mirror of
https://github.com/langbot-app/LangBot.git
synced 2026-09-30 13:26:49 +08:00
TyperBody
475420956c
Granularity follow-up: a record used to say only "installed an extension". - Add resolve_resource_identity(): derive the acted-on resource from trusted route params or the install-style payload (plugin_author/plugin_name), so every resource family names its target. Unknown keys are ignored and sensitive keys are skipped, keeping the audit trail bounded and secret-free. - The route wrapper applies it to every traced request; the identity only fills in when a handler did not publish a more precise one. - Publish field-level before/after diffs for plugin config, skill, knowledge base, MCP server, pipeline, provider and model updates, reusing changed_fields()/build_summary() so secret-looking keys stay redacted and a masked round-trip never shows up as a phantom change.
187 lines
8.1 KiB
Python
187 lines
8.1 KiB
Python
from __future__ import annotations
|
|
|
|
import quart
|
|
from urllib.parse import unquote
|
|
|
|
from ....authz import Permission
|
|
from ....context import RequestContext
|
|
from ....service import settings as settings_service
|
|
from ......provider.tools.loaders.mcp_policy import MCPStdioDisabledError
|
|
from ... import group
|
|
|
|
|
|
@group.group_class('mcp', '/api/v1/mcp')
|
|
class MCPRouterGroup(group.RouterGroup):
|
|
async def initialize(self) -> None:
|
|
@self.route(
|
|
'/servers',
|
|
methods=['GET'],
|
|
auth_type=group.AuthType.USER_TOKEN_OR_API_KEY,
|
|
permission=Permission.RESOURCE_VIEW,
|
|
)
|
|
async def _(request_context: RequestContext) -> str:
|
|
servers = await self.ap.mcp_service.get_mcp_servers(request_context, contain_runtime_info=True)
|
|
return self.success(data={'servers': servers})
|
|
|
|
@self.route(
|
|
'/servers',
|
|
methods=['POST'],
|
|
auth_type=group.AuthType.USER_TOKEN_OR_API_KEY,
|
|
permission=Permission.RESOURCE_MANAGE,
|
|
)
|
|
async def _(request_context: RequestContext) -> str:
|
|
data = await quart.request.json
|
|
try:
|
|
server_uuid = await self.ap.mcp_service.create_mcp_server(request_context, data)
|
|
except MCPStdioDisabledError as exc:
|
|
return self.http_status(403, exc.code, str(exc))
|
|
except ValueError as exc:
|
|
return self.http_status(400, -1, str(exc))
|
|
return self.success(data={'uuid': server_uuid})
|
|
|
|
@self.route(
|
|
'/servers/<path:server_name>',
|
|
methods=['GET'],
|
|
auth_type=group.AuthType.USER_TOKEN_OR_API_KEY,
|
|
permission=Permission.RESOURCE_VIEW,
|
|
)
|
|
async def _(server_name: str, request_context: RequestContext) -> str:
|
|
server_name = unquote(server_name)
|
|
server_data = await self.ap.mcp_service.get_mcp_server_by_name(request_context, server_name)
|
|
if server_data is None:
|
|
return self.http_status(404, -1, 'Server not found')
|
|
return self.success(data={'server': server_data})
|
|
|
|
@self.route(
|
|
'/servers/<path:server_name>',
|
|
methods=['PUT', 'DELETE'],
|
|
auth_type=group.AuthType.USER_TOKEN_OR_API_KEY,
|
|
permission=Permission.RESOURCE_MANAGE,
|
|
)
|
|
async def _(server_name: str, request_context: RequestContext) -> str:
|
|
server_name = unquote(server_name)
|
|
server_data = await self.ap.mcp_service.get_mcp_server_by_name(request_context, server_name)
|
|
if server_data is None:
|
|
return self.http_status(404, -1, 'Server not found')
|
|
# Name the MCP server in the trace, and for an update record which
|
|
# fields actually moved so the card answers "what changed" rather
|
|
# than only "the MCP config was touched".
|
|
quart.g.operation_log_resource_id = server_name
|
|
if quart.request.method == 'PUT':
|
|
data = await quart.request.json
|
|
try:
|
|
await self.ap.mcp_service.update_mcp_server(request_context, server_data['uuid'], data)
|
|
except MCPStdioDisabledError as exc:
|
|
return self.http_status(403, exc.code, str(exc))
|
|
except ValueError as exc:
|
|
return self.http_status(400, -1, str(exc))
|
|
changes = settings_service.changed_fields(
|
|
server_data,
|
|
data if isinstance(data, dict) else {},
|
|
ignore=('uuid',),
|
|
)
|
|
rule = settings_service.ACTION_RULES_BY_ACTION.get('mcp_config')
|
|
quart.g.operation_log_changes = changes
|
|
if rule is not None and changes:
|
|
quart.g.operation_log_summary = settings_service.build_summary(rule, changes)
|
|
else:
|
|
await self.ap.mcp_service.delete_mcp_server(request_context, server_data['uuid'])
|
|
return self.success()
|
|
|
|
@self.route(
|
|
'/servers/<path:server_name>/test',
|
|
methods=['POST'],
|
|
auth_type=group.AuthType.USER_TOKEN_OR_API_KEY,
|
|
permission=Permission.RESOURCE_MANAGE,
|
|
)
|
|
async def _(server_name: str, request_context: RequestContext) -> str:
|
|
"""测试MCP服务器连接"""
|
|
server_name = unquote(server_name)
|
|
server_data = await quart.request.json
|
|
try:
|
|
task_id = await self.ap.mcp_service.test_mcp_server(
|
|
request_context,
|
|
server_name=server_name,
|
|
server_data=server_data,
|
|
)
|
|
except MCPStdioDisabledError as exc:
|
|
return self.http_status(403, exc.code, str(exc))
|
|
return self.success(data={'task_id': task_id})
|
|
|
|
@self.route(
|
|
'/servers/<path:server_name>/resources',
|
|
methods=['GET'],
|
|
auth_type=group.AuthType.USER_TOKEN_OR_API_KEY,
|
|
permission=Permission.RESOURCE_VIEW,
|
|
)
|
|
async def _(server_name: str, request_context: RequestContext) -> str:
|
|
"""Get resources from an MCP server"""
|
|
server_name = unquote(server_name)
|
|
resources = await self.ap.mcp_service.get_mcp_server_resources(request_context, server_name)
|
|
templates = await self.ap.mcp_service.get_mcp_server_resource_templates(request_context, server_name)
|
|
runtime_info = await self.ap.mcp_service.get_runtime_info(request_context, server_name)
|
|
return self.success(
|
|
data={
|
|
'resources': resources,
|
|
'resource_templates': templates,
|
|
'resource_capabilities': (runtime_info or {}).get('resource_capabilities', {}),
|
|
}
|
|
)
|
|
|
|
@self.route(
|
|
'/servers/<path:server_name>/resource-templates',
|
|
methods=['GET'],
|
|
auth_type=group.AuthType.USER_TOKEN_OR_API_KEY,
|
|
permission=Permission.RESOURCE_VIEW,
|
|
)
|
|
async def _(server_name: str, request_context: RequestContext) -> str:
|
|
"""Get resource templates from an MCP server"""
|
|
server_name = unquote(server_name)
|
|
templates = await self.ap.mcp_service.get_mcp_server_resource_templates(request_context, server_name)
|
|
return self.success(data={'resource_templates': templates})
|
|
|
|
@self.route(
|
|
'/servers/<path:server_name>/logs',
|
|
methods=['GET'],
|
|
auth_type=group.AuthType.USER_TOKEN_OR_API_KEY,
|
|
permission=Permission.AUDIT_VIEW,
|
|
)
|
|
async def _(server_name: str, request_context: RequestContext) -> str:
|
|
"""Get logs from an MCP server"""
|
|
server_name = unquote(server_name)
|
|
try:
|
|
limit = int(quart.request.args.get('limit', 200))
|
|
except (TypeError, ValueError):
|
|
limit = 200
|
|
limit = min(limit, 500)
|
|
level = quart.request.args.get('level') or None
|
|
logs = await self.ap.mcp_service.get_mcp_server_logs(
|
|
request_context,
|
|
server_name,
|
|
limit=limit,
|
|
level=level,
|
|
)
|
|
return self.success(data={'logs': logs})
|
|
|
|
@self.route(
|
|
'/servers/<path:server_name>/resources/read',
|
|
methods=['POST'],
|
|
auth_type=group.AuthType.USER_TOKEN_OR_API_KEY,
|
|
permission=Permission.RESOURCE_VIEW,
|
|
)
|
|
async def _(server_name: str, request_context: RequestContext) -> str:
|
|
"""Read a resource from an MCP server"""
|
|
server_name = unquote(server_name)
|
|
data = await quart.request.json
|
|
uri = data.get('uri')
|
|
if not uri:
|
|
return self.http_status(400, -1, 'URI is required')
|
|
envelope = await self.ap.mcp_service.read_mcp_server_resource_envelope(
|
|
request_context,
|
|
server_name,
|
|
uri,
|
|
max_bytes=data.get('max_bytes'),
|
|
include_blob=bool(data.get('include_blob', False)),
|
|
)
|
|
return self.success(data=envelope)
|