@vendure/mcp-plugin 3.8.0-minor-bootstrap.0

package/lib/rate-limit/mcp-rate-limiter.service.js

@@ -0,0 +1,248 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpRateLimiterService = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@vendure/core");
+const node_crypto_1 = require("node:crypto");
+const constants_1 = require("../constants");
+const ip_bucket_key_1 = require("./ip-bucket-key");
+let McpRateLimiterService = class McpRateLimiterService {
+    constructor(cacheService, options) {
+        this.cacheService = cacheService;
+        this.options = options;
+        /** Tail of the increment queue per bucket key; an entry is removed once its tail settles. */
+        this.inFlightIncrements = new Map();
+    }
+    // A refused request stays charged, like other fixed-window limiters.
+    async checkRateLimit(input) {
+        return this.runChecks(this.buildRateLimitChecks(input), input.subject);
+    }
+    // Kept separate from the standard request checks, which run later, to avoid double charging.
+    async checkAnonymousIpRateLimit(endpoint, clientIp) {
+        const check = this.buildAnonymousIpCheck(endpoint, (0, ip_bucket_key_1.ipBucketKey)(clientIp));
+        if (!check) {
+            return undefined;
+        }
+        return this.runChecks([check], 'MCP request');
+    }
+    /** Meters the OAuth endpoints per IP; they have no session or user to key on. */
+    async checkOauthIpRateLimit(clientIp) {
+        const check = this.buildOauthIpCheck((0, ip_bucket_key_1.ipBucketKey)(clientIp));
+        if (!check) {
+            return undefined;
+        }
+        return this.runChecks([check], 'MCP OAuth request');
+    }
+    // Only failed attempts count; once the limit is hit, every request from the IP is blocked until the window resets.
+    async checkBearerAuthFailureRateLimit(clientIp) {
+        const check = this.buildBearerAuthFailureCheck((0, ip_bucket_key_1.ipBucketKey)(clientIp));
+        if (!check) {
+            return undefined;
+        }
+        const now = Date.now();
+        const state = await this.getBucketState(check.key);
+        if (state && state.count > check.rpm) {
+            // Keep counting refused attempts, so the cache entry stays alive while the flood lasts.
+            await this.incrementBucket(check.key, now);
+            return this.exceededDetails('MCP request', check.scope, state.resetAt, now);
+        }
+        return undefined;
+    }
+    async recordBearerAuthFailure(clientIp) {
+        const check = this.buildBearerAuthFailureCheck((0, ip_bucket_key_1.ipBucketKey)(clientIp));
+        if (!check) {
+            return;
+        }
+        await this.incrementBucket(check.key, Date.now());
+    }
+    async runChecks(checks, subject) {
+        if (checks.length === 0) {
+            return undefined;
+        }
+        const now = Date.now();
+        const results = await Promise.all(checks.map(async (check) => ({ check, state: await this.incrementBucket(check.key, now) })));
+        const exceeded = results.find(({ check, state }) => state.count > check.rpm);
+        if (exceeded) {
+            return this.exceededDetails(subject, exceeded.check.scope, exceeded.state.resetAt, now);
+        }
+        return undefined;
+    }
+    exceededDetails(subject, scope, resetAt, now) {
+        // Capped to one window, so a clock difference between instances can't advertise a wait longer than that.
+        const windowSeconds = constants_1.RATE_LIMIT_WINDOW_MS / 1000;
+        const retryAfterSeconds = Math.min(windowSeconds, Math.max(1, Math.ceil((resetAt - now) / 1000)));
+        return {
+            message: `Rate limit exceeded for ${subject} (${scope}). Retry after ${retryAfterSeconds} seconds.`,
+            retryAfterSeconds,
+            scope,
+        };
+    }
+    buildRateLimitChecks(input) {
+        const checks = [
+            ...this.buildSharedBucketChecks(input),
+            ...this.buildPerToolChecks(input),
+        ];
+        // De-dupe by key so a bucket is never double-counted within one request.
+        return [...new Map(checks.map(check => [check.key, check])).values()];
+    }
+    buildSharedBucketChecks(input) {
+        const checks = [];
+        const endpoint = input.endpoint;
+        const rateLimits = this.options.rateLimits;
+        const perSessionRpm = this.resolveRpm(rateLimits.perSession);
+        if (perSessionRpm > 0) {
+            checks.push({
+                key: `session:${endpoint}:${this.sessionOrIpKey(input.executionContext)}`,
+                rpm: perSessionRpm,
+                scope: 'session',
+            });
+        }
+        const userKey = this.userKey(input.executionContext);
+        const perUserRpm = this.resolveRpm(rateLimits.perUser);
+        if (userKey && perUserRpm > 0) {
+            checks.push({
+                key: `user:${endpoint}:${userKey}`,
+                rpm: perUserRpm,
+                scope: 'user',
+            });
+        }
+        const clientKey = this.clientKey(input.executionContext);
+        const perClientRpm = this.resolveRpm(rateLimits.perClient);
+        if (clientKey && perClientRpm > 0) {
+            checks.push({
+                key: `client:${endpoint}:${clientKey}`,
+                rpm: perClientRpm,
+                scope: 'OAuth client',
+            });
+        }
+        return checks;
+    }
+    /** The per-minute limit of a rate-limit option: 0 when the option is off or unset. */
+    resolveRpm(option) {
+        var _a;
+        return option === false ? 0 : ((_a = option === null || option === void 0 ? void 0 : option.rpm) !== null && _a !== void 0 ? _a : 0);
+    }
+    buildAnonymousIpCheck(endpoint, ipKey) {
+        const rpm = this.resolveRpm(this.options.rateLimits.anonymousIp);
+        if (endpoint !== 'shop' || rpm <= 0) {
+            return undefined;
+        }
+        return { key: `anonymous-ip:${endpoint}:${ipKey}`, rpm, scope: 'anonymous IP' };
+    }
+    buildOauthIpCheck(ipKey) {
+        const rpm = this.resolveRpm(this.options.rateLimits.oauthIp);
+        if (rpm <= 0) {
+            return undefined;
+        }
+        return { key: `oauth-ip:${ipKey}`, rpm, scope: 'OAuth IP' };
+    }
+    // Governed by the same `oauthIp` option as the OAuth surface's bucket, since both meter an unauthenticated address.
+    buildBearerAuthFailureCheck(ipKey) {
+        const rpm = this.resolveRpm(this.options.rateLimits.oauthIp);
+        if (rpm <= 0) {
+            return undefined;
+        }
+        return { key: `auth-failure:${ipKey}`, rpm, scope: 'authentication failures' };
+    }
+    /** The bucket for `input.subject`, keyed by actor+session (see {@link perToolBucketKey}). */
+    buildPerToolChecks(input) {
+        const rpm = this.resolveRpm(this.options.rateLimits.perTool[input.subject]);
+        if (rpm <= 0) {
+            return [];
+        }
+        return [
+            {
+                key: `tool:${input.endpoint}:${this.perToolBucketKey(input.executionContext)}:${input.subject}`,
+                rpm,
+                scope: `tool:${input.subject}`,
+            },
+        ];
+    }
+    async getBucketState(key) {
+        return this.cacheService.get(this.cacheKey(key));
+    }
+    incrementBucket(key, now) {
+        var _a;
+        const run = async () => {
+            const state = await this.getBucketState(key);
+            const next = state
+                ? { count: state.count + 1, resetAt: state.resetAt }
+                : { count: 1, resetAt: now + constants_1.RATE_LIMIT_WINDOW_MS };
+            await this.cacheService.set(this.cacheKey(key), next, {
+                ttl: Math.max(1000, next.resetAt - now),
+            });
+            return next;
+        };
+        const previous = (_a = this.inFlightIncrements.get(key)) !== null && _a !== void 0 ? _a : Promise.resolve();
+        const result = previous.then(run, run);
+        const tail = result.then(() => undefined, () => undefined);
+        this.inFlightIncrements.set(key, tail);
+        void tail.then(() => {
+            // Only clear the entry if no later increment has replaced it.
+            if (this.inFlightIncrements.get(key) === tail) {
+                this.inFlightIncrements.delete(key);
+            }
+        });
+        return result;
+    }
+    sessionKey(executionContext) {
+        var _a, _b;
+        const sessionToken = (_a = executionContext.ctx.session) === null || _a === void 0 ? void 0 : _a.token;
+        if (sessionToken) {
+            return `vendure:${this.hash(sessionToken)}`;
+        }
+        if (((_b = executionContext.grant) === null || _b === void 0 ? void 0 : _b.id) != null) {
+            return `mcp:${executionContext.grant.id}`;
+        }
+        // An in-process caller with no session shares this one bucket; there is nothing here to tell them apart.
+        return 'none';
+    }
+    sessionOrIpKey(executionContext) {
+        if (executionContext.grant == null && executionContext.clientIp != null) {
+            return `anonymous-ip:${(0, ip_bucket_key_1.ipBucketKey)(executionContext.clientIp)}`;
+        }
+        return this.sessionKey(executionContext);
+    }
+    userKey(executionContext) {
+        const userId = executionContext.ctx.activeUserId;
+        return userId != null ? String(userId) : undefined;
+    }
+    clientKey(executionContext) {
+        var _a;
+        return ((_a = executionContext.grant) === null || _a === void 0 ? void 0 : _a.oauthClientId) != null
+            ? `oauth:${executionContext.grant.oauthClientId}`
+            : undefined;
+    }
+    // Client alone would collapse all its users under one bucket, so session is folded in for fairness.
+    perToolBucketKey(executionContext) {
+        const clientKey = this.clientKey(executionContext);
+        return clientKey
+            ? `client:${clientKey}:session:${this.sessionKey(executionContext)}`
+            : this.sessionOrIpKey(executionContext);
+    }
+    cacheKey(key) {
+        return `${constants_1.RATE_LIMIT_CACHE_PREFIX}:${this.hash(key)}`;
+    }
+    hash(value) {
+        return (0, node_crypto_1.createHash)('sha256').update(value).digest('base64url');
+    }
+};
+exports.McpRateLimiterService = McpRateLimiterService;
+exports.McpRateLimiterService = McpRateLimiterService = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Inject)(constants_1.MCP_PLUGIN_OPTIONS)),
+    __metadata("design:paramtypes", [core_1.CacheService, Object])
+], McpRateLimiterService);
+//# sourceMappingURL=mcp-rate-limiter.service.js.map

package/lib/rate-limit/mcp-rate-limiter.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-rate-limiter.service.js","sourceRoot":"","sources":["../../src/rate-limit/mcp-rate-limiter.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,2CAAoD;AACpD,wCAA6C;AAE7C,6CAAyC;AAEzC,4CAAiG;AAGjG,mDAA8C;AA2BvC,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAI9B,YACqB,YAA0B,EACf,OAAkD;QAD7D,iBAAY,GAAZ,YAAY,CAAc;QACE,YAAO,GAAP,OAAO,CAA0B;QALlF,6FAA6F;QAC5E,uBAAkB,GAAG,IAAI,GAAG,EAAyB,CAAC;IAKpE,CAAC;IAEJ,qEAAqE;IACrE,KAAK,CAAC,cAAc,CAAC,KAAqB;QACtC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED,6FAA6F;IAC7F,KAAK,CAAC,yBAAyB,CAC3B,QAAoB,EACpB,QAAiB;QAEjB,MAAM,KAAK,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,IAAA,2BAAW,EAAC,QAAQ,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,CAAC;IAClD,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,qBAAqB,CAAC,QAAiB;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAA,2BAAW,EAAC,QAAQ,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACxD,CAAC;IAED,mHAAmH;IACnH,KAAK,CAAC,+BAA+B,CAAC,QAAiB;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,2BAA2B,CAAC,IAAA,2BAAW,EAAC,QAAQ,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,KAAK,IAAI,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;YACnC,wFAAwF;YACxF,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,QAAiB;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,2BAA2B,CAAC,IAAA,2BAAW,EAAC,QAAQ,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO;QACX,CAAC;QACD,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,SAAS,CACnB,MAAwB,EACxB,OAAe;QAEf,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAC5F,CAAC;QACF,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7E,IAAI,QAAQ,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAEO,eAAe,CACnB,OAAe,EACf,KAAa,EACb,OAAe,EACf,GAAW;QAEX,yGAAyG;QACzG,MAAM,aAAa,GAAG,gCAAoB,GAAG,IAAI,CAAC;QAClD,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClG,OAAO;YACH,OAAO,EAAE,2BAA2B,OAAO,KAAK,KAAK,kBAAkB,iBAAiB,WAAW;YACnG,iBAAiB;YACjB,KAAK;SACR,CAAC;IACN,CAAC;IAEO,oBAAoB,CAAC,KAAqB;QAC9C,MAAM,MAAM,GAAqB;YAC7B,GAAG,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC;YACtC,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC;SACpC,CAAC;QACF,yEAAyE;QACzE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IAEO,uBAAuB,CAAC,KAAqB;QACjD,MAAM,MAAM,GAAqB,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3C,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC7D,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,WAAW,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE;gBACzE,GAAG,EAAE,aAAa;gBAClB,KAAK,EAAE,SAAS;aACnB,CAAC,CAAC;QACP,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,OAAO,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,QAAQ,QAAQ,IAAI,OAAO,EAAE;gBAClC,GAAG,EAAE,UAAU;gBACf,KAAK,EAAE,MAAM;aAChB,CAAC,CAAC;QACP,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,SAAS,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC;gBACR,GAAG,EAAE,UAAU,QAAQ,IAAI,SAAS,EAAE;gBACtC,GAAG,EAAE,YAAY;gBACjB,KAAK,EAAE,cAAc;aACxB,CAAC,CAAC;QACP,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,sFAAsF;IAC9E,UAAU,CAAC,MAA2C;;QAC1D,OAAO,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,GAAG,mCAAI,CAAC,CAAC,CAAC;IACrD,CAAC;IAEO,qBAAqB,CAAC,QAAoB,EAAE,KAAa;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,QAAQ,KAAK,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,gBAAgB,QAAQ,IAAI,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACpF,CAAC;IAEO,iBAAiB,CAAC,KAAa;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACX,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,YAAY,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAChE,CAAC;IAED,oHAAoH;IAC5G,2BAA2B,CAAC,KAAa;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACX,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,gBAAgB,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IACnF,CAAC;IAED,6FAA6F;IACrF,kBAAkB,CAAC,KAAqB;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5E,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,CAAC;QACd,CAAC;QACD,OAAO;YACH;gBACI,GAAG,EAAE,QAAQ,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE;gBAC/F,GAAG;gBACH,KAAK,EAAE,QAAQ,KAAK,CAAC,OAAO,EAAE;aACjC;SACJ,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,GAAW;QACpC,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAc,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,CAAC;IAEO,eAAe,CAAC,GAAW,EAAE,GAAW;;QAC5C,MAAM,GAAG,GAAG,KAAK,IAA0B,EAAE;YACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAgB,KAAK;gBAC3B,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;gBACpD,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,gCAAoB,EAAE,CAAC;YACxD,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;gBAClD,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;aAC1C,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,MAAA,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,mCAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CACpB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAClB,CAAC;QACF,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YAChB,8DAA8D;YAC9D,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAClB,CAAC;IAEO,UAAU,CAAC,gBAAqC;;QACpD,MAAM,YAAY,GAAG,MAAA,gBAAgB,CAAC,GAAG,CAAC,OAAO,0CAAE,KAAK,CAAC;QACzD,IAAI,YAAY,EAAE,CAAC;YACf,OAAO,WAAW,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAChD,CAAC;QACD,IAAI,CAAA,MAAA,gBAAgB,CAAC,KAAK,0CAAE,EAAE,KAAI,IAAI,EAAE,CAAC;YACrC,OAAO,OAAO,gBAAgB,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC9C,CAAC;QACD,yGAAyG;QACzG,OAAO,MAAM,CAAC;IAClB,CAAC;IAEO,cAAc,CAAC,gBAAqC;QACxD,IAAI,gBAAgB,CAAC,KAAK,IAAI,IAAI,IAAI,gBAAgB,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;YACtE,OAAO,gBAAgB,IAAA,2BAAW,EAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpE,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;IAC7C,CAAC;IAEO,OAAO,CAAC,gBAAqC;QACjD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC;QACjD,OAAO,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IAEO,SAAS,CAAC,gBAAqC;;QACnD,OAAO,CAAA,MAAA,gBAAgB,CAAC,KAAK,0CAAE,aAAa,KAAI,IAAI;YAChD,CAAC,CAAC,SAAS,gBAAgB,CAAC,KAAK,CAAC,aAAa,EAAE;YACjD,CAAC,CAAC,SAAS,CAAC;IACpB,CAAC;IAED,oGAAoG;IAC5F,gBAAgB,CAAC,gBAAqC;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QACnD,OAAO,SAAS;YACZ,CAAC,CAAC,UAAU,SAAS,YAAY,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE;YACpE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;IAChD,CAAC;IAEO,QAAQ,CAAC,GAAW;QACxB,OAAO,GAAG,mCAAuB,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1D,CAAC;IAEO,IAAI,CAAC,KAAa;QACtB,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAClE,CAAC;CACJ,CAAA;AAhQY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;IAOJ,WAAA,IAAA,eAAM,EAAC,8BAAkB,CAAC,CAAA;qCADI,mBAAY;GALtC,qBAAqB,CAgQjC"}

package/lib/registry/bm25.d.ts

@@ -0,0 +1,12 @@
+export declare function tokenize(text: string): string[];
+export declare class Bm25Index {
+    private readonly docs;
+    private readonly df;
+    private readonly avgLength;
+    constructor(entries: Array<{
+        id: string;
+        text: string;
+    }>);
+    /** BM25 relevance of one document for the query; 0 when no query term occurs in it. */
+    score(id: string, query: string): number;
+}

package/lib/registry/bm25.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Bm25Index = void 0;
+exports.tokenize = tokenize;
+const STOPWORDS = new Set(('a an the of to for and or in on at by with from this that these those is are be as it its ' +
+    'my your our their i we you me us them').split(' '));
+// Whole-word matching lets a nonsense query score zero and trigger the no-results hint, which substring matching could not.
+function tokenize(text) {
+    return text
+        .toLowerCase()
+        .split(/[^a-z0-9]+/)
+        .filter(token => token.length > 0 && !STOPWORDS.has(token));
+}
+// Standard Okapi BM25 tuning values.
+const K1 = 1.5;
+const B = 0.75;
+// Rare query terms count more than common ones, so a "refund" hit says more than an "order" hit when half the tools mention orders.
+class Bm25Index {
+    constructor(entries) {
+        var _a, _b;
+        this.docs = new Map();
+        this.df = new Map();
+        for (const { id, text } of entries) {
+            const tokens = tokenize(text);
+            const termCounts = new Map();
+            for (const token of tokens) {
+                termCounts.set(token, ((_a = termCounts.get(token)) !== null && _a !== void 0 ? _a : 0) + 1);
+            }
+            this.docs.set(id, { termCounts, length: tokens.length });
+            for (const term of termCounts.keys()) {
+                this.df.set(term, ((_b = this.df.get(term)) !== null && _b !== void 0 ? _b : 0) + 1);
+            }
+        }
+        const totalLength = [...this.docs.values()].reduce((sum, doc) => sum + doc.length, 0);
+        this.avgLength = this.docs.size > 0 ? totalLength / this.docs.size : 0;
+    }
+    /** BM25 relevance of one document for the query; 0 when no query term occurs in it. */
+    score(id, query) {
+        var _a, _b;
+        const doc = this.docs.get(id);
+        if (!doc || doc.length === 0) {
+            return 0;
+        }
+        let score = 0;
+        for (const term of tokenize(query)) {
+            const frequency = (_a = doc.termCounts.get(term)) !== null && _a !== void 0 ? _a : 0;
+            if (frequency === 0) {
+                continue;
+            }
+            const df = (_b = this.df.get(term)) !== null && _b !== void 0 ? _b : 0;
+            const idf = Math.log(1 + (this.docs.size - df + 0.5) / (df + 0.5));
+            const numerator = frequency * (K1 + 1);
+            const denominator = frequency + K1 * (1 - B + B * (doc.length / this.avgLength));
+            score += idf * (numerator / denominator);
+        }
+        return score;
+    }
+}
+exports.Bm25Index = Bm25Index;
+//# sourceMappingURL=bm25.js.map

package/lib/registry/bm25.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bm25.js","sourceRoot":"","sources":["../../src/registry/bm25.ts"],"names":[],"mappings":";;;AAQA,4BAKC;AAbD,MAAM,SAAS,GAAG,IAAI,GAAG,CACrB,CACI,4FAA4F;IAC5F,uCAAuC,CAC1C,CAAC,KAAK,CAAC,GAAG,CAAC,CACf,CAAC;AAEF,4HAA4H;AAC5H,SAAgB,QAAQ,CAAC,IAAY;IACjC,OAAO,IAAI;SACN,WAAW,EAAE;SACb,KAAK,CAAC,YAAY,CAAC;SACnB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACpE,CAAC;AAOD,qCAAqC;AACrC,MAAM,EAAE,GAAG,GAAG,CAAC;AACf,MAAM,CAAC,GAAG,IAAI,CAAC;AAEf,oIAAoI;AACpI,MAAa,SAAS;IAKlB,YAAY,OAA4C;;QAJvC,SAAI,GAAG,IAAI,GAAG,EAAmB,CAAC;QAClC,OAAE,GAAG,IAAI,GAAG,EAAkB,CAAC;QAI5C,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;YAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBACzB,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAA,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,mCAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YACzD,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;gBACnC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAA,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACpD,CAAC;QACL,CAAC;QACD,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED,uFAAuF;IACvF,KAAK,CAAC,EAAU,EAAE,KAAa;;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,CAAC;QACb,CAAC;QACD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,MAAA,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAI,CAAC,CAAC;YAChD,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBAClB,SAAS;YACb,CAAC;YACD,MAAM,EAAE,GAAG,MAAA,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAI,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;YACnE,MAAM,SAAS,GAAG,SAAS,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACvC,MAAM,WAAW,GAAG,SAAS,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;YACjF,KAAK,IAAI,GAAG,GAAG,CAAC,SAAS,GAAG,WAAW,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ;AAzCD,8BAyCC"}

package/lib/registry/mcp-tool-execution.service.d.ts

@@ -0,0 +1,45 @@
+import { CallToolResult } from '@modelcontextprotocol/server';
+import { RequestContext } from '@vendure/core';
+import { McpToolset } from '@vendure/mcp-sdk';
+import { McpToolSummary } from '../types';
+import { McpToolRegistryService } from './mcp-tool-registry.service';
+/**
+ * @description
+ * Lists and runs MCP tools from inside the Vendure process. Calls use the same pipeline as HTTP
+ * requests, including permissions, rate limits, validation, confirmations, and logging.
+ *
+ * Always pass the original `ctx` you received so the tool runs with the correct permissions and
+ * session. Anonymous shop tools can use a `sessionToken` to continue the same shopper session.
+ *
+ * @example
+ * ```ts
+ * import { Injectable } from '\@nestjs/common';
+ * import { RequestContext } from '\@vendure/core';
+ * import { McpToolExecutionService } from '\@vendure/mcp-plugin';
+ *
+ * \@Injectable()
+ * export class AssistantService {
+ *     constructor(private mcpToolExecution: McpToolExecutionService) {}
+ *
+ *     async reply(ctx: RequestContext, message: string) {
+ *         const tools = await this.mcpToolExecution.listTools(ctx, 'shop');
+ *         // Hand `tools` to your model, then run whichever one it picks:
+ *         return this.mcpToolExecution.executeTool(ctx, 'shop', 'search_products', {
+ *             query: message,
+ *         });
+ *     }
+ * }
+ * ```
+ *
+ * @docsCategory core plugins/McpPlugin
+ * @since 3.8.0
+ */
+export declare class McpToolExecutionService {
+    private readonly registry;
+    constructor(registry: McpToolRegistryService);
+    /** The context must match the toolset: a Shop API context for `'shop'`, an Admin API context for `'admin'`. */
+    listTools(ctx: RequestContext, toolset: McpToolset): Promise<McpToolSummary[]>;
+    /** Most failures come back as `isError: true` rather than thrown. Destructive tools require `confirm: true`. */
+    executeTool(ctx: RequestContext, toolset: McpToolset, toolName: string, input?: unknown): Promise<CallToolResult>;
+    private assertContextMatchesToolset;
+}

package/lib/registry/mcp-tool-execution.service.js

@@ -0,0 +1,72 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpToolExecutionService = void 0;
+const common_1 = require("@nestjs/common");
+const mcp_tool_registry_service_1 = require("./mcp-tool-registry.service");
+/**
+ * @description
+ * Lists and runs MCP tools from inside the Vendure process. Calls use the same pipeline as HTTP
+ * requests, including permissions, rate limits, validation, confirmations, and logging.
+ *
+ * Always pass the original `ctx` you received so the tool runs with the correct permissions and
+ * session. Anonymous shop tools can use a `sessionToken` to continue the same shopper session.
+ *
+ * @example
+ * ```ts
+ * import { Injectable } from '\@nestjs/common';
+ * import { RequestContext } from '\@vendure/core';
+ * import { McpToolExecutionService } from '\@vendure/mcp-plugin';
+ *
+ * \@Injectable()
+ * export class AssistantService {
+ *     constructor(private mcpToolExecution: McpToolExecutionService) {}
+ *
+ *     async reply(ctx: RequestContext, message: string) {
+ *         const tools = await this.mcpToolExecution.listTools(ctx, 'shop');
+ *         // Hand `tools` to your model, then run whichever one it picks:
+ *         return this.mcpToolExecution.executeTool(ctx, 'shop', 'search_products', {
+ *             query: message,
+ *         });
+ *     }
+ * }
+ * ```
+ *
+ * @docsCategory core plugins/McpPlugin
+ * @since 3.8.0
+ */
+let McpToolExecutionService = class McpToolExecutionService {
+    constructor(registry) {
+        this.registry = registry;
+    }
+    /** The context must match the toolset: a Shop API context for `'shop'`, an Admin API context for `'admin'`. */
+    async listTools(ctx, toolset) {
+        this.assertContextMatchesToolset(ctx, toolset);
+        return this.registry.getCallableTools(ctx, toolset);
+    }
+    /** Most failures come back as `isError: true` rather than thrown. Destructive tools require `confirm: true`. */
+    async executeTool(ctx, toolset, toolName, input) {
+        this.assertContextMatchesToolset(ctx, toolset);
+        return this.registry.callToolDirect({ ctx }, toolset, toolName, input !== null && input !== void 0 ? input : {});
+    }
+    assertContextMatchesToolset(ctx, toolset) {
+        if (ctx.apiType !== toolset) {
+            throw new common_1.ForbiddenException(`The "${toolset}" MCP toolset requires a ${toolset} API RequestContext, ` +
+                `but the supplied context is for the "${ctx.apiType}" API.`);
+        }
+    }
+};
+exports.McpToolExecutionService = McpToolExecutionService;
+exports.McpToolExecutionService = McpToolExecutionService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [mcp_tool_registry_service_1.McpToolRegistryService])
+], McpToolExecutionService);
+//# sourceMappingURL=mcp-tool-execution.service.js.map

package/lib/registry/mcp-tool-execution.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tool-execution.service.js","sourceRoot":"","sources":["../../src/registry/mcp-tool-execution.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,2CAAgE;AAMhE,2EAAqE;AAErE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEI,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAChC,YAA6B,QAAgC;QAAhC,aAAQ,GAAR,QAAQ,CAAwB;IAAG,CAAC;IAEjE,+GAA+G;IAC/G,KAAK,CAAC,SAAS,CAAC,GAAmB,EAAE,OAAmB;QACpD,IAAI,CAAC,2BAA2B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,gHAAgH;IAChH,KAAK,CAAC,WAAW,CACb,GAAmB,EACnB,OAAmB,EACnB,QAAgB,EAChB,KAAe;QAEf,IAAI,CAAC,2BAA2B,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,EAAE,CAAC,CAAC;IACjF,CAAC;IAEO,2BAA2B,CAAC,GAAmB,EAAE,OAAmB;QACxE,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,2BAAkB,CACxB,QAAQ,OAAO,4BAA4B,OAAO,uBAAuB;gBACrE,wCAAwC,GAAG,CAAC,OAAO,QAAQ,CAClE,CAAC;QACN,CAAC;IACL,CAAC;CACJ,CAAA;AA5BY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,mBAAU,GAAE;qCAE8B,kDAAsB;GADpD,uBAAuB,CA4BnC"}

package/lib/registry/mcp-tool-registry.service.d.ts

@@ -0,0 +1,89 @@
+import { CallToolResult } from '@modelcontextprotocol/server';
+import { OnApplicationBootstrap } from '@nestjs/common';
+import { DiscoveryService } from '@nestjs/core';
+import { ConfigService, RequestContext, SettingsStoreService, TransactionalConnection } from '@vendure/core';
+import { McpToolset } from '@vendure/mcp-sdk';
+import { McpExecutionContext, ResolvedMcpPluginOptions } from '../internal-types';
+import { McpToolCallLogService } from '../logging/mcp-tool-call-log.service';
+import { McpRateLimiterService } from '../rate-limit/mcp-rate-limiter.service';
+import { McpShopSessionService } from '../shop-session/mcp-shop-session.service';
+import { McpToolSummary } from '../types';
+import { McpToolSchemaService } from './mcp-tool-schema.service';
+import { McpExposedTool, McpRegisteredTool } from './registry-types';
+/**
+ * @description
+ * Single source of truth for discovered `@McpTool` providers. It discovers tools at bootstrap,
+ * compiles their schemas once, and owns visibility, toggles, behavior,
+ * permissions, and execution.
+ */
+export declare class McpToolRegistryService implements OnApplicationBootstrap {
+    private readonly discoveryService;
+    private readonly settingsStoreService;
+    private readonly rateLimiter;
+    private readonly toolCallLog;
+    private readonly toolSchema;
+    private readonly shopSession;
+    private readonly configService;
+    private readonly connection;
+    private readonly options;
+    private readonly tools;
+    private knownPermissions?;
+    private discoveryMetaTools;
+    private bm25;
+    private toggleCache;
+    constructor(discoveryService: DiscoveryService, settingsStoreService: SettingsStoreService, rateLimiter: McpRateLimiterService, toolCallLog: McpToolCallLogService, toolSchema: McpToolSchemaService, shopSession: McpShopSessionService, configService: ConfigService, connection: TransactionalConnection, options: ResolvedMcpPluginOptions);
+    /** @internal */
+    onApplicationBootstrap(): void;
+    /**
+     * Every registered tool. Consumed by the admin API.
+     *
+     * @internal
+     */
+    getRegistrySnapshot(): McpRegisteredTool[];
+    /** @internal */
+    getExposedTools(executionContext: McpExecutionContext, toolset: McpToolset): Promise<McpExposedTool[]>;
+    callTool(executionContext: McpExecutionContext, toolset: McpToolset, name: string, input: unknown): Promise<CallToolResult>;
+    getCallableTools(ctx: RequestContext, toolset: McpToolset): Promise<McpToolSummary[]>;
+    /**
+     * Skips the meta-tool routing in {@link callTool}, since a caller using this already knows which tool it wants.
+     *
+     * @internal
+     */
+    callToolDirect(executionContext: McpExecutionContext, toolset: McpToolset, name: string, input: unknown): Promise<CallToolResult>;
+    getToolToggles(ctx: RequestContext): Promise<Record<string, boolean>>;
+    /** @internal */
+    isToolEnabled(tool: Pick<McpRegisteredTool, 'toolset' | 'name'>, toggles: Record<string, boolean>): boolean;
+    setToolEnabled(ctx: RequestContext, toolset: McpToolset, name: string, enabled: boolean): Promise<void>;
+    toolKey(toolset: McpToolset, name: string): string;
+    private discoverTools;
+    private isToolHandler;
+    private buildRegisteredTool;
+    private assertValidToolMetadata;
+    private getKnownPermissions;
+    private registerTool;
+    private callRegisteredTool;
+    private resolveShopSession;
+    private runToolHandler;
+    private handleToolCallError;
+    private admitToolCall;
+    private buildToolCallResult;
+    private searchTools;
+    private toolSummary;
+    private buildSearchIndexes;
+    private buildDiscoveryMetaTools;
+    private visibleTools;
+    private deriveAnnotations;
+    private hasPermissions;
+    private isPubliclyCallable;
+    private acceptsSessionToken;
+    private toCallerInfo;
+    private getPluginSource;
+    private successResult;
+    private tooLargeMessage;
+    private completedTooLargeResult;
+    /** Reads a list of choices as a sentence does: "a", "a or b", "a, b, or c". */
+    private joinWithOr;
+    private errorResult;
+    private vendureErrorResult;
+    private confirmationRequiredResult;
+}