@studiometa/productive-mcp 0.10.17 → 0.10.18

package/README.md

@@ -9,6 +9,7 @@ MCP (Model Context Protocol) server for [Productive.io](https://productive.io).
 ## Features
 
 - Single unified `productive` tool — minimal token overhead (~170 tokens)
+- Read-only `productive_read` sibling tool (`readOnlyHint: true`) for clients that only allow read-only tools
 - Smart ID resolution — use emails and project numbers instead of numeric IDs
 - Rich context — `action=context` fetches a resource with all related data in one call
 - Proactive suggestions — data-aware warnings (overdue tasks, long-running timers, etc.)
@@ -132,6 +133,17 @@ productive(resource, action, ...)
 
 Use `action="help"` with any resource for detailed documentation on available parameters and filters.
 
+### Read-only Tool
+
+Some MCP clients only expose tools that have the `readOnlyHint: true` annotation. For these clients, the server also exposes `productive_read`.
+
+| Tool              | Description                                                                              |
+| ----------------- | ---------------------------------------------------------------------------------------- |
+| `productive`      | All resources and actions, reads and writes                                              |
+| `productive_read` | Same routing and read parameters as `productive`, but only read actions (`readOnlyHint`) |
+
+`productive_read` rejects the actions that change data (`create`, `update`, `delete`, `start`, `stop`, `reopen`, `complete_task`, `log_day`, and `resolve` on `discussions`). It also rejects a `batch` that contains one of these actions. Use the `productive` tool for writes.
+
 ### Common Parameters
 
 | Parameter           | Type     | Description                                                   |

package/dist/handlers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/handlers/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExD,OAAO,KAAK,EAAkB,UAAU,EAAE,MAAM,YAAY,CAAC;AA0C7D,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AA8I7C;;GAEG;AACH,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,WAAW,EAAE,qBAAqB,GACjC,OAAO,CAAC,UAAU,CAAC,CAuMrB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/handlers/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAExD,OAAO,KAAK,EAAkB,UAAU,EAAE,MAAM,YAAY,CAAC;AA0C7D,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAkK7C;;GAEG;AACH,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,WAAW,EAAE,qBAAqB,GACjC,OAAO,CAAC,UAAU,CAAC,CAqNrB"}

package/dist/{handlers-Dk4AQQ3K.js → handlers-DEpVjmEe.js}

@@ -1,5 +1,5 @@
 import { ProductiveApi, formatActivity, formatAttachment, formatBooking, formatComment, formatCompany, formatCustomField, formatDeal, formatDiscussion, formatListResponse, formatPage, formatPerson, formatProject, formatService, formatTask, formatTimeEntry, formatTimer } from "@studiometa/productive-api";
-import { ACTIONS, REPORT_TYPES, RESOURCES, ResolveError, VALID_REPORT_TYPES, completeTask, createBooking, createComment, createCompany, createDeal, createDiscussion, createPage, createTask, createTimeEntry, deleteAttachment, deleteDiscussion, deletePage, deleteTimeEntry, fromHandlerContext, getAttachment, getBooking, getComment, getCompany, getCustomField, getDeal, getDealContext, getDiscussion, getMyDaySummary, getPage, getPerson, getProject, getProjectContext, getProjectHealthSummary, getReport, getService, getTask, getTaskContext, getTeamPulseSummary, getTimeEntry, getTimer, listActivities, listAttachments, listBookings, listComments, listCompanies, listCustomFields, listDeals, listDiscussions, listPages, listPeople, listProjects, listServices, listTasks, listTimeEntries, listTimers, logDay, readApi, reopenDiscussion, resolveDiscussion, resolveResource, startTimer, stopTimer, updateBooking, updateComment, updateCompany, updateDeal, updateDiscussion, updatePage, updateTask, updateTimeEntry, weeklyStandup, writeApi } from "@studiometa/productive-core";
+import { ACTIONS, REPORT_TYPES, RESOURCES, ResolveError, VALID_REPORT_TYPES, completeTask, createBooking, createComment, createCompany, createDeal, createDiscussion, createPage, createTask, createTimeEntry, deleteAttachment, deleteDiscussion, deletePage, deleteTimeEntry, fromHandlerContext, getAttachment, getBooking, getComment, getCompany, getCustomField, getDeal, getDealContext, getDiscussion, getMyDaySummary, getPage, getPerson, getProject, getProjectContext, getProjectHealthSummary, getReport, getService, getTask, getTaskContext, getTeamPulseSummary, getTimeEntry, getTimer, isReadCall, listActivities, listAttachments, listBookings, listComments, listCompanies, listCustomFields, listDeals, listDiscussions, listPages, listPeople, listProjects, listServices, listTasks, listTimeEntries, listTimers, logDay, readApi, reopenDiscussion, resolveDiscussion, resolveResource, startTimer, stopTimer, updateBooking, updateComment, updateCompany, updateDeal, updateDiscussion, updatePage, updateTask, updateTimeEntry, weeklyStandup, writeApi } from "@studiometa/productive-core";
 import variant from "@jitl/quickjs-singlefile-cjs-release-sync";
 import { newQuickJSWASMModuleFromVariant } from "quickjs-emscripten-core";
 import { timingSafeEqual } from "node:crypto";
@@ -40870,21 +40870,27 @@ async function handleReports(action, args, ctx) {
 }
 //#endregion
 //#region src/run/bridge.ts
-/** Productive actions that mutate data — intercepted in dry-run mode. */
-var MUTATING_ACTIONS = new Set([
-	"create",
-	"update",
-	"delete",
-	"start",
-	"stop",
-	"reopen",
-	"complete_task",
-	"log_day"
-]);
-/** Whether a call would mutate data (used for dry-run classification). */
+/**
+* Host-side capability bridge for sandboxed scripts.
+*
+* The QuickJS sandbox has no direct network, filesystem, or process access.
+* The only way a script reaches the Productive API is through this bridge,
+* which re-enters the exact same `executeToolWithCredentials` pipeline used by
+* every other MCP tool call — the real HTTP request happens here, on the host. That means scripts automatically inherit credential scoping, rate
+* limiting, include validation, and formatting — and egress is constrained to
+* the Productive API by construction.
+*
+* The bridge also enforces the per-run API-call budget, honours the run's
+* abort signal (wall-clock timeout), and implements dry-run by classifying
+* mutating operations and recording them instead of executing.
+*/
+/**
+* Whether a call may mutate data (used for dry-run classification). Fails
+* closed: a `productive` call that is not a known read is recorded.
+*/
 function isMutating(channel, payload) {
 	if (channel === "api_write") return true;
-	if (channel === "productive") return MUTATING_ACTIONS.has(String(payload.action));
+	if (channel === "productive") return !isReadCall(payload.resource, payload.action);
 	return false;
 }
 /** Map a channel to its tool name. */
@@ -42268,6 +42274,20 @@ async function routeToHandler(resource, action, restArgs, resolveArgs, ctx, cred
 	}
 }
 /**
+* Find the first call in a `productive_read` request that is not a read,
+* including the operations of a batch (recursively, since a batch operation
+* may itself be a batch). This is an allowlist (see `isReadCall`): unknown or
+* non-string actions are rejected too. Returns a label for the rejected
+* action, or undefined when the whole request only reads.
+*/
+function findNonReadAction(args) {
+	if (!isReadCall(args.resource, args.action)) return JSON.stringify(args.action) ?? "undefined";
+	if (args.resource === "batch" && Array.isArray(args.operations)) for (const op of args.operations) {
+		const found = findNonReadAction(op && typeof op === "object" ? op : {});
+		if (found) return found;
+	}
+}
+/**
 * Execute a tool with the given credentials and arguments
 */
 async function executeToolWithCredentials(name, args, credentials) {
@@ -42311,6 +42331,11 @@ async function executeToolWithCredentials(name, args, credentials) {
 		if (!parsed.success) return inputErrorResult(new UserInputError(formatValidationErrors(parsed.error)));
 		return handleRunScript(parsed.data, credentials, executeToolWithCredentials);
 	}
+	if (name === "productive_read") {
+		const rejectedAction = findNonReadAction(args);
+		if (rejectedAction) return inputErrorResult(new UserInputError(`Action ${rejectedAction} is not allowed on the read-only tool`, ["productive_read only supports read actions (list, get, resolve, context, help, schema, ...)", `Use the \`productive\` tool to run ${rejectedAction}`]));
+		return executeToolWithCredentials("productive", args, credentials);
+	}
 	if (name !== "productive") return errorResult(`Unknown tool: ${name}`);
 	const typedArgs = args;
 	if (typedArgs.resource === "batch") return handleBatch(typedArgs.operations, credentials, executeToolWithCredentials);
@@ -42379,4 +42404,4 @@ async function executeToolWithCredentials(name, args, credentials) {
 //#endregion
 export { handleSummaries as C, handlePeople as D, handleProjects as E, handleDeals as O, handleTasks as S, handleSchemaOverview as T, record as _, _null as a, unknown as b, custom as c, literal as d, looseObject as f, preprocess as g, optional as h, _enum as i, discriminatedUnion as l, object as m, resolveRunnerConfig as n, array as o, number as p, runnerTokenMatches as r, boolean as s, executeToolWithCredentials as t, intersection as u, string as v, handleServices as w, datetime as x, union as y };
 
-//# sourceMappingURL=handlers-Dk4AQQ3K.js.map
+//# sourceMappingURL=handlers-DEpVjmEe.js.map