@lunora/mcp 1.0.0-alpha.13 → 1.0.0-alpha.15

package/dist/bin.mjs

@@ -1,6 +1,8 @@
 #!/usr/bin/env node
-import { connectStdio } from './packem_shared/connectStdio-C_mvQBs2.mjs';
+import { connectStdio } from './packem_shared/connectStdio-nl-Tt_T1.mjs';
 
+const ENABLED_ENV_VALUES = /* @__PURE__ */ new Set(["1", "on", "true", "yes"]);
+const isEnvEnabled = (value) => value !== void 0 && ENABLED_ENV_VALUES.has(value.trim().toLowerCase());
 class BinError extends Error {
   code;
   constructor(message, code) {
@@ -20,7 +22,7 @@ const runBin = async (environment, dependencies = {}) => {
     throw new BinError("LUNORA_URL environment variable is required", 1);
   }
   try {
-    await connect({ token: environment.LUNORA_ADMIN_TOKEN, url });
+    await connect({ allowWrites: isEnvEnabled(environment.LUNORA_MCP_ALLOW_WRITES), token: environment.LUNORA_ADMIN_TOKEN, url });
   } catch (error) {
     const message = error instanceof Error ? error.message : String(error);
     writeError(`lunora-mcp: failed to start — ${message}

package/dist/index.d.mts

@@ -1,6 +1,7 @@
 import { LunoraClient } from '@lunora/client';
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 interface LunoraMcpServerOptions {
+  allowWrites?: boolean;
   client?: LunoraClient;
   fetch?: typeof fetch;
   token?: string;
@@ -25,6 +26,8 @@ interface ToolResult {
   }[];
   isError?: boolean;
 }
-declare const TOOL_DEFINITIONS: ReadonlyArray<ToolDefinition>;
-declare const callTool: (client: LunoraClient, name: string, input: Record<string, unknown>) => Promise<ToolResult>;
-export { type LunoraMcpServerOptions, TOOL_DEFINITIONS, type ToolDefinition, type ToolInputSchema, type ToolResult, callTool, connectStdio, createLunoraMcpServer };
+declare const READ_ONLY_TOOL_DEFINITIONS: ReadonlyArray<ToolDefinition>;
+declare const WRITE_TOOL_DEFINITIONS: ReadonlyArray<ToolDefinition>;
+declare const toolDefinitions: (allowWrites: boolean) => ReadonlyArray<ToolDefinition>;
+declare const callTool: (client: LunoraClient, name: string, input: Record<string, unknown>, allowWrites?: boolean) => Promise<ToolResult>;
+export { type LunoraMcpServerOptions, READ_ONLY_TOOL_DEFINITIONS, type ToolDefinition, type ToolInputSchema, type ToolResult, WRITE_TOOL_DEFINITIONS, callTool, connectStdio, createLunoraMcpServer, toolDefinitions };

package/dist/index.d.ts

@@ -1,6 +1,7 @@
 import { LunoraClient } from '@lunora/client';
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 interface LunoraMcpServerOptions {
+  allowWrites?: boolean;
   client?: LunoraClient;
   fetch?: typeof fetch;
   token?: string;
@@ -25,6 +26,8 @@ interface ToolResult {
   }[];
   isError?: boolean;
 }
-declare const TOOL_DEFINITIONS: ReadonlyArray<ToolDefinition>;
-declare const callTool: (client: LunoraClient, name: string, input: Record<string, unknown>) => Promise<ToolResult>;
-export { type LunoraMcpServerOptions, TOOL_DEFINITIONS, type ToolDefinition, type ToolInputSchema, type ToolResult, callTool, connectStdio, createLunoraMcpServer };
+declare const READ_ONLY_TOOL_DEFINITIONS: ReadonlyArray<ToolDefinition>;
+declare const WRITE_TOOL_DEFINITIONS: ReadonlyArray<ToolDefinition>;
+declare const toolDefinitions: (allowWrites: boolean) => ReadonlyArray<ToolDefinition>;
+declare const callTool: (client: LunoraClient, name: string, input: Record<string, unknown>, allowWrites?: boolean) => Promise<ToolResult>;
+export { type LunoraMcpServerOptions, READ_ONLY_TOOL_DEFINITIONS, type ToolDefinition, type ToolInputSchema, type ToolResult, WRITE_TOOL_DEFINITIONS, callTool, connectStdio, createLunoraMcpServer, toolDefinitions };

package/dist/index.mjs

@@ -1,2 +1,2 @@
-export { connectStdio, createLunoraMcpServer } from './packem_shared/connectStdio-C_mvQBs2.mjs';
-export { TOOL_DEFINITIONS, callTool } from './packem_shared/TOOL_DEFINITIONS-Dpiu38ji.mjs';
+export { connectStdio, createLunoraMcpServer } from './packem_shared/connectStdio-nl-Tt_T1.mjs';
+export { READ_ONLY_TOOL_DEFINITIONS, WRITE_TOOL_DEFINITIONS, callTool, toolDefinitions } from './packem_shared/READ_ONLY_TOOL_DEFINITIONS-DV2VkuuU.mjs';

package/dist/packem_shared/{TOOL_DEFINITIONS-Dpiu38ji.mjs → READ_ONLY_TOOL_DEFINITIONS-DV2VkuuU.mjs}

@@ -15,7 +15,7 @@ const FUNCTION_PATH_INPUT_SCHEMA = {
   required: ["functionPath"],
   type: "object"
 };
-const TOOL_DEFINITIONS = [
+const READ_ONLY_TOOL_DEFINITIONS = [
   {
     description: "List the deployment's public functions (queries, mutations, actions) with their kinds.",
     inputSchema: NO_INPUT_SCHEMA,
@@ -35,7 +35,9 @@ const TOOL_DEFINITIONS = [
     description: "Run a query and return its result. Read-only.",
     inputSchema: RUN_INPUT_SCHEMA,
     name: "lunora_run_query"
-  },
+  }
+];
+const WRITE_TOOL_DEFINITIONS = [
   {
     description: "Run a mutation and return its result. Writes data — use with care.",
     inputSchema: RUN_INPUT_SCHEMA,
@@ -47,6 +49,14 @@ const TOOL_DEFINITIONS = [
     name: "lunora_run_action"
   }
 ];
+const WRITE_TOOL_NAMES = new Set(WRITE_TOOL_DEFINITIONS.map((tool) => tool.name));
+const toolDefinitions = (allowWrites) => (
+  // Fail closed: only the boolean `true` opts in. These are exported helpers, so
+  // an env-plumbed/JS caller could pass a truthy string like `"false"`/`"0"` —
+  // the explicit `=== true` guards that despite the declared `boolean` type.
+  // eslint-disable-next-line @typescript-eslint/no-unnecessary-boolean-literal-compare -- intentional runtime guard at an exported API boundary against non-boolean callers
+  allowWrites === true ? [...READ_ONLY_TOOL_DEFINITIONS, ...WRITE_TOOL_DEFINITIONS] : READ_ONLY_TOOL_DEFINITIONS
+);
 const readFunctionPath = (input) => {
   const { functionPath } = input;
   if (typeof functionPath !== "string" || functionPath.length === 0) {
@@ -69,8 +79,26 @@ const ok = (value) => {
   const text = value === void 0 ? "null" : JSON.stringify(value, void 0, 2);
   return { content: [{ text, type: "text" }] };
 };
-const callTool = async (client, name, input) => {
+const assertRunnable = async (client, functionPath, expectedKind) => {
+  const functions = await client.listFunctions();
+  const descriptor = functions.find((function_) => function_.path === functionPath);
+  if (descriptor === void 0) {
+    throw new Error(`function not found or not public: ${functionPath}`);
+  }
+  if (descriptor.kind !== expectedKind) {
+    throw new Error(`function ${functionPath} is a ${descriptor.kind}, not a ${expectedKind}`);
+  }
+};
+const callTool = async (client, name, input, allowWrites = false) => {
   try {
+    if (allowWrites !== true && WRITE_TOOL_NAMES.has(name)) {
+      return {
+        content: [
+          { text: `tool "${name}" is disabled: this MCP server is read-only. Enable writes with the LUNORA_MCP_ALLOW_WRITES env var.`, type: "text" }
+        ],
+        isError: true
+      };
+    }
     switch (name) {
       case "lunora_get_function_schema": {
         const functionPath = readFunctionPath(input);
@@ -89,14 +117,17 @@ const callTool = async (client, name, input) => {
       }
       case "lunora_run_action": {
         const { args, functionPath, shardKey } = readRunArguments(input);
+        await assertRunnable(client, functionPath, "action");
         return ok(await client.action(reference(functionPath), args, { shardKey }));
       }
       case "lunora_run_mutation": {
         const { args, functionPath, shardKey } = readRunArguments(input);
+        await assertRunnable(client, functionPath, "mutation");
         return ok(await client.mutation(reference(functionPath), args, { shardKey }));
       }
       case "lunora_run_query": {
         const { args, functionPath, shardKey } = readRunArguments(input);
+        await assertRunnable(client, functionPath, "query");
         return ok(await client.query(reference(functionPath), args, { shardKey }));
       }
       default: {
@@ -109,4 +140,4 @@ const callTool = async (client, name, input) => {
   }
 };
 
-export { TOOL_DEFINITIONS, callTool };
+export { READ_ONLY_TOOL_DEFINITIONS, WRITE_TOOL_DEFINITIONS, callTool, toolDefinitions };

package/dist/packem_shared/{connectStdio-C_mvQBs2.mjs → connectStdio-nl-Tt_T1.mjs}

@@ -5,7 +5,7 @@ import { LunoraClient } from '@lunora/client';
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { ListToolsRequestSchema, CallToolRequestSchema } from '@modelcontextprotocol/sdk/types.js';
-import { TOOL_DEFINITIONS, callTool } from './TOOL_DEFINITIONS-Dpiu38ji.mjs';
+import { toolDefinitions, callTool } from './READ_ONLY_TOOL_DEFINITIONS-DV2VkuuU.mjs';
 
 const resolveVersion = () => {
   try {
@@ -45,12 +45,13 @@ const resolveClient = (options) => {
 };
 const createLunoraMcpServer = (options) => {
   const client = resolveClient(options);
+  const allowWrites = options.allowWrites ?? false;
   const server = new Server(SERVER_INFO, { capabilities: { tools: {} } });
   server.setRequestHandler(ListToolsRequestSchema, () => {
-    return { tools: [...TOOL_DEFINITIONS] };
+    return { tools: [...toolDefinitions(allowWrites)] };
   });
   server.setRequestHandler(CallToolRequestSchema, async (request) => {
-    const result = await callTool(client, request.params.name, request.params.arguments ?? {});
+    const result = await callTool(client, request.params.name, request.params.arguments ?? {}, allowWrites);
     return result;
   });
   return server;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/mcp",
-  "version": "1.0.0-alpha.13",
+  "version": "1.0.0-alpha.15",
   "description": "Model Context Protocol server exposing a Lunora deployment to AI agents",
   "keywords": [
     "ai-agents",
@@ -49,7 +49,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/client": "1.0.0-alpha.13",
+    "@lunora/client": "1.0.0-alpha.15",
     "@modelcontextprotocol/sdk": "^1.29.0"
   },
   "engines": {