@mcoda/codali 0.1.108 → 0.1.110

package/dist/runcontext/RunContextResolver.js

@@ -0,0 +1,389 @@
+import { homedir } from "node:os";
+import path from "node:path";
+import { readFile } from "node:fs/promises";
+import { existsSync } from "node:fs";
+import { resolveCredential } from "./CredentialFile.js";
+/**
+ * Keys a repository-level config file is forbidden to set.
+ *
+ * A checked-out repository is untrusted input. If `.codali/config.toml` could
+ * define an MCP server command, a base URL, or a credential reference, then
+ * cloning a repository and running `codali ask` inside it would be enough to
+ * execute an arbitrary binary or redirect traffic to an attacker's endpoint.
+ *
+ * The boundary is therefore: user/host config may define what runs and where
+ * it connects; repository config may only *narrow* what is already permitted,
+ * identify the repository, and set harmless presentation defaults.
+ */
+const REPO_FORBIDDEN_KEYS = new Set([
+    "command",
+    "args",
+    "env",
+    "url",
+    "base_url",
+    "baseurl",
+    "api_key",
+    "apikey",
+    "token",
+    "secret",
+    "credential",
+    "credentials",
+    "password",
+    "headers",
+    // Every reader below accepts both snake_case and camelCase, so both spellings
+    // must be forbidden. Listing only one is a hole, not a style preference.
+    "mcp_servers",
+    "mcpservers",
+    "api_connectors",
+    "apiconnectors",
+    "http_connectors",
+    "httpconnectors",
+    "agents",
+    "agent_roles",
+    "agentroles",
+    "docdex",
+]);
+/**
+ * Strips forbidden keys from a repository config, recording what was dropped.
+ * Rejection is loud rather than silent: the keys land in run warnings so a
+ * repository that tries to widen its own permissions is visible.
+ */
+export const scrubRepoConfig = (config, pathPrefix = "") => {
+    const value = {};
+    const rejectedKeys = [];
+    for (const [key, entry] of Object.entries(config)) {
+        const qualified = pathPrefix ? `${pathPrefix}.${key}` : key;
+        if (REPO_FORBIDDEN_KEYS.has(key.toLowerCase())) {
+            rejectedKeys.push(qualified);
+            continue;
+        }
+        if (entry && typeof entry === "object" && !Array.isArray(entry)) {
+            const nested = scrubRepoConfig(entry, qualified);
+            value[key] = nested.value;
+            rejectedKeys.push(...nested.rejectedKeys);
+            continue;
+        }
+        value[key] = entry;
+    }
+    return { value, rejectedKeys };
+};
+const readJsonFile = async (filePath) => {
+    if (!existsSync(filePath))
+        return undefined;
+    try {
+        const raw = await readFile(filePath, "utf8");
+        const parsed = JSON.parse(raw);
+        return parsed && typeof parsed === "object" && !Array.isArray(parsed)
+            ? parsed
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+};
+const asStringArray = (value) => Array.isArray(value)
+    ? value.filter((entry) => typeof entry === "string")
+    : undefined;
+const asString = (value) => typeof value === "string" && value.trim() ? value.trim() : undefined;
+const asNumber = (value) => typeof value === "number" && Number.isFinite(value) ? value : undefined;
+const readAgentRoles = (value) => {
+    if (!value || typeof value !== "object")
+        return undefined;
+    const record = value;
+    const roles = {
+        orchestrator: asString(record.orchestrator),
+        worker: asString(record.worker),
+        synthesizer: asString(record.synthesizer),
+        media: asString(record.media),
+    };
+    return Object.values(roles).some(Boolean) ? roles : undefined;
+};
+const readLimits = (value) => {
+    if (!value || typeof value !== "object")
+        return undefined;
+    const record = value;
+    const limits = {
+        maxRounds: asNumber(record.maxRounds ?? record.max_rounds),
+        maxToolCalls: asNumber(record.maxToolCalls ?? record.max_tool_calls),
+        maxModelCalls: asNumber(record.maxModelCalls ?? record.max_model_calls),
+        deadlineMs: asNumber(record.deadlineMs ?? record.deadline_ms),
+    };
+    return Object.values(limits).some((entry) => entry !== undefined) ? limits : undefined;
+};
+/**
+ * Reads MCP server definitions from a *trusted* config layer. Never called on
+ * repository config: `scrubRepoConfig` removes the keys first.
+ */
+const readMcpServers = (value) => {
+    if (!Array.isArray(value))
+        return undefined;
+    const servers = [];
+    for (const entry of value) {
+        if (!entry || typeof entry !== "object")
+            continue;
+        const record = entry;
+        const name = asString(record.name);
+        if (!name)
+            continue;
+        const transport = asString(record.transport) ?? (record.command ? "stdio" : "http");
+        const common = {
+            name,
+            enabled: typeof record.enabled === "boolean" ? record.enabled : undefined,
+            readOnly: record.readOnly === true || record.read_only === true,
+            timeoutMs: asNumber(record.timeoutMs ?? record.timeout_ms),
+            allowTools: asStringArray(record.allowTools ?? record.allow_tools),
+            denyTools: asStringArray(record.denyTools ?? record.deny_tools),
+        };
+        if (transport === "stdio") {
+            const command = asString(record.command);
+            if (!command)
+                continue;
+            servers.push({
+                ...common,
+                transport: "stdio",
+                command,
+                args: asStringArray(record.args),
+                cwd: asString(record.cwd),
+                env: resolveEnvRefs(record.env),
+            });
+            continue;
+        }
+        const url = asString(record.url);
+        if (!url)
+            continue;
+        servers.push({
+            ...common,
+            transport: "http",
+            url,
+            headers: resolveEnvRefs(record.headers),
+        });
+    }
+    return servers.length > 0 ? servers : undefined;
+};
+/**
+ * Reads HTTP connector declarations from a *trusted* config layer. Credentials
+ * are resolved through the same `env:` indirection as MCP servers, so a config
+ * file never has to hold a literal secret.
+ */
+const readHttpConnectors = (value) => {
+    if (!Array.isArray(value))
+        return undefined;
+    const connectors = [];
+    for (const entry of value) {
+        if (!entry || typeof entry !== "object")
+            continue;
+        const record = entry;
+        const name = asString(record.name);
+        // Base URLs resolve `env:` references too. A site hostname is not secret,
+        // but keeping every connector detail in one credentials file beats
+        // splitting it across two places for no reason.
+        const baseUrl = resolveEnvRef(record.baseUrl ?? record.base_url);
+        if (!name || !baseUrl || !Array.isArray(record.tools))
+            continue;
+        const tools = record.tools
+            .filter((tool) => Boolean(tool && typeof tool === "object"))
+            .map((tool) => ({
+            id: asString(tool.id) ?? "",
+            description: asString(tool.description) ?? "",
+            method: (asString(tool.method) ?? "GET").toUpperCase(),
+            urlTemplate: asString(tool.urlTemplate ?? tool.url_template) ?? "",
+            inputSchema: tool.inputSchema,
+            responseSelector: asString(tool.responseSelector ?? tool.response_selector),
+            maxResponseChars: asNumber(tool.maxResponseChars ?? tool.max_response_chars),
+        }))
+            .filter((tool) => tool.id && tool.urlTemplate);
+        if (tools.length === 0)
+            continue;
+        const authRecord = record.auth && typeof record.auth === "object"
+            ? record.auth
+            : undefined;
+        connectors.push({
+            name,
+            baseUrl,
+            enabled: typeof record.enabled === "boolean" ? record.enabled : undefined,
+            timeoutMs: asNumber(record.timeoutMs ?? record.timeout_ms),
+            headers: resolveEnvRefs(record.headers),
+            tools,
+            auth: authRecord
+                ? {
+                    type: (asString(authRecord.type) ?? "none"),
+                    token: resolveEnvRef(authRecord.token),
+                    username: resolveEnvRef(authRecord.username),
+                    password: resolveEnvRef(authRecord.password),
+                    headerName: asString(authRecord.headerName ?? authRecord.header_name),
+                    tokenUrl: resolveEnvRef(authRecord.tokenUrl ?? authRecord.token_url),
+                    clientId: resolveEnvRef(authRecord.clientId ?? authRecord.client_id),
+                    refreshToken: resolveEnvRef(authRecord.refreshToken ?? authRecord.refresh_token),
+                    scope: asString(authRecord.scope),
+                }
+                : undefined,
+        });
+    }
+    return connectors.length > 0 ? connectors : undefined;
+};
+/**
+ * Substitutes `env:NAME` references, including when embedded in a larger
+ * string. Header values are the common case — `"Bearer env:GITHUB_TOKEN"` is
+ * what anyone would write, and requiring the reference to sit at the start of
+ * the value would silently transmit the literal text as a credential.
+ *
+ * An unresolvable reference yields `undefined` for the whole value rather than
+ * a half-substituted string: sending `Bearer env:GITHUB_TOKEN` to an API is
+ * worse than sending nothing, because the failure looks like a bad token
+ * instead of a missing one.
+ */
+const ENV_REF_PATTERN = /env:([A-Za-z_][A-Za-z0-9_]*)/g;
+const substituteEnvRefs = (value) => {
+    if (!value.includes("env:"))
+        return value;
+    let missing = false;
+    const output = value.replace(ENV_REF_PATTERN, (_match, name) => {
+        const resolved = resolveCredential(name);
+        if (resolved === undefined) {
+            missing = true;
+            return "";
+        }
+        return resolved;
+    });
+    return missing ? undefined : output;
+};
+const resolveEnvRef = (value) => {
+    if (typeof value !== "string")
+        return undefined;
+    return substituteEnvRefs(value);
+};
+/**
+ * Resolves `env:NAME` references so a config file never has to contain a
+ * literal secret. Local-CLI convenience only: an embedded multi-tenant host
+ * supplies credentials directly and must not be able to name host env vars.
+ */
+const resolveEnvRefs = (value) => {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return undefined;
+    const output = {};
+    for (const [key, entry] of Object.entries(value)) {
+        if (typeof entry !== "string")
+            continue;
+        // Resolved from the process environment first, then ~/.codali/.creds.
+        const resolved = substituteEnvRefs(entry);
+        if (resolved !== undefined)
+            output[key] = resolved;
+    }
+    return Object.keys(output).length > 0 ? output : undefined;
+};
+const contextFromConfig = (config) => ({
+    agentRoles: readAgentRoles(config.agents ?? config.agent_roles),
+    mcpServers: readMcpServers(config.mcpServers ?? config.mcp_servers),
+    httpConnectors: readHttpConnectors(config.httpConnectors ?? config.http_connectors),
+    limits: readLimits(config.limits),
+    allowedTools: asStringArray(config.allowedTools ?? config.allowed_tools),
+    deniedTools: asStringArray(config.deniedTools ?? config.denied_tools),
+    docdex: (() => {
+        const raw = config.docdex;
+        if (!raw || typeof raw !== "object")
+            return undefined;
+        const record = raw;
+        return {
+            baseUrl: asString(record.baseUrl ?? record.base_url),
+            apiKey: asString(record.apiKey ?? record.api_key),
+            repoRoot: asString(record.repoRoot ?? record.repo_root),
+            repoId: asString(record.repoId ?? record.repo_id),
+            allowedOperations: asStringArray(record.allowedOperations ?? record.allowed_operations),
+        };
+    })(),
+});
+/**
+ * Merges a narrower context over a broader one. Allow-lists intersect and
+ * deny-lists union, so a later layer can only ever restrict what an earlier one
+ * permitted — never widen it.
+ */
+export const mergeRunContexts = (base, override) => {
+    const allowedTools = base.allowedTools && override.allowedTools
+        ? base.allowedTools.filter((tool) => override.allowedTools?.includes(tool))
+        : (override.allowedTools ?? base.allowedTools);
+    const deniedTools = [
+        ...new Set([...(base.deniedTools ?? []), ...(override.deniedTools ?? [])]),
+    ];
+    const minDefined = (a, b) => {
+        if (a === undefined)
+            return b;
+        if (b === undefined)
+            return a;
+        return Math.min(a, b);
+    };
+    return {
+        tenant: override.tenant ?? base.tenant,
+        repo: { ...base.repo, ...override.repo },
+        // Servers come from a trusted layer only; a narrower layer cannot add one.
+        mcpServers: override.mcpServers ?? base.mcpServers,
+        httpConnectors: override.httpConnectors ?? base.httpConnectors,
+        docdex: { ...base.docdex, ...override.docdex },
+        agentRoles: { ...base.agentRoles, ...override.agentRoles },
+        limits: {
+            maxRounds: minDefined(base.limits?.maxRounds, override.limits?.maxRounds),
+            maxToolCalls: minDefined(base.limits?.maxToolCalls, override.limits?.maxToolCalls),
+            maxModelCalls: minDefined(base.limits?.maxModelCalls, override.limits?.maxModelCalls),
+            deadlineMs: minDefined(base.limits?.deadlineMs, override.limits?.deadlineMs),
+        },
+        allowedTools,
+        deniedTools: deniedTools.length > 0 ? deniedTools : undefined,
+        warnings: [...(base.warnings ?? []), ...(override.warnings ?? [])],
+    };
+};
+/**
+ * Resolves run context from trusted user config, then applies the repository's
+ * narrowing config on top. Used by the CLI and any single-tenant deployment.
+ */
+export class LocalConfigRunContextResolver {
+    constructor(options = {}) {
+        this.options = options;
+        this.id = "local_config";
+    }
+    async resolve(input) {
+        const warnings = [];
+        const userDir = this.options.userConfigDir ?? path.join(homedir(), ".codali");
+        const userConfig = await readJsonFile(path.join(userDir, "config.json"));
+        const base = userConfig ? contextFromConfig(userConfig) : {};
+        const repoConfigRaw = await readJsonFile(path.join(input.workspaceRoot, ".codali", "config.json"));
+        let repoContext = {};
+        if (repoConfigRaw) {
+            const scrubbed = scrubRepoConfig(repoConfigRaw);
+            if (scrubbed.rejectedKeys.length > 0) {
+                warnings.push(`repo_config_keys_rejected:${scrubbed.rejectedKeys.join(",")}`);
+            }
+            repoContext = contextFromConfig(scrubbed.value);
+        }
+        const merged = mergeRunContexts(base, repoContext);
+        return {
+            ...merged,
+            tenant: input.tenant ?? merged.tenant,
+            repo: { root: input.workspaceRoot, ...merged.repo },
+            warnings: [...(merged.warnings ?? []), ...warnings],
+        };
+    }
+}
+/**
+ * Uses context handed over by an embedding host. This is the okacam path: the
+ * product resolves the tenant's tools and credentials from its own database and
+ * passes them on the request.
+ */
+export class ProvidedRunContextResolver {
+    constructor() {
+        this.id = "provided";
+    }
+    async resolve(input) {
+        if (!input.provided) {
+            throw new Error("ProvidedRunContextResolver requires a RunContext on the request.");
+        }
+        return {
+            ...input.provided,
+            repo: { root: input.workspaceRoot, ...input.provided.repo },
+            tenant: input.tenant ?? input.provided.tenant,
+        };
+    }
+}
+export const resolveRunContext = async (input, resolver) => {
+    const active = resolver ??
+        (input.provided ? new ProvidedRunContextResolver() : new LocalConfigRunContextResolver());
+    return active.resolve(input);
+};

package/dist/storage/CodaliDatasetPrivacyEngine.d.ts

@@ -1,6 +1,6 @@
 import { type CodaliStorageObjectPrivacyFlags, type CodaliStorageObjectRef, type CodaliStorageObjectRetentionClass, type CodaliStoragePrivacyClassification, type CodaliStoragePrivacyMetadata } from "./CodaliStorageContracts.js";
 export type CodaliDatasetPrivacyPurpose = "training" | "export" | "eval" | "replay" | "durable_persistence";
-export type CodaliDatasetSecretFindingKind = "sensitive_key" | "bearer_token" | "openai_api_key" | "cloud_access_key" | "github_token" | "jwt" | "private_key" | "env_secret_assignment";
+export type CodaliDatasetSecretFindingKind = "sensitive_key" | "bearer_token" | "openai_api_key" | "cloud_access_key" | "github_token" | "jwt" | "private_key" | "env_secret_assignment" | "connector_api_key";
 export type CodaliDatasetEligibilityBlockerCode = "secrets_detected" | "privacy_training_not_allowed" | "privacy_export_not_allowed" | "object_training_not_allowed" | "object_export_not_allowed" | "object_eval_not_allowed" | "object_replay_not_allowed" | "retention_do_not_store" | "redaction_required" | "policy_override_requires_admin_audit" | "policy_override_not_requested" | "policy_override_hard_blocked";
 export interface CodaliDatasetSecretFinding {
     kind: CodaliDatasetSecretFindingKind;

package/dist/storage/CodaliDatasetPrivacyEngine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CodaliDatasetPrivacyEngine.d.ts","sourceRoot":"","sources":["../../src/storage/CodaliDatasetPrivacyEngine.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,KAAK,+BAA+B,EACpC,KAAK,sBAAsB,EAC3B,KAAK,iCAAiC,EACtC,KAAK,kCAAkC,EACvC,KAAK,4BAA4B,EAClC,MAAM,6BAA6B,CAAC;AAErC,MAAM,MAAM,2BAA2B,GACnC,UAAU,GACV,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,qBAAqB,CAAC;AAE1B,MAAM,MAAM,8BAA8B,GACtC,eAAe,GACf,cAAc,GACd,gBAAgB,GAChB,kBAAkB,GAClB,cAAc,GACd,KAAK,GACL,aAAa,GACb,uBAAuB,CAAC;AAE5B,MAAM,MAAM,mCAAmC,GAC3C,kBAAkB,GAClB,8BAA8B,GAC9B,4BAA4B,GAC5B,6BAA6B,GAC7B,2BAA2B,GAC3B,yBAAyB,GACzB,2BAA2B,GAC3B,wBAAwB,GACxB,oBAAoB,GACpB,sCAAsC,GACtC,+BAA+B,GAC/B,8BAA8B,CAAC;AAEnC,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,8BAA8B,CAAC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,kCAAkC,CAAC,QAAQ,GAAG,OAAO;IACpE,eAAe,EAAE,OAAO,CAAC;IACzB,QAAQ,EAAE,0BAA0B,EAAE,CAAC;IACvC,eAAe,EAAE,QAAQ,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,8BAA8B;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,8BAA8B;IAC7C,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,iCAAiC;IAChD,MAAM,EAAE,wBAAwB,CAAC;IACjC,WAAW,EAAE,IAAI,CAAC,4BAA4B,EAAE,UAAU,CAAC,CAAC;IAC5D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC;IAC7B,cAAc,CAAC,EAAE,kCAAkC,CAAC;IACpD,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,UAAU,CAAC,EAAE,8BAA8B,CAAC;IAC5C,cAAc,CAAC,EAAE,iCAAiC,CAAC;IACnD,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,4BAA4B,CAAC;IACtC,YAAY,EAAE,+BAA+B,CAAC;IAC9C,iBAAiB,EAAE,8BAA8B,CAAC;IAClD,gBAAgB,EAAE;QAChB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC;KAC9B,CAAC;IACF,cAAc,EAAE,0BAA0B,EAAE,CAAC;IAC7C,WAAW,EAAE;QACX,eAAe,EAAE,OAAO,CAAC;QACzB,WAAW,EAAE,OAAO,CAAC;QACrB,aAAa,EAAE,OAAO,CAAC;QACvB,aAAa,EAAE,OAAO,CAAC;QACvB,yBAAyB,EAAE,OAAO,CAAC;QACnC,QAAQ,EAAE,+BAA+B,EAAE,CAAC;KAC7C,CAAC;CACH;AAED,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,mCAAmC,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,2BAA2B,CAAC;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,+BAA+B,EAAE,CAAC;IAC5C,WAAW,CAAC,EAAE,6BAA6B,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,2BAA2B,CAAC;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,6BAA6B;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,2BAA2B,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,mCAAmC,EAAE,CAAC;CACzD;AAED,MAAM,WAAW,6BAA6B,CAAC,QAAQ;IACrD,OAAO,EAAE,OAAO,CAAC,2BAA2B,EAAE,qBAAqB,CAAC,CAAC;IACrE,SAAS,EAAE,sBAAsB,CAAC;IAClC,OAAO,EAAE,4BAA4B,CAAC;IACtC,cAAc,CAAC,EAAE,2BAA2B,CAAC;IAC7C,WAAW,EAAE,CAAC,SAAS,EAAE,sBAAsB,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;CAClF;AAED,MAAM,MAAM,8BAA8B,CAAC,QAAQ,IAC/C;IACE,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,EAAE,gCAAgC,CAAC;IAC3C,OAAO,EAAE,QAAQ,CAAC;CACnB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,QAAQ,EAAE,gCAAgC,CAAC;CAC5C,CAAC;AAEN,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;gBAExC,QAAQ,EAAE,gCAAgC;CASvD;AA4ID,eAAO,MAAM,mCAAmC,GAAI,QAAQ,GAAG,OAAO,EACpE,SAAS,QAAQ,KAChB,kCAAkC,CAAC,QAAQ,CAQ7C,CAAC;AAEF,eAAO,MAAM,2BAA2B,GACtC,QAAQ,wBAAwB,EAChC,OAAO,MAAM,8BAA8B,EAC3C,OAAO,MAAM,KACZ,MAoBF,CAAC;AAEF,eAAO,MAAM,4BAA4B,GACvC,QAAQ,wBAAwB,EAChC,aAAa,IAAI,CAAC,4BAA4B,EAAE,UAAU,CAAC,KAC1D,8BA4BF,CAAC;AAEF,eAAO,MAAM,uCAAuC,GAClD,gBAAgB,iCAAiC,KAChD,gCAeF,CAAC;AAEF,eAAO,MAAM,sCAAsC,GACjD,SAAS,OAAO,CAAC,2BAA2B,EAAE,qBAAqB,CAAC,EACpE,WAAW,sBAAsB,EACjC,SAAS,4BAA4B,KACpC,gCAiGF,CAAC;AAgBF,eAAO,MAAM,gCAAgC,GAC3C,UAAU,gCAAgC,EAC1C,WAAW,2BAA2B,KACrC,gCAkEF,CAAC;AAEF,eAAO,MAAM,2CAA2C,GACtD,SAAS,OAAO,CAAC,2BAA2B,EAAE,qBAAqB,CAAC,EACpE,WAAW,sBAAsB,EACjC,SAAS,4BAA4B,KACpC,IAOF,CAAC;AAEF,eAAO,MAAM,4CAA4C,GACvD,gBAAgB,iCAAiC,KAChD,IAGF,CAAC;AAEF,eAAO,MAAM,8BAA8B,GAAU,QAAQ,EAC3D,OAAO,6BAA6B,CAAC,QAAQ,CAAC,KAC7C,OAAO,CAAC,8BAA8B,CAAC,QAAQ,CAAC,CAiBlD,CAAC;AAEF,eAAO,MAAM,oCAAoC,GAC/C,OAAO,iCAAiC,KACvC,4BAiKF,CAAC"}
+{"version":3,"file":"CodaliDatasetPrivacyEngine.d.ts","sourceRoot":"","sources":["../../src/storage/CodaliDatasetPrivacyEngine.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,KAAK,+BAA+B,EACpC,KAAK,sBAAsB,EAC3B,KAAK,iCAAiC,EACtC,KAAK,kCAAkC,EACvC,KAAK,4BAA4B,EAClC,MAAM,6BAA6B,CAAC;AAErC,MAAM,MAAM,2BAA2B,GACnC,UAAU,GACV,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,qBAAqB,CAAC;AAE1B,MAAM,MAAM,8BAA8B,GACtC,eAAe,GACf,cAAc,GACd,gBAAgB,GAChB,kBAAkB,GAClB,cAAc,GACd,KAAK,GACL,aAAa,GACb,uBAAuB,GACvB,mBAAmB,CAAC;AAExB,MAAM,MAAM,mCAAmC,GAC3C,kBAAkB,GAClB,8BAA8B,GAC9B,4BAA4B,GAC5B,6BAA6B,GAC7B,2BAA2B,GAC3B,yBAAyB,GACzB,2BAA2B,GAC3B,wBAAwB,GACxB,oBAAoB,GACpB,sCAAsC,GACtC,+BAA+B,GAC/B,8BAA8B,CAAC;AAEnC,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,8BAA8B,CAAC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,kCAAkC,CAAC,QAAQ,GAAG,OAAO;IACpE,eAAe,EAAE,OAAO,CAAC;IACzB,QAAQ,EAAE,0BAA0B,EAAE,CAAC;IACvC,eAAe,EAAE,QAAQ,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,8BAA8B;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,8BAA8B;IAC7C,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,iCAAiC;IAChD,MAAM,EAAE,wBAAwB,CAAC;IACjC,WAAW,EAAE,IAAI,CAAC,4BAA4B,EAAE,UAAU,CAAC,CAAC;IAC5D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC;IAC7B,cAAc,CAAC,EAAE,kCAAkC,CAAC;IACpD,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,UAAU,CAAC,EAAE,8BAA8B,CAAC;IAC5C,cAAc,CAAC,EAAE,iCAAiC,CAAC;IACnD,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,4BAA4B,CAAC;IACtC,YAAY,EAAE,+BAA+B,CAAC;IAC9C,iBAAiB,EAAE,8BAA8B,CAAC;IAClD,gBAAgB,EAAE;QAChB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC;KAC9B,CAAC;IACF,cAAc,EAAE,0BAA0B,EAAE,CAAC;IAC7C,WAAW,EAAE;QACX,eAAe,EAAE,OAAO,CAAC;QACzB,WAAW,EAAE,OAAO,CAAC;QACrB,aAAa,EAAE,OAAO,CAAC;QACvB,aAAa,EAAE,OAAO,CAAC;QACvB,yBAAyB,EAAE,OAAO,CAAC;QACnC,QAAQ,EAAE,+BAA+B,EAAE,CAAC;KAC7C,CAAC;CACH;AAED,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,mCAAmC,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,2BAA2B,CAAC;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,+BAA+B,EAAE,CAAC;IAC5C,WAAW,CAAC,EAAE,6BAA6B,EAAE,CAAC;CAC/C;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,2BAA2B,CAAC;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,6BAA6B;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,2BAA2B,CAAC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,mCAAmC,EAAE,CAAC;CACzD;AAED,MAAM,WAAW,6BAA6B,CAAC,QAAQ;IACrD,OAAO,EAAE,OAAO,CAAC,2BAA2B,EAAE,qBAAqB,CAAC,CAAC;IACrE,SAAS,EAAE,sBAAsB,CAAC;IAClC,OAAO,EAAE,4BAA4B,CAAC;IACtC,cAAc,CAAC,EAAE,2BAA2B,CAAC;IAC7C,WAAW,EAAE,CAAC,SAAS,EAAE,sBAAsB,KAAK,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;CAClF;AAED,MAAM,MAAM,8BAA8B,CAAC,QAAQ,IAC/C;IACE,EAAE,EAAE,IAAI,CAAC;IACT,QAAQ,EAAE,gCAAgC,CAAC;IAC3C,OAAO,EAAE,QAAQ,CAAC;CACnB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,QAAQ,EAAE,gCAAgC,CAAC;CAC5C,CAAC;AAEN,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;gBAExC,QAAQ,EAAE,gCAAgC;CASvD;AAwJD,eAAO,MAAM,mCAAmC,GAAI,QAAQ,GAAG,OAAO,EACpE,SAAS,QAAQ,KAChB,kCAAkC,CAAC,QAAQ,CAQ7C,CAAC;AAEF,eAAO,MAAM,2BAA2B,GACtC,QAAQ,wBAAwB,EAChC,OAAO,MAAM,8BAA8B,EAC3C,OAAO,MAAM,KACZ,MAoBF,CAAC;AAEF,eAAO,MAAM,4BAA4B,GACvC,QAAQ,wBAAwB,EAChC,aAAa,IAAI,CAAC,4BAA4B,EAAE,UAAU,CAAC,KAC1D,8BA4BF,CAAC;AAEF,eAAO,MAAM,uCAAuC,GAClD,gBAAgB,iCAAiC,KAChD,gCAeF,CAAC;AAEF,eAAO,MAAM,sCAAsC,GACjD,SAAS,OAAO,CAAC,2BAA2B,EAAE,qBAAqB,CAAC,EACpE,WAAW,sBAAsB,EACjC,SAAS,4BAA4B,KACpC,gCAiGF,CAAC;AAgBF,eAAO,MAAM,gCAAgC,GAC3C,UAAU,gCAAgC,EAC1C,WAAW,2BAA2B,KACrC,gCAkEF,CAAC;AAEF,eAAO,MAAM,2CAA2C,GACtD,SAAS,OAAO,CAAC,2BAA2B,EAAE,qBAAqB,CAAC,EACpE,WAAW,sBAAsB,EACjC,SAAS,4BAA4B,KACpC,IAOF,CAAC;AAEF,eAAO,MAAM,4CAA4C,GACvD,gBAAgB,iCAAiC,KAChD,IAGF,CAAC;AAEF,eAAO,MAAM,8BAA8B,GAAU,QAAQ,EAC3D,OAAO,6BAA6B,CAAC,QAAQ,CAAC,KAC7C,OAAO,CAAC,8BAA8B,CAAC,QAAQ,CAAC,CAiBlD,CAAC;AAEF,eAAO,MAAM,oCAAoC,GAC/C,OAAO,iCAAiC,KACvC,4BAiKF,CAAC"}

package/dist/storage/CodaliDatasetPrivacyEngine.js

@@ -30,6 +30,18 @@ const SECRET_VALUE_PATTERNS = [
         kind: "env_secret_assignment",
         pattern: /\b(?:API[_-]?KEY|TOKEN|SECRET|PASSWORD|PRIVATE[_-]?KEY)=["']?[^"'\s]{8,}["']?/gi,
     },
+    // Connector credentials. Added alongside the first MCP connector, because
+    // that is the point at which third-party secrets first flow through a run.
+    // The `sk-` rule above does not match underscore-delimited keys such as
+    // mswarm's `sk_prod_mswarm_...`, so those need their own rule.
+    {
+        kind: "connector_api_key",
+        pattern: /\bsk_[A-Za-z0-9]+_[A-Za-z0-9_]{8,}\b/g,
+    },
+    { kind: "connector_api_key", pattern: /\bglpat-[A-Za-z0-9_-]{16,}\b/g },
+    { kind: "connector_api_key", pattern: /\bxox[abprs]-[A-Za-z0-9-]{10,}\b/g },
+    { kind: "connector_api_key", pattern: /\bAIza[0-9A-Za-z_-]{30,}\b/g },
+    { kind: "connector_api_key", pattern: /\bnpm_[A-Za-z0-9]{30,}\b/g },
 ];
 const PERSONAL_KEY_PATTERNS = [
     /(^|[_-])(email|phone|ssn|person|user[_-]?id|requester)([_-]|$)/i,

package/dist/tools/ToolRegistry.d.ts

@@ -1,9 +1,22 @@
-import { type ToolContext, type ToolDefinition, type ToolExecutionResult } from "./ToolTypes.js";
+import { type ToolCapability, type ToolContext, type ToolDefinition, type ToolDescriptor, type ToolExecutionResult } from "./ToolTypes.js";
+/**
+ * Projects a registered tool into its model-facing descriptor. Kept as a free
+ * function so connector adapters can reuse the same defaulting rules.
+ */
+export declare const toolDescriptorFor: (tool: ToolDefinition) => ToolDescriptor;
 export declare class ToolRegistry {
     private tools;
     register(tool: ToolDefinition): void;
     list(): ToolDefinition[];
     describe(): Array<Pick<ToolDefinition, "name" | "description" | "inputSchema">>;
+    /**
+     * Model-facing view of the registry, optionally narrowed to a set of tool
+     * names. This is derived on every call rather than cached so the planner can
+     * never see a schema the executor would not honour.
+     */
+    catalog(names?: readonly string[]): ToolDescriptor[];
+    /** Capability -> tools, for the first stage of two-level tool exposure. */
+    capabilities(names?: readonly string[]): Map<ToolCapability, ToolDescriptor[]>;
     execute(name: string, args: unknown, context: ToolContext): Promise<ToolExecutionResult>;
 }
 //# sourceMappingURL=ToolRegistry.d.ts.map

package/dist/tools/ToolRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ToolRegistry.d.ts","sourceRoot":"","sources":["../../src/tools/ToolRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,cAAc,EAGnB,KAAK,mBAAmB,EAGzB,MAAM,gBAAgB,CAAC;AA4QxB,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAqC;IAElD,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAOpC,IAAI,IAAI,cAAc,EAAE;IAIxB,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,aAAa,GAAG,aAAa,CAAC,CAAC;IAQzE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAkC/F"}
+{"version":3,"file":"ToolRegistry.d.ts","sourceRoot":"","sources":["../../src/tools/ToolRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,cAAc,EAGnB,KAAK,mBAAmB,EAGzB,MAAM,gBAAgB,CAAC;AAExB;;;GAGG;AACH,eAAO,MAAM,iBAAiB,GAAI,MAAM,cAAc,KAAG,cAOvD,CAAC;AA4QH,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAqC;IAElD,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAOpC,IAAI,IAAI,cAAc,EAAE;IAIxB,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,aAAa,GAAG,aAAa,CAAC,CAAC;IAQ/E;;;;OAIG;IACH,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,cAAc,EAAE;IAOpD,2EAA2E;IAC3E,YAAY,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,GAAG,CAAC,cAAc,EAAE,cAAc,EAAE,CAAC;IAaxE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAkC/F"}

package/dist/tools/ToolRegistry.js

@@ -1,4 +1,16 @@
-import { ToolExecutionError, toolErrorCategoryForCode, } from "./ToolTypes.js";
+import { ToolExecutionError, toolCapabilityForName, toolErrorCategoryForCode, } from "./ToolTypes.js";
+/**
+ * Projects a registered tool into its model-facing descriptor. Kept as a free
+ * function so connector adapters can reuse the same defaulting rules.
+ */
+export const toolDescriptorFor = (tool) => ({
+    name: tool.name,
+    description: tool.description,
+    inputSchema: tool.inputSchema,
+    outputSchema: tool.outputSchema,
+    readOnly: tool.readOnly ?? false,
+    capability: tool.capability ?? toolCapabilityForName(tool.name),
+});
 const isObject = (value) => {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 };
@@ -262,6 +274,31 @@ export class ToolRegistry {
             inputSchema: tool.inputSchema,
         }));
     }
+    /**
+     * Model-facing view of the registry, optionally narrowed to a set of tool
+     * names. This is derived on every call rather than cached so the planner can
+     * never see a schema the executor would not honour.
+     */
+    catalog(names) {
+        const filter = names ? new Set(names) : undefined;
+        return this.list()
+            .filter((tool) => !filter || filter.has(tool.name))
+            .map((tool) => toolDescriptorFor(tool));
+    }
+    /** Capability -> tools, for the first stage of two-level tool exposure. */
+    capabilities(names) {
+        const grouped = new Map();
+        for (const descriptor of this.catalog(names)) {
+            const bucket = grouped.get(descriptor.capability);
+            if (bucket) {
+                bucket.push(descriptor);
+            }
+            else {
+                grouped.set(descriptor.capability, [descriptor]);
+            }
+        }
+        return grouped;
+    }
     async execute(name, args, context) {
         const tool = this.tools.get(name);
         if (!tool) {

package/dist/tools/ToolTypes.d.ts

@@ -57,10 +57,45 @@ export interface ToolExecutionResult extends ToolHandlerResult {
     error?: ToolError;
 }
 export type ToolHandler = (args: unknown, context: ToolContext) => Promise<ToolHandlerResult>;
+/**
+ * Capability group a tool belongs to. The orchestrator selects capabilities
+ * first and only then sees the full schemas of the tools inside them, so this
+ * value is what keeps the planner prompt bounded as the registry grows.
+ */
+export type ToolCapability = string;
 export interface ToolDefinition {
     name: string;
     description: string;
     inputSchema?: ToolInputSchema;
+    /** Shape of `ToolHandlerResult.data`, when the tool returns structured data. */
+    outputSchema?: ToolSchemaDefinition;
+    /**
+     * Whether the tool can mutate anything. Decided by Codali policy, never by a
+     * connector's self-description: an MCP server advertising `readOnlyHint` is a
+     * hint, not a security boundary.
+     */
+    readOnly?: boolean;
+    capability?: ToolCapability;
     handler: ToolHandler;
 }
+/**
+ * The model-facing view of a tool. Derived from {@link ToolDefinition} on
+ * demand — never stored separately, so the planner and the executor cannot
+ * drift onto different schemas.
+ */
+export interface ToolDescriptor {
+    name: string;
+    description: string;
+    inputSchema?: ToolInputSchema;
+    outputSchema?: ToolSchemaDefinition;
+    readOnly: boolean;
+    capability: ToolCapability;
+}
+export declare const DEFAULT_TOOL_CAPABILITY = "general";
+/**
+ * Capability inferred from a tool name when the definition does not declare
+ * one. Names are conventionally `<capability>_<action>` (`docdex_search`) or
+ * `<source>:<server>:<tool>` for connector-backed tools.
+ */
+export declare const toolCapabilityForName: (name: string) => ToolCapability;
 //# sourceMappingURL=ToolTypes.d.ts.map

package/dist/tools/ToolTypes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ToolTypes.d.ts","sourceRoot":"","sources":["../../src/tools/ToolTypes.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,uBAAuB,GAC/B,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,SAAS,GACT,QAAQ,GACR,OAAO,GACP,MAAM,CAAC;AAEX,MAAM,WAAW,oBAAqB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACnE,IAAI,CAAC,EAAE,uBAAuB,GAAG,uBAAuB,EAAE,CAAC;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAC7B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAgB,SAAQ,oBAAoB;IAC3D,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,MAAM,aAAa,GACrB,cAAc,GACd,qBAAqB,GACrB,mBAAmB,GACnB,wBAAwB,GACxB,cAAc,GACd,uBAAuB,GACvB,qBAAqB,GACrB,oBAAoB,GACpB,cAAc,GACd,8BAA8B,GAC9B,wBAAwB,GACxB,wBAAwB,GACxB,8BAA8B,GAC9B,oBAAoB,GACpB,2BAA2B,GAC3B,oBAAoB,CAAC;AAEzB,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,QAAQ,GACR,YAAY,GACZ,YAAY,GACZ,SAAS,GACT,WAAW,CAAC;AAEhB,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAGzC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAO;IAU1E,WAAW,IAAI,SAAS;CASzB;AAED,eAAO,MAAM,wBAAwB,GAAI,MAAM,aAAa,KAAG,iBAoB9D,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAED,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAE9F,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,OAAO,EAAE,WAAW,CAAC;CACtB"}
+{"version":3,"file":"ToolTypes.d.ts","sourceRoot":"","sources":["../../src/tools/ToolTypes.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,uBAAuB,GAC/B,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,SAAS,GACT,QAAQ,GACR,OAAO,GACP,MAAM,CAAC;AAEX,MAAM,WAAW,oBAAqB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACnE,IAAI,CAAC,EAAE,uBAAuB,GAAG,uBAAuB,EAAE,CAAC;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAC7B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAgB,SAAQ,oBAAoB;IAC3D,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,MAAM,aAAa,GACrB,cAAc,GACd,qBAAqB,GACrB,mBAAmB,GACnB,wBAAwB,GACxB,cAAc,GACd,uBAAuB,GACvB,qBAAqB,GACrB,oBAAoB,GACpB,cAAc,GACd,8BAA8B,GAC9B,wBAAwB,GACxB,wBAAwB,GACxB,8BAA8B,GAC9B,oBAAoB,GACpB,2BAA2B,GAC3B,oBAAoB,CAAC;AAEzB,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,QAAQ,GACR,YAAY,GACZ,YAAY,GACZ,SAAS,GACT,WAAW,CAAC;AAEhB,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAGzC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAO;IAU1E,WAAW,IAAI,SAAS;CASzB;AAED,eAAO,MAAM,wBAAwB,GAAI,MAAM,aAAa,KAAG,iBAoB9D,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAED,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAE9F;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AAEpC,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,gFAAgF;IAChF,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,cAAc,CAAC;IAC5B,OAAO,EAAE,WAAW,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,eAAO,MAAM,uBAAuB,YAAY,CAAC;AAEjD;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAAI,MAAM,MAAM,KAAG,cAapD,CAAC"}

package/dist/tools/ToolTypes.js

@@ -42,3 +42,24 @@ export const toolErrorCategoryForCode = (code) => {
     }
     return "execution";
 };
+export const DEFAULT_TOOL_CAPABILITY = "general";
+/**
+ * Capability inferred from a tool name when the definition does not declare
+ * one. Names are conventionally `<capability>_<action>` (`docdex_search`) or
+ * `<source>:<server>:<tool>` for connector-backed tools.
+ */
+export const toolCapabilityForName = (name) => {
+    const trimmed = name.trim();
+    if (!trimmed)
+        return DEFAULT_TOOL_CAPABILITY;
+    const namespaced = trimmed.split(":");
+    if (namespaced.length >= 3) {
+        // "mcp:github:list_issues" -> "github"
+        return namespaced[1] || DEFAULT_TOOL_CAPABILITY;
+    }
+    const underscored = trimmed.split("_");
+    if (underscored.length >= 2 && underscored[0]) {
+        return underscored[0];
+    }
+    return DEFAULT_TOOL_CAPABILITY;
+};

package/dist/tools/TruncateResult.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Fitting a tool result into a budget without destroying it.
+ *
+ * Cutting a serialized payload at a character count leaves the model invalid
+ * JSON ending mid-token. Observed with `list_commits`: 12,063 characters cut at
+ * 12,000, so the model received a broken document and reported "I can only see
+ * one commit" — accurate about what survived, useless as an answer.
+ *
+ * Most oversized results are a list of similar things. Keeping whole items and
+ * saying how many were dropped preserves both validity and the fact that more
+ * exists, which is what the model needs to be honest about coverage.
+ */
+export interface TruncationResult {
+    text: string;
+    truncated: boolean;
+    /** Items kept, when the payload was a list. */
+    keptItems?: number;
+    /** Items dropped, when the payload was a list. */
+    droppedItems?: number;
+}
+/**
+ * Trims a tool result to `limit` characters.
+ *
+ * When the payload holds a list, drops whole items from the end until it fits,
+ * so the result stays parseable. Otherwise falls back to a character cut, which
+ * is still better than silence for prose.
+ */
+export declare const truncateToolResult: (raw: unknown, serialized: string, limit: number) => TruncationResult;
+//# sourceMappingURL=TruncateResult.d.ts.map

package/dist/tools/TruncateResult.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TruncateResult.d.ts","sourceRoot":"","sources":["../../src/tools/TruncateResult.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAkCD;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,GAC7B,KAAK,OAAO,EACZ,YAAY,MAAM,EAClB,OAAO,MAAM,KACZ,gBA8CF,CAAC"}