jxp 4.1.1 → 5.0.0

package/dist/libs/mcp/describe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"describe.js","sourceRoot":"","sources":["../../../src/libs/mcp/describe.ts"],"names":[],"mappings":";;AAaA,8CAkCC;AA9CD,0DAAqD;AAYrD,SAAgB,iBAAiB,CAAC,IAAY,EAAE,KAAqB;IACpE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,MAAM,UAAU,GAAsD,EAAE,CAAC;IACzE,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,gBAAgB,GAAa,EAAE,CAAC;IAEtC,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3C,UAAU,CAAC,SAAS,CAAC,GAAG,IAAA,iCAAc,EAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACzB,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;YACxD,MAAM,WAAW,GAAG,MAAM,CACzB,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAC9E,CAAC;YACF,aAAa,CAAC,IAAI,CAAC,YAAY,SAAS,YAAY,CAAC,CAAC;YACtD,aAAa,CAAC,IAAI,CAAC,YAAY,WAAW,YAAY,CAAC,CAAC;QACzD,CAAC;IACF,CAAC;IAED,OAAO;QACN,IAAI;QACJ,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI;QACjC,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,UAAU;QAClB,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3C,iBAAiB,EAAE,gBAAgB;QACnC,KAAK,EAAE;YACN,oEAAoE;YACpE,wFAAwF;YACxF,sDAAsD;SACtD;KACD,CAAC;AACH,CAAC"}

package/dist/libs/mcp/docs_auth.d.ts

@@ -0,0 +1,5 @@
+import type { JXPRequest } from "../../types/jxp-config";
+import type { McpAuthContext } from "./model_visibility";
+/** Resolve MCP auth for docs playground: navbar key, then HttpOnly session. */
+export declare function authenticateDocsMcpRequest(req: JXPRequest): Promise<McpAuthContext>;
+//# sourceMappingURL=docs_auth.d.ts.map

package/dist/libs/mcp/docs_auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs_auth.d.ts","sourceRoot":"","sources":["../../../src/libs/mcp/docs_auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AASzD,+EAA+E;AAC/E,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC,CAmBzF"}

package/dist/libs/mcp/docs_auth.js

@@ -0,0 +1,36 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authenticateDocsMcpRequest = authenticateDocsMcpRequest;
+const restify_errors_1 = __importDefault(require("restify-errors"));
+const docs_auth_1 = require("../docs-auth");
+const auth_1 = require("./auth");
+const config_1 = require("./config");
+function headerApiKey(req) {
+    const raw = req.headers["x-api-key"];
+    if (Array.isArray(raw))
+        return raw[0]?.trim() || undefined;
+    return typeof raw === "string" && raw.trim() ? raw.trim() : undefined;
+}
+/** Resolve MCP auth for docs playground: navbar key, then HttpOnly session. */
+async function authenticateDocsMcpRequest(req) {
+    const mcpConfig = (0, config_1.getMcpConfig)();
+    const fromHeader = headerApiKey(req);
+    if (fromHeader) {
+        req.headers["x-api-key"] = fromHeader;
+        return (0, auth_1.authenticateMcpRequest)(req, mcpConfig.requireApiKey);
+    }
+    const session = req.docsSession
+        ?? (0, docs_auth_1.verifyDocsSession)(req);
+    if (session?.apikey) {
+        req.headers["x-api-key"] = session.apikey;
+        return (0, auth_1.authenticateMcpRequest)(req, mcpConfig.requireApiKey);
+    }
+    if (mcpConfig.requireApiKey) {
+        throw new restify_errors_1.default.UnauthorizedError("API key required (top bar or sign in)");
+    }
+    return (0, auth_1.authenticateMcpRequest)(req, false);
+}
+//# sourceMappingURL=docs_auth.js.map

package/dist/libs/mcp/docs_auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs_auth.js","sourceRoot":"","sources":["../../../src/libs/mcp/docs_auth.ts"],"names":[],"mappings":";;;;;AAcA,gEAmBC;AAjCD,oEAAoC;AAEpC,4CAAiD;AACjD,iCAAgD;AAEhD,qCAAwC;AAExC,SAAS,YAAY,CAAC,GAAe;IACpC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC3D,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,+EAA+E;AACxE,KAAK,UAAU,0BAA0B,CAAC,GAAe;IAC/D,MAAM,SAAS,GAAG,IAAA,qBAAY,GAAE,CAAC;IACjC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,UAAU,EAAE,CAAC;QAChB,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,UAAU,CAAC;QACtC,OAAO,IAAA,6BAAsB,EAAC,GAAqD,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;IAC/G,CAAC;IAED,MAAM,OAAO,GAAI,GAAyD,CAAC,WAAW;WAClF,IAAA,6BAAiB,EAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACrB,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;QAC1C,OAAO,IAAA,6BAAsB,EAAC,GAAqD,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;IAC/G,CAAC;IAED,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC;QAC7B,MAAM,IAAI,wBAAM,CAAC,iBAAiB,CAAC,uCAAuC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,IAAA,6BAAsB,EAAC,GAAqD,EAAE,KAAK,CAAC,CAAC;AAC7F,CAAC"}

package/dist/libs/mcp/dynamic_import.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Load ESM-only packages from CommonJS output without TypeScript rewriting
+ * `import()` to `require()` (which breaks @modelcontextprotocol/* v2).
+ */
+export declare function dynamicImport<T = Record<string, unknown>>(specifier: string): Promise<T>;
+//# sourceMappingURL=dynamic_import.d.ts.map

package/dist/libs/mcp/dynamic_import.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamic_import.d.ts","sourceRoot":"","sources":["../../../src/libs/mcp/dynamic_import.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAGxF"}

package/dist/libs/mcp/dynamic_import.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dynamicImport = dynamicImport;
+/**
+ * Load ESM-only packages from CommonJS output without TypeScript rewriting
+ * `import()` to `require()` (which breaks @modelcontextprotocol/* v2).
+ */
+function dynamicImport(specifier) {
+    const fn = new Function("specifier", "return import(specifier)");
+    return fn(specifier);
+}
+//# sourceMappingURL=dynamic_import.js.map

package/dist/libs/mcp/dynamic_import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamic_import.js","sourceRoot":"","sources":["../../../src/libs/mcp/dynamic_import.ts"],"names":[],"mappings":";;AAIA,sCAGC;AAPD;;;GAGG;AACH,SAAgB,aAAa,CAA8B,SAAiB;IAC3E,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAA8B,CAAC;IAC9F,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;AACtB,CAAC"}

package/dist/libs/mcp/execute_tool.d.ts

@@ -0,0 +1,10 @@
+import type { JXPConfig } from "../../types/jxp-config";
+import type { ModelRegistry } from "../builtin_models";
+import { type McpAuthContext } from "./model_visibility";
+export type McpToolResult = {
+    text: string;
+    isError?: boolean;
+};
+export declare function isAllowedMcpTool(name: string): boolean;
+export declare function executeMcpTool(name: string, args: Record<string, unknown>, config: JXPConfig, models: ModelRegistry, auth: McpAuthContext): Promise<McpToolResult>;
+//# sourceMappingURL=execute_tool.d.ts.map

package/dist/libs/mcp/execute_tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute_tool.d.ts","sourceRoot":"","sources":["../../../src/libs/mcp/execute_tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAIvD,OAAO,EAA4C,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGnG,MAAM,MAAM,aAAa,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAUhE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED,wBAAsB,cAAc,CACnC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,cAAc,GAClB,OAAO,CAAC,aAAa,CAAC,CAyDxB"}

package/dist/libs/mcp/execute_tool.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isAllowedMcpTool = isAllowedMcpTool;
+exports.executeMcpTool = executeMcpTool;
+const config_1 = require("./config");
+const context_1 = require("./context");
+const describe_1 = require("./describe");
+const model_visibility_1 = require("./model_visibility");
+const read_service_1 = require("./read_service");
+const ALLOWED_TOOLS = new Set([
+    "jxp_list_models",
+    "jxp_describe_model",
+    "jxp_find",
+    "jxp_count",
+    "jxp_export_csv",
+]);
+function isAllowedMcpTool(name) {
+    return ALLOWED_TOOLS.has(name);
+}
+async function executeMcpTool(name, args, config, models, auth) {
+    if (!isAllowedMcpTool(name)) {
+        return { text: `Unknown MCP tool: ${name}`, isError: true };
+    }
+    const mcpConfig = (0, config_1.getMcpConfig)();
+    try {
+        return await context_1.mcpAuthStorage.run(auth, async () => {
+            switch (name) {
+                case "jxp_list_models": {
+                    const list = await (0, model_visibility_1.listVisibleModels)(models, auth, mcpConfig);
+                    return { text: JSON.stringify(list, null, 2) };
+                }
+                case "jxp_describe_model": {
+                    const slug = String(args.model ?? "");
+                    if (!slug)
+                        throw new Error("model is required");
+                    const Model = models[slug];
+                    if (!Model)
+                        throw new Error(`Model "${slug}" not found`);
+                    await (0, model_visibility_1.assertModelVisibleMcp)(slug, Model, auth, mcpConfig);
+                    return { text: JSON.stringify((0, describe_1.describeModelJson)(slug, Model), null, 2) };
+                }
+                case "jxp_find": {
+                    const result = await (0, read_service_1.mcpFind)(models, config, auth, args);
+                    return {
+                        text: typeof result === "string" ? result : JSON.stringify(result, null, 2),
+                    };
+                }
+                case "jxp_count": {
+                    const result = await (0, read_service_1.mcpCount)(models, config, auth, args);
+                    return { text: JSON.stringify(result, null, 2) };
+                }
+                case "jxp_export_csv": {
+                    const csv = await (0, read_service_1.mcpExportCsv)(models, config, auth, args);
+                    return { text: csv };
+                }
+                default:
+                    return { text: `Unknown MCP tool: ${name}`, isError: true };
+            }
+        });
+    }
+    catch (err) {
+        return { text: err instanceof Error ? err.message : String(err), isError: true };
+    }
+}
+//# sourceMappingURL=execute_tool.js.map

package/dist/libs/mcp/execute_tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute_tool.js","sourceRoot":"","sources":["../../../src/libs/mcp/execute_tool.ts"],"names":[],"mappings":";;AAkBA,4CAEC;AAED,wCA+DC;AAnFD,qCAAwC;AACxC,uCAA2C;AAC3C,yCAA+C;AAC/C,yDAAmG;AACnG,iDAAiE;AAIjE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC7B,iBAAiB;IACjB,oBAAoB;IACpB,UAAU;IACV,WAAW;IACX,gBAAgB;CAChB,CAAC,CAAC;AAEH,SAAgB,gBAAgB,CAAC,IAAY;IAC5C,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAEM,KAAK,UAAU,cAAc,CACnC,IAAY,EACZ,IAA6B,EAC7B,MAAiB,EACjB,MAAqB,EACrB,IAAoB;IAEpB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7D,CAAC;IAED,MAAM,SAAS,GAAG,IAAA,qBAAY,GAAE,CAAC;IACjC,IAAI,CAAC;QACJ,OAAO,MAAM,wBAAc,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YAChD,QAAQ,IAAI,EAAE,CAAC;gBACd,KAAK,iBAAiB,CAAC,CAAC,CAAC;oBACxB,MAAM,IAAI,GAAG,MAAM,IAAA,oCAAiB,EAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;oBAC9D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBAChD,CAAC;gBACD,KAAK,oBAAoB,CAAC,CAAC,CAAC;oBAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;oBACtC,IAAI,CAAC,IAAI;wBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;oBAChD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC3B,IAAI,CAAC,KAAK;wBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,aAAa,CAAC,CAAC;oBACzD,MAAM,IAAA,wCAAqB,EAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;oBAC1D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAA,4BAAiB,EAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC1E,CAAC;gBACD,KAAK,UAAU,CAAC,CAAC,CAAC;oBACjB,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAO,EAC3B,MAAM,EACN,MAAM,EACN,IAAI,EACJ,IAAgD,CAChD,CAAC;oBACF,OAAO;wBACN,IAAI,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC3E,CAAC;gBACH,CAAC;gBACD,KAAK,WAAW,CAAC,CAAC,CAAC;oBAClB,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAQ,EAC5B,MAAM,EACN,MAAM,EACN,IAAI,EACJ,IAAiD,CACjD,CAAC;oBACF,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBAClD,CAAC;gBACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;oBACvB,MAAM,GAAG,GAAG,MAAM,IAAA,2BAAY,EAC7B,MAAM,EACN,MAAM,EACN,IAAI,EACJ,IAAqD,CACrD,CAAC;oBACF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;gBACtB,CAAC;gBACD;oBACC,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC9D,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClF,CAAC;AACF,CAAC"}

package/dist/libs/mcp/guides/default.md

@@ -0,0 +1,67 @@
+# JXP MCP usage guide
+
+Read-only access to JXP REST data via five fixed tools. Permissions match the authenticated user's API key.
+
+## Workflow
+
+1. **`jxp_list_models`** — discover model slugs available to this caller.
+2. **`jxp_describe_model`** — field types, indexed/filterable fields, link/populate hints.
+3. **`jxp_count`** — check result size before fetching (especially large collections).
+4. **`jxp_find`** — list or get by `id`; always set `fields` and a low `limit`.
+5. **`jxp_export_csv`** — small CSV exports when JSON is awkward; no populate.
+
+Never guess model names. Never fetch large collections without `fields` and `limit`.
+
+## Query parameters (jxp_find / jxp_count / jxp_export_csv)
+
+### filter
+
+Mongo-style filter object. Examples:
+
+```json
+{ "filter": { "email": "user@example.com" } }
+{ "filter": { "created": { "$gte": "2024-01-01" } } }
+{ "filter": { "status": { "$in": ["active", "trial"] } } }
+```
+
+Use `jxp_describe_model` to see indexed fields worth filtering on.
+
+### search
+
+Full-text or field search (same as REST `?search=`).
+
+### populate
+
+Link expansion: `"populate[user]=name,email"` or object `{ "user": "name,email" }`.
+Autopopulate is disabled for MCP by default (`MCP_DISABLE_AUTOPOPULATE=true`).
+
+### fields
+
+Comma-separated projection — **always use** for list queries:
+
+```json
+{ "model": "reader", "fields": "_id,email,name", "limit": 10 }
+```
+
+### sort, limit, page, skip
+
+- `limit` — defaults to MCP default; hard-capped at MCP max.
+- `page` / `skip` — pagination.
+- `sort` — e.g. `-created` for newest first.
+
+## Limits and safety
+
+- MCP enforces stricter limits than HTTP (`MCP_DEFAULT_LIMIT`, `MCP_MAX_LIMIT`).
+- JSON responses are capped (`MCP_MAX_RESPONSE_SIZE`); long strings are truncated.
+- CSV exports are capped (`MCP_MAX_CSV_SIZE`).
+- **Read-only** — no create, update, delete, aggregate, or stored procedures via MCP.
+
+## Hidden models
+
+Built-in auth collections (`user`, `apikey`, `token`, etc.) and `internal: true` schemas are hidden unless whitelisted via `MCP_MODEL_WHITELIST`. Blacklist always wins.
+
+## Single document by id
+
+```json
+{ "model": "reader", "id": "507f1f77bcf86cd799439011" }
+```

package/dist/libs/mcp/guides.d.ts

@@ -0,0 +1,14 @@
+import type { JXPConfig } from "../../types/jxp-config";
+import type { McpConfig } from "./config";
+export declare const MCP_GUIDE_URI = "jxp://guide";
+export declare const MCP_GUIDE_RESOURCE_NAME = "jxp-guide";
+export interface McpGuideContext {
+    config: JXPConfig;
+    mcpConfig: McpConfig;
+}
+export declare function loadGuideFiles(paths: string[]): string[];
+export declare function buildMcpGuideMarkdown(ctx: McpGuideContext): string;
+export declare function buildMcpInstructions(ctx: McpGuideContext): string;
+/** Clear cached guide (for tests). */
+export declare function clearMcpGuideCache(): void;
+//# sourceMappingURL=guides.d.ts.map

package/dist/libs/mcp/guides.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guides.d.ts","sourceRoot":"","sources":["../../../src/libs/mcp/guides.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE1C,eAAO,MAAM,aAAa,gBAAgB,CAAC;AAC3C,eAAO,MAAM,uBAAuB,cAAc,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC/B,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,SAAS,CAAC;CACrB;AA8BD,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAkBxD;AAcD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,CAsBlE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,CA8BjE;AAED,sCAAsC;AACtC,wBAAgB,kBAAkB,IAAI,IAAI,CAGzC"}

package/dist/libs/mcp/guides.js

@@ -0,0 +1,127 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MCP_GUIDE_RESOURCE_NAME = exports.MCP_GUIDE_URI = void 0;
+exports.loadGuideFiles = loadGuideFiles;
+exports.buildMcpGuideMarkdown = buildMcpGuideMarkdown;
+exports.buildMcpInstructions = buildMcpInstructions;
+exports.clearMcpGuideCache = clearMcpGuideCache;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+exports.MCP_GUIDE_URI = "jxp://guide";
+exports.MCP_GUIDE_RESOURCE_NAME = "jxp-guide";
+let cachedGuideMarkdown = null;
+let cachedGuideKey = null;
+function resolveGuidePath(filePath) {
+    if (path_1.default.isAbsolute(filePath))
+        return filePath;
+    return path_1.default.resolve(process.cwd(), filePath);
+}
+function defaultGuidePath() {
+    return path_1.default.join(__dirname, "guides", "default.md");
+}
+function collectGuideFilePaths(config) {
+    const paths = [];
+    const fromConfig = config.mcp?.guideFiles || [];
+    for (const p of fromConfig) {
+        if (p?.trim())
+            paths.push(p.trim());
+    }
+    const fromEnv = process.env.MCP_GUIDE_FILES?.trim();
+    if (fromEnv) {
+        for (const p of fromEnv.split(",")) {
+            const t = p.trim();
+            if (t)
+                paths.push(t);
+        }
+    }
+    return paths;
+}
+function loadGuideFiles(paths) {
+    const parts = [];
+    const defaultPath = defaultGuidePath();
+    if (fs_1.default.existsSync(defaultPath)) {
+        parts.push(fs_1.default.readFileSync(defaultPath, "utf8"));
+    }
+    else {
+        console.warn(new Date(), `MCP default guide not found at ${defaultPath}`);
+    }
+    for (const filePath of paths) {
+        const resolved = resolveGuidePath(filePath);
+        try {
+            parts.push(fs_1.default.readFileSync(resolved, "utf8"));
+        }
+        catch {
+            console.warn(new Date(), `MCP guide file not found: ${resolved}`);
+        }
+    }
+    return parts;
+}
+function guideCacheKey(ctx) {
+    return JSON.stringify({
+        files: collectGuideFilePaths(ctx.config),
+        append: process.env.MCP_INSTRUCTIONS_APPEND || "",
+        appInstructions: ctx.config.mcp?.instructions || "",
+        limits: {
+            default: ctx.mcpConfig.defaultLimit,
+            max: ctx.mcpConfig.maxLimit,
+        },
+    });
+}
+function buildMcpGuideMarkdown(ctx) {
+    const key = guideCacheKey(ctx);
+    if (cachedGuideMarkdown !== null && cachedGuideKey === key) {
+        return cachedGuideMarkdown;
+    }
+    const parts = loadGuideFiles(collectGuideFilePaths(ctx.config));
+    const runtime = [
+        "",
+        "## Runtime limits",
+        "",
+        `- Default \`limit\`: ${ctx.mcpConfig.defaultLimit}`,
+        `- Max \`limit\`: ${ctx.mcpConfig.maxLimit}`,
+        `- Max JSON response: ${ctx.mcpConfig.maxResponseBytes} bytes`,
+        `- Max CSV response: ${ctx.mcpConfig.maxCsvBytes} bytes`,
+        `- String truncation at: ${ctx.mcpConfig.truncateStringsAt} characters`,
+        "",
+    ];
+    cachedGuideMarkdown = [...parts, runtime.join("\n")].filter(Boolean).join("\n\n---\n\n");
+    cachedGuideKey = key;
+    return cachedGuideMarkdown;
+}
+function buildMcpInstructions(ctx) {
+    const { mcpConfig } = ctx;
+    const lines = [
+        "You have read-only access to a JXP REST API via MCP tools.",
+        "",
+        "Required workflow:",
+        "1. jxp_list_models — discover available model slugs for this user.",
+        "2. jxp_describe_model — inspect fields, filters, and populate hints before querying.",
+        "3. jxp_count — estimate result size on large collections before jxp_find.",
+        "4. jxp_find — use fields + low limit; pass id for a single document.",
+        "5. jxp_export_csv — small tabular exports only (no populate).",
+        "",
+        `Limits: default limit ${mcpConfig.defaultLimit}, max ${mcpConfig.maxLimit}. Responses are size-capped; strings may be truncated.`,
+        "Filter syntax matches MongoDB ($gte, $in, $regex, etc.). Use populate[field]=a,b for links.",
+        "Do not mutate data — MCP is read-only.",
+        "",
+        "For the full guide, read MCP resource jxp-guide (uri jxp://guide).",
+    ];
+    const appInstructions = ctx.config.mcp?.instructions?.trim();
+    if (appInstructions) {
+        lines.push("", appInstructions);
+    }
+    const envAppend = process.env.MCP_INSTRUCTIONS_APPEND?.trim();
+    if (envAppend) {
+        lines.push("", envAppend);
+    }
+    return lines.join("\n");
+}
+/** Clear cached guide (for tests). */
+function clearMcpGuideCache() {
+    cachedGuideMarkdown = null;
+    cachedGuideKey = null;
+}
+//# sourceMappingURL=guides.js.map

package/dist/libs/mcp/guides.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guides.js","sourceRoot":"","sources":["../../../src/libs/mcp/guides.ts"],"names":[],"mappings":";;;;;;AAyCA,wCAkBC;AAcD,sDAsBC;AAED,oDA8BC;AAGD,gDAGC;AArID,4CAAoB;AACpB,gDAAwB;AAIX,QAAA,aAAa,GAAG,aAAa,CAAC;AAC9B,QAAA,uBAAuB,GAAG,WAAW,CAAC;AAOnD,IAAI,mBAAmB,GAAkB,IAAI,CAAC;AAC9C,IAAI,cAAc,GAAkB,IAAI,CAAC;AAEzC,SAAS,gBAAgB,CAAC,QAAgB;IACzC,IAAI,cAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC/C,OAAO,cAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,gBAAgB;IACxB,OAAO,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAiB;IAC/C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,EAAE,UAAU,IAAI,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,EAAE,IAAI,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,OAAO,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAgB,cAAc,CAAC,KAAe;IAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,WAAW,GAAG,gBAAgB,EAAE,CAAC;IACvC,IAAI,YAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,YAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACP,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,kCAAkC,WAAW,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC;YACJ,KAAK,CAAC,IAAI,CAAC,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,6BAA6B,QAAQ,EAAE,CAAC,CAAC;QACnE,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,GAAoB;IAC1C,OAAO,IAAI,CAAC,SAAS,CAAC;QACrB,KAAK,EAAE,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC;QACxC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,EAAE;QACjD,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,IAAI,EAAE;QACnD,MAAM,EAAE;YACP,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,YAAY;YACnC,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ;SAC3B;KACD,CAAC,CAAC;AACJ,CAAC;AAED,SAAgB,qBAAqB,CAAC,GAAoB;IACzD,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,mBAAmB,KAAK,IAAI,IAAI,cAAc,KAAK,GAAG,EAAE,CAAC;QAC5D,OAAO,mBAAmB,CAAC;IAC5B,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG;QACf,EAAE;QACF,mBAAmB;QACnB,EAAE;QACF,wBAAwB,GAAG,CAAC,SAAS,CAAC,YAAY,EAAE;QACpD,oBAAoB,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE;QAC5C,wBAAwB,GAAG,CAAC,SAAS,CAAC,gBAAgB,QAAQ;QAC9D,uBAAuB,GAAG,CAAC,SAAS,CAAC,WAAW,QAAQ;QACxD,2BAA2B,GAAG,CAAC,SAAS,CAAC,iBAAiB,aAAa;QACvE,EAAE;KACF,CAAC;IAEF,mBAAmB,GAAG,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACzF,cAAc,GAAG,GAAG,CAAC;IACrB,OAAO,mBAAmB,CAAC;AAC5B,CAAC;AAED,SAAgB,oBAAoB,CAAC,GAAoB;IACxD,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC;IAC1B,MAAM,KAAK,GAAG;QACb,4DAA4D;QAC5D,EAAE;QACF,oBAAoB;QACpB,oEAAoE;QACpE,sFAAsF;QACtF,2EAA2E;QAC3E,sEAAsE;QACtE,+DAA+D;QAC/D,EAAE;QACF,yBAAyB,SAAS,CAAC,YAAY,SAAS,SAAS,CAAC,QAAQ,wDAAwD;QAClI,6FAA6F;QAC7F,wCAAwC;QACxC,EAAE;QACF,oEAAoE;KACpE,CAAC;IAEF,MAAM,eAAe,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC7D,IAAI,eAAe,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,eAAe,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE,CAAC;IAC9D,IAAI,SAAS,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,sCAAsC;AACtC,SAAgB,kBAAkB;IACjC,mBAAmB,GAAG,IAAI,CAAC;IAC3B,cAAc,GAAG,IAAI,CAAC;AACvB,CAAC"}

package/dist/libs/mcp/model_visibility.d.ts

@@ -0,0 +1,31 @@
+import type { Model } from "mongoose";
+import type { ModelRegistry } from "../builtin_models";
+import type { McpConfig } from "./config";
+export interface McpAuthUser {
+    _id: unknown;
+    email?: string;
+    name?: string;
+    admin?: boolean;
+}
+export interface McpAuthContext {
+    user: McpAuthUser | null;
+    groups: string[];
+}
+export declare function isDefaultHiddenModel(slug: string, model: Model<unknown>, config: McpConfig): boolean;
+export declare function isVisibilityOverridden(slug: string, config: McpConfig): boolean;
+export declare function isBlacklisted(slug: string, config: McpConfig): boolean;
+export declare function canReadModel(auth: McpAuthContext, model: Model<unknown>, itemId?: string): Promise<boolean>;
+/**
+ * Whether a model should appear in MCP list/describe and accept read tools.
+ * Whitelist overrides default-hidden only; never grants read permission.
+ */
+export declare function isModelVisibleMcp(slug: string, model: Model<unknown>, auth: McpAuthContext, config: McpConfig, itemId?: string): Promise<boolean>;
+export declare function assertModelVisibleMcp(slug: string, model: Model<unknown>, auth: McpAuthContext, config: McpConfig, itemId?: string): Promise<void>;
+export declare function listVisibleModels(models: ModelRegistry, auth: McpAuthContext, config: McpConfig): Promise<{
+    slug: string;
+    collection: string;
+    permissions: {
+        read: boolean;
+    };
+}[]>;
+//# sourceMappingURL=model_visibility.d.ts.map

package/dist/libs/mcp/model_visibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model_visibility.d.ts","sourceRoot":"","sources":["../../../src/libs/mcp/model_visibility.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAI1C,MAAM,WAAW,WAAW;IAC3B,GAAG,EAAE,OAAO,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC9B,IAAI,EAAE,WAAW,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAGpG;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAE/E;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAEtE;AAED,wBAAsB,YAAY,CACjC,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EACrB,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACtC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EACrB,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,SAAS,EACjB,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED,wBAAsB,qBAAqB,CAC1C,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EACrB,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,SAAS,EACjB,MAAM,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,wBAAsB,iBAAiB,CACtC,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,SAAS,GACf,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE;QAAE,IAAI,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,EAAE,CAAC,CAcjF"}

package/dist/libs/mcp/model_visibility.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isDefaultHiddenModel = isDefaultHiddenModel;
+exports.isVisibilityOverridden = isVisibilityOverridden;
+exports.isBlacklisted = isBlacklisted;
+exports.canReadModel = canReadModel;
+exports.isModelVisibleMcp = isModelVisibleMcp;
+exports.assertModelVisibleMcp = assertModelVisibleMcp;
+exports.listVisibleModels = listVisibleModels;
+const builtin_models_1 = require("../builtin_models");
+const security = require("../security");
+function isDefaultHiddenModel(slug, model, config) {
+    if ((0, builtin_models_1.isInternalModel)(model))
+        return true;
+    return config.defaultHiddenModels.has(slug.toLowerCase());
+}
+function isVisibilityOverridden(slug, config) {
+    return config.modelWhitelist.has(slug.toLowerCase());
+}
+function isBlacklisted(slug, config) {
+    return config.modelBlacklist.has(slug.toLowerCase());
+}
+async function canReadModel(auth, model, itemId) {
+    try {
+        await security.check_perms(auth.user, auth.groups, model, "r", itemId);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Whether a model should appear in MCP list/describe and accept read tools.
+ * Whitelist overrides default-hidden only; never grants read permission.
+ */
+async function isModelVisibleMcp(slug, model, auth, config, itemId) {
+    if (!(await canReadModel(auth, model, itemId)))
+        return false;
+    if (isBlacklisted(slug, config))
+        return false;
+    if (isDefaultHiddenModel(slug, model, config) && !isVisibilityOverridden(slug, config)) {
+        return false;
+    }
+    return true;
+}
+async function assertModelVisibleMcp(slug, model, auth, config, itemId) {
+    const errors = require("restify-errors");
+    if (!(await canReadModel(auth, model, itemId))) {
+        throw new errors.ForbiddenError(`No read access to model "${slug}"`);
+    }
+    if (isBlacklisted(slug, config)) {
+        throw new errors.ForbiddenError(`Model "${slug}" is not available via MCP`);
+    }
+    if (isDefaultHiddenModel(slug, model, config) && !isVisibilityOverridden(slug, config)) {
+        throw new errors.NotFoundError(`Model "${slug}" not found`);
+    }
+}
+async function listVisibleModels(models, auth, config) {
+    const slugs = Object.keys(models).sort();
+    const out = [];
+    for (const slug of slugs) {
+        const model = models[slug];
+        if (await isModelVisibleMcp(slug, model, auth, config)) {
+            out.push({
+                slug,
+                collection: model.collection.name,
+                permissions: { read: true },
+            });
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=model_visibility.js.map

package/dist/libs/mcp/model_visibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model_visibility.js","sourceRoot":"","sources":["../../../src/libs/mcp/model_visibility.ts"],"names":[],"mappings":";;AAmBA,oDAGC;AAED,wDAEC;AAED,sCAEC;AAED,oCAWC;AAMD,8CAaC;AAED,sDAiBC;AAED,8CAkBC;AAnGD,sDAAoD;AAGpD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AAcxC,SAAgB,oBAAoB,CAAC,IAAY,EAAE,KAAqB,EAAE,MAAiB;IAC1F,IAAI,IAAA,gCAAe,EAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,MAAM,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED,SAAgB,sBAAsB,CAAC,IAAY,EAAE,MAAiB;IACrE,OAAO,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAgB,aAAa,CAAC,IAAY,EAAE,MAAiB;IAC5D,OAAO,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AACtD,CAAC;AAEM,KAAK,UAAU,YAAY,CACjC,IAAoB,EACpB,KAAqB,EACrB,MAAe;IAEf,IAAI,CAAC;QACJ,MAAM,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACvE,OAAO,IAAI,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,iBAAiB,CACtC,IAAY,EACZ,KAAqB,EACrB,IAAoB,EACpB,MAAiB,EACjB,MAAe;IAEf,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QACxF,OAAO,KAAK,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAEM,KAAK,UAAU,qBAAqB,CAC1C,IAAY,EACZ,KAAqB,EACrB,IAAoB,EACpB,MAAiB,EACjB,MAAe;IAEf,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,MAAM,CAAC,cAAc,CAAC,4BAA4B,IAAI,GAAG,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,MAAM,CAAC,cAAc,CAAC,UAAU,IAAI,4BAA4B,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,MAAM,CAAC,aAAa,CAAC,UAAU,IAAI,aAAa,CAAC,CAAC;IAC7D,CAAC;AACF,CAAC;AAEM,KAAK,UAAU,iBAAiB,CACtC,MAAqB,EACrB,IAAoB,EACpB,MAAiB;IAEjB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,GAAG,GAA2E,EAAE,CAAC;IACvF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,MAAM,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,IAAI,CAAC;gBACR,IAAI;gBACJ,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI;gBACjC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;aAC3B,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/dist/libs/mcp/mount.d.ts

@@ -0,0 +1,10 @@
+import type { Server } from "restify";
+import type { JXPConfig } from "../../types/jxp-config";
+import type { ModelRegistry } from "../builtin_models";
+import { isMcpEnabled } from "./config";
+export declare function mountMcp(server: Server, opts: {
+    config: JXPConfig;
+    models: ModelRegistry;
+}): void;
+export { isMcpEnabled };
+//# sourceMappingURL=mount.d.ts.map

package/dist/libs/mcp/mount.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount.d.ts","sourceRoot":"","sources":["../../../src/libs/mcp/mount.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEtC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAgB,YAAY,EAAE,MAAM,UAAU,CAAC;AAgEtD,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,GAAG,IAAI,CAwBjG;AAED,OAAO,EAAE,YAAY,EAAE,CAAC"}

package/dist/libs/mcp/mount.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isMcpEnabled = void 0;
+exports.mountMcp = mountMcp;
+const config_1 = require("./config");
+Object.defineProperty(exports, "isMcpEnabled", { enumerable: true, get: function () { return config_1.isMcpEnabled; } });
+const auth_1 = require("./auth");
+const context_1 = require("./context");
+const server_1 = require("./server");
+const dynamic_import_1 = require("./dynamic_import");
+let serverPromise = null;
+let nodeTransportModule = null;
+async function getMcpServer(config, models) {
+    if (!serverPromise) {
+        serverPromise = (0, server_1.createMcpServer)(config, models);
+    }
+    return serverPromise;
+}
+async function createStatelessTransport() {
+    if (!nodeTransportModule) {
+        nodeTransportModule = (0, dynamic_import_1.dynamicImport)("@modelcontextprotocol/node");
+    }
+    const { NodeStreamableHTTPServerTransport } = await nodeTransportModule;
+    return new NodeStreamableHTTPServerTransport({ sessionIdGenerator: undefined });
+}
+async function handleMcpRequest(req, res, parsedBody, config, models) {
+    const mcpConfig = (0, config_1.getMcpConfig)();
+    let auth;
+    try {
+        auth = await (0, auth_1.authenticateMcpRequest)(req, mcpConfig.requireApiKey);
+    }
+    catch (err) {
+        const status = err.statusCode || 401;
+        res.writeHead(status, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ error: err.message || String(err) }));
+        return;
+    }
+    const mcpServer = await getMcpServer(config, models);
+    const transport = await createStatelessTransport();
+    await mcpServer.connect(transport);
+    await context_1.mcpAuthStorage.run(auth, async () => {
+        await transport.handleRequest(req, res, parsedBody);
+    });
+}
+function mountMcp(server, opts) {
+    if (!(0, config_1.isMcpEnabled)()) {
+        return;
+    }
+    const mcpPath = (0, config_1.getMcpConfig)().path;
+    console.log(new Date(), `MCP enabled at ${mcpPath}`);
+    const handler = async (req, res) => {
+        try {
+            const nodeReq = req;
+            const nodeRes = res;
+            await handleMcpRequest(nodeReq, nodeRes, req.body, opts.config, opts.models);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            if (!res.headersSent) {
+                res.writeHead(500, { "Content-Type": "application/json" });
+                res.end(JSON.stringify({ error: message }));
+            }
+        }
+    };
+    server.get(mcpPath, handler);
+    server.post(mcpPath, handler);
+}
+//# sourceMappingURL=mount.js.map

package/dist/libs/mcp/mount.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount.js","sourceRoot":"","sources":["../../../src/libs/mcp/mount.ts"],"names":[],"mappings":";;;AAoEA,4BAwBC;AAxFD,qCAAsD;AA0F7C,6FA1Fc,qBAAY,OA0Fd;AAzFrB,iCAAgD;AAChD,uCAA2C;AAC3C,qCAA2C;AAC3C,qDAAiD;AAcjD,IAAI,aAAa,GAAsC,IAAI,CAAC;AAC5D,IAAI,mBAAmB,GAEX,IAAI,CAAC;AAEjB,KAAK,UAAU,YAAY,CAAC,MAAiB,EAAE,MAAqB;IACnE,IAAI,CAAC,aAAa,EAAE,CAAC;QACpB,aAAa,GAAG,IAAA,wBAAe,EAAC,MAAM,EAAE,MAAM,CAA+B,CAAC;IAC/E,CAAC;IACD,OAAO,aAAa,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,wBAAwB;IACtC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC1B,mBAAmB,GAAG,IAAA,8BAAa,EAAC,4BAA4B,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,EAAE,iCAAiC,EAAE,GAAG,MAAM,mBAAmB,CAAC;IACxE,OAAO,IAAI,iCAAiC,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC9B,GAAoB,EACpB,GAAmB,EACnB,UAAmB,EACnB,MAAiB,EACjB,MAAqB;IAErB,MAAM,SAAS,GAAG,IAAA,qBAAY,GAAE,CAAC;IACjC,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACJ,IAAI,GAAG,MAAM,IAAA,6BAAsB,EAAC,GAAG,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC;QACrC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/D,OAAO;IACR,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,wBAAwB,EAAE,CAAC;IACnD,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,wBAAc,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAgB,QAAQ,CAAC,MAAc,EAAE,IAAkD;IAC1F,IAAI,CAAC,IAAA,qBAAY,GAAE,EAAE,CAAC;QACrB,OAAO;IACR,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,qBAAY,GAAE,CAAC,IAAI,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,kBAAkB,OAAO,EAAE,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAClC,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,GAAiC,CAAC;YAClD,MAAM,OAAO,GAAG,GAAgC,CAAC;YACjD,MAAM,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACtB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7C,CAAC;QACF,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC/B,CAAC"}

package/dist/libs/mcp/read_service.d.ts

@@ -0,0 +1,23 @@
+import type { JXPConfig } from "../../types/jxp-config";
+import type { ModelRegistry } from "../builtin_models";
+import { type McpAuthContext } from "./model_visibility";
+export interface FindParams {
+    model: string;
+    id?: string;
+    filter?: Record<string, unknown>;
+    search?: string | Record<string, unknown>;
+    populate?: string | Record<string, string>;
+    fields?: string;
+    sort?: string;
+    limit?: number;
+    page?: number;
+    skip?: number;
+}
+export declare function mcpFind(models: ModelRegistry, baseConfig: JXPConfig, auth: McpAuthContext, params: FindParams): Promise<unknown>;
+export declare function mcpCount(models: ModelRegistry, baseConfig: JXPConfig, auth: McpAuthContext, params: {
+    model: string;
+    filter?: Record<string, unknown>;
+    search?: string | Record<string, unknown>;
+}): Promise<unknown>;
+export declare function mcpExportCsv(models: ModelRegistry, baseConfig: JXPConfig, auth: McpAuthContext, params: Omit<FindParams, "id">): Promise<string>;
+//# sourceMappingURL=read_service.d.ts.map

package/dist/libs/mcp/read_service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read_service.d.ts","sourceRoot":"","sources":["../../../src/libs/mcp/read_service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAevD,OAAO,EAAyB,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAIhF,MAAM,WAAW,UAAU;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AA+DD,wBAAsB,OAAO,CAC5B,MAAM,EAAE,aAAa,EACrB,UAAU,EAAE,SAAS,EACrB,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,UAAU,GAChB,OAAO,CAAC,OAAO,CAAC,CAyBlB;AAED,wBAAsB,QAAQ,CAC7B,MAAM,EAAE,aAAa,EACrB,UAAU,EAAE,SAAS,EACrB,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACpG,OAAO,CAAC,OAAO,CAAC,CAkBlB;AAED,wBAAsB,YAAY,CACjC,MAAM,EAAE,aAAa,EACrB,UAAU,EAAE,SAAS,EACrB,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,GAC5B,OAAO,CAAC,MAAM,CAAC,CA0BjB"}