@cogenta/agents 0.1.0

package/dist/tools/core/content.js

@@ -0,0 +1,121 @@
+import { z } from 'zod';
+import { defineTool } from '../define.js';
+const DEFAULT_READ_OPTIONS = { state: 'working', depth: 0 };
+function accessContextOf(actor) {
+    return { actor };
+}
+const EntrySchema = z.record(z.string(), z.unknown());
+const ReadInputSchema = z.object({
+    collection: z.string(),
+    id: z.string(),
+    state: z.enum(['published', 'working']).optional(),
+});
+/**
+ * `content.read` — the service is the actual permission gate (it calls
+ * `PermissionLayer.assert` internally against the collection's own
+ * `read`/`publish` roles); this tool only shapes the call and never
+ * second-guesses what the service decides.
+ */
+export function createContentReadTool(service) {
+    return defineTool({
+        name: 'content.read',
+        version: '1.0.0',
+        description: 'Read one content entry by collection and id.',
+        input: ReadInputSchema,
+        output: EntrySchema,
+        permissions: ['content.read'],
+        sideEffects: false,
+        reversible: false,
+        cost: 'low',
+        async execute(input, ctx) {
+            return service.read(accessContextOf(ctx.actor), input.collection, input.id, {
+                ...DEFAULT_READ_OPTIONS,
+                ...(input.state === undefined ? {} : { state: input.state }),
+            });
+        },
+    });
+}
+const WriteDraftInputSchema = z.object({
+    collection: z.string(),
+    id: z.string().optional(),
+    values: z.record(z.string(), z.unknown()),
+    locale: z.string().optional(),
+});
+/**
+ * `content.write_draft` — creates a new working entry when `id` is absent,
+ * updates the existing one otherwise. Never touches the published state;
+ * that is `content.publish`'s job alone, matching `ContentService` keeping
+ * `create`/`update` and `publish` as distinct operations.
+ */
+export function createContentWriteDraftTool(service) {
+    return defineTool({
+        name: 'content.write_draft',
+        version: '1.0.0',
+        description: 'Create or update a working-state (draft) content entry.',
+        input: WriteDraftInputSchema,
+        output: EntrySchema,
+        permissions: ['content.write_draft'],
+        sideEffects: true,
+        // Not reversible through this tool: undoing a create means deleting the
+        // new entry, undoing an update means restoring a specific prior version
+        // (`ContentService.restore`, keyed by version number) — two different
+        // operations this wrapper cannot distinguish from the receipt alone
+        // without guessing. `reversible: false` forces human approval instead
+        // of a revert that might restore the wrong thing (R6).
+        reversible: false,
+        cost: 'low',
+        async execute(input, ctx) {
+            const context = accessContextOf(ctx.actor);
+            if (input.id !== undefined) {
+                return service.update(context, input.collection, input.id, { values: input.values }, DEFAULT_READ_OPTIONS);
+            }
+            return service.create(context, input.collection, { values: input.values, ...(input.locale === undefined ? {} : { locale: input.locale }) }, DEFAULT_READ_OPTIONS);
+        },
+    });
+}
+const PublishInputSchema = z.object({ collection: z.string(), id: z.string() });
+export function createContentPublishTool(service) {
+    return defineTool({
+        name: 'content.publish',
+        version: '1.0.0',
+        description: 'Publish an existing content entry.',
+        input: PublishInputSchema,
+        output: EntrySchema,
+        permissions: ['content.publish'],
+        sideEffects: true,
+        // Not reversible through this tool: publishing again with the prior
+        // version's values is a distinct, explicit action (`content.write_draft`
+        // + `content.publish`), not an automatic undo — R6 requires either
+        // `revert` or `reversible: false` with forced human approval, and a
+        // silent "unpublish" here would be a surprising side effect of its own.
+        reversible: false,
+        cost: 'low',
+        rateLimit: { perHour: 20 },
+        async execute(input, ctx) {
+            return service.publish(accessContextOf(ctx.actor), input.collection, input.id, {}, DEFAULT_READ_OPTIONS);
+        },
+    });
+}
+const DeleteInputSchema = z.object({ collection: z.string(), id: z.string() });
+const DeleteOutputSchema = z.object({ ok: z.boolean() });
+export function createContentDeleteTool(service) {
+    return defineTool({
+        name: 'content.delete',
+        version: '1.0.0',
+        description: 'Delete a content entry.',
+        input: DeleteInputSchema,
+        output: DeleteOutputSchema,
+        permissions: ['content.delete'],
+        sideEffects: true,
+        // Deleting the row is not itself undoable from this tool's vantage
+        // point (the service, not this wrapper, owns whatever retention or
+        // trash mechanism it may have) — reversible: false forces approval.
+        reversible: false,
+        cost: 'low',
+        async execute(input, ctx) {
+            await service.remove(accessContextOf(ctx.actor), input.collection, input.id);
+            return { ok: true };
+        },
+    });
+}
+//# sourceMappingURL=content.js.map

package/dist/tools/core/content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content.js","sourceRoot":"","sources":["../../../src/tools/core/content.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAmDzC,MAAM,oBAAoB,GAAuB,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAA;AAE/E,SAAS,eAAe,CAAC,KAGxB;IACC,OAAO,EAAE,KAAK,EAAE,CAAA;AAClB,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;AAErD,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAA;AAGF;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAA2B;IAE3B,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,8CAA8C;QAC3D,KAAK,EAAE,eAAe;QACtB,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,CAAC,cAAc,CAAC;QAC7B,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;YACtB,OAAO,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE;gBAC1E,GAAG,oBAAoB;gBACvB,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;aAC7D,CAAC,CAAA;QACJ,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACzC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAA;AAGF;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,OAA2B;IAE3B,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,yDAAyD;QACtE,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,CAAC,qBAAqB,CAAC;QACpC,WAAW,EAAE,IAAI;QACjB,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,sEAAsE;QACtE,uDAAuD;QACvD,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;YACtB,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YAC1C,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO,OAAO,CAAC,MAAM,CACnB,OAAO,EACP,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,EAAE,EACR,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACxB,oBAAoB,CACrB,CAAA;YACH,CAAC;YACD,OAAO,OAAO,CAAC,MAAM,CACnB,OAAO,EACP,KAAK,CAAC,UAAU,EAChB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EACzF,oBAAoB,CACrB,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAG/E,MAAM,UAAU,wBAAwB,CACtC,OAA2B;IAE3B,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,oCAAoC;QACjD,KAAK,EAAE,kBAAkB;QACzB,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,CAAC,iBAAiB,CAAC;QAChC,WAAW,EAAE,IAAI;QACjB,oEAAoE;QACpE,yEAAyE;QACzE,mEAAmE;QACnE,oEAAoE;QACpE,wEAAwE;QACxE,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAC1B,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;YACtB,OAAO,OAAO,CAAC,OAAO,CACpB,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAC1B,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,EAAE,EACR,EAAE,EACF,oBAAoB,CACrB,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAE9E,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;AAExD,MAAM,UAAU,uBAAuB,CACrC,OAA2B;IAE3B,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,yBAAyB;QACtC,KAAK,EAAE,iBAAiB;QACxB,MAAM,EAAE,kBAAkB;QAC1B,WAAW,EAAE,CAAC,gBAAgB,CAAC;QAC/B,WAAW,EAAE,IAAI;QACjB,mEAAmE;QACnE,mEAAmE;QACnE,oEAAoE;QACpE,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;YACtB,MAAM,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;YAC5E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;QACrB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/tools/core/http-fetch.d.ts

@@ -0,0 +1,33 @@
+import { z } from 'zod';
+import type { ToolDefinition } from '../types.js';
+export interface HttpFetchToolOptions {
+    /** Exact hostnames this instance may reach — `http.fetch(domains[])` in the Contract C taxonomy is the permission this list backs. */
+    readonly allowedDomains: readonly string[];
+    readonly fetchImpl?: typeof fetch;
+}
+declare const HttpFetchInputSchema: z.ZodObject<{
+    url: z.ZodString;
+    method: z.ZodOptional<z.ZodEnum<{
+        GET: "GET";
+        HEAD: "HEAD";
+    }>>;
+}, z.core.$strip>;
+export type HttpFetchInput = z.infer<typeof HttpFetchInputSchema>;
+declare const HttpFetchOutputSchema: z.ZodObject<{
+    status: z.ZodNumber;
+    headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    body: z.ZodString;
+}, z.core.$strip>;
+export type HttpFetchOutput = z.infer<typeof HttpFetchOutputSchema>;
+/**
+ * `http.fetch` — the domain allowlist is fixed at construction, one
+ * instance per agent's granted domains (how a `defineAgent` config's
+ * `http.fetch(domains: [...])` becomes this list is the runtime assembly's
+ * job, not this tool's). Restricted to `GET`/`HEAD`: a generic tool that can
+ * `POST` arbitrary bodies to arbitrary allowed hosts is a materially bigger
+ * blast radius than one that can only read, and nothing in L4's scope so
+ * far needs more than reading.
+ */
+export declare function createHttpFetchTool(options: HttpFetchToolOptions): ToolDefinition<HttpFetchInput, HttpFetchOutput>;
+export {};
+//# sourceMappingURL=http-fetch.d.ts.map

package/dist/tools/core/http-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-fetch.d.ts","sourceRoot":"","sources":["../../../src/tools/core/http-fetch.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAIjD,MAAM,WAAW,oBAAoB;IACnC,sIAAsI;IACtI,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CAClC;AAED,QAAA,MAAM,oBAAoB;;;;;;iBAGxB,CAAA;AACF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEjE,QAAA,MAAM,qBAAqB;;;;iBAIzB,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAA;AAEnE;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,oBAAoB,GAC5B,cAAc,CAAC,cAAc,EAAE,eAAe,CAAC,CA0CjD"}

package/dist/tools/core/http-fetch.js

@@ -0,0 +1,63 @@
+import { CogentaError } from '@cogenta/core';
+import { z } from 'zod';
+import { defineTool } from '../define.js';
+const MAX_BODY_LENGTH = 100_000;
+const HttpFetchInputSchema = z.object({
+    url: z.string(),
+    method: z.enum(['GET', 'HEAD']).optional(),
+});
+const HttpFetchOutputSchema = z.object({
+    status: z.number(),
+    headers: z.record(z.string(), z.string()),
+    body: z.string(),
+});
+/**
+ * `http.fetch` — the domain allowlist is fixed at construction, one
+ * instance per agent's granted domains (how a `defineAgent` config's
+ * `http.fetch(domains: [...])` becomes this list is the runtime assembly's
+ * job, not this tool's). Restricted to `GET`/`HEAD`: a generic tool that can
+ * `POST` arbitrary bodies to arbitrary allowed hosts is a materially bigger
+ * blast radius than one that can only read, and nothing in L4's scope so
+ * far needs more than reading.
+ */
+export function createHttpFetchTool(options) {
+    const doFetch = options.fetchImpl ?? fetch;
+    const allowed = new Set(options.allowedDomains);
+    return defineTool({
+        name: 'http.fetch',
+        version: '1.0.0',
+        description: 'Fetch a URL on an explicitly allowed domain (GET or HEAD only).',
+        input: HttpFetchInputSchema,
+        output: HttpFetchOutputSchema,
+        permissions: ['http.fetch'],
+        sideEffects: false,
+        reversible: false,
+        cost: 'low',
+        async execute(input, ctx) {
+            const parsed = new URL(input.url);
+            if (!allowed.has(parsed.hostname)) {
+                throw new CogentaError({
+                    code: 'HTTP_FETCH_DOMAIN_DENIED',
+                    message: `"${parsed.hostname}" is not in this agent's allowed domain list.`,
+                    hint: 'Grant the domain in the agent definition, or fetch a different URL.',
+                    details: { hostname: parsed.hostname, allowed: [...allowed] },
+                });
+            }
+            const response = await doFetch(parsed, {
+                method: input.method ?? 'GET',
+                signal: ctx.signal,
+            });
+            const text = await response.text();
+            const headers = {};
+            response.headers.forEach((value, key) => {
+                headers[key] = value;
+            });
+            return {
+                status: response.status,
+                headers,
+                body: text.length > MAX_BODY_LENGTH ? `${text.slice(0, MAX_BODY_LENGTH)}…` : text,
+            };
+        },
+    });
+}
+//# sourceMappingURL=http-fetch.js.map

package/dist/tools/core/http-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-fetch.js","sourceRoot":"","sources":["../../../src/tools/core/http-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAGzC,MAAM,eAAe,GAAG,OAAO,CAAA;AAQ/B,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAA;AAGF,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAA;AAGF;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA6B;IAE7B,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAA;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;IAE/C,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,iEAAiE;QAC9E,KAAK,EAAE,oBAAoB;QAC3B,MAAM,EAAE,qBAAqB;QAC7B,WAAW,EAAE,CAAC,YAAY,CAAC;QAC3B,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;YACtB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,0BAA0B;oBAChC,OAAO,EAAE,IAAI,MAAM,CAAC,QAAQ,+CAA+C;oBAC3E,IAAI,EAAE,qEAAqE;oBAC3E,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE;iBAC9D,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE;gBACrC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK;gBAC7B,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAC,CAAA;YACF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YAClC,MAAM,OAAO,GAA2B,EAAE,CAAA;YAC1C,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBACtC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YACtB,CAAC,CAAC,CAAA;YAEF,OAAO;gBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;aAClF,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/tools/core/media.d.ts

@@ -0,0 +1,38 @@
+import type { MediaAsset, MediaStore } from '@cogenta/core';
+import { z } from 'zod';
+import type { ToolDefinition } from '../types.js';
+declare const ReadInputSchema: z.ZodObject<{
+    id: z.ZodString;
+}, z.core.$strip>;
+type ReadInput = z.infer<typeof ReadInputSchema>;
+/**
+ * `media.read` — `MediaStore` (`@cogenta/core`) has no permission layer of
+ * its own yet (`media-router.ts`'s own comment names this a known gap,
+ * closed here rather than there): this tool's declared `permissions` is the
+ * actual gate, enforced by the manifest before the call ever reaches the
+ * store.
+ */
+export declare function createMediaReadTool(store: MediaStore): ToolDefinition<ReadInput, MediaAsset>;
+declare const WriteInputSchema: z.ZodObject<{
+    id: z.ZodString;
+    alt: z.ZodOptional<z.ZodString>;
+    decorative: z.ZodOptional<z.ZodBoolean>;
+    decorativeJustification: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    focal: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        x: z.ZodNumber;
+        y: z.ZodNumber;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+type WriteInput = z.infer<typeof WriteInputSchema>;
+/**
+ * `media.write` — metadata only (alt text, decorative flag/justification,
+ * focal point). Uploading a new asset needs binary transfer this
+ * text/JSON tool-calling protocol was never designed to carry, and is a
+ * genuinely different, heavier operation (type sniffing, re-encoding,
+ * variant generation — `L2-admin.md`'s own media pipeline) than an agent
+ * editing an existing asset's accessibility metadata, which is the concrete
+ * use case this tool exists for (e.g. an accessibility-review agent).
+ */
+export declare function createMediaWriteTool(store: MediaStore): ToolDefinition<WriteInput, MediaAsset>;
+export {};
+//# sourceMappingURL=media.d.ts.map

package/dist/tools/core/media.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../../src/tools/core/media.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAoB,MAAM,eAAe,CAAA;AAE7E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAqBjD,QAAA,MAAM,eAAe;;iBAA+B,CAAA;AACpD,KAAK,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAEhD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,GAAG,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC,CAuB5F;AAED,QAAA,MAAM,gBAAgB;;;;;;;;;iBAMpB,CAAA;AACF,KAAK,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAElD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,UAAU,GAAG,cAAc,CAAC,UAAU,EAAE,UAAU,CAAC,CAuB9F"}

package/dist/tools/core/media.js

@@ -0,0 +1,93 @@
+import { CogentaError } from '@cogenta/core';
+import { z } from 'zod';
+import { defineTool } from '../define.js';
+const FocalPointSchema = z.object({ x: z.number(), y: z.number() });
+const MediaAssetSchema = z.object({
+    id: z.string(),
+    kind: z.enum(['image', 'video', 'audio', 'file']),
+    filename: z.string(),
+    mimeType: z.string(),
+    size: z.number(),
+    width: z.number().nullable(),
+    height: z.number().nullable(),
+    alt: z.string(),
+    decorative: z.boolean(),
+    decorativeJustification: z.string().nullable(),
+    focal: FocalPointSchema.nullable(),
+    storageKey: z.string(),
+    createdAt: z.string(),
+    createdBy: z.string().nullable(),
+});
+const ReadInputSchema = z.object({ id: z.string() });
+/**
+ * `media.read` — `MediaStore` (`@cogenta/core`) has no permission layer of
+ * its own yet (`media-router.ts`'s own comment names this a known gap,
+ * closed here rather than there): this tool's declared `permissions` is the
+ * actual gate, enforced by the manifest before the call ever reaches the
+ * store.
+ */
+export function createMediaReadTool(store) {
+    return defineTool({
+        name: 'media.read',
+        version: '1.0.0',
+        description: 'Read one media asset by id.',
+        input: ReadInputSchema,
+        output: MediaAssetSchema,
+        permissions: ['media.read'],
+        sideEffects: false,
+        reversible: false,
+        cost: 'low',
+        async execute(input) {
+            const asset = await store.get(input.id);
+            if (asset === null) {
+                throw new CogentaError({
+                    code: 'MEDIA_NOT_FOUND',
+                    message: `No media asset with id "${input.id}".`,
+                    hint: 'Check the id, or list media to find the right one.',
+                });
+            }
+            return asset;
+        },
+    });
+}
+const WriteInputSchema = z.object({
+    id: z.string(),
+    alt: z.string().optional(),
+    decorative: z.boolean().optional(),
+    decorativeJustification: z.string().nullable().optional(),
+    focal: FocalPointSchema.nullable().optional(),
+});
+/**
+ * `media.write` — metadata only (alt text, decorative flag/justification,
+ * focal point). Uploading a new asset needs binary transfer this
+ * text/JSON tool-calling protocol was never designed to carry, and is a
+ * genuinely different, heavier operation (type sniffing, re-encoding,
+ * variant generation — `L2-admin.md`'s own media pipeline) than an agent
+ * editing an existing asset's accessibility metadata, which is the concrete
+ * use case this tool exists for (e.g. an accessibility-review agent).
+ */
+export function createMediaWriteTool(store) {
+    return defineTool({
+        name: 'media.write',
+        version: '1.0.0',
+        description: "Update a media asset's alt text, decorative flag, or focal point.",
+        input: WriteInputSchema,
+        output: MediaAssetSchema,
+        permissions: ['media.write'],
+        sideEffects: true,
+        reversible: false,
+        cost: 'low',
+        async execute(input) {
+            const update = {
+                ...(input.alt === undefined ? {} : { alt: input.alt }),
+                ...(input.decorative === undefined ? {} : { decorative: input.decorative }),
+                ...(input.decorativeJustification === undefined
+                    ? {}
+                    : { decorativeJustification: input.decorativeJustification }),
+                ...(input.focal === undefined ? {} : { focal: input.focal }),
+            };
+            return store.update(input.id, update);
+        },
+    });
+}
+//# sourceMappingURL=media.js.map

package/dist/tools/core/media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../../../src/tools/core/media.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAGzC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAEnE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9C,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAiC,CAAA;AAElC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAGpD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAiB;IACnD,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,6BAA6B;QAC1C,KAAK,EAAE,eAAe;QACtB,MAAM,EAAE,gBAAgB;QACxB,WAAW,EAAE,CAAC,YAAY,CAAC;QAC3B,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YACvC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,2BAA2B,KAAK,CAAC,EAAE,IAAI;oBAChD,IAAI,EAAE,oDAAoD;iBAC3D,CAAC,CAAA;YACJ,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzD,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAA;AAGF;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAiB;IACpD,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,mEAAmE;QAChF,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,gBAAgB;QACxB,WAAW,EAAE,CAAC,aAAa,CAAC;QAC5B,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,MAAM,GAAqB;gBAC/B,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;gBACtD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC3E,GAAG,CAAC,KAAK,CAAC,uBAAuB,KAAK,SAAS;oBAC7C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,EAAE,CAAC;gBAC/D,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;aAC7D,CAAA;YACD,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACvC,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/tools/core/site-config.d.ts

@@ -0,0 +1,19 @@
+import { z } from 'zod';
+import type { ToolDefinition } from '../types.js';
+declare const SiteConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    url: z.ZodOptional<z.ZodString>;
+    locales: z.ZodArray<z.ZodString>;
+    defaultLocale: z.ZodString;
+}, z.core.$strip>;
+export type SiteConfig = z.infer<typeof SiteConfigSchema>;
+/**
+ * `site.config_read` — a read-only projection of `ctx.site`, which the
+ * runtime already populates from `ResolvedConfig.site` (`@cogenta/core`).
+ * No `site.config_write` counterpart exists yet: the taxonomy names it, but
+ * writing site config from an agent needs its own review (which fields are
+ * even safe to let an agent touch) that is out of this task's scope.
+ */
+export declare function createSiteConfigReadTool(): ToolDefinition<Record<string, never>, SiteConfig>;
+export {};
+//# sourceMappingURL=site-config.d.ts.map

package/dist/tools/core/site-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-config.d.ts","sourceRoot":"","sources":["../../../src/tools/core/site-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD,QAAA,MAAM,gBAAgB;;;;;iBAKpB,CAAA;AAEF,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAEzD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,IAAI,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,UAAU,CAAC,CAoB5F"}

package/dist/tools/core/site-config.js

@@ -0,0 +1,37 @@
+import { z } from 'zod';
+import { defineTool } from '../define.js';
+const SiteConfigSchema = z.object({
+    name: z.string(),
+    url: z.string().optional(),
+    locales: z.array(z.string()),
+    defaultLocale: z.string(),
+});
+/**
+ * `site.config_read` — a read-only projection of `ctx.site`, which the
+ * runtime already populates from `ResolvedConfig.site` (`@cogenta/core`).
+ * No `site.config_write` counterpart exists yet: the taxonomy names it, but
+ * writing site config from an agent needs its own review (which fields are
+ * even safe to let an agent touch) that is out of this task's scope.
+ */
+export function createSiteConfigReadTool() {
+    return defineTool({
+        name: 'site.config_read',
+        version: '1.0.0',
+        description: "Read this site's configuration (name, url, locales).",
+        input: z.object({}),
+        output: SiteConfigSchema,
+        permissions: ['site.config_read'],
+        sideEffects: false,
+        reversible: false,
+        cost: 'low',
+        async execute(_input, ctx) {
+            return {
+                name: ctx.site.name,
+                ...(ctx.site.url === undefined ? {} : { url: ctx.site.url }),
+                locales: [...ctx.site.locales],
+                defaultLocale: ctx.site.defaultLocale,
+            };
+        },
+    });
+}
+//# sourceMappingURL=site-config.js.map

package/dist/tools/core/site-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"site-config.js","sourceRoot":"","sources":["../../../src/tools/core/site-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAGzC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;CAC1B,CAAC,CAAA;AAIF;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB;IACtC,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,sDAAsD;QACnE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,gBAAgB;QACxB,WAAW,EAAE,CAAC,kBAAkB,CAAC;QACjC,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG;YACvB,OAAO;gBACL,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACnB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC5D,OAAO,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC9B,aAAa,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa;aACtC,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/tools/define.d.ts

@@ -0,0 +1,12 @@
+import type { ToolDefinition } from './types.js';
+/**
+ * Structural validation of Contract C's two hard rules that a type alone
+ * cannot enforce: a `sideEffects: true` tool must be able to undo itself, and
+ * a tool must actually declare what it needs (an empty `permissions` array
+ * is either a mistake or a tool that should not exist — the registry has no
+ * way to gate an unpermissioned call, which defeats R4 before it starts).
+ * Returns the definition frozen, so nothing downstream can mutate a shared
+ * tool object between calls.
+ */
+export declare function defineTool<Input, Output>(definition: ToolDefinition<Input, Output>): ToolDefinition<Input, Output>;
+//# sourceMappingURL=define.d.ts.map

package/dist/tools/define.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define.d.ts","sourceRoot":"","sources":["../../src/tools/define.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EACtC,UAAU,EAAE,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,GACxC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAkB/B"}

package/dist/tools/define.js

@@ -0,0 +1,28 @@
+import { CogentaError } from '@cogenta/core';
+/**
+ * Structural validation of Contract C's two hard rules that a type alone
+ * cannot enforce: a `sideEffects: true` tool must be able to undo itself, and
+ * a tool must actually declare what it needs (an empty `permissions` array
+ * is either a mistake or a tool that should not exist — the registry has no
+ * way to gate an unpermissioned call, which defeats R4 before it starts).
+ * Returns the definition frozen, so nothing downstream can mutate a shared
+ * tool object between calls.
+ */
+export function defineTool(definition) {
+    if (definition.permissions.length === 0) {
+        throw new CogentaError({
+            code: 'TOOL_DEFINITION_INVALID',
+            message: `Tool "${definition.name}" declares no permissions.`,
+            hint: 'List at least one permission — an empty list cannot be gated by the tool registry.',
+        });
+    }
+    if (definition.sideEffects && definition.reversible && definition.revert === undefined) {
+        throw new CogentaError({
+            code: 'TOOL_DEFINITION_INVALID',
+            message: `Tool "${definition.name}" declares sideEffects and reversible but implements no revert().`,
+            hint: 'Implement revert(), or set reversible: false so a human approves every call regardless of autonomy level.',
+        });
+    }
+    return Object.freeze(definition);
+}
+//# sourceMappingURL=define.js.map

package/dist/tools/define.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"define.js","sourceRoot":"","sources":["../../src/tools/define.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAG5C;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CACxB,UAAyC;IAEzC,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,SAAS,UAAU,CAAC,IAAI,4BAA4B;YAC7D,IAAI,EAAE,oFAAoF;SAC3F,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,WAAW,IAAI,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACvF,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,SAAS,UAAU,CAAC,IAAI,mEAAmE;YACpG,IAAI,EAAE,2GAA2G;SAClH,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;AAClC,CAAC"}

package/dist/tools/manifest.d.ts

@@ -0,0 +1,19 @@
+import type { ExecutableTool } from '../runtime/types.js';
+import type { ToolRegistry } from './registry.js';
+import type { ToolContext } from './types.js';
+/**
+ * L4 task 4's actual enforcement point. "Un niveau inférieur ne peut jamais
+ * élargir les permissions d'un niveau supérieur" is not applied by the
+ * prompt — it is applied by never constructing an `ExecutableTool` for a
+ * name outside `allowedNames` in the first place. The model cannot ask its
+ * way into a tool that was never handed to `runAgentLoop`; a hallucinated or
+ * out-of-manifest call still resolves through the loop's own "no tool named
+ * X" path (task 2), which is the same refusal, from a different angle, for
+ * the same reason.
+ *
+ * `allowedNames` not found in `registry` fails immediately, at build time —
+ * the same "fail at load, not at call" posture task 11 uses for sub-agents,
+ * applied here to catch a misconfigured agent before it ever runs.
+ */
+export declare function buildManifest(registry: ToolRegistry, allowedNames: readonly string[], context: Omit<ToolContext, 'signal'>): readonly ExecutableTool[];
+//# sourceMappingURL=manifest.d.ts.map

package/dist/tools/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/tools/manifest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAwB,MAAM,qBAAqB,CAAA;AAC/E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,KAAK,EAAE,WAAW,EAAkB,MAAM,YAAY,CAAA;AAE7D;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,YAAY,EACtB,YAAY,EAAE,SAAS,MAAM,EAAE,EAC/B,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,GACnC,SAAS,cAAc,EAAE,CAY3B"}

package/dist/tools/manifest.js

@@ -0,0 +1,70 @@
+import { CogentaError } from '@cogenta/core';
+import { z } from 'zod';
+/**
+ * L4 task 4's actual enforcement point. "Un niveau inférieur ne peut jamais
+ * élargir les permissions d'un niveau supérieur" is not applied by the
+ * prompt — it is applied by never constructing an `ExecutableTool` for a
+ * name outside `allowedNames` in the first place. The model cannot ask its
+ * way into a tool that was never handed to `runAgentLoop`; a hallucinated or
+ * out-of-manifest call still resolves through the loop's own "no tool named
+ * X" path (task 2), which is the same refusal, from a different angle, for
+ * the same reason.
+ *
+ * `allowedNames` not found in `registry` fails immediately, at build time —
+ * the same "fail at load, not at call" posture task 11 uses for sub-agents,
+ * applied here to catch a misconfigured agent before it ever runs.
+ */
+export function buildManifest(registry, allowedNames, context) {
+    return allowedNames.map((name) => {
+        const tool = registry.get(name);
+        if (tool === undefined) {
+            throw new CogentaError({
+                code: 'TOOL_UNKNOWN',
+                message: `Agent manifest names "${name}", which no tool in the registry provides.`,
+                hint: 'Register the tool before building the manifest, or remove it from the agent definition.',
+            });
+        }
+        return toExecutableTool(tool, context);
+    });
+}
+function toExecutableTool(tool, context) {
+    return {
+        spec: {
+            name: tool.name,
+            description: tool.description,
+            inputSchema: z.toJSONSchema(tool.input),
+        },
+        sideEffects: tool.sideEffects,
+        reversible: tool.reversible,
+        async execute(input, execCtx) {
+            const parsedInput = tool.input.safeParse(input);
+            if (!parsedInput.success) {
+                throw new CogentaError({
+                    code: 'TOOL_INPUT_INVALID',
+                    message: `The input for "${tool.name}" did not match its declared schema.`,
+                    hint: 'This is fed back to the model as a tool error, not thrown out of the run.',
+                    details: { issues: parsedInput.error.issues },
+                });
+            }
+            const output = await tool.execute(parsedInput.data, { ...context, signal: execCtx.signal });
+            const parsedOutput = tool.output.safeParse(output);
+            if (!parsedOutput.success) {
+                throw new CogentaError({
+                    code: 'TOOL_OUTPUT_INVALID',
+                    message: `"${tool.name}" returned a value that did not match its declared output schema.`,
+                    hint: 'This is a bug in the tool implementation, not in the caller.',
+                    details: { issues: parsedOutput.error.issues },
+                });
+            }
+            return parsedOutput.data;
+        },
+        ...(tool.revert === undefined
+            ? {}
+            : {
+                async revert(receipt, execCtx) {
+                    await tool.revert?.(receipt, { ...context, signal: execCtx.signal });
+                },
+            }),
+    };
+}
+//# sourceMappingURL=manifest.js.map

package/dist/tools/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/tools/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAKvB;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAC3B,QAAsB,EACtB,YAA+B,EAC/B,OAAoC;IAEpC,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,YAAY,CAAC;gBACrB,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,yBAAyB,IAAI,4CAA4C;gBAClF,IAAI,EAAE,yFAAyF;aAChG,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAoB,EACpB,OAAoC;IAEpC,OAAO;QACL,IAAI,EAAE;YACJ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAsC;SAC7E;QACD,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,CAAC,OAAO,CAAC,KAAwC,EAAE,OAA6B;YACnF,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YAC/C,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBACzB,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,kBAAkB,IAAI,CAAC,IAAI,sCAAsC;oBAC1E,IAAI,EAAE,2EAA2E;oBACjF,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE;iBAC9C,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;YAE3F,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;YAClD,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;gBAC1B,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,mEAAmE;oBACzF,IAAI,EAAE,8DAA8D;oBACpE,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE;iBAC/C,CAAC,CAAA;YACJ,CAAC;YACD,OAAO,YAAY,CAAC,IAAI,CAAA;QAC1B,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS;YAC3B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,OAA6B;oBAC1D,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;gBACtE,CAAC;aACF,CAAC;KACP,CAAA;AACH,CAAC"}

package/dist/tools/registry.d.ts

@@ -0,0 +1,8 @@
+import type { ToolDefinition } from './types.js';
+export interface ToolRegistry {
+    list(): readonly ToolDefinition[];
+    get(name: string): ToolDefinition | undefined;
+}
+/** Every tool a site knows about — not what any one agent may call, that's the manifest (`buildManifest`) built on top of this. */
+export declare function createToolRegistry(tools: readonly ToolDefinition[]): ToolRegistry;
+//# sourceMappingURL=registry.d.ts.map

package/dist/tools/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/tools/registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD,MAAM,WAAW,YAAY;IAC3B,IAAI,IAAI,SAAS,cAAc,EAAE,CAAA;IACjC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAA;CAC9C;AAED,mIAAmI;AACnI,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,GAAG,YAAY,CAiBjF"}

package/dist/tools/registry.js

@@ -0,0 +1,20 @@
+import { CogentaError } from '@cogenta/core';
+/** Every tool a site knows about — not what any one agent may call, that's the manifest (`buildManifest`) built on top of this. */
+export function createToolRegistry(tools) {
+    const byName = new Map();
+    for (const tool of tools) {
+        if (byName.has(tool.name)) {
+            throw new CogentaError({
+                code: 'TOOL_DUPLICATE',
+                message: `Two tools are registered under the name "${tool.name}".`,
+                hint: 'Tool names must be unique across the whole registry, core and third-party alike.',
+            });
+        }
+        byName.set(tool.name, tool);
+    }
+    return {
+        list: () => [...byName.values()],
+        get: (name) => byName.get(name),
+    };
+}
+//# sourceMappingURL=registry.js.map

package/dist/tools/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/tools/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAQ5C,mIAAmI;AACnI,MAAM,UAAU,kBAAkB,CAAC,KAAgC;IACjE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAA;IAChD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,YAAY,CAAC;gBACrB,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,4CAA4C,IAAI,CAAC,IAAI,IAAI;gBAClE,IAAI,EAAE,kFAAkF;aACzF,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC7B,CAAC;IAED,OAAO;QACL,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAChC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;KAChC,CAAA;AACH,CAAC"}