create-ampless 1.0.0-beta.182 → 1.0.0-beta.185

package/dist/templates/_shared/app/api/mcp/route.ts

@@ -0,0 +1,16 @@
+import { ampless } from '@/lib/ampless'
+import { createPublicMcpRouteHandler } from '@ampless/runtime/routes'
+
+// Anonymous, read-only public MCP endpoint (JSON-RPC 2.0 over POST).
+// Only active when `cms.config.ai.publicMcp === true`; otherwise every
+// method 404s. The factory returns BOTH handlers — destructure them so
+// the CORS preflight (OPTIONS) is wired up too. A single
+// `export const POST = createPublicMcpRouteHandler(ampless)` would drop
+// OPTIONS.
+const handlers = createPublicMcpRouteHandler(ampless)
+export const POST = handlers.POST
+export const OPTIONS = handlers.OPTIONS
+
+// Node runtime required: the route's circuit breaker is module-scope
+// state that only persists on a warm Node lambda.
+export const runtime = 'nodejs'

package/dist/templates/_shared/cms.config.ts

@@ -48,8 +48,13 @@ export default defineConfig({
   // history: { retentionDays: 0 }, // 0 = keep every revision forever; e.g. 365 to expire after a year
   // AI-readable publishing. `/<slug>.md` serves a markdown projection of
   // each published post and `/llms.txt` serves a site-wide AI index
-  // (both default: enabled).
-  // ai: { markdownRoutes: false, llmsTxt: { limit: 100 } },
+  // (both default: enabled). `publicMcp` (default: false) exposes an
+  // anonymous, read-only MCP endpoint at `/api/mcp` — published posts
+  // only, never writes. Because it is unauthenticated it is opt-in, and
+  // its built-in circuit breaker is a coarse warm-instance guard, not a
+  // per-IP rate limiter: pair `publicMcp: true` with CloudFront / WAF for
+  // real abuse protection.
+  // ai: { markdownRoutes: false, llmsTxt: { limit: 100 }, publicMcp: true },
   // Active plugins. Order doesn't matter; the runtime aggregates metadata
   // and runs hooks for events each plugin subscribes to.
   //

package/dist/templates/_shared/package.json

@@ -26,22 +26,22 @@
     "@tiptap/pm": "^3.23.6",
     "@tiptap/react": "^3.23.6",
     "@tiptap/starter-kit": "^3.23.6",
-    "@ampless/plugin-ai-actions": "^0.1.0-beta.2",
-    "@ampless/plugin-analytics-ga4": "^0.2.0-beta.43",
-    "@ampless/plugin-cookie-consent": "^0.1.0-beta.34",
-    "@ampless/plugin-gtm": "^0.2.0-beta.42",
-    "@ampless/plugin-og-image": "^0.2.0-beta.59",
-    "@ampless/plugin-plausible": "^0.2.0-beta.42",
-    "@ampless/plugin-reading-time": "^0.1.0-beta.33",
-    "@ampless/plugin-rss": "^0.2.0-beta.59",
-    "@ampless/plugin-schema-jsonld": "^0.1.1-beta.38",
-    "@ampless/plugin-seo": "^0.2.0-beta.59",
-    "@ampless/plugin-webhook": "^0.2.0-beta.60",
-    "@ampless/admin": "^1.0.0-beta.107",
-    "@ampless/backend": "^1.0.0-beta.89",
-    "@ampless/runtime": "^1.0.0-beta.72",
+    "@ampless/plugin-ai-actions": "^0.1.0-beta.4",
+    "@ampless/plugin-analytics-ga4": "^0.2.0-beta.45",
+    "@ampless/plugin-cookie-consent": "^0.1.0-beta.36",
+    "@ampless/plugin-gtm": "^0.2.0-beta.44",
+    "@ampless/plugin-og-image": "^0.2.0-beta.61",
+    "@ampless/plugin-plausible": "^0.2.0-beta.44",
+    "@ampless/plugin-reading-time": "^0.1.0-beta.35",
+    "@ampless/plugin-rss": "^0.2.0-beta.61",
+    "@ampless/plugin-schema-jsonld": "^0.1.1-beta.40",
+    "@ampless/plugin-seo": "^0.2.0-beta.61",
+    "@ampless/plugin-webhook": "^0.2.0-beta.62",
+    "@ampless/admin": "^1.0.0-beta.109",
+    "@ampless/backend": "^1.0.0-beta.91",
+    "@ampless/runtime": "^1.0.0-beta.74",
     "@digital-go-jp/tailwind-theme-plugin": "^0.3.4",
-    "ampless": "^1.0.0-beta.59",
+    "ampless": "^1.0.0-beta.61",
     "aws-amplify": "^6.17.0",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-ampless",
-  "version": "1.0.0-beta.182",
+  "version": "1.0.0-beta.185",
   "description": "Create a new ampless project",
   "license": "MIT",
   "type": "module",