@vritti/api-sdk 0.4.7 → 0.4.9

package/dist/mcp.js

@@ -0,0 +1,771 @@
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+
+// src/mcp/coverage.ts
+import { METHOD_METADATA, MODULE_METADATA } from "@nestjs/common/constants";
+function collectOperationIds(modules) {
+  const ids = [];
+  for (const module of modules) {
+    const controllers = Reflect.getMetadata(MODULE_METADATA.CONTROLLERS, module) ?? [];
+    for (const controller of controllers) {
+      const prototype = controller.prototype;
+      for (const method of Object.getOwnPropertyNames(prototype)) {
+        if (method === "constructor") continue;
+        const handler = prototype[method];
+        if (typeof handler !== "function") continue;
+        if (Reflect.getMetadata(METHOD_METADATA, handler) === void 0) continue;
+        ids.push(`${controller.name}_${method}`);
+      }
+    }
+  }
+  return ids;
+}
+__name(collectOperationIds, "collectOperationIds");
+
+// src/mcp/mcp.module.ts
+import { Module } from "@nestjs/common";
+import { DiscoveryModule } from "@nestjs/core";
+
+// src/mcp/mcp.options.ts
+var MCP_SERVER_OPTIONS = /* @__PURE__ */ Symbol("MCP_SERVER_OPTIONS");
+
+// src/exceptions/bad-gateway.exception.ts
+import { HttpStatus } from "@nestjs/common";
+
+// src/exceptions/base-field.exception.ts
+import { HttpException } from "@nestjs/common";
+var HttpProblemException = class extends HttpException {
+  static {
+    __name(this, "HttpProblemException");
+  }
+  constructor(detailOrOptions, httpStatus) {
+    const options = typeof detailOrOptions === "string" ? {
+      detail: detailOrOptions
+    } : detailOrOptions;
+    super({
+      type: options.type ?? "about:blank",
+      label: options.label,
+      detail: options.detail,
+      errors: options.errors ?? []
+    }, httpStatus);
+  }
+};
+
+// src/exceptions/bad-request.exception.ts
+import { HttpStatus as HttpStatus2 } from "@nestjs/common";
+var BadRequestException = class extends HttpProblemException {
+  static {
+    __name(this, "BadRequestException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Bad Request", HttpStatus2.BAD_REQUEST);
+  }
+};
+
+// src/exceptions/conflict.exception.ts
+import { HttpStatus as HttpStatus3 } from "@nestjs/common";
+
+// src/exceptions/forbidden.exception.ts
+import { HttpStatus as HttpStatus4 } from "@nestjs/common";
+
+// src/exceptions/gone.exception.ts
+import { HttpStatus as HttpStatus5 } from "@nestjs/common";
+
+// src/exceptions/internal-server-error.exception.ts
+import { HttpStatus as HttpStatus6 } from "@nestjs/common";
+
+// src/exceptions/method-not-allowed.exception.ts
+import { HttpStatus as HttpStatus7 } from "@nestjs/common";
+
+// src/exceptions/not-acceptable.exception.ts
+import { HttpStatus as HttpStatus8 } from "@nestjs/common";
+
+// src/exceptions/not-found.exception.ts
+import { HttpStatus as HttpStatus9 } from "@nestjs/common";
+
+// src/exceptions/not-implemented.exception.ts
+import { HttpStatus as HttpStatus10 } from "@nestjs/common";
+
+// src/exceptions/payload-too-large.exception.ts
+import { HttpStatus as HttpStatus11 } from "@nestjs/common";
+
+// src/exceptions/request-timeout.exception.ts
+import { HttpStatus as HttpStatus12 } from "@nestjs/common";
+
+// src/exceptions/service-unavailable.exception.ts
+import { HttpStatus as HttpStatus13 } from "@nestjs/common";
+
+// src/exceptions/too-many-requests.exception.ts
+import { HttpStatus as HttpStatus14 } from "@nestjs/common";
+
+// src/exceptions/unauthorized.exception.ts
+import { HttpStatus as HttpStatus15 } from "@nestjs/common";
+var UnauthorizedException = class extends HttpProblemException {
+  static {
+    __name(this, "UnauthorizedException");
+  }
+  constructor(detailOrOptions) {
+    super(detailOrOptions ?? "Unauthorized", HttpStatus15.UNAUTHORIZED);
+  }
+};
+
+// src/exceptions/unprocessable-entity.exception.ts
+import { HttpStatus as HttpStatus16 } from "@nestjs/common";
+
+// src/exceptions/unsupported-media-type.exception.ts
+import { HttpStatus as HttpStatus17 } from "@nestjs/common";
+
+// src/exceptions/validation.exception.ts
+import { HttpStatus as HttpStatus18 } from "@nestjs/common";
+
+// src/mcp/mcp-principal.ts
+var McpPrincipal = class {
+  static {
+    __name(this, "McpPrincipal");
+  }
+  userId;
+  scopes;
+  clientId;
+  grantId;
+  organizationId;
+  constructor(userId, scopes, clientId, grantId, organizationId) {
+    this.userId = userId;
+    this.scopes = scopes;
+    this.clientId = clientId;
+    this.grantId = grantId;
+    this.organizationId = organizationId;
+  }
+  hasScope(scope) {
+    return this.scopes.includes(scope);
+  }
+};
+var MCP_PRINCIPAL_FACTORY = /* @__PURE__ */ Symbol("MCP_PRINCIPAL_FACTORY");
+function principalFromOAuth(request) {
+  const auth = request.auth;
+  if (!auth || auth.kind !== "oauth" || !auth.userId || !auth.grantId) {
+    throw new UnauthorizedException("MCP request is not authenticated.");
+  }
+  return new McpPrincipal(auth.userId, auth.scopes ?? [], auth.clientId, auth.grantId, auth.organizationId);
+}
+__name(principalFromOAuth, "principalFromOAuth");
+
+// src/mcp/mcp-request.handler.ts
+import { Inject as Inject2, Injectable as Injectable4 } from "@nestjs/common";
+
+// src/mcp/mcp-server.factory.ts
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";
+import { Inject, Injectable as Injectable2 } from "@nestjs/common";
+
+// src/mcp/tool-registry.ts
+import { Injectable, Logger as Logger2 } from "@nestjs/common";
+import { DiscoveryService, Reflector } from "@nestjs/core";
+import { z } from "zod";
+
+// src/mcp/tool-definition.ts
+import { SetMetadata } from "@nestjs/common";
+var MCP_TOOL_PROVIDER_KEY = "mcp:tool-provider";
+var McpTools = /* @__PURE__ */ __name(() => SetMetadata(MCP_TOOL_PROVIDER_KEY, true), "McpTools");
+function defineTool(definition) {
+  return definition;
+}
+__name(defineTool, "defineTool");
+
+// src/mcp/tool-result.ts
+import { Logger } from "@nestjs/common";
+import { ZodError } from "zod";
+var PG_UNIQUE_VIOLATION = "23505";
+var logger = new Logger("McpTool");
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+__name(isRecord, "isRecord");
+function isHttpExceptionLike(value) {
+  return isRecord(value) && typeof value.getStatus === "function" && typeof value.getResponse === "function";
+}
+__name(isHttpExceptionLike, "isHttpExceptionLike");
+function findPgUniqueViolation(error, depth = 0) {
+  if (!isRecord(error) || depth > 5) return void 0;
+  if (error.code === PG_UNIQUE_VIOLATION) return {
+    detail: typeof error.detail === "string" ? error.detail : void 0
+  };
+  return findPgUniqueViolation(error.cause, depth + 1);
+}
+__name(findPgUniqueViolation, "findPgUniqueViolation");
+function normalizeFieldErrors(value) {
+  if (!Array.isArray(value)) return [];
+  return value.filter(isRecord).map((entry) => ({
+    field: typeof entry.field === "string" ? entry.field : void 0,
+    message: typeof entry.message === "string" ? entry.message : "Invalid value"
+  }));
+}
+__name(normalizeFieldErrors, "normalizeFieldErrors");
+function toolOk(payload) {
+  const structuredContent = isRecord(payload) ? payload : {
+    result: payload
+  };
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(payload)
+      }
+    ],
+    structuredContent
+  };
+}
+__name(toolOk, "toolOk");
+function toolError(problem) {
+  return {
+    isError: true,
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify(problem)
+      }
+    ],
+    structuredContent: {
+      ...problem
+    }
+  };
+}
+__name(toolError, "toolError");
+function problemFromError(error) {
+  if (error instanceof ZodError) {
+    return {
+      status: 400,
+      label: "Invalid Arguments",
+      detail: "The tool arguments did not match the schema.",
+      errors: error.issues.map((issue) => ({
+        field: issue.path.join("."),
+        message: issue.message
+      }))
+    };
+  }
+  if (isHttpExceptionLike(error)) {
+    const status = error.getStatus();
+    const body = error.getResponse();
+    if (isRecord(body)) {
+      const detail = typeof body.detail === "string" ? body.detail : typeof body.message === "string" ? body.message : "Request failed.";
+      return {
+        status,
+        label: typeof body.label === "string" ? body.label : void 0,
+        detail,
+        errors: normalizeFieldErrors(body.errors)
+      };
+    }
+    return {
+      status,
+      detail: typeof body === "string" ? body : "Request failed.",
+      errors: []
+    };
+  }
+  const duplicate = findPgUniqueViolation(error);
+  if (duplicate) {
+    return {
+      status: 409,
+      label: "Duplicate Entry",
+      detail: duplicate.detail ?? "A record with these values already exists.",
+      errors: []
+    };
+  }
+  logger.error(`Unhandled tool error: ${error instanceof Error ? error.stack : String(error)}`);
+  return {
+    status: 500,
+    detail: "An unexpected error occurred.",
+    errors: []
+  };
+}
+__name(problemFromError, "problemFromError");
+
+// src/mcp/tool-registry.ts
+function _ts_decorate(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+    r = Reflect.decorate(decorators, target, key, desc);
+  } else {
+    for (var i = decorators.length - 1; i >= 0; i--) {
+      if (d = decorators[i]) {
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+      }
+    }
+  }
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate, "_ts_decorate");
+function _ts_metadata(metadataKey, metadataValue) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+    return Reflect.metadata(metadataKey, metadataValue);
+  }
+}
+__name(_ts_metadata, "_ts_metadata");
+var TOOL_NAME_PATTERN = /^[a-zA-Z0-9_-]{1,64}$/;
+var ToolRegistry = class _ToolRegistry {
+  static {
+    __name(this, "ToolRegistry");
+  }
+  discovery;
+  reflector;
+  logger = new Logger2(_ToolRegistry.name);
+  definitions = /* @__PURE__ */ new Map();
+  catalog = [];
+  constructor(discovery, reflector) {
+    this.discovery = discovery;
+    this.reflector = reflector;
+  }
+  // After every module has initialised, so providers from any module are instantiated and discoverable
+  onApplicationBootstrap() {
+    for (const provider of this.findProviders()) {
+      for (const definition of provider.tools()) this.register(definition);
+    }
+    this.catalog = [
+      ...this.definitions.values()
+    ].map((definition) => this.toCatalogEntry(definition));
+    this.logger.log(`Registered ${this.catalog.length} MCP tools`);
+  }
+  listTools() {
+    return this.catalog;
+  }
+  // Every REST operation the tools stand in for — a coverage test compares this with the live route set
+  coveredOperationIds() {
+    return [
+      ...this.definitions.values()
+    ].flatMap((definition) => [
+      ...definition.covers
+    ]);
+  }
+  async execute(name, rawArgs, principal) {
+    const started = Date.now();
+    const definition = this.definitions.get(name);
+    if (!definition) {
+      return toolError({
+        status: 404,
+        label: "Unknown Tool",
+        detail: `No tool named "${name}".`,
+        errors: []
+      });
+    }
+    let status = 200;
+    let result;
+    if (!principal.hasScope(definition.requiredScope)) {
+      status = 403;
+      result = toolError({
+        status,
+        label: "Insufficient Scope",
+        detail: `Tool "${name}" requires the ${definition.requiredScope} scope. Reconnect the client and grant it.`,
+        errors: []
+      });
+    } else {
+      try {
+        const args = definition.inputSchema.parse(rawArgs ?? {});
+        result = toolOk(await definition.handler(principal, args));
+      } catch (error) {
+        const problem = problemFromError(error);
+        status = problem.status;
+        result = toolError(problem);
+      }
+    }
+    this.logger.log(`mcp tool=${name} user=${principal.userId} grant=${principal.grantId ?? "-"} client=${principal.clientId ?? "-"} scope=${definition.requiredScope} ok=${status < 400} status=${status} ms=${Date.now() - started}`);
+    return result;
+  }
+  findProviders() {
+    return this.discovery.getProviders().filter((wrapper) => typeof wrapper.metatype === "function" && wrapper.instance).filter((wrapper) => this.reflector.get(MCP_TOOL_PROVIDER_KEY, wrapper.metatype) === true).map((wrapper) => wrapper.instance);
+  }
+  register(definition) {
+    if (!TOOL_NAME_PATTERN.test(definition.name)) {
+      throw new Error(`MCP tool name "${definition.name}" is invalid (letters, digits, _ and -, max 64 chars).`);
+    }
+    if (this.definitions.has(definition.name)) {
+      throw new Error(`MCP tool "${definition.name}" is registered twice.`);
+    }
+    this.definitions.set(definition.name, definition);
+  }
+  toCatalogEntry(definition) {
+    return {
+      name: definition.name,
+      title: definition.title,
+      description: definition.description,
+      inputSchema: this.toInputSchema(definition),
+      annotations: {
+        title: definition.title,
+        readOnlyHint: definition.annotations.readOnlyHint,
+        destructiveHint: definition.annotations.destructiveHint,
+        idempotentHint: definition.annotations.idempotentHint,
+        openWorldHint: false
+      }
+    };
+  }
+  // MCP wants a bare JSON Schema object at the root; zod adds a $schema marker the catalog does not need
+  toInputSchema(definition) {
+    const schema = z.toJSONSchema(definition.inputSchema, {
+      io: "input"
+    });
+    delete schema.$schema;
+    if (schema.type !== "object") {
+      throw new Error(`MCP tool "${definition.name}" must declare an object input schema.`);
+    }
+    return schema;
+  }
+};
+ToolRegistry = _ts_decorate([
+  Injectable(),
+  _ts_metadata("design:type", Function),
+  _ts_metadata("design:paramtypes", [
+    typeof DiscoveryService === "undefined" ? Object : DiscoveryService,
+    typeof Reflector === "undefined" ? Object : Reflector
+  ])
+], ToolRegistry);
+
+// src/mcp/mcp-server.factory.ts
+function _ts_decorate2(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+    r = Reflect.decorate(decorators, target, key, desc);
+  } else {
+    for (var i = decorators.length - 1; i >= 0; i--) {
+      if (d = decorators[i]) {
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+      }
+    }
+  }
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate2, "_ts_decorate");
+function _ts_metadata2(metadataKey, metadataValue) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+    return Reflect.metadata(metadataKey, metadataValue);
+  }
+}
+__name(_ts_metadata2, "_ts_metadata");
+function _ts_param(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param, "_ts_param");
+var McpServerFactory = class {
+  static {
+    __name(this, "McpServerFactory");
+  }
+  options;
+  toolRegistry;
+  constructor(options, toolRegistry) {
+    this.options = options;
+    this.toolRegistry = toolRegistry;
+  }
+  create(principal) {
+    const server = new Server({
+      name: this.options.name,
+      version: this.options.version
+    }, {
+      capabilities: {
+        tools: {}
+      },
+      instructions: this.options.instructions
+    });
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({
+      tools: this.toolRegistry.listTools()
+    }));
+    server.setRequestHandler(CallToolRequestSchema, async (request) => this.toolRegistry.execute(request.params.name, request.params.arguments, principal));
+    return server;
+  }
+};
+McpServerFactory = _ts_decorate2([
+  Injectable2(),
+  _ts_param(0, Inject(MCP_SERVER_OPTIONS)),
+  _ts_metadata2("design:type", Function),
+  _ts_metadata2("design:paramtypes", [
+    typeof McpServerOptions === "undefined" ? Object : McpServerOptions,
+    typeof ToolRegistry === "undefined" ? Object : ToolRegistry
+  ])
+], McpServerFactory);
+
+// src/mcp/mcp-transport.factory.ts
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+import { Injectable as Injectable3 } from "@nestjs/common";
+function _ts_decorate3(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+    r = Reflect.decorate(decorators, target, key, desc);
+  } else {
+    for (var i = decorators.length - 1; i >= 0; i--) {
+      if (d = decorators[i]) {
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+      }
+    }
+  }
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate3, "_ts_decorate");
+var McpTransportFactory = class {
+  static {
+    __name(this, "McpTransportFactory");
+  }
+  create() {
+    return new StreamableHTTPServerTransport({
+      sessionIdGenerator: void 0,
+      enableJsonResponse: true
+    });
+  }
+};
+McpTransportFactory = _ts_decorate3([
+  Injectable3()
+], McpTransportFactory);
+
+// src/mcp/mcp-request.handler.ts
+function _ts_decorate4(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+    r = Reflect.decorate(decorators, target, key, desc);
+  } else {
+    for (var i = decorators.length - 1; i >= 0; i--) {
+      if (d = decorators[i]) {
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+      }
+    }
+  }
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate4, "_ts_decorate");
+function _ts_metadata3(metadataKey, metadataValue) {
+  if (typeof Reflect === "object" && typeof Reflect.metadata === "function") {
+    return Reflect.metadata(metadataKey, metadataValue);
+  }
+}
+__name(_ts_metadata3, "_ts_metadata");
+function _ts_param2(paramIndex, decorator) {
+  return function(target, key) {
+    decorator(target, key, paramIndex);
+  };
+}
+__name(_ts_param2, "_ts_param");
+var McpRequestHandler = class {
+  static {
+    __name(this, "McpRequestHandler");
+  }
+  serverFactory;
+  transportFactory;
+  principalFactory;
+  constructor(serverFactory, transportFactory, principalFactory) {
+    this.serverFactory = serverFactory;
+    this.transportFactory = transportFactory;
+    this.principalFactory = principalFactory;
+  }
+  async handle(request, reply, body) {
+    const principal = this.principalFactory(request);
+    reply.hijack();
+    const transport = this.transportFactory.create();
+    const server = this.serverFactory.create(principal);
+    reply.raw.on("close", () => {
+      void transport.close();
+      void server.close();
+    });
+    await server.connect(transport);
+    await transport.handleRequest(request.raw, reply.raw, body);
+  }
+  // The JSON-RPC answer for verbs a stateless server does not serve (GET streams, DELETE session teardown)
+  methodNotAllowed(reply) {
+    reply.status(405).header("Allow", "POST").send({
+      jsonrpc: "2.0",
+      error: {
+        code: -32e3,
+        message: "Method not allowed."
+      },
+      id: null
+    });
+  }
+};
+McpRequestHandler = _ts_decorate4([
+  Injectable4(),
+  _ts_param2(2, Inject2(MCP_PRINCIPAL_FACTORY)),
+  _ts_metadata3("design:type", Function),
+  _ts_metadata3("design:paramtypes", [
+    typeof McpServerFactory === "undefined" ? Object : McpServerFactory,
+    typeof McpTransportFactory === "undefined" ? Object : McpTransportFactory,
+    typeof McpPrincipalFactory === "undefined" ? Object : McpPrincipalFactory
+  ])
+], McpRequestHandler);
+
+// src/mcp/mcp-schema-registry.ts
+import { Injectable as Injectable5 } from "@nestjs/common";
+function _ts_decorate5(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+    r = Reflect.decorate(decorators, target, key, desc);
+  } else {
+    for (var i = decorators.length - 1; i >= 0; i--) {
+      if (d = decorators[i]) {
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+      }
+    }
+  }
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate5, "_ts_decorate");
+var COMPONENT_REF = "#/components/schemas/";
+var McpSchemaRegistry = class {
+  static {
+    __name(this, "McpSchemaRegistry");
+  }
+  schemas = {};
+  setDocument(document) {
+    this.schemas = document.components?.schemas ?? {};
+  }
+  // The schema for a DTO class, with its component references inlined as local $defs
+  schemaFor(dto) {
+    const root = this.schemas[dto.name];
+    if (!root) return {
+      type: "object",
+      description: `The schema for ${dto.name} is unavailable.`
+    };
+    const defs = {};
+    const rewritten = this.rewrite(root, defs);
+    return Object.keys(defs).length > 0 ? {
+      ...rewritten,
+      $defs: defs
+    } : rewritten;
+  }
+  rewrite(node, defs) {
+    if (Array.isArray(node)) return node.map((item) => this.rewrite(item, defs));
+    if (typeof node !== "object" || node === null) return node;
+    const record = node;
+    if (typeof record.$ref === "string" && record.$ref.startsWith(COMPONENT_REF)) {
+      const name = record.$ref.slice(COMPONENT_REF.length);
+      if (!(name in defs)) {
+        defs[name] = {};
+        defs[name] = this.rewrite(this.schemas[name] ?? {}, defs);
+      }
+      return {
+        $ref: `#/$defs/${name}`
+      };
+    }
+    const out = {};
+    for (const [key, value] of Object.entries(record)) out[key] = this.rewrite(value, defs);
+    return out;
+  }
+};
+McpSchemaRegistry = _ts_decorate5([
+  Injectable5()
+], McpSchemaRegistry);
+
+// src/mcp/mcp.module.ts
+function _ts_decorate6(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") {
+    r = Reflect.decorate(decorators, target, key, desc);
+  } else {
+    for (var i = decorators.length - 1; i >= 0; i--) {
+      if (d = decorators[i]) {
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+      }
+    }
+  }
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate6, "_ts_decorate");
+var McpModule = class _McpModule {
+  static {
+    __name(this, "McpModule");
+  }
+  static forRoot(options) {
+    const serverOptions = {
+      name: options.name,
+      version: options.version,
+      instructions: options.instructions
+    };
+    return {
+      module: _McpModule,
+      imports: [
+        DiscoveryModule
+      ],
+      providers: [
+        {
+          provide: MCP_SERVER_OPTIONS,
+          useValue: serverOptions
+        },
+        {
+          provide: MCP_PRINCIPAL_FACTORY,
+          useValue: options.principal ?? principalFromOAuth
+        },
+        McpTransportFactory,
+        McpServerFactory,
+        McpRequestHandler,
+        McpSchemaRegistry,
+        ToolRegistry
+      ],
+      exports: [
+        McpRequestHandler,
+        McpSchemaRegistry,
+        ToolRegistry
+      ]
+    };
+  }
+};
+McpModule = _ts_decorate6([
+  Module({})
+], McpModule);
+
+// src/mcp/validate-dto.ts
+import { plainToInstance } from "class-transformer";
+import { validate } from "class-validator";
+var McpValidationError = class extends BadRequestException {
+  static {
+    __name(this, "McpValidationError");
+  }
+  constructor(errors) {
+    super({
+      label: "Validation Failed",
+      detail: "Please check your input and try again.",
+      errors
+    });
+  }
+};
+function flattenValidationErrors(errors, parent = "") {
+  return errors.flatMap((error) => {
+    const field = parent ? `${parent}.${error.property}` : error.property;
+    const own = Object.values(error.constraints ?? {}).map((message) => ({
+      field,
+      message
+    }));
+    const nested = error.children?.length ? flattenValidationErrors(error.children, field) : [];
+    return [
+      ...own,
+      ...nested
+    ];
+  });
+}
+__name(flattenValidationErrors, "flattenValidationErrors");
+async function validateDto(cls, input) {
+  const instance = plainToInstance(cls, input ?? {}, {
+    enableImplicitConversion: true
+  });
+  const errors = await validate(instance, {
+    whitelist: true,
+    forbidNonWhitelisted: true
+  });
+  if (errors.length > 0) throw new McpValidationError(flattenValidationErrors(errors));
+  return instance;
+}
+__name(validateDto, "validateDto");
+export {
+  MCP_PRINCIPAL_FACTORY,
+  MCP_SERVER_OPTIONS,
+  MCP_TOOL_PROVIDER_KEY,
+  McpModule,
+  McpPrincipal,
+  McpRequestHandler,
+  McpSchemaRegistry,
+  McpServerFactory,
+  McpTools,
+  McpTransportFactory,
+  McpValidationError,
+  ToolRegistry,
+  collectOperationIds,
+  defineTool,
+  principalFromOAuth,
+  problemFromError,
+  toolError,
+  toolOk,
+  validateDto
+};
+//# sourceMappingURL=mcp.js.map