@vendure/mcp-plugin 3.8.0-minor-bootstrap.0

package/lib/transport/mcp-transport.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-transport.controller.js","sourceRoot":"","sources":["../../src/transport/mcp-transport.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,qDAKoC;AACpC,yDAA6F;AAC7F,2CAcwB;AACxB,wCAQuB;AAIvB,4CAAoF;AACpF,oDAA+C;AAC/C,4DAAgE;AAEhE,sDAAkE;AAClE,4EAA0E;AAC1E,0DAAyD;AACzD,qFAAqG;AACrG,qFAA+E;AAC/E,uFAAiF;AAEjF,6DAAiE;AAEjE,sFAAsF;AACtF,MAAM,iBAAiB,GAAG,WAAW,CAAC;AAgBtC,sHAAsH;AAE/G,IAAM,8BAA8B,GAApC,MAAM,8BAA+B,SAAQ,4BAAqB;IAGrE,YAAY,aAA4B;QACpC,KAAK,CAAC,aAAa,CAAC,CAAC;QACrB,IAAI,CAAC,kBAAkB,GAAG,aAAa,CAAC,UAAU,CAAC,eAAe,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,SAA+B,EAAE,IAAmB;QACtD,OAAO,KAAK,CAAC,KAAK,CACd,IAAI,4BAAmB,CACnB,OAAO,IAAI,CAAC,kBAAkB,0EAA0E,CAC3G,EACD,IAAI,CACP,CAAC;IACN,CAAC;CACJ,CAAA;AAhBY,wEAA8B;yCAA9B,8BAA8B;IAD1C,IAAA,cAAK,EAAC,2BAAoB,CAAC;qCAIG,oBAAa;GAH/B,8BAA8B,CAgB1C;AAED;;;;;;;GAOG;AAGI,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAK/B,YACqB,YAA6B,EAC7B,QAAgC,EAChC,WAAkC,EAClC,aAA4B,EACA,OAAiC,EAC7D,WAAkC,EAClC,cAA8B,EAC9B,aAAsC;;QAPtC,iBAAY,GAAZ,YAAY,CAAiB;QAC7B,aAAQ,GAAR,QAAQ,CAAwB;QAChC,gBAAW,GAAX,WAAW,CAAuB;QAClC,kBAAa,GAAb,aAAa,CAAe;QACA,YAAO,GAAP,OAAO,CAA0B;QAC7D,gBAAW,GAAX,WAAW,CAAuB;QAClC,mBAAc,GAAd,cAAc,CAAgB;QAC9B,kBAAa,GAAb,aAAa,CAAyB;QAEvD,MAAM,OAAO,GAAG,IAAA,yBAAgB,EAC5B,KAAK,EAAC,MAAM,EAAC,EAAE;;YACX,MAAM,KAAK,GAAG,MAAA,MAAM,CAAC,QAAQ,0CAAE,KAEhB,CAAC;YAChB,IAAI,CAAC,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,gBAAgB,CAAA,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC7C,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC7E,CAAC;YACD,OAAO,IAAA,8CAAyB,EAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3F,CAAC,EACD;YACI,OAAO,EAAE,KAAK,CAAC,EAAE;gBACb,4DAA4D;gBAC5D,aAAM,CAAC,KAAK,CAAC,gCAAgC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,qBAAS,CAAC,CAAC;YAC7F,CAAC;SACJ,CACJ,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,IAAA,oBAAa,EAAC,OAAO,EAAE;YACtC,OAAO,EAAE,KAAK,CAAC,EAAE;gBACb,aAAM,CAAC,KAAK,CAAC,gCAAgC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,qBAAS,CAAC,CAAC;YAC7F,CAAC;SACJ,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,CAAA,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,YAAY,0CAAE,MAAM,EAAC,CAAC,CAAC,IAAA,2BAAoB,EAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChG,IAAI,CAAC,WAAW,GAAG,CAAA,MAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,cAAc,0CAAE,MAAM,EAAC,CAAC,CAAC,IAAA,uBAAgB,EAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtG,CAAC;IAED,qFAAqF;IAC7E,iBAAiB;QACrB,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACzC,MAAM,IAAI,0BAAiB,EAAE,CAAC;QAClC,CAAC;IACL,CAAC;IAGK,AAAN,KAAK,CAAC,QAAQ,CAAQ,GAAgB,EAAS,GAAa,EAAU,IAAa;QAC/E,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAGK,AAAN,KAAK,CAAC,SAAS,CAAQ,GAAgB,EAAS,GAAa,EAAU,IAAa;QAChF,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IAGD,OAAO,CAAQ,GAAa;QACxB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAGD,QAAQ,CAAQ,GAAa;QACzB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAEO,KAAK,CAAC,UAAU,CACpB,OAAmB,EACnB,GAAgB,EAChB,GAAa,EACb,IAAa;;QAEb,IAAI,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YAC5C,OAAO;QACX,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;QAChF,MAAM,QAAQ,GAAG,IAAA,2BAAW,EAAC,GAAG,CAAC,CAAC;QAElC,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5F,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACpB,OAAO;QACX,CAAC;QAED,MAAM,MAAM,GAAG,IAAA,0BAAiB,EAAC,MAAA,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,cAAc,CAAC,mCAAI,EAAE,CAAC,CAAC;QACpF,IAAI,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,CAAC;YACjF,OAAO;QACX,CAAC;QAEA,GAAqC,CAAC,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,gBAAgB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QACnG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC;IAED,gFAAgF;IACxE,0BAA0B,CAAC,GAAgB,EAAE,GAAa;QAC9D,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,wGAAwG;IAChG,KAAK,CAAC,qBAAqB,CAC/B,OAAmB,EACnB,GAAa,EACb,IAAa,EACb,MAAe,EACf,gBAAqC;QAErC,8GAA8G;QAC9G,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAChG,IAAI,gBAAgB,EAAE,CAAC;YACnB,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,MAAM,IAAI,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,4BAA4B,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,gGAAgG;IACxF,KAAK,CAAC,aAAa,CACvB,OAAmB,EACnB,GAAgB,EAChB,GAAa,EACb,IAAa,EACb,KAAyB,EACzB,QAA4B;QAE5B,IAAI,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,eAAe,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9E,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACnC,MAAM,IAAI,8BAAqB,CAAC,2CAA2C,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,MAAM,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC7E,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,IAAI,OAAO,KAAK,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACpC,MAAM,IAAI,8BAAqB,CAAC,4CAA4C,CAAC,CAAC;QAClF,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACR,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC3F,uCAAY,WAAW,KAAE,QAAQ,IAAG;QACxC,CAAC;QACD,OAAO,IAAI,CAAC,6BAA6B,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,0BAA0B,CACpC,OAAmB,EACnB,GAAa,EACb,IAAa,EACb,KAAyB,EACzB,QAA4B;QAE5B,0EAA0E;QAC1E,IAAI,OAAO,KAAK,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACrF,IAAI,QAAQ,EAAE,CAAC;gBACX,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC7C,OAAO,IAAI,CAAC;YAChB,CAAC;QACL,CAAC;QAED,2GAA2G;QAC3G,IAAI,KAAK,EAAE,CAAC;YACR,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,+BAA+B,CAAC,QAAQ,CAAC,CAAC;YAClF,IAAI,QAAQ,EAAE,CAAC;gBACX,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC7C,OAAO,IAAI,CAAC;YAChB,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,oGAAoG;IAC5F,KAAK,CAAC,6BAA6B,CACvC,GAAgB,EAChB,GAAa,EACb,QAA4B;;QAE5B,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAC7C,GAAG,EACH,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,EACxC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAC5B,CAAC;YACF,yFAAyF;YACzF,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,MAAA,GAAG,CAAC,OAAO,0CAAE,KAAK,CAAC,CAAC;YACrD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,YAAY,8BAAqB,EAAE,CAAC;gBACrC,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACvC,CAAC;YACD,MAAM,CAAC,CAAC;QACZ,CAAC;IACL,CAAC;IAED,4EAA4E;IACpE,wBAAwB,CAAC,IAAa;QAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrD,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,sBAAsB,CAAC,CAAC;IAC1G,CAAC;IAED,yHAAyH;IACjH,4BAA4B,CAAC,GAAa,EAAE,IAAa;QAC7D,sFAAsF;QACtF,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,wCAAwC,EAAE,EAAE,IAAI,CAAC,CAAC;IAC1G,CAAC;IAED,qGAAqG;IAC7F,KAAK,CAAC,0BAA0B,CACpC,IAAa,EACb,OAAmB,EACnB,gBAAqC;QAErC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC7B,IAAI,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1C,SAAS;YACb,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC;gBACnD,gBAAgB;gBAChB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAiB;aACnE,CAAC,CAAC;YACH,IAAI,QAAQ,EAAE,CAAC;gBACX,OAAO,QAAQ,CAAC;YACpB,CAAC;QACL,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,6GAA6G;IACrG,yBAAyB,CAAC,OAAgB;;QAC9C,OAAO,CACH,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YACvB,OAAO,CAAC,MAAM,KAAK,YAAY;YAC/B,OAAO,CAAA,MAAA,OAAO,CAAC,MAAM,0CAAE,IAAI,CAAA,KAAK,QAAQ,CAC3C,CAAC;IACN,CAAC;IAED,mIAAmI;IAC3H,kBAAkB,CAAC,GAAa,EAAE,IAAa,EAAE,QAA8B;QACnF,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,WAAW,CACZ,GAAG,EACH,GAAG,EACH;YACI,IAAI,EAAE,iCAAqB;YAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,IAAI,EAAE;gBACF,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;gBAC7C,KAAK,EAAE,QAAQ,CAAC,KAAK;aACxB;SACJ,EACD,IAAI,CACP,CAAC;IACN,CAAC;IAED,kHAAkH;IAC1G,WAAW,CAAC,GAAa,EAAE,MAAc,EAAE,KAA4B,EAAE,IAAa;QAC1F,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,2GAA2G;IACnG,cAAc,CAAC,IAAa,EAAE,KAA4B;QAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,IAAI;gBACf,wEAAwE;iBACvE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC;iBACvD,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACb,OAAO,EAAE,KAAc;gBACvB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC3B,KAAK;aACR,CAAC,CAAC,CAAC;YACR,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,OAAO,MAAM,CAAC;YAClB,CAAC;QACL,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;IAC/D,CAAC;IAEO,SAAS,CAAC,OAAgB;;QAC9B,OAAO,MAAA,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,mCAAI,IAAI,CAAC;IAC1C,CAAC;IAED,0GAA0G;IAClG,SAAS,CAAC,KAAc;QAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;IACvD,CAAC;IAEO,QAAQ,CAAC,OAAgB;QAC7B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC;QACvB,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,CAAC;IAEO,aAAa,CACjB,gBAAqC,EACrC,OAAmB,EACnB,KAAc;QAEd,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC;QACrC,OAAO;YACH,yDAAyD;YACzD,KAAK,EAAE,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,WAAW;YAC3B,QAAQ,EAAE,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,aAAa,KAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,WAAW;YAClF,MAAM,EAAE,EAAE;YACV,SAAS,EAAE,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,oBAAoB;gBAClC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;gBACnE,CAAC,CAAC,SAAS;YACf,KAAK,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE;SACvC,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACjC,KAAa,EACb,OAAmB,EACnB,GAAgB,EAChB,GAAa,EACb,QAAiB;QAEjB,IAAI,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,YAAY,8BAAqB,EAAE,CAAC;gBACrC,kFAAkF;gBAClF,kFAAkF;gBAClF,mCAAmC;gBACnC,IAAI,CAAC,CAAC,CAAC,YAAY,wCAA0B,CAAC,EAAE,CAAC;oBAC7C,MAAM,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;gBAC7D,CAAC;gBACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACxF,CAAC;YACD,MAAM,CAAC,CAAC;QACZ,CAAC;IACL,CAAC;IAED,qIAAqI;IAC7H,gBAAgB,CACpB,GAAa,EACb,OAAmB,EACnB,OAA0D;QAE1D,MAAM,MAAM,GAAG,CAAC,sBAAsB,IAAI,CAAC,aAAa,CAAC,4BAA4B,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnG,IAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACrC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBACtB,gHAAgH;gBAChH,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;gBAC3E,MAAM,CAAC,IAAI,CAAC,sBAAsB,WAAW,GAAG,CAAC,CAAC;YACtD,CAAC;QACL,CAAC;QACD,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,UAAU,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IAEO,gBAAgB,CAAC,GAAa;QAClC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IAEO,cAAc,CAAC,MAAe;QAClC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;YAChD,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpC,qFAAqF;QACrF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAC3B,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,OAAO,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,0BAA0B,CACpC,GAAgB,EAChB,YAAqB,EACrB,YAAqB;QAErB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAC3E,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,8BAAqB,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,YAAY,aAAZ,YAAY,cAAZ,YAAY,GAAI,EAAE,CAAC,CAAC;QAClF,OAAO,IAAI,qBAAc,CAAC;YACtB,OAAO,EAAE,MAAM;YACf,OAAO;YACP,YAAY,EAAE,IAAA,4CAAwB,EAAC,GAAG,CAAC;YAC3C,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,YAAY,EAAE,KAAK;YACnB,qBAAqB,EAAE,IAAI;YAC3B,GAAG;YACH,aAAa,EAAE,GAAG,CAAC,CAAC;SACvB,CAAC,CAAC;IACP,CAAC;IAEO,sBAAsB,CAC1B,OAAsD;QAEtD,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,kBAAkB,CAAC;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC3C,OAAO,KAAK,IAAI,SAAS,CAAC;IAC9B,CAAC;IAEO,sBAAsB,CAAC,GAAa,EAAE,KAAc;QACxD,IAAI,KAAK,EAAE,CAAC;YACR,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QAC5E,CAAC;IACL,CAAC;IAED,iGAAiG;IACzF,eAAe,CAAC,GAAgB;;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,eAAe,CAAC;QAC1D,MAAM,SAAS,GAAG,MAAA,GAAG,CAAC,KAAK,0CAAG,GAAG,CAAC,CAAC;QACnC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,EAAE,CAAC;YAC7C,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC/C,OAAO,KAAK,IAAI,SAAS,CAAC;IAC9B,CAAC;IAEO,SAAS,CACb,OAAsD,EACtD,IAAY;QAEZ,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACnD,CAAC;CACJ,CAAA;AArcY,wDAAsB;AAkDzB;IADL,IAAA,aAAI,EAAC,MAAM,CAAC;IACG,WAAA,IAAA,YAAG,GAAE,CAAA;IAAoB,WAAA,IAAA,YAAG,GAAE,CAAA;IAAiB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;sDAGpE;AAGK;IADL,IAAA,aAAI,EAAC,OAAO,CAAC;IACG,WAAA,IAAA,YAAG,GAAE,CAAA;IAAoB,WAAA,IAAA,YAAG,GAAE,CAAA;IAAiB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;uDAErE;AAGD;IADC,IAAA,YAAG,EAAC,MAAM,CAAC;IACH,WAAA,IAAA,YAAG,GAAE,CAAA;;;;qDAGb;AAGD;IADC,IAAA,YAAG,EAAC,OAAO,CAAC;IACH,WAAA,IAAA,YAAG,GAAE,CAAA;;;;sDAEd;iCArEQ,sBAAsB;IAFlC,IAAA,mBAAU,EAAC,8BAA8B,CAAC;IAC1C,IAAA,mBAAU,EAAC,KAAK,CAAC;IAWT,WAAA,IAAA,eAAM,EAAC,8BAAkB,CAAC,CAAA;qCAJI,+BAAe;QACnB,kDAAsB;QACnB,gDAAqB;QACnB,oBAAa,UAEf,gDAAqB;QAClB,qBAAc;QACf,gDAAuB;GAblD,sBAAsB,CAqclC"}

package/lib/types.d.ts

@@ -0,0 +1,432 @@
+import type { ToolAnnotations } from '@modelcontextprotocol/server';
+import { type ScheduledTaskConfig } from '@vendure/core';
+import { McpJsonSchema, McpToolBehavior, McpToolset } from '@vendure/mcp-sdk';
+/**
+ * @description
+ * Controls which tools are returned by the MCP `tools/list` call.
+ *
+ * - `discovery` exposes a small, stable set of meta-tools (`search_tools` and
+ *   `execute_tool`) that let an agent search for registered Vendure tools
+ *   (results ranked by keyword relevance) and execute them by name.
+ * - `direct` exposes every callable Vendure tool directly to the agent.
+ *
+ * @docsCategory core plugins/McpPlugin
+ * @since 3.8.0
+ */
+export type McpToolExposureMode = 'direct' | 'discovery';
+/**
+ * @description
+ * OAuth-related options for {@link McpPlugin}.
+ *
+ * @docsCategory core plugins/McpPlugin
+ * @since 3.8.0
+ */
+export interface McpOauthOptions {
+    /**
+     * @description
+     * Server secret used to HMAC-hash OAuth tokens at rest. Required to enable OAuth. Supply it via
+     * an environment variable, generated once with `openssl rand -base64 32`.
+     *
+     * Rotating this secret invalidates all active OAuth tokens, forcing clients to re-authorize.
+     * The Vendure sessions behind existing grants become unreachable; the retention task deletes
+     * them once their grants expire.
+     */
+    tokenSecret: string;
+    /**
+     * @description
+     * The public origin of this Vendure server, such as `https://shop.example.com`. OAuth clients
+     * read this server's login and token endpoints from `/.well-known/...` directly under it, so
+     * it must be a scheme and host with no path. The server refuses to start otherwise. If a
+     * proxy serves Vendure under a path, use a subdomain or forward `/.well-known/*` to Vendure.
+     *
+     * @default 'http://localhost:<apiOptions.port>'
+     */
+    issuer?: string;
+    /**
+     * @default 900
+     */
+    accessTokenTtlSeconds?: number;
+    /**
+     * @description
+     * Every refresh resets this clock, so what it really sets is how long a client may go
+     * quiet before its grant dies and the cleanup job deletes the Vendure session behind it.
+     *
+     * @default 2592000
+     */
+    refreshTokenTtlSeconds?: number;
+    /**
+     * @default 60
+     */
+    authorizationCodeTtlSeconds?: number;
+    /**
+     * @description
+     * Lifetime of a pending authorization request (consent window), in seconds.
+     *
+     * @default 600
+     */
+    authorizationRequestTtlSeconds?: number;
+    /**
+     * @description
+     * Path (relative to `issuer`) of the admin consent page that approves
+     * admin-scoped authorization requests. Must start with a single `/`. The Vendure
+     * server serves this page itself, so a full URL here is refused at startup.
+     *
+     * @default '/dashboard/mcp/authorize'
+     */
+    adminConsentPath?: string;
+    /**
+     * @description
+     * Absolute URL of the storefront consent page that approves customer-scoped
+     * authorization requests. Required only if you want customers to authorize MCP
+     * clients; a deployment that uses the admin toolset alone does not need it.
+     */
+    storefrontConsentUrl?: string;
+    /**
+     * @description
+     * Allows a client to identify itself with a `client_id` URL that points at the local machine
+     * (`localhost`, `127.0.0.1` or `::1`) over plain HTTP, so a metadata document served by your
+     * own development setup can be fetched.
+     *
+     * Leave this off anywhere reachable by others: with it on, anyone who can reach the authorize
+     * endpoint can make the server open a connection, with no credentials, to any port on the
+     * machine it runs on. The server refuses to start with this enabled when `NODE_ENV` is
+     * `production`.
+     *
+     * @default false
+     */
+    allowLoopbackCimdDocuments?: boolean;
+    /**
+     * @description
+     * How long a dead grant, expired or revoked, is kept before the row is deleted. It is the
+     * only OAuth record worth auditing, so it outlives the rest.
+     *
+     * Deleting a grant also clears the link from every tool-call log that points at it. Set this
+     * at or above {@link McpLoggingOptions.ttlDays} if your logs should keep that link.
+     *
+     * Must be non-negative. Set to `0` to retain dead grants forever.
+     *
+     * @default 30 (days)
+     */
+    grantRetentionDays?: number;
+    /**
+     * @description
+     * When the cleanup job runs. It clears out expired authorization requests and codes, grants
+     * dead for longer than `grantRetentionDays`, and the Vendure session behind each expired
+     * grant. That grant keeps working against the ordinary GraphQL APIs until then, so running
+     * the job less often widens that gap. Revoking a grant kills its session at once.
+     *
+     * @default cron => cron.everyDayAt(3, 30)
+     */
+    retentionSchedule?: McpRetentionSchedule;
+}
+/**
+ * @description
+ * Per-scope request-rate limits for MCP calls, expressed in requests per minute (`rpm`). A value
+ * of `0` means unlimited. Every limit except `oauthIp` is counted separately for the admin and
+ * shop endpoints. An over-limit request is refused with HTTP `429` and a `Retry-After` header,
+ * except an over-limit tool call inside an open session, which returns an `isError` tool result
+ * instead.
+ *
+ * @docsCategory core plugins/McpPlugin
+ * @since 3.8.0
+ */
+export interface McpRateLimitOptions {
+    /**
+     * @description
+     * Requests per minute allowed per MCP session. A signed-in caller is counted by their
+     * Vendure session. An anonymous `/mcp/shop` caller is counted by client IP instead.
+     *
+     * @default { rpm: 60 }
+     */
+    perSession?: {
+        rpm: number;
+    };
+    /**
+     * @description
+     * Requests per minute allowed per signed-in user, counted across every session and OAuth
+     * client acting for that user. Authorizing again can start a new session and client record,
+     * but the user bucket keeps counting through both, since the user's id does not change.
+     * Anonymous callers have no user, so `anonymousIp` covers them instead.
+     *
+     * @default { rpm: 120 }
+     */
+    perUser?: {
+        rpm: number;
+    };
+    /**
+     * @description
+     * Requests per minute allowed per registered OAuth client, counted across every user of that
+     * client. One client record can serve all of a store's shoppers, so the default is sized for a
+     * whole application's traffic. `perUser` limits an individual instead. A client identified by
+     * a metadata document URL (CIMD) gets one record per URL. Requests with no OAuth grant, such as
+     * in-process or anonymous calls, have no client bucket.
+     *
+     * @default { rpm: 3000 }
+     */
+    perClient?: {
+        rpm: number;
+    };
+    /**
+     * @description
+     * Requests per minute allowed per tool, keyed by tool name. `0` means unlimited. Each caller
+     * has its own bucket per tool: an OAuth caller is counted by client plus session, an anonymous
+     * caller by client IP. A new authorization creates a new session, so its per-tool counters
+     * start fresh. `oauthIp` bounds how often one address can re-authorize, while `perUser` keeps
+     * counting across authorizations.
+     *
+     * @default { place_order: { rpm: 5 }, create_product: { rpm: 10 }, refund_order: { rpm: 5 }, cancel_order: { rpm: 5 } }
+     */
+    perTool?: Record<string, {
+        rpm: number;
+    }>;
+    /**
+     * @description
+     * Requests per minute allowed per client IP for anonymous `/mcp/shop` calls. `false`
+     * disables the limit. Behind a reverse proxy, enable Vendure's `trustProxy` so
+     * `req.ip` reports the client address rather than the proxy's.
+     *
+     * @default { rpm: 60 }
+     */
+    anonymousIp?: {
+        rpm: number;
+    } | false;
+    /**
+     * @description
+     * Requests per minute allowed per client IP across the whole OAuth HTTP surface. Every route
+     * on the OAuth controller shares this one bucket, including the `.well-known` metadata
+     * documents. The same limit also caps failed bearer-token authentications on the MCP
+     * endpoints, in a separate per-IP bucket, so an address over its limit is refused before its
+     * token costs a database lookup. `false` disables the limit. Behind a reverse proxy, enable
+     * Vendure's `trustProxy` so `req.ip` reports the client address rather than the proxy's.
+     *
+     * @default { rpm: 60 }
+     */
+    oauthIp?: {
+        rpm: number;
+    } | false;
+}
+/**
+ * @description
+ * Protects the MCP transport against DNS rebinding. Both options take bare hostnames, never
+ * full URLs or header values. Omitting an option, or giving it an empty array, applies no
+ * check at all.
+ *
+ * @docsCategory core plugins/McpPlugin
+ * @since 3.8.0
+ */
+export interface McpDnsRebindingOptions {
+    /**
+     * @description
+     * Hostnames the `Host` header of an MCP request may name. Drop the port, and bracket an
+     * IPv6 address, for example `[::1]`. A request naming any other host is refused with HTTP
+     * `403` before the MCP handler runs.
+     */
+    allowedHosts?: string[];
+    /**
+     * @description
+     * Hostnames the `Origin` header of an MCP request may name. Drop the scheme and the port, and
+     * bracket an IPv6 address, for example `[::1]`. A request naming any other origin is refused
+     * with HTTP `403` before the MCP handler runs.
+     *
+     * A request with no `Origin` header passes, since non-browser MCP clients don't send one, so
+     * this option constrains browsers only, not every caller.
+     */
+    allowedOrigins?: string[];
+}
+export type McpRetentionSchedule = ScheduledTaskConfig['schedule'];
+/** How much of each MCP tool call {@link McpLoggingOptions.capture} persists. */
+export type McpLogCapture = 'metadata' | 'full';
+/**
+ * @description
+ * Operator-supplied redaction for {@link McpLoggingOptions.redact}.
+ *
+ * @docsCategory core plugins/McpPlugin
+ * @since 3.8.0
+ */
+export type McpLogRedactFn = (entry: {
+    toolName: string;
+    input: unknown;
+    output: unknown;
+}) => {
+    input: unknown;
+    output: unknown;
+};
+/**
+ * @description
+ * Controls how MCP tool calls are logged and retained. Every call that runs a tool is recorded as
+ * an {@link McpToolCallLog} row and published as an `McpToolCallEvent`. Calls refused before the
+ * tool runs, such as an unknown or switched-off tool, invalid arguments, a missing permission, or
+ * a rate limit, leave no row and no event. So does the confirmation preview of a destructive tool.
+ *
+ * @docsCategory core plugins/McpPlugin
+ * @since 3.8.0
+ */
+export interface McpLoggingOptions {
+    /**
+     * @description
+     * How many days to retain tool-call logs. Must be non-negative. Set to `0` to retain all logs.
+     *
+     * @default 30 (days)
+     */
+    ttlDays?: number;
+    /**
+     * @description
+     * How much of each tool call is stored on its log row. `metadata` stores the tool name, the
+     * actor, the status, the duration and the related IDs. `full` also stores the call's `input`
+     * and `output`, which may hold personal data. Supply `redact` to sanitize those, and see
+     * `maxBodyBytes` for the size cap applied to each.
+     *
+     * @default 'metadata'
+     */
+    capture?: McpLogCapture;
+    /**
+     * @description
+     * Function that rewrites a call's `input` and `output` before they are stored. Runs only
+     * when `capture` is `'full'`. If it throws, the call is still recorded, both bodies are
+     * stored as `null`, and a warning is logged.
+     *
+     * @example
+     * ```ts
+     * redact: ({ input, output }) => ({
+     *   input,
+     *   output: { ...output, customer: undefined }
+     * })
+     * ```
+     */
+    redact?: McpLogRedactFn;
+    /**
+     * @description
+     * The largest `input` or `output` body stored on a log row, in bytes, measured after redaction
+     * and JSON serialization. Applies only when `capture` is `'full'`. A larger body is replaced
+     * with a marker recording the reason and the real size, so the audit row is still written. The
+     * default fits within the 65,535-byte limit of a MySQL `TEXT` column.
+     *
+     * @default 64000
+     */
+    maxBodyBytes?: number;
+    /**
+     * @description
+     * Schedule for the cleanup job that deletes expired tool-call logs. Accepts a cron
+     * expression string, or a function that builds one.
+     *
+     * @default cron => cron.everyDayAt(2, 30)
+     */
+    retentionSchedule?: McpRetentionSchedule;
+    /**
+     * @description
+     * Whether each tool-call log row stores the caller's IP address. Off by default because an
+     * IP address is personal data. Behind a reverse proxy, enable Vendure's `trustProxy` so the
+     * stored address is the caller's rather than the proxy's.
+     *
+     * @default false
+     */
+    captureClientIp?: boolean;
+}
+/**
+ * @description
+ * Options passed to {@link McpPlugin.init}.
+ *
+ * @docsCategory core plugins/McpPlugin
+ * @since 3.8.0
+ */
+export interface McpPluginOptions {
+    /**
+     * @description
+     * Which tools the MCP `tools/list` call returns. See {@link McpToolExposureMode} for the
+     * available modes. In-process listing through {@link McpToolExecutionService} always lists
+     * the real tools and ignores this.
+     *
+     * @default 'direct'
+     */
+    toolExposure?: McpToolExposureMode;
+    /**
+     * @description
+     * Controls HTTP access to the `/mcp/shop` endpoint and the shop toolset.
+     *
+     * - `'anonymous'` (default): the endpoint accepts anonymous callers as well as
+     *   OAuth-authenticated customers.
+     * - `'authenticated'`: the endpoint requires an OAuth Bearer token. Token-less
+     *   requests receive a 401 with the standard auth challenge.
+     * - `'disabled'`: the endpoint responds 404 and customer OAuth authorization
+     *   requests are refused.
+     *
+     * In-process tool execution via {@link McpToolExecutionService} is not affected.
+     *
+     * @default 'anonymous'
+     */
+    shopAccess?: 'disabled' | 'authenticated' | 'anonymous';
+    /**
+     * @description
+     * Leave this out and the anonymous shop endpoint still works, but anything needing a token
+     * fails with `400 MCP OAuth is not configured`. That covers the admin endpoint, the
+     * authenticated shop endpoint, and the OAuth endpoints themselves.
+     */
+    oauth?: McpOauthOptions;
+    rateLimits?: McpRateLimitOptions;
+    dnsRebinding?: McpDnsRebindingOptions;
+    logging?: McpLoggingOptions;
+}
+/**
+ * @description
+ * A tool as described to a caller, carrying everything a model needs to decide whether to call it.
+ * Returned by {@link McpToolExecutionService.listTools} and by the `search_tools` discovery meta-tool.
+ *
+ * @docsCategory core plugins/McpPlugin
+ * @since 3.8.0
+ */
+export interface McpToolSummary {
+    /**
+     * @description
+     * The tool's unique snake_case name within its toolset, e.g. `search_products`.
+     */
+    name: string;
+    /**
+     * @description
+     * Human-readable title declared by the tool. The same value is copied onto
+     * `annotations.title`.
+     */
+    title?: string;
+    /**
+     * @description
+     * What the tool does, written for an AI agent to read.
+     */
+    description: string;
+    /**
+     * @description
+     * Which Vendure API the tool works over: `shop` for the Shop API, `admin` for the Admin API.
+     */
+    toolset: McpToolset;
+    /**
+     * @description
+     * What the tool does to data: `readonly` only reads it, `mutating` changes it, and
+     * `destructive` changes it and needs a confirmation round-trip before running.
+     */
+    behavior: McpToolBehavior;
+    /**
+     * @description
+     * MCP annotations derived from `behavior`. `readOnlyHint` and `idempotentHint` are true for
+     * a `readonly` tool. `destructiveHint` is true for a `destructive` tool.
+     */
+    annotations: ToolAnnotations;
+    /**
+     * @description
+     * The input schema a call must satisfy: the tool's declared schema plus, for a destructive
+     * tool, the optional `confirm` field the registry injects.
+     */
+    inputSchema: McpJsonSchema;
+}
+/**
+ * The kind of Vendure user who gave consent, recorded on an MCP OAuth grant and on the
+ * authorization code it came from. Consent always requires someone signed in, so there is
+ * no anonymous case here.
+ */
+export type McpGrantUserType = 'customer' | 'admin';
+/**
+ * Who a logged MCP tool call ran as. `'anonymous'` covers calls to the shop endpoint with
+ * nobody signed in.
+ */
+export type McpActorType = McpGrantUserType | 'anonymous';
+/**
+ * Terminal outcome of a single MCP tool call recorded in {@link McpToolCallLog}.
+ */
+export type McpToolCallStatus = 'success' | 'error';

package/lib/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/lib/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,42 @@
+{
+    "name": "@vendure/mcp-plugin",
+    "version": "3.8.0-minor-bootstrap.0",
+    "license": "GPL-3.0-or-later",
+    "main": "lib/index.js",
+    "types": "lib/index.d.ts",
+    "files": [
+        "lib/**/*",
+        "src/dashboard/**/*",
+        "src/shared/**/*"
+    ],
+    "repository": {
+        "type": "git",
+        "url": "https://github.com/vendurehq/vendure"
+    },
+    "scripts": {
+        "watch": "tsc -p ./tsconfig.build.json --watch",
+        "build": "rimraf lib && tsc -p ./tsconfig.build.json",
+        "codegen:dashboard": "ts-node codegen/generate-schema-types.ts",
+        "lint": "eslint --fix .",
+        "test": "vitest --config vitest.config.mts --run",
+        "e2e": "cross-env PACKAGE=mcp-plugin vitest --config ../../e2e-common/vitest.config.mts --run",
+        "e2e:watch": "cross-env PACKAGE=mcp-plugin vitest --config ../../e2e-common/vitest.config.mts"
+    },
+    "homepage": "https://www.vendure.io/",
+    "funding": "https://github.com/sponsors/michaelbromley",
+    "publishConfig": {
+        "access": "public"
+    },
+    "dependencies": {
+        "@modelcontextprotocol/node": "2.0.0",
+        "@modelcontextprotocol/server": "2.0.0",
+        "@vendure/mcp-sdk": "^3.8.0-minor-bootstrap.0",
+        "zod": "^4.2.0"
+    },
+    "devDependencies": {
+        "@modelcontextprotocol/client": "2.0.0",
+        "@types/express": "^5.0.1",
+        "@vendure/common": "^3.8.0-minor-bootstrap.0",
+        "@vendure/core": "^3.8.0-minor-bootstrap.0"
+    }
+}

package/src/dashboard/components/activity-block.tsx

@@ -0,0 +1,72 @@
+import { Trans } from '@lingui/react/macro';
+import { Badge, PaginatedListDataTable } from '@vendure/dashboard';
+
+import { mcpToolCallLogsQuery } from '../mcp.graphql';
+
+import { ActorCell } from './actor-cell';
+import { EmptyCell } from './empty-cell';
+import { useMcpTableState } from './use-mcp-table-state';
+
+export function ActivityBlock() {
+    const tableState = useMcpTableState({
+        defaultSorting: [{ id: 'createdAt', desc: true }],
+        defaultVisibility: { id: false, pluginSource: false },
+    });
+
+    return (
+        <PaginatedListDataTable
+            listQuery={mcpToolCallLogsQuery}
+            {...tableState}
+            // No bulk actions on this panel, so no row-selection checkboxes.
+            includeSelectionColumn={false}
+            customizeColumns={{
+                createdAt: { header: () => <Trans>Time</Trans> },
+                toolName: {
+                    header: () => <Trans>Tool</Trans>,
+                    cell: ({ row }) => <span className="font-mono text-sm">{row.original.toolName}</span>,
+                },
+                actor: {
+                    header: () => <Trans>Actor</Trans>,
+                    meta: { dependencies: ['actorType', 'actorName', 'customerId'] },
+                    cell: ({ row }) => (
+                        <ActorCell
+                            actorType={row.original.actorType}
+                            actorName={row.original.actorName ?? null}
+                            customerId={row.original.customerId ?? null}
+                        />
+                    ),
+                },
+                actorType: {
+                    header: () => <Trans>Actor type</Trans>,
+                    cell: ({ row }) => <Badge variant="outline">{row.original.actorType}</Badge>,
+                },
+                // Fetched only to feed the Actor cell; neither has a database column to sort or filter by.
+                actorName: { meta: { disabled: true } },
+                customerId: { meta: { disabled: true } },
+                status: {
+                    header: () => <Trans>Status</Trans>,
+                    cell: ({ row }) => (
+                        <Badge variant={row.original.status === 'success' ? 'success' : 'destructive'}>
+                            {row.original.status}
+                        </Badge>
+                    ),
+                },
+                durationMs: {
+                    header: () => <Trans>Duration</Trans>,
+                    cell: ({ row }) =>
+                        row.original.durationMs == null ? <EmptyCell /> : `${row.original.durationMs} ms`,
+                },
+            }}
+            // Columns not listed here still show up, just appended after these.
+            defaultColumnOrder={[
+                'createdAt',
+                'toolName',
+                'actor',
+                'actorType',
+                'status',
+                'durationMs',
+                'pluginSource',
+            ]}
+        />
+    );
+}

package/src/dashboard/components/actor-cell.tsx

@@ -0,0 +1,31 @@
+import { Trans } from '@lingui/react/macro';
+import { DetailPageButton } from '@vendure/dashboard';
+
+import { EmptyCell } from './empty-cell';
+
+// Customers link to their customer page; administrators have no such page, so they show as plain text.
+export function ActorCell({
+    actorType,
+    actorName,
+    customerId,
+}: {
+    actorType: string | null;
+    actorName: string | null;
+    customerId: string | null;
+}) {
+    if (actorType === 'anonymous') {
+        return (
+            <span className="text-sm text-muted-foreground">
+                <Trans>Anonymous</Trans>
+            </span>
+        );
+    }
+    // A missing name means the account was deleted since, not that nobody was signed in.
+    if (!actorName) {
+        return <EmptyCell />;
+    }
+    if (customerId) {
+        return <DetailPageButton href={`/customers/${customerId}`} label={actorName} className="px-0" />;
+    }
+    return <span className="text-sm">{actorName}</span>;
+}