@superblocksteam/vite-plugin-file-sync 1.99.99-next.2 → 2.0.0-SNAPSHOT.2143e2e95d0107ab

package/dist/ai-service/agent/tools/integrations/internal.js

@@ -0,0 +1,95 @@
+import { safeJsonParse, safeJsonStringify, } from "../../../../util/log-sanitizer.js";
+import { getLogger } from "../../../../util/logger.js";
+import { callPeer } from "../../../util/call-peer.js";
+import { ORCHESTRATOR_PEER_RPC_TIMEOUT_MS } from "../../../util/rpc-timeout.js";
+import { ToolExecutionError } from "../../tools2/types.js";
+import { classifyExternalErrorSeverity } from "./errors.js";
+export const MAX_QUERY_RESPONSE_TOKENS = 10_000;
+export async function executeRequest(context, integrationId, request, integrationHint) {
+    if (!context.peer) {
+        getLogger().warn(`[ai-service] Cannot execute integration: no peer. id=${integrationId}`);
+        throw new ToolExecutionError("Unknown error", {
+            toolName: "executeRequestToIntegration",
+            input: { integrationId, request },
+            context: {},
+            severity: classifyExternalErrorSeverity("Unknown error"),
+        });
+    }
+    const peer = context.peer;
+    const response = await callPeer(peer, () => peer.call.aiExecuteRequestToIntegration({
+        integrationId,
+        integrationHint,
+        request,
+    }), ORCHESTRATOR_PEER_RPC_TIMEOUT_MS, "aiExecuteRequestToIntegration");
+    if (!response || response.error) {
+        const integrationError = response?.error ?? "Unknown error";
+        const errorMessage = typeof integrationError === "string"
+            ? integrationError
+            : (safeJsonStringify(integrationError) ?? "Unknown error");
+        const severity = classifyExternalErrorSeverity(errorMessage);
+        throw new ToolExecutionError(errorMessage, {
+            toolName: "executeRequestToIntegration",
+            input: { integrationId, request },
+            context: {},
+            severity,
+        });
+    }
+    // truncate results
+    const truncatedResponse = truncateToTokens(response.response, MAX_QUERY_RESPONSE_TOKENS);
+    return {
+        data: truncatedResponse.result,
+        isPartial: truncatedResponse.truncated,
+    };
+}
+// always generate a valid JSON
+export function truncateToTokens(obj, maxTokens) {
+    const maxChars = maxTokens * 3;
+    const json = safeJsonStringify(obj);
+    if (json.length < maxChars) {
+        return { result: json, truncated: false };
+    }
+    // Truncate the object structure to ensure valid JSON
+    const parsed = typeof obj === "string" ? safeJsonParse(obj) : obj;
+    if (parsed === undefined) {
+        // Not valid JSON (e.g. HTML or plain text) — truncate the raw string
+        return { result: obj.slice(0, maxChars), truncated: true };
+    }
+    const truncated = truncateObject(parsed, maxChars);
+    return { result: safeJsonStringify(truncated), truncated: true };
+}
+function truncateObject(obj, maxChars) {
+    // Base case: primitive values
+    if (obj === null || obj === undefined || typeof obj !== "object") {
+        return obj;
+    }
+    // Handle arrays
+    if (Array.isArray(obj)) {
+        const truncated = [];
+        for (let i = 0; i < obj.length; i++) {
+            const item = truncateObject(obj[i], maxChars);
+            const testArray = [...truncated, item];
+            const testJson = safeJsonStringify(testArray);
+            if (testJson.length > maxChars) {
+                // Adding this item would exceed the limit, stop here
+                break;
+            }
+            truncated.push(item);
+        }
+        return truncated;
+    }
+    // Handle objects
+    const truncated = {};
+    const entries = Object.entries(obj);
+    for (const [key, value] of entries) {
+        const truncatedValue = truncateObject(value, maxChars);
+        const testObj = { ...truncated, [key]: truncatedValue };
+        const testJson = safeJsonStringify(testObj);
+        if (testJson.length > maxChars) {
+            // Adding this property would exceed the limit, stop here
+            break;
+        }
+        truncated[key] = truncatedValue;
+    }
+    return truncated;
+}
+//# sourceMappingURL=internal.js.map

package/dist/ai-service/agent/tools/integrations/internal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.js","sourceRoot":"","sources":["../../../../../src/ai-service/agent/tools/integrations/internal.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,iBAAiB,GAClB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAEvD,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AACtD,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AAE5D,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEhD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAqB,EACrB,aAAqB,EACrB,OAAgC,EAChC,eAAsE;IAEtE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,SAAS,EAAE,CAAC,IAAI,CACd,wDAAwD,aAAa,EAAE,CACxE,CAAC;QACF,MAAM,IAAI,kBAAkB,CAAC,eAAe,EAAE;YAC5C,QAAQ,EAAE,6BAA6B;YACvC,KAAK,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE;YACjC,OAAO,EAAE,EAAE;YACX,QAAQ,EAAE,6BAA6B,CAAC,eAAe,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAC7B,IAAI,EACJ,GAAG,EAAE,CACH,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC;QACtC,aAAa;QACb,eAAe;QACf,OAAO;KACR,CAAC,EACJ,gCAAgC,EAChC,+BAA+B,CAChC,CAAC;IACF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,gBAAgB,GAAG,QAAQ,EAAE,KAAK,IAAI,eAAe,CAAC;QAC5D,MAAM,YAAY,GAChB,OAAO,gBAAgB,KAAK,QAAQ;YAClC,CAAC,CAAC,gBAAgB;YAClB,CAAC,CAAC,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,IAAI,eAAe,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,6BAA6B,CAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,IAAI,kBAAkB,CAAC,YAAY,EAAE;YACzC,QAAQ,EAAE,6BAA6B;YACvC,KAAK,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE;YACjC,OAAO,EAAE,EAAE;YACX,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IACD,mBAAmB;IACnB,MAAM,iBAAiB,GAAG,gBAAgB,CACxC,QAAQ,CAAC,QAAQ,EACjB,yBAAyB,CAC1B,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,iBAAiB,CAAC,MAAM;QAC9B,SAAS,EAAE,iBAAiB,CAAC,SAAS;KACvC,CAAC;AACJ,CAAC;AAED,+BAA+B;AAC/B,MAAM,UAAU,gBAAgB,CAC9B,GAAQ,EACR,SAAiB;IAKjB,MAAM,QAAQ,GAAG,SAAS,GAAG,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC5C,CAAC;IAED,qDAAqD;IACrD,MAAM,MAAM,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAClE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,qEAAqE;QACrE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7D,CAAC;IACD,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnD,OAAO,EAAE,MAAM,EAAE,iBAAiB,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,cAAc,CAAC,GAAQ,EAAE,QAAgB;IAChD,8BAA8B;IAC9B,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACjE,OAAO,GAAG,CAAC;IACb,CAAC;IAED,gBAAgB;IAChB,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,SAAS,GAAU,EAAE,CAAC;QAE5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,CAAC,GAAG,SAAS,EAAE,IAAI,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;YAE9C,IAAI,QAAQ,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;gBAC/B,qDAAqD;gBACrD,MAAM;YACR,CAAC;YAED,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,iBAAiB;IACjB,MAAM,SAAS,GAAwB,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEpC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,cAAc,GAAG,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAE5C,IAAI,QAAQ,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YAC/B,yDAAyD;YACzD,MAAM;QACR,CAAC;QAED,SAAS,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC;IAClC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/ai-service/agent/tools/integrations/managed-app-database.d.ts

@@ -0,0 +1,16 @@
+/** Typed as strings so callers can test a raw `lifecycleState` against it. */
+export declare const MANAGED_APP_DB_LIFECYCLE_STATES: ReadonlySet<string>;
+/**
+ * App-scoped managed Native DB integrations are identified by
+ * `managedBy === database_lifecycle`. During provisioning the store may only
+ * have a known lifecycleState yet (primed before the browser refetch lands
+ * managedBy) — trust that allowlisted prime-path signal too.
+ *
+ * Shared by `testApi` and `executeRequestToIntegration` so their write
+ * auto-allow paths cannot drift apart.
+ */
+export declare function isManagedAppDatabaseIntegration(header: {
+    managedBy?: string | null;
+    lifecycleState?: string;
+}): boolean;
+//# sourceMappingURL=managed-app-database.d.ts.map

package/dist/ai-service/agent/tools/integrations/managed-app-database.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-app-database.d.ts","sourceRoot":"","sources":["../../../../../src/ai-service/agent/tools/integrations/managed-app-database.ts"],"names":[],"mappings":"AAiBA,8EAA8E;AAC9E,eAAO,MAAM,+BAA+B,EAAE,WAAW,CAAC,MAAM,CAE/D,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAAC,MAAM,EAAE;IACtD,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAQV"}

package/dist/ai-service/agent/tools/integrations/managed-app-database.js

@@ -0,0 +1,31 @@
+import { DATABASE_LIFECYCLE_MANAGED_BY, } from "@superblocksteam/shared";
+/**
+ * Lifecycle states that the Native DB prime path sets on IntegrationStore
+ * before `managedBy` is refetched. `failed` / `cancelled` are intentionally
+ * excluded — those are not a sandbox DB we should auto-allow writes against.
+ */
+const MANAGED_APP_DB_LIFECYCLE_STATE_LIST = [
+    "migrating",
+    "pending",
+    "provisioning",
+    "ready",
+];
+/** Typed as strings so callers can test a raw `lifecycleState` against it. */
+export const MANAGED_APP_DB_LIFECYCLE_STATES = new Set(MANAGED_APP_DB_LIFECYCLE_STATE_LIST);
+/**
+ * App-scoped managed Native DB integrations are identified by
+ * `managedBy === database_lifecycle`. During provisioning the store may only
+ * have a known lifecycleState yet (primed before the browser refetch lands
+ * managedBy) — trust that allowlisted prime-path signal too.
+ *
+ * Shared by `testApi` and `executeRequestToIntegration` so their write
+ * auto-allow paths cannot drift apart.
+ */
+export function isManagedAppDatabaseIntegration(header) {
+    if (header.managedBy === DATABASE_LIFECYCLE_MANAGED_BY) {
+        return true;
+    }
+    return (header.lifecycleState !== undefined &&
+        MANAGED_APP_DB_LIFECYCLE_STATES.has(header.lifecycleState));
+}
+//# sourceMappingURL=managed-app-database.js.map

package/dist/ai-service/agent/tools/integrations/managed-app-database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-app-database.js","sourceRoot":"","sources":["../../../../../src/ai-service/agent/tools/integrations/managed-app-database.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,GAE9B,MAAM,yBAAyB,CAAC;AAEjC;;;;GAIG;AACH,MAAM,mCAAmC,GAA8B;IACrE,WAAW;IACX,SAAS;IACT,cAAc;IACd,OAAO;CACR,CAAC;AAEF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,+BAA+B,GAAwB,IAAI,GAAG,CACzE,mCAAmC,CACpC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,+BAA+B,CAAC,MAG/C;IACC,IAAI,MAAM,CAAC,SAAS,KAAK,6BAA6B,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CACL,MAAM,CAAC,cAAc,KAAK,SAAS;QACnC,+BAA+B,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAC3D,CAAC;AACJ,CAAC"}

package/dist/ai-service/agent/tools/integrations/metadata.d.ts

@@ -0,0 +1,15 @@
+import { PluginType } from "@superblocksteam/shared";
+import type { ClarkStateHandlerParams } from "../../../state-machine/clark-fsm.js";
+export declare const searchIntegrationsToolFactory: import("../../tools2/types.js").ToolFactory<ClarkStateHandlerParams, import("../../tools2/types.js").Tool<{
+    type?: PluginType;
+    name?: string;
+}, {
+    warning?: string | undefined;
+    id: string;
+    mismatchedAppProfileKeys: string[];
+    name: string;
+    tagName: string;
+    plugin: import("../../../integrations/store.js").PluginHeader;
+    supportedProfileKeys: string[];
+}[]>>;
+//# sourceMappingURL=metadata.d.ts.map

package/dist/ai-service/agent/tools/integrations/metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.d.ts","sourceRoot":"","sources":["../../../../../src/ai-service/agent/tools/integrations/metadata.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAwBnF,eAAO,MAAM,6BAA6B;WAqBH,UAAU;WAAS,MAAM;;;;;;;;;KAyE/D,CAAC"}

package/dist/ai-service/agent/tools/integrations/metadata.js

@@ -0,0 +1,94 @@
+import z from "zod";
+import { PluginType } from "@superblocksteam/shared";
+import { UNSUPPORTED_INTEGRATIONS } from "../../../transform/api-builder/to-sdk-transformer.js";
+import { createToolFactory, ToolCategory } from "../../tools2/types.js";
+// Strip non-alphanumeric chars (preserves Unicode letters/digits).
+const NON_ALPHANUMERIC_RE = /[^\p{L}\p{N}]+/gu;
+/**
+ * Tokenize a search string into normalized whitespace-separated tokens.
+ * Each token is lowercased and stripped of non-alphanumeric chars so that
+ * names with brackets or punctuation (e.g. `[Demo] Orders`) are matchable.
+ */
+function tokenizeSearch(search) {
+    return search
+        .toLowerCase()
+        .split(/\s+/)
+        .map((token) => token.replace(NON_ALPHANUMERIC_RE, ""))
+        .filter((token) => token.length > 0);
+}
+function normalizeForMatch(str) {
+    return str.toLowerCase().replace(NON_ALPHANUMERIC_RE, "");
+}
+export const searchIntegrationsToolFactory = createToolFactory("searchIntegrations", (services) => {
+    return {
+        category: ToolCategory.METADATA,
+        description: `
+      Use this tool to search for third-party integrations configured in the user's application.
+      This can include database integrations, API integrations, and other types of integrations that the user has connected to their application.
+      You can search by integration name and/or type.
+      Results include supportedProfileKeys and mismatchedAppProfileKeys. A mismatch does not block use, but you must warn the user and ask for confirmation before using that integration.
+    `,
+        inputSchema: z.object({
+            type: z
+                .nativeEnum(PluginType)
+                .optional()
+                .describe("The type of integration to search for"),
+            name: z
+                .string()
+                .optional()
+                .describe("The name of the integration to search for"),
+        }),
+        execute: async (params) => {
+            if (!params.type && !params.name) {
+                throw new Error("Either type or name must be provided. Search again. Available types: " +
+                    Object.values(PluginType).join(", "));
+            }
+            const integrations = await services.integrationStore.availableIntegrations();
+            const filtered = !params.type && !params.name
+                ? integrations
+                : integrations
+                    .filter((int) => params.type == undefined || int.plugin.type === params.type)
+                    .filter((int) => {
+                    if (params.name == undefined)
+                        return true;
+                    // Search in both name (slug) and displayName. Normalize each
+                    // candidate and tokenize the query so names with brackets or
+                    // punctuation (e.g. `[Demo] Orders`) match queries like
+                    // `demo orders`.
+                    const tokens = tokenizeSearch(params.name);
+                    if (tokens.length === 0)
+                        return true;
+                    const nameNorm = normalizeForMatch(int.name);
+                    const displayNameNorm = int.displayName
+                        ? normalizeForMatch(int.displayName)
+                        : "";
+                    return tokens.every((token) => nameNorm.includes(token) ||
+                        displayNameNorm.includes(token));
+                })
+                    // Filter out integrations that are not yet supported by Clark's API generation
+                    .filter((int) => !UNSUPPORTED_INTEGRATIONS.includes(int.plugin.id));
+            // Return with displayName as "name" - so message shows original name
+            return filtered.map(({ id, displayName, mismatchedAppProfileKeys, name, plugin, supportedProfileKeys, }) => ({
+                id,
+                mismatchedAppProfileKeys: mismatchedAppProfileKeys ?? [],
+                name: displayName || name,
+                tagName: name,
+                plugin,
+                supportedProfileKeys: supportedProfileKeys ?? [],
+                ...((mismatchedAppProfileKeys?.length ?? 0) > 0
+                    ? {
+                        warning: `This integration is missing configurations for these app data tags: ${mismatchedAppProfileKeys?.join(", ")}. Warn the user and ask for confirmation before using it. This does not block use.`,
+                    }
+                    : {}),
+            }));
+        },
+        readOnly: true,
+        getSummary: (_input, output) => {
+            const count = Array.isArray(output) ? output.length : 0;
+            return {
+                output: `${count} integration${count === 1 ? "" : "s"}`,
+            };
+        },
+    };
+});
+//# sourceMappingURL=metadata.js.map

package/dist/ai-service/agent/tools/integrations/metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../../../../../src/ai-service/agent/tools/integrations/metadata.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AAEpB,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAGrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,sDAAsD,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAExE,mEAAmE;AACnE,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AAE/C;;;;GAIG;AACH,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,MAAM;SACV,WAAW,EAAE;SACb,KAAK,CAAC,KAAK,CAAC;SACZ,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;SACtD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,MAAM,6BAA6B,GAAG,iBAAiB,CAC5D,oBAAoB,EACpB,CAAC,QAAiC,EAAE,EAAE;IACpC,OAAO;QACL,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,WAAW,EAAE;;;;;KAKd;QACC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,CAAC;iBACJ,UAAU,CAAC,UAAU,CAAC;iBACtB,QAAQ,EAAE;iBACV,QAAQ,CAAC,uCAAuC,CAAC;YACpD,IAAI,EAAE,CAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,2CAA2C,CAAC;SACzD,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,MAA4C,EAAE,EAAE;YAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CACb,uEAAuE;oBACrE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACvC,CAAC;YACJ,CAAC;YACD,MAAM,YAAY,GAChB,MAAM,QAAQ,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,CAAC;YAC1D,MAAM,QAAQ,GACZ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI;gBAC1B,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,YAAY;qBACT,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CACN,MAAM,CAAC,IAAI,IAAI,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAC9D;qBACA,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;oBACd,IAAI,MAAM,CAAC,IAAI,IAAI,SAAS;wBAAE,OAAO,IAAI,CAAC;oBAC1C,6DAA6D;oBAC7D,6DAA6D;oBAC7D,wDAAwD;oBACxD,iBAAiB;oBACjB,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;wBAAE,OAAO,IAAI,CAAC;oBACrC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAC7C,MAAM,eAAe,GAAG,GAAG,CAAC,WAAW;wBACrC,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC;wBACpC,CAAC,CAAC,EAAE,CAAC;oBACP,OAAO,MAAM,CAAC,KAAK,CACjB,CAAC,KAAK,EAAE,EAAE,CACR,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;wBACxB,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAClC,CAAC;gBACJ,CAAC,CAAC;oBACF,+EAA+E;qBAC9E,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,wBAAwB,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAC3D,CAAC;YAEV,qEAAqE;YACrE,OAAO,QAAQ,CAAC,GAAG,CACjB,CAAC,EACC,EAAE,EACF,WAAW,EACX,wBAAwB,EACxB,IAAI,EACJ,MAAM,EACN,oBAAoB,GACrB,EAAE,EAAE,CAAC,CAAC;gBACL,EAAE;gBACF,wBAAwB,EAAE,wBAAwB,IAAI,EAAE;gBACxD,IAAI,EAAE,WAAW,IAAI,IAAI;gBACzB,OAAO,EAAE,IAAI;gBACb,MAAM;gBACN,oBAAoB,EAAE,oBAAoB,IAAI,EAAE;gBAChD,GAAG,CAAC,CAAC,wBAAwB,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;oBAC7C,CAAC,CAAC;wBACE,OAAO,EAAE,uEAAuE,wBAAwB,EAAE,IAAI,CAAC,IAAI,CAAC,oFAAoF;qBACzM;oBACH,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CACH,CAAC;QACJ,CAAC;QACD,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,OAAO;gBACL,MAAM,EAAE,GAAG,KAAK,eAAe,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;aACxD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC,CACF,CAAC"}

package/dist/ai-service/agent/tools/integrations/run-code.d.ts

@@ -0,0 +1,9 @@
+import type { Clark } from "../../../state-machine/clark-fsm.js";
+export declare const runCodeToolFactory: import("../../tools2/types.js").ToolFactory<Clark, import("../../tools2/types.js").Tool<{
+    integrationId: string;
+    script: string;
+}, {
+    data: string;
+    isPartial: boolean;
+}>>;
+//# sourceMappingURL=run-code.d.ts.map

package/dist/ai-service/agent/tools/integrations/run-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-code.d.ts","sourceRoot":"","sources":["../../../../../src/ai-service/agent/tools/integrations/run-code.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qCAAqC,CAAC;AAIjE,eAAO,MAAM,kBAAkB;mBAsBgB,MAAM;YAAU,MAAM;;;;GAkBpE,CAAC"}

package/dist/ai-service/agent/tools/integrations/run-code.js

@@ -0,0 +1,41 @@
+import z from "zod";
+import { createToolFactory, ToolCategory } from "../../tools2/types.js";
+import { executeRequest } from "./internal.js";
+export const runCodeToolFactory = createToolFactory("runCode", (clark) => {
+    return {
+        category: ToolCategory.GENERAL,
+        description: `
+      Use this tool to execute Python or JavaScript code in configured code execution integrations.
+
+      IMPORTANT: Only read-only operations are supported. Do NOT use this tool for any operations that modify data or have side effects.
+
+      Response data is returned as a JSON object
+`,
+        inputSchema: z.object({
+            integrationId: z
+                .string()
+                .min(1)
+                .describe("The ID of the code execution integration"),
+            script: z
+                .string()
+                .min(1)
+                .describe("The Python or JavaScript code to execute"),
+        }),
+        execute: async (params) => {
+            const { integrationId, script } = params;
+            const request = { body: script };
+            return await executeRequest(clark.context, integrationId, request);
+        },
+        readOnly: true,
+        getSummary: (input) => {
+            const scriptPreview = input.script.length > 50
+                ? input.script.substring(0, 50) + "..."
+                : input.script;
+            return {
+                input: `script: ${scriptPreview}`,
+                output: "Code executed",
+            };
+        },
+    };
+});
+//# sourceMappingURL=run-code.js.map

package/dist/ai-service/agent/tools/integrations/run-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-code.js","sourceRoot":"","sources":["../../../../../src/ai-service/agent/tools/integrations/run-code.ts"],"names":[],"mappings":"AAAA,OAAO,CAAC,MAAM,KAAK,CAAC;AAGpB,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CACjD,SAAS,EACT,CAAC,KAAY,EAAE,EAAE;IACf,OAAO;QACL,QAAQ,EAAE,YAAY,CAAC,OAAO;QAC9B,WAAW,EAAE;;;;;;CAMlB;QACK,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,aAAa,EAAE,CAAC;iBACb,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,CAAC,0CAA0C,CAAC;YACvD,MAAM,EAAE,CAAC;iBACN,MAAM,EAAE;iBACR,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,CAAC,0CAA0C,CAAC;SACxD,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,MAAiD,EAAE,EAAE;YACnE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;YACzC,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACjC,OAAO,MAAM,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;QACrE,CAAC;QACD,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE;YACpB,MAAM,aAAa,GACjB,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE;gBACtB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;gBACvC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;YACnB,OAAO;gBACL,KAAK,EAAE,WAAW,aAAa,EAAE;gBACjC,MAAM,EAAE,eAAe;aACxB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC,CACF,CAAC"}

package/dist/ai-service/agent/tools/integrations/sql-classification.d.ts

@@ -0,0 +1,50 @@
+export type SqlStatementKind = "data_mutation" | "ddl" | "read" | "schema_or_session" | "unknown" | "unsupported_dialect";
+export interface SqlClassification {
+    /**
+     * Whether executing the statement creates, removes, or changes a database
+     * object, independently of its primary kind. A statement can both change
+     * schema and mutate rows, such as CREATE TABLE AS with a data-modifying CTE.
+     */
+    changesSchema: boolean;
+    kind: SqlStatementKind;
+    /**
+     * Whether a `LIMIT` clause can be attached to this statement, and therefore
+     * whether the row-limit rule can be enforced against it. Independent of the
+     * kind: a data-modifying CTE mutates rows *and* accepts a limit.
+     *
+     * This is narrower than "returns rows" on purpose. `INSERT/UPDATE/DELETE ...
+     * RETURNING` produces a result set, but `LIMIT` is a syntax error on those
+     * statements, so demanding one would reject a query that cannot be rewritten
+     * to satisfy the demand. Their responses are bounded by `truncateToTokens`
+     * instead.
+     */
+    supportsRowLimit: boolean;
+    /**
+     * Whether the statement hands back a result set rather than just a row count.
+     * A `SELECT` does; so does `INSERT/UPDATE/DELETE ... RETURNING`.
+     *
+     * Paired with {@link SqlClassification.supportsRowLimit} this identifies the
+     * dangerous shape: a mutation that returns rows but cannot be limited.
+     * `DELETE FROM events RETURNING *` commits the delete and then materializes
+     * every deleted row, and no `LIMIT` can be attached to hold it down.
+     */
+    returnsRows: boolean;
+}
+/**
+ * Classifies a SQL query so callers can decide whether it may run, and whether
+ * it needs approval first.
+ *
+ * Postgres-family integrations are parsed with the real PostgreSQL grammar.
+ * Every other dialect is keyword-screened and can only ever come back as a read
+ * or as `unsupported_dialect`; writes are not enabled for those integrations.
+ */
+export declare function classifySqlStatement(query: string, pluginId: string | undefined): Promise<SqlClassification>;
+/**
+ * Reads an already-computed classification without awaiting the parser.
+ *
+ * Only for callers that cannot be async and can tolerate a miss, such as
+ * picking the verb for an approval dialog. Never use it to decide whether a
+ * query may run — a miss looks identical to a read.
+ */
+export declare function peekSqlClassification(query: string, pluginId: string | undefined): SqlClassification | undefined;
+//# sourceMappingURL=sql-classification.d.ts.map

package/dist/ai-service/agent/tools/integrations/sql-classification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-classification.d.ts","sourceRoot":"","sources":["../../../../../src/ai-service/agent/tools/integrations/sql-classification.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,gBAAgB,GACxB,eAAe,GACf,KAAK,GACL,MAAM,GACN,mBAAmB,GACnB,SAAS,GACT,qBAAqB,CAAC;AAE1B,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB,IAAI,EAAE,gBAAgB,CAAC;IACvB;;;;;;;;;;OAUG;IACH,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;;;;;OAQG;IACH,WAAW,EAAE,OAAO,CAAC;CACtB;AA0lBD;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,OAAO,CAAC,iBAAiB,CAAC,CAa5B;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,iBAAiB,GAAG,SAAS,CAE/B"}