@appaflytech/zeyrek-ai-mcp 0.0.28 → 0.0.31

package/.env.example

@@ -51,6 +51,21 @@ REQUEST_TIMEOUT_MS=100000
 STUDIO_BASE_URL=http://localhost:3000
 SCREENSHOT_BROWSER_PATH=
 
+# Jeton kasasi (g-09): MCP_STATE_DIR verilirse tok_ referanslari ve test kullanicisi jetonlari
+# <dizin>/token-vault.json'a (0600) yazilir ve gateway yeniden baslayinca da cozulur. Yalniz lokal
+# hedefte (ORG_API_BASE_URL localhost) yazilir. MCP_TOKEN_TTL_MINUTES referansin omru (dakika).
+MCP_STATE_DIR=
+MCP_TOKEN_TTL_MINUTES=60
+
+# asUser: 'test:<ad>' icin test kullanicilari — satiri INSAN yazar, AI .env'i duzenlemez.
+# Bicim (JSON, tek satir): uygulamanin kendi giris ucu ve onun bekledigi govde. Ayrinti: docs/ortam.md
+# MCP_TEST_USER_OGRENCI={"application":"<uygulama slug>","microservice":"<giris ucu slug>","body":{"email":"…","password":"…"}}
+
+# bodyFile icin: tanim yazan araclarin (page_create, flow_create, microservice_create, *_patch …)
+# govdeyi okuyabilecegi ek dizin. Gateway surecinin calisma dizini her zaman izinlidir; bu dizin
+# ek olarak izinli olur. Bos birakilirsa yalniz calisma dizini okunur. Sembolik bag cozulur.
+MCP_INPUT_DIR=
+
 # generate-schemas icin swagger adresleri. Bos birakilirsa sirayla denenir:
 # 1) asagidaki override, 2) {API_BASE_URL}/swagger/v1/swagger.json, 3) localhost:3000 frontend proxy'si
 ORG_SWAGGER_URL=

package/README.md

@@ -4,7 +4,7 @@ Zeyrek (NgApps) platformunu **MCP tool'ları** olarak sunan bağımsız gateway.
 oturumu Studio arayüzüne hiç girmeden proje kurabilir, veri modeli çıkarabilir, mikroservis ve
 workflow yazıp çalıştırabilir, sayfa tasarlayabilir.
 
-- **212 tool · 34 modül** — veri/mantık tarafı (project, application, datasource, entity, row,
+- **260 tool · 35 modül** — veri/mantık tarafı (project, application, datasource, entity, row,
   import, microservice, query, workflow, automation, function, dto, view, dependency), Studio
   tasarım tarafı (page, **theme**, component, external component, flow, layout, variable, function,
   folder, file, access, translation), yönetim (template, organization, deployment) ve proje dallanması
@@ -140,10 +140,10 @@ ya da ikisi karışık (`core,page`). `platform` modülü (3 tool) her kümede v
 
 | Küme | Tool | Modüller |
 |---|---|---|
-| `core` | 136 | platform, project, application, datasource, entity, row, import, microservice, microfunction, query, workflow, automation, function, dto, view, dependency, environment, merge, activity, revision |
-| `studio` | 82 | platform, page, theme, component, externalComponent, flow, layout, variable, function, folder, file, import, access, translation, revision |
-| `admin` | 27 | platform, template, organization, deployment, environment, merge, activity |
-| (boş) | **212** | 34 modülün tamamı (ölçüm 2026-09-16, `listTools()`) |
+| `core` | 280 | platform, project, application, datasource, entity, row, import, microservice, microfunction, query, workflow, automation, function, dto, view, access, dependency, environment, merge, activity, revision, bpm, bpmRuntime, bpmOperations, bpmRouting, bpmGovernance, bpmReporting, decision, connector, case, caseRuntime, module |
+| `studio` | 119 | platform, page, theme, component, externalComponent, flow, layout, variable, function, folder, file, import, access, translation, revision |
+| `admin` | 28 | platform, template, organization, deployment, environment, merge, activity |
+| (boş) | **354** | 45 modülün tamamı (ölçüm 2026-09-18, `listTools()`) |
 
 Bilinmeyen bir modül/küme adı verilirse sunucu açılmaz, geçerli adları listeleyen bir hata yazar.
 

package/dist/config.js

@@ -35,6 +35,19 @@ export const moduleNames = [
     "merge",
     "activity",
     "revision",
+    "connectData",
+    "bpm",
+    "bpmRuntime",
+    "bpmOperations",
+    "bpmRouting",
+    "bpmGovernance",
+    "bpmReporting",
+    "decision",
+    "connector",
+    "case",
+    "caseRuntime",
+    "module",
+    "mobile",
 ];
 export const modulePresets = {
     core: [
@@ -53,11 +66,24 @@ export const modulePresets = {
         "function",
         "dto",
         "view",
+        "access",
         "dependency",
         "environment",
         "merge",
         "activity",
         "revision",
+        "connectData",
+        "bpm",
+        "bpmRuntime",
+        "bpmOperations",
+        "bpmRouting",
+        "bpmGovernance",
+        "bpmReporting",
+        "decision",
+        "connector",
+        "case",
+        "caseRuntime",
+        "module",
     ],
     studio: [
         "platform",
@@ -75,6 +101,8 @@ export const modulePresets = {
         "access",
         "translation",
         "revision",
+        "connectData",
+        "mobile",
     ],
     admin: ["platform", "template", "organization", "deployment", "environment", "merge", "activity"],
 };
@@ -118,6 +146,9 @@ const environmentSchema = z.object({
     STUDIO_BASE_URL: z.string().url().optional(),
     SCREENSHOT_BROWSER_PATH: z.string().min(1).optional(),
     SCREENSHOT_QUEUE_WAIT_MS: z.coerce.number().int().positive().default(120000),
+    MCP_INPUT_DIR: z.string().min(1).optional(),
+    MCP_STATE_DIR: z.string().min(1).optional(),
+    MCP_TOKEN_TTL_MINUTES: z.coerce.number().int().positive().optional(),
 });
 export const environmentKeys = Object.keys(environmentSchema.shape);
 /**
@@ -226,5 +257,11 @@ export function loadConfig(env) {
         studioBaseUrl: values.STUDIO_BASE_URL?.replace(/\/+$/, ""),
         screenshotBrowserPath: values.SCREENSHOT_BROWSER_PATH,
         screenshotQueueWaitMs: values.SCREENSHOT_QUEUE_WAIT_MS,
+        inputDirectory: values.MCP_INPUT_DIR,
+        stateDirectory: values.MCP_STATE_DIR,
+        tokenTtlMinutes: values.MCP_TOKEN_TTL_MINUTES,
+        testUsers: Object.fromEntries(Object.entries(env)
+            .filter((entry) => entry[0].startsWith("MCP_TEST_USER_") && typeof entry[1] === "string" && entry[1] !== "")
+            .map(([key, value]) => [key.slice("MCP_TEST_USER_".length).toLowerCase(), value])),
     };
 }

package/dist/index.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
 import { configureLogging, logGatewayEvent } from './observability/trace.js';
+import { configureTokenVault } from './platform/tokenVault.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { Platform, requestAuthStorage } from './platform/http.js';
 import { createGatewayServer } from './server.js';
@@ -31,6 +32,7 @@ catch (error) {
 const platform = new Platform(config);
 const useStdio = process.argv.includes('--stdio');
 configureLogging(config, useStdio ? 'stdio' : 'http');
+configureTokenVault(config);
 if (useStdio) {
     if (config.authMode === 'passthrough') {
         logger.error('stdio kipi passthrough auth ile kullanılamaz; AUTH_MODE=local yapın.');