@wrongstack/tools 0.255.0 → 0.256.1

package/dist/builtin.js

@@ -832,6 +832,7 @@ var auditTool = {
   usageHint: "CRITICAL SECURITY TOOL:\n\n- Run regularly and especially before any release.\n- Use `level` to focus on high/critical issues.\n- `fix` can attempt automatic remediation for some vulnerabilities.\nThis is one of the most important tools for supply chain security.",
   permission: "confirm",
   mutating: false,
+  capabilities: ["shell.restricted"],
   timeoutMs: 6e4,
   inputSchema: {
     type: "object",
@@ -1277,6 +1278,7 @@ var batchToolUseTool = {
   permission: "confirm",
   mutating: true,
   timeoutMs: 12e4,
+  capabilities: ["tool.mutate.any"],
   inputSchema: {
     type: "object",
     properties: {
@@ -4248,6 +4250,7 @@ var documentTool = {
   permission: "auto",
   mutating: false,
   timeoutMs: 3e4,
+  capabilities: ["fs.read"],
   inputSchema: {
     type: "object",
     properties: {
@@ -6043,6 +6046,7 @@ var jsonTool = {
   permission: "auto",
   mutating: false,
   timeoutMs: 5e3,
+  capabilities: ["fs.read"],
   inputSchema: {
     type: "object",
     properties: {
@@ -6166,6 +6170,7 @@ var lintTool = {
   permission: "confirm",
   mutating: false,
   timeoutMs: 6e4,
+  capabilities: ["shell.restricted"],
   inputSchema: {
     type: "object",
     properties: {
@@ -6258,6 +6263,7 @@ var logsTool = {
   permission: "confirm",
   mutating: false,
   timeoutMs: 3e4,
+  capabilities: ["shell.restricted"],
   inputSchema: {
     type: "object",
     properties: {
@@ -6455,9 +6461,23 @@ var outdatedTool = {
   name: "outdated",
   category: "Package Management",
   description: "Check for outdated dependencies in the project. Reports current, wanted (semver range), and latest versions available.",
-  usageHint: "MAINTENANCE & SECURITY TOOL:\n\n- Run periodically or before dependency-related work.\n- Helps surface packages that may need updates for security or features.\n- Safe, read-only operation.\nUse the output to decide on upgrades. Prefer this over manual shell commands for dependency hygiene.",
-  permission: "auto",
-  mutating: false,
+  usageHint: "MAINTENANCE & SECURITY TOOL:\n\n- Run periodically or before dependency-related work.\n- Helps surface packages that may need updates for security or features.\n- Hits the package registry over HTTP, so it is NOT purely local \u2014 flagged as mutating for the confirmation gate.\nUse the output to decide on upgrades. Prefer this over manual shell commands for dependency hygiene.",
+  permission: "confirm",
+  // Network side-effecting (registry HTTP). Pairs with `mutating: true`
+  // so the H7 invariant test (`no auto-permission tool declares
+  // mutating: true`) passes — a tool claiming `'auto'` must be purely
+  // read-only, but `outdated` makes outbound HTTP calls to the
+  // registry. The 'confirm' permission routes the call through the
+  // tool.confirm_needed flow on every invocation. M-1 originally
+  // fixed four sibling tools (mcp_control, shellcheck, shellcheck_scan,
+  // web_search) but missed this one; applying the same contract here.
+  mutating: true,
+  // Capability is just "network" — the tool only hits the package
+  // registry over HTTP, never touches the filesystem or runs shell.
+  // The H7 invariant test requires this array to be non-empty for
+  // any mutating:true tool (meta-tools whitelisted). See
+  // tests/permission-mutating-invariant.test.ts:92.
+  capabilities: ["network"],
   timeoutMs: 6e4,
   inputSchema: {
     type: "object",
@@ -7910,6 +7930,7 @@ var testTool = {
   permission: "confirm",
   mutating: false,
   timeoutMs: 12e4,
+  capabilities: ["shell.restricted"],
   inputSchema: {
     type: "object",
     properties: {
@@ -8066,6 +8087,7 @@ var todoTool = {
   mutating: false,
   // mutates only conversation state (ctx.todos), not external state — no confirmation needed
   timeoutMs: 1e3,
+  capabilities: ["session.todo"],
   inputSchema: {
     type: "object",
     properties: {
@@ -8173,6 +8195,7 @@ var toolHelpTool = {
   permission: "auto",
   mutating: false,
   timeoutMs: 5e3,
+  capabilities: ["tool.meta"],
   inputSchema: {
     type: "object",
     properties: {
@@ -8295,6 +8318,7 @@ var toolSearchTool = {
   permission: "auto",
   mutating: false,
   timeoutMs: 1e3,
+  capabilities: ["tool.meta"],
   inputSchema: {
     type: "object",
     properties: {
@@ -8373,6 +8397,7 @@ var toolUseTool = {
   permission: "confirm",
   mutating: true,
   timeoutMs: 6e4,
+  capabilities: ["tool.mutate.any"],
   inputSchema: {
     type: "object",
     properties: {
@@ -8617,6 +8642,7 @@ var typecheckTool = {
   permission: "confirm",
   mutating: false,
   timeoutMs: 12e4,
+  capabilities: ["shell.restricted"],
   inputSchema: {
     type: "object",
     properties: {
@@ -8757,6 +8783,34 @@ var writeTool = {
 };
 
 // src/builtin.ts
+var OPTIONAL_TOOLS = [
+  installTool,
+  auditTool,
+  outdatedTool,
+  logsTool,
+  documentTool,
+  scaffoldTool,
+  toolSearchTool,
+  toolUseTool,
+  batchToolUseTool,
+  toolHelpTool,
+  codebaseIndexTool,
+  codebaseSearchTool,
+  codebaseStatsTool,
+  setWorkingDirTool
+];
+var TIER1_TOOLS = [
+  readTool,
+  writeTool,
+  editTool,
+  bashTool,
+  grepTool,
+  globTool,
+  diffTool,
+  patchTool,
+  jsonTool,
+  searchTool
+];
 var builtinTools = [
   readTool,
   writeTool,
@@ -8796,6 +8850,6 @@ var builtinTools = [
   setWorkingDirTool
 ];
 
-export { builtinTools };
+export { OPTIONAL_TOOLS, TIER1_TOOLS, builtinTools };
 //# sourceMappingURL=builtin.js.map
 //# sourceMappingURL=builtin.js.map