@opengeni/contracts 3.1.0-canary.2 → 3.1.2

package/src/tool-policy.ts

@@ -0,0 +1,82 @@
+/** Only a declared action discriminator can select an action-specific preference.
+ * Callers still validate the complete arguments against the tool schema. */
+export function toolPolicyActionName(
+  toolName: string,
+  inputSchema: unknown,
+  args: unknown,
+): string {
+  if (
+    !inputSchema ||
+    typeof inputSchema !== "object" ||
+    Array.isArray(inputSchema) ||
+    !args ||
+    typeof args !== "object" ||
+    Array.isArray(args)
+  )
+    return toolName;
+  const properties = (inputSchema as Record<string, unknown>).properties;
+  if (!properties || typeof properties !== "object" || Array.isArray(properties)) return toolName;
+  const actionSchema = (properties as Record<string, unknown>).action;
+  const action = (args as Record<string, unknown>).action;
+  if (
+    !actionSchema ||
+    typeof actionSchema !== "object" ||
+    Array.isArray(actionSchema) ||
+    typeof action !== "string" ||
+    !action.trim() ||
+    action !== action.trim() ||
+    action.length > 512
+  )
+    return toolName;
+  const declared = actionSchema as Record<string, unknown>;
+  if (declared.enum && (!Array.isArray(declared.enum) || !declared.enum.includes(action)))
+    return toolName;
+  if (declared.const !== undefined && declared.const !== action) return toolName;
+  return declared.type === "string" || declared.enum !== undefined || declared.const !== undefined
+    ? action
+    : toolName;
+}
+
+/** Strip only JSON Schema annotations, never object property names or literal values. */
+export function executableToolSchema(value: unknown): unknown {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return value;
+  const annotations = new Set(["title", "description", "examples", "$comment"]);
+  const schemaMaps = new Set([
+    "properties",
+    "patternProperties",
+    "$defs",
+    "definitions",
+    "dependentSchemas",
+  ]);
+  const schemaLists = new Set(["allOf", "anyOf", "oneOf", "prefixItems"]);
+  const schemaValues = new Set([
+    "items",
+    "contains",
+    "additionalProperties",
+    "unevaluatedProperties",
+    "unevaluatedItems",
+    "propertyNames",
+    "not",
+    "if",
+    "then",
+    "else",
+  ]);
+  return Object.fromEntries(
+    Object.entries(value).flatMap(([key, entry]) => {
+      if (annotations.has(key)) return [];
+      if (schemaMaps.has(key) && entry && typeof entry === "object" && !Array.isArray(entry))
+        return [
+          [
+            key,
+            Object.fromEntries(
+              Object.entries(entry).map(([name, schema]) => [name, executableToolSchema(schema)]),
+            ),
+          ],
+        ];
+      if (schemaLists.has(key) && Array.isArray(entry))
+        return [[key, entry.map(executableToolSchema)]];
+      if (schemaValues.has(key)) return [[key, executableToolSchema(entry)]];
+      return [[key, entry]];
+    }),
+  );
+}

package/src/tool-result-spill.ts

@@ -1,3 +1,4 @@
+import { defineSchema } from "./define-schema";
 import { z } from "zod";
 
 /** Model-visible overflow of one tool result. Exact bytes live on a workspace File. */
@@ -7,15 +8,17 @@ export const TOOL_RESULT_SPILL_MOUNT_PATH = "tool-results" as const;
 
 const LOWERCASE_UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 
-export const ToolResultSpilledReceipt = z
-  .object({
-    type: z.literal(TOOL_RESULT_SPILLED_TYPE),
-    sandboxPath: z.string().min(1).max(4_096).nullable(),
-    fileId: z.string().regex(LOWERCASE_UUID),
-    byteSize: z.number().int().positive().safe(),
-    mediaType: z.literal(TOOL_RESULT_SPILL_MEDIA_TYPE),
-  })
-  .strict();
+export const ToolResultSpilledReceipt = /* @__PURE__ */ defineSchema(() =>
+  z
+    .object({
+      type: z.literal(TOOL_RESULT_SPILLED_TYPE),
+      sandboxPath: z.string().min(1).max(4_096).nullable(),
+      fileId: z.string().regex(LOWERCASE_UUID),
+      byteSize: z.number().int().positive().safe(),
+      mediaType: z.literal(TOOL_RESULT_SPILL_MEDIA_TYPE),
+    })
+    .strict(),
+);
 export type ToolResultSpilledReceipt = z.infer<typeof ToolResultSpilledReceipt>;
 
 export function isToolResultSpilledReceipt(value: unknown): value is ToolResultSpilledReceipt {

package/src/tool-review-presentation.ts

@@ -0,0 +1,385 @@
+import type {
+  ToolActionReview,
+  ToolReviewContext,
+  ToolReviewDetailsPage,
+} from "./tool-action-review";
+
+const protectedName =
+  /password|passwd|secret|credential|authorization|cookie|(^|[_-])token($|[_-])|api[_-]?key|accessToken|refreshToken|privateKey/i;
+const protectedReviewField = (key: string, fields: readonly string[] = []) =>
+  protectedName.test(key) || fields.includes(key) || fields.includes("*");
+const bound = (value: string, limit: number) =>
+  value.length > limit ? `${value.slice(0, limit)}…` : value;
+export function toolReviewFieldLabel(key: string): string {
+  const label = key
+    .replace(/([a-z0-9])([A-Z])/g, "$1 $2")
+    .replace(/[_-]+/g, " ")
+    .replace(/\bids?\b/gi, (word) => (word.length === 3 ? "IDs" : "ID"))
+    .replace(
+      /\b(api|url|uri|http|https|ip|sql|json|html)(s?)\b/gi,
+      (_word, name: string, plural: string) => `${name.toUpperCase()}${plural}`,
+    )
+    // Sentence case, keeping acronyms: "Working Directory" → "Working directory".
+    .replace(
+      /(?<=\S\s+)([A-Z])([a-z]+)\b/g,
+      (_word, first: string, rest: string) => `${first.toLowerCase()}${rest}`,
+    )
+    .trim();
+  return label.charAt(0).toUpperCase() + label.slice(1);
+}
+export function decodeReviewArguments(value: unknown): Record<string, unknown> | null {
+  // Historical SDK entries sometimes wrapped arguments in JSON. Decode only once.
+  let decoded = value;
+  if (typeof decoded === "string") {
+    try {
+      decoded = JSON.parse(decoded);
+    } catch {
+      return null;
+    }
+  }
+  return decoded && typeof decoded === "object" && !Array.isArray(decoded)
+    ? (decoded as Record<string, unknown>)
+    : null;
+}
+export function safeReviewValue(
+  value: unknown,
+  key = "",
+  protectedFields: readonly string[] = [],
+  depth = 0,
+): unknown {
+  if (protectedReviewField(key, protectedFields)) return "[Protected value]";
+  if (depth > 20) return "[Nested value; open this field for details]";
+  if (Array.isArray(value))
+    return value.map((entry) => safeReviewValue(entry, "", protectedFields, depth + 1));
+  if (value && typeof value === "object")
+    return Object.fromEntries(
+      Object.entries(value).map(([name, entry]) => [
+        name,
+        safeReviewValue(entry, name, protectedFields, depth + 1),
+      ]),
+    );
+  return value;
+}
+function valueText(value: unknown): string {
+  return typeof value === "string"
+    ? value
+    : value === null
+      ? "None"
+      : typeof value === "boolean"
+        ? value
+          ? "Yes"
+          : "No"
+        : (JSON.stringify(value) ?? "Unavailable");
+}
+const pointer = (name: string) => `/${name.replaceAll("~", "~0").replaceAll("/", "~1")}`;
+// Long arbitrary property names remain readable without placing them in every
+// preview or URL. An indexed segment opens their saved name and value together.
+const fieldPointer = (key: string, index: number, parent = "") =>
+  pointer(key).length > 256 || parent.length + pointer(key).length > 1024
+    ? `/~2${index}`
+    : pointer(key);
+
+export function toolReviewFields(
+  argumentsValue: unknown,
+  context?: ToolReviewContext,
+): { fields: ToolActionReview["fields"]; moreFields: number } {
+  const args = decodeReviewArguments(argumentsValue);
+  if (!args) return { fields: [], moreFields: 0 };
+  const entries = Object.entries(args);
+  if (context?.email) {
+    const email = toolReviewFields(context.email);
+    const original = toolReviewFields(args, { ...context, email: undefined });
+    const fields = [
+      ...email.fields
+        .filter(
+          (field) =>
+            field.path !== "/contentSha256" && field.path !== "/htmlBody" && field.preview !== "",
+        )
+        .map((field) => ({
+          ...field,
+          label: field.path === "/textBody" ? "Message" : field.label,
+          path: `/$email${field.path}`,
+          ...(field.path === "/attachments"
+            ? {
+                preview: context
+                  .email!.attachments.map((attachment) => attachment.name)
+                  .join(", ")
+                  .slice(0, 240),
+              }
+            : {}),
+        })),
+      ...original.fields.filter(
+        (field) =>
+          ![
+            "/raw",
+            "/expectedContentSha256",
+            "/from",
+            "/to",
+            "/cc",
+            "/bcc",
+            "/subject",
+            "/body",
+            "/textBody",
+            "/htmlBody",
+            "/attachments",
+          ].includes(field.path),
+      ),
+    ];
+    return {
+      fields: fields.slice(0, 16),
+      moreFields: original.moreFields + Math.max(0, fields.length - 16),
+    };
+  }
+  return {
+    moreFields: Math.max(0, entries.length - 16),
+    fields: entries.slice(0, 16).map(([key, value], index) => {
+      const hidden = protectedReviewField(key, context?.protectedFields);
+      const safe = hidden ? "[Protected value]" : value;
+      const count = !hidden && Array.isArray(value) ? value.length : undefined;
+      const compactList =
+        !hidden &&
+        Array.isArray(value) &&
+        value.length > 0 &&
+        value.length <= 4 &&
+        value.every(
+          (entry) =>
+            typeof entry === "string" || typeof entry === "number" || typeof entry === "boolean",
+        )
+          ? value.map(valueText).join(", ")
+          : undefined;
+      const text =
+        compactList !== undefined
+          ? compactList
+          : count !== undefined
+            ? `${count.toLocaleString("en-US")} item${count === 1 ? "" : "s"}`
+            : safe && typeof safe === "object"
+              ? `${Object.keys(safe).length} field${Object.keys(safe).length === 1 ? "" : "s"}`
+              : valueText(safe);
+      return {
+        path: fieldPointer(key, index),
+        label: bound(
+          (context?.fieldLabels && Object.hasOwn(context.fieldLabels, key)
+            ? context.fieldLabels[key]
+            : undefined) ?? toolReviewFieldLabel(key),
+          256,
+        ),
+        preview: bound(text, 240),
+        ...(count !== undefined ? { count } : {}),
+        truncated:
+          !hidden &&
+          (text.length > 240 ||
+            (compactList === undefined && typeof value === "object" && value !== null)),
+        ...(hidden ? { protected: true } : {}),
+      };
+    }),
+  };
+}
+
+/** Deterministic consequences from the reviewed bytes. Unknown fields remain visible. */
+export function toolReviewAction(
+  toolName: string,
+  argumentsValue: unknown,
+  context?: ToolReviewContext,
+): Pick<
+  ToolActionReview,
+  "title" | "approveLabel" | "effects" | "consequence" | "selectionCount" | "selectionKind"
+> {
+  const fallback = {
+    title:
+      context?.title ??
+      bound(
+        toolReviewFieldLabel(
+          toolName.replace(/^mcp_[^_]+__/, "").replace(/^batch[_-](?=[a-z])/i, ""),
+        ),
+        256,
+      ),
+    approveLabel: "Approve action",
+    effects: [] as string[],
+  };
+  if (context?.kind !== "gmail") return fallback;
+  const args = decodeReviewArguments(argumentsValue);
+  if (!args) return fallback;
+  const thread = toolName.endsWith("_thread");
+  const selectionKind = thread ? ("threads" as const) : ("messages" as const);
+  const ids =
+    thread && typeof args.threadId === "string"
+      ? [args.threadId]
+      : Array.isArray(args.messageIds)
+        ? args.messageIds
+        : typeof args.messageId === "string"
+          ? [args.messageId]
+          : null;
+  const selectionCount = ids?.every((id) => typeof id === "string") ? new Set(ids).size : undefined;
+  const noun =
+    selectionCount === undefined
+      ? thread
+        ? "conversations"
+        : "messages"
+      : `${selectionCount.toLocaleString("en-US")} ${thread ? "conversation" : "message"}${selectionCount === 1 ? "" : "s"}`;
+  const addValues = toolName.startsWith("label_") ? args.labelIds : args.addLabelIds;
+  const adds = Array.isArray(addValues)
+    ? addValues.filter((v): v is string => typeof v === "string")
+    : [];
+  const removeValues = toolName.startsWith("unlabel_") ? args.labelIds : args.removeLabelIds;
+  const removes = Array.isArray(removeValues)
+    ? removeValues.filter((v): v is string => typeof v === "string")
+    : [];
+  const labelEffect = (label: string, adding: boolean): string => {
+    const known: Record<string, [string, string]> = {
+      TRASH: ["Move to Trash", "Remove from Trash"],
+      INBOX: ["Move to Inbox", "Remove from Inbox"],
+      UNREAD: ["Mark as unread", "Mark as read"],
+      STARRED: ["Add star", "Remove star"],
+      SPAM: ["Mark as spam", "Remove from Spam"],
+      IMPORTANT: ["Mark as important", "Remove importance"],
+    };
+    return (
+      (Object.hasOwn(known, label) ? known[label]?.[adding ? 0 : 1] : undefined) ??
+      `${adding ? "Add" : "Remove"} label ${bound(label, 120)}`
+    );
+  };
+  const effects = [
+    ...adds.map((id) => labelEffect(id, true)),
+    ...removes.map((id) => labelEffect(id, false)),
+  ];
+  if (
+    [
+      "batch_modify_messages",
+      "modify_message",
+      "modify_thread",
+      "label_message",
+      "label_thread",
+      "unlabel_message",
+      "unlabel_thread",
+    ].includes(toolName)
+  ) {
+    const trash = adds.includes("TRASH");
+    return {
+      title: trash ? `Move ${noun} to Trash` : `Update ${noun}`,
+      approveLabel: trash ? "Move to Trash" : "Apply changes",
+      effects,
+      ...(selectionCount === undefined ? {} : { selectionCount, selectionKind }),
+      ...(trash
+        ? { consequence: "Messages stay recoverable in Trash until Gmail deletes them." }
+        : thread
+          ? { consequence: "Applies to every message in the conversation." }
+          : {}),
+    };
+  }
+  if (["trash_message", "restore_message", "trash_thread", "restore_thread"].includes(toolName))
+    return {
+      title: toolName.startsWith("trash_") ? `Move ${noun} to Trash` : `Remove ${noun} from Trash`,
+      approveLabel: toolName.startsWith("trash_") ? "Move to Trash" : "Remove from Trash",
+      effects,
+      ...(selectionCount === undefined ? {} : { selectionCount, selectionKind }),
+    };
+  const named: Record<string, [string, string]> = {
+    send_message: ["Send email", "Send email"],
+    send_draft: ["Send draft", "Send draft"],
+    create_draft: ["Create email draft", "Create draft"],
+    update_draft: ["Update email draft", "Update draft"],
+    delete_draft: ["Delete email draft", "Delete draft"],
+    create_label: ["Create label", "Create label"],
+    update_label: ["Update label", "Update label"],
+    delete_label: ["Delete label", "Delete label"],
+  };
+  const action = Object.hasOwn(named, toolName) ? named[toolName] : undefined;
+  return action ? { title: action[0], approveLabel: action[1], effects } : fallback;
+}
+
+/** A bounded slice of the immutable saved arguments; never evaluates a fresh provider query. */
+export function toolReviewDetails(
+  argumentsValue: unknown,
+  context: ToolReviewContext | undefined,
+  path: string,
+  offset: number,
+  limit = 25,
+): Omit<ToolReviewDetailsPage, "id" | "actionDigest" | "version"> {
+  if (
+    !Number.isSafeInteger(offset) ||
+    offset < 0 ||
+    !Number.isSafeInteger(limit) ||
+    limit < 1 ||
+    limit > 50
+  )
+    throw new Error("Invalid review page");
+  const args = decodeReviewArguments(argumentsValue);
+  let value: unknown = context?.email ? { ...args, $email: context.email } : args;
+  if (path !== "") {
+    if (!path.startsWith("/")) throw new Error("Invalid review field");
+    for (const escaped of path.slice(1).split("/")) {
+      if (/^~2\d+$/.test(escaped)) {
+        if (!value || typeof value !== "object" || Array.isArray(value))
+          throw new Error("Review field not found");
+        const selected = Object.entries(value)[Number(escaped.slice(2))];
+        if (!selected) throw new Error("Review field not found");
+        value = {
+          fieldName: selected[0],
+          value: protectedReviewField(selected[0], context?.protectedFields)
+            ? "[Protected value]"
+            : selected[1],
+        };
+        continue;
+      }
+      const key = escaped.replaceAll("~1", "/").replaceAll("~0", "~");
+      if (protectedReviewField(key, context?.protectedFields)) {
+        value = "[Protected value]";
+        break;
+      }
+      if (!value || typeof value !== "object" || !Object.hasOwn(value, key))
+        throw new Error("Review field not found");
+      value = (value as Record<string, unknown>)[key];
+    }
+  }
+  type DetailItem = ToolReviewDetailsPage["items"][number];
+  const preview = (
+    entry: unknown,
+    key: string,
+    childPath: string,
+  ): Pick<DetailItem, "value" | "truncated" | "path"> => {
+    const hidden = protectedReviewField(key, context?.protectedFields);
+    if (!hidden && entry !== null && typeof entry === "object") {
+      const count = Array.isArray(entry) ? entry.length : Object.keys(entry).length;
+      return {
+        value: `${count.toLocaleString("en-US")} ${Array.isArray(entry) ? (count === 1 ? "item" : "items") : count === 1 ? "field" : "fields"}`,
+        path: childPath,
+        truncated: true,
+      };
+    }
+    const text = valueText(safeReviewValue(entry, key, context?.protectedFields));
+    return {
+      value: bound(text, 4000),
+      ...(hidden ? {} : { path: childPath }),
+      truncated: !hidden && text.length > 4000,
+    };
+  };
+  let total: number;
+  let items: DetailItem[];
+  if (Array.isArray(value)) {
+    total = value.length;
+    items = value.slice(offset, offset + limit).map((entry, index) => ({
+      label: `${offset + index + 1}`,
+      ...preview(entry, "", `${path}/${offset + index}`),
+    }));
+  } else if (value && typeof value === "object") {
+    const entries = Object.entries(value);
+    total = entries.length;
+    items = entries.slice(offset, offset + limit).map(([key, entry], index) => ({
+      label: bound(
+        (context?.fieldLabels && Object.hasOwn(context.fieldLabels, key)
+          ? context.fieldLabels[key]
+          : undefined) ?? toolReviewFieldLabel(key),
+        256,
+      ),
+      ...preview(entry, key, `${path}${fieldPointer(key, offset + index, path)}`),
+    }));
+  } else {
+    const text = valueText(value);
+    total = Math.max(1, Math.ceil(text.length / 4000));
+    items = Array.from({ length: Math.max(0, Math.min(limit, total - offset)) }, (_, index) => ({
+      label: `Part ${offset + index + 1}`,
+      value: text.slice((offset + index) * 4000, (offset + index + 1) * 4000),
+    }));
+  }
+  return { path, items, total, nextOffset: offset + limit < total ? offset + limit : null };
+}