@proletariat/cli 0.3.58 → 0.3.59

package/dist/lib/tool-registry/policy.js

@@ -0,0 +1,97 @@
+/**
+ * Tool Policy — Per-agent access control for tools
+ *
+ * Policy profiles are defined in YAML files under .proletariat/policies/.
+ * Each profile specifies which MCP servers and CLI tools an agent can access.
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import yaml from 'js-yaml';
+import { BUILTIN_PRLT_TOOL } from './types.js';
+const POLICIES_DIR = 'policies';
+/**
+ * Get path to the policies directory.
+ */
+export function getPoliciesDir(hqPath) {
+    return path.join(hqPath, '.proletariat', POLICIES_DIR);
+}
+/**
+ * Load a tool policy by name.
+ * Looks in .proletariat/policies/{name}.yaml
+ */
+export function loadToolPolicy(hqPath, policyName) {
+    const policyPath = path.join(getPoliciesDir(hqPath), `${policyName}.yaml`);
+    if (!fs.existsSync(policyPath)) {
+        return null;
+    }
+    try {
+        const content = fs.readFileSync(policyPath, 'utf-8');
+        const parsed = yaml.load(content);
+        return parsed?.tools ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Save a tool policy.
+ */
+export function saveToolPolicy(hqPath, policyName, policy) {
+    const policiesDir = getPoliciesDir(hqPath);
+    fs.mkdirSync(policiesDir, { recursive: true });
+    const policyPath = path.join(policiesDir, `${policyName}.yaml`);
+    const content = yaml.dump({ tools: policy }, {
+        indent: 2,
+        lineWidth: 120,
+        noRefs: true,
+    });
+    fs.writeFileSync(policyPath, content, 'utf-8');
+}
+/**
+ * List all available policy profiles.
+ */
+export function listPolicies(hqPath) {
+    const policiesDir = getPoliciesDir(hqPath);
+    if (!fs.existsSync(policiesDir))
+        return [];
+    return fs.readdirSync(policiesDir)
+        .filter(f => f.endsWith('.yaml') || f.endsWith('.yml'))
+        .map(f => f.replace(/\.(yaml|yml)$/, ''));
+}
+/**
+ * Filter registry by policy — returns only the tools the agent is allowed to use.
+ * If no policy is provided, returns all registered tools.
+ */
+export function filterByPolicy(registry, policy) {
+    const allMcp = Object.entries(registry['mcp-servers']);
+    const allCli = Object.entries(registry['cli-tools']);
+    // No policy = full access
+    if (!policy) {
+        return {
+            mcpServers: allMcp.map(([name, config]) => ({ name, ...config })),
+            cliTools: [
+                ...allCli.map(([name, config]) => ({ name, ...config })),
+                // Always include prlt
+                ...(allCli.some(([name]) => name === 'prlt') ? [] : [BUILTIN_PRLT_TOOL]),
+            ],
+        };
+    }
+    // Filter MCP servers
+    const allowedMcp = new Set(policy.mcp || []);
+    const mcpServers = allMcp
+        .filter(([name]) => allowedMcp.has(name))
+        .map(([name, config]) => ({ name, ...config }));
+    // Filter CLI tools
+    const allowedCli = new Set(policy.cli || []);
+    // Always allow prlt
+    allowedCli.add('prlt');
+    const cliTools = allCli
+        .filter(([name]) => allowedCli.has(name))
+        .map(([name, config]) => ({ name, ...config }));
+    // Ensure prlt is always present
+    if (!cliTools.some(t => t.name === 'prlt')) {
+        cliTools.push(BUILTIN_PRLT_TOOL);
+    }
+    return { mcpServers, cliTools };
+}
+//# sourceMappingURL=policy.js.map

package/dist/lib/tool-registry/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/lib/tool-registry/policy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,IAAI,MAAM,SAAS,CAAA;AAO1B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAE9C,MAAM,YAAY,GAAG,UAAU,CAAA;AAE/B;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,YAAY,CAAC,CAAA;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,UAAkB;IAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,OAAO,CAAC,CAAA;IAE1E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAkC,CAAA;QAClE,OAAO,MAAM,EAAE,KAAK,IAAI,IAAI,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,UAAkB,EAAE,MAAkB;IACnF,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAA;IAC1C,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE9C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,UAAU,OAAO,CAAC,CAAA;IAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,EAAE,CAAC;QACT,SAAS,EAAE,GAAG;QACd,MAAM,EAAE,IAAI;KACb,CAAC,CAAA;IACF,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;AAChD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,CAAA;IAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAA;IAE1C,OAAO,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC;SAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SACtD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAA;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAsB,EACtB,MAAyB;IAEzB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAA;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAA;IAEpD,0BAA0B;IAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;YACjE,QAAQ,EAAE;gBACR,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;gBACxD,sBAAsB;gBACtB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;aACzE;SACF,CAAA;IACH,CAAC;IAED,qBAAqB;IACrB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAA;IAC5C,MAAM,UAAU,GAAG,MAAM;SACtB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;SACxC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAA;IAEjD,mBAAmB;IACnB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAA;IAC5C,oBAAoB;IACpB,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAEtB,MAAM,QAAQ,GAAG,MAAM;SACpB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;SACxC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAA;IAEjD,gCAAgC;IAChC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAClC,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;AACjC,CAAC"}

package/dist/lib/tool-registry/registry.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Tool Registry — Load, save, and manage tools.yaml config
+ *
+ * The tools.yaml file lives at .proletariat/tools.yaml in the HQ root.
+ * It registers MCP servers and CLI tools that agents can use.
+ */
+import type { ToolRegistry, McpServerConfig, CliToolConfig } from './types.js';
+/**
+ * Get the path to the tools.yaml file for a given HQ root.
+ */
+export declare function getToolsConfigPath(hqPath: string): string;
+/**
+ * Load the tool registry from .proletariat/tools.yaml.
+ * Returns an empty registry if the file doesn't exist.
+ */
+export declare function loadToolRegistry(hqPath: string): ToolRegistry;
+/**
+ * Save the tool registry to .proletariat/tools.yaml.
+ */
+export declare function saveToolRegistry(hqPath: string, registry: ToolRegistry): void;
+/**
+ * Get all MCP servers from the registry, hydrated with their names.
+ */
+export declare function getMcpServers(registry: ToolRegistry): McpServerConfig[];
+/**
+ * Get all CLI tools from the registry, hydrated with their names.
+ * Always includes the built-in prlt tool.
+ */
+export declare function getCliTools(registry: ToolRegistry): CliToolConfig[];
+/**
+ * Add an MCP server to the registry.
+ */
+export declare function addMcpServer(hqPath: string, name: string, config: Omit<McpServerConfig, 'name'>): void;
+/**
+ * Add a CLI tool to the registry.
+ */
+export declare function addCliTool(hqPath: string, name: string, config: Omit<CliToolConfig, 'name'>): void;
+/**
+ * Remove a tool (MCP or CLI) from the registry.
+ * Returns true if the tool was found and removed.
+ */
+export declare function removeTool(hqPath: string, name: string): boolean;

package/dist/lib/tool-registry/registry.js

@@ -0,0 +1,120 @@
+/**
+ * Tool Registry — Load, save, and manage tools.yaml config
+ *
+ * The tools.yaml file lives at .proletariat/tools.yaml in the HQ root.
+ * It registers MCP servers and CLI tools that agents can use.
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import yaml from 'js-yaml';
+import { BUILTIN_PRLT_TOOL } from './types.js';
+const TOOLS_FILENAME = 'tools.yaml';
+/**
+ * Get the path to the tools.yaml file for a given HQ root.
+ */
+export function getToolsConfigPath(hqPath) {
+    return path.join(hqPath, '.proletariat', TOOLS_FILENAME);
+}
+/**
+ * Load the tool registry from .proletariat/tools.yaml.
+ * Returns an empty registry if the file doesn't exist.
+ */
+export function loadToolRegistry(hqPath) {
+    const configPath = getToolsConfigPath(hqPath);
+    const empty = {
+        'mcp-servers': {},
+        'cli-tools': {},
+    };
+    if (!fs.existsSync(configPath)) {
+        return empty;
+    }
+    try {
+        const content = fs.readFileSync(configPath, 'utf-8');
+        const parsed = yaml.load(content);
+        return {
+            'mcp-servers': parsed?.['mcp-servers'] ?? {},
+            'cli-tools': parsed?.['cli-tools'] ?? {},
+        };
+    }
+    catch {
+        return empty;
+    }
+}
+/**
+ * Save the tool registry to .proletariat/tools.yaml.
+ */
+export function saveToolRegistry(hqPath, registry) {
+    const configPath = getToolsConfigPath(hqPath);
+    const dir = path.dirname(configPath);
+    fs.mkdirSync(dir, { recursive: true });
+    const content = yaml.dump(registry, {
+        indent: 2,
+        lineWidth: 120,
+        noRefs: true,
+        sortKeys: true,
+    });
+    fs.writeFileSync(configPath, content, 'utf-8');
+}
+/**
+ * Get all MCP servers from the registry, hydrated with their names.
+ */
+export function getMcpServers(registry) {
+    return Object.entries(registry['mcp-servers']).map(([name, config]) => ({
+        name,
+        ...config,
+    }));
+}
+/**
+ * Get all CLI tools from the registry, hydrated with their names.
+ * Always includes the built-in prlt tool.
+ */
+export function getCliTools(registry) {
+    const tools = Object.entries(registry['cli-tools']).map(([name, config]) => ({
+        name,
+        ...config,
+    }));
+    // Ensure prlt is always present
+    if (!tools.some(t => t.name === 'prlt')) {
+        tools.push(BUILTIN_PRLT_TOOL);
+    }
+    return tools;
+}
+/**
+ * Add an MCP server to the registry.
+ */
+export function addMcpServer(hqPath, name, config) {
+    const registry = loadToolRegistry(hqPath);
+    registry['mcp-servers'][name] = config;
+    saveToolRegistry(hqPath, registry);
+}
+/**
+ * Add a CLI tool to the registry.
+ */
+export function addCliTool(hqPath, name, config) {
+    const registry = loadToolRegistry(hqPath);
+    registry['cli-tools'][name] = config;
+    saveToolRegistry(hqPath, registry);
+}
+/**
+ * Remove a tool (MCP or CLI) from the registry.
+ * Returns true if the tool was found and removed.
+ */
+export function removeTool(hqPath, name) {
+    const registry = loadToolRegistry(hqPath);
+    if (name in registry['mcp-servers']) {
+        delete registry['mcp-servers'][name];
+        saveToolRegistry(hqPath, registry);
+        return true;
+    }
+    if (name in registry['cli-tools']) {
+        const tool = registry['cli-tools'][name];
+        if (tool.builtin) {
+            return false; // Can't remove built-in tools
+        }
+        delete registry['cli-tools'][name];
+        saveToolRegistry(hqPath, registry);
+        return true;
+    }
+    return false;
+}
+//# sourceMappingURL=registry.js.map

package/dist/lib/tool-registry/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/lib/tool-registry/registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AACjC,OAAO,IAAI,MAAM,SAAS,CAAA;AAM1B,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAE9C,MAAM,cAAc,GAAG,YAAY,CAAA;AAEnC;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,cAAc,CAAC,CAAA;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAE7C,MAAM,KAAK,GAAiB;QAC1B,aAAa,EAAE,EAAE;QACjB,WAAW,EAAE,EAAE;KAChB,CAAA;IAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAA;IACd,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAiC,CAAA;QAEjE,OAAO;YACL,aAAa,EAAE,MAAM,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE;YAC5C,WAAW,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE;SACzC,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,QAAsB;IACrE,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACpC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;QAClC,MAAM,EAAE,CAAC;QACT,SAAS,EAAE,GAAG;QACd,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,IAAI;KACf,CAAC,CAAA;IAEF,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;AAChD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,QAAsB;IAClD,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QACtE,IAAI;QACJ,GAAG,MAAM;KACV,CAAC,CAAC,CAAA;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,QAAsB;IAChD,MAAM,KAAK,GAAoB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5F,IAAI;QACJ,GAAG,MAAM;KACV,CAAC,CAAC,CAAA;IAEH,gCAAgC;IAChC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAC/B,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAc,EACd,IAAY,EACZ,MAAqC;IAErC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IACzC,QAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAA;IACtC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CACxB,MAAc,EACd,IAAY,EACZ,MAAmC;IAEnC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IACzC,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,MAAM,CAAA;IACpC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,IAAY;IACrD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IAEzC,IAAI,IAAI,IAAI,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACpC,OAAO,QAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAA;QACpC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAClC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,IAAI,IAAI,IAAI,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,KAAK,CAAA,CAAC,8BAA8B;QAC7C,CAAC;QACD,OAAO,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAA;QAClC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAClC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/lib/tool-registry/spawn.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Tool Registry — Spawn-time integration
+ *
+ * At agent spawn time:
+ * 1. Load tool registry and policy profile
+ * 2. Filter tools by policy
+ * 3. Generate mcp-config.json for MCP servers (passed to Claude Code via --mcp-config)
+ * 4. Build tools section for agent prompt (CLI tools + MCP descriptions)
+ */
+import type { McpServerConfig, CliToolConfig } from './types.js';
+interface McpConfigEntry {
+    url?: string;
+    command?: string;
+    args?: string[];
+    env?: Record<string, string>;
+}
+interface McpConfigJson {
+    mcpServers: Record<string, McpConfigEntry>;
+}
+/**
+ * Generate mcp-config.json content from a list of MCP servers.
+ * This JSON is passed to Claude Code via the --mcp-config flag.
+ */
+export declare function generateMcpConfig(servers: McpServerConfig[]): McpConfigJson;
+/**
+ * Write mcp-config.json to a temporary location and return the path.
+ * Returns null if there are no MCP servers to configure.
+ */
+export declare function writeMcpConfigFile(servers: McpServerConfig[], outputDir: string): string | null;
+/**
+ * Build the AVAILABLE TOOLS section for agent prompts.
+ * Describes MCP servers and CLI tools the agent has access to.
+ */
+export declare function buildToolsPromptSection(mcpServers: McpServerConfig[], cliTools: CliToolConfig[]): string;
+export interface SpawnToolsResult {
+    mcpConfigPath: string | null;
+    promptSection: string;
+    mcpServers: McpServerConfig[];
+    cliTools: CliToolConfig[];
+}
+/**
+ * Resolve tools for an agent spawn.
+ * Loads registry, applies policy, generates MCP config, builds prompt section.
+ *
+ * @param hqPath - HQ root path
+ * @param policyName - Optional policy profile name (e.g., "code-agent")
+ * @param outputDir - Directory for writing mcp-config.json
+ */
+export declare function resolveToolsForSpawn(hqPath: string, policyName: string | undefined, outputDir: string): SpawnToolsResult;
+export {};

package/dist/lib/tool-registry/spawn.js

@@ -0,0 +1,103 @@
+/**
+ * Tool Registry — Spawn-time integration
+ *
+ * At agent spawn time:
+ * 1. Load tool registry and policy profile
+ * 2. Filter tools by policy
+ * 3. Generate mcp-config.json for MCP servers (passed to Claude Code via --mcp-config)
+ * 4. Build tools section for agent prompt (CLI tools + MCP descriptions)
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { loadToolRegistry } from './registry.js';
+import { loadToolPolicy, filterByPolicy } from './policy.js';
+/**
+ * Generate mcp-config.json content from a list of MCP servers.
+ * This JSON is passed to Claude Code via the --mcp-config flag.
+ */
+export function generateMcpConfig(servers) {
+    const mcpServers = {};
+    for (const server of servers) {
+        const entry = {};
+        if (server.url) {
+            entry.url = server.url;
+        }
+        if (server.command) {
+            const parts = server.command.split(/\s+/);
+            entry.command = parts[0];
+            if (parts.length > 1 || server.args) {
+                entry.args = [...parts.slice(1), ...(server.args || [])];
+            }
+        }
+        if (server.auth) {
+            // Resolve ${ENV_VAR} references
+            const envVar = server.auth.replace(/^\$\{(.+)\}$/, '$1');
+            const value = process.env[envVar];
+            if (value) {
+                entry.env = { [envVar]: value };
+            }
+        }
+        mcpServers[server.name] = entry;
+    }
+    return { mcpServers };
+}
+/**
+ * Write mcp-config.json to a temporary location and return the path.
+ * Returns null if there are no MCP servers to configure.
+ */
+export function writeMcpConfigFile(servers, outputDir) {
+    if (servers.length === 0)
+        return null;
+    const config = generateMcpConfig(servers);
+    fs.mkdirSync(outputDir, { recursive: true });
+    const configPath = path.join(outputDir, 'mcp-config.json');
+    fs.writeFileSync(configPath, JSON.stringify(config, null, 2), 'utf-8');
+    return configPath;
+}
+// =============================================================================
+// Agent Prompt Injection
+// =============================================================================
+/**
+ * Build the AVAILABLE TOOLS section for agent prompts.
+ * Describes MCP servers and CLI tools the agent has access to.
+ */
+export function buildToolsPromptSection(mcpServers, cliTools) {
+    if (mcpServers.length === 0 && cliTools.length === 0)
+        return '';
+    let section = `## Available Tools\n\n`;
+    if (mcpServers.length > 0) {
+        section += `**MCP Servers:**\n`;
+        for (const server of mcpServers) {
+            section += `- ${server.name} (${server.description})\n`;
+        }
+        section += `\n`;
+    }
+    if (cliTools.length > 0) {
+        section += `**CLI Tools:**\n`;
+        for (const tool of cliTools) {
+            section += `- ${tool.command} — ${tool.description}\n`;
+        }
+        section += `\n`;
+    }
+    section += `Use these tools for external interactions. Prefer registered tools over raw curl or API calls.\n\n`;
+    return section;
+}
+/**
+ * Resolve tools for an agent spawn.
+ * Loads registry, applies policy, generates MCP config, builds prompt section.
+ *
+ * @param hqPath - HQ root path
+ * @param policyName - Optional policy profile name (e.g., "code-agent")
+ * @param outputDir - Directory for writing mcp-config.json
+ */
+export function resolveToolsForSpawn(hqPath, policyName, outputDir) {
+    const registry = loadToolRegistry(hqPath);
+    const policy = policyName
+        ? loadToolPolicy(hqPath, policyName)
+        : null;
+    const { mcpServers, cliTools } = filterByPolicy(registry, policy);
+    const mcpConfigPath = writeMcpConfigFile(mcpServers, outputDir);
+    const promptSection = buildToolsPromptSection(mcpServers, cliTools);
+    return { mcpConfigPath, promptSection, mcpServers, cliTools };
+}
+//# sourceMappingURL=spawn.js.map

package/dist/lib/tool-registry/spawn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn.js","sourceRoot":"","sources":["../../../src/lib/tool-registry/spawn.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAA;AAC7B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAiB5D;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAA0B;IAC1D,MAAM,UAAU,GAAmC,EAAE,CAAA;IAErD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAmB,EAAE,CAAA;QAEhC,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YACf,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAA;QACxB,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACzC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;YACxB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAA;YAC1D,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,gCAAgC;YAChC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAA;YACxD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACjC,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAA;YACjC,CAAC;QACH,CAAC;QAED,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;IACjC,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,CAAA;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAA0B,EAC1B,SAAiB;IAEjB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAErC,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;IACzC,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE5C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAA;IAC1D,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;IACtE,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,UAA6B,EAC7B,QAAyB;IAEzB,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAE/D,IAAI,OAAO,GAAG,wBAAwB,CAAA;IAEtC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,oBAAoB,CAAA;QAC/B,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;YAChC,OAAO,IAAI,KAAK,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,WAAW,KAAK,CAAA;QACzD,CAAC;QACD,OAAO,IAAI,IAAI,CAAA;IACjB,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,kBAAkB,CAAA;QAC7B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,OAAO,IAAI,KAAK,IAAI,CAAC,OAAO,MAAM,IAAI,CAAC,WAAW,IAAI,CAAA;QACxD,CAAC;QACD,OAAO,IAAI,IAAI,CAAA;IACjB,CAAC;IAED,OAAO,IAAI,oGAAoG,CAAA;IAE/G,OAAO,OAAO,CAAA;AAChB,CAAC;AAaD;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAc,EACd,UAA8B,EAC9B,SAAiB;IAEjB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAA;IACzC,MAAM,MAAM,GAAsB,UAAU;QAC1C,CAAC,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC;QACpC,CAAC,CAAC,IAAI,CAAA;IAER,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAEjE,MAAM,aAAa,GAAG,kBAAkB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IAC/D,MAAM,aAAa,GAAG,uBAAuB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IAEnE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;AAC/D,CAAC"}

package/dist/lib/tool-registry/types.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Tool Registry Types
+ *
+ * Types for MCP servers and CLI tools as pluggable integration providers
+ * with per-agent access control via policy profiles.
+ */
+export interface McpServerConfig {
+    /** Server name (unique identifier) */
+    name: string;
+    /** URL for remote MCP servers */
+    url?: string;
+    /** Command for local MCP servers (e.g., "node ./tools/my-mcp-server.js") */
+    command?: string;
+    /** Args for local MCP server command */
+    args?: string[];
+    /** Environment variable name for auth token (e.g., "${ARCADE_API_KEY}") */
+    auth?: string;
+    /** Human-readable description */
+    description: string;
+}
+export interface CliToolConfig {
+    /** Tool name (unique identifier) */
+    name: string;
+    /** The command/binary to invoke */
+    command: string;
+    /** Human-readable description */
+    description: string;
+    /** Shell command to detect if tool is installed (e.g., "which gh") */
+    detect?: string;
+    /** Shell command to install the tool (e.g., "brew install gh") */
+    install?: string;
+    /** Whether this is a built-in tool (always available, no config needed) */
+    builtin?: boolean;
+}
+export interface ToolRegistry {
+    'mcp-servers': Record<string, Omit<McpServerConfig, 'name'>>;
+    'cli-tools': Record<string, Omit<CliToolConfig, 'name'>>;
+}
+export interface ToolPolicy {
+    mcp: string[];
+    cli: string[];
+    /** Per-MCP-server fine-grained access (e.g., arcade: { allow: ['asana', 'slack'] }) */
+    [serverName: string]: string[] | {
+        allow: string[];
+    } | undefined;
+}
+export interface ToolCheckResult {
+    name: string;
+    type: 'mcp' | 'cli';
+    available: boolean;
+    error?: string;
+    installHint?: string;
+}
+export declare const COMMON_CLI_TOOLS: CliToolConfig[];
+/** Default built-in tool (prlt itself) */
+export declare const BUILTIN_PRLT_TOOL: CliToolConfig;

package/dist/lib/tool-registry/types.js

@@ -0,0 +1,109 @@
+/**
+ * Tool Registry Types
+ *
+ * Types for MCP servers and CLI tools as pluggable integration providers
+ * with per-agent access control via policy profiles.
+ */
+// =============================================================================
+// Common CLI tools for auto-detection
+// =============================================================================
+export const COMMON_CLI_TOOLS = [
+    {
+        name: 'gh',
+        command: 'gh',
+        description: 'GitHub CLI — PRs, issues, releases',
+        detect: 'which gh',
+        install: 'brew install gh',
+    },
+    {
+        name: 'jq',
+        command: 'jq',
+        description: 'JSON processor',
+        detect: 'which jq',
+        install: 'brew install jq',
+    },
+    {
+        name: 'ffmpeg',
+        command: 'ffmpeg',
+        description: 'Video/audio processing',
+        detect: 'which ffmpeg',
+        install: 'brew install ffmpeg',
+    },
+    {
+        name: 'aws',
+        command: 'aws',
+        description: 'AWS CLI',
+        detect: 'which aws',
+        install: 'brew install awscli',
+    },
+    {
+        name: 'gcloud',
+        command: 'gcloud',
+        description: 'Google Cloud CLI',
+        detect: 'which gcloud',
+    },
+    {
+        name: 'kubectl',
+        command: 'kubectl',
+        description: 'Kubernetes CLI',
+        detect: 'which kubectl',
+        install: 'brew install kubectl',
+    },
+    {
+        name: 'terraform',
+        command: 'terraform',
+        description: 'Infrastructure as Code',
+        detect: 'which terraform',
+        install: 'brew install terraform',
+    },
+    {
+        name: 'docker',
+        command: 'docker',
+        description: 'Container runtime',
+        detect: 'which docker',
+        install: 'brew install --cask docker',
+    },
+    {
+        name: 'node',
+        command: 'node',
+        description: 'Node.js runtime',
+        detect: 'which node',
+        install: 'brew install node',
+    },
+    {
+        name: 'python3',
+        command: 'python3',
+        description: 'Python 3 runtime',
+        detect: 'which python3',
+        install: 'brew install python',
+    },
+    {
+        name: 'curl',
+        command: 'curl',
+        description: 'URL transfer tool',
+        detect: 'which curl',
+    },
+    {
+        name: 'git',
+        command: 'git',
+        description: 'Version control',
+        detect: 'which git',
+        install: 'brew install git',
+    },
+    {
+        name: 'ripgrep',
+        command: 'rg',
+        description: 'Fast search (ripgrep)',
+        detect: 'which rg',
+        install: 'brew install ripgrep',
+    },
+];
+/** Default built-in tool (prlt itself) */
+export const BUILTIN_PRLT_TOOL = {
+    name: 'prlt',
+    command: 'prlt',
+    description: 'Proletariat CLI (always available)',
+    detect: 'which prlt',
+    builtin: true,
+};
+//# sourceMappingURL=types.js.map

package/dist/lib/tool-registry/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/lib/tool-registry/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAwEH,gFAAgF;AAChF,sCAAsC;AACtC,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAoB;IAC/C;QACE,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,oCAAoC;QACjD,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,gBAAgB;QAC7B,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,iBAAiB;KAC3B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,wBAAwB;QACrC,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE,qBAAqB;KAC/B;IACD;QACE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,qBAAqB;KAC/B;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,kBAAkB;QAC/B,MAAM,EAAE,cAAc;KACvB;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,SAAS;QAClB,WAAW,EAAE,gBAAgB;QAC7B,MAAM,EAAE,eAAe;QACvB,OAAO,EAAE,sBAAsB;KAChC;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,WAAW;QACpB,WAAW,EAAE,wBAAwB;QACrC,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE,wBAAwB;KAClC;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,mBAAmB;QAChC,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE,4BAA4B;KACtC;IACD;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,iBAAiB;QAC9B,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,mBAAmB;KAC7B;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,SAAS;QAClB,WAAW,EAAE,kBAAkB;QAC/B,MAAM,EAAE,eAAe;QACvB,OAAO,EAAE,qBAAqB;KAC/B;IACD;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,mBAAmB;QAChC,MAAM,EAAE,YAAY;KACrB;IACD;QACE,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,iBAAiB;QAC9B,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,kBAAkB;KAC5B;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,uBAAuB;QACpC,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,sBAAsB;KAChC;CACF,CAAA;AAED,0CAA0C;AAC1C,MAAM,CAAC,MAAM,iBAAiB,GAAkB;IAC9C,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,MAAM;IACf,WAAW,EAAE,oCAAoC;IACjD,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,IAAI;CACd,CAAA"}

package/dist/lib/trello/client.d.ts

@@ -0,0 +1,23 @@
+import type { TrelloBoard, TrelloCard, TrelloCardUpsertInput, TrelloList, TrelloMember } from './types.js';
+export declare class TrelloClient {
+    private apiKey;
+    private apiToken;
+    private readonly baseUrl;
+    constructor(apiKey: string, apiToken: string);
+    private request;
+    verify(): Promise<TrelloMember>;
+    getCard(cardId: string): Promise<TrelloCard | null>;
+    searchCards(query: string, options?: {
+        limit?: number;
+        boardId?: string;
+    }): Promise<TrelloCard[]>;
+    getBoard(boardId: string): Promise<TrelloBoard | null>;
+    getBoardLists(boardId: string): Promise<TrelloList[]>;
+    getBoardCards(boardId: string, options?: {
+        limit?: number;
+        filter?: string;
+    }): Promise<TrelloCard[]>;
+    getBoards(): Promise<TrelloBoard[]>;
+    createCard(input: TrelloCardUpsertInput): Promise<TrelloCard>;
+    updateCard(cardId: string, input: TrelloCardUpsertInput): Promise<TrelloCard>;
+}