@digestseo/mcp-gsc 0.3.1 → 0.4.0

package/src/tool-rate-limiter-do.ts

@@ -0,0 +1,23 @@
+import { DurableObject } from 'cloudflare:workers';
+import {
+  ToolRateLimiterCore,
+  type ToolRateLimitPolicy,
+  type ToolRateLimitResult,
+} from './tool-rate-limit';
+
+export class ToolRateLimiter extends DurableObject<Record<string, unknown>> {
+  private readonly core: ToolRateLimiterCore;
+
+  constructor(ctx: DurableObjectState, env: Record<string, unknown>) {
+    super(ctx, env);
+    this.core = new ToolRateLimiterCore(ctx, env);
+  }
+
+  take(
+    userBucket: string,
+    policy: ToolRateLimitPolicy,
+    units = 1,
+  ): Promise<ToolRateLimitResult> {
+    return this.core.take(userBucket, policy, units);
+  }
+}

package/src/write-tool-annotations.ts

@@ -0,0 +1,43 @@
+/**
+ * MCP hints for each mutation exposed by this server.
+ *
+ * Search Console's sites and sitemaps APIs use PUT for additions and DELETE
+ * for removals, so repeating the same request has the same intended effect.
+ * Indexing publishes a URL_UPDATED notification with POST; each call can
+ * consume quota and update Google's notification state, so it is not marked
+ * idempotent. Every mutation is marked destructive so MCP clients require
+ * explicit confirmation before changing external Google state.
+ */
+export const WRITE_TOOL_ANNOTATIONS = {
+  'sites.add': {
+    readOnlyHint: false,
+    destructiveHint: true,
+    idempotentHint: true,
+    openWorldHint: true,
+  },
+  'sites.delete': {
+    readOnlyHint: false,
+    destructiveHint: true,
+    idempotentHint: true,
+    openWorldHint: true,
+  },
+  'sitemaps.submit': {
+    readOnlyHint: false,
+    destructiveHint: true,
+    idempotentHint: true,
+    openWorldHint: true,
+  },
+  'sitemaps.delete': {
+    readOnlyHint: false,
+    destructiveHint: true,
+    idempotentHint: true,
+    openWorldHint: true,
+  },
+  'indexing.request': {
+    // The implementation only publishes URL_UPDATED, never URL_DELETED.
+    readOnlyHint: false,
+    destructiveHint: true,
+    idempotentHint: false,
+    openWorldHint: true,
+  },
+} as const;

package/wrangler.example.jsonc

@@ -1,35 +1,54 @@
-// Cloudflare Worker configuration for mcp-gsc.
-//
-// Copy this file to `wrangler.jsonc` (gitignored) and fill in your own
-// values before deploying. See SETUP.md for the full walkthrough.
-{
-  "name": "mcp-gsc",
-  "main": "src/index.ts",
-  "compatibility_date": "2026-05-19",
-  "compatibility_flags": ["nodejs_compat"],
-  "observability": { "enabled": true },
-  "kv_namespaces": [
-    {
-      "binding": "OAUTH_KV",
-      "id": "YOUR_OAUTH_KV_ID"
-    },
-    {
-      "binding": "USER_KV",
-      "id": "YOUR_USER_KV_ID"
-    }
-  ],
-  "durable_objects": {
-    "bindings": [
-      {
-        "name": "MCP_OBJECT",
-        "class_name": "GscMcpAgent"
-      }
-    ]
-  },
-  "migrations": [
-    {
-      "tag": "v1",
-      "new_sqlite_classes": ["GscMcpAgent"]
-    }
-  ]
-}
+// Cloudflare Worker configuration for mcp-gsc.
+//
+// Copy this file to `wrangler.jsonc` (gitignored) and fill in your own
+// values before deploying. See SETUP.md for the full walkthrough.
+{
+  "name": "mcp-gsc",
+  "main": "src/entrypoint.ts",
+  "compatibility_date": "2026-05-19",
+  "compatibility_flags": ["nodejs_compat", "global_fetch_strictly_public"],
+  "observability": { "enabled": true },
+  "vars": {
+    "GSC_ACCESS_MODE": "readwrite"
+  },
+  "kv_namespaces": [
+    {
+      "binding": "OAUTH_KV",
+      "id": "YOUR_OAUTH_KV_ID"
+    },
+    {
+      "binding": "USER_KV",
+      "id": "YOUR_USER_KV_ID"
+    }
+  ],
+  "durable_objects": {
+    "bindings": [
+      {
+        "name": "MCP_OBJECT",
+        "class_name": "GscMcpAgent"
+      },
+      {
+        "name": "PENDING_AUTH_STATE",
+        "class_name": "PendingAuthState"
+      },
+      {
+        "name": "TOOL_RATE_LIMITER",
+        "class_name": "ToolRateLimiter"
+      }
+    ]
+  },
+  "migrations": [
+    {
+      "tag": "v1",
+      "new_sqlite_classes": ["GscMcpAgent"]
+    },
+    {
+      "tag": "v2",
+      "new_sqlite_classes": ["PendingAuthState"]
+    },
+    {
+      "tag": "v3",
+      "new_sqlite_classes": ["ToolRateLimiter"]
+    }
+  ]
+}