@orion-agents/orion-code 0.1.9 → 0.2.2

package/dist/runtime/first-party-core-provider.js

@@ -0,0 +1,197 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FirstPartyCoreToolProviderV1 = exports.FirstPartyCoreToolProviderError = exports.FIRST_PARTY_CORE_PROVIDER_VERSION = void 0;
+exports.createFirstPartyCoreToolProviderV1 = createFirstPartyCoreToolProviderV1;
+const builtin_tool_provider_1 = require("./builtin-tool-provider");
+const descriptors_1 = require("./core-tools/descriptors");
+const canonical_1 = require("./protocol/canonical");
+exports.FIRST_PARTY_CORE_PROVIDER_VERSION = 1;
+class FirstPartyCoreToolProviderError extends Error {
+    constructor(message) {
+        super(message);
+        this.code = 'ORION_FIRST_PARTY_CORE_PROVIDER_INVALID';
+        this.name = 'FirstPartyCoreToolProviderError';
+    }
+}
+exports.FirstPartyCoreToolProviderError = FirstPartyCoreToolProviderError;
+/**
+ * Lightweight first-party catalog for the ordinary coding lane.
+ *
+ * Descriptor construction has no runtime dependency on src/tools. Invoking a
+ * frozen binding imports exactly one first-party shard; the legacy tools
+ * barrel and unrelated long-tail tools are never materialized. Schema and
+ * risk identity are revalidated before any implementation is allowed to run.
+ */
+class FirstPartyCoreToolProviderV1 {
+    constructor(options) {
+        this.version = exports.FIRST_PARTY_CORE_PROVIDER_VERSION;
+        this.implementations = new Map();
+        this.moduleFlights = new Map();
+        this.loadedShardNames = new Set();
+        if (!options.context?.cwd?.trim()) {
+            throw new FirstPartyCoreToolProviderError('Core provider context.cwd must not be empty.');
+        }
+        this.context = options.context;
+        this.importers = Object.freeze({ ...DEFAULT_CORE_TOOL_IMPORTERS, ...options.importers });
+        this.catalog = (0, builtin_tool_provider_1.createBuiltinToolCatalogV1)(descriptors_1.CORE_TOOL_DESCRIPTORS.map(spec => this.createLazyTool(spec)), { context: options.context });
+        this.assertCatalogIdentity();
+    }
+    stats() {
+        const resolvedToolNames = [...this.implementations.keys()].sort();
+        return Object.freeze({
+            version: exports.FIRST_PARTY_CORE_PROVIDER_VERSION,
+            monolithicModuleLoads: 0,
+            shardModuleLoads: this.loadedShardNames.size,
+            loadedShardNames: Object.freeze([...this.loadedShardNames].sort()),
+            resolvedExecutors: resolvedToolNames.length,
+            resolvedToolNames: Object.freeze(resolvedToolNames),
+        });
+    }
+    createLazyTool(spec) {
+        return {
+            name: spec.name,
+            aliases: [...spec.aliases],
+            description: spec.description,
+            parameters: structuredClone(spec.parameters),
+            execute: (args, context) => this.execute(spec, args, context),
+            checkPermissions: () => permissionFor(spec),
+            isConcurrencySafe: () => spec.concurrencySafe,
+            isReadOnly: () => spec.readOnly,
+            isDestructive: () => spec.destructive,
+            isFileEdit: () => spec.fileEdit,
+            userFacingName: () => spec.name,
+        };
+    }
+    async execute(spec, args, context) {
+        const tool = await this.resolveImplementation(spec.name);
+        try {
+            const inputError = tool.validateInput?.({ ...args });
+            if (inputError)
+                return failure(inputError);
+            const permission = tool.checkPermissions?.({ ...args }, context);
+            if (permission?.behavior === 'deny') {
+                return failure(permission.reason ?? `${spec.name} was denied by its implementation.`);
+            }
+            if (permission?.behavior === 'ask' && spec.permission !== 'ask') {
+                return failure(`${spec.name} requested confirmation after its frozen lightweight policy allowed it.`);
+            }
+            return await tool.execute({ ...args }, { ...this.context, ...context });
+        }
+        catch (error) {
+            return failure(errorMessage(error));
+        }
+    }
+    async resolveImplementation(name) {
+        const cached = this.implementations.get(name);
+        if (cached)
+            return cached;
+        const module = await this.loadModule(name);
+        const tool = module.coreTool;
+        if (!tool || tool.name !== name) {
+            throw new FirstPartyCoreToolProviderError(`Selected core executor shard ${name} did not export its exact coreTool.`);
+        }
+        this.assertImplementationIdentity(name, tool);
+        this.implementations.set(name, tool);
+        return tool;
+    }
+    loadModule(name) {
+        const cached = this.moduleFlights.get(name);
+        if (cached)
+            return cached;
+        const importer = this.importers[name];
+        const flight = Promise.resolve()
+            .then(() => importer())
+            .then(module => {
+            if (!module?.coreTool) {
+                throw new FirstPartyCoreToolProviderError(`First-party tool importer ${name} did not return an exact coreTool.`);
+            }
+            this.loadedShardNames.add(name);
+            return module;
+        });
+        this.moduleFlights.set(name, flight);
+        return flight;
+    }
+    assertCatalogIdentity() {
+        const expectedNames = descriptors_1.CORE_TOOL_DESCRIPTORS.map(spec => spec.name).sort();
+        const actualNames = this.catalog.candidates.map(candidate => candidate.descriptor.name).sort();
+        if ((0, canonical_1.digestRuntimeValue)(actualNames) !== (0, canonical_1.digestRuntimeValue)(expectedNames)) {
+            throw new FirstPartyCoreToolProviderError('Lightweight core catalog identity drifted.');
+        }
+    }
+    assertImplementationIdentity(name, tool) {
+        const actual = (0, builtin_tool_provider_1.createBuiltinToolCatalogV1)([tool], { context: this.context });
+        const expected = this.catalog.entries.find(entry => entry.candidate.descriptor.name === name);
+        if (!expected || actual.entries.length !== 1) {
+            throw new FirstPartyCoreToolProviderError(`Core executor ${name} cannot be validated.`);
+        }
+        const expectedDescriptor = expected.candidate.descriptor;
+        const actualDescriptor = actual.entries[0].candidate.descriptor;
+        if (expectedDescriptor.name !== actualDescriptor.name ||
+            expectedDescriptor.description !== actualDescriptor.description ||
+            expectedDescriptor.schemaDigest !== actualDescriptor.schemaDigest ||
+            expectedDescriptor.executorId !== actualDescriptor.executorId ||
+            (0, canonical_1.digestRuntimeValue)(expectedDescriptor.aliases) !==
+                (0, canonical_1.digestRuntimeValue)(actualDescriptor.aliases) ||
+            (0, canonical_1.digestRuntimeValue)(expectedDescriptor.risk) !== (0, canonical_1.digestRuntimeValue)(actualDescriptor.risk)) {
+            throw new FirstPartyCoreToolProviderError(`Core executor ${name} does not match its frozen descriptor.`);
+        }
+    }
+}
+exports.FirstPartyCoreToolProviderV1 = FirstPartyCoreToolProviderV1;
+function createFirstPartyCoreToolProviderV1(options) {
+    return new FirstPartyCoreToolProviderV1(options);
+}
+const DEFAULT_CORE_TOOL_IMPORTERS = Object.freeze({
+    edit_file: () => Promise.resolve().then(() => __importStar(require('../tools/core/edit-file'))),
+    exec_command: () => Promise.resolve().then(() => __importStar(require('../tools/core/exec-command'))),
+    glob: () => Promise.resolve().then(() => __importStar(require('../tools/core/glob'))),
+    grep: () => Promise.resolve().then(() => __importStar(require('../tools/core/grep'))),
+    list_files: () => Promise.resolve().then(() => __importStar(require('../tools/core/list-files'))),
+    read_file: () => Promise.resolve().then(() => __importStar(require('../tools/core/read-file'))),
+    write_file: () => Promise.resolve().then(() => __importStar(require('../tools/core/write-file'))),
+});
+function permissionFor(spec) {
+    return spec.permission === 'allow'
+        ? { behavior: 'allow' }
+        : { behavior: 'ask', reason: spec.permissionReason ?? `${spec.name} may mutate state.` };
+}
+function failure(error) {
+    return { success: false, output: '', error };
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=first-party-core-provider.js.map

package/dist/runtime/first-party-core-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"first-party-core-provider.js","sourceRoot":"","sources":["../../src/runtime/first-party-core-provider.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuMA,gFAIC;AA1MD,mEAAgG;AAChG,0DAIkC;AAClC,oDAA0D;AAI7C,QAAA,iCAAiC,GAAG,CAAU,CAAC;AA2B5D,MAAa,+BAAgC,SAAQ,KAAK;IAGxD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,SAAI,GAAG,yCAAyC,CAAC;QAIxD,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAPD,0EAOC;AAED;;;;;;;GAOG;AACH,MAAa,4BAA4B;IAavC,YAAY,OAA4C;QAZ/C,YAAO,GAAG,yCAAiC,CAAC;QAKpC,oBAAe,GAAG,IAAI,GAAG,EAA2C,CAAC;QACrE,kBAAa,GAAG,IAAI,GAAG,EAGrC,CAAC;QACa,qBAAgB,GAAG,IAAI,GAAG,EAA4B,CAAC;QAGtE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,+BAA+B,CAAC,8CAA8C,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,2BAA2B,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,OAAO,GAAG,IAAA,kDAA0B,EACvC,mCAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAC5D,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAC7B,CAAC;QACF,IAAI,CAAC,qBAAqB,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK;QACH,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClE,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,yCAAiC;YAC1C,qBAAqB,EAAE,CAAC;YACxB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,CAAC,IAAI;YAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC;YAClE,iBAAiB,EAAE,iBAAiB,CAAC,MAAM;YAC3C,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC;SACpD,CAAC,CAAC;IACL,CAAC;IAEO,cAAc,CAAC,IAA8B;QACnD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;YAC1B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC;YAC5C,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC;YAC7D,gBAAgB,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC;YAC3C,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe;YAC7C,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ;YAC/B,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW;YACrC,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ;YAC/B,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI;SAChC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,IAA8B,EAC9B,IAA6B,EAC7B,OAAoB;QAEpB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;YACrD,IAAI,UAAU;gBAAE,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;YACjE,IAAI,UAAU,EAAE,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACpC,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,oCAAoC,CAAC,CAAC;YACxF,CAAC;YACD,IAAI,UAAU,EAAE,QAAQ,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;gBAChE,OAAO,OAAO,CACZ,GAAG,IAAI,CAAC,IAAI,yEAAyE,CACtF,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,IAA8B;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC7B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAChC,MAAM,IAAI,+BAA+B,CACvC,gCAAgC,IAAI,qCAAqC,CAC1E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,4BAA4B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,UAAU,CAAC,IAA8B;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE;aAC7B,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;aACtB,IAAI,CAAC,MAAM,CAAC,EAAE;YACb,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;gBACtB,MAAM,IAAI,+BAA+B,CACvC,6BAA6B,IAAI,oCAAoC,CACtE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QACL,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,qBAAqB;QAC3B,MAAM,aAAa,GAAG,mCAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1E,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/F,IAAI,IAAA,8BAAkB,EAAC,WAAW,CAAC,KAAK,IAAA,8BAAkB,EAAC,aAAa,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,+BAA+B,CAAC,4CAA4C,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;IAEO,4BAA4B,CAAC,IAA8B,EAAE,IAAmB;QACtF,MAAM,MAAM,GAAG,IAAA,kDAA0B,EAAC,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC9F,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,+BAA+B,CAAC,iBAAiB,IAAI,uBAAuB,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC;QACzD,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC;QAChE,IACE,kBAAkB,CAAC,IAAI,KAAK,gBAAgB,CAAC,IAAI;YACjD,kBAAkB,CAAC,WAAW,KAAK,gBAAgB,CAAC,WAAW;YAC/D,kBAAkB,CAAC,YAAY,KAAK,gBAAgB,CAAC,YAAY;YACjE,kBAAkB,CAAC,UAAU,KAAK,gBAAgB,CAAC,UAAU;YAC7D,IAAA,8BAAkB,EAAC,kBAAkB,CAAC,OAAO,CAAC;gBAC5C,IAAA,8BAAkB,EAAC,gBAAgB,CAAC,OAAO,CAAC;YAC9C,IAAA,8BAAkB,EAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,IAAA,8BAAkB,EAAC,gBAAgB,CAAC,IAAI,CAAC,EACzF,CAAC;YACD,MAAM,IAAI,+BAA+B,CACvC,iBAAiB,IAAI,wCAAwC,CAC9D,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AA9ID,oEA8IC;AAED,SAAgB,kCAAkC,CAChD,OAA4C;IAE5C,OAAO,IAAI,4BAA4B,CAAC,OAAO,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,2BAA2B,GAAoC,MAAM,CAAC,MAAM,CAAC;IACjF,SAAS,EAAE,GAAG,EAAE,mDAAQ,yBAAyB,GAAC;IAClD,YAAY,EAAE,GAAG,EAAE,mDAAQ,4BAA4B,GAAC;IACxD,IAAI,EAAE,GAAG,EAAE,mDAAQ,oBAAoB,GAAC;IACxC,IAAI,EAAE,GAAG,EAAE,mDAAQ,oBAAoB,GAAC;IACxC,UAAU,EAAE,GAAG,EAAE,mDAAQ,0BAA0B,GAAC;IACpD,SAAS,EAAE,GAAG,EAAE,mDAAQ,yBAAyB,GAAC;IAClD,UAAU,EAAE,GAAG,EAAE,mDAAQ,0BAA0B,GAAC;CACrD,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,IAA8B;IACnD,OAAO,IAAI,CAAC,UAAU,KAAK,OAAO;QAChC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE;QACvB,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,gBAAgB,IAAI,GAAG,IAAI,CAAC,IAAI,oBAAoB,EAAE,CAAC;AAC7F,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/runtime/first-party-long-tail-provider.d.ts

@@ -0,0 +1,57 @@
+import type { OrionCodeTool, ToolContext } from '../framework/tool';
+import { type BuiltinToolCatalogV1 } from './builtin-tool-provider';
+import { type FirstPartyLongTailToolGroupV1, type FirstPartyLongTailToolNameV1 } from './long-tail-tools/descriptors';
+export type { FirstPartyLongTailToolGroupV1, FirstPartyLongTailToolNameV1, } from './long-tail-tools/descriptors';
+export declare const FIRST_PARTY_LONG_TAIL_PROVIDER_VERSION: 1;
+export interface FirstPartyLongTailToolModuleV1 {
+    readonly tools: readonly OrionCodeTool[];
+}
+export type FirstPartyLongTailGroupImporterV1 = () => Promise<FirstPartyLongTailToolModuleV1>;
+export type FirstPartyLongTailGroupImporterMapV1 = Readonly<Record<FirstPartyLongTailToolGroupV1, FirstPartyLongTailGroupImporterV1>>;
+export interface FirstPartyLongTailToolProviderOptionsV1 {
+    readonly context: ToolContext;
+    /** Group-level injection seam; unspecified groups keep their production dynamic import. */
+    readonly importers?: Partial<FirstPartyLongTailGroupImporterMapV1>;
+}
+export interface FirstPartyLongTailToolProviderStatsV1 {
+    readonly version: 1;
+    /** Compatibility proof: this provider never imports the retired src/tools barrel. */
+    readonly monolithicModuleLoads: 0;
+    readonly groupModuleLoads: number;
+    readonly loadedGroups: readonly FirstPartyLongTailToolGroupV1[];
+    readonly resolvedExecutors: number;
+    readonly resolvedToolNames: readonly FirstPartyLongTailToolNameV1[];
+}
+export declare class FirstPartyLongTailToolProviderError extends Error {
+    readonly code = "ORION_FIRST_PARTY_LONG_TAIL_PROVIDER_INVALID";
+    constructor(message: string);
+}
+/**
+ * Descriptor-only catalog for first-party Git, LSP and Web capabilities.
+ *
+ * Construction has no dependency on src/tools. An implementation group is
+ * imported only after one of its exact frozen bindings executes. The loaded
+ * implementation must reproduce the descriptor, schema, executor and risk
+ * identity captured before the model boundary or execution fails closed.
+ */
+export declare class FirstPartyLongTailToolProviderV1 {
+    readonly version: 1;
+    readonly catalog: BuiltinToolCatalogV1;
+    private readonly context;
+    private readonly importers;
+    private readonly groupFlights;
+    private readonly implementations;
+    private readonly loadedGroups;
+    constructor(options: FirstPartyLongTailToolProviderOptionsV1);
+    stats(): FirstPartyLongTailToolProviderStatsV1;
+    private createLazyTool;
+    private execute;
+    private resolveImplementation;
+    private loadGroup;
+    private assertGroupExports;
+    private assertCatalogIdentity;
+    private assertImplementationIdentity;
+    private assertInvocationPolicy;
+}
+export declare function createFirstPartyLongTailToolProviderV1(options: FirstPartyLongTailToolProviderOptionsV1): FirstPartyLongTailToolProviderV1;
+//# sourceMappingURL=first-party-long-tail-provider.d.ts.map

package/dist/runtime/first-party-long-tail-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"first-party-long-tail-provider.d.ts","sourceRoot":"","sources":["../../src/runtime/first-party-long-tail-provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAoB,WAAW,EAAc,MAAM,mBAAmB,CAAC;AAClG,OAAO,EAA8B,KAAK,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,EAEL,KAAK,6BAA6B,EAClC,KAAK,4BAA4B,EAElC,MAAM,+BAA+B,CAAC;AAGvC,YAAY,EACV,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,+BAA+B,CAAC;AAEvC,eAAO,MAAM,sCAAsC,EAAG,CAAU,CAAC;AAEjE,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,SAAS,aAAa,EAAE,CAAC;CAC1C;AAED,MAAM,MAAM,iCAAiC,GAAG,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAC9F,MAAM,MAAM,oCAAoC,GAAG,QAAQ,CACzD,MAAM,CAAC,6BAA6B,EAAE,iCAAiC,CAAC,CACzE,CAAC;AAEF,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,2FAA2F;IAC3F,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,oCAAoC,CAAC,CAAC;CACpE;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,qFAAqF;IACrF,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAClC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAChE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,4BAA4B,EAAE,CAAC;CACrE;AAED,qBAAa,mCAAoC,SAAQ,KAAK;IAC5D,QAAQ,CAAC,IAAI,kDAAkD;gBAEnD,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;GAOG;AACH,qBAAa,gCAAgC;IAC3C,QAAQ,CAAC,OAAO,IAA0C;IAC1D,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;IAEvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAuC;IACjE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAGzB;IACJ,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA0D;IAC1F,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA4C;gBAE7D,OAAO,EAAE,uCAAuC;IAe5D,KAAK,IAAI,qCAAqC;IAW9C,OAAO,CAAC,cAAc;YAsBR,OAAO;YAoBP,qBAAqB;IAenC,OAAO,CAAC,SAAS;IAejB,OAAO,CAAC,kBAAkB;IAoB1B,OAAO,CAAC,qBAAqB;IA2B7B,OAAO,CAAC,4BAA4B;IA4BpC,OAAO,CAAC,sBAAsB;CA4B/B;AAED,wBAAgB,sCAAsC,CACpD,OAAO,EAAE,uCAAuC,GAC/C,gCAAgC,CAElC"}

package/dist/runtime/first-party-long-tail-provider.js

@@ -0,0 +1,238 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FirstPartyLongTailToolProviderV1 = exports.FirstPartyLongTailToolProviderError = exports.FIRST_PARTY_LONG_TAIL_PROVIDER_VERSION = void 0;
+exports.createFirstPartyLongTailToolProviderV1 = createFirstPartyLongTailToolProviderV1;
+const builtin_tool_provider_1 = require("./builtin-tool-provider");
+const descriptors_1 = require("./long-tail-tools/descriptors");
+const canonical_1 = require("./protocol/canonical");
+exports.FIRST_PARTY_LONG_TAIL_PROVIDER_VERSION = 1;
+class FirstPartyLongTailToolProviderError extends Error {
+    constructor(message) {
+        super(message);
+        this.code = 'ORION_FIRST_PARTY_LONG_TAIL_PROVIDER_INVALID';
+        this.name = 'FirstPartyLongTailToolProviderError';
+    }
+}
+exports.FirstPartyLongTailToolProviderError = FirstPartyLongTailToolProviderError;
+/**
+ * Descriptor-only catalog for first-party Git, LSP and Web capabilities.
+ *
+ * Construction has no dependency on src/tools. An implementation group is
+ * imported only after one of its exact frozen bindings executes. The loaded
+ * implementation must reproduce the descriptor, schema, executor and risk
+ * identity captured before the model boundary or execution fails closed.
+ */
+class FirstPartyLongTailToolProviderV1 {
+    constructor(options) {
+        this.version = exports.FIRST_PARTY_LONG_TAIL_PROVIDER_VERSION;
+        this.groupFlights = new Map();
+        this.implementations = new Map();
+        this.loadedGroups = new Set();
+        if (!options.context?.cwd?.trim()) {
+            throw new FirstPartyLongTailToolProviderError('Long-tail provider context.cwd must not be empty.');
+        }
+        this.context = options.context;
+        this.importers = Object.freeze({ ...DEFAULT_LONG_TAIL_IMPORTERS, ...options.importers });
+        this.catalog = (0, builtin_tool_provider_1.createBuiltinToolCatalogV1)(descriptors_1.LONG_TAIL_TOOL_DESCRIPTORS.map(spec => this.createLazyTool(spec)), { context: options.context });
+        this.assertCatalogIdentity();
+    }
+    stats() {
+        return Object.freeze({
+            version: exports.FIRST_PARTY_LONG_TAIL_PROVIDER_VERSION,
+            monolithicModuleLoads: 0,
+            groupModuleLoads: this.loadedGroups.size,
+            loadedGroups: Object.freeze([...this.loadedGroups].sort(compare)),
+            resolvedExecutors: this.implementations.size,
+            resolvedToolNames: Object.freeze([...this.implementations.keys()].sort(compare)),
+        });
+    }
+    createLazyTool(spec) {
+        return {
+            name: spec.name,
+            aliases: [...spec.aliases],
+            description: spec.description,
+            parameters: structuredClone(spec.parameters),
+            execute: (args, context) => this.execute(spec, args, context),
+            checkPermissions: args => clonePermission(spec.permission(args)),
+            isConcurrencySafe: args => spec.concurrencySafe(args),
+            isReadOnly: args => spec.readOnly(args),
+            isDestructive: args => spec.destructive(args),
+            isFileEdit: args => spec.fileEdit(args),
+            userFacingName: args => spec.userFacingName(args),
+            ...(spec.summarize
+                ? {
+                    getSummary: (args, result) => spec.summarize(args, result),
+                }
+                : {}),
+        };
+    }
+    async execute(spec, args, context) {
+        const tool = await this.resolveImplementation(spec);
+        try {
+            this.assertInvocationPolicy(spec, tool, args, context);
+            const inputError = tool.validateInput?.({ ...args });
+            if (inputError)
+                return failure(inputError);
+            const permission = tool.checkPermissions?.({ ...args }, context);
+            if (permission?.behavior === 'deny') {
+                return failure(permission.reason ?? `${spec.name} was denied by its implementation.`);
+            }
+            return await tool.execute({ ...args }, { ...this.context, ...context });
+        }
+        catch (error) {
+            return failure(errorMessage(error));
+        }
+    }
+    async resolveImplementation(spec) {
+        const cached = this.implementations.get(spec.name);
+        if (cached)
+            return cached;
+        const module = await this.loadGroup(spec.group);
+        const tool = module.tools.find(candidate => candidate.name === spec.name);
+        if (!tool) {
+            throw new FirstPartyLongTailToolProviderError(`Selected ${spec.group} executor group did not export ${spec.name}.`);
+        }
+        this.assertImplementationIdentity(spec.name, tool);
+        this.implementations.set(spec.name, tool);
+        return tool;
+    }
+    loadGroup(group) {
+        const cached = this.groupFlights.get(group);
+        if (cached)
+            return cached;
+        const importer = this.importers[group];
+        const flight = Promise.resolve()
+            .then(() => importer())
+            .then(module => {
+            this.assertGroupExports(group, module);
+            this.loadedGroups.add(group);
+            return module;
+        });
+        this.groupFlights.set(group, flight);
+        return flight;
+    }
+    assertGroupExports(group, module) {
+        if (!Array.isArray(module?.tools)) {
+            throw new FirstPartyLongTailToolProviderError(`First-party ${group} importer did not return a tools array.`);
+        }
+        const expected = descriptors_1.LONG_TAIL_TOOL_DESCRIPTORS.filter(spec => spec.group === group)
+            .map(spec => spec.name)
+            .sort(compare);
+        const actual = module.tools.map(tool => tool?.name).sort(compare);
+        if ((0, canonical_1.digestRuntimeValue)(actual) !== (0, canonical_1.digestRuntimeValue)(expected)) {
+            throw new FirstPartyLongTailToolProviderError(`First-party ${group} executor group exports do not match its frozen descriptor set.`);
+        }
+    }
+    assertCatalogIdentity() {
+        const expected = descriptors_1.LONG_TAIL_TOOL_DESCRIPTORS.map(spec => spec.name).sort(compare);
+        const actual = this.catalog.candidates
+            .map(candidate => candidate.descriptor.name)
+            .sort(compare);
+        if ((0, canonical_1.digestRuntimeValue)(actual) !== (0, canonical_1.digestRuntimeValue)(expected)) {
+            throw new FirstPartyLongTailToolProviderError('Lightweight long-tail catalog identity drifted.');
+        }
+        for (const spec of descriptors_1.LONG_TAIL_TOOL_DESCRIPTORS) {
+            const descriptor = this.catalog.entries.find(entry => entry.candidate.descriptor.name === spec.name)?.candidate.descriptor;
+            if (!descriptor ||
+                descriptor.executorId !== `builtin:${spec.name}:v1` ||
+                descriptor.schemaDigest !== (0, canonical_1.digestRuntimeValue)(spec.parameters) ||
+                (0, canonical_1.digestRuntimeValue)(descriptor.risk) !== (0, canonical_1.digestRuntimeValue)(spec.risk)) {
+                throw new FirstPartyLongTailToolProviderError(`Lightweight long-tail descriptor ${spec.name} schema/risk/executor identity drifted.`);
+            }
+        }
+    }
+    assertImplementationIdentity(name, tool) {
+        const actual = (0, builtin_tool_provider_1.createBuiltinToolCatalogV1)([tool], { context: this.context });
+        const expected = this.catalog.entries.find(entry => entry.candidate.descriptor.name === name);
+        if (!expected || actual.entries.length !== 1) {
+            throw new FirstPartyLongTailToolProviderError(`Long-tail executor ${name} cannot be validated.`);
+        }
+        const expectedDescriptor = expected.candidate.descriptor;
+        const actualDescriptor = actual.entries[0].candidate.descriptor;
+        if (expectedDescriptor.name !== actualDescriptor.name ||
+            expectedDescriptor.description !== actualDescriptor.description ||
+            expectedDescriptor.schemaDigest !== actualDescriptor.schemaDigest ||
+            expectedDescriptor.executorId !== actualDescriptor.executorId ||
+            (0, canonical_1.digestRuntimeValue)(expectedDescriptor.aliases) !==
+                (0, canonical_1.digestRuntimeValue)(actualDescriptor.aliases) ||
+            (0, canonical_1.digestRuntimeValue)(expectedDescriptor.risk) !== (0, canonical_1.digestRuntimeValue)(actualDescriptor.risk)) {
+            throw new FirstPartyLongTailToolProviderError(`Long-tail executor ${name} does not match its frozen descriptor.`);
+        }
+    }
+    assertInvocationPolicy(spec, tool, args, context) {
+        const expectedPermission = spec.permission(args);
+        const actualPermission = tool.checkPermissions?.({ ...args }, context) ?? {
+            behavior: 'allow',
+        };
+        if (actualPermission.behavior !== expectedPermission.behavior) {
+            throw new FirstPartyLongTailToolProviderError(`Long-tail executor ${spec.name} permission behavior drifted.`);
+        }
+        for (const [label, expected, actual] of [
+            ['read-only', spec.readOnly(args), tool.isReadOnly?.({ ...args }) ?? false],
+            ['destructive', spec.destructive(args), tool.isDestructive?.({ ...args }) ?? false],
+            ['file-edit', spec.fileEdit(args), tool.isFileEdit?.({ ...args }) ?? false],
+            ['concurrency', spec.concurrencySafe(args), tool.isConcurrencySafe?.({ ...args }) ?? false],
+        ]) {
+            if (expected !== actual) {
+                throw new FirstPartyLongTailToolProviderError(`Long-tail executor ${spec.name} ${label} metadata drifted.`);
+            }
+        }
+    }
+}
+exports.FirstPartyLongTailToolProviderV1 = FirstPartyLongTailToolProviderV1;
+function createFirstPartyLongTailToolProviderV1(options) {
+    return new FirstPartyLongTailToolProviderV1(options);
+}
+const DEFAULT_LONG_TAIL_IMPORTERS = Object.freeze({
+    git: async () => ({ tools: (await Promise.resolve().then(() => __importStar(require('../tools/git')))).GIT_TOOLS }),
+    lsp: async () => ({ tools: (await Promise.resolve().then(() => __importStar(require('../tools/lsp')))).lspTools }),
+    web: async () => ({ tools: (await Promise.resolve().then(() => __importStar(require('../tools/web')))).WEB_TOOLS }),
+});
+function clonePermission(permission) {
+    return permission.reason
+        ? { behavior: permission.behavior, reason: permission.reason }
+        : { behavior: permission.behavior };
+}
+function failure(error) {
+    return { success: false, output: '', error };
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function compare(left, right) {
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+//# sourceMappingURL=first-party-long-tail-provider.js.map

package/dist/runtime/first-party-long-tail-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"first-party-long-tail-provider.js","sourceRoot":"","sources":["../../src/runtime/first-party-long-tail-provider.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmRA,wFAIC;AAtRD,mEAAgG;AAChG,+DAKuC;AACvC,oDAA0D;AAO7C,QAAA,sCAAsC,GAAG,CAAU,CAAC;AA2BjE,MAAa,mCAAoC,SAAQ,KAAK;IAG5D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,SAAI,GAAG,8CAA8C,CAAC;QAI7D,IAAI,CAAC,IAAI,GAAG,qCAAqC,CAAC;IACpD,CAAC;CACF;AAPD,kFAOC;AAED;;;;;;;GAOG;AACH,MAAa,gCAAgC;IAa3C,YAAY,OAAgD;QAZnD,YAAO,GAAG,8CAAsC,CAAC;QAKzC,iBAAY,GAAG,IAAI,GAAG,EAGpC,CAAC;QACa,oBAAe,GAAG,IAAI,GAAG,EAA+C,CAAC;QACzE,iBAAY,GAAG,IAAI,GAAG,EAAiC,CAAC;QAGvE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,mCAAmC,CAC3C,mDAAmD,CACpD,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,2BAA2B,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,OAAO,GAAG,IAAA,kDAA0B,EACvC,wCAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EACjE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAC7B,CAAC;QACF,IAAI,CAAC,qBAAqB,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,8CAAsC;YAC/C,qBAAqB,EAAE,CAAC;YACxB,gBAAgB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;YACxC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjE,iBAAiB,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI;YAC5C,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;SACjF,CAAC,CAAC;IACL,CAAC;IAEO,cAAc,CAAC,IAAkC;QACvD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;YAC1B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC;YAC5C,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC;YAC7D,gBAAgB,EAAE,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YAChE,iBAAiB,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YACrD,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACvC,aAAa,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;YAC7C,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACvC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;YACjD,GAAG,CAAC,IAAI,CAAC,SAAS;gBAChB,CAAC,CAAC;oBACE,UAAU,EAAE,CAAC,IAA6B,EAAE,MAAkB,EAAE,EAAE,CAChE,IAAI,CAAC,SAAU,CAAC,IAAI,EAAE,MAAM,CAAC;iBAChC;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,IAAkC,EAClC,IAA6B,EAC7B,OAAoB;QAEpB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YACvD,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;YACrD,IAAI,UAAU;gBAAE,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;YACjE,IAAI,UAAU,EAAE,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACpC,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,oCAAoC,CAAC,CAAC;YACxF,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,IAAkC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,mCAAmC,CAC3C,YAAY,IAAI,CAAC,KAAK,kCAAkC,IAAI,CAAC,IAAI,GAAG,CACrE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,SAAS,CAAC,KAAoC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE;aAC7B,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;aACtB,IAAI,CAAC,MAAM,CAAC,EAAE;YACb,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC7B,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;QACL,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACrC,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,kBAAkB,CACxB,KAAoC,EACpC,MAAsC;QAEtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,mCAAmC,CAC3C,eAAe,KAAK,yCAAyC,CAC9D,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,wCAA0B,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC;aAC7E,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;aACtB,IAAI,CAAC,OAAO,CAAC,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,IAAA,8BAAkB,EAAC,MAAM,CAAC,KAAK,IAAA,8BAAkB,EAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,mCAAmC,CAC3C,eAAe,KAAK,iEAAiE,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,qBAAqB;QAC3B,MAAM,QAAQ,GAAG,wCAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU;aACnC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC;aAC3C,IAAI,CAAC,OAAO,CAAC,CAAC;QACjB,IAAI,IAAA,8BAAkB,EAAC,MAAM,CAAC,KAAK,IAAA,8BAAkB,EAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,mCAAmC,CAC3C,iDAAiD,CAClD,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,wCAA0B,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAC1C,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CACvD,EAAE,SAAS,CAAC,UAAU,CAAC;YACxB,IACE,CAAC,UAAU;gBACX,UAAU,CAAC,UAAU,KAAK,WAAW,IAAI,CAAC,IAAI,KAAK;gBACnD,UAAU,CAAC,YAAY,KAAK,IAAA,8BAAkB,EAAC,IAAI,CAAC,UAAU,CAAC;gBAC/D,IAAA,8BAAkB,EAAC,UAAU,CAAC,IAAI,CAAC,KAAK,IAAA,8BAAkB,EAAC,IAAI,CAAC,IAAI,CAAC,EACrE,CAAC;gBACD,MAAM,IAAI,mCAAmC,CAC3C,oCAAoC,IAAI,CAAC,IAAI,yCAAyC,CACvF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAEO,4BAA4B,CAClC,IAAkC,EAClC,IAAmB;QAEnB,MAAM,MAAM,GAAG,IAAA,kDAA0B,EAAC,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC9F,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,mCAAmC,CAC3C,sBAAsB,IAAI,uBAAuB,CAClD,CAAC;QACJ,CAAC;QACD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC;QACzD,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC;QAChE,IACE,kBAAkB,CAAC,IAAI,KAAK,gBAAgB,CAAC,IAAI;YACjD,kBAAkB,CAAC,WAAW,KAAK,gBAAgB,CAAC,WAAW;YAC/D,kBAAkB,CAAC,YAAY,KAAK,gBAAgB,CAAC,YAAY;YACjE,kBAAkB,CAAC,UAAU,KAAK,gBAAgB,CAAC,UAAU;YAC7D,IAAA,8BAAkB,EAAC,kBAAkB,CAAC,OAAO,CAAC;gBAC5C,IAAA,8BAAkB,EAAC,gBAAgB,CAAC,OAAO,CAAC;YAC9C,IAAA,8BAAkB,EAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,IAAA,8BAAkB,EAAC,gBAAgB,CAAC,IAAI,CAAC,EACzF,CAAC;YACD,MAAM,IAAI,mCAAmC,CAC3C,sBAAsB,IAAI,wCAAwC,CACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,sBAAsB,CAC5B,IAAkC,EAClC,IAAmB,EACnB,IAA6B,EAC7B,OAAoB;QAEpB,MAAM,kBAAkB,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,OAAO,CAAC,IAAI;YACxE,QAAQ,EAAE,OAAgB;SAC3B,CAAC;QACF,IAAI,gBAAgB,CAAC,QAAQ,KAAK,kBAAkB,CAAC,QAAQ,EAAE,CAAC;YAC9D,MAAM,IAAI,mCAAmC,CAC3C,sBAAsB,IAAI,CAAC,IAAI,+BAA+B,CAC/D,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI;YACtC,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC;YAC3E,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC;YACnF,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC;YAC3E,CAAC,aAAa,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC;SACnF,EAAE,CAAC;YACX,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,mCAAmC,CAC3C,sBAAsB,IAAI,CAAC,IAAI,IAAI,KAAK,oBAAoB,CAC7D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAtND,4EAsNC;AAED,SAAgB,sCAAsC,CACpD,OAAgD;IAEhD,OAAO,IAAI,gCAAgC,CAAC,OAAO,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,2BAA2B,GAAyC,MAAM,CAAC,MAAM,CAAC;IACtF,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,wDAAa,cAAc,GAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACtE,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,wDAAa,cAAc,GAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrE,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,wDAAa,cAAc,GAAC,CAAC,CAAC,SAAS,EAAE,CAAC;CACvE,CAAC,CAAC;AAEH,SAAS,eAAe,CAAC,UAA4B;IACnD,OAAO,UAAU,CAAC,MAAM;QACtB,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE;QAC9D,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,KAAa;IAC1C,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC"}

package/dist/runtime/first-party-tool-services.d.ts

@@ -0,0 +1,43 @@
+import type { ToolContext } from '../framework/tool';
+import type { BuiltinToolCatalogV1 } from './builtin-tool-provider';
+import type { SandboxPreparationV1, SandboxServiceV1, ToolApprovalDecisionV1, ToolApprovalServiceV1, ToolPolicyDecisionV1, ToolPolicyServiceV1 } from './tool-gateway';
+export interface FirstPartyApprovalRequestV1 {
+    readonly name: string;
+    readonly args: Readonly<Record<string, unknown>>;
+    readonly reason?: string;
+    readonly abortSignal?: AbortSignal;
+}
+export type FirstPartyApprovalHandlerV1 = (request: FirstPartyApprovalRequestV1) => boolean | Promise<boolean>;
+export declare class FirstPartyToolServiceError extends Error {
+    readonly code = "ORION_FIRST_PARTY_TOOL_SERVICE_INVALID";
+    constructor(message: string);
+}
+/**
+ * Adapts existing first-party permission evaluators to the frozen v0.2.0
+ * policy boundary. Agent display mode is deliberately absent from decisions.
+ */
+export declare class FirstPartyToolPolicyServiceV1 implements ToolPolicyServiceV1 {
+    private readonly context;
+    readonly serviceId = "first-party-tool-policy";
+    private readonly toolsByName;
+    constructor(catalog: BuiltinToolCatalogV1, context: ToolContext);
+    decide(input: Parameters<ToolPolicyServiceV1['decide']>[0]): ToolPolicyDecisionV1;
+}
+/** Confirmation is independent from containment and from BUILD/PLAN/AUTO. */
+export declare class FirstPartyToolApprovalServiceV1 implements ToolApprovalServiceV1 {
+    private readonly confirm?;
+    readonly serviceId = "first-party-tool-approval";
+    constructor(confirm?: FirstPartyApprovalHandlerV1 | undefined);
+    decide(input: Parameters<ToolApprovalServiceV1['decide']>[0]): Promise<ToolApprovalDecisionV1>;
+}
+/**
+ * Produces an auditable enforcement result before ExecutionService runs. Shell
+ * tools use the existing OS sandbox planner; in-process file tools rely on the
+ * same project-root path guards as their bound executor.
+ */
+export declare class FirstPartySandboxServiceV1 implements SandboxServiceV1 {
+    readonly serviceId = "first-party-sandbox";
+    prepare(input: Parameters<SandboxServiceV1['prepare']>[0]): SandboxPreparationV1;
+    private prepareCommand;
+}
+//# sourceMappingURL=first-party-tool-services.d.ts.map

package/dist/runtime/first-party-tool-services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"first-party-tool-services.d.ts","sourceRoot":"","sources":["../../src/runtime/first-party-tool-services.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAoB,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGvE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAEpE,OAAO,KAAK,EACV,oBAAoB,EACpB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CACpC;AAED,MAAM,MAAM,2BAA2B,GAAG,CACxC,OAAO,EAAE,2BAA2B,KACjC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEhC,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,QAAQ,CAAC,IAAI,4CAA4C;gBAE7C,OAAO,EAAE,MAAM;CAI5B;AAED;;;GAGG;AACH,qBAAa,6BAA8B,YAAW,mBAAmB;IAMrE,OAAO,CAAC,QAAQ,CAAC,OAAO;IAL1B,QAAQ,CAAC,SAAS,6BAA6B;IAC/C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+D;gBAGzF,OAAO,EAAE,oBAAoB,EACZ,OAAO,EAAE,WAAW;IAOvC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,oBAAoB;CAqElF;AAED,6EAA6E;AAC7E,qBAAa,+BAAgC,YAAW,qBAAqB;IAG/D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IAFrC,QAAQ,CAAC,SAAS,+BAA+B;gBAEpB,OAAO,CAAC,EAAE,2BAA2B,YAAA;IAE5D,MAAM,CACV,KAAK,EAAE,UAAU,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GACpD,OAAO,CAAC,sBAAsB,CAAC;CAmCnC;AAED;;;;GAIG;AACH,qBAAa,0BAA2B,YAAW,gBAAgB;IACjE,QAAQ,CAAC,SAAS,yBAAyB;IAE3C,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,oBAAoB;IAyBhF,OAAO,CAAC,cAAc;CA0BvB"}