@mcoda/codali 0.1.87 → 0.1.89

package/dist/gateway/ToolCapabilityCompiler.js

@@ -0,0 +1,442 @@
+export const CODALI_GATEWAY_READ_ONLY_BACKING_TOOLS = [
+    "docdex_search",
+    "docdex_batch_search",
+    "docdex_open",
+    "docdex_files",
+    "docdex_tree",
+    "docdex_stats",
+];
+export const CODALI_GATEWAY_RESERVED_TOOL_ARG_KEYS = [
+    "apiKey",
+    "api_key",
+    "baseUrl",
+    "base_url",
+    "credentialSource",
+    "credential_source",
+    "docdex",
+    "repo",
+    "repoId",
+    "repo_id",
+    "repoRoot",
+    "repo_root",
+    "tenant",
+    "tenantId",
+    "tenant_id",
+];
+const DOCDEX_OPERATION_BY_TOOL = {
+    docdex_batch_search: "batch_search",
+    docdex_files: "files",
+    docdex_open: "open",
+    docdex_search: "search",
+    docdex_stats: "stats",
+    docdex_tree: "tree",
+};
+const READ_ONLY_BUILTIN_TOOLS = new Set(CODALI_GATEWAY_READ_ONLY_BACKING_TOOLS);
+const DESTRUCTIVE_TOOL_TOKENS = new Set([
+    "delete",
+    "destroy",
+    "drop",
+    "exec",
+    "execute",
+    "purge",
+    "remove",
+    "reset",
+    "rm",
+    "shell",
+    "terminal",
+    "truncate",
+    "wipe",
+]);
+const WRITE_TOOL_TOKENS = new Set([
+    "add",
+    "approve",
+    "assign",
+    "cancel",
+    "commit",
+    "create",
+    "dispatch",
+    "edit",
+    "merge",
+    "mutate",
+    "post",
+    "publish",
+    "push",
+    "send",
+    "submit",
+    "sync",
+    "transition",
+    "update",
+    "upload",
+    "write",
+]);
+const RESERVED_TOOL_ARG_KEY_SET = new Set(CODALI_GATEWAY_RESERVED_TOOL_ARG_KEYS.map((key) => key.toLowerCase()));
+const isRecord = (value) => Boolean(value && typeof value === "object" && !Array.isArray(value));
+const normalizeName = (value) => typeof value === "string" && value.trim() ? value.trim() : undefined;
+const unique = (values) => {
+    const seen = new Set();
+    for (const value of values) {
+        const normalized = normalizeName(value);
+        if (normalized) {
+            seen.add(normalized);
+        }
+    }
+    return [...seen];
+};
+const toolNameTokens = (tool) => tool
+    .toLowerCase()
+    .split(/[^a-z0-9]+/g)
+    .filter(Boolean);
+const hasRiskToken = (tool, tokens) => {
+    const normalized = tool.toLowerCase();
+    return toolNameTokens(tool).some((token) => tokens.has(token)) ||
+        [...tokens].some((token) => normalized === token || normalized.endsWith(`_${token}`));
+};
+const classifyCapabilityRisk = (name, readOnly) => {
+    if (hasRiskToken(name, DESTRUCTIVE_TOOL_TOKENS)) {
+        return "destructive_blocked";
+    }
+    if (!readOnly || hasRiskToken(name, WRITE_TOOL_TOKENS)) {
+        return "write_with_approval";
+    }
+    return "read_only";
+};
+const readString = (record, keys) => {
+    for (const key of keys) {
+        const value = normalizeName(record[key]);
+        if (value) {
+            return value;
+        }
+    }
+    return undefined;
+};
+const readBoolean = (record, keys) => {
+    for (const key of keys) {
+        const value = record[key];
+        if (typeof value === "boolean") {
+            return value;
+        }
+    }
+    return undefined;
+};
+const readStringArray = (record, keys) => {
+    for (const key of keys) {
+        const value = record[key];
+        if (!Array.isArray(value)) {
+            continue;
+        }
+        return unique(value.map(normalizeName));
+    }
+    return [];
+};
+const readRecord = (record, keys) => {
+    for (const key of keys) {
+        const value = record[key];
+        if (isRecord(value)) {
+            return value;
+        }
+    }
+    return undefined;
+};
+const extractToolName = (tool) => {
+    if (typeof tool === "string") {
+        return normalizeName(tool);
+    }
+    if (!isRecord(tool)) {
+        return undefined;
+    }
+    return readString(tool, ["name", "tool", "toolName", "tool_name", "slug", "id"]);
+};
+const readManifestTools = (tools, keys) => {
+    if (!tools) {
+        return [];
+    }
+    const names = [];
+    for (const key of keys) {
+        const value = tools[key];
+        if (Array.isArray(value)) {
+            names.push(...value.map(extractToolName).filter(Boolean));
+        }
+    }
+    return unique(names);
+};
+const addIssue = (target, severity, code, message, tool, details) => {
+    target.push({ code, message, tool, severity, details });
+};
+const addSkippedTool = (skippedTools, warnings, name, reason, details) => {
+    skippedTools.push({ name, reason, details });
+    addIssue(warnings, "warning", `GATEWAY_TOOL_SKIPPED_${reason.toUpperCase()}`, `Skipped tool ${name}: ${reason}.`, name, details);
+};
+const normalizeAppToolContracts = (contracts, warnings) => {
+    const normalized = new Map();
+    if (!contracts) {
+        return normalized;
+    }
+    if (Array.isArray(contracts)) {
+        for (const contract of contracts) {
+            if (!isRecord(contract)) {
+                continue;
+            }
+            const name = extractToolName(contract);
+            if (!name) {
+                addIssue(warnings, "warning", "GATEWAY_TOOL_CONTRACT_NAME_REQUIRED", "Skipped an app tool contract without a tool name.");
+                continue;
+            }
+            normalized.set(name, { ...contract, name });
+        }
+        return normalized;
+    }
+    for (const [key, value] of Object.entries(contracts)) {
+        if (!isRecord(value)) {
+            addIssue(warnings, "warning", "GATEWAY_TOOL_CONTRACT_INVALID", `Skipped app tool contract ${key}: contract must be an object.`, key);
+            continue;
+        }
+        const name = extractToolName(value) ?? normalizeName(key);
+        if (!name) {
+            continue;
+        }
+        normalized.set(name, { ...value, name });
+    }
+    return normalized;
+};
+const callSchemaReservedProperties = (contract) => {
+    const schema = readRecord(contract, ["callSchema", "call_schema"]);
+    const properties = schema ? readRecord(schema, ["properties"]) : undefined;
+    if (!properties) {
+        return [];
+    }
+    return Object.keys(properties).filter((key) => RESERVED_TOOL_ARG_KEY_SET.has(key.toLowerCase()));
+};
+const contractGateway = (contract, policyGateway) => {
+    const gateway = readRecord(contract, ["gateway"]);
+    if (!gateway && !policyGateway)
+        return undefined;
+    return { ...(policyGateway ?? {}), ...(gateway ?? {}) };
+};
+const gatewayEndpoint = (gateway) => readString(gateway ?? {}, ["endpoint"]);
+const gatewayHasSigningMaterial = (gateway) => Boolean(readString(gateway ?? {}, [
+    "signatureSecret",
+    "signature_secret",
+    "signingSecret",
+    "signing_secret",
+    "secret",
+    "signature",
+]));
+const gatewayRequiresMissingSignature = (gateway) => Boolean(gateway &&
+    (gatewayEndpoint(gateway) ||
+        gateway.signatureRequired === true ||
+        gateway.signature_required === true) &&
+    !gatewayHasSigningMaterial(gateway));
+const isGatewayReadOnly = (gateway) => {
+    if (!gateway)
+        return true;
+    return readBoolean(gateway, ["readOnly", "read_only"]) === true;
+};
+const isOperationAllowed = (tool, operation, allowedOperations) => allowedOperations.size === 0 ||
+    allowedOperations.has(operation) ||
+    allowedOperations.has(tool);
+const requireDocdexOperation = (operations, tool) => {
+    const operation = DOCDEX_OPERATION_BY_TOOL[tool];
+    if (operation) {
+        operations.add(operation);
+    }
+};
+const isImmutableDocdexRuntimeContext = (docdex) => docdex?.immutableRuntimeContext === true ||
+    docdex?.credentialSource === "attached_mswarm_api_key";
+export const compileToolCapabilities = (input) => {
+    const warnings = [];
+    const errors = [];
+    const skippedTools = [];
+    const capabilities = [];
+    const visibleTools = [];
+    const appVirtualTools = [];
+    const appToolContracts = {};
+    const allowedTools = unique(input.policy.allowedTools);
+    const allowedSet = new Set(allowedTools);
+    const deniedTools = unique(input.policy.deniedTools ?? []);
+    const deniedSet = new Set(deniedTools);
+    const actualTools = new Set(readManifestTools(input.tools ?? input.docdex?.toolManifest, [
+        "actualTools",
+        "actual_tools",
+    ]));
+    const virtualTools = new Set([
+        ...readManifestTools(input.tools ?? input.docdex?.toolManifest, [
+            "virtualTools",
+            "virtual_tools",
+        ]),
+        ...unique(input.policy.appVirtualTools ?? []),
+    ]);
+    const contracts = normalizeAppToolContracts(input.policy.appToolContracts, warnings);
+    const allowedBackingTools = new Set(unique(input.allowedBackingTools ?? CODALI_GATEWAY_READ_ONLY_BACKING_TOOLS));
+    const requiredDocdexOperations = new Set(unique(input.requiredDocdexOperations ?? []));
+    const addCapability = (name, kind, status, readOnly, backingTools, reasons) => {
+        const riskCategory = classifyCapabilityRisk(name, readOnly);
+        capabilities.push({
+            name,
+            kind,
+            status,
+            readOnly,
+            riskCategory,
+            approvalRequired: riskCategory !== "read_only",
+            backingTools,
+            reasons,
+        });
+    };
+    for (const tool of allowedTools) {
+        const contract = contracts.get(tool);
+        const isActual = actualTools.has(tool);
+        const isVirtual = virtualTools.has(tool);
+        const isBuiltin = READ_ONLY_BUILTIN_TOOLS.has(tool);
+        const kind = contract ? "app_contract" : isActual ? "actual" : isVirtual ? "virtual" : "builtin";
+        if (deniedSet.has(tool)) {
+            addCapability(tool, kind, "denied", true, [], ["denied_by_policy"]);
+            addSkippedTool(skippedTools, warnings, tool, "denied_by_policy");
+            continue;
+        }
+        if (!contract && !isActual && !isVirtual && !isBuiltin) {
+            addCapability(tool, kind, "skipped", true, [], ["not_declared"]);
+            addSkippedTool(skippedTools, warnings, tool, "not_declared");
+            continue;
+        }
+        if (!contract) {
+            visibleTools.push(tool);
+            addCapability(tool, kind, "allowed", true, [], []);
+            requireDocdexOperation(requiredDocdexOperations, tool);
+            continue;
+        }
+        if (contract.enabled === false) {
+            addCapability(tool, "app_contract", "skipped", true, [], ["disabled"]);
+            addSkippedTool(skippedTools, warnings, tool, "disabled");
+            continue;
+        }
+        const contractReadOnly = readBoolean(contract, ["readOnly", "read_only"]) ?? true;
+        if (!contractReadOnly) {
+            addCapability(tool, "app_contract", "skipped", false, [], ["not_read_only"]);
+            addSkippedTool(skippedTools, warnings, tool, "not_read_only");
+            continue;
+        }
+        const gateway = contractGateway(contract, input.policy.appToolGateway);
+        const hasGateway = Boolean(gatewayEndpoint(gateway));
+        if (hasGateway && !isGatewayReadOnly(gateway)) {
+            addCapability(tool, "app_gateway", "skipped", false, [], ["gateway_not_read_only"]);
+            addSkippedTool(skippedTools, warnings, tool, "gateway_not_read_only");
+            continue;
+        }
+        if (gatewayRequiresMissingSignature(gateway)) {
+            addCapability(tool, "app_gateway", "skipped", true, [], ["gateway_signature_required"]);
+            addSkippedTool(skippedTools, warnings, tool, "gateway_signature_required");
+            continue;
+        }
+        const reservedProperties = callSchemaReservedProperties(contract);
+        if (reservedProperties.length > 0) {
+            addCapability(tool, "app_contract", "skipped", true, [], [
+                "reserved_call_schema_properties",
+            ]);
+            addSkippedTool(skippedTools, warnings, tool, "reserved_call_schema_properties", {
+                properties: reservedProperties,
+            });
+            continue;
+        }
+        const backingTools = readStringArray(contract, ["backingTools", "backing_tools"]);
+        if (backingTools.length === 0 && !hasGateway) {
+            addCapability(tool, "app_contract", "skipped", true, [], ["missing_backing_tools"]);
+            addSkippedTool(skippedTools, warnings, tool, "missing_backing_tools");
+            continue;
+        }
+        const deniedBackingTools = backingTools.filter((backingTool) => deniedSet.has(backingTool));
+        if (deniedBackingTools.length > 0) {
+            addCapability(tool, "app_contract", "skipped", true, backingTools, [
+                "denied_backing_tools",
+            ]);
+            addSkippedTool(skippedTools, warnings, tool, "denied_backing_tools", {
+                backingTools: deniedBackingTools,
+            });
+            continue;
+        }
+        const disallowedBackingTools = backingTools.filter((backingTool) => !allowedSet.has(backingTool));
+        if (disallowedBackingTools.length > 0) {
+            addCapability(tool, "app_contract", "skipped", true, backingTools, [
+                "backing_tools_not_allowed",
+            ]);
+            addSkippedTool(skippedTools, warnings, tool, "backing_tools_not_allowed", {
+                backingTools: disallowedBackingTools,
+            });
+            continue;
+        }
+        const unsafeBackingTools = backingTools.filter((backingTool) => !allowedBackingTools.has(backingTool));
+        if (unsafeBackingTools.length > 0) {
+            addCapability(tool, "app_contract", "skipped", true, backingTools, [
+                "unsafe_backing_tools",
+            ]);
+            addSkippedTool(skippedTools, warnings, tool, "unsafe_backing_tools", {
+                backingTools: unsafeBackingTools,
+            });
+            continue;
+        }
+        visibleTools.push(tool);
+        appToolContracts[tool] = { ...contract, name: tool };
+        if (virtualTools.has(tool)) {
+            appVirtualTools.push(tool);
+        }
+        addCapability(tool, hasGateway ? "app_gateway" : "app_contract", "allowed", true, backingTools, []);
+        for (const backingTool of backingTools) {
+            requireDocdexOperation(requiredDocdexOperations, backingTool);
+        }
+    }
+    const allowedOperations = new Set(unique(input.docdex?.allowedOperations ?? []));
+    const immutableDocdexContext = isImmutableDocdexRuntimeContext(input.docdex);
+    const needsDocdex = requiredDocdexOperations.size > 0 ||
+        visibleTools.some((tool) => DOCDEX_OPERATION_BY_TOOL[tool]);
+    const docdexRequired = input.docdex?.required === true || requiredDocdexOperations.size > 0;
+    if (docdexRequired && !input.docdex) {
+        addIssue(errors, "error", "GATEWAY_DOCDEX_REQUIRED", "Docdex context is required by the compiled tool surface.");
+    }
+    if (docdexRequired && input.docdex?.enabled === false) {
+        addIssue(errors, "error", "GATEWAY_DOCDEX_DISABLED", "Docdex context is required but disabled.");
+    }
+    if (needsDocdex &&
+        input.docdex?.required === true &&
+        !input.docdex.repoId &&
+        !input.docdex.repoRoot) {
+        addIssue(errors, "error", "GATEWAY_DOCDEX_SCOPE_REQUIRED", "Docdex context is required but no repoId or repoRoot was supplied.");
+    }
+    if (needsDocdex && immutableDocdexContext) {
+        const missing = [];
+        if (!input.docdex?.baseUrl)
+            missing.push("baseUrl");
+        if (!input.docdex?.repoId)
+            missing.push("repoId");
+        if (allowedOperations.size === 0)
+            missing.push("allowedOperations");
+        if (!input.docdex?.capabilities)
+            missing.push("capabilities");
+        if (input.docdex?.credentialSource === "attached_mswarm_api_key" &&
+            (!input.docdex.apiKey || input.docdex.apiKey.trim().length === 0)) {
+            missing.push("apiKey");
+        }
+        if (missing.length > 0) {
+            addIssue(errors, "error", "GATEWAY_DOCDEX_IMMUTABLE_CONTEXT_REQUIRED", "Encrypted Docdex gateway jobs require an immutable runtime context.", undefined, { missing });
+        }
+    }
+    for (const operation of [...requiredDocdexOperations].sort()) {
+        const matchingTool = Object.entries(DOCDEX_OPERATION_BY_TOOL).find(([, value]) => value === operation)?.[0] ?? operation;
+        if (!isOperationAllowed(matchingTool, operation, allowedOperations)) {
+            addIssue(errors, "error", "GATEWAY_DOCDEX_OPERATION_BLOCKED", `Docdex operation ${operation} is not allowed by policy.`, matchingTool, { operation });
+        }
+    }
+    const gateway = input.policy.appToolGateway && isGatewayReadOnly(input.policy.appToolGateway)
+        ? input.policy.appToolGateway
+        : undefined;
+    return {
+        allowedTools,
+        deniedTools,
+        visibleTools: unique(visibleTools),
+        appVirtualTools: unique(appVirtualTools),
+        appToolContracts,
+        appToolGateway: gateway,
+        capabilities,
+        skippedTools,
+        warnings,
+        errors,
+        requiredDocdexOperations: [...requiredDocdexOperations].sort(),
+    };
+};

package/dist/index.d.ts

@@ -1,10 +1,42 @@
 export { runCli } from "./cli.js";
 export { codaliEventToOpenAIChatCompletionChunk, codaliEventToOpenAISseData, createCodaliRuntime, runCodaliTask, } from "./runtime/CodaliRuntime.js";
+export { runCodaliJob } from "./runtime/CodaliJobRuntime.js";
+export { isCodaliGatewayValidationOk, validateCodaliContextPack, validateCodaliEvidenceItem, validateCodaliGatewayPlannerOutput, validateCodaliGatewayPolicy, validateCodaliGatewayRequest, validateCodaliGatewayVerifierOutput, validateCodaliGatewayWorkerTask, validateGatewayContextPack, validateGatewayEvidenceItem, validateGatewayPlannerOutput, validateGatewayPolicy, validateGatewayRequest, validateGatewayVerifierOutput, validateGatewayWorkerTask, } from "./gateway/CodaliGatewaySchemas.js";
+export { CodaliGateway, buildCodaliGatewayFinalSynthesizerMessages, createCodaliGateway, runCodaliGateway, runCodaliGatewayPlanning, runCodaliGatewayWorkerTasks, } from "./gateway/CodaliGateway.js";
+export { buildCodaliGatewayWorkerPrompt, CodaliGatewayStateMachine, createCodaliGatewayStateMachine, } from "./gateway/GatewayStateMachine.js";
+export { normalizeCodaliEvidence, normalizeGatewayEvidence, } from "./gateway/EvidenceNormalizer.js";
+export { buildCodaliContextPack, CodaliContextPackBuilder, createCodaliContextPackBuilder, estimateCodaliContextPackTokens, } from "./gateway/ContextPackBuilder.js";
+export { createInMemoryCodaliGatewayStore, redactCodaliGatewaySecrets, } from "./gateway/CodaliGatewayStore.js";
+export { CODALI_GATEWAY_REPLAY_FIXTURE_SCHEMA_VERSION, CODALI_GATEWAY_TRACE_EVENT_NAMES, CODALI_GATEWAY_TRACE_SCHEMA_VERSION, buildCodaliGatewayTraceEvents, exportCodaliGatewayReplayFixture, readCodaliGatewayTrace, summarizeCodaliGatewayTrace, } from "./gateway/GatewayTraceReplay.js";
+export { CODALI_GATEWAY_CLASSIFIER_SCHEMA, CODALI_GATEWAY_PLANNER_SCHEMA, CodaliGatewayPlanner, CodaliGatewayPlannerError, buildCodaliGatewayClassifierMessages, buildCodaliGatewayPlannerMessages, createCodaliGatewayPlanner, } from "./gateway/GatewayPlanner.js";
+export { DEFAULT_CODALI_GATEWAY_AGENT_ROLES, DEFAULT_CODALI_GATEWAY_ROLE_POLICIES, normalizeCodaliGatewayAgentCandidate, resolveCodaliGatewayAgentTiers, resolveGatewayAgentTiers, } from "./gateway/AgentTierResolver.js";
+export { compileCodaliGatewayPolicy, compileGatewayPolicy, } from "./gateway/GatewayPolicyCompiler.js";
+export { CODALI_GATEWAY_SECURITY_PROMPT_HARDENING, classifyCodaliGatewayToolRisk, resolveCodaliGatewaySecurityPolicy, } from "./gateway/GatewaySecurityPolicy.js";
+export { CODALI_GATEWAY_READ_ONLY_BACKING_TOOLS, CODALI_GATEWAY_RESERVED_TOOL_ARG_KEYS, compileToolCapabilities, } from "./gateway/ToolCapabilityCompiler.js";
+export { CODALI_APP_TOOL_GATEWAY_VERSION, AppToolGatewayDispatchError, buildAppToolGatewaySignedRequest, canonicalizeAppToolGatewayPayload, dispatchAppToolGateway, redactAppToolGatewayPayload, signAppToolGatewayRequest, verifyAppToolGatewayRequestSignature, } from "./gateway/AppToolGatewayDispatcher.js";
+export { CODALI_GATEWAY_LIVE_SCENARIOS, classifyCodaliGatewayLiveAgents, createMcodaAgentRunScenarioRunner, defaultCodaliGatewayLiveCommandRunner, formatCodaliGatewayLiveHarnessTextReport, parseCodaliGatewayLiveInventory, redactCodaliGatewayLiveValue, runCodaliGatewayLiveHarness, } from "./eval/CodaliGatewayLiveHarness.js";
+export { CODALI_GATEWAY_EVAL_CASES, DEFAULT_CODALI_GATEWAY_EVAL_THRESHOLDS, aggregateCodaliGatewayEvalMetrics, compareCodaliGatewayEvalBaseline, createDefaultCodaliGatewayEvalRunner, evaluateCodaliGatewayEvalCase, evaluateCodaliGatewayEvalGates, formatCodaliGatewayEvalTextReport, runCodaliGatewayEvalSuite, } from "./eval/GatewayEvalSuite.js";
 export { loadInstructionBlocks, formatInstructionBlocks } from "./session/InstructionLoader.js";
 export { SessionStore } from "./session/SessionStore.js";
 export { SubagentOrchestrator } from "./subagents/SubagentOrchestrator.js";
 export type { ProviderMessage, ProviderUsage, } from "./providers/ProviderTypes.js";
-export type { CodaliRuntime, CodaliOpenAIChunkOptions, CodaliRuntimeAgentInput, CodaliRuntimeDocdexInput, CodaliRuntimeEvent, CodaliRuntimeInput, CodaliRuntimePolicy, CodaliRuntimeProviderInput, CodaliRuntimeSessionInput, CodaliRuntimeSubagentsInput, CodaliRuntimeResult, CodaliRuntimeWorkspace, } from "./runtime/CodaliRuntime.js";
+export type { CodaliRuntime, CodaliRuntimeAppToolContract, CodaliRuntimeAppToolContracts, CodaliRuntimeAppToolGatewayContract, CodaliOpenAIChunkOptions, CodaliRuntimeAgentInput, CodaliRuntimeDocdexInput, CodaliRuntimeDynamicToolSkip, CodaliRuntimeEvent, CodaliRuntimeInput, CodaliRuntimePolicy, CodaliRuntimeProviderInput, CodaliRuntimeSessionInput, CodaliRuntimeSubagentsInput, CodaliRuntimeTelemetry, CodaliRuntimeToolManifest, CodaliRuntimeToolTelemetryEntry, CodaliRuntimeResult, CodaliRuntimeWorkspace, } from "./runtime/CodaliRuntime.js";
+export type { CodaliEvidenceCard, CodaliJobAgentPolicy, CodaliJobBudgets, CodaliJobEvent, CodaliJobRequest, CodaliJobResponsePolicy, CodaliJobRuntimeError, CodaliJobRuntimeInput, CodaliJobRuntimeResult, CodaliJobStageDefinition, CodaliJobStageKind, CodaliJobStageResult, CodaliJobStageStatus, CodaliJobStatus, CodaliJobTelemetry, CodaliJobTelemetryStage, CodaliTaskRunner, CodaliVerifierResult, } from "./runtime/CodaliJobRuntime.js";
+export type { CodaliGatewayFinalSynthesisInput, CodaliGatewayFinalSynthesizerOptions, CodaliGatewayOptions, CodaliGatewayPlanResult, CodaliGatewayWorkerRunResult, } from "./gateway/CodaliGateway.js";
+export type { CodaliGatewayRejectedFollowUpTask, CodaliGatewayStateMachineInput, CodaliGatewayStateMachineOptions, CodaliGatewayVerificationIteration, CodaliGatewayVerificationLoopResult, CodaliGatewayVerifierRunInput, CodaliGatewayVerifierRunner, CodaliGatewayWorkerExecutionResult, CodaliGatewayWorkerExecutionStatus, CodaliGatewayWorkerModelCallRecord, CodaliGatewayWorkerTaskExecutionResult, CodaliGatewayWorkerTaskRunInput, CodaliGatewayWorkerTaskRunResult, CodaliGatewayWorkerTaskRunner, CodaliGatewayWorkerTaskStatus, CodaliGatewayWorkerToolCallRecord, } from "./gateway/GatewayStateMachine.js";
+export type { CodaliEvidenceNormalizerInput, CodaliEvidenceNormalizerResult, CodaliEvidenceNormalizerToolCall, CodaliEvidenceRejectedItem, } from "./gateway/EvidenceNormalizer.js";
+export type { CodaliContextPackBuildAndPersistInput, CodaliContextPackBuilderInput, CodaliContextPackBuilderOptions, CodaliContextPackBuildResult, } from "./gateway/ContextPackBuilder.js";
+export type { CodaliGatewayCreateRunInput, CodaliGatewayCreateTaskInput, CodaliGatewayRunTrace, CodaliGatewayStore, CodaliGatewayStoreRunStatus, CodaliGatewayStoreTaskStatus, CodaliGatewayStoredArtifact, CodaliGatewayStoredModelCall, CodaliGatewayStoredModelStatus, CodaliGatewayStoredRun, CodaliGatewayStoredTask, CodaliGatewayStoredToolCall, CodaliGatewayStoredToolStatus, CodaliGatewayUpdateRunInput, CodaliGatewayUpdateTaskInput, } from "./gateway/CodaliGatewayStore.js";
+export type { CodaliGatewayDebugSummary, CodaliGatewayReplayFixture, CodaliGatewayReplayFixtureInput, CodaliGatewayReplayFixtureModelCall, CodaliGatewayReplayFixtureOptions, CodaliGatewayReplayFixtureToolCall, CodaliGatewayTraceReadInput, CodaliGatewayTraceReadResult, } from "./gateway/GatewayTraceReplay.js";
+export type { CodaliGatewayPlanningResult, CodaliGatewayPlannerOptions, CodaliGatewayPlannerToolDescriptor, GatewayPlannerInput, } from "./gateway/GatewayPlanner.js";
+export type { CodaliAgentRolePolicy, CodaliAgentTierPolicy, CodaliGatewayApprovalRecord, CodaliGatewayApprovalRequirement, CodaliGatewayApprovalStatus, CodaliGatewayClassifierOutput, CodaliContextPack, CodaliContextPackContradiction, CodaliContextPackExcerpt, CodaliContextPackToolSummary, CodaliEvidenceItem, CodaliGatewayConfidence, CodaliGatewayFinalModel, CodaliGatewayFreshness, CodaliGatewayMessage, CodaliGatewayMessageRole, CodaliGatewayMode, CodaliGatewayModelTier, CodaliGatewayPlannerOutput, CodaliGatewayPolicy, CodaliGatewayPromptHardening, CodaliGatewayRequest, CodaliGatewayResponseFormat, CodaliGatewayResponsePolicy, CodaliGatewayResult, CodaliGatewaySecurityIssue, CodaliGatewaySecurityReview, CodaliGatewaySource, CodaliGatewayStatus, CodaliGatewaySubquestion, CodaliGatewayTenantLimitProfile, CodaliGatewayTrace, CodaliGatewayTraceEvent, CodaliGatewayTraceModelCall, CodaliGatewayTraceToolCall, CodaliGatewayToolRisk, CodaliGatewayToolRiskCategory, CodaliGatewayValidationIssue, CodaliGatewayValidationResult, CodaliGatewayVerifierIssue, CodaliGatewayVerifierOutput, CodaliGatewayWorkerTask, } from "./gateway/CodaliGatewayTypes.js";
+export type { AgentTierResolution, AgentTierResolverInput, CodaliGatewayAgentAssignment, CodaliGatewayAgentCandidate, CodaliGatewayAgentCandidateDiagnostic, CodaliGatewayAgentHealth, CodaliGatewayAgentSource, CodaliGatewayAgentTierError, } from "./gateway/AgentTierResolver.js";
+export type { GatewayPolicyCompilation, GatewayPolicyCompilerInput, } from "./gateway/GatewayPolicyCompiler.js";
+export type { ResolveCodaliGatewaySecurityPolicyInput, } from "./gateway/GatewaySecurityPolicy.js";
+export type { CodaliGatewayCompiledToolCapability, CodaliGatewayCompilerIssue, CodaliGatewaySkippedTool, CodaliGatewayToolCapabilityKind, CodaliGatewayToolCapabilityStatus, ToolCapabilityCompilation, ToolCapabilityCompilerInput, } from "./gateway/ToolCapabilityCompiler.js";
+export type { AppToolGatewayDispatchErrorCode, AppToolGatewayDispatchInput, AppToolGatewayDispatchResult, CodaliAppToolGatewayRequesterScope, CodaliAppToolGatewayScope, CodaliAppToolGatewaySignedRequest, CodaliAppToolGatewayUnsignedRequest, } from "./gateway/AppToolGatewayDispatcher.js";
+export type { CodaliGatewayLiveAgentSummary, CodaliGatewayLiveClassification, CodaliGatewayLiveCommandResult, CodaliGatewayLiveCommandRunner, CodaliGatewayLiveDiscoveryResult, CodaliGatewayLiveHarnessOptions, CodaliGatewayLiveHarnessResult, CodaliGatewayLiveHarnessStatus, CodaliGatewayLiveRoleKey, CodaliGatewayLiveRoleSummary, CodaliGatewayLiveScenarioArtifact, CodaliGatewayLiveScenarioDefinition, CodaliGatewayLiveScenarioId, CodaliGatewayLiveScenarioResult, CodaliGatewayLiveScenarioRunner, CodaliGatewayLiveScenarioRunnerInput, CodaliGatewayLiveScenarioStatus, } from "./eval/CodaliGatewayLiveHarness.js";
+export type { CodaliGatewayEvalCase, CodaliGatewayEvalCaseExpectations, CodaliGatewayEvalCaseResult, CodaliGatewayEvalCitationRecord, CodaliGatewayEvalEvidenceRecord, CodaliGatewayEvalGateFailure, CodaliGatewayEvalGateResult, CodaliGatewayEvalImageArtifactRecord, CodaliGatewayEvalMetricDelta, CodaliGatewayEvalMetrics, CodaliGatewayEvalRegressionComparison, CodaliGatewayEvalReport, CodaliGatewayEvalRunRecord, CodaliGatewayEvalRunStatus, CodaliGatewayEvalRunner, CodaliGatewayEvalSuiteOptions, CodaliGatewayEvalTaskType, CodaliGatewayEvalThresholds, } from "./eval/GatewayEvalSuite.js";
 export type { InstructionBlock, InstructionLoadOptions, } from "./session/InstructionLoader.js";
 export type { CodaliResumeBundle, CodaliSessionMetadata, CodaliSessionStatus, CodaliSessionSummary, CodaliSessionTranscriptEvent, } from "./session/SessionStore.js";
 export type { SubagentPermissions, SubagentResult, SubagentRole, SubagentSpec, SubagentStatus, } from "./subagents/SubagentOrchestrator.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EACL,sCAAsC,EACtC,0BAA0B,EAC1B,mBAAmB,EACnB,aAAa,GACd,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAChG,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,YAAY,EACV,eAAe,EACf,aAAa,GACd,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,aAAa,EACb,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,0BAA0B,EAC1B,yBAAyB,EACzB,2BAA2B,EAC3B,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,cAAc,GACf,MAAM,qCAAqC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EACL,sCAAsC,EACtC,0BAA0B,EAC1B,mBAAmB,EACnB,aAAa,GACd,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,0BAA0B,EAC1B,kCAAkC,EAClC,2BAA2B,EAC3B,4BAA4B,EAC5B,mCAAmC,EACnC,+BAA+B,EAC/B,0BAA0B,EAC1B,2BAA2B,EAC3B,4BAA4B,EAC5B,qBAAqB,EACrB,sBAAsB,EACtB,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,aAAa,EACb,0CAA0C,EAC1C,mBAAmB,EACnB,gBAAgB,EAChB,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,8BAA8B,EAC9B,+BAA+B,GAChC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,4CAA4C,EAC5C,gCAAgC,EAChC,mCAAmC,EACnC,6BAA6B,EAC7B,gCAAgC,EAChC,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,gCAAgC,EAChC,6BAA6B,EAC7B,oBAAoB,EACpB,yBAAyB,EACzB,oCAAoC,EACpC,iCAAiC,EACjC,0BAA0B,GAC3B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,kCAAkC,EAClC,oCAAoC,EACpC,oCAAoC,EACpC,8BAA8B,EAC9B,wBAAwB,GACzB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,GACrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,wCAAwC,EACxC,6BAA6B,EAC7B,kCAAkC,GACnC,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,sCAAsC,EACtC,qCAAqC,EACrC,uBAAuB,GACxB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,+BAA+B,EAC/B,2BAA2B,EAC3B,gCAAgC,EAChC,iCAAiC,EACjC,sBAAsB,EACtB,2BAA2B,EAC3B,yBAAyB,EACzB,oCAAoC,GACrC,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,6BAA6B,EAC7B,+BAA+B,EAC/B,iCAAiC,EACjC,qCAAqC,EACrC,wCAAwC,EACxC,+BAA+B,EAC/B,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,yBAAyB,EACzB,sCAAsC,EACtC,iCAAiC,EACjC,gCAAgC,EAChC,oCAAoC,EACpC,6BAA6B,EAC7B,8BAA8B,EAC9B,iCAAiC,EACjC,yBAAyB,GAC1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAChG,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,YAAY,EACV,eAAe,EACf,aAAa,GACd,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,aAAa,EACb,4BAA4B,EAC5B,6BAA6B,EAC7B,mCAAmC,EACnC,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,4BAA4B,EAC5B,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,0BAA0B,EAC1B,yBAAyB,EACzB,2BAA2B,EAC3B,sBAAsB,EACtB,yBAAyB,EACzB,+BAA+B,EAC/B,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,kBAAkB,EAClB,uBAAuB,EACvB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,gCAAgC,EAChC,oCAAoC,EACpC,oBAAoB,EACpB,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,iCAAiC,EACjC,8BAA8B,EAC9B,gCAAgC,EAChC,kCAAkC,EAClC,mCAAmC,EACnC,6BAA6B,EAC7B,2BAA2B,EAC3B,kCAAkC,EAClC,kCAAkC,EAClC,kCAAkC,EAClC,sCAAsC,EACtC,+BAA+B,EAC/B,gCAAgC,EAChC,6BAA6B,EAC7B,6BAA6B,EAC7B,iCAAiC,GAClC,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EACV,6BAA6B,EAC7B,8BAA8B,EAC9B,gCAAgC,EAChC,0BAA0B,GAC3B,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACV,qCAAqC,EACrC,6BAA6B,EAC7B,+BAA+B,EAC/B,4BAA4B,GAC7B,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACV,2BAA2B,EAC3B,4BAA4B,EAC5B,qBAAqB,EACrB,kBAAkB,EAClB,2BAA2B,EAC3B,4BAA4B,EAC5B,2BAA2B,EAC3B,4BAA4B,EAC5B,8BAA8B,EAC9B,sBAAsB,EACtB,uBAAuB,EACvB,2BAA2B,EAC3B,6BAA6B,EAC7B,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACV,yBAAyB,EACzB,0BAA0B,EAC1B,+BAA+B,EAC/B,mCAAmC,EACnC,iCAAiC,EACjC,kCAAkC,EAClC,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACV,2BAA2B,EAC3B,2BAA2B,EAC3B,kCAAkC,EAClC,mBAAmB,GACpB,MAAM,6BAA6B,CAAC;AACrC,YAAY,EACV,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,EAC3B,gCAAgC,EAChC,2BAA2B,EAC3B,6BAA6B,EAC7B,iBAAiB,EACjB,8BAA8B,EAC9B,wBAAwB,EACxB,4BAA4B,EAC5B,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,wBAAwB,EACxB,iBAAiB,EACjB,sBAAsB,EACtB,0BAA0B,EAC1B,mBAAmB,EACnB,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,2BAA2B,EAC3B,mBAAmB,EACnB,0BAA0B,EAC1B,2BAA2B,EAC3B,mBAAmB,EACnB,mBAAmB,EACnB,wBAAwB,EACxB,+BAA+B,EAC/B,kBAAkB,EAClB,uBAAuB,EACvB,2BAA2B,EAC3B,0BAA0B,EAC1B,qBAAqB,EACrB,6BAA6B,EAC7B,4BAA4B,EAC5B,6BAA6B,EAC7B,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,4BAA4B,EAC5B,2BAA2B,EAC3B,qCAAqC,EACrC,wBAAwB,EACxB,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,uCAAuC,GACxC,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,mCAAmC,EACnC,0BAA0B,EAC1B,wBAAwB,EACxB,+BAA+B,EAC/B,iCAAiC,EACjC,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,qCAAqC,CAAC;AAC7C,YAAY,EACV,+BAA+B,EAC/B,2BAA2B,EAC3B,4BAA4B,EAC5B,kCAAkC,EAClC,yBAAyB,EACzB,iCAAiC,EACjC,mCAAmC,GACpC,MAAM,uCAAuC,CAAC;AAC/C,YAAY,EACV,6BAA6B,EAC7B,+BAA+B,EAC/B,8BAA8B,EAC9B,8BAA8B,EAC9B,gCAAgC,EAChC,+BAA+B,EAC/B,8BAA8B,EAC9B,8BAA8B,EAC9B,wBAAwB,EACxB,4BAA4B,EAC5B,iCAAiC,EACjC,mCAAmC,EACnC,2BAA2B,EAC3B,+BAA+B,EAC/B,+BAA+B,EAC/B,oCAAoC,EACpC,+BAA+B,GAChC,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,qBAAqB,EACrB,iCAAiC,EACjC,2BAA2B,EAC3B,+BAA+B,EAC/B,+BAA+B,EAC/B,4BAA4B,EAC5B,2BAA2B,EAC3B,oCAAoC,EACpC,4BAA4B,EAC5B,wBAAwB,EACxB,qCAAqC,EACrC,uBAAuB,EACvB,0BAA0B,EAC1B,0BAA0B,EAC1B,uBAAuB,EACvB,6BAA6B,EAC7B,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,gBAAgB,EAChB,sBAAsB,GACvB,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,cAAc,GACf,MAAM,qCAAqC,CAAC"}

package/dist/index.js

@@ -1,5 +1,21 @@
 export { runCli } from "./cli.js";
 export { codaliEventToOpenAIChatCompletionChunk, codaliEventToOpenAISseData, createCodaliRuntime, runCodaliTask, } from "./runtime/CodaliRuntime.js";
+export { runCodaliJob } from "./runtime/CodaliJobRuntime.js";
+export { isCodaliGatewayValidationOk, validateCodaliContextPack, validateCodaliEvidenceItem, validateCodaliGatewayPlannerOutput, validateCodaliGatewayPolicy, validateCodaliGatewayRequest, validateCodaliGatewayVerifierOutput, validateCodaliGatewayWorkerTask, validateGatewayContextPack, validateGatewayEvidenceItem, validateGatewayPlannerOutput, validateGatewayPolicy, validateGatewayRequest, validateGatewayVerifierOutput, validateGatewayWorkerTask, } from "./gateway/CodaliGatewaySchemas.js";
+export { CodaliGateway, buildCodaliGatewayFinalSynthesizerMessages, createCodaliGateway, runCodaliGateway, runCodaliGatewayPlanning, runCodaliGatewayWorkerTasks, } from "./gateway/CodaliGateway.js";
+export { buildCodaliGatewayWorkerPrompt, CodaliGatewayStateMachine, createCodaliGatewayStateMachine, } from "./gateway/GatewayStateMachine.js";
+export { normalizeCodaliEvidence, normalizeGatewayEvidence, } from "./gateway/EvidenceNormalizer.js";
+export { buildCodaliContextPack, CodaliContextPackBuilder, createCodaliContextPackBuilder, estimateCodaliContextPackTokens, } from "./gateway/ContextPackBuilder.js";
+export { createInMemoryCodaliGatewayStore, redactCodaliGatewaySecrets, } from "./gateway/CodaliGatewayStore.js";
+export { CODALI_GATEWAY_REPLAY_FIXTURE_SCHEMA_VERSION, CODALI_GATEWAY_TRACE_EVENT_NAMES, CODALI_GATEWAY_TRACE_SCHEMA_VERSION, buildCodaliGatewayTraceEvents, exportCodaliGatewayReplayFixture, readCodaliGatewayTrace, summarizeCodaliGatewayTrace, } from "./gateway/GatewayTraceReplay.js";
+export { CODALI_GATEWAY_CLASSIFIER_SCHEMA, CODALI_GATEWAY_PLANNER_SCHEMA, CodaliGatewayPlanner, CodaliGatewayPlannerError, buildCodaliGatewayClassifierMessages, buildCodaliGatewayPlannerMessages, createCodaliGatewayPlanner, } from "./gateway/GatewayPlanner.js";
+export { DEFAULT_CODALI_GATEWAY_AGENT_ROLES, DEFAULT_CODALI_GATEWAY_ROLE_POLICIES, normalizeCodaliGatewayAgentCandidate, resolveCodaliGatewayAgentTiers, resolveGatewayAgentTiers, } from "./gateway/AgentTierResolver.js";
+export { compileCodaliGatewayPolicy, compileGatewayPolicy, } from "./gateway/GatewayPolicyCompiler.js";
+export { CODALI_GATEWAY_SECURITY_PROMPT_HARDENING, classifyCodaliGatewayToolRisk, resolveCodaliGatewaySecurityPolicy, } from "./gateway/GatewaySecurityPolicy.js";
+export { CODALI_GATEWAY_READ_ONLY_BACKING_TOOLS, CODALI_GATEWAY_RESERVED_TOOL_ARG_KEYS, compileToolCapabilities, } from "./gateway/ToolCapabilityCompiler.js";
+export { CODALI_APP_TOOL_GATEWAY_VERSION, AppToolGatewayDispatchError, buildAppToolGatewaySignedRequest, canonicalizeAppToolGatewayPayload, dispatchAppToolGateway, redactAppToolGatewayPayload, signAppToolGatewayRequest, verifyAppToolGatewayRequestSignature, } from "./gateway/AppToolGatewayDispatcher.js";
+export { CODALI_GATEWAY_LIVE_SCENARIOS, classifyCodaliGatewayLiveAgents, createMcodaAgentRunScenarioRunner, defaultCodaliGatewayLiveCommandRunner, formatCodaliGatewayLiveHarnessTextReport, parseCodaliGatewayLiveInventory, redactCodaliGatewayLiveValue, runCodaliGatewayLiveHarness, } from "./eval/CodaliGatewayLiveHarness.js";
+export { CODALI_GATEWAY_EVAL_CASES, DEFAULT_CODALI_GATEWAY_EVAL_THRESHOLDS, aggregateCodaliGatewayEvalMetrics, compareCodaliGatewayEvalBaseline, createDefaultCodaliGatewayEvalRunner, evaluateCodaliGatewayEvalCase, evaluateCodaliGatewayEvalGates, formatCodaliGatewayEvalTextReport, runCodaliGatewayEvalSuite, } from "./eval/GatewayEvalSuite.js";
 export { loadInstructionBlocks, formatInstructionBlocks } from "./session/InstructionLoader.js";
 export { SessionStore } from "./session/SessionStore.js";
 export { SubagentOrchestrator } from "./subagents/SubagentOrchestrator.js";