dodo-mcp 1.0.0

package/dist/tools/projectTools.js

@@ -0,0 +1,261 @@
+import { z } from 'zod';
+import { defineTool } from './context.js';
+import { DodoError } from '../errors.js';
+import { TRUST_MODE_DESCRIPTIONS } from '../security/policy.js';
+import { accessMode } from '../security/accessMode.js';
+const looseData = z.looseObject({});
+const projectIdInput = z.string().regex(/^prj_[0-9a-hjkmnp-tv-z]{8,64}$/).optional()
+    .describe('Optional owner-registered project ID for read-only federation; omit to use the active workspace');
+export const projectOverviewTool = defineTool({
+    name: 'project_overview',
+    title: 'Project overview',
+    description: 'Bootstrap tool: returns the active workspace root, workspaceId + workspaceEpoch (required by every other tool), trust policy, capabilities, detected manifests/languages, runnable task recipes, a shallow file tree, and a scoped git summary. It also lists owner-registered projects this client may read under the current personal/managed access mode. Pass projectId for a read-only federated overview without switching the active workspace. Never executes project code. Call this first.',
+    input: { projectId: projectIdInput },
+    output: looseData,
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+    requiredScope: 'dodo:read',
+    action: 'read',
+    noWorkspaceContext: true,
+    handler: async (args, ctx) => {
+        const s = ctx.services;
+        if (args.projectId !== undefined) {
+            return await s.federation.overview(args.projectId, ctx.principal, { workspaceId: s.workspaceId, workspaceEpoch: s.epoch });
+        }
+        const data = await s.overview.build({
+            workspaceId: s.workspaceId,
+            epoch: s.epoch,
+            trustMode: ctx.trustMode,
+            modeDescription: TRUST_MODE_DESCRIPTIONS[ctx.trustMode],
+            projectConfig: s.projectConfig,
+            searchBackend: s.search.rgAvailable() ? 'ripgrep' : 'js',
+            semanticAvailable: s.intel.available().ok,
+        });
+        const warnings = [];
+        if (data.projectConfigNote)
+            warnings.push(data.projectConfigNote);
+        let brain;
+        try {
+            brain = s.brain ? { available: true, ...s.brain.status() } : { available: false, status: 'unavailable' };
+        }
+        catch {
+            brain = { available: false, status: 'recovery_required' };
+            warnings.push('Project Brain status needs recovery; use brain_status or brain_rebuild after checking the active workspace.');
+        }
+        let contextEngine;
+        try {
+            const status = s.contextEngine?.status(ctx);
+            contextEngine = status ? { available: true, ...status } : { available: false, status: 'unavailable' };
+        }
+        catch {
+            contextEngine = { available: false, status: 'recovery_required' };
+            warnings.push('Context Engine diagnostics need recovery; retry context_status after checking the active workspace.');
+        }
+        let memory;
+        try {
+            const status = s.memory?.status(ctx);
+            memory = status ? { available: true, ...status } : { available: false, status: 'unavailable' };
+        }
+        catch {
+            memory = { available: false, status: 'recovery_required' };
+            warnings.push('Memory diagnostics need recovery; inspect owner state before creating new proposals.');
+        }
+        let runtime;
+        try {
+            runtime = s.runtime ? s.runtime.diagnostics(ctx) : { available: false, status: 'unavailable' };
+        }
+        catch {
+            runtime = { available: false, status: 'recovery_required' };
+            warnings.push('Runtime Intelligence diagnostics need recovery; retry after checking this workspace and client access.');
+        }
+        let agentRuntime;
+        try {
+            agentRuntime = s.agentRuntime ? s.agentRuntime.diagnostics(ctx) : { available: false, status: 'unavailable' };
+        }
+        catch {
+            agentRuntime = { available: false, status: 'recovery_required' };
+            warnings.push('Advanced Agent Runtime diagnostics need recovery; inspect this caller workspace state.');
+        }
+        const desktop = s.desktop.policy();
+        const personal = accessMode(s.store) === 'personal';
+        const desktopPlatform = process.platform === 'darwin' ? 'macOS 14+' : process.platform === 'win32' ? 'Windows interactive desktop' : process.platform === 'linux' ? 'Linux X11/XWayland session' : process.platform;
+        const federation = s.federation.listAuthorized(ctx.principal);
+        return {
+            data: {
+                ...data,
+                brain,
+                contextEngine,
+                memory,
+                runtime,
+                agentRuntime,
+                accessMode: personal ? 'personal' : 'managed',
+                ai: { available: Boolean(s.installation), profiles: s.installation?.ai.availableProfiles(s.workspaceId, ctx.principal) ?? [], note: personal ? 'Enabled profiles are ready on every owner-registered project. Spawn still requires dodo:exec and every action keeps its live scope, context, path, secret and sandbox checks.' : 'Only currently authorized profiles are listed; spawn requires dodo:exec, project/provider permission and live action policy. Discover subagent_spawn for its schema.' },
+                capabilities: { ...data.capabilities, desktop: { mode: desktop.mode, persistent: desktop.persistent, setupCommand: "dodo desktop setup", permissionCommand: "dodo desktop allow --app <app-id> --mode view|control --yes", rememberCommand: "dodo desktop allow --app <app-id> --mode view|control --persist --yes", platform: desktopPlatform, scope: "dodo:exec" } },
+                federation: {
+                    mode: 'read-only',
+                    projects: federation.projects,
+                    maxProjectsPerSearch: 8,
+                    note: personal ? 'Owner-registered projects allowed by the live OAuth read scope are listed. Pass projectId for read federation; use targetProjectId plus its workspace context for writes or commands.' : 'Only owner-registered projects with live read ACL are listed. Pass projectId for read federation; use targetProjectId plus its workspace context for writes or commands.',
+                },
+            },
+            warnings,
+            truncated: data.treeTruncated || federation.truncated,
+        };
+    },
+});
+export const listFilesTool = defineTool({
+    name: 'list_files',
+    title: 'List files',
+    description: 'Bounded directory tree under a workspace-relative path ("." = root). Pass an owner-registered projectId for read-only federation without switching the active workspace. Depth and entry counts are capped; symlinks are never followed; ignored/secret paths are excluded (includeIgnored only re-adds ordinary ignores, never secrets).',
+    input: {
+        projectId: projectIdInput,
+        path: z.string().max(1024).default('.'),
+        depth: z.number().int().min(1).max(10).optional(),
+        includeIgnored: z.boolean().default(false),
+        maxEntries: z.number().int().min(1).max(2000).optional(),
+    },
+    output: looseData,
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+    requiredScope: 'dodo:read',
+    action: 'read',
+    handler: async (args, ctx) => {
+        const opts = { includeIgnored: args.includeIgnored };
+        if (args.depth !== undefined)
+            opts.depth = args.depth;
+        if (args.maxEntries !== undefined)
+            opts.maxEntries = args.maxEntries;
+        if (args.projectId !== undefined) {
+            const res = ctx.services.federation.listFiles(args.projectId, ctx.principal, args.path, opts);
+            return { data: { tree: res.tree, entryCount: res.entryCount, project: res.project }, truncated: res.truncated };
+        }
+        const res = ctx.services.listService.tree(args.path, opts);
+        return { data: { tree: res.root, entryCount: res.entryCount }, truncated: res.truncated };
+    },
+});
+export const readFilesTool = defineTool({
+    name: 'read_files',
+    title: 'Read files',
+    description: 'Read up to 10 UTF-8 text files (workspace-relative paths), optionally by 1-based line range. Pass an owner-registered projectId for read-only federation without switching the active workspace. Returns content, exact line span, total lines, and the SHA-256 of the WHOLE file\'s raw bytes. A federated hash is evidence only: switch that project into the active workspace and re-read before editing. Binary or non-UTF-8 files return a typed error.',
+    input: {
+        projectId: projectIdInput,
+        files: z
+            .array(z
+            .object({
+            path: z.string().max(1024),
+            startLine: z.number().int().min(1).optional(),
+            endLine: z.number().int().min(1).optional(),
+            numbered: z.boolean().optional().describe('prefix lines with their 1-based number (cat -n style)'),
+        })
+            .strict())
+            .min(1)
+            .max(10),
+    },
+    output: looseData,
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+    requiredScope: 'dodo:read',
+    action: 'read',
+    handler: async (args, ctx) => {
+        if (args.projectId !== undefined) {
+            const res = ctx.services.federation.readFiles(args.projectId, ctx.principal, args.files);
+            return { data: { files: res.files, errors: res.errors, project: res.project }, truncated: res.truncated };
+        }
+        const res = ctx.services.readService.readBatch(args.files);
+        return { data: { files: res.files, errors: res.errors }, truncated: res.truncated };
+    },
+});
+export const searchCodeTool = defineTool({
+    name: 'search_code',
+    title: 'Search code',
+    description: 'Search file contents (grep). Pass projectId for one owner-registered project or projectIds for a bounded concurrent read across up to 8 authorized projects; this never switches the active workspace. mode "literal" (default) or "regex"; caseSensitive; fileGlob to restrict files; context lines; outputMode "content", "files", or "count". Uses ripgrep when installed, otherwise a bounded JS scan. A cursor is supported for one target only.',
+    input: {
+        projectId: projectIdInput,
+        projectIds: z.array(z.string().regex(/^prj_[0-9a-hjkmnp-tv-z]{8,64}$/)).min(1).max(8).optional()
+            .describe('Search up to 8 owner-registered projects concurrently; unavailable authorized projects are reported as partial failures'),
+        query: z.string().min(1).max(512),
+        mode: z.enum(['literal', 'regex']).default('literal'),
+        caseSensitive: z.boolean().default(true),
+        paths: z.array(z.string().max(1024)).max(20).optional(),
+        fileGlob: z.string().min(1).max(256).optional(),
+        includeIgnored: z.boolean().default(false),
+        maxResults: z.number().int().min(1).max(100).default(50),
+        contextLines: z.number().int().min(0).max(10).default(0),
+        contextBefore: z.number().int().min(0).max(10).optional(),
+        contextAfter: z.number().int().min(0).max(10).optional(),
+        outputMode: z.enum(['content', 'files', 'count']).default('content'),
+        cursor: z.string().max(256).optional(),
+    },
+    output: looseData,
+    annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+    requiredScope: 'dodo:read',
+    action: 'read',
+    handler: async (args, ctx) => {
+        if (args.projectId !== undefined && args.projectIds !== undefined) {
+            throw new DodoError('INVALID_INPUT', 'use either projectId or projectIds, not both');
+        }
+        const q = {
+            query: args.query,
+            mode: args.mode,
+            caseSensitive: args.caseSensitive,
+            includeIgnored: args.includeIgnored,
+            maxResults: args.maxResults,
+            contextBefore: args.contextBefore ?? args.contextLines,
+            contextAfter: args.contextAfter ?? args.contextLines,
+            outputMode: args.outputMode,
+        };
+        if (args.paths !== undefined)
+            q.paths = args.paths;
+        if (args.fileGlob !== undefined)
+            q.fileGlob = args.fileGlob;
+        const federatedIds = args.projectIds ?? (args.projectId !== undefined ? [args.projectId] : undefined);
+        if (federatedIds !== undefined) {
+            const federated = await ctx.services.federation.searchMany(federatedIds, ctx.principal, q, args.cursor);
+            if (args.projectIds === undefined && federated.results.length === 1) {
+                const item = federated.results[0];
+                return {
+                    data: {
+                        matches: item.result.matches,
+                        files: item.result.files,
+                        totalMatches: item.result.totalMatches,
+                        backend: item.result.backend,
+                        filesScanned: item.result.filesScanned,
+                        project: item.project,
+                        sources: item.sources,
+                        failures: federated.failures,
+                    },
+                    truncated: federated.truncated,
+                    nextCursor: federated.nextCursor ?? null,
+                };
+            }
+            return {
+                data: {
+                    projects: federated.results.map((item) => ({
+                        project: item.project,
+                        matches: item.result.matches,
+                        files: item.result.files,
+                        totalMatches: item.result.totalMatches,
+                        backend: item.result.backend,
+                        filesScanned: item.result.filesScanned,
+                        sources: item.sources,
+                    })),
+                    failures: federated.failures,
+                    projectCount: federated.results.length,
+                    totalMatches: federated.results.reduce((sum, item) => sum + item.result.totalMatches, 0),
+                },
+                truncated: federated.truncated,
+            };
+        }
+        const c = { principal: ctx.principal.grantId, epoch: ctx.services.epoch };
+        if (args.cursor !== undefined)
+            c.cursor = args.cursor;
+        const res = await ctx.services.search.search(q, c);
+        return {
+            data: { matches: res.matches, files: res.files, totalMatches: res.totalMatches, backend: res.backend, filesScanned: res.filesScanned },
+            truncated: res.truncated,
+            nextCursor: res.nextCursor ?? null,
+        };
+    },
+});
+export function requireOneOf(cond, message) {
+    if (!cond)
+        throw new DodoError('INVALID_INPUT', message);
+}
+//# sourceMappingURL=projectTools.js.map

package/dist/tools/projectTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectTools.js","sourceRoot":"","sources":["../../src/tools/projectTools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAEvD,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AACpC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,QAAQ,EAAE;KACjF,QAAQ,CAAC,iGAAiG,CAAC,CAAC;AAE/G,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAAC;IAC5C,IAAI,EAAE,kBAAkB;IACxB,KAAK,EAAE,kBAAkB;IACzB,WAAW,EACT,seAAse;IACxe,KAAK,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE;IACpC,MAAM,EAAE,SAAS;IACjB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;IACvG,aAAa,EAAE,WAAW;IAC1B,MAAM,EAAE,MAAM;IACd,kBAAkB,EAAE,IAAI;IACxB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;QACvB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7H,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YAClC,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,eAAe,EAAE,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC;YACvD,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;YACxD,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,EAAE;SAC1C,CAAC,CAAC;QACH,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,iBAAiB;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClE,IAAI,KAA8B,CAAC;QACnC,IAAI,CAAC;YACH,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAC3G,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;YAC1D,QAAQ,CAAC,IAAI,CAAC,6GAA6G,CAAC,CAAC;QAC/H,CAAC;QACD,IAAI,aAAsC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5C,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACxG,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;YAClE,QAAQ,CAAC,IAAI,CAAC,qGAAqG,CAAC,CAAC;QACvH,CAAC;QACD,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACrC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACjG,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;YAC3D,QAAQ,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,OAAgC,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACjG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;YAC5D,QAAQ,CAAC,IAAI,CAAC,wGAAwG,CAAC,CAAC;QAC1H,CAAC;QACD,IAAI,YAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QAChH,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;YACjE,QAAQ,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;QAC1G,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC;QACpD,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACpN,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9D,OAAO;YACL,IAAI,EAAE;gBACJ,GAAG,IAAI;gBACP,KAAK;gBACL,aAAa;gBACb,MAAM;gBACN,OAAO;gBACP,YAAY;gBACZ,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;gBAC7C,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,WAAW,EAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,+KAA+K,CAAC,CAAC,CAAC,sKAAsK,EAAE;gBACxe,YAAY,EAAE,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,6DAA6D,EAAE,eAAe,EAAE,uEAAuE,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;gBACtW,UAAU,EAAE;oBACV,IAAI,EAAE,WAAW;oBACjB,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,oBAAoB,EAAE,CAAC;oBACvB,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,uLAAuL,CAAC,CAAC,CAAC,0KAA0K;iBACtX;aACF;YACD,QAAQ;YACR,SAAS,EAAE,IAAI,CAAC,aAAa,IAAI,UAAU,CAAC,SAAS;SACtD,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC;IACtC,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,YAAY;IACnB,WAAW,EACT,2UAA2U;IAC7U,KAAK,EAAE;QACL,SAAS,EAAE,cAAc;QACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;QACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QACjD,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;KACzD;IACD,MAAM,EAAE,SAAS;IACjB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;IACvG,aAAa,EAAE,WAAW;IAC1B,MAAM,EAAE,MAAM;IACd,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,IAAI,GAAsE,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;QACxH,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACtD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACrE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9F,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QAClH,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3D,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IAC5F,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAC;IACtC,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,YAAY;IACnB,WAAW,EACT,8bAA8b;IAChc,KAAK,EAAE;QACL,SAAS,EAAE,cAAc;QACzB,KAAK,EAAE,CAAC;aACL,KAAK,CACJ,CAAC;aACE,MAAM,CAAC;YACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;YAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;YAC3C,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;SACnG,CAAC;aACD,MAAM,EAAE,CACZ;aACA,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,EAAE,CAAC;KACX;IACD,MAAM,EAAE,SAAS;IACjB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;IACvG,aAAa,EAAE,WAAW;IAC1B,MAAM,EAAE,MAAM;IACd,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACzF,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;QAC5G,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IACtF,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC;IACvC,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,aAAa;IACpB,WAAW,EACT,ubAAub;IACzb,KAAK,EAAE;QACL,SAAS,EAAE,cAAc;QACzB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;aAC7F,QAAQ,CAAC,yHAAyH,CAAC;QACtI,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACjC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QACrD,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QACxC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QACvD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAC/C,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACxD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QACzD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;QACxD,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QACpE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACvC;IACD,MAAM,EAAE,SAAS;IACjB,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE;IACvG,aAAa,EAAE,WAAW;IAC1B,MAAM,EAAE,MAAM;IACd,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,8CAA8C,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,CAAC,GAAqD;YAC1D,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,YAAY;YACtD,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY;YACpD,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;QACF,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACnD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;YAAE,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5D,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACtG,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACxG,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpE,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAuC,CAAC;gBACxE,OAAO;oBACL,IAAI,EAAE;wBACJ,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;wBAC5B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;wBACxB,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;wBACtC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;wBAC5B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;wBACtC,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,QAAQ,EAAE,SAAS,CAAC,QAAQ;qBAC7B;oBACD,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,IAAI;iBACzC,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,IAAI,EAAE;oBACJ,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;wBACzC,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;wBAC5B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;wBACxB,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;wBACtC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;wBAC5B,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;wBACtC,OAAO,EAAE,IAAI,CAAC,OAAO;qBACtB,CAAC,CAAC;oBACH,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,YAAY,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM;oBACtC,YAAY,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;iBACzF;gBACD,SAAS,EAAE,SAAS,CAAC,SAAS;aAC/B,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAA0D,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnD,OAAO;YACL,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE;YACtI,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI;SACnC,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,YAAY,CAAC,IAAa,EAAE,OAAe;IACzD,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;AAC3D,CAAC"}

package/dist/tools/resourceTools.js

@@ -0,0 +1,81 @@
+import { z } from 'zod';
+import { defineTool, policyGate } from './context.js';
+import { DodoError } from '../errors.js';
+import { Hash, Id, Path } from '../services/multimodal/contracts.js';
+import { ResourceChunk, ResourceExtract, ResourceInfo, ResourcePreview } from '../services/resources/contracts.js';
+import { RESOURCE_RANGE_MAX_BYTES } from '../services/resources/casStore.js';
+const read = { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false };
+const execute = { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false };
+const ExpectedMime = z.string().regex(/^[a-z0-9!#$&^_.+-]+\/[a-z0-9!#$&^_.+-]+$/i).max(150).optional();
+function use(ctx) {
+    const service = ctx.services.resources;
+    if (!service)
+        throw new DodoError('NOT_SUPPORTED', 'resource service is unavailable in this running build');
+    return service;
+}
+const inspectTool = defineTool({
+    name: 'resource_inspect', title: 'Ingest or inspect one immutable resource',
+    description: 'Create a workspace/principal-scoped reference to one guarded workspace path or owned media asset, or inspect an existing resourceId. Bytes enter the private content-addressed store only after path/link/file-identity checks and SHA-256 verification. A resourceId/URI is never authority and cannot cross clients or workspaces.',
+    input: { resourceId: Id.optional(), path: Path.optional(), assetId: Id.optional(), expectedSha256: Hash.optional(), expectedMimeType: ExpectedMime },
+    output: ResourceInfo, requiredScope: 'dodo:read', action: 'read', annotations: read,
+    handler: async (args, ctx) => {
+        const selected = [args.resourceId, args.path, args.assetId].filter((value) => value !== undefined);
+        if (selected.length !== 1)
+            throw new DodoError('INVALID_INPUT', 'provide exactly one of resourceId, path or assetId');
+        const service = use(ctx);
+        if (args.path)
+            return { data: await service.ingestWorkspace(ctx, args.path, args.expectedSha256, args.expectedMimeType) };
+        if (args.assetId)
+            return { data: await service.ingestAsset(ctx, args.assetId, args.expectedSha256, args.expectedMimeType) };
+        return { data: await service.inspect(ctx, args.resourceId, args.expectedSha256, args.expectedMimeType) };
+    },
+});
+const resourceReadTool = defineTool({
+    name: 'resource_read', title: 'Read one bounded resource chunk',
+    description: 'Read at most 256 KiB from the beginning of an owned resource. Complete UTF-8 text is returned as text; binary or partial data is bounded Base64 with a signed resumeToken. Access, ACL and object hash are rechecked on every call.',
+    input: { resourceId: Id, maxBytes: z.number().int().min(1).max(RESOURCE_RANGE_MAX_BYTES).default(64 * 1024), expectedSha256: Hash.optional() },
+    output: ResourceChunk, requiredScope: 'dodo:read', action: 'read', annotations: read,
+    handler: async (args, ctx) => {
+        const result = await use(ctx).read(ctx, args.resourceId, args.maxBytes, args.expectedSha256);
+        return { data: { resource: result.info, encoding: result.encoding, data: result.data, range: { start: result.start, endExclusive: result.endExclusive, total: result.info.bytes }, chunkSha256: result.chunkHash, eof: result.eof, nextOffset: result.nextOffset, resumeToken: result.resumeToken }, truncated: !result.eof, nextCursor: result.resumeToken };
+    },
+});
+const resourceRangeTool = defineTool({
+    name: 'resource_read_range', title: 'Read or resume a bounded byte range',
+    description: 'Read one Base64-encoded byte range (maximum 256 KiB) from an owned immutable resource. Continue with resumeToken alone; the signed token is bound to resource hash, workspace and principal but never replaces authorization. Multi-range and unbounded reads are refused.',
+    input: { resourceId: Id.optional(), cursor: z.string().max(2048).optional(), offset: z.number().int().min(0).max(RESOURCE_RANGE_MAX_BYTES * 2048).optional(), length: z.number().int().min(1).max(RESOURCE_RANGE_MAX_BYTES).default(64 * 1024), expectedSha256: Hash.optional() },
+    output: ResourceChunk, requiredScope: 'dodo:read', action: 'read', annotations: read,
+    handler: async (args, ctx) => {
+        const result = await use(ctx).readRange(ctx, { ...(args.resourceId ? { resourceId: args.resourceId } : {}), ...(args.cursor ? { cursor: args.cursor } : {}), ...(args.offset !== undefined ? { offset: args.offset } : {}), length: args.length, ...(args.expectedSha256 ? { expectedHash: args.expectedSha256 } : {}) });
+        return { data: { resource: result.info, encoding: 'base64', data: result.data, range: { start: result.start, endExclusive: result.endExclusive, total: result.info.bytes }, chunkSha256: result.chunkHash, eof: result.eof, nextOffset: result.nextOffset, resumeToken: result.resumeToken }, truncated: !result.eof, nextCursor: result.resumeToken };
+    },
+});
+const previewTool = defineTool({
+    name: 'resource_preview', title: 'Preview a resource safely',
+    description: 'Return bounded UTF-8 text, a raster thumbnail MCP image block, a <=6 MiB MCP audio block, or metadata-only evidence. SVG stays untrusted text; unsupported formats are never executed or sent to a shell.',
+    input: { resourceId: Id, maxEdge: z.number().int().min(64).max(1600).default(1024), expectedSha256: Hash.optional() },
+    output: ResourcePreview, requiredScope: 'dodo:read', action: 'read', annotations: read,
+    handler: async (args, ctx) => {
+        const result = await use(ctx).preview(ctx, args.resourceId, args.maxEdge, args.expectedSha256);
+        return { data: result.data, ...(result.block ? { contentBlocks: [result.block] } : {}) };
+    },
+});
+const extractTool = defineTool({
+    name: 'resource_extract', title: 'Extract bounded deterministic resource data',
+    description: 'Extract validated UTF-8 text, safe ZIP central-directory names/sizes, or metadata from an owned resource. Archive entries are never inflated, files are never executed, and OCR/PDF claims are not fabricated when no provider exists.',
+    input: { resourceId: Id, kind: z.enum(['auto', 'text', 'metadata', 'archive_entries']).default('auto'), expectedSha256: Hash.optional() },
+    output: ResourceExtract, requiredScope: 'dodo:read', action: 'read', annotations: read,
+    handler: async (args, ctx) => ({ data: await use(ctx).extract(ctx, args.resourceId, args.kind, args.expectedSha256) }),
+});
+const transformTool = defineTool({
+    name: 'resource_transform', title: 'Create a bounded immutable resource transform',
+    description: 'Create a JPEG thumbnail from an owned raster image and store it as a new immutable CAS resource. Decoder input is untrusted, dimensions/output are bounded, source hash is rechecked and inspect-mode owner approval still applies. No external command or network access.',
+    input: { resourceId: Id, operation: z.literal('thumbnail').default('thumbnail'), maxEdge: z.number().int().min(64).max(1600).default(1024), expectedSha256: Hash.optional() },
+    output: ResourceInfo, requiredScope: 'dodo:exec', action: 'exec', annotations: execute,
+    handler: async (args, ctx) => {
+        policyGate(ctx, { tool: 'resource_transform', action: 'exec', approvalAction: { resourceId: args.resourceId, operation: args.operation, maxEdge: args.maxEdge, expectedSha256: args.expectedSha256 ?? null }, summary: 'create one bounded image thumbnail resource' });
+        return { data: await use(ctx).transformImage(ctx, args.resourceId, args.maxEdge, args.expectedSha256) };
+    },
+});
+export const RESOURCE_TOOLS = [inspectTool, resourceReadTool, resourceRangeTool, previewTool, extractTool, transformTool];
+//# sourceMappingURL=resourceTools.js.map

package/dist/tools/resourceTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceTools.js","sourceRoot":"","sources":["../../src/tools/resourceTools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAiC,MAAM,cAAc,CAAC;AACrF,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,qCAAqC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,oCAAoC,CAAC;AACnH,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAE7E,MAAM,IAAI,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AACxG,MAAM,OAAO,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AAC7G,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEvG,SAAS,GAAG,CAAC,GAAY;IACvB,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,uDAAuD,CAAC,CAAC;IAC5G,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,WAAW,GAAG,UAAU,CAAC;IAC7B,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,0CAA0C;IAC3E,WAAW,EAAE,sUAAsU;IACnV,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,YAAY,EAAE;IACpJ,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI;IACnF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;QACnG,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,oDAAoD,CAAC,CAAC;QACtH,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC1H,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC5H,OAAO,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,UAAW,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;IAC5G,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,UAAU,CAAC;IAClC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,iCAAiC;IAC/D,WAAW,EAAE,qOAAqO;IAClP,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE;IAC9I,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI;IACpF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7F,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;IAChW,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,UAAU,CAAC;IACnC,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,qCAAqC;IACzE,WAAW,EAAE,4QAA4Q;IACzR,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE;IACjR,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI;IACpF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1T,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;IACzV,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,UAAU,CAAC;IAC7B,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,2BAA2B;IAC5D,WAAW,EAAE,2MAA2M;IACxN,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE;IACrH,MAAM,EAAE,eAAe,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI;IACtF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC/F,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC3F,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,UAAU,CAAC;IAC7B,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,6CAA6C;IAC9E,WAAW,EAAE,wOAAwO;IACrP,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE;IACzI,MAAM,EAAE,eAAe,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI;IACtF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;CACvH,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,UAAU,CAAC;IAC/B,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,+CAA+C;IAClF,WAAW,EAAE,4QAA4Q;IACzR,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE;IAC7K,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO;IACtF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,UAAU,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI,EAAE,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC,CAAC;QACxQ,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;IAC1G,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAiB,CAAC,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC"}

package/dist/tools/runtimeTools.js

@@ -0,0 +1,137 @@
+import { z } from 'zod';
+import { DodoError } from '../errors.js';
+import { EXEC_ARG_BYTES, validateExecArgs } from '../services/jobs/commandInput.js';
+import { RuntimeDiagnosis, RuntimeEvidence, RuntimeEvidenceId, RuntimeSession, RuntimeSessionId, RuntimeSessionStatus, RuntimeTask, RuntimeTaskId, RuntimeTaskKind, } from '../services/runtime/contracts.js';
+import { defineTool, policyGate } from './context.js';
+import { withIdempotency } from './changeTools.js';
+const read = { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false };
+const plan = { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false };
+const execute = { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: true };
+const IdempotencyKey = z.string().min(8).max(128);
+function use(ctx) {
+    const runtime = ctx.services.runtime;
+    if (!runtime)
+        throw new DodoError('NOT_SUPPORTED', 'Runtime Intelligence is unavailable in this running build');
+    return runtime;
+}
+const runtimeSessionOpenTool = defineTool({
+    name: 'runtime_session_open', title: 'Open a durable runtime evidence session',
+    description: 'Open a caller/workspace-scoped runtime session that persists across MCP reconnects and server restarts. This opens no process, browser, network, desktop, microphone or system audio by itself. Handles expire and live OAuth/target authority is rechecked on every use.',
+    input: { label: z.string().min(1).max(160), ttlMinutes: z.number().int().min(1).max(24 * 60).default(60) }, output: RuntimeSession,
+    requiredScope: 'dodo:write', action: 'plan', annotations: plan,
+    handler: async (args, ctx) => ({ data: use(ctx).open(ctx, args.label, args.ttlMinutes) }),
+});
+const runtimeSessionStatusTool = defineTool({
+    name: 'runtime_session_status', title: 'Inspect a runtime session',
+    description: 'Return caller-owned session, task and evidence status after rechecking live access. Process metadata is reconnectable; raw command output and browser secrets are never persisted in Runtime Intelligence.',
+    input: { sessionId: RuntimeSessionId }, output: RuntimeSessionStatus,
+    requiredScope: 'dodo:read', action: 'read', annotations: read,
+    handler: async (args, ctx) => ({ data: use(ctx).status(ctx, args.sessionId) }),
+});
+const runtimeSessionCloseTool = defineTool({
+    name: 'runtime_session_close', title: 'Close a runtime session',
+    description: 'Close one owned runtime session. Refuses while attached tasks are running and never kills work silently. Jobs remain governed by runtime_task_cancel and the existing owned-process rules.',
+    input: { sessionId: RuntimeSessionId }, output: RuntimeSession,
+    requiredScope: 'dodo:write', action: 'plan', annotations: { ...plan, idempotentHint: true },
+    handler: async (args, ctx) => ({ data: use(ctx).closeSession(ctx, args.sessionId) }),
+});
+const runtimeTaskStartTool = defineTool({
+    name: 'runtime_task_start', title: 'Start a reconnectable runtime task',
+    description: 'Start an explicit program+argv process as process/test/container runtime evidence. No shell string is accepted. Uses the existing trusted executable resolver, execution approval, owner command-sandbox policy, environment allowlist, timeout and durable idempotency. Returns immediately; observe or cancel by runtime task handle.',
+    input: {
+        sessionId: RuntimeSessionId, kind: RuntimeTaskKind,
+        program: z.string().min(1).max(512), args: z.array(z.string().max(EXEC_ARG_BYTES)).max(128).default([]),
+        cwd: z.string().max(1024).default('.'), timeoutMs: z.number().int().min(1000).max(30 * 60 * 1000).optional(),
+        sandbox: z.boolean().optional(), network: z.boolean().default(false), idempotencyKey: IdempotencyKey,
+    },
+    output: z.object({ task: RuntimeTask, sandboxed: z.string().nullable(), replayed: z.boolean() }).strict(),
+    requiredScope: 'dodo:exec', action: 'exec', annotations: execute,
+    handler: async (args, ctx) => {
+        validateExecArgs(args.program, args.args);
+        use(ctx).prepareTask(ctx, args.sessionId);
+        policyGate(ctx, {
+            tool: 'runtime_task_start', action: 'exec',
+            approvalAction: { sessionId: args.sessionId, kind: args.kind, program: args.program, args: args.args, cwd: args.cwd, timeoutMs: args.timeoutMs ?? null, sandbox: args.sandbox ?? null, network: args.network },
+            summary: `runtime ${args.kind}: ${args.program} ${args.args.join(' ')}`.slice(0, 200),
+        });
+        const { result, replayed } = await withIdempotency(ctx, 'runtime_task_start', args.idempotencyKey, {
+            sessionId: args.sessionId, kind: args.kind, program: args.program, args: args.args, cwd: args.cwd,
+            timeoutMs: args.timeoutMs ?? null, sandbox: args.sandbox ?? null, network: args.network,
+        }, async () => {
+            const request = {
+                workspaceId: ctx.services.workspaceId, epoch: ctx.services.epoch, principal: ctx.principal.grantId,
+                kind: 'exec', program: args.program, args: args.args, cwdRel: args.cwd, sandbox: args.sandbox, network: args.network,
+            };
+            if (args.timeoutMs !== undefined)
+                request.timeoutMs = args.timeoutMs;
+            const job = ctx.services.jobs.start(request);
+            try {
+                return { task: use(ctx).attachTask(ctx, args.sessionId, job.jobId, args.kind), sandboxed: job.sandboxed };
+            }
+            catch (error) {
+                ctx.services.jobs.cancel(job.jobId, ctx.services.workspaceId, 0);
+                throw error;
+            }
+        });
+        return { data: { ...result, replayed } };
+    },
+});
+const runtimeTaskObserveTool = defineTool({
+    name: 'runtime_task_observe', title: 'Record safe process or test evidence',
+    description: 'Observe an owned runtime task and persist only status, exit metadata, byte counts and SHA-256 samples. Raw stdout/stderr is not stored. Optional reportPath is read through WorkspaceFS and retains only aggregate JSON test counts plus its source hash.',
+    input: { sessionId: RuntimeSessionId, taskId: RuntimeTaskId, reportPath: z.string().max(1024).optional() },
+    output: z.object({ task: RuntimeTask, evidence: RuntimeEvidence }).strict(),
+    requiredScope: 'dodo:read', action: 'read', annotations: read,
+    handler: async (args, ctx) => ({ data: use(ctx).observeTask(ctx, args.sessionId, args.taskId, args.reportPath) }),
+});
+const runtimeTaskCancelTool = defineTool({
+    name: 'runtime_task_cancel', title: 'Cancel an owned runtime task',
+    description: 'Cancel only the live owned process tree attached to this caller/workspace runtime task. Never signals a stored PID after restart and never broadens owner command policy.',
+    input: { sessionId: RuntimeSessionId, taskId: RuntimeTaskId },
+    output: z.object({ taskId: RuntimeTaskId, jobId: z.string(), status: z.string() }).strict(),
+    requiredScope: 'dodo:exec', action: 'job-control', annotations: { ...execute, openWorldHint: false },
+    handler: async (args, ctx) => ({ data: use(ctx).cancelTask(ctx, args.sessionId, args.taskId) }),
+});
+function imageBlock(ctx, assetId) {
+    const asset = ctx.services.multimodal?.storage.get(ctx.principal, assetId);
+    if (!asset || asset.meta.kind !== 'image')
+        throw new DodoError('NOT_FOUND', 'browser screenshot asset expired before response');
+    return { type: 'image', data: asset.bytes.toString('base64'), mimeType: asset.meta.mimeType };
+}
+const runtimeBrowserCollectTool = defineTool({
+    name: 'runtime_browser_collect', title: 'Collect bounded evidence from an existing browser',
+    description: 'Observe an already owner-created browser_session and attach bounded screenshot/DOM/console/network evidence to a runtime session. It never opens a browser or enables public web. Persisted evidence contains hashes, counts and query-free safe URL only; no cookie, authorization header, input value or raw console/DOM text is stored.',
+    input: { sessionId: RuntimeSessionId, browserSessionId: z.string().regex(/^browser_[0-9a-hjkmnp-tv-z]{8,64}$/) },
+    output: z.looseObject({ evidence: RuntimeEvidence }), requiredScope: 'dodo:read', action: 'read', annotations: read,
+    handler: async (args, ctx) => {
+        const result = await use(ctx).collectBrowser(ctx, args.sessionId, args.browserSessionId);
+        return { data: result, contentBlocks: [imageBlock(ctx, result.observation.asset.assetId)] };
+    },
+});
+const runtimeSnapshotTool = defineTool({
+    name: 'runtime_snapshot', title: 'Record a guarded workspace snapshot',
+    description: 'Record a bounded hash of guarded file metadata plus caller-owned committed changesets eligible to be considered for rollback. It stores no file content and performs no rollback. Actual rollback remains rollback_changes with existing journal and conflict checks.',
+    input: { sessionId: RuntimeSessionId }, output: RuntimeEvidence,
+    requiredScope: 'dodo:read', action: 'read', annotations: read,
+    handler: async (args, ctx) => ({ data: use(ctx).snapshot(ctx, args.sessionId) }),
+});
+const runtimeEvidenceTool = defineTool({
+    name: 'runtime_evidence', title: 'Inspect and revalidate runtime evidence',
+    description: 'Read one caller/workspace/session-scoped evidence record. By default rechecks the current guarded process, browser observation or workspace snapshot and marks changed/unavailable sources stale. An evidence ID never grants access.',
+    input: { sessionId: RuntimeSessionId, evidenceId: RuntimeEvidenceId, refresh: z.boolean().default(true) }, output: RuntimeEvidence,
+    requiredScope: 'dodo:read', action: 'read', annotations: read,
+    handler: async (args, ctx) => ({ data: await use(ctx).evidence(ctx, args.sessionId, args.evidenceId, args.refresh) }),
+});
+const runtimeDiagnoseTool = defineTool({
+    name: 'runtime_diagnose', title: 'Diagnose bounded runtime evidence',
+    description: 'Produce deterministic facts, observations and clearly labeled inferences from current caller-owned runtime evidence. It never reads hidden output, executes a fix, changes code, grants permission or claims that process exit alone proves user-visible success.',
+    input: { sessionId: RuntimeSessionId, evidenceIds: z.array(RuntimeEvidenceId).min(1).max(16) }, output: RuntimeDiagnosis,
+    requiredScope: 'dodo:read', action: 'read', annotations: read,
+    handler: async (args, ctx) => ({ data: await use(ctx).diagnose(ctx, args.sessionId, args.evidenceIds) }),
+});
+export const RUNTIME_TOOLS = [
+    runtimeSessionOpenTool, runtimeSessionStatusTool, runtimeSessionCloseTool,
+    runtimeTaskStartTool, runtimeTaskObserveTool, runtimeTaskCancelTool,
+    runtimeBrowserCollectTool, runtimeSnapshotTool, runtimeEvidenceTool, runtimeDiagnoseTool,
+];
+//# sourceMappingURL=runtimeTools.js.map

package/dist/tools/runtimeTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtimeTools.js","sourceRoot":"","sources":["../../src/tools/runtimeTools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpF,OAAO,EACL,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,EAAE,cAAc,EAAE,gBAAgB,EACtF,oBAAoB,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,GAClE,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAyD,MAAM,cAAc,CAAC;AAC7G,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,IAAI,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AACxG,MAAM,IAAI,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AAC1G,MAAM,OAAO,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AAC1G,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAElD,SAAS,GAAG,CAAC,GAAY;IACvB,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;IACrC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,2DAA2D,CAAC,CAAC;IAChH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,sBAAsB,GAAG,UAAU,CAAC;IACxC,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,yCAAyC;IAC9E,WAAW,EAAE,2QAA2Q;IACxR,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,cAAc;IAClI,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI;IAC9D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;CAC1F,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,UAAU,CAAC;IAC1C,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,2BAA2B;IAClE,WAAW,EAAE,4MAA4M;IACzN,KAAK,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,oBAAoB;IACpE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI;IAC7D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;CAC/E,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,UAAU,CAAC;IACzC,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,yBAAyB;IAC/D,WAAW,EAAE,4LAA4L;IACzM,KAAK,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,cAAc;IAC9D,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE;IAC3F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;CACrF,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,UAAU,CAAC;IACtC,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,oCAAoC;IACvE,WAAW,EAAE,yUAAyU;IACtV,KAAK,EAAE;QACL,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,eAAe;QAClD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACvG,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE;QAC5G,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,cAAc;KACrG;IACD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACzG,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO;IAChE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM;YAC1C,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YAC9M,OAAO,EAAE,WAAW,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SACtF,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,oBAAoB,EAAE,IAAI,CAAC,cAAc,EAAE;YACjG,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG;YACjG,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO;SACxF,EAAE,KAAK,IAAI,EAAE;YACZ,MAAM,OAAO,GAAkD;gBAC7D,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO;gBAClG,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO;aACrH,CAAC;YACF,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;gBAAE,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YACrE,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7C,IAAI,CAAC;gBAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;YAAC,CAAC;YAClH,OAAO,KAAK,EAAE,CAAC;gBAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;QAClG,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC;IAC3C,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,UAAU,CAAC;IACxC,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,sCAAsC;IAC3E,WAAW,EAAE,2PAA2P;IACxQ,KAAK,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;IAC1G,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3E,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI;IAC7D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;CAClH,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,UAAU,CAAC;IACvC,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,8BAA8B;IAClE,WAAW,EAAE,2KAA2K;IACxL,KAAK,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,aAAa,EAAE;IAC7D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3F,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE;IACpG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;CAChG,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,GAAY,EAAE,OAAe;IAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC3E,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,kDAAkD,CAAC,CAAC;IAChI,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;AAChG,CAAC;AAED,MAAM,yBAAyB,GAAG,UAAU,CAAC;IAC3C,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,mDAAmD;IAC3F,WAAW,EAAE,4UAA4U;IACzV,KAAK,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oCAAoC,CAAC,EAAE;IAChH,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI;IACnH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACzF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;IAC9F,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,UAAU,CAAC;IACrC,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,qCAAqC;IACtE,WAAW,EAAE,uQAAuQ;IACpR,KAAK,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,eAAe;IAC/D,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI;IAC7D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;CACjF,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,UAAU,CAAC;IACrC,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,yCAAyC;IAC1E,WAAW,EAAE,uOAAuO;IACpP,KAAK,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,eAAe;IAClI,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI;IAC7D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;CACtH,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,UAAU,CAAC;IACrC,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,mCAAmC;IACpE,WAAW,EAAE,mQAAmQ;IAChR,KAAK,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,gBAAgB;IACxH,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI;IAC7D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;CACzG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAiB;IACzC,sBAAsB,EAAE,wBAAwB,EAAE,uBAAuB;IACzE,oBAAoB,EAAE,sBAAsB,EAAE,qBAAqB;IACnE,yBAAyB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,mBAAmB;CACzF,CAAC"}

package/dist/tools/scheduleTools.js

@@ -0,0 +1,10 @@
+import { z } from 'zod';
+import { defineTool } from './context.js';
+import { ScheduleInput } from '../services/schedules/scheduleService.js';
+const output = z.looseObject({});
+export const scheduleProposeTool = defineTool({
+    name: 'schedule_propose', title: 'Propose scheduled command', description: 'Create an immutable PENDING scheduled command. Does not execute or authorize it. Owner must inspect and approve the exact digest locally, with its own local approval. Runs only while HTTP DODO serves this workspace; saved trusted mode required. Current project code/dependencies are not pinned. Default requires OS sandbox, network disabled.',
+    input: ScheduleInput.shape, output, annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false }, requiredScope: 'dodo:exec', action: 'exec',
+    handler: async (args, ctx) => ({ data: ctx.services.schedules.propose(Object.fromEntries(Object.entries(args).filter(([key]) => key !== 'workspaceId' && key !== 'workspaceEpoch')), ctx.principal) }),
+});
+//# sourceMappingURL=scheduleTools.js.map

package/dist/tools/scheduleTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduleTools.js","sourceRoot":"","sources":["../../src/tools/scheduleTools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AACzE,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AACjC,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAAC;IAC5C,IAAI,EAAC,kBAAkB,EAAC,KAAK,EAAC,2BAA2B,EAAC,WAAW,EAAC,uVAAuV;IAC7Z,KAAK,EAAC,aAAa,CAAC,KAAK,EAAC,MAAM,EAAC,WAAW,EAAC,EAAC,YAAY,EAAC,KAAK,EAAC,eAAe,EAAC,KAAK,EAAC,cAAc,EAAC,KAAK,EAAC,aAAa,EAAC,KAAK,EAAC,EAAC,aAAa,EAAC,WAAW,EAAC,MAAM,EAAC,MAAM;IACxK,OAAO,EAAC,KAAK,EAAC,IAAI,EAAC,GAAG,EAAC,EAAE,CAAA,CAAC,EAAC,IAAI,EAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,gBAAgB,CAAC,CAAC,EAAC,GAAG,CAAC,SAAS,CAAC,EAAC,CAAC;CAC9L,CAAC,CAAC"}