@pellux/goodvibes-sdk 0.30.3 → 0.33.0

package/dist/platform/config/subscriptions.d.ts

@@ -3,23 +3,23 @@ export interface OAuthProviderConfig {
     readonly tokenUrl: string;
     readonly clientId: string;
     readonly redirectUri: string;
-    readonly manualRedirectUri?: string;
-    readonly scopes?: readonly string[];
-    readonly audience?: string;
-    readonly usePkce?: boolean;
-    readonly authParams?: Readonly<Record<string, string>>;
-    readonly tokenRequestEncoding?: 'form' | 'json';
-    readonly includeStateInTokenRequest?: boolean;
-    readonly tokenRequestExtras?: Readonly<Record<string, string | number | boolean>>;
-    readonly refreshRequestEncoding?: 'form' | 'json';
-    readonly refreshRequestExtras?: Readonly<Record<string, string | number | boolean>>;
-    readonly refreshScopes?: readonly string[];
-    readonly overrideAmbientApiKeys?: boolean;
+    readonly manualRedirectUri?: string | undefined;
+    readonly scopes?: readonly string[] | undefined;
+    readonly audience?: string | undefined;
+    readonly usePkce?: boolean | undefined;
+    readonly authParams?: Readonly<Record<string, string>> | undefined;
+    readonly tokenRequestEncoding?: 'form' | 'json' | undefined;
+    readonly includeStateInTokenRequest?: boolean | undefined;
+    readonly tokenRequestExtras?: Readonly<Record<string, string | number | boolean>> | undefined;
+    readonly refreshRequestEncoding?: 'form' | 'json' | undefined;
+    readonly refreshRequestExtras?: Readonly<Record<string, string | number | boolean>> | undefined;
+    readonly refreshScopes?: readonly string[] | undefined;
+    readonly overrideAmbientApiKeys?: boolean | undefined;
     readonly localCallback?: {
-        readonly host?: string;
-        readonly port?: number;
-        readonly path?: string;
-        readonly autoComplete?: boolean;
+        readonly host?: string | undefined;
+        readonly port?: number | undefined;
+        readonly path?: string | undefined;
+        readonly autoComplete?: boolean | undefined;
     };
 }
 export interface PendingSubscriptionLogin {
@@ -32,10 +32,10 @@ export interface PendingSubscriptionLogin {
 export interface ProviderSubscription {
     readonly provider: string;
     readonly accessToken: string;
-    readonly refreshToken?: string;
+    readonly refreshToken?: string | undefined;
     readonly tokenType: string;
-    readonly expiresAt?: number;
-    readonly scopes?: readonly string[];
+    readonly expiresAt?: number | undefined;
+    readonly scopes?: readonly string[] | undefined;
     readonly authMode: 'oauth';
     readonly overrideAmbientApiKeys: boolean;
     readonly createdAt: number;

package/dist/platform/config/subscriptions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subscriptions.d.ts","sourceRoot":"","sources":["../../../src/platform/config/subscriptions.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChD,QAAQ,CAAC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAC9C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IAClF,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAClD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;IACpF,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE;QACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;KACjC,CAAC;CACH;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAaD;;;;;;;;;;;;GAYG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;gBAEX,IAAI,EAAE,MAAM;IAI/B,OAAO,CAAC,IAAI;IAaZ,OAAO,CAAC,KAAK;IAKN,IAAI,IAAI,oBAAoB,EAAE;IAI9B,WAAW,IAAI,wBAAwB,EAAE;IAIzC,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI;IAIlD,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAMzC,kBAAkB,CAC7B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IASZ,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,wBAAwB,CAAA;KAAE,CAAC;IAqBxI,kBAAkB,CAC7B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,mBAAmB,EAC3B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,oBAAoB,CAAC;IAoCnB,iBAAiB,CAC5B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,oBAAoB,CAAC;IAkCzB,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IASjC,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,wBAAwB,GAAG,IAAI;IAI7D,WAAW,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI;IAMpD,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAMpC,gBAAgB,CAAC,YAAY,EAAE,oBAAoB,GAAG,oBAAoB;CAOlF"}
+{"version":3,"file":"subscriptions.d.ts","sourceRoot":"","sources":["../../../src/platform/config/subscriptions.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;IACnE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,0BAA0B,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IAC9F,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;IAChG,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACtD,QAAQ,CAAC,aAAa,CAAC,EAAE;QACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACnC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;KAC7C,CAAC;CACH;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAaD;;;;;;;;;;;;GAYG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;gBAEX,IAAI,EAAE,MAAM;IAI/B,OAAO,CAAC,IAAI;IAaZ,OAAO,CAAC,KAAK;IAKN,IAAI,IAAI,oBAAoB,EAAE;IAI9B,WAAW,IAAI,wBAAwB,EAAE;IAIzC,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI;IAIlD,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAMzC,kBAAkB,CAC7B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IASZ,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,wBAAwB,CAAA;KAAE,CAAC;IAqBxI,kBAAkB,CAC7B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,mBAAmB,EAC3B,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,oBAAoB,CAAC;IAoCnB,iBAAiB,CAC5B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,oBAAoB,CAAC;IAkCzB,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IASjC,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,wBAAwB,GAAG,IAAI;IAI7D,WAAW,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI;IAMpD,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAMpC,gBAAgB,CAAC,YAAY,EAAE,oBAAoB,GAAG,oBAAoB;CAOlF"}

package/dist/platform/config/tool-llm.d.ts

@@ -5,13 +5,13 @@
  * semantic diff, auto-heal, commit messages, prompt hooks, etc.
  *
  * Resolution order:
- *   1. tools.llmProvider + tools.llmModel from config (if both set)
+ *   1. tools.llmProvider + tools.llmModel from config
  *   2. Currently selected provider/model from providerRegistry
  *
  * Design constraints:
- *   - Never throws from ToolLLM.chat() — returns empty string on any error
- *   - Logs failures via logger.debug (tool LLM failures are expected when no key)
- *   - Singleton pattern — import `toolLLM` for use
+ *   - Disabled tool LLM resolves to null.
+ *   - Configured routes are provider-qualified through the model registry.
+ *   - ToolLLM.chat() throws request and configuration failures.
  */
 import type { ConfigManager } from './manager.js';
 import type { LLMProvider } from '../providers/interface.js';
@@ -23,22 +23,25 @@ export interface ResolvedToolLLM {
 }
 export interface ToolLLMDeps {
     readonly configManager: Pick<ConfigManager, 'get'>;
-    readonly providerRegistry: Pick<ProviderRegistry, 'require' | 'getCurrentModel' | 'getForModel'>;
+    readonly providerRegistry: Pick<ProviderRegistry, 'getCurrentModel' | 'getForModel'>;
+}
+export declare class ToolLLMUnavailableError extends Error {
+    constructor(message: string);
 }
 /**
  * Resolve the LLM provider and model to use for tool-internal operations.
  *
  * Resolution order:
- *   1. If tools.llmProvider + tools.llmModel are both set in config, use those.
- *   2. Otherwise fall back to the currently selected provider/model.
+ *   1. If tools.llmProvider + tools.llmModel are set in config, use that route.
+ *   2. Otherwise use the currently selected provider/model.
  *
- * Returns null if resolution fails (e.g. unknown provider name).
+ * Returns null only when tools.llmEnabled is false.
  */
 export declare function resolveToolLLM(deps: ToolLLMDeps): ResolvedToolLLM | null;
 /** Chat options for tool-internal LLM calls. */
 export interface ToolLLMChatOptions {
-    maxTokens?: number;
-    systemPrompt?: string;
+    maxTokens?: number | undefined;
+    systemPrompt?: string | undefined;
 }
 /**
  * ToolLLM — lightweight LLM interface for internal tool operations.
@@ -46,7 +49,8 @@ export interface ToolLLMChatOptions {
  * Usage:
  *   const result = await toolLLM.chat('Generate a commit message for: ...');
  *
- * Always returns a string — empty string on any failure.
+ * Returns provider text. Throws when disabled, unresolved, or when the provider
+ * request fails.
  */
 export declare class ToolLLM {
     private readonly deps;
@@ -56,7 +60,7 @@ export declare class ToolLLM {
      *
      * @param prompt   The user prompt to send.
      * @param options  Optional maxTokens and systemPrompt.
-     * @returns        The assistant's text response, or empty string on failure.
+     * @returns        The assistant's text response.
      */
     chat(prompt: string, options?: ToolLLMChatOptions): Promise<string>;
 }

package/dist/platform/config/tool-llm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-llm.d.ts","sourceRoot":"","sources":["../../../src/platform/config/tool-llm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAIjE,kEAAkE;AAClE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,WAAW,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACnD,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,SAAS,GAAG,iBAAiB,GAAG,aAAa,CAAC,CAAC;CAClG;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,eAAe,GAAG,IAAI,CAsBxE;AAED,gDAAgD;AAChD,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,qBAAa,OAAO;IACN,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,WAAW;IAE9C;;;;;;OAMG;IACG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC;CAsB9E"}
+{"version":3,"file":"tool-llm.d.ts","sourceRoot":"","sources":["../../../src/platform/config/tool-llm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAKjE,kEAAkE;AAClE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,WAAW,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACnD,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,iBAAiB,GAAG,aAAa,CAAC,CAAC;CACtF;AAED,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAkBD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,eAAe,GAAG,IAAI,CAwBxE;AAED,gDAAgD;AAChD,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED;;;;;;;;GAQG;AACH,qBAAa,OAAO;IACN,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,WAAW;IAE9C;;;;;;OAMG;IACG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC;CAwB9E"}

package/dist/platform/config/tool-llm.js

@@ -5,45 +5,68 @@
  * semantic diff, auto-heal, commit messages, prompt hooks, etc.
  *
  * Resolution order:
- *   1. tools.llmProvider + tools.llmModel from config (if both set)
+ *   1. tools.llmProvider + tools.llmModel from config
  *   2. Currently selected provider/model from providerRegistry
  *
  * Design constraints:
- *   - Never throws from ToolLLM.chat() — returns empty string on any error
- *   - Logs failures via logger.debug (tool LLM failures are expected when no key)
- *   - Singleton pattern — import `toolLLM` for use
+ *   - Disabled tool LLM resolves to null.
+ *   - Configured routes are provider-qualified through the model registry.
+ *   - ToolLLM.chat() throws request and configuration failures.
  */
+import { splitModelRegistryKey } from '../providers/registry-helpers.js';
 import { logger } from '../utils/logger.js';
 import { summarizeError } from '../utils/error-display.js';
+export class ToolLLMUnavailableError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ToolLLMUnavailableError';
+    }
+}
+function readOptionalString(value) {
+    return typeof value === 'string' ? value.trim() : '';
+}
+function resolveConfiguredToolRoute(deps, providerId, modelId) {
+    const registryKey = modelId.includes(':') ? modelId : `${providerId}:${modelId}`;
+    const parsed = splitModelRegistryKey(registryKey);
+    if (parsed.providerId !== providerId) {
+        throw new Error(`Tool LLM model '${modelId}' conflicts with provider '${providerId}'.`);
+    }
+    return {
+        provider: deps.providerRegistry.getForModel(registryKey, providerId),
+        modelId: parsed.resolvedModelId,
+    };
+}
 /**
  * Resolve the LLM provider and model to use for tool-internal operations.
  *
  * Resolution order:
- *   1. If tools.llmProvider + tools.llmModel are both set in config, use those.
- *   2. Otherwise fall back to the currently selected provider/model.
+ *   1. If tools.llmProvider + tools.llmModel are set in config, use that route.
+ *   2. Otherwise use the currently selected provider/model.
  *
- * Returns null if resolution fails (e.g. unknown provider name).
+ * Returns null only when tools.llmEnabled is false.
  */
 export function resolveToolLLM(deps) {
     try {
         const enabled = deps.configManager.get('tools.llmEnabled');
         if (!enabled)
             return null;
-        const cfgProvider = deps.configManager.get('tools.llmProvider');
-        const cfgModel = deps.configManager.get('tools.llmModel');
-        if (cfgProvider && cfgModel) {
-            // Explicit config: resolve by provider name
-            const provider = deps.providerRegistry.require(cfgProvider);
-            return { provider, modelId: cfgModel };
+        const cfgProvider = readOptionalString(deps.configManager.get('tools.llmProvider'));
+        const cfgModel = readOptionalString(deps.configManager.get('tools.llmModel'));
+        if (cfgProvider || cfgModel) {
+            if (!cfgProvider || !cfgModel) {
+                throw new Error('Tool LLM routing requires both tools.llmProvider and tools.llmModel.');
+            }
+            return resolveConfiguredToolRoute(deps, cfgProvider, cfgModel);
         }
-        // Fallback: use currently selected provider/model
+        // Main route: use the unambiguous current registry key, then send the
+        // provider-local model id to the provider implementation.
         const currentDef = deps.providerRegistry.getCurrentModel();
-        const provider = deps.providerRegistry.getForModel(currentDef.id, currentDef.provider);
+        const provider = deps.providerRegistry.getForModel(currentDef.registryKey, currentDef.provider);
         return { provider, modelId: currentDef.id };
     }
     catch (err) {
-        logger.debug('resolveToolLLM: failed to resolve provider/model', { error: summarizeError(err) });
-        return null;
+        logger.error('resolveToolLLM: failed to resolve provider/model', { error: summarizeError(err) });
+        throw err;
     }
 }
 /**
@@ -52,7 +75,8 @@ export function resolveToolLLM(deps) {
  * Usage:
  *   const result = await toolLLM.chat('Generate a commit message for: ...');
  *
- * Always returns a string — empty string on any failure.
+ * Returns provider text. Throws when disabled, unresolved, or when the provider
+ * request fails.
  */
 export class ToolLLM {
     deps;
@@ -64,14 +88,13 @@ export class ToolLLM {
      *
      * @param prompt   The user prompt to send.
      * @param options  Optional maxTokens and systemPrompt.
-     * @returns        The assistant's text response, or empty string on failure.
+     * @returns        The assistant's text response.
      */
     async chat(prompt, options = {}) {
         try {
             const resolved = resolveToolLLM(this.deps);
             if (!resolved) {
-                logger.debug('ToolLLM.chat: no provider resolved, returning empty string');
-                return '';
+                throw new ToolLLMUnavailableError('Tool LLM is disabled.');
             }
             const { provider, modelId } = resolved;
             const response = await provider.chat({
@@ -80,11 +103,14 @@ export class ToolLLM {
                 maxTokens: options.maxTokens ?? 1024,
                 systemPrompt: options.systemPrompt,
             });
-            return response.content ?? '';
+            if (typeof response.content !== 'string') {
+                throw new Error('Tool LLM response did not include string content.');
+            }
+            return response.content;
         }
         catch (err) {
-            logger.debug('ToolLLM.chat: request failed (non-fatal)', { error: summarizeError(err) });
-            return '';
+            logger.error('ToolLLM.chat: request failed', { error: summarizeError(err) });
+            throw err;
         }
     }
 }

package/dist/platform/control-plane/approval-broker.d.ts

@@ -6,24 +6,24 @@ export interface SharedApprovalAuditRecord {
     readonly id: string;
     readonly action: 'created' | 'claimed' | 'approved' | 'denied' | 'cancelled' | 'expired' | 'updated';
     readonly actor: string;
-    readonly actorSurface?: string;
+    readonly actorSurface?: string | undefined;
     readonly createdAt: number;
-    readonly note?: string;
+    readonly note?: string | undefined;
 }
 export interface SharedApprovalRecord {
     readonly id: string;
     readonly callId: string;
-    readonly sessionId?: string;
-    readonly routeId?: string;
+    readonly sessionId?: string | undefined;
+    readonly routeId?: string | undefined;
     readonly status: SharedApprovalStatus;
     readonly request: PermissionPromptRequest;
     readonly createdAt: number;
     readonly updatedAt: number;
-    readonly claimedBy?: string;
-    readonly claimedAt?: number;
-    readonly resolvedAt?: number;
-    readonly resolvedBy?: string;
-    readonly decision?: PermissionPromptDecision;
+    readonly claimedBy?: string | undefined;
+    readonly claimedAt?: number | undefined;
+    readonly resolvedAt?: number | undefined;
+    readonly resolvedBy?: string | undefined;
+    readonly decision?: PermissionPromptDecision | undefined;
     readonly metadata: Record<string, unknown>;
     readonly audit: readonly SharedApprovalAuditRecord[];
 }
@@ -32,11 +32,11 @@ interface SharedApprovalStoreSnapshot extends Record<string, unknown> {
 }
 export interface RequestSharedApprovalInput {
     readonly request: PermissionPromptRequest;
-    readonly sessionId?: string;
-    readonly routeId?: string;
-    readonly metadata?: Record<string, unknown>;
-    readonly localPrompt?: PermissionRequestHandler;
-    readonly timeoutMs?: number;
+    readonly sessionId?: string | undefined;
+    readonly routeId?: string | undefined;
+    readonly metadata?: Record<string, unknown> | undefined;
+    readonly localPrompt?: PermissionRequestHandler | undefined;
+    readonly timeoutMs?: number | undefined;
 }
 type ApprovalListener = (approval: SharedApprovalRecord) => void;
 type ApprovalPublisher = {
@@ -51,8 +51,8 @@ export declare class ApprovalBroker {
     private publisher;
     private loaded;
     constructor(options: {
-        readonly store?: PersistentStore<SharedApprovalStoreSnapshot>;
-        readonly storePath?: string;
+        readonly store?: PersistentStore<SharedApprovalStoreSnapshot> | undefined;
+        readonly storePath?: string | undefined;
     });
     subscribe(listener: ApprovalListener): () => void;
     setPublisher(publisher: ApprovalPublisher | null): void;
@@ -63,16 +63,16 @@ export declare class ApprovalBroker {
     claimApproval(approvalId: string, actor: string, actorSurface?: string, note?: string): Promise<SharedApprovalRecord | null>;
     resolveApproval(approvalId: string, input: {
         readonly approved: boolean;
-        readonly remember?: boolean;
+        readonly remember?: boolean | undefined;
         readonly actor: string;
-        readonly actorSurface?: string;
-        readonly note?: string;
+        readonly actorSurface?: string | undefined;
+        readonly note?: string | undefined;
     }): Promise<SharedApprovalRecord | null>;
     recordRemoteUpdate(approvalId: string, input: {
         readonly actor: string;
-        readonly actorSurface?: string;
-        readonly note?: string;
-        readonly metadata?: Record<string, unknown>;
+        readonly actorSurface?: string | undefined;
+        readonly note?: string | undefined;
+        readonly metadata?: Record<string, unknown> | undefined;
     }): Promise<SharedApprovalRecord | null>;
     cancelApproval(approvalId: string, actor: string, actorSurface?: string, note?: string): Promise<SharedApprovalRecord | null>;
     private expireApproval;

package/dist/platform/control-plane/approval-broker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approval-broker.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/approval-broker.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,KAAK,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAC5H,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAG7D,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAE3G,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;IACrG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,wBAAwB,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACtD;AAED,UAAU,2BAA4B,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACnE,QAAQ,CAAC,SAAS,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,QAAQ,CAAC,WAAW,CAAC,EAAE,wBAAwB,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,KAAK,gBAAgB,GAAG,CAAC,QAAQ,EAAE,oBAAoB,KAAK,IAAI,CAAC;AACjE,KAAK,iBAAiB,GAAG;IACvB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACpD,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,0BAA0B,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG,IAAI,CAAC;CAC5F,CAAC;AAiBF,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+C;IACrE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2C;IACrE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAG5B;IACL,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+B;IACzD,OAAO,CAAC,SAAS,CAAkC;IACnD,OAAO,CAAC,MAAM,CAAS;gBAGrB,OAAO,EAAE;QACP,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,2BAA2B,CAAC,CAAC;QAC9D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KAC7B;IASH,SAAS,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,IAAI;IAOjD,YAAY,CAAC,SAAS,EAAE,iBAAiB,GAAG,IAAI,GAAG,IAAI;IAIjD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAU5B,aAAa,CAAC,KAAK,SAAM,GAAG,oBAAoB,EAAE;IAIlD,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI;IAItD,eAAe,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,wBAAwB,CAAC;IA4DrF,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,SAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAmB3H,eAAe,CACnB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE;QACL,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;KACxB,GACA,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAmCjC,kBAAkB,CACtB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE;QACL,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC7C,GACA,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAmBjC,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,SAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;YA4BpH,cAAc;YAwBd,OAAO;IAMrB,OAAO,CAAC,OAAO;CA8BhB"}
+{"version":3,"file":"approval-broker.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/approval-broker.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,KAAK,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAC5H,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAG7D,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAE3G,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;IACrG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACtD;AAED,UAAU,2BAA4B,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACnE,QAAQ,CAAC,SAAS,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,WAAW,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,KAAK,gBAAgB,GAAG,CAAC,QAAQ,EAAE,oBAAoB,KAAK,IAAI,CAAC;AACjE,KAAK,iBAAiB,GAAG;IACvB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACpD,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,0BAA0B,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG,IAAI,CAAC;CAC5F,CAAC;AAwIF,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+C;IACrE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2C;IACrE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAG5B;IACL,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+B;IACzD,OAAO,CAAC,SAAS,CAAkC;IACnD,OAAO,CAAC,MAAM,CAAS;gBAGrB,OAAO,EAAE;QACP,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,2BAA2B,CAAC,GAAG,SAAS,CAAC;QAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACzC;IASH,SAAS,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,IAAI;IAOjD,YAAY,CAAC,SAAS,EAAE,iBAAiB,GAAG,IAAI,GAAG,IAAI;IAIjD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAU5B,aAAa,CAAC,KAAK,SAAM,GAAG,oBAAoB,EAAE;IAIlD,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI;IAItD,eAAe,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,wBAAwB,CAAC;IA4DrF,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,SAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAmB3H,eAAe,CACnB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE;QACL,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACpC,GACA,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAmCjC,kBAAkB,CACtB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE;QACL,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;KACzD,GACA,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAmBjC,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,SAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;YA4BpH,cAAc;YAwBd,OAAO;IAMrB,OAAO,CAAC,OAAO;CA8BhB"}

package/dist/platform/control-plane/approval-broker.js

@@ -4,6 +4,116 @@ import { logger } from '../utils/logger.js';
 function sortApprovals(records) {
     return [...records].sort((a, b) => b.updatedAt - a.updatedAt || a.id.localeCompare(b.id));
 }
+const APPROVAL_STATUSES = new Set(['pending', 'claimed', 'approved', 'denied', 'cancelled', 'expired']);
+const APPROVAL_AUDIT_ACTIONS = new Set([
+    'created',
+    'claimed',
+    'approved',
+    'denied',
+    'cancelled',
+    'expired',
+    'updated',
+]);
+const PERMISSION_CATEGORIES = new Set(['read', 'write', 'execute', 'delegate']);
+const PERMISSION_RISK_LEVELS = new Set(['low', 'medium', 'high', 'critical']);
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isFiniteNumber(value) {
+    return typeof value === 'number' && Number.isFinite(value);
+}
+function isStringArray(value) {
+    return Array.isArray(value) && value.every((entry) => typeof entry === 'string');
+}
+function throwInvalidApprovalSnapshot() {
+    throw new Error('Shared approval store snapshot is invalid.');
+}
+function validateOptionalString(value) {
+    if (value !== undefined && typeof value !== 'string')
+        throwInvalidApprovalSnapshot();
+}
+function validateOptionalNumber(value) {
+    if (value !== undefined && !isFiniteNumber(value))
+        throwInvalidApprovalSnapshot();
+}
+function validatePermissionPromptRequestSnapshot(value) {
+    if (!isRecord(value))
+        throwInvalidApprovalSnapshot();
+    const category = value['category'];
+    if (typeof value['callId'] !== 'string'
+        || typeof value['tool'] !== 'string'
+        || !isRecord(value['args'])
+        || typeof category !== 'string'
+        || !PERMISSION_CATEGORIES.has(category)) {
+        throwInvalidApprovalSnapshot();
+    }
+    const analysis = value['analysis'];
+    if (!isRecord(analysis))
+        throwInvalidApprovalSnapshot();
+    const riskLevel = analysis['riskLevel'];
+    if (typeof analysis['classification'] !== 'string'
+        || typeof riskLevel !== 'string'
+        || !PERMISSION_RISK_LEVELS.has(riskLevel)
+        || typeof analysis['summary'] !== 'string'
+        || !isStringArray(analysis['reasons'])) {
+        throwInvalidApprovalSnapshot();
+    }
+    validateOptionalString(value['workingDirectory']);
+}
+function validateApprovalAuditRecord(value) {
+    if (!isRecord(value))
+        throwInvalidApprovalSnapshot();
+    if (typeof value['id'] !== 'string'
+        || typeof value['action'] !== 'string'
+        || !APPROVAL_AUDIT_ACTIONS.has(value['action'])
+        || typeof value['actor'] !== 'string'
+        || !isFiniteNumber(value['createdAt'])) {
+        throwInvalidApprovalSnapshot();
+    }
+    validateOptionalString(value['actorSurface']);
+    validateOptionalString(value['note']);
+}
+function validateApprovalRecord(value) {
+    if (!isRecord(value))
+        throwInvalidApprovalSnapshot();
+    if (typeof value['id'] !== 'string'
+        || typeof value['callId'] !== 'string'
+        || typeof value['status'] !== 'string'
+        || !APPROVAL_STATUSES.has(value['status'])
+        || !isFiniteNumber(value['createdAt'])
+        || !isFiniteNumber(value['updatedAt'])
+        || !isRecord(value['metadata'])
+        || !Array.isArray(value['audit'])) {
+        throwInvalidApprovalSnapshot();
+    }
+    validatePermissionPromptRequestSnapshot(value['request']);
+    validateOptionalString(value['sessionId']);
+    validateOptionalString(value['routeId']);
+    validateOptionalString(value['claimedBy']);
+    validateOptionalNumber(value['claimedAt']);
+    validateOptionalNumber(value['resolvedAt']);
+    validateOptionalString(value['resolvedBy']);
+    if (value['decision'] !== undefined) {
+        const decision = value['decision'];
+        if (!isRecord(decision) || typeof decision['approved'] !== 'boolean') {
+            throwInvalidApprovalSnapshot();
+        }
+        if (decision['remember'] !== undefined && typeof decision['remember'] !== 'boolean') {
+            throwInvalidApprovalSnapshot();
+        }
+    }
+    for (const audit of value['audit'])
+        validateApprovalAuditRecord(audit);
+}
+function validateApprovalSnapshot(snapshot) {
+    if (!snapshot)
+        return null;
+    if (!isRecord(snapshot) || !Array.isArray(snapshot.approvals))
+        throwInvalidApprovalSnapshot();
+    for (const approval of snapshot.approvals)
+        validateApprovalRecord(approval);
+    return snapshot;
+}
 function buildAudit(action, actor, actorSurface, note) {
     return {
         id: `apra-${randomUUID().slice(0, 8)}`,
@@ -40,7 +150,7 @@ export class ApprovalBroker {
     async start() {
         if (this.loaded)
             return;
-        const snapshot = await this.store.load();
+        const snapshot = validateApprovalSnapshot(await this.store.load());
         this.approvals.clear();
         for (const approval of snapshot?.approvals ?? []) {
             this.approvals.set(approval.id, approval);
@@ -273,7 +383,7 @@ export class ApprovalBroker {
                 listener(approval);
             }
             catch {
-                // Best-effort observer channel.
+                // Listener failures do not block approval creation.
             }
         }
     }

package/dist/platform/control-plane/conversation-message.d.ts

@@ -24,6 +24,6 @@ export interface ConversationMessageEnvelope {
     readonly source: MessageSource;
     readonly timestamp: number;
     /** Optional metadata for tool info, model id, etc. */
-    readonly metadata?: Readonly<Record<string, unknown>>;
+    readonly metadata?: Readonly<Record<string, unknown>> | undefined;
 }
 //# sourceMappingURL=conversation-message.d.ts.map

package/dist/platform/control-plane/conversation-message.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"conversation-message.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/conversation-message.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;GAIG;AACH,MAAM,MAAM,aAAa,GACrB,UAAU,GACV,qBAAqB,GACrB,0BAA0B,GAC1B,oBAAoB,GACpB,WAAW,GACX,QAAQ,GACR,MAAM,CAAC;AAEX;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD"}
+{"version":3,"file":"conversation-message.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/conversation-message.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;GAIG;AACH,MAAM,MAAM,aAAa,GACrB,UAAU,GACV,qBAAqB,GACrB,0BAA0B,GAC1B,oBAAoB,GACpB,WAAW,GACX,QAAQ,GACR,MAAM,CAAC;AAEX;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;CACnE"}

package/dist/platform/control-plane/gateway-utils.d.ts

@@ -5,11 +5,11 @@ import type { ControlPlaneServerConfig } from './types.js';
 export declare const DEFAULT_SERVER_CONFIG: ControlPlaneServerConfig;
 export declare const DEFAULT_DOMAINS: readonly RuntimeEventDomain[];
 export interface ControlPlaneEventReplayScope {
-    readonly clientKind?: string;
-    readonly clientId?: string;
-    readonly routeId?: string;
-    readonly surfaceId?: string;
-    readonly domains?: readonly RuntimeEventDomain[];
+    readonly clientKind?: string | undefined;
+    readonly clientId?: string | undefined;
+    readonly routeId?: string | undefined;
+    readonly surfaceId?: string | undefined;
+    readonly domains?: readonly RuntimeEventDomain[] | undefined;
 }
 export interface ControlPlaneRecentEvent {
     readonly id: string;
@@ -18,14 +18,14 @@ export interface ControlPlaneRecentEvent {
     readonly payload: unknown;
 }
 export interface ScopedControlPlaneRecentEvent extends ControlPlaneRecentEvent {
-    readonly replayScope?: ControlPlaneEventReplayScope;
+    readonly replayScope?: ControlPlaneEventReplayScope | undefined;
 }
 export interface ControlPlaneReplayClientOptions {
-    readonly clientId?: string;
-    readonly clientKind?: string;
-    readonly domains?: readonly RuntimeEventDomain[];
-    readonly routeId?: string;
-    readonly surfaceId?: string;
+    readonly clientId?: string | undefined;
+    readonly clientKind?: string | undefined;
+    readonly domains?: readonly RuntimeEventDomain[] | undefined;
+    readonly routeId?: string | undefined;
+    readonly surfaceId?: string | undefined;
 }
 export declare function serializeEnvelope(envelope: RuntimeEventEnvelope<AnyRuntimeEvent['type'], AnyRuntimeEvent>): Record<string, unknown>;
 export declare function toClientDescriptor(record: ControlPlaneClientRecord): ControlPlaneClientDescriptor;

package/dist/platform/control-plane/gateway-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway-utils.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/gateway-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAE5G,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE3D,eAAO,MAAM,qBAAqB,EAAE,wBAMnC,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,SAAS,kBAAkB,EAexD,CAAC;AAEF,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,6BAA8B,SAAQ,uBAAuB;IAC5E,QAAQ,CAAC,WAAW,CAAC,EAAE,4BAA4B,CAAC;CACrD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAKD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,oBAAoB,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASnI;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,wBAAwB,GAAG,4BAA4B,CASjG;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,GAAG,SAAS,GAAG,kBAAkB,EAAE,CAGhH;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAQ3E;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,6BAA6B,EACpC,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAcT;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,6BAA6B,GAAG,uBAAuB,CAO9F;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,wBAAwB,CAAC,EAC9C,GAAG,SAAa,GACf,IAAI,CAUN"}
+{"version":3,"file":"gateway-utils.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/gateway-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAC1F,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAE5G,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE3D,eAAO,MAAM,qBAAqB,EAAE,wBAMnC,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,SAAS,kBAAkB,EAexD,CAAC;AAEF,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,kBAAkB,EAAE,GAAG,SAAS,CAAC;CAC9D;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,6BAA8B,SAAQ,uBAAuB;IAC5E,QAAQ,CAAC,WAAW,CAAC,EAAE,4BAA4B,GAAG,SAAS,CAAC;CACjE;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,kBAAkB,EAAE,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAKD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,oBAAoB,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,eAAe,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASnI;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,wBAAwB,GAAG,4BAA4B,CASjG;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,GAAG,SAAS,GAAG,kBAAkB,EAAE,CAGhH;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAQ3E;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,6BAA6B,EACpC,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAcT;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,6BAA6B,GAAG,uBAAuB,CAO9F;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,wBAAwB,CAAC,EAC9C,GAAG,SAAa,GACf,IAAI,CAUN"}