mcp_on_ruby 2.0.0 → 2.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 611ceb54904a193a5ac06d7fc7d223d835067a3d2232b05fc8a46dd1b14b96ac
-  data.tar.gz: 8d368c37165bf816104cb32345f7576b95e6e36ff5a01e3b2ecf7a07e497172a
+  metadata.gz: a99b9f1fff3f7a9639c85c82826690264ca0a2032321c227a3424719d73fbdd5
+  data.tar.gz: a977652f5dd0e15d31142a1561f9ab9302a1f34abcfc21a759d5b4ce3600b460
 SHA512:
-  metadata.gz: 1c0528601bea68540a356a143abc104267e3b3bd8972c38544f13d0a1dd49696ab2d62d571ca6f51a9bdc0b5088e8f0eac4bebd18cef307759babfeaadc1e4d0
-  data.tar.gz: 183338a617d68e0e7fd963d627439e62cfdf66045f80f621b778cd12294ab34bf015f2ccf813ca3b747ce74c7bf1ef01e193e785423f6e94e4fac2e8b7918804
+  metadata.gz: 1b8dda36e0e1a44f7b67cbb5f1bcbfe91065ff6304c60682a289f524187532a625e1e691c99ef5bd71424ee19f35a2c9151561ffdfe53b34c1aa56919956e25e
+  data.tar.gz: e484ae0cee070df784e3621e63d78b982b5bd70bcd02d566f3a74127781c026a0bf683a271814936118ce67416879fd0d4bbf596646d8952d5e61c5ec3e5eea8

data/CHANGELOG.md

@@ -2,12 +2,26 @@
 
 All notable changes to this project are documented in this file.
 
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). Entries from 2.0.0 onward
+are generated by [release-please](https://github.com/googleapis/release-please) from Conventional Commit PR titles.
 
-## [Unreleased]
+## [2.0.2](https://github.com/nagstler/mcp_on_ruby/compare/v2.0.1...v2.0.2) (2026-10-31)
 
-## [2.0.0] - 2026-10-31
+
+### Bug Fixes
+
+* leave belongs_to foreign keys out of scaffolded params ([#37](https://github.com/nagstler/mcp_on_ruby/issues/37)) ([7b7ec5b](https://github.com/nagstler/mcp_on_ruby/commit/7b7ec5bbe40f0dfeec88da94c9deef6de90167bc))
+* report redirects to a sign-in page as not authenticated ([#38](https://github.com/nagstler/mcp_on_ruby/issues/38)) ([949a340](https://github.com/nagstler/mcp_on_ruby/commit/949a34059e925bdad17586cf5bfdab0a68aca031))
+
+## [2.0.1](https://github.com/nagstler/mcp_on_ruby/compare/v2.0.0...v2.0.1) (2026-10-31)
+
+
+### Bug Fixes
+
+* reuse tool classes when writes are disabled ([#33](https://github.com/nagstler/mcp_on_ruby/issues/33)) ([44be48c](https://github.com/nagstler/mcp_on_ruby/commit/44be48cafcb508a559b718f676e27990277bd41b))
+* validate declarations once routes are loaded ([#32](https://github.com/nagstler/mcp_on_ruby/issues/32)) ([bf96834](https://github.com/nagstler/mcp_on_ruby/commit/bf968346f9131c6f898bdcf152726973079f3429))
+
+## [2.0.0](https://github.com/nagstler/mcp_on_ruby/compare/v1.0.0...v2.0.0) (2026-10-31)
 
 MCP on Ruby is now a Rails engine that exposes existing controller actions as MCP tools,
 built on the official [`mcp`](https://github.com/modelcontextprotocol/ruby-sdk) gem.
@@ -99,7 +113,3 @@ built on the official [`mcp`](https://github.com/modelcontextprotocol/ruby-sdk)
 - Resource management
 - Prompt handling
 - Root filesystem access
-
-[Unreleased]: https://github.com/nagstler/mcp_on_ruby/compare/v2.0.0...HEAD
-[2.0.0]: https://github.com/nagstler/mcp_on_ruby/compare/v1.0.0...v2.0.0
-[1.0.0]: https://github.com/nagstler/mcp_on_ruby/releases/tag/v1.0.0

data/LICENSE.txt

@@ -1,6 +1,6 @@
 The MIT License (MIT)
 
-Copyright (c) 2024
+Copyright (c) 2024-present Nagendra Dhanakeerthi
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

data/README.md

@@ -107,21 +107,12 @@ Then ask: *"Which of my products cost more than $50?"*
 
 ## How it works
 
-```
- MCP client (Claude, Cursor, …)
-        │  Streamable HTTP (/mcp)   or   stdio (bin/rails mcp:stdio)
-        ▼
- official mcp gem ──────── protocol, version negotiation, schema validation
-        │  tools/call  orders_index  { "status": "pending" }
-        ▼
- MCP on Ruby
-   Registry    which controller actions are exposed, with their routes and schemas
-   Dispatcher  builds an in-process request:  GET /orders?status=pending
-   Identity    the caller's Authorization header and cookies, or the stdio user
-   Result      2xx JSON → structured result; 4xx/5xx → readable tool error
-        ▼
- Your Rails app: middleware → routes → before_action → controller → render json
-```
+<p align="center">
+  <picture>
+    <source media="(prefers-color-scheme: dark)" srcset="docs/assets/how-it-works-dark.svg">
+    <img src="docs/assets/how-it-works.svg" width="960" alt="An MCP client sends a tool call over HTTP or stdio to the official mcp gem, which hands it to MCP on Ruby. MCP on Ruby runs it as an ordinary Rails request through your app, as the caller, and the JSON response comes back as the tool result.">
+  </picture>
+</p>
 
 Each tool call becomes an ordinary request through your full middleware stack. Anything that protects your API, including `rate_limit`, Rack::Attack, tenant scoping, and audit logging, protects agent traffic too.
 
@@ -181,7 +172,30 @@ McpOnRuby.configure do |config|
 end
 ```
 
-For Devise and Warden, the user is signed in with the `:user` scope (change it with `config.warden_scope`). Apps with custom authentication can read the stdio user with `mcp_user` in their own `before_action`.
+For Devise and Warden, the user is signed in with the `:user` scope (change it with `config.warden_scope`). Other apps read the stdio user with `mcp_user`.
+
+**Rails 8 authentication** (`bin/rails generate authentication`) uses neither Warden nor tokens. Teach its concern about API tokens for HTTP clients and about `mcp_user` for stdio:
+
+```ruby
+# app/controllers/concerns/authentication.rb
+def resume_session
+  Current.session ||= find_session_by_cookie || find_session_by_token || find_session_for_mcp
+end
+
+# HTTP clients send `Authorization: Bearer <api_token>` (add `has_secure_token :api_token` to User).
+def find_session_by_token
+  authenticate_with_http_token do |token, _options|
+    User.find_by(api_token: token)&.sessions&.new(user_agent: request.user_agent, ip_address: request.remote_ip)
+  end
+end
+
+# `bin/rails mcp:stdio` sessions act as config.stdio_user.
+def find_session_for_mcp
+  mcp_user&.sessions&.new
+end
+```
+
+The sessions are built but never saved, so tool calls don't add rows to `sessions` or set cookies.
 
 If authentication fails, the agent gets a clear "Not authenticated (401)" tool error and nothing runs.
 
@@ -218,7 +232,8 @@ See [SECURITY.md](SECURITY.md) for the full threat model.
 | `401` / `403` / `404` | Tool error: not authenticated / not permitted / not found |
 | `422` with JSON | Tool error including your validation messages, so the agent can correct itself |
 | Other `4xx` | Tool error with the status, plus the body when it is JSON |
-| `3xx` | Tool error naming the redirect target (redirects are not followed) |
+| `3xx` to a sign-in page | Tool error: not authenticated (Rails 8 authentication and Devise redirect unauthenticated requests) |
+| Other `3xx` | Tool error naming the redirect target (redirects are not followed) |
 | HTML | Tool error asking for JSON. Use `respond_to` with `format.json`. |
 | `5xx` or an exception | Generic tool error. Details are reported to `Rails.error`, never sent. |
 
@@ -274,19 +289,26 @@ claude mcp add my-app -e MCP_USER=alice@example.com -- bin/rails mcp:stdio
 <details>
 <summary><b>Claude Desktop</b></summary>
 
-Claude Desktop does not load your shell profile, so start Rails through a login shell to pick up rbenv, asdf, or chruby:
+Claude Desktop starts servers without your shell environment, so rbenv, asdf, and mise aren't loaded. Point it at your app's Ruby directly, and use `-C` to run from the app's directory:
+
+```bash
+# In your app directory, print the Ruby to use:
+ruby -e 'puts RbConfig.ruby'
+```
 
 ```json
 {
   "mcpServers": {
     "my-app": {
-      "command": "bash",
-      "args": ["-lc", "cd /path/to/my-app && bin/rails mcp:stdio"],
+      "command": "/Users/you/.rbenv/versions/3.4.7/bin/ruby",
+      "args": ["-C", "/path/to/my-app", "bin/rails", "mcp:stdio"],
       "env": { "MCP_USER": "alice@example.com" }
     }
   }
 }
 ```
+
+Update `command` when you upgrade Ruby.
 </details>
 
 <details>
@@ -396,7 +418,7 @@ end
 
 | | Supported |
 |---|---|
-| Ruby | 3.2, 3.3, 3.4 |
+| Ruby | 3.2, 3.3, 3.4, 4.0 |
 | Rails | 7.1, 7.2, 8.0, 8.1 |
 | MCP protocol | Every version the official `mcp` gem supports, negotiated per client |
 | Transports | Streamable HTTP (stateless), stdio |

data/lib/generators/mcp_on_ruby/expose/expose_generator.rb

@@ -90,12 +90,19 @@ module McpOnRuby
         }.fetch(action) { "TODO: describe what #{action} does for the agent" }
       end
 
+      # Foreign keys of belongs_to associations usually come from the signed-in user or the URL, not the agent.
+      def owner_keys(model)
+        return [] unless model.respond_to?(:reflect_on_all_associations)
+
+        model.reflect_on_all_associations(:belongs_to).map { |association| association.foreign_key.to_s }
+      end
+
       # A params block built from the model's columns, when the controller has an ActiveRecord model.
       def model_params
         model = controller.split("/").last.classify.safe_constantize
         return unless model.respond_to?(:columns_hash)
 
-        columns = model.columns_hash.except(model.primary_key, *SKIPPED_COLUMNS)
+        columns = model.columns_hash.except(model.primary_key, *SKIPPED_COLUMNS, *owner_keys(model))
         return if columns.empty?
 
         lines = columns.map do |name, column|

data/lib/mcp_on_ruby/engine.rb

@@ -20,10 +20,15 @@ module McpOnRuby
       McpOnRuby.registry.reset!
     end
 
-    # Fail at boot, not on the first agent request, when declarations do not match routes.
-    config.after_initialize do |app|
+    config.after_initialize do
       McpOnRuby::WardenHook.install!
-      McpOnRuby.registry.tools if app.config.eager_load
+    end
+
+    # Fail at boot, not on the first agent request, when declarations do not match routes.
+    # Rails runs after_initialize before it loads routes, so validate once routes are loaded,
+    # which happens during boot (after eager loading) when eager_load is on.
+    initializer "mcp_on_ruby.validate_declarations" do |app|
+      app.config.after_routes_loaded { McpOnRuby.registry.tools } if app.config.eager_load
     end
   end
 end

data/lib/mcp_on_ruby/result.rb

@@ -6,6 +6,10 @@ module McpOnRuby
     JSON_TYPE = %r{\Aapplication/(?:[\w.+-]+\+)?json\b}i
     HTML_TYPE = %r{\Atext/html\b}i
 
+    # Sign-in pages apps redirect unauthenticated requests to: Rails 8 authentication (/session/new),
+    # Devise (/users/sign_in), and common /login and /signin routes.
+    SIGN_IN_PATH = %r{/(?:session/new|sign_?in|log_?in)/?\z}i
+
     module_function
 
     def from_rack(status, headers, body)
@@ -15,8 +19,7 @@ module McpOnRuby
 
       case status
       when 200..299 then success(status, text, json, content_type)
-      when 300..399 then error(status, "Redirected to #{header(headers, "location") || "another page"}; " \
-                                       "redirects are not followed")
+      when 300..399 then redirect(status, header(headers, "location"))
       when 400..499 then client_error(status, text, json)
       else error(status, "Internal server error (#{status})")
       end
@@ -36,6 +39,16 @@ module McpOnRuby
       text_response(text)
     end
 
+    def redirect(status, location)
+      if location && URI(location).path.to_s.match?(SIGN_IN_PATH)
+        error(status, "Not authenticated: the app redirected to its sign-in page (#{location})")
+      else
+        error(status, "Redirected to #{location || "another page"}; redirects are not followed")
+      end
+    rescue URI::InvalidURIError
+      error(status, "Redirected to #{location}; redirects are not followed")
+    end
+
     def client_error(status, text, json)
       message = {
         401 => "Not authenticated (401)",

data/lib/mcp_on_ruby/server_factory.rb

@@ -45,12 +45,16 @@ module McpOnRuby
       @dispatcher ||= Dispatcher.new
     end
 
-    # Tool classes are rebuilt only when the registry is (on boot and code reload).
+    # Tool classes are rebuilt only when the registry is (on boot and code reload) or when
+    # `allow_writes` changes, never per request.
     def mcp_tools
-      specs = served_specs
+      key = [registry.tools, configuration.allow_writes]
       @mutex.synchronize do
-        @cache = [specs, specs.map { |spec| spec.to_mcp_tool(handler) }] unless @cache&.first.equal?(specs)
-        @cache.last
+        unless @cache && @cache[:registry].equal?(key.first) && @cache[:allow_writes] == key.last
+          @cache = { registry: key.first, allow_writes: key.last,
+                     tools: served_specs.map { |spec| spec.to_mcp_tool(handler) } }
+        end
+        @cache[:tools]
       end
     end
 

data/lib/mcp_on_ruby/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module McpOnRuby
-  VERSION = "2.0.0"
+  VERSION = "2.0.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: mcp_on_ruby
 version: !ruby/object:Gem::Version
-  version: 2.0.0
+  version: 2.0.2
 platform: ruby
 authors:
 - Nagendra Dhanakeerthi