Expand KOC LOOP MCP operations

app/api/recovery-export/route.ts

@@ -15,6 +15,7 @@ import {
   type RecoveryWorkbookImage,
   type RecoveryWorkbookRow,
 } from "../../../lib/recovery-workbook";
+import { consumeMcpExportToken } from "../../../lib/mcp-export-token";
 
 export const runtime = "edge";
 
@@ -218,10 +219,17 @@ function exactArrayBuffer(bytes: Uint8Array) {
 }
 
 export async function GET(request: Request) {
-  if (!(await isAdminRequest(request))) return adminForbidden();
   try {
+    const url = new URL(request.url);
+    const token = url.searchParams.get("token")?.trim() || "";
+    const tokenPayload = token
+      ? await consumeMcpExportToken(token, "recovery")
+      : null;
+    if (!tokenPayload && !(await isAdminRequest(request))) return adminForbidden();
     await ensureSchema();
-    const taskId = new URL(request.url).searchParams.get("task")?.trim() || "";
+    const taskId = tokenPayload
+      ? String(tokenPayload.taskId ?? "").trim()
+      : url.searchParams.get("task")?.trim() || "";
     if (!taskId) {
       return Response.json({ error: "缺少导出任务" }, { status: 400 });
     }