@dockndevai/mcp-kubernetes 0.1.3 → 0.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -0
- package/dist/elicit.d.ts +36 -0
- package/dist/elicit.js +44 -0
- package/dist/elicit.js.map +1 -0
- package/dist/server.js +3 -2
- package/dist/server.js.map +1 -1
- package/dist/tools/admin.js +12 -2
- package/dist/tools/admin.js.map +1 -1
- package/dist/tools/types.d.ts +3 -0
- package/dist/tools/types.js.map +1 -1
- package/dist/tools/write.js +15 -2
- package/dist/tools/write.js.map +1 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -28,6 +28,7 @@ The design goal is **safe by default**: it starts read-only, can be scoped to an
|
|
|
28
28
|
| Can it exec into pods? | `K8S_ALLOW_EXEC` | `false` | `exec_in_pod` needs this **and** admin mode; the tool isn't even registered otherwise. |
|
|
29
29
|
| Preview without touching the cluster | `K8S_DRY_RUN` | `false` | Write/admin tools validate + log intent, then return without calling the API. |
|
|
30
30
|
| Audit trail | `K8S_AUDIT_LOG` | `true` | Emits a JSON line to stderr per guarded operation (`ALLOW` / `DENY` / `DRY_RUN`). |
|
|
31
|
+
| Interactive confirmation | *(automatic)* | — | Destructive & high-impact actions prompt the human to approve via MCP elicitation before running; clients without elicitation fall back to the `*_ALLOW_*` gate. |
|
|
31
32
|
|
|
32
33
|
The layers are independent — e.g. `admin` mode with all three opt-ins `false` can restart and scale deployments but can neither delete resources nor exec into pods.
|
|
33
34
|
|
package/dist/elicit.d.ts
ADDED
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
|
|
2
|
+
/**
|
|
3
|
+
* Human-in-the-loop confirmation for destructive operations, via MCP elicitation.
|
|
4
|
+
*
|
|
5
|
+
* When the connected client advertises the elicitation capability, a destructive tool
|
|
6
|
+
* pauses and asks the **human** to approve the exact action — the model cannot approve
|
|
7
|
+
* on the user's behalf, which is the whole point (a model can trivially echo a
|
|
8
|
+
* confirmation string; it cannot check a box a human is shown).
|
|
9
|
+
*
|
|
10
|
+
* When the client does NOT support elicitation, or the elicitation round-trip fails,
|
|
11
|
+
* the call falls back to the policy gate that already permitted it (admin mode + the
|
|
12
|
+
* `*_ALLOW_DELETE` flag). So enabling this is never *more* permissive than before — it
|
|
13
|
+
* only adds a human checkpoint where one is possible.
|
|
14
|
+
*/
|
|
15
|
+
export interface ConfirmRequest {
|
|
16
|
+
/** Short verb phrase naming the action, e.g. "delete dashboard". */
|
|
17
|
+
action: string;
|
|
18
|
+
/** The exact resource affected (uid, name, id …) — shown to the human. */
|
|
19
|
+
target: string;
|
|
20
|
+
/** Extra context lines shown under the prompt. */
|
|
21
|
+
details?: Record<string, string | number | boolean | undefined>;
|
|
22
|
+
}
|
|
23
|
+
export type ConfirmOutcome = {
|
|
24
|
+
approved: true;
|
|
25
|
+
interactive: boolean;
|
|
26
|
+
} | {
|
|
27
|
+
approved: false;
|
|
28
|
+
reason: string;
|
|
29
|
+
};
|
|
30
|
+
export interface Confirmer {
|
|
31
|
+
/** Whether the connected client can prompt the human at all. */
|
|
32
|
+
available(): boolean;
|
|
33
|
+
/** Ask the human to approve a destructive action. */
|
|
34
|
+
confirm(req: ConfirmRequest): Promise<ConfirmOutcome>;
|
|
35
|
+
}
|
|
36
|
+
export declare function makeConfirmer(server: McpServer): Confirmer;
|
package/dist/elicit.js
ADDED
|
@@ -0,0 +1,44 @@
|
|
|
1
|
+
export function makeConfirmer(server) {
|
|
2
|
+
const canElicit = () => !!server.server.getClientCapabilities()?.elicitation;
|
|
3
|
+
return {
|
|
4
|
+
available: canElicit,
|
|
5
|
+
async confirm({ action, target, details }) {
|
|
6
|
+
if (!canElicit()) {
|
|
7
|
+
// The client can't ask the human; the *_ALLOW_DELETE flag was the gate.
|
|
8
|
+
return { approved: true, interactive: false };
|
|
9
|
+
}
|
|
10
|
+
const detailLines = Object.entries(details ?? {})
|
|
11
|
+
.filter(([, v]) => v !== undefined && v !== "")
|
|
12
|
+
.map(([k, v]) => ` • ${k}: ${v}`)
|
|
13
|
+
.join("\n");
|
|
14
|
+
const message = `Confirm ${action}: "${target}". This is destructive and cannot be undone.` +
|
|
15
|
+
(detailLines ? `\n${detailLines}` : "");
|
|
16
|
+
try {
|
|
17
|
+
const res = await server.server.elicitInput({
|
|
18
|
+
message,
|
|
19
|
+
requestedSchema: {
|
|
20
|
+
type: "object",
|
|
21
|
+
properties: {
|
|
22
|
+
confirm: {
|
|
23
|
+
type: "boolean",
|
|
24
|
+
title: `Proceed with ${action}?`,
|
|
25
|
+
description: `Approve ${action} on "${target}". Leave unchecked to cancel.`,
|
|
26
|
+
},
|
|
27
|
+
},
|
|
28
|
+
required: ["confirm"],
|
|
29
|
+
},
|
|
30
|
+
});
|
|
31
|
+
if (res.action === "accept" && res.content?.confirm === true) {
|
|
32
|
+
return { approved: true, interactive: true };
|
|
33
|
+
}
|
|
34
|
+
const verb = res.action === "decline" ? "declined" : res.action === "cancel" ? "cancelled" : "not confirmed";
|
|
35
|
+
return { approved: false, reason: `${verb} by the user` };
|
|
36
|
+
}
|
|
37
|
+
catch {
|
|
38
|
+
// Elicitation advertised but failed at runtime — policy already gated this op.
|
|
39
|
+
return { approved: true, interactive: false };
|
|
40
|
+
}
|
|
41
|
+
},
|
|
42
|
+
};
|
|
43
|
+
}
|
|
44
|
+
//# sourceMappingURL=elicit.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"elicit.js","sourceRoot":"","sources":["../src/elicit.ts"],"names":[],"mappings":"AAmCA,MAAM,UAAU,aAAa,CAAC,MAAiB;IAC7C,MAAM,SAAS,GAAG,GAAY,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,EAAE,WAAW,CAAC;IAEtF,OAAO;QACL,SAAS,EAAE,SAAS;QACpB,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;YACvC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBACjB,wEAAwE;gBACxE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;YAChD,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;iBAC9C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;iBAC9C,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;iBACjC,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,OAAO,GACX,WAAW,MAAM,MAAM,MAAM,8CAA8C;gBAC3E,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;oBAC1C,OAAO;oBACP,eAAe,EAAE;wBACf,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,OAAO,EAAE;gCACP,IAAI,EAAE,SAAS;gCACf,KAAK,EAAE,gBAAgB,MAAM,GAAG;gCAChC,WAAW,EAAE,WAAW,MAAM,QAAQ,MAAM,+BAA+B;6BAC5E;yBACF;wBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;qBACtB;iBACF,CAAC,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;oBAC7D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;gBAC/C,CAAC;gBACD,MAAM,IAAI,GACR,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC;gBAClG,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,cAAc,EAAE,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,+EAA+E;gBAC/E,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;YAChD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}
|
package/dist/server.js
CHANGED
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
import { ApiException } from "@kubernetes/client-node";
|
|
2
2
|
import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
|
|
3
3
|
import { K8sClient } from "./k8s/client.js";
|
|
4
|
+
import { makeConfirmer } from "./elicit.js";
|
|
4
5
|
import { PolicyError, SecurityPolicy } from "./security.js";
|
|
5
6
|
import { adminTools } from "./tools/admin.js";
|
|
6
7
|
import { readTools } from "./tools/read.js";
|
|
@@ -10,8 +11,8 @@ export const ALL_TOOLS = [...readTools, ...writeTools, ...adminTools];
|
|
|
10
11
|
export function buildServer(config) {
|
|
11
12
|
const policy = new SecurityPolicy(config.security);
|
|
12
13
|
const client = new K8sClient(config.connection);
|
|
13
|
-
const
|
|
14
|
-
const
|
|
14
|
+
const server = new McpServer({ name: "mcp-kubernetes", version: "0.2.1" });
|
|
15
|
+
const ctx = { client, policy, confirm: makeConfirmer(server) };
|
|
15
16
|
const enabled = [];
|
|
16
17
|
for (const tool of ALL_TOOLS) {
|
|
17
18
|
if (!policy.isCapabilityEnabled(tool.capability))
|
package/dist/server.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,CAAC,MAAM,SAAS,GAAc,CAAC,GAAG,SAAS,EAAE,GAAG,UAAU,EAAE,GAAG,UAAU,CAAC,CAAC;AAEjF,MAAM,UAAU,WAAW,CAAC,MAAiB;IAC3C,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,GAAG,
|
|
1
|
+
{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,CAAC,MAAM,SAAS,GAAc,CAAC,GAAG,SAAS,EAAE,GAAG,UAAU,EAAE,GAAG,UAAU,CAAC,CAAC;AAEjF,MAAM,UAAU,WAAW,CAAC,MAAiB;IAC3C,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;IAE5E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,SAAS;QAC3D,qFAAqF;QACrF,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YAAE,SAAS;QAC5D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAExB,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE;YAC5H,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,OAAe,CAAC;IACpB,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;QAC/B,OAAO,GAAG,kBAAkB,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5C,CAAC;SAAM,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;QACvC,OAAO,GAAG,yBAAyB,GAAG,CAAC,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;IAC/F,CAAC;SAAM,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QAChC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IACxB,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAChF,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,GAAG,GAAG,GAAG;IACpC,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC"}
|
package/dist/tools/admin.js
CHANGED
|
@@ -23,7 +23,7 @@ export const adminTools = [
|
|
|
23
23
|
...contextArg,
|
|
24
24
|
},
|
|
25
25
|
},
|
|
26
|
-
handler: async (args, { client, policy }) => {
|
|
26
|
+
handler: async (args, { client, policy, confirm }) => {
|
|
27
27
|
const namespace = args.namespace;
|
|
28
28
|
const context = args.context;
|
|
29
29
|
const { dryRun } = policy.guard({
|
|
@@ -36,6 +36,9 @@ export const adminTools = [
|
|
|
36
36
|
const ref = `${args.kind}/${args.name}${namespace ? ` in ${namespace}` : ""}`;
|
|
37
37
|
if (dryRun)
|
|
38
38
|
return textResult(`[dry-run] Would delete ${ref}.`);
|
|
39
|
+
const ok = await confirm.confirm({ action: "delete resource", target: ref, details: { context } });
|
|
40
|
+
if (!ok.approved)
|
|
41
|
+
return textResult(`Deletion cancelled — ${ok.reason}.`);
|
|
39
42
|
await client.deleteObject(args.apiVersion, args.kind, args.name, namespace, context);
|
|
40
43
|
return jsonResult({ deleted: true, kind: args.kind, name: args.name, namespace });
|
|
41
44
|
},
|
|
@@ -57,7 +60,7 @@ export const adminTools = [
|
|
|
57
60
|
...contextArg,
|
|
58
61
|
},
|
|
59
62
|
},
|
|
60
|
-
handler: async (args, { client, policy }) => {
|
|
63
|
+
handler: async (args, { client, policy, confirm }) => {
|
|
61
64
|
const namespace = args.namespace;
|
|
62
65
|
const context = args.context;
|
|
63
66
|
const { dryRun } = policy.guard({
|
|
@@ -70,6 +73,13 @@ export const adminTools = [
|
|
|
70
73
|
const command = args.command;
|
|
71
74
|
if (dryRun)
|
|
72
75
|
return textResult(`[dry-run] Would exec in ${namespace}/${args.name} [${args.container}]: ${command.join(" ")}`);
|
|
76
|
+
const ok = await confirm.confirm({
|
|
77
|
+
action: "exec command in pod",
|
|
78
|
+
target: `${namespace}/${args.name} [${args.container}]`,
|
|
79
|
+
details: { command: command.join(" ") },
|
|
80
|
+
});
|
|
81
|
+
if (!ok.approved)
|
|
82
|
+
return textResult(`Exec cancelled — ${ok.reason}.`);
|
|
73
83
|
const result = await client.execInPod(args.name, namespace, args.container, command, context);
|
|
74
84
|
return jsonResult(result);
|
|
75
85
|
},
|
package/dist/tools/admin.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/tools/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,UAAU,GAAG;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;CACvG,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAc;IACnC;QACE,IAAI,EAAE,iBAAiB;QACvB,UAAU,EAAE,OAAO;QACnB,MAAM,EAAE;YACN,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EACT,yFAAyF;gBACzF,wEAAwE;YAC1E,WAAW,EAAE;gBACX,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;gBACnD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;gBACjD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;gBAC1F,GAAG,UAAU;aACd;SACF;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;
|
|
1
|
+
{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/tools/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,UAAU,GAAG;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;CACvG,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAc;IACnC;QACE,IAAI,EAAE,iBAAiB;QACvB,UAAU,EAAE,OAAO;QACnB,MAAM,EAAE;YACN,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EACT,yFAAyF;gBACzF,wEAAwE;YAC1E,WAAW,EAAE;gBACX,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;gBACnD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;gBACjD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;gBAC1F,GAAG,UAAU;aACd;SACF;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;YACnD,MAAM,SAAS,GAAG,IAAI,CAAC,SAA+B,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,CAAC,OAA6B,CAAC;YACnD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC9B,IAAI,EAAE,iBAAiB;gBACvB,UAAU,EAAE,OAAO;gBACnB,SAAS;gBACT,OAAO;gBACP,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAC9E,IAAI,MAAM;gBAAE,OAAO,UAAU,CAAC,0BAA0B,GAAG,GAAG,CAAC,CAAC;YAChE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YACnG,IAAI,CAAC,EAAE,CAAC,QAAQ;gBAAE,OAAO,UAAU,CAAC,wBAAwB,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;YAC1E,MAAM,MAAM,CAAC,YAAY,CACvB,IAAI,CAAC,UAAoB,EACzB,IAAI,CAAC,IAAc,EACnB,IAAI,CAAC,IAAc,EACnB,SAAS,EACT,OAAO,CACR,CAAC;YACF,OAAO,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACpF,CAAC;KACF;IACD;QACE,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,OAAO;QACnB,wEAAwE;QACxE,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW;QACjC,MAAM,EAAE;YACN,KAAK,EAAE,aAAa;YACpB,WAAW,EACT,sFAAsF;gBACtF,0DAA0D;YAC5D,WAAW,EAAE;gBACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAChD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;gBAC/F,GAAG,UAAU;aACd;SACF;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;YACnD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAmB,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAA6B,CAAC;YACnD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC9B,IAAI,EAAE,aAAa;gBACnB,UAAU,EAAE,OAAO;gBACnB,SAAS;gBACT,OAAO;gBACP,YAAY,EAAE,IAAI;aACnB,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAmB,CAAC;YACzC,IAAI,MAAM;gBACR,OAAO,UAAU,CACf,2BAA2B,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC9F,CAAC;YACJ,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC;gBAC/B,MAAM,EAAE,qBAAqB;gBAC7B,MAAM,EAAE,GAAG,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,GAAG;gBACvD,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;aACxC,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,QAAQ;gBAAE,OAAO,UAAU,CAAC,oBAAoB,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CACnC,IAAI,CAAC,IAAc,EACnB,SAAS,EACT,IAAI,CAAC,SAAmB,EACxB,OAAO,EACP,OAAO,CACR,CAAC;YACF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;KACF;CACF,CAAC"}
|
package/dist/tools/types.d.ts
CHANGED
|
@@ -1,9 +1,12 @@
|
|
|
1
1
|
import type { ZodRawShape } from "zod";
|
|
2
|
+
import type { Confirmer } from "../elicit.js";
|
|
2
3
|
import type { K8sClient } from "../k8s/client.js";
|
|
3
4
|
import type { Capability, SecurityPolicy } from "../security.js";
|
|
4
5
|
export interface ToolContext {
|
|
5
6
|
client: K8sClient;
|
|
6
7
|
policy: SecurityPolicy;
|
|
8
|
+
/** Human-in-the-loop confirmation for destructive ops (no-op fallback when the client can't elicit). */
|
|
9
|
+
confirm: Confirmer;
|
|
7
10
|
}
|
|
8
11
|
export interface ToolResult {
|
|
9
12
|
content: Array<{
|
package/dist/tools/types.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":"AAoCA,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAC,IAA4C;IACxE,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI;QACtB,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS;QAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK;QACtB,KAAK,EACH,CAAC,CAAC,CAAC,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM;YACtE,GAAG;YACH,CAAC,CAAC,CAAC,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC,MAAM;QAC5C,QAAQ,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC,MAAM,CAClD,CAAC,CAAS,EAAE,CAAM,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,EAChD,CAAC,CACF;QACD,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ;QACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS;KAC/B,CAAC,CAAC,CAAC;AACN,CAAC"}
|
package/dist/tools/write.js
CHANGED
|
@@ -17,7 +17,7 @@ export const writeTools = [
|
|
|
17
17
|
...contextArg,
|
|
18
18
|
},
|
|
19
19
|
},
|
|
20
|
-
handler: async (args, { client, policy }) => {
|
|
20
|
+
handler: async (args, { client, policy, confirm }) => {
|
|
21
21
|
const name = args.name;
|
|
22
22
|
const namespace = args.namespace;
|
|
23
23
|
const replicas = args.replicas;
|
|
@@ -25,6 +25,12 @@ export const writeTools = [
|
|
|
25
25
|
const { dryRun } = policy.guard({ tool: "scale_deployment", capability: "write", namespace, context });
|
|
26
26
|
if (dryRun)
|
|
27
27
|
return textResult(`[dry-run] Would scale ${namespace}/${name} to ${replicas} replicas.`);
|
|
28
|
+
// Scaling to zero takes the workload offline — confirm that specifically.
|
|
29
|
+
if (replicas === 0) {
|
|
30
|
+
const ok = await confirm.confirm({ action: "scale deployment to 0 (takes it offline)", target: `${namespace}/${name}`, details: { context } });
|
|
31
|
+
if (!ok.approved)
|
|
32
|
+
return textResult(`Scale cancelled — ${ok.reason}.`);
|
|
33
|
+
}
|
|
28
34
|
await client.scaleDeployment(name, namespace, replicas, context);
|
|
29
35
|
return jsonResult({ scaled: true, namespace, name, replicas });
|
|
30
36
|
},
|
|
@@ -123,7 +129,7 @@ export const writeTools = [
|
|
|
123
129
|
...contextArg,
|
|
124
130
|
},
|
|
125
131
|
},
|
|
126
|
-
handler: async (args, { client, policy }) => {
|
|
132
|
+
handler: async (args, { client, policy, confirm }) => {
|
|
127
133
|
const manifest = args.manifest;
|
|
128
134
|
const namespace = manifest.metadata?.namespace;
|
|
129
135
|
const context = args.context;
|
|
@@ -140,6 +146,13 @@ export const writeTools = [
|
|
|
140
146
|
if (dryRun)
|
|
141
147
|
return textResult(`[dry-run] Would apply ${manifest.kind}/${manifest.metadata.name}` +
|
|
142
148
|
`${namespace ? ` in ${namespace}` : ""}.`);
|
|
149
|
+
const ok = await confirm.confirm({
|
|
150
|
+
action: "apply manifest (create or replace)",
|
|
151
|
+
target: `${manifest.kind}/${manifest.metadata.name}${namespace ? ` in ${namespace}` : ""}`,
|
|
152
|
+
details: { context },
|
|
153
|
+
});
|
|
154
|
+
if (!ok.approved)
|
|
155
|
+
return textResult(`Apply cancelled — ${ok.reason}.`);
|
|
143
156
|
const { action } = await client.applyObject(manifest, context);
|
|
144
157
|
return jsonResult({ applied: true, action, kind: manifest.kind, name: manifest.metadata.name, namespace });
|
|
145
158
|
},
|
package/dist/tools/write.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"write.js","sourceRoot":"","sources":["../../src/tools/write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,UAAU,GAAG;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;CACvG,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAc;IACnC;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,OAAO;QACnB,MAAM,EAAE;YACN,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,wCAAwC;YACrD,WAAW,EAAE;gBACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;gBAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;gBAC7E,GAAG,UAAU;aACd;SACF;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;
|
|
1
|
+
{"version":3,"file":"write.js","sourceRoot":"","sources":["../../src/tools/write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,UAAU,GAAG;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6DAA6D,CAAC;CACvG,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAc;IACnC;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,OAAO;QACnB,MAAM,EAAE;YACN,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,wCAAwC;YACrD,WAAW,EAAE;gBACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;gBAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;gBAC7E,GAAG,UAAU;aACd;SACF;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;YACnD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAc,CAAC;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAmB,CAAC;YAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAkB,CAAC;YACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAA6B,CAAC;YACnD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YACvG,IAAI,MAAM;gBAAE,OAAO,UAAU,CAAC,yBAAyB,SAAS,IAAI,IAAI,OAAO,QAAQ,YAAY,CAAC,CAAC;YACrG,0EAA0E;YAC1E,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,0CAA0C,EAAE,MAAM,EAAE,GAAG,SAAS,IAAI,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC/I,IAAI,CAAC,EAAE,CAAC,QAAQ;oBAAE,OAAO,UAAU,CAAC,qBAAqB,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YACjE,OAAO,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,CAAC;KACF;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,UAAU,EAAE,OAAO;QACnB,MAAM,EAAE;YACN,KAAK,EAAE,oBAAoB;YAC3B,WAAW,EAAE,sFAAsF;YACnG,WAAW,EAAE;gBACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;gBAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAC3C,GAAG,UAAU;aACd;SACF;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;YAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAc,CAAC;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAmB,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAA6B,CAAC;YACnD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;YACzG,IAAI,MAAM;gBAAE,OAAO,UAAU,CAAC,sCAAsC,SAAS,IAAI,IAAI,GAAG,CAAC,CAAC;YAC1F,MAAM,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YACzD,OAAO,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,CAAC;KACF;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,OAAO;QACnB,MAAM,EAAE;YACN,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,wDAAwD;YACrE,WAAW,EAAE;gBACX,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC;gBAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;gBACxE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;gBAClE,GAAG,UAAU;aACd;SACF;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;YAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAc,CAAC;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAmB,CAAC;YAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAmB,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAe,CAAC;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,OAA6B,CAAC;YACnD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC9B,IAAI,EAAE,sBAAsB;gBAC5B,UAAU,EAAE,OAAO;gBACnB,SAAS;gBACT,OAAO;aACR,CAAC,CAAC;YACH,IAAI,MAAM;gBACR,OAAO,UAAU,CAAC,uBAAuB,SAAS,IAAI,IAAI,eAAe,SAAS,QAAQ,KAAK,GAAG,CAAC,CAAC;YACtG,MAAM,MAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAC5E,OAAO,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,CAAC;KACF;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,OAAO;QACnB,MAAM,EAAE;YACN,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,yBAAyB;YACtC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,GAAG,UAAU,EAAE;SAC5E;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE;YAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAc,CAAC;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,OAA6B,CAAC;YACnD,6DAA6D;YAC7D,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC9B,IAAI,EAAE,kBAAkB;gBACxB,UAAU,EAAE,OAAO;gBACnB,SAAS,EAAE,IAAI;gBACf,OAAO;aACR,CAAC,CAAC;YACH,IAAI,MAAM;gBAAE,OAAO,UAAU,CAAC,qCAAqC,IAAI,IAAI,CAAC,CAAC;YAC7E,MAAM,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC5C,OAAO,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,OAAO;QACnB,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC;QAClD,MAAM,EAAE;YACN,KAAK,EAAE,kBAAkB;YACzB,WAAW,EACT,mGAAmG;gBACnG,+EAA+E;YACjF,WAAW,EAAE;gBACX,QAAQ,EAAE,CAAC;qBACR,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;qBAC3B,QAAQ,CAAC,uEAAuE,CAAC;gBACpF,GAAG,UAAU;aACd;SACF;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;YACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAgD,CAAC;YACvE,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;YAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,OAA6B,CAAC;YACnD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;gBAC9B,IAAI,EAAE,gBAAgB;gBACtB,UAAU,EAAE,OAAO;gBACnB,SAAS;gBACT,OAAO;gBACP,aAAa,EAAE,IAAI;aACpB,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;gBACvE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,4DAA4D,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACrI,CAAC;YACD,IAAI,MAAM;gBACR,OAAO,UAAU,CACf,yBAAyB,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;oBAChE,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAC5C,CAAC;YACJ,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC;gBAC/B,MAAM,EAAE,oCAAoC;gBAC5C,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC1F,OAAO,EAAE,EAAE,OAAO,EAAE;aACrB,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,QAAQ;gBAAE,OAAO,UAAU,CAAC,qBAAqB,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;YACvE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC/D,OAAO,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7G,CAAC;KACF;CACF,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@dockndevai/mcp-kubernetes",
|
|
3
3
|
"mcpName": "io.github.dockndevai/mcp-kubernetes",
|
|
4
|
-
"version": "0.1
|
|
4
|
+
"version": "0.2.1",
|
|
5
5
|
"description": "Model Context Protocol server for Kubernetes — multi-cluster access with security modes and access-control flags.",
|
|
6
6
|
"type": "module",
|
|
7
7
|
"license": "MIT",
|