@vendure/mcp-plugin 3.8.0-minor-bootstrap.0

package/lib/shop-session/mcp-shop-session.service.js

@@ -0,0 +1,132 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __rest = (this && this.__rest) || function (s, e) {
+    var t = {};
+    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
+        t[p] = s[p];
+    if (s != null && typeof Object.getOwnPropertySymbols === "function")
+        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
+            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
+                t[p[i]] = s[p[i]];
+        }
+    return t;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpShopSessionService = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@vendure/core");
+const REFUSAL = {
+    signedInUser: 'This session token belongs to a signed-in user and cannot be used for anonymous shop access.',
+    unknownToken: 'This sessionToken is not valid or has expired. Retry the call without sessionToken; ' +
+        'a tool that writes to the cart will start a new cart and return a new sessionToken.',
+    authenticatedCall: 'This call is authenticated, so it already acts on the signed-in customer. ' +
+        'sessionToken is only for anonymous shop access, omit it.',
+};
+// Decides which Vendure session an anonymous shop call acts on, whether the token arrives as a tool argument or a header.
+let McpShopSessionService = class McpShopSessionService {
+    constructor(sessionService) {
+        this.sessionService = sessionService;
+    }
+    async prepareToolCall(call) {
+        const _a = call.input, { sessionToken } = _a, input = __rest(_a, ["sessionToken"]);
+        const outcome = await this.resolveForToolCall({
+            ctx: call.ctx,
+            sessionToken: typeof sessionToken === 'string' ? sessionToken : undefined,
+            isOAuthCall: call.isOAuthCall,
+            toolWritesToCart: call.toolWritesToCart,
+        });
+        if (outcome.kind === 'refused') {
+            return outcome;
+        }
+        if (outcome.kind === 'unchanged') {
+            return { kind: 'prepared', ctx: call.ctx, input };
+        }
+        return { kind: 'prepared', ctx: outcome.ctx, input, sessionToken: outcome.sessionToken };
+    }
+    /** Adds the resolved token without losing handler results that are not plain objects. */
+    addSessionTokenToResult(output, sessionToken) {
+        if (sessionToken === undefined) {
+            return output;
+        }
+        if (typeof output !== 'object' || output === null || Array.isArray(output)) {
+            return { result: output, sessionToken };
+        }
+        return Object.assign(Object.assign({}, output), { sessionToken });
+    }
+    /** An explicit `sessionToken` argument wins over the session already on the context. */
+    async resolveForToolCall(call) {
+        var _a;
+        const sessionToken = trimmed(call.sessionToken);
+        // An OAuth call already acts on the customer behind the grant; a token argument is a mistake.
+        if (call.isOAuthCall) {
+            return sessionToken ? refused(REFUSAL.authenticatedCall) : { kind: 'unchanged' };
+        }
+        // A signed-in customer's context must not be swapped to an anonymous cart by a stale token.
+        if (sessionToken && call.ctx.activeUserId != null) {
+            return refused(REFUSAL.authenticatedCall);
+        }
+        // An explicit token must name a live anonymous session.
+        if (sessionToken) {
+            const session = await this.sessionService.getSessionFromToken(sessionToken);
+            if (!session) {
+                return refused(REFUSAL.unknownToken);
+            }
+            if (session.user) {
+                return refused(REFUSAL.signedInUser);
+            }
+            return this.resolved(call.ctx, session);
+        }
+        // Re-read through the session cache, since an earlier call in the same request may have set the active order.
+        const contextToken = (_a = call.ctx.session) === null || _a === void 0 ? void 0 : _a.token;
+        if (contextToken) {
+            const session = await this.sessionService.getSessionFromToken(contextToken);
+            return session ? this.resolved(call.ctx, session) : { kind: 'unchanged' };
+        }
+        // No session anywhere. Only a cart-writing tool gets one; a readonly tool has nothing to read.
+        if (call.toolWritesToCart) {
+            return this.resolved(call.ctx, await this.sessionService.createAnonymousSession());
+        }
+        return { kind: 'unchanged' };
+    }
+    async resolveHeaderToken(header) {
+        const token = trimmed(header);
+        const session = token ? await this.sessionService.getSessionFromToken(token) : undefined;
+        return (session === null || session === void 0 ? void 0 : session.user)
+            ? { kind: 'refused', message: REFUSAL.signedInUser }
+            : { kind: 'resolved', session };
+    }
+    resolved(ctx, session) {
+        return {
+            kind: 'resolved',
+            ctx: withSession(ctx, session),
+            sessionToken: session.user ? undefined : session.token,
+        };
+    }
+};
+exports.McpShopSessionService = McpShopSessionService;
+exports.McpShopSessionService = McpShopSessionService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.SessionService])
+], McpShopSessionService);
+function refused(message) {
+    return { kind: 'refused', message };
+}
+/** Agents sometimes pass padding or an empty string; both count as "no token". */
+function trimmed(token) {
+    return (token === null || token === void 0 ? void 0 : token.trim()) || undefined;
+}
+// Core swaps a private field the same way (see `_currencyCode` in order.service.ts).
+function withSession(ctx, session) {
+    const copy = ctx.copy();
+    copy._session = session;
+    return copy;
+}
+//# sourceMappingURL=mcp-shop-session.service.js.map

package/lib/shop-session/mcp-shop-session.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-shop-session.service.js","sourceRoot":"","sources":["../../src/shop-session/mcp-shop-session.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA4C;AAC5C,wCAA8E;AAE9E,MAAM,OAAO,GAAG;IACZ,YAAY,EACR,8FAA8F;IAClG,YAAY,EACR,sFAAsF;QACtF,qFAAqF;IACzF,iBAAiB,EACb,4EAA4E;QAC5E,0DAA0D;CACjE,CAAC;AAgBF,0HAA0H;AAEnH,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAC9B,YAA6B,cAA8B;QAA9B,mBAAc,GAAd,cAAc,CAAgB;IAAG,CAAC;IAE/D,KAAK,CAAC,eAAe,CAAC,IAKrB;QACG,MAAM,KAA6B,IAAI,CAAC,KAAK,EAAvC,EAAE,YAAY,OAAyB,EAApB,KAAK,cAAxB,gBAA0B,CAAa,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC;YAC1C,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,YAAY,EAAE,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;YACzE,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SAC1C,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,OAAO,CAAC;QACnB,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC;QACtD,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;IAC7F,CAAC;IAED,yFAAyF;IACzF,uBAAuB,CAAC,MAAe,EAAE,YAAgC;QACrE,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC;QAClB,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACzE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAC5C,CAAC;QACD,uCAAY,MAAM,KAAE,YAAY,IAAG;IACvC,CAAC;IAED,wFAAwF;IACxF,KAAK,CAAC,kBAAkB,CAAC,IAKxB;;QACG,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAEhD,8FAA8F;QAC9F,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,OAAO,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACrF,CAAC;QAED,4FAA4F;QAC5F,IAAI,YAAY,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC;YAChD,OAAO,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC9C,CAAC;QAED,wDAAwD;QACxD,IAAI,YAAY,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAC5E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,OAAO,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACzC,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACzC,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAED,8GAA8G;QAC9G,MAAM,YAAY,GAAG,MAAA,IAAI,CAAC,GAAG,CAAC,OAAO,0CAAE,KAAK,CAAC;QAC7C,IAAI,YAAY,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAC5E,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QAC9E,CAAC;QAED,+FAA+F;QAC/F,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,cAAc,CAAC,sBAAsB,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,kBAAkB,CACpB,MAA0B;QAE1B,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzF,OAAO,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI;YAChB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE;YACpD,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACxC,CAAC;IAEO,QAAQ,CAAC,GAAmB,EAAE,OAAsB;QACxD,OAAO;YACH,IAAI,EAAE,UAAU;YAChB,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC;YAC9B,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK;SACzD,CAAC;IACN,CAAC;CACJ,CAAA;AAlGY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;qCAEoC,qBAAc;GADlD,qBAAqB,CAkGjC;AAED,SAAS,OAAO,CAAC,OAAe;IAC5B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC;AAED,kFAAkF;AAClF,SAAS,OAAO,CAAC,KAAyB;IACtC,OAAO,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,EAAE,KAAI,SAAS,CAAC;AACtC,CAAC;AAED,qFAAqF;AACrF,SAAS,WAAW,CAAC,GAAmB,EAAE,OAAsB;IAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACvB,IAAY,CAAC,QAAQ,GAAG,OAAO,CAAC;IACjC,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/lib/tasks/mcp-oauth-retention.task.d.ts

@@ -0,0 +1,9 @@
+import { ScheduledTask } from '@vendure/core';
+/**
+ * @description
+ * A {@link ScheduledTask} that deletes MCP OAuth records which can no longer be used: the Vendure
+ * session for each expired grant, expired authorization requests and codes, grants dead longer
+ * than `oauth.grantRetentionDays`, and clients created but never used with no grant referencing
+ * them. Defaults to running daily at 03:30AM.
+ */
+export declare const mcpOauthRetentionTask: ScheduledTask<Record<string, any>>;

package/lib/tasks/mcp-oauth-retention.task.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mcpOauthRetentionTask = void 0;
+const core_1 = require("@vendure/core");
+const oauth_retention_service_1 = require("../oauth/oauth-retention.service");
+/**
+ * @description
+ * A {@link ScheduledTask} that deletes MCP OAuth records which can no longer be used: the Vendure
+ * session for each expired grant, expired authorization requests and codes, grants dead longer
+ * than `oauth.grantRetentionDays`, and clients created but never used with no grant referencing
+ * them. Defaults to running daily at 03:30AM.
+ */
+exports.mcpOauthRetentionTask = new core_1.ScheduledTask({
+    id: 'mcp-oauth-retention',
+    description: 'Deletes expired MCP OAuth records',
+    schedule: cron => cron.everyDayAt(3, 30),
+    async execute({ injector, scheduledContext }) {
+        return injector.get(oauth_retention_service_1.McpOauthRetentionService).deleteExpiredOauthRecords(scheduledContext);
+    },
+});
+//# sourceMappingURL=mcp-oauth-retention.task.js.map

package/lib/tasks/mcp-oauth-retention.task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-oauth-retention.task.js","sourceRoot":"","sources":["../../src/tasks/mcp-oauth-retention.task.ts"],"names":[],"mappings":";;;AAAA,wCAA8C;AAE9C,8EAA4E;AAE5E;;;;;;GAMG;AACU,QAAA,qBAAqB,GAAG,IAAI,oBAAa,CAAC;IACnD,EAAE,EAAE,qBAAqB;IACzB,WAAW,EAAE,mCAAmC;IAChD,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC;IACxC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE;QACxC,OAAO,QAAQ,CAAC,GAAG,CAAC,kDAAwB,CAAC,CAAC,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;IAC9F,CAAC;CACJ,CAAC,CAAC"}

package/lib/tasks/mcp-tool-call-log-retention.task.d.ts

@@ -0,0 +1,7 @@
+import { ScheduledTask } from '@vendure/core';
+/**
+ * @description
+ * A {@link ScheduledTask} that deletes expired MCP tool-call logs — rows older than the configured
+ * `logging.ttlDays` retention window. The schedule defaults to daily at 02:30AM.
+ */
+export declare const mcpToolCallLogRetentionTask: ScheduledTask<Record<string, any>>;

package/lib/tasks/mcp-tool-call-log-retention.task.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mcpToolCallLogRetentionTask = void 0;
+const core_1 = require("@vendure/core");
+const mcp_tool_call_log_retention_service_1 = require("../logging/mcp-tool-call-log-retention.service");
+/**
+ * @description
+ * A {@link ScheduledTask} that deletes expired MCP tool-call logs — rows older than the configured
+ * `logging.ttlDays` retention window. The schedule defaults to daily at 02:30AM.
+ */
+exports.mcpToolCallLogRetentionTask = new core_1.ScheduledTask({
+    id: 'mcp-tool-call-log-retention',
+    description: 'Deletes expired MCP tool call logs',
+    schedule: cron => cron.everyDayAt(2, 30),
+    async execute({ injector, scheduledContext }) {
+        const deletedCount = await injector
+            .get(mcp_tool_call_log_retention_service_1.McpToolCallLogRetentionService)
+            .deleteExpiredToolCallLogs(scheduledContext);
+        return { deletedCount };
+    },
+});
+//# sourceMappingURL=mcp-tool-call-log-retention.task.js.map

package/lib/tasks/mcp-tool-call-log-retention.task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tool-call-log-retention.task.js","sourceRoot":"","sources":["../../src/tasks/mcp-tool-call-log-retention.task.ts"],"names":[],"mappings":";;;AAAA,wCAA8C;AAE9C,wGAAgG;AAEhG;;;;GAIG;AACU,QAAA,2BAA2B,GAAG,IAAI,oBAAa,CAAC;IACzD,EAAE,EAAE,6BAA6B;IACjC,WAAW,EAAE,oCAAoC;IACjD,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC;IACxC,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE;QACxC,MAAM,YAAY,GAAG,MAAM,QAAQ;aAC9B,GAAG,CAAC,oEAA8B,CAAC;aACnC,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;QACjD,OAAO,EAAE,YAAY,EAAE,CAAC;IAC5B,CAAC;CACJ,CAAC,CAAC"}

package/lib/tools/built-in/active-order.service.d.ts

@@ -0,0 +1,26 @@
+import { CurrencyCode } from '@vendure/common/lib/generated-types';
+import { ActiveOrderService, ID, Order, OrderModificationError, OrderService, RequestContext, TransactionalConnection } from '@vendure/core';
+interface ActiveOrderRef {
+    id: ID;
+    currencyCode: CurrencyCode;
+    state: Order['state'];
+    ctx: RequestContext;
+}
+export declare const NO_CART_MESSAGE: string;
+export declare class McpActiveOrderService {
+    private readonly activeOrderService;
+    private readonly orderService;
+    private readonly connection;
+    constructor(activeOrderService: ActiveOrderService, orderService: OrderService, connection: TransactionalConnection);
+    /** The shopper's current cart, or undefined when they have none. Order lines are not loaded. */
+    find(ctx: RequestContext): Promise<ActiveOrderRef | undefined>;
+    /** The cart reference the tools act on, with a context in the cart's currency. */
+    private bindToCart;
+    findOrCreate(ctx: RequestContext): Promise<ActiveOrderRef>;
+    private lockSessionRow;
+    findOrThrow(ctx: RequestContext): Promise<ActiveOrderRef>;
+    findEditable(ctx: RequestContext): Promise<ActiveOrderRef | OrderModificationError>;
+    findOrderWithLines(ctx: RequestContext): Promise<Order | undefined>;
+    private activeOrder;
+}
+export {};

package/lib/tools/built-in/active-order.service.js

@@ -0,0 +1,125 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpActiveOrderService = exports.NO_CART_MESSAGE = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@vendure/core");
+const typeorm_1 = require("typeorm");
+exports.NO_CART_MESSAGE = 'There is no cart for this session. Call add_to_cart first; it returns the sessionToken to ' +
+    'use on later calls.';
+const EDITABLE_ORDER_STATES = new Set(['AddingItems', 'Draft']);
+// Mirrors how core itself swaps the currency, by setting the same private field on a copy.
+function withCurrency(ctx, currencyCode) {
+    const copy = ctx.copy();
+    copy._currencyCode = currencyCode;
+    return copy;
+}
+let McpActiveOrderService = class McpActiveOrderService {
+    constructor(activeOrderService, orderService, connection) {
+        this.activeOrderService = activeOrderService;
+        this.orderService = orderService;
+        this.connection = connection;
+    }
+    /** The shopper's current cart, or undefined when they have none. Order lines are not loaded. */
+    async find(ctx) {
+        const order = await this.activeOrder(ctx);
+        return order ? this.bindToCart(ctx, order) : undefined;
+    }
+    /** The cart reference the tools act on, with a context in the cart's currency. */
+    bindToCart(ctx, order) {
+        return {
+            id: order.id,
+            currencyCode: order.currencyCode,
+            state: order.state,
+            ctx: ctx.currencyCode === order.currencyCode ? ctx : withCurrency(ctx, order.currencyCode),
+        };
+    }
+    // Only add_to_cart may start a cart; every other mutation uses findOrThrow instead.
+    async findOrCreate(ctx) {
+        const session = ctx.session;
+        if (!session) {
+            throw new core_1.IllegalOperationError('add_to_cart requires a Vendure session and this call has none. In-process callers on the Shop API ' +
+                'must give the mutation that calls the tool the Owner permission, so that Vendure creates a session.');
+        }
+        const order = await this.connection.withTransaction(ctx, async (txCtx) => {
+            await this.lockSessionRow(txCtx, session);
+            // Never undefined: core throws a UserInputError when it can neither find nor create one.
+            return this.activeOrderService.getActiveOrder(txCtx, undefined, true);
+        });
+        return this.bindToCart(ctx, order);
+    }
+    // SQLite skips the lock because it only ever allows one writer at a time anyway.
+    async lockSessionRow(txCtx, session) {
+        var _a;
+        let row;
+        try {
+            row = await this.connection
+                .getRepository(txCtx, core_1.Session)
+                .createQueryBuilder('session')
+                .setLock('pessimistic_write')
+                .where('session.id = :id', { id: session.id })
+                .getOne();
+        }
+        catch (e) {
+            if (e instanceof typeorm_1.LockNotSupportedOnGivenDriverError) {
+                return;
+            }
+            throw e;
+        }
+        if (row) {
+            session.activeOrderId = (_a = row.activeOrderId) !== null && _a !== void 0 ? _a : undefined;
+        }
+    }
+    // Without this check, acting on a cart that doesn't exist would silently create an empty one.
+    async findOrThrow(ctx) {
+        const order = await this.find(ctx);
+        if (!order) {
+            throw new core_1.UserInputError('There is no active cart. Add an item with add_to_cart first.');
+        }
+        return order;
+    }
+    // Coupon and address changes don't check the cart's state themselves, unlike line and
+    // shipping-method changes, so those tools call this instead of findOrThrow.
+    async findEditable(ctx) {
+        const cart = await this.findOrThrow(ctx);
+        return EDITABLE_ORDER_STATES.has(cart.state) ? cart : new core_1.OrderModificationError();
+    }
+    async findOrderWithLines(ctx) {
+        var _a;
+        const order = await this.activeOrder(ctx);
+        if (!order) {
+            return undefined;
+        }
+        return ((_a = (await this.orderService.findOne(ctx, order.id, [
+            'lines',
+            'lines.productVariant',
+            'payments',
+            'payments.refunds',
+            'shippingLines',
+            'customer',
+        ]))) !== null && _a !== void 0 ? _a : order);
+    }
+    // Checked here because core's active-order strategy throws on a missing session instead of
+    // just reporting no cart.
+    async activeOrder(ctx) {
+        if (!ctx.session)
+            return undefined;
+        return this.activeOrderService.getActiveOrder(ctx, undefined);
+    }
+};
+exports.McpActiveOrderService = McpActiveOrderService;
+exports.McpActiveOrderService = McpActiveOrderService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.ActiveOrderService,
+        core_1.OrderService,
+        core_1.TransactionalConnection])
+], McpActiveOrderService);
+//# sourceMappingURL=active-order.service.js.map

package/lib/tools/built-in/active-order.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"active-order.service.js","sourceRoot":"","sources":["../../../src/tools/built-in/active-order.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAE5C,wCAauB;AACvB,qCAA6D;AAShD,QAAA,eAAe,GACxB,4FAA4F;IAC5F,qBAAqB,CAAC;AAE1B,MAAM,qBAAqB,GAAgC,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;AAE7F,2FAA2F;AAC3F,SAAS,YAAY,CAAC,GAAmB,EAAE,YAA0B;IACjE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACvB,IAAY,CAAC,aAAa,GAAG,YAAY,CAAC;IAC3C,OAAO,IAAI,CAAC;AAChB,CAAC;AAGM,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAC9B,YACqB,kBAAsC,EACtC,YAA0B,EAC1B,UAAmC;QAFnC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,iBAAY,GAAZ,YAAY,CAAc;QAC1B,eAAU,GAAV,UAAU,CAAyB;IACrD,CAAC;IAEJ,gGAAgG;IAChG,KAAK,CAAC,IAAI,CAAC,GAAmB;QAC1B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,CAAC;IAED,kFAAkF;IAC1E,UAAU,CAAC,GAAmB,EAAE,KAAY;QAChD,OAAO;YACH,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,EAAE,GAAG,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,YAAY,CAAC;SAC7F,CAAC;IACN,CAAC;IAED,oFAAoF;IACpF,KAAK,CAAC,YAAY,CAAC,GAAmB;QAClC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,4BAAqB,CAC3B,oGAAoG;gBAChG,qGAAqG,CAC5G,CAAC;QACN,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;YACnE,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC1C,yFAAyF;YACzF,OAAO,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,iFAAiF;IACzE,KAAK,CAAC,cAAc,CACxB,KAAqB,EACrB,OAAkD;;QAElD,IAAI,GAAmB,CAAC;QACxB,IAAI,CAAC;YACD,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU;iBACtB,aAAa,CAAC,KAAK,EAAE,cAAO,CAAC;iBAC7B,kBAAkB,CAAC,SAAS,CAAC;iBAC7B,OAAO,CAAC,mBAAmB,CAAC;iBAC5B,KAAK,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;iBAC7C,MAAM,EAAE,CAAC;QAClB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,YAAY,4CAAkC,EAAE,CAAC;gBAClD,OAAO;YACX,CAAC;YACD,MAAM,CAAC,CAAC;QACZ,CAAC;QACD,IAAI,GAAG,EAAE,CAAC;YACN,OAAO,CAAC,aAAa,GAAG,MAAA,GAAG,CAAC,aAAa,mCAAI,SAAS,CAAC;QAC3D,CAAC;IACL,CAAC;IAED,8FAA8F;IAC9F,KAAK,CAAC,WAAW,CAAC,GAAmB;QACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,MAAM,IAAI,qBAAc,CAAC,8DAA8D,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,sFAAsF;IACtF,4EAA4E;IAC5E,KAAK,CAAC,YAAY,CAAC,GAAmB;QAClC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACzC,OAAO,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,6BAAsB,EAAE,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,GAAmB;;QACxC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,CACH,MAAA,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YAC5C,OAAO;YACP,sBAAsB;YACtB,UAAU;YACV,kBAAkB;YAClB,eAAe;YACf,UAAU;SACb,CAAC,CAAC,mCAAI,KAAK,CACf,CAAC;IACN,CAAC;IAED,2FAA2F;IAC3F,0BAA0B;IAClB,KAAK,CAAC,WAAW,CAAC,GAAmB;QACzC,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAEnC,OAAO,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAClE,CAAC;CACJ,CAAA;AAxGY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;qCAGgC,yBAAkB;QACxB,mBAAY;QACd,8BAAuB;GAJ/C,qBAAqB,CAwGjC"}

package/lib/tools/built-in/admin/add-customer-to-group.tool.d.ts

@@ -0,0 +1,23 @@
+import { CustomerGroupService, CustomerService, RequestContext } from '@vendure/core';
+import { McpToolHandler } from '@vendure/mcp-sdk';
+import { z } from 'zod';
+import { McpToolSerializerService } from '../serializer.service';
+declare const addCustomerToGroupInput: z.ZodObject<{
+    customerId: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
+    groupId: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
+}, z.core.$strict>;
+type AddCustomerToGroupInput = z.infer<typeof addCustomerToGroupInput>;
+export declare class AddCustomerToGroupTool implements McpToolHandler<AddCustomerToGroupInput> {
+    private readonly customerGroupService;
+    private readonly customerService;
+    private readonly serializer;
+    constructor(customerGroupService: CustomerGroupService, customerService: CustomerService, serializer: McpToolSerializerService);
+    execute(ctx: RequestContext, input: AddCustomerToGroupInput): Promise<{
+        customerId: import("@vendure/core").ID;
+        groups: {
+            id: import("@vendure/core").ID;
+            name: string;
+        }[];
+    }>;
+}
+export {};

package/lib/tools/built-in/admin/add-customer-to-group.tool.js

@@ -0,0 +1,68 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AddCustomerToGroupTool = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@vendure/core");
+const mcp_sdk_1 = require("@vendure/mcp-sdk");
+const zod_1 = require("zod");
+const id_schema_1 = require("../id-schema");
+const serializer_service_1 = require("../serializer.service");
+const addCustomerToGroupInput = zod_1.z.strictObject({
+    customerId: id_schema_1.idSchema.describe('Customer ID.'),
+    groupId: id_schema_1.idSchema.describe('Customer group ID.'),
+});
+let AddCustomerToGroupTool = class AddCustomerToGroupTool {
+    constructor(customerGroupService, customerService, serializer) {
+        this.customerGroupService = customerGroupService;
+        this.customerService = customerService;
+        this.serializer = serializer;
+    }
+    async execute(ctx, input) {
+        const customer = await this.customerService.findOne(ctx, input.customerId);
+        if (!customer) {
+            throw new core_1.EntityNotFoundError('Customer', input.customerId);
+        }
+        await this.customerGroupService.addCustomersToGroup(ctx, {
+            customerGroupId: input.groupId,
+            customerIds: [input.customerId],
+        });
+        const groups = await this.customerService.getCustomerGroups(ctx, customer.id);
+        return {
+            customerId: customer.id,
+            groups: groups.map(group => this.serializer.customerGroup(group)),
+        };
+    }
+};
+exports.AddCustomerToGroupTool = AddCustomerToGroupTool;
+exports.AddCustomerToGroupTool = AddCustomerToGroupTool = __decorate([
+    (0, mcp_sdk_1.McpTool)({
+        name: 'add_customer_to_group',
+        toolset: 'admin',
+        description: 'Add a customer to a customer group.',
+        keywords: [
+            'assign a customer to a segment',
+            'put a buyer in a group',
+            'tag this customer',
+            'add customer to a list',
+            'categorize a client',
+            'give customer group membership',
+        ],
+        permissions: [core_1.Permission.UpdateCustomerGroup],
+        behavior: 'mutating',
+        inputSchema: addCustomerToGroupInput,
+    }),
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.CustomerGroupService,
+        core_1.CustomerService,
+        serializer_service_1.McpToolSerializerService])
+], AddCustomerToGroupTool);
+//# sourceMappingURL=add-customer-to-group.tool.js.map

package/lib/tools/built-in/admin/add-customer-to-group.tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-customer-to-group.tool.js","sourceRoot":"","sources":["../../../../src/tools/built-in/admin/add-customer-to-group.tool.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,wCAMuB;AACvB,8CAA2D;AAC3D,6BAAwB;AAExB,4CAAwC;AACxC,8DAAiE;AAEjE,MAAM,uBAAuB,GAAG,OAAC,CAAC,YAAY,CAAC;IAC3C,UAAU,EAAE,oBAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC7C,OAAO,EAAE,oBAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC;CACnD,CAAC,CAAC;AAqBI,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAC/B,YACqB,oBAA0C,EAC1C,eAAgC,EAChC,UAAoC;QAFpC,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,oBAAe,GAAf,eAAe,CAAiB;QAChC,eAAU,GAAV,UAAU,CAA0B;IACtD,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,GAAmB,EAAE,KAA8B;QAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,0BAAmB,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,IAAI,CAAC,oBAAoB,CAAC,mBAAmB,CAAC,GAAG,EAAE;YACrD,eAAe,EAAE,KAAK,CAAC,OAAO;YAC9B,WAAW,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;SAClC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9E,OAAO;YACH,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACpE,CAAC;IACN,CAAC;CACJ,CAAA;AAxBY,wDAAsB;iCAAtB,sBAAsB;IAjBlC,IAAA,iBAAO,EAAC;QACL,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,qCAAqC;QAClD,QAAQ,EAAE;YACN,gCAAgC;YAChC,wBAAwB;YACxB,mBAAmB;YACnB,wBAAwB;YACxB,qBAAqB;YACrB,gCAAgC;SACnC;QACD,WAAW,EAAE,CAAC,iBAAU,CAAC,mBAAmB,CAAC;QAC7C,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,uBAAuB;KACvC,CAAC;IACD,IAAA,mBAAU,GAAE;qCAGkC,2BAAoB;QACzB,sBAAe;QACpB,6CAAwB;GAJhD,sBAAsB,CAwBlC"}

package/lib/tools/built-in/admin/add-note-to-order.tool.d.ts

@@ -0,0 +1,104 @@
+import { HistoryService, OrderService, RequestContext } from '@vendure/core';
+import { McpToolHandler } from '@vendure/mcp-sdk';
+import { z } from 'zod';
+import { McpToolSerializerService } from '../serializer.service';
+declare const addNoteToOrderInput: z.ZodObject<{
+    id: z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>;
+    note: z.ZodString;
+    isPublic: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+type AddNoteToOrderToolInput = z.infer<typeof addNoteToOrderInput>;
+export declare class AddNoteToOrderTool implements McpToolHandler<AddNoteToOrderToolInput> {
+    private readonly orderService;
+    private readonly historyService;
+    private readonly serializer;
+    constructor(orderService: OrderService, historyService: HistoryService, serializer: McpToolSerializerService);
+    execute(ctx: RequestContext, input: AddNoteToOrderToolInput): Promise<{
+        order: {
+            id: import("@vendure/core").ID;
+            code: string;
+            state: import("@vendure/core").OrderState;
+            active: boolean;
+            total: number;
+            totalDecimal: string;
+            totalWithTax: number;
+            totalWithTaxDecimal: string;
+            currencyCode: import("@vendure/core").CurrencyCode;
+            totalQuantity: number;
+            createdAt: string | null;
+            updatedAt: string | null;
+            orderPlacedAt: string | null;
+            couponCodes: string[];
+            discounts: {
+                adjustmentSource: string;
+                type: import("@vendure/core").AdjustmentType;
+                description: string;
+                amount: number;
+                amountDecimal: string;
+                amountWithTax: number;
+                amountWithTaxDecimal: string;
+            }[];
+            lines: {
+                id: import("@vendure/core").ID;
+                quantity: number;
+                linePriceWithTax: number;
+                linePriceWithTaxDecimal: string;
+                productVariant: {
+                    id: import("@vendure/core").ID;
+                    name: import("@vendure/core").LocaleString;
+                    sku: string;
+                } | null;
+            }[];
+            payments: {
+                id: import("@vendure/core").ID;
+                method: string;
+                amount: number;
+                amountDecimal: string;
+                state: import("@vendure/core").PaymentState;
+                transactionId: string;
+                errorMessage: string | undefined;
+                publicMetadata: any;
+                refunds: {
+                    id: import("@vendure/core").ID;
+                    state: import("@vendure/core").RefundState;
+                    total: number;
+                    totalDecimal: string;
+                    reason: string;
+                }[];
+            }[] | undefined;
+            fulfillments: {
+                id: import("@vendure/core").ID;
+                state: import("@vendure/core").FulfillmentState;
+                method: string;
+                trackingCode: string;
+                lines: {
+                    orderLineId: import("@vendure/core").ID;
+                    quantity: number;
+                }[];
+            }[] | undefined;
+            customer: {
+                id: import("@vendure/core").ID;
+                emailAddress: string;
+                firstName: string;
+                lastName: string;
+            } | null | undefined;
+            shippingAddress: Record<string, string> | null;
+            billingAddress: Record<string, string> | null;
+            shippingWithTax: number;
+            shippingWithTaxDecimal: string;
+            shippingLines: {
+                id: import("@vendure/core").ID;
+                shippingMethodId: import("@vendure/core").ID | null;
+                priceWithTax: number;
+                priceWithTaxDecimal: string;
+            }[] | undefined;
+        } | null;
+        note: {
+            id: import("@vendure/core").ID;
+            text: string;
+            isPublic: boolean;
+            createdAt: string | null;
+        };
+    }>;
+}
+export {};

package/lib/tools/built-in/admin/add-note-to-order.tool.js

@@ -0,0 +1,66 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AddNoteToOrderTool = void 0;
+const common_1 = require("@nestjs/common");
+const generated_types_1 = require("@vendure/common/lib/generated-types");
+const core_1 = require("@vendure/core");
+const mcp_sdk_1 = require("@vendure/mcp-sdk");
+const zod_1 = require("zod");
+const id_schema_1 = require("../id-schema");
+const order_list_helpers_1 = require("../order-list-helpers");
+const serializer_service_1 = require("../serializer.service");
+const string_schemas_1 = require("../string-schemas");
+const addNoteToOrderInput = zod_1.z.strictObject({
+    id: id_schema_1.idSchema.describe('Order ID.'),
+    note: string_schemas_1.longText.describe('Note text.'),
+    isPublic: zod_1.z
+        .boolean()
+        .describe('Whether the note is visible to the customer. Defaults to false.')
+        .optional(),
+});
+let AddNoteToOrderTool = class AddNoteToOrderTool {
+    constructor(orderService, historyService, serializer) {
+        this.orderService = orderService;
+        this.historyService = historyService;
+        this.serializer = serializer;
+    }
+    async execute(ctx, input) {
+        var _a;
+        const order = await (0, order_list_helpers_1.findOrderOrThrow)(this.orderService, ctx, input.id, order_list_helpers_1.ORDER_DETAIL_RELATIONS);
+        const note = await this.historyService.createHistoryEntryForOrder({ ctx, orderId: order.id, type: generated_types_1.HistoryEntryType.ORDER_NOTE, data: { note: input.note } }, (_a = input.isPublic) !== null && _a !== void 0 ? _a : false);
+        return { order: this.serializer.order(order), note: this.serializer.orderNote(note) };
+    }
+};
+exports.AddNoteToOrderTool = AddNoteToOrderTool;
+exports.AddNoteToOrderTool = AddNoteToOrderTool = __decorate([
+    (0, mcp_sdk_1.McpTool)({
+        name: 'add_note_to_order',
+        toolset: 'admin',
+        description: 'Add an internal or public note to an order timeline.',
+        keywords: [
+            'leave a comment on an order',
+            'add a remark to the order timeline',
+            'annotate this order',
+            'log an internal message on the order',
+            'write a note customers can see',
+            'record a memo on the order',
+        ],
+        permissions: [core_1.Permission.UpdateOrder],
+        behavior: 'mutating',
+        inputSchema: addNoteToOrderInput,
+    }),
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.OrderService,
+        core_1.HistoryService,
+        serializer_service_1.McpToolSerializerService])
+], AddNoteToOrderTool);
+//# sourceMappingURL=add-note-to-order.tool.js.map

package/lib/tools/built-in/admin/add-note-to-order.tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-note-to-order.tool.js","sourceRoot":"","sources":["../../../../src/tools/built-in/admin/add-note-to-order.tool.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,yEAAuE;AACvE,wCAAyF;AACzF,8CAA2D;AAC3D,6BAAwB;AAExB,4CAAwC;AACxC,8DAAiF;AACjF,8DAAiE;AACjE,sDAA6C;AAE7C,MAAM,mBAAmB,GAAG,OAAC,CAAC,YAAY,CAAC;IACvC,EAAE,EAAE,oBAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;IAClC,IAAI,EAAE,yBAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC;IACrC,QAAQ,EAAE,OAAC;SACN,OAAO,EAAE;SACT,QAAQ,CAAC,iEAAiE,CAAC;SAC3E,QAAQ,EAAE;CAClB,CAAC,CAAC;AAqBI,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC3B,YACqB,YAA0B,EAC1B,cAA8B,EAC9B,UAAoC;QAFpC,iBAAY,GAAZ,YAAY,CAAc;QAC1B,mBAAc,GAAd,cAAc,CAAgB;QAC9B,eAAU,GAAV,UAAU,CAA0B;IACtD,CAAC;IAEJ,KAAK,CAAC,OAAO,CAAC,GAAmB,EAAE,KAA8B;;QAC7D,MAAM,KAAK,GAAG,MAAM,IAAA,qCAAgB,EAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,2CAAsB,CAAC,CAAC;QAE/F,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,0BAA0B,CAC7D,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,kCAAgB,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EACzF,MAAA,KAAK,CAAC,QAAQ,mCAAI,KAAK,CAC1B,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1F,CAAC;CACJ,CAAA;AAhBY,gDAAkB;6BAAlB,kBAAkB;IAjB9B,IAAA,iBAAO,EAAC;QACL,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,sDAAsD;QACnE,QAAQ,EAAE;YACN,6BAA6B;YAC7B,oCAAoC;YACpC,qBAAqB;YACrB,sCAAsC;YACtC,gCAAgC;YAChC,4BAA4B;SAC/B;QACD,WAAW,EAAE,CAAC,iBAAU,CAAC,WAAW,CAAC;QACrC,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,mBAAmB;KACnC,CAAC;IACD,IAAA,mBAAU,GAAE;qCAG0B,mBAAY;QACV,qBAAc;QAClB,6CAAwB;GAJhD,kBAAkB,CAgB9B"}