## Summary
Implements `PUT /v0/servers/{id}` admin edit endpoint to address part of
issue #182, providing an API-based solution for server moderation
without requiring direct database access.
- **New endpoint**: `PUT /v0/servers/{id}` for editing existing servers
- **Security**: Uses existing JWT auth with `PermissionActionEdit`
permissions
- **Anti-undelete protection**: Added `ServerStatusDeleted` status that
cannot be reverted
- **Full implementation**: Database, service, API, and comprehensive
test coverage
## Key Use Cases
- Mark malicious servers as `deleted` for takedown
- Update server metadata for moderation actions
Related to: https://github.com/modelcontextprotocol/registry/issues/182
(but that is not _done_ yet because we need admins to be able to login
(probably with #283), and need to add docs on how to do the takedown,
and probably guidelines on what we will/won't takedown)
285 lines
No EOL
7 KiB
Go
285 lines
No EOL
7 KiB
Go
package database
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"sort"
|
|
"sync"
|
|
"time"
|
|
|
|
"github.com/modelcontextprotocol/registry/internal/model"
|
|
)
|
|
|
|
// MemoryDB is an in-memory implementation of the Database interface
|
|
type MemoryDB struct {
|
|
entries map[string]*model.ServerRecord // maps registry metadata ID to ServerRecord
|
|
mu sync.RWMutex
|
|
}
|
|
|
|
// NewMemoryDB creates a new instance of the in-memory database
|
|
func NewMemoryDB(e map[string]*model.ServerDetail) *MemoryDB {
|
|
// Convert ServerDetail entries to ServerRecord entries
|
|
serverRecords := make(map[string]*model.ServerRecord)
|
|
for registryID, serverDetail := range e {
|
|
// Create registry metadata
|
|
now := time.Now()
|
|
record := &model.ServerRecord{
|
|
ServerJSON: *serverDetail,
|
|
RegistryMetadata: model.RegistryMetadata{
|
|
ID: registryID,
|
|
PublishedAt: now,
|
|
UpdatedAt: now,
|
|
IsLatest: true,
|
|
ReleaseDate: now.Format(time.RFC3339),
|
|
},
|
|
PublisherExtensions: make(map[string]interface{}),
|
|
}
|
|
serverRecords[registryID] = record
|
|
}
|
|
return &MemoryDB{
|
|
entries: serverRecords,
|
|
}
|
|
}
|
|
|
|
|
|
//nolint:cyclop // Complexity from filtering logic is acceptable for memory implementation
|
|
func (db *MemoryDB) List(
|
|
ctx context.Context,
|
|
filter map[string]any,
|
|
cursor string,
|
|
limit int,
|
|
) ([]*model.ServerRecord, string, error) {
|
|
if ctx.Err() != nil {
|
|
return nil, "", ctx.Err()
|
|
}
|
|
|
|
if limit <= 0 {
|
|
limit = 10 // Default limit
|
|
}
|
|
|
|
db.mu.RLock()
|
|
defer db.mu.RUnlock()
|
|
|
|
|
|
// Convert all entries to a slice for pagination, filter by is_latest
|
|
var allEntries []*model.ServerRecord
|
|
for _, entry := range db.entries {
|
|
if entry.RegistryMetadata.IsLatest {
|
|
allEntries = append(allEntries, entry)
|
|
}
|
|
}
|
|
|
|
// Simple filtering implementation
|
|
var filteredEntries []*model.ServerRecord
|
|
for _, entry := range allEntries {
|
|
include := true
|
|
|
|
// Apply filters if any
|
|
for key, value := range filter {
|
|
switch key {
|
|
case "name":
|
|
if entry.ServerJSON.Name != value.(string) {
|
|
include = false
|
|
}
|
|
case "version":
|
|
if entry.ServerJSON.VersionDetail.Version != value.(string) {
|
|
include = false
|
|
}
|
|
case "status":
|
|
if string(entry.ServerJSON.Status) != value.(string) {
|
|
include = false
|
|
}
|
|
case "remote_url":
|
|
found := false
|
|
remoteURL := value.(string)
|
|
for _, remote := range entry.ServerJSON.Remotes {
|
|
if remote.URL == remoteURL {
|
|
found = true
|
|
break
|
|
}
|
|
}
|
|
if !found {
|
|
include = false
|
|
}
|
|
}
|
|
}
|
|
|
|
if include {
|
|
filteredEntries = append(filteredEntries, entry)
|
|
}
|
|
}
|
|
|
|
// Sort filteredEntries by registry metadata ID for consistent pagination
|
|
sort.Slice(filteredEntries, func(i, j int) bool {
|
|
return filteredEntries[i].RegistryMetadata.ID < filteredEntries[j].RegistryMetadata.ID
|
|
})
|
|
|
|
// Find starting point for cursor-based pagination using registry metadata ID
|
|
startIdx := 0
|
|
if cursor != "" {
|
|
for i, entry := range filteredEntries {
|
|
if entry.RegistryMetadata.ID == cursor {
|
|
startIdx = i + 1 // Start after the cursor
|
|
break
|
|
}
|
|
}
|
|
}
|
|
|
|
// Apply pagination
|
|
endIdx := min(startIdx+limit, len(filteredEntries))
|
|
|
|
var result []*model.ServerRecord
|
|
if startIdx < len(filteredEntries) {
|
|
result = filteredEntries[startIdx:endIdx]
|
|
} else {
|
|
result = []*model.ServerRecord{}
|
|
}
|
|
|
|
// Determine next cursor using registry metadata ID
|
|
nextCursor := ""
|
|
if endIdx < len(filteredEntries) {
|
|
nextCursor = filteredEntries[endIdx-1].RegistryMetadata.ID
|
|
}
|
|
|
|
return result, nextCursor, nil
|
|
}
|
|
|
|
// GetByID retrieves a single ServerRecord by its registry metadata ID
|
|
func (db *MemoryDB) GetByID(ctx context.Context, id string) (*model.ServerRecord, error) {
|
|
if ctx.Err() != nil {
|
|
return nil, ctx.Err()
|
|
}
|
|
|
|
db.mu.RLock()
|
|
defer db.mu.RUnlock()
|
|
|
|
// Find entry by registry metadata ID
|
|
if entry, exists := db.entries[id]; exists {
|
|
// Return a copy of the ServerRecord
|
|
entryCopy := *entry
|
|
return &entryCopy, nil
|
|
}
|
|
|
|
return nil, ErrNotFound
|
|
}
|
|
|
|
// Publish adds a new server to the database with separated server.json and extensions
|
|
func (db *MemoryDB) Publish(ctx context.Context, serverDetail model.ServerDetail, publisherExtensions map[string]interface{}, registryMetadata model.RegistryMetadata) (*model.ServerRecord, error) {
|
|
if ctx.Err() != nil {
|
|
return nil, ctx.Err()
|
|
}
|
|
|
|
// Extract name and version for validation
|
|
name := serverDetail.Name
|
|
if name == "" {
|
|
return nil, fmt.Errorf("name is required in server JSON")
|
|
}
|
|
|
|
version := serverDetail.VersionDetail.Version
|
|
if version == "" {
|
|
return nil, fmt.Errorf("version is required in version_detail")
|
|
}
|
|
|
|
db.mu.Lock()
|
|
defer db.mu.Unlock()
|
|
|
|
// Validate repository URL
|
|
if serverDetail.Repository.URL == "" {
|
|
return nil, ErrInvalidInput
|
|
}
|
|
|
|
// Create server record
|
|
record := &model.ServerRecord{
|
|
ServerJSON: serverDetail,
|
|
RegistryMetadata: registryMetadata,
|
|
PublisherExtensions: publisherExtensions,
|
|
}
|
|
|
|
// Store the record using registry metadata ID
|
|
db.entries[registryMetadata.ID] = record
|
|
|
|
return record, nil
|
|
}
|
|
|
|
// ImportSeed imports initial data from a seed file into memory database
|
|
func (db *MemoryDB) ImportSeed(ctx context.Context, seedFilePath string) error {
|
|
if ctx.Err() != nil {
|
|
return ctx.Err()
|
|
}
|
|
|
|
// This will need to be updated to work with the new ServerRecord format
|
|
// Read seed data using the shared ReadSeedFile function
|
|
seedData, err := ReadSeedFile(ctx, seedFilePath)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to read seed file: %w", err)
|
|
}
|
|
|
|
// Lock for concurrent access
|
|
db.mu.Lock()
|
|
defer db.mu.Unlock()
|
|
|
|
// Import each server
|
|
for _, record := range seedData {
|
|
// Use the registry metadata ID as the map key
|
|
db.entries[record.RegistryMetadata.ID] = record
|
|
}
|
|
|
|
|
|
return nil
|
|
}
|
|
|
|
// UpdateLatestFlag updates the is_latest flag for a specific server record
|
|
func (db *MemoryDB) UpdateLatestFlag(ctx context.Context, id string, isLatest bool) error {
|
|
if ctx.Err() != nil {
|
|
return ctx.Err()
|
|
}
|
|
|
|
db.mu.Lock()
|
|
defer db.mu.Unlock()
|
|
|
|
if entry, exists := db.entries[id]; exists {
|
|
entry.RegistryMetadata.IsLatest = isLatest
|
|
entry.RegistryMetadata.UpdatedAt = time.Now()
|
|
return nil
|
|
}
|
|
|
|
return ErrNotFound
|
|
}
|
|
|
|
// UpdateServer updates an existing server record with new server details
|
|
func (db *MemoryDB) UpdateServer(ctx context.Context, id string, serverDetail model.ServerDetail, publisherExtensions map[string]interface{}) (*model.ServerRecord, error) {
|
|
if ctx.Err() != nil {
|
|
return nil, ctx.Err()
|
|
}
|
|
|
|
db.mu.Lock()
|
|
defer db.mu.Unlock()
|
|
|
|
entry, exists := db.entries[id]
|
|
if !exists {
|
|
return nil, ErrNotFound
|
|
}
|
|
|
|
// Update the server details
|
|
entry.ServerJSON = serverDetail
|
|
entry.PublisherExtensions = publisherExtensions
|
|
entry.RegistryMetadata.UpdatedAt = time.Now()
|
|
|
|
// Return the updated record
|
|
return entry, nil
|
|
}
|
|
|
|
// Close closes the database connection
|
|
// For an in-memory database, this is a no-op
|
|
func (db *MemoryDB) Close() error {
|
|
return nil
|
|
}
|
|
|
|
// Connection returns information about the database connection
|
|
func (db *MemoryDB) Connection() *ConnectionInfo {
|
|
return &ConnectionInfo{
|
|
Type: ConnectionTypeMemory,
|
|
IsConnected: true, // Memory DB is always connected
|
|
Raw: db.entries,
|
|
}
|
|
} |