dangernoodle-io / mcpkit / 29208409192

96%

push

github

feat(mcpkit): hard-gate individual tools by name — App.BlockTools (MC-49) (#30)

- add blockedTools map[string]bool to gateState, mcpkit's third gate axis
- extend gateBlocked to (readOnly && risk != ReadOnly) || blockedGroups[group] || blockedTools[name]
- add App.BlockTools(names ...string), pre-start-only like BlockGroups (errors after Run/Connect/HTTPHandler)
- a name-blocked tool is never registered and, per gateBlocked routing through shouldRegister/unlockGroup, cannot be resurrected by Unlock
- runtime per-tool LockTool/UnlockTool deliberately deferred; startup hard-block only

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

18 of 18 new or added lines in 1 file covered. (100.0%)

1457 of 1514 relevant lines covered (96.24%)

1.11 hits per line