@ethosagent/core 0.4.1 → 0.4.2

package/dist/index.js

@@ -321,6 +321,7 @@ function defaultAlwaysDeny() {
 import { readFileSync } from "fs";
 var ENV_TO_REF = {
   ANTHROPIC_API_KEY: "providers/anthropic/apiKey",
+  AZURE_API_KEY: "providers/azure/apiKey",
   OPENAI_API_KEY: "providers/openai/apiKey",
   OPENROUTER_API_KEY: "providers/openrouter/apiKey",
   GEMINI_API_KEY: "providers/gemini/apiKey",
@@ -1582,6 +1583,7 @@ function validateRegistration(tool, personality) {
 
 // src/tool-registry.ts
 function needsBackends(caps) {
+  if (!caps) return false;
   return !!(caps.network || caps.secrets || caps.storage || caps.fs_reach || caps.process || caps.attachments);
 }
 function mcpServerName(toolName) {
@@ -2038,7 +2040,8 @@ var AgentLoop = class {
     const allowedPlugins = personality.plugins ?? [];
     const mcpServers = this.mcpPolicy?.servers;
     const allowedMcpTools = mcpServers ? Object.fromEntries(
-      Object.entries(mcpServers).filter(([, v]) => v.tools !== void 0).map(([k, v]) => {
+      Object.entries(mcpServers).filter(([, v]) => v.tools !== void 0 || v.enabled === false).map(([k, v]) => {
+        if (v.enabled === false) return [k, []];
         const tools = v.tools;
         return [k, tools ?? []];
       })
@@ -2600,6 +2603,30 @@ ${rendered.slice(-MEMORY_MAX_CHARS)}`;
           continue;
         }
         const effectiveArgs = beforeResult.args ?? tc.args;
+        const enabledError = checkMcpEnabled(this.mcpPolicy, tc.toolName);
+        if (enabledError) {
+          this.observability?.recordSafetyBlock({
+            traceId,
+            code: "tool_blocked",
+            cause: enabledError
+          });
+          observe({ type: "tool_end", toolName: tc.toolName, ok: false });
+          yield {
+            type: "tool_end",
+            toolCallId: tc.toolCallId,
+            toolName: tc.toolName,
+            ok: false,
+            durationMs: 0,
+            result: enabledError
+          };
+          prepped.push({
+            toolCallId: tc.toolCallId,
+            name: tc.toolName,
+            args: effectiveArgs,
+            rejected: enabledError
+          });
+          continue;
+        }
         const rejectError = checkMcpRejectArgs(this.mcpPolicy, tc.toolName, effectiveArgs);
         if (rejectError) {
           this.observability?.recordSafetyBlock({
@@ -3152,6 +3179,18 @@ function checkMcpRejectArgs(mcpPolicy, toolName, args) {
   }
   return void 0;
 }
+function checkMcpEnabled(mcpPolicy, toolName) {
+  const servers = mcpPolicy?.servers;
+  if (!servers || !toolName.startsWith("mcp__")) return void 0;
+  const firstSep = toolName.indexOf("__");
+  const secondSep = toolName.indexOf("__", firstSep + 2);
+  if (secondSep === -1) return void 0;
+  const server = toolName.slice(firstSep + 2, secondSep);
+  if (servers[server]?.enabled === false) {
+    return `MCP policy: server '${server}' is disabled for this personality`;
+  }
+  return void 0;
+}
 function describeSource(toolName, args) {
   if (!args || typeof args !== "object") return void 0;
   const a = args;