@flanksource/clicky-ui 0.3.25 → 0.3.27

package/dist/data/chat/clickyOperationsToTools.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"clickyOperationsToTools.cjs","sources":["../../../src/data/chat/clickyOperationsToTools.ts"],"sourcesContent":["import type {\n  ClickySurface,\n  OpenAPIOperation,\n  OpenAPIParameter,\n  OpenAPISchema,\n  ResolvedOperation,\n} from \"../../rpc/types\";\nimport type {\n  ChatToolInputSchema,\n  JSONSchemaProperty,\n  ToolAnnotations,\n  ToolMeta,\n} from \"./types\";\n\n/** Converts a clicky RPC operation catalog into AI-tool metadata for display\n *  and request scoping. Execution stays in the Go backend; this maps an\n *  operation's `operationId` → tool name, a short `x-clicky` verb/action →\n *  label, the `x-clicky` surface → group, `summary`/`description` → description,\n *  and `parameters` + `requestBody` → a JSON-Schema input. Operations without an\n *  `operationId` are skipped (a tool needs a stable name). */\nexport function clickyOperationsToTools(\n  operations: ResolvedOperation[],\n  surfaces?: ClickySurface[],\n): ToolMeta[] {\n  const surfacesByKey = new Map<string, ClickySurface>();\n  for (const surface of surfaces ?? []) {\n    surfacesByKey.set(surface.key, surface);\n  }\n  const tools: ToolMeta[] = [];\n  for (const resolved of operations) {\n    const tool = operationToTool(resolved.operation, resolved, surfacesByKey);\n    if (tool) {\n      tools.push(tool);\n    }\n  }\n  return tools;\n}\n\nexport function operationToTool(\n  operation: OpenAPIOperation,\n  resolved?: Pick<ResolvedOperation, \"path\" | \"method\">,\n  surfacesByKey?: Map<string, ClickySurface>,\n): ToolMeta | null {\n  if (!operation.operationId) {\n    return null;\n  }\n  if (isCobraHelpOrCompletionOperation(operation, resolved)) {\n    return null;\n  }\n  const meta = operation[\"x-clicky\"];\n  const hints = meta?.toolHints;\n  const group = operationToolGroup(operation);\n  const surface = meta?.surface ? surfacesByKey?.get(meta.surface) : undefined;\n  const parent = surface?.title || hints?.parent || surface?.entity;\n  const icon = hints?.icon || surface?.icon;\n  const defaultPermission = hints?.defaultPermission;\n  const description = operation.description ?? operation.summary;\n  return {\n    name: operation.operationId,\n    label: toolLabel(operation),\n    ...(group\n      ? { group, preferenceKey: group }\n      : meta?.surface\n        ? { group: meta.surface }\n        : {}),\n    ...(defaultPermission ? { defaultPermission } : {}),\n    ...(parent ? { parent } : {}),\n    ...(surface?.entity ? { entity: surface.entity } : {}),\n    ...(icon ? { icon } : {}),\n    ...(description ? { description } : {}),\n    ...(resolved?.method ? { method: resolved.method.toUpperCase() } : {}),\n    ...(resolved?.path ? { path: resolved.path } : {}),\n    strict: hints?.strict ?? true,\n    annotations: toolAnnotations(operation, resolved, description),\n    inputSchema: buildInputSchema(operation),\n  };\n}\n\nfunction toolAnnotations(\n  operation: OpenAPIOperation,\n  resolved: Pick<ResolvedOperation, \"path\" | \"method\"> | undefined,\n  description: string | undefined,\n): ToolAnnotations {\n  const hints = operation[\"x-clicky\"]?.toolHints;\n  const method = resolved?.method?.toUpperCase() ?? \"\";\n  const annotations: ToolAnnotations = {};\n  const title =\n    hints?.title ??\n    operation.summary ??\n    operation[\"x-clicky\"]?.actionName ??\n    description;\n  if (title) annotations.title = title;\n  if (hints?.readOnlyHint !== undefined) {\n    annotations.readOnlyHint = hints.readOnlyHint;\n  } else if (resolved?.method?.toUpperCase() === \"GET\") {\n    annotations.readOnlyHint = true;\n  }\n  if (hints?.idempotentHint !== undefined) {\n    annotations.idempotentHint = hints.idempotentHint;\n  } else if (isIdempotentMethod(method)) {\n    annotations.idempotentHint = true;\n  }\n  if (hints?.destructiveHint !== undefined) {\n    annotations.destructiveHint = hints.destructiveHint;\n  } else if (isDestructiveTool(operation, resolved)) {\n    annotations.destructiveHint = true;\n  }\n  if (hints?.openWorldHint !== undefined) {\n    annotations.openWorldHint = hints.openWorldHint;\n  }\n  return annotations;\n}\n\nfunction isIdempotentMethod(method: string): boolean {\n  return (\n    method === \"GET\" ||\n    method === \"HEAD\" ||\n    method === \"OPTIONS\" ||\n    method === \"PUT\" ||\n    method === \"DELETE\"\n  );\n}\n\nfunction isDestructiveTool(\n  operation: OpenAPIOperation,\n  resolved: Pick<ResolvedOperation, \"path\" | \"method\"> | undefined,\n): boolean {\n  const method = resolved?.method?.toUpperCase() ?? \"\";\n  if (method === \"DELETE\") return true;\n  if (method === \"GET\" || method === \"HEAD\" || method === \"OPTIONS\")\n    return false;\n  const text = `${resolved?.path ?? \"\"} ${operation.operationId ?? \"\"}`.toLowerCase();\n  return /\\b(write|delete|remove|destroy|void|sync|create|update|patch|post)\\b/.test(\n    text,\n  );\n}\n\nfunction operationToolGroup(\n  operation: OpenAPIOperation,\n): string | undefined {\n  const meta = operation[\"x-clicky\"];\n  if (meta?.toolHints?.group) return meta.toolHints.group;\n  if (meta?.group) return meta.group;\n  return undefined;\n}\n\nfunction isCobraHelpOrCompletionOperation(\n  operation: OpenAPIOperation,\n  resolved?: Pick<ResolvedOperation, \"path\" | \"method\">,\n): boolean {\n  return (\n    commandStartsWithCobraBuiltin(operation.operationId) ||\n    commandStartsWithCobraBuiltin(operation[\"x-clicky\"]?.command) ||\n    pathContainsCobraBuiltin(resolved?.path)\n  );\n}\n\nfunction commandStartsWithCobraBuiltin(raw: string | undefined): boolean {\n  if (!raw) return false;\n  const normalized = raw\n    .replace(/([a-z\\d])([A-Z])/g, \"$1 $2\")\n    .replace(/[/_.-]+/g, \" \")\n    .trim()\n    .toLowerCase();\n  const first = normalized.split(/\\s+/)[0];\n  return first === \"completion\" || first === \"help\";\n}\n\nfunction pathContainsCobraBuiltin(path: string | undefined): boolean {\n  if (!path) return false;\n  const parts = path\n    .split(\"/\")\n    .filter(Boolean)\n    .map((part) => part.toLowerCase());\n  const commandParts =\n    parts[0] === \"api\" && /^v\\d+$/.test(parts[1] ?? \"\")\n      ? parts.slice(2)\n      : parts;\n  const first = commandParts[0];\n  return first === \"completion\" || first === \"help\";\n}\n\n\n/** A concise popover label: the clicky action/verb (capitalized) when present,\n *  else the operation summary, else a humanized operationId. Mirrors the intent\n *  of rpc/clickyMetadata.ts `surfaceActionLabel`. */\nfunction toolLabel(operation: OpenAPIOperation): string {\n  const meta = operation[\"x-clicky\"];\n  const short = meta?.actionName?.trim() || meta?.verb?.trim();\n  if (short && short !== \"action\") {\n    return short.charAt(0).toUpperCase() + short.slice(1);\n  }\n  if (operation.summary) {\n    return operation.summary;\n  }\n  return humanize(operation.operationId ?? \"\");\n}\n\nfunction humanize(operationId: string): string {\n  const spaced = operationId\n    .replace(/[_-]+/g, \" \")\n    .replace(/([a-z\\d])([A-Z])/g, \"$1 $2\");\n  return spaced.charAt(0).toUpperCase() + spaced.slice(1);\n}\n\nfunction buildInputSchema(operation: OpenAPIOperation): ChatToolInputSchema {\n  const properties: Record<string, JSONSchemaProperty> = {};\n  const required: string[] = [];\n\n  for (const param of operation.parameters ?? []) {\n    properties[param.name] = parameterToProperty(param);\n    if (param.required) {\n      required.push(param.name);\n    }\n  }\n\n  const body = requestBodySchema(operation);\n  if (body?.properties) {\n    for (const [name, schema] of Object.entries(body.properties)) {\n      properties[name] = schemaToProperty(schema);\n    }\n  }\n\n  return { type: \"object\", properties, required, additionalProperties: false };\n}\n\nfunction parameterToProperty(param: OpenAPIParameter): JSONSchemaProperty {\n  const prop = schemaToProperty(param.schema);\n  if (param.description && !prop.description) {\n    prop.description = param.description;\n  }\n  return prop;\n}\n\nfunction schemaToProperty(\n  schema: OpenAPISchema | undefined,\n): JSONSchemaProperty {\n  if (!schema) {\n    return { type: \"string\" };\n  }\n  const prop: JSONSchemaProperty = { type: jsonSchemaType(schema.type) };\n  if (schema.description !== undefined) {\n    prop.description = schema.description;\n  }\n  if (schema.enum !== undefined) {\n    prop.enum = schema.enum;\n  }\n  if (schema.default !== undefined) {\n    prop.default = schema.default;\n  }\n  return prop;\n}\n\nfunction jsonSchemaType(\n  type: string | undefined,\n): NonNullable<JSONSchemaProperty[\"type\"]> {\n  switch (type) {\n    case \"object\":\n    case \"array\":\n    case \"string\":\n    case \"integer\":\n    case \"number\":\n    case \"boolean\":\n    case \"null\":\n      return type;\n    default:\n      return \"string\";\n  }\n}\n\nfunction requestBodySchema(\n  operation: OpenAPIOperation,\n): OpenAPISchema | undefined {\n  const content = operation.requestBody?.content;\n  if (!content) {\n    return undefined;\n  }\n  return (\n    content[\"application/json\"]?.schema ?? Object.values(content)[0]?.schema\n  );\n}\n"],"names":[],"mappings":";;AAoBO,SAAS,wBACd,YACA,UACY;AACZ,QAAM,oCAAoB,IAAA;AAC1B,aAAW,WAAW,YAAY,IAAI;AACpC,kBAAc,IAAI,QAAQ,KAAK,OAAO;AAAA,EACxC;AACA,QAAM,QAAoB,CAAA;AAC1B,aAAW,YAAY,YAAY;AACjC,UAAM,OAAO,gBAAgB,SAAS,WAAW,UAAU,aAAa;AACxE,QAAI,MAAM;AACR,YAAM,KAAK,IAAI;AAAA,IACjB;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,gBACd,WACA,UACA,eACiB;AACjB,MAAI,CAAC,UAAU,aAAa;AAC1B,WAAO;AAAA,EACT;AACA,MAAI,iCAAiC,WAAW,QAAQ,GAAG;AACzD,WAAO;AAAA,EACT;AACA,QAAM,OAAO,UAAU,UAAU;AACjC,QAAM,QAAQ,6BAAM;AACpB,QAAM,QAAQ,mBAAmB,SAAS;AAC1C,QAAM,WAAU,6BAAM,WAAU,+CAAe,IAAI,KAAK,WAAW;AACnE,QAAM,UAAS,mCAAS,WAAS,+BAAO,YAAU,mCAAS;AAC3D,QAAM,QAAO,+BAAO,UAAQ,mCAAS;AACrC,QAAM,oBAAoB,+BAAO;AACjC,QAAM,cAAc,UAAU,eAAe,UAAU;AACvD,SAAO;AAAA,IACL,MAAM,UAAU;AAAA,IAChB,OAAO,UAAU,SAAS;AAAA,IAC1B,GAAI,QACA,EAAE,OAAO,eAAe,MAAA,KACxB,6BAAM,WACJ,EAAE,OAAO,KAAK,QAAA,IACd,CAAA;AAAA,IACN,GAAI,oBAAoB,EAAE,kBAAA,IAAsB,CAAA;AAAA,IAChD,GAAI,SAAS,EAAE,OAAA,IAAW,CAAA;AAAA,IAC1B,IAAI,mCAAS,UAAS,EAAE,QAAQ,QAAQ,OAAA,IAAW,CAAA;AAAA,IACnD,GAAI,OAAO,EAAE,KAAA,IAAS,CAAA;AAAA,IACtB,GAAI,cAAc,EAAE,YAAA,IAAgB,CAAA;AAAA,IACpC,IAAI,qCAAU,UAAS,EAAE,QAAQ,SAAS,OAAO,YAAA,EAAY,IAAM,CAAA;AAAA,IACnE,IAAI,qCAAU,QAAO,EAAE,MAAM,SAAS,KAAA,IAAS,CAAA;AAAA,IAC/C,SAAQ,+BAAO,WAAU;AAAA,IACzB,aAAa,gBAAgB,WAAW,UAAU,WAAW;AAAA,IAC7D,aAAa,iBAAiB,SAAS;AAAA,EAAA;AAE3C;AAEA,SAAS,gBACP,WACA,UACA,aACiB;;AACjB,QAAM,SAAQ,eAAU,UAAU,MAApB,mBAAuB;AACrC,QAAM,WAAS,0CAAU,WAAV,mBAAkB,kBAAiB;AAClD,QAAM,cAA+B,CAAA;AACrC,QAAM,SACJ,+BAAO,UACP,UAAU,aACV,eAAU,UAAU,MAApB,mBAAuB,eACvB;AACF,MAAI,mBAAmB,QAAQ;AAC/B,OAAI,+BAAO,kBAAiB,QAAW;AACrC,gBAAY,eAAe,MAAM;AAAA,EACnC,aAAW,0CAAU,WAAV,mBAAkB,mBAAkB,OAAO;AACpD,gBAAY,eAAe;AAAA,EAC7B;AACA,OAAI,+BAAO,oBAAmB,QAAW;AACvC,gBAAY,iBAAiB,MAAM;AAAA,EACrC,WAAW,mBAAmB,MAAM,GAAG;AACrC,gBAAY,iBAAiB;AAAA,EAC/B;AACA,OAAI,+BAAO,qBAAoB,QAAW;AACxC,gBAAY,kBAAkB,MAAM;AAAA,EACtC,WAAW,kBAAkB,WAAW,QAAQ,GAAG;AACjD,gBAAY,kBAAkB;AAAA,EAChC;AACA,OAAI,+BAAO,mBAAkB,QAAW;AACtC,gBAAY,gBAAgB,MAAM;AAAA,EACpC;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,QAAyB;AACnD,SACE,WAAW,SACX,WAAW,UACX,WAAW,aACX,WAAW,SACX,WAAW;AAEf;AAEA,SAAS,kBACP,WACA,UACS;;AACT,QAAM,WAAS,0CAAU,WAAV,mBAAkB,kBAAiB;AAClD,MAAI,WAAW,SAAU,QAAO;AAChC,MAAI,WAAW,SAAS,WAAW,UAAU,WAAW;AACtD,WAAO;AACT,QAAM,OAAO,IAAG,qCAAU,SAAQ,EAAE,IAAI,UAAU,eAAe,EAAE,GAAG,YAAA;AACtE,SAAO,uEAAuE;AAAA,IAC5E;AAAA,EAAA;AAEJ;AAEA,SAAS,mBACP,WACoB;;AACpB,QAAM,OAAO,UAAU,UAAU;AACjC,OAAI,kCAAM,cAAN,mBAAiB,MAAO,QAAO,KAAK,UAAU;AAClD,MAAI,6BAAM,MAAO,QAAO,KAAK;AAC7B,SAAO;AACT;AAEA,SAAS,iCACP,WACA,UACS;;AACT,SACE,8BAA8B,UAAU,WAAW,KACnD,+BAA8B,eAAU,UAAU,MAApB,mBAAuB,OAAO,KAC5D,yBAAyB,qCAAU,IAAI;AAE3C;AAEA,SAAS,8BAA8B,KAAkC;AACvE,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,aAAa,IAChB,QAAQ,qBAAqB,OAAO,EACpC,QAAQ,YAAY,GAAG,EACvB,KAAA,EACA,YAAA;AACH,QAAM,QAAQ,WAAW,MAAM,KAAK,EAAE,CAAC;AACvC,SAAO,UAAU,gBAAgB,UAAU;AAC7C;AAEA,SAAS,yBAAyB,MAAmC;AACnE,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,QAAQ,KACX,MAAM,GAAG,EACT,OAAO,OAAO,EACd,IAAI,CAAC,SAAS,KAAK,aAAa;AACnC,QAAM,eACJ,MAAM,CAAC,MAAM,SAAS,SAAS,KAAK,MAAM,CAAC,KAAK,EAAE,IAC9C,MAAM,MAAM,CAAC,IACb;AACN,QAAM,QAAQ,aAAa,CAAC;AAC5B,SAAO,UAAU,gBAAgB,UAAU;AAC7C;AAMA,SAAS,UAAU,WAAqC;;AACtD,QAAM,OAAO,UAAU,UAAU;AACjC,QAAM,UAAQ,kCAAM,eAAN,mBAAkB,aAAU,kCAAM,SAAN,mBAAY;AACtD,MAAI,SAAS,UAAU,UAAU;AAC/B,WAAO,MAAM,OAAO,CAAC,EAAE,gBAAgB,MAAM,MAAM,CAAC;AAAA,EACtD;AACA,MAAI,UAAU,SAAS;AACrB,WAAO,UAAU;AAAA,EACnB;AACA,SAAO,SAAS,UAAU,eAAe,EAAE;AAC7C;AAEA,SAAS,SAAS,aAA6B;AAC7C,QAAM,SAAS,YACZ,QAAQ,UAAU,GAAG,EACrB,QAAQ,qBAAqB,OAAO;AACvC,SAAO,OAAO,OAAO,CAAC,EAAE,gBAAgB,OAAO,MAAM,CAAC;AACxD;AAEA,SAAS,iBAAiB,WAAkD;AAC1E,QAAM,aAAiD,CAAA;AACvD,QAAM,WAAqB,CAAA;AAE3B,aAAW,SAAS,UAAU,cAAc,CAAA,GAAI;AAC9C,eAAW,MAAM,IAAI,IAAI,oBAAoB,KAAK;AAClD,QAAI,MAAM,UAAU;AAClB,eAAS,KAAK,MAAM,IAAI;AAAA,IAC1B;AAAA,EACF;AAEA,QAAM,OAAO,kBAAkB,SAAS;AACxC,MAAI,6BAAM,YAAY;AACpB,eAAW,CAAC,MAAM,MAAM,KAAK,OAAO,QAAQ,KAAK,UAAU,GAAG;AAC5D,iBAAW,IAAI,IAAI,iBAAiB,MAAM;AAAA,IAC5C;AAAA,EACF;AAEA,SAAO,EAAE,MAAM,UAAU,YAAY,UAAU,sBAAsB,MAAA;AACvE;AAEA,SAAS,oBAAoB,OAA6C;AACxE,QAAM,OAAO,iBAAiB,MAAM,MAAM;AAC1C,MAAI,MAAM,eAAe,CAAC,KAAK,aAAa;AAC1C,SAAK,cAAc,MAAM;AAAA,EAC3B;AACA,SAAO;AACT;AAEA,SAAS,iBACP,QACoB;AACpB,MAAI,CAAC,QAAQ;AACX,WAAO,EAAE,MAAM,SAAA;AAAA,EACjB;AACA,QAAM,OAA2B,EAAE,MAAM,eAAe,OAAO,IAAI,EAAA;AACnE,MAAI,OAAO,gBAAgB,QAAW;AACpC,SAAK,cAAc,OAAO;AAAA,EAC5B;AACA,MAAI,OAAO,SAAS,QAAW;AAC7B,SAAK,OAAO,OAAO;AAAA,EACrB;AACA,MAAI,OAAO,YAAY,QAAW;AAChC,SAAK,UAAU,OAAO;AAAA,EACxB;AACA,SAAO;AACT;AAEA,SAAS,eACP,MACyC;AACzC,UAAQ,MAAA;AAAA,IACN,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EAAA;AAEb;AAEA,SAAS,kBACP,WAC2B;;AAC3B,QAAM,WAAU,eAAU,gBAAV,mBAAuB;AACvC,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AACA,WACE,aAAQ,kBAAkB,MAA1B,mBAA6B,aAAU,YAAO,OAAO,OAAO,EAAE,CAAC,MAAxB,mBAA2B;AAEtE;;;"}
+{"version":3,"file":"clickyOperationsToTools.cjs","sources":["../../../src/data/chat/clickyOperationsToTools.ts"],"sourcesContent":["import type {\n  ClickySurface,\n  OpenAPIOperation,\n  OpenAPIParameter,\n  OpenAPISchema,\n  ResolvedOperation,\n} from \"../../rpc/types\";\nimport type {\n  ChatToolInputSchema,\n  JSONSchemaProperty,\n  ToolAnnotations,\n  ToolMeta,\n} from \"./types\";\nimport { normalizeToolPolicy } from \"./types\";\n\n/** Converts a clicky RPC operation catalog into AI-tool metadata for display\n *  and request scoping. Execution stays in the Go backend; this maps an\n *  operation's `operationId` → tool name, a short `x-clicky` verb/action →\n *  label, the `x-clicky` surface → group, `summary`/`description` → description,\n *  and `parameters` + `requestBody` → a JSON-Schema input. Operations without an\n *  `operationId` are skipped (a tool needs a stable name). */\nexport function clickyOperationsToTools(\n  operations: ResolvedOperation[],\n  surfaces?: ClickySurface[],\n): ToolMeta[] {\n  const surfacesByKey = new Map<string, ClickySurface>();\n  for (const surface of surfaces ?? []) {\n    surfacesByKey.set(surface.key, surface);\n  }\n  const tools: ToolMeta[] = [];\n  for (const resolved of operations) {\n    const tool = operationToTool(resolved.operation, resolved, surfacesByKey);\n    if (tool) {\n      tools.push(tool);\n    }\n  }\n  return tools;\n}\n\nexport function operationToTool(\n  operation: OpenAPIOperation,\n  resolved?: Pick<ResolvedOperation, \"path\" | \"method\">,\n  surfacesByKey?: Map<string, ClickySurface>,\n): ToolMeta | null {\n  if (!operation.operationId) {\n    return null;\n  }\n  if (isCobraHelpOrCompletionOperation(operation, resolved)) {\n    return null;\n  }\n  const meta = operation[\"x-clicky\"];\n  const hints = meta?.toolHints;\n  const group = operationToolGroup(operation);\n  const surface = meta?.surface ? surfacesByKey?.get(meta.surface) : undefined;\n  const parent = surface?.title || hints?.parent || surface?.entity;\n  const icon = hints?.icon || surface?.icon;\n  // Operation hints still carry the legacy on/off spellings, so this is a real\n  // translation, not a pass-through.\n  const defaultPermission = normalizeToolPolicy(hints?.defaultPermission);\n  const description = operation.description ?? operation.summary;\n  return {\n    name: operation.operationId,\n    label: toolLabel(operation),\n    ...(group\n      ? { group, preferenceKey: group }\n      : meta?.surface\n        ? { group: meta.surface }\n        : {}),\n    ...(defaultPermission ? { defaultPermission } : {}),\n    ...(parent ? { parent } : {}),\n    ...(surface?.entity ? { entity: surface.entity } : {}),\n    ...(icon ? { icon } : {}),\n    ...(description ? { description } : {}),\n    ...(resolved?.method ? { method: resolved.method.toUpperCase() } : {}),\n    ...(resolved?.path ? { path: resolved.path } : {}),\n    strict: hints?.strict ?? true,\n    annotations: toolAnnotations(operation, resolved, description),\n    inputSchema: buildInputSchema(operation),\n  };\n}\n\nfunction toolAnnotations(\n  operation: OpenAPIOperation,\n  resolved: Pick<ResolvedOperation, \"path\" | \"method\"> | undefined,\n  description: string | undefined,\n): ToolAnnotations {\n  const hints = operation[\"x-clicky\"]?.toolHints;\n  const method = resolved?.method?.toUpperCase() ?? \"\";\n  const annotations: ToolAnnotations = {};\n  const title =\n    hints?.title ??\n    operation.summary ??\n    operation[\"x-clicky\"]?.actionName ??\n    description;\n  if (title) annotations.title = title;\n  if (hints?.readOnlyHint !== undefined) {\n    annotations.readOnlyHint = hints.readOnlyHint;\n  } else if (resolved?.method?.toUpperCase() === \"GET\") {\n    annotations.readOnlyHint = true;\n  }\n  if (hints?.idempotentHint !== undefined) {\n    annotations.idempotentHint = hints.idempotentHint;\n  } else if (isIdempotentMethod(method)) {\n    annotations.idempotentHint = true;\n  }\n  if (hints?.destructiveHint !== undefined) {\n    annotations.destructiveHint = hints.destructiveHint;\n  } else if (isDestructiveTool(operation, resolved)) {\n    annotations.destructiveHint = true;\n  }\n  if (hints?.openWorldHint !== undefined) {\n    annotations.openWorldHint = hints.openWorldHint;\n  }\n  return annotations;\n}\n\nfunction isIdempotentMethod(method: string): boolean {\n  return (\n    method === \"GET\" ||\n    method === \"HEAD\" ||\n    method === \"OPTIONS\" ||\n    method === \"PUT\" ||\n    method === \"DELETE\"\n  );\n}\n\nfunction isDestructiveTool(\n  operation: OpenAPIOperation,\n  resolved: Pick<ResolvedOperation, \"path\" | \"method\"> | undefined,\n): boolean {\n  const method = resolved?.method?.toUpperCase() ?? \"\";\n  if (method === \"DELETE\") return true;\n  if (method === \"GET\" || method === \"HEAD\" || method === \"OPTIONS\")\n    return false;\n  const text = `${resolved?.path ?? \"\"} ${operation.operationId ?? \"\"}`.toLowerCase();\n  return /\\b(write|delete|remove|destroy|void|sync|create|update|patch|post)\\b/.test(\n    text,\n  );\n}\n\nfunction operationToolGroup(\n  operation: OpenAPIOperation,\n): string | undefined {\n  const meta = operation[\"x-clicky\"];\n  if (meta?.toolHints?.group) return meta.toolHints.group;\n  if (meta?.group) return meta.group;\n  return undefined;\n}\n\nfunction isCobraHelpOrCompletionOperation(\n  operation: OpenAPIOperation,\n  resolved?: Pick<ResolvedOperation, \"path\" | \"method\">,\n): boolean {\n  return (\n    commandStartsWithCobraBuiltin(operation.operationId) ||\n    commandStartsWithCobraBuiltin(operation[\"x-clicky\"]?.command) ||\n    pathContainsCobraBuiltin(resolved?.path)\n  );\n}\n\nfunction commandStartsWithCobraBuiltin(raw: string | undefined): boolean {\n  if (!raw) return false;\n  const normalized = raw\n    .replace(/([a-z\\d])([A-Z])/g, \"$1 $2\")\n    .replace(/[/_.-]+/g, \" \")\n    .trim()\n    .toLowerCase();\n  const first = normalized.split(/\\s+/)[0];\n  return first === \"completion\" || first === \"help\";\n}\n\nfunction pathContainsCobraBuiltin(path: string | undefined): boolean {\n  if (!path) return false;\n  const parts = path\n    .split(\"/\")\n    .filter(Boolean)\n    .map((part) => part.toLowerCase());\n  const commandParts =\n    parts[0] === \"api\" && /^v\\d+$/.test(parts[1] ?? \"\")\n      ? parts.slice(2)\n      : parts;\n  const first = commandParts[0];\n  return first === \"completion\" || first === \"help\";\n}\n\n\n/** A concise popover label: the clicky action/verb (capitalized) when present,\n *  else the operation summary, else a humanized operationId. Mirrors the intent\n *  of rpc/clickyMetadata.ts `surfaceActionLabel`. */\nfunction toolLabel(operation: OpenAPIOperation): string {\n  const meta = operation[\"x-clicky\"];\n  const short = meta?.actionName?.trim() || meta?.verb?.trim();\n  if (short && short !== \"action\") {\n    return short.charAt(0).toUpperCase() + short.slice(1);\n  }\n  if (operation.summary) {\n    return operation.summary;\n  }\n  return humanize(operation.operationId ?? \"\");\n}\n\nfunction humanize(operationId: string): string {\n  const spaced = operationId\n    .replace(/[_-]+/g, \" \")\n    .replace(/([a-z\\d])([A-Z])/g, \"$1 $2\");\n  return spaced.charAt(0).toUpperCase() + spaced.slice(1);\n}\n\nfunction buildInputSchema(operation: OpenAPIOperation): ChatToolInputSchema {\n  const properties: Record<string, JSONSchemaProperty> = {};\n  const required: string[] = [];\n\n  for (const param of operation.parameters ?? []) {\n    properties[param.name] = parameterToProperty(param);\n    if (param.required) {\n      required.push(param.name);\n    }\n  }\n\n  const body = requestBodySchema(operation);\n  if (body?.properties) {\n    for (const [name, schema] of Object.entries(body.properties)) {\n      properties[name] = schemaToProperty(schema);\n    }\n  }\n\n  return { type: \"object\", properties, required, additionalProperties: false };\n}\n\nfunction parameterToProperty(param: OpenAPIParameter): JSONSchemaProperty {\n  const prop = schemaToProperty(param.schema);\n  if (param.description && !prop.description) {\n    prop.description = param.description;\n  }\n  return prop;\n}\n\nfunction schemaToProperty(\n  schema: OpenAPISchema | undefined,\n): JSONSchemaProperty {\n  if (!schema) {\n    return { type: \"string\" };\n  }\n  const prop: JSONSchemaProperty = { type: jsonSchemaType(schema.type) };\n  if (schema.description !== undefined) {\n    prop.description = schema.description;\n  }\n  if (schema.enum !== undefined) {\n    prop.enum = schema.enum;\n  }\n  if (schema.default !== undefined) {\n    prop.default = schema.default;\n  }\n  return prop;\n}\n\nfunction jsonSchemaType(\n  type: string | undefined,\n): NonNullable<JSONSchemaProperty[\"type\"]> {\n  switch (type) {\n    case \"object\":\n    case \"array\":\n    case \"string\":\n    case \"integer\":\n    case \"number\":\n    case \"boolean\":\n    case \"null\":\n      return type;\n    default:\n      return \"string\";\n  }\n}\n\nfunction requestBodySchema(\n  operation: OpenAPIOperation,\n): OpenAPISchema | undefined {\n  const content = operation.requestBody?.content;\n  if (!content) {\n    return undefined;\n  }\n  return (\n    content[\"application/json\"]?.schema ?? Object.values(content)[0]?.schema\n  );\n}\n"],"names":["normalizeToolPolicy"],"mappings":";;;AAqBO,SAAS,wBACd,YACA,UACY;AACZ,QAAM,oCAAoB,IAAA;AAC1B,aAAW,WAAW,YAAY,IAAI;AACpC,kBAAc,IAAI,QAAQ,KAAK,OAAO;AAAA,EACxC;AACA,QAAM,QAAoB,CAAA;AAC1B,aAAW,YAAY,YAAY;AACjC,UAAM,OAAO,gBAAgB,SAAS,WAAW,UAAU,aAAa;AACxE,QAAI,MAAM;AACR,YAAM,KAAK,IAAI;AAAA,IACjB;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,gBACd,WACA,UACA,eACiB;AACjB,MAAI,CAAC,UAAU,aAAa;AAC1B,WAAO;AAAA,EACT;AACA,MAAI,iCAAiC,WAAW,QAAQ,GAAG;AACzD,WAAO;AAAA,EACT;AACA,QAAM,OAAO,UAAU,UAAU;AACjC,QAAM,QAAQ,6BAAM;AACpB,QAAM,QAAQ,mBAAmB,SAAS;AAC1C,QAAM,WAAU,6BAAM,WAAU,+CAAe,IAAI,KAAK,WAAW;AACnE,QAAM,UAAS,mCAAS,WAAS,+BAAO,YAAU,mCAAS;AAC3D,QAAM,QAAO,+BAAO,UAAQ,mCAAS;AAGrC,QAAM,oBAAoBA,MAAAA,oBAAoB,+BAAO,iBAAiB;AACtE,QAAM,cAAc,UAAU,eAAe,UAAU;AACvD,SAAO;AAAA,IACL,MAAM,UAAU;AAAA,IAChB,OAAO,UAAU,SAAS;AAAA,IAC1B,GAAI,QACA,EAAE,OAAO,eAAe,MAAA,KACxB,6BAAM,WACJ,EAAE,OAAO,KAAK,QAAA,IACd,CAAA;AAAA,IACN,GAAI,oBAAoB,EAAE,kBAAA,IAAsB,CAAA;AAAA,IAChD,GAAI,SAAS,EAAE,OAAA,IAAW,CAAA;AAAA,IAC1B,IAAI,mCAAS,UAAS,EAAE,QAAQ,QAAQ,OAAA,IAAW,CAAA;AAAA,IACnD,GAAI,OAAO,EAAE,KAAA,IAAS,CAAA;AAAA,IACtB,GAAI,cAAc,EAAE,YAAA,IAAgB,CAAA;AAAA,IACpC,IAAI,qCAAU,UAAS,EAAE,QAAQ,SAAS,OAAO,YAAA,EAAY,IAAM,CAAA;AAAA,IACnE,IAAI,qCAAU,QAAO,EAAE,MAAM,SAAS,KAAA,IAAS,CAAA;AAAA,IAC/C,SAAQ,+BAAO,WAAU;AAAA,IACzB,aAAa,gBAAgB,WAAW,UAAU,WAAW;AAAA,IAC7D,aAAa,iBAAiB,SAAS;AAAA,EAAA;AAE3C;AAEA,SAAS,gBACP,WACA,UACA,aACiB;;AACjB,QAAM,SAAQ,eAAU,UAAU,MAApB,mBAAuB;AACrC,QAAM,WAAS,0CAAU,WAAV,mBAAkB,kBAAiB;AAClD,QAAM,cAA+B,CAAA;AACrC,QAAM,SACJ,+BAAO,UACP,UAAU,aACV,eAAU,UAAU,MAApB,mBAAuB,eACvB;AACF,MAAI,mBAAmB,QAAQ;AAC/B,OAAI,+BAAO,kBAAiB,QAAW;AACrC,gBAAY,eAAe,MAAM;AAAA,EACnC,aAAW,0CAAU,WAAV,mBAAkB,mBAAkB,OAAO;AACpD,gBAAY,eAAe;AAAA,EAC7B;AACA,OAAI,+BAAO,oBAAmB,QAAW;AACvC,gBAAY,iBAAiB,MAAM;AAAA,EACrC,WAAW,mBAAmB,MAAM,GAAG;AACrC,gBAAY,iBAAiB;AAAA,EAC/B;AACA,OAAI,+BAAO,qBAAoB,QAAW;AACxC,gBAAY,kBAAkB,MAAM;AAAA,EACtC,WAAW,kBAAkB,WAAW,QAAQ,GAAG;AACjD,gBAAY,kBAAkB;AAAA,EAChC;AACA,OAAI,+BAAO,mBAAkB,QAAW;AACtC,gBAAY,gBAAgB,MAAM;AAAA,EACpC;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,QAAyB;AACnD,SACE,WAAW,SACX,WAAW,UACX,WAAW,aACX,WAAW,SACX,WAAW;AAEf;AAEA,SAAS,kBACP,WACA,UACS;;AACT,QAAM,WAAS,0CAAU,WAAV,mBAAkB,kBAAiB;AAClD,MAAI,WAAW,SAAU,QAAO;AAChC,MAAI,WAAW,SAAS,WAAW,UAAU,WAAW;AACtD,WAAO;AACT,QAAM,OAAO,IAAG,qCAAU,SAAQ,EAAE,IAAI,UAAU,eAAe,EAAE,GAAG,YAAA;AACtE,SAAO,uEAAuE;AAAA,IAC5E;AAAA,EAAA;AAEJ;AAEA,SAAS,mBACP,WACoB;;AACpB,QAAM,OAAO,UAAU,UAAU;AACjC,OAAI,kCAAM,cAAN,mBAAiB,MAAO,QAAO,KAAK,UAAU;AAClD,MAAI,6BAAM,MAAO,QAAO,KAAK;AAC7B,SAAO;AACT;AAEA,SAAS,iCACP,WACA,UACS;;AACT,SACE,8BAA8B,UAAU,WAAW,KACnD,+BAA8B,eAAU,UAAU,MAApB,mBAAuB,OAAO,KAC5D,yBAAyB,qCAAU,IAAI;AAE3C;AAEA,SAAS,8BAA8B,KAAkC;AACvE,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,aAAa,IAChB,QAAQ,qBAAqB,OAAO,EACpC,QAAQ,YAAY,GAAG,EACvB,KAAA,EACA,YAAA;AACH,QAAM,QAAQ,WAAW,MAAM,KAAK,EAAE,CAAC;AACvC,SAAO,UAAU,gBAAgB,UAAU;AAC7C;AAEA,SAAS,yBAAyB,MAAmC;AACnE,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,QAAQ,KACX,MAAM,GAAG,EACT,OAAO,OAAO,EACd,IAAI,CAAC,SAAS,KAAK,aAAa;AACnC,QAAM,eACJ,MAAM,CAAC,MAAM,SAAS,SAAS,KAAK,MAAM,CAAC,KAAK,EAAE,IAC9C,MAAM,MAAM,CAAC,IACb;AACN,QAAM,QAAQ,aAAa,CAAC;AAC5B,SAAO,UAAU,gBAAgB,UAAU;AAC7C;AAMA,SAAS,UAAU,WAAqC;;AACtD,QAAM,OAAO,UAAU,UAAU;AACjC,QAAM,UAAQ,kCAAM,eAAN,mBAAkB,aAAU,kCAAM,SAAN,mBAAY;AACtD,MAAI,SAAS,UAAU,UAAU;AAC/B,WAAO,MAAM,OAAO,CAAC,EAAE,gBAAgB,MAAM,MAAM,CAAC;AAAA,EACtD;AACA,MAAI,UAAU,SAAS;AACrB,WAAO,UAAU;AAAA,EACnB;AACA,SAAO,SAAS,UAAU,eAAe,EAAE;AAC7C;AAEA,SAAS,SAAS,aAA6B;AAC7C,QAAM,SAAS,YACZ,QAAQ,UAAU,GAAG,EACrB,QAAQ,qBAAqB,OAAO;AACvC,SAAO,OAAO,OAAO,CAAC,EAAE,gBAAgB,OAAO,MAAM,CAAC;AACxD;AAEA,SAAS,iBAAiB,WAAkD;AAC1E,QAAM,aAAiD,CAAA;AACvD,QAAM,WAAqB,CAAA;AAE3B,aAAW,SAAS,UAAU,cAAc,CAAA,GAAI;AAC9C,eAAW,MAAM,IAAI,IAAI,oBAAoB,KAAK;AAClD,QAAI,MAAM,UAAU;AAClB,eAAS,KAAK,MAAM,IAAI;AAAA,IAC1B;AAAA,EACF;AAEA,QAAM,OAAO,kBAAkB,SAAS;AACxC,MAAI,6BAAM,YAAY;AACpB,eAAW,CAAC,MAAM,MAAM,KAAK,OAAO,QAAQ,KAAK,UAAU,GAAG;AAC5D,iBAAW,IAAI,IAAI,iBAAiB,MAAM;AAAA,IAC5C;AAAA,EACF;AAEA,SAAO,EAAE,MAAM,UAAU,YAAY,UAAU,sBAAsB,MAAA;AACvE;AAEA,SAAS,oBAAoB,OAA6C;AACxE,QAAM,OAAO,iBAAiB,MAAM,MAAM;AAC1C,MAAI,MAAM,eAAe,CAAC,KAAK,aAAa;AAC1C,SAAK,cAAc,MAAM;AAAA,EAC3B;AACA,SAAO;AACT;AAEA,SAAS,iBACP,QACoB;AACpB,MAAI,CAAC,QAAQ;AACX,WAAO,EAAE,MAAM,SAAA;AAAA,EACjB;AACA,QAAM,OAA2B,EAAE,MAAM,eAAe,OAAO,IAAI,EAAA;AACnE,MAAI,OAAO,gBAAgB,QAAW;AACpC,SAAK,cAAc,OAAO;AAAA,EAC5B;AACA,MAAI,OAAO,SAAS,QAAW;AAC7B,SAAK,OAAO,OAAO;AAAA,EACrB;AACA,MAAI,OAAO,YAAY,QAAW;AAChC,SAAK,UAAU,OAAO;AAAA,EACxB;AACA,SAAO;AACT;AAEA,SAAS,eACP,MACyC;AACzC,UAAQ,MAAA;AAAA,IACN,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EAAA;AAEb;AAEA,SAAS,kBACP,WAC2B;;AAC3B,QAAM,WAAU,eAAU,gBAAV,mBAAuB;AACvC,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AACA,WACE,aAAQ,kBAAkB,MAA1B,mBAA6B,aAAU,YAAO,OAAO,OAAO,EAAE,CAAC,MAAxB,mBAA2B;AAEtE;;;"}

package/dist/data/chat/clickyOperationsToTools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"clickyOperationsToTools.d.ts","sourceRoot":"","sources":["../../../src/data/chat/clickyOperationsToTools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,gBAAgB,EAGhB,iBAAiB,EAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAIV,QAAQ,EACT,MAAM,SAAS,CAAC;AAEjB;;;;;8DAK8D;AAC9D,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,iBAAiB,EAAE,EAC/B,QAAQ,CAAC,EAAE,aAAa,EAAE,GACzB,QAAQ,EAAE,CAaZ;AAED,wBAAgB,eAAe,CAC7B,SAAS,EAAE,gBAAgB,EAC3B,QAAQ,CAAC,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,GAAG,QAAQ,CAAC,EACrD,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GACzC,QAAQ,GAAG,IAAI,CAkCjB"}
+{"version":3,"file":"clickyOperationsToTools.d.ts","sourceRoot":"","sources":["../../../src/data/chat/clickyOperationsToTools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,gBAAgB,EAGhB,iBAAiB,EAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAIV,QAAQ,EACT,MAAM,SAAS,CAAC;AAGjB;;;;;8DAK8D;AAC9D,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,iBAAiB,EAAE,EAC/B,QAAQ,CAAC,EAAE,aAAa,EAAE,GACzB,QAAQ,EAAE,CAaZ;AAED,wBAAgB,eAAe,CAC7B,SAAS,EAAE,gBAAgB,EAC3B,QAAQ,CAAC,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,GAAG,QAAQ,CAAC,EACrD,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GACzC,QAAQ,GAAG,IAAI,CAoCjB"}

package/dist/data/chat/clickyOperationsToTools.js

@@ -1,3 +1,4 @@
+import { normalizeToolPolicy } from "./types.js";
 function clickyOperationsToTools(operations, surfaces) {
   const surfacesByKey = /* @__PURE__ */ new Map();
   for (const surface of surfaces ?? []) {
@@ -25,7 +26,7 @@ function operationToTool(operation, resolved, surfacesByKey) {
   const surface = (meta == null ? void 0 : meta.surface) ? surfacesByKey == null ? void 0 : surfacesByKey.get(meta.surface) : void 0;
   const parent = (surface == null ? void 0 : surface.title) || (hints == null ? void 0 : hints.parent) || (surface == null ? void 0 : surface.entity);
   const icon = (hints == null ? void 0 : hints.icon) || (surface == null ? void 0 : surface.icon);
-  const defaultPermission = hints == null ? void 0 : hints.defaultPermission;
+  const defaultPermission = normalizeToolPolicy(hints == null ? void 0 : hints.defaultPermission);
   const description = operation.description ?? operation.summary;
   return {
     name: operation.operationId,

package/dist/data/chat/clickyOperationsToTools.js.map

@@ -1 +1 @@
-{"version":3,"file":"clickyOperationsToTools.js","sources":["../../../src/data/chat/clickyOperationsToTools.ts"],"sourcesContent":["import type {\n  ClickySurface,\n  OpenAPIOperation,\n  OpenAPIParameter,\n  OpenAPISchema,\n  ResolvedOperation,\n} from \"../../rpc/types\";\nimport type {\n  ChatToolInputSchema,\n  JSONSchemaProperty,\n  ToolAnnotations,\n  ToolMeta,\n} from \"./types\";\n\n/** Converts a clicky RPC operation catalog into AI-tool metadata for display\n *  and request scoping. Execution stays in the Go backend; this maps an\n *  operation's `operationId` → tool name, a short `x-clicky` verb/action →\n *  label, the `x-clicky` surface → group, `summary`/`description` → description,\n *  and `parameters` + `requestBody` → a JSON-Schema input. Operations without an\n *  `operationId` are skipped (a tool needs a stable name). */\nexport function clickyOperationsToTools(\n  operations: ResolvedOperation[],\n  surfaces?: ClickySurface[],\n): ToolMeta[] {\n  const surfacesByKey = new Map<string, ClickySurface>();\n  for (const surface of surfaces ?? []) {\n    surfacesByKey.set(surface.key, surface);\n  }\n  const tools: ToolMeta[] = [];\n  for (const resolved of operations) {\n    const tool = operationToTool(resolved.operation, resolved, surfacesByKey);\n    if (tool) {\n      tools.push(tool);\n    }\n  }\n  return tools;\n}\n\nexport function operationToTool(\n  operation: OpenAPIOperation,\n  resolved?: Pick<ResolvedOperation, \"path\" | \"method\">,\n  surfacesByKey?: Map<string, ClickySurface>,\n): ToolMeta | null {\n  if (!operation.operationId) {\n    return null;\n  }\n  if (isCobraHelpOrCompletionOperation(operation, resolved)) {\n    return null;\n  }\n  const meta = operation[\"x-clicky\"];\n  const hints = meta?.toolHints;\n  const group = operationToolGroup(operation);\n  const surface = meta?.surface ? surfacesByKey?.get(meta.surface) : undefined;\n  const parent = surface?.title || hints?.parent || surface?.entity;\n  const icon = hints?.icon || surface?.icon;\n  const defaultPermission = hints?.defaultPermission;\n  const description = operation.description ?? operation.summary;\n  return {\n    name: operation.operationId,\n    label: toolLabel(operation),\n    ...(group\n      ? { group, preferenceKey: group }\n      : meta?.surface\n        ? { group: meta.surface }\n        : {}),\n    ...(defaultPermission ? { defaultPermission } : {}),\n    ...(parent ? { parent } : {}),\n    ...(surface?.entity ? { entity: surface.entity } : {}),\n    ...(icon ? { icon } : {}),\n    ...(description ? { description } : {}),\n    ...(resolved?.method ? { method: resolved.method.toUpperCase() } : {}),\n    ...(resolved?.path ? { path: resolved.path } : {}),\n    strict: hints?.strict ?? true,\n    annotations: toolAnnotations(operation, resolved, description),\n    inputSchema: buildInputSchema(operation),\n  };\n}\n\nfunction toolAnnotations(\n  operation: OpenAPIOperation,\n  resolved: Pick<ResolvedOperation, \"path\" | \"method\"> | undefined,\n  description: string | undefined,\n): ToolAnnotations {\n  const hints = operation[\"x-clicky\"]?.toolHints;\n  const method = resolved?.method?.toUpperCase() ?? \"\";\n  const annotations: ToolAnnotations = {};\n  const title =\n    hints?.title ??\n    operation.summary ??\n    operation[\"x-clicky\"]?.actionName ??\n    description;\n  if (title) annotations.title = title;\n  if (hints?.readOnlyHint !== undefined) {\n    annotations.readOnlyHint = hints.readOnlyHint;\n  } else if (resolved?.method?.toUpperCase() === \"GET\") {\n    annotations.readOnlyHint = true;\n  }\n  if (hints?.idempotentHint !== undefined) {\n    annotations.idempotentHint = hints.idempotentHint;\n  } else if (isIdempotentMethod(method)) {\n    annotations.idempotentHint = true;\n  }\n  if (hints?.destructiveHint !== undefined) {\n    annotations.destructiveHint = hints.destructiveHint;\n  } else if (isDestructiveTool(operation, resolved)) {\n    annotations.destructiveHint = true;\n  }\n  if (hints?.openWorldHint !== undefined) {\n    annotations.openWorldHint = hints.openWorldHint;\n  }\n  return annotations;\n}\n\nfunction isIdempotentMethod(method: string): boolean {\n  return (\n    method === \"GET\" ||\n    method === \"HEAD\" ||\n    method === \"OPTIONS\" ||\n    method === \"PUT\" ||\n    method === \"DELETE\"\n  );\n}\n\nfunction isDestructiveTool(\n  operation: OpenAPIOperation,\n  resolved: Pick<ResolvedOperation, \"path\" | \"method\"> | undefined,\n): boolean {\n  const method = resolved?.method?.toUpperCase() ?? \"\";\n  if (method === \"DELETE\") return true;\n  if (method === \"GET\" || method === \"HEAD\" || method === \"OPTIONS\")\n    return false;\n  const text = `${resolved?.path ?? \"\"} ${operation.operationId ?? \"\"}`.toLowerCase();\n  return /\\b(write|delete|remove|destroy|void|sync|create|update|patch|post)\\b/.test(\n    text,\n  );\n}\n\nfunction operationToolGroup(\n  operation: OpenAPIOperation,\n): string | undefined {\n  const meta = operation[\"x-clicky\"];\n  if (meta?.toolHints?.group) return meta.toolHints.group;\n  if (meta?.group) return meta.group;\n  return undefined;\n}\n\nfunction isCobraHelpOrCompletionOperation(\n  operation: OpenAPIOperation,\n  resolved?: Pick<ResolvedOperation, \"path\" | \"method\">,\n): boolean {\n  return (\n    commandStartsWithCobraBuiltin(operation.operationId) ||\n    commandStartsWithCobraBuiltin(operation[\"x-clicky\"]?.command) ||\n    pathContainsCobraBuiltin(resolved?.path)\n  );\n}\n\nfunction commandStartsWithCobraBuiltin(raw: string | undefined): boolean {\n  if (!raw) return false;\n  const normalized = raw\n    .replace(/([a-z\\d])([A-Z])/g, \"$1 $2\")\n    .replace(/[/_.-]+/g, \" \")\n    .trim()\n    .toLowerCase();\n  const first = normalized.split(/\\s+/)[0];\n  return first === \"completion\" || first === \"help\";\n}\n\nfunction pathContainsCobraBuiltin(path: string | undefined): boolean {\n  if (!path) return false;\n  const parts = path\n    .split(\"/\")\n    .filter(Boolean)\n    .map((part) => part.toLowerCase());\n  const commandParts =\n    parts[0] === \"api\" && /^v\\d+$/.test(parts[1] ?? \"\")\n      ? parts.slice(2)\n      : parts;\n  const first = commandParts[0];\n  return first === \"completion\" || first === \"help\";\n}\n\n\n/** A concise popover label: the clicky action/verb (capitalized) when present,\n *  else the operation summary, else a humanized operationId. Mirrors the intent\n *  of rpc/clickyMetadata.ts `surfaceActionLabel`. */\nfunction toolLabel(operation: OpenAPIOperation): string {\n  const meta = operation[\"x-clicky\"];\n  const short = meta?.actionName?.trim() || meta?.verb?.trim();\n  if (short && short !== \"action\") {\n    return short.charAt(0).toUpperCase() + short.slice(1);\n  }\n  if (operation.summary) {\n    return operation.summary;\n  }\n  return humanize(operation.operationId ?? \"\");\n}\n\nfunction humanize(operationId: string): string {\n  const spaced = operationId\n    .replace(/[_-]+/g, \" \")\n    .replace(/([a-z\\d])([A-Z])/g, \"$1 $2\");\n  return spaced.charAt(0).toUpperCase() + spaced.slice(1);\n}\n\nfunction buildInputSchema(operation: OpenAPIOperation): ChatToolInputSchema {\n  const properties: Record<string, JSONSchemaProperty> = {};\n  const required: string[] = [];\n\n  for (const param of operation.parameters ?? []) {\n    properties[param.name] = parameterToProperty(param);\n    if (param.required) {\n      required.push(param.name);\n    }\n  }\n\n  const body = requestBodySchema(operation);\n  if (body?.properties) {\n    for (const [name, schema] of Object.entries(body.properties)) {\n      properties[name] = schemaToProperty(schema);\n    }\n  }\n\n  return { type: \"object\", properties, required, additionalProperties: false };\n}\n\nfunction parameterToProperty(param: OpenAPIParameter): JSONSchemaProperty {\n  const prop = schemaToProperty(param.schema);\n  if (param.description && !prop.description) {\n    prop.description = param.description;\n  }\n  return prop;\n}\n\nfunction schemaToProperty(\n  schema: OpenAPISchema | undefined,\n): JSONSchemaProperty {\n  if (!schema) {\n    return { type: \"string\" };\n  }\n  const prop: JSONSchemaProperty = { type: jsonSchemaType(schema.type) };\n  if (schema.description !== undefined) {\n    prop.description = schema.description;\n  }\n  if (schema.enum !== undefined) {\n    prop.enum = schema.enum;\n  }\n  if (schema.default !== undefined) {\n    prop.default = schema.default;\n  }\n  return prop;\n}\n\nfunction jsonSchemaType(\n  type: string | undefined,\n): NonNullable<JSONSchemaProperty[\"type\"]> {\n  switch (type) {\n    case \"object\":\n    case \"array\":\n    case \"string\":\n    case \"integer\":\n    case \"number\":\n    case \"boolean\":\n    case \"null\":\n      return type;\n    default:\n      return \"string\";\n  }\n}\n\nfunction requestBodySchema(\n  operation: OpenAPIOperation,\n): OpenAPISchema | undefined {\n  const content = operation.requestBody?.content;\n  if (!content) {\n    return undefined;\n  }\n  return (\n    content[\"application/json\"]?.schema ?? Object.values(content)[0]?.schema\n  );\n}\n"],"names":[],"mappings":"AAoBO,SAAS,wBACd,YACA,UACY;AACZ,QAAM,oCAAoB,IAAA;AAC1B,aAAW,WAAW,YAAY,IAAI;AACpC,kBAAc,IAAI,QAAQ,KAAK,OAAO;AAAA,EACxC;AACA,QAAM,QAAoB,CAAA;AAC1B,aAAW,YAAY,YAAY;AACjC,UAAM,OAAO,gBAAgB,SAAS,WAAW,UAAU,aAAa;AACxE,QAAI,MAAM;AACR,YAAM,KAAK,IAAI;AAAA,IACjB;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,gBACd,WACA,UACA,eACiB;AACjB,MAAI,CAAC,UAAU,aAAa;AAC1B,WAAO;AAAA,EACT;AACA,MAAI,iCAAiC,WAAW,QAAQ,GAAG;AACzD,WAAO;AAAA,EACT;AACA,QAAM,OAAO,UAAU,UAAU;AACjC,QAAM,QAAQ,6BAAM;AACpB,QAAM,QAAQ,mBAAmB,SAAS;AAC1C,QAAM,WAAU,6BAAM,WAAU,+CAAe,IAAI,KAAK,WAAW;AACnE,QAAM,UAAS,mCAAS,WAAS,+BAAO,YAAU,mCAAS;AAC3D,QAAM,QAAO,+BAAO,UAAQ,mCAAS;AACrC,QAAM,oBAAoB,+BAAO;AACjC,QAAM,cAAc,UAAU,eAAe,UAAU;AACvD,SAAO;AAAA,IACL,MAAM,UAAU;AAAA,IAChB,OAAO,UAAU,SAAS;AAAA,IAC1B,GAAI,QACA,EAAE,OAAO,eAAe,MAAA,KACxB,6BAAM,WACJ,EAAE,OAAO,KAAK,QAAA,IACd,CAAA;AAAA,IACN,GAAI,oBAAoB,EAAE,kBAAA,IAAsB,CAAA;AAAA,IAChD,GAAI,SAAS,EAAE,OAAA,IAAW,CAAA;AAAA,IAC1B,IAAI,mCAAS,UAAS,EAAE,QAAQ,QAAQ,OAAA,IAAW,CAAA;AAAA,IACnD,GAAI,OAAO,EAAE,KAAA,IAAS,CAAA;AAAA,IACtB,GAAI,cAAc,EAAE,YAAA,IAAgB,CAAA;AAAA,IACpC,IAAI,qCAAU,UAAS,EAAE,QAAQ,SAAS,OAAO,YAAA,EAAY,IAAM,CAAA;AAAA,IACnE,IAAI,qCAAU,QAAO,EAAE,MAAM,SAAS,KAAA,IAAS,CAAA;AAAA,IAC/C,SAAQ,+BAAO,WAAU;AAAA,IACzB,aAAa,gBAAgB,WAAW,UAAU,WAAW;AAAA,IAC7D,aAAa,iBAAiB,SAAS;AAAA,EAAA;AAE3C;AAEA,SAAS,gBACP,WACA,UACA,aACiB;AA9DZ;AA+DL,QAAM,SAAQ,eAAU,UAAU,MAApB,mBAAuB;AACrC,QAAM,WAAS,0CAAU,WAAV,mBAAkB,kBAAiB;AAClD,QAAM,cAA+B,CAAA;AACrC,QAAM,SACJ,+BAAO,UACP,UAAU,aACV,eAAU,UAAU,MAApB,mBAAuB,eACvB;AACF,MAAI,mBAAmB,QAAQ;AAC/B,OAAI,+BAAO,kBAAiB,QAAW;AACrC,gBAAY,eAAe,MAAM;AAAA,EACnC,aAAW,0CAAU,WAAV,mBAAkB,mBAAkB,OAAO;AACpD,gBAAY,eAAe;AAAA,EAC7B;AACA,OAAI,+BAAO,oBAAmB,QAAW;AACvC,gBAAY,iBAAiB,MAAM;AAAA,EACrC,WAAW,mBAAmB,MAAM,GAAG;AACrC,gBAAY,iBAAiB;AAAA,EAC/B;AACA,OAAI,+BAAO,qBAAoB,QAAW;AACxC,gBAAY,kBAAkB,MAAM;AAAA,EACtC,WAAW,kBAAkB,WAAW,QAAQ,GAAG;AACjD,gBAAY,kBAAkB;AAAA,EAChC;AACA,OAAI,+BAAO,mBAAkB,QAAW;AACtC,gBAAY,gBAAgB,MAAM;AAAA,EACpC;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,QAAyB;AACnD,SACE,WAAW,SACX,WAAW,UACX,WAAW,aACX,WAAW,SACX,WAAW;AAEf;AAEA,SAAS,kBACP,WACA,UACS;AA1GJ;AA2GL,QAAM,WAAS,0CAAU,WAAV,mBAAkB,kBAAiB;AAClD,MAAI,WAAW,SAAU,QAAO;AAChC,MAAI,WAAW,SAAS,WAAW,UAAU,WAAW;AACtD,WAAO;AACT,QAAM,OAAO,IAAG,qCAAU,SAAQ,EAAE,IAAI,UAAU,eAAe,EAAE,GAAG,YAAA;AACtE,SAAO,uEAAuE;AAAA,IAC5E;AAAA,EAAA;AAEJ;AAEA,SAAS,mBACP,WACoB;AAvHf;AAwHL,QAAM,OAAO,UAAU,UAAU;AACjC,OAAI,kCAAM,cAAN,mBAAiB,MAAO,QAAO,KAAK,UAAU;AAClD,MAAI,6BAAM,MAAO,QAAO,KAAK;AAC7B,SAAO;AACT;AAEA,SAAS,iCACP,WACA,UACS;AAjIJ;AAkIL,SACE,8BAA8B,UAAU,WAAW,KACnD,+BAA8B,eAAU,UAAU,MAApB,mBAAuB,OAAO,KAC5D,yBAAyB,qCAAU,IAAI;AAE3C;AAEA,SAAS,8BAA8B,KAAkC;AACvE,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,aAAa,IAChB,QAAQ,qBAAqB,OAAO,EACpC,QAAQ,YAAY,GAAG,EACvB,KAAA,EACA,YAAA;AACH,QAAM,QAAQ,WAAW,MAAM,KAAK,EAAE,CAAC;AACvC,SAAO,UAAU,gBAAgB,UAAU;AAC7C;AAEA,SAAS,yBAAyB,MAAmC;AACnE,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,QAAQ,KACX,MAAM,GAAG,EACT,OAAO,OAAO,EACd,IAAI,CAAC,SAAS,KAAK,aAAa;AACnC,QAAM,eACJ,MAAM,CAAC,MAAM,SAAS,SAAS,KAAK,MAAM,CAAC,KAAK,EAAE,IAC9C,MAAM,MAAM,CAAC,IACb;AACN,QAAM,QAAQ,aAAa,CAAC;AAC5B,SAAO,UAAU,gBAAgB,UAAU;AAC7C;AAMA,SAAS,UAAU,WAAqC;AAtKjD;AAuKL,QAAM,OAAO,UAAU,UAAU;AACjC,QAAM,UAAQ,kCAAM,eAAN,mBAAkB,aAAU,kCAAM,SAAN,mBAAY;AACtD,MAAI,SAAS,UAAU,UAAU;AAC/B,WAAO,MAAM,OAAO,CAAC,EAAE,gBAAgB,MAAM,MAAM,CAAC;AAAA,EACtD;AACA,MAAI,UAAU,SAAS;AACrB,WAAO,UAAU;AAAA,EACnB;AACA,SAAO,SAAS,UAAU,eAAe,EAAE;AAC7C;AAEA,SAAS,SAAS,aAA6B;AAC7C,QAAM,SAAS,YACZ,QAAQ,UAAU,GAAG,EACrB,QAAQ,qBAAqB,OAAO;AACvC,SAAO,OAAO,OAAO,CAAC,EAAE,gBAAgB,OAAO,MAAM,CAAC;AACxD;AAEA,SAAS,iBAAiB,WAAkD;AAC1E,QAAM,aAAiD,CAAA;AACvD,QAAM,WAAqB,CAAA;AAE3B,aAAW,SAAS,UAAU,cAAc,CAAA,GAAI;AAC9C,eAAW,MAAM,IAAI,IAAI,oBAAoB,KAAK;AAClD,QAAI,MAAM,UAAU;AAClB,eAAS,KAAK,MAAM,IAAI;AAAA,IAC1B;AAAA,EACF;AAEA,QAAM,OAAO,kBAAkB,SAAS;AACxC,MAAI,6BAAM,YAAY;AACpB,eAAW,CAAC,MAAM,MAAM,KAAK,OAAO,QAAQ,KAAK,UAAU,GAAG;AAC5D,iBAAW,IAAI,IAAI,iBAAiB,MAAM;AAAA,IAC5C;AAAA,EACF;AAEA,SAAO,EAAE,MAAM,UAAU,YAAY,UAAU,sBAAsB,MAAA;AACvE;AAEA,SAAS,oBAAoB,OAA6C;AACxE,QAAM,OAAO,iBAAiB,MAAM,MAAM;AAC1C,MAAI,MAAM,eAAe,CAAC,KAAK,aAAa;AAC1C,SAAK,cAAc,MAAM;AAAA,EAC3B;AACA,SAAO;AACT;AAEA,SAAS,iBACP,QACoB;AACpB,MAAI,CAAC,QAAQ;AACX,WAAO,EAAE,MAAM,SAAA;AAAA,EACjB;AACA,QAAM,OAA2B,EAAE,MAAM,eAAe,OAAO,IAAI,EAAA;AACnE,MAAI,OAAO,gBAAgB,QAAW;AACpC,SAAK,cAAc,OAAO;AAAA,EAC5B;AACA,MAAI,OAAO,SAAS,QAAW;AAC7B,SAAK,OAAO,OAAO;AAAA,EACrB;AACA,MAAI,OAAO,YAAY,QAAW;AAChC,SAAK,UAAU,OAAO;AAAA,EACxB;AACA,SAAO;AACT;AAEA,SAAS,eACP,MACyC;AACzC,UAAQ,MAAA;AAAA,IACN,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EAAA;AAEb;AAEA,SAAS,kBACP,WAC2B;AA5PtB;AA6PL,QAAM,WAAU,eAAU,gBAAV,mBAAuB;AACvC,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AACA,WACE,aAAQ,kBAAkB,MAA1B,mBAA6B,aAAU,YAAO,OAAO,OAAO,EAAE,CAAC,MAAxB,mBAA2B;AAEtE;"}
+{"version":3,"file":"clickyOperationsToTools.js","sources":["../../../src/data/chat/clickyOperationsToTools.ts"],"sourcesContent":["import type {\n  ClickySurface,\n  OpenAPIOperation,\n  OpenAPIParameter,\n  OpenAPISchema,\n  ResolvedOperation,\n} from \"../../rpc/types\";\nimport type {\n  ChatToolInputSchema,\n  JSONSchemaProperty,\n  ToolAnnotations,\n  ToolMeta,\n} from \"./types\";\nimport { normalizeToolPolicy } from \"./types\";\n\n/** Converts a clicky RPC operation catalog into AI-tool metadata for display\n *  and request scoping. Execution stays in the Go backend; this maps an\n *  operation's `operationId` → tool name, a short `x-clicky` verb/action →\n *  label, the `x-clicky` surface → group, `summary`/`description` → description,\n *  and `parameters` + `requestBody` → a JSON-Schema input. Operations without an\n *  `operationId` are skipped (a tool needs a stable name). */\nexport function clickyOperationsToTools(\n  operations: ResolvedOperation[],\n  surfaces?: ClickySurface[],\n): ToolMeta[] {\n  const surfacesByKey = new Map<string, ClickySurface>();\n  for (const surface of surfaces ?? []) {\n    surfacesByKey.set(surface.key, surface);\n  }\n  const tools: ToolMeta[] = [];\n  for (const resolved of operations) {\n    const tool = operationToTool(resolved.operation, resolved, surfacesByKey);\n    if (tool) {\n      tools.push(tool);\n    }\n  }\n  return tools;\n}\n\nexport function operationToTool(\n  operation: OpenAPIOperation,\n  resolved?: Pick<ResolvedOperation, \"path\" | \"method\">,\n  surfacesByKey?: Map<string, ClickySurface>,\n): ToolMeta | null {\n  if (!operation.operationId) {\n    return null;\n  }\n  if (isCobraHelpOrCompletionOperation(operation, resolved)) {\n    return null;\n  }\n  const meta = operation[\"x-clicky\"];\n  const hints = meta?.toolHints;\n  const group = operationToolGroup(operation);\n  const surface = meta?.surface ? surfacesByKey?.get(meta.surface) : undefined;\n  const parent = surface?.title || hints?.parent || surface?.entity;\n  const icon = hints?.icon || surface?.icon;\n  // Operation hints still carry the legacy on/off spellings, so this is a real\n  // translation, not a pass-through.\n  const defaultPermission = normalizeToolPolicy(hints?.defaultPermission);\n  const description = operation.description ?? operation.summary;\n  return {\n    name: operation.operationId,\n    label: toolLabel(operation),\n    ...(group\n      ? { group, preferenceKey: group }\n      : meta?.surface\n        ? { group: meta.surface }\n        : {}),\n    ...(defaultPermission ? { defaultPermission } : {}),\n    ...(parent ? { parent } : {}),\n    ...(surface?.entity ? { entity: surface.entity } : {}),\n    ...(icon ? { icon } : {}),\n    ...(description ? { description } : {}),\n    ...(resolved?.method ? { method: resolved.method.toUpperCase() } : {}),\n    ...(resolved?.path ? { path: resolved.path } : {}),\n    strict: hints?.strict ?? true,\n    annotations: toolAnnotations(operation, resolved, description),\n    inputSchema: buildInputSchema(operation),\n  };\n}\n\nfunction toolAnnotations(\n  operation: OpenAPIOperation,\n  resolved: Pick<ResolvedOperation, \"path\" | \"method\"> | undefined,\n  description: string | undefined,\n): ToolAnnotations {\n  const hints = operation[\"x-clicky\"]?.toolHints;\n  const method = resolved?.method?.toUpperCase() ?? \"\";\n  const annotations: ToolAnnotations = {};\n  const title =\n    hints?.title ??\n    operation.summary ??\n    operation[\"x-clicky\"]?.actionName ??\n    description;\n  if (title) annotations.title = title;\n  if (hints?.readOnlyHint !== undefined) {\n    annotations.readOnlyHint = hints.readOnlyHint;\n  } else if (resolved?.method?.toUpperCase() === \"GET\") {\n    annotations.readOnlyHint = true;\n  }\n  if (hints?.idempotentHint !== undefined) {\n    annotations.idempotentHint = hints.idempotentHint;\n  } else if (isIdempotentMethod(method)) {\n    annotations.idempotentHint = true;\n  }\n  if (hints?.destructiveHint !== undefined) {\n    annotations.destructiveHint = hints.destructiveHint;\n  } else if (isDestructiveTool(operation, resolved)) {\n    annotations.destructiveHint = true;\n  }\n  if (hints?.openWorldHint !== undefined) {\n    annotations.openWorldHint = hints.openWorldHint;\n  }\n  return annotations;\n}\n\nfunction isIdempotentMethod(method: string): boolean {\n  return (\n    method === \"GET\" ||\n    method === \"HEAD\" ||\n    method === \"OPTIONS\" ||\n    method === \"PUT\" ||\n    method === \"DELETE\"\n  );\n}\n\nfunction isDestructiveTool(\n  operation: OpenAPIOperation,\n  resolved: Pick<ResolvedOperation, \"path\" | \"method\"> | undefined,\n): boolean {\n  const method = resolved?.method?.toUpperCase() ?? \"\";\n  if (method === \"DELETE\") return true;\n  if (method === \"GET\" || method === \"HEAD\" || method === \"OPTIONS\")\n    return false;\n  const text = `${resolved?.path ?? \"\"} ${operation.operationId ?? \"\"}`.toLowerCase();\n  return /\\b(write|delete|remove|destroy|void|sync|create|update|patch|post)\\b/.test(\n    text,\n  );\n}\n\nfunction operationToolGroup(\n  operation: OpenAPIOperation,\n): string | undefined {\n  const meta = operation[\"x-clicky\"];\n  if (meta?.toolHints?.group) return meta.toolHints.group;\n  if (meta?.group) return meta.group;\n  return undefined;\n}\n\nfunction isCobraHelpOrCompletionOperation(\n  operation: OpenAPIOperation,\n  resolved?: Pick<ResolvedOperation, \"path\" | \"method\">,\n): boolean {\n  return (\n    commandStartsWithCobraBuiltin(operation.operationId) ||\n    commandStartsWithCobraBuiltin(operation[\"x-clicky\"]?.command) ||\n    pathContainsCobraBuiltin(resolved?.path)\n  );\n}\n\nfunction commandStartsWithCobraBuiltin(raw: string | undefined): boolean {\n  if (!raw) return false;\n  const normalized = raw\n    .replace(/([a-z\\d])([A-Z])/g, \"$1 $2\")\n    .replace(/[/_.-]+/g, \" \")\n    .trim()\n    .toLowerCase();\n  const first = normalized.split(/\\s+/)[0];\n  return first === \"completion\" || first === \"help\";\n}\n\nfunction pathContainsCobraBuiltin(path: string | undefined): boolean {\n  if (!path) return false;\n  const parts = path\n    .split(\"/\")\n    .filter(Boolean)\n    .map((part) => part.toLowerCase());\n  const commandParts =\n    parts[0] === \"api\" && /^v\\d+$/.test(parts[1] ?? \"\")\n      ? parts.slice(2)\n      : parts;\n  const first = commandParts[0];\n  return first === \"completion\" || first === \"help\";\n}\n\n\n/** A concise popover label: the clicky action/verb (capitalized) when present,\n *  else the operation summary, else a humanized operationId. Mirrors the intent\n *  of rpc/clickyMetadata.ts `surfaceActionLabel`. */\nfunction toolLabel(operation: OpenAPIOperation): string {\n  const meta = operation[\"x-clicky\"];\n  const short = meta?.actionName?.trim() || meta?.verb?.trim();\n  if (short && short !== \"action\") {\n    return short.charAt(0).toUpperCase() + short.slice(1);\n  }\n  if (operation.summary) {\n    return operation.summary;\n  }\n  return humanize(operation.operationId ?? \"\");\n}\n\nfunction humanize(operationId: string): string {\n  const spaced = operationId\n    .replace(/[_-]+/g, \" \")\n    .replace(/([a-z\\d])([A-Z])/g, \"$1 $2\");\n  return spaced.charAt(0).toUpperCase() + spaced.slice(1);\n}\n\nfunction buildInputSchema(operation: OpenAPIOperation): ChatToolInputSchema {\n  const properties: Record<string, JSONSchemaProperty> = {};\n  const required: string[] = [];\n\n  for (const param of operation.parameters ?? []) {\n    properties[param.name] = parameterToProperty(param);\n    if (param.required) {\n      required.push(param.name);\n    }\n  }\n\n  const body = requestBodySchema(operation);\n  if (body?.properties) {\n    for (const [name, schema] of Object.entries(body.properties)) {\n      properties[name] = schemaToProperty(schema);\n    }\n  }\n\n  return { type: \"object\", properties, required, additionalProperties: false };\n}\n\nfunction parameterToProperty(param: OpenAPIParameter): JSONSchemaProperty {\n  const prop = schemaToProperty(param.schema);\n  if (param.description && !prop.description) {\n    prop.description = param.description;\n  }\n  return prop;\n}\n\nfunction schemaToProperty(\n  schema: OpenAPISchema | undefined,\n): JSONSchemaProperty {\n  if (!schema) {\n    return { type: \"string\" };\n  }\n  const prop: JSONSchemaProperty = { type: jsonSchemaType(schema.type) };\n  if (schema.description !== undefined) {\n    prop.description = schema.description;\n  }\n  if (schema.enum !== undefined) {\n    prop.enum = schema.enum;\n  }\n  if (schema.default !== undefined) {\n    prop.default = schema.default;\n  }\n  return prop;\n}\n\nfunction jsonSchemaType(\n  type: string | undefined,\n): NonNullable<JSONSchemaProperty[\"type\"]> {\n  switch (type) {\n    case \"object\":\n    case \"array\":\n    case \"string\":\n    case \"integer\":\n    case \"number\":\n    case \"boolean\":\n    case \"null\":\n      return type;\n    default:\n      return \"string\";\n  }\n}\n\nfunction requestBodySchema(\n  operation: OpenAPIOperation,\n): OpenAPISchema | undefined {\n  const content = operation.requestBody?.content;\n  if (!content) {\n    return undefined;\n  }\n  return (\n    content[\"application/json\"]?.schema ?? Object.values(content)[0]?.schema\n  );\n}\n"],"names":[],"mappings":";AAqBO,SAAS,wBACd,YACA,UACY;AACZ,QAAM,oCAAoB,IAAA;AAC1B,aAAW,WAAW,YAAY,IAAI;AACpC,kBAAc,IAAI,QAAQ,KAAK,OAAO;AAAA,EACxC;AACA,QAAM,QAAoB,CAAA;AAC1B,aAAW,YAAY,YAAY;AACjC,UAAM,OAAO,gBAAgB,SAAS,WAAW,UAAU,aAAa;AACxE,QAAI,MAAM;AACR,YAAM,KAAK,IAAI;AAAA,IACjB;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,gBACd,WACA,UACA,eACiB;AACjB,MAAI,CAAC,UAAU,aAAa;AAC1B,WAAO;AAAA,EACT;AACA,MAAI,iCAAiC,WAAW,QAAQ,GAAG;AACzD,WAAO;AAAA,EACT;AACA,QAAM,OAAO,UAAU,UAAU;AACjC,QAAM,QAAQ,6BAAM;AACpB,QAAM,QAAQ,mBAAmB,SAAS;AAC1C,QAAM,WAAU,6BAAM,WAAU,+CAAe,IAAI,KAAK,WAAW;AACnE,QAAM,UAAS,mCAAS,WAAS,+BAAO,YAAU,mCAAS;AAC3D,QAAM,QAAO,+BAAO,UAAQ,mCAAS;AAGrC,QAAM,oBAAoB,oBAAoB,+BAAO,iBAAiB;AACtE,QAAM,cAAc,UAAU,eAAe,UAAU;AACvD,SAAO;AAAA,IACL,MAAM,UAAU;AAAA,IAChB,OAAO,UAAU,SAAS;AAAA,IAC1B,GAAI,QACA,EAAE,OAAO,eAAe,MAAA,KACxB,6BAAM,WACJ,EAAE,OAAO,KAAK,QAAA,IACd,CAAA;AAAA,IACN,GAAI,oBAAoB,EAAE,kBAAA,IAAsB,CAAA;AAAA,IAChD,GAAI,SAAS,EAAE,OAAA,IAAW,CAAA;AAAA,IAC1B,IAAI,mCAAS,UAAS,EAAE,QAAQ,QAAQ,OAAA,IAAW,CAAA;AAAA,IACnD,GAAI,OAAO,EAAE,KAAA,IAAS,CAAA;AAAA,IACtB,GAAI,cAAc,EAAE,YAAA,IAAgB,CAAA;AAAA,IACpC,IAAI,qCAAU,UAAS,EAAE,QAAQ,SAAS,OAAO,YAAA,EAAY,IAAM,CAAA;AAAA,IACnE,IAAI,qCAAU,QAAO,EAAE,MAAM,SAAS,KAAA,IAAS,CAAA;AAAA,IAC/C,SAAQ,+BAAO,WAAU;AAAA,IACzB,aAAa,gBAAgB,WAAW,UAAU,WAAW;AAAA,IAC7D,aAAa,iBAAiB,SAAS;AAAA,EAAA;AAE3C;AAEA,SAAS,gBACP,WACA,UACA,aACiB;;AACjB,QAAM,SAAQ,eAAU,UAAU,MAApB,mBAAuB;AACrC,QAAM,WAAS,0CAAU,WAAV,mBAAkB,kBAAiB;AAClD,QAAM,cAA+B,CAAA;AACrC,QAAM,SACJ,+BAAO,UACP,UAAU,aACV,eAAU,UAAU,MAApB,mBAAuB,eACvB;AACF,MAAI,mBAAmB,QAAQ;AAC/B,OAAI,+BAAO,kBAAiB,QAAW;AACrC,gBAAY,eAAe,MAAM;AAAA,EACnC,aAAW,0CAAU,WAAV,mBAAkB,mBAAkB,OAAO;AACpD,gBAAY,eAAe;AAAA,EAC7B;AACA,OAAI,+BAAO,oBAAmB,QAAW;AACvC,gBAAY,iBAAiB,MAAM;AAAA,EACrC,WAAW,mBAAmB,MAAM,GAAG;AACrC,gBAAY,iBAAiB;AAAA,EAC/B;AACA,OAAI,+BAAO,qBAAoB,QAAW;AACxC,gBAAY,kBAAkB,MAAM;AAAA,EACtC,WAAW,kBAAkB,WAAW,QAAQ,GAAG;AACjD,gBAAY,kBAAkB;AAAA,EAChC;AACA,OAAI,+BAAO,mBAAkB,QAAW;AACtC,gBAAY,gBAAgB,MAAM;AAAA,EACpC;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,QAAyB;AACnD,SACE,WAAW,SACX,WAAW,UACX,WAAW,aACX,WAAW,SACX,WAAW;AAEf;AAEA,SAAS,kBACP,WACA,UACS;;AACT,QAAM,WAAS,0CAAU,WAAV,mBAAkB,kBAAiB;AAClD,MAAI,WAAW,SAAU,QAAO;AAChC,MAAI,WAAW,SAAS,WAAW,UAAU,WAAW;AACtD,WAAO;AACT,QAAM,OAAO,IAAG,qCAAU,SAAQ,EAAE,IAAI,UAAU,eAAe,EAAE,GAAG,YAAA;AACtE,SAAO,uEAAuE;AAAA,IAC5E;AAAA,EAAA;AAEJ;AAEA,SAAS,mBACP,WACoB;;AACpB,QAAM,OAAO,UAAU,UAAU;AACjC,OAAI,kCAAM,cAAN,mBAAiB,MAAO,QAAO,KAAK,UAAU;AAClD,MAAI,6BAAM,MAAO,QAAO,KAAK;AAC7B,SAAO;AACT;AAEA,SAAS,iCACP,WACA,UACS;;AACT,SACE,8BAA8B,UAAU,WAAW,KACnD,+BAA8B,eAAU,UAAU,MAApB,mBAAuB,OAAO,KAC5D,yBAAyB,qCAAU,IAAI;AAE3C;AAEA,SAAS,8BAA8B,KAAkC;AACvE,MAAI,CAAC,IAAK,QAAO;AACjB,QAAM,aAAa,IAChB,QAAQ,qBAAqB,OAAO,EACpC,QAAQ,YAAY,GAAG,EACvB,KAAA,EACA,YAAA;AACH,QAAM,QAAQ,WAAW,MAAM,KAAK,EAAE,CAAC;AACvC,SAAO,UAAU,gBAAgB,UAAU;AAC7C;AAEA,SAAS,yBAAyB,MAAmC;AACnE,MAAI,CAAC,KAAM,QAAO;AAClB,QAAM,QAAQ,KACX,MAAM,GAAG,EACT,OAAO,OAAO,EACd,IAAI,CAAC,SAAS,KAAK,aAAa;AACnC,QAAM,eACJ,MAAM,CAAC,MAAM,SAAS,SAAS,KAAK,MAAM,CAAC,KAAK,EAAE,IAC9C,MAAM,MAAM,CAAC,IACb;AACN,QAAM,QAAQ,aAAa,CAAC;AAC5B,SAAO,UAAU,gBAAgB,UAAU;AAC7C;AAMA,SAAS,UAAU,WAAqC;;AACtD,QAAM,OAAO,UAAU,UAAU;AACjC,QAAM,UAAQ,kCAAM,eAAN,mBAAkB,aAAU,kCAAM,SAAN,mBAAY;AACtD,MAAI,SAAS,UAAU,UAAU;AAC/B,WAAO,MAAM,OAAO,CAAC,EAAE,gBAAgB,MAAM,MAAM,CAAC;AAAA,EACtD;AACA,MAAI,UAAU,SAAS;AACrB,WAAO,UAAU;AAAA,EACnB;AACA,SAAO,SAAS,UAAU,eAAe,EAAE;AAC7C;AAEA,SAAS,SAAS,aAA6B;AAC7C,QAAM,SAAS,YACZ,QAAQ,UAAU,GAAG,EACrB,QAAQ,qBAAqB,OAAO;AACvC,SAAO,OAAO,OAAO,CAAC,EAAE,gBAAgB,OAAO,MAAM,CAAC;AACxD;AAEA,SAAS,iBAAiB,WAAkD;AAC1E,QAAM,aAAiD,CAAA;AACvD,QAAM,WAAqB,CAAA;AAE3B,aAAW,SAAS,UAAU,cAAc,CAAA,GAAI;AAC9C,eAAW,MAAM,IAAI,IAAI,oBAAoB,KAAK;AAClD,QAAI,MAAM,UAAU;AAClB,eAAS,KAAK,MAAM,IAAI;AAAA,IAC1B;AAAA,EACF;AAEA,QAAM,OAAO,kBAAkB,SAAS;AACxC,MAAI,6BAAM,YAAY;AACpB,eAAW,CAAC,MAAM,MAAM,KAAK,OAAO,QAAQ,KAAK,UAAU,GAAG;AAC5D,iBAAW,IAAI,IAAI,iBAAiB,MAAM;AAAA,IAC5C;AAAA,EACF;AAEA,SAAO,EAAE,MAAM,UAAU,YAAY,UAAU,sBAAsB,MAAA;AACvE;AAEA,SAAS,oBAAoB,OAA6C;AACxE,QAAM,OAAO,iBAAiB,MAAM,MAAM;AAC1C,MAAI,MAAM,eAAe,CAAC,KAAK,aAAa;AAC1C,SAAK,cAAc,MAAM;AAAA,EAC3B;AACA,SAAO;AACT;AAEA,SAAS,iBACP,QACoB;AACpB,MAAI,CAAC,QAAQ;AACX,WAAO,EAAE,MAAM,SAAA;AAAA,EACjB;AACA,QAAM,OAA2B,EAAE,MAAM,eAAe,OAAO,IAAI,EAAA;AACnE,MAAI,OAAO,gBAAgB,QAAW;AACpC,SAAK,cAAc,OAAO;AAAA,EAC5B;AACA,MAAI,OAAO,SAAS,QAAW;AAC7B,SAAK,OAAO,OAAO;AAAA,EACrB;AACA,MAAI,OAAO,YAAY,QAAW;AAChC,SAAK,UAAU,OAAO;AAAA,EACxB;AACA,SAAO;AACT;AAEA,SAAS,eACP,MACyC;AACzC,UAAQ,MAAA;AAAA,IACN,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EAAA;AAEb;AAEA,SAAS,kBACP,WAC2B;;AAC3B,QAAM,WAAU,eAAU,gBAAV,mBAAuB;AACvC,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AACA,WACE,aAAQ,kBAAkB,MAA1B,mBAA6B,aAAU,YAAO,OAAO,OAAO,EAAE,CAAC,MAAxB,mBAA2B;AAEtE;"}

package/dist/data/chat/index.d.ts

@@ -16,5 +16,6 @@ export { createAttachmentUploadAdapter, DEFAULT_ATTACHMENT_LIMITS, type Attachme
 export { clickyOperationsToTools, operationToTool, } from './clickyOperationsToTools';
 export { ToolRenderRegistry, createToolRenderRegistry, toToolRenderRegistry, toolNameAdapter, ToolRenderRegistryProvider, useToolRenderRegistry, defaultToolInputView, defaultToolOutputView, defaultToolRenderAdapters, knownToolRenderAdapters, defaultToolSummary, summarizeToolValue, normalizeToolOutput, classifyToolValue, deriveColumns, fieldMetaFromSchema, listItemsSchema, orderFieldKeys, ToolParams, ToolFieldValue, ToolArgs, ToolValue, type ToolRenderAdapter, type ToolRenderAdapterContext, type ToolRenderBaseContext, type ToolRenderRegistryOptions, type ToolRenderSurface, type NormalizedToolOutput, type ClassifiedToolValue, type ToolValueShape, type ToolPageInfo, type ToolFieldMeta, type ToolParamsProps, type ToolArgsProps, type ToolValueProps, } from './tool-render';
 export { mockChatTransport, MOCK_MODELS } from './Chat.fixtures';
-export { isDynamicToolPart, isTypedToolPart, isReasoningPart, isFilePart, toolPartName, suggestionLabel, suggestionPrompt, CLAUDE_PERMISSION_MODES, CLAUDE_PERMISSION_MODE_OPTIONS, type AnyToolPart, type ChatModel, type ChatModelRuntime, type RuntimeAvailability, type RuntimeAvailabilityState, type ChatMessageMetadata, type ChatUsageSummary, type ChatBudgetConfig, type ChatUsageBreakdown, type ChatCostBreakdown, type ChatStatus, type ChatToolInputSchema, type ClaudePermissionMode, type ClaudePermissionModeOption, type ToolResultRenderArgs, type ToolResultRenderer, type ToolAnnotations, type ToolMeta, type ToolMode, type DynamicToolUIPart, type FileUIPart, type JSONSchemaProperty, type ReasoningUIPart, type Suggestion, type ToolUIPart, type UIMessage, } from './types';
+export { isDynamicToolPart, isTypedToolPart, isReasoningPart, isFilePart, toolPartName, suggestionLabel, suggestionPrompt, CLAUDE_PERMISSION_MODES, CLAUDE_PERMISSION_MODE_OPTIONS, type AnyToolPart, type ChatModel, type ChatModelRuntime, type RuntimeAvailability, type RuntimeAvailabilityState, type ChatMessageMetadata, type ChatUsageSummary, type ChatBudgetConfig, type ChatUsageBreakdown, type ChatCostBreakdown, type ChatStatus, type ChatToolInputSchema, type ClaudePermissionMode, type ClaudePermissionModeOption, type ToolResultRenderArgs, type ToolResultRenderer, type ToolAnnotations, type ToolMeta, type ToolPolicy, normalizeToolPolicy, type DynamicToolUIPart, type FileUIPart, type JSONSchemaProperty, type ReasoningUIPart, type Suggestion, type ToolUIPart, type UIMessage, } from './types';
+export { appendToolPolicy, matchItems, matchesTool, normalizeToolPolicyRules, resolveToolPolicy, toolPolicyFromPreferences, type MatchPatterns, type PermissionPolicy, type PermissionRule, type ToolMatch, } from './tool-policy';
 //# sourceMappingURL=index.d.ts.map

package/dist/data/chat/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/data/chat/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,IAAI,EAAE,KAAK,SAAS,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EACL,OAAO,EACP,KAAK,YAAY,EACjB,KAAK,qBAAqB,GAC3B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EACL,UAAU,EACV,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EACL,aAAa,EACb,KAAK,kBAAkB,EACvB,cAAc,EACd,KAAK,mBAAmB,EACxB,gBAAgB,EAChB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,cAAc,EACd,KAAK,mBAAmB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,KAAK,aAAa,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EACL,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,GACxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,KAAK,qBAAqB,EAC1B,cAAc,EACd,KAAK,mBAAmB,GACzB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,uBAAuB,EACvB,eAAe,GAChB,MAAM,2BAA2B,CAAC;AAInC,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,0BAA0B,EAC1B,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,aAAa,EACb,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,UAAU,EACV,cAAc,EACd,QAAQ,EACR,SAAS,EACT,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC9B,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,eAAe,CAAC;AAIvB,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEjE,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,UAAU,EACV,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,uBAAuB,EACvB,8BAA8B,EAC9B,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,KAAK,QAAQ,EACb,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,SAAS,GACf,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/data/chat/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,IAAI,EAAE,KAAK,SAAS,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACtE,OAAO,EACL,OAAO,EACP,KAAK,YAAY,EACjB,KAAK,qBAAqB,GAC3B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,cAAc,EAAE,KAAK,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EACL,UAAU,EACV,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EACL,aAAa,EACb,KAAK,kBAAkB,EACvB,cAAc,EACd,KAAK,mBAAmB,EACxB,gBAAgB,EAChB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,cAAc,EACd,KAAK,mBAAmB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,KAAK,aAAa,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,EACL,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,GACxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,KAAK,qBAAqB,EAC1B,cAAc,EACd,KAAK,mBAAmB,GACzB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,uBAAuB,EACvB,eAAe,GAChB,MAAM,2BAA2B,CAAC;AAInC,OAAO,EACL,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,eAAe,EACf,0BAA0B,EAC1B,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,aAAa,EACb,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,UAAU,EACV,cAAc,EACd,QAAQ,EACR,SAAS,EACT,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC9B,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,eAAe,CAAC;AAIvB,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEjE,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,UAAU,EACV,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,uBAAuB,EACvB,8BAA8B,EAC9B,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,KAAK,UAAU,EAIf,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,KAAK,UAAU,EACf,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,SAAS,GACf,MAAM,SAAS,CAAC;AAKjB,OAAO,EACL,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,wBAAwB,EACxB,iBAAiB,EACjB,yBAAyB,EACzB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,SAAS,GACf,MAAM,eAAe,CAAC"}

package/dist/data/chat/tool-policy.cjs

@@ -0,0 +1,132 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const types = require("./types.cjs");
+const MATCH_FACETS = [
+  "name",
+  "group",
+  "parent",
+  "entity",
+  "action",
+  "verb",
+  "method",
+  "scope"
+];
+function matchItems(item, patterns) {
+  const normalized = normalizePatterns(patterns);
+  if (normalized.length === 0) return true;
+  const sorted = [...normalized].sort(
+    (a, b) => exclusionRank(a) - exclusionRank(b)
+  );
+  for (const pattern of sorted) {
+    if (pattern.startsWith("!")) {
+      if (matchPattern(item, pattern.slice(1))) return false;
+      continue;
+    }
+    if (matchPattern(item, pattern)) return true;
+  }
+  return sorted.every((pattern) => pattern.startsWith("!"));
+}
+function normalizePatterns(patterns) {
+  if (patterns === void 0) return [];
+  const list = typeof patterns === "string" ? [patterns] : patterns;
+  const out = [];
+  for (const raw of list) {
+    if (typeof raw !== "string") continue;
+    const parts = raw.split(",");
+    for (const part of parts) {
+      const trimmed = part.trim();
+      if (trimmed === "" && parts.length > 1) continue;
+      if (trimmed !== "") out.push(trimmed);
+    }
+  }
+  return out;
+}
+function exclusionRank(pattern) {
+  if (pattern === "!*") return 0;
+  return pattern.startsWith("!") ? 1 : 2;
+}
+function matchPattern(item, pattern) {
+  if (pattern === "*") return true;
+  const value = item.toLowerCase();
+  const glob = pattern.toLowerCase();
+  if (value === glob) return true;
+  if (glob.startsWith("*") && glob.endsWith("*")) {
+    if (value.includes(glob.slice(1, -1))) return true;
+  }
+  if (glob.startsWith("*") && value.endsWith(glob.slice(1))) return true;
+  if (glob.endsWith("*") && value.startsWith(glob.slice(0, -1))) return true;
+  return false;
+}
+function resolveToolPolicy(policy, tool) {
+  let resolved;
+  for (const rule of policy ?? []) {
+    if (matchesTool(rule, tool)) resolved = rule.policy;
+  }
+  return resolved;
+}
+function matchesTool(match, tool) {
+  var _a, _b, _c;
+  const facets = {
+    name: tool.name ?? "",
+    group: tool.group ?? "",
+    parent: tool.parent ?? "",
+    entity: tool.entity ?? "",
+    action: tool.action ?? "",
+    verb: tool.verb ?? "",
+    method: tool.method ?? "",
+    scope: tool.scope ?? ""
+  };
+  for (const facet of MATCH_FACETS) {
+    if (!matchItems(facets[facet], match[facet])) return false;
+  }
+  return matchesHint(match.readOnly, (_a = tool.annotations) == null ? void 0 : _a.readOnlyHint) && matchesHint(match.destructive, (_b = tool.annotations) == null ? void 0 : _b.destructiveHint) && matchesHint(match.idempotent, (_c = tool.annotations) == null ? void 0 : _c.idempotentHint);
+}
+function matchesHint(want, have) {
+  if (want === void 0) return true;
+  return have !== void 0 && have === want;
+}
+function toolPolicyFromPreferences(prefs) {
+  const keys = Object.keys(prefs ?? {}).filter((key) => key.trim() !== "").sort();
+  if (keys.length === 0) return [];
+  const policies = /* @__PURE__ */ new Map();
+  for (const key of keys) {
+    const policy = types.normalizeToolPolicy(prefs == null ? void 0 : prefs[key]);
+    if (policy) policies.set(key, policy);
+  }
+  const ordered = [...policies.keys()];
+  return [
+    ...ordered.map((key) => ({ group: key, policy: policies.get(key) })),
+    ...ordered.map((key) => ({ name: key, policy: policies.get(key) }))
+  ];
+}
+function appendToolPolicy(earlier, later) {
+  return [...earlier ?? [], ...later ?? []];
+}
+function normalizeToolPolicyRules(value) {
+  if (!Array.isArray(value)) return [];
+  const rules = [];
+  for (const raw of value) {
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) continue;
+    const item = raw;
+    const policy = types.normalizeToolPolicy(item.policy);
+    if (!policy) continue;
+    const match = {};
+    for (const facet of MATCH_FACETS) {
+      const patterns = normalizePatterns(item[facet]);
+      if (patterns.length > 0) match[facet] = patterns;
+    }
+    for (const hint of ["readOnly", "destructive", "idempotent"]) {
+      if (typeof item[hint] === "boolean") match[hint] = item[hint];
+    }
+    if (Object.keys(match).length === 0) continue;
+    rules.push({ ...match, policy });
+  }
+  return rules;
+}
+exports.appendToolPolicy = appendToolPolicy;
+exports.matchItems = matchItems;
+exports.matchesTool = matchesTool;
+exports.normalizeToolPolicyRules = normalizeToolPolicyRules;
+exports.resolveToolPolicy = resolveToolPolicy;
+exports.toolPolicyFromPreferences = toolPolicyFromPreferences;
+//# sourceMappingURL=tool-policy.cjs.map

package/dist/data/chat/tool-policy.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-policy.cjs","sources":["../../../src/data/chat/tool-policy.ts"],"sourcesContent":["import type { ToolMeta, ToolPolicy } from \"./types\";\nimport { normalizeToolPolicy } from \"./types\";\n\n/** The client half of Captain's ordered tool-permission policy.\n *\n *  A tool's authority is decided by an ordered rule list evaluated\n *  last-match-wins: weakest rule first, strongest last. The layers this file\n *  composes are the surface's rules (what the page the chat opened on declares)\n *  followed by the user's own (what they toggled in the preferences popover), so\n *  a toggle beats the surface and the surface beats the application's baseline —\n *  which the server appends underneath both.\n *\n *  The matching is a port of Go's `commons/collections.MatchItems`, and it is a\n *  port rather than a re-interpretation on purpose: the same rule list is\n *  evaluated on both sides of the wire — here to render what a tool will do, and\n *  on the server to enforce it — and a client that disagreed would show a state\n *  the request does not produce. */\n\n/** A glob pattern list. A bare string is one pattern, so a rule can be written\n *  `{ group: \"provider.xero.*\" }` without list ceremony. */\nexport type MatchPatterns = string | string[];\n\n/** Which tools a rule applies to. Every declared facet must match (AND across\n *  facets); within one facet the patterns are alternatives (OR). An undeclared\n *  facet does not constrain. */\nexport type ToolMatch = {\n  name?: MatchPatterns;\n  group?: MatchPatterns;\n  parent?: MatchPatterns;\n  entity?: MatchPatterns;\n  action?: MatchPatterns;\n  verb?: MatchPatterns;\n  method?: MatchPatterns;\n  scope?: MatchPatterns;\n  /** A declared hint requires the tool to declare the same hint with the same\n   *  value. An undeclared hint on the tool does NOT match: \"this tool never said\n   *  whether it is read-only\" and \"this tool said it is not\" are different\n   *  claims, and reading the first as the second is how an unannotated tool\n   *  would inherit a permissive rule. */\n  readOnly?: boolean;\n  destructive?: boolean;\n  idempotent?: boolean;\n};\n\n/** One ordered rule: the tools it selects and the authority they get. */\nexport type PermissionRule = ToolMatch & { policy: ToolPolicy };\n\n/** The ordered rule list, evaluated last-match-wins. */\nexport type PermissionPolicy = PermissionRule[];\n\nconst MATCH_FACETS = [\n  \"name\",\n  \"group\",\n  \"parent\",\n  \"entity\",\n  \"action\",\n  \"verb\",\n  \"method\",\n  \"scope\",\n] as const;\n\n/** Reports whether `item` satisfies these patterns, following MatchItems:\n *  `!` negates and takes precedence over any positive match, `*` wildcards a\n *  prefix, suffix or the whole item, matching is case-insensitive, and one\n *  string may carry comma-separated alternatives. An empty list matches\n *  everything — an undeclared facet imposes no constraint. */\nexport function matchItems(\n  item: string,\n  patterns: MatchPatterns | undefined,\n): boolean {\n  const normalized = normalizePatterns(patterns);\n  if (normalized.length === 0) return true;\n  // Exclusions are checked first so `!` wins however the rule was written:\n  // [\"a*\", \"!abc\"] must reject \"abc\" rather than accept it on the wildcard.\n  const sorted = [...normalized].sort(\n    (a, b) => exclusionRank(a) - exclusionRank(b),\n  );\n  for (const pattern of sorted) {\n    if (pattern.startsWith(\"!\")) {\n      if (matchPattern(item, pattern.slice(1))) return false;\n      continue;\n    }\n    if (matchPattern(item, pattern)) return true;\n  }\n  // Every pattern excluded and none of them matched, so the item is admitted.\n  return sorted.every((pattern) => pattern.startsWith(\"!\"));\n}\n\nfunction normalizePatterns(patterns: MatchPatterns | undefined): string[] {\n  if (patterns === undefined) return [];\n  const list = typeof patterns === \"string\" ? [patterns] : patterns;\n  const out: string[] = [];\n  for (const raw of list) {\n    if (typeof raw !== \"string\") continue;\n    const parts = raw.split(\",\");\n    for (const part of parts) {\n      const trimmed = part.trim();\n      if (trimmed === \"\" && parts.length > 1) continue;\n      if (trimmed !== \"\") out.push(trimmed);\n    }\n  }\n  return out;\n}\n\nfunction exclusionRank(pattern: string): number {\n  if (pattern === \"!*\") return 0;\n  return pattern.startsWith(\"!\") ? 1 : 2;\n}\n\nfunction matchPattern(item: string, pattern: string): boolean {\n  if (pattern === \"*\") return true;\n  const value = item.toLowerCase();\n  const glob = pattern.toLowerCase();\n  if (value === glob) return true;\n  if (glob.startsWith(\"*\") && glob.endsWith(\"*\")) {\n    if (value.includes(glob.slice(1, -1))) return true;\n  }\n  if (glob.startsWith(\"*\") && value.endsWith(glob.slice(1))) return true;\n  if (glob.endsWith(\"*\") && value.startsWith(glob.slice(0, -1))) return true;\n  return false;\n}\n\n/** Resolves the authority for one tool: the policy of the LAST rule that\n *  matches it, or undefined when no rule does.\n *\n *  Last, not first, because the list runs weakest to strongest — a user rule\n *  appended after a surface rule is meant to win. A first-match-wins reading\n *  would invert the whole contract. */\nexport function resolveToolPolicy(\n  policy: PermissionPolicy | undefined,\n  tool: ToolMeta,\n): ToolPolicy | undefined {\n  let resolved: ToolPolicy | undefined;\n  for (const rule of policy ?? []) {\n    if (matchesTool(rule, tool)) resolved = rule.policy;\n  }\n  return resolved;\n}\n\nexport function matchesTool(match: ToolMatch, tool: ToolMeta): boolean {\n  const facets: Record<(typeof MATCH_FACETS)[number], string> = {\n    name: tool.name ?? \"\",\n    group: tool.group ?? \"\",\n    parent: tool.parent ?? \"\",\n    entity: tool.entity ?? \"\",\n    action: tool.action ?? \"\",\n    verb: tool.verb ?? \"\",\n    method: tool.method ?? \"\",\n    scope: tool.scope ?? \"\",\n  };\n  for (const facet of MATCH_FACETS) {\n    if (!matchItems(facets[facet], match[facet])) return false;\n  }\n  return (\n    matchesHint(match.readOnly, tool.annotations?.readOnlyHint) &&\n    matchesHint(match.destructive, tool.annotations?.destructiveHint) &&\n    matchesHint(match.idempotent, tool.annotations?.idempotentHint)\n  );\n}\n\nfunction matchesHint(want: boolean | undefined, have: boolean | undefined) {\n  if (want === undefined) return true;\n  return have !== undefined && have === want;\n}\n\n/** Lowers a flat tool→policy map into ordered rules, so the legacy shape and the\n *  rule list share one evaluation path instead of two that can disagree.\n *\n *  A key is ambiguous — it may name a tool or its group — so each key emits both\n *  a group rule and a name rule, with every group rule placed before every name\n *  rule. A key that names a group matches no tool name and vice versa, so the\n *  ambiguity costs nothing; and where a key is both, the name rule comes later\n *  and wins. That is exactly the precedence the popover needs, where a per-tool\n *  toggle must beat the group toggle above it.\n *\n *  Keys are sorted so the request body is stable: an unstable order would make\n *  every render look like a changed request. */\nexport function toolPolicyFromPreferences(\n  prefs: Record<string, ToolPolicy> | undefined,\n): PermissionPolicy {\n  const keys = Object.keys(prefs ?? {})\n    .filter((key) => key.trim() !== \"\")\n    .sort();\n  if (keys.length === 0) return [];\n  const policies = new Map<string, ToolPolicy>();\n  for (const key of keys) {\n    const policy = normalizeToolPolicy(prefs?.[key]);\n    if (policy) policies.set(key, policy);\n  }\n  const ordered = [...policies.keys()];\n  return [\n    ...ordered.map((key) => ({ group: key, policy: policies.get(key)! })),\n    ...ordered.map((key) => ({ name: key, policy: policies.get(key)! })),\n  ];\n}\n\n/** Appends `later` onto `earlier`, the later winning. Composition rather than\n *  mutation, so one caller's user rules cannot leak into another's. */\nexport function appendToolPolicy(\n  earlier: PermissionPolicy | undefined,\n  later: PermissionPolicy | undefined,\n): PermissionPolicy {\n  return [...(earlier ?? []), ...(later ?? [])];\n}\n\n/** Parses a rule list off the wire, dropping anything malformed rather than\n *  letting it silently become the last word on every tool: a rule with no facet\n *  matches everything, and being last-match-wins that is the one mistake with\n *  unbounded reach. */\nexport function normalizeToolPolicyRules(value: unknown): PermissionPolicy {\n  if (!Array.isArray(value)) return [];\n  const rules: PermissionPolicy = [];\n  for (const raw of value) {\n    if (!raw || typeof raw !== \"object\" || Array.isArray(raw)) continue;\n    const item = raw as Record<string, unknown>;\n    const policy = normalizeToolPolicy(item.policy);\n    if (!policy) continue;\n    const match: ToolMatch = {};\n    for (const facet of MATCH_FACETS) {\n      const patterns = normalizePatterns(item[facet] as MatchPatterns);\n      if (patterns.length > 0) match[facet] = patterns;\n    }\n    for (const hint of [\"readOnly\", \"destructive\", \"idempotent\"] as const) {\n      if (typeof item[hint] === \"boolean\") match[hint] = item[hint] as boolean;\n    }\n    if (Object.keys(match).length === 0) continue;\n    rules.push({ ...match, policy });\n  }\n  return rules;\n}\n"],"names":["normalizeToolPolicy"],"mappings":";;;AAkDA,MAAM,eAAe;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAOO,SAAS,WACd,MACA,UACS;AACT,QAAM,aAAa,kBAAkB,QAAQ;AAC7C,MAAI,WAAW,WAAW,EAAG,QAAO;AAGpC,QAAM,SAAS,CAAC,GAAG,UAAU,EAAE;AAAA,IAC7B,CAAC,GAAG,MAAM,cAAc,CAAC,IAAI,cAAc,CAAC;AAAA,EAAA;AAE9C,aAAW,WAAW,QAAQ;AAC5B,QAAI,QAAQ,WAAW,GAAG,GAAG;AAC3B,UAAI,aAAa,MAAM,QAAQ,MAAM,CAAC,CAAC,EAAG,QAAO;AACjD;AAAA,IACF;AACA,QAAI,aAAa,MAAM,OAAO,EAAG,QAAO;AAAA,EAC1C;AAEA,SAAO,OAAO,MAAM,CAAC,YAAY,QAAQ,WAAW,GAAG,CAAC;AAC1D;AAEA,SAAS,kBAAkB,UAA+C;AACxE,MAAI,aAAa,OAAW,QAAO,CAAA;AACnC,QAAM,OAAO,OAAO,aAAa,WAAW,CAAC,QAAQ,IAAI;AACzD,QAAM,MAAgB,CAAA;AACtB,aAAW,OAAO,MAAM;AACtB,QAAI,OAAO,QAAQ,SAAU;AAC7B,UAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,eAAW,QAAQ,OAAO;AACxB,YAAM,UAAU,KAAK,KAAA;AACrB,UAAI,YAAY,MAAM,MAAM,SAAS,EAAG;AACxC,UAAI,YAAY,GAAI,KAAI,KAAK,OAAO;AAAA,IACtC;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,cAAc,SAAyB;AAC9C,MAAI,YAAY,KAAM,QAAO;AAC7B,SAAO,QAAQ,WAAW,GAAG,IAAI,IAAI;AACvC;AAEA,SAAS,aAAa,MAAc,SAA0B;AAC5D,MAAI,YAAY,IAAK,QAAO;AAC5B,QAAM,QAAQ,KAAK,YAAA;AACnB,QAAM,OAAO,QAAQ,YAAA;AACrB,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,KAAK,WAAW,GAAG,KAAK,KAAK,SAAS,GAAG,GAAG;AAC9C,QAAI,MAAM,SAAS,KAAK,MAAM,GAAG,EAAE,CAAC,EAAG,QAAO;AAAA,EAChD;AACA,MAAI,KAAK,WAAW,GAAG,KAAK,MAAM,SAAS,KAAK,MAAM,CAAC,CAAC,EAAG,QAAO;AAClE,MAAI,KAAK,SAAS,GAAG,KAAK,MAAM,WAAW,KAAK,MAAM,GAAG,EAAE,CAAC,EAAG,QAAO;AACtE,SAAO;AACT;AAQO,SAAS,kBACd,QACA,MACwB;AACxB,MAAI;AACJ,aAAW,QAAQ,UAAU,IAAI;AAC/B,QAAI,YAAY,MAAM,IAAI,cAAc,KAAK;AAAA,EAC/C;AACA,SAAO;AACT;AAEO,SAAS,YAAY,OAAkB,MAAyB;;AACrE,QAAM,SAAwD;AAAA,IAC5D,MAAM,KAAK,QAAQ;AAAA,IACnB,OAAO,KAAK,SAAS;AAAA,IACrB,QAAQ,KAAK,UAAU;AAAA,IACvB,QAAQ,KAAK,UAAU;AAAA,IACvB,QAAQ,KAAK,UAAU;AAAA,IACvB,MAAM,KAAK,QAAQ;AAAA,IACnB,QAAQ,KAAK,UAAU;AAAA,IACvB,OAAO,KAAK,SAAS;AAAA,EAAA;AAEvB,aAAW,SAAS,cAAc;AAChC,QAAI,CAAC,WAAW,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC,EAAG,QAAO;AAAA,EACvD;AACA,SACE,YAAY,MAAM,WAAU,UAAK,gBAAL,mBAAkB,YAAY,KAC1D,YAAY,MAAM,cAAa,UAAK,gBAAL,mBAAkB,eAAe,KAChE,YAAY,MAAM,aAAY,UAAK,gBAAL,mBAAkB,cAAc;AAElE;AAEA,SAAS,YAAY,MAA2B,MAA2B;AACzE,MAAI,SAAS,OAAW,QAAO;AAC/B,SAAO,SAAS,UAAa,SAAS;AACxC;AAcO,SAAS,0BACd,OACkB;AAClB,QAAM,OAAO,OAAO,KAAK,SAAS,CAAA,CAAE,EACjC,OAAO,CAAC,QAAQ,IAAI,KAAA,MAAW,EAAE,EACjC,KAAA;AACH,MAAI,KAAK,WAAW,EAAG,QAAO,CAAA;AAC9B,QAAM,+BAAe,IAAA;AACrB,aAAW,OAAO,MAAM;AACtB,UAAM,SAASA,MAAAA,oBAAoB,+BAAQ,IAAI;AAC/C,QAAI,OAAQ,UAAS,IAAI,KAAK,MAAM;AAAA,EACtC;AACA,QAAM,UAAU,CAAC,GAAG,SAAS,MAAM;AACnC,SAAO;AAAA,IACL,GAAG,QAAQ,IAAI,CAAC,SAAS,EAAE,OAAO,KAAK,QAAQ,SAAS,IAAI,GAAG,IAAK;AAAA,IACpE,GAAG,QAAQ,IAAI,CAAC,SAAS,EAAE,MAAM,KAAK,QAAQ,SAAS,IAAI,GAAG,IAAK;AAAA,EAAA;AAEvE;AAIO,SAAS,iBACd,SACA,OACkB;AAClB,SAAO,CAAC,GAAI,WAAW,CAAA,GAAK,GAAI,SAAS,CAAA,CAAG;AAC9C;AAMO,SAAS,yBAAyB,OAAkC;AACzE,MAAI,CAAC,MAAM,QAAQ,KAAK,UAAU,CAAA;AAClC,QAAM,QAA0B,CAAA;AAChC,aAAW,OAAO,OAAO;AACvB,QAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG;AAC3D,UAAM,OAAO;AACb,UAAM,SAASA,MAAAA,oBAAoB,KAAK,MAAM;AAC9C,QAAI,CAAC,OAAQ;AACb,UAAM,QAAmB,CAAA;AACzB,eAAW,SAAS,cAAc;AAChC,YAAM,WAAW,kBAAkB,KAAK,KAAK,CAAkB;AAC/D,UAAI,SAAS,SAAS,EAAG,OAAM,KAAK,IAAI;AAAA,IAC1C;AACA,eAAW,QAAQ,CAAC,YAAY,eAAe,YAAY,GAAY;AACrE,UAAI,OAAO,KAAK,IAAI,MAAM,UAAW,OAAM,IAAI,IAAI,KAAK,IAAI;AAAA,IAC9D;AACA,QAAI,OAAO,KAAK,KAAK,EAAE,WAAW,EAAG;AACrC,UAAM,KAAK,EAAE,GAAG,OAAO,QAAQ;AAAA,EACjC;AACA,SAAO;AACT;;;;;;;"}

package/dist/data/chat/tool-policy.d.ts

@@ -0,0 +1,81 @@
+import { ToolMeta, ToolPolicy } from './types';
+/** The client half of Captain's ordered tool-permission policy.
+ *
+ *  A tool's authority is decided by an ordered rule list evaluated
+ *  last-match-wins: weakest rule first, strongest last. The layers this file
+ *  composes are the surface's rules (what the page the chat opened on declares)
+ *  followed by the user's own (what they toggled in the preferences popover), so
+ *  a toggle beats the surface and the surface beats the application's baseline —
+ *  which the server appends underneath both.
+ *
+ *  The matching is a port of Go's `commons/collections.MatchItems`, and it is a
+ *  port rather than a re-interpretation on purpose: the same rule list is
+ *  evaluated on both sides of the wire — here to render what a tool will do, and
+ *  on the server to enforce it — and a client that disagreed would show a state
+ *  the request does not produce. */
+/** A glob pattern list. A bare string is one pattern, so a rule can be written
+ *  `{ group: "provider.xero.*" }` without list ceremony. */
+export type MatchPatterns = string | string[];
+/** Which tools a rule applies to. Every declared facet must match (AND across
+ *  facets); within one facet the patterns are alternatives (OR). An undeclared
+ *  facet does not constrain. */
+export type ToolMatch = {
+    name?: MatchPatterns;
+    group?: MatchPatterns;
+    parent?: MatchPatterns;
+    entity?: MatchPatterns;
+    action?: MatchPatterns;
+    verb?: MatchPatterns;
+    method?: MatchPatterns;
+    scope?: MatchPatterns;
+    /** A declared hint requires the tool to declare the same hint with the same
+     *  value. An undeclared hint on the tool does NOT match: "this tool never said
+     *  whether it is read-only" and "this tool said it is not" are different
+     *  claims, and reading the first as the second is how an unannotated tool
+     *  would inherit a permissive rule. */
+    readOnly?: boolean;
+    destructive?: boolean;
+    idempotent?: boolean;
+};
+/** One ordered rule: the tools it selects and the authority they get. */
+export type PermissionRule = ToolMatch & {
+    policy: ToolPolicy;
+};
+/** The ordered rule list, evaluated last-match-wins. */
+export type PermissionPolicy = PermissionRule[];
+/** Reports whether `item` satisfies these patterns, following MatchItems:
+ *  `!` negates and takes precedence over any positive match, `*` wildcards a
+ *  prefix, suffix or the whole item, matching is case-insensitive, and one
+ *  string may carry comma-separated alternatives. An empty list matches
+ *  everything — an undeclared facet imposes no constraint. */
+export declare function matchItems(item: string, patterns: MatchPatterns | undefined): boolean;
+/** Resolves the authority for one tool: the policy of the LAST rule that
+ *  matches it, or undefined when no rule does.
+ *
+ *  Last, not first, because the list runs weakest to strongest — a user rule
+ *  appended after a surface rule is meant to win. A first-match-wins reading
+ *  would invert the whole contract. */
+export declare function resolveToolPolicy(policy: PermissionPolicy | undefined, tool: ToolMeta): ToolPolicy | undefined;
+export declare function matchesTool(match: ToolMatch, tool: ToolMeta): boolean;
+/** Lowers a flat tool→policy map into ordered rules, so the legacy shape and the
+ *  rule list share one evaluation path instead of two that can disagree.
+ *
+ *  A key is ambiguous — it may name a tool or its group — so each key emits both
+ *  a group rule and a name rule, with every group rule placed before every name
+ *  rule. A key that names a group matches no tool name and vice versa, so the
+ *  ambiguity costs nothing; and where a key is both, the name rule comes later
+ *  and wins. That is exactly the precedence the popover needs, where a per-tool
+ *  toggle must beat the group toggle above it.
+ *
+ *  Keys are sorted so the request body is stable: an unstable order would make
+ *  every render look like a changed request. */
+export declare function toolPolicyFromPreferences(prefs: Record<string, ToolPolicy> | undefined): PermissionPolicy;
+/** Appends `later` onto `earlier`, the later winning. Composition rather than
+ *  mutation, so one caller's user rules cannot leak into another's. */
+export declare function appendToolPolicy(earlier: PermissionPolicy | undefined, later: PermissionPolicy | undefined): PermissionPolicy;
+/** Parses a rule list off the wire, dropping anything malformed rather than
+ *  letting it silently become the last word on every tool: a rule with no facet
+ *  matches everything, and being last-match-wins that is the one mistake with
+ *  unbounded reach. */
+export declare function normalizeToolPolicyRules(value: unknown): PermissionPolicy;
+//# sourceMappingURL=tool-policy.d.ts.map

package/dist/data/chat/tool-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-policy.d.ts","sourceRoot":"","sources":["../../../src/data/chat/tool-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGpD;;;;;;;;;;;;;oCAaoC;AAEpC;4DAC4D;AAC5D,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;AAE9C;;gCAEgC;AAChC,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB;;;;2CAIuC;IACvC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,yEAAyE;AACzE,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,CAAC;AAEhE,wDAAwD;AACxD,MAAM,MAAM,gBAAgB,GAAG,cAAc,EAAE,CAAC;AAahD;;;;8DAI8D;AAC9D,wBAAgB,UAAU,CACxB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,aAAa,GAAG,SAAS,GAClC,OAAO,CAiBT;AAoCD;;;;;uCAKuC;AACvC,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,gBAAgB,GAAG,SAAS,EACpC,IAAI,EAAE,QAAQ,GACb,UAAU,GAAG,SAAS,CAMxB;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAmBrE;AAOD;;;;;;;;;;;gDAWgD;AAChD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,SAAS,GAC5C,gBAAgB,CAelB;AAED;uEACuE;AACvE,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,gBAAgB,GAAG,SAAS,EACrC,KAAK,EAAE,gBAAgB,GAAG,SAAS,GAClC,gBAAgB,CAElB;AAED;;;uBAGuB;AACvB,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAoBzE"}

package/dist/data/chat/tool-policy.js

@@ -0,0 +1,132 @@
+import { normalizeToolPolicy } from "./types.js";
+const MATCH_FACETS = [
+  "name",
+  "group",
+  "parent",
+  "entity",
+  "action",
+  "verb",
+  "method",
+  "scope"
+];
+function matchItems(item, patterns) {
+  const normalized = normalizePatterns(patterns);
+  if (normalized.length === 0) return true;
+  const sorted = [...normalized].sort(
+    (a, b) => exclusionRank(a) - exclusionRank(b)
+  );
+  for (const pattern of sorted) {
+    if (pattern.startsWith("!")) {
+      if (matchPattern(item, pattern.slice(1))) return false;
+      continue;
+    }
+    if (matchPattern(item, pattern)) return true;
+  }
+  return sorted.every((pattern) => pattern.startsWith("!"));
+}
+function normalizePatterns(patterns) {
+  if (patterns === void 0) return [];
+  const list = typeof patterns === "string" ? [patterns] : patterns;
+  const out = [];
+  for (const raw of list) {
+    if (typeof raw !== "string") continue;
+    const parts = raw.split(",");
+    for (const part of parts) {
+      const trimmed = part.trim();
+      if (trimmed === "" && parts.length > 1) continue;
+      if (trimmed !== "") out.push(trimmed);
+    }
+  }
+  return out;
+}
+function exclusionRank(pattern) {
+  if (pattern === "!*") return 0;
+  return pattern.startsWith("!") ? 1 : 2;
+}
+function matchPattern(item, pattern) {
+  if (pattern === "*") return true;
+  const value = item.toLowerCase();
+  const glob = pattern.toLowerCase();
+  if (value === glob) return true;
+  if (glob.startsWith("*") && glob.endsWith("*")) {
+    if (value.includes(glob.slice(1, -1))) return true;
+  }
+  if (glob.startsWith("*") && value.endsWith(glob.slice(1))) return true;
+  if (glob.endsWith("*") && value.startsWith(glob.slice(0, -1))) return true;
+  return false;
+}
+function resolveToolPolicy(policy, tool) {
+  let resolved;
+  for (const rule of policy ?? []) {
+    if (matchesTool(rule, tool)) resolved = rule.policy;
+  }
+  return resolved;
+}
+function matchesTool(match, tool) {
+  var _a, _b, _c;
+  const facets = {
+    name: tool.name ?? "",
+    group: tool.group ?? "",
+    parent: tool.parent ?? "",
+    entity: tool.entity ?? "",
+    action: tool.action ?? "",
+    verb: tool.verb ?? "",
+    method: tool.method ?? "",
+    scope: tool.scope ?? ""
+  };
+  for (const facet of MATCH_FACETS) {
+    if (!matchItems(facets[facet], match[facet])) return false;
+  }
+  return matchesHint(match.readOnly, (_a = tool.annotations) == null ? void 0 : _a.readOnlyHint) && matchesHint(match.destructive, (_b = tool.annotations) == null ? void 0 : _b.destructiveHint) && matchesHint(match.idempotent, (_c = tool.annotations) == null ? void 0 : _c.idempotentHint);
+}
+function matchesHint(want, have) {
+  if (want === void 0) return true;
+  return have !== void 0 && have === want;
+}
+function toolPolicyFromPreferences(prefs) {
+  const keys = Object.keys(prefs ?? {}).filter((key) => key.trim() !== "").sort();
+  if (keys.length === 0) return [];
+  const policies = /* @__PURE__ */ new Map();
+  for (const key of keys) {
+    const policy = normalizeToolPolicy(prefs == null ? void 0 : prefs[key]);
+    if (policy) policies.set(key, policy);
+  }
+  const ordered = [...policies.keys()];
+  return [
+    ...ordered.map((key) => ({ group: key, policy: policies.get(key) })),
+    ...ordered.map((key) => ({ name: key, policy: policies.get(key) }))
+  ];
+}
+function appendToolPolicy(earlier, later) {
+  return [...earlier ?? [], ...later ?? []];
+}
+function normalizeToolPolicyRules(value) {
+  if (!Array.isArray(value)) return [];
+  const rules = [];
+  for (const raw of value) {
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) continue;
+    const item = raw;
+    const policy = normalizeToolPolicy(item.policy);
+    if (!policy) continue;
+    const match = {};
+    for (const facet of MATCH_FACETS) {
+      const patterns = normalizePatterns(item[facet]);
+      if (patterns.length > 0) match[facet] = patterns;
+    }
+    for (const hint of ["readOnly", "destructive", "idempotent"]) {
+      if (typeof item[hint] === "boolean") match[hint] = item[hint];
+    }
+    if (Object.keys(match).length === 0) continue;
+    rules.push({ ...match, policy });
+  }
+  return rules;
+}
+export {
+  appendToolPolicy,
+  matchItems,
+  matchesTool,
+  normalizeToolPolicyRules,
+  resolveToolPolicy,
+  toolPolicyFromPreferences
+};
+//# sourceMappingURL=tool-policy.js.map

package/dist/data/chat/tool-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-policy.js","sources":["../../../src/data/chat/tool-policy.ts"],"sourcesContent":["import type { ToolMeta, ToolPolicy } from \"./types\";\nimport { normalizeToolPolicy } from \"./types\";\n\n/** The client half of Captain's ordered tool-permission policy.\n *\n *  A tool's authority is decided by an ordered rule list evaluated\n *  last-match-wins: weakest rule first, strongest last. The layers this file\n *  composes are the surface's rules (what the page the chat opened on declares)\n *  followed by the user's own (what they toggled in the preferences popover), so\n *  a toggle beats the surface and the surface beats the application's baseline —\n *  which the server appends underneath both.\n *\n *  The matching is a port of Go's `commons/collections.MatchItems`, and it is a\n *  port rather than a re-interpretation on purpose: the same rule list is\n *  evaluated on both sides of the wire — here to render what a tool will do, and\n *  on the server to enforce it — and a client that disagreed would show a state\n *  the request does not produce. */\n\n/** A glob pattern list. A bare string is one pattern, so a rule can be written\n *  `{ group: \"provider.xero.*\" }` without list ceremony. */\nexport type MatchPatterns = string | string[];\n\n/** Which tools a rule applies to. Every declared facet must match (AND across\n *  facets); within one facet the patterns are alternatives (OR). An undeclared\n *  facet does not constrain. */\nexport type ToolMatch = {\n  name?: MatchPatterns;\n  group?: MatchPatterns;\n  parent?: MatchPatterns;\n  entity?: MatchPatterns;\n  action?: MatchPatterns;\n  verb?: MatchPatterns;\n  method?: MatchPatterns;\n  scope?: MatchPatterns;\n  /** A declared hint requires the tool to declare the same hint with the same\n   *  value. An undeclared hint on the tool does NOT match: \"this tool never said\n   *  whether it is read-only\" and \"this tool said it is not\" are different\n   *  claims, and reading the first as the second is how an unannotated tool\n   *  would inherit a permissive rule. */\n  readOnly?: boolean;\n  destructive?: boolean;\n  idempotent?: boolean;\n};\n\n/** One ordered rule: the tools it selects and the authority they get. */\nexport type PermissionRule = ToolMatch & { policy: ToolPolicy };\n\n/** The ordered rule list, evaluated last-match-wins. */\nexport type PermissionPolicy = PermissionRule[];\n\nconst MATCH_FACETS = [\n  \"name\",\n  \"group\",\n  \"parent\",\n  \"entity\",\n  \"action\",\n  \"verb\",\n  \"method\",\n  \"scope\",\n] as const;\n\n/** Reports whether `item` satisfies these patterns, following MatchItems:\n *  `!` negates and takes precedence over any positive match, `*` wildcards a\n *  prefix, suffix or the whole item, matching is case-insensitive, and one\n *  string may carry comma-separated alternatives. An empty list matches\n *  everything — an undeclared facet imposes no constraint. */\nexport function matchItems(\n  item: string,\n  patterns: MatchPatterns | undefined,\n): boolean {\n  const normalized = normalizePatterns(patterns);\n  if (normalized.length === 0) return true;\n  // Exclusions are checked first so `!` wins however the rule was written:\n  // [\"a*\", \"!abc\"] must reject \"abc\" rather than accept it on the wildcard.\n  const sorted = [...normalized].sort(\n    (a, b) => exclusionRank(a) - exclusionRank(b),\n  );\n  for (const pattern of sorted) {\n    if (pattern.startsWith(\"!\")) {\n      if (matchPattern(item, pattern.slice(1))) return false;\n      continue;\n    }\n    if (matchPattern(item, pattern)) return true;\n  }\n  // Every pattern excluded and none of them matched, so the item is admitted.\n  return sorted.every((pattern) => pattern.startsWith(\"!\"));\n}\n\nfunction normalizePatterns(patterns: MatchPatterns | undefined): string[] {\n  if (patterns === undefined) return [];\n  const list = typeof patterns === \"string\" ? [patterns] : patterns;\n  const out: string[] = [];\n  for (const raw of list) {\n    if (typeof raw !== \"string\") continue;\n    const parts = raw.split(\",\");\n    for (const part of parts) {\n      const trimmed = part.trim();\n      if (trimmed === \"\" && parts.length > 1) continue;\n      if (trimmed !== \"\") out.push(trimmed);\n    }\n  }\n  return out;\n}\n\nfunction exclusionRank(pattern: string): number {\n  if (pattern === \"!*\") return 0;\n  return pattern.startsWith(\"!\") ? 1 : 2;\n}\n\nfunction matchPattern(item: string, pattern: string): boolean {\n  if (pattern === \"*\") return true;\n  const value = item.toLowerCase();\n  const glob = pattern.toLowerCase();\n  if (value === glob) return true;\n  if (glob.startsWith(\"*\") && glob.endsWith(\"*\")) {\n    if (value.includes(glob.slice(1, -1))) return true;\n  }\n  if (glob.startsWith(\"*\") && value.endsWith(glob.slice(1))) return true;\n  if (glob.endsWith(\"*\") && value.startsWith(glob.slice(0, -1))) return true;\n  return false;\n}\n\n/** Resolves the authority for one tool: the policy of the LAST rule that\n *  matches it, or undefined when no rule does.\n *\n *  Last, not first, because the list runs weakest to strongest — a user rule\n *  appended after a surface rule is meant to win. A first-match-wins reading\n *  would invert the whole contract. */\nexport function resolveToolPolicy(\n  policy: PermissionPolicy | undefined,\n  tool: ToolMeta,\n): ToolPolicy | undefined {\n  let resolved: ToolPolicy | undefined;\n  for (const rule of policy ?? []) {\n    if (matchesTool(rule, tool)) resolved = rule.policy;\n  }\n  return resolved;\n}\n\nexport function matchesTool(match: ToolMatch, tool: ToolMeta): boolean {\n  const facets: Record<(typeof MATCH_FACETS)[number], string> = {\n    name: tool.name ?? \"\",\n    group: tool.group ?? \"\",\n    parent: tool.parent ?? \"\",\n    entity: tool.entity ?? \"\",\n    action: tool.action ?? \"\",\n    verb: tool.verb ?? \"\",\n    method: tool.method ?? \"\",\n    scope: tool.scope ?? \"\",\n  };\n  for (const facet of MATCH_FACETS) {\n    if (!matchItems(facets[facet], match[facet])) return false;\n  }\n  return (\n    matchesHint(match.readOnly, tool.annotations?.readOnlyHint) &&\n    matchesHint(match.destructive, tool.annotations?.destructiveHint) &&\n    matchesHint(match.idempotent, tool.annotations?.idempotentHint)\n  );\n}\n\nfunction matchesHint(want: boolean | undefined, have: boolean | undefined) {\n  if (want === undefined) return true;\n  return have !== undefined && have === want;\n}\n\n/** Lowers a flat tool→policy map into ordered rules, so the legacy shape and the\n *  rule list share one evaluation path instead of two that can disagree.\n *\n *  A key is ambiguous — it may name a tool or its group — so each key emits both\n *  a group rule and a name rule, with every group rule placed before every name\n *  rule. A key that names a group matches no tool name and vice versa, so the\n *  ambiguity costs nothing; and where a key is both, the name rule comes later\n *  and wins. That is exactly the precedence the popover needs, where a per-tool\n *  toggle must beat the group toggle above it.\n *\n *  Keys are sorted so the request body is stable: an unstable order would make\n *  every render look like a changed request. */\nexport function toolPolicyFromPreferences(\n  prefs: Record<string, ToolPolicy> | undefined,\n): PermissionPolicy {\n  const keys = Object.keys(prefs ?? {})\n    .filter((key) => key.trim() !== \"\")\n    .sort();\n  if (keys.length === 0) return [];\n  const policies = new Map<string, ToolPolicy>();\n  for (const key of keys) {\n    const policy = normalizeToolPolicy(prefs?.[key]);\n    if (policy) policies.set(key, policy);\n  }\n  const ordered = [...policies.keys()];\n  return [\n    ...ordered.map((key) => ({ group: key, policy: policies.get(key)! })),\n    ...ordered.map((key) => ({ name: key, policy: policies.get(key)! })),\n  ];\n}\n\n/** Appends `later` onto `earlier`, the later winning. Composition rather than\n *  mutation, so one caller's user rules cannot leak into another's. */\nexport function appendToolPolicy(\n  earlier: PermissionPolicy | undefined,\n  later: PermissionPolicy | undefined,\n): PermissionPolicy {\n  return [...(earlier ?? []), ...(later ?? [])];\n}\n\n/** Parses a rule list off the wire, dropping anything malformed rather than\n *  letting it silently become the last word on every tool: a rule with no facet\n *  matches everything, and being last-match-wins that is the one mistake with\n *  unbounded reach. */\nexport function normalizeToolPolicyRules(value: unknown): PermissionPolicy {\n  if (!Array.isArray(value)) return [];\n  const rules: PermissionPolicy = [];\n  for (const raw of value) {\n    if (!raw || typeof raw !== \"object\" || Array.isArray(raw)) continue;\n    const item = raw as Record<string, unknown>;\n    const policy = normalizeToolPolicy(item.policy);\n    if (!policy) continue;\n    const match: ToolMatch = {};\n    for (const facet of MATCH_FACETS) {\n      const patterns = normalizePatterns(item[facet] as MatchPatterns);\n      if (patterns.length > 0) match[facet] = patterns;\n    }\n    for (const hint of [\"readOnly\", \"destructive\", \"idempotent\"] as const) {\n      if (typeof item[hint] === \"boolean\") match[hint] = item[hint] as boolean;\n    }\n    if (Object.keys(match).length === 0) continue;\n    rules.push({ ...match, policy });\n  }\n  return rules;\n}\n"],"names":[],"mappings":";AAkDA,MAAM,eAAe;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAOO,SAAS,WACd,MACA,UACS;AACT,QAAM,aAAa,kBAAkB,QAAQ;AAC7C,MAAI,WAAW,WAAW,EAAG,QAAO;AAGpC,QAAM,SAAS,CAAC,GAAG,UAAU,EAAE;AAAA,IAC7B,CAAC,GAAG,MAAM,cAAc,CAAC,IAAI,cAAc,CAAC;AAAA,EAAA;AAE9C,aAAW,WAAW,QAAQ;AAC5B,QAAI,QAAQ,WAAW,GAAG,GAAG;AAC3B,UAAI,aAAa,MAAM,QAAQ,MAAM,CAAC,CAAC,EAAG,QAAO;AACjD;AAAA,IACF;AACA,QAAI,aAAa,MAAM,OAAO,EAAG,QAAO;AAAA,EAC1C;AAEA,SAAO,OAAO,MAAM,CAAC,YAAY,QAAQ,WAAW,GAAG,CAAC;AAC1D;AAEA,SAAS,kBAAkB,UAA+C;AACxE,MAAI,aAAa,OAAW,QAAO,CAAA;AACnC,QAAM,OAAO,OAAO,aAAa,WAAW,CAAC,QAAQ,IAAI;AACzD,QAAM,MAAgB,CAAA;AACtB,aAAW,OAAO,MAAM;AACtB,QAAI,OAAO,QAAQ,SAAU;AAC7B,UAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,eAAW,QAAQ,OAAO;AACxB,YAAM,UAAU,KAAK,KAAA;AACrB,UAAI,YAAY,MAAM,MAAM,SAAS,EAAG;AACxC,UAAI,YAAY,GAAI,KAAI,KAAK,OAAO;AAAA,IACtC;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,cAAc,SAAyB;AAC9C,MAAI,YAAY,KAAM,QAAO;AAC7B,SAAO,QAAQ,WAAW,GAAG,IAAI,IAAI;AACvC;AAEA,SAAS,aAAa,MAAc,SAA0B;AAC5D,MAAI,YAAY,IAAK,QAAO;AAC5B,QAAM,QAAQ,KAAK,YAAA;AACnB,QAAM,OAAO,QAAQ,YAAA;AACrB,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,KAAK,WAAW,GAAG,KAAK,KAAK,SAAS,GAAG,GAAG;AAC9C,QAAI,MAAM,SAAS,KAAK,MAAM,GAAG,EAAE,CAAC,EAAG,QAAO;AAAA,EAChD;AACA,MAAI,KAAK,WAAW,GAAG,KAAK,MAAM,SAAS,KAAK,MAAM,CAAC,CAAC,EAAG,QAAO;AAClE,MAAI,KAAK,SAAS,GAAG,KAAK,MAAM,WAAW,KAAK,MAAM,GAAG,EAAE,CAAC,EAAG,QAAO;AACtE,SAAO;AACT;AAQO,SAAS,kBACd,QACA,MACwB;AACxB,MAAI;AACJ,aAAW,QAAQ,UAAU,IAAI;AAC/B,QAAI,YAAY,MAAM,IAAI,cAAc,KAAK;AAAA,EAC/C;AACA,SAAO;AACT;AAEO,SAAS,YAAY,OAAkB,MAAyB;;AACrE,QAAM,SAAwD;AAAA,IAC5D,MAAM,KAAK,QAAQ;AAAA,IACnB,OAAO,KAAK,SAAS;AAAA,IACrB,QAAQ,KAAK,UAAU;AAAA,IACvB,QAAQ,KAAK,UAAU;AAAA,IACvB,QAAQ,KAAK,UAAU;AAAA,IACvB,MAAM,KAAK,QAAQ;AAAA,IACnB,QAAQ,KAAK,UAAU;AAAA,IACvB,OAAO,KAAK,SAAS;AAAA,EAAA;AAEvB,aAAW,SAAS,cAAc;AAChC,QAAI,CAAC,WAAW,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC,EAAG,QAAO;AAAA,EACvD;AACA,SACE,YAAY,MAAM,WAAU,UAAK,gBAAL,mBAAkB,YAAY,KAC1D,YAAY,MAAM,cAAa,UAAK,gBAAL,mBAAkB,eAAe,KAChE,YAAY,MAAM,aAAY,UAAK,gBAAL,mBAAkB,cAAc;AAElE;AAEA,SAAS,YAAY,MAA2B,MAA2B;AACzE,MAAI,SAAS,OAAW,QAAO;AAC/B,SAAO,SAAS,UAAa,SAAS;AACxC;AAcO,SAAS,0BACd,OACkB;AAClB,QAAM,OAAO,OAAO,KAAK,SAAS,CAAA,CAAE,EACjC,OAAO,CAAC,QAAQ,IAAI,KAAA,MAAW,EAAE,EACjC,KAAA;AACH,MAAI,KAAK,WAAW,EAAG,QAAO,CAAA;AAC9B,QAAM,+BAAe,IAAA;AACrB,aAAW,OAAO,MAAM;AACtB,UAAM,SAAS,oBAAoB,+BAAQ,IAAI;AAC/C,QAAI,OAAQ,UAAS,IAAI,KAAK,MAAM;AAAA,EACtC;AACA,QAAM,UAAU,CAAC,GAAG,SAAS,MAAM;AACnC,SAAO;AAAA,IACL,GAAG,QAAQ,IAAI,CAAC,SAAS,EAAE,OAAO,KAAK,QAAQ,SAAS,IAAI,GAAG,IAAK;AAAA,IACpE,GAAG,QAAQ,IAAI,CAAC,SAAS,EAAE,MAAM,KAAK,QAAQ,SAAS,IAAI,GAAG,IAAK;AAAA,EAAA;AAEvE;AAIO,SAAS,iBACd,SACA,OACkB;AAClB,SAAO,CAAC,GAAI,WAAW,CAAA,GAAK,GAAI,SAAS,CAAA,CAAG;AAC9C;AAMO,SAAS,yBAAyB,OAAkC;AACzE,MAAI,CAAC,MAAM,QAAQ,KAAK,UAAU,CAAA;AAClC,QAAM,QAA0B,CAAA;AAChC,aAAW,OAAO,OAAO;AACvB,QAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,GAAG,EAAG;AAC3D,UAAM,OAAO;AACb,UAAM,SAAS,oBAAoB,KAAK,MAAM;AAC9C,QAAI,CAAC,OAAQ;AACb,UAAM,QAAmB,CAAA;AACzB,eAAW,SAAS,cAAc;AAChC,YAAM,WAAW,kBAAkB,KAAK,KAAK,CAAkB;AAC/D,UAAI,SAAS,SAAS,EAAG,OAAM,KAAK,IAAI;AAAA,IAC1C;AACA,eAAW,QAAQ,CAAC,YAAY,eAAe,YAAY,GAAY;AACrE,UAAI,OAAO,KAAK,IAAI,MAAM,UAAW,OAAM,IAAI,IAAI,KAAK,IAAI;AAAA,IAC9D;AACA,QAAI,OAAO,KAAK,KAAK,EAAE,WAAW,EAAG;AACrC,UAAM,KAAK,EAAE,GAAG,OAAO,QAAQ;AAAA,EACjC;AACA,SAAO;AACT;"}