@namzu/sdk 0.4.2 → 0.4.4

package/dist/registry/connector/definitions.test.js

@@ -0,0 +1,41 @@
+/**
+ * Current-code invariants asserted (2026-04-21, ses_006 Phase 3):
+ *
+ *   - `ConnectorRegistry` extends `ManagedRegistry<ConnectorDefinition>`
+ *     with `idField: 'id'` — it keys by the top-level `id` field, NOT
+ *     a nested path.
+ *   - `listByType(connectionType)` filters by `connectionType`.
+ *   - As a global (non-tenant-scoped) registry, ConnectorRegistry is
+ *     shared across tenants; tenant isolation lives in
+ *     `TenantConnectorManager` per Codex #5.
+ */
+import { describe, expect, it } from 'vitest';
+import { z } from 'zod';
+import { ConnectorRegistry } from './definitions.js';
+function makeDef(id, connectionType) {
+    return {
+        id: id,
+        name: id,
+        description: `${id} connector`,
+        connectionType,
+        configSchema: z.object({}),
+        methods: [],
+    };
+}
+describe('ConnectorRegistry', () => {
+    it('keys by top-level id', () => {
+        const r = new ConnectorRegistry();
+        r.register(makeDef('conn_a', 'http'));
+        expect(r.get('conn_a')).toBeDefined();
+    });
+    it('listByType filters by connectionType', () => {
+        const r = new ConnectorRegistry();
+        r.register(makeDef('conn_a', 'http'));
+        r.register(makeDef('conn_b', 'webhook'));
+        r.register(makeDef('conn_c', 'http'));
+        expect(r.listByType('http').map((d) => d.id)).toEqual(['conn_a', 'conn_c']);
+        expect(r.listByType('webhook').map((d) => d.id)).toEqual(['conn_b']);
+        expect(r.listByType('custom')).toEqual([]);
+    });
+});
+//# sourceMappingURL=definitions.test.js.map

package/dist/registry/connector/definitions.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"definitions.test.js","sourceRoot":"","sources":["../../../src/registry/connector/definitions.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAKvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAEpD,SAAS,OAAO,CACf,EAAU,EACV,cAAqD;IAErD,OAAO;QACN,EAAE,EAAE,EAAiB;QACrB,IAAI,EAAE,EAAE;QACR,WAAW,EAAE,GAAG,EAAE,YAAY;QAC9B,cAAc;QACd,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE;KACX,CAAA;AACF,CAAC;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,GAAG,IAAI,iBAAiB,EAAE,CAAA;QACjC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;QACrC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,GAAG,IAAI,iBAAiB,EAAE,CAAA;QACjC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;QACrC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAA;QACxC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAA;QACrC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC3E,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;QACpE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/registry/connector/scoped.test.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Current-code invariants asserted (2026-04-21, ses_006 Phase 3):
+ *
+ *   - `ScopedConnectorRegistry` stores per-scope config by a composite
+ *     key `<scope>:<scopeId>:<connectorId>`. Multiple configs at
+ *     different scopes for the same connector coexist.
+ *   - `set`, `remove`, `getAt` round-trip through the same key.
+ *   - `resolve(connectorId, chain)` iterates in `CONNECTOR_SCOPE_ORDER`
+ *     (org → environment → team → project → agent) and merges layers
+ *     — later scopes override earlier ones. Specifically:
+ *     - `options` are shallow-merged across layers.
+ *     - `auth` is last-wins (any layer with an explicit auth replaces).
+ *     - `enabled` is last-wins (defaulting to true when no layer sets it).
+ *     - The final `ConnectorConfig.name` falls back to `connectorId`
+ *       when no layer sets a name.
+ *   - `resolve` returns undefined when no layer matches the chain.
+ *   - `listForConnector` returns every config for a connector across
+ *     all scopes; `listAtScope` returns every connector at a given scope.
+ */
+export {};
+//# sourceMappingURL=scoped.test.d.ts.map

package/dist/registry/connector/scoped.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoped.test.d.ts","sourceRoot":"","sources":["../../../src/registry/connector/scoped.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG"}

package/dist/registry/connector/scoped.test.js

@@ -0,0 +1,115 @@
+/**
+ * Current-code invariants asserted (2026-04-21, ses_006 Phase 3):
+ *
+ *   - `ScopedConnectorRegistry` stores per-scope config by a composite
+ *     key `<scope>:<scopeId>:<connectorId>`. Multiple configs at
+ *     different scopes for the same connector coexist.
+ *   - `set`, `remove`, `getAt` round-trip through the same key.
+ *   - `resolve(connectorId, chain)` iterates in `CONNECTOR_SCOPE_ORDER`
+ *     (org → environment → team → project → agent) and merges layers
+ *     — later scopes override earlier ones. Specifically:
+ *     - `options` are shallow-merged across layers.
+ *     - `auth` is last-wins (any layer with an explicit auth replaces).
+ *     - `enabled` is last-wins (defaulting to true when no layer sets it).
+ *     - The final `ConnectorConfig.name` falls back to `connectorId`
+ *       when no layer sets a name.
+ *   - `resolve` returns undefined when no layer matches the chain.
+ *   - `listForConnector` returns every config for a connector across
+ *     all scopes; `listAtScope` returns every connector at a given scope.
+ */
+import { describe, expect, it } from 'vitest';
+import { ScopedConnectorRegistry } from './scoped.js';
+const CID = 'conn_http';
+describe('ScopedConnectorRegistry', () => {
+    describe('set + getAt + remove', () => {
+        it('round-trips via the composite key', () => {
+            const r = new ScopedConnectorRegistry();
+            r.set({
+                scope: { scope: 'org', scopeId: 'org_1' },
+                connectorId: CID,
+                options: { k: 'v' },
+            });
+            expect(r.getAt({ scope: 'org', scopeId: 'org_1' }, CID)?.options).toEqual({ k: 'v' });
+        });
+        it('remove returns true iff an entry existed', () => {
+            const r = new ScopedConnectorRegistry();
+            r.set({ scope: { scope: 'org', scopeId: 'org_1' }, connectorId: CID });
+            expect(r.remove({ scope: 'org', scopeId: 'org_1' }, CID)).toBe(true);
+            expect(r.remove({ scope: 'org', scopeId: 'org_1' }, CID)).toBe(false);
+        });
+        it('different scopes coexist for the same connector', () => {
+            const r = new ScopedConnectorRegistry();
+            r.set({ scope: { scope: 'org', scopeId: 'org_1' }, connectorId: CID });
+            r.set({ scope: { scope: 'project', scopeId: 'proj_1' }, connectorId: CID });
+            expect(r.listForConnector(CID)).toHaveLength(2);
+        });
+    });
+    describe('resolve layering', () => {
+        it('merges options shallow; later scopes override', () => {
+            const r = new ScopedConnectorRegistry();
+            r.set({
+                scope: { scope: 'org', scopeId: 'org_1' },
+                connectorId: CID,
+                options: { host: 'api.org', timeout: 30 },
+            });
+            r.set({
+                scope: { scope: 'project', scopeId: 'proj_1' },
+                connectorId: CID,
+                options: { host: 'api.project' },
+            });
+            const resolved = r.resolve(CID, { org: 'org_1', project: 'proj_1' });
+            expect(resolved?.options).toEqual({ host: 'api.project', timeout: 30 });
+        });
+        it('auth is last-wins (CONNECTOR_SCOPE_ORDER)', () => {
+            const r = new ScopedConnectorRegistry();
+            r.set({
+                scope: { scope: 'org', scopeId: 'org_1' },
+                connectorId: CID,
+                auth: { type: 'none' },
+            });
+            r.set({
+                scope: { scope: 'project', scopeId: 'proj_1' },
+                connectorId: CID,
+                auth: { type: 'api_key', credentials: { apiKey: 'secret' } },
+            });
+            const resolved = r.resolve(CID, { org: 'org_1', project: 'proj_1' });
+            expect(resolved?.auth).toEqual({ type: 'api_key', credentials: { apiKey: 'secret' } });
+        });
+        it('enabled defaults to true and is last-wins', () => {
+            const r = new ScopedConnectorRegistry();
+            r.set({ scope: { scope: 'org', scopeId: 'org_1' }, connectorId: CID, enabled: false });
+            const resolved = r.resolve(CID, { org: 'org_1' });
+            expect(resolved?.enabled).toBe(false);
+        });
+        it('config.name falls back to connectorId when no layer sets a name', () => {
+            const r = new ScopedConnectorRegistry();
+            r.set({ scope: { scope: 'org', scopeId: 'org_1' }, connectorId: CID });
+            const resolved = r.resolve(CID, { org: 'org_1' });
+            expect(resolved?.config.name).toBe(CID);
+        });
+        it('resolvedFrom preserves layer order by CONNECTOR_SCOPE_ORDER', () => {
+            const r = new ScopedConnectorRegistry();
+            r.set({ scope: { scope: 'project', scopeId: 'proj_1' }, connectorId: CID });
+            r.set({ scope: { scope: 'org', scopeId: 'org_1' }, connectorId: CID });
+            const resolved = r.resolve(CID, { org: 'org_1', project: 'proj_1' });
+            expect(resolved?.resolvedFrom.map((s) => s.scope)).toEqual(['org', 'project']);
+        });
+        it('returns undefined when no layer matches the chain', () => {
+            const r = new ScopedConnectorRegistry();
+            expect(r.resolve(CID, { org: 'org_none' })).toBeUndefined();
+        });
+    });
+    describe('list operations', () => {
+        it('listAtScope filters by scope prefix', () => {
+            const r = new ScopedConnectorRegistry();
+            r.set({ scope: { scope: 'org', scopeId: 'org_1' }, connectorId: CID });
+            r.set({
+                scope: { scope: 'org', scopeId: 'org_1' },
+                connectorId: 'conn_other',
+            });
+            r.set({ scope: { scope: 'project', scopeId: 'proj_1' }, connectorId: CID });
+            expect(r.listAtScope({ scope: 'org', scopeId: 'org_1' })).toHaveLength(2);
+        });
+    });
+});
+//# sourceMappingURL=scoped.test.js.map

package/dist/registry/connector/scoped.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoped.test.js","sourceRoot":"","sources":["../../../src/registry/connector/scoped.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAI7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAA;AAErD,MAAM,GAAG,GAAG,WAA0B,CAAA;AAEtC,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACxC,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC5C,MAAM,CAAC,GAAG,IAAI,uBAAuB,EAAE,CAAA;YACvC,CAAC,CAAC,GAAG,CAAC;gBACL,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE;gBACzC,WAAW,EAAE,GAAG;gBAChB,OAAO,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE;aACnB,CAAC,CAAA;YACF,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QACtF,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YACnD,MAAM,CAAC,GAAG,IAAI,uBAAuB,EAAE,CAAA;YACvC,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAA;YACtE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACpE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YAC1D,MAAM,CAAC,GAAG,IAAI,uBAAuB,EAAE,CAAA;YACvC,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAA;YACtE,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3E,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAChD,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QACjC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACxD,MAAM,CAAC,GAAG,IAAI,uBAAuB,EAAE,CAAA;YACvC,CAAC,CAAC,GAAG,CAAC;gBACL,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE;gBACzC,WAAW,EAAE,GAAG;gBAChB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE;aACzC,CAAC,CAAA;YACF,CAAC,CAAC,GAAG,CAAC;gBACL,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE;gBAC9C,WAAW,EAAE,GAAG;gBAChB,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;aAChC,CAAC,CAAA;YACF,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;YACpE,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAA;QACxE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACpD,MAAM,CAAC,GAAG,IAAI,uBAAuB,EAAE,CAAA;YACvC,CAAC,CAAC,GAAG,CAAC;gBACL,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE;gBACzC,WAAW,EAAE,GAAG;gBAChB,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;aACtB,CAAC,CAAA;YACF,CAAC,CAAC,GAAG,CAAC;gBACL,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE;gBAC9C,WAAW,EAAE,GAAG;gBAChB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;aAC5D,CAAC,CAAA;YACF,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;YACpE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAA;QACvF,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACpD,MAAM,CAAC,GAAG,IAAI,uBAAuB,EAAE,CAAA;YACvC,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;YACtF,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;YACjD,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YAC1E,MAAM,CAAC,GAAG,IAAI,uBAAuB,EAAE,CAAA;YACvC,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAA;YACtE,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAA;YACjD,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACtE,MAAM,CAAC,GAAG,IAAI,uBAAuB,EAAE,CAAA;YACvC,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3E,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAA;YACtE,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAA;YACpE,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAA;QAC/E,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC5D,MAAM,CAAC,GAAG,IAAI,uBAAuB,EAAE,CAAA;YACvC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;QAC5D,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC9C,MAAM,CAAC,GAAG,IAAI,uBAAuB,EAAE,CAAA;YACvC,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAA;YACtE,CAAC,CAAC,GAAG,CAAC;gBACL,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE;gBACzC,WAAW,EAAE,YAA2B;aACxC,CAAC,CAAA;YACF,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3E,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC1E,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/registry/plugin/index.test.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Current-code invariants asserted (2026-04-21, ses_006 Phase 3):
+ *
+ *   - `PluginRegistry` extends `ManagedRegistry<PluginDefinition>`
+ *     with `idField: 'id'`.
+ *   - `listByScope(scope)` filters by `def.scope`.
+ *   - `listByStatus(status)` filters by `def.status`.
+ *   - `findByName(name)` does a linear scan through `getAll()` and
+ *     returns the first match by `manifest.name`, or undefined.
+ */
+export {};
+//# sourceMappingURL=index.test.d.ts.map

package/dist/registry/plugin/index.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../../../src/registry/plugin/index.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/registry/plugin/index.test.js

@@ -0,0 +1,69 @@
+/**
+ * Current-code invariants asserted (2026-04-21, ses_006 Phase 3):
+ *
+ *   - `PluginRegistry` extends `ManagedRegistry<PluginDefinition>`
+ *     with `idField: 'id'`.
+ *   - `listByScope(scope)` filters by `def.scope`.
+ *   - `listByStatus(status)` filters by `def.status`.
+ *   - `findByName(name)` does a linear scan through `getAll()` and
+ *     returns the first match by `manifest.name`, or undefined.
+ */
+import { describe, expect, it } from 'vitest';
+import { PluginRegistry } from './index.js';
+function makeDef(id, scope, status, name = id) {
+    return {
+        id: id,
+        manifest: {
+            name,
+            version: '1.0.0',
+            description: `${name} plugin`,
+        },
+        scope,
+        status,
+        rootDir: `/plugins/${id}`,
+        installedAt: Date.now(),
+    };
+}
+describe('PluginRegistry', () => {
+    it('keys by top-level id', () => {
+        const r = new PluginRegistry();
+        r.register(makeDef('plugin_a', 'project', 'installed'));
+        expect(r.get('plugin_a')).toBeDefined();
+    });
+    it('listByScope filters by scope', () => {
+        const r = new PluginRegistry();
+        r.register(makeDef('a', 'project', 'installed'));
+        r.register(makeDef('b', 'user', 'enabled'));
+        r.register(makeDef('c', 'project', 'disabled'));
+        expect(r.listByScope('project').map((d) => d.id)).toEqual(['a', 'c']);
+        expect(r.listByScope('user').map((d) => d.id)).toEqual(['b']);
+    });
+    it('listByStatus filters by status', () => {
+        const r = new PluginRegistry();
+        r.register(makeDef('a', 'project', 'installed'));
+        r.register(makeDef('b', 'project', 'enabled'));
+        r.register(makeDef('c', 'project', 'enabled'));
+        expect(r.listByStatus('enabled').map((d) => d.id)).toEqual(['b', 'c']);
+        expect(r.listByStatus('error')).toEqual([]);
+    });
+    describe('findByName', () => {
+        it('returns the first def with matching manifest.name', () => {
+            const r = new PluginRegistry();
+            r.register(makeDef('id_1', 'project', 'installed', 'alpha'));
+            r.register(makeDef('id_2', 'project', 'installed', 'beta'));
+            expect(r.findByName('beta')?.id).toBe('id_2');
+        });
+        it('returns undefined when no match', () => {
+            const r = new PluginRegistry();
+            r.register(makeDef('id_1', 'project', 'installed', 'alpha'));
+            expect(r.findByName('missing')).toBeUndefined();
+        });
+        it('is case-sensitive (exact string match)', () => {
+            const r = new PluginRegistry();
+            r.register(makeDef('id_1', 'project', 'installed', 'Alpha'));
+            expect(r.findByName('alpha')).toBeUndefined();
+            expect(r.findByName('Alpha')?.id).toBe('id_1');
+        });
+    });
+});
+//# sourceMappingURL=index.test.js.map

package/dist/registry/plugin/index.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.js","sourceRoot":"","sources":["../../../src/registry/plugin/index.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAK7C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAE3C,SAAS,OAAO,CACf,EAAU,EACV,KAAkB,EAClB,MAAoB,EACpB,IAAI,GAAG,EAAE;IAET,OAAO;QACN,EAAE,EAAE,EAAc;QAClB,QAAQ,EAAE;YACT,IAAI;YACJ,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,GAAG,IAAI,SAAS;SAC7B;QACD,KAAK;QACL,MAAM;QACN,OAAO,EAAE,YAAY,EAAE,EAAE;QACzB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;KACvB,CAAA;AACF,CAAC;AAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,GAAG,IAAI,cAAc,EAAE,CAAA;QAC9B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;QACvD,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,GAAG,IAAI,cAAc,EAAE,CAAA;QAC9B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;QAChD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAA;QAC3C,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAA;QAC/C,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;QACrE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,GAAG,IAAI,cAAc,EAAE,CAAA;QAC9B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;QAChD,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;QAC9C,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;QAC9C,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;QACtE,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC5D,MAAM,CAAC,GAAG,IAAI,cAAc,EAAE,CAAA;YAC9B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;YAC5D,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;YAC3D,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC9C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YAC1C,MAAM,CAAC,GAAG,IAAI,cAAc,EAAE,CAAA;YAC9B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;YAC5D,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;QAChD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YACjD,MAAM,CAAC,GAAG,IAAI,cAAc,EAAE,CAAA;YAC9B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAA;YAC5D,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;YAC7C,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/registry/tool/execute.test.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Current-code invariants asserted (2026-04-21, ses_006 Phase 3):
+ *
+ *   - `ToolRegistry` extends `ManagedRegistry<ToolDefinition>` with
+ *     `idField: 'name'` and an additional `availability` map keyed by
+ *     tool name.
+ *   - `register(tool)` defaults availability to 'active'; the array
+ *     overload uses the second arg (if it's a string) as the initial
+ *     state for all tools.
+ *   - Tier validation: if `tool.tier` is set AND `tierConfig` is
+ *     configured, the tier id must be in `tierConfig.tiers`; otherwise
+ *     register throws. Tools without a tier (even with tierConfig
+ *     configured) are always accepted.
+ *   - `unregister` + `clear` drop both the Registry entry and the
+ *     availability entry.
+ *   - `activate` / `defer` take a list of names; each throws (via
+ *     `getOrThrow`) if the name is unknown, then toggles availability.
+ *   - `suspendAll` flips every `active` tool to `suspended`;
+ *     `deferred` / `suspended` tools are left alone. `hasSuspended`
+ *     reports true iff at least one tool is suspended.
+ *   - `getAvailability(name)` returns 'active' as a default even for
+ *     unknown names (this is non-obvious but is the current behavior).
+ *   - `searchDeferred(q)` is a case-insensitive filter against name OR
+ *     description of every DEFERRED tool.
+ *   - `assignTiers(mapping)` mutates `tool.tier` on existing tools;
+ *     throws via `getOrThrow` on unknown name; throws if the tier id
+ *     is not in `tierConfig.tiers`.
+ *   - `toTierGuidance` returns null without a guidanceTemplate; calls
+ *     the template with every defined tier otherwise.
+ *   - `toPromptSection`: returns '' when no active or deferred tools;
+ *     otherwise produces `<available_tools>` + `<deferred_tools>`
+ *     fragments.
+ *   - `toLLMTools`: converts active + suspended tools (filtered by
+ *     `toolNames` if provided) into LLM tool schemas via
+ *     `zodToJsonSchema`. When `tierConfig.labelInDescription` is true,
+ *     the description is prefixed with the tier label.
+ *   - `execute`: validates availability → permissionMode plan gate →
+ *     zod.safeParse → calls tool.execute inside an OTEL span; wraps
+ *     thrown errors as `{success:false, error}`.
+ */
+export {};
+//# sourceMappingURL=execute.test.d.ts.map

package/dist/registry/tool/execute.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.test.d.ts","sourceRoot":"","sources":["../../../src/registry/tool/execute.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG"}

package/dist/registry/tool/execute.test.js

@@ -0,0 +1,281 @@
+/**
+ * Current-code invariants asserted (2026-04-21, ses_006 Phase 3):
+ *
+ *   - `ToolRegistry` extends `ManagedRegistry<ToolDefinition>` with
+ *     `idField: 'name'` and an additional `availability` map keyed by
+ *     tool name.
+ *   - `register(tool)` defaults availability to 'active'; the array
+ *     overload uses the second arg (if it's a string) as the initial
+ *     state for all tools.
+ *   - Tier validation: if `tool.tier` is set AND `tierConfig` is
+ *     configured, the tier id must be in `tierConfig.tiers`; otherwise
+ *     register throws. Tools without a tier (even with tierConfig
+ *     configured) are always accepted.
+ *   - `unregister` + `clear` drop both the Registry entry and the
+ *     availability entry.
+ *   - `activate` / `defer` take a list of names; each throws (via
+ *     `getOrThrow`) if the name is unknown, then toggles availability.
+ *   - `suspendAll` flips every `active` tool to `suspended`;
+ *     `deferred` / `suspended` tools are left alone. `hasSuspended`
+ *     reports true iff at least one tool is suspended.
+ *   - `getAvailability(name)` returns 'active' as a default even for
+ *     unknown names (this is non-obvious but is the current behavior).
+ *   - `searchDeferred(q)` is a case-insensitive filter against name OR
+ *     description of every DEFERRED tool.
+ *   - `assignTiers(mapping)` mutates `tool.tier` on existing tools;
+ *     throws via `getOrThrow` on unknown name; throws if the tier id
+ *     is not in `tierConfig.tiers`.
+ *   - `toTierGuidance` returns null without a guidanceTemplate; calls
+ *     the template with every defined tier otherwise.
+ *   - `toPromptSection`: returns '' when no active or deferred tools;
+ *     otherwise produces `<available_tools>` + `<deferred_tools>`
+ *     fragments.
+ *   - `toLLMTools`: converts active + suspended tools (filtered by
+ *     `toolNames` if provided) into LLM tool schemas via
+ *     `zodToJsonSchema`. When `tierConfig.labelInDescription` is true,
+ *     the description is prefixed with the tier label.
+ *   - `execute`: validates availability → permissionMode plan gate →
+ *     zod.safeParse → calls tool.execute inside an OTEL span; wraps
+ *     thrown errors as `{success:false, error}`.
+ */
+import { describe, expect, it, vi } from 'vitest';
+import { z } from 'zod';
+import { ToolRegistry } from './execute.js';
+function makeTool(name, overrides = {}) {
+    return {
+        name,
+        description: `${name} tool`,
+        inputSchema: z.object({ k: z.string().optional() }),
+        async execute() {
+            return { success: true, output: `${name}-ran` };
+        },
+        ...overrides,
+    };
+}
+function makeContext(overrides = {}) {
+    return {
+        runId: 'run_1',
+        workingDirectory: '/tmp',
+        abortSignal: new AbortController().signal,
+        env: {},
+        log: () => { },
+        ...overrides,
+    };
+}
+describe('ToolRegistry — register + availability', () => {
+    it('single-tool register: default availability is active', () => {
+        const r = new ToolRegistry();
+        r.register(makeTool('read'));
+        expect(r.getAvailability('read')).toBe('active');
+    });
+    it('array-register: second arg sets availability for all', () => {
+        const r = new ToolRegistry();
+        r.register([makeTool('a'), makeTool('b')], 'deferred');
+        expect(r.getAvailability('a')).toBe('deferred');
+        expect(r.getAvailability('b')).toBe('deferred');
+    });
+    it('getAvailability returns active for unknown names (current default)', () => {
+        const r = new ToolRegistry();
+        expect(r.getAvailability('never-registered')).toBe('active');
+    });
+    it('unregister drops both the tool + the availability entry', () => {
+        const r = new ToolRegistry();
+        r.register(makeTool('a'));
+        expect(r.unregister('a')).toBe(true);
+        expect(r.get('a')).toBeUndefined();
+        expect(r.listIds()).toEqual([]);
+    });
+    it('clear empties both maps', () => {
+        const r = new ToolRegistry();
+        r.register(makeTool('a'));
+        r.clear();
+        expect(r.listIds()).toEqual([]);
+    });
+});
+describe('ToolRegistry — tier validation', () => {
+    const tierConfig = {
+        tiers: [
+            { id: 'safe', label: 'Safe', priority: 1 },
+            { id: 'danger', label: 'Danger', priority: 10 },
+        ],
+    };
+    it('accepts tools without a tier even when tierConfig is configured', () => {
+        const r = new ToolRegistry({ tierConfig });
+        expect(() => r.register(makeTool('a'))).not.toThrow();
+    });
+    it('accepts tools whose tier is in the config', () => {
+        const r = new ToolRegistry({ tierConfig });
+        expect(() => r.register(makeTool('a', { tier: 'safe' }))).not.toThrow();
+    });
+    it('throws when tier id is unknown', () => {
+        const r = new ToolRegistry({ tierConfig });
+        expect(() => r.register(makeTool('a', { tier: 'bogus' }))).toThrow(/not defined/);
+    });
+});
+describe('ToolRegistry — activate / defer / suspend', () => {
+    it('activate + defer throw via getOrThrow on unknown name', () => {
+        const r = new ToolRegistry();
+        expect(() => r.activate(['unknown'])).toThrow(/Not found/);
+        expect(() => r.defer(['unknown'])).toThrow(/Not found/);
+    });
+    it('activate sets state to active', () => {
+        const r = new ToolRegistry();
+        r.register([makeTool('a')], 'deferred');
+        r.activate(['a']);
+        expect(r.getAvailability('a')).toBe('active');
+    });
+    it('defer sets state to deferred', () => {
+        const r = new ToolRegistry();
+        r.register(makeTool('a'));
+        r.defer(['a']);
+        expect(r.getAvailability('a')).toBe('deferred');
+    });
+    it('suspendAll flips active → suspended; leaves deferred / suspended alone', () => {
+        const r = new ToolRegistry();
+        r.register(makeTool('a'));
+        r.register(makeTool('b'));
+        r.register([makeTool('c')], 'deferred');
+        r.suspendAll();
+        expect(r.getAvailability('a')).toBe('suspended');
+        expect(r.getAvailability('b')).toBe('suspended');
+        expect(r.getAvailability('c')).toBe('deferred');
+        expect(r.hasSuspended()).toBe(true);
+    });
+    it('hasSuspended returns false when none are suspended', () => {
+        const r = new ToolRegistry();
+        r.register(makeTool('a'));
+        expect(r.hasSuspended()).toBe(false);
+    });
+});
+describe('ToolRegistry — searchDeferred', () => {
+    it('filters only deferred tools by name OR description (case-insensitive)', () => {
+        const r = new ToolRegistry();
+        r.register([makeTool('alpha', { description: 'does alpha' })], 'deferred');
+        r.register([makeTool('beta', { description: 'does BETA' })], 'deferred');
+        r.register(makeTool('gamma'));
+        expect(r.searchDeferred('alpha').map((t) => t.name)).toEqual(['alpha']);
+        expect(r.searchDeferred('beta').map((t) => t.name)).toEqual(['beta']);
+        expect(r.searchDeferred('does').map((t) => t.name)).toEqual(['alpha', 'beta']);
+        expect(r.searchDeferred('gamma')).toEqual([]);
+    });
+});
+describe('ToolRegistry — tier mutation + guidance', () => {
+    const tierConfig = {
+        tiers: [
+            { id: 'safe', label: 'Safe', priority: 1 },
+            { id: 'danger', label: 'Danger', priority: 10 },
+        ],
+        guidanceTemplate: (tiers) => `tiers: ${tiers.map((t) => t.id).join(',')}`,
+        labelInDescription: true,
+    };
+    it('assignTiers sets the tier on each mapped tool', () => {
+        const r = new ToolRegistry({ tierConfig });
+        r.register(makeTool('a'));
+        r.assignTiers({ a: 'safe' });
+        expect(r.get('a')?.tier).toBe('safe');
+    });
+    it('assignTiers throws when the tier is unknown', () => {
+        const r = new ToolRegistry({ tierConfig });
+        r.register(makeTool('a'));
+        expect(() => r.assignTiers({ a: 'bogus' })).toThrow(/not defined/);
+    });
+    it('toTierGuidance returns null without a template', () => {
+        const r = new ToolRegistry();
+        expect(r.toTierGuidance()).toBeNull();
+    });
+    it('toTierGuidance renders via the template', () => {
+        const r = new ToolRegistry({ tierConfig });
+        expect(r.toTierGuidance()).toBe('tiers: safe,danger');
+    });
+});
+describe('ToolRegistry — toPromptSection + toLLMTools', () => {
+    it('toPromptSection returns empty when the registry is empty', () => {
+        const r = new ToolRegistry();
+        expect(r.toPromptSection()).toBe('');
+    });
+    it('toPromptSection renders available + deferred fragments', () => {
+        const r = new ToolRegistry();
+        r.register(makeTool('a'));
+        r.register([makeTool('b')], 'deferred');
+        const s = r.toPromptSection();
+        expect(s).toContain('<available_tools>');
+        expect(s).toContain('- a: a tool');
+        expect(s).toContain('<deferred_tools>');
+        expect(s).toContain('- b');
+    });
+    it('toLLMTools: converts active + suspended tools', () => {
+        const r = new ToolRegistry();
+        r.register(makeTool('a'));
+        r.register([makeTool('b')], 'deferred');
+        r.register([makeTool('c')], 'suspended');
+        const schemas = r.toLLMTools();
+        const names = schemas.map((t) => t.function.name).sort();
+        expect(names).toEqual(['a', 'c']);
+    });
+    it('toLLMTools: prefixes description with tier label when labelInDescription is true', () => {
+        const tierConfig = {
+            tiers: [{ id: 'safe', label: 'Safe', priority: 1 }],
+            labelInDescription: true,
+        };
+        const r = new ToolRegistry({ tierConfig });
+        r.register(makeTool('a', { tier: 'safe' }));
+        const schemas = r.toLLMTools();
+        expect(schemas[0]?.function.description).toBe('[Safe] a tool');
+    });
+});
+describe('ToolRegistry — execute', () => {
+    it('returns error when tool is not active (e.g. deferred)', async () => {
+        const r = new ToolRegistry();
+        r.register([makeTool('a')], 'deferred');
+        const result = await r.execute('a', {}, makeContext());
+        expect(result.success).toBe(false);
+        expect(result.error).toMatch(/deferred and cannot be executed/);
+    });
+    it('blocks non-read-only tools in plan mode', async () => {
+        const r = new ToolRegistry();
+        r.register(makeTool('write', { isReadOnly: () => false }));
+        const result = await r.execute('write', {}, makeContext({
+            permissionContext: { mode: 'plan', runId: 'run_1', workingDirectory: '/tmp' },
+        }));
+        expect(result.success).toBe(false);
+        expect(result.permissionDenied).toBe(true);
+    });
+    it('allows read-only tools in plan mode', async () => {
+        const r = new ToolRegistry();
+        const execute = vi.fn(async () => ({ success: true, output: 'ok' }));
+        r.register(makeTool('read', { isReadOnly: () => true, execute }));
+        const result = await r.execute('read', {}, makeContext({
+            permissionContext: { mode: 'plan', runId: 'run_1', workingDirectory: '/tmp' },
+        }));
+        expect(result.success).toBe(true);
+        expect(execute).toHaveBeenCalled();
+    });
+    it('returns error when input fails zod validation', async () => {
+        const r = new ToolRegistry();
+        r.register(makeTool('strict', {
+            inputSchema: z.object({ required: z.string() }),
+        }));
+        const result = await r.execute('strict', { required: 123 }, makeContext());
+        expect(result.success).toBe(false);
+        expect(result.error).toMatch(/Invalid input/);
+    });
+    it('wraps thrown errors in the execute function', async () => {
+        const r = new ToolRegistry();
+        r.register(makeTool('bad', {
+            async execute() {
+                throw new Error('boom');
+            },
+        }));
+        const result = await r.execute('bad', {}, makeContext());
+        expect(result.success).toBe(false);
+        expect(result.error).toMatch(/execution failed: boom/);
+    });
+    it('returns the tool result on happy path', async () => {
+        const r = new ToolRegistry();
+        r.register(makeTool('good'));
+        const result = await r.execute('good', {}, makeContext());
+        expect(result.success).toBe(true);
+        expect(result.output).toBe('good-ran');
+    });
+});
+//# sourceMappingURL=execute.test.js.map