@superblocksteam/vite-plugin-file-sync 2.0.42 → 2.0.43-next.0

package/dist/ai-service/agent/tools2/access-control.js

@@ -0,0 +1,216 @@
+import { AiMode } from "@superblocksteam/library-shared/types";
+import { PermissionLevel } from "./types.js";
+/**
+ * Access control utilities and common patterns.
+ */
+/**
+ * Block tools by name pattern.
+ *
+ * @param pattern - String or regex pattern to match tool names
+ * @returns Access control rule that blocks matching tools
+ *
+ * @example
+ * registry.addAccessRule(blockTools(/^delete-/));
+ * registry.addAccessRule(blockTools("drop-database"));
+ */
+export function blockTools(pattern) {
+    const patterns = Array.isArray(pattern) ? pattern : [pattern];
+    return (toolName) => {
+        for (const p of patterns) {
+            if (typeof p === "string" && toolName === p) {
+                return PermissionLevel.BLOCK;
+            }
+            if (p instanceof RegExp && p.test(toolName)) {
+                return PermissionLevel.BLOCK;
+            }
+        }
+        return PermissionLevel.ALLOW;
+    };
+}
+/**
+ * Require prompt for tools by name pattern.
+ *
+ * @param pattern - String or regex pattern to match tool names
+ * @returns Access control rule that prompts for matching tools
+ *
+ * @example
+ * registry.addAccessRule(promptForTools(/^delete-/));
+ * registry.addAccessRule(promptForTools(["delete-file", "drop-table"]));
+ */
+export function promptForTools(pattern) {
+    const patterns = Array.isArray(pattern) ? pattern : [pattern];
+    return (toolName) => {
+        for (const p of patterns) {
+            if (typeof p === "string" && toolName === p) {
+                return PermissionLevel.PROMPT;
+            }
+            if (p instanceof RegExp && p.test(toolName)) {
+                return PermissionLevel.PROMPT;
+            }
+        }
+        return PermissionLevel.ALLOW;
+    };
+}
+/**
+ * Require specific user role.
+ *
+ * @param allowedRoles - Role or array of roles allowed to execute
+ * @param permission - Permission level to return if role doesn't match
+ * @returns Access control rule that checks user role
+ *
+ * @example
+ * registry.addAccessRule(requireRole("admin", PermissionLevel.BLOCK));
+ * registry.addAccessRule(requireRole(["admin", "editor"], PermissionLevel.PROMPT));
+ */
+export function requireRole(allowedRoles, permission = PermissionLevel.BLOCK) {
+    const roles = Array.isArray(allowedRoles) ? allowedRoles : [allowedRoles];
+    return (_toolName, context) => {
+        if (!context.userRole) {
+            return permission;
+        }
+        return roles.includes(context.userRole)
+            ? PermissionLevel.ALLOW
+            : permission;
+    };
+}
+/**
+ * Combine multiple rules with AND logic (most restrictive wins).
+ *
+ * @param rules - Array of rules to combine
+ * @returns Access control rule that evaluates all rules
+ *
+ * @example
+ * const rule = combineRules([
+ *   requireRole("admin"),
+ *   blockTools(/^delete-/)
+ * ]);
+ */
+export function combineRules(rules) {
+    return async (toolName, context) => {
+        let permission = PermissionLevel.ALLOW;
+        for (const rule of rules) {
+            const result = await rule(toolName, context);
+            if (result === PermissionLevel.BLOCK) {
+                return PermissionLevel.BLOCK;
+            }
+            if (result === PermissionLevel.PROMPT) {
+                permission = PermissionLevel.PROMPT;
+            }
+        }
+        return permission;
+    };
+}
+/**
+ * Create a rule that only applies to specific tools.
+ *
+ * @param toolNames - Tool name or array of tool names
+ * @param rule - Rule to apply to those tools
+ * @returns Access control rule that conditionally applies
+ *
+ * @example
+ * const rule = forTools(["delete-file", "delete-api"], requireRole("admin"));
+ */
+export function forTools(toolNames, rule) {
+    const names = Array.isArray(toolNames) ? toolNames : [toolNames];
+    return async (toolName, context) => {
+        if (names.includes(toolName)) {
+            return rule(toolName, context);
+        }
+        return PermissionLevel.ALLOW;
+    };
+}
+/**
+ * Create a rule based on tool category.
+ *
+ * Requires ToolRegistry to be passed in to look up metadata.
+ *
+ * @param category - Category name to match
+ * @param permission - Permission level to return for matching category
+ * @returns Access control rule that checks tool category
+ *
+ * @example
+ * const rule = forCategory("filesystem", PermissionLevel.PROMPT);
+ */
+export function forCategory(category, permission) {
+    return (_toolName, context) => {
+        // Note: This requires metadata to be available in context
+        // You might need to pass registry or metadata differently
+        const toolCategory = context._toolCategory;
+        if (toolCategory === category) {
+            return permission;
+        }
+        return PermissionLevel.ALLOW;
+    };
+}
+/**
+ * Filter tools by AI mode and plan approval status.
+ *
+ * Returns an access control rule that blocks tools based on mode and plan approval:
+ * - BUILD mode: All tools available (ignores userApprovedPlan)
+ * - PLAN mode with approved plan (userApprovedPlan === true): All tools available
+ * - PLAN mode without approved plan: Only readonly tools available
+ *
+ * @returns Access control rule
+ *
+ * @example
+ * registry.addAccessRule(modeFilter());
+ * // Then pass mode and userApprovedPlan in context:
+ * registry.execute("tool-name", input, { mode: AiMode.PLAN, userApprovedPlan: true });
+ */
+export function modeFilter() {
+    return (_toolName, context, _category, readOnly) => {
+        // In BUILD mode (or undefined), allow all tools
+        if (context.mode === AiMode.BUILD || context.mode === undefined) {
+            return PermissionLevel.ALLOW;
+        }
+        // In PLAN mode:
+        // - If user approved plan: allow all tools
+        // - Otherwise: only allow readonly tools
+        if (context.mode === AiMode.PLAN) {
+            if (context.userApprovedPlan === true) {
+                return PermissionLevel.ALLOW; // Plan approved - all tools available
+            }
+            return readOnly ? PermissionLevel.ALLOW : PermissionLevel.BLOCK;
+        }
+        return PermissionLevel.ALLOW;
+    };
+}
+/**
+ * Common access control presets.
+ */
+export const presets = {
+    /**
+     * Development mode: Allow everything.
+     */
+    development: () => [],
+    /**
+     * Production mode: Prompt for destructive operations.
+     */
+    production: () => [
+        promptForTools([
+            /^delete-/,
+            /^drop-/,
+            /^remove-/,
+            "bash", // Prompt for bash commands
+        ]),
+    ],
+    /**
+     * Restricted mode: Block destructive operations entirely.
+     */
+    restricted: () => [
+        blockTools([/^delete-/, /^drop-/, /^remove-/, "bash"]),
+    ],
+    /**
+     * Guest mode: Read-only access.
+     */
+    guest: () => [
+        blockTools([/^write-/, /^edit-/, /^delete-/, /^create-/, "bash"]),
+    ],
+    /**
+     * AI mode filters: Filter tools based on AI mode (BUILD, PLAN, or undefined).
+     * When mode is undefined, it defaults to BUILD mode.
+     * Pass mode in context when executing: { mode: AiMode.PLAN }
+     */
+    aiMode: () => [modeFilter()],
+};
+//# sourceMappingURL=access-control.js.map

package/dist/ai-service/agent/tools2/access-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-control.js","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/access-control.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAC;AAC/D,OAAO,EAA0B,eAAe,EAAE,MAAM,YAAY,CAAC;AAErE;;GAEG;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CACxB,OAA8C;IAE9C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAE9D,OAAO,CAAC,QAAQ,EAAE,EAAE;QAClB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC5C,OAAO,eAAe,CAAC,KAAK,CAAC;YAC/B,CAAC;YACD,IAAI,CAAC,YAAY,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5C,OAAO,eAAe,CAAC,KAAK,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,OAAO,eAAe,CAAC,KAAK,CAAC;IAC/B,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA8C;IAE9C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAE9D,OAAO,CAAC,QAAQ,EAAE,EAAE;QAClB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC5C,OAAO,eAAe,CAAC,MAAM,CAAC;YAChC,CAAC;YACD,IAAI,CAAC,YAAY,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5C,OAAO,eAAe,CAAC,MAAM,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO,eAAe,CAAC,KAAK,CAAC;IAC/B,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CACzB,YAA+B,EAC/B,aAA8B,eAAe,CAAC,KAAK;IAEnD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAE1E,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;QAC5B,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;YACrC,CAAC,CAAC,eAAe,CAAC,KAAK;YACvB,CAAC,CAAC,UAAU,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,KAA0B;IACrD,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACjC,IAAI,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC;QAEvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAE7C,IAAI,MAAM,KAAK,eAAe,CAAC,KAAK,EAAE,CAAC;gBACrC,OAAO,eAAe,CAAC,KAAK,CAAC;YAC/B,CAAC;YACD,IAAI,MAAM,KAAK,eAAe,CAAC,MAAM,EAAE,CAAC;gBACtC,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC;YACtC,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,QAAQ,CACtB,SAA4B,EAC5B,IAAuB;IAEvB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEjE,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;QACjC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,eAAe,CAAC,KAAK,CAAC;IAC/B,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CACzB,QAAgB,EAChB,UAA2B;IAE3B,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;QAC5B,0DAA0D;QAC1D,0DAA0D;QAC1D,MAAM,YAAY,GAAI,OAAe,CAAC,aAAa,CAAC;QACpD,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,OAAO,eAAe,CAAC,KAAK,CAAC;IAC/B,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE;QACjD,gDAAgD;QAChD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChE,OAAO,eAAe,CAAC,KAAK,CAAC;QAC/B,CAAC;QAED,gBAAgB;QAChB,2CAA2C;QAC3C,yCAAyC;QACzC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;gBACtC,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,sCAAsC;YACtE,CAAC;YACD,OAAO,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC;QAClE,CAAC;QAED,OAAO,eAAe,CAAC,KAAK,CAAC;IAC/B,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB;;OAEG;IACH,WAAW,EAAE,GAAwB,EAAE,CAAC,EAAE;IAE1C;;OAEG;IACH,UAAU,EAAE,GAAwB,EAAE,CAAC;QACrC,cAAc,CAAC;YACb,UAAU;YACV,QAAQ;YACR,UAAU;YACV,MAAM,EAAE,2BAA2B;SACpC,CAAC;KACH;IAED;;OAEG;IACH,UAAU,EAAE,GAAwB,EAAE,CAAC;QACrC,UAAU,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;KACvD;IAED;;OAEG;IACH,KAAK,EAAE,GAAwB,EAAE,CAAC;QAChC,UAAU,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;KAClE;IAED;;;;OAIG;IACH,MAAM,EAAE,GAAwB,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;CAClD,CAAC"}

package/dist/ai-service/agent/tools2/example.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Example usage of the Tool Registry system.
+ *
+ * This file demonstrates:
+ * - Creating tool factories
+ * - Registering tools
+ * - Setting up access control
+ * - Executing tools with permissions
+ */
+import { ToolRegistry } from "./index.js";
+export declare function setupExampleRegistry(): ToolRegistry;
+export declare function exampleUsage(): Promise<void>;
+//# sourceMappingURL=example.d.ts.map

package/dist/ai-service/agent/tools2/example.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"example.d.ts","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/example.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,YAAY,EAMb,MAAM,YAAY,CAAC;AAkFpB,wBAAgB,oBAAoB,iBA+CnC;AAMD,wBAAsB,YAAY,kBAuCjC"}

package/dist/ai-service/agent/tools2/example.js

@@ -0,0 +1,143 @@
+/**
+ * Example usage of the Tool Registry system.
+ *
+ * This file demonstrates:
+ * - Creating tool factories
+ * - Registering tools
+ * - Setting up access control
+ * - Executing tools with permissions
+ */
+import { z } from "zod";
+import { ToolRegistry, PermissionLevel, promptForTools, requireRole, createToolFactory, ToolCategory, } from "./index.js";
+// ============================================================================
+// Example Tool: Add Event
+// ============================================================================
+const addEventToolFactory = createToolFactory("add-event", (_clark, _services, _queue) => {
+    // This would typically import from your existing tool
+    const PayloadSchema = z
+        .record(z.string(), z.enum(["string", "number", "boolean"]))
+        .optional();
+    return {
+        description: "Add a new event to the scope",
+        category: ToolCategory.COMPONENT,
+        defaultPermission: PermissionLevel.ALLOW,
+        inputSchema: z.object({
+            pageScopeId: z.string(),
+            entityName: z.string(),
+            payload: PayloadSchema,
+        }),
+        execute: async (input) => {
+            // Implementation here
+            console.log("Adding event:", input);
+            return {
+                success: true,
+                message: `Event ${input.entityName} added`,
+            };
+        },
+    };
+});
+// ============================================================================
+// Example Tool: Delete File (Destructive)
+// ============================================================================
+const deleteFileToolFactory = createToolFactory("delete-file", (_fileSystem) => ({
+    description: "Delete a file from the project",
+    category: ToolCategory.FILE,
+    defaultPermission: PermissionLevel.PROMPT, // Requires confirmation
+    inputSchema: z.object({
+        path: z.string(),
+    }),
+    execute: async (input) => {
+        // Implementation here
+        console.log("Deleting file:", input.path);
+        return {
+            success: true,
+            message: `File ${input.path} deleted`,
+        };
+    },
+}));
+// ============================================================================
+// Example Tool: Read File (Safe)
+// ============================================================================
+const readFileToolFactory = createToolFactory("read-file", (_fileSystem) => ({
+    description: "Read a file from the project",
+    category: ToolCategory.FILE,
+    defaultPermission: PermissionLevel.ALLOW,
+    inputSchema: z.object({
+        path: z.string(),
+    }),
+    execute: async (input) => {
+        console.log("Reading file:", input.path);
+        return {
+            content: "file contents here",
+        };
+    },
+}));
+// ============================================================================
+// Setup Example
+// ============================================================================
+export function setupExampleRegistry() {
+    const registry = new ToolRegistry();
+    // 1. Register all tools
+    registry.registerAll([
+        addEventToolFactory,
+        deleteFileToolFactory,
+        readFileToolFactory,
+    ]);
+    // 2. Setup access control rules
+    //    Rules are evaluated in order, most restrictive wins
+    // Block tools for guest users
+    registry.addAccessRule(requireRole(["admin", "editor"], PermissionLevel.BLOCK));
+    // Prompt for destructive operations
+    registry.addAccessRule(promptForTools(/^delete-/));
+    // Or use a preset
+    // registry.addAccessRule(...presets.production());
+    // 3. Setup prompt handler
+    registry.setPromptHandler(async (toolName, input, context) => {
+        console.log(`\n=== User Confirmation Required ===`);
+        console.log(`Tool: ${toolName}`);
+        console.log(`Input:`, input);
+        console.log(`User: ${context.userId} (${context.userRole})`);
+        console.log(`===================================\n`);
+        // In real implementation, show dialog and wait for user response
+        // For example: return await showConfirmDialog({ toolName, input });
+        return true; // Mock: auto-approve for demo
+    });
+    // 4. Instantiate tools with dependencies
+    const mockDeps = {
+        clark: {},
+        services: {},
+        queue: {},
+        fileSystem: {},
+    };
+    registry.instantiate(mockDeps);
+    return registry;
+}
+// ============================================================================
+// Usage Example
+// ============================================================================
+export async function exampleUsage() {
+    const registry = setupExampleRegistry();
+    // Example 1: Execute allowed tool
+    console.log("\n--- Example 1: Allowed tool ---");
+    const result1 = await registry.execute("read-file", { path: "/src/app.ts" }, { userId: "user-123", userRole: "admin" });
+    console.log("Result:", result1);
+    // Example 2: Execute tool requiring confirmation
+    console.log("\n--- Example 2: Tool requiring confirmation ---");
+    const result2 = await registry.execute("delete-file", { path: "/src/temp.ts" }, { userId: "user-123", userRole: "admin" });
+    console.log("Result:", result2);
+    // Example 3: Blocked tool (guest user)
+    console.log("\n--- Example 3: Blocked tool ---");
+    const result3 = await registry.execute("delete-file", { path: "/src/important.ts" }, { userId: "guest-456", userRole: "guest" });
+    console.log("Result:", result3);
+    // Example 4: Get all tools for AI SDK
+    console.log("\n--- Example 4: Get tools for AI SDK ---");
+    const tools = registry.getToolsRecord();
+    console.log("Available tools:", Object.keys(tools));
+    // Example 5: Get tool metadata
+    console.log("\n--- Example 5: Tool metadata ---");
+    const metadata = registry.getToolMetadata();
+    console.log("Tool metadata:", metadata);
+}
+// Uncomment to run examples:
+// exampleUsage();
+//# sourceMappingURL=example.js.map

package/dist/ai-service/agent/tools2/example.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"example.js","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/example.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E,MAAM,mBAAmB,GAAG,iBAAiB,CAC3C,WAAW,EACX,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;IAC5B,sDAAsD;IACtD,MAAM,aAAa,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;SAC3D,QAAQ,EAAE,CAAC;IAEd,OAAO;QACL,WAAW,EAAE,8BAA8B;QAC3C,QAAQ,EAAE,YAAY,CAAC,SAAS;QAChC,iBAAiB,EAAE,eAAe,CAAC,KAAK;QACxC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;YACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACtB,OAAO,EAAE,aAAa;SACvB,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACvB,sBAAsB;YACtB,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,SAAS,KAAK,CAAC,UAAU,QAAQ;aAC3C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,+EAA+E;AAC/E,0CAA0C;AAC1C,+EAA+E;AAE/E,MAAM,qBAAqB,GAAG,iBAAiB,CAC7C,aAAa,EACb,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAChB,WAAW,EAAE,gCAAgC;IAC7C,QAAQ,EAAE,YAAY,CAAC,IAAI;IAC3B,iBAAiB,EAAE,eAAe,CAAC,MAAM,EAAE,wBAAwB;IACnE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACvB,sBAAsB;QACtB,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,QAAQ,KAAK,CAAC,IAAI,UAAU;SACtC,CAAC;IACJ,CAAC;CACF,CAAC,CACH,CAAC;AAEF,+EAA+E;AAC/E,iCAAiC;AACjC,+EAA+E;AAE/E,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC3E,WAAW,EAAE,8BAA8B;IAC3C,QAAQ,EAAE,YAAY,CAAC,IAAI;IAC3B,iBAAiB,EAAE,eAAe,CAAC,KAAK;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACvB,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,oBAAoB;SAC9B,CAAC;IACJ,CAAC;CACF,CAAC,CAAC,CAAC;AAEJ,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,UAAU,oBAAoB;IAClC,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IAEpC,wBAAwB;IACxB,QAAQ,CAAC,WAAW,CAAC;QACnB,mBAAmB;QACnB,qBAAqB;QACrB,mBAAmB;KACpB,CAAC,CAAC;IAEH,gCAAgC;IAChC,yDAAyD;IAEzD,8BAA8B;IAC9B,QAAQ,CAAC,aAAa,CACpB,WAAW,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CACxD,CAAC;IAEF,oCAAoC;IACpC,QAAQ,CAAC,aAAa,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;IAEnD,kBAAkB;IAClB,mDAAmD;IAEnD,0BAA0B;IAC1B,QAAQ,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC3D,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QAErD,iEAAiE;QACjE,oEAAoE;QACpE,OAAO,IAAI,CAAC,CAAC,8BAA8B;IAC7C,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,MAAM,QAAQ,GAAG;QACf,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,EAAE;QACT,UAAU,EAAE,EAAE;KACf,CAAC;IACF,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAE/B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IAExC,kCAAkC;IAClC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,WAAW,EACX,EAAE,IAAI,EAAE,aAAa,EAAE,EACvB,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAC1C,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEhC,iDAAiD;IACjD,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,aAAa,EACb,EAAE,IAAI,EAAE,cAAc,EAAE,EACxB,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAC1C,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEhC,uCAAuC;IACvC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,aAAa,EACb,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAC7B,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAC3C,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEhC,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAEpD,+BAA+B;IAC/B,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,EAAE,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,6BAA6B;AAC7B,kBAAkB"}

package/dist/ai-service/agent/tools2/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Tool Registry System
+ *
+ * Provides a centralized registry for tools with:
+ * - Factory-based registration and instantiation
+ * - Access control middleware
+ * - User prompt handling
+ * - Type-safe tool definitions
+ */
+export type { Tool, ToolFactory, ToolExecutionResult, AccessControlContext, AccessControlRule, PromptHandler, } from "./types.js";
+export { PermissionLevel, ToolCategory, createToolFactory } from "./types.js";
+export { ToolRegistry } from "./registry.js";
+export { blockTools, promptForTools, requireRole, combineRules, forTools, forCategory, presets, } from "./access-control.js";
+import { ToolRegistry } from "./registry.js";
+export declare const defaultRegistry: ToolRegistry;
+//# sourceMappingURL=index.d.ts.map

package/dist/ai-service/agent/tools2/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,YAAY,EACV,IAAI,EACJ,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAG9E,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAG7C,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,OAAO,GACR,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,eAAO,MAAM,eAAe,cAAqB,CAAC"}

package/dist/ai-service/agent/tools2/index.js

@@ -0,0 +1,18 @@
+/**
+ * Tool Registry System
+ *
+ * Provides a centralized registry for tools with:
+ * - Factory-based registration and instantiation
+ * - Access control middleware
+ * - User prompt handling
+ * - Type-safe tool definitions
+ */
+export { PermissionLevel, ToolCategory, createToolFactory } from "./types.js";
+// Export registry
+export { ToolRegistry } from "./registry.js";
+// Export access control utilities
+export { blockTools, promptForTools, requireRole, combineRules, forTools, forCategory, presets, } from "./access-control.js";
+// Export singleton instance for convenience
+import { ToolRegistry } from "./registry.js";
+export const defaultRegistry = new ToolRegistry();
+//# sourceMappingURL=index.js.map

package/dist/ai-service/agent/tools2/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAYH,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE9E,kBAAkB;AAClB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,kCAAkC;AAClC,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,OAAO,GACR,MAAM,qBAAqB,CAAC;AAE7B,4CAA4C;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,YAAY,EAAE,CAAC"}

package/dist/ai-service/agent/tools2/registry.d.ts

@@ -0,0 +1,167 @@
+import { type Tool, type ToolFactory, type AccessControlContext, type AccessControlRule, type PromptHandler, type ToolExecutionResult, PermissionLevel } from "./types.js";
+/**
+ * Central registry for tools with access control.
+ *
+ * Provides:
+ * - Tool registration and instantiation
+ * - Access control middleware
+ * - User prompt handling
+ * - Tool discovery and metadata
+ */
+/**
+ * Middleware function that can transform tools.
+ * Receives the tool name and tool instance, returns transformed tool.
+ */
+export type ToolMiddleware = (name: string, tool: Tool) => Tool;
+export declare class ToolRegistry {
+    private factories;
+    private instances;
+    private accessRules;
+    private middleware;
+    private promptHandler?;
+    /**
+     * Register a tool factory and optionally instantiate it immediately.
+     *
+     * @param factory - Tool factory to register
+     * @param deps - Optional dependencies to instantiate the tool immediately
+     * @throws Error if tool with same name already registered
+     */
+    register(factory: ToolFactory, ...deps: any[]): void;
+    /**
+     * Register an already-instantiated tool (for tools not using factory pattern).
+     *
+     * @param tool - Tool instance to register (must have name and execute)
+     * @throws Error if tool with same name already registered
+     */
+    registerTool(tool: any): void;
+    /**
+     * Get list of all registered tool names.
+     *
+     * @returns Array of tool names
+     */
+    listTools(): string[];
+    /**
+     * Register multiple tool factories at once.
+     *
+     * @param factories - Array of tool factories to register
+     */
+    registerAll(factories: ToolFactory[]): void;
+    /**
+     * Instantiate all registered tools with dependencies.
+     *
+     * This should be called once dependencies are available.
+     * Tools will be created by calling their factory functions.
+     *
+     * @param deps - Dependencies to pass to tool factory functions
+     * @throws Error if tool name doesn't match factory name
+     */
+    instantiate(...deps: any[]): void;
+    /**
+     * Wrap a tool to enforce access control on execute().
+     *
+     * Returns a proxied version where execute() goes through the registry's
+     * permission checks, ensuring access control is enforced regardless of
+     * how the tool is accessed.
+     *
+     * @param tool - Raw tool instance
+     * @param context - Access control context to use for permission checks
+     * @returns Wrapped tool with access-controlled execute()
+     */
+    private wrapTool;
+    /**
+     * Get a tool instance by name.
+     *
+     * Returns a wrapped version where execute() enforces access control.
+     *
+     * @param name - Tool name
+     * @param context - Access control context (optional)
+     * @returns Wrapped tool instance or undefined if not found
+     */
+    getTool(name: string, context?: AccessControlContext): Tool | undefined;
+    /**
+     * Get all tool instances.
+     *
+     * Returns wrapped versions where execute() enforces access control.
+     *
+     * @param context - Access control context (optional)
+     * @returns Array of all wrapped tool instances
+     */
+    getAllTools(context?: AccessControlContext): Tool[];
+    /**
+     * Get metadata for all tools.
+     *
+     * @returns Array of metadata for all instantiated tools
+     */
+    getToolMetadata(): Array<{
+        name: string;
+        description: string;
+        category?: string;
+        defaultPermission?: PermissionLevel;
+    }>;
+    /**
+     * Get tools as a record for AI SDK.
+     *
+     * Returns wrapped versions where execute() enforces access control.
+     * Filters out tools that are BLOCKED by access control rules.
+     *
+     * @param context - Access control context (optional, e.g., { mode: AiMode.PLAN })
+     * @returns Record mapping tool names to wrapped tool instances
+     */
+    getToolsRecord(context?: AccessControlContext): Promise<Record<string, Tool>>;
+    /**
+     * Add one or more access control rules.
+     *
+     * Rules are evaluated in order when checking permissions.
+     * Most restrictive permission level wins.
+     *
+     * @param rules - Access control rule function(s)
+     */
+    addAccessRule(...rules: AccessControlRule[]): void;
+    /**
+     * Add middleware to transform tools.
+     *
+     * Middleware is applied in order after access control filtering.
+     * Each middleware receives the tool name and instance and returns a transformed tool.
+     *
+     * @param middleware - Middleware function(s)
+     *
+     * @example
+     * registry.addMiddleware((name, tool) => profileTool(name, tool));
+     */
+    addMiddleware(...middleware: ToolMiddleware[]): void;
+    /**
+     * Set handler for prompting user for confirmation.
+     *
+     * @param handler - Prompt handler function
+     */
+    setPromptHandler(handler: PromptHandler): void;
+    /**
+     * Check permission level for tool execution.
+     *
+     * Evaluates all access control rules and returns most restrictive permission.
+     *
+     * @param toolName - Name of tool to check
+     * @param context - Access control context
+     * @returns Permission level for execution
+     */
+    checkPermission(toolName: string, context: AccessControlContext): Promise<PermissionLevel>;
+    /**
+     * Execute a tool with access control.
+     *
+     * Checks permissions, prompts user if needed, validates input,
+     * and executes the tool.
+     *
+     * @param toolName - Name of tool to execute
+     * @param input - Input data for tool
+     * @param context - Access control context
+     * @returns Execution result with success status and data/error
+     */
+    execute<Input, Output>(toolName: string, input: Input, context?: AccessControlContext): Promise<ToolExecutionResult<Output>>;
+    /**
+     * Clear all registered tools and rules.
+     *
+     * Useful for testing or resetting state.
+     */
+    clear(): void;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/ai-service/agent/tools2/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,IAAI,EACT,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,eAAe,EAChB,MAAM,YAAY,CAAC;AAEpB;;;;;;;;GAQG;AACH;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,KAAK,IAAI,CAAC;AAEhE,qBAAa,YAAY;IACvB,OAAO,CAAC,SAAS,CAAkC;IACnD,OAAO,CAAC,SAAS,CAA2B;IAC5C,OAAO,CAAC,WAAW,CAA2B;IAC9C,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,aAAa,CAAC,CAAgB;IAEtC;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI;IAkBpD;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI;IAW7B;;;;OAIG;IACH,SAAS,IAAI,MAAM,EAAE;IAIrB;;;;OAIG;IACH,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI;IAM3C;;;;;;;;OAQG;IACH,WAAW,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI;IAejC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,QAAQ;IAchB;;;;;;;;OAQG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS;IAKvE;;;;;;;OAOG;IACH,WAAW,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,IAAI,EAAE;IAOnD;;;;OAIG;IACH,eAAe,IAAI,KAAK,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,iBAAiB,CAAC,EAAE,eAAe,CAAC;KACrC,CAAC;IASF;;;;;;;;OAQG;IACG,cAAc,CAClB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAwBhC;;;;;;;OAOG;IACH,aAAa,CAAC,GAAG,KAAK,EAAE,iBAAiB,EAAE,GAAG,IAAI;IAIlD;;;;;;;;;;OAUG;IACH,aAAa,CAAC,GAAG,UAAU,EAAE,cAAc,EAAE,GAAG,IAAI;IAIpD;;;;OAIG;IACH,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;IAI9C;;;;;;;;OAQG;IACG,eAAe,CACnB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,eAAe,CAAC;IA4B3B;;;;;;;;;;OAUG;IACG,OAAO,CAAC,KAAK,EAAE,MAAM,EACzB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,KAAK,EACZ,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAwDvC;;;;OAIG;IACH,KAAK,IAAI,IAAI;CAMd"}