@flanksource/clicky-ui 0.3.25 → 0.3.26

package/dist/data/chat/tool-policy.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-policy.cjs","sources":["../../../src/data/chat/tool-policy.ts"],"sourcesContent":["import type { ToolMeta, ToolPolicy } from \"./types\";\nimport { normalizeToolPolicy } from \"./types\";\n\n/** The client half of Captain's ordered tool-permission policy.\n *\n *  A tool's authority is decided by an ordered rule list evaluated\n *  last-match-wins: weakest rule first, strongest last. The layers this file\n *  composes are the surface's rules (what the page the chat opened on declares)\n *  followed by the user's own (what they toggled in the preferences popover), so\n *  a toggle beats the surface and the surface beats the application's baseline —\n *  which the server appends underneath both.\n *\n *  The matching is a port of Go's `commons/collections.MatchItems`, and it is a\n *  port rather than a re-interpretation on purpose: the same rule list is\n *  evaluated on both sides of the wire — here to render what a tool will do, and\n *  on the server to enforce it — and a client that disagreed would show a state\n *  the request does not produce. */\n\n/** A glob pattern list. A bare string is one pattern, so a rule can be written\n *  `{ group: \"provider.xero.*\" }` without list ceremony. */\nexport type MatchPatterns = string | string[];\n\n/** Which tools a rule applies to. Every declared facet must match (AND across\n *  facets); within one facet the patterns are alternatives (OR). An undeclared\n *  facet does not constrain. */\nexport type ToolMatch = {\n  name?: MatchPatterns;\n  group?: MatchPatterns;\n  parent?: MatchPatterns;\n  entity?: MatchPatterns;\n  action?: MatchPatterns;\n  verb?: MatchPatterns;\n  method?: MatchPatterns;\n  scope?: MatchPatterns;\n  /** A declared hint requires the tool to declare the same hint with the same\n   *  value. An undeclared hint on the tool does NOT match: \"this tool never said\n   *  whether it is read-only\" and \"this tool said it is not\" are different\n   *  claims, and reading the first as the second is how an unannotated tool\n   *  would inherit a permissive rule. */\n  readOnly?: boolean;\n  destructive?: boolean;\n  idempotent?: boolean;\n};\n\n/** One ordered rule: the tools it selects and the authority they get. */\nexport type PermissionRule = ToolMatch & { policy: ToolPolicy };\n\n/** The ordered rule list, evaluated last-match-wins. */\nexport type PermissionPolicy = PermissionRule[];\n\nconst MATCH_FACETS = [\n  \"name\",\n  \"group\",\n  \"parent\",\n  \"entity\",\n  \"action\",\n  \"verb\",\n  \"method\",\n  \"scope\",\n] as const;\n\n/** Reports whether `item` satisfies these patterns, following MatchItems:\n *  `!` negates and takes precedence over any positive match, `*` wildcards a\n *  prefix, suffix or the whole item, matching is case-insensitive, and one\n *  string may carry comma-separated alternatives. An empty list matches\n *  everything — an undeclared facet imposes no constraint. */\nexport function matchItems(\n  item: string,\n  patterns: MatchPatterns | undefined,\n): boolean {\n  const normalized = normalizePatterns(patterns);\n  if (normalized.length === 0) return true;\n  // Exclusions are checked first so `!` wins however the rule was written:\n  // [\"a*\", \"!abc\"] must reject \"abc\" rather than accept it on the wildcard.\n  const sorted = [...normalized].sort(\n    (a, b) => exclusionRank(a) - exclusionRank(b),\n  );\n  for (const pattern of sorted) {\n    if (pattern.startsWith(\"!\")) {\n      if (matchPattern(item, pattern.slice(1))) return false;\n      continue;\n    }\n    if (matchPattern(item, pattern)) return true;\n  }\n  // Every pattern excluded and none of them matched, so the item is admitted.\n  return sorted.every((pattern) => pattern.startsWith(\"!\"));\n}\n\nfunction normalizePatterns(patterns: MatchPatterns | undefined): string[] {\n  if (patterns === undefined) return [];\n  const list = typeof patterns === \"string\" ? [patterns] : patterns;\n  const out: string[] = [];\n  for (const raw of list) {\n    if (typeof raw !== \"string\") continue;\n    const parts = raw.split(\",\");\n    for (const part of parts) {\n      const trimmed = part.trim();\n      if (trimmed === \"\" && parts.length > 1) continue;\n      if (trimmed !== \"\") out.push(trimmed);\n    }\n  }\n  return out;\n}\n\nfunction exclusionRank(pattern: string): number {\n  if (pattern === \"!*\") return 0;\n  return pattern.startsWith(\"!\") ? 1 : 2;\n}\n\nfunction matchPattern(item: string, pattern: string): boolean {\n  if (pattern === \"*\") return true;\n  const value = item.toLowerCase();\n  const glob = pattern.toLowerCase();\n  if (value === glob) return true;\n  if (glob.startsWith(\"*\") && glob.endsWith(\"*\")) {\n    if (value.includes(glob.slice(1, -1))) return true;\n  }\n  if (glob.startsWith(\"*\") && value.endsWith(glob.slice(1))) return true;\n  if (glob.endsWith(\"*\") && value.startsWith(glob.slice(0, -1))) return true;\n  return false;\n}\n\n/** Resolves the authority for one tool: the policy of the LAST rule that\n *  matches it, or undefined when no rule does.\n *\n *  Last, not first, because the list runs weakest to strongest — a user rule\n *  appended after a surface rule is meant to win. A first-match-wins reading\n *  would invert the whole contract. */\nexport function resolveToolPolicy(\n  policy: PermissionPolicy | undefined,\n  tool: ToolMeta,\n): ToolPolicy | undefined {\n  let resolved: ToolPolicy | undefined;\n  for (const rule of policy ?? []) {\n    if (matchesTool(rule, tool)) resolved = rule.policy;\n  }\n  return resolved;\n}\n\nexport function matchesTool(match: ToolMatch, tool: ToolMeta): boolean {\n  const facets: Record<(typeof MATCH_FACETS)[number], string> = {\n    name: tool.name ?? \"\",\n    group: tool.group ?? \"\",\n    parent: tool.parent ?? \"\",\n    entity: tool.entity ?? \"\",\n    action: tool.action ?? \"\",\n    verb: tool.verb ?? \"\",\n    method: tool.method ?? \"\",\n    scope: tool.scope ?? \"\",\n  };\n  for (const facet of MATCH_FACETS) {\n    if (!matchItems(facets[facet], match[facet])) return false;\n  }\n  return (\n    matchesHint(match.readOnly, tool.annotations?.readOnlyHint) &&\n    matchesHint(match.destructive, tool.annotations?.destructiveHint) &&\n    matchesHint(match.idempotent, tool.annotations?.idempotentHint)\n  );\n}\n\nfunction matchesHint(want: boolean | undefined, have: boolean | undefined) {\n  if (want === undefined) return true;\n  return have !== undefined && have === want;\n}\n\n/** Lowers a flat tool→policy map into ordered rules, so the legacy shape and the\n *  rule list share one evaluation path instead of two that can disagree.\n *\n *  A key is ambiguous — it may name a tool or its group — so each key emits both\n *  a group rule and a name rule, with every group rule placed before every name\n *  rule. A key that names a group matches no tool name and vice versa, so the\n *  ambiguity costs nothing; and where a key is both, the name rule comes later\n *  and wins. That is exactly the precedence the popover needs, where a per-tool\n *  toggle must beat the group toggle above it.\n *\n *  Keys are sorted so the request body is stable: an unstable order would make\n *  every render look like a changed request. */\nexport function toolPolicyFromPreferences(\n  prefs: Record<string, ToolPolicy> | undefined,\n): PermissionPolicy {\n  const keys = Object.keys(prefs ?? {})\n    .filter((key) => key.trim() !== \"\")\n    .sort();\n  if (keys.length === 0) return [];\n  const policies = new Map<string, ToolPolicy>();\n  for (const key of keys) {\n    const policy = normalizeToolPolicy(prefs?.[key]);\n    if (policy) policies.set(key, policy);\n  }\n  const ordered = [...policies.keys()];\n  return [\n    ...ordered.map((key) => ({ group: key, policy: policies.get(key)! })),\n    ...ordered.map((key) => ({ name: key, policy: policies.get(key)! })),\n  ];\n}\n\n/** Appends `later` onto `earlier`, the later winning. Composition rather than\n *  mutation, so one caller's user rules cannot leak into another's. */\nexport function appendToolPolicy(\n  earlier: PermissionPolicy | undefined,\n  later: PermissionPolicy | undefined,\n): PermissionPolicy {\n  return [...(earlier ?? []), ...(later ?? [])];\n}\n\n/** Parses a rule list off the wire, dropping anything malformed rather than\n *  letting it silently become the last word on every tool: a rule with no facet\n *  matches everything, and being last-match-wins that is the one mistake with\n *  unbounded reach. */\nexport function normalizeToolPolicyRules(value: unknown): PermissionPolicy {\n  if (!Array.isArray(value)) return [];\n  const rules: PermissionPolicy = [];\n  for (const raw of value) {\n    if (!raw || typeof raw !== \"object\" || Array.isArray(raw)) continue;\n    const item = raw as Record<string, unknown>;\n    const policy = normalizeToolPolicy(item.policy);\n    if (!policy) continue;\n    const match: ToolMatch = {};\n    for (const facet of MATCH_FACETS) {\n      const patterns = normalizePatterns(item[facet] as MatchPatterns);\n      if (patterns.length > 0) match[facet] = patterns;\n    }\n    for (const hint of [\"readOnly\", \"destructive\", \"idempotent\"] as const) {\n      if (typeof item[hint] === \"boolean\") match[hint] = item[hint] as boolean;\n    }\n    if (Object.keys(match).length === 0) continue;\n    rules.push({ ...match, policy });\n  }\n  return rules;\n}\n"],"names":["normalizeToolPolicy"],"mappings":";;;AAkDA,MAAM,eAAe;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAOO,SAAS,WACd,MACA,UACS;AACT,QAAM,aAAa,kBAAkB,QAAQ;AAC7C,MAAI,WAAW,WAAW,EAAG,QAAO;AAGpC,QAAM,SAAS,CAAC,GAAG,UAAU,EAAE;AAAA,IAC7B,CAAC,GAAG,MAAM,cAAc,CAAC,IAAI,cAAc,CAAC;AAAA,EAAA;AAE9C,aAAW,WAAW,QAAQ;AAC5B,QAAI,QAAQ,WAAW,GAAG,GAAG;AAC3B,UAAI,aAAa,MAAM,QAAQ,MAAM,CAAC,CAAC,EAAG,QAAO;AACjD;AAAA,IACF;AACA,QAAI,aAAa,MAAM,OAAO,EAAG,QAAO;AAAA,EAC1C;AAEA,SAAO,OAAO,MAAM,CAAC,YAAY,QAAQ,WAAW,GAAG,CAAC;AAC1D;AAEA,SAAS,kBAAkB,UAA+C;AACxE,MAAI,aAAa,OAAW,QAAO,CAAA;AACnC,QAAM,OAAO,OAAO,aAAa,WAAW,CAAC,QAAQ,IAAI;AACzD,QAAM,MAAgB,CAAA;AACtB,aAAW,OAAO,MAAM;AACtB,QAAI,OAAO,QAAQ,SAAU;AAC7B,UAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,eAAW,QAAQ,OAAO;AACxB,YAAM,UAAU,KAAK,KAAA;AACrB,UAAI,YAAY,MAAM,MAAM,SAAS,EAAG;AACxC,UAAI,YAAY,GAAI,KAAI,KAAK,OAAO;AAAA,IACtC;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,cAAc,SAAyB;AAC9C,MAAI,YAAY,KAAM,QAAO;AAC7B,SAAO,QAAQ,WAAW,GAAG,IAAI,IAAI;AACvC;AAEA,SAAS,aAAa,MAAc,SAA0B;AAC5D,MAAI,YAAY,IAAK,QAAO;AAC5B,QAAM,QAAQ,KAAK,YAAA;AACnB,QAAM,OAAO,QAAQ,YAAA;AACrB,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,KAAK,WAAW,GAAG,KAAK,KAAK,SAAS,GAAG,GAAG;AAC9C,QAAI,MAAM,SAAS,KAAK,MAAM,GAAG,EAAE,CAAC,EAAG,QAAO;AAAA,EAChD;AACA,MAAI,KAAK,WAAW,GAAG,KAAK,MAAM,SAAS,KAAK,MAAM,CAAC,CAAC,EAAG,QAAO;AAClE,MAAI,KAAK,SAAS,GAAG,KAAK,MAAM,WAAW,KAAK,MAAM,GAAG,EAAE,CAAC,EAAG,QAAO;AACtE,SAAO;AACT;AAQO,SAAS,kBACd,QACA,MACwB;AACxB,MAAI;AACJ,aAAW,QAAQ,UAAU,IAAI;AAC/B,QAAI,YAAY,MAAM,IAAI,cAAc,KAAK;AAAA,EAC/C;AACA,SAAO;AACT;AAEO,SAAS,YAAY,OAAkB,MAAyB;;AACrE,QAAM,SAAwD;AAAA,IAC5D,MAAM,KAAK,QAAQ;AAAA,IACnB,OAAO,KAAK,SAAS;AAAA,IACrB,QAAQ,KAAK,UAAU;AAAA,IACvB,QAAQ,KAAK,UAAU;AAAA,IACvB,QAAQ,KAAK,UAAU;AAAA,IACvB,MAAM,KAAK,QAAQ;AAAA,IACnB,QAAQ,KAAK,UAAU;AAAA,IACvB,OAAO,KAAK,SAAS;AAAA,EAAA;AAEvB,aAAW,SAAS,cAAc;AAChC,QAAI,CAAC,WAAW,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC,EAAG,QAAO;AAAA,EACvD;AACA,SACE,YAAY,MAAM,WAAU,UAAK,gBAAL,mBAAkB,YAAY,KAC1D,YAAY,MAAM,cAAa,UAAK,gBAAL,mBAAkB,eAAe,KAChE,YAAY,MAAM,aAAY,UAAK,gBAAL,mBAAkB,cAAc;AAElE;AAEA,SAAS,YAAY,MAA2B,MAA2B;AACzE,MAAI,SAAS,OAAW,QAAO;AAC/B,SAAO,SAAS,UAAa,SAAS;AACxC;AAcO,SAAS,0BACd,OACkB;AAClB,QAAM,OAAO,OAAO,KAAK,SAAS,CAAA,CAAE,EACjC,OAAO,CAAC,QAAQ,IAAI,KAAA,MAAW,EAAE,EACjC,KAAA;AACH,MAAI,KAAK,WAAW,EAAG,QAAO,CAAA;AAC9B,QAAM,+BAAe,IAAA;AACrB,aAAW,OAAO,MAAM;AACtB,UAAM,SAASA,MAAAA,oBAAoB,+BAAQ,IAAI;AAC/C,QAAI,OAAQ,UAAS,IAAI,KAAK,MAAM;AAAA,EACtC;AACA,QAAM,UAAU,CAAC,GAAG,SAAS,MAAM;AACnC,SAAO;AAAA,IACL,GAAG,QAAQ,IAAI,CAAC,SAAS,EAAE,OAAO,KAAK,QAAQ,SAAS,IAAI,GAAG,IAAK;AAAA,IACpE,GAAG,QAAQ,IAAI,CAAC,SAAS,EAAE,MAAM,KAAK,QAAQ,SAAS,IAAI,GAAG,IAAK;AAAA,EAAA;AAEvE;AAIO,SAAS,iBACd,SACA,OACkB;AAClB,SAAO,CAAC,GAAI,WAAW,CAAA,GAAK,GAAI,SAAS,CAAA,CAAG;AAC9C;AAMO,SAAS,yBAAyB,OAAkC;AACzE,MAAI,CAAC,MAAM,QAAQ,KAAK,UAAU,CAAA;AAClC,QAAM,QAA0B,CAAA;AAChC,aAAW,OAAO,OAAO;AACvB,QAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG;AAC3D,UAAM,OAAO;AACb,UAAM,SAASA,MAAAA,oBAAoB,KAAK,MAAM;AAC9C,QAAI,CAAC,OAAQ;AACb,UAAM,QAAmB,CAAA;AACzB,eAAW,SAAS,cAAc;AAChC,YAAM,WAAW,kBAAkB,KAAK,KAAK,CAAkB;AAC/D,UAAI,SAAS,SAAS,EAAG,OAAM,KAAK,IAAI;AAAA,IAC1C;AACA,eAAW,QAAQ,CAAC,YAAY,eAAe,YAAY,GAAY;AACrE,UAAI,OAAO,KAAK,IAAI,MAAM,UAAW,OAAM,IAAI,IAAI,KAAK,IAAI;AAAA,IAC9D;AACA,QAAI,OAAO,KAAK,KAAK,EAAE,WAAW,EAAG;AACrC,UAAM,KAAK,EAAE,GAAG,OAAO,QAAQ;AAAA,EACjC;AACA,SAAO;AACT;;;;;;;"}

package/dist/data/chat/tool-policy.d.ts

@@ -0,0 +1,81 @@
+import { ToolMeta, ToolPolicy } from './types';
+/** The client half of Captain's ordered tool-permission policy.
+ *
+ *  A tool's authority is decided by an ordered rule list evaluated
+ *  last-match-wins: weakest rule first, strongest last. The layers this file
+ *  composes are the surface's rules (what the page the chat opened on declares)
+ *  followed by the user's own (what they toggled in the preferences popover), so
+ *  a toggle beats the surface and the surface beats the application's baseline —
+ *  which the server appends underneath both.
+ *
+ *  The matching is a port of Go's `commons/collections.MatchItems`, and it is a
+ *  port rather than a re-interpretation on purpose: the same rule list is
+ *  evaluated on both sides of the wire — here to render what a tool will do, and
+ *  on the server to enforce it — and a client that disagreed would show a state
+ *  the request does not produce. */
+/** A glob pattern list. A bare string is one pattern, so a rule can be written
+ *  `{ group: "provider.xero.*" }` without list ceremony. */
+export type MatchPatterns = string | string[];
+/** Which tools a rule applies to. Every declared facet must match (AND across
+ *  facets); within one facet the patterns are alternatives (OR). An undeclared
+ *  facet does not constrain. */
+export type ToolMatch = {
+    name?: MatchPatterns;
+    group?: MatchPatterns;
+    parent?: MatchPatterns;
+    entity?: MatchPatterns;
+    action?: MatchPatterns;
+    verb?: MatchPatterns;
+    method?: MatchPatterns;
+    scope?: MatchPatterns;
+    /** A declared hint requires the tool to declare the same hint with the same
+     *  value. An undeclared hint on the tool does NOT match: "this tool never said
+     *  whether it is read-only" and "this tool said it is not" are different
+     *  claims, and reading the first as the second is how an unannotated tool
+     *  would inherit a permissive rule. */
+    readOnly?: boolean;
+    destructive?: boolean;
+    idempotent?: boolean;
+};
+/** One ordered rule: the tools it selects and the authority they get. */
+export type PermissionRule = ToolMatch & {
+    policy: ToolPolicy;
+};
+/** The ordered rule list, evaluated last-match-wins. */
+export type PermissionPolicy = PermissionRule[];
+/** Reports whether `item` satisfies these patterns, following MatchItems:
+ *  `!` negates and takes precedence over any positive match, `*` wildcards a
+ *  prefix, suffix or the whole item, matching is case-insensitive, and one
+ *  string may carry comma-separated alternatives. An empty list matches
+ *  everything — an undeclared facet imposes no constraint. */
+export declare function matchItems(item: string, patterns: MatchPatterns | undefined): boolean;
+/** Resolves the authority for one tool: the policy of the LAST rule that
+ *  matches it, or undefined when no rule does.
+ *
+ *  Last, not first, because the list runs weakest to strongest — a user rule
+ *  appended after a surface rule is meant to win. A first-match-wins reading
+ *  would invert the whole contract. */
+export declare function resolveToolPolicy(policy: PermissionPolicy | undefined, tool: ToolMeta): ToolPolicy | undefined;
+export declare function matchesTool(match: ToolMatch, tool: ToolMeta): boolean;
+/** Lowers a flat tool→policy map into ordered rules, so the legacy shape and the
+ *  rule list share one evaluation path instead of two that can disagree.
+ *
+ *  A key is ambiguous — it may name a tool or its group — so each key emits both
+ *  a group rule and a name rule, with every group rule placed before every name
+ *  rule. A key that names a group matches no tool name and vice versa, so the
+ *  ambiguity costs nothing; and where a key is both, the name rule comes later
+ *  and wins. That is exactly the precedence the popover needs, where a per-tool
+ *  toggle must beat the group toggle above it.
+ *
+ *  Keys are sorted so the request body is stable: an unstable order would make
+ *  every render look like a changed request. */
+export declare function toolPolicyFromPreferences(prefs: Record<string, ToolPolicy> | undefined): PermissionPolicy;
+/** Appends `later` onto `earlier`, the later winning. Composition rather than
+ *  mutation, so one caller's user rules cannot leak into another's. */
+export declare function appendToolPolicy(earlier: PermissionPolicy | undefined, later: PermissionPolicy | undefined): PermissionPolicy;
+/** Parses a rule list off the wire, dropping anything malformed rather than
+ *  letting it silently become the last word on every tool: a rule with no facet
+ *  matches everything, and being last-match-wins that is the one mistake with
+ *  unbounded reach. */
+export declare function normalizeToolPolicyRules(value: unknown): PermissionPolicy;
+//# sourceMappingURL=tool-policy.d.ts.map

package/dist/data/chat/tool-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-policy.d.ts","sourceRoot":"","sources":["../../../src/data/chat/tool-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGpD;;;;;;;;;;;;;oCAaoC;AAEpC;4DAC4D;AAC5D,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAE9C;;gCAEgC;AAChC,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB;;;;2CAIuC;IACvC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,yEAAyE;AACzE,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,CAAC;AAEhE,wDAAwD;AACxD,MAAM,MAAM,gBAAgB,GAAG,cAAc,EAAE,CAAC;AAahD;;;;8DAI8D;AAC9D,wBAAgB,UAAU,CACxB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,aAAa,GAAG,SAAS,GAClC,OAAO,CAiBT;AAoCD;;;;;uCAKuC;AACvC,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,gBAAgB,GAAG,SAAS,EACpC,IAAI,EAAE,QAAQ,GACb,UAAU,GAAG,SAAS,CAMxB;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAmBrE;AAOD;;;;;;;;;;;gDAWgD;AAChD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,SAAS,GAC5C,gBAAgB,CAelB;AAED;uEACuE;AACvE,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,gBAAgB,GAAG,SAAS,EACrC,KAAK,EAAE,gBAAgB,GAAG,SAAS,GAClC,gBAAgB,CAElB;AAED;;;uBAGuB;AACvB,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAoBzE"}

package/dist/data/chat/tool-policy.js

@@ -0,0 +1,132 @@
+import { normalizeToolPolicy } from "./types.js";
+const MATCH_FACETS = [
+  "name",
+  "group",
+  "parent",
+  "entity",
+  "action",
+  "verb",
+  "method",
+  "scope"
+];
+function matchItems(item, patterns) {
+  const normalized = normalizePatterns(patterns);
+  if (normalized.length === 0) return true;
+  const sorted = [...normalized].sort(
+    (a, b) => exclusionRank(a) - exclusionRank(b)
+  );
+  for (const pattern of sorted) {
+    if (pattern.startsWith("!")) {
+      if (matchPattern(item, pattern.slice(1))) return false;
+      continue;
+    }
+    if (matchPattern(item, pattern)) return true;
+  }
+  return sorted.every((pattern) => pattern.startsWith("!"));
+}
+function normalizePatterns(patterns) {
+  if (patterns === void 0) return [];
+  const list = typeof patterns === "string" ? [patterns] : patterns;
+  const out = [];
+  for (const raw of list) {
+    if (typeof raw !== "string") continue;
+    const parts = raw.split(",");
+    for (const part of parts) {
+      const trimmed = part.trim();
+      if (trimmed === "" && parts.length > 1) continue;
+      if (trimmed !== "") out.push(trimmed);
+    }
+  }
+  return out;
+}
+function exclusionRank(pattern) {
+  if (pattern === "!*") return 0;
+  return pattern.startsWith("!") ? 1 : 2;
+}
+function matchPattern(item, pattern) {
+  if (pattern === "*") return true;
+  const value = item.toLowerCase();
+  const glob = pattern.toLowerCase();
+  if (value === glob) return true;
+  if (glob.startsWith("*") && glob.endsWith("*")) {
+    if (value.includes(glob.slice(1, -1))) return true;
+  }
+  if (glob.startsWith("*") && value.endsWith(glob.slice(1))) return true;
+  if (glob.endsWith("*") && value.startsWith(glob.slice(0, -1))) return true;
+  return false;
+}
+function resolveToolPolicy(policy, tool) {
+  let resolved;
+  for (const rule of policy ?? []) {
+    if (matchesTool(rule, tool)) resolved = rule.policy;
+  }
+  return resolved;
+}
+function matchesTool(match, tool) {
+  var _a, _b, _c;
+  const facets = {
+    name: tool.name ?? "",
+    group: tool.group ?? "",
+    parent: tool.parent ?? "",
+    entity: tool.entity ?? "",
+    action: tool.action ?? "",
+    verb: tool.verb ?? "",
+    method: tool.method ?? "",
+    scope: tool.scope ?? ""
+  };
+  for (const facet of MATCH_FACETS) {
+    if (!matchItems(facets[facet], match[facet])) return false;
+  }
+  return matchesHint(match.readOnly, (_a = tool.annotations) == null ? void 0 : _a.readOnlyHint) && matchesHint(match.destructive, (_b = tool.annotations) == null ? void 0 : _b.destructiveHint) && matchesHint(match.idempotent, (_c = tool.annotations) == null ? void 0 : _c.idempotentHint);
+}
+function matchesHint(want, have) {
+  if (want === void 0) return true;
+  return have !== void 0 && have === want;
+}
+function toolPolicyFromPreferences(prefs) {
+  const keys = Object.keys(prefs ?? {}).filter((key) => key.trim() !== "").sort();
+  if (keys.length === 0) return [];
+  const policies = /* @__PURE__ */ new Map();
+  for (const key of keys) {
+    const policy = normalizeToolPolicy(prefs == null ? void 0 : prefs[key]);
+    if (policy) policies.set(key, policy);
+  }
+  const ordered = [...policies.keys()];
+  return [
+    ...ordered.map((key) => ({ group: key, policy: policies.get(key) })),
+    ...ordered.map((key) => ({ name: key, policy: policies.get(key) }))
+  ];
+}
+function appendToolPolicy(earlier, later) {
+  return [...earlier ?? [], ...later ?? []];
+}
+function normalizeToolPolicyRules(value) {
+  if (!Array.isArray(value)) return [];
+  const rules = [];
+  for (const raw of value) {
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) continue;
+    const item = raw;
+    const policy = normalizeToolPolicy(item.policy);
+    if (!policy) continue;
+    const match = {};
+    for (const facet of MATCH_FACETS) {
+      const patterns = normalizePatterns(item[facet]);
+      if (patterns.length > 0) match[facet] = patterns;
+    }
+    for (const hint of ["readOnly", "destructive", "idempotent"]) {
+      if (typeof item[hint] === "boolean") match[hint] = item[hint];
+    }
+    if (Object.keys(match).length === 0) continue;
+    rules.push({ ...match, policy });
+  }
+  return rules;
+}
+export {
+  appendToolPolicy,
+  matchItems,
+  matchesTool,
+  normalizeToolPolicyRules,
+  resolveToolPolicy,
+  toolPolicyFromPreferences
+};
+//# sourceMappingURL=tool-policy.js.map

package/dist/data/chat/tool-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-policy.js","sources":["../../../src/data/chat/tool-policy.ts"],"sourcesContent":["import type { ToolMeta, ToolPolicy } from \"./types\";\nimport { normalizeToolPolicy } from \"./types\";\n\n/** The client half of Captain's ordered tool-permission policy.\n *\n *  A tool's authority is decided by an ordered rule list evaluated\n *  last-match-wins: weakest rule first, strongest last. The layers this file\n *  composes are the surface's rules (what the page the chat opened on declares)\n *  followed by the user's own (what they toggled in the preferences popover), so\n *  a toggle beats the surface and the surface beats the application's baseline —\n *  which the server appends underneath both.\n *\n *  The matching is a port of Go's `commons/collections.MatchItems`, and it is a\n *  port rather than a re-interpretation on purpose: the same rule list is\n *  evaluated on both sides of the wire — here to render what a tool will do, and\n *  on the server to enforce it — and a client that disagreed would show a state\n *  the request does not produce. */\n\n/** A glob pattern list. A bare string is one pattern, so a rule can be written\n *  `{ group: \"provider.xero.*\" }` without list ceremony. */\nexport type MatchPatterns = string | string[];\n\n/** Which tools a rule applies to. Every declared facet must match (AND across\n *  facets); within one facet the patterns are alternatives (OR). An undeclared\n *  facet does not constrain. */\nexport type ToolMatch = {\n  name?: MatchPatterns;\n  group?: MatchPatterns;\n  parent?: MatchPatterns;\n  entity?: MatchPatterns;\n  action?: MatchPatterns;\n  verb?: MatchPatterns;\n  method?: MatchPatterns;\n  scope?: MatchPatterns;\n  /** A declared hint requires the tool to declare the same hint with the same\n   *  value. An undeclared hint on the tool does NOT match: \"this tool never said\n   *  whether it is read-only\" and \"this tool said it is not\" are different\n   *  claims, and reading the first as the second is how an unannotated tool\n   *  would inherit a permissive rule. */\n  readOnly?: boolean;\n  destructive?: boolean;\n  idempotent?: boolean;\n};\n\n/** One ordered rule: the tools it selects and the authority they get. */\nexport type PermissionRule = ToolMatch & { policy: ToolPolicy };\n\n/** The ordered rule list, evaluated last-match-wins. */\nexport type PermissionPolicy = PermissionRule[];\n\nconst MATCH_FACETS = [\n  \"name\",\n  \"group\",\n  \"parent\",\n  \"entity\",\n  \"action\",\n  \"verb\",\n  \"method\",\n  \"scope\",\n] as const;\n\n/** Reports whether `item` satisfies these patterns, following MatchItems:\n *  `!` negates and takes precedence over any positive match, `*` wildcards a\n *  prefix, suffix or the whole item, matching is case-insensitive, and one\n *  string may carry comma-separated alternatives. An empty list matches\n *  everything — an undeclared facet imposes no constraint. */\nexport function matchItems(\n  item: string,\n  patterns: MatchPatterns | undefined,\n): boolean {\n  const normalized = normalizePatterns(patterns);\n  if (normalized.length === 0) return true;\n  // Exclusions are checked first so `!` wins however the rule was written:\n  // [\"a*\", \"!abc\"] must reject \"abc\" rather than accept it on the wildcard.\n  const sorted = [...normalized].sort(\n    (a, b) => exclusionRank(a) - exclusionRank(b),\n  );\n  for (const pattern of sorted) {\n    if (pattern.startsWith(\"!\")) {\n      if (matchPattern(item, pattern.slice(1))) return false;\n      continue;\n    }\n    if (matchPattern(item, pattern)) return true;\n  }\n  // Every pattern excluded and none of them matched, so the item is admitted.\n  return sorted.every((pattern) => pattern.startsWith(\"!\"));\n}\n\nfunction normalizePatterns(patterns: MatchPatterns | undefined): string[] {\n  if (patterns === undefined) return [];\n  const list = typeof patterns === \"string\" ? [patterns] : patterns;\n  const out: string[] = [];\n  for (const raw of list) {\n    if (typeof raw !== \"string\") continue;\n    const parts = raw.split(\",\");\n    for (const part of parts) {\n      const trimmed = part.trim();\n      if (trimmed === \"\" && parts.length > 1) continue;\n      if (trimmed !== \"\") out.push(trimmed);\n    }\n  }\n  return out;\n}\n\nfunction exclusionRank(pattern: string): number {\n  if (pattern === \"!*\") return 0;\n  return pattern.startsWith(\"!\") ? 1 : 2;\n}\n\nfunction matchPattern(item: string, pattern: string): boolean {\n  if (pattern === \"*\") return true;\n  const value = item.toLowerCase();\n  const glob = pattern.toLowerCase();\n  if (value === glob) return true;\n  if (glob.startsWith(\"*\") && glob.endsWith(\"*\")) {\n    if (value.includes(glob.slice(1, -1))) return true;\n  }\n  if (glob.startsWith(\"*\") && value.endsWith(glob.slice(1))) return true;\n  if (glob.endsWith(\"*\") && value.startsWith(glob.slice(0, -1))) return true;\n  return false;\n}\n\n/** Resolves the authority for one tool: the policy of the LAST rule that\n *  matches it, or undefined when no rule does.\n *\n *  Last, not first, because the list runs weakest to strongest — a user rule\n *  appended after a surface rule is meant to win. A first-match-wins reading\n *  would invert the whole contract. */\nexport function resolveToolPolicy(\n  policy: PermissionPolicy | undefined,\n  tool: ToolMeta,\n): ToolPolicy | undefined {\n  let resolved: ToolPolicy | undefined;\n  for (const rule of policy ?? []) {\n    if (matchesTool(rule, tool)) resolved = rule.policy;\n  }\n  return resolved;\n}\n\nexport function matchesTool(match: ToolMatch, tool: ToolMeta): boolean {\n  const facets: Record<(typeof MATCH_FACETS)[number], string> = {\n    name: tool.name ?? \"\",\n    group: tool.group ?? \"\",\n    parent: tool.parent ?? \"\",\n    entity: tool.entity ?? \"\",\n    action: tool.action ?? \"\",\n    verb: tool.verb ?? \"\",\n    method: tool.method ?? \"\",\n    scope: tool.scope ?? \"\",\n  };\n  for (const facet of MATCH_FACETS) {\n    if (!matchItems(facets[facet], match[facet])) return false;\n  }\n  return (\n    matchesHint(match.readOnly, tool.annotations?.readOnlyHint) &&\n    matchesHint(match.destructive, tool.annotations?.destructiveHint) &&\n    matchesHint(match.idempotent, tool.annotations?.idempotentHint)\n  );\n}\n\nfunction matchesHint(want: boolean | undefined, have: boolean | undefined) {\n  if (want === undefined) return true;\n  return have !== undefined && have === want;\n}\n\n/** Lowers a flat tool→policy map into ordered rules, so the legacy shape and the\n *  rule list share one evaluation path instead of two that can disagree.\n *\n *  A key is ambiguous — it may name a tool or its group — so each key emits both\n *  a group rule and a name rule, with every group rule placed before every name\n *  rule. A key that names a group matches no tool name and vice versa, so the\n *  ambiguity costs nothing; and where a key is both, the name rule comes later\n *  and wins. That is exactly the precedence the popover needs, where a per-tool\n *  toggle must beat the group toggle above it.\n *\n *  Keys are sorted so the request body is stable: an unstable order would make\n *  every render look like a changed request. */\nexport function toolPolicyFromPreferences(\n  prefs: Record<string, ToolPolicy> | undefined,\n): PermissionPolicy {\n  const keys = Object.keys(prefs ?? {})\n    .filter((key) => key.trim() !== \"\")\n    .sort();\n  if (keys.length === 0) return [];\n  const policies = new Map<string, ToolPolicy>();\n  for (const key of keys) {\n    const policy = normalizeToolPolicy(prefs?.[key]);\n    if (policy) policies.set(key, policy);\n  }\n  const ordered = [...policies.keys()];\n  return [\n    ...ordered.map((key) => ({ group: key, policy: policies.get(key)! })),\n    ...ordered.map((key) => ({ name: key, policy: policies.get(key)! })),\n  ];\n}\n\n/** Appends `later` onto `earlier`, the later winning. Composition rather than\n *  mutation, so one caller's user rules cannot leak into another's. */\nexport function appendToolPolicy(\n  earlier: PermissionPolicy | undefined,\n  later: PermissionPolicy | undefined,\n): PermissionPolicy {\n  return [...(earlier ?? []), ...(later ?? [])];\n}\n\n/** Parses a rule list off the wire, dropping anything malformed rather than\n *  letting it silently become the last word on every tool: a rule with no facet\n *  matches everything, and being last-match-wins that is the one mistake with\n *  unbounded reach. */\nexport function normalizeToolPolicyRules(value: unknown): PermissionPolicy {\n  if (!Array.isArray(value)) return [];\n  const rules: PermissionPolicy = [];\n  for (const raw of value) {\n    if (!raw || typeof raw !== \"object\" || Array.isArray(raw)) continue;\n    const item = raw as Record<string, unknown>;\n    const policy = normalizeToolPolicy(item.policy);\n    if (!policy) continue;\n    const match: ToolMatch = {};\n    for (const facet of MATCH_FACETS) {\n      const patterns = normalizePatterns(item[facet] as MatchPatterns);\n      if (patterns.length > 0) match[facet] = patterns;\n    }\n    for (const hint of [\"readOnly\", \"destructive\", \"idempotent\"] as const) {\n      if (typeof item[hint] === \"boolean\") match[hint] = item[hint] as boolean;\n    }\n    if (Object.keys(match).length === 0) continue;\n    rules.push({ ...match, policy });\n  }\n  return rules;\n}\n"],"names":[],"mappings":";AAkDA,MAAM,eAAe;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAOO,SAAS,WACd,MACA,UACS;AACT,QAAM,aAAa,kBAAkB,QAAQ;AAC7C,MAAI,WAAW,WAAW,EAAG,QAAO;AAGpC,QAAM,SAAS,CAAC,GAAG,UAAU,EAAE;AAAA,IAC7B,CAAC,GAAG,MAAM,cAAc,CAAC,IAAI,cAAc,CAAC;AAAA,EAAA;AAE9C,aAAW,WAAW,QAAQ;AAC5B,QAAI,QAAQ,WAAW,GAAG,GAAG;AAC3B,UAAI,aAAa,MAAM,QAAQ,MAAM,CAAC,CAAC,EAAG,QAAO;AACjD;AAAA,IACF;AACA,QAAI,aAAa,MAAM,OAAO,EAAG,QAAO;AAAA,EAC1C;AAEA,SAAO,OAAO,MAAM,CAAC,YAAY,QAAQ,WAAW,GAAG,CAAC;AAC1D;AAEA,SAAS,kBAAkB,UAA+C;AACxE,MAAI,aAAa,OAAW,QAAO,CAAA;AACnC,QAAM,OAAO,OAAO,aAAa,WAAW,CAAC,QAAQ,IAAI;AACzD,QAAM,MAAgB,CAAA;AACtB,aAAW,OAAO,MAAM;AACtB,QAAI,OAAO,QAAQ,SAAU;AAC7B,UAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,eAAW,QAAQ,OAAO;AACxB,YAAM,UAAU,KAAK,KAAA;AACrB,UAAI,YAAY,MAAM,MAAM,SAAS,EAAG;AACxC,UAAI,YAAY,GAAI,KAAI,KAAK,OAAO;AAAA,IACtC;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,cAAc,SAAyB;AAC9C,MAAI,YAAY,KAAM,QAAO;AAC7B,SAAO,QAAQ,WAAW,GAAG,IAAI,IAAI;AACvC;AAEA,SAAS,aAAa,MAAc,SAA0B;AAC5D,MAAI,YAAY,IAAK,QAAO;AAC5B,QAAM,QAAQ,KAAK,YAAA;AACnB,QAAM,OAAO,QAAQ,YAAA;AACrB,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,KAAK,WAAW,GAAG,KAAK,KAAK,SAAS,GAAG,GAAG;AAC9C,QAAI,MAAM,SAAS,KAAK,MAAM,GAAG,EAAE,CAAC,EAAG,QAAO;AAAA,EAChD;AACA,MAAI,KAAK,WAAW,GAAG,KAAK,MAAM,SAAS,KAAK,MAAM,CAAC,CAAC,EAAG,QAAO;AAClE,MAAI,KAAK,SAAS,GAAG,KAAK,MAAM,WAAW,KAAK,MAAM,GAAG,EAAE,CAAC,EAAG,QAAO;AACtE,SAAO;AACT;AAQO,SAAS,kBACd,QACA,MACwB;AACxB,MAAI;AACJ,aAAW,QAAQ,UAAU,IAAI;AAC/B,QAAI,YAAY,MAAM,IAAI,cAAc,KAAK;AAAA,EAC/C;AACA,SAAO;AACT;AAEO,SAAS,YAAY,OAAkB,MAAyB;;AACrE,QAAM,SAAwD;AAAA,IAC5D,MAAM,KAAK,QAAQ;AAAA,IACnB,OAAO,KAAK,SAAS;AAAA,IACrB,QAAQ,KAAK,UAAU;AAAA,IACvB,QAAQ,KAAK,UAAU;AAAA,IACvB,QAAQ,KAAK,UAAU;AAAA,IACvB,MAAM,KAAK,QAAQ;AAAA,IACnB,QAAQ,KAAK,UAAU;AAAA,IACvB,OAAO,KAAK,SAAS;AAAA,EAAA;AAEvB,aAAW,SAAS,cAAc;AAChC,QAAI,CAAC,WAAW,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC,EAAG,QAAO;AAAA,EACvD;AACA,SACE,YAAY,MAAM,WAAU,UAAK,gBAAL,mBAAkB,YAAY,KAC1D,YAAY,MAAM,cAAa,UAAK,gBAAL,mBAAkB,eAAe,KAChE,YAAY,MAAM,aAAY,UAAK,gBAAL,mBAAkB,cAAc;AAElE;AAEA,SAAS,YAAY,MAA2B,MAA2B;AACzE,MAAI,SAAS,OAAW,QAAO;AAC/B,SAAO,SAAS,UAAa,SAAS;AACxC;AAcO,SAAS,0BACd,OACkB;AAClB,QAAM,OAAO,OAAO,KAAK,SAAS,CAAA,CAAE,EACjC,OAAO,CAAC,QAAQ,IAAI,KAAA,MAAW,EAAE,EACjC,KAAA;AACH,MAAI,KAAK,WAAW,EAAG,QAAO,CAAA;AAC9B,QAAM,+BAAe,IAAA;AACrB,aAAW,OAAO,MAAM;AACtB,UAAM,SAAS,oBAAoB,+BAAQ,IAAI;AAC/C,QAAI,OAAQ,UAAS,IAAI,KAAK,MAAM;AAAA,EACtC;AACA,QAAM,UAAU,CAAC,GAAG,SAAS,MAAM;AACnC,SAAO;AAAA,IACL,GAAG,QAAQ,IAAI,CAAC,SAAS,EAAE,OAAO,KAAK,QAAQ,SAAS,IAAI,GAAG,IAAK;AAAA,IACpE,GAAG,QAAQ,IAAI,CAAC,SAAS,EAAE,MAAM,KAAK,QAAQ,SAAS,IAAI,GAAG,IAAK;AAAA,EAAA;AAEvE;AAIO,SAAS,iBACd,SACA,OACkB;AAClB,SAAO,CAAC,GAAI,WAAW,CAAA,GAAK,GAAI,SAAS,CAAA,CAAG;AAC9C;AAMO,SAAS,yBAAyB,OAAkC;AACzE,MAAI,CAAC,MAAM,QAAQ,KAAK,UAAU,CAAA;AAClC,QAAM,QAA0B,CAAA;AAChC,aAAW,OAAO,OAAO;AACvB,QAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG;AAC3D,UAAM,OAAO;AACb,UAAM,SAAS,oBAAoB,KAAK,MAAM;AAC9C,QAAI,CAAC,OAAQ;AACb,UAAM,QAAmB,CAAA;AACzB,eAAW,SAAS,cAAc;AAChC,YAAM,WAAW,kBAAkB,KAAK,KAAK,CAAkB;AAC/D,UAAI,SAAS,SAAS,EAAG,OAAM,KAAK,IAAI;AAAA,IAC1C;AACA,eAAW,QAAQ,CAAC,YAAY,eAAe,YAAY,GAAY;AACrE,UAAI,OAAO,KAAK,IAAI,MAAM,UAAW,OAAM,IAAI,IAAI,KAAK,IAAI;AAAA,IAC9D;AACA,QAAI,OAAO,KAAK,KAAK,EAAE,WAAW,EAAG;AACrC,UAAM,KAAK,EAAE,GAAG,OAAO,QAAQ;AAAA,EACjC;AACA,SAAO;AACT;"}

package/dist/data/chat/types.cjs

@@ -52,6 +52,25 @@ const CLAUDE_PERMISSION_MODE_OPTIONS = [
     description: "Bypass permission checks when explicitly allowed by the host."
   }
 ];
+function normalizeToolPolicy(value) {
+  if (typeof value !== "string") return void 0;
+  switch (value.trim().toLowerCase()) {
+    case "allow":
+    case "on":
+    case "enabled":
+      return "allow";
+    case "ask":
+      return "ask";
+    case "deny":
+    case "off":
+    case "disabled":
+      return "deny";
+    case "auto":
+      return "auto";
+    default:
+      return void 0;
+  }
+}
 function isDynamicToolPart(part) {
   return part.type === "dynamic-tool";
 }
@@ -70,6 +89,7 @@ exports.isDynamicToolPart = isDynamicToolPart;
 exports.isFilePart = isFilePart;
 exports.isReasoningPart = isReasoningPart;
 exports.isTypedToolPart = isTypedToolPart;
+exports.normalizeToolPolicy = normalizeToolPolicy;
 exports.suggestionLabel = suggestionLabel;
 exports.suggestionPrompt = suggestionPrompt;
 exports.toolPartName = toolPartName;

package/dist/data/chat/types.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.cjs","sources":["../../../src/data/chat/types.ts"],"sourcesContent":["import type {\n  UIMessage,\n  ToolUIPart,\n  DynamicToolUIPart,\n  ChatStatus,\n  ReasoningUIPart,\n  FileUIPart,\n} from \"ai\";\nimport type { ReactNode } from \"react\";\nimport type {\n  JsonSchemaObject,\n  JsonSchemaProperty as FormJsonSchemaProperty,\n} from \"../../components/json-schema-form-types\";\n\nexport type {\n  UIMessage,\n  ToolUIPart,\n  DynamicToolUIPart,\n  ChatStatus,\n  ReasoningUIPart,\n  FileUIPart,\n};\n\n/** A selectable chat model, as served by the backend's GET /api/chat/models.\n *  `configured` is false for catalogued models whose provider has no API key. */\nexport interface ChatModelRuntime {\n  model?: string;\n  id?: string;\n  backend?: string;\n  mode?: string;\n  temperature?: number;\n  effort?: string;\n  noCache?: boolean;\n  fallbacks?: ChatModelRuntime[];\n}\n\nexport type RuntimeAvailabilityState =\n  | \"available\"\n  | \"disabled\"\n  | \"missing_credentials\"\n  | \"not_authenticated\"\n  | \"missing_executable\"\n  | \"missing_dependency\"\n  | \"unsupported\"\n  | \"unavailable\";\n\nexport interface RuntimeAvailability {\n  state: RuntimeAvailabilityState;\n  reason?: string;\n  remediation?: string;\n}\n\nexport interface ChatModel {\n  id: string;\n  provider: string;\n  label: string;\n  /** Exact Captain Model wire value submitted when this display row is selected. */\n  runtime?: ChatModelRuntime;\n  reasoning: boolean;\n  /** True when backend metadata is authoritative, including explicit unsupported values. */\n  capabilitiesKnown?: boolean;\n  /** Ordered reasoning-effort tiers accepted by this exact model. */\n  supportedEfforts?: string[];\n  /** Backend-recommended effort used when the current selection is invalid. */\n  defaultEffort?: string;\n  /** Whether the model honours the temperature sampling control. */\n  temperature?: boolean;\n  configured?: boolean;\n  availability?: RuntimeAvailability;\n  /**\n   * The catalog's own declared default — the row a picker seeds with when the\n   * caller names no model. At most one row carries it, and a catalog that\n   * declares none (or whose default is unconfigured) falls back to the first\n   * configured row.\n   */\n  default?: boolean;\n  /** Concrete runtime backends that advertised this model. Empty/omitted means provider-wide. */\n  backends?: string[];\n  /** Max context tokens — the denominator for a usage gauge. */\n  contextWindow?: number;\n  /** MIME patterns accepted as model inputs, e.g. image/* or application/pdf. */\n  inputMediaTypes?: string[];\n}\n\n/** Per-message metadata the backend rides on the SSE `finish` part\n *  (`messageMetadata`), applied by the AI SDK to the assistant `UIMessage`. */\nexport interface ChatMessageMetadata {\n  backend?: string;\n  executionMode?: string;\n  model?: string;\n  captainSessionId?: string;\n  providerSessionId?: string;\n  threadId?: string;\n  turnId?: string;\n  success?: boolean;\n  interrupted?: boolean;\n  usage?: ChatUsageBreakdown;\n  costBreakdown?: ChatCostBreakdown;\n  /** This turn's cost in USD. */\n  cost?: number;\n  /** Cumulative thread cost in USD (when the turn is persisted to a thread). */\n  threadCostUsd?: number;\n  /** This turn's input-token count, ≈ current context-window occupancy. */\n  contextTokens?: number;\n}\n\n/** A flattened usage snapshot a chat surfaces for a gauge: tokens used out of the\n *  model's context window, plus cumulative cost. */\nexport interface ChatUsageSummary {\n  usedTokens: number;\n  maxTokens: number;\n  cost?: number;\n  usage?: ChatUsageBreakdown;\n  costBreakdown?: ChatCostBreakdown;\n  messageCount: number;\n  backend?: string;\n  executionMode?: string;\n  model?: string;\n  captainSessionId?: string;\n  providerSessionId?: string;\n  threadId?: string;\n  turnId?: string;\n  success?: boolean;\n  interrupted?: boolean;\n  /** @deprecated Use `model`; retained for compatibility with existing consumers. */\n  modelLabel?: string;\n}\n\nexport interface ChatBudgetConfig {\n  /** Per-thread/request cost cap in USD. */\n  cost?: number;\n  /** Max output tokens for one model call. */\n  maxTokens?: number;\n}\n\nexport interface ChatUsageBreakdown {\n  inputTokens?: number;\n  outputTokens?: number;\n  reasoningTokens?: number;\n  cacheReadTokens?: number;\n  cacheWriteTokens?: number;\n  totalTokens?: number;\n}\n\nexport interface ChatCostBreakdown {\n  model?: string;\n  inputUsd?: number;\n  outputUsd?: number;\n  reasoningUsd?: number;\n  cacheReadUsd?: number;\n  cacheWriteUsd?: number;\n  totalUsd?: number;\n}\n\n/** A suggested prompt shown on the empty state. A bare string is both the label\n *  and the submitted text; the object form separates them. */\nexport type Suggestion = string | { label: string; prompt: string };\n\n/** The label shown for a suggestion. */\nexport function suggestionLabel(s: Suggestion): string {\n  return typeof s === \"string\" ? s : s.label;\n}\n\n/** The text submitted when a suggestion is clicked. */\nexport function suggestionPrompt(s: Suggestion): string {\n  return typeof s === \"string\" ? s : s.prompt;\n}\n\n/** Returns true for an assistant reasoning (\"thinking\") part. */\nexport function isReasoningPart(part: {\n  type: string;\n}): part is ReasoningUIPart {\n  return part.type === \"reasoning\";\n}\n\n/** Returns true for a file/attachment part. */\nexport function isFilePart(part: { type: string }): part is FileUIPart {\n  return part.type === \"file\";\n}\n\n/** A tool part as it appears in an assistant UIMessage — either a typed\n *  `tool-<name>` part or the generic `dynamic-tool` part. clicky operations\n *  surface as dynamic tools, so the chat UI renders both shapes. */\nexport type AnyToolPart = ToolUIPart | DynamicToolUIPart;\n\n/** Claude Agent SDK permission modes accepted by `permissionMode`. */\nexport const CLAUDE_PERMISSION_MODES = [\n  \"default\",\n  \"acceptEdits\",\n  \"bypassPermissions\",\n  \"plan\",\n  \"dontAsk\",\n  \"auto\",\n] as const;\n\nexport type ClaudePermissionMode = (typeof CLAUDE_PERMISSION_MODES)[number];\n\nexport type ClaudePermissionModeOption = {\n  value: ClaudePermissionMode;\n  label: string;\n  description: string;\n};\n\nexport const CLAUDE_PERMISSION_MODE_OPTIONS: ClaudePermissionModeOption[] = [\n  {\n    value: \"default\",\n    label: \"Default\",\n    description:\n      \"Prompt for dangerous operations using standard Claude behavior.\",\n  },\n  {\n    value: \"auto\",\n    label: \"Auto\",\n    description:\n      \"Use Claude's classifier to approve or deny permission prompts.\",\n  },\n  {\n    value: \"acceptEdits\",\n    label: \"Accept edits\",\n    description: \"Automatically accept file edit operations.\",\n  },\n  {\n    value: \"dontAsk\",\n    label: \"Don't ask\",\n    description: \"Do not prompt; deny actions that are not pre-approved.\",\n  },\n  {\n    value: \"plan\",\n    label: \"Plan\",\n    description: \"Planning mode with no tool execution.\",\n  },\n  {\n    value: \"bypassPermissions\",\n    label: \"Bypass\",\n    description:\n      \"Bypass permission checks when explicitly allowed by the host.\",\n  },\n];\n\n/** Tool metadata shared by the chat shell. It both configures the\n *  tool-preferences popover (`name`/`label`/`group`) and carries the schema\n *  derived from a clicky RPC operation (`description`/`inputSchema`). The Go\n *  backend owns execution; the client uses this only for display and to scope\n *  which tools a request may call (passed in the transport `body`). */\nexport type ToolMode = \"on\" | \"ask\" | \"off\" | \"auto\";\n\nexport interface ToolAnnotations {\n  title?: string;\n  readOnlyHint?: boolean;\n  destructiveHint?: boolean;\n  idempotentHint?: boolean;\n  openWorldHint?: boolean;\n  [key: string]: unknown;\n}\n\nexport interface ToolMeta {\n  /** Stable tool name sent to the model (the operation id). */\n  name: string;\n  /** Human-readable label shown in the tool-preferences popover. */\n  label: string;\n  /** Bucket heading in the popover — the clicky surface for RPC operations. */\n  group?: string;\n  /** Display title of the tool's parent surface/entity (e.g. \"Xero Accounts\").\n   *  Used to nest tools under their entity within a group, and as the\n   *  disambiguating prefix in flat lists so sibling verbs (\"List\", \"Get\") stay\n   *  distinguishable. Resolved from the operation's `x-clicky.surface`. */\n  parent?: string;\n  /** Raw entity name of the tool's surface (e.g. \"accounts\"), when known. */\n  entity?: string;\n  /** Preference key sent to the backend. Defaults to `name`; group-backed\n   *  clicky tools set this to the backend tool group. */\n  preferenceKey?: string;\n  /** Initial backend-owned permission when the chat window first sees this tool. */\n  defaultPermission?: ToolMode;\n  /** Opaque icon name emitted by the backend, resolved by the host UI. */\n  icon?: string;\n  /** Description shown in tool pickers / tool-call headers. */\n  description?: string;\n  /** Short usage hints shown in the tool browser. */\n  hints?: string[];\n  source?: \"clicky\" | \"custom\" | \"mcp\" | string;\n  server?: string;\n  method?: string;\n  path?: string;\n  operationName?: string;\n  title?: string;\n  /** Whether the runtime should treat the tool input schema as strict/closed. */\n  strict?: boolean;\n  /** Runtime tool annotations/hints, e.g. MCP/Genkit well-known hints. */\n  annotations?: ToolAnnotations;\n  /** JSON-Schema for the tool's input, assembled from an operation's\n   *  parameters + request body. Omitted for hand-authored tools. */\n  inputSchema?: ChatToolInputSchema;\n  outputSchema?: ChatToolInputSchema;\n}\n\nexport type ChatToolInputSchema = JsonSchemaObject;\nexport type JsonSchemaProperty = FormJsonSchemaProperty;\nexport type JSONSchemaProperty = FormJsonSchemaProperty;\n\n/** Returns true for a `dynamic-tool` part (clicky operations surface this way). */\nexport function isDynamicToolPart(part: {\n  type: string;\n}): part is DynamicToolUIPart {\n  return part.type === \"dynamic-tool\";\n}\n\n/** Returns true for a typed `tool-<name>` part. */\nexport function isTypedToolPart(part: { type: string }): part is ToolUIPart {\n  return part.type.startsWith(\"tool-\");\n}\n\n/** The display name of a tool part: the explicit `toolName` for dynamic tools,\n *  otherwise the suffix after `tool-`. */\nexport function toolPartName(part: AnyToolPart): string {\n  if (isDynamicToolPart(part)) {\n    return part.toolName;\n  }\n  return part.type.slice(\"tool-\".length);\n}\n\nexport interface ToolResultRenderArgs {\n  part: AnyToolPart;\n  toolName: string;\n  output: unknown;\n}\n\nexport type ToolResultRenderer = (args: ToolResultRenderArgs) => ReactNode;\n"],"names":[],"mappings":";;AA+JO,SAAS,gBAAgB,GAAuB;AACrD,SAAO,OAAO,MAAM,WAAW,IAAI,EAAE;AACvC;AAGO,SAAS,iBAAiB,GAAuB;AACtD,SAAO,OAAO,MAAM,WAAW,IAAI,EAAE;AACvC;AAGO,SAAS,gBAAgB,MAEJ;AAC1B,SAAO,KAAK,SAAS;AACvB;AAGO,SAAS,WAAW,MAA4C;AACrE,SAAO,KAAK,SAAS;AACvB;AAQO,MAAM,0BAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAUO,MAAM,iCAA+D;AAAA,EAC1E;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,EAAA;AAAA,EAEJ;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,EAAA;AAAA,EAEJ;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,EAAA;AAEN;AAgEO,SAAS,kBAAkB,MAEJ;AAC5B,SAAO,KAAK,SAAS;AACvB;AAGO,SAAS,gBAAgB,MAA4C;AAC1E,SAAO,KAAK,KAAK,WAAW,OAAO;AACrC;AAIO,SAAS,aAAa,MAA2B;AACtD,MAAI,kBAAkB,IAAI,GAAG;AAC3B,WAAO,KAAK;AAAA,EACd;AACA,SAAO,KAAK,KAAK,MAAM,QAAQ,MAAM;AACvC;;;;;;;;;;"}
+{"version":3,"file":"types.cjs","sources":["../../../src/data/chat/types.ts"],"sourcesContent":["import type {\n  UIMessage,\n  ToolUIPart,\n  DynamicToolUIPart,\n  ChatStatus,\n  ReasoningUIPart,\n  FileUIPart,\n} from \"ai\";\nimport type { ReactNode } from \"react\";\nimport type {\n  JsonSchemaObject,\n  JsonSchemaProperty as FormJsonSchemaProperty,\n} from \"../../components/json-schema-form-types\";\n\nexport type {\n  UIMessage,\n  ToolUIPart,\n  DynamicToolUIPart,\n  ChatStatus,\n  ReasoningUIPart,\n  FileUIPart,\n};\n\n/** A selectable chat model, as served by the backend's GET /api/chat/models.\n *  `configured` is false for catalogued models whose provider has no API key. */\nexport interface ChatModelRuntime {\n  model?: string;\n  id?: string;\n  backend?: string;\n  mode?: string;\n  temperature?: number;\n  effort?: string;\n  noCache?: boolean;\n  fallbacks?: ChatModelRuntime[];\n}\n\nexport type RuntimeAvailabilityState =\n  | \"available\"\n  | \"disabled\"\n  | \"missing_credentials\"\n  | \"not_authenticated\"\n  | \"missing_executable\"\n  | \"missing_dependency\"\n  | \"unsupported\"\n  | \"unavailable\";\n\nexport interface RuntimeAvailability {\n  state: RuntimeAvailabilityState;\n  reason?: string;\n  remediation?: string;\n}\n\nexport interface ChatModel {\n  id: string;\n  provider: string;\n  label: string;\n  /** Exact Captain Model wire value submitted when this display row is selected. */\n  runtime?: ChatModelRuntime;\n  reasoning: boolean;\n  /** True when backend metadata is authoritative, including explicit unsupported values. */\n  capabilitiesKnown?: boolean;\n  /** Ordered reasoning-effort tiers accepted by this exact model. */\n  supportedEfforts?: string[];\n  /** Backend-recommended effort used when the current selection is invalid. */\n  defaultEffort?: string;\n  /** Whether the model honours the temperature sampling control. */\n  temperature?: boolean;\n  configured?: boolean;\n  availability?: RuntimeAvailability;\n  /**\n   * The catalog's own declared default — the row a picker seeds with when the\n   * caller names no model. At most one row carries it, and a catalog that\n   * declares none (or whose default is unconfigured) falls back to the first\n   * configured row.\n   */\n  default?: boolean;\n  /** Concrete runtime backends that advertised this model. Empty/omitted means provider-wide. */\n  backends?: string[];\n  /** Max context tokens — the denominator for a usage gauge. */\n  contextWindow?: number;\n  /** MIME patterns accepted as model inputs, e.g. image/* or application/pdf. */\n  inputMediaTypes?: string[];\n}\n\n/** Per-message metadata the backend rides on the SSE `finish` part\n *  (`messageMetadata`), applied by the AI SDK to the assistant `UIMessage`. */\nexport interface ChatMessageMetadata {\n  backend?: string;\n  executionMode?: string;\n  model?: string;\n  captainSessionId?: string;\n  providerSessionId?: string;\n  threadId?: string;\n  turnId?: string;\n  success?: boolean;\n  interrupted?: boolean;\n  usage?: ChatUsageBreakdown;\n  costBreakdown?: ChatCostBreakdown;\n  /** This turn's cost in USD. */\n  cost?: number;\n  /** Cumulative thread cost in USD (when the turn is persisted to a thread). */\n  threadCostUsd?: number;\n  /** This turn's input-token count, ≈ current context-window occupancy. */\n  contextTokens?: number;\n}\n\n/** A flattened usage snapshot a chat surfaces for a gauge: tokens used out of the\n *  model's context window, plus cumulative cost. */\nexport interface ChatUsageSummary {\n  usedTokens: number;\n  maxTokens: number;\n  cost?: number;\n  usage?: ChatUsageBreakdown;\n  costBreakdown?: ChatCostBreakdown;\n  messageCount: number;\n  backend?: string;\n  executionMode?: string;\n  model?: string;\n  captainSessionId?: string;\n  providerSessionId?: string;\n  threadId?: string;\n  turnId?: string;\n  success?: boolean;\n  interrupted?: boolean;\n  /** @deprecated Use `model`; retained for compatibility with existing consumers. */\n  modelLabel?: string;\n}\n\nexport interface ChatBudgetConfig {\n  /** Per-thread/request cost cap in USD. */\n  cost?: number;\n  /** Max output tokens for one model call. */\n  maxTokens?: number;\n}\n\nexport interface ChatUsageBreakdown {\n  inputTokens?: number;\n  outputTokens?: number;\n  reasoningTokens?: number;\n  cacheReadTokens?: number;\n  cacheWriteTokens?: number;\n  totalTokens?: number;\n}\n\nexport interface ChatCostBreakdown {\n  model?: string;\n  inputUsd?: number;\n  outputUsd?: number;\n  reasoningUsd?: number;\n  cacheReadUsd?: number;\n  cacheWriteUsd?: number;\n  totalUsd?: number;\n}\n\n/** A suggested prompt shown on the empty state. A bare string is both the label\n *  and the submitted text; the object form separates them. */\nexport type Suggestion = string | { label: string; prompt: string };\n\n/** The label shown for a suggestion. */\nexport function suggestionLabel(s: Suggestion): string {\n  return typeof s === \"string\" ? s : s.label;\n}\n\n/** The text submitted when a suggestion is clicked. */\nexport function suggestionPrompt(s: Suggestion): string {\n  return typeof s === \"string\" ? s : s.prompt;\n}\n\n/** Returns true for an assistant reasoning (\"thinking\") part. */\nexport function isReasoningPart(part: {\n  type: string;\n}): part is ReasoningUIPart {\n  return part.type === \"reasoning\";\n}\n\n/** Returns true for a file/attachment part. */\nexport function isFilePart(part: { type: string }): part is FileUIPart {\n  return part.type === \"file\";\n}\n\n/** A tool part as it appears in an assistant UIMessage — either a typed\n *  `tool-<name>` part or the generic `dynamic-tool` part. clicky operations\n *  surface as dynamic tools, so the chat UI renders both shapes. */\nexport type AnyToolPart = ToolUIPart | DynamicToolUIPart;\n\n/** Claude Agent SDK permission modes accepted by `permissionMode`. */\nexport const CLAUDE_PERMISSION_MODES = [\n  \"default\",\n  \"acceptEdits\",\n  \"bypassPermissions\",\n  \"plan\",\n  \"dontAsk\",\n  \"auto\",\n] as const;\n\nexport type ClaudePermissionMode = (typeof CLAUDE_PERMISSION_MODES)[number];\n\nexport type ClaudePermissionModeOption = {\n  value: ClaudePermissionMode;\n  label: string;\n  description: string;\n};\n\nexport const CLAUDE_PERMISSION_MODE_OPTIONS: ClaudePermissionModeOption[] = [\n  {\n    value: \"default\",\n    label: \"Default\",\n    description:\n      \"Prompt for dangerous operations using standard Claude behavior.\",\n  },\n  {\n    value: \"auto\",\n    label: \"Auto\",\n    description:\n      \"Use Claude's classifier to approve or deny permission prompts.\",\n  },\n  {\n    value: \"acceptEdits\",\n    label: \"Accept edits\",\n    description: \"Automatically accept file edit operations.\",\n  },\n  {\n    value: \"dontAsk\",\n    label: \"Don't ask\",\n    description: \"Do not prompt; deny actions that are not pre-approved.\",\n  },\n  {\n    value: \"plan\",\n    label: \"Plan\",\n    description: \"Planning mode with no tool execution.\",\n  },\n  {\n    value: \"bypassPermissions\",\n    label: \"Bypass\",\n    description:\n      \"Bypass permission checks when explicitly allowed by the host.\",\n  },\n];\n\n/** Tool metadata shared by the chat shell. It both configures the\n *  tool-preferences popover (`name`/`label`/`group`) and carries the schema\n *  derived from a clicky RPC operation (`description`/`inputSchema`). The Go\n *  backend owns execution; the client uses this only for display and to scope\n *  which tools a request may call (passed in the transport `body`). */\n/** Authority for one tool, in Captain's tool vocabulary. The legacy `on`/`off`\n *  spellings are still accepted on the way in (see `normalizeToolPolicyValue`)\n *  and mean `allow`/`deny`; they are never produced here. The UI still *labels*\n *  these On and Off — see `POLICY_LABEL`. */\nexport type ToolPolicy = \"allow\" | \"ask\" | \"deny\" | \"auto\";\n\n/** Canonicalizes a tool policy from the wire, accepting the legacy `on`/`off`\n *  spellings the backend still emits from older catalogs and MCP `_meta`.\n *\n *  `on` means allow rather than auto: the catalog encoding has no separate allow\n *  list, so `on` was always its way of saying auto-run. Keeping private copies of\n *  this rule per call site is how the UI and the server drifted apart, so this is\n *  the only one. */\nexport function normalizeToolPolicy(value: unknown): ToolPolicy | undefined {\n  if (typeof value !== \"string\") return undefined;\n  switch (value.trim().toLowerCase()) {\n    case \"allow\":\n    case \"on\":\n    case \"enabled\":\n      return \"allow\";\n    case \"ask\":\n      return \"ask\";\n    case \"deny\":\n    case \"off\":\n    case \"disabled\":\n      return \"deny\";\n    case \"auto\":\n      return \"auto\";\n    default:\n      return undefined;\n  }\n}\n\nexport interface ToolAnnotations {\n  title?: string;\n  readOnlyHint?: boolean;\n  destructiveHint?: boolean;\n  idempotentHint?: boolean;\n  openWorldHint?: boolean;\n  [key: string]: unknown;\n}\n\nexport interface ToolMeta {\n  /** Stable tool name sent to the model (the operation id). */\n  name: string;\n  /** Human-readable label shown in the tool-preferences popover. */\n  label: string;\n  /** Bucket heading in the popover — the clicky surface for RPC operations. */\n  group?: string;\n  /** Display title of the tool's parent surface/entity (e.g. \"Xero Accounts\").\n   *  Used to nest tools under their entity within a group, and as the\n   *  disambiguating prefix in flat lists so sibling verbs (\"List\", \"Get\") stay\n   *  distinguishable. Resolved from the operation's `x-clicky.surface`. */\n  parent?: string;\n  /** Raw entity name of the tool's surface (e.g. \"accounts\"), when known. */\n  entity?: string;\n  /** Preference key sent to the backend. Defaults to `name`; group-backed\n   *  clicky tools set this to the backend tool group. */\n  preferenceKey?: string;\n  /** Initial backend-owned permission when the chat window first sees this tool. */\n  defaultPermission?: ToolPolicy;\n  /** Opaque icon name emitted by the backend, resolved by the host UI. */\n  icon?: string;\n  /** Description shown in tool pickers / tool-call headers. */\n  description?: string;\n  /** Short usage hints shown in the tool browser. */\n  hints?: string[];\n  source?: \"clicky\" | \"custom\" | \"mcp\" | string;\n  server?: string;\n  method?: string;\n  path?: string;\n  operationName?: string;\n  /** The entity verb (list/get/create/update/delete, or a custom action), the\n   *  custom action's name, and whether the operation addresses a collection or a\n   *  single entity. Carried so a permission rule resolves the same way here as\n   *  it does on the server; empty for a tool that projects no clicky operation.\n   *  @see resolveToolPolicy */\n  verb?: string;\n  action?: string;\n  scope?: string;\n  title?: string;\n  /** Whether the runtime should treat the tool input schema as strict/closed. */\n  strict?: boolean;\n  /** Runtime tool annotations/hints, e.g. MCP/Genkit well-known hints. */\n  annotations?: ToolAnnotations;\n  /** JSON-Schema for the tool's input, assembled from an operation's\n   *  parameters + request body. Omitted for hand-authored tools. */\n  inputSchema?: ChatToolInputSchema;\n  outputSchema?: ChatToolInputSchema;\n}\n\nexport type ChatToolInputSchema = JsonSchemaObject;\nexport type JsonSchemaProperty = FormJsonSchemaProperty;\nexport type JSONSchemaProperty = FormJsonSchemaProperty;\n\n/** Returns true for a `dynamic-tool` part (clicky operations surface this way). */\nexport function isDynamicToolPart(part: {\n  type: string;\n}): part is DynamicToolUIPart {\n  return part.type === \"dynamic-tool\";\n}\n\n/** Returns true for a typed `tool-<name>` part. */\nexport function isTypedToolPart(part: { type: string }): part is ToolUIPart {\n  return part.type.startsWith(\"tool-\");\n}\n\n/** The display name of a tool part: the explicit `toolName` for dynamic tools,\n *  otherwise the suffix after `tool-`. */\nexport function toolPartName(part: AnyToolPart): string {\n  if (isDynamicToolPart(part)) {\n    return part.toolName;\n  }\n  return part.type.slice(\"tool-\".length);\n}\n\nexport interface ToolResultRenderArgs {\n  part: AnyToolPart;\n  toolName: string;\n  output: unknown;\n}\n\nexport type ToolResultRenderer = (args: ToolResultRenderArgs) => ReactNode;\n"],"names":[],"mappings":";;AA+JO,SAAS,gBAAgB,GAAuB;AACrD,SAAO,OAAO,MAAM,WAAW,IAAI,EAAE;AACvC;AAGO,SAAS,iBAAiB,GAAuB;AACtD,SAAO,OAAO,MAAM,WAAW,IAAI,EAAE;AACvC;AAGO,SAAS,gBAAgB,MAEJ;AAC1B,SAAO,KAAK,SAAS;AACvB;AAGO,SAAS,WAAW,MAA4C;AACrE,SAAO,KAAK,SAAS;AACvB;AAQO,MAAM,0BAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAUO,MAAM,iCAA+D;AAAA,EAC1E;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,EAAA;AAAA,EAEJ;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,EAAA;AAAA,EAEJ;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,EAAA;AAEN;AAoBO,SAAS,oBAAoB,OAAwC;AAC1E,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,UAAQ,MAAM,KAAA,EAAO,YAAA,GAAY;AAAA,IAC/B,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EAAA;AAEb;AAiEO,SAAS,kBAAkB,MAEJ;AAC5B,SAAO,KAAK,SAAS;AACvB;AAGO,SAAS,gBAAgB,MAA4C;AAC1E,SAAO,KAAK,KAAK,WAAW,OAAO;AACrC;AAIO,SAAS,aAAa,MAA2B;AACtD,MAAI,kBAAkB,IAAI,GAAG;AAC3B,WAAO,KAAK;AAAA,EACd;AACA,SAAO,KAAK,KAAK,MAAM,QAAQ,MAAM;AACvC;;;;;;;;;;;"}

package/dist/data/chat/types.d.ts

@@ -152,7 +152,19 @@ export declare const CLAUDE_PERMISSION_MODE_OPTIONS: ClaudePermissionModeOption[
  *  derived from a clicky RPC operation (`description`/`inputSchema`). The Go
  *  backend owns execution; the client uses this only for display and to scope
  *  which tools a request may call (passed in the transport `body`). */
-export type ToolMode = "on" | "ask" | "off" | "auto";
+/** Authority for one tool, in Captain's tool vocabulary. The legacy `on`/`off`
+ *  spellings are still accepted on the way in (see `normalizeToolPolicyValue`)
+ *  and mean `allow`/`deny`; they are never produced here. The UI still *labels*
+ *  these On and Off — see `POLICY_LABEL`. */
+export type ToolPolicy = "allow" | "ask" | "deny" | "auto";
+/** Canonicalizes a tool policy from the wire, accepting the legacy `on`/`off`
+ *  spellings the backend still emits from older catalogs and MCP `_meta`.
+ *
+ *  `on` means allow rather than auto: the catalog encoding has no separate allow
+ *  list, so `on` was always its way of saying auto-run. Keeping private copies of
+ *  this rule per call site is how the UI and the server drifted apart, so this is
+ *  the only one. */
+export declare function normalizeToolPolicy(value: unknown): ToolPolicy | undefined;
 export interface ToolAnnotations {
     title?: string;
     readOnlyHint?: boolean;
@@ -179,7 +191,7 @@ export interface ToolMeta {
      *  clicky tools set this to the backend tool group. */
     preferenceKey?: string;
     /** Initial backend-owned permission when the chat window first sees this tool. */
-    defaultPermission?: ToolMode;
+    defaultPermission?: ToolPolicy;
     /** Opaque icon name emitted by the backend, resolved by the host UI. */
     icon?: string;
     /** Description shown in tool pickers / tool-call headers. */
@@ -191,6 +203,14 @@ export interface ToolMeta {
     method?: string;
     path?: string;
     operationName?: string;
+    /** The entity verb (list/get/create/update/delete, or a custom action), the
+     *  custom action's name, and whether the operation addresses a collection or a
+     *  single entity. Carried so a permission rule resolves the same way here as
+     *  it does on the server; empty for a tool that projects no clicky operation.
+     *  @see resolveToolPolicy */
+    verb?: string;
+    action?: string;
+    scope?: string;
     title?: string;
     /** Whether the runtime should treat the tool input schema as strict/closed. */
     strict?: boolean;

package/dist/data/chat/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/data/chat/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,UAAU,EACX,MAAM,IAAI,CAAC;AACZ,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,IAAI,sBAAsB,EAC7C,MAAM,yCAAyC,CAAC;AAEjD,YAAY,EACV,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,UAAU,GACX,CAAC;AAEF;iFACiF;AACjF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAChC;AAED,MAAM,MAAM,wBAAwB,GAChC,WAAW,GACX,UAAU,GACV,qBAAqB,GACrB,mBAAmB,GACnB,oBAAoB,GACpB,oBAAoB,GACpB,aAAa,GACb,aAAa,CAAC;AAElB,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,wBAAwB,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,0FAA0F;IAC1F,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,+FAA+F;IAC/F,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,8DAA8D;IAC9D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;+EAC+E;AAC/E,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,+BAA+B;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;oDACoD;AACpD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,0CAA0C;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;8DAC8D;AAC9D,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpE,wCAAwC;AACxC,wBAAgB,eAAe,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAErD;AAED,uDAAuD;AACvD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAEtD;AAED,iEAAiE;AACjE,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,IAAI,IAAI,eAAe,CAE1B;AAED,+CAA+C;AAC/C,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,IAAI,UAAU,CAErE;AAED;;oEAEoE;AACpE,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,iBAAiB,CAAC;AAEzD,sEAAsE;AACtE,eAAO,MAAM,uBAAuB,qFAO1B,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,MAAM,MAAM,0BAA0B,GAAG;IACvC,KAAK,EAAE,oBAAoB,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,eAAO,MAAM,8BAA8B,EAAE,0BAA0B,EAkCtE,CAAC;AAEF;;;;uEAIuE;AACvE,MAAM,MAAM,QAAQ,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;AAErD,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,QAAQ;IACvB,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;6EAGyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;2DACuD;IACvD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kFAAkF;IAClF,iBAAiB,CAAC,EAAE,QAAQ,CAAC;IAC7B,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,wEAAwE;IACxE,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B;sEACkE;IAClE,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,YAAY,CAAC,EAAE,mBAAmB,CAAC;CACpC;AAED,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AACnD,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AACxD,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAExD,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,IAAI,IAAI,iBAAiB,CAE5B;AAED,mDAAmD;AACnD,wBAAgB,eAAe,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,IAAI,UAAU,CAE1E;AAED;0CAC0C;AAC1C,wBAAgB,YAAY,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAKtD;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,oBAAoB,KAAK,SAAS,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/data/chat/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,UAAU,EACX,MAAM,IAAI,CAAC;AACZ,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,IAAI,sBAAsB,EAC7C,MAAM,yCAAyC,CAAC;AAEjD,YAAY,EACV,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,UAAU,EACV,eAAe,EACf,UAAU,GACX,CAAC;AAEF;iFACiF;AACjF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAChC;AAED,MAAM,MAAM,wBAAwB,GAChC,WAAW,GACX,UAAU,GACV,qBAAqB,GACrB,mBAAmB,GACnB,oBAAoB,GACpB,oBAAoB,GACpB,aAAa,GACb,aAAa,CAAC;AAElB,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,wBAAwB,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,SAAS,EAAE,OAAO,CAAC;IACnB,0FAA0F;IAC1F,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,+FAA+F;IAC/F,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,8DAA8D;IAC9D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;+EAC+E;AAC/E,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,+BAA+B;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;oDACoD;AACpD,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,0CAA0C;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;8DAC8D;AAC9D,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpE,wCAAwC;AACxC,wBAAgB,eAAe,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAErD;AAED,uDAAuD;AACvD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAEtD;AAED,iEAAiE;AACjE,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,IAAI,IAAI,eAAe,CAE1B;AAED,+CAA+C;AAC/C,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,IAAI,UAAU,CAErE;AAED;;oEAEoE;AACpE,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,iBAAiB,CAAC;AAEzD,sEAAsE;AACtE,eAAO,MAAM,uBAAuB,qFAO1B,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E,MAAM,MAAM,0BAA0B,GAAG;IACvC,KAAK,EAAE,oBAAoB,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,eAAO,MAAM,8BAA8B,EAAE,0BAA0B,EAkCtE,CAAC;AAEF;;;;uEAIuE;AACvE;;;6CAG6C;AAC7C,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;AAE3D;;;;;;oBAMoB;AACpB,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,CAkB1E;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,QAAQ;IACvB,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;6EAGyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;2DACuD;IACvD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kFAAkF;IAClF,iBAAiB,CAAC,EAAE,UAAU,CAAC;IAC/B,wEAAwE;IACxE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;iCAI6B;IAC7B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,wEAAwE;IACxE,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B;sEACkE;IAClE,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,YAAY,CAAC,EAAE,mBAAmB,CAAC;CACpC;AAED,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AACnD,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AACxD,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAExD,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,IAAI,IAAI,iBAAiB,CAE5B;AAED,mDAAmD;AACnD,wBAAgB,eAAe,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,IAAI,UAAU,CAE1E;AAED;0CAC0C;AAC1C,wBAAgB,YAAY,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAKtD;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,WAAW,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,oBAAoB,KAAK,SAAS,CAAC"}

package/dist/data/chat/types.js

@@ -50,6 +50,25 @@ const CLAUDE_PERMISSION_MODE_OPTIONS = [
     description: "Bypass permission checks when explicitly allowed by the host."
   }
 ];
+function normalizeToolPolicy(value) {
+  if (typeof value !== "string") return void 0;
+  switch (value.trim().toLowerCase()) {
+    case "allow":
+    case "on":
+    case "enabled":
+      return "allow";
+    case "ask":
+      return "ask";
+    case "deny":
+    case "off":
+    case "disabled":
+      return "deny";
+    case "auto":
+      return "auto";
+    default:
+      return void 0;
+  }
+}
 function isDynamicToolPart(part) {
   return part.type === "dynamic-tool";
 }
@@ -69,6 +88,7 @@ export {
   isFilePart,
   isReasoningPart,
   isTypedToolPart,
+  normalizeToolPolicy,
   suggestionLabel,
   suggestionPrompt,
   toolPartName

package/dist/data/chat/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sources":["../../../src/data/chat/types.ts"],"sourcesContent":["import type {\n  UIMessage,\n  ToolUIPart,\n  DynamicToolUIPart,\n  ChatStatus,\n  ReasoningUIPart,\n  FileUIPart,\n} from \"ai\";\nimport type { ReactNode } from \"react\";\nimport type {\n  JsonSchemaObject,\n  JsonSchemaProperty as FormJsonSchemaProperty,\n} from \"../../components/json-schema-form-types\";\n\nexport type {\n  UIMessage,\n  ToolUIPart,\n  DynamicToolUIPart,\n  ChatStatus,\n  ReasoningUIPart,\n  FileUIPart,\n};\n\n/** A selectable chat model, as served by the backend's GET /api/chat/models.\n *  `configured` is false for catalogued models whose provider has no API key. */\nexport interface ChatModelRuntime {\n  model?: string;\n  id?: string;\n  backend?: string;\n  mode?: string;\n  temperature?: number;\n  effort?: string;\n  noCache?: boolean;\n  fallbacks?: ChatModelRuntime[];\n}\n\nexport type RuntimeAvailabilityState =\n  | \"available\"\n  | \"disabled\"\n  | \"missing_credentials\"\n  | \"not_authenticated\"\n  | \"missing_executable\"\n  | \"missing_dependency\"\n  | \"unsupported\"\n  | \"unavailable\";\n\nexport interface RuntimeAvailability {\n  state: RuntimeAvailabilityState;\n  reason?: string;\n  remediation?: string;\n}\n\nexport interface ChatModel {\n  id: string;\n  provider: string;\n  label: string;\n  /** Exact Captain Model wire value submitted when this display row is selected. */\n  runtime?: ChatModelRuntime;\n  reasoning: boolean;\n  /** True when backend metadata is authoritative, including explicit unsupported values. */\n  capabilitiesKnown?: boolean;\n  /** Ordered reasoning-effort tiers accepted by this exact model. */\n  supportedEfforts?: string[];\n  /** Backend-recommended effort used when the current selection is invalid. */\n  defaultEffort?: string;\n  /** Whether the model honours the temperature sampling control. */\n  temperature?: boolean;\n  configured?: boolean;\n  availability?: RuntimeAvailability;\n  /**\n   * The catalog's own declared default — the row a picker seeds with when the\n   * caller names no model. At most one row carries it, and a catalog that\n   * declares none (or whose default is unconfigured) falls back to the first\n   * configured row.\n   */\n  default?: boolean;\n  /** Concrete runtime backends that advertised this model. Empty/omitted means provider-wide. */\n  backends?: string[];\n  /** Max context tokens — the denominator for a usage gauge. */\n  contextWindow?: number;\n  /** MIME patterns accepted as model inputs, e.g. image/* or application/pdf. */\n  inputMediaTypes?: string[];\n}\n\n/** Per-message metadata the backend rides on the SSE `finish` part\n *  (`messageMetadata`), applied by the AI SDK to the assistant `UIMessage`. */\nexport interface ChatMessageMetadata {\n  backend?: string;\n  executionMode?: string;\n  model?: string;\n  captainSessionId?: string;\n  providerSessionId?: string;\n  threadId?: string;\n  turnId?: string;\n  success?: boolean;\n  interrupted?: boolean;\n  usage?: ChatUsageBreakdown;\n  costBreakdown?: ChatCostBreakdown;\n  /** This turn's cost in USD. */\n  cost?: number;\n  /** Cumulative thread cost in USD (when the turn is persisted to a thread). */\n  threadCostUsd?: number;\n  /** This turn's input-token count, ≈ current context-window occupancy. */\n  contextTokens?: number;\n}\n\n/** A flattened usage snapshot a chat surfaces for a gauge: tokens used out of the\n *  model's context window, plus cumulative cost. */\nexport interface ChatUsageSummary {\n  usedTokens: number;\n  maxTokens: number;\n  cost?: number;\n  usage?: ChatUsageBreakdown;\n  costBreakdown?: ChatCostBreakdown;\n  messageCount: number;\n  backend?: string;\n  executionMode?: string;\n  model?: string;\n  captainSessionId?: string;\n  providerSessionId?: string;\n  threadId?: string;\n  turnId?: string;\n  success?: boolean;\n  interrupted?: boolean;\n  /** @deprecated Use `model`; retained for compatibility with existing consumers. */\n  modelLabel?: string;\n}\n\nexport interface ChatBudgetConfig {\n  /** Per-thread/request cost cap in USD. */\n  cost?: number;\n  /** Max output tokens for one model call. */\n  maxTokens?: number;\n}\n\nexport interface ChatUsageBreakdown {\n  inputTokens?: number;\n  outputTokens?: number;\n  reasoningTokens?: number;\n  cacheReadTokens?: number;\n  cacheWriteTokens?: number;\n  totalTokens?: number;\n}\n\nexport interface ChatCostBreakdown {\n  model?: string;\n  inputUsd?: number;\n  outputUsd?: number;\n  reasoningUsd?: number;\n  cacheReadUsd?: number;\n  cacheWriteUsd?: number;\n  totalUsd?: number;\n}\n\n/** A suggested prompt shown on the empty state. A bare string is both the label\n *  and the submitted text; the object form separates them. */\nexport type Suggestion = string | { label: string; prompt: string };\n\n/** The label shown for a suggestion. */\nexport function suggestionLabel(s: Suggestion): string {\n  return typeof s === \"string\" ? s : s.label;\n}\n\n/** The text submitted when a suggestion is clicked. */\nexport function suggestionPrompt(s: Suggestion): string {\n  return typeof s === \"string\" ? s : s.prompt;\n}\n\n/** Returns true for an assistant reasoning (\"thinking\") part. */\nexport function isReasoningPart(part: {\n  type: string;\n}): part is ReasoningUIPart {\n  return part.type === \"reasoning\";\n}\n\n/** Returns true for a file/attachment part. */\nexport function isFilePart(part: { type: string }): part is FileUIPart {\n  return part.type === \"file\";\n}\n\n/** A tool part as it appears in an assistant UIMessage — either a typed\n *  `tool-<name>` part or the generic `dynamic-tool` part. clicky operations\n *  surface as dynamic tools, so the chat UI renders both shapes. */\nexport type AnyToolPart = ToolUIPart | DynamicToolUIPart;\n\n/** Claude Agent SDK permission modes accepted by `permissionMode`. */\nexport const CLAUDE_PERMISSION_MODES = [\n  \"default\",\n  \"acceptEdits\",\n  \"bypassPermissions\",\n  \"plan\",\n  \"dontAsk\",\n  \"auto\",\n] as const;\n\nexport type ClaudePermissionMode = (typeof CLAUDE_PERMISSION_MODES)[number];\n\nexport type ClaudePermissionModeOption = {\n  value: ClaudePermissionMode;\n  label: string;\n  description: string;\n};\n\nexport const CLAUDE_PERMISSION_MODE_OPTIONS: ClaudePermissionModeOption[] = [\n  {\n    value: \"default\",\n    label: \"Default\",\n    description:\n      \"Prompt for dangerous operations using standard Claude behavior.\",\n  },\n  {\n    value: \"auto\",\n    label: \"Auto\",\n    description:\n      \"Use Claude's classifier to approve or deny permission prompts.\",\n  },\n  {\n    value: \"acceptEdits\",\n    label: \"Accept edits\",\n    description: \"Automatically accept file edit operations.\",\n  },\n  {\n    value: \"dontAsk\",\n    label: \"Don't ask\",\n    description: \"Do not prompt; deny actions that are not pre-approved.\",\n  },\n  {\n    value: \"plan\",\n    label: \"Plan\",\n    description: \"Planning mode with no tool execution.\",\n  },\n  {\n    value: \"bypassPermissions\",\n    label: \"Bypass\",\n    description:\n      \"Bypass permission checks when explicitly allowed by the host.\",\n  },\n];\n\n/** Tool metadata shared by the chat shell. It both configures the\n *  tool-preferences popover (`name`/`label`/`group`) and carries the schema\n *  derived from a clicky RPC operation (`description`/`inputSchema`). The Go\n *  backend owns execution; the client uses this only for display and to scope\n *  which tools a request may call (passed in the transport `body`). */\nexport type ToolMode = \"on\" | \"ask\" | \"off\" | \"auto\";\n\nexport interface ToolAnnotations {\n  title?: string;\n  readOnlyHint?: boolean;\n  destructiveHint?: boolean;\n  idempotentHint?: boolean;\n  openWorldHint?: boolean;\n  [key: string]: unknown;\n}\n\nexport interface ToolMeta {\n  /** Stable tool name sent to the model (the operation id). */\n  name: string;\n  /** Human-readable label shown in the tool-preferences popover. */\n  label: string;\n  /** Bucket heading in the popover — the clicky surface for RPC operations. */\n  group?: string;\n  /** Display title of the tool's parent surface/entity (e.g. \"Xero Accounts\").\n   *  Used to nest tools under their entity within a group, and as the\n   *  disambiguating prefix in flat lists so sibling verbs (\"List\", \"Get\") stay\n   *  distinguishable. Resolved from the operation's `x-clicky.surface`. */\n  parent?: string;\n  /** Raw entity name of the tool's surface (e.g. \"accounts\"), when known. */\n  entity?: string;\n  /** Preference key sent to the backend. Defaults to `name`; group-backed\n   *  clicky tools set this to the backend tool group. */\n  preferenceKey?: string;\n  /** Initial backend-owned permission when the chat window first sees this tool. */\n  defaultPermission?: ToolMode;\n  /** Opaque icon name emitted by the backend, resolved by the host UI. */\n  icon?: string;\n  /** Description shown in tool pickers / tool-call headers. */\n  description?: string;\n  /** Short usage hints shown in the tool browser. */\n  hints?: string[];\n  source?: \"clicky\" | \"custom\" | \"mcp\" | string;\n  server?: string;\n  method?: string;\n  path?: string;\n  operationName?: string;\n  title?: string;\n  /** Whether the runtime should treat the tool input schema as strict/closed. */\n  strict?: boolean;\n  /** Runtime tool annotations/hints, e.g. MCP/Genkit well-known hints. */\n  annotations?: ToolAnnotations;\n  /** JSON-Schema for the tool's input, assembled from an operation's\n   *  parameters + request body. Omitted for hand-authored tools. */\n  inputSchema?: ChatToolInputSchema;\n  outputSchema?: ChatToolInputSchema;\n}\n\nexport type ChatToolInputSchema = JsonSchemaObject;\nexport type JsonSchemaProperty = FormJsonSchemaProperty;\nexport type JSONSchemaProperty = FormJsonSchemaProperty;\n\n/** Returns true for a `dynamic-tool` part (clicky operations surface this way). */\nexport function isDynamicToolPart(part: {\n  type: string;\n}): part is DynamicToolUIPart {\n  return part.type === \"dynamic-tool\";\n}\n\n/** Returns true for a typed `tool-<name>` part. */\nexport function isTypedToolPart(part: { type: string }): part is ToolUIPart {\n  return part.type.startsWith(\"tool-\");\n}\n\n/** The display name of a tool part: the explicit `toolName` for dynamic tools,\n *  otherwise the suffix after `tool-`. */\nexport function toolPartName(part: AnyToolPart): string {\n  if (isDynamicToolPart(part)) {\n    return part.toolName;\n  }\n  return part.type.slice(\"tool-\".length);\n}\n\nexport interface ToolResultRenderArgs {\n  part: AnyToolPart;\n  toolName: string;\n  output: unknown;\n}\n\nexport type ToolResultRenderer = (args: ToolResultRenderArgs) => ReactNode;\n"],"names":[],"mappings":"AA+JO,SAAS,gBAAgB,GAAuB;AACrD,SAAO,OAAO,MAAM,WAAW,IAAI,EAAE;AACvC;AAGO,SAAS,iBAAiB,GAAuB;AACtD,SAAO,OAAO,MAAM,WAAW,IAAI,EAAE;AACvC;AAGO,SAAS,gBAAgB,MAEJ;AAC1B,SAAO,KAAK,SAAS;AACvB;AAGO,SAAS,WAAW,MAA4C;AACrE,SAAO,KAAK,SAAS;AACvB;AAQO,MAAM,0BAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAUO,MAAM,iCAA+D;AAAA,EAC1E;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,EAAA;AAAA,EAEJ;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,EAAA;AAAA,EAEJ;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,EAAA;AAEN;AAgEO,SAAS,kBAAkB,MAEJ;AAC5B,SAAO,KAAK,SAAS;AACvB;AAGO,SAAS,gBAAgB,MAA4C;AAC1E,SAAO,KAAK,KAAK,WAAW,OAAO;AACrC;AAIO,SAAS,aAAa,MAA2B;AACtD,MAAI,kBAAkB,IAAI,GAAG;AAC3B,WAAO,KAAK;AAAA,EACd;AACA,SAAO,KAAK,KAAK,MAAM,QAAQ,MAAM;AACvC;"}
+{"version":3,"file":"types.js","sources":["../../../src/data/chat/types.ts"],"sourcesContent":["import type {\n  UIMessage,\n  ToolUIPart,\n  DynamicToolUIPart,\n  ChatStatus,\n  ReasoningUIPart,\n  FileUIPart,\n} from \"ai\";\nimport type { ReactNode } from \"react\";\nimport type {\n  JsonSchemaObject,\n  JsonSchemaProperty as FormJsonSchemaProperty,\n} from \"../../components/json-schema-form-types\";\n\nexport type {\n  UIMessage,\n  ToolUIPart,\n  DynamicToolUIPart,\n  ChatStatus,\n  ReasoningUIPart,\n  FileUIPart,\n};\n\n/** A selectable chat model, as served by the backend's GET /api/chat/models.\n *  `configured` is false for catalogued models whose provider has no API key. */\nexport interface ChatModelRuntime {\n  model?: string;\n  id?: string;\n  backend?: string;\n  mode?: string;\n  temperature?: number;\n  effort?: string;\n  noCache?: boolean;\n  fallbacks?: ChatModelRuntime[];\n}\n\nexport type RuntimeAvailabilityState =\n  | \"available\"\n  | \"disabled\"\n  | \"missing_credentials\"\n  | \"not_authenticated\"\n  | \"missing_executable\"\n  | \"missing_dependency\"\n  | \"unsupported\"\n  | \"unavailable\";\n\nexport interface RuntimeAvailability {\n  state: RuntimeAvailabilityState;\n  reason?: string;\n  remediation?: string;\n}\n\nexport interface ChatModel {\n  id: string;\n  provider: string;\n  label: string;\n  /** Exact Captain Model wire value submitted when this display row is selected. */\n  runtime?: ChatModelRuntime;\n  reasoning: boolean;\n  /** True when backend metadata is authoritative, including explicit unsupported values. */\n  capabilitiesKnown?: boolean;\n  /** Ordered reasoning-effort tiers accepted by this exact model. */\n  supportedEfforts?: string[];\n  /** Backend-recommended effort used when the current selection is invalid. */\n  defaultEffort?: string;\n  /** Whether the model honours the temperature sampling control. */\n  temperature?: boolean;\n  configured?: boolean;\n  availability?: RuntimeAvailability;\n  /**\n   * The catalog's own declared default — the row a picker seeds with when the\n   * caller names no model. At most one row carries it, and a catalog that\n   * declares none (or whose default is unconfigured) falls back to the first\n   * configured row.\n   */\n  default?: boolean;\n  /** Concrete runtime backends that advertised this model. Empty/omitted means provider-wide. */\n  backends?: string[];\n  /** Max context tokens — the denominator for a usage gauge. */\n  contextWindow?: number;\n  /** MIME patterns accepted as model inputs, e.g. image/* or application/pdf. */\n  inputMediaTypes?: string[];\n}\n\n/** Per-message metadata the backend rides on the SSE `finish` part\n *  (`messageMetadata`), applied by the AI SDK to the assistant `UIMessage`. */\nexport interface ChatMessageMetadata {\n  backend?: string;\n  executionMode?: string;\n  model?: string;\n  captainSessionId?: string;\n  providerSessionId?: string;\n  threadId?: string;\n  turnId?: string;\n  success?: boolean;\n  interrupted?: boolean;\n  usage?: ChatUsageBreakdown;\n  costBreakdown?: ChatCostBreakdown;\n  /** This turn's cost in USD. */\n  cost?: number;\n  /** Cumulative thread cost in USD (when the turn is persisted to a thread). */\n  threadCostUsd?: number;\n  /** This turn's input-token count, ≈ current context-window occupancy. */\n  contextTokens?: number;\n}\n\n/** A flattened usage snapshot a chat surfaces for a gauge: tokens used out of the\n *  model's context window, plus cumulative cost. */\nexport interface ChatUsageSummary {\n  usedTokens: number;\n  maxTokens: number;\n  cost?: number;\n  usage?: ChatUsageBreakdown;\n  costBreakdown?: ChatCostBreakdown;\n  messageCount: number;\n  backend?: string;\n  executionMode?: string;\n  model?: string;\n  captainSessionId?: string;\n  providerSessionId?: string;\n  threadId?: string;\n  turnId?: string;\n  success?: boolean;\n  interrupted?: boolean;\n  /** @deprecated Use `model`; retained for compatibility with existing consumers. */\n  modelLabel?: string;\n}\n\nexport interface ChatBudgetConfig {\n  /** Per-thread/request cost cap in USD. */\n  cost?: number;\n  /** Max output tokens for one model call. */\n  maxTokens?: number;\n}\n\nexport interface ChatUsageBreakdown {\n  inputTokens?: number;\n  outputTokens?: number;\n  reasoningTokens?: number;\n  cacheReadTokens?: number;\n  cacheWriteTokens?: number;\n  totalTokens?: number;\n}\n\nexport interface ChatCostBreakdown {\n  model?: string;\n  inputUsd?: number;\n  outputUsd?: number;\n  reasoningUsd?: number;\n  cacheReadUsd?: number;\n  cacheWriteUsd?: number;\n  totalUsd?: number;\n}\n\n/** A suggested prompt shown on the empty state. A bare string is both the label\n *  and the submitted text; the object form separates them. */\nexport type Suggestion = string | { label: string; prompt: string };\n\n/** The label shown for a suggestion. */\nexport function suggestionLabel(s: Suggestion): string {\n  return typeof s === \"string\" ? s : s.label;\n}\n\n/** The text submitted when a suggestion is clicked. */\nexport function suggestionPrompt(s: Suggestion): string {\n  return typeof s === \"string\" ? s : s.prompt;\n}\n\n/** Returns true for an assistant reasoning (\"thinking\") part. */\nexport function isReasoningPart(part: {\n  type: string;\n}): part is ReasoningUIPart {\n  return part.type === \"reasoning\";\n}\n\n/** Returns true for a file/attachment part. */\nexport function isFilePart(part: { type: string }): part is FileUIPart {\n  return part.type === \"file\";\n}\n\n/** A tool part as it appears in an assistant UIMessage — either a typed\n *  `tool-<name>` part or the generic `dynamic-tool` part. clicky operations\n *  surface as dynamic tools, so the chat UI renders both shapes. */\nexport type AnyToolPart = ToolUIPart | DynamicToolUIPart;\n\n/** Claude Agent SDK permission modes accepted by `permissionMode`. */\nexport const CLAUDE_PERMISSION_MODES = [\n  \"default\",\n  \"acceptEdits\",\n  \"bypassPermissions\",\n  \"plan\",\n  \"dontAsk\",\n  \"auto\",\n] as const;\n\nexport type ClaudePermissionMode = (typeof CLAUDE_PERMISSION_MODES)[number];\n\nexport type ClaudePermissionModeOption = {\n  value: ClaudePermissionMode;\n  label: string;\n  description: string;\n};\n\nexport const CLAUDE_PERMISSION_MODE_OPTIONS: ClaudePermissionModeOption[] = [\n  {\n    value: \"default\",\n    label: \"Default\",\n    description:\n      \"Prompt for dangerous operations using standard Claude behavior.\",\n  },\n  {\n    value: \"auto\",\n    label: \"Auto\",\n    description:\n      \"Use Claude's classifier to approve or deny permission prompts.\",\n  },\n  {\n    value: \"acceptEdits\",\n    label: \"Accept edits\",\n    description: \"Automatically accept file edit operations.\",\n  },\n  {\n    value: \"dontAsk\",\n    label: \"Don't ask\",\n    description: \"Do not prompt; deny actions that are not pre-approved.\",\n  },\n  {\n    value: \"plan\",\n    label: \"Plan\",\n    description: \"Planning mode with no tool execution.\",\n  },\n  {\n    value: \"bypassPermissions\",\n    label: \"Bypass\",\n    description:\n      \"Bypass permission checks when explicitly allowed by the host.\",\n  },\n];\n\n/** Tool metadata shared by the chat shell. It both configures the\n *  tool-preferences popover (`name`/`label`/`group`) and carries the schema\n *  derived from a clicky RPC operation (`description`/`inputSchema`). The Go\n *  backend owns execution; the client uses this only for display and to scope\n *  which tools a request may call (passed in the transport `body`). */\n/** Authority for one tool, in Captain's tool vocabulary. The legacy `on`/`off`\n *  spellings are still accepted on the way in (see `normalizeToolPolicyValue`)\n *  and mean `allow`/`deny`; they are never produced here. The UI still *labels*\n *  these On and Off — see `POLICY_LABEL`. */\nexport type ToolPolicy = \"allow\" | \"ask\" | \"deny\" | \"auto\";\n\n/** Canonicalizes a tool policy from the wire, accepting the legacy `on`/`off`\n *  spellings the backend still emits from older catalogs and MCP `_meta`.\n *\n *  `on` means allow rather than auto: the catalog encoding has no separate allow\n *  list, so `on` was always its way of saying auto-run. Keeping private copies of\n *  this rule per call site is how the UI and the server drifted apart, so this is\n *  the only one. */\nexport function normalizeToolPolicy(value: unknown): ToolPolicy | undefined {\n  if (typeof value !== \"string\") return undefined;\n  switch (value.trim().toLowerCase()) {\n    case \"allow\":\n    case \"on\":\n    case \"enabled\":\n      return \"allow\";\n    case \"ask\":\n      return \"ask\";\n    case \"deny\":\n    case \"off\":\n    case \"disabled\":\n      return \"deny\";\n    case \"auto\":\n      return \"auto\";\n    default:\n      return undefined;\n  }\n}\n\nexport interface ToolAnnotations {\n  title?: string;\n  readOnlyHint?: boolean;\n  destructiveHint?: boolean;\n  idempotentHint?: boolean;\n  openWorldHint?: boolean;\n  [key: string]: unknown;\n}\n\nexport interface ToolMeta {\n  /** Stable tool name sent to the model (the operation id). */\n  name: string;\n  /** Human-readable label shown in the tool-preferences popover. */\n  label: string;\n  /** Bucket heading in the popover — the clicky surface for RPC operations. */\n  group?: string;\n  /** Display title of the tool's parent surface/entity (e.g. \"Xero Accounts\").\n   *  Used to nest tools under their entity within a group, and as the\n   *  disambiguating prefix in flat lists so sibling verbs (\"List\", \"Get\") stay\n   *  distinguishable. Resolved from the operation's `x-clicky.surface`. */\n  parent?: string;\n  /** Raw entity name of the tool's surface (e.g. \"accounts\"), when known. */\n  entity?: string;\n  /** Preference key sent to the backend. Defaults to `name`; group-backed\n   *  clicky tools set this to the backend tool group. */\n  preferenceKey?: string;\n  /** Initial backend-owned permission when the chat window first sees this tool. */\n  defaultPermission?: ToolPolicy;\n  /** Opaque icon name emitted by the backend, resolved by the host UI. */\n  icon?: string;\n  /** Description shown in tool pickers / tool-call headers. */\n  description?: string;\n  /** Short usage hints shown in the tool browser. */\n  hints?: string[];\n  source?: \"clicky\" | \"custom\" | \"mcp\" | string;\n  server?: string;\n  method?: string;\n  path?: string;\n  operationName?: string;\n  /** The entity verb (list/get/create/update/delete, or a custom action), the\n   *  custom action's name, and whether the operation addresses a collection or a\n   *  single entity. Carried so a permission rule resolves the same way here as\n   *  it does on the server; empty for a tool that projects no clicky operation.\n   *  @see resolveToolPolicy */\n  verb?: string;\n  action?: string;\n  scope?: string;\n  title?: string;\n  /** Whether the runtime should treat the tool input schema as strict/closed. */\n  strict?: boolean;\n  /** Runtime tool annotations/hints, e.g. MCP/Genkit well-known hints. */\n  annotations?: ToolAnnotations;\n  /** JSON-Schema for the tool's input, assembled from an operation's\n   *  parameters + request body. Omitted for hand-authored tools. */\n  inputSchema?: ChatToolInputSchema;\n  outputSchema?: ChatToolInputSchema;\n}\n\nexport type ChatToolInputSchema = JsonSchemaObject;\nexport type JsonSchemaProperty = FormJsonSchemaProperty;\nexport type JSONSchemaProperty = FormJsonSchemaProperty;\n\n/** Returns true for a `dynamic-tool` part (clicky operations surface this way). */\nexport function isDynamicToolPart(part: {\n  type: string;\n}): part is DynamicToolUIPart {\n  return part.type === \"dynamic-tool\";\n}\n\n/** Returns true for a typed `tool-<name>` part. */\nexport function isTypedToolPart(part: { type: string }): part is ToolUIPart {\n  return part.type.startsWith(\"tool-\");\n}\n\n/** The display name of a tool part: the explicit `toolName` for dynamic tools,\n *  otherwise the suffix after `tool-`. */\nexport function toolPartName(part: AnyToolPart): string {\n  if (isDynamicToolPart(part)) {\n    return part.toolName;\n  }\n  return part.type.slice(\"tool-\".length);\n}\n\nexport interface ToolResultRenderArgs {\n  part: AnyToolPart;\n  toolName: string;\n  output: unknown;\n}\n\nexport type ToolResultRenderer = (args: ToolResultRenderArgs) => ReactNode;\n"],"names":[],"mappings":"AA+JO,SAAS,gBAAgB,GAAuB;AACrD,SAAO,OAAO,MAAM,WAAW,IAAI,EAAE;AACvC;AAGO,SAAS,iBAAiB,GAAuB;AACtD,SAAO,OAAO,MAAM,WAAW,IAAI,EAAE;AACvC;AAGO,SAAS,gBAAgB,MAEJ;AAC1B,SAAO,KAAK,SAAS;AACvB;AAGO,SAAS,WAAW,MAA4C;AACrE,SAAO,KAAK,SAAS;AACvB;AAQO,MAAM,0BAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAUO,MAAM,iCAA+D;AAAA,EAC1E;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,EAAA;AAAA,EAEJ;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,EAAA;AAAA,EAEJ;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aAAa;AAAA,EAAA;AAAA,EAEf;AAAA,IACE,OAAO;AAAA,IACP,OAAO;AAAA,IACP,aACE;AAAA,EAAA;AAEN;AAoBO,SAAS,oBAAoB,OAAwC;AAC1E,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,UAAQ,MAAM,KAAA,EAAO,YAAA,GAAY;AAAA,IAC/B,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EAAA;AAEb;AAiEO,SAAS,kBAAkB,MAEJ;AAC5B,SAAO,KAAK,SAAS;AACvB;AAGO,SAAS,gBAAgB,MAA4C;AAC1E,SAAO,KAAK,KAAK,WAAW,OAAO;AACrC;AAIO,SAAS,aAAa,MAA2B;AACtD,MAAI,kBAAkB,IAAI,GAAG;AAC3B,WAAO,KAAK;AAAA,EACd;AACA,SAAO,KAAK,KAAK,MAAM,QAAQ,MAAM;AACvC;"}

package/dist/data/debugConsoleSignal.cjs

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const listeners = /* @__PURE__ */ new Set();
+const watchers = /* @__PURE__ */ new Set();
+function registerDebugConsole(listener) {
+  listeners.add(listener);
+  notify();
+  return () => {
+    listeners.delete(listener);
+    notify();
+  };
+}
+function subscribeToDebugConsole(onChange) {
+  watchers.add(onChange);
+  return () => {
+    watchers.delete(onChange);
+  };
+}
+function notify() {
+  for (const watcher of watchers) watcher();
+}
+function debugConsoleAvailable() {
+  return listeners.size > 0;
+}
+let consoleOpen = false;
+function setDebugConsoleOpen(open) {
+  if (consoleOpen === open) return;
+  consoleOpen = open;
+  notify();
+}
+function debugConsoleOpen() {
+  return consoleOpen && listeners.size > 0;
+}
+function revealDebugConsole(request = {}) {
+  for (const listener of listeners) listener(request);
+}
+const DEBUG_CAPTURE_HEADER = "X-Debug-Level";
+const DEBUG_REFRESH_INSPECTION_HEADER = "X-Debug-Refresh-Inspection";
+let captureLevel = "off";
+let refreshInspection = false;
+function setDebugCaptureLevel(level) {
+  captureLevel = level;
+}
+function setDebugRefreshInspection(refresh) {
+  refreshInspection = refresh;
+}
+function debugCaptureHeaders() {
+  if (captureLevel === "off" || listeners.size === 0) return {};
+  const headers = { [DEBUG_CAPTURE_HEADER]: captureLevel };
+  if (refreshInspection) headers[DEBUG_REFRESH_INSPECTION_HEADER] = "true";
+  return headers;
+}
+exports.DEBUG_CAPTURE_HEADER = DEBUG_CAPTURE_HEADER;
+exports.DEBUG_REFRESH_INSPECTION_HEADER = DEBUG_REFRESH_INSPECTION_HEADER;
+exports.debugCaptureHeaders = debugCaptureHeaders;
+exports.debugConsoleAvailable = debugConsoleAvailable;
+exports.debugConsoleOpen = debugConsoleOpen;
+exports.registerDebugConsole = registerDebugConsole;
+exports.revealDebugConsole = revealDebugConsole;
+exports.setDebugCaptureLevel = setDebugCaptureLevel;
+exports.setDebugConsoleOpen = setDebugConsoleOpen;
+exports.setDebugRefreshInspection = setDebugRefreshInspection;
+exports.subscribeToDebugConsole = subscribeToDebugConsole;
+//# sourceMappingURL=debugConsoleSignal.cjs.map