@loop_ouroboros/mcp-hub-lite 1.0.1 → 1.1.0

package/dist/server/src/config/config.schema.js

@@ -1,103 +1,20 @@
-import { z } from 'zod';
+import { TransportType, TagDefinitionSchema, ServerInstanceSchema, ServerInstanceUpdateSchema, ServerTemplateSchema, ServerConfigSchema, LoggingConfigSchema, SecurityConfigSchema, SystemConfigSchema, ServerInstanceConfigSchema } from '../../shared/models/server.model.js';
 /**
  * MCP Server Configuration Schema
- * Simplified schema for MCP-HUB-LITE Lite version
+ * Simplified v1.1 only - No v1.0 compatibility
+ *
+ * Note: All core schemas are now defined in @shared-models/server.model.ts
+ * This file re-exports them for backward compatibility and retains
+ * TransportType constants and legacy helper functions.
  */
-// Server configuration schema (keyed by server name)
-export const ServerConfigSchema = z.object({
-    command: z.string().optional(),
-    args: z.array(z.string()).default([]),
-    env: z.record(z.string(), z.string()).optional(),
-    enabled: z.boolean().default(true),
-    tags: z.record(z.string(), z.string()).optional(),
-    type: z.enum(['stdio', 'sse', 'streamable-http', 'http']).default('stdio'),
-    timeout: z.number().default(60000),
-    url: z.string().optional(),
-    allowedTools: z.array(z.string()).default([]),
-    description: z.string().optional()
-});
-// Server instance schema (each instance contains id, timestamp, hash)
-export const ServerInstanceConfigSchema = z.object({
-    id: z.string(),
-    timestamp: z.number(), // Startup time
-    hash: z.string(),
-    pid: z.number().optional(), // Process ID
-    startTime: z.number().optional() // Startup time (same as timestamp, for compatibility)
-});
+// Re-export shared types for backward compatibility
+export { TransportType, TagDefinitionSchema, ServerInstanceSchema, ServerInstanceUpdateSchema, ServerTemplateSchema, ServerConfigSchema, LoggingConfigSchema, SecurityConfigSchema, SystemConfigSchema, ServerInstanceConfigSchema };
 /**
- * Logging Configuration Schema
+ * Simplified type guard - only check for legacy v1.0 format for migration
  */
-export const LoggingConfigSchema = z
-    .object({
-    level: z.custom().default('info'),
-    rotationAge: z.string().default('7d'), // e.g., "7d", "30d"
-    jsonPretty: z.boolean().default(true), // Enable pretty JSON formatting in logs
-    mcpCommDebug: z.boolean().default(false), // Enable MCP communication debug logging
-    sessionDebug: z.boolean().default(false) // Enable session debug logging
-})
-    .default({
-    level: 'info',
-    rotationAge: '7d',
-    jsonPretty: true,
-    mcpCommDebug: false,
-    sessionDebug: false
-});
-/**
- * Security Configuration Schema
- */
-export const SecurityConfigSchema = z
-    .object({
-    allowedNetworks: z
-        .array(z.string())
-        .default(['127.0.0.1', '192.168.0.0/16', '10.0.0.0/8', '172.16.0.0/12']),
-    maxConcurrentConnections: z.number().min(1).max(1000).default(50),
-    connectionTimeout: z.number().min(1000).default(30000),
-    idleConnectionTimeout: z.number().min(30000).default(300000),
-    sessionTimeout: z
-        .number()
-        .min(60000)
-        .default(30 * 60 * 1000), // Default 30 minutes, min 1 minute
-    sessionFlushInterval: z
-        .number()
-        .min(1000)
-        .default(15 * 60 * 1000), // Default 15 minutes, min 1 second
-    maxConnections: z.number().min(1).max(1000).default(50)
-})
-    .default({
-    allowedNetworks: ['127.0.0.1', '192.168.0.0/16', '10.0.0.0/8', '172.16.0.0/12'],
-    maxConcurrentConnections: 50,
-    connectionTimeout: 30000,
-    idleConnectionTimeout: 300000,
-    sessionTimeout: 30 * 60 * 1000,
-    sessionFlushInterval: 15 * 60 * 1000,
-    maxConnections: 50
-});
-/**
- * System Configuration Schema
- */
-export const SystemConfigSchema = z.object({
-    version: z.string().default('1.0.0'),
-    system: z
-        .object({
-        host: z.string().default('localhost'),
-        port: z.number().default(7788),
-        language: z.enum(['zh', 'en']).default('zh'),
-        theme: z.enum(['light', 'dark', 'system']).default('system'),
-        logging: LoggingConfigSchema
-    })
-        .default({
-        host: 'localhost',
-        port: 7788,
-        language: 'zh',
-        theme: 'system',
-        logging: {
-            level: 'info',
-            rotationAge: '7d',
-            jsonPretty: true,
-            mcpCommDebug: false,
-            sessionDebug: false
-        }
-    }),
-    security: SecurityConfigSchema,
-    servers: z.record(z.string(), ServerConfigSchema).default({})
-});
+export function isLegacyV1Config(config) {
+    if (typeof config !== 'object' || config === null)
+        return false;
+    const c = config;
+    return c.version !== '1.1.0';
+}

package/dist/server/src/config/path-validator.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Path validation utilities for configuration files.
+ * Provides basic path validation to prevent path traversal attacks.
+ */
+/**
+ * Validates that a path is within an allowed directory.
+ *
+ * @param configPath - The path to validate
+ * @param allowedDirs - Array of allowed parent directories
+ * @returns true if path is valid, false otherwise
+ */
+export declare function isValidConfigPath(configPath: string, allowedDirs: string[]): boolean;
+/**
+ * Ensures a path is absolute and normalized.
+ *
+ * @param configPath - The path to sanitize
+ * @returns Normalized absolute path
+ */
+export declare function sanitizeConfigPath(configPath: string): string;
+/**
+ * Validates that a filename doesn't contain path traversal characters.
+ *
+ * @param filename - The filename to validate
+ * @returns true if filename is safe, false otherwise
+ */
+export declare function isSafeFilename(filename: string): boolean;
+//# sourceMappingURL=path-validator.d.ts.map

package/dist/server/src/config/path-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-validator.d.ts","sourceRoot":"","sources":["../../../../src/config/path-validator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAepF;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CASxD"}

package/dist/server/src/config/path-validator.js

@@ -0,0 +1,53 @@
+/**
+ * Path validation utilities for configuration files.
+ * Provides basic path validation to prevent path traversal attacks.
+ */
+import { resolve, normalize } from 'node:path';
+/**
+ * Validates that a path is within an allowed directory.
+ *
+ * @param configPath - The path to validate
+ * @param allowedDirs - Array of allowed parent directories
+ * @returns true if path is valid, false otherwise
+ */
+export function isValidConfigPath(configPath, allowedDirs) {
+    try {
+        const normalizedPath = normalize(resolve(configPath));
+        for (const allowedDir of allowedDirs) {
+            const normalizedAllowedDir = normalize(resolve(allowedDir));
+            if (normalizedPath.startsWith(normalizedAllowedDir)) {
+                return true;
+            }
+        }
+        return false;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Ensures a path is absolute and normalized.
+ *
+ * @param configPath - The path to sanitize
+ * @returns Normalized absolute path
+ */
+export function sanitizeConfigPath(configPath) {
+    return normalize(resolve(configPath));
+}
+/**
+ * Validates that a filename doesn't contain path traversal characters.
+ *
+ * @param filename - The filename to validate
+ * @returns true if filename is safe, false otherwise
+ */
+export function isSafeFilename(filename) {
+    // Block path traversal patterns
+    if (filename.includes('..'))
+        return false;
+    if (filename.includes('/') || filename.includes('\\'))
+        return false;
+    // Block null bytes
+    if (filename.includes('\0'))
+        return false;
+    return true;
+}

package/dist/server/src/config/server-config-manager.d.ts

@@ -1,74 +1,80 @@
 /**
- * Server configuration management utilities.
- * Handles CRUD operations for server configurations and instances.
+ * Server configuration management utilities for v1.1 format.
+ * Handles CRUD operations for server templates and instances.
  */
-import type { ServerConfig, ServerInstanceConfig } from './config.schema.js';
+import type { ServerTemplate, ServerInstance, ServerConfig } from './config.schema.js';
 /**
  * Adds multiple server configurations to the system in a single operation.
  *
- * @param servers - Array of server objects containing name and partial configuration
+ * @param servers - Array of server objects containing name and partial template configuration
  * @param currentServers - Current servers configuration object (will be modified)
- * @param serverInstances - Current server instances record (will be modified)
  * @returns The updated servers configuration
  */
 export declare function addServers(servers: Array<{
     name: string;
-    config: Partial<ServerConfig>;
-}>, currentServers: Record<string, ServerConfig>, serverInstances: Record<string, ServerInstanceConfig[]>): Record<string, ServerConfig>;
+    config: Partial<ServerTemplate>;
+}>, currentServers: Record<string, ServerConfig>): Record<string, ServerConfig>;
 /**
- * Adds a new server configuration to the system.
+ * Adds a new server configuration to the system (v1.1 format).
+ * Creates a template and a default instance.
  *
  * @param name - The unique name for the server
- * @param config - The server configuration (partial, will be validated)
+ * @param config - The server template configuration (partial, will be validated)
  * @param currentServers - Current servers configuration object (will be modified)
- * @param serverInstances - Current server instances record (will be modified)
- * @returns The validated and complete server configuration
+ * @returns The complete server configuration (v1.1)
  */
-export declare function addServer(name: string, config: Partial<ServerConfig>, currentServers: Record<string, ServerConfig>, serverInstances: Record<string, ServerInstanceConfig[]>): ServerConfig;
+export declare function addServer(name: string, config: Partial<ServerTemplate>, currentServers: Record<string, ServerConfig>): ServerConfig;
 /**
  * Adds a new server instance for the specified server.
  *
  * @param name - The name of the server to add an instance for
  * @param instance - The server instance configuration (partial, will be validated)
- * @param serverInstances - Current server instances record (will be modified)
+ * @param currentServers - Current servers configuration object (will be modified)
  * @returns The validated and complete server instance configuration
  */
-export declare function addServerInstance(name: string, instance: Partial<ServerInstanceConfig>, serverInstances: Record<string, ServerInstanceConfig[]>): ServerInstanceConfig;
+export declare function addServerInstance(name: string, instance: Partial<ServerInstance>, currentServers: Record<string, ServerConfig>): ServerInstance;
 /**
- * Updates an existing server configuration with the provided changes.
+ * Reassigns server instance indexes to be consecutive (0, 1, 2, ...).
+ *
+ * @param name - The name of the server to reassign indexes for
+ * @param currentServers - Current servers configuration object (will be modified)
+ * @returns True if the server exists and indexes were reassigned
+ */
+export declare function reassignServerInstanceIndexes(name: string, currentServers: Record<string, ServerConfig>): boolean;
+/**
+ * Updates an existing server configuration (template and/or instance selection strategy).
  *
  * @param name - The name of the server to update
- * @param updates - The partial configuration updates to apply
+ * @param updates - The partial server configuration updates to apply (can include template and instanceSelectionStrategy)
  * @param currentServers - Current servers configuration object (will be modified)
- * @returns True if the server was updated, false if it didn't exist
+ * @returns True if the server was updated
  */
-export declare function updateServer(name: string, updates: Partial<ServerConfig>, currentServers: Record<string, ServerConfig>): boolean;
+export declare function updateServerTemplate(name: string, updates: Partial<ServerTemplate>, currentServers: Record<string, ServerConfig>): boolean;
 /**
- * Updates an existing server instance configuration with the provided changes.
+ * Updates an existing server instance configuration.
  *
  * @param name - The name of the server containing the instance to update
- * @param index - The index of the instance to update in the instances array
- * @param updates - The partial instance configuration updates to apply
- * @param serverInstances - Current server instances record (will be modified)
- * @returns True if the instance was updated, false if it didn't exist
+ * @param index - The index of the instance to update
+ * @param updates - The partial instance updates to apply
+ * @param currentServers - Current servers configuration object (will be modified)
+ * @returns True if the instance was updated
  */
-export declare function updateServerInstance(name: string, index: number, updates: Partial<ServerInstanceConfig>, serverInstances: Record<string, ServerInstanceConfig[]>): boolean;
+export declare function updateServerInstance(name: string, index: number | string, updates: Partial<ServerInstance>, currentServers: Record<string, ServerConfig>): boolean;
 /**
  * Removes a server configuration and all its instances from the system.
  *
  * @param name - The name of the server to remove
  * @param currentServers - Current servers configuration object (will be modified)
- * @param serverInstances - Current server instances record (will be modified)
- * @returns True if the server was removed, false if it didn't exist
+ * @returns True if the server was removed
  */
-export declare function removeServer(name: string, currentServers: Record<string, ServerConfig>, serverInstances: Record<string, ServerInstanceConfig[]>): boolean;
+export declare function removeServer(name: string, currentServers: Record<string, ServerConfig>): boolean;
 /**
  * Removes a specific server instance from the system.
  *
  * @param name - The name of the server containing the instance to remove
- * @param index - The index of the instance to remove from the instances array
- * @param serverInstances - Current server instances record (will be modified)
- * @returns True if the instance was removed, false if it didn't exist
+ * @param index - The index of the instance to remove
+ * @param currentServers - Current servers configuration object (will be modified)
+ * @returns True if the instance was removed
  */
-export declare function removeServerInstance(name: string, index: number, serverInstances: Record<string, ServerInstanceConfig[]>): boolean;
+export declare function removeServerInstance(name: string, index: number | string, currentServers: Record<string, ServerConfig>): boolean;
 //# sourceMappingURL=server-config-manager.d.ts.map

package/dist/server/src/config/server-config-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server-config-manager.d.ts","sourceRoot":"","sources":["../../../../src/config/server-config-manager.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAc7E;;;;;;;GAOG;AACH,wBAAgB,UAAU,CACxB,OAAO,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,CAAA;CAAE,CAAC,EAC/D,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,EAC5C,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,CAAC,GACtD,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAU9B;AAED;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CACvB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,EAC7B,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,EAC5C,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,CAAC,GACtD,YAAY,CAiBd;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,OAAO,CAAC,oBAAoB,CAAC,EACvC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,CAAC,GACtD,oBAAoB,CActB;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,EAC9B,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAC3C,OAAO,CAkBT;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,CAAC,oBAAoB,CAAC,EACtC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,CAAC,GACtD,OAAO,CAMT;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,EAC5C,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,CAAC,GACtD,OAAO,CAiBT;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,CAAC,GACtD,OAAO,CAST"}
+{"version":3,"file":"server-config-manager.d.ts","sourceRoot":"","sources":["../../../../src/config/server-config-manager.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAmDvF;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,OAAO,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAA;CAAE,CAAC,EACjE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAC3C,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CA+B9B;AAED;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CACvB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,EAC/B,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAC3C,YAAY,CAuCd;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,EACjC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAC3C,cAAc,CAahB;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,MAAM,EACZ,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAC3C,OAAO,CAkBT;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,EAChC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAC3C,OAAO,CAwCT;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GAAG,MAAM,EACtB,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,EAChC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAC3C,OAAO,CAiGT;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAAG,OAAO,CAgBhG;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GAAG,MAAM,EACtB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,GAC3C,OAAO,CAeT"}