@mcp-abap-adt/llm-agent-server 10.0.0

package/dist/smart-agent/policy/fallback-llm-call-strategy.js

@@ -0,0 +1,66 @@
+import { NonStreamingLlmCallStrategy } from './non-streaming-llm-call-strategy.js';
+import { StreamingLlmCallStrategy } from './streaming-llm-call-strategy.js';
+/**
+ * Starts with streaming. On error, logs the cause and retries the same call
+ * via non-streaming. All subsequent calls use non-streaming for this instance.
+ */
+export class FallbackLlmCallStrategy {
+    logger;
+    streamingDisabled = false;
+    streaming = new StreamingLlmCallStrategy();
+    nonStreaming = new NonStreamingLlmCallStrategy();
+    constructor(logger) {
+        this.logger = logger;
+    }
+    async *call(llm, messages, tools, options) {
+        if (this.streamingDisabled) {
+            yield* this.nonStreaming.call(llm, messages, tools, options);
+            return;
+        }
+        try {
+            const chunks = [];
+            let hadError = false;
+            for await (const chunk of this.streaming.call(llm, messages, tools, options)) {
+                if (!chunk.ok) {
+                    // Streaming returned a Result error — treat as streaming failure
+                    hadError = true;
+                    this.logFallback(chunk.error.message, chunk.error);
+                    break;
+                }
+                chunks.push(chunk);
+                yield chunk;
+            }
+            if (hadError) {
+                this.streamingDisabled = true;
+                // Retry the same call non-streaming — chunks already yielded are
+                // partial content that the consumer may have streamed to the client.
+                // We yield a reset signal so the consumer can discard partial state.
+                yield { ok: true, value: { content: '', reset: true } };
+                yield* this.nonStreaming.call(llm, messages, tools, options);
+            }
+        }
+        catch (err) {
+            // Streaming threw an exception (e.g. SSE disconnect, network error)
+            const errMsg = err instanceof Error ? err.message : String(err);
+            this.logFallback(errMsg, err);
+            this.streamingDisabled = true;
+            yield { ok: true, value: { content: '', reset: true } };
+            yield* this.nonStreaming.call(llm, messages, tools, options);
+        }
+    }
+    logFallback(message, err) {
+        // biome-ignore lint/suspicious/noExplicitAny: ErrorWithCause shape
+        const cause = err?.cause;
+        const causeDetail = cause?.message || cause;
+        const causeCode = cause?.code;
+        const detail = causeDetail
+            ? ` (cause: ${causeDetail}${causeCode ? `, code: ${causeCode}` : ''})`
+            : '';
+        this.logger?.log({
+            type: 'warning',
+            traceId: 'tool-loop',
+            message: `Streaming failed, falling back to non-streaming: ${message}${detail}`,
+        });
+    }
+}
+//# sourceMappingURL=fallback-llm-call-strategy.js.map

package/dist/smart-agent/policy/fallback-llm-call-strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fallback-llm-call-strategy.js","sourceRoot":"","sources":["../../../src/smart-agent/policy/fallback-llm-call-strategy.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAE5E;;;GAGG;AACH,MAAM,OAAO,uBAAuB;IAKL;IAJrB,iBAAiB,GAAG,KAAK,CAAC;IACjB,SAAS,GAAG,IAAI,wBAAwB,EAAE,CAAC;IAC3C,YAAY,GAAG,IAAI,2BAA2B,EAAE,CAAC;IAElE,YAA6B,MAAgB;QAAhB,WAAM,GAAN,MAAM,CAAU;IAAG,CAAC;IAEjD,KAAK,CAAC,CAAC,IAAI,CACT,GAAS,EACT,QAAmB,EACnB,KAAgB,EAChB,OAAqB;QAErB,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAuC,EAAE,CAAC;YACtD,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAC3C,GAAG,EACH,QAAQ,EACR,KAAK,EACL,OAAO,CACR,EAAE,CAAC;gBACF,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;oBACd,iEAAiE;oBACjE,QAAQ,GAAG,IAAI,CAAC;oBAChB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;oBACnD,MAAM;gBACR,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACnB,MAAM,KAAK,CAAC;YACd,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;gBAC9B,iEAAiE;gBACjE,qEAAqE;gBACrE,qEAAqE;gBACrE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;gBACxD,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,oEAAoE;YACpE,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;YAC9B,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;YACxD,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,OAAe,EAAE,GAAY;QAC/C,mEAAmE;QACnE,MAAM,KAAK,GAAI,GAAW,EAAE,KAAK,CAAC;QAClC,MAAM,WAAW,GAAG,KAAK,EAAE,OAAO,IAAI,KAAK,CAAC;QAC5C,MAAM,SAAS,GAAG,KAAK,EAAE,IAAI,CAAC;QAC9B,MAAM,MAAM,GAAG,WAAW;YACxB,CAAC,CAAC,YAAY,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,WAAW,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;YACtE,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC;YACf,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,WAAW;YACpB,OAAO,EAAE,oDAAoD,OAAO,GAAG,MAAM,EAAE;SAChF,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/smart-agent/policy/heuristic-injection-detector.d.ts

@@ -0,0 +1,5 @@
+import type { DetectionResult, IPromptInjectionDetector } from './types.js';
+export declare class HeuristicInjectionDetector implements IPromptInjectionDetector {
+    detect(text: string): DetectionResult;
+}
+//# sourceMappingURL=heuristic-injection-detector.d.ts.map

package/dist/smart-agent/policy/heuristic-injection-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"heuristic-injection-detector.d.ts","sourceRoot":"","sources":["../../../src/smart-agent/policy/heuristic-injection-detector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAuC5E,qBAAa,0BAA2B,YAAW,wBAAwB;IACzE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe;CAStC"}

package/dist/smart-agent/policy/heuristic-injection-detector.js

@@ -0,0 +1,36 @@
+const ROLE_CONFUSION_PATTERNS = [
+    { label: 'ignore_previous', fragment: 'ignore previous instructions' },
+    { label: 'ignore_all_previous', fragment: 'ignore all previous' },
+    { label: 'disregard_previous', fragment: 'disregard previous' },
+    { label: 'you_are_now', fragment: 'you are now' },
+    { label: 'act_as', fragment: 'act as if you are' },
+    { label: 'pretend_you_are', fragment: 'pretend you are' },
+    { label: 'forget_instructions', fragment: 'forget your instructions' },
+    { label: 'new_persona', fragment: 'new persona' },
+    { label: 'fake_system_message', fragment: 'system: ' },
+];
+const TOOL_FORGERY_PATTERNS = [
+    { label: 'json_tool_key', fragment: '{"tool":' },
+    { label: 'function_call_key', fragment: '"function_call":' },
+    { label: 'tool_use_key', fragment: '"tool_use":' },
+    { label: 'xml_tool_call', fragment: '<tool_call>' },
+];
+const ALL_PATTERNS = [
+    ...ROLE_CONFUSION_PATTERNS,
+    ...TOOL_FORGERY_PATTERNS,
+];
+// ---------------------------------------------------------------------------
+// HeuristicInjectionDetector
+// ---------------------------------------------------------------------------
+export class HeuristicInjectionDetector {
+    detect(text) {
+        const lower = text.toLowerCase();
+        for (const entry of ALL_PATTERNS) {
+            if (lower.includes(entry.fragment.toLowerCase())) {
+                return { detected: true, pattern: entry.label };
+            }
+        }
+        return { detected: false };
+    }
+}
+//# sourceMappingURL=heuristic-injection-detector.js.map

package/dist/smart-agent/policy/heuristic-injection-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"heuristic-injection-detector.js","sourceRoot":"","sources":["../../../src/smart-agent/policy/heuristic-injection-detector.ts"],"names":[],"mappings":"AAWA,MAAM,uBAAuB,GAAmB;IAC9C,EAAE,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,8BAA8B,EAAE;IACtE,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,qBAAqB,EAAE;IACjE,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,oBAAoB,EAAE;IAC/D,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE;IACjD,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,mBAAmB,EAAE;IAClD,EAAE,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,iBAAiB,EAAE;IACzD,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,0BAA0B,EAAE;IACtE,EAAE,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,aAAa,EAAE;IACjD,EAAE,KAAK,EAAE,qBAAqB,EAAE,QAAQ,EAAE,UAAU,EAAE;CACvD,CAAC;AAEF,MAAM,qBAAqB,GAAmB;IAC5C,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE;IAChD,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,kBAAkB,EAAE;IAC5D,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,aAAa,EAAE;IAClD,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,aAAa,EAAE;CACpD,CAAC;AAEF,MAAM,YAAY,GAAmB;IACnC,GAAG,uBAAuB;IAC1B,GAAG,qBAAqB;CACzB,CAAC;AAEF,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E,MAAM,OAAO,0BAA0B;IACrC,MAAM,CAAC,IAAY;QACjB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACjD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YAClD,CAAC;QACH,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;CACF"}

package/dist/smart-agent/policy/index.d.ts

@@ -0,0 +1,6 @@
+export { HeuristicInjectionDetector } from './heuristic-injection-detector.js';
+export { isToolContextUnavailableError, ToolAvailabilityRegistry, } from './tool-availability-registry.js';
+export { ToolPolicyGuard } from './tool-policy-guard.js';
+export type { DetectionResult, IPromptInjectionDetector, IToolPolicy, PolicyVerdict, SessionPolicy, ToolPolicyConfig, } from './types.js';
+export { PolicyError, PromptInjectionError } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/smart-agent/policy/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/smart-agent/policy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,YAAY,EACV,eAAe,EACf,wBAAwB,EACxB,WAAW,EACX,aAAa,EACb,aAAa,EACb,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC"}

package/dist/smart-agent/policy/index.js

@@ -0,0 +1,5 @@
+export { HeuristicInjectionDetector } from './heuristic-injection-detector.js';
+export { isToolContextUnavailableError, ToolAvailabilityRegistry, } from './tool-availability-registry.js';
+export { ToolPolicyGuard } from './tool-policy-guard.js';
+export { PolicyError, PromptInjectionError } from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/smart-agent/policy/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/smart-agent/policy/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AASzD,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC"}

package/dist/smart-agent/policy/mixed-tool-call-handler.d.ts

@@ -0,0 +1,16 @@
+import type { CallOptions, IMcpClient } from '@mcp-abap-adt/llm-agent';
+import type { IToolCache } from '../cache/types.js';
+import type { IMetrics } from '../metrics/types.js';
+import type { PendingToolResultsRegistry } from './pending-tool-results-registry.js';
+export interface MixedToolCallContext {
+    toolClientMap: Map<string, IMcpClient>;
+    toolCache: IToolCache;
+    metrics: IMetrics;
+    options?: CallOptions;
+}
+export declare function fireInternalToolsAsync(content: string, internalCalls: Array<{
+    id: string;
+    name: string;
+    arguments: Record<string, unknown>;
+}>, registry: PendingToolResultsRegistry, sessionId: string, ctx: MixedToolCallContext): void;
+//# sourceMappingURL=mixed-tool-call-handler.d.ts.map

package/dist/smart-agent/policy/mixed-tool-call-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mixed-tool-call-handler.d.ts","sourceRoot":"","sources":["../../../src/smart-agent/policy/mixed-tool-call-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAW,MAAM,yBAAyB,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAEV,0BAA0B,EAC3B,MAAM,oCAAoC,CAAC;AAE5C,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACvC,SAAS,EAAE,UAAU,CAAC;IACtB,OAAO,EAAE,QAAQ,CAAC;IAClB,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,KAAK,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC,EACF,QAAQ,EAAE,0BAA0B,EACpC,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,oBAAoB,GACxB,IAAI,CAiDN"}

package/dist/smart-agent/policy/mixed-tool-call-handler.js

@@ -0,0 +1,49 @@
+export function fireInternalToolsAsync(content, internalCalls, registry, sessionId, ctx) {
+    const assistantMessage = {
+        role: 'assistant',
+        content: content || null,
+        tool_calls: internalCalls.map((tc) => ({
+            id: tc.id,
+            type: 'function',
+            function: {
+                name: tc.name,
+                arguments: JSON.stringify(tc.arguments),
+            },
+        })),
+    };
+    const internalPromise = Promise.all(internalCalls.map(async (tc) => {
+        try {
+            const client = ctx.toolClientMap.get(tc.name);
+            if (!client) {
+                return { toolCallId: tc.id, toolName: tc.name, text: '' };
+            }
+            const res = await client.callTool(tc.name, tc.arguments, ctx.options);
+            const text = !res.ok
+                ? res.error.message
+                : typeof res.value.content === 'string'
+                    ? res.value.content
+                    : JSON.stringify(res.value.content);
+            if (res.ok)
+                ctx.toolCache.set(tc.name, tc.arguments, res.value);
+            ctx.metrics.toolCallCount.add();
+            ctx.options?.sessionLogger?.logStep(`mcp_call_${tc.name}`, {
+                arguments: tc.arguments,
+                result: text,
+            });
+            return { toolCallId: tc.id, toolName: tc.name, text };
+        }
+        catch (err) {
+            return {
+                toolCallId: tc.id,
+                toolName: tc.name,
+                text: `Error: ${String(err)}`,
+            };
+        }
+    }));
+    registry.set(sessionId, {
+        assistantMessage,
+        promise: internalPromise,
+        createdAt: Date.now(),
+    });
+}
+//# sourceMappingURL=mixed-tool-call-handler.js.map

package/dist/smart-agent/policy/mixed-tool-call-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mixed-tool-call-handler.js","sourceRoot":"","sources":["../../../src/smart-agent/policy/mixed-tool-call-handler.ts"],"names":[],"mappings":"AAeA,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,aAIE,EACF,QAAoC,EACpC,SAAiB,EACjB,GAAyB;IAEzB,MAAM,gBAAgB,GAAY;QAChC,IAAI,EAAE,WAAoB;QAC1B,OAAO,EAAE,OAAO,IAAI,IAAI;QACxB,UAAU,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACrC,EAAE,EAAE,EAAE,CAAC,EAAE;YACT,IAAI,EAAE,UAAmB;YACzB,QAAQ,EAAE;gBACR,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC;aACxC;SACF,CAAC,CAAC;KACJ,CAAC;IAEF,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CACjC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAA8B,EAAE;QACzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;YAC5D,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACtE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE;gBAClB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO;gBACnB,CAAC,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ;oBACrC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO;oBACnB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,GAAG,CAAC,EAAE;gBAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC;YAChC,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzD,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;YACH,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,UAAU,EAAE,EAAE,CAAC,EAAE;gBACjB,QAAQ,EAAE,EAAE,CAAC,IAAI;gBACjB,IAAI,EAAE,UAAU,MAAM,CAAC,GAAG,CAAC,EAAE;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE;QACtB,gBAAgB;QAChB,OAAO,EAAE,eAAe;QACxB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC;AACL,CAAC"}

package/dist/smart-agent/policy/non-streaming-llm-call-strategy.d.ts

@@ -0,0 +1,6 @@
+import type { CallOptions, ILlm, ILlmCallStrategy, LlmError, LlmStreamChunk, LlmTool, Message, Result } from '@mcp-abap-adt/llm-agent';
+/** Always uses chat(). Result is yielded as a single chunk. Errors propagate as-is. */
+export declare class NonStreamingLlmCallStrategy implements ILlmCallStrategy {
+    call(llm: ILlm, messages: Message[], tools: LlmTool[], options?: CallOptions): AsyncIterable<Result<LlmStreamChunk, LlmError>>;
+}
+//# sourceMappingURL=non-streaming-llm-call-strategy.d.ts.map

package/dist/smart-agent/policy/non-streaming-llm-call-strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"non-streaming-llm-call-strategy.d.ts","sourceRoot":"","sources":["../../../src/smart-agent/policy/non-streaming-llm-call-strategy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,IAAI,EACJ,gBAAgB,EAChB,QAAQ,EACR,cAAc,EACd,OAAO,EACP,OAAO,EACP,MAAM,EACP,MAAM,yBAAyB,CAAC;AAEjC,uFAAuF;AACvF,qBAAa,2BAA4B,YAAW,gBAAgB;IAC3D,IAAI,CACT,GAAG,EAAE,IAAI,EACT,QAAQ,EAAE,OAAO,EAAE,EACnB,KAAK,EAAE,OAAO,EAAE,EAChB,OAAO,CAAC,EAAE,WAAW,GACpB,aAAa,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;CAmBnD"}

package/dist/smart-agent/policy/non-streaming-llm-call-strategy.js

@@ -0,0 +1,21 @@
+/** Always uses chat(). Result is yielded as a single chunk. Errors propagate as-is. */
+export class NonStreamingLlmCallStrategy {
+    async *call(llm, messages, tools, options) {
+        const result = await llm.chat(messages, tools, options);
+        if (!result.ok) {
+            yield result;
+            return;
+        }
+        const response = result.value;
+        yield {
+            ok: true,
+            value: {
+                content: response.content,
+                finishReason: response.finishReason,
+                toolCalls: response.toolCalls,
+                usage: response.usage,
+            },
+        };
+    }
+}
+//# sourceMappingURL=non-streaming-llm-call-strategy.js.map

package/dist/smart-agent/policy/non-streaming-llm-call-strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"non-streaming-llm-call-strategy.js","sourceRoot":"","sources":["../../../src/smart-agent/policy/non-streaming-llm-call-strategy.ts"],"names":[],"mappings":"AAWA,uFAAuF;AACvF,MAAM,OAAO,2BAA2B;IACtC,KAAK,CAAC,CAAC,IAAI,CACT,GAAS,EACT,QAAmB,EACnB,KAAgB,EAChB,OAAqB;QAErB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAExD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,MAAM,CAAC;YACb,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC;QAC9B,MAAM;YACJ,EAAE,EAAE,IAAI;YACR,KAAK,EAAE;gBACL,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK;aACtB;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/smart-agent/policy/pending-tool-results-registry.d.ts

@@ -0,0 +1,25 @@
+import type { Message } from '@mcp-abap-adt/llm-agent';
+export interface PendingToolResult {
+    toolCallId: string;
+    toolName: string;
+    text: string;
+}
+export interface PendingToolCallsEntry {
+    assistantMessage: Message;
+    promise: Promise<PendingToolResult[]>;
+    createdAt: number;
+}
+export declare class PendingToolResultsRegistry {
+    private readonly ttlMs;
+    private readonly sessions;
+    constructor(ttlMs?: number);
+    set(sessionId: string, entry: PendingToolCallsEntry): void;
+    has(sessionId: string, now?: number): boolean;
+    consume(sessionId: string, now?: number): Promise<{
+        assistantMessage: Message;
+        results: PendingToolResult[];
+    } | null>;
+    get size(): number;
+    private pruneAll;
+}
+//# sourceMappingURL=pending-tool-results-registry.d.ts.map

package/dist/smart-agent/policy/pending-tool-results-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-tool-results-registry.d.ts","sourceRoot":"","sources":["../../../src/smart-agent/policy/pending-tool-results-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qBAAa,0BAA0B;IAGzB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAFlC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4C;gBAExC,KAAK,SAAgB;IAElD,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,IAAI;IAK1D,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,OAAO;IAU3C,OAAO,CACX,SAAS,EAAE,MAAM,EACjB,GAAG,SAAa,GACf,OAAO,CAAC;QACT,gBAAgB,EAAE,OAAO,CAAC;QAC1B,OAAO,EAAE,iBAAiB,EAAE,CAAC;KAC9B,GAAG,IAAI,CAAC;IAgBT,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,OAAO,CAAC,QAAQ;CAOjB"}

package/dist/smart-agent/policy/pending-tool-results-registry.js

@@ -0,0 +1,50 @@
+export class PendingToolResultsRegistry {
+    ttlMs;
+    sessions = new Map();
+    constructor(ttlMs = 5 * 60 * 1000) {
+        this.ttlMs = ttlMs;
+    }
+    set(sessionId, entry) {
+        this.sessions.set(sessionId, entry);
+        if (this.sessions.size > 100)
+            this.pruneAll();
+    }
+    has(sessionId, now = Date.now()) {
+        const entry = this.sessions.get(sessionId);
+        if (!entry)
+            return false;
+        if (now - entry.createdAt > this.ttlMs) {
+            this.sessions.delete(sessionId);
+            return false;
+        }
+        return true;
+    }
+    async consume(sessionId, now = Date.now()) {
+        const entry = this.sessions.get(sessionId);
+        if (!entry)
+            return null;
+        if (now - entry.createdAt > this.ttlMs) {
+            this.sessions.delete(sessionId);
+            return null;
+        }
+        this.sessions.delete(sessionId);
+        try {
+            const results = await entry.promise;
+            return { assistantMessage: entry.assistantMessage, results };
+        }
+        catch {
+            return { assistantMessage: entry.assistantMessage, results: [] };
+        }
+    }
+    get size() {
+        return this.sessions.size;
+    }
+    pruneAll(now = Date.now()) {
+        for (const [id, entry] of this.sessions.entries()) {
+            if (now - entry.createdAt > this.ttlMs) {
+                this.sessions.delete(id);
+            }
+        }
+    }
+}
+//# sourceMappingURL=pending-tool-results-registry.js.map

package/dist/smart-agent/policy/pending-tool-results-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-tool-results-registry.js","sourceRoot":"","sources":["../../../src/smart-agent/policy/pending-tool-results-registry.ts"],"names":[],"mappings":"AAcA,MAAM,OAAO,0BAA0B;IAGR;IAFZ,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;IAErE,YAA6B,QAAQ,CAAC,GAAG,EAAE,GAAG,IAAI;QAArB,UAAK,GAAL,KAAK,CAAgB;IAAG,CAAC;IAEtD,GAAG,CAAC,SAAiB,EAAE,KAA4B;QACjD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG;YAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;IAChD,CAAC;IAED,GAAG,CAAC,SAAiB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CACX,SAAiB,EACjB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAKhB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,OAAO,EAAE,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACnE,CAAC;IACH,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAEO,QAAQ,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAC/B,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;gBACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/smart-agent/policy/streaming-llm-call-strategy.d.ts

@@ -0,0 +1,6 @@
+import type { CallOptions, ILlm, ILlmCallStrategy, LlmError, LlmStreamChunk, LlmTool, Message, Result } from '@mcp-abap-adt/llm-agent';
+/** Always uses streamChat(). Errors propagate as-is. */
+export declare class StreamingLlmCallStrategy implements ILlmCallStrategy {
+    call(llm: ILlm, messages: Message[], tools: LlmTool[], options?: CallOptions): AsyncIterable<Result<LlmStreamChunk, LlmError>>;
+}
+//# sourceMappingURL=streaming-llm-call-strategy.d.ts.map

package/dist/smart-agent/policy/streaming-llm-call-strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming-llm-call-strategy.d.ts","sourceRoot":"","sources":["../../../src/smart-agent/policy/streaming-llm-call-strategy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,IAAI,EACJ,gBAAgB,EAChB,QAAQ,EACR,cAAc,EACd,OAAO,EACP,OAAO,EACP,MAAM,EACP,MAAM,yBAAyB,CAAC;AAEjC,wDAAwD;AACxD,qBAAa,wBAAyB,YAAW,gBAAgB;IACxD,IAAI,CACT,GAAG,EAAE,IAAI,EACT,QAAQ,EAAE,OAAO,EAAE,EACnB,KAAK,EAAE,OAAO,EAAE,EAChB,OAAO,CAAC,EAAE,WAAW,GACpB,aAAa,CAAC,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;CAGnD"}

package/dist/smart-agent/policy/streaming-llm-call-strategy.js

@@ -0,0 +1,7 @@
+/** Always uses streamChat(). Errors propagate as-is. */
+export class StreamingLlmCallStrategy {
+    async *call(llm, messages, tools, options) {
+        yield* llm.streamChat(messages, tools, options);
+    }
+}
+//# sourceMappingURL=streaming-llm-call-strategy.js.map

package/dist/smart-agent/policy/streaming-llm-call-strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streaming-llm-call-strategy.js","sourceRoot":"","sources":["../../../src/smart-agent/policy/streaming-llm-call-strategy.ts"],"names":[],"mappings":"AAWA,wDAAwD;AACxD,MAAM,OAAO,wBAAwB;IACnC,KAAK,CAAC,CAAC,IAAI,CACT,GAAS,EACT,QAAmB,EACnB,KAAgB,EAChB,OAAqB;QAErB,KAAK,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;CACF"}

package/dist/smart-agent/policy/tool-availability-registry.d.ts

@@ -0,0 +1,21 @@
+import type { LlmTool } from '@mcp-abap-adt/llm-agent';
+export interface ToolBlockEntry {
+    toolName: string;
+    blockedUntil: number;
+    reason: string;
+}
+export declare class ToolAvailabilityRegistry {
+    private readonly defaultTtlMs;
+    private readonly sessions;
+    constructor(defaultTtlMs?: number);
+    getBlockedToolNames(sessionId: string, now?: number): Set<string>;
+    isBlocked(sessionId: string, toolName: string, now?: number): boolean;
+    block(sessionId: string, toolName: string, reason: string, ttlMs?: number, now?: number): ToolBlockEntry;
+    filterTools(sessionId: string, tools: LlmTool[], now?: number): {
+        allowed: LlmTool[];
+        blocked: string[];
+    };
+    private prune;
+}
+export declare function isToolContextUnavailableError(message: string): boolean;
+//# sourceMappingURL=tool-availability-registry.d.ts.map

package/dist/smart-agent/policy/tool-availability-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-availability-registry.d.ts","sourceRoot":"","sources":["../../../src/smart-agent/policy/tool-availability-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,wBAAwB;IAGvB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAFzC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkD;gBAE9C,YAAY,SAAiB;IAE1D,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,GAAG,CAAC,MAAM,CAAC;IAOrE,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,OAAO;IAazE,KAAK,CACH,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,KAAK,SAAoB,EACzB,GAAG,SAAa,GACf,cAAc;IAYjB,WAAW,CACT,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,OAAO,EAAE,EAChB,GAAG,SAAa,GACf;QACD,OAAO,EAAE,OAAO,EAAE,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,CAAC;KACnB;IAeD,OAAO,CAAC,KAAK;CAQd;AAED,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAatE"}

package/dist/smart-agent/policy/tool-availability-registry.js

@@ -0,0 +1,77 @@
+export class ToolAvailabilityRegistry {
+    defaultTtlMs;
+    sessions = new Map();
+    constructor(defaultTtlMs = 10 * 60 * 1000) {
+        this.defaultTtlMs = defaultTtlMs;
+    }
+    getBlockedToolNames(sessionId, now = Date.now()) {
+        const blocked = this.sessions.get(sessionId);
+        if (!blocked || blocked.size === 0)
+            return new Set();
+        this.prune(sessionId, now);
+        return new Set(this.sessions.get(sessionId)?.keys() ?? []);
+    }
+    isBlocked(sessionId, toolName, now = Date.now()) {
+        const blocked = this.sessions.get(sessionId);
+        if (!blocked)
+            return false;
+        const entry = blocked.get(toolName);
+        if (!entry)
+            return false;
+        if (entry.blockedUntil <= now) {
+            blocked.delete(toolName);
+            if (blocked.size === 0)
+                this.sessions.delete(sessionId);
+            return false;
+        }
+        return true;
+    }
+    block(sessionId, toolName, reason, ttlMs = this.defaultTtlMs, now = Date.now()) {
+        const blockedUntil = now + ttlMs;
+        let blocked = this.sessions.get(sessionId);
+        if (!blocked) {
+            blocked = new Map();
+            this.sessions.set(sessionId, blocked);
+        }
+        const entry = { toolName, blockedUntil, reason };
+        blocked.set(toolName, entry);
+        return entry;
+    }
+    filterTools(sessionId, tools, now = Date.now()) {
+        const allowed = [];
+        const blocked = [];
+        for (const tool of tools) {
+            if (this.isBlocked(sessionId, tool.name, now)) {
+                blocked.push(tool.name);
+            }
+            else {
+                allowed.push(tool);
+            }
+        }
+        return { allowed, blocked };
+    }
+    prune(sessionId, now = Date.now()) {
+        const blocked = this.sessions.get(sessionId);
+        if (!blocked)
+            return;
+        for (const [name, entry] of blocked.entries()) {
+            if (entry.blockedUntil <= now)
+                blocked.delete(name);
+        }
+        if (blocked.size === 0)
+            this.sessions.delete(sessionId);
+    }
+}
+export function isToolContextUnavailableError(message) {
+    const normalized = message.toLowerCase();
+    return (normalized.includes('not available') ||
+        normalized.includes('unavailable') ||
+        normalized.includes('not found') ||
+        normalized.includes('forbidden') ||
+        normalized.includes('permission') ||
+        normalized.includes('unauthorized') ||
+        normalized.includes('disabled') ||
+        normalized.includes('not allowed') ||
+        normalized.includes('unknown tool'));
+}
+//# sourceMappingURL=tool-availability-registry.js.map

package/dist/smart-agent/policy/tool-availability-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-availability-registry.js","sourceRoot":"","sources":["../../../src/smart-agent/policy/tool-availability-registry.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,wBAAwB;IAGN;IAFZ,QAAQ,GAAG,IAAI,GAAG,EAAuC,CAAC;IAE3E,YAA6B,eAAe,EAAE,GAAG,EAAE,GAAG,IAAI;QAA7B,iBAAY,GAAZ,YAAY,CAAiB;IAAG,CAAC;IAE9D,mBAAmB,CAAC,SAAiB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC3B,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,SAAS,CAAC,SAAiB,EAAE,QAAgB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,KAAK,CAAC,YAAY,IAAI,GAAG,EAAE,CAAC;YAC9B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACzB,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CACH,SAAiB,EACjB,QAAgB,EAChB,MAAc,EACd,KAAK,GAAG,IAAI,CAAC,YAAY,EACzB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAEhB,MAAM,YAAY,GAAG,GAAG,GAAG,KAAK,CAAC;QACjC,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,GAAG,EAAE,CAAC;YACpB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,KAAK,GAAmB,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,WAAW,CACT,SAAiB,EACjB,KAAgB,EAChB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAKhB,MAAM,OAAO,GAAc,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC9C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,SAAiB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YAC9C,IAAI,KAAK,CAAC,YAAY,IAAI,GAAG;gBAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1D,CAAC;CACF;AAED,MAAM,UAAU,6BAA6B,CAAC,OAAe;IAC3D,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACzC,OAAO,CACL,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC;QACpC,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC;QAClC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;QAChC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;QAChC,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC;QACnC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC/B,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC;QAClC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CACpC,CAAC;AACJ,CAAC"}

package/dist/smart-agent/policy/tool-policy-guard.d.ts

@@ -0,0 +1,8 @@
+import type { IToolPolicy, PolicyVerdict, ToolPolicyConfig } from './types.js';
+export declare class ToolPolicyGuard implements IToolPolicy {
+    private readonly allowSet;
+    private readonly denySet;
+    constructor(config?: ToolPolicyConfig);
+    check(toolName: string): PolicyVerdict;
+}
+//# sourceMappingURL=tool-policy-guard.d.ts.map

package/dist/smart-agent/policy/tool-policy-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-policy-guard.d.ts","sourceRoot":"","sources":["../../../src/smart-agent/policy/tool-policy-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE/E,qBAAa,eAAgB,YAAW,WAAW;IACjD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;gBAEzC,MAAM,CAAC,EAAE,gBAAgB;IAarC,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa;CAqBvC"}

package/dist/smart-agent/policy/tool-policy-guard.js

@@ -0,0 +1,40 @@
+export class ToolPolicyGuard {
+    allowSet;
+    denySet;
+    constructor(config) {
+        if (config?.allowlist && config.allowlist.length > 0) {
+            this.allowSet = new Set(config.allowlist);
+            this.denySet = null;
+        }
+        else if (config?.denylist && config.denylist.length > 0) {
+            this.allowSet = null;
+            this.denySet = new Set(config.denylist);
+        }
+        else {
+            this.allowSet = null;
+            this.denySet = null;
+        }
+    }
+    check(toolName) {
+        if (this.allowSet !== null) {
+            if (!this.allowSet.has(toolName)) {
+                return {
+                    allowed: false,
+                    reason: `Tool "${toolName}" is not in the allowlist`,
+                };
+            }
+            return { allowed: true };
+        }
+        if (this.denySet !== null) {
+            if (this.denySet.has(toolName)) {
+                return {
+                    allowed: false,
+                    reason: `Tool "${toolName}" is in the denylist`,
+                };
+            }
+            return { allowed: true };
+        }
+        return { allowed: true };
+    }
+}
+//# sourceMappingURL=tool-policy-guard.js.map

package/dist/smart-agent/policy/tool-policy-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-policy-guard.js","sourceRoot":"","sources":["../../../src/smart-agent/policy/tool-policy-guard.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,eAAe;IACT,QAAQ,CAA6B;IACrC,OAAO,CAA6B;IAErD,YAAY,MAAyB;QACnC,IAAI,MAAM,EAAE,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;aAAM,IAAI,MAAM,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAgB;QACpB,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACjC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,SAAS,QAAQ,2BAA2B;iBACrD,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,SAAS,QAAQ,sBAAsB;iBAChD,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/smart-agent/policy/types.d.ts

@@ -0,0 +1,51 @@
+import { SmartAgentError } from '@mcp-abap-adt/llm-agent';
+export declare class PolicyError extends SmartAgentError {
+    constructor(message: string, code?: string);
+}
+export declare class PromptInjectionError extends SmartAgentError {
+    constructor(message: string);
+}
+export interface PolicyVerdict {
+    allowed: boolean;
+    /** Human-readable reason for blocking. Only present when allowed=false. */
+    reason?: string;
+}
+/**
+ * Configuration for ToolPolicyGuard.
+ * If allowlist is set, only listed tools are permitted (denylist ignored).
+ * If only denylist is set, listed tools are blocked.
+ * If neither is set, all tools are allowed.
+ */
+export interface ToolPolicyConfig {
+    allowlist?: string[];
+    denylist?: string[];
+}
+export interface IToolPolicy {
+    check(toolName: string): PolicyVerdict;
+}
+export interface DetectionResult {
+    detected: boolean;
+    /** Label of the first matched pattern. Only present when detected=true. */
+    pattern?: string;
+}
+export interface IPromptInjectionDetector {
+    detect(text: string): DetectionResult;
+}
+/**
+ * Session-scoped data governance policy.
+ * Controls RAG record retention and namespace isolation.
+ */
+export interface SessionPolicy {
+    /**
+     * Maximum age of RAG records in ms.
+     * Converted to a TTL Unix timestamp on upsert: ttl = (Date.now() + maxSessionAgeMs) / 1000.
+     * When undefined, records do not expire.
+     */
+    maxSessionAgeMs?: number;
+    /**
+     * Logical namespace for all RAG records in this session, e.g. "tenant/user/session".
+     * Propagated to RagMetadata.namespace on every upsert call.
+     */
+    namespace?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/smart-agent/policy/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/smart-agent/policy/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAM1D,qBAAa,WAAY,SAAQ,eAAe;gBAClC,OAAO,EAAE,MAAM,EAAE,IAAI,SAAiB;CAInD;AAED,qBAAa,oBAAqB,SAAQ,eAAe;gBAC3C,OAAO,EAAE,MAAM;CAI5B;AAMD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAAC;CACxC;AAMD,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAAC;CACvC;AAMD;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}

package/dist/smart-agent/policy/types.js

@@ -0,0 +1,17 @@
+import { SmartAgentError } from '@mcp-abap-adt/llm-agent';
+// ---------------------------------------------------------------------------
+// Errors
+// ---------------------------------------------------------------------------
+export class PolicyError extends SmartAgentError {
+    constructor(message, code = 'POLICY_ERROR') {
+        super(message, code);
+        this.name = 'PolicyError';
+    }
+}
+export class PromptInjectionError extends SmartAgentError {
+    constructor(message) {
+        super(message, 'PROMPT_INJECTION');
+        this.name = 'PromptInjectionError';
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/smart-agent/policy/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/smart-agent/policy/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE1D,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,MAAM,OAAO,WAAY,SAAQ,eAAe;IAC9C,YAAY,OAAe,EAAE,IAAI,GAAG,cAAc;QAChD,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,OAAO,oBAAqB,SAAQ,eAAe;IACvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF"}