@qduc/term2 0.9.4 → 0.10.1

package/dist/services/agent-runtime/skill-resolver.js

@@ -0,0 +1,40 @@
+/**
+ * Resolve a list of skill names into their instruction bodies and
+ * collect errors for unknown or unsupported skills.
+ *
+ * **Capability guard**: Skills only contribute instruction bodies (`body`).
+ * The current SkillInfo type has no fields for tool definitions, resource
+ * grants, output contracts, or permission elevation, so skills cannot
+ * grant or widen authority. If SkillInfo is extended in the future, any
+ * new authority-bearing field must be explicitly validated here and
+ * rejected with `unsupported_contribution` unless the runtime supports it.
+ *
+ * The MVP only supports instruction contributions. Any skill requesting
+ * tool definitions, resource grants, output contracts, or permission
+ * elevation is rejected with `unsupported_contribution`.
+ */
+export function resolveSkills(skillNames, skillsService) {
+    if (!skillNames || skillNames.length === 0) {
+        return { instructions: '', errors: [] };
+    }
+    const instructions = [];
+    const errors = [];
+    for (const name of skillNames) {
+        const skill = skillsService.getAvailableSkills().find((s) => s.name === name);
+        if (!skill) {
+            errors.push({
+                code: 'unknown_skill',
+                skillName: name,
+                message: `Unknown skill: "${name}". Available skills can be discovered via the skills command.`,
+            });
+            continue;
+        }
+        // MVP: only instruction contributions are supported.
+        instructions.push(skill.body);
+    }
+    return {
+        instructions: instructions.join('\n\n'),
+        errors,
+    };
+}
+//# sourceMappingURL=skill-resolver.js.map

package/dist/services/agent-runtime/skill-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-resolver.js","sourceRoot":"","sources":["../../../source/services/agent-runtime/skill-resolver.ts"],"names":[],"mappings":"AAeA;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,aAAa,CAC3B,UAA6C,EAC7C,aAA4B;IAE5B,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,aAAa,CAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAC9E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,eAAe;gBACrB,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,mBAAmB,IAAI,+DAA+D;aAChG,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,qDAAqD;QACrD,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,OAAO;QACL,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;QACvC,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/services/agent-runtime/structured-output.d.ts

@@ -0,0 +1,40 @@
+import type { RunOutputFormat, RunErrorCode } from './types.js';
+/**
+ * Validate that a JSON Schema only uses supported keywords.
+ * Returns an array of unsupported keyword names, or empty if valid.
+ */
+export declare function validateSchemaKeywords(schema: Record<string, unknown>): string[];
+/**
+ * Validate an output value against a JSON Schema subset.
+ * Returns an array of error message strings, or empty if valid.
+ *
+ * Supported keywords: type, properties, required, items, enum, additionalProperties.
+ */
+export declare function validateAgainstSchema(value: unknown, schema: Record<string, unknown>, path?: string): string[];
+/**
+ * Validate the schema itself (keywords check) and return a structured
+ * error or null. The caller should reject execution if non-null.
+ */
+export declare function validateOutputSchema(output: RunOutputFormat): {
+    code: RunErrorCode;
+    message: string;
+} | null;
+/**
+ * Append a JSON-only output contract to the model-visible instructions.
+ * This is appended as a distinct section so the model knows it MUST
+ * produce valid JSON matching the schema.
+ */
+export declare function formatOutputContract(output: RunOutputFormat): string;
+/**
+ * Parse and validate a completed output string against a JSON Schema.
+ * Returns { value: T } on success, or { error: ... } on validation failure.
+ */
+export declare function parseAndValidateOutput<T>(rawOutput: string, output: RunOutputFormat): {
+    value: T;
+} | {
+    error: {
+        code: RunErrorCode;
+        message: string;
+    };
+};
+//# sourceMappingURL=structured-output.d.ts.map

package/dist/services/agent-runtime/structured-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"structured-output.d.ts","sourceRoot":"","sources":["../../../source/services/agent-runtime/structured-output.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAmBhE;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CA2BhF;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,SAAM,GAAG,MAAM,EAAE,CAmF3G;AAkDD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,eAAe,GAAG;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAc5G;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAWpE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EACtC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,eAAe,GACtB;IAAE,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAwBnE"}

package/dist/services/agent-runtime/structured-output.js

@@ -0,0 +1,238 @@
+/**
+ * Supported JSON Schema keywords for the bounded inline validator.
+ * Keywords outside this set are rejected before execution with a typed error.
+ */
+const SUPPORTED_SCHEMA_KEYWORDS = new Set([
+    'type',
+    'properties',
+    'required',
+    'items',
+    'enum',
+    'additionalProperties',
+    'description',
+    'title',
+    // $schema is silently stripped so callers can pass standard schemas
+    '$schema',
+]);
+/**
+ * Validate that a JSON Schema only uses supported keywords.
+ * Returns an array of unsupported keyword names, or empty if valid.
+ */
+export function validateSchemaKeywords(schema) {
+    const unsupported = [];
+    for (const key of Object.keys(schema)) {
+        if (!SUPPORTED_SCHEMA_KEYWORDS.has(key)) {
+            unsupported.push(key);
+        }
+        // Recursively check nested schemas in properties/items
+        if (key === 'properties' && typeof schema[key] === 'object' && schema[key] !== null) {
+            const props = schema[key];
+            for (const propKey of Object.keys(props)) {
+                const propSchema = props[propKey];
+                if (typeof propSchema === 'object' && propSchema !== null && !Array.isArray(propSchema)) {
+                    const nested = validateSchemaKeywords(propSchema);
+                    for (const kw of nested) {
+                        unsupported.push(`properties.${propKey}.${kw}`);
+                    }
+                }
+            }
+        }
+        if (key === 'items' && typeof schema[key] === 'object' && schema[key] !== null && !Array.isArray(schema[key])) {
+            const nested = validateSchemaKeywords(schema[key]);
+            for (const kw of nested) {
+                unsupported.push(`items.${kw}`);
+            }
+        }
+    }
+    return unsupported;
+}
+/**
+ * Validate an output value against a JSON Schema subset.
+ * Returns an array of error message strings, or empty if valid.
+ *
+ * Supported keywords: type, properties, required, items, enum, additionalProperties.
+ */
+export function validateAgainstSchema(value, schema, path = '$') {
+    const errors = [];
+    // enum check
+    if ('enum' in schema && Array.isArray(schema.enum)) {
+        const enumValues = schema.enum;
+        let found = false;
+        for (const ev of enumValues) {
+            if (deepEqual(value, ev)) {
+                found = true;
+                break;
+            }
+        }
+        if (!found) {
+            errors.push(`${path}: value must be one of the enum values`);
+        }
+        return errors; // enum is terminal; skip other checks when present
+    }
+    // type check
+    const schemaType = schema.type;
+    if (schemaType !== undefined) {
+        const typeResult = checkType(value, schemaType, path);
+        if (typeResult)
+            errors.push(typeResult);
+    }
+    // additionalProperties check
+    if (schema.additionalProperties === false && typeof value === 'object' && value !== null && !Array.isArray(value)) {
+        const props = schema.properties;
+        if (typeof props === 'object' && props !== null) {
+            const knownKeys = new Set(Object.keys(props));
+            for (const key of Object.keys(value)) {
+                if (!knownKeys.has(key)) {
+                    errors.push(`${path}.${key}: additional properties are not allowed`);
+                }
+            }
+        }
+    }
+    // properties check
+    if (typeof schema.properties === 'object' &&
+        schema.properties !== null &&
+        typeof value === 'object' &&
+        value !== null &&
+        !Array.isArray(value)) {
+        const props = schema.properties;
+        const valueObj = value;
+        // required check
+        if (Array.isArray(schema.required)) {
+            for (const reqKey of schema.required) {
+                if (!(reqKey in valueObj)) {
+                    errors.push(`${path}: missing required property "${reqKey}"`);
+                }
+            }
+        }
+        for (const [key, propSchema] of Object.entries(props)) {
+            if (key in valueObj && typeof propSchema === 'object' && propSchema !== null && !Array.isArray(propSchema)) {
+                const nestedErrors = validateAgainstSchema(valueObj[key], propSchema, `${path}.${key}`);
+                errors.push(...nestedErrors);
+            }
+        }
+    }
+    // items check for arrays
+    if (schema.items && Array.isArray(value)) {
+        const itemSchema = schema.items;
+        if (typeof itemSchema === 'object' && itemSchema !== null && !Array.isArray(itemSchema)) {
+            for (let i = 0; i < value.length; i++) {
+                const nestedErrors = validateAgainstSchema(value[i], itemSchema, `${path}[${i}]`);
+                errors.push(...nestedErrors);
+            }
+        }
+    }
+    return errors;
+}
+/** Check the type of a value against the schema type(s). */
+function checkType(value, schemaType, path) {
+    const types = Array.isArray(schemaType) ? schemaType : [schemaType];
+    for (const t of types) {
+        if (matchesType(value, t))
+            return undefined;
+    }
+    return `${path}: expected ${Array.isArray(schemaType) ? schemaType.join('|') : schemaType}, got ${typeof value}`;
+}
+function matchesType(value, t) {
+    switch (t) {
+        case 'string':
+            return typeof value === 'string';
+        case 'number':
+            return typeof value === 'number';
+        case 'integer':
+            return typeof value === 'number' && Number.isInteger(value);
+        case 'boolean':
+            return typeof value === 'boolean';
+        case 'null':
+            return value === null;
+        case 'array':
+            return Array.isArray(value);
+        case 'object':
+            return typeof value === 'object' && value !== null && !Array.isArray(value);
+        default:
+            return false;
+    }
+}
+/** Simple deep equality for enum value comparison. */
+function deepEqual(a, b) {
+    if (a === b)
+        return true;
+    if (typeof a !== typeof b)
+        return false;
+    if (typeof a !== 'object' || a === null || b === null)
+        return false;
+    if (Array.isArray(a) && Array.isArray(b)) {
+        if (a.length !== b.length)
+            return false;
+        return a.every((item, i) => deepEqual(item, b[i]));
+    }
+    if (Array.isArray(a) !== Array.isArray(b))
+        return false;
+    const keysA = Object.keys(a);
+    const keysB = Object.keys(b);
+    if (keysA.length !== keysB.length)
+        return false;
+    return keysA.every((key) => deepEqual(a[key], b[key]));
+}
+/**
+ * Validate the schema itself (keywords check) and return a structured
+ * error or null. The caller should reject execution if non-null.
+ */
+export function validateOutputSchema(output) {
+    if (!output || typeof output.schema !== 'object' || output.schema === null) {
+        return { code: 'invalid_schema', message: 'Output schema must be a non-null object.' };
+    }
+    const unsupported = validateSchemaKeywords(output.schema);
+    if (unsupported.length > 0) {
+        return {
+            code: 'invalid_schema',
+            message: `Schema contains unsupported keywords: ${unsupported.join(', ')}. The built-in validator only supports: type, properties, required, items, enum, additionalProperties.`,
+        };
+    }
+    return null;
+}
+/**
+ * Append a JSON-only output contract to the model-visible instructions.
+ * This is appended as a distinct section so the model knows it MUST
+ * produce valid JSON matching the schema.
+ */
+export function formatOutputContract(output) {
+    const schemaJson = JSON.stringify(output.schema, null, 2);
+    return `\n## Output Format
+
+You MUST respond with a single valid JSON object as your entire output. Do NOT include any explanatory text, markdown fences, or other content.
+The JSON must conform to the following JSON Schema:
+
+\`\`\`json
+${schemaJson}
+\`\`\`
+${output.name ? `\nSchema name: ${output.name}` : ''}`;
+}
+/**
+ * Parse and validate a completed output string against a JSON Schema.
+ * Returns { value: T } on success, or { error: ... } on validation failure.
+ */
+export function parseAndValidateOutput(rawOutput, output) {
+    let parsed;
+    try {
+        parsed = JSON.parse(rawOutput);
+    }
+    catch (err) {
+        return {
+            error: {
+                code: 'invalid_output',
+                message: `Failed to parse output as JSON: ${err.message}`,
+            },
+        };
+    }
+    const validationErrors = validateAgainstSchema(parsed, output.schema);
+    if (validationErrors.length > 0) {
+        return {
+            error: {
+                code: 'invalid_output',
+                message: `Output does not match the requested schema: ${validationErrors.join('; ')}`,
+            },
+        };
+    }
+    return { value: parsed };
+}
+//# sourceMappingURL=structured-output.js.map

package/dist/services/agent-runtime/structured-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"structured-output.js","sourceRoot":"","sources":["../../../source/services/agent-runtime/structured-output.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,MAAM;IACN,YAAY;IACZ,UAAU;IACV,OAAO;IACP,MAAM;IACN,sBAAsB;IACtB,aAAa;IACb,OAAO;IACP,oEAAoE;IACpE,SAAS;CACV,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA+B;IACpE,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QACD,uDAAuD;QACvD,IAAI,GAAG,KAAK,YAAY,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YACpF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAA4B,CAAC;YACrD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;gBAClC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxF,MAAM,MAAM,GAAG,sBAAsB,CAAC,UAAqC,CAAC,CAAC;oBAC7E,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;wBACxB,WAAW,CAAC,IAAI,CAAC,cAAc,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,GAAG,KAAK,OAAO,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC9G,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAA4B,CAAC,CAAC;YAC9E,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;gBACxB,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAE,MAA+B,EAAE,IAAI,GAAG,GAAG;IAC/F,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,aAAa;IACb,IAAI,MAAM,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;QAC/B,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5B,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;gBACzB,KAAK,GAAG,IAAI,CAAC;gBACb,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,wCAAwC,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,MAAM,CAAC,CAAC,mDAAmD;IACpE,CAAC;IAED,aAAa;IACb,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,EAAE,UAA+B,EAAE,IAAI,CAAC,CAAC;QAC3E,IAAI,UAAU;YAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAED,6BAA6B;IAC7B,IAAI,MAAM,CAAC,oBAAoB,KAAK,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClH,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC;QAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAChD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxB,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,yCAAyC,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,IACE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,MAAM,CAAC,UAAU,KAAK,IAAI;QAC1B,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACrB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAqC,CAAC;QAC3D,MAAM,QAAQ,GAAG,KAAgC,CAAC;QAElD,iBAAiB;QACjB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACrC,IAAI,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,EAAE,CAAC;oBAC1B,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,gCAAgC,MAAM,GAAG,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACtD,IAAI,GAAG,IAAI,QAAQ,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3G,MAAM,YAAY,GAAG,qBAAqB,CACxC,QAAQ,CAAC,GAAG,CAAC,EACb,UAAqC,EACrC,GAAG,IAAI,IAAI,GAAG,EAAE,CACjB,CAAC;gBACF,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC;QAChC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACxF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,YAAY,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAqC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC7G,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4DAA4D;AAC5D,SAAS,SAAS,CAAC,KAAc,EAAE,UAA6B,EAAE,IAAY;IAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAEpE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;IAED,OAAO,GAAG,IAAI,cAAc,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,SAAS,OAAO,KAAK,EAAE,CAAC;AACnH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,CAAS;IAC5C,QAAQ,CAAC,EAAE,CAAC;QACV,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9D,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;QACpC,KAAK,MAAM;YACT,OAAO,KAAK,KAAK,IAAI,CAAC;QACxB,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9E;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED,sDAAsD;AACtD,SAAS,SAAS,CAAC,CAAU,EAAE,CAAU;IACvC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,OAAO,CAAC,KAAK,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAE,CAAS,CAAC,GAAG,CAAC,EAAG,CAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAuB;IAC1D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3E,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IACzF,CAAC;IACD,MAAM,WAAW,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,yCAAyC,WAAW,CAAC,IAAI,CAChE,IAAI,CACL,wGAAwG;SAC1G,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAuB;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1D,OAAO;;;;;;EAMP,UAAU;;EAEV,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAAiB,EACjB,MAAuB;IAEvB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO;YACL,KAAK,EAAE;gBACL,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,mCAAmC,GAAG,CAAC,OAAO,EAAE;aAC1D;SACF,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACtE,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,KAAK,EAAE;gBACL,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,+CAA+C,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACtF;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,MAAW,EAAE,CAAC;AAChC,CAAC"}

package/dist/services/agent-runtime/text-attachment.d.ts

@@ -0,0 +1,28 @@
+import type { RunAttachment } from './types.js';
+/**
+ * Result of validating a single attachment.
+ */
+export interface AttachmentValidationResult {
+    errors: string[];
+}
+/**
+ * Validate a single attachment against the contract: textual content only,
+ * valid names, and deterministic content.
+ */
+export declare function validateAttachment(attachment: RunAttachment): AttachmentValidationResult;
+/**
+ * Validate all attachments and return any errors found.
+ */
+export declare function validateAttachments(attachments: ReadonlyArray<RunAttachment>): AttachmentValidationResult;
+/**
+ * Serialize an attachment into a deterministic model-visible section.
+ * Uses clear boundaries so the model can distinguish attachment content
+ * from instructions and task.
+ */
+export declare function serializeAttachment(attachment: RunAttachment, index: number): string;
+/**
+ * Serialize all attachments into a single model-visible text block.
+ * Returns empty string when there are no attachments.
+ */
+export declare function serializeAttachments(attachments: ReadonlyArray<RunAttachment>): string;
+//# sourceMappingURL=text-attachment.d.ts.map

package/dist/services/agent-runtime/text-attachment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"text-attachment.d.ts","sourceRoot":"","sources":["../../../source/services/agent-runtime/text-attachment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AA0EhD;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,aAAa,GAAG,0BAA0B,CASxF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,aAAa,CAAC,aAAa,CAAC,GAAG,0BAA0B,CASzG;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAGpF;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,aAAa,CAAC,aAAa,CAAC,GAAG,MAAM,CAQtF"}

package/dist/services/agent-runtime/text-attachment.js

@@ -0,0 +1,129 @@
+/** Allowed textual MIME types for agent attachments. */
+const TEXTUAL_MIME_TYPES = new Set([
+    'text/plain',
+    'text/markdown',
+    'text/x-markdown',
+    'text/x-rst',
+    'text/xml',
+    'text/html',
+    'text/css',
+    'text/javascript',
+    'text/typescript',
+    'text/x-typescript',
+    'text/x-python',
+    'text/x-java',
+    'text/x-c',
+    'text/x-c++',
+    'text/x-csharp',
+    'text/x-go',
+    'text/x-rust',
+    'text/x-ruby',
+    'text/x-sh',
+    'text/x-shellscript',
+    'text/yaml',
+    'text/x-yaml',
+    'application/json',
+    'application/xml',
+    'application/javascript',
+    'application/typescript',
+    'application/x-http',
+]);
+/**
+ * Validate an attachment's MIME type. Only textual MIME types are supported;
+ * binary types (image/*, application/octet-stream, application/zip, etc.)
+ * and unknown types produce a typed validation error.
+ */
+function validateMimeType(mimeType) {
+    if (!mimeType)
+        return undefined; // no MIME type = accepted (treat as text/plain)
+    const normalized = mimeType.toLowerCase().trim();
+    if (TEXTUAL_MIME_TYPES.has(normalized))
+        return undefined;
+    if (normalized.startsWith('text/'))
+        return undefined; // all text/* types are accepted
+    if (normalized.startsWith('application/json'))
+        return undefined;
+    if (normalized.startsWith('application/xml'))
+        return undefined;
+    if (normalized === 'application/javascript' || normalized === 'application/typescript')
+        return undefined;
+    return `Unsupported MIME type "${mimeType}": only textual content types are supported. Binary types (image/*, application/octet-stream, etc.) are not accepted.`;
+}
+/** Validate that content is a non-empty string. */
+function validateContent(content) {
+    if (typeof content !== 'string') {
+        return 'Attachment content must be a string.';
+    }
+    if (content.length === 0) {
+        return 'Attachment content must not be empty.';
+    }
+    return undefined;
+}
+/** Validate that the name is a non-empty string without path separators. */
+function validateName(name) {
+    if (typeof name !== 'string') {
+        return 'Attachment name must be a string.';
+    }
+    if (name.length === 0) {
+        return 'Attachment name must not be empty.';
+    }
+    if (name.includes('/') || name.includes('\\')) {
+        return `Attachment name must not contain path separators: "${name}". Attachments are supplied data, not filesystem references.`;
+    }
+    return undefined;
+}
+/**
+ * Validate a single attachment against the contract: textual content only,
+ * valid names, and deterministic content.
+ */
+export function validateAttachment(attachment) {
+    const errors = [];
+    const nameErr = validateName(attachment.name);
+    if (nameErr)
+        errors.push(nameErr);
+    const contentErr = validateContent(attachment.content);
+    if (contentErr)
+        errors.push(contentErr);
+    const mimeErr = validateMimeType(attachment.mimeType);
+    if (mimeErr)
+        errors.push(mimeErr);
+    return { errors };
+}
+/**
+ * Validate all attachments and return any errors found.
+ */
+export function validateAttachments(attachments) {
+    const allErrors = [];
+    for (let i = 0; i < attachments.length; i++) {
+        const result = validateAttachment(attachments[i]);
+        for (const err of result.errors) {
+            allErrors.push(`Attachment[${i}]: ${err}`);
+        }
+    }
+    return { errors: allErrors };
+}
+/**
+ * Serialize an attachment into a deterministic model-visible section.
+ * Uses clear boundaries so the model can distinguish attachment content
+ * from instructions and task.
+ */
+export function serializeAttachment(attachment, index) {
+    const mimeLabel = attachment.mimeType ? ` (${attachment.mimeType})` : '';
+    return `### Attachment ${index + 1}: ${attachment.name}${mimeLabel}\n\n` + '```\n' + attachment.content + '\n```';
+}
+/**
+ * Serialize all attachments into a single model-visible text block.
+ * Returns empty string when there are no attachments.
+ */
+export function serializeAttachments(attachments) {
+    if (attachments.length === 0)
+        return '';
+    const parts = ['\n## Attachments\n'];
+    for (let i = 0; i < attachments.length; i++) {
+        parts.push(serializeAttachment(attachments[i], i));
+        if (i < attachments.length - 1)
+            parts.push('');
+    }
+    return parts.join('\n');
+}
+//# sourceMappingURL=text-attachment.js.map

package/dist/services/agent-runtime/text-attachment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"text-attachment.js","sourceRoot":"","sources":["../../../source/services/agent-runtime/text-attachment.ts"],"names":[],"mappings":"AAEA,wDAAwD;AACxD,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,YAAY;IACZ,eAAe;IACf,iBAAiB;IACjB,YAAY;IACZ,UAAU;IACV,WAAW;IACX,UAAU;IACV,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,eAAe;IACf,aAAa;IACb,UAAU;IACV,YAAY;IACZ,eAAe;IACf,WAAW;IACX,aAAa;IACb,aAAa;IACb,WAAW;IACX,oBAAoB;IACpB,WAAW;IACX,aAAa;IACb,kBAAkB;IAClB,iBAAiB;IACjB,wBAAwB;IACxB,wBAAwB;IACxB,oBAAoB;CACrB,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,QAA4B;IACpD,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC,CAAC,gDAAgD;IACjF,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACzD,IAAI,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,gCAAgC;IACtF,IAAI,UAAU,CAAC,UAAU,CAAC,kBAAkB,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,IAAI,UAAU,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/D,IAAI,UAAU,KAAK,wBAAwB,IAAI,UAAU,KAAK,wBAAwB;QAAE,OAAO,SAAS,CAAC;IACzG,OAAO,0BAA0B,QAAQ,uHAAuH,CAAC;AACnK,CAAC;AAED,mDAAmD;AACnD,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,sCAAsC,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,uCAAuC,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4EAA4E;AAC5E,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,mCAAmC,CAAC;IAC7C,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,oCAAoC,CAAC;IAC9C,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,OAAO,sDAAsD,IAAI,8DAA8D,CAAC;IAClI,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AASD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAyB;IAC1D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,OAAO;QAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,UAAU;QAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,gBAAgB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,OAAO;QAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAyC;IAC3E,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAChC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAyB,EAAE,KAAa;IAC1E,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,OAAO,kBAAkB,KAAK,GAAG,CAAC,KAAK,UAAU,CAAC,IAAI,GAAG,SAAS,MAAM,GAAG,OAAO,GAAG,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;AACpH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,WAAyC;IAC5E,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/services/agent-runtime/tools-resolver.d.ts

@@ -0,0 +1,26 @@
+import type { ResolvedAgentPermissions } from './types.js';
+export interface ToolResolutionResult {
+    /** Resolved tool names that pass authority checks. */
+    resolved: string[];
+    /** Errors for unknown tools or tools the parent does not authorize. */
+    errors: Array<{
+        code: string;
+        toolName: string;
+        message: string;
+    }>;
+}
+/**
+ * Validate requested tool names against the known tool set and intersect
+ * with the effective permissions computed earlier by the resolver.
+ *
+ * Resolution pipeline:
+ * 1. If `requested` is undefined or empty → no tools resolved.
+ * 2. If `authorized` (permissions.tools) is defined, reject any requested
+ *    tool not present in the authorization list with `permission_denied`.
+ * 3. Unknown tool names produce `unknown_tool` validation failures.
+ * 4. Known tools whose required coarse permission is denied by the
+ *    effective authority produce `permission_denied` failures.
+ * 5. Remaining tools are returned as the resolved set.
+ */
+export declare function resolveTools(requested: ReadonlyArray<string> | undefined, effectivePermissions: ResolvedAgentPermissions, authorized?: ReadonlyArray<string>): ToolResolutionResult;
+//# sourceMappingURL=tools-resolver.d.ts.map

package/dist/services/agent-runtime/tools-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools-resolver.d.ts","sourceRoot":"","sources":["../../../source/services/agent-runtime/tools-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AA0B3D,MAAM,WAAW,oBAAoB;IACnC,sDAAsD;IACtD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,uEAAuE;IACvE,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAC1B,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,SAAS,EAC5C,oBAAoB,EAAE,wBAAwB,EAC9C,UAAU,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,GACjC,oBAAoB,CA6CtB"}

package/dist/services/agent-runtime/tools-resolver.js

@@ -0,0 +1,77 @@
+/**
+ * Known tool name → required permission mapping.
+ * Only tools that exist in the Term2 tool set are listed here.
+ * Adding a tool here makes it available for agent-runtime resolution;
+ * tools not listed are treated as unknown and produce validation failures.
+ */
+const TOOL_PERMISSION_MAP = {
+    read_file: 'canRead',
+    grep: 'canRead',
+    glob: 'canRead',
+    read_code_outline: 'canRead',
+    code_context_search: 'canRead',
+    web_search: 'canSearchWeb',
+    web_fetch: 'canSearchWeb',
+    apply_patch: 'canWrite',
+    search_replace: 'canWrite',
+    create_file: 'canWrite',
+    shell: 'canRunShell',
+    ask_user: 'canRead', // always available; permission acts as read-only gate
+    ask_mentor: 'canUseNestedAgents',
+    run_subagent: 'canUseNestedAgents',
+    activate_skill: 'canRead',
+};
+/**
+ * Validate requested tool names against the known tool set and intersect
+ * with the effective permissions computed earlier by the resolver.
+ *
+ * Resolution pipeline:
+ * 1. If `requested` is undefined or empty → no tools resolved.
+ * 2. If `authorized` (permissions.tools) is defined, reject any requested
+ *    tool not present in the authorization list with `permission_denied`.
+ * 3. Unknown tool names produce `unknown_tool` validation failures.
+ * 4. Known tools whose required coarse permission is denied by the
+ *    effective authority produce `permission_denied` failures.
+ * 5. Remaining tools are returned as the resolved set.
+ */
+export function resolveTools(requested, effectivePermissions, authorized) {
+    if (!requested || requested.length === 0) {
+        return { resolved: [], errors: [] };
+    }
+    const authorizedSet = authorized ? new Set(authorized) : undefined;
+    const resolved = [];
+    const errors = [];
+    for (const toolName of requested) {
+        // ── Authorization gate (permissions.tools) ──
+        if (authorizedSet !== undefined && !authorizedSet.has(toolName)) {
+            errors.push({
+                code: 'permission_denied',
+                toolName,
+                message: `Tool "${toolName}" is not authorized by the effective permissions.`,
+            });
+            continue;
+        }
+        // ── Known-tool check ──
+        const requiredPermission = TOOL_PERMISSION_MAP[toolName];
+        if (requiredPermission === undefined) {
+            errors.push({
+                code: 'unknown_tool',
+                toolName,
+                message: `Unknown tool: "${toolName}". Check the available tool set.`,
+            });
+            continue;
+        }
+        // ── Coarse permission gate ──
+        if (effectivePermissions[requiredPermission] !== true) {
+            errors.push({
+                code: 'permission_denied',
+                toolName,
+                message: `Tool "${toolName}" requires permission "${requiredPermission}" which is not granted.`,
+            });
+            continue;
+        }
+        resolved.push(toolName);
+    }
+    return { resolved, errors };
+}
+//# sourceMappingURL=tools-resolver.js.map

package/dist/services/agent-runtime/tools-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools-resolver.js","sourceRoot":"","sources":["../../../source/services/agent-runtime/tools-resolver.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,MAAM,mBAAmB,GAAmD;IAC1E,SAAS,EAAE,SAAS;IACpB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,SAAS;IACf,iBAAiB,EAAE,SAAS;IAC5B,mBAAmB,EAAE,SAAS;IAC9B,UAAU,EAAE,cAAc;IAC1B,SAAS,EAAE,cAAc;IACzB,WAAW,EAAE,UAAU;IACvB,cAAc,EAAE,UAAU;IAC1B,WAAW,EAAE,UAAU;IACvB,KAAK,EAAE,aAAa;IACpB,QAAQ,EAAE,SAAS,EAAE,sDAAsD;IAC3E,UAAU,EAAE,oBAAoB;IAChC,YAAY,EAAE,oBAAoB;IAClC,cAAc,EAAE,SAAS;CAC1B,CAAC;AASF;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,YAAY,CAC1B,SAA4C,EAC5C,oBAA8C,EAC9C,UAAkC;IAElC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAmC,EAAE,CAAC;IAElD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,+CAA+C;QAC/C,IAAI,aAAa,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChE,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mBAAmB;gBACzB,QAAQ;gBACR,OAAO,EAAE,SAAS,QAAQ,mDAAmD;aAC9E,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,yBAAyB;QACzB,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,cAAc;gBACpB,QAAQ;gBACR,OAAO,EAAE,kBAAkB,QAAQ,kCAAkC;aACtE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,+BAA+B;QAC/B,IAAI,oBAAoB,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mBAAmB;gBACzB,QAAQ;gBACR,OAAO,EAAE,SAAS,QAAQ,0BAA0B,kBAAkB,yBAAyB;aAChG,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC"}