mcp-google-multi 4.5.0-alpha.1 → 4.5.0-alpha.3

package/dist/index.js

@@ -18,8 +18,32 @@ import { registerFormsTools } from './tools/forms.js';
 import { registerChatTools } from './tools/chat.js';
 import { registerAdminTools, registerAlertCenterTools } from './tools/admin.js';
 import { getOptionalBundles, getAdminAccounts } from './auth.js';
+import { ToolRegistry } from './registry.js';
+import { resolvePolicy, isAllowed, describePolicy } from './write-control.js';
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const pkg = JSON.parse(readFileSync(path.resolve(__dirname, '..', 'package.json'), 'utf-8'));
+function buildRegistry(server, policy) {
+    const registry = new ToolRegistry(server, policy);
+    registerGmailTools(registry);
+    registerDriveTools(registry);
+    registerCalendarTools(registry);
+    registerSheetsTools(registry);
+    registerDocsTools(registry);
+    registerContactsTools(registry);
+    registerSearchConsoleTools(registry);
+    registerTasksTools(registry);
+    registerMeetTools(registry);
+    const optional = new Set(getOptionalBundles());
+    if (optional.has('forms'))
+        registerFormsTools(registry);
+    if (optional.has('chat'))
+        registerChatTools(registry);
+    if (optional.has('alertcenter'))
+        registerAlertCenterTools(registry);
+    if (getAdminAccounts().length > 0)
+        registerAdminTools(registry);
+    return registry;
+}
 async function main() {
     if (process.argv.includes('auth')) {
         const { runAuthFlow } = await import('./auth.js');
@@ -31,29 +55,22 @@ async function main() {
         runMigrateTokens();
         return;
     }
-    // MCP server mode — no console.log (stdio is the MCP channel)
+    if (process.argv.includes('config') && process.argv.includes('check')) {
+        const policy = resolvePolicy();
+        const registry = buildRegistry(new McpServer({ name: 'mcp-google-multi', version: pkg.version }), policy);
+        const cud = registry.tools.filter((t) => t.cud !== 'read');
+        const disabled = cud.filter((t) => !isAllowed(t, policy));
+        console.log(`Write-control: ${describePolicy(policy)}`);
+        console.log(`CUD tools enabled: ${cud.length - disabled.length}/${cud.length}`);
+        console.log(`Disabled: ${disabled.map((t) => t.name).join(', ') || '(none)'}`);
+        return;
+    }
+    const policy = resolvePolicy();
     const server = new McpServer({
         name: 'mcp-google-multi',
         version: pkg.version,
     });
-    registerGmailTools(server);
-    registerDriveTools(server);
-    registerCalendarTools(server);
-    registerSheetsTools(server);
-    registerDocsTools(server);
-    registerContactsTools(server);
-    registerSearchConsoleTools(server);
-    registerTasksTools(server);
-    registerMeetTools(server);
-    const optional = new Set(getOptionalBundles());
-    if (optional.has('forms'))
-        registerFormsTools(server);
-    if (optional.has('chat'))
-        registerChatTools(server);
-    if (optional.has('alertcenter'))
-        registerAlertCenterTools(server);
-    if (getAdminAccounts().length > 0)
-        registerAdminTools(server);
+    buildRegistry(server, policy);
     const transport = new StdioServerTransport();
     await server.connect(transport);
 }

package/dist/registry.d.ts

@@ -0,0 +1,14 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { type Policy } from './write-control.js';
+export type Cud = 'read' | 'create' | 'update' | 'delete';
+export interface ToolEntry {
+    name: string;
+    service: string;
+    cud: Cud;
+}
+export declare function inferCud(name: string): Cud;
+export declare class ToolRegistry {
+    readonly tools: ToolEntry[];
+    readonly registerTool: McpServer['registerTool'];
+    constructor(server: McpServer, policy: Policy);
+}

package/dist/registry.js

@@ -0,0 +1,36 @@
+import { isAllowed, writeDisabledResult } from './write-control.js';
+const CUD_OVERRIDES = {
+    drive_untrash: 'update',
+};
+const DELETE_VERB = /(^|_)(delete|remove|trash|clear|empty)(_|$)/;
+const CREATE_VERB = /(^|_)(create|add|insert|send|upload|copy|import|append|submit|duplicate|share|quick)(_|$)/;
+const UPDATE_VERB = /(^|_)(update|patch|modify|set|move|write|format|merge|unmerge|sort|replace|resize|publish|resolve)(_|$)/;
+export function inferCud(name) {
+    const override = CUD_OVERRIDES[name];
+    if (override)
+        return override;
+    if (DELETE_VERB.test(name))
+        return 'delete';
+    if (CREATE_VERB.test(name))
+        return 'create';
+    if (UPDATE_VERB.test(name))
+        return 'update';
+    return 'read';
+}
+export class ToolRegistry {
+    tools = [];
+    registerTool;
+    constructor(server, policy) {
+        this.registerTool = ((name, config, handler) => {
+            const service = name.includes('_') ? name.slice(0, name.indexOf('_')) : name;
+            const cud = inferCud(name);
+            this.tools.push({ name, service, cud });
+            const guarded = cud === 'read'
+                ? handler
+                : (...args) => isAllowed({ name, service, cud }, policy)
+                    ? handler(...args)
+                    : writeDisabledResult({ name, service, cud }, policy);
+            return server.registerTool(name, config, guarded);
+        });
+    }
+}

package/dist/tools/admin.d.ts

@@ -1,4 +1,4 @@
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { ToolRegistry } from '../registry.js';
 /**
  * Admin SDK tools require Workspace super-admin (or delegated admin) privileges on the target account.
  * Personal `@gmail.com` accounts will 403 on every endpoint.
@@ -6,7 +6,7 @@ import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
  * Writes are gated behind GOOGLE_ALLOW_ADMIN_WRITES=true to prevent accidents on small orgs
  * (a stray users.update on a 3-person Workspace is a bad day).
  */
-export declare function registerAdminTools(server: McpServer): void;
+export declare function registerAdminTools(server: ToolRegistry): void;
 /**
  * Alert Center tools. Gated behind the `alertcenter` optional bundle, NOT the
  * admin bundle: the apps.alerts scope cannot be granted via this server's
@@ -14,4 +14,4 @@ export declare function registerAdminTools(server: McpServer): void;
  * domain-wide delegation. Registered separately so a missing/ungrantable
  * apps.alerts scope never blocks the working Admin SDK admin tools.
  */
-export declare function registerAlertCenterTools(server: McpServer): void;
+export declare function registerAlertCenterTools(server: ToolRegistry): void;

package/dist/tools/calendar.d.ts

@@ -1,2 +1,2 @@
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-export declare function registerCalendarTools(server: McpServer): void;
+import type { ToolRegistry } from '../registry.js';
+export declare function registerCalendarTools(server: ToolRegistry): void;

package/dist/tools/chat.d.ts

@@ -1,2 +1,2 @@
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-export declare function registerChatTools(server: McpServer): void;
+import type { ToolRegistry } from '../registry.js';
+export declare function registerChatTools(server: ToolRegistry): void;

package/dist/tools/contacts.d.ts

@@ -1,2 +1,2 @@
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-export declare function registerContactsTools(server: McpServer): void;
+import type { ToolRegistry } from '../registry.js';
+export declare function registerContactsTools(server: ToolRegistry): void;

package/dist/tools/docs.d.ts

@@ -1,5 +1,5 @@
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-export declare function registerDocsTools(server: McpServer): void;
+import type { ToolRegistry } from '../registry.js';
+export declare function registerDocsTools(server: ToolRegistry): void;
 export declare function buildParagraphStyle(input: {
     namedStyleType?: string;
     alignment?: string;

package/dist/tools/drive.d.ts

@@ -1,2 +1,2 @@
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-export declare function registerDriveTools(server: McpServer): void;
+import type { ToolRegistry } from '../registry.js';
+export declare function registerDriveTools(server: ToolRegistry): void;

package/dist/tools/forms.d.ts

@@ -1,2 +1,2 @@
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-export declare function registerFormsTools(server: McpServer): void;
+import type { ToolRegistry } from '../registry.js';
+export declare function registerFormsTools(server: ToolRegistry): void;

package/dist/tools/gmail.d.ts

@@ -1,2 +1,2 @@
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-export declare function registerGmailTools(server: McpServer): void;
+import type { ToolRegistry } from '../registry.js';
+export declare function registerGmailTools(server: ToolRegistry): void;

package/dist/tools/meet.d.ts

@@ -1,2 +1,2 @@
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-export declare function registerMeetTools(server: McpServer): void;
+import type { ToolRegistry } from '../registry.js';
+export declare function registerMeetTools(server: ToolRegistry): void;

package/dist/tools/searchconsole.d.ts

@@ -1,2 +1,2 @@
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-export declare function registerSearchConsoleTools(server: McpServer): void;
+import type { ToolRegistry } from '../registry.js';
+export declare function registerSearchConsoleTools(server: ToolRegistry): void;

package/dist/tools/sheets.d.ts

@@ -1,5 +1,5 @@
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-export declare function registerSheetsTools(server: McpServer): void;
+import type { ToolRegistry } from '../registry.js';
+export declare function registerSheetsTools(server: ToolRegistry): void;
 export declare function buildCellFormat(input: {
     backgroundColor?: {
         red?: number;

package/dist/tools/tasks.d.ts

@@ -1,2 +1,2 @@
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-export declare function registerTasksTools(server: McpServer): void;
+import type { ToolRegistry } from '../registry.js';
+export declare function registerTasksTools(server: ToolRegistry): void;

package/dist/write-control.d.ts

@@ -0,0 +1,24 @@
+import type { Cud } from './registry.js';
+export type Profile = 'read-only' | 'safe-writes' | 'full-writes';
+export interface Policy {
+    profile: Profile;
+    readOnly: boolean;
+    allow: string[];
+    deny: string[];
+}
+interface ToolRef {
+    name: string;
+    service: string;
+    cud: Cud;
+}
+export declare function resolvePolicy(env?: NodeJS.ProcessEnv): Policy;
+export declare function isAllowed(tool: ToolRef, policy: Policy): boolean;
+export declare function writeDisabledResult(tool: ToolRef, policy: Policy): {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: true;
+};
+export declare function describePolicy(policy: Policy): string;
+export {};

package/dist/write-control.js

@@ -0,0 +1,63 @@
+const PROFILES = ['read-only', 'safe-writes', 'full-writes'];
+function parseGlobs(value) {
+    return (value ?? '').split(',').map((s) => s.trim()).filter(Boolean);
+}
+export function resolvePolicy(env = process.env) {
+    const raw = (env.GOOGLE_PROFILE ?? 'read-only').trim();
+    return {
+        profile: PROFILES.includes(raw) ? raw : 'read-only',
+        readOnly: /^(1|true|yes)$/i.test(env.GOOGLE_READ_ONLY ?? ''),
+        allow: parseGlobs(env.GOOGLE_WRITE_ALLOW),
+        deny: parseGlobs(env.GOOGLE_WRITE_DENY),
+    };
+}
+function globToRegExp(glob) {
+    const escaped = glob.trim().replace(/[.+^${}()|[\]\\]/g, '\\$&').replace(/\*/g, '.*');
+    return new RegExp(`^${escaped}$`);
+}
+function candidates(tool) {
+    const op = tool.name.includes('_') ? tool.name.slice(tool.name.indexOf('_') + 1) : tool.name;
+    return [`${tool.service}:${tool.cud}`, `${tool.service}:${op}`];
+}
+function matchesAny(tool, globs) {
+    if (globs.length === 0)
+        return false;
+    const cands = candidates(tool);
+    return globs.some((g) => {
+        const re = globToRegExp(g);
+        return cands.some((c) => re.test(c));
+    });
+}
+function profileAllows(profile, cud) {
+    if (profile === 'full-writes')
+        return true;
+    if (profile === 'safe-writes')
+        return cud === 'create' || cud === 'update';
+    return false;
+}
+export function isAllowed(tool, policy) {
+    if (tool.cud === 'read')
+        return true;
+    if (policy.readOnly)
+        return false;
+    if (matchesAny(tool, policy.deny))
+        return false;
+    if (matchesAny(tool, policy.allow))
+        return true;
+    return profileAllows(policy.profile, tool.cud);
+}
+export function writeDisabledResult(tool, policy) {
+    const envelope = {
+        error: 'write_disabled',
+        message: `"${tool.name}" (${tool.cud}) is disabled by the current write-control policy (profile: ${policy.profile}${policy.readOnly ? ', GOOGLE_READ_ONLY=true' : ''}).`,
+        hint: `Enable via GOOGLE_PROFILE=safe-writes|full-writes, or GOOGLE_WRITE_ALLOW="${tool.service}:*".`,
+        retriable: false,
+    };
+    return {
+        content: [{ type: 'text', text: JSON.stringify(envelope) }],
+        isError: true,
+    };
+}
+export function describePolicy(policy) {
+    return `profile=${policy.profile} readOnly=${policy.readOnly} allow=[${policy.allow.join(', ')}] deny=[${policy.deny.join(', ')}]`;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcp-google-multi",
-  "version": "4.5.0-alpha.1",
+  "version": "4.5.0-alpha.3",
   "description": "MCP server for Gmail, Google Drive, Calendar, Sheets, Docs, and Contacts with multi-account support",
   "type": "module",
   "license": "MIT",