jxp 4.2.0 → 5.0.0

package/dist/libs/mcp/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/libs/mcp/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAyBzD,wBAAsB,sBAAsB,CAAC,GAAG,EAAE,eAAe,EAAE,aAAa,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAsBlH"}

package/dist/libs/mcp/auth.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authenticateMcpRequest = authenticateMcpRequest;
+const errors = require("restify-errors");
+const security = require("../security");
+function headerValue(req, name) {
+    const raw = req.headers[name.toLowerCase()];
+    if (Array.isArray(raw))
+        return raw[0];
+    return raw;
+}
+function parseApiKey(req) {
+    const fromHeader = headerValue(req, "x-api-key");
+    if (fromHeader)
+        return fromHeader;
+    const auth = headerValue(req, "authorization");
+    if (auth?.trim().toLowerCase().startsWith("bearer ")) {
+        return auth.trim().slice(7);
+    }
+    const url = req.url || "";
+    const q = url.includes("?") ? url.slice(url.indexOf("?") + 1) : "";
+    const params = new URLSearchParams(q);
+    const fromQuery = params.get("apikey");
+    return fromQuery || undefined;
+}
+async function authenticateMcpRequest(req, requireApiKey) {
+    const apiKey = parseApiKey(req);
+    if (!apiKey) {
+        if (requireApiKey) {
+            throw new errors.UnauthorizedError("MCP requires an API key (X-API-Key header or Bearer token)");
+        }
+        return { user: null, groups: [] };
+    }
+    let user = null;
+    try {
+        user = await security.apiKeyAuth(apiKey);
+    }
+    catch {
+        try {
+            user = await security.bearerAuth(apiKey);
+        }
+        catch {
+            throw new errors.UnauthorizedError("Invalid API key or token");
+        }
+    }
+    const groups = await security.getGroups(user._id);
+    return { user, groups };
+}
+//# sourceMappingURL=auth.js.map

package/dist/libs/mcp/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/libs/mcp/auth.ts"],"names":[],"mappings":";;AA0BA,wDAsBC;AA7CD,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AAExC,SAAS,WAAW,CAAC,GAAoB,EAAE,IAAY;IACtD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,WAAW,CAAC,GAAoB;IACxC,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACjD,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC/C,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;IAC1B,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,OAAO,SAAS,IAAI,SAAS,CAAC;AAC/B,CAAC;AAEM,KAAK,UAAU,sBAAsB,CAAC,GAAoB,EAAE,aAAsB;IACxF,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,IAAI,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,MAAM,CAAC,iBAAiB,CAAC,4DAA4D,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACnC,CAAC;IAED,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,CAAC;QACJ,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACR,IAAI,CAAC;YACJ,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,MAAM,CAAC,iBAAiB,CAAC,0BAA0B,CAAC,CAAC;QAChE,CAAC;IACF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACzB,CAAC"}

package/dist/libs/mcp/config.d.ts

@@ -0,0 +1,21 @@
+import type { JXPQueryLimits } from "../../types/jxp-config";
+export interface McpConfig {
+    enabled: boolean;
+    path: string;
+    requireApiKey: boolean;
+    modelWhitelist: Set<string>;
+    modelBlacklist: Set<string>;
+    defaultHiddenModels: Set<string>;
+    defaultLimit: number;
+    maxLimit: number;
+    maxResponseBytes: number;
+    maxCsvBytes: number;
+    truncateStringsAt: number;
+    disableAutopopulate: boolean;
+}
+export declare function getMcpConfig(): McpConfig;
+export declare function isMcpEnabled(): boolean;
+/** Merge MCP-specific limits over the app's query_limits for MCP read operations. */
+export declare function overlayMcpQueryLimits(base: JXPQueryLimits | undefined, mcp: McpConfig): JXPQueryLimits;
+export declare function overlayMcpCsvLimits(base: JXPQueryLimits | undefined, mcp: McpConfig): JXPQueryLimits;
+//# sourceMappingURL=config.d.ts.map

package/dist/libs/mcp/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/libs/mcp/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,MAAM,WAAW,SAAS;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,OAAO,CAAC;IACvB,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,mBAAmB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,OAAO,CAAC;CAC7B;AA2BD,wBAAgB,YAAY,IAAI,SAAS,CAsBxC;AAED,wBAAgB,YAAY,IAAI,OAAO,CAEtC;AAED,qFAAqF;AACrF,wBAAgB,qBAAqB,CACpC,IAAI,EAAE,cAAc,GAAG,SAAS,EAChC,GAAG,EAAE,SAAS,GACZ,cAAc,CAMhB;AAED,wBAAgB,mBAAmB,CAClC,IAAI,EAAE,cAAc,GAAG,SAAS,EAChC,GAAG,EAAE,SAAS,GACZ,cAAc,CAIhB"}

package/dist/libs/mcp/config.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getMcpConfig = getMcpConfig;
+exports.isMcpEnabled = isMcpEnabled;
+exports.overlayMcpQueryLimits = overlayMcpQueryLimits;
+exports.overlayMcpCsvLimits = overlayMcpCsvLimits;
+const load_config_1 = require("../load-config");
+const parse_byte_size_1 = require("../parse_byte_size");
+const builtin_models_1 = require("../builtin_models");
+function envBool(name, fallback) {
+    (0, load_config_1.loadEnv)();
+    const v = process.env[name];
+    if (v === undefined)
+        return fallback;
+    return v === "1" || v.toLowerCase() === "true";
+}
+function envInt(name, fallback) {
+    (0, load_config_1.loadEnv)();
+    const n = parseInt(process.env[name] ?? "", 10);
+    return Number.isFinite(n) ? n : fallback;
+}
+function parseSlugSet(raw) {
+    if (!raw?.trim())
+        return new Set();
+    return new Set(raw
+        .split(",")
+        .map((s) => s.trim().toLowerCase())
+        .filter(Boolean));
+}
+const DEFAULT_HIDDEN = [...builtin_models_1.BUILTIN_MODEL_SLUGS];
+function getMcpConfig() {
+    (0, load_config_1.loadEnv)();
+    return {
+        enabled: envBool("MCP_ENABLED", false),
+        path: process.env.MCP_PATH?.trim() || "/mcp",
+        requireApiKey: envBool("MCP_REQUIRE_API_KEY", true),
+        modelWhitelist: parseSlugSet(process.env.MCP_MODEL_WHITELIST),
+        modelBlacklist: parseSlugSet(process.env.MCP_MODEL_BLACKLIST),
+        defaultHiddenModels: process.env.MCP_DEFAULT_HIDDEN_MODELS?.trim()
+            ? parseSlugSet(process.env.MCP_DEFAULT_HIDDEN_MODELS)
+            : new Set(DEFAULT_HIDDEN),
+        defaultLimit: envInt("MCP_DEFAULT_LIMIT", 20),
+        maxLimit: envInt("MCP_MAX_LIMIT", 100),
+        maxResponseBytes: (0, parse_byte_size_1.parseByteSizeOr)(process.env.MCP_MAX_RESPONSE_SIZE, "256kb", "MCP_MAX_RESPONSE_SIZE"),
+        maxCsvBytes: (0, parse_byte_size_1.parseByteSizeOr)(process.env.MCP_MAX_CSV_SIZE, "512kb", "MCP_MAX_CSV_SIZE"),
+        truncateStringsAt: envInt("MCP_TRUNCATE_STRINGS_AT", 4000),
+        disableAutopopulate: envBool("MCP_DISABLE_AUTOPOPULATE", true),
+    };
+}
+function isMcpEnabled() {
+    return getMcpConfig().enabled;
+}
+/** Merge MCP-specific limits over the app's query_limits for MCP read operations. */
+function overlayMcpQueryLimits(base, mcp) {
+    const merged = { ...(base || {}) };
+    merged.default = mcp.defaultLimit;
+    merged.max = mcp.maxLimit;
+    merged.max_response_size = mcp.maxResponseBytes;
+    return merged;
+}
+function overlayMcpCsvLimits(base, mcp) {
+    const merged = overlayMcpQueryLimits(base, mcp);
+    merged.max_response_size = mcp.maxCsvBytes;
+    return merged;
+}
+//# sourceMappingURL=config.js.map

package/dist/libs/mcp/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/libs/mcp/config.ts"],"names":[],"mappings":";;AA6CA,oCAsBC;AAED,oCAEC;AAGD,sDASC;AAED,kDAOC;AA5FD,gDAAyC;AACzC,wDAAqD;AACrD,sDAAwD;AAkBxD,SAAS,OAAO,CAAC,IAAY,EAAE,QAAiB;IAC/C,IAAA,qBAAO,GAAE,CAAC;IACV,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACrC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;AAChD,CAAC;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,QAAgB;IAC7C,IAAA,qBAAO,GAAE,CAAC;IACV,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC1C,CAAC;AAED,SAAS,YAAY,CAAC,GAAuB;IAC5C,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IACnC,OAAO,IAAI,GAAG,CACb,GAAG;SACD,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAClC,MAAM,CAAC,OAAO,CAAC,CACjB,CAAC;AACH,CAAC;AAED,MAAM,cAAc,GAAG,CAAC,GAAG,oCAAmB,CAAC,CAAC;AAEhD,SAAgB,YAAY;IAC3B,IAAA,qBAAO,GAAE,CAAC;IACV,OAAO;QACN,OAAO,EAAE,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC;QACtC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,MAAM;QAC5C,aAAa,EAAE,OAAO,CAAC,qBAAqB,EAAE,IAAI,CAAC;QACnD,cAAc,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAC7D,cAAc,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAC7D,mBAAmB,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE;YACjE,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;YACrD,CAAC,CAAC,IAAI,GAAG,CAAC,cAAc,CAAC;QAC1B,YAAY,EAAE,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAC;QAC7C,QAAQ,EAAE,MAAM,CAAC,eAAe,EAAE,GAAG,CAAC;QACtC,gBAAgB,EAAE,IAAA,iCAAe,EAChC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EACjC,OAAO,EACP,uBAAuB,CACvB;QACD,WAAW,EAAE,IAAA,iCAAe,EAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,CAAC;QACvF,iBAAiB,EAAE,MAAM,CAAC,yBAAyB,EAAE,IAAI,CAAC;QAC1D,mBAAmB,EAAE,OAAO,CAAC,0BAA0B,EAAE,IAAI,CAAC;KAC9D,CAAC;AACH,CAAC;AAED,SAAgB,YAAY;IAC3B,OAAO,YAAY,EAAE,CAAC,OAAO,CAAC;AAC/B,CAAC;AAED,qFAAqF;AACrF,SAAgB,qBAAqB,CACpC,IAAgC,EAChC,GAAc;IAEd,MAAM,MAAM,GAAG,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;IACnC,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC;IAClC,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC1B,MAAM,CAAC,iBAAiB,GAAG,GAAG,CAAC,gBAAgB,CAAC;IAChD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAgB,mBAAmB,CAClC,IAAgC,EAChC,GAAc;IAEd,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAChD,MAAM,CAAC,iBAAiB,GAAG,GAAG,CAAC,WAAW,CAAC;IAC3C,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/libs/mcp/context.d.ts

@@ -0,0 +1,5 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+import type { McpAuthContext } from "./model_visibility";
+export declare const mcpAuthStorage: AsyncLocalStorage<McpAuthContext>;
+export declare function getMcpAuth(): McpAuthContext;
+//# sourceMappingURL=context.d.ts.map

package/dist/libs/mcp/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/libs/mcp/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,eAAO,MAAM,cAAc,mCAA0C,CAAC;AAEtE,wBAAgB,UAAU,IAAI,cAAc,CAM3C"}

package/dist/libs/mcp/context.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mcpAuthStorage = void 0;
+exports.getMcpAuth = getMcpAuth;
+const node_async_hooks_1 = require("node:async_hooks");
+exports.mcpAuthStorage = new node_async_hooks_1.AsyncLocalStorage();
+function getMcpAuth() {
+    const ctx = exports.mcpAuthStorage.getStore();
+    if (!ctx) {
+        throw new Error("MCP auth context missing");
+    }
+    return ctx;
+}
+//# sourceMappingURL=context.js.map

package/dist/libs/mcp/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../src/libs/mcp/context.ts"],"names":[],"mappings":";;;AAKA,gCAMC;AAXD,uDAAqD;AAGxC,QAAA,cAAc,GAAG,IAAI,oCAAiB,EAAkB,CAAC;AAEtE,SAAgB,UAAU;IACzB,MAAM,GAAG,GAAG,sBAAc,CAAC,QAAQ,EAAE,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/dist/libs/mcp/describe.d.ts

@@ -0,0 +1,13 @@
+import type { Model } from "mongoose";
+import { serializeField } from "../schema_serialize";
+export interface ModelDescription {
+    slug: string;
+    collection: string;
+    soft_delete: boolean;
+    fields: Record<string, ReturnType<typeof serializeField>>;
+    populate_hints: string[];
+    filterable_fields: string[];
+    notes: string[];
+}
+export declare function describeModelJson(slug: string, model: Model<unknown>): ModelDescription;
+//# sourceMappingURL=describe.d.ts.map

package/dist/libs/mcp/describe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"describe.d.ts","sourceRoot":"","sources":["../../../src/libs/mcp/describe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC;IAC1D,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,KAAK,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,gBAAgB,CAkCvF"}

package/dist/libs/mcp/describe.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.describeModelJson = describeModelJson;
+const schema_serialize_1 = require("../schema_serialize");
+function describeModelJson(slug, model) {
+    const fields = Object.keys(model.schema.paths).sort();
+    const safeFields = {};
+    const populateHints = [];
+    const filterableFields = [];
+    for (const fieldName of fields) {
+        const path = model.schema.paths[fieldName];
+        safeFields[fieldName] = (0, schema_serialize_1.serializeField)(path);
+        if (path.options?.index) {
+            filterableFields.push(fieldName);
+        }
+        if (path.instance === "ObjectID" && path.options?.link) {
+            const populateKey = String(path.options.map_to || path.options.virtual || path.options.link.toLowerCase());
+            populateHints.push(`populate[${fieldName}]=<fields>`);
+            populateHints.push(`populate[${populateKey}]=<fields>`);
+        }
+    }
+    return {
+        slug,
+        collection: model.collection.name,
+        soft_delete: true,
+        fields: safeFields,
+        populate_hints: [...new Set(populateHints)],
+        filterable_fields: filterableFields,
+        notes: [
+            "Use jxp_find with filter objects ($gte:, $regex:/pattern/i, etc.).",
+            "Omit deleted documents by default; not applicable for single-id fetch of deleted rows.",
+            "Prefer fields and low limit to keep responses small.",
+        ],
+    };
+}
+//# sourceMappingURL=describe.js.map

package/dist/libs/mcp/describe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"describe.js","sourceRoot":"","sources":["../../../src/libs/mcp/describe.ts"],"names":[],"mappings":";;AAaA,8CAkCC;AA9CD,0DAAqD;AAYrD,SAAgB,iBAAiB,CAAC,IAAY,EAAE,KAAqB;IACpE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,MAAM,UAAU,GAAsD,EAAE,CAAC;IACzE,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,gBAAgB,GAAa,EAAE,CAAC;IAEtC,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3C,UAAU,CAAC,SAAS,CAAC,GAAG,IAAA,iCAAc,EAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACzB,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;YACxD,MAAM,WAAW,GAAG,MAAM,CACzB,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAC9E,CAAC;YACF,aAAa,CAAC,IAAI,CAAC,YAAY,SAAS,YAAY,CAAC,CAAC;YACtD,aAAa,CAAC,IAAI,CAAC,YAAY,WAAW,YAAY,CAAC,CAAC;QACzD,CAAC;IACF,CAAC;IAED,OAAO;QACN,IAAI;QACJ,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI;QACjC,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,UAAU;QAClB,cAAc,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;QAC3C,iBAAiB,EAAE,gBAAgB;QACnC,KAAK,EAAE;YACN,oEAAoE;YACpE,wFAAwF;YACxF,sDAAsD;SACtD;KACD,CAAC;AACH,CAAC"}

package/dist/libs/mcp/docs_auth.d.ts

@@ -0,0 +1,5 @@
+import type { JXPRequest } from "../../types/jxp-config";
+import type { McpAuthContext } from "./model_visibility";
+/** Resolve MCP auth for docs playground: navbar key, then HttpOnly session. */
+export declare function authenticateDocsMcpRequest(req: JXPRequest): Promise<McpAuthContext>;
+//# sourceMappingURL=docs_auth.d.ts.map

package/dist/libs/mcp/docs_auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs_auth.d.ts","sourceRoot":"","sources":["../../../src/libs/mcp/docs_auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AASzD,+EAA+E;AAC/E,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC,CAmBzF"}

package/dist/libs/mcp/docs_auth.js

@@ -0,0 +1,36 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authenticateDocsMcpRequest = authenticateDocsMcpRequest;
+const restify_errors_1 = __importDefault(require("restify-errors"));
+const docs_auth_1 = require("../docs-auth");
+const auth_1 = require("./auth");
+const config_1 = require("./config");
+function headerApiKey(req) {
+    const raw = req.headers["x-api-key"];
+    if (Array.isArray(raw))
+        return raw[0]?.trim() || undefined;
+    return typeof raw === "string" && raw.trim() ? raw.trim() : undefined;
+}
+/** Resolve MCP auth for docs playground: navbar key, then HttpOnly session. */
+async function authenticateDocsMcpRequest(req) {
+    const mcpConfig = (0, config_1.getMcpConfig)();
+    const fromHeader = headerApiKey(req);
+    if (fromHeader) {
+        req.headers["x-api-key"] = fromHeader;
+        return (0, auth_1.authenticateMcpRequest)(req, mcpConfig.requireApiKey);
+    }
+    const session = req.docsSession
+        ?? (0, docs_auth_1.verifyDocsSession)(req);
+    if (session?.apikey) {
+        req.headers["x-api-key"] = session.apikey;
+        return (0, auth_1.authenticateMcpRequest)(req, mcpConfig.requireApiKey);
+    }
+    if (mcpConfig.requireApiKey) {
+        throw new restify_errors_1.default.UnauthorizedError("API key required (top bar or sign in)");
+    }
+    return (0, auth_1.authenticateMcpRequest)(req, false);
+}
+//# sourceMappingURL=docs_auth.js.map

package/dist/libs/mcp/docs_auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs_auth.js","sourceRoot":"","sources":["../../../src/libs/mcp/docs_auth.ts"],"names":[],"mappings":";;;;;AAcA,gEAmBC;AAjCD,oEAAoC;AAEpC,4CAAiD;AACjD,iCAAgD;AAEhD,qCAAwC;AAExC,SAAS,YAAY,CAAC,GAAe;IACpC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC3D,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,+EAA+E;AACxE,KAAK,UAAU,0BAA0B,CAAC,GAAe;IAC/D,MAAM,SAAS,GAAG,IAAA,qBAAY,GAAE,CAAC;IACjC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,UAAU,EAAE,CAAC;QAChB,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,UAAU,CAAC;QACtC,OAAO,IAAA,6BAAsB,EAAC,GAAqD,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;IAC/G,CAAC;IAED,MAAM,OAAO,GAAI,GAAyD,CAAC,WAAW;WAClF,IAAA,6BAAiB,EAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACrB,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;QAC1C,OAAO,IAAA,6BAAsB,EAAC,GAAqD,EAAE,SAAS,CAAC,aAAa,CAAC,CAAC;IAC/G,CAAC;IAED,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC;QAC7B,MAAM,IAAI,wBAAM,CAAC,iBAAiB,CAAC,uCAAuC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,IAAA,6BAAsB,EAAC,GAAqD,EAAE,KAAK,CAAC,CAAC;AAC7F,CAAC"}

package/dist/libs/mcp/dynamic_import.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Load ESM-only packages from CommonJS output without TypeScript rewriting
+ * `import()` to `require()` (which breaks @modelcontextprotocol/* v2).
+ */
+export declare function dynamicImport<T = Record<string, unknown>>(specifier: string): Promise<T>;
+//# sourceMappingURL=dynamic_import.d.ts.map

package/dist/libs/mcp/dynamic_import.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamic_import.d.ts","sourceRoot":"","sources":["../../../src/libs/mcp/dynamic_import.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAGxF"}

package/dist/libs/mcp/dynamic_import.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dynamicImport = dynamicImport;
+/**
+ * Load ESM-only packages from CommonJS output without TypeScript rewriting
+ * `import()` to `require()` (which breaks @modelcontextprotocol/* v2).
+ */
+function dynamicImport(specifier) {
+    const fn = new Function("specifier", "return import(specifier)");
+    return fn(specifier);
+}
+//# sourceMappingURL=dynamic_import.js.map

package/dist/libs/mcp/dynamic_import.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamic_import.js","sourceRoot":"","sources":["../../../src/libs/mcp/dynamic_import.ts"],"names":[],"mappings":";;AAIA,sCAGC;AAPD;;;GAGG;AACH,SAAgB,aAAa,CAA8B,SAAiB;IAC3E,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAA8B,CAAC;IAC9F,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;AACtB,CAAC"}

package/dist/libs/mcp/execute_tool.d.ts

@@ -0,0 +1,10 @@
+import type { JXPConfig } from "../../types/jxp-config";
+import type { ModelRegistry } from "../builtin_models";
+import { type McpAuthContext } from "./model_visibility";
+export type McpToolResult = {
+    text: string;
+    isError?: boolean;
+};
+export declare function isAllowedMcpTool(name: string): boolean;
+export declare function executeMcpTool(name: string, args: Record<string, unknown>, config: JXPConfig, models: ModelRegistry, auth: McpAuthContext): Promise<McpToolResult>;
+//# sourceMappingURL=execute_tool.d.ts.map

package/dist/libs/mcp/execute_tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute_tool.d.ts","sourceRoot":"","sources":["../../../src/libs/mcp/execute_tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAIvD,OAAO,EAA4C,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGnG,MAAM,MAAM,aAAa,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAUhE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED,wBAAsB,cAAc,CACnC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,cAAc,GAClB,OAAO,CAAC,aAAa,CAAC,CAyDxB"}

package/dist/libs/mcp/execute_tool.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isAllowedMcpTool = isAllowedMcpTool;
+exports.executeMcpTool = executeMcpTool;
+const config_1 = require("./config");
+const context_1 = require("./context");
+const describe_1 = require("./describe");
+const model_visibility_1 = require("./model_visibility");
+const read_service_1 = require("./read_service");
+const ALLOWED_TOOLS = new Set([
+    "jxp_list_models",
+    "jxp_describe_model",
+    "jxp_find",
+    "jxp_count",
+    "jxp_export_csv",
+]);
+function isAllowedMcpTool(name) {
+    return ALLOWED_TOOLS.has(name);
+}
+async function executeMcpTool(name, args, config, models, auth) {
+    if (!isAllowedMcpTool(name)) {
+        return { text: `Unknown MCP tool: ${name}`, isError: true };
+    }
+    const mcpConfig = (0, config_1.getMcpConfig)();
+    try {
+        return await context_1.mcpAuthStorage.run(auth, async () => {
+            switch (name) {
+                case "jxp_list_models": {
+                    const list = await (0, model_visibility_1.listVisibleModels)(models, auth, mcpConfig);
+                    return { text: JSON.stringify(list, null, 2) };
+                }
+                case "jxp_describe_model": {
+                    const slug = String(args.model ?? "");
+                    if (!slug)
+                        throw new Error("model is required");
+                    const Model = models[slug];
+                    if (!Model)
+                        throw new Error(`Model "${slug}" not found`);
+                    await (0, model_visibility_1.assertModelVisibleMcp)(slug, Model, auth, mcpConfig);
+                    return { text: JSON.stringify((0, describe_1.describeModelJson)(slug, Model), null, 2) };
+                }
+                case "jxp_find": {
+                    const result = await (0, read_service_1.mcpFind)(models, config, auth, args);
+                    return {
+                        text: typeof result === "string" ? result : JSON.stringify(result, null, 2),
+                    };
+                }
+                case "jxp_count": {
+                    const result = await (0, read_service_1.mcpCount)(models, config, auth, args);
+                    return { text: JSON.stringify(result, null, 2) };
+                }
+                case "jxp_export_csv": {
+                    const csv = await (0, read_service_1.mcpExportCsv)(models, config, auth, args);
+                    return { text: csv };
+                }
+                default:
+                    return { text: `Unknown MCP tool: ${name}`, isError: true };
+            }
+        });
+    }
+    catch (err) {
+        return { text: err instanceof Error ? err.message : String(err), isError: true };
+    }
+}
+//# sourceMappingURL=execute_tool.js.map

package/dist/libs/mcp/execute_tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute_tool.js","sourceRoot":"","sources":["../../../src/libs/mcp/execute_tool.ts"],"names":[],"mappings":";;AAkBA,4CAEC;AAED,wCA+DC;AAnFD,qCAAwC;AACxC,uCAA2C;AAC3C,yCAA+C;AAC/C,yDAAmG;AACnG,iDAAiE;AAIjE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC7B,iBAAiB;IACjB,oBAAoB;IACpB,UAAU;IACV,WAAW;IACX,gBAAgB;CAChB,CAAC,CAAC;AAEH,SAAgB,gBAAgB,CAAC,IAAY;IAC5C,OAAO,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAEM,KAAK,UAAU,cAAc,CACnC,IAAY,EACZ,IAA6B,EAC7B,MAAiB,EACjB,MAAqB,EACrB,IAAoB;IAEpB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7D,CAAC;IAED,MAAM,SAAS,GAAG,IAAA,qBAAY,GAAE,CAAC;IACjC,IAAI,CAAC;QACJ,OAAO,MAAM,wBAAc,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YAChD,QAAQ,IAAI,EAAE,CAAC;gBACd,KAAK,iBAAiB,CAAC,CAAC,CAAC;oBACxB,MAAM,IAAI,GAAG,MAAM,IAAA,oCAAiB,EAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;oBAC9D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBAChD,CAAC;gBACD,KAAK,oBAAoB,CAAC,CAAC,CAAC;oBAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;oBACtC,IAAI,CAAC,IAAI;wBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;oBAChD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC3B,IAAI,CAAC,KAAK;wBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,aAAa,CAAC,CAAC;oBACzD,MAAM,IAAA,wCAAqB,EAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;oBAC1D,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAA,4BAAiB,EAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC1E,CAAC;gBACD,KAAK,UAAU,CAAC,CAAC,CAAC;oBACjB,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAO,EAC3B,MAAM,EACN,MAAM,EACN,IAAI,EACJ,IAAgD,CAChD,CAAC;oBACF,OAAO;wBACN,IAAI,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC3E,CAAC;gBACH,CAAC;gBACD,KAAK,WAAW,CAAC,CAAC,CAAC;oBAClB,MAAM,MAAM,GAAG,MAAM,IAAA,uBAAQ,EAC5B,MAAM,EACN,MAAM,EACN,IAAI,EACJ,IAAiD,CACjD,CAAC;oBACF,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBAClD,CAAC;gBACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;oBACvB,MAAM,GAAG,GAAG,MAAM,IAAA,2BAAY,EAC7B,MAAM,EACN,MAAM,EACN,IAAI,EACJ,IAAqD,CACrD,CAAC;oBACF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;gBACtB,CAAC;gBACD;oBACC,OAAO,EAAE,IAAI,EAAE,qBAAqB,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC9D,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,EAAE,IAAI,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClF,CAAC;AACF,CAAC"}

package/dist/libs/mcp/guides/default.md

@@ -0,0 +1,67 @@
+# JXP MCP usage guide
+
+Read-only access to JXP REST data via five fixed tools. Permissions match the authenticated user's API key.
+
+## Workflow
+
+1. **`jxp_list_models`** — discover model slugs available to this caller.
+2. **`jxp_describe_model`** — field types, indexed/filterable fields, link/populate hints.
+3. **`jxp_count`** — check result size before fetching (especially large collections).
+4. **`jxp_find`** — list or get by `id`; always set `fields` and a low `limit`.
+5. **`jxp_export_csv`** — small CSV exports when JSON is awkward; no populate.
+
+Never guess model names. Never fetch large collections without `fields` and `limit`.
+
+## Query parameters (jxp_find / jxp_count / jxp_export_csv)
+
+### filter
+
+Mongo-style filter object. Examples:
+
+```json
+{ "filter": { "email": "user@example.com" } }
+{ "filter": { "created": { "$gte": "2024-01-01" } } }
+{ "filter": { "status": { "$in": ["active", "trial"] } } }
+```
+
+Use `jxp_describe_model` to see indexed fields worth filtering on.
+
+### search
+
+Full-text or field search (same as REST `?search=`).
+
+### populate
+
+Link expansion: `"populate[user]=name,email"` or object `{ "user": "name,email" }`.
+Autopopulate is disabled for MCP by default (`MCP_DISABLE_AUTOPOPULATE=true`).
+
+### fields
+
+Comma-separated projection — **always use** for list queries:
+
+```json
+{ "model": "reader", "fields": "_id,email,name", "limit": 10 }
+```
+
+### sort, limit, page, skip
+
+- `limit` — defaults to MCP default; hard-capped at MCP max.
+- `page` / `skip` — pagination.
+- `sort` — e.g. `-created` for newest first.
+
+## Limits and safety
+
+- MCP enforces stricter limits than HTTP (`MCP_DEFAULT_LIMIT`, `MCP_MAX_LIMIT`).
+- JSON responses are capped (`MCP_MAX_RESPONSE_SIZE`); long strings are truncated.
+- CSV exports are capped (`MCP_MAX_CSV_SIZE`).
+- **Read-only** — no create, update, delete, aggregate, or stored procedures via MCP.
+
+## Hidden models
+
+Built-in auth collections (`user`, `apikey`, `token`, etc.) and `internal: true` schemas are hidden unless whitelisted via `MCP_MODEL_WHITELIST`. Blacklist always wins.
+
+## Single document by id
+
+```json
+{ "model": "reader", "id": "507f1f77bcf86cd799439011" }
+```

package/dist/libs/mcp/guides.d.ts

@@ -0,0 +1,14 @@
+import type { JXPConfig } from "../../types/jxp-config";
+import type { McpConfig } from "./config";
+export declare const MCP_GUIDE_URI = "jxp://guide";
+export declare const MCP_GUIDE_RESOURCE_NAME = "jxp-guide";
+export interface McpGuideContext {
+    config: JXPConfig;
+    mcpConfig: McpConfig;
+}
+export declare function loadGuideFiles(paths: string[]): string[];
+export declare function buildMcpGuideMarkdown(ctx: McpGuideContext): string;
+export declare function buildMcpInstructions(ctx: McpGuideContext): string;
+/** Clear cached guide (for tests). */
+export declare function clearMcpGuideCache(): void;
+//# sourceMappingURL=guides.d.ts.map

package/dist/libs/mcp/guides.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guides.d.ts","sourceRoot":"","sources":["../../../src/libs/mcp/guides.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE1C,eAAO,MAAM,aAAa,gBAAgB,CAAC;AAC3C,eAAO,MAAM,uBAAuB,cAAc,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC/B,MAAM,EAAE,SAAS,CAAC;IAClB,SAAS,EAAE,SAAS,CAAC;CACrB;AA8BD,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAkBxD;AAcD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,CAsBlE;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,CA8BjE;AAED,sCAAsC;AACtC,wBAAgB,kBAAkB,IAAI,IAAI,CAGzC"}

package/dist/libs/mcp/guides.js

@@ -0,0 +1,127 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MCP_GUIDE_RESOURCE_NAME = exports.MCP_GUIDE_URI = void 0;
+exports.loadGuideFiles = loadGuideFiles;
+exports.buildMcpGuideMarkdown = buildMcpGuideMarkdown;
+exports.buildMcpInstructions = buildMcpInstructions;
+exports.clearMcpGuideCache = clearMcpGuideCache;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+exports.MCP_GUIDE_URI = "jxp://guide";
+exports.MCP_GUIDE_RESOURCE_NAME = "jxp-guide";
+let cachedGuideMarkdown = null;
+let cachedGuideKey = null;
+function resolveGuidePath(filePath) {
+    if (path_1.default.isAbsolute(filePath))
+        return filePath;
+    return path_1.default.resolve(process.cwd(), filePath);
+}
+function defaultGuidePath() {
+    return path_1.default.join(__dirname, "guides", "default.md");
+}
+function collectGuideFilePaths(config) {
+    const paths = [];
+    const fromConfig = config.mcp?.guideFiles || [];
+    for (const p of fromConfig) {
+        if (p?.trim())
+            paths.push(p.trim());
+    }
+    const fromEnv = process.env.MCP_GUIDE_FILES?.trim();
+    if (fromEnv) {
+        for (const p of fromEnv.split(",")) {
+            const t = p.trim();
+            if (t)
+                paths.push(t);
+        }
+    }
+    return paths;
+}
+function loadGuideFiles(paths) {
+    const parts = [];
+    const defaultPath = defaultGuidePath();
+    if (fs_1.default.existsSync(defaultPath)) {
+        parts.push(fs_1.default.readFileSync(defaultPath, "utf8"));
+    }
+    else {
+        console.warn(new Date(), `MCP default guide not found at ${defaultPath}`);
+    }
+    for (const filePath of paths) {
+        const resolved = resolveGuidePath(filePath);
+        try {
+            parts.push(fs_1.default.readFileSync(resolved, "utf8"));
+        }
+        catch {
+            console.warn(new Date(), `MCP guide file not found: ${resolved}`);
+        }
+    }
+    return parts;
+}
+function guideCacheKey(ctx) {
+    return JSON.stringify({
+        files: collectGuideFilePaths(ctx.config),
+        append: process.env.MCP_INSTRUCTIONS_APPEND || "",
+        appInstructions: ctx.config.mcp?.instructions || "",
+        limits: {
+            default: ctx.mcpConfig.defaultLimit,
+            max: ctx.mcpConfig.maxLimit,
+        },
+    });
+}
+function buildMcpGuideMarkdown(ctx) {
+    const key = guideCacheKey(ctx);
+    if (cachedGuideMarkdown !== null && cachedGuideKey === key) {
+        return cachedGuideMarkdown;
+    }
+    const parts = loadGuideFiles(collectGuideFilePaths(ctx.config));
+    const runtime = [
+        "",
+        "## Runtime limits",
+        "",
+        `- Default \`limit\`: ${ctx.mcpConfig.defaultLimit}`,
+        `- Max \`limit\`: ${ctx.mcpConfig.maxLimit}`,
+        `- Max JSON response: ${ctx.mcpConfig.maxResponseBytes} bytes`,
+        `- Max CSV response: ${ctx.mcpConfig.maxCsvBytes} bytes`,
+        `- String truncation at: ${ctx.mcpConfig.truncateStringsAt} characters`,
+        "",
+    ];
+    cachedGuideMarkdown = [...parts, runtime.join("\n")].filter(Boolean).join("\n\n---\n\n");
+    cachedGuideKey = key;
+    return cachedGuideMarkdown;
+}
+function buildMcpInstructions(ctx) {
+    const { mcpConfig } = ctx;
+    const lines = [
+        "You have read-only access to a JXP REST API via MCP tools.",
+        "",
+        "Required workflow:",
+        "1. jxp_list_models — discover available model slugs for this user.",
+        "2. jxp_describe_model — inspect fields, filters, and populate hints before querying.",
+        "3. jxp_count — estimate result size on large collections before jxp_find.",
+        "4. jxp_find — use fields + low limit; pass id for a single document.",
+        "5. jxp_export_csv — small tabular exports only (no populate).",
+        "",
+        `Limits: default limit ${mcpConfig.defaultLimit}, max ${mcpConfig.maxLimit}. Responses are size-capped; strings may be truncated.`,
+        "Filter syntax matches MongoDB ($gte, $in, $regex, etc.). Use populate[field]=a,b for links.",
+        "Do not mutate data — MCP is read-only.",
+        "",
+        "For the full guide, read MCP resource jxp-guide (uri jxp://guide).",
+    ];
+    const appInstructions = ctx.config.mcp?.instructions?.trim();
+    if (appInstructions) {
+        lines.push("", appInstructions);
+    }
+    const envAppend = process.env.MCP_INSTRUCTIONS_APPEND?.trim();
+    if (envAppend) {
+        lines.push("", envAppend);
+    }
+    return lines.join("\n");
+}
+/** Clear cached guide (for tests). */
+function clearMcpGuideCache() {
+    cachedGuideMarkdown = null;
+    cachedGuideKey = null;
+}
+//# sourceMappingURL=guides.js.map