@researchcomputer/agents-sdk 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (274) hide show
  1. package/README.md +60 -0
  2. package/dist/agents/messages.d.ts +29 -0
  3. package/dist/agents/messages.d.ts.map +1 -0
  4. package/dist/agents/messages.js +56 -0
  5. package/dist/agents/messages.js.map +1 -0
  6. package/dist/agents/messages.test.d.ts +2 -0
  7. package/dist/agents/messages.test.d.ts.map +1 -0
  8. package/dist/agents/messages.test.js +80 -0
  9. package/dist/agents/messages.test.js.map +1 -0
  10. package/dist/agents/subagent.d.ts +16 -0
  11. package/dist/agents/subagent.d.ts.map +1 -0
  12. package/dist/agents/subagent.js +46 -0
  13. package/dist/agents/subagent.js.map +1 -0
  14. package/dist/agents/swarm.d.ts +22 -0
  15. package/dist/agents/swarm.d.ts.map +1 -0
  16. package/dist/agents/swarm.js +140 -0
  17. package/dist/agents/swarm.js.map +1 -0
  18. package/dist/agents/tools.d.ts +6 -0
  19. package/dist/agents/tools.d.ts.map +1 -0
  20. package/dist/agents/tools.js +71 -0
  21. package/dist/agents/tools.js.map +1 -0
  22. package/dist/agents/tools.test.d.ts +2 -0
  23. package/dist/agents/tools.test.d.ts.map +1 -0
  24. package/dist/agents/tools.test.js +70 -0
  25. package/dist/agents/tools.test.js.map +1 -0
  26. package/dist/bridge/config.d.ts +21 -0
  27. package/dist/bridge/config.d.ts.map +1 -0
  28. package/dist/bridge/config.js +35 -0
  29. package/dist/bridge/config.js.map +1 -0
  30. package/dist/bridge/config.test.d.ts +2 -0
  31. package/dist/bridge/config.test.d.ts.map +1 -0
  32. package/dist/bridge/config.test.js +79 -0
  33. package/dist/bridge/config.test.js.map +1 -0
  34. package/dist/bridge/server.d.ts +3 -0
  35. package/dist/bridge/server.d.ts.map +1 -0
  36. package/dist/bridge/server.js +316 -0
  37. package/dist/bridge/server.js.map +1 -0
  38. package/dist/context/compression.d.ts +27 -0
  39. package/dist/context/compression.d.ts.map +1 -0
  40. package/dist/context/compression.js +117 -0
  41. package/dist/context/compression.js.map +1 -0
  42. package/dist/context/compression.test.d.ts +2 -0
  43. package/dist/context/compression.test.d.ts.map +1 -0
  44. package/dist/context/compression.test.js +170 -0
  45. package/dist/context/compression.test.js.map +1 -0
  46. package/dist/context/converter.d.ts +11 -0
  47. package/dist/context/converter.d.ts.map +1 -0
  48. package/dist/context/converter.js +40 -0
  49. package/dist/context/converter.js.map +1 -0
  50. package/dist/context/converter.test.d.ts +2 -0
  51. package/dist/context/converter.test.d.ts.map +1 -0
  52. package/dist/context/converter.test.js +110 -0
  53. package/dist/context/converter.test.js.map +1 -0
  54. package/dist/context/run-context.d.ts +9 -0
  55. package/dist/context/run-context.d.ts.map +1 -0
  56. package/dist/context/run-context.js +14 -0
  57. package/dist/context/run-context.js.map +1 -0
  58. package/dist/context/run-context.test.d.ts +2 -0
  59. package/dist/context/run-context.test.d.ts.map +1 -0
  60. package/dist/context/run-context.test.js +34 -0
  61. package/dist/context/run-context.test.js.map +1 -0
  62. package/dist/context/system-prompt.d.ts +24 -0
  63. package/dist/context/system-prompt.d.ts.map +1 -0
  64. package/dist/context/system-prompt.js +69 -0
  65. package/dist/context/system-prompt.js.map +1 -0
  66. package/dist/context/system-prompt.test.d.ts +2 -0
  67. package/dist/context/system-prompt.test.d.ts.map +1 -0
  68. package/dist/context/system-prompt.test.js +134 -0
  69. package/dist/context/system-prompt.test.js.map +1 -0
  70. package/dist/errors.d.ts +24 -0
  71. package/dist/errors.d.ts.map +1 -0
  72. package/dist/errors.js +47 -0
  73. package/dist/errors.js.map +1 -0
  74. package/dist/errors.test.d.ts +2 -0
  75. package/dist/errors.test.d.ts.map +1 -0
  76. package/dist/errors.test.js +68 -0
  77. package/dist/errors.test.js.map +1 -0
  78. package/dist/factory.d.ts +58 -0
  79. package/dist/factory.d.ts.map +1 -0
  80. package/dist/factory.js +282 -0
  81. package/dist/factory.js.map +1 -0
  82. package/dist/factory.test.d.ts +2 -0
  83. package/dist/factory.test.d.ts.map +1 -0
  84. package/dist/factory.test.js +63 -0
  85. package/dist/factory.test.js.map +1 -0
  86. package/dist/fork.test.d.ts +2 -0
  87. package/dist/fork.test.d.ts.map +1 -0
  88. package/dist/fork.test.js +456 -0
  89. package/dist/fork.test.js.map +1 -0
  90. package/dist/index.d.ts +29 -0
  91. package/dist/index.d.ts.map +1 -0
  92. package/dist/index.js +32 -0
  93. package/dist/index.js.map +1 -0
  94. package/dist/mcp/client.d.ts +3 -0
  95. package/dist/mcp/client.d.ts.map +1 -0
  96. package/dist/mcp/client.js +75 -0
  97. package/dist/mcp/client.js.map +1 -0
  98. package/dist/mcp/schema-convert.d.ts +3 -0
  99. package/dist/mcp/schema-convert.d.ts.map +1 -0
  100. package/dist/mcp/schema-convert.js +73 -0
  101. package/dist/mcp/schema-convert.js.map +1 -0
  102. package/dist/mcp/schema-convert.test.d.ts +2 -0
  103. package/dist/mcp/schema-convert.test.d.ts.map +1 -0
  104. package/dist/mcp/schema-convert.test.js +95 -0
  105. package/dist/mcp/schema-convert.test.js.map +1 -0
  106. package/dist/mcp/tools.d.ts +14 -0
  107. package/dist/mcp/tools.d.ts.map +1 -0
  108. package/dist/mcp/tools.js +23 -0
  109. package/dist/mcp/tools.js.map +1 -0
  110. package/dist/mcp/tools.test.d.ts +2 -0
  111. package/dist/mcp/tools.test.d.ts.map +1 -0
  112. package/dist/mcp/tools.test.js +45 -0
  113. package/dist/mcp/tools.test.js.map +1 -0
  114. package/dist/memory/memory.d.ts +3 -0
  115. package/dist/memory/memory.d.ts.map +1 -0
  116. package/dist/memory/memory.js +130 -0
  117. package/dist/memory/memory.js.map +1 -0
  118. package/dist/memory/memory.test.d.ts +2 -0
  119. package/dist/memory/memory.test.d.ts.map +1 -0
  120. package/dist/memory/memory.test.js +94 -0
  121. package/dist/memory/memory.test.js.map +1 -0
  122. package/dist/middleware/hooks.d.ts +18 -0
  123. package/dist/middleware/hooks.d.ts.map +1 -0
  124. package/dist/middleware/hooks.js +71 -0
  125. package/dist/middleware/hooks.js.map +1 -0
  126. package/dist/middleware/hooks.test.d.ts +2 -0
  127. package/dist/middleware/hooks.test.d.ts.map +1 -0
  128. package/dist/middleware/hooks.test.js +172 -0
  129. package/dist/middleware/hooks.test.js.map +1 -0
  130. package/dist/middleware/index.d.ts +7 -0
  131. package/dist/middleware/index.d.ts.map +1 -0
  132. package/dist/middleware/index.js +5 -0
  133. package/dist/middleware/index.js.map +1 -0
  134. package/dist/middleware/permission-middleware.d.ts +11 -0
  135. package/dist/middleware/permission-middleware.d.ts.map +1 -0
  136. package/dist/middleware/permission-middleware.js +56 -0
  137. package/dist/middleware/permission-middleware.js.map +1 -0
  138. package/dist/middleware/permission-middleware.test.d.ts +2 -0
  139. package/dist/middleware/permission-middleware.test.d.ts.map +1 -0
  140. package/dist/middleware/permission-middleware.test.js +170 -0
  141. package/dist/middleware/permission-middleware.test.js.map +1 -0
  142. package/dist/middleware/permissions.d.ts +14 -0
  143. package/dist/middleware/permissions.d.ts.map +1 -0
  144. package/dist/middleware/permissions.js +118 -0
  145. package/dist/middleware/permissions.js.map +1 -0
  146. package/dist/middleware/permissions.test.d.ts +2 -0
  147. package/dist/middleware/permissions.test.d.ts.map +1 -0
  148. package/dist/middleware/permissions.test.js +187 -0
  149. package/dist/middleware/permissions.test.js.map +1 -0
  150. package/dist/middleware/pipeline.d.ts +13 -0
  151. package/dist/middleware/pipeline.d.ts.map +1 -0
  152. package/dist/middleware/pipeline.js +28 -0
  153. package/dist/middleware/pipeline.js.map +1 -0
  154. package/dist/middleware/pipeline.test.d.ts +2 -0
  155. package/dist/middleware/pipeline.test.d.ts.map +1 -0
  156. package/dist/middleware/pipeline.test.js +189 -0
  157. package/dist/middleware/pipeline.test.js.map +1 -0
  158. package/dist/observability/cost-tracker.d.ts +3 -0
  159. package/dist/observability/cost-tracker.d.ts.map +1 -0
  160. package/dist/observability/cost-tracker.js +26 -0
  161. package/dist/observability/cost-tracker.js.map +1 -0
  162. package/dist/observability/cost-tracker.test.d.ts +2 -0
  163. package/dist/observability/cost-tracker.test.d.ts.map +1 -0
  164. package/dist/observability/cost-tracker.test.js +49 -0
  165. package/dist/observability/cost-tracker.test.js.map +1 -0
  166. package/dist/observability/trace.d.ts +2 -0
  167. package/dist/observability/trace.d.ts.map +1 -0
  168. package/dist/observability/trace.js +5 -0
  169. package/dist/observability/trace.js.map +1 -0
  170. package/dist/session/session.d.ts +3 -0
  171. package/dist/session/session.d.ts.map +1 -0
  172. package/dist/session/session.js +62 -0
  173. package/dist/session/session.js.map +1 -0
  174. package/dist/session/session.test.d.ts +2 -0
  175. package/dist/session/session.test.d.ts.map +1 -0
  176. package/dist/session/session.test.js +84 -0
  177. package/dist/session/session.test.js.map +1 -0
  178. package/dist/skills.d.ts +14 -0
  179. package/dist/skills.d.ts.map +1 -0
  180. package/dist/skills.js +31 -0
  181. package/dist/skills.js.map +1 -0
  182. package/dist/skills.test.d.ts +2 -0
  183. package/dist/skills.test.d.ts.map +1 -0
  184. package/dist/skills.test.js +61 -0
  185. package/dist/skills.test.js.map +1 -0
  186. package/dist/tools/ask-user.d.ts +10 -0
  187. package/dist/tools/ask-user.d.ts.map +1 -0
  188. package/dist/tools/ask-user.js +27 -0
  189. package/dist/tools/ask-user.js.map +1 -0
  190. package/dist/tools/bash.d.ts +11 -0
  191. package/dist/tools/bash.d.ts.map +1 -0
  192. package/dist/tools/bash.js +54 -0
  193. package/dist/tools/bash.js.map +1 -0
  194. package/dist/tools/bash.test.d.ts +2 -0
  195. package/dist/tools/bash.test.d.ts.map +1 -0
  196. package/dist/tools/bash.test.js +63 -0
  197. package/dist/tools/bash.test.js.map +1 -0
  198. package/dist/tools/edit.d.ts +10 -0
  199. package/dist/tools/edit.d.ts.map +1 -0
  200. package/dist/tools/edit.js +65 -0
  201. package/dist/tools/edit.js.map +1 -0
  202. package/dist/tools/edit.test.d.ts +2 -0
  203. package/dist/tools/edit.test.d.ts.map +1 -0
  204. package/dist/tools/edit.test.js +60 -0
  205. package/dist/tools/edit.test.js.map +1 -0
  206. package/dist/tools/glob.d.ts +8 -0
  207. package/dist/tools/glob.d.ts.map +1 -0
  208. package/dist/tools/glob.js +43 -0
  209. package/dist/tools/glob.js.map +1 -0
  210. package/dist/tools/glob.test.d.ts +2 -0
  211. package/dist/tools/glob.test.d.ts.map +1 -0
  212. package/dist/tools/glob.test.js +54 -0
  213. package/dist/tools/glob.test.js.map +1 -0
  214. package/dist/tools/grep.d.ts +9 -0
  215. package/dist/tools/grep.d.ts.map +1 -0
  216. package/dist/tools/grep.js +74 -0
  217. package/dist/tools/grep.js.map +1 -0
  218. package/dist/tools/grep.test.d.ts +2 -0
  219. package/dist/tools/grep.test.d.ts.map +1 -0
  220. package/dist/tools/grep.test.js +48 -0
  221. package/dist/tools/grep.test.js.map +1 -0
  222. package/dist/tools/index.d.ts +25 -0
  223. package/dist/tools/index.d.ts.map +1 -0
  224. package/dist/tools/index.js +40 -0
  225. package/dist/tools/index.js.map +1 -0
  226. package/dist/tools/index.test.d.ts +2 -0
  227. package/dist/tools/index.test.d.ts.map +1 -0
  228. package/dist/tools/index.test.js +102 -0
  229. package/dist/tools/index.test.js.map +1 -0
  230. package/dist/tools/notebook-edit.d.ts +9 -0
  231. package/dist/tools/notebook-edit.d.ts.map +1 -0
  232. package/dist/tools/notebook-edit.js +55 -0
  233. package/dist/tools/notebook-edit.js.map +1 -0
  234. package/dist/tools/read.d.ts +9 -0
  235. package/dist/tools/read.d.ts.map +1 -0
  236. package/dist/tools/read.js +48 -0
  237. package/dist/tools/read.js.map +1 -0
  238. package/dist/tools/read.test.d.ts +2 -0
  239. package/dist/tools/read.test.d.ts.map +1 -0
  240. package/dist/tools/read.test.js +68 -0
  241. package/dist/tools/read.test.js.map +1 -0
  242. package/dist/tools/util.d.ts +19 -0
  243. package/dist/tools/util.d.ts.map +1 -0
  244. package/dist/tools/util.js +44 -0
  245. package/dist/tools/util.js.map +1 -0
  246. package/dist/tools/util.test.d.ts +2 -0
  247. package/dist/tools/util.test.d.ts.map +1 -0
  248. package/dist/tools/util.test.js +75 -0
  249. package/dist/tools/util.test.js.map +1 -0
  250. package/dist/tools/web-fetch.d.ts +7 -0
  251. package/dist/tools/web-fetch.d.ts.map +1 -0
  252. package/dist/tools/web-fetch.js +35 -0
  253. package/dist/tools/web-fetch.js.map +1 -0
  254. package/dist/tools/web-search.d.ts +7 -0
  255. package/dist/tools/web-search.d.ts.map +1 -0
  256. package/dist/tools/web-search.js +20 -0
  257. package/dist/tools/web-search.js.map +1 -0
  258. package/dist/tools/write.d.ts +8 -0
  259. package/dist/tools/write.d.ts.map +1 -0
  260. package/dist/tools/write.js +33 -0
  261. package/dist/tools/write.js.map +1 -0
  262. package/dist/tools/write.test.d.ts +2 -0
  263. package/dist/tools/write.test.d.ts.map +1 -0
  264. package/dist/tools/write.test.js +49 -0
  265. package/dist/tools/write.test.js.map +1 -0
  266. package/dist/types.d.ts +257 -0
  267. package/dist/types.d.ts.map +1 -0
  268. package/dist/types.js +2 -0
  269. package/dist/types.js.map +1 -0
  270. package/dist/types.test.d.ts +2 -0
  271. package/dist/types.test.d.ts.map +1 -0
  272. package/dist/types.test.js +69 -0
  273. package/dist/types.test.js.map +1 -0
  274. package/package.json +51 -0
@@ -0,0 +1,118 @@
1
+ const MUTATION_CAPABILITIES = ['fs:write', 'process:spawn', 'network:egress', 'git:mutate', 'mcp:call'];
2
+ const SOURCE_PRIORITY = { user: 3, project: 2, session: 1 };
3
+ /**
4
+ * Simple glob match supporting only trailing `*` wildcard patterns.
5
+ * e.g. "git *" matches "git status", "git push origin main"
6
+ */
7
+ function globMatch(pattern, value) {
8
+ if (pattern === '*')
9
+ return true;
10
+ if (!pattern.includes('*'))
11
+ return pattern === value;
12
+ // Convert glob to regex: escape special chars, replace * with .*
13
+ const escaped = pattern.replace(/[.+^${}()|[\]\\]/g, '\\$&').replace(/\*/g, '.*');
14
+ return new RegExp(`^${escaped}$`).test(value);
15
+ }
16
+ /**
17
+ * Parse mcp__<server>__<tool> naming convention.
18
+ * Returns null if the name doesn't follow this pattern.
19
+ */
20
+ function parseMcpToolName(toolName) {
21
+ const match = toolName.match(/^mcp__([^_]+(?:_[^_]+)*)__(.+)$/);
22
+ if (!match)
23
+ return null;
24
+ return { server: match[1], tool: match[2] };
25
+ }
26
+ /**
27
+ * Get specificity score for a matching rule.
28
+ * tool+pattern(6) > tool(5) > mcp+tool(4) > mcp(3) > capability(2) > wildcard(1)
29
+ */
30
+ function getSpecificity(rule) {
31
+ const target = rule.target;
32
+ switch (target.type) {
33
+ case 'tool':
34
+ return target.pattern ? 6 : 5;
35
+ case 'mcp':
36
+ return target.tool ? 4 : 3;
37
+ case 'capability':
38
+ return 2;
39
+ case 'all':
40
+ return 1;
41
+ }
42
+ }
43
+ /**
44
+ * Check if a rule matches a tool invocation.
45
+ */
46
+ export function matchRule(rule, toolName, args, capabilities) {
47
+ const target = rule.target;
48
+ switch (target.type) {
49
+ case 'tool': {
50
+ if (target.name !== toolName)
51
+ return false;
52
+ if (target.pattern) {
53
+ const command = args?.command;
54
+ if (typeof command !== 'string')
55
+ return false;
56
+ return globMatch(target.pattern, command);
57
+ }
58
+ return true;
59
+ }
60
+ case 'capability':
61
+ return capabilities.includes(target.capability);
62
+ case 'mcp': {
63
+ const parsed = parseMcpToolName(toolName);
64
+ if (!parsed)
65
+ return false;
66
+ if (parsed.server !== target.server)
67
+ return false;
68
+ if (target.tool && parsed.tool !== target.tool)
69
+ return false;
70
+ return true;
71
+ }
72
+ case 'all':
73
+ return true;
74
+ }
75
+ }
76
+ /**
77
+ * Find the best matching rule by combined score (specificity * 10 + source_priority).
78
+ */
79
+ export function findMatchingRule(rules, toolName, args, capabilities) {
80
+ let bestRule = null;
81
+ let bestScore = -1;
82
+ for (const rule of rules) {
83
+ if (!matchRule(rule, toolName, args, capabilities))
84
+ continue;
85
+ const score = getSpecificity(rule) * 10 + (SOURCE_PRIORITY[rule.source] ?? 0);
86
+ if (score > bestScore) {
87
+ bestScore = score;
88
+ bestRule = rule;
89
+ }
90
+ }
91
+ return bestRule;
92
+ }
93
+ /**
94
+ * Evaluate permission result based on mode, rules, and capabilities.
95
+ */
96
+ export function evaluatePermission(mode, rules, toolName, args, capabilities) {
97
+ if (mode === 'allowAll') {
98
+ return { behavior: 'allow' };
99
+ }
100
+ const matchedRule = findMatchingRule(rules, toolName, args, capabilities);
101
+ if (matchedRule) {
102
+ if (matchedRule.behavior === 'allow') {
103
+ return { behavior: 'allow' };
104
+ }
105
+ return { behavior: 'deny', reason: `Denied by ${matchedRule.source} rule` };
106
+ }
107
+ if (mode === 'rulesOnly') {
108
+ return { behavior: 'deny', reason: 'No matching rule found (rulesOnly mode)' };
109
+ }
110
+ // Default mode: allow read-only, ask for mutations
111
+ const hasMutation = capabilities.some(cap => MUTATION_CAPABILITIES.includes(cap));
112
+ // Allow tools with no capabilities (e.g., AskUser) or read-only tools
113
+ if (!hasMutation) {
114
+ return { behavior: 'allow' };
115
+ }
116
+ return { behavior: 'ask', prompt: `Tool "${toolName}" requires permission` };
117
+ }
118
+ //# sourceMappingURL=permissions.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/middleware/permissions.ts"],"names":[],"mappings":"AAEA,MAAM,qBAAqB,GAAiB,CAAC,UAAU,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;AAEtH,MAAM,eAAe,GAA2B,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAEpF;;;GAGG;AACH,SAAS,SAAS,CAAC,OAAe,EAAE,KAAa;IAC/C,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,KAAK,KAAK,CAAC;IACrD,iEAAiE;IACjE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClF,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,IAAoB;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,KAAK,KAAK;YACR,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,KAAK,YAAY;YACf,OAAO,CAAC,CAAC;QACX,KAAK,KAAK;YACR,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CACvB,IAAoB,EACpB,QAAgB,EAChB,IAAa,EACb,YAA0B;IAE1B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC3C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAI,IAA4C,EAAE,OAAO,CAAC;gBACvE,IAAI,OAAO,OAAO,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBAC9C,OAAO,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,YAAY;YACf,OAAO,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAClD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC1B,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAClD,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,KAAK;YACR,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAuB,EACvB,QAAgB,EAChB,IAAa,EACb,YAA0B;IAE1B,IAAI,QAAQ,GAA0B,IAAI,CAAC;IAC3C,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC;IAEnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC;YAAE,SAAS;QAC7D,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9E,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;YACtB,SAAS,GAAG,KAAK,CAAC;YAClB,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAoB,EACpB,KAAuB,EACvB,QAAgB,EAChB,IAAa,EACb,YAA0B;IAE1B,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IAED,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;IAE1E,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,WAAW,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACrC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC/B,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,WAAW,CAAC,MAAM,OAAO,EAAE,CAAC;IAC9E,CAAC;IAED,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC;IACjF,CAAC;IAED,mDAAmD;IACnD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,qBAAqB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAClF,sEAAsE;IACtE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,QAAQ,uBAAuB,EAAE,CAAC;AAC/E,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=permissions.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"permissions.test.d.ts","sourceRoot":"","sources":["../../src/middleware/permissions.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,187 @@
1
+ import { describe, it, expect } from 'vitest';
2
+ import { matchRule, findMatchingRule, evaluatePermission } from './permissions.js';
3
+ describe('matchRule', () => {
4
+ it('matches exact tool name', () => {
5
+ const rule = { target: { type: 'tool', name: 'ReadFile' }, behavior: 'allow', source: 'user' };
6
+ expect(matchRule(rule, 'ReadFile', {}, [])).toBe(true);
7
+ expect(matchRule(rule, 'WriteFile', {}, [])).toBe(false);
8
+ });
9
+ it('matches tool name with glob pattern on args.command', () => {
10
+ const rule = { target: { type: 'tool', name: 'Bash', pattern: 'git *' }, behavior: 'allow', source: 'user' };
11
+ expect(matchRule(rule, 'Bash', { command: 'git status' }, [])).toBe(true);
12
+ expect(matchRule(rule, 'Bash', { command: 'git push origin main' }, [])).toBe(true);
13
+ expect(matchRule(rule, 'Bash', { command: 'rm -rf /' }, [])).toBe(false);
14
+ // tool name must also match
15
+ expect(matchRule(rule, 'Other', { command: 'git status' }, [])).toBe(false);
16
+ });
17
+ it('matches tool name with pattern but no command in args', () => {
18
+ const rule = { target: { type: 'tool', name: 'Bash', pattern: 'git *' }, behavior: 'allow', source: 'user' };
19
+ expect(matchRule(rule, 'Bash', {}, [])).toBe(false);
20
+ expect(matchRule(rule, 'Bash', undefined, [])).toBe(false);
21
+ });
22
+ it('matches capability', () => {
23
+ const rule = { target: { type: 'capability', capability: 'fs:read' }, behavior: 'allow', source: 'user' };
24
+ expect(matchRule(rule, 'ReadFile', {}, ['fs:read'])).toBe(true);
25
+ expect(matchRule(rule, 'ReadFile', {}, ['fs:write'])).toBe(false);
26
+ expect(matchRule(rule, 'ReadFile', {}, [])).toBe(false);
27
+ });
28
+ it('matches mcp server without tool', () => {
29
+ const rule = { target: { type: 'mcp', server: 'myserver' }, behavior: 'allow', source: 'user' };
30
+ expect(matchRule(rule, 'mcp__myserver__sometool', {}, [])).toBe(true);
31
+ expect(matchRule(rule, 'mcp__other__sometool', {}, [])).toBe(false);
32
+ expect(matchRule(rule, 'ReadFile', {}, [])).toBe(false);
33
+ });
34
+ it('matches mcp server with specific tool', () => {
35
+ const rule = { target: { type: 'mcp', server: 'myserver', tool: 'list' }, behavior: 'allow', source: 'user' };
36
+ expect(matchRule(rule, 'mcp__myserver__list', {}, [])).toBe(true);
37
+ expect(matchRule(rule, 'mcp__myserver__other', {}, [])).toBe(false);
38
+ });
39
+ it('matches wildcard (all)', () => {
40
+ const rule = { target: { type: 'all' }, behavior: 'allow', source: 'user' };
41
+ expect(matchRule(rule, 'anything', {}, [])).toBe(true);
42
+ expect(matchRule(rule, 'ReadFile', {}, ['fs:read'])).toBe(true);
43
+ });
44
+ });
45
+ describe('findMatchingRule', () => {
46
+ it('returns null when no rules match', () => {
47
+ const rules = [
48
+ { target: { type: 'tool', name: 'Other' }, behavior: 'allow', source: 'user' },
49
+ ];
50
+ expect(findMatchingRule(rules, 'ReadFile', {}, [])).toBeNull();
51
+ });
52
+ it('prefers tool+pattern (6) over tool (5)', () => {
53
+ const rules = [
54
+ { target: { type: 'tool', name: 'Bash' }, behavior: 'deny', source: 'user' },
55
+ { target: { type: 'tool', name: 'Bash', pattern: 'git *' }, behavior: 'allow', source: 'user' },
56
+ ];
57
+ const result = findMatchingRule(rules, 'Bash', { command: 'git status' }, []);
58
+ expect(result).not.toBeNull();
59
+ expect(result.behavior).toBe('allow');
60
+ });
61
+ it('prefers tool (5) over mcp+tool (4)', () => {
62
+ const rules = [
63
+ { target: { type: 'mcp', server: 'myserver', tool: 'list' }, behavior: 'deny', source: 'user' },
64
+ { target: { type: 'tool', name: 'mcp__myserver__list' }, behavior: 'allow', source: 'user' },
65
+ ];
66
+ const result = findMatchingRule(rules, 'mcp__myserver__list', {}, []);
67
+ expect(result).not.toBeNull();
68
+ expect(result.behavior).toBe('allow');
69
+ });
70
+ it('prefers mcp+tool (4) over mcp (3)', () => {
71
+ const rules = [
72
+ { target: { type: 'mcp', server: 'myserver' }, behavior: 'deny', source: 'user' },
73
+ { target: { type: 'mcp', server: 'myserver', tool: 'list' }, behavior: 'allow', source: 'user' },
74
+ ];
75
+ const result = findMatchingRule(rules, 'mcp__myserver__list', {}, []);
76
+ expect(result).not.toBeNull();
77
+ expect(result.behavior).toBe('allow');
78
+ });
79
+ it('prefers mcp (3) over capability (2)', () => {
80
+ const rules = [
81
+ { target: { type: 'capability', capability: 'mcp:call' }, behavior: 'deny', source: 'user' },
82
+ { target: { type: 'mcp', server: 'myserver' }, behavior: 'allow', source: 'user' },
83
+ ];
84
+ const result = findMatchingRule(rules, 'mcp__myserver__list', {}, ['mcp:call']);
85
+ expect(result).not.toBeNull();
86
+ expect(result.behavior).toBe('allow');
87
+ });
88
+ it('prefers capability (2) over wildcard (1)', () => {
89
+ const rules = [
90
+ { target: { type: 'all' }, behavior: 'deny', source: 'user' },
91
+ { target: { type: 'capability', capability: 'fs:read' }, behavior: 'allow', source: 'user' },
92
+ ];
93
+ const result = findMatchingRule(rules, 'ReadFile', {}, ['fs:read']);
94
+ expect(result).not.toBeNull();
95
+ expect(result.behavior).toBe('allow');
96
+ });
97
+ it('uses source priority as tiebreaker: user (3) > session (2) > project (1)', () => {
98
+ const rules = [
99
+ { target: { type: 'tool', name: 'ReadFile' }, behavior: 'deny', source: 'project' },
100
+ { target: { type: 'tool', name: 'ReadFile' }, behavior: 'allow', source: 'user' },
101
+ ];
102
+ const result = findMatchingRule(rules, 'ReadFile', {}, []);
103
+ expect(result).not.toBeNull();
104
+ expect(result.behavior).toBe('allow');
105
+ expect(result.source).toBe('user');
106
+ });
107
+ it('project source beats session source', () => {
108
+ const rules = [
109
+ { target: { type: 'tool', name: 'ReadFile' }, behavior: 'deny', source: 'project' },
110
+ { target: { type: 'tool', name: 'ReadFile' }, behavior: 'allow', source: 'session' },
111
+ ];
112
+ const result = findMatchingRule(rules, 'ReadFile', {}, []);
113
+ expect(result.source).toBe('project');
114
+ });
115
+ it('combined score: specificity * 10 + source_priority', () => {
116
+ // A wildcard from user (score: 1*10+3=13) should lose to a tool match from project (score: 5*10+1=51)
117
+ const rules = [
118
+ { target: { type: 'all' }, behavior: 'deny', source: 'user' },
119
+ { target: { type: 'tool', name: 'ReadFile' }, behavior: 'allow', source: 'project' },
120
+ ];
121
+ const result = findMatchingRule(rules, 'ReadFile', {}, []);
122
+ expect(result.behavior).toBe('allow');
123
+ });
124
+ });
125
+ describe('evaluatePermission', () => {
126
+ const MUTATION_CAPS = ['fs:write', 'process:spawn', 'network:egress', 'git:mutate', 'mcp:call'];
127
+ const READ_ONLY_CAPS = ['fs:read'];
128
+ it('allowAll mode always returns allow', () => {
129
+ const result = evaluatePermission('allowAll', [], 'anything', {}, []);
130
+ expect(result).toEqual({ behavior: 'allow' });
131
+ });
132
+ it('rulesOnly mode returns deny when no rules match', () => {
133
+ const result = evaluatePermission('rulesOnly', [], 'ReadFile', {}, ['fs:read']);
134
+ expect(result).toEqual({ behavior: 'deny', reason: 'No matching rule found (rulesOnly mode)' });
135
+ });
136
+ it('rulesOnly mode returns matched rule behavior when rule matches', () => {
137
+ const rules = [
138
+ { target: { type: 'tool', name: 'ReadFile' }, behavior: 'allow', source: 'user' },
139
+ ];
140
+ const result = evaluatePermission('rulesOnly', rules, 'ReadFile', {}, ['fs:read']);
141
+ expect(result).toEqual({ behavior: 'allow' });
142
+ });
143
+ it('rulesOnly mode returns deny with reason when matched rule denies', () => {
144
+ const rules = [
145
+ { target: { type: 'tool', name: 'ReadFile' }, behavior: 'deny', source: 'user' },
146
+ ];
147
+ const result = evaluatePermission('rulesOnly', rules, 'ReadFile', {}, ['fs:read']);
148
+ expect(result.behavior).toBe('deny');
149
+ });
150
+ it('default mode returns allow for read-only capabilities when no rules match', () => {
151
+ const result = evaluatePermission('default', [], 'ReadFile', {}, READ_ONLY_CAPS);
152
+ expect(result).toEqual({ behavior: 'allow' });
153
+ });
154
+ it('default mode returns ask for mutation capabilities when no rules match', () => {
155
+ for (const cap of MUTATION_CAPS) {
156
+ const result = evaluatePermission('default', [], 'WriteFile', {}, [cap]);
157
+ expect(result.behavior).toBe('ask');
158
+ }
159
+ });
160
+ it('default mode returns allow for empty capabilities (unknown tool)', () => {
161
+ const result = evaluatePermission('default', [], 'UnknownTool', {}, []);
162
+ expect(result.behavior).toBe('allow');
163
+ });
164
+ it('default mode returns allow when only fs:read capability and no mutation caps', () => {
165
+ const result = evaluatePermission('default', [], 'ReadFile', {}, ['fs:read']);
166
+ expect(result).toEqual({ behavior: 'allow' });
167
+ });
168
+ it('default mode returns ask when tool has both read and mutation capabilities', () => {
169
+ const result = evaluatePermission('default', [], 'ReadWrite', {}, ['fs:read', 'fs:write']);
170
+ expect(result.behavior).toBe('ask');
171
+ });
172
+ it('default mode with matching allow rule returns allow even for mutation', () => {
173
+ const rules = [
174
+ { target: { type: 'tool', name: 'WriteFile' }, behavior: 'allow', source: 'user' },
175
+ ];
176
+ const result = evaluatePermission('default', rules, 'WriteFile', {}, ['fs:write']);
177
+ expect(result).toEqual({ behavior: 'allow' });
178
+ });
179
+ it('default mode with matching deny rule returns deny', () => {
180
+ const rules = [
181
+ { target: { type: 'tool', name: 'ReadFile' }, behavior: 'deny', source: 'user' },
182
+ ];
183
+ const result = evaluatePermission('default', rules, 'ReadFile', {}, ['fs:read']);
184
+ expect(result.behavior).toBe('deny');
185
+ });
186
+ });
187
+ //# sourceMappingURL=permissions.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"permissions.test.js","sourceRoot":"","sources":["../../src/middleware/permissions.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAGnF,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,IAAI,GAAmB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC/G,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,IAAI,GAAmB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC7H,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzE,4BAA4B;QAC5B,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,IAAI,GAAmB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC7H,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,IAAI,GAAmB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC1H,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,IAAI,GAAmB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAChH,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,yBAAyB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpE,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,IAAI,GAAmB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC9H,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,qBAAqB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,IAAI,GAAmB,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5F,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,KAAK,GAAqB;YAC9B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE;SAC/E,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,KAAK,GAAqB;YAC9B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;YAC5E,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE;SAChG,CAAC;QACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,KAAK,GAAqB;YAC9B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;YAC/F,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE;SAC7F,CAAC;QACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,KAAK,GAAqB;YAC9B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;YACjF,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE;SACjG,CAAC;QACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,KAAK,GAAqB;YAC9B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;YAC5F,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE;SACnF,CAAC;QACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAChF,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,KAAK,GAAqB;YAC9B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;YAC7D,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE;SAC7F,CAAC;QACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,KAAK,GAAqB;YAC9B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE;YACnF,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE;SAClF,CAAC;QACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,CAAC,MAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,KAAK,GAAqB;YAC9B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE;YACnF,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE;SACrF,CAAC;QACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,sGAAsG;QACtG,MAAM,KAAK,GAAqB;YAC9B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;YAC7D,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE;SACrF,CAAC;QACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,MAAM,aAAa,GAAiB,CAAC,UAAU,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IAC9G,MAAM,cAAc,GAAiB,CAAC,SAAS,CAAC,CAAC;IAEjD,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QAChF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,KAAK,GAAqB;YAC9B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE;SAClF,CAAC;QACF,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACnF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,KAAK,GAAqB;YAC9B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;SACjF,CAAC;QACF,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACnF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC;QACjF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACzE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9E,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;QAC3F,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,KAAK,GAAqB;YAC9B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE;SACnF,CAAC;QACF,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QACnF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,KAAK,GAAqB;YAC9B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;SACjF,CAAC;QACF,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -0,0 +1,13 @@
1
+ import type { BeforeToolCallContext, BeforeToolCallResult, AfterToolCallContext, AfterToolCallResult } from '@mariozechner/pi-agent-core';
2
+ import type { HookHandler, RunContext } from '../types.js';
3
+ export interface PipelineConfig {
4
+ hooks: HookHandler[];
5
+ permissionGate: (context: BeforeToolCallContext, signal?: AbortSignal) => Promise<BeforeToolCallResult | undefined>;
6
+ runContext: RunContext;
7
+ }
8
+ export interface Pipeline {
9
+ beforeToolCall: (context: BeforeToolCallContext, signal?: AbortSignal) => Promise<BeforeToolCallResult | undefined>;
10
+ afterToolCall: (context: AfterToolCallContext, signal?: AbortSignal) => Promise<AfterToolCallResult | undefined>;
11
+ }
12
+ export declare function composePipeline(config: PipelineConfig): Pipeline;
13
+ //# sourceMappingURL=pipeline.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/middleware/pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG3D,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,cAAc,EAAE,CAAC,OAAO,EAAE,qBAAqB,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;IACpH,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,MAAM,WAAW,QAAQ;IACvB,cAAc,EAAE,CAAC,OAAO,EAAE,qBAAqB,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;IACpH,aAAa,EAAE,CAAC,OAAO,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;CAClH;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CAiChE"}
@@ -0,0 +1,28 @@
1
+ import { runPreToolUseHooks, runPostToolUseHooks } from './hooks.js';
2
+ export function composePipeline(config) {
3
+ const { hooks, permissionGate, runContext } = config;
4
+ return {
5
+ async beforeToolCall(context, signal) {
6
+ const toolName = context.toolCall.name;
7
+ // 1. PreToolUse hooks run first (can modify args, CANNOT veto)
8
+ const updatedArgs = await runPreToolUseHooks(hooks, toolName, context.args, runContext);
9
+ // Create updated context with modified args
10
+ const updatedContext = updatedArgs !== context.args
11
+ ? { ...context, args: updatedArgs }
12
+ : context;
13
+ // 2. Permission gate runs second (CAN veto)
14
+ return permissionGate(updatedContext, signal);
15
+ },
16
+ async afterToolCall(context, _signal) {
17
+ const toolName = context.toolCall.name;
18
+ // Run PostToolUse hooks (can modify result)
19
+ const updatedResult = await runPostToolUseHooks(hooks, toolName, context.result, runContext);
20
+ // If result was modified, return the override
21
+ if (updatedResult !== context.result) {
22
+ return { content: updatedResult.content, details: updatedResult.details };
23
+ }
24
+ return undefined;
25
+ },
26
+ };
27
+ }
28
+ //# sourceMappingURL=pipeline.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"pipeline.js","sourceRoot":"","sources":["../../src/middleware/pipeline.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAarE,MAAM,UAAU,eAAe,CAAC,MAAsB;IACpD,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAErD,OAAO;QACL,KAAK,CAAC,cAAc,CAAC,OAA8B,EAAE,MAAoB;YACvE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAEvC,+DAA+D;YAC/D,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAExF,4CAA4C;YAC5C,MAAM,cAAc,GAA0B,WAAW,KAAK,OAAO,CAAC,IAAI;gBACxE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE;gBACnC,CAAC,CAAC,OAAO,CAAC;YAEZ,4CAA4C;YAC5C,OAAO,cAAc,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,OAA6B,EAAE,OAAqB;YACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAEvC,4CAA4C;YAC5C,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAE7F,8CAA8C;YAC9C,IAAI,aAAa,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;gBACrC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,CAAC;YAC5E,CAAC;YAED,OAAO,SAAS,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=pipeline.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"pipeline.test.d.ts","sourceRoot":"","sources":["../../src/middleware/pipeline.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,189 @@
1
+ import { describe, it, expect, vi } from 'vitest';
2
+ import { composePipeline } from './pipeline.js';
3
+ import { createRunContext } from '../context/run-context.js';
4
+ function makeRunContext() {
5
+ return createRunContext({ cwd: '/tmp' });
6
+ }
7
+ function makeBeforeContext(toolName, args = {}) {
8
+ return {
9
+ assistantMessage: {
10
+ role: 'assistant',
11
+ content: [],
12
+ api: 'openai-completions',
13
+ provider: 'openai',
14
+ model: 'gpt-4',
15
+ usage: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, totalTokens: 0, cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 } },
16
+ stopReason: 'stop',
17
+ timestamp: Date.now(),
18
+ },
19
+ toolCall: { type: 'toolCall', id: 'tc-1', name: toolName, arguments: args },
20
+ args,
21
+ context: { systemPrompt: '', messages: [], tools: [] },
22
+ };
23
+ }
24
+ function makeAfterContext(toolName, args = {}) {
25
+ return {
26
+ assistantMessage: {
27
+ role: 'assistant',
28
+ content: [],
29
+ api: 'openai-completions',
30
+ provider: 'openai',
31
+ model: 'gpt-4',
32
+ usage: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, totalTokens: 0, cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 } },
33
+ stopReason: 'stop',
34
+ timestamp: Date.now(),
35
+ },
36
+ toolCall: { type: 'toolCall', id: 'tc-1', name: toolName, arguments: args },
37
+ args,
38
+ result: { content: [{ type: 'text', text: 'original' }], details: {} },
39
+ isError: false,
40
+ context: { systemPrompt: '', messages: [], tools: [] },
41
+ };
42
+ }
43
+ describe('composePipeline', () => {
44
+ it('returns a pipeline with beforeToolCall and afterToolCall', () => {
45
+ const pipeline = composePipeline({
46
+ hooks: [],
47
+ permissionGate: async () => undefined,
48
+ runContext: makeRunContext(),
49
+ });
50
+ expect(pipeline.beforeToolCall).toBeTypeOf('function');
51
+ expect(pipeline.afterToolCall).toBeTypeOf('function');
52
+ });
53
+ describe('beforeToolCall', () => {
54
+ it('runs PreToolUse hooks before permission gate', async () => {
55
+ const order = [];
56
+ const hooks = [
57
+ {
58
+ event: 'PreToolUse',
59
+ handler: async () => { order.push('hook'); return undefined; },
60
+ },
61
+ ];
62
+ const permissionGate = vi.fn().mockImplementation(async () => {
63
+ order.push('permission');
64
+ return undefined;
65
+ });
66
+ const pipeline = composePipeline({ hooks, permissionGate, runContext: makeRunContext() });
67
+ await pipeline.beforeToolCall(makeBeforeContext('ReadFile'));
68
+ expect(order).toEqual(['hook', 'permission']);
69
+ });
70
+ it('PreToolUse hooks can modify args passed to permission gate', async () => {
71
+ const hooks = [
72
+ {
73
+ event: 'PreToolUse',
74
+ handler: async () => ({ updatedArgs: { command: 'git status' } }),
75
+ },
76
+ ];
77
+ const permissionGate = vi.fn().mockResolvedValue(undefined);
78
+ const pipeline = composePipeline({ hooks, permissionGate, runContext: makeRunContext() });
79
+ const ctx = makeBeforeContext('Bash', { command: 'rm -rf /' });
80
+ await pipeline.beforeToolCall(ctx);
81
+ // The context args should be updated before permission gate sees it
82
+ expect(permissionGate).toHaveBeenCalledWith(expect.objectContaining({ args: { command: 'git status' } }), undefined);
83
+ });
84
+ it('permission gate can veto (block) the tool call', async () => {
85
+ const permissionGate = vi.fn().mockResolvedValue({ block: true, reason: 'denied' });
86
+ const pipeline = composePipeline({
87
+ hooks: [],
88
+ permissionGate,
89
+ runContext: makeRunContext(),
90
+ });
91
+ const result = await pipeline.beforeToolCall(makeBeforeContext('WriteFile'));
92
+ expect(result).toEqual({ block: true, reason: 'denied' });
93
+ });
94
+ it('returns undefined (allow) when no hooks and permission allows', async () => {
95
+ const pipeline = composePipeline({
96
+ hooks: [],
97
+ permissionGate: async () => undefined,
98
+ runContext: makeRunContext(),
99
+ });
100
+ const result = await pipeline.beforeToolCall(makeBeforeContext('ReadFile'));
101
+ expect(result).toBeUndefined();
102
+ });
103
+ it('PreToolUse hooks CANNOT veto (block is ignored)', async () => {
104
+ // PreToolUse hooks can only modify args, not block
105
+ const hooks = [
106
+ {
107
+ event: 'PreToolUse',
108
+ handler: async () => ({ updatedArgs: { modified: true } }),
109
+ },
110
+ ];
111
+ const pipeline = composePipeline({
112
+ hooks,
113
+ permissionGate: async () => undefined,
114
+ runContext: makeRunContext(),
115
+ });
116
+ const result = await pipeline.beforeToolCall(makeBeforeContext('ReadFile'));
117
+ expect(result).toBeUndefined();
118
+ });
119
+ });
120
+ describe('afterToolCall', () => {
121
+ it('runs PostToolUse hooks and returns modified result', async () => {
122
+ const hooks = [
123
+ {
124
+ event: 'PostToolUse',
125
+ handler: async () => ({
126
+ updatedResult: { content: [{ type: 'text', text: 'modified' }], details: {} },
127
+ }),
128
+ },
129
+ ];
130
+ const pipeline = composePipeline({
131
+ hooks,
132
+ permissionGate: async () => undefined,
133
+ runContext: makeRunContext(),
134
+ });
135
+ const result = await pipeline.afterToolCall(makeAfterContext('ReadFile'));
136
+ expect(result).toEqual({ content: [{ type: 'text', text: 'modified' }], details: {} });
137
+ });
138
+ it('returns undefined when no PostToolUse hooks modify the result', async () => {
139
+ const pipeline = composePipeline({
140
+ hooks: [],
141
+ permissionGate: async () => undefined,
142
+ runContext: makeRunContext(),
143
+ });
144
+ const result = await pipeline.afterToolCall(makeAfterContext('ReadFile'));
145
+ expect(result).toBeUndefined();
146
+ });
147
+ it('chains PostToolUse hooks', async () => {
148
+ const hooks = [
149
+ {
150
+ event: 'PostToolUse',
151
+ handler: async () => ({
152
+ updatedResult: { content: [{ type: 'text', text: 'step1' }], details: {} },
153
+ }),
154
+ },
155
+ {
156
+ event: 'PostToolUse',
157
+ handler: async () => ({
158
+ updatedResult: { content: [{ type: 'text', text: 'step2' }], details: {} },
159
+ }),
160
+ },
161
+ ];
162
+ const pipeline = composePipeline({
163
+ hooks,
164
+ permissionGate: async () => undefined,
165
+ runContext: makeRunContext(),
166
+ });
167
+ const result = await pipeline.afterToolCall(makeAfterContext('ReadFile'));
168
+ expect(result).toEqual({ content: [{ type: 'text', text: 'step2' }], details: {} });
169
+ });
170
+ });
171
+ it('passes runContext to hooks', async () => {
172
+ const runContext = makeRunContext();
173
+ let capturedCtx;
174
+ const hooks = [
175
+ {
176
+ event: 'PreToolUse',
177
+ handler: async (ctx) => { capturedCtx = ctx.runContext; return undefined; },
178
+ },
179
+ ];
180
+ const pipeline = composePipeline({
181
+ hooks,
182
+ permissionGate: async () => undefined,
183
+ runContext,
184
+ });
185
+ await pipeline.beforeToolCall(makeBeforeContext('ReadFile'));
186
+ expect(capturedCtx).toBe(runContext);
187
+ });
188
+ });
189
+ //# sourceMappingURL=pipeline.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"pipeline.test.js","sourceRoot":"","sources":["../../src/middleware/pipeline.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,SAAS,cAAc;IACrB,OAAO,gBAAgB,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,OAA4B,EAAE;IACzE,OAAO;QACL,gBAAgB,EAAE;YAChB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,EAAE;YACX,GAAG,EAAE,oBAAoB;YACzB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACjJ,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB;QACD,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;QAC3E,IAAI;QACJ,OAAO,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;KACvD,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB,EAAE,OAA4B,EAAE;IACxE,OAAO;QACL,gBAAgB,EAAE;YAChB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,EAAE;YACX,GAAG,EAAE,oBAAoB;YACzB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,OAAO;YACd,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACjJ,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB;QACD,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;QAC3E,IAAI;QACJ,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;QACtE,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;KACvD,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,QAAQ,GAAG,eAAe,CAAC;YAC/B,KAAK,EAAE,EAAE;YACT,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;YACrC,UAAU,EAAE,cAAc,EAAE;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAkB;gBAC3B;oBACE,KAAK,EAAE,YAAY;oBACnB,OAAO,EAAE,KAAK,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC;iBAC/D;aACF,CAAC;YACF,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE;gBAC3D,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACzB,OAAO,SAAS,CAAC;YACnB,CAAC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;YAC1F,MAAM,QAAQ,CAAC,cAAc,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;YAC1E,MAAM,KAAK,GAAkB;gBAC3B;oBACE,KAAK,EAAE,YAAY;oBACnB,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,CAAC;iBAClE;aACF,CAAC;YACF,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAE5D,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;YAC1F,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;YAC/D,MAAM,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;YAEnC,oEAAoE;YACpE,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACzC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,CAAC,EAC5D,SAAS,CACV,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAEpF,MAAM,QAAQ,GAAG,eAAe,CAAC;gBAC/B,KAAK,EAAE,EAAE;gBACT,cAAc;gBACd,UAAU,EAAE,cAAc,EAAE;aAC7B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC;YAC7E,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;YAC7E,MAAM,QAAQ,GAAG,eAAe,CAAC;gBAC/B,KAAK,EAAE,EAAE;gBACT,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;gBACrC,UAAU,EAAE,cAAc,EAAE;aAC7B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;YAC5E,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,mDAAmD;YACnD,MAAM,KAAK,GAAkB;gBAC3B;oBACE,KAAK,EAAE,YAAY;oBACnB,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;iBAC3D;aACF,CAAC;YACF,MAAM,QAAQ,GAAG,eAAe,CAAC;gBAC/B,KAAK;gBACL,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;gBACrC,UAAU,EAAE,cAAc,EAAE;aAC7B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;YAC5E,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,KAAK,GAAkB;gBAC3B;oBACE,KAAK,EAAE,aAAa;oBACpB,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;wBACpB,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;qBACvF,CAAC;iBACH;aACF,CAAC;YACF,MAAM,QAAQ,GAAG,eAAe,CAAC;gBAC/B,KAAK;gBACL,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;gBACrC,UAAU,EAAE,cAAc,EAAE;aAC7B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;YAC1E,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACzF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;YAC7E,MAAM,QAAQ,GAAG,eAAe,CAAC;gBAC/B,KAAK,EAAE,EAAE;gBACT,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;gBACrC,UAAU,EAAE,cAAc,EAAE;aAC7B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;YAC1E,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;YACxC,MAAM,KAAK,GAAkB;gBAC3B;oBACE,KAAK,EAAE,aAAa;oBACpB,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;wBACpB,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;qBACpF,CAAC;iBACH;gBACD;oBACE,KAAK,EAAE,aAAa;oBACpB,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;wBACpB,aAAa,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;qBACpF,CAAC;iBACH;aACF,CAAC;YACF,MAAM,QAAQ,GAAG,eAAe,CAAC;gBAC/B,KAAK;gBACL,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;gBACrC,UAAU,EAAE,cAAc,EAAE;aAC7B,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC;YAC1E,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;QACpC,IAAI,WAAmC,CAAC;QACxC,MAAM,KAAK,GAAkB;YAC3B;gBACE,KAAK,EAAE,YAAY;gBACnB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,GAAG,WAAW,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC;aAC5E;SACF,CAAC;QACF,MAAM,QAAQ,GAAG,eAAe,CAAC;YAC/B,KAAK;YACL,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;YACrC,UAAU;SACX,CAAC,CAAC;QACH,MAAM,QAAQ,CAAC,cAAc,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -0,0 +1,3 @@
1
+ import type { CostTracker } from '../types.js';
2
+ export declare function createCostTracker(): CostTracker;
3
+ //# sourceMappingURL=cost-tracker.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cost-tracker.d.ts","sourceRoot":"","sources":["../../src/observability/cost-tracker.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C,wBAAgB,iBAAiB,IAAI,WAAW,CAwB/C"}