@superblocksteam/vite-plugin-file-sync 2.0.42-next.5 → 2.0.42-next.50

package/dist/ai-service/agent/tools2/access-control.d.ts

@@ -0,0 +1,119 @@
+import { type AccessControlRule, PermissionLevel } from "./types.js";
+/**
+ * Access control utilities and common patterns.
+ */
+/**
+ * Block tools by name pattern.
+ *
+ * @param pattern - String or regex pattern to match tool names
+ * @returns Access control rule that blocks matching tools
+ *
+ * @example
+ * registry.addAccessRule(blockTools(/^delete-/));
+ * registry.addAccessRule(blockTools("drop-database"));
+ */
+export declare function blockTools(pattern: string | RegExp | (string | RegExp)[]): AccessControlRule;
+/**
+ * Require prompt for tools by name pattern.
+ *
+ * @param pattern - String or regex pattern to match tool names
+ * @returns Access control rule that prompts for matching tools
+ *
+ * @example
+ * registry.addAccessRule(promptForTools(/^delete-/));
+ * registry.addAccessRule(promptForTools(["delete-file", "drop-table"]));
+ */
+export declare function promptForTools(pattern: string | RegExp | (string | RegExp)[]): AccessControlRule;
+/**
+ * Require specific user role.
+ *
+ * @param allowedRoles - Role or array of roles allowed to execute
+ * @param permission - Permission level to return if role doesn't match
+ * @returns Access control rule that checks user role
+ *
+ * @example
+ * registry.addAccessRule(requireRole("admin", PermissionLevel.BLOCK));
+ * registry.addAccessRule(requireRole(["admin", "editor"], PermissionLevel.PROMPT));
+ */
+export declare function requireRole(allowedRoles: string | string[], permission?: PermissionLevel): AccessControlRule;
+/**
+ * Combine multiple rules with AND logic (most restrictive wins).
+ *
+ * @param rules - Array of rules to combine
+ * @returns Access control rule that evaluates all rules
+ *
+ * @example
+ * const rule = combineRules([
+ *   requireRole("admin"),
+ *   blockTools(/^delete-/)
+ * ]);
+ */
+export declare function combineRules(rules: AccessControlRule[]): AccessControlRule;
+/**
+ * Create a rule that only applies to specific tools.
+ *
+ * @param toolNames - Tool name or array of tool names
+ * @param rule - Rule to apply to those tools
+ * @returns Access control rule that conditionally applies
+ *
+ * @example
+ * const rule = forTools(["delete-file", "delete-api"], requireRole("admin"));
+ */
+export declare function forTools(toolNames: string | string[], rule: AccessControlRule): AccessControlRule;
+/**
+ * Create a rule based on tool category.
+ *
+ * Requires ToolRegistry to be passed in to look up metadata.
+ *
+ * @param category - Category name to match
+ * @param permission - Permission level to return for matching category
+ * @returns Access control rule that checks tool category
+ *
+ * @example
+ * const rule = forCategory("filesystem", PermissionLevel.PROMPT);
+ */
+export declare function forCategory(category: string, permission: PermissionLevel): AccessControlRule;
+/**
+ * Filter tools by AI mode and plan approval status.
+ *
+ * Returns an access control rule that blocks tools based on mode and plan approval:
+ * - BUILD mode: All tools available (ignores userApprovedPlan)
+ * - PLAN mode with approved plan (userApprovedPlan === true): All tools available
+ * - PLAN mode without approved plan: Only readonly tools available
+ *
+ * @returns Access control rule
+ *
+ * @example
+ * registry.addAccessRule(modeFilter());
+ * // Then pass mode and userApprovedPlan in context:
+ * registry.execute("tool-name", input, { mode: AiMode.PLAN, userApprovedPlan: true });
+ */
+export declare function modeFilter(): AccessControlRule;
+/**
+ * Common access control presets.
+ */
+export declare const presets: {
+    /**
+     * Development mode: Allow everything.
+     */
+    development: () => AccessControlRule[];
+    /**
+     * Production mode: Prompt for destructive operations.
+     */
+    production: () => AccessControlRule[];
+    /**
+     * Restricted mode: Block destructive operations entirely.
+     */
+    restricted: () => AccessControlRule[];
+    /**
+     * Guest mode: Read-only access.
+     */
+    guest: () => AccessControlRule[];
+    /**
+     * AI mode filters: Filter tools based on AI mode (BUILD, PLAN, or undefined).
+     * When mode is undefined, it defaults to BUILD mode.
+     * Pass mode in context when executing: { mode: AiMode.PLAN }
+     */
+    aiMode: () => AccessControlRule[];
+};
+//# sourceMappingURL=access-control.d.ts.map

package/dist/ai-service/agent/tools2/access-control.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-control.d.ts","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/access-control.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,iBAAiB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAErE;;GAEG;AAEH;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,GAC7C,iBAAiB,CAcnB;AAED;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,GAC7C,iBAAiB,CAcnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CACzB,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,EAC/B,UAAU,GAAE,eAAuC,GAClD,iBAAiB,CAWnB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,iBAAiB,CAiB1E;AAED;;;;;;;;;GASG;AACH,wBAAgB,QAAQ,CACtB,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,EAC5B,IAAI,EAAE,iBAAiB,GACtB,iBAAiB,CASnB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CACzB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,eAAe,GAC1B,iBAAiB,CAUnB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,UAAU,IAAI,iBAAiB,CAmB9C;AAED;;GAEG;AACH,eAAO,MAAM,OAAO;IAClB;;OAEG;uBACc,iBAAiB,EAAE;IAEpC;;OAEG;sBACa,iBAAiB,EAAE;IASnC;;OAEG;sBACa,iBAAiB,EAAE;IAInC;;OAEG;iBACQ,iBAAiB,EAAE;IAI9B;;;;OAIG;kBACS,iBAAiB,EAAE;CAChC,CAAC"}

package/dist/ai-service/agent/tools2/access-control.js

@@ -0,0 +1,216 @@
+import { AiMode } from "@superblocksteam/library-shared/types";
+import { PermissionLevel } from "./types.js";
+/**
+ * Access control utilities and common patterns.
+ */
+/**
+ * Block tools by name pattern.
+ *
+ * @param pattern - String or regex pattern to match tool names
+ * @returns Access control rule that blocks matching tools
+ *
+ * @example
+ * registry.addAccessRule(blockTools(/^delete-/));
+ * registry.addAccessRule(blockTools("drop-database"));
+ */
+export function blockTools(pattern) {
+    const patterns = Array.isArray(pattern) ? pattern : [pattern];
+    return (toolName) => {
+        for (const p of patterns) {
+            if (typeof p === "string" && toolName === p) {
+                return PermissionLevel.BLOCK;
+            }
+            if (p instanceof RegExp && p.test(toolName)) {
+                return PermissionLevel.BLOCK;
+            }
+        }
+        return PermissionLevel.ALLOW;
+    };
+}
+/**
+ * Require prompt for tools by name pattern.
+ *
+ * @param pattern - String or regex pattern to match tool names
+ * @returns Access control rule that prompts for matching tools
+ *
+ * @example
+ * registry.addAccessRule(promptForTools(/^delete-/));
+ * registry.addAccessRule(promptForTools(["delete-file", "drop-table"]));
+ */
+export function promptForTools(pattern) {
+    const patterns = Array.isArray(pattern) ? pattern : [pattern];
+    return (toolName) => {
+        for (const p of patterns) {
+            if (typeof p === "string" && toolName === p) {
+                return PermissionLevel.PROMPT;
+            }
+            if (p instanceof RegExp && p.test(toolName)) {
+                return PermissionLevel.PROMPT;
+            }
+        }
+        return PermissionLevel.ALLOW;
+    };
+}
+/**
+ * Require specific user role.
+ *
+ * @param allowedRoles - Role or array of roles allowed to execute
+ * @param permission - Permission level to return if role doesn't match
+ * @returns Access control rule that checks user role
+ *
+ * @example
+ * registry.addAccessRule(requireRole("admin", PermissionLevel.BLOCK));
+ * registry.addAccessRule(requireRole(["admin", "editor"], PermissionLevel.PROMPT));
+ */
+export function requireRole(allowedRoles, permission = PermissionLevel.BLOCK) {
+    const roles = Array.isArray(allowedRoles) ? allowedRoles : [allowedRoles];
+    return (_toolName, context) => {
+        if (!context.userRole) {
+            return permission;
+        }
+        return roles.includes(context.userRole)
+            ? PermissionLevel.ALLOW
+            : permission;
+    };
+}
+/**
+ * Combine multiple rules with AND logic (most restrictive wins).
+ *
+ * @param rules - Array of rules to combine
+ * @returns Access control rule that evaluates all rules
+ *
+ * @example
+ * const rule = combineRules([
+ *   requireRole("admin"),
+ *   blockTools(/^delete-/)
+ * ]);
+ */
+export function combineRules(rules) {
+    return async (toolName, context) => {
+        let permission = PermissionLevel.ALLOW;
+        for (const rule of rules) {
+            const result = await rule(toolName, context);
+            if (result === PermissionLevel.BLOCK) {
+                return PermissionLevel.BLOCK;
+            }
+            if (result === PermissionLevel.PROMPT) {
+                permission = PermissionLevel.PROMPT;
+            }
+        }
+        return permission;
+    };
+}
+/**
+ * Create a rule that only applies to specific tools.
+ *
+ * @param toolNames - Tool name or array of tool names
+ * @param rule - Rule to apply to those tools
+ * @returns Access control rule that conditionally applies
+ *
+ * @example
+ * const rule = forTools(["delete-file", "delete-api"], requireRole("admin"));
+ */
+export function forTools(toolNames, rule) {
+    const names = Array.isArray(toolNames) ? toolNames : [toolNames];
+    return async (toolName, context) => {
+        if (names.includes(toolName)) {
+            return rule(toolName, context);
+        }
+        return PermissionLevel.ALLOW;
+    };
+}
+/**
+ * Create a rule based on tool category.
+ *
+ * Requires ToolRegistry to be passed in to look up metadata.
+ *
+ * @param category - Category name to match
+ * @param permission - Permission level to return for matching category
+ * @returns Access control rule that checks tool category
+ *
+ * @example
+ * const rule = forCategory("filesystem", PermissionLevel.PROMPT);
+ */
+export function forCategory(category, permission) {
+    return (_toolName, context) => {
+        // Note: This requires metadata to be available in context
+        // You might need to pass registry or metadata differently
+        const toolCategory = context._toolCategory;
+        if (toolCategory === category) {
+            return permission;
+        }
+        return PermissionLevel.ALLOW;
+    };
+}
+/**
+ * Filter tools by AI mode and plan approval status.
+ *
+ * Returns an access control rule that blocks tools based on mode and plan approval:
+ * - BUILD mode: All tools available (ignores userApprovedPlan)
+ * - PLAN mode with approved plan (userApprovedPlan === true): All tools available
+ * - PLAN mode without approved plan: Only readonly tools available
+ *
+ * @returns Access control rule
+ *
+ * @example
+ * registry.addAccessRule(modeFilter());
+ * // Then pass mode and userApprovedPlan in context:
+ * registry.execute("tool-name", input, { mode: AiMode.PLAN, userApprovedPlan: true });
+ */
+export function modeFilter() {
+    return (_toolName, context, _category, readOnly) => {
+        // In BUILD mode (or undefined), allow all tools
+        if (context.mode === AiMode.BUILD || context.mode === undefined) {
+            return PermissionLevel.ALLOW;
+        }
+        // In PLAN mode:
+        // - If user approved plan: allow all tools
+        // - Otherwise: only allow readonly tools
+        if (context.mode === AiMode.PLAN) {
+            if (context.userApprovedPlan === true) {
+                return PermissionLevel.ALLOW; // Plan approved - all tools available
+            }
+            return readOnly ? PermissionLevel.ALLOW : PermissionLevel.BLOCK;
+        }
+        return PermissionLevel.ALLOW;
+    };
+}
+/**
+ * Common access control presets.
+ */
+export const presets = {
+    /**
+     * Development mode: Allow everything.
+     */
+    development: () => [],
+    /**
+     * Production mode: Prompt for destructive operations.
+     */
+    production: () => [
+        promptForTools([
+            /^delete-/,
+            /^drop-/,
+            /^remove-/,
+            "bash", // Prompt for bash commands
+        ]),
+    ],
+    /**
+     * Restricted mode: Block destructive operations entirely.
+     */
+    restricted: () => [
+        blockTools([/^delete-/, /^drop-/, /^remove-/, "bash"]),
+    ],
+    /**
+     * Guest mode: Read-only access.
+     */
+    guest: () => [
+        blockTools([/^write-/, /^edit-/, /^delete-/, /^create-/, "bash"]),
+    ],
+    /**
+     * AI mode filters: Filter tools based on AI mode (BUILD, PLAN, or undefined).
+     * When mode is undefined, it defaults to BUILD mode.
+     * Pass mode in context when executing: { mode: AiMode.PLAN }
+     */
+    aiMode: () => [modeFilter()],
+};
+//# sourceMappingURL=access-control.js.map

package/dist/ai-service/agent/tools2/access-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-control.js","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/access-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAC/D,OAAO,EAA0B,eAAe,EAAE,MAAM,YAAY,CAAC;AAErE;;GAEG;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CACxB,OAA8C;IAE9C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAE9D,OAAO,CAAC,QAAQ,EAAE,EAAE;QAClB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC5C,OAAO,eAAe,CAAC,KAAK,CAAC;YAC/B,CAAC;YACD,IAAI,CAAC,YAAY,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5C,OAAO,eAAe,CAAC,KAAK,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,OAAO,eAAe,CAAC,KAAK,CAAC;IAC/B,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA8C;IAE9C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAE9D,OAAO,CAAC,QAAQ,EAAE,EAAE;QAClB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC5C,OAAO,eAAe,CAAC,MAAM,CAAC;YAChC,CAAC;YACD,IAAI,CAAC,YAAY,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5C,OAAO,eAAe,CAAC,MAAM,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO,eAAe,CAAC,KAAK,CAAC;IAC/B,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CACzB,YAA+B,EAC/B,aAA8B,eAAe,CAAC,KAAK;IAEnD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAE1E,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;QAC5B,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;YACrC,CAAC,CAAC,eAAe,CAAC,KAAK;YACvB,CAAC,CAAC,UAAU,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,KAA0B;IACrD,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACjC,IAAI,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC;QAEvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAE7C,IAAI,MAAM,KAAK,eAAe,CAAC,KAAK,EAAE,CAAC;gBACrC,OAAO,eAAe,CAAC,KAAK,CAAC;YAC/B,CAAC;YACD,IAAI,MAAM,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;gBACtC,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC;YACtC,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,QAAQ,CACtB,SAA4B,EAC5B,IAAuB;IAEvB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEjE,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACjC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,eAAe,CAAC,KAAK,CAAC;IAC/B,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CACzB,QAAgB,EAChB,UAA2B;IAE3B,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;QAC5B,0DAA0D;QAC1D,0DAA0D;QAC1D,MAAM,YAAY,GAAI,OAAe,CAAC,aAAa,CAAC;QACpD,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,OAAO,eAAe,CAAC,KAAK,CAAC;IAC/B,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE;QACjD,gDAAgD;QAChD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChE,OAAO,eAAe,CAAC,KAAK,CAAC;QAC/B,CAAC;QAED,gBAAgB;QAChB,2CAA2C;QAC3C,yCAAyC;QACzC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;gBACtC,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,sCAAsC;YACtE,CAAC;YACD,OAAO,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC;QAClE,CAAC;QAED,OAAO,eAAe,CAAC,KAAK,CAAC;IAC/B,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB;;OAEG;IACH,WAAW,EAAE,GAAwB,EAAE,CAAC,EAAE;IAE1C;;OAEG;IACH,UAAU,EAAE,GAAwB,EAAE,CAAC;QACrC,cAAc,CAAC;YACb,UAAU;YACV,QAAQ;YACR,UAAU;YACV,MAAM,EAAE,2BAA2B;SACpC,CAAC;KACH;IAED;;OAEG;IACH,UAAU,EAAE,GAAwB,EAAE,CAAC;QACrC,UAAU,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;KACvD;IAED;;OAEG;IACH,KAAK,EAAE,GAAwB,EAAE,CAAC;QAChC,UAAU,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;KAClE;IAED;;;;OAIG;IACH,MAAM,EAAE,GAAwB,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;CAClD,CAAC"}

package/dist/ai-service/agent/tools2/example.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Example usage of the Tool Registry system.
+ *
+ * This file demonstrates:
+ * - Creating tool factories
+ * - Registering tools
+ * - Setting up access control
+ * - Executing tools with permissions
+ */
+import { ToolRegistry } from "./index.js";
+export declare function setupExampleRegistry(): ToolRegistry;
+export declare function exampleUsage(): Promise<void>;
+//# sourceMappingURL=example.d.ts.map

package/dist/ai-service/agent/tools2/example.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"example.d.ts","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/example.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,YAAY,EAMb,MAAM,YAAY,CAAC;AAkFpB,wBAAgB,oBAAoB,iBA+CnC;AAMD,wBAAsB,YAAY,kBAuCjC"}

package/dist/ai-service/agent/tools2/example.js

@@ -0,0 +1,143 @@
+/**
+ * Example usage of the Tool Registry system.
+ *
+ * This file demonstrates:
+ * - Creating tool factories
+ * - Registering tools
+ * - Setting up access control
+ * - Executing tools with permissions
+ */
+import { z } from "zod";
+import { ToolRegistry, PermissionLevel, promptForTools, requireRole, createToolFactory, ToolCategory, } from "./index.js";
+// ============================================================================
+// Example Tool: Add Event
+// ============================================================================
+const addEventToolFactory = createToolFactory("add-event", (_clark, _services, _queue) => {
+    // This would typically import from your existing tool
+    const PayloadSchema = z
+        .record(z.string(), z.enum(["string", "number", "boolean"]))
+        .optional();
+    return {
+        description: "Add a new event to the scope",
+        category: ToolCategory.COMPONENT,
+        defaultPermission: PermissionLevel.ALLOW,
+        inputSchema: z.object({
+            pageScopeId: z.string(),
+            entityName: z.string(),
+            payload: PayloadSchema,
+        }),
+        execute: async (input) => {
+            // Implementation here
+            console.log("Adding event:", input);
+            return {
+                success: true,
+                message: `Event ${input.entityName} added`,
+            };
+        },
+    };
+});
+// ============================================================================
+// Example Tool: Delete File (Destructive)
+// ============================================================================
+const deleteFileToolFactory = createToolFactory("delete-file", (_fileSystem) => ({
+    description: "Delete a file from the project",
+    category: ToolCategory.FILE,
+    defaultPermission: PermissionLevel.PROMPT, // Requires confirmation
+    inputSchema: z.object({
+        path: z.string(),
+    }),
+    execute: async (input) => {
+        // Implementation here
+        console.log("Deleting file:", input.path);
+        return {
+            success: true,
+            message: `File ${input.path} deleted`,
+        };
+    },
+}));
+// ============================================================================
+// Example Tool: Read File (Safe)
+// ============================================================================
+const readFileToolFactory = createToolFactory("read-file", (_fileSystem) => ({
+    description: "Read a file from the project",
+    category: ToolCategory.FILE,
+    defaultPermission: PermissionLevel.ALLOW,
+    inputSchema: z.object({
+        path: z.string(),
+    }),
+    execute: async (input) => {
+        console.log("Reading file:", input.path);
+        return {
+            content: "file contents here",
+        };
+    },
+}));
+// ============================================================================
+// Setup Example
+// ============================================================================
+export function setupExampleRegistry() {
+    const registry = new ToolRegistry();
+    // 1. Register all tools
+    registry.registerAll([
+        addEventToolFactory,
+        deleteFileToolFactory,
+        readFileToolFactory,
+    ]);
+    // 2. Setup access control rules
+    //    Rules are evaluated in order, most restrictive wins
+    // Block tools for guest users
+    registry.addAccessRule(requireRole(["admin", "editor"], PermissionLevel.BLOCK));
+    // Prompt for destructive operations
+    registry.addAccessRule(promptForTools(/^delete-/));
+    // Or use a preset
+    // registry.addAccessRule(...presets.production());
+    // 3. Setup prompt handler
+    registry.setPromptHandler(async (toolName, input, context) => {
+        console.log(`\n=== User Confirmation Required ===`);
+        console.log(`Tool: ${toolName}`);
+        console.log(`Input:`, input);
+        console.log(`User: ${context.userId} (${context.userRole})`);
+        console.log(`===================================\n`);
+        // In real implementation, show dialog and wait for user response
+        // For example: return await showConfirmDialog({ toolName, input });
+        return true; // Mock: auto-approve for demo
+    });
+    // 4. Instantiate tools with dependencies
+    const mockDeps = {
+        clark: {},
+        services: {},
+        queue: {},
+        fileSystem: {},
+    };
+    registry.instantiate(mockDeps);
+    return registry;
+}
+// ============================================================================
+// Usage Example
+// ============================================================================
+export async function exampleUsage() {
+    const registry = setupExampleRegistry();
+    // Example 1: Execute allowed tool
+    console.log("\n--- Example 1: Allowed tool ---");
+    const result1 = await registry.execute("read-file", { path: "/src/app.ts" }, { userId: "user-123", userRole: "admin" });
+    console.log("Result:", result1);
+    // Example 2: Execute tool requiring confirmation
+    console.log("\n--- Example 2: Tool requiring confirmation ---");
+    const result2 = await registry.execute("delete-file", { path: "/src/temp.ts" }, { userId: "user-123", userRole: "admin" });
+    console.log("Result:", result2);
+    // Example 3: Blocked tool (guest user)
+    console.log("\n--- Example 3: Blocked tool ---");
+    const result3 = await registry.execute("delete-file", { path: "/src/important.ts" }, { userId: "guest-456", userRole: "guest" });
+    console.log("Result:", result3);
+    // Example 4: Get all tools for AI SDK
+    console.log("\n--- Example 4: Get tools for AI SDK ---");
+    const tools = registry.getToolsRecord();
+    console.log("Available tools:", Object.keys(tools));
+    // Example 5: Get tool metadata
+    console.log("\n--- Example 5: Tool metadata ---");
+    const metadata = registry.getToolMetadata();
+    console.log("Tool metadata:", metadata);
+}
+// Uncomment to run examples:
+// exampleUsage();
+//# sourceMappingURL=example.js.map

package/dist/ai-service/agent/tools2/example.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"example.js","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/example.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E,MAAM,mBAAmB,GAAG,iBAAiB,CAC3C,WAAW,EACX,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;IAC5B,sDAAsD;IACtD,MAAM,aAAa,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;SAC3D,QAAQ,EAAE,CAAC;IAEd,OAAO;QACL,WAAW,EAAE,8BAA8B;QAC3C,QAAQ,EAAE,YAAY,CAAC,SAAS;QAChC,iBAAiB,EAAE,eAAe,CAAC,KAAK;QACxC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;YACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACtB,OAAO,EAAE,aAAa;SACvB,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACvB,sBAAsB;YACtB,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,SAAS,KAAK,CAAC,UAAU,QAAQ;aAC3C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,+EAA+E;AAC/E,0CAA0C;AAC1C,+EAA+E;AAE/E,MAAM,qBAAqB,GAAG,iBAAiB,CAC7C,aAAa,EACb,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAChB,WAAW,EAAE,gCAAgC;IAC7C,QAAQ,EAAE,YAAY,CAAC,IAAI;IAC3B,iBAAiB,EAAE,eAAe,CAAC,MAAM,EAAE,wBAAwB;IACnE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACvB,sBAAsB;QACtB,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,QAAQ,KAAK,CAAC,IAAI,UAAU;SACtC,CAAC;IACJ,CAAC;CACF,CAAC,CACH,CAAC;AAEF,+EAA+E;AAC/E,iCAAiC;AACjC,+EAA+E;AAE/E,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC3E,WAAW,EAAE,8BAA8B;IAC3C,QAAQ,EAAE,YAAY,CAAC,IAAI;IAC3B,iBAAiB,EAAE,eAAe,CAAC,KAAK;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACvB,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,oBAAoB;SAC9B,CAAC;IACJ,CAAC;CACF,CAAC,CAAC,CAAC;AAEJ,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,UAAU,oBAAoB;IAClC,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IAEpC,wBAAwB;IACxB,QAAQ,CAAC,WAAW,CAAC;QACnB,mBAAmB;QACnB,qBAAqB;QACrB,mBAAmB;KACpB,CAAC,CAAC;IAEH,gCAAgC;IAChC,yDAAyD;IAEzD,8BAA8B;IAC9B,QAAQ,CAAC,aAAa,CACpB,WAAW,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CACxD,CAAC;IAEF,oCAAoC;IACpC,QAAQ,CAAC,aAAa,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;IAEnD,kBAAkB;IAClB,mDAAmD;IAEnD,0BAA0B;IAC1B,QAAQ,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC3D,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QAErD,iEAAiE;QACjE,oEAAoE;QACpE,OAAO,IAAI,CAAC,CAAC,8BAA8B;IAC7C,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,MAAM,QAAQ,GAAG;QACf,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,EAAE;QACT,UAAU,EAAE,EAAE;KACf,CAAC;IACF,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAE/B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IAExC,kCAAkC;IAClC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,WAAW,EACX,EAAE,IAAI,EAAE,aAAa,EAAE,EACvB,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAC1C,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEhC,iDAAiD;IACjD,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,aAAa,EACb,EAAE,IAAI,EAAE,cAAc,EAAE,EACxB,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAC1C,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEhC,uCAAuC;IACvC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,aAAa,EACb,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAC7B,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAC3C,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEhC,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAEpD,+BAA+B;IAC/B,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,EAAE,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,6BAA6B;AAC7B,kBAAkB"}

package/dist/ai-service/agent/tools2/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Tool Registry System
+ *
+ * Provides a centralized registry for tools with:
+ * - Factory-based registration and instantiation
+ * - Access control middleware
+ * - User prompt handling
+ * - Type-safe tool definitions
+ */
+export type { Tool, ToolFactory, ToolExecutionResult, AccessControlContext, AccessControlRule, PromptHandler, } from "./types.js";
+export { PermissionLevel, ToolCategory, createToolFactory } from "./types.js";
+export { ToolRegistry } from "./registry.js";
+export { blockTools, promptForTools, requireRole, combineRules, forTools, forCategory, presets, } from "./access-control.js";
+import { ToolRegistry } from "./registry.js";
+export declare const defaultRegistry: ToolRegistry;
+//# sourceMappingURL=index.d.ts.map

package/dist/ai-service/agent/tools2/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,YAAY,EACV,IAAI,EACJ,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAG9E,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAG7C,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,OAAO,GACR,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,eAAO,MAAM,eAAe,cAAqB,CAAC"}

package/dist/ai-service/agent/tools2/index.js

@@ -0,0 +1,18 @@
+/**
+ * Tool Registry System
+ *
+ * Provides a centralized registry for tools with:
+ * - Factory-based registration and instantiation
+ * - Access control middleware
+ * - User prompt handling
+ * - Type-safe tool definitions
+ */
+export { PermissionLevel, ToolCategory, createToolFactory } from "./types.js";
+// Export registry
+export { ToolRegistry } from "./registry.js";
+// Export access control utilities
+export { blockTools, promptForTools, requireRole, combineRules, forTools, forCategory, presets, } from "./access-control.js";
+// Export singleton instance for convenience
+import { ToolRegistry } from "./registry.js";
+export const defaultRegistry = new ToolRegistry();
+//# sourceMappingURL=index.js.map

package/dist/ai-service/agent/tools2/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAYH,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE9E,kBAAkB;AAClB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,kCAAkC;AAClC,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,OAAO,GACR,MAAM,qBAAqB,CAAC;AAE7B,4CAA4C;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,YAAY,EAAE,CAAC"}