@namzu/sdk 14.0.7 → 15.1.0

package/dist/registry/tool/__tests__/strict-registration.test.js

@@ -1,82 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { z } from 'zod';
-import { ToolRegistry } from '../execute.js';
-/**
- * A tool that asks for constrained generation and hands over a schema the
- * constrained dialect cannot express is wrong at the moment it is DECLARED,
- * whichever model it later meets.
- *
- * The first attempt at this check lived in a provider driver. That caught the
- * bug — but per request, in one of the two drivers that mark tools strict, and
- * only once something actually ran. The registry already refused
- * `enforceModelInput` without a `modelInputSchema`, with a comment stating the
- * principle exactly: "Refusing at registration puts the error where the author
- * can fix it rather than at the first request." The rule was written down; the
- * check was in the wrong place.
- *
- * So the pair is here now. One asks whether a model schema EXISTS, the other
- * whether it can carry the guarantee the tool just requested.
- */
-function tool(overrides) {
-    return {
-        name: 'sample',
-        description: 'a tool',
-        inputSchema: z.object({}),
-        execute: async () => ({ success: true, output: 'ok' }),
-        ...overrides,
-    };
-}
-describe('a tool cannot register a schema its own guarantee cannot carry', () => {
-    it('refuses a keyword outside the strict subset, naming the path', () => {
-        const registry = new ToolRegistry();
-        expect(() => registry.register(tool({
-            name: 'edit',
-            enforceModelInput: true,
-            modelInputSchema: {
-                type: 'object',
-                properties: { insertLine: { oneOf: [{ type: 'integer' }, { const: 'end' }] } },
-            },
-        }))).toThrow(/edit\.properties\.insertLine\.oneOf/);
-    });
-    it('names the remedy, not just the offence', () => {
-        const registry = new ToolRegistry();
-        expect(() => registry.register(tool({ enforceModelInput: true, modelInputSchema: { properties: { n: { minimum: 0 } } } }))).toThrow(/enforce at execution/);
-    });
-    it('admits the same union spelled the way the subset accepts', () => {
-        const registry = new ToolRegistry();
-        expect(() => registry.register(tool({
-            enforceModelInput: true,
-            modelInputSchema: {
-                type: 'object',
-                properties: { insertLine: { anyOf: [{ type: 'integer' }, { const: 'end' }] } },
-                additionalProperties: false,
-            },
-        }))).not.toThrow();
-    });
-    it('leaves a tool that never asked for the guarantee alone', () => {
-        // Without `enforceModelInput` nothing is marked strict, so the schema is
-        // sent as ordinary JSON Schema and `oneOf` is perfectly legal there.
-        // Refusing it would break working setups for no reason.
-        const registry = new ToolRegistry();
-        expect(() => registry.register(tool({ modelInputSchema: { properties: { a: { oneOf: [{ type: 'string' }] } } } }))).not.toThrow();
-    });
-    it('still refuses enforcement with no model schema at all', () => {
-        // The check this one was added beside. Kept in the same file so a
-        // future edit sees both halves of the pair together.
-        const registry = new ToolRegistry();
-        expect(() => registry.register(tool({ enforceModelInput: true }))).toThrow(/does not define modelInputSchema/);
-    });
-    it('refuses through every registration shape', () => {
-        // `register` has three overloads and only one of them was exercised
-        // above; a check on the wrong one would look like coverage.
-        const bad = tool({
-            name: 'bad',
-            enforceModelInput: true,
-            modelInputSchema: { properties: { a: { oneOf: [] } } },
-        });
-        expect(() => new ToolRegistry().register(bad)).toThrow(/oneOf/);
-        expect(() => new ToolRegistry().register('bad', bad)).toThrow(/oneOf/);
-        expect(() => new ToolRegistry().register([bad])).toThrow(/oneOf/);
-    });
-});
-//# sourceMappingURL=strict-registration.test.js.map

package/dist/registry/tool/__tests__/strict-registration.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"strict-registration.test.js","sourceRoot":"","sources":["../../../../src/registry/tool/__tests__/strict-registration.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE5C;;;;;;;;;;;;;;;GAeG;AAEH,SAAS,IAAI,CAAC,SAAkC;IAC/C,OAAO;QACN,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACtD,GAAG,SAAS;KACM,CAAA;AACpB,CAAC;AAED,QAAQ,CAAC,gEAAgE,EAAE,GAAG,EAAE;IAC/E,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACvE,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAA;QAEnC,MAAM,CAAC,GAAG,EAAE,CACX,QAAQ,CAAC,QAAQ,CAChB,IAAI,CAAC;YACJ,IAAI,EAAE,MAAM;YACZ,iBAAiB,EAAE,IAAI;YACvB,gBAAgB,EAAE;gBACjB,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;aAC9E;SACD,CAAC,CACF,CACD,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QACjD,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAA;QAEnC,MAAM,CAAC,GAAG,EAAE,CACX,QAAQ,CAAC,QAAQ,CAChB,IAAI,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAC1F,CACD,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QACnE,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAA;QAEnC,MAAM,CAAC,GAAG,EAAE,CACX,QAAQ,CAAC,QAAQ,CAChB,IAAI,CAAC;YACJ,iBAAiB,EAAE,IAAI;YACvB,gBAAgB,EAAE;gBACjB,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;gBAC9E,oBAAoB,EAAE,KAAK;aAC3B;SACD,CAAC,CACF,CACD,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IAChB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QACjE,yEAAyE;QACzE,qEAAqE;QACrE,wDAAwD;QACxD,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAA;QAEnC,MAAM,CAAC,GAAG,EAAE,CACX,QAAQ,CAAC,QAAQ,CAChB,IAAI,CAAC,EAAE,gBAAgB,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAClF,CACD,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IAChB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAChE,kEAAkE;QAClE,qDAAqD;QACrD,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAA;QAEnC,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CACzE,kCAAkC,CAClC,CAAA;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACnD,oEAAoE;QACpE,4DAA4D;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC;YAChB,IAAI,EAAE,KAAK;YACX,iBAAiB,EAAE,IAAI;YACvB,gBAAgB,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE;SACtD,CAAC,CAAA;QAEF,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC/D,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACtE,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,YAAY,EAAE,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/registry/tool/__tests__/tool-name-validation.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=tool-name-validation.test.d.ts.map

package/dist/registry/tool/__tests__/tool-name-validation.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tool-name-validation.test.d.ts","sourceRoot":"","sources":["../../../../src/registry/tool/__tests__/tool-name-validation.test.ts"],"names":[],"mappings":""}

package/dist/registry/tool/__tests__/tool-name-validation.test.js

@@ -1,70 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { z } from 'zod';
-import { PLUGIN_NAMESPACE_SEPARATOR } from '../../../constants/plugin/index.js';
-import { ToolRegistry, assertToolName } from '../execute.js';
-/**
- * A tool name reaches the provider verbatim, and the major message APIs
- * accept `[a-zA-Z0-9_-]` only. Nothing checked it: names were derived by
- * concatenation at three separate construction sites, and the plugin
- * bridge's separator was a colon — so EVERY plugin-contributed tool name
- * was illegal, unconditionally.
- *
- * The rejection is a 400 on the whole request rather than on that tool,
- * and those tools are registered deferred, so it fired the moment one was
- * activated with nothing naming the culprit.
- */
-const tool = (name) => ({
-    name,
-    description: 'x',
-    inputSchema: z.object({}),
-    execute: async () => ({ success: true, output: 'ok' }),
-});
-describe('what a name may be', () => {
-    it.each(['read', 'read_file', 'read-file', 'mcp__srv__read', 'a'.repeat(64)])('accepts %s', (name) => {
-        expect(() => assertToolName(name)).not.toThrow();
-    });
-    it.each([
-        ['a colon', 'plugin:tool'],
-        ['a space', 'read file'],
-        ['a dot', 'fs.read'],
-        ['a slash', 'fs/read'],
-        ['an empty name', ''],
-    ])('refuses %s', (_why, name) => {
-        expect(() => assertToolName(name)).toThrow(/cannot be sent to a provider/);
-    });
-    it('refuses a name over the length limit and says so', () => {
-        expect(() => assertToolName('a'.repeat(65))).toThrow(/65 characters, over the 64/);
-    });
-    it('names the offending tool', () => {
-        // A 400 on the whole request names nothing; this has to.
-        expect(() => assertToolName('bad:name')).toThrow(/"bad:name"/);
-    });
-});
-describe('the registry', () => {
-    it('refuses at registration rather than at request time', () => {
-        const registry = new ToolRegistry();
-        // Failing here costs the run nothing and can still be attributed.
-        expect(() => registry.register(tool('plugin:tool'))).toThrow(/cannot be sent to a provider/);
-    });
-    it('still registers a legal name', () => {
-        const registry = new ToolRegistry();
-        registry.register(tool('read_file'));
-        expect(registry.listNames()).toContain('read_file');
-    });
-    it('checks the id when one is passed separately', () => {
-        const registry = new ToolRegistry();
-        expect(() => registry.register('bad:id', tool('fine'))).toThrow(/cannot be sent to a provider/);
-    });
-});
-describe('the plugin namespace separator', () => {
-    it('is itself legal, so plugin tools can register at all', () => {
-        // It was a colon, which made every plugin-contributed tool name
-        // illegal — the check above would refuse all of them.
-        expect(() => assertToolName(`plugin${PLUGIN_NAMESPACE_SEPARATOR}tool`)).not.toThrow();
-    });
-    it('produces a legal name for a bridged remote tool', () => {
-        const name = `fs-plugin${PLUGIN_NAMESPACE_SEPARATOR}mcp__fs__read_file`;
-        expect(() => assertToolName(name)).not.toThrow();
-    });
-});
-//# sourceMappingURL=tool-name-validation.test.js.map

package/dist/registry/tool/__tests__/tool-name-validation.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tool-name-validation.test.js","sourceRoot":"","sources":["../../../../src/registry/tool/__tests__/tool-name-validation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAA;AAC/E,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE5D;;;;;;;;;;GAUG;AAEH,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC;IAC/B,IAAI;IACJ,WAAW,EAAE,GAAG;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACzB,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAa,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;CAC/D,CAAC,CAAA;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAC5E,YAAY,EACZ,CAAC,IAAI,EAAE,EAAE;QACR,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACjD,CAAC,CACD,CAAA;IAED,EAAE,CAAC,IAAI,CAAC;QACP,CAAC,SAAS,EAAE,aAAa,CAAC;QAC1B,CAAC,SAAS,EAAE,WAAW,CAAC;QACxB,CAAC,OAAO,EAAE,SAAS,CAAC;QACpB,CAAC,SAAS,EAAE,SAAS,CAAC;QACtB,CAAC,eAAe,EAAE,EAAE,CAAC;KACrB,CAAC,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QAC/B,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAA;IAC3E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAA;IACnF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACnC,yDAAyD;QACzD,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC9D,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAA;QACnC,kEAAkE;QAClE,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAU,CAAC,CAAC,CAAC,OAAO,CACpE,8BAA8B,CAC9B,CAAA;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACvC,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAA;QACnC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAU,CAAC,CAAA;QAC7C,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACtD,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAA;QACnC,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAU,CAAC,CAAC,CAAC,OAAO,CACvE,8BAA8B,CAC9B,CAAA;IACF,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC/D,gEAAgE;QAChE,sDAAsD;QACtD,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,SAAS,0BAA0B,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACtF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QAC1D,MAAM,IAAI,GAAG,YAAY,0BAA0B,oBAAoB,CAAA;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IACjD,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/registry/tool/execute.test.d.ts

@@ -1,47 +0,0 @@
-/**
- * Current-code invariants asserted (2026-04-21, ses_006 Phase 3):
- *
- *   - `ToolRegistry` extends `ManagedRegistry<ToolDefinition>` with
- *     `idField: 'name'` and an additional `availability` map keyed by
- *     tool name.
- *   - `register(tool)` defaults availability to 'active'; the array
- *     overload uses the second arg (if it's a string) as the initial
- *     state for all tools.
- *   - Tier validation: if `tool.tier` is set AND `tierConfig` is
- *     configured, the tier id must be in `tierConfig.tiers`; otherwise
- *     register throws. Tools without a tier (even with tierConfig
- *     configured) are always accepted.
- *   - `unregister` + `clear` drop both the Registry entry and the
- *     availability entry.
- *   - `activate` / `defer` take a list of names; each throws (via
- *     `getOrThrow`) if the name is unknown, then toggles availability.
- *   - `suspendAll` flips every `active` tool to `suspended`;
- *     `deferred` / `suspended` tools are left alone. `hasSuspended`
- *     reports true iff at least one tool is suspended.
- *   - `getAvailability(name)` returns 'active' as a default even for
- *     unknown names (this is non-obvious but is the current behavior).
- *   - `searchDeferred(q)` is a RANKED weighted search over DEFERRED tools:
- *     per meaningful term (≥3 chars, not a stop token) the score is
- *     exact-name 12 / name-substring 8 / description 5 / argument-name 3;
- *     results sort score-descending with name ties broken alphabetically.
- *     Generic/short tokens (`clawtool`, `tool`, CRUD verbs like `list`,
- *     `read`, …) are stopped so they can't over-activate the catalog.
- *   - `assignTiers(mapping)` mutates `tool.tier` on existing tools;
- *     throws via `getOrThrow` on unknown name; throws if the tier id
- *     is not in `tierConfig.tiers`.
- *   - `toTierGuidance` returns null without a guidanceTemplate; calls
- *     the template with every defined tier otherwise.
- *   - `toPromptSection`: returns '' when no active or deferred tools;
- *     otherwise produces `<available_tools>` (name-only — descriptions
- *     already ride the runtime tools param) + `<deferred_tools>` (name +
- *     first-sentence hint ≤100 chars) fragments.
- *   - `toLLMTools`: converts active + suspended tools (filtered by
- *     `toolNames` if provided) into LLM tool schemas via
- *     `zodToJsonSchema`. When `tierConfig.labelInDescription` is true,
- *     the description is prefixed with the tier label.
- *   - `execute`: validates availability → permissionMode plan gate →
- *     zod.safeParse → calls tool.execute inside an OTEL span; wraps
- *     thrown errors as `{success:false, error}`.
- */
-export {};
-//# sourceMappingURL=execute.test.d.ts.map

package/dist/registry/tool/execute.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"execute.test.d.ts","sourceRoot":"","sources":["../../../src/registry/tool/execute.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG"}