAO,4BAA4B,CAAC,CAAC;AAEnF,MAAM,MAAM,iBAAiB,GAAG,eAAe,GAAG,eAAe,CAAC;AAClE,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,OAAO,CAAC;AACvD,MAAM,MAAM,uBAAuB,GAAG,iBAAiB,CAAC;AAExD,MAAM,MAAM,2BAA2B,GAAG;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAWF,mEAAmE;AACnE,eAAO,MAAM,4BAA4B,QAAO,IAI/C,CAAC;AAwBF,eAAO,MAAM,yBAAyB,UAAW,OAAO,KAAG,oBAM1D,CAAC;AAEF,eAAO,MAAM,qBAAqB,WACxB,KAAK,MAAM,cACP,2BAA2B,KACtC,IAWF,CAAC;AAEF,eAAO,MAAM,mBAAmB,WAAY,KAAK,MAAM,KAAG,IAEzD,CAAC;AAEF,eAAO,MAAM,gCAAgC,WACnC,KAAK,MAAM,cACP,iBAAiB,KAC5B,IAMF,CAAC;AAEF,eAAO,MAAM,0BAA0B,WAC7B,KAAK,MAAM,cACP,oBAAoB,KAC/B,IAMF,CAAC;AAEF,eAAO,MAAM,2BAA2B,WAC9B,KAAK,MAAM,YACT,qBAAqB,KAC9B,IAcF,CAAC;AAEF,eAAO,MAAM,8BAA8B,WACjC,KAAK,MAAM,YACT,qBAAqB,cACnB,uBAAuB,KAClC,IAeF,CAAC"}

package/dist/services/mcp/metrics/metrics.js

@@ -0,0 +1,97 @@
+'use strict';
+
+/** Rate-limited via core telemetry `LIMITED_EVENTS`. */ const MCP_LIMITED_TELEMETRY_EVENTS = {
+    didStartMcpServer: 'didStartMcpServer',
+    didUseMcpServer: 'didUseMcpServer',
+    didNotAuthenticateMcpRequest: 'didNotAuthenticateMcpRequest',
+    didNotHandleMcpRequest: 'didNotHandleMcpRequest'
+};
+const ONE_DAY_MS = 24 * 60 * 60 * 1000;
+let capabilityCacheExpiresAt = Date.now() + ONE_DAY_MS;
+const executedCapabilities = new Set();
+const failedCapabilities = new Set();
+const capabilityCacheKey = (identity, succeeded)=>`${succeeded ? 'execute' : 'notExecute'}:${identity.type}:${identity.source}:${identity.name}`;
+const shouldSendCapabilityEvent = (identity, succeeded)=>{
+    const cache = succeeded ? executedCapabilities : failedCapabilities;
+    if (Date.now() > capabilityCacheExpiresAt) {
+        executedCapabilities.clear();
+        failedCapabilities.clear();
+        capabilityCacheExpiresAt = Date.now() + ONE_DAY_MS;
+    }
+    const key = capabilityCacheKey(identity, succeeded);
+    if (cache.has(key)) {
+        return false;
+    }
+    cache.add(key);
+    return true;
+};
+const classifyMcpRequestFailure = (error)=>{
+    if (error instanceof Error && error.message.includes('timed out')) {
+        return 'timeout';
+    }
+    return 'error';
+};
+const sendDidStartMcpServer = (strapi, properties)=>{
+    strapi.telemetry.send(MCP_LIMITED_TELEMETRY_EVENTS.didStartMcpServer, {
+        eventProperties: {
+            path: properties.path
+        },
+        groupProperties: {
+            numberOfTools: properties.numberOfTools,
+            numberOfPrompts: properties.numberOfPrompts,
+            numberOfResources: properties.numberOfResources
+        }
+    }).catch(()=>{});
+};
+const sendDidUseMcpServer = (strapi)=>{
+    strapi.telemetry.send(MCP_LIMITED_TELEMETRY_EVENTS.didUseMcpServer).catch(()=>{});
+};
+const sendDidNotAuthenticateMcpRequest = (strapi, errorClass)=>{
+    strapi.telemetry.send(MCP_LIMITED_TELEMETRY_EVENTS.didNotAuthenticateMcpRequest, {
+        eventProperties: {
+            errorClass
+        }
+    }).catch(()=>{});
+};
+const sendDidNotHandleMcpRequest = (strapi, errorClass)=>{
+    strapi.telemetry.send(MCP_LIMITED_TELEMETRY_EVENTS.didNotHandleMcpRequest, {
+        eventProperties: {
+            errorClass
+        }
+    }).catch(()=>{});
+};
+const sendDidExecuteMcpCapability = (strapi, identity)=>{
+    if (!shouldSendCapabilityEvent(identity, true)) {
+        return;
+    }
+    strapi.telemetry.send('didExecuteMcpCapability', {
+        eventProperties: {
+            type: identity.type,
+            source: identity.source,
+            name: identity.name
+        }
+    }).catch(()=>{});
+};
+const sendDidNotExecuteMcpCapability = (strapi, identity, errorClass)=>{
+    if (!shouldSendCapabilityEvent(identity, false)) {
+        return;
+    }
+    strapi.telemetry.send('didNotExecuteMcpCapability', {
+        eventProperties: {
+            type: identity.type,
+            source: identity.source,
+            name: identity.name,
+            errorClass
+        }
+    }).catch(()=>{});
+};
+
+exports.MCP_LIMITED_TELEMETRY_EVENTS = MCP_LIMITED_TELEMETRY_EVENTS;
+exports.classifyMcpRequestFailure = classifyMcpRequestFailure;
+exports.sendDidExecuteMcpCapability = sendDidExecuteMcpCapability;
+exports.sendDidNotAuthenticateMcpRequest = sendDidNotAuthenticateMcpRequest;
+exports.sendDidNotExecuteMcpCapability = sendDidNotExecuteMcpCapability;
+exports.sendDidNotHandleMcpRequest = sendDidNotHandleMcpRequest;
+exports.sendDidStartMcpServer = sendDidStartMcpServer;
+exports.sendDidUseMcpServer = sendDidUseMcpServer;
+//# sourceMappingURL=metrics.js.map

package/dist/services/mcp/metrics/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sources":["../../../../src/services/mcp/metrics/metrics.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\n\nimport type { McpCapabilityIdentity } from './normalizeMcpCapability';\n\n/** Rate-limited via core telemetry `LIMITED_EVENTS`. */\nexport const MCP_LIMITED_TELEMETRY_EVENTS = {\n  didStartMcpServer: 'didStartMcpServer',\n  didUseMcpServer: 'didUseMcpServer',\n  didNotAuthenticateMcpRequest: 'didNotAuthenticateMcpRequest',\n  didNotHandleMcpRequest: 'didNotHandleMcpRequest',\n} as const;\n\nexport type McpLimitedTelemetryEvent =\n  (typeof MCP_LIMITED_TELEMETRY_EVENTS)[keyof typeof MCP_LIMITED_TELEMETRY_EVENTS];\n\nexport type McpAuthErrorClass = 'missing_token' | 'invalid_token';\nexport type McpRequestErrorClass = 'timeout' | 'error';\nexport type McpCapabilityErrorClass = 'execution_error';\n\nexport type McpStartTelemetryProperties = {\n  path: string;\n  numberOfTools: number;\n  numberOfPrompts: number;\n  numberOfResources: number;\n};\n\nconst ONE_DAY_MS = 24 * 60 * 60 * 1000;\n\nlet capabilityCacheExpiresAt = Date.now() + ONE_DAY_MS;\nconst executedCapabilities = new Set<string>();\nconst failedCapabilities = new Set<string>();\n\nconst capabilityCacheKey = (identity: McpCapabilityIdentity, succeeded: boolean): string =>\n  `${succeeded ? 'execute' : 'notExecute'}:${identity.type}:${identity.source}:${identity.name}`;\n\n/** Resets in-memory capability metrics state (unit tests only). */\nexport const resetMcpMetricsStateForTests = (): void => {\n  executedCapabilities.clear();\n  failedCapabilities.clear();\n  capabilityCacheExpiresAt = Date.now() + ONE_DAY_MS;\n};\n\nconst shouldSendCapabilityEvent = (\n  identity: McpCapabilityIdentity,\n  succeeded: boolean\n): boolean => {\n  const cache = succeeded ? executedCapabilities : failedCapabilities;\n\n  if (Date.now() > capabilityCacheExpiresAt) {\n    executedCapabilities.clear();\n    failedCapabilities.clear();\n    capabilityCacheExpiresAt = Date.now() + ONE_DAY_MS;\n  }\n\n  const key = capabilityCacheKey(identity, succeeded);\n\n  if (cache.has(key)) {\n    return false;\n  }\n\n  cache.add(key);\n  return true;\n};\n\nexport const classifyMcpRequestFailure = (error: unknown): McpRequestErrorClass => {\n  if (error instanceof Error && error.message.includes('timed out')) {\n    return 'timeout';\n  }\n\n  return 'error';\n};\n\nexport const sendDidStartMcpServer = (\n  strapi: Core.Strapi,\n  properties: McpStartTelemetryProperties\n): void => {\n  strapi.telemetry\n    .send(MCP_LIMITED_TELEMETRY_EVENTS.didStartMcpServer, {\n      eventProperties: { path: properties.path },\n      groupProperties: {\n        numberOfTools: properties.numberOfTools,\n        numberOfPrompts: properties.numberOfPrompts,\n        numberOfResources: properties.numberOfResources,\n      },\n    })\n    .catch(() => {});\n};\n\nexport const sendDidUseMcpServer = (strapi: Core.Strapi): void => {\n  strapi.telemetry.send(MCP_LIMITED_TELEMETRY_EVENTS.didUseMcpServer).catch(() => {});\n};\n\nexport const sendDidNotAuthenticateMcpRequest = (\n  strapi: Core.Strapi,\n  errorClass: McpAuthErrorClass\n): void => {\n  strapi.telemetry\n    .send(MCP_LIMITED_TELEMETRY_EVENTS.didNotAuthenticateMcpRequest, {\n      eventProperties: { errorClass },\n    })\n    .catch(() => {});\n};\n\nexport const sendDidNotHandleMcpRequest = (\n  strapi: Core.Strapi,\n  errorClass: McpRequestErrorClass\n): void => {\n  strapi.telemetry\n    .send(MCP_LIMITED_TELEMETRY_EVENTS.didNotHandleMcpRequest, {\n      eventProperties: { errorClass },\n    })\n    .catch(() => {});\n};\n\nexport const sendDidExecuteMcpCapability = (\n  strapi: Core.Strapi,\n  identity: McpCapabilityIdentity\n): void => {\n  if (!shouldSendCapabilityEvent(identity, true)) {\n    return;\n  }\n\n  strapi.telemetry\n    .send('didExecuteMcpCapability', {\n      eventProperties: {\n        type: identity.type,\n        source: identity.source,\n        name: identity.name,\n      },\n    })\n    .catch(() => {});\n};\n\nexport const sendDidNotExecuteMcpCapability = (\n  strapi: Core.Strapi,\n  identity: McpCapabilityIdentity,\n  errorClass: McpCapabilityErrorClass\n): void => {\n  if (!shouldSendCapabilityEvent(identity, false)) {\n    return;\n  }\n\n  strapi.telemetry\n    .send('didNotExecuteMcpCapability', {\n      eventProperties: {\n        type: identity.type,\n        source: identity.source,\n        name: identity.name,\n        errorClass,\n      },\n    })\n    .catch(() => {});\n};\n"],"names":["MCP_LIMITED_TELEMETRY_EVENTS","didStartMcpServer","didUseMcpServer","didNotAuthenticateMcpRequest","didNotHandleMcpRequest","ONE_DAY_MS","capabilityCacheExpiresAt","Date","now","executedCapabilities","Set","failedCapabilities","capabilityCacheKey","identity","succeeded","type","source","name","shouldSendCapabilityEvent","cache","clear","key","has","add","classifyMcpRequestFailure","error","Error","message","includes","sendDidStartMcpServer","strapi","properties","telemetry","send","eventProperties","path","groupProperties","numberOfTools","numberOfPrompts","numberOfResources","catch","sendDidUseMcpServer","sendDidNotAuthenticateMcpRequest","errorClass","sendDidNotHandleMcpRequest","sendDidExecuteMcpCapability","sendDidNotExecuteMcpCapability"],"mappings":";;AAIA,yDACO,MAAMA,4BAAAA,GAA+B;IAC1CC,iBAAAA,EAAmB,mBAAA;IACnBC,eAAAA,EAAiB,iBAAA;IACjBC,4BAAAA,EAA8B,8BAAA;IAC9BC,sBAAAA,EAAwB;AAC1B;AAgBA,MAAMC,UAAAA,GAAa,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,IAAA;AAElC,IAAIC,wBAAAA,GAA2BC,IAAAA,CAAKC,GAAG,EAAA,GAAKH,UAAAA;AAC5C,MAAMI,uBAAuB,IAAIC,GAAAA,EAAAA;AACjC,MAAMC,qBAAqB,IAAID,GAAAA,EAAAA;AAE/B,MAAME,kBAAAA,GAAqB,CAACC,QAAAA,EAAiCC,SAAAA,GAC3D,GAAGA,SAAAA,GAAY,SAAA,GAAY,YAAA,CAAa,CAAC,EAAED,QAAAA,CAASE,IAAI,CAAC,CAAC,EAAEF,QAAAA,CAASG,MAAM,CAAC,CAAC,EAAEH,QAAAA,CAASI,IAAI,CAAA,CAAE;AAShG,MAAMC,yBAAAA,GAA4B,CAChCL,QAAAA,EACAC,SAAAA,GAAAA;IAEA,MAAMK,KAAAA,GAAQL,YAAYL,oBAAAA,GAAuBE,kBAAAA;IAEjD,IAAIJ,IAAAA,CAAKC,GAAG,EAAA,GAAKF,wBAAAA,EAA0B;AACzCG,QAAAA,oBAAAA,CAAqBW,KAAK,EAAA;AAC1BT,QAAAA,kBAAAA,CAAmBS,KAAK,EAAA;QACxBd,wBAAAA,GAA2BC,IAAAA,CAAKC,GAAG,EAAA,GAAKH,UAAAA;AAC1C,IAAA;IAEA,MAAMgB,GAAAA,GAAMT,mBAAmBC,QAAAA,EAAUC,SAAAA,CAAAA;IAEzC,IAAIK,KAAAA,CAAMG,GAAG,CAACD,GAAAA,CAAAA,EAAM;QAClB,OAAO,KAAA;AACT,IAAA;AAEAF,IAAAA,KAAAA,CAAMI,GAAG,CAACF,GAAAA,CAAAA;IACV,OAAO,IAAA;AACT,CAAA;AAEO,MAAMG,4BAA4B,CAACC,KAAAA,GAAAA;AACxC,IAAA,IAAIA,iBAAiBC,KAAAA,IAASD,KAAAA,CAAME,OAAO,CAACC,QAAQ,CAAC,WAAA,CAAA,EAAc;QACjE,OAAO,SAAA;AACT,IAAA;IAEA,OAAO,OAAA;AACT;AAEO,MAAMC,qBAAAA,GAAwB,CACnCC,MAAAA,EACAC,UAAAA,GAAAA;AAEAD,IAAAA,MAAAA,CAAOE,SAAS,CACbC,IAAI,CAACjC,4BAAAA,CAA6BC,iBAAiB,EAAE;QACpDiC,eAAAA,EAAiB;AAAEC,YAAAA,IAAAA,EAAMJ,WAAWI;AAAK,SAAA;QACzCC,eAAAA,EAAiB;AACfC,YAAAA,aAAAA,EAAeN,WAAWM,aAAa;AACvCC,YAAAA,eAAAA,EAAiBP,WAAWO,eAAe;AAC3CC,YAAAA,iBAAAA,EAAmBR,WAAWQ;AAChC;KACF,CAAA,CACCC,KAAK,CAAC,IAAA,CAAO,CAAA,CAAA;AAClB;AAEO,MAAMC,sBAAsB,CAACX,MAAAA,GAAAA;IAClCA,MAAAA,CAAOE,SAAS,CAACC,IAAI,CAACjC,6BAA6BE,eAAe,CAAA,CAAEsC,KAAK,CAAC,IAAA,CAAO,CAAA,CAAA;AACnF;AAEO,MAAME,gCAAAA,GAAmC,CAC9CZ,MAAAA,EACAa,UAAAA,GAAAA;AAEAb,IAAAA,MAAAA,CAAOE,SAAS,CACbC,IAAI,CAACjC,4BAAAA,CAA6BG,4BAA4B,EAAE;QAC/D+B,eAAAA,EAAiB;AAAES,YAAAA;AAAW;KAChC,CAAA,CACCH,KAAK,CAAC,IAAA,CAAO,CAAA,CAAA;AAClB;AAEO,MAAMI,0BAAAA,GAA6B,CACxCd,MAAAA,EACAa,UAAAA,GAAAA;AAEAb,IAAAA,MAAAA,CAAOE,SAAS,CACbC,IAAI,CAACjC,4BAAAA,CAA6BI,sBAAsB,EAAE;QACzD8B,eAAAA,EAAiB;AAAES,YAAAA;AAAW;KAChC,CAAA,CACCH,KAAK,CAAC,IAAA,CAAO,CAAA,CAAA;AAClB;AAEO,MAAMK,2BAAAA,GAA8B,CACzCf,MAAAA,EACAjB,QAAAA,GAAAA;IAEA,IAAI,CAACK,yBAAAA,CAA0BL,QAAAA,EAAU,IAAA,CAAA,EAAO;AAC9C,QAAA;AACF,IAAA;AAEAiB,IAAAA,MAAAA,CAAOE,SAAS,CACbC,IAAI,CAAC,yBAAA,EAA2B;QAC/BC,eAAAA,EAAiB;AACfnB,YAAAA,IAAAA,EAAMF,SAASE,IAAI;AACnBC,YAAAA,MAAAA,EAAQH,SAASG,MAAM;AACvBC,YAAAA,IAAAA,EAAMJ,SAASI;AACjB;KACF,CAAA,CACCuB,KAAK,CAAC,IAAA,CAAO,CAAA,CAAA;AAClB;AAEO,MAAMM,8BAAAA,GAAiC,CAC5ChB,MAAAA,EACAjB,QAAAA,EACA8B,UAAAA,GAAAA;IAEA,IAAI,CAACzB,yBAAAA,CAA0BL,QAAAA,EAAU,KAAA,CAAA,EAAQ;AAC/C,QAAA;AACF,IAAA;AAEAiB,IAAAA,MAAAA,CAAOE,SAAS,CACbC,IAAI,CAAC,4BAAA,EAA8B;QAClCC,eAAAA,EAAiB;AACfnB,YAAAA,IAAAA,EAAMF,SAASE,IAAI;AACnBC,YAAAA,MAAAA,EAAQH,SAASG,MAAM;AACvBC,YAAAA,IAAAA,EAAMJ,SAASI,IAAI;AACnB0B,YAAAA;AACF;KACF,CAAA,CACCH,KAAK,CAAC,IAAA,CAAO,CAAA,CAAA;AAClB;;;;;;;;;;;"}

package/dist/services/mcp/metrics/metrics.mjs

@@ -0,0 +1,88 @@
+/** Rate-limited via core telemetry `LIMITED_EVENTS`. */ const MCP_LIMITED_TELEMETRY_EVENTS = {
+    didStartMcpServer: 'didStartMcpServer',
+    didUseMcpServer: 'didUseMcpServer',
+    didNotAuthenticateMcpRequest: 'didNotAuthenticateMcpRequest',
+    didNotHandleMcpRequest: 'didNotHandleMcpRequest'
+};
+const ONE_DAY_MS = 24 * 60 * 60 * 1000;
+let capabilityCacheExpiresAt = Date.now() + ONE_DAY_MS;
+const executedCapabilities = new Set();
+const failedCapabilities = new Set();
+const capabilityCacheKey = (identity, succeeded)=>`${succeeded ? 'execute' : 'notExecute'}:${identity.type}:${identity.source}:${identity.name}`;
+const shouldSendCapabilityEvent = (identity, succeeded)=>{
+    const cache = succeeded ? executedCapabilities : failedCapabilities;
+    if (Date.now() > capabilityCacheExpiresAt) {
+        executedCapabilities.clear();
+        failedCapabilities.clear();
+        capabilityCacheExpiresAt = Date.now() + ONE_DAY_MS;
+    }
+    const key = capabilityCacheKey(identity, succeeded);
+    if (cache.has(key)) {
+        return false;
+    }
+    cache.add(key);
+    return true;
+};
+const classifyMcpRequestFailure = (error)=>{
+    if (error instanceof Error && error.message.includes('timed out')) {
+        return 'timeout';
+    }
+    return 'error';
+};
+const sendDidStartMcpServer = (strapi, properties)=>{
+    strapi.telemetry.send(MCP_LIMITED_TELEMETRY_EVENTS.didStartMcpServer, {
+        eventProperties: {
+            path: properties.path
+        },
+        groupProperties: {
+            numberOfTools: properties.numberOfTools,
+            numberOfPrompts: properties.numberOfPrompts,
+            numberOfResources: properties.numberOfResources
+        }
+    }).catch(()=>{});
+};
+const sendDidUseMcpServer = (strapi)=>{
+    strapi.telemetry.send(MCP_LIMITED_TELEMETRY_EVENTS.didUseMcpServer).catch(()=>{});
+};
+const sendDidNotAuthenticateMcpRequest = (strapi, errorClass)=>{
+    strapi.telemetry.send(MCP_LIMITED_TELEMETRY_EVENTS.didNotAuthenticateMcpRequest, {
+        eventProperties: {
+            errorClass
+        }
+    }).catch(()=>{});
+};
+const sendDidNotHandleMcpRequest = (strapi, errorClass)=>{
+    strapi.telemetry.send(MCP_LIMITED_TELEMETRY_EVENTS.didNotHandleMcpRequest, {
+        eventProperties: {
+            errorClass
+        }
+    }).catch(()=>{});
+};
+const sendDidExecuteMcpCapability = (strapi, identity)=>{
+    if (!shouldSendCapabilityEvent(identity, true)) {
+        return;
+    }
+    strapi.telemetry.send('didExecuteMcpCapability', {
+        eventProperties: {
+            type: identity.type,
+            source: identity.source,
+            name: identity.name
+        }
+    }).catch(()=>{});
+};
+const sendDidNotExecuteMcpCapability = (strapi, identity, errorClass)=>{
+    if (!shouldSendCapabilityEvent(identity, false)) {
+        return;
+    }
+    strapi.telemetry.send('didNotExecuteMcpCapability', {
+        eventProperties: {
+            type: identity.type,
+            source: identity.source,
+            name: identity.name,
+            errorClass
+        }
+    }).catch(()=>{});
+};
+
+export { MCP_LIMITED_TELEMETRY_EVENTS, classifyMcpRequestFailure, sendDidExecuteMcpCapability, sendDidNotAuthenticateMcpRequest, sendDidNotExecuteMcpCapability, sendDidNotHandleMcpRequest, sendDidStartMcpServer, sendDidUseMcpServer };
+//# sourceMappingURL=metrics.mjs.map

package/dist/services/mcp/metrics/metrics.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.mjs","sources":["../../../../src/services/mcp/metrics/metrics.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\n\nimport type { McpCapabilityIdentity } from './normalizeMcpCapability';\n\n/** Rate-limited via core telemetry `LIMITED_EVENTS`. */\nexport const MCP_LIMITED_TELEMETRY_EVENTS = {\n  didStartMcpServer: 'didStartMcpServer',\n  didUseMcpServer: 'didUseMcpServer',\n  didNotAuthenticateMcpRequest: 'didNotAuthenticateMcpRequest',\n  didNotHandleMcpRequest: 'didNotHandleMcpRequest',\n} as const;\n\nexport type McpLimitedTelemetryEvent =\n  (typeof MCP_LIMITED_TELEMETRY_EVENTS)[keyof typeof MCP_LIMITED_TELEMETRY_EVENTS];\n\nexport type McpAuthErrorClass = 'missing_token' | 'invalid_token';\nexport type McpRequestErrorClass = 'timeout' | 'error';\nexport type McpCapabilityErrorClass = 'execution_error';\n\nexport type McpStartTelemetryProperties = {\n  path: string;\n  numberOfTools: number;\n  numberOfPrompts: number;\n  numberOfResources: number;\n};\n\nconst ONE_DAY_MS = 24 * 60 * 60 * 1000;\n\nlet capabilityCacheExpiresAt = Date.now() + ONE_DAY_MS;\nconst executedCapabilities = new Set<string>();\nconst failedCapabilities = new Set<string>();\n\nconst capabilityCacheKey = (identity: McpCapabilityIdentity, succeeded: boolean): string =>\n  `${succeeded ? 'execute' : 'notExecute'}:${identity.type}:${identity.source}:${identity.name}`;\n\n/** Resets in-memory capability metrics state (unit tests only). */\nexport const resetMcpMetricsStateForTests = (): void => {\n  executedCapabilities.clear();\n  failedCapabilities.clear();\n  capabilityCacheExpiresAt = Date.now() + ONE_DAY_MS;\n};\n\nconst shouldSendCapabilityEvent = (\n  identity: McpCapabilityIdentity,\n  succeeded: boolean\n): boolean => {\n  const cache = succeeded ? executedCapabilities : failedCapabilities;\n\n  if (Date.now() > capabilityCacheExpiresAt) {\n    executedCapabilities.clear();\n    failedCapabilities.clear();\n    capabilityCacheExpiresAt = Date.now() + ONE_DAY_MS;\n  }\n\n  const key = capabilityCacheKey(identity, succeeded);\n\n  if (cache.has(key)) {\n    return false;\n  }\n\n  cache.add(key);\n  return true;\n};\n\nexport const classifyMcpRequestFailure = (error: unknown): McpRequestErrorClass => {\n  if (error instanceof Error && error.message.includes('timed out')) {\n    return 'timeout';\n  }\n\n  return 'error';\n};\n\nexport const sendDidStartMcpServer = (\n  strapi: Core.Strapi,\n  properties: McpStartTelemetryProperties\n): void => {\n  strapi.telemetry\n    .send(MCP_LIMITED_TELEMETRY_EVENTS.didStartMcpServer, {\n      eventProperties: { path: properties.path },\n      groupProperties: {\n        numberOfTools: properties.numberOfTools,\n        numberOfPrompts: properties.numberOfPrompts,\n        numberOfResources: properties.numberOfResources,\n      },\n    })\n    .catch(() => {});\n};\n\nexport const sendDidUseMcpServer = (strapi: Core.Strapi): void => {\n  strapi.telemetry.send(MCP_LIMITED_TELEMETRY_EVENTS.didUseMcpServer).catch(() => {});\n};\n\nexport const sendDidNotAuthenticateMcpRequest = (\n  strapi: Core.Strapi,\n  errorClass: McpAuthErrorClass\n): void => {\n  strapi.telemetry\n    .send(MCP_LIMITED_TELEMETRY_EVENTS.didNotAuthenticateMcpRequest, {\n      eventProperties: { errorClass },\n    })\n    .catch(() => {});\n};\n\nexport const sendDidNotHandleMcpRequest = (\n  strapi: Core.Strapi,\n  errorClass: McpRequestErrorClass\n): void => {\n  strapi.telemetry\n    .send(MCP_LIMITED_TELEMETRY_EVENTS.didNotHandleMcpRequest, {\n      eventProperties: { errorClass },\n    })\n    .catch(() => {});\n};\n\nexport const sendDidExecuteMcpCapability = (\n  strapi: Core.Strapi,\n  identity: McpCapabilityIdentity\n): void => {\n  if (!shouldSendCapabilityEvent(identity, true)) {\n    return;\n  }\n\n  strapi.telemetry\n    .send('didExecuteMcpCapability', {\n      eventProperties: {\n        type: identity.type,\n        source: identity.source,\n        name: identity.name,\n      },\n    })\n    .catch(() => {});\n};\n\nexport const sendDidNotExecuteMcpCapability = (\n  strapi: Core.Strapi,\n  identity: McpCapabilityIdentity,\n  errorClass: McpCapabilityErrorClass\n): void => {\n  if (!shouldSendCapabilityEvent(identity, false)) {\n    return;\n  }\n\n  strapi.telemetry\n    .send('didNotExecuteMcpCapability', {\n      eventProperties: {\n        type: identity.type,\n        source: identity.source,\n        name: identity.name,\n        errorClass,\n      },\n    })\n    .catch(() => {});\n};\n"],"names":["MCP_LIMITED_TELEMETRY_EVENTS","didStartMcpServer","didUseMcpServer","didNotAuthenticateMcpRequest","didNotHandleMcpRequest","ONE_DAY_MS","capabilityCacheExpiresAt","Date","now","executedCapabilities","Set","failedCapabilities","capabilityCacheKey","identity","succeeded","type","source","name","shouldSendCapabilityEvent","cache","clear","key","has","add","classifyMcpRequestFailure","error","Error","message","includes","sendDidStartMcpServer","strapi","properties","telemetry","send","eventProperties","path","groupProperties","numberOfTools","numberOfPrompts","numberOfResources","catch","sendDidUseMcpServer","sendDidNotAuthenticateMcpRequest","errorClass","sendDidNotHandleMcpRequest","sendDidExecuteMcpCapability","sendDidNotExecuteMcpCapability"],"mappings":"AAIA,yDACO,MAAMA,4BAAAA,GAA+B;IAC1CC,iBAAAA,EAAmB,mBAAA;IACnBC,eAAAA,EAAiB,iBAAA;IACjBC,4BAAAA,EAA8B,8BAAA;IAC9BC,sBAAAA,EAAwB;AAC1B;AAgBA,MAAMC,UAAAA,GAAa,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,IAAA;AAElC,IAAIC,wBAAAA,GAA2BC,IAAAA,CAAKC,GAAG,EAAA,GAAKH,UAAAA;AAC5C,MAAMI,uBAAuB,IAAIC,GAAAA,EAAAA;AACjC,MAAMC,qBAAqB,IAAID,GAAAA,EAAAA;AAE/B,MAAME,kBAAAA,GAAqB,CAACC,QAAAA,EAAiCC,SAAAA,GAC3D,GAAGA,SAAAA,GAAY,SAAA,GAAY,YAAA,CAAa,CAAC,EAAED,QAAAA,CAASE,IAAI,CAAC,CAAC,EAAEF,QAAAA,CAASG,MAAM,CAAC,CAAC,EAAEH,QAAAA,CAASI,IAAI,CAAA,CAAE;AAShG,MAAMC,yBAAAA,GAA4B,CAChCL,QAAAA,EACAC,SAAAA,GAAAA;IAEA,MAAMK,KAAAA,GAAQL,YAAYL,oBAAAA,GAAuBE,kBAAAA;IAEjD,IAAIJ,IAAAA,CAAKC,GAAG,EAAA,GAAKF,wBAAAA,EAA0B;AACzCG,QAAAA,oBAAAA,CAAqBW,KAAK,EAAA;AAC1BT,QAAAA,kBAAAA,CAAmBS,KAAK,EAAA;QACxBd,wBAAAA,GAA2BC,IAAAA,CAAKC,GAAG,EAAA,GAAKH,UAAAA;AAC1C,IAAA;IAEA,MAAMgB,GAAAA,GAAMT,mBAAmBC,QAAAA,EAAUC,SAAAA,CAAAA;IAEzC,IAAIK,KAAAA,CAAMG,GAAG,CAACD,GAAAA,CAAAA,EAAM;QAClB,OAAO,KAAA;AACT,IAAA;AAEAF,IAAAA,KAAAA,CAAMI,GAAG,CAACF,GAAAA,CAAAA;IACV,OAAO,IAAA;AACT,CAAA;AAEO,MAAMG,4BAA4B,CAACC,KAAAA,GAAAA;AACxC,IAAA,IAAIA,iBAAiBC,KAAAA,IAASD,KAAAA,CAAME,OAAO,CAACC,QAAQ,CAAC,WAAA,CAAA,EAAc;QACjE,OAAO,SAAA;AACT,IAAA;IAEA,OAAO,OAAA;AACT;AAEO,MAAMC,qBAAAA,GAAwB,CACnCC,MAAAA,EACAC,UAAAA,GAAAA;AAEAD,IAAAA,MAAAA,CAAOE,SAAS,CACbC,IAAI,CAACjC,4BAAAA,CAA6BC,iBAAiB,EAAE;QACpDiC,eAAAA,EAAiB;AAAEC,YAAAA,IAAAA,EAAMJ,WAAWI;AAAK,SAAA;QACzCC,eAAAA,EAAiB;AACfC,YAAAA,aAAAA,EAAeN,WAAWM,aAAa;AACvCC,YAAAA,eAAAA,EAAiBP,WAAWO,eAAe;AAC3CC,YAAAA,iBAAAA,EAAmBR,WAAWQ;AAChC;KACF,CAAA,CACCC,KAAK,CAAC,IAAA,CAAO,CAAA,CAAA;AAClB;AAEO,MAAMC,sBAAsB,CAACX,MAAAA,GAAAA;IAClCA,MAAAA,CAAOE,SAAS,CAACC,IAAI,CAACjC,6BAA6BE,eAAe,CAAA,CAAEsC,KAAK,CAAC,IAAA,CAAO,CAAA,CAAA;AACnF;AAEO,MAAME,gCAAAA,GAAmC,CAC9CZ,MAAAA,EACAa,UAAAA,GAAAA;AAEAb,IAAAA,MAAAA,CAAOE,SAAS,CACbC,IAAI,CAACjC,4BAAAA,CAA6BG,4BAA4B,EAAE;QAC/D+B,eAAAA,EAAiB;AAAES,YAAAA;AAAW;KAChC,CAAA,CACCH,KAAK,CAAC,IAAA,CAAO,CAAA,CAAA;AAClB;AAEO,MAAMI,0BAAAA,GAA6B,CACxCd,MAAAA,EACAa,UAAAA,GAAAA;AAEAb,IAAAA,MAAAA,CAAOE,SAAS,CACbC,IAAI,CAACjC,4BAAAA,CAA6BI,sBAAsB,EAAE;QACzD8B,eAAAA,EAAiB;AAAES,YAAAA;AAAW;KAChC,CAAA,CACCH,KAAK,CAAC,IAAA,CAAO,CAAA,CAAA;AAClB;AAEO,MAAMK,2BAAAA,GAA8B,CACzCf,MAAAA,EACAjB,QAAAA,GAAAA;IAEA,IAAI,CAACK,yBAAAA,CAA0BL,QAAAA,EAAU,IAAA,CAAA,EAAO;AAC9C,QAAA;AACF,IAAA;AAEAiB,IAAAA,MAAAA,CAAOE,SAAS,CACbC,IAAI,CAAC,yBAAA,EAA2B;QAC/BC,eAAAA,EAAiB;AACfnB,YAAAA,IAAAA,EAAMF,SAASE,IAAI;AACnBC,YAAAA,MAAAA,EAAQH,SAASG,MAAM;AACvBC,YAAAA,IAAAA,EAAMJ,SAASI;AACjB;KACF,CAAA,CACCuB,KAAK,CAAC,IAAA,CAAO,CAAA,CAAA;AAClB;AAEO,MAAMM,8BAAAA,GAAiC,CAC5ChB,MAAAA,EACAjB,QAAAA,EACA8B,UAAAA,GAAAA;IAEA,IAAI,CAACzB,yBAAAA,CAA0BL,QAAAA,EAAU,KAAA,CAAA,EAAQ;AAC/C,QAAA;AACF,IAAA;AAEAiB,IAAAA,MAAAA,CAAOE,SAAS,CACbC,IAAI,CAAC,4BAAA,EAA8B;QAClCC,eAAAA,EAAiB;AACfnB,YAAAA,IAAAA,EAAMF,SAASE,IAAI;AACnBC,YAAAA,MAAAA,EAAQH,SAASG,MAAM;AACvBC,YAAAA,IAAAA,EAAMJ,SAASI,IAAI;AACnB0B,YAAAA;AACF;KACF,CAAA,CACCH,KAAK,CAAC,IAAA,CAAO,CAAA,CAAA;AAClB;;;;"}

package/dist/services/mcp/metrics/normalizeMcpCapability.d.ts

@@ -0,0 +1,11 @@
+export type McpCapabilityType = 'tool' | 'prompt' | 'resource';
+export type McpCapabilityIdentity = {
+    type: McpCapabilityType;
+    source: string;
+    name: string;
+};
+export declare const normalizeMcpCapability: (type: McpCapabilityType, rawName: string, telemetry?: {
+    source?: string;
+    name?: string;
+}) => McpCapabilityIdentity;
+//# sourceMappingURL=normalizeMcpCapability.d.ts.map

package/dist/services/mcp/metrics/normalizeMcpCapability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizeMcpCapability.d.ts","sourceRoot":"","sources":["../../../../src/services/mcp/metrics/normalizeMcpCapability.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AAE/D,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,eAAO,MAAM,sBAAsB,SAC3B,iBAAiB,WACd,MAAM,cACH;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,KAC7C,qBAID,CAAC"}

package/dist/services/mcp/metrics/normalizeMcpCapability.js

@@ -0,0 +1,10 @@
+'use strict';
+
+const normalizeMcpCapability = (type, rawName, telemetry)=>({
+        type,
+        source: telemetry?.source ?? 'unknown',
+        name: telemetry?.name ?? rawName
+    });
+
+exports.normalizeMcpCapability = normalizeMcpCapability;
+//# sourceMappingURL=normalizeMcpCapability.js.map

package/dist/services/mcp/metrics/normalizeMcpCapability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizeMcpCapability.js","sources":["../../../../src/services/mcp/metrics/normalizeMcpCapability.ts"],"sourcesContent":["export type McpCapabilityType = 'tool' | 'prompt' | 'resource';\n\nexport type McpCapabilityIdentity = {\n  type: McpCapabilityType;\n  source: string;\n  name: string;\n};\n\nexport const normalizeMcpCapability = (\n  type: McpCapabilityType,\n  rawName: string,\n  telemetry?: { source?: string; name?: string }\n): McpCapabilityIdentity => ({\n  type,\n  source: telemetry?.source ?? 'unknown',\n  name: telemetry?.name ?? rawName,\n});\n"],"names":["normalizeMcpCapability","type","rawName","telemetry","source","name"],"mappings":";;MAQaA,sBAAAA,GAAyB,CACpCC,IAAAA,EACAC,OAAAA,EACAC,aAC2B;AAC3BF,QAAAA,IAAAA;AACAG,QAAAA,MAAAA,EAAQD,WAAWC,MAAAA,IAAU,SAAA;AAC7BC,QAAAA,IAAAA,EAAMF,WAAWE,IAAAA,IAAQH;AAC3B,KAAA;;;;"}

package/dist/services/mcp/metrics/normalizeMcpCapability.mjs

@@ -0,0 +1,8 @@
+const normalizeMcpCapability = (type, rawName, telemetry)=>({
+        type,
+        source: telemetry?.source ?? 'unknown',
+        name: telemetry?.name ?? rawName
+    });
+
+export { normalizeMcpCapability };
+//# sourceMappingURL=normalizeMcpCapability.mjs.map

package/dist/services/mcp/metrics/normalizeMcpCapability.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalizeMcpCapability.mjs","sources":["../../../../src/services/mcp/metrics/normalizeMcpCapability.ts"],"sourcesContent":["export type McpCapabilityType = 'tool' | 'prompt' | 'resource';\n\nexport type McpCapabilityIdentity = {\n  type: McpCapabilityType;\n  source: string;\n  name: string;\n};\n\nexport const normalizeMcpCapability = (\n  type: McpCapabilityType,\n  rawName: string,\n  telemetry?: { source?: string; name?: string }\n): McpCapabilityIdentity => ({\n  type,\n  source: telemetry?.source ?? 'unknown',\n  name: telemetry?.name ?? rawName,\n});\n"],"names":["normalizeMcpCapability","type","rawName","telemetry","source","name"],"mappings":"MAQaA,sBAAAA,GAAyB,CACpCC,IAAAA,EACAC,OAAAA,EACAC,aAC2B;AAC3BF,QAAAA,IAAAA;AACAG,QAAAA,MAAAA,EAAQD,WAAWC,MAAAA,IAAU,SAAA;AAC7BC,QAAAA,IAAAA,EAAMF,WAAWE,IAAAA,IAAQH;AAC3B,KAAA;;;;"}

package/dist/services/mcp/metrics/wrapCapabilityHandlerForMetrics.d.ts

@@ -0,0 +1,4 @@
+import type { Core, Modules } from '@strapi/types';
+import { type McpCapabilityType } from './normalizeMcpCapability';
+export declare const wrapCapabilityHandlerForMetrics: <THandler extends (...args: never[]) => Promise<unknown>>(strapi: Core.Strapi, type: McpCapabilityType, capabilityName: string, telemetry: Modules.MCP.McpCapabilityTelemetry | undefined, handler: THandler) => THandler;
+//# sourceMappingURL=wrapCapabilityHandlerForMetrics.d.ts.map

package/dist/services/mcp/metrics/wrapCapabilityHandlerForMetrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapCapabilityHandlerForMetrics.d.ts","sourceRoot":"","sources":["../../../../src/services/mcp/metrics/wrapCapabilityHandlerForMetrics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAEnD,OAAO,EAA0B,KAAK,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAW1F,eAAO,MAAM,+BAA+B,8BACf,KAAK,EAAE,KAAK,QAAQ,OAAO,CAAC,UAE/C,KAAK,MAAM,QACb,iBAAiB,kBACP,MAAM,aACX,QAAQ,GAAG,CAAC,sBAAsB,GAAG,SAAS,WAChD,QAAQ,KAChB,QAeF,CAAC"}

package/dist/services/mcp/metrics/wrapCapabilityHandlerForMetrics.js

@@ -0,0 +1,27 @@
+'use strict';
+
+var normalizeMcpCapability = require('./normalizeMcpCapability.js');
+var metrics = require('./metrics.js');
+
+const isCapabilityFailure = (result)=>{
+    if (result === null || typeof result !== 'object') {
+        return false;
+    }
+    return 'isError' in result && result.isError === true;
+};
+const wrapCapabilityHandlerForMetrics = (strapi, type, capabilityName, telemetry, handler)=>{
+    const wrapped = async (...args)=>{
+        const result = await handler(...args);
+        const identity = normalizeMcpCapability.normalizeMcpCapability(type, capabilityName, telemetry);
+        if (isCapabilityFailure(result)) {
+            metrics.sendDidNotExecuteMcpCapability(strapi, identity, 'execution_error');
+        } else {
+            metrics.sendDidExecuteMcpCapability(strapi, identity);
+        }
+        return result;
+    };
+    return wrapped;
+};
+
+exports.wrapCapabilityHandlerForMetrics = wrapCapabilityHandlerForMetrics;
+//# sourceMappingURL=wrapCapabilityHandlerForMetrics.js.map

package/dist/services/mcp/metrics/wrapCapabilityHandlerForMetrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapCapabilityHandlerForMetrics.js","sources":["../../../../src/services/mcp/metrics/wrapCapabilityHandlerForMetrics.ts"],"sourcesContent":["import type { Core, Modules } from '@strapi/types';\n\nimport { normalizeMcpCapability, type McpCapabilityType } from './normalizeMcpCapability';\nimport { sendDidExecuteMcpCapability, sendDidNotExecuteMcpCapability } from './metrics';\n\nconst isCapabilityFailure = (result: unknown): boolean => {\n  if (result === null || typeof result !== 'object') {\n    return false;\n  }\n\n  return 'isError' in result && result.isError === true;\n};\n\nexport const wrapCapabilityHandlerForMetrics = <\n  THandler extends (...args: never[]) => Promise<unknown>,\n>(\n  strapi: Core.Strapi,\n  type: McpCapabilityType,\n  capabilityName: string,\n  telemetry: Modules.MCP.McpCapabilityTelemetry | undefined,\n  handler: THandler\n): THandler => {\n  const wrapped = async (...args: Parameters<THandler>) => {\n    const result = await handler(...args);\n    const identity = normalizeMcpCapability(type, capabilityName, telemetry);\n\n    if (isCapabilityFailure(result)) {\n      sendDidNotExecuteMcpCapability(strapi, identity, 'execution_error');\n    } else {\n      sendDidExecuteMcpCapability(strapi, identity);\n    }\n\n    return result;\n  };\n\n  return wrapped as THandler;\n};\n"],"names":["isCapabilityFailure","result","isError","wrapCapabilityHandlerForMetrics","strapi","type","capabilityName","telemetry","handler","wrapped","args","identity","normalizeMcpCapability","sendDidNotExecuteMcpCapability","sendDidExecuteMcpCapability"],"mappings":";;;;;AAKA,MAAMA,sBAAsB,CAACC,MAAAA,GAAAA;AAC3B,IAAA,IAAIA,MAAAA,KAAW,IAAA,IAAQ,OAAOA,MAAAA,KAAW,QAAA,EAAU;QACjD,OAAO,KAAA;AACT,IAAA;AAEA,IAAA,OAAO,SAAA,IAAaA,MAAAA,IAAUA,MAAAA,CAAOC,OAAO,KAAK,IAAA;AACnD,CAAA;MAEaC,+BAAAA,GAAkC,CAG7CC,MAAAA,EACAC,IAAAA,EACAC,gBACAC,SAAAA,EACAC,OAAAA,GAAAA;IAEA,MAAMC,OAAAA,GAAU,OAAO,GAAGC,IAAAA,GAAAA;QACxB,MAAMT,MAAAA,GAAS,MAAMO,OAAAA,CAAAA,GAAWE,IAAAA,CAAAA;QAChC,MAAMC,QAAAA,GAAWC,6CAAAA,CAAuBP,IAAAA,EAAMC,cAAAA,EAAgBC,SAAAA,CAAAA;AAE9D,QAAA,IAAIP,oBAAoBC,MAAAA,CAAAA,EAAS;AAC/BY,YAAAA,sCAAAA,CAA+BT,QAAQO,QAAAA,EAAU,iBAAA,CAAA;QACnD,CAAA,MAAO;AACLG,YAAAA,mCAAAA,CAA4BV,MAAAA,EAAQO,QAAAA,CAAAA;AACtC,QAAA;QAEA,OAAOV,MAAAA;AACT,IAAA,CAAA;IAEA,OAAOQ,OAAAA;AACT;;;;"}

package/dist/services/mcp/metrics/wrapCapabilityHandlerForMetrics.mjs

@@ -0,0 +1,25 @@
+import { normalizeMcpCapability } from './normalizeMcpCapability.mjs';
+import { sendDidNotExecuteMcpCapability, sendDidExecuteMcpCapability } from './metrics.mjs';
+
+const isCapabilityFailure = (result)=>{
+    if (result === null || typeof result !== 'object') {
+        return false;
+    }
+    return 'isError' in result && result.isError === true;
+};
+const wrapCapabilityHandlerForMetrics = (strapi, type, capabilityName, telemetry, handler)=>{
+    const wrapped = async (...args)=>{
+        const result = await handler(...args);
+        const identity = normalizeMcpCapability(type, capabilityName, telemetry);
+        if (isCapabilityFailure(result)) {
+            sendDidNotExecuteMcpCapability(strapi, identity, 'execution_error');
+        } else {
+            sendDidExecuteMcpCapability(strapi, identity);
+        }
+        return result;
+    };
+    return wrapped;
+};
+
+export { wrapCapabilityHandlerForMetrics };
+//# sourceMappingURL=wrapCapabilityHandlerForMetrics.mjs.map

package/dist/services/mcp/metrics/wrapCapabilityHandlerForMetrics.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapCapabilityHandlerForMetrics.mjs","sources":["../../../../src/services/mcp/metrics/wrapCapabilityHandlerForMetrics.ts"],"sourcesContent":["import type { Core, Modules } from '@strapi/types';\n\nimport { normalizeMcpCapability, type McpCapabilityType } from './normalizeMcpCapability';\nimport { sendDidExecuteMcpCapability, sendDidNotExecuteMcpCapability } from './metrics';\n\nconst isCapabilityFailure = (result: unknown): boolean => {\n  if (result === null || typeof result !== 'object') {\n    return false;\n  }\n\n  return 'isError' in result && result.isError === true;\n};\n\nexport const wrapCapabilityHandlerForMetrics = <\n  THandler extends (...args: never[]) => Promise<unknown>,\n>(\n  strapi: Core.Strapi,\n  type: McpCapabilityType,\n  capabilityName: string,\n  telemetry: Modules.MCP.McpCapabilityTelemetry | undefined,\n  handler: THandler\n): THandler => {\n  const wrapped = async (...args: Parameters<THandler>) => {\n    const result = await handler(...args);\n    const identity = normalizeMcpCapability(type, capabilityName, telemetry);\n\n    if (isCapabilityFailure(result)) {\n      sendDidNotExecuteMcpCapability(strapi, identity, 'execution_error');\n    } else {\n      sendDidExecuteMcpCapability(strapi, identity);\n    }\n\n    return result;\n  };\n\n  return wrapped as THandler;\n};\n"],"names":["isCapabilityFailure","result","isError","wrapCapabilityHandlerForMetrics","strapi","type","capabilityName","telemetry","handler","wrapped","args","identity","normalizeMcpCapability","sendDidNotExecuteMcpCapability","sendDidExecuteMcpCapability"],"mappings":";;;AAKA,MAAMA,sBAAsB,CAACC,MAAAA,GAAAA;AAC3B,IAAA,IAAIA,MAAAA,KAAW,IAAA,IAAQ,OAAOA,MAAAA,KAAW,QAAA,EAAU;QACjD,OAAO,KAAA;AACT,IAAA;AAEA,IAAA,OAAO,SAAA,IAAaA,MAAAA,IAAUA,MAAAA,CAAOC,OAAO,KAAK,IAAA;AACnD,CAAA;MAEaC,+BAAAA,GAAkC,CAG7CC,MAAAA,EACAC,IAAAA,EACAC,gBACAC,SAAAA,EACAC,OAAAA,GAAAA;IAEA,MAAMC,OAAAA,GAAU,OAAO,GAAGC,IAAAA,GAAAA;QACxB,MAAMT,MAAAA,GAAS,MAAMO,OAAAA,CAAAA,GAAWE,IAAAA,CAAAA;QAChC,MAAMC,QAAAA,GAAWC,sBAAAA,CAAuBP,IAAAA,EAAMC,cAAAA,EAAgBC,SAAAA,CAAAA;AAE9D,QAAA,IAAIP,oBAAoBC,MAAAA,CAAAA,EAAS;AAC/BY,YAAAA,8BAAAA,CAA+BT,QAAQO,QAAAA,EAAU,iBAAA,CAAA;QACnD,CAAA,MAAO;AACLG,YAAAA,2BAAAA,CAA4BV,MAAAA,EAAQO,QAAAA,CAAAA;AACtC,QAAA;QAEA,OAAOV,MAAAA;AACT,IAAA,CAAA;IAEA,OAAOQ,OAAAA;AACT;;;;"}

package/dist/services/mcp/middleware/oauthDiscoveryFallback.d.ts

@@ -0,0 +1,3 @@
+import type { Core } from '@strapi/types';
+export declare const createOAuthDiscoveryFallbackMiddleware: () => Core.MiddlewareHandler;
+//# sourceMappingURL=oauthDiscoveryFallback.d.ts.map

package/dist/services/mcp/middleware/oauthDiscoveryFallback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthDiscoveryFallback.d.ts","sourceRoot":"","sources":["../../../../src/services/mcp/middleware/oauthDiscoveryFallback.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAmB1C,eAAO,MAAM,sCAAsC,QAAO,KAAK,iBAoB9D,CAAC"}

package/dist/services/mcp/middleware/oauthDiscoveryFallback.js

@@ -0,0 +1,47 @@
+'use strict';
+
+/**
+ * OAuth discovery paths probed by MCP SDK clients during the authentication
+ * fallback flow (RFC 8414 § 3, RFC 7591, OpenID Connect Discovery).
+ *
+ * Strapi is a resource server, not an authorization server, so these paths
+ * have no real handler. Without this middleware, Koa returns plain-text
+ * 404/405 responses that crash clients expecting JSON (e.g. Claude Code).
+ *
+ * The middleware only fires when downstream already returned 404 or 405,
+ * so user-defined routes on these paths are never shadowed.
+ */ const OAUTH_DISCOVERY_PROBES = [
+    {
+        method: 'GET',
+        path: '/.well-known/oauth-authorization-server'
+    },
+    {
+        method: 'GET',
+        path: '/.well-known/openid-configuration'
+    },
+    {
+        method: 'POST',
+        path: '/register'
+    }
+];
+const createOAuthDiscoveryFallbackMiddleware = ()=>{
+    return async (ctx, next)=>{
+        await next();
+        if (ctx.status !== 404 && ctx.status !== 405) {
+            return;
+        }
+        const isOAuthProbe = OAUTH_DISCOVERY_PROBES.some((probe)=>ctx.method === probe.method && ctx.path === probe.path);
+        if (isOAuthProbe === false) {
+            return;
+        }
+        ctx.status = 404;
+        ctx.set('Content-Type', 'application/json');
+        ctx.body = {
+            error: 'not_found',
+            error_description: 'OAuth is not supported'
+        };
+    };
+};
+
+exports.createOAuthDiscoveryFallbackMiddleware = createOAuthDiscoveryFallbackMiddleware;
+//# sourceMappingURL=oauthDiscoveryFallback.js.map