mcp-creatio 0.6.2 → 0.6.3

package/dist/server/http/middleware.js

@@ -4,15 +4,41 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.HttpMiddleware = void 0;
+exports.redactUrl = redactUrl;
 const crypto_1 = require("crypto");
 const log_1 = __importDefault(require("../../log"));
 const utils_1 = require("../../utils");
 const rate_limiter_1 = require("./rate-limiter");
-class HttpMiddleware {
-    _oauthServer;
-    constructor(oauthServer) {
-        this._oauthServer = oauthServer;
+/** Single-use / credential query params that must never reach the logs (CWE-532) — the OAuth
+ *  `/authorize` and `/oauth/callback` URLs carry `code`/`state`/verifier in the query string. */
+const SENSITIVE_QUERY_PARAMS = new Set([
+    'code',
+    'state',
+    'token',
+    'access_token',
+    'refresh_token',
+    'id_token',
+    'code_verifier',
+    'client_secret',
+]);
+/** Redact sensitive query-string values from a URL before it is logged, preserving the path + the
+ *  non-sensitive params (which are useful for debugging). Robust to relative URLs. */
+function redactUrl(url) {
+    const qIndex = url.indexOf('?');
+    if (qIndex === -1) {
+        return url;
+    }
+    const path = url.slice(0, qIndex);
+    const params = new URLSearchParams(url.slice(qIndex + 1));
+    for (const key of params.keys()) {
+        if (SENSITIVE_QUERY_PARAMS.has(key.toLowerCase())) {
+            params.set(key, '***');
+        }
     }
+    const query = params.toString();
+    return query ? `${path}?${query}` : path;
+}
+class HttpMiddleware {
     /**
      * Per-route fixed-window rate limit, keyed by the real connection IP (req.ip /
      * socket address) rather than the spoofable X-Forwarded-For header, so an
@@ -35,23 +61,6 @@ class HttpMiddleware {
             next();
         };
     }
-    bearerAuth() {
-        return (req, res, next) => {
-            const authHeader = req.headers.authorization;
-            if (authHeader && authHeader.startsWith('Bearer ')) {
-                const token = authHeader.slice(7);
-                const userKey = this._oauthServer.validateAccessToken(token);
-                if (userKey) {
-                    req.userKey = userKey;
-                    return next();
-                }
-            }
-            res.status(401).json({
-                error: 'unauthorized',
-                error_description: 'Valid Bearer token required. Use OAuth 2.1 flow to obtain access token.',
-            });
-        };
-    }
     errorHandler() {
         return (error, req, res, next) => {
             log_1.default.error('http.error', {
@@ -87,7 +96,8 @@ class HttpMiddleware {
             const ip = (0, utils_1.getClientIp)(req);
             const userAgent = req.headers['user-agent'];
             const correlationId = req.correlationId;
-            log_1.default.httpRequest(req.method, req.url, {
+            const safeUrl = redactUrl(req.url);
+            log_1.default.httpRequest(req.method, safeUrl, {
                 ip,
                 userAgent,
                 correlationId,
@@ -96,7 +106,7 @@ class HttpMiddleware {
             });
             res.on('finish', () => {
                 const duration = Date.now() - startTime;
-                log_1.default.httpResponse(req.method, req.url, res.statusCode, duration, {
+                log_1.default.httpResponse(req.method, safeUrl, res.statusCode, duration, {
                     ip,
                     correlationId,
                     contentLength: res.getHeader('content-length'),

package/dist/server/http/middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../src/server/http/middleware.ts"],"names":[],"mappings":";;;;;;AAAA,mCAAoC;AAEpC,oDAA4B;AAC5B,uCAA0C;AAE1C,iDAA6C;AAM7C,MAAa,cAAc;IACT,YAAY,CAAc;IAE3C,YAAY,WAAwB;QACnC,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACI,SAAS,CAAC,OAAyB;QACzC,MAAM,OAAO,GAAG,IAAI,0BAAW,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAC1D,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,aAAa,IAAI,SAAS,CAAC;YAC7D,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;gBACrE,aAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,IAAA,mBAAW,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACxE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACpB,KAAK,EAAE,mBAAmB;oBAC1B,iBAAiB,EAAE,uCAAuC;iBAC1D,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YACD,IAAI,EAAE,CAAC;QACR,CAAC,CAAC;IACH,CAAC;IAEM,UAAU;QAChB,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAC1D,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;YAC7C,IAAI,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACpD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAClC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;gBAC7D,IAAI,OAAO,EAAE,CAAC;oBACZ,GAAW,CAAC,OAAO,GAAG,OAAO,CAAC;oBAC/B,OAAO,IAAI,EAAE,CAAC;gBACf,CAAC;YACF,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAChB,yEAAyE;aAC1E,CAAC,CAAC;QACJ,CAAC,CAAC;IACH,CAAC;IAEM,YAAY;QAClB,OAAO,CAAC,KAAY,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YACxE,aAAG,CAAC,KAAK,CAAC,YAAY,EAAE;gBACvB,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,uBAAuB;aAC1C,CAAC,CAAC;QACJ,CAAC,CAAC;IACH,CAAC;IAEM,aAAa;QACnB,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAC1D,MAAM,aAAa,GAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAY,IAAI,IAAA,mBAAU,GAAE,CAAC;YAClF,aAAG,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;YACnC,GAAW,CAAC,aAAa,GAAG,aAAa,CAAC;YAC3C,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC;YACjD,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACrB,aAAG,CAAC,kBAAkB,EAAE,CAAC;YAC1B,CAAC,CAAC,CAAC;YACH,IAAI,EAAE,CAAC;QACR,CAAC,CAAC;IACH,CAAC;IAEM,cAAc;QACpB,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,IAAA,mBAAW,EAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC5C,MAAM,aAAa,GAAI,GAAW,CAAC,aAAa,CAAC;YACjD,aAAG,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE;gBACpC,EAAE;gBACF,SAAS;gBACT,aAAa;gBACb,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBAC5C,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC;aACxC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACxC,aAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE;oBAC/D,EAAE;oBACF,aAAa;oBACb,aAAa,EAAE,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC;oBAC9C,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC;iBAC1C,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,IAAI,EAAE,CAAC;QACR,CAAC,CAAC;IACH,CAAC;CACD;AAzGD,wCAyGC"}
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../../src/server/http/middleware.ts"],"names":[],"mappings":";;;;;;AAyBA,8BAcC;AAvCD,mCAAoC;AAEpC,oDAA4B;AAC5B,uCAA0C;AAE1C,iDAA6C;AAK7C;iGACiG;AACjG,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACtC,MAAM;IACN,OAAO;IACP,OAAO;IACP,cAAc;IACd,eAAe;IACf,UAAU;IACV,eAAe;IACf,eAAe;CACf,CAAC,CAAC;AAEH;sFACsF;AACtF,SAAgB,SAAS,CAAC,GAAW;IACpC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACnB,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACjC,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACxB,CAAC;IACF,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED,MAAa,cAAc;IAC1B;;;;OAIG;IACI,SAAS,CAAC,OAAyB;QACzC,MAAM,OAAO,GAAG,IAAI,0BAAW,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAC1D,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,aAAa,IAAI,SAAS,CAAC;YAC7D,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;gBACrE,aAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,IAAA,mBAAW,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACxE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACpB,KAAK,EAAE,mBAAmB;oBAC1B,iBAAiB,EAAE,uCAAuC;iBAC1D,CAAC,CAAC;gBACH,OAAO;YACR,CAAC;YACD,IAAI,EAAE,CAAC;QACR,CAAC,CAAC;IACH,CAAC;IAEM,YAAY;QAClB,OAAO,CAAC,KAAY,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YACxE,aAAG,CAAC,KAAK,CAAC,YAAY,EAAE;gBACvB,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,GAAG,CAAC,MAAM;aAClB,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,cAAc;gBACrB,iBAAiB,EAAE,uBAAuB;aAC1C,CAAC,CAAC;QACJ,CAAC,CAAC;IACH,CAAC;IAEM,aAAa;QACnB,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAC1D,MAAM,aAAa,GAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAY,IAAI,IAAA,mBAAU,GAAE,CAAC;YAClF,aAAG,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;YACnC,GAAW,CAAC,aAAa,GAAG,aAAa,CAAC;YAC3C,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC;YACjD,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACrB,aAAG,CAAC,kBAAkB,EAAE,CAAC;YAC1B,CAAC,CAAC,CAAC;YACH,IAAI,EAAE,CAAC;QACR,CAAC,CAAC;IACH,CAAC;IAEM,cAAc;QACpB,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,IAAA,mBAAW,EAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC5C,MAAM,aAAa,GAAI,GAAW,CAAC,aAAa,CAAC;YACjD,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnC,aAAG,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE;gBACpC,EAAE;gBACF,SAAS;gBACT,aAAa;gBACb,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBAC5C,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC;aACxC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBACxC,aAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE;oBAC/D,EAAE;oBACF,aAAa;oBACb,aAAa,EAAE,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC;oBAC9C,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC;iBAC1C,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,IAAI,EAAE,CAAC;QACR,CAAC,CAAC;IACH,CAAC;CACD;AAjFD,wCAiFC"}

package/dist/server/http/public-origin.d.ts

@@ -0,0 +1,10 @@
+import type { Request } from 'express';
+/**
+ * The deployment's PUBLIC origin — what clients actually reach. Behind a TLS-terminating proxy /
+ * ingress, `req.protocol`/`req.get('host')` reflect the INTERNAL hop (e.g. `http://mcp:3000`), which
+ * would poison the broker's issuer/audience, redirect URIs, and discovery metadata. Set
+ * `CREATIO_MCP_PUBLIC_URL` (e.g. `https://mcp.example.com`) to pin the external origin; when unset we
+ * fall back to the request's own origin (correct for a direct/local deployment).
+ */
+export declare function resolvePublicOrigin(req: Request): string;
+//# sourceMappingURL=public-origin.d.ts.map

package/dist/server/http/public-origin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-origin.d.ts","sourceRoot":"","sources":["../../../src/server/http/public-origin.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEvC;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAMxD"}

package/dist/server/http/public-origin.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolvePublicOrigin = resolvePublicOrigin;
+const utils_1 = require("../../utils");
+/**
+ * The deployment's PUBLIC origin — what clients actually reach. Behind a TLS-terminating proxy /
+ * ingress, `req.protocol`/`req.get('host')` reflect the INTERNAL hop (e.g. `http://mcp:3000`), which
+ * would poison the broker's issuer/audience, redirect URIs, and discovery metadata. Set
+ * `CREATIO_MCP_PUBLIC_URL` (e.g. `https://mcp.example.com`) to pin the external origin; when unset we
+ * fall back to the request's own origin (correct for a direct/local deployment).
+ */
+function resolvePublicOrigin(req) {
+    const configured = (0, utils_1.env)('CREATIO_MCP_PUBLIC_URL');
+    if (configured) {
+        return configured.replace(/\/+$/, '');
+    }
+    return `${req.protocol}://${req.get('host')}`;
+}
+//# sourceMappingURL=public-origin.js.map

package/dist/server/http/public-origin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-origin.js","sourceRoot":"","sources":["../../../src/server/http/public-origin.ts"],"names":[],"mappings":";;AAWA,kDAMC;AAjBD,uCAAkC;AAIlC;;;;;;GAMG;AACH,SAAgB,mBAAmB,CAAC,GAAY;IAC/C,MAAM,UAAU,GAAG,IAAA,WAAG,EAAC,wBAAwB,CAAC,CAAC;IACjD,IAAI,UAAU,EAAE,CAAC;QAChB,OAAO,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,GAAG,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AAC/C,CAAC"}

package/dist/server/http/rate-limiter.d.ts

@@ -18,7 +18,7 @@ export declare class RateLimiter {
     private readonly _options;
     private _lastSweepAt;
     constructor(options: RateLimitOptions);
-    check(key: string, now: number): RateLimitResult;
     private _maybeSweep;
+    check(key: string, now: number): RateLimitResult;
 }
 //# sourceMappingURL=rate-limiter.d.ts.map

package/dist/server/http/rate-limiter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../../src/server/http/rate-limiter.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAChC,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,eAAe;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACrB;AAOD;;;;GAIG;AACH,qBAAa,WAAW;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmB;IAC5C,OAAO,CAAC,YAAY,CAAK;gBAEb,OAAO,EAAE,gBAAgB;IAI9B,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,eAAe;IAcvD,OAAO,CAAC,WAAW;CAWnB"}
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../../src/server/http/rate-limiter.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAChC,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,eAAe;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;CACrB;AAOD;;;;GAIG;AACH,qBAAa,WAAW;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmB;IAC5C,OAAO,CAAC,YAAY,CAAK;gBAEb,OAAO,EAAE,gBAAgB;IAIrC,OAAO,CAAC,WAAW;IAYZ,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,eAAe;CAavD"}

package/dist/server/http/rate-limiter.js

@@ -13,6 +13,17 @@ class RateLimiter {
     constructor(options) {
         this._options = options;
     }
+    _maybeSweep(now) {
+        if (now - this._lastSweepAt < this._options.windowMs) {
+            return;
+        }
+        this._lastSweepAt = now;
+        for (const [key, bucket] of this._buckets.entries()) {
+            if (now >= bucket.resetAt) {
+                this._buckets.delete(key);
+            }
+        }
+    }
     check(key, now) {
         this._maybeSweep(now);
         const bucket = this._buckets.get(key);
@@ -26,17 +37,6 @@ class RateLimiter {
         bucket.count++;
         return { allowed: true, retryAfterMs: 0 };
     }
-    _maybeSweep(now) {
-        if (now - this._lastSweepAt < this._options.windowMs) {
-            return;
-        }
-        this._lastSweepAt = now;
-        for (const [key, bucket] of this._buckets.entries()) {
-            if (now >= bucket.resetAt) {
-                this._buckets.delete(key);
-            }
-        }
-    }
 }
 exports.RateLimiter = RateLimiter;
 //# sourceMappingURL=rate-limiter.js.map

package/dist/server/http/rate-limiter.js.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../../src/server/http/rate-limiter.ts"],"names":[],"mappings":";;;AAiBA;;;;GAIG;AACH,MAAa,WAAW;IACN,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrC,QAAQ,CAAmB;IACpC,YAAY,GAAG,CAAC,CAAC;IAEzB,YAAY,OAAyB;QACpC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IACzB,CAAC;IAEM,KAAK,CAAC,GAAW,EAAE,GAAW;QACpC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC5E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;QAC3C,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;QAC/D,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAC3C,CAAC;IAEO,WAAW,CAAC,GAAW;QAC9B,IAAI,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtD,OAAO;QACR,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC;QACxB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACrD,IAAI,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC3B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACF,CAAC;IACF,CAAC;CACD;AAlCD,kCAkCC"}
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../../src/server/http/rate-limiter.ts"],"names":[],"mappings":";;;AAiBA;;;;GAIG;AACH,MAAa,WAAW;IACN,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IACrC,QAAQ,CAAmB;IACpC,YAAY,GAAG,CAAC,CAAC;IAEzB,YAAY,OAAyB;QACpC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IACzB,CAAC;IAEO,WAAW,CAAC,GAAW;QAC9B,IAAI,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtD,OAAO;QACR,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC;QACxB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACrD,IAAI,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC3B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACF,CAAC;IACF,CAAC;IAEM,KAAK,CAAC,GAAW,EAAE,GAAW;QACpC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC5E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;QAC3C,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC;QAC/D,CAAC;QACD,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAC3C,CAAC;CACD;AAlCD,kCAkCC"}

package/dist/server/http-agent.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Tune the global undici dispatcher behind Node's `fetch` — every outbound Creatio call goes through
+ * it. Node's default keep-alive timeout is short, so bursty MCP tool calls to a remote Creatio keep
+ * paying a fresh TLS+TCP handshake; a longer keep-alive plus a real per-origin connection pool reuses
+ * warm sockets and roughly halves cold-call latency. Idempotent and best-effort: any failure just
+ * leaves Node's default dispatcher in place (correctness is unaffected, only latency).
+ */
+export declare function installHttpAgent(): void;
+//# sourceMappingURL=http-agent.d.ts.map

package/dist/server/http-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-agent.d.ts","sourceRoot":"","sources":["../../src/server/http-agent.ts"],"names":[],"mappings":"AAMA;;;;;;GAMG;AACH,wBAAgB,gBAAgB,IAAI,IAAI,CAkBvC"}

package/dist/server/http-agent.js

@@ -0,0 +1,35 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.installHttpAgent = installHttpAgent;
+const undici_1 = require("undici");
+const log_1 = __importDefault(require("../log"));
+let _installed = false;
+/**
+ * Tune the global undici dispatcher behind Node's `fetch` — every outbound Creatio call goes through
+ * it. Node's default keep-alive timeout is short, so bursty MCP tool calls to a remote Creatio keep
+ * paying a fresh TLS+TCP handshake; a longer keep-alive plus a real per-origin connection pool reuses
+ * warm sockets and roughly halves cold-call latency. Idempotent and best-effort: any failure just
+ * leaves Node's default dispatcher in place (correctness is unaffected, only latency).
+ */
+function installHttpAgent() {
+    if (_installed) {
+        return;
+    }
+    _installed = true;
+    try {
+        (0, undici_1.setGlobalDispatcher)(new undici_1.Agent({
+            keepAliveTimeout: 30_000, // keep idle sockets ~30s across gaps between tool calls
+            keepAliveMaxTimeout: 600_000,
+            connections: 64, // per-origin pool (fine for one Creatio or per-tenant in gateway mode)
+            pipelining: 1,
+        }));
+        log_1.default.info('http.dispatcher.tuned', { keepAliveTimeoutMs: 30_000, connections: 64 });
+    }
+    catch (err) {
+        log_1.default.warn('http.dispatcher.tune_failed', { error: String(err) });
+    }
+}
+//# sourceMappingURL=http-agent.js.map

package/dist/server/http-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-agent.js","sourceRoot":"","sources":["../../src/server/http-agent.ts"],"names":[],"mappings":";;;;;AAaA,4CAkBC;AA/BD,mCAAoD;AAEpD,iDAAyB;AAEzB,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB;;;;;;GAMG;AACH,SAAgB,gBAAgB;IAC/B,IAAI,UAAU,EAAE,CAAC;QAChB,OAAO;IACR,CAAC;IACD,UAAU,GAAG,IAAI,CAAC;IAClB,IAAI,CAAC;QACJ,IAAA,4BAAmB,EAClB,IAAI,cAAK,CAAC;YACT,gBAAgB,EAAE,MAAM,EAAE,wDAAwD;YAClF,mBAAmB,EAAE,OAAO;YAC5B,WAAW,EAAE,EAAE,EAAE,uEAAuE;YACxF,UAAU,EAAE,CAAC;SACb,CAAC,CACF,CAAC;QACF,aAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,kBAAkB,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IACpF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,aAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;AACF,CAAC"}

package/dist/server/index.d.ts

@@ -1,3 +1,5 @@
 export * from './http';
+export * from './http-agent';
+export * from './keepalive';
 export * from './mcp';
 //# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAC;AACvB,cAAc,OAAO,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,cAAc,QAAQ,CAAC;AACvB,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,OAAO,CAAC"}

package/dist/server/index.js

@@ -15,5 +15,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./http"), exports);
+__exportStar(require("./http-agent"), exports);
+__exportStar(require("./keepalive"), exports);
 __exportStar(require("./mcp"), exports);
 //# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yCAAuB;AACvB,wCAAsB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yCAAuB;AACvB,+CAA6B;AAC7B,8CAA4B;AAC5B,wCAAsB"}

package/dist/server/keepalive.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Opt-in proactive session keep-alive for the SINGLE-SESSION auth modes (`legacy` / `client_credentials`).
+ *
+ * A Creatio forms (cookie) session is auto-logged-out after an idle period, so a long-idle MCP pays a
+ * re-login round-trip on the next call. Reactive reconnect (the HTTP client's 401 / login-bounce
+ * retry) already keeps things CORRECT; this only removes that first-call latency by issuing a cheap
+ * authenticated "pseudo-activity" request on an interval to reset the server-side idle timer.
+ *
+ * Deliberately NOT used for `broker`/`delegated`/`gateway`: those are per-user / per-request and have
+ * no single shared session to keep warm (broker refreshes per-user on demand instead).
+ */
+export declare class SessionKeepAlive {
+    private readonly _intervalMs;
+    private readonly _ping;
+    private _timer;
+    constructor(_intervalMs: number, _ping: () => Promise<unknown>);
+    start(): void;
+    stop(): void;
+}
+/**
+ * Keep-alive interval in ms from `CREATIO_MCP_KEEPALIVE_SECONDS`. Unset ⇒ the 5-min default;
+ * an explicit `0` (or any non-positive / invalid value) disables it. Only consulted for the
+ * single-session modes (legacy / client_credentials).
+ */
+export declare function keepAliveIntervalMs(): number;
+//# sourceMappingURL=keepalive.d.ts.map

package/dist/server/keepalive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keepalive.d.ts","sourceRoot":"","sources":["../../src/server/keepalive.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;GAUG;AACH,qBAAa,gBAAgB;IAI3B,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,KAAK;IAJvB,OAAO,CAAC,MAAM,CAA6B;gBAGzB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC;IAGxC,KAAK,IAAI,IAAI;IAcb,IAAI,IAAI,IAAI;CAMnB;AAMD;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAO5C"}

package/dist/server/keepalive.js

@@ -0,0 +1,64 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SessionKeepAlive = void 0;
+exports.keepAliveIntervalMs = keepAliveIntervalMs;
+const log_1 = __importDefault(require("../log"));
+const utils_1 = require("../utils");
+/**
+ * Opt-in proactive session keep-alive for the SINGLE-SESSION auth modes (`legacy` / `client_credentials`).
+ *
+ * A Creatio forms (cookie) session is auto-logged-out after an idle period, so a long-idle MCP pays a
+ * re-login round-trip on the next call. Reactive reconnect (the HTTP client's 401 / login-bounce
+ * retry) already keeps things CORRECT; this only removes that first-call latency by issuing a cheap
+ * authenticated "pseudo-activity" request on an interval to reset the server-side idle timer.
+ *
+ * Deliberately NOT used for `broker`/`delegated`/`gateway`: those are per-user / per-request and have
+ * no single shared session to keep warm (broker refreshes per-user on demand instead).
+ */
+class SessionKeepAlive {
+    _intervalMs;
+    _ping;
+    _timer;
+    constructor(_intervalMs, _ping) {
+        this._intervalMs = _intervalMs;
+        this._ping = _ping;
+    }
+    start() {
+        if (this._intervalMs <= 0 || this._timer) {
+            return;
+        }
+        this._timer = setInterval(() => {
+            void this._ping().catch((err) => log_1.default.warn('keepalive.ping.failed', { error: String(err) }));
+        }, this._intervalMs);
+        // Never hold the event loop open just for the keep-alive.
+        this._timer.unref();
+        log_1.default.info('keepalive.start', { intervalMs: this._intervalMs });
+    }
+    stop() {
+        if (this._timer) {
+            clearInterval(this._timer);
+            this._timer = undefined;
+        }
+    }
+}
+exports.SessionKeepAlive = SessionKeepAlive;
+/** Default keep-alive cadence — 5 min, comfortably below Creatio's idle-session timeout
+ *  (commonly 20–30 min) so a long-idle single-session deployment never pays a re-login. */
+const DEFAULT_KEEPALIVE_SECONDS = 300;
+/**
+ * Keep-alive interval in ms from `CREATIO_MCP_KEEPALIVE_SECONDS`. Unset ⇒ the 5-min default;
+ * an explicit `0` (or any non-positive / invalid value) disables it. Only consulted for the
+ * single-session modes (legacy / client_credentials).
+ */
+function keepAliveIntervalMs() {
+    const rawEnv = (0, utils_1.env)('CREATIO_MCP_KEEPALIVE_SECONDS');
+    if (rawEnv === undefined || rawEnv === '') {
+        return DEFAULT_KEEPALIVE_SECONDS * 1000;
+    }
+    const raw = Number(rawEnv);
+    return Number.isFinite(raw) && raw > 0 ? Math.floor(raw) * 1000 : 0;
+}
+//# sourceMappingURL=keepalive.js.map

package/dist/server/keepalive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keepalive.js","sourceRoot":"","sources":["../../src/server/keepalive.ts"],"names":[],"mappings":";;;;;;AAqDA,kDAOC;AA5DD,iDAAyB;AACzB,oCAA+B;AAE/B;;;;;;;;;;GAUG;AACH,MAAa,gBAAgB;IAIV;IACA;IAJV,MAAM,CAA6B;IAE3C,YACkB,WAAmB,EACnB,KAA6B;QAD7B,gBAAW,GAAX,WAAW,CAAQ;QACnB,UAAK,GAAL,KAAK,CAAwB;IAC5C,CAAC;IAEG,KAAK;QACX,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1C,OAAO;QACR,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE;YAC9B,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAC/B,aAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CACzD,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACrB,0DAA0D;QAC1D,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,aAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/D,CAAC;IAEM,IAAI;QACV,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACzB,CAAC;IACF,CAAC;CACD;AA5BD,4CA4BC;AAED;2FAC2F;AAC3F,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAEtC;;;;GAIG;AACH,SAAgB,mBAAmB;IAClC,MAAM,MAAM,GAAG,IAAA,WAAG,EAAC,+BAA+B,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAC3C,OAAO,yBAAyB,GAAG,IAAI,CAAC;IACzC,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC"}

package/dist/server/mcp/creatio-rest.d.ts

@@ -41,4 +41,10 @@ export declare function getSettingValue(response: {
 export declare function hasNonEmptySetting(response: {
     values?: Record<string, unknown>;
 } | undefined, code: string): boolean;
+/**
+ * Probe whether an optional capability is configured by checking a system setting holds a non-empty
+ * value (the cheap operator-facing signal both DataForge and Global Search use). Any probe failure
+ * degrades to `false` so callers stay graceful. `logLabel` namespaces the warning (e.g. `dataforge`).
+ */
+export declare function probeSettingEnabled(sysSettings: SysSettingReader, settingCode: string, logLabel: string): Promise<boolean>;
 //# sourceMappingURL=creatio-rest.d.ts.map

package/dist/server/mcp/creatio-rest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"creatio-rest.d.ts","sourceRoot":"","sources":["../../../src/server/mcp/creatio-rest.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,uBAAuB,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,QAAQ,CAAC;AAElF,MAAM,WAAW,wBAAwB;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;2FACuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,uBAAuB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC;CACd;AAED,qEAAqE;AACrE,MAAM,WAAW,mBAAmB;IACnC,IAAI,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAC1E;AAED,qDAAqD;AACrD,MAAM,WAAW,gBAAgB;IAChC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;CAC5E;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC9B,QAAQ,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG,SAAS,EAC1D,IAAI,EAAE,MAAM,GACV,OAAO,CAKT;AAED,kEAAkE;AAClE,wBAAgB,kBAAkB,CACjC,QAAQ,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG,SAAS,EAC1D,IAAI,EAAE,MAAM,GACV,OAAO,CAGT"}
+{"version":3,"file":"creatio-rest.d.ts","sourceRoot":"","sources":["../../../src/server/mcp/creatio-rest.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,MAAM,uBAAuB,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,QAAQ,CAAC;AAElF,MAAM,WAAW,wBAAwB;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;2FACuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,uBAAuB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,OAAO,CAAC;CACd;AAED,qEAAqE;AACrE,MAAM,WAAW,mBAAmB;IACnC,IAAI,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAC1E;AAED,qDAAqD;AACrD,MAAM,WAAW,gBAAgB;IAChC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;CAC5E;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC9B,QAAQ,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG,SAAS,EAC1D,IAAI,EAAE,MAAM,GACV,OAAO,CAGT;AAED,kEAAkE;AAClE,wBAAgB,kBAAkB,CACjC,QAAQ,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG,SAAS,EAC1D,IAAI,EAAE,MAAM,GACV,OAAO,CAGT;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACxC,WAAW,EAAE,gBAAgB,EAC7B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,CAAC,CAQlB"}

package/dist/server/mcp/creatio-rest.js

@@ -4,9 +4,14 @@
  * reading system settings. Capability clients (DataForge, Global Search, …) depend
  * on these interfaces rather than the concrete engines (Dependency Inversion).
  */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getSettingValue = getSettingValue;
 exports.hasNonEmptySetting = hasNonEmptySetting;
+exports.probeSettingEnabled = probeSettingEnabled;
+const log_1 = __importDefault(require("../../log"));
 /**
  * Extract a system setting's value from a QuerySysSettings response. Creatio
  * returns each setting as an object `{ code, value, ... }`; a bare value is also
@@ -14,13 +19,26 @@ exports.hasNonEmptySetting = hasNonEmptySetting;
  */
 function getSettingValue(response, code) {
     const entry = response?.values?.[code];
-    return entry && typeof entry === 'object'
-        ? entry.value
-        : entry;
+    return entry && typeof entry === 'object' ? entry.value : entry;
 }
 /** True when the named setting holds a non-empty string value. */
 function hasNonEmptySetting(response, code) {
     const value = getSettingValue(response, code);
     return typeof value === 'string' && value.trim().length > 0;
 }
+/**
+ * Probe whether an optional capability is configured by checking a system setting holds a non-empty
+ * value (the cheap operator-facing signal both DataForge and Global Search use). Any probe failure
+ * degrades to `false` so callers stay graceful. `logLabel` namespaces the warning (e.g. `dataforge`).
+ */
+async function probeSettingEnabled(sysSettings, settingCode, logLabel) {
+    try {
+        const response = await sysSettings.queryValues([settingCode]);
+        return hasNonEmptySetting(response, settingCode);
+    }
+    catch (err) {
+        log_1.default.warn(`${logLabel}.probe.failed`, { error: String(err) });
+        return false;
+    }
+}
 //# sourceMappingURL=creatio-rest.js.map

package/dist/server/mcp/creatio-rest.js.map

@@ -1 +1 @@
-{"version":3,"file":"creatio-rest.js","sourceRoot":"","sources":["../../../src/server/mcp/creatio-rest.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAoCH,0CAQC;AAGD,gDAMC;AAtBD;;;;GAIG;AACH,SAAgB,eAAe,CAC9B,QAA0D,EAC1D,IAAY;IAEZ,MAAM,KAAK,GAAG,QAAQ,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QACxC,CAAC,CAAE,KAA6B,CAAC,KAAK;QACtC,CAAC,CAAC,KAAK,CAAC;AACV,CAAC;AAED,kEAAkE;AAClE,SAAgB,kBAAkB,CACjC,QAA0D,EAC1D,IAAY;IAEZ,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC7D,CAAC"}
+{"version":3,"file":"creatio-rest.js","sourceRoot":"","sources":["../../../src/server/mcp/creatio-rest.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;AAsCH,0CAMC;AAGD,gDAMC;AAOD,kDAYC;AAtED,oDAA4B;AA+B5B;;;;GAIG;AACH,SAAgB,eAAe,CAC9B,QAA0D,EAC1D,IAAY;IAEZ,MAAM,KAAK,GAAG,QAAQ,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAA6B,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1F,CAAC;AAED,kEAAkE;AAClE,SAAgB,kBAAkB,CACjC,QAA0D,EAC1D,IAAY;IAEZ,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,mBAAmB,CACxC,WAA6B,EAC7B,WAAmB,EACnB,QAAgB;IAEhB,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9D,OAAO,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,aAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7D,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC"}

package/dist/server/mcp/crtmcp/crt-mcp-client.d.ts

@@ -35,6 +35,7 @@ export declare class CrtMcpPublishingClient {
     private readonly _configuration;
     private readonly _crud;
     constructor(configuration: ConfigurationCaller, crud: EntityReader);
+    private _rpc;
     /** Whether the publishing app is installed on this environment (its `McpServer` entity exists). */
     isInstalled(): Promise<boolean>;
     /** Online published servers (the app filters offline ones out of routing anyway). */
@@ -47,6 +48,5 @@ export declare class CrtMcpPublishingClient {
      * caller unchanged.
      */
     callTool(serverCode: string, name: string, args: Record<string, unknown>): Promise<unknown>;
-    private _rpc;
 }
 //# sourceMappingURL=crt-mcp-client.d.ts.map

package/dist/server/mcp/crtmcp/crt-mcp-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crt-mcp-client.d.ts","sourceRoot":"","sources":["../../../../src/server/mcp/crtmcp/crt-mcp-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAEnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,0FAA0F;AAC1F,MAAM,WAAW,YAAY;IAC5B,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAChF;AAID,qBAAa,sBAAsB;IAClC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAsB;IACrD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;gBAEzB,aAAa,EAAE,mBAAmB,EAAE,IAAI,EAAE,YAAY;IAKlE,mGAAmG;IACtF,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAU5C,qFAAqF;IACxE,iBAAiB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAY5D,kEAAkE;IACrD,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAMpE;;;;OAIG;IACI,QAAQ,CACd,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,OAAO,CAAC,OAAO,CAAC;YAIL,IAAI;CAiBlB"}
+{"version":3,"file":"crt-mcp-client.d.ts","sourceRoot":"","sources":["../../../../src/server/mcp/crtmcp/crt-mcp-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAEnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,WAAW,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,0FAA0F;AAC1F,MAAM,WAAW,YAAY;IAC5B,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,GAAG,SAAS,GAAG,KAAK,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAChF;AAID,qBAAa,sBAAsB;IAClC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAsB;IACrD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;gBAEzB,aAAa,EAAE,mBAAmB,EAAE,IAAI,EAAE,YAAY;YAKpD,IAAI;IAkBlB,mGAAmG;IACtF,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAU5C,qFAAqF;IACxE,iBAAiB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAe5D,kEAAkE;IACrD,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAMpE;;;;OAIG;IACI,QAAQ,CACd,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,OAAO,CAAC,OAAO,CAAC;CAGnB"}

package/dist/server/mcp/crtmcp/crt-mcp-client.js

@@ -13,6 +13,18 @@ class CrtMcpPublishingClient {
         this._configuration = configuration;
         this._crud = crud;
     }
+    async _rpc(serverCode, method, params) {
+        const response = await this._configuration.call({
+            rawPath: `/0/rest/ToolServiceMcp/${encodeURIComponent(serverCode)}/v1/mcp`,
+            httpMethod: 'POST',
+            body: { jsonrpc: '2.0', id: 1, method, params },
+        });
+        const body = response.body;
+        if (body && body.error) {
+            throw new Error(`crtmcp_rpc_error:${method}:${body.error.code ?? ''} ${body.error.message ?? ''}`.trim());
+        }
+        return body?.result;
+    }
     /** Whether the publishing app is installed on this environment (its `McpServer` entity exists). */
     async isInstalled() {
         try {
@@ -34,7 +46,10 @@ class CrtMcpPublishingClient {
         const list = Array.isArray(items) ? items : [];
         return list
             .filter((r) => r?.IsOnline === true && typeof r.Code === 'string' && r.Code.length > 0)
-            .map((r) => ({ code: r.Code, title: r.Name ?? r.Code }));
+            .map((r) => ({
+            code: r.Code,
+            title: r.Name ?? r.Code,
+        }));
     }
     /** Tool definitions advertised by a server's MCP `tools/list`. */
     async listTools(serverCode) {
@@ -50,18 +65,6 @@ class CrtMcpPublishingClient {
     callTool(serverCode, name, args) {
         return this._rpc(serverCode, 'tools/call', { name, arguments: args ?? {} });
     }
-    async _rpc(serverCode, method, params) {
-        const response = await this._configuration.call({
-            rawPath: `/0/rest/ToolServiceMcp/${encodeURIComponent(serverCode)}/v1/mcp`,
-            httpMethod: 'POST',
-            body: { jsonrpc: '2.0', id: 1, method, params },
-        });
-        const body = response.body;
-        if (body && body.error) {
-            throw new Error(`crtmcp_rpc_error:${method}:${body.error.code ?? ''} ${body.error.message ?? ''}`.trim());
-        }
-        return body?.result;
-    }
 }
 exports.CrtMcpPublishingClient = CrtMcpPublishingClient;
 //# sourceMappingURL=crt-mcp-client.js.map

package/dist/server/mcp/crtmcp/crt-mcp-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"crt-mcp-client.js","sourceRoot":"","sources":["../../../../src/server/mcp/crtmcp/crt-mcp-client.ts"],"names":[],"mappings":";;;;;;AACA,uDAA+B;AAsC/B,MAAM,aAAa,GAAG,WAAW,CAAC;AAElC,MAAa,sBAAsB;IACjB,cAAc,CAAsB;IACpC,KAAK,CAAe;IAErC,YAAY,aAAkC,EAAE,IAAkB;QACjE,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,mGAAmG;IAC5F,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC1E,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,aAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/D,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IAED,qFAAqF;IAC9E,KAAK,CAAC,iBAAiB;QAC7B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACvC,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC;YAC3C,GAAG,EAAE,GAAG;SACR,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAwC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,OAAO,IAAI;aACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;aACtF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAc,EAAE,KAAK,EAAG,CAAC,CAAC,IAAe,IAAK,CAAC,CAAC,IAAe,EAAE,CAAC,CAAC,CAAC;IAC7F,CAAC;IAED,kEAAkE;IAC3D,KAAK,CAAC,SAAS,CAAC,UAAkB;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAI,MAAqC,EAAE,KAAK,CAAC;QAC5D,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACI,QAAQ,CACd,UAAkB,EAClB,IAAY,EACZ,IAA6B;QAE7B,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,UAAkB,EAAE,MAAc,EAAE,MAAe;QACrE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;YAC/C,OAAO,EAAE,0BAA0B,kBAAkB,CAAC,UAAU,CAAC,SAAS;YAC1E,UAAU,EAAE,MAAM;YAClB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;SAC/C,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAGd,CAAC;QACT,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACd,oBAAoB,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CACxF,CAAC;QACH,CAAC;QACD,OAAO,IAAI,EAAE,MAAM,CAAC;IACrB,CAAC;CACD;AAtED,wDAsEC"}
+{"version":3,"file":"crt-mcp-client.js","sourceRoot":"","sources":["../../../../src/server/mcp/crtmcp/crt-mcp-client.ts"],"names":[],"mappings":";;;;;;AACA,uDAA+B;AAsC/B,MAAM,aAAa,GAAG,WAAW,CAAC;AAElC,MAAa,sBAAsB;IACjB,cAAc,CAAsB;IACpC,KAAK,CAAe;IAErC,YAAY,aAAkC,EAAE,IAAkB;QACjE,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,UAAkB,EAAE,MAAc,EAAE,MAAe;QACrE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;YAC/C,OAAO,EAAE,0BAA0B,kBAAkB,CAAC,UAAU,CAAC,SAAS;YAC1E,UAAU,EAAE,MAAM;YAClB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE;SAC/C,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAGd,CAAC;QACT,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACd,oBAAoB,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CACxF,CAAC;QACH,CAAC;QACD,OAAO,IAAI,EAAE,MAAM,CAAC;IACrB,CAAC;IAED,mGAAmG;IAC5F,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC1E,OAAO,IAAI,CAAC;QACb,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,aAAG,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/D,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IAED,qFAAqF;IAC9E,KAAK,CAAC,iBAAiB;QAC7B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACvC,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC;YAC3C,GAAG,EAAE,GAAG;SACR,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAwC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,OAAO,IAAI;aACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;aACtF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACZ,IAAI,EAAE,CAAC,CAAC,IAAc;YACtB,KAAK,EAAG,CAAC,CAAC,IAAe,IAAK,CAAC,CAAC,IAAe;SAC/C,CAAC,CAAC,CAAC;IACN,CAAC;IAED,kEAAkE;IAC3D,KAAK,CAAC,SAAS,CAAC,UAAkB;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAI,MAAqC,EAAE,KAAK,CAAC;QAC5D,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACI,QAAQ,CACd,UAAkB,EAClB,IAAY,EACZ,IAA6B;QAE7B,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC;CACD;AAzED,wDAyEC"}

package/dist/server/mcp/crtmcp/crt-mcp-tool-preparer.d.ts

@@ -9,12 +9,12 @@ export declare const PUBLISHED_TOOLS_CAPABILITY = "published-tools";
  * JSON-RPC endpoint, so the app keeps ownership of validation/RBAC/execution.
  */
 export declare class CrtMcpPublishingToolPreparer implements ToolPreparer {
-    readonly name = "published-tools";
     private readonly _client;
     private readonly _enabled;
+    readonly name = "published-tools";
     constructor(client: CrtMcpPublishingClient, enabled: boolean);
-    prepare(registrar: ToolRegistrar): Promise<boolean>;
     private _registerTool;
     private _toolName;
+    prepare(registrar: ToolRegistrar): Promise<boolean>;
 }
 //# sourceMappingURL=crt-mcp-tool-preparer.d.ts.map

package/dist/server/mcp/crtmcp/crt-mcp-tool-preparer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crt-mcp-tool-preparer.d.ts","sourceRoot":"","sources":["../../../../src/server/mcp/crtmcp/crt-mcp-tool-preparer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE/D,OAAO,EAAE,sBAAsB,EAAiB,MAAM,kBAAkB,CAAC;AAEzE,6BAA6B;AAC7B,eAAO,MAAM,0BAA0B,oBAAoB,CAAC;AAI5D;;;;;GAKG;AACH,qBAAa,4BAA6B,YAAW,YAAY;IAChE,SAAgB,IAAI,qBAA8B;IAElD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;gBAEvB,MAAM,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO;IAK/C,OAAO,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;IA8BhE,OAAO,CAAC,aAAa;IAerB,OAAO,CAAC,SAAS;CAIjB"}
+{"version":3,"file":"crt-mcp-tool-preparer.d.ts","sourceRoot":"","sources":["../../../../src/server/mcp/crtmcp/crt-mcp-tool-preparer.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE/D,OAAO,EAAE,sBAAsB,EAAiB,MAAM,kBAAkB,CAAC;AAEzE,6BAA6B;AAC7B,eAAO,MAAM,0BAA0B,oBAAoB,CAAC;AAI5D;;;;;GAKG;AACH,qBAAa,4BAA6B,YAAW,YAAY;IAChE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IAEnC,SAAgB,IAAI,qBAA8B;gBAEtC,MAAM,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO;IAK5D,OAAO,CAAC,aAAa;IAerB,OAAO,CAAC,SAAS;IAKJ,OAAO,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC;CA6BhE"}