@studio-foundation/api 0.3.0-beta.1

package/dist/routes/tools.js

@@ -0,0 +1,193 @@
+import { readdir, readFile, writeFile, unlink, mkdir, access } from 'node:fs/promises';
+import { join } from 'node:path';
+import yaml from 'js-yaml';
+import { BUILTIN_TOOL_NAMES, listAvailableToolTemplates, getBundledToolTemplate, } from '@studio-foundation/runner';
+function toolPath(configsDir, name) {
+    return join(configsDir, 'tools', `${name}.tool.yaml`);
+}
+async function isCustomTool(configsDir, name) {
+    try {
+        await access(toolPath(configsDir, name));
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function toolsRoutes(fastify, options) {
+    const { configsDir } = options.deps;
+    const errorSchema = { type: 'object', properties: { error: { type: 'string' } } };
+    // GET /api/tools — list builtins + custom
+    fastify.get('/tools', {
+        schema: {
+            tags: ['tools'],
+            summary: 'List all available tools (builtins + custom)',
+            response: {
+                200: {
+                    type: 'object',
+                    properties: {
+                        tools: {
+                            type: 'array',
+                            items: {
+                                type: 'object',
+                                properties: {
+                                    name: { type: 'string' },
+                                    description: { type: 'string' },
+                                    is_builtin: { type: 'boolean' },
+                                },
+                            },
+                        },
+                    },
+                },
+            },
+        },
+    }, async (_request, reply) => {
+        const toolsList = [];
+        // Builtins from bundled templates (skip if overridden by a custom file)
+        const available = await listAvailableToolTemplates();
+        for (const t of available) {
+            const overridden = await isCustomTool(configsDir, t.name);
+            if (!overridden) {
+                toolsList.push({ name: t.name, description: t.description, is_builtin: true });
+            }
+        }
+        // Custom tools from .studio/tools/
+        const toolsDir = join(configsDir, 'tools');
+        let entries = [];
+        try {
+            entries = await readdir(toolsDir);
+        }
+        catch {
+            // dir doesn't exist — no custom tools
+        }
+        for (const file of entries.filter(f => f.endsWith('.tool.yaml'))) {
+            const name = file.replace('.tool.yaml', '');
+            const content = await readFile(join(toolsDir, file), 'utf-8');
+            const def = yaml.load(content);
+            const isBuiltin = BUILTIN_TOOL_NAMES.has(name);
+            toolsList.push({ name, description: def.description ?? '', is_builtin: isBuiltin });
+        }
+        return reply.send({ tools: toolsList });
+    });
+    // GET /api/tools/:name — read a tool definition
+    fastify.get('/tools/:name', {
+        schema: {
+            tags: ['tools'],
+            summary: 'Get a tool definition by name',
+            params: { type: 'object', properties: { name: { type: 'string' } }, required: ['name'] },
+            response: {
+                200: { type: 'object', additionalProperties: true },
+                404: errorSchema,
+            },
+        },
+    }, async (request, reply) => {
+        const { name } = request.params;
+        // Custom tool takes priority
+        if (await isCustomTool(configsDir, name)) {
+            const content = await readFile(toolPath(configsDir, name), 'utf-8');
+            const parsed = yaml.load(content);
+            return reply.send({ ...parsed, is_builtin: BUILTIN_TOOL_NAMES.has(name) });
+        }
+        // Fall back to bundled builtin template
+        const template = await getBundledToolTemplate(name);
+        if (template) {
+            const parsed = yaml.load(template);
+            return reply.send({ ...parsed, is_builtin: true });
+        }
+        return reply.status(404).send({ error: `Tool '${name}' not found` });
+    });
+    // PUT /api/tools/:name — create or update a custom tool
+    fastify.put('/tools/:name', {
+        schema: {
+            tags: ['tools'],
+            summary: 'Create or update a custom tool (YAML text or JSON body)',
+            params: { type: 'object', properties: { name: { type: 'string' } }, required: ['name'] },
+            body: { oneOf: [{ type: 'object', additionalProperties: true }, { type: 'string' }] },
+            response: {
+                200: { type: 'object', properties: { name: { type: 'string' } } },
+                400: errorSchema,
+            },
+        },
+    }, async (request, reply) => {
+        const { name } = request.params;
+        const contentType = request.headers['content-type'] ?? '';
+        let yamlContent;
+        if (contentType.includes('application/json')) {
+            yamlContent = yaml.dump(request.body);
+        }
+        else {
+            yamlContent = request.body;
+        }
+        try {
+            yaml.load(yamlContent);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : 'Invalid YAML';
+            return reply.status(400).send({ error: message });
+        }
+        await mkdir(join(configsDir, 'tools'), { recursive: true });
+        await writeFile(toolPath(configsDir, name), yamlContent, 'utf-8');
+        return reply.send({ name });
+    });
+    // DELETE /api/tools/:name — delete a custom tool (403 for builtins not overridden)
+    fastify.delete('/tools/:name', {
+        schema: {
+            tags: ['tools'],
+            summary: 'Delete a custom tool',
+            params: { type: 'object', properties: { name: { type: 'string' } }, required: ['name'] },
+            response: {
+                200: { type: 'object', properties: { deleted: { type: 'string' } } },
+                403: errorSchema,
+                404: errorSchema,
+            },
+        },
+    }, async (request, reply) => {
+        const { name } = request.params;
+        // 403 if builtin with no custom override file
+        if (BUILTIN_TOOL_NAMES.has(name) && !(await isCustomTool(configsDir, name))) {
+            return reply.status(403).send({ error: `Cannot delete builtin tool '${name}'` });
+        }
+        try {
+            await unlink(toolPath(configsDir, name));
+        }
+        catch {
+            return reply.status(404).send({ error: `Tool '${name}' not found` });
+        }
+        return reply.send({ deleted: name });
+    });
+    // POST /api/tools/install — install from the bundled registry
+    fastify.post('/tools/install', {
+        schema: {
+            tags: ['tools'],
+            summary: 'Install a tool from the bundled registry',
+            body: {
+                type: 'object',
+                properties: { name: { type: 'string' } },
+                required: ['name'],
+            },
+            response: {
+                200: { type: 'object', properties: { installed: { type: 'string' } } },
+                404: errorSchema,
+                409: errorSchema,
+            },
+        },
+    }, async (request, reply) => {
+        const { name } = request.body;
+        const template = await getBundledToolTemplate(name);
+        if (!template) {
+            const available = await listAvailableToolTemplates();
+            return reply.status(404).send({
+                error: `Tool '${name}' not found in registry. Available: ${available.map(t => t.name).join(', ')}`,
+            });
+        }
+        const destPath = toolPath(configsDir, name);
+        const alreadyInstalled = await access(destPath).then(() => true).catch(() => false);
+        if (alreadyInstalled) {
+            return reply.status(409).send({ error: `Tool '${name}' is already installed` });
+        }
+        await mkdir(join(configsDir, 'tools'), { recursive: true });
+        await writeFile(destPath, template, 'utf-8');
+        return reply.send({ installed: name });
+    });
+}
+//# sourceMappingURL=tools.js.map

package/dist/routes/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/routes/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,SAAS,CAAC;AAG3B,OAAO,EACL,kBAAkB,EAClB,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AAEnC,SAAS,QAAQ,CAAC,UAAkB,EAAE,IAAY;IAChD,OAAO,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,YAAY,CAAC,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,UAAkB,EAAE,IAAY;IAC1D,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAwB,EACxB,OAA6B;IAE7B,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IACpC,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAElF,0CAA0C;IAC1C,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE;QACpB,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,8CAA8C;YACvD,QAAQ,EAAE;gBACR,GAAG,EAAE;oBACH,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,KAAK,EAAE;4BACL,IAAI,EAAE,OAAO;4BACb,KAAK,EAAE;gCACL,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oCACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oCAC/B,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;iCAChC;6BACF;yBACF;qBACF;iBACF;aACF;SACF;KACF,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC3B,MAAM,SAAS,GAAiE,EAAE,CAAC;QAEnF,wEAAwE;QACxE,MAAM,SAAS,GAAG,MAAM,0BAA0B,EAAE,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAED,mCAAmC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,OAAO,GAAa,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAA6B,CAAC;YAC3D,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC/C,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QACtF,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,gDAAgD;IAChD,OAAO,CAAC,GAAG,CAA+B,cAAc,EAAE;QACxD,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,+BAA+B;YACxC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE;YACxF,QAAQ,EAAE;gBACR,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE;gBACnD,GAAG,EAAE,WAAW;aACjB;SACF;KACF,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC1B,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAEhC,6BAA6B;QAC7B,IAAI,MAAM,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YACpE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAA4B,CAAC;YAC7D,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,wCAAwC;QACxC,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAA4B,CAAC;YAC9D,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,aAAa,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,wDAAwD;IACxD,OAAO,CAAC,GAAG,CACT,cAAc,EACd;QACE,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,yDAAyD;YAClE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE;YACxF,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE;YACrF,QAAQ,EAAE;gBACR,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;gBACjE,GAAG,EAAE,WAAW;aACjB;SACF;KACF,EACD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAChC,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAE1D,IAAI,WAAmB,CAAC;QACxB,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC7C,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,WAAW,GAAG,OAAO,CAAC,IAAc,CAAC;QACvC,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;YACpE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAClE,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CACF,CAAC;IAEF,mFAAmF;IACnF,OAAO,CAAC,MAAM,CAA+B,cAAc,EAAE;QAC3D,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,sBAAsB;YAC/B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE;YACxF,QAAQ,EAAE;gBACR,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;gBACpE,GAAG,EAAE,WAAW;gBAChB,GAAG,EAAE,WAAW;aACjB;SACF;KACF,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC1B,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAEhC,8CAA8C;QAC9C,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YAC5E,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,IAAI,GAAG,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,aAAa,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,8DAA8D;IAC9D,OAAO,CAAC,IAAI,CAA6B,gBAAgB,EAAE;QACzD,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,0CAA0C;YACnD,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;gBACxC,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;YACD,QAAQ,EAAE;gBACR,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;gBACtE,GAAG,EAAE,WAAW;gBAChB,GAAG,EAAE,WAAW;aACjB;SACF;KACF,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC1B,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;QAE9B,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,SAAS,GAAG,MAAM,0BAA0B,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC5B,KAAK,EAAE,SAAS,IAAI,uCAAuC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACnG,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,gBAAgB,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACpF,IAAI,gBAAgB,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,wBAAwB,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/routes/users.d.ts

@@ -0,0 +1,6 @@
+import type { FastifyInstance } from 'fastify';
+import type { ServerDeps } from '../server.js';
+export declare function usersRoutes(fastify: FastifyInstance, options: {
+    deps: ServerDeps;
+}): Promise<void>;
+//# sourceMappingURL=users.d.ts.map

package/dist/routes/users.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/routes/users.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAmC/C,wBAAsB,WAAW,CAC/B,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GAC5B,OAAO,CAAC,IAAI,CAAC,CA+Hf"}

package/dist/routes/users.js

@@ -0,0 +1,152 @@
+// api/src/routes/users.ts
+import { randomUUID, randomBytes } from 'node:crypto';
+const errorSchema = { type: 'object', properties: { error: { type: 'string' } } };
+const userSchema = {
+    type: 'object',
+    properties: {
+        id: { type: 'string' },
+        email: { type: 'string' },
+        plan: { type: 'string' },
+        created_at: { type: 'string' },
+    },
+};
+const userWithKeySchema = {
+    ...userSchema,
+    properties: { ...userSchema.properties, api_key: { type: 'string' } },
+};
+const todayUsageSchema = {
+    type: 'object',
+    properties: {
+        runs_count: { type: 'number' },
+        tokens_used: { type: 'number' },
+    },
+};
+const userWithUsageSchema = {
+    type: 'object',
+    properties: {
+        ...userSchema.properties,
+        today_usage: todayUsageSchema,
+    },
+};
+export async function usersRoutes(fastify, options) {
+    const { userStore } = options.deps;
+    if (!userStore)
+        return; // no-op if userStore not configured
+    // POST /api/users — create a user
+    fastify.post('/users', {
+        schema: {
+            tags: ['users'],
+            summary: 'Create a new user',
+            body: {
+                type: 'object',
+                required: ['email'],
+                properties: {
+                    email: { type: 'string', format: 'email' },
+                    plan: { type: 'string', default: 'free' },
+                },
+            },
+            response: {
+                201: userWithKeySchema,
+                400: errorSchema,
+                409: errorSchema,
+            },
+        },
+    }, async (request, reply) => {
+        const { email, plan = 'free' } = request.body;
+        const apiKey = randomBytes(32).toString('hex');
+        const user = {
+            id: randomUUID(),
+            email,
+            plan,
+            api_key: apiKey,
+            created_at: new Date().toISOString(),
+        };
+        try {
+            await userStore.saveUser(user);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            if (msg.includes('UNIQUE constraint failed: users.email')) {
+                return reply.status(409).send({ error: 'Email already in use' });
+            }
+            throw err;
+        }
+        return reply.status(201).send(user);
+    });
+    // GET /api/users — list users (no api_key exposed)
+    fastify.get('/users', {
+        schema: {
+            tags: ['users'],
+            summary: 'List all users',
+            response: {
+                200: { type: 'array', items: userSchema },
+            },
+        },
+    }, async (_request, reply) => {
+        const users = await userStore.listUsers();
+        return reply.send(users.map(({ api_key: _k, ...u }) => u));
+    });
+    // GET /api/users/me — current user + today usage
+    fastify.get('/users/me', {
+        schema: {
+            tags: ['users'],
+            summary: 'Get current authenticated user',
+            response: {
+                200: userWithUsageSchema,
+                401: errorSchema,
+            },
+        },
+    }, async (request, reply) => {
+        if (!request.user)
+            return reply.status(401).send({ error: 'Unauthorized' });
+        const today = new Date().toISOString().slice(0, 10);
+        const usage = await userStore.getDailyUsage(request.user.id, today);
+        const { api_key: _k, ...userWithoutKey } = request.user;
+        return reply.send({
+            ...userWithoutKey,
+            today_usage: { runs_count: usage.runs_count, tokens_used: usage.tokens_used },
+        });
+    });
+    // GET /api/users/:id — user detail + today usage
+    fastify.get('/users/:id', {
+        schema: {
+            tags: ['users'],
+            summary: 'Get a user by ID',
+            params: { type: 'object', properties: { id: { type: 'string' } }, required: ['id'] },
+            response: {
+                200: userWithUsageSchema,
+                404: errorSchema,
+            },
+        },
+    }, async (request, reply) => {
+        const user = await userStore.getUserById(request.params.id);
+        if (!user)
+            return reply.status(404).send({ error: 'User not found' });
+        const today = new Date().toISOString().slice(0, 10);
+        const usage = await userStore.getDailyUsage(user.id, today);
+        const { api_key: _k, ...userWithoutKey } = user;
+        return reply.send({
+            ...userWithoutKey,
+            today_usage: { runs_count: usage.runs_count, tokens_used: usage.tokens_used },
+        });
+    });
+    // DELETE /api/users/:id
+    fastify.delete('/users/:id', {
+        schema: {
+            tags: ['users'],
+            summary: 'Delete a user',
+            params: { type: 'object', properties: { id: { type: 'string' } }, required: ['id'] },
+            response: {
+                204: { type: 'null', description: 'No content' },
+                404: errorSchema,
+            },
+        },
+    }, async (request, reply) => {
+        const user = await userStore.getUserById(request.params.id);
+        if (!user)
+            return reply.status(404).send({ error: 'User not found' });
+        await userStore.deleteUser(request.params.id);
+        return reply.status(204).send();
+    });
+}
+//# sourceMappingURL=users.js.map

package/dist/routes/users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/routes/users.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAItD,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAElF,MAAM,UAAU,GAAG;IACjB,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACtB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC/B;CACF,CAAC;AAEF,MAAM,iBAAiB,GAAG;IACxB,GAAG,UAAU;IACb,UAAU,EAAE,EAAE,GAAG,UAAU,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;CACtE,CAAC;AAEF,MAAM,gBAAgB,GAAG;IACvB,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC9B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;CACF,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC1B,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,GAAG,UAAU,CAAC,UAAU;QACxB,WAAW,EAAE,gBAAgB;KAC9B;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAwB,EACxB,OAA6B;IAE7B,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IACnC,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,oCAAoC;IAE5D,kCAAkC;IAClC,OAAO,CAAC,IAAI,CAA6C,QAAQ,EAAE;QACjE,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,mBAAmB;YAC5B,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,OAAO,CAAC;gBACnB,UAAU,EAAE;oBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE;oBAC1C,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE;iBAC1C;aACF;YACD,QAAQ,EAAE;gBACR,GAAG,EAAE,iBAAiB;gBACtB,GAAG,EAAE,WAAW;gBAChB,GAAG,EAAE,WAAW;aACjB;SACF;KACF,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC1B,MAAM,EAAE,KAAK,EAAE,IAAI,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;QAE9C,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG;YACX,EAAE,EAAE,UAAU,EAAE;YAChB,KAAK;YACL,IAAI;YACJ,OAAO,EAAE,MAAM;YACf,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,uCAAuC,CAAC,EAAE,CAAC;gBAC1D,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,mDAAmD;IACnD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE;QACpB,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,gBAAgB;YACzB,QAAQ,EAAE;gBACR,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE;aAC1C;SACF;KACF,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,iDAAiD;IACjD,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE;QACvB,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,gCAAgC;YACzC,QAAQ,EAAE;gBACR,GAAG,EAAE,mBAAmB;gBACxB,GAAG,EAAE,WAAW;aACjB;SACF;KACF,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC1B,IAAI,CAAC,OAAO,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAE5E,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACpE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;QAExD,OAAO,KAAK,CAAC,IAAI,CAAC;YAChB,GAAG,cAAc;YACjB,WAAW,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;SAC9E,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,iDAAiD;IACjD,OAAO,CAAC,GAAG,CAA6B,YAAY,EAAE;QACpD,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,kBAAkB;YAC3B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE;YACpF,QAAQ,EAAE;gBACR,GAAG,EAAE,mBAAmB;gBACxB,GAAG,EAAE,WAAW;aACjB;SACF;KACF,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAEtE,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5D,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,cAAc,EAAE,GAAG,IAAI,CAAC;QAEhD,OAAO,KAAK,CAAC,IAAI,CAAC;YAChB,GAAG,cAAc;YACjB,WAAW,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;SAC9E,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,wBAAwB;IACxB,OAAO,CAAC,MAAM,CAA6B,YAAY,EAAE;QACvD,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE;YACpF,QAAQ,EAAE;gBACR,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE;gBAChD,GAAG,EAAE,WAAW;aACjB;SACF;KACF,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAEtE,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/routes/validate.d.ts

@@ -0,0 +1,6 @@
+import type { FastifyInstance } from 'fastify';
+import type { ServerDeps } from '../server.js';
+export declare function validateRoutes(fastify: FastifyInstance, options: {
+    deps: ServerDeps;
+}): Promise<void>;
+//# sourceMappingURL=validate.d.ts.map

package/dist/routes/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/routes/validate.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAmF/C,wBAAsB,cAAc,CAClC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GAC5B,OAAO,CAAC,IAAI,CAAC,CAyGf"}

package/dist/routes/validate.js

@@ -0,0 +1,171 @@
+import { readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import yaml from 'js-yaml';
+import { createRepoManagerTools, createShellTools, createSearchTools, createPatchTools, createGitTools, } from '@studio-foundation/runner';
+// Derived at module load from the actual factory functions — single source of truth.
+// Using '.' as a dummy repoPath: only `execute` uses the path, `name` is hardcoded.
+const BUILTIN_TOOL_ACTIONS = new Set([
+    ...createRepoManagerTools('.').map(t => t.name),
+    ...createShellTools('.').map(t => t.name),
+    ...createSearchTools('.').map(t => t.name),
+    ...createPatchTools('.').map(t => t.name),
+    ...createGitTools('.').map(t => t.name),
+]);
+async function listNames(dir, suffix) {
+    try {
+        const entries = await readdir(dir);
+        return new Set(entries
+            .filter(f => f.endsWith(suffix))
+            .map(f => f.slice(0, -suffix.length)));
+    }
+    catch {
+        return new Set();
+    }
+}
+/**
+ * Read tool plugin YAMLs and return the `name` field from each.
+ * Falls back to the filename stem if the YAML cannot be parsed.
+ */
+async function listToolPluginNames(dir) {
+    try {
+        const { readFile } = await import('node:fs/promises');
+        const entries = await readdir(dir);
+        const names = new Set();
+        await Promise.all(entries
+            .filter(f => f.endsWith('.tool.yaml'))
+            .map(async (f) => {
+            try {
+                const raw = await readFile(join(dir, f), 'utf-8');
+                const parsed = yaml.load(raw);
+                const name = parsed && typeof parsed.name === 'string'
+                    ? parsed.name
+                    : f.slice(0, -'.tool.yaml'.length);
+                names.add(name);
+            }
+            catch {
+                names.add(f.slice(0, -'.tool.yaml'.length));
+            }
+        }));
+        return names;
+    }
+    catch {
+        return new Set();
+    }
+}
+function collectStageRefs(stage) {
+    const agents = [];
+    const contracts = [];
+    if (typeof stage.agent === 'string')
+        agents.push(stage.agent);
+    if (typeof stage.contract === 'string')
+        contracts.push(stage.contract);
+    // Recurse into group stages
+    if (Array.isArray(stage.stages)) {
+        for (const s of stage.stages) {
+            if (s && typeof s === 'object' && !Array.isArray(s)) {
+                const inner = collectStageRefs(s);
+                agents.push(...inner.agents);
+                contracts.push(...inner.contracts);
+            }
+        }
+    }
+    return { agents, contracts };
+}
+export async function validateRoutes(fastify, options) {
+    const { configsDir } = options.deps;
+    const errorSchema = { type: 'object', properties: { error: { type: 'string' } } };
+    fastify.post('/validate', {
+        schema: {
+            tags: ['validate'],
+            summary: 'Validate a Studio config for structural coherence',
+            body: {
+                type: 'object',
+                required: ['type', 'content'],
+                properties: {
+                    type: {
+                        type: 'string',
+                        enum: ['pipeline', 'contract', 'agent', 'tool', 'skill'],
+                    },
+                    name: { type: 'string' },
+                    content: { type: 'string' },
+                },
+            },
+            response: {
+                200: {
+                    type: 'object',
+                    properties: {
+                        valid: { type: 'boolean' },
+                        errors: { type: 'array', items: { type: 'string' } },
+                    },
+                    required: ['valid', 'errors'],
+                },
+                400: errorSchema,
+            },
+        },
+    }, async (request, reply) => {
+        const { type, content } = request.body;
+        const errors = [];
+        // Skills are markdown — just check non-empty
+        if (type === 'skill') {
+            if (!content.trim())
+                errors.push('Skill content is empty');
+            return reply.send({ valid: errors.length === 0, errors });
+        }
+        // Parse YAML
+        let parsed;
+        try {
+            parsed = yaml.load(content);
+        }
+        catch (e) {
+            errors.push(`YAML parse error: ${e instanceof Error ? e.message : String(e)}`);
+            return reply.send({ valid: false, errors });
+        }
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+            errors.push('Content must be a YAML object');
+            return reply.send({ valid: false, errors });
+        }
+        const obj = parsed;
+        if (type === 'pipeline') {
+            const stages = obj.stages;
+            if (!Array.isArray(stages)) {
+                errors.push('Pipeline must have a "stages" array');
+                return reply.send({ valid: false, errors });
+            }
+            const [agentNames, contractNames] = await Promise.all([
+                listNames(join(configsDir, 'agents'), '.agent.yaml'),
+                listNames(join(configsDir, 'contracts'), '.contract.yaml'),
+            ]);
+            for (const stage of stages) {
+                if (!stage || typeof stage !== 'object' || Array.isArray(stage))
+                    continue;
+                const { agents: refs_a, contracts: refs_c } = collectStageRefs(stage);
+                for (const agent of refs_a) {
+                    if (!agentNames.has(agent))
+                        errors.push(`Agent '${agent}' not found`);
+                }
+                for (const contract of refs_c) {
+                    if (!contractNames.has(contract))
+                        errors.push(`Contract '${contract}' not found`);
+                }
+            }
+        }
+        if (type === 'agent') {
+            const toolsUsed = obj.tools;
+            if (Array.isArray(toolsUsed)) {
+                const customPlugins = await listToolPluginNames(join(configsDir, 'tools'));
+                for (const tool of toolsUsed) {
+                    if (typeof tool !== 'string')
+                        continue;
+                    // Custom tool actions follow <plugin>-<action> naming (e.g. claude_code-run
+                    // from claude_code.tool.yaml). Match if any plugin name is a prefix.
+                    const isCustom = [...customPlugins].some(p => tool === p || tool.startsWith(p + '-'));
+                    if (!BUILTIN_TOOL_ACTIONS.has(tool) && !isCustom) {
+                        errors.push(`Tool '${tool}' not found`);
+                    }
+                }
+            }
+        }
+        return reply.send({ valid: errors.length === 0, errors });
+    });
+}
+//# sourceMappingURL=validate.js.map

package/dist/routes/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/routes/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,SAAS,CAAC;AAG3B,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,cAAc,GACf,MAAM,2BAA2B,CAAC;AAEnC,qFAAqF;AACrF,oFAAoF;AACpF,MAAM,oBAAoB,GAAgB,IAAI,GAAG,CAAC;IAChD,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;CACxC,CAAC,CAAC;AAEH,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,MAAc;IAClD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,OAAO,IAAI,GAAG,CACZ,OAAO;aACJ,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CACxC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,mBAAmB,CAAC,GAAW;IAC5C,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,MAAM,OAAO,CAAC,GAAG,CACf,OAAO;aACJ,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;aACrC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAmC,CAAC;gBAChE,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;oBACpD,CAAC,CAAC,MAAM,CAAC,IAAI;oBACb,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBACrC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC,CAAC,CACL,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAID,SAAS,gBAAgB,CAAC,KAA8B;IACtD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9D,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvE,4BAA4B;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpD,MAAM,KAAK,GAAG,gBAAgB,CAAC,CAA4B,CAAC,CAAC;gBAC7D,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC7B,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAwB,EACxB,OAA6B;IAE7B,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAEpC,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAElF,OAAO,CAAC,IAAI,CAET,WAAW,EAAE;QACd,MAAM,EAAE;YACN,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,OAAO,EAAE,mDAAmD;YAC5D,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;gBAC7B,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC;qBACzD;oBACD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC5B;aACF;YACD,QAAQ,EAAE;gBACR,GAAG,EAAE;oBACH,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;wBAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;qBACrD;oBACD,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;iBAC9B;gBACD,GAAG,EAAE,WAAW;aACjB;SACF;KACF,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC1B,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;QACvC,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,6CAA6C;QAC7C,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAC3D,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,aAAa;QACb,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/E,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,GAAG,GAAG,MAAiC,CAAC;QAE9C,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;gBACnD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9C,CAAC;YAED,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACpD,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,aAAa,CAAC;gBACpD,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,gBAAgB,CAAC;aAC3D,CAAC,CAAC;YAEH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAC1E,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAC5D,KAAgC,CACjC,CAAC;gBACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;wBAAE,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,aAAa,CAAC,CAAC;gBACxE,CAAC;gBACD,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;oBAC9B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;wBAAE,MAAM,CAAC,IAAI,CAAC,aAAa,QAAQ,aAAa,CAAC,CAAC;gBACpF,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC;YAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC3E,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;oBAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ;wBAAE,SAAS;oBACvC,4EAA4E;oBAC5E,qEAAqE;oBACrE,MAAM,QAAQ,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;oBACtF,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACjD,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,aAAa,CAAC,CAAC;oBAC1C,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/routes/webhooks.d.ts

@@ -0,0 +1,8 @@
+import type { FastifyInstance } from 'fastify';
+import type { ServerDeps } from '../server.js';
+declare const VALID_EVENTS: readonly ["pipeline_start", "pipeline_complete", "stage_complete", "stage_rejected", "stage_failed", "group_feedback"];
+export declare function webhooksRoutes(fastify: FastifyInstance, options: {
+    deps: ServerDeps;
+}): Promise<void>;
+export { VALID_EVENTS };
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/routes/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../../src/routes/webhooks.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,QAAA,MAAM,YAAY,wHAOR,CAAC;AAeX,wBAAsB,cAAc,CAClC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GAC5B,OAAO,CAAC,IAAI,CAAC,CAuFf;AAGD,OAAO,EAAE,YAAY,EAAE,CAAC"}