@drupalmcp/adk 0.1.0 → 0.1.1

package/README.md

@@ -69,9 +69,16 @@ every turn.
 
 ```ts
 drupalTools({ auth, only: ['tool_api__tool_belt_entity_list'] });
+drupalTools({ auth, except: ['tool_api__tool_belt_entity_bundle_list'] });
 ```
 
-`only` narrows the tool list. It is a convenience, not a boundary: what the
-agent may actually do is decided by the credential's scopes on the server.
+`only` narrows the tool list and `except` removes from it. Both are a
+convenience, not a boundary: what the agent may actually do is decided by the
+credential's scopes on the server.
+
+`except` earns its keep for a tool the site publishes that this credential can
+never run. Listing a content type's bundles, for instance, needs an
+administrator permission an agent should not have, so offering the tool only
+invites a refusal in the middle of a job.
 
 Apache-2.0. Part of [drupalmcp-ts](https://github.com/Omedia/drupalmcp-ts).

package/dist/index.d.ts

@@ -72,6 +72,12 @@ interface DrupalToolsOptions {
      * site publishes; the credential's scopes still decide what may run.
      */
     only?: string[];
+    /**
+     * Leave these tools out. Useful for a tool the site publishes but this
+     * credential can never run, such as one that needs an administrator
+     * permission: offering it only invites a refusal mid-conversation.
+     */
+    except?: string[];
     /** Prefix added to every tool name, for telling two sites apart. */
     prefix?: string;
 }
@@ -203,6 +209,6 @@ declare function scopeFromChallenge(challenge: string | null | undefined): strin
 declare function describeRefusal(error: unknown): string | null;
 
 /** Kept in step with package.json; sent as the user agent. */
-declare const VERSION = "0.1.0";
+declare const VERSION = "0.1.1";
 
 export { AUTHENTICATION_REQUIRED_CODE, type AgentDefinition, type AgentSummary, type DrupalAgentOptions, DrupalOAuth, type DrupalOAuthOptions, type DrupalToolsOptions, INSUFFICIENT_SCOPE_CODE, type JsonSchema, VERSION, describeRefusal, drupalAgent, drupalTools, listAgents, normaliseSchema, promptFrom, scopeFromChallenge };

package/dist/index.js

@@ -194,11 +194,11 @@ function walk(node, isProperty) {
 }
 
 // src/version.ts
-var VERSION = "0.1.0";
+var VERSION = "0.1.1";
 
 // src/toolset.ts
 function drupalTools(options) {
-  const { auth, only, prefix } = options;
+  const { auth, only, except, prefix } = options;
   const baseUrl = (options.baseUrl ?? auth.baseUrl).replace(/\/+$/, "");
   const lastChallenge = { value: null };
   const toolset = new MCPToolset(
@@ -219,7 +219,7 @@ function drupalTools(options) {
         }
       }
     },
-    only,
+    toolFilter(only, except),
     prefix
   );
   return prepareTools(toolset, lastChallenge);
@@ -251,6 +251,14 @@ function prepareTools(toolset, lastChallenge) {
   };
   return toolset;
 }
+function toolFilter(only, except) {
+  if (!except?.length) {
+    return only;
+  }
+  const blocked = new Set(except);
+  const wanted = only ? new Set(only) : null;
+  return (tool) => !blocked.has(tool.name) && (wanted === null || wanted.has(tool.name));
+}
 function withScope(message, scope) {
   return message.replace("is not allowed to do that", `does not hold the ${scope} scope`);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drupalmcp/adk",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Use a Drupal site from a Google ADK agent: OAuth, scoped MCP tools, and agents defined in Drupal.",
   "license": "Apache-2.0",
   "type": "module",