@openai/agents-core/dist/utils/mcpApproval.mjs

The OpenAI Agents SDK is a lightweight yet powerful framework for building multi-agent workflows.

import { UserError } from "../errors.mjs";
const REQUIRE_APPROVAL_POLICY_KEYS = new Set(['always', 'never']);
const TOOL_NAMES_KEYS = new Set(['toolNames', 'tool_names']);
const READ_ONLY_KEYS = new Set(['readOnly', 'read_only']);
const MCP_APPROVAL_FILTER_KEYS = new Set([
    ...TOOL_NAMES_KEYS,
    ...READ_ONLY_KEYS,
]);
function isRecord(value) {
    return typeof value === 'object' && value !== null && !Array.isArray(value);
}
function invalidRequireApproval(message) {
    return new UserError(`Invalid hosted MCP requireApproval: ${message}`);
}
function normalizeApprovalFilter(value, path) {
    if (!isRecord(value)) {
        throw invalidRequireApproval(`${path} must be an object with toolNames or readOnly.`);
    }
    const keys = Object.keys(value);
    const unknownKeys = keys.filter((key) => !MCP_APPROVAL_FILTER_KEYS.has(key));
    if (unknownKeys.length > 0) {
        throw invalidRequireApproval(`${path} has unsupported key "${unknownKeys[0]}".`);
    }
    if ('toolNames' in value && 'tool_names' in value) {
        throw invalidRequireApproval(`${path} must not specify both toolNames and tool_names.`);
    }
    if ('readOnly' in value && 'read_only' in value) {
        throw invalidRequireApproval(`${path} must not specify both readOnly and read_only.`);
    }
    const normalized = {};
    const toolNames = value.toolNames ?? value.tool_names;
    if (typeof toolNames !== 'undefined' && !Array.isArray(toolNames)) {
        throw invalidRequireApproval(`${path}.toolNames must be an array.`);
    }
    if (Array.isArray(toolNames)) {
        for (const toolName of toolNames) {
            if (typeof toolName !== 'string' || toolName.length === 0) {
                throw invalidRequireApproval(`${path}.toolNames must contain only non-empty strings.`);
            }
        }
        normalized.tool_names = [...toolNames];
    }
    const readOnly = value.readOnly ?? value.read_only;
    if (typeof readOnly !== 'undefined') {
        if (typeof readOnly !== 'boolean') {
            throw invalidRequireApproval(`${path}.readOnly must be a boolean.`);
        }
        normalized.read_only = readOnly;
    }
    if (typeof normalized.tool_names === 'undefined' &&
        typeof normalized.read_only === 'undefined') {
        throw invalidRequireApproval(`${path} must include toolNames or readOnly.`);
    }
    return normalized;
}
function findOverlappingToolName(always, never) {
    if (!always?.tool_names || !never?.tool_names) {
        return undefined;
    }
    const neverNames = new Set(never.tool_names);
    return always.tool_names.find((toolName) => neverNames.has(toolName));
}
/**
 * Validates and canonicalizes hosted MCP approval policy config.
 */
export function normalizeHostedMcpRequireApproval(requireApproval) {
    if (typeof requireApproval === 'undefined') {
        return 'never';
    }
    if (typeof requireApproval === 'string') {
        if (requireApproval === 'always' || requireApproval === 'never') {
            return requireApproval;
        }
        throw invalidRequireApproval(`string value must be "always" or "never", got "${requireApproval}".`);
    }
    if (!isRecord(requireApproval)) {
        throw invalidRequireApproval('value must be "always", "never", or an object with always/never filters.');
    }
    const keys = Object.keys(requireApproval);
    if (keys.length === 0) {
        throw invalidRequireApproval('object value must include at least one of always or never.');
    }
    const unknownKeys = keys.filter((key) => !REQUIRE_APPROVAL_POLICY_KEYS.has(key));
    if (unknownKeys.length > 0) {
        throw invalidRequireApproval(`object value has unsupported key "${unknownKeys[0]}".`);
    }
    const normalized = {};
    if (typeof requireApproval.always !== 'undefined') {
        normalized.always = normalizeApprovalFilter(requireApproval.always, 'always');
    }
    if (typeof requireApproval.never !== 'undefined') {
        normalized.never = normalizeApprovalFilter(requireApproval.never, 'never');
    }
    const overlap = findOverlappingToolName(normalized.always, normalized.never);
    if (overlap) {
        throw invalidRequireApproval(`tool "${overlap}" cannot be listed in both always and never.`);
    }
    return normalized;
}
//# sourceMappingURL=mcpApproval.mjs.map