callman-mcp 0.7.0 → 0.7.1

package/dist-cjs/tools/index.js

@@ -16,20 +16,25 @@ const uiTestAdmin_js_1 = require("./uiTestAdmin.js");
 const uiTestRuns_js_1 = require("./uiTestRuns.js");
 const uiTests_js_1 = require("./uiTests.js");
 const workspaces_js_1 = require("./workspaces.js");
-var catalog_js_1 = require("./catalog.js");
-Object.defineProperty(exports, "TOOL_CATALOG", { enumerable: true, get: function () { return catalog_js_1.TOOL_CATALOG; } });
-Object.defineProperty(exports, "toolAvailability", { enumerable: true, get: function () { return catalog_js_1.toolAvailability; } });
+const catalog_js_1 = require("./catalog.js");
+var catalog_js_2 = require("./catalog.js");
+Object.defineProperty(exports, "TOOL_CATALOG", { enumerable: true, get: function () { return catalog_js_2.TOOL_CATALOG; } });
+Object.defineProperty(exports, "toolAvailability", { enumerable: true, get: function () { return catalog_js_2.toolAvailability; } });
 // Every tool's arguments are strict: the SDK would otherwise build a
 // strip-mode object from the raw shape, and a misspelled argument
 // (`workspaceId` for `workspace`, `colour` for `color`) would vanish while the
 // tool ran with its default. Runtime only — handler types still come from the
 // raw shapes at each registerTool call.
 const isRawShape = (schema) => typeof schema === "object" && schema !== null && !("_def" in schema) && !("_zod" in schema);
-const withStrictArguments = (server) => new Proxy(server, {
+const withStrictArguments = (server, handles) => new Proxy(server, {
     get(target, property, receiver) {
         if (property !== "registerTool")
             return Reflect.get(target, property, receiver);
-        const register = (name, config, callback) => target.registerTool(name, { ...config, inputSchema: isRawShape(config.inputSchema) ? (0, strict_js_1.strictObject)(config.inputSchema, "argument", name) : config.inputSchema }, callback);
+        const register = (name, config, callback) => {
+            const handle = target.registerTool(name, { ...config, inputSchema: isRawShape(config.inputSchema) ? (0, strict_js_1.strictObject)(config.inputSchema, "argument", name) : config.inputSchema }, callback);
+            handles?.set(name, handle);
+            return handle;
+        };
         return register;
     },
 });
@@ -38,7 +43,8 @@ exports.withStrictArguments = withStrictArguments;
 // registered when local execution is allowed (a backend-hosted server passes
 // allowLocalRun: false and they disappear from tools/list).
 const registerAllTools = (host, ctx) => {
-    const server = (0, exports.withStrictArguments)(host);
+    const handles = new Map();
+    const server = (0, exports.withStrictArguments)(host, handles);
     (0, meta_js_1.registerMetaTools)(server, ctx);
     (0, workspaces_js_1.registerWorkspaceTools)(server, ctx);
     (0, collections_js_1.registerCollectionTools)(server, ctx);
@@ -55,5 +61,21 @@ const registerAllTools = (host, ctx) => {
         (0, run_js_1.registerRunTools)(server, ctx);
         (0, loadTest_js_1.registerLoadTestTool)(server, ctx);
     }
+    return {
+        hideUnavailable: (tokenScopes) => {
+            const hidden = [];
+            for (const tool of (0, catalog_js_1.toolAvailability)(tokenScopes, ctx.config.allowLocalRun)) {
+                // whoami stays: it is how a model learns why the others are missing.
+                if (tool.available || tool.name === "whoami")
+                    continue;
+                const handle = handles.get(tool.name);
+                if (!handle)
+                    continue;
+                handle.disable();
+                hidden.push(tool.name);
+            }
+            return hidden;
+        },
+    };
 };
 exports.registerAllTools = registerAllTools;

package/dist-cjs/tools/run.js

@@ -52,14 +52,12 @@ const shared_js_1 = require("./shared.js");
 // {{key}}). One run at a time.
 // What a local run does NOT do, stated up front so a model does not read a
 // missing check as a pass.
-const LOCAL_RUN_LIMITS = "Local-run limits: DB assertions (dbAssertions) are evaluated only by the desktop app; no cookie jar between requests; no client certificates (mTLS); each request times out after 30 s. Database and Redis steps run when the collection's runnerSettings allow them and the connection is usable from this machine.";
+const LOCAL_RUN_LIMITS = "Local-run limits: no cookie jar between requests; no client certificates (mTLS); each request times out after 30 s. Database and Redis steps run when the collection's runnerSettings allow them and the connection is usable from this machine; the request's DB and Redis assertions are then evaluated like the desktop does (one that cannot be checked, e.g. an unreachable connection, FAILS).";
 const maxBodyArg = zod_1.z.number().int().min(256).max(truncate_js_1.LIMITS.RUN_BODY_MAX).optional().describe("Response body preview cap in bytes (default 16 KB)");
-// apiKey auth names its own header / query parameter — mask those too, and
-// note the steps a local run skips.
+// apiKey auth names its own header / query parameter — mask those too.
 const inspectBundle = (rawCollection) => {
     const secretHeaders = new Set();
     const secretQuery = new Set();
-    const skipped = new Map();
     const requests = rawCollection?.requests;
     for (const raw of Array.isArray(requests) ? requests : []) {
         const request = raw;
@@ -67,13 +65,8 @@ const inspectBundle = (rawCollection) => {
         if (auth && (auth.type === "apikey" || auth.type === "apiKey") && typeof auth.apiKeyKey === "string" && auth.apiKeyKey.trim()) {
             (auth.apiKeyLocation === "query" ? secretQuery : secretHeaders).add(auth.apiKeyKey.trim());
         }
-        const notes = [];
-        if (Array.isArray(request.dbAssertions) && request.dbAssertions.length > 0)
-            notes.push("DB assertions (desktop only)");
-        if (typeof request.id === "string" && notes.length > 0)
-            skipped.set(request.id, notes);
     }
-    return { redaction: { secretHeaders, secretQuery }, skipped };
+    return { redaction: { secretHeaders, secretQuery } };
 };
 const prepareRun = async (ctx, ws, collectionId, environmentRef) => {
     const environment = environmentRef ? (await (0, lookups_js_1.resolveEnvironment)(ctx, ws, environmentRef)).item : null;
@@ -99,7 +92,7 @@ const prepareRun = async (ctx, ws, collectionId, environmentRef) => {
     const { map, skipped } = (0, loadBundle_js_1.buildConnectionRuntimeMap)(bundle.connections);
     if (skipped.length > 0)
         warnings.push(`Connections not usable in a local run: ${skipped.join(", ")}`);
-    const { redaction, skipped: skippedSteps } = inspectBundle(bundle.collection);
+    const { redaction } = inspectBundle(bundle.collection);
     return {
         collection,
         env: { ...(bundle.environment?.variables ?? {}) },
@@ -108,21 +101,9 @@ const prepareRun = async (ctx, ws, collectionId, environmentRef) => {
         environment: bundle.environment ? { id: bundle.environment.id, name: bundle.environment.name } : null,
         warnings,
         redaction,
-        skipped: skippedSteps,
     };
 };
 exports.prepareRun = prepareRun;
-// Warnings for the requests actually run.
-const skippedWarnings = (prepared, ids) => {
-    const out = [];
-    const names = new Map(prepared.collection.requests.map((request) => [request.id, request.name]));
-    for (const id of ids) {
-        const notes = prepared.skipped.get(id);
-        if (notes)
-            out.push(`${names.get(id) ?? id}: not run locally — ${notes.join(", ")}.`);
-    }
-    return out;
-};
 const registerRunTools = (server, ctx) => {
     server.registerTool("run_request", {
         title: "Run a request locally",
@@ -176,7 +157,7 @@ const registerRunTools = (server, ctx) => {
                 environment: prepared.environment,
                 availableVariableKeys: Object.keys(env),
                 unresolvedVariables: unresolved([runnable.url, ...Object.values(runnable.headers ?? {}), ...Object.values(runnable.query ?? {}), (0, truncate_js_1.safeStringify)(runnable.body ?? "")], env),
-                warnings: [...prepared.warnings, ...skippedWarnings(prepared, [runnable.id])],
+                warnings: prepared.warnings,
                 ...(runnable.isEnabledInRunner === false ? { note: "This request is switched off for the collection runner; run_request still runs it." } : {}),
             });
         }
@@ -193,7 +174,7 @@ const registerRunTools = (server, ctx) => {
             collection: { id: found.collectionId },
             workspace: (0, lookups_js_1.workspaceTag)(ws),
             environment: prepared.environment,
-            warnings: [...prepared.warnings, ...skippedWarnings(prepared, [found.id])],
+            warnings: prepared.warnings,
             ...(annotation ? { resolved: [{ input: request, matched: found.name, id: found.id, note: annotation }] } : {}),
         }, prepared.redaction);
         return (0, shared_js_1.ok)({ ...summary, result: summary.results[0] ?? null });
@@ -243,7 +224,7 @@ const registerRunTools = (server, ctx) => {
             collection: { id: resolved.item.id, name: resolved.item.name },
             workspace: (0, lookups_js_1.workspaceTag)(ws),
             environment: prepared.environment,
-            warnings: [...prepared.warnings, ...skippedWarnings(prepared, outcome.results.map((result) => result.requestId))],
+            warnings: prepared.warnings,
             resolved: [(0, resolve_js_1.resolvedSummary)(collection, resolved)],
         }, prepared.redaction));
     }));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "callman-mcp",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "MCP server for Callman: lets Claude Code, Claude Desktop, Cursor, Codex and Gemini CLI manage collections, requests, environments, test scenarios, UI tests (web, Android, iOS) and system-design diagrams in your Callman workspace \u2014 cloud or on-prem.",
   "keywords": [
     "callman",
@@ -62,7 +62,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
-    "callman-core": "^1.37.0",
+    "callman-core": "^1.38.0",
     "elkjs": "^0.12.0",
     "js-yaml": "^4.1.0",
     "zod": "^3.25.0"