@spinabot/brigade 0.1.2 → 1.0.1

package/dist/agents/tools/generate-image-tool.js

@@ -0,0 +1,421 @@
+/**
+ * `generate_image` tool — first-class image generation, modeled on the
+ * reference architecture's media-generation tool family.
+ *
+ * Why this tool exists
+ * --------------------
+ * Without it, "make me an image" sends the model to raw `curl` against the
+ * provider API: the API key flows through shell commands, model ids get
+ * guessed (a dead id 400'd), the response shape gets guessed (a 69-second
+ * generation was BILLED and then silently dropped by a hand-written parser
+ * that didn't know images ride outside `message.content`), and the operator
+ * answers four bash-approval prompts for zero delivered pixels (production,
+ * 2026-06-11). This tool owns the call in-process: stored auth, validated
+ * params, a parser that understands every shape OpenRouter actually returns,
+ * and a saved file the model can hand to `send_media`.
+ *
+ * Flow: generate → bytes saved under `~/.brigade/cache/images/` → result
+ * text carries `MEDIA:<saved-path>` lines — the contract is "show the real
+ * path so the model can't invent a bogus one" — → the model delivers with
+ * `send_media({path})` (same proven pipeline as org-chart images).
+ *
+ * Provider: OpenRouter (the operator's configured aggregator). Image-output
+ * models are exposed through chat/completions with
+ * `modalities: ["image", "text"]`; generated images arrive as data URLs in
+ * `choices[0].message.images[]` (canonical) or as image parts inside a
+ * content array (some providers). Both are handled; http(s) URLs are
+ * downloaded.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { Type } from "typebox";
+import { resolveCacheDir, DEFAULT_AGENT_ID } from "../../config/paths.js";
+import { loadConfig } from "../../core/config.js";
+import { readProfiles } from "../../auth/profiles.js";
+import { jsonResult } from "./common.js";
+const DEFAULT_MODEL = "openai/gpt-5-image";
+const DEFAULT_COUNT = 1;
+const MAX_COUNT = 4;
+const OPENROUTER_BASE = "https://openrouter.ai/api/v1";
+/** Generation can legitimately take 1-2 minutes; bound each HTTP call. */
+const REQUEST_TIMEOUT_MS = 150_000;
+const SUPPORTED_ASPECT_RATIOS = new Set([
+    "1:1",
+    "2:3",
+    "3:2",
+    "3:4",
+    "4:3",
+    "4:5",
+    "5:4",
+    "9:16",
+    "16:9",
+    "21:9",
+]);
+const GenerateImageParams = Type.Object({
+    action: Type.Optional(Type.Union([Type.Literal("generate"), Type.Literal("list")], {
+        description: 'Optional action: "generate" (default) or "list" to inspect available image models.',
+    })),
+    prompt: Type.Optional(Type.String({ description: "Image generation prompt." })),
+    model: Type.Optional(Type.String({
+        description: "Optional model override, e.g. openai/gpt-5-image or google/gemini-2.5-flash-image. Use action:list to discover what's available.",
+    })),
+    filename: Type.Optional(Type.String({
+        description: "Optional output filename hint. Brigade preserves the basename and saves under its managed images directory.",
+    })),
+    size: Type.Optional(Type.String({
+        description: "Optional size hint like 1024x1024, 1536x1024, or 1024x1536. Passed to the model as a prompt hint.",
+    })),
+    aspectRatio: Type.Optional(Type.String({
+        description: "Optional aspect ratio hint: 1:1, 2:3, 3:2, 3:4, 4:3, 4:5, 5:4, 9:16, 16:9, or 21:9.",
+    })),
+    count: Type.Optional(Type.Number({
+        description: `Optional number of images to request (1-${MAX_COUNT}). Each is a separate billed generation.`,
+        minimum: 1,
+        maximum: MAX_COUNT,
+    })),
+});
+export function makeGenerateImageTool(opts = {}) {
+    const agentId = opts.agentId ?? DEFAULT_AGENT_ID;
+    const fetchFn = opts.fetchFn ?? fetch;
+    const resolveKey = opts.resolveApiKey ?? (() => resolveOpenRouterApiKey(agentId));
+    return {
+        name: "generate_image",
+        label: "Generate Image",
+        displaySummary: "generating an image",
+        // Spend gate: generation is billed per call. The operator (and their
+        // own channel DMs, which run as owner) can generate; unapproved
+        // channel peers cannot burn credits.
+        ownerOnly: true,
+        description: [
+            "Generate images with the operator's configured image models (via OpenRouter). USE THIS — never call the provider API with bash/curl: the key must not flow through a shell, and the response parsing is owned here.",
+            'action="generate" (default): requires `prompt`. Saves each image under the managed images directory and returns the REAL saved paths as `MEDIA:<path>` lines — reference those paths exactly; never invent one.',
+            "To deliver the image to the operator on a chat surface, follow up with `send_media({path: <saved path>})` — from a channel chat it auto-targets the current conversation. Generation does NOT auto-send.",
+            'action="list": enumerate the image-capable model ids available to this key.',
+            "Generation takes up to ~2 minutes per image — do not retry while a call is in flight.",
+        ].join(" "),
+        parameters: GenerateImageParams,
+        execute: async (_toolCallId, args, signal) => {
+            const action = args.action ?? "generate";
+            const apiKey = resolveKey();
+            if (!apiKey) {
+                return jsonResult({
+                    action,
+                    provider: "openrouter",
+                    ok: false,
+                    message: "No OpenRouter key is configured. The operator can add one with `brigade onboard` (or set the OPENROUTER_API_KEY environment variable).",
+                });
+            }
+            if (action === "list") {
+                const models = await listImageModels(fetchFn, apiKey, signal);
+                return jsonResult({
+                    action,
+                    provider: "openrouter",
+                    models,
+                    ok: true,
+                    message: `${models.length} image-capable model(s).`,
+                });
+            }
+            const prompt = (args.prompt ?? "").trim();
+            if (!prompt) {
+                return jsonResult({
+                    action,
+                    provider: "openrouter",
+                    ok: false,
+                    message: "`prompt` is required for action=generate.",
+                });
+            }
+            const aspectRatio = args.aspectRatio?.trim();
+            if (aspectRatio && !SUPPORTED_ASPECT_RATIOS.has(aspectRatio)) {
+                return jsonResult({
+                    action,
+                    provider: "openrouter",
+                    ok: false,
+                    message: "aspectRatio must be one of 1:1, 2:3, 3:2, 3:4, 4:3, 4:5, 5:4, 9:16, 16:9, or 21:9.",
+                });
+            }
+            const model = args.model?.trim() || resolveDefaultImageModel();
+            const count = typeof args.count === "number" && Number.isFinite(args.count)
+                ? Math.min(MAX_COUNT, Math.max(1, Math.floor(args.count)))
+                : DEFAULT_COUNT;
+            // Size/aspect ride as prompt hints — portable across heterogeneous
+            // image models behind the aggregator, no per-model param mapping.
+            const hints = [];
+            if (args.size?.trim())
+                hints.push(`Target size: ${args.size.trim()}.`);
+            if (aspectRatio)
+                hints.push(`Aspect ratio: ${aspectRatio}.`);
+            const fullPrompt = hints.length > 0 ? `${prompt}\n\n${hints.join(" ")}` : prompt;
+            const outDir = opts.outDirOverride ?? path.join(resolveCacheDir(), "images");
+            fs.mkdirSync(outDir, { recursive: true });
+            const generations = await Promise.all(Array.from({ length: count }, (_, i) => generateOneImage({
+                fetchFn,
+                apiKey,
+                model,
+                prompt: fullPrompt,
+                outDir,
+                filenameHint: args.filename,
+                index: i,
+                signal,
+            })));
+            const saved = generations.filter((g) => typeof g === "string");
+            const failures = generations.length - saved.length;
+            if (saved.length === 0) {
+                return jsonResult({
+                    action,
+                    provider: "openrouter",
+                    model,
+                    count: 0,
+                    ok: false,
+                    message: `Generation with ${model} returned no images` +
+                        " — the model may not support image output (use action:list), or the request was refused. Do not retry more than once.",
+                });
+            }
+            const lines = [
+                `Generated ${saved.length} image${saved.length === 1 ? "" : "s"} with openrouter/${model}.`,
+                ...(failures > 0 ? [`Warning: ${failures} of ${count} generations failed.`] : []),
+                // Show the actual saved paths so the model does not invent a bogus
+                // local path when it references the generated image in a follow-up.
+                ...saved.map((p) => `MEDIA:${p}`),
+                "Deliver with send_media({path}) — generation does not auto-send.",
+            ];
+            return {
+                content: [{ type: "text", text: lines.join("\n") }],
+                details: {
+                    action,
+                    provider: "openrouter",
+                    model,
+                    count: saved.length,
+                    paths: saved,
+                    ok: true,
+                },
+            };
+        },
+    };
+}
+/* ───────────────────────── provider plumbing ───────────────────────── */
+/**
+ * Resolve the OpenRouter API key the same way the agent kernel does:
+ * auth-profiles first (direct key or env-backed keyRef), then the plain
+ * environment variable as bootstrap fallback.
+ */
+export function resolveOpenRouterApiKey(agentId) {
+    try {
+        const parsed = readProfiles(agentId);
+        for (const profile of Object.values(parsed.profiles ?? {})) {
+            if (profile?.provider !== "openrouter" || profile.type !== "api_key")
+                continue;
+            if (profile.key && profile.key.length > 0)
+                return profile.key;
+            const ref = profile.keyRef;
+            if (typeof ref === "string") {
+                const m = /^\$\{([A-Z_][A-Z0-9_]*)\}$/.exec(ref);
+                if (m?.[1])
+                    return process.env[m[1]] ?? "";
+            }
+            else if (ref?.source === "env" && ref.id) {
+                return process.env[ref.id] ?? "";
+            }
+        }
+    }
+    catch {
+        /* fall through to env */
+    }
+    return process.env.OPENROUTER_API_KEY ?? "";
+}
+function resolveDefaultImageModel() {
+    try {
+        const cfg = loadConfig();
+        const configured = cfg.tools?.imageGeneration?.model;
+        if (typeof configured === "string" && configured.trim())
+            return configured.trim();
+    }
+    catch {
+        /* default below */
+    }
+    return DEFAULT_MODEL;
+}
+async function listImageModels(fetchFn, apiKey, signal) {
+    const res = await fetchFn(`${OPENROUTER_BASE}/models`, {
+        headers: { Authorization: `Bearer ${apiKey}` },
+        signal: withTimeout(signal, REQUEST_TIMEOUT_MS),
+    });
+    if (!res.ok) {
+        throw new Error(`OpenRouter model listing failed: HTTP ${res.status}`);
+    }
+    const body = (await res.json());
+    const out = [];
+    for (const m of body.data ?? []) {
+        if (!m?.id)
+            continue;
+        if (m.architecture?.output_modalities?.includes("image"))
+            out.push(m.id);
+    }
+    return out.sort();
+}
+async function generateOneImage(params) {
+    const { fetchFn, apiKey, model, prompt, outDir, filenameHint, index, signal } = params;
+    let res;
+    try {
+        res = await fetchFn(`${OPENROUTER_BASE}/chat/completions`, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${apiKey}`,
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify({
+                model,
+                messages: [{ role: "user", content: prompt }],
+                modalities: ["image", "text"],
+            }),
+            signal: withTimeout(signal, REQUEST_TIMEOUT_MS),
+        });
+    }
+    catch {
+        return null;
+    }
+    if (!res.ok)
+        return null;
+    let body;
+    try {
+        body = await res.json();
+    }
+    catch {
+        return null;
+    }
+    const urls = extractImageUrls(body);
+    if (urls.length === 0)
+        return null;
+    // One generation request → take the first image it produced.
+    const url = urls[0];
+    const decoded = await materializeImage(fetchFn, url, signal);
+    if (!decoded)
+        return null;
+    const fileName = buildFileName(filenameHint, index, decoded.extension);
+    const outPath = path.join(outDir, fileName);
+    fs.writeFileSync(outPath, decoded.bytes);
+    return outPath;
+}
+/**
+ * Pull image URLs out of every response shape OpenRouter image models emit.
+ * This breadth is the whole point — the production failure dropped a billed
+ * image because a hand-written parser knew only one shape:
+ *   - `choices[0].message.images[]` (canonical: `{type, image_url: {url}}`)
+ *   - content as an ARRAY of parts with `image_url` / `output_image` types
+ *   - a bare data: URL inside a string content (defensive)
+ */
+export function extractImageUrls(body) {
+    const urls = [];
+    const choices = body?.choices;
+    if (!Array.isArray(choices))
+        return urls;
+    for (const choice of choices) {
+        const message = choice?.message;
+        if (!message)
+            continue;
+        if (Array.isArray(message.images)) {
+            for (const image of message.images) {
+                const url = readImageUrl(image);
+                if (url)
+                    urls.push(url);
+            }
+        }
+        const content = message.content;
+        if (Array.isArray(content)) {
+            for (const part of content) {
+                const url = readImageUrl(part);
+                if (url)
+                    urls.push(url);
+            }
+        }
+        else if (typeof content === "string") {
+            const m = /data:image\/[a-z+.-]+;base64,[A-Za-z0-9+/=]+/.exec(content);
+            if (m)
+                urls.push(m[0]);
+        }
+    }
+    return urls;
+}
+/** Read a `{image_url: {url}}` / `{image_url: "..."}` / `{url}` shaped part. */
+function readImageUrl(part) {
+    if (!part || typeof part !== "object")
+        return null;
+    const p = part;
+    if (typeof p.image_url === "string" && p.image_url)
+        return p.image_url;
+    if (p.image_url && typeof p.image_url === "object" && typeof p.image_url.url === "string") {
+        return p.image_url.url;
+    }
+    if (typeof p.url === "string" && p.url)
+        return p.url;
+    if (typeof p.b64_json === "string" && p.b64_json) {
+        return `data:image/png;base64,${p.b64_json}`;
+    }
+    return null;
+}
+async function materializeImage(fetchFn, url, signal) {
+    if (url.startsWith("data:")) {
+        const comma = url.indexOf(",");
+        if (comma === -1)
+            return null;
+        const header = url.slice(0, comma);
+        const mime = /^data:([^;,]+)/.exec(header)?.[1] ?? "image/png";
+        try {
+            return {
+                bytes: Buffer.from(url.slice(comma + 1), "base64"),
+                extension: extensionForMime(mime),
+            };
+        }
+        catch {
+            return null;
+        }
+    }
+    if (/^https?:\/\//.test(url)) {
+        try {
+            const res = await fetchFn(url, { signal: withTimeout(signal, REQUEST_TIMEOUT_MS) });
+            if (!res.ok)
+                return null;
+            const mime = res.headers.get("content-type")?.split(";")[0]?.trim() ?? "image/png";
+            return {
+                bytes: Buffer.from(await res.arrayBuffer()),
+                extension: extensionForMime(mime),
+            };
+        }
+        catch {
+            return null;
+        }
+    }
+    return null;
+}
+function extensionForMime(mime) {
+    switch (mime.toLowerCase()) {
+        case "image/jpeg":
+        case "image/jpg":
+            return "jpg";
+        case "image/webp":
+            return "webp";
+        case "image/gif":
+            return "gif";
+        default:
+            return "png";
+    }
+}
+function buildFileName(hint, index, extension) {
+    const stamp = Date.now().toString(36);
+    const suffix = index > 0 ? `-${index + 1}` : "";
+    const base = hint
+        ? path
+            .basename(hint)
+            .replace(/\.[a-z0-9]+$/i, "")
+            .replace(/[^a-zA-Z0-9._-]/g, "_")
+            .slice(0, 48)
+        : `image-${stamp}`;
+    return `${base}${suffix}.${extension}`;
+}
+/** Compose the caller's signal with a hard per-request timeout. */
+function withTimeout(signal, ms) {
+    const timeoutSignal = AbortSignal.timeout(ms);
+    if (!signal)
+        return timeoutSignal;
+    return AbortSignal.any([signal, timeoutSignal]);
+}
+//# sourceMappingURL=generate-image-tool.js.map

package/dist/agents/tools/generate-image-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-image-tool.js","sourceRoot":"","sources":["../../../src/agents/tools/generate-image-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAE/B,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAC3C,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,eAAe,GAAG,8BAA8B,CAAC;AACvD,0EAA0E;AAC1E,MAAM,kBAAkB,GAAG,OAAO,CAAC;AACnC,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACvC,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;CACN,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE;QAC5D,WAAW,EAAE,oFAAoF;KACjG,CAAC,CACF;IACD,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC,CAAC;IAC/E,KAAK,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EACV,kIAAkI;KACnI,CAAC,CACF;IACD,QAAQ,EAAE,IAAI,CAAC,QAAQ,CACtB,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EACV,6GAA6G;KAC9G,CAAC,CACF;IACD,IAAI,EAAE,IAAI,CAAC,QAAQ,CAClB,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EACV,mGAAmG;KACpG,CAAC,CACF;IACD,WAAW,EAAE,IAAI,CAAC,QAAQ,CACzB,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EACV,qFAAqF;KACtF,CAAC,CACF;IACD,KAAK,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EAAE,2CAA2C,SAAS,0CAA0C;QAC3G,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,SAAS;KAClB,CAAC,CACF;CACD,CAAC,CAAC;AAwBH,MAAM,UAAU,qBAAqB,CACpC,OAAqC,EAAE;IAEvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;IAClF,OAAO;QACN,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,gBAAgB;QACvB,cAAc,EAAE,qBAAqB;QACrC,qEAAqE;QACrE,gEAAgE;QAChE,qCAAqC;QACrC,SAAS,EAAE,IAAI;QACf,WAAW,EAAE;YACZ,qNAAqN;YACrN,iNAAiN;YACjN,0MAA0M;YAC1M,6EAA6E;YAC7E,uFAAuF;SACvF,CAAC,IAAI,CAAC,GAAG,CAAC;QACX,UAAU,EAAE,mBAAmB;QAC/B,OAAO,EAAE,KAAK,EACb,WAAW,EACX,IAAI,EACJ,MAAM,EAC2C,EAAE;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC;YACzC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,OAAO,UAAU,CAAC;oBACjB,MAAM;oBACN,QAAQ,EAAE,YAAY;oBACtB,EAAE,EAAE,KAAK;oBACT,OAAO,EACN,wIAAwI;iBAC1G,CAA0C,CAAC;YAC5E,CAAC;YAED,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC9D,OAAO,UAAU,CAAC;oBACjB,MAAM;oBACN,QAAQ,EAAE,YAAY;oBACtB,MAAM;oBACN,EAAE,EAAE,IAAI;oBACR,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,0BAA0B;iBACpB,CAA0C,CAAC;YAC5E,CAAC;YAED,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACb,OAAO,UAAU,CAAC;oBACjB,MAAM;oBACN,QAAQ,EAAE,YAAY;oBACtB,EAAE,EAAE,KAAK;oBACT,OAAO,EAAE,2CAA2C;iBACrB,CAA0C,CAAC;YAC5E,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;YAC7C,IAAI,WAAW,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9D,OAAO,UAAU,CAAC;oBACjB,MAAM;oBACN,QAAQ,EAAE,YAAY;oBACtB,EAAE,EAAE,KAAK;oBACT,OAAO,EACN,oFAAoF;iBACtD,CAA0C,CAAC;YAC5E,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,wBAAwB,EAAE,CAAC;YAC/D,MAAM,KAAK,GACV,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;gBAC5D,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC1D,CAAC,CAAC,aAAa,CAAC;YAClB,mEAAmE;YACnE,kEAAkE;YAClE,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACvE,IAAI,WAAW;gBAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,WAAW,GAAG,CAAC,CAAC;YAC7D,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;YAEjF,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC7E,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAE1C,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CACpC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACtC,gBAAgB,CAAC;gBAChB,OAAO;gBACP,MAAM;gBACN,KAAK;gBACL,MAAM,EAAE,UAAU;gBAClB,MAAM;gBACN,YAAY,EAAE,IAAI,CAAC,QAAQ;gBAC3B,KAAK,EAAE,CAAC;gBACR,MAAM;aACN,CAAC,CACF,CACD,CAAC;YACF,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;YAC5E,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;YACnD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,UAAU,CAAC;oBACjB,MAAM;oBACN,QAAQ,EAAE,YAAY;oBACtB,KAAK;oBACL,KAAK,EAAE,CAAC;oBACR,EAAE,EAAE,KAAK;oBACT,OAAO,EACN,mBAAmB,KAAK,qBAAqB;wBAC7C,uHAAuH;iBACzF,CAA0C,CAAC;YAC5E,CAAC;YACD,MAAM,KAAK,GAAG;gBACb,aAAa,KAAK,CAAC,MAAM,SAAS,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,oBAAoB,KAAK,GAAG;gBAC3F,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,QAAQ,OAAO,KAAK,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,mEAAmE;gBACnE,oEAAoE;gBACpE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjC,kEAAkE;aAClE,CAAC;YACF,OAAO;gBACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,OAAO,EAAE;oBACR,MAAM;oBACN,QAAQ,EAAE,YAAY;oBACtB,KAAK;oBACL,KAAK,EAAE,KAAK,CAAC,MAAM;oBACnB,KAAK,EAAE,KAAK;oBACZ,EAAE,EAAE,IAAI;iBACR;aACD,CAAC;QACH,CAAC;KACD,CAAC;AACH,CAAC;AAED,2EAA2E;AAE3E;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACtD,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAUlC,CAAC;QACF,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5D,IAAI,OAAO,EAAE,QAAQ,KAAK,YAAY,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;gBAAE,SAAS;YAC/E,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC;YAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;YAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACjD,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;oBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5C,CAAC;iBAAM,IAAI,GAAG,EAAE,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBAC5C,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAClC,CAAC;QACF,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,yBAAyB;IAC1B,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,wBAAwB;IAChC,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,UAAU,EAA2D,CAAC;QAClF,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,CAAC;QACrD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE;YAAE,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACR,mBAAmB;IACpB,CAAC;IACD,OAAO,aAAa,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,eAAe,CAC7B,OAAqB,EACrB,MAAc,EACd,MAAoB;IAEpB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,eAAe,SAAS,EAAE;QACtD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;QAC9C,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,kBAAkB,CAAC;KAC/C,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAE7B,CAAC;IACF,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,EAAE,EAAE;YAAE,SAAS;QACrB,IAAI,CAAC,CAAC,YAAY,EAAE,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,MAS/B;IACA,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACvF,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACJ,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,eAAe,mBAAmB,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,cAAc,EAAE,kBAAkB;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACpB,KAAK;gBACL,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;gBAC7C,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;aAC7B,CAAC;YACF,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,kBAAkB,CAAC;SAC/C,CAAC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACJ,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,6DAA6D;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;IACrB,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,QAAQ,GAAG,aAAa,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5C,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC7C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAI,IAAuC,EAAE,OAAO,CAAC;IAClE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAI,MAAuC,EAAE,OAK9C,CAAC;QACb,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACpC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBAChC,IAAI,GAAG;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACF,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,GAAG;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC;QACF,CAAC;aAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,CAAC,GAAG,8CAA8C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvE,IAAI,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,gFAAgF;AAChF,SAAS,YAAY,CAAC,IAAa;IAClC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,CAAC,GAAG,IAAqF,CAAC;IAChG,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS;QAAE,OAAO,CAAC,CAAC,SAAS,CAAC;IACvE,IAAI,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC3F,OAAO,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC;IACrD,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClD,OAAO,yBAAyB,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC9B,OAAqB,EACrB,GAAW,EACX,MAAoB;IAEpB,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC;QAC/D,IAAI,CAAC;YACJ,OAAO;gBACN,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC;gBAClD,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC;aACjC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IACD,IAAI,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC;YACpF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,WAAW,CAAC;YACnF,OAAO;gBACN,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC3C,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC;aACjC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACrC,QAAQ,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,KAAK,YAAY,CAAC;QAClB,KAAK,WAAW;YACf,OAAO,KAAK,CAAC;QACd,KAAK,YAAY;YAChB,OAAO,MAAM,CAAC;QACf,KAAK,WAAW;YACf,OAAO,KAAK,CAAC;QACd;YACC,OAAO,KAAK,CAAC;IACf,CAAC;AACF,CAAC;AAED,SAAS,aAAa,CAAC,IAAwB,EAAE,KAAa,EAAE,SAAiB;IAChF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI;QAChB,CAAC,CAAC,IAAI;aACH,QAAQ,CAAC,IAAI,CAAC;aACd,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;aAC5B,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC;aAChC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACf,CAAC,CAAC,SAAS,KAAK,EAAE,CAAC;IACpB,OAAO,GAAG,IAAI,GAAG,MAAM,IAAI,SAAS,EAAE,CAAC;AACxC,CAAC;AAED,mEAAmE;AACnE,SAAS,WAAW,CAAC,MAA+B,EAAE,EAAU;IAC/D,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM;QAAE,OAAO,aAAa,CAAC;IAClC,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC;AACjD,CAAC"}

package/dist/agents/tools/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Brigade tool framework — public entry point.
+ *
+ * Re-exports the types, helpers, and registry that tool authors and
+ * the agent runtime need. Primitives #4-6 will add tool implementations
+ * (`write_memory`, `recall_memory`, `spawn_agent`) as siblings of this
+ * file; they are NOT re-exported here so the public surface stays
+ * narrow until those primitives stabilise.
+ */
+export type { AgentToolResult, AgentToolUpdateCallback, AnyBrigadeTool, BrigadeTool, } from "./types.js";
+export { BrigadeToolAuthorizationError, BrigadeToolInputError, OWNER_ONLY_TOOL_ERROR, failedTextResult, jsonResult, payloadTextResult, readBooleanParam, readNumberParam, readStringArrayParam, readStringParam, stringifyToolPayload, textResult, } from "./common.js";
+export type { NumberParamOptions, StringParamOptions, } from "./common.js";
+export { createBrigadeTools, listBrigadeToolNames, type CreateBrigadeToolsOptions, } from "./registry.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/agents/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/agents/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,YAAY,EACX,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,WAAW,GACX,MAAM,YAAY,CAAC;AAEpB,OAAO,EACN,6BAA6B,EAC7B,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,UAAU,GACV,MAAM,aAAa,CAAC;AACrB,YAAY,EACX,kBAAkB,EAClB,kBAAkB,GAClB,MAAM,aAAa,CAAC;AAErB,OAAO,EACN,kBAAkB,EAClB,oBAAoB,EACpB,KAAK,yBAAyB,GAC9B,MAAM,eAAe,CAAC"}

package/dist/agents/tools/index.js

@@ -0,0 +1,12 @@
+/**
+ * Brigade tool framework — public entry point.
+ *
+ * Re-exports the types, helpers, and registry that tool authors and
+ * the agent runtime need. Primitives #4-6 will add tool implementations
+ * (`write_memory`, `recall_memory`, `spawn_agent`) as siblings of this
+ * file; they are NOT re-exported here so the public surface stays
+ * narrow until those primitives stabilise.
+ */
+export { BrigadeToolAuthorizationError, BrigadeToolInputError, OWNER_ONLY_TOOL_ERROR, failedTextResult, jsonResult, payloadTextResult, readBooleanParam, readNumberParam, readStringArrayParam, readStringParam, stringifyToolPayload, textResult, } from "./common.js";
+export { createBrigadeTools, listBrigadeToolNames, } from "./registry.js";
+//# sourceMappingURL=index.js.map

package/dist/agents/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/agents/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,OAAO,EACN,6BAA6B,EAC7B,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,oBAAoB,EACpB,UAAU,GACV,MAAM,aAAa,CAAC;AAMrB,OAAO,EACN,kBAAkB,EAClB,oBAAoB,GAEpB,MAAM,eAAe,CAAC"}

package/dist/agents/tools/manage-access-tool.d.ts

@@ -0,0 +1,64 @@
+/**
+ * `manage_access` tool — owner-only agent-to-agent access control.
+ *
+ * Why this tool exists (production, 2026-06-11)
+ * ---------------------------------------------
+ * Asked to message another agent, the model correctly found A2A blocked,
+ * then had NO sanctioned way to change the knobs that gate it
+ * (`session.sessionTools.visibility`, `session.agentToAgent.enabled/allow`,
+ * `org.a2a.mode`). The `org` tool only edits department/reportsTo/role/bio;
+ * `manage_agent` only does agents. So the model fell back to "hand-edit
+ * brigade.json" — which the path-write / config-write guards correctly
+ * refuse. The result: blocked both ways, dead end. This tool closes that
+ * gap with the SAME atomic-config write the org/manage_agent tools use, so
+ * "let main message marketing-lead" is one validated call instead of an
+ * impossible hand-edit.
+ *
+ * Owner-only by design: only an operator-driven turn can widen who-can-talk-
+ * to-whom; a channel peer can never escalate its own reach. The model should
+ * call this ONLY when the operator explicitly asks to change A2A access, and
+ * should report exactly what changed (like `manage_provider`).
+ *
+ * The three knobs and how they interact (cross-agent `sessions_send`):
+ *   - `visibility` (session.sessionTools.visibility): "self" (default) hides
+ *     other agents' sessions entirely; "all" is required for ANY cross-agent
+ *     reach. The first gate.
+ *   - `a2aEnabled` (session.agentToAgent.enabled): the second gate. With it
+ *     off, cross-agent send is refused even under visibility "all".
+ *   - `a2aMode` (org.a2a.mode, only when an org is configured): "derived"
+ *     (default) restricts reach to org-graph edges (escalate up / assign
+ *     down / same-dept / top↔all); "explicit" ignores the graph and uses the
+ *     flat `agentToAgent.allow` matrix; "open" = everyone↔everyone. A
+ *     non-org orchestrator like `main` that isn't a graph member can only
+ *     reach others under "explicit" (+ an allow rule) or "open".
+ */
+import { Type } from "typebox";
+import type { BrigadeTool } from "./types.js";
+declare const ManageAccessParams: Type.TObject<{
+    action: Type.TUnion<[Type.TLiteral<"show">, Type.TLiteral<"set">]>;
+    visibility: Type.TOptional<Type.TUnion<Type.TLiteral<"all" | "agent" | "self" | "tree">[]>>;
+    a2aEnabled: Type.TOptional<Type.TBoolean>;
+    a2aMode: Type.TOptional<Type.TUnion<Type.TLiteral<"open" | "explicit" | "derived">[]>>;
+    allowAll: Type.TOptional<Type.TBoolean>;
+}>;
+interface AccessSnapshot {
+    visibility: string;
+    a2aEnabled: boolean;
+    a2aAllow: Array<{
+        from: string;
+        to: string;
+    }>;
+    orgConfigured: boolean;
+    a2aMode: string | null;
+}
+interface ManageAccessResult {
+    action: "show" | "set";
+    ok: boolean;
+    message: string;
+    before?: AccessSnapshot;
+    after?: AccessSnapshot;
+    settings?: AccessSnapshot;
+}
+export declare function makeManageAccessTool(): BrigadeTool<typeof ManageAccessParams, ManageAccessResult>;
+export {};
+//# sourceMappingURL=manage-access-tool.d.ts.map

package/dist/agents/tools/manage-access-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-access-tool.d.ts","sourceRoot":"","sources":["../../../src/agents/tools/manage-access-tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAK/B,OAAO,KAAK,EAAmB,WAAW,EAAE,MAAM,YAAY,CAAC;AAM/D,QAAA,MAAM,kBAAkB;;;;;;EAkCtB,CAAC;AAEH,UAAU,cAAc;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9C,aAAa,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,UAAU,kBAAkB;IAC3B,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;IACvB,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED,wBAAgB,oBAAoB,IAAI,WAAW,CAClD,OAAO,kBAAkB,EACzB,kBAAkB,CAClB,CAiHA"}