mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-09-20 13:52:28 +03:00
137e49e393
⭐5 — Provider x-search de primeira classe (SuperGrok/xAI x_search) em POST /v1/search e MCP omniroute_x_search. Fallback de credenciais xai-oauth→xao→xai; distinto de web search e do X Developer MCP. Reconciliado com o release tip (que já incluía #10981 "skip catalog-default SearXNG" deste mesmo lote): merge trouxe 5 conflitos reais de contagem gerada (llm.txt/README.md/AGENTS.md/PROVIDER_REFERENCE.md/SVGs/46 mirrors i18n, todos verificados como bump puro 347→348, sem perda de conteúdo do HEAD) + 1 conflito real de mergeable=CONFLICTING. Durante a validação, os 3 testes novos de SearXNG expuseram um bug real de interação com #10981: `isUnconfiguredLoopbackSearchProvider()` checava o baseUrl ESTÁTICO do catálogo em vez do baseUrl efetivo (após override de `provider_options.baseUrl` ou `providerSpecificData.baseUrl` da conexão), então QUALQUER request a searxng-search — mesmo com override customizado — era rejeitado como se fosse o default não-configurado. Corrigido em `open-sse/handlers/search.ts` (resolve o baseUrl efetivo via `resolveSearchBaseUrl()` antes do skip-check, tanto para o provider primário quanto o alternate). Um teste do próprio #10988 que assumia o comportamento pré-#10981 (default localhost:8888 sempre atendido) foi atualizado para refletir o comportamento já mesclado e intencional (503 quando não configurado). Validação completa: typecheck limpo, 70/70 testes unit (search-route/search-registry/x-search-provider/searxng-loopback-default), 24/24 vitest MCP, 14/14 integration (search-providers-catalog), lint limpo nos arquivos tocados, docs-counts-sync OK (2 drifts soft pré-existentes, não relacionados), gates estáticos (file-size/complexity/cognitive/dead-code/changelog) todos OK.
88 lines
3.2 KiB
TypeScript
88 lines
3.2 KiB
TypeScript
/**
|
|
* MCP Authorization Scopes — Defines permission scopes for each MCP tool.
|
|
*
|
|
* Each tool requires specific scopes to execute. API keys can be configured
|
|
* with a subset of scopes to limit tool access (least-privilege).
|
|
*/
|
|
|
|
// ============ Scope Definitions ============
|
|
|
|
/** All available MCP scopes */
|
|
export const MCP_SCOPE_LIST = [
|
|
"read:health",
|
|
"read:combos",
|
|
"write:combos",
|
|
"read:quota",
|
|
"read:usage",
|
|
"read:models",
|
|
"read:radar",
|
|
"execute:completions",
|
|
"execute:search",
|
|
"write:budget",
|
|
"write:resilience",
|
|
"pricing:write",
|
|
"read:cache",
|
|
"write:cache",
|
|
"read:compression",
|
|
"write:compression",
|
|
"read:proxies",
|
|
] as const;
|
|
|
|
export type McpScope = (typeof MCP_SCOPE_LIST)[number];
|
|
|
|
// ============ Tool → Scope Mapping ============
|
|
|
|
/** Maps each MCP tool to its required scopes */
|
|
export const MCP_TOOL_SCOPES: Record<string, readonly McpScope[]> = {
|
|
// Phase 1: Essential Tools
|
|
omniroute_get_health: ["read:health"],
|
|
omniroute_list_combos: ["read:combos"],
|
|
omniroute_get_combo_metrics: ["read:combos"],
|
|
omniroute_switch_combo: ["write:combos"],
|
|
omniroute_check_quota: ["read:quota"],
|
|
omniroute_route_request: ["execute:completions"],
|
|
omniroute_web_search: ["execute:search"],
|
|
omniroute_x_search: ["execute:search"],
|
|
omniroute_web_fetch: ["execute:search"],
|
|
omniroute_cost_report: ["read:usage"],
|
|
omniroute_list_models_catalog: ["read:models"],
|
|
omniroute_radar_catalog: ["read:radar"],
|
|
|
|
// Phase 2: Advanced Tools
|
|
omniroute_simulate_route: ["read:health", "read:combos"],
|
|
omniroute_set_budget_guard: ["write:budget"],
|
|
omniroute_set_resilience_profile: ["write:resilience"],
|
|
omniroute_test_combo: ["execute:completions", "read:combos"],
|
|
omniroute_get_provider_metrics: ["read:health"],
|
|
omniroute_best_combo_for_task: ["read:combos", "read:health"],
|
|
omniroute_explain_route: ["read:health", "read:usage"],
|
|
omniroute_get_session_snapshot: ["read:usage"],
|
|
omniroute_db_health_check: ["read:health", "write:resilience"],
|
|
omniroute_sync_pricing: ["pricing:write"],
|
|
omniroute_cache_stats: ["read:cache"],
|
|
omniroute_cache_flush: ["write:cache"],
|
|
omniroute_compression_status: ["read:compression"],
|
|
omniroute_compression_configure: ["write:compression"],
|
|
omniroute_set_compression_engine: ["write:compression"],
|
|
omniroute_list_compression_combos: ["read:compression"],
|
|
omniroute_compression_combo_stats: ["read:compression"],
|
|
omniroute_ccr_store: ["write:compression"],
|
|
omniroute_ccr_retrieve: ["read:compression"],
|
|
omniroute_ccr_inspect: ["read:compression"],
|
|
omniroute_ccr_list: ["read:compression"],
|
|
omniroute_ccr_delete: ["write:compression"],
|
|
omniroute_ccr_stats: ["read:compression"],
|
|
omniroute_oneproxy_fetch: ["read:proxies"],
|
|
omniroute_oneproxy_rotate: ["read:proxies"],
|
|
omniroute_oneproxy_stats: ["read:proxies"],
|
|
|
|
// Web-session pool observability (read) + lifecycle (write)
|
|
omniroute_pool_status: ["read:health"],
|
|
omniroute_pool_sessions: ["read:health"],
|
|
omniroute_pool_health: ["read:health"],
|
|
omniroute_pool_reset: ["write:resilience"],
|
|
omniroute_pool_warm: ["write:resilience"],
|
|
// Stealth browser pool observability (#3368 PR7)
|
|
omniroute_browser_pool_status: ["read:health"],
|
|
} as const;
|