@kajidog/mcp-tts-voicevox 0.7.0 → 0.7.1

package/dist/index.js

@@ -620,6 +620,12 @@ function parseBaseCliArgs(argv = process.argv.slice(2)) {
           i++;
         }
         break;
+      case "--api-key":
+        if (nextArg && !nextArg.startsWith("-")) {
+          config2.apiKey = nextArg;
+          i++;
+        }
+        break;
     }
   }
   return config2;
@@ -641,6 +647,9 @@ function parseBaseEnvVars(env = process.env) {
   if (env.MCP_ALLOWED_ORIGINS) {
     config2.allowedOrigins = env.MCP_ALLOWED_ORIGINS.split(",").map((o) => o.trim());
   }
+  if (env.MCP_API_KEY) {
+    config2.apiKey = env.MCP_API_KEY;
+  }
   return config2;
 }
 function filterUndefined(obj) {
@@ -2805,6 +2814,13 @@ function forbiddenError(message) {
     id: null
   };
 }
+function unauthorizedError(message) {
+  return {
+    jsonrpc: "2.0",
+    error: { code: -32001, message },
+    id: null
+  };
+}
 function validateOrigin(config2) {
   return async (c, next) => {
     const origin = c.req.header("Origin");
@@ -2847,6 +2863,22 @@ function validateHost(config2) {
     return next();
   };
 }
+function validateApiKey(config2) {
+  return async (c, next) => {
+    if (!config2.apiKey || c.req.method === "OPTIONS") {
+      return next();
+    }
+    const xApiKey = c.req.header("X-API-Key");
+    const authorization = c.req.header("Authorization");
+    const bearerToken = authorization?.startsWith("Bearer ") ? authorization.slice(7).trim() : void 0;
+    const providedKey = xApiKey ?? bearerToken;
+    if (providedKey !== config2.apiKey) {
+      console.log("Rejected request with invalid API key");
+      return c.json(unauthorizedError("Unauthorized: Invalid API key"), { status: 401 });
+    }
+    return next();
+  };
+}
 function createHttpApp(options) {
   const { server: server2, config: config2, serverFactory, extraCorsHeaders = [], onSessionInitialized, onSessionClosed } = options;
   const transports = /* @__PURE__ */ new Map();
@@ -2912,6 +2944,8 @@ function createHttpApp(options) {
     "mcp-session-id",
     "Last-Event-ID",
     "mcp-protocol-version",
+    "X-API-Key",
+    "Authorization",
     ...extraCorsHeaders
   ];
   app.use("/mcp", cors({
@@ -2922,6 +2956,7 @@ function createHttpApp(options) {
   }));
   app.use("/mcp", validateOrigin(config2));
   app.use("/mcp", validateHost(config2));
+  app.use("/mcp", validateApiKey(config2));
   app.all("/mcp", handleMCP);
   app.get("/health", handleHealth);
   return app;
@@ -3029,6 +3064,7 @@ var defaultConfig = {
   restrictImmediate: false,
   restrictWaitForStart: false,
   restrictWaitForEnd: false,
+  playerDomain: "",
   autoPlay: true,
   playerExportEnabled: true,
   playerExportDir: join(process.cwd(), "voicevox-player-exports"),
@@ -3188,6 +3224,9 @@ function parseEnvVars(env = process.env) {
   if (env.VOICEVOX_RESTRICT_WAIT_FOR_END === "true") {
     config2.restrictWaitForEnd = true;
   }
+  if (env.VOICEVOX_PLAYER_DOMAIN) {
+    config2.playerDomain = env.VOICEVOX_PLAYER_DOMAIN;
+  }
   if (env.VOICEVOX_AUTO_PLAY !== void 0) {
     config2.autoPlay = env.VOICEVOX_AUTO_PLAY !== "false";
   }
@@ -4547,7 +4586,19 @@ function registerPlayerTools(deps) {
       mimeType: RESOURCE_MIME_TYPE
     },
     async () => ({
-      contents: [{ uri: playerResourceUri, mimeType: RESOURCE_MIME_TYPE, text: playerHtml }]
+      contents: [
+        {
+          uri: playerResourceUri,
+          mimeType: RESOURCE_MIME_TYPE,
+          text: playerHtml,
+          _meta: {
+            ui: {
+              csp: {},
+              ...config2.playerDomain ? { domain: config2.playerDomain } : {}
+            }
+          }
+        }
+      ]
     })
   );
   registerAppToolIfEnabled(
@@ -4571,6 +4622,11 @@ function registerPlayerTools(deps) {
         const notice = "\u8F9E\u66F8\u5909\u66F4\u306F\u65E2\u5B58\u30C8\u30E9\u30C3\u30AF\u306B\u81EA\u52D5\u53CD\u6620\u3055\u308C\u307E\u305B\u3093\u3002Player\u3067\u518D\u751F\u6210\u3059\u308B\u3068\u53CD\u6620\u3055\u308C\u307E\u3059\u3002";
         return {
           content: [{ type: "text", text: `Dictionary manager opened. ${words.length} word(s).` }],
+          structuredContent: {
+            mode: "dictionary",
+            dictionaryWords: words,
+            dictionaryNotice: notice
+          },
           _meta: {
             mode: "dictionary",
             dictionaryWords: words,
@@ -4648,6 +4704,11 @@ function registerPlayerTools(deps) {
               text: `Voicevox Player started. viewUUID: ${viewUUID} \u300C${textPreview}\u300D`
             }
           ],
+          structuredContent: {
+            viewUUID,
+            autoPlay: config2.autoPlay,
+            segments: uiSegments
+          },
           _meta: {
             viewUUID,
             autoPlay: config2.autoPlay,
@@ -4773,6 +4834,11 @@ function registerPlayerTools(deps) {
               text: `Voicevox Player updated. viewUUID: ${viewUUID} (${segments.length} segment(s))`
             }
           ],
+          structuredContent: {
+            viewUUID,
+            autoPlay: effectiveAutoPlay,
+            segments: uiSegments
+          },
           _meta: {
             viewUUID,
             autoPlay: effectiveAutoPlay,
@@ -5127,7 +5193,7 @@ var config = getConfig();
 function createServer() {
   const server2 = new McpServer({
     name: "mcp-tts-voicevox",
-    version: "0.7.0",
+    version: "0.7.1",
     description: "A Voicevox server that converts text to speech for playback and saving."
   });
   const voicevoxClient = new VoicevoxClient({
@@ -5233,6 +5299,7 @@ Options:
   --host <host>               HTTP server host (default: 0.0.0.0)
   --allowed-hosts <hosts>     Comma-separated list of allowed hosts (default: localhost,127.0.0.1,[::1])
   --allowed-origins <origins> Comma-separated list of allowed origins
+  --api-key <key>             Require matching API key via X-API-Key or Authorization: Bearer
 
 Examples:
   npx @kajidog/mcp-tts-voicevox --url http://192.168.1.50:50021 --speaker 3