@themoltnet/node-red-contrib-core 0.12.6 → 0.12.7

package/dist/nodes/src.js

@@ -2000,6 +2000,124 @@ var updateRenderedPack = (options) => (options.client ?? client).patch({
 	}
 });
 /**
+* List tool policies for the active team.
+*/
+var listRuntimePolicies = (options) => (options.client ?? client).get({
+	security: [
+		{
+			scheme: "bearer",
+			type: "http"
+		},
+		{
+			name: "X-Moltnet-Session-Token",
+			type: "apiKey"
+		},
+		{
+			in: "cookie",
+			name: "ory_kratos_session",
+			type: "apiKey"
+		}
+	],
+	url: "/runtime-policies",
+	...options
+});
+/**
+* Create a team-scoped tool policy granting a set of tools.
+*/
+var createRuntimePolicy = (options) => (options.client ?? client).post({
+	security: [
+		{
+			scheme: "bearer",
+			type: "http"
+		},
+		{
+			name: "X-Moltnet-Session-Token",
+			type: "apiKey"
+		},
+		{
+			in: "cookie",
+			name: "ory_kratos_session",
+			type: "apiKey"
+		}
+	],
+	url: "/runtime-policies",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
+* Delete a tool policy and its tool grants.
+*/
+var deleteRuntimePolicy = (options) => (options.client ?? client).delete({
+	security: [
+		{
+			scheme: "bearer",
+			type: "http"
+		},
+		{
+			name: "X-Moltnet-Session-Token",
+			type: "apiKey"
+		},
+		{
+			in: "cookie",
+			name: "ory_kratos_session",
+			type: "apiKey"
+		}
+	],
+	url: "/runtime-policies/{policyId}",
+	...options
+});
+/**
+* Get one tool policy with its granted tools.
+*/
+var getRuntimePolicy = (options) => (options.client ?? client).get({
+	security: [
+		{
+			scheme: "bearer",
+			type: "http"
+		},
+		{
+			name: "X-Moltnet-Session-Token",
+			type: "apiKey"
+		},
+		{
+			in: "cookie",
+			name: "ory_kratos_session",
+			type: "apiKey"
+		}
+	],
+	url: "/runtime-policies/{policyId}",
+	...options
+});
+/**
+* Rename a policy and/or add/remove granted tools.
+*/
+var updateRuntimePolicy = (options) => (options.client ?? client).patch({
+	security: [
+		{
+			scheme: "bearer",
+			type: "http"
+		},
+		{
+			name: "X-Moltnet-Session-Token",
+			type: "apiKey"
+		},
+		{
+			in: "cookie",
+			name: "ory_kratos_session",
+			type: "apiKey"
+		}
+	],
+	url: "/runtime-policies/{policyId}",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
 * List runtime profiles for the active team context.
 */
 var listRuntimeProfiles = (options) => (options?.client ?? client).get({
@@ -2118,6 +2236,76 @@ var updateRuntimeProfile = (options) => (options.client ?? client).patch({
 	}
 });
 /**
+* Resolve a runtime profile enforcement mode and its allowed-tool set (union of bound policies).
+*/
+var getRuntimeProfileAllowedTools = (options) => (options.client ?? client).get({
+	security: [
+		{
+			scheme: "bearer",
+			type: "http"
+		},
+		{
+			name: "X-Moltnet-Session-Token",
+			type: "apiKey"
+		},
+		{
+			in: "cookie",
+			name: "ory_kratos_session",
+			type: "apiKey"
+		}
+	],
+	url: "/runtime-profiles/{profileId}/allowed-tools",
+	...options
+});
+/**
+* List the tool-policy IDs bound to a runtime profile.
+*/
+var getRuntimeProfilePolicies = (options) => (options.client ?? client).get({
+	security: [
+		{
+			scheme: "bearer",
+			type: "http"
+		},
+		{
+			name: "X-Moltnet-Session-Token",
+			type: "apiKey"
+		},
+		{
+			in: "cookie",
+			name: "ory_kratos_session",
+			type: "apiKey"
+		}
+	],
+	url: "/runtime-profiles/{profileId}/policies",
+	...options
+});
+/**
+* Replace the set of tool policies bound to a runtime profile.
+*/
+var setRuntimeProfilePolicies = (options) => (options.client ?? client).put({
+	security: [
+		{
+			scheme: "bearer",
+			type: "http"
+		},
+		{
+			name: "X-Moltnet-Session-Token",
+			type: "apiKey"
+		},
+		{
+			in: "cookie",
+			name: "ory_kratos_session",
+			type: "apiKey"
+		}
+	],
+	url: "/runtime-profiles/{profileId}/policies",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
 * Get metadata for the durable team-scoped runtime session for a task attempt.
 */
 var getRuntimeSession = (options) => (options.client ?? client).get({
@@ -5478,6 +5666,54 @@ function createRecoveryNamespace(context) {
 	};
 }
 //#endregion
+//#region ../sdk/src/namespaces/runtime-policies.ts
+function createRuntimePoliciesNamespace(context) {
+	const { client, auth } = context;
+	return {
+		async create(body, options) {
+			return unwrapResult(await createRuntimePolicy({
+				client,
+				auth,
+				headers: requiredTeamHeaders(options),
+				body
+			}));
+		},
+		async list(options) {
+			return unwrapResult(await listRuntimePolicies({
+				client,
+				auth,
+				headers: requiredTeamHeaders(options)
+			}));
+		},
+		async get(policyId, options) {
+			return unwrapResult(await getRuntimePolicy({
+				client,
+				auth,
+				path: { policyId },
+				headers: requiredTeamHeaders(options)
+			}));
+		},
+		async update(policyId, body, options) {
+			return unwrapResult(await updateRuntimePolicy({
+				client,
+				auth,
+				path: { policyId },
+				headers: requiredTeamHeaders(options),
+				body
+			}));
+		},
+		async delete(policyId, options) {
+			const result = await deleteRuntimePolicy({
+				client,
+				auth,
+				path: { policyId },
+				headers: requiredTeamHeaders(options)
+			});
+			if (result.error) unwrapResult(result);
+		}
+	};
+}
+//#endregion
 //#region ../sdk/src/namespaces/runtime-profiles.ts
 function createRuntimeProfilesNamespace(context) {
 	const { client, auth } = context;
@@ -5519,6 +5755,32 @@ function createRuntimeProfilesNamespace(context) {
 				path: { profileId }
 			});
 			if (result.error) unwrapResult(result);
+		},
+		async allowedTools(profileId, options) {
+			return unwrapResult(await getRuntimeProfileAllowedTools({
+				client,
+				auth,
+				path: { profileId },
+				headers: requiredTeamHeaders(options)
+			}));
+		},
+		async setPolicies(profileId, policyIds, options) {
+			const result = await setRuntimeProfilePolicies({
+				client,
+				auth,
+				path: { profileId },
+				headers: requiredTeamHeaders(options),
+				body: { policyIds }
+			});
+			if (result.error) unwrapResult(result);
+		},
+		async getPolicies(profileId, options) {
+			return unwrapResult(await getRuntimeProfilePolicies({
+				client,
+				auth,
+				path: { profileId },
+				headers: requiredTeamHeaders(options)
+			}));
 		}
 	};
 }
@@ -10031,6 +10293,68 @@ _Object_({
 	additionalProperties: false
 });
 //#endregion
+//#region ../tasks/src/runtime-profile-context-recipes.ts
+var RUNTIME_PROFILE_CONTEXT_CATALOGUE = {
+	version: 1,
+	fragments: {
+		"accountable-delivery-v1": {
+			binding: "prompt_prefix",
+			content: "# Accountable delivery\n\n- Pair every commit made during this task with a signed diary entry created by the `moltnet_create_entry` custom tool. Put the returned id in a `MoltNet-Diary: <id>` commit trailer.\n- Keep commit signing enabled; do not bypass the agent git configuration.\n- Push a branch and open or update a pull request only when the task asks for it. For GitHub mutations, use the credential-bound `GH_TOKEN` command form required by the runtime kernel.\n- Keep changes, commits, and any requested pull request coherent enough to review independently.",
+			slug: "accountable-delivery-v1"
+		},
+		"judgment-diary-v1": {
+			binding: "prompt_prefix",
+			content: "# Judgment diary discipline\n\n- For an `assess_brief`, `judge_pack`, or `pr_review` task, create a signed diary entry with the `moltnet_create_entry` custom tool before submitting the structured judgment. Capture the rationale and evidence that support the verdict.\n- Add the `judgment` tag and the active task type tag (`assess_brief`, `judge_pack`, or `pr_review`). For `judge_pack`, also add `rubric:<rubricId>` from the task facts.\n- Do not use a shell `moltnet entry` command: task provenance is injected only by the custom tool.",
+			slug: "judgment-diary-v1"
+		},
+		"proactive-memory-v1": {
+			binding: "prompt_prefix",
+			content: "# Proactive memory use\n\n- Before non-trivial investigation, debugging, code changes, or review, check the task diary for relevant prior knowledge instead of waiting for a human to ask. Use `moltnet_diary_tags` for cheap reconnaissance, `moltnet_list_entries` when tags or task provenance are known, and `moltnet_search_entries` for semantic similarity. Do not search randomly: pass `taskFilter` for task-local or correlation-local queries, and pass `tags` / `entryTypes` for broader prior-knowledge queries using known tags such as `incident`, `decision`, or `scope:<area>`. Broaden only after constrained searches miss.\n- Before creating an `episodic` incident entry, search for similar incidents using the proposed title, root cause, error text, affected subsystem, and watch-for terms, filtered by `entryTypes: [\"episodic\", \"semantic\"]` and any known `scope:*` or task-provenance tags. If a close prior match exists, do not create an isolated duplicate: reference the prior entry in your response or diary content, update or link it when the new occurrence adds material evidence, or create a new recurrence entry only when the recurrence itself is important signal.\n- When you create a recurrence entry, include the prior matching entry id(s) in the content and explain what is new about this occurrence.",
+			slug: "proactive-memory-v1"
+		},
+		"run-eval-direct-v1": {
+			binding: "prompt_prefix",
+			content: "# Direct evaluation run\n\nThe supplied scenario, typed task facts, injected context, and registered submit-output tool are the complete task contract. Do not search diaries, create diary entries, modify a repository, commit, branch, push, or open a pull request unless a task fact explicitly requires it. Submit the agent-authored payload in the first turn; correction turns exist only to recover a rejected or missing submission.",
+			slug: "run-eval-direct-v1"
+		},
+		"task-diary-discipline-v1": {
+			binding: "prompt_prefix",
+			content: "# Task diary discipline\n\n- During a daemon task, create diary entries only through the `moltnet_create_entry` custom tool. It binds entries to the current task diary and injects task, type, attempt, and correlation provenance tags.\n- Do not shell out to `moltnet entry create`, `moltnet entry create-signed`, or any other `moltnet entry` subcommand from bash while a task is running. Those paths bypass the custom tool's task-tag injection, so task-filtered diary queries cannot find the entry.\n- You may add useful tags, but do not try to replace task provenance supplied by the runtime.",
+			slug: "task-diary-discipline-v1"
+		},
+		"verification-and-artifacts-v1": {
+			binding: "prompt_prefix",
+			content: "# Verification and artifacts\n\n- Run relevant verification before submitting. When task facts include `successCriteria`, assess them honestly in the generated verification contract; a fail or skip with evidence is better than a fabricated pass.\n- The registered submit-output tool owns the exact agent submission schema and validation recovery. Use that schema; do not invent a JSON shape in prose.\n- Upload large files, binary files, logs, reports, screenshots, traces, bundles, or datasets before submitting. Include artifact metadata only where the typed submit contract permits it.\n- If the task depends on prior artifacts, list and download the exact referenced artifact before judging or continuing that work.",
+			slug: "verification-and-artifacts-v1"
+		}
+	},
+	recipes: {
+		"run-eval-direct@v1": {
+			description: "Minimal direct context for a short, isolated evaluation run.",
+			fragments: ["run-eval-direct-v1"]
+		},
+		"standard-engineering@v1": {
+			description: "Full opt-in operating guidance for engineering tasks that need diary research, accountable delivery, and verification discipline.",
+			fragments: [
+				"proactive-memory-v1",
+				"task-diary-discipline-v1",
+				"accountable-delivery-v1",
+				"judgment-diary-v1",
+				"verification-and-artifacts-v1"
+			]
+		}
+	}
+};
+function deepFreeze(value) {
+	if (value && typeof value === "object") {
+		for (const key of Object.keys(value)) deepFreeze(value[key]);
+		Object.freeze(value);
+	}
+	return value;
+}
+deepFreeze(RUNTIME_PROFILE_CONTEXT_CATALOGUE);
+Object.freeze(Object.keys(RUNTIME_PROFILE_CONTEXT_CATALOGUE.recipes));
+//#endregion
 //#region ../tasks/src/runtime-profiles.ts
 var RuntimeProfileName = String$1({
 	minLength: 1,
@@ -10052,6 +10376,16 @@ var RuntimeProfileWorkspaceMode = Union([
 	Literal("shared_mount"),
 	Literal("dedicated_worktree")
 ]);
+/**
+* Tool-policy enforcement mode for the profile's runtime `tool_call` gate:
+* `off` (inert), `watch` (audit only), `enforce` (block disallowed tools,
+* fail-closed). Read by the daemon via `GET /runtime-profiles/:id/allowed-tools`.
+*/
+var RuntimeProfileToolEnforcement = Union([
+	Literal("off"),
+	Literal("watch"),
+	Literal("enforce")
+]);
 var RuntimeProfileAllowedWorkspaceModes = _Array_(RuntimeProfileWorkspaceMode, {
 	minItems: 1,
 	maxItems: 3,
@@ -10240,6 +10574,7 @@ _Object_({
 	maxBatchSize: RuntimeProfileMaxBatchSize,
 	maxTurns: RuntimeProfileMaxTurns,
 	maxBashTimeouts: RuntimeProfileMaxBashTimeouts,
+	toolEnforcement: RuntimeProfileToolEnforcement,
 	requiredEnv: _Array_(RuntimeProfileEnvName, { maxItems: 100 }),
 	requiredTools: _Array_(RuntimeProfileToolName, { maxItems: 100 }),
 	context: _Array_(RuntimeProfileContext, { maxItems: 5 }),
@@ -14458,8 +14793,6 @@ var TaskMessageKind = Union([
 var Uuid = String$1({ format: "uuid" });
 var Cid = String$1({ minLength: 1 });
 var IsoTimestamp = String$1({ format: "date-time" });
-var MAX_CLAIM_CONDITION_BRANCHES = 8;
-var MAX_CLAIM_CONDITION_STATUSES = 8;
 /**
 * Daemon-asserted runtime state stamped onto a `TaskAttemptSummary` at
 * attempt-completion time. The server persists this block verbatim and
@@ -14485,14 +14818,14 @@ Unsafe(Cyclic({ ClaimCondition: Unsafe(Union([
 		op: Literal("all"),
 		conditions: _Array_(Ref$2("ClaimCondition"), {
 			minItems: 1,
-			maxItems: MAX_CLAIM_CONDITION_BRANCHES
+			maxItems: 8
 		})
 	}, { additionalProperties: false }),
 	_Object_({
 		op: Literal("any"),
 		conditions: _Array_(Ref$2("ClaimCondition"), {
 			minItems: 1,
-			maxItems: MAX_CLAIM_CONDITION_BRANCHES
+			maxItems: 8
 		})
 	}, { additionalProperties: false }),
 	_Object_({
@@ -14500,7 +14833,7 @@ Unsafe(Cyclic({ ClaimCondition: Unsafe(Union([
 		taskId: Uuid,
 		statuses: _Array_(Ref$2("TaskStatus"), {
 			minItems: 1,
-			maxItems: MAX_CLAIM_CONDITION_STATUSES
+			maxItems: 8
 		})
 	}, { additionalProperties: false }),
 	_Object_({
@@ -15962,6 +16295,7 @@ function createAgent(options) {
 		problems: createProblemsNamespace(context),
 		teams: createTeamsNamespace(context),
 		runtimeProfiles: createRuntimeProfilesNamespace(context),
+		runtimePolicies: createRuntimePoliciesNamespace(context),
 		tasks: createTasksNamespace(context),
 		runtimeSlots: createRuntimeSlotsNamespace(context),
 		runtimeSessions: createRuntimeSessionsNamespace(context),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@themoltnet/node-red-contrib-core",
-  "version": "0.12.6",
+  "version": "0.12.7",
   "type": "module",
   "description": "Node-RED nodes for the MoltNet API",
   "keywords": [
@@ -46,7 +46,7 @@
   },
   "main": "dist/nodes/agent.js",
   "dependencies": {
-    "@themoltnet/sdk": "0.126.0"
+    "@themoltnet/sdk": "0.127.0"
   },
   "devDependencies": {
     "@types/node": "^22.19.0",