@once-agent/sdk 0.1.11 → 0.1.12

package/dist-cjs/tool-importance.js

@@ -0,0 +1,272 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assessToolImportance = assessToolImportance;
+const evidenceAdjustment = {
+    EXECUTED: 15,
+    MODEL_VISIBLE: 10,
+    RUNTIME_REGISTERED: 7,
+    SERVER_AUTHORITATIVE: 4,
+    HOST_CONFIGURED: 2,
+    SOURCE_DISCOVERED: 0,
+    REGISTRY_CANDIDATE: -30
+};
+const protectionAdjustment = {
+    NONE: 10,
+    NATIVE_IDEMPOTENCY: -5,
+    AUTHORITATIVE_RECONCILIATION: -15,
+    ONCE_HEALTHY: -35,
+    ONCE_UNVERIFIED: 0
+};
+function clamp(value, minimum = 0, maximum = 100) {
+    return Math.max(minimum, Math.min(maximum, value));
+}
+function criticalityBand(score) {
+    if (score >= 85)
+        return "I5";
+    if (score >= 70)
+        return "I4";
+    if (score >= 50)
+        return "I3";
+    if (score >= 30)
+        return "I2";
+    if (score >= 10)
+        return "I1";
+    return "I0";
+}
+function actionBand(score) {
+    if (score >= 95)
+        return "CRITICAL_GAP";
+    if (score >= 80)
+        return "PROTECT_PRIORITY";
+    if (score >= 60)
+        return "QUALIFY";
+    if (score >= 40)
+        return "REVIEW";
+    if (score >= 20)
+        return "OBSERVE";
+    return "BYPASS";
+}
+function inferredQualification(effectClass) {
+    switch (effectClass) {
+        case "READ_ONLY":
+        case "GENERATION_ONLY":
+            return "NOT_APPLICABLE";
+        case "UNKNOWN":
+        case "DYNAMIC_EXECUTION":
+            return "UNKNOWN";
+        case "LOCAL_MUTATION":
+            return "UNLIKELY";
+        default:
+            return "REVIEW_REQUIRED";
+    }
+}
+function inferEffect(input) {
+    const text = [
+        input.name,
+        input.description ?? "",
+        input.sourceCategory ?? ""
+    ].join(" ").toLowerCase();
+    if (input.readOnlyHint === true) {
+        return {
+            effectClass: "READ_ONLY",
+            base: 5,
+            confidence: 0.78,
+            reasons: ["read_only_hint"]
+        };
+    }
+    if (/terraform\s*(destroy|apply)|kubectl.*(?:delete|apply)|destroy.*(?:prod|production)|(?:prod|production).*(?:destroy|delete|purge|drop)/.test(text)) {
+        return {
+            effectClass: "DESTRUCTIVE_ADMIN",
+            base: 95,
+            confidence: 0.94,
+            reasons: ["destructive_production_operation"]
+        };
+    }
+    if (/refund|charge|payment|payout|transfer|capture.*(?:card|payment)|money|financial/.test(text)) {
+        return {
+            effectClass: "MONEY_MOVEMENT",
+            base: 90,
+            confidence: 0.93,
+            reasons: ["money_movement"]
+        };
+    }
+    if (/grant.*(?:admin|role|permission)|revoke.*(?:access|role|permission)|rotate.*(?:key|credential|secret)|deleteuser|disableuser|identity|iam|security policy|account mutation/.test(text)) {
+        return {
+            effectClass: "IDENTITY_ACCESS_SECURITY",
+            base: 90,
+            confidence: 0.9,
+            reasons: ["identity_access_security_change"]
+        };
+    }
+    if (/deploy|production|terraform|kubectl|helm|cloudformation|dns|infrastructure/.test(text)) {
+        return {
+            effectClass: "PRODUCTION_INFRASTRUCTURE",
+            base: 85,
+            confidence: 0.84,
+            reasons: ["production_or_infrastructure_change"]
+        };
+    }
+    if (/merge.*pull|pull.*merge|git.*push|create.*tag|publish.*release|repository|github.*(?:create|update|delete)|code_repository/.test(text)) {
+        return {
+            effectClass: "CODE_REPOSITORY_MUTATION",
+            base: 72,
+            confidence: 0.82,
+            reasons: ["code_repository_mutation"]
+        };
+    }
+    if (/database|prisma|insert|upsert|sql.*(?:update|delete|insert)|delete.*record|update.*record/.test(text)) {
+        return {
+            effectClass: "DATABASE_MUTATION",
+            base: 62,
+            confidence: 0.82,
+            reasons: ["database_mutation"]
+        };
+    }
+    if (/queue|kafka|sns|sqs|pubsub|enqueue|publish.*event|event publication/.test(text)) {
+        return {
+            effectClass: "QUEUE_EVENT_MUTATION",
+            base: 60,
+            confidence: 0.82,
+            reasons: ["queue_or_event_mutation"]
+        };
+    }
+    if (/sendmail|sendemail|sendmessage|sendsms|postmessage|email|sms|slack|teams|discord|messaging/.test(text)) {
+        return {
+            effectClass: "EXTERNAL_COMMUNICATION",
+            base: 55,
+            confidence: 0.88,
+            reasons: ["external_communication"]
+        };
+    }
+    if (/booking|reservation|appointment|order mutation|createorder|cancelorder|business mutation/.test(text)) {
+        return {
+            effectClass: "EXTERNAL_BUSINESS_MUTATION",
+            base: 65,
+            confidence: 0.86,
+            reasons: ["external_business_mutation"]
+        };
+    }
+    if (/putobject|deleteobject|uploadfile|uploadobject|object storage|blob/.test(text)) {
+        return {
+            effectClass: "STORAGE_MUTATION",
+            base: 50,
+            confidence: 0.82,
+            reasons: ["storage_mutation"]
+        };
+    }
+    if (/writefile|appendfile|unlink|rename|local filesystem|file_write/.test(text)) {
+        return {
+            effectClass: "LOCAL_MUTATION",
+            base: 25,
+            confidence: 0.86,
+            reasons: ["local_mutation"]
+        };
+    }
+    if (/http_write|http_delete|http request|shell|computer|browser|code execution|execute command/.test(text)) {
+        return {
+            effectClass: "DYNAMIC_EXECUTION",
+            base: 55,
+            confidence: 0.58,
+            reasons: ["dynamic_or_generic_execution"]
+        };
+    }
+    if (/\b(get|list|read|search|fetch|lookup|inspect|query)\b|read_only/.test(text)) {
+        return {
+            effectClass: "READ_ONLY",
+            base: 4,
+            confidence: 0.66,
+            reasons: ["read_semantics"]
+        };
+    }
+    if (/summar|generate|reason|classify|translate|generation/.test(text)) {
+        return {
+            effectClass: "GENERATION_ONLY",
+            base: 4,
+            confidence: 0.64,
+            reasons: ["generation_semantics"]
+        };
+    }
+    return {
+        effectClass: "UNKNOWN",
+        base: 50,
+        confidence: 0.25,
+        reasons: ["insufficient_effect_evidence"]
+    };
+}
+function assessToolImportance(input) {
+    const inferred = inferEffect(input);
+    const text = [
+        input.name,
+        input.description ?? "",
+        input.sourceCategory ?? ""
+    ].join(" ").toLowerCase();
+    let criticality = inferred.base;
+    const criticalityReasons = [...inferred.reasons];
+    if (inferred.effectClass !== "READ_ONLY" &&
+        inferred.effectClass !== "GENERATION_ONLY" &&
+        /irreversible|destructive|destroy|purge|terminate|drop\b/.test(text)) {
+        criticality += 15;
+        criticalityReasons.push("irreversible_or_destructive");
+    }
+    if (/bulk|batch|all records|multi-record/.test(text)) {
+        criticality += 10;
+        criticalityReasons.push("bulk_scope");
+    }
+    if (inferred.effectClass === "QUEUE_EVENT_MUTATION") {
+        criticality += 8;
+        criticalityReasons.push("downstream_fanout");
+    }
+    criticality = clamp(criticality);
+    const qualification = input.qualification ??
+        inferredQualification(inferred.effectClass);
+    const protection = input.protection ?? "NONE";
+    let priority = criticality +
+        evidenceAdjustment[input.evidence] +
+        protectionAdjustment[protection];
+    const actionReasons = [
+        `evidence_${input.evidence.toLowerCase()}`,
+        `protection_${protection.toLowerCase()}`
+    ];
+    switch (qualification) {
+        case "QUALIFIED":
+            priority += 15;
+            actionReasons.push("once_qualified");
+            break;
+        case "REVIEW_REQUIRED":
+            priority += 5;
+            actionReasons.push("qualification_review_required");
+            break;
+        case "UNKNOWN":
+            priority += 5;
+            actionReasons.push("qualification_unknown");
+            break;
+        case "UNLIKELY":
+            priority -= 20;
+            actionReasons.push("once_unlikely");
+            break;
+        case "NOT_APPLICABLE":
+            priority = Math.min(priority, 15);
+            actionReasons.push("once_not_applicable");
+            break;
+    }
+    priority = clamp(priority);
+    return {
+        effectClass: inferred.effectClass,
+        criticality: {
+            score: criticality,
+            band: criticalityBand(criticality),
+            confidence: inferred.confidence,
+            reasons: criticalityReasons
+        },
+        qualification,
+        actionPriority: {
+            score: priority,
+            band: actionBand(priority),
+            reasons: actionReasons
+        },
+        protection,
+        protectedCritical: protection === "ONCE_HEALTHY" &&
+            criticality >= 70
+    };
+}
+//# sourceMappingURL=tool-importance.js.map

package/dist-cjs/tool-importance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-importance.js","sourceRoot":"","sources":["../src/tool-importance.ts"],"names":[],"mappings":";;AAkVA,oDAmGC;AAhWD,MAAM,kBAAkB,GAAsC;IAC5D,QAAQ,EAAE,EAAE;IACZ,aAAa,EAAE,EAAE;IACjB,kBAAkB,EAAE,CAAC;IACrB,oBAAoB,EAAE,CAAC;IACvB,eAAe,EAAE,CAAC;IAClB,iBAAiB,EAAE,CAAC;IACpB,kBAAkB,EAAE,CAAC,EAAE;CACxB,CAAC;AAEF,MAAM,oBAAoB,GAAwC;IAChE,IAAI,EAAE,EAAE;IACR,kBAAkB,EAAE,CAAC,CAAC;IACtB,4BAA4B,EAAE,CAAC,EAAE;IACjC,YAAY,EAAE,CAAC,EAAE;IACjB,eAAe,EAAE,CAAC;CACnB,CAAC;AAEF,SAAS,KAAK,CACZ,KAAa,EACb,OAAO,GAAG,CAAC,EACX,OAAO,GAAG,GAAG;IAEb,OAAO,IAAI,CAAC,GAAG,CACb,OAAO,EACP,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CACzB,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,KAAa;IAEb,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CACjB,KAAa;IAEb,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,cAAc,CAAC;IACvC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,kBAAkB,CAAC;IAC3C,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IAClC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IACjC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IAClC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,qBAAqB,CAC5B,WAA4B;IAE5B,QAAQ,WAAW,EAAE,CAAC;QACpB,KAAK,WAAW,CAAC;QACjB,KAAK,iBAAiB;YACpB,OAAO,gBAAgB,CAAC;QAC1B,KAAK,SAAS,CAAC;QACf,KAAK,mBAAmB;YACtB,OAAO,SAAS,CAAC;QACnB,KAAK,gBAAgB;YACnB,OAAO,UAAU,CAAC;QACpB;YACE,OAAO,iBAAiB,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,KAA0B;IAO1B,MAAM,IAAI,GAAG;QACX,KAAK,CAAC,IAAI;QACV,KAAK,CAAC,WAAW,IAAI,EAAE;QACvB,KAAK,CAAC,cAAc,IAAI,EAAE;KAC3B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAE1B,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO;YACL,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,CAAC;YACP,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,gBAAgB,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED,IACE,uIAAuI,CAAC,IAAI,CAAC,IAAI,CAAC,EAClJ,CAAC;QACD,OAAO;YACL,WAAW,EAAE,mBAAmB;YAChC,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,kCAAkC,CAAC;SAC9C,CAAC;IACJ,CAAC;IAED,IACE,iFAAiF,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5F,CAAC;QACD,OAAO;YACL,WAAW,EAAE,gBAAgB;YAC7B,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,gBAAgB,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED,IACE,4KAA4K,CAAC,IAAI,CAAC,IAAI,CAAC,EACvL,CAAC;QACD,OAAO;YACL,WAAW,EAAE,0BAA0B;YACvC,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,CAAC,iCAAiC,CAAC;SAC7C,CAAC;IACJ,CAAC;IAED,IACE,4EAA4E,CAAC,IAAI,CAAC,IAAI,CAAC,EACvF,CAAC;QACD,OAAO;YACL,WAAW,EAAE,2BAA2B;YACxC,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,qCAAqC,CAAC;SACjD,CAAC;IACJ,CAAC;IAED,IACE,4HAA4H,CAAC,IAAI,CAAC,IAAI,CAAC,EACvI,CAAC;QACD,OAAO;YACL,WAAW,EAAE,0BAA0B;YACvC,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,0BAA0B,CAAC;SACtC,CAAC;IACJ,CAAC;IAED,IACE,2FAA2F,CAAC,IAAI,CAAC,IAAI,CAAC,EACtG,CAAC;QACD,OAAO;YACL,WAAW,EAAE,mBAAmB;YAChC,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,mBAAmB,CAAC;SAC/B,CAAC;IACJ,CAAC;IAED,IACE,qEAAqE,CAAC,IAAI,CAAC,IAAI,CAAC,EAChF,CAAC;QACD,OAAO;YACL,WAAW,EAAE,sBAAsB;YACnC,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,yBAAyB,CAAC;SACrC,CAAC;IACJ,CAAC;IAED,IACE,4FAA4F,CAAC,IAAI,CAAC,IAAI,CAAC,EACvG,CAAC;QACD,OAAO;YACL,WAAW,EAAE,wBAAwB;YACrC,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,wBAAwB,CAAC;SACpC,CAAC;IACJ,CAAC;IAED,IACE,0FAA0F,CAAC,IAAI,CAAC,IAAI,CAAC,EACrG,CAAC;QACD,OAAO;YACL,WAAW,EAAE,4BAA4B;YACzC,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,4BAA4B,CAAC;SACxC,CAAC;IACJ,CAAC;IAED,IACE,oEAAoE,CAAC,IAAI,CAAC,IAAI,CAAC,EAC/E,CAAC;QACD,OAAO;YACL,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,kBAAkB,CAAC;SAC9B,CAAC;IACJ,CAAC;IAED,IACE,gEAAgE,CAAC,IAAI,CAAC,IAAI,CAAC,EAC3E,CAAC;QACD,OAAO;YACL,WAAW,EAAE,gBAAgB;YAC7B,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,gBAAgB,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED,IACE,2FAA2F,CAAC,IAAI,CAAC,IAAI,CAAC,EACtG,CAAC;QACD,OAAO;YACL,WAAW,EAAE,mBAAmB;YAChC,IAAI,EAAE,EAAE;YACR,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,8BAA8B,CAAC;SAC1C,CAAC;IACJ,CAAC;IAED,IACE,iEAAiE,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5E,CAAC;QACD,OAAO;YACL,WAAW,EAAE,WAAW;YACxB,IAAI,EAAE,CAAC;YACP,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,gBAAgB,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED,IACE,sDAAsD,CAAC,IAAI,CAAC,IAAI,CAAC,EACjE,CAAC;QACD,OAAO;YACL,WAAW,EAAE,iBAAiB;YAC9B,IAAI,EAAE,CAAC;YACP,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,CAAC,sBAAsB,CAAC;SAClC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,EAAE;QACR,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,CAAC,8BAA8B,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAgB,oBAAoB,CAClC,KAA0B;IAE1B,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG;QACX,KAAK,CAAC,IAAI;QACV,KAAK,CAAC,WAAW,IAAI,EAAE;QACvB,KAAK,CAAC,cAAc,IAAI,EAAE;KAC3B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAE1B,IAAI,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC;IAChC,MAAM,kBAAkB,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEjD,IACE,QAAQ,CAAC,WAAW,KAAK,WAAW;QACpC,QAAQ,CAAC,WAAW,KAAK,iBAAiB;QAC1C,yDAAyD,CAAC,IAAI,CAAC,IAAI,CAAC,EACpE,CAAC;QACD,WAAW,IAAI,EAAE,CAAC;QAClB,kBAAkB,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACzD,CAAC;IAED,IACE,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,EAChD,CAAC;QACD,WAAW,IAAI,EAAE,CAAC;QAClB,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC;IAED,IACE,QAAQ,CAAC,WAAW,KAAK,sBAAsB,EAC/C,CAAC;QACD,WAAW,IAAI,CAAC,CAAC;QACjB,kBAAkB,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC/C,CAAC;IAED,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;IAEjC,MAAM,aAAa,GACjB,KAAK,CAAC,aAAa;QACnB,qBAAqB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE9C,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC;IAE7B,IAAI,QAAQ,GACV,WAAW;QACX,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC;QAClC,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAEnC,MAAM,aAAa,GAAa;QAC9B,YAAY,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE;QAC1C,cAAc,UAAU,CAAC,WAAW,EAAE,EAAE;KACzC,CAAC;IAEF,QAAQ,aAAa,EAAE,CAAC;QACtB,KAAK,WAAW;YACd,QAAQ,IAAI,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACrC,MAAM;QACR,KAAK,iBAAiB;YACpB,QAAQ,IAAI,CAAC,CAAC;YACd,aAAa,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YACpD,MAAM;QACR,KAAK,SAAS;YACZ,QAAQ,IAAI,CAAC,CAAC;YACd,aAAa,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAC5C,MAAM;QACR,KAAK,UAAU;YACb,QAAQ,IAAI,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpC,MAAM;QACR,KAAK,gBAAgB;YACnB,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAClC,aAAa,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAC1C,MAAM;IACV,CAAC;IAED,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAE3B,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,WAAW,EAAE;YACX,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC;YAClC,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,OAAO,EAAE,kBAAkB;SAC5B;QACD,aAAa;QACb,cAAc,EAAE;YACd,KAAK,EAAE,QAAQ;YACf,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC;YAC1B,OAAO,EAAE,aAAa;SACvB;QACD,UAAU;QACV,iBAAiB,EACf,UAAU,KAAK,cAAc;YAC7B,WAAW,IAAI,EAAE;KACpB,CAAC;AACJ,CAAC"}

package/dist-cjs/vercel-execution-observer.js

@@ -0,0 +1,100 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.observeVercelAiSdkStepExecutions = observeVercelAiSdkStepExecutions;
+const execution_observation_js_1 = require("./execution-observation.js");
+function asRecord(value) {
+    return value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function ownDataValue(value, key) {
+    const record = asRecord(value);
+    if (!record)
+        return undefined;
+    const descriptor = Object.getOwnPropertyDescriptor(record, key);
+    return descriptor && "value" in descriptor
+        ? descriptor.value
+        : undefined;
+}
+function ownString(value, key) {
+    const raw = ownDataValue(value, key);
+    return typeof raw === "string" && raw.trim() !== ""
+        ? raw
+        : undefined;
+}
+function arrayData(value, key) {
+    const raw = ownDataValue(value, key);
+    return Array.isArray(raw) ? raw : [];
+}
+function toolMap(snapshot) {
+    const map = new Map();
+    for (const tool of snapshot.tools) {
+        const current = map.get(tool.canonicalName);
+        if (current === undefined) {
+            map.set(tool.canonicalName, tool);
+        }
+        else {
+            // Fail closed if a malformed/custom snapshot contains duplicate names.
+            map.set(tool.canonicalName, null);
+        }
+    }
+    return map;
+}
+function statusFromResult(result) {
+    const isError = ownDataValue(result, "isError");
+    if (isError === true)
+        return "FAILED";
+    if (isError === false)
+        return "SUCCEEDED";
+    return "UNKNOWN";
+}
+/**
+ * Convert an already-emitted Vercel AI SDK step result into Once EXECUTED
+ * observations. This helper never calls a model, provider, tool or callback.
+ *
+ * Only entries present in `toolResults` establish execution evidence. A
+ * `toolCalls` entry without a result is model intent, not proof of execution.
+ * Tool arguments and tool results are deliberately ignored.
+ */
+function observeVercelAiSdkStepExecutions(stepResult, visibleSnapshot) {
+    const visible = toolMap(visibleSnapshot);
+    const calls = arrayData(stepResult, "toolCalls");
+    const results = arrayData(stepResult, "toolResults");
+    const callNameById = new Map();
+    for (const call of calls) {
+        const toolCallId = ownString(call, "toolCallId");
+        const toolName = ownString(call, "toolName");
+        if (toolCallId && toolName) {
+            callNameById.set(toolCallId, toolName);
+        }
+    }
+    const observations = [];
+    const now = new Date().toISOString();
+    for (const result of results) {
+        const toolCallId = ownString(result, "toolCallId");
+        const explicitName = ownString(result, "toolName");
+        const toolName = explicitName ?? (toolCallId ? callNameById.get(toolCallId) : undefined);
+        if (!toolName)
+            continue;
+        const tool = visible.get(toolName);
+        if (!tool)
+            continue;
+        const observed = (0, execution_observation_js_1.observeToolExecution)({
+            ...(toolCallId ? { eventId: `vercel-tool-call:${toolCallId}` } : {}),
+            toolId: tool.toolId,
+            namespacedName: tool.namespacedName,
+            descriptorFingerprint: (0, execution_observation_js_1.executionToolFingerprint)(tool),
+            canonicalName: tool.canonicalName,
+            framework: "vercel-ai-sdk",
+            runtimeName: visibleSnapshot.runtimeName,
+            source: "framework_callback",
+            status: statusFromResult(result),
+            observedAt: now,
+        });
+        if (observed.accepted) {
+            observations.push(observed.event);
+        }
+    }
+    return Object.freeze(observations);
+}
+//# sourceMappingURL=vercel-execution-observer.js.map

package/dist-cjs/vercel-execution-observer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-execution-observer.js","sourceRoot":"","sources":["../src/vercel-execution-observer.ts"],"names":[],"mappings":";;AAwEA,4EAgDC;AAxHD,yEAIoC;AAQpC,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAC,KAAmB;QACrB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,GAAW;IAC/C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChE,OAAO,UAAU,IAAI,OAAO,IAAI,UAAU;QACxC,CAAC,CAAC,UAAU,CAAC,KAAK;QAClB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,GAAW;IAC5C,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QACjD,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,GAAW;IAC5C,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,OAAO,CACd,QAA6C;IAE7C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAyC,CAAC;IAE7D,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,uEAAuE;YACvE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAe;IACvC,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC;IAC1C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,gCAAgC,CAC9C,UAAmB,EACnB,eAAoD;IAEpD,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,SAAS,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,IAAI,UAAU,IAAI,QAAQ,EAAE,CAAC;YAC3B,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAA+B,EAAE,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,YAAY,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACzF,IAAI,CAAC,QAAQ;YAAE,SAAS;QAExB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,MAAM,QAAQ,GAAG,IAAA,+CAAoB,EAAC;YACpC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,oBAAoB,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,qBAAqB,EAAE,IAAA,mDAAwB,EAAC,IAAI,CAAC;YACrD,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,SAAS,EAAE,eAAe;YAC1B,WAAW,EAAE,eAAe,CAAC,WAAW;YACxC,MAAM,EAAE,oBAAoB;YAC5B,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC;YAChC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AACrC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@once-agent/sdk",
-  "version": "0.1.11",
+  "version": "0.1.12",
   "description": "Execution safety for side-effecting AI agent tools.",
   "type": "module",
   "main": "./dist/index.js",
@@ -10,6 +10,21 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js",
       "require": "./dist-cjs/index.js"
+    },
+    "./connect": {
+      "types": "./dist/connect/index.d.ts",
+      "import": "./dist/connect/index.js",
+      "require": "./dist-cjs/connect/index.js"
+    },
+    "./discovery": {
+      "types": "./dist/discovery/index.d.ts",
+      "import": "./dist/discovery/index.js",
+      "require": "./dist-cjs/discovery/index.js"
+    },
+    "./gateway": {
+      "types": "./dist/gateway/index.d.ts",
+      "import": "./dist/gateway/index.js",
+      "require": "./dist-cjs/gateway/index.js"
     }
   },
   "files": [
@@ -27,13 +42,20 @@
     "test:dataset-progress": "npm run build && node ./scripts/dataset-progress-regression.mjs",
     "test:agent-discovery": "node ./scripts/agent-discovery-regression.mjs",
     "test:doctor": "npm run build && node ./scripts/doctor-adoption-regression.mjs",
+    "test:tool-discovery": "npm run build && node ./scripts/tool-discovery-regression.mjs && node ./scripts/mcp-live-discovery-regression.mjs && node ./scripts/mcp-tool-refresh-regression.mjs && node ./scripts/runtime-tool-discovery-regression.mjs && node ./scripts/vercel-runtime-tool-discovery-regression.mjs && node ./scripts/langchain-runtime-discovery-regression.mjs && node ./scripts/execution-observation-regression.mjs && node ./scripts/openai-agents-execution-observer-regression.mjs && node ./scripts/vercel-execution-observer-regression.mjs && node ./scripts/langchain-execution-observer-regression.mjs && node ./scripts/otel-execution-observer-regression.mjs && node ./scripts/phase11d-evidence-ladder-regression.mjs",
+    "test:gateway": "npm run build && node ./scripts/gateway-planner-regression.mjs && node ./scripts/gateway-broker-regression.mjs && node ./scripts/gateway-tool-graph-binding-regression.mjs && node ./scripts/gateway-openai-function-tools-regression.mjs",
     "routing:check": "node ./scripts/agent-routing-conformance.mjs",
     "routing:cases": "node ./scripts/agent-routing-conformance.mjs --emit-cases",
     "test:routing-conformance": "node ./scripts/agent-routing-conformance-regression.mjs",
     "test:contract": "npm run build && tsc --noEmit --target ES2022 --module NodeNext --moduleResolution NodeNext --strict --types node ./scripts/sdk-contract-types.ts && node ./scripts/sdk-contract-runtime.mjs",
-    "test:release": "npm run benchmark:scan && npm run test:benchmark && npm run test:trace && npm run test:dataset-seal && npm run test:dataset-progress && npm run test:agent-discovery && npm run test:doctor && npm run test:routing-conformance && npm run test:scanner-declarations && npm run test:contract && npm run test:protect && npm run test:capabilities && npm run test:transformer && npm run test:binding && npm run test:patch-planner && npm run test:transformer-protect && npm run test:apply && npm run test:id-conformance && npm run test:consumer && npm run test:activation && npm run test:package && npm run test:runtime-setup && npm run test:connect",
-    "test:local": "npm run build && node --test ./test/local.test.mjs ./test/connect/local-agent-tool.test.mjs",
+    "test:release": "npm run benchmark:scan && npm run test:benchmark && npm run test:trace && npm run test:dataset-seal && npm run test:dataset-progress && npm run test:agent-discovery && npm run test:doctor && npm run test:tool-discovery && npm run test:gateway && npm run test:routing-conformance && npm run test:scanner-declarations && npm run test:contract && npm run test:protect && npm run test:capabilities && npm run test:transformer && npm run test:binding && npm run test:patch-planner && npm run test:transformer-protect && npm run test:apply && npm run test:id-conformance && npm run test:consumer && npm run test:connect-package && npm run test:discovery-package && npm run test:gateway-package && npm run test:activation && npm run test:package && npm run test:runtime-setup && npm run test:connect",
+    "test:local": "npm run build && node --test ./test/local.test.mjs ./test/connect/local-agent-tool.test.mjs ./test/gateway/local-gateway-toolset.test.mjs ./test/gateway/openai-function-tools-gateway.test.mjs",
     "test:connect": "npm run build && node --test ./test/connect/*.test.mjs",
+    "test:connect-package": "node ./scripts/connect-package-regression.mjs",
+    "test:discovery-package": "node ./scripts/runtime-discovery-package-regression.mjs && node ./scripts/execution-discovery-package-regression.mjs",
+    "test:gateway-package": "node ./scripts/gateway-package-regression.mjs",
+    "test:connect-package-protected": "node ./scripts/connect-packed-protection-regression.mjs",
+    "test:gateway-package-protected": "node ./scripts/gateway-packed-protection-regression.mjs",
     "test:protect": "npm run build && node ./scripts/protect-regression.mjs",
     "test:capabilities": "npm run build && node ./scripts/capability-regression.mjs",
     "test:transformer": "npm run build && node ./scripts/http-transformer-regression.mjs",