Josep Piguillem
a49816eb46
POST /api/v1/media stores an image where the panel keeps a page's and answers with the path to send as `featured_image`. Without it the MCP server could create a page but never give it a picture. The file goes through Media::for(), so it is processed, served and pruned like one uploaded in the panel. Two ways in, one per request: a multipart `file`, or JSON with a `url` the API downloads itself. JPEG, PNG, WebP, GIF or AVIF only, decided from the bytes; no SVG, which is a document that can carry script. The URL is fetched from inside the stack's network, so RemoteImage guards it: HTTPS only, every resolved address must be public, the connection is pinned to the checked address with CURLOPT_RESOLVE so a changing DNS answer cannot swap in a private one, redirects are not followed, and the body is read to a ceiling whatever its headers say. Uploading needs permission to write pages. MediaPolicy::create stays false, so the panel gains no free-standing "new file" button. In the MCP server a multipart binary field becomes `<field>_path` over stdio: the server reads the file from the caller's disk and sends it as multipart, instead of the model pushing base64 through its context. Over HTTP the server's disk is not the caller's, so only `body.url` is offered. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
81 lines
2.6 KiB
JavaScript
81 lines
2.6 KiB
JavaScript
/**
|
|
* The OpenAPI document and the tools derived from it.
|
|
*
|
|
* Loaded from the application the server talks to, and — for a long-running
|
|
* deployment — reloaded now and then, so that deploying a new endpoint to the
|
|
* application makes it a tool here without also redeploying this.
|
|
*/
|
|
|
|
import { readFile } from 'node:fs/promises';
|
|
import { parse } from 'yaml';
|
|
import { buildTools } from './tools.mjs';
|
|
|
|
export class Catalogue {
|
|
/**
|
|
* @param {object} options
|
|
* @param {string} options.source Path or URL of openapi.yaml.
|
|
* @param {string} options.baseUrl Application root the document's server URL is relative to.
|
|
* @param {number} [options.ttlMs] How long a loaded document is trusted. Infinity: load once.
|
|
* @param {boolean} [options.localFiles] Offer uploads from a local path; see `buildTools`.
|
|
*/
|
|
constructor({ source, baseUrl, ttlMs = Infinity, localFiles = false }) {
|
|
this.source = source;
|
|
this.baseUrl = baseUrl.replace(/\/+$/, '');
|
|
this.ttlMs = ttlMs;
|
|
this.localFiles = localFiles;
|
|
this.current = null;
|
|
this.loadedAt = 0;
|
|
this.pending = null;
|
|
}
|
|
|
|
/** @returns {Promise<{spec: object, tools: import('./tools.mjs').Tool[], apiBase: string}>} */
|
|
async get() {
|
|
if (this.current && Date.now() - this.loadedAt < this.ttlMs) return this.current;
|
|
|
|
this.pending ??= this.load().finally(() => { this.pending = null; });
|
|
|
|
try {
|
|
return await this.pending;
|
|
} catch (error) {
|
|
// An application that is redeploying, or briefly down, should not take
|
|
// the tools with it: the last document that loaded is still the best
|
|
// description available. Only the very first load has nothing to fall
|
|
// back on.
|
|
if (this.current) {
|
|
console.error(`landing-mcp: keeping the previous OpenAPI document: ${error.message}`);
|
|
this.loadedAt = Date.now();
|
|
|
|
return this.current;
|
|
}
|
|
|
|
throw error;
|
|
}
|
|
}
|
|
|
|
async load() {
|
|
const spec = parse(await this.read());
|
|
|
|
// The document's own server URL ("/api"), relative to the application root.
|
|
const serverUrl = spec.servers?.[0]?.url ?? '/api';
|
|
|
|
this.current = {
|
|
spec,
|
|
tools: buildTools(spec, { localFiles: this.localFiles }),
|
|
apiBase: /^https?:\/\//.test(serverUrl) ? serverUrl : `${this.baseUrl}${serverUrl}`,
|
|
};
|
|
this.loadedAt = Date.now();
|
|
|
|
return this.current;
|
|
}
|
|
|
|
async read() {
|
|
if (!/^https?:\/\//.test(this.source)) return readFile(this.source, 'utf8');
|
|
|
|
const response = await fetch(this.source, { signal: AbortSignal.timeout(15_000) });
|
|
|
|
if (!response.ok) throw new Error(`GET ${this.source} answered ${response.status}`);
|
|
|
|
return response.text();
|
|
}
|
|
}
|