@burdenoff/mcp-libs 2026.704.1 → 2026.719.1

package/dist/core/index.cjs

@@ -7,6 +7,7 @@ var graphqlRequest = require('graphql-request');
 var fetch = require('cross-fetch');
 var mcp_js = require('@modelcontextprotocol/sdk/server/mcp.js');
 var types_js = require('@modelcontextprotocol/sdk/types.js');
+var zod = require('zod');
 
 function _interopDefault (e) { return e && e.__esModule ? e : { default: e }; }
 
@@ -740,6 +741,98 @@ function toServerCapabilities(caps) {
   return out;
 }
 
+// src/core/tool-name.ts
+var MAX_TOOL_NAME_LENGTH = 63;
+function assertSafeName(name, kind) {
+  if (name.length > MAX_TOOL_NAME_LENGTH) {
+    throw new McpInternalError(
+      `Tool name '${name}' exceeds ${MAX_TOOL_NAME_LENGTH} characters (some MCP clients truncate at 64).`
+    );
+  }
+  return name;
+}
+function mcpToolName(productName, ...parts) {
+  if (!productName) {
+    throw new McpInternalError("mcpToolName: productName is required");
+  }
+  const name = [productName, ...parts].filter(Boolean).join("_");
+  return assertSafeName(name);
+}
+function mcpResourceUri(productName, ...parts) {
+  if (!productName) {
+    throw new McpInternalError("mcpResourceUri: productName is required");
+  }
+  return `${productName}://${parts.filter(Boolean).join("/")}`;
+}
+function mcpPromptName(productName, ...parts) {
+  if (!productName) {
+    throw new McpInternalError("mcpPromptName: productName is required");
+  }
+  return [productName, ...parts].filter(Boolean).join("-");
+}
+var TOOL_NAME_LIMIT = MAX_TOOL_NAME_LENGTH;
+var DESTRUCTIVE_NAME_SEGMENT = /(?:^|_)delete(?:_|$)/i;
+var READ_ONLY_NAME_SEGMENT = /(?:^|_)(?:list|get|search|check|read|count|stats|by_date)(?:_|$)/i;
+function inferDestructiveHint(toolName) {
+  return DESTRUCTIVE_NAME_SEGMENT.test(toolName);
+}
+function inferReadOnlyHint(toolName) {
+  return !inferDestructiveHint(toolName) && READ_ONLY_NAME_SEGMENT.test(toolName);
+}
+
+// src/core/tool-governance.ts
+var CONFIRM_FIELD_DESCRIPTION = "Must be true to execute this destructive tool. The call is rejected (no changes made) if omitted or false.";
+function resolveAnnotations(name, declared) {
+  const destructiveHint = declared?.destructiveHint ?? inferDestructiveHint(name);
+  const readOnlyHint = declared?.readOnlyHint ?? (destructiveHint ? false : inferReadOnlyHint(name));
+  return { ...declared, destructiveHint, readOnlyHint };
+}
+function unconfirmedDestructiveResult(name) {
+  return {
+    content: [
+      {
+        type: "text",
+        text: `'${name}' is a destructive action and was NOT executed. Re-call with confirm: true once you intend to proceed.`
+      }
+    ],
+    isError: true
+  };
+}
+function wrapDestructiveHandler(name, handler) {
+  return async (...callbackArgs) => {
+    const hasArgs = callbackArgs.length === 2;
+    const rawArgs = hasArgs ? callbackArgs[0] : {};
+    if (rawArgs["confirm"] !== true) {
+      return unconfirmedDestructiveResult(name);
+    }
+    const forwardedArgs = { ...rawArgs };
+    delete forwardedArgs["confirm"];
+    const forwardedCallbackArgs = hasArgs ? [forwardedArgs, callbackArgs[1]] : callbackArgs;
+    return handler(...forwardedCallbackArgs);
+  };
+}
+function wrapServerWithToolGovernance(server, options = {}) {
+  const enforceConfirmation = options.enforceDestructiveConfirmation ?? false;
+  const target = server;
+  const originalRegisterTool = target.registerTool.bind(target);
+  target.registerTool = (name, config, handler) => {
+    const annotations = resolveAnnotations(name, config.annotations);
+    if (!enforceConfirmation || !annotations.destructiveHint) {
+      return originalRegisterTool(name, { ...config, annotations }, handler);
+    }
+    const gatedInputSchema = {
+      ...config.inputSchema ?? {},
+      confirm: zod.z.boolean().optional().describe(CONFIRM_FIELD_DESCRIPTION)
+    };
+    return originalRegisterTool(
+      name,
+      { ...config, inputSchema: gatedInputSchema, annotations },
+      wrapDestructiveHandler(name, handler)
+    );
+  };
+  return server;
+}
+
 // src/core/server.ts
 var MCP_TO_LOGGER_LEVEL = {
   debug: "debug",
@@ -763,6 +856,9 @@ function createMcpServer(ctx, modules, opts) {
     { name: opts.name, version: opts.version },
     { capabilities: toServerCapabilities(capabilities) }
   );
+  wrapServerWithToolGovernance(server, {
+    enforceDestructiveConfirmation: opts.enforceDestructiveConfirmation
+  });
   ctx._internal.serverRef.current = server;
   const inner = server.server ?? server;
   if (typeof inner.setRequestHandler === "function") {
@@ -837,7 +933,8 @@ function registerTool(server, ctx, name, metadata, handler) {
   const sdkConfig = {
     title: metadata.title,
     description: metadata.description,
-    ...metadata.inputSchema ? { inputSchema: metadata.inputSchema } : {}
+    ...metadata.inputSchema ? { inputSchema: metadata.inputSchema } : {},
+    ...metadata.annotations ? { annotations: metadata.annotations } : {}
   };
   const wrapped = async (...callbackArgs) => {
     const hasArgs = callbackArgs.length === 2;
@@ -889,37 +986,6 @@ function stringifyCause(cause) {
   }
 }
 
-// src/core/tool-name.ts
-var MAX_TOOL_NAME_LENGTH = 63;
-function assertSafeName(name, kind) {
-  if (name.length > MAX_TOOL_NAME_LENGTH) {
-    throw new McpInternalError(
-      `Tool name '${name}' exceeds ${MAX_TOOL_NAME_LENGTH} characters (some MCP clients truncate at 64).`
-    );
-  }
-  return name;
-}
-function mcpToolName(productName, ...parts) {
-  if (!productName) {
-    throw new McpInternalError("mcpToolName: productName is required");
-  }
-  const name = [productName, ...parts].filter(Boolean).join("_");
-  return assertSafeName(name);
-}
-function mcpResourceUri(productName, ...parts) {
-  if (!productName) {
-    throw new McpInternalError("mcpResourceUri: productName is required");
-  }
-  return `${productName}://${parts.filter(Boolean).join("/")}`;
-}
-function mcpPromptName(productName, ...parts) {
-  if (!productName) {
-    throw new McpInternalError("mcpPromptName: productName is required");
-  }
-  return [productName, ...parts].filter(Boolean).join("-");
-}
-var TOOL_NAME_LIMIT = MAX_TOOL_NAME_LENGTH;
-
 exports.CircularDependencyError = CircularDependencyError;
 exports.McpAuthError = McpAuthError;
 exports.McpInternalError = McpInternalError;
@@ -937,6 +1003,8 @@ exports.createProgress = createProgress;
 exports.errorResult = errorResult;
 exports.extractGqlErrorMessage = extractGqlErrorMessage;
 exports.fetchWorkspaces = fetchWorkspaces;
+exports.inferDestructiveHint = inferDestructiveHint;
+exports.inferReadOnlyHint = inferReadOnlyHint;
 exports.issueWorkspaceToken = issueWorkspaceToken;
 exports.jsonResult = jsonResult;
 exports.mcpPromptName = mcpPromptName;
@@ -949,5 +1017,6 @@ exports.startDeviceCodeFlow = startDeviceCodeFlow;
 exports.textResult = textResult;
 exports.toServerCapabilities = toServerCapabilities;
 exports.unionCapabilities = unionCapabilities;
+exports.wrapServerWithToolGovernance = wrapServerWithToolGovernance;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map