mirror of
https://github.com/HolgerHatGarKeineNode/einundzwanzig-app.git
synced 2026-06-11 02:50:29 +00:00
HolgerHatGarKeineNode
8c68b19138
- 🛠️ Introduced generic Super-Admin MCP tools, including `list-models`, `describe-model`, `list-records`, `show-record`, `create-record`, and `update-record`. - 🛡️ Restricted modification of critical fields (e.g., passwords, roles, tokens) to enhance security. - ✅ Added extensive feature tests for Super-Admin functionality and access control. - 📜 Increased pagination length to accommodate new tools on a single page. - 🔗 Registered Super-Admin tools in `EinundzwanzigServer`.
68 lines
2.1 KiB
PHP
68 lines
2.1 KiB
PHP
<?php
|
|
|
|
namespace App\Mcp\Tools\SuperAdmin;
|
|
|
|
use App\Mcp\Tools\SuperAdmin\Concerns\AuthorizesSuperAdmin;
|
|
use Illuminate\Contracts\JsonSchema\JsonSchema;
|
|
use Illuminate\JsonSchema\Types\Type;
|
|
use Laravel\Mcp\Request;
|
|
use Laravel\Mcp\Response;
|
|
use Laravel\Mcp\Server\Attributes\Description;
|
|
use Laravel\Mcp\Server\Tool;
|
|
use Throwable;
|
|
|
|
#[Description('NUR SUPER-ADMIN: Aktualisiert einen Datensatz eines beliebigen Models per ID. Die zu ändernden Felder werden als "attributes"-Objekt übergeben (Mass-Assignment-Schutz wird bewusst umgangen).')]
|
|
class SuperAdminUpdateRecordTool extends Tool
|
|
{
|
|
use AuthorizesSuperAdmin;
|
|
|
|
public function handle(Request $request): Response
|
|
{
|
|
if ($denied = $this->denyUnlessSuperAdmin($request)) {
|
|
return $denied;
|
|
}
|
|
|
|
$class = $this->resolveModel($request);
|
|
|
|
if ($class instanceof Response) {
|
|
return $class;
|
|
}
|
|
|
|
$record = $class::query()->find($request->get('id'));
|
|
|
|
if ($record === null) {
|
|
return Response::error('Datensatz mit ID '.$request->get('id').' in '.class_basename($class).' nicht gefunden.');
|
|
}
|
|
|
|
$attributes = (array) ($request->get('attributes') ?? []);
|
|
|
|
if ($attributes === []) {
|
|
return Response::error('Bitte "attributes" mit den zu ändernden Feldern angeben.');
|
|
}
|
|
|
|
if ($blocked = $this->rejectProtectedAttributes($attributes)) {
|
|
return $blocked;
|
|
}
|
|
|
|
try {
|
|
$record->forceFill($attributes)->save();
|
|
} catch (Throwable $e) {
|
|
return Response::error('Aktualisieren fehlgeschlagen: '.$e->getMessage());
|
|
}
|
|
|
|
return Response::json($record->fresh()->toArray());
|
|
}
|
|
|
|
/**
|
|
* @return array<string, Type>
|
|
*/
|
|
public function schema(JsonSchema $schema): array
|
|
{
|
|
return [
|
|
'model' => $this->modelParameter($schema),
|
|
'id' => $schema->integer()->description('Primärschlüssel des zu ändernden Datensatzes.')->required(),
|
|
'attributes' => $schema->object()->description('Objekt {spalte: wert} mit den zu ändernden Feldern.')->required(),
|
|
];
|
|
}
|
|
}
|