@vinhnt-sdk/core 0.1.0

package/dist/tool/providers/skill-provider.d.ts

@@ -0,0 +1,23 @@
+import type { ToolProvider } from "../provider.js";
+import type { ToolDefinition } from "../definitions.js";
+import type { ToolRegistry } from "../registry.js";
+/**
+ * SkillToolProvider — Provides skill-related tools.
+ *
+ * This is a metadata provider that declares skill tools exist.
+ * Actual tool creation happens in the composition root to avoid circular dependencies.
+ */
+export declare class SkillToolProvider implements ToolProvider {
+    readonly id = "skills";
+    readonly name = "Skill Tools";
+    readonly description = "Skill management tools: load, search, create";
+    private _tools;
+    get tools(): ToolDefinition[];
+    /**
+     * Add tools externally (called by composition root).
+     */
+    addTools(tools: ToolDefinition[]): void;
+    register(_registry: ToolRegistry): void;
+    unregister(_registry: ToolRegistry): void;
+}
+//# sourceMappingURL=skill-provider.d.ts.map

package/dist/tool/providers/skill-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-provider.d.ts","sourceRoot":"","sources":["../../../src/tool/providers/skill-provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD;;;;;GAKG;AACH,qBAAa,iBAAkB,YAAW,YAAY;IACpD,QAAQ,CAAC,EAAE,YAAY;IACvB,QAAQ,CAAC,IAAI,iBAAiB;IAC9B,QAAQ,CAAC,WAAW,kDAAkD;IAEtE,OAAO,CAAC,MAAM,CAAwB;IAEtC,IAAI,KAAK,IAAI,cAAc,EAAE,CAE5B;IAED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,IAAI;IAIvC,QAAQ,CAAC,SAAS,EAAE,YAAY,GAAG,IAAI;IAIvC,UAAU,CAAC,SAAS,EAAE,YAAY,GAAG,IAAI;CAG1C"}

package/dist/tool/providers/skill-provider.js

@@ -0,0 +1,28 @@
+/**
+ * SkillToolProvider — Provides skill-related tools.
+ *
+ * This is a metadata provider that declares skill tools exist.
+ * Actual tool creation happens in the composition root to avoid circular dependencies.
+ */
+export class SkillToolProvider {
+    id = "skills";
+    name = "Skill Tools";
+    description = "Skill management tools: load, search, create";
+    _tools = [];
+    get tools() {
+        return this._tools;
+    }
+    /**
+     * Add tools externally (called by composition root).
+     */
+    addTools(tools) {
+        this._tools.push(...tools);
+    }
+    register(_registry) {
+        // Registration is handled by ToolProviderRegistry
+    }
+    unregister(_registry) {
+        this._tools = [];
+    }
+}
+//# sourceMappingURL=skill-provider.js.map

package/dist/tool/providers/skill-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-provider.js","sourceRoot":"","sources":["../../../src/tool/providers/skill-provider.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,MAAM,OAAO,iBAAiB;IACnB,EAAE,GAAG,QAAQ,CAAC;IACd,IAAI,GAAG,aAAa,CAAC;IACrB,WAAW,GAAG,8CAA8C,CAAC;IAE9D,MAAM,GAAqB,EAAE,CAAC;IAEtC,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAuB;QAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,QAAQ,CAAC,SAAuB;QAC9B,kDAAkD;IACpD,CAAC;IAED,UAAU,CAAC,SAAuB;QAChC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;IACnB,CAAC;CACF"}

package/dist/tool/question-tool.d.ts

@@ -0,0 +1,15 @@
+export interface QuestionInput {
+    header: string;
+    question: string;
+    options?: {
+        label: string;
+        description?: string;
+    }[] | undefined;
+    multiple?: boolean;
+}
+export type QuestionHandler = (question: QuestionInput) => Promise<string>;
+export declare function createQuestionTool(handler?: QuestionHandler): import("./definitions.js").ToolDefinition<QuestionInput, {
+    answer: string;
+    error?: string;
+}>;
+//# sourceMappingURL=question-tool.d.ts.map

package/dist/tool/question-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"question-tool.d.ts","sourceRoot":"","sources":["../../src/tool/question-tool.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,aAAa,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAY3E,wBAAgB,kBAAkB,CAAC,OAAO,CAAC,EAAE,eAAe;YACf,MAAM;YAAU,MAAM;GAqClE"}

package/dist/tool/question-tool.js

@@ -0,0 +1,51 @@
+import { z } from "zod";
+import { defineTool } from "./define-tool.js";
+const QuestionSchema = z.object({
+    header: z.string().min(1).max(30),
+    question: z.string().min(1),
+    options: z.array(z.object({
+        label: z.string().min(1),
+        description: z.string().optional(),
+    })).min(1).max(6).optional(),
+    multiple: z.boolean().optional(),
+});
+export function createQuestionTool(handler) {
+    return defineTool({
+        name: "question",
+        description: "Ask the user a question and get their response. Use this when you need clarification, preferences, or decisions from the user. Provide clear options when possible.",
+        risk: "external",
+        input: QuestionSchema,
+        jsonSchema: {
+            type: "object",
+            properties: {
+                header: { type: "string", description: "Short header or title for the question (max 100 chars)" },
+                question: { type: "string", description: "The question to ask the user" },
+                options: {
+                    type: "array",
+                    items: {
+                        type: "object",
+                        properties: {
+                            label: { type: "string", description: "Option label shown to user" },
+                            description: { type: "string", description: "Optional description" },
+                        },
+                        required: ["label"],
+                    },
+                    description: "Predefined answer options the user can pick from",
+                },
+                multiple: {
+                    type: "boolean",
+                    description: "Allow selecting multiple options (default: false)",
+                },
+            },
+            required: ["header", "question"],
+        },
+        async execute(v) {
+            if (!handler) {
+                return { answer: "", error: "No question handler configured" };
+            }
+            const answer = await handler(v);
+            return { answer };
+        },
+    }).toDefinition();
+}
+//# sourceMappingURL=question-tool.js.map

package/dist/tool/question-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"question-tool.js","sourceRoot":"","sources":["../../src/tool/question-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAW9C,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,MAAM,UAAU,kBAAkB,CAAC,OAAyB;IAC1D,OAAO,UAAU,CAAoD;QACnE,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,qKAAqK;QAClL,IAAI,EAAE,UAAU;QAChB,KAAK,EAAE,cAAc;QACrB,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wDAAwD,EAAE;gBACjG,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8BAA8B,EAAE;gBACzE,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE;4BACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4BAA4B,EAAE;4BACpE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE;yBACrE;wBACD,QAAQ,EAAE,CAAC,OAAO,CAAC;qBACpB;oBACD,WAAW,EAAE,kDAAkD;iBAChE;gBACD,QAAQ,EAAE;oBACR,IAAI,EAAE,SAAS;oBACf,WAAW,EAAE,mDAAmD;iBACjE;aACF;YACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;SACjC;QACD,KAAK,CAAC,OAAO,CAAC,CAAC;YACb,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;YACjE,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;YAChC,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC;KACF,CAAC,CAAC,YAAY,EAAE,CAAC;AACpB,CAAC"}

package/dist/tool/read-tracker.d.ts

@@ -0,0 +1,8 @@
+export declare class FileReadTracker {
+    private records;
+    trackRead(filePath: string, mtimeMs: number): void;
+    assertWasRead(filePath: string): Promise<void>;
+    clear(filePath: string): void;
+    reset(): void;
+}
+//# sourceMappingURL=read-tracker.d.ts.map

package/dist/tool/read-tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-tracker.d.ts","sourceRoot":"","sources":["../../src/tool/read-tracker.ts"],"names":[],"mappings":"AAQA,qBAAa,eAAe;IAC1B,OAAO,CAAC,OAAO,CAAiC;IAEhD,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAI5C,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBpD,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAI7B,KAAK,IAAI,IAAI;CAGd"}

package/dist/tool/read-tracker.js

@@ -0,0 +1,33 @@
+import { stat } from "node:fs/promises";
+import { ToolPermissionDenied } from "@vinhnt-sdk/schema";
+export class FileReadTracker {
+    records = new Map();
+    trackRead(filePath, mtimeMs) {
+        this.records.set(filePath, { readAt: Date.now(), mtimeMs });
+    }
+    async assertWasRead(filePath) {
+        const record = this.records.get(filePath);
+        if (!record) {
+            throw new ToolPermissionDenied("write_file", `File "${filePath}" has not been read before writing. Use read_file first.`);
+        }
+        try {
+            const st = await stat(filePath);
+            if (st.mtimeMs !== record.mtimeMs) {
+                this.records.delete(filePath);
+                throw new ToolPermissionDenied("write_file", `File "${filePath}" has been modified externally since it was last read. Read it again before writing.`);
+            }
+        }
+        catch (err) {
+            if (err instanceof ToolPermissionDenied)
+                throw err;
+            this.records.delete(filePath);
+        }
+    }
+    clear(filePath) {
+        this.records.delete(filePath);
+    }
+    reset() {
+        this.records.clear();
+    }
+}
+//# sourceMappingURL=read-tracker.js.map

package/dist/tool/read-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-tracker.js","sourceRoot":"","sources":["../../src/tool/read-tracker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAO1D,MAAM,OAAO,eAAe;IAClB,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEhD,SAAS,CAAC,QAAgB,EAAE,OAAe;QACzC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,oBAAoB,CAC5B,YAAY,EACZ,SAAS,QAAQ,0DAA0D,CAC5E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChC,IAAI,EAAE,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC9B,MAAM,IAAI,oBAAoB,CAC5B,YAAY,EACZ,SAAS,QAAQ,sFAAsF,CACxG,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,oBAAoB;gBAAE,MAAM,GAAG,CAAC;YACnD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAgB;QACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF"}

package/dist/tool/registry.d.ts

@@ -0,0 +1,58 @@
+import type { ToolDefinition, ToolContext, ToolRisk } from "./definitions.js";
+import type { DomainManifest, DomainSummary } from "./domain.js";
+export type ToolFilter = {
+    risk?: ToolRisk;
+    ids?: string[];
+    pattern?: string;
+};
+/** Minimal permission rule relevant for tool filtering at the tool boundary. */
+export interface ToolPermissionRule {
+    /** Tool id or wildcard pattern (e.g. "coding.*", "*"). */
+    action: string;
+    effect: "allow" | "deny" | "ask";
+}
+export interface ToolMaterialization {
+    /** Provider-facing definitions the model is ALLOWED to see/invoke. */
+    definitions: readonly ToolDefinition[];
+    /** Tool definitions that were denied by permission rules. */
+    denied: readonly ToolDefinition[];
+    /** Resolve one tool call: validate args and execute. */
+    settle(input: {
+        name: string;
+        args: unknown;
+        ctx?: ToolContext;
+    }): Promise<unknown>;
+    /** Lookup a tool definition by ID from the allowed set. */
+    getTool(id: string): ToolDefinition | undefined;
+}
+export declare class ToolRegistry {
+    protected readonly tools: Map<string, ToolDefinition<unknown, unknown>>;
+    protected readonly domains: Map<string, DomainManifest>;
+    register(tool: ToolDefinition): void;
+    /** Register a named domain and its tool membership (metadata only — does not register the tools). */
+    registerDomain(manifest: DomainManifest): void;
+    getDomains(): readonly DomainManifest[];
+    /** Resolve the domain id a tool belongs to, or undefined if it is a core tool. */
+    domainFor(id: string): string | undefined;
+    /** Get all registered domain manifests. */
+    listDomains(): readonly DomainManifest[];
+    /** Get domain summaries for UI/API consumption. */
+    domainSummaries(): DomainSummary[];
+    /** Get tools belonging to a specific domain. */
+    toolsForDomain(domainId: string): readonly ToolDefinition[];
+    unregister(id: string): boolean;
+    get(id: string): ToolDefinition | undefined;
+    list(filter?: ToolFilter): readonly ToolDefinition[];
+    count(): number;
+    /** Get a tool by ID, throwing a typed error if not found */
+    getOrThrow(id: string): ToolDefinition;
+    /**
+     * Materialize the tool set for a given permission ruleset: drop tools the
+     * model must not see (wholly-denied), and return a `settle` that validates
+     * and executes a single tool call. Defaults to exposing every registered tool.
+     */
+    materialize(permissions?: readonly ToolPermissionRule[]): ToolMaterialization;
+    /** Remove tools whose rule is wholly denied (deny "*" / deny this tool). */
+    private filterByRules;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/tool/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/tool/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAG9E,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAIjE,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,gFAAgF;AAChF,MAAM,WAAW,kBAAkB;IACjC,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,sEAAsE;IACtE,WAAW,EAAE,SAAS,cAAc,EAAE,CAAC;IACvC,6DAA6D;IAC7D,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;IAClC,wDAAwD;IACxD,MAAM,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpF,2DAA2D;IAC3D,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;CACjD;AAED,qBAAa,YAAY;IACvB,SAAS,CAAC,QAAQ,CAAC,KAAK,gDAAqC;IAC7D,SAAS,CAAC,QAAQ,CAAC,OAAO,8BAAqC;IAE/D,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAIpC,qGAAqG;IACrG,cAAc,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI;IAI9C,UAAU,IAAI,SAAS,cAAc,EAAE;IAIvC,kFAAkF;IAClF,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAOzC,2CAA2C;IAC3C,WAAW,IAAI,SAAS,cAAc,EAAE;IAIxC,mDAAmD;IACnD,eAAe,IAAI,aAAa,EAAE;IAIlC,gDAAgD;IAChD,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,cAAc,EAAE;IAK3D,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAI/B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAI3C,IAAI,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,SAAS,cAAc,EAAE;IAWpD,KAAK,IAAI,MAAM;IAIf,4DAA4D;IAC5D,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc;IAMtC;;;;OAIG;IACH,WAAW,CAAC,WAAW,CAAC,EAAE,SAAS,kBAAkB,EAAE,GAAG,mBAAmB;IAmC7E,4EAA4E;IAC5E,OAAO,CAAC,aAAa;CAWtB"}

package/dist/tool/registry.js

@@ -0,0 +1,128 @@
+import { wildcardMatch } from "@vinhnt-sdk/schema";
+import { ToolNotFoundError } from "@vinhnt-sdk/schema";
+import { summarizeDomains } from "./domain.js";
+import { validateInput } from "./validate.js";
+export class ToolRegistry {
+    tools = new Map();
+    domains = new Map();
+    register(tool) {
+        this.tools.set(tool.id, tool);
+    }
+    /** Register a named domain and its tool membership (metadata only — does not register the tools). */
+    registerDomain(manifest) {
+        this.domains.set(manifest.id, manifest);
+    }
+    getDomains() {
+        return [...this.domains.values()];
+    }
+    /** Resolve the domain id a tool belongs to, or undefined if it is a core tool. */
+    domainFor(id) {
+        for (const [domainId, manifest] of this.domains) {
+            if (manifest.tools.some((t) => t.id === id))
+                return domainId;
+        }
+        return undefined;
+    }
+    /** Get all registered domain manifests. */
+    listDomains() {
+        return [...this.domains.values()];
+    }
+    /** Get domain summaries for UI/API consumption. */
+    domainSummaries() {
+        return summarizeDomains([...this.domains.values()]);
+    }
+    /** Get tools belonging to a specific domain. */
+    toolsForDomain(domainId) {
+        const manifest = this.domains.get(domainId);
+        return manifest?.tools ?? [];
+    }
+    unregister(id) {
+        return this.tools.delete(id);
+    }
+    get(id) {
+        return this.tools.get(id);
+    }
+    list(filter) {
+        const all = [...this.tools.values()];
+        if (!filter)
+            return all;
+        return all.filter((t) => {
+            if (filter.risk && t.risk !== filter.risk)
+                return false;
+            if (filter.ids && !filter.ids.includes(t.id))
+                return false;
+            if (filter.pattern && !wildcardMatch(filter.pattern, t.id))
+                return false;
+            return true;
+        });
+    }
+    count() {
+        return this.tools.size;
+    }
+    /** Get a tool by ID, throwing a typed error if not found */
+    getOrThrow(id) {
+        const tool = this.tools.get(id);
+        if (!tool)
+            throw new ToolNotFoundError(id);
+        return tool;
+    }
+    /**
+     * Materialize the tool set for a given permission ruleset: drop tools the
+     * model must not see (wholly-denied), and return a `settle` that validates
+     * and executes a single tool call. Defaults to exposing every registered tool.
+     */
+    materialize(permissions) {
+        const allTools = [...this.tools.values()];
+        const allowed = this.filterByRules(allTools, permissions);
+        const allowedIds = new Set(allowed.map((t) => t.id));
+        const denied = allTools.filter((t) => !allowedIds.has(t.id));
+        const allowedMap = new Map(allowed.map((t) => [t.id, t]));
+        return {
+            definitions: allowed,
+            denied,
+            getTool: (id) => allowedMap.get(id),
+            settle: async ({ name, args, ctx }) => {
+                const tool = this.tools.get(name);
+                if (!tool)
+                    throw new ToolNotFoundError(name);
+                // Validate input via Zod schema if available (non-breaking: falls through to raw execute if no schema)
+                let validatedInput = args;
+                if (tool.inputZodSchema) {
+                    validatedInput = validateInput(name, tool.inputZodSchema, args);
+                }
+                const defaultCtx = {
+                    sessionId: "",
+                    runId: "",
+                    agentId: "",
+                    agentName: "",
+                    signal: new AbortController().signal,
+                    env: {},
+                    ask: async () => "once",
+                    metadata: () => { },
+                    setCompensation: () => { },
+                };
+                return tool.execute(validatedInput, ctx ?? defaultCtx);
+            },
+        };
+    }
+    /** Remove tools whose rule is wholly denied (deny "*" / deny this tool). */
+    filterByRules(tools, permissions) {
+        if (!permissions || permissions.length === 0)
+            return tools;
+        const deniedActions = new Set();
+        for (const rule of permissions) {
+            if (rule.effect === "deny")
+                deniedActions.add(rule.action);
+        }
+        return tools.filter((t) => isDenied(t.id, deniedActions) === false);
+    }
+}
+/** A tool is denied if it matches a deny rule (exact or wildcard). */
+function isDenied(id, deniedActions) {
+    for (const pattern of deniedActions) {
+        if (wildcardMatch(pattern, id))
+            return true;
+    }
+    return false;
+}
+//# sourceMappingURL=registry.js.map

package/dist/tool/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/tool/registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AA0B9C,MAAM,OAAO,YAAY;IACJ,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC1C,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;IAE/D,QAAQ,CAAC,IAAoB;QAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,qGAAqG;IACrG,cAAc,CAAC,QAAwB;QACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED,UAAU;QACR,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,kFAAkF;IAClF,SAAS,CAAC,EAAU;QAClB,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAChD,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;gBAAE,OAAO,QAAQ,CAAC;QAC/D,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,2CAA2C;IAC3C,WAAW;QACT,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,mDAAmD;IACnD,eAAe;QACb,OAAO,gBAAgB,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,gDAAgD;IAChD,cAAc,CAAC,QAAgB;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,OAAO,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED,UAAU,CAAC,EAAU;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,GAAG,CAAC,EAAU;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,CAAC,MAAmB;QACtB,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC;QACxB,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACtB,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC;YACxD,IAAI,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC3D,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;gBAAE,OAAO,KAAK,CAAC;YACzE,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;IAED,4DAA4D;IAC5D,UAAU,CAAC,EAAU;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,WAAW,CAAC,WAA2C;QACrD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1D,OAAO;YACL,WAAW,EAAE,OAAO;YACpB,MAAM;YACN,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;gBACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAClC,IAAI,CAAC,IAAI;oBAAE,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBAC7C,uGAAuG;gBACvG,IAAI,cAAc,GAAG,IAAI,CAAC;gBAC1B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;oBACxB,cAAc,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;gBAClE,CAAC;gBACD,MAAM,UAAU,GAAgB;oBAC9B,SAAS,EAAE,EAAE;oBACb,KAAK,EAAE,EAAE;oBACT,OAAO,EAAE,EAAE;oBACX,SAAS,EAAE,EAAE;oBACb,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;oBACpC,GAAG,EAAE,EAAE;oBACP,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM;oBACvB,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC;oBAClB,eAAe,EAAE,GAAG,EAAE,GAAE,CAAC;iBAC1B,CAAC;gBACF,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,IAAI,UAAU,CAAC,CAAC;YACzD,CAAC;SACF,CAAC;IACJ,CAAC;IAED,4EAA4E;IACpE,aAAa,CACnB,KAAgC,EAChC,WAA2C;QAE3C,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3D,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;gBAAE,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,aAAa,CAAC,KAAK,KAAK,CAAC,CAAC;IACtE,CAAC;CACF;AAED,sEAAsE;AACtE,SAAS,QAAQ,CAAC,EAAU,EAAE,aAA0B;IACtD,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/tool/runtime.d.ts

@@ -0,0 +1,59 @@
+import type { ToolDefinition, ToolContext } from "./definitions.js";
+import { ToolRegistry } from "./registry.js";
+import { ToolSandbox } from "./sandbox.js";
+import { PermissionGate, type DynamicRule } from "../kernel/permission-gate.js";
+import type { ApprovalHandler } from "./policy.js";
+export type ToolExecutionResult = {
+    status: "success";
+    output: unknown;
+} | {
+    status: "denied";
+    reason: string;
+} | {
+    status: "error";
+    error: string;
+};
+export interface ToolHook {
+    readonly id: string;
+    pre?(params: {
+        toolId: string;
+        tool: ToolDefinition;
+        input: unknown;
+    }): Promise<{
+        input: unknown;
+    } | {
+        denied: string;
+    } | null>;
+    post?(params: {
+        toolId: string;
+        tool: ToolDefinition;
+        input: unknown;
+        result: ToolExecutionResult;
+    }): Promise<ToolExecutionResult | null>;
+}
+export interface ToolRuntimeConfig {
+    permissionGate?: PermissionGate;
+    approvalHandler?: ApprovalHandler;
+    sandbox?: ToolSandbox;
+}
+export declare class ToolRuntime {
+    readonly registry: ToolRegistry;
+    private readonly permissionGate;
+    private readonly hasExplicitGate;
+    private approvalHandler;
+    private readonly sandbox;
+    private readonly hooks;
+    constructor(config?: ToolRuntimeConfig);
+    /** Set or replace the approval handler at runtime */
+    setApprovalHandler(handler: ApprovalHandler): void;
+    register(tool: ToolDefinition<unknown, unknown>): void;
+    getTools(): readonly ToolDefinition[];
+    addHook(hook: ToolHook): void;
+    removeHook(id: string): void;
+    /** Register a dynamic rule from an "always allow" approval */
+    addDynamicRule(rule: DynamicRule): void;
+    /** Expose permission gate for wiring approval handlers */
+    getPermissionGate(): PermissionGate | undefined;
+    execute(toolId: string, input: unknown, ctx?: ToolContext): Promise<ToolExecutionResult>;
+}
+//# sourceMappingURL=runtime.d.ts.map

package/dist/tool/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/tool/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAuB,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,MAAM,mBAAmB,GAC3B;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GACtC;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,cAAc,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,GACnE,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,cAAc,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,mBAAmB,CAAA;KAAE,GACjG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,OAAO,CAAC,EAAE,WAAW,CAAC;CACvB;AAED,qBAAa,WAAW;IACtB,QAAQ,CAAC,QAAQ,eAAsB;IACvC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA6B;IAC5D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAC1C,OAAO,CAAC,eAAe,CAA8B;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAkB;gBAE5B,MAAM,CAAC,EAAE,iBAAiB;IAOtC,qDAAqD;IACrD,kBAAkB,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAIlD,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,IAAI;IAItD,QAAQ,IAAI,SAAS,cAAc,EAAE;IAIrC,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI;IAI7B,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAK5B,8DAA8D;IAC9D,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IAIvC,0DAA0D;IAC1D,iBAAiB,IAAI,cAAc,GAAG,SAAS;IAIzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;CA+D/F"}

package/dist/tool/runtime.js

@@ -0,0 +1,108 @@
+import { ToolPermissionDenied } from "@vinhnt-sdk/schema";
+import { ToolRegistry } from "./registry.js";
+import { ToolSandbox, signalToToolContext } from "./sandbox.js";
+export class ToolRuntime {
+    registry = new ToolRegistry();
+    permissionGate;
+    hasExplicitGate;
+    approvalHandler;
+    sandbox;
+    hooks = [];
+    constructor(config) {
+        this.hasExplicitGate = config?.permissionGate !== undefined;
+        this.permissionGate = config?.permissionGate;
+        this.approvalHandler = config?.approvalHandler;
+        this.sandbox = config?.sandbox ?? new ToolSandbox();
+    }
+    /** Set or replace the approval handler at runtime */
+    setApprovalHandler(handler) {
+        this.approvalHandler = handler;
+    }
+    register(tool) {
+        this.registry.register(tool);
+    }
+    getTools() {
+        return this.registry.list();
+    }
+    addHook(hook) {
+        this.hooks.push(hook);
+    }
+    removeHook(id) {
+        const idx = this.hooks.findIndex((h) => h.id === id);
+        if (idx >= 0)
+            this.hooks.splice(idx, 1);
+    }
+    /** Register a dynamic rule from an "always allow" approval */
+    addDynamicRule(rule) {
+        this.permissionGate?.addDynamicRule(rule);
+    }
+    /** Expose permission gate for wiring approval handlers */
+    getPermissionGate() {
+        return this.permissionGate;
+    }
+    async execute(toolId, input, ctx) {
+        const tool = this.registry.get(toolId);
+        if (!tool) {
+            return { status: "error", error: `Tool "${toolId}" not found` };
+        }
+        // Permission check: only if an explicit gate was provided (kernel handles permissions otherwise)
+        if (this.permissionGate && this.hasExplicitGate) {
+            const permissionResult = this.permissionGate.checkTool(tool.id, tool.risk, input);
+            if (!permissionResult.allowed) {
+                if (permissionResult.needsApproval) {
+                    if (!this.approvalHandler) {
+                        return { status: "denied", reason: `Tool "${tool.id}" requires approval but no handler configured` };
+                    }
+                    const approved = await this.approvalHandler.requestApproval(tool, input);
+                    if (!approved) {
+                        return { status: "denied", reason: `Tool "${tool.id}" was rejected by user` };
+                    }
+                }
+                else {
+                    return { status: "denied", reason: permissionResult.reason ?? `Tool "${tool.id}" (risk: ${tool.risk}) is denied by policy` };
+                }
+            }
+        }
+        // Pre-hooks: can modify input or deny
+        let currentInput = input;
+        for (const hook of this.hooks) {
+            if (!hook.pre)
+                continue;
+            const result = await hook.pre({ toolId, tool, input: currentInput });
+            if (result === null)
+                continue;
+            if ("denied" in result) {
+                return { status: "denied", reason: result.denied };
+            }
+            currentInput = result.input;
+        }
+        // Execute via sandbox
+        let result;
+        try {
+            const toolCtx = ctx ?? signalToToolContext();
+            const output = await this.sandbox.execute(tool, currentInput, toolCtx);
+            result = { status: "success", output };
+        }
+        catch (err) {
+            if (err instanceof ToolPermissionDenied) {
+                result = { status: "denied", reason: err.message };
+            }
+            else {
+                const msg = err instanceof Error ? err.message : String(err);
+                result = { status: "error", error: msg };
+            }
+        }
+        // Post-hooks: can modify result (run in reverse order)
+        for (let i = this.hooks.length - 1; i >= 0; i--) {
+            const hook = this.hooks[i];
+            if (!hook.post)
+                continue;
+            const modified = await hook.post({ toolId, tool, input: currentInput, result });
+            if (modified !== null) {
+                result = modified;
+            }
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=runtime.js.map

package/dist/tool/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/tool/runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAuBhE,MAAM,OAAO,WAAW;IACb,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACtB,cAAc,CAA6B;IAC3C,eAAe,CAAU;IAClC,eAAe,CAA8B;IACpC,OAAO,CAAc;IACrB,KAAK,GAAe,EAAE,CAAC;IAExC,YAAY,MAA0B;QACpC,IAAI,CAAC,eAAe,GAAG,MAAM,EAAE,cAAc,KAAK,SAAS,CAAC;QAC5D,IAAI,CAAC,cAAc,GAAG,MAAM,EAAE,cAAc,CAAC;QAC7C,IAAI,CAAC,eAAe,GAAG,MAAM,EAAE,eAAe,CAAC;QAC/C,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,IAAI,WAAW,EAAE,CAAC;IACtD,CAAC;IAED,qDAAqD;IACrD,kBAAkB,CAAC,OAAwB;QACzC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC;IACjC,CAAC;IAED,QAAQ,CAAC,IAAsC;QAC7C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,CAAC,IAAc;QACpB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED,UAAU,CAAC,EAAU;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,IAAI,GAAG,IAAI,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,8DAA8D;IAC9D,cAAc,CAAC,IAAiB;QAC9B,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IAED,0DAA0D;IAC1D,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,KAAc,EAAE,GAAiB;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,MAAM,aAAa,EAAE,CAAC;QAClE,CAAC;QAED,iGAAiG;QACjG,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,KAA4C,CAAC,CAAC;YACzH,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;gBAC9B,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC;oBACnC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;wBAC1B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,IAAI,CAAC,EAAE,+CAA+C,EAAE,CAAC;oBACvG,CAAC;oBACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBACzE,IAAI,CAAC,QAAQ,EAAE,CAAC;wBACd,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,IAAI,CAAC,EAAE,wBAAwB,EAAE,CAAC;oBAChF,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,CAAC,MAAM,IAAI,SAAS,IAAI,CAAC,EAAE,YAAY,IAAI,CAAC,IAAI,uBAAuB,EAAE,CAAC;gBAC/H,CAAC;YACH,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,GAAG;gBAAE,SAAS;YACxB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;YACrE,IAAI,MAAM,KAAK,IAAI;gBAAE,SAAS;YAC9B,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;gBACvB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;YACrD,CAAC;YACD,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;QAC9B,CAAC;QAED,sBAAsB;QACtB,IAAI,MAA2B,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,GAAG,IAAI,mBAAmB,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;YACvE,MAAM,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;gBACxC,MAAM,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,MAAM,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,uDAAuD;QACvD,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;YAChF,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,MAAM,GAAG,QAAQ,CAAC;YACpB,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/tool/sandbox.d.ts

@@ -0,0 +1,12 @@
+import type { ToolDefinition, ToolContext } from "./definitions.js";
+export interface SandboxConfig {
+    defaultTimeoutMs: number;
+}
+/** Create a minimal ToolContext from an AbortSignal (for backward compat) */
+export declare function signalToToolContext(signal?: AbortSignal): ToolContext;
+export declare class ToolSandbox {
+    private readonly config;
+    constructor(config?: SandboxConfig);
+    execute(tool: ToolDefinition, input: unknown, ctx: ToolContext): Promise<unknown>;
+}
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/tool/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/tool/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpE,MAAM,WAAW,aAAa;IAC5B,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,6EAA6E;AAC7E,wBAAgB,mBAAmB,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,WAAW,CAgBrE;AAED,qBAAa,WAAW;IACV,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,GAAE,aAA4C;IAE3E,OAAO,CACX,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,OAAO,CAAC;CAcpB"}