@ampless/backend 1.0.0-alpha.20 → 1.0.0-alpha.21
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
/**
|
|
2
|
-
* MCP HTTP endpoint Lambda.
|
|
3
|
-
*
|
|
2
|
+
* MCP HTTP endpoint Lambda. Bearer validation + JSON-RPC 2.0 tool
|
|
3
|
+
* dispatch over AppSync IAM auth, including `upload_media`.
|
|
4
4
|
*
|
|
5
5
|
* 1. Reads KvStore directly (PK = 'mcp-tokens', SK = SHA-256 hex)
|
|
6
|
-
* to validate `Authorization: Bearer amk_...`.
|
|
7
|
-
*
|
|
6
|
+
* to validate `Authorization: Bearer amk_...`. The Lambda has a
|
|
7
|
+
* narrow IAM grant: `dynamodb:GetItem` on the KvStore table.
|
|
8
8
|
* 2. Parses the incoming JSON-RPC envelope by hand (no MCP SDK
|
|
9
9
|
* stdio transport in a Lambda runtime — overkill for the three
|
|
10
10
|
* verbs we actually need).
|
package/dist/index.d.ts
CHANGED
|
@@ -18,10 +18,8 @@ interface DefineAmplessBackendOpts {
|
|
|
18
18
|
}
|
|
19
19
|
type AmplessBackend = any;
|
|
20
20
|
/**
|
|
21
|
-
* The end-to-end ampless backend wiring
|
|
22
|
-
*
|
|
23
|
-
* but parameterised on the resource objects so users only have to
|
|
24
|
-
* compose the imports.
|
|
21
|
+
* The end-to-end ampless backend wiring, parameterised on the resource
|
|
22
|
+
* objects so users only have to compose the imports.
|
|
25
23
|
*
|
|
26
24
|
* What it does, in order:
|
|
27
25
|
* 1. Calls `defineBackend` with every Ampless resource.
|
|
@@ -201,8 +199,8 @@ interface AmplessSchemaAuthorizationOpts {
|
|
|
201
199
|
* destructure `resource` out of their `allow` parameter), so this
|
|
202
200
|
* grant applies broadly — every model the Lambda calls is reachable.
|
|
203
201
|
* That's wider than strictly necessary; the MCP tools' GraphQL
|
|
204
|
-
* operations narrow the effective surface to Post / PostTag
|
|
205
|
-
*
|
|
202
|
+
* operations narrow the effective surface to Post / PostTag for
|
|
203
|
+
* content tools and Media for `upload_media`.
|
|
206
204
|
*
|
|
207
205
|
* Typed as `unknown` for the same reason `userAdminFunction` /
|
|
208
206
|
* `mcpHandlerFunction` are in other helpers — `defineFunction`'s
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@ampless/backend",
|
|
3
|
-
"version": "1.0.0-alpha.
|
|
3
|
+
"version": "1.0.0-alpha.21",
|
|
4
4
|
"description": "Amplify Gen 2 backend factories for ampless: auth, data, storage, event processors, API key renewer",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"type": "module",
|
|
@@ -65,8 +65,8 @@
|
|
|
65
65
|
"@smithy/protocol-http": "^5.3.0",
|
|
66
66
|
"@smithy/signature-v4": "^5.4.0",
|
|
67
67
|
"fflate": "^0.8.2",
|
|
68
|
-
"ampless": "1.0.0-alpha.
|
|
69
|
-
"@ampless/mcp-server": "1.0.0-alpha.
|
|
68
|
+
"ampless": "1.0.0-alpha.11",
|
|
69
|
+
"@ampless/mcp-server": "1.0.0-alpha.12"
|
|
70
70
|
},
|
|
71
71
|
"peerDependencies": {
|
|
72
72
|
"@aws-amplify/backend": "^1",
|