@theokit/sdk 2.22.0 → 2.24.0

package/dist/{run-CrIulPF7.d.cts → run-Cr0C6cOM.d.cts}

@@ -1130,6 +1130,23 @@ interface SendOptions {
      * forces a tool call; `"auto"` (or omitted) is the default. Local runtime; OpenAI-compat providers.
      */
     toolChoice?: "auto" | "none" | "required";
+    /**
+     * SE18 — per-send runtime tool subset (**local runtime only**; cloud agents
+     * ignore it). When set, only tools whose name is in this list may be called for
+     * this send; a call to any other registered tool is vetoed at dispatch (the same
+     * `withToolWhitelist` path `Agent.fork`'s `allowedTools` uses — NOT
+     * `PermissionEngine`). Composes with `toolChoice`: `activeTools` narrows the set,
+     * `toolChoice` gates calling within it. Absent ⇒ the full toolset is available.
+     *
+     * Matching is EXACT against the tool's registered name — the same name the
+     * dispatch sees after tool-name repair (mirrors `Agent.fork`'s `allowedTools`;
+     * it is NOT lowercased for you, so a mixed-case registered tool needs its exact
+     * registered name here). An empty list (`[]`) vetoes EVERY tool (fail-closed —
+     * "restrict to the empty set"); pass `undefined` (or omit) for no restriction.
+     * A subagent invoked within this send inherits the whitelist via async-context
+     * propagation unless it declares its own tool scope.
+     */
+    activeTools?: string[];
     /** Local agents only. Expire a stuck active run before starting this message. */
     local?: {
         force?: boolean;

package/dist/{run-CrIulPF7.d.ts → run-Cr0C6cOM.d.ts}

@@ -1130,6 +1130,23 @@ interface SendOptions {
      * forces a tool call; `"auto"` (or omitted) is the default. Local runtime; OpenAI-compat providers.
      */
     toolChoice?: "auto" | "none" | "required";
+    /**
+     * SE18 — per-send runtime tool subset (**local runtime only**; cloud agents
+     * ignore it). When set, only tools whose name is in this list may be called for
+     * this send; a call to any other registered tool is vetoed at dispatch (the same
+     * `withToolWhitelist` path `Agent.fork`'s `allowedTools` uses — NOT
+     * `PermissionEngine`). Composes with `toolChoice`: `activeTools` narrows the set,
+     * `toolChoice` gates calling within it. Absent ⇒ the full toolset is available.
+     *
+     * Matching is EXACT against the tool's registered name — the same name the
+     * dispatch sees after tool-name repair (mirrors `Agent.fork`'s `allowedTools`;
+     * it is NOT lowercased for you, so a mixed-case registered tool needs its exact
+     * registered name here). An empty list (`[]`) vetoes EVERY tool (fail-closed —
+     * "restrict to the empty set"); pass `undefined` (or omit) for no restriction.
+     * A subagent invoked within this send inherits the whitelist via async-context
+     * propagation unless it declares its own tool scope.
+     */
+    activeTools?: string[];
     /** Local agents only. Expire a stuck active run before starting this message. */
     local?: {
         force?: boolean;

package/dist/types/run.d.ts

@@ -328,6 +328,23 @@ export interface SendOptions {
      * forces a tool call; `"auto"` (or omitted) is the default. Local runtime; OpenAI-compat providers.
      */
     toolChoice?: "auto" | "none" | "required";
+    /**
+     * SE18 — per-send runtime tool subset (**local runtime only**; cloud agents
+     * ignore it). When set, only tools whose name is in this list may be called for
+     * this send; a call to any other registered tool is vetoed at dispatch (the same
+     * `withToolWhitelist` path `Agent.fork`'s `allowedTools` uses — NOT
+     * `PermissionEngine`). Composes with `toolChoice`: `activeTools` narrows the set,
+     * `toolChoice` gates calling within it. Absent ⇒ the full toolset is available.
+     *
+     * Matching is EXACT against the tool's registered name — the same name the
+     * dispatch sees after tool-name repair (mirrors `Agent.fork`'s `allowedTools`;
+     * it is NOT lowercased for you, so a mixed-case registered tool needs its exact
+     * registered name here). An empty list (`[]`) vetoes EVERY tool (fail-closed —
+     * "restrict to the empty set"); pass `undefined` (or omit) for no restriction.
+     * A subagent invoked within this send inherits the whitelist via async-context
+     * propagation unless it declares its own tool scope.
+     */
+    activeTools?: string[];
     /** Local agents only. Expire a stuck active run before starting this message. */
     local?: {
         force?: boolean;

package/dist/workflow.cjs

@@ -2244,6 +2244,9 @@ function sanitizeIdentifier(input, options) {
   }
   return input.toLowerCase();
 }
+function toJsonSchema(schema, options = { unrepresentable: "any" }) {
+  return zod.toJSONSchema(schema, options);
+}
 
 // src/workflow.ts
 init_workflow();
@@ -2470,6 +2473,38 @@ function agentStep(id, agent, promptTemplate, opts) {
     ...opts?.origin !== void 0 ? { origin: opts.origin } : {}
   };
 }
+var WorkflowToolError = class extends Error {
+  constructor(toolName, workflowStatus, workflowError) {
+    super(
+      `workflowAsTool("${toolName}"): workflow ${workflowStatus}${workflowError ? `: ${workflowError.message}` : ""}`
+    );
+    this.toolName = toolName;
+    this.workflowStatus = workflowStatus;
+    this.workflowError = workflowError;
+    this.name = "WorkflowToolError";
+  }
+  toolName;
+  workflowStatus;
+  workflowError;
+  code = "workflow_tool_failed";
+};
+function workflowAsTool(workflow, spec) {
+  const inputSchema = toJsonSchema(spec.inputSchema, { unrepresentable: "any" });
+  return {
+    name: spec.name,
+    description: spec.description,
+    inputSchema,
+    handler: async (rawInput) => {
+      const parsed = spec.inputSchema.parse(rawInput);
+      const run = await workflow.run(parsed);
+      if (run.status !== "completed") {
+        throw new WorkflowToolError(spec.name, run.status, run.error);
+      }
+      const output = run.output;
+      return typeof output === "string" ? output : JSON.stringify(output ?? null);
+    }
+  };
+}
 function validateStepId(id) {
   sanitizeIdentifier(id, { maxLen: 64 });
 }
@@ -2497,8 +2532,10 @@ function walkStepsValidating(steps, seen) {
 
 exports.Workflow = Workflow;
 exports.WorkflowBuilder = WorkflowBuilder;
+exports.WorkflowToolError = WorkflowToolError;
 exports.__resetSnapshotStoresForTests = __resetSnapshotStoresForTests;
 exports.agentStep = agentStep;
 exports.fn = fn;
+exports.workflowAsTool = workflowAsTool;
 //# sourceMappingURL=workflow.cjs.map
 //# sourceMappingURL=workflow.cjs.map