@once-agent/sdk 0.1.10 → 0.1.12

package/dist/tool-importance.js

@@ -0,0 +1,269 @@
+const evidenceAdjustment = {
+    EXECUTED: 15,
+    MODEL_VISIBLE: 10,
+    RUNTIME_REGISTERED: 7,
+    SERVER_AUTHORITATIVE: 4,
+    HOST_CONFIGURED: 2,
+    SOURCE_DISCOVERED: 0,
+    REGISTRY_CANDIDATE: -30
+};
+const protectionAdjustment = {
+    NONE: 10,
+    NATIVE_IDEMPOTENCY: -5,
+    AUTHORITATIVE_RECONCILIATION: -15,
+    ONCE_HEALTHY: -35,
+    ONCE_UNVERIFIED: 0
+};
+function clamp(value, minimum = 0, maximum = 100) {
+    return Math.max(minimum, Math.min(maximum, value));
+}
+function criticalityBand(score) {
+    if (score >= 85)
+        return "I5";
+    if (score >= 70)
+        return "I4";
+    if (score >= 50)
+        return "I3";
+    if (score >= 30)
+        return "I2";
+    if (score >= 10)
+        return "I1";
+    return "I0";
+}
+function actionBand(score) {
+    if (score >= 95)
+        return "CRITICAL_GAP";
+    if (score >= 80)
+        return "PROTECT_PRIORITY";
+    if (score >= 60)
+        return "QUALIFY";
+    if (score >= 40)
+        return "REVIEW";
+    if (score >= 20)
+        return "OBSERVE";
+    return "BYPASS";
+}
+function inferredQualification(effectClass) {
+    switch (effectClass) {
+        case "READ_ONLY":
+        case "GENERATION_ONLY":
+            return "NOT_APPLICABLE";
+        case "UNKNOWN":
+        case "DYNAMIC_EXECUTION":
+            return "UNKNOWN";
+        case "LOCAL_MUTATION":
+            return "UNLIKELY";
+        default:
+            return "REVIEW_REQUIRED";
+    }
+}
+function inferEffect(input) {
+    const text = [
+        input.name,
+        input.description ?? "",
+        input.sourceCategory ?? ""
+    ].join(" ").toLowerCase();
+    if (input.readOnlyHint === true) {
+        return {
+            effectClass: "READ_ONLY",
+            base: 5,
+            confidence: 0.78,
+            reasons: ["read_only_hint"]
+        };
+    }
+    if (/terraform\s*(destroy|apply)|kubectl.*(?:delete|apply)|destroy.*(?:prod|production)|(?:prod|production).*(?:destroy|delete|purge|drop)/.test(text)) {
+        return {
+            effectClass: "DESTRUCTIVE_ADMIN",
+            base: 95,
+            confidence: 0.94,
+            reasons: ["destructive_production_operation"]
+        };
+    }
+    if (/refund|charge|payment|payout|transfer|capture.*(?:card|payment)|money|financial/.test(text)) {
+        return {
+            effectClass: "MONEY_MOVEMENT",
+            base: 90,
+            confidence: 0.93,
+            reasons: ["money_movement"]
+        };
+    }
+    if (/grant.*(?:admin|role|permission)|revoke.*(?:access|role|permission)|rotate.*(?:key|credential|secret)|deleteuser|disableuser|identity|iam|security policy|account mutation/.test(text)) {
+        return {
+            effectClass: "IDENTITY_ACCESS_SECURITY",
+            base: 90,
+            confidence: 0.9,
+            reasons: ["identity_access_security_change"]
+        };
+    }
+    if (/deploy|production|terraform|kubectl|helm|cloudformation|dns|infrastructure/.test(text)) {
+        return {
+            effectClass: "PRODUCTION_INFRASTRUCTURE",
+            base: 85,
+            confidence: 0.84,
+            reasons: ["production_or_infrastructure_change"]
+        };
+    }
+    if (/merge.*pull|pull.*merge|git.*push|create.*tag|publish.*release|repository|github.*(?:create|update|delete)|code_repository/.test(text)) {
+        return {
+            effectClass: "CODE_REPOSITORY_MUTATION",
+            base: 72,
+            confidence: 0.82,
+            reasons: ["code_repository_mutation"]
+        };
+    }
+    if (/database|prisma|insert|upsert|sql.*(?:update|delete|insert)|delete.*record|update.*record/.test(text)) {
+        return {
+            effectClass: "DATABASE_MUTATION",
+            base: 62,
+            confidence: 0.82,
+            reasons: ["database_mutation"]
+        };
+    }
+    if (/queue|kafka|sns|sqs|pubsub|enqueue|publish.*event|event publication/.test(text)) {
+        return {
+            effectClass: "QUEUE_EVENT_MUTATION",
+            base: 60,
+            confidence: 0.82,
+            reasons: ["queue_or_event_mutation"]
+        };
+    }
+    if (/sendmail|sendemail|sendmessage|sendsms|postmessage|email|sms|slack|teams|discord|messaging/.test(text)) {
+        return {
+            effectClass: "EXTERNAL_COMMUNICATION",
+            base: 55,
+            confidence: 0.88,
+            reasons: ["external_communication"]
+        };
+    }
+    if (/booking|reservation|appointment|order mutation|createorder|cancelorder|business mutation/.test(text)) {
+        return {
+            effectClass: "EXTERNAL_BUSINESS_MUTATION",
+            base: 65,
+            confidence: 0.86,
+            reasons: ["external_business_mutation"]
+        };
+    }
+    if (/putobject|deleteobject|uploadfile|uploadobject|object storage|blob/.test(text)) {
+        return {
+            effectClass: "STORAGE_MUTATION",
+            base: 50,
+            confidence: 0.82,
+            reasons: ["storage_mutation"]
+        };
+    }
+    if (/writefile|appendfile|unlink|rename|local filesystem|file_write/.test(text)) {
+        return {
+            effectClass: "LOCAL_MUTATION",
+            base: 25,
+            confidence: 0.86,
+            reasons: ["local_mutation"]
+        };
+    }
+    if (/http_write|http_delete|http request|shell|computer|browser|code execution|execute command/.test(text)) {
+        return {
+            effectClass: "DYNAMIC_EXECUTION",
+            base: 55,
+            confidence: 0.58,
+            reasons: ["dynamic_or_generic_execution"]
+        };
+    }
+    if (/\b(get|list|read|search|fetch|lookup|inspect|query)\b|read_only/.test(text)) {
+        return {
+            effectClass: "READ_ONLY",
+            base: 4,
+            confidence: 0.66,
+            reasons: ["read_semantics"]
+        };
+    }
+    if (/summar|generate|reason|classify|translate|generation/.test(text)) {
+        return {
+            effectClass: "GENERATION_ONLY",
+            base: 4,
+            confidence: 0.64,
+            reasons: ["generation_semantics"]
+        };
+    }
+    return {
+        effectClass: "UNKNOWN",
+        base: 50,
+        confidence: 0.25,
+        reasons: ["insufficient_effect_evidence"]
+    };
+}
+export function assessToolImportance(input) {
+    const inferred = inferEffect(input);
+    const text = [
+        input.name,
+        input.description ?? "",
+        input.sourceCategory ?? ""
+    ].join(" ").toLowerCase();
+    let criticality = inferred.base;
+    const criticalityReasons = [...inferred.reasons];
+    if (inferred.effectClass !== "READ_ONLY" &&
+        inferred.effectClass !== "GENERATION_ONLY" &&
+        /irreversible|destructive|destroy|purge|terminate|drop\b/.test(text)) {
+        criticality += 15;
+        criticalityReasons.push("irreversible_or_destructive");
+    }
+    if (/bulk|batch|all records|multi-record/.test(text)) {
+        criticality += 10;
+        criticalityReasons.push("bulk_scope");
+    }
+    if (inferred.effectClass === "QUEUE_EVENT_MUTATION") {
+        criticality += 8;
+        criticalityReasons.push("downstream_fanout");
+    }
+    criticality = clamp(criticality);
+    const qualification = input.qualification ??
+        inferredQualification(inferred.effectClass);
+    const protection = input.protection ?? "NONE";
+    let priority = criticality +
+        evidenceAdjustment[input.evidence] +
+        protectionAdjustment[protection];
+    const actionReasons = [
+        `evidence_${input.evidence.toLowerCase()}`,
+        `protection_${protection.toLowerCase()}`
+    ];
+    switch (qualification) {
+        case "QUALIFIED":
+            priority += 15;
+            actionReasons.push("once_qualified");
+            break;
+        case "REVIEW_REQUIRED":
+            priority += 5;
+            actionReasons.push("qualification_review_required");
+            break;
+        case "UNKNOWN":
+            priority += 5;
+            actionReasons.push("qualification_unknown");
+            break;
+        case "UNLIKELY":
+            priority -= 20;
+            actionReasons.push("once_unlikely");
+            break;
+        case "NOT_APPLICABLE":
+            priority = Math.min(priority, 15);
+            actionReasons.push("once_not_applicable");
+            break;
+    }
+    priority = clamp(priority);
+    return {
+        effectClass: inferred.effectClass,
+        criticality: {
+            score: criticality,
+            band: criticalityBand(criticality),
+            confidence: inferred.confidence,
+            reasons: criticalityReasons
+        },
+        qualification,
+        actionPriority: {
+            score: priority,
+            band: actionBand(priority),
+            reasons: actionReasons
+        },
+        protection,
+        protectedCritical: protection === "ONCE_HEALTHY" &&
+            criticality >= 70
+    };
+}
+//# sourceMappingURL=tool-importance.js.map

package/dist/tool-importance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-importance.js","sourceRoot":"","sources":["../src/tool-importance.ts"],"names":[],"mappings":"AAqFA,MAAM,kBAAkB,GAAsC;IAC5D,QAAQ,EAAE,EAAE;IACZ,aAAa,EAAE,EAAE;IACjB,kBAAkB,EAAE,CAAC;IACrB,oBAAoB,EAAE,CAAC;IACvB,eAAe,EAAE,CAAC;IAClB,iBAAiB,EAAE,CAAC;IACpB,kBAAkB,EAAE,CAAC,EAAE;CACxB,CAAC;AAEF,MAAM,oBAAoB,GAAwC;IAChE,IAAI,EAAE,EAAE;IACR,kBAAkB,EAAE,CAAC,CAAC;IACtB,4BAA4B,EAAE,CAAC,EAAE;IACjC,YAAY,EAAE,CAAC,EAAE;IACjB,eAAe,EAAE,CAAC;CACnB,CAAC;AAEF,SAAS,KAAK,CACZ,KAAa,EACb,OAAO,GAAG,CAAC,EACX,OAAO,GAAG,GAAG;IAEb,OAAO,IAAI,CAAC,GAAG,CACb,OAAO,EACP,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CACzB,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,KAAa;IAEb,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CACjB,KAAa;IAEb,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,cAAc,CAAC;IACvC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,kBAAkB,CAAC;IAC3C,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IAClC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IACjC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IAClC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,qBAAqB,CAC5B,WAA4B;IAE5B,QAAQ,WAAW,EAAE,CAAC;QACpB,KAAK,WAAW,CAAC;QACjB,KAAK,iBAAiB;YACpB,OAAO,gBAAgB,CAAC;QAC1B,KAAK,SAAS,CAAC;QACf,KAAK,mBAAmB;YACtB,OAAO,SAAS,CAAC;QACnB,KAAK,gBAAgB;YACnB,OAAO,UAAU,CAAC;QACpB;YACE,OAAO,iBAAiB,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,KAA0B;IAO1B,MAAM,IAAI,GAAG;QACX,KAAK,CAAC,IAAI;QACV,KAAK,CAAC,WAAW,IAAI,EAAE;QACvB,KAAK,CAAC,cAAc,IAAI,EAAE;KAC3B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAE1B,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO;YACL,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,CAAC;YACP,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,gBAAgB,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED,IACE,uIAAuI,CAAC,IAAI,CAAC,IAAI,CAAC,EAClJ,CAAC;QACD,OAAO;YACL,WAAW,EAAE,mBAAmB;YAChC,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,kCAAkC,CAAC;SAC9C,CAAC;IACJ,CAAC;IAED,IACE,iFAAiF,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5F,CAAC;QACD,OAAO;YACL,WAAW,EAAE,gBAAgB;YAC7B,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,gBAAgB,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED,IACE,4KAA4K,CAAC,IAAI,CAAC,IAAI,CAAC,EACvL,CAAC;QACD,OAAO;YACL,WAAW,EAAE,0BAA0B;YACvC,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,CAAC,iCAAiC,CAAC;SAC7C,CAAC;IACJ,CAAC;IAED,IACE,4EAA4E,CAAC,IAAI,CAAC,IAAI,CAAC,EACvF,CAAC;QACD,OAAO;YACL,WAAW,EAAE,2BAA2B;YACxC,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,qCAAqC,CAAC;SACjD,CAAC;IACJ,CAAC;IAED,IACE,4HAA4H,CAAC,IAAI,CAAC,IAAI,CAAC,EACvI,CAAC;QACD,OAAO;YACL,WAAW,EAAE,0BAA0B;YACvC,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,0BAA0B,CAAC;SACtC,CAAC;IACJ,CAAC;IAED,IACE,2FAA2F,CAAC,IAAI,CAAC,IAAI,CAAC,EACtG,CAAC;QACD,OAAO;YACL,WAAW,EAAE,mBAAmB;YAChC,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,mBAAmB,CAAC;SAC/B,CAAC;IACJ,CAAC;IAED,IACE,qEAAqE,CAAC,IAAI,CAAC,IAAI,CAAC,EAChF,CAAC;QACD,OAAO;YACL,WAAW,EAAE,sBAAsB;YACnC,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,yBAAyB,CAAC;SACrC,CAAC;IACJ,CAAC;IAED,IACE,4FAA4F,CAAC,IAAI,CAAC,IAAI,CAAC,EACvG,CAAC;QACD,OAAO;YACL,WAAW,EAAE,wBAAwB;YACrC,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,wBAAwB,CAAC;SACpC,CAAC;IACJ,CAAC;IAED,IACE,0FAA0F,CAAC,IAAI,CAAC,IAAI,CAAC,EACrG,CAAC;QACD,OAAO;YACL,WAAW,EAAE,4BAA4B;YACzC,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,4BAA4B,CAAC;SACxC,CAAC;IACJ,CAAC;IAED,IACE,oEAAoE,CAAC,IAAI,CAAC,IAAI,CAAC,EAC/E,CAAC;QACD,OAAO;YACL,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,kBAAkB,CAAC;SAC9B,CAAC;IACJ,CAAC;IAED,IACE,gEAAgE,CAAC,IAAI,CAAC,IAAI,CAAC,EAC3E,CAAC;QACD,OAAO;YACL,WAAW,EAAE,gBAAgB;YAC7B,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,gBAAgB,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED,IACE,2FAA2F,CAAC,IAAI,CAAC,IAAI,CAAC,EACtG,CAAC;QACD,OAAO;YACL,WAAW,EAAE,mBAAmB;YAChC,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,8BAA8B,CAAC;SAC1C,CAAC;IACJ,CAAC;IAED,IACE,iEAAiE,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5E,CAAC;QACD,OAAO;YACL,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,CAAC;YACP,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,gBAAgB,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED,IACE,sDAAsD,CAAC,IAAI,CAAC,IAAI,CAAC,EACjE,CAAC;QACD,OAAO;YACL,WAAW,EAAE,iBAAiB;YAC9B,IAAI,EAAE,CAAC;YACP,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,sBAAsB,CAAC;SAClC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,EAAE;QACR,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,CAAC,8BAA8B,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAA0B;IAE1B,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG;QACX,KAAK,CAAC,IAAI;QACV,KAAK,CAAC,WAAW,IAAI,EAAE;QACvB,KAAK,CAAC,cAAc,IAAI,EAAE;KAC3B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAE1B,IAAI,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC;IAChC,MAAM,kBAAkB,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEjD,IACE,QAAQ,CAAC,WAAW,KAAK,WAAW;QACpC,QAAQ,CAAC,WAAW,KAAK,iBAAiB;QAC1C,yDAAyD,CAAC,IAAI,CAAC,IAAI,CAAC,EACpE,CAAC;QACD,WAAW,IAAI,EAAE,CAAC;QAClB,kBAAkB,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACzD,CAAC;IAED,IACE,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,EAChD,CAAC;QACD,WAAW,IAAI,EAAE,CAAC;QAClB,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IAED,IACE,QAAQ,CAAC,WAAW,KAAK,sBAAsB,EAC/C,CAAC;QACD,WAAW,IAAI,CAAC,CAAC;QACjB,kBAAkB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC/C,CAAC;IAED,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;IAEjC,MAAM,aAAa,GACjB,KAAK,CAAC,aAAa;QACnB,qBAAqB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE9C,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC;IAE7B,IAAI,QAAQ,GACV,WAAW;QACX,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC;QAClC,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAEnC,MAAM,aAAa,GAAa;QAC9B,YAAY,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE;QAC1C,cAAc,UAAU,CAAC,WAAW,EAAE,EAAE;KACzC,CAAC;IAEF,QAAQ,aAAa,EAAE,CAAC;QACtB,KAAK,WAAW;YACd,QAAQ,IAAI,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACrC,MAAM;QACR,KAAK,iBAAiB;YACpB,QAAQ,IAAI,CAAC,CAAC;YACd,aAAa,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YACpD,MAAM;QACR,KAAK,SAAS;YACZ,QAAQ,IAAI,CAAC,CAAC;YACd,aAAa,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAC5C,MAAM;QACR,KAAK,UAAU;YACb,QAAQ,IAAI,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpC,MAAM;QACR,KAAK,gBAAgB;YACnB,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAClC,aAAa,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAC1C,MAAM;IACV,CAAC;IAED,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE3B,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,WAAW,EAAE;YACX,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC;YAClC,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,OAAO,EAAE,kBAAkB;SAC5B;QACD,aAAa;QACb,cAAc,EAAE;YACd,KAAK,EAAE,QAAQ;YACf,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC;YAC1B,OAAO,EAAE,aAAa;SACvB;QACD,UAAU;QACV,iBAAiB,EACf,UAAU,KAAK,cAAc;YAC7B,WAAW,IAAI,EAAE;KACpB,CAAC;AACJ,CAAC"}

package/dist/tool-report.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDiscoveryResult } from "./tool-discovery.js";
+export declare function printToolDiscoveryReport(result: ToolDiscoveryResult): void;
+//# sourceMappingURL=tool-report.d.ts.map

package/dist/tool-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-report.d.ts","sourceRoot":"","sources":["../src/tool-report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,mBAAmB,EAEpB,MAAM,qBAAqB,CAAC;AAiD7B,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,mBAAmB,GAC1B,IAAI,CAuGN"}

package/dist/tool-report.js

@@ -0,0 +1,75 @@
+function printConfiguredSource(source) {
+    console.log(`  ${source.scope.padEnd(7)} ${source.host}/${source.name}  ${source.transport}  ${source.status}`);
+    console.log(`           ${source.configPath}`);
+}
+function printTool(tool) {
+    const priority = tool.once.actionPriority.score
+        .toString()
+        .padStart(3, " ");
+    const importance = tool.once.criticality.band;
+    console.log(`  ${priority}  ${importance}  ${tool.canonicalName}  ${tool.evidence.level}  ${tool.once.qualification}`);
+    console.log(`       ${tool.once.effectClass} · ${tool.source.file}${tool.source.line ? `:${tool.source.line}` : ""}`);
+}
+function section(title, tools) {
+    if (tools.length === 0) {
+        return;
+    }
+    console.log("");
+    console.log(title);
+    console.log("-".repeat(title.length));
+    for (const tool of tools) {
+        printTool(tool);
+    }
+}
+export function printToolDiscoveryReport(result) {
+    console.log("");
+    console.log("TOOL DISCOVERY");
+    console.log("--------------");
+    console.log("Mode: local + read-only");
+    console.log("External MCP servers contacted: no");
+    console.log("Unknown local server commands launched: no");
+    console.log("Secret values retained: no");
+    console.log(`Configured MCP sources: ${result.configuredSources.length}`);
+    console.log(`Source-discovered tools/capabilities: ${result.tools.length}`);
+    if (result.configuredSources.length > 0) {
+        console.log("");
+        console.log("CONFIGURED TOOL SOURCES");
+        console.log("-----------------------");
+        for (const source of result.configuredSources) {
+            printConfiguredSource(source);
+        }
+        console.log("");
+        console.log("Configured servers are not treated as authoritative tool inventories until a later trusted tools/list probe.");
+    }
+    console.log("");
+    console.log("TOOL SAFETY PRIORITY");
+    console.log("--------------------");
+    if (result.tools.length === 0) {
+        console.log("No source-level tool or consequential-operation candidates were discovered.");
+        console.log("This does not prove the environment has no tools; runtime and authoritative MCP discovery are later phases.");
+        return;
+    }
+    const criticalGaps = result.tools.filter(tool => !tool.once.protectedCritical &&
+        tool.once.actionPriority.band === "CRITICAL_GAP");
+    const highPriority = result.tools.filter(tool => !tool.once.protectedCritical &&
+        tool.once.actionPriority.band === "PROTECT_PRIORITY");
+    const qualify = result.tools.filter(tool => !tool.once.protectedCritical &&
+        tool.once.actionPriority.band === "QUALIFY");
+    const review = result.tools.filter(tool => !tool.once.protectedCritical &&
+        tool.once.actionPriority.band === "REVIEW");
+    const observe = result.tools.filter(tool => !tool.once.protectedCritical &&
+        tool.once.actionPriority.band === "OBSERVE");
+    const bypass = result.tools.filter(tool => !tool.once.protectedCritical &&
+        tool.once.actionPriority.band === "BYPASS");
+    const protectedCritical = result.tools.filter(tool => tool.once.protectedCritical);
+    section("CRITICAL GAPS", criticalGaps);
+    section("HIGH PRIORITY", highPriority);
+    section("QUALIFY", qualify);
+    section("REVIEW", review);
+    section("OBSERVE", observe);
+    section("BYPASS / READ-ONLY", bypass);
+    section("PROTECTED CRITICAL", protectedCritical);
+    console.log("");
+    console.log("Importance orders attention only. It does not authorize execution or protection. The Once four-condition test remains the qualification gate.");
+}
+//# sourceMappingURL=tool-report.js.map

package/dist/tool-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-report.js","sourceRoot":"","sources":["../src/tool-report.ts"],"names":[],"mappings":"AAMA,SAAS,qBAAqB,CAC5B,MAA4B;IAE5B,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,MAAM,EAAE,CACnG,CAAC;IACF,OAAO,CAAC,GAAG,CACT,cAAc,MAAM,CAAC,UAAU,EAAE,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,IAAqB;IAErB,MAAM,QAAQ,GACZ,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK;SAC3B,QAAQ,EAAE;SACV,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAEtB,MAAM,UAAU,GACd,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAE7B,OAAO,CAAC,GAAG,CACT,KAAK,QAAQ,KAAK,UAAU,KAAK,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAC1G,CAAC;IACF,OAAO,CAAC,GAAG,CACT,UAAU,IAAI,CAAC,IAAI,CAAC,WAAW,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACzG,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CACd,KAAa,EACb,KAAwB;IAExB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,SAAS,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,MAA2B;IAE3B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC9B,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC9B,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CACT,2BAA2B,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAC7D,CAAC;IACF,OAAO,CAAC,GAAG,CACT,yCAAyC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAC/D,CAAC;IAEF,IAAI,MAAM,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAEvC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC9C,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CACT,8GAA8G,CAC/G,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAEpC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CACT,6EAA6E,CAC9E,CAAC;QACF,OAAO,CAAC,GAAG,CACT,6GAA6G,CAC9G,CAAC;QACF,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAChB,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,IAAI,CAAC,EAAE,CACL,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;QAC5B,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,cAAc,CACnD,CAAC;IAEJ,MAAM,YAAY,GAChB,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,IAAI,CAAC,EAAE,CACL,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;QAC5B,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,kBAAkB,CACvD,CAAC;IAEJ,MAAM,OAAO,GACX,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,IAAI,CAAC,EAAE,CACL,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;QAC5B,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,SAAS,CAC9C,CAAC;IAEJ,MAAM,MAAM,GACV,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,IAAI,CAAC,EAAE,CACL,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;QAC5B,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,QAAQ,CAC7C,CAAC;IAEJ,MAAM,OAAO,GACX,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,IAAI,CAAC,EAAE,CACL,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;QAC5B,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,SAAS,CAC9C,CAAC;IAEJ,MAAM,MAAM,GACV,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,IAAI,CAAC,EAAE,CACL,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;QAC5B,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,QAAQ,CAC7C,CAAC;IAEJ,MAAM,iBAAiB,GACrB,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CACpC,CAAC;IAEJ,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IACvC,OAAO,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;IACvC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1B,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;IACtC,OAAO,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAC;IAEjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,+IAA+I,CAChJ,CAAC;AACJ,CAAC"}

package/dist/vercel-execution-observer.d.ts

@@ -0,0 +1,12 @@
+import { type ToolExecutionObservation } from "./execution-observation.js";
+import type { VercelAiSdkModelVisibleToolSnapshot } from "./runtime-tool-discovery.js";
+/**
+ * Convert an already-emitted Vercel AI SDK step result into Once EXECUTED
+ * observations. This helper never calls a model, provider, tool or callback.
+ *
+ * Only entries present in `toolResults` establish execution evidence. A
+ * `toolCalls` entry without a result is model intent, not proof of execution.
+ * Tool arguments and tool results are deliberately ignored.
+ */
+export declare function observeVercelAiSdkStepExecutions(stepResult: unknown, visibleSnapshot: VercelAiSdkModelVisibleToolSnapshot): readonly ToolExecutionObservation[];
+//# sourceMappingURL=vercel-execution-observer.d.ts.map

package/dist/vercel-execution-observer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-execution-observer.d.ts","sourceRoot":"","sources":["../src/vercel-execution-observer.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAEV,mCAAmC,EACpC,MAAM,6BAA6B,CAAC;AAwDrC;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,CAC9C,UAAU,EAAE,OAAO,EACnB,eAAe,EAAE,mCAAmC,GACnD,SAAS,wBAAwB,EAAE,CA6CrC"}

package/dist/vercel-execution-observer.js

@@ -0,0 +1,97 @@
+import { executionToolFingerprint, observeToolExecution, } from "./execution-observation.js";
+function asRecord(value) {
+    return value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function ownDataValue(value, key) {
+    const record = asRecord(value);
+    if (!record)
+        return undefined;
+    const descriptor = Object.getOwnPropertyDescriptor(record, key);
+    return descriptor && "value" in descriptor
+        ? descriptor.value
+        : undefined;
+}
+function ownString(value, key) {
+    const raw = ownDataValue(value, key);
+    return typeof raw === "string" && raw.trim() !== ""
+        ? raw
+        : undefined;
+}
+function arrayData(value, key) {
+    const raw = ownDataValue(value, key);
+    return Array.isArray(raw) ? raw : [];
+}
+function toolMap(snapshot) {
+    const map = new Map();
+    for (const tool of snapshot.tools) {
+        const current = map.get(tool.canonicalName);
+        if (current === undefined) {
+            map.set(tool.canonicalName, tool);
+        }
+        else {
+            // Fail closed if a malformed/custom snapshot contains duplicate names.
+            map.set(tool.canonicalName, null);
+        }
+    }
+    return map;
+}
+function statusFromResult(result) {
+    const isError = ownDataValue(result, "isError");
+    if (isError === true)
+        return "FAILED";
+    if (isError === false)
+        return "SUCCEEDED";
+    return "UNKNOWN";
+}
+/**
+ * Convert an already-emitted Vercel AI SDK step result into Once EXECUTED
+ * observations. This helper never calls a model, provider, tool or callback.
+ *
+ * Only entries present in `toolResults` establish execution evidence. A
+ * `toolCalls` entry without a result is model intent, not proof of execution.
+ * Tool arguments and tool results are deliberately ignored.
+ */
+export function observeVercelAiSdkStepExecutions(stepResult, visibleSnapshot) {
+    const visible = toolMap(visibleSnapshot);
+    const calls = arrayData(stepResult, "toolCalls");
+    const results = arrayData(stepResult, "toolResults");
+    const callNameById = new Map();
+    for (const call of calls) {
+        const toolCallId = ownString(call, "toolCallId");
+        const toolName = ownString(call, "toolName");
+        if (toolCallId && toolName) {
+            callNameById.set(toolCallId, toolName);
+        }
+    }
+    const observations = [];
+    const now = new Date().toISOString();
+    for (const result of results) {
+        const toolCallId = ownString(result, "toolCallId");
+        const explicitName = ownString(result, "toolName");
+        const toolName = explicitName ?? (toolCallId ? callNameById.get(toolCallId) : undefined);
+        if (!toolName)
+            continue;
+        const tool = visible.get(toolName);
+        if (!tool)
+            continue;
+        const observed = observeToolExecution({
+            ...(toolCallId ? { eventId: `vercel-tool-call:${toolCallId}` } : {}),
+            toolId: tool.toolId,
+            namespacedName: tool.namespacedName,
+            descriptorFingerprint: executionToolFingerprint(tool),
+            canonicalName: tool.canonicalName,
+            framework: "vercel-ai-sdk",
+            runtimeName: visibleSnapshot.runtimeName,
+            source: "framework_callback",
+            status: statusFromResult(result),
+            observedAt: now,
+        });
+        if (observed.accepted) {
+            observations.push(observed.event);
+        }
+    }
+    return Object.freeze(observations);
+}
+//# sourceMappingURL=vercel-execution-observer.js.map

package/dist/vercel-execution-observer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-execution-observer.js","sourceRoot":"","sources":["../src/vercel-execution-observer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,oBAAoB,GAErB,MAAM,4BAA4B,CAAC;AAQpC,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAC,KAAmB;QACrB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,GAAW;IAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChE,OAAO,UAAU,IAAI,OAAO,IAAI,UAAU;QACxC,CAAC,CAAC,UAAU,CAAC,KAAK;QAClB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,GAAW;IAC5C,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QACjD,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,GAAW;IAC5C,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,OAAO,CACd,QAA6C;IAE7C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAyC,CAAC;IAE7D,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,uEAAuE;YACvE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAe;IACvC,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC;IAC1C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gCAAgC,CAC9C,UAAmB,EACnB,eAAoD;IAEpD,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,IAAI,UAAU,IAAI,QAAQ,EAAE,CAAC;YAC3B,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAA+B,EAAE,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,YAAY,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACzF,IAAI,CAAC,QAAQ;YAAE,SAAS;QAExB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,MAAM,QAAQ,GAAG,oBAAoB,CAAC;YACpC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,oBAAoB,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,qBAAqB,EAAE,wBAAwB,CAAC,IAAI,CAAC;YACrD,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,SAAS,EAAE,eAAe;YAC1B,WAAW,EAAE,eAAe,CAAC,WAAW;YACxC,MAAM,EAAE,oBAAoB;YAC5B,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC;YAChC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AACrC,CAAC"}

package/dist-cjs/connect/identity.js

@@ -0,0 +1,162 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveConnectToolOperationIdentity = resolveConnectToolOperationIdentity;
+const node_crypto_1 = require("node:crypto");
+const binding_js_1 = require("./binding.js");
+const INPUT_FIELDS = [
+    { key: "once_operation_id", source: "input:once_operation_id" },
+    { key: "onceOperationId", source: "input:onceOperationId" },
+    { key: "operation_id", source: "input:operation_id" },
+    { key: "operationId", source: "input:operationId" },
+    { key: "idempotency_key", source: "input:idempotency_key" },
+    { key: "idempotencyKey", source: "input:idempotencyKey" },
+    { key: "intent_id", source: "input:intent_id" },
+    { key: "intentId", source: "input:intentId" },
+    { key: "intent_key", source: "input:intent_key" },
+    { key: "intentKey", source: "input:intentKey" },
+];
+function cleanString(value) {
+    if (typeof value !== "string") {
+        return null;
+    }
+    const cleaned = value.trim();
+    return cleaned.length > 0 ? cleaned : null;
+}
+function plainObject(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        return null;
+    }
+    const objectValue = value;
+    const prototype = Object.getPrototypeOf(objectValue);
+    if (prototype !== Object.prototype && prototype !== null) {
+        return null;
+    }
+    return objectValue;
+}
+function metadataIdentityFields(tool) {
+    const meta = plainObject(tool._meta);
+    if (!meta) {
+        return null;
+    }
+    const once = plainObject(meta.once);
+    if (!once || !Array.isArray(once.identityFields)) {
+        return null;
+    }
+    const fields = once.identityFields;
+    if (fields.length === 0 ||
+        fields.some(field => typeof field !== "string" ||
+            field.trim().length === 0 ||
+            field.includes("."))) {
+        return null;
+    }
+    return Object.freeze(fields.map(field => field.trim()));
+}
+function metadataIdentityCandidate(tool, input) {
+    const fields = metadataIdentityFields(tool);
+    if (!fields) {
+        return null;
+    }
+    const identity = {};
+    for (const field of fields) {
+        if (!(field in input)) {
+            return null;
+        }
+        const value = input[field];
+        if (value === undefined) {
+            return null;
+        }
+        identity[field] = value;
+    }
+    try {
+        return {
+            source: "meta:identity_fields",
+            value: (0, binding_js_1.canonicalizeConnectPayload)(identity),
+        };
+    }
+    catch {
+        return null;
+    }
+}
+function buildOperationId(toolName, identity) {
+    const hash = (0, node_crypto_1.createHash)("sha256");
+    hash.update("once-connect-id-v1\u0000", "utf8");
+    for (const value of [toolName, identity]) {
+        const bytes = Buffer.from(value, "utf8");
+        const length = Buffer.allocUnsafe(4);
+        length.writeUInt32BE(bytes.length, 0);
+        hash.update(length);
+        hash.update(bytes);
+    }
+    const prefix = toolName
+        .toLowerCase()
+        .replace(/[^a-z0-9._:-]+/g, "-")
+        .replace(/^[^a-z0-9]+/, "")
+        .replace(/-+$/g, "")
+        .slice(0, 48) || "tool";
+    return `${prefix}:${hash.digest("hex").slice(0, 32)}`;
+}
+function resolveConnectToolOperationIdentity(request) {
+    if (!request ||
+        !request.tool ||
+        typeof request.tool.name !== "string" ||
+        request.tool.name.trim().length === 0) {
+        return Object.freeze({
+            status: "REQUIRED",
+            reason: "A stable tool name is required before operation identity can be resolved.",
+        });
+    }
+    const input = plainObject(request.input);
+    if (!input) {
+        return Object.freeze({
+            status: "REQUIRED",
+            reason: "Parsed plain-object tool input is required before operation identity can be resolved.",
+        });
+    }
+    const candidates = [];
+    const explicit = cleanString(request.explicitIdentity);
+    if (explicit) {
+        candidates.push({
+            source: "explicit",
+            value: explicit,
+        });
+    }
+    for (const field of INPUT_FIELDS) {
+        const value = cleanString(input[field.key]);
+        if (value) {
+            candidates.push({
+                source: field.source,
+                value,
+            });
+        }
+    }
+    if (candidates.length > 0) {
+        const values = Array.from(new Set(candidates.map(candidate => candidate.value)));
+        if (values.length !== 1) {
+            return Object.freeze({
+                status: "CONFLICT",
+                sources: Object.freeze(candidates.map(candidate => candidate.source)),
+                reason: "Stable identity carriers disagree. Once Connect refuses ambiguous logical-operation identity.",
+            });
+        }
+        return Object.freeze({
+            status: "FOUND",
+            operationId: buildOperationId(request.tool.name.trim(), values[0]),
+            source: candidates[0].source,
+            reason: "Stable logical-operation identity found and deterministically scoped to this tool.",
+        });
+    }
+    const metadataCandidate = metadataIdentityCandidate(request.tool, input);
+    if (metadataCandidate) {
+        return Object.freeze({
+            status: "FOUND",
+            operationId: buildOperationId(request.tool.name.trim(), metadataCandidate.value),
+            source: metadataCandidate.source,
+            reason: "Tool metadata declared the input fields that define stable logical-operation identity.",
+        });
+    }
+    return Object.freeze({
+        status: "REQUIRED",
+        reason: "No trustworthy stable identity carrier was found. Once Connect refuses to guess from the full payload.",
+    });
+}
+//# sourceMappingURL=identity.js.map