@frankieai/core 0.1.0

package/dist/index.cjs

@@ -0,0 +1,271 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  agentConfigSchema: () => agentConfigSchema,
+  apiSourceSchema: () => apiSourceSchema,
+  authConfigSchema: () => authConfigSchema,
+  brandingConfigSchema: () => brandingConfigSchema,
+  defineFrankieConfig: () => defineFrankieConfig,
+  describeTool: () => describeTool,
+  evaluateToolPolicy: () => evaluateToolPolicy,
+  frankieConfigSchema: () => frankieConfigSchema,
+  limitsConfigSchema: () => limitsConfigSchema,
+  mcpServerSchema: () => mcpServerSchema,
+  modelConfigSchema: () => modelConfigSchema,
+  parseFrankieConfig: () => parseFrankieConfig,
+  thinkingLevelSchema: () => thinkingLevelSchema,
+  toolPolicySchema: () => toolPolicySchema,
+  widgetThemeSchema: () => widgetThemeSchema
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/config.ts
+var import_zod = require("zod");
+var widgetThemeSchema = import_zod.z.object({
+  primary: import_zod.z.string().optional(),
+  primaryForeground: import_zod.z.string().optional(),
+  background: import_zod.z.string().optional(),
+  foreground: import_zod.z.string().optional(),
+  muted: import_zod.z.string().optional(),
+  border: import_zod.z.string().optional(),
+  radius: import_zod.z.string().optional(),
+  fontFamily: import_zod.z.string().optional(),
+  mode: import_zod.z.enum(["light", "dark", "system"]).default("system")
+}).prefault({});
+var thinkingLevelSchema = import_zod.z.enum(["minimal", "low", "medium", "high", "xhigh", "max"]);
+var modelConfigSchema = import_zod.z.object({
+  /**
+   * Any provider the model layer knows about. `fireworks` is the default;
+   * `anthropic`, `openai`, `google`, `groq`, `together`, `openrouter` and
+   * ~30 others resolve too, which is what makes the model a config choice.
+   */
+  provider: import_zod.z.string().min(1).default("fireworks"),
+  /**
+   * Model id within that provider. The default is Kimi K2.7 on Fireworks,
+   * which serves a native Anthropic-Messages endpoint and a 262K window.
+   */
+  model: import_zod.z.string().default("accounts/fireworks/models/kimi-k2p7-code"),
+  /** Env var holding the provider key. Never put the key in config itself. */
+  apiKeyEnv: import_zod.z.string().default("FIREWORKS_API_KEY"),
+  /** Override the provider's base URL (self-hosted gateways, tests). */
+  baseUrl: import_zod.z.string().url().optional(),
+  maxTokens: import_zod.z.number().int().positive().max(2e5).default(8192),
+  temperature: import_zod.z.number().min(0).max(2).default(0.6),
+  /**
+   * Reasoning depth. Lowest by default: an onboarding widget is latency-
+   * sensitive and its questions rarely need deliberation.
+   */
+  thinkingLevel: thinkingLevelSchema.default("minimal"),
+  /** Forward the model's reasoning stream to the client as thinking deltas. */
+  streamReasoning: import_zod.z.boolean().default(false)
+});
+var mcpServerSchema = import_zod.z.object({
+  name: import_zod.z.string().min(1).regex(/^[a-z0-9][a-z0-9_-]*$/i, "MCP server names must be alphanumeric with - or _"),
+  /** `http` covers streamable HTTP; `sse` is the legacy transport. */
+  transport: import_zod.z.enum(["http", "sse"]).default("http"),
+  url: import_zod.z.string().url(),
+  /** Static headers, e.g. a service token for the company's own MCP server. */
+  headers: import_zod.z.record(import_zod.z.string(), import_zod.z.string()).default({}),
+  /**
+   * When set, the verified end-user JWT is forwarded to the MCP server in this
+   * header so the company's tools can act as that user. Use with care: only
+   * enable it for MCP servers you control.
+   */
+  forwardUserTokenAs: import_zod.z.string().optional(),
+  /** Extra claims from the user token to forward as `x-frankie-<claim>`. */
+  forwardUserClaims: import_zod.z.array(import_zod.z.string()).default([])
+});
+var apiSourceSchema = import_zod.z.object({
+  name: import_zod.z.string().min(1).regex(/^[a-z0-9][a-z0-9_-]*$/i, "API source names must be alphanumeric with - or _"),
+  /** URL or local path to an OpenAPI 3.x document (JSON or YAML). */
+  spec: import_zod.z.string().min(1),
+  /** Overrides the spec's own `servers[0].url`. Required if the spec has none. */
+  baseUrl: import_zod.z.string().url().optional(),
+  /**
+   * Operation ids the agent may call. Empty means "every operation that passes
+   * the other filters" — fine for a small internal API, risky for a large one.
+   */
+  operations: import_zod.z.array(import_zod.z.string()).default([]),
+  /**
+   * Path globs to include, e.g. `/projects/**`. Empty means all paths.
+   */
+  includePaths: import_zod.z.array(import_zod.z.string()).default([]),
+  /**
+   * HTTP methods the agent may use. Read-only by default: an onboarding agent
+   * wired to a whole API should not be able to DELETE on its first day. Widen
+   * deliberately, per API.
+   */
+  methods: import_zod.z.array(import_zod.z.enum(["GET", "POST", "PUT", "PATCH", "DELETE"])).default(["GET"]),
+  /** Static headers, e.g. a service token. */
+  headers: import_zod.z.record(import_zod.z.string(), import_zod.z.string()).default({}),
+  /**
+   * When set, the verified end-user JWT is forwarded in this header, so your
+   * API authorises the call exactly as it would any other request from them.
+   */
+  forwardUserTokenAs: import_zod.z.string().optional(),
+  /** Extra claims from the user token to forward as `x-frankie-<claim>`. */
+  forwardUserClaims: import_zod.z.array(import_zod.z.string()).default([]),
+  /** Per-call timeout. */
+  timeoutMs: import_zod.z.number().int().positive().default(3e4),
+  /** Response bodies longer than this are truncated before the model sees them. */
+  maxResponseChars: import_zod.z.number().int().positive().default(8e3)
+});
+var toolPolicySchema = import_zod.z.object({
+  /**
+   * Tool names the agent may call without asking. MCP tools are named
+   * `mcp__<server>__<tool>` and generated API tools `api__<name>__<operation>`;
+   * naming the prefix alone (`mcp__acme`, `api__acme`) allows all of them.
+   */
+  allow: import_zod.z.array(import_zod.z.string()).default([]),
+  /** Explicit denials; evaluated before `allow`. */
+  deny: import_zod.z.array(import_zod.z.string()).default([]),
+  /**
+   * Deny anything not in `allow`. On by default — an onboarding agent living
+   * on a public marketing page should not have an open tool surface.
+   */
+  denyByDefault: import_zod.z.boolean().default(true)
+});
+var agentConfigSchema = import_zod.z.object({
+  /** Prepended to the runtime's own operating instructions. */
+  systemPrompt: import_zod.z.string().default(""),
+  /** First message the widget shows before the user types anything. */
+  greeting: import_zod.z.string().default("Hi! I can walk you through getting set up. What are you trying to do?"),
+  suggestedPrompts: import_zod.z.array(import_zod.z.string()).max(6).default([]),
+  maxTurns: import_zod.z.number().int().positive().max(50).default(12),
+  /** Hard stop on estimated spend per session. */
+  maxBudgetUsd: import_zod.z.number().positive().optional(),
+  tools: toolPolicySchema.prefault({}),
+  /** Show tool activity in the transcript. */
+  showToolActivity: import_zod.z.boolean().default(true)
+});
+var authConfigSchema = import_zod.z.object({
+  /**
+   * Safe to ship in client bundles. Identifies the tenant; it authorises
+   * nothing on its own — the origin allowlist and the user token do that.
+   */
+  publishableKey: import_zod.z.string().min(8),
+  /** Exact origins allowed to open sessions, e.g. `https://app.acme.com`. */
+  allowedOrigins: import_zod.z.array(import_zod.z.string()).default([]),
+  /** Let visitors chat without a host-signed token (marketing pages). */
+  allowAnonymous: import_zod.z.boolean().default(false),
+  /** Env var holding the HS256 secret the host signs user tokens with. */
+  jwtSecretEnv: import_zod.z.string().default("FRANKIE_JWT_SECRET"),
+  /** Verify against a JWKS endpoint instead of a shared secret (RS/ES256). */
+  jwksUrl: import_zod.z.string().url().optional(),
+  jwtIssuer: import_zod.z.string().optional(),
+  jwtAudience: import_zod.z.string().optional(),
+  /** How long an issued session token is good for. */
+  sessionTtlSeconds: import_zod.z.number().int().positive().default(60 * 60),
+  /** Env var holding the secret used to sign Frankie's own session tokens. */
+  sessionSecretEnv: import_zod.z.string().default("FRANKIE_SESSION_SECRET")
+});
+var limitsConfigSchema = import_zod.z.object({
+  /** Messages per session per window. */
+  messagesPerWindow: import_zod.z.number().int().positive().default(30),
+  windowSeconds: import_zod.z.number().int().positive().default(15 * 60),
+  /** Sessions a single IP may open per window. */
+  sessionsPerIpPerWindow: import_zod.z.number().int().positive().default(20),
+  /** Longest a single turn may run before it is aborted. */
+  turnTimeoutMs: import_zod.z.number().int().positive().default(12e4)
+});
+var brandingConfigSchema = import_zod.z.object({
+  name: import_zod.z.string().default("Assistant"),
+  tagline: import_zod.z.string().optional(),
+  avatarUrl: import_zod.z.string().url().optional(),
+  launcherLabel: import_zod.z.string().default("Need a hand?")
+});
+var frankieConfigSchema = import_zod.z.object({
+  tenantId: import_zod.z.string().min(1),
+  branding: brandingConfigSchema.prefault({}),
+  theme: widgetThemeSchema,
+  model: modelConfigSchema.prefault({}),
+  agent: agentConfigSchema.prefault({}),
+  auth: authConfigSchema,
+  mcpServers: import_zod.z.array(mcpServerSchema).default([]),
+  /** APIs turned into tools from their OpenAPI document. */
+  apis: import_zod.z.array(apiSourceSchema).default([]),
+  limits: limitsConfigSchema.prefault({})
+});
+function parseFrankieConfig(input) {
+  return frankieConfigSchema.parse(input);
+}
+function defineFrankieConfig(config) {
+  return config;
+}
+
+// src/tools.ts
+function evaluateToolPolicy(toolName, policy) {
+  if (matchesAny(toolName, policy.deny)) {
+    return { allowed: false, reason: `"${toolName}" is on the deny list for this agent.` };
+  }
+  if (matchesAny(toolName, policy.allow)) {
+    return { allowed: true, reason: "allowed by policy" };
+  }
+  if (policy.denyByDefault) {
+    return { allowed: false, reason: `"${toolName}" is not in this agent's allow list.` };
+  }
+  return { allowed: true, reason: "no policy match; default allow" };
+}
+function matchesAny(toolName, patterns) {
+  return patterns.some((pattern) => matches(toolName, pattern));
+}
+function matches(toolName, pattern) {
+  if (pattern === "*") return true;
+  if (pattern.endsWith("*")) return toolName.startsWith(pattern.slice(0, -1));
+  if (toolName === pattern) return true;
+  return toolName.startsWith(`${pattern}__`);
+}
+function describeTool(toolName, input) {
+  const mcp = /^mcp__([^_]+(?:_[^_]+)*)__(.+)$/.exec(toolName);
+  if (mcp) {
+    const [, server, tool] = mcp;
+    return `${humanise(tool ?? toolName)} \xB7 ${server}`;
+  }
+  const inputRecord = typeof input === "object" && input !== null ? input : {};
+  const hint = inputRecord["path"] ?? inputRecord["url"] ?? inputRecord["query"] ?? inputRecord["command"];
+  return typeof hint === "string" ? `${humanise(toolName)}: ${truncate(hint, 60)}` : humanise(toolName);
+}
+function humanise(name) {
+  return name.replace(/[_-]+/g, " ").replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/\b\w/g, (c) => c.toUpperCase()).trim();
+}
+function truncate(value, max) {
+  return value.length <= max ? value : `${value.slice(0, max - 1)}\u2026`;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  agentConfigSchema,
+  apiSourceSchema,
+  authConfigSchema,
+  brandingConfigSchema,
+  defineFrankieConfig,
+  describeTool,
+  evaluateToolPolicy,
+  frankieConfigSchema,
+  limitsConfigSchema,
+  mcpServerSchema,
+  modelConfigSchema,
+  parseFrankieConfig,
+  thinkingLevelSchema,
+  toolPolicySchema,
+  widgetThemeSchema
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/config.ts","../src/tools.ts"],"sourcesContent":["export * from \"./config.js\";\nexport * from \"./protocol.js\";\nexport * from \"./tools.js\";\n","import { z } from \"zod\";\n\n/**\n * Tenant configuration. One config == one embedded agent. Everything a\n * customer needs to change to make Frankie theirs lives here, so the code\n * itself stays generic.\n */\n\nexport const widgetThemeSchema = z\n  .object({\n    primary: z.string().optional(),\n    primaryForeground: z.string().optional(),\n    background: z.string().optional(),\n    foreground: z.string().optional(),\n    muted: z.string().optional(),\n    border: z.string().optional(),\n    radius: z.string().optional(),\n    fontFamily: z.string().optional(),\n    mode: z.enum([\"light\", \"dark\", \"system\"]).default(\"system\"),\n  })\n  .prefault({});\n\nexport const thinkingLevelSchema = z.enum([\"minimal\", \"low\", \"medium\", \"high\", \"xhigh\", \"max\"]);\n\nexport const modelConfigSchema = z.object({\n  /**\n   * Any provider the model layer knows about. `fireworks` is the default;\n   * `anthropic`, `openai`, `google`, `groq`, `together`, `openrouter` and\n   * ~30 others resolve too, which is what makes the model a config choice.\n   */\n  provider: z.string().min(1).default(\"fireworks\"),\n  /**\n   * Model id within that provider. The default is Kimi K2.7 on Fireworks,\n   * which serves a native Anthropic-Messages endpoint and a 262K window.\n   */\n  model: z.string().default(\"accounts/fireworks/models/kimi-k2p7-code\"),\n  /** Env var holding the provider key. Never put the key in config itself. */\n  apiKeyEnv: z.string().default(\"FIREWORKS_API_KEY\"),\n  /** Override the provider's base URL (self-hosted gateways, tests). */\n  baseUrl: z.string().url().optional(),\n  maxTokens: z.number().int().positive().max(200_000).default(8192),\n  temperature: z.number().min(0).max(2).default(0.6),\n  /**\n   * Reasoning depth. Lowest by default: an onboarding widget is latency-\n   * sensitive and its questions rarely need deliberation.\n   */\n  thinkingLevel: thinkingLevelSchema.default(\"minimal\"),\n  /** Forward the model's reasoning stream to the client as thinking deltas. */\n  streamReasoning: z.boolean().default(false),\n});\n\nexport const mcpServerSchema = z.object({\n  name: z\n    .string()\n    .min(1)\n    .regex(/^[a-z0-9][a-z0-9_-]*$/i, \"MCP server names must be alphanumeric with - or _\"),\n  /** `http` covers streamable HTTP; `sse` is the legacy transport. */\n  transport: z.enum([\"http\", \"sse\"]).default(\"http\"),\n  url: z.string().url(),\n  /** Static headers, e.g. a service token for the company's own MCP server. */\n  headers: z.record(z.string(), z.string()).default({}),\n  /**\n   * When set, the verified end-user JWT is forwarded to the MCP server in this\n   * header so the company's tools can act as that user. Use with care: only\n   * enable it for MCP servers you control.\n   */\n  forwardUserTokenAs: z.string().optional(),\n  /** Extra claims from the user token to forward as `x-frankie-<claim>`. */\n  forwardUserClaims: z.array(z.string()).default([]),\n});\n\n/**\n * An HTTP API described by an OpenAPI document, turned into tools directly.\n *\n * This is the \"no MCP server to write\" path: point Frankie at a spec, name the\n * operations the agent may use, and it builds the tools at startup.\n */\nexport const apiSourceSchema = z.object({\n  name: z\n    .string()\n    .min(1)\n    .regex(/^[a-z0-9][a-z0-9_-]*$/i, \"API source names must be alphanumeric with - or _\"),\n  /** URL or local path to an OpenAPI 3.x document (JSON or YAML). */\n  spec: z.string().min(1),\n  /** Overrides the spec's own `servers[0].url`. Required if the spec has none. */\n  baseUrl: z.string().url().optional(),\n  /**\n   * Operation ids the agent may call. Empty means \"every operation that passes\n   * the other filters\" — fine for a small internal API, risky for a large one.\n   */\n  operations: z.array(z.string()).default([]),\n  /**\n   * Path globs to include, e.g. `/projects/**`. Empty means all paths.\n   */\n  includePaths: z.array(z.string()).default([]),\n  /**\n   * HTTP methods the agent may use. Read-only by default: an onboarding agent\n   * wired to a whole API should not be able to DELETE on its first day. Widen\n   * deliberately, per API.\n   */\n  methods: z.array(z.enum([\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\"])).default([\"GET\"]),\n  /** Static headers, e.g. a service token. */\n  headers: z.record(z.string(), z.string()).default({}),\n  /**\n   * When set, the verified end-user JWT is forwarded in this header, so your\n   * API authorises the call exactly as it would any other request from them.\n   */\n  forwardUserTokenAs: z.string().optional(),\n  /** Extra claims from the user token to forward as `x-frankie-<claim>`. */\n  forwardUserClaims: z.array(z.string()).default([]),\n  /** Per-call timeout. */\n  timeoutMs: z.number().int().positive().default(30_000),\n  /** Response bodies longer than this are truncated before the model sees them. */\n  maxResponseChars: z.number().int().positive().default(8_000),\n});\n\nexport const toolPolicySchema = z.object({\n  /**\n   * Tool names the agent may call without asking. MCP tools are named\n   * `mcp__<server>__<tool>` and generated API tools `api__<name>__<operation>`;\n   * naming the prefix alone (`mcp__acme`, `api__acme`) allows all of them.\n   */\n  allow: z.array(z.string()).default([]),\n  /** Explicit denials; evaluated before `allow`. */\n  deny: z.array(z.string()).default([]),\n  /**\n   * Deny anything not in `allow`. On by default — an onboarding agent living\n   * on a public marketing page should not have an open tool surface.\n   */\n  denyByDefault: z.boolean().default(true),\n});\n\nexport const agentConfigSchema = z.object({\n  /** Prepended to the runtime's own operating instructions. */\n  systemPrompt: z.string().default(\"\"),\n  /** First message the widget shows before the user types anything. */\n  greeting: z.string().default(\"Hi! I can walk you through getting set up. What are you trying to do?\"),\n  suggestedPrompts: z.array(z.string()).max(6).default([]),\n  maxTurns: z.number().int().positive().max(50).default(12),\n  /** Hard stop on estimated spend per session. */\n  maxBudgetUsd: z.number().positive().optional(),\n  tools: toolPolicySchema.prefault({}),\n  /** Show tool activity in the transcript. */\n  showToolActivity: z.boolean().default(true),\n});\n\nexport const authConfigSchema = z.object({\n  /**\n   * Safe to ship in client bundles. Identifies the tenant; it authorises\n   * nothing on its own — the origin allowlist and the user token do that.\n   */\n  publishableKey: z.string().min(8),\n  /** Exact origins allowed to open sessions, e.g. `https://app.acme.com`. */\n  allowedOrigins: z.array(z.string()).default([]),\n  /** Let visitors chat without a host-signed token (marketing pages). */\n  allowAnonymous: z.boolean().default(false),\n  /** Env var holding the HS256 secret the host signs user tokens with. */\n  jwtSecretEnv: z.string().default(\"FRANKIE_JWT_SECRET\"),\n  /** Verify against a JWKS endpoint instead of a shared secret (RS/ES256). */\n  jwksUrl: z.string().url().optional(),\n  jwtIssuer: z.string().optional(),\n  jwtAudience: z.string().optional(),\n  /** How long an issued session token is good for. */\n  sessionTtlSeconds: z.number().int().positive().default(60 * 60),\n  /** Env var holding the secret used to sign Frankie's own session tokens. */\n  sessionSecretEnv: z.string().default(\"FRANKIE_SESSION_SECRET\"),\n});\n\nexport const limitsConfigSchema = z.object({\n  /** Messages per session per window. */\n  messagesPerWindow: z.number().int().positive().default(30),\n  windowSeconds: z.number().int().positive().default(15 * 60),\n  /** Sessions a single IP may open per window. */\n  sessionsPerIpPerWindow: z.number().int().positive().default(20),\n  /** Longest a single turn may run before it is aborted. */\n  turnTimeoutMs: z.number().int().positive().default(120_000),\n});\n\nexport const brandingConfigSchema = z.object({\n  name: z.string().default(\"Assistant\"),\n  tagline: z.string().optional(),\n  avatarUrl: z.string().url().optional(),\n  launcherLabel: z.string().default(\"Need a hand?\"),\n});\n\nexport const frankieConfigSchema = z.object({\n  tenantId: z.string().min(1),\n  branding: brandingConfigSchema.prefault({}),\n  theme: widgetThemeSchema,\n  model: modelConfigSchema.prefault({}),\n  agent: agentConfigSchema.prefault({}),\n  auth: authConfigSchema,\n  mcpServers: z.array(mcpServerSchema).default([]),\n  /** APIs turned into tools from their OpenAPI document. */\n  apis: z.array(apiSourceSchema).default([]),\n  limits: limitsConfigSchema.prefault({}),\n});\n\nexport type ThinkingLevel = z.infer<typeof thinkingLevelSchema>;\nexport type WidgetThemeConfig = z.infer<typeof widgetThemeSchema>;\nexport type ModelConfig = z.infer<typeof modelConfigSchema>;\nexport type McpServerConfig = z.infer<typeof mcpServerSchema>;\nexport type ApiSourceConfig = z.infer<typeof apiSourceSchema>;\nexport type ToolPolicy = z.infer<typeof toolPolicySchema>;\nexport type AgentConfig = z.infer<typeof agentConfigSchema>;\nexport type AuthConfig = z.infer<typeof authConfigSchema>;\nexport type LimitsConfig = z.infer<typeof limitsConfigSchema>;\nexport type BrandingConfig = z.infer<typeof brandingConfigSchema>;\nexport type FrankieConfig = z.infer<typeof frankieConfigSchema>;\nexport type FrankieConfigInput = z.input<typeof frankieConfigSchema>;\n\nexport function parseFrankieConfig(input: unknown): FrankieConfig {\n  return frankieConfigSchema.parse(input);\n}\n\n/** Helper for `frankie.config.ts` files — gives editors full completion. */\nexport function defineFrankieConfig(config: FrankieConfigInput): FrankieConfigInput {\n  return config;\n}\n","import type { ToolPolicy } from \"./config.js\";\n\nexport interface ToolDecision {\n  allowed: boolean;\n  reason: string;\n}\n\n/**\n * Decide whether the agent may run a tool.\n *\n * Patterns are matched exactly, or as a prefix when they end in `*`. MCP tools\n * arrive as `mcp__<server>__<tool>`, so listing `mcp__acme` (no trailing star)\n * also allows every tool on the `acme` server.\n */\nexport function evaluateToolPolicy(toolName: string, policy: ToolPolicy): ToolDecision {\n  if (matchesAny(toolName, policy.deny)) {\n    return { allowed: false, reason: `\"${toolName}\" is on the deny list for this agent.` };\n  }\n  if (matchesAny(toolName, policy.allow)) {\n    return { allowed: true, reason: \"allowed by policy\" };\n  }\n  if (policy.denyByDefault) {\n    return { allowed: false, reason: `\"${toolName}\" is not in this agent's allow list.` };\n  }\n  return { allowed: true, reason: \"no policy match; default allow\" };\n}\n\nfunction matchesAny(toolName: string, patterns: readonly string[]): boolean {\n  return patterns.some((pattern) => matches(toolName, pattern));\n}\n\nfunction matches(toolName: string, pattern: string): boolean {\n  if (pattern === \"*\") return true;\n  if (pattern.endsWith(\"*\")) return toolName.startsWith(pattern.slice(0, -1));\n  if (toolName === pattern) return true;\n  // `mcp__acme` covers `mcp__acme__create_workspace`.\n  return toolName.startsWith(`${pattern}__`);\n}\n\n/** A short human label for a tool call, for the \"Frankie is …\" line in the UI. */\nexport function describeTool(toolName: string, input: unknown): string {\n  const mcp = /^mcp__([^_]+(?:_[^_]+)*)__(.+)$/.exec(toolName);\n  if (mcp) {\n    const [, server, tool] = mcp;\n    return `${humanise(tool ?? toolName)} · ${server}`;\n  }\n  const inputRecord = typeof input === \"object\" && input !== null ? (input as Record<string, unknown>) : {};\n  const hint = inputRecord[\"path\"] ?? inputRecord[\"url\"] ?? inputRecord[\"query\"] ?? inputRecord[\"command\"];\n  return typeof hint === \"string\" ? `${humanise(toolName)}: ${truncate(hint, 60)}` : humanise(toolName);\n}\n\nfunction humanise(name: string): string {\n  return name\n    .replace(/[_-]+/g, \" \")\n    .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n    .replace(/\\b\\w/g, (c) => c.toUpperCase())\n    .trim();\n}\n\nfunction truncate(value: string, max: number): string {\n  return value.length <= max ? value : `${value.slice(0, max - 1)}…`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,iBAAkB;AAQX,IAAM,oBAAoB,aAC9B,OAAO;AAAA,EACN,SAAS,aAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,mBAAmB,aAAE,OAAO,EAAE,SAAS;AAAA,EACvC,YAAY,aAAE,OAAO,EAAE,SAAS;AAAA,EAChC,YAAY,aAAE,OAAO,EAAE,SAAS;AAAA,EAChC,OAAO,aAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,QAAQ,aAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,QAAQ,aAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,YAAY,aAAE,OAAO,EAAE,SAAS;AAAA,EAChC,MAAM,aAAE,KAAK,CAAC,SAAS,QAAQ,QAAQ,CAAC,EAAE,QAAQ,QAAQ;AAC5D,CAAC,EACA,SAAS,CAAC,CAAC;AAEP,IAAM,sBAAsB,aAAE,KAAK,CAAC,WAAW,OAAO,UAAU,QAAQ,SAAS,KAAK,CAAC;AAEvF,IAAM,oBAAoB,aAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMxC,UAAU,aAAE,OAAO,EAAE,IAAI,CAAC,EAAE,QAAQ,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA,EAK/C,OAAO,aAAE,OAAO,EAAE,QAAQ,0CAA0C;AAAA;AAAA,EAEpE,WAAW,aAAE,OAAO,EAAE,QAAQ,mBAAmB;AAAA;AAAA,EAEjD,SAAS,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACnC,WAAW,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,GAAO,EAAE,QAAQ,IAAI;AAAA,EAChE,aAAa,aAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG;AAAA;AAAA;AAAA;AAAA;AAAA,EAKjD,eAAe,oBAAoB,QAAQ,SAAS;AAAA;AAAA,EAEpD,iBAAiB,aAAE,QAAQ,EAAE,QAAQ,KAAK;AAC5C,CAAC;AAEM,IAAM,kBAAkB,aAAE,OAAO;AAAA,EACtC,MAAM,aACH,OAAO,EACP,IAAI,CAAC,EACL,MAAM,0BAA0B,mDAAmD;AAAA;AAAA,EAEtF,WAAW,aAAE,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,QAAQ,MAAM;AAAA,EACjD,KAAK,aAAE,OAAO,EAAE,IAAI;AAAA;AAAA,EAEpB,SAAS,aAAE,OAAO,aAAE,OAAO,GAAG,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpD,oBAAoB,aAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAExC,mBAAmB,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAQM,IAAM,kBAAkB,aAAE,OAAO;AAAA,EACtC,MAAM,aACH,OAAO,EACP,IAAI,CAAC,EACL,MAAM,0BAA0B,mDAAmD;AAAA;AAAA,EAEtF,MAAM,aAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEtB,SAAS,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKnC,YAAY,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA,EAI1C,cAAc,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM5C,SAAS,aAAE,MAAM,aAAE,KAAK,CAAC,OAAO,QAAQ,OAAO,SAAS,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC;AAAA;AAAA,EAEnF,SAAS,aAAE,OAAO,aAAE,OAAO,GAAG,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpD,oBAAoB,aAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAExC,mBAAmB,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAEjD,WAAW,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAM;AAAA;AAAA,EAErD,kBAAkB,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,GAAK;AAC7D,CAAC;AAEM,IAAM,mBAAmB,aAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMvC,OAAO,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAErC,MAAM,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpC,eAAe,aAAE,QAAQ,EAAE,QAAQ,IAAI;AACzC,CAAC;AAEM,IAAM,oBAAoB,aAAE,OAAO;AAAA;AAAA,EAExC,cAAc,aAAE,OAAO,EAAE,QAAQ,EAAE;AAAA;AAAA,EAEnC,UAAU,aAAE,OAAO,EAAE,QAAQ,uEAAuE;AAAA,EACpG,kBAAkB,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,EACvD,UAAU,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE;AAAA;AAAA,EAExD,cAAc,aAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EAC7C,OAAO,iBAAiB,SAAS,CAAC,CAAC;AAAA;AAAA,EAEnC,kBAAkB,aAAE,QAAQ,EAAE,QAAQ,IAAI;AAC5C,CAAC;AAEM,IAAM,mBAAmB,aAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKvC,gBAAgB,aAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEhC,gBAAgB,aAAE,MAAM,aAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAE9C,gBAAgB,aAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA;AAAA,EAEzC,cAAc,aAAE,OAAO,EAAE,QAAQ,oBAAoB;AAAA;AAAA,EAErD,SAAS,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACnC,WAAW,aAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,aAAa,aAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAEjC,mBAAmB,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,KAAK,EAAE;AAAA;AAAA,EAE9D,kBAAkB,aAAE,OAAO,EAAE,QAAQ,wBAAwB;AAC/D,CAAC;AAEM,IAAM,qBAAqB,aAAE,OAAO;AAAA;AAAA,EAEzC,mBAAmB,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA,EACzD,eAAe,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,KAAK,EAAE;AAAA;AAAA,EAE1D,wBAAwB,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE;AAAA;AAAA,EAE9D,eAAe,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,IAAO;AAC5D,CAAC;AAEM,IAAM,uBAAuB,aAAE,OAAO;AAAA,EAC3C,MAAM,aAAE,OAAO,EAAE,QAAQ,WAAW;AAAA,EACpC,SAAS,aAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,WAAW,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACrC,eAAe,aAAE,OAAO,EAAE,QAAQ,cAAc;AAClD,CAAC;AAEM,IAAM,sBAAsB,aAAE,OAAO;AAAA,EAC1C,UAAU,aAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,UAAU,qBAAqB,SAAS,CAAC,CAAC;AAAA,EAC1C,OAAO;AAAA,EACP,OAAO,kBAAkB,SAAS,CAAC,CAAC;AAAA,EACpC,OAAO,kBAAkB,SAAS,CAAC,CAAC;AAAA,EACpC,MAAM;AAAA,EACN,YAAY,aAAE,MAAM,eAAe,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAE/C,MAAM,aAAE,MAAM,eAAe,EAAE,QAAQ,CAAC,CAAC;AAAA,EACzC,QAAQ,mBAAmB,SAAS,CAAC,CAAC;AACxC,CAAC;AAeM,SAAS,mBAAmB,OAA+B;AAChE,SAAO,oBAAoB,MAAM,KAAK;AACxC;AAGO,SAAS,oBAAoB,QAAgD;AAClF,SAAO;AACT;;;AC5MO,SAAS,mBAAmB,UAAkB,QAAkC;AACrF,MAAI,WAAW,UAAU,OAAO,IAAI,GAAG;AACrC,WAAO,EAAE,SAAS,OAAO,QAAQ,IAAI,QAAQ,wCAAwC;AAAA,EACvF;AACA,MAAI,WAAW,UAAU,OAAO,KAAK,GAAG;AACtC,WAAO,EAAE,SAAS,MAAM,QAAQ,oBAAoB;AAAA,EACtD;AACA,MAAI,OAAO,eAAe;AACxB,WAAO,EAAE,SAAS,OAAO,QAAQ,IAAI,QAAQ,uCAAuC;AAAA,EACtF;AACA,SAAO,EAAE,SAAS,MAAM,QAAQ,iCAAiC;AACnE;AAEA,SAAS,WAAW,UAAkB,UAAsC;AAC1E,SAAO,SAAS,KAAK,CAAC,YAAY,QAAQ,UAAU,OAAO,CAAC;AAC9D;AAEA,SAAS,QAAQ,UAAkB,SAA0B;AAC3D,MAAI,YAAY,IAAK,QAAO;AAC5B,MAAI,QAAQ,SAAS,GAAG,EAAG,QAAO,SAAS,WAAW,QAAQ,MAAM,GAAG,EAAE,CAAC;AAC1E,MAAI,aAAa,QAAS,QAAO;AAEjC,SAAO,SAAS,WAAW,GAAG,OAAO,IAAI;AAC3C;AAGO,SAAS,aAAa,UAAkB,OAAwB;AACrE,QAAM,MAAM,kCAAkC,KAAK,QAAQ;AAC3D,MAAI,KAAK;AACP,UAAM,CAAC,EAAE,QAAQ,IAAI,IAAI;AACzB,WAAO,GAAG,SAAS,QAAQ,QAAQ,CAAC,SAAM,MAAM;AAAA,EAClD;AACA,QAAM,cAAc,OAAO,UAAU,YAAY,UAAU,OAAQ,QAAoC,CAAC;AACxG,QAAM,OAAO,YAAY,MAAM,KAAK,YAAY,KAAK,KAAK,YAAY,OAAO,KAAK,YAAY,SAAS;AACvG,SAAO,OAAO,SAAS,WAAW,GAAG,SAAS,QAAQ,CAAC,KAAK,SAAS,MAAM,EAAE,CAAC,KAAK,SAAS,QAAQ;AACtG;AAEA,SAAS,SAAS,MAAsB;AACtC,SAAO,KACJ,QAAQ,UAAU,GAAG,EACrB,QAAQ,sBAAsB,OAAO,EACrC,QAAQ,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC,EACvC,KAAK;AACV;AAEA,SAAS,SAAS,OAAe,KAAqB;AACpD,SAAO,MAAM,UAAU,MAAM,QAAQ,GAAG,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC;AACjE;","names":[]}