@nodetool-ai/agents 0.7.0-rc.22 → 0.8.1

package/dist/capabilities/invoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoke.d.ts","sourceRoot":"","sources":["../../src/capabilities/invoke.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EACV,YAAY,EACZ,iBAAiB,EACjB,SAAS,EACV,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAQjE,OAAO,KAAK,EACV,wBAAwB,EACxB,gBAAgB,EAChB,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,eAAe,EAChB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EACV,sBAAsB,EACtB,aAAa,EACb,kBAAkB,EAClB,cAAc,EACd,mBAAmB,EACnB,2BAA2B,EAC5B,MAAM,uBAAuB,CAAC;AAE/B;;;;;;GAMG;AACH,eAAO,MAAM,OAAO,EAAE,cAIrB,CAAC;AAEF;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,iBAAiB,GACzB,aAAa,CAMf;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,iBAAiB,GACzB,wBAAwB,GAAG,SAAS,CAStC;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,0DAA0D;IAC1D,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;IAC5C,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACzC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,iBAAiB,CAAC,EAAE,kBAAkB,CAAC;IACvC,+CAA+C;IAC/C,aAAa,CAAC,EAAE,cAAc,CAAC;IAC/B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,mBAAmB,CAAC,EAAE,2BAA2B,CAAC;IAClD,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;CAC3C;AAED,4EAA4E;AAC5E,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,0BAA0B,GAClC,aAAa,CAmCf;AAuID;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,cAAc,EACpB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GAC/C,MAAM,CAKR"}

package/dist/capabilities/invoke.js

@@ -0,0 +1,214 @@
+/**
+ * `CapabilityRun.invoke` — the single choke point: lookup → gate → impl.
+ *
+ * The gate used to be a wrapper class applied where someone remembered
+ * `gateTools`. It lives here now, in the one place lookup already happens, so a
+ * direct call and an in-sandbox call cannot take different paths. `gateTools`
+ * survives as a shim that routes a `Tool` through this ladder
+ * (`tools/tool-permissions.ts`); `tests/capabilities-gate-parity.test.ts`
+ * drives both entrances and compares transcripts.
+ *
+ * Design: docs/tool-class-retirement-design.md § "Where the permission gate
+ * lives".
+ */
+import { budgetFromContext } from "@nodetool-ai/runtime";
+import { Tool } from "../tools/base-tool.js";
+import { decidePermission } from "../tools/tool-permissions.js";
+import { validateCapabilityArgs, withSnakeCaseAliases } from "./args.js";
+import { findCapability } from "./registry.js";
+/**
+ * The gate a directly-constructed tool carries. Those tools are gated from the
+ * outside — `gateTools` wraps them per turn — and the adapter calls the
+ * implementation without consulting the run's own gate, so this exists only to
+ * satisfy the run's shape. `auto` keeps the two paths equivalent if anything
+ * ever reaches {@link CapabilityRun.invoke} through one of them.
+ */
+export const UNGATED = {
+    mode: "auto",
+    sessionAllow: new Set(),
+    requestApproval: async () => "allow"
+};
+/**
+ * A run over one call's context and nothing else — what every ported tool
+ * class whose capability needs only the context builds in its `process()`.
+ */
+export function ungatedCapabilityRun(context) {
+    return createCapabilityRun({
+        context,
+        gate: UNGATED,
+        availableSecrets: contextSecretAvailability(context)
+    });
+}
+/**
+ * The availability callback for a run whose context can reach a secret store,
+ * and `undefined` for one that cannot.
+ *
+ * Every host resolves the same way BaseNode's secret injection does — a key
+ * with a non-empty value is available — so this is the one implementation
+ * instead of one per host. It reads values, but only to test them: nothing
+ * leaves the callback except the set of names that resolved.
+ */
+export function contextSecretAvailability(context) {
+    if (!context.hasSecretResolver)
+        return undefined;
+    return async (keys) => {
+        const found = new Set();
+        for (const key of keys) {
+            if (await context.getSecret(key))
+                found.add(key);
+        }
+        return found;
+    };
+}
+/** Build a run whose `invoke` runs the gate before every implementation. */
+export function createCapabilityRun(options) {
+    const local = new Map();
+    for (const entry of options.capabilities ?? []) {
+        local.set(entry.spec.name, entry);
+    }
+    const run = {
+        context: options.context,
+        gate: options.gate,
+        client: options.client,
+        projectId: options.projectId ?? options.context.projectId ?? undefined,
+        secretPrompt: options.secretPrompt,
+        subAgent: options.subAgent,
+        budget: options.budget ?? budgetFromContext(options.context),
+        availableSecrets: options.availableSecrets,
+        nodeRegistry: options.nodeRegistry,
+        providers: options.providers,
+        examples: options.examples,
+        exportDsl: options.exportDsl,
+        modelCatalogs: options.modelCatalogs,
+        listPackageAssets: options.listPackageAssets,
+        deleteProject: options.deleteProject,
+        vectorCollection: options.vectorCollection,
+        workflowEnvironment: options.workflowEnvironment,
+        loaders: options.loaders,
+        invoke: async (name, args) => {
+            const entry = local.get(name) ?? (await findCapability(name));
+            if (entry === undefined) {
+                throw new Error(`no capability is registered for "${name}"`);
+            }
+            return gatedCall(run, entry, args ?? {});
+        }
+    };
+    return run;
+}
+/**
+ * A host round trip the guest's budget must not pay for. An approval prompt is
+ * the user's wait, and a monitor consult is another model's; charged to the
+ * action's wall clock either one kills the very program that asked, and the
+ * answer then resolves nothing. Without a clock this is a plain call.
+ */
+async function offTheClock(gate, work) {
+    const resume = gate.clock?.suspend();
+    try {
+        return await work();
+    }
+    finally {
+        resume?.();
+    }
+}
+/**
+ * The one decide/ask/block ladder: the read-class fast path first (a read is
+ * never prompted and never consulted by the monitor, even when one is wired
+ * in), then the mode decision, then the session allow-set, then the approval
+ * round trip.
+ */
+async function gatedCall(run, entry, rawArgs) {
+    const { spec, impl } = entry;
+    const checked = validateCapabilityArgs(spec, withSnakeCaseAliases(rawArgs));
+    if (!checked.ok)
+        return checked.error;
+    const args = checked.args;
+    const category = spec.category;
+    const decision = decidePermission(run.gate.mode, category);
+    // Read-class capabilities go straight to the implementation, so the "never
+    // consulted by the monitor" invariant holds by construction.
+    if (category === "read") {
+        return impl(run, args);
+    }
+    if (decision === "allow") {
+        return runImpl(run, entry, args, category);
+    }
+    if (decision === "block") {
+        return {
+            error: "blocked_in_plan_mode",
+            message: `Cannot run \`${spec.name}\` in plan mode — only read-only ` +
+                `tools are allowed. Produce a concrete plan instead and let the ` +
+                `user switch out of plan mode to execute it.`
+        };
+    }
+    // decision === "ask"
+    if (run.gate.sessionAllow.has(spec.name)) {
+        return runImpl(run, entry, args, category);
+    }
+    const answer = await offTheClock(run.gate, () => run.gate.requestApproval({
+        toolName: spec.name,
+        category,
+        args: Tool.stripMessage(args),
+        message: resolveCapabilityMessage(spec, args)
+    }));
+    if (answer === "deny") {
+        return {
+            error: "permission_denied",
+            message: `The user declined to run \`${spec.name}\`. Do not retry the ` +
+                `same call; explain what you wanted to do or propose an alternative.`
+        };
+    }
+    if (answer === "allow_for_chat") {
+        run.gate.sessionAllow.add(spec.name);
+    }
+    return runImpl(run, entry, args, category);
+}
+/**
+ * The execution chokepoint for actionable (non-read) calls: the security
+ * monitor is consulted here, after the mode/approval logic already said "run",
+ * and a `block` verdict stops execution with a structured error mirroring the
+ * block/deny paths above.
+ */
+async function runImpl(run, entry, args, category) {
+    const consult = run.gate.securityMonitor;
+    if (consult) {
+        const verdict = await offTheClock(run.gate, () => consult({
+            name: entry.spec.name,
+            category,
+            args: Tool.stripMessage(args),
+            transcript: run.gate.recentTranscript?.()
+        }));
+        if (verdict.block) {
+            const reason = verdict.reason?.trim()
+                ? verdict.reason.trim()
+                : "the security monitor flagged this action as unsafe";
+            const remediation = verdict.tier === "hard"
+                ? "This is a HARD block: it crosses a security boundary and cannot " +
+                    "be cleared by user instruction. Do not retry; choose a safe " +
+                    "alternative."
+                : "This is a SOFT block: it was flagged as destructive or " +
+                    "high-reach. Do not retry the same call; if the user has " +
+                    "explicitly and specifically authorized this exact action, " +
+                    "surface that, otherwise propose a safer alternative.";
+            return {
+                error: "blocked_by_security_monitor",
+                message: `The security monitor blocked \`${entry.spec.name}\` ` +
+                    `(tier: ${verdict.tier}, severity: ${verdict.severity}): ` +
+                    `${reason}. ${remediation}`
+            };
+        }
+    }
+    return entry.impl(run, args);
+}
+/**
+ * The user-facing message for an approval prompt: the LLM-authored `_message`
+ * wins, else the spec's template, else the generic fallback — the same order
+ * `Tool.resolveMessage` applies.
+ */
+export function resolveCapabilityMessage(spec, args) {
+    const llm = Tool.extractMessage(args ?? {});
+    if (llm)
+        return llm;
+    const template = spec.userMessage?.(Tool.stripMessage(args ?? {}));
+    return template && template.trim() ? template : `Running ${spec.name}`;
+}
+//# sourceMappingURL=invoke.js.map

package/dist/capabilities/invoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoke.js","sourceRoot":"","sources":["../../src/capabilities/invoke.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzD,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EACL,gBAAgB,EAEjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAqB/C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,OAAO,GAAmB;IACrC,IAAI,EAAE,MAAM;IACZ,YAAY,EAAE,IAAI,GAAG,EAAU;IAC/B,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO;CACrC,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAA0B;IAE1B,OAAO,mBAAmB,CAAC;QACzB,OAAO;QACP,IAAI,EAAE,OAAO;QACb,gBAAgB,EAAE,yBAAyB,CAAC,OAAO,CAAC;KACrD,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAA0B;IAE1B,IAAI,CAAC,OAAO,CAAC,iBAAiB;QAAE,OAAO,SAAS,CAAC;IACjD,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE;QACpB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AA0CD,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CACjC,OAAmC;IAEnC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QAC/C,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,GAAG,GAAkB;QACzB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,SAAS;QACtE,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC;QAC5D,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,GAAG,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,SAAS,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;KACF,CAAC;IAEF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CACxB,IAAoB,EACpB,IAAsB;IAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CACtB,GAAkB,EAClB,KAAuB,EACvB,OAAgC;IAEhC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAC7B,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAE3D,2EAA2E;IAC3E,6DAA6D;IAC7D,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,KAAK,EAAE,sBAAsB;YAC7B,OAAO,EACL,gBAAgB,IAAI,CAAC,IAAI,mCAAmC;gBAC5D,iEAAiE;gBACjE,6CAA6C;SAChD,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,OAAO,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAC9C,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC;QACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,QAAQ;QACR,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAC7B,OAAO,EAAE,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC;KAC9C,CAAC,CACH,CAAC;IAEF,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO;YACL,KAAK,EAAE,mBAAmB;YAC1B,OAAO,EACL,8BAA8B,IAAI,CAAC,IAAI,uBAAuB;gBAC9D,qEAAqE;SACxE,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,OAAO,CACpB,GAAkB,EAClB,KAAuB,EACvB,IAA6B,EAC7B,QAA4B;IAE5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC;IACzC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAC/C,OAAO,CAAC;YACN,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;YACrB,QAAQ;YACR,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAC7B,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE;SAC1C,CAAC,CACH,CAAC;QACF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;gBACnC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;gBACvB,CAAC,CAAC,oDAAoD,CAAC;YACzD,MAAM,WAAW,GACf,OAAO,CAAC,IAAI,KAAK,MAAM;gBACrB,CAAC,CAAC,kEAAkE;oBAClE,8DAA8D;oBAC9D,cAAc;gBAChB,CAAC,CAAC,yDAAyD;oBACzD,0DAA0D;oBAC1D,4DAA4D;oBAC5D,sDAAsD,CAAC;YAC7D,OAAO;gBACL,KAAK,EAAE,6BAA6B;gBACpC,OAAO,EACL,kCAAkC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK;oBACtD,UAAU,OAAO,CAAC,IAAI,eAAe,OAAO,CAAC,QAAQ,KAAK;oBAC1D,GAAG,MAAM,KAAK,WAAW,EAAE;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAAoB,EACpB,IAAgD;IAEhD,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5C,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IACnE,OAAO,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,IAAI,EAAE,CAAC;AACzE,CAAC"}

package/dist/capabilities/jobs.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The `jobs` capability module.
+ *
+ * Three capabilities that used to be three `Tool` subclasses in
+ * `../tools/mcp-tools.ts`: `list_jobs`, `get_job` and `get_job_logs`.
+ * `start_background_job` reads the same table but starts a run, so it stays
+ * with the run capabilities in `./workflows.ts`.
+ *
+ * Wire names, descriptions and schemas are unchanged: `getAllMcpTools` builds
+ * these through `toolFromCapability`, so every consumer sees the surface it saw
+ * before. `@nodetool-ai/models` is imported inside each implementation, so
+ * loading this module costs nothing.
+ */
+import type { CapabilityExport, CapabilityModule } from "./types.js";
+declare const listJobs: CapabilityExport;
+declare const getJob: CapabilityExport;
+declare const getJobLogs: CapabilityExport;
+/**
+ * Cancel one of the caller's own runs.
+ *
+ * `markCancelledIfActive` is the whole security boundary: the user id and the
+ * still-active predicate are columns in the one UPDATE, so a job that belongs
+ * to someone else and a job that already finished both come back `false`
+ * without this code ever holding the row. It cannot clobber the cost and
+ * timestamps a finishing run just wrote.
+ */
+declare const cancelJob: CapabilityExport;
+/** Every job capability, in the order `getAllMcpTools` offered them. */
+export declare const JOB_CAPABILITIES: readonly CapabilityExport[];
+export declare const module: CapabilityModule;
+export { listJobs, getJob, getJobLogs, cancelJob };
+//# sourceMappingURL=jobs.d.ts.map

package/dist/capabilities/jobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.d.ts","sourceRoot":"","sources":["../../src/capabilities/jobs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAerE,QAAA,MAAM,QAAQ,EAAE,gBAgBf,CAAC;AAMF,QAAA,MAAM,MAAM,EAAE,gBAsBb,CAAC;AAEF,QAAA,MAAM,UAAU,EAAE,gBAqBjB,CAAC;AAMF;;;;;;;;GAQG;AACH,QAAA,MAAM,SAAS,EAAE,gBAiBhB,CAAC;AAEF,wEAAwE;AACxE,eAAO,MAAM,gBAAgB,EAAE,SAAS,gBAAgB,EAKvD,CAAC;AAEF,eAAO,MAAM,MAAM,EAAE,gBAGpB,CAAC;AAEF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC"}

package/dist/capabilities/jobs.js

@@ -0,0 +1,123 @@
+/**
+ * The `jobs` capability module.
+ *
+ * Three capabilities that used to be three `Tool` subclasses in
+ * `../tools/mcp-tools.ts`: `list_jobs`, `get_job` and `get_job_logs`.
+ * `start_background_job` reads the same table but starts a run, so it stays
+ * with the run capabilities in `./workflows.ts`.
+ *
+ * Wire names, descriptions and schemas are unchanged: `getAllMcpTools` builds
+ * these through `toolFromCapability`, so every consumer sees the surface it saw
+ * before. `@nodetool-ai/models` is imported inside each implementation, so
+ * loading this module costs nothing.
+ */
+import { jobRecord, jobSummaryRecord, userIdOf } from "../tools/mcp-tool-support.js";
+import { listJobsSpec, getJobSpec, getJobLogsSpec, cancelJobSpec } from "./jobs.specs.js";
+import { isString } from "../utils/type-guards.js";
+const listJobs = {
+    spec: listJobsSpec,
+    impl: async (run, params) => {
+        const { Job } = await import("@nodetool-ai/models");
+        const workflowId = params["workflow_id"];
+        const page = {
+            limit: Number(params["limit"] ?? 100)
+        };
+        if (isString(workflowId) && workflowId) {
+            page.workflowId = workflowId;
+        }
+        const [jobs, next] = await Job.paginate(userIdOf(run.context), page);
+        // Summaries, not full records: a listing reports which jobs exist and how
+        // they settled. `get_job` reads one job's outputs.
+        return { jobs: jobs.map(jobSummaryRecord), next: next || null };
+    }
+};
+// ---------------------------------------------------------------------------
+// get_job
+// ---------------------------------------------------------------------------
+const getJob = {
+    spec: getJobSpec,
+    impl: async (run, params) => {
+        const { Job } = await import("@nodetool-ai/models");
+        const jobId = String(params["job_id"]);
+        const job = await Job.find(userIdOf(run.context), jobId);
+        if (!job)
+            return { error: `Job ${jobId} was not found.` };
+        const record = jobRecord(job);
+        // The job's own failure message is payload, not a tool failure — a bare
+        // `error` string at the result root makes the CodeAct bridge throw and
+        // discard everything else on a failed job.
+        const { error, ...rest } = record;
+        return {
+            ...rest,
+            job_error: error ?? null,
+            params: job.params ?? null,
+            // What a still-running job can say about itself. A render posts one
+            // `node_progress` per frame; without this a poll during a two-minute
+            // render sees "running" and nothing more.
+            progress: job.progressRecord()
+        };
+    }
+};
+const getJobLogs = {
+    spec: getJobLogsSpec,
+    impl: async (run, params) => {
+        const { Job } = await import("@nodetool-ai/models");
+        const jobId = String(params["job_id"]);
+        const job = await Job.find(userIdOf(run.context), jobId);
+        if (!job)
+            return { error: `Job ${jobId} was not found.` };
+        // `limit` keeps the most recent entries — the tail is what explains a
+        // failure. Previously it was forwarded to an endpoint that ignored it.
+        const limit = Number(params["limit"] ?? 200);
+        const logs = job.logs ?? [];
+        // `job_error`, not `error`: the call succeeded even when the job did not,
+        // and a root-level `error` string reads as a tool failure downstream.
+        return {
+            job_id: job.id,
+            status: job.status,
+            job_error: job.error_message ?? job.error ?? null,
+            total_logs: logs.length,
+            logs: logs.slice(Math.max(0, logs.length - limit))
+        };
+    }
+};
+// ---------------------------------------------------------------------------
+// cancel_job
+// ---------------------------------------------------------------------------
+/**
+ * Cancel one of the caller's own runs.
+ *
+ * `markCancelledIfActive` is the whole security boundary: the user id and the
+ * still-active predicate are columns in the one UPDATE, so a job that belongs
+ * to someone else and a job that already finished both come back `false`
+ * without this code ever holding the row. It cannot clobber the cost and
+ * timestamps a finishing run just wrote.
+ */
+const cancelJob = {
+    spec: cancelJobSpec,
+    impl: async (run, params) => {
+        const { Job } = await import("@nodetool-ai/models");
+        const jobId = String(params["job_id"]);
+        const cancelled = await Job.markCancelledIfActive(jobId, userIdOf(run.context));
+        return cancelled
+            ? { job_id: jobId, status: "cancelled" }
+            : {
+                job_id: jobId,
+                cancelled: false,
+                error: `Job ${jobId} is not running — it already finished, or it is not yours.`
+            };
+    }
+};
+/** Every job capability, in the order `getAllMcpTools` offered them. */
+export const JOB_CAPABILITIES = [
+    listJobs,
+    getJob,
+    getJobLogs,
+    cancelJob
+];
+export const module = {
+    module: "jobs",
+    exports: JOB_CAPABILITIES
+};
+export { listJobs, getJob, getJobLogs, cancelJob };
+//# sourceMappingURL=jobs.js.map

package/dist/capabilities/jobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.js","sourceRoot":"","sources":["../../src/capabilities/jobs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,QAAQ,EACT,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,YAAY,EACZ,UAAU,EACV,cAAc,EACd,aAAa,EACd,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAQnD,MAAM,QAAQ,GAAqB;IACjC,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC1B,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;QACzC,MAAM,IAAI,GAAmB;YAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;SACtC,CAAC;QACF,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,EAAE,CAAC;YACvC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC/B,CAAC;QACD,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;QACrE,0EAA0E;QAC1E,mDAAmD;QACnD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;IAClE,CAAC;CACF,CAAC;AAEF,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,MAAM,GAAqB;IAC/B,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC1B,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,iBAAiB,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,wEAAwE;QACxE,uEAAuE;QACvE,2CAA2C;QAC3C,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAClC,OAAO;YACL,GAAG,IAAI;YACP,SAAS,EAAE,KAAK,IAAI,IAAI;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;YAC1B,oEAAoE;YACpE,qEAAqE;YACrE,0CAA0C;YAC1C,QAAQ,EAAE,GAAG,CAAC,cAAc,EAAE;SAC/B,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,GAAqB;IACnC,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC1B,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,iBAAiB,EAAE,CAAC;QAC1D,sEAAsE;QACtE,uEAAuE;QACvE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5B,0EAA0E;QAC1E,sEAAsE;QACtE,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,EAAE;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,GAAG,CAAC,aAAa,IAAI,GAAG,CAAC,KAAK,IAAI,IAAI;YACjD,UAAU,EAAE,IAAI,CAAC,MAAM;YACvB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;SACnD,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,SAAS,GAAqB;IAClC,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC1B,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,qBAAqB,CAC/C,KAAK,EACL,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CACtB,CAAC;QACF,OAAO,SAAS;YACd,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE;YACxC,CAAC,CAAC;gBACE,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,KAAK;gBAChB,KAAK,EAAE,OAAO,KAAK,4DAA4D;aAChF,CAAC;IACR,CAAC;CACF,CAAC;AAEF,wEAAwE;AACxE,MAAM,CAAC,MAAM,gBAAgB,GAAgC;IAC3D,QAAQ;IACR,MAAM;IACN,UAAU;IACV,SAAS;CACV,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAqB;IACtC,MAAM,EAAE,MAAM;IACd,OAAO,EAAE,gBAAgB;CAC1B,CAAC;AAEF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC"}

package/dist/capabilities/jobs.specs.d.ts

@@ -0,0 +1,20 @@
+/**
+ * The `jobs` module's specs — data only, no implementation.
+ *
+ * Split out so a belt can be assembled synchronously: the registry's eager
+ * spec table imports this file, never `jobs.ts`, so nothing the
+ * implementations pull in reaches the entry graph. `jobs.ts` imports these
+ * back and attaches each to its implementation, so there is one spec object
+ * behind both halves.
+ */
+import type { CapabilitySpec } from "./types.js";
+import type { JsonSchema } from "@nodetool-ai/runtime";
+export declare const LIST_JOBS_SCHEMA: JsonSchema;
+export declare const GET_JOB_LOGS_SCHEMA: JsonSchema;
+export declare const listJobsSpec: CapabilitySpec;
+export declare const getJobSpec: CapabilitySpec;
+export declare const getJobLogsSpec: CapabilitySpec;
+export declare const cancelJobSpec: CapabilitySpec;
+/** Every spec this module declares, in declaration order. */
+export declare const jobsSpecs: readonly CapabilitySpec[];
+//# sourceMappingURL=jobs.specs.d.ts.map

package/dist/capabilities/jobs.specs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.specs.d.ts","sourceRoot":"","sources":["../../src/capabilities/jobs.specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,eAAO,MAAM,gBAAgB,EAAE,UAc9B,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,UAcjC,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,cAa1B,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,cAiBxB,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,cAQ5B,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,cAkB3B,CAAC;AAEF,6DAA6D;AAC7D,eAAO,MAAM,SAAS,EAAE,SAAS,cAAc,EAK9C,CAAC"}

package/dist/capabilities/jobs.specs.js

@@ -0,0 +1,103 @@
+/**
+ * The `jobs` module's specs — data only, no implementation.
+ *
+ * Split out so a belt can be assembled synchronously: the registry's eager
+ * spec table imports this file, never `jobs.ts`, so nothing the
+ * implementations pull in reaches the entry graph. `jobs.ts` imports these
+ * back and attaches each to its implementation, so there is one spec object
+ * behind both halves.
+ */
+export const LIST_JOBS_SCHEMA = {
+    type: "object",
+    properties: {
+        workflow_id: {
+            type: "string",
+            description: "Optional workflow ID to filter by"
+        },
+        limit: {
+            type: "number",
+            description: "Maximum number of jobs to return",
+            default: 100
+        }
+    },
+    required: []
+};
+export const GET_JOB_LOGS_SCHEMA = {
+    type: "object",
+    properties: {
+        job_id: {
+            type: "string",
+            description: "The job ID"
+        },
+        limit: {
+            type: "number",
+            description: "Maximum number of log entries to return",
+            default: 200
+        }
+    },
+    required: ["job_id"]
+};
+export const listJobsSpec = {
+    name: "list_jobs",
+    description: "List jobs (workflow executions) with optional filtering. Each entry " +
+        "carries status, timing, error and the names of the outputs the run " +
+        "produced — not the outputs themselves. Use get_job to read a job's " +
+        "values.",
+    inputSchema: LIST_JOBS_SCHEMA,
+    category: "read",
+    userMessage: (params) => {
+        const wfId = params["workflow_id"];
+        return wfId ? `Listing jobs for workflow ${wfId}` : "Listing jobs";
+    }
+};
+export const getJobSpec = {
+    name: "get_job",
+    description: "Get details about a specific job including status, timing, error info, " +
+        "and the outputs the run produced.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            job_id: {
+                type: "string",
+                description: "The job ID"
+            }
+        },
+        required: ["job_id"]
+    },
+    category: "read",
+    userMessage: (params) => `Getting job ${params["job_id"]}`
+};
+export const getJobLogsSpec = {
+    name: "get_job_logs",
+    description: "Get logs for a job to debug workflow executions. Answers the log tail " +
+        "even when the job failed; its failure message is under `job_error`.",
+    inputSchema: GET_JOB_LOGS_SCHEMA,
+    category: "read",
+    userMessage: (params) => `Getting logs for job ${params["job_id"]}`
+};
+export const cancelJobSpec = {
+    name: "cancel_job",
+    description: "Cancel a running job. Does nothing to a job that already finished, " +
+        "and a job belonging to another user is indistinguishable from a " +
+        "missing one.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            job_id: {
+                type: "string",
+                description: "The job ID"
+            }
+        },
+        required: ["job_id"]
+    },
+    category: "write",
+    userMessage: (params) => `Cancelling job ${params["job_id"]}`
+};
+/** Every spec this module declares, in declaration order. */
+export const jobsSpecs = [
+    listJobsSpec,
+    getJobSpec,
+    getJobLogsSpec,
+    cancelJobSpec
+];
+//# sourceMappingURL=jobs.specs.js.map

package/dist/capabilities/jobs.specs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.specs.js","sourceRoot":"","sources":["../../src/capabilities/jobs.specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,MAAM,CAAC,MAAM,gBAAgB,GAAe;IAC1C,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,mCAAmC;SACjD;QACD,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,kCAAkC;YAC/C,OAAO,EAAE,GAAG;SACb;KACF;IACD,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAe;IAC7C,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,YAAY;SAC1B;QACD,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,yCAAyC;YACtD,OAAO,EAAE,GAAG;SACb;KACF;IACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAmB;IAC1C,IAAI,EAAE,WAAW;IACjB,WAAW,EACT,sEAAsE;QACtE,qEAAqE;QACrE,qEAAqE;QACrE,SAAS;IACX,WAAW,EAAE,gBAAgB;IAC7B,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,CAAC,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;IACrE,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAmB;IACxC,IAAI,EAAE,SAAS;IACf,WAAW,EACT,yEAAyE;QACzE,mCAAmC;IACrC,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,YAAY;aAC1B;SACF;QACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;KACrB;IACD,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,MAAM,CAAC,QAAQ,CAAC,EAAE;CAC3D,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAmB;IAC5C,IAAI,EAAE,cAAc;IACpB,WAAW,EACT,wEAAwE;QACxE,qEAAqE;IACvE,WAAW,EAAE,mBAAmB;IAChC,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,wBAAwB,MAAM,CAAC,QAAQ,CAAC,EAAE;CACpE,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAmB;IAC3C,IAAI,EAAE,YAAY;IAClB,WAAW,EACT,qEAAqE;QACrE,kEAAkE;QAClE,cAAc;IAChB,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,YAAY;aAC1B;SACF;QACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;KACrB;IACD,QAAQ,EAAE,OAAO;IACjB,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,MAAM,CAAC,QAAQ,CAAC,EAAE;CAC9D,CAAC;AAEF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,SAAS,GAA8B;IAClD,YAAY;IACZ,UAAU;IACV,cAAc;IACd,aAAa;CACd,CAAC"}

package/dist/capabilities/js-scripts.d.ts

@@ -0,0 +1,90 @@
+/**
+ * The `js-scripts` capability module — a JS script document as an agent
+ * surface.
+ *
+ * A JS script is a named, versioned script with declared ports, sandbox
+ * secrets, a timeout, and saved test cases
+ * (docs/js-script-document-design.md). These six capabilities are how an agent
+ * — or a Code node body, or a CodeAct action, through the same belt — finds
+ * one, reads it, saves it, checks it, runs it, and regression-tests it:
+ *
+ *   list_js_scripts    — id, name, description, ports, palette (discovery)
+ *   get_js_script      — the full document
+ *   save_js_script     — create or update, validated first, CAS on update
+ *   validate_js_script — the static check, inline or by id
+ *   run_js_script      — execute with inputs
+ *   test_js_script     — run the document's own saved cases
+ *
+ * Execution goes through `runCodeBody`, the same core `run_code` and
+ * `test_code` already share, so a script run, a Code-node run, and the
+ * `POST /api/js-scripts/:id/run` endpoint are one execution path. What the
+ * guest gets is the script's own envelope plus the Code-node toolbelt:
+ * every installed pack and platform module by import, its declared secrets
+ * narrowed by whatever allowance the invoking context carries, its own
+ * timeout, the importable belt, and `nodetool.*`.
+ * Grading is `gradeCodeCases`, shared with `test_code` rather than copied.
+ *
+ * Composition is bounded the way sub-agents are: the context carries a depth
+ * counter and the chain of script ids, and a script already on the chain fails
+ * the call with the cycle named.
+ */
+import type { ProcessingContext } from "@nodetool-ai/runtime";
+import type { JsScriptDocument } from "@nodetool-ai/protocol/api-schemas/js-scripts.js";
+import type { CapabilityExport, CapabilityModule } from "./types.js";
+export { MAX_JS_SCRIPT_DEPTH } from "./js-scripts.specs.js";
+/** Context variable carrying how many script invocations deep this run is. */
+export declare const JS_SCRIPT_DEPTH_KEY = "__js_script_depth";
+/** Context variable carrying the script ids already on the call chain. */
+export declare const JS_SCRIPT_CHAIN_KEY = "__js_script_chain";
+/**
+ * Context variable a host sets to narrow what secrets a script may read. A run
+ * gets the intersection of this list and the script's own declared secrets;
+ * absent, the script's declaration stands on its own. A caller can only ever
+ * narrow the envelope, never widen it.
+ */
+export declare const JS_SCRIPT_SECRET_ALLOWANCE_KEY = "__js_script_secret_allowance";
+interface ScriptDepthGate {
+    ok: boolean;
+    refusal?: Record<string, unknown>;
+    childContext?: ProcessingContext;
+}
+/**
+ * Enter one script invocation: refuse past the depth cap or on a cycle, else
+ * return a context copy carrying the deeper chain. Mirrors
+ * `enterSubAgentDepth` — the same gate, over this feature's own two keys.
+ */
+export declare function enterJsScript(context: ProcessingContext, scriptId: string, maxDepth?: number): ScriptDepthGate;
+/**
+ * The secrets a run may read: what the document declares, intersected with the
+ * invoking context's allowance when it carries one.
+ */
+export declare function resolveSecretScope(context: ProcessingContext, declared: readonly string[]): string[];
+/**
+ * Staged handles the script does not declare. A stream nothing declares yields
+ * nothing, so feeding one is a mistake worth naming rather than a silent no-op.
+ */
+export declare function undeclaredStreamHandles(document: JsScriptDocument, staged: Record<string, unknown[]>): string[];
+declare const listJsScripts: CapabilityExport;
+declare const getJsScript: CapabilityExport;
+declare const saveJsScript: CapabilityExport;
+declare const validateJsScript: CapabilityExport;
+declare const runJsScript: CapabilityExport;
+declare const testJsScript: CapabilityExport;
+/**
+ * Delete a JS script the caller owns.
+ *
+ * The ownership check and the version cascade are `JsScript.deleteOwned`, the
+ * same function the tRPC route calls — a delete is not a place for two copies
+ * of one rule, and version rows outliving their document would be unreachable
+ * garbage. Missing and not-yours are one answer.
+ */
+declare const deleteJsScript: CapabilityExport;
+declare const listJsScriptVersions: CapabilityExport;
+declare const getJsScriptVersion: CapabilityExport;
+declare const createJsScriptVersion: CapabilityExport;
+declare const restoreJsScriptVersion: CapabilityExport;
+declare const deleteJsScriptVersion: CapabilityExport;
+export declare const JS_SCRIPT_CAPABILITIES: readonly CapabilityExport[];
+export declare const module: CapabilityModule;
+export { listJsScripts, getJsScript, saveJsScript, validateJsScript, runJsScript, testJsScript, listJsScriptVersions, getJsScriptVersion, createJsScriptVersion, restoreJsScriptVersion, deleteJsScriptVersion, deleteJsScript };
+//# sourceMappingURL=js-scripts.d.ts.map

package/dist/capabilities/js-scripts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"js-scripts.d.ts","sourceRoot":"","sources":["../../src/capabilities/js-scripts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,KAAK,EACV,gBAAgB,EAEjB,MAAM,iDAAiD,CAAC;AAGzD,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EAEjB,MAAM,YAAY,CAAC;AAuBpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D,8EAA8E;AAC9E,eAAO,MAAM,mBAAmB,sBAAsB,CAAC;AAEvD,0EAA0E;AAC1E,eAAO,MAAM,mBAAmB,sBAAsB,CAAC;AAEvD;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,iCAAiC,CAAC;AA0F7E,UAAU,eAAe;IACvB,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,YAAY,CAAC,EAAE,iBAAiB,CAAC;CAClC;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,MAAM,EAChB,QAAQ,GAAE,MAA4B,GACrC,eAAe,CAoCjB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,iBAAiB,EAC1B,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B,MAAM,EAAE,CAKV;AAmBD;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,GAChC,MAAM,EAAE,CAGV;AAyCD,QAAA,MAAM,aAAa,EAAE,gBAmCpB,CAAC;AAEF,QAAA,MAAM,WAAW,EAAE,gBAalB,CAAC;AA6EF,QAAA,MAAM,YAAY,EAAE,gBAkGnB,CAAC;AAEF,QAAA,MAAM,gBAAgB,EAAE,gBAwCvB,CAAC;AAEF,QAAA,MAAM,WAAW,EAAE,gBAgClB,CAAC;AAEF,QAAA,MAAM,YAAY,EAAE,gBA0BnB,CAAC;AAEF;;;;;;;GAOG;AACH,QAAA,MAAM,cAAc,EAAE,gBAYrB,CAAC;AA0CF,QAAA,MAAM,oBAAoB,EAAE,gBAqB3B,CAAC;AAEF,QAAA,MAAM,kBAAkB,EAAE,gBA0BzB,CAAC;AAEF,QAAA,MAAM,qBAAqB,EAAE,gBAiB5B,CAAC;AAEF,QAAA,MAAM,sBAAsB,EAAE,gBAkE7B,CAAC;AAEF,QAAA,MAAM,qBAAqB,EAAE,gBAmB5B,CAAC;AAEF,eAAO,MAAM,sBAAsB,EAAE,SAAS,gBAAgB,EAa7D,CAAC;AAEF,eAAO,MAAM,MAAM,EAAE,gBAGpB,CAAC;AAEF,OAAO,EACL,aAAa,EACb,WAAW,EACX,YAAY,EACZ,gBAAgB,EAChB,WAAW,EACX,YAAY,EACZ,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,cAAc,EACf,CAAC"}