agentic-orchestrator 0.1.0

package/dist/apps/control-plane/mcp/tool-registry-loader.js

@@ -0,0 +1,109 @@
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { pathExists } from '../core/fs.js';
+import { MCP_PROTOCOL_PIN, REQUIRED_MCP_TRANSPORTS } from './protocol-contract.js';
+export class ToolRegistryLoader {
+    repoRoot;
+    constructor(repoRoot) {
+        this.repoRoot = repoRoot;
+    }
+    get toolsRoot() {
+        return path.join(this.repoRoot, 'agentic', 'orchestrator', 'tools');
+    }
+    get catalogPath() {
+        return path.join(this.toolsRoot, 'catalog.json');
+    }
+    get protocolPath() {
+        return path.join(this.toolsRoot, 'protocol.json');
+    }
+    get errorsSchemaPath() {
+        return path.join(this.toolsRoot, 'errors.schema.json');
+    }
+    resolveSchemaPath(schemaRef) {
+        return path.resolve(this.toolsRoot, schemaRef);
+    }
+    async load() {
+        const catalog = await this.readCatalog();
+        const protocol = await this.readProtocol();
+        const toolsByName = new Map();
+        const toolsByHandlerId = new Map();
+        for (const tool of catalog.tools) {
+            if (toolsByName.has(tool.name)) {
+                throw new Error(`registry_duplicate_tool_name:${tool.name}`);
+            }
+            if (toolsByHandlerId.has(tool.handler_id)) {
+                throw new Error(`registry_duplicate_handler_id:${tool.handler_id}`);
+            }
+            if (!Array.isArray(tool.supported_roles) || tool.supported_roles.length === 0) {
+                throw new Error(`registry_supported_roles_missing:${tool.name}`);
+            }
+            if (tool.mutating && tool.requires_operation_id !== true) {
+                throw new Error(`registry_mutating_requires_operation_id:${tool.name}`);
+            }
+            const inputSchemaPath = this.resolveSchemaPath(tool.input_schema_ref);
+            const outputSchemaPath = this.resolveSchemaPath(tool.output_schema_ref);
+            if (!(await pathExists(inputSchemaPath))) {
+                throw new Error(`registry_missing_input_schema:${tool.name}:${tool.input_schema_ref}`);
+            }
+            if (!(await pathExists(outputSchemaPath))) {
+                throw new Error(`registry_missing_output_schema:${tool.name}:${tool.output_schema_ref}`);
+            }
+            toolsByName.set(tool.name, tool);
+            toolsByHandlerId.set(tool.handler_id, tool);
+        }
+        if (!(await pathExists(this.errorsSchemaPath))) {
+            throw new Error('registry_missing_errors_schema');
+        }
+        return {
+            toolsRoot: this.toolsRoot,
+            catalogPath: this.catalogPath,
+            protocolPath: this.protocolPath,
+            catalog,
+            protocol,
+            toolsByName,
+            toolsByHandlerId
+        };
+    }
+    async readSchemaByRef(schemaRef) {
+        const absolute = this.resolveSchemaPath(schemaRef);
+        const text = await fs.readFile(absolute, 'utf8');
+        return JSON.parse(text);
+    }
+    async readErrorsSchema() {
+        const text = await fs.readFile(this.errorsSchemaPath, 'utf8');
+        return JSON.parse(text);
+    }
+    async readCatalog() {
+        const text = await fs.readFile(this.catalogPath, 'utf8');
+        const parsed = JSON.parse(text);
+        if (!parsed || typeof parsed !== 'object' || !Array.isArray(parsed.tools)) {
+            throw new Error('registry_invalid_catalog_shape');
+        }
+        return parsed;
+    }
+    async readProtocol() {
+        const text = await fs.readFile(this.protocolPath, 'utf8');
+        const parsed = JSON.parse(text);
+        if (!parsed || typeof parsed !== 'object') {
+            throw new Error('registry_invalid_protocol_shape');
+        }
+        if (!parsed.mcp_protocol_version || !parsed.sdk?.package || !parsed.sdk?.version) {
+            throw new Error('registry_invalid_protocol_fields');
+        }
+        if (!Array.isArray(parsed.enabled_transports) || parsed.enabled_transports.length === 0) {
+            throw new Error('registry_invalid_protocol_transports');
+        }
+        if (parsed.mcp_protocol_version !== MCP_PROTOCOL_PIN.mcp_protocol_version ||
+            parsed.sdk.package !== MCP_PROTOCOL_PIN.sdk.package ||
+            parsed.sdk.version !== MCP_PROTOCOL_PIN.sdk.version) {
+            throw new Error('registry_protocol_pin_mismatch');
+        }
+        for (const requiredTransport of REQUIRED_MCP_TRANSPORTS) {
+            if (!parsed.enabled_transports.includes(requiredTransport)) {
+                throw new Error(`registry_missing_required_transport:${requiredTransport}`);
+            }
+        }
+        return parsed;
+    }
+}
+//# sourceMappingURL=tool-registry-loader.js.map

package/dist/apps/control-plane/mcp/tool-registry-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registry-loader.js","sourceRoot":"","sources":["../../../../apps/control-plane/src/mcp/tool-registry-loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAGnF,MAAM,OAAO,kBAAkB;IACpB,QAAQ,CAAS;IAE1B,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IACzD,CAAC;IAED,iBAAiB,CAAC,SAAiB;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAE3C,MAAM,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;QACxD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA4B,CAAC;QAE7D,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACjC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YACtE,CAAC;YAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9E,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,qBAAqB,KAAK,IAAI,EAAE,CAAC;gBACzD,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1E,CAAC;YAED,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACtE,MAAM,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACxE,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;YACzF,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;YAC3F,CAAC;YAED,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACjC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,OAAO;YACP,QAAQ;YACR,WAAW;YACX,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IACrD,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;QAE/C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqB,CAAC;QAEpD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,IACE,MAAM,CAAC,oBAAoB,KAAK,gBAAgB,CAAC,oBAAoB;YACrE,MAAM,CAAC,GAAG,CAAC,OAAO,KAAK,gBAAgB,CAAC,GAAG,CAAC,OAAO;YACnD,MAAM,CAAC,GAAG,CAAC,OAAO,KAAK,gBAAgB,CAAC,GAAG,CAAC,OAAO,EACnD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QACD,KAAK,MAAM,iBAAiB,IAAI,uBAAuB,EAAE,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC3D,MAAM,IAAI,KAAK,CAAC,uCAAuC,iBAAiB,EAAE,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CAEF"}

package/dist/apps/control-plane/mcp/tool-runtime.d.ts

@@ -0,0 +1,34 @@
+import { type ToolResponse } from '../core/response.js';
+import type { LoadedToolRegistry, VerifiedActorClaims } from './runtime-types.js';
+import type { ToolDescriptor } from './transport-types.js';
+import { type ToolRegistryLoader } from './tool-registry-loader.js';
+import { type ToolContractValidator } from './tool-contract-validator.js';
+import { type ToolAuthorizer } from './tool-authorizer.js';
+import { type OperationLedger } from './operation-ledger.js';
+import { type KernelToolExecutor } from './kernel-tool-executor.js';
+export declare class ToolRuntime {
+    readonly registry: LoadedToolRegistry;
+    readonly loader: ToolRegistryLoader;
+    readonly validator: ToolContractValidator;
+    readonly authorizer: ToolAuthorizer;
+    readonly ledger: OperationLedger;
+    readonly executor: KernelToolExecutor;
+    constructor(params: {
+        registry: LoadedToolRegistry;
+        loader: ToolRegistryLoader;
+        validator: ToolContractValidator;
+        authorizer: ToolAuthorizer;
+        ledger: OperationLedger;
+        executor: KernelToolExecutor;
+    });
+    listTools(): Promise<ToolDescriptor[]>;
+    callTool(toolName: string, args: Record<string, unknown>, claims: VerifiedActorClaims): Promise<ToolResponse>;
+    private lookupTool;
+    private unknownToolResponse;
+    private authorizeFeatureScope;
+    private authorizeRole;
+    private validateInput;
+    private validateExecutionResponse;
+    private finalize;
+    private resolveIdempotency;
+}

package/dist/apps/control-plane/mcp/tool-runtime.js

@@ -0,0 +1,252 @@
+import { fail } from '../core/response.js';
+import { ERROR_CODES } from '../core/error-codes.js';
+import { stableHash } from '../core/fs.js';
+function canonicalize(value) {
+    if (Array.isArray(value)) {
+        return value.map((item) => canonicalize(item));
+    }
+    if (value && typeof value === 'object') {
+        const record = value;
+        const out = {};
+        for (const key of Object.keys(record).sort((a, b) => a.localeCompare(b))) {
+            out[key] = canonicalize(record[key]);
+        }
+        return out;
+    }
+    return value;
+}
+function hashRequest(toolName, args) {
+    const normalized = canonicalize({ tool_name: toolName, args });
+    return stableHash(JSON.stringify(normalized));
+}
+function normalizeOperationId(args) {
+    const operationId = args.operation_id;
+    return typeof operationId === 'string' && operationId.length >= 8 ? operationId : null;
+}
+function featureScopeAllows(claims, args) {
+    if (!claims.feature_scope || claims.feature_scope.length === 0) {
+        return true;
+    }
+    const requestedFeature = args.feature_id;
+    if (typeof requestedFeature !== 'string') {
+        return true;
+    }
+    return claims.feature_scope.includes(requestedFeature);
+}
+function emitToolLog(params) {
+    const operationId = typeof params.args.operation_id === 'string' ? params.args.operation_id : null;
+    const featureId = typeof params.args.feature_id === 'string' ? params.args.feature_id : null;
+    const errorCode = isFailResponse(params.response) ? params.response.error.code : null;
+    const payload = {
+        run_id: params.claims.run_id,
+        operation_id: operationId,
+        feature_id: featureId,
+        tool_name: params.toolName,
+        actor_type: params.claims.actor_type,
+        latency_ms: params.latencyMs,
+        result: params.response.ok ? 'ok' : 'error',
+        error_code: errorCode
+    };
+    process.stderr.write(`${JSON.stringify(payload)}\n`);
+}
+function isFailResponse(response) {
+    return response.ok === false;
+}
+export class ToolRuntime {
+    registry;
+    loader;
+    validator;
+    authorizer;
+    ledger;
+    executor;
+    constructor(params) {
+        this.registry = params.registry;
+        this.loader = params.loader;
+        this.validator = params.validator;
+        this.authorizer = params.authorizer;
+        this.ledger = params.ledger;
+        this.executor = params.executor;
+    }
+    async listTools() {
+        const descriptors = [];
+        const sorted = [...this.registry.toolsByName.values()].sort((a, b) => a.name.localeCompare(b.name));
+        for (const tool of sorted) {
+            descriptors.push({
+                name: tool.name,
+                description: tool.description,
+                input_schema: await this.loader.readSchemaByRef(tool.input_schema_ref),
+                output_schema: await this.loader.readSchemaByRef(tool.output_schema_ref),
+                mutating: tool.mutating,
+                requires_operation_id: tool.requires_operation_id
+            });
+        }
+        return descriptors;
+    }
+    async callTool(toolName, args, claims) {
+        const started = Date.now();
+        const safeArgs = { ...(args ?? {}) };
+        const tool = this.lookupTool(toolName);
+        if (!tool) {
+            return this.finalize(started, claims, toolName, safeArgs, this.unknownToolResponse(toolName));
+        }
+        const scopeAuthorizationResult = this.authorizeFeatureScope(claims, safeArgs);
+        if (scopeAuthorizationResult) {
+            return this.finalize(started, claims, toolName, safeArgs, scopeAuthorizationResult);
+        }
+        const roleAuthorizationResult = this.authorizeRole(claims, toolName);
+        if (roleAuthorizationResult) {
+            return this.finalize(started, claims, toolName, safeArgs, roleAuthorizationResult);
+        }
+        const inputValidationResult = await this.validateInput(tool, toolName, safeArgs);
+        if (inputValidationResult) {
+            return this.finalize(started, claims, toolName, safeArgs, inputValidationResult);
+        }
+        const idempotencyResolution = await this.resolveIdempotency(tool, toolName, safeArgs, claims);
+        if (idempotencyResolution.result) {
+            return this.finalize(started, claims, toolName, safeArgs, idempotencyResolution.result);
+        }
+        const executionResponse = await this.executor.execute(tool, safeArgs, claims);
+        const outputValidationResult = await this.validateExecutionResponse(tool, toolName, executionResponse);
+        if (outputValidationResult) {
+            return this.finalize(started, claims, toolName, safeArgs, outputValidationResult);
+        }
+        if (idempotencyResolution.operationId && idempotencyResolution.requestHash) {
+            await this.ledger.recordOperation(claims.run_id, idempotencyResolution.operationId, toolName, idempotencyResolution.requestHash, executionResponse);
+        }
+        return this.finalize(started, claims, toolName, safeArgs, executionResponse);
+    }
+    lookupTool(toolName) {
+        return this.registry.toolsByName.get(toolName) ?? null;
+    }
+    unknownToolResponse(toolName) {
+        return fail(ERROR_CODES.INVALID_ARGUMENT, `Unknown tool ${toolName}`, {
+            retryable: false,
+            requires_human: true
+        });
+    }
+    authorizeFeatureScope(claims, args) {
+        if (featureScopeAllows(claims, args)) {
+            return null;
+        }
+        return fail(ERROR_CODES.FORBIDDEN_TOOL_FOR_ROLE, 'feature_scope_violation', {
+            retryable: false,
+            requires_human: true,
+            feature_scope: claims.feature_scope,
+            feature_id: args.feature_id
+        });
+    }
+    authorizeRole(claims, toolName) {
+        if (this.authorizer.isAuthorized(claims.actor_type, toolName)) {
+            return null;
+        }
+        return fail(ERROR_CODES.FORBIDDEN_TOOL_FOR_ROLE, `Tool ${toolName} is not allowed for role ${claims.actor_type}`, {
+            retryable: false,
+            requires_human: true,
+            actor_type: claims.actor_type,
+            tool_name: toolName
+        });
+    }
+    async validateInput(tool, toolName, args) {
+        const inputValidation = await this.validator.validateInput(tool, args);
+        if (inputValidation.valid) {
+            return null;
+        }
+        return fail(ERROR_CODES.INVALID_ARGUMENT, 'tool_input_schema_validation_failed', {
+            retryable: false,
+            requires_human: true,
+            errors: inputValidation.errors,
+            tool_name: toolName
+        });
+    }
+    async validateExecutionResponse(tool, toolName, response) {
+        if (response.ok) {
+            const outputValidation = await this.validator.validateOutput(tool, response.data);
+            if (outputValidation.valid) {
+                return null;
+            }
+            return fail(ERROR_CODES.INTERNAL_ERROR, 'tool_output_schema_validation_failed', {
+                retryable: false,
+                requires_human: true,
+                errors: outputValidation.errors,
+                tool_name: toolName
+            });
+        }
+        const envelope = this.validator.validateErrorEnvelope(response);
+        if (envelope.valid) {
+            return null;
+        }
+        return fail(ERROR_CODES.INTERNAL_ERROR, 'tool_error_envelope_validation_failed', {
+            retryable: false,
+            requires_human: true,
+            errors: envelope.errors,
+            tool_name: toolName
+        });
+    }
+    finalize(started, claims, toolName, args, response) {
+        emitToolLog({
+            claims,
+            toolName,
+            args,
+            latencyMs: Date.now() - started,
+            response
+        });
+        return response;
+    }
+    async resolveIdempotency(tool, toolName, args, claims) {
+        if (!tool.mutating) {
+            return { operationId: null, requestHash: null, result: null };
+        }
+        const operationId = normalizeOperationId(args);
+        if (tool.requires_operation_id && !operationId) {
+            return {
+                operationId: null,
+                requestHash: null,
+                result: fail(ERROR_CODES.OPERATION_ID_REQUIRED, 'operation_id is required for mutating tools', {
+                    retryable: false,
+                    requires_human: true,
+                    tool_name: toolName
+                })
+            };
+        }
+        if (!operationId) {
+            return {
+                operationId: null,
+                requestHash: null,
+                result: fail(ERROR_CODES.OPERATION_ID_REQUIRED, 'operation_id is required for mutating tools', {
+                    retryable: false,
+                    requires_human: true,
+                    tool_name: toolName
+                })
+            };
+        }
+        const requestHash = hashRequest(toolName, args);
+        const dedupe = await this.ledger.resolveOperation(claims.run_id, operationId, requestHash);
+        if (dedupe.status === 'replay') {
+            return {
+                operationId,
+                requestHash,
+                result: dedupe.response
+            };
+        }
+        if (dedupe.status === 'mismatch') {
+            return {
+                operationId,
+                requestHash,
+                result: fail(ERROR_CODES.OPERATION_ID_REUSE_MISMATCH, 'operation_id_reuse_mismatch', {
+                    retryable: false,
+                    requires_human: true,
+                    operation_id: operationId,
+                    request_hash: requestHash,
+                    existing_hash: dedupe.existing_hash,
+                    tool_name: toolName
+                })
+            };
+        }
+        return {
+            operationId,
+            requestHash,
+            result: null
+        };
+    }
+}
+//# sourceMappingURL=tool-runtime.js.map

package/dist/apps/control-plane/mcp/tool-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-runtime.js","sourceRoot":"","sources":["../../../../apps/control-plane/src/mcp/tool-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAwC,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAS3C,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,IAA6B;IAClE,MAAM,UAAU,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,OAAO,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,oBAAoB,CAAC,IAA6B;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC;IACtC,OAAO,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;AACzF,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA2B,EAAE,IAA6B;IACpF,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC;IACzC,IAAI,OAAO,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,MAMpB;IACC,MAAM,WAAW,GAAG,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IACnG,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7F,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;QAC5B,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,MAAM,CAAC,QAAQ;QAC1B,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU;QACpC,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;QAC3C,UAAU,EAAE,SAAS;KACtB,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,cAAc,CAAC,QAAsB;IAC5C,OAAO,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC;AAC/B,CAAC;AAED,MAAM,OAAO,WAAW;IACb,QAAQ,CAAqB;IAC7B,MAAM,CAAqB;IAC3B,SAAS,CAAwB;IACjC,UAAU,CAAiB;IAC3B,MAAM,CAAkB;IACxB,QAAQ,CAAqB;IAEtC,YAAY,MAOX;QACC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,WAAW,GAAqB,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAEpG,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,YAAY,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBACtE,aAAa,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBACxE,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;aAClD,CAAC,CAAC;QACL,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAgB,EAAE,IAA6B,EAAE,MAA2B;QACzF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChG,CAAC;QAED,MAAM,wBAAwB,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC9E,IAAI,wBAAwB,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,wBAAwB,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,uBAAuB,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACrE,IAAI,uBAAuB,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,uBAAuB,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACjF,IAAI,qBAAqB,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9F,IAAI,qBAAqB,CAAC,MAAM,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9E,MAAM,sBAAsB,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QACvG,IAAI,sBAAsB,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,sBAAsB,CAAC,CAAC;QACpF,CAAC;QAED,IAAI,qBAAqB,CAAC,WAAW,IAAI,qBAAqB,CAAC,WAAW,EAAE,CAAC;YAC3E,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAC/B,MAAM,CAAC,MAAM,EACb,qBAAqB,CAAC,WAAW,EACjC,QAAQ,EACR,qBAAqB,CAAC,WAAW,EACjC,iBAAiB,CAClB,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAC/E,CAAC;IAEO,UAAU,CAAC,QAAgB;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IACzD,CAAC;IAEO,mBAAmB,CAAC,QAAgB;QAC1C,OAAO,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,gBAAgB,QAAQ,EAAE,EAAE;YACpE,SAAS,EAAE,KAAK;YAChB,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;IACL,CAAC;IAEO,qBAAqB,CAC3B,MAA2B,EAC3B,IAA6B;QAE7B,IAAI,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,uBAAuB,EAAE,yBAAyB,EAAE;YAC1E,SAAS,EAAE,KAAK;YAChB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,MAA2B,EAAE,QAAgB;QACjE,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,uBAAuB,EAAE,QAAQ,QAAQ,4BAA4B,MAAM,CAAC,UAAU,EAAE,EAAE;YAChH,SAAS,EAAE,KAAK;YAChB,cAAc,EAAE,IAAI;YACpB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,IAAsB,EACtB,QAAgB,EAChB,IAA6B;QAE7B,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvE,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,qCAAqC,EAAE;YAC/E,SAAS,EAAE,KAAK;YAChB,cAAc,EAAE,IAAI;YACpB,MAAM,EAAE,eAAe,CAAC,MAAM;YAC9B,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,IAAsB,EACtB,QAAgB,EAChB,QAAsB;QAEtB,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;YAClF,IAAI,gBAAgB,CAAC,KAAK,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,sCAAsC,EAAE;gBAC9E,SAAS,EAAE,KAAK;gBAChB,cAAc,EAAE,IAAI;gBACpB,MAAM,EAAE,gBAAgB,CAAC,MAAM;gBAC/B,SAAS,EAAE,QAAQ;aACpB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAChE,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,uCAAuC,EAAE;YAC/E,SAAS,EAAE,KAAK;YAChB,cAAc,EAAE,IAAI;YACpB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;IACL,CAAC;IAEO,QAAQ,CACd,OAAe,EACf,MAA2B,EAC3B,QAAgB,EAChB,IAA6B,EAC7B,QAAsB;QAEtB,WAAW,CAAC;YACV,MAAM;YACN,QAAQ;YACR,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAC/B,QAAQ;SACT,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,IAAsB,EACtB,QAAgB,EAChB,IAA6B,EAC7B,MAA2B;QAE3B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAChE,CAAC;QAED,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,qBAAqB,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/C,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,qBAAqB,EAAE,6CAA6C,EAAE;oBAC7F,SAAS,EAAE,KAAK;oBAChB,cAAc,EAAE,IAAI;oBACpB,SAAS,EAAE,QAAQ;iBACpB,CAAC;aACH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,IAAI;gBACjB,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,qBAAqB,EAAE,6CAA6C,EAAE;oBAC7F,SAAS,EAAE,KAAK;oBAChB,cAAc,EAAE,IAAI;oBACpB,SAAS,EAAE,QAAQ;iBACpB,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;QAC3F,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO;gBACL,WAAW;gBACX,WAAW;gBACX,MAAM,EAAE,MAAM,CAAC,QAAQ;aACxB,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,OAAO;gBACL,WAAW;gBACX,WAAW;gBACX,MAAM,EAAE,IAAI,CAAC,WAAW,CAAC,2BAA2B,EAAE,6BAA6B,EAAE;oBACnF,SAAS,EAAE,KAAK;oBAChB,cAAc,EAAE,IAAI;oBACpB,YAAY,EAAE,WAAW;oBACzB,YAAY,EAAE,WAAW;oBACzB,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,SAAS,EAAE,QAAQ;iBACpB,CAAC;aACH,CAAC;QACJ,CAAC;QAED,OAAO;YACL,WAAW;YACX,WAAW;YACX,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;CACF"}

package/dist/apps/control-plane/mcp/tools-markdown-generator.d.ts

@@ -0,0 +1,7 @@
+import type { ToolCatalog } from './runtime-types.js';
+export declare class ToolsMarkdownGenerator {
+    readonly repoRoot: string;
+    constructor(repoRoot: string);
+    renderFromCatalog(catalog: ToolCatalog): string;
+    writeFromCatalog(catalog: ToolCatalog): Promise<void>;
+}

package/dist/apps/control-plane/mcp/tools-markdown-generator.js

@@ -0,0 +1,22 @@
+import path from 'node:path';
+import { atomicWriteFile } from '../core/fs.js';
+export class ToolsMarkdownGenerator {
+    repoRoot;
+    constructor(repoRoot) {
+        this.repoRoot = repoRoot;
+    }
+    renderFromCatalog(catalog) {
+        const names = [...catalog.tools].map((tool) => tool.name).sort((a, b) => a.localeCompare(b));
+        const lines = ['# AOP MCP Tool Surface', '', 'Generated from `agentic/orchestrator/tools/catalog.json`.', ''];
+        for (const name of names) {
+            lines.push(`- ${name}`);
+        }
+        lines.push('');
+        return lines.join('\n');
+    }
+    async writeFromCatalog(catalog) {
+        const outPath = path.join(this.repoRoot, 'agentic', 'orchestrator', 'tools.md');
+        await atomicWriteFile(outPath, this.renderFromCatalog(catalog));
+    }
+}
+//# sourceMappingURL=tools-markdown-generator.js.map

package/dist/apps/control-plane/mcp/tools-markdown-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools-markdown-generator.js","sourceRoot":"","sources":["../../../../apps/control-plane/src/mcp/tools-markdown-generator.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGhD,MAAM,OAAO,sBAAsB;IACxB,QAAQ,CAAS;IAE1B,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,iBAAiB,CAAC,OAAoB;QACpC,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7F,MAAM,KAAK,GAAG,CAAC,wBAAwB,EAAE,EAAE,EAAE,2DAA2D,EAAE,EAAE,CAAC,CAAC;QAC9G,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAoB;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;QAChF,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,CAAC;CACF"}

package/dist/apps/control-plane/mcp/transport-types.d.ts

@@ -0,0 +1,14 @@
+import type { VerifiedActorClaims } from './runtime-types.js';
+export interface ToolDescriptor {
+    name: string;
+    description: string;
+    input_schema: Record<string, unknown>;
+    output_schema: Record<string, unknown>;
+    mutating: boolean;
+    requires_operation_id: boolean;
+}
+export interface ToolCallRequest {
+    tool_name: string;
+    args: Record<string, unknown>;
+    claims: VerifiedActorClaims;
+}

package/dist/apps/control-plane/mcp/transport-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=transport-types.js.map

package/dist/apps/control-plane/mcp/transport-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-types.js","sourceRoot":"","sources":["../../../../apps/control-plane/src/mcp/transport-types.ts"],"names":[],"mappings":""}

package/dist/apps/control-plane/mcp/types.d.ts

@@ -0,0 +1,2 @@
+export * from './runtime-types.js';
+export * from './transport-types.js';

package/dist/apps/control-plane/mcp/types.js

@@ -0,0 +1,3 @@
+export * from './runtime-types.js';
+export * from './transport-types.js';
+//# sourceMappingURL=types.js.map

package/dist/apps/control-plane/mcp/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../apps/control-plane/src/mcp/types.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC"}

package/dist/apps/control-plane/providers/providers.d.ts

@@ -0,0 +1,72 @@
+export interface AppError extends Error {
+    code?: string;
+    details?: Record<string, unknown>;
+}
+export interface ProviderSelection {
+    provider: 'codex' | 'claude' | 'gemini' | 'custom';
+    model: string;
+    provider_config_env: string | null;
+    provider_config_ref: string | null;
+}
+interface ResolveSelectionInput {
+    cli: Record<string, string | undefined>;
+    env: NodeJS.ProcessEnv;
+    agentsConfig?: {
+        runtime?: {
+            default_provider?: string;
+            default_model?: string;
+            provider_config_env?: string;
+        };
+    };
+}
+export declare const SUPPORTED_PROVIDERS: Set<"codex" | "claude" | "gemini" | "custom">;
+export type ProviderSelectionResolver = (input: ResolveSelectionInput) => ProviderSelection;
+export declare const resolveProviderSelection: ProviderSelectionResolver;
+export interface WorkerSession {
+    session_id: string;
+    role: string;
+    feature_id: string;
+    system_prompt_loaded: boolean;
+}
+export interface WorkerProvider {
+    selection: ProviderSelection;
+    createSession(role: string, featureId: string, systemPrompt: string | null): Promise<WorkerSession>;
+    reattachSession(sessionId: string): Promise<WorkerSession | null>;
+    closeSession(sessionId: string): Promise<{
+        closed: true;
+    }>;
+    runWorker(input: {
+        role: string;
+        feature_id: string;
+        context_bundle?: Record<string, unknown>;
+        instructions?: string;
+        last_tool_results?: Array<Record<string, unknown>>;
+        runtime_selection?: {
+            provider: string;
+            model: string;
+            provider_config_ref: string | null;
+        };
+    }): Promise<Record<string, unknown>>;
+}
+export declare class NullWorkerProvider implements WorkerProvider {
+    selection: ProviderSelection;
+    constructor(selection: ProviderSelection);
+    createSession(role: string, featureId: string, systemPrompt: string | null): Promise<WorkerSession>;
+    reattachSession(sessionId: string): Promise<WorkerSession | null>;
+    closeSession(_sessionId: string): Promise<{
+        closed: true;
+    }>;
+    runWorker({ role, feature_id, context_bundle }: {
+        role: string;
+        feature_id: string;
+        context_bundle?: Record<string, unknown>;
+        instructions?: string;
+        last_tool_results?: Array<Record<string, unknown>>;
+        runtime_selection?: {
+            provider: string;
+            model: string;
+            provider_config_ref: string | null;
+        };
+    }): Promise<Record<string, unknown>>;
+}
+export {};

package/dist/apps/control-plane/providers/providers.js

@@ -0,0 +1,94 @@
+import crypto from 'node:crypto';
+import { ERROR_CODES } from '../core/error-codes.js';
+export const SUPPORTED_PROVIDERS = new Set(['codex', 'claude', 'gemini', 'custom']);
+export const resolveProviderSelection = ({ cli, env, agentsConfig }) => {
+    const provider = cli.agent_provider ||
+        env.AOP_AGENT_PROVIDER ||
+        agentsConfig?.runtime?.default_provider ||
+        null;
+    const model = cli.agent_model ||
+        env.AOP_AGENT_MODEL ||
+        agentsConfig?.runtime?.default_model ||
+        null;
+    const providerConfigEnv = cli.provider_config_env ||
+        env.AOP_PROVIDER_CONFIG_ENV ||
+        agentsConfig?.runtime?.provider_config_env ||
+        null;
+    if (!provider) {
+        const error = new Error(ERROR_CODES.AGENT_PROVIDER_NOT_CONFIGURED);
+        error.code = ERROR_CODES.AGENT_PROVIDER_NOT_CONFIGURED;
+        throw error;
+    }
+    if (!SUPPORTED_PROVIDERS.has(provider)) {
+        const error = new Error(ERROR_CODES.UNSUPPORTED_AGENT_PROVIDER);
+        error.code = ERROR_CODES.UNSUPPORTED_AGENT_PROVIDER;
+        error.details = { provider };
+        throw error;
+    }
+    if (provider !== 'custom' && (!providerConfigEnv || !env[providerConfigEnv])) {
+        const error = new Error(ERROR_CODES.PROVIDER_AUTH_MISSING);
+        error.code = ERROR_CODES.PROVIDER_AUTH_MISSING;
+        error.details = {
+            provider,
+            provider_config_env: providerConfigEnv
+        };
+        throw error;
+    }
+    return {
+        provider: provider,
+        model: model ?? `${provider}-default`,
+        provider_config_env: providerConfigEnv,
+        provider_config_ref: providerConfigEnv ? env[providerConfigEnv] ?? null : null
+    };
+};
+export class NullWorkerProvider {
+    selection;
+    constructor(selection) {
+        this.selection = selection;
+    }
+    createSession(role, featureId, systemPrompt) {
+        return Promise.resolve({
+            session_id: `${role}-${featureId}-${crypto.randomUUID()}`,
+            role,
+            feature_id: featureId,
+            system_prompt_loaded: Boolean(systemPrompt)
+        });
+    }
+    reattachSession(sessionId) {
+        if (!sessionId || sessionId === 'unknown') {
+            return Promise.resolve(null);
+        }
+        return Promise.resolve({
+            session_id: sessionId,
+            role: 'orchestrator',
+            feature_id: 'global',
+            system_prompt_loaded: false
+        });
+    }
+    closeSession(_sessionId) {
+        return Promise.resolve({ closed: true });
+    }
+    runWorker({ role, feature_id, context_bundle }) {
+        if (role === 'planner') {
+            const state = context_bundle?.state;
+            const frontMatter = state && typeof state === 'object'
+                ? state.front_matter
+                : null;
+            const status = frontMatter && typeof frontMatter === 'object'
+                ? frontMatter.status
+                : null;
+            return Promise.resolve({
+                type: 'NOTE',
+                content: `Planner session active for ${feature_id}.`,
+                context_snapshot: {
+                    status: typeof status === 'string' ? status : 'unknown'
+                }
+            });
+        }
+        return Promise.resolve({
+            type: 'NOTE',
+            content: `${role} session active for ${feature_id}.`
+        });
+    }
+}
+//# sourceMappingURL=providers.js.map