@burdenoff/mcp-libs 2026.802.1 → 2026.805.1

package/dist/modules/comradecircle/index.cjs

@@ -565,7 +565,12 @@ function registerCircleTools(server, ctx, track) {
     {
       title: "Archive Circle",
       description: "Archive (soft-delete) a circle. Returns true on success.",
-      inputSchema: { id: zod.z.string().describe("Circle ID") }
+      inputSchema: { id: zod.z.string().describe("Circle ID") },
+      // BOFF-5868/BOFF-3907: the fleet destructiveHint inference (tool-name.ts)
+      // only matches a `delete` name segment, so an irreversible `archive` call
+      // needs an explicit annotation to be caught by the confirmation gate that
+      // comradecircle-mcp/src/index.ts enables via enforceDestructiveConfirmation.
+      annotations: { destructiveHint: true }
     },
     async ({ id }) => {
       try {
@@ -702,7 +707,12 @@ function registerMembershipTools(server, ctx, track) {
     {
       title: "Leave Circle",
       description: "Leave a circle as the calling member. Returns true on success.",
-      inputSchema: { circleId: zod.z.string().describe("Circle ID to leave") }
+      inputSchema: { circleId: zod.z.string().describe("Circle ID to leave") },
+      // BOFF-5868/BOFF-3907: `leave` is not caught by the fleet's name-based
+      // destructiveHint inference. Gated conservatively — a sole OWNER leaving
+      // orphans the circle, and an unattended agent leaving communities on the
+      // user's behalf is exactly the outcome the confirmation gate exists for.
+      annotations: { destructiveHint: true }
     },
     async ({ circleId }) => {
       try {
@@ -986,7 +996,10 @@ function registerPostTools(server, ctx, track) {
     {
       title: "Remove Post",
       description: "Remove (soft-delete) a post. Returns true on success.",
-      inputSchema: { id: zod.z.string().describe("Post ID") }
+      inputSchema: { id: zod.z.string().describe("Post ID") },
+      // BOFF-5868/BOFF-3907: see circles_archive — `remove` is not caught by
+      // the fleet's name-based destructiveHint inference.
+      annotations: { destructiveHint: true }
     },
     async ({ id }) => {
       try {