@burdenoff/mcp-libs 2026.704.1 → 2026.719.1

package/dist/index.cjs

@@ -7,6 +7,7 @@ var graphqlRequest = require('graphql-request');
 var fetch = require('cross-fetch');
 var mcp_js = require('@modelcontextprotocol/sdk/server/mcp.js');
 var types_js = require('@modelcontextprotocol/sdk/types.js');
+var zod = require('zod');
 var stdio_js = require('@modelcontextprotocol/sdk/server/stdio.js');
 var crypto = require('crypto');
 var streamableHttp_js = require('@modelcontextprotocol/sdk/server/streamableHttp.js');
@@ -657,6 +658,97 @@ function toServerCapabilities(caps) {
   return out;
 }
 
+// src/core/tool-name.ts
+var MAX_TOOL_NAME_LENGTH = 63;
+function assertSafeName(name, kind) {
+  if (name.length > MAX_TOOL_NAME_LENGTH) {
+    throw new McpInternalError(
+      `Tool name '${name}' exceeds ${MAX_TOOL_NAME_LENGTH} characters (some MCP clients truncate at 64).`
+    );
+  }
+  return name;
+}
+function mcpToolName(productName, ...parts) {
+  if (!productName) {
+    throw new McpInternalError("mcpToolName: productName is required");
+  }
+  const name = [productName, ...parts].filter(Boolean).join("_");
+  return assertSafeName(name);
+}
+function mcpResourceUri(productName, ...parts) {
+  if (!productName) {
+    throw new McpInternalError("mcpResourceUri: productName is required");
+  }
+  return `${productName}://${parts.filter(Boolean).join("/")}`;
+}
+function mcpPromptName(productName, ...parts) {
+  if (!productName) {
+    throw new McpInternalError("mcpPromptName: productName is required");
+  }
+  return [productName, ...parts].filter(Boolean).join("-");
+}
+var DESTRUCTIVE_NAME_SEGMENT = /(?:^|_)delete(?:_|$)/i;
+var READ_ONLY_NAME_SEGMENT = /(?:^|_)(?:list|get|search|check|read|count|stats|by_date)(?:_|$)/i;
+function inferDestructiveHint(toolName) {
+  return DESTRUCTIVE_NAME_SEGMENT.test(toolName);
+}
+function inferReadOnlyHint(toolName) {
+  return !inferDestructiveHint(toolName) && READ_ONLY_NAME_SEGMENT.test(toolName);
+}
+
+// src/core/tool-governance.ts
+var CONFIRM_FIELD_DESCRIPTION = "Must be true to execute this destructive tool. The call is rejected (no changes made) if omitted or false.";
+function resolveAnnotations(name, declared) {
+  const destructiveHint = declared?.destructiveHint ?? inferDestructiveHint(name);
+  const readOnlyHint = declared?.readOnlyHint ?? (destructiveHint ? false : inferReadOnlyHint(name));
+  return { ...declared, destructiveHint, readOnlyHint };
+}
+function unconfirmedDestructiveResult(name) {
+  return {
+    content: [
+      {
+        type: "text",
+        text: `'${name}' is a destructive action and was NOT executed. Re-call with confirm: true once you intend to proceed.`
+      }
+    ],
+    isError: true
+  };
+}
+function wrapDestructiveHandler(name, handler) {
+  return async (...callbackArgs) => {
+    const hasArgs = callbackArgs.length === 2;
+    const rawArgs = hasArgs ? callbackArgs[0] : {};
+    if (rawArgs["confirm"] !== true) {
+      return unconfirmedDestructiveResult(name);
+    }
+    const forwardedArgs = { ...rawArgs };
+    delete forwardedArgs["confirm"];
+    const forwardedCallbackArgs = hasArgs ? [forwardedArgs, callbackArgs[1]] : callbackArgs;
+    return handler(...forwardedCallbackArgs);
+  };
+}
+function wrapServerWithToolGovernance(server, options = {}) {
+  const enforceConfirmation = options.enforceDestructiveConfirmation ?? false;
+  const target = server;
+  const originalRegisterTool = target.registerTool.bind(target);
+  target.registerTool = (name, config, handler) => {
+    const annotations = resolveAnnotations(name, config.annotations);
+    if (!enforceConfirmation || !annotations.destructiveHint) {
+      return originalRegisterTool(name, { ...config, annotations }, handler);
+    }
+    const gatedInputSchema = {
+      ...config.inputSchema ?? {},
+      confirm: zod.z.boolean().optional().describe(CONFIRM_FIELD_DESCRIPTION)
+    };
+    return originalRegisterTool(
+      name,
+      { ...config, inputSchema: gatedInputSchema, annotations },
+      wrapDestructiveHandler(name, handler)
+    );
+  };
+  return server;
+}
+
 // src/core/server.ts
 var MCP_TO_LOGGER_LEVEL = {
   debug: "debug",
@@ -680,6 +772,9 @@ function createMcpServer(ctx, modules, opts) {
     { name: opts.name, version: opts.version },
     { capabilities: toServerCapabilities(capabilities) }
   );
+  wrapServerWithToolGovernance(server, {
+    enforceDestructiveConfirmation: opts.enforceDestructiveConfirmation
+  });
   ctx._internal.serverRef.current = server;
   const inner = server.server ?? server;
   if (typeof inner.setRequestHandler === "function") {
@@ -754,7 +849,8 @@ function registerTool(server, ctx, name, metadata, handler) {
   const sdkConfig = {
     title: metadata.title,
     description: metadata.description,
-    ...metadata.inputSchema ? { inputSchema: metadata.inputSchema } : {}
+    ...metadata.inputSchema ? { inputSchema: metadata.inputSchema } : {},
+    ...metadata.annotations ? { annotations: metadata.annotations } : {}
   };
   const wrapped = async (...callbackArgs) => {
     const hasArgs = callbackArgs.length === 2;
@@ -805,36 +901,6 @@ function stringifyCause(cause) {
     return String(cause);
   }
 }
-
-// src/core/tool-name.ts
-var MAX_TOOL_NAME_LENGTH = 63;
-function assertSafeName(name, kind) {
-  if (name.length > MAX_TOOL_NAME_LENGTH) {
-    throw new McpInternalError(
-      `Tool name '${name}' exceeds ${MAX_TOOL_NAME_LENGTH} characters (some MCP clients truncate at 64).`
-    );
-  }
-  return name;
-}
-function mcpToolName(productName, ...parts) {
-  if (!productName) {
-    throw new McpInternalError("mcpToolName: productName is required");
-  }
-  const name = [productName, ...parts].filter(Boolean).join("_");
-  return assertSafeName(name);
-}
-function mcpResourceUri(productName, ...parts) {
-  if (!productName) {
-    throw new McpInternalError("mcpResourceUri: productName is required");
-  }
-  return `${productName}://${parts.filter(Boolean).join("/")}`;
-}
-function mcpPromptName(productName, ...parts) {
-  if (!productName) {
-    throw new McpInternalError("mcpPromptName: productName is required");
-  }
-  return [productName, ...parts].filter(Boolean).join("-");
-}
 async function startStdioServer(server, ctx, _opts = {}) {
   ctx.logger.info("Starting MCP server with stdio transport", {
     name: ctx.serverName,