fix(core): prevent server name spoofing in policy engine (#12511)

2026-03-12 23:21:27 -07:00 · 2025-11-05 10:10:23 -08:00
parent 16113647de
commit f5bd474e51
8 changed files with 411 additions and 121 deletions
--- a/packages/core/src/tools/tools.ts
+++ b/packages/core/src/tools/tools.ts
@@ -78,6 +78,7 @@ export abstract class BaseToolInvocation<
    protected readonly messageBus?: MessageBus,
    readonly _toolName?: string,
    readonly _toolDisplayName?: string,
+    readonly _serverName?: string,
  ) {}

  abstract getDescription(): string;
@@ -215,6 +216,7 @@ export abstract class BaseToolInvocation<
        type: MessageBusType.TOOL_CONFIRMATION_REQUEST,
        toolCall,
        correlationId,
+        serverName: this._serverName,
      };

      try {