@n8n/ai-utilities 0.35.3 → 0.36.0

package/dist/cjs/agent-config/index.d.ts

@@ -1,3 +1,4 @@
 export { getProviderPrefix, splitModelId } from './model-id';
 export { getNativeWebSearchProviderTools, hasNativeWebSearchProvider, isNativeWebSearchRequested, } from './native-web-search-provider-tools';
 export { applyNativeWebSearchDefaultOn, reconcileNativeWebSearch, rejectIfDynamicSelectorUsesFromAi, rejectIfEmptyInstructions, rejectIfUnsupportedNativeWebSearch, type AgentConfigValidationMessages, } from './config-normalization';
+export { classifyMcpTool, compileMcpToolPermissions, resolveMcpToolPermission, type CompiledMcpToolPermissions, type McpToolAnnotations, type McpToolDescriptor, } from './mcp-tool-permissions';

package/dist/cjs/agent-config/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.rejectIfUnsupportedNativeWebSearch = exports.rejectIfEmptyInstructions = exports.rejectIfDynamicSelectorUsesFromAi = exports.reconcileNativeWebSearch = exports.applyNativeWebSearchDefaultOn = exports.isNativeWebSearchRequested = exports.hasNativeWebSearchProvider = exports.getNativeWebSearchProviderTools = exports.splitModelId = exports.getProviderPrefix = void 0;
+exports.resolveMcpToolPermission = exports.compileMcpToolPermissions = exports.classifyMcpTool = exports.rejectIfUnsupportedNativeWebSearch = exports.rejectIfEmptyInstructions = exports.rejectIfDynamicSelectorUsesFromAi = exports.reconcileNativeWebSearch = exports.applyNativeWebSearchDefaultOn = exports.isNativeWebSearchRequested = exports.hasNativeWebSearchProvider = exports.getNativeWebSearchProviderTools = exports.splitModelId = exports.getProviderPrefix = void 0;
 var model_id_1 = require("./model-id");
 Object.defineProperty(exports, "getProviderPrefix", { enumerable: true, get: function () { return model_id_1.getProviderPrefix; } });
 Object.defineProperty(exports, "splitModelId", { enumerable: true, get: function () { return model_id_1.splitModelId; } });
@@ -14,4 +14,8 @@ Object.defineProperty(exports, "reconcileNativeWebSearch", { enumerable: true, g
 Object.defineProperty(exports, "rejectIfDynamicSelectorUsesFromAi", { enumerable: true, get: function () { return config_normalization_1.rejectIfDynamicSelectorUsesFromAi; } });
 Object.defineProperty(exports, "rejectIfEmptyInstructions", { enumerable: true, get: function () { return config_normalization_1.rejectIfEmptyInstructions; } });
 Object.defineProperty(exports, "rejectIfUnsupportedNativeWebSearch", { enumerable: true, get: function () { return config_normalization_1.rejectIfUnsupportedNativeWebSearch; } });
+var mcp_tool_permissions_1 = require("./mcp-tool-permissions");
+Object.defineProperty(exports, "classifyMcpTool", { enumerable: true, get: function () { return mcp_tool_permissions_1.classifyMcpTool; } });
+Object.defineProperty(exports, "compileMcpToolPermissions", { enumerable: true, get: function () { return mcp_tool_permissions_1.compileMcpToolPermissions; } });
+Object.defineProperty(exports, "resolveMcpToolPermission", { enumerable: true, get: function () { return mcp_tool_permissions_1.resolveMcpToolPermission; } });
 //# sourceMappingURL=index.js.map

package/dist/cjs/agent-config/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/agent-config/index.ts"],"names":[],"mappings":";;;AAAA,uCAA6D;AAApD,6GAAA,iBAAiB,OAAA;AAAE,wGAAA,YAAY,OAAA;AACxC,uFAI4C;AAH3C,mJAAA,+BAA+B,OAAA;AAC/B,8IAAA,0BAA0B,OAAA;AAC1B,8IAAA,0BAA0B,OAAA;AAE3B,+DAOgC;AAN/B,qIAAA,6BAA6B,OAAA;AAC7B,gIAAA,wBAAwB,OAAA;AACxB,yIAAA,iCAAiC,OAAA;AACjC,iIAAA,yBAAyB,OAAA;AACzB,0IAAA,kCAAkC,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/agent-config/index.ts"],"names":[],"mappings":";;;AAAA,uCAA6D;AAApD,6GAAA,iBAAiB,OAAA;AAAE,wGAAA,YAAY,OAAA;AACxC,uFAI4C;AAH3C,mJAAA,+BAA+B,OAAA;AAC/B,8IAAA,0BAA0B,OAAA;AAC1B,8IAAA,0BAA0B,OAAA;AAE3B,+DAOgC;AAN/B,qIAAA,6BAA6B,OAAA;AAC7B,gIAAA,wBAAwB,OAAA;AACxB,yIAAA,iCAAiC,OAAA;AACjC,iIAAA,yBAAyB,OAAA;AACzB,0IAAA,kCAAkC,OAAA;AAGnC,+DAOgC;AAN/B,uHAAA,eAAe,OAAA;AACf,iIAAA,yBAAyB,OAAA;AACzB,gIAAA,wBAAwB,OAAA"}

package/dist/cjs/agent-config/mcp-tool-permissions.d.ts

@@ -0,0 +1,21 @@
+import type { McpToolCategory, McpToolPermission, McpToolPermissions } from '@n8n/api-types';
+export interface McpToolAnnotations {
+    readOnlyHint?: boolean;
+    destructiveHint?: boolean;
+    idempotentHint?: boolean;
+    openWorldHint?: boolean;
+}
+export interface McpToolDescriptor {
+    name: string;
+    annotations?: McpToolAnnotations;
+}
+export interface CompiledMcpToolPermissions {
+    toolFilter?: {
+        mode: 'exclude';
+        tools: string[];
+    };
+    requireApproval?: boolean | string[];
+}
+export declare function classifyMcpTool(tool: McpToolDescriptor): McpToolCategory;
+export declare function resolveMcpToolPermission(policy: McpToolPermissions, tool: McpToolDescriptor): McpToolPermission;
+export declare function compileMcpToolPermissions(policy: McpToolPermissions, tools: McpToolDescriptor[]): CompiledMcpToolPermissions;

package/dist/cjs/agent-config/mcp-tool-permissions.js

@@ -0,0 +1,92 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.classifyMcpTool = classifyMcpTool;
+exports.resolveMcpToolPermission = resolveMcpToolPermission;
+exports.compileMcpToolPermissions = compileMcpToolPermissions;
+const READ_SEGMENTS = new Set([
+    'describe',
+    'fetch',
+    'find',
+    'get',
+    'inspect',
+    'list',
+    'lookup',
+    'preview',
+    'query',
+    'read',
+    'retrieve',
+    'search',
+]);
+const WRITE_SEGMENTS = new Set([
+    'add',
+    'append',
+    'archive',
+    'cancel',
+    'create',
+    'delete',
+    'disable',
+    'edit',
+    'enable',
+    'execute',
+    'import',
+    'insert',
+    'invite',
+    'move',
+    'publish',
+    'remove',
+    'rename',
+    'restore',
+    'revoke',
+    'run',
+    'send',
+    'set',
+    'submit',
+    'trigger',
+    'update',
+    'upload',
+    'write',
+]);
+function toolNameSegments(name) {
+    return name
+        .replace(/([a-z0-9])([A-Z])/g, '$1_$2')
+        .toLowerCase()
+        .split(/[^a-z0-9]+/)
+        .filter((segment) => segment.length > 0);
+}
+function classifyMcpTool(tool) {
+    const segments = toolNameSegments(tool.name);
+    const hasWriteName = segments.some((segment) => WRITE_SEGMENTS.has(segment));
+    if (tool.annotations?.readOnlyHint === false || tool.annotations?.destructiveHint === true) {
+        return 'write';
+    }
+    if (tool.annotations?.readOnlyHint === true) {
+        return 'read';
+    }
+    if (hasWriteName)
+        return 'write';
+    return segments.some((segment) => READ_SEGMENTS.has(segment)) ? 'read' : 'write';
+}
+function resolveMcpToolPermission(policy, tool) {
+    if (policy.tools && Object.hasOwn(policy.tools, tool.name)) {
+        return policy.tools[tool.name];
+    }
+    return policy.categories[classifyMcpTool(tool)];
+}
+function compileMcpToolPermissions(policy, tools) {
+    const blockedTools = [];
+    const approvalTools = [];
+    for (const tool of tools) {
+        const permission = resolveMcpToolPermission(policy, tool);
+        if (permission === 'blocked') {
+            blockedTools.push(tool.name);
+            continue;
+        }
+        if (permission === 'require_approval')
+            approvalTools.push(tool.name);
+    }
+    return {
+        toolFilter: { mode: 'exclude', tools: blockedTools },
+        requireApproval: approvalTools,
+    };
+}
+//# sourceMappingURL=mcp-tool-permissions.js.map

package/dist/cjs/agent-config/mcp-tool-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tool-permissions.js","sourceRoot":"","sources":["../../../src/agent-config/mcp-tool-permissions.ts"],"names":[],"mappings":";;;;;AAmBA,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC7B,UAAU;IACV,OAAO;IACP,MAAM;IACN,KAAK;IACL,SAAS;IACT,MAAM;IACN,QAAQ;IACR,SAAS;IACT,OAAO;IACP,MAAM;IACN,UAAU;IACV,QAAQ;CACR,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC9B,KAAK;IACL,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,MAAM;IACN,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,KAAK;IACL,MAAM;IACN,KAAK;IACL,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,OAAO;CACP,CAAC,CAAC;AAEH,SAAS,gBAAgB,CAAC,IAAY;IACrC,OAAO,IAAI;SACT,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACtC,WAAW,EAAE;SACb,KAAK,CAAC,YAAY,CAAC;SACnB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,yBAAgC,IAAuB;IACtD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAE7E,IAAI,IAAI,CAAC,WAAW,EAAE,YAAY,KAAK,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,eAAe,KAAK,IAAI,EAAE,CAAC;QAC5F,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,IAAI,IAAI,CAAC,WAAW,EAAE,YAAY,KAAK,IAAI,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC;IACf,CAAC;IAED,IAAI,YAAY;QAAE,OAAO,OAAO,CAAC;IAEjC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;AAClF,CAAC;AAED,kCACC,MAA0B,EAC1B,IAAuB;IAEvB,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,mCACC,MAA0B,EAC1B,KAA0B;IAE1B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,wBAAwB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC9B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,SAAS;QACV,CAAC;QAED,IAAI,UAAU,KAAK,kBAAkB;YAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC;IAED,OAAO;QACN,UAAU,EAAE,EAAE,IAAI,EAAE,SAAkB,EAAE,KAAK,EAAE,YAAY,EAAE;QAC7D,eAAe,EAAE,aAAa;KAC9B,CAAC;AACH,CAAC"}