✨ Add Super-Admin tools for managing any model

- 🛠️ Introduced generic Super-Admin MCP tools, including `list-models`, `describe-model`, `list-records`, `show-record`, `create-record`, and `update-record`. - 🛡️ Restricted modification of critical fields (e.g., passwords, roles, tokens) to enhance security. - ✅ Added extensive feature tests for Super-Admin functionality and access control. - 📜 Increased pagination length to accommodate new tools on a single page. - 🔗 Registered Super-Admin tools in `EinundzwanzigServer`.
2026-06-23 06:30:22 +00:00 · 2026-06-08 13:39:04 +02:00
parent 3a507cced2
commit 8c68b19138
14 changed files with 810 additions and 6 deletions
@@ -0,0 +1,67 @@
+<?php
+
+namespace App\Mcp\Tools\SuperAdmin;
+
+use App\Mcp\Tools\SuperAdmin\Concerns\AuthorizesSuperAdmin;
+use Illuminate\Contracts\JsonSchema\JsonSchema;
+use Illuminate\JsonSchema\Types\Type;
+use Laravel\Mcp\Request;
+use Laravel\Mcp\Response;
+use Laravel\Mcp\Server\Attributes\Description;
+use Laravel\Mcp\Server\Tool;
+use Throwable;
+
+#[Description('NUR SUPER-ADMIN: Aktualisiert einen Datensatz eines beliebigen Models per ID. Die zu ändernden Felder werden als "attributes"-Objekt übergeben (Mass-Assignment-Schutz wird bewusst umgangen).')]
+class SuperAdminUpdateRecordTool extends Tool
+{
+    use AuthorizesSuperAdmin;
+
+    public function handle(Request $request): Response
+    {
+        if ($denied = $this->denyUnlessSuperAdmin($request)) {
+            return $denied;
+        }
+
+        $class = $this->resolveModel($request);
+
+        if ($class instanceof Response) {
+            return $class;
+        }
+
+        $record = $class::query()->find($request->get('id'));
+
+        if ($record === null) {
+            return Response::error('Datensatz mit ID '.$request->get('id').' in '.class_basename($class).' nicht gefunden.');
+        }
+
+        $attributes = (array) ($request->get('attributes') ?? []);
+
+        if ($attributes === []) {
+            return Response::error('Bitte "attributes" mit den zu ändernden Feldern angeben.');
+        }
+
+        if ($blocked = $this->rejectProtectedAttributes($attributes)) {
+            return $blocked;
+        }
+
+        try {
+            $record->forceFill($attributes)->save();
+        } catch (Throwable $e) {
+            return Response::error('Aktualisieren fehlgeschlagen: '.$e->getMessage());
+        }
+
+        return Response::json($record->fresh()->toArray());
+    }
+
+    /**
+     * @return array<string, Type>
+     */
+    public function schema(JsonSchema $schema): array
+    {
+        return [
+            'model' => $this->modelParameter($schema),
+            'id' => $schema->integer()->description('Primärschlüssel des zu ändernden Datensatzes.')->required(),
+            'attributes' => $schema->object()->description('Objekt {spalte: wert} mit den zu ändernden Feldern.')->required(),
+        ];
+    }
+}