@hongmaple0820/med-scale-research-os 0.43.0

package/dist/tools/ToolEvidenceStore.js

@@ -0,0 +1,129 @@
+import { randomUUID } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from 'node:fs';
+import { isAbsolute, join, resolve } from 'node:path';
+const SENSITIVE_KEY_PATTERN = /(?:password|passwd|pwd|token|secret|authorization|cookie|credential|api[_-]?key|private[_-]?key)/i;
+const REDACTED = '[REDACTED]';
+export class ToolEvidenceStore {
+    constructor(options = {}) {
+        this.sequence = 0;
+        const projectDir = resolve(options.projectDir ?? process.cwd());
+        const scaleRoot = isAbsolute(options.scaleDir ?? '')
+            ? options.scaleDir
+            : join(projectDir, options.scaleDir ?? '.scale');
+        this.rootDir = join(scaleRoot, 'evidence', 'tool-runs');
+        this.now = options.now ?? (() => new Date());
+        if (!existsSync(this.rootDir))
+            mkdirSync(this.rootDir, { recursive: true });
+    }
+    save(input) {
+        const startedAt = this.now().toISOString();
+        const inputRedaction = redactUnknown(input.sanitizedInput);
+        const commandRedaction = redactText(input.command ?? '');
+        const summaryRedaction = redactText(input.outputSummary);
+        const versionRedaction = redactText(input.version ?? '');
+        const evidence = {
+            ...input,
+            id: `TOOL-${Date.now()}-${randomUUID().slice(0, 8)}`,
+            startedAt,
+            completedAt: this.now().toISOString(),
+            sequence: ++this.sequence,
+            sanitizedInput: inputRedaction.value,
+            command: input.command ? commandRedaction.value : undefined,
+            version: input.version ? versionRedaction.value : undefined,
+            outputSummary: summaryRedaction.value,
+            redactionApplied: inputRedaction.redacted || commandRedaction.redacted || summaryRedaction.redacted || versionRedaction.redacted,
+        };
+        const dir = this.taskDir(input.taskId);
+        if (!existsSync(dir))
+            mkdirSync(dir, { recursive: true });
+        writeFileSync(join(dir, `${evidence.id}.json`), JSON.stringify(evidence, null, 2), 'utf-8');
+        return evidence;
+    }
+    list(taskId) {
+        const dir = this.taskDir(taskId);
+        if (!existsSync(dir))
+            return [];
+        return readdirSync(dir)
+            .filter(file => file.endsWith('.json'))
+            .map(file => readEvidenceFile(join(dir, file)))
+            .filter((record) => Boolean(record))
+            .sort((a, b) => {
+            const time = Date.parse(b.completedAt) - Date.parse(a.completedAt);
+            if (time !== 0)
+                return time;
+            return b.sequence - a.sequence;
+        });
+    }
+    get(taskId, id) {
+        return readEvidenceFile(join(this.taskDir(taskId), `${id}.json`));
+    }
+    summary(taskId) {
+        const records = this.list(taskId);
+        const passed = records.filter(record => record.status === 'passed').length;
+        const failed = records.filter(record => record.status === 'failed').length;
+        const skipped = records.filter(record => record.status === 'skipped').length;
+        return {
+            taskId,
+            total: records.length,
+            passed,
+            failed,
+            skipped,
+            ok: failed === 0,
+        };
+    }
+    taskDir(taskId) {
+        return join(this.rootDir, safePathSegment(taskId));
+    }
+}
+export function redactEvidenceValue(value) {
+    return redactUnknown(value);
+}
+export function redactEvidenceText(text) {
+    return redactText(text);
+}
+function readEvidenceFile(file) {
+    try {
+        return JSON.parse(readFileSync(file, 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+}
+function redactUnknown(value, key = '') {
+    if (SENSITIVE_KEY_PATTERN.test(key))
+        return { value: REDACTED, redacted: true };
+    if (typeof value === 'string')
+        return redactText(value);
+    if (Array.isArray(value)) {
+        let redacted = false;
+        const list = value.map(item => {
+            const result = redactUnknown(item);
+            redacted = redacted || result.redacted;
+            return result.value;
+        });
+        return { value: list, redacted };
+    }
+    if (value && typeof value === 'object') {
+        let redacted = false;
+        const output = {};
+        for (const [childKey, childValue] of Object.entries(value)) {
+            const result = redactUnknown(childValue, childKey);
+            redacted = redacted || result.redacted;
+            output[childKey] = result.value;
+        }
+        return { value: output, redacted };
+    }
+    return { value, redacted: false };
+}
+function redactText(text) {
+    let output = text;
+    output = output.replace(/(authorization\s*:\s*bearer\s+)[^\s,;]+/gi, `$1${REDACTED}`);
+    output = output.replace(/(--(?:password|token|secret|authorization|cookie|credential|api-key|apikey|private-key)\s+)[^\s]+/gi, `$1${REDACTED}`);
+    output = output.replace(/\b(password|passwd|pwd|token|secret|authorization|cookie|credential|api[_-]?key|private[_-]?key)\s*=\s*[^\s,;]+/gi, `$1=${REDACTED}`);
+    output = output.replace(/("(?:password|passwd|pwd|token|secret|authorization|cookie|credential|api[_-]?key|private[_-]?key)"\s*:\s*")[^"]+(")/gi, `$1${REDACTED}$2`);
+    return { value: output, redacted: output !== text };
+}
+function safePathSegment(value) {
+    return value.replace(/[^a-zA-Z0-9._-]/g, '-').slice(0, 120) || 'unknown-task';
+}
+//# sourceMappingURL=ToolEvidenceStore.js.map

package/dist/tools/ToolEvidenceStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolEvidenceStore.js","sourceRoot":"","sources":["../../src/tools/ToolEvidenceStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACzF,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AA4CrD,MAAM,qBAAqB,GAAG,mGAAmG,CAAA;AACjI,MAAM,QAAQ,GAAG,YAAY,CAAA;AAE7B,MAAM,OAAO,iBAAiB;IAK5B,YAAY,UAAoC,EAAE;QAF1C,aAAQ,GAAG,CAAC,CAAA;QAGlB,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;QAC/D,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;YAClD,CAAC,CAAC,OAAO,CAAC,QAAkB;YAC5B,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAA;QAClD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,CAAA;QACvD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;QAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7E,CAAC;IAED,IAAI,CAAC,KAAmD;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAA;QAC1C,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;QAC1D,MAAM,gBAAgB,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAA;QACxD,MAAM,gBAAgB,GAAG,UAAU,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;QACxD,MAAM,gBAAgB,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAA;QACxD,MAAM,QAAQ,GAAoB;YAChC,GAAG,KAAK;YACR,EAAE,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YACpD,SAAS;YACT,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACrC,QAAQ,EAAE,EAAE,IAAI,CAAC,QAAQ;YACzB,cAAc,EAAE,cAAc,CAAC,KAAgC;YAC/D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YAC3D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YAC3D,aAAa,EAAE,gBAAgB,CAAC,KAAK;YACrC,gBAAgB,EAAE,cAAc,CAAC,QAAQ,IAAI,gBAAgB,CAAC,QAAQ,IAAI,gBAAgB,CAAC,QAAQ,IAAI,gBAAgB,CAAC,QAAQ;SACjI,CAAA;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACtC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;QAC3F,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,IAAI,CAAC,MAAc;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAChC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAA;QAC/B,OAAO,WAAW,CAAC,GAAG,CAAC;aACpB,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aACtC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;aAC9C,MAAM,CAAC,CAAC,MAAM,EAA6B,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;aAC9D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACb,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;YAClE,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAA;YAC3B,OAAO,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAA;QAChC,CAAC,CAAC,CAAA;IACN,CAAC;IAED,GAAG,CAAC,MAAc,EAAE,EAAU;QAC5B,OAAO,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAA;IACnE,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAA;QAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAA;QAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAA;QAC5E,OAAO;YACL,MAAM;YACN,KAAK,EAAE,OAAO,CAAC,MAAM;YACrB,MAAM;YACN,MAAM;YACN,OAAO;YACP,EAAE,EAAE,MAAM,KAAK,CAAC;SACjB,CAAA;IACH,CAAC;IAEO,OAAO,CAAC,MAAc;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAA;IACpD,CAAC;CACF;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAA;AAC7B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,UAAU,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAoB,CAAA;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,GAAG,GAAG,EAAE;IAC7C,IAAI,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IAE/E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAA;IACvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YAC5B,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;YAClC,QAAQ,GAAG,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAA;YACtC,OAAO,MAAM,CAAC,KAAK,CAAA;QACrB,CAAC,CAAC,CAAA;QACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IAClC,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,MAAM,MAAM,GAA4B,EAAE,CAAA;QAC1C,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;YAClD,QAAQ,GAAG,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAA;YACtC,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC,KAAK,CAAA;QACjC,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;IACpC,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;AACnC,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,MAAM,GAAG,IAAI,CAAA;IACjB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,2CAA2C,EAAE,KAAK,QAAQ,EAAE,CAAC,CAAA;IACrF,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,qGAAqG,EAAE,KAAK,QAAQ,EAAE,CAAC,CAAA;IAC/I,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,mHAAmH,EAAE,MAAM,QAAQ,EAAE,CAAC,CAAA;IAC9J,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,wHAAwH,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAA;IACpK,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,EAAE,CAAA;AACrD,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,cAAc,CAAA;AAC/E,CAAC"}

package/dist/tools/ToolOrchestrator.d.ts

@@ -0,0 +1,67 @@
+import type { SkillPlan } from '../skills/routing/index.js';
+import { type ToolCapabilityEntry, type ToolCapabilityReport } from './ToolCapabilityRegistry.js';
+import { ToolEvidenceStore, type ToolEvidenceAdapter, type ToolEvidenceStatus, type ToolRunEvidence } from './ToolEvidenceStore.js';
+import { type ResolvedToolPolicy } from './ToolPolicy.js';
+export type ToolStepStatus = 'ready' | 'missing' | 'skipped';
+export interface ToolExecutionStep {
+    id: string;
+    toolId: string;
+    domain: string;
+    adapter: ToolEvidenceAdapter;
+    required: boolean;
+    status: ToolStepStatus;
+    reason: string;
+    capability?: ToolCapabilityEntry;
+}
+export interface ToolExecutionPlan {
+    taskId: string;
+    taskName: string;
+    mode: ResolvedToolPolicy['mode'];
+    steps: ToolExecutionStep[];
+    blockers: string[];
+    warnings: string[];
+}
+export interface ToolPlanInput {
+    skillPlan: SkillPlan;
+}
+export interface ToolRunOptions {
+    dryRun?: boolean;
+    inputs?: Record<string, Record<string, unknown>>;
+}
+export interface ToolStepExecutionResult {
+    status: ToolEvidenceStatus;
+    outputSummary: string;
+    outputPaths: string[];
+    exitCode?: number;
+    version?: string;
+}
+export interface ToolRunReport {
+    taskId: string;
+    ok: boolean;
+    dryRun: boolean;
+    evidence: ToolRunEvidence[];
+    blockers: string[];
+    warnings: string[];
+}
+export interface ToolOrchestratorOptions {
+    projectDir?: string;
+    policy?: ResolvedToolPolicy;
+    capabilityReport?: ToolCapabilityReport;
+    evidenceStore?: ToolEvidenceStore;
+    executeStep?: (step: ToolExecutionStep, input: Record<string, unknown>) => Promise<ToolStepExecutionResult>;
+}
+export declare class ToolOrchestrator {
+    private projectDir;
+    private policy;
+    private capabilityReport?;
+    private evidenceStore;
+    private executeStepImpl?;
+    constructor(options?: ToolOrchestratorOptions);
+    plan(input: ToolPlanInput): ToolExecutionPlan;
+    run(plan: ToolExecutionPlan, options?: ToolRunOptions): Promise<ToolRunReport>;
+    private resolveToolIds;
+    private isRequired;
+    private resolveDomain;
+    private executeStep;
+    private safetyPolicyForStep;
+}

package/dist/tools/ToolOrchestrator.js

@@ -0,0 +1,252 @@
+import { execa } from 'execa';
+import { inspectToolCapabilities, TOOL_CAPABILITY_CATALOG } from './ToolCapabilityRegistry.js';
+import { ToolEvidenceStore } from './ToolEvidenceStore.js';
+import { requiredToolsForDomains, resolveToolPolicy } from './ToolPolicy.js';
+import { wrapCliCommandWithRtk } from './RtkRuntime.js';
+export class ToolOrchestrator {
+    constructor(options = {}) {
+        this.projectDir = options.projectDir ?? process.cwd();
+        this.policy = options.policy ?? resolveToolPolicy(null);
+        this.capabilityReport = options.capabilityReport;
+        this.evidenceStore = options.evidenceStore ?? new ToolEvidenceStore({ projectDir: this.projectDir });
+        this.executeStepImpl = options.executeStep;
+    }
+    plan(input) {
+        if (this.policy.mode === 'off') {
+            return {
+                taskId: input.skillPlan.taskId,
+                taskName: input.skillPlan.taskName,
+                mode: this.policy.mode,
+                steps: [],
+                blockers: [],
+                warnings: ['Tool orchestration is disabled.'],
+            };
+        }
+        const toolIds = this.resolveToolIds(input.skillPlan);
+        const capabilityReport = this.capabilityReport ?? inspectToolCapabilities({
+            projectDir: this.projectDir,
+            toolIds,
+        });
+        const capabilityById = new Map(capabilityReport.tools.map(tool => [tool.id, tool]));
+        const blockers = [];
+        const warnings = [...this.policy.warnings];
+        const steps = [];
+        for (const toolId of toolIds) {
+            const capability = capabilityById.get(toolId);
+            const required = this.isRequired(toolId, input.skillPlan);
+            const status = capability?.installed ? 'ready' : 'missing';
+            const step = {
+                id: `tool-${steps.length + 1}-${toolId}`,
+                toolId,
+                domain: this.resolveDomain(toolId, input.skillPlan),
+                adapter: adapterForCategory(capability?.category ?? catalogCategory(toolId)),
+                required,
+                status,
+                capability,
+                reason: status === 'ready'
+                    ? 'Tool is available.'
+                    : capability?.missingReason ?? 'Tool capability is missing or not configured.',
+            };
+            steps.push(step);
+            if (status === 'missing' && required) {
+                const message = `Required tool ${toolId} is missing for task ${input.skillPlan.taskId}.`;
+                if (this.policy.mode === 'block')
+                    blockers.push(message);
+                else
+                    warnings.push(message);
+            }
+        }
+        return {
+            taskId: input.skillPlan.taskId,
+            taskName: input.skillPlan.taskName,
+            mode: this.policy.mode,
+            steps,
+            blockers,
+            warnings,
+        };
+    }
+    async run(plan, options = {}) {
+        const blockers = [...plan.blockers];
+        const warnings = [...plan.warnings];
+        const evidence = [];
+        if (blockers.length > 0) {
+            return {
+                taskId: plan.taskId,
+                ok: false,
+                dryRun: Boolean(options.dryRun),
+                evidence,
+                blockers,
+                warnings,
+            };
+        }
+        for (const step of plan.steps) {
+            if (step.status !== 'ready')
+                continue;
+            const result = options.dryRun
+                ? dryRunResult(step)
+                : await this.executeStep(step, options.inputs?.[step.toolId] ?? {});
+            const record = this.evidenceStore.save({
+                taskId: plan.taskId,
+                domain: step.domain,
+                tool: step.toolId,
+                adapter: step.adapter,
+                version: result.version ?? step.capability?.version,
+                command: step.capability?.command,
+                mcpToolName: step.capability?.category === 'mcp' ? step.capability.id : undefined,
+                status: result.status,
+                exitCode: result.exitCode,
+                sanitizedInput: options.inputs?.[step.toolId] ?? {},
+                outputSummary: result.outputSummary,
+                outputPaths: result.outputPaths,
+                safetyPolicy: this.safetyPolicyForStep(step, Boolean(options.dryRun)),
+            });
+            evidence.push(record);
+            if (record.status === 'failed') {
+                const message = `Tool ${step.toolId} failed for task ${plan.taskId}.`;
+                if (step.required)
+                    blockers.push(message);
+                else
+                    warnings.push(message);
+            }
+        }
+        return {
+            taskId: plan.taskId,
+            ok: blockers.length === 0,
+            dryRun: Boolean(options.dryRun),
+            evidence,
+            blockers,
+            warnings,
+        };
+    }
+    resolveToolIds(skillPlan) {
+        const requiredByDomain = requiredToolsForDomains(this.policy, skillPlan.intents.map(intent => intent.domain))
+            .map(tool => tool.id);
+        return unique([
+            ...skillPlan.requiredSkills,
+            ...requiredByDomain,
+            ...skillPlan.recommendedSkills.filter(skill => this.policy.tools[skill]?.enabled),
+        ]);
+    }
+    isRequired(toolId, skillPlan) {
+        if (skillPlan.requiredSkills.includes(toolId))
+            return true;
+        const config = this.policy.tools[toolId];
+        if (!config)
+            return false;
+        const domains = new Set(skillPlan.intents.map(intent => intent.domain));
+        return config.requiredFor.some(domain => domains.has(domain));
+    }
+    resolveDomain(toolId, skillPlan) {
+        const config = this.policy.tools[toolId];
+        const intentDomains = skillPlan.intents.map(intent => intent.domain);
+        const requiredDomain = config?.requiredFor.find(domain => intentDomains.includes(domain));
+        if (requiredDomain)
+            return requiredDomain;
+        const recommendedDomain = config?.recommendedFor?.find(domain => intentDomains.includes(domain));
+        if (recommendedDomain)
+            return recommendedDomain;
+        return intentDomains[0] ?? 'general';
+    }
+    async executeStep(step, input) {
+        if (this.executeStepImpl)
+            return this.executeStepImpl(step, input);
+        if (step.adapter === 'cli' || step.adapter === 'browser' || step.adapter === 'desktop')
+            return executeCliCapabilityCheck(step);
+        return {
+            status: 'skipped',
+            outputSummary: `No executor configured for ${step.toolId}; evidence recorded as skipped.`,
+            outputPaths: [],
+        };
+    }
+    safetyPolicyForStep(step, dryRun) {
+        const policies = ['redact-secrets'];
+        if (dryRun)
+            policies.push('dry-run');
+        if (step.adapter === 'browser')
+            policies.push('browser-side-effect-boundary');
+        if (step.adapter === 'desktop')
+            policies.push('desktop-side-effect-boundary');
+        if (step.adapter === 'cli')
+            policies.push('cli-version-and-exit-code');
+        if (step.adapter === 'mcp')
+            policies.push('mcp-tool-policy');
+        return policies;
+    }
+}
+function dryRunResult(step) {
+    return {
+        status: 'skipped',
+        outputSummary: `Dry-run: ${step.toolId} was planned but not executed.`,
+        outputPaths: [],
+        version: step.capability?.version,
+    };
+}
+async function executeCliCapabilityCheck(step) {
+    const command = step.capability?.command;
+    const args = step.capability?.versionArgs ?? ['--version'];
+    if (!command) {
+        return {
+            status: 'skipped',
+            outputSummary: `No safe CLI command configured for ${step.toolId}; evidence recorded as skipped.`,
+            outputPaths: [],
+        };
+    }
+    try {
+        const invocation = wrapCliCommandWithRtk(command, args);
+        const result = await execa(invocation.command, invocation.args, {
+            reject: false,
+            timeout: 10_000,
+            cwd: process.cwd(),
+            env: process.env,
+            stdin: 'ignore',
+        });
+        const stdout = result.stdout.trim();
+        const stderr = result.stderr.trim();
+        const exitCode = result.exitCode ?? 1;
+        const outputSummary = summarizeCliOutput(step.toolId, stdout, stderr, exitCode, invocation.wrapped);
+        return {
+            status: exitCode === 0 ? 'passed' : 'failed',
+            outputSummary,
+            outputPaths: [],
+            exitCode,
+            version: stdout.split(/\r?\n/).find(Boolean) ?? step.capability?.version,
+        };
+    }
+    catch (error) {
+        return {
+            status: 'failed',
+            outputSummary: `CLI check failed for ${step.toolId}: ${error instanceof Error ? error.message : String(error)}`,
+            outputPaths: [],
+            exitCode: 1,
+        };
+    }
+}
+function summarizeCliOutput(toolId, stdout, stderr, exitCode, wrappedByRtk = false) {
+    const lines = [`CLI version check for ${toolId} exited with ${exitCode}.${wrappedByRtk ? ' Wrapped with RTK.' : ''}`];
+    if (stdout)
+        lines.push(`stdout: ${tail(stdout)}`);
+    if (stderr)
+        lines.push(`stderr: ${tail(stderr)}`);
+    return lines.join(' ');
+}
+function tail(value) {
+    return value.split(/\r?\n/).slice(-5).join('\n').slice(0, 1000);
+}
+function adapterForCategory(category) {
+    if (category === 'browser')
+        return 'browser';
+    if (category === 'desktop')
+        return 'desktop';
+    if (category === 'cli')
+        return 'cli';
+    if (category === 'mcp')
+        return 'mcp';
+    return 'skill';
+}
+function catalogCategory(toolId) {
+    return TOOL_CAPABILITY_CATALOG.find(tool => tool.id === toolId)?.category ?? 'skill';
+}
+function unique(items) {
+    return [...new Set(items)];
+}
+//# sourceMappingURL=ToolOrchestrator.js.map

package/dist/tools/ToolOrchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolOrchestrator.js","sourceRoot":"","sources":["../../src/tools/ToolOrchestrator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAA;AAC7B,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAoF,MAAM,6BAA6B,CAAA;AAChL,OAAO,EAAE,iBAAiB,EAA2E,MAAM,wBAAwB,CAAA;AACnI,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAA2B,MAAM,iBAAiB,CAAA;AACrG,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AA0DvD,MAAM,OAAO,gBAAgB;IAO3B,YAAY,UAAmC,EAAE;QAC/C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;QACrD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAA;QACvD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAA;QAChD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,iBAAiB,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;QACpG,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,WAAW,CAAA;IAC5C,CAAC;IAED,IAAI,CAAC,KAAoB;QACvB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC/B,OAAO;gBACL,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;gBAC9B,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ;gBAClC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;gBACtB,KAAK,EAAE,EAAE;gBACT,QAAQ,EAAE,EAAE;gBACZ,QAAQ,EAAE,CAAC,iCAAiC,CAAC;aAC9C,CAAA;QACH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QACpD,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;YACxE,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO;SACR,CAAC,CAAA;QACF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QACnF,MAAM,QAAQ,GAAa,EAAE,CAAA;QAC7B,MAAM,QAAQ,GAAa,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QACpD,MAAM,KAAK,GAAwB,EAAE,CAAA;QAErC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;YACzD,MAAM,MAAM,GAAmB,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;YAC1E,MAAM,IAAI,GAAsB;gBAC9B,EAAE,EAAE,QAAQ,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,EAAE;gBACxC,MAAM;gBACN,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC;gBACnD,OAAO,EAAE,kBAAkB,CAAC,UAAU,EAAE,QAAQ,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;gBAC5E,QAAQ;gBACR,MAAM;gBACN,UAAU;gBACV,MAAM,EAAE,MAAM,KAAK,OAAO;oBACxB,CAAC,CAAC,oBAAoB;oBACtB,CAAC,CAAC,UAAU,EAAE,aAAa,IAAI,+CAA+C;aACjF,CAAA;YACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAEhB,IAAI,MAAM,KAAK,SAAS,IAAI,QAAQ,EAAE,CAAC;gBACrC,MAAM,OAAO,GAAG,iBAAiB,MAAM,wBAAwB,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAA;gBACxF,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;oBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;;oBACnD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC7B,CAAC;QACH,CAAC;QAED,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;YAC9B,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ;YAClC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,KAAK;YACL,QAAQ;YACR,QAAQ;SACT,CAAA;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAuB,EAAE,UAA0B,EAAE;QAC7D,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,QAAQ,GAAsB,EAAE,CAAA;QAEtC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC/B,QAAQ;gBACR,QAAQ;gBACR,QAAQ;aACT,CAAA;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;gBAAE,SAAQ;YAErC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;gBAC3B,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;gBACpB,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;YAErE,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;gBACrC,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,IAAI,EAAE,IAAI,CAAC,MAAM;gBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,OAAO;gBACnD,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO;gBACjC,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;gBACjF,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,cAAc,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACnD,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,YAAY,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;aACtE,CAAC,CAAA;YACF,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAErB,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAAG,QAAQ,IAAI,CAAC,MAAM,oBAAoB,IAAI,CAAC,MAAM,GAAG,CAAA;gBACrE,IAAI,IAAI,CAAC,QAAQ;oBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;;oBACpC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC7B,CAAC;QACH,CAAC;QAED,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;YACzB,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YAC/B,QAAQ;YACR,QAAQ;YACR,QAAQ;SACT,CAAA;IACH,CAAC;IAEO,cAAc,CAAC,SAAoB;QACzC,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;aAC1G,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvB,OAAO,MAAM,CAAC;YACZ,GAAG,SAAS,CAAC,cAAc;YAC3B,GAAG,gBAAgB;YACnB,GAAG,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;SAClF,CAAC,CAAA;IACJ,CAAC;IAEO,UAAU,CAAC,MAAc,EAAE,SAAoB;QACrD,IAAI,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAA;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QACzB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QACvE,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IAC/D,CAAC;IAEO,aAAa,CAAC,MAAc,EAAE,SAAoB;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACxC,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACpE,MAAM,cAAc,GAAG,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QACzF,IAAI,cAAc;YAAE,OAAO,cAAc,CAAA;QACzC,MAAM,iBAAiB,GAAG,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAChG,IAAI,iBAAiB;YAAE,OAAO,iBAAiB,CAAA;QAC/C,OAAO,aAAa,CAAC,CAAC,CAAC,IAAI,SAAS,CAAA;IACtC,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAuB,EAAE,KAA8B;QAC/E,IAAI,IAAI,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAClE,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAA;QAC9H,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,aAAa,EAAE,8BAA8B,IAAI,CAAC,MAAM,iCAAiC;YACzF,WAAW,EAAE,EAAE;SAChB,CAAA;IACH,CAAC;IAEO,mBAAmB,CAAC,IAAuB,EAAE,MAAe;QAClE,MAAM,QAAQ,GAAG,CAAC,gBAAgB,CAAC,CAAA;QACnC,IAAI,MAAM;YAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACpC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;QAC7E,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;QAC7E,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;YAAE,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;QACtE,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;YAAE,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QAC5D,OAAO,QAAQ,CAAA;IACjB,CAAC;CACF;AAED,SAAS,YAAY,CAAC,IAAuB;IAC3C,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,aAAa,EAAE,YAAY,IAAI,CAAC,MAAM,gCAAgC;QACtE,WAAW,EAAE,EAAE;QACf,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO;KAClC,CAAA;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,IAAuB;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAA;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,IAAI,CAAC,WAAW,CAAC,CAAA;IAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,aAAa,EAAE,sCAAsC,IAAI,CAAC,MAAM,iCAAiC;YACjG,WAAW,EAAE,EAAE;SAChB,CAAA;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACvD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,EAAE;YAC9D,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,MAAM;YACf,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;YAClB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;QACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAA;QACrC,MAAM,aAAa,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,CAAA;QACnG,OAAO;YACL,MAAM,EAAE,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;YAC5C,aAAa;YACb,WAAW,EAAE,EAAE;YACf,QAAQ;YACR,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,OAAO;SACzE,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,aAAa,EAAE,wBAAwB,IAAI,CAAC,MAAM,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;YAC/G,WAAW,EAAE,EAAE;YACf,QAAQ,EAAE,CAAC;SACZ,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc,EAAE,MAAc,EAAE,MAAc,EAAE,QAAgB,EAAE,YAAY,GAAG,KAAK;IAChH,MAAM,KAAK,GAAG,CAAC,yBAAyB,MAAM,gBAAgB,QAAQ,IAAI,YAAY,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACrH,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACjD,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACjD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACxB,CAAC;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;AACjE,CAAC;AAED,SAAS,kBAAkB,CAAC,QAA4C;IACtE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC5C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC5C,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,KAAK,CAAA;IACpC,IAAI,QAAQ,KAAK,KAAK;QAAE,OAAO,KAAK,CAAA;IACpC,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,OAAO,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,QAAQ,IAAI,OAAO,CAAA;AACtF,CAAC;AAED,SAAS,MAAM,CAAI,KAAU;IAC3B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;AAC5B,CAAC"}

package/dist/tools/ToolPolicy.d.ts

@@ -0,0 +1,33 @@
+export type ToolOrchestrationMode = 'off' | 'advisory' | 'evidence-required' | 'block';
+export type ToolDestructiveActionPolicy = 'allow' | 'confirm' | 'block';
+export interface ToolPolicyToolConfig {
+    enabled: boolean;
+    requiredFor: string[];
+    recommendedFor?: string[];
+    allowedDomains?: string[];
+    destructiveActions?: ToolDestructiveActionPolicy;
+    command?: string;
+    mcpToolName?: string;
+    evidenceRequired?: boolean;
+}
+export interface ToolPolicyFile {
+    version?: number;
+    mode?: ToolOrchestrationMode;
+    tools?: Record<string, Partial<ToolPolicyToolConfig>>;
+}
+export interface ResolvedToolPolicy {
+    version: number;
+    mode: ToolOrchestrationMode;
+    tools: Record<string, ToolPolicyToolConfig>;
+    warnings: string[];
+}
+export interface RequiredTool {
+    id: string;
+    config: ToolPolicyToolConfig;
+}
+export declare const DEFAULT_TOOL_POLICY: ResolvedToolPolicy;
+export declare function toolPolicyPath(projectDir?: string, scaleDir?: string): string;
+export declare function loadToolPolicy(projectDir?: string, scaleDir?: string): ResolvedToolPolicy;
+export declare function resolveToolPolicy(input: ToolPolicyFile | null | undefined): ResolvedToolPolicy;
+export declare function requiredToolsForDomains(policy: ResolvedToolPolicy, domains: string[]): RequiredTool[];
+export declare function toolPolicyTemplate(mode?: ToolOrchestrationMode): string;