freeform-modeling-mcp 1.0.29 → 1.0.31

package/.cursor/mcp.json

@@ -0,0 +1,25 @@
+{
+    "mcpServers": {
+        "freeform-modeling-mcp": {
+            "command": "npx",
+            "args": [
+                "tsx",
+                "src/cli.ts",
+                "start",
+                "--stdio"
+            ]
+        },
+        "aholo-sdk-mcp": {
+            "type": "stdio",
+            "command": "npx",
+            "args": [
+                "-y",
+                "@manycore/aholo-sdk-mcp"
+            ],
+            "env": {
+                "AHOLO_API_KEY": "urSuPSeAcEnNEEn",
+                "AHOLO_REGION": "cn"
+            }
+        }
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "freeform-modeling-mcp",
-  "version": "1.0.29",
+  "version": "1.0.31",
   "description": "KooMaster MCP Server with WebSocket Bridge",
   "main": "index.cjs",
   "type": "module",

package/src/commands/start.ts

@@ -18,7 +18,7 @@ export async function startMCPServer(options: { dev?: boolean, stdio?: boolean }
         const wsBridge = new WebSocketBridge();
         await wsBridge.initialize();
         const wsPort = wsBridge.getPort();
-        const wsUrl = `ws://localhost:${wsPort}`;
+        const wsUrl = `ws://127.0.0.1:${wsPort}`;
 
         await llmClient.connect(wsUrl);
 

package/src/lib/wsbridge/bridge.ts

@@ -6,6 +6,25 @@ import * as http from 'http';
 import { BridgeLockManager, getActiveBridges } from './lock';
 import logger from '../logger';
 
+function isAllowedOrigin(origin: string): boolean {
+    try {
+        const { hostname } = new URL(origin);
+        return hostname === 'localhost' || hostname === '127.0.0.1'
+            || hostname === 'kujiale.com' || hostname.endsWith('.kujiale.com')
+            || hostname === 'coohom.com' || hostname.endsWith('.coohom.com');
+    } catch {
+        return false;
+    }
+}
+
+function setCors(req: http.IncomingMessage, res: http.ServerResponse): void {
+    const origin = req.headers.origin;
+    if (origin && isAllowedOrigin(origin)) {
+        res.setHeader('Access-Control-Allow-Origin', origin);
+        res.setHeader('Vary', 'Origin');
+    }
+}
+
 // 客户端类型
 export enum ClientType {
     MCP = 'mcp',
@@ -101,14 +120,21 @@ export class WebSocketBridge extends EventEmitter {
             // 使用锁管理器获取可用端口
             this.port = await this.lockManager.initialize();
 
-            // 创建 HTTP 服务器
+            // 创建 HTTP 服务器（与 WebSocket 共用端口；/bridge-status 供浏览器发现）
             this.httpServer = http.createServer((req, res) => {
-                // 处理HTTP请求
+                if (req.method === 'OPTIONS') {
+                    setCors(req, res);
+                    res.writeHead(204);
+                    res.end();
+                    return;
+                }
                 if (req.url === '/bridge-status') {
+                    setCors(req, res);
                     res.writeHead(200, { 'Content-Type': 'application/json' });
                     res.end(JSON.stringify({
                         service: 'WebSocketBridge',
                         version: '1.0.0',
+                        port: this.port,
                         status: this._status,
                         clients: {
                             total: this.clients.size,
@@ -122,8 +148,10 @@ export class WebSocketBridge extends EventEmitter {
                 }
             });
 
-            // 创建 WebSocket 服务器
-            this.server = new WebSocketServer({ server: this.httpServer });
+            this.server = new WebSocketServer({
+                server: this.httpServer,
+                verifyClient: ({ origin }) => !origin || isAllowedOrigin(origin),
+            });
 
             // 设置事件处理程序
             this.setupEventHandlers();
@@ -184,8 +212,7 @@ export class WebSocketBridge extends EventEmitter {
                     }
                 });
 
-                // 启动 HTTP 服务器
-                this.httpServer!.listen(this.port);
+                this.httpServer!.listen(this.port, '127.0.0.1');
             } catch (error) {
                 logger.error('Failed to start WebSocketBridge:', error);
                 reject(error);

package/src/lib/wsbridge/lock.ts

@@ -75,7 +75,7 @@ function isProcessRunning(pid: number): boolean {
 // 检查特定端口是否有WebSocketBridge服务响应
 async function checkBridgeAtPort(port: number): Promise<boolean> {
     return new Promise((resolve) => {
-        const req = http.get(`http://localhost:${port}/bridge-status`, (res) => {
+        const req = http.get(`http://127.0.0.1:${port}/bridge-status`, (res) => {
             // 收到响应，检查是否是我们的服务
             let data = '';
             res.on('data', (chunk) => {
@@ -186,7 +186,7 @@ export class BridgeLockManager extends EventEmitter {
         if (!portAvailable) {
             logger.info(`Port ${this.port} is not available, searching for another port...`);
             try {
-                this.port = await findAvailablePort(this.port + 1);
+                this.port = await findAvailablePort(this.port + 1, 10);
                 logger.info(`Found available port: ${this.port}`);
             } catch (e) {
                 logger.error(`Cannot find available port:`, e.message);

package/src/tools/import-tools.ts

@@ -45,6 +45,7 @@ export const importGeneratedAssetTool = {
         name: z.string().describe('The name to give to the imported object in the scene'),
         model_url: z.string().describe('Public HTTP(S) URL of a completed GLB/GLTF model. Do not pass archive or other mesh formats such as .zip/.obj/.fbx.'),
         preview_image_url: z.string().optional().describe('Optional preview image URL to show alongside the import job.'),
+        brandgoodid: z.string().optional().describe('Optional inventoried product id (brandGoodId). When provided, Koomaster stores it as the xref resource (type=custom) for rendering, and keeps the uploaded OBJ id in customProperties so the editor still displays via the original OBJ path.'),
         location: z.array(z.number()).describe('[x, y, z] center position coordinates for the imported model'),
         dimensions: z.array(z.number()).describe('[width, height, depth] absolute dimensions for the imported model, in millimeters'),
         rotation: z.array(z.number()).optional().describe('Optional [x, y, z] rotation in degrees. Following the Z-up coordinate system: rotation around X-axis tilts the object left/right (like nodding sideways), rotation around Y-axis tilts the object forward/backward (like nodding), and rotation around Z-axis rotates the object in the horizontal plane (like spinning on the ground). Positive values follow the right-hand rule: point thumb in positive axis direction, fingers show positive rotation direction.'),
@@ -91,6 +92,7 @@ export const importGeneratedAssetTool = {
                         rotation: args.rotation,
                         zipBuffer: zipBuffer.toString("base64"),
                         boundingBox,
+                        brandgoodid: args.brandgoodid,
                     });
                     baseProgressObj.data = objectInfo;
 

package/src/tools/tools-info.ts

@@ -41,7 +41,7 @@ export const getToolsInfoTool = {
                     "sweep - Creates a 3D solid by sweeping a FACE along auxiliary curves. NOTE: This tool operates ONLY on faces, not on entire objects or groups. The face can be either selected by the user or created programmatically. IMPORTANT: The face being swept (profile) must NOT be parallel to the auxiliary curves (path) - the sweep direction must have some component perpendicular to the face normal for the operation to succeed. After the sweep operation completes, the original face (profile) will be automatically deleted from the model.",
                 ],
                 generated: [
-                    "import_generated_asset - Import a generated GLB/GLTF model from any source that provides a public model URL. Requires model_url plus name/location/dimensions.",
+                    "import_generated_asset - Import a generated GLB/GLTF model from any source that provides a public model URL. Requires model_url plus name/location/dimensions. Optional brandgoodid stores the inventoried product id as the xref resource.",
                     "poll_import_status - Query GLB-to-scene import progress using the import_uuid returned by import_generated_asset."
                 ],
                 assets: [