@hotmeshio/long-tail 0.23.1 → 0.24.0

package/build/system/seed/tool-manifests-knowledge.d.ts

@@ -1,221 +1,2 @@
-export declare const KNOWLEDGE_TOOLS: ({
-    name: string;
-    description: string;
-    read_safe: boolean;
-    inputSchema: {
-        type: string;
-        properties: {
-            domain: {
-                type: string;
-                description: string;
-            };
-            key: {
-                type: string;
-                description: string;
-            };
-            field: {
-                type: string;
-                description: string;
-            };
-            data: {
-                description: string;
-            };
-            tags: {
-                type: string;
-                items: {
-                    type: string;
-                };
-                description: string;
-            };
-            version?: undefined;
-            query?: undefined;
-            limit?: undefined;
-            offset?: undefined;
-            path?: undefined;
-            value?: undefined;
-        };
-        required: string[];
-    };
-} | {
-    name: string;
-    description: string;
-    read_safe: boolean;
-    inputSchema: {
-        type: string;
-        properties: {
-            domain: {
-                type: string;
-                description: string;
-            };
-            key: {
-                type: string;
-                description: string;
-            };
-            version: {
-                type: string;
-                description: string;
-            };
-            field?: undefined;
-            data?: undefined;
-            tags?: undefined;
-            query?: undefined;
-            limit?: undefined;
-            offset?: undefined;
-            path?: undefined;
-            value?: undefined;
-        };
-        required: string[];
-    };
-} | {
-    name: string;
-    description: string;
-    read_safe: boolean;
-    inputSchema: {
-        type: string;
-        properties: {
-            domain: {
-                type: string;
-                description: string;
-            };
-            key: {
-                type: string;
-                description: string;
-            };
-            field?: undefined;
-            data?: undefined;
-            tags?: undefined;
-            version?: undefined;
-            query?: undefined;
-            limit?: undefined;
-            offset?: undefined;
-            path?: undefined;
-            value?: undefined;
-        };
-        required: string[];
-    };
-} | {
-    name: string;
-    description: string;
-    read_safe: boolean;
-    inputSchema: {
-        type: string;
-        properties: {
-            domain: {
-                type: string;
-                description: string;
-            };
-            query: {
-                type: string;
-                description: string;
-            };
-            tags: {
-                type: string;
-                items: {
-                    type: string;
-                };
-                description: string;
-            };
-            limit: {
-                type: string;
-                description: string;
-            };
-            key?: undefined;
-            field?: undefined;
-            data?: undefined;
-            version?: undefined;
-            offset?: undefined;
-            path?: undefined;
-            value?: undefined;
-        };
-        required: string[];
-    };
-} | {
-    name: string;
-    description: string;
-    read_safe: boolean;
-    inputSchema: {
-        type: string;
-        properties: {
-            domain: {
-                type: string;
-                description: string;
-            };
-            tags: {
-                type: string;
-                items: {
-                    type: string;
-                };
-                description: string;
-            };
-            limit: {
-                type: string;
-                description: string;
-            };
-            offset: {
-                type: string;
-                description: string;
-            };
-            key?: undefined;
-            field?: undefined;
-            data?: undefined;
-            version?: undefined;
-            query?: undefined;
-            path?: undefined;
-            value?: undefined;
-        };
-        required: string[];
-    };
-} | {
-    name: string;
-    description: string;
-    read_safe: boolean;
-    inputSchema: {
-        type: string;
-        properties: {
-            domain?: undefined;
-            key?: undefined;
-            field?: undefined;
-            data?: undefined;
-            tags?: undefined;
-            version?: undefined;
-            query?: undefined;
-            limit?: undefined;
-            offset?: undefined;
-            path?: undefined;
-            value?: undefined;
-        };
-        required?: undefined;
-    };
-} | {
-    name: string;
-    description: string;
-    read_safe: boolean;
-    inputSchema: {
-        type: string;
-        properties: {
-            domain: {
-                type: string;
-                description: string;
-            };
-            key: {
-                type: string;
-                description: string;
-            };
-            path: {
-                type: string;
-                description: string;
-            };
-            value: {
-                description: string;
-            };
-            field?: undefined;
-            data?: undefined;
-            tags?: undefined;
-            version?: undefined;
-            query?: undefined;
-            limit?: undefined;
-            offset?: undefined;
-        };
-        required: string[];
-    };
-})[];
+import type { LTToolManifestEntry } from '../../types';
+export declare const KNOWLEDGE_TOOLS: LTToolManifestEntry[];

package/build/system/seed/tool-manifests-knowledge.js

@@ -1,10 +1,11 @@
 "use strict";
-// ── Knowledge store tool manifests ───────────────────────────────────────────
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.KNOWLEDGE_TOOLS = void 0;
+// ── Knowledge store tool manifests ───────────────────────────────────────────
 exports.KNOWLEDGE_TOOLS = [
     {
         name: 'store_knowledge',
+        gate: 'builder',
         description: 'Store a value in a 3-level additive hierarchy: domain > key > field. Upserts by domain+key — fields accumulate across calls. Same domain+key+field overwrites that field. When field is provided, data can be any type. When omitted, data must be an object.',
         read_safe: false,
         inputSchema: {
@@ -21,6 +22,7 @@ exports.KNOWLEDGE_TOOLS = [
     },
     {
         name: 'get_knowledge',
+        gate: 'builder',
         description: 'Retrieve a single knowledge entry by domain and key. Pass version to fetch a pinned immutable edition.',
         read_safe: true,
         inputSchema: {
@@ -35,6 +37,7 @@ exports.KNOWLEDGE_TOOLS = [
     },
     {
         name: 'list_knowledge_versions',
+        gate: 'builder',
         description: 'List every immutable edition of a knowledge entry, newest first, with the current one marked. Every data-changing write mints a new version.',
         read_safe: true,
         inputSchema: {
@@ -48,6 +51,7 @@ exports.KNOWLEDGE_TOOLS = [
     },
     {
         name: 'search_knowledge',
+        gate: 'builder',
         description: 'Search knowledge entries using JSONB containment queries. The query object matches entries whose data contains the specified key-value pairs.',
         read_safe: true,
         inputSchema: {
@@ -63,6 +67,7 @@ exports.KNOWLEDGE_TOOLS = [
     },
     {
         name: 'list_knowledge',
+        gate: 'builder',
         description: 'List knowledge entries in a domain, optionally filtered by tags. Returns most recently updated first.',
         read_safe: true,
         inputSchema: {
@@ -78,6 +83,7 @@ exports.KNOWLEDGE_TOOLS = [
     },
     {
         name: 'delete_knowledge',
+        gate: 'builder',
         description: 'Delete a knowledge entry by domain and key.',
         read_safe: false,
         inputSchema: {
@@ -91,6 +97,7 @@ exports.KNOWLEDGE_TOOLS = [
     },
     {
         name: 'list_domains',
+        gate: 'builder',
         description: 'List all knowledge domains with entry counts and last-updated timestamps.',
         read_safe: true,
         inputSchema: {
@@ -100,6 +107,7 @@ exports.KNOWLEDGE_TOOLS = [
     },
     {
         name: 'append_knowledge',
+        gate: 'builder',
         description: 'Append a value to an array field within a knowledge entry. Creates the entry and array if they do not exist.',
         read_safe: false,
         inputSchema: {
@@ -113,4 +121,36 @@ exports.KNOWLEDGE_TOOLS = [
             required: ['domain', 'key', 'path', 'value'],
         },
     },
+    {
+        name: 'set_knowledge_field',
+        gate: 'builder',
+        description: 'Set a value at a dot-notation path within a knowledge entry without overwriting sibling fields. Creates the entry if it does not exist.',
+        read_safe: false,
+        inputSchema: {
+            type: 'object',
+            properties: {
+                domain: { type: 'string', description: 'Knowledge domain' },
+                key: { type: 'string', description: 'Document key' },
+                path: { type: 'string', description: 'Dot-notation path to the field' },
+                value: { description: 'Value to set, any JSON type' },
+                tags: { type: 'array', items: { type: 'string' }, description: 'Tags to union with existing tags' },
+            },
+            required: ['domain', 'key', 'path', 'value'],
+        },
+    },
+    {
+        name: 'remove_knowledge_field',
+        gate: 'builder',
+        description: 'Remove a field from a knowledge entry by dot-path. The entry survives; only the targeted path is deleted.',
+        read_safe: false,
+        inputSchema: {
+            type: 'object',
+            properties: {
+                domain: { type: 'string', description: 'Knowledge domain' },
+                key: { type: 'string', description: 'Document key' },
+                path: { type: 'string', description: 'Dot-notation path to remove' },
+            },
+            required: ['domain', 'key', 'path'],
+        },
+    },
 ];

package/build/system/seed/tool-manifests-workflows.d.ts

@@ -1,3 +1,4 @@
+import type { LTToolManifestEntry } from '../../types';
 export declare const MCP_WORKFLOW_TOOLS: ({
     name: string;
     description: string;
@@ -153,74 +154,4 @@ export declare const WORKFLOW_COMPILER_TOOLS: ({
         required?: undefined;
     };
 })[];
-export declare const CLAUDE_CODE_TOOLS: ({
-    name: string;
-    description: string;
-    read_safe: boolean;
-    inputSchema: {
-        type: string;
-        properties: {
-            prompt: {
-                type: string;
-                description: string;
-                default: string;
-            };
-            working_directory: {
-                type: string;
-                description: string;
-                default: string;
-            };
-            allowed_tools: {
-                type: string;
-                items: {
-                    type: string;
-                };
-                description: string;
-                default: string[];
-            };
-            max_turns: {
-                type: string;
-                description: string;
-                default: number;
-            };
-            model: {
-                type: string;
-                description: string;
-                default: string;
-            };
-            system_prompt: {
-                type: string;
-                description: string;
-            };
-            timeout_ms: {
-                type: string;
-                description: string;
-                default: number;
-            };
-            credential_label: {
-                type: string;
-                description: string;
-                default: string;
-            };
-        };
-        required: string[];
-    };
-} | {
-    name: string;
-    description: string;
-    read_safe: boolean;
-    inputSchema: {
-        type: string;
-        properties: {
-            prompt?: undefined;
-            working_directory?: undefined;
-            allowed_tools?: undefined;
-            max_turns?: undefined;
-            model?: undefined;
-            system_prompt?: undefined;
-            timeout_ms?: undefined;
-            credential_label?: undefined;
-        };
-        required?: undefined;
-    };
-})[];
+export declare const CLAUDE_CODE_TOOLS: LTToolManifestEntry[];

package/build/system/seed/tool-manifests-workflows.js

@@ -1,7 +1,7 @@
 "use strict";
-// ── Workflow and compiler tool manifests ─────────────────────────────────────
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CLAUDE_CODE_TOOLS = exports.WORKFLOW_COMPILER_TOOLS = exports.MCP_WORKFLOW_TOOLS = void 0;
+// ── Workflow and compiler tool manifests ─────────────────────────────────────
 exports.MCP_WORKFLOW_TOOLS = [
     {
         name: 'list_workflows',
@@ -89,6 +89,7 @@ exports.WORKFLOW_COMPILER_TOOLS = [
 exports.CLAUDE_CODE_TOOLS = [
     {
         name: 'execute_task',
+        gate: 'builder',
         description: 'Run a task using Claude Code CLI. Claude Code is an agentic coding assistant with terminal access, ' +
             'file I/O, code search, and editing. Returns structured output with result text, cost, and duration.',
         read_safe: false,
@@ -141,6 +142,7 @@ exports.CLAUDE_CODE_TOOLS = [
     },
     {
         name: 'check_availability',
+        gate: 'caller',
         description: 'Check if Claude Code CLI is installed and an API key is available. Returns version and readiness status.',
         read_safe: true,
         inputSchema: {

package/build/system/workflows/shared/principal-tools.d.ts

@@ -0,0 +1,20 @@
+import type { CapabilityAccess } from '../../../types';
+/**
+ * Tools an LLM chooses act with the authority of the person (or bot) the
+ * workflow runs as, never lt-system's: the same manifest gate /mcp applies,
+ * and the handler sees that principal as its caller. A workflow running
+ * with no principal (an internal job) keeps lt-system, as before.
+ */
+export interface ToolPrincipal {
+    userId: string;
+    access: CapabilityAccess;
+}
+/** The principal the current tool context runs as, resolved to its account; null for none. */
+export declare function currentToolPrincipal(): Promise<ToolPrincipal | null>;
+/**
+ * The built-in server a tool belongs to when the principal may call it; null
+ * for an external server the principal may call; undefined when refused. An
+ * external server's tools run on its stored credential (a remote Long Tail's
+ * service-account key, say), so they are a builder's to call.
+ */
+export declare function permittedBuiltin(principal: ToolPrincipal, serverName: string, toolName: string): Promise<string | null | undefined>;

package/build/system/workflows/shared/principal-tools.js

@@ -0,0 +1,64 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.currentToolPrincipal = currentToolPrincipal;
+exports.permittedBuiltin = permittedBuiltin;
+const context_1 = require("../../../services/iam/context");
+const userService = __importStar(require("../../../services/user"));
+const capabilities_1 = require("../../../modules/capabilities");
+const tools_1 = require("../../../api/mcp/tools");
+const uuid_1 = require("../../../lib/uuid");
+/** The principal the current tool context runs as, resolved to its account; null for none. */
+async function currentToolPrincipal() {
+    const id = (0, context_1.getToolContext)()?.principal.id;
+    if (!id)
+        return null;
+    const user = (0, uuid_1.isUuid)(id) ? await userService.getUser(id) : await userService.getUserByExternalId(id);
+    if (!user)
+        return null;
+    return { userId: user.id, access: (0, capabilities_1.capabilityAccess)({ userId: user.id }) };
+}
+/**
+ * The built-in server a tool belongs to when the principal may call it; null
+ * for an external server the principal may call; undefined when refused. An
+ * external server's tools run on its stored credential (a remote Long Tail's
+ * service-account key, say), so they are a builder's to call.
+ */
+async function permittedBuiltin(principal, serverName, toolName) {
+    const builtin = await (0, tools_1.builtinServerFor)(serverName);
+    if (!builtin)
+        return (await principal.access('builder')) ? null : undefined;
+    return (await principal.access((0, tools_1.builtinToolGate)(builtin, toolName))) ? builtin : undefined;
+}

package/build/system/workflows/shared/tool-executor.js

@@ -40,6 +40,7 @@ const mcpClient = __importStar(require("../../../services/mcp/client"));
 const mcpDbService = __importStar(require("../../../services/mcp/db"));
 const yamlDb = __importStar(require("../../../services/yaml-workflow/db"));
 const yamlDeployer = __importStar(require("../../../services/yaml-workflow/deployer"));
+const principal_tools_1 = require("./principal-tools");
 /**
  * Call any tool by its qualified name — handles both YAML workflows
  * (yaml__* prefix) and raw MCP tools (server_slug__tool_name).
@@ -57,17 +58,14 @@ async function callTool(qualifiedName, args, caches) {
                 return { error: `Compiled workflow "${yamlWorkflowName}" is not active` };
             }
             const toolCtx = (0, context_1.getToolContext)();
-            const scopedArgs = toolCtx?.principal.id
+            const scope = toolCtx?.principal.id
                 ? {
-                    ...args,
-                    _scope: {
-                        principal: toolCtx.principal,
-                        ...(toolCtx.initiatingPrincipal ? { initiatingPrincipal: toolCtx.initiatingPrincipal } : {}),
-                        scopes: toolCtx.credentials.scopes,
-                    },
+                    principal: toolCtx.principal,
+                    ...(toolCtx.initiatingPrincipal ? { initiatingPrincipal: toolCtx.initiatingPrincipal } : {}),
+                    scopes: toolCtx.credentials.scopes,
                 }
-                : args;
-            const { job_id, result } = await yamlDeployer.invokeYamlWorkflowSync(wf.app_id, wf.graph_topic, scopedArgs, undefined, wf.graph_topic);
+                : undefined;
+            const { job_id, result } = await yamlDeployer.invokeYamlWorkflowSync(wf.app_id, wf.graph_topic, args, undefined, wf.graph_topic, scope);
             return { job_id, workflow: yamlWorkflowName, status: 'completed', result };
         }
         catch (err) {
@@ -86,9 +84,21 @@ async function callTool(qualifiedName, args, caches) {
     const authContext = toolCtx?.principal.id
         ? { userId: toolCtx.principal.id, delegationToken: toolCtx.credentials.delegationToken }
         : undefined;
+    // A built-in tool runs as the workflow's principal, under its manifest gate.
+    const principal = await (0, principal_tools_1.currentToolPrincipal)();
+    const dispatch = async (server) => {
+        if (principal) {
+            const builtin = await (0, principal_tools_1.permittedBuiltin)(principal, server, toolName);
+            if (builtin === undefined)
+                return { error: `${toolName} is not available to this caller`, tool: qualifiedName };
+            if (builtin)
+                return mcpClient.callBuiltinToolAs(builtin, toolName, { ...args }, { userId: principal.userId }, authContext);
+        }
+        return mcpClient.callServerTool(server, toolName, args, authContext);
+    };
     if (serverName) {
         try {
-            return await mcpClient.callServerTool(serverName, toolName, args, authContext);
+            return await dispatch(serverName);
         }
         catch (err) {
             return { error: err.message, tool: qualifiedName, args };
@@ -100,7 +110,7 @@ async function callTool(qualifiedName, args, caches) {
         const manifest = server.tool_manifest || [];
         if (manifest.some((t) => t.name === toolName)) {
             try {
-                return await mcpClient.callServerTool(server.name, toolName, args, authContext);
+                return await dispatch(server.name);
             }
             catch (err) {
                 return { error: err.message, tool: qualifiedName, args };

package/build/system/workflows/shared/tool-loader.js

@@ -37,6 +37,7 @@ exports.loadToolsFromServers = loadToolsFromServers;
 const logger_1 = require("../../../lib/logger");
 const mcpDbService = __importStar(require("../../../services/mcp/db"));
 const strategy_advisors_1 = require("./strategy-advisors");
+const principal_tools_1 = require("./principal-tools");
 /**
  * Discover MCP servers, cache tool definitions, and return a lightweight
  * summary for the durable pipe.
@@ -58,8 +59,14 @@ async function loadToolsFromServers(tags, caches, opts) {
     const toolIds = [];
     const inventoryLines = [];
     const serverInfos = [];
+    // The model sees only the tools the workflow's principal may call.
+    const principal = await (0, principal_tools_1.currentToolPrincipal)();
     for (const server of servers) {
-        const manifest = server.tool_manifest || [];
+        const manifest = [];
+        for (const t of server.tool_manifest || []) {
+            if (!principal || (await (0, principal_tools_1.permittedBuiltin)(principal, server.name, t.name)) !== undefined)
+                manifest.push(t);
+        }
         const slug = server.name.replace(/[^a-zA-Z0-9]/g, '_');
         const serverTags = server.tags?.length ? server.tags.join(', ') : 'general';
         const toolNames = [];