activeadmin_mcp 0.0.3 → 0.1.0

data/lib/activeadmin_mcp/version.rb

@@ -1,5 +1,3 @@
-# frozen_string_literal: true
-
 module ActiveadminMcp
-  VERSION = "0.0.3"
+  VERSION = "0.1.0"
 end

data/lib/activeadmin_mcp.rb

@@ -1,11 +1,17 @@
-# frozen_string_literal: true
-
 require_relative "activeadmin_mcp/version"
 require_relative "activeadmin_mcp/configuration"
 require_relative "activeadmin_mcp/authorization"
+require_relative "activeadmin_mcp/active_admin_ext"
+require_relative "activeadmin_mcp/action_definition"
+require_relative "activeadmin_mcp/action_schema"
+require_relative "activeadmin_mcp/action_params"
+require_relative "activeadmin_mcp/action_catalog"
+require_relative "activeadmin_mcp/controller_dispatcher"
+require_relative "activeadmin_mcp/action_runner"
 require_relative "activeadmin_mcp/resource_registry"
 require_relative "activeadmin_mcp/form_field_collector"
-require_relative "activeadmin_mcp/record_updater"
+require_relative "activeadmin_mcp/form_description"
+require_relative "activeadmin_mcp/record_writer"
 require_relative "activeadmin_mcp/request_handler"
 require_relative "activeadmin_mcp/engine"
 

data/lib/generators/activeadmin_mcp/install/install_generator.rb

@@ -1,5 +1,3 @@
-# frozen_string_literal: true
-
 require "rails/generators"
 require "rails/generators/active_record"
 

data/lib/generators/activeadmin_mcp/install/templates/initializer.rb

@@ -1,5 +1,3 @@
-# frozen_string_literal: true
-
 ActiveadminMcp.configure do |config|
   # Uncomment to enable API token authentication.
   # Requires running the auth migration first:
@@ -19,6 +17,11 @@ ActiveadminMcp.configure do |config|
   # Path where the MCP server is mounted.
   # config.mount_path = "/mcp"
 
+  # How the engine adds its route: :prepend (default), :append, or :none.
+  # Set it to :none when you want to mount the engine yourself, for instance
+  # inside a constraints block your admin routes already sit in.
+  # config.mount_strategy = :prepend
+
   # HTTP header used to read the Bearer token from.
   # Useful when a reverse proxy (e.g. AWS Verified Access) strips the
   # standard Authorization header.

data/lib/generators/activeadmin_mcp/install/templates/mcp_api_tokens.rb

@@ -1,5 +1,3 @@
-# frozen_string_literal: true
-
 ActiveAdmin.register_page "MCP API Tokens" do
   menu label: "MCP Tokens", parent: ActiveadminMcp.config.menu_parent, priority: 100
 

data/lib/generators/activeadmin_mcp/install/templates/migration.rb.erb

@@ -1,5 +1,3 @@
-# frozen_string_literal: true
-
 class CreateMcpApiTokens < ActiveRecord::Migration[<%= ActiveRecord::Migration.current_version %>]
   def change
     return if table_exists?(:mcp_api_tokens)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: activeadmin_mcp
 version: !ruby/object:Gem::Version
-  version: 0.0.3
+  version: 0.1.0
 platform: ruby
 authors:
 - harunkumars
@@ -16,28 +16,28 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '6.1'
+        version: '7.2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '6.1'
+        version: '7.2'
 - !ruby/object:Gem::Dependency
   name: activeadmin
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: '3.5'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: '3.5'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -95,11 +95,19 @@ files:
 - app/models/activeadmin_mcp/api_token.rb
 - config/routes.rb
 - lib/activeadmin_mcp.rb
+- lib/activeadmin_mcp/action_catalog.rb
+- lib/activeadmin_mcp/action_definition.rb
+- lib/activeadmin_mcp/action_params.rb
+- lib/activeadmin_mcp/action_runner.rb
+- lib/activeadmin_mcp/action_schema.rb
+- lib/activeadmin_mcp/active_admin_ext.rb
 - lib/activeadmin_mcp/authorization.rb
 - lib/activeadmin_mcp/configuration.rb
+- lib/activeadmin_mcp/controller_dispatcher.rb
 - lib/activeadmin_mcp/engine.rb
+- lib/activeadmin_mcp/form_description.rb
 - lib/activeadmin_mcp/form_field_collector.rb
-- lib/activeadmin_mcp/record_updater.rb
+- lib/activeadmin_mcp/record_writer.rb
 - lib/activeadmin_mcp/request_handler.rb
 - lib/activeadmin_mcp/resource_registry.rb
 - lib/activeadmin_mcp/version.rb
@@ -122,14 +130,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.0.0
+      version: 4.0.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.9
+rubygems_version: 4.0.20
 specification_version: 4
 summary: MCP server for Rails apps with ActiveAdmin
 test_files: []

data/lib/activeadmin_mcp/record_updater.rb

@@ -1,108 +0,0 @@
-# frozen_string_literal: true
-
-module ActiveadminMcp
-  # Updates a single ActiveAdmin-managed record, enforcing the same three gates
-  # the admin UI would: the resource must expose the update action, the current
-  # user must be authorized, and only fields the admin form permits are written.
-  class RecordUpdater
-    UPDATE = :update
-
-    # Raised internally when the resource's permitted params cannot be resolved.
-    class PermitError < StandardError; end
-
-    def initialize(resource:, current_user:)
-      @resource = resource
-      @current_user = current_user
-    end
-
-    def call(id:, attributes:)
-      config = @resource[:config]
-
-      return error("Resource is not editable: #{@resource[:name]}") unless editable?(config)
-
-      record = @resource[:model].find_by(id: id)
-      return error("Record not found: #{@resource[:name]}##{id}") unless record
-
-      unless authorized?(config, record)
-        return error("Not authorized to update #{@resource[:name]}##{id}")
-      end
-
-      begin
-        permitted = permitted_attributes(config, attributes)
-      rescue PermitError => e
-        return error(e.message)
-      end
-      return error("No permitted attributes to update") if permitted.empty?
-
-      if record.update(permitted)
-        {
-          resource: @resource[:name],
-          id: record.id,
-          updated: permitted.keys,
-          record: record.as_json,
-        }
-      else
-        error("Validation failed", details: record.errors.full_messages)
-      end
-    end
-
-    private
-
-    def editable?(config)
-      config.defined_actions.include?(UPDATE)
-    end
-
-    def authorized?(config, record)
-      Authorization.for(config, @current_user).authorized?(UPDATE, record)
-    end
-
-    # Resolves the fields we may write, accepting exactly what the admin form
-    # accepts. Prefers the resource's own `permit_params` (via the controller's
-    # compiled permitted_params); when a resource declares its writable fields
-    # through a `form do ... end` block instead — as ActiveAdmin's default
-    # permitted_params then returns nil — derives them from the form inputs.
-    # Fails closed if neither can be resolved.
-    def permitted_attributes(config, attributes)
-      from_permit_params(config, attributes) ||
-        from_form(config, attributes) ||
-        raise(PermitError, "Could not determine permitted attributes: #{@resource[:name]}")
-    end
-
-    def from_permit_params(config, attributes)
-      param_key = config.param_key.to_sym
-      controller = config.controller.new
-      return nil unless controller.respond_to?(:permitted_params, true)
-
-      controller.params = ActionController::Parameters.new(param_key => attributes)
-      permitted = controller.send(:permitted_params)
-      scoped = permitted && permitted[param_key]
-      scoped ? scoped.to_h.symbolize_keys : nil
-    rescue StandardError
-      nil
-    end
-
-    def from_form(config, attributes)
-      fields = form_fields(config)
-      return nil if fields.empty?
-
-      ActionController::Parameters.new(attributes).permit(*fields).to_h.symbolize_keys
-    rescue StandardError
-      nil
-    end
-
-    def form_fields(config)
-      return [] unless config.respond_to?(:page_presenters)
-
-      block = config.page_presenters[:form]&.block
-      return [] unless block
-
-      FormFieldCollector.new.collect(&block)
-    end
-
-    def error(message, details: nil)
-      result = { error: message }
-      result[:details] = details if details
-      result
-    end
-  end
-end