@nodetool-ai/agents 0.7.0-rc.23 → 0.8.2

package/dist/capabilities/invoke.js

@@ -0,0 +1,251 @@
+/** Capability invocation validates arguments and runs the single permission gate. */
+import { SpanStatusCode } from "@opentelemetry/api";
+import { getTracer, getRunTraceScope, suppressRunTraceContent, stringifyTraceContent } from "@nodetool-ai/runtime";
+import { budgetFromContext } from "@nodetool-ai/runtime";
+import { injectUserMessageField, Tool } from "../tools/base-tool.js";
+import { decidePermission } from "../tools/tool-permissions.js";
+import { validateCapabilityArgs, withSnakeCaseAliases } from "./args.js";
+import { capabilitySpec, capabilityForName, capabilityModuleOf } from "./registry.js";
+/** Explicit ungated compatibility runs still use normal validation. */
+export const UNGATED = {
+    mode: "auto",
+    sessionAllow: new Set(),
+    requestApproval: async () => "allow"
+};
+/** Compatibility consumers reuse one context-only run per context. */
+const ungatedRuns = new WeakMap();
+export function ungatedCapabilityRun(context) {
+    let run = ungatedRuns.get(context);
+    if (!run) {
+        run = createCapabilityRun({
+            context,
+            gate: UNGATED,
+            availableSecrets: contextSecretAvailability(context)
+        });
+        ungatedRuns.set(context, run);
+    }
+    return run;
+}
+/**
+ * The availability callback for a run whose context can reach a secret store,
+ * and `undefined` for one that cannot.
+ *
+ * Every host resolves the same way BaseNode's secret injection does — a key
+ * with a non-empty value is available — so this is the one implementation
+ * instead of one per host. It reads values, but only to test them: nothing
+ * leaves the callback except the set of names that resolved.
+ */
+export function contextSecretAvailability(context) {
+    if (!context.hasSecretResolver)
+        return undefined;
+    return async (keys) => {
+        const found = new Set();
+        for (const key of keys) {
+            if (await context.getSecret(key))
+                found.add(key);
+        }
+        return found;
+    };
+}
+/** Build a run whose `invoke` runs the gate before every implementation. */
+export function createCapabilityRun(options) {
+    const local = new Map();
+    for (const entry of options.capabilities ?? []) {
+        local.set(entry.spec.name, entry);
+    }
+    const run = {
+        context: options.context,
+        signal: options.signal,
+        gate: options.gate,
+        client: options.client,
+        projectId: options.projectId ?? options.context.projectId ?? undefined,
+        secretPrompt: options.secretPrompt,
+        subAgent: options.subAgent,
+        budget: options.budget ?? budgetFromContext(options.context),
+        availableSecrets: options.availableSecrets,
+        nodeRegistry: options.nodeRegistry,
+        providers: options.providers,
+        examples: options.examples,
+        exportDsl: options.exportDsl,
+        modelCatalogs: options.modelCatalogs,
+        listPackageAssets: options.listPackageAssets,
+        deleteProject: options.deleteProject,
+        vectorCollection: options.vectorCollection,
+        workflowEnvironment: options.workflowEnvironment,
+        loaders: options.loaders,
+        invoke: async (name, args) => {
+            const entry = local.get(name) ??
+                (capabilitySpec(name) ? capabilityForName(name) : undefined);
+            if (entry === undefined) {
+                throw new Error(`no capability is registered for "${name}"`);
+            }
+            return invokeCapability(run, entry, args ?? {});
+        }
+    };
+    return run;
+}
+/**
+ * A host round trip the guest's budget must not pay for. An approval prompt is
+ * the user's wait, and a monitor consult is another model's; charged to the
+ * action's wall clock either one kills the very program that asked, and the
+ * answer then resolves nothing. Without a clock this is a plain call.
+ */
+async function offTheClock(gate, work) {
+    const resume = gate.clock?.suspend();
+    try {
+        return await work();
+    }
+    finally {
+        resume?.();
+    }
+}
+/**
+ * The one decide/ask/block ladder: the read-class fast path first (a read is
+ * never prompted and never consulted by the monitor, even when one is wired
+ * in), then the mode decision, then the session allow-set, then the approval
+ * round trip.
+ */
+export async function invokeCapability(run, entry, rawArgs) {
+    const moduleName = capabilityModuleOf(entry.spec.name);
+    if (moduleName === "email" || moduleName === "google" || moduleName === "browser") {
+        suppressRunTraceContent();
+    }
+    const tracer = getTracer();
+    if (!tracer) {
+        return invokeCapabilityImpl(run, entry, rawArgs);
+    }
+    return tracer.startActiveSpan("capability.call", async (span) => {
+        span.setAttribute("capability.name", entry.spec.name);
+        span.setAttribute("tool.argument_names", Object.keys(rawArgs));
+        const scope = getRunTraceScope();
+        if (scope && scope.origin !== "public" && !scope.policy.contentSuppressed) {
+            span.setAttribute("tool.arguments", stringifyTraceContent(rawArgs));
+        }
+        try {
+            const result = await invokeCapabilityImpl(run, entry, rawArgs);
+            const failed = result !== null && typeof result === "object" && "error" in result;
+            span.setStatus({ code: failed ? SpanStatusCode.ERROR : SpanStatusCode.OK });
+            if (scope && scope.origin !== "public" && !scope.policy.contentSuppressed) {
+                span.setAttribute("tool.result", stringifyTraceContent(result));
+            }
+            return result;
+        }
+        catch (error) {
+            span.setStatus({ code: SpanStatusCode.ERROR });
+            span.recordException(error instanceof Error ? error : new Error(String(error)));
+            throw error;
+        }
+        finally {
+            span.end();
+        }
+    });
+}
+async function invokeCapabilityImpl(run, entry, rawArgs) {
+    run.signal?.throwIfAborted();
+    const { spec, impl } = entry;
+    const checked = validateCapabilityArgs(spec, withSnakeCaseAliases(rawArgs));
+    if (!checked.ok)
+        return checked.error;
+    const args = checked.args;
+    const category = spec.category;
+    const decision = decidePermission(run.gate.mode, category);
+    // Read-class capabilities go straight to the implementation, so the "never
+    // consulted by the monitor" invariant holds by construction.
+    if (category === "read") {
+        return impl(run, args);
+    }
+    if (decision === "allow") {
+        return runImpl(run, entry, args, category);
+    }
+    if (decision === "block") {
+        return {
+            error: "blocked_in_plan_mode",
+            message: `Cannot run \`${spec.name}\` in plan mode — only read-only ` +
+                `tools are allowed. Produce a concrete plan instead and let the ` +
+                `user switch out of plan mode to execute it.`
+        };
+    }
+    // decision === "ask"
+    if (run.gate.sessionAllow.has(spec.name)) {
+        return runImpl(run, entry, args, category);
+    }
+    const answer = await offTheClock(run.gate, () => run.gate.requestApproval({
+        toolName: spec.name,
+        category,
+        args: Tool.stripMessage(args),
+        message: resolveCapabilityMessage(spec, {
+            ...args,
+            _message: rawArgs["_message"]
+        })
+    }));
+    if (answer === "deny") {
+        return {
+            error: "permission_denied",
+            message: `The user declined to run \`${spec.name}\`. Do not retry the ` +
+                `same call; explain what you wanted to do or propose an alternative.`
+        };
+    }
+    if (answer === "allow_for_chat") {
+        run.gate.sessionAllow.add(spec.name);
+    }
+    return runImpl(run, entry, args, category);
+}
+/**
+ * The execution chokepoint for actionable (non-read) calls: the security
+ * monitor is consulted here, after the mode/approval logic already said "run",
+ * and a `block` verdict stops execution with a structured error mirroring the
+ * block/deny paths above.
+ */
+async function runImpl(run, entry, args, category) {
+    const consult = run.gate.securityMonitor;
+    if (consult) {
+        const verdict = await offTheClock(run.gate, () => consult({
+            name: entry.spec.name,
+            category,
+            args: Tool.stripMessage(args),
+            transcript: run.gate.recentTranscript?.()
+        }));
+        if (verdict.block) {
+            const reason = verdict.reason?.trim()
+                ? verdict.reason.trim()
+                : "the security monitor flagged this action as unsafe";
+            const remediation = verdict.tier === "hard"
+                ? "This is a HARD block: it crosses a security boundary and cannot " +
+                    "be cleared by user instruction. Do not retry; choose a safe " +
+                    "alternative."
+                : "This is a SOFT block: it was flagged as destructive or " +
+                    "high-reach. Do not retry the same call; if the user has " +
+                    "explicitly and specifically authorized this exact action, " +
+                    "surface that, otherwise propose a safer alternative.";
+            return {
+                error: "blocked_by_security_monitor",
+                message: `The security monitor blocked \`${entry.spec.name}\` ` +
+                    `(tier: ${verdict.tier}, severity: ${verdict.severity}): ` +
+                    `${reason}. ${remediation}`
+            };
+        }
+    }
+    run.signal?.throwIfAborted();
+    return entry.impl(run, args);
+}
+/**
+ * The user-facing message for an approval prompt: the LLM-authored `_message`
+ * wins, else the spec's template, else the generic fallback — the same order
+ * `Tool.resolveMessage` applies.
+ */
+export function resolveCapabilityMessage(spec, args) {
+    const llm = Tool.extractMessage(args ?? {});
+    if (llm)
+        return llm;
+    const template = spec.userMessage?.(Tool.stripMessage(args ?? {}));
+    return template && template.trim() ? template : `Running ${spec.name}`;
+}
+/** Provider declarations need metadata, not a legacy Tool instance. */
+export function capabilityProviderTool(spec) {
+    return {
+        name: spec.name,
+        description: spec.description,
+        inputSchema: injectUserMessageField(spec.inputSchema)
+    };
+}
+//# sourceMappingURL=invoke.js.map

package/dist/capabilities/invoke.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invoke.js","sourceRoot":"","sources":["../../src/capabilities/invoke.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAQrF,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACnH,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzD,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EACL,gBAAgB,EAEjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAqBtF,uEAAuE;AACvE,MAAM,CAAC,MAAM,OAAO,GAAmB;IACrC,IAAI,EAAE,MAAM;IACZ,YAAY,EAAE,IAAI,GAAG,EAAU;IAC/B,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO;CACrC,CAAC;AAEF,sEAAsE;AACtE,MAAM,WAAW,GAAG,IAAI,OAAO,EAAoC,CAAC;AAEpE,MAAM,UAAU,oBAAoB,CAClC,OAA0B;IAE1B,IAAI,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,mBAAmB,CAAC;YACxB,OAAO;YACP,IAAI,EAAE,OAAO;YACb,gBAAgB,EAAE,yBAAyB,CAAC,OAAO,CAAC;SACrD,CAAC,CAAC;QACH,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAA0B;IAE1B,IAAI,CAAC,OAAO,CAAC,iBAAiB;QAAE,OAAO,SAAS,CAAC;IACjD,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE;QACpB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AA4CD,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CACjC,OAAmC;IAEnC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QAC/C,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,GAAG,GAAkB;QACzB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,SAAS;QACtE,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC;QAC5D,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC3B,MAAM,KAAK,GACT,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;gBACf,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC/D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,GAAG,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAClD,CAAC;KACF,CAAC;IAEF,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CACxB,IAAoB,EACpB,IAAsB;IAEtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAkB,EAClB,KAAuB,EACvB,OAAgC;IAEhC,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,UAAU,KAAK,OAAO,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAClF,uBAAuB,EAAE,CAAC;IAC5B,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,oBAAoB,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC,eAAe,CAAC,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC9D,IAAI,CAAC,YAAY,CAAC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;QACjC,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC1E,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,MAAM,CAAC;YAClF,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5E,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;gBAC1E,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;YAClE,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/C,IAAI,CAAC,eAAe,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChF,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,GAAkB,EAClB,KAAuB,EACvB,OAAgC;IAEhC,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IAC7B,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAC7B,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAE3D,2EAA2E;IAC3E,6DAA6D;IAC7D,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO;YACL,KAAK,EAAE,sBAAsB;YAC7B,OAAO,EACL,gBAAgB,IAAI,CAAC,IAAI,mCAAmC;gBAC5D,iEAAiE;gBACjE,6CAA6C;SAChD,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,OAAO,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAC9C,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC;QACvB,QAAQ,EAAE,IAAI,CAAC,IAAI;QACnB,QAAQ;QACR,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;QAC7B,OAAO,EAAE,wBAAwB,CAAC,IAAI,EAAE;YACtC,GAAG,IAAI;YACP,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC;SAC9B,CAAC;KACH,CAAC,CACH,CAAC;IAEF,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO;YACL,KAAK,EAAE,mBAAmB;YAC1B,OAAO,EACL,8BAA8B,IAAI,CAAC,IAAI,uBAAuB;gBAC9D,qEAAqE;SACxE,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,OAAO,CACpB,GAAkB,EAClB,KAAuB,EACvB,IAA6B,EAC7B,QAA4B;IAE5B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC;IACzC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAC/C,OAAO,CAAC;YACN,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;YACrB,QAAQ;YACR,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAC7B,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE;SAC1C,CAAC,CACH,CAAC;QACF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;gBACnC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE;gBACvB,CAAC,CAAC,oDAAoD,CAAC;YACzD,MAAM,WAAW,GACf,OAAO,CAAC,IAAI,KAAK,MAAM;gBACrB,CAAC,CAAC,kEAAkE;oBAClE,8DAA8D;oBAC9D,cAAc;gBAChB,CAAC,CAAC,yDAAyD;oBACzD,0DAA0D;oBAC1D,4DAA4D;oBAC5D,sDAAsD,CAAC;YAC7D,OAAO;gBACL,KAAK,EAAE,6BAA6B;gBACpC,OAAO,EACL,kCAAkC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK;oBACtD,UAAU,OAAO,CAAC,IAAI,eAAe,OAAO,CAAC,QAAQ,KAAK;oBAC1D,GAAG,MAAM,KAAK,WAAW,EAAE;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC;IACD,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IAC7B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAAoB,EACpB,IAAgD;IAEhD,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5C,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IACnE,OAAO,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,IAAI,EAAE,CAAC;AACzE,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,sBAAsB,CAAC,IAAoB;IACzD,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,sBAAsB,CAAC,IAAI,CAAC,WAAW,CAAC;KACtD,CAAC;AACJ,CAAC"}

package/dist/capabilities/jobs.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The `jobs` capability module.
+ *
+ * Three capabilities that used to be three `Tool` subclasses in
+ * `../tools/mcp-tools.ts`: `list_jobs`, `get_job` and `get_job_logs`.
+ * `start_background_job` reads the same table but starts a run, so it stays
+ * with the run capabilities in `./workflows.ts`.
+ *
+ * Wire names, descriptions and schemas are unchanged: `getAllMcpTools` builds
+ * these through `toolFromCapability`, so every consumer sees the surface it saw
+ * before. `@nodetool-ai/models` is imported inside each implementation, so
+ * loading this module costs nothing.
+ */
+import type { CapabilityExport, CapabilityModule } from "./types.js";
+declare const listJobs: CapabilityExport;
+declare const getJob: CapabilityExport;
+declare const getJobLogs: CapabilityExport;
+/**
+ * Cancel one of the caller's own runs.
+ *
+ * `markCancelledIfActive` is the whole security boundary: the user id and the
+ * still-active predicate are columns in the one UPDATE, so a job that belongs
+ * to someone else and a job that already finished both come back `false`
+ * without this code ever holding the row. It cannot clobber the cost and
+ * timestamps a finishing run just wrote.
+ */
+declare const cancelJob: CapabilityExport;
+/** Every job capability, in the order `getAllMcpTools` offered them. */
+export declare const JOB_CAPABILITIES: readonly CapabilityExport[];
+export declare const module: CapabilityModule;
+export { listJobs, getJob, getJobLogs, cancelJob };
+//# sourceMappingURL=jobs.d.ts.map

package/dist/capabilities/jobs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.d.ts","sourceRoot":"","sources":["../../src/capabilities/jobs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAerE,QAAA,MAAM,QAAQ,EAAE,gBAgBf,CAAC;AAMF,QAAA,MAAM,MAAM,EAAE,gBAsBb,CAAC;AAEF,QAAA,MAAM,UAAU,EAAE,gBA+DjB,CAAC;AAMF;;;;;;;;GAQG;AACH,QAAA,MAAM,SAAS,EAAE,gBAiBhB,CAAC;AAEF,wEAAwE;AACxE,eAAO,MAAM,gBAAgB,EAAE,SAAS,gBAAgB,EAKvD,CAAC;AAEF,eAAO,MAAM,MAAM,EAAE,gBAGpB,CAAC;AAEF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC"}

package/dist/capabilities/jobs.js

@@ -0,0 +1,167 @@
+/**
+ * The `jobs` capability module.
+ *
+ * Three capabilities that used to be three `Tool` subclasses in
+ * `../tools/mcp-tools.ts`: `list_jobs`, `get_job` and `get_job_logs`.
+ * `start_background_job` reads the same table but starts a run, so it stays
+ * with the run capabilities in `./workflows.ts`.
+ *
+ * Wire names, descriptions and schemas are unchanged: `getAllMcpTools` builds
+ * these through `toolFromCapability`, so every consumer sees the surface it saw
+ * before. `@nodetool-ai/models` is imported inside each implementation, so
+ * loading this module costs nothing.
+ */
+import { jobRecord, jobSummaryRecord, userIdOf } from "../tools/mcp-tool-support.js";
+import { listJobsSpec, getJobSpec, getJobLogsSpec, cancelJobSpec } from "./jobs.specs.js";
+import { isString } from "../utils/type-guards.js";
+const listJobs = {
+    spec: listJobsSpec,
+    impl: async (run, params) => {
+        const { Job } = await import("@nodetool-ai/models");
+        const workflowId = params["workflow_id"];
+        const page = {
+            limit: Number(params["limit"] ?? 100)
+        };
+        if (isString(workflowId) && workflowId) {
+            page.workflowId = workflowId;
+        }
+        const [jobs, next] = await Job.paginate(userIdOf(run.context), page);
+        // Summaries, not full records: a listing reports which jobs exist and how
+        // they settled. `get_job` reads one job's outputs.
+        return { jobs: jobs.map(jobSummaryRecord), next: next || null };
+    }
+};
+// ---------------------------------------------------------------------------
+// get_job
+// ---------------------------------------------------------------------------
+const getJob = {
+    spec: getJobSpec,
+    impl: async (run, params) => {
+        const { Job } = await import("@nodetool-ai/models");
+        const jobId = String(params["job_id"]);
+        const job = await Job.find(userIdOf(run.context), jobId);
+        if (!job)
+            return { error: `Job ${jobId} was not found.` };
+        const record = jobRecord(job);
+        // The job's own failure message is payload, not a tool failure — a bare
+        // `error` string at the result root makes the CodeAct bridge throw and
+        // discard everything else on a failed job.
+        const { error, ...rest } = record;
+        return {
+            ...rest,
+            job_error: error ?? null,
+            params: job.params ?? null,
+            // What a still-running job can say about itself. A render posts one
+            // `node_progress` per frame; without this a poll during a two-minute
+            // render sees "running" and nothing more.
+            progress: job.progressRecord()
+        };
+    }
+};
+const getJobLogs = {
+    spec: getJobLogsSpec,
+    impl: async (run, params) => {
+        const { Job } = await import("@nodetool-ai/models");
+        const jobId = String(params["job_id"]);
+        const job = await Job.find(userIdOf(run.context), jobId);
+        if (!job)
+            return { error: `Job ${jobId} was not found.` };
+        const { findRunForSource, getRun, getRunLogs } = await import("@nodetool-ai/execution");
+        const trace = await findRunForSource(userIdOf(run.context), "workflow", job.id);
+        if (trace) {
+            const owner = userIdOf(run.context);
+            const tail = await getRunLogs(owner, trace.id, {
+                limit: Math.max(1, Math.min(500, Number(params["limit"] ?? 200))),
+                newest: true,
+                include_content: true
+            });
+            const { summary } = await getRun(owner, trace.id);
+            return {
+                job_id: job.id,
+                run_id: tail.run.id,
+                status: tail.run.status,
+                job_error: tail.run.error,
+                total_logs: summary.event_count,
+                logs: tail.logs,
+                content_state: tail.content_state,
+                content_expired: tail.content_expired,
+                truncated: tail.truncated,
+                incomplete: tail.incomplete,
+                limited: tail.limited
+            };
+        }
+        // Deletion can mark an older traced job after the first read, then remove
+        // its directory before the lookup above. Re-read before allowing fallback.
+        const historyJob = await Job.find(userIdOf(run.context), job.id);
+        if (!historyJob) {
+            return { error: `Job ${jobId} was not found.` };
+        }
+        if (historyJob.has_run_trace !== 0) {
+            return {
+                job_id: job.id,
+                status: historyJob.status,
+                job_error: null,
+                total_logs: 0,
+                logs: [],
+                content_state: "expired",
+                content_expired: true,
+                truncated: false,
+                incomplete: false,
+                limited: false
+            };
+        }
+        // `limit` keeps the most recent entries — the tail is what explains a
+        // failure. Previously it was forwarded to an endpoint that ignored it.
+        const limit = Number(params["limit"] ?? 200);
+        const logs = historyJob.logs ?? [];
+        // `job_error`, not `error`: the call succeeded even when the job did not,
+        // and a root-level `error` string reads as a tool failure downstream.
+        return {
+            job_id: job.id,
+            status: historyJob.status,
+            job_error: historyJob.error_message ?? historyJob.error ?? null,
+            total_logs: logs.length,
+            logs: logs.slice(Math.max(0, logs.length - limit))
+        };
+    }
+};
+// ---------------------------------------------------------------------------
+// cancel_job
+// ---------------------------------------------------------------------------
+/**
+ * Cancel one of the caller's own runs.
+ *
+ * `markCancelledIfActive` is the whole security boundary: the user id and the
+ * still-active predicate are columns in the one UPDATE, so a job that belongs
+ * to someone else and a job that already finished both come back `false`
+ * without this code ever holding the row. It cannot clobber the cost and
+ * timestamps a finishing run just wrote.
+ */
+const cancelJob = {
+    spec: cancelJobSpec,
+    impl: async (run, params) => {
+        const { Job } = await import("@nodetool-ai/models");
+        const jobId = String(params["job_id"]);
+        const cancelled = await Job.markCancelledIfActive(jobId, userIdOf(run.context));
+        return cancelled
+            ? { job_id: jobId, status: "cancelled" }
+            : {
+                job_id: jobId,
+                cancelled: false,
+                error: `Job ${jobId} is not running — it already finished, or it is not yours.`
+            };
+    }
+};
+/** Every job capability, in the order `getAllMcpTools` offered them. */
+export const JOB_CAPABILITIES = [
+    listJobs,
+    getJob,
+    getJobLogs,
+    cancelJob
+];
+export const module = {
+    module: "jobs",
+    exports: JOB_CAPABILITIES
+};
+export { listJobs, getJob, getJobLogs, cancelJob };
+//# sourceMappingURL=jobs.js.map

package/dist/capabilities/jobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.js","sourceRoot":"","sources":["../../src/capabilities/jobs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,QAAQ,EACT,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,YAAY,EACZ,UAAU,EACV,cAAc,EACd,aAAa,EACd,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAQnD,MAAM,QAAQ,GAAqB;IACjC,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC1B,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;QACzC,MAAM,IAAI,GAAmB;YAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;SACtC,CAAC;QACF,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,EAAE,CAAC;YACvC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC/B,CAAC;QACD,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;QACrE,0EAA0E;QAC1E,mDAAmD;QACnD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;IAClE,CAAC;CACF,CAAC;AAEF,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,MAAM,GAAqB;IAC/B,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC1B,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,iBAAiB,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,wEAAwE;QACxE,uEAAuE;QACvE,2CAA2C;QAC3C,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAClC,OAAO;YACL,GAAG,IAAI;YACP,SAAS,EAAE,KAAK,IAAI,IAAI;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;YAC1B,oEAAoE;YACpE,qEAAqE;YACrE,0CAA0C;YAC1C,QAAQ,EAAE,GAAG,CAAC,cAAc,EAAE;SAC/B,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,GAAqB;IACnC,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC1B,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,iBAAiB,EAAE,CAAC;QAC1D,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACxF,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAChF,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE;gBAC7C,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;gBACjE,MAAM,EAAE,IAAI;gBACZ,eAAe,EAAE,IAAI;aACtB,CAAC,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;YAClD,OAAO;gBACL,MAAM,EAAE,GAAG,CAAC,EAAE;gBACd,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE;gBACnB,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM;gBACvB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK;gBACzB,UAAU,EAAE,OAAO,CAAC,WAAW;gBAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;aACtB,CAAC;QACJ,CAAC;QACD,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,OAAO,EAAE,KAAK,EAAE,OAAO,KAAK,iBAAiB,EAAE,CAAC;QAAC,CAAC;QACrE,IAAI,UAAU,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO;gBACL,MAAM,EAAE,GAAG,CAAC,EAAE;gBACd,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,CAAC;gBACb,IAAI,EAAE,EAAE;gBACR,aAAa,EAAE,SAAS;gBACxB,eAAe,EAAE,IAAI;gBACrB,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,KAAK;gBACjB,OAAO,EAAE,KAAK;aACf,CAAC;QACJ,CAAC;QACD,sEAAsE;QACtE,uEAAuE;QACvE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;QACnC,0EAA0E;QAC1E,sEAAsE;QACtE,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,EAAE;YACd,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,SAAS,EAAE,UAAU,CAAC,aAAa,IAAI,UAAU,CAAC,KAAK,IAAI,IAAI;YAC/D,UAAU,EAAE,IAAI,CAAC,MAAM;YACvB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;SACnD,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,SAAS,GAAqB;IAClC,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;QAC1B,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,qBAAqB,CAC/C,KAAK,EACL,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CACtB,CAAC;QACF,OAAO,SAAS;YACd,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE;YACxC,CAAC,CAAC;gBACE,MAAM,EAAE,KAAK;gBACb,SAAS,EAAE,KAAK;gBAChB,KAAK,EAAE,OAAO,KAAK,4DAA4D;aAChF,CAAC;IACR,CAAC;CACF,CAAC;AAEF,wEAAwE;AACxE,MAAM,CAAC,MAAM,gBAAgB,GAAgC;IAC3D,QAAQ;IACR,MAAM;IACN,UAAU;IACV,SAAS;CACV,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAqB;IACtC,MAAM,EAAE,MAAM;IACd,OAAO,EAAE,gBAAgB;CAC1B,CAAC;AAEF,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC"}

package/dist/capabilities/jobs.specs.d.ts

@@ -0,0 +1,20 @@
+/**
+ * The `jobs` module's specs — data only, no implementation.
+ *
+ * Split out so a belt can be assembled synchronously: the registry's eager
+ * spec table imports this file, never `jobs.ts`, so nothing the
+ * implementations pull in reaches the entry graph. `jobs.ts` imports these
+ * back and attaches each to its implementation, so there is one spec object
+ * behind both halves.
+ */
+import type { CapabilitySpec } from "./types.js";
+import type { JsonSchema } from "@nodetool-ai/runtime";
+export declare const LIST_JOBS_SCHEMA: JsonSchema;
+export declare const GET_JOB_LOGS_SCHEMA: JsonSchema;
+export declare const listJobsSpec: CapabilitySpec;
+export declare const getJobSpec: CapabilitySpec;
+export declare const getJobLogsSpec: CapabilitySpec;
+export declare const cancelJobSpec: CapabilitySpec;
+/** Every spec this module declares, in declaration order. */
+export declare const jobsSpecs: readonly CapabilitySpec[];
+//# sourceMappingURL=jobs.specs.d.ts.map

package/dist/capabilities/jobs.specs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.specs.d.ts","sourceRoot":"","sources":["../../src/capabilities/jobs.specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEvD,eAAO,MAAM,gBAAgB,EAAE,UAc9B,CAAC;AAEF,eAAO,MAAM,mBAAmB,EAAE,UAcjC,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,cAa1B,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,cAiBxB,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,cAU5B,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,cAkB3B,CAAC;AAEF,6DAA6D;AAC7D,eAAO,MAAM,SAAS,EAAE,SAAS,cAAc,EAK9C,CAAC"}

package/dist/capabilities/jobs.specs.js

@@ -0,0 +1,105 @@
+/**
+ * The `jobs` module's specs — data only, no implementation.
+ *
+ * Split out so a belt can be assembled synchronously: the registry's eager
+ * spec table imports this file, never `jobs.ts`, so nothing the
+ * implementations pull in reaches the entry graph. `jobs.ts` imports these
+ * back and attaches each to its implementation, so there is one spec object
+ * behind both halves.
+ */
+export const LIST_JOBS_SCHEMA = {
+    type: "object",
+    properties: {
+        workflow_id: {
+            type: "string",
+            description: "Optional workflow ID to filter by"
+        },
+        limit: {
+            type: "number",
+            description: "Maximum number of jobs to return",
+            default: 100
+        }
+    },
+    required: []
+};
+export const GET_JOB_LOGS_SCHEMA = {
+    type: "object",
+    properties: {
+        job_id: {
+            type: "string",
+            description: "The job ID"
+        },
+        limit: {
+            type: "number",
+            description: "Maximum number of log entries to return",
+            default: 200
+        }
+    },
+    required: ["job_id"]
+};
+export const listJobsSpec = {
+    name: "list_jobs",
+    description: "List jobs (workflow executions) with optional filtering. Each entry " +
+        "carries status, timing, error and the names of the outputs the run " +
+        "produced — not the outputs themselves. Use get_job to read a job's " +
+        "values.",
+    inputSchema: LIST_JOBS_SCHEMA,
+    category: "read",
+    userMessage: (params) => {
+        const wfId = params["workflow_id"];
+        return wfId ? `Listing jobs for workflow ${wfId}` : "Listing jobs";
+    }
+};
+export const getJobSpec = {
+    name: "get_job",
+    description: "Get details about a specific job including status, timing, error info, " +
+        "and the outputs the run produced.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            job_id: {
+                type: "string",
+                description: "The job ID"
+            }
+        },
+        required: ["job_id"]
+    },
+    category: "read",
+    userMessage: (params) => `Getting job ${params["job_id"]}`
+};
+export const getJobLogsSpec = {
+    name: "get_job_logs",
+    description: "Get logs for a job to debug workflow executions. Answers the log tail " +
+        "even when the job failed; its failure message is under `job_error`. " +
+        "Reads recorded run events when the job has a trace, including expiry " +
+        "and truncation flags. Uses legacy job logs only when no run trace exists.",
+    inputSchema: GET_JOB_LOGS_SCHEMA,
+    category: "read",
+    userMessage: (params) => `Getting logs for job ${params["job_id"]}`
+};
+export const cancelJobSpec = {
+    name: "cancel_job",
+    description: "Cancel a running job. Does nothing to a job that already finished, " +
+        "and a job belonging to another user is indistinguishable from a " +
+        "missing one.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            job_id: {
+                type: "string",
+                description: "The job ID"
+            }
+        },
+        required: ["job_id"]
+    },
+    category: "write",
+    userMessage: (params) => `Cancelling job ${params["job_id"]}`
+};
+/** Every spec this module declares, in declaration order. */
+export const jobsSpecs = [
+    listJobsSpec,
+    getJobSpec,
+    getJobLogsSpec,
+    cancelJobSpec
+];
+//# sourceMappingURL=jobs.specs.js.map

package/dist/capabilities/jobs.specs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jobs.specs.js","sourceRoot":"","sources":["../../src/capabilities/jobs.specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,MAAM,CAAC,MAAM,gBAAgB,GAAe;IAC1C,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,mCAAmC;SACjD;QACD,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,kCAAkC;YAC/C,OAAO,EAAE,GAAG;SACb;KACF;IACD,QAAQ,EAAE,EAAE;CACb,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAe;IAC7C,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,YAAY;SAC1B;QACD,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,yCAAyC;YACtD,OAAO,EAAE,GAAG;SACb;KACF;IACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAmB;IAC1C,IAAI,EAAE,WAAW;IACjB,WAAW,EACT,sEAAsE;QACtE,qEAAqE;QACrE,qEAAqE;QACrE,SAAS;IACX,WAAW,EAAE,gBAAgB;IAC7B,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,CAAC,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;IACrE,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAmB;IACxC,IAAI,EAAE,SAAS;IACf,WAAW,EACT,yEAAyE;QACzE,mCAAmC;IACrC,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,YAAY;aAC1B;SACF;QACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;KACrB;IACD,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,MAAM,CAAC,QAAQ,CAAC,EAAE;CAC3D,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAmB;IAC5C,IAAI,EAAE,cAAc;IACpB,WAAW,EACT,wEAAwE;QACxE,sEAAsE;QACtE,uEAAuE;QACvE,2EAA2E;IAC7E,WAAW,EAAE,mBAAmB;IAChC,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,wBAAwB,MAAM,CAAC,QAAQ,CAAC,EAAE;CACpE,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAmB;IAC3C,IAAI,EAAE,YAAY;IAClB,WAAW,EACT,qEAAqE;QACrE,kEAAkE;QAClE,cAAc;IAChB,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,YAAY;aAC1B;SACF;QACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;KACrB;IACD,QAAQ,EAAE,OAAO;IACjB,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,MAAM,CAAC,QAAQ,CAAC,EAAE;CAC9D,CAAC;AAEF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,SAAS,GAA8B;IAClD,YAAY;IACZ,UAAU;IACV,cAAc;IACd,aAAa;CACd,CAAC"}