Struct McpTools 

pub struct McpTools<'a> {
    pub state: &'a AppState,
    pub me: &'a Actor,
    pub tainted: AtomicBool,
    pub log: AccessCtx,
    pub origin: Origin,
}

The MCP tools with the rights of me. A run takes minutes, so every call uses the user’s rights as they are at that moment (a membership lost or a group restricted during the run applies to the next step).

Confused deputy: text that other users typed (request comments, names, notes) reaches the model and may tell it to copy restricted content into a comment or a draft that those users can read. So once a read in this run returned something a reader without the user’s restricted groups would not have got (or a write returned such an object, e.g. a draft with restricted dependencies), the text write tools refuse for the rest of the run.

Fields

state: &'a AppState

me: &'a Actor

tainted: AtomicBool

A read returned restricted content (see above).

log: AccessCtx

Channel (assistant) and client address for the read log of need-to-know groups.

origin: Origin

The request the run serves: its conditions on membership apply to every step again (see McpTools::with_origin).

Implementations

impl<'a> McpTools<'a>

pub fn new(state: &'a AppState, me: &'a Actor) -> McpTools<'a>

pub fn with_origin(self, origin: Origin) -> McpTools<'a>

The same tools for a request: its client address goes into the read log, and each step hides the groups whose network or session-age condition the request does not meet (and, for a request with a personal access token, the groups that switched tokens off).

pub async fn note_context(&self, question: &Question)

The page the question was asked on reaches the model in the first message, not through a tool: an item or change order the outsider may not see taints the run from the start (its number would otherwise be free to copy into a public text).

pub async fn note_page(&self, page: &PageContext)

The resolved page context reaches the model in the first message too (the selected row, the rows shown, a project group, a change request): if somebody outside the user’s restricted groups would get a different context from the same hint, the run starts tainted.

Trait Implementations

impl Tools for McpTools<'_>

async fn call(&self, name: &str, input: &Value) -> Value