@lvy-jsd/dsh-tool-manager 0.2.0 → 0.4.0

package/README.md

@@ -14,6 +14,8 @@ tools_ls({ query: "pull request" }) # search the whole tree in one step
 tools_load(["/code/github"])        # callable from the next step, for the rest of the session
 tools_load(["mcp__github__get_me"]) # or one tool by exact name
 tools_unload(["/code/github"])
+tools_find("send an email")         # ranked matches by intent (BM25), no loading
+tools_route("send an email")        # retrieve, re-rank with the model, then load
 ```
 
 Loaded tools are **native**: the model receives their full parameter schema
@@ -35,7 +37,15 @@ built-in rules and config overrides, or write your own classifier.
 - Loading a group subscribes to it: tools the group gains later become visible
   too.
 - Restrictions from other plugins intersect with this one, so a hard deny (for
-  example the MCP connector's governance policy) always wins.
+  example the MCP connector's governance policy) always wins. A pinned or
+  loaded tool that another layer still hides is marked `[denied]` in
+  `tools_ls`, and `tools_load` reports it as not callable instead of listing it
+  (with one log warning per tool, pointing at connector governance rules and
+  per-session injection).
+- DSH's PTC mode (`DSH_TOOLS_MODE=ptc`) works unchanged: the model gets only
+  `run_code`, and the SDK the host declares for it is built from the same
+  narrowed view, so loads show up there from the next step. `run_code` itself
+  is a host transport and never enters the directory.
 - Every agent is restricted separately. A subagent starts from the pinned set
   plus whatever the parent loaded with `forSubagents: true`.
 - Loaded state is in memory. Install
@@ -44,6 +54,38 @@ built-in rules and config overrides, or write your own classifier.
 - If the plugin is unloaded, all its restrictions are lifted (fail open to
   "every tool visible", never to "no tools").
 
+## Finding and routing by intent
+
+The directory above is browsable, but the model still has to guess the right
+keywords and spend turns searching. The core now ships a retrieval + routing
+layer that makes an unbounded catalog usable without that guesswork:
+
+```
+tools_find("send an email")     # ranked matches (BM25), no loading
+tools_route("send an email")    # retrieve, re-rank with the model, then load
+skills_find("write a PR")       # ranked skills, no loading
+skills_route("write a PR")      # retrieve, re-rank, then load the top skill's body
+```
+
+Retrieval is BM25 by default: no model, no network, works offline, and scales
+to a large catalog. The BM25 index lives in a Rust sidecar process
+(`sidecar/`, tantivy over a Unix socket) for headroom — the hot path is native
+and the TypeScript here is a thin client. A dependency-free JS BM25 index is
+kept as the always-available fallback, so retrieval never breaks if the sidecar
+binary is missing or the process dies.
+
+When a model is configured (`config.model { provider, model }`), `tools_route`
+and `skills_route` re-rank the BM25 candidates with the model, so a
+natural-language intent that shares no words with a tool name still finds it —
+the RAG-MCP pattern: retrieve a small candidate set, then rank it. Any model
+failure falls back to the BM25 order, so the router never breaks on a model
+hiccup.
+
+The router reuses the core's `toolCatalog` service: it indexes the same
+catalog, loads through the same path, and reports the same token budget. The
+sidecar is spawned by the plugin and exits with it (a parent-process monitor
+kills it on a DSH restart).
+
 ## Configuration
 
 ```yaml
@@ -56,6 +98,60 @@ built-in rules and config overrides, or write your own classifier.
     highRisk: []    # never included in group loads; load individually
 ```
 
+### Override files
+
+Three files under `$DSH_HOME/tool-manager/` override the config above. Each is
+read at startup and re-read when the settings panel saves through the API (or
+`reload*` is called); write them from the panel, or by hand and then reload.
+
+| File | Config key it replaces | What it holds |
+|---|---|---|
+| `settings.json` | `pinned`, `unpin`, `highRisk` | the lists an operator edits most often |
+| `metadata.json` | `annotate()` for the same tool | `{ "<tool>": { "group", "category", "risk", "summary" } }` |
+| `exempt.json` | `exemptProviders` | `{ "providers": [...], "sessions": [...] }` |
+
+### The tool manifest
+
+A client that receives its tool list once per session — Claude Code, driven by
+`dsh-oh-my-claude` — cannot discover the directory by asking, because nothing
+tells it the directory exists. So the catalog is also written out as text, to
+`~/.claude/dsh-tool-catalog.md`, after every rebuild:
+
+```
+## device (14 tools, Devices)
+
+### adb — load with `tools_load({ targets: ["/device/adb"] })`
+- adb_install — Install an APK on a device.
+- adb_shell ! — Run a shell command on a device.
+```
+
+The file opens by saying the listed tools are **not callable yet**, then gives
+the two calls that change that (`tools_ls`, `tools_load`) and the rule to load
+the smallest thing that covers the task. A `!` marks a high-risk tool. Reading
+it runs nothing.
+
+Add one line to `~/.claude/CLAUDE.md` so every Claude session reads it:
+
+```
+@~/.claude/dsh-tool-catalog.md
+```
+
+The write is skipped when the text did not change, so a rebuild that moves
+nothing does not cost a prompt re-read. `manifestFile` points it elsewhere, and
+`''` turns it off.
+
+The files win as a whole, not key by key: once `exempt.json` exists, the config
+list is ignored rather than merged, so what the file shows is what is in force.
+A missing file means "no opinion, use the config"; a corrupt file is reported as
+a warning and treated as empty rather than silently restoring the config.
+`sessions` exempts one session by id for its remaining lifetime, for checking
+whether a client handles late loading without de-exempting the whole route.
+
+A tool's `metadata.json` entry replaces the previous entry as a whole:
+submitting the form with a field blank drops that override, and the package
+declaration (or a classifier) applies again. `parameters` are deliberately not
+part of it — the host owns the schema sent to the model.
+
 ## Extending: the `toolCatalog` service
 
 Declare `inject: ['toolCatalog']` (or use `ctx.inject(['toolCatalog'], …)` for
@@ -193,7 +289,8 @@ ctx.effect(() => ctx.toolCatalog.registerVisibilityFilter({
 ### Reading the catalog
 
 `ctx.toolCatalog.get()` returns `{ tools, groups, categories }`;
-`resolve(target)`, `stateOf(agent)`, `allowFor(agent)`, `isExempt(agent)`,
+`resolve(target)`, `stateOf(agent)`, `allowFor(agent)`, `deniedFor(agent)`
+(allowed here but hidden by another layer), `isExempt(agent)`,
 `packages()` (enabled plugin packages: `{ name, dir, manifest }`) and
 `refresh()` are also available.
 

package/cordis.patch.yml

@@ -14,3 +14,16 @@
         # Loading high-risk tools also needs a risk gate plugin
         # (@lvy-jsd/dsh-tool-manager-risk-gate) to confirm them.
         highRisk: []
+        # The catalog as text, for a client that cannot lazy-load (Claude Code
+        # reads it through a ~/.claude/CLAUDE.md `@` line). '' turns it off.
+        # manifestFile: ~/.claude/dsh-tool-catalog.md
+        # --- retrieval + routing (tools_find / tools_route / skills_find / skills_route) ---
+        # Model used to re-rank tools_route / skills_route candidates. Leave
+        # unset for pure BM25 (no model, works offline).
+        # model: { provider: deepseek, model: deepseek-chat }
+        # maxTokens: 24
+        # topK: 8
+        # maxBudget: 20000
+        # k1: 1.5
+        # b: 0.75
+        # sidecar: { bin: '', socket: '', timeoutMs: 2000 }

package/lib/exempt.d.ts

@@ -0,0 +1,45 @@
+import type { Logger } from './types.js';
+/** An exemption list: routes and sessions. Both may be empty. */
+export interface ExemptConfig {
+    providers: string[];
+    sessions: string[];
+}
+/** Where the exemption file lives unless a deployment points elsewhere. */
+export declare function defaultExemptFile(): string;
+/** The whole file, with unknown keys dropped. */
+export declare function pickExempt(raw: unknown): ExemptConfig;
+/** Read the exemption file; missing or corrupt is "no opinion", never a crash. */
+export declare function readExemptFile(file: string, logger?: Logger): ExemptConfig | undefined;
+/** Write the file atomically, so a crash cannot leave a half-written list. */
+export declare function writeExemptFile(file: string, config: ExemptConfig, logger?: Logger): void;
+/** Why a session is exempt, for the panel to show. */
+export interface ExemptReason {
+    exempt: boolean;
+    /** 'file:provider' | 'file:session' | 'config:provider' | '' */
+    source: string;
+}
+export interface ExemptStore {
+    /** File the store reads and writes; the file itself is the override switch. */
+    file: string;
+    /** True when the file exists, so the config provider list is ignored. */
+    present(): boolean;
+    /** The lists in force: the file when it exists, else the plugin config. */
+    effective(): ExemptConfig;
+    /** Why one session is exempt, if it is. */
+    reasonFor(provider: string | undefined, sessionId: string | undefined): ExemptReason;
+    /** Add or remove one session, writing the file. Returns the lists in force. */
+    setSession(sessionId: string, exempt: boolean): ExemptConfig;
+    /** Re-read the file, for after an external edit. Returns the lists in force. */
+    reload(): ExemptConfig;
+}
+/**
+ * Exemption store over one file, with the plugin config as the fallback layer.
+ * The file wins as a whole rather than per key: an operator writing the file
+ * means it, and a partial merge would leave entries they cannot see.
+ */
+export declare function createExemptStore({ file, configProviders, logger }: {
+    file: string;
+    configProviders?: readonly string[];
+    logger?: Logger;
+}): ExemptStore;
+//# sourceMappingURL=exempt.d.ts.map

package/lib/exempt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exempt.d.ts","sourceRoot":"","sources":["../src/exempt.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAExC,iEAAiE;AACjE,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,2EAA2E;AAC3E,wBAAgB,iBAAiB,IAAI,MAAM,CAG1C;AAQD,iDAAiD;AACjD,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,CAMrD;AAED,kFAAkF;AAClF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS,CAkBtF;AAED,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAUzF;AAED,sDAAsD;AACtD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,OAAO,CAAA;IACf,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAA;IACZ,yEAAyE;IACzE,OAAO,IAAI,OAAO,CAAA;IAClB,2EAA2E;IAC3E,SAAS,IAAI,YAAY,CAAA;IACzB,2CAA2C;IAC3C,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,YAAY,CAAA;IACpF,+EAA+E;IAC/E,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,YAAY,CAAA;IAC5D,gFAAgF;IAChF,MAAM,IAAI,YAAY,CAAA;CACvB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,EAAE,IAAI,EAAE,eAAoB,EAAE,MAAM,EAAE,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,WAAW,CA+B7J"}

package/lib/exempt.js

@@ -0,0 +1,122 @@
+// File-based exemption list for dsh-tool-manager.
+//
+// An exempt session is never narrowed: a route whose tool list is handed to an
+// external client once at session start (Claude Code, say) cannot load a tool
+// that was hidden from the first request, so hiding anything there only loses
+// tools. The provider list originally came from `exemptProviders` in
+// cordis.patch.yml, which a user cannot edit from the browser and which is
+// awkward to change per session.
+//
+// This file replaces it: when <DSH_HOME>/tool-manager/exempt.json exists it wins
+// over the plugin config, the same way the settings file does. Two entry forms
+// are supported, because they answer different questions:
+//
+//   { "providers": ["claude-code"], "sessions": ["s_abc123"] }
+//
+//   providers  model routes never narrowed, for every session (durable)
+//   sessions   one session exempted for its remaining lifetime, e.g. while the
+//              user checks whether a client handles lazy loading (temporary)
+//
+// Sessions are matched against the agent's session id and, as a fallback, the
+// agent id, so an entry can be removed by hand without knowing which of the two
+// the host populated.
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+/** Where the exemption file lives unless a deployment points elsewhere. */
+export function defaultExemptFile() {
+    const dshHome = process.env.DSH_HOME || join(homedir(), '.config', 'deepseek-harness');
+    return join(dshHome, 'tool-manager', 'exempt.json');
+}
+/** Keep only non-empty strings; a number or object in the file is a typo, not a name. */
+function pickNames(value) {
+    if (!Array.isArray(value))
+        return [];
+    return value.filter((name) => typeof name === 'string' && name.trim().length > 0).map((name) => name.trim());
+}
+/** The whole file, with unknown keys dropped. */
+export function pickExempt(raw) {
+    if (typeof raw !== 'object' || raw === null || Array.isArray(raw))
+        return { providers: [], sessions: [] };
+    const record = raw;
+    // `providers` is required: a file that omits it says "no route is exempt",
+    // not "keep the old config list", because the file is the override.
+    return { providers: pickNames(record.providers), sessions: pickNames(record.sessions) };
+}
+/** Read the exemption file; missing or corrupt is "no opinion", never a crash. */
+export function readExemptFile(file, logger) {
+    let text;
+    try {
+        text = readFileSync(file, 'utf8');
+    }
+    catch (caught) {
+        const error = caught;
+        // ENOENT is the normal first run: no file means the plugin config decides.
+        if (error.code !== 'ENOENT')
+            logger?.warn?.(`tool-manager: ignoring unreadable exemptions ${file}: ${error.message}`);
+        return undefined;
+    }
+    try {
+        return pickExempt(JSON.parse(text));
+    }
+    catch (caught) {
+        // A corrupt file must not silently restore the config list: the user
+        // intended the file to be in charge, so report and treat it as "no exempt".
+        logger?.warn?.(`tool-manager: unreadable exemptions ${file}: ${caught.message}`);
+        return { providers: [], sessions: [] };
+    }
+}
+/** Write the file atomically, so a crash cannot leave a half-written list. */
+export function writeExemptFile(file, config, logger) {
+    mkdirSync(dirname(file), { recursive: true });
+    const tmp = `${file}.tmp`;
+    try {
+        writeFileSync(tmp, `${JSON.stringify({ providers: config.providers, sessions: config.sessions }, null, 2)}\n`);
+        renameSync(tmp, file);
+    }
+    catch (caught) {
+        logger?.warn?.(`tool-manager: writing exemptions ${file} failed: ${caught.message}`);
+        throw caught;
+    }
+}
+/**
+ * Exemption store over one file, with the plugin config as the fallback layer.
+ * The file wins as a whole rather than per key: an operator writing the file
+ * means it, and a partial merge would leave entries they cannot see.
+ */
+export function createExemptStore({ file, configProviders = [], logger }) {
+    let fromFile = readExemptFile(file, logger);
+    const effective = () => fromFile ?? { providers: [...configProviders], sessions: [] };
+    return {
+        file,
+        present: () => fromFile !== undefined,
+        effective,
+        reasonFor(provider, sessionId) {
+            const current = effective();
+            if (provider !== undefined && current.providers.includes(provider)) {
+                return { exempt: true, source: fromFile !== undefined ? 'file:provider' : 'config:provider' };
+            }
+            if (sessionId !== undefined && current.sessions.includes(sessionId))
+                return { exempt: true, source: 'file:session' };
+            return { exempt: false, source: '' };
+        },
+        setSession(sessionId, exempt) {
+            // Editing starts from what is in force, so the first panel click writes a
+            // file that keeps the exemptions the user could already see.
+            const current = effective();
+            const sessions = new Set(current.sessions);
+            if (exempt)
+                sessions.add(sessionId);
+            else
+                sessions.delete(sessionId);
+            fromFile = { providers: [...current.providers], sessions: [...sessions] };
+            writeExemptFile(file, fromFile, logger);
+            return effective();
+        },
+        reload() {
+            fromFile = readExemptFile(file, logger);
+            return effective();
+        },
+    };
+}
+//# sourceMappingURL=exempt.js.map

package/lib/exempt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exempt.js","sourceRoot":"","sources":["../src/exempt.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,qEAAqE;AACrE,2EAA2E;AAC3E,iCAAiC;AACjC,EAAE;AACF,iFAAiF;AACjF,+EAA+E;AAC/E,0DAA0D;AAC1D,EAAE;AACF,+DAA+D;AAC/D,EAAE;AACF,wEAAwE;AACxE,+EAA+E;AAC/E,6EAA6E;AAC7E,EAAE;AACF,8EAA8E;AAC9E,gFAAgF;AAChF,sBAAsB;AAEtB,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AASzC,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAA;IACtF,OAAO,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,aAAa,CAAC,CAAA;AACrD,CAAC;AAED,yFAAyF;AACzF,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACpC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;AAC9H,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,UAAU,CAAC,GAAY;IACrC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IACzG,MAAM,MAAM,GAAG,GAA8B,CAAA;IAC7C,2EAA2E;IAC3E,oEAAoE;IACpE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAA;AACzF,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,MAAe;IAC1D,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACnC,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,MAA+B,CAAA;QAC7C,2EAA2E;QAC3E,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,EAAE,IAAI,EAAE,CAAC,gDAAgD,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QACrH,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IACrC,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,qEAAqE;QACrE,4EAA4E;QAC5E,MAAM,EAAE,IAAI,EAAE,CAAC,uCAAuC,IAAI,KAAM,MAAgB,CAAC,OAAO,EAAE,CAAC,CAAA;QAC3F,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IACxC,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,MAAoB,EAAE,MAAe;IACjF,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAA;IACzB,IAAI,CAAC;QACH,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;QAC9G,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACvB,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,MAAM,EAAE,IAAI,EAAE,CAAC,oCAAoC,IAAI,YAAa,MAAgB,CAAC,OAAO,EAAE,CAAC,CAAA;QAC/F,MAAM,MAAM,CAAA;IACd,CAAC;AACH,CAAC;AAwBD;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAE,IAAI,EAAE,eAAe,GAAG,EAAE,EAAE,MAAM,EAA0E;IAC9I,IAAI,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3C,MAAM,SAAS,GAAG,GAAiB,EAAE,CAAC,QAAQ,IAAI,EAAE,SAAS,EAAE,CAAC,GAAG,eAAe,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IACnG,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,KAAK,SAAS;QACrC,SAAS;QACT,SAAS,CAAC,QAAQ,EAAE,SAAS;YAC3B,MAAM,OAAO,GAAG,SAAS,EAAE,CAAA;YAC3B,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAA;YAC/F,CAAC;YACD,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAA;YACpH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;QACtC,CAAC;QACD,UAAU,CAAC,SAAS,EAAE,MAAM;YAC1B,0EAA0E;YAC1E,6DAA6D;YAC7D,MAAM,OAAO,GAAG,SAAS,EAAE,CAAA;YAC3B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YAC1C,IAAI,MAAM;gBAAE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;;gBAC9B,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YAC/B,QAAQ,GAAG,EAAE,SAAS,EAAE,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAA;YACzE,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;YACvC,OAAO,SAAS,EAAE,CAAA;QACpB,CAAC;QACD,MAAM;YACJ,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;YACvC,OAAO,SAAS,EAAE,CAAA;QACpB,CAAC;KACF,CAAA;AACH,CAAC"}

package/lib/index.d.ts

@@ -7,6 +7,7 @@ export type { VisibilityController, VisibilityOptions } from './visibility.js';
 export declare const name = "tool-manager";
 export declare const inject: string[];
 export declare const ENTRY_TOOLS: string[];
+export declare const HOST_RESERVED: string[];
 export declare const DEFAULT_PINNED: string[];
 export declare function apply(ctx: HostContext, config?: CoreConfig): void;
 /** Options for toolCatalog.load / tools_load. */

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAA2C,UAAU,EAAY,WAAW,EAAgF,MAAM,YAAY,CAAA;AAE1L,mBAAmB,YAAY,CAAA;AAC/B,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAC7L,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAChD,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC1E,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAE9E,eAAO,MAAM,IAAI,iBAAiB,CAAA;AAClC,eAAO,MAAM,MAAM,UAAY,CAAA;AAE/B,eAAO,MAAM,WAAW,UAA6C,CAAA;AAKrE,eAAO,MAAM,cAAc,UAY1B,CAAA;AAeD,wBAAgB,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,GAAE,UAAe,QA4gB9D;AAED,iDAAiD;AACjD,MAAM,WAAW,WAAW;IAC1B,6DAA6D;IAC7D,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;;;;;;AAOD,wBAAsC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAA2C,UAAU,EAAY,WAAW,EAA0F,MAAM,YAAY,CAAA;AAEpM,mBAAmB,YAAY,CAAA;AAC/B,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAC7L,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAChD,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC1E,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAE9E,eAAO,MAAM,IAAI,iBAAiB,CAAA;AAClC,eAAO,MAAM,MAAM,UAAY,CAAA;AAE/B,eAAO,MAAM,WAAW,UAA6C,CAAA;AAMrE,eAAO,MAAM,aAAa,UAAe,CAAA;AAKzC,eAAO,MAAM,cAAc,UAY1B,CAAA;AAeD,wBAAgB,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,GAAE,UAAe,QAmtB9D;AAED,iDAAiD;AACjD,MAAM,WAAW,WAAW;IAC1B,6DAA6D;IAC7D,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;;;;;;AAOD,wBAAsC"}