[mongodben]

Jira: https://jira.mongodb.org/browse/EAI-2440

Why this change

• With writes enabled, mongodb__atlas_streams_build and
  mongodb__atlas_streams_manage can create or modify Atlas Stream Processing
  processors that read from or write to cluster databases ($source,
  $lookup, $merge, $out, and dlq).
• EAI-2440: Limit agents to allowed databases with databaseNames #177 skips those tools in databaseAllowlistMiddleware.

Changes

• Check stream processor databases against databaseNames on
  mongodb__atlas_streams_build and mongodb__atlas_streams_manage:
  • dlq.db
  • $source.db when a collection change stream source is configured
  • $lookup.from.db
  • $merge.into.db (or $merge.db)
  • $out.db
• Reject stream processor stages and dlq configs whose database cannot be
  read as a non-empty string
• Document what is checked and what cannot be checked (start-processor on an
  existing processor, and cluster-wide $source stages that omit db) in the
  Atlas Explorer README and config.ts

Notes

• Stacked on EAI-2440: Check Performance Advisor namespaces against databaseNames #180 (cursor/database-allowlist-perf-advisor-81d8).
• Kafka, Kinesis, inline document, and cluster-wide change stream $source
  stages do not name a database and continue to run.
• Typecheck and unit tests pass.

  

[Copilot]

🟡 Changes recommended

The recursive stream walker treats literal payloads as executable stages and rejects valid processors.

1 open issue

• Avoid treating literal and inline source data as executable stages · New

What changed in this PR

Extends the shared databaseNames guardrail to Atlas Stream Processing,
building on the earlier database and Performance Advisor checks.

Changes:

• Checks databases named in processor pipelines and dead-letter queues.
• Adds tests for allowed, disallowed, and malformed database arguments.
• Documents coverage and limitations in agent configuration comments and READMEs.

File	Description
packages/​agent-engine-core/​src/​databaseAllowlist.ts	Adds stream processor and Performance Advisor database checks.
packages/​agent-engine-core/​src/​databaseAllowlist.test.ts	Tests database validation for both tool groups.
agents/​atlas-query-insights/​src/​agent_atlas_query_insights/​config.ts	Documents Performance Advisor coverage in comments.
agents/​atlas-query-insights/​README.md	Describes namespace validation.
agents/​atlas-explorer/​src/​agent_atlas_explorer/​config.ts	Documents stream validation and limitations in comments.
agents/​atlas-explorer/​README.md	Explains expanded guardrails and unchecked operations.

_{Review effort: Balanced}

[Copilot]

🟢 Approval recommended

The checks match the documented scope, include regression coverage, and have no identified blocking issues.

No open issues 🎉

_{Review effort: Balanced}