@cats-inc/cats-platform 0.1.0

package/build/server/platform/supervision/toolBoundary.js

@@ -0,0 +1,85 @@
+import { createSupervisionPolicySnapshotRef } from './policySnapshots.js';
+import { evaluateToolSurface, } from './toolRegistry.js';
+export function createInMemoryToolEvidenceSink() {
+    const events = [];
+    return {
+        append(event) {
+            events.push(event);
+        },
+        read() {
+            return [...events];
+        },
+    };
+}
+export function createToolBoundary(options) {
+    const now = options.now ?? (() => new Date().toISOString());
+    return {
+        async invoke(invocation) {
+            const authorization = options.registry.authorize(invocation.toolName, invocation.grant);
+            if (authorization.status !== 'applied') {
+                appendBoundaryEvidence(options.evidenceSink, now, invocation, authorization);
+                return authorization;
+            }
+            const manifest = authorization.result;
+            const toolSurface = evaluateToolSurface(manifest, invocation.grant);
+            try {
+                const result = await invocation.execute(invocation.input, {
+                    actionId: invocation.actionId,
+                    runId: invocation.runId,
+                    actorRef: invocation.actorRef,
+                    manifest,
+                    grant: invocation.grant,
+                    effectiveToolScope: toolSurface.effectiveToolScope,
+                });
+                appendBoundaryEvidence(options.evidenceSink, now, invocation, result, manifest);
+                return result;
+            }
+            catch (error) {
+                const result = {
+                    status: 'rejected',
+                    error: {
+                        code: 'E_PRECHECK_FAILED',
+                        message: formatToolExecutionError(error),
+                    },
+                };
+                appendBoundaryEvidence(options.evidenceSink, now, invocation, result, manifest);
+                return result;
+            }
+        },
+    };
+}
+function appendBoundaryEvidence(evidenceSink, now, invocation, result, manifest) {
+    const occurredAt = now();
+    evidenceSink.append({
+        eventId: `${invocation.runId}:${invocation.actionId}:${invocation.toolName}:${occurredAt}`,
+        actionId: invocation.actionId,
+        runId: invocation.runId,
+        actorRef: invocation.actorRef,
+        toolName: invocation.toolName,
+        status: result.status,
+        occurredAt,
+        toolManifest: manifest === undefined
+            ? undefined
+            : {
+                name: manifest.name,
+                manifestVersion: manifest.manifestVersion,
+                sideEffect: manifest.sideEffect,
+                approval: manifest.approval,
+                evidence: manifest.evidence,
+            },
+        policySnapshotRef: invocation.policySnapshot === undefined
+            ? undefined
+            : createSupervisionPolicySnapshotRef(invocation.policySnapshot),
+        rejectionCode: result.status === 'rejected' ? result.error.code : undefined,
+        approvalRequestId: result.status === 'pending_approval' ? result.requestId : undefined,
+        cancellationContext: invocation.cancellationContext,
+        summary: result.status === 'pending_approval' ? result.summary : undefined,
+    });
+}
+function formatToolExecutionError(error) {
+    if (error instanceof Error && error.message.trim() !== '') {
+        return error.message;
+    }
+    return 'Supervised tool execution failed';
+}
+//# sourceMappingURL=toolBoundary.js.map

package/build/server/platform/supervision/toolBoundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolBoundary.js","sourceRoot":"","sources":["../../../../src/platform/supervision/toolBoundary.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,kCAAkC,EAAE,MAAM,sBAAsB,CAAC;AAM1E,OAAO,EACL,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAmE3B,MAAM,UAAU,8BAA8B;IAC5C,MAAM,MAAM,GAAgC,EAAE,CAAC;IAE/C,OAAO;QACL,MAAM,CAAC,KAAK;YACV,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,IAAI;YACF,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAE5D,OAAO;QACL,KAAK,CAAC,MAAM,CAAkB,UAAqD;YACjF,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;YAExF,IAAI,aAAa,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACvC,sBAAsB,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;gBAC7E,OAAO,aAAa,CAAC;YACvB,CAAC;YAED,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC;YACtC,MAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;YAEpE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE;oBACxD,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,QAAQ;oBACR,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,kBAAkB,EAAE,WAAW,CAAC,kBAAkB;iBACnD,CAAC,CAAC;gBACH,sBAAsB,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAChF,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,GAAwB;oBAClC,MAAM,EAAE,UAAU;oBAClB,KAAK,EAAE;wBACL,IAAI,EAAE,mBAAmB;wBACzB,OAAO,EAAE,wBAAwB,CAAC,KAAK,CAAC;qBACzC;iBACF,CAAC;gBACF,sBAAsB,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAChF,OAAO,MAAM,CAAC;YAChB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,YAAsC,EACtC,GAAiB,EACjB,UAAqD,EACrD,MAA2B,EAC3B,QAAiC;IAEjC,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC;IAEzB,YAAY,CAAC,MAAM,CAAC;QAClB,OAAO,EAAE,GAAG,UAAU,CAAC,KAAK,IAAI,UAAU,CAAC,QAAQ,IAAI,UAAU,CAAC,QAAQ,IAAI,UAAU,EAAE;QAC1F,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU;QACV,YAAY,EAAE,QAAQ,KAAK,SAAS;YAClC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC;gBACE,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,eAAe,EAAE,QAAQ,CAAC,eAAe;gBACzC,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B;QACL,iBAAiB,EAAE,UAAU,CAAC,cAAc,KAAK,SAAS;YACxD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,kCAAkC,CAAC,UAAU,CAAC,cAAc,CAAC;QACjE,aAAa,EAAE,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC3E,iBAAiB,EAAE,MAAM,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACtF,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;QACnD,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;KAC3E,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC9C,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IAED,OAAO,kCAAkC,CAAC;AAC5C,CAAC"}

package/build/server/platform/supervision/toolRegistry.d.ts

@@ -0,0 +1,35 @@
+import type { SchemaRef, SupervisedToolManifest, SupervisedToolSideEffect, SupervisionToolScope, ToolResult } from './contracts.js';
+export type SchemaRefRole = 'input' | 'output';
+export interface SchemaRefValidationInput {
+    manifest: SupervisedToolManifest;
+    role: SchemaRefRole;
+    schemaRef: SchemaRef;
+}
+export type SchemaRefValidator = (input: SchemaRefValidationInput) => string[];
+export interface SupervisedToolRegistryOptions {
+    validateSchemaRef?: SchemaRefValidator;
+}
+export interface ToolSurfaceGrant {
+    parentToolScope: SupervisionToolScope;
+    policyToolScope: SupervisionToolScope;
+}
+export interface ToolSurfaceDecision extends ToolSurfaceGrant {
+    effectiveToolScope: SupervisionToolScope;
+    requiredToolScope: SupervisionToolScope;
+    allowed: boolean;
+    reason?: string;
+}
+export interface SupervisedToolRegistry {
+    register(manifest: SupervisedToolManifest): void;
+    get(name: string): SupervisedToolManifest | undefined;
+    list(): SupervisedToolManifest[];
+    filter(grant: ToolSurfaceGrant): SupervisedToolManifest[];
+    authorize(name: string, grant: ToolSurfaceGrant): ToolResult<SupervisedToolManifest>;
+}
+export declare function createSupervisedToolRegistry(options?: SupervisedToolRegistryOptions): SupervisedToolRegistry;
+export declare function evaluateToolSurface(manifest: SupervisedToolManifest, grant: ToolSurfaceGrant): ToolSurfaceDecision;
+export declare function filterToolSurface(manifests: SupervisedToolManifest[], grant: ToolSurfaceGrant): SupervisedToolManifest[];
+export declare function classifySideEffectToolScope(sideEffect: SupervisedToolSideEffect): SupervisionToolScope;
+export declare function intersectToolScopes(left: SupervisionToolScope, right: SupervisionToolScope): SupervisionToolScope;
+export declare function compareToolScopes(left: SupervisionToolScope, right: SupervisionToolScope): number;
+//# sourceMappingURL=toolRegistry.d.ts.map

package/build/server/platform/supervision/toolRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolRegistry.d.ts","sourceRoot":"","sources":["../../../../src/platform/supervision/toolRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,UAAU,EACX,MAAM,gBAAgB,CAAC;AASxB,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE/C,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,sBAAsB,CAAC;IACjC,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,SAAS,CAAC;CACtB;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE,wBAAwB,KAAK,MAAM,EAAE,CAAC;AAE/E,MAAM,WAAW,6BAA6B;IAC5C,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;CACxC;AAED,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,oBAAoB,CAAC;IACtC,eAAe,EAAE,oBAAoB,CAAC;CACvC;AAED,MAAM,WAAW,mBAAoB,SAAQ,gBAAgB;IAC3D,kBAAkB,EAAE,oBAAoB,CAAC;IACzC,iBAAiB,EAAE,oBAAoB,CAAC;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACjD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS,CAAC;IACtD,IAAI,IAAI,sBAAsB,EAAE,CAAC;IACjC,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,sBAAsB,EAAE,CAAC;IAC1D,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,UAAU,CAAC,sBAAsB,CAAC,CAAC;CACtF;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,GAAE,6BAAkC,GAC1C,sBAAsB,CAwDxB;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,sBAAsB,EAChC,KAAK,EAAE,gBAAgB,GACtB,mBAAmB,CAerB;AAED,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,sBAAsB,EAAE,EACnC,KAAK,EAAE,gBAAgB,GACtB,sBAAsB,EAAE,CAI1B;AAED,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,wBAAwB,GACnC,oBAAoB,CAetB;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,oBAAoB,EAC1B,KAAK,EAAE,oBAAoB,GAC1B,oBAAoB,CAEtB;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,oBAAoB,EAC1B,KAAK,EAAE,oBAAoB,GAC1B,MAAM,CAER"}

package/build/server/platform/supervision/toolRegistry.js

@@ -0,0 +1,135 @@
+const TOOL_SCOPE_ORDER = {
+    none: 0,
+    read_only: 1,
+    narrow_write: 2,
+    broad_write: 3,
+};
+export function createSupervisedToolRegistry(options = {}) {
+    const manifests = new Map();
+    const validateSchemaRef = options.validateSchemaRef ?? defaultSchemaRefValidator;
+    return {
+        register(manifest) {
+            if (manifests.has(manifest.name)) {
+                throw new Error(`Duplicate supervised tool manifest: ${manifest.name}`);
+            }
+            validateManifest(manifest, validateSchemaRef);
+            manifests.set(manifest.name, manifest);
+        },
+        get(name) {
+            return manifests.get(name);
+        },
+        list() {
+            return Array.from(manifests.values()).sort((left, right) => left.name.localeCompare(right.name));
+        },
+        filter(grant) {
+            return this.list().filter((manifest) => evaluateToolSurface(manifest, grant).allowed);
+        },
+        authorize(name, grant) {
+            const manifest = manifests.get(name);
+            if (manifest === undefined) {
+                return {
+                    status: 'rejected',
+                    error: {
+                        code: 'E_TOOL_SCOPE_DENIED',
+                        message: `Supervised tool is not registered: ${name}`,
+                    },
+                };
+            }
+            const decision = evaluateToolSurface(manifest, grant);
+            if (!decision.allowed) {
+                return {
+                    status: 'rejected',
+                    error: {
+                        code: 'E_TOOL_SCOPE_DENIED',
+                        message: decision.reason ?? `Supervised tool is outside the granted surface: ${name}`,
+                        details: decision,
+                    },
+                };
+            }
+            return {
+                status: 'applied',
+                result: manifest,
+            };
+        },
+    };
+}
+export function evaluateToolSurface(manifest, grant) {
+    const requiredToolScope = classifySideEffectToolScope(manifest.sideEffect);
+    const effectiveToolScope = intersectToolScopes(grant.parentToolScope, grant.policyToolScope);
+    const allowed = compareToolScopes(effectiveToolScope, requiredToolScope) >= 0;
+    return {
+        ...grant,
+        effectiveToolScope,
+        requiredToolScope,
+        allowed,
+        reason: allowed
+            ? undefined
+            : `Tool ${manifest.name} requires ${requiredToolScope}, but effective grant is ` +
+                `${effectiveToolScope}.`,
+    };
+}
+export function filterToolSurface(manifests, grant) {
+    return manifests
+        .filter((manifest) => evaluateToolSurface(manifest, grant).allowed)
+        .sort((left, right) => left.name.localeCompare(right.name));
+}
+export function classifySideEffectToolScope(sideEffect) {
+    switch (sideEffect) {
+        case 'none':
+            return 'read_only';
+        case 'local_state':
+            return 'narrow_write';
+        case 'external_visible':
+        case 'destructive':
+        case 'expensive':
+            return 'broad_write';
+        default: {
+            const exhaustive = sideEffect;
+            return exhaustive;
+        }
+    }
+}
+export function intersectToolScopes(left, right) {
+    return compareToolScopes(left, right) <= 0 ? left : right;
+}
+export function compareToolScopes(left, right) {
+    return TOOL_SCOPE_ORDER[left] - TOOL_SCOPE_ORDER[right];
+}
+function validateManifest(manifest, validateSchemaRef) {
+    const errors = [
+        ...validateSchemaRef({ manifest, role: 'input', schemaRef: manifest.inputSchema }),
+        ...validateSchemaRef({ manifest, role: 'output', schemaRef: manifest.outputSchema }),
+        ...validatePreflightContract(manifest),
+    ];
+    if (errors.length > 0) {
+        throw new Error(`Invalid supervised tool manifest ${manifest.name}: ${errors.join('; ')}`);
+    }
+}
+function defaultSchemaRefValidator(input) {
+    const errors = [];
+    if (input.schemaRef.id.trim() === '') {
+        errors.push(`${input.role} schema id is required`);
+    }
+    if (input.schemaRef.version.trim() === '') {
+        errors.push(`${input.role} schema version is required`);
+    }
+    if (input.schemaRef.format !== 'json_schema') {
+        errors.push(`${input.role} schema format must be json_schema`);
+    }
+    if (input.schemaRef.uri !== undefined && isLocalOnlySchemaUri(input.schemaRef.uri)) {
+        errors.push(`${input.role} schema uri must not be a local-only path`);
+    }
+    return errors;
+}
+function validatePreflightContract(manifest) {
+    if (manifest.sideEffect !== 'none' &&
+        manifest.preflight === 'not_supported' &&
+        manifest.failureCodes.length === 0) {
+        return ['mutating tools without preflight must declare expected failure codes'];
+    }
+    return [];
+}
+function isLocalOnlySchemaUri(uri) {
+    return uri.startsWith('.') || uri.includes('\\') || /^[A-Za-z]:/.test(uri);
+}
+//# sourceMappingURL=toolRegistry.js.map

package/build/server/platform/supervision/toolRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolRegistry.js","sourceRoot":"","sources":["../../../../src/platform/supervision/toolRegistry.ts"],"names":[],"mappings":"AAQA,MAAM,gBAAgB,GAAyC;IAC7D,IAAI,EAAE,CAAC;IACP,SAAS,EAAE,CAAC;IACZ,YAAY,EAAE,CAAC;IACf,WAAW,EAAE,CAAC;CACf,CAAC;AAoCF,MAAM,UAAU,4BAA4B,CAC1C,UAAyC,EAAE;IAE3C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC5D,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,yBAAyB,CAAC;IAEjF,OAAO;QACL,QAAQ,CAAC,QAAQ;YACf,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;YAC9C,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC;QACD,GAAG,CAAC,IAAI;YACN,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI;YACF,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACzD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CACpC,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,KAAK;YACV,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CACrC,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,OAAO,CAC7C,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,IAAI,EAAE,KAAK;YACnB,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAErC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO;oBACL,MAAM,EAAE,UAAU;oBAClB,KAAK,EAAE;wBACL,IAAI,EAAE,qBAAqB;wBAC3B,OAAO,EAAE,sCAAsC,IAAI,EAAE;qBACtD;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACtD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACtB,OAAO;oBACL,MAAM,EAAE,UAAU;oBAClB,KAAK,EAAE;wBACL,IAAI,EAAE,qBAAqB;wBAC3B,OAAO,EAAE,QAAQ,CAAC,MAAM,IAAI,mDAAmD,IAAI,EAAE;wBACrF,OAAO,EAAE,QAAQ;qBAClB;iBACF,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,QAAQ;aACjB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAgC,EAChC,KAAuB;IAEvB,MAAM,iBAAiB,GAAG,2BAA2B,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC3E,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,iBAAiB,CAAC,kBAAkB,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAE9E,OAAO;QACL,GAAG,KAAK;QACR,kBAAkB;QAClB,iBAAiB;QACjB,OAAO;QACP,MAAM,EAAE,OAAO;YACb,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,QAAQ,QAAQ,CAAC,IAAI,aAAa,iBAAiB,2BAA2B;gBAC9E,GAAG,kBAAkB,GAAG;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,SAAmC,EACnC,KAAuB;IAEvB,OAAO,SAAS;SACb,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC;SAClE,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,UAAoC;IAEpC,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,WAAW,CAAC;QACrB,KAAK,aAAa;YAChB,OAAO,cAAc,CAAC;QACxB,KAAK,kBAAkB,CAAC;QACxB,KAAK,aAAa,CAAC;QACnB,KAAK,WAAW;YACd,OAAO,aAAa,CAAC;QACvB,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,UAAU,GAAU,UAAU,CAAC;YACrC,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,IAA0B,EAC1B,KAA2B;IAE3B,OAAO,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAA0B,EAC1B,KAA2B;IAE3B,OAAO,gBAAgB,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAgC,EAChC,iBAAqC;IAErC,MAAM,MAAM,GAAG;QACb,GAAG,iBAAiB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;QAClF,GAAG,iBAAiB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;QACpF,GAAG,yBAAyB,CAAC,QAAQ,CAAC;KACvC,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,KAA+B;IAChE,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,wBAAwB,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,6BAA6B,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,oCAAoC,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,SAAS,IAAI,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QACnF,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,2CAA2C,CAAC,CAAC;IACxE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAgC;IACjE,IACE,QAAQ,CAAC,UAAU,KAAK,MAAM;QAC9B,QAAQ,CAAC,SAAS,KAAK,eAAe;QACtC,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAClC,CAAC;QACD,OAAO,CAAC,sEAAsE,CAAC,CAAC;IAClF,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW;IACvC,OAAO,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7E,CAAC"}

package/build/server/platform/supervision/transportDeliveryTools.d.ts

@@ -0,0 +1,75 @@
+import type { CoreStore } from '../../core/store.js';
+import { type SupervisedToolManifest } from './contracts.js';
+import type { SupervisedToolExecutor } from './toolBoundary.js';
+import type { SupervisedToolRegistry } from './toolRegistry.js';
+import type { TelegramDeliveryMediaKind } from '../transports/telegram/contracts.js';
+import type { TelegramRelay } from '../transports/telegram/relay/index.js';
+export declare const SUPERVISED_TELEGRAM_TEXT_DELIVERY_TOOL: "transport.telegram.text.send";
+export declare const SUPERVISED_TELEGRAM_MEDIA_DELIVERY_TOOL: "transport.telegram.media.send";
+export interface SupervisedTransportTarget {
+    platform: 'telegram';
+    bindingId: string;
+}
+export interface SupervisedTransportDeliveryApprovalPolicy {
+    required: boolean;
+    requestId?: string;
+    summary?: string;
+}
+export interface SupervisedTelegramTextDeliveryInput {
+    bindingId: string;
+    text: string;
+    roomId?: string | null;
+    conversationId?: string | null;
+    chatId?: string | null;
+    disableLinkPreview?: boolean;
+}
+export interface SupervisedTelegramTextDeliveryResult {
+    platform: 'telegram';
+    bindingId: string;
+    status: 'sent';
+    conversationId: string | null;
+    chatId: string | null;
+    messageIds: string[];
+    deliveryIds: string[];
+    chunkCount: number;
+    textPreview: string;
+}
+export interface SupervisedTelegramMediaDeliveryInput {
+    bindingId: string;
+    mediaKind: TelegramDeliveryMediaKind;
+    mediaUrl?: string | null;
+    fileId?: string | null;
+    caption?: string | null;
+    roomId?: string | null;
+    conversationId?: string | null;
+    chatId?: string | null;
+}
+export interface SupervisedTelegramMediaDeliveryResult {
+    platform: 'telegram';
+    bindingId: string;
+    status: 'sent';
+    mediaKind: TelegramDeliveryMediaKind;
+    mediaRefType: 'url' | 'file_id';
+    conversationId: string | null;
+    chatId: string | null;
+    messageId: string | null;
+    deliveryId: string;
+    captionPreview: string | null;
+}
+export interface SupervisedTransportDeliveryToolOptions {
+    coreStore: CoreStore;
+    telegramRelay: TelegramRelay;
+    allowedTransportTargets?: SupervisedTransportTarget[];
+    approval?: SupervisedTransportDeliveryApprovalPolicy;
+}
+export interface SupervisedTransportDeliveryTools {
+    manifests: SupervisedToolManifest[];
+    executors: {
+        [SUPERVISED_TELEGRAM_TEXT_DELIVERY_TOOL]: SupervisedToolExecutor<SupervisedTelegramTextDeliveryInput, SupervisedTelegramTextDeliveryResult>;
+        [SUPERVISED_TELEGRAM_MEDIA_DELIVERY_TOOL]: SupervisedToolExecutor<SupervisedTelegramMediaDeliveryInput, SupervisedTelegramMediaDeliveryResult>;
+    };
+    register(registry: SupervisedToolRegistry): void;
+}
+export declare function createSupervisedTransportDeliveryTools(options: SupervisedTransportDeliveryToolOptions): SupervisedTransportDeliveryTools;
+export declare function createSupervisedTransportDeliveryToolManifests(): SupervisedToolManifest[];
+//# sourceMappingURL=transportDeliveryTools.d.ts.map

package/build/server/platform/supervision/transportDeliveryTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transportDeliveryTools.d.ts","sourceRoot":"","sources":["../../../../src/platform/supervision/transportDeliveryTools.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAEL,KAAK,sBAAsB,EAE5B,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAKhE,OAAO,KAAK,EAEV,yBAAyB,EAG1B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AAE3E,eAAO,MAAM,sCAAsC,EAAG,8BAAuC,CAAC;AAC9F,eAAO,MAAM,uCAAuC,EAAG,+BAAwC,CAAC;AAKhG,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,UAAU,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,yCAAyC;IACxD,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,mCAAmC;IAClD,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,EAAE,UAAU,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oCAAoC;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,yBAAyB,CAAC;IACrC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,EAAE,UAAU,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,yBAAyB,CAAC;IACrC,YAAY,EAAE,KAAK,GAAG,SAAS,CAAC;IAChC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,sCAAsC;IACrD,SAAS,EAAE,SAAS,CAAC;IACrB,aAAa,EAAE,aAAa,CAAC;IAC7B,uBAAuB,CAAC,EAAE,yBAAyB,EAAE,CAAC;IACtD,QAAQ,CAAC,EAAE,yCAAyC,CAAC;CACtD;AAED,MAAM,WAAW,gCAAgC;IAC/C,SAAS,EAAE,sBAAsB,EAAE,CAAC;IACpC,SAAS,EAAE;QACT,CAAC,sCAAsC,CAAC,EAAE,sBAAsB,CAC9D,mCAAmC,EACnC,oCAAoC,CACrC,CAAC;QACF,CAAC,uCAAuC,CAAC,EAAE,sBAAsB,CAC/D,oCAAoC,EACpC,qCAAqC,CACtC,CAAC;KACH,CAAC;IACF,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,GAAG,IAAI,CAAC;CAClD;AA2BD,wBAAgB,sCAAsC,CACpD,OAAO,EAAE,sCAAsC,GAC9C,gCAAgC,CAelC;AAED,wBAAgB,8CAA8C,IAAI,sBAAsB,EAAE,CAgEzF"}