strapi-plugin-mcp-chat 0.3.1 → 0.5.0

package/README.md

@@ -294,11 +294,16 @@ The plugin follows the documented Strapi 5 plugin APIs:
   (`register` / `bootstrap` / `destroy` / `config` / `controllers` / `services` / `routes`).
   Routes are declared with `type: 'admin'`, so the chat/STT/TTS endpoints require an
   authenticated admin session.
-- **MCP** — tools are registered with `strapi.ai.mcp.registerTool` during `register()`
-  (the documented extension point), using `z` from `@strapi/utils` for the schemas and
-  `auth.policies` (content-manager read/update/publish) for RBAC. They're organized in a
-  modular `server/src/mcp/` (one file per tool in `tools/`, aggregated and looped) following
-  the structure from [Paul Bratslavsky's MCP tool-extension example](https://github.com/PaulBratslavsky/strapi-mcp-demo-and-tool-extension).
+- **MCP** — tools are **defined** as pure objects with a local typed `defineTool` helper
+  (`server/src/mcp/define.ts`) and **registered from an array** via
+  `strapi.ai.mcp.registerTool` during `register()`, using `z` from `@strapi/utils` for the
+  schemas and `auth.policies` (content-manager read/update/publish) for RBAC. The
+  `defineTool`/`defineResource`/`definePrompt` identity functions infer each handler's
+  `args` from its input schema (no `any`) and keep the definitions side-effect-free —
+  mirroring the direction of Strapi's [PR #26603](https://github.com/strapi/strapi/pull/26603)
+  (`ai.mcp.defineTool` + the `import { ai } from "@strapi/strapi"` namespace). When that API
+  ships stable, migrating is a one-line import swap; until then the plugin stays on the
+  released `registerTool` so it runs on any Strapi ≥ 5.47 (no experimental build required).
 - **Admin** — `register()` uses only documented APIs (`app.addMenuLink`, `app.registerPlugin`).
 
 One intentional deviation: the **global floating chat** is mounted via its own React root
@@ -316,6 +321,27 @@ single spot.
   token's permissions — scope the token to only what those clients should change.
 - The agent can edit and publish content — give the plugin only to trusted editors.
 
+## Reliability — never degrades or breaks the host Strapi
+
+This plugin is built to be a good citizen: installing it must never slow down or take
+down the host app. Concrete guarantees:
+
+- **Can't crash boot.** `register()` degrades gracefully if the native MCP server / i18n /
+  OpenAI key are absent (logs a warning, disables the feature). MCP tools register inside a
+  per-tool `try/catch`, so a single bad tool can never abort the others or the boot.
+  `destroy()` is best-effort.
+- **Can't blank the admin.** The global overlay (floating chat + preview) mounts inside a
+  React **error boundary** in its own root, after an SSR/double-mount guard; any render
+  error just hides the overlay, leaving the Strapi admin fully intact. Lingering preview
+  layout styles are reset on load, and screen/mic capture is stopped on unmount.
+- **Provisioning is fail-safe.** Generated schemas are **validated before any file is
+  written** (kind/attributes/known types/relation targets) and writes are **all-or-nothing**
+  — a malformed manifest can never leave Strapi with a broken, unbootable schema. Generation
+  stays additive (never touches existing types), dev-only, with hardened zip-slip protection.
+- **Won't become a bottleneck.** Every outbound call (OpenAI, MCP) has a **timeout** so a
+  slow upstream can't hold a request open; recursive content search has depth caps and a
+  result cap; tool outputs are size-capped before going back to the model.
+
 ## License
 
 [MIT](./LICENSE) © Raul Balestra

package/admin/src/components/ErrorBoundary.tsx

@@ -0,0 +1,29 @@
+/**
+ * Error boundary que ISOLA as sobreposições do plugin (chat + preview) do resto
+ * do admin do Strapi. Se algo dentro renderizar com erro, capturamos aqui e
+ * renderizamos `null` — o overlay some, mas o admin do Strapi continua intacto.
+ * Sem isto, um erro de render num root React próprio poderia quebrar a página.
+ */
+import { Component, type ReactNode } from 'react';
+
+type Props = { children: ReactNode };
+type State = { failed: boolean };
+
+export class ErrorBoundary extends Component<Props, State> {
+  state: State = { failed: false };
+
+  static getDerivedStateFromError(): State {
+    return { failed: true };
+  }
+
+  componentDidCatch(error: unknown) {
+    // Apenas loga; nunca propaga para o admin.
+    // eslint-disable-next-line no-console
+    console.error('[mcp-chat] overlay desativado após erro de render:', error);
+  }
+
+  render() {
+    if (this.state.failed) return null;
+    return this.props.children;
+  }
+}

package/admin/src/components/FloatingChat.tsx

@@ -113,6 +113,14 @@ export const FloatingChat = ({ previewOn, previewUrl, onTogglePreview, onReply }
     if (bodyRef.current) bodyRef.current.scrollTop = bodyRef.current.scrollHeight;
   }, [messages, loading]);
 
+  // ── Cleanup ao desmontar: encerra captura de tela / microfone (sem vazar) ──
+  useEffect(() => {
+    return () => {
+      try { streamRef.current?.getTracks().forEach((t) => t.stop()); } catch { /* noop */ }
+      try { recorderRef.current?.stop(); } catch { /* noop */ }
+    };
+  }, []);
+
   // ── Screenshare ───────────────────────────────────────────────────────────
   const startShare = async () => {
     setError(null);

package/admin/src/index.tsx

@@ -1,6 +1,25 @@
 import { createRoot } from 'react-dom/client';
 import { PLUGIN_ID } from './pluginId';
 import { AdminOverlays } from './components/AdminOverlays';
+import { ErrorBoundary } from './components/ErrorBoundary';
+
+// Flag de módulo: trava extra contra duplo-mount (além do guard por id no DOM).
+let mounted = false;
+
+/** Limpa estilos inline que o PreviewPanel possa ter deixado no #strapi caso uma
+ *  sessão anterior tenha sido encerrada de forma abrupta — garante que o admin
+ *  nunca apareça encolhido/quebrado ao carregar. */
+const resetStrapiRootStyles = () => {
+  try {
+    const root = document.getElementById('strapi') as HTMLElement | null;
+    if (!root) return;
+    for (const p of ['width', 'maxWidth', 'transform', 'overflow'] as const) {
+      root.style[p] = '';
+    }
+  } catch {
+    /* noop */
+  }
+};
 
 const PluginIcon = () => (
   <svg width="1em" height="1em" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">
@@ -39,11 +58,26 @@ export default {
     // tocar na árvore do admin). É o único desvio das APIs documentadas e está
     // contido a este único ponto. `register()` acima usa só APIs oficiais
     // (addMenuLink + registerPlugin).
+    // Guarda de ambiente: só roda no browser (nunca em SSR/headless sem DOM).
+    if (typeof document === 'undefined' || typeof window === 'undefined') return;
     const ID = 'mcp-chat-fab-root';
-    if (document.getElementById(ID)) return;
-    const el = document.createElement('div');
-    el.id = ID;
-    document.body.appendChild(el);
-    createRoot(el).render(<AdminOverlays />);
+    if (mounted || document.getElementById(ID)) return;
+    mounted = true;
+    try {
+      resetStrapiRootStyles();
+      const el = document.createElement('div');
+      el.id = ID;
+      document.body.appendChild(el);
+      // ErrorBoundary garante que um erro de render do overlay nunca derrube o admin.
+      createRoot(el).render(
+        <ErrorBoundary>
+          <AdminOverlays />
+        </ErrorBoundary>
+      );
+    } catch (e) {
+      // Em último caso, falhar em montar o overlay não pode quebrar o admin.
+      // eslint-disable-next-line no-console
+      console.error('[mcp-chat] falha ao montar overlays (admin segue normal):', e);
+    }
   },
 };