@pixelzx/genesis 2026.6.27 → 2026.6.29

package/dist/text-report-BW3t_i75.js

@@ -0,0 +1,549 @@
+import { a as normalizeLowercaseStringOrEmpty } from "./string-coerce-DPP_aYVc.js";
+import { t as formatCliCommand } from "./command-format-B3Q5KD9o.js";
+import { n as VERSION } from "./version-qod78efn.js";
+import { a as buildPairingConnectRecoveryTitle, o as describePairingConnectRequirement } from "./connect-error-details-D_gb1kVo.js";
+import { n as formatTimeAgo } from "./format-relative-B39tx_LC.js";
+import "./format-OOnBOcRX.js";
+import { l as buildStatusOverviewRowsFromSurface } from "./status-runtime-shared-DBMTXWTZ.js";
+import { n as statusChannelsTableColumns, t as buildStatusChannelsTableRows } from "./channels-table-BlBKk_y2.js";
+//#region src/commands/status-overview-values.ts
+function countActiveStatusAgents(params) {
+	const activeThresholdMs = params.activeThresholdMs ?? 10 * 6e4;
+	return params.agentStatus.agents.filter((agent) => agent.lastActiveAgeMs != null && agent.lastActiveAgeMs <= activeThresholdMs).length;
+}
+function buildStatusAllAgentsValue(params) {
+	const activeAgents = countActiveStatusAgents(params);
+	return `${params.agentStatus.agents.length} total · ${params.agentStatus.bootstrapPendingCount} bootstrapping · ${activeAgents} active · ${params.agentStatus.totalSessions} sessions`;
+}
+function buildStatusSecretsValue(count) {
+	return count > 0 ? `${count} diagnostic${count === 1 ? "" : "s"}` : "none";
+}
+function buildStatusEventsValue(params) {
+	return params.queuedSystemEvents.length > 0 ? `${params.queuedSystemEvents.length} queued` : "none";
+}
+function buildStatusProbesValue(params) {
+	return params.health ? params.ok("enabled") : params.muted("skipped (use --deep)");
+}
+function buildStatusPluginCompatibilityValue(params) {
+	if (params.notices.length === 0) return params.ok("none");
+	const pluginCount = new Set(params.notices.map((notice) => notice.pluginId ?? notice.plugin ?? "")).size;
+	return params.warn(`${params.notices.length} notice${params.notices.length === 1 ? "" : "s"} · ${pluginCount} plugin${pluginCount === 1 ? "" : "s"}`);
+}
+function buildStatusSessionsOverviewValue(params) {
+	const defaultCtx = params.sessions.defaults.contextTokens ? ` (${params.formatKTokens(params.sessions.defaults.contextTokens)} ctx)` : "";
+	const storeLabel = params.sessions.paths.length > 1 ? `${params.sessions.paths.length} stores` : params.sessions.paths[0] ?? "unknown";
+	return `${params.sessions.count} active · default ${params.sessions.defaults.model ?? "unknown"}${defaultCtx} · ${storeLabel}`;
+}
+//#endregion
+//#region src/commands/status.command-sections.ts
+const statusHealthColumns = [
+	{
+		key: "Item",
+		header: "Item",
+		minWidth: 10
+	},
+	{
+		key: "Status",
+		header: "Status",
+		minWidth: 8
+	},
+	{
+		key: "Detail",
+		header: "Detail",
+		flex: true,
+		minWidth: 28
+	}
+];
+function buildStatusAgentsValue(params) {
+	const pending = params.agentStatus.bootstrapPendingCount > 0 ? `${params.agentStatus.bootstrapPendingCount} bootstrap file${params.agentStatus.bootstrapPendingCount === 1 ? "" : "s"} present` : "no bootstrap files";
+	const def = params.agentStatus.agents.find((a) => a.id === params.agentStatus.defaultId);
+	const defActive = def?.lastActiveAgeMs != null ? params.formatTimeAgo(def.lastActiveAgeMs) : "unknown";
+	const defSuffix = def ? ` · default ${def.id} active ${defActive}` : "";
+	return `${params.agentStatus.agents.length} · ${pending} · sessions ${params.agentStatus.totalSessions}${defSuffix}`;
+}
+function buildStatusTasksValue(params) {
+	if (params.summary.tasks.total <= 0) return params.muted("none");
+	return [
+		`${params.summary.tasks.active} active`,
+		`${params.summary.tasks.byStatus.queued} queued`,
+		`${params.summary.tasks.byStatus.running} running`,
+		params.summary.tasks.failures > 0 ? params.warn(`${params.summary.tasks.failures} issue${params.summary.tasks.failures === 1 ? "" : "s"}`) : params.muted("no issues"),
+		params.summary.taskAudit.errors > 0 ? params.warn(`audit ${params.summary.taskAudit.errors} error${params.summary.taskAudit.errors === 1 ? "" : "s"} · ${params.summary.taskAudit.warnings} warn`) : params.summary.taskAudit.warnings > 0 ? params.muted(`audit ${params.summary.taskAudit.warnings} warn`) : params.muted("audit clean"),
+		`${params.summary.tasks.total} tracked`
+	].join(" · ");
+}
+function buildStatusMemoryValue(params) {
+	if (!params.memoryPlugin.enabled) {
+		const suffix = params.memoryPlugin.reason ? ` (${params.memoryPlugin.reason})` : "";
+		return params.muted(`disabled${suffix}`);
+	}
+	if (!params.memory) {
+		const slot = params.memoryPlugin.slot ? `plugin ${params.memoryPlugin.slot}` : "plugin";
+		return params.muted(`enabled (${slot}) · unavailable`);
+	}
+	const parts = [];
+	const dirtySuffix = params.memory.dirty ? ` · ${params.warn("dirty")}` : "";
+	parts.push(`${params.memory.files} files · ${params.memory.chunks} chunks${dirtySuffix}`);
+	if (params.memory.sources?.length) parts.push(`sources ${params.memory.sources.join(", ")}`);
+	if (params.memoryPlugin.slot) parts.push(`plugin ${params.memoryPlugin.slot}`);
+	const colorByTone = (tone, text) => tone === "ok" ? params.ok(text) : tone === "warn" ? params.warn(text) : params.muted(text);
+	if (params.memory.vector) {
+		const state = params.resolveMemoryVectorState(params.memory.vector);
+		const label = state.state === "disabled" ? "vector off" : `vector ${state.state}`;
+		parts.push(colorByTone(state.tone, label));
+	}
+	if (params.memory.fts) {
+		const state = params.resolveMemoryFtsState(params.memory.fts);
+		const label = state.state === "disabled" ? "fts off" : `fts ${state.state}`;
+		parts.push(colorByTone(state.tone, label));
+	}
+	if (params.memory.cache) {
+		const summary = params.resolveMemoryCacheSummary(params.memory.cache);
+		parts.push(colorByTone(summary.tone, summary.text));
+	}
+	return parts.join(" · ");
+}
+function buildStatusSecurityAuditLines(params) {
+	const fmtSummary = (value) => {
+		return [
+			params.theme.error(`${value.critical} critical`),
+			params.theme.warn(`${value.warn} warn`),
+			params.theme.muted(`${value.info} info`)
+		].join(" · ");
+	};
+	const lines = [params.theme.muted(`Summary: ${fmtSummary(params.securityAudit.summary)}`)];
+	const importantFindings = params.securityAudit.findings.filter((f) => f.severity === "critical" || f.severity === "warn");
+	if (importantFindings.length === 0) lines.push(params.theme.muted("No critical or warn findings detected."));
+	else {
+		const severityLabel = (sev) => sev === "critical" ? params.theme.error("CRITICAL") : sev === "warn" ? params.theme.warn("WARN") : params.theme.muted("INFO");
+		const sevRank = (sev) => sev === "critical" ? 0 : sev === "warn" ? 1 : 2;
+		const shown = [...importantFindings].toSorted((a, b) => sevRank(a.severity) - sevRank(b.severity)).slice(0, 6);
+		for (const finding of shown) {
+			lines.push(`  ${severityLabel(finding.severity)} ${finding.title}`);
+			lines.push(`    ${params.shortenText(finding.detail.replaceAll("\n", " "), 160)}`);
+			if (finding.remediation?.trim()) lines.push(`    ${params.theme.muted(`Fix: ${finding.remediation.trim()}`)}`);
+		}
+		if (importantFindings.length > shown.length) lines.push(params.theme.muted(`… +${importantFindings.length - shown.length} more`));
+	}
+	lines.push(params.theme.muted(`Full report: ${params.formatCliCommand("genesis security audit")}`));
+	lines.push(params.theme.muted(`Deep probe: ${params.formatCliCommand("genesis security audit --deep")}`));
+	return lines;
+}
+function buildStatusHealthRows(params) {
+	const rows = [{
+		Item: "Gateway",
+		Status: params.ok("reachable"),
+		Detail: `${params.health.durationMs}ms`
+	}];
+	for (const line of params.formatHealthChannelLines(params.health, { accountMode: "all" })) {
+		const colon = line.indexOf(":");
+		if (colon === -1) continue;
+		const item = line.slice(0, colon).trim();
+		const detail = line.slice(colon + 1).trim();
+		const normalized = normalizeLowercaseStringOrEmpty(detail);
+		const status = normalized.startsWith("ok") ? params.ok("OK") : normalized.startsWith("failed") ? params.warn("WARN") : normalized.startsWith("not configured") ? params.muted("OFF") : normalized.startsWith("configured") ? params.ok("OK") : normalized.startsWith("linked") ? params.ok("LINKED") : normalized.startsWith("not linked") ? params.warn("UNLINKED") : params.warn("WARN");
+		rows.push({
+			Item: item,
+			Status: status,
+			Detail: detail
+		});
+	}
+	return rows;
+}
+function buildStatusSessionsRows(params) {
+	if (params.recent.length === 0) return [{
+		Key: params.muted("no sessions yet"),
+		Kind: "",
+		Age: "",
+		Model: "",
+		Tokens: "",
+		...params.verbose ? { Cache: "" } : {}
+	}];
+	return params.recent.map((sess) => ({
+		Key: params.shortenText(sess.key, 32),
+		Kind: sess.kind,
+		Age: sess.updatedAt && sess.age != null ? params.formatTimeAgo(sess.age) : "no activity",
+		Model: sess.model ?? "unknown",
+		Tokens: params.formatTokensCompact(sess),
+		...params.verbose ? { Cache: params.formatPromptCacheCompact(sess) || params.muted("—") } : {}
+	}));
+}
+function buildStatusFooterLines(params) {
+	return [
+		"FAQ: https://genesis.pixelzx.com/docs/faq",
+		"Troubleshooting: https://genesis.pixelzx.com/docs/troubleshooting",
+		...params.updateHint ? ["", params.warn(params.updateHint)] : [],
+		"Next steps:",
+		`  Need to share?      ${params.formatCliCommand("genesis status --all")}`,
+		`  Need to debug live? ${params.formatCliCommand("genesis logs --follow")}`,
+		params.nodeOnlyGateway ? `  Need node service?  ${params.formatCliCommand("genesis node status")}` : params.gatewayReachable ? `  Need to test channels? ${params.formatCliCommand("genesis status --deep")}` : `  Fix reachability first: ${params.formatCliCommand("genesis gateway probe")}`
+	];
+}
+function buildStatusPluginCompatibilityLines(params) {
+	if (params.notices.length === 0) return [];
+	const limit = params.limit ?? 8;
+	return [...params.notices.slice(0, limit).map((notice) => {
+		return `  ${notice.severity === "warn" ? params.warn("WARN") : params.muted("INFO")} ${params.formatNotice(notice)}`;
+	}), ...params.notices.length > limit ? [params.muted(`  … +${params.notices.length - limit} more`)] : []];
+}
+function buildStatusPairingRecoveryLines(params) {
+	if (!params.pairingRecovery) return [];
+	return [
+		params.warn(buildPairingConnectRecoveryTitle(params.pairingRecovery.reason ?? void 0)),
+		...params.pairingRecovery.reason ? [params.muted(`Reason: ${describePairingConnectRequirement(params.pairingRecovery.reason)}.`)] : [],
+		...params.pairingRecovery.remediationHint ? [params.muted(`Hint: ${params.pairingRecovery.remediationHint}`)] : [],
+		...params.pairingRecovery.requestId ? [params.muted(`Recovery: ${params.formatCliCommand(`genesis devices approve ${params.pairingRecovery.requestId}`)}`)] : [],
+		params.muted(`Fallback: ${params.formatCliCommand("genesis devices approve --latest")}`),
+		params.muted(`Inspect: ${params.formatCliCommand("genesis devices list")}`)
+	];
+}
+function buildStatusSystemEventsRows(params) {
+	const limit = params.limit ?? 5;
+	if (params.queuedSystemEvents.length === 0) return;
+	return params.queuedSystemEvents.slice(0, limit).map((event) => ({ Event: event }));
+}
+function buildStatusSystemEventsTrailer(params) {
+	const limit = params.limit ?? 5;
+	return params.queuedSystemEvents.length > limit ? params.muted(`… +${params.queuedSystemEvents.length - limit} more`) : null;
+}
+//#endregion
+//#region src/commands/status-overview-rows.ts
+function buildStatusCommandOverviewRows(params) {
+	const agentsValue = buildStatusAgentsValue({
+		agentStatus: params.agentStatus,
+		formatTimeAgo: params.formatTimeAgo
+	});
+	const eventsValue = buildStatusEventsValue({ queuedSystemEvents: params.summary.queuedSystemEvents });
+	const tasksValue = buildStatusTasksValue({
+		summary: params.summary,
+		warn: params.warn,
+		muted: params.muted
+	});
+	const probesValue = buildStatusProbesValue({
+		health: params.health,
+		ok: params.ok,
+		muted: params.muted
+	});
+	const memoryValue = buildStatusMemoryValue({
+		memory: params.memory,
+		memoryPlugin: params.memoryPlugin,
+		ok: params.ok,
+		warn: params.warn,
+		muted: params.muted,
+		resolveMemoryVectorState: params.resolveMemoryVectorState,
+		resolveMemoryFtsState: params.resolveMemoryFtsState,
+		resolveMemoryCacheSummary: params.resolveMemoryCacheSummary
+	});
+	const pluginCompatibilityValue = buildStatusPluginCompatibilityValue({
+		notices: params.pluginCompatibility,
+		ok: params.ok,
+		warn: params.warn
+	});
+	return buildStatusOverviewRowsFromSurface({
+		surface: params.surface,
+		decorateOk: params.ok,
+		decorateWarn: params.warn,
+		decorateTailscaleOff: params.muted,
+		decorateTailscaleWarn: params.warn,
+		prefixRows: [{
+			Item: "OS",
+			Value: `${params.osLabel} · node ${process.versions.node}`
+		}],
+		updateValue: params.updateValue,
+		agentsValue,
+		suffixRows: [
+			{
+				Item: "Memory",
+				Value: memoryValue
+			},
+			{
+				Item: "Plugin compatibility",
+				Value: pluginCompatibilityValue
+			},
+			{
+				Item: "Probes",
+				Value: probesValue
+			},
+			{
+				Item: "Events",
+				Value: eventsValue
+			},
+			{
+				Item: "Tasks",
+				Value: tasksValue
+			},
+			{
+				Item: "Sessions",
+				Value: buildStatusSessionsOverviewValue({
+					sessions: params.summary.sessions,
+					formatKTokens: params.formatKTokens
+				})
+			}
+		],
+		gatewayAuthWarningValue: params.surface.gatewayProbeAuthWarning ? params.warn(params.surface.gatewayProbeAuthWarning) : null
+	});
+}
+function buildStatusAllOverviewRows(params) {
+	return buildStatusOverviewRowsFromSurface({
+		surface: params.surface,
+		tailscaleBackendState: params.tailscaleBackendState,
+		includeBackendStateWhenOff: true,
+		includeBackendStateWhenOn: true,
+		includeDnsNameWhenOff: true,
+		prefixRows: [
+			{
+				Item: "Version",
+				Value: VERSION
+			},
+			{
+				Item: "OS",
+				Value: params.osLabel
+			},
+			{
+				Item: "Node",
+				Value: process.versions.node
+			},
+			{
+				Item: "Config",
+				Value: params.configPath
+			}
+		],
+		middleRows: [{
+			Item: "Security",
+			Value: `Run: ${formatCliCommand("genesis security audit --deep")}`
+		}],
+		agentsValue: buildStatusAllAgentsValue({ agentStatus: params.agentStatus }),
+		suffixRows: [{
+			Item: "Secrets",
+			Value: buildStatusSecretsValue(params.secretDiagnosticsCount)
+		}],
+		gatewaySelfFallbackValue: "unknown"
+	});
+}
+//#endregion
+//#region src/commands/status-all/report-tables.ts
+const statusOverviewTableColumns = [{
+	key: "Item",
+	header: "Item",
+	minWidth: 10
+}, {
+	key: "Value",
+	header: "Value",
+	flex: true,
+	minWidth: 24
+}];
+const statusAgentsTableColumns = [
+	{
+		key: "Agent",
+		header: "Agent",
+		minWidth: 12
+	},
+	{
+		key: "BootstrapFile",
+		header: "Bootstrap file",
+		minWidth: 14
+	},
+	{
+		key: "Sessions",
+		header: "Sessions",
+		align: "right",
+		minWidth: 8
+	},
+	{
+		key: "Active",
+		header: "Active",
+		minWidth: 10
+	},
+	{
+		key: "Store",
+		header: "Store",
+		flex: true,
+		minWidth: 34
+	}
+];
+function buildStatusAgentTableRows(params) {
+	return params.agentStatus.agents.map((agent) => ({
+		Agent: agent.name?.trim() ? `${agent.id} (${agent.name.trim()})` : agent.id,
+		BootstrapFile: agent.bootstrapPending === true ? params.warn("PRESENT") : agent.bootstrapPending === false ? params.ok("ABSENT") : "unknown",
+		Sessions: String(agent.sessionsCount),
+		Active: agent.lastActiveAgeMs != null ? formatTimeAgo(agent.lastActiveAgeMs) : "unknown",
+		Store: agent.sessionsPath
+	}));
+}
+function buildStatusChannelDetailSections(params) {
+	return params.details.map((detail) => ({
+		kind: "table",
+		title: detail.title,
+		width: params.width,
+		renderTable: params.renderTable,
+		columns: detail.columns.map((column) => ({
+			key: column,
+			header: column,
+			flex: column === "Notes",
+			minWidth: column === "Notes" ? 28 : 10
+		})),
+		rows: detail.rows.map((row) => ({
+			...row,
+			...row.Status === "OK" ? { Status: params.ok("OK") } : row.Status === "WARN" ? { Status: params.warn("WARN") } : {}
+		}))
+	}));
+}
+//#endregion
+//#region src/commands/status-all/report-sections.ts
+function buildStatusOverviewSection(params) {
+	return {
+		kind: "table",
+		title: "Overview",
+		width: params.width,
+		renderTable: params.renderTable,
+		columns: [...statusOverviewTableColumns],
+		rows: params.rows
+	};
+}
+function buildStatusChannelsSection(params) {
+	return {
+		kind: "table",
+		title: "Channels",
+		width: params.width,
+		renderTable: params.renderTable,
+		columns: statusChannelsTableColumns.map((column) => column.key === "Detail" ? Object.assign({}, column, { minWidth: 28 }) : column),
+		rows: buildStatusChannelsTableRows({
+			rows: params.rows,
+			channelIssues: params.channelIssues,
+			ok: params.ok,
+			warn: params.warn,
+			muted: params.muted,
+			accentDim: params.accentDim,
+			formatIssueMessage: params.formatIssueMessage
+		})
+	};
+}
+function buildStatusChannelsTableSection(params) {
+	return {
+		kind: "table",
+		title: "Channels",
+		width: params.width,
+		renderTable: params.renderTable,
+		columns: [...params.columns],
+		rows: params.rows
+	};
+}
+function buildStatusChannelDetailsSections(params) {
+	return buildStatusChannelDetailSections({
+		details: params.details,
+		width: params.width,
+		renderTable: params.renderTable,
+		ok: params.ok,
+		warn: params.warn
+	});
+}
+function buildStatusAgentsSection(params) {
+	return {
+		kind: "table",
+		title: "Agents",
+		width: params.width,
+		renderTable: params.renderTable,
+		columns: [...statusAgentsTableColumns],
+		rows: buildStatusAgentTableRows({
+			agentStatus: params.agentStatus,
+			ok: params.ok,
+			warn: params.warn
+		})
+	};
+}
+function buildStatusSessionsSection(params) {
+	return {
+		kind: "table",
+		title: "Sessions",
+		width: params.width,
+		renderTable: params.renderTable,
+		columns: [...params.columns],
+		rows: params.rows
+	};
+}
+function buildStatusSystemEventsSection(params) {
+	return {
+		kind: "table",
+		title: "System events",
+		width: params.width,
+		renderTable: params.renderTable,
+		columns: [{
+			key: "Event",
+			header: "Event",
+			flex: true,
+			minWidth: 24
+		}],
+		rows: params.rows ?? [],
+		trailer: params.trailer,
+		skipIfEmpty: true
+	};
+}
+function buildStatusHealthSection(params) {
+	return {
+		kind: "table",
+		title: "Health",
+		width: params.width,
+		renderTable: params.renderTable,
+		columns: [...params.columns ?? []],
+		rows: params.rows ?? [],
+		skipIfEmpty: true
+	};
+}
+function buildStatusUsageSection(params) {
+	return {
+		kind: "lines",
+		title: "Usage",
+		body: params.usageLines ?? [],
+		skipIfEmpty: true
+	};
+}
+//#endregion
+//#region src/commands/status-all/text-report.ts
+function appendStatusSectionHeading(params) {
+	if (params.lines.length > 0) params.lines.push("");
+	params.lines.push(params.heading(params.title));
+}
+function appendStatusLinesSection(params) {
+	appendStatusSectionHeading(params);
+	params.lines.push(...params.body);
+}
+function appendStatusTableSection(params) {
+	appendStatusSectionHeading(params);
+	params.lines.push(params.renderTable({
+		width: params.width,
+		columns: [...params.columns],
+		rows: params.rows
+	}).trimEnd());
+}
+function appendStatusReportSections(params) {
+	for (const section of params.sections) {
+		if (section.kind === "raw") {
+			if (section.skipIfEmpty && section.body.length === 0) continue;
+			params.lines.push(...section.body);
+			continue;
+		}
+		if (section.kind === "lines") {
+			if (section.skipIfEmpty && section.body.length === 0) continue;
+			appendStatusLinesSection({
+				lines: params.lines,
+				heading: params.heading,
+				title: section.title,
+				body: section.body
+			});
+			continue;
+		}
+		if (section.skipIfEmpty && section.rows.length === 0) continue;
+		appendStatusTableSection({
+			lines: params.lines,
+			heading: params.heading,
+			title: section.title,
+			width: section.width,
+			renderTable: section.renderTable,
+			columns: section.columns,
+			rows: section.rows
+		});
+		if (section.trailer) params.lines.push(section.trailer);
+	}
+}
+//#endregion
+export { statusHealthColumns as S, buildStatusPluginCompatibilityLines as _, buildStatusChannelsSection as a, buildStatusSystemEventsRows as b, buildStatusOverviewSection as c, buildStatusUsageSection as d, buildStatusAllOverviewRows as f, buildStatusPairingRecoveryLines as g, buildStatusHealthRows as h, buildStatusChannelDetailsSections as i, buildStatusSessionsSection as l, buildStatusFooterLines as m, appendStatusSectionHeading as n, buildStatusChannelsTableSection as o, buildStatusCommandOverviewRows as p, buildStatusAgentsSection as r, buildStatusHealthSection as s, appendStatusReportSections as t, buildStatusSystemEventsSection as u, buildStatusSecurityAuditLines as v, buildStatusSystemEventsTrailer as x, buildStatusSessionsRows as y };

package/dist/tool-resolution-BRHtzc7Q.js

@@ -0,0 +1,90 @@
+import { a as logWarn } from "./logger-BbnBrdB_.js";
+import { b as resolveAgentWorkspaceDir, x as resolveDefaultAgentId } from "./agent-scope-BUYwVohk.js";
+import { t as createGenesisTools } from "./genesis-tools-vU91jnMS.js";
+import { c as mergeAlsoAllowPolicy, i as collectExplicitAllowlist, m as resolveToolProfilePolicy } from "./tool-policy-BIGITEMh.js";
+import { n as getPluginToolMeta } from "./tools-BfX2V_Rd.js";
+import { a as resolveGroupToolPolicy, o as resolveSubagentToolPolicyForSession, r as resolveEffectiveToolPolicy } from "./read-capability-w1W5sKua.js";
+import { i as resolveSubagentCapabilityStore, t as isSubagentEnvelopeSession } from "./subagent-capabilities-DFXCYxt0.js";
+import { n as buildDefaultToolPolicyPipelineSteps, t as applyToolPolicyPipeline } from "./tool-policy-pipeline-CA61tNc_.js";
+import { t as DEFAULT_GATEWAY_HTTP_TOOL_DENY } from "./dangerous-tools-DTsU-3_q.js";
+//#region src/gateway/tool-resolution.ts
+function resolveGatewayScopedTools(params) {
+	const { agentId, globalPolicy, globalProviderPolicy, agentPolicy, agentProviderPolicy, profile, providerProfile, profileAlsoAllow, providerProfileAlsoAllow } = resolveEffectiveToolPolicy({
+		config: params.cfg,
+		sessionKey: params.sessionKey
+	});
+	const profilePolicy = resolveToolProfilePolicy(profile);
+	const providerProfilePolicy = resolveToolProfilePolicy(providerProfile);
+	const profilePolicyWithAlsoAllow = mergeAlsoAllowPolicy(profilePolicy, profileAlsoAllow);
+	const providerProfilePolicyWithAlsoAllow = mergeAlsoAllowPolicy(providerProfilePolicy, providerProfileAlsoAllow);
+	const groupPolicy = resolveGroupToolPolicy({
+		config: params.cfg,
+		sessionKey: params.sessionKey,
+		messageProvider: params.messageProvider,
+		accountId: params.accountId ?? null
+	});
+	const subagentStore = resolveSubagentCapabilityStore(params.sessionKey, { cfg: params.cfg });
+	const subagentPolicy = isSubagentEnvelopeSession(params.sessionKey, {
+		cfg: params.cfg,
+		store: subagentStore
+	}) ? resolveSubagentToolPolicyForSession(params.cfg, params.sessionKey, { store: subagentStore }) : void 0;
+	const workspaceDir = resolveAgentWorkspaceDir(params.cfg, agentId ?? resolveDefaultAgentId(params.cfg));
+	const policyFiltered = applyToolPolicyPipeline({
+		tools: createGenesisTools({
+			agentSessionKey: params.sessionKey,
+			agentChannel: params.messageProvider ?? void 0,
+			agentAccountId: params.accountId,
+			agentTo: params.agentTo,
+			agentThreadId: params.agentThreadId,
+			allowGatewaySubagentBinding: params.allowGatewaySubagentBinding,
+			allowMediaInvokeCommands: params.allowMediaInvokeCommands,
+			disablePluginTools: params.disablePluginTools,
+			senderIsOwner: params.senderIsOwner,
+			config: params.cfg,
+			workspaceDir,
+			pluginToolAllowlist: collectExplicitAllowlist([
+				profilePolicy,
+				providerProfilePolicy,
+				globalPolicy,
+				globalProviderPolicy,
+				agentPolicy,
+				agentProviderPolicy,
+				groupPolicy,
+				subagentPolicy
+			])
+		}),
+		toolMeta: (tool) => getPluginToolMeta(tool),
+		warn: logWarn,
+		steps: [...buildDefaultToolPolicyPipelineSteps({
+			profilePolicy: profilePolicyWithAlsoAllow,
+			profile,
+			profileUnavailableCoreWarningAllowlist: profilePolicy?.allow,
+			providerProfilePolicy: providerProfilePolicyWithAlsoAllow,
+			providerProfile,
+			providerProfileUnavailableCoreWarningAllowlist: providerProfilePolicy?.allow,
+			globalPolicy,
+			globalProviderPolicy,
+			agentPolicy,
+			agentProviderPolicy,
+			groupPolicy,
+			agentId
+		}), {
+			policy: subagentPolicy,
+			label: "subagent tools.allow"
+		}]
+	});
+	const surface = params.surface ?? "http";
+	const gatewayToolsCfg = params.cfg.gateway?.tools;
+	const defaultGatewayDeny = surface === "http" ? DEFAULT_GATEWAY_HTTP_TOOL_DENY.filter((name) => !gatewayToolsCfg?.allow?.includes(name)) : [];
+	const gatewayDenySet = new Set([
+		...defaultGatewayDeny,
+		...Array.isArray(gatewayToolsCfg?.deny) ? gatewayToolsCfg.deny : [],
+		...params.excludeToolNames ? Array.from(params.excludeToolNames) : []
+	]);
+	return {
+		agentId,
+		tools: policyFiltered.filter((tool) => !gatewayDenySet.has(tool.name))
+	};
+}
+//#endregion
+export { resolveGatewayScopedTools as t };