agentvault 1.0.2 → 1.0.5

package/dist/src/orchestration/smallchat-policy.d.ts

@@ -0,0 +1,158 @@
+/**
+ * SmallChat Policy Enforcement — Full Hardening Suite for Agent Tool Use
+ *
+ * Comprehensive policy layer that validates, gates, and audits every tool call
+ * before it reaches the canister. Six enforcement mechanisms:
+ *
+ *   1. Pre-dispatch validation — check tool call is allowed by security policy
+ *   2. Semantic deduplication — prevent accidental double-dispatches
+ *   3. Rate limiting — cap tool calls per time window
+ *   4. MFA gating — high-risk ops require MFA confirmation
+ *   5. Parameter sanitization — validate against Candid schemas
+ *   6. Audit trail — log every dispatch decision
+ *
+ * Integrates with existing AgentVault security modules:
+ *   - src/security/multisig.ts — approval workflows
+ *   - src/security/mfa-approval.ts — TOTP/WebAuthn MFA
+ *   - src/security/icp-audit.ts — on-chain audit logging
+ */
+import type { CompressedToolCall } from './smallchat-bridge.js';
+import type { RiskLevel, ToolCategory } from './smallchat-tools.js';
+export type PolicyDecision = 'allow' | 'deny' | 'require_mfa' | 'require_approval';
+export interface PolicyResult {
+    decision: PolicyDecision;
+    reason: string;
+    toolCall: CompressedToolCall;
+    timestamp: number;
+    /** Set when decision is 'require_mfa' — caller must satisfy this before proceeding */
+    mfaChallengeId?: string;
+    /** Set when decision is 'require_approval' — approval request ID */
+    approvalRequestId?: string;
+}
+export interface PolicyRule {
+    /** Rule identifier */
+    id: string;
+    /** Rule description */
+    description: string;
+    /** Which categories this rule applies to (empty = all) */
+    categories?: ToolCategory[];
+    /** Which risk levels this rule applies to (empty = all) */
+    riskLevels?: RiskLevel[];
+    /** Specific selectors this rule applies to (empty = all) */
+    selectors?: string[];
+    /** The action to take when this rule matches */
+    action: PolicyDecision;
+    /** Whether this rule is currently enabled */
+    enabled: boolean;
+}
+export interface RateLimitConfig {
+    /** Maximum calls per window (default: 60) */
+    maxCalls: number;
+    /** Window duration in milliseconds (default: 60000 = 1 minute) */
+    windowMs: number;
+    /** Per-selector limits (overrides global) */
+    perSelector?: Record<string, {
+        maxCalls: number;
+        windowMs: number;
+    }>;
+}
+export interface DedupConfig {
+    /** Time window in milliseconds for deduplication (default: 5000 = 5 seconds) */
+    windowMs: number;
+    /** Selectors exempt from dedup (e.g., read-only queries) */
+    exemptSelectors?: string[];
+}
+export interface PolicyConfig {
+    /** Custom policy rules */
+    rules?: PolicyRule[];
+    /** Rate limiting configuration */
+    rateLimit?: Partial<RateLimitConfig>;
+    /** Deduplication configuration */
+    dedup?: Partial<DedupConfig>;
+    /** Risk levels that always require MFA */
+    mfaRequiredRiskLevels?: RiskLevel[];
+    /** Specific selectors that always require MFA */
+    mfaRequiredSelectors?: string[];
+    /** Categories blocked entirely (e.g., during maintenance) */
+    blockedCategories?: ToolCategory[];
+    /** Maximum parameter string length (prevents oversized payloads) */
+    maxParameterSize?: number;
+}
+export interface AuditRecord {
+    id: string;
+    timestamp: number;
+    selector: string;
+    selectorId: number;
+    parameterHash: string;
+    category: ToolCategory;
+    riskLevel: RiskLevel;
+    decision: PolicyDecision;
+    reason: string;
+    resolutionPath: string[];
+    callerId?: string;
+}
+export declare class SmallChatPolicyEngine {
+    private config;
+    private rateLimit;
+    private dedup;
+    private rateLimitWindows;
+    private recentDispatches;
+    private auditLog;
+    private maxAuditSize;
+    constructor(config?: PolicyConfig);
+    /**
+     * Evaluate a tool call against all policy rules.
+     * Returns the most restrictive applicable decision.
+     */
+    evaluate(toolCall: CompressedToolCall, callerId?: string): PolicyResult;
+    private checkRateLimit;
+    private isRateLimited;
+    private recordRateLimitCall;
+    private checkDedup;
+    private recordDispatch;
+    private checkMfaRequired;
+    private ruleMatches;
+    private recordAudit;
+    private buildResult;
+    /**
+     * Get the full audit log.
+     */
+    getAuditLog(): AuditRecord[];
+    /**
+     * Get audit log filtered by decision type.
+     */
+    getAuditByDecision(decision: PolicyDecision): AuditRecord[];
+    /**
+     * Get audit log entries for a specific selector.
+     */
+    getAuditBySelector(selector: string): AuditRecord[];
+    /**
+     * Clear the audit log.
+     */
+    clearAuditLog(): void;
+    /**
+     * Add a policy rule at runtime.
+     */
+    addRule(rule: PolicyRule): void;
+    /**
+     * Remove a policy rule by ID.
+     */
+    removeRule(ruleId: string): boolean;
+    /**
+     * Block an entire tool category.
+     */
+    blockCategory(category: ToolCategory): void;
+    /**
+     * Unblock a tool category.
+     */
+    unblockCategory(category: ToolCategory): void;
+    /**
+     * Reset rate limit windows (e.g., after a cooldown period).
+     */
+    resetRateLimits(): void;
+    /**
+     * Clear dedup history (e.g., when the user explicitly wants to retry).
+     */
+    clearDedupHistory(): void;
+}
+//# sourceMappingURL=smallchat-policy.d.ts.map

package/dist/src/orchestration/smallchat-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smallchat-policy.d.ts","sourceRoot":"","sources":["../../../src/orchestration/smallchat-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAMpE,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,MAAM,GAAG,aAAa,GAAG,kBAAkB,CAAC;AAEnF,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,sFAAsF;IACtF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,sBAAsB;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAC5B,2DAA2D;IAC3D,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;IACzB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,gDAAgD;IAChD,MAAM,EAAE,cAAc,CAAC;IACvB,6CAA6C;IAC7C,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,WAAW;IAC1B,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAC;IACjB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,0BAA0B;IAC1B,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC;IACrB,kCAAkC;IAClC,SAAS,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IACrC,kCAAkC;IAClC,KAAK,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7B,0CAA0C;IAC1C,qBAAqB,CAAC,EAAE,SAAS,EAAE,CAAC;IACpC,iDAAiD;IACjD,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,6DAA6D;IAC7D,iBAAiB,CAAC,EAAE,YAAY,EAAE,CAAC;IACnC,oEAAoE;IACpE,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,YAAY,CAAC;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAcD,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,SAAS,CAAkB;IACnC,OAAO,CAAC,KAAK,CAAwB;IACrC,OAAO,CAAC,gBAAgB,CAAsC;IAC9D,OAAO,CAAC,gBAAgB,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,YAAY,CAAS;gBAEjB,MAAM,GAAE,YAAiB;IAerC;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,YAAY;IAqEvE,OAAO,CAAC,cAAc;IAsBtB,OAAO,CAAC,aAAa;IAUrB,OAAO,CAAC,mBAAmB;IAiB3B,OAAO,CAAC,UAAU;IAkBlB,OAAO,CAAC,cAAc;IAiBtB,OAAO,CAAC,gBAAgB;IAmBxB,OAAO,CAAC,WAAW;IAuBnB,OAAO,CAAC,WAAW;IAgCnB,OAAO,CAAC,WAAW;IAanB;;OAEG;IACH,WAAW,IAAI,WAAW,EAAE;IAI5B;;OAEG;IACH,kBAAkB,CAAC,QAAQ,EAAE,cAAc,GAAG,WAAW,EAAE;IAI3D;;OAEG;IACH,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,EAAE;IAInD;;OAEG;IACH,aAAa,IAAI,IAAI;IAIrB;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAO/B;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO;IAOnC;;OAEG;IACH,aAAa,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI;IAS3C;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,YAAY,GAAG,IAAI;IAK7C;;OAEG;IACH,eAAe,IAAI,IAAI;IAIvB;;OAEG;IACH,iBAAiB,IAAI,IAAI;CAG1B"}

package/dist/src/orchestration/smallchat-policy.js

@@ -0,0 +1,314 @@
+/**
+ * SmallChat Policy Enforcement — Full Hardening Suite for Agent Tool Use
+ *
+ * Comprehensive policy layer that validates, gates, and audits every tool call
+ * before it reaches the canister. Six enforcement mechanisms:
+ *
+ *   1. Pre-dispatch validation — check tool call is allowed by security policy
+ *   2. Semantic deduplication — prevent accidental double-dispatches
+ *   3. Rate limiting — cap tool calls per time window
+ *   4. MFA gating — high-risk ops require MFA confirmation
+ *   5. Parameter sanitization — validate against Candid schemas
+ *   6. Audit trail — log every dispatch decision
+ *
+ * Integrates with existing AgentVault security modules:
+ *   - src/security/multisig.ts — approval workflows
+ *   - src/security/mfa-approval.ts — TOTP/WebAuthn MFA
+ *   - src/security/icp-audit.ts — on-chain audit logging
+ */
+import * as crypto from 'node:crypto';
+// ---------------------------------------------------------------------------
+// Policy Engine
+// ---------------------------------------------------------------------------
+export class SmallChatPolicyEngine {
+    config;
+    rateLimit;
+    dedup;
+    rateLimitWindows = new Map();
+    recentDispatches = new Map();
+    auditLog = [];
+    maxAuditSize = 10000;
+    constructor(config = {}) {
+        this.config = config;
+        this.rateLimit = {
+            maxCalls: config.rateLimit?.maxCalls ?? 60,
+            windowMs: config.rateLimit?.windowMs ?? 60_000,
+            perSelector: config.rateLimit?.perSelector,
+        };
+        this.dedup = {
+            windowMs: config.dedup?.windowMs ?? 5000,
+            exemptSelectors: config.dedup?.exemptSelectors ?? [],
+        };
+    }
+    /**
+     * Evaluate a tool call against all policy rules.
+     * Returns the most restrictive applicable decision.
+     */
+    evaluate(toolCall, callerId) {
+        const timestamp = Date.now();
+        // 1. Check blocked categories
+        if (this.config.blockedCategories?.includes(toolCall.category)) {
+            return this.buildResult('deny', `Category '${toolCall.category}' is currently blocked`, toolCall, timestamp);
+        }
+        // 2. Parameter size check
+        if (this.config.maxParameterSize) {
+            const paramSize = JSON.stringify(toolCall.parameters).length;
+            if (paramSize > this.config.maxParameterSize) {
+                return this.buildResult('deny', `Parameter size ${paramSize} exceeds maximum ${this.config.maxParameterSize}`, toolCall, timestamp);
+            }
+        }
+        // 3. Rate limiting
+        const rateLimitResult = this.checkRateLimit(toolCall.selector, timestamp);
+        if (rateLimitResult) {
+            return this.buildResult('deny', rateLimitResult, toolCall, timestamp);
+        }
+        // 4. Semantic deduplication
+        const dedupResult = this.checkDedup(toolCall, timestamp);
+        if (dedupResult) {
+            return this.buildResult('deny', dedupResult, toolCall, timestamp);
+        }
+        // 5. Custom policy rules (evaluated in order, first match wins)
+        if (this.config.rules) {
+            for (const rule of this.config.rules) {
+                if (!rule.enabled)
+                    continue;
+                if (this.ruleMatches(rule, toolCall)) {
+                    const result = this.buildResult(rule.action, rule.description, toolCall, timestamp);
+                    if (rule.action === 'require_mfa') {
+                        result.mfaChallengeId = `mfa_${crypto.randomBytes(8).toString('hex')}`;
+                    }
+                    else if (rule.action === 'require_approval') {
+                        result.approvalRequestId = `approval_${crypto.randomBytes(8).toString('hex')}`;
+                    }
+                    this.recordAudit(toolCall, rule.action, rule.description, callerId);
+                    return result;
+                }
+            }
+        }
+        // 6. MFA gating for high-risk operations
+        const mfaRequired = this.checkMfaRequired(toolCall);
+        if (mfaRequired) {
+            const result = this.buildResult('require_mfa', mfaRequired, toolCall, timestamp);
+            result.mfaChallengeId = `mfa_${crypto.randomBytes(8).toString('hex')}`;
+            this.recordAudit(toolCall, 'require_mfa', mfaRequired, callerId);
+            return result;
+        }
+        // All checks passed
+        this.recordDispatch(toolCall, timestamp);
+        this.recordAudit(toolCall, 'allow', 'All policy checks passed', callerId);
+        return this.buildResult('allow', 'All policy checks passed', toolCall, timestamp);
+    }
+    // -----------------------------------------------------------------------
+    // Rate limiting
+    // -----------------------------------------------------------------------
+    checkRateLimit(selector, now) {
+        // Check per-selector limit first
+        const perSelector = this.rateLimit.perSelector?.[selector];
+        if (perSelector) {
+            const exceeded = this.isRateLimited(`selector:${selector}`, perSelector.maxCalls, perSelector.windowMs, now);
+            if (exceeded) {
+                return `Rate limit exceeded for '${selector}': max ${perSelector.maxCalls} calls per ${perSelector.windowMs}ms`;
+            }
+        }
+        // Check global limit
+        const exceeded = this.isRateLimited('global', this.rateLimit.maxCalls, this.rateLimit.windowMs, now);
+        if (exceeded) {
+            return `Global rate limit exceeded: max ${this.rateLimit.maxCalls} calls per ${this.rateLimit.windowMs}ms`;
+        }
+        // Record this call in rate limit windows
+        this.recordRateLimitCall(`selector:${selector}`, now);
+        this.recordRateLimitCall('global', now);
+        return undefined;
+    }
+    isRateLimited(key, maxCalls, windowMs, now) {
+        const window = this.rateLimitWindows.get(key);
+        if (!window)
+            return false;
+        // Count calls within the window
+        const cutoff = now - windowMs;
+        const recentCalls = window.calls.filter((t) => t > cutoff);
+        return recentCalls.length >= maxCalls;
+    }
+    recordRateLimitCall(key, now) {
+        let window = this.rateLimitWindows.get(key);
+        if (!window) {
+            window = { calls: [] };
+            this.rateLimitWindows.set(key, window);
+        }
+        window.calls.push(now);
+        // Prune old entries to prevent unbounded growth
+        const cutoff = now - Math.max(this.rateLimit.windowMs, 300_000);
+        window.calls = window.calls.filter((t) => t > cutoff);
+    }
+    // -----------------------------------------------------------------------
+    // Semantic deduplication
+    // -----------------------------------------------------------------------
+    checkDedup(toolCall, now) {
+        // Skip dedup for exempt selectors
+        if (this.dedup.exemptSelectors.includes(toolCall.selector)) {
+            return undefined;
+        }
+        // Build dedup key from selector + parameter hash
+        const dedupKey = `${toolCall.selector}:${toolCall.parameterHash}`;
+        const lastDispatch = this.recentDispatches.get(dedupKey);
+        if (lastDispatch && now - lastDispatch < this.dedup.windowMs) {
+            const elapsedMs = now - lastDispatch;
+            return `Duplicate dispatch detected: '${toolCall.selector}' with same parameters was dispatched ${elapsedMs}ms ago (dedup window: ${this.dedup.windowMs}ms)`;
+        }
+        return undefined;
+    }
+    recordDispatch(toolCall, now) {
+        const dedupKey = `${toolCall.selector}:${toolCall.parameterHash}`;
+        this.recentDispatches.set(dedupKey, now);
+        // Prune old entries
+        const cutoff = now - this.dedup.windowMs * 2;
+        for (const [key, timestamp] of this.recentDispatches) {
+            if (timestamp < cutoff) {
+                this.recentDispatches.delete(key);
+            }
+        }
+    }
+    // -----------------------------------------------------------------------
+    // MFA gating
+    // -----------------------------------------------------------------------
+    checkMfaRequired(toolCall) {
+        // Check by risk level
+        const mfaRiskLevels = this.config.mfaRequiredRiskLevels ?? ['critical'];
+        if (mfaRiskLevels.includes(toolCall.riskLevel)) {
+            return `MFA required for ${toolCall.riskLevel}-risk tool '${toolCall.selector}'`;
+        }
+        // Check by specific selector
+        if (this.config.mfaRequiredSelectors?.includes(toolCall.selector)) {
+            return `MFA required for tool '${toolCall.selector}' (explicitly configured)`;
+        }
+        return undefined;
+    }
+    // -----------------------------------------------------------------------
+    // Rule matching
+    // -----------------------------------------------------------------------
+    ruleMatches(rule, toolCall) {
+        // Check category filter
+        if (rule.categories && rule.categories.length > 0) {
+            if (!rule.categories.includes(toolCall.category))
+                return false;
+        }
+        // Check risk level filter
+        if (rule.riskLevels && rule.riskLevels.length > 0) {
+            if (!rule.riskLevels.includes(toolCall.riskLevel))
+                return false;
+        }
+        // Check selector filter
+        if (rule.selectors && rule.selectors.length > 0) {
+            if (!rule.selectors.includes(toolCall.selector))
+                return false;
+        }
+        return true;
+    }
+    // -----------------------------------------------------------------------
+    // Audit trail
+    // -----------------------------------------------------------------------
+    recordAudit(toolCall, decision, reason, callerId) {
+        const record = {
+            id: crypto.randomBytes(8).toString('hex'),
+            timestamp: Date.now(),
+            selector: toolCall.selector,
+            selectorId: toolCall.selectorId,
+            parameterHash: toolCall.parameterHash,
+            category: toolCall.category,
+            riskLevel: toolCall.riskLevel,
+            decision,
+            reason,
+            resolutionPath: toolCall.resolutionPath,
+            callerId,
+        };
+        this.auditLog.push(record);
+        // Cap audit log size
+        if (this.auditLog.length > this.maxAuditSize) {
+            this.auditLog = this.auditLog.slice(-this.maxAuditSize / 2);
+        }
+    }
+    // -----------------------------------------------------------------------
+    // Result builder
+    // -----------------------------------------------------------------------
+    buildResult(decision, reason, toolCall, timestamp) {
+        return { decision, reason, toolCall, timestamp };
+    }
+    // -----------------------------------------------------------------------
+    // Public accessors
+    // -----------------------------------------------------------------------
+    /**
+     * Get the full audit log.
+     */
+    getAuditLog() {
+        return [...this.auditLog];
+    }
+    /**
+     * Get audit log filtered by decision type.
+     */
+    getAuditByDecision(decision) {
+        return this.auditLog.filter((r) => r.decision === decision);
+    }
+    /**
+     * Get audit log entries for a specific selector.
+     */
+    getAuditBySelector(selector) {
+        return this.auditLog.filter((r) => r.selector === selector);
+    }
+    /**
+     * Clear the audit log.
+     */
+    clearAuditLog() {
+        this.auditLog = [];
+    }
+    /**
+     * Add a policy rule at runtime.
+     */
+    addRule(rule) {
+        if (!this.config.rules) {
+            this.config.rules = [];
+        }
+        this.config.rules.push(rule);
+    }
+    /**
+     * Remove a policy rule by ID.
+     */
+    removeRule(ruleId) {
+        if (!this.config.rules)
+            return false;
+        const before = this.config.rules.length;
+        this.config.rules = this.config.rules.filter((r) => r.id !== ruleId);
+        return this.config.rules.length < before;
+    }
+    /**
+     * Block an entire tool category.
+     */
+    blockCategory(category) {
+        if (!this.config.blockedCategories) {
+            this.config.blockedCategories = [];
+        }
+        if (!this.config.blockedCategories.includes(category)) {
+            this.config.blockedCategories.push(category);
+        }
+    }
+    /**
+     * Unblock a tool category.
+     */
+    unblockCategory(category) {
+        if (!this.config.blockedCategories)
+            return;
+        this.config.blockedCategories = this.config.blockedCategories.filter((c) => c !== category);
+    }
+    /**
+     * Reset rate limit windows (e.g., after a cooldown period).
+     */
+    resetRateLimits() {
+        this.rateLimitWindows.clear();
+    }
+    /**
+     * Clear dedup history (e.g., when the user explicitly wants to retry).
+     */
+    clearDedupHistory() {
+        this.recentDispatches.clear();
+    }
+}
+//# sourceMappingURL=smallchat-policy.js.map

package/dist/src/orchestration/smallchat-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smallchat-policy.js","sourceRoot":"","sources":["../../../src/orchestration/smallchat-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AA6FtC,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,OAAO,qBAAqB;IACxB,MAAM,CAAe;IACrB,SAAS,CAAkB;IAC3B,KAAK,CAAwB;IAC7B,gBAAgB,GAAG,IAAI,GAAG,EAA2B,CAAC;IACtD,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,QAAQ,GAAkB,EAAE,CAAC;IAC7B,YAAY,GAAG,KAAK,CAAC;IAE7B,YAAY,SAAuB,EAAE;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,IAAI,CAAC,SAAS,GAAG;YACf,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,IAAI,EAAE;YAC1C,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,IAAI,MAAM;YAC9C,WAAW,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW;SAC3C,CAAC;QAEF,IAAI,CAAC,KAAK,GAAG;YACX,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,IAAI,IAAI;YACxC,eAAe,EAAE,MAAM,CAAC,KAAK,EAAE,eAAe,IAAI,EAAE;SACrD,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,QAA4B,EAAE,QAAiB;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,8BAA8B;QAC9B,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,aAAa,QAAQ,CAAC,QAAQ,wBAAwB,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC/G,CAAC;QAED,0BAA0B;QAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;YAC7D,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAC7C,OAAO,IAAI,CAAC,WAAW,CACrB,MAAM,EACN,kBAAkB,SAAS,oBAAoB,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAC7E,QAAQ,EACR,SAAS,CACV,CAAC;YACJ,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1E,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACxE,CAAC;QAED,4BAA4B;QAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACzD,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpE,CAAC;QAED,gEAAgE;QAChE,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACtB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrC,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,SAAS;gBAC5B,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;oBACrC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;oBACpF,IAAI,IAAI,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;wBAClC,MAAM,CAAC,cAAc,GAAG,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzE,CAAC;yBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;wBAC9C,MAAM,CAAC,iBAAiB,GAAG,YAAY,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACjF,CAAC;oBACD,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;oBACpE,OAAO,MAAM,CAAC;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;YACjF,MAAM,CAAC,cAAc,GAAG,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;YACjE,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,oBAAoB;QACpB,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,0BAA0B,EAAE,QAAQ,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACpF,CAAC;IAED,0EAA0E;IAC1E,gBAAgB;IAChB,0EAA0E;IAElE,cAAc,CAAC,QAAgB,EAAE,GAAW;QAClD,iCAAiC;QACjC,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC3D,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,QAAQ,EAAE,EAAE,WAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC7G,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,4BAA4B,QAAQ,UAAU,WAAW,CAAC,QAAQ,cAAc,WAAW,CAAC,QAAQ,IAAI,CAAC;YAClH,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACrG,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,mCAAmC,IAAI,CAAC,SAAS,CAAC,QAAQ,cAAc,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,CAAC;QAC7G,CAAC;QAED,yCAAyC;QACzC,IAAI,CAAC,mBAAmB,CAAC,YAAY,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QACtD,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,aAAa,CAAC,GAAW,EAAE,QAAgB,EAAE,QAAgB,EAAE,GAAW;QAChF,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,gCAAgC;QAChC,MAAM,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC;QAC9B,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QAC3D,OAAO,WAAW,CAAC,MAAM,IAAI,QAAQ,CAAC;IACxC,CAAC;IAEO,mBAAmB,CAAC,GAAW,EAAE,GAAW;QAClD,IAAI,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACvB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEvB,gDAAgD;QAChD,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;IACxD,CAAC;IAED,0EAA0E;IAC1E,yBAAyB;IACzB,0EAA0E;IAElE,UAAU,CAAC,QAA4B,EAAE,GAAW;QAC1D,kCAAkC;QAClC,IAAI,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,iDAAiD;QACjD,MAAM,QAAQ,GAAG,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QAClE,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEzD,IAAI,YAAY,IAAI,GAAG,GAAG,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC7D,MAAM,SAAS,GAAG,GAAG,GAAG,YAAY,CAAC;YACrC,OAAO,iCAAiC,QAAQ,CAAC,QAAQ,yCAAyC,SAAS,yBAAyB,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC;QAC/J,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,cAAc,CAAC,QAA4B,EAAE,GAAW;QAC9D,MAAM,QAAQ,GAAG,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QAClE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAEzC,oBAAoB;QACpB,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACrD,IAAI,SAAS,GAAG,MAAM,EAAE,CAAC;gBACvB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,aAAa;IACb,0EAA0E;IAElE,gBAAgB,CAAC,QAA4B;QACnD,sBAAsB;QACtB,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAqB,IAAI,CAAC,UAAU,CAAC,CAAC;QACxE,IAAI,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/C,OAAO,oBAAoB,QAAQ,CAAC,SAAS,eAAe,QAAQ,CAAC,QAAQ,GAAG,CAAC;QACnF,CAAC;QAED,6BAA6B;QAC7B,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClE,OAAO,0BAA0B,QAAQ,CAAC,QAAQ,2BAA2B,CAAC;QAChF,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,0EAA0E;IAC1E,gBAAgB;IAChB,0EAA0E;IAElE,WAAW,CAAC,IAAgB,EAAE,QAA4B;QAChE,wBAAwB;QACxB,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAC;QACjE,CAAC;QAED,0BAA0B;QAC1B,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,OAAO,KAAK,CAAC;QAClE,CAAC;QAED,wBAAwB;QACxB,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,OAAO,KAAK,CAAC;QAChE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0EAA0E;IAC1E,cAAc;IACd,0EAA0E;IAElE,WAAW,CACjB,QAA4B,EAC5B,QAAwB,EACxB,MAAc,EACd,QAAiB;QAEjB,MAAM,MAAM,GAAgB;YAC1B,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YACzC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,aAAa,EAAE,QAAQ,CAAC,aAAa;YACrC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,QAAQ;YACR,MAAM;YACN,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,QAAQ;SACT,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE3B,qBAAqB;QACrB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,iBAAiB;IACjB,0EAA0E;IAElE,WAAW,CACjB,QAAwB,EACxB,MAAc,EACd,QAA4B,EAC5B,SAAiB;QAEjB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACnD,CAAC;IAED,0EAA0E;IAC1E,mBAAmB;IACnB,0EAA0E;IAE1E;;OAEG;IACH,WAAW;QACT,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,QAAwB;QACzC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,QAAgB;QACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,aAAa;QACX,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAgB;QACtB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,MAAc;QACvB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,QAAsB;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,iBAAiB,GAAG,EAAE,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,QAAsB;QACpC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAAE,OAAO;QAC3C,IAAI,CAAC,MAAM,CAAC,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC9F,CAAC;IAED;;OAEG;IACH,eAAe;QACb,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;CACF"}

package/dist/src/orchestration/smallchat-tools.d.ts

@@ -0,0 +1,69 @@
+/**
+ * SmallChat ToolClass Definitions for AgentVault Canister Operations
+ *
+ * Maps AgentVault's Candid service interface to SmallChat ToolClass hierarchy.
+ * Each canister operation becomes a SmallChat tool with a selector, enabling
+ * intent-based dispatch, superclass fallback, and compact representation.
+ *
+ * Hierarchy:
+ *   BaseTools
+ *   ├── CanisterLifecycleTools  (bootstrap, freeze, unlock, revive)
+ *   ├── WalletTools             (register, deregister, list, update status)
+ *   │   └── TransactionTools    (queue, sign, complete, fail, retry, schedule)
+ *   ├── SecretTools             (store, get, list, delete encrypted secrets)
+ *   └── VetKeysTools            (init shares, derive key, verify sig)
+ */
+export interface ToolParameterSchema {
+    type: 'string' | 'number' | 'boolean' | 'object' | 'array';
+    description?: string;
+    required?: boolean;
+    properties?: Record<string, ToolParameterSchema>;
+    items?: ToolParameterSchema;
+    enum?: string[];
+}
+export interface SmallChatToolDefinition {
+    selector: string;
+    candidMethod: string;
+    description: string;
+    category: ToolCategory;
+    riskLevel: RiskLevel;
+    parameters: Record<string, ToolParameterSchema>;
+    requiresMfa?: boolean;
+}
+export type ToolCategory = 'lifecycle' | 'wallet' | 'transaction' | 'secret' | 'vetkeys' | 'query';
+export type RiskLevel = 'low' | 'medium' | 'high' | 'critical';
+export interface ToolClass {
+    name: string;
+    superclass?: string;
+    tools: SmallChatToolDefinition[];
+}
+export declare const BASE_TOOLS: ToolClass;
+export declare const CANISTER_LIFECYCLE_TOOLS: ToolClass;
+export declare const WALLET_TOOLS: ToolClass;
+export declare const TRANSACTION_TOOLS: ToolClass;
+export declare const SECRET_TOOLS: ToolClass;
+export declare const VETKEYS_TOOLS: ToolClass;
+export declare const ALL_TOOL_CLASSES: ToolClass[];
+/**
+ * Flatten all tool definitions from all classes into a single map
+ * keyed by selector string.
+ */
+export declare function getAllToolDefinitions(): Map<string, SmallChatToolDefinition>;
+/**
+ * Get the superclass chain for a given ToolClass name.
+ * Returns array from most specific to least specific (BaseTools last).
+ */
+export declare function getSuperclassChain(className: string): string[];
+/**
+ * Find the ToolClass that owns a given selector.
+ */
+export declare function findToolClassForSelector(selector: string): ToolClass | undefined;
+/**
+ * Get all tools that require MFA confirmation.
+ */
+export declare function getMfaRequiredTools(): SmallChatToolDefinition[];
+/**
+ * Get all tools at or above a given risk level.
+ */
+export declare function getToolsByMinRisk(minRisk: RiskLevel): SmallChatToolDefinition[];
+//# sourceMappingURL=smallchat-tools.d.ts.map

package/dist/src/orchestration/smallchat-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smallchat-tools.d.ts","sourceRoot":"","sources":["../../../src/orchestration/smallchat-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC3D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACjD,KAAK,CAAC,EAAE,mBAAmB,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,YAAY,CAAC;IACvB,SAAS,EAAE,SAAS,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAChD,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,MAAM,YAAY,GACpB,WAAW,GACX,QAAQ,GACR,aAAa,GACb,QAAQ,GACR,SAAS,GACT,OAAO,CAAC;AAEZ,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAM/D,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,uBAAuB,EAAE,CAAC;CAClC;AAED,eAAO,MAAM,UAAU,EAAE,SAoCxB,CAAC;AAEF,eAAO,MAAM,wBAAwB,EAAE,SA4EtC,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,SAiE1B,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,SA0H/B,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,SAqD1B,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,SAsE3B,CAAC;AAMF,eAAO,MAAM,gBAAgB,EAAE,SAAS,EAOvC,CAAC;AAEF;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,GAAG,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAQ5E;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAQ9D;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAEhF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,uBAAuB,EAAE,CAE/D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,SAAS,GAAG,uBAAuB,EAAE,CAM/E"}