@easynet/agent-tool 1.0.0

package/dist/runtime/PTCRuntime.d.ts

@@ -0,0 +1,115 @@
+import type { ToolAdapter, ToolSpec } from "../types/ToolSpec.js";
+import type { ExecContext, ToolIntent } from "../types/ToolIntent.js";
+import type { ToolResult } from "../types/ToolResult.js";
+import { ToolRegistry } from "../registry/ToolRegistry.js";
+import { SchemaValidator } from "./SchemaValidator.js";
+import { PolicyEngine } from "./PolicyEngine.js";
+import { BudgetManager } from "./Budget.js";
+import { EventLog } from "../observability/EventLog.js";
+import type { DebugOptions } from "../observability/Logger.js";
+import { Metrics } from "../observability/Metrics.js";
+import { Tracing } from "../observability/Tracing.js";
+import type { PolicyConfig } from "./PolicyEngine.js";
+import type { BudgetOptions } from "./Budget.js";
+/**
+ * PTC Runtime configuration.
+ */
+export interface PTCRuntimeConfig {
+    policy?: PolicyConfig;
+    budget?: BudgetOptions;
+    /** Include raw response in ToolResult (default: true, disable in production) */
+    includeRaw?: boolean;
+    /** Maximum retries if not specified in context (default: 2) */
+    defaultMaxRetries?: number;
+    /** Debug/logging configuration */
+    debug?: DebugOptions;
+    /** HITL: when set, tools with sideEffect external_write/destructive require human approval before execute; callback returns true/void to approve, false to deny */
+    onApprovalRequired?: (spec: import("../types/ToolSpec.js").ToolSpec, args: unknown, ctx: import("../types/ToolIntent.js").ExecContext) => Promise<boolean | void>;
+}
+/**
+ * PTC Runtime: the unified execution kernel for all tool invocations.
+ *
+ * Enforces the mandatory 9-step pipeline:
+ * 1. Resolve (Registry lookup)
+ * 2. Input Validate (AJV)
+ * 3. Defaults Enrich
+ * 4. Policy Gate
+ * 5. Budget check
+ * 6. HITL approval (if onApprovalRequired set and tool sideEffect external_write/destructive)
+ * 7. Execute (adapter.invoke())
+ * 8. Output Validate (AJV)
+ * 9. Evidence Build
+ * 10. Audit & Metrics
+ *
+ * Never throws to callers - always returns ToolResult.
+ */
+export declare class PTCRuntime {
+    private readonly registry;
+    private readonly adapters;
+    private readonly validator;
+    private readonly policy;
+    private readonly budget;
+    private readonly eventLog;
+    private readonly metrics;
+    private readonly tracing;
+    private readonly config;
+    private readonly logger;
+    constructor(options?: {
+        registry?: ToolRegistry;
+        validator?: SchemaValidator;
+        policy?: PolicyEngine;
+        budget?: BudgetManager;
+        eventLog?: EventLog;
+        metrics?: Metrics;
+        tracing?: Tracing;
+        config?: PTCRuntimeConfig;
+    });
+    /**
+     * Register an adapter for a tool kind.
+     */
+    registerAdapter(adapter: ToolAdapter): void;
+    /**
+     * Get an adapter by kind (e.g. "mcp"). Use to set MCP client via adapter.setClient().
+     */
+    getAdapter(kind: string): ToolAdapter | undefined;
+    /**
+     * Get the tool registry.
+     */
+    getRegistry(): ToolRegistry;
+    /**
+     * Get the event log.
+     */
+    getEventLog(): EventLog;
+    /**
+     * Get the metrics collector.
+     */
+    getMetrics(): Metrics;
+    /**
+     * Get the tracing system.
+     */
+    getTracing(): Tracing;
+    /**
+     * Invoke a tool through the PTC pipeline.
+     * Never throws - always returns a structured ToolResult.
+     */
+    invoke(intent: ToolIntent, ctx: ExecContext): Promise<ToolResult>;
+    /**
+     * Search for tools in the registry.
+     */
+    searchTools(query: string, filters?: {
+        kind?: string;
+        capabilities?: string[];
+        tags?: string[];
+    }): ToolSpec[];
+    /**
+     * Get the schema for a tool.
+     */
+    getToolSchema(toolName: string): {
+        input: object;
+        output: object;
+    } | undefined;
+    private getPipelineDeps;
+    private getObservabilityDeps;
+    private buildDryRunResult;
+}
+//# sourceMappingURL=PTCRuntime.d.ts.map

package/dist/runtime/PTCRuntime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PTCRuntime.d.ts","sourceRoot":"","sources":["../../src/runtime/PTCRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,KAAK,EAAE,UAAU,EAAY,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAExD,OAAO,KAAK,EAAE,YAAY,EAAU,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAmBjD;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,gFAAgF;IAChF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,+DAA+D;IAC/D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,kCAAkC;IAClC,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,mKAAmK;IACnK,kBAAkB,CAAC,EAAE,CACnB,IAAI,EAAE,OAAO,sBAAsB,EAAE,QAAQ,EAC7C,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,OAAO,wBAAwB,EAAE,WAAW,KAC9C,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAe;IACxC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkC;IAC3D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkB;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAU;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAG9B,OAAO,GAAE;QACP,QAAQ,CAAC,EAAE,YAAY,CAAC;QACxB,SAAS,CAAC,EAAE,eAAe,CAAC;QAC5B,MAAM,CAAC,EAAE,YAAY,CAAC;QACtB,MAAM,CAAC,EAAE,aAAa,CAAC;QACvB,QAAQ,CAAC,EAAE,QAAQ,CAAC;QACpB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,MAAM,CAAC,EAAE,gBAAgB,CAAC;KACtB;IA2BR;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI;IAI3C;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAIjD;;OAEG;IACH,WAAW,IAAI,YAAY;IAI3B;;OAEG;IACH,WAAW,IAAI,QAAQ;IAIvB;;OAEG;IACH,UAAU,IAAI,OAAO;IAIrB;;OAEG;IACH,UAAU,IAAI,OAAO;IAIrB;;;OAGG;IACG,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAiIvE;;OAEG;IACH,WAAW,CACT,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,GACpE,QAAQ,EAAE;IASb;;OAEG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS;IAQ9E,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,oBAAoB;IAS5B,OAAO,CAAC,iBAAiB;CA8B1B"}

package/dist/runtime/PTCRuntimeObservability.d.ts

@@ -0,0 +1,26 @@
+import type { ToolSpec } from "../types/ToolSpec.js";
+import type { ExecContext, ToolIntent } from "../types/ToolIntent.js";
+import type { Evidence, ToolResult } from "../types/ToolResult.js";
+import { EventLog } from "../observability/EventLog.js";
+import { Metrics } from "../observability/Metrics.js";
+import { Tracing } from "../observability/Tracing.js";
+import type { Logger } from "../observability/Logger.js";
+export interface ObservabilityDependencies {
+    eventLog: EventLog;
+    metrics: Metrics;
+    tracing: Tracing;
+    logger: Logger;
+}
+/**
+ * Emit TOOL_CALLED event.
+ */
+export declare function emitToolCalled(intent: ToolIntent, ctx: ExecContext, deps: ObservabilityDependencies): void;
+/**
+ * Record successful tool invocation.
+ */
+export declare function recordSuccess(spec: ToolSpec, durationMs: number, _evidence: Evidence[], spanId: string, deps: ObservabilityDependencies): void;
+/**
+ * Handle error and return ToolResult.
+ */
+export declare function handleError(error: unknown, intent: ToolIntent, ctx: ExecContext, durationMs: number, spanId: string, deps: ObservabilityDependencies): ToolResult;
+//# sourceMappingURL=PTCRuntimeObservability.d.ts.map

package/dist/runtime/PTCRuntimeObservability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PTCRuntimeObservability.d.ts","sourceRoot":"","sources":["../../src/runtime/PTCRuntimeObservability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAKnE,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AAEtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEzD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,UAAU,EAClB,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,yBAAyB,GAC9B,IAAI,CAcN;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,QAAQ,EACd,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,QAAQ,EAAE,EACrB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,yBAAyB,GAC9B,IAAI,CAON;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,UAAU,EAClB,GAAG,EAAE,WAAW,EAChB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,yBAAyB,GAC9B,UAAU,CAkDZ"}

package/dist/runtime/PTCRuntimePipeline.d.ts

@@ -0,0 +1,62 @@
+import type { ToolSpec } from "../types/ToolSpec.js";
+import type { ExecContext } from "../types/ToolIntent.js";
+import type { ToolAdapter } from "../types/ToolSpec.js";
+import { SchemaValidator } from "./SchemaValidator.js";
+import { PolicyEngine } from "./PolicyEngine.js";
+import { BudgetManager } from "./Budget.js";
+import { EventLog } from "../observability/EventLog.js";
+import { Metrics } from "../observability/Metrics.js";
+import { Tracing } from "../observability/Tracing.js";
+import type { Logger } from "../observability/Logger.js";
+/** Called when tool has sideEffect external_write/destructive; return true/void to approve, false to deny. */
+export type OnApprovalRequired = (spec: ToolSpec, args: unknown, ctx: ExecContext) => Promise<boolean | void>;
+export interface PipelineDependencies {
+    registry: {
+        get(name: string): ToolSpec | undefined;
+        snapshot(): ToolSpec[];
+    };
+    adapters: Map<string, ToolAdapter>;
+    validator: SchemaValidator;
+    policy: PolicyEngine;
+    budget: BudgetManager;
+    eventLog: EventLog;
+    metrics: Metrics;
+    tracing: Tracing;
+    logger: Logger;
+    defaultMaxRetries?: number;
+    /** HITL: when set, tools with sideEffect external_write/destructive require human approval before execute */
+    onApprovalRequired?: OnApprovalRequired;
+}
+/**
+ * Pipeline step: Resolve tool from registry.
+ */
+export declare function resolveTool(toolName: string, registry: PipelineDependencies["registry"]): ToolSpec;
+/**
+ * Pipeline step: Validate input against schema.
+ */
+export declare function validateInput(spec: ToolSpec, args: unknown, validator: SchemaValidator): unknown;
+/**
+ * Pipeline step: Enrich args with defaults from schema.
+ */
+export declare function enrichDefaults(spec: ToolSpec, args: unknown, validator: SchemaValidator): unknown;
+/**
+ * Pipeline step: Enforce policy checks.
+ */
+export declare function enforcePolicy(spec: ToolSpec, args: unknown, ctx: ExecContext, deps: Pick<PipelineDependencies, "policy" | "eventLog" | "metrics" | "tracing">): void;
+/**
+ * Pipeline step: Human-in-the-loop approval for external_write/destructive tools.
+ * When onApprovalRequired is set, waits for callback resolve(true/void) before continuing; resolve(false) or reject throws HITL_DENIED.
+ */
+export declare function requireHumanApproval(spec: ToolSpec, args: unknown, ctx: ExecContext, deps: Pick<PipelineDependencies, "onApprovalRequired" | "eventLog" | "logger">): Promise<void>;
+/**
+ * Pipeline step: Execute tool with budget, retry, and timeout.
+ */
+export declare function executeWithBudget(spec: ToolSpec, args: unknown, ctx: ExecContext, spanId: string, deps: PipelineDependencies): Promise<{
+    result: unknown;
+    raw?: unknown;
+}>;
+/**
+ * Pipeline step: Validate output against schema.
+ */
+export declare function validateOutput(spec: ToolSpec, result: unknown, validator: SchemaValidator): unknown;
+//# sourceMappingURL=PTCRuntimePipeline.d.ts.map

package/dist/runtime/PTCRuntimePipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PTCRuntimePipeline.d.ts","sourceRoot":"","sources":["../../src/runtime/PTCRuntimePipeline.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAyB,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAqB,MAAM,mBAAmB,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAU5C,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAEzD,8GAA8G;AAC9G,MAAM,MAAM,kBAAkB,GAAG,CAC/B,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,WAAW,KACb,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;AAE7B,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE;QAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;QAAC,QAAQ,IAAI,QAAQ,EAAE,CAAA;KAAE,CAAC;IAC9E,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACnC,SAAS,EAAE,eAAe,CAAC;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,6GAA6G;IAC7G,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;CACzC;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,oBAAoB,CAAC,UAAU,CAAC,GACzC,QAAQ,CAUV;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,OAAO,EACb,SAAS,EAAE,eAAe,GACzB,OAAO,CAgBT;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,OAAO,EACb,SAAS,EAAE,eAAe,GACzB,OAAO,CAET;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,IAAI,CACR,oBAAoB,EACpB,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAC9C,GACA,IAAI,CAsBN;AAID;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,WAAW,EAChB,IAAI,EAAE,IAAI,CAAC,oBAAoB,EAAE,oBAAoB,GAAG,UAAU,GAAG,QAAQ,CAAC,GAC7E,OAAO,CAAC,IAAI,CAAC,CAwDf;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,WAAW,EAChB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAqE7C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,QAAQ,EACd,MAAM,EAAE,OAAO,EACf,SAAS,EAAE,eAAe,GACzB,OAAO,CAeT"}

package/dist/runtime/PolicyEngine.d.ts

@@ -0,0 +1,67 @@
+import type { Capability, ToolSpec } from "../types/ToolSpec.js";
+import type { ExecContext } from "../types/ToolIntent.js";
+/**
+ * Policy configuration for the engine.
+ */
+export interface PolicyConfig {
+    /** File system sandbox paths (allowed write directories) */
+    sandboxPaths?: string[];
+    /** Allowed URL patterns (regex strings) */
+    urlAllowlist?: string[];
+    /** Denied URL patterns (regex strings) */
+    urlDenylist?: string[];
+    /** SQL patterns that are denied (e.g., DROP, TRUNCATE) */
+    deniedSqlPatterns?: string[];
+    /** Network allowed domains */
+    allowedDomains?: string[];
+    /** Whether to require explicit permission for danger:destructive */
+    requireExplicitDangerPermission?: boolean;
+}
+/**
+ * Result of a policy check.
+ */
+export interface PolicyCheckResult {
+    allowed: boolean;
+    reason?: string;
+    missingCapabilities?: Capability[];
+}
+/**
+ * Policy engine for capability gating, parameter security, and access control.
+ */
+export declare class PolicyEngine {
+    private readonly config;
+    constructor(config?: PolicyConfig);
+    /**
+     * Enforce all policy checks. Throws PolicyDeniedError if denied.
+     */
+    enforce(spec: ToolSpec, args: unknown, ctx: ExecContext): void;
+    /**
+     * Check all policies without throwing.
+     */
+    check(spec: ToolSpec, args: unknown, ctx: ExecContext): PolicyCheckResult;
+    /**
+     * Check that context permissions cover tool capabilities.
+     */
+    private checkCapabilities;
+    /**
+     * Check parameter-level security constraints.
+     */
+    private checkParameters;
+    private checkFilePaths;
+    private checkUrls;
+    private checkSql;
+    private checkDomains;
+    /**
+     * Extract string values from args matching given key patterns.
+     */
+    private extractStringValues;
+}
+/**
+ * Error thrown when policy denies execution.
+ */
+export declare class PolicyDeniedError extends Error {
+    readonly missingCapabilities?: Capability[] | undefined;
+    readonly kind = "POLICY_DENIED";
+    constructor(message: string, missingCapabilities?: Capability[] | undefined);
+}
+//# sourceMappingURL=PolicyEngine.d.ts.map

package/dist/runtime/PolicyEngine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PolicyEngine.d.ts","sourceRoot":"","sources":["../../src/runtime/PolicyEngine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,2CAA2C;IAC3C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,0CAA0C;IAC1C,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,0DAA0D;IAC1D,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,8BAA8B;IAC9B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,oEAAoE;IACpE,+BAA+B,CAAC,EAAE,OAAO,CAAC;CAC3C;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mBAAmB,CAAC,EAAE,UAAU,EAAE,CAAC;CACpC;AAED;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;gBAE1B,MAAM,GAAE,YAAiB;IAQrC;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,GAAG,IAAI;IAU9D;;OAEG;IACH,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,GAAG,iBAAiB;IAazE;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA+BzB;;OAEG;IACH,OAAO,CAAC,eAAe;IAsCvB,OAAO,CAAC,cAAc;IAyBtB,OAAO,CAAC,SAAS;IA8BjB,OAAO,CAAC,QAAQ;IAiBhB,OAAO,CAAC,YAAY;IAyBpB;;OAEG;IACH,OAAO,CAAC,mBAAmB;CAqB5B;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;aAKxB,mBAAmB,CAAC,EAAE,UAAU,EAAE;IAJpD,SAAgB,IAAI,mBAAmB;gBAGrC,OAAO,EAAE,MAAM,EACC,mBAAmB,CAAC,EAAE,UAAU,EAAE,YAAA;CAKrD"}

package/dist/runtime/Retry.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Retry configuration.
+ */
+export interface RetryOptions {
+    /** Maximum number of retries (default: 2) */
+    maxRetries?: number;
+    /** Base delay in ms for exponential backoff (default: 1000) */
+    baseDelayMs?: number;
+    /** Maximum delay in ms (default: 10000) */
+    maxDelayMs?: number;
+    /** Jitter factor 0-1 (default: 0.1) */
+    jitter?: number;
+    /** Error filter: return true to retry, false to abort */
+    shouldRetry?: (error: Error) => boolean;
+    /** Callback on each retry attempt */
+    onRetry?: (error: Error, attempt: number) => void;
+}
+/**
+ * Determine if an error is retryable.
+ */
+export declare function isRetryable(error: unknown): boolean;
+/**
+ * Execute a function with retry logic using exponential backoff.
+ */
+export declare function withRetry<T>(fn: () => Promise<T>, options?: RetryOptions): Promise<T>;
+/**
+ * Create a tagged error with a kind field for retry classification.
+ */
+export declare function createTaggedError(kind: string, message: string, details?: unknown): Error & {
+    kind: string;
+    details?: unknown;
+};
+//# sourceMappingURL=Retry.d.ts.map

package/dist/runtime/Retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Retry.d.ts","sourceRoot":"","sources":["../../src/runtime/Retry.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC;IACxC,qCAAqC;IACrC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACnD;AAiBD;;GAEG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAMnD;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAC/B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,CAAC,CAAC,CAyCZ;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,OAAO,GAChB,KAAK,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAQ7C"}

package/dist/runtime/SchemaValidator.d.ts

@@ -0,0 +1,42 @@
+import { type ErrorObject } from "ajv";
+/**
+ * Schema validation result.
+ */
+export interface ValidationResult {
+    valid: boolean;
+    errors?: ErrorObject[];
+    data?: unknown;
+}
+/**
+ * AJV-based JSON Schema validator with coercion and default enrichment.
+ */
+export declare class SchemaValidator {
+    private readonly ajv;
+    private readonly cache;
+    constructor();
+    /**
+     * Validate data against a JSON Schema.
+     * Coerces types and applies defaults in-place.
+     */
+    validate(schema: object, data: unknown): ValidationResult;
+    /**
+     * Validate and return coerced data, or throw a descriptive error.
+     */
+    validateOrThrow(schema: object, data: unknown, context: string): unknown;
+    /**
+     * Apply default values from schema to data without full validation.
+     */
+    enrichDefaults(schema: object, data: unknown): unknown;
+    private getOrCompile;
+    /** Ensure schema is AJV-compatible (required = string[], nullable handled via type). */
+    private normalizeSchema;
+    private normalizeSchemaRec;
+}
+/**
+ * Error thrown on schema validation failure.
+ */
+export declare class SchemaValidationError extends Error {
+    readonly errors: ErrorObject[];
+    constructor(message: string, errors: ErrorObject[]);
+}
+//# sourceMappingURL=SchemaValidator.d.ts.map

package/dist/runtime/SchemaValidator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SchemaValidator.d.ts","sourceRoot":"","sources":["../../src/runtime/SchemaValidator.ts"],"names":[],"mappings":"AAAA,OAAY,EAAyB,KAAK,WAAW,EAAE,MAAM,KAAK,CAAC;AAGnE;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;GAEG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAM;IAC1B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuC;;IAa7D;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,gBAAgB;IAezD;;OAEG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO;IAcxE;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO;IAOtD,OAAO,CAAC,YAAY;IAWpB,wFAAwF;IACxF,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,kBAAkB;CAiE3B;AAED;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;aAG5B,MAAM,EAAE,WAAW,EAAE;gBADrC,OAAO,EAAE,MAAM,EACC,MAAM,EAAE,WAAW,EAAE;CAKxC"}

package/dist/templates/mcp-server.js

@@ -0,0 +1,48 @@
+/**
+ * Generated MCP server entrypoint. Start with: npx tsx mcp-server.ts
+ * Listens on stdio for MCP protocol. Supports function, skill, and n8n tools.
+ */
+import { createRequire } from "node:module";
+import { fileURLToPath } from "node:url";
+import { dirname, join } from "node:path";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { getHandler } from "./tool-index.js";
+import { getSkillInvoker } from "./skill-invoker.js";
+import { getN8nInvoker } from "./n8n-invoker.js";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const require = createRequire(import.meta.url);
+const toolSpecs = require(join(__dirname, "tool-specs.json"));
+
+const server = new McpServer({ name: "function-tools", version: "1.0.0" });
+
+for (const spec of toolSpecs) {
+  server.registerTool(
+    spec.name,
+    {
+      description: spec.description,
+      inputSchema: spec.inputSchema,
+      _meta: spec._meta,
+    },
+    async (args, _extra) => {
+      let result;
+      if (spec.kind === "function") {
+        const handler = await getHandler(spec.name);
+        result = await handler(args);
+      } else if (spec.kind === "skill") {
+        const invoker = await getSkillInvoker(spec.name);
+        result = await invoker(args);
+      } else if (spec.kind === "n8n") {
+        const invoker = await getN8nInvoker(spec.name);
+        result = await invoker(args);
+      } else {
+        throw new Error("Unknown tool kind: " + (spec.kind ?? "undefined"));
+      }
+      return { content: [{ type: "text", text: JSON.stringify(result) }] };
+    }
+  );
+}
+
+const transport = new StdioServerTransport();
+await server.connect(transport);

package/dist/templates/n8n-invoker.js

@@ -0,0 +1,11 @@
+/**
+ * Generated n8n invoker: name -> (args) => result. POSTs to webhook URL.
+ */
+export async function getN8nInvoker(name: string): Promise<(args: Record<string, unknown>) => Promise<unknown>> {
+  return async (args) => {
+    switch (name) {
+{{CASES}}
+    {{DEFAULT_CASE}}
+    }
+  };
+}

package/dist/templates/skill-invoker.js

@@ -0,0 +1,11 @@
+/**
+ * Generated skill invoker: name -> (args) => result. Loads handler from project.
+ */
+export async function getSkillInvoker(name: string): Promise<(args: Record<string, unknown>) => Promise<unknown>> {
+  return async (args) => {
+    switch (name) {
+{{CASES}}
+    {{DEFAULT_CASE}}
+    }
+  };
+}

package/dist/templates/tool-index.js

@@ -0,0 +1,9 @@
+/**
+ * Generated tool index: name -> handler (function tools only).
+ */
+export async function getHandler(name: string): Promise<(args: Record<string, unknown>) => Promise<unknown>> {
+  switch (name) {
+{{CASES}}
+    default: throw new Error("Unknown tool: " + name);
+  }
+}

package/dist/toolDescriptor.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Tool descriptor format: npm:@scope/package#toolPath
+ * Example: npm:@easynet/agent-tool-builtin-tools#fs.readText → core/fs.readText
+ */
+export interface NpmToolDescriptor {
+    /** Full package id, e.g. @easynet/agent-tool-builtin-tools */
+    fullPackage: string;
+    /** Tool path after #, e.g. fs.readText or core/fs.readText */
+    toolPath: string;
+}
+/**
+ * Check if a string is an npm tool descriptor (npm:@scope/package#path).
+ */
+export declare function isNpmToolDescriptor(descriptor: string): boolean;
+/**
+ * Parse npm tool descriptor into { fullPackage, toolPath } or null.
+ * Format: npm:@scope/packageName#toolPath
+ * Example: npm:@easynet/agent-tool-builtin-tools#fs.readText
+ */
+export declare function parseNpmToolDescriptor(descriptor: string): NpmToolDescriptor | null;
+/**
+ * Resolve an npm tool descriptor to the registry tool name.
+ * For known packages we map package + toolPath to the registered name (e.g. core/fs.readText).
+ * If toolPath already starts with the package prefix, it is used as-is; otherwise prefix is prepended.
+ * Returns null for unknown packages (caller may try dynamic require in the future).
+ */
+export declare function resolveNpmToolDescriptor(descriptor: string): string | null;
+/**
+ * Resolve a single tool descriptor to a tool name.
+ * If it is an npm descriptor, resolve it; otherwise return the string as-is (plain tool name).
+ */
+export declare function resolveToolDescriptor(descriptor: string): string;
+/**
+ * Normalize a list of tool descriptors (plain names or npm:@scope/package#path) to tool names.
+ * Deduplicates and preserves order.
+ */
+export declare function normalizeToolList(descriptors: string[]): string[];
+//# sourceMappingURL=toolDescriptor.d.ts.map

package/dist/toolDescriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolDescriptor.d.ts","sourceRoot":"","sources":["../src/toolDescriptor.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,MAAM,WAAW,iBAAiB;IAChC,8DAA8D;IAC9D,WAAW,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAKnF;AAUD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQ1E;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAKhE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAYjE"}

package/dist/types/Events.d.ts

@@ -0,0 +1,99 @@
+import type { Evidence, ToolError } from "./ToolResult.js";
+/**
+ * Event types emitted by PTCRuntime and observability layer.
+ */
+export type ToolEventType = "TOOL_CALLED" | "TOOL_RESULT" | "POLICY_DENIED" | "HITL_APPROVAL_REQUESTED" | "HITL_APPROVAL_GRANTED" | "HITL_APPROVAL_DENIED" | "RETRY" | "TIMEOUT" | "BUDGET_EXCEEDED" | "JOB_SUBMITTED" | "JOB_COMPLETED" | "JOB_FAILED";
+/**
+ * Base event structure for all tool events.
+ */
+export interface ToolEvent {
+    type: ToolEventType;
+    timestamp: string;
+    requestId: string;
+    taskId: string;
+    toolName: string;
+    traceId?: string;
+    userId?: string;
+}
+/**
+ * Emitted when a tool is called.
+ */
+export interface ToolCalledEvent extends ToolEvent {
+    type: "TOOL_CALLED";
+    argsSummary: string;
+    purpose: string;
+    idempotencyKey?: string;
+}
+/**
+ * Emitted when a tool returns a result.
+ */
+export interface ToolResultEvent extends ToolEvent {
+    type: "TOOL_RESULT";
+    ok: boolean;
+    durationMs: number;
+    resultSummary: string;
+    evidence: Evidence[];
+    error?: ToolError;
+}
+/**
+ * Emitted when policy denies a tool invocation.
+ */
+export interface PolicyDeniedEvent extends ToolEvent {
+    type: "POLICY_DENIED";
+    reason: string;
+    missingCapabilities?: string[];
+}
+/**
+ * Emitted on retry.
+ */
+export interface RetryEvent extends ToolEvent {
+    type: "RETRY";
+    attempt: number;
+    maxRetries: number;
+    reason: string;
+}
+/**
+ * Emitted when human approval is requested (before execute for external_write/destructive).
+ */
+export interface HitlApprovalRequestedEvent extends ToolEvent {
+    type: "HITL_APPROVAL_REQUESTED";
+    sideEffect: string;
+    argsSummary?: string;
+}
+/**
+ * Emitted when human approves the tool invocation.
+ */
+export interface HitlApprovalGrantedEvent extends ToolEvent {
+    type: "HITL_APPROVAL_GRANTED";
+    sideEffect: string;
+}
+/**
+ * Emitted when human denies the tool invocation.
+ */
+export interface HitlApprovalDeniedEvent extends ToolEvent {
+    type: "HITL_APPROVAL_DENIED";
+    sideEffect: string;
+    reason?: string;
+}
+/**
+ * Async job events.
+ */
+export interface JobSubmittedEvent extends ToolEvent {
+    type: "JOB_SUBMITTED";
+    jobId: string;
+}
+export interface JobCompletedEvent extends ToolEvent {
+    type: "JOB_COMPLETED";
+    jobId: string;
+    durationMs: number;
+}
+export interface JobFailedEvent extends ToolEvent {
+    type: "JOB_FAILED";
+    jobId: string;
+    error: string;
+}
+/**
+ * Union type of all tool events.
+ */
+export type AnyToolEvent = ToolCalledEvent | ToolResultEvent | PolicyDeniedEvent | HitlApprovalRequestedEvent | HitlApprovalGrantedEvent | HitlApprovalDeniedEvent | RetryEvent | JobSubmittedEvent | JobCompletedEvent | JobFailedEvent;
+//# sourceMappingURL=Events.d.ts.map

package/dist/types/Events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Events.d.ts","sourceRoot":"","sources":["../../src/types/Events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE3D;;GAEG;AACH,MAAM,MAAM,aAAa,GACrB,aAAa,GACb,aAAa,GACb,eAAe,GACf,yBAAyB,GACzB,uBAAuB,GACvB,sBAAsB,GACtB,OAAO,GACP,SAAS,GACT,iBAAiB,GACjB,eAAe,GACf,eAAe,GACf,YAAY,CAAC;AAEjB;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD,IAAI,EAAE,aAAa,CAAC;IACpB,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,SAAS;IAClD,IAAI,EAAE,eAAe,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,UAAW,SAAQ,SAAS;IAC3C,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA2B,SAAQ,SAAS;IAC3D,IAAI,EAAE,yBAAyB,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,wBAAyB,SAAQ,SAAS;IACzD,IAAI,EAAE,uBAAuB,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAwB,SAAQ,SAAS;IACxD,IAAI,EAAE,sBAAsB,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,SAAS;IAClD,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAkB,SAAQ,SAAS;IAClD,IAAI,EAAE,eAAe,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAe,SAAQ,SAAS;IAC/C,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GACpB,eAAe,GACf,eAAe,GACf,iBAAiB,GACjB,0BAA0B,GAC1B,wBAAwB,GACxB,uBAAuB,GACvB,UAAU,GACV,iBAAiB,GACjB,iBAAiB,GACjB,cAAc,CAAC"}

package/dist/types/ToolIntent.d.ts

@@ -0,0 +1,40 @@
+import type { Capability } from "./ToolSpec.js";
+/**
+ * Budget constraints for a tool invocation.
+ */
+export interface BudgetConfig {
+    timeoutMs?: number;
+    maxRetries?: number;
+    maxToolCalls?: number;
+}
+/**
+ * Execution context passed from agent-orchestra.
+ * Contains permissions, budget, and observability context.
+ */
+export interface ExecContext {
+    requestId: string;
+    taskId: string;
+    /** Allowed capabilities for this invocation */
+    permissions: Capability[];
+    budget?: BudgetConfig;
+    /** OpenTelemetry-compatible trace ID */
+    traceId?: string;
+    userId?: string;
+    /** Optional: enable dry-run mode for two-phase commit */
+    dryRun?: boolean;
+}
+/**
+ * Tool invocation intent from agent-orchestra.
+ * Represents what the agent wants to do (untrusted input).
+ */
+export interface ToolIntent {
+    /** ToolSpec.name reference */
+    tool: string;
+    /** Untrusted input arguments */
+    args: unknown;
+    /** Human-readable purpose for audit trail */
+    purpose: string;
+    /** Idempotency key: recommended format requestId:taskId:tool */
+    idempotencyKey?: string;
+}
+//# sourceMappingURL=ToolIntent.d.ts.map

package/dist/types/ToolIntent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolIntent.d.ts","sourceRoot":"","sources":["../../src/types/ToolIntent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IAEf,+CAA+C;IAC/C,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,YAAY,CAAC;IAEtB,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,yDAAyD;IACzD,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,6CAA6C;IAC7C,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB"}