@spacelr/mcp 0.0.13 → 0.1.0

package/dist/index.mjs

@@ -1228,7 +1228,7 @@ function registerDatabaseTools(server, api) {
   server.registerTool(
     "database_collections_update_metadata",
     {
-      description: "Update a collection's realtime delivery mode and optional stream retention. `realtimeMode: 'stream'` switches the collection to Redis Streams for durable event replay (needed for chat, notifications, activity feeds). `realtimeMode: 'pubsub'` (default) is fire-and-forget, used for dashboards and list views. Exactly one of `streamRetention.maxLen` (approx. entry count) or `streamRetention.maxAgeMs` (retention age in ms) may be set. Response may include `warnings[]` if the project exceeds the 50-collection soft cap.",
+      description: "Update a collection's realtime delivery mode, stream retention, write rate-limit override, or search filter requirements. `realtimeMode: 'stream'` switches the collection to Redis Streams for durable event replay (needed for chat, notifications, activity feeds). `realtimeMode: 'pubsub'` (default) is fire-and-forget, used for dashboards and list views. Exactly one of `streamRetention.maxLen` (approx. entry count) or `streamRetention.maxAgeMs` (retention age in ms) may be set. `writeThrottle` overrides the default per-collection write rate limit (10 writes / 10 s) \u2014 set `enabled: false` to disable entirely (e.g. audit logs), or override `limit` / `windowMs`. `searchConfig.requireFilter` declares top-level filter keys that callers MUST include in every `collection.search()` call to prevent unindexable full-scan regex queries \u2014 affects ALL callers immediately (no deprecation window). Response may include `warnings[]` if the project exceeds the 50-collection soft cap.",
       inputSchema: {
         projectId: z4.string(),
         name: z4.string(),
@@ -1239,17 +1239,55 @@ function registerDatabaseTools(server, api) {
         }).refine(
           (r) => !(r.maxLen !== void 0 && r.maxAgeMs !== void 0),
           { message: "Set at most one of maxLen or maxAgeMs" }
-        ).optional()
-      }
-    },
-    async ({ projectId, name, realtimeMode, streamRetention }) => {
+        ).optional(),
+        writeThrottle: z4.object({
+          enabled: z4.boolean().optional().describe("When false, skip write throttling entirely for this collection"),
+          limit: z4.number().int().min(1).max(1e4).optional().describe("Max writes per window (1..10000)"),
+          windowMs: z4.number().int().min(1e3).max(36e5).optional().describe("Window duration in ms (1000..3_600_000 = 1s to 1h)")
+        }).refine(
+          (t) => t.enabled !== void 0 || t.limit !== void 0 || t.windowMs !== void 0,
+          { message: "writeThrottle must set at least one of enabled, limit, or windowMs" }
+        ).optional(),
+        searchConfig: z4.object({
+          requireFilter: z4.array(
+            z4.string().regex(/^[a-zA-Z0-9_]+$/, "Top-level field names only (no dots, alphanumeric + underscore)").max(64).refine(
+              (k) => !["__proto__", "constructor", "prototype"].includes(k),
+              { message: "Reserved JS object keys (__proto__, constructor, prototype) are not allowed" }
+            )
+          ).min(1).max(10).optional().describe(
+            "Top-level filter keys required on every search() call. Empty array rejected \u2014 to CLEAR an existing requirement, pass `searchConfig: {}` (an empty object). Omitting `searchConfig` entirely is a no-op (no change). Duplicate keys are deduplicated server-side, but you should send a deduplicated list."
+          )
+          // `searchConfig.fields` is intentionally NOT exposed here. The
+          // backend DTO accepts it but treats it as "Reserved: future
+          // allow-list of searchable fields. Stored but not enforced.".
+          // Surfacing it via MCP would let callers persist values that
+          // have no observable effect today and may take on different
+          // semantics when enforcement ships. Add back once the feature
+          // is live.
+        }).strict().optional()
+      }
+    },
+    async ({ projectId, name, realtimeMode, streamRetention, writeThrottle, searchConfig }) => {
       try {
         const body = {};
         if (realtimeMode !== void 0) body.realtimeMode = realtimeMode;
         if (streamRetention !== void 0) body.streamRetention = streamRetention;
+        if (writeThrottle !== void 0) body.writeThrottle = writeThrottle;
+        if (searchConfig !== void 0) {
+          const normalized = {};
+          if (searchConfig.requireFilter !== void 0) {
+            normalized.requireFilter = Array.from(new Set(searchConfig.requireFilter));
+          }
+          body.searchConfig = normalized;
+        }
         if (Object.keys(body).length === 0) {
           return {
-            content: [{ type: "text", text: "At least one of realtimeMode or streamRetention must be provided" }],
+            content: [
+              {
+                type: "text",
+                text: "At least one of realtimeMode, streamRetention, writeThrottle, or searchConfig must be provided"
+              }
+            ],
             isError: true
           };
         }