refactor(service-worker): source app config from entry module.yml

Expose the entry app module's module.yml (the module scanned from baseDir)
as the framework-owned app-wide `config` inner object, with a programmatic
`config` override merged on top. Subsystems read their own slice
(config.backgroundTask.timeout, config.mcp.*), so the app's module.yml is
the single user config surface.

Drop the `mcp` facade option and the `mcpTransportOptions` inner object from
ServiceWorkerApp; ServiceWorkerMcpRouter now reads DNS-rebinding options from
config.mcp.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: gxkl

tegg/standalone/service-worker-controller/src/mcp/ServiceWorkerMcpRouter.ts

@@ -62,8 +62,10 @@ export class ServiceWorkerMcpRouter implements McpRouter {
   @Inject()
   private readonly mcpAuthHandler: MCPAuthHandler;
 
+  // The app-wide config inner object (the app's module.yml); MCP transport
+  // options live under its `mcp` key.
   @Inject()
-  private readonly mcpTransportOptions: MCPTransportOptions;
+  private readonly config: { mcp?: MCPTransportOptions };
 
   #registrations: McpServerRegistration[] = [];
   #mounted = false;
@@ -121,7 +123,7 @@ export class ServiceWorkerMcpRouter implements McpRouter {
     allowedOrigins?: string[];
     enableDnsRebindingProtection?: boolean;
   } {
-    const { allowedHosts, allowedOrigins, enableDnsRebindingProtection } = this.mcpTransportOptions ?? {};
+    const { allowedHosts, allowedOrigins, enableDnsRebindingProtection } = this.config?.mcp ?? {};
     if (!allowedHosts?.length && !allowedOrigins?.length) {
       return {};
     }

tegg/standalone/service-worker-controller/src/types.ts

@@ -37,10 +37,12 @@ export interface MCPAuthHandler {
 
 /**
  * DNS-rebinding protection for the MCP transport, forwarded to the SDK's
- * web-standard transport. When `allowedHosts`/`allowedOrigins` are configured
- * the SDK validates the request Host/Origin; enable-protection defaults on once
- * either list is set. Left empty (the default) there is no host/origin gate —
- * set it before exposing the MCP endpoint beyond loopback.
+ * web-standard transport. Read from the app-wide `config` inner object under the
+ * `mcp` key (the app's `module.yml`, or a programmatic `config` override). When
+ * `allowedHosts`/`allowedOrigins` are configured the SDK validates the request
+ * Host/Origin; enable-protection defaults on once either list is set. Left empty
+ * (the default) there is no host/origin gate — set it before exposing the MCP
+ * endpoint beyond loopback.
  */
 export interface MCPTransportOptions {
   allowedHosts?: string[];

tegg/standalone/service-worker/src/ServiceWorkerApp.ts

@@ -4,7 +4,7 @@ import { Readable } from 'node:stream';
 import { pipeline } from 'node:stream/promises';
 import { fileURLToPath } from 'node:url';
 
-import { FetchEventImpl, type MCPAuthHandler, type MCPTransportOptions } from '@eggjs/service-worker-controller';
+import { FetchEventImpl, type MCPAuthHandler } from '@eggjs/service-worker-controller';
 import { ContextProtoProperty } from '@eggjs/service-worker-runtime';
 import {
   StandaloneApp,
@@ -14,12 +14,14 @@ import {
 } from '@eggjs/standalone';
 
 export interface ServiceWorkerAppOptions extends StandaloneAppOptions {
-  /** Injected as the `config` inner object (BackgroundTaskHelper reads `config.backgroundTask.timeout`). */
+  /**
+   * Programmatic overrides for the app-wide `config` inner object. The app's own
+   * `module.yml` is the primary config source; values here merge on top — e.g.
+   * `config.backgroundTask.timeout`, `config.mcp.allowedHosts`.
+   */
   config?: Record<string, any>;
   /** Auth hook for MCP routes; the default lets every request through. */
   mcpAuthHandler?: MCPAuthHandler;
-  /** DNS-rebinding protection for the MCP transport (Host/Origin allow-lists). */
-  mcp?: MCPTransportOptions;
 }
 
 const PASS_THROUGH_MCP_AUTH_HANDLER: MCPAuthHandler = {
@@ -45,7 +47,7 @@ export class ServiceWorkerApp {
   #initialized = false;
 
   constructor(cwd: string, options?: ServiceWorkerAppOptions) {
-    const { config, mcpAuthHandler, mcp, ...standaloneOptions } = options ?? {};
+    const { config, mcpAuthHandler, ...standaloneOptions } = options ?? {};
     // Scan this package's own root so its framework-module deps
     // (service-worker-runtime + -controller) are auto-discovered via the
     // node_modules eggModule convention. `!test/**` keeps their test fixtures out.
@@ -63,10 +65,11 @@ export class ServiceWorkerApp {
       frameworkDeps,
       dump: standaloneOptions.dump,
       logger: standaloneOptions.logger,
+      // The app-wide `config` inner object is the app's own module.yml; these
+      // programmatic values merge on top.
+      config,
       innerObjects: {
-        config: [{ obj: config ?? {} }],
         mcpAuthHandler: [{ obj: mcpAuthHandler ?? PASS_THROUGH_MCP_AUTH_HANDLER }],
-        mcpTransportOptions: [{ obj: mcp ?? {} }],
         ...standaloneOptions.innerObjectHandlers,
       },
     });

tegg/standalone/service-worker/test/MCP.test.ts

@@ -179,7 +179,7 @@ describe('standalone/service-worker/test/MCP.test.ts mcpAuthHandler', () => {
 describe('standalone/service-worker/test/MCP.test.ts hardening', () => {
   it('should reject a request whose Host is not in allowedHosts', async () => {
     const app = new ServiceWorkerApp(path.join(__dirname, 'fixtures/hello-app'), {
-      mcp: { allowedHosts: ['allowed.example'] },
+      config: { mcp: { allowedHosts: ['allowed.example'] } },
     });
     const server = await app.serve();
     const { address, port } = server.address() as AddressInfo;

tegg/standalone/service-worker/test/ServiceWorkerApp.test.ts

@@ -140,6 +140,11 @@ describe('standalone/service-worker/test/ServiceWorkerApp.test.ts', () => {
     assert.deepEqual(await res.json(), { features: { greeting: 'howdy' } });
   });
 
+  it('should expose the entry app module.yml as the app-wide config', async () => {
+    const res = await fetch(`${base}/hello/app-config`);
+    assert.deepEqual(await res.json(), { features: { greeting: 'howdy' } });
+  });
+
   it('should return the unified error shape for unknown routes', async () => {
     const res = await fetch(`${base}/nope`);
     assert.equal(res.status, 404);

tegg/standalone/service-worker/test/fixtures/hello-app/HelloController.ts

@@ -36,6 +36,9 @@ export class HelloController {
   @Inject()
   private readonly moduleConfigs: ModuleConfigs;
 
+  @Inject()
+  private readonly config: Record<string, unknown>;
+
   @HTTPMethod({ method: HTTPMethodEnum.GET, path: '/' })
   async index() {
     return { message: this.helloService.hello('tegg') };
@@ -75,6 +78,11 @@ export class HelloController {
     return this.moduleConfigs.get('helloApp');
   }
 
+  @HTTPMethod({ method: HTTPMethodEnum.GET, path: '/app-config' })
+  async appConfig() {
+    return this.config;
+  }
+
   @HTTPMethod({ method: HTTPMethodEnum.GET, path: '/background' })
   async background() {
     this.backgroundTaskHelper.run(async () => {

tegg/standalone/standalone/README.md

@@ -45,8 +45,9 @@ export class Foo implements MainRunner<string> {
 - options:
   - innerObjectHandlers: 当前运行环境中内置的对象
   - logger: standalone 框架及模块注入使用的 logger；不要放入 innerObjectHandlers
+  - config: 应用级配置的程序化覆盖，会合并到 `config` 内置对象之上（见「配置」一节）
 
-`moduleConfigs`、`moduleConfig` 和 `runtimeConfig` 由 standalone 框架维护；
+`config`、`moduleConfigs`、`moduleConfig` 和 `runtimeConfig` 由 standalone 框架维护；
 `innerObjectHandlers` 中的同名项会被忽略。
 
 ```
@@ -65,6 +66,10 @@ await main(cwd, {
 
 module 支持通过 module.yml 来定义配置，在代码中可以通过注入 moduleConfigs 获取全局配置，通过注入 moduleConfig 来获取单 module 的配置。
 
+入口应用 module（从 baseDir 扫描到的那个 module，其 module 目录即 cwd）的 `module.yml`
+会作为应用级的 `config` 内置对象暴露出来，通过 `@Inject() config` 注入即可读取；
+构造时传入的 `config` 选项会合并到其之上。子系统各取所需（如 `config.backgroundTask.timeout`）。
+
 ```yaml
 # module.yml
 # module 根目录中

tegg/standalone/standalone/src/StandaloneApp.ts

@@ -47,9 +47,9 @@ export interface StandaloneAppInit {
   frameworkDeps?: (string | ModuleDependency)[];
   dump?: boolean;
   /**
-   * Host-provided inner objects. Framework-owned `moduleConfigs`, `moduleConfig`,
-   * and `runtimeConfig` entries are ignored. `logger` is reserved; use the
-   * dedicated `logger` option instead.
+   * Host-provided inner objects. Framework-owned `config`, `moduleConfigs`,
+   * `moduleConfig`, and `runtimeConfig` entries are ignored. `logger` is
+   * reserved; use the dedicated `logger` option instead.
    */
   innerObjects?: Record<string, InnerObject[]>;
   /** User-facing option name for diagnostics. Defaults to `innerObjects`. */
@@ -60,6 +60,13 @@ export interface StandaloneAppInit {
    * to console.
    */
   logger?: Logger;
+  /**
+   * Programmatic overrides for the app-wide `config` inner object. The entry
+   * app module's `module.yml` (the module scanned from baseDir) is the primary
+   * source; values here merge on top, so a host can supply config without a
+   * file (tests, embedding).
+   */
+  config?: Record<string, unknown>;
 }
 
 /** init()-time binding: which app to load and its runtime identity. */
@@ -83,6 +90,8 @@ export interface StandaloneAppOptions {
   env?: string;
   name?: string;
   logger?: Logger;
+  /** Programmatic overrides merged on top of the entry app module's `module.yml` config. */
+  config?: Record<string, unknown>;
   /** Host-provided objects other than `logger`; use the dedicated logger option. */
   innerObjectHandlers?: Record<string, InnerObject[]>;
   dependencies?: (string | ModuleDependency)[];
@@ -103,6 +112,12 @@ export class StandaloneApp {
   // In the constructor there is no runtime config yet — pre-create the object
   // so the runtimeConfig inner object can hold it; init() fills the values.
   readonly #runtimeConfig = {} as RuntimeConfig;
+  // The app-wide `config` inner object: the entry app module's module.yml with
+  // the programmatic override on top. Pre-created so the inner object can hold
+  // it; #loadModuleConfigs fills it once the entry module is known.
+  readonly #config: Record<string, unknown> = {};
+  readonly #configOverride?: Record<string, unknown>;
+  #appModuleName?: string;
   #moduleReferences: readonly ModuleReference[] = [];
   #state: StandaloneAppState = 'new';
   #runnerProto?: EggPrototype;
@@ -123,6 +138,7 @@ export class StandaloneApp {
     if (init?.innerObjects && Object.hasOwn(init.innerObjects, 'logger')) {
       throw new Error(`[tegg/standalone] ${innerObjectsName}.logger is reserved; use the logger option instead`);
     }
+    this.#configOverride = init?.config;
     this.#innerObjects = this.#createInnerObjects(init);
     this.scopeBag = TeggScope.createBag();
   }
@@ -139,6 +155,7 @@ export class StandaloneApp {
       // init() — the inner objects hold these same references unless the caller
       // supplies objects with other names.
       logger: [{ obj: this.#logger }],
+      config: [{ obj: this.#config }],
       moduleConfigs: [{ obj: new ModuleConfigs(this.#moduleConfigs) }],
       moduleConfig: [] as InnerObject[],
       runtimeConfig: [{ obj: this.#runtimeConfig }],
@@ -162,6 +179,7 @@ export class StandaloneApp {
 
   /** Load every module's config and expose it as a qualified `moduleConfig` inner object. */
   #loadModuleConfigs(): void {
+    const baseDir = path.resolve(this.#runtimeConfig.baseDir);
     const resolvedReferences: ModuleReference[] = [];
     for (const reference of this.#moduleReferences) {
       const resolved = ModuleConfigUtil.resolveModuleConfigTolerant(reference, this.#runtimeConfig.baseDir);
@@ -177,9 +195,21 @@ export class StandaloneApp {
         reference: resolvedRef,
         config: resolved.config,
       };
+      // The entry app module is the one scanned from baseDir (its module dir IS
+      // the cwd); its module.yml is exposed as the app-wide `config`.
+      if (path.resolve(resolved.path) === baseDir) {
+        this.#appModuleName = resolved.name;
+      }
       resolvedReferences.push(resolvedRef);
     }
     this.#moduleReferences = resolvedReferences;
+    // app-wide config: entry app module.yml as the base, programmatic override on top.
+    if (this.#appModuleName) {
+      Object.assign(this.#config, this.#moduleConfigs[this.#appModuleName].config);
+    }
+    if (this.#configOverride) {
+      Object.assign(this.#config, this.#configOverride);
+    }
     for (const moduleConfig of Object.values(this.#moduleConfigs)) {
       this.#innerObjects.moduleConfig.push({
         obj: moduleConfig.config,

tegg/standalone/standalone/src/main.ts

@@ -66,6 +66,7 @@ export async function main<T = void>(cwd: string, options?: StandaloneAppOptions
     {
       frameworkDeps: options?.frameworkDeps,
       dump: options?.dump,
+      config: options?.config,
       innerObjects: options?.innerObjectHandlers,
       innerObjectsName: 'innerObjectHandlers',
       logger: options?.logger,

wiki/log.md

@@ -2,6 +2,12 @@
 
 Dates use the workspace-local Asia/Shanghai calendar date.
 
+## [2026-07-14] behavior | app-wide `config` inner object = entry app module.yml
+
+- sources touched: `tegg/standalone/standalone/src/StandaloneApp.ts`, `tegg/standalone/service-worker/src/ServiceWorkerApp.ts`, `tegg/standalone/service-worker-controller/src/{mcp/ServiceWorkerMcpRouter.ts,types.ts}`, `tegg/standalone/service-worker/test/{ServiceWorkerApp.test.ts,MCP.test.ts,fixtures/hello-app/HelloController.ts}`
+- pages updated: `wiki/packages/service-worker.md`, `wiki/log.md`
+- note: `StandaloneApp` now exposes the entry app module's `module.yml` (the module scanned from `baseDir`) as the framework-owned app-wide `config` inner object, with the programmatic `StandaloneAppInit.config` merged on top. This is the single user config surface: subsystems read their slice (`config.backgroundTask.timeout`, `config.mcp.*`). Removed the `mcp` facade option and the `mcpTransportOptions` inner object from `ServiceWorkerApp`; `ServiceWorkerMcpRouter` now reads DNS-rebinding options from `config.mcp`. Mirrors the internal standalone's `runner.config = moduleConfigs[appName].config`.
+
 ## [2026-07-14] package | service-worker framework-module auto-discovery (drop hand-ordered frameworkDeps)
 
 - sources touched: `tegg/standalone/service-worker-runtime/src/StandaloneEggObjectFactory.ts`, `tegg/standalone/service-worker/src/{ServiceWorkerApp.ts,index.ts}`, `tegg/standalone/service-worker/test/ServiceWorkerApp.test.ts`