@segmentstream-cloud/ontology 0.26.1 → 0.26.2

package/dist/action.d.ts

@@ -18,7 +18,9 @@ export interface ActionContext<Input, Prepared = undefined> extends PrepareConte
 /** What `prepare` may fail with: the action errors, and connection calls that failed. */
 export type PrepareError = ActionError | ConnectionError;
 /**
- * How an action behaves. Agents confirm destructive or irreversible actions before preparation.
+ * How an action behaves. Agents confirm destructive, irreversible or external actions before
+ * preparation. Actions with connections are external even when both safety hints are false.
+ * Permitted, routine reversible actions can run without confirmation.
  * Custom actions without safety labels require confirmation for backwards compatibility.
  * Idempotence does not decide whether confirmation is needed.
  */

package/dist/service/mcp/server.js

@@ -336,6 +336,11 @@ function instructions({ built }, permissions) {
             : []),
         "Call describe for the full catalog: properties, relationships, measures and the actions " +
             "you may run.",
+        "Use the authenticated tool annotations for confirmation: permitted actions classified as " +
+            "non-destructive and reversible need no extra approval. Destructive, irreversible or " +
+            "external actions (openWorldHint) require confirmation before preparation; idempotence " +
+            "alone does not waive it. Present confirmations in the conversation's language using " +
+            "action, entity, field and option labels and readable record titles, never tool names, ids or JSON.",
     ].join("\n\n");
 }
 function negotiate(requested) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@segmentstream-cloud/ontology",
-  "version": "0.26.1",
+  "version": "0.26.2",
   "description": "Define a SegmentStream workspace app's ontology: entities, relationships, roles and actions, written with Effect.",
   "license": "Apache-2.0",
   "author": "SegmentStream",