@adminforth/mcp 1.4.2 → 2.0.0

package/dist/adminPanelConfirmation.js

@@ -1,5 +1,6 @@
 import { randomUUID } from 'node:crypto';
 import { MAX_ACTIONS_PER_CONFIRMATION } from './schemas/confirmation.js';
+import { isErrorOutput } from './toolOutput.js';
 import { adminApiPrefix, CONFIRMATION_PAGE_PATH } from './urls.js';
 export const WAIT_FOR_CONFIRMATION_TOOL_NAME = 'wait_for_confirmation';
 const CONFIRMATION_TTL_MS = 10 * 60 * 1000;
@@ -208,7 +209,7 @@ export class McpAdminPanelConfirmation {
             clearTimeout(timer);
             input.abortSignal?.removeEventListener('abort', abort);
         }
-        return { output, isError: responseStatus >= 400 || Boolean(output && typeof output === 'object' && ('error' in output || output.ok === false)) };
+        return { output, isError: isErrorOutput(responseStatus, output) };
     }
     /** All actions of a group belong to one user and run as one agent, so they can share one verification. */
     openGroup(ids, adminUser) {

package/dist/apiTools.js

@@ -1,4 +1,5 @@
 import { compactInputSchema } from './compactInputSchema.js';
+import { isErrorOutput } from './toolOutput.js';
 import { adminApiPrefix } from './urls.js';
 import { AdminForthDataTypes } from 'adminforth';
 const METHODS_WITHOUT_REQUEST_BODY = new Set(['GET', 'HEAD']);
@@ -308,7 +309,7 @@ export class AdminForthApiTools {
                 isError: true,
             };
         }
-        const isError = response.status >= 400 || Boolean(output && typeof output === 'object' && 'error' in output);
+        const isError = isErrorOutput(response.status, output);
         return {
             output: isError || !override?.project ? output : override.project(output, args, params.arguments ?? {}),
             isError,

package/dist/custom/McpAuthorize.vue

@@ -1,18 +1,19 @@
 <template>
-  <div class="af-mcp-authorize flex min-h-screen items-center justify-center bg-gray-100 p-4 dark:bg-gray-800">
-    <div class="w-full max-w-lg rounded-lg bg-white p-6 shadow dark:bg-gray-700">
+  <div class="af-mcp-authorize flex min-h-screen items-center justify-center bg-lightHtml p-4 dark:bg-darkHtml">
+    <Spinner v-if="!framed && !authorization && !error" class="h-8 w-8" />
+    <Card v-else class="af-mcp-authorize-card w-full max-w-lg">
       <template v-if="framed">
-        <h1 class="text-xl font-medium text-gray-900 dark:text-white">{{ $t('Cannot connect MCP client') }}</h1>
-        <p class="mt-3 text-sm text-gray-600 dark:text-gray-300">
+        <h1 :class="TITLE_CLASSES">{{ $t('Cannot connect MCP client') }}</h1>
+        <p :class="TEXT_CLASSES">
           {{ $t('This page is embedded in another site. Open it in a separate browser tab to connect your MCP client.') }}
         </p>
       </template>
       <template v-else-if="authorization">
-        <h1 class="text-xl font-medium text-gray-900 dark:text-white">
+        <h1 :class="TITLE_CLASSES">
           {{ $t('Connect {client}?', { client: authorization.clientName }) }}
         </h1>
-        <p class="mt-3 text-sm text-gray-600 dark:text-gray-300">
-          <b>{{ authorization.clientName }}</b>
+        <p :class="TEXT_CLASSES">
+          <b class="font-semibold text-lightCardTitle dark:text-darkCardTitle">{{ authorization.clientName }}</b>
           <span v-if="authorization.clientHost"> ({{ authorization.clientHost }})</span>
           <template v-if="readOnly">
             {{ $t('asks to act on your behalf in {brand}: it will see all data you can see, but not change it.', { brand: brandName }) }}
@@ -24,10 +25,14 @@
         <Checkbox v-model="readOnlyChosen" :disabled="authorization.serverReadOnly" class="mt-4">
           {{ $t('Read only: the agent can only read data') }}
         </Checkbox>
-        <p v-if="authorization.loopbackRedirect" class="mt-3 text-sm font-medium text-amber-700 dark:text-amber-300">
-          {{ $t('After you answer, your browser returns to an app running on this computer. Allow only if you have just started connecting {client} yourself.', { client: authorization.clientName }) }}
-        </p>
-        <p v-else class="mt-3 text-sm text-gray-600 dark:text-gray-300">
+        <div
+          v-if="authorization.loopbackRedirect"
+          class="mt-4 flex items-start gap-2 rounded-default border border-lightWarningBorder bg-lightWarningSoft p-3 text-sm text-lightWarning dark:border-darkWarningBorder dark:bg-darkWarningSoft dark:text-darkWarning"
+        >
+          <IconTriangleAlert class="mt-0.5 h-4 w-4 shrink-0" aria-hidden="true" />
+          <p>{{ $t('After you answer, your browser returns to an app running on this computer. Allow only if you have just started connecting {client} yourself.', { client: authorization.clientName }) }}</p>
+        </div>
+        <p v-else :class="TEXT_CLASSES">
           {{ $t('After you answer, your browser returns to {host}.', { host: authorization.redirectHost }) }}
         </p>
         <div class="mt-6 flex justify-end gap-2">
@@ -35,24 +40,26 @@
           <Button :loader="resolving" :disabled="resolving || !armed" @click="resolve(true)">{{ $t('Allow') }}</Button>
         </div>
       </template>
-      <template v-else-if="error">
-        <h1 class="text-xl font-medium text-gray-900 dark:text-white">{{ $t('Cannot connect MCP client') }}</h1>
-        <p class="mt-3 text-sm text-gray-600 dark:text-gray-300">{{ error }}</p>
+      <template v-else>
+        <h1 :class="TITLE_CLASSES">{{ $t('Cannot connect MCP client') }}</h1>
+        <p :class="TEXT_CLASSES">{{ error }}</p>
       </template>
-      <Spinner v-else class="mx-auto h-8 w-8" />
-    </div>
+    </Card>
   </div>
 </template>
 
 <script setup lang="ts">
 import { computed, nextTick, onBeforeUnmount, onMounted, ref } from 'vue';
 import { useRoute } from 'vue-router';
-import { Button, Checkbox, Spinner } from '@/afcl';
+import { Button, Card, Checkbox, Spinner } from '@/afcl';
+import { IconTriangleAlert } from '@iconify-prerendered/vue-lucide';
 import { useCoreStore } from '@/stores/core';
 import { callAdminForthApi } from '@/utils';
 
 // Long enough to swallow the second click of a double click, too short for a reader to notice.
 const ALLOW_DELAY_MS = 500;
+const TITLE_CLASSES = 'text-lg font-semibold tracking-tight text-lightCardTitle dark:text-darkCardTitle';
+const TEXT_CLASSES = 'mt-2 text-sm text-lightCardDescription dark:text-darkCardDescription';
 
 type Authorization = {
   clientName: string;

package/dist/custom/McpConfirm.vue

@@ -1,24 +1,28 @@
 <template>
-  <div class="af-mcp-confirm flex min-h-screen items-center justify-center bg-gray-100 p-4 dark:bg-gray-800">
-    <div v-if="resultMessage || error" class="w-full max-w-lg rounded-lg bg-white p-6 shadow dark:bg-gray-700">
+  <div class="af-mcp-confirm flex min-h-screen items-center justify-center bg-lightHtml p-4 dark:bg-darkHtml">
+    <Card v-if="resultMessage || error" class="af-mcp-confirm-card w-full max-w-lg">
       <template v-if="pending">
-        <h1 class="text-xl font-medium text-gray-900 dark:text-white">{{ title }}</h1>
-        <p class="mt-3 text-sm text-gray-600 dark:text-gray-300">
-          <b>{{ pending.connectionName }}</b>
+        <h1 :class="TITLE_CLASSES">{{ title }}</h1>
+        <p :class="TEXT_CLASSES">
+          <b class="font-semibold text-lightCardTitle dark:text-darkCardTitle">{{ pending.connectionName }}</b>
           {{ $t('asks to run this action on your behalf. | asks to run these actions on your behalf.', pending.actions.length) }}
         </p>
-        <p class="mt-4 text-sm font-medium" :class="failed ? 'text-red-700 dark:text-red-300' : 'text-green-700 dark:text-green-300'">
+        <p
+          class="af-mcp-confirm-result mt-4 flex items-start gap-2 text-sm font-medium"
+          :class="failed ? 'text-lightDanger dark:text-darkDanger' : 'text-lightSuccess dark:text-darkSuccess'"
+        >
+          <component :is="failed ? IconCircleAlert : IconCircleCheck" class="mt-0.5 h-4 w-4 shrink-0" aria-hidden="true" />
           {{ resultMessage }}
         </p>
-        <ul v-if="failedErrors.length" class="mt-2 list-disc space-y-1 pl-5 text-sm text-red-700 dark:text-red-300">
+        <ul v-if="failedErrors.length" class="mt-2 list-disc space-y-1 pl-10 text-sm text-lightDanger dark:text-darkDanger">
           <li v-for="(failedError, i) in failedErrors" :key="i">{{ failedError }}</li>
         </ul>
       </template>
       <template v-else>
-        <h1 class="text-xl font-medium text-gray-900 dark:text-white">{{ $t('Cannot run the action') }}</h1>
-        <p class="mt-3 text-sm text-gray-600 dark:text-gray-300">{{ error }}</p>
+        <h1 :class="TITLE_CLASSES">{{ $t('Cannot run the action') }}</h1>
+        <p :class="TEXT_CLASSES">{{ error }}</p>
       </template>
-    </div>
+    </Card>
     <Spinner v-else-if="running" class="h-8 w-8" />
   </div>
 </template>
@@ -27,7 +31,8 @@
 import { computed, onMounted, ref } from 'vue';
 import { useRoute } from 'vue-router';
 import { useI18n } from 'vue-i18n';
-import { Spinner } from '@/afcl';
+import { Card, Spinner } from '@/afcl';
+import { IconCircleAlert, IconCircleCheck } from '@iconify-prerendered/vue-lucide';
 import { callAdminForthApi } from '@/utils';
 
 type PendingAction = {
@@ -41,6 +46,9 @@ type PendingConfirmation = {
   actions: PendingAction[];
 };
 type ActionResult = { id: string; output: { error?: string }; isError: boolean };
+
+const TITLE_CLASSES = 'text-lg font-semibold tracking-tight text-lightCardTitle dark:text-darkCardTitle';
+const TEXT_CLASSES = 'mt-2 text-sm text-lightCardDescription dark:text-darkCardDescription';
 const { t } = useI18n();
 const route = useRoute();
 const pending = ref<PendingConfirmation | null>(null);

package/dist/custom/McpSettings.vue

@@ -1,18 +1,16 @@
 <template>
-  <div class="af-mcp-settings flex flex-col justify-center mr-6 md:mr-12">
-    <div class="flex flex-wrap items-start justify-between gap-4">
-      <div>
-        <h2 class="text-3xl font-semibold leading-none text-gray-800 dark:text-gray-50">
-          {{ $t('MCP Settings') }}
-        </h2>
-        <p class="mt-3 text-sm text-gray-600 dark:text-gray-300">
-          {{ $t('Connect an AI agent to {brand}. It acts on your behalf with your permissions.', { brand: brandName }) }}
-        </p>
-      </div>
-      <Button @click="openConnectDialog">
-        {{ $t('Connect agent') }}
-      </Button>
-    </div>
+  <div class="af-mcp-settings flex flex-col">
+    <PageHeader
+      :title="$t('MCP')"
+      :description="$t('Connect an AI agent to {brand}. It acts on your behalf with your permissions.', { brand: brandName })"
+    >
+      <template #actions>
+        <Button class="af-mcp-connect-button" @click="openConnectDialog">
+          <IconPlus class="w-4 h-4" aria-hidden="true" />
+          {{ $t('Connect agent') }}
+        </Button>
+      </template>
+    </PageHeader>
 
     <Table
       class="mt-6"
@@ -22,16 +20,16 @@
       :pageSize="10"
     >
       <template #cell:name="{ item }">
-        <p class="font-medium text-gray-900 dark:text-white">
+        <p class="flex flex-wrap items-center gap-2 font-medium text-lightFormFieldTextColor dark:text-darkFormFieldTextColor">
           {{ item.name }}
           <span
             v-if="serverReadOnly || item.readOnly"
-            class="ml-2 rounded bg-gray-100 px-1.5 py-0.5 text-xs font-medium text-gray-600 dark:bg-gray-700 dark:text-gray-300"
+            class="af-mcp-read-only-badge inline-flex h-5 items-center rounded-full bg-lightSecondaryDarken px-2 text-xs font-medium text-lightInputIconColor dark:bg-darkSecondaryLighten dark:text-darkInputIconColor"
           >
             {{ $t('Read only') }}
           </span>
         </p>
-        <p class="mt-0.5 text-xs text-gray-500 dark:text-gray-400">
+        <p class="mt-0.5 text-xs text-lightInputIconColor dark:text-darkInputIconColor">
           {{ item.oauthClientId ? `${$t('OAuth')} · ${oauthClientHost(item.oauthClientId)}` : $t('Auth secret') }} · {{ formatDateTime(item.createdAt) }}
         </p>
       </template>
@@ -41,17 +39,20 @@
           <img v-if="describeAgent(item.lastUsedByAgent).icon" :src="describeAgent(item.lastUsedByAgent).icon" class="h-5 w-5" alt="" />
           <span>{{ describeAgent(item.lastUsedByAgent).label }}</span>
         </div>
-        <span v-else class="text-gray-400">{{ $t('Not used yet') }}</span>
+        <span v-else class="text-lightInputPlaceholderText dark:text-darkInputPlaceholderText">{{ $t('Not used yet') }}</span>
       </template>
 
       <template #cell:lastUsedAt="{ item }">
-        {{ item.lastUsedAt ? formatDateTime(item.lastUsedAt) : $t('Never') }}
+        <template v-if="item.lastUsedAt">{{ formatDateTime(item.lastUsedAt) }}</template>
+        <span v-else class="text-lightInputPlaceholderText dark:text-darkInputPlaceholderText">{{ $t('Never') }}</span>
       </template>
 
       <template #cell:actions="{ item }">
         <div class="flex justify-end">
           <Button
-            variant="danger"
+            class="af-mcp-revoke-button"
+            variant="secondary"
+            size="sm"
             :loader="revokingId === item.id"
             :disabled="revokingId === item.id"
             @click="revoke(item)"
@@ -64,33 +65,35 @@
 
     <Dialog
       ref="dialogRef"
-      class="w-full max-w-3xl"
+      class="af-mcp-connect-dialog w-full max-w-3xl"
       :header="$t('Connect an AI agent')"
       :buttons="dialogButtons"
     >
       <ButtonGroup v-model="activeClient">
         <template v-for="client in CLIENTS" :key="client" #[`button:${client}`]>
-          <span class="px-4 py-2">{{ client }}</span>
+          <span class="px-3.5 py-1.5">{{ client }}</span>
         </template>
       </ButtonGroup>
 
       <template v-if="showsCreatedSecret">
-        <p class="mt-4 text-sm text-amber-700 dark:text-amber-300">{{ $t('Copy it now. You will not be able to view it again.') }}</p>
-        <p class="mt-3 rounded-default border border-amber-300 bg-amber-50 p-3 text-sm text-amber-800 dark:border-amber-700 dark:bg-amber-950 dark:text-amber-200">
-          <template v-if="createdSecretReadOnly">
+        <p class="mt-4 text-sm font-medium text-lightWarning dark:text-darkWarning">{{ $t('Copy it now. You will not be able to view it again.') }}</p>
+        <div class="mt-3 flex items-start gap-2 rounded-default border border-lightWarningBorder bg-lightWarningSoft p-3 text-sm text-lightWarning dark:border-darkWarningBorder dark:bg-darkWarningSoft dark:text-darkWarning">
+          <IconTriangleAlert class="mt-0.5 h-4 w-4 shrink-0" aria-hidden="true" />
+          <p v-if="createdSecretReadOnly">
             {{ $t('This secret lets an agent read all data you can see in the admin panel. Keep it like a password, give it to one agent only, and revoke it if that agent or its device is compromised.') }}
-          </template>
-          <template v-else>
+          </p>
+          <p v-else>
             {{ $t('This secret lets an agent do everything you can do in the admin panel, including deleting data and changing your security settings. Keep it like a password, give it to one agent only, and revoke it if that agent or its device is compromised.') }}
-          </template>
-        </p>
+          </p>
+        </div>
       </template>
 
-      <div v-for="step in activeSteps" :key="step.snippet" class="mt-4">
-        <p class="text-sm text-gray-500 dark:text-gray-400">{{ step.hint }}</p>
+      <div v-for="step in activeSteps" :key="step.snippet" class="af-mcp-setup-step mt-4">
+        <p class="text-sm text-lightInputIconColor dark:text-darkInputIconColor">{{ step.hint }}</p>
         <div class="mt-2 flex items-start gap-2">
-          <code class="min-w-0 flex-1 overflow-x-auto whitespace-pre rounded-default bg-gray-100 px-3 py-2 text-sm text-gray-800 dark:bg-gray-900 dark:text-gray-100">{{ step.snippet }}</code>
+          <code :class="SNIPPET_CLASSES" class="min-w-0 flex-1 overflow-x-auto whitespace-pre">{{ step.snippet }}</code>
           <Button variant="secondary" @click="copy(step.snippet, $t('Copied'))">
+            <IconCopy class="w-4 h-4" aria-hidden="true" />
             {{ $t('Copy') }}
           </Button>
         </div>
@@ -98,8 +101,8 @@
 
       <!-- enter is handled on the wrapper so it fires once: Input spreads attrs on both its root and the input -->
       <div v-if="activeClient === 'Other' && !createdSecret" class="mt-4" @keydown.enter="createAuthSecret">
-        <p class="text-sm text-gray-500 dark:text-gray-400">{{ $t('Use one auth secret for one agent.') }}</p>
-        <label class="mt-5 block text-sm font-medium text-gray-700 dark:text-gray-200">{{ $t('Secret name') }}</label>
+        <p class="text-sm text-lightInputIconColor dark:text-darkInputIconColor">{{ $t('Use one auth secret for one agent.') }}</p>
+        <label class="mt-5 block text-sm font-medium text-lightTextLabel dark:text-darkTextLabel">{{ $t('Secret name') }}</label>
         <div class="mt-2">
           <Input v-model="secretName" type="text" fullWidth placeholder="Claude Code" />
         </div>
@@ -109,8 +112,8 @@
       </div>
 
       <template v-if="showsCreatedSecret">
-        <p class="mt-5 text-xs font-medium uppercase text-gray-500 dark:text-gray-400">{{ $t('Prompt for your agent') }}</p>
-        <pre class="mt-2 whitespace-pre-wrap rounded-default bg-gray-100 p-3 text-sm text-gray-800 dark:bg-gray-900 dark:text-gray-100">{{ setupPrompt }}</pre>
+        <p class="mt-4 text-sm text-lightInputIconColor dark:text-darkInputIconColor">{{ $t('Prompt for your agent') }}</p>
+        <pre :class="SNIPPET_CLASSES" class="mt-2 whitespace-pre-wrap">{{ setupPrompt }}</pre>
       </template>
     </Dialog>
   </div>
@@ -119,7 +122,8 @@
 <script setup lang="ts">
 import { computed, onBeforeUnmount, onMounted, ref } from 'vue';
 import { useI18n } from 'vue-i18n';
-import { Button, ButtonGroup, Checkbox, Dialog, Input, Table } from '@/afcl';
+import { Button, ButtonGroup, Checkbox, Dialog, Input, PageHeader, Table } from '@/afcl';
+import { IconCopy, IconPlus, IconTriangleAlert } from '@iconify-prerendered/vue-lucide';
 import { useCoreStore } from '@/stores/core';
 import adminforth from '@/adminforth';
 import { callAdminForthApi, formatDateTime } from '@/utils';
@@ -142,6 +146,7 @@ type Client = typeof CLIENTS[number];
 const CLIENTS = ['Claude Code', 'Codex', 'Other'] as const;
 const NON_SERVER_NAME_CHARACTER_RE = /[^a-z0-9]+/g;
 const EDGE_HYPHEN_RE = /^-+|-+$/g;
+const SNIPPET_CLASSES = 'rounded-default bg-lightSecondaryDarken px-3 py-1.5 font-mono text-[13px] leading-[22px] text-lightFormFieldTextColor dark:bg-darkSecondaryLighten dark:text-darkFormFieldTextColor';
 
 const { t } = useI18n();
 const coreStore = useCoreStore();

package/dist/index.js

@@ -78,8 +78,8 @@ export default class AdminForthMcpPlugin extends AdminForthPlugin {
         auth.userMenuSettingsPages ??= [];
         if (!auth.userMenuSettingsPages.some((page) => page.slug === 'mcp')) {
             auth.userMenuSettingsPages.push({
-                icon: 'flowbite:server-outline',
-                pageLabel: 'MCP Settings',
+                icon: 'lucide:bot',
+                pageLabel: 'MCP',
                 slug: 'mcp',
                 component: this.componentPath('McpSettings.vue'),
                 isVisible: () => true,

package/dist/toolOutput.d.ts

@@ -0,0 +1 @@
+export declare function isErrorOutput(status: number, output: unknown): boolean;

package/dist/toolOutput.js

@@ -0,0 +1,13 @@
+// AdminForth core reports a beforeSave hook that returned { ok: false, error: null } with this error.
+// The hook saved the record itself and may point to it with redirectToRecordId; the admin panel treats it as a success.
+const HOOK_ABORT_ERROR = 'Operation aborted by hook';
+export function isErrorOutput(status, output) {
+    if (status >= 400)
+        return true;
+    if (!output || typeof output !== 'object')
+        return false;
+    const { error, ok } = output;
+    if (error === HOOK_ABORT_ERROR)
+        return false;
+    return 'error' in output || ok === false;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adminforth/mcp",
-  "version": "1.4.2",
+  "version": "2.0.0",
   "description": "Expose AdminForth APIs as an authenticated MCP server",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -49,7 +49,7 @@
     "typescript": "^5.7.3"
   },
   "peerDependencies": {
-    "adminforth": "^3.32.0",
+    "adminforth": "^4.1.0",
     "express": "^4.21.0 || ^5.0.0"
   },
   "release": {