@yjjeong/omg 0.1.0

package/dist/core/toolInterceptor.js

@@ -0,0 +1,108 @@
+// Tool interceptor — wraps an adapter Chunk stream and synthesizes a
+// ToolUseEnd after every ToolUseStart, running the tool via the registry.
+//
+// Phase 79: tools that take a while (run_shell) can emit progress
+// chunks during execution. The interceptor bridges the registry's
+// callback-style `onProgress` into the AsyncIterable<Chunk> stream
+// by buffering chunks in a queue and a `notify` promise that fires
+// whenever progress arrives or the call completes.
+export async function* interceptToolCalls(stream, registry, opts = {}) {
+    for await (const chunk of stream) {
+        yield chunk;
+        if (chunk.type !== "tool_use_start")
+            continue;
+        if (opts.gate !== undefined) {
+            const allowed = await opts.gate.allow(chunk.toolName, chunk.toolInput);
+            if (!allowed) {
+                yield deniedEnd(chunk.toolId, chunk.toolName);
+                continue;
+            }
+        }
+        yield* runWithProgress(registry, chunk.toolName, chunk.toolInput, chunk.toolId);
+    }
+}
+/** Run one tool call, yielding `tool_use_progress` chunks as the
+ *  registry reports them and a final `tool_use_end` chunk on
+ *  completion. Pure plumbing — registries that don't propagate
+ *  progress emit only the end chunk, which matches the pre-Phase-79
+ *  behaviour exactly. */
+async function* runWithProgress(registry, name, args, toolId) {
+    const queue = [];
+    let notifyResolve = null;
+    let done = false;
+    const notify = () => {
+        const r = notifyResolve;
+        notifyResolve = null;
+        r?.();
+    };
+    registry
+        .call(name, args, {
+        onProgress: (text) => {
+            const progress = {
+                type: "tool_use_progress",
+                toolId,
+                text,
+            };
+            queue.push(progress);
+            notify();
+        },
+    })
+        .then((result) => {
+        const end = {
+            type: "tool_use_end",
+            toolId,
+            result: {
+                ok: result.ok,
+                value: result.value,
+                error: result.error,
+            },
+        };
+        queue.push(end);
+        done = true;
+        notify();
+    })
+        // Phase 161: ToolRegistry.call already wraps tool exceptions into an
+        // ok:false result, but an onProgress callback (or other unexpected
+        // path) could still reject. Without this catch, `done` would never
+        // flip and the queue loop below would await `notify` forever — a
+        // silent deadlock that hangs the whole turn. Synthesize an error end.
+        .catch((e) => {
+        const end = {
+            type: "tool_use_end",
+            toolId,
+            result: {
+                ok: false,
+                value: null,
+                error: `tool '${name}' failed: ${e instanceof Error ? e.message : String(e)}`,
+            },
+        };
+        queue.push(end);
+        done = true;
+        notify();
+    });
+    while (true) {
+        while (queue.length > 0) {
+            const c = queue.shift();
+            yield c;
+            if (c.type === "tool_use_end")
+                return;
+        }
+        if (done)
+            return;
+        await new Promise((r) => {
+            notifyResolve = r;
+        });
+    }
+}
+function deniedEnd(toolId, toolName) {
+    return {
+        type: "tool_use_end",
+        toolId,
+        result: {
+            ok: false,
+            value: null,
+            error: `permission denied: ${toolName}`,
+        },
+    };
+}
+//# sourceMappingURL=toolInterceptor.js.map

package/dist/core/toolInterceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolInterceptor.js","sourceRoot":"","sources":["../../src/core/toolInterceptor.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,0EAA0E;AAC1E,EAAE;AACF,kEAAkE;AAClE,kEAAkE;AAClE,mEAAmE;AACnE,mEAAmE;AACnE,mDAAmD;AAMnD,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,kBAAkB,CACvC,MAA4B,EAC5B,QAAsB,EACtB,OAA4B,EAAE;IAE9B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,MAAM,KAAK,CAAC;QACZ,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;YAAE,SAAS;QAE9C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YACvE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC9C,SAAS;YACX,CAAC;QACH,CAAC;QAED,KAAK,CAAC,CAAC,eAAe,CACpB,QAAQ,EACR,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,MAAM,CACb,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;yBAIyB;AACzB,KAAK,SAAS,CAAC,CAAC,eAAe,CAC7B,QAAsB,EACtB,IAAY,EACZ,IAA6B,EAC7B,MAAc;IAEd,MAAM,KAAK,GAAY,EAAE,CAAC;IAC1B,IAAI,aAAa,GAAwB,IAAI,CAAC;IAC9C,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,MAAM,CAAC,GAAG,aAAa,CAAC;QACxB,aAAa,GAAG,IAAI,CAAC;QACrB,CAAC,EAAE,EAAE,CAAC;IACR,CAAC,CAAC;IAEF,QAAQ;SACL,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;QAChB,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;YACnB,MAAM,QAAQ,GAAoB;gBAChC,IAAI,EAAE,mBAAmB;gBACzB,MAAM;gBACN,IAAI;aACL,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrB,MAAM,EAAE,CAAC;QACX,CAAC;KACF,CAAC;SACD,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QACf,MAAM,GAAG,GAAe;YACtB,IAAI,EAAE,cAAc;YACpB,MAAM;YACN,MAAM,EAAE;gBACN,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB;SACF,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,IAAI,GAAG,IAAI,CAAC;QACZ,MAAM,EAAE,CAAC;IACX,CAAC,CAAC;QACF,qEAAqE;QACrE,mEAAmE;QACnE,mEAAmE;QACnE,iEAAiE;QACjE,sEAAsE;SACrE,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;QACpB,MAAM,GAAG,GAAe;YACtB,IAAI,EAAE,cAAc;YACpB,MAAM;YACN,MAAM,EAAE;gBACN,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,SAAS,IAAI,aAClB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAC3C,EAAE;aACH;SACF,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,IAAI,GAAG,IAAI,CAAC;QACZ,MAAM,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;IAEL,OAAO,IAAI,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YACzB,MAAM,CAAC,CAAC;YACR,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc;gBAAE,OAAO;QACxC,CAAC;QACD,IAAI,IAAI;YAAE,OAAO;QACjB,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE;YAC5B,aAAa,GAAG,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,QAAgB;IACjD,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,MAAM;QACN,MAAM,EAAE;YACN,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,sBAAsB,QAAQ,EAAE;SACxC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/tools/hookedToolBroker.d.ts

@@ -0,0 +1,25 @@
+/** Handler for one hooked tool. Receives the raw `tool_input` payload
+ *  exactly as claude-cli sent it; returns the text the model should
+ *  see as the tool_result. Throwing or returning null surfaces the
+ *  default "user did not answer" sentinel.
+ *
+ *  Phase 243: `ctx.tabName` carries the source tab name when the hook
+ *  reports one (via OMG_TAB_NAME env in the spawned child). Lets the
+ *  handler route the picker to the actual asking tab instead of
+ *  guessing via findAskingTab's "single-inflight heuristic." Absent
+ *  when the hook payload doesn't include it (older claude-cli, hook
+ *  script downgrade, etc) — callers fall back to the heuristic. */
+export interface HookedToolContext {
+    tabName?: string;
+}
+export type HookedToolHandler = (toolInput: unknown, ctx: HookedToolContext) => Promise<string | null>;
+export interface HookedToolBrokerHandle {
+    socketPath: string;
+    /** Register (or replace) a handler for a tool name. */
+    register: (toolName: string, handler: HookedToolHandler) => void;
+    /** Tool names currently registered (used to publish `OMG_HOOKED_TOOLS`). */
+    registered: () => string[];
+    close: () => Promise<void>;
+}
+export declare function startHookedToolBroker(): Promise<HookedToolBrokerHandle>;
+//# sourceMappingURL=hookedToolBroker.d.ts.map

package/dist/core/tools/hookedToolBroker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hookedToolBroker.d.ts","sourceRoot":"","sources":["../../../src/core/tools/hookedToolBroker.ts"],"names":[],"mappings":"AA+BA;;;;;;;;;;mEAUmE;AACnE,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AACD,MAAM,MAAM,iBAAiB,GAAG,CAC9B,SAAS,EAAE,OAAO,EAClB,GAAG,EAAE,iBAAiB,KACnB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAE5B,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,KAAK,IAAI,CAAC;IACjE,4EAA4E;IAC5E,UAAU,EAAE,MAAM,MAAM,EAAE,CAAC;IAC3B,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,sBAAsB,CAAC,CAiB7E"}

package/dist/core/tools/hookedToolBroker.js

@@ -0,0 +1,95 @@
+// Phase 206: generalized PreToolUse hook broker.
+//
+// Phase 187 wired a single tool (AskUserQuestion) to omg's TUI through
+// a Unix-socket PreToolUse hook. The next interactive tool that needs
+// the same plumbing (a file picker, an OAuth flow, an inline confirm
+// prompt) shouldn't have to copy-paste a fresh broker + .mjs each
+// time. This module owns the pattern.
+//
+// Conceptually:
+//   1. omg starts one broker that listens for hook envelopes.
+//   2. Each interactive tool registers a handler under its tool name
+//      (the exact string claude-cli matches in PreToolUse — e.g.
+//      "AskUserQuestion").
+//   3. The generic hook .mjs reads claude-cli's PreToolUse payload,
+//      forwards `{ tool_name, tool_input }` to the broker, and emits
+//      the broker's reply as the hook's deny-reason text (which
+//      claude-cli surfaces to the model as the tool_result content).
+//   4. A handler returning `null` (or throwing) becomes the
+//      "user did not answer" sentinel — a broken handler never
+//      hangs the model.
+//
+// Wire protocol (line-delimited JSON over the broker socket):
+//   hook   → broker:  { id, tool_name, tool_input }
+//   broker → hook:    { id, reason: <string|null> }
+//
+// The hook treats `reason: null` as "allow normally" (don't intercept),
+// and a string as "deny + surface this text to the model."
+import { startSocketBroker } from "../brokers/socketBroker.js";
+export async function startHookedToolBroker() {
+    const handlers = new Map();
+    const broker = await startSocketBroker({
+        prefix: "hookedtools",
+        filename: "hookedtools.sock",
+        onLine: (line, sock) => handleLine(line, sock, handlers),
+    });
+    return {
+        socketPath: broker.socketPath,
+        register: (toolName, handler) => {
+            handlers.set(toolName, handler);
+        },
+        registered: () => [...handlers.keys()],
+        close: () => broker.close(),
+    };
+}
+/** Sentinel mirrored in `src/toolhook/hookedToolProxy.mjs`. Returned when
+ *  the broker can't fulfill the request — the hook then surfaces this
+ *  string to the model as the tool_result, and the model sees a
+ *  clean "user did not answer" rather than the tool firing TTY-less. */
+const NO_ANSWER_SENTINEL = "user did not answer";
+async function handleLine(line, sock, handlers) {
+    let req;
+    try {
+        req = JSON.parse(line);
+    }
+    catch {
+        return;
+    }
+    const id = req.id;
+    const toolName = typeof req.tool_name === "string" ? req.tool_name : "";
+    const tabName = typeof req.tab_name === "string" ? req.tab_name : undefined;
+    // Malformed envelope (no id or no tool name) → reason:null so the
+    // hook falls through to its own sentinel emit. `id ?? null` keeps
+    // the protocol happy.
+    if (id === undefined || !toolName) {
+        safeWrite(sock, { id: id ?? null, reason: null });
+        return;
+    }
+    const handler = handlers.get(toolName);
+    // Tool name was published in OMG_HOOKED_TOOLS (claude registered a
+    // matcher for it) but no handler is registered — race or future
+    // bug. Fail-CLOSED: deny with the sentinel so the real tool can't
+    // fire TTY-less. Distinct from a handler that explicitly returns
+    // null (observe-only path: allow normally).
+    if (!handler) {
+        safeWrite(sock, { id, reason: NO_ANSWER_SENTINEL });
+        return;
+    }
+    let reason;
+    try {
+        reason = await handler(req.tool_input, { tabName });
+    }
+    catch {
+        reason = null;
+    }
+    safeWrite(sock, { id, reason });
+}
+function safeWrite(sock, payload) {
+    try {
+        sock.write(JSON.stringify(payload) + "\n");
+    }
+    catch {
+        /* socket closed before reply — hook side falls through to sentinel */
+    }
+}
+//# sourceMappingURL=hookedToolBroker.js.map

package/dist/core/tools/hookedToolBroker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hookedToolBroker.js","sourceRoot":"","sources":["../../../src/core/tools/hookedToolBroker.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,qEAAqE;AACrE,kEAAkE;AAClE,sCAAsC;AACtC,EAAE;AACF,gBAAgB;AAChB,8DAA8D;AAC9D,qEAAqE;AACrE,iEAAiE;AACjE,2BAA2B;AAC3B,oEAAoE;AACpE,qEAAqE;AACrE,gEAAgE;AAChE,qEAAqE;AACrE,4DAA4D;AAC5D,+DAA+D;AAC/D,wBAAwB;AACxB,EAAE;AACF,8DAA8D;AAC9D,oDAAoD;AACpD,oDAAoD;AACpD,EAAE;AACF,wEAAwE;AACxE,2DAA2D;AAG3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AA8B/D,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEtD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACrC,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE,kBAAkB;QAC5B,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC;KACzD,CAAC,CAAC;IAEH,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;YAC9B,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClC,CAAC;QACD,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;KAC5B,CAAC;AACJ,CAAC;AAED;;;wEAGwE;AACxE,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAEjD,KAAK,UAAU,UAAU,CACvB,IAAY,EACZ,IAAY,EACZ,QAAwC;IAExC,IAAI,GAOH,CAAC;IACF,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;IAClB,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,kEAAkE;IAClE,kEAAkE;IAClE,sBAAsB;IACtB,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClC,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvC,mEAAmE;IACnE,gEAAgE;IAChE,kEAAkE;IAClE,iEAAiE;IACjE,4CAA4C;IAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IACD,IAAI,MAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,SAAS,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,OAAgB;IAC/C,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;IACxE,CAAC;AACH,CAAC"}

package/dist/core/tools/omgToolManifest.d.ts

@@ -0,0 +1,42 @@
+export interface OmgToolsConfig {
+    /** When true, the spawned omg MCP server includes write_file in
+     *  addition to the read-only defaults. */
+    writable?: boolean;
+    /** When true, the spawned omg MCP server includes run_shell on
+     *  top of `writable`. (Shell implies writable in practice — the
+     *  model that can run shell can already mutate the filesystem.) */
+    shell?: boolean;
+    /** Override the binary name. Default "omg" picks up whatever the
+     *  user has on PATH (typically the global symlink to dist/cli.js). */
+    command?: string;
+    /** Phase 348: per-role allowlist of external MCP server names to expose
+     *  through this omg server child. Absent = all enabled servers. Rendered
+     *  as `--mcp-allow a,b` so each role's spawn carries its own subset. */
+    mcpAllow?: string[];
+    /** Phase 348: the base provider this child serves (e.g. "gemini"), so a
+     *  server tagged `providers: [...]` is only exposed to matching models.
+     *  Rendered as `--mcp-provider <p>`. */
+    provider?: string;
+}
+export interface OmgServerSpec {
+    command: string;
+    args: string[];
+}
+/** Compose the {command, args} pair every adapter ultimately renders.
+ *  Adding a new tier or flag belongs here; the three adapters only
+ *  consume this and format it for their respective config surfaces. */
+export declare function buildOmgServerSpec(opts: OmgToolsConfig): OmgServerSpec;
+/** Stringify the spec as a TOML inline table — what codex's
+ *  `-c mcp_servers.omg=…` expects. Kept here so the TOML shape stays
+ *  next to the JSON one (any future field added to OmgServerSpec
+ *  needs both renderers).
+ *
+ *  Throws if `command` or any `args` entry contains a `"` — TOML
+ *  basic strings can't carry an embedded double quote, and silently
+ *  emitting broken TOML would just produce a `codex` parse error
+ *  with no hint where it came from. */
+export declare function toCodexTomlInline(spec: OmgServerSpec): string;
+/** JSON envelope claude's `--mcp-config` wants: a wrapper with
+ *  `mcpServers.omg = {command, args}`. */
+export declare function toClaudeMcpConfig(spec: OmgServerSpec): string;
+//# sourceMappingURL=omgToolManifest.d.ts.map

package/dist/core/tools/omgToolManifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"omgToolManifest.d.ts","sourceRoot":"","sources":["../../../src/core/tools/omgToolManifest.ts"],"names":[],"mappings":"AAsBA,MAAM,WAAW,cAAc;IAC7B;8CAC0C;IAC1C,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;uEAEmE;IACnE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;0EACsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;4EAEwE;IACxE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB;;4CAEwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED;;uEAEuE;AACvE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,cAAc,GAAG,aAAa,CAWtE;AAED;;;;;;;;uCAQuC;AACvC,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAe7D;AAED;0CAC0C;AAC1C,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAE7D"}

package/dist/core/tools/omgToolManifest.js

@@ -0,0 +1,66 @@
+// Phase 210: single canonical manifest for omg's MCP-tool exposure.
+//
+// All three CLI adapters (claude/codex/gemini) wire the wrapped model
+// to omg's own MCP server so the model can call read_file / write_file /
+// run_shell / record_decision / ask_user / etc. Each adapter renders
+// the registration in its provider-native format:
+//
+//   claude:  --mcp-config '{"mcpServers":{"omg":{"command":"omg","args":[...]}}}'
+//   codex:   -c mcp_servers.omg='{command="omg", args=[...]}'  (TOML inline)
+//   gemini:  ~/.gemini/settings.json → mcpServers.omg = {command:"omg", args:[...]}
+//
+// The {command, args} shape was duplicated three ways. Drift between
+// them is silent — a typo in one adapter, or a new flag added in one
+// place, only shows up when that specific provider runs and the model
+// asks for a missing tool. The audit (External MED: tool manifest
+// consistency) flagged this as one of omg's hidden cross-provider
+// drift surfaces.
+//
+// This module owns the canonical spec. Adapters import
+// `buildOmgServerSpec` to get the {command, args}; they only own the
+// per-provider serialization on top of it.
+/** Compose the {command, args} pair every adapter ultimately renders.
+ *  Adding a new tier or flag belongs here; the three adapters only
+ *  consume this and format it for their respective config surfaces. */
+export function buildOmgServerSpec(opts) {
+    const args = ["--mcp-serve"];
+    if (opts.shell)
+        args.push("--shell-tools");
+    else if (opts.writable)
+        args.push("--write-tools");
+    // Phase 348: per-role MCP scoping. Server names are simple identifiers and
+    // provider ids are alphanumeric, so they're safe in TOML/JSON/shell args.
+    if (opts.mcpAllow && opts.mcpAllow.length > 0) {
+        args.push("--mcp-allow", opts.mcpAllow.join(","));
+    }
+    if (opts.provider)
+        args.push("--mcp-provider", opts.provider);
+    return { command: opts.command ?? "omg", args };
+}
+/** Stringify the spec as a TOML inline table — what codex's
+ *  `-c mcp_servers.omg=…` expects. Kept here so the TOML shape stays
+ *  next to the JSON one (any future field added to OmgServerSpec
+ *  needs both renderers).
+ *
+ *  Throws if `command` or any `args` entry contains a `"` — TOML
+ *  basic strings can't carry an embedded double quote, and silently
+ *  emitting broken TOML would just produce a `codex` parse error
+ *  with no hint where it came from. */
+export function toCodexTomlInline(spec) {
+    if (spec.command.includes('"')) {
+        throw new Error(`toCodexTomlInline: command contains a double quote (${JSON.stringify(spec.command)}); not representable as a TOML basic string`);
+    }
+    for (const a of spec.args) {
+        if (a.includes('"')) {
+            throw new Error(`toCodexTomlInline: args entry contains a double quote (${JSON.stringify(a)}); not representable as a TOML basic string`);
+        }
+    }
+    const argsToml = spec.args.map((a) => `"${a}"`).join(", ");
+    return `{command="${spec.command}", args=[${argsToml}]}`;
+}
+/** JSON envelope claude's `--mcp-config` wants: a wrapper with
+ *  `mcpServers.omg = {command, args}`. */
+export function toClaudeMcpConfig(spec) {
+    return JSON.stringify({ mcpServers: { omg: spec } });
+}
+//# sourceMappingURL=omgToolManifest.js.map

package/dist/core/tools/omgToolManifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"omgToolManifest.js","sourceRoot":"","sources":["../../../src/core/tools/omgToolManifest.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,EAAE;AACF,sEAAsE;AACtE,yEAAyE;AACzE,qEAAqE;AACrE,kDAAkD;AAClD,EAAE;AACF,kFAAkF;AAClF,6EAA6E;AAC7E,oFAAoF;AACpF,EAAE;AACF,qEAAqE;AACrE,qEAAqE;AACrE,sEAAsE;AACtE,kEAAkE;AAClE,kEAAkE;AAClE,kBAAkB;AAClB,EAAE;AACF,uDAAuD;AACvD,qEAAqE;AACrE,2CAA2C;AA4B3C;;uEAEuE;AACvE,MAAM,UAAU,kBAAkB,CAAC,IAAoB;IACrD,MAAM,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IAC7B,IAAI,IAAI,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;SACtC,IAAI,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACnD,2EAA2E;IAC3E,0EAA0E;IAC1E,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC;AAED;;;;;;;;uCAQuC;AACvC,MAAM,UAAU,iBAAiB,CAAC,IAAmB;IACnD,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,uDAAuD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,6CAA6C,CACjI,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,0DAA0D,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,6CAA6C,CACzH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO,aAAa,IAAI,CAAC,OAAO,YAAY,QAAQ,IAAI,CAAC;AAC3D,CAAC;AAED;0CAC0C;AAC1C,MAAM,UAAU,iBAAiB,CAAC,IAAmB;IACnD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AACvD,CAAC"}

package/dist/core/tools/toolGate.d.ts

@@ -0,0 +1,23 @@
+import { JsonRpcClient } from "../../ipc/rpc.js";
+export interface ToolGate {
+    allow(name: string, args: Record<string, unknown>): Promise<boolean>;
+}
+export declare class AllowAllGate implements ToolGate {
+    allow(_name: string, _args: Record<string, unknown>): Promise<boolean>;
+}
+export declare class DenyAllGate implements ToolGate {
+    allow(_name: string, _args: Record<string, unknown>): Promise<boolean>;
+}
+export interface RpcGateOpts {
+    method?: string;
+    timeoutMs?: number;
+}
+export declare class RpcGate implements ToolGate {
+    private readonly client;
+    private readonly method;
+    private readonly timeoutMs;
+    private readonly remembered;
+    constructor(client: JsonRpcClient, opts?: RpcGateOpts);
+    allow(name: string, args: Record<string, unknown>): Promise<boolean>;
+}
+//# sourceMappingURL=toolGate.d.ts.map

package/dist/core/tools/toolGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolGate.d.ts","sourceRoot":"","sources":["../../../src/core/tools/toolGate.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAA0B,MAAM,kBAAkB,CAAC;AAEzE,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtE;AAED,qBAAa,YAAa,YAAW,QAAQ;IACrC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;CAG7E;AAED,qBAAa,WAAY,YAAW,QAAQ;IACpC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;CAG7E;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,OAAQ,YAAW,QAAQ;IAQpC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAPzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IAGnC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;gBAG7B,MAAM,EAAE,aAAa,EACtC,IAAI,GAAE,WAAgB;IAMlB,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;CAwB3E"}

package/dist/core/tools/toolGate.js

@@ -0,0 +1,51 @@
+// Tool permission gates. Mirror of legacy/omg/core/tool_gate.py.
+import { RpcError, TimeoutError } from "../../ipc/rpc.js";
+export class AllowAllGate {
+    async allow(_name, _args) {
+        return true;
+    }
+}
+export class DenyAllGate {
+    async allow(_name, _args) {
+        return false;
+    }
+}
+export class RpcGate {
+    client;
+    method;
+    timeoutMs;
+    // Phase 134: tools the user chose to "allow & remember" this session.
+    // A remembered tool short-circuits to allow without re-prompting.
+    remembered = new Set();
+    constructor(client, opts = {}) {
+        this.client = client;
+        this.method = opts.method ?? "request/tool_permission";
+        this.timeoutMs = opts.timeoutMs ?? 30_000;
+    }
+    async allow(name, args) {
+        if (this.remembered.has(name))
+            return true;
+        let result;
+        try {
+            result = await this.client.request(this.method, {
+                name,
+                input: { ...args },
+            }, { timeoutMs: this.timeoutMs });
+        }
+        catch (e) {
+            if (e instanceof RpcError || e instanceof TimeoutError)
+                return false;
+            return false;
+        }
+        if (typeof result !== "object" || result === null)
+            return false;
+        const r = result;
+        const ok = r.allow === true;
+        // Honor the prompt's "remember" answer so the same tool isn't
+        // re-asked for the rest of the session.
+        if (ok && r.remember === true)
+            this.remembered.add(name);
+        return ok;
+    }
+}
+//# sourceMappingURL=toolGate.js.map

package/dist/core/tools/toolGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolGate.js","sourceRoot":"","sources":["../../../src/core/tools/toolGate.ts"],"names":[],"mappings":"AAAA,iEAAiE;AAEjE,OAAO,EAAiB,QAAQ,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAMzE,MAAM,OAAO,YAAY;IACvB,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,KAA8B;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,MAAM,OAAO,WAAW;IACtB,KAAK,CAAC,KAAK,CAAC,KAAa,EAAE,KAA8B;QACvD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAOD,MAAM,OAAO,OAAO;IAQC;IAPF,MAAM,CAAS;IACf,SAAS,CAAS;IACnC,sEAAsE;IACtE,kEAAkE;IACjD,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhD,YACmB,MAAqB,EACtC,OAAoB,EAAE;QADL,WAAM,GAAN,MAAM,CAAe;QAGtC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,yBAAyB,CAAC;QACvD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,IAA6B;QACrD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAChC,IAAI,CAAC,MAAM,EACX;gBACE,IAAI;gBACJ,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE;aACnB,EACD,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAC9B,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,YAAY,QAAQ,IAAI,CAAC,YAAY,YAAY;gBAAE,OAAO,KAAK,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAChE,MAAM,CAAC,GAAG,MAAiD,CAAC;QAC5D,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC;QAC5B,8DAA8D;QAC9D,wCAAwC;QACxC,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI;YAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF"}

package/dist/core/tools/toolInterceptor.d.ts

@@ -0,0 +1,7 @@
+import type { Chunk } from "../orchestration/types.js";
+import type { ToolGate } from "./toolGate.js";
+import type { ToolRegistry } from "./tools.js";
+export declare function interceptToolCalls(stream: AsyncIterable<Chunk>, registry: ToolRegistry, opts?: {
+    gate?: ToolGate;
+}): AsyncIterable<Chunk>;
+//# sourceMappingURL=toolInterceptor.d.ts.map

package/dist/core/tools/toolInterceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolInterceptor.d.ts","sourceRoot":"","sources":["../../../src/core/tools/toolInterceptor.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,KAAK,EAA+B,MAAM,2BAA2B,CAAC;AACpF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,wBAAuB,kBAAkB,CACvC,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,EAC5B,QAAQ,EAAE,YAAY,EACtB,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,QAAQ,CAAA;CAAO,GAC7B,aAAa,CAAC,KAAK,CAAC,CAoBtB"}

package/dist/core/tools/toolInterceptor.js

@@ -0,0 +1,108 @@
+// Tool interceptor — wraps an adapter Chunk stream and synthesizes a
+// ToolUseEnd after every ToolUseStart, running the tool via the registry.
+//
+// Phase 79: tools that take a while (run_shell) can emit progress
+// chunks during execution. The interceptor bridges the registry's
+// callback-style `onProgress` into the AsyncIterable<Chunk> stream
+// by buffering chunks in a queue and a `notify` promise that fires
+// whenever progress arrives or the call completes.
+export async function* interceptToolCalls(stream, registry, opts = {}) {
+    for await (const chunk of stream) {
+        yield chunk;
+        if (chunk.type !== "tool_use_start")
+            continue;
+        if (opts.gate !== undefined) {
+            const allowed = await opts.gate.allow(chunk.toolName, chunk.toolInput);
+            if (!allowed) {
+                yield deniedEnd(chunk.toolId, chunk.toolName);
+                continue;
+            }
+        }
+        yield* runWithProgress(registry, chunk.toolName, chunk.toolInput, chunk.toolId);
+    }
+}
+/** Run one tool call, yielding `tool_use_progress` chunks as the
+ *  registry reports them and a final `tool_use_end` chunk on
+ *  completion. Pure plumbing — registries that don't propagate
+ *  progress emit only the end chunk, which matches the pre-Phase-79
+ *  behaviour exactly. */
+async function* runWithProgress(registry, name, args, toolId) {
+    const queue = [];
+    let notifyResolve = null;
+    let done = false;
+    const notify = () => {
+        const r = notifyResolve;
+        notifyResolve = null;
+        r?.();
+    };
+    registry
+        .call(name, args, {
+        onProgress: (text) => {
+            const progress = {
+                type: "tool_use_progress",
+                toolId,
+                text,
+            };
+            queue.push(progress);
+            notify();
+        },
+    })
+        .then((result) => {
+        const end = {
+            type: "tool_use_end",
+            toolId,
+            result: {
+                ok: result.ok,
+                value: result.value,
+                error: result.error,
+            },
+        };
+        queue.push(end);
+        done = true;
+        notify();
+    })
+        // Phase 161: ToolRegistry.call already wraps tool exceptions into an
+        // ok:false result, but an onProgress callback (or other unexpected
+        // path) could still reject. Without this catch, `done` would never
+        // flip and the queue loop below would await `notify` forever — a
+        // silent deadlock that hangs the whole turn. Synthesize an error end.
+        .catch((e) => {
+        const end = {
+            type: "tool_use_end",
+            toolId,
+            result: {
+                ok: false,
+                value: null,
+                error: `tool '${name}' failed: ${e instanceof Error ? e.message : String(e)}`,
+            },
+        };
+        queue.push(end);
+        done = true;
+        notify();
+    });
+    while (true) {
+        while (queue.length > 0) {
+            const c = queue.shift();
+            yield c;
+            if (c.type === "tool_use_end")
+                return;
+        }
+        if (done)
+            return;
+        await new Promise((r) => {
+            notifyResolve = r;
+        });
+    }
+}
+function deniedEnd(toolId, toolName) {
+    return {
+        type: "tool_use_end",
+        toolId,
+        result: {
+            ok: false,
+            value: null,
+            error: `permission denied: ${toolName}`,
+        },
+    };
+}
+//# sourceMappingURL=toolInterceptor.js.map

package/dist/core/tools/toolInterceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolInterceptor.js","sourceRoot":"","sources":["../../../src/core/tools/toolInterceptor.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,0EAA0E;AAC1E,EAAE;AACF,kEAAkE;AAClE,kEAAkE;AAClE,mEAAmE;AACnE,mEAAmE;AACnE,mDAAmD;AAMnD,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,kBAAkB,CACvC,MAA4B,EAC5B,QAAsB,EACtB,OAA4B,EAAE;IAE9B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,MAAM,KAAK,CAAC;QACZ,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB;YAAE,SAAS;QAE9C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YACvE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC9C,SAAS;YACX,CAAC;QACH,CAAC;QAED,KAAK,CAAC,CAAC,eAAe,CACpB,QAAQ,EACR,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,MAAM,CACb,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;yBAIyB;AACzB,KAAK,SAAS,CAAC,CAAC,eAAe,CAC7B,QAAsB,EACtB,IAAY,EACZ,IAA6B,EAC7B,MAAc;IAEd,MAAM,KAAK,GAAY,EAAE,CAAC;IAC1B,IAAI,aAAa,GAAwB,IAAI,CAAC;IAC9C,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,MAAM,CAAC,GAAG,aAAa,CAAC;QACxB,aAAa,GAAG,IAAI,CAAC;QACrB,CAAC,EAAE,EAAE,CAAC;IACR,CAAC,CAAC;IAEF,QAAQ;SACL,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;QAChB,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;YACnB,MAAM,QAAQ,GAAoB;gBAChC,IAAI,EAAE,mBAAmB;gBACzB,MAAM;gBACN,IAAI;aACL,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrB,MAAM,EAAE,CAAC;QACX,CAAC;KACF,CAAC;SACD,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QACf,MAAM,GAAG,GAAe;YACtB,IAAI,EAAE,cAAc;YACpB,MAAM;YACN,MAAM,EAAE;gBACN,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;aACpB;SACF,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,IAAI,GAAG,IAAI,CAAC;QACZ,MAAM,EAAE,CAAC;IACX,CAAC,CAAC;QACF,qEAAqE;QACrE,mEAAmE;QACnE,mEAAmE;QACnE,iEAAiE;QACjE,sEAAsE;SACrE,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE;QACpB,MAAM,GAAG,GAAe;YACtB,IAAI,EAAE,cAAc;YACpB,MAAM;YACN,MAAM,EAAE;gBACN,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,SAAS,IAAI,aAClB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAC3C,EAAE;aACH;SACF,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,IAAI,GAAG,IAAI,CAAC;QACZ,MAAM,EAAE,CAAC;IACX,CAAC,CAAC,CAAC;IAEL,OAAO,IAAI,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YACzB,MAAM,CAAC,CAAC;YACR,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc;gBAAE,OAAO;QACxC,CAAC;QACD,IAAI,IAAI;YAAE,OAAO;QACjB,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE;YAC5B,aAAa,GAAG,CAAC,CAAC;QACpB,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,QAAgB;IACjD,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,MAAM;QACN,MAAM,EAAE;YACN,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,sBAAsB,QAAQ,EAAE;SACxC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/tools/tools.d.ts

@@ -0,0 +1,34 @@
+import type { LLMAdapter } from "../adapter.js";
+export interface ToolResult {
+    readonly ok: boolean;
+    readonly value: unknown;
+    readonly error: string;
+}
+/** Phase 79: optional progress-reporting context. Tools that take a
+ *  while (run_shell, long file scans) call `ctx.onProgress(chunk)`
+ *  as output becomes available. Callers that don't care leave the
+ *  context off and the onProgress branch is a no-op. */
+export interface ToolCallContext {
+    onProgress?: (text: string) => void;
+}
+export type ToolFn = (args: Record<string, unknown>, ctx?: ToolCallContext) => Promise<unknown>;
+export declare class ToolRegistry {
+    private readonly tools;
+    register(name: string, fn: ToolFn): void;
+    has(name: string): boolean;
+    get names(): string[];
+    call(name: string, args: Record<string, unknown>, ctx?: ToolCallContext): Promise<ToolResult>;
+}
+export declare function defaultRegistry(cwd?: string): ToolRegistry;
+export declare function defaultWritableRegistry(cwd?: string): ToolRegistry;
+export declare function defaultShellRegistry(cwd?: string): ToolRegistry;
+export interface DelegateOpts {
+    /** Resolve a role name to a ready-to-stream adapter. Builds a fresh
+     *  adapter per call so sub-agents always run in isolated sessions. */
+    resolveAdapter: (role: string) => Promise<LLMAdapter>;
+    /** Known role names (from team.yaml). Used for validation + better
+     *  error messages on unknown roles. */
+    roles: readonly string[];
+}
+export declare function registerDelegate(reg: ToolRegistry, opts: DelegateOpts): void;
+//# sourceMappingURL=tools.d.ts.map

package/dist/core/tools/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../../src/core/tools/tools.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAGhD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;wDAGwD;AACxD,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC;AAED,MAAM,MAAM,MAAM,GAAG,CACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,CAAC,EAAE,eAAe,KAClB,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtB,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA6B;IAEnD,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI;IAUxC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B,IAAI,KAAK,IAAI,MAAM,EAAE,CAEpB;IAEK,IAAI,CACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,CAAC,EAAE,eAAe,GACpB,OAAO,CAAC,UAAU,CAAC;CAuBvB;AAwBD,wBAAgB,eAAe,CAAC,GAAG,GAAE,MAAsB,GAAG,YAAY,CAkEzE;AAED,wBAAgB,uBAAuB,CACrC,GAAG,GAAE,MAAsB,GAC1B,YAAY,CAuBd;AAsDD,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,MAAsB,GAC1B,YAAY,CAiCd;AAuGD,MAAM,WAAW,YAAY;IAC3B;0EACsE;IACtE,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IACtD;2CACuC;IACvC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAkC5E"}