@ampless/backend 1.0.0-alpha.20 → 1.0.0-alpha.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,10 +1,10 @@
1
1
  /**
2
- * MCP HTTP endpoint Lambda. Phase 5: Bearer validation + JSON-RPC 2.0
3
- * tool dispatch over AppSync IAM auth, including `upload_media`.
2
+ * MCP HTTP endpoint Lambda. Bearer validation + JSON-RPC 2.0 tool
3
+ * dispatch over AppSync IAM auth, including `upload_media`.
4
4
  *
5
5
  * 1. Reads KvStore directly (PK = 'mcp-tokens', SK = SHA-256 hex)
6
- * to validate `Authorization: Bearer amk_...`. Same narrow IAM
7
- * grant as Phase 3 (`dynamodb:GetItem` on the KvStore table).
6
+ * to validate `Authorization: Bearer amk_...`. The Lambda has a
7
+ * narrow IAM grant: `dynamodb:GetItem` on the KvStore table.
8
8
  * 2. Parses the incoming JSON-RPC envelope by hand (no MCP SDK
9
9
  * stdio transport in a Lambda runtime — overkill for the three
10
10
  * verbs we actually need).
package/dist/index.d.ts CHANGED
@@ -18,10 +18,8 @@ interface DefineAmplessBackendOpts {
18
18
  }
19
19
  type AmplessBackend = any;
20
20
  /**
21
- * The end-to-end ampless backend wiring: identical to the 251-line
22
- * `backend.ts` that used to live in `templates/_shared/amplify/`,
23
- * but parameterised on the resource objects so users only have to
24
- * compose the imports.
21
+ * The end-to-end ampless backend wiring, parameterised on the resource
22
+ * objects so users only have to compose the imports.
25
23
  *
26
24
  * What it does, in order:
27
25
  * 1. Calls `defineBackend` with every Ampless resource.
@@ -201,8 +199,8 @@ interface AmplessSchemaAuthorizationOpts {
201
199
  * destructure `resource` out of their `allow` parameter), so this
202
200
  * grant applies broadly — every model the Lambda calls is reachable.
203
201
  * That's wider than strictly necessary; the MCP tools' GraphQL
204
- * operations narrow the effective surface to Post / PostTag in
205
- * Phase 4 and Media in Phase 5.
202
+ * operations narrow the effective surface to Post / PostTag for
203
+ * content tools and Media for `upload_media`.
206
204
  *
207
205
  * Typed as `unknown` for the same reason `userAdminFunction` /
208
206
  * `mcpHandlerFunction` are in other helpers — `defineFunction`'s
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@ampless/backend",
3
- "version": "1.0.0-alpha.20",
3
+ "version": "1.0.0-alpha.21",
4
4
  "description": "Amplify Gen 2 backend factories for ampless: auth, data, storage, event processors, API key renewer",
5
5
  "license": "MIT",
6
6
  "type": "module",
@@ -65,8 +65,8 @@
65
65
  "@smithy/protocol-http": "^5.3.0",
66
66
  "@smithy/signature-v4": "^5.4.0",
67
67
  "fflate": "^0.8.2",
68
- "ampless": "1.0.0-alpha.10",
69
- "@ampless/mcp-server": "1.0.0-alpha.11"
68
+ "ampless": "1.0.0-alpha.11",
69
+ "@ampless/mcp-server": "1.0.0-alpha.12"
70
70
  },
71
71
  "peerDependencies": {
72
72
  "@aws-amplify/backend": "^1",