@agentproto/tool 0.2.2 → 0.3.1

package/dist/{chunk-VCLSUUB5.mjs → chunk-7UKT5ZEH.mjs}

@@ -93,7 +93,8 @@ var constructTool = createDoctype({
       metadata: Object.freeze({ ...def.metadata ?? {} }),
       idempotent: def.idempotent ?? false,
       defaultImplementation: def.defaultImplementation,
-      driverConstraints: freezeProviderConstraints(def.driverConstraints)
+      driverConstraints: freezeProviderConstraints(def.driverConstraints),
+      transformers: def.transformers ? Object.freeze([...def.transformers]) : void 0
     };
   }
 });
@@ -315,5 +316,5 @@ function toolFromManifest(args) {
 }
 
 export { ToolError, defineTool, parseToolManifest, toToolError, toToolResult, toolFromManifest, toolFromManifestOnly, toolManifestFrontmatterSchema, validateContext, validateInput, validateOutput };
-//# sourceMappingURL=chunk-VCLSUUB5.mjs.map
-//# sourceMappingURL=chunk-VCLSUUB5.mjs.map
+//# sourceMappingURL=chunk-7UKT5ZEH.mjs.map
+//# sourceMappingURL=chunk-7UKT5ZEH.mjs.map

package/dist/chunk-7UKT5ZEH.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts","../src/define-tool.ts","../src/manifest/index.ts"],"names":[],"mappings":";;;;;;;;;;;;AA6BO,IAAM,SAAA,GAAN,cAAwB,KAAA,CAAM;AAAA,EAC1B,IAAA;AAAA,EACA,SAAA;AAAA,EACA,KAAA;AAAA,EAET,YAAY,OAAA,EAA2B;AACrC,IAAA,KAAA,CAAM,QAAQ,OAAO,CAAA;AACrB,IAAA,IAAA,CAAK,IAAA,GAAO,WAAA;AACZ,IAAA,IAAA,CAAK,OAAO,OAAA,CAAQ,IAAA;AACpB,IAAA,IAAA,CAAK,SAAA,GAAY,QAAQ,SAAA,IAAa,KAAA;AACtC,IAAA,IAAA,CAAK,QAAQ,OAAA,CAAQ,KAAA;AAAA,EACvB;AAAA,EAEA,MAAA,GAA2B;AACzB,IAAA,OAAO;AAAA,MACL,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,GAAI,KAAK,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,IAAA,CAAK,KAAA,EAAM,GAAI;AAAC,KAC1D;AAAA,EACF;AACF;AAMO,SAAS,YAAY,MAAA,EAA4B;AACtD,EAAA,IAAI,MAAA,YAAkB,WAAW,OAAO,MAAA;AACxC,EAAA,IAAI,kBAAkB,KAAA,EAAO;AAC3B,IAAA,OAAO,IAAI,SAAA,CAAU;AAAA,MACnB,IAAA,EAAM,UAAA;AAAA,MACN,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,KAAA,EAAO;AAAA,KACR,CAAA;AAAA,EACH;AACA,EAAA,OAAO,IAAI,SAAA,CAAU;AAAA,IACnB,IAAA,EAAM,UAAA;AAAA,IACN,OAAA,EAAS,OAAO,MAAM,CAAA;AAAA,IACtB,KAAA,EAAO;AAAA,GACR,CAAA;AACH;AAMO,SAAS,YAAA,CACd,OACA,MAAA,EACe;AACf,EAAA,IAAI,WAAW,MAAA,EAAW;AACxB,IAAA,MAAM,GAAA,GAAM,YAAY,MAAM,CAAA;AAC9B,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,CAAI,QAAO,EAAE;AAAA,EAC1C;AACA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAkB;AACvC;;;ACtEA,IAAM,cAAA,GAAwC;AAAA,EAC5C,KAAA;AAAA,EACA,MAAA;AAAA,EACA,KAAA;AAAA,EACA,KAAA;AAAA,EACA;AACF,CAAA;AAsBA,IAAM,gBAAgB,aAAA,CAGpB;AAAA,EACA,GAAA,EAAK,EAAA;AAAA,EACL,IAAA,EAAM,MAAA;AAAA,EACN,SAAS,GAAA,EAAK;AAGZ,IAAA,IAAI,aAAc,GAAA,EAA4C;AAC5D,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,gBAAA,EAAmB,IAAI,EAAE,CAAA,yJAAA;AAAA,OAG3B;AAAA,IACF;AAAA,EACF,CAAA;AAAA,EACA,MAAM,GAAA,EAAK;AACT,IAAA,OAAO;AAAA,MACL,IAAI,GAAA,CAAI,EAAA;AAAA,MACR,IAAA,EAAM,GAAA,CAAI,IAAA,IAAQ,GAAA,CAAI,EAAA;AAAA,MACtB,aAAa,GAAA,CAAI,WAAA;AAAA,MACjB,SAAS,GAAA,CAAI,OAAA;AAAA,MACb,aAAa,GAAA,CAAI,WAAA;AAAA,MACjB,cAAc,GAAA,CAAI,YAAA;AAAA,MAClB,MAAA,EAAQ,GAAA,CAAI,MAAA,GAAS,MAAA,CAAO,MAAA,CAAO,EAAE,GAAG,GAAA,CAAI,MAAA,EAAQ,CAAA,GAAI,MAAA;AAAA,MACxD,OAAA,EAAS,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,MAAA,CAAO,EAAE,GAAG,GAAA,CAAI,OAAA,EAAS,CAAA,GAAI,MAAA;AAAA,MAC3D,eAAe,GAAA,CAAI,aAAA;AAAA,MACnB,OAAA,EAAS,OAAO,MAAA,CAAO,CAAC,GAAI,GAAA,CAAI,OAAA,IAAW,EAAG,CAAC,CAAA;AAAA,MAC/C,QAAA,EAAU,kBAAA,CAAmB,GAAA,CAAI,QAAQ,CAAA;AAAA,MACzC,QAAA,EAAU,eAAA,CAAgB,GAAA,CAAI,QAAA,EAAU,IAAI,OAAO,CAAA;AAAA,MACnD,SAAA,EAAW,IAAI,SAAA,IAAa,CAAA;AAAA,MAC5B,SAAA,EAAW,IAAI,SAAA,IAAa,SAAA;AAAA,MAC5B,SAAA,EAAW,IAAI,SAAA,IAAa,GAAA;AAAA,MAC5B,OAAO,GAAA,CAAI,KAAA;AAAA,MACX,IAAA,EAAM,OAAO,MAAA,CAAO,CAAC,GAAI,GAAA,CAAI,IAAA,IAAQ,EAAG,CAAC,CAAA;AAAA,MACzC,QAAA,EAAU,OAAO,MAAA,CAAO,EAAE,GAAI,GAAA,CAAI,QAAA,IAAY,EAAC,EAAI,CAAA;AAAA,MACnD,UAAA,EAAY,IAAI,UAAA,IAAc,KAAA;AAAA,MAC9B,uBAAuB,GAAA,CAAI,qBAAA;AAAA,MAC3B,iBAAA,EAAmB,yBAAA,CAA0B,GAAA,CAAI,iBAAiB,CAAA;AAAA,MAClE,YAAA,EAAc,GAAA,CAAI,YAAA,GACd,MAAA,CAAO,MAAA,CAAO,CAAC,GAAG,GAAA,CAAI,YAAY,CAAC,CAAA,GACnC;AAAA,KACN;AAAA,EACF;AACF,CAAC,CAAA;AAQM,SAAS,WAKd,UAAA,EACuC;AACvC,EAAA,OAAO,aAAA;AAAA,IACL;AAAA,GACF;AACF;AAYO,SAAS,aAAA,CACd,QACA,KAAA,EAC0B;AAC1B,EAAA,IAAI,OAAO,WAAA,EAAa;AACtB,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,WAAA,CAAY,SAAA,CAAU,KAAK,CAAA;AACjD,IAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,MAAA,OAAO;AAAA,QACL,EAAA,EAAI,KAAA;AAAA,QACJ,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,eAAA;AAAA,UACN,OAAA,EAAS,OAAO,MAAA,CAAO,EAAE,MAAM,eAAA,CAAgB,MAAA,CAAO,KAAA,CAAM,MAAM,CAAC,CAAA,CAAA;AAAA,UACnE,KAAA,EAAO,OAAO,KAAA,CAAM;AAAA;AACtB,OACF;AAAA,IACF;AACA,IAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,OAAO,IAAA,EAAe;AAAA,EAClD;AACA,EAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,IAAA,OAAO,kBAAA,CAA2B,MAAA,CAAO,EAAA,EAAI,MAAA,CAAO,QAAQ,KAAK,CAAA;AAAA,EACnE;AACA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,KAAA,EAAgB;AAC5C;AAaO,SAAS,eAAA,CACd,QACA,OAAA,EAC4B;AAC5B,EAAA,IAAI,CAAC,OAAO,aAAA,EAAe;AACzB,IAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,OAAA,EAAoB;AAAA,EAChD;AACA,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,aAAA,CAAc,SAAA,CAAU,OAAO,CAAA;AACrD,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,KAAA,EAAO;AAAA,QACL,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS,OAAO,MAAA,CAAO,EAAE,kDAA6C,eAAA,CAAgB,MAAA,CAAO,KAAA,CAAM,MAAM,CAAC,CAAA,CAAA;AAAA,QAC1G,KAAA,EAAO,SAAA;AAAA,QACP,KAAA,EAAO,OAAO,KAAA,CAAM;AAAA;AACtB,KACF;AAAA,EACF;AACA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,OAAO,IAAA,EAAiB;AACpD;AAYO,SAAS,cAAA,CACd,QACA,MAAA,EACS;AACT,EAAA,IAAI,OAAO,YAAA,EAAc;AACvB,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,YAAA,CAAa,SAAA,CAAU,MAAM,CAAA;AACnD,IAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,MAAA,MAAM,IAAI,SAAA,CAAU;AAAA,QAClB,IAAA,EAAM,gBAAA;AAAA,QACN,OAAA,EAAS,OAAO,MAAA,CAAO,EAAE,uEAAkE,eAAA,CAAgB,MAAA,CAAO,KAAA,CAAM,MAAM,CAAC,CAAA,CAAA;AAAA,QAC/H,KAAA,EAAO,OAAO,KAAA,CAAM;AAAA,OACrB,CAAA;AAAA,IACH;AACA,IAAA,OAAO,MAAA,CAAO,IAAA;AAAA,EAChB;AACA,EAAA,IAAI,OAAO,OAAA,EAAS;AAClB,IAAA,MAAM,SAAS,kBAAA,CAA4B,MAAA,CAAO,EAAA,EAAI,MAAA,CAAO,SAAS,MAAM,CAAA;AAC5E,IAAA,IAAI,CAAC,OAAO,EAAA,EAAI;AACd,MAAA,MAAM,IAAI,SAAA,CAAU;AAAA,QAClB,IAAA,EAAM,gBAAA;AAAA,QACN,OAAA,EAAS,OAAO,KAAA,CAAM,OAAA;AAAA,QACtB,KAAA,EAAO,OAAO,KAAA,CAAM;AAAA,OACrB,CAAA;AAAA,IACH;AACA,IAAA,OAAO,MAAA,CAAO,KAAA;AAAA,EAChB;AACA,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,eAAA,CACP,UACA,OAAA,EACe;AACf,EAAA,IAAI,UAAU,OAAO,QAAA;AACrB,EAAA,OAAO,OAAA,IAAW,OAAA,CAAQ,MAAA,GAAS,CAAA,GAAI,WAAA,GAAc,MAAA;AACvD;AAEA,SAAS,mBACP,IAAA,EAC4B;AAC5B,EAAA,OAAO,OAAO,MAAA,CAAO;AAAA,IACnB,OAAA,EAAS,OAAO,MAAA,CAAO,CAAC,GAAI,IAAA,EAAM,OAAA,IAAW,EAAG,CAAC,CAAA;AAAA,IACjD,OAAA,EAAS,OAAO,MAAA,CAAO,CAAC,GAAI,IAAA,EAAM,OAAA,IAAW,EAAG,CAAC,CAAA;AAAA,IACjD,KAAA,EAAO,OAAO,MAAA,CAAO,CAAC,GAAI,IAAA,EAAM,KAAA,IAAS,EAAG,CAAC;AAAA,GAC9C,CAAA;AACH;AAEA,SAAS,0BACP,CAAA,EAC6B;AAC7B,EAAA,MAAM,MAAA,GAAA,CAAU,CAAA,EAAG,MAAA,IAAU,EAAC,EAAG,MAAA;AAAA,IAAO,CAAC,CAAA,KACvC,cAAA,CAAe,QAAA,CAAS,CAAe;AAAA,GACzC;AACA,EAAA,MAAM,WAAA,GAAA,CAAe,CAAA,EAAG,WAAA,IAAe,EAAC,EAAG,MAAA;AAAA,IAAO,CAAC,CAAA,KACjD,cAAA,CAAe,QAAA,CAAS,CAAe;AAAA,GACzC;AACA,EAAA,OAAO,OAAO,MAAA,CAAO;AAAA,IACnB,MAAA,EAAQ,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA;AAAA,IAC5B,WAAA,EAAa,MAAA,CAAO,MAAA,CAAO,WAAW;AAAA,GACvC,CAAA;AACH;AAEA,SAAS,gBACP,MAAA,EACQ;AACR,EAAA,OAAO,MAAA,CACJ,IAAI,CAAC,CAAA,KAAM,GAAG,CAAA,CAAE,IAAA,CAAK,MAAA,GAAS,CAAA,GAAI,CAAA,CAAE,IAAA,CAAK,KAAK,GAAG,CAAA,GAAI,OAAO,EAAE,CAAA,EAAG,EAAE,OAAO,CAAA,CAAE,CAAA,CAC5E,IAAA,CAAK,IAAI,CAAA;AACd;AAIA,IAAM,OAAO,IAAI,GAAA,CAAI,EAAE,SAAA,EAAW,MAAM,CAAA;AAKxC,IAAM,eAAA,uBAAsB,OAAA,EAG1B;AAEF,SAAS,kBAAA,CACP,MAAA,EACA,MAAA,EACA,KAAA,EACqB;AACrB,EAAA,IAAI,QAAA,GAAW,eAAA,CAAgB,GAAA,CAAI,MAAM,CAAA;AACzC,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,QAAA,GAAW,IAAA,CAAK,QAAQ,MAA4C,CAAA;AACpE,IAAA,eAAA,CAAgB,GAAA,CAAI,QAAQ,QAAQ,CAAA;AAAA,EACtC;AACA,EAAA,MAAM,KAAA,GAAQ,SAAS,KAAK,CAAA;AAC5B,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,MAAA,IAAU,EAAC;AACnC,IAAA,MAAM,OAAA,GAAU,MAAA,CACb,GAAA,CAAI,CAAC,MAAM,CAAA,EAAG,CAAA,CAAE,YAAA,IAAgB,GAAG,IAAI,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA,CAClD,KAAK,IAAI,CAAA;AACZ,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,KAAA,EAAO;AAAA,QACL,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS,CAAA,IAAA,EAAO,MAAM,CAAA,GAAA,EAAM,OAAO,CAAA,CAAA;AAAA,QACnC,KAAA,EAAO;AAAA;AACT,KACF;AAAA,EACF;AACA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAkB;AACvC;;;ACpRO,IAAM,6BAAA,GAAgC,EAAE,MAAA,CAAO;AAAA,EACpD,MAAA,EAAQ,CAAA,CAAE,OAAA,CAAQ,oBAAoB,EAAE,QAAA,EAAS;AAAA,EACjD,IAAA,EAAM,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,EAAE,CAAA;AAAA,EAC9B,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,MAAM,0BAA0B,CAAA;AAAA,EAC/C,WAAA,EAAa,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAI,CAAA;AAAA,EACvC,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,MAAM,gBAAgB,CAAA;AAAA;AAAA,EAG1C,SAAS,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,EACtC,QAAA,EAAU,EACP,MAAA,CAAO;AAAA,IACN,SAAS,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,IACtC,SAAS,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,IACtC,OAAO,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA;AAAS,GACrC,EACA,QAAA,EAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKZ,UAAU,CAAA,CACP,MAAA;AAAA,IACC,CAAC,CAAA,KACC,OAAO,CAAA,KAAM,QAAA,KACZ,CAAA,KAAM,MAAA,IACL,CAAA,KAAM,QAAA,IACN,CAAA,KAAM,WAAA,IACN,UAAA,CAAW,KAAK,CAAC,CAAA,CAAA;AAAA,IACrB,EAAE,SAAS,4DAAA;AAA6D,IAEzE,QAAA,EAAS;AAAA,EACZ,UAAA,EAAY,EACT,KAAA,CAAM,CAAC,EAAE,OAAA,CAAQ,CAAC,CAAA,EAAG,CAAA,CAAE,OAAA,CAAQ,CAAC,GAAG,CAAA,CAAE,OAAA,CAAQ,CAAC,CAAA,EAAG,CAAA,CAAE,QAAQ,CAAC,CAAC,CAAC,CAAA,CAC9D,QAAA,EAAS;AAAA,EACZ,UAAA,EAAY,EAAE,IAAA,CAAK,CAAC,WAAW,SAAA,EAAW,WAAW,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,EACjE,UAAA,EAAY,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,GAAW,QAAA,EAAS;AAAA,EACjD,UAAA,EAAY,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,EACjC,MAAM,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,EACnC,QAAA,EAAU,CAAA,CAAE,MAAA,CAAO,CAAA,CAAE,MAAA,IAAU,CAAA,CAAE,OAAA,EAAS,CAAA,CAAE,QAAA,EAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAMrD,MAAA,EAAQ,CAAA,CAAE,MAAA,CAAO,CAAA,CAAE,MAAA,IAAU,CAAA,CAAE,OAAA,EAAS,CAAA,CAAE,QAAA,EAAS;AAAA,EACnD,OAAA,EAAS,CAAA,CAAE,MAAA,CAAO,CAAA,CAAE,MAAA,IAAU,CAAA,CAAE,OAAA,EAAS,CAAA,CAAE,QAAA,EAAS;AAAA;AAAA;AAAA,EAIpD,IAAA,EAAM,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,EAC3B,GAAA,EAAK,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,EAC1B,MAAA,EAAQ,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,EAC7B,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,EAC9B,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA;AACvB,CAAC;AAeM,SAAS,kBAAkB,MAAA,EAA8B;AAC9D,EAAA,MAAM,MAAA,GAAS,OAAO,MAAM,CAAA;AAC5B,EAAA,IAAI,OAAO,IAAA,CAAK,MAAA,CAAO,IAAI,CAAA,CAAE,WAAW,CAAA,EAAG;AACzC,IAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AAAA,EACnE;AACA,EAAA,MAAM,MAAA,GAAS,6BAAA,CAA8B,SAAA,CAAU,MAAA,CAAO,IAAI,CAAA;AAClE,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,iDAA4C,MAAA,CAAO,KAAA,CAAM,OACtD,GAAA,CAAI,CAAA,CAAA,KAAK,GAAG,CAAA,CAAE,IAAA,CAAK,KAAK,GAAG,CAAC,KAAK,CAAA,CAAE,OAAO,EAAE,CAAA,CAC5C,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KACf;AAAA,EACF;AACA,EAAA,OAAO,EAAE,WAAA,EAAa,MAAA,CAAO,IAAA,EAAM,IAAA,EAAM,OAAO,OAAA,EAAQ;AAC1D;AAcO,SAAS,qBACd,QAAA,EAC8B;AAC9B,EAAA,MAAM,KAAK,QAAA,CAAS,WAAA;AACpB,EAAA,OAAO,UAAA,CAAW;AAAA,IAChB,IAAI,EAAA,CAAG,EAAA;AAAA,IACP,MAAM,EAAA,CAAG,IAAA;AAAA,IACT,aAAa,EAAA,CAAG,WAAA;AAAA,IAChB,SAAS,EAAA,CAAG,OAAA;AAAA,IACZ,QAAQ,EAAA,CAAG,MAAA;AAAA,IACX,SAAS,EAAA,CAAG,OAAA;AAAA,IACZ,SAAS,EAAA,CAAG,OAAA;AAAA,IACZ,UAAU,EAAA,CAAG,QAAA;AAAA,IACb,UAAU,EAAA,CAAG,QAAA;AAAA,IACb,WAAW,EAAA,CAAG,UAAA;AAAA,IACd,WAAW,EAAA,CAAG,UAAA;AAAA,IACd,WAAW,EAAA,CAAG,UAAA;AAAA,IACd,YAAY,EAAA,CAAG,UAAA;AAAA,IACf,MAAM,EAAA,CAAG,IAAA;AAAA,IACT,UAAU,EAAA,CAAG;AAAA,GACd,CAAA;AACH;AAuBO,SAAS,iBAId,IAAA,EAKwC;AACxC,EAAA,MAAM,EAAA,GAAK,KAAK,QAAA,CAAS,WAAA;AACzB,EAAA,OAAO,UAAA,CAAsC;AAAA,IAC3C,IAAI,EAAA,CAAG,EAAA;AAAA,IACP,MAAM,EAAA,CAAG,IAAA;AAAA,IACT,aAAa,EAAA,CAAG,WAAA;AAAA,IAChB,SAAS,EAAA,CAAG,OAAA;AAAA,IACZ,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,cAAc,IAAA,CAAK,YAAA;AAAA,IACnB,QAAQ,EAAA,CAAG,MAAA;AAAA,IACX,SAAS,EAAA,CAAG,OAAA;AAAA,IACZ,eAAe,IAAA,CAAK,aAAA;AAAA,IACpB,SAAS,EAAA,CAAG,OAAA;AAAA,IACZ,UAAU,EAAA,CAAG,QAAA;AAAA,IACb,UAAU,EAAA,CAAG,QAAA;AAAA,IACb,WAAW,EAAA,CAAG,UAAA;AAAA,IACd,WAAW,EAAA,CAAG,UAAA;AAAA,IACd,WAAW,EAAA,CAAG,UAAA;AAAA,IACd,YAAY,EAAA,CAAG,UAAA;AAAA,IACf,MAAM,EAAA,CAAG,IAAA;AAAA,IACT,UAAU,EAAA,CAAG;AAAA,GACd,CAAA;AACH","file":"chunk-7UKT5ZEH.mjs","sourcesContent":["import type { ToolResult } from \"./types.js\"\n\n/**\n * AIP-14 conventional error codes. Tool-specific codes MAY use a domain\n * prefix (`\"stripe:card_declined\"`).\n */\nexport type ToolErrorCode =\n  | \"input_invalid\"\n  | \"output_invalid\"\n  | \"unauthorised\"\n  | \"not_found\"\n  | \"rate_limited\"\n  | \"timeout\"\n  | \"upstream_error\"\n  | \"internal\"\n  | (string & {})\n\nexport interface ToolErrorPayload {\n  code: ToolErrorCode\n  message: string\n  retryable?: boolean\n  cause?: unknown\n}\n\n/**\n * Structured error thrown by tool bodies. Adapters wrap this into the\n * standard {@link ToolResult} envelope; bodies MUST throw it (never\n * return error objects).\n */\nexport class ToolError extends Error {\n  readonly code: ToolErrorCode\n  readonly retryable: boolean\n  readonly cause: unknown\n\n  constructor(payload: ToolErrorPayload) {\n    super(payload.message)\n    this.name = \"ToolError\"\n    this.code = payload.code\n    this.retryable = payload.retryable ?? false\n    this.cause = payload.cause\n  }\n\n  toJSON(): ToolErrorPayload {\n    return {\n      code: this.code,\n      message: this.message,\n      retryable: this.retryable,\n      ...(this.cause !== undefined ? { cause: this.cause } : {}),\n    }\n  }\n}\n\n/**\n * Wrap an unknown thrown value into a {@link ToolError}. Used by adapters\n * to normalise non-ToolError throws into the standard envelope.\n */\nexport function toToolError(thrown: unknown): ToolError {\n  if (thrown instanceof ToolError) return thrown\n  if (thrown instanceof Error) {\n    return new ToolError({\n      code: \"internal\",\n      message: thrown.message,\n      cause: thrown,\n    })\n  }\n  return new ToolError({\n    code: \"internal\",\n    message: String(thrown),\n    cause: thrown,\n  })\n}\n\n/**\n * Adapter helper: project a thrown ToolError (or any throw) into the\n * standard {@link ToolResult} envelope. Adapters MUST do this; bodies MUST NOT.\n */\nexport function toToolResult<T>(\n  value: T | undefined,\n  thrown: unknown\n): ToolResult<T> {\n  if (thrown !== undefined) {\n    const err = toToolError(thrown)\n    return { ok: false, error: err.toJSON() }\n  }\n  return { ok: true, value: value as T }\n}\n","import { createDoctype } from \"@agentproto/define-doctype\"\nimport Ajv from \"ajv\"\nimport type { ZodType } from \"zod\"\nimport { ToolError } from \"./errors.js\"\nimport type {\n  ApprovalClass,\n  DriverConstraints,\n  DriverKind,\n  ToolCapabilities,\n  ToolContext,\n  ToolDefinition,\n  ToolHandle,\n  ValidationResult,\n} from \"./types.js\"\n\nconst PROVIDER_KINDS: readonly DriverKind[] = [\n  \"cli\",\n  \"http\",\n  \"mcp\",\n  \"sdk\",\n  \"builtin\",\n]\n\n/**\n * AIP-14 reference implementation of `defineTool`.\n *\n * Returns a {@link ToolHandle} with defaults applied. The handle is a\n * pure contract — schemas, governance metadata, provider routing\n * hints. Bodies live on AIP-30 PROVIDER manifests; invocation goes\n * through provider-runtime's resolver.\n *\n * Built on `createDoctype` from `@agentproto/define-doctype`: the\n * id-pattern + description-length validation and the top-level\n * `Object.freeze` are shared with every other AIP defineX. The\n * spec-14-specific parts (migration guard for `execute`, defaulting\n * `approval` from `mutates`, freezing nested arrays/objects) live in\n * `validate` and `build` below.\n *\n * Conformance highlights ([§ Conformance rules](https://agentproto.sh/docs/aip-14)):\n *  - No `execute` field on the contract — bodies are providers' job.\n *  - `defineTool` MUST refuse a definition carrying `execute` (migration error).\n *  - No I/O at module load — `defineTool(...)` is pure construction.\n */\nconst constructTool = createDoctype<\n  ToolDefinition<unknown, unknown, ToolContext>,\n  ToolHandle<unknown, unknown, ToolContext>\n>({\n  aip: 14,\n  name: \"tool\",\n  validate(def) {\n    // Migration guard: catch authors trying to ship a body on the contract.\n    // The body lives on a PROVIDER (per AIP-30); reject at construction.\n    if (\"execute\" in (def as unknown as Record<string, unknown>)) {\n      throw new Error(\n        `defineTool: id='${def.id}' carries an 'execute' property. ` +\n          `Bodies live on AIP-30 PROVIDER manifests, not on the TOOL contract. ` +\n          `See https://agentproto.sh/docs/aip-30 for migration.`,\n      )\n    }\n  },\n  build(def) {\n    return {\n      id: def.id,\n      name: def.name ?? def.id,\n      description: def.description,\n      version: def.version,\n      inputSchema: def.inputSchema,\n      outputSchema: def.outputSchema,\n      inputs: def.inputs ? Object.freeze({ ...def.inputs }) : undefined,\n      outputs: def.outputs ? Object.freeze({ ...def.outputs }) : undefined,\n      contextSchema: def.contextSchema,\n      mutates: Object.freeze([...(def.mutates ?? [])]),\n      requires: freezeCapabilities(def.requires),\n      approval: defaultApproval(def.approval, def.mutates),\n      riskLevel: def.riskLevel ?? 0,\n      costClass: def.costClass ?? \"trivial\",\n      timeoutMs: def.timeoutMs ?? 30_000,\n      retry: def.retry,\n      tags: Object.freeze([...(def.tags ?? [])]),\n      metadata: Object.freeze({ ...(def.metadata ?? {}) }),\n      idempotent: def.idempotent ?? false,\n      defaultImplementation: def.defaultImplementation,\n      driverConstraints: freezeProviderConstraints(def.driverConstraints),\n      transformers: def.transformers\n        ? Object.freeze([...def.transformers])\n        : undefined,\n    }\n  },\n})\n\n/**\n * Public-facing `defineTool` — typed wrapper around `constructTool`\n * that preserves the per-call `<TInput, TOutput, TContext>` inference\n * so callers don't write any generics. The wrapper exists purely for\n * generic propagation; the runtime body is the meta-factory above.\n */\nexport function defineTool<\n  TInput,\n  TOutput,\n  TContext extends ToolContext = ToolContext,\n>(\n  definition: ToolDefinition<TInput, TOutput, TContext>,\n): ToolHandle<TInput, TOutput, TContext> {\n  return constructTool(\n    definition as ToolDefinition<unknown, unknown, ToolContext>,\n  ) as unknown as ToolHandle<TInput, TOutput, TContext>\n}\n\n/**\n * Validate input against a tool's `inputSchema`. Returns a typed\n * {@link ValidationResult}; provider runtimes MUST call this BEFORE\n * dispatching to the provider's body.\n *\n * Priority:\n *  1. zod `inputSchema` (v0.1) — used when present.\n *  2. JSON Schema `inputs` (v0.2) — fallback for manifest-only tools.\n *  3. No schema — passthrough (returns `ok: true`).\n */\nexport function validateInput<TInput>(\n  handle: Pick<ToolHandle<TInput>, \"id\" | \"inputSchema\" | \"inputs\">,\n  input: unknown,\n): ValidationResult<TInput> {\n  if (handle.inputSchema) {\n    const result = handle.inputSchema.safeParse(input)\n    if (!result.success) {\n      return {\n        ok: false,\n        error: {\n          code: \"input_invalid\",\n          message: `id='${handle.id}': ${formatZodIssues(result.error.issues)}`,\n          cause: result.error.issues,\n        },\n      }\n    }\n    return { ok: true, value: result.data as TInput }\n  }\n  if (handle.inputs) {\n    return validateJsonSchema<TInput>(handle.id, handle.inputs, input)\n  }\n  return { ok: true, value: input as TInput }\n}\n\n/**\n * Validate context against a tool's `contextSchema` (when declared).\n * Returns a typed {@link ValidationResult}; provider runtimes MUST\n * call this BEFORE dispatching when the contract has a contextSchema.\n *\n * Tools without a contextSchema accept any context shape; this helper\n * returns the input verbatim in that case.\n *\n * Context validation uses only zod (no JSON Schema fallback) — context\n * schemas are always authored in TS, never in manifests.\n */\nexport function validateContext<TContext extends ToolContext = ToolContext>(\n  handle: Pick<ToolHandle<unknown, unknown, TContext>, \"id\" | \"contextSchema\">,\n  context: unknown,\n): ValidationResult<TContext> {\n  if (!handle.contextSchema) {\n    return { ok: true, value: context as TContext }\n  }\n  const result = handle.contextSchema.safeParse(context)\n  if (!result.success) {\n    return {\n      ok: false,\n      error: {\n        code: \"input_invalid\",\n        message: `id='${handle.id}': context does not match contextSchema — ${formatZodIssues(result.error.issues)}`,\n        field: \"context\",\n        cause: result.error.issues,\n      },\n    }\n  }\n  return { ok: true, value: result.data as TContext }\n}\n\n/**\n * Validate output against a tool's `outputSchema`. Returns the typed\n * value on success; throws {@link ToolError} with code `\"output_invalid\"`\n * on contract violation.\n *\n * Priority:\n *  1. zod `outputSchema` (v0.1) — used when present.\n *  2. JSON Schema `outputs` (v0.2) — fallback for manifest-only tools.\n *  3. No schema — passthrough (returns the value as-is).\n */\nexport function validateOutput<TOutput>(\n  handle: Pick<ToolHandle<unknown, TOutput>, \"id\" | \"outputSchema\" | \"outputs\">,\n  output: unknown,\n): TOutput {\n  if (handle.outputSchema) {\n    const result = handle.outputSchema.safeParse(output)\n    if (!result.success) {\n      throw new ToolError({\n        code: \"output_invalid\",\n        message: `id='${handle.id}': provider produced output that does not match outputSchema — ${formatZodIssues(result.error.issues)}`,\n        cause: result.error.issues,\n      })\n    }\n    return result.data as TOutput\n  }\n  if (handle.outputs) {\n    const result = validateJsonSchema<TOutput>(handle.id, handle.outputs, output)\n    if (!result.ok) {\n      throw new ToolError({\n        code: \"output_invalid\",\n        message: result.error.message,\n        cause: result.error.cause,\n      })\n    }\n    return result.value\n  }\n  return output as TOutput\n}\n\nfunction defaultApproval(\n  declared: ApprovalClass | undefined,\n  mutates: readonly string[] | undefined,\n): ApprovalClass {\n  if (declared) return declared\n  return mutates && mutates.length > 0 ? \"on-mutate\" : \"auto\"\n}\n\nfunction freezeCapabilities(\n  caps: ToolCapabilities | undefined,\n): Readonly<ToolCapabilities> {\n  return Object.freeze({\n    network: Object.freeze([...(caps?.network ?? [])]),\n    secrets: Object.freeze([...(caps?.secrets ?? [])]),\n    tools: Object.freeze([...(caps?.tools ?? [])]),\n  })\n}\n\nfunction freezeProviderConstraints(\n  c: DriverConstraints | undefined,\n): Required<DriverConstraints> {\n  const forbid = (c?.forbid ?? []).filter((k): k is DriverKind =>\n    PROVIDER_KINDS.includes(k as DriverKind),\n  )\n  const requireKind = (c?.requireKind ?? []).filter((k): k is DriverKind =>\n    PROVIDER_KINDS.includes(k as DriverKind),\n  )\n  return Object.freeze({\n    forbid: Object.freeze(forbid) as readonly DriverKind[],\n    requireKind: Object.freeze(requireKind) as readonly DriverKind[],\n  })\n}\n\nfunction formatZodIssues(\n  issues: ReadonlyArray<{ path: ReadonlyArray<PropertyKey>; message: string }>,\n): string {\n  return issues\n    .map((i) => `${i.path.length > 0 ? i.path.join(\".\") + \": \" : \"\"}${i.message}`)\n    .join(\"; \")\n}\n\n// Shared Ajv instance — created once at module load.\n// allErrors: true so we surface all violations, not just the first.\nconst _ajv = new Ajv({ allErrors: true })\n\n// Validator cache keyed by schema object identity. Avoids repeated _ajv.compile()\n// calls (which go through Ajv's internal registry) and lets GC collect validators\n// when a tool handle is no longer referenced.\nconst _validatorCache = new WeakMap<\n  object,\n  ReturnType<typeof _ajv.compile>\n>()\n\nfunction validateJsonSchema<T>(\n  toolId: string,\n  schema: Record<string, unknown>,\n  value: unknown,\n): ValidationResult<T> {\n  let validate = _validatorCache.get(schema)\n  if (!validate) {\n    validate = _ajv.compile(schema as Parameters<typeof _ajv.compile>[0])\n    _validatorCache.set(schema, validate)\n  }\n  const valid = validate(value)\n  if (!valid) {\n    const errors = validate.errors ?? []\n    const message = errors\n      .map((e) => `${e.instancePath || \"/\"} ${e.message}`)\n      .join(\"; \")\n    return {\n      ok: false,\n      error: {\n        code: \"input_invalid\",\n        message: `id='${toolId}': ${message}`,\n        cause: errors,\n      },\n    }\n  }\n  return { ok: true, value: value as T }\n}\n\nexport type { ZodType }\n","import matter from \"gray-matter\"\nimport { z, type ZodType } from \"zod\"\nimport { defineTool } from \"../define-tool.js\"\nimport type { ApprovalClass, ToolContext, ToolHandle } from \"../types.js\"\n\n/**\n * AIP-14 TOOL.md sidecar parser.\n *\n * Reads frontmatter (host-relevant metadata) + body (long-form\n * description / examples / errors). The TS module's `defineTool(...)`\n * supplies the schemas and execute body; this manifest supplies the\n * runtime metadata that overrides or augments the in-code defaults.\n *\n * Field set covers AIP-14 §\"Frontmatter\" — required and optional fields\n * normalised to snake_case → camelCase.\n */\n\nexport const toolManifestFrontmatterSchema = z.object({\n  schema: z.literal(\"agentproto/tool/v1\").optional(),\n  name: z.string().min(1).max(80),\n  id: z.string().regex(/^[a-z][a-z0-9._-]{1,63}$/),\n  description: z.string().min(1).max(2000),\n  version: z.string().regex(/^\\d+\\.\\d+\\.\\d+/),\n\n  // Optional metadata\n  mutates: z.array(z.string()).optional(),\n  requires: z\n    .object({\n      network: z.array(z.string()).optional(),\n      secrets: z.array(z.string()).optional(),\n      tools: z.array(z.string()).optional(),\n    })\n    .optional(),\n  // `ApprovalClass` is `\"auto\" | \"always\" | \"on-mutate\" | \\`policy:${string}\\``.\n  // z.union widens the regex branch to plain `string` (zod can't express\n  // template literal types), so we use `z.custom` to keep the inferred\n  // type exact — matters because `defineTool` accepts `ApprovalClass`.\n  approval: z\n    .custom<ApprovalClass>(\n      (v): v is ApprovalClass =>\n        typeof v === \"string\" &&\n        (v === \"auto\" ||\n          v === \"always\" ||\n          v === \"on-mutate\" ||\n          /^policy:/.test(v)),\n      { message: \"expected 'auto' | 'always' | 'on-mutate' | 'policy:<name>'\" },\n    )\n    .optional(),\n  risk_level: z\n    .union([z.literal(0), z.literal(1), z.literal(2), z.literal(3)])\n    .optional(),\n  cost_class: z.enum([\"trivial\", \"metered\", \"expensive\"]).optional(),\n  timeout_ms: z.number().int().positive().optional(),\n  idempotent: z.boolean().optional(),\n  tags: z.array(z.string()).optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n\n  // AIP-16 IO blocks — `inputs`/`outputs` as JSON Schema objects. Kept\n  // structurally loose here (validated as objects, not deep-checked against\n  // the AIP-16 meta-schema); preserved so a manifest's declared IO contract\n  // survives the parse → handle round-trip instead of being silently dropped.\n  inputs: z.record(z.string(), z.unknown()).optional(),\n  outputs: z.record(z.string(), z.unknown()).optional(),\n\n  // AIP-26 / AIP-17 / AIP-19 references — kept loose; validated by their\n  // respective AIPs' adapters when consumed.\n  code: z.unknown().optional(),\n  run: z.unknown().optional(),\n  runner: z.unknown().optional(),\n  secrets: z.unknown().optional(),\n  network: z.unknown().optional(),\n})\n\nexport type ToolManifestFrontmatter = z.infer<\n  typeof toolManifestFrontmatterSchema\n>\n\nexport interface ToolManifest {\n  frontmatter: ToolManifestFrontmatter\n  body: string\n}\n\n/**\n * Parse a TOOL.md source string into structured frontmatter + body.\n * Throws on missing frontmatter or schema-invalid frontmatter.\n */\nexport function parseToolManifest(source: string): ToolManifest {\n  const parsed = matter(source)\n  if (Object.keys(parsed.data).length === 0) {\n    throw new Error(\"parseToolManifest: missing or empty frontmatter\")\n  }\n  const result = toolManifestFrontmatterSchema.safeParse(parsed.data)\n  if (!result.success) {\n    throw new Error(\n      `parseToolManifest: invalid frontmatter — ${result.error.issues\n        .map(i => `${i.path.join(\".\")}: ${i.message}`)\n        .join(\"; \")}`\n    )\n  }\n  return { frontmatter: result.data, body: parsed.content }\n}\n\n/**\n * Build a {@link ToolHandle} from a manifest that has no companion TS module.\n *\n * `inputSchema`/`outputSchema` are omitted; IO validation falls back to the\n * AIP-16 `inputs`/`outputs` JSON Schema blocks declared in the frontmatter\n * (via `validateInput`/`validateOutput`). The returned handle is typed as\n * `ToolHandle<unknown, unknown>` since the generic shapes are not statically\n * known.\n *\n * Use this when loading an agent-generated TOOL.md whose IO contract is\n * expressed in YAML (`inputs:`/`outputs:`) rather than a compiled TS module.\n */\nexport function toolFromManifestOnly(\n  manifest: ToolManifest,\n): ToolHandle<unknown, unknown> {\n  const fm = manifest.frontmatter\n  return defineTool({\n    id: fm.id,\n    name: fm.name,\n    description: fm.description,\n    version: fm.version,\n    inputs: fm.inputs,\n    outputs: fm.outputs,\n    mutates: fm.mutates,\n    requires: fm.requires,\n    approval: fm.approval,\n    riskLevel: fm.risk_level,\n    costClass: fm.cost_class,\n    timeoutMs: fm.timeout_ms,\n    idempotent: fm.idempotent,\n    tags: fm.tags,\n    metadata: fm.metadata,\n  })\n}\n\n/**\n * Build a fully-typed {@link ToolHandle} from a parsed `TOOL.md` manifest\n * + caller-supplied schemas. The .md is the single source of truth for\n * metadata (id, name, description, version, mutates, approval, …); the\n * schemas live in the TS module that ships alongside the .md.\n *\n * Both inputs are revalidated by `defineTool`'s shared invariants\n * (id pattern, description length, top-level freeze) — `parseToolManifest`\n * already enforces a stricter id pattern + version semver, so a\n * well-formed manifest passes through cleanly. Mismatches between the\n * manifest's id-shape and `defineTool`'s pattern surface a\n * descriptive error from the same validation pipeline as the TS path.\n *\n * @example\n *   const manifest = parseToolManifest(readFileSync(\"./echo/TOOL.md\", \"utf8\"))\n *   const echo = toolFromManifest({\n *     manifest,\n *     inputSchema: z.object({ msg: z.string() }),\n *     outputSchema: z.object({ msg: z.string() }),\n *   })\n */\nexport function toolFromManifest<\n  TInput,\n  TOutput,\n  TContext extends ToolContext = ToolContext,\n>(args: {\n  manifest: ToolManifest\n  inputSchema: ZodType<TInput>\n  outputSchema: ZodType<TOutput>\n  contextSchema?: ZodType<TContext>\n}): ToolHandle<TInput, TOutput, TContext> {\n  const fm = args.manifest.frontmatter\n  return defineTool<TInput, TOutput, TContext>({\n    id: fm.id,\n    name: fm.name,\n    description: fm.description,\n    version: fm.version,\n    inputSchema: args.inputSchema,\n    outputSchema: args.outputSchema,\n    inputs: fm.inputs,\n    outputs: fm.outputs,\n    contextSchema: args.contextSchema,\n    mutates: fm.mutates,\n    requires: fm.requires,\n    approval: fm.approval,\n    riskLevel: fm.risk_level,\n    costClass: fm.cost_class,\n    timeoutMs: fm.timeout_ms,\n    idempotent: fm.idempotent,\n    tags: fm.tags,\n    metadata: fm.metadata,\n  })\n}\n"]}

package/dist/{index-63aR8ryG.d.ts → index-DpcQ_sMe.d.ts}

@@ -1,4 +1,4 @@
-import { ZodType, z } from 'zod';
+import { ZodType, ZodRawShape, z } from 'zod';
 
 /**
  * AIP-14 ToolDefinition — the abstract agent contract.
@@ -83,6 +83,11 @@ interface ToolDefinition<TInput = unknown, TOutput = unknown, TContext extends T
      * HTTP" (`forbid: ["http"]`) for self-hosted-only contracts.
      */
     driverConstraints?: DriverConstraints;
+    /**
+     * Cross-cutting concerns (see {@link ToolHandle.transformers}) carried on
+     * the contract and applied by MCP-facing adapters at registration.
+     */
+    transformers?: readonly ToolTransformer[];
 }
 type DriverKind = "cli" | "http" | "mcp" | "sdk" | "builtin";
 interface DriverConstraints {
@@ -138,6 +143,42 @@ interface ToolHandle<TInput = unknown, TOutput = unknown, TContext extends ToolC
     readonly idempotent: boolean;
     readonly defaultImplementation?: string;
     readonly driverConstraints: Required<DriverConstraints>;
+    /**
+     * Cross-cutting concerns applied by MCP-facing adapters (`toMcpTool`) at
+     * registration time — pagination, error normalization, … Listed
+     * outermost-first: `wrapHandler` folds so the FIRST declared transformer
+     * ends up the OUTERMOST wrapper around the base handler (e.g.
+     * `[catchErrors(), paginated(...)]` paginates around the body, then
+     * catchErrors around that).
+     */
+    readonly transformers?: readonly ToolTransformer[];
+}
+/**
+ * A composable cross-cutting concern applied to a TOOL's MCP projection.
+ *
+ * Two hooks:
+ *  - `wrapShape` extends the declared zod raw shape with the transformer's
+ *    own input params (applied in declared order).
+ *  - `wrapHandler` wraps the handler pipeline (applied outermost-first —
+ *    see {@link ToolHandle.transformers}). Unlike `wrapShape`, the wrapped
+ *    pipeline may CHANGE the output type (`TNext`): concrete transformers
+ *    typically terminate the pipeline by returning a pre-serialized MCP
+ *    text result (`{ content: [{ type: "text", text }], isError? }`), which
+ *    the MCP adapter passes through verbatim instead of JSON-stringifying.
+ *
+ * Composition order: transformers compose LEFT-TO-RIGHT in declared order —
+ * the first transformer listed is the outermost wrapper. E.g.
+ * `[catchErrors(), paginated(...)]` runs paginate around the base handler,
+ * then catchErrors around that, so even a pagination failure is caught.
+ */
+interface ToolTransformer<TInput = unknown, TOutput = unknown, TNext = TOutput> {
+    /** Diagnostic name (surfaced in registration errors / audits). */
+    name: string;
+    /** Extend the declared input shape with this transformer's params. */
+    wrapShape?: (shape: ZodRawShape) => ZodRawShape;
+    /** Wrap the handler pipeline. (Method syntax: keeps heterogeneous
+     *  transformer generics assignable to `ToolTransformer[]`.) */
+    wrapHandler(handler: (input: TInput) => Promise<TOutput>): (input: TInput) => Promise<TNext>;
 }
 /**
  * Standard out-of-band result envelope. Provider runtimes wrap thrown
@@ -271,4 +312,4 @@ declare function toolFromManifest<TInput, TOutput, TContext extends ToolContext
     contextSchema?: ZodType<TContext>;
 }): ToolHandle<TInput, TOutput, TContext>;
 
-export { type ApprovalClass as A, type DriverConstraints as D, type RetryPolicy as R, type ToolContext as T, type ValidationResult as V, type ToolDefinition as a, type ToolHandle as b, type ToolResult as c, type DriverKind as d, type ToolCapabilities as e, type ToolManifest as f, type ToolManifestFrontmatter as g, type ValidationFailure as h, type ValidationSuccess as i, toolFromManifestOnly as j, toolManifestFrontmatterSchema as k, parseToolManifest as p, toolFromManifest as t };
+export { type ApprovalClass as A, type DriverConstraints as D, type RetryPolicy as R, type ToolContext as T, type ValidationResult as V, type ToolDefinition as a, type ToolHandle as b, type ToolResult as c, type ToolTransformer as d, type DriverKind as e, type ToolCapabilities as f, type ToolManifest as g, type ToolManifestFrontmatter as h, type ValidationFailure as i, type ValidationSuccess as j, toolFromManifestOnly as k, toolManifestFrontmatterSchema as l, parseToolManifest as p, toolFromManifest as t };

package/dist/index.d.ts

@@ -1,8 +1,8 @@
-import { T as ToolContext, a as ToolDefinition, b as ToolHandle, V as ValidationResult, c as ToolResult } from './index-63aR8ryG.js';
-export { A as ApprovalClass, D as DriverConstraints, d as DriverKind, R as RetryPolicy, e as ToolCapabilities, f as ToolManifest, g as ToolManifestFrontmatter, h as ValidationFailure, i as ValidationSuccess, p as parseToolManifest, t as toolFromManifest, j as toolFromManifestOnly } from './index-63aR8ryG.js';
+import { T as ToolContext, a as ToolDefinition, b as ToolHandle, V as ValidationResult, c as ToolResult, d as ToolTransformer } from './index-DpcQ_sMe.js';
+export { A as ApprovalClass, D as DriverConstraints, e as DriverKind, R as RetryPolicy, f as ToolCapabilities, g as ToolManifest, h as ToolManifestFrontmatter, i as ValidationFailure, j as ValidationSuccess, p as parseToolManifest, t as toolFromManifest, k as toolFromManifestOnly } from './index-DpcQ_sMe.js';
 import * as _agentproto_manifest from '@agentproto/manifest';
 import { DoctypeSpec } from '@agentproto/manifest';
-import 'zod';
+import { z } from 'zod';
 
 /**
  * Public-facing `defineTool` — typed wrapper around `constructTool`
@@ -120,6 +120,114 @@ declare function toToolError(thrown: unknown): ToolError;
  */
 declare function toToolResult<T>(value: T | undefined, thrown: unknown): ToolResult<T>;
 
+/**
+ * Concrete {@link ToolTransformer}s — cross-cutting concerns composed by
+ * MCP-facing adapters (`toMcpTool`) around a tool's handler pipeline.
+ */
+/** The MCP text-result shape transformers terminate the pipeline into. */
+interface McpTextResult {
+    content: Array<{
+        type: "text";
+        text: string;
+    }>;
+    isError?: boolean;
+}
+interface PaginatedOptions<TItem> {
+    /**
+     * REQUIRED per-item compact projection. Requiring it is the point: there
+     * is no code path that accepts the `compact` param without an actual
+     * compact projection behind it, killing the "declared but dead param"
+     * bug class. Pass the identity function only if you truly want
+     * `compact` to be a no-op.
+     */
+    project: (item: TItem) => object;
+    /** Key function for the opaque pagination cursor. */
+    keyOf?: (item: TItem) => string | number | null;
+    /** Hard ceiling on `limit` (default 200 — matches the daemon tools). */
+    maxLimit?: number;
+    /**
+     * Wrapper key for the NON-paginated output. With no `limit`/`cursor`,
+     * legacy list tools returned `{ sessions: [...] }` rather than the page
+     * envelope; set this to reproduce that wrapper (default `"items"`).
+     */
+    itemKey?: string;
+}
+/**
+ * Pagination transformer — adds {@link pageParamsShape} to the input shape
+ * and wraps the handler (which must return the FULL, unprojected item
+ * array) with the shared cursor/limit semantics:
+ *
+ *  - `limit`/`cursor` present → the `{ items, nextCursor?, total }` page
+ *    envelope via `paginate` + `toolText` (cursor/limit semantics are the
+ *    exact ones the daemon's list tools already depend on).
+ *  - neither present → the legacy `{ [itemKey]: [...] }` wrapper, no
+ *    envelope fields.
+ *
+ * Rows are COMPACT by default (`project`); `full: true` / `compact: false`
+ * returns the unprojected records. `fields` is a per-item allowlist
+ * applied on the paginated envelope branch (matching existing behavior).
+ */
+declare function paginated<TItem extends object>(opts: PaginatedOptions<TItem>): ToolTransformer<unknown, readonly TItem[], McpTextResult>;
+/**
+ * Error-normalization transformer — wraps the handler so ANY thrown error
+ * becomes the single canonical MCP error result
+ * `{ content: [{ type: "text", text: <message> }], isError: true }`,
+ * replacing the ~150 copy-pasted inline catch blocks.
+ */
+declare function catchErrors(): ToolTransformer<unknown, unknown, McpTextResult>;
+
+/**
+ * Shared pagination primitives (moved here from `@agentproto/runtime`'s
+ * `tool-envelope.ts` so the `paginated()` ToolTransformer can reuse the
+ * exact cursor/limit semantics the daemon's list tools already depend on).
+ * `@agentproto/runtime` re-exports this module verbatim, so existing
+ * imports are unchanged.
+ */
+/** Shared pagination params, spread into every list tool's input schema. */
+interface PageParams {
+    limit?: number;
+    cursor?: string;
+    since?: number;
+    compact?: boolean;
+    full?: boolean;
+    fields?: string[];
+}
+interface Page<T> {
+    items: T[];
+    nextCursor?: string;
+    total?: number;
+    truncated?: boolean;
+}
+/** Opaque cursor: base64(JSON `{ k: keysetValue, i: index }`). */
+interface CursorPayload {
+    k: string | number | null;
+    i: number;
+}
+declare function encodeCursor(payload: CursorPayload): string;
+/** No `unknown`/`as`: the JSON boundary is typed by zod's safeParse/parse. */
+declare function decodeCursor(token: string): CursorPayload | null;
+interface PaginateOpts<T> {
+    maxLimit: number;
+    keyOf?: (item: T) => string | number | null;
+}
+declare function paginate<T>(items: readonly T[], params: PageParams, opts: PaginateOpts<T>): Page<T>;
+/**
+ * Compact serializer — replaces every `JSON.stringify(x, null, 2)` in list handlers.
+ *
+ * When `params.fields` is supplied, an explicit allowlist is applied to every
+ * item (mechanically, across all call sites): items keep only the named keys.
+ * Absent `fields`, the output is byte-identical to `JSON.stringify(page)`.
+ */
+declare function toolText<T extends object>(page: Page<T>, params?: Pick<PageParams, "fields">): string;
+/** Zod fragment to spread into each list tool's input schema. */
+declare const pageParamsShape: {
+    readonly limit: z.ZodOptional<z.ZodNumber>;
+    readonly cursor: z.ZodOptional<z.ZodString>;
+    readonly compact: z.ZodOptional<z.ZodBoolean>;
+    readonly full: z.ZodOptional<z.ZodBoolean>;
+    readonly fields: z.ZodOptional<z.ZodArray<z.ZodString>>;
+};
+
 /**
  * @agentproto/tool — AIP-14 TOOL.md `defineTool` reference impl.
  *
@@ -134,4 +242,4 @@ declare function toToolResult<T>(value: T | undefined, thrown: unknown): ToolRes
 declare const SPEC_NAME: "agenttool/v1";
 declare const SPEC_VERSION: "1.0.0-alpha";
 
-export { type CreateToolOptions, type CreateToolResult, SPEC_NAME, SPEC_VERSION, ToolContext, ToolDefinition, ToolError, type ToolErrorCode, type ToolErrorPayload, ToolHandle, ToolResult, ValidationResult, createTool, defineTool, toToolError, toToolResult, toolSpec, toolVerbs, validateContext, validateInput, validateOutput };
+export { type CreateToolOptions, type CreateToolResult, type CursorPayload, type McpTextResult, type Page, type PageParams, type PaginateOpts, type PaginatedOptions, SPEC_NAME, SPEC_VERSION, ToolContext, ToolDefinition, ToolError, type ToolErrorCode, type ToolErrorPayload, ToolHandle, ToolResult, ToolTransformer, ValidationResult, catchErrors, createTool, decodeCursor, defineTool, encodeCursor, pageParamsShape, paginate, paginated, toToolError, toToolResult, toolSpec, toolText, toolVerbs, validateContext, validateInput, validateOutput };

package/dist/index.mjs

@@ -1,10 +1,11 @@
-import { parseToolManifest, defineTool } from './chunk-VCLSUUB5.mjs';
-export { ToolError, defineTool, parseToolManifest, toToolError, toToolResult, toolFromManifest, toolFromManifestOnly, validateContext, validateInput, validateOutput } from './chunk-VCLSUUB5.mjs';
+import { parseToolManifest, defineTool } from './chunk-7UKT5ZEH.mjs';
+export { ToolError, defineTool, parseToolManifest, toToolError, toToolResult, toolFromManifest, toolFromManifestOnly, validateContext, validateInput, validateOutput } from './chunk-7UKT5ZEH.mjs';
 import { filterSerializable } from '@agentproto/define-doctype';
 import matter from 'gray-matter';
 import { mkdir, writeFile } from 'fs/promises';
 import { join, dirname } from 'path';
 import { createVerbs } from '@agentproto/manifest';
+import { z } from 'zod';
 
 /**
  * @agentproto/tool v0.1.0-alpha
@@ -66,11 +67,107 @@ var toolSpec = {
   }
 };
 var toolVerbs = createVerbs(toolSpec);
+function encodeCursor(payload) {
+  return Buffer.from(JSON.stringify(payload), "utf8").toString("base64url");
+}
+var cursorPayloadSchema = z.object({
+  k: z.union([z.string(), z.number(), z.null()]),
+  i: z.number().int().min(0)
+});
+function decodeCursor(token) {
+  let text;
+  try {
+    text = Buffer.from(token, "base64url").toString("utf8");
+  } catch {
+    return null;
+  }
+  try {
+    return cursorPayloadSchema.parse(JSON.parse(text));
+  } catch {
+    return null;
+  }
+}
+function paginate(items, params, opts) {
+  const limit = Math.min(Math.max(params.limit ?? 50, 1), opts.maxLimit);
+  let start = 0;
+  if (params.cursor) {
+    const decoded = decodeCursor(params.cursor);
+    if (decoded && decoded.i >= 0 && decoded.i <= items.length) start = decoded.i;
+  }
+  const end = start + limit;
+  const slice = items.slice(start, end);
+  const keyAt = (idx) => {
+    const item = items[idx];
+    return opts.keyOf && item !== void 0 ? opts.keyOf(item) : null;
+  };
+  return {
+    items: slice,
+    ...end < items.length ? { nextCursor: encodeCursor({ k: keyAt(end), i: end }) } : {},
+    total: items.length
+  };
+}
+function toolText(page, params) {
+  const fields = params?.fields;
+  const items = fields === void 0 ? page.items : page.items.map(
+    (item) => Object.fromEntries(
+      Object.entries(item).filter(([key]) => fields.includes(key))
+    )
+  );
+  return JSON.stringify({ ...page, items });
+}
+var pageParamsShape = {
+  limit: z.number().int().min(1).max(200).optional().describe("Max items per page. Default 50."),
+  cursor: z.string().optional().describe("Opaque token from a prior call's `nextCursor`."),
+  compact: z.boolean().optional().describe(
+    "Compact projection (fewer fields per item). Default true on tools that define a compact projection (session_list); a no-op elsewhere."
+  ),
+  full: z.boolean().optional().describe(
+    "Escape hatch \u2014 full, unprojected records (opts out of compact). Default false."
+  ),
+  fields: z.array(z.string()).optional().describe("Keep only these fields per item.")
+};
+
+// src/transformers.ts
+function textResult(text) {
+  return { content: [{ type: "text", text }] };
+}
+function paginated(opts) {
+  const { project, keyOf, maxLimit = 200, itemKey = "items" } = opts;
+  return {
+    name: "paginated",
+    wrapShape: (shape) => ({ ...shape, ...pageParamsShape }),
+    wrapHandler: (handler) => async (input) => {
+      const params = input ?? {};
+      const items = await handler(input);
+      const full = params.full === true;
+      const compact = full ? false : params.compact !== false;
+      if (params.limit !== void 0 || params.cursor !== void 0) {
+        const page = paginate(items, params, { maxLimit, keyOf });
+        return compact ? textResult(toolText({ ...page, items: page.items.map(project) }, params)) : textResult(toolText(page, params));
+      }
+      const rows = compact ? items.map(project) : items;
+      return textResult(JSON.stringify({ [itemKey]: rows }));
+    }
+  };
+}
+function catchErrors() {
+  return {
+    name: "catchErrors",
+    wrapHandler: (handler) => async (input) => {
+      try {
+        return await handler(input);
+      } catch (err) {
+        const text = err instanceof Error ? err.message : String(err);
+        return { content: [{ type: "text", text }], isError: true };
+      }
+    }
+  };
+}
 
 // src/index.ts
 var SPEC_NAME = "agenttool/v1";
 var SPEC_VERSION = "1.0.0-alpha";
 
-export { SPEC_NAME, SPEC_VERSION, createTool, toolSpec, toolVerbs };
+export { SPEC_NAME, SPEC_VERSION, catchErrors, createTool, decodeCursor, encodeCursor, pageParamsShape, paginate, paginated, toolSpec, toolText, toolVerbs };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/create-tool.ts","../src/spec.ts","../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;AA0BA,SAAS,gBAAgB,GAAA,EAAuD;AAC9E,EAAA,OAAO,MAAA,CAAO,WAAA;AAAA,IACZ,OAAO,OAAA,CAAQ,GAAG,EAAE,GAAA,CAAI,CAAC,CAAC,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA,CAAE,QAAQ,UAAA,EAAY,KAAK,EAAE,WAAA,EAAY,EAAG,CAAC,CAAC;AAAA,GACrF;AACF;AAwBA,eAAsB,UAAA,CAKpB,QACA,IAAA,EACsD;AACtD,EAAA,MAAM,MAAA,GAAS,WAAsC,MAAM,CAAA;AAC3D,EAAA,MAAM,OAAO,IAAA,CAAK,IAAA,CAAK,GAAA,EAAK,MAAA,CAAO,IAAI,SAAS,CAAA;AAChD,EAAA,MAAM,cAAc,kBAAA,CAAmB;AAAA,IACrC,MAAA,EAAQ,oBAAA;AAAA,IACR,GAAG,gBAAgB,MAA4C;AAAA,GAChE,CAAA;AACD,EAAA,MAAM,WAAW,MAAA,CAAO,SAAA;AAAA,IACtB,IAAA,CAAK,IAAA,IAAQ,CAAA,EAAA,EAAK,MAAA,CAAO,IAAI;;AAAA,EAAO,OAAO,WAAW;AAAA,CAAA;AAAA,IACtD;AAAA,GACF;AACA,EAAA,IAAI,CAAC,KAAK,MAAA,EAAQ;AAChB,IAAA,MAAM,MAAM,OAAA,CAAQ,IAAI,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC9C,IAAA,MAAM,SAAA,CAAU,IAAA,EAAM,QAAA,EAAU,MAAM,CAAA;AAAA,EACxC;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,QAAA,EAAS;AAClC;AChEO,IAAM,QAAA,GAGT;AAAA,EACF,IAAA,EAAM,MAAA;AAAA,EACN,GAAA,EAAK,EAAA;AAAA,EACL,aAAA,EAAe,oBAAA;AAAA,EACf,MAAA,EAAQ,CAAC,CAAA,KAAM,CAAA,EAAG,EAAE,EAAE,CAAA,QAAA,CAAA;AAAA,EACtB,MAAA,EAAQ,CAAC,MAAA,KACP,UAAA,CAAW,MAAM,CAAA;AAAA,EACnB,KAAA,EAAO,CAAC,MAAA,KAAW;AACjB,IAAA,MAAM,CAAA,GAAI,kBAAkB,MAAM,CAAA;AAClC,IAAA,MAAM,KAAK,CAAA,CAAE,WAAA;AAOb,IAAA,MAAM,WAAA,GAAuC;AAAA,MAC3C,IAAI,EAAA,CAAG,EAAA;AAAA,MACP,MAAM,EAAA,CAAG,IAAA;AAAA,MACT,aAAa,EAAA,CAAG,WAAA;AAAA,MAChB,SAAS,EAAA,CAAG,OAAA;AAAA,MACZ,GAAI,EAAA,CAAG,OAAA,KAAY,UAAa,EAAE,OAAA,EAAS,GAAG,OAAA,EAAQ;AAAA,MACtD,GAAI,EAAA,CAAG,QAAA,KAAa,UAAa,EAAE,QAAA,EAAU,GAAG,QAAA,EAAS;AAAA,MACzD,GAAI,EAAA,CAAG,QAAA,KAAa,UAAa,EAAE,QAAA,EAAU,GAAG,QAAA,EAAS;AAAA,MACzD,GAAI,EAAA,CAAG,UAAA,KAAe,UAAa,EAAE,SAAA,EAAW,GAAG,UAAA,EAAW;AAAA,MAC9D,GAAI,EAAA,CAAG,UAAA,KAAe,UAAa,EAAE,SAAA,EAAW,GAAG,UAAA,EAAW;AAAA,MAC9D,GAAI,EAAA,CAAG,UAAA,KAAe,UAAa,EAAE,SAAA,EAAW,GAAG,UAAA,EAAW;AAAA,MAC9D,GAAI,EAAA,CAAG,UAAA,KAAe,UAAa,EAAE,UAAA,EAAY,GAAG,UAAA,EAAW;AAAA,MAC/D,GAAI,EAAA,CAAG,IAAA,KAAS,UAAa,EAAE,IAAA,EAAM,GAAG,IAAA,EAAK;AAAA,MAC7C,GAAI,EAAA,CAAG,QAAA,KAAa,UAAa,EAAE,QAAA,EAAU,GAAG,QAAA,EAAS;AAAA;AAAA,MAEzD,GAAI,EAAA,CAAG,MAAA,KAAW,UAAa,EAAE,MAAA,EAAQ,GAAG,MAAA,EAAO;AAAA,MACnD,GAAI,EAAA,CAAG,OAAA,KAAY,UAAa,EAAE,OAAA,EAAS,GAAG,OAAA;AAAQ,KACxD;AACA,IAAA,OAAO,EAAE,WAAA,EAAa,IAAA,EAAM,CAAA,CAAE,IAAA,EAAK;AAAA,EACrC;AACF;AAEO,IAAM,SAAA,GAAY,YAAY,QAAQ;;;AC1CtC,IAAM,SAAA,GAAY;AAClB,IAAM,YAAA,GAAe","file":"index.mjs","sourcesContent":["/**\n * `createTool(params, opts)` — write a TOOL.md to disk.\n *\n * Symmetric to `parseToolManifest` (.md → handle) and `defineTool`\n * (params → handle): this takes params, validates via defineTool\n * (single source of truth — same zod schema, same cross-AIP\n * invariants), then serialises the validated frontmatter to YAML\n * and writes it under `<dir>/<id>/TOOL.md`.\n *\n * The author's body markdown is preserved verbatim in `opts.body`.\n * Pass `dryRun: true` to get the rendered string without touching\n * disk — useful for tests, the MCP server's preview, and CI lints.\n *\n * Non-frontmatter values that can't appear in YAML (zod schemas,\n * function bodies) are filtered out by `filterSerializable` from\n * `@agentproto/define-doctype`; the resulting frontmatter matches\n * what `parseToolManifest` would consume on the way back in.\n */\n\nimport { filterSerializable } from \"@agentproto/define-doctype\"\nimport matter from \"gray-matter\"\nimport { mkdir, writeFile } from \"node:fs/promises\"\nimport { dirname, join } from \"node:path\"\nimport { defineTool } from \"./define-tool.js\"\nimport type { ToolContext, ToolDefinition, ToolHandle } from \"./types.js\"\n\nfunction toSnakeCaseKeys(obj: Record<string, unknown>): Record<string, unknown> {\n  return Object.fromEntries(\n    Object.entries(obj).map(([k, v]) => [k.replace(/([A-Z])/g, \"_$1\").toLowerCase(), v]),\n  )\n}\n\nexport interface CreateToolOptions {\n  /** Workspace-relative or absolute directory under which to write `<id>/TOOL.md`. */\n  dir: string\n  /** Body markdown after the frontmatter. Defaults to a one-line stub. */\n  body?: string\n  /** Render only — don't write. Returns the rendered string. */\n  dryRun?: boolean\n}\n\nexport interface CreateToolResult<\n  TInput,\n  TOutput,\n  TContext extends ToolContext,\n> {\n  /** The path where the file was (or would be) written. */\n  path: string\n  /** The validated handle returned by defineTool. */\n  handle: ToolHandle<TInput, TOutput, TContext>\n  /** The full rendered file contents (frontmatter + body). */\n  rendered: string\n}\n\nexport async function createTool<\n  TInput,\n  TOutput,\n  TContext extends ToolContext = ToolContext,\n>(\n  params: ToolDefinition<TInput, TOutput, TContext>,\n  opts: CreateToolOptions,\n): Promise<CreateToolResult<TInput, TOutput, TContext>> {\n  const handle = defineTool<TInput, TOutput, TContext>(params)\n  const path = join(opts.dir, handle.id, \"TOOL.md\")\n  const frontmatter = filterSerializable({\n    schema: \"agentproto/tool/v1\",\n    ...toSnakeCaseKeys(params as unknown as Record<string, unknown>),\n  }) as Record<string, unknown>\n  const rendered = matter.stringify(\n    opts.body ?? `# ${handle.name}\\n\\n${handle.description}\\n`,\n    frontmatter,\n  )\n  if (!opts.dryRun) {\n    await mkdir(dirname(path), { recursive: true })\n    await writeFile(path, rendered, \"utf8\")\n  }\n  return { path, handle, rendered }\n}\n","/**\n * AIP-14 doctype spec — fed to `@agentproto/manifest.createVerbs`\n * to derive create / load / list / update / resolve / delete in one\n * place. Keeping the spec separate from `define-tool.ts` lets the\n * manifest layer (and the future MCP server) iterate over a uniform\n * descriptor without each package re-implementing the wiring.\n */\n\nimport { createVerbs, type DoctypeSpec } from \"@agentproto/manifest\"\nimport { defineTool } from \"./define-tool.js\"\nimport { parseToolManifest } from \"./manifest/index.js\"\nimport type { ToolDefinition, ToolHandle } from \"./types.js\"\n\nexport const toolSpec: DoctypeSpec<\n  ToolDefinition<unknown, unknown>,\n  ToolHandle<unknown, unknown>\n> = {\n  name: \"tool\",\n  aip: 14,\n  schemaLiteral: \"agentproto/tool/v1\",\n  pathOf: (h) => `${h.id}/TOOL.md`,\n  define: (params) =>\n    defineTool(params) as ToolHandle<unknown, unknown>,\n  parse: (source) => {\n    const m = parseToolManifest(source)\n    const fm = m.frontmatter\n    // `createVerbs.load` feeds this frontmatter straight to `define`\n    // (= `defineTool`), which reads camelCase keys. The manifest uses\n    // snake_case for multi-word fields, so they must be renamed here or\n    // `defineTool` silently falls back to its defaults. Single-word fields\n    // (mutates, approval, idempotent, tags, metadata, requires) share the\n    // same key in both conventions and pass through unchanged.\n    const frontmatter: Record<string, unknown> = {\n      id: fm.id,\n      name: fm.name,\n      description: fm.description,\n      version: fm.version,\n      ...(fm.mutates !== undefined && { mutates: fm.mutates }),\n      ...(fm.requires !== undefined && { requires: fm.requires }),\n      ...(fm.approval !== undefined && { approval: fm.approval }),\n      ...(fm.risk_level !== undefined && { riskLevel: fm.risk_level }),\n      ...(fm.cost_class !== undefined && { costClass: fm.cost_class }),\n      ...(fm.timeout_ms !== undefined && { timeoutMs: fm.timeout_ms }),\n      ...(fm.idempotent !== undefined && { idempotent: fm.idempotent }),\n      ...(fm.tags !== undefined && { tags: fm.tags }),\n      ...(fm.metadata !== undefined && { metadata: fm.metadata }),\n      // AIP-16 IO blocks pass through under the same keys.\n      ...(fm.inputs !== undefined && { inputs: fm.inputs }),\n      ...(fm.outputs !== undefined && { outputs: fm.outputs }),\n    }\n    return { frontmatter, body: m.body }\n  },\n}\n\nexport const toolVerbs = createVerbs(toolSpec)\n","/**\n * @agentproto/tool — AIP-14 TOOL.md `defineTool` reference impl.\n *\n * Vendor-neutral tool **contract** registration: an author writes\n * `defineTool({...})` and the runtime returns a `ToolHandle` carrying\n * identity, schemas, side-effect profile, approval class, and\n * provider routing hints. Bodies live on AIP-30 PROVIDER manifests;\n * invocation goes through `@agentproto/driver`.\n *\n * Spec: https://agentproto.sh/docs/aip-14\n */\n\nexport const SPEC_NAME = \"agenttool/v1\" as const\nexport const SPEC_VERSION = \"1.0.0-alpha\" as const\n\nexport {\n  defineTool,\n  validateInput,\n  validateContext,\n  validateOutput,\n} from \"./define-tool.js\"\n// Standalone create-tool kept for back-compat; new code should import\n// the unified verb surface (`toolVerbs.create`, `.load`, `.list`,\n// `.update`, `.resolve`, `.delete`) from `./spec.js`.\nexport {\n  createTool,\n  type CreateToolOptions,\n  type CreateToolResult,\n} from \"./create-tool.js\"\nexport { toolSpec, toolVerbs } from \"./spec.js\"\nexport {\n  parseToolManifest,\n  toolFromManifest,\n  toolFromManifestOnly,\n  type ToolManifest,\n  type ToolManifestFrontmatter,\n} from \"./manifest/index.js\"\nexport {\n  ToolError,\n  toToolError,\n  toToolResult,\n  type ToolErrorCode,\n  type ToolErrorPayload,\n} from \"./errors.js\"\nexport type {\n  ToolDefinition,\n  ToolHandle,\n  ToolContext,\n  ToolCapabilities,\n  ApprovalClass,\n  DriverConstraints,\n  DriverKind,\n  RetryPolicy,\n  ToolResult,\n  ValidationResult,\n  ValidationFailure,\n  ValidationSuccess,\n} from \"./types.js\"\n"]}
+{"version":3,"sources":["../src/create-tool.ts","../src/spec.ts","../src/envelope.ts","../src/transformers.ts","../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;AA0BA,SAAS,gBAAgB,GAAA,EAAuD;AAC9E,EAAA,OAAO,MAAA,CAAO,WAAA;AAAA,IACZ,OAAO,OAAA,CAAQ,GAAG,EAAE,GAAA,CAAI,CAAC,CAAC,CAAA,EAAG,CAAC,MAAM,CAAC,CAAA,CAAE,QAAQ,UAAA,EAAY,KAAK,EAAE,WAAA,EAAY,EAAG,CAAC,CAAC;AAAA,GACrF;AACF;AAwBA,eAAsB,UAAA,CAKpB,QACA,IAAA,EACsD;AACtD,EAAA,MAAM,MAAA,GAAS,WAAsC,MAAM,CAAA;AAC3D,EAAA,MAAM,OAAO,IAAA,CAAK,IAAA,CAAK,GAAA,EAAK,MAAA,CAAO,IAAI,SAAS,CAAA;AAChD,EAAA,MAAM,cAAc,kBAAA,CAAmB;AAAA,IACrC,MAAA,EAAQ,oBAAA;AAAA,IACR,GAAG,gBAAgB,MAA4C;AAAA,GAChE,CAAA;AACD,EAAA,MAAM,WAAW,MAAA,CAAO,SAAA;AAAA,IACtB,IAAA,CAAK,IAAA,IAAQ,CAAA,EAAA,EAAK,MAAA,CAAO,IAAI;;AAAA,EAAO,OAAO,WAAW;AAAA,CAAA;AAAA,IACtD;AAAA,GACF;AACA,EAAA,IAAI,CAAC,KAAK,MAAA,EAAQ;AAChB,IAAA,MAAM,MAAM,OAAA,CAAQ,IAAI,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC9C,IAAA,MAAM,SAAA,CAAU,IAAA,EAAM,QAAA,EAAU,MAAM,CAAA;AAAA,EACxC;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,MAAA,EAAQ,QAAA,EAAS;AAClC;AChEO,IAAM,QAAA,GAGT;AAAA,EACF,IAAA,EAAM,MAAA;AAAA,EACN,GAAA,EAAK,EAAA;AAAA,EACL,aAAA,EAAe,oBAAA;AAAA,EACf,MAAA,EAAQ,CAAC,CAAA,KAAM,CAAA,EAAG,EAAE,EAAE,CAAA,QAAA,CAAA;AAAA,EACtB,MAAA,EAAQ,CAAC,MAAA,KACP,UAAA,CAAW,MAAM,CAAA;AAAA,EACnB,KAAA,EAAO,CAAC,MAAA,KAAW;AACjB,IAAA,MAAM,CAAA,GAAI,kBAAkB,MAAM,CAAA;AAClC,IAAA,MAAM,KAAK,CAAA,CAAE,WAAA;AAOb,IAAA,MAAM,WAAA,GAAuC;AAAA,MAC3C,IAAI,EAAA,CAAG,EAAA;AAAA,MACP,MAAM,EAAA,CAAG,IAAA;AAAA,MACT,aAAa,EAAA,CAAG,WAAA;AAAA,MAChB,SAAS,EAAA,CAAG,OAAA;AAAA,MACZ,GAAI,EAAA,CAAG,OAAA,KAAY,UAAa,EAAE,OAAA,EAAS,GAAG,OAAA,EAAQ;AAAA,MACtD,GAAI,EAAA,CAAG,QAAA,KAAa,UAAa,EAAE,QAAA,EAAU,GAAG,QAAA,EAAS;AAAA,MACzD,GAAI,EAAA,CAAG,QAAA,KAAa,UAAa,EAAE,QAAA,EAAU,GAAG,QAAA,EAAS;AAAA,MACzD,GAAI,EAAA,CAAG,UAAA,KAAe,UAAa,EAAE,SAAA,EAAW,GAAG,UAAA,EAAW;AAAA,MAC9D,GAAI,EAAA,CAAG,UAAA,KAAe,UAAa,EAAE,SAAA,EAAW,GAAG,UAAA,EAAW;AAAA,MAC9D,GAAI,EAAA,CAAG,UAAA,KAAe,UAAa,EAAE,SAAA,EAAW,GAAG,UAAA,EAAW;AAAA,MAC9D,GAAI,EAAA,CAAG,UAAA,KAAe,UAAa,EAAE,UAAA,EAAY,GAAG,UAAA,EAAW;AAAA,MAC/D,GAAI,EAAA,CAAG,IAAA,KAAS,UAAa,EAAE,IAAA,EAAM,GAAG,IAAA,EAAK;AAAA,MAC7C,GAAI,EAAA,CAAG,QAAA,KAAa,UAAa,EAAE,QAAA,EAAU,GAAG,QAAA,EAAS;AAAA;AAAA,MAEzD,GAAI,EAAA,CAAG,MAAA,KAAW,UAAa,EAAE,MAAA,EAAQ,GAAG,MAAA,EAAO;AAAA,MACnD,GAAI,EAAA,CAAG,OAAA,KAAY,UAAa,EAAE,OAAA,EAAS,GAAG,OAAA;AAAQ,KACxD;AACA,IAAA,OAAO,EAAE,WAAA,EAAa,IAAA,EAAM,CAAA,CAAE,IAAA,EAAK;AAAA,EACrC;AACF;AAEO,IAAM,SAAA,GAAY,YAAY,QAAQ;ACrBtC,SAAS,aAAa,OAAA,EAAgC;AAC3D,EAAA,OAAO,MAAA,CAAO,KAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA,EAAG,MAAM,CAAA,CAAE,QAAA,CAAS,WAAW,CAAA;AAC1E;AAEA,IAAM,mBAAA,GAAsB,EAAE,MAAA,CAAO;AAAA,EACnC,CAAA,EAAG,CAAA,CAAE,KAAA,CAAM,CAAC,CAAA,CAAE,MAAA,EAAO,EAAG,CAAA,CAAE,MAAA,EAAO,EAAG,CAAA,CAAE,IAAA,EAAM,CAAC,CAAA;AAAA,EAC7C,GAAG,CAAA,CAAE,MAAA,GAAS,GAAA,EAAI,CAAE,IAAI,CAAC;AAC3B,CAAC,CAAA;AAGM,SAAS,aAAa,KAAA,EAAqC;AAChE,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI;AACF,IAAA,IAAA,GAAO,OAAO,IAAA,CAAK,KAAA,EAAO,WAAW,CAAA,CAAE,SAAS,MAAM,CAAA;AAAA,EACxD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI;AACF,IAAA,OAAO,mBAAA,CAAoB,KAAA,CAAM,IAAA,CAAK,KAAA,CAAM,IAAI,CAAC,CAAA;AAAA,EACnD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAOO,SAAS,QAAA,CAAY,KAAA,EAAqB,MAAA,EAAoB,IAAA,EAAgC;AACnG,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,MAAA,CAAO,KAAA,IAAS,EAAA,EAAI,CAAC,CAAA,EAAG,IAAA,CAAK,QAAQ,CAAA;AACrE,EAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,EAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,IAAA,MAAM,OAAA,GAAU,YAAA,CAAa,MAAA,CAAO,MAAM,CAAA;AAC1C,IAAA,IAAI,OAAA,IAAW,QAAQ,CAAA,IAAK,CAAA,IAAK,QAAQ,CAAA,IAAK,KAAA,CAAM,MAAA,EAAQ,KAAA,GAAQ,OAAA,CAAQ,CAAA;AAAA,EAC9E;AACA,EAAA,MAAM,MAAM,KAAA,GAAQ,KAAA;AACpB,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,KAAA,CAAM,KAAA,EAAO,GAAG,CAAA;AACpC,EAAA,MAAM,KAAA,GAAQ,CAAC,GAAA,KAAwC;AACrD,IAAA,MAAM,IAAA,GAAO,MAAM,GAAG,CAAA;AACtB,IAAA,OAAO,KAAK,KAAA,IAAS,IAAA,KAAS,SAAY,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA,GAAI,IAAA;AAAA,EAC/D,CAAA;AACA,EAAA,OAAO;AAAA,IACL,KAAA,EAAO,KAAA;AAAA,IACP,GAAI,GAAA,GAAM,KAAA,CAAM,MAAA,GAAS,EAAE,YAAY,YAAA,CAAa,EAAE,CAAA,EAAG,KAAA,CAAM,GAAG,CAAA,EAAG,CAAA,EAAG,KAAK,CAAA,KAAM,EAAC;AAAA,IACpF,OAAO,KAAA,CAAM;AAAA,GACf;AACF;AASO,SAAS,QAAA,CAA2B,MAAe,MAAA,EAA6C;AACrG,EAAA,MAAM,SAAS,MAAA,EAAQ,MAAA;AACvB,EAAA,MAAM,QACJ,MAAA,KAAW,MAAA,GACP,IAAA,CAAK,KAAA,GACL,KAAK,KAAA,CAAM,GAAA;AAAA,IAAI,UACb,MAAA,CAAO,WAAA;AAAA,MACL,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAA,CAAE,MAAA,CAAO,CAAC,CAAC,GAAG,CAAA,KAAM,MAAA,CAAO,QAAA,CAAS,GAAG,CAAC;AAAA;AAC7D,GACF;AACN,EAAA,OAAO,KAAK,SAAA,CAAU,EAAE,GAAG,IAAA,EAAM,OAAO,CAAA;AAC1C;AAGO,IAAM,eAAA,GAAkB;AAAA,EAC7B,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,KAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,IAAI,GAAG,CAAA,CAAE,QAAA,EAAS,CAAE,SAAS,iCAAiC,CAAA;AAAA,EAC7F,QAAQ,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,gDAAgD,CAAA;AAAA,EACvF,OAAA,EAAS,CAAA,CACN,OAAA,EAAQ,CACR,UAAS,CACT,QAAA;AAAA,IACC;AAAA,GAEF;AAAA,EACF,IAAA,EAAM,CAAA,CACH,OAAA,EAAQ,CACR,UAAS,CACT,QAAA;AAAA,IACC;AAAA,GAEF;AAAA,EACF,MAAA,EAAQ,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,EAAQ,CAAA,CAAE,QAAA,EAAS,CAAE,QAAA,CAAS,kCAAkC;AACpF;;;ACrGA,SAAS,WAAW,IAAA,EAA6B;AAC/C,EAAA,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,MAAA,EAAQ,IAAA,EAAM,CAAA,EAAE;AAC7C;AAsCO,SAAS,UACd,IAAA,EAC2D;AAC3D,EAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAO,WAAW,GAAA,EAAK,OAAA,GAAU,SAAQ,GAAI,IAAA;AAC9D,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,WAAA;AAAA,IACN,WAAW,CAAC,KAAA,MAAqC,EAAE,GAAG,KAAA,EAAO,GAAG,eAAA,EAAgB,CAAA;AAAA,IAChF,WAAA,EAAa,CAAA,OAAA,KAAW,OAAM,KAAA,KAAS;AACrC,MAAA,MAAM,MAAA,GAAU,SAAS,EAAC;AAC1B,MAAA,MAAM,KAAA,GAAS,MAAM,OAAA,CAAQ,KAAK,CAAA;AAClC,MAAA,MAAM,IAAA,GAAO,OAAO,IAAA,KAAS,IAAA;AAC7B,MAAA,MAAM,OAAA,GAAU,IAAA,GAAO,KAAA,GAAQ,MAAA,CAAO,OAAA,KAAY,KAAA;AAClD,MAAA,IAAI,MAAA,CAAO,KAAA,KAAU,MAAA,IAAa,MAAA,CAAO,WAAW,MAAA,EAAW;AAC7D,QAAA,MAAM,OAAO,QAAA,CAAS,KAAA,EAAO,QAAQ,EAAE,QAAA,EAAU,OAAO,CAAA;AACxD,QAAA,OAAO,OAAA,GACH,WAAW,QAAA,CAAS,EAAE,GAAG,IAAA,EAAM,KAAA,EAAO,KAAK,KAAA,CAAM,GAAA,CAAI,OAAO,CAAA,EAAE,EAAG,MAAM,CAAC,CAAA,GACxE,WAAW,QAAA,CAAS,IAAA,EAAM,MAAM,CAAC,CAAA;AAAA,MACvC;AACA,MAAA,MAAM,IAAA,GAAO,OAAA,GAAU,KAAA,CAAM,GAAA,CAAI,OAAO,CAAA,GAAI,KAAA;AAC5C,MAAA,OAAO,UAAA,CAAW,KAAK,SAAA,CAAU,EAAE,CAAC,OAAO,GAAG,IAAA,EAAM,CAAC,CAAA;AAAA,IACvD;AAAA,GACF;AACF;AAQO,SAAS,WAAA,GAAgE;AAC9E,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,aAAA;AAAA,IACN,WAAA,EAAa,CAAA,OAAA,KAAW,OAAM,KAAA,KAAS;AACrC,MAAA,IAAI;AACF,QAAA,OAAQ,MAAM,QAAQ,KAAK,CAAA;AAAA,MAC7B,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,OAAO,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC5D,QAAA,OAAO,EAAE,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,CAAA,EAAG,OAAA,EAAS,IAAA,EAAK;AAAA,MAC5D;AAAA,IACF;AAAA,GACF;AACF;;;AC1FO,IAAM,SAAA,GAAY;AAClB,IAAM,YAAA,GAAe","file":"index.mjs","sourcesContent":["/**\n * `createTool(params, opts)` — write a TOOL.md to disk.\n *\n * Symmetric to `parseToolManifest` (.md → handle) and `defineTool`\n * (params → handle): this takes params, validates via defineTool\n * (single source of truth — same zod schema, same cross-AIP\n * invariants), then serialises the validated frontmatter to YAML\n * and writes it under `<dir>/<id>/TOOL.md`.\n *\n * The author's body markdown is preserved verbatim in `opts.body`.\n * Pass `dryRun: true` to get the rendered string without touching\n * disk — useful for tests, the MCP server's preview, and CI lints.\n *\n * Non-frontmatter values that can't appear in YAML (zod schemas,\n * function bodies) are filtered out by `filterSerializable` from\n * `@agentproto/define-doctype`; the resulting frontmatter matches\n * what `parseToolManifest` would consume on the way back in.\n */\n\nimport { filterSerializable } from \"@agentproto/define-doctype\"\nimport matter from \"gray-matter\"\nimport { mkdir, writeFile } from \"node:fs/promises\"\nimport { dirname, join } from \"node:path\"\nimport { defineTool } from \"./define-tool.js\"\nimport type { ToolContext, ToolDefinition, ToolHandle } from \"./types.js\"\n\nfunction toSnakeCaseKeys(obj: Record<string, unknown>): Record<string, unknown> {\n  return Object.fromEntries(\n    Object.entries(obj).map(([k, v]) => [k.replace(/([A-Z])/g, \"_$1\").toLowerCase(), v]),\n  )\n}\n\nexport interface CreateToolOptions {\n  /** Workspace-relative or absolute directory under which to write `<id>/TOOL.md`. */\n  dir: string\n  /** Body markdown after the frontmatter. Defaults to a one-line stub. */\n  body?: string\n  /** Render only — don't write. Returns the rendered string. */\n  dryRun?: boolean\n}\n\nexport interface CreateToolResult<\n  TInput,\n  TOutput,\n  TContext extends ToolContext,\n> {\n  /** The path where the file was (or would be) written. */\n  path: string\n  /** The validated handle returned by defineTool. */\n  handle: ToolHandle<TInput, TOutput, TContext>\n  /** The full rendered file contents (frontmatter + body). */\n  rendered: string\n}\n\nexport async function createTool<\n  TInput,\n  TOutput,\n  TContext extends ToolContext = ToolContext,\n>(\n  params: ToolDefinition<TInput, TOutput, TContext>,\n  opts: CreateToolOptions,\n): Promise<CreateToolResult<TInput, TOutput, TContext>> {\n  const handle = defineTool<TInput, TOutput, TContext>(params)\n  const path = join(opts.dir, handle.id, \"TOOL.md\")\n  const frontmatter = filterSerializable({\n    schema: \"agentproto/tool/v1\",\n    ...toSnakeCaseKeys(params as unknown as Record<string, unknown>),\n  }) as Record<string, unknown>\n  const rendered = matter.stringify(\n    opts.body ?? `# ${handle.name}\\n\\n${handle.description}\\n`,\n    frontmatter,\n  )\n  if (!opts.dryRun) {\n    await mkdir(dirname(path), { recursive: true })\n    await writeFile(path, rendered, \"utf8\")\n  }\n  return { path, handle, rendered }\n}\n","/**\n * AIP-14 doctype spec — fed to `@agentproto/manifest.createVerbs`\n * to derive create / load / list / update / resolve / delete in one\n * place. Keeping the spec separate from `define-tool.ts` lets the\n * manifest layer (and the future MCP server) iterate over a uniform\n * descriptor without each package re-implementing the wiring.\n */\n\nimport { createVerbs, type DoctypeSpec } from \"@agentproto/manifest\"\nimport { defineTool } from \"./define-tool.js\"\nimport { parseToolManifest } from \"./manifest/index.js\"\nimport type { ToolDefinition, ToolHandle } from \"./types.js\"\n\nexport const toolSpec: DoctypeSpec<\n  ToolDefinition<unknown, unknown>,\n  ToolHandle<unknown, unknown>\n> = {\n  name: \"tool\",\n  aip: 14,\n  schemaLiteral: \"agentproto/tool/v1\",\n  pathOf: (h) => `${h.id}/TOOL.md`,\n  define: (params) =>\n    defineTool(params) as ToolHandle<unknown, unknown>,\n  parse: (source) => {\n    const m = parseToolManifest(source)\n    const fm = m.frontmatter\n    // `createVerbs.load` feeds this frontmatter straight to `define`\n    // (= `defineTool`), which reads camelCase keys. The manifest uses\n    // snake_case for multi-word fields, so they must be renamed here or\n    // `defineTool` silently falls back to its defaults. Single-word fields\n    // (mutates, approval, idempotent, tags, metadata, requires) share the\n    // same key in both conventions and pass through unchanged.\n    const frontmatter: Record<string, unknown> = {\n      id: fm.id,\n      name: fm.name,\n      description: fm.description,\n      version: fm.version,\n      ...(fm.mutates !== undefined && { mutates: fm.mutates }),\n      ...(fm.requires !== undefined && { requires: fm.requires }),\n      ...(fm.approval !== undefined && { approval: fm.approval }),\n      ...(fm.risk_level !== undefined && { riskLevel: fm.risk_level }),\n      ...(fm.cost_class !== undefined && { costClass: fm.cost_class }),\n      ...(fm.timeout_ms !== undefined && { timeoutMs: fm.timeout_ms }),\n      ...(fm.idempotent !== undefined && { idempotent: fm.idempotent }),\n      ...(fm.tags !== undefined && { tags: fm.tags }),\n      ...(fm.metadata !== undefined && { metadata: fm.metadata }),\n      // AIP-16 IO blocks pass through under the same keys.\n      ...(fm.inputs !== undefined && { inputs: fm.inputs }),\n      ...(fm.outputs !== undefined && { outputs: fm.outputs }),\n    }\n    return { frontmatter, body: m.body }\n  },\n}\n\nexport const toolVerbs = createVerbs(toolSpec)\n","import { z } from \"zod\"\n\n/**\n * Shared pagination primitives (moved here from `@agentproto/runtime`'s\n * `tool-envelope.ts` so the `paginated()` ToolTransformer can reuse the\n * exact cursor/limit semantics the daemon's list tools already depend on).\n * `@agentproto/runtime` re-exports this module verbatim, so existing\n * imports are unchanged.\n */\n\n/** Shared pagination params, spread into every list tool's input schema. */\nexport interface PageParams {\n  limit?: number\n  cursor?: string\n  since?: number\n  compact?: boolean\n  full?: boolean\n  fields?: string[]\n}\n\nexport interface Page<T> {\n  items: T[]\n  nextCursor?: string\n  total?: number\n  truncated?: boolean\n}\n\n/** Opaque cursor: base64(JSON `{ k: keysetValue, i: index }`). */\nexport interface CursorPayload {\n  k: string | number | null\n  i: number\n}\n\nexport function encodeCursor(payload: CursorPayload): string {\n  return Buffer.from(JSON.stringify(payload), \"utf8\").toString(\"base64url\")\n}\n\nconst cursorPayloadSchema = z.object({\n  k: z.union([z.string(), z.number(), z.null()]),\n  i: z.number().int().min(0),\n})\n\n/** No `unknown`/`as`: the JSON boundary is typed by zod's safeParse/parse. */\nexport function decodeCursor(token: string): CursorPayload | null {\n  let text: string\n  try {\n    text = Buffer.from(token, \"base64url\").toString(\"utf8\")\n  } catch {\n    return null\n  }\n  try {\n    return cursorPayloadSchema.parse(JSON.parse(text))\n  } catch {\n    return null\n  }\n}\n\nexport interface PaginateOpts<T> {\n  maxLimit: number\n  keyOf?: (item: T) => string | number | null\n}\n\nexport function paginate<T>(items: readonly T[], params: PageParams, opts: PaginateOpts<T>): Page<T> {\n  const limit = Math.min(Math.max(params.limit ?? 50, 1), opts.maxLimit)\n  let start = 0\n  if (params.cursor) {\n    const decoded = decodeCursor(params.cursor)\n    if (decoded && decoded.i >= 0 && decoded.i <= items.length) start = decoded.i\n  }\n  const end = start + limit\n  const slice = items.slice(start, end)\n  const keyAt = (idx: number): string | number | null => {\n    const item = items[idx]\n    return opts.keyOf && item !== undefined ? opts.keyOf(item) : null\n  }\n  return {\n    items: slice,\n    ...(end < items.length ? { nextCursor: encodeCursor({ k: keyAt(end), i: end }) } : {}),\n    total: items.length,\n  }\n}\n\n/**\n * Compact serializer — replaces every `JSON.stringify(x, null, 2)` in list handlers.\n *\n * When `params.fields` is supplied, an explicit allowlist is applied to every\n * item (mechanically, across all call sites): items keep only the named keys.\n * Absent `fields`, the output is byte-identical to `JSON.stringify(page)`.\n */\nexport function toolText<T extends object>(page: Page<T>, params?: Pick<PageParams, \"fields\">): string {\n  const fields = params?.fields\n  const items =\n    fields === undefined\n      ? page.items\n      : page.items.map(item =>\n          Object.fromEntries(\n            Object.entries(item).filter(([key]) => fields.includes(key)),\n          ),\n        )\n  return JSON.stringify({ ...page, items })\n}\n\n/** Zod fragment to spread into each list tool's input schema. */\nexport const pageParamsShape = {\n  limit: z.number().int().min(1).max(200).optional().describe(\"Max items per page. Default 50.\"),\n  cursor: z.string().optional().describe(\"Opaque token from a prior call's `nextCursor`.\"),\n  compact: z\n    .boolean()\n    .optional()\n    .describe(\n      \"Compact projection (fewer fields per item). Default true on tools \" +\n        \"that define a compact projection (session_list); a no-op elsewhere.\",\n    ),\n  full: z\n    .boolean()\n    .optional()\n    .describe(\n      \"Escape hatch — full, unprojected records (opts out of compact). \" +\n        \"Default false.\",\n    ),\n  fields: z.array(z.string()).optional().describe(\"Keep only these fields per item.\"),\n} as const\n","import type { ZodRawShape } from \"zod\"\nimport {\n  paginate,\n  pageParamsShape,\n  toolText,\n  type PageParams,\n} from \"./envelope.js\"\nimport type { ToolTransformer } from \"./types.js\"\n\n/**\n * Concrete {@link ToolTransformer}s — cross-cutting concerns composed by\n * MCP-facing adapters (`toMcpTool`) around a tool's handler pipeline.\n */\n\n/** The MCP text-result shape transformers terminate the pipeline into. */\nexport interface McpTextResult {\n  content: Array<{ type: \"text\"; text: string }>\n  isError?: boolean\n}\n\nfunction textResult(text: string): McpTextResult {\n  return { content: [{ type: \"text\", text }] }\n}\n\nexport interface PaginatedOptions<TItem> {\n  /**\n   * REQUIRED per-item compact projection. Requiring it is the point: there\n   * is no code path that accepts the `compact` param without an actual\n   * compact projection behind it, killing the \"declared but dead param\"\n   * bug class. Pass the identity function only if you truly want\n   * `compact` to be a no-op.\n   */\n  project: (item: TItem) => object\n  /** Key function for the opaque pagination cursor. */\n  keyOf?: (item: TItem) => string | number | null\n  /** Hard ceiling on `limit` (default 200 — matches the daemon tools). */\n  maxLimit?: number\n  /**\n   * Wrapper key for the NON-paginated output. With no `limit`/`cursor`,\n   * legacy list tools returned `{ sessions: [...] }` rather than the page\n   * envelope; set this to reproduce that wrapper (default `\"items\"`).\n   */\n  itemKey?: string\n}\n\n/**\n * Pagination transformer — adds {@link pageParamsShape} to the input shape\n * and wraps the handler (which must return the FULL, unprojected item\n * array) with the shared cursor/limit semantics:\n *\n *  - `limit`/`cursor` present → the `{ items, nextCursor?, total }` page\n *    envelope via `paginate` + `toolText` (cursor/limit semantics are the\n *    exact ones the daemon's list tools already depend on).\n *  - neither present → the legacy `{ [itemKey]: [...] }` wrapper, no\n *    envelope fields.\n *\n * Rows are COMPACT by default (`project`); `full: true` / `compact: false`\n * returns the unprojected records. `fields` is a per-item allowlist\n * applied on the paginated envelope branch (matching existing behavior).\n */\nexport function paginated<TItem extends object>(\n  opts: PaginatedOptions<TItem>,\n): ToolTransformer<unknown, readonly TItem[], McpTextResult> {\n  const { project, keyOf, maxLimit = 200, itemKey = \"items\" } = opts\n  return {\n    name: \"paginated\",\n    wrapShape: (shape: ZodRawShape): ZodRawShape => ({ ...shape, ...pageParamsShape }),\n    wrapHandler: handler => async input => {\n      const params = (input ?? {}) as PageParams\n      const items = (await handler(input)) as readonly TItem[]\n      const full = params.full === true\n      const compact = full ? false : params.compact !== false\n      if (params.limit !== undefined || params.cursor !== undefined) {\n        const page = paginate(items, params, { maxLimit, keyOf })\n        return compact\n          ? textResult(toolText({ ...page, items: page.items.map(project) }, params))\n          : textResult(toolText(page, params))\n      }\n      const rows = compact ? items.map(project) : items\n      return textResult(JSON.stringify({ [itemKey]: rows }))\n    },\n  }\n}\n\n/**\n * Error-normalization transformer — wraps the handler so ANY thrown error\n * becomes the single canonical MCP error result\n * `{ content: [{ type: \"text\", text: <message> }], isError: true }`,\n * replacing the ~150 copy-pasted inline catch blocks.\n */\nexport function catchErrors(): ToolTransformer<unknown, unknown, McpTextResult> {\n  return {\n    name: \"catchErrors\",\n    wrapHandler: handler => async input => {\n      try {\n        return (await handler(input)) as McpTextResult\n      } catch (err) {\n        const text = err instanceof Error ? err.message : String(err)\n        return { content: [{ type: \"text\", text }], isError: true }\n      }\n    },\n  }\n}\n","/**\n * @agentproto/tool — AIP-14 TOOL.md `defineTool` reference impl.\n *\n * Vendor-neutral tool **contract** registration: an author writes\n * `defineTool({...})` and the runtime returns a `ToolHandle` carrying\n * identity, schemas, side-effect profile, approval class, and\n * provider routing hints. Bodies live on AIP-30 PROVIDER manifests;\n * invocation goes through `@agentproto/driver`.\n *\n * Spec: https://agentproto.sh/docs/aip-14\n */\n\nexport const SPEC_NAME = \"agenttool/v1\" as const\nexport const SPEC_VERSION = \"1.0.0-alpha\" as const\n\nexport {\n  defineTool,\n  validateInput,\n  validateContext,\n  validateOutput,\n} from \"./define-tool.js\"\n// Standalone create-tool kept for back-compat; new code should import\n// the unified verb surface (`toolVerbs.create`, `.load`, `.list`,\n// `.update`, `.resolve`, `.delete`) from `./spec.js`.\nexport {\n  createTool,\n  type CreateToolOptions,\n  type CreateToolResult,\n} from \"./create-tool.js\"\nexport { toolSpec, toolVerbs } from \"./spec.js\"\nexport {\n  parseToolManifest,\n  toolFromManifest,\n  toolFromManifestOnly,\n  type ToolManifest,\n  type ToolManifestFrontmatter,\n} from \"./manifest/index.js\"\nexport {\n  ToolError,\n  toToolError,\n  toToolResult,\n  type ToolErrorCode,\n  type ToolErrorPayload,\n} from \"./errors.js\"\nexport {\n  paginated,\n  catchErrors,\n  type McpTextResult,\n  type PaginatedOptions,\n} from \"./transformers.js\"\nexport {\n  paginate,\n  toolText,\n  encodeCursor,\n  decodeCursor,\n  pageParamsShape,\n  type Page,\n  type PageParams,\n  type PaginateOpts,\n  type CursorPayload,\n} from \"./envelope.js\"\nexport type {\n  ToolDefinition,\n  ToolHandle,\n  ToolTransformer,\n  ToolContext,\n  ToolCapabilities,\n  ApprovalClass,\n  DriverConstraints,\n  DriverKind,\n  RetryPolicy,\n  ToolResult,\n  ValidationResult,\n  ValidationFailure,\n  ValidationSuccess,\n} from \"./types.js\"\n"]}

package/dist/manifest/index.d.ts

@@ -1,2 +1,2 @@
 import 'zod';
-export { f as ToolManifest, g as ToolManifestFrontmatter, p as parseToolManifest, t as toolFromManifest, j as toolFromManifestOnly, k as toolManifestFrontmatterSchema } from '../index-63aR8ryG.js';
+export { g as ToolManifest, h as ToolManifestFrontmatter, p as parseToolManifest, t as toolFromManifest, k as toolFromManifestOnly, l as toolManifestFrontmatterSchema } from '../index-DpcQ_sMe.js';

package/dist/manifest/index.mjs

@@ -1,3 +1,3 @@
-export { parseToolManifest, toolFromManifest, toolFromManifestOnly, toolManifestFrontmatterSchema } from '../chunk-VCLSUUB5.mjs';
+export { parseToolManifest, toolFromManifest, toolFromManifestOnly, toolManifestFrontmatterSchema } from '../chunk-7UKT5ZEH.mjs';
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentproto/tool",
-  "version": "0.2.2",
+  "version": "0.3.1",
   "description": "agentproto/tool-runtime — reference implementation of AIP-14 TOOL.md `defineTool` contract. Vendor-neutral tool registration with validated input/output schemas, structured error envelopes, and side-effect declarations. Per-framework adapters (Mastra, LangChain, A2A) consume the produced ToolHandle.",
   "keywords": [
     "agentproto",
@@ -48,16 +48,16 @@
   "dependencies": {
     "ajv": "^8.20.0",
     "gray-matter": "^4.0.3",
-    "zod": "^4.5.4",
-    "@agentproto/manifest": "0.2.1",
-    "@agentproto/define-doctype": "0.1.1"
+    "zod": "^4.6.5",
+    "@agentproto/define-doctype": "0.1.2",
+    "@agentproto/manifest": "0.2.2"
   },
   "devDependencies": {
-    "@types/node": "^25.6.2",
+    "@types/node": "^25.9.5",
     "tsup": "^8.5.1",
     "typescript": "^5.9.3",
-    "vitest": "^3.2.4",
-    "@agentproto/tooling": "0.1.0-alpha.0"
+    "vitest": "^3.2.7",
+    "@agentproto/tooling": "0.1.0"
   },
   "scripts": {
     "dev": "tsup --watch",

package/dist/chunk-VCLSUUB5.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/errors.ts","../src/define-tool.ts","../src/manifest/index.ts"],"names":[],"mappings":";;;;;;;;;;;;AA6BO,IAAM,SAAA,GAAN,cAAwB,KAAA,CAAM;AAAA,EAC1B,IAAA;AAAA,EACA,SAAA;AAAA,EACA,KAAA;AAAA,EAET,YAAY,OAAA,EAA2B;AACrC,IAAA,KAAA,CAAM,QAAQ,OAAO,CAAA;AACrB,IAAA,IAAA,CAAK,IAAA,GAAO,WAAA;AACZ,IAAA,IAAA,CAAK,OAAO,OAAA,CAAQ,IAAA;AACpB,IAAA,IAAA,CAAK,SAAA,GAAY,QAAQ,SAAA,IAAa,KAAA;AACtC,IAAA,IAAA,CAAK,QAAQ,OAAA,CAAQ,KAAA;AAAA,EACvB;AAAA,EAEA,MAAA,GAA2B;AACzB,IAAA,OAAO;AAAA,MACL,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,GAAI,KAAK,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,IAAA,CAAK,KAAA,EAAM,GAAI;AAAC,KAC1D;AAAA,EACF;AACF;AAMO,SAAS,YAAY,MAAA,EAA4B;AACtD,EAAA,IAAI,MAAA,YAAkB,WAAW,OAAO,MAAA;AACxC,EAAA,IAAI,kBAAkB,KAAA,EAAO;AAC3B,IAAA,OAAO,IAAI,SAAA,CAAU;AAAA,MACnB,IAAA,EAAM,UAAA;AAAA,MACN,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,KAAA,EAAO;AAAA,KACR,CAAA;AAAA,EACH;AACA,EAAA,OAAO,IAAI,SAAA,CAAU;AAAA,IACnB,IAAA,EAAM,UAAA;AAAA,IACN,OAAA,EAAS,OAAO,MAAM,CAAA;AAAA,IACtB,KAAA,EAAO;AAAA,GACR,CAAA;AACH;AAMO,SAAS,YAAA,CACd,OACA,MAAA,EACe;AACf,EAAA,IAAI,WAAW,MAAA,EAAW;AACxB,IAAA,MAAM,GAAA,GAAM,YAAY,MAAM,CAAA;AAC9B,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,GAAA,CAAI,QAAO,EAAE;AAAA,EAC1C;AACA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAkB;AACvC;;;ACtEA,IAAM,cAAA,GAAwC;AAAA,EAC5C,KAAA;AAAA,EACA,MAAA;AAAA,EACA,KAAA;AAAA,EACA,KAAA;AAAA,EACA;AACF,CAAA;AAsBA,IAAM,gBAAgB,aAAA,CAGpB;AAAA,EACA,GAAA,EAAK,EAAA;AAAA,EACL,IAAA,EAAM,MAAA;AAAA,EACN,SAAS,GAAA,EAAK;AAGZ,IAAA,IAAI,aAAc,GAAA,EAA4C;AAC5D,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,gBAAA,EAAmB,IAAI,EAAE,CAAA,yJAAA;AAAA,OAG3B;AAAA,IACF;AAAA,EACF,CAAA;AAAA,EACA,MAAM,GAAA,EAAK;AACT,IAAA,OAAO;AAAA,MACL,IAAI,GAAA,CAAI,EAAA;AAAA,MACR,IAAA,EAAM,GAAA,CAAI,IAAA,IAAQ,GAAA,CAAI,EAAA;AAAA,MACtB,aAAa,GAAA,CAAI,WAAA;AAAA,MACjB,SAAS,GAAA,CAAI,OAAA;AAAA,MACb,aAAa,GAAA,CAAI,WAAA;AAAA,MACjB,cAAc,GAAA,CAAI,YAAA;AAAA,MAClB,MAAA,EAAQ,GAAA,CAAI,MAAA,GAAS,MAAA,CAAO,MAAA,CAAO,EAAE,GAAG,GAAA,CAAI,MAAA,EAAQ,CAAA,GAAI,MAAA;AAAA,MACxD,OAAA,EAAS,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,MAAA,CAAO,EAAE,GAAG,GAAA,CAAI,OAAA,EAAS,CAAA,GAAI,MAAA;AAAA,MAC3D,eAAe,GAAA,CAAI,aAAA;AAAA,MACnB,OAAA,EAAS,OAAO,MAAA,CAAO,CAAC,GAAI,GAAA,CAAI,OAAA,IAAW,EAAG,CAAC,CAAA;AAAA,MAC/C,QAAA,EAAU,kBAAA,CAAmB,GAAA,CAAI,QAAQ,CAAA;AAAA,MACzC,QAAA,EAAU,eAAA,CAAgB,GAAA,CAAI,QAAA,EAAU,IAAI,OAAO,CAAA;AAAA,MACnD,SAAA,EAAW,IAAI,SAAA,IAAa,CAAA;AAAA,MAC5B,SAAA,EAAW,IAAI,SAAA,IAAa,SAAA;AAAA,MAC5B,SAAA,EAAW,IAAI,SAAA,IAAa,GAAA;AAAA,MAC5B,OAAO,GAAA,CAAI,KAAA;AAAA,MACX,IAAA,EAAM,OAAO,MAAA,CAAO,CAAC,GAAI,GAAA,CAAI,IAAA,IAAQ,EAAG,CAAC,CAAA;AAAA,MACzC,QAAA,EAAU,OAAO,MAAA,CAAO,EAAE,GAAI,GAAA,CAAI,QAAA,IAAY,EAAC,EAAI,CAAA;AAAA,MACnD,UAAA,EAAY,IAAI,UAAA,IAAc,KAAA;AAAA,MAC9B,uBAAuB,GAAA,CAAI,qBAAA;AAAA,MAC3B,iBAAA,EAAmB,yBAAA,CAA0B,GAAA,CAAI,iBAAiB;AAAA,KACpE;AAAA,EACF;AACF,CAAC,CAAA;AAQM,SAAS,WAKd,UAAA,EACuC;AACvC,EAAA,OAAO,aAAA;AAAA,IACL;AAAA,GACF;AACF;AAYO,SAAS,aAAA,CACd,QACA,KAAA,EAC0B;AAC1B,EAAA,IAAI,OAAO,WAAA,EAAa;AACtB,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,WAAA,CAAY,SAAA,CAAU,KAAK,CAAA;AACjD,IAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,MAAA,OAAO;AAAA,QACL,EAAA,EAAI,KAAA;AAAA,QACJ,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,eAAA;AAAA,UACN,OAAA,EAAS,OAAO,MAAA,CAAO,EAAE,MAAM,eAAA,CAAgB,MAAA,CAAO,KAAA,CAAM,MAAM,CAAC,CAAA,CAAA;AAAA,UACnE,KAAA,EAAO,OAAO,KAAA,CAAM;AAAA;AACtB,OACF;AAAA,IACF;AACA,IAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,OAAO,IAAA,EAAe;AAAA,EAClD;AACA,EAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,IAAA,OAAO,kBAAA,CAA2B,MAAA,CAAO,EAAA,EAAI,MAAA,CAAO,QAAQ,KAAK,CAAA;AAAA,EACnE;AACA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,KAAA,EAAgB;AAC5C;AAaO,SAAS,eAAA,CACd,QACA,OAAA,EAC4B;AAC5B,EAAA,IAAI,CAAC,OAAO,aAAA,EAAe;AACzB,IAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,OAAA,EAAoB;AAAA,EAChD;AACA,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,aAAA,CAAc,SAAA,CAAU,OAAO,CAAA;AACrD,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,KAAA,EAAO;AAAA,QACL,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS,OAAO,MAAA,CAAO,EAAE,kDAA6C,eAAA,CAAgB,MAAA,CAAO,KAAA,CAAM,MAAM,CAAC,CAAA,CAAA;AAAA,QAC1G,KAAA,EAAO,SAAA;AAAA,QACP,KAAA,EAAO,OAAO,KAAA,CAAM;AAAA;AACtB,KACF;AAAA,EACF;AACA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAO,OAAO,IAAA,EAAiB;AACpD;AAYO,SAAS,cAAA,CACd,QACA,MAAA,EACS;AACT,EAAA,IAAI,OAAO,YAAA,EAAc;AACvB,IAAA,MAAM,MAAA,GAAS,MAAA,CAAO,YAAA,CAAa,SAAA,CAAU,MAAM,CAAA;AACnD,IAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,MAAA,MAAM,IAAI,SAAA,CAAU;AAAA,QAClB,IAAA,EAAM,gBAAA;AAAA,QACN,OAAA,EAAS,OAAO,MAAA,CAAO,EAAE,uEAAkE,eAAA,CAAgB,MAAA,CAAO,KAAA,CAAM,MAAM,CAAC,CAAA,CAAA;AAAA,QAC/H,KAAA,EAAO,OAAO,KAAA,CAAM;AAAA,OACrB,CAAA;AAAA,IACH;AACA,IAAA,OAAO,MAAA,CAAO,IAAA;AAAA,EAChB;AACA,EAAA,IAAI,OAAO,OAAA,EAAS;AAClB,IAAA,MAAM,SAAS,kBAAA,CAA4B,MAAA,CAAO,EAAA,EAAI,MAAA,CAAO,SAAS,MAAM,CAAA;AAC5E,IAAA,IAAI,CAAC,OAAO,EAAA,EAAI;AACd,MAAA,MAAM,IAAI,SAAA,CAAU;AAAA,QAClB,IAAA,EAAM,gBAAA;AAAA,QACN,OAAA,EAAS,OAAO,KAAA,CAAM,OAAA;AAAA,QACtB,KAAA,EAAO,OAAO,KAAA,CAAM;AAAA,OACrB,CAAA;AAAA,IACH;AACA,IAAA,OAAO,MAAA,CAAO,KAAA;AAAA,EAChB;AACA,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,eAAA,CACP,UACA,OAAA,EACe;AACf,EAAA,IAAI,UAAU,OAAO,QAAA;AACrB,EAAA,OAAO,OAAA,IAAW,OAAA,CAAQ,MAAA,GAAS,CAAA,GAAI,WAAA,GAAc,MAAA;AACvD;AAEA,SAAS,mBACP,IAAA,EAC4B;AAC5B,EAAA,OAAO,OAAO,MAAA,CAAO;AAAA,IACnB,OAAA,EAAS,OAAO,MAAA,CAAO,CAAC,GAAI,IAAA,EAAM,OAAA,IAAW,EAAG,CAAC,CAAA;AAAA,IACjD,OAAA,EAAS,OAAO,MAAA,CAAO,CAAC,GAAI,IAAA,EAAM,OAAA,IAAW,EAAG,CAAC,CAAA;AAAA,IACjD,KAAA,EAAO,OAAO,MAAA,CAAO,CAAC,GAAI,IAAA,EAAM,KAAA,IAAS,EAAG,CAAC;AAAA,GAC9C,CAAA;AACH;AAEA,SAAS,0BACP,CAAA,EAC6B;AAC7B,EAAA,MAAM,MAAA,GAAA,CAAU,CAAA,EAAG,MAAA,IAAU,EAAC,EAAG,MAAA;AAAA,IAAO,CAAC,CAAA,KACvC,cAAA,CAAe,QAAA,CAAS,CAAe;AAAA,GACzC;AACA,EAAA,MAAM,WAAA,GAAA,CAAe,CAAA,EAAG,WAAA,IAAe,EAAC,EAAG,MAAA;AAAA,IAAO,CAAC,CAAA,KACjD,cAAA,CAAe,QAAA,CAAS,CAAe;AAAA,GACzC;AACA,EAAA,OAAO,OAAO,MAAA,CAAO;AAAA,IACnB,MAAA,EAAQ,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA;AAAA,IAC5B,WAAA,EAAa,MAAA,CAAO,MAAA,CAAO,WAAW;AAAA,GACvC,CAAA;AACH;AAEA,SAAS,gBACP,MAAA,EACQ;AACR,EAAA,OAAO,MAAA,CACJ,IAAI,CAAC,CAAA,KAAM,GAAG,CAAA,CAAE,IAAA,CAAK,MAAA,GAAS,CAAA,GAAI,CAAA,CAAE,IAAA,CAAK,KAAK,GAAG,CAAA,GAAI,OAAO,EAAE,CAAA,EAAG,EAAE,OAAO,CAAA,CAAE,CAAA,CAC5E,IAAA,CAAK,IAAI,CAAA;AACd;AAIA,IAAM,OAAO,IAAI,GAAA,CAAI,EAAE,SAAA,EAAW,MAAM,CAAA;AAKxC,IAAM,eAAA,uBAAsB,OAAA,EAG1B;AAEF,SAAS,kBAAA,CACP,MAAA,EACA,MAAA,EACA,KAAA,EACqB;AACrB,EAAA,IAAI,QAAA,GAAW,eAAA,CAAgB,GAAA,CAAI,MAAM,CAAA;AACzC,EAAA,IAAI,CAAC,QAAA,EAAU;AACb,IAAA,QAAA,GAAW,IAAA,CAAK,QAAQ,MAA4C,CAAA;AACpE,IAAA,eAAA,CAAgB,GAAA,CAAI,QAAQ,QAAQ,CAAA;AAAA,EACtC;AACA,EAAA,MAAM,KAAA,GAAQ,SAAS,KAAK,CAAA;AAC5B,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,MAAA,IAAU,EAAC;AACnC,IAAA,MAAM,OAAA,GAAU,MAAA,CACb,GAAA,CAAI,CAAC,MAAM,CAAA,EAAG,CAAA,CAAE,YAAA,IAAgB,GAAG,IAAI,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA,CAClD,KAAK,IAAI,CAAA;AACZ,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,KAAA,EAAO;AAAA,QACL,IAAA,EAAM,eAAA;AAAA,QACN,OAAA,EAAS,CAAA,IAAA,EAAO,MAAM,CAAA,GAAA,EAAM,OAAO,CAAA,CAAA;AAAA,QACnC,KAAA,EAAO;AAAA;AACT,KACF;AAAA,EACF;AACA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAkB;AACvC;;;ACjRO,IAAM,6BAAA,GAAgC,EAAE,MAAA,CAAO;AAAA,EACpD,MAAA,EAAQ,CAAA,CAAE,OAAA,CAAQ,oBAAoB,EAAE,QAAA,EAAS;AAAA,EACjD,IAAA,EAAM,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,EAAE,CAAA;AAAA,EAC9B,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,MAAM,0BAA0B,CAAA;AAAA,EAC/C,WAAA,EAAa,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAI,CAAA;AAAA,EACvC,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,MAAM,gBAAgB,CAAA;AAAA;AAAA,EAG1C,SAAS,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,EACtC,QAAA,EAAU,EACP,MAAA,CAAO;AAAA,IACN,SAAS,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,IACtC,SAAS,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,IACtC,OAAO,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA;AAAS,GACrC,EACA,QAAA,EAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKZ,UAAU,CAAA,CACP,MAAA;AAAA,IACC,CAAC,CAAA,KACC,OAAO,CAAA,KAAM,QAAA,KACZ,CAAA,KAAM,MAAA,IACL,CAAA,KAAM,QAAA,IACN,CAAA,KAAM,WAAA,IACN,UAAA,CAAW,KAAK,CAAC,CAAA,CAAA;AAAA,IACrB,EAAE,SAAS,4DAAA;AAA6D,IAEzE,QAAA,EAAS;AAAA,EACZ,UAAA,EAAY,EACT,KAAA,CAAM,CAAC,EAAE,OAAA,CAAQ,CAAC,CAAA,EAAG,CAAA,CAAE,OAAA,CAAQ,CAAC,GAAG,CAAA,CAAE,OAAA,CAAQ,CAAC,CAAA,EAAG,CAAA,CAAE,QAAQ,CAAC,CAAC,CAAC,CAAA,CAC9D,QAAA,EAAS;AAAA,EACZ,UAAA,EAAY,EAAE,IAAA,CAAK,CAAC,WAAW,SAAA,EAAW,WAAW,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,EACjE,UAAA,EAAY,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,GAAW,QAAA,EAAS;AAAA,EACjD,UAAA,EAAY,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,EACjC,MAAM,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,EACnC,QAAA,EAAU,CAAA,CAAE,MAAA,CAAO,CAAA,CAAE,MAAA,IAAU,CAAA,CAAE,OAAA,EAAS,CAAA,CAAE,QAAA,EAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAMrD,MAAA,EAAQ,CAAA,CAAE,MAAA,CAAO,CAAA,CAAE,MAAA,IAAU,CAAA,CAAE,OAAA,EAAS,CAAA,CAAE,QAAA,EAAS;AAAA,EACnD,OAAA,EAAS,CAAA,CAAE,MAAA,CAAO,CAAA,CAAE,MAAA,IAAU,CAAA,CAAE,OAAA,EAAS,CAAA,CAAE,QAAA,EAAS;AAAA;AAAA;AAAA,EAIpD,IAAA,EAAM,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,EAC3B,GAAA,EAAK,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,EAC1B,MAAA,EAAQ,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,EAC7B,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA,EAAS;AAAA,EAC9B,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA;AACvB,CAAC;AAeM,SAAS,kBAAkB,MAAA,EAA8B;AAC9D,EAAA,MAAM,MAAA,GAAS,OAAO,MAAM,CAAA;AAC5B,EAAA,IAAI,OAAO,IAAA,CAAK,MAAA,CAAO,IAAI,CAAA,CAAE,WAAW,CAAA,EAAG;AACzC,IAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AAAA,EACnE;AACA,EAAA,MAAM,MAAA,GAAS,6BAAA,CAA8B,SAAA,CAAU,MAAA,CAAO,IAAI,CAAA;AAClE,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,iDAA4C,MAAA,CAAO,KAAA,CAAM,OACtD,GAAA,CAAI,CAAA,CAAA,KAAK,GAAG,CAAA,CAAE,IAAA,CAAK,KAAK,GAAG,CAAC,KAAK,CAAA,CAAE,OAAO,EAAE,CAAA,CAC5C,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KACf;AAAA,EACF;AACA,EAAA,OAAO,EAAE,WAAA,EAAa,MAAA,CAAO,IAAA,EAAM,IAAA,EAAM,OAAO,OAAA,EAAQ;AAC1D;AAcO,SAAS,qBACd,QAAA,EAC8B;AAC9B,EAAA,MAAM,KAAK,QAAA,CAAS,WAAA;AACpB,EAAA,OAAO,UAAA,CAAW;AAAA,IAChB,IAAI,EAAA,CAAG,EAAA;AAAA,IACP,MAAM,EAAA,CAAG,IAAA;AAAA,IACT,aAAa,EAAA,CAAG,WAAA;AAAA,IAChB,SAAS,EAAA,CAAG,OAAA;AAAA,IACZ,QAAQ,EAAA,CAAG,MAAA;AAAA,IACX,SAAS,EAAA,CAAG,OAAA;AAAA,IACZ,SAAS,EAAA,CAAG,OAAA;AAAA,IACZ,UAAU,EAAA,CAAG,QAAA;AAAA,IACb,UAAU,EAAA,CAAG,QAAA;AAAA,IACb,WAAW,EAAA,CAAG,UAAA;AAAA,IACd,WAAW,EAAA,CAAG,UAAA;AAAA,IACd,WAAW,EAAA,CAAG,UAAA;AAAA,IACd,YAAY,EAAA,CAAG,UAAA;AAAA,IACf,MAAM,EAAA,CAAG,IAAA;AAAA,IACT,UAAU,EAAA,CAAG;AAAA,GACd,CAAA;AACH;AAuBO,SAAS,iBAId,IAAA,EAKwC;AACxC,EAAA,MAAM,EAAA,GAAK,KAAK,QAAA,CAAS,WAAA;AACzB,EAAA,OAAO,UAAA,CAAsC;AAAA,IAC3C,IAAI,EAAA,CAAG,EAAA;AAAA,IACP,MAAM,EAAA,CAAG,IAAA;AAAA,IACT,aAAa,EAAA,CAAG,WAAA;AAAA,IAChB,SAAS,EAAA,CAAG,OAAA;AAAA,IACZ,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,cAAc,IAAA,CAAK,YAAA;AAAA,IACnB,QAAQ,EAAA,CAAG,MAAA;AAAA,IACX,SAAS,EAAA,CAAG,OAAA;AAAA,IACZ,eAAe,IAAA,CAAK,aAAA;AAAA,IACpB,SAAS,EAAA,CAAG,OAAA;AAAA,IACZ,UAAU,EAAA,CAAG,QAAA;AAAA,IACb,UAAU,EAAA,CAAG,QAAA;AAAA,IACb,WAAW,EAAA,CAAG,UAAA;AAAA,IACd,WAAW,EAAA,CAAG,UAAA;AAAA,IACd,WAAW,EAAA,CAAG,UAAA;AAAA,IACd,YAAY,EAAA,CAAG,UAAA;AAAA,IACf,MAAM,EAAA,CAAG,IAAA;AAAA,IACT,UAAU,EAAA,CAAG;AAAA,GACd,CAAA;AACH","file":"chunk-VCLSUUB5.mjs","sourcesContent":["import type { ToolResult } from \"./types.js\"\n\n/**\n * AIP-14 conventional error codes. Tool-specific codes MAY use a domain\n * prefix (`\"stripe:card_declined\"`).\n */\nexport type ToolErrorCode =\n  | \"input_invalid\"\n  | \"output_invalid\"\n  | \"unauthorised\"\n  | \"not_found\"\n  | \"rate_limited\"\n  | \"timeout\"\n  | \"upstream_error\"\n  | \"internal\"\n  | (string & {})\n\nexport interface ToolErrorPayload {\n  code: ToolErrorCode\n  message: string\n  retryable?: boolean\n  cause?: unknown\n}\n\n/**\n * Structured error thrown by tool bodies. Adapters wrap this into the\n * standard {@link ToolResult} envelope; bodies MUST throw it (never\n * return error objects).\n */\nexport class ToolError extends Error {\n  readonly code: ToolErrorCode\n  readonly retryable: boolean\n  readonly cause: unknown\n\n  constructor(payload: ToolErrorPayload) {\n    super(payload.message)\n    this.name = \"ToolError\"\n    this.code = payload.code\n    this.retryable = payload.retryable ?? false\n    this.cause = payload.cause\n  }\n\n  toJSON(): ToolErrorPayload {\n    return {\n      code: this.code,\n      message: this.message,\n      retryable: this.retryable,\n      ...(this.cause !== undefined ? { cause: this.cause } : {}),\n    }\n  }\n}\n\n/**\n * Wrap an unknown thrown value into a {@link ToolError}. Used by adapters\n * to normalise non-ToolError throws into the standard envelope.\n */\nexport function toToolError(thrown: unknown): ToolError {\n  if (thrown instanceof ToolError) return thrown\n  if (thrown instanceof Error) {\n    return new ToolError({\n      code: \"internal\",\n      message: thrown.message,\n      cause: thrown,\n    })\n  }\n  return new ToolError({\n    code: \"internal\",\n    message: String(thrown),\n    cause: thrown,\n  })\n}\n\n/**\n * Adapter helper: project a thrown ToolError (or any throw) into the\n * standard {@link ToolResult} envelope. Adapters MUST do this; bodies MUST NOT.\n */\nexport function toToolResult<T>(\n  value: T | undefined,\n  thrown: unknown\n): ToolResult<T> {\n  if (thrown !== undefined) {\n    const err = toToolError(thrown)\n    return { ok: false, error: err.toJSON() }\n  }\n  return { ok: true, value: value as T }\n}\n","import { createDoctype } from \"@agentproto/define-doctype\"\nimport Ajv from \"ajv\"\nimport type { ZodType } from \"zod\"\nimport { ToolError } from \"./errors.js\"\nimport type {\n  ApprovalClass,\n  DriverConstraints,\n  DriverKind,\n  ToolCapabilities,\n  ToolContext,\n  ToolDefinition,\n  ToolHandle,\n  ValidationResult,\n} from \"./types.js\"\n\nconst PROVIDER_KINDS: readonly DriverKind[] = [\n  \"cli\",\n  \"http\",\n  \"mcp\",\n  \"sdk\",\n  \"builtin\",\n]\n\n/**\n * AIP-14 reference implementation of `defineTool`.\n *\n * Returns a {@link ToolHandle} with defaults applied. The handle is a\n * pure contract — schemas, governance metadata, provider routing\n * hints. Bodies live on AIP-30 PROVIDER manifests; invocation goes\n * through provider-runtime's resolver.\n *\n * Built on `createDoctype` from `@agentproto/define-doctype`: the\n * id-pattern + description-length validation and the top-level\n * `Object.freeze` are shared with every other AIP defineX. The\n * spec-14-specific parts (migration guard for `execute`, defaulting\n * `approval` from `mutates`, freezing nested arrays/objects) live in\n * `validate` and `build` below.\n *\n * Conformance highlights ([§ Conformance rules](https://agentproto.sh/docs/aip-14)):\n *  - No `execute` field on the contract — bodies are providers' job.\n *  - `defineTool` MUST refuse a definition carrying `execute` (migration error).\n *  - No I/O at module load — `defineTool(...)` is pure construction.\n */\nconst constructTool = createDoctype<\n  ToolDefinition<unknown, unknown, ToolContext>,\n  ToolHandle<unknown, unknown, ToolContext>\n>({\n  aip: 14,\n  name: \"tool\",\n  validate(def) {\n    // Migration guard: catch authors trying to ship a body on the contract.\n    // The body lives on a PROVIDER (per AIP-30); reject at construction.\n    if (\"execute\" in (def as unknown as Record<string, unknown>)) {\n      throw new Error(\n        `defineTool: id='${def.id}' carries an 'execute' property. ` +\n          `Bodies live on AIP-30 PROVIDER manifests, not on the TOOL contract. ` +\n          `See https://agentproto.sh/docs/aip-30 for migration.`,\n      )\n    }\n  },\n  build(def) {\n    return {\n      id: def.id,\n      name: def.name ?? def.id,\n      description: def.description,\n      version: def.version,\n      inputSchema: def.inputSchema,\n      outputSchema: def.outputSchema,\n      inputs: def.inputs ? Object.freeze({ ...def.inputs }) : undefined,\n      outputs: def.outputs ? Object.freeze({ ...def.outputs }) : undefined,\n      contextSchema: def.contextSchema,\n      mutates: Object.freeze([...(def.mutates ?? [])]),\n      requires: freezeCapabilities(def.requires),\n      approval: defaultApproval(def.approval, def.mutates),\n      riskLevel: def.riskLevel ?? 0,\n      costClass: def.costClass ?? \"trivial\",\n      timeoutMs: def.timeoutMs ?? 30_000,\n      retry: def.retry,\n      tags: Object.freeze([...(def.tags ?? [])]),\n      metadata: Object.freeze({ ...(def.metadata ?? {}) }),\n      idempotent: def.idempotent ?? false,\n      defaultImplementation: def.defaultImplementation,\n      driverConstraints: freezeProviderConstraints(def.driverConstraints),\n    }\n  },\n})\n\n/**\n * Public-facing `defineTool` — typed wrapper around `constructTool`\n * that preserves the per-call `<TInput, TOutput, TContext>` inference\n * so callers don't write any generics. The wrapper exists purely for\n * generic propagation; the runtime body is the meta-factory above.\n */\nexport function defineTool<\n  TInput,\n  TOutput,\n  TContext extends ToolContext = ToolContext,\n>(\n  definition: ToolDefinition<TInput, TOutput, TContext>,\n): ToolHandle<TInput, TOutput, TContext> {\n  return constructTool(\n    definition as ToolDefinition<unknown, unknown, ToolContext>,\n  ) as unknown as ToolHandle<TInput, TOutput, TContext>\n}\n\n/**\n * Validate input against a tool's `inputSchema`. Returns a typed\n * {@link ValidationResult}; provider runtimes MUST call this BEFORE\n * dispatching to the provider's body.\n *\n * Priority:\n *  1. zod `inputSchema` (v0.1) — used when present.\n *  2. JSON Schema `inputs` (v0.2) — fallback for manifest-only tools.\n *  3. No schema — passthrough (returns `ok: true`).\n */\nexport function validateInput<TInput>(\n  handle: Pick<ToolHandle<TInput>, \"id\" | \"inputSchema\" | \"inputs\">,\n  input: unknown,\n): ValidationResult<TInput> {\n  if (handle.inputSchema) {\n    const result = handle.inputSchema.safeParse(input)\n    if (!result.success) {\n      return {\n        ok: false,\n        error: {\n          code: \"input_invalid\",\n          message: `id='${handle.id}': ${formatZodIssues(result.error.issues)}`,\n          cause: result.error.issues,\n        },\n      }\n    }\n    return { ok: true, value: result.data as TInput }\n  }\n  if (handle.inputs) {\n    return validateJsonSchema<TInput>(handle.id, handle.inputs, input)\n  }\n  return { ok: true, value: input as TInput }\n}\n\n/**\n * Validate context against a tool's `contextSchema` (when declared).\n * Returns a typed {@link ValidationResult}; provider runtimes MUST\n * call this BEFORE dispatching when the contract has a contextSchema.\n *\n * Tools without a contextSchema accept any context shape; this helper\n * returns the input verbatim in that case.\n *\n * Context validation uses only zod (no JSON Schema fallback) — context\n * schemas are always authored in TS, never in manifests.\n */\nexport function validateContext<TContext extends ToolContext = ToolContext>(\n  handle: Pick<ToolHandle<unknown, unknown, TContext>, \"id\" | \"contextSchema\">,\n  context: unknown,\n): ValidationResult<TContext> {\n  if (!handle.contextSchema) {\n    return { ok: true, value: context as TContext }\n  }\n  const result = handle.contextSchema.safeParse(context)\n  if (!result.success) {\n    return {\n      ok: false,\n      error: {\n        code: \"input_invalid\",\n        message: `id='${handle.id}': context does not match contextSchema — ${formatZodIssues(result.error.issues)}`,\n        field: \"context\",\n        cause: result.error.issues,\n      },\n    }\n  }\n  return { ok: true, value: result.data as TContext }\n}\n\n/**\n * Validate output against a tool's `outputSchema`. Returns the typed\n * value on success; throws {@link ToolError} with code `\"output_invalid\"`\n * on contract violation.\n *\n * Priority:\n *  1. zod `outputSchema` (v0.1) — used when present.\n *  2. JSON Schema `outputs` (v0.2) — fallback for manifest-only tools.\n *  3. No schema — passthrough (returns the value as-is).\n */\nexport function validateOutput<TOutput>(\n  handle: Pick<ToolHandle<unknown, TOutput>, \"id\" | \"outputSchema\" | \"outputs\">,\n  output: unknown,\n): TOutput {\n  if (handle.outputSchema) {\n    const result = handle.outputSchema.safeParse(output)\n    if (!result.success) {\n      throw new ToolError({\n        code: \"output_invalid\",\n        message: `id='${handle.id}': provider produced output that does not match outputSchema — ${formatZodIssues(result.error.issues)}`,\n        cause: result.error.issues,\n      })\n    }\n    return result.data as TOutput\n  }\n  if (handle.outputs) {\n    const result = validateJsonSchema<TOutput>(handle.id, handle.outputs, output)\n    if (!result.ok) {\n      throw new ToolError({\n        code: \"output_invalid\",\n        message: result.error.message,\n        cause: result.error.cause,\n      })\n    }\n    return result.value\n  }\n  return output as TOutput\n}\n\nfunction defaultApproval(\n  declared: ApprovalClass | undefined,\n  mutates: readonly string[] | undefined,\n): ApprovalClass {\n  if (declared) return declared\n  return mutates && mutates.length > 0 ? \"on-mutate\" : \"auto\"\n}\n\nfunction freezeCapabilities(\n  caps: ToolCapabilities | undefined,\n): Readonly<ToolCapabilities> {\n  return Object.freeze({\n    network: Object.freeze([...(caps?.network ?? [])]),\n    secrets: Object.freeze([...(caps?.secrets ?? [])]),\n    tools: Object.freeze([...(caps?.tools ?? [])]),\n  })\n}\n\nfunction freezeProviderConstraints(\n  c: DriverConstraints | undefined,\n): Required<DriverConstraints> {\n  const forbid = (c?.forbid ?? []).filter((k): k is DriverKind =>\n    PROVIDER_KINDS.includes(k as DriverKind),\n  )\n  const requireKind = (c?.requireKind ?? []).filter((k): k is DriverKind =>\n    PROVIDER_KINDS.includes(k as DriverKind),\n  )\n  return Object.freeze({\n    forbid: Object.freeze(forbid) as readonly DriverKind[],\n    requireKind: Object.freeze(requireKind) as readonly DriverKind[],\n  })\n}\n\nfunction formatZodIssues(\n  issues: ReadonlyArray<{ path: ReadonlyArray<PropertyKey>; message: string }>,\n): string {\n  return issues\n    .map((i) => `${i.path.length > 0 ? i.path.join(\".\") + \": \" : \"\"}${i.message}`)\n    .join(\"; \")\n}\n\n// Shared Ajv instance — created once at module load.\n// allErrors: true so we surface all violations, not just the first.\nconst _ajv = new Ajv({ allErrors: true })\n\n// Validator cache keyed by schema object identity. Avoids repeated _ajv.compile()\n// calls (which go through Ajv's internal registry) and lets GC collect validators\n// when a tool handle is no longer referenced.\nconst _validatorCache = new WeakMap<\n  object,\n  ReturnType<typeof _ajv.compile>\n>()\n\nfunction validateJsonSchema<T>(\n  toolId: string,\n  schema: Record<string, unknown>,\n  value: unknown,\n): ValidationResult<T> {\n  let validate = _validatorCache.get(schema)\n  if (!validate) {\n    validate = _ajv.compile(schema as Parameters<typeof _ajv.compile>[0])\n    _validatorCache.set(schema, validate)\n  }\n  const valid = validate(value)\n  if (!valid) {\n    const errors = validate.errors ?? []\n    const message = errors\n      .map((e) => `${e.instancePath || \"/\"} ${e.message}`)\n      .join(\"; \")\n    return {\n      ok: false,\n      error: {\n        code: \"input_invalid\",\n        message: `id='${toolId}': ${message}`,\n        cause: errors,\n      },\n    }\n  }\n  return { ok: true, value: value as T }\n}\n\nexport type { ZodType }\n","import matter from \"gray-matter\"\nimport { z, type ZodType } from \"zod\"\nimport { defineTool } from \"../define-tool.js\"\nimport type { ApprovalClass, ToolContext, ToolHandle } from \"../types.js\"\n\n/**\n * AIP-14 TOOL.md sidecar parser.\n *\n * Reads frontmatter (host-relevant metadata) + body (long-form\n * description / examples / errors). The TS module's `defineTool(...)`\n * supplies the schemas and execute body; this manifest supplies the\n * runtime metadata that overrides or augments the in-code defaults.\n *\n * Field set covers AIP-14 §\"Frontmatter\" — required and optional fields\n * normalised to snake_case → camelCase.\n */\n\nexport const toolManifestFrontmatterSchema = z.object({\n  schema: z.literal(\"agentproto/tool/v1\").optional(),\n  name: z.string().min(1).max(80),\n  id: z.string().regex(/^[a-z][a-z0-9._-]{1,63}$/),\n  description: z.string().min(1).max(2000),\n  version: z.string().regex(/^\\d+\\.\\d+\\.\\d+/),\n\n  // Optional metadata\n  mutates: z.array(z.string()).optional(),\n  requires: z\n    .object({\n      network: z.array(z.string()).optional(),\n      secrets: z.array(z.string()).optional(),\n      tools: z.array(z.string()).optional(),\n    })\n    .optional(),\n  // `ApprovalClass` is `\"auto\" | \"always\" | \"on-mutate\" | \\`policy:${string}\\``.\n  // z.union widens the regex branch to plain `string` (zod can't express\n  // template literal types), so we use `z.custom` to keep the inferred\n  // type exact — matters because `defineTool` accepts `ApprovalClass`.\n  approval: z\n    .custom<ApprovalClass>(\n      (v): v is ApprovalClass =>\n        typeof v === \"string\" &&\n        (v === \"auto\" ||\n          v === \"always\" ||\n          v === \"on-mutate\" ||\n          /^policy:/.test(v)),\n      { message: \"expected 'auto' | 'always' | 'on-mutate' | 'policy:<name>'\" },\n    )\n    .optional(),\n  risk_level: z\n    .union([z.literal(0), z.literal(1), z.literal(2), z.literal(3)])\n    .optional(),\n  cost_class: z.enum([\"trivial\", \"metered\", \"expensive\"]).optional(),\n  timeout_ms: z.number().int().positive().optional(),\n  idempotent: z.boolean().optional(),\n  tags: z.array(z.string()).optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n\n  // AIP-16 IO blocks — `inputs`/`outputs` as JSON Schema objects. Kept\n  // structurally loose here (validated as objects, not deep-checked against\n  // the AIP-16 meta-schema); preserved so a manifest's declared IO contract\n  // survives the parse → handle round-trip instead of being silently dropped.\n  inputs: z.record(z.string(), z.unknown()).optional(),\n  outputs: z.record(z.string(), z.unknown()).optional(),\n\n  // AIP-26 / AIP-17 / AIP-19 references — kept loose; validated by their\n  // respective AIPs' adapters when consumed.\n  code: z.unknown().optional(),\n  run: z.unknown().optional(),\n  runner: z.unknown().optional(),\n  secrets: z.unknown().optional(),\n  network: z.unknown().optional(),\n})\n\nexport type ToolManifestFrontmatter = z.infer<\n  typeof toolManifestFrontmatterSchema\n>\n\nexport interface ToolManifest {\n  frontmatter: ToolManifestFrontmatter\n  body: string\n}\n\n/**\n * Parse a TOOL.md source string into structured frontmatter + body.\n * Throws on missing frontmatter or schema-invalid frontmatter.\n */\nexport function parseToolManifest(source: string): ToolManifest {\n  const parsed = matter(source)\n  if (Object.keys(parsed.data).length === 0) {\n    throw new Error(\"parseToolManifest: missing or empty frontmatter\")\n  }\n  const result = toolManifestFrontmatterSchema.safeParse(parsed.data)\n  if (!result.success) {\n    throw new Error(\n      `parseToolManifest: invalid frontmatter — ${result.error.issues\n        .map(i => `${i.path.join(\".\")}: ${i.message}`)\n        .join(\"; \")}`\n    )\n  }\n  return { frontmatter: result.data, body: parsed.content }\n}\n\n/**\n * Build a {@link ToolHandle} from a manifest that has no companion TS module.\n *\n * `inputSchema`/`outputSchema` are omitted; IO validation falls back to the\n * AIP-16 `inputs`/`outputs` JSON Schema blocks declared in the frontmatter\n * (via `validateInput`/`validateOutput`). The returned handle is typed as\n * `ToolHandle<unknown, unknown>` since the generic shapes are not statically\n * known.\n *\n * Use this when loading an agent-generated TOOL.md whose IO contract is\n * expressed in YAML (`inputs:`/`outputs:`) rather than a compiled TS module.\n */\nexport function toolFromManifestOnly(\n  manifest: ToolManifest,\n): ToolHandle<unknown, unknown> {\n  const fm = manifest.frontmatter\n  return defineTool({\n    id: fm.id,\n    name: fm.name,\n    description: fm.description,\n    version: fm.version,\n    inputs: fm.inputs,\n    outputs: fm.outputs,\n    mutates: fm.mutates,\n    requires: fm.requires,\n    approval: fm.approval,\n    riskLevel: fm.risk_level,\n    costClass: fm.cost_class,\n    timeoutMs: fm.timeout_ms,\n    idempotent: fm.idempotent,\n    tags: fm.tags,\n    metadata: fm.metadata,\n  })\n}\n\n/**\n * Build a fully-typed {@link ToolHandle} from a parsed `TOOL.md` manifest\n * + caller-supplied schemas. The .md is the single source of truth for\n * metadata (id, name, description, version, mutates, approval, …); the\n * schemas live in the TS module that ships alongside the .md.\n *\n * Both inputs are revalidated by `defineTool`'s shared invariants\n * (id pattern, description length, top-level freeze) — `parseToolManifest`\n * already enforces a stricter id pattern + version semver, so a\n * well-formed manifest passes through cleanly. Mismatches between the\n * manifest's id-shape and `defineTool`'s pattern surface a\n * descriptive error from the same validation pipeline as the TS path.\n *\n * @example\n *   const manifest = parseToolManifest(readFileSync(\"./echo/TOOL.md\", \"utf8\"))\n *   const echo = toolFromManifest({\n *     manifest,\n *     inputSchema: z.object({ msg: z.string() }),\n *     outputSchema: z.object({ msg: z.string() }),\n *   })\n */\nexport function toolFromManifest<\n  TInput,\n  TOutput,\n  TContext extends ToolContext = ToolContext,\n>(args: {\n  manifest: ToolManifest\n  inputSchema: ZodType<TInput>\n  outputSchema: ZodType<TOutput>\n  contextSchema?: ZodType<TContext>\n}): ToolHandle<TInput, TOutput, TContext> {\n  const fm = args.manifest.frontmatter\n  return defineTool<TInput, TOutput, TContext>({\n    id: fm.id,\n    name: fm.name,\n    description: fm.description,\n    version: fm.version,\n    inputSchema: args.inputSchema,\n    outputSchema: args.outputSchema,\n    inputs: fm.inputs,\n    outputs: fm.outputs,\n    contextSchema: args.contextSchema,\n    mutates: fm.mutates,\n    requires: fm.requires,\n    approval: fm.approval,\n    riskLevel: fm.risk_level,\n    costClass: fm.cost_class,\n    timeoutMs: fm.timeout_ms,\n    idempotent: fm.idempotent,\n    tags: fm.tags,\n    metadata: fm.metadata,\n  })\n}\n"]}