@noy-db/in-ai 0.2.0-pre.9 → 0.3.0-pre.2

package/README.md

@@ -26,7 +26,7 @@ See the [main repository](https://github.com/vLannaAi/noy-db#readme) for setup,
 
 - Source — [`packages/in-ai`](https://github.com/vLannaAi/noy-db/tree/main/packages/in-ai)
 - Issues — [github.com/vLannaAi/noy-db/issues](https://github.com/vLannaAi/noy-db/issues)
-- Spec — [`SPEC.md`](https://github.com/vLannaAi/noy-db/blob/main/SPEC.md)
+- Spec — [`SPEC.md`](https://github.com/vLannaAi/noy-db-docs/blob/main/SPEC.md)
 
 ## License
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noy-db/in-ai",
-  "version": "0.2.0-pre.9",
+  "version": "0.3.0-pre.2",
   "description": "LLM function-calling adapter for noy-db — expose ACL-scoped collections as tool definitions, then dispatch tool calls back to the vault. Format-agnostic (OpenAI, Anthropic, Vercel AI SDK).",
   "license": "MIT",
   "author": "vLannaAi <vicio@lanna.ai>",
@@ -17,17 +17,10 @@
   "sideEffects": false,
   "exports": {
     ".": {
-      "import": {
-        "types": "./dist/index.d.ts",
-        "default": "./dist/index.js"
-      },
-      "require": {
-        "types": "./dist/index.d.cts",
-        "default": "./dist/index.cjs"
-      }
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
     }
   },
-  "main": "./dist/index.cjs",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [
@@ -36,13 +29,13 @@
     "LICENSE"
   ],
   "engines": {
-    "node": ">=18.0.0"
+    "node": ">=22.0.0"
   },
   "peerDependencies": {
-    "@noy-db/hub": "0.2.0-pre.9"
+    "@noy-db/hub": "0.3.0-pre.2"
   },
   "devDependencies": {
-    "@noy-db/hub": "0.2.0-pre.9"
+    "@noy-db/hub": "0.3.0-pre.2"
   },
   "keywords": [
     "noy-db",

package/dist/index.cjs

@@ -1,197 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/index.ts
-var index_exports = {};
-__export(index_exports, {
-  ToolDeniedError: () => ToolDeniedError,
-  ToolNotFoundError: () => ToolNotFoundError,
-  buildToolset: () => buildToolset,
-  invokeToolCall: () => invokeToolCall,
-  parseToolName: () => parseToolName
-});
-module.exports = __toCommonJS(index_exports);
-function buildToolset(vault, options = {}) {
-  const operations = options.operations ?? ["list", "get"];
-  const label = options.vaultLabel ?? vault.name;
-  const format = options.format ?? "json-schema";
-  const allowlist = options.collections ? new Set(options.collections) : null;
-  const accessible = getAccessibleCollections(vault, allowlist);
-  const tools = [];
-  for (const collection of accessible) {
-    for (const op of operations) {
-      tools.push(jsonSchemaTool(collection, op, label));
-    }
-  }
-  return tools.map((t) => wrap(t, format));
-}
-function jsonSchemaTool(collection, op, label) {
-  switch (op) {
-    case "list":
-      return {
-        name: `${collection}_list`,
-        description: `List every record in the "${collection}" collection of vault "${label}". Returns an array of records.`,
-        parameters: { type: "object", properties: {}, required: [] }
-      };
-    case "get":
-      return {
-        name: `${collection}_get`,
-        description: `Get a single record from the "${collection}" collection of vault "${label}" by id. Returns null when the id does not exist.`,
-        parameters: {
-          type: "object",
-          properties: { id: { type: "string", description: "Record id." } },
-          required: ["id"]
-        }
-      };
-    case "put":
-      return {
-        name: `${collection}_put`,
-        description: `Create or replace a record in the "${collection}" collection of vault "${label}". The \`record\` argument is the full record object.`,
-        parameters: {
-          type: "object",
-          properties: {
-            id: { type: "string", description: "Record id." },
-            record: { type: "object", description: "Full record body." }
-          },
-          required: ["id", "record"]
-        }
-      };
-    case "delete":
-      return {
-        name: `${collection}_delete`,
-        description: `Delete a record by id from the "${collection}" collection of vault "${label}".`,
-        parameters: {
-          type: "object",
-          properties: { id: { type: "string", description: "Record id." } },
-          required: ["id"]
-        }
-      };
-    case "count":
-      return {
-        name: `${collection}_count`,
-        description: `Count records in the "${collection}" collection of vault "${label}".`,
-        parameters: { type: "object", properties: {}, required: [] }
-      };
-  }
-}
-function wrap(tool, format) {
-  switch (format) {
-    case "json-schema":
-      return tool;
-    case "openai":
-      return { type: "function", function: tool };
-    case "anthropic":
-      return {
-        name: tool.name,
-        description: tool.description,
-        input_schema: tool.parameters
-      };
-    case "vercel-ai":
-      return { description: tool.description, parameters: tool.parameters };
-  }
-}
-var ToolDeniedError = class extends Error {
-  toolName;
-  constructor(toolName, reason) {
-    super(`Tool call denied: "${toolName}" \u2014 ${reason}`);
-    this.name = "ToolDeniedError";
-    this.toolName = toolName;
-  }
-};
-var ToolNotFoundError = class extends Error {
-  toolName;
-  constructor(toolName) {
-    super(`Tool call refused: "${toolName}" is not a known tool in this toolset.`);
-    this.name = "ToolNotFoundError";
-    this.toolName = toolName;
-  }
-};
-async function invokeToolCall(vault, call, options = {}) {
-  const parsed = parseToolName(call.name);
-  if (!parsed) {
-    throw new ToolNotFoundError(call.name);
-  }
-  const { collection, op } = parsed;
-  const allowedOps = options.allowedOperations ?? ["list", "get"];
-  if (!allowedOps.includes(op)) {
-    throw new ToolDeniedError(call.name, `operation "${op}" is not in the allowed operations list`);
-  }
-  if (options.allowedCollections && !options.allowedCollections.includes(collection)) {
-    throw new ToolDeniedError(call.name, `collection "${collection}" is not in the allowed list`);
-  }
-  const coll = vault.collection(collection);
-  const id = toIdString(call.args.id);
-  switch (op) {
-    case "list":
-      return coll.list();
-    case "get":
-      return coll.get(id);
-    case "count":
-      return (await coll.list()).length;
-    case "put":
-      return coll.put(id, call.args.record);
-    case "delete":
-      return coll.delete(id);
-  }
-}
-function toIdString(value) {
-  if (typeof value === "string") return value;
-  if (typeof value === "number" || typeof value === "boolean") return String(value);
-  return "";
-}
-function parseToolName(name) {
-  const ops = ["list", "get", "put", "delete", "count"];
-  for (const op of ops) {
-    const suffix = `_${op}`;
-    if (name.endsWith(suffix)) {
-      const collection = name.slice(0, -suffix.length);
-      if (collection.length === 0) return null;
-      return { collection, op };
-    }
-  }
-  return null;
-}
-function getAccessibleCollections(vault, allowlist) {
-  const v = vault;
-  if (typeof v.listCollectionNames === "function") {
-    const names = v.listCollectionNames();
-    return names.filter((n) => !n.startsWith("_") && (!allowlist || allowlist.has(n)));
-  }
-  const deks = v.keyring?.deks;
-  if (deks) {
-    const names = [];
-    for (const key of deks.keys()) {
-      if (key.startsWith("_")) continue;
-      const bare = key.includes("#") ? key.slice(0, key.indexOf("#")) : key;
-      if (allowlist && !allowlist.has(bare)) continue;
-      if (!names.includes(bare)) names.push(bare);
-    }
-    return names;
-  }
-  return allowlist ? [...allowlist] : [];
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  ToolDeniedError,
-  ToolNotFoundError,
-  buildToolset,
-  invokeToolCall,
-  parseToolName
-});
-//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * **@noy-db/in-ai** — LLM function-calling adapter for noy-db.\n *\n * Exposes ACL-scoped collections as tool definitions that an LLM can\n * call, and dispatches incoming tool calls back to the vault. The\n * permission model carries through: a user whose keyring has only\n * `ro` on `invoices` sees only `invoices.list` / `invoices.get` —\n * never `invoices.put` / `invoices.delete`. The LLM physically\n * cannot emit a tool call the operator isn't authorised for, because\n * the tool doesn't exist in the model's context.\n *\n * ## Two layers\n *\n *   1. **{@link buildToolset}** — walk the vault's accessible\n *      collections, emit a `Tool[]` array shaped for the format of\n *      your choice (OpenAI, Anthropic, Vercel AI SDK, or the generic\n *      JSON-Schema intermediate).\n *\n *   2. **{@link invokeToolCall}** — accept `{ name, args }` from the\n *      LLM's response, re-check permissions, dispatch to the vault,\n *      and return the result in a format that slots into the next\n *      prompt round.\n *\n * ## Security boundary\n *\n * Tool calls are untrusted input. The dispatcher re-checks the\n * caller's permission on every invocation — even though the tool\n * wasn't published to the LLM, a hostile model might attempt a\n * fabricated call. The dispatcher throws `ToolDeniedError` rather\n * than silently ignoring, so the consumer can surface the attempt\n * to the user.\n *\n * @packageDocumentation\n */\n\nimport type { Vault } from '@noy-db/hub'\n\n// ─── Tool formats ───────────────────────────────────────────────────────\n\n/** Generic JSON-Schema-based tool (matches OpenAI's `function` shape). */\nexport interface JsonSchemaTool {\n  readonly name: string\n  readonly description: string\n  readonly parameters: {\n    readonly type: 'object'\n    readonly properties: Record<string, { type: string; description?: string }>\n    readonly required: readonly string[]\n  }\n}\n\n/** OpenAI chat.completions tool shape. */\nexport interface OpenAITool {\n  readonly type: 'function'\n  readonly function: JsonSchemaTool\n}\n\n/** Anthropic Messages API tool shape. */\nexport interface AnthropicTool {\n  readonly name: string\n  readonly description: string\n  readonly input_schema: JsonSchemaTool['parameters']\n}\n\n/** Vercel AI SDK tool shape (generic). */\nexport interface VercelAITool {\n  readonly description: string\n  readonly parameters: JsonSchemaTool['parameters']\n}\n\nexport type ToolFormat = 'openai' | 'anthropic' | 'vercel-ai' | 'json-schema'\n\n// ─── Toolset options ───────────────────────────────────────────────────\n\nexport interface ToolsetOptions {\n  /**\n   * Which collections to expose. Default: every collection in the\n   * vault the caller has read access to. Pass an explicit allowlist\n   * to narrow the surface — common in multi-tenant setups where the\n   * LLM should only see a subset.\n   */\n  readonly collections?: readonly string[]\n  /**\n   * Which operations to expose per collection. Defaults to `['list',\n   * 'get']` — read-only. Add `'put'` / `'delete'` explicitly when you\n   * want the LLM to mutate. Permissions are re-checked at dispatch\n   * time regardless.\n   */\n  readonly operations?: readonly ToolOperation[]\n  /**\n   * Output format. `'json-schema'` is the intermediate shape; the\n   * others (`'openai'` / `'anthropic'` / `'vercel-ai'`) are the\n   * SDK-specific wrappers.\n   */\n  readonly format?: ToolFormat\n  /**\n   * Human-readable vault label inserted into every tool description\n   * (e.g. `\"Acme Inc.\"`). Helps the LLM disambiguate multi-vault\n   * scenarios. Omit to use the raw vault name.\n   */\n  readonly vaultLabel?: string\n}\n\nexport type ToolOperation = 'list' | 'get' | 'put' | 'delete' | 'count'\n\n// ─── Tool builder ──────────────────────────────────────────────────────\n\n/** Build an LLM-ready toolset from a vault. */\nexport function buildToolset(\n  vault: Vault,\n  options: ToolsetOptions = {},\n): readonly (JsonSchemaTool | OpenAITool | AnthropicTool | VercelAITool)[] {\n  const operations = options.operations ?? ['list', 'get']\n  const label = options.vaultLabel ?? vault.name\n  const format = options.format ?? 'json-schema'\n  const allowlist = options.collections ? new Set(options.collections) : null\n\n  // The Vault surface we use is tiny + safe: enumerate known collection\n  // names via vault.describeAccess(). Fall back to caller-supplied\n  // allowlist if describeAccess is not available.\n  const accessible = getAccessibleCollections(vault, allowlist)\n\n  const tools: JsonSchemaTool[] = []\n  for (const collection of accessible) {\n    for (const op of operations) {\n      tools.push(jsonSchemaTool(collection, op, label))\n    }\n  }\n\n  return tools.map(t => wrap(t, format))\n}\n\nfunction jsonSchemaTool(collection: string, op: ToolOperation, label: string): JsonSchemaTool {\n  switch (op) {\n    case 'list':\n      return {\n        name: `${collection}_list`,\n        description: `List every record in the \"${collection}\" collection of vault \"${label}\". Returns an array of records.`,\n        parameters: { type: 'object', properties: {}, required: [] },\n      }\n    case 'get':\n      return {\n        name: `${collection}_get`,\n        description: `Get a single record from the \"${collection}\" collection of vault \"${label}\" by id. Returns null when the id does not exist.`,\n        parameters: {\n          type: 'object',\n          properties: { id: { type: 'string', description: 'Record id.' } },\n          required: ['id'],\n        },\n      }\n    case 'put':\n      return {\n        name: `${collection}_put`,\n        description: `Create or replace a record in the \"${collection}\" collection of vault \"${label}\". The \\`record\\` argument is the full record object.`,\n        parameters: {\n          type: 'object',\n          properties: {\n            id: { type: 'string', description: 'Record id.' },\n            record: { type: 'object', description: 'Full record body.' },\n          },\n          required: ['id', 'record'],\n        },\n      }\n    case 'delete':\n      return {\n        name: `${collection}_delete`,\n        description: `Delete a record by id from the \"${collection}\" collection of vault \"${label}\".`,\n        parameters: {\n          type: 'object',\n          properties: { id: { type: 'string', description: 'Record id.' } },\n          required: ['id'],\n        },\n      }\n    case 'count':\n      return {\n        name: `${collection}_count`,\n        description: `Count records in the \"${collection}\" collection of vault \"${label}\".`,\n        parameters: { type: 'object', properties: {}, required: [] },\n      }\n  }\n}\n\nfunction wrap(\n  tool: JsonSchemaTool,\n  format: ToolFormat,\n): JsonSchemaTool | OpenAITool | AnthropicTool | VercelAITool {\n  switch (format) {\n    case 'json-schema':\n      return tool\n    case 'openai':\n      return { type: 'function', function: tool }\n    case 'anthropic':\n      return {\n        name: tool.name,\n        description: tool.description,\n        input_schema: tool.parameters,\n      }\n    case 'vercel-ai':\n      return { description: tool.description, parameters: tool.parameters }\n  }\n}\n\n// ─── Dispatch ──────────────────────────────────────────────────────────\n\nexport class ToolDeniedError extends Error {\n  readonly toolName: string\n  constructor(toolName: string, reason: string) {\n    super(`Tool call denied: \"${toolName}\" — ${reason}`)\n    this.name = 'ToolDeniedError'\n    this.toolName = toolName\n  }\n}\n\nexport class ToolNotFoundError extends Error {\n  readonly toolName: string\n  constructor(toolName: string) {\n    super(`Tool call refused: \"${toolName}\" is not a known tool in this toolset.`)\n    this.name = 'ToolNotFoundError'\n    this.toolName = toolName\n  }\n}\n\nexport interface ToolCall {\n  readonly name: string\n  readonly args: Record<string, unknown>\n}\n\nexport interface InvokeOptions {\n  /** Mirror the allowlist used for `buildToolset` — enforced at dispatch. */\n  readonly allowedOperations?: readonly ToolOperation[]\n  readonly allowedCollections?: readonly string[]\n}\n\n/**\n * Dispatch an LLM-returned tool call against the vault. Caller is\n * expected to pass the same `allowedOperations` / `allowedCollections`\n * they used for `buildToolset`; deviations (including fabricated tool\n * names the LLM invented) throw `ToolNotFoundError` or\n * `ToolDeniedError`.\n */\nexport async function invokeToolCall(\n  vault: Vault,\n  call: ToolCall,\n  options: InvokeOptions = {},\n): Promise<unknown> {\n  const parsed = parseToolName(call.name)\n  if (!parsed) {\n    throw new ToolNotFoundError(call.name)\n  }\n  const { collection, op } = parsed\n\n  const allowedOps = options.allowedOperations ?? ['list', 'get']\n  if (!allowedOps.includes(op)) {\n    throw new ToolDeniedError(call.name, `operation \"${op}\" is not in the allowed operations list`)\n  }\n  if (options.allowedCollections && !options.allowedCollections.includes(collection)) {\n    throw new ToolDeniedError(call.name, `collection \"${collection}\" is not in the allowed list`)\n  }\n\n  const coll = vault.collection(collection)\n  const id = toIdString(call.args.id)\n  switch (op) {\n    case 'list':\n      return coll.list()\n    case 'get':\n      return coll.get(id)\n    case 'count':\n      return (await coll.list()).length\n    case 'put':\n      return coll.put(id, call.args.record as Record<string, unknown>)\n    case 'delete':\n      return coll.delete(id)\n  }\n}\n\nfunction toIdString(value: unknown): string {\n  if (typeof value === 'string') return value\n  if (typeof value === 'number' || typeof value === 'boolean') return String(value)\n  return ''\n}\n\n/** Round-trip helper: parse `collection_op` back to its parts. */\nexport function parseToolName(name: string): { collection: string; op: ToolOperation } | null {\n  // Operation suffix — take the longest known suffix match so that\n  // collection names containing underscores (e.g. `user_profiles`) are\n  // still parseable.\n  const ops: ToolOperation[] = ['list', 'get', 'put', 'delete', 'count']\n  for (const op of ops) {\n    const suffix = `_${op}`\n    if (name.endsWith(suffix)) {\n      const collection = name.slice(0, -suffix.length)\n      if (collection.length === 0) return null\n      return { collection, op }\n    }\n  }\n  return null\n}\n\n// ─── Vault introspection (duck-typed) ──────────────────────────────────\n\n/**\n * Duck-typed probe for a vault that exposes an accessible-collections\n * API. Every hub version we target ships either `listCollectionNames`\n * or the fallback we use below (the keyring's DEK map).\n */\nfunction getAccessibleCollections(\n  vault: Vault,\n  allowlist: Set<string> | null,\n): string[] {\n  // Preferred path — if the vault exposes an explicit enumeration API.\n  const v = vault as unknown as {\n    listCollectionNames?: () => string[]\n    keyring?: { deks: Map<string, unknown> }\n  }\n  if (typeof v.listCollectionNames === 'function') {\n    const names = v.listCollectionNames()\n    return names.filter(n => !n.startsWith('_') && (!allowlist || allowlist.has(n)))\n  }\n  // Fallback — read the keyring's DEK keys, filtering system collections.\n  const deks = v.keyring?.deks\n  if (deks) {\n    const names: string[] = []\n    for (const key of deks.keys()) {\n      if (key.startsWith('_')) continue\n      // Tier-suffixed DEKs (`collection#N`) — strip the suffix and dedupe.\n      const bare = key.includes('#') ? key.slice(0, key.indexOf('#')) : key\n      if (allowlist && !allowlist.has(bare)) continue\n      if (!names.includes(bare)) names.push(bare)\n    }\n    return names\n  }\n  // Last resort — return the allowlist itself (trust the caller).\n  return allowlist ? [...allowlist] : []\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA2GO,SAAS,aACd,OACA,UAA0B,CAAC,GAC8C;AACzE,QAAM,aAAa,QAAQ,cAAc,CAAC,QAAQ,KAAK;AACvD,QAAM,QAAQ,QAAQ,cAAc,MAAM;AAC1C,QAAM,SAAS,QAAQ,UAAU;AACjC,QAAM,YAAY,QAAQ,cAAc,IAAI,IAAI,QAAQ,WAAW,IAAI;AAKvE,QAAM,aAAa,yBAAyB,OAAO,SAAS;AAE5D,QAAM,QAA0B,CAAC;AACjC,aAAW,cAAc,YAAY;AACnC,eAAW,MAAM,YAAY;AAC3B,YAAM,KAAK,eAAe,YAAY,IAAI,KAAK,CAAC;AAAA,IAClD;AAAA,EACF;AAEA,SAAO,MAAM,IAAI,OAAK,KAAK,GAAG,MAAM,CAAC;AACvC;AAEA,SAAS,eAAe,YAAoB,IAAmB,OAA+B;AAC5F,UAAQ,IAAI;AAAA,IACV,KAAK;AACH,aAAO;AAAA,QACL,MAAM,GAAG,UAAU;AAAA,QACnB,aAAa,6BAA6B,UAAU,0BAA0B,KAAK;AAAA,QACnF,YAAY,EAAE,MAAM,UAAU,YAAY,CAAC,GAAG,UAAU,CAAC,EAAE;AAAA,MAC7D;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,MAAM,GAAG,UAAU;AAAA,QACnB,aAAa,iCAAiC,UAAU,0BAA0B,KAAK;AAAA,QACvF,YAAY;AAAA,UACV,MAAM;AAAA,UACN,YAAY,EAAE,IAAI,EAAE,MAAM,UAAU,aAAa,aAAa,EAAE;AAAA,UAChE,UAAU,CAAC,IAAI;AAAA,QACjB;AAAA,MACF;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,MAAM,GAAG,UAAU;AAAA,QACnB,aAAa,sCAAsC,UAAU,0BAA0B,KAAK;AAAA,QAC5F,YAAY;AAAA,UACV,MAAM;AAAA,UACN,YAAY;AAAA,YACV,IAAI,EAAE,MAAM,UAAU,aAAa,aAAa;AAAA,YAChD,QAAQ,EAAE,MAAM,UAAU,aAAa,oBAAoB;AAAA,UAC7D;AAAA,UACA,UAAU,CAAC,MAAM,QAAQ;AAAA,QAC3B;AAAA,MACF;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,MAAM,GAAG,UAAU;AAAA,QACnB,aAAa,mCAAmC,UAAU,0BAA0B,KAAK;AAAA,QACzF,YAAY;AAAA,UACV,MAAM;AAAA,UACN,YAAY,EAAE,IAAI,EAAE,MAAM,UAAU,aAAa,aAAa,EAAE;AAAA,UAChE,UAAU,CAAC,IAAI;AAAA,QACjB;AAAA,MACF;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,MAAM,GAAG,UAAU;AAAA,QACnB,aAAa,yBAAyB,UAAU,0BAA0B,KAAK;AAAA,QAC/E,YAAY,EAAE,MAAM,UAAU,YAAY,CAAC,GAAG,UAAU,CAAC,EAAE;AAAA,MAC7D;AAAA,EACJ;AACF;AAEA,SAAS,KACP,MACA,QAC4D;AAC5D,UAAQ,QAAQ;AAAA,IACd,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,EAAE,MAAM,YAAY,UAAU,KAAK;AAAA,IAC5C,KAAK;AACH,aAAO;AAAA,QACL,MAAM,KAAK;AAAA,QACX,aAAa,KAAK;AAAA,QAClB,cAAc,KAAK;AAAA,MACrB;AAAA,IACF,KAAK;AACH,aAAO,EAAE,aAAa,KAAK,aAAa,YAAY,KAAK,WAAW;AAAA,EACxE;AACF;AAIO,IAAM,kBAAN,cAA8B,MAAM;AAAA,EAChC;AAAA,EACT,YAAY,UAAkB,QAAgB;AAC5C,UAAM,sBAAsB,QAAQ,YAAO,MAAM,EAAE;AACnD,SAAK,OAAO;AACZ,SAAK,WAAW;AAAA,EAClB;AACF;AAEO,IAAM,oBAAN,cAAgC,MAAM;AAAA,EAClC;AAAA,EACT,YAAY,UAAkB;AAC5B,UAAM,uBAAuB,QAAQ,wCAAwC;AAC7E,SAAK,OAAO;AACZ,SAAK,WAAW;AAAA,EAClB;AACF;AAoBA,eAAsB,eACpB,OACA,MACA,UAAyB,CAAC,GACR;AAClB,QAAM,SAAS,cAAc,KAAK,IAAI;AACtC,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,kBAAkB,KAAK,IAAI;AAAA,EACvC;AACA,QAAM,EAAE,YAAY,GAAG,IAAI;AAE3B,QAAM,aAAa,QAAQ,qBAAqB,CAAC,QAAQ,KAAK;AAC9D,MAAI,CAAC,WAAW,SAAS,EAAE,GAAG;AAC5B,UAAM,IAAI,gBAAgB,KAAK,MAAM,cAAc,EAAE,yCAAyC;AAAA,EAChG;AACA,MAAI,QAAQ,sBAAsB,CAAC,QAAQ,mBAAmB,SAAS,UAAU,GAAG;AAClF,UAAM,IAAI,gBAAgB,KAAK,MAAM,eAAe,UAAU,8BAA8B;AAAA,EAC9F;AAEA,QAAM,OAAO,MAAM,WAAW,UAAU;AACxC,QAAM,KAAK,WAAW,KAAK,KAAK,EAAE;AAClC,UAAQ,IAAI;AAAA,IACV,KAAK;AACH,aAAO,KAAK,KAAK;AAAA,IACnB,KAAK;AACH,aAAO,KAAK,IAAI,EAAE;AAAA,IACpB,KAAK;AACH,cAAQ,MAAM,KAAK,KAAK,GAAG;AAAA,IAC7B,KAAK;AACH,aAAO,KAAK,IAAI,IAAI,KAAK,KAAK,MAAiC;AAAA,IACjE,KAAK;AACH,aAAO,KAAK,OAAO,EAAE;AAAA,EACzB;AACF;AAEA,SAAS,WAAW,OAAwB;AAC1C,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,OAAO,UAAU,YAAY,OAAO,UAAU,UAAW,QAAO,OAAO,KAAK;AAChF,SAAO;AACT;AAGO,SAAS,cAAc,MAAgE;AAI5F,QAAM,MAAuB,CAAC,QAAQ,OAAO,OAAO,UAAU,OAAO;AACrE,aAAW,MAAM,KAAK;AACpB,UAAM,SAAS,IAAI,EAAE;AACrB,QAAI,KAAK,SAAS,MAAM,GAAG;AACzB,YAAM,aAAa,KAAK,MAAM,GAAG,CAAC,OAAO,MAAM;AAC/C,UAAI,WAAW,WAAW,EAAG,QAAO;AACpC,aAAO,EAAE,YAAY,GAAG;AAAA,IAC1B;AAAA,EACF;AACA,SAAO;AACT;AASA,SAAS,yBACP,OACA,WACU;AAEV,QAAM,IAAI;AAIV,MAAI,OAAO,EAAE,wBAAwB,YAAY;AAC/C,UAAM,QAAQ,EAAE,oBAAoB;AACpC,WAAO,MAAM,OAAO,OAAK,CAAC,EAAE,WAAW,GAAG,MAAM,CAAC,aAAa,UAAU,IAAI,CAAC,EAAE;AAAA,EACjF;AAEA,QAAM,OAAO,EAAE,SAAS;AACxB,MAAI,MAAM;AACR,UAAM,QAAkB,CAAC;AACzB,eAAW,OAAO,KAAK,KAAK,GAAG;AAC7B,UAAI,IAAI,WAAW,GAAG,EAAG;AAEzB,YAAM,OAAO,IAAI,SAAS,GAAG,IAAI,IAAI,MAAM,GAAG,IAAI,QAAQ,GAAG,CAAC,IAAI;AAClE,UAAI,aAAa,CAAC,UAAU,IAAI,IAAI,EAAG;AACvC,UAAI,CAAC,MAAM,SAAS,IAAI,EAAG,OAAM,KAAK,IAAI;AAAA,IAC5C;AACA,WAAO;AAAA,EACT;AAEA,SAAO,YAAY,CAAC,GAAG,SAAS,IAAI,CAAC;AACvC;","names":[]}

package/dist/index.d.cts

@@ -1,130 +0,0 @@
-import { Vault } from '@noy-db/hub';
-
-/**
- * **@noy-db/in-ai** — LLM function-calling adapter for noy-db.
- *
- * Exposes ACL-scoped collections as tool definitions that an LLM can
- * call, and dispatches incoming tool calls back to the vault. The
- * permission model carries through: a user whose keyring has only
- * `ro` on `invoices` sees only `invoices.list` / `invoices.get` —
- * never `invoices.put` / `invoices.delete`. The LLM physically
- * cannot emit a tool call the operator isn't authorised for, because
- * the tool doesn't exist in the model's context.
- *
- * ## Two layers
- *
- *   1. **{@link buildToolset}** — walk the vault's accessible
- *      collections, emit a `Tool[]` array shaped for the format of
- *      your choice (OpenAI, Anthropic, Vercel AI SDK, or the generic
- *      JSON-Schema intermediate).
- *
- *   2. **{@link invokeToolCall}** — accept `{ name, args }` from the
- *      LLM's response, re-check permissions, dispatch to the vault,
- *      and return the result in a format that slots into the next
- *      prompt round.
- *
- * ## Security boundary
- *
- * Tool calls are untrusted input. The dispatcher re-checks the
- * caller's permission on every invocation — even though the tool
- * wasn't published to the LLM, a hostile model might attempt a
- * fabricated call. The dispatcher throws `ToolDeniedError` rather
- * than silently ignoring, so the consumer can surface the attempt
- * to the user.
- *
- * @packageDocumentation
- */
-
-/** Generic JSON-Schema-based tool (matches OpenAI's `function` shape). */
-interface JsonSchemaTool {
-    readonly name: string;
-    readonly description: string;
-    readonly parameters: {
-        readonly type: 'object';
-        readonly properties: Record<string, {
-            type: string;
-            description?: string;
-        }>;
-        readonly required: readonly string[];
-    };
-}
-/** OpenAI chat.completions tool shape. */
-interface OpenAITool {
-    readonly type: 'function';
-    readonly function: JsonSchemaTool;
-}
-/** Anthropic Messages API tool shape. */
-interface AnthropicTool {
-    readonly name: string;
-    readonly description: string;
-    readonly input_schema: JsonSchemaTool['parameters'];
-}
-/** Vercel AI SDK tool shape (generic). */
-interface VercelAITool {
-    readonly description: string;
-    readonly parameters: JsonSchemaTool['parameters'];
-}
-type ToolFormat = 'openai' | 'anthropic' | 'vercel-ai' | 'json-schema';
-interface ToolsetOptions {
-    /**
-     * Which collections to expose. Default: every collection in the
-     * vault the caller has read access to. Pass an explicit allowlist
-     * to narrow the surface — common in multi-tenant setups where the
-     * LLM should only see a subset.
-     */
-    readonly collections?: readonly string[];
-    /**
-     * Which operations to expose per collection. Defaults to `['list',
-     * 'get']` — read-only. Add `'put'` / `'delete'` explicitly when you
-     * want the LLM to mutate. Permissions are re-checked at dispatch
-     * time regardless.
-     */
-    readonly operations?: readonly ToolOperation[];
-    /**
-     * Output format. `'json-schema'` is the intermediate shape; the
-     * others (`'openai'` / `'anthropic'` / `'vercel-ai'`) are the
-     * SDK-specific wrappers.
-     */
-    readonly format?: ToolFormat;
-    /**
-     * Human-readable vault label inserted into every tool description
-     * (e.g. `"Acme Inc."`). Helps the LLM disambiguate multi-vault
-     * scenarios. Omit to use the raw vault name.
-     */
-    readonly vaultLabel?: string;
-}
-type ToolOperation = 'list' | 'get' | 'put' | 'delete' | 'count';
-/** Build an LLM-ready toolset from a vault. */
-declare function buildToolset(vault: Vault, options?: ToolsetOptions): readonly (JsonSchemaTool | OpenAITool | AnthropicTool | VercelAITool)[];
-declare class ToolDeniedError extends Error {
-    readonly toolName: string;
-    constructor(toolName: string, reason: string);
-}
-declare class ToolNotFoundError extends Error {
-    readonly toolName: string;
-    constructor(toolName: string);
-}
-interface ToolCall {
-    readonly name: string;
-    readonly args: Record<string, unknown>;
-}
-interface InvokeOptions {
-    /** Mirror the allowlist used for `buildToolset` — enforced at dispatch. */
-    readonly allowedOperations?: readonly ToolOperation[];
-    readonly allowedCollections?: readonly string[];
-}
-/**
- * Dispatch an LLM-returned tool call against the vault. Caller is
- * expected to pass the same `allowedOperations` / `allowedCollections`
- * they used for `buildToolset`; deviations (including fabricated tool
- * names the LLM invented) throw `ToolNotFoundError` or
- * `ToolDeniedError`.
- */
-declare function invokeToolCall(vault: Vault, call: ToolCall, options?: InvokeOptions): Promise<unknown>;
-/** Round-trip helper: parse `collection_op` back to its parts. */
-declare function parseToolName(name: string): {
-    collection: string;
-    op: ToolOperation;
-} | null;
-
-export { type AnthropicTool, type InvokeOptions, type JsonSchemaTool, type OpenAITool, type ToolCall, ToolDeniedError, type ToolFormat, ToolNotFoundError, type ToolOperation, type ToolsetOptions, type VercelAITool, buildToolset, invokeToolCall, parseToolName };