@revealui/ai 0.7.0 → 0.8.1

package/dist/observability/storage.js

@@ -0,0 +1,184 @@
+/**
+ * @revealui/ai - Event Storage Implementations
+ *
+ * Storage backends for persisting agent events.
+ */
+/**
+ * In-memory storage (no persistence)
+ */
+export class MemoryEventStorage {
+    events = [];
+    async save(events) {
+        this.events = [...events];
+    }
+    async load(filter) {
+        if (!filter) {
+            return [...this.events];
+        }
+        let filtered = [...this.events];
+        if (filter.agentId) {
+            filtered = filtered.filter((e) => e.agentId === filter.agentId);
+        }
+        if (filter.sessionId) {
+            filtered = filtered.filter((e) => e.sessionId === filter.sessionId);
+        }
+        if (filter.taskId) {
+            filtered = filtered.filter((e) => e.taskId === filter.taskId);
+        }
+        if (filter.eventType) {
+            filtered = filtered.filter((e) => e.eventType === filter.eventType);
+        }
+        if (filter.startTime) {
+            const startTime = filter.startTime;
+            filtered = filtered.filter((e) => e.timestamp >= startTime);
+        }
+        if (filter.endTime) {
+            const endTime = filter.endTime;
+            filtered = filtered.filter((e) => e.timestamp <= endTime);
+        }
+        return filtered;
+    }
+    async clear() {
+        this.events = [];
+    }
+    async count(filter) {
+        const events = await this.load(filter);
+        return events.length;
+    }
+}
+/**
+ * Local storage (browser)
+ */
+export class LocalStorageEventStorage {
+    key;
+    constructor(key = 'revealui:agent:events') {
+        this.key = key;
+    }
+    async save(events) {
+        if (typeof window === 'undefined' || !window.localStorage) {
+            throw new Error('LocalStorage not available');
+        }
+        window.localStorage.setItem(this.key, JSON.stringify(events));
+    }
+    async load(filter) {
+        if (typeof window === 'undefined' || !window.localStorage) {
+            return [];
+        }
+        try {
+            const data = window.localStorage.getItem(this.key);
+            if (!data) {
+                return [];
+            }
+            const events = JSON.parse(data);
+            if (!filter) {
+                return events;
+            }
+            let filtered = events;
+            if (filter.agentId) {
+                filtered = filtered.filter((e) => e.agentId === filter.agentId);
+            }
+            if (filter.sessionId) {
+                filtered = filtered.filter((e) => e.sessionId === filter.sessionId);
+            }
+            if (filter.taskId) {
+                filtered = filtered.filter((e) => e.taskId === filter.taskId);
+            }
+            if (filter.eventType) {
+                filtered = filtered.filter((e) => e.eventType === filter.eventType);
+            }
+            if (filter.startTime) {
+                const startTime = filter.startTime;
+                filtered = filtered.filter((e) => e.timestamp >= startTime);
+            }
+            if (filter.endTime) {
+                const endTime = filter.endTime;
+                filtered = filtered.filter((e) => e.timestamp <= endTime);
+            }
+            return filtered;
+        }
+        catch (error) {
+            // Return empty array on error - graceful degradation
+            void (error instanceof Error ? error.message : String(error)); // Query failed  -  graceful degradation
+            return [];
+        }
+    }
+    async clear() {
+        if (typeof window === 'undefined' || !window.localStorage) {
+            return;
+        }
+        window.localStorage.removeItem(this.key);
+    }
+    async count(filter) {
+        const events = await this.load(filter);
+        return events.length;
+    }
+}
+/**
+ * File system storage (Node.js)
+ */
+export class FileSystemEventStorage {
+    filePath;
+    constructor(filePath) {
+        this.filePath = filePath;
+    }
+    async save(events) {
+        const fs = await import('node:fs/promises');
+        const path = await import('node:path');
+        const dir = path.dirname(this.filePath);
+        await fs.mkdir(dir, { recursive: true });
+        await fs.writeFile(this.filePath, JSON.stringify(events, null, 2), 'utf-8');
+    }
+    async load(filter) {
+        const fs = await import('node:fs/promises');
+        try {
+            const data = await fs.readFile(this.filePath, 'utf-8');
+            const events = JSON.parse(data);
+            if (!filter) {
+                return events;
+            }
+            let filtered = events;
+            if (filter.agentId) {
+                filtered = filtered.filter((e) => e.agentId === filter.agentId);
+            }
+            if (filter.sessionId) {
+                filtered = filtered.filter((e) => e.sessionId === filter.sessionId);
+            }
+            if (filter.taskId) {
+                filtered = filtered.filter((e) => e.taskId === filter.taskId);
+            }
+            if (filter.eventType) {
+                filtered = filtered.filter((e) => e.eventType === filter.eventType);
+            }
+            if (filter.startTime) {
+                const startTime = filter.startTime;
+                filtered = filtered.filter((e) => e.timestamp >= startTime);
+            }
+            if (filter.endTime) {
+                const endTime = filter.endTime;
+                filtered = filtered.filter((e) => e.timestamp <= endTime);
+            }
+            return filtered;
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                return [];
+            }
+            throw error;
+        }
+    }
+    async clear() {
+        const fs = await import('node:fs/promises');
+        try {
+            await fs.unlink(this.filePath);
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT') {
+                throw error;
+            }
+        }
+    }
+    async count(filter) {
+        const events = await this.load(filter);
+        return events.length;
+    }
+}

package/dist/orchestration/runtime.d.ts

@@ -8,6 +8,7 @@ import type { ReasoningEffort } from '../llm/providers/base.js';
 import type { AgentSkillProvider } from '../skills/integration/agent-skill-provider.js';
 import type { ApprovalCallback } from '../tools/base.js';
 import type { MCPToolSource, McpClientLike } from '../tools/mcp-adapter.js';
+import type { McpToolCallEvent } from '../tools/mcp-events.js';
 import type { Agent, AgentResult, Task } from './agent.js';
 /**
  * Reasoning-depth hint for a task. Alias of the neutral `ReasoningEffort` — the agnostic
@@ -64,6 +65,12 @@ export interface RuntimeConfig {
         name: string;
         client: McpClientLike;
     }>;
+    /**
+     * GAP-355 integrity audit for MCP tools discovered at run time.
+     * Passed into `createToolsFromMcpClient` and `discoverMCPTools` so library
+     * consumers (not only agent-stream) fail closed when a receipt cannot land.
+     */
+    onToolAudit?: (event: McpToolCallEvent) => void | Promise<void>;
     /**
      * Optional skill provider. When set, activated skills are injected into the
      * system prompt before the first LLM call, giving the agent contextual

package/dist/orchestration/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/orchestration/runtime.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAW,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+CAA+C,CAAC;AACxF,OAAO,KAAK,EAAE,gBAAgB,EAAoB,MAAM,kBAAkB,CAAC;AAE3E,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAG5E,OAAO,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,eAAe,CAAC;AAE5C,MAAM,WAAW,aAAa;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,UAAU,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,aAAa,CAAA;KAAE,CAAC,CAAC;IACpE;;;;OAIG;IACH,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,gCAAgC,EAAE,SAAS,CAAC;IAC/D;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC;AAED,qBAAa,YAAY;IACvB,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC;IAChC,OAAO,CAAC,SAAS,CAAc;IAC/B,OAAO,CAAC,cAAc,CAAgD;IACtE,OAAO,CAAC,cAAc,CAAS;gBAEnB,MAAM,GAAE,aAAkB;IA0BtC;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;YAqBzE,OAAO;IA8OrB;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI;IAI7B;;OAEG;IACG,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAc9E;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IA+B9B;;OAEG;IACH,SAAS,IAAI;QACX,cAAc,EAAE,OAAO,CAAC;QACxB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;KACxB;CAOF"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/orchestration/runtime.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAW,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEzE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+CAA+C,CAAC;AACxF,OAAO,KAAK,EAAE,gBAAgB,EAAoB,MAAM,kBAAkB,CAAC;AAE3E,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE5E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,OAAO,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,eAAe,CAAC;AAE5C,MAAM,WAAW,aAAa;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,UAAU,CAAC,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,aAAa,CAAA;KAAE,CAAC,CAAC;IACpE;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE;;;;OAIG;IACH,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,gCAAgC,EAAE,SAAS,CAAC;IAC/D;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC;AAED,qBAAa,YAAY;IACvB,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC;IAChC,OAAO,CAAC,SAAS,CAAc;IAC/B,OAAO,CAAC,cAAc,CAAgD;IACtE,OAAO,CAAC,cAAc,CAAS;gBAEnB,MAAM,GAAE,aAAkB;IA2BtC;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC;YAqBzE,OAAO;IAsPrB;;OAEG;IACH,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI;IAI7B;;OAEG;IACG,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAc9E;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IA+B9B;;OAEG;IACH,SAAS,IAAI;QACX,cAAc,EAAE,OAAO,CAAC;QACxB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;KACxB;CAOF"}

package/dist/orchestration/runtime.js

@@ -23,6 +23,7 @@ export class AgentRuntime {
             enableCache: config.enableCache ?? true, // Enable by default for cost savings
             mcpToolSource: config.mcpToolSource,
             mcpClients: config.mcpClients,
+            onToolAudit: config.onToolAudit,
             skillProvider: config.skillProvider,
             thinkingLevel: config.thinkingLevel,
             modelTier: config.modelTier,
@@ -64,13 +65,19 @@ export class AgentRuntime {
         //   - Standard `McpClient` instances (Stage 5.1a, preferred)
         //   - `MCPToolSource` / hypervisor (legacy, deprecated but supported)
         const mcpTools = [];
+        const onToolAudit = this.config.onToolAudit;
         if (this.config.mcpToolSource) {
-            mcpTools.push(...discoverMCPTools(this.config.mcpToolSource));
+            mcpTools.push(...discoverMCPTools(this.config.mcpToolSource, {
+                ...(onToolAudit !== undefined ? { onToolAudit } : {}),
+            }));
         }
         if (this.config.mcpClients && this.config.mcpClients.length > 0) {
             for (const { name, client } of this.config.mcpClients) {
                 try {
-                    const fromClient = await createToolsFromMcpClient(client, { namespace: name });
+                    const fromClient = await createToolsFromMcpClient(client, {
+                        namespace: name,
+                        ...(onToolAudit !== undefined ? { onToolAudit } : {}),
+                    });
                     mcpTools.push(...fromClient);
                 }
                 catch {

package/dist/orchestration/ticket-agent.d.ts

@@ -15,6 +15,7 @@ import type { Database } from '@revealui/db/client';
 import type { LLMClient } from '../llm/client.js';
 import type { EpisodicMemory } from '../memory/stores/episodic-memory.js';
 import type { AdminAPIClient, CollectionMetadata, GlobalMetadata } from '../tools/admin/factory.js';
+import type { Tool } from '../tools/base.js';
 import type { TicketMutationClient } from '../tools/ticket-tools.js';
 import type { AgentResult } from './agent.js';
 export interface TicketInput {
@@ -51,6 +52,15 @@ export interface TicketAgentConfig {
     maxIterations?: number;
     /** Timeout in ms (default: 120_000) */
     timeout?: number;
+    /**
+     * Optional tool transform after the tool set is assembled (GAP-355 S6-4).
+     * Server injects pre-authorize wraps without `@revealui/ai` importing server.
+     * Called once per dispatch with the ticket id and optional dispatchId.
+     */
+    wrapTools?: (tools: Tool[], ctx: {
+        ticketId: string;
+        dispatchId?: string;
+    }) => Tool[];
 }
 export declare class TicketAgentDispatcher {
     private config;

package/dist/orchestration/ticket-agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ticket-agent.d.ts","sourceRoot":"","sources":["../../src/orchestration/ticket-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,KAAK,EACV,cAAc,EAEd,kBAAkB,EAClB,cAAc,EACf,MAAM,2BAA2B,CAAC;AAGnC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGrE,OAAO,KAAK,EAAS,WAAW,EAAQ,MAAM,YAAY,CAAC;AAG3D,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,0GAA0G;IAC1G,WAAW,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,SAAS,EAAE,SAAS,CAAC;IAErB,2DAA2D;IAC3D,SAAS,EAAE,cAAc,CAAC;IAE1B,wEAAwE;IACxE,YAAY,EAAE,oBAAoB,CAAC;IAEnC,yEAAyE;IACzE,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAEnC,yCAAyC;IACzC,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAE3B;;;;OAIG;IACH,MAAM,CAAC,EAAE,cAAc,CAAC;IAExB;;;OAGG;IACH,EAAE,CAAC,EAAE,QAAQ,CAAC;IAEd,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAwDD,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,YAAY,CAAoB;gBAE5B,MAAM,EAAE,iBAAiB;IAUrC;;;;;;;;;;;;;;;OAeG;IACG,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,GAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,WAAW,CAAC;CA0DjG"}
+{"version":3,"file":"ticket-agent.d.ts","sourceRoot":"","sources":["../../src/orchestration/ticket-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAC1E,OAAO,KAAK,EACV,cAAc,EAEd,kBAAkB,EAClB,cAAc,EACf,MAAM,2BAA2B,CAAC;AAEnC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAGrE,OAAO,KAAK,EAAS,WAAW,EAAQ,MAAM,YAAY,CAAC;AAG3D,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,0GAA0G;IAC1G,WAAW,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,SAAS,EAAE,SAAS,CAAC;IAErB,2DAA2D;IAC3D,SAAS,EAAE,cAAc,CAAC;IAE1B,wEAAwE;IACxE,YAAY,EAAE,oBAAoB,CAAC;IAEnC,yEAAyE;IACzE,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAEnC,yCAAyC;IACzC,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAE3B;;;;OAIG;IACH,MAAM,CAAC,EAAE,cAAc,CAAC;IAExB;;;OAGG;IACH,EAAE,CAAC,EAAE,QAAQ,CAAC;IAEd,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,EAAE,CAAC;CACvF;AAwDD,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,YAAY,CAAoB;gBAE5B,MAAM,EAAE,iBAAiB;IAUrC;;;;;;;;;;;;;;;OAeG;IACG,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,GAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,WAAW,CAAC;CAgEjG"}

package/dist/orchestration/ticket-agent.js

@@ -113,7 +113,13 @@ export class TicketAgentDispatcher {
         const extraTools = db
             ? [webScraperTool, createDocumentSummarizerTool(db, this.config.llmClient)]
             : [webScraperTool];
-        const tools = [...cmsTools, ...ticketTools, ...extraTools];
+        let tools = [...cmsTools, ...ticketTools, ...extraTools];
+        if (this.config.wrapTools) {
+            tools = this.config.wrapTools(tools, {
+                ticketId: ticket.id,
+                ...(options.dispatchId !== undefined ? { dispatchId: options.dispatchId } : {}),
+            });
+        }
         // The runtime does not call agent.memory  -  satisfy the interface with a stub when no
         // shared memory instance is provided. Cast is safe: only runtime touches this field.
         const memory = (sharedMemory ?? {});

package/dist/skills/index.d.ts

@@ -1,6 +1,10 @@
 /**
  * Agent Skills
  *
+ * **INCUBATING (fleet-redundancy C11 / ADR-007).** Library exports for skill
+ * install/activation remain. No RevealUI app currently mounts the skills
+ * registry as a product path; wire only under a dedicated WIRE ticket.
+ *
  * Implementation of the Agent Skills open standard (skills.sh).
  * Allows RevealUI agents to install and use skill packages.
  *

package/dist/skills/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/skills/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,EAAE,cAAc,EAAE,KAAK,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAElF,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,wBAAwB,EACxB,cAAc,EACd,iBAAiB,EACjB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,GAC7B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,wBAAwB,EACxB,gCAAgC,EAChC,eAAe,EACf,wBAAwB,EACxB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EACd,KAAK,YAAY,EACjB,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,KAAK,UAAU,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,KAAK,YAAY,EACjB,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,wBAAwB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,oBAAoB,EACpB,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACX,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,eAAe,EACf,KAAK,aAAa,EAClB,uBAAuB,EACvB,YAAY,EACZ,sBAAsB,EACtB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,KAAK,kBAAkB,GACxB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,KAAK,WAAW,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,gBAAgB,EAChB,KAAK,KAAK,EACV,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,KAAK,qBAAqB,EAC1B,2BAA2B,EAC3B,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,aAAa,EAClB,mBAAmB,EACnB,WAAW,EACX,KAAK,WAAW,EAChB,iBAAiB,GAClB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/skills/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAGH,OAAO,EAAE,cAAc,EAAE,KAAK,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAElF,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,wBAAwB,EACxB,cAAc,EACd,iBAAiB,EACjB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,GAC7B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,wBAAwB,EACxB,gCAAgC,EAChC,eAAe,EACf,wBAAwB,EACxB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,cAAc,EACd,KAAK,YAAY,EACjB,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,KAAK,UAAU,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,KAAK,YAAY,EACjB,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,wBAAwB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,oBAAoB,EACpB,KAAK,gBAAgB,EACrB,oBAAoB,EACpB,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACX,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,eAAe,EACf,KAAK,aAAa,EAClB,uBAAuB,EACvB,YAAY,EACZ,sBAAsB,EACtB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,KAAK,kBAAkB,GACxB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,KAAK,WAAW,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,gBAAgB,EAChB,KAAK,KAAK,EACV,KAAK,sBAAsB,EAC3B,4BAA4B,EAC5B,KAAK,qBAAqB,EAC1B,2BAA2B,EAC3B,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,aAAa,EAClB,mBAAmB,EACnB,WAAW,EACX,KAAK,WAAW,EAChB,iBAAiB,GAClB,MAAM,YAAY,CAAC"}

package/dist/skills/index.js

@@ -1,6 +1,10 @@
 /**
  * Agent Skills
  *
+ * **INCUBATING (fleet-redundancy C11 / ADR-007).** Library exports for skill
+ * install/activation remain. No RevealUI app currently mounts the skills
+ * registry as a product path; wire only under a dedicated WIRE ticket.
+ *
  * Implementation of the Agent Skills open standard (skills.sh).
  * Allows RevealUI agents to install and use skill packages.
  *

package/dist/skills/integration/agent-skill-provider.d.ts

@@ -56,11 +56,6 @@ export declare class AgentSkillProvider {
      * Format multiple skill instructions into a single block.
      */
     private formatSkillInstructions;
-    /**
-     * Estimate token count for text (rough approximation).
-     * Uses ~4 characters per token as a rough estimate.
-     */
-    private estimateTokens;
     /**
      * Build a system prompt augmentation from activated skills.
      *

package/dist/skills/integration/agent-skill-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-skill-provider.d.ts","sourceRoot":"","sources":["../../../src/skills/integration/agent-skill-provider.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAExF;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,+BAA+B;IAC/B,SAAS,EAAE,cAAc,CAAC;IAE1B,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,+CAA+C;IAC/C,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,+CAA+C;IAC/C,QAAQ,EAAE,YAAY,EAAE,CAAC;IAEzB,iCAAiC;IACjC,eAAe,EAAE,KAAK,EAAE,CAAC;IAEzB,yBAAyB;IACzB,iBAAiB,EAAE,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;IAE9D,iDAAiD;IACjD,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,SAAS,CAAiB;IAClC,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,mBAAmB,CAA2B;gBAE1C,MAAM,EAAE,wBAAwB;IAM5C;;;;;;OAMG;IACG,uBAAuB,CAC3B,QAAQ,EAAE,YAAY,EAAE,EACxB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,oBAAoB,CAAC;IA8ChC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAQ/B;;;OAGG;IACH,OAAO,CAAC,cAAc;IAItB;;;;;OAKG;IACH,4BAA4B,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM;IAsBrD;;;;;OAKG;IACH,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE;IAc9C;;OAEG;IACH,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO;IAI1C;;OAEG;IACH,kBAAkB,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CAGnE;AAuBD;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,cAAc,EACzB,OAAO,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,GAC1C,kBAAkB,CAKpB"}
+{"version":3,"file":"agent-skill-provider.d.ts","sourceRoot":"","sources":["../../../src/skills/integration/agent-skill-provider.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAExF;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,+BAA+B;IAC/B,SAAS,EAAE,cAAc,CAAC;IAE1B,mDAAmD;IACnD,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,+CAA+C;IAC/C,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,+CAA+C;IAC/C,QAAQ,EAAE,YAAY,EAAE,CAAC;IAEzB,iCAAiC;IACjC,eAAe,EAAE,KAAK,EAAE,CAAC;IAEzB,yBAAyB;IACzB,iBAAiB,EAAE,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;IAE9D,iDAAiD;IACjD,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,SAAS,CAAiB;IAClC,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,mBAAmB,CAA2B;gBAE1C,MAAM,EAAE,wBAAwB;IAM5C;;;;;;OAMG;IACG,uBAAuB,CAC3B,QAAQ,EAAE,YAAY,EAAE,EACxB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,oBAAoB,CAAC;IA8ChC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAQ/B;;;;;OAKG;IACH,4BAA4B,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM;IAsBrD;;;;;OAKG;IACH,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE;IAc9C;;OAEG;IACH,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO;IAI1C;;OAEG;IACH,kBAAkB,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;CAGnE;AAuBD;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,cAAc,EACzB,OAAO,CAAC,EAAE,OAAO,CAAC,wBAAwB,CAAC,GAC1C,kBAAkB,CAKpB"}

package/dist/skills/integration/agent-skill-provider.js

@@ -3,6 +3,7 @@
  *
  * Integrates skills into agent system prompts.
  */
+import { estimateTokens } from '../../internal/token-estimate.js';
 /**
  * Provider for injecting skill instructions into agent prompts.
  */
@@ -35,7 +36,7 @@ export class AgentSkillProvider {
         }
         // Format skill instructions
         const skillInstructions = this.formatSkillInstructions(activatedSkills);
-        const estimatedTokens = this.estimateTokens(skillInstructions);
+        const estimatedTokens = estimateTokens(skillInstructions);
         // Find system message or create one
         const updatedMessages = [...messages];
         const systemIndex = updatedMessages.findIndex((m) => m.role === 'system');
@@ -72,13 +73,6 @@ export class AgentSkillProvider {
 ${skillBlocks.join('\n\n')}
 </activated-skills>`;
     }
-    /**
-     * Estimate token count for text (rough approximation).
-     * Uses ~4 characters per token as a rough estimate.
-     */
-    estimateTokens(text) {
-        return Math.ceil(text.length / 4);
-    }
     /**
      * Build a system prompt augmentation from activated skills.
      *
@@ -93,7 +87,7 @@ ${skillBlocks.join('\n\n')}
         // Add skills until we hit token budget
         for (const skill of skills) {
             const formatted = this.instructionTemplate(skill);
-            const tokens = this.estimateTokens(formatted);
+            const tokens = estimateTokens(formatted);
             if (totalTokens + tokens <= this.maxTokenBudget) {
                 includedSkills.push(skill);
                 totalTokens += tokens;

package/dist/tools/admin/factory.d.ts

@@ -3,6 +3,7 @@
  * Creates admin tools with API client injected for actual execution
  */
 import type { Tool } from '../base.js';
+import { type ToolIntegrityAuditHandler } from '../integrity-audit.js';
 /**
  * API Client interface (compatible with @revealui/core/admin/utils/apiClient)
  */
@@ -80,6 +81,11 @@ export interface AdminToolsConfig {
     globals?: GlobalMetadata[];
     /** Current user context (for permission checks) */
     user?: UserContext;
+    /**
+     * GAP-355 S5-4 integrity audit. When set, every tool execute is awaited and
+     * successful results fail closed if the audit write throws.
+     */
+    onToolAudit?: ToolIntegrityAuditHandler;
 }
 /**
  * Create admin tools with API client injected

package/dist/tools/admin/factory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../src/tools/admin/factory.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAyBvC;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,OAAO,EAAE;QACZ,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC;QACV,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IAEH,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE3D,MAAM,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEzF,MAAM,CAAC,OAAO,EAAE;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC/B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAErB,MAAM,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnE,UAAU,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAExE,YAAY,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1F;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0BAA0B;IAC1B,SAAS,EAAE,cAAc,CAAC;IAE1B,kEAAkE;IAClE,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAEnC,0DAA0D;IAC1D,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAE3B,mDAAmD;IACnD,IAAI,CAAC,EAAE,WAAW,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,EAAE,CAggBjE"}
+{"version":3,"file":"factory.d.ts","sourceRoot":"","sources":["../../../src/tools/admin/factory.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,uBAAuB,CAAC;AAyB/B;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,OAAO,EAAE;QACZ,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,OAAO,CAAC;QACV,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IAEH,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE3D,MAAM,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEzF,MAAM,CAAC,OAAO,EAAE;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC/B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAErB,MAAM,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnE,UAAU,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAExE,YAAY,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1F;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0BAA0B;IAC1B,SAAS,EAAE,cAAc,CAAC;IAE1B,kEAAkE;IAClE,WAAW,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAEnC,0DAA0D;IAC1D,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAE3B,mDAAmD;IACnD,IAAI,CAAC,EAAE,WAAW,CAAC;IAEnB;;;OAGG;IACH,WAAW,CAAC,EAAE,yBAAyB,CAAC;CACzC;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,EAAE,CAggBjE"}

package/dist/tools/admin/factory.js

@@ -2,6 +2,7 @@
  * admin Tools Factory
  * Creates admin tools with API client injected for actual execution
  */
+import { maybeWrapToolsWithIntegrityAudit, } from '../integrity-audit.js';
 import { createDocumentTool, deleteDocumentTool, findDocumentsTool, getDocumentTool, listCollectionsTool, updateDocumentTool, } from './collection-tools.js';
 import { getGlobalTool, listGlobalsTool, updateGlobalTool } from './global-tools.js';
 import { deleteMediaTool, getMediaTool, listMediaTool, updateMediaTool, uploadMediaTool, } from './media-tools.js';
@@ -11,7 +12,7 @@ import { createUserTool, deleteUserTool, getCurrentUserTool, listUsersTool, upda
  * This factory function creates functional tools by injecting the actual API implementation
  */
 export function createAdminTools(config) {
-    const { apiClient, collections, globals, user } = config;
+    const { apiClient, collections, globals, user, onToolAudit } = config;
     // Clone tools and inject API client implementation
     const tools = [];
     // Collection Tools
@@ -458,5 +459,5 @@ export function createAdminTools(config) {
             }
         },
     });
-    return tools;
+    return maybeWrapToolsWithIntegrityAudit(tools, onToolAudit);
 }

package/dist/tools/coding/index.d.ts

@@ -4,6 +4,7 @@
  * for the RevealUI standalone coding agent.
  */
 import type { Tool } from '../base.js';
+import { type ToolIntegrityAuditHandler } from '../integrity-audit.js';
 export { fileEditTool } from './file-edit.js';
 export { fileGlobTool } from './file-glob.js';
 export { fileGrepTool } from './file-grep.js';
@@ -30,6 +31,11 @@ export interface CodingToolsConfig {
     deniedPathPatterns?: RegExp[];
     /** Which tools to include (default: all) */
     include?: Array<'file_read' | 'file_write' | 'file_edit' | 'file_glob' | 'file_grep' | 'shell_exec' | 'git_ops' | 'project_context' | 'test_runner' | 'lint_fix'>;
+    /**
+     * GAP-355 S5-4 integrity audit. When set, every tool execute is awaited and
+     * successful results fail closed if the audit write throws.
+     */
+    onToolAudit?: ToolIntegrityAuditHandler;
 }
 /**
  * Create coding tools with safety configuration applied.

package/dist/tools/coding/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/coding/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAevC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,eAAe,EACf,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,0DAA0D;IAC1D,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,kCAAkC;IAClC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,4CAA4C;IAC5C,OAAO,CAAC,EAAE,KAAK,CACX,WAAW,GACX,YAAY,GACZ,WAAW,GACX,WAAW,GACX,WAAW,GACX,YAAY,GACZ,SAAS,GACT,iBAAiB,GACjB,aAAa,GACb,UAAU,CACb,CAAC;CACH;AAgBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,EAAE,CAmBnE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/coding/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,uBAAuB,CAAC;AAe/B,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE1D,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,eAAe,EACf,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,0DAA0D;IAC1D,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,kCAAkC;IAClC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,4CAA4C;IAC5C,OAAO,CAAC,EAAE,KAAK,CACX,WAAW,GACX,YAAY,GACZ,WAAW,GACX,WAAW,GACX,WAAW,GACX,YAAY,GACZ,SAAS,GACT,iBAAiB,GACjB,aAAa,GACb,UAAU,CACb,CAAC;IACF;;;OAGG;IACH,WAAW,CAAC,EAAE,yBAAyB,CAAC;CACzC;AAgBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI,EAAE,CAsBnE"}

package/dist/tools/coding/index.js

@@ -3,6 +3,7 @@
  * File operations, search, shell, git, and project context tools
  * for the RevealUI standalone coding agent.
  */
+import { maybeWrapToolsWithIntegrityAudit, } from '../integrity-audit.js';
 import { fileEditTool } from './file-edit.js';
 import { fileGlobTool } from './file-glob.js';
 import { fileGrepTool } from './file-grep.js';
@@ -54,9 +55,13 @@ export function createCodingTools(config) {
     };
     configureSafety(safetyConfig);
     // Filter tools if include list is provided
+    let tools;
     if (config.include) {
         const includeSet = new Set(config.include);
-        return ALL_CODING_TOOLS.filter((t) => includeSet.has(t.name));
+        tools = ALL_CODING_TOOLS.filter((t) => includeSet.has(t.name));
     }
-    return [...ALL_CODING_TOOLS];
+    else {
+        tools = [...ALL_CODING_TOOLS];
+    }
+    return maybeWrapToolsWithIntegrityAudit(tools, config.onToolAudit);
 }

package/dist/tools/governance.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Tool governance wrapper (GAP-355 Stage 6 S6-3).
+ *
+ * Pre-authorize before side effects; soft-fail (return ToolResult error) when
+ * denied so the model can recover. Compose outside integrity audit wraps:
+ *   governance(integrity(realTool))
+ * so authorize runs first and denied tools never execute or integrity-audit success.
+ *
+ * MCP server tools are not wrapped here (remote / governed-MCP gated).
+ */
+import type { Tool } from './base.js';
+export interface ToolAuthorizeDecision {
+    allowed: boolean;
+    /** Machine-readable deny reason (e.g. exec_requires_grant). */
+    reason: string;
+}
+export type ToolAuthorizeFn = (toolName: string) => ToolAuthorizeDecision;
+export type ToolDeniedHandler = (info: {
+    toolName: string;
+    reason: string;
+}) => void | Promise<void>;
+export interface WrapToolWithGovernanceOptions {
+    authorize: ToolAuthorizeFn;
+    /**
+     * Called when authorize denies. Soft-fail: errors here do not rethrow —
+     * the tool still returns a denial ToolResult (owner: soft fail UX).
+     */
+    onDenied?: ToolDeniedHandler;
+}
+/**
+ * Wrap a tool so execute is gated by authorize. Denied → no execute.
+ * Returns a new tool object; does not mutate the input.
+ */
+export declare function wrapToolWithGovernance(tool: Tool, options: WrapToolWithGovernanceOptions): Tool;
+/** Map a tool list through wrapToolWithGovernance. */
+export declare function wrapToolsWithGovernance(tools: Tool[], options: WrapToolWithGovernanceOptions): Tool[];
+//# sourceMappingURL=governance.d.ts.map

package/dist/tools/governance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"governance.d.ts","sourceRoot":"","sources":["../../src/tools/governance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,WAAW,CAAC;AAElD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,+DAA+D;IAC/D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,qBAAqB,CAAC;AAE1E,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE3B,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,eAAe,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,6BAA6B,GAAG,IAAI,CAsB/F;AAED,sDAAsD;AACtD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,IAAI,EAAE,EACb,OAAO,EAAE,6BAA6B,GACrC,IAAI,EAAE,CAER"}

package/dist/tools/governance.js

@@ -0,0 +1,42 @@
+/**
+ * Tool governance wrapper (GAP-355 Stage 6 S6-3).
+ *
+ * Pre-authorize before side effects; soft-fail (return ToolResult error) when
+ * denied so the model can recover. Compose outside integrity audit wraps:
+ *   governance(integrity(realTool))
+ * so authorize runs first and denied tools never execute or integrity-audit success.
+ *
+ * MCP server tools are not wrapped here (remote / governed-MCP gated).
+ */
+/**
+ * Wrap a tool so execute is gated by authorize. Denied → no execute.
+ * Returns a new tool object; does not mutate the input.
+ */
+export function wrapToolWithGovernance(tool, options) {
+    return {
+        ...tool,
+        async execute(params) {
+            const decision = options.authorize(tool.name);
+            if (!decision.allowed) {
+                try {
+                    await options.onDenied?.({
+                        toolName: tool.name,
+                        reason: decision.reason,
+                    });
+                }
+                catch {
+                    // Soft-fail: still return denial to the model if deny-audit fails.
+                }
+                return {
+                    success: false,
+                    error: `Permission denied (${decision.reason}): ${tool.name}`,
+                };
+            }
+            return tool.execute(params);
+        },
+    };
+}
+/** Map a tool list through wrapToolWithGovernance. */
+export function wrapToolsWithGovernance(tools, options) {
+    return tools.map((tool) => wrapToolWithGovernance(tool, options));
+}

package/dist/tools/integrity-audit.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Tool integrity audit wrapper (GAP-355 Stage 5 S5-4).
+ *
+ * Same fail-closed contract as `createToolsFromMcpClient({ onToolAudit })`:
+ * after a successful tool execution, await the audit hook and rethrow so an
+ * unrecorded success cannot complete. On tool failure, prefer the tool error
+ * if a secondary audit write fails.
+ *
+ * Used for admin CMS + coding tools that are not MCP server tools.
+ */
+import type { Tool } from './base.js';
+/** Summary event for one tool execution (no raw args / results). */
+export interface ToolIntegrityAuditEvent {
+    toolName: string;
+    success: boolean;
+    duration_ms: number;
+    error?: string;
+}
+export type ToolIntegrityAuditHandler = (event: ToolIntegrityAuditEvent) => void | Promise<void>;
+/**
+ * Wrap a tool so each `execute` emits an integrity audit event.
+ * Returns a new tool object; does not mutate the input.
+ */
+export declare function wrapToolWithIntegrityAudit(tool: Tool, onToolAudit: ToolIntegrityAuditHandler): Tool;
+/** Map over a tool list when a handler is provided; otherwise return as-is. */
+export declare function maybeWrapToolsWithIntegrityAudit(tools: Tool[], onToolAudit: ToolIntegrityAuditHandler | undefined): Tool[];
+//# sourceMappingURL=integrity-audit.d.ts.map

package/dist/tools/integrity-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integrity-audit.d.ts","sourceRoot":"","sources":["../../src/tools/integrity-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,WAAW,CAAC;AAElD,oEAAoE;AACpE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,yBAAyB,GAAG,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEjG;;;GAGG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,IAAI,EACV,WAAW,EAAE,yBAAyB,GACrC,IAAI,CA4CN;AAED,+EAA+E;AAC/E,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,IAAI,EAAE,EACb,WAAW,EAAE,yBAAyB,GAAG,SAAS,GACjD,IAAI,EAAE,CAGR"}