@provos/ironcurtain 0.7.2 → 0.9.0

package/dist/pipeline/proxy-mcp-connections.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Proxy-based MCP connections for dynamic list resolution.
+ *
+ * Spawns the MCP proxy server as a child process configured with the
+ * read-only policy. The proxy handles OAuth credentials, policy mediation,
+ * token refresh, and sandbox containment internally -- the caller gets
+ * a simple MCP client with pre-filtered tools.
+ */
+import type { Tool } from '@modelcontextprotocol/sdk/types.js';
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import type { MCPServerConfig } from '../config/types.js';
+import type { ListDefinition } from './types.js';
+export interface ProxyConnection {
+    readonly client: Client;
+    readonly tools: Tool[];
+    readonly shutdown: () => Promise<void>;
+}
+/**
+ * Spawns the MCP proxy server as a child process and connects to it
+ * as an MCP client. The proxy loads the read-only policy and mediates
+ * all tool calls through the policy engine.
+ *
+ * Returns a connected client, its available tools, and a shutdown function.
+ */
+export declare function connectViaProxy(definitions: ListDefinition[], mcpServers: Record<string, MCPServerConfig>, toolAnnotationsDir: string): Promise<ProxyConnection>;

package/dist/pipeline/proxy-mcp-connections.js

@@ -0,0 +1,121 @@
+/**
+ * Proxy-based MCP connections for dynamic list resolution.
+ *
+ * Spawns the MCP proxy server as a child process configured with the
+ * read-only policy. The proxy handles OAuth credentials, policy mediation,
+ * token refresh, and sandbox containment internally -- the caller gets
+ * a simple MCP client with pre-filtered tools.
+ */
+import { dirname, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { Client } from '@modelcontextprotocol/sdk/client/index.js';
+import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
+import { permissiveJsonSchemaValidator } from '../trusted-process/permissive-output-validator.js';
+import { resolveNodeModulesBin } from '../trusted-process/sandbox-integration.js';
+import { getReadOnlyPolicyDir } from '../config/paths.js';
+import { loadUserConfig } from '../config/user-config.js';
+import { VERSION } from '../version.js';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const isCompiled = __filename.endsWith('.js');
+const proxyServerPath = resolve(__dirname, `../trusted-process/mcp-proxy-server.${isCompiled ? 'js' : 'ts'}`);
+const tsxBin = resolveNodeModulesBin('tsx', resolve(__dirname, '..', '..'));
+const PROXY_COMMAND = isCompiled ? 'node' : tsxBin;
+/**
+ * Determines which MCP servers are needed by the list definitions.
+ * Returns a filtered server config containing only the needed servers.
+ */
+function selectNeededServers(definitions, mcpServers) {
+    const mcpDefs = definitions.filter((d) => d.requiresMcp);
+    if (mcpDefs.length === 0)
+        return {};
+    const hasUnhintedLists = mcpDefs.some((d) => !d.mcpServerHint);
+    const neededNames = hasUnhintedLists
+        ? new Set(Object.keys(mcpServers))
+        : new Set(mcpDefs
+            .filter((d) => d.mcpServerHint != null)
+            .map((d) => d.mcpServerHint));
+    const filtered = {};
+    for (const name of neededNames) {
+        // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition -- name may come from mcpServerHint and not exist in mcpServers
+        if (mcpServers[name]) {
+            filtered[name] = mcpServers[name];
+        }
+        else {
+            console.error(`  Warning: mcpServerHint "${name}" does not match any configured MCP server`);
+        }
+    }
+    return filtered;
+}
+/**
+ * Builds the environment variables for the proxy child process.
+ */
+function buildProxyEnv(neededServers, toolAnnotationsDir) {
+    const userConfig = loadUserConfig();
+    // Flatten per-server credentials for all needed servers into a single object.
+    // The proxy receives all of them and applies per-server via SERVER_FILTER internally
+    // (but since we're not using SERVER_FILTER here, all are available).
+    const flatCredentials = {};
+    for (const serverName of Object.keys(neededServers)) {
+        const creds = userConfig.serverCredentials[serverName];
+        if (creds) {
+            Object.assign(flatCredentials, creds);
+        }
+    }
+    const env = {
+        // Inherit the parent process environment
+        ...process.env,
+        // Required proxy env vars
+        GENERATED_DIR: getReadOnlyPolicyDir(),
+        TOOL_ANNOTATIONS_DIR: toolAnnotationsDir,
+        MCP_SERVERS_CONFIG: JSON.stringify(neededServers),
+        PROTECTED_PATHS: JSON.stringify([]),
+        AUDIT_LOG_PATH: '/dev/null',
+        SANDBOX_POLICY: 'warn',
+        // Pass server credentials
+        SERVER_CREDENTIALS: JSON.stringify(flatCredentials),
+    };
+    // Do NOT set ESCALATION_DIR -- single-shot mode auto-denies escalations
+    // Note: proxy falls back to getPackageGeneratedDir() for annotations, ignoring toolAnnotationsFallbackDir
+    return env;
+}
+/**
+ * Spawns the MCP proxy server as a child process and connects to it
+ * as an MCP client. The proxy loads the read-only policy and mediates
+ * all tool calls through the policy engine.
+ *
+ * Returns a connected client, its available tools, and a shutdown function.
+ */
+export async function connectViaProxy(definitions, mcpServers, toolAnnotationsDir) {
+    const neededServers = selectNeededServers(definitions, mcpServers);
+    const env = buildProxyEnv(neededServers, toolAnnotationsDir);
+    const transport = new StdioClientTransport({
+        command: PROXY_COMMAND,
+        args: [proxyServerPath],
+        env,
+        stderr: 'pipe',
+    });
+    // Drain piped stderr to prevent backpressure
+    if (transport.stderr) {
+        transport.stderr.on('data', () => { });
+    }
+    const client = new Client({ name: 'ironcurtain-list-resolver-proxy', version: VERSION }, { jsonSchemaValidator: permissiveJsonSchemaValidator });
+    const shutdown = async () => {
+        try {
+            await client.close();
+        }
+        catch {
+            // Ignore cleanup errors
+        }
+    };
+    try {
+        await client.connect(transport);
+        const toolsResult = await client.listTools();
+        return { client, tools: toolsResult.tools, shutdown };
+    }
+    catch (err) {
+        await shutdown();
+        throw err;
+    }
+}
+//# sourceMappingURL=proxy-mcp-connections.js.map

package/dist/pipeline/proxy-mcp-connections.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-mcp-connections.js","sourceRoot":"","sources":["../../src/pipeline/proxy-mcp-connections.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,mDAAmD,CAAC;AAClG,OAAO,EAAE,qBAAqB,EAAE,MAAM,2CAA2C,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAIxC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACtC,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAE9C,MAAM,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,uCAAuC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC9G,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAC5E,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAQnD;;;GAGG;AACH,SAAS,mBAAmB,CAC1B,WAA6B,EAC7B,UAA2C;IAE3C,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;IAE/D,MAAM,WAAW,GAAG,gBAAgB;QAClC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,CAAC,CAAC,IAAI,GAAG,CACL,OAAO;aACJ,MAAM,CAAC,CAAC,CAAC,EAA6C,EAAE,CAAC,CAAC,CAAC,aAAa,IAAI,IAAI,CAAC;aACjF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAC/B,CAAC;IAEN,MAAM,QAAQ,GAAoC,EAAE,CAAC;IACrD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,uIAAuI;QACvI,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,6BAA6B,IAAI,4CAA4C,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CACpB,aAA8C,EAC9C,kBAA0B;IAE1B,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IAEpC,8EAA8E;IAC9E,qFAAqF;IACrF,qEAAqE;IACrE,MAAM,eAAe,GAA2B,EAAE,CAAC;IACnD,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,UAAU,CAAC,iBAAiB,CAAC,UAAU,CAAuC,CAAC;QAC7F,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAA2B;QAClC,yCAAyC;QACzC,GAAI,OAAO,CAAC,GAA8B;QAC1C,0BAA0B;QAC1B,aAAa,EAAE,oBAAoB,EAAE;QACrC,oBAAoB,EAAE,kBAAkB;QACxC,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;QACjD,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,cAAc,EAAE,WAAW;QAC3B,cAAc,EAAE,MAAM;QACtB,0BAA0B;QAC1B,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC;KACpD,CAAC;IAEF,wEAAwE;IACxE,0GAA0G;IAE1G,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAA6B,EAC7B,UAA2C,EAC3C,kBAA0B;IAE1B,MAAM,aAAa,GAAG,mBAAmB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAEnE,MAAM,GAAG,GAAG,aAAa,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC;IAE7D,MAAM,SAAS,GAAG,IAAI,oBAAoB,CAAC;QACzC,OAAO,EAAE,aAAa;QACtB,IAAI,EAAE,CAAC,eAAe,CAAC;QACvB,GAAG;QACH,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;IAEH,6CAA6C;IAC7C,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACrB,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB,EAAE,IAAI,EAAE,iCAAiC,EAAE,OAAO,EAAE,OAAO,EAAE,EAC7D,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,CACvD,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC;QAC7C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,QAAQ,EAAE,CAAC;QACjB,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/pipeline/refresh-lists.js

@@ -14,7 +14,7 @@ import { parseArgs } from 'node:util';
 import chalk from 'chalk';
 import { checkHelp } from '../cli-help.js';
 import { resolveAllLists } from './list-resolver.js';
-import { connectMcpServersForLists, disconnectMcpServers } from './mcp-connections.js';
+import { connectViaProxy } from './proxy-mcp-connections.js';
 import { createPipelineLlm, loadExistingArtifact, loadPipelineConfig, writeArtifact, withSpinner, } from './pipeline-shared.js';
 // ---------------------------------------------------------------------------
 // Help + Argument Parsing
@@ -25,12 +25,16 @@ const refreshListsSpec = {
     usage: ['ironcurtain refresh-lists [options]'],
     options: [
         { flag: 'list', description: 'Refresh only the named list', placeholder: '<name>' },
-        { flag: 'with-mcp', description: 'Connect to MCP servers for data-backed lists' },
+        {
+            flag: 'with-mcp',
+            description: 'Connect to MCP servers for data-backed lists (default; kept for backward compatibility)',
+        },
+        { flag: 'no-mcp', description: 'Skip MCP server connections' },
     ],
     examples: [
-        'ironcurtain refresh-lists                      # Refresh all knowledge-based lists',
+        'ironcurtain refresh-lists                      # Refresh all lists (including MCP-backed)',
         'ironcurtain refresh-lists --list major-news    # Refresh a single list',
-        'ironcurtain refresh-lists --with-mcp           # Include MCP-backed lists',
+        'ironcurtain refresh-lists --no-mcp             # Skip MCP-backed lists',
     ],
 };
 function parseRefreshArgs(args) {
@@ -40,6 +44,7 @@ function parseRefreshArgs(args) {
             help: { type: 'boolean', short: 'h' },
             list: { type: 'string' },
             'with-mcp': { type: 'boolean' },
+            'no-mcp': { type: 'boolean' },
         },
         allowPositionals: true,
         strict: false,
@@ -48,7 +53,7 @@ function parseRefreshArgs(args) {
         return null;
     return {
         listName: values.list,
-        withMcp: values['with-mcp'] ?? false,
+        withMcp: values['no-mcp'] ? false : true,
     };
 }
 // ---------------------------------------------------------------------------
@@ -70,10 +75,10 @@ function selectListsToRefresh(definitions, options) {
             process.exit(1);
         }
     }
-    // Without --with-mcp, skip data-backed lists
+    // With --no-mcp, skip data-backed lists
     if (!options.withMcp) {
         for (const def of selected.filter((d) => d.requiresMcp)) {
-            console.error(`  ${chalk.yellow('Skipping:')} @${def.name} (requires MCP — use --with-mcp to include)`);
+            console.error(`  ${chalk.yellow('Skipping:')} @${def.name} (requires MCP — omit --no-mcp to include)`);
         }
         selected = selected.filter((d) => !d.requiresMcp);
     }
@@ -111,15 +116,18 @@ export async function main(args = []) {
     const { model: llm, logPath } = await createPipelineLlm(config.generatedDir, 'refresh-lists');
     // Load existing dynamic-lists.json for manual overrides and non-refreshed lists
     const existingLists = loadExistingArtifact(config.generatedDir, 'dynamic-lists.json', config.packageGeneratedDir);
-    // Connect to MCP servers if needed
+    // Connect to MCP servers via proxy if needed
     const needsMcp = options.withMcp && definitionsToRefresh.some((d) => d.requiresMcp);
-    let mcpConnections;
+    let proxy;
     if (needsMcp) {
-        mcpConnections = await connectMcpServersForLists(definitionsToRefresh, config.mcpServers);
+        proxy = await connectViaProxy(definitionsToRefresh, config.mcpServers, config.generatedDir);
     }
     try {
         const stepText = 'Refreshing dynamic lists';
-        const { result: refreshedLists } = await withSpinner(stepText, async (spinner) => resolveAllLists(definitionsToRefresh, { model: llm, mcpConnections }, existingLists, (msg) => {
+        const { result: refreshedLists } = await withSpinner(stepText, async (spinner) => resolveAllLists(definitionsToRefresh, {
+            model: llm,
+            proxyConnection: proxy ? { client: proxy.client, tools: proxy.tools } : undefined,
+        }, existingLists, (msg) => {
             spinner.text = `${stepText} — ${msg}`;
         }, true), (result, elapsed) => {
             const count = Object.keys(result.lists).length;
@@ -142,8 +150,8 @@ export async function main(args = []) {
         console.error(chalk.green.bold('List refresh successful!'));
     }
     finally {
-        if (mcpConnections) {
-            await disconnectMcpServers(mcpConnections);
+        if (proxy) {
+            await proxy.shutdown();
         }
     }
 }

package/dist/pipeline/refresh-lists.js.map

@@ -1 +1 @@
-{"version":3,"file":"refresh-lists.js","sourceRoot":"","sources":["../../src/pipeline/refresh-lists.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAoB,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAA4B,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACvF,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,aAAa,EACb,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAG9B,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,MAAM,gBAAgB,GAAgB;IACpC,IAAI,EAAE,2BAA2B;IACjC,WAAW,EAAE,qDAAqD;IAClE,KAAK,EAAE,CAAC,qCAAqC,CAAC;IAC9C,OAAO,EAAE;QACP,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,6BAA6B,EAAE,WAAW,EAAE,QAAQ,EAAE;QACnF,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,8CAA8C,EAAE;KAClF;IACD,QAAQ,EAAE;QACR,oFAAoF;QACpF,wEAAwE;QACxE,2EAA2E;KAC5E;CACF,CAAC;AASF,SAAS,gBAAgB,CAAC,IAAc;IACtC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC3B,IAAI;QACJ,OAAO,EAAE;YACP,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;YACrC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SAChC;QACD,gBAAgB,EAAE,IAAI;QACtB,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IAEH,IAAI,SAAS,CAAC,MAA4B,EAAE,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3E,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,IAA0B;QAC3C,OAAO,EAAG,MAAM,CAAC,UAAU,CAAyB,IAAI,KAAK;KAC9D,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,WAA6B,EAAE,OAA4B;IACvF,IAAI,QAAQ,GAAG,WAAW,CAAC;IAE3B,wDAAwD;IACxD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,QAAQ,iCAAiC,CAAC,CAAC,CAAC;YAC5F,OAAO,CAAC,KAAK,CAAC,oBAAoB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;YAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,6CAA6C;IAC7C,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;YACxD,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC,IAAI,6CAA6C,CAAC,CAAC;QAC1G,CAAC;QACD,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAiB,EAAE;IAC5C,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IAEpC,+CAA+C;IAC/C,MAAM,cAAc,GAAG,oBAAoB,CACzC,MAAM,CAAC,YAAY,EACnB,sBAAsB,EACtB,MAAM,CAAC,mBAAmB,CAC3B,CAAC;IACF,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC,CAAC;QAChH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,cAAc,GAAG,cAAc,CAAC,eAAe,IAAI,EAAE,CAAC;IAC5D,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,kEAAkE,CAAC,CAAC,CAAC;QAChG,OAAO;IACT,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,KAAK,CAAC,kBAAkB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,KAAK,CAAC,kBAAkB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,MAAM,oBAAoB,GAAG,oBAAoB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC3E,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAE9F,gFAAgF;IAChF,MAAM,aAAa,GAAG,oBAAoB,CACxC,MAAM,CAAC,YAAY,EACnB,oBAAoB,EACpB,MAAM,CAAC,mBAAmB,CAC3B,CAAC;IAEF,mCAAmC;IACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACpF,IAAI,cAA4D,CAAC;IACjE,IAAI,QAAQ,EAAE,CAAC;QACb,cAAc,GAAG,MAAM,yBAAyB,CAAC,oBAAoB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,0BAA0B,CAAC;QAC5C,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,WAAW,CAClD,QAAQ,EACR,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,eAAe,CACb,oBAAoB,EACpB,EAAE,KAAK,EAAE,GAAG,EAAE,cAAc,EAAE,EAC9B,aAAa,EACb,CAAC,GAAG,EAAE,EAAE;YACN,OAAO,CAAC,IAAI,GAAG,GAAG,QAAQ,MAAM,GAAG,EAAE,CAAC;QACxC,CAAC,EACD,IAAI,CACL,EACH,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;YAClB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;YAC/C,OAAO,GAAG,QAAQ,KAAK,KAAK,uBAAuB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5E,CAAC,CACF,CAAC;QAEF,4EAA4E;QAC5E,MAAM,WAAW,GAAqB;YACpC,WAAW,EAAE,cAAc,CAAC,WAAW;YACvC,KAAK,EAAE;gBACL,GAAG,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC/B,GAAG,cAAc,CAAC,KAAK;aACxB;SACF,CAAC;QACF,aAAa,CAAC,MAAM,CAAC,YAAY,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;QAEtE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,sBAAsB,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,KAAK,CAAC,0BAA0B,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,GAAG,qBAAqB,CAAC,EAAE,CAAC,CAAC;QAClG,OAAO,CAAC,KAAK,CAAC,0BAA0B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAC9D,CAAC;YAAS,CAAC;QACT,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,oBAAoB,CAAC,cAAc,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACnF,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACjD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"refresh-lists.js","sourceRoot":"","sources":["../../src/pipeline/refresh-lists.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAoB,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAwB,MAAM,4BAA4B,CAAC;AACnF,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,aAAa,EACb,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAG9B,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,MAAM,gBAAgB,GAAgB;IACpC,IAAI,EAAE,2BAA2B;IACjC,WAAW,EAAE,qDAAqD;IAClE,KAAK,EAAE,CAAC,qCAAqC,CAAC;IAC9C,OAAO,EAAE;QACP,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,6BAA6B,EAAE,WAAW,EAAE,QAAQ,EAAE;QACnF;YACE,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,yFAAyF;SACvG;QACD,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6BAA6B,EAAE;KAC/D;IACD,QAAQ,EAAE;QACR,2FAA2F;QAC3F,wEAAwE;QACxE,wEAAwE;KACzE;CACF,CAAC;AASF,SAAS,gBAAgB,CAAC,IAAc;IACtC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC3B,IAAI;QACJ,OAAO,EAAE;YACP,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;YACrC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC/B,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SAC9B;QACD,gBAAgB,EAAE,IAAI;QACtB,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IAEH,IAAI,SAAS,CAAC,MAA4B,EAAE,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3E,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,IAA0B;QAC3C,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;KACzC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,WAA6B,EAAE,OAA4B;IACvF,IAAI,QAAQ,GAAG,WAAW,CAAC;IAE3B,wDAAwD;IACxD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,QAAQ,iCAAiC,CAAC,CAAC,CAAC;YAC5F,OAAO,CAAC,KAAK,CAAC,oBAAoB,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;YAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;YACxD,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC,IAAI,4CAA4C,CAAC,CAAC;QACzG,CAAC;QACD,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,OAAO;AACP,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,OAAiB,EAAE;IAC5C,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,OAAO;IACrB,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IAEpC,+CAA+C;IAC/C,MAAM,cAAc,GAAG,oBAAoB,CACzC,MAAM,CAAC,YAAY,EACnB,sBAAsB,EACtB,MAAM,CAAC,mBAAmB,CAC3B,CAAC;IACF,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC,CAAC;QAChH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,cAAc,GAAG,cAAc,CAAC,eAAe,IAAI,EAAE,CAAC;IAC5D,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,kEAAkE,CAAC,CAAC,CAAC;QAChG,OAAO;IACT,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,KAAK,CAAC,kBAAkB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,KAAK,CAAC,kBAAkB,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,MAAM,oBAAoB,GAAG,oBAAoB,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC3E,IAAI,oBAAoB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAE9F,gFAAgF;IAChF,MAAM,aAAa,GAAG,oBAAoB,CACxC,MAAM,CAAC,YAAY,EACnB,oBAAoB,EACpB,MAAM,CAAC,mBAAmB,CAC3B,CAAC;IAEF,6CAA6C;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACpF,IAAI,KAAkC,CAAC;IACvC,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,GAAG,MAAM,eAAe,CAAC,oBAAoB,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,0BAA0B,CAAC;QAC5C,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,WAAW,CAClD,QAAQ,EACR,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,eAAe,CACb,oBAAoB,EACpB;YACE,KAAK,EAAE,GAAG;YACV,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;SAClF,EACD,aAAa,EACb,CAAC,GAAG,EAAE,EAAE;YACN,OAAO,CAAC,IAAI,GAAG,GAAG,QAAQ,MAAM,GAAG,EAAE,CAAC;QACxC,CAAC,EACD,IAAI,CACL,EACH,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;YAClB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;YAC/C,OAAO,GAAG,QAAQ,KAAK,KAAK,uBAAuB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5E,CAAC,CACF,CAAC;QAEF,4EAA4E;QAC5E,MAAM,WAAW,GAAqB;YACpC,WAAW,EAAE,cAAc,CAAC,WAAW;YACvC,KAAK,EAAE;gBACL,GAAG,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC/B,GAAG,cAAc,CAAC,KAAK;aACxB;SACF,CAAC;QACF,aAAa,CAAC,MAAM,CAAC,YAAY,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;QAEtE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,sBAAsB,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,KAAK,CAAC,0BAA0B,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,GAAG,qBAAqB,CAAC,EAAE,CAAC,CAAC;QAClG,OAAO,CAAC,KAAK,CAAC,0BAA0B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAC9D,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACnF,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACjD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/pipeline/scenario-generator.d.ts

@@ -4,69 +4,49 @@
  * Generates concrete test scenarios (tool call + expected decision) from
  * the constitution and tool annotations. Always includes mandatory
  * handwritten scenarios alongside LLM-generated ones.
+ *
+ * Large servers (100+ tools) are handled via batching: annotations are
+ * split into batches of SCENARIO_BATCH_SIZE, each batch gets its own
+ * scoped system prompt and Zod schema, and results are deduplicated
+ * across batches.
  */
 import type { LanguageModel, SystemModelMessage } from 'ai';
-import type { DynamicListsFile, ScenarioFeedback, ToolAnnotation, TestScenario } from './types.js';
+import type { ConditionalRoles, DynamicListsFile, StoredToolAnnotation, ToolAnnotation, TestScenario } from './types.js';
+export declare const SCENARIO_BATCH_SIZE = 25;
 /**
  * Formats a ## Dynamic List Values section for inclusion in prompts.
  * Shows up to {@link MAX_LIST_PREVIEW_VALUES} example values per list.
  * Returns an empty string when no lists are available.
  */
 export declare function formatDynamicListsSection(dynamicLists?: DynamicListsFile): string;
+/**
+ * Formats a single conditional role spec as a human-readable string.
+ * Shows the discriminator argument, its valid values, and the role
+ * assignments per mode so the LLM knows exact argument names/values.
+ */
+export declare function formatConditionalRoles(argName: string, spec: ConditionalRoles): string;
 /**
  * Builds the stable system prompt portion for the scenario generator.
  * Contains: role preamble, constitution, annotations, system config, and instructions.
  * This is the cacheable part.
+ *
+ * @param storedAnnotations - Optional raw annotations with conditional role specs.
+ *   When provided, the prompt includes discriminator argument names and valid values
+ *   so the LLM generates scenarios with correct argument names for multi-mode tools.
  */
-export declare function buildGeneratorSystemPrompt(constitutionText: string, annotations: ToolAnnotation[], sandboxDirectory: string, permittedDirectories?: string[], dynamicLists?: DynamicListsFile): string;
-export declare function generateScenarios(constitutionText: string, annotations: ToolAnnotation[], handwrittenScenarios: TestScenario[], sandboxDirectory: string, llm: LanguageModel, permittedDirectories?: string[], onProgress?: (message: string) => void, system?: string | SystemModelMessage, dynamicLists?: DynamicListsFile): Promise<TestScenario[]>;
+export declare function buildGeneratorSystemPrompt(constitutionText: string, annotations: ToolAnnotation[], sandboxDirectory: string, permittedDirectories?: string[], dynamicLists?: DynamicListsFile, storedAnnotations?: StoredToolAnnotation[]): string;
 /**
- * Formats feedback from the verify-repair loop into a user message
- * for the next turn of the scenario generator conversation.
+ * Generates test scenarios by batching annotations into groups of
+ * SCENARIO_BATCH_SIZE, running generateObjectWithRepair per batch with
+ * scoped system prompts and Zod schemas, then deduplicating results.
  */
-export declare function formatFeedbackMessage(feedback: ScenarioFeedback): string;
+export declare function generateScenarios(constitutionText: string, annotations: ToolAnnotation[], handwrittenScenarios: TestScenario[], sandboxDirectory: string, llm: LanguageModel, permittedDirectories?: string[], onProgress?: (message: string) => void, dynamicLists?: DynamicListsFile, wrapSystemPrompt?: (prompt: string) => string | SystemModelMessage, storedAnnotations?: StoredToolAnnotation[]): Promise<TestScenario[]>;
 /**
- * A stateful multi-turn wrapper around the scenario generator.
- *
- * Maintains a conversation history so that feedback from the verify-repair
- * loop (corrections, discarded scenarios, probes) can be communicated to
- * the LLM in follow-up turns. The system prompt is fixed at construction
- * and never changes, enabling prompt caching.
- *
- * Lifecycle:
- *   1. Construct with system prompt and config (once per pipeline run)
- *   2. Call generate() for the initial scenario set
- *   3. After verification, call regenerate(feedback) with repair feedback
- *   4. Session is GC'd when the pipeline finishes (no explicit close needed)
+ * Generates replacement scenarios for structurally discarded ones.
+ * Uses a single-shot generateObjectWithRepair call (no batching needed
+ * since the discarded set is typically small).
  */
-export declare class ScenarioGeneratorSession {
-    private readonly systemPrompt;
-    private readonly model;
-    private readonly schema;
-    private readonly handwrittenScenarios;
-    private readonly history;
-    private readonly schemaHint;
-    private turns;
-    constructor(options: {
-        system: string | SystemModelMessage;
-        model: LanguageModel;
-        annotations: ToolAnnotation[];
-        handwrittenScenarios: TestScenario[];
-    });
-    /**
-     * Initial generation: sends the first user message and returns scenarios.
-     * Semantically equivalent to the existing single-shot generateScenarios().
-     */
-    generate(onProgress?: (message: string) => void): Promise<TestScenario[]>;
-    /**
-     * Follow-up generation: feeds back corrections and requests replacement
-     * scenarios for the ones that were wrong.
-     *
-     * Returns ONLY the new/replacement scenarios (not handwritten, not
-     * previously-generated-and-still-valid ones). The caller is responsible
-     * for merging these into the full scenario set.
-     */
-    regenerate(feedback: ScenarioFeedback, onProgress?: (message: string) => void): Promise<TestScenario[]>;
-    /** Returns the number of turns completed so far. */
-    get turnCount(): number;
-}
+export declare function repairScenarios(discardedScenarios: {
+    scenario: TestScenario;
+    feedback: string;
+}[], constitutionText: string, annotations: ToolAnnotation[], sandboxDirectory: string, llm: LanguageModel, permittedDirectories?: string[], dynamicLists?: DynamicListsFile, onProgress?: (message: string) => void, storedAnnotations?: StoredToolAnnotation[]): Promise<TestScenario[]>;