@mcoda/codali 0.1.88 → 0.1.89

package/dist/runtime/CodaliRuntime.js

@@ -6,6 +6,7 @@ import { OllamaRemoteProvider } from "../providers/OllamaRemoteProvider.js";
 import { CodexCliProvider } from "../providers/CodexCliProvider.js";
 import { MswarmWorkerProvider } from "../providers/MswarmWorkerProvider.js";
 import { DocdexClient, normalizeDocdexRuntimeOperation, } from "../docdex/DocdexClient.js";
+import { AppToolGatewayDispatchError, dispatchAppToolGateway, } from "../gateway/AppToolGatewayDispatcher.js";
 import { createDiffTool } from "../tools/diff/DiffTool.js";
 import { createDocdexTools } from "../tools/docdex/DocdexTools.js";
 import { createFileTools } from "../tools/filesystem/FileTools.js";
@@ -440,10 +441,58 @@ const resolveGatewayContract = (contract, policyGateway) => {
         return undefined;
     return { ...(policyGateway ?? {}), ...(gateway ?? {}) };
 };
+const gatewayString = (gateway, keys) => {
+    if (!gateway)
+        return undefined;
+    for (const key of keys) {
+        const value = gateway[key];
+        if (typeof value === "string" && value.trim()) {
+            return value.trim();
+        }
+    }
+    return undefined;
+};
+const gatewayBoolean = (gateway, keys) => {
+    if (!gateway)
+        return undefined;
+    for (const key of keys) {
+        const value = gateway[key];
+        if (typeof value === "boolean") {
+            return value;
+        }
+    }
+    return undefined;
+};
+const gatewayEndpoint = (gateway) => gatewayString(gateway, ["endpoint"]);
+const gatewaySigningSecret = (gateway) => gatewayString(gateway, [
+    "signatureSecret",
+    "signature_secret",
+    "signingSecret",
+    "signing_secret",
+    "secret",
+    "signature",
+]);
+const appToolGatewayTenantScope = (input) => stripUndefined({
+    tenant_id: input.metadata?.tenantId,
+    docdex_repo_id: input.docdex?.repoId,
+});
+const appToolGatewayRequesterScope = (input) => stripUndefined({
+    request_id: input.metadata?.requestId,
+    owner_user_id: input.metadata?.ownerUserId,
+    api_key_id: input.metadata?.apiKeyId,
+    agent_slug: input.metadata?.agentSlug,
+});
+const gatewayDispatchToolErrorCode = (error) => {
+    if (error.code === "GATEWAY_INVALID_ARGS")
+        return "tool_invalid_args";
+    if (error.code === "GATEWAY_HTTP_FAILED" ||
+        error.code === "GATEWAY_RESPONSE_MALFORMED") {
+        return "tool_execution_failed";
+    }
+    return "tool_permission_denied";
+};
 const createGatewayDynamicTool = (options) => {
     const { name, contract, gateway, input, state } = options;
-    const endpoint = typeof gateway.endpoint === "string" ? gateway.endpoint : undefined;
-    const signature = typeof gateway.signature === "string" ? gateway.signature : undefined;
     return {
         name,
         description: contract.description ??
@@ -453,44 +502,19 @@ const createGatewayDynamicTool = (options) => {
             const startedAt = Date.now();
             try {
                 assertDynamicArgsStayInScope(name, args);
-                if (!endpoint) {
-                    throw new ToolExecutionError("tool_permission_denied", "App tool gateway endpoint is not configured", {
-                        retryable: false,
-                        details: { tool: name },
-                    });
-                }
-                const signatureRequired = gateway.signatureRequired === true || gateway.signature_required === true;
-                if (signatureRequired && !signature) {
-                    throw new ToolExecutionError("tool_permission_denied", "App tool gateway signature is required", {
-                        retryable: false,
-                        details: { tool: name },
-                    });
-                }
-                const response = await fetch(endpoint, {
-                    method: "POST",
-                    headers: stripUndefined({
-                        "content-type": "application/json",
-                        "x-codali-app-tool-signature": signature,
-                    }),
-                    body: JSON.stringify({
-                        tenant: input.metadata?.tenantId ? { id: input.metadata.tenantId } : undefined,
-                        tool: name,
-                        args,
-                        run_id: context.runId,
-                        session_id: input.session?.id,
-                        request_id: input.metadata?.requestId,
-                        read_only: true,
-                        result_contract: contract.resultContract ?? contract.result_contract,
-                    }),
+                const dispatched = await dispatchAppToolGateway({
+                    runId: context.runId ?? input.metadata?.requestId ?? input.metadata?.jobId ?? "codali-runtime",
+                    sessionId: input.session?.id,
+                    requestId: input.metadata?.requestId,
+                    tenantScope: appToolGatewayTenantScope(input),
+                    requesterScope: appToolGatewayRequesterScope(input),
+                    toolName: name,
+                    args,
+                    contract,
+                    gateway,
+                    allowedTools: input.policy.allowedTools,
+                    deniedTools: input.policy.deniedTools,
                 });
-                const text = await response.text();
-                if (!response.ok) {
-                    throw new ToolExecutionError("tool_execution_failed", `App tool gateway failed with HTTP ${response.status}`, {
-                        retryable: response.status >= 500,
-                        details: { tool: name, status: response.status, body: text.slice(0, 1000) },
-                    });
-                }
-                const parsed = parseJsonPayload(text);
                 state.dynamicToolCalls.push({
                     name,
                     backingTool: "app_tool_gateway",
@@ -498,20 +522,30 @@ const createGatewayDynamicTool = (options) => {
                     latencyMs: Date.now() - startedAt,
                 });
                 return {
-                    output: text,
-                    data: parsed ?? text,
+                    output: JSON.stringify(dispatched.evidencePayload, null, 2),
+                    data: dispatched.evidencePayload,
                 };
             }
             catch (error) {
+                const toolError = error instanceof AppToolGatewayDispatchError
+                    ? new ToolExecutionError(gatewayDispatchToolErrorCode(error), error.message, {
+                        retryable: error.retryable,
+                        details: stripUndefined({
+                            tool: name,
+                            gatewayErrorCode: error.code,
+                            gatewayDetails: error.details,
+                        }),
+                    })
+                    : error;
                 state.dynamicToolCalls.push({
                     name,
                     backingTool: "app_tool_gateway",
                     status: "failed",
                     latencyMs: Date.now() - startedAt,
-                    errorCode: error instanceof ToolExecutionError ? error.code : "tool_execution_failed",
-                    errorMessage: error instanceof Error ? error.message : String(error),
+                    errorCode: toolError instanceof ToolExecutionError ? toolError.code : "tool_execution_failed",
+                    errorMessage: toolError instanceof Error ? toolError.message : String(toolError),
                 });
-                throw error;
+                throw toolError;
             }
         },
     };
@@ -1032,6 +1066,8 @@ const isDocdexToolAllowed = (toolName, docdex) => {
     }
     return true;
 };
+const isImmutableDocdexRuntimeContext = (docdex) => docdex?.immutableRuntimeContext === true ||
+    docdex?.credentialSource === "attached_mswarm_api_key";
 const registerRuntimeTool = (registry, tool, policy, docdex) => {
     if (isRuntimeToolAllowed(tool.name, policy) && isDocdexToolAllowed(tool.name, docdex)) {
         registry.register(tool);
@@ -1093,30 +1129,32 @@ const registerRuntimeContractTools = (registry, input, state, warnings) => {
         const executionMode = contractString(candidate.contract, "executionMode", "execution_mode") ??
             "server_supplied_snapshot_plus_docdex";
         const gateway = resolveGatewayContract(candidate.contract, input.policy.appToolGateway);
-        if (executionMode === "app_tool_gateway" || gateway?.endpoint) {
+        const resolvedGatewayEndpoint = gatewayEndpoint(gateway);
+        if (executionMode === "app_tool_gateway" || resolvedGatewayEndpoint) {
             if (!gateway) {
                 recordSkippedDynamicTool(state, name, "gateway_not_configured");
                 continue;
             }
-            if (gateway.readOnly === false) {
+            if (readOnly !== true) {
+                recordSkippedDynamicTool(state, name, "not_read_only");
+                continue;
+            }
+            if (gatewayBoolean(gateway, ["readOnly", "read_only"]) !== true) {
                 recordSkippedDynamicTool(state, name, "gateway_not_read_only");
                 continue;
             }
-            const gatewayEndpoint = typeof gateway.endpoint === "string" && gateway.endpoint.trim()
-                ? gateway.endpoint.trim()
-                : undefined;
-            if (!gatewayEndpoint) {
+            if (!resolvedGatewayEndpoint) {
                 recordSkippedDynamicTool(state, name, "gateway_endpoint_missing");
                 continue;
             }
-            if ((gateway.signatureRequired === true || gateway.signature_required === true) && !gateway.signature) {
+            if (!gatewaySigningSecret(gateway)) {
                 recordSkippedDynamicTool(state, name, "gateway_signature_missing");
                 continue;
             }
             registerRuntimeTool(registry, createGatewayDynamicTool({
                 name,
                 contract: candidate.contract,
-                gateway: { ...gateway, endpoint: gatewayEndpoint },
+                gateway: { ...gateway, endpoint: resolvedGatewayEndpoint },
                 input,
                 state,
             }), input.policy, input.docdex);
@@ -1177,16 +1215,22 @@ const buildRuntimeToolRegistry = (input, dynamicToolState, warnings) => {
     if (input.policy.allowShell) {
         register(createShellTool());
     }
+    const immutableDocdexContext = isImmutableDocdexRuntimeContext(input.docdex);
     const docdexClient = new DocdexClient({
-        baseUrl: input.docdex?.baseUrl ?? DEFAULT_DOCDEX_BASE_URL,
+        baseUrl: immutableDocdexContext
+            ? input.docdex?.baseUrl ?? ""
+            : input.docdex?.baseUrl ?? DEFAULT_DOCDEX_BASE_URL,
         repoId: input.docdex?.repoId,
-        repoRoot: input.docdex?.repoRoot ?? input.workspace.root,
+        repoRoot: immutableDocdexContext
+            ? undefined
+            : input.docdex?.repoRoot ?? input.workspace.root,
         dagSessionId: input.docdex?.dagSessionId ?? input.metadata?.requestId,
         apiKey: input.docdex?.apiKey,
         credentialSource: input.docdex?.credentialSource,
         required: input.docdex?.required,
         allowedOperations: input.docdex?.allowedOperations,
         capabilities: input.docdex?.capabilities,
+        immutableRuntimeContext: immutableDocdexContext,
     });
     for (const tool of createDocdexTools(docdexClient))
         register(tool);

package/dist/tools/ToolRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ToolRegistry.d.ts","sourceRoot":"","sources":["../../src/tools/ToolRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,cAAc,EAGnB,KAAK,mBAAmB,EAGzB,MAAM,gBAAgB,CAAC;AAwQxB,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAqC;IAElD,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAOpC,IAAI,IAAI,cAAc,EAAE;IAIxB,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,aAAa,GAAG,aAAa,CAAC,CAAC;IAQzE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAkC/F"}
+{"version":3,"file":"ToolRegistry.d.ts","sourceRoot":"","sources":["../../src/tools/ToolRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,cAAc,EAGnB,KAAK,mBAAmB,EAGzB,MAAM,gBAAgB,CAAC;AA4QxB,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAqC;IAElD,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAOpC,IAAI,IAAI,cAAc,EAAE;IAIxB,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,aAAa,GAAG,aAAa,CAAC,CAAC;IAQzE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAkC/F"}

package/dist/tools/ToolRegistry.js

@@ -201,6 +201,10 @@ const PRESERVED_ERROR_CODES = new Set([
     "tool_permission_denied",
     "tool_timeout",
     "tool_execution_failed",
+    "missing_credentials",
+    "repo_access_denied",
+    "scope_denied",
+    "encrypted_operation_disabled",
     "docdex_context_missing",
     "docdex_api_key_missing",
     "docdex_operation_not_allowed",

package/dist/tools/ToolTypes.d.ts

@@ -27,7 +27,7 @@ export interface ToolInputSchema extends ToolSchemaDefinition {
     properties?: Record<string, ToolSchemaDefinition>;
     required?: string[];
 }
-export type ToolErrorCode = "tool_unknown" | "tool_schema_invalid" | "tool_invalid_args" | "tool_permission_denied" | "tool_timeout" | "tool_execution_failed" | "docdex_context_missing" | "docdex_api_key_missing" | "docdex_operation_not_allowed" | "docdex_auth_failed" | "docdex_repo_access_denied" | "docdex_unavailable";
+export type ToolErrorCode = "tool_unknown" | "tool_schema_invalid" | "tool_invalid_args" | "tool_permission_denied" | "tool_timeout" | "tool_execution_failed" | "missing_credentials" | "repo_access_denied" | "scope_denied" | "encrypted_operation_disabled" | "docdex_context_missing" | "docdex_api_key_missing" | "docdex_operation_not_allowed" | "docdex_auth_failed" | "docdex_repo_access_denied" | "docdex_unavailable";
 export type ToolErrorCategory = "lookup" | "schema" | "validation" | "permission" | "timeout" | "execution";
 export interface ToolError {
     code: ToolErrorCode;

package/dist/tools/ToolTypes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ToolTypes.d.ts","sourceRoot":"","sources":["../../src/tools/ToolTypes.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,uBAAuB,GAC/B,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,SAAS,GACT,QAAQ,GACR,OAAO,GACP,MAAM,CAAC;AAEX,MAAM,WAAW,oBAAqB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACnE,IAAI,CAAC,EAAE,uBAAuB,GAAG,uBAAuB,EAAE,CAAC;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAC7B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAgB,SAAQ,oBAAoB;IAC3D,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,MAAM,aAAa,GACrB,cAAc,GACd,qBAAqB,GACrB,mBAAmB,GACnB,wBAAwB,GACxB,cAAc,GACd,uBAAuB,GACvB,wBAAwB,GACxB,wBAAwB,GACxB,8BAA8B,GAC9B,oBAAoB,GACpB,2BAA2B,GAC3B,oBAAoB,CAAC;AAEzB,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,QAAQ,GACR,YAAY,GACZ,YAAY,GACZ,SAAS,GACT,WAAW,CAAC;AAEhB,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAGzC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAO;IAU1E,WAAW,IAAI,SAAS;CASzB;AAED,eAAO,MAAM,wBAAwB,GAAI,MAAM,aAAa,KAAG,iBAgB9D,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAED,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAE9F,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,OAAO,EAAE,WAAW,CAAC;CACtB"}
+{"version":3,"file":"ToolTypes.d.ts","sourceRoot":"","sources":["../../src/tools/ToolTypes.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,MAAM,uBAAuB,GAC/B,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,SAAS,GACT,QAAQ,GACR,OAAO,GACP,MAAM,CAAC;AAEX,MAAM,WAAW,oBAAqB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACnE,IAAI,CAAC,EAAE,uBAAuB,GAAG,uBAAuB,EAAE,CAAC;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAC7B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAgB,SAAQ,oBAAoB;IAC3D,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAClD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,MAAM,aAAa,GACrB,cAAc,GACd,qBAAqB,GACrB,mBAAmB,GACnB,wBAAwB,GACxB,cAAc,GACd,uBAAuB,GACvB,qBAAqB,GACrB,oBAAoB,GACpB,cAAc,GACd,8BAA8B,GAC9B,wBAAwB,GACxB,wBAAwB,GACxB,8BAA8B,GAC9B,oBAAoB,GACpB,2BAA2B,GAC3B,oBAAoB,CAAC;AAEzB,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,QAAQ,GACR,YAAY,GACZ,YAAY,GACZ,SAAS,GACT,WAAW,CAAC;AAEhB,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,aAAa,CAAC;IACpB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAGzC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAO;IAU1E,WAAW,IAAI,SAAS;CASzB;AAED,eAAO,MAAM,wBAAwB,GAAI,MAAM,aAAa,KAAG,iBAoB9D,CAAC;AAEF,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAED,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAE9F,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,OAAO,EAAE,WAAW,CAAC;CACtB"}

package/dist/tools/ToolTypes.js

@@ -30,7 +30,11 @@ export const toolErrorCategoryForCode = (code) => {
         return "timeout";
     if (code === "docdex_context_missing")
         return "validation";
-    if (code === "docdex_api_key_missing" ||
+    if (code === "missing_credentials" ||
+        code === "repo_access_denied" ||
+        code === "scope_denied" ||
+        code === "encrypted_operation_disabled" ||
+        code === "docdex_api_key_missing" ||
         code === "docdex_operation_not_allowed" ||
         code === "docdex_auth_failed" ||
         code === "docdex_repo_access_denied") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcoda/codali",
-  "version": "0.1.88",
+  "version": "0.1.89",
   "description": "Standalone tool-runner adapter for mcoda.",
   "type": "module",
   "main": "dist/index.js",
@@ -33,8 +33,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@mcoda/db": "0.1.88",
-    "@mcoda/shared": "0.1.88"
+    "@mcoda/db": "0.1.89",
+    "@mcoda/shared": "0.1.89"
   },
   "scripts": {
     "build": "tsc -p tsconfig.json",