@burdenoff/mcp-libs 2026.805.1 → 2026.819.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -566,7 +566,12 @@ function registerAgencyTools(server, ctx, track) {
566
566
  {
567
567
  title: "Archive Agency",
568
568
  description: "Archive (soft-delete) a government agency. Returns true on success.",
569
- inputSchema: { id: zod.z.string().describe("Agency ID") }
569
+ inputSchema: { id: zod.z.string().describe("Agency ID") },
570
+ // BOFF-3907: the fleet destructiveHint inference (tool-name.ts) only
571
+ // matches a `delete` name segment, so an irreversible archive action
572
+ // needs an explicit annotation to be caught by the confirmation gate that
573
+ // govcitizenhub-mcp/src/index.ts enables via enforceDestructiveConfirmation.
574
+ annotations: { destructiveHint: true }
570
575
  },
571
576
  async ({ id }) => {
572
577
  try {
@@ -1107,7 +1112,12 @@ function registerPermitTools(server, ctx, track) {
1107
1112
  inputSchema: {
1108
1113
  id: zod.z.string().describe("Permit ID"),
1109
1114
  reason: zod.z.string().optional().describe("Reason for revocation")
1110
- }
1115
+ },
1116
+ // BOFF-3907: the fleet destructiveHint inference (tool-name.ts) only
1117
+ // matches a `delete` name segment, so an irreversible revocation action
1118
+ // needs an explicit annotation to be caught by the confirmation gate that
1119
+ // govcitizenhub-mcp/src/index.ts enables via enforceDestructiveConfirmation.
1120
+ annotations: { destructiveHint: true }
1111
1121
  },
1112
1122
  async ({ id, reason }) => {
1113
1123
  try {
@@ -1394,7 +1404,12 @@ function registerPaymentTools(server, ctx, track) {
1394
1404
  {
1395
1405
  title: "Refund Payment",
1396
1406
  description: "Refund a paid payment (moves it to REFUNDED).",
1397
- inputSchema: { id: zod.z.string().describe("Payment ID") }
1407
+ inputSchema: { id: zod.z.string().describe("Payment ID") },
1408
+ // BOFF-3907: the fleet destructiveHint inference (tool-name.ts) only
1409
+ // matches a `delete` name segment, so an irreversible refund action
1410
+ // needs an explicit annotation to be caught by the confirmation gate that
1411
+ // govcitizenhub-mcp/src/index.ts enables via enforceDestructiveConfirmation.
1412
+ annotations: { destructiveHint: true }
1398
1413
  },
1399
1414
  async ({ id }) => {
1400
1415
  try {