@kitae9999/openlog-cli 1.0.0 → 1.1.0

package/dist/mcp-toolkit.js

@@ -0,0 +1,115 @@
+import { hasMcpCapability, } from "./mcp-permissions.js";
+export const READ_TOOL_ANNOTATIONS = {
+    readOnlyHint: true,
+    destructiveHint: false,
+    idempotentHint: true,
+    openWorldHint: true,
+};
+export const WRITE_TOOL_ANNOTATIONS = {
+    readOnlyHint: false,
+    destructiveHint: false,
+    idempotentHint: false,
+    openWorldHint: true,
+};
+export const IDEMPOTENT_WRITE_TOOL_ANNOTATIONS = {
+    ...WRITE_TOOL_ANNOTATIONS,
+    idempotentHint: true,
+};
+export const DELETE_TOOL_ANNOTATIONS = {
+    readOnlyHint: false,
+    destructiveHint: true,
+    idempotentHint: false,
+    openWorldHint: true,
+};
+export class McpToolRegistry {
+    server;
+    permissions;
+    createAuthenticatedClient;
+    toolNames = [];
+    constructor(server, permissions, createAuthenticatedClient) {
+        this.server = server;
+        this.permissions = permissions;
+        this.createAuthenticatedClient = createAuthenticatedClient;
+    }
+    registerAuthenticated(name, capability, config, handler) {
+        // 허용되지 않은 도구는 MCP tools/list 응답에도 나타나지 않게 등록 자체를 생략한다.
+        if (!hasMcpCapability(this.permissions, capability)) {
+            return;
+        }
+        const callback = (async (args) => {
+            // 목록 노출 여부와 별개로 실행 직전에도 권한을 확인해 우회 호출을 막는다.
+            if (!hasMcpCapability(this.permissions, capability)) {
+                return permissionDeniedResult(name, capability);
+            }
+            return withAuthenticatedClient(this.createAuthenticatedClient, (client) => handler(client, args));
+        });
+        this.server.registerTool(name, config, callback);
+        this.toolNames.push(name);
+    }
+    registerLocal(name, capability, config, handler) {
+        // 인증이 필요 없는 로컬 도구도 동일한 capability 정책을 적용한다.
+        if (!hasMcpCapability(this.permissions, capability)) {
+            return;
+        }
+        const callback = (async (args) => {
+            if (!hasMcpCapability(this.permissions, capability)) {
+                return permissionDeniedResult(name, capability);
+            }
+            try {
+                return textResult(await handler(args));
+            }
+            catch (error) {
+                return errorResult(error);
+            }
+        });
+        this.server.registerTool(name, config, callback);
+        this.toolNames.push(name);
+    }
+}
+export async function withAuthenticatedClient(createAuthenticatedClient, callback) {
+    try {
+        const client = await createAuthenticatedClient();
+        return textResult(await callback(client));
+    }
+    catch (error) {
+        // API·인증 오류를 throw하지 않고 MCP 표준 isError 응답으로 정규화한다.
+        return errorResult(error);
+    }
+}
+export function textResult(value) {
+    const serialized = typeof value === "string" ? value : JSON.stringify(value, null, 2);
+    return {
+        content: [
+            {
+                type: "text",
+                text: serialized ?? "null",
+            },
+        ],
+    };
+}
+export function createContentPreview(content) {
+    const preview = content.replace(/\s+/g, " ").trim();
+    return preview.length > 500 ? `${preview.slice(0, 497)}...` : preview;
+}
+function permissionDeniedResult(name, capability) {
+    return {
+        content: [
+            {
+                type: "text",
+                text: `MCP tool ${name} requires the ${capability} capability. Change the profile with \`openlog mcp permissions set\` and restart the MCP server.`,
+            },
+        ],
+        isError: true,
+    };
+}
+function errorResult(error) {
+    return {
+        content: [
+            {
+                type: "text",
+                text: error instanceof Error ? error.message : String(error),
+            },
+        ],
+        isError: true,
+    };
+}