@burdenoff/mcp-libs 2026.1030.3 → 2026.1030.4

package/dist/index.cjs

@@ -752,6 +752,10 @@ function canonicalJson(value, seen = /* @__PURE__ */ new Set()) {
 function toolArgsSha256(args) {
   return crypto.createHash("sha256").update(canonicalJson(args), "utf8").digest("hex");
 }
+var refusedResults = /* @__PURE__ */ new WeakSet();
+function isRefusedResult(result) {
+  return typeof result === "object" && result !== null && refusedResults.has(result);
+}
 function isErrorResult(result) {
   return typeof result === "object" && result !== null && result.isError === true;
 }
@@ -773,7 +777,7 @@ function wrapAuditedHandler(name, handler, onToolCall) {
     };
     try {
       const result = await handler(...callbackArgs);
-      report(isErrorResult(result) ? "error" : "ok");
+      report(isRefusedResult(result) ? "refused" : isErrorResult(result) ? "error" : "ok");
       return result;
     } catch (error) {
       report("error", error instanceof Error ? error.message : String(error));
@@ -788,7 +792,7 @@ function resolveAnnotations(name, declared) {
   return { ...declared, destructiveHint, readOnlyHint };
 }
 function unconfirmedDestructiveResult(name) {
-  return {
+  const result = {
     content: [
       {
         type: "text",
@@ -797,6 +801,8 @@ function unconfirmedDestructiveResult(name) {
     ],
     isError: true
   };
+  refusedResults.add(result);
+  return result;
 }
 function wrapDestructiveHandler(name, handler) {
   return async (...callbackArgs) => {
@@ -817,9 +823,9 @@ function wrapServerWithToolGovernance(server, options = {}) {
   const originalRegisterTool = target.registerTool.bind(target);
   const register = (name, config, handler) => {
     const annotations = resolveAnnotations(name, config.annotations);
-    const audited = options.onToolCall ? wrapAuditedHandler(name, handler, options.onToolCall) : handler;
+    const audit = (inner) => options.onToolCall ? wrapAuditedHandler(name, inner, options.onToolCall) : inner;
     if (!enforceConfirmation || !annotations.destructiveHint) {
-      return originalRegisterTool(name, { ...config, annotations }, audited);
+      return originalRegisterTool(name, { ...config, annotations }, audit(handler));
     }
     const gatedInputSchema = {
       ...config.inputSchema ?? {},
@@ -828,7 +834,7 @@ function wrapServerWithToolGovernance(server, options = {}) {
     return originalRegisterTool(
       name,
       { ...config, inputSchema: gatedInputSchema, annotations },
-      wrapDestructiveHandler(name, audited)
+      audit(wrapDestructiveHandler(name, handler))
     );
   };
   target.registerTool = (name, config, handler) => {