vignesh/trypost
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(mcp): extract MCP upload caps to trypost.mcp.upload config

Browse source
This commit is contained in:
Paulo Castellano 2026-05-15 16:24:14 -03:00
parent 7971571dc3
commit 6b40edce55
3 changed files with 27 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
app/Http/Requests/Api/StoreUploadRequest.php
View file

@ -24,11 +24,13 @@ public function rules(): array
MediaType::Video->allowedMimeTypes(),
));
$maxKb = (int) config('trypost.mcp.upload.max_size_mb') * 1024;
return [
'media' => [
'required',
'file',
'max:51200',
"max:{$maxKb}",
"mimetypes:{$allowed}",
],
];

9
app/Mcp/Tools/Post/RequestMediaUploadTool.php
View file

@ -14,7 +14,7 @@
use Laravel\Mcp\Server\Attributes\Description;
use Laravel\Mcp\Server\Tool;
#[Description('Issue a one-shot signed POST URL that lets the user upload a local file (image up to 10 MB, video up to 50 MB hard cap) directly to this workspace. Returns an upload_token and upload_url. Hand the URL to the user (e.g. as a curl command with `-F media=@path/to/file`) or to the MCP client. After upload, call AttachMediaFromUploadTool(post_id, upload_token) to attach the result to a post.')]
#[Description('Issue a one-shot signed POST URL that lets the user upload a local file (image or video, up to the workspace upload cap — 50 MB by default) directly to this workspace. Returns an upload_token and upload_url. Hand the URL to the user (e.g. as a curl command with `-F media=@path/to/file`) or to the MCP client. After upload, call AttachMediaFromUploadTool(post_id, upload_token) to attach the result to a post.')]
class RequestMediaUploadTool extends Tool
{
public function handle(Request $request): Response|ResponseFactory
@ -22,8 +22,11 @@ public function handle(Request $request): Response|ResponseFactory
$user = $request->user();
$workspaceId = $user->current_workspace_id;
$maxBytes = (int) config('trypost.mcp.upload.max_size_mb') * 1024 * 1024;
$ttlMinutes = (int) config('trypost.mcp.upload.url_ttl_minutes');
$token = (string) Str::uuid();
$expiresAt = CarbonImmutable::now()->addMinutes(15);
$expiresAt = CarbonImmutable::now()->addMinutes($ttlMinutes);
$uploadUrl = URL::temporarySignedRoute(
'api.uploads.store',
@ -35,7 +38,7 @@ public function handle(Request $request): Response|ResponseFactory
'upload_token' => $token,
'upload_url' => $uploadUrl,
'expires_at' => $expiresAt->toIso8601String(),
'max_bytes' => 52428800,
'max_bytes' => $maxBytes,
'field_name' => 'media',
]);
}

18
config/trypost.php
View file

@ -34,6 +34,24 @@
],
],
/*
|--------------------------------------------------------------------------
| MCP Media Upload
|--------------------------------------------------------------------------
|
| Settings for the MCP signed-URL upload flow. The hard cap is enforced
| per upload regardless of media type and is intentionally smaller than
| the per-type caps above because uploads flow through the app server.
|
*/
'mcp' => [
'upload' => [
'max_size_mb' => (int) env('MCP_UPLOAD_MAX_SIZE_MB', 50),
'url_ttl_minutes' => (int) env('MCP_UPLOAD_URL_TTL_MINUTES', 15),
],
],
/*
|--------------------------------------------------------------------------
| Google Authentication