token-goat 2.8.4 → 2.9.1

package/dist/{token-goat-chunk-L6YP6FKQ.mjs → token-goat-chunk-AUM22UQ2.mjs}

@@ -4,14 +4,14 @@ import {
   buildEvent,
   relay,
   relayInProcess
-} from "./token-goat-chunk-ZQ3PUOP3.mjs";
+} from "./token-goat-chunk-RRNRPCLX.mjs";
 import {
   MAX_STDIN_BYTES,
   readStdinJson
-} from "./token-goat-chunk-IZRXU64B.mjs";
-import "./token-goat-chunk-4OTIB7SB.mjs";
-import "./token-goat-chunk-CZALRRGN.mjs";
-import "./token-goat-chunk-E76UNTVK.mjs";
+} from "./token-goat-chunk-MR7MNSDR.mjs";
+import "./token-goat-chunk-FDXINYK4.mjs";
+import "./token-goat-chunk-LHMC5ENL.mjs";
+import "./token-goat-chunk-4ZDRTNGV.mjs";
 import "./token-goat-chunk-AO2QD2AG.mjs";
 import "./token-goat-chunk-AEX54RUZ.mjs";
 export {

package/dist/{token-goat-chunk-LZOAPGWR.mjs → token-goat-chunk-CD6U5OD6.mjs}

@@ -25,7 +25,7 @@ import {
   runSkeleton,
   runSymbol,
   withPinnedReads
-} from "./token-goat-chunk-RE7S7H26.mjs";
+} from "./token-goat-chunk-SXSWQMNP.mjs";
 import {
   buildProjectMap,
   embeddingsDepsAvailable,
@@ -34,10 +34,12 @@ import {
   getProjectIndexCounts,
   isWorkerRunning,
   mapLookupBytesSaved
-} from "./token-goat-chunk-4OTIB7SB.mjs";
+} from "./token-goat-chunk-FDXINYK4.mjs";
 import {
+  ENV_KEYS,
   VERSION,
   dataDir,
+  envStrList,
   extractErrorMessage,
   getDb,
   globalDbPath,
@@ -46,7 +48,7 @@ import {
   recordStat,
   resolveProjectRoot,
   savedTokensFromBytes
-} from "./token-goat-chunk-E76UNTVK.mjs";
+} from "./token-goat-chunk-4ZDRTNGV.mjs";
 import "./token-goat-chunk-AO2QD2AG.mjs";
 import "./token-goat-chunk-AEX54RUZ.mjs";
 
@@ -201,9 +203,30 @@ function withConfinedRead(pins, fn) {
     throw err;
   }
 }
+function mcpToolAllowlist() {
+  const names = envStrList(ENV_KEYS.MCP_TOOLS, [], ",");
+  return names.length === 0 ? null : new Set(names);
+}
 async function createMcpServer() {
   const [{ McpServer }, { z }] = await Promise.all([import("./token-goat-chunk-5CVKO3DA.mjs"), import("./token-goat-chunk-R4SR7MQY.mjs")]);
   const server = new McpServer({ name: "token-goat", version: VERSION });
+  const allowlist = mcpToolAllowlist();
+  if (allowlist !== null) {
+    const matched = /* @__PURE__ */ new Set();
+    const registerAll = server.registerTool.bind(server);
+    server.registerTool = ((name, definition, handler) => {
+      if (!allowlist.has(name)) return;
+      matched.add(name);
+      registerAll(name, definition, handler);
+    });
+    setTimeout(() => {
+      const unmatched = [...allowlist].filter((n) => !matched.has(n));
+      if (unmatched.length > 0) {
+        process.stderr.write(`token-goat: ${ENV_KEYS.MCP_TOOLS} names no such tool: ${unmatched.join(", ")}
+`);
+      }
+    }, 0).unref();
+  }
   const makeProjectRootField = (verb) => z.string().optional().describe(
     `absolute path to the workspace root to scope this ${verb} to; defaults to the MCP server process's cwd, which is not always the actual workspace root for MCP clients -- pass this explicitly when it might differ`
   );
@@ -703,5 +726,6 @@ async function createMcpServer() {
   return server;
 }
 export {
-  createMcpServer
+  createMcpServer,
+  mcpToolAllowlist
 };