@gainable.dev/mcp-server 0.1.0 → 0.1.2

package/dist/config.d.ts

@@ -1,10 +1,8 @@
-export type AgentScopes = Record<string, string[]>;
 export interface ScopingConfig {
     appName: string;
     accountId: string;
     allowedDatasets: string[];
     mongodbUri: string;
-    agentScopes: AgentScopes;
     /** Per-session field: which collections this agent can access. undefined = unrestricted. */
     agentCollections?: string[];
 }

package/dist/config.js

@@ -12,20 +12,5 @@ export function loadConfig() {
         .split(',')
         .map(s => s.trim())
         .filter(Boolean);
-    const agentScopes = parseAgentScopes(process.env.AGENT_SCOPES);
-    return { appName, accountId, allowedDatasets, mongodbUri, agentScopes };
-}
-function parseAgentScopes(raw) {
-    if (!raw)
-        return {};
-    try {
-        const parsed = JSON.parse(raw);
-        if (typeof parsed !== 'object' || parsed === null)
-            return {};
-        return parsed;
-    }
-    catch {
-        console.warn('AGENT_SCOPES is not valid JSON, ignoring.');
-        return {};
-    }
+    return { appName, accountId, allowedDatasets, mongodbUri };
 }

package/dist/gainableHttpRunner.d.ts

@@ -5,11 +5,17 @@ import type { ScopingConfig } from './config.js';
  *
  * Each Weavy agent connects with a URL like `/mcp?agent=marketing-agent`.
  * The agent ID is extracted from the query parameter and used to look up
- * which collections that agent is allowed to access (from AGENT_SCOPES env var).
+ * which collections that agent is allowed to access (from MongoDB).
  */
 export declare class GainableHttpRunner extends StreamableHttpRunner {
     private baseConfig;
+    private scopeClient;
     constructor(config: ConstructorParameters<typeof StreamableHttpRunner>[0], scopingConfig: ScopingConfig);
+    /**
+     * Look up an agent's scopes from MongoDB.
+     * Returns the scopes array if the agent has restrictions, or undefined if unrestricted.
+     */
+    private getAgentScopes;
     protected createServerForRequest({ request, serverOptions, sessionOptions, }: Parameters<StreamableHttpRunner['createServerForRequest']>[0]): Promise<import("mongodb-mcp-server").Server<{
         apiBaseUrl: string;
         assistantBaseUrl: string;

package/dist/gainableHttpRunner.js

@@ -1,3 +1,4 @@
+import { MongoClient } from 'mongodb';
 import { StreamableHttpRunner } from 'mongodb-mcp-server';
 import { createScopedConnectionManagerFactory } from './scopedConnectionManager.js';
 /**
@@ -5,20 +6,37 @@ import { createScopedConnectionManagerFactory } from './scopedConnectionManager.
  *
  * Each Weavy agent connects with a URL like `/mcp?agent=marketing-agent`.
  * The agent ID is extracted from the query parameter and used to look up
- * which collections that agent is allowed to access (from AGENT_SCOPES env var).
+ * which collections that agent is allowed to access (from MongoDB).
  */
 export class GainableHttpRunner extends StreamableHttpRunner {
     baseConfig;
+    scopeClient = null;
     constructor(config, scopingConfig) {
         super(config);
         this.baseConfig = scopingConfig;
     }
+    /**
+     * Look up an agent's scopes from MongoDB.
+     * Returns the scopes array if the agent has restrictions, or undefined if unrestricted.
+     */
+    async getAgentScopes(agentUid) {
+        if (!this.scopeClient) {
+            this.scopeClient = new MongoClient(this.baseConfig.mongodbUri);
+            await this.scopeClient.connect();
+        }
+        const db = this.scopeClient.db(this.baseConfig.accountId);
+        const agent = await db.collection('agents').findOne({ appId: this.baseConfig.appName, uid: agentUid }, { projection: { scopes: 1 } });
+        if (!agent?.scopes || agent.scopes.length === 0)
+            return undefined;
+        return agent.scopes;
+    }
     async createServerForRequest({ request, serverOptions, sessionOptions, }) {
         const agentId = extractAgentId(request);
-        console.log(`[MCP Session] agent=${agentId ?? '(none)'} | scoped=${agentId && this.baseConfig.agentScopes[agentId] ? 'yes' : 'no'}`);
-        const agentCollections = agentId
-            ? this.baseConfig.agentScopes[agentId]
-            : undefined;
+        let agentCollections;
+        if (agentId) {
+            agentCollections = await this.getAgentScopes(agentId);
+        }
+        console.log(`[MCP Session] agent=${agentId ?? '(none)'} | scoped=${agentCollections ? 'yes' : 'no'}`);
         // Build per-agent scoping config
         const agentConfig = {
             ...this.baseConfig,

package/dist/index.js

@@ -17,6 +17,9 @@ const userConfig = UserConfigSchema.parse({
     httpHost: '127.0.0.1',
     connectionString: config.mongodbUri,
     telemetry: 'disabled',
+    // 24h idle timeout — sessions are long-lived (Weavy agent conversations)
+    idleTimeoutMs: 86400000,
+    notificationTimeoutMs: 82800000,
     disabledTools: [
         'drop-database', 'drop-collection', 'create-collection',
         'list-databases', 'rename-collection', 'drop-index',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gainable.dev/mcp-server",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Scoped MCP server for Gainable in-app copilot agents — wraps mongodb-mcp-server with per-app data isolation",
   "type": "module",
   "main": "dist/index.js",