@strapi/core 5.46.1 → 5.47.1

package/dist/services/mcp/resource-registry.js

@@ -0,0 +1,67 @@
+'use strict';
+
+var McpCapabilityRegistry = require('./internal/McpCapabilityRegistry.js');
+var createSafeCapabilityRegistration = require('./utils/createSafeCapabilityRegistration.js');
+var wrapCapabilityHandlerForMetrics = require('./metrics/wrapCapabilityHandlerForMetrics.js');
+
+function _class_private_field_loose_base(receiver, privateKey) {
+    if (!Object.prototype.hasOwnProperty.call(receiver, privateKey)) {
+        throw new TypeError("attempted to use private field on non-instance");
+    }
+    return receiver;
+}
+var id = 0;
+function _class_private_field_loose_key(name) {
+    return "__private_" + id++ + "_" + name;
+}
+var _strapi = /*#__PURE__*/ _class_private_field_loose_key("_strapi");
+class McpResourceRegistry extends McpCapabilityRegistry.McpCapabilityRegistryBase {
+    bind(mcpServer) {
+        const strapi = _class_private_field_loose_base(this, _strapi)[_strapi];
+        super.register((definition)=>{
+            const { name, uri, metadata, createHandler } = definition;
+            return createSafeCapabilityRegistration.createSafeCapabilityRegistration({
+                strapi,
+                capabilityType: 'Resource',
+                name,
+                createHandler,
+                createFallbackHandler (errorMessage) {
+                    return async (resourceUri)=>({
+                            contents: [
+                                {
+                                    uri: resourceUri.href,
+                                    text: `Resource "${name}" failed to initialize: ${errorMessage}`,
+                                    mimeType: 'text/plain'
+                                }
+                            ]
+                        });
+                },
+                createErrorResult (error, args) {
+                    return {
+                        contents: [
+                            {
+                                uri: args[0] instanceof URL ? args[0].href : uri,
+                                text: `Resource "${name}" execution failed: ${error.message}`,
+                                mimeType: 'text/plain'
+                            }
+                        ]
+                    };
+                },
+                registerWithSdk (safeHandler) {
+                    const sdkHandler = wrapCapabilityHandlerForMetrics.wrapCapabilityHandlerForMetrics(strapi, 'resource', name, definition.telemetry, safeHandler);
+                    return mcpServer.registerResource(name, uri, metadata, sdkHandler);
+                }
+            });
+        });
+    }
+    constructor(ctx){
+        super(ctx.definitions), Object.defineProperty(this, _strapi, {
+            writable: true,
+            value: void 0
+        });
+        _class_private_field_loose_base(this, _strapi)[_strapi] = ctx.strapi;
+    }
+}
+
+exports.McpResourceRegistry = McpResourceRegistry;
+//# sourceMappingURL=resource-registry.js.map

package/dist/services/mcp/resource-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-registry.js","sources":["../../../src/services/mcp/resource-registry.ts"],"sourcesContent":["import type {\n  McpServer,\n  RegisteredResource,\n  // eslint-disable-next-line import/extensions\n} from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { Core, Modules } from '@strapi/types';\nimport { McpCapabilityDefinitionRegistry } from './internal/McpCapabilityDefinitionRegistry';\nimport {\n  type McpCapabilityRegistry,\n  McpCapabilityRegistryBase,\n} from './internal/McpCapabilityRegistry';\nimport { createSafeCapabilityRegistration } from './utils/createSafeCapabilityRegistration';\nimport { wrapCapabilityHandlerForMetrics } from './metrics/wrapCapabilityHandlerForMetrics';\n\nexport const makeMcpResourceDefinition = <Definition extends Modules.MCP.McpResourceDefinition>(\n  resource: Definition\n): Definition => resource;\n\nexport class McpResourceRegistry\n  extends McpCapabilityRegistryBase<\n    'resource',\n    Modules.MCP.McpResourceDefinition,\n    RegisteredResource\n  >\n  implements McpCapabilityRegistry\n{\n  #strapi: Core.Strapi;\n\n  constructor(ctx: {\n    strapi: Core.Strapi;\n    definitions: McpCapabilityDefinitionRegistry<'resource', Modules.MCP.McpResourceDefinition>;\n  }) {\n    super(ctx.definitions);\n    this.#strapi = ctx.strapi;\n  }\n\n  bind(mcpServer: McpServer) {\n    const strapi = this.#strapi;\n\n    super.register((definition) => {\n      const { name, uri, metadata, createHandler } = definition;\n\n      return createSafeCapabilityRegistration({\n        strapi,\n        capabilityType: 'Resource',\n        name,\n        createHandler,\n        createFallbackHandler(errorMessage) {\n          return async (resourceUri) => ({\n            contents: [\n              {\n                uri: resourceUri.href,\n                text: `Resource \"${name}\" failed to initialize: ${errorMessage}`,\n                mimeType: 'text/plain',\n              },\n            ],\n          });\n        },\n        createErrorResult(error, args) {\n          return {\n            contents: [\n              {\n                uri: args[0] instanceof URL ? args[0].href : uri,\n                text: `Resource \"${name}\" execution failed: ${error.message}`,\n                mimeType: 'text/plain',\n              },\n            ],\n          };\n        },\n        registerWithSdk(safeHandler) {\n          const sdkHandler = wrapCapabilityHandlerForMetrics(\n            strapi,\n            'resource',\n            name,\n            definition.telemetry,\n            safeHandler\n          );\n\n          return mcpServer.registerResource(name, uri, metadata, sdkHandler);\n        },\n      });\n    });\n  }\n}\n"],"names":["McpResourceRegistry","McpCapabilityRegistryBase","bind","mcpServer","strapi","register","definition","name","uri","metadata","createHandler","createSafeCapabilityRegistration","capabilityType","createFallbackHandler","errorMessage","resourceUri","contents","href","text","mimeType","createErrorResult","error","args","URL","message","registerWithSdk","safeHandler","sdkHandler","wrapCapabilityHandlerForMetrics","telemetry","registerResource","ctx","definitions"],"mappings":";;;;;;;;;;;;;;;;AA0BE,IAAA,OAAA,iBAAA,8BAAA,CAAA,SAAA,CAAA;AARK,MAAMA,mBAAAA,SACHC,+CAAAA,CAAAA;AAiBRC,IAAAA,IAAAA,CAAKC,SAAoB,EAAE;AACzB,QAAA,MAAMC,MAAAA,GAAS,+BAAA,CAAA,IAAI,EAAC,OAAA,CAAA,CAAA,OAAA,CAAA;QAEpB,KAAK,CAACC,SAAS,CAACC,UAAAA,GAAAA;YACd,MAAM,EAAEC,IAAI,EAAEC,GAAG,EAAEC,QAAQ,EAAEC,aAAa,EAAE,GAAGJ,UAAAA;AAE/C,YAAA,OAAOK,iEAAAA,CAAiC;AACtCP,gBAAAA,MAAAA;gBACAQ,cAAAA,EAAgB,UAAA;AAChBL,gBAAAA,IAAAA;AACAG,gBAAAA,aAAAA;AACAG,gBAAAA,qBAAAA,CAAAA,CAAsBC,YAAY,EAAA;oBAChC,OAAO,OAAOC,eAAiB;4BAC7BC,QAAAA,EAAU;AACR,gCAAA;AACER,oCAAAA,GAAAA,EAAKO,YAAYE,IAAI;AACrBC,oCAAAA,IAAAA,EAAM,CAAC,UAAU,EAAEX,IAAAA,CAAK,wBAAwB,EAAEO,YAAAA,CAAAA,CAAc;oCAChEK,QAAAA,EAAU;AACZ;AACD;yBACH,CAAA;AACF,gBAAA,CAAA;gBACAC,iBAAAA,CAAAA,CAAkBC,KAAK,EAAEC,IAAI,EAAA;oBAC3B,OAAO;wBACLN,QAAAA,EAAU;AACR,4BAAA;gCACER,GAAAA,EAAKc,IAAI,CAAC,CAAA,CAAE,YAAYC,GAAAA,GAAMD,IAAI,CAAC,CAAA,CAAE,CAACL,IAAI,GAAGT,GAAAA;gCAC7CU,IAAAA,EAAM,CAAC,UAAU,EAAEX,IAAAA,CAAK,oBAAoB,EAAEc,KAAAA,CAAMG,OAAO,CAAA,CAAE;gCAC7DL,QAAAA,EAAU;AACZ;AACD;AACH,qBAAA;AACF,gBAAA,CAAA;AACAM,gBAAAA,eAAAA,CAAAA,CAAgBC,WAAW,EAAA;AACzB,oBAAA,MAAMC,aAAaC,+DAAAA,CACjBxB,MAAAA,EACA,YACAG,IAAAA,EACAD,UAAAA,CAAWuB,SAAS,EACpBH,WAAAA,CAAAA;AAGF,oBAAA,OAAOvB,SAAAA,CAAU2B,gBAAgB,CAACvB,IAAAA,EAAMC,KAAKC,QAAAA,EAAUkB,UAAAA,CAAAA;AACzD,gBAAA;AACF,aAAA,CAAA;AACF,QAAA,CAAA,CAAA;AACF,IAAA;AAtDA,IAAA,WAAA,CAAYI,GAGX,CAAE;AACD,QAAA,KAAK,CAACA,GAAAA,CAAIC,WAAW,CAAA,EANvB,MAAA,CAAA,cAAA,CAAA,IAAA,EAAA,OAAA,EAAA;;mBAAA;;AAOE,QAAA,+BAAA,CAAA,IAAI,EAAC,OAAA,CAAA,CAAA,OAAA,CAAA,GAAUD,IAAI3B,MAAM;AAC3B,IAAA;AAiDF;;;;"}

package/dist/services/mcp/resource-registry.mjs

@@ -0,0 +1,65 @@
+import { McpCapabilityRegistryBase } from './internal/McpCapabilityRegistry.mjs';
+import { createSafeCapabilityRegistration } from './utils/createSafeCapabilityRegistration.mjs';
+import { wrapCapabilityHandlerForMetrics } from './metrics/wrapCapabilityHandlerForMetrics.mjs';
+
+function _class_private_field_loose_base(receiver, privateKey) {
+    if (!Object.prototype.hasOwnProperty.call(receiver, privateKey)) {
+        throw new TypeError("attempted to use private field on non-instance");
+    }
+    return receiver;
+}
+var id = 0;
+function _class_private_field_loose_key(name) {
+    return "__private_" + id++ + "_" + name;
+}
+var _strapi = /*#__PURE__*/ _class_private_field_loose_key("_strapi");
+class McpResourceRegistry extends McpCapabilityRegistryBase {
+    bind(mcpServer) {
+        const strapi = _class_private_field_loose_base(this, _strapi)[_strapi];
+        super.register((definition)=>{
+            const { name, uri, metadata, createHandler } = definition;
+            return createSafeCapabilityRegistration({
+                strapi,
+                capabilityType: 'Resource',
+                name,
+                createHandler,
+                createFallbackHandler (errorMessage) {
+                    return async (resourceUri)=>({
+                            contents: [
+                                {
+                                    uri: resourceUri.href,
+                                    text: `Resource "${name}" failed to initialize: ${errorMessage}`,
+                                    mimeType: 'text/plain'
+                                }
+                            ]
+                        });
+                },
+                createErrorResult (error, args) {
+                    return {
+                        contents: [
+                            {
+                                uri: args[0] instanceof URL ? args[0].href : uri,
+                                text: `Resource "${name}" execution failed: ${error.message}`,
+                                mimeType: 'text/plain'
+                            }
+                        ]
+                    };
+                },
+                registerWithSdk (safeHandler) {
+                    const sdkHandler = wrapCapabilityHandlerForMetrics(strapi, 'resource', name, definition.telemetry, safeHandler);
+                    return mcpServer.registerResource(name, uri, metadata, sdkHandler);
+                }
+            });
+        });
+    }
+    constructor(ctx){
+        super(ctx.definitions), Object.defineProperty(this, _strapi, {
+            writable: true,
+            value: void 0
+        });
+        _class_private_field_loose_base(this, _strapi)[_strapi] = ctx.strapi;
+    }
+}
+
+export { McpResourceRegistry };
+//# sourceMappingURL=resource-registry.mjs.map

package/dist/services/mcp/resource-registry.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-registry.mjs","sources":["../../../src/services/mcp/resource-registry.ts"],"sourcesContent":["import type {\n  McpServer,\n  RegisteredResource,\n  // eslint-disable-next-line import/extensions\n} from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { Core, Modules } from '@strapi/types';\nimport { McpCapabilityDefinitionRegistry } from './internal/McpCapabilityDefinitionRegistry';\nimport {\n  type McpCapabilityRegistry,\n  McpCapabilityRegistryBase,\n} from './internal/McpCapabilityRegistry';\nimport { createSafeCapabilityRegistration } from './utils/createSafeCapabilityRegistration';\nimport { wrapCapabilityHandlerForMetrics } from './metrics/wrapCapabilityHandlerForMetrics';\n\nexport const makeMcpResourceDefinition = <Definition extends Modules.MCP.McpResourceDefinition>(\n  resource: Definition\n): Definition => resource;\n\nexport class McpResourceRegistry\n  extends McpCapabilityRegistryBase<\n    'resource',\n    Modules.MCP.McpResourceDefinition,\n    RegisteredResource\n  >\n  implements McpCapabilityRegistry\n{\n  #strapi: Core.Strapi;\n\n  constructor(ctx: {\n    strapi: Core.Strapi;\n    definitions: McpCapabilityDefinitionRegistry<'resource', Modules.MCP.McpResourceDefinition>;\n  }) {\n    super(ctx.definitions);\n    this.#strapi = ctx.strapi;\n  }\n\n  bind(mcpServer: McpServer) {\n    const strapi = this.#strapi;\n\n    super.register((definition) => {\n      const { name, uri, metadata, createHandler } = definition;\n\n      return createSafeCapabilityRegistration({\n        strapi,\n        capabilityType: 'Resource',\n        name,\n        createHandler,\n        createFallbackHandler(errorMessage) {\n          return async (resourceUri) => ({\n            contents: [\n              {\n                uri: resourceUri.href,\n                text: `Resource \"${name}\" failed to initialize: ${errorMessage}`,\n                mimeType: 'text/plain',\n              },\n            ],\n          });\n        },\n        createErrorResult(error, args) {\n          return {\n            contents: [\n              {\n                uri: args[0] instanceof URL ? args[0].href : uri,\n                text: `Resource \"${name}\" execution failed: ${error.message}`,\n                mimeType: 'text/plain',\n              },\n            ],\n          };\n        },\n        registerWithSdk(safeHandler) {\n          const sdkHandler = wrapCapabilityHandlerForMetrics(\n            strapi,\n            'resource',\n            name,\n            definition.telemetry,\n            safeHandler\n          );\n\n          return mcpServer.registerResource(name, uri, metadata, sdkHandler);\n        },\n      });\n    });\n  }\n}\n"],"names":["McpResourceRegistry","McpCapabilityRegistryBase","bind","mcpServer","strapi","register","definition","name","uri","metadata","createHandler","createSafeCapabilityRegistration","capabilityType","createFallbackHandler","errorMessage","resourceUri","contents","href","text","mimeType","createErrorResult","error","args","URL","message","registerWithSdk","safeHandler","sdkHandler","wrapCapabilityHandlerForMetrics","telemetry","registerResource","ctx","definitions"],"mappings":";;;;;;;;;;;;;;AA0BE,IAAA,OAAA,iBAAA,8BAAA,CAAA,SAAA,CAAA;AARK,MAAMA,mBAAAA,SACHC,yBAAAA,CAAAA;AAiBRC,IAAAA,IAAAA,CAAKC,SAAoB,EAAE;AACzB,QAAA,MAAMC,MAAAA,GAAS,+BAAA,CAAA,IAAI,EAAC,OAAA,CAAA,CAAA,OAAA,CAAA;QAEpB,KAAK,CAACC,SAAS,CAACC,UAAAA,GAAAA;YACd,MAAM,EAAEC,IAAI,EAAEC,GAAG,EAAEC,QAAQ,EAAEC,aAAa,EAAE,GAAGJ,UAAAA;AAE/C,YAAA,OAAOK,gCAAAA,CAAiC;AACtCP,gBAAAA,MAAAA;gBACAQ,cAAAA,EAAgB,UAAA;AAChBL,gBAAAA,IAAAA;AACAG,gBAAAA,aAAAA;AACAG,gBAAAA,qBAAAA,CAAAA,CAAsBC,YAAY,EAAA;oBAChC,OAAO,OAAOC,eAAiB;4BAC7BC,QAAAA,EAAU;AACR,gCAAA;AACER,oCAAAA,GAAAA,EAAKO,YAAYE,IAAI;AACrBC,oCAAAA,IAAAA,EAAM,CAAC,UAAU,EAAEX,IAAAA,CAAK,wBAAwB,EAAEO,YAAAA,CAAAA,CAAc;oCAChEK,QAAAA,EAAU;AACZ;AACD;yBACH,CAAA;AACF,gBAAA,CAAA;gBACAC,iBAAAA,CAAAA,CAAkBC,KAAK,EAAEC,IAAI,EAAA;oBAC3B,OAAO;wBACLN,QAAAA,EAAU;AACR,4BAAA;gCACER,GAAAA,EAAKc,IAAI,CAAC,CAAA,CAAE,YAAYC,GAAAA,GAAMD,IAAI,CAAC,CAAA,CAAE,CAACL,IAAI,GAAGT,GAAAA;gCAC7CU,IAAAA,EAAM,CAAC,UAAU,EAAEX,IAAAA,CAAK,oBAAoB,EAAEc,KAAAA,CAAMG,OAAO,CAAA,CAAE;gCAC7DL,QAAAA,EAAU;AACZ;AACD;AACH,qBAAA;AACF,gBAAA,CAAA;AACAM,gBAAAA,eAAAA,CAAAA,CAAgBC,WAAW,EAAA;AACzB,oBAAA,MAAMC,aAAaC,+BAAAA,CACjBxB,MAAAA,EACA,YACAG,IAAAA,EACAD,UAAAA,CAAWuB,SAAS,EACpBH,WAAAA,CAAAA;AAGF,oBAAA,OAAOvB,SAAAA,CAAU2B,gBAAgB,CAACvB,IAAAA,EAAMC,KAAKC,QAAAA,EAAUkB,UAAAA,CAAAA;AACzD,gBAAA;AACF,aAAA,CAAA;AACF,QAAA,CAAA,CAAA;AACF,IAAA;AAtDA,IAAA,WAAA,CAAYI,GAGX,CAAE;AACD,QAAA,KAAK,CAACA,GAAAA,CAAIC,WAAW,CAAA,EANvB,MAAA,CAAA,cAAA,CAAA,IAAA,EAAA,OAAA,EAAA;;mBAAA;;AAOE,QAAA,+BAAA,CAAA,IAAI,EAAC,OAAA,CAAA,CAAA,OAAA,CAAA,GAAUD,IAAI3B,MAAM;AAC3B,IAAA;AAiDF;;;;"}

package/dist/services/mcp/routes.d.ts

@@ -0,0 +1,11 @@
+import type { Core } from '@strapi/types';
+import { McpConfiguration } from './internal/McpConfiguration';
+export type McpRouteHandlers = {
+    handlePost: Core.MiddlewareHandler;
+};
+/**
+ * Creates MCP route definitions for registration with Strapi server.
+ * @internal
+ */
+export declare const createMcpRoutes: (config: McpConfiguration, handlers: McpRouteHandlers) => Omit<Core.Route, 'info'>[];
+//# sourceMappingURL=routes.d.ts.map

package/dist/services/mcp/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/services/mcp/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAgB/D,MAAM,MAAM,gBAAgB,GAAG;IAC7B,UAAU,EAAE,IAAI,CAAC,iBAAiB,CAAC;CACpC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,eAAe,WAClB,gBAAgB,YACd,gBAAgB,KACzB,KAAK,KAAK,KAAK,EAAE,MAAM,CAAC,EAU1B,CAAC"}

package/dist/services/mcp/routes.js

@@ -0,0 +1,58 @@
+'use strict';
+
+var sendJsonRpcError = require('./utils/sendJsonRpcError.js');
+
+/**
+ * Handler for unsupported HTTP methods on /mcp endpoint.
+ * Returns JSON-RPC error instead of plain text so MCP clients can parse it.
+ */ const handleMethodNotAllowed = async (ctx)=>{
+    // Opt out of Koa's response phase — sendJsonRpcError writes directly to ctx.res.
+    ctx.respond = false;
+    // ctx.set() writes to Koa's in-memory headers which are never flushed when ctx.respond = false.
+    // Use res.setHeader() so the header is included when sendJsonRpcError calls res.writeHead().
+    ctx.res.setHeader('Allow', 'POST');
+    sendJsonRpcError.sendJsonRpcError(ctx.res, 'METHOD_NOT_ALLOWED');
+};
+/**
+ * Creates MCP route definitions for registration with Strapi server.
+ * @internal
+ */ const createMcpRoutes = (config, handlers)=>{
+    const noAuth = {
+        auth: false
+    };
+    return [
+        {
+            method: 'POST',
+            path: config.path,
+            handler: handlers.handlePost,
+            config: noAuth
+        },
+        {
+            method: 'GET',
+            path: config.path,
+            handler: handleMethodNotAllowed,
+            config: noAuth
+        },
+        {
+            method: 'DELETE',
+            path: config.path,
+            handler: handleMethodNotAllowed,
+            config: noAuth
+        },
+        {
+            method: 'PUT',
+            path: config.path,
+            handler: handleMethodNotAllowed,
+            config: noAuth
+        },
+        {
+            method: 'PATCH',
+            path: config.path,
+            handler: handleMethodNotAllowed,
+            config: noAuth
+        }
+    ];
+};
+
+exports.createMcpRoutes = createMcpRoutes;
+//# sourceMappingURL=routes.js.map

package/dist/services/mcp/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sources":["../../../src/services/mcp/routes.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\nimport { McpConfiguration } from './internal/McpConfiguration';\nimport { sendJsonRpcError } from './utils/sendJsonRpcError';\n\n/**\n * Handler for unsupported HTTP methods on /mcp endpoint.\n * Returns JSON-RPC error instead of plain text so MCP clients can parse it.\n */\nconst handleMethodNotAllowed: Core.MiddlewareHandler = async (ctx) => {\n  // Opt out of Koa's response phase — sendJsonRpcError writes directly to ctx.res.\n  ctx.respond = false;\n  // ctx.set() writes to Koa's in-memory headers which are never flushed when ctx.respond = false.\n  // Use res.setHeader() so the header is included when sendJsonRpcError calls res.writeHead().\n  ctx.res.setHeader('Allow', 'POST');\n  sendJsonRpcError(ctx.res, 'METHOD_NOT_ALLOWED');\n};\n\nexport type McpRouteHandlers = {\n  handlePost: Core.MiddlewareHandler;\n};\n\n/**\n * Creates MCP route definitions for registration with Strapi server.\n * @internal\n */\nexport const createMcpRoutes = (\n  config: McpConfiguration,\n  handlers: McpRouteHandlers\n): Omit<Core.Route, 'info'>[] => {\n  const noAuth = { auth: false } as const;\n\n  return [\n    { method: 'POST', path: config.path, handler: handlers.handlePost, config: noAuth },\n    { method: 'GET', path: config.path, handler: handleMethodNotAllowed, config: noAuth },\n    { method: 'DELETE', path: config.path, handler: handleMethodNotAllowed, config: noAuth },\n    { method: 'PUT', path: config.path, handler: handleMethodNotAllowed, config: noAuth },\n    { method: 'PATCH', path: config.path, handler: handleMethodNotAllowed, config: noAuth },\n  ];\n};\n"],"names":["handleMethodNotAllowed","ctx","respond","res","setHeader","sendJsonRpcError","createMcpRoutes","config","handlers","noAuth","auth","method","path","handler","handlePost"],"mappings":";;;;AAIA;;;IAIA,MAAMA,yBAAiD,OAAOC,GAAAA,GAAAA;;AAE5DA,IAAAA,GAAAA,CAAIC,OAAO,GAAG,KAAA;;;AAGdD,IAAAA,GAAAA,CAAIE,GAAG,CAACC,SAAS,CAAC,OAAA,EAAS,MAAA,CAAA;IAC3BC,iCAAAA,CAAiBJ,GAAAA,CAAIE,GAAG,EAAE,oBAAA,CAAA;AAC5B,CAAA;AAMA;;;AAGC,IACM,MAAMG,eAAAA,GAAkB,CAC7BC,MAAAA,EACAC,QAAAA,GAAAA;AAEA,IAAA,MAAMC,MAAAA,GAAS;QAAEC,IAAAA,EAAM;AAAM,KAAA;IAE7B,OAAO;AACL,QAAA;YAAEC,MAAAA,EAAQ,MAAA;AAAQC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;AAAEC,YAAAA,OAAAA,EAASL,SAASM,UAAU;YAAEP,MAAAA,EAAQE;AAAO,SAAA;AAClF,QAAA;YAAEE,MAAAA,EAAQ,KAAA;AAAOC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;YAAEC,OAAAA,EAASb,sBAAAA;YAAwBO,MAAAA,EAAQE;AAAO,SAAA;AACpF,QAAA;YAAEE,MAAAA,EAAQ,QAAA;AAAUC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;YAAEC,OAAAA,EAASb,sBAAAA;YAAwBO,MAAAA,EAAQE;AAAO,SAAA;AACvF,QAAA;YAAEE,MAAAA,EAAQ,KAAA;AAAOC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;YAAEC,OAAAA,EAASb,sBAAAA;YAAwBO,MAAAA,EAAQE;AAAO,SAAA;AACpF,QAAA;YAAEE,MAAAA,EAAQ,OAAA;AAASC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;YAAEC,OAAAA,EAASb,sBAAAA;YAAwBO,MAAAA,EAAQE;AAAO;AACvF,KAAA;AACH;;;;"}

package/dist/services/mcp/routes.mjs

@@ -0,0 +1,56 @@
+import { sendJsonRpcError } from './utils/sendJsonRpcError.mjs';
+
+/**
+ * Handler for unsupported HTTP methods on /mcp endpoint.
+ * Returns JSON-RPC error instead of plain text so MCP clients can parse it.
+ */ const handleMethodNotAllowed = async (ctx)=>{
+    // Opt out of Koa's response phase — sendJsonRpcError writes directly to ctx.res.
+    ctx.respond = false;
+    // ctx.set() writes to Koa's in-memory headers which are never flushed when ctx.respond = false.
+    // Use res.setHeader() so the header is included when sendJsonRpcError calls res.writeHead().
+    ctx.res.setHeader('Allow', 'POST');
+    sendJsonRpcError(ctx.res, 'METHOD_NOT_ALLOWED');
+};
+/**
+ * Creates MCP route definitions for registration with Strapi server.
+ * @internal
+ */ const createMcpRoutes = (config, handlers)=>{
+    const noAuth = {
+        auth: false
+    };
+    return [
+        {
+            method: 'POST',
+            path: config.path,
+            handler: handlers.handlePost,
+            config: noAuth
+        },
+        {
+            method: 'GET',
+            path: config.path,
+            handler: handleMethodNotAllowed,
+            config: noAuth
+        },
+        {
+            method: 'DELETE',
+            path: config.path,
+            handler: handleMethodNotAllowed,
+            config: noAuth
+        },
+        {
+            method: 'PUT',
+            path: config.path,
+            handler: handleMethodNotAllowed,
+            config: noAuth
+        },
+        {
+            method: 'PATCH',
+            path: config.path,
+            handler: handleMethodNotAllowed,
+            config: noAuth
+        }
+    ];
+};
+
+export { createMcpRoutes };
+//# sourceMappingURL=routes.mjs.map

package/dist/services/mcp/routes.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.mjs","sources":["../../../src/services/mcp/routes.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\nimport { McpConfiguration } from './internal/McpConfiguration';\nimport { sendJsonRpcError } from './utils/sendJsonRpcError';\n\n/**\n * Handler for unsupported HTTP methods on /mcp endpoint.\n * Returns JSON-RPC error instead of plain text so MCP clients can parse it.\n */\nconst handleMethodNotAllowed: Core.MiddlewareHandler = async (ctx) => {\n  // Opt out of Koa's response phase — sendJsonRpcError writes directly to ctx.res.\n  ctx.respond = false;\n  // ctx.set() writes to Koa's in-memory headers which are never flushed when ctx.respond = false.\n  // Use res.setHeader() so the header is included when sendJsonRpcError calls res.writeHead().\n  ctx.res.setHeader('Allow', 'POST');\n  sendJsonRpcError(ctx.res, 'METHOD_NOT_ALLOWED');\n};\n\nexport type McpRouteHandlers = {\n  handlePost: Core.MiddlewareHandler;\n};\n\n/**\n * Creates MCP route definitions for registration with Strapi server.\n * @internal\n */\nexport const createMcpRoutes = (\n  config: McpConfiguration,\n  handlers: McpRouteHandlers\n): Omit<Core.Route, 'info'>[] => {\n  const noAuth = { auth: false } as const;\n\n  return [\n    { method: 'POST', path: config.path, handler: handlers.handlePost, config: noAuth },\n    { method: 'GET', path: config.path, handler: handleMethodNotAllowed, config: noAuth },\n    { method: 'DELETE', path: config.path, handler: handleMethodNotAllowed, config: noAuth },\n    { method: 'PUT', path: config.path, handler: handleMethodNotAllowed, config: noAuth },\n    { method: 'PATCH', path: config.path, handler: handleMethodNotAllowed, config: noAuth },\n  ];\n};\n"],"names":["handleMethodNotAllowed","ctx","respond","res","setHeader","sendJsonRpcError","createMcpRoutes","config","handlers","noAuth","auth","method","path","handler","handlePost"],"mappings":";;AAIA;;;IAIA,MAAMA,yBAAiD,OAAOC,GAAAA,GAAAA;;AAE5DA,IAAAA,GAAAA,CAAIC,OAAO,GAAG,KAAA;;;AAGdD,IAAAA,GAAAA,CAAIE,GAAG,CAACC,SAAS,CAAC,OAAA,EAAS,MAAA,CAAA;IAC3BC,gBAAAA,CAAiBJ,GAAAA,CAAIE,GAAG,EAAE,oBAAA,CAAA;AAC5B,CAAA;AAMA;;;AAGC,IACM,MAAMG,eAAAA,GAAkB,CAC7BC,MAAAA,EACAC,QAAAA,GAAAA;AAEA,IAAA,MAAMC,MAAAA,GAAS;QAAEC,IAAAA,EAAM;AAAM,KAAA;IAE7B,OAAO;AACL,QAAA;YAAEC,MAAAA,EAAQ,MAAA;AAAQC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;AAAEC,YAAAA,OAAAA,EAASL,SAASM,UAAU;YAAEP,MAAAA,EAAQE;AAAO,SAAA;AAClF,QAAA;YAAEE,MAAAA,EAAQ,KAAA;AAAOC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;YAAEC,OAAAA,EAASb,sBAAAA;YAAwBO,MAAAA,EAAQE;AAAO,SAAA;AACpF,QAAA;YAAEE,MAAAA,EAAQ,QAAA;AAAUC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;YAAEC,OAAAA,EAASb,sBAAAA;YAAwBO,MAAAA,EAAQE;AAAO,SAAA;AACvF,QAAA;YAAEE,MAAAA,EAAQ,KAAA;AAAOC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;YAAEC,OAAAA,EAASb,sBAAAA;YAAwBO,MAAAA,EAAQE;AAAO,SAAA;AACpF,QAAA;YAAEE,MAAAA,EAAQ,OAAA;AAASC,YAAAA,IAAAA,EAAML,OAAOK,IAAI;YAAEC,OAAAA,EAASb,sBAAAA;YAAwBO,MAAAA,EAAQE;AAAO;AACvF,KAAA;AACH;;;;"}

package/dist/services/mcp/tool-registry.d.ts

@@ -0,0 +1,25 @@
+import type { McpServer, RegisteredTool } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { Core, Modules } from '@strapi/types';
+import { z } from '@strapi/utils';
+import { McpCapabilityDefinitionRegistry } from './internal/McpCapabilityDefinitionRegistry';
+import { type McpCapabilityRegistry, McpCapabilityRegistryBase } from './internal/McpCapabilityRegistry';
+import type { McpAdminTokenAbility } from './authentication';
+export declare function makeMcpToolDefinition<Name extends string, Title extends string, Description extends string, OutputSchema extends z.ZodObject<z.ZodRawShape>, InputSchema extends z.ZodObject<z.ZodRawShape> | undefined = undefined, Access extends Modules.MCP.McpCapabilityAccess = Modules.MCP.McpCapabilityAccess>(tool: {
+    name: Name;
+    title: Title;
+    description: Description;
+    resolveInputSchema?: (context: Modules.MCP.McpHandlerContext) => InputSchema;
+    resolveOutputSchema: (context: Modules.MCP.McpHandlerContext) => OutputSchema;
+    createHandler: (strapi: Core.Strapi, context: Modules.MCP.McpHandlerContext) => Modules.MCP.McpToolHandler<NoInfer<InputSchema>, NoInfer<OutputSchema>>;
+} & Access): Modules.MCP.McpToolDefinition<Name, InputSchema, OutputSchema, Title, Description> & Access;
+export declare class McpToolRegistry extends McpCapabilityRegistryBase<'tool', Modules.MCP.McpToolDefinition, RegisteredTool> implements McpCapabilityRegistry {
+    #private;
+    constructor(ctx: {
+        strapi: Core.Strapi;
+        definitions: McpCapabilityDefinitionRegistry<'tool', Modules.MCP.McpToolDefinition>;
+        ability: McpAdminTokenAbility;
+        user: Modules.MCP.McpHandlerContext['user'];
+    });
+    bind(mcpServer: McpServer): void;
+}
+//# sourceMappingURL=tool-registry.d.ts.map

package/dist/services/mcp/tool-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registry.d.ts","sourceRoot":"","sources":["../../../src/services/mcp/tool-registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,yCAAyC,CAAC;AACzF,OAAO,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAClC,OAAO,EAAE,+BAA+B,EAAE,MAAM,4CAA4C,CAAC;AAC7F,OAAO,EACL,KAAK,qBAAqB,EAC1B,yBAAyB,EAC1B,MAAM,kCAAkC,CAAC;AAG1C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAE7D,wBAAgB,qBAAqB,CACnC,IAAI,SAAS,MAAM,EACnB,KAAK,SAAS,MAAM,EACpB,WAAW,SAAS,MAAM,EAC1B,YAAY,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,EAC/C,WAAW,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,SAAS,GAAG,SAAS,EACtE,MAAM,SAAS,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAEhF,IAAI,EAAE;IACJ,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,KAAK,CAAC;IACb,WAAW,EAAE,WAAW,CAAC;IACzB,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,WAAW,CAAC;IAC7E,mBAAmB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,YAAY,CAAC;IAC9E,aAAa,EAAE,CACb,MAAM,EAAE,IAAI,CAAC,MAAM,EACnB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,KACnC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;CAC9E,GAAG,MAAM,GACT,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,CAAC,GAAG,MAAM,CAS7F;AAED,qBAAa,eACX,SAAQ,yBAAyB,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,cAAc,CACvF,YAAW,qBAAqB;;gBAQpB,GAAG,EAAE;QACf,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;QACpB,WAAW,EAAE,+BAA+B,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACpF,OAAO,EAAE,oBAAoB,CAAC;QAC9B,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;KAC7C;IAOD,IAAI,CAAC,SAAS,EAAE,SAAS;CAwE1B"}

package/dist/services/mcp/tool-registry.js

@@ -0,0 +1,102 @@
+'use strict';
+
+var McpCapabilityRegistry = require('./internal/McpCapabilityRegistry.js');
+var wrapCapabilityHandlerForMetrics = require('./metrics/wrapCapabilityHandlerForMetrics.js');
+var createSafeCapabilityRegistration = require('./utils/createSafeCapabilityRegistration.js');
+
+// eslint-disable-next-line import/extensions
+function _class_private_field_loose_base(receiver, privateKey) {
+    if (!Object.prototype.hasOwnProperty.call(receiver, privateKey)) {
+        throw new TypeError("attempted to use private field on non-instance");
+    }
+    return receiver;
+}
+var id = 0;
+function _class_private_field_loose_key(name) {
+    return "__private_" + id++ + "_" + name;
+}
+function makeMcpToolDefinition(tool) {
+    return tool;
+}
+var _strapi = /*#__PURE__*/ _class_private_field_loose_key("_strapi"), _ability = /*#__PURE__*/ _class_private_field_loose_key("_ability"), _user = /*#__PURE__*/ _class_private_field_loose_key("_user");
+class McpToolRegistry extends McpCapabilityRegistry.McpCapabilityRegistryBase {
+    bind(mcpServer) {
+        const strapi = _class_private_field_loose_base(this, _strapi)[_strapi];
+        super.register((definition)=>{
+            const { name, title, description, resolveInputSchema, resolveOutputSchema, createHandler } = definition;
+            // Bind the session ability and token owner into the handler context so handlers can enforce
+            // field-level and entity-level permission checks and set creator fields.
+            const context = {
+                userAbility: _class_private_field_loose_base(this, _ability)[_ability],
+                user: _class_private_field_loose_base(this, _user)[_user]
+            };
+            const createHandlerWithContext = (strapi)=>createHandler(strapi, context);
+            return createSafeCapabilityRegistration.createSafeCapabilityRegistration({
+                strapi,
+                capabilityType: 'Tool',
+                name,
+                createHandler: createHandlerWithContext,
+                createFallbackHandler (errorMessage) {
+                    return async ()=>({
+                            content: [
+                                {
+                                    type: 'text',
+                                    text: `Tool "${name}" failed to initialize: ${errorMessage}`
+                                }
+                            ],
+                            isError: true
+                        });
+                },
+                createErrorResult (error) {
+                    return {
+                        content: [
+                            {
+                                type: 'text',
+                                text: `Tool "${name}" execution failed: ${error.message}`
+                            }
+                        ],
+                        isError: true
+                    };
+                },
+                registerWithSdk (safeHandler) {
+                    const inputSchema = resolveInputSchema !== undefined ? resolveInputSchema(context) : undefined;
+                    const outputSchema = resolveOutputSchema(context);
+                    // Adapt from our object-literal handler `({ args, extra })` to
+                    // the MCP SDK's positional form `(args, extra)` / `(extra)`.
+                    const baseHandler = inputSchema !== undefined ? (args, extra)=>safeHandler({
+                            args,
+                            extra
+                        }) : (extra)=>safeHandler({
+                            extra
+                        });
+                    const sdkHandler = wrapCapabilityHandlerForMetrics.wrapCapabilityHandlerForMetrics(strapi, 'tool', name, definition.telemetry, baseHandler);
+                    return mcpServer.registerTool(name, {
+                        title,
+                        description,
+                        inputSchema,
+                        outputSchema
+                    }, sdkHandler);
+                }
+            });
+        });
+    }
+    constructor(ctx){
+        super(ctx.definitions), Object.defineProperty(this, _strapi, {
+            writable: true,
+            value: void 0
+        }), Object.defineProperty(this, _ability, {
+            writable: true,
+            value: void 0
+        }), Object.defineProperty(this, _user, {
+            writable: true,
+            value: void 0
+        });
+        _class_private_field_loose_base(this, _strapi)[_strapi] = ctx.strapi;
+        _class_private_field_loose_base(this, _ability)[_ability] = ctx.ability;
+        _class_private_field_loose_base(this, _user)[_user] = ctx.user;
+    }
+}
+
+exports.McpToolRegistry = McpToolRegistry;
+exports.makeMcpToolDefinition = makeMcpToolDefinition;
+//# sourceMappingURL=tool-registry.js.map

package/dist/services/mcp/tool-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registry.js","sources":["../../../src/services/mcp/tool-registry.ts"],"sourcesContent":["// eslint-disable-next-line import/extensions\nimport type { McpServer, RegisteredTool } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { Core, Modules } from '@strapi/types';\nimport { z } from '@strapi/utils';\nimport { McpCapabilityDefinitionRegistry } from './internal/McpCapabilityDefinitionRegistry';\nimport {\n  type McpCapabilityRegistry,\n  McpCapabilityRegistryBase,\n} from './internal/McpCapabilityRegistry';\nimport { wrapCapabilityHandlerForMetrics } from './metrics/wrapCapabilityHandlerForMetrics';\nimport { createSafeCapabilityRegistration } from './utils/createSafeCapabilityRegistration';\nimport type { McpAdminTokenAbility } from './authentication';\n\nexport function makeMcpToolDefinition<\n  Name extends string,\n  Title extends string,\n  Description extends string,\n  OutputSchema extends z.ZodObject<z.ZodRawShape>,\n  InputSchema extends z.ZodObject<z.ZodRawShape> | undefined = undefined,\n  Access extends Modules.MCP.McpCapabilityAccess = Modules.MCP.McpCapabilityAccess,\n>(\n  tool: {\n    name: Name;\n    title: Title;\n    description: Description;\n    resolveInputSchema?: (context: Modules.MCP.McpHandlerContext) => InputSchema;\n    resolveOutputSchema: (context: Modules.MCP.McpHandlerContext) => OutputSchema;\n    createHandler: (\n      strapi: Core.Strapi,\n      context: Modules.MCP.McpHandlerContext\n    ) => Modules.MCP.McpToolHandler<NoInfer<InputSchema>, NoInfer<OutputSchema>>;\n  } & Access\n): Modules.MCP.McpToolDefinition<Name, InputSchema, OutputSchema, Title, Description> & Access {\n  return tool as Modules.MCP.McpToolDefinition<\n    Name,\n    InputSchema,\n    OutputSchema,\n    Title,\n    Description\n  > &\n    Access;\n}\n\nexport class McpToolRegistry\n  extends McpCapabilityRegistryBase<'tool', Modules.MCP.McpToolDefinition, RegisteredTool>\n  implements McpCapabilityRegistry\n{\n  #strapi: Core.Strapi;\n\n  #ability: McpAdminTokenAbility;\n\n  #user: Modules.MCP.McpHandlerContext['user'];\n\n  constructor(ctx: {\n    strapi: Core.Strapi;\n    definitions: McpCapabilityDefinitionRegistry<'tool', Modules.MCP.McpToolDefinition>;\n    ability: McpAdminTokenAbility;\n    user: Modules.MCP.McpHandlerContext['user'];\n  }) {\n    super(ctx.definitions);\n    this.#strapi = ctx.strapi;\n    this.#ability = ctx.ability;\n    this.#user = ctx.user;\n  }\n\n  bind(mcpServer: McpServer) {\n    const strapi = this.#strapi;\n\n    super.register((definition) => {\n      const { name, title, description, resolveInputSchema, resolveOutputSchema, createHandler } =\n        definition;\n\n      // Bind the session ability and token owner into the handler context so handlers can enforce\n      // field-level and entity-level permission checks and set creator fields.\n      const context: Modules.MCP.McpHandlerContext = {\n        userAbility: this.#ability,\n        user: this.#user,\n      };\n      const createHandlerWithContext = (strapi: Core.Strapi) => createHandler(strapi, context);\n\n      return createSafeCapabilityRegistration({\n        strapi,\n        capabilityType: 'Tool',\n        name,\n        createHandler: createHandlerWithContext,\n        createFallbackHandler(errorMessage) {\n          return async () => ({\n            content: [\n              {\n                type: 'text' as const,\n                text: `Tool \"${name}\" failed to initialize: ${errorMessage}`,\n              },\n            ],\n            isError: true,\n          });\n        },\n        createErrorResult(error) {\n          return {\n            content: [\n              {\n                type: 'text' as const,\n                text: `Tool \"${name}\" execution failed: ${error.message}`,\n              },\n            ],\n            isError: true,\n          };\n        },\n        registerWithSdk(safeHandler) {\n          const inputSchema =\n            resolveInputSchema !== undefined ? resolveInputSchema(context) : undefined;\n          const outputSchema = resolveOutputSchema(context);\n\n          // Adapt from our object-literal handler `({ args, extra })` to\n          // the MCP SDK's positional form `(args, extra)` / `(extra)`.\n          const baseHandler =\n            inputSchema !== undefined\n              ? (args: unknown, extra: unknown) =>\n                  safeHandler({ args, extra } as Parameters<typeof safeHandler>[0])\n              : (extra: unknown) => safeHandler({ extra } as Parameters<typeof safeHandler>[0]);\n\n          const sdkHandler = wrapCapabilityHandlerForMetrics(\n            strapi,\n            'tool',\n            name,\n            definition.telemetry,\n            baseHandler\n          );\n\n          return mcpServer.registerTool(\n            name,\n            { title, description, inputSchema, outputSchema },\n            sdkHandler\n          );\n        },\n      });\n    });\n  }\n}\n"],"names":["makeMcpToolDefinition","tool","McpToolRegistry","McpCapabilityRegistryBase","bind","mcpServer","strapi","register","definition","name","title","description","resolveInputSchema","resolveOutputSchema","createHandler","context","userAbility","user","createHandlerWithContext","createSafeCapabilityRegistration","capabilityType","createFallbackHandler","errorMessage","content","type","text","isError","createErrorResult","error","message","registerWithSdk","safeHandler","inputSchema","undefined","outputSchema","baseHandler","args","extra","sdkHandler","wrapCapabilityHandlerForMetrics","telemetry","registerTool","ctx","definitions","ability"],"mappings":";;;;;;AAAA;;;;;;;;;;;AAaO,SAASA,sBAQdC,IAUU,EAAA;IAEV,OAAOA,IAAAA;AAQT;AAME,IAAA,OAAA,iBAAA,8BAAA,CAAA,SAAA,CAAA,EAEA,QAAA,iBAAA,8BAAA,CAAA,UAAA,CAAA,EAEA,KAAA,iBAAA,8BAAA,CAAA,OAAA,CAAA;AARK,MAAMC,eAAAA,SACHC,+CAAAA,CAAAA;AAqBRC,IAAAA,IAAAA,CAAKC,SAAoB,EAAE;AACzB,QAAA,MAAMC,MAAAA,GAAS,+BAAA,CAAA,IAAI,EAAC,OAAA,CAAA,CAAA,OAAA,CAAA;QAEpB,KAAK,CAACC,SAAS,CAACC,UAAAA,GAAAA;AACd,YAAA,MAAM,EAAEC,IAAI,EAAEC,KAAK,EAAEC,WAAW,EAAEC,kBAAkB,EAAEC,mBAAmB,EAAEC,aAAa,EAAE,GACxFN,UAAAA;;;AAIF,YAAA,MAAMO,OAAAA,GAAyC;AAC7CC,gBAAAA,WAAW,EAAE,+BAAA,CAAA,IAAI,EAAC,QAAA,CAAA,CAAA,QAAA,CAAA;AAClBC,gBAAAA,IAAI,EAAE,+BAAA,CAAA,IAAI,EAAC,KAAA,CAAA,CAAA,KAAA;AACb,aAAA;AACA,YAAA,MAAMC,wBAAAA,GAA2B,CAACZ,MAAAA,GAAwBQ,aAAAA,CAAcR,MAAAA,EAAQS,OAAAA,CAAAA;AAEhF,YAAA,OAAOI,iEAAAA,CAAiC;AACtCb,gBAAAA,MAAAA;gBACAc,cAAAA,EAAgB,MAAA;AAChBX,gBAAAA,IAAAA;gBACAK,aAAAA,EAAeI,wBAAAA;AACfG,gBAAAA,qBAAAA,CAAAA,CAAsBC,YAAY,EAAA;AAChC,oBAAA,OAAO,WAAa;4BAClBC,OAAAA,EAAS;AACP,gCAAA;oCACEC,IAAAA,EAAM,MAAA;AACNC,oCAAAA,IAAAA,EAAM,CAAC,MAAM,EAAEhB,IAAAA,CAAK,wBAAwB,EAAEa,YAAAA,CAAAA;AAChD;AACD,6BAAA;4BACDI,OAAAA,EAAS;yBACX,CAAA;AACF,gBAAA,CAAA;AACAC,gBAAAA,iBAAAA,CAAAA,CAAkBC,KAAK,EAAA;oBACrB,OAAO;wBACLL,OAAAA,EAAS;AACP,4BAAA;gCACEC,IAAAA,EAAM,MAAA;gCACNC,IAAAA,EAAM,CAAC,MAAM,EAAEhB,IAAAA,CAAK,oBAAoB,EAAEmB,KAAAA,CAAMC,OAAO,CAAA;AACzD;AACD,yBAAA;wBACDH,OAAAA,EAAS;AACX,qBAAA;AACF,gBAAA,CAAA;AACAI,gBAAAA,eAAAA,CAAAA,CAAgBC,WAAW,EAAA;AACzB,oBAAA,MAAMC,WAAAA,GACJpB,kBAAAA,KAAuBqB,SAAAA,GAAYrB,kBAAAA,CAAmBG,OAAAA,CAAAA,GAAWkB,SAAAA;AACnE,oBAAA,MAAMC,eAAerB,mBAAAA,CAAoBE,OAAAA,CAAAA;;;AAIzC,oBAAA,MAAMoB,cACJH,WAAAA,KAAgBC,SAAAA,GACZ,CAACG,IAAAA,EAAeC,QACdN,WAAAA,CAAY;AAAEK,4BAAAA,IAAAA;AAAMC,4BAAAA;yBAAM,CAAA,GAC5B,CAACA,QAAmBN,WAAAA,CAAY;AAAEM,4BAAAA;AAAM,yBAAA,CAAA;AAE9C,oBAAA,MAAMC,aAAaC,+DAAAA,CACjBjC,MAAAA,EACA,QACAG,IAAAA,EACAD,UAAAA,CAAWgC,SAAS,EACpBL,WAAAA,CAAAA;oBAGF,OAAO9B,SAAAA,CAAUoC,YAAY,CAC3BhC,IAAAA,EACA;AAAEC,wBAAAA,KAAAA;AAAOC,wBAAAA,WAAAA;AAAaqB,wBAAAA,WAAAA;AAAaE,wBAAAA;qBAAa,EAChDI,UAAAA,CAAAA;AAEJ,gBAAA;AACF,aAAA,CAAA;AACF,QAAA,CAAA,CAAA;AACF,IAAA;AAnFA,IAAA,WAAA,CAAYI,GAKX,CAAE;AACD,QAAA,KAAK,CAACA,GAAAA,CAAIC,WAAW,CAAA,EAZvB,MAAA,CAAA,cAAA,CAAA,IAAA,EAAA,OAAA,EAAA;;mBAAA;YAEA,MAAA,CAAA,cAAA,CAAA,IAAA,EAAA,QAAA,EAAA;;mBAAA;YAEA,MAAA,CAAA,cAAA,CAAA,IAAA,EAAA,KAAA,EAAA;;mBAAA;;AASE,QAAA,+BAAA,CAAA,IAAI,EAAC,OAAA,CAAA,CAAA,OAAA,CAAA,GAAUD,IAAIpC,MAAM;AACzB,QAAA,+BAAA,CAAA,IAAI,EAAC,QAAA,CAAA,CAAA,QAAA,CAAA,GAAWoC,IAAIE,OAAO;AAC3B,QAAA,+BAAA,CAAA,IAAI,EAAC,KAAA,CAAA,CAAA,KAAA,CAAA,GAAQF,IAAIzB,IAAI;AACvB,IAAA;AA0EF;;;;;"}

package/dist/services/mcp/tool-registry.mjs

@@ -0,0 +1,99 @@
+import { McpCapabilityRegistryBase } from './internal/McpCapabilityRegistry.mjs';
+import { wrapCapabilityHandlerForMetrics } from './metrics/wrapCapabilityHandlerForMetrics.mjs';
+import { createSafeCapabilityRegistration } from './utils/createSafeCapabilityRegistration.mjs';
+
+// eslint-disable-next-line import/extensions
+function _class_private_field_loose_base(receiver, privateKey) {
+    if (!Object.prototype.hasOwnProperty.call(receiver, privateKey)) {
+        throw new TypeError("attempted to use private field on non-instance");
+    }
+    return receiver;
+}
+var id = 0;
+function _class_private_field_loose_key(name) {
+    return "__private_" + id++ + "_" + name;
+}
+function makeMcpToolDefinition(tool) {
+    return tool;
+}
+var _strapi = /*#__PURE__*/ _class_private_field_loose_key("_strapi"), _ability = /*#__PURE__*/ _class_private_field_loose_key("_ability"), _user = /*#__PURE__*/ _class_private_field_loose_key("_user");
+class McpToolRegistry extends McpCapabilityRegistryBase {
+    bind(mcpServer) {
+        const strapi = _class_private_field_loose_base(this, _strapi)[_strapi];
+        super.register((definition)=>{
+            const { name, title, description, resolveInputSchema, resolveOutputSchema, createHandler } = definition;
+            // Bind the session ability and token owner into the handler context so handlers can enforce
+            // field-level and entity-level permission checks and set creator fields.
+            const context = {
+                userAbility: _class_private_field_loose_base(this, _ability)[_ability],
+                user: _class_private_field_loose_base(this, _user)[_user]
+            };
+            const createHandlerWithContext = (strapi)=>createHandler(strapi, context);
+            return createSafeCapabilityRegistration({
+                strapi,
+                capabilityType: 'Tool',
+                name,
+                createHandler: createHandlerWithContext,
+                createFallbackHandler (errorMessage) {
+                    return async ()=>({
+                            content: [
+                                {
+                                    type: 'text',
+                                    text: `Tool "${name}" failed to initialize: ${errorMessage}`
+                                }
+                            ],
+                            isError: true
+                        });
+                },
+                createErrorResult (error) {
+                    return {
+                        content: [
+                            {
+                                type: 'text',
+                                text: `Tool "${name}" execution failed: ${error.message}`
+                            }
+                        ],
+                        isError: true
+                    };
+                },
+                registerWithSdk (safeHandler) {
+                    const inputSchema = resolveInputSchema !== undefined ? resolveInputSchema(context) : undefined;
+                    const outputSchema = resolveOutputSchema(context);
+                    // Adapt from our object-literal handler `({ args, extra })` to
+                    // the MCP SDK's positional form `(args, extra)` / `(extra)`.
+                    const baseHandler = inputSchema !== undefined ? (args, extra)=>safeHandler({
+                            args,
+                            extra
+                        }) : (extra)=>safeHandler({
+                            extra
+                        });
+                    const sdkHandler = wrapCapabilityHandlerForMetrics(strapi, 'tool', name, definition.telemetry, baseHandler);
+                    return mcpServer.registerTool(name, {
+                        title,
+                        description,
+                        inputSchema,
+                        outputSchema
+                    }, sdkHandler);
+                }
+            });
+        });
+    }
+    constructor(ctx){
+        super(ctx.definitions), Object.defineProperty(this, _strapi, {
+            writable: true,
+            value: void 0
+        }), Object.defineProperty(this, _ability, {
+            writable: true,
+            value: void 0
+        }), Object.defineProperty(this, _user, {
+            writable: true,
+            value: void 0
+        });
+        _class_private_field_loose_base(this, _strapi)[_strapi] = ctx.strapi;
+        _class_private_field_loose_base(this, _ability)[_ability] = ctx.ability;
+        _class_private_field_loose_base(this, _user)[_user] = ctx.user;
+    }
+}
+
+export { McpToolRegistry, makeMcpToolDefinition };
+//# sourceMappingURL=tool-registry.mjs.map

package/dist/services/mcp/tool-registry.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registry.mjs","sources":["../../../src/services/mcp/tool-registry.ts"],"sourcesContent":["// eslint-disable-next-line import/extensions\nimport type { McpServer, RegisteredTool } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport type { Core, Modules } from '@strapi/types';\nimport { z } from '@strapi/utils';\nimport { McpCapabilityDefinitionRegistry } from './internal/McpCapabilityDefinitionRegistry';\nimport {\n  type McpCapabilityRegistry,\n  McpCapabilityRegistryBase,\n} from './internal/McpCapabilityRegistry';\nimport { wrapCapabilityHandlerForMetrics } from './metrics/wrapCapabilityHandlerForMetrics';\nimport { createSafeCapabilityRegistration } from './utils/createSafeCapabilityRegistration';\nimport type { McpAdminTokenAbility } from './authentication';\n\nexport function makeMcpToolDefinition<\n  Name extends string,\n  Title extends string,\n  Description extends string,\n  OutputSchema extends z.ZodObject<z.ZodRawShape>,\n  InputSchema extends z.ZodObject<z.ZodRawShape> | undefined = undefined,\n  Access extends Modules.MCP.McpCapabilityAccess = Modules.MCP.McpCapabilityAccess,\n>(\n  tool: {\n    name: Name;\n    title: Title;\n    description: Description;\n    resolveInputSchema?: (context: Modules.MCP.McpHandlerContext) => InputSchema;\n    resolveOutputSchema: (context: Modules.MCP.McpHandlerContext) => OutputSchema;\n    createHandler: (\n      strapi: Core.Strapi,\n      context: Modules.MCP.McpHandlerContext\n    ) => Modules.MCP.McpToolHandler<NoInfer<InputSchema>, NoInfer<OutputSchema>>;\n  } & Access\n): Modules.MCP.McpToolDefinition<Name, InputSchema, OutputSchema, Title, Description> & Access {\n  return tool as Modules.MCP.McpToolDefinition<\n    Name,\n    InputSchema,\n    OutputSchema,\n    Title,\n    Description\n  > &\n    Access;\n}\n\nexport class McpToolRegistry\n  extends McpCapabilityRegistryBase<'tool', Modules.MCP.McpToolDefinition, RegisteredTool>\n  implements McpCapabilityRegistry\n{\n  #strapi: Core.Strapi;\n\n  #ability: McpAdminTokenAbility;\n\n  #user: Modules.MCP.McpHandlerContext['user'];\n\n  constructor(ctx: {\n    strapi: Core.Strapi;\n    definitions: McpCapabilityDefinitionRegistry<'tool', Modules.MCP.McpToolDefinition>;\n    ability: McpAdminTokenAbility;\n    user: Modules.MCP.McpHandlerContext['user'];\n  }) {\n    super(ctx.definitions);\n    this.#strapi = ctx.strapi;\n    this.#ability = ctx.ability;\n    this.#user = ctx.user;\n  }\n\n  bind(mcpServer: McpServer) {\n    const strapi = this.#strapi;\n\n    super.register((definition) => {\n      const { name, title, description, resolveInputSchema, resolveOutputSchema, createHandler } =\n        definition;\n\n      // Bind the session ability and token owner into the handler context so handlers can enforce\n      // field-level and entity-level permission checks and set creator fields.\n      const context: Modules.MCP.McpHandlerContext = {\n        userAbility: this.#ability,\n        user: this.#user,\n      };\n      const createHandlerWithContext = (strapi: Core.Strapi) => createHandler(strapi, context);\n\n      return createSafeCapabilityRegistration({\n        strapi,\n        capabilityType: 'Tool',\n        name,\n        createHandler: createHandlerWithContext,\n        createFallbackHandler(errorMessage) {\n          return async () => ({\n            content: [\n              {\n                type: 'text' as const,\n                text: `Tool \"${name}\" failed to initialize: ${errorMessage}`,\n              },\n            ],\n            isError: true,\n          });\n        },\n        createErrorResult(error) {\n          return {\n            content: [\n              {\n                type: 'text' as const,\n                text: `Tool \"${name}\" execution failed: ${error.message}`,\n              },\n            ],\n            isError: true,\n          };\n        },\n        registerWithSdk(safeHandler) {\n          const inputSchema =\n            resolveInputSchema !== undefined ? resolveInputSchema(context) : undefined;\n          const outputSchema = resolveOutputSchema(context);\n\n          // Adapt from our object-literal handler `({ args, extra })` to\n          // the MCP SDK's positional form `(args, extra)` / `(extra)`.\n          const baseHandler =\n            inputSchema !== undefined\n              ? (args: unknown, extra: unknown) =>\n                  safeHandler({ args, extra } as Parameters<typeof safeHandler>[0])\n              : (extra: unknown) => safeHandler({ extra } as Parameters<typeof safeHandler>[0]);\n\n          const sdkHandler = wrapCapabilityHandlerForMetrics(\n            strapi,\n            'tool',\n            name,\n            definition.telemetry,\n            baseHandler\n          );\n\n          return mcpServer.registerTool(\n            name,\n            { title, description, inputSchema, outputSchema },\n            sdkHandler\n          );\n        },\n      });\n    });\n  }\n}\n"],"names":["makeMcpToolDefinition","tool","McpToolRegistry","McpCapabilityRegistryBase","bind","mcpServer","strapi","register","definition","name","title","description","resolveInputSchema","resolveOutputSchema","createHandler","context","userAbility","user","createHandlerWithContext","createSafeCapabilityRegistration","capabilityType","createFallbackHandler","errorMessage","content","type","text","isError","createErrorResult","error","message","registerWithSdk","safeHandler","inputSchema","undefined","outputSchema","baseHandler","args","extra","sdkHandler","wrapCapabilityHandlerForMetrics","telemetry","registerTool","ctx","definitions","ability"],"mappings":";;;;AAAA;;;;;;;;;;;AAaO,SAASA,sBAQdC,IAUU,EAAA;IAEV,OAAOA,IAAAA;AAQT;AAME,IAAA,OAAA,iBAAA,8BAAA,CAAA,SAAA,CAAA,EAEA,QAAA,iBAAA,8BAAA,CAAA,UAAA,CAAA,EAEA,KAAA,iBAAA,8BAAA,CAAA,OAAA,CAAA;AARK,MAAMC,eAAAA,SACHC,yBAAAA,CAAAA;AAqBRC,IAAAA,IAAAA,CAAKC,SAAoB,EAAE;AACzB,QAAA,MAAMC,MAAAA,GAAS,+BAAA,CAAA,IAAI,EAAC,OAAA,CAAA,CAAA,OAAA,CAAA;QAEpB,KAAK,CAACC,SAAS,CAACC,UAAAA,GAAAA;AACd,YAAA,MAAM,EAAEC,IAAI,EAAEC,KAAK,EAAEC,WAAW,EAAEC,kBAAkB,EAAEC,mBAAmB,EAAEC,aAAa,EAAE,GACxFN,UAAAA;;;AAIF,YAAA,MAAMO,OAAAA,GAAyC;AAC7CC,gBAAAA,WAAW,EAAE,+BAAA,CAAA,IAAI,EAAC,QAAA,CAAA,CAAA,QAAA,CAAA;AAClBC,gBAAAA,IAAI,EAAE,+BAAA,CAAA,IAAI,EAAC,KAAA,CAAA,CAAA,KAAA;AACb,aAAA;AACA,YAAA,MAAMC,wBAAAA,GAA2B,CAACZ,MAAAA,GAAwBQ,aAAAA,CAAcR,MAAAA,EAAQS,OAAAA,CAAAA;AAEhF,YAAA,OAAOI,gCAAAA,CAAiC;AACtCb,gBAAAA,MAAAA;gBACAc,cAAAA,EAAgB,MAAA;AAChBX,gBAAAA,IAAAA;gBACAK,aAAAA,EAAeI,wBAAAA;AACfG,gBAAAA,qBAAAA,CAAAA,CAAsBC,YAAY,EAAA;AAChC,oBAAA,OAAO,WAAa;4BAClBC,OAAAA,EAAS;AACP,gCAAA;oCACEC,IAAAA,EAAM,MAAA;AACNC,oCAAAA,IAAAA,EAAM,CAAC,MAAM,EAAEhB,IAAAA,CAAK,wBAAwB,EAAEa,YAAAA,CAAAA;AAChD;AACD,6BAAA;4BACDI,OAAAA,EAAS;yBACX,CAAA;AACF,gBAAA,CAAA;AACAC,gBAAAA,iBAAAA,CAAAA,CAAkBC,KAAK,EAAA;oBACrB,OAAO;wBACLL,OAAAA,EAAS;AACP,4BAAA;gCACEC,IAAAA,EAAM,MAAA;gCACNC,IAAAA,EAAM,CAAC,MAAM,EAAEhB,IAAAA,CAAK,oBAAoB,EAAEmB,KAAAA,CAAMC,OAAO,CAAA;AACzD;AACD,yBAAA;wBACDH,OAAAA,EAAS;AACX,qBAAA;AACF,gBAAA,CAAA;AACAI,gBAAAA,eAAAA,CAAAA,CAAgBC,WAAW,EAAA;AACzB,oBAAA,MAAMC,WAAAA,GACJpB,kBAAAA,KAAuBqB,SAAAA,GAAYrB,kBAAAA,CAAmBG,OAAAA,CAAAA,GAAWkB,SAAAA;AACnE,oBAAA,MAAMC,eAAerB,mBAAAA,CAAoBE,OAAAA,CAAAA;;;AAIzC,oBAAA,MAAMoB,cACJH,WAAAA,KAAgBC,SAAAA,GACZ,CAACG,IAAAA,EAAeC,QACdN,WAAAA,CAAY;AAAEK,4BAAAA,IAAAA;AAAMC,4BAAAA;yBAAM,CAAA,GAC5B,CAACA,QAAmBN,WAAAA,CAAY;AAAEM,4BAAAA;AAAM,yBAAA,CAAA;AAE9C,oBAAA,MAAMC,aAAaC,+BAAAA,CACjBjC,MAAAA,EACA,QACAG,IAAAA,EACAD,UAAAA,CAAWgC,SAAS,EACpBL,WAAAA,CAAAA;oBAGF,OAAO9B,SAAAA,CAAUoC,YAAY,CAC3BhC,IAAAA,EACA;AAAEC,wBAAAA,KAAAA;AAAOC,wBAAAA,WAAAA;AAAaqB,wBAAAA,WAAAA;AAAaE,wBAAAA;qBAAa,EAChDI,UAAAA,CAAAA;AAEJ,gBAAA;AACF,aAAA,CAAA;AACF,QAAA,CAAA,CAAA;AACF,IAAA;AAnFA,IAAA,WAAA,CAAYI,GAKX,CAAE;AACD,QAAA,KAAK,CAACA,GAAAA,CAAIC,WAAW,CAAA,EAZvB,MAAA,CAAA,cAAA,CAAA,IAAA,EAAA,OAAA,EAAA;;mBAAA;YAEA,MAAA,CAAA,cAAA,CAAA,IAAA,EAAA,QAAA,EAAA;;mBAAA;YAEA,MAAA,CAAA,cAAA,CAAA,IAAA,EAAA,KAAA,EAAA;;mBAAA;;AASE,QAAA,+BAAA,CAAA,IAAI,EAAC,OAAA,CAAA,CAAA,OAAA,CAAA,GAAUD,IAAIpC,MAAM;AACzB,QAAA,+BAAA,CAAA,IAAI,EAAC,QAAA,CAAA,CAAA,QAAA,CAAA,GAAWoC,IAAIE,OAAO;AAC3B,QAAA,+BAAA,CAAA,IAAI,EAAC,KAAA,CAAA,CAAA,KAAA,CAAA,GAAQF,IAAIzB,IAAI;AACvB,IAAA;AA0EF;;;;"}