@vendure/mcp-plugin 3.8.0-minor-bootstrap.0

package/src/dashboard/tsconfig.json

@@ -0,0 +1,9 @@
+{
+  "compilerOptions": {
+    "module": "nodenext",
+    "jsx": "react-jsx",
+    "paths": {
+      "@/vdb/*": ["../../../dashboard/src/lib/*"]
+    }
+  }
+}

package/src/shared/endpoint-paths.ts

@@ -0,0 +1,8 @@
+/** Keep this file free of imports: the dashboard consent page reads it in the browser, where `constants.ts` can't load because it pulls in `@vendure/core`. */
+export const OAUTH_ENDPOINT_PATHS = {
+    register: 'mcp/oauth/register',
+    authorize: 'mcp/oauth/authorize',
+    authorizationRequest: 'mcp/oauth/authorization-request',
+    token: 'mcp/oauth/token',
+    revoke: 'mcp/oauth/revoke',
+} as const;

package/src/shared/loopback.ts

@@ -0,0 +1,6 @@
+/** Kept import-free so the dashboard bundle can reuse this check too; `oauth/oauth-utils.ts` pulls in NestJS and `node:crypto`, which can't load in a browser. */
+export function isLoopbackHostname(hostname: string): boolean {
+    const bare = hostname.replace(/^\[|\]$/g, '').toLowerCase();
+    return bare === 'localhost' || bare === '127.0.0.1' || bare === '::1';
+}
+