@yunsoft/yuncms-core 0.1.10 → 0.1.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yunsoft/yuncms-core",
-  "version": "0.1.10",
+  "version": "0.1.11",
   "description": "Core services, schema, authentication, permissions and storage primitives for YunCMS.",
   "license": "MIT",
   "type": "module",

package/src/bootstrap.js

@@ -16,6 +16,7 @@ import { externalAuthFoundationMigration } from './migrations/0013-external-auth
 import { aiSettingsMigration } from './migrations/0014-ai-settings.js';
 import { navigationGroupsMigration } from './migrations/0015-navigation-groups.js';
 import { navigationGroupCollapseMigration } from './migrations/0016-navigation-group-collapse.js';
+import { mcpSettingsMigration } from './migrations/0017-mcp-settings.js';
 import { readSchemaVersion } from './schema-version.js';
 import { ensurePublicRole } from './setup.js';
 
@@ -36,6 +37,7 @@ export const CORE_MIGRATIONS = Object.freeze([
   aiSettingsMigration,
   navigationGroupsMigration,
   navigationGroupCollapseMigration,
+  mcpSettingsMigration,
 ]);
 
 export const REQUIRED_CORE_MIGRATION_IDS = Object.freeze(

package/src/config.js

@@ -38,56 +38,6 @@ function readFailureMode(value, fallback = 'best-effort') {
   return mode;
 }
 
-function readOriginList(value, fallback) {
-  const entries = readString(value, '')
-    .split(',')
-    .map((entry) => entry.trim())
-    .filter(Boolean);
-  const source = entries.length > 0 ? entries : [fallback];
-  return [...new Set(source.map((entry) => {
-    let url;
-    try {
-      url = new URL(entry);
-    } catch {
-      throw new Error(`MCP_ALLOWED_ORIGINS contains an invalid URL: ${entry}`);
-    }
-    if (!['http:', 'https:'].includes(url.protocol)) {
-      throw new Error(`MCP_ALLOWED_ORIGINS must use http or https: ${entry}`);
-    }
-    return url.origin;
-  }))];
-}
-
-function readHostList(value, fallbackOrigin) {
-  let fallbackHost;
-  try {
-    fallbackHost = new URL(fallbackOrigin).host.toLowerCase();
-  } catch {
-    throw new Error(`Cannot derive MCP host from STUDIO_ORIGIN: ${fallbackOrigin}`);
-  }
-  const entries = readString(value, '')
-    .split(',')
-    .map((entry) => entry.trim())
-    .filter(Boolean);
-  const source = entries.length > 0 ? entries : [fallbackHost];
-
-  return [...new Set(source.map((entry) => {
-    if (/[:][/][/]|[\\/?#@\s\0]/.test(entry)) {
-      throw new Error(`MCP_ALLOWED_HOSTS contains an invalid host: ${entry}`);
-    }
-    let url;
-    try {
-      url = new URL(`http://${entry}`);
-    } catch {
-      throw new Error(`MCP_ALLOWED_HOSTS contains an invalid host: ${entry}`);
-    }
-    if (url.username || url.password || url.pathname !== '/' || url.search || url.hash || !url.host) {
-      throw new Error(`MCP_ALLOWED_HOSTS contains an invalid host: ${entry}`);
-    }
-    return url.host.toLowerCase();
-  }))];
-}
-
 export function loadEnvFileIfPresent(path = '.env') {
   try {
     loadEnvFile(path);
@@ -131,15 +81,6 @@ export function loadConfig(env = process.env) {
       },
     },
     logging: { level: readString(env.LOG_LEVEL, 'info') },
-    mcp: {
-      enabled: readBoolean(env.MCP_ENABLED, false),
-      writesEnabled: readBoolean(env.MCP_WRITES_ENABLED, false),
-      requireAuthentication: readBoolean(env.MCP_REQUIRE_AUTHENTICATION, true),
-      maxItems: readInteger(env.MCP_MAX_ITEMS, 100, 'MCP_MAX_ITEMS', { min: 1, max: 500 }),
-      maxResultBytes: readInteger(env.MCP_MAX_RESULT_BYTES, 1_000_000, 'MCP_MAX_RESULT_BYTES', { min: 10_000, max: 10_000_000 }),
-      allowedOrigins: readOriginList(env.MCP_ALLOWED_ORIGINS, studioOrigin),
-      allowedHosts: readHostList(env.MCP_ALLOWED_HOSTS, studioOrigin),
-    },
     cache: {
       enabled: readBoolean(env.CACHE_ENABLED, true),
       store: cacheStore,

package/src/migrations/0017-mcp-settings.js

@@ -0,0 +1,19 @@
+export const mcpSettingsMigration = Object.freeze({
+  id: '0017-mcp-settings',
+  statements: [
+    `CREATE TABLE yuncms_mcp_settings (
+      id TINYINT UNSIGNED NOT NULL PRIMARY KEY,
+      enabled TINYINT(1) NOT NULL DEFAULT 0,
+      writes_enabled TINYINT(1) NOT NULL DEFAULT 0,
+      require_authentication TINYINT(1) NOT NULL DEFAULT 1,
+      allowed_origins JSON NOT NULL,
+      allowed_hosts JSON NOT NULL,
+      max_items INT UNSIGNED NOT NULL DEFAULT 100,
+      max_result_bytes INT UNSIGNED NOT NULL DEFAULT 1000000,
+      updated_at DATETIME(3) NOT NULL DEFAULT CURRENT_TIMESTAMP(3) ON UPDATE CURRENT_TIMESTAMP(3),
+      CONSTRAINT chk_yuncms_mcp_settings_singleton CHECK (id = 1)
+    ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci`,
+    `INSERT INTO yuncms_mcp_settings (id, allowed_origins, allowed_hosts)
+     VALUES (1, JSON_ARRAY(), JSON_ARRAY())`,
+  ],
+});