daycare-cli 0.0.0-canary.f57680e

package/dist/engine/apps/appRuleToolBuild.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appRuleToolBuild.spec.js","sourceRoot":"","sources":["../../../sources/engine/apps/appRuleToolBuild.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE1D,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzD,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,IAAI,YAAoB,CAAC;IAEzB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,YAAY,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAClE,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAC3B;YACE,KAAK;YACL,uBAAuB;YACvB,wBAAwB;YACxB,oCAAoC;YACpC,KAAK;YACL,EAAE;YACF,kBAAkB;YAClB,EAAE;YACF,wCAAwC;SACzC,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,EACnC;YACE,kBAAkB;YAClB,EAAE;YACF,8BAA8B;YAC9B,EAAE;YACF,UAAU;YACV,EAAE;YACF,WAAW;YACX,cAAc;YACd,EAAE;YACF,UAAU;YACV,gBAAgB;SACjB,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,EAAE;aAClB,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,EAAE,SAAS,CAAC;aAClD,iBAAiB,CAChB,qBAAqB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,qCAAqC,EAAE,CAAC,CACxF,CAAC;QAEJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC/B;YACE,MAAM,EAAE,iBAAiB;YACzB,MAAM,EAAE,WAAW;YACnB,IAAI,EAAE,gBAAgB;SACvB,EACD,OAAO,EACP,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CACpC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC/E,MAAM,CAAC,UAAU,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAClD,IAAI,EAAE,oBAAoB;YAC1B,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC;gBACjC,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,sCAAsC,CAAC,CAAC;aAC/E,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAChH,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,EAAE;aAClB,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,EAAE,SAAS,CAAC;aAClD,iBAAiB,CAAC,qBAAqB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAEhE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CACpC;YACE,MAAM,EAAE,iBAAiB;YACzB,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,0BAA0B;SACjC,EACD,OAAO,EACP,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CACpC,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC7E,MAAM,CAAC,UAAU,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAE5C,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,iBAAiB,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAChH,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,YAAoB;IACxC,OAAO;QACL,iBAAiB,EAAE,IAA4D;QAC/E,SAAS,EAAE,IAAoD;QAC/D,IAAI,EAAE,IAA+C;QACrD,MAAM,EAAE,OAAoD;QAC5D,SAAS,EAAE,IAAI;QACf,WAAW,EAAE;YACX,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,CAAC,YAAY,CAAC;YACzB,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SACd;QACD,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAA8C;QACpE,MAAM,EAAE,MAAM;QACd,cAAc,EAAE,EAAE;QAClB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,YAAY,EAAE,EAAoD;QACnG,UAAU,EAAE,IAAqD;KAClE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,eAAuB;IACpD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACvD,OAAO,sBAAsB,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB;IACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAK,KAA4B,CAAC,IAAI,KAAK,MAAM,CAAC;SAC/G,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAE,KAA2B,CAAC,IAAI,IAAI,EAAE,CAAC;SACvD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAA2C;IACxE,OAAO;QACL,WAAW,EAAE;YACX,IAAI,EAAE,YAAqB;YAC3B,UAAU,EAAE,iBAAiB;YAC7B,QAAQ,EAAE,oBAAoB;YAC9B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,sCAAsC,EAAE,CAAC;YAChG,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE;YACrC,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB;QACD,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,sCAAsC,EAAE;KAC5E,CAAC;AACJ,CAAC"}

package/dist/engine/apps/appToolBuild.d.ts

@@ -0,0 +1,8 @@
+import type { ToolDefinition } from "@/types";
+import type { AppDescriptor } from "./appTypes.js";
+/**
+ * Builds the per-app `app_<name>` tool definition.
+ * Expects: descriptor is a validated discovered app.
+ */
+export declare function appToolBuild(app: AppDescriptor): ToolDefinition;
+//# sourceMappingURL=appToolBuild.d.ts.map

package/dist/engine/apps/appToolBuild.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appToolBuild.d.ts","sourceRoot":"","sources":["../../../sources/engine/apps/appToolBuild.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAsB,MAAM,SAAS,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AA+BnD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,aAAa,GAAG,cAAc,CAiD/D"}

package/dist/engine/apps/appToolBuild.js

@@ -0,0 +1,72 @@
+import { Type } from "@sinclair/typebox";
+import { appExecute } from "./appExecute.js";
+import { appToolNameFormat } from "./appToolNameFormat.js";
+const schema = Type.Object({
+    prompt: Type.String({ minLength: 1 }),
+    wait: Type.Optional(Type.Boolean())
+}, { additionalProperties: false });
+const appToolResultSchema = Type.Object({
+    summary: Type.String(),
+    appId: Type.String(),
+    agentId: Type.String(),
+    waitForResponse: Type.Boolean()
+}, { additionalProperties: false });
+const appToolReturns = {
+    schema: appToolResultSchema,
+    toLLMText: (result) => result.summary
+};
+/**
+ * Builds the per-app `app_<name>` tool definition.
+ * Expects: descriptor is a validated discovered app.
+ */
+export function appToolBuild(app) {
+    const toolName = appToolNameFormat(app.id);
+    return {
+        tool: {
+            name: toolName,
+            description: app.manifest.description,
+            parameters: schema
+        },
+        returns: appToolReturns,
+        execute: async (args, context, toolCall) => {
+            const payload = args;
+            const prompt = payload.prompt.trim();
+            const waitForResponse = payload.wait ?? false;
+            if (!prompt) {
+                throw new Error("App prompt is required.");
+            }
+            const result = await appExecute({
+                app,
+                prompt,
+                context,
+                waitForResponse
+            });
+            const responseText = result.responseText;
+            const text = waitForResponse
+                ? (responseText && responseText.trim().length > 0
+                    ? `${responseText}\n\nApp agent id: ${result.agentId}`
+                    : `App "${app.manifest.title}" completed without a text response. App agent id: ${result.agentId}`)
+                : `App "${app.manifest.title}" started asynchronously. App agent id: ${result.agentId}`;
+            const summary = text;
+            const toolMessage = {
+                role: "toolResult",
+                toolCallId: toolCall.id,
+                toolName: toolCall.name,
+                content: [{ type: "text", text }],
+                details: { agentId: result.agentId, appId: app.id, waitForResponse },
+                isError: false,
+                timestamp: Date.now()
+            };
+            return {
+                toolMessage,
+                typedResult: {
+                    summary,
+                    appId: app.id,
+                    agentId: result.agentId,
+                    waitForResponse
+                }
+            };
+        }
+    };
+}
+//# sourceMappingURL=appToolBuild.js.map

package/dist/engine/apps/appToolBuild.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appToolBuild.js","sourceRoot":"","sources":["../../../sources/engine/apps/appToolBuild.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AAItD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CACxB;IACE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACrC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;CACpC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAIF,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CACrC;IACE,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE;IACtB,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE;IACpB,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE;IACtB,eAAe,EAAE,IAAI,CAAC,OAAO,EAAE;CAChC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAIF,MAAM,cAAc,GAAsC;IACxD,MAAM,EAAE,mBAAmB;IAC3B,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO;CACtC,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,GAAkB;IAC7C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3C,OAAO;QACL,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,WAAW;YACrC,UAAU,EAAE,MAAM;SACnB;QACD,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;YACzC,MAAM,OAAO,GAAG,IAAwB,CAAC;YACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM,eAAe,GAAG,OAAO,CAAC,IAAI,IAAI,KAAK,CAAC;YAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;gBAC9B,GAAG;gBACH,MAAM;gBACN,OAAO;gBACP,eAAe;aAChB,CAAC,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;YACzC,MAAM,IAAI,GAAG,eAAe;gBAC1B,CAAC,CAAC,CAAC,YAAY,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;oBAC/C,CAAC,CAAC,GAAG,YAAY,qBAAqB,MAAM,CAAC,OAAO,EAAE;oBACtD,CAAC,CAAC,QAAQ,GAAG,CAAC,QAAQ,CAAC,KAAK,sDAAsD,MAAM,CAAC,OAAO,EAAE,CAAC;gBACrG,CAAC,CAAC,QAAQ,GAAG,CAAC,QAAQ,CAAC,KAAK,2CAA2C,MAAM,CAAC,OAAO,EAAE,CAAC;YAC1F,MAAM,OAAO,GAAG,IAAI,CAAC;YACrB,MAAM,WAAW,GAAsB;gBACrC,IAAI,EAAE,YAAY;gBAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;gBACjC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,eAAe,EAAE;gBACpE,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;YACF,OAAO;gBACL,WAAW;gBACX,WAAW,EAAE;oBACX,OAAO;oBACP,KAAK,EAAE,GAAG,CAAC,EAAE;oBACb,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,eAAe;iBAChB;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/engine/apps/appToolBuild.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=appToolBuild.spec.d.ts.map

package/dist/engine/apps/appToolBuild.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appToolBuild.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/apps/appToolBuild.spec.ts"],"names":[],"mappings":""}

package/dist/engine/apps/appToolBuild.spec.js

@@ -0,0 +1,29 @@
+import { describe, expect, it } from "vitest";
+import { appToolBuild } from "./appToolBuild.js";
+describe("appToolBuild", () => {
+    it("formats tool metadata from app descriptor", () => {
+        const app = {
+            id: "github-reviewer",
+            path: "/workspace/apps/github-reviewer",
+            manifest: {
+                name: "github-reviewer",
+                title: "GitHub Reviewer",
+                description: "Reviews pull requests",
+                systemPrompt: "You are a focused PR review assistant."
+            },
+            permissions: {
+                sourceIntent: "Review pull requests safely.",
+                rules: { allow: [], deny: [] }
+            }
+        };
+        const definition = appToolBuild(app);
+        expect(definition.tool.name).toBe("app_github_reviewer");
+        expect(definition.tool.description).toBe("Reviews pull requests");
+        expect(definition.tool.parameters.type).toBe("object");
+        expect(definition.tool.parameters.required).toEqual(["prompt"]);
+        expect(definition.tool.parameters.properties).toMatchObject({
+            wait: { type: "boolean" }
+        });
+    });
+});
+//# sourceMappingURL=appToolBuild.spec.js.map

package/dist/engine/apps/appToolBuild.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appToolBuild.spec.js","sourceRoot":"","sources":["../../../sources/engine/apps/appToolBuild.spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAG9C,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,GAAG,GAAkB;YACzB,EAAE,EAAE,iBAAiB;YACrB,IAAI,EAAE,iCAAiC;YACvC,QAAQ,EAAE;gBACR,IAAI,EAAE,iBAAiB;gBACvB,KAAK,EAAE,iBAAiB;gBACxB,WAAW,EAAE,uBAAuB;gBACpC,YAAY,EAAE,wCAAwC;aACvD;YACD,WAAW,EAAE;gBACX,YAAY,EAAE,8BAA8B;gBAC5C,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;aAC/B;SACF,CAAC;QAEF,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACzD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAClE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC;YAC1D,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SAC1B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/apps/appToolExecutorBuild.d.ts

@@ -0,0 +1,32 @@
+import type { Tool, ToolCall } from "@mariozechner/pi-ai";
+import type { Logger } from "pino";
+import type { ProviderSettings } from "../../settings.js";
+import type { ToolExecutionContext, ToolExecutionResult } from "@/types";
+import type { ToolResolverApi } from "../modules/toolResolver.js";
+import type { InferenceRouter } from "../modules/inference/router.js";
+import type { AppRuleSet } from "./appTypes.js";
+type AppToolExecutorBuildInput = {
+    appId: string;
+    appName: string;
+    appSystemPrompt: string;
+    reviewerEnabled: boolean;
+    rlmEnabled: boolean;
+    sourceIntent: string;
+    rules: AppRuleSet;
+    inferenceRouter: InferenceRouter;
+    toolResolver: ToolResolverApi;
+    providersOverride?: ProviderSettings[];
+    allowedToolNames?: string[];
+    logger?: Logger;
+};
+type AppToolExecutor = {
+    listTools: () => Tool[];
+    execute: (toolCall: ToolCall, context: ToolExecutionContext) => Promise<ToolExecutionResult>;
+};
+/**
+ * Wraps a tool resolver with app-review middleware for each tool call.
+ * Expects: input.toolResolver is the runtime resolver used by agent execution.
+ */
+export declare function appToolExecutorBuild(input: AppToolExecutorBuildInput): AppToolExecutor;
+export {};
+//# sourceMappingURL=appToolExecutorBuild.d.ts.map

package/dist/engine/apps/appToolExecutorBuild.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appToolExecutorBuild.d.ts","sourceRoot":"","sources":["../../../sources/engine/apps/appToolExecutorBuild.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAqB,MAAM,qBAAqB,CAAC;AAC7E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAG1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAElE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAEtE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAGhD,KAAK,yBAAyB,GAAG;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,UAAU,CAAC;IAClB,eAAe,EAAE,eAAe,CAAC;IACjC,YAAY,EAAE,eAAe,CAAC;IAC9B,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACvC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,KAAK,eAAe,GAAG;IACrB,SAAS,EAAE,MAAM,IAAI,EAAE,CAAC;IACxB,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC9F,CAAC;AAIF;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,yBAAyB,GAAG,eAAe,CAmEtF"}

package/dist/engine/apps/appToolExecutorBuild.js

@@ -0,0 +1,64 @@
+import { getLogger } from "../../log.js";
+import { toolExecutionResultOutcome } from "../modules/tools/toolReturnOutcome.js";
+import { RLM_TOOL_NAME } from "../modules/rlm/rlmConstants.js";
+import { appToolReview } from "./appToolReview.js";
+const DEFAULT_ALLOWED_TOOLS = ["read", "write", "edit", "exec", "request_permission", RLM_TOOL_NAME];
+/**
+ * Wraps a tool resolver with app-review middleware for each tool call.
+ * Expects: input.toolResolver is the runtime resolver used by agent execution.
+ */
+export function appToolExecutorBuild(input) {
+    const appLogger = input.logger ?? getLogger("engine.apps.executor");
+    const allowedToolNames = new Set(input.allowedToolNames ?? DEFAULT_ALLOWED_TOOLS);
+    return {
+        listTools: () => input.toolResolver.listTools().filter((tool) => allowedToolNames.has(tool.name)),
+        execute: async (toolCall, context) => {
+            if (!allowedToolNames.has(toolCall.name)) {
+                appLogger.warn({ appId: input.appId, tool: toolCall.name }, "deny: App tool denied because tool is outside the app allowlist");
+                return toolExecutionResultOutcome(appToolErrorBuild(toolCall, `Tool "${toolCall.name}" is not available in app sandbox.`));
+            }
+            const availableTools = input.toolResolver
+                .listTools()
+                .filter((tool) => allowedToolNames.has(tool.name))
+                .map((tool) => ({
+                name: tool.name,
+                description: tool.description,
+                parameters: tool.parameters
+            }));
+            if (!input.reviewerEnabled) {
+                appLogger.info({ appId: input.appId, tool: toolCall.name, allowed: true }, "review: App tool review disabled by security config");
+                return input.toolResolver.execute(toolCall, context);
+            }
+            const decision = await appToolReview({
+                appId: input.appId,
+                appName: input.appName,
+                appSystemPrompt: input.appSystemPrompt,
+                rlmEnabled: input.rlmEnabled,
+                sourceIntent: input.sourceIntent,
+                toolCall,
+                rules: input.rules,
+                availableTools,
+                inferenceRouter: input.inferenceRouter,
+                providersOverride: input.providersOverride
+            });
+            if (!decision.allowed) {
+                const reason = decision.reason ?? "Denied by app review rules.";
+                appLogger.info({ appId: input.appId, tool: toolCall.name, allowed: false, reason }, "review: App tool call denied");
+                return toolExecutionResultOutcome(appToolErrorBuild(toolCall, `App review denied this tool call: ${reason}`));
+            }
+            appLogger.info({ appId: input.appId, tool: toolCall.name, allowed: true }, "review: App tool call allowed");
+            return input.toolResolver.execute(toolCall, context);
+        }
+    };
+}
+function appToolErrorBuild(toolCall, text) {
+    return {
+        role: "toolResult",
+        toolCallId: toolCall.id,
+        toolName: toolCall.name,
+        content: [{ type: "text", text }],
+        isError: true,
+        timestamp: Date.now()
+    };
+}
+//# sourceMappingURL=appToolExecutorBuild.js.map

package/dist/engine/apps/appToolExecutorBuild.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appToolExecutorBuild.js","sourceRoot":"","sources":["../../../sources/engine/apps/appToolExecutorBuild.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AAEnF,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAE/D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAsBnD,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,aAAa,CAAC,CAAC;AAErG;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAgC;IACnE,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACpE,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,qBAAqB,CAAC,CAAC;IAElF,OAAO;QACL,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjG,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;YACnC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzC,SAAS,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,EAC3C,iEAAiE,CAClE,CAAC;gBACF,OAAO,0BAA0B,CAC/B,iBAAiB,CACf,QAAQ,EACR,SAAS,QAAQ,CAAC,IAAI,oCAAoC,CAC3D,CACF,CAAC;YACJ,CAAC;YAED,MAAM,cAAc,GAAG,KAAK,CAAC,YAAY;iBACtC,SAAS,EAAE;iBACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACjD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACd,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;aAC5B,CAAC,CAAC,CAAC;YAEN,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;gBAC3B,SAAS,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAC1D,qDAAqD,CACtD,CAAC;gBACF,OAAO,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACvD,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC;gBACnC,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,QAAQ;gBACR,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,cAAc;gBACd,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;aAC3C,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACtB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,6BAA6B,CAAC;gBAChE,SAAS,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EACnE,8BAA8B,CAC/B,CAAC;gBACF,OAAO,0BAA0B,CAC/B,iBAAiB,CAAC,QAAQ,EAAE,qCAAqC,MAAM,EAAE,CAAC,CAC3E,CAAC;YACJ,CAAC;YAED,SAAS,CAAC,IAAI,CACZ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAC1D,+BAA+B,CAChC,CAAC;YACF,OAAO,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAkB,EAAE,IAAY;IACzD,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;QACvB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;AACJ,CAAC"}

package/dist/engine/apps/appToolExecutorBuild.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=appToolExecutorBuild.spec.d.ts.map

package/dist/engine/apps/appToolExecutorBuild.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appToolExecutorBuild.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/apps/appToolExecutorBuild.spec.ts"],"names":[],"mappings":""}

package/dist/engine/apps/appToolExecutorBuild.spec.js

@@ -0,0 +1,227 @@
+import { Type } from "@sinclair/typebox";
+import { describe, expect, it, vi } from "vitest";
+import { appToolExecutorBuild } from "./appToolExecutorBuild.js";
+describe("appToolExecutorBuild", () => {
+    it("passes through allowed calls after ALLOW review", async () => {
+        const execute = vi.fn(async () => toolResultBuild(false, "read ok"));
+        const resolver = resolverBuild(execute);
+        const executor = appToolExecutorBuild({
+            appId: "github-reviewer",
+            appName: "GitHub Reviewer",
+            appSystemPrompt: "You are a focused review assistant.",
+            reviewerEnabled: true,
+            rlmEnabled: false,
+            sourceIntent: "Review pull requests safely.",
+            rules: { allow: [], deny: [] },
+            inferenceRouter: inferenceRouterBuild("ALLOW"),
+            toolResolver: resolver
+        });
+        const result = await executor.execute({ id: "t1", name: "read", type: "toolCall", arguments: { path: "/tmp/a.txt" } }, contextBuild());
+        expect(execute).toHaveBeenCalledTimes(1);
+        expect(result.toolMessage.isError).toBe(false);
+    });
+    it("returns tool error when review denies", async () => {
+        const execute = vi.fn(async () => toolResultBuild(false, "should not run"));
+        const resolver = resolverBuild(execute);
+        const executor = appToolExecutorBuild({
+            appId: "github-reviewer",
+            appName: "GitHub Reviewer",
+            appSystemPrompt: "You are a focused review assistant.",
+            reviewerEnabled: true,
+            rlmEnabled: false,
+            sourceIntent: "Review pull requests safely.",
+            rules: { allow: [], deny: [] },
+            inferenceRouter: inferenceRouterBuild("DENY: blocked by rules"),
+            toolResolver: resolver
+        });
+        const result = await executor.execute({ id: "t1", name: "exec", type: "toolCall", arguments: { command: "rm -rf ." } }, contextBuild());
+        expect(execute).not.toHaveBeenCalled();
+        expect(result.toolMessage.isError).toBe(true);
+        expect(contentText(result.toolMessage)).toContain("blocked by rules");
+    });
+    it("returns tool error for tools outside the app allowlist", async () => {
+        const execute = vi.fn(async () => toolResultBuild(false, "should not run"));
+        const resolver = resolverBuild(execute);
+        const executor = appToolExecutorBuild({
+            appId: "github-reviewer",
+            appName: "GitHub Reviewer",
+            appSystemPrompt: "You are a focused review assistant.",
+            reviewerEnabled: true,
+            rlmEnabled: false,
+            sourceIntent: "Review pull requests safely.",
+            rules: { allow: [], deny: [] },
+            inferenceRouter: inferenceRouterBuild("ALLOW"),
+            toolResolver: resolver
+        });
+        const result = await executor.execute({ id: "t1", name: "cron", type: "toolCall", arguments: { action: "list" } }, contextBuild());
+        expect(execute).not.toHaveBeenCalled();
+        expect(result.toolMessage.isError).toBe(true);
+        expect(contentText(result.toolMessage)).toContain("not available in app sandbox");
+    });
+    it("includes run_python in app allowlist when resolver exposes it", () => {
+        const execute = vi.fn(async () => toolResultBuild(false, "ok"));
+        const resolver = resolverBuild(execute);
+        const executor = appToolExecutorBuild({
+            appId: "github-reviewer",
+            appName: "GitHub Reviewer",
+            appSystemPrompt: "You are a focused review assistant.",
+            reviewerEnabled: true,
+            rlmEnabled: false,
+            sourceIntent: "Review pull requests safely.",
+            rules: { allow: [], deny: [] },
+            inferenceRouter: inferenceRouterBuild("ALLOW"),
+            toolResolver: resolver
+        });
+        expect(executor.listTools().map((tool) => tool.name)).toContain("run_python");
+    });
+    it("includes request_permission in app allowlist when resolver exposes it", () => {
+        const execute = vi.fn(async () => toolResultBuild(false, "ok"));
+        const resolver = resolverBuild(execute);
+        const executor = appToolExecutorBuild({
+            appId: "github-reviewer",
+            appName: "GitHub Reviewer",
+            appSystemPrompt: "You are a focused review assistant.",
+            reviewerEnabled: true,
+            rlmEnabled: false,
+            sourceIntent: "Review pull requests safely.",
+            rules: { allow: [], deny: [] },
+            inferenceRouter: inferenceRouterBuild("ALLOW"),
+            toolResolver: resolver
+        });
+        expect(executor.listTools().map((tool) => tool.name)).toContain("request_permission");
+    });
+    it("bypasses review model when reviewer is disabled by config", async () => {
+        const execute = vi.fn(async () => toolResultBuild(false, "read ok"));
+        const resolver = resolverBuild(execute);
+        const complete = vi.fn(async () => ({
+            providerId: "provider",
+            modelId: "model",
+            message: {
+                role: "assistant",
+                content: [{ type: "text", text: "DENY: should not be used" }],
+                api: "openai-responses",
+                provider: "provider",
+                model: "model",
+                usage: {
+                    input: 0,
+                    output: 0,
+                    cacheRead: 0,
+                    cacheWrite: 0,
+                    totalTokens: 0,
+                    cost: {
+                        input: 0,
+                        output: 0,
+                        cacheRead: 0,
+                        cacheWrite: 0,
+                        total: 0
+                    }
+                },
+                stopReason: "stop",
+                timestamp: Date.now()
+            }
+        }));
+        const inferenceRouter = { complete };
+        const executor = appToolExecutorBuild({
+            appId: "github-reviewer",
+            appName: "GitHub Reviewer",
+            appSystemPrompt: "You are a focused review assistant.",
+            reviewerEnabled: false,
+            rlmEnabled: false,
+            sourceIntent: "Review pull requests safely.",
+            rules: { allow: [], deny: [] },
+            inferenceRouter,
+            toolResolver: resolver
+        });
+        const result = await executor.execute({ id: "t1", name: "read", type: "toolCall", arguments: { path: "/tmp/a.txt" } }, contextBuild());
+        expect(complete).not.toHaveBeenCalled();
+        expect(execute).toHaveBeenCalledTimes(1);
+        expect(result.toolMessage.isError).toBe(false);
+    });
+});
+function inferenceRouterBuild(text) {
+    return {
+        complete: vi.fn(async () => ({
+            providerId: "provider",
+            modelId: "model",
+            message: {
+                role: "assistant",
+                content: [{ type: "text", text }],
+                api: "openai-responses",
+                provider: "provider",
+                model: "model",
+                usage: {
+                    input: 0,
+                    output: 0,
+                    cacheRead: 0,
+                    cacheWrite: 0,
+                    totalTokens: 0,
+                    cost: {
+                        input: 0,
+                        output: 0,
+                        cacheRead: 0,
+                        cacheWrite: 0,
+                        total: 0
+                    }
+                },
+                stopReason: "stop",
+                timestamp: Date.now()
+            }
+        }))
+    };
+}
+function resolverBuild(execute) {
+    const schema = Type.Object({}, { additionalProperties: true });
+    return {
+        listTools: () => [
+            { name: "read", description: "read", parameters: schema },
+            { name: "write", description: "write", parameters: schema },
+            { name: "edit", description: "edit", parameters: schema },
+            { name: "exec", description: "exec", parameters: schema },
+            { name: "run_python", description: "run_python", parameters: schema },
+            { name: "request_permission", description: "request_permission", parameters: schema },
+            { name: "cron", description: "cron", parameters: schema }
+        ],
+        execute: vi.fn(async () => execute())
+    };
+}
+function toolResultBuild(isError, text) {
+    return {
+        toolMessage: {
+            role: "toolResult",
+            toolCallId: "t1",
+            toolName: "read",
+            content: [{ type: "text", text }],
+            isError,
+            timestamp: Date.now()
+        },
+        typedResult: { text }
+    };
+}
+function contextBuild() {
+    return {
+        connectorRegistry: null,
+        fileStore: null,
+        auth: null,
+        logger: console,
+        assistant: null,
+        permissions: {
+            workingDir: "/workspace",
+            writeDirs: ["/workspace"],
+            readDirs: ["/workspace"],
+            network: false,
+            events: false
+        },
+        agent: { id: "agent-1" },
+        source: "test",
+        messageContext: {},
+        agentSystem: null,
+        heartbeats: null
+    };
+}
+function contentText(message) {
+    return message.content
+        .filter((entry) => entry.type === "text")
+        .map((entry) => entry.text)
+        .join("\n");
+}
+//# sourceMappingURL=appToolExecutorBuild.spec.js.map

package/dist/engine/apps/appToolExecutorBuild.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appToolExecutorBuild.spec.js","sourceRoot":"","sources":["../../../sources/engine/apps/appToolExecutorBuild.spec.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAIlD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAEjE,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;YACpC,KAAK,EAAE,iBAAiB;YACxB,OAAO,EAAE,iBAAiB;YAC1B,eAAe,EAAE,qCAAqC;YACtD,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,KAAK;YACjB,YAAY,EAAE,8BAA8B;YAC5C,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YAC9B,eAAe,EAAE,oBAAoB,CAAC,OAAO,CAAC;YAC9C,YAAY,EAAE,QAAQ;SACvB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CACnC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAC/E,YAAY,EAAE,CACf,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;YACpC,KAAK,EAAE,iBAAiB;YACxB,OAAO,EAAE,iBAAiB;YAC1B,eAAe,EAAE,qCAAqC;YACtD,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,KAAK;YACjB,YAAY,EAAE,8BAA8B;YAC5C,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YAC9B,eAAe,EAAE,oBAAoB,CAAC,wBAAwB,CAAC;YAC/D,YAAY,EAAE,QAAQ;SACvB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CACnC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAChF,YAAY,EAAE,CACf,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;YACpC,KAAK,EAAE,iBAAiB;YACxB,OAAO,EAAE,iBAAiB;YAC1B,eAAe,EAAE,qCAAqC;YACtD,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,KAAK;YACjB,YAAY,EAAE,8BAA8B;YAC5C,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YAC9B,eAAe,EAAE,oBAAoB,CAAC,OAAO,CAAC;YAC9C,YAAY,EAAE,QAAQ;SACvB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CACnC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAC3E,YAAY,EAAE,CACf,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;YACpC,KAAK,EAAE,iBAAiB;YACxB,OAAO,EAAE,iBAAiB;YAC1B,eAAe,EAAE,qCAAqC;YACtD,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,KAAK;YACjB,YAAY,EAAE,8BAA8B;YAC5C,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YAC9B,eAAe,EAAE,oBAAoB,CAAC,OAAO,CAAC;YAC9C,YAAY,EAAE,QAAQ;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,oBAAoB,CAAC;YACpC,KAAK,EAAE,iBAAiB;YACxB,OAAO,EAAE,iBAAiB;YAC1B,eAAe,EAAE,qCAAqC;YACtD,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,KAAK;YACjB,YAAY,EAAE,8BAA8B;YAC5C,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YAC9B,eAAe,EAAE,oBAAoB,CAAC,OAAO,CAAC;YAC9C,YAAY,EAAE,QAAQ;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAClC,UAAU,EAAE,UAAU;YACtB,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE;gBACP,IAAI,EAAE,WAAoB;gBAC1B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;gBACtE,GAAG,EAAE,kBAA2B;gBAChC,QAAQ,EAAE,UAAU;gBACpB,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE;oBACL,KAAK,EAAE,CAAC;oBACR,MAAM,EAAE,CAAC;oBACT,SAAS,EAAE,CAAC;oBACZ,UAAU,EAAE,CAAC;oBACb,WAAW,EAAE,CAAC;oBACd,IAAI,EAAE;wBACJ,KAAK,EAAE,CAAC;wBACR,MAAM,EAAE,CAAC;wBACT,SAAS,EAAE,CAAC;wBACZ,UAAU,EAAE,CAAC;wBACb,KAAK,EAAE,CAAC;qBACT;iBACF;gBACD,UAAU,EAAE,MAAe;gBAC3B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB;SACF,CAAC,CAAC,CAAC;QACJ,MAAM,eAAe,GAAG,EAAE,QAAQ,EAAgC,CAAC;QACnE,MAAM,QAAQ,GAAG,oBAAoB,CAAC;YACpC,KAAK,EAAE,iBAAiB;YACxB,OAAO,EAAE,iBAAiB;YAC1B,eAAe,EAAE,qCAAqC;YACtD,eAAe,EAAE,KAAK;YACtB,UAAU,EAAE,KAAK;YACjB,YAAY,EAAE,8BAA8B;YAC5C,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YAC9B,eAAe;YACf,YAAY,EAAE,QAAQ;SACvB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CACnC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAC/E,YAAY,EAAE,CACf,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,SAAS,oBAAoB,CAAC,IAAY;IACxC,OAAO;QACL,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC3B,UAAU,EAAE,UAAU;YACtB,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE;gBACP,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;gBACjC,GAAG,EAAE,kBAAkB;gBACvB,QAAQ,EAAE,UAAU;gBACpB,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE;oBACL,KAAK,EAAE,CAAC;oBACR,MAAM,EAAE,CAAC;oBACT,SAAS,EAAE,CAAC;oBACZ,UAAU,EAAE,CAAC;oBACb,WAAW,EAAE,CAAC;oBACd,IAAI,EAAE;wBACJ,KAAK,EAAE,CAAC;wBACR,MAAM,EAAE,CAAC;wBACT,SAAS,EAAE,CAAC;wBACZ,UAAU,EAAE,CAAC;wBACb,KAAK,EAAE,CAAC;qBACT;iBACF;gBACD,UAAU,EAAE,MAAM;gBAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB;SACF,CAAC,CAAC;KAC0B,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,OAA2C;IAChE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,OAAO;QACL,SAAS,EAAE,GAAW,EAAE,CAAC;YACvB,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE;YACzD,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE;YAC3D,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE;YACzD,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE;YACzD,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE;YACrE,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,EAAE;YACrF,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE;SAC1D;QACD,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB,EAAE,IAAY;IACrD,OAAO;QACL,WAAW,EAAE;YACX,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACjC,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB;QACD,WAAW,EAAE,EAAE,IAAI,EAAE;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,OAAO;QACL,iBAAiB,EAAE,IAA4D;QAC/E,SAAS,EAAE,IAAoD;QAC/D,IAAI,EAAE,IAA+C;QACrD,MAAM,EAAE,OAAoD;QAC5D,SAAS,EAAE,IAAI;QACf,WAAW,EAAE;YACX,UAAU,EAAE,YAAY;YACxB,SAAS,EAAE,CAAC,YAAY,CAAC;YACzB,QAAQ,EAAE,CAAC,YAAY,CAAC;YACxB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SACd;QACD,KAAK,EAAE,EAAE,EAAE,EAAE,SAAS,EAA8C;QACpE,MAAM,EAAE,MAAM;QACd,cAAc,EAAE,EAAE;QAClB,WAAW,EAAE,IAAsD;QACnE,UAAU,EAAE,IAAqD;KAClE,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAA0B;IAC7C,OAAO,OAAO,CAAC,OAAO;SACnB,MAAM,CAAC,CAAC,KAAK,EAA2C,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;SACjF,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SAC1B,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/dist/engine/apps/appToolNameFormat.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Formats an app id into its public tool name.
+ * Expects: appId is a validated app manifest name.
+ */
+export declare function appToolNameFormat(appId: string): string;
+//# sourceMappingURL=appToolNameFormat.d.ts.map

package/dist/engine/apps/appToolNameFormat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appToolNameFormat.d.ts","sourceRoot":"","sources":["../../../sources/engine/apps/appToolNameFormat.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEvD"}

package/dist/engine/apps/appToolNameFormat.js

@@ -0,0 +1,8 @@
+/**
+ * Formats an app id into its public tool name.
+ * Expects: appId is a validated app manifest name.
+ */
+export function appToolNameFormat(appId) {
+    return `app_${appId.replace(/-/g, "_")}`;
+}
+//# sourceMappingURL=appToolNameFormat.js.map

package/dist/engine/apps/appToolNameFormat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appToolNameFormat.js","sourceRoot":"","sources":["../../../sources/engine/apps/appToolNameFormat.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;AAC3C,CAAC"}

package/dist/engine/apps/appToolReview.d.ts

@@ -0,0 +1,27 @@
+import type { ToolCall } from "@mariozechner/pi-ai";
+import type { ProviderSettings } from "../../settings.js";
+import type { InferenceRouter } from "../modules/inference/router.js";
+import type { AppReviewDecision, AppRuleSet } from "./appTypes.js";
+type AppToolReviewInput = {
+    appId: string;
+    appName: string;
+    appSystemPrompt: string;
+    rlmEnabled: boolean;
+    sourceIntent: string;
+    toolCall: ToolCall;
+    rules: AppRuleSet;
+    availableTools: Array<{
+        name: string;
+        description: string;
+        parameters: unknown;
+    }>;
+    inferenceRouter: InferenceRouter;
+    providersOverride?: ProviderSettings[];
+};
+/**
+ * Calls the review model and decides whether an app tool call is allowed.
+ * Expects: rules and toolCall were prepared by the app executor.
+ */
+export declare function appToolReview(input: AppToolReviewInput): Promise<AppReviewDecision>;
+export {};
+//# sourceMappingURL=appToolReview.d.ts.map

package/dist/engine/apps/appToolReview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appToolReview.d.ts","sourceRoot":"","sources":["../../../sources/engine/apps/appToolReview.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAGtE,OAAO,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEnE,KAAK,kBAAkB,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,OAAO,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,UAAU,CAAC;IAClB,cAAc,EAAE,KAAK,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC,CAAC;IACH,eAAe,EAAE,eAAe,CAAC;IACjC,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACxC,CAAC;AAEF;;;GAGG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA+BzF"}

package/dist/engine/apps/appToolReview.js

@@ -0,0 +1,53 @@
+import { messageExtractText } from "../messages/messageExtractText.js";
+import { appReviewPromptBuild } from "./appReviewPromptBuild.js";
+/**
+ * Calls the review model and decides whether an app tool call is allowed.
+ * Expects: rules and toolCall were prepared by the app executor.
+ */
+export async function appToolReview(input) {
+    const reviewPrompt = await appReviewPromptBuild({
+        appName: input.appName,
+        appSystemPrompt: input.appSystemPrompt,
+        rlmEnabled: input.rlmEnabled,
+        sourceIntent: input.sourceIntent,
+        toolName: input.toolCall.name,
+        args: input.toolCall.arguments,
+        rules: input.rules,
+        availableTools: input.availableTools
+    });
+    const context = {
+        messages: [
+            {
+                role: "user",
+                content: [{ type: "text", text: reviewPrompt }],
+                timestamp: Date.now()
+            }
+        ]
+    };
+    try {
+        const result = await input.inferenceRouter.complete(context, `app-review:${input.appId}`, {
+            providersOverride: input.providersOverride
+        });
+        const text = messageExtractText(result.message)?.trim() ?? "";
+        return appReviewDecisionParse(text);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return { allowed: false, reason: `Review failed: ${message}` };
+    }
+}
+function appReviewDecisionParse(text) {
+    if (/^ALLOW\b/i.test(text)) {
+        return { allowed: true };
+    }
+    const denyMatch = text.match(/^DENY\s*:\s*(.+)$/is);
+    if (denyMatch) {
+        const reason = denyMatch[1]?.trim();
+        return { allowed: false, reason: reason && reason.length > 0 ? reason : "Denied by review model." };
+    }
+    if (/^DENY\b/i.test(text)) {
+        return { allowed: false, reason: "Denied by review model." };
+    }
+    return { allowed: false, reason: "Review model returned an invalid decision." };
+}
+//# sourceMappingURL=appToolReview.js.map

package/dist/engine/apps/appToolReview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appToolReview.js","sourceRoot":"","sources":["../../../sources/engine/apps/appToolReview.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAoBjE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAyB;IAC3D,MAAM,YAAY,GAAG,MAAM,oBAAoB,CAAC;QAC9C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;QAC7B,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CAAC;IACH,MAAM,OAAO,GAAY;QACvB,QAAQ,EAAE;YACR;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;gBAC/C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB;SACF;KACF,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,KAAK,CAAC,KAAK,EAAE,EAAE;YACxF,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;SAC3C,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC9D,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,OAAO,EAAE,EAAE,CAAC;IACjE,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACpD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACpC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,yBAAyB,EAAE,CAAC;IACtG,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;AAClF,CAAC"}

package/dist/engine/apps/appToolReview.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=appToolReview.spec.d.ts.map

package/dist/engine/apps/appToolReview.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appToolReview.spec.d.ts","sourceRoot":"","sources":["../../../sources/engine/apps/appToolReview.spec.ts"],"names":[],"mappings":""}