@indexnetwork/protocol 4.3.2 → 4.3.3-rc.308.1

package/dist/questioner/questioner.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"questioner.types.d.ts","sourceRoot":"/","sources":["questioner/questioner.types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAIzE;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AAEtD,0EAA0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,gFAAgF;AAChF,MAAM,WAAW,cAAc;IAC7B,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,2DAA2D;AAC3D,MAAM,MAAM,iBAAiB,GACzB,gBAAgB,GAChB,aAAa,GACb,cAAc,GACd,kBAAkB,CAAC;AAEvB;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAAG,eAAe,CAAC;AAEvD,gEAAgE;AAChE,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,wBAAwB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAErF,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,oDAAoD;IACpD,IAAI,EAAE,YAAY,CAAC;IACnB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,UAAU,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,OAAO,EAAE,iBAAiB,CAAC;IAC3B,oIAAoI;IACpI,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wIAAwI;IACxI,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}
+{"version":3,"file":"questioner.types.d.ts","sourceRoot":"/","sources":["questioner/questioner.types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAIzE;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;AAEtD,0EAA0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,gFAAgF;AAChF,MAAM,WAAW,cAAc;IAC7B,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,2DAA2D;AAC3D,MAAM,MAAM,iBAAiB,GACzB,gBAAgB,GAChB,aAAa,GACb,cAAc,GACd,kBAAkB,CAAC;AAEvB;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAAG,eAAe,CAAC;AAEvD,gEAAgE;AAChE,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,wBAAwB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAErF,6DAA6D;AAC7D,MAAM,WAAW,eAAe;IAC9B,oDAAoD;IACpD,IAAI,EAAE,YAAY,CAAC;IACnB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,UAAU,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,gEAAgE;IAChE,OAAO,EAAE,iBAAiB,CAAC;IAC3B,kFAAkF;IAClF,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,oFAAoF;IACpF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oIAAoI;IACpI,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wIAAwI;IACxI,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}

package/dist/questioner/questioner.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"questioner.types.js","sourceRoot":"/","sources":["questioner/questioner.types.ts"],"names":[],"mappings":"","sourcesContent":["/**\n * QuestionerAgent input types. The `QuestionerInput` envelope carries a `mode`\n * field that selects a preset, plus a polymorphic `context` that varies per mode.\n *\n * Slice 1 defines all four context shapes but only `DiscoveryContext` has a\n * working preset implementation. The others are type stubs for future slices.\n */\nimport type { DiscoveryQuestionInput } from \"../opportunity/question.prompt.js\";\nimport type { QuestionMode } from \"../shared/schemas/question.schema.js\";\n\n// ─── Per-mode context types ─────────────────────────────────────────────────\n\n/**\n * Discovery context — wraps the existing DiscoveryQuestionInput wholesale.\n * The discovery preset's buildPrompt delegates to the migrated builder.\n */\nexport type DiscoveryContext = DiscoveryQuestionInput;\n\n/** Intent context — data needed to generate questions about an intent. */\nexport interface IntentContext {\n  intentId: string;\n  payload: string;\n  summary?: string;\n  /** The user's global user_context paragraph (profile-replacing identity text). */\n  userContext?: string;\n}\n\n/** Profile context — data needed to generate questions to fill profile gaps. */\nexport interface ProfileContext {\n  /** The user's global user_context paragraph (profile-replacing identity text). */\n  userContext?: string;\n  gaps: string[];\n  /** Existing premise texts the user has already stated (e.g. \"I live in Berlin\"). */\n  existingPremises?: string[];\n}\n\n/** Negotiation context — data from a stalled or capped negotiation. */\nexport interface NegotiationContext {\n  negotiationId: string;\n  counterpartyHint: string;\n  indexContext: string;\n  outcomeReason: \"turn_cap\" | \"timeout\" | \"stalled\";\n  keyTake: string;\n  /** The user's global user_context paragraph (profile-replacing identity text). */\n  userContext?: string;\n}\n\n/** Discriminated union: mode selects the context shape. */\nexport type QuestionerContext =\n  | DiscoveryContext\n  | IntentContext\n  | ProfileContext\n  | NegotiationContext;\n\n/**\n * Payload shape accepted by the questionerEnqueue callback. Covers all\n * question modes — the composition root bridges this to the concrete\n * QuestionerQueue.\n */\nexport type QuestionerEnqueuePayload = QuestionerInput;\n\n/** Callback signature for async question generation enqueue. */\nexport type QuestionerEnqueueFn = (input: QuestionerEnqueuePayload) => Promise<void>;\n\n/** Top-level input envelope for QuestionerAgent.invoke(). */\nexport interface QuestionerInput {\n  /** Selects the preset (system prompt + builder). */\n  mode: QuestionMode;\n  /** User the questions are generated for. */\n  userId: string;\n  /** Entity type that triggered this (e.g. \"opportunity\", \"intent\", \"profile\"). */\n  sourceType: string;\n  /** ID of the triggering entity. */\n  sourceId: string;\n  /** Mode-specific context. Must align with the selected mode. */\n  context: QuestionerContext;\n  /** Conversation ID — set when the question originates from a chat session. Persisted on the question row for frontend filtering. */\n  conversationId?: string;\n  /** Assistant message ID — set when we know which message triggered the question. Stored in detection.messageId for inline anchoring. */\n  messageId?: string;\n}\n"]}
+{"version":3,"file":"questioner.types.js","sourceRoot":"/","sources":["questioner/questioner.types.ts"],"names":[],"mappings":"","sourcesContent":["/**\n * QuestionerAgent input types. The `QuestionerInput` envelope carries a `mode`\n * field that selects a preset, plus a polymorphic `context` that varies per mode.\n *\n * Slice 1 defines all four context shapes but only `DiscoveryContext` has a\n * working preset implementation. The others are type stubs for future slices.\n */\nimport type { DiscoveryQuestionInput } from \"../opportunity/question.prompt.js\";\nimport type { ToolScopeType } from \"../shared/agent/tool.scope.js\";\nimport type { QuestionMode } from \"../shared/schemas/question.schema.js\";\n\n// ─── Per-mode context types ─────────────────────────────────────────────────\n\n/**\n * Discovery context — wraps the existing DiscoveryQuestionInput wholesale.\n * The discovery preset's buildPrompt delegates to the migrated builder.\n */\nexport type DiscoveryContext = DiscoveryQuestionInput;\n\n/** Intent context — data needed to generate questions about an intent. */\nexport interface IntentContext {\n  intentId: string;\n  payload: string;\n  summary?: string;\n  /** The user's global user_context paragraph (profile-replacing identity text). */\n  userContext?: string;\n}\n\n/** Profile context — data needed to generate questions to fill profile gaps. */\nexport interface ProfileContext {\n  /** The user's global user_context paragraph (profile-replacing identity text). */\n  userContext?: string;\n  gaps: string[];\n  /** Existing premise texts the user has already stated (e.g. \"I live in Berlin\"). */\n  existingPremises?: string[];\n}\n\n/** Negotiation context — data from a stalled or capped negotiation. */\nexport interface NegotiationContext {\n  negotiationId: string;\n  counterpartyHint: string;\n  indexContext: string;\n  outcomeReason: \"turn_cap\" | \"timeout\" | \"stalled\";\n  keyTake: string;\n  /** The user's global user_context paragraph (profile-replacing identity text). */\n  userContext?: string;\n}\n\n/** Discriminated union: mode selects the context shape. */\nexport type QuestionerContext =\n  | DiscoveryContext\n  | IntentContext\n  | ProfileContext\n  | NegotiationContext;\n\n/**\n * Payload shape accepted by the questionerEnqueue callback. Covers all\n * question modes — the composition root bridges this to the concrete\n * QuestionerQueue.\n */\nexport type QuestionerEnqueuePayload = QuestionerInput;\n\n/** Callback signature for async question generation enqueue. */\nexport type QuestionerEnqueueFn = (input: QuestionerEnqueuePayload) => Promise<void>;\n\n/** Top-level input envelope for QuestionerAgent.invoke(). */\nexport interface QuestionerInput {\n  /** Selects the preset (system prompt + builder). */\n  mode: QuestionMode;\n  /** User the questions are generated for. */\n  userId: string;\n  /** Entity type that triggered this (e.g. \"opportunity\", \"intent\", \"profile\"). */\n  sourceType: string;\n  /** ID of the triggering entity. */\n  sourceId: string;\n  /** Mode-specific context. Must align with the selected mode. */\n  context: QuestionerContext;\n  /** Scoped question context. Network scopes persist as QuestionActor.networkId. */\n  scopeType?: ToolScopeType;\n  /** Scoped question id. When scopeType is `network`, this is the actor networkId. */\n  scopeId?: string;\n  /** Conversation ID — set when the question originates from a chat session. Persisted on the question row for frontend filtering. */\n  conversationId?: string;\n  /** Assistant message ID — set when we know which message triggered the question. Stored in detection.messageId for inline anchoring. */\n  messageId?: string;\n}\n"]}

package/dist/shared/agent/tool.factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool.factory.d.ts","sourceRoot":"/","sources":["shared/agent/tool.factory.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,mBAAmB,EAAmE,MAAM,mBAAmB,CAAC;AAchJ,YAAY,EAAE,WAAW,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACxF,YAAY,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAQlD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,WAAW,EACjB,kBAAkB,CAAC,EAAE,mBAAmB,kBAwMzC;AAED;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC"}
+{"version":3,"file":"tool.factory.d.ts","sourceRoot":"/","sources":["shared/agent/tool.factory.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,mBAAmB,EAAmE,MAAM,mBAAmB,CAAC;AAehJ,YAAY,EAAE,WAAW,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACxF,YAAY,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAQlD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,WAAW,EACjB,kBAAkB,CAAC,EAAE,mBAAmB,kBAmNzC;AAED;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC"}

package/dist/shared/agent/tool.factory.js

@@ -13,6 +13,7 @@ import { NegotiationGraphFactory } from "../../negotiation/negotiation.graph.js"
 import { PremiseGraphFactory } from "../../premise/premise.graph.js";
 import { protocolLogger } from "../observability/protocol.logger.js";
 import { resolveChatContext, error, redactSensitiveFields } from "./tool.helpers.js";
+import { deriveAllowedNetworkIds, scopeFromNetworkId } from "./tool.scope.js";
 import { invokeToolRuntime, toolRuntimeErrorToResult } from "./tool.runtime.js";
 import { createEnrichmentTools } from "../../enrichment/enrichment.tools.js";
 import { createIntentTools } from "../../intent/intent.tools.js";
@@ -47,13 +48,22 @@ export async function createChatTools(deps, preResolvedContext) {
             sessionId: deps.sessionId,
             contactsEnabled: deps.contactsEnabled,
         }));
-    // Allow callers (e.g. MCP server, tests) to override the computed indexScope
-    // without going through a full re-resolve. The MCP path sets this via
-    // applyNetworkScopeToContext; ToolContext.indexScope provides the same override
-    // when no preResolvedContext is given.
-    if (!preResolvedContext && deps.indexScope !== undefined) {
-        resolvedContext.indexScope = deps.indexScope;
+    const explicitScope = deps.scopeType && deps.scopeId
+        ? { scopeType: deps.scopeType, scopeId: deps.scopeId }
+        : scopeFromNetworkId(deps.networkId);
+    if (!preResolvedContext && explicitScope.scopeType && explicitScope.scopeId) {
+        resolvedContext.scopeType = explicitScope.scopeType;
+        resolvedContext.scopeId = explicitScope.scopeId;
+        resolvedContext.networkId = explicitScope.scopeId;
     }
+    const allowedNetworkIds = deriveAllowedNetworkIds({
+        memberships: resolvedContext.userNetworks,
+        ...(resolvedContext.scopeType && resolvedContext.scopeId
+            ? { scopeType: resolvedContext.scopeType, scopeId: resolvedContext.scopeId }
+            : {}),
+    });
+    // Deprecated compatibility reach until remaining tool call sites migrate.
+    resolvedContext.indexScope = allowedNetworkIds;
     // ─── Tool wrapper ──────────────────────────────────────────────────────────
     /**
      * Standardized tool factory. Auto-injects resolved context and
@@ -86,10 +96,13 @@ export async function createChatTools(deps, preResolvedContext) {
         }, { name: opts.name, description: opts.description, schema: opts.querySchema });
     }
     // ─── Compile subgraphs ─────────────────────────────────────────────────────
-    // Wrap questionerEnqueue to include session context when available
+    // Wrap questionerEnqueue to include scoped/session context when available.
     const sessionAwareEnqueue = deps.questionerEnqueue
         ? (input) => deps.questionerEnqueue({
             ...input,
+            ...(resolvedContext.scopeType && resolvedContext.scopeId && !input.scopeId
+                ? { scopeType: resolvedContext.scopeType, scopeId: resolvedContext.scopeId }
+                : {}),
             ...(resolvedContext.sessionId && !input.conversationId ? { conversationId: resolvedContext.sessionId } : {}),
         })
         : undefined;
@@ -114,14 +127,11 @@ export async function createChatTools(deps, preResolvedContext) {
     // database used for graphs so that scope checks (e.g. ensureScopedMembership, opportunity
     // update) use the same adapter as the rest of the tool pipeline.
     //
-    // The systemDb's DB-level clamp uses `resolvedContext.indexScope` — the same
-    // set tools see — so the JSDoc claim that indexScope is "the same set used
-    // to clamp the DB-level systemDb" holds for both the MCP path (where the
-    // MCP server already populated indexScope via applyNetworkScopeToContext)
-    // and the web-chat path (where resolveChatContext clamps to [bound, personal]
-    // when networkId is set).
+    // The systemDb's DB-level clamp derives concrete allowed network IDs from the
+    // focused scope envelope plus memberships. The legacy indexScope field is
+    // populated above only as a compatibility bridge for unmigrated tool call sites.
     const userDb = deps.userDb ?? deps.createUserDatabase(database, resolvedContext.userId);
-    const systemDb = deps.systemDb ?? deps.createSystemDatabase(database, resolvedContext.userId, resolvedContext.indexScope, embedder);
+    const systemDb = deps.systemDb ?? deps.createSystemDatabase(database, resolvedContext.userId, allowedNetworkIds, embedder);
     // ─── Assemble dependencies ─────────────────────────────────────────────────
     const cache = deps.cache;
     const integration = deps.integration;

package/dist/shared/agent/tool.factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool.factory.js","sourceRoot":"/","sources":["shared/agent/tool.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAG7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAIrE,OAAO,EAA6D,kBAAkB,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAChJ,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAMpE,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;AAE3C,kFAAkF;AAClF,eAAe;AACf,kFAAkF;AAElF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAiB,EACjB,kBAAwC;IAExC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAE7C,8EAA8E;IAC9E,MAAM,eAAe,GACnB,kBAAkB;QAClB,CAAC,MAAM,kBAAkB,CAAC;YACxB,QAAQ;YACR,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CAAC,CAAC;IAEN,6EAA6E;IAC7E,sEAAsE;IACtE,gFAAgF;IAChF,uCAAuC;IACvC,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACzD,eAAe,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IAC/C,CAAC;IAED,8EAA8E;IAC9E;;;OAGG;IACH,SAAS,UAAU,CAAsB,IAKxC;QACC,OAAO,IAAI,CACT,KAAK,EAAE,KAAiB,EAAE,EAAE;YAC1B,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,EAAE;gBAChC,OAAO,EAAE,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,eAAe,CAAC,SAAS,EAAE;gBACjF,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC;aACpC,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,OAAO,MAAM,iBAAiB,CAAC;oBAC7B,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAmB,EAAE,CAAC,EAAE;oBACtG,OAAO,EAAE,eAAe;oBACxB,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,SAAS,EAAE;oBAClC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACxD,CAAC,CAAC;gBACH,MAAM,aAAa,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;gBACpD,IAAI,aAAa;oBAAE,OAAO,aAAa,CAAC;gBACxC,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChE,OAAO,KAAK,CAAC,qBAAqB,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,CAC7E,CAAC;IACJ,CAAC;IAED,8EAA8E;IAE9E,mEAAmE;IACnE,MAAM,mBAAmB,GAAoC,IAAI,CAAC,iBAAiB;QACjF,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAkB,CAAC;YACjC,GAAG,KAAK;YACR,GAAG,CAAC,eAAe,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,eAAe,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7G,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,WAAW,GAAG,IAAI,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC,WAAW,EAAE,CAAC;IACpH,MAAM,YAAY,GAAG,IAAI,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/E,MAAM,YAAY,GAAG,IAAI,sBAAsB,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;IACnI,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;IACxC,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;IAC1C,MAAM,iBAAiB,GAAG,IAAI,gBAAgB,CAC5C,QAAwC,EACxC,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,aAAa,CACd,CAAC,WAAW,EAAE,CAAC;IAChB,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe;QAC3C,CAAC,CAAC,IAAI,uBAAuB,CACzB,IAAI,CAAC,mBAAmB,EACxB,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,uBAAuB,EAC5B,mBAAmB,CACpB,CAAC,WAAW,EAAE;QACjB,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,gBAAgB,GAAG,IAAI,uBAAuB,CAClD,QAAQ,EACR,QAAQ,EACR,iBAAiB,EACjB,SAAS,EAAE,sBAAsB;IACjC,SAAS,EAAE,oBAAoB;IAC/B,gBAAgB,EAChB,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,sBAAsB,CAC5B,CAAC,WAAW,EAAE,CAAC;IAChB,MAAM,YAAY,GAAG,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACrE,MAAM,sBAAsB,GAAG,IAAI,6BAA6B,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACzF,MAAM,kBAAkB,GAAG,IAAI,yBAAyB,CAAC,QAAQ,EAAE,IAAI,aAAa,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAEtG,8EAA8E;IAC9E,oFAAoF;IACpF,0FAA0F;IAC1F,iEAAiE;IACjE,EAAE;IACF,6EAA6E;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,0EAA0E;IAC1E,8EAA8E;IAC9E,0BAA0B;IAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;IACxF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,eAAe,CAAC,MAAM,EAAE,eAAe,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAEpI,8EAA8E;IAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACrC,MAAM,QAAQ,GAAa;QACzB,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,OAAO;QACP,QAAQ;QACR,KAAK;QACL,WAAW;QACX,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,6BAA6B,EAAE,IAAI,CAAC,6BAA6B;QACjE,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5E,GAAG,CAAC,mBAAmB,IAAI,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC/E,MAAM,EAAE;YACN,OAAO,EAAE,YAAY;YACrB,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,YAAY;YACnB,iBAAiB,EAAE,sBAAsB;YACzC,WAAW,EAAE,kBAAkB;YAC/B,WAAW,EAAE,gBAAgB;YAC7B,OAAO,EAAE,YAAY;SACtB;KACF,CAAC;IAEF,6EAA6E;IAC7E,MAAM,YAAY,GAAG,qBAAqB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACtE,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe;QAC3C,CAAC,CAAC,sBAAsB,CAAC,UAAU,EAAE,QAAQ,CAAC;QAC9C,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,YAAY,GAAG,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAE9D,oFAAoF;IACpF,uCAAuC;IACvC,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAC;QAC5C,8BAA8B;KAC/B,CAAC,CAAC;IACH,MAAM,uBAAuB,GAAG,gBAAgB,CAAC,MAAM,CACrD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,6BAA6B,CAAC,GAAG,CAAE,CAAsB,CAAC,IAAI,CAAC,CACxE,CAAC;IAEF,OAAO;QACL,GAAG,YAAY;QACf,GAAG,WAAW;QACd,GAAG,YAAY;QACf,GAAG,uBAAuB;QAC1B,GAAG,YAAY;QACf,GAAG,gBAAgB;QACnB,GAAG,YAAY;QACf,GAAG,UAAU;QACb,GAAG,gBAAgB;QACnB,GAAG,YAAY;KAChB,CAAC;AACJ,CAAC","sourcesContent":["import { tool } from \"@langchain/core/tools\";\nimport { z } from \"zod\";\nimport type { HydeGraphDatabase } from \"../interfaces/database.interface.js\";\nimport { IntentGraphFactory } from \"../../intent/intent.graph.js\";\nimport { EnrichmentGraphFactory } from \"../../enrichment/enrichment.graph.js\";\nimport { OpportunityGraphFactory } from \"../../opportunity/opportunity.graph.js\";\nimport { HydeGraphFactory } from \"../hyde/hyde.graph.js\";\nimport { HydeGenerator } from \"../hyde/hyde.generator.js\";\nimport { LensInferrer } from \"../hyde/lens.inferrer.js\";\nimport { NetworkGraphFactory } from \"../../network/network.graph.js\";\nimport { NetworkMembershipGraphFactory } from \"../../network/membership/membership.graph.js\";\nimport { IntentNetworkGraphFactory } from \"../../network/indexer/indexer.graph.js\";\nimport { IntentIndexer } from \"../../intent/intent.indexer.js\";\nimport { NegotiationGraphFactory } from \"../../negotiation/negotiation.graph.js\";\nimport { PremiseGraphFactory } from \"../../premise/premise.graph.js\";\nimport { protocolLogger } from \"../observability/protocol.logger.js\";\n\nimport type { QuestionerEnqueueFn } from \"../../questioner/questioner.types.js\";\n\nimport { type ToolContext, type ResolvedToolContext, type ToolDeps, resolveChatContext, error, redactSensitiveFields } from \"./tool.helpers.js\";\nimport { invokeToolRuntime, toolRuntimeErrorToResult } from \"./tool.runtime.js\";\nimport { createEnrichmentTools } from \"../../enrichment/enrichment.tools.js\";\nimport { createIntentTools } from \"../../intent/intent.tools.js\";\nimport { createNetworkTools } from \"../../network/network.tools.js\";\nimport { createOpportunityTools } from \"../../opportunity/opportunity.tools.js\";\nimport { createUtilityTools } from \"./utility.tools.js\";\nimport { createIntegrationTools } from \"../../integration/integration.tools.js\";\nimport { createContactTools } from \"../../contact/contact.tools.js\";\nimport { createAgentTools } from \"../../agent/agent.tools.js\";\nimport { createNegotiationTools } from \"../../negotiation/negotiation.tools.js\";\nimport { createPremiseTools } from \"../../premise/premise.tools.js\";\n\n// Re-export types for consumers\nexport type { ToolContext, ResolvedToolContext, ProtocolDeps } from \"./tool.helpers.js\";\nexport type { ToolDeps } from \"./tool.helpers.js\";\n\nconst logger = protocolLogger(\"ChatTools\");\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// TOOL FACTORY\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/**\n * Creates all chat tools bound to a specific user context.\n * Resolves user/index identity from DB at init time.\n * Tools are created fresh for each user session to ensure proper isolation.\n *\n * All external dependencies (cache, integration, queue, etc.) are provided\n * via the `deps` parameter — the protocol lib never imports concrete adapters.\n */\nexport async function createChatTools(\n  deps: ToolContext,\n  preResolvedContext?: ResolvedToolContext\n) {\n  const { database, embedder, scraper } = deps;\n\n  // ─── Resolve context from DB ───────────────────────────────────────────────\n  const resolvedContext =\n    preResolvedContext ??\n    (await resolveChatContext({\n      database,\n      userId: deps.userId,\n      networkId: deps.networkId,\n      sessionId: deps.sessionId,\n      contactsEnabled: deps.contactsEnabled,\n    }));\n\n  // Allow callers (e.g. MCP server, tests) to override the computed indexScope\n  // without going through a full re-resolve. The MCP path sets this via\n  // applyNetworkScopeToContext; ToolContext.indexScope provides the same override\n  // when no preResolvedContext is given.\n  if (!preResolvedContext && deps.indexScope !== undefined) {\n    resolvedContext.indexScope = deps.indexScope;\n  }\n\n  // ─── Tool wrapper ──────────────────────────────────────────────────────────\n  /**\n   * Standardized tool factory. Auto-injects resolved context and\n   * provides uniform logging / error handling for every tool.\n   */\n  function defineTool<T extends z.ZodType>(opts: {\n    name: string;\n    description: string;\n    querySchema: T;\n    handler: (input: { context: ResolvedToolContext; query: z.infer<T> }) => Promise<string>;\n  }) {\n    return tool(\n      async (query: z.infer<T>) => {\n        logger.info(`Tool: ${opts.name}`, {\n          context: { userId: resolvedContext.userId, networkId: resolvedContext.networkId },\n          query: redactSensitiveFields(query),\n        });\n        try {\n          return await invokeToolRuntime({\n            toolName: opts.name,\n            tool: { handler: async ({ context, query }) => opts.handler({ context, query: query as z.infer<T> }) },\n            context: resolvedContext,\n            query,\n          });\n        } catch (err) {\n          logger.error(`${opts.name} failed`, {\n            error: err instanceof Error ? err.message : String(err),\n          });\n          const runtimeResult = toolRuntimeErrorToResult(err);\n          if (runtimeResult) return runtimeResult;\n          const reason = err instanceof Error ? err.message : String(err);\n          return error(`Failed to execute ${opts.name}: ${reason}`);\n        }\n      },\n      { name: opts.name, description: opts.description, schema: opts.querySchema }\n    );\n  }\n\n  // ─── Compile subgraphs ─────────────────────────────────────────────────────\n\n  // Wrap questionerEnqueue to include session context when available\n  const sessionAwareEnqueue: QuestionerEnqueueFn | undefined = deps.questionerEnqueue\n    ? (input) => deps.questionerEnqueue!({\n        ...input,\n        ...(resolvedContext.sessionId && !input.conversationId ? { conversationId: resolvedContext.sessionId } : {}),\n      })\n    : undefined;\n\n  const intentGraph = new IntentGraphFactory(database, embedder, deps.intentQueue, sessionAwareEnqueue).createGraph();\n  const premiseGraph = new PremiseGraphFactory(database, embedder).createGraph();\n  const profileGraph = new EnrichmentGraphFactory(database, scraper, deps.enricher, sessionAwareEnqueue, premiseGraph).createGraph();\n  const hydeCache = deps.hydeCache;\n  const lensInferrer = new LensInferrer();\n  const hydeGenerator = new HydeGenerator();\n  const compiledHydeGraph = new HydeGraphFactory(\n    database as unknown as HydeGraphDatabase,\n    embedder,\n    hydeCache,\n    lensInferrer,\n    hydeGenerator\n  ).createGraph();\n  const negotiationGraph = deps.agentDispatcher\n    ? new NegotiationGraphFactory(\n        deps.negotiationDatabase,\n        deps.agentDispatcher,\n        deps.negotiationTimeoutQueue,\n        sessionAwareEnqueue,\n      ).createGraph()\n    : undefined;\n  const opportunityGraph = new OpportunityGraphFactory(\n    database,\n    embedder,\n    compiledHydeGraph,\n    undefined, // evaluator (default)\n    undefined, // queueNotification\n    negotiationGraph,\n    deps.agentDispatcher,\n    deps.queueNegotiateExisting,\n  ).createGraph();\n  const networkGraph = new NetworkGraphFactory(database).createGraph();\n  const networkMembershipGraph = new NetworkMembershipGraphFactory(database).createGraph();\n  const intentNetworkGraph = new IntentNetworkGraphFactory(database, new IntentIndexer()).createGraph();\n\n  // ─── Create context-bound databases ────────────────────────────────────────\n  // Use injected instances when provided (e.g. tests). Otherwise create from the same\n  // database used for graphs so that scope checks (e.g. ensureScopedMembership, opportunity\n  // update) use the same adapter as the rest of the tool pipeline.\n  //\n  // The systemDb's DB-level clamp uses `resolvedContext.indexScope` — the same\n  // set tools see — so the JSDoc claim that indexScope is \"the same set used\n  // to clamp the DB-level systemDb\" holds for both the MCP path (where the\n  // MCP server already populated indexScope via applyNetworkScopeToContext)\n  // and the web-chat path (where resolveChatContext clamps to [bound, personal]\n  // when networkId is set).\n  const userDb = deps.userDb ?? deps.createUserDatabase(database, resolvedContext.userId);\n  const systemDb = deps.systemDb ?? deps.createSystemDatabase(database, resolvedContext.userId, resolvedContext.indexScope, embedder);\n\n  // ─── Assemble dependencies ─────────────────────────────────────────────────\n  const cache = deps.cache;\n  const integration = deps.integration;\n  const toolDeps: ToolDeps = {\n    database,\n    userDb,\n    systemDb,\n    scraper,\n    embedder,\n    cache,\n    integration,\n    contactService: deps.contactService,\n    contactsEnabled: deps.contactsEnabled,\n    integrationImporter: deps.integrationImporter,\n    enricher: deps.enricher,\n    negotiationDatabase: deps.negotiationDatabase,\n    negotiationTimeoutQueue: deps.negotiationTimeoutQueue,\n    agentDatabase: deps.agentDatabase,\n    grantDefaultSystemPermissions: deps.grantDefaultSystemPermissions,\n    agentDispatcher: deps.agentDispatcher,\n    deliveryLedger: deps.deliveryLedger,\n    discoveryRuns: deps.discoveryRuns,\n    discoveryRunQueue: deps.discoveryRunQueue,\n    enrichmentRuns: deps.enrichmentRuns,\n    enrichmentRunQueue: deps.enrichmentRunQueue,\n    mintConnectToken: deps.mintConnectToken,\n    mintConnectLink: deps.mintConnectLink,\n    frontendUrl: deps.frontendUrl,\n    apiBaseUrl: deps.apiBaseUrl,\n    ...(deps.premiseEvents && { premiseEvents: deps.premiseEvents }),\n    ...(deps.chatSummary && { chatSummary: deps.chatSummary }),\n    ...(deps.questionGenerator && { questionGenerator: deps.questionGenerator }),\n    ...(sessionAwareEnqueue && { questionerEnqueue: sessionAwareEnqueue }),\n    ...(deps.negotiationSummary && { negotiationSummary: deps.negotiationSummary }),\n    graphs: {\n      profile: profileGraph,\n      intent: intentGraph,\n      index: networkGraph,\n      networkMembership: networkMembershipGraph,\n      intentIndex: intentNetworkGraph,\n      opportunity: opportunityGraph,\n      premise: premiseGraph,\n    },\n  };\n\n  // ─── Create domain tools ──────────────────────────────────────────────────\n  const profileTools = createEnrichmentTools(defineTool, toolDeps);\n  const intentTools = createIntentTools(defineTool, toolDeps);\n  const networkTools = createNetworkTools(defineTool, toolDeps);\n  const opportunityTools = createOpportunityTools(defineTool, toolDeps);\n  const utilityTools = createUtilityTools(defineTool, toolDeps);\n  const contactTools = createContactTools(defineTool, toolDeps);\n  const agentTools = createAgentTools(defineTool, toolDeps);\n  const integrationTools = createIntegrationTools(defineTool, toolDeps);\n  const negotiationTools = deps.agentDispatcher\n    ? createNegotiationTools(defineTool, toolDeps)\n    : [];\n  const premiseTools = createPremiseTools(defineTool, toolDeps);\n\n  // confirm_opportunity_delivery is an OpenClaw-delivery ledger write and must not be\n  // callable from regular chat sessions.\n  const chatOpportunityToolExclusions = new Set([\n    \"confirm_opportunity_delivery\",\n  ]);\n  const opportunityToolsForChat = opportunityTools.filter(\n    (t) => !chatOpportunityToolExclusions.has((t as { name: string }).name)\n  );\n\n  return [\n    ...profileTools,\n    ...intentTools,\n    ...networkTools,\n    ...opportunityToolsForChat,\n    ...utilityTools,\n    ...integrationTools,\n    ...contactTools,\n    ...agentTools,\n    ...negotiationTools,\n    ...premiseTools,\n  ];\n}\n\n/**\n * Type for the tools array returned by createChatTools.\n */\nexport type ChatTools = Awaited<ReturnType<typeof createChatTools>>;\n"]}
+{"version":3,"file":"tool.factory.js","sourceRoot":"/","sources":["shared/agent/tool.factory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAG7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAC7F,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAIrE,OAAO,EAA6D,kBAAkB,EAAE,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAChJ,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAMpE,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;AAE3C,kFAAkF;AAClF,eAAe;AACf,kFAAkF;AAElF;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAiB,EACjB,kBAAwC;IAExC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAE7C,8EAA8E;IAC9E,MAAM,eAAe,GACnB,kBAAkB;QAClB,CAAC,MAAM,kBAAkB,CAAC;YACxB,QAAQ;YACR,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,eAAe,EAAE,IAAI,CAAC,eAAe;SACtC,CAAC,CAAC,CAAC;IAEN,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO;QAClD,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;QACtD,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEvC,IAAI,CAAC,kBAAkB,IAAI,aAAa,CAAC,SAAS,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QAC5E,eAAe,CAAC,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC;QACpD,eAAe,CAAC,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC;QAChD,eAAe,CAAC,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC;IACpD,CAAC;IAED,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;QAChD,WAAW,EAAE,eAAe,CAAC,YAAY;QACzC,GAAG,CAAC,eAAe,CAAC,SAAS,IAAI,eAAe,CAAC,OAAO;YACtD,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,CAAC,SAAS,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,EAAE;YAC5E,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IACH,0EAA0E;IAC1E,eAAe,CAAC,UAAU,GAAG,iBAAiB,CAAC;IAE/C,8EAA8E;IAC9E;;;OAGG;IACH,SAAS,UAAU,CAAsB,IAKxC;QACC,OAAO,IAAI,CACT,KAAK,EAAE,KAAiB,EAAE,EAAE;YAC1B,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,EAAE;gBAChC,OAAO,EAAE,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,eAAe,CAAC,SAAS,EAAE;gBACjF,KAAK,EAAE,qBAAqB,CAAC,KAAK,CAAC;aACpC,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,OAAO,MAAM,iBAAiB,CAAC;oBAC7B,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAmB,EAAE,CAAC,EAAE;oBACtG,OAAO,EAAE,eAAe;oBACxB,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,SAAS,EAAE;oBAClC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACxD,CAAC,CAAC;gBACH,MAAM,aAAa,GAAG,wBAAwB,CAAC,GAAG,CAAC,CAAC;gBACpD,IAAI,aAAa;oBAAE,OAAO,aAAa,CAAC;gBACxC,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChE,OAAO,KAAK,CAAC,qBAAqB,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,CAC7E,CAAC;IACJ,CAAC;IAED,8EAA8E;IAE9E,2EAA2E;IAC3E,MAAM,mBAAmB,GAAoC,IAAI,CAAC,iBAAiB;QACjF,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAkB,CAAC;YACjC,GAAG,KAAK;YACR,GAAG,CAAC,eAAe,CAAC,SAAS,IAAI,eAAe,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO;gBACxE,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,CAAC,SAAS,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,EAAE;gBAC5E,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,eAAe,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,eAAe,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7G,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,WAAW,GAAG,IAAI,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC,WAAW,EAAE,CAAC;IACpH,MAAM,YAAY,GAAG,IAAI,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/E,MAAM,YAAY,GAAG,IAAI,sBAAsB,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;IACnI,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;IACxC,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;IAC1C,MAAM,iBAAiB,GAAG,IAAI,gBAAgB,CAC5C,QAAwC,EACxC,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,aAAa,CACd,CAAC,WAAW,EAAE,CAAC;IAChB,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe;QAC3C,CAAC,CAAC,IAAI,uBAAuB,CACzB,IAAI,CAAC,mBAAmB,EACxB,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,uBAAuB,EAC5B,mBAAmB,CACpB,CAAC,WAAW,EAAE;QACjB,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,gBAAgB,GAAG,IAAI,uBAAuB,CAClD,QAAQ,EACR,QAAQ,EACR,iBAAiB,EACjB,SAAS,EAAE,sBAAsB;IACjC,SAAS,EAAE,oBAAoB;IAC/B,gBAAgB,EAChB,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,sBAAsB,CAC5B,CAAC,WAAW,EAAE,CAAC;IAChB,MAAM,YAAY,GAAG,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACrE,MAAM,sBAAsB,GAAG,IAAI,6BAA6B,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACzF,MAAM,kBAAkB,GAAG,IAAI,yBAAyB,CAAC,QAAQ,EAAE,IAAI,aAAa,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAEtG,8EAA8E;IAC9E,oFAAoF;IACpF,0FAA0F;IAC1F,iEAAiE;IACjE,EAAE;IACF,8EAA8E;IAC9E,0EAA0E;IAC1E,iFAAiF;IACjF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;IACxF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,eAAe,CAAC,MAAM,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IAE3H,8EAA8E;IAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACrC,MAAM,QAAQ,GAAa;QACzB,QAAQ;QACR,MAAM;QACN,QAAQ;QACR,OAAO;QACP,QAAQ;QACR,KAAK;QACL,WAAW;QACX,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;QAC7C,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;QACrD,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,6BAA6B,EAAE,IAAI,CAAC,6BAA6B;QACjE,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5E,GAAG,CAAC,mBAAmB,IAAI,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,kBAAkB,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC/E,MAAM,EAAE;YACN,OAAO,EAAE,YAAY;YACrB,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,YAAY;YACnB,iBAAiB,EAAE,sBAAsB;YACzC,WAAW,EAAE,kBAAkB;YAC/B,WAAW,EAAE,gBAAgB;YAC7B,OAAO,EAAE,YAAY;SACtB;KACF,CAAC;IAEF,6EAA6E;IAC7E,MAAM,YAAY,GAAG,qBAAqB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACtE,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe;QAC3C,CAAC,CAAC,sBAAsB,CAAC,UAAU,EAAE,QAAQ,CAAC;QAC9C,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,YAAY,GAAG,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAE9D,oFAAoF;IACpF,uCAAuC;IACvC,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAC;QAC5C,8BAA8B;KAC/B,CAAC,CAAC;IACH,MAAM,uBAAuB,GAAG,gBAAgB,CAAC,MAAM,CACrD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,6BAA6B,CAAC,GAAG,CAAE,CAAsB,CAAC,IAAI,CAAC,CACxE,CAAC;IAEF,OAAO;QACL,GAAG,YAAY;QACf,GAAG,WAAW;QACd,GAAG,YAAY;QACf,GAAG,uBAAuB;QAC1B,GAAG,YAAY;QACf,GAAG,gBAAgB;QACnB,GAAG,YAAY;QACf,GAAG,UAAU;QACb,GAAG,gBAAgB;QACnB,GAAG,YAAY;KAChB,CAAC;AACJ,CAAC","sourcesContent":["import { tool } from \"@langchain/core/tools\";\nimport { z } from \"zod\";\nimport type { HydeGraphDatabase } from \"../interfaces/database.interface.js\";\nimport { IntentGraphFactory } from \"../../intent/intent.graph.js\";\nimport { EnrichmentGraphFactory } from \"../../enrichment/enrichment.graph.js\";\nimport { OpportunityGraphFactory } from \"../../opportunity/opportunity.graph.js\";\nimport { HydeGraphFactory } from \"../hyde/hyde.graph.js\";\nimport { HydeGenerator } from \"../hyde/hyde.generator.js\";\nimport { LensInferrer } from \"../hyde/lens.inferrer.js\";\nimport { NetworkGraphFactory } from \"../../network/network.graph.js\";\nimport { NetworkMembershipGraphFactory } from \"../../network/membership/membership.graph.js\";\nimport { IntentNetworkGraphFactory } from \"../../network/indexer/indexer.graph.js\";\nimport { IntentIndexer } from \"../../intent/intent.indexer.js\";\nimport { NegotiationGraphFactory } from \"../../negotiation/negotiation.graph.js\";\nimport { PremiseGraphFactory } from \"../../premise/premise.graph.js\";\nimport { protocolLogger } from \"../observability/protocol.logger.js\";\n\nimport type { QuestionerEnqueueFn } from \"../../questioner/questioner.types.js\";\n\nimport { type ToolContext, type ResolvedToolContext, type ToolDeps, resolveChatContext, error, redactSensitiveFields } from \"./tool.helpers.js\";\nimport { deriveAllowedNetworkIds, scopeFromNetworkId } from \"./tool.scope.js\";\nimport { invokeToolRuntime, toolRuntimeErrorToResult } from \"./tool.runtime.js\";\nimport { createEnrichmentTools } from \"../../enrichment/enrichment.tools.js\";\nimport { createIntentTools } from \"../../intent/intent.tools.js\";\nimport { createNetworkTools } from \"../../network/network.tools.js\";\nimport { createOpportunityTools } from \"../../opportunity/opportunity.tools.js\";\nimport { createUtilityTools } from \"./utility.tools.js\";\nimport { createIntegrationTools } from \"../../integration/integration.tools.js\";\nimport { createContactTools } from \"../../contact/contact.tools.js\";\nimport { createAgentTools } from \"../../agent/agent.tools.js\";\nimport { createNegotiationTools } from \"../../negotiation/negotiation.tools.js\";\nimport { createPremiseTools } from \"../../premise/premise.tools.js\";\n\n// Re-export types for consumers\nexport type { ToolContext, ResolvedToolContext, ProtocolDeps } from \"./tool.helpers.js\";\nexport type { ToolDeps } from \"./tool.helpers.js\";\n\nconst logger = protocolLogger(\"ChatTools\");\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// TOOL FACTORY\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/**\n * Creates all chat tools bound to a specific user context.\n * Resolves user/index identity from DB at init time.\n * Tools are created fresh for each user session to ensure proper isolation.\n *\n * All external dependencies (cache, integration, queue, etc.) are provided\n * via the `deps` parameter — the protocol lib never imports concrete adapters.\n */\nexport async function createChatTools(\n  deps: ToolContext,\n  preResolvedContext?: ResolvedToolContext\n) {\n  const { database, embedder, scraper } = deps;\n\n  // ─── Resolve context from DB ───────────────────────────────────────────────\n  const resolvedContext =\n    preResolvedContext ??\n    (await resolveChatContext({\n      database,\n      userId: deps.userId,\n      networkId: deps.networkId,\n      sessionId: deps.sessionId,\n      contactsEnabled: deps.contactsEnabled,\n    }));\n\n  const explicitScope = deps.scopeType && deps.scopeId\n    ? { scopeType: deps.scopeType, scopeId: deps.scopeId }\n    : scopeFromNetworkId(deps.networkId);\n\n  if (!preResolvedContext && explicitScope.scopeType && explicitScope.scopeId) {\n    resolvedContext.scopeType = explicitScope.scopeType;\n    resolvedContext.scopeId = explicitScope.scopeId;\n    resolvedContext.networkId = explicitScope.scopeId;\n  }\n\n  const allowedNetworkIds = deriveAllowedNetworkIds({\n    memberships: resolvedContext.userNetworks,\n    ...(resolvedContext.scopeType && resolvedContext.scopeId\n      ? { scopeType: resolvedContext.scopeType, scopeId: resolvedContext.scopeId }\n      : {}),\n  });\n  // Deprecated compatibility reach until remaining tool call sites migrate.\n  resolvedContext.indexScope = allowedNetworkIds;\n\n  // ─── Tool wrapper ──────────────────────────────────────────────────────────\n  /**\n   * Standardized tool factory. Auto-injects resolved context and\n   * provides uniform logging / error handling for every tool.\n   */\n  function defineTool<T extends z.ZodType>(opts: {\n    name: string;\n    description: string;\n    querySchema: T;\n    handler: (input: { context: ResolvedToolContext; query: z.infer<T> }) => Promise<string>;\n  }) {\n    return tool(\n      async (query: z.infer<T>) => {\n        logger.info(`Tool: ${opts.name}`, {\n          context: { userId: resolvedContext.userId, networkId: resolvedContext.networkId },\n          query: redactSensitiveFields(query),\n        });\n        try {\n          return await invokeToolRuntime({\n            toolName: opts.name,\n            tool: { handler: async ({ context, query }) => opts.handler({ context, query: query as z.infer<T> }) },\n            context: resolvedContext,\n            query,\n          });\n        } catch (err) {\n          logger.error(`${opts.name} failed`, {\n            error: err instanceof Error ? err.message : String(err),\n          });\n          const runtimeResult = toolRuntimeErrorToResult(err);\n          if (runtimeResult) return runtimeResult;\n          const reason = err instanceof Error ? err.message : String(err);\n          return error(`Failed to execute ${opts.name}: ${reason}`);\n        }\n      },\n      { name: opts.name, description: opts.description, schema: opts.querySchema }\n    );\n  }\n\n  // ─── Compile subgraphs ─────────────────────────────────────────────────────\n\n  // Wrap questionerEnqueue to include scoped/session context when available.\n  const sessionAwareEnqueue: QuestionerEnqueueFn | undefined = deps.questionerEnqueue\n    ? (input) => deps.questionerEnqueue!({\n        ...input,\n        ...(resolvedContext.scopeType && resolvedContext.scopeId && !input.scopeId\n          ? { scopeType: resolvedContext.scopeType, scopeId: resolvedContext.scopeId }\n          : {}),\n        ...(resolvedContext.sessionId && !input.conversationId ? { conversationId: resolvedContext.sessionId } : {}),\n      })\n    : undefined;\n\n  const intentGraph = new IntentGraphFactory(database, embedder, deps.intentQueue, sessionAwareEnqueue).createGraph();\n  const premiseGraph = new PremiseGraphFactory(database, embedder).createGraph();\n  const profileGraph = new EnrichmentGraphFactory(database, scraper, deps.enricher, sessionAwareEnqueue, premiseGraph).createGraph();\n  const hydeCache = deps.hydeCache;\n  const lensInferrer = new LensInferrer();\n  const hydeGenerator = new HydeGenerator();\n  const compiledHydeGraph = new HydeGraphFactory(\n    database as unknown as HydeGraphDatabase,\n    embedder,\n    hydeCache,\n    lensInferrer,\n    hydeGenerator\n  ).createGraph();\n  const negotiationGraph = deps.agentDispatcher\n    ? new NegotiationGraphFactory(\n        deps.negotiationDatabase,\n        deps.agentDispatcher,\n        deps.negotiationTimeoutQueue,\n        sessionAwareEnqueue,\n      ).createGraph()\n    : undefined;\n  const opportunityGraph = new OpportunityGraphFactory(\n    database,\n    embedder,\n    compiledHydeGraph,\n    undefined, // evaluator (default)\n    undefined, // queueNotification\n    negotiationGraph,\n    deps.agentDispatcher,\n    deps.queueNegotiateExisting,\n  ).createGraph();\n  const networkGraph = new NetworkGraphFactory(database).createGraph();\n  const networkMembershipGraph = new NetworkMembershipGraphFactory(database).createGraph();\n  const intentNetworkGraph = new IntentNetworkGraphFactory(database, new IntentIndexer()).createGraph();\n\n  // ─── Create context-bound databases ────────────────────────────────────────\n  // Use injected instances when provided (e.g. tests). Otherwise create from the same\n  // database used for graphs so that scope checks (e.g. ensureScopedMembership, opportunity\n  // update) use the same adapter as the rest of the tool pipeline.\n  //\n  // The systemDb's DB-level clamp derives concrete allowed network IDs from the\n  // focused scope envelope plus memberships. The legacy indexScope field is\n  // populated above only as a compatibility bridge for unmigrated tool call sites.\n  const userDb = deps.userDb ?? deps.createUserDatabase(database, resolvedContext.userId);\n  const systemDb = deps.systemDb ?? deps.createSystemDatabase(database, resolvedContext.userId, allowedNetworkIds, embedder);\n\n  // ─── Assemble dependencies ─────────────────────────────────────────────────\n  const cache = deps.cache;\n  const integration = deps.integration;\n  const toolDeps: ToolDeps = {\n    database,\n    userDb,\n    systemDb,\n    scraper,\n    embedder,\n    cache,\n    integration,\n    contactService: deps.contactService,\n    contactsEnabled: deps.contactsEnabled,\n    integrationImporter: deps.integrationImporter,\n    enricher: deps.enricher,\n    negotiationDatabase: deps.negotiationDatabase,\n    negotiationTimeoutQueue: deps.negotiationTimeoutQueue,\n    agentDatabase: deps.agentDatabase,\n    grantDefaultSystemPermissions: deps.grantDefaultSystemPermissions,\n    agentDispatcher: deps.agentDispatcher,\n    deliveryLedger: deps.deliveryLedger,\n    discoveryRuns: deps.discoveryRuns,\n    discoveryRunQueue: deps.discoveryRunQueue,\n    enrichmentRuns: deps.enrichmentRuns,\n    enrichmentRunQueue: deps.enrichmentRunQueue,\n    mintConnectToken: deps.mintConnectToken,\n    mintConnectLink: deps.mintConnectLink,\n    frontendUrl: deps.frontendUrl,\n    apiBaseUrl: deps.apiBaseUrl,\n    ...(deps.premiseEvents && { premiseEvents: deps.premiseEvents }),\n    ...(deps.chatSummary && { chatSummary: deps.chatSummary }),\n    ...(deps.questionGenerator && { questionGenerator: deps.questionGenerator }),\n    ...(sessionAwareEnqueue && { questionerEnqueue: sessionAwareEnqueue }),\n    ...(deps.negotiationSummary && { negotiationSummary: deps.negotiationSummary }),\n    graphs: {\n      profile: profileGraph,\n      intent: intentGraph,\n      index: networkGraph,\n      networkMembership: networkMembershipGraph,\n      intentIndex: intentNetworkGraph,\n      opportunity: opportunityGraph,\n      premise: premiseGraph,\n    },\n  };\n\n  // ─── Create domain tools ──────────────────────────────────────────────────\n  const profileTools = createEnrichmentTools(defineTool, toolDeps);\n  const intentTools = createIntentTools(defineTool, toolDeps);\n  const networkTools = createNetworkTools(defineTool, toolDeps);\n  const opportunityTools = createOpportunityTools(defineTool, toolDeps);\n  const utilityTools = createUtilityTools(defineTool, toolDeps);\n  const contactTools = createContactTools(defineTool, toolDeps);\n  const agentTools = createAgentTools(defineTool, toolDeps);\n  const integrationTools = createIntegrationTools(defineTool, toolDeps);\n  const negotiationTools = deps.agentDispatcher\n    ? createNegotiationTools(defineTool, toolDeps)\n    : [];\n  const premiseTools = createPremiseTools(defineTool, toolDeps);\n\n  // confirm_opportunity_delivery is an OpenClaw-delivery ledger write and must not be\n  // callable from regular chat sessions.\n  const chatOpportunityToolExclusions = new Set([\n    \"confirm_opportunity_delivery\",\n  ]);\n  const opportunityToolsForChat = opportunityTools.filter(\n    (t) => !chatOpportunityToolExclusions.has((t as { name: string }).name)\n  );\n\n  return [\n    ...profileTools,\n    ...intentTools,\n    ...networkTools,\n    ...opportunityToolsForChat,\n    ...utilityTools,\n    ...integrationTools,\n    ...contactTools,\n    ...agentTools,\n    ...negotiationTools,\n    ...premiseTools,\n  ];\n}\n\n/**\n * Type for the tools array returned by createChatTools.\n */\nexport type ChatTools = Awaited<ReturnType<typeof createChatTools>>;\n"]}

package/dist/shared/agent/tool.helpers.d.ts

@@ -1,5 +1,6 @@
 import { z } from "zod";
 import type { ModelConfig } from "./model.config.js";
+import type { ToolScopeType } from "./tool.scope.js";
 import type { UserIdentity } from "../schemas/identity.schema.js";
 import type { ChatGraphCompositeDatabase, NetworkMembership, UserRecord, UserDatabase, SystemDatabase, NegotiationGraphDatabase } from "../interfaces/database.interface.js";
 import type { Scraper } from "../interfaces/scraper.interface.js";
@@ -48,7 +49,12 @@ export interface ResolvedToolContext {
     userId: string;
     userName: string;
     userEmail: string;
+    /** Focused network for scoped chats/agents. Prefer `scopeType`/`scopeId` in new code. */
     networkId?: string;
+    /** Focused request scope type. Currently only network scopes exist. */
+    scopeType?: ToolScopeType;
+    /** Focused request scope id. When `scopeType === 'network'`, this is the focused network id. */
+    scopeId?: string;
     indexName?: string;
     /** True when chat is index-scoped and the user owns the index. */
     isOwner?: boolean;
@@ -56,12 +62,9 @@ export interface ResolvedToolContext {
     userProfile: IdentityContext;
     userNetworks: NetworkMembership[];
     /**
-     * The set of index IDs this caller can reach in the current request.
-     * For unscoped chats: every index the user is a member of.
-     * For network-scoped agents: `[boundNetwork, personalIndex]`.
-     * This is the same set used to clamp the DB-level systemDb.
-     * Tools that filter intents/profiles default to this set; `networkId` is
-     * the "primary focus" hint, not a read filter.
+     * @deprecated indexScope is legacy concrete network reach. New code should derive reach
+     * from `scopeType`/`scopeId` plus `userNetworks` via `tool.scope.ts`.
+     * Removed after call sites are migrated in this plan.
      */
     indexScope: string[];
     scopedIndex?: {
@@ -117,19 +120,13 @@ export interface ToolContext {
     systemDb?: SystemDatabase;
     embedder: Embedder;
     scraper: Scraper;
-    /** When set, chat is scoped to this index; tools use it as default for read_intents and create_intent. */
+    /** When set, chat is scoped to this index; tools use it as the default focused network. */
     networkId?: string;
-    /**
-     * Optional override of the resolved `indexScope`. `resolveChatContext` always
-     * computes `indexScope` from the user's memberships (clamped to [bound,
-     * personal] when `networkId` is set). When the caller has already computed
-     * a clamped scope — notably the MCP server, which clamps via
-     * `applyNetworkScopeToContext` for network-scoped agents — passing it on
-     * `ToolContext.indexScope` causes `createChatTools` (in tool.factory.ts) to
-     * override `resolvedContext.indexScope` with this value rather than the
-     * freshly computed one. See ResolvedToolContext.indexScope for the
-     * resolved-side semantics.
-     */
+    /** Focused request scope type. Currently only `network` is supported. */
+    scopeType?: ToolScopeType;
+    /** Focused request scope id. When omitted, `networkId` is converted to a network scope. */
+    scopeId?: string;
+    /** @deprecated indexScope is legacy; use `scopeType`/`scopeId`, retained until wiring phases migrate call sites. */
     indexScope?: string[];
     /** Chat session ID when creating tools for a chat; enables draft opportunities with context.conversationId. */
     sessionId?: string;
@@ -377,6 +374,8 @@ export interface ToolDeps {
     findPendingQuestions?: (userId: string, filters?: {
         sourceType?: string;
         sourceId?: string;
+        /** Restrict to questions whose actor carries this network id. */
+        networkId?: string;
         /** Restrict to questions whose detection mode is in this set. */
         modes?: QuestionMode[];
         /** Maximum rows to return; hosts should apply this in the query. */

package/dist/shared/agent/tool.helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool.helpers.d.ts","sourceRoot":"/","sources":["shared/agent/tool.helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC7K,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AACxF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AACjF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AACrG,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAExG,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,IAAI,CAAC;AAElD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAMD,6DAA6D;AAE7D,MAAM,MAAM,aAAa,GAAG;IAAE,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAA;CAAE,CAAC;AAMrE;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAElC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,EAAE,eAAe,CAAC;IAC7B,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC;;;;;;;OAOG;IACH,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,CAAC,EAAE;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACvC,CAAC;IACF,oBAAoB,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC1C,oFAAoF;IACpF,YAAY,EAAE,OAAO,CAAC;IACtB,+CAA+C;IAC/C,OAAO,EAAE,OAAO,CAAC;IACjB,4GAA4G;IAC5G,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4FAA4F;IAC5F,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC;IACnC;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,oFAAoF;IACpF,QAAQ,EAAE,0BAA0B,CAAC;IACrC,uHAAuH;IACvH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,0IAA0I;IAC1I,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,0GAA0G;IAC1G,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,+GAA+G;IAC/G,SAAS,CAAC,EAAE,MAAM,CAAC;IAGnB,qDAAqD;IACrD,KAAK,EAAE,KAAK,CAAC;IACb,sEAAsE;IACtE,SAAS,EAAE,SAAS,CAAC;IACrB,mEAAmE;IACnE,WAAW,EAAE,kBAAkB,CAAC;IAChC,kFAAkF;IAClF,WAAW,EAAE,gBAAgB,CAAC;IAC9B,qCAAqC;IACrC,cAAc,EAAE,qBAAqB,CAAC;IACtC;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,4DAA4D;IAC5D,WAAW,EAAE,iBAAiB,CAAC;IAC/B,kGAAkG;IAClG,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,+FAA+F;IAC/F,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;IAC5C;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,mBAAmB,CAAC;IACxC,6FAA6F;IAC7F,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IAC9C,qDAAqD;IACrD,QAAQ,EAAE,eAAe,CAAC;IAC1B,gEAAgE;IAChE,mBAAmB,EAAE,wBAAwB,CAAC;IAC9C,kEAAkE;IAClE,mBAAmB,EAAE;QACnB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;YACvD,QAAQ,EAAE,MAAM,CAAC;YACjB,OAAO,EAAE,MAAM,CAAC;YAChB,WAAW,EAAE,MAAM,CAAC;YACpB,gBAAgB,EAAE,MAAM,CAAC;SAC1B,CAAC,CAAC;KACJ,CAAC;IACF,+CAA+C;IAC/C,kBAAkB,EAAE,CAAC,EAAE,EAAE,0BAA0B,EAAE,MAAM,EAAE,MAAM,KAAK,YAAY,CAAC;IACrF,iDAAiD;IACjD,oBAAoB,EAAE,CAAC,EAAE,EAAE,0BAA0B,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,QAAQ,CAAC,EAAE,QAAQ,KAAK,cAAc,CAAC;IACpI,sFAAsF;IACtF,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,mGAAmG;IACnG,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAClD,6FAA6F;IAC7F,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,+EAA+E;IAC/E,6BAA6B,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,wGAAwG;IACxG,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,6EAA6E;IAC7E,sBAAsB,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,oGAAoG;IACpG,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,6FAA6F;IAC7F,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,gGAAgG;IAChG,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,2FAA2F;IAC3F,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,8FAA8F;IAC9F,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9E,iHAAiH;IACjH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,2FAA2F;IAC3F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0GAA0G;IAC1G,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wFAAwF;IACxF,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,4EAA4E;IAC5E,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,KAAK,IAAI,CAAC;IACpE;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;QAC1F,OAAO,EAAE,OAAO,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC;KAC9B,CAAC,CAAC;IACH,sGAAsG;IACtG,aAAa,CAAC,EAAE;QACd,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;QACxD,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;QACxD,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;KAC3D,CAAC;CACH;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC,CAAC;AAEzG;;;GAGG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;aAG7B,UAAU,EAAE,MAAM;aAClB,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,GAAG,2BAA2B;gBAFxF,OAAO,EAAE,MAAM,EACC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,GAAG,2BAA2B;CAK3F;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE;IAC/C,QAAQ,EAAE,IAAI,CACZ,0BAA0B,EAC1B,SAAS,GAAG,YAAY,GAAG,uBAAuB,GAAG,sBAAsB,GAAG,YAAY,GAAG,cAAc,GAAG,iBAAiB,CAChI,CAAC;IACF,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAiG/B;AAMD;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,CAAC,CAAC;IACf,OAAO,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,mBAAmB,CAAC;QAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAE1F,KAAK,GAAG,CAAC;AAEV;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;IAClB,OAAO,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,mBAAmB,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACvF;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAM1D;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,oFAAoF;IACpF,QAAQ,EAAE,0BAA0B,CAAC;IACrC,mFAAmF;IACnF,MAAM,EAAE,YAAY,CAAC;IACrB,sGAAsG;IACtG,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,qCAAqC,EAAE,QAAQ,CAAC;IACjE,KAAK,EAAE,KAAK,CAAC;IACb,WAAW,EAAE,kBAAkB,CAAC;IAChC,cAAc,EAAE,qBAAqB,CAAC;IACtC;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mBAAmB,EAAE;QACnB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;YACvD,QAAQ,EAAE,MAAM,CAAC;YACjB,OAAO,EAAE,MAAM,CAAC;YAChB,WAAW,EAAE,MAAM,CAAC;YACpB,gBAAgB,EAAE,MAAM,CAAC;SAC1B,CAAC,CAAC;KACJ,CAAC;IACF,QAAQ,EAAE,eAAe,CAAC;IAC1B,gEAAgE;IAChE,mBAAmB,EAAE,wBAAwB,CAAC;IAC9C,qFAAqF;IACrF,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,kGAAkG;IAClG,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;OAGG;IACH,oBAAoB,CAAC,EAAE;QACrB,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5D,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;KAC1D,CAAC;IACF;;;OAGG;IACH,uBAAuB,CAAC,EAAE;QACxB,eAAe,CAAC,EAAE,MAAM;YAAE,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;SAAE,CAAC;QAC9E,sBAAsB,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;KACnE,CAAC;IACF,+FAA+F;IAC/F,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;IAC5C;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,mBAAmB,CAAC;IACxC;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,CACrB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;QACR,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,iEAAiE;QACjE,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;QACvB,oEAAoE;QACpE,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,KACE,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACvC,6FAA6F;IAC7F,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IAC9C,mGAAmG;IACnG,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAClD,6FAA6F;IAC7F,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,+EAA+E;IAC/E,6BAA6B,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,wGAAwG;IACxG,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,oGAAoG;IACpG,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,6FAA6F;IAC7F,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,gGAAgG;IAChG,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,2FAA2F;IAC3F,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,8FAA8F;IAC9F,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9E,iHAAiH;IACjH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,2FAA2F;IAC3F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0GAA0G;IAC1G,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,KAAK,IAAI,CAAC;IACpE;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;QAC1F,OAAO,EAAE,OAAO,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC;KAC9B,CAAC,CAAC;IACH,sGAAsG;IACtG,aAAa,CAAC,EAAE;QACd,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;QACxD,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;QACxD,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;KAC3D,CAAC;IACF,MAAM,EAAE;QACN,OAAO,EAAE,aAAa,CAAC;QACvB,MAAM,EAAE,aAAa,CAAC;QACtB,KAAK,EAAE,aAAa,CAAC;QACrB,iBAAiB,EAAE,aAAa,CAAC;QACjC,WAAW,EAAE,aAAa,CAAC;QAC3B,WAAW,EAAE,wBAAwB,CAAC;QACtC,OAAO,EAAE,aAAa,CAAC;KACxB,CAAC;IACF;;;OAGG;IACH,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,KAAK,CAAC;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,eAAe,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACjE,KAAK,OAAO,CAAC;QAAE,gBAAgB,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACrD;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1D;AAMD,wBAAgB,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,CAE1C;AAED,wBAAgB,KAAK,CACnB,OAAO,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,GACpF,MAAM,CAMR;AAED,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAMT;AAgBD,uFAAuF;AACvF,eAAO,MAAM,UAAU,QAAoE,CAAC;AAE5F;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE;IAAE,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;CAAE,EACnF,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,MAAM,EAAE,CAAC,CAMnB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWvD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CA2BlD;AAgBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAe7D"}
+{"version":3,"file":"tool.helpers.d.ts","sourceRoot":"/","sources":["shared/agent/tool.helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC7K,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gDAAgD,CAAC;AACxF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+CAA+C,CAAC;AAC7F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4CAA4C,CAAC;AACjF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAC/E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAChF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AACrG,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAExG,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,IAAI,CAAC;AAElD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAMD,6DAA6D;AAE7D,MAAM,MAAM,aAAa,GAAG;IAAE,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAA;CAAE,CAAC;AAMrE;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAElC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,yFAAyF;IACzF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,gGAAgG;IAChG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,IAAI,EAAE,UAAU,CAAC;IACjB,WAAW,EAAE,eAAe,CAAC;IAC7B,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC;;;;OAIG;IACH,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,CAAC,EAAE;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACvC,CAAC;IACF,oBAAoB,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC1C,oFAAoF;IACpF,YAAY,EAAE,OAAO,CAAC;IACtB,+CAA+C;IAC/C,OAAO,EAAE,OAAO,CAAC;IACjB,4GAA4G;IAC5G,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4FAA4F;IAC5F,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC;IACnC;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,oFAAoF;IACpF,QAAQ,EAAE,0BAA0B,CAAC;IACrC,uHAAuH;IACvH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,0IAA0I;IAC1I,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,2FAA2F;IAC3F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,2FAA2F;IAC3F,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oHAAoH;IACpH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,+GAA+G;IAC/G,SAAS,CAAC,EAAE,MAAM,CAAC;IAGnB,qDAAqD;IACrD,KAAK,EAAE,KAAK,CAAC;IACb,sEAAsE;IACtE,SAAS,EAAE,SAAS,CAAC;IACrB,mEAAmE;IACnE,WAAW,EAAE,kBAAkB,CAAC;IAChC,kFAAkF;IAClF,WAAW,EAAE,gBAAgB,CAAC;IAC9B,qCAAqC;IACrC,cAAc,EAAE,qBAAqB,CAAC;IACtC;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,4DAA4D;IAC5D,WAAW,EAAE,iBAAiB,CAAC;IAC/B,kGAAkG;IAClG,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,+FAA+F;IAC/F,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;IAC5C;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,mBAAmB,CAAC;IACxC,6FAA6F;IAC7F,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IAC9C,qDAAqD;IACrD,QAAQ,EAAE,eAAe,CAAC;IAC1B,gEAAgE;IAChE,mBAAmB,EAAE,wBAAwB,CAAC;IAC9C,kEAAkE;IAClE,mBAAmB,EAAE;QACnB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;YACvD,QAAQ,EAAE,MAAM,CAAC;YACjB,OAAO,EAAE,MAAM,CAAC;YAChB,WAAW,EAAE,MAAM,CAAC;YACpB,gBAAgB,EAAE,MAAM,CAAC;SAC1B,CAAC,CAAC;KACJ,CAAC;IACF,+CAA+C;IAC/C,kBAAkB,EAAE,CAAC,EAAE,EAAE,0BAA0B,EAAE,MAAM,EAAE,MAAM,KAAK,YAAY,CAAC;IACrF,iDAAiD;IACjD,oBAAoB,EAAE,CAAC,EAAE,EAAE,0BAA0B,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,QAAQ,CAAC,EAAE,QAAQ,KAAK,cAAc,CAAC;IACpI,sFAAsF;IACtF,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,mGAAmG;IACnG,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAClD,6FAA6F;IAC7F,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,+EAA+E;IAC/E,6BAA6B,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,wGAAwG;IACxG,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,6EAA6E;IAC7E,sBAAsB,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,oGAAoG;IACpG,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,6FAA6F;IAC7F,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,gGAAgG;IAChG,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,2FAA2F;IAC3F,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,8FAA8F;IAC9F,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9E,iHAAiH;IACjH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,2FAA2F;IAC3F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0GAA0G;IAC1G,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wFAAwF;IACxF,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,4EAA4E;IAC5E,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,KAAK,IAAI,CAAC;IACpE;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;QAC1F,OAAO,EAAE,OAAO,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC;KAC9B,CAAC,CAAC;IACH,sGAAsG;IACtG,aAAa,CAAC,EAAE;QACd,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;QACxD,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;QACxD,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;KAC3D,CAAC;CACH;AAED;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC,CAAC;AAEzG;;;GAGG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;aAG7B,UAAU,EAAE,MAAM;aAClB,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,GAAG,2BAA2B;gBAFxF,OAAO,EAAE,MAAM,EACC,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,GAAG,2BAA2B;CAK3F;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE;IAC/C,QAAQ,EAAE,IAAI,CACZ,0BAA0B,EAC1B,SAAS,GAAG,YAAY,GAAG,uBAAuB,GAAG,sBAAsB,GAAG,YAAY,GAAG,cAAc,GAAG,iBAAiB,CAChI,CAAC;IACF,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oFAAoF;IACpF,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAgG/B;AAMD;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,CAAC,CAAC;IACf,OAAO,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,mBAAmB,CAAC;QAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAE1F,KAAK,GAAG,CAAC;AAEV;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;IAClB,OAAO,EAAE,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,mBAAmB,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACvF;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAM1D;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,oFAAoF;IACpF,QAAQ,EAAE,0BAA0B,CAAC;IACrC,mFAAmF;IACnF,MAAM,EAAE,YAAY,CAAC;IACrB,sGAAsG;IACtG,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,qCAAqC,EAAE,QAAQ,CAAC;IACjE,KAAK,EAAE,KAAK,CAAC;IACb,WAAW,EAAE,kBAAkB,CAAC;IAChC,cAAc,EAAE,qBAAqB,CAAC;IACtC;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,mBAAmB,EAAE;QACnB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;YACvD,QAAQ,EAAE,MAAM,CAAC;YACjB,OAAO,EAAE,MAAM,CAAC;YAChB,WAAW,EAAE,MAAM,CAAC;YACpB,gBAAgB,EAAE,MAAM,CAAC;SAC1B,CAAC,CAAC;KACJ,CAAC;IACF,QAAQ,EAAE,eAAe,CAAC;IAC1B,gEAAgE;IAChE,mBAAmB,EAAE,wBAAwB,CAAC;IAC9C,qFAAqF;IACrF,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,kGAAkG;IAClG,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;OAGG;IACH,oBAAoB,CAAC,EAAE;QACrB,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5D,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;KAC1D,CAAC;IACF;;;OAGG;IACH,uBAAuB,CAAC,EAAE;QACxB,eAAe,CAAC,EAAE,MAAM;YAAE,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;SAAE,CAAC;QAC9E,sBAAsB,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;KACnE,CAAC;IACF,+FAA+F;IAC/F,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,oFAAoF;IACpF,iBAAiB,CAAC,EAAE,uBAAuB,CAAC;IAC5C;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,mBAAmB,CAAC;IACxC;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,CACrB,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE;QACR,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,iEAAiE;QACjE,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,iEAAiE;QACjE,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;QACvB,oEAAoE;QACpE,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,KACE,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACvC,6FAA6F;IAC7F,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IAC9C,mGAAmG;IACnG,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAClD,6FAA6F;IAC7F,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,+EAA+E;IAC/E,6BAA6B,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,wGAAwG;IACxG,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,oGAAoG;IACpG,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,6FAA6F;IAC7F,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,gGAAgG;IAChG,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,2FAA2F;IAC3F,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,8FAA8F;IAC9F,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9E,iHAAiH;IACjH,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,2FAA2F;IAC3F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0GAA0G;IAC1G,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,KAAK,IAAI,CAAC;IACpE;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;QAC1F,OAAO,EAAE,OAAO,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC;KAC9B,CAAC,CAAC;IACH,sGAAsG;IACtG,aAAa,CAAC,EAAE;QACd,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;QACxD,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;QACxD,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;KAC3D,CAAC;IACF,MAAM,EAAE;QACN,OAAO,EAAE,aAAa,CAAC;QACvB,MAAM,EAAE,aAAa,CAAC;QACtB,KAAK,EAAE,aAAa,CAAC;QACrB,iBAAiB,EAAE,aAAa,CAAC;QACjC,WAAW,EAAE,aAAa,CAAC;QAC3B,WAAW,EAAE,wBAAwB,CAAC;QACtC,OAAO,EAAE,aAAa,CAAC;KACxB,CAAC;IACF;;;OAGG;IACH,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,KAAK,CAAC;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,eAAe,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACjE,KAAK,OAAO,CAAC;QAAE,gBAAgB,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACrD;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1D;AAMD,wBAAgB,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,MAAM,CAE1C;AAED,wBAAgB,KAAK,CACnB,OAAO,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,GACpF,MAAM,CAMR;AAED,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE;IACzC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAMT;AAgBD,uFAAuF;AACvF,eAAO,MAAM,UAAU,QAAoE,CAAC;AAE5F;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE;IAAE,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;CAAE,EACnF,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,MAAM,EAAE,CAAC,CAMnB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWvD;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CA2BlD;AAgBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAe7D"}

package/dist/shared/agent/tool.helpers.js

@@ -1,3 +1,4 @@
+import { deriveAllowedNetworkIds, scopeFromNetworkId } from "./tool.scope.js";
 /**
  * Thrown when a requested chat scope is invalid for the authenticated user.
  * Controllers can map this to an HTTP status code.
@@ -60,27 +61,25 @@ export async function resolveChatContext(params) {
     const userName = user.name ?? "Unknown";
     const userEmail = user.email ?? "";
     const hasName = !!user.name?.trim();
-    // When scoped to an index, clamp the caller's reach to [scopedIndex, personalIndex]
-    // so the chat's data model matches its "focus" semantic: a chat scoped to a
-    // community sees that community plus the user's personal index, not their
-    // other unrelated memberships. Mirrors the MCP path's clamp for network-scoped
-    // agents (see applyNetworkScopeToContext / computeAgentIndexScope).
-    const indexScope = networkId
-        ? userNetworks
-            .filter((m) => m.networkId === networkId || m.isPersonal === true)
-            .map((m) => m.networkId)
-        : userNetworks.map((m) => m.networkId);
+    const scope = scopeFromNetworkId(networkId);
+    // Deprecated compatibility reach. New call sites should call
+    // deriveAllowedNetworkIds({ memberships: userNetworks, ...scope }) directly.
+    const allowedNetworkIds = deriveAllowedNetworkIds({
+        memberships: userNetworks,
+        ...scope,
+    });
     return {
         userId,
         userName,
         userEmail,
         networkId,
+        ...scope,
         indexName,
         isOwner,
         user,
         userProfile,
         userNetworks,
-        indexScope,
+        indexScope: allowedNetworkIds,
         scopedIndex,
         scopedMembershipRole,
         isOnboarding: !(user.onboarding?.completedAt),

package/dist/shared/agent/tool.helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool.helpers.js","sourceRoot":"/","sources":["shared/agent/tool.helpers.ts"],"names":[],"mappings":"AAyQA;;;GAGG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YACE,OAAe,EACC,UAAkB,EAClB,IAAwE;QAExF,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAoE;QAGxF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAWxC;IACC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC;IAE3E,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzD,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;QACxB,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAC3B,QAAQ,CAAC,qBAAqB,CAAC,MAAM,CAAC;KACvC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAoB,UAAU,IAAI,IAAI,CAAC;IAExD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,sBAAsB,CAC9B,gBAAgB,EAChB,GAAG,EACH,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,GAAuC,SAAS,CAAC;IAChE,IAAI,oBAAoB,GAAgD,SAAS,CAAC;IAClF,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,SAA6B,CAAC;IAElC,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjD,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;YAC9B,QAAQ,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC;YAC3C,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC;SACzC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,sBAAsB,CAC9B,iBAAiB,EACjB,GAAG,EACH,iBAAiB,CAClB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,sBAAsB,CAC9B,oCAAoC,EACpC,GAAG,EACH,2BAA2B,CAC5B,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;QACpE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,UAAU,GAAG,CAAC,MAAM,QAAQ,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,IAAI,SAAS,CAAC;QACpF,CAAC;QACD,WAAW,GAAG;YACZ,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,UAAU,EAAE,WAAW,IAAI,IAAI;YACvC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,WAAW;YAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;SACrC,CAAC;QACF,OAAO,GAAG,KAAK,CAAC;QAChB,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;QACxB,oBAAoB,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IACpD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAEpC,oFAAoF;IACpF,4EAA4E;IAC5E,0EAA0E;IAC1E,+EAA+E;IAC/E,oEAAoE;IACpE,MAAM,UAAU,GAAG,SAAS;QAC1B,CAAC,CAAC,YAAY;aACT,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC;aACjE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5B,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEzC,OAAO;QACL,MAAM;QACN,QAAQ;QACR,SAAS;QACT,SAAS;QACT,SAAS;QACT,OAAO;QACP,IAAI;QACJ,WAAW;QACX,YAAY;QACZ,UAAU;QACV,WAAW;QACX,oBAAoB;QACpB,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC;QAC7C,OAAO;QACP,eAAe;QACf,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAoMD,kFAAkF;AAClF,sBAAsB;AACtB,kFAAkF;AAElF,MAAM,UAAU,OAAO,CAAI,IAAO;IAChC,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,KAAK,CACnB,OAAe,EACf,UAAqF;IAErF,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,OAAO;QACd,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,kBAAkB,CAAC,MAGlC;IACC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,KAAK;QACd,kBAAkB,EAAE,IAAI;QACxB,GAAG,MAAM;KACV,CAAC,CAAC;AACL,CAAC;AAED,kFAAkF;AAClF,wBAAwB;AACxB,kFAAkF;AAElF,0DAA0D;AAC1D,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAEvD;;;;GAIG;AACH,MAAM,cAAc,GAAG,+TAA+T,CAAC;AAEvV,uFAAuF;AACvF,MAAM,CAAC,MAAM,UAAU,GAAG,iEAAiE,CAAC;AAE5F;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAmF,EACnF,UAAoB;IAEpB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAC9C,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,GAAG,GAAG,WAAW,GAAG,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IAEzB,6BAA6B;IAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;IACxD,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,QAAQ;IACR,eAAe;IACf,UAAU;IACV,QAAQ;IACR,OAAO;IACP,aAAa;IACb,cAAc;IACd,YAAY;IACZ,WAAW;IACX,aAAa;IACb,cAAc;CACf,CAAC,CAAC;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC5E,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["import { z } from \"zod\";\nimport type { ModelConfig } from \"./model.config.js\";\nimport type { UserIdentity } from \"../schemas/identity.schema.js\";\nimport type { ChatGraphCompositeDatabase, NetworkMembership, UserRecord, UserDatabase, SystemDatabase, NegotiationGraphDatabase } from \"../interfaces/database.interface.js\";\nimport type { Scraper } from \"../interfaces/scraper.interface.js\";\nimport type { Cache, HydeCache } from \"../interfaces/cache.interface.js\";\nimport type { CompiledOpportunityGraph } from \"../../opportunity/opportunity.discover.js\";\nimport type { IntegrationAdapter } from \"../interfaces/integration.interface.js\";\nimport type { ContactServiceAdapter } from \"../interfaces/contact.interface.js\";\nimport type { ProfileEnricher } from \"../interfaces/enrichment.interface.js\";\nimport type { IntentGraphQueue } from \"../interfaces/queue.interface.js\";\nimport type { ChatSessionReader } from \"../interfaces/chat-session.interface.js\";\nimport type { ChatSummaryReader } from \"../interfaces/chat-summary.interface.js\";\nimport type { ChatMessageWriter } from \"../interfaces/chat-message-writer.interface.js\";\nimport type { QuestionGeneratorReader } from \"../interfaces/question-generator.interface.js\";\nimport type { NegotiationSummaryReader } from \"../interfaces/negotiation-summary.interface.js\";\nimport type { Embedder } from \"../interfaces/embedder.interface.js\";\nimport type { AgentDatabase } from \"../interfaces/agent.interface.js\";\nimport type { NegotiationTimeoutQueue } from \"../interfaces/negotiation-events.interface.js\";\nimport type { AgentDispatcher } from \"../interfaces/agent-dispatcher.interface.js\";\nimport type { DeliveryLedger } from \"../interfaces/delivery-ledger.interface.js\";\nimport type { MintConnectLink } from \"../interfaces/connect-link.interface.js\";\nimport type { QuestionerDatabase } from \"../interfaces/questioner.interface.js\";\nimport type { QuestionerEnqueueFn } from \"../../questioner/questioner.types.js\";\nimport type { PendingQuestionSummary } from \"../schemas/pending-question.schema.js\";\nimport type { QuestionMode } from \"../schemas/question.schema.js\";\nimport type { DiscoveryRunQueue, DiscoveryRunStore } from \"../interfaces/discovery-run.interface.js\";\nimport type { EnrichmentRunQueue, EnrichmentRunStore } from \"../interfaces/enrichment-run.interface.js\";\n\nexport type IdentityContext = UserIdentity | null;\n\nexport interface ToolErrorReport {\n  operation: string;\n  subsystem?: string;\n  toolName?: string;\n  userId?: string;\n  tags?: Record<string, string | number | boolean | null | undefined>;\n  context?: Record<string, unknown>;\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// COMPILED GRAPH TYPE\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/** Minimal interface for an invokable compiled LangGraph. */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport type CompiledGraph = { invoke: (input: any) => Promise<any> };\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// TOOL CONTEXT TYPES\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/**\n * Resolved context available to every tool handler.\n * Contains the current user and optional index identity, resolved from DB at init.\n * The LLM can see this context (via system prompt) but cannot change it.\n */\nexport interface ResolvedToolContext {\n  // Legacy flat fields (kept for backwards compatibility in tools/prompts).\n  userId: string;\n  userName: string;\n  userEmail: string;\n  networkId?: string;\n  indexName?: string;\n  /** True when chat is index-scoped and the user owns the index. */\n  isOwner?: boolean;\n  // Rich identity context for prompt/tool orchestration.\n  user: UserRecord;\n  userProfile: IdentityContext;\n  userNetworks: NetworkMembership[];\n  /**\n   * The set of index IDs this caller can reach in the current request.\n   * For unscoped chats: every index the user is a member of.\n   * For network-scoped agents: `[boundNetwork, personalIndex]`.\n   * This is the same set used to clamp the DB-level systemDb.\n   * Tools that filter intents/profiles default to this set; `networkId` is\n   * the \"primary focus\" hint, not a read filter.\n   */\n  indexScope: string[];\n  scopedIndex?: {\n    id: string;\n    title: string;\n    prompt: string | null;\n    type?: string;\n    metadata?: Record<string, unknown>;\n    permissions?: Record<string, unknown>;\n  };\n  scopedMembershipRole?: \"owner\" | \"member\";\n  /** True when user has not completed onboarding (onboarding.completedAt is null). */\n  isOnboarding: boolean;\n  /** True when the user has a non-empty name. */\n  hasName: boolean;\n  /** Chat session ID when tools are used in a chat; used for draft opportunities (context.conversationId). */\n  sessionId?: string;\n  /** True when the request originates from an MCP transport (no interactive UI available). */\n  isMcp?: boolean;\n  /** Agent ID when the request originates from an API key linked to an agent. */\n  agentId?: string;\n  /**\n   * Receiver's rendering surface declared by the MCP client via the\n   * `x-index-surface` request header. `'telegram'` means the MCP response is\n   * being rendered inside a Telegram chat; anything\n   * else (including `undefined`) is treated as web. Forwarded into\n   * `mintConnectLink` so the click-time redirect can branch.\n   */\n  clientSurface?: 'telegram' | 'web';\n  /**\n   * True when the CONTACTS_ENABLED feature flag is on. Carried from the\n   * composition root so prompt modules can gate contact-import guidance —\n   * when false/unset, the contacts prompt module is not injected, so the\n   * orchestrator never advertises Gmail import / add_contact (whose tools\n   * are also de-registered). Fail-closed: treat only `true` as enabled.\n   */\n  contactsEnabled?: boolean;\n}\n\n/**\n * Dependencies passed when creating tools for a user session.\n * Includes DB adapters, embedder, and scraper.\n *\n * Note: userDb and systemDb are optional inputs - if not provided, createChatTools\n * will create them internally from the chatDatabaseAdapter singleton.\n */\nexport interface ToolContext {\n  userId: string;\n  /** @deprecated Use userDb or systemDb instead. Kept for backwards compatibility. */\n  database: ChatGraphCompositeDatabase;\n  /** Context-bound database for accessing the authenticated user's own resources. Created internally if not provided. */\n  userDb?: UserDatabase;\n  /** Context-bound database for LLM/system operations on cross-user resources within shared indexes. Created internally if not provided. */\n  systemDb?: SystemDatabase;\n  embedder: Embedder;\n  scraper: Scraper;\n  /** When set, chat is scoped to this index; tools use it as default for read_intents and create_intent. */\n  networkId?: string;\n  /**\n   * Optional override of the resolved `indexScope`. `resolveChatContext` always\n   * computes `indexScope` from the user's memberships (clamped to [bound,\n   * personal] when `networkId` is set). When the caller has already computed\n   * a clamped scope — notably the MCP server, which clamps via\n   * `applyNetworkScopeToContext` for network-scoped agents — passing it on\n   * `ToolContext.indexScope` causes `createChatTools` (in tool.factory.ts) to\n   * override `resolvedContext.indexScope` with this value rather than the\n   * freshly computed one. See ResolvedToolContext.indexScope for the\n   * resolved-side semantics.\n   */\n  indexScope?: string[];\n  /** Chat session ID when creating tools for a chat; enables draft opportunities with context.conversationId. */\n  sessionId?: string;\n\n  // ─── Protocol-level dependencies (injected by composition root) ──────────\n  /** General-purpose cache (e.g. for tool results). */\n  cache: Cache;\n  /** Dedicated cache for HyDE graph (may be same instance as cache). */\n  hydeCache: HydeCache;\n  /** External integration platform adapter (OAuth, tool actions). */\n  integration: IntegrationAdapter;\n  /** Queue for enqueuing follow-up intent processing (HyDE generation/deletion). */\n  intentQueue: IntentGraphQueue;\n  /** Contact management operations. */\n  contactService: ContactServiceAdapter;\n  /**\n   * When false (or unset), the contact import / manual-add tools\n   * (import_contacts, add_contact, import_gmail_contacts) are not registered.\n   * Injected by the composition root from CONTACTS_ENABLED. Read/remove/search\n   * contact tools are always registered.\n   */\n  contactsEnabled?: boolean;\n  /** Chat session reader for loading conversation history. */\n  chatSession: ChatSessionReader;\n  /** Read-through chat-session digest. Optional; consumers fall back to undefined `chatContext`. */\n  chatSummary?: ChatSummaryReader;\n  /** Writes user messages into the user's most-recent chat session (Slice 5 MCP elicitation). */\n  chatMessageWriter?: ChatMessageWriter;\n  /** Decision-question generator. Optional; consumers fall back to no `questions`. */\n  questionGenerator?: QuestionGeneratorReader;\n  /**\n   * Optional async question enqueue callback. When provided, question generation\n   * is dispatched asynchronously to the QuestionerQueue instead of running inline.\n   * Injected by the composition root when QUESTIONER_ENABLED=true.\n   */\n  questionerEnqueue?: QuestionerEnqueueFn;\n  /** Negotiation-digest summarizer. Optional; consumers fall back to deterministic digests. */\n  negotiationSummary?: NegotiationSummaryReader;\n  /** Profile enrichment from external data sources. */\n  enricher: ProfileEnricher;\n  /** Database adapter for negotiation/conversation operations. */\n  negotiationDatabase: NegotiationGraphDatabase;\n  /** Integration importer for bulk contact import from toolkits. */\n  integrationImporter: {\n    importContacts(userId: string, toolkit: string): Promise<{\n      imported: number;\n      skipped: number;\n      newContacts: number;\n      existingContacts: number;\n    }>;\n  };\n  /** Factory for user-scoped database access. */\n  createUserDatabase: (db: ChatGraphCompositeDatabase, userId: string) => UserDatabase;\n  /** Factory for system-scoped database access. */\n  createSystemDatabase: (db: ChatGraphCompositeDatabase, userId: string, indexScope: string[], embedder?: Embedder) => SystemDatabase;\n  /** Optional runtime LLM config. Pass to override env vars for API key, model, etc. */\n  modelConfig?: ModelConfig;\n  /** Manages negotiation timeout jobs (optional — enables AI fallback on external agent timeout). */\n  negotiationTimeoutQueue?: NegotiationTimeoutQueue;\n  /** Agent registry database adapter (optional — absent when host does not support agents). */\n  agentDatabase?: AgentDatabase;\n  /** Grants the default system-agent permissions after onboarding (optional). */\n  grantDefaultSystemPermissions?: (userId: string) => Promise<void>;\n  /** Dispatcher for routing negotiation turns to personal agents (optional — falls back to system AI). */\n  agentDispatcher?: AgentDispatcher;\n  /** Enqueue a negotiate_existing job after introducer approval (optional). */\n  queueNegotiateExisting?: (opportunityId: string, userId: string) => Promise<void>;\n  /** Delivery ledger for committing opportunity delivery rows (optional — absent in chat context). */\n  deliveryLedger?: DeliveryLedger;\n  /** Persistence for async MCP discovery runs (optional — absent in non-MCP/test contexts). */\n  discoveryRuns?: DiscoveryRunStore;\n  /** Queue for async MCP discovery run execution (optional — absent in non-MCP/test contexts). */\n  discoveryRunQueue?: DiscoveryRunQueue;\n  /** Persistence for async MCP profile runs (optional — absent in non-MCP/test contexts). */\n  enrichmentRuns?: EnrichmentRunStore;\n  /** Queue for async MCP profile run execution (optional — absent in non-MCP/test contexts). */\n  enrichmentRunQueue?: EnrichmentRunQueue;\n  /**\n   * Legacy direct-token minting for opportunity accept redirects.\n   * Prefer `mintConnectLink` for user-facing links.\n   */\n  mintConnectToken?: (userId: string, opportunityId: string) => Promise<string>;\n  /** Mints (or reuses) a short connect link, snapshotting the greeting (optional — absent in non-MCP contexts). */\n  mintConnectLink?: MintConnectLink;\n  /** Frontend base URL for building profile links (e.g. https://index.network, optional). */\n  frontendUrl?: string;\n  /** API base URL for building opportunity accept links (e.g. https://protocol.index.network, optional). */\n  apiBaseUrl?: string;\n  /** Persistence for structured questions generated by the QuestionerAgent (optional). */\n  questionerDatabase?: QuestionerDatabase;\n  /** Optional host-side error reporter for swallowed protocol/tool errors. */\n  reportToolError?: (error: unknown, report: ToolErrorReport) => void;\n  /**\n   * Optional host-side per-principal MCP call throttle. Invoked once per MCP\n   * tool dispatch (after identity resolves, before any DB work). When the\n   * returned decision is `allowed: false`, the dispatch short-circuits with a\n   * rate-limit error carrying `retryAfterSec`. Absent in chat/test contexts.\n   */\n  mcpRateLimiter?: (input: { userId: string; agentId?: string; toolName: string }) => Promise<{\n    allowed: boolean;\n    retryAfterSec?: number;\n    limit?: number;\n    scope?: 'tool' | 'principal';\n  }>;\n  /** Optional premise lifecycle event callbacks. Fired by premise tools after successful operations. */\n  premiseEvents?: {\n    onCreated?: (premiseId: string, userId: string) => void;\n    onUpdated?: (premiseId: string, userId: string) => void;\n    onRetracted?: (premiseId: string, userId: string) => void;\n  };\n}\n\n/**\n * All external dependencies needed to initialize the protocol tool engine.\n * The host application (composition root) must provide concrete implementations.\n * This is the subset of ToolContext that is NOT per-request (no userId, indexId, sessionId).\n */\nexport type ProtocolDeps = Omit<ToolContext, 'userId' | 'indexId' | 'sessionId' | 'userDb' | 'systemDb'>;\n\n/**\n * Thrown when a requested chat scope is invalid for the authenticated user.\n * Controllers can map this to an HTTP status code.\n */\nexport class ChatContextAccessError extends Error {\n  constructor(\n    message: string,\n    public readonly statusCode: number,\n    public readonly code: \"USER_NOT_FOUND\" | \"INDEX_NOT_FOUND\" | \"INDEX_MEMBERSHIP_REQUIRED\"\n  ) {\n    super(message);\n    this.name = \"ChatContextAccessError\";\n  }\n}\n\n/**\n * Resolve the canonical context used by chat tools and system prompt.\n * This preloads user identity, profile, index memberships, and scoped index role.\n */\nexport async function resolveChatContext(params: {\n  database: Pick<\n    ChatGraphCompositeDatabase,\n    \"getUser\" | \"getProfile\" | \"getNetworkMemberships\" | \"getNetworkMembership\" | \"getNetwork\" | \"isIndexOwner\" | \"isNetworkMember\"\n  >;\n  userId: string;\n  networkId?: string;\n  /** Chat session ID for draft opportunities (stored as context.conversationId). */\n  sessionId?: string;\n  /** CONTACTS_ENABLED flag, forwarded onto the resolved context for prompt gating. */\n  contactsEnabled?: boolean;\n}): Promise<ResolvedToolContext> {\n  const { database, userId, networkId, sessionId, contactsEnabled } = params;\n\n  const [user, rawProfile, userNetworks] = await Promise.all([\n    database.getUser(userId),\n    database.getProfile(userId),\n    database.getNetworkMemberships(userId),\n  ]);\n\n  const userProfile: IdentityContext = rawProfile ?? null;\n\n  if (!user) {\n    throw new ChatContextAccessError(\n      \"User not found\",\n      404,\n      \"USER_NOT_FOUND\"\n    );\n  }\n\n  let scopedIndex: ResolvedToolContext[\"scopedIndex\"] = undefined;\n  let scopedMembershipRole: ResolvedToolContext[\"scopedMembershipRole\"] = undefined;\n  let isOwner = false;\n  let indexName: string | undefined;\n\n  if (networkId) {\n    const [index, isMember, owner] = await Promise.all([\n      database.getNetwork(networkId),\n      database.isNetworkMember(networkId, userId),\n      database.isIndexOwner(networkId, userId),\n    ]);\n\n    if (!index) {\n      throw new ChatContextAccessError(\n        \"Index not found\",\n        404,\n        \"INDEX_NOT_FOUND\"\n      );\n    }\n\n    if (!isMember) {\n      throw new ChatContextAccessError(\n        \"You are not a member of this index\",\n        403,\n        \"INDEX_MEMBERSHIP_REQUIRED\"\n      );\n    }\n\n    let membership = userNetworks.find((m) => m.networkId === index.id);\n    if (membership === undefined) {\n      membership = (await database.getNetworkMembership(index.id, userId)) ?? undefined;\n    }\n    scopedIndex = {\n      id: index.id,\n      title: index.title,\n      prompt: membership?.indexPrompt ?? null,\n      type: index.type ?? 'community',\n      metadata: index.metadata ?? {},\n      permissions: index.permissions ?? {},\n    };\n    isOwner = owner;\n    indexName = index.title;\n    scopedMembershipRole = owner ? \"owner\" : \"member\";\n  }\n\n  const userName = user.name ?? \"Unknown\";\n  const userEmail = user.email ?? \"\";\n  const hasName = !!user.name?.trim();\n\n  // When scoped to an index, clamp the caller's reach to [scopedIndex, personalIndex]\n  // so the chat's data model matches its \"focus\" semantic: a chat scoped to a\n  // community sees that community plus the user's personal index, not their\n  // other unrelated memberships. Mirrors the MCP path's clamp for network-scoped\n  // agents (see applyNetworkScopeToContext / computeAgentIndexScope).\n  const indexScope = networkId\n    ? userNetworks\n        .filter((m) => m.networkId === networkId || m.isPersonal === true)\n        .map((m) => m.networkId)\n    : userNetworks.map((m) => m.networkId);\n\n  return {\n    userId,\n    userName,\n    userEmail,\n    networkId,\n    indexName,\n    isOwner,\n    user,\n    userProfile,\n    userNetworks,\n    indexScope,\n    scopedIndex,\n    scopedMembershipRole,\n    isOnboarding: !(user.onboarding?.completedAt),\n    hasName,\n    contactsEnabled,\n    ...(sessionId !== undefined ? { sessionId } : {}),\n  };\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// DEFINE TOOL TYPE\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/**\n * Type for the `defineTool` closure created in `createChatTools`.\n * Auto-injects resolved context and provides uniform logging / error handling.\n */\nexport type DefineTool = <T extends z.ZodType>(opts: {\n  name: string;\n  description: string;\n  querySchema: T;\n  handler: (input: { context: ResolvedToolContext; query: z.infer<T> }) => Promise<string>;\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\n}) => any;\n\n/**\n * A raw tool definition before LangChain wrapping.\n * Used by the tool registry for direct HTTP invocation.\n */\nexport interface RawToolDefinition {\n  name: string;\n  description: string;\n  schema: z.ZodType;\n  handler: (input: { context: ResolvedToolContext; query: unknown }) => Promise<string>;\n}\n\n/**\n * Registry mapping tool names to their raw definitions.\n */\nexport type ToolRegistry = Map<string, RawToolDefinition>;\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// TOOL DEPENDENCIES\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/**\n * Shared dependencies available to all tool domain factories.\n * Passed by `createChatTools` after compiling all subgraphs.\n */\nexport interface ToolDeps {\n  /** @deprecated Use userDb or systemDb instead. Kept for backwards compatibility. */\n  database: ChatGraphCompositeDatabase;\n  /** Context-bound database for accessing the authenticated user's own resources. */\n  userDb: UserDatabase;\n  /** Context-bound database for LLM/system operations on cross-user resources within shared indexes. */\n  systemDb: SystemDatabase;\n  scraper: Scraper;\n  embedder: import('../interfaces/embedder.interface.js').Embedder;\n  cache: Cache;\n  integration: IntegrationAdapter;\n  contactService: ContactServiceAdapter;\n  /**\n   * When false (or unset), the contact import / manual-add tools\n   * (import_contacts, add_contact, import_gmail_contacts) are not registered.\n   * Injected by the composition root from CONTACTS_ENABLED. Read/remove/search\n   * contact tools are always registered.\n   */\n  contactsEnabled?: boolean;\n  integrationImporter: {\n    importContacts(userId: string, toolkit: string): Promise<{\n      imported: number;\n      skipped: number;\n      newContacts: number;\n      existingContacts: number;\n    }>;\n  };\n  enricher: ProfileEnricher;\n  /** Database adapter for negotiation/conversation operations. */\n  negotiationDatabase: NegotiationGraphDatabase;\n  /** Chat session reader for exposing the caller's past conversations as MCP tools. */\n  chatSession?: ChatSessionReader;\n  /** Read-through chat-session digest. Optional; consumers fall back to undefined `chatContext`. */\n  chatSummary?: ChatSummaryReader;\n  /**\n   * Test seam for opportunity discovery helpers. Production compositions leave\n   * this unset so tools call the real discovery module directly.\n   */\n  opportunityDiscovery?: {\n    runDiscoverFromQuery?: (input: unknown) => Promise<unknown>;\n    continueDiscovery?: (input: unknown) => Promise<unknown>;\n  };\n  /**\n   * Test seam for opportunity card presentation helpers. Production\n   * compositions leave this unset so tools construct the real presenter.\n   */\n  opportunityPresentation?: {\n    createPresenter?: () => { presentHomeCard(input: unknown): Promise<unknown> };\n    gatherPresenterContext?: (...args: unknown[]) => Promise<unknown>;\n  };\n  /** Writes user messages into the user's most-recent chat session (Slice 5 MCP elicitation). */\n  chatMessageWriter?: ChatMessageWriter;\n  /** Decision-question generator. Optional; consumers fall back to no `questions`. */\n  questionGenerator?: QuestionGeneratorReader;\n  /**\n   * Optional async question enqueue callback. When provided, question generation\n   * is dispatched asynchronously to the QuestionerQueue instead of running inline\n   * via the `questionGenerator`. Injected by the composition root when\n   * QUESTIONER_ENABLED=true.\n   */\n  questionerEnqueue?: QuestionerEnqueueFn;\n  /**\n   * Lookup pending questions for a user, optionally filtered by source,\n   * detection mode, or capped by count (hosts apply `limit` SQL-side).\n   * Used by tools to attach contextually relevant questions to their results.\n   * Injected by the composition root — absent when question delivery is disabled.\n   */\n  findPendingQuestions?: (\n    userId: string,\n    filters?: {\n      sourceType?: string;\n      sourceId?: string;\n      /** Restrict to questions whose detection mode is in this set. */\n      modes?: QuestionMode[];\n      /** Maximum rows to return; hosts should apply this in the query. */\n      limit?: number;\n    },\n  ) => Promise<PendingQuestionSummary[]>;\n  /** Negotiation-digest summarizer. Optional; consumers fall back to deterministic digests. */\n  negotiationSummary?: NegotiationSummaryReader;\n  /** Manages negotiation timeout jobs (optional — enables AI fallback on external agent timeout). */\n  negotiationTimeoutQueue?: NegotiationTimeoutQueue;\n  /** Agent registry database adapter (optional — absent when host does not support agents). */\n  agentDatabase?: AgentDatabase;\n  /** Grants the default system-agent permissions after onboarding (optional). */\n  grantDefaultSystemPermissions?: (userId: string) => Promise<void>;\n  /** Dispatcher for routing negotiation turns to personal agents (optional — falls back to system AI). */\n  agentDispatcher?: AgentDispatcher;\n  /** Delivery ledger for committing opportunity delivery rows (optional — absent in chat context). */\n  deliveryLedger?: DeliveryLedger;\n  /** Persistence for async MCP discovery runs (optional — absent in non-MCP/test contexts). */\n  discoveryRuns?: DiscoveryRunStore;\n  /** Queue for async MCP discovery run execution (optional — absent in non-MCP/test contexts). */\n  discoveryRunQueue?: DiscoveryRunQueue;\n  /** Persistence for async MCP profile runs (optional — absent in non-MCP/test contexts). */\n  enrichmentRuns?: EnrichmentRunStore;\n  /** Queue for async MCP profile run execution (optional — absent in non-MCP/test contexts). */\n  enrichmentRunQueue?: EnrichmentRunQueue;\n  /**\n   * Legacy direct-token minting for opportunity accept redirects.\n   * Prefer `mintConnectLink` for user-facing links.\n   */\n  mintConnectToken?: (userId: string, opportunityId: string) => Promise<string>;\n  /** Mints (or reuses) a short connect link, snapshotting the greeting (optional — absent in non-MCP contexts). */\n  mintConnectLink?: MintConnectLink;\n  /** Frontend base URL for building profile links (e.g. https://index.network, optional). */\n  frontendUrl?: string;\n  /** API base URL for building opportunity accept links (e.g. https://protocol.index.network, optional). */\n  apiBaseUrl?: string;\n  /** Optional host-side error reporter for swallowed protocol/tool errors. */\n  reportToolError?: (error: unknown, report: ToolErrorReport) => void;\n  /**\n   * Optional host-side per-principal MCP call throttle. Invoked once per MCP\n   * tool dispatch (after identity resolves, before any DB work). When the\n   * returned decision is `allowed: false`, the dispatch short-circuits with a\n   * rate-limit error carrying `retryAfterSec`. Absent in chat/test contexts.\n   */\n  mcpRateLimiter?: (input: { userId: string; agentId?: string; toolName: string }) => Promise<{\n    allowed: boolean;\n    retryAfterSec?: number;\n    limit?: number;\n    scope?: 'tool' | 'principal';\n  }>;\n  /** Optional premise lifecycle event callbacks. Fired by premise tools after successful operations. */\n  premiseEvents?: {\n    onCreated?: (premiseId: string, userId: string) => void;\n    onUpdated?: (premiseId: string, userId: string) => void;\n    onRetracted?: (premiseId: string, userId: string) => void;\n  };\n  graphs: {\n    profile: CompiledGraph;\n    intent: CompiledGraph;\n    index: CompiledGraph;\n    networkMembership: CompiledGraph;\n    intentIndex: CompiledGraph;\n    opportunity: CompiledOpportunityGraph;\n    premise: CompiledGraph;\n  };\n  /**\n   * Optional network ranking override for `read_networks`. Injected by tests or custom compositions.\n   * When absent, defaults to `NetworkRecommender.invoke()` with a lazy module-level singleton.\n   */\n  networkRanker?: (input: {\n    userContext: string;\n    networks: Array<{ networkId: string; renderedContext: string }>;\n  }) => Promise<{ rankedNetworkIds: string[] } | null>;\n  /**\n   * Resolve a user's global user_context paragraph (profile-replacing identity text),\n   * generating it on demand when absent. Injected by the backend composition root\n   * (`ensureGlobalUserContext`). When absent, onboarding network ranking is skipped.\n   */\n  getUserContextText?: (userId: string) => Promise<string>;\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// TOOL RESULT HELPERS\n// ═══════════════════════════════════════════════════════════════════════════════\n\nexport function success<T>(data: T): string {\n  return JSON.stringify({ success: true, data });\n}\n\nexport function error(\n  message: string,\n  debugSteps?: Array<{ step: string; detail?: string; data?: Record<string, unknown> }>\n): string {\n  return JSON.stringify({\n    success: false,\n    error: message,\n    ...(debugSteps?.length ? { debugSteps } : {}),\n  });\n}\n\n/** Return needsClarification for missing required fields. */\nexport function needsClarification(params: {\n  missingFields: string[];\n  message: string;\n}): string {\n  return JSON.stringify({\n    success: false,\n    needsClarification: true,\n    ...params,\n  });\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// CONSTANTS & UTILITIES\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/** Matches http/https URLs in text; captures full URL. */\nconst URL_IN_TEXT_REGEX = /https?:\\/\\/[^\\s\"'<>)\\]]+/gi;\n\n/**\n * Matches bare domain URLs without protocol (e.g. github.com/foo, www.example.com).\n * Requires at least a SLD.TLD pattern followed by optional path.\n * Negative lookbehind ensures we don't double-match URLs already caught by URL_IN_TEXT_REGEX.\n */\nconst BARE_URL_REGEX = /(?<!\\w:\\/\\/)(?<![/\\w])(?:www\\.)?[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\\.(?:com|org|net|io|dev|co|ai|app|xyz|me|info|gg|so|sh|cc|ly|fm|tv|to|tech|design|network|world|edu|gov|mil|int|us|uk|eu|de|fr|ca|au|jp|cn|in|br|nl|se|no|fi|dk|ch|at|be|it|es|pt|pl|cz|ru|kr|tw|hk|sg|nz|za|mx|ar|cl|id|ph|th|vn|my|ie)(?:\\/[^\\s\"'<>)\\]]*)?/gi;\n\n/** UUID v4 format: 8-4-4-4-12 hex chars (e.g. c2505011-2e45-426e-81dd-b9abb9b72023) */\nexport const UUID_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/**\n * Resolves an array of network IDs to their display titles.\n * Skips any IDs that don't resolve (deleted or invalid networks).\n */\nexport async function resolveIndexNames(\n  database: { getNetwork(id: string): Promise<{ id: string; title: string } | null> },\n  networkIds: string[]\n): Promise<string[]> {\n  if (networkIds.length === 0) return [];\n  const results = await Promise.all(\n    networkIds.map(id => database.getNetwork(id))\n  );\n  return results.filter(Boolean).map(idx => idx!.title);\n}\n\n/**\n * Normalize a URL string: if it lacks a protocol, prepend \"https://\".\n * Returns the normalized URL or null if the result is not a valid URL.\n */\nexport function normalizeUrl(raw: string): string | null {\n  let url = raw.replace(/[.,;:!?)]+$/, \"\").trim();\n  if (!/^https?:\\/\\//i.test(url)) {\n    url = `https://${url}`;\n  }\n  try {\n    new URL(url);\n    return url;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Extract unique, valid URLs from a string (e.g. user message or details).\n * Handles both full URLs (https://...) and bare domains (github.com/...).\n */\nexport function extractUrls(text: string): string[] {\n  if (!text || typeof text !== \"string\") return [];\n\n  const seen = new Set<string>();\n  const out: string[] = [];\n\n  // Pass 1: full protocol URLs\n  const fullMatches = text.match(URL_IN_TEXT_REGEX) ?? [];\n  for (const raw of fullMatches) {\n    const url = normalizeUrl(raw);\n    if (url && !seen.has(url)) {\n      seen.add(url);\n      out.push(url);\n    }\n  }\n\n  // Pass 2: bare domain URLs (e.g. github.com/foo)\n  const bareMatches = text.match(BARE_URL_REGEX) ?? [];\n  for (const raw of bareMatches) {\n    const url = normalizeUrl(raw);\n    if (url && !seen.has(url)) {\n      seen.add(url);\n      out.push(url);\n    }\n  }\n\n  return out;\n}\n\nconst SENSITIVE_FIELD_KEYS = new Set([\n  \"secret\",\n  \"webhooksecret\",\n  \"password\",\n  \"apikey\",\n  \"token\",\n  \"accesstoken\",\n  \"refreshtoken\",\n  \"privatekey\",\n  \"authtoken\",\n  \"bearertoken\",\n  \"clientsecret\",\n]);\n\n/**\n * Recursively redacts sensitive field values from an arbitrary payload before\n * it is passed to a structured logger. Matches field names case-insensitively\n * and ignoring underscores, so `api_key`, `apiKey`, and `API_KEY` all match.\n * Non-sensitive fields are passed through unchanged. Never mutates the input —\n * returns a new value.\n *\n * Intended for structured-log redaction only. Do NOT use as a security\n * boundary for data in motion.\n *\n * @param value - Arbitrary JSON-like payload (query object, config blob, etc.)\n * @returns A new value with sensitive fields replaced by `\"[redacted]\"`.\n */\nexport function redactSensitiveFields(value: unknown): unknown {\n  if (value === null || typeof value !== \"object\") return value;\n  if (Array.isArray(value)) {\n    return value.map((item) => redactSensitiveFields(item));\n  }\n  const out: Record<string, unknown> = {};\n  for (const [key, inner] of Object.entries(value as Record<string, unknown>)) {\n    const normalized = key.toLowerCase().replace(/_/g, \"\");\n    if (SENSITIVE_FIELD_KEYS.has(normalized)) {\n      out[key] = \"[redacted]\";\n    } else {\n      out[key] = redactSensitiveFields(inner);\n    }\n  }\n  return out;\n}\n"]}
+{"version":3,"file":"tool.helpers.js","sourceRoot":"/","sources":["shared/agent/tool.helpers.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAqQ9E;;;GAGG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YACE,OAAe,EACC,UAAkB,EAClB,IAAwE;QAExF,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAoE;QAGxF,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAWxC;IACC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC;IAE3E,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzD,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;QACxB,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAC3B,QAAQ,CAAC,qBAAqB,CAAC,MAAM,CAAC;KACvC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAoB,UAAU,IAAI,IAAI,CAAC;IAExD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,sBAAsB,CAC9B,gBAAgB,EAChB,GAAG,EACH,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,GAAuC,SAAS,CAAC;IAChE,IAAI,oBAAoB,GAAgD,SAAS,CAAC;IAClF,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,SAA6B,CAAC;IAElC,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjD,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;YAC9B,QAAQ,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC;YAC3C,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC;SACzC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,sBAAsB,CAC9B,iBAAiB,EACjB,GAAG,EACH,iBAAiB,CAClB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,sBAAsB,CAC9B,oCAAoC,EACpC,GAAG,EACH,2BAA2B,CAC5B,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;QACpE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,UAAU,GAAG,CAAC,MAAM,QAAQ,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,IAAI,SAAS,CAAC;QACpF,CAAC;QACD,WAAW,GAAG;YACZ,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,UAAU,EAAE,WAAW,IAAI,IAAI;YACvC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,WAAW;YAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;SACrC,CAAC;QACF,OAAO,GAAG,KAAK,CAAC;QAChB,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;QACxB,oBAAoB,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;IACpD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAE5C,6DAA6D;IAC7D,6EAA6E;IAC7E,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;QAChD,WAAW,EAAE,YAAY;QACzB,GAAG,KAAK;KACT,CAAC,CAAC;IAEH,OAAO;QACL,MAAM;QACN,QAAQ;QACR,SAAS;QACT,SAAS;QACT,GAAG,KAAK;QACR,SAAS;QACT,OAAO;QACP,IAAI;QACJ,WAAW;QACX,YAAY;QACZ,UAAU,EAAE,iBAAiB;QAC7B,WAAW;QACX,oBAAoB;QACpB,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC;QAC7C,OAAO;QACP,eAAe;QACf,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAsMD,kFAAkF;AAClF,sBAAsB;AACtB,kFAAkF;AAElF,MAAM,UAAU,OAAO,CAAI,IAAO;IAChC,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,KAAK,CACnB,OAAe,EACf,UAAqF;IAErF,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,OAAO;QACd,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,kBAAkB,CAAC,MAGlC;IACC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,OAAO,EAAE,KAAK;QACd,kBAAkB,EAAE,IAAI;QACxB,GAAG,MAAM;KACV,CAAC,CAAC;AACL,CAAC;AAED,kFAAkF;AAClF,wBAAwB;AACxB,kFAAkF;AAElF,0DAA0D;AAC1D,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AAEvD;;;;GAIG;AACH,MAAM,cAAc,GAAG,+TAA+T,CAAC;AAEvV,uFAAuF;AACvF,MAAM,CAAC,MAAM,UAAU,GAAG,iEAAiE,CAAC;AAE5F;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAmF,EACnF,UAAoB;IAEpB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAC9C,CAAC;IACF,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAI,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,IAAI,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,GAAG,GAAG,WAAW,GAAG,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IAEzB,6BAA6B;IAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;IACxD,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,QAAQ;IACR,eAAe;IACf,UAAU;IACV,QAAQ;IACR,OAAO;IACP,aAAa;IACb,cAAc;IACd,YAAY;IACZ,WAAW;IACX,aAAa;IACb,cAAc;CACf,CAAC,CAAC;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC5E,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["import { z } from \"zod\";\nimport type { ModelConfig } from \"./model.config.js\";\nimport { deriveAllowedNetworkIds, scopeFromNetworkId } from \"./tool.scope.js\";\nimport type { ToolScopeType } from \"./tool.scope.js\";\nimport type { UserIdentity } from \"../schemas/identity.schema.js\";\nimport type { ChatGraphCompositeDatabase, NetworkMembership, UserRecord, UserDatabase, SystemDatabase, NegotiationGraphDatabase } from \"../interfaces/database.interface.js\";\nimport type { Scraper } from \"../interfaces/scraper.interface.js\";\nimport type { Cache, HydeCache } from \"../interfaces/cache.interface.js\";\nimport type { CompiledOpportunityGraph } from \"../../opportunity/opportunity.discover.js\";\nimport type { IntegrationAdapter } from \"../interfaces/integration.interface.js\";\nimport type { ContactServiceAdapter } from \"../interfaces/contact.interface.js\";\nimport type { ProfileEnricher } from \"../interfaces/enrichment.interface.js\";\nimport type { IntentGraphQueue } from \"../interfaces/queue.interface.js\";\nimport type { ChatSessionReader } from \"../interfaces/chat-session.interface.js\";\nimport type { ChatSummaryReader } from \"../interfaces/chat-summary.interface.js\";\nimport type { ChatMessageWriter } from \"../interfaces/chat-message-writer.interface.js\";\nimport type { QuestionGeneratorReader } from \"../interfaces/question-generator.interface.js\";\nimport type { NegotiationSummaryReader } from \"../interfaces/negotiation-summary.interface.js\";\nimport type { Embedder } from \"../interfaces/embedder.interface.js\";\nimport type { AgentDatabase } from \"../interfaces/agent.interface.js\";\nimport type { NegotiationTimeoutQueue } from \"../interfaces/negotiation-events.interface.js\";\nimport type { AgentDispatcher } from \"../interfaces/agent-dispatcher.interface.js\";\nimport type { DeliveryLedger } from \"../interfaces/delivery-ledger.interface.js\";\nimport type { MintConnectLink } from \"../interfaces/connect-link.interface.js\";\nimport type { QuestionerDatabase } from \"../interfaces/questioner.interface.js\";\nimport type { QuestionerEnqueueFn } from \"../../questioner/questioner.types.js\";\nimport type { PendingQuestionSummary } from \"../schemas/pending-question.schema.js\";\nimport type { QuestionMode } from \"../schemas/question.schema.js\";\nimport type { DiscoveryRunQueue, DiscoveryRunStore } from \"../interfaces/discovery-run.interface.js\";\nimport type { EnrichmentRunQueue, EnrichmentRunStore } from \"../interfaces/enrichment-run.interface.js\";\n\nexport type IdentityContext = UserIdentity | null;\n\nexport interface ToolErrorReport {\n  operation: string;\n  subsystem?: string;\n  toolName?: string;\n  userId?: string;\n  tags?: Record<string, string | number | boolean | null | undefined>;\n  context?: Record<string, unknown>;\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// COMPILED GRAPH TYPE\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/** Minimal interface for an invokable compiled LangGraph. */\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport type CompiledGraph = { invoke: (input: any) => Promise<any> };\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// TOOL CONTEXT TYPES\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/**\n * Resolved context available to every tool handler.\n * Contains the current user and optional index identity, resolved from DB at init.\n * The LLM can see this context (via system prompt) but cannot change it.\n */\nexport interface ResolvedToolContext {\n  // Legacy flat fields (kept for backwards compatibility in tools/prompts).\n  userId: string;\n  userName: string;\n  userEmail: string;\n  /** Focused network for scoped chats/agents. Prefer `scopeType`/`scopeId` in new code. */\n  networkId?: string;\n  /** Focused request scope type. Currently only network scopes exist. */\n  scopeType?: ToolScopeType;\n  /** Focused request scope id. When `scopeType === 'network'`, this is the focused network id. */\n  scopeId?: string;\n  indexName?: string;\n  /** True when chat is index-scoped and the user owns the index. */\n  isOwner?: boolean;\n  // Rich identity context for prompt/tool orchestration.\n  user: UserRecord;\n  userProfile: IdentityContext;\n  userNetworks: NetworkMembership[];\n  /**\n   * @deprecated indexScope is legacy concrete network reach. New code should derive reach\n   * from `scopeType`/`scopeId` plus `userNetworks` via `tool.scope.ts`.\n   * Removed after call sites are migrated in this plan.\n   */\n  indexScope: string[];\n  scopedIndex?: {\n    id: string;\n    title: string;\n    prompt: string | null;\n    type?: string;\n    metadata?: Record<string, unknown>;\n    permissions?: Record<string, unknown>;\n  };\n  scopedMembershipRole?: \"owner\" | \"member\";\n  /** True when user has not completed onboarding (onboarding.completedAt is null). */\n  isOnboarding: boolean;\n  /** True when the user has a non-empty name. */\n  hasName: boolean;\n  /** Chat session ID when tools are used in a chat; used for draft opportunities (context.conversationId). */\n  sessionId?: string;\n  /** True when the request originates from an MCP transport (no interactive UI available). */\n  isMcp?: boolean;\n  /** Agent ID when the request originates from an API key linked to an agent. */\n  agentId?: string;\n  /**\n   * Receiver's rendering surface declared by the MCP client via the\n   * `x-index-surface` request header. `'telegram'` means the MCP response is\n   * being rendered inside a Telegram chat; anything\n   * else (including `undefined`) is treated as web. Forwarded into\n   * `mintConnectLink` so the click-time redirect can branch.\n   */\n  clientSurface?: 'telegram' | 'web';\n  /**\n   * True when the CONTACTS_ENABLED feature flag is on. Carried from the\n   * composition root so prompt modules can gate contact-import guidance —\n   * when false/unset, the contacts prompt module is not injected, so the\n   * orchestrator never advertises Gmail import / add_contact (whose tools\n   * are also de-registered). Fail-closed: treat only `true` as enabled.\n   */\n  contactsEnabled?: boolean;\n}\n\n/**\n * Dependencies passed when creating tools for a user session.\n * Includes DB adapters, embedder, and scraper.\n *\n * Note: userDb and systemDb are optional inputs - if not provided, createChatTools\n * will create them internally from the chatDatabaseAdapter singleton.\n */\nexport interface ToolContext {\n  userId: string;\n  /** @deprecated Use userDb or systemDb instead. Kept for backwards compatibility. */\n  database: ChatGraphCompositeDatabase;\n  /** Context-bound database for accessing the authenticated user's own resources. Created internally if not provided. */\n  userDb?: UserDatabase;\n  /** Context-bound database for LLM/system operations on cross-user resources within shared indexes. Created internally if not provided. */\n  systemDb?: SystemDatabase;\n  embedder: Embedder;\n  scraper: Scraper;\n  /** When set, chat is scoped to this index; tools use it as the default focused network. */\n  networkId?: string;\n  /** Focused request scope type. Currently only `network` is supported. */\n  scopeType?: ToolScopeType;\n  /** Focused request scope id. When omitted, `networkId` is converted to a network scope. */\n  scopeId?: string;\n  /** @deprecated indexScope is legacy; use `scopeType`/`scopeId`, retained until wiring phases migrate call sites. */\n  indexScope?: string[];\n  /** Chat session ID when creating tools for a chat; enables draft opportunities with context.conversationId. */\n  sessionId?: string;\n\n  // ─── Protocol-level dependencies (injected by composition root) ──────────\n  /** General-purpose cache (e.g. for tool results). */\n  cache: Cache;\n  /** Dedicated cache for HyDE graph (may be same instance as cache). */\n  hydeCache: HydeCache;\n  /** External integration platform adapter (OAuth, tool actions). */\n  integration: IntegrationAdapter;\n  /** Queue for enqueuing follow-up intent processing (HyDE generation/deletion). */\n  intentQueue: IntentGraphQueue;\n  /** Contact management operations. */\n  contactService: ContactServiceAdapter;\n  /**\n   * When false (or unset), the contact import / manual-add tools\n   * (import_contacts, add_contact, import_gmail_contacts) are not registered.\n   * Injected by the composition root from CONTACTS_ENABLED. Read/remove/search\n   * contact tools are always registered.\n   */\n  contactsEnabled?: boolean;\n  /** Chat session reader for loading conversation history. */\n  chatSession: ChatSessionReader;\n  /** Read-through chat-session digest. Optional; consumers fall back to undefined `chatContext`. */\n  chatSummary?: ChatSummaryReader;\n  /** Writes user messages into the user's most-recent chat session (Slice 5 MCP elicitation). */\n  chatMessageWriter?: ChatMessageWriter;\n  /** Decision-question generator. Optional; consumers fall back to no `questions`. */\n  questionGenerator?: QuestionGeneratorReader;\n  /**\n   * Optional async question enqueue callback. When provided, question generation\n   * is dispatched asynchronously to the QuestionerQueue instead of running inline.\n   * Injected by the composition root when QUESTIONER_ENABLED=true.\n   */\n  questionerEnqueue?: QuestionerEnqueueFn;\n  /** Negotiation-digest summarizer. Optional; consumers fall back to deterministic digests. */\n  negotiationSummary?: NegotiationSummaryReader;\n  /** Profile enrichment from external data sources. */\n  enricher: ProfileEnricher;\n  /** Database adapter for negotiation/conversation operations. */\n  negotiationDatabase: NegotiationGraphDatabase;\n  /** Integration importer for bulk contact import from toolkits. */\n  integrationImporter: {\n    importContacts(userId: string, toolkit: string): Promise<{\n      imported: number;\n      skipped: number;\n      newContacts: number;\n      existingContacts: number;\n    }>;\n  };\n  /** Factory for user-scoped database access. */\n  createUserDatabase: (db: ChatGraphCompositeDatabase, userId: string) => UserDatabase;\n  /** Factory for system-scoped database access. */\n  createSystemDatabase: (db: ChatGraphCompositeDatabase, userId: string, indexScope: string[], embedder?: Embedder) => SystemDatabase;\n  /** Optional runtime LLM config. Pass to override env vars for API key, model, etc. */\n  modelConfig?: ModelConfig;\n  /** Manages negotiation timeout jobs (optional — enables AI fallback on external agent timeout). */\n  negotiationTimeoutQueue?: NegotiationTimeoutQueue;\n  /** Agent registry database adapter (optional — absent when host does not support agents). */\n  agentDatabase?: AgentDatabase;\n  /** Grants the default system-agent permissions after onboarding (optional). */\n  grantDefaultSystemPermissions?: (userId: string) => Promise<void>;\n  /** Dispatcher for routing negotiation turns to personal agents (optional — falls back to system AI). */\n  agentDispatcher?: AgentDispatcher;\n  /** Enqueue a negotiate_existing job after introducer approval (optional). */\n  queueNegotiateExisting?: (opportunityId: string, userId: string) => Promise<void>;\n  /** Delivery ledger for committing opportunity delivery rows (optional — absent in chat context). */\n  deliveryLedger?: DeliveryLedger;\n  /** Persistence for async MCP discovery runs (optional — absent in non-MCP/test contexts). */\n  discoveryRuns?: DiscoveryRunStore;\n  /** Queue for async MCP discovery run execution (optional — absent in non-MCP/test contexts). */\n  discoveryRunQueue?: DiscoveryRunQueue;\n  /** Persistence for async MCP profile runs (optional — absent in non-MCP/test contexts). */\n  enrichmentRuns?: EnrichmentRunStore;\n  /** Queue for async MCP profile run execution (optional — absent in non-MCP/test contexts). */\n  enrichmentRunQueue?: EnrichmentRunQueue;\n  /**\n   * Legacy direct-token minting for opportunity accept redirects.\n   * Prefer `mintConnectLink` for user-facing links.\n   */\n  mintConnectToken?: (userId: string, opportunityId: string) => Promise<string>;\n  /** Mints (or reuses) a short connect link, snapshotting the greeting (optional — absent in non-MCP contexts). */\n  mintConnectLink?: MintConnectLink;\n  /** Frontend base URL for building profile links (e.g. https://index.network, optional). */\n  frontendUrl?: string;\n  /** API base URL for building opportunity accept links (e.g. https://protocol.index.network, optional). */\n  apiBaseUrl?: string;\n  /** Persistence for structured questions generated by the QuestionerAgent (optional). */\n  questionerDatabase?: QuestionerDatabase;\n  /** Optional host-side error reporter for swallowed protocol/tool errors. */\n  reportToolError?: (error: unknown, report: ToolErrorReport) => void;\n  /**\n   * Optional host-side per-principal MCP call throttle. Invoked once per MCP\n   * tool dispatch (after identity resolves, before any DB work). When the\n   * returned decision is `allowed: false`, the dispatch short-circuits with a\n   * rate-limit error carrying `retryAfterSec`. Absent in chat/test contexts.\n   */\n  mcpRateLimiter?: (input: { userId: string; agentId?: string; toolName: string }) => Promise<{\n    allowed: boolean;\n    retryAfterSec?: number;\n    limit?: number;\n    scope?: 'tool' | 'principal';\n  }>;\n  /** Optional premise lifecycle event callbacks. Fired by premise tools after successful operations. */\n  premiseEvents?: {\n    onCreated?: (premiseId: string, userId: string) => void;\n    onUpdated?: (premiseId: string, userId: string) => void;\n    onRetracted?: (premiseId: string, userId: string) => void;\n  };\n}\n\n/**\n * All external dependencies needed to initialize the protocol tool engine.\n * The host application (composition root) must provide concrete implementations.\n * This is the subset of ToolContext that is NOT per-request (no userId, indexId, sessionId).\n */\nexport type ProtocolDeps = Omit<ToolContext, 'userId' | 'indexId' | 'sessionId' | 'userDb' | 'systemDb'>;\n\n/**\n * Thrown when a requested chat scope is invalid for the authenticated user.\n * Controllers can map this to an HTTP status code.\n */\nexport class ChatContextAccessError extends Error {\n  constructor(\n    message: string,\n    public readonly statusCode: number,\n    public readonly code: \"USER_NOT_FOUND\" | \"INDEX_NOT_FOUND\" | \"INDEX_MEMBERSHIP_REQUIRED\"\n  ) {\n    super(message);\n    this.name = \"ChatContextAccessError\";\n  }\n}\n\n/**\n * Resolve the canonical context used by chat tools and system prompt.\n * This preloads user identity, profile, index memberships, and scoped index role.\n */\nexport async function resolveChatContext(params: {\n  database: Pick<\n    ChatGraphCompositeDatabase,\n    \"getUser\" | \"getProfile\" | \"getNetworkMemberships\" | \"getNetworkMembership\" | \"getNetwork\" | \"isIndexOwner\" | \"isNetworkMember\"\n  >;\n  userId: string;\n  networkId?: string;\n  /** Chat session ID for draft opportunities (stored as context.conversationId). */\n  sessionId?: string;\n  /** CONTACTS_ENABLED flag, forwarded onto the resolved context for prompt gating. */\n  contactsEnabled?: boolean;\n}): Promise<ResolvedToolContext> {\n  const { database, userId, networkId, sessionId, contactsEnabled } = params;\n\n  const [user, rawProfile, userNetworks] = await Promise.all([\n    database.getUser(userId),\n    database.getProfile(userId),\n    database.getNetworkMemberships(userId),\n  ]);\n\n  const userProfile: IdentityContext = rawProfile ?? null;\n\n  if (!user) {\n    throw new ChatContextAccessError(\n      \"User not found\",\n      404,\n      \"USER_NOT_FOUND\"\n    );\n  }\n\n  let scopedIndex: ResolvedToolContext[\"scopedIndex\"] = undefined;\n  let scopedMembershipRole: ResolvedToolContext[\"scopedMembershipRole\"] = undefined;\n  let isOwner = false;\n  let indexName: string | undefined;\n\n  if (networkId) {\n    const [index, isMember, owner] = await Promise.all([\n      database.getNetwork(networkId),\n      database.isNetworkMember(networkId, userId),\n      database.isIndexOwner(networkId, userId),\n    ]);\n\n    if (!index) {\n      throw new ChatContextAccessError(\n        \"Index not found\",\n        404,\n        \"INDEX_NOT_FOUND\"\n      );\n    }\n\n    if (!isMember) {\n      throw new ChatContextAccessError(\n        \"You are not a member of this index\",\n        403,\n        \"INDEX_MEMBERSHIP_REQUIRED\"\n      );\n    }\n\n    let membership = userNetworks.find((m) => m.networkId === index.id);\n    if (membership === undefined) {\n      membership = (await database.getNetworkMembership(index.id, userId)) ?? undefined;\n    }\n    scopedIndex = {\n      id: index.id,\n      title: index.title,\n      prompt: membership?.indexPrompt ?? null,\n      type: index.type ?? 'community',\n      metadata: index.metadata ?? {},\n      permissions: index.permissions ?? {},\n    };\n    isOwner = owner;\n    indexName = index.title;\n    scopedMembershipRole = owner ? \"owner\" : \"member\";\n  }\n\n  const userName = user.name ?? \"Unknown\";\n  const userEmail = user.email ?? \"\";\n  const hasName = !!user.name?.trim();\n\n  const scope = scopeFromNetworkId(networkId);\n\n  // Deprecated compatibility reach. New call sites should call\n  // deriveAllowedNetworkIds({ memberships: userNetworks, ...scope }) directly.\n  const allowedNetworkIds = deriveAllowedNetworkIds({\n    memberships: userNetworks,\n    ...scope,\n  });\n\n  return {\n    userId,\n    userName,\n    userEmail,\n    networkId,\n    ...scope,\n    indexName,\n    isOwner,\n    user,\n    userProfile,\n    userNetworks,\n    indexScope: allowedNetworkIds,\n    scopedIndex,\n    scopedMembershipRole,\n    isOnboarding: !(user.onboarding?.completedAt),\n    hasName,\n    contactsEnabled,\n    ...(sessionId !== undefined ? { sessionId } : {}),\n  };\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// DEFINE TOOL TYPE\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/**\n * Type for the `defineTool` closure created in `createChatTools`.\n * Auto-injects resolved context and provides uniform logging / error handling.\n */\nexport type DefineTool = <T extends z.ZodType>(opts: {\n  name: string;\n  description: string;\n  querySchema: T;\n  handler: (input: { context: ResolvedToolContext; query: z.infer<T> }) => Promise<string>;\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\n}) => any;\n\n/**\n * A raw tool definition before LangChain wrapping.\n * Used by the tool registry for direct HTTP invocation.\n */\nexport interface RawToolDefinition {\n  name: string;\n  description: string;\n  schema: z.ZodType;\n  handler: (input: { context: ResolvedToolContext; query: unknown }) => Promise<string>;\n}\n\n/**\n * Registry mapping tool names to their raw definitions.\n */\nexport type ToolRegistry = Map<string, RawToolDefinition>;\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// TOOL DEPENDENCIES\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/**\n * Shared dependencies available to all tool domain factories.\n * Passed by `createChatTools` after compiling all subgraphs.\n */\nexport interface ToolDeps {\n  /** @deprecated Use userDb or systemDb instead. Kept for backwards compatibility. */\n  database: ChatGraphCompositeDatabase;\n  /** Context-bound database for accessing the authenticated user's own resources. */\n  userDb: UserDatabase;\n  /** Context-bound database for LLM/system operations on cross-user resources within shared indexes. */\n  systemDb: SystemDatabase;\n  scraper: Scraper;\n  embedder: import('../interfaces/embedder.interface.js').Embedder;\n  cache: Cache;\n  integration: IntegrationAdapter;\n  contactService: ContactServiceAdapter;\n  /**\n   * When false (or unset), the contact import / manual-add tools\n   * (import_contacts, add_contact, import_gmail_contacts) are not registered.\n   * Injected by the composition root from CONTACTS_ENABLED. Read/remove/search\n   * contact tools are always registered.\n   */\n  contactsEnabled?: boolean;\n  integrationImporter: {\n    importContacts(userId: string, toolkit: string): Promise<{\n      imported: number;\n      skipped: number;\n      newContacts: number;\n      existingContacts: number;\n    }>;\n  };\n  enricher: ProfileEnricher;\n  /** Database adapter for negotiation/conversation operations. */\n  negotiationDatabase: NegotiationGraphDatabase;\n  /** Chat session reader for exposing the caller's past conversations as MCP tools. */\n  chatSession?: ChatSessionReader;\n  /** Read-through chat-session digest. Optional; consumers fall back to undefined `chatContext`. */\n  chatSummary?: ChatSummaryReader;\n  /**\n   * Test seam for opportunity discovery helpers. Production compositions leave\n   * this unset so tools call the real discovery module directly.\n   */\n  opportunityDiscovery?: {\n    runDiscoverFromQuery?: (input: unknown) => Promise<unknown>;\n    continueDiscovery?: (input: unknown) => Promise<unknown>;\n  };\n  /**\n   * Test seam for opportunity card presentation helpers. Production\n   * compositions leave this unset so tools construct the real presenter.\n   */\n  opportunityPresentation?: {\n    createPresenter?: () => { presentHomeCard(input: unknown): Promise<unknown> };\n    gatherPresenterContext?: (...args: unknown[]) => Promise<unknown>;\n  };\n  /** Writes user messages into the user's most-recent chat session (Slice 5 MCP elicitation). */\n  chatMessageWriter?: ChatMessageWriter;\n  /** Decision-question generator. Optional; consumers fall back to no `questions`. */\n  questionGenerator?: QuestionGeneratorReader;\n  /**\n   * Optional async question enqueue callback. When provided, question generation\n   * is dispatched asynchronously to the QuestionerQueue instead of running inline\n   * via the `questionGenerator`. Injected by the composition root when\n   * QUESTIONER_ENABLED=true.\n   */\n  questionerEnqueue?: QuestionerEnqueueFn;\n  /**\n   * Lookup pending questions for a user, optionally filtered by source,\n   * detection mode, or capped by count (hosts apply `limit` SQL-side).\n   * Used by tools to attach contextually relevant questions to their results.\n   * Injected by the composition root — absent when question delivery is disabled.\n   */\n  findPendingQuestions?: (\n    userId: string,\n    filters?: {\n      sourceType?: string;\n      sourceId?: string;\n      /** Restrict to questions whose actor carries this network id. */\n      networkId?: string;\n      /** Restrict to questions whose detection mode is in this set. */\n      modes?: QuestionMode[];\n      /** Maximum rows to return; hosts should apply this in the query. */\n      limit?: number;\n    },\n  ) => Promise<PendingQuestionSummary[]>;\n  /** Negotiation-digest summarizer. Optional; consumers fall back to deterministic digests. */\n  negotiationSummary?: NegotiationSummaryReader;\n  /** Manages negotiation timeout jobs (optional — enables AI fallback on external agent timeout). */\n  negotiationTimeoutQueue?: NegotiationTimeoutQueue;\n  /** Agent registry database adapter (optional — absent when host does not support agents). */\n  agentDatabase?: AgentDatabase;\n  /** Grants the default system-agent permissions after onboarding (optional). */\n  grantDefaultSystemPermissions?: (userId: string) => Promise<void>;\n  /** Dispatcher for routing negotiation turns to personal agents (optional — falls back to system AI). */\n  agentDispatcher?: AgentDispatcher;\n  /** Delivery ledger for committing opportunity delivery rows (optional — absent in chat context). */\n  deliveryLedger?: DeliveryLedger;\n  /** Persistence for async MCP discovery runs (optional — absent in non-MCP/test contexts). */\n  discoveryRuns?: DiscoveryRunStore;\n  /** Queue for async MCP discovery run execution (optional — absent in non-MCP/test contexts). */\n  discoveryRunQueue?: DiscoveryRunQueue;\n  /** Persistence for async MCP profile runs (optional — absent in non-MCP/test contexts). */\n  enrichmentRuns?: EnrichmentRunStore;\n  /** Queue for async MCP profile run execution (optional — absent in non-MCP/test contexts). */\n  enrichmentRunQueue?: EnrichmentRunQueue;\n  /**\n   * Legacy direct-token minting for opportunity accept redirects.\n   * Prefer `mintConnectLink` for user-facing links.\n   */\n  mintConnectToken?: (userId: string, opportunityId: string) => Promise<string>;\n  /** Mints (or reuses) a short connect link, snapshotting the greeting (optional — absent in non-MCP contexts). */\n  mintConnectLink?: MintConnectLink;\n  /** Frontend base URL for building profile links (e.g. https://index.network, optional). */\n  frontendUrl?: string;\n  /** API base URL for building opportunity accept links (e.g. https://protocol.index.network, optional). */\n  apiBaseUrl?: string;\n  /** Optional host-side error reporter for swallowed protocol/tool errors. */\n  reportToolError?: (error: unknown, report: ToolErrorReport) => void;\n  /**\n   * Optional host-side per-principal MCP call throttle. Invoked once per MCP\n   * tool dispatch (after identity resolves, before any DB work). When the\n   * returned decision is `allowed: false`, the dispatch short-circuits with a\n   * rate-limit error carrying `retryAfterSec`. Absent in chat/test contexts.\n   */\n  mcpRateLimiter?: (input: { userId: string; agentId?: string; toolName: string }) => Promise<{\n    allowed: boolean;\n    retryAfterSec?: number;\n    limit?: number;\n    scope?: 'tool' | 'principal';\n  }>;\n  /** Optional premise lifecycle event callbacks. Fired by premise tools after successful operations. */\n  premiseEvents?: {\n    onCreated?: (premiseId: string, userId: string) => void;\n    onUpdated?: (premiseId: string, userId: string) => void;\n    onRetracted?: (premiseId: string, userId: string) => void;\n  };\n  graphs: {\n    profile: CompiledGraph;\n    intent: CompiledGraph;\n    index: CompiledGraph;\n    networkMembership: CompiledGraph;\n    intentIndex: CompiledGraph;\n    opportunity: CompiledOpportunityGraph;\n    premise: CompiledGraph;\n  };\n  /**\n   * Optional network ranking override for `read_networks`. Injected by tests or custom compositions.\n   * When absent, defaults to `NetworkRecommender.invoke()` with a lazy module-level singleton.\n   */\n  networkRanker?: (input: {\n    userContext: string;\n    networks: Array<{ networkId: string; renderedContext: string }>;\n  }) => Promise<{ rankedNetworkIds: string[] } | null>;\n  /**\n   * Resolve a user's global user_context paragraph (profile-replacing identity text),\n   * generating it on demand when absent. Injected by the backend composition root\n   * (`ensureGlobalUserContext`). When absent, onboarding network ranking is skipped.\n   */\n  getUserContextText?: (userId: string) => Promise<string>;\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// TOOL RESULT HELPERS\n// ═══════════════════════════════════════════════════════════════════════════════\n\nexport function success<T>(data: T): string {\n  return JSON.stringify({ success: true, data });\n}\n\nexport function error(\n  message: string,\n  debugSteps?: Array<{ step: string; detail?: string; data?: Record<string, unknown> }>\n): string {\n  return JSON.stringify({\n    success: false,\n    error: message,\n    ...(debugSteps?.length ? { debugSteps } : {}),\n  });\n}\n\n/** Return needsClarification for missing required fields. */\nexport function needsClarification(params: {\n  missingFields: string[];\n  message: string;\n}): string {\n  return JSON.stringify({\n    success: false,\n    needsClarification: true,\n    ...params,\n  });\n}\n\n// ═══════════════════════════════════════════════════════════════════════════════\n// CONSTANTS & UTILITIES\n// ═══════════════════════════════════════════════════════════════════════════════\n\n/** Matches http/https URLs in text; captures full URL. */\nconst URL_IN_TEXT_REGEX = /https?:\\/\\/[^\\s\"'<>)\\]]+/gi;\n\n/**\n * Matches bare domain URLs without protocol (e.g. github.com/foo, www.example.com).\n * Requires at least a SLD.TLD pattern followed by optional path.\n * Negative lookbehind ensures we don't double-match URLs already caught by URL_IN_TEXT_REGEX.\n */\nconst BARE_URL_REGEX = /(?<!\\w:\\/\\/)(?<![/\\w])(?:www\\.)?[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\\.(?:com|org|net|io|dev|co|ai|app|xyz|me|info|gg|so|sh|cc|ly|fm|tv|to|tech|design|network|world|edu|gov|mil|int|us|uk|eu|de|fr|ca|au|jp|cn|in|br|nl|se|no|fi|dk|ch|at|be|it|es|pt|pl|cz|ru|kr|tw|hk|sg|nz|za|mx|ar|cl|id|ph|th|vn|my|ie)(?:\\/[^\\s\"'<>)\\]]*)?/gi;\n\n/** UUID v4 format: 8-4-4-4-12 hex chars (e.g. c2505011-2e45-426e-81dd-b9abb9b72023) */\nexport const UUID_REGEX = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/**\n * Resolves an array of network IDs to their display titles.\n * Skips any IDs that don't resolve (deleted or invalid networks).\n */\nexport async function resolveIndexNames(\n  database: { getNetwork(id: string): Promise<{ id: string; title: string } | null> },\n  networkIds: string[]\n): Promise<string[]> {\n  if (networkIds.length === 0) return [];\n  const results = await Promise.all(\n    networkIds.map(id => database.getNetwork(id))\n  );\n  return results.filter(Boolean).map(idx => idx!.title);\n}\n\n/**\n * Normalize a URL string: if it lacks a protocol, prepend \"https://\".\n * Returns the normalized URL or null if the result is not a valid URL.\n */\nexport function normalizeUrl(raw: string): string | null {\n  let url = raw.replace(/[.,;:!?)]+$/, \"\").trim();\n  if (!/^https?:\\/\\//i.test(url)) {\n    url = `https://${url}`;\n  }\n  try {\n    new URL(url);\n    return url;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Extract unique, valid URLs from a string (e.g. user message or details).\n * Handles both full URLs (https://...) and bare domains (github.com/...).\n */\nexport function extractUrls(text: string): string[] {\n  if (!text || typeof text !== \"string\") return [];\n\n  const seen = new Set<string>();\n  const out: string[] = [];\n\n  // Pass 1: full protocol URLs\n  const fullMatches = text.match(URL_IN_TEXT_REGEX) ?? [];\n  for (const raw of fullMatches) {\n    const url = normalizeUrl(raw);\n    if (url && !seen.has(url)) {\n      seen.add(url);\n      out.push(url);\n    }\n  }\n\n  // Pass 2: bare domain URLs (e.g. github.com/foo)\n  const bareMatches = text.match(BARE_URL_REGEX) ?? [];\n  for (const raw of bareMatches) {\n    const url = normalizeUrl(raw);\n    if (url && !seen.has(url)) {\n      seen.add(url);\n      out.push(url);\n    }\n  }\n\n  return out;\n}\n\nconst SENSITIVE_FIELD_KEYS = new Set([\n  \"secret\",\n  \"webhooksecret\",\n  \"password\",\n  \"apikey\",\n  \"token\",\n  \"accesstoken\",\n  \"refreshtoken\",\n  \"privatekey\",\n  \"authtoken\",\n  \"bearertoken\",\n  \"clientsecret\",\n]);\n\n/**\n * Recursively redacts sensitive field values from an arbitrary payload before\n * it is passed to a structured logger. Matches field names case-insensitively\n * and ignoring underscores, so `api_key`, `apiKey`, and `API_KEY` all match.\n * Non-sensitive fields are passed through unchanged. Never mutates the input —\n * returns a new value.\n *\n * Intended for structured-log redaction only. Do NOT use as a security\n * boundary for data in motion.\n *\n * @param value - Arbitrary JSON-like payload (query object, config blob, etc.)\n * @returns A new value with sensitive fields replaced by `\"[redacted]\"`.\n */\nexport function redactSensitiveFields(value: unknown): unknown {\n  if (value === null || typeof value !== \"object\") return value;\n  if (Array.isArray(value)) {\n    return value.map((item) => redactSensitiveFields(item));\n  }\n  const out: Record<string, unknown> = {};\n  for (const [key, inner] of Object.entries(value as Record<string, unknown>)) {\n    const normalized = key.toLowerCase().replace(/_/g, \"\");\n    if (SENSITIVE_FIELD_KEYS.has(normalized)) {\n      out[key] = \"[redacted]\";\n    } else {\n      out[key] = redactSensitiveFields(inner);\n    }\n  }\n  return out;\n}\n"]}