Function getMCPNetworkMigrationCodemod

pkg/cli/codemod_mcp_network.go:15–149

getMCPNetworkMigrationCodemod creates a codemod for migrating per-server MCP network configuration to top-level network configuration

()

// getMCPNetworkMigrationCodemod creates a codemod for migrating per-server MCP network configuration to top-level network configuration
func getMCPNetworkMigrationCodemod() Codemod {
	return Codemod{
		ID:           "mcp-network-to-top-level-migration",
		Name:         "Migrate MCP network config to top-level",
		Description:  "Moves per-server MCP 'network.allowed' configuration to top-level workflow 'network.allowed'. Per-server network configuration is deprecated.",
		IntroducedIn: "0.6.0",
		Apply: func(content string, frontmatter map[string]any) (string, bool, error) {
			// Check if mcp-servers section exists
			mcpServersValue, hasMCPServers := frontmatter["mcp-servers"]
			if !hasMCPServers {
				return content, false, nil
			}

			mcpServersMap, ok := mcpServersValue.(map[string]any)
			if !ok {
				return content, false, nil
			}

			// Collect all network.allowed domains from MCP servers
			var allAllowedDomains []string
			serversWithNetwork := make(map[string]struct {
			})

			for serverName, serverValue := range mcpServersMap {
				serverConfig, ok := serverValue.(map[string]any)
				if !ok {
					continue
				}

				// Check if this server has a network configuration
				networkValue, hasNetwork := serverConfig["network"]
				if !hasNetwork {
					continue
				}

				networkMap, ok := networkValue.(map[string]any)
				if !ok {
					continue
				}

				// Extract allowed domains
				allowedValue, hasAllowed := networkMap["allowed"]
				if !hasAllowed {
					continue
				}

				// Convert allowed to []string
				switch allowed := allowedValue.(type) {
				case []any:
					for _, domain := range allowed {
						if domainStr, ok := domain.(string); ok {
							allAllowedDomains = append(allAllowedDomains, domainStr)
						}
					}
					// Only mark server as having network if it has domains
					if len(allowed) > 0 {
						serversWithNetwork[serverName] = struct {
						}{}