@t4dhg/mcp-factorial 7.0.1 → 8.2.0

package/dist/tools/work-areas.js

@@ -0,0 +1,85 @@
+/**
+ * Work Areas tool registration
+ */
+import * as z from 'zod';
+import { textResponse, formatToolError } from '../tool-utils.js';
+import { listWorkAreas, getWorkArea, createWorkArea, updateWorkArea, archiveWorkArea, unarchiveWorkArea, } from '../api/index.js';
+export function registerWorkAreasTool(server) {
+    server.registerTool('factorial_work_areas', {
+        title: 'FactorialHR Work Areas',
+        description: 'Manage work areas within locations',
+        inputSchema: {
+            action: z
+                .enum(['list', 'get', 'create', 'update', 'archive', 'unarchive'])
+                .describe('Action'),
+            id: z.number().optional().describe('Work area ID'),
+            location_id: z.number().optional().describe('Location ID'),
+            name: z.string().optional().describe('Work area name'),
+            description: z.string().optional().describe('Description'),
+            page: z.number().optional().default(1).describe('Page number'),
+            limit: z.number().optional().default(100).describe('Items per page'),
+        },
+    }, async (args) => {
+        try {
+            switch (args.action) {
+                case 'list': {
+                    const result = await listWorkAreas({ page: args.page, limit: args.limit });
+                    // Filter by location_id client-side if specified
+                    let data = result.data;
+                    if (args.location_id) {
+                        data = data.filter(w => w.location_id === args.location_id);
+                    }
+                    const summary = data.map(w => ({
+                        id: w.id,
+                        name: w.name,
+                        location_id: w.location_id,
+                        archived: w.archived,
+                    }));
+                    return textResponse(`Found ${summary.length} work areas:\n\n${JSON.stringify(summary, null, 2)}`);
+                }
+                case 'get': {
+                    if (!args.id)
+                        return textResponse('Error: id is required');
+                    const workArea = await getWorkArea(args.id);
+                    return textResponse(`Work area details:\n\n${JSON.stringify(workArea, null, 2)}`);
+                }
+                case 'create': {
+                    if (!args.location_id || !args.name) {
+                        return textResponse('Error: location_id and name are required');
+                    }
+                    const workArea = await createWorkArea({
+                        location_id: args.location_id,
+                        name: args.name,
+                        description: args.description,
+                    });
+                    return textResponse(`Work area created:\n\n${JSON.stringify(workArea, null, 2)}`);
+                }
+                case 'update': {
+                    if (!args.id)
+                        return textResponse('Error: id is required');
+                    const workArea = await updateWorkArea(args.id, {
+                        name: args.name,
+                        description: args.description,
+                    });
+                    return textResponse(`Work area updated:\n\n${JSON.stringify(workArea, null, 2)}`);
+                }
+                case 'archive': {
+                    if (!args.id)
+                        return textResponse('Error: id is required');
+                    const workArea = await archiveWorkArea(args.id);
+                    return textResponse(`Work area archived:\n\n${JSON.stringify(workArea, null, 2)}`);
+                }
+                case 'unarchive': {
+                    if (!args.id)
+                        return textResponse('Error: id is required');
+                    const workArea = await unarchiveWorkArea(args.id);
+                    return textResponse(`Work area unarchived:\n\n${JSON.stringify(workArea, null, 2)}`);
+                }
+            }
+        }
+        catch (error) {
+            return formatToolError(error);
+        }
+    });
+}
+//# sourceMappingURL=work-areas.js.map

package/dist/tools/work-areas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"work-areas.js","sourceRoot":"","sources":["../../src/tools/work-areas.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AACzB,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EACL,aAAa,EACb,WAAW,EACX,cAAc,EACd,cAAc,EACd,eAAe,EACf,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,UAAU,qBAAqB,CAAC,MAAiB;IACrD,MAAM,CAAC,YAAY,CACjB,sBAAsB,EACtB;QACE,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,oCAAoC;QACjD,WAAW,EAAE;YACX,MAAM,EAAE,CAAC;iBACN,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;iBACjE,QAAQ,CAAC,QAAQ,CAAC;YACrB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;YAClD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC1D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACtD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC1D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;YAC9D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC;SACrE;KACF,EACD,KAAK,EAAC,IAAI,EAAC,EAAE;QACX,IAAI,CAAC;YACH,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACpB,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;oBAC3E,iDAAiD;oBACjD,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;oBACvB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;wBACrB,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,CAAC,CAAC;oBAC9D,CAAC;oBACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBAC7B,EAAE,EAAE,CAAC,CAAC,EAAE;wBACR,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;qBACrB,CAAC,CAAC,CAAC;oBACJ,OAAO,YAAY,CACjB,SAAS,OAAO,CAAC,MAAM,mBAAmB,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAC7E,CAAC;gBACJ,CAAC;gBAED,KAAK,KAAK,CAAC,CAAC,CAAC;oBACX,IAAI,CAAC,IAAI,CAAC,EAAE;wBAAE,OAAO,YAAY,CAAC,uBAAuB,CAAC,CAAC;oBAC3D,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC5C,OAAO,YAAY,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpF,CAAC;gBAED,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;wBACpC,OAAO,YAAY,CAAC,0CAA0C,CAAC,CAAC;oBAClE,CAAC;oBACD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC;wBACpC,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,WAAW,EAAE,IAAI,CAAC,WAAW;qBAC9B,CAAC,CAAC;oBACH,OAAO,YAAY,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpF,CAAC;gBAED,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,IAAI,CAAC,IAAI,CAAC,EAAE;wBAAE,OAAO,YAAY,CAAC,uBAAuB,CAAC,CAAC;oBAC3D,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE;wBAC7C,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,WAAW,EAAE,IAAI,CAAC,WAAW;qBAC9B,CAAC,CAAC;oBACH,OAAO,YAAY,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpF,CAAC;gBAED,KAAK,SAAS,CAAC,CAAC,CAAC;oBACf,IAAI,CAAC,IAAI,CAAC,EAAE;wBAAE,OAAO,YAAY,CAAC,uBAAuB,CAAC,CAAC;oBAC3D,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAChD,OAAO,YAAY,CAAC,0BAA0B,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrF,CAAC;gBAED,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,IAAI,CAAC,IAAI,CAAC,EAAE;wBAAE,OAAO,YAAY,CAAC,uBAAuB,CAAC,CAAC;oBAC3D,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAClD,OAAO,YAAY,CAAC,4BAA4B,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACvF,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -4,7 +4,7 @@
  * Re-exports types from schemas for backward compatibility
  * and adds additional utility types.
  */
-export type { Employee, Team, Location, Contract, Leave, LeaveType, Allowance, Shift, Folder, Document, JobRole, JobLevel, } from './schemas.js';
+export type { Employee, Team, Location, Contract, ContractSummary, Leave, LeaveType, Allowance, Shift, Folder, Document, JobRole, JobLevel, } from './schemas.js';
 export type { PaginationInput, PaginationParams, PaginationMeta, PaginatedResponse, } from './pagination.js';
 /**
  * Leave status options

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,YAAY,EACV,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,QAAQ,EACR,KAAK,EACL,SAAS,EACT,SAAS,EACT,KAAK,EACL,MAAM,EACN,QAAQ,EACR,OAAO,EACP,QAAQ,GACT,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAEzB;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;AAE9D;;GAEG;AACH,MAAM,MAAM,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;AAErD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,YAAY,EACV,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,QAAQ,EACR,eAAe,EACf,KAAK,EACL,SAAS,EACT,SAAS,EACT,KAAK,EACL,MAAM,EACN,QAAQ,EACR,OAAO,EACP,QAAQ,GACT,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAEzB;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAC;AAE9D;;GAEG;AACH,MAAM,MAAM,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;AAErD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB"}

package/dist/utils.d.ts

@@ -30,4 +30,39 @@ export declare function validatePositiveNumber(value: unknown, fieldName: string
  * @throws Error if the value is invalid
  */
 export declare function validateNonEmptyString(value: unknown, fieldName: string): string;
+/**
+ * Build a safe output path for a file downloaded from the Factorial API
+ *
+ * Document names come from Factorial metadata and can be set by anyone with
+ * document-upload rights in the tenant, so they are untrusted input. Only the
+ * final path segment is kept, and the resolved path is checked to make sure it
+ * stays inside the output directory.
+ *
+ * Both `/` and `\` are treated as separators on every platform. A backslash is
+ * a legal character in a POSIX filename, so a document genuinely named
+ * `report\final.pdf` is saved as `final.pdf` on Linux and macOS. That is a
+ * deliberate trade: downloaded files get carried onto other systems, and losing
+ * part of a rare filename is cheaper than honouring a separator somewhere else.
+ *
+ * @param outputDir - Directory the file must be written into
+ * @param filename - Untrusted filename taken from API metadata
+ * @param fallbackName - Name to use when the filename sanitizes to nothing usable
+ * @returns An absolute path inside outputDir
+ * @throws Error if the resolved path would escape outputDir
+ */
+export declare function resolveSafeOutputPath(outputDir: string, filename: string, fallbackName: string): string;
+/**
+ * Write a file, picking a free name rather than replacing an existing one
+ *
+ * Downloaded filenames come from tenant-controlled metadata, so a download can
+ * otherwise land on an existing file the caller cares about, and two documents
+ * sharing a name would silently collapse into one. The `wx` flag fails if the
+ * path already exists, so the loop settles on the first free "name (n).ext".
+ *
+ * @param preferredPath - Where the file should go if nothing is there
+ * @param buffer - File contents
+ * @returns The path actually written
+ * @throws Error if no free name is found, or on any non-EEXIST write failure
+ */
+export declare function writeWithoutOverwriting(preferredPath: string, buffer: Buffer): Promise<string>;
 //# sourceMappingURL=utils.d.ts.map

package/dist/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAKpE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAKhF;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAKhF"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,CAKpE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAKhF;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAKhF;AAsBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,MAAM,CAiCR;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,uBAAuB,CAC3C,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAuBjB"}

package/dist/utils.js

@@ -3,6 +3,7 @@
  *
  * Provides common validation and helper functions used across the codebase.
  */
+import * as path from 'node:path';
 /**
  * Validate that a value is a positive integer ID
  *
@@ -45,4 +46,100 @@ export function validateNonEmptyString(value, fieldName) {
     }
     return value.trim();
 }
+/**
+ * Shorten a filename to a byte budget, keeping its extension
+ *
+ * Counts bytes rather than characters, since the filesystem limit is in bytes
+ * and a name can be entirely multi-byte.
+ */
+function truncateFilename(name, maxBytes) {
+    if (Buffer.byteLength(name, 'utf8') <= maxBytes)
+        return name;
+    const extension = path.extname(name).slice(0, maxBytes);
+    const budget = maxBytes - Buffer.byteLength(extension, 'utf8');
+    let stem = name.slice(0, name.length - extension.length);
+    while (Buffer.byteLength(stem, 'utf8') > budget) {
+        stem = stem.slice(0, -1);
+    }
+    return `${stem}${extension}`;
+}
+/**
+ * Build a safe output path for a file downloaded from the Factorial API
+ *
+ * Document names come from Factorial metadata and can be set by anyone with
+ * document-upload rights in the tenant, so they are untrusted input. Only the
+ * final path segment is kept, and the resolved path is checked to make sure it
+ * stays inside the output directory.
+ *
+ * Both `/` and `\` are treated as separators on every platform. A backslash is
+ * a legal character in a POSIX filename, so a document genuinely named
+ * `report\final.pdf` is saved as `final.pdf` on Linux and macOS. That is a
+ * deliberate trade: downloaded files get carried onto other systems, and losing
+ * part of a rare filename is cheaper than honouring a separator somewhere else.
+ *
+ * @param outputDir - Directory the file must be written into
+ * @param filename - Untrusted filename taken from API metadata
+ * @param fallbackName - Name to use when the filename sanitizes to nothing usable
+ * @returns An absolute path inside outputDir
+ * @throws Error if the resolved path would escape outputDir
+ */
+export function resolveSafeOutputPath(outputDir, filename, fallbackName) {
+    const lastSegment = filename.split(/[/\\]/).pop() ?? '';
+    // Drop control characters, which the filesystem rejects outright (a NUL makes
+    // fs.writeFile throw), and cap the length, since most filesystems limit a
+    // single path component to 255 bytes and reject anything longer.
+    const printable = [...lastSegment]
+        .filter(character => {
+        const code = character.charCodeAt(0);
+        return code > 31 && code !== 127;
+    })
+        .join('');
+    const cleaned = truncateFilename(printable.trim(), 200);
+    const safeName = cleaned === '' || cleaned === '.' || cleaned === '..' ? fallbackName : cleaned;
+    const baseDir = path.resolve(outputDir);
+    const outputPath = path.resolve(baseDir, safeName);
+    const relative = path.relative(baseDir, outputPath);
+    // Compare whole path segments: a file legitimately named "..archive.pdf"
+    // starts with ".." without escaping anything.
+    const escapesOutputDir = relative === '' ||
+        relative === '..' ||
+        relative.startsWith(`..${path.sep}`) ||
+        path.isAbsolute(relative);
+    if (escapesOutputDir) {
+        throw new Error(`Refusing to write a document outside the output directory: ${filename}`);
+    }
+    return outputPath;
+}
+/**
+ * Write a file, picking a free name rather than replacing an existing one
+ *
+ * Downloaded filenames come from tenant-controlled metadata, so a download can
+ * otherwise land on an existing file the caller cares about, and two documents
+ * sharing a name would silently collapse into one. The `wx` flag fails if the
+ * path already exists, so the loop settles on the first free "name (n).ext".
+ *
+ * @param preferredPath - Where the file should go if nothing is there
+ * @param buffer - File contents
+ * @returns The path actually written
+ * @throws Error if no free name is found, or on any non-EEXIST write failure
+ */
+export async function writeWithoutOverwriting(preferredPath, buffer) {
+    const fs = await import('fs/promises');
+    const directory = path.dirname(preferredPath);
+    const extension = path.extname(preferredPath);
+    const stem = path.basename(preferredPath, extension);
+    for (let attempt = 0; attempt < 100; attempt++) {
+        const candidate = attempt === 0 ? preferredPath : path.join(directory, `${stem} (${attempt})${extension}`);
+        try {
+            await fs.writeFile(candidate, buffer, { flag: 'wx' });
+            return candidate;
+        }
+        catch (error) {
+            if (error.code !== 'EEXIST')
+                throw error;
+        }
+    }
+    throw new Error(`Could not find a free filename for ${preferredPath} after 100 attempts. ` +
+        'Choose a different output_dir or clear the existing files.');
+}
 //# sourceMappingURL=utils.js.map

package/dist/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,EAAW,EAAE,YAAoB;IAC1D,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,WAAW,YAAY,yCAAyC,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,SAAiB;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,qCAAqC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,SAAiB;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,sCAAsC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC"}
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,EAAW,EAAE,YAAoB;IAC1D,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,WAAW,YAAY,yCAAyC,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,SAAiB;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,qCAAqC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,SAAiB;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,WAAW,SAAS,sCAAsC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,QAAgB;IACtD,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE7D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAE/D,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;QAChD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,qBAAqB,CACnC,SAAiB,EACjB,QAAgB,EAChB,YAAoB;IAEpB,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAExD,8EAA8E;IAC9E,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,SAAS,GAAG,CAAC,GAAG,WAAW,CAAC;SAC/B,MAAM,CAAC,SAAS,CAAC,EAAE;QAClB,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,IAAI,GAAG,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC;IACnC,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;IAEhG,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAEpD,yEAAyE;IACzE,8CAA8C;IAC9C,MAAM,gBAAgB,GACpB,QAAQ,KAAK,EAAE;QACf,QAAQ,KAAK,IAAI;QACjB,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAE5B,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,8DAA8D,QAAQ,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,aAAqB,EACrB,MAAc;IAEd,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAEvC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAErD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC;QAC/C,MAAM,SAAS,GACb,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,KAAK,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;QAE3F,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CACb,sCAAsC,aAAa,uBAAuB;QACxE,4DAA4D,CAC/D,CAAC;AACJ,CAAC"}

package/dist/write-safety.d.ts

@@ -25,7 +25,12 @@ export interface OperationPolicy {
     risk: OperationRisk;
     /** Whether explicit confirmation is required */
     requiresConfirmation: boolean;
-    /** Whether to show a preview before executing */
+    /**
+     * Whether to show a preview before executing
+     *
+     * Not currently consumed anywhere: no code path reads this field. It records
+     * an intent for a preview step that does not exist yet.
+     */
     requiresPreview: boolean;
     /** Maximum number of records that can be affected in batch */
     maxBatchSize?: number;
@@ -37,6 +42,226 @@ export interface OperationPolicy {
 /**
  * Default policies for write operations
  */
+declare const POLICIES: {
+    create_employee: {
+        risk: OperationRisk.MEDIUM;
+        requiresConfirmation: false;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    update_employee: {
+        risk: OperationRisk.LOW;
+        requiresConfirmation: false;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    terminate_employee: {
+        risk: OperationRisk.HIGH;
+        requiresConfirmation: true;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    create_team: {
+        risk: OperationRisk.MEDIUM;
+        requiresConfirmation: false;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    update_team: {
+        risk: OperationRisk.LOW;
+        requiresConfirmation: false;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    delete_team: {
+        risk: OperationRisk.HIGH;
+        requiresConfirmation: true;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    add_team_member: {
+        risk: OperationRisk.LOW;
+        requiresConfirmation: false;
+        requiresPreview: false;
+        impactDescription: string;
+    };
+    remove_team_member: {
+        risk: OperationRisk.LOW;
+        requiresConfirmation: false;
+        requiresPreview: false;
+        impactDescription: string;
+    };
+    create_location: {
+        risk: OperationRisk.MEDIUM;
+        requiresConfirmation: false;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    update_location: {
+        risk: OperationRisk.LOW;
+        requiresConfirmation: false;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    delete_location: {
+        risk: OperationRisk.HIGH;
+        requiresConfirmation: true;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    create_leave: {
+        risk: OperationRisk.MEDIUM;
+        requiresConfirmation: false;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    update_leave: {
+        risk: OperationRisk.LOW;
+        requiresConfirmation: false;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    cancel_leave: {
+        risk: OperationRisk.MEDIUM;
+        requiresConfirmation: true;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    approve_leave: {
+        risk: OperationRisk.MEDIUM;
+        requiresConfirmation: false;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    reject_leave: {
+        risk: OperationRisk.MEDIUM;
+        requiresConfirmation: true;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    create_shift: {
+        risk: OperationRisk.LOW;
+        requiresConfirmation: false;
+        requiresPreview: false;
+        impactDescription: string;
+    };
+    update_shift: {
+        risk: OperationRisk.LOW;
+        requiresConfirmation: false;
+        requiresPreview: false;
+        impactDescription: string;
+    };
+    delete_shift: {
+        risk: OperationRisk.MEDIUM;
+        requiresConfirmation: true;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    upload_document: {
+        risk: OperationRisk.MEDIUM;
+        requiresConfirmation: false;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    update_document: {
+        risk: OperationRisk.LOW;
+        requiresConfirmation: false;
+        requiresPreview: false;
+        impactDescription: string;
+    };
+    delete_document: {
+        risk: OperationRisk.HIGH;
+        requiresConfirmation: true;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    create_project: {
+        risk: OperationRisk.MEDIUM;
+        requiresConfirmation: false;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    update_project: {
+        risk: OperationRisk.LOW;
+        requiresConfirmation: false;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    delete_project: {
+        risk: OperationRisk.HIGH;
+        requiresConfirmation: true;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    delete_task: {
+        risk: OperationRisk.MEDIUM;
+        requiresConfirmation: true;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    delete_time: {
+        risk: OperationRisk.MEDIUM;
+        requiresConfirmation: true;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    remove_project_worker: {
+        risk: OperationRisk.MEDIUM;
+        requiresConfirmation: true;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    create_job_posting: {
+        risk: OperationRisk.MEDIUM;
+        requiresConfirmation: false;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    delete_job_posting: {
+        risk: OperationRisk.HIGH;
+        requiresConfirmation: true;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    delete_candidate: {
+        risk: OperationRisk.HIGH;
+        requiresConfirmation: true;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    delete_application: {
+        risk: OperationRisk.HIGH;
+        requiresConfirmation: true;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    delete_training: {
+        risk: OperationRisk.HIGH;
+        requiresConfirmation: true;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    delete_session: {
+        risk: OperationRisk.MEDIUM;
+        requiresConfirmation: true;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+    remove_enrollment: {
+        risk: OperationRisk.MEDIUM;
+        requiresConfirmation: true;
+        requiresPreview: true;
+        impactDescription: string;
+    };
+};
+/**
+ * Names of operations that have an explicit policy defined above
+ *
+ * Confirmation gates take this type rather than a bare string, so gating an
+ * operation that has no policy entry is a compile error instead of a silent
+ * fall-through to the permissive default policy.
+ */
+export type OperationName = keyof typeof POLICIES;
 export declare const OPERATION_POLICIES: Record<string, OperationPolicy>;
 /**
  * Get the policy for an operation
@@ -47,7 +272,9 @@ export declare function getOperationPolicy(operationName: string): OperationPoli
  */
 export declare function requiresConfirmation(operationName: string): boolean;
 /**
- * Get a warning message for high-risk operations
+ * Get a warning message for high-risk operations, and for any operation that
+ * requires confirmation regardless of its risk level
  */
 export declare function getWarningMessage(operationName: string): string | null;
+export {};
 //# sourceMappingURL=write-safety.d.ts.map

package/dist/write-safety.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"write-safety.d.ts","sourceRoot":"","sources":["../src/write-safety.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,oBAAY,aAAa;IACvB,qEAAqE;IACrE,GAAG,QAAQ;IACX,wEAAwE;IACxE,MAAM,WAAW;IACjB,gEAAgE;IAChE,IAAI,SAAS;IACb,kFAAkF;IAClF,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kCAAkC;IAClC,IAAI,EAAE,aAAa,CAAC;IACpB,gDAAgD;IAChD,oBAAoB,EAAE,OAAO,CAAC;IAC9B,iDAAiD;IACjD,eAAe,EAAE,OAAO,CAAC;IACzB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAgM9D,CAAC;AAEF;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,eAAe,CASzE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAatE"}
+{"version":3,"file":"write-safety.d.ts","sourceRoot":"","sources":["../src/write-safety.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,oBAAY,aAAa;IACvB,qEAAqE;IACrE,GAAG,QAAQ;IACX,wEAAwE;IACxE,MAAM,WAAW;IACjB,gEAAgE;IAChE,IAAI,SAAS;IACb,kFAAkF;IAClF,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kCAAkC;IAClC,IAAI,EAAE,aAAa,CAAC;IACpB,gDAAgD;IAChD,oBAAoB,EAAE,OAAO,CAAC;IAC9B;;;;;OAKG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,QAAA,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsO6B,CAAC;AAE5C;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,QAAQ,CAAC;AAElD,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAY,CAAC;AAE5E;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,aAAa,EAAE,MAAM,GAAG,eAAe,CASzE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAetE"}

package/dist/write-safety.js

@@ -21,7 +21,7 @@ export var OperationRisk;
 /**
  * Default policies for write operations
  */
-export const OPERATION_POLICIES = {
+const POLICIES = {
     // Employee operations
     create_employee: {
         risk: OperationRisk.MEDIUM,
@@ -179,6 +179,24 @@ export const OPERATION_POLICIES = {
         requiresPreview: true,
         impactDescription: 'Deletes the project and all associated tasks/time records',
     },
+    delete_task: {
+        risk: OperationRisk.MEDIUM,
+        requiresConfirmation: true,
+        requiresPreview: true,
+        impactDescription: 'Deletes the project task',
+    },
+    delete_time: {
+        risk: OperationRisk.MEDIUM,
+        requiresConfirmation: true,
+        requiresPreview: true,
+        impactDescription: 'Deletes the time record',
+    },
+    remove_project_worker: {
+        risk: OperationRisk.MEDIUM,
+        requiresConfirmation: true,
+        requiresPreview: true,
+        impactDescription: "Deletes the employee's assignment to the project. Time records are recorded against this assignment",
+    },
     // ATS operations
     create_job_posting: {
         risk: OperationRisk.MEDIUM,
@@ -198,6 +216,12 @@ export const OPERATION_POLICIES = {
         requiresPreview: true,
         impactDescription: 'Permanently deletes the candidate record',
     },
+    delete_application: {
+        risk: OperationRisk.HIGH,
+        requiresConfirmation: true,
+        requiresPreview: true,
+        impactDescription: "Permanently deletes the application, removing the candidate from the job posting's pipeline",
+    },
     // Training operations
     delete_training: {
         risk: OperationRisk.HIGH,
@@ -205,7 +229,20 @@ export const OPERATION_POLICIES = {
         requiresPreview: true,
         impactDescription: 'Deletes the training program and all enrollments',
     },
+    delete_session: {
+        risk: OperationRisk.MEDIUM,
+        requiresConfirmation: true,
+        requiresPreview: true,
+        impactDescription: 'Deletes the training session',
+    },
+    remove_enrollment: {
+        risk: OperationRisk.MEDIUM,
+        requiresConfirmation: true,
+        requiresPreview: true,
+        impactDescription: "Deletes the employee's enrollment record for the training",
+    },
 };
+export const OPERATION_POLICIES = POLICIES;
 /**
  * Get the policy for an operation
  */
@@ -224,11 +261,13 @@ export function requiresConfirmation(operationName) {
     return getOperationPolicy(operationName).requiresConfirmation;
 }
 /**
- * Get a warning message for high-risk operations
+ * Get a warning message for high-risk operations, and for any operation that
+ * requires confirmation regardless of its risk level
  */
 export function getWarningMessage(operationName) {
     const policy = getOperationPolicy(operationName);
-    if (policy.risk === OperationRisk.HIGH || policy.risk === OperationRisk.CRITICAL) {
+    const isHighRisk = policy.risk === OperationRisk.HIGH || policy.risk === OperationRisk.CRITICAL;
+    if (isHighRisk || policy.requiresConfirmation) {
         return (`**Warning:** This is a ${policy.risk}-risk operation. ${policy.impactDescription}. ` +
             (policy.requiresConfirmation
                 ? 'Please confirm by setting `confirm: true`.'

package/dist/write-safety.js.map

@@ -1 +1 @@
-{"version":3,"file":"write-safety.js","sourceRoot":"","sources":["../src/write-safety.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,CAAN,IAAY,aASX;AATD,WAAY,aAAa;IACvB,qEAAqE;IACrE,4BAAW,CAAA;IACX,wEAAwE;IACxE,kCAAiB,CAAA;IACjB,gEAAgE;IAChE,8BAAa,CAAA;IACb,kFAAkF;IAClF,sCAAqB,CAAA;AACvB,CAAC,EATW,aAAa,KAAb,aAAa,QASxB;AAoBD;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAoC;IACjE,sBAAsB;IACtB,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,6CAA6C;KACjE;IACD,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,8BAA8B;KAClD;IACD,kBAAkB,EAAE;QAClB,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,qEAAqE;KACzF;IAED,kBAAkB;IAClB,WAAW,EAAE;QACX,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,oBAAoB;KACxC;IACD,WAAW,EAAE;QACX,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,0BAA0B;KAC9C;IACD,WAAW,EAAE;QACX,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,sDAAsD;KAC1E;IACD,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,KAAK;QACtB,iBAAiB,EAAE,8BAA8B;KAClD;IACD,kBAAkB,EAAE;QAClB,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,KAAK;QACtB,iBAAiB,EAAE,mCAAmC;KACvD;IAED,sBAAsB;IACtB,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,+BAA+B;KACnD;IACD,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,8BAA8B;KAClD;IACD,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,wDAAwD;KAC5E;IAED,mBAAmB;IACnB,YAAY,EAAE;QACZ,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,6BAA6B;KACjD;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,+BAA+B;KACnD;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,2BAA2B;KAC/C;IACD,aAAa,EAAE;QACb,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,sDAAsD;KAC1E;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,2BAA2B;KAC/C;IAED,mBAAmB;IACnB,YAAY,EAAE;QACZ,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,KAAK;QACtB,iBAAiB,EAAE,oCAAoC;KACxD;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,KAAK;QACtB,iBAAiB,EAAE,kCAAkC;KACtD;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,0BAA0B;KAC9C;IAED,sBAAsB;IACtB,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,wBAAwB;KAC5C;IACD,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,KAAK;QACtB,iBAAiB,EAAE,2BAA2B;KAC/C;IACD,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,kCAAkC;KACtD;IAED,qBAAqB;IACrB,cAAc,EAAE;QACd,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,uBAAuB;KAC3C;IACD,cAAc,EAAE;QACd,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,yBAAyB;KAC7C;IACD,cAAc,EAAE;QACd,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,2DAA2D;KAC/E;IAED,iBAAiB;IACjB,kBAAkB,EAAE;QAClB,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,2BAA2B;KAC/C;IACD,kBAAkB,EAAE;QAClB,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,8CAA8C;KAClE;IACD,gBAAgB,EAAE;QAChB,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,0CAA0C;KAC9D;IAED,sBAAsB;IACtB,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,kDAAkD;KACtE;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,aAAqB;IACtD,OAAO,CACL,kBAAkB,CAAC,aAAa,CAAC,IAAI;QACnC,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,8BAA8B;KAClD,CACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,aAAqB;IACxD,OAAO,kBAAkB,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,aAAqB;IACrD,MAAM,MAAM,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAEjD,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,QAAQ,EAAE,CAAC;QACjF,OAAO,CACL,0BAA0B,MAAM,CAAC,IAAI,oBAAoB,MAAM,CAAC,iBAAiB,IAAI;YACrF,CAAC,MAAM,CAAC,oBAAoB;gBAC1B,CAAC,CAAC,4CAA4C;gBAC9C,CAAC,CAAC,4CAA4C,CAAC,CAClD,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"write-safety.js","sourceRoot":"","sources":["../src/write-safety.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,CAAN,IAAY,aASX;AATD,WAAY,aAAa;IACvB,qEAAqE;IACrE,4BAAW,CAAA;IACX,wEAAwE;IACxE,kCAAiB,CAAA;IACjB,gEAAgE;IAChE,8BAAa,CAAA;IACb,kFAAkF;IAClF,sCAAqB,CAAA;AACvB,CAAC,EATW,aAAa,KAAb,aAAa,QASxB;AAyBD;;GAEG;AACH,MAAM,QAAQ,GAAG;IACf,sBAAsB;IACtB,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,6CAA6C;KACjE;IACD,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,8BAA8B;KAClD;IACD,kBAAkB,EAAE;QAClB,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,qEAAqE;KACzF;IAED,kBAAkB;IAClB,WAAW,EAAE;QACX,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,oBAAoB;KACxC;IACD,WAAW,EAAE;QACX,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,0BAA0B;KAC9C;IACD,WAAW,EAAE;QACX,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,sDAAsD;KAC1E;IACD,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,KAAK;QACtB,iBAAiB,EAAE,8BAA8B;KAClD;IACD,kBAAkB,EAAE;QAClB,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,KAAK;QACtB,iBAAiB,EAAE,mCAAmC;KACvD;IAED,sBAAsB;IACtB,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,+BAA+B;KACnD;IACD,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,8BAA8B;KAClD;IACD,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,wDAAwD;KAC5E;IAED,mBAAmB;IACnB,YAAY,EAAE;QACZ,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,6BAA6B;KACjD;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,+BAA+B;KACnD;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,2BAA2B;KAC/C;IACD,aAAa,EAAE;QACb,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,sDAAsD;KAC1E;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,2BAA2B;KAC/C;IAED,mBAAmB;IACnB,YAAY,EAAE;QACZ,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,KAAK;QACtB,iBAAiB,EAAE,oCAAoC;KACxD;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,KAAK;QACtB,iBAAiB,EAAE,kCAAkC;KACtD;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,0BAA0B;KAC9C;IAED,sBAAsB;IACtB,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,wBAAwB;KAC5C;IACD,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,KAAK;QACtB,iBAAiB,EAAE,2BAA2B;KAC/C;IACD,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,kCAAkC;KACtD;IAED,qBAAqB;IACrB,cAAc,EAAE;QACd,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,uBAAuB;KAC3C;IACD,cAAc,EAAE;QACd,IAAI,EAAE,aAAa,CAAC,GAAG;QACvB,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,yBAAyB;KAC7C;IACD,cAAc,EAAE;QACd,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,2DAA2D;KAC/E;IACD,WAAW,EAAE;QACX,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,0BAA0B;KAC9C;IACD,WAAW,EAAE;QACX,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,yBAAyB;KAC7C;IACD,qBAAqB,EAAE;QACrB,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EACf,qGAAqG;KACxG;IAED,iBAAiB;IACjB,kBAAkB,EAAE;QAClB,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,2BAA2B;KAC/C;IACD,kBAAkB,EAAE;QAClB,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,8CAA8C;KAClE;IACD,gBAAgB,EAAE;QAChB,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,0CAA0C;KAC9D;IACD,kBAAkB,EAAE;QAClB,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EACf,6FAA6F;KAChG;IAED,sBAAsB;IACtB,eAAe,EAAE;QACf,IAAI,EAAE,aAAa,CAAC,IAAI;QACxB,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,kDAAkD;KACtE;IACD,cAAc,EAAE;QACd,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,8BAA8B;KAClD;IACD,iBAAiB,EAAE;QACjB,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,IAAI;QAC1B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,2DAA2D;KAC/E;CACwC,CAAC;AAW5C,MAAM,CAAC,MAAM,kBAAkB,GAAoC,QAAQ,CAAC;AAE5E;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,aAAqB;IACtD,OAAO,CACL,kBAAkB,CAAC,aAAa,CAAC,IAAI;QACnC,IAAI,EAAE,aAAa,CAAC,MAAM;QAC1B,oBAAoB,EAAE,KAAK;QAC3B,eAAe,EAAE,IAAI;QACrB,iBAAiB,EAAE,8BAA8B;KAClD,CACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,aAAqB;IACxD,OAAO,kBAAkB,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,aAAqB;IACrD,MAAM,MAAM,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAEjD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,aAAa,CAAC,QAAQ,CAAC;IAEhG,IAAI,UAAU,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAC9C,OAAO,CACL,0BAA0B,MAAM,CAAC,IAAI,oBAAoB,MAAM,CAAC,iBAAiB,IAAI;YACrF,CAAC,MAAM,CAAC,oBAAoB;gBAC1B,CAAC,CAAC,4CAA4C;gBAC9C,CAAC,CAAC,4CAA4C,CAAC,CAClD,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/llms.txt

@@ -9,8 +9,8 @@ MCP FactorialHR provides comprehensive access to FactorialHR data through the Mo
 ## Key Features
 
 - **80+ Tools**: Full CRUD operations for all major HR entities
-- **Safety Guardrails**: High-risk operations (terminate, delete) require confirmation
-- **Audit Logging**: All write operations are logged
+- **Safety Guardrails**: Every operation that deletes a record, or terminates an employee, requires `confirm: true`. See the README for the full list.
+- **Audit Logging**: All write operations are logged in-process for debugging. The log is in-memory, capped at 1000 entries, and not retrievable through any tool.
 - **Read-only Payroll**: Payroll data is accessible but read-only for security
 - **Pagination**: All list operations support pagination
 - **Caching**: TTL-based caching for performance