@myvillage/cli 1.65.0 → 1.66.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@myvillage/cli",
-  "version": "1.65.0",
+  "version": "1.66.0",
   "description": "MyVillageOS CLI for community developers",
   "type": "module",
   "bin": {

package/src/agent-runtime/mcp-client.js

@@ -156,7 +156,12 @@ export async function getMCPTools(agentDir, agentConfig) {
       }
 
       activeClients.push(client);
-      const tools = await client.tools();
+      // Per-server tool allowlist (least privilege). When `allowed_tools` is a
+      // non-empty array in tools.yaml, expose ONLY those tools to the agent and
+      // withhold everything else this server offers (e.g. grant `network_feed`
+      // but not `wallet_send`). Absent/empty → all tools, the backward-compatible
+      // default.
+      const tools = applyToolAllowlist(await client.tools(), server.allowed_tools, name);
       const toolNames = Object.keys(tools);
       Object.assign(allTools, tools);
       servers.push({
@@ -182,6 +187,29 @@ export async function getMCPTools(agentDir, agentConfig) {
   return { tools: allTools, servers };
 }
 
+/**
+ * Restrict a server's tools to an allowlist. `allowed` is the `allowed_tools`
+ * array from a tools.yaml server entry; when it's missing or empty, all tools
+ * pass through unchanged (backward-compatible). Allowlisted names that the
+ * server doesn't actually expose are logged so a typo or a removed/renamed tool
+ * is visible rather than silently dropping the scope to nothing.
+ */
+export function applyToolAllowlist(tools, allowed, serverName) {
+  if (!Array.isArray(allowed) || allowed.length === 0) return tools;
+  const allow = new Set(allowed);
+  const filtered = {};
+  for (const [name, tool] of Object.entries(tools)) {
+    if (allow.has(name)) filtered[name] = tool;
+  }
+  const unknown = allowed.filter((n) => !(n in tools));
+  if (unknown.length > 0) {
+    console.error(
+      `[mcp-client] ${serverName}: allowed_tools lists ${unknown.length} tool(s) this server doesn't expose: ${unknown.join(', ')}`,
+    );
+  }
+  return filtered;
+}
+
 export async function cleanupMCPClients() {
   for (const client of activeClients) {
     try { await client.close(); } catch { /* ignore */ }