@superblocksteam/vite-plugin-file-sync 2.0.51 → 2.0.52-next.0

package/dist/ai-service/agent/tools2/entity-permissions.d.ts

@@ -0,0 +1,180 @@
+/**
+ * Entity permission management for access control.
+ *
+ * Provides a generalized system for tracking user approvals for accessing
+ * specific entities (e.g., integrations, files, APIs). This enables granular
+ * per-entity access control where users can approve access to specific
+ * resources rather than blanket permissions.
+ */
+import type { Tool } from "./types.js";
+/**
+ * Types of entities that can have permissions tracked.
+ *
+ * Extensible to support future entity types like files, APIs, etc.
+ */
+export declare enum EntityType {
+    /** Integration/datasource entities */
+    INTEGRATION = "integration"
+}
+/**
+ * Permission key components for scoping.
+ * Array of strings that identify the scope (e.g., ["toolName"] or ["category", "readonly"]).
+ */
+export type ToolPermissionKey = string[];
+/**
+ * Formatted scope string for storage.
+ * Created by joining ToolPermissionKey components with a delimiter.
+ */
+export type ToolPermissionScope = string;
+/**
+ * Strategy for determining how permissions are scoped by tool.
+ *
+ * Different strategies enable different granularities:
+ * - Per-tool: Each tool requires separate approval
+ * - Per-category: All tools in a category share approvals
+ * - Per-access: Separate read/write permissions
+ */
+export declare abstract class ToolPermissionKeyStrategy {
+    /**
+     * Generate permission key components for a tool.
+     *
+     * @param tool - Tool to generate key for
+     * @returns Array of key components
+     */
+    abstract getToolPermissionKey(tool: Tool): ToolPermissionKey;
+    /**
+     * Format permission key into storage scope string.
+     *
+     * Default implementation joins components with ':' delimiter.
+     *
+     * @param key - Permission key components
+     * @returns Formatted scope string
+     */
+    formatScope(key: ToolPermissionKey): ToolPermissionScope;
+}
+/**
+ * Default strategy: scope permissions per individual tool.
+ *
+ * Most granular approach - each tool requires separate approval
+ * for accessing entities. Provides maximum user control.
+ */
+export declare class ToolNamePermissionKeyStrategy extends ToolPermissionKeyStrategy {
+    getToolPermissionKey(tool: Tool): ToolPermissionKey;
+}
+/**
+ * Store for tracking entity-level permissions.
+ *
+ * This interface abstracts the storage mechanism, allowing different
+ * implementations (session-based, persistent, etc.) to be swapped out
+ * without changing the access control logic.
+ *
+ * Permissions are scoped by tool permission scope strings, enabling
+ * granular control (e.g., per-tool, per-category, etc.).
+ */
+export interface EntityPermissionStore {
+    /**
+     * Check if access to a specific entity has been approved for a scope.
+     *
+     * @param entityType - The type of entity to check
+     * @param entityId - The unique identifier of the entity
+     * @param scope - Permission scope (e.g., "toolName", "category:read")
+     * @returns True if the entity has been approved for this scope
+     */
+    isApproved(entityType: EntityType, entityId: string, scope: ToolPermissionScope): boolean;
+    /**
+     * Approve access to a specific entity for a scope.
+     *
+     * Once approved, future permission checks for this entity and scope will
+     * return true until explicitly revoked or the store is cleared.
+     *
+     * @param entityType - The type of entity to approve
+     * @param entityId - The unique identifier of the entity
+     * @param scope - Permission scope (e.g., "toolName", "category:read")
+     */
+    approve(entityType: EntityType, entityId: string, scope: ToolPermissionScope): void;
+    /**
+     * Revoke access to a specific entity for a scope.
+     *
+     * Removes the approval for this entity and scope, requiring re-approval
+     * for future access attempts.
+     *
+     * @param entityType - The type of entity to revoke
+     * @param entityId - The unique identifier of the entity
+     * @param scope - Permission scope (e.g., "toolName", "category:read")
+     */
+    revoke(entityType: EntityType, entityId: string, scope: ToolPermissionScope): void;
+    /**
+     * Clear all entity approvals.
+     *
+     * Removes all stored approvals across all entity types and scopes.
+     */
+    clear(): void;
+    /**
+     * Get all approved entity IDs for a specific entity type and optional scope.
+     *
+     * Useful for debugging, inspection, and UI display of approved entities.
+     *
+     * @param entityType - The type of entity to list approvals for
+     * @param scope - Optional permission scope. If provided, returns only approvals
+     *                for that scope. If omitted, returns all approved entities
+     *                across all scopes.
+     * @returns Array of approved entity IDs for the given type (and scope)
+     */
+    getApproved(entityType: EntityType, scope?: ToolPermissionScope): string[];
+}
+/**
+ * Session-scoped implementation of entity permission store.
+ *
+ * Stores approvals in memory for the duration of the session.
+ * Approvals are lost when the session ends or the store is cleared.
+ *
+ * Permissions are scoped, allowing different tools/categories to have
+ * independent approval states for the same entity.
+ *
+ * This implementation is suitable for session-based permission tracking
+ * and can be replaced with a persistent implementation if needed.
+ */
+export declare class SessionEntityPermissionStore implements EntityPermissionStore {
+    private permissions;
+    constructor();
+    /**
+     * Check if access to a specific entity has been approved for a scope.
+     *
+     * @param entityType - The type of entity to check
+     * @param entityId - The unique identifier of the entity
+     * @param scope - Permission scope
+     * @returns True if the entity has been approved for this scope
+     */
+    isApproved(entityType: EntityType, entityId: string, scope: ToolPermissionScope): boolean;
+    /**
+     * Approve access to a specific entity for a scope.
+     *
+     * @param entityType - The type of entity to approve
+     * @param entityId - The unique identifier of the entity
+     * @param scope - Permission scope
+     */
+    approve(entityType: EntityType, entityId: string, scope: ToolPermissionScope): void;
+    /**
+     * Revoke access to a specific entity for a scope.
+     *
+     * @param entityType - The type of entity to revoke
+     * @param entityId - The unique identifier of the entity
+     * @param scope - Permission scope
+     */
+    revoke(entityType: EntityType, entityId: string, scope: ToolPermissionScope): void;
+    /**
+     * Clear all entity approvals across all scopes.
+     */
+    clear(): void;
+    /**
+     * Get all approved entity IDs for a specific entity type and optional scope.
+     *
+     * @param entityType - The type of entity to list approvals for
+     * @param scope - Optional permission scope. If provided, returns only approvals
+     *                for that scope. If omitted, returns all approved entities
+     *                across all scopes (deduplicated).
+     * @returns Array of approved entity IDs for the given type (and scope)
+     */
+    getApproved(entityType: EntityType, scope?: ToolPermissionScope): string[];
+}
+//# sourceMappingURL=entity-permissions.d.ts.map

package/dist/ai-service/agent/tools2/entity-permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-permissions.d.ts","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/entity-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAEvC;;;;GAIG;AACH,oBAAY,UAAU;IACpB,sCAAsC;IACtC,WAAW,gBAAgB;CAC5B;AAED;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,EAAE,CAAC;AAEzC;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEzC;;;;;;;GAOG;AACH,8BAAsB,yBAAyB;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,oBAAoB,CAAC,IAAI,EAAE,IAAI,GAAG,iBAAiB;IAE5D;;;;;;;OAOG;IACH,WAAW,CAAC,GAAG,EAAE,iBAAiB,GAAG,mBAAmB;CAGzD;AAED;;;;;GAKG;AACH,qBAAa,6BAA8B,SAAQ,yBAAyB;IAC1E,oBAAoB,CAAC,IAAI,EAAE,IAAI,GAAG,iBAAiB;CAGpD;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;;;;;OAOG;IACH,UAAU,CACR,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC;IAEX;;;;;;;;;OASG;IACH,OAAO,CACL,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,mBAAmB,GACzB,IAAI,CAAC;IAER;;;;;;;;;OASG;IACH,MAAM,CACJ,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,mBAAmB,GACzB,IAAI,CAAC;IAER;;;;OAIG;IACH,KAAK,IAAI,IAAI,CAAC;IAEd;;;;;;;;;;OAUG;IACH,WAAW,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,mBAAmB,GAAG,MAAM,EAAE,CAAC;CAC5E;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,4BAA6B,YAAW,qBAAqB;IACxE,OAAO,CAAC,WAAW,CAAyD;;IAM5E;;;;;;;OAOG;IACH,UAAU,CACR,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,mBAAmB,GACzB,OAAO;IASV;;;;;;OAMG;IACH,OAAO,CACL,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,mBAAmB,GACzB,IAAI;IAgBP;;;;;;OAMG;IACH,MAAM,CACJ,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,mBAAmB,GACzB,IAAI;IASP;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;;;;;;;OAQG;IACH,WAAW,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,mBAAmB,GAAG,MAAM,EAAE;CAqB3E"}

package/dist/ai-service/agent/tools2/entity-permissions.js

@@ -0,0 +1,154 @@
+/**
+ * Entity permission management for access control.
+ *
+ * Provides a generalized system for tracking user approvals for accessing
+ * specific entities (e.g., integrations, files, APIs). This enables granular
+ * per-entity access control where users can approve access to specific
+ * resources rather than blanket permissions.
+ */
+/**
+ * Types of entities that can have permissions tracked.
+ *
+ * Extensible to support future entity types like files, APIs, etc.
+ */
+export var EntityType;
+(function (EntityType) {
+    /** Integration/datasource entities */
+    EntityType["INTEGRATION"] = "integration";
+})(EntityType || (EntityType = {}));
+/**
+ * Strategy for determining how permissions are scoped by tool.
+ *
+ * Different strategies enable different granularities:
+ * - Per-tool: Each tool requires separate approval
+ * - Per-category: All tools in a category share approvals
+ * - Per-access: Separate read/write permissions
+ */
+export class ToolPermissionKeyStrategy {
+    /**
+     * Format permission key into storage scope string.
+     *
+     * Default implementation joins components with ':' delimiter.
+     *
+     * @param key - Permission key components
+     * @returns Formatted scope string
+     */
+    formatScope(key) {
+        return key.join(":");
+    }
+}
+/**
+ * Default strategy: scope permissions per individual tool.
+ *
+ * Most granular approach - each tool requires separate approval
+ * for accessing entities. Provides maximum user control.
+ */
+export class ToolNamePermissionKeyStrategy extends ToolPermissionKeyStrategy {
+    getToolPermissionKey(tool) {
+        return [tool.name];
+    }
+}
+/**
+ * Session-scoped implementation of entity permission store.
+ *
+ * Stores approvals in memory for the duration of the session.
+ * Approvals are lost when the session ends or the store is cleared.
+ *
+ * Permissions are scoped, allowing different tools/categories to have
+ * independent approval states for the same entity.
+ *
+ * This implementation is suitable for session-based permission tracking
+ * and can be replaced with a persistent implementation if needed.
+ */
+export class SessionEntityPermissionStore {
+    permissions;
+    constructor() {
+        this.permissions = new Map();
+    }
+    /**
+     * Check if access to a specific entity has been approved for a scope.
+     *
+     * @param entityType - The type of entity to check
+     * @param entityId - The unique identifier of the entity
+     * @param scope - Permission scope
+     * @returns True if the entity has been approved for this scope
+     */
+    isApproved(entityType, entityId, scope) {
+        const scopedPermissions = this.permissions.get(entityType);
+        if (!scopedPermissions) {
+            return false;
+        }
+        const approved = scopedPermissions.get(scope);
+        return approved?.has(entityId) ?? false;
+    }
+    /**
+     * Approve access to a specific entity for a scope.
+     *
+     * @param entityType - The type of entity to approve
+     * @param entityId - The unique identifier of the entity
+     * @param scope - Permission scope
+     */
+    approve(entityType, entityId, scope) {
+        let scopedPermissions = this.permissions.get(entityType);
+        if (!scopedPermissions) {
+            scopedPermissions = new Map();
+            this.permissions.set(entityType, scopedPermissions);
+        }
+        let approved = scopedPermissions.get(scope);
+        if (!approved) {
+            approved = new Set();
+            scopedPermissions.set(scope, approved);
+        }
+        approved.add(entityId);
+    }
+    /**
+     * Revoke access to a specific entity for a scope.
+     *
+     * @param entityType - The type of entity to revoke
+     * @param entityId - The unique identifier of the entity
+     * @param scope - Permission scope
+     */
+    revoke(entityType, entityId, scope) {
+        const scopedPermissions = this.permissions.get(entityType);
+        if (!scopedPermissions) {
+            return;
+        }
+        const approved = scopedPermissions.get(scope);
+        approved?.delete(entityId);
+    }
+    /**
+     * Clear all entity approvals across all scopes.
+     */
+    clear() {
+        this.permissions.clear();
+    }
+    /**
+     * Get all approved entity IDs for a specific entity type and optional scope.
+     *
+     * @param entityType - The type of entity to list approvals for
+     * @param scope - Optional permission scope. If provided, returns only approvals
+     *                for that scope. If omitted, returns all approved entities
+     *                across all scopes (deduplicated).
+     * @returns Array of approved entity IDs for the given type (and scope)
+     */
+    getApproved(entityType, scope) {
+        const scopedPermissions = this.permissions.get(entityType);
+        if (!scopedPermissions) {
+            return [];
+        }
+        // If scope provided, return only that scope's entities
+        if (scope !== undefined) {
+            const approved = scopedPermissions.get(scope);
+            return approved ? Array.from(approved) : [];
+        }
+        // No scope provided - return all entities across all scopes (deduplicated)
+        const allEntities = new Set();
+        for (const approved of scopedPermissions.values()) {
+            for (const entityId of approved) {
+                allEntities.add(entityId);
+            }
+        }
+        return Array.from(allEntities);
+    }
+}
+//# sourceMappingURL=entity-permissions.js.map

package/dist/ai-service/agent/tools2/entity-permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-permissions.js","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/entity-permissions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH;;;;GAIG;AACH,MAAM,CAAN,IAAY,UAGX;AAHD,WAAY,UAAU;IACpB,sCAAsC;IACtC,yCAA2B,CAAA;AAC7B,CAAC,EAHW,UAAU,KAAV,UAAU,QAGrB;AAcD;;;;;;;GAOG;AACH,MAAM,OAAgB,yBAAyB;IAS7C;;;;;;;OAOG;IACH,WAAW,CAAC,GAAsB;QAChC,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,6BAA8B,SAAQ,yBAAyB;IAC1E,oBAAoB,CAAC,IAAU;QAC7B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;CACF;AAgFD;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,4BAA4B;IAC/B,WAAW,CAAyD;IAE5E;QACE,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;;;OAOG;IACH,UAAU,CACR,UAAsB,EACtB,QAAgB,EAChB,KAA0B;QAE1B,MAAM,iBAAiB,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9C,OAAO,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC;IAC1C,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CACL,UAAsB,EACtB,QAAgB,EAChB,KAA0B;QAE1B,IAAI,iBAAiB,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,iBAAiB,GAAG,IAAI,GAAG,EAAE,CAAC;YAC9B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC;YACrB,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC;QAED,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,UAAsB,EACtB,QAAgB,EAChB,KAA0B;QAE1B,MAAM,iBAAiB,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9C,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;;OAQG;IACH,WAAW,CAAC,UAAsB,EAAE,KAA2B;QAC7D,MAAM,iBAAiB,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,uDAAuD;QACvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC9C,OAAO,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,CAAC;QAED,2EAA2E;QAC3E,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;QACtC,KAAK,MAAM,QAAQ,IAAI,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC;YAClD,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;gBAChC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjC,CAAC;CACF"}

package/dist/ai-service/agent/tools2/example.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"example.d.ts","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/example.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,YAAY,EAMb,MAAM,YAAY,CAAC;AAkFpB,wBAAgB,oBAAoB,iBA+CnC;AAMD,wBAAsB,YAAY,kBAuCjC"}
+{"version":3,"file":"example.d.ts","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/example.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,YAAY,EAOb,MAAM,YAAY,CAAC;AAkFpB,wBAAgB,oBAAoB,iBAoEnC;AAMD,wBAAsB,YAAY,kBAuCjC"}

package/dist/ai-service/agent/tools2/example.js

@@ -8,7 +8,7 @@
  * - Executing tools with permissions
  */
 import { z } from "zod";
-import { ToolRegistry, PermissionLevel, promptForTools, requireRole, createToolFactory, ToolCategory, } from "./index.js";
+import { ToolRegistry, PermissionLevel, ToolPermissionResponse, promptForTools, requireRole, createToolFactory, ToolCategory, } from "./index.js";
 // ============================================================================
 // Example Tool: Add Event
 // ============================================================================
@@ -92,15 +92,34 @@ export function setupExampleRegistry() {
     // Or use a preset
     // registry.addAccessRule(...presets.production());
     // 3. Setup prompt handler
-    registry.setPromptHandler(async (toolName, input, context) => {
+    registry.setPromptHandler(async (tool, input, context) => {
         console.log(`\n=== User Confirmation Required ===`);
-        console.log(`Tool: ${toolName}`);
-        console.log(`Input:`, input);
+        console.log(`Tool: ${tool.name}`);
+        // Use tool formatting methods if available
+        const actionName = tool.getActionName?.();
+        const formattedInput = tool.formatInput?.(input);
+        if (actionName) {
+            console.log(`Action: ${actionName.future}`);
+        }
+        if (formattedInput) {
+            if (formattedInput.targets.length > 0) {
+                console.log(`Targets: ${formattedInput.targets.join(", ")}`);
+            }
+            if (formattedInput.summary) {
+                console.log(`Summary: ${formattedInput.summary}`);
+            }
+            if (formattedInput.details) {
+                console.log(`Details:\n${formattedInput.details}`);
+            }
+        }
+        else {
+            console.log(`Input:`, input);
+        }
         console.log(`User: ${context.userId} (${context.userRole})`);
         console.log(`===================================\n`);
         // In real implementation, show dialog and wait for user response
-        // For example: return await showConfirmDialog({ toolName, input });
-        return true; // Mock: auto-approve for demo
+        // For example: return await showConfirmDialog({ tool, input });
+        return ToolPermissionResponse.ALLOW; // Mock: auto-approve for demo
     });
     // 4. Instantiate tools with dependencies
     const mockDeps = {

package/dist/ai-service/agent/tools2/example.js.map

@@ -1 +1 @@
-{"version":3,"file":"example.js","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/example.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E,MAAM,mBAAmB,GAAG,iBAAiB,CAC3C,WAAW,EACX,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;IAC5B,sDAAsD;IACtD,MAAM,aAAa,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;SAC3D,QAAQ,EAAE,CAAC;IAEd,OAAO;QACL,WAAW,EAAE,8BAA8B;QAC3C,QAAQ,EAAE,YAAY,CAAC,SAAS;QAChC,iBAAiB,EAAE,eAAe,CAAC,KAAK;QACxC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;YACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACtB,OAAO,EAAE,aAAa;SACvB,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACvB,sBAAsB;YACtB,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,SAAS,KAAK,CAAC,UAAU,QAAQ;aAC3C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,+EAA+E;AAC/E,0CAA0C;AAC1C,+EAA+E;AAE/E,MAAM,qBAAqB,GAAG,iBAAiB,CAC7C,aAAa,EACb,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAChB,WAAW,EAAE,gCAAgC;IAC7C,QAAQ,EAAE,YAAY,CAAC,IAAI;IAC3B,iBAAiB,EAAE,eAAe,CAAC,MAAM,EAAE,wBAAwB;IACnE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACvB,sBAAsB;QACtB,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,QAAQ,KAAK,CAAC,IAAI,UAAU;SACtC,CAAC;IACJ,CAAC;CACF,CAAC,CACH,CAAC;AAEF,+EAA+E;AAC/E,iCAAiC;AACjC,+EAA+E;AAE/E,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC3E,WAAW,EAAE,8BAA8B;IAC3C,QAAQ,EAAE,YAAY,CAAC,IAAI;IAC3B,iBAAiB,EAAE,eAAe,CAAC,KAAK;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACvB,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,oBAAoB;SAC9B,CAAC;IACJ,CAAC;CACF,CAAC,CAAC,CAAC;AAEJ,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,UAAU,oBAAoB;IAClC,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IAEpC,wBAAwB;IACxB,QAAQ,CAAC,WAAW,CAAC;QACnB,mBAAmB;QACnB,qBAAqB;QACrB,mBAAmB;KACpB,CAAC,CAAC;IAEH,gCAAgC;IAChC,yDAAyD;IAEzD,8BAA8B;IAC9B,QAAQ,CAAC,aAAa,CACpB,WAAW,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CACxD,CAAC;IAEF,oCAAoC;IACpC,QAAQ,CAAC,aAAa,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;IAEnD,kBAAkB;IAClB,mDAAmD;IAEnD,0BAA0B;IAC1B,QAAQ,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC3D,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QAErD,iEAAiE;QACjE,oEAAoE;QACpE,OAAO,IAAI,CAAC,CAAC,8BAA8B;IAC7C,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,MAAM,QAAQ,GAAG;QACf,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,EAAE;QACT,UAAU,EAAE,EAAE;KACf,CAAC;IACF,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAE/B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IAExC,kCAAkC;IAClC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,WAAW,EACX,EAAE,IAAI,EAAE,aAAa,EAAE,EACvB,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAC1C,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEhC,iDAAiD;IACjD,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,aAAa,EACb,EAAE,IAAI,EAAE,cAAc,EAAE,EACxB,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAC1C,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEhC,uCAAuC;IACvC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,aAAa,EACb,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAC7B,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAC3C,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEhC,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAEpD,+BAA+B;IAC/B,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,EAAE,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,6BAA6B;AAC7B,kBAAkB"}
+{"version":3,"file":"example.js","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/example.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,sBAAsB,EACtB,cAAc,EACd,WAAW,EACX,iBAAiB,EACjB,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E,MAAM,mBAAmB,GAAG,iBAAiB,CAC3C,WAAW,EACX,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE;IAC5B,sDAAsD;IACtD,MAAM,aAAa,GAAG,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;SAC3D,QAAQ,EAAE,CAAC;IAEd,OAAO;QACL,WAAW,EAAE,8BAA8B;QAC3C,QAAQ,EAAE,YAAY,CAAC,SAAS;QAChC,iBAAiB,EAAE,eAAe,CAAC,KAAK;QACxC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;YACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACtB,OAAO,EAAE,aAAa;SACvB,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACvB,sBAAsB;YACtB,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,SAAS,KAAK,CAAC,UAAU,QAAQ;aAC3C,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,+EAA+E;AAC/E,0CAA0C;AAC1C,+EAA+E;AAE/E,MAAM,qBAAqB,GAAG,iBAAiB,CAC7C,aAAa,EACb,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAChB,WAAW,EAAE,gCAAgC;IAC7C,QAAQ,EAAE,YAAY,CAAC,IAAI;IAC3B,iBAAiB,EAAE,eAAe,CAAC,MAAM,EAAE,wBAAwB;IACnE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACvB,sBAAsB;QACtB,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,QAAQ,KAAK,CAAC,IAAI,UAAU;SACtC,CAAC;IACJ,CAAC;CACF,CAAC,CACH,CAAC;AAEF,+EAA+E;AAC/E,iCAAiC;AACjC,+EAA+E;AAE/E,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC3E,WAAW,EAAE,8BAA8B;IAC3C,QAAQ,EAAE,YAAY,CAAC,IAAI;IAC3B,iBAAiB,EAAE,eAAe,CAAC,KAAK;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACvB,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,oBAAoB;SAC9B,CAAC;IACJ,CAAC;CACF,CAAC,CAAC,CAAC;AAEJ,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,UAAU,oBAAoB;IAClC,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IAEpC,wBAAwB;IACxB,QAAQ,CAAC,WAAW,CAAC;QACnB,mBAAmB;QACnB,qBAAqB;QACrB,mBAAmB;KACpB,CAAC,CAAC;IAEH,gCAAgC;IAChC,yDAAyD;IAEzD,8BAA8B;IAC9B,QAAQ,CAAC,aAAa,CACpB,WAAW,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CACxD,CAAC;IAEF,oCAAoC;IACpC,QAAQ,CAAC,aAAa,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;IAEnD,kBAAkB;IAClB,mDAAmD;IAEnD,0BAA0B;IAC1B,QAAQ,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACvD,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAElC,2CAA2C;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QAC1C,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;QAEjD,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,cAAc,EAAE,CAAC;YACnB,IAAI,cAAc,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,YAAY,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,YAAY,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,aAAa,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QAErD,iEAAiE;QACjE,gEAAgE;QAChE,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC,8BAA8B;IACrE,CAAC,CAAC,CAAC;IAEH,yCAAyC;IACzC,MAAM,QAAQ,GAAG;QACf,KAAK,EAAE,EAAE;QACT,QAAQ,EAAE,EAAE;QACZ,KAAK,EAAE,EAAE;QACT,UAAU,EAAE,EAAE;KACf,CAAC;IACF,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAE/B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IAExC,kCAAkC;IAClC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,WAAW,EACX,EAAE,IAAI,EAAE,aAAa,EAAE,EACvB,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAC1C,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEhC,iDAAiD;IACjD,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,aAAa,EACb,EAAE,IAAI,EAAE,cAAc,EAAE,EACxB,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAC1C,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEhC,uCAAuC;IACvC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CACpC,aAAa,EACb,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAC7B,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAC3C,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEhC,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAEpD,+BAA+B;IAC/B,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,EAAE,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,6BAA6B;AAC7B,kBAAkB"}

package/dist/ai-service/agent/tools2/index.d.ts

@@ -7,8 +7,10 @@
  * - User prompt handling
  * - Type-safe tool definitions
  */
-export type { Tool, ToolFactory, ToolExecutionResult, AccessControlContext, AccessControlRule, PromptHandler, } from "./types.js";
-export { PermissionLevel, ToolCategory, createToolFactory } from "./types.js";
+export type { Tool, ToolFactory, ToolExecutionResult, AccessControlContext, AccessControlRule, PromptHandler, EntityReference, } from "./types.js";
+export { PermissionLevel, ToolCategory, ToolPermissionResponse, createToolFactory, } from "./types.js";
+export type { EntityPermissionStore } from "./entity-permissions.js";
+export { EntityType, SessionEntityPermissionStore, } from "./entity-permissions.js";
 export { ToolRegistry } from "./registry.js";
 export { blockTools, promptForTools, requireRole, combineRules, forTools, forCategory, presets, } from "./access-control.js";
 import { ToolRegistry } from "./registry.js";

package/dist/ai-service/agent/tools2/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,YAAY,EACV,IAAI,EACJ,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAG9E,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAG7C,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,OAAO,GACR,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,eAAO,MAAM,eAAe,cAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,YAAY,EACV,IAAI,EACJ,WAAW,EACX,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,EACb,eAAe,GAChB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,eAAe,EACf,YAAY,EACZ,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAGpB,YAAY,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EACL,UAAU,EACV,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAG7C,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,OAAO,GACR,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,eAAO,MAAM,eAAe,cAAqB,CAAC"}

package/dist/ai-service/agent/tools2/index.js

@@ -7,7 +7,8 @@
  * - User prompt handling
  * - Type-safe tool definitions
  */
-export { PermissionLevel, ToolCategory, createToolFactory } from "./types.js";
+export { PermissionLevel, ToolCategory, ToolPermissionResponse, createToolFactory, } from "./types.js";
+export { EntityType, SessionEntityPermissionStore, } from "./entity-permissions.js";
 // Export registry
 export { ToolRegistry } from "./registry.js";
 // Export access control utilities

package/dist/ai-service/agent/tools2/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAYH,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE9E,kBAAkB;AAClB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,kCAAkC;AAClC,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,OAAO,GACR,MAAM,qBAAqB,CAAC;AAE7B,4CAA4C;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,YAAY,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,OAAO,EACL,eAAe,EACf,YAAY,EACZ,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAIpB,OAAO,EACL,UAAU,EACV,4BAA4B,GAC7B,MAAM,yBAAyB,CAAC;AAEjC,kBAAkB;AAClB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,kCAAkC;AAClC,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,OAAO,GACR,MAAM,qBAAqB,CAAC;AAE7B,4CAA4C;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,YAAY,EAAE,CAAC"}

package/dist/ai-service/agent/tools2/registry.d.ts

@@ -1,4 +1,5 @@
 import { type Tool, type ToolFactory, type AccessControlContext, type AccessControlRule, type PromptHandler, type ToolExecutionResult, PermissionLevel, type ToolMiddleware } from "./types.js";
+import type { EntityPermissionStore } from "./entity-permissions.js";
 import type { ToolCallOptions } from "ai";
 /**
  * Central registry for tools with access control.
@@ -15,6 +16,9 @@ export declare class ToolRegistry {
     private accessRules;
     private middleware;
     private promptHandler?;
+    private promptQueue;
+    private entityPermissionStore?;
+    private scopeStrategy;
     /**
      * Register a tool factory and optionally instantiate it immediately.
      *
@@ -121,6 +125,26 @@ export declare class ToolRegistry {
      * @param handler - Prompt handler function
      */
     setPromptHandler(handler: PromptHandler): void;
+    /**
+     * Set entity permission store for tracking per-entity approvals.
+     *
+     * When set, tools with `extractEntities` defined will automatically
+     * check if extracted entities have been approved before execution.
+     * If any entity is not approved, the user will be prompted.
+     *
+     * @param store - Entity permission store instance
+     */
+    setEntityPermissionStore(store: EntityPermissionStore): void;
+    /**
+     * Get permission scope for a tool.
+     *
+     * Computes the scope string using the configured strategy.
+     * This scope is used to isolate permissions between different tools/categories.
+     *
+     * @param tool - Tool to get scope for
+     * @returns Permission scope string
+     */
+    private getToolPermissionScope;
     /**
      * Check permission level for tool execution.
      *
@@ -143,6 +167,29 @@ export declare class ToolRegistry {
      * @returns Execution result with success status and data/error
      */
     execute<Input, Output>(toolName: string, input: Input, context?: AccessControlContext, options?: ToolCallOptions): Promise<ToolExecutionResult<Output>>;
+    /**
+     * Check if we need to prompt the user for a tool with PROMPT permission.
+     *
+     * For tools with entity extraction, returns false if all entities are already
+     * approved for this tool's scope (skipping the prompt). For tools without
+     * entity extraction, always returns true (standard prompting).
+     *
+     * @param tool - Tool to check
+     * @param input - Tool input to extract entities from
+     * @returns True if we should prompt user, false if we can skip
+     */
+    private shouldPromptForEntities;
+    /**
+     * Store entity approvals after successful user prompt.
+     *
+     * Extracts entities from tool input and marks them as approved for this
+     * tool's scope in the entity permission store. No-op if entity system
+     * is not configured.
+     *
+     * @param tool - Tool that was approved
+     * @param input - Tool input to extract entities from
+     */
+    private approveEntitiesAfterPrompt;
     /**
      * Wrap a tool to enforce access control on execute().
      *

package/dist/ai-service/agent/tools2/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,IAAI,EACT,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,eAAe,EAEf,KAAK,cAAc,EACpB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC;AAE1C;;;;;;;;GAQG;AAEH,qBAAa,YAAY;IACvB,OAAO,CAAC,SAAS,CAAkC;IACnD,OAAO,CAAC,SAAS,CAA2B;IAC5C,OAAO,CAAC,WAAW,CAA2B;IAC9C,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,aAAa,CAAC,CAAgB;IAEtC;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI;IAkBpD;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI;IAW7B;;;;OAIG;IACH,SAAS,IAAI,MAAM,EAAE;IAIrB;;;;OAIG;IACH,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI;IAM3C;;;;;;;;OAQG;IACH,WAAW,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI;IAejC;;;;;;;;OAQG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS;IAKvE;;;;;;;OAOG;IACH,WAAW,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,IAAI,EAAE;IAOnD;;;;OAIG;IACH,eAAe,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,KAAK,CAAC;QACrD,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,iBAAiB,CAAC,EAAE,eAAe,CAAC;KACrC,CAAC;IASF;;;;;;;;OAQG;IACG,cAAc,CAClB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAehC;;;;;;;OAOG;IACH,aAAa,CAAC,GAAG,KAAK,EAAE,iBAAiB,EAAE,GAAG,IAAI;IAIlD;;;;;;;;;;;;OAYG;IACH,aAAa,CAAC,GAAG,UAAU,EAAE,cAAc,EAAE,GAAG,IAAI;IAIpD;;;;OAIG;IACH,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;IAI9C;;;;;;;;OAQG;IACG,eAAe,CACnB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,eAAe,CAAC;IA0B3B;;;;;;;;;;OAUG;IACG,OAAO,CAAC,KAAK,EAAE,MAAM,EACzB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,KAAK,EACZ,OAAO,GAAE,oBAAyB,EAClC,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IA8EvC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,QAAQ;IAchB;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,eAAe;IASvB;;;;OAIG;IACH,KAAK,IAAI,IAAI;CAMd"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../src/ai-service/agent/tools2/registry.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,KAAK,IAAI,EACT,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,eAAe,EAGf,KAAK,cAAc,EACpB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC;AAE1C;;;;;;;;GAQG;AAEH,qBAAa,YAAY;IACvB,OAAO,CAAC,SAAS,CAAkC;IACnD,OAAO,CAAC,SAAS,CAA2B;IAC5C,OAAO,CAAC,WAAW,CAA2B;IAC9C,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,aAAa,CAAC,CAAgB;IACtC,OAAO,CAAC,WAAW,CAAwB;IAC3C,OAAO,CAAC,qBAAqB,CAAC,CAAwB;IACtD,OAAO,CAAC,aAAa,CACiB;IAEtC;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI;IAkBpD;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI;IAW7B;;;;OAIG;IACH,SAAS,IAAI,MAAM,EAAE;IAIrB;;;;OAIG;IACH,WAAW,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI;IAM3C;;;;;;;;OAQG;IACH,WAAW,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI;IAejC;;;;;;;;OAQG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,IAAI,GAAG,SAAS;IAKvE;;;;;;;OAOG;IACH,WAAW,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,IAAI,EAAE;IAOnD;;;;OAIG;IACH,eAAe,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,KAAK,CAAC;QACrD,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,iBAAiB,CAAC,EAAE,eAAe,CAAC;KACrC,CAAC;IASF;;;;;;;;OAQG;IACG,cAAc,CAClB,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAehC;;;;;;;OAOG;IACH,aAAa,CAAC,GAAG,KAAK,EAAE,iBAAiB,EAAE,GAAG,IAAI;IAIlD;;;;;;;;;;;;OAYG;IACH,aAAa,CAAC,GAAG,UAAU,EAAE,cAAc,EAAE,GAAG,IAAI;IAIpD;;;;OAIG;IACH,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;IAK9C;;;;;;;;OAQG;IACH,wBAAwB,CAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI;IAI5D;;;;;;;;OAQG;IACH,OAAO,CAAC,sBAAsB;IAK9B;;;;;;;;OAQG;IACG,eAAe,CACnB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,eAAe,CAAC;IA0B3B;;;;;;;;;;OAUG;IACG,OAAO,CAAC,KAAK,EAAE,MAAM,EACzB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,KAAK,EACZ,OAAO,GAAE,oBAAyB,EAClC,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAkGvC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,uBAAuB;IA8C/B;;;;;;;;;OASG;IACH,OAAO,CAAC,0BAA0B;IAelC;;;;;;;;;;OAUG;IACH,OAAO,CAAC,QAAQ;IAchB;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IAQvB,OAAO,CAAC,eAAe;IASvB;;;;OAIG;IACH,KAAK,IAAI,IAAI;CAQd"}