nduka 1.0.0

package/dist/tool-runtime/engine.d.ts

@@ -0,0 +1,154 @@
+import { type SecureToolManifest, type SecureToolManifestTool } from './manifest.js';
+import { type ToolActorRole, type ToolPolicyDecision, type ToolRiskLevel } from './policy.js';
+export type ToolPermission = 'read' | 'write' | 'admin';
+export type ToolSlotSource = 'profile' | 'customer' | 'customer_secret' | 'profile_or_customer' | 'env_secret' | 'constant' | 'system' | 'dynamic_variable' | 'owner_provided' | 'tool_response';
+export type ToolVerificationMode = 'none' | 'chat_link' | 'collect_only' | 'collect_and_verify' | 'profile_or_collect' | 'owner_approval' | 'otp' | 'api_key';
+export interface ToolRoutingConfig {
+    minConfidence?: number;
+    clarifyBelow?: number;
+    ignoreBelow?: number;
+    clarificationPrompt?: string;
+}
+export interface ToolVerificationConfig {
+    mode?: ToolVerificationMode;
+    identityFields?: string[];
+    secretFields?: string[];
+    verifyWithTool?: string;
+    maxAttempts?: number;
+    onSuccessAssign?: Record<string, string>;
+}
+export type ToolFieldPresence = 'required' | 'optional' | 'conditional' | 'managed';
+export interface ToolRequiredWhen {
+    field: string;
+    exists?: boolean;
+    equals?: string | number | boolean;
+    notEquals?: string | number | boolean;
+}
+export interface ToolSchemaField {
+    type: string;
+    required?: boolean;
+    optionalPrompt?: string;
+    label?: string;
+    requiredWhen?: ToolRequiredWhen;
+    presence?: ToolFieldPresence;
+    description?: string;
+    /**
+     * Where this value should come from.
+     * profile = trusted secure-tool-identities.json
+     * customer = customer may provide in chat
+     * customer_secret = customer may provide in chat, but it is never exposed to the LLM
+     * profile_or_customer = profile first, otherwise ask customer when allowed
+     * env_secret = load from environment variable
+     * constant = fixed value from config
+     * system = runtime value such as chatJid, senderJid, tenantId, timestamp
+     * dynamic_variable = value previously collected or assigned in this chat/session
+     * owner_provided = must be configured by owner/profile, not customer guessed
+     * tool_response = reserved for chained values assigned from previous tool results
+     */
+    source?: ToolSlotSource;
+    askIfMissing?: boolean;
+    prompt?: string;
+    secret?: boolean;
+    exposeToModel?: boolean;
+    validationRegex?: string;
+    validationMessage?: string;
+    minLength?: number;
+    maxLength?: number;
+    maxAttempts?: number;
+    enum?: Array<string | number | boolean>;
+    envName?: string;
+    value?: string | number | boolean;
+    systemKey?: 'chatJid' | 'senderJid' | 'tenantId' | 'userId' | 'timestamp';
+    dynamicVariableName?: string;
+}
+export interface ToolNaturalLanguageHints {
+    enabled?: boolean;
+    useWhen?: string;
+    triggerPhrases?: string[];
+    examples?: string[];
+    tags?: string[];
+    customerFacingName?: string;
+    approvalPrompt?: string;
+}
+export interface ToolDefinition {
+    name: string;
+    description: string;
+    permission: ToolPermission;
+    inputSchema: Record<string, ToolSchemaField>;
+    outputSchema: Record<string, {
+        type: string;
+    }>;
+    timeoutMs: number;
+    maxRetries: number;
+    tenantScoped: boolean;
+    requiresApproval: boolean;
+    riskLevel?: ToolRiskLevel;
+    ownerOnly?: boolean;
+    enabled?: boolean;
+    allowExtraArguments?: boolean;
+    naturalLanguage?: ToolNaturalLanguageHints;
+    routing?: ToolRoutingConfig;
+    verification?: ToolVerificationConfig;
+}
+export interface ToolCall {
+    id: string;
+    toolName: string;
+    arguments: Record<string, unknown>;
+    tenantId: string;
+    userId: string;
+    chatId: string;
+    executionId: string;
+    timestamp: number;
+    actorRole?: ToolActorRole;
+    approved?: boolean;
+    approvalToken?: string;
+}
+export interface ToolResult {
+    callId: string;
+    success: boolean;
+    data?: unknown;
+    error?: string;
+    latencyMs: number;
+    retries: number;
+    policyDecision?: ToolPolicyDecision;
+}
+export interface ToolAuditEntry {
+    executionId: string;
+    toolName: string;
+    tenantId: string;
+    userId: string;
+    chatId: string;
+    arguments: Record<string, unknown>;
+    result: unknown;
+    success: boolean;
+    error?: string;
+    permissionDenied?: boolean;
+    timestamp: number;
+    latencyMs: number;
+    policyDecision?: ToolPolicyDecision;
+    riskLevel?: ToolRiskLevel;
+}
+export declare class ToolRegistry {
+    private tools;
+    private executors;
+    register(definition: ToolDefinition, executor: (args: Record<string, unknown>) => Promise<unknown>): void;
+    getTool(name: string): ToolDefinition | undefined;
+    listTools(): ToolDefinition[];
+    execute(call: ToolCall): Promise<ToolResult>;
+}
+export declare class ToolExecutionRuntime {
+    private registry;
+    private auditLog;
+    private tenantPermissions;
+    private policy;
+    constructor(registerLegacyMocks?: boolean);
+    grantPermission(tenantId: string, toolName: string): void;
+    registerManifestTool(tool: SecureToolManifestTool, executor?: (args: Record<string, unknown>) => Promise<unknown>): void;
+    registerManifest(manifest: SecureToolManifest, executors?: Record<string, (args: Record<string, unknown>) => Promise<unknown>>): void;
+    execute(call: ToolCall): Promise<ToolResult>;
+    getAuditTrail(tenantId?: string, limit?: number): ToolAuditEntry[];
+    getRegistry(): ToolRegistry;
+    reset(): void;
+    private registerLegacyMockTools;
+}
+//# sourceMappingURL=engine.d.ts.map

package/dist/tool-runtime/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/tool-runtime/engine.ts"],"names":[],"mappings":"AAGA,OAAO,EAA8B,KAAK,kBAAkB,EAAE,KAAK,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACjH,OAAO,EAAoB,KAAK,aAAa,EAAE,KAAK,kBAAkB,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAEhH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAExD,MAAM,MAAM,cAAc,GACtB,SAAS,GACT,UAAU,GACV,iBAAiB,GACjB,qBAAqB,GACrB,YAAY,GACZ,UAAU,GACV,QAAQ,GACR,kBAAkB,GAClB,gBAAgB,GAChB,eAAe,CAAC;AAEpB,MAAM,MAAM,oBAAoB,GAC5B,MAAM,GACN,WAAW,GACX,cAAc,GACd,oBAAoB,GACpB,oBAAoB,GACpB,gBAAgB,GAChB,KAAK,GACL,SAAS,CAAC;AAEd,MAAM,WAAW,iBAAiB;IAChC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,oBAAoB,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C;AAED,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,UAAU,GAAG,aAAa,GAAG,SAAS,CAAC;AAEpF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;CACvC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IAExC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAClC,SAAS,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAC;IAC1E,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,cAAc,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC7C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;IACtB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,eAAe,CAAC,EAAE,wBAAwB,CAAC;IAC3C,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,YAAY,CAAC,EAAE,sBAAsB,CAAC;CACvC;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,kBAAkB,CAAC;CACrC;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAwFD,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAA0C;IACvD,OAAO,CAAC,SAAS,CAA+E;IAEhG,QAAQ,CAAC,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI;IAOzG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAIjD,SAAS,IAAI,cAAc,EAAE;IAIvB,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;CAmCnD;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAe;IAC/B,OAAO,CAAC,QAAQ,CAAwB;IACxC,OAAO,CAAC,iBAAiB,CAAuC;IAChE,OAAO,CAAC,MAAM,CAA0B;gBAE5B,mBAAmB,UAAO;IAKtC,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAKzD,oBAAoB,CAAC,IAAI,EAAE,sBAAsB,EAAE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI;IAKxH,gBAAgB,CAAC,QAAQ,EAAE,kBAAkB,EAAE,SAAS,GAAE,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAM,GAAG,IAAI;IAInI,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IAiClD,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,cAAc,EAAE;IAK/D,WAAW,IAAI,YAAY;IAI3B,KAAK,IAAI,IAAI;IAKb,OAAO,CAAC,uBAAuB;CAwChC"}

package/dist/tool-runtime/engine.js

@@ -0,0 +1,236 @@
+import { randomUUID } from 'node:crypto';
+import { createToolAuditEntry } from './audit.js';
+import { toolDefinitionFromManifest } from './manifest.js';
+import { ToolPolicyEngine } from './policy.js';
+function validateToolId(value) {
+    if (!/^[a-z][a-z0-9_]{1,63}$/.test(value))
+        throw new Error(`Invalid tool name: ${value}`);
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function matchesSchemaType(value, expected) {
+    if (expected === 'array')
+        return Array.isArray(value);
+    if (expected === 'object')
+        return isRecord(value);
+    return typeof value === expected;
+}
+function isSchemaFieldRequired(schema, args) {
+    if (schema.presence === 'required' || schema.presence === 'managed')
+        return true;
+    if (schema.presence === 'optional')
+        return false;
+    if (schema.presence === 'conditional' && schema.requiredWhen) {
+        const value = args[schema.requiredWhen.field];
+        if (typeof schema.requiredWhen.exists === 'boolean') {
+            const exists = value !== undefined && value !== null && value !== '';
+            if (exists !== schema.requiredWhen.exists)
+                return false;
+        }
+        if ('equals' in schema.requiredWhen && value !== schema.requiredWhen.equals)
+            return false;
+        if ('notEquals' in schema.requiredWhen && value === schema.requiredWhen.notEquals)
+            return false;
+        return true;
+    }
+    return schema.required === true;
+}
+function validateInput(tool, args) {
+    const errors = [];
+    const allowedFields = new Set(Object.keys(tool.inputSchema));
+    if (!tool.allowExtraArguments) {
+        for (const key of Object.keys(args)) {
+            if (!allowedFields.has(key))
+                errors.push(`Unexpected field: ${key}`);
+        }
+    }
+    for (const [field, schema] of Object.entries(tool.inputSchema)) {
+        const value = args[field];
+        const missing = !(field in args) || value === undefined || value === null || value === '';
+        if (isSchemaFieldRequired(schema, args) && missing) {
+            errors.push(`Missing required field: ${field}`);
+            continue;
+        }
+        if (!missing && !matchesSchemaType(value, schema.type)) {
+            errors.push(`Type mismatch for ${field}: expected ${schema.type}, got ${Array.isArray(value) ? 'array' : typeof value}`);
+        }
+    }
+    return errors;
+}
+function validateOutput(tool, result) {
+    if (result === null || result === undefined)
+        return ['Result is null/undefined'];
+    if (!isRecord(result))
+        return ['Result must be an object'];
+    const errors = [];
+    for (const [field, schema] of Object.entries(tool.outputSchema)) {
+        if (field in result && !matchesSchemaType(result[field], schema.type)) {
+            errors.push(`Output type mismatch for ${field}: expected ${schema.type}`);
+        }
+    }
+    return errors;
+}
+async function withTimeout(promise, ms) {
+    return Promise.race([
+        promise,
+        new Promise((_, reject) => setTimeout(() => reject(new Error(`Tool execution timed out after ${ms}ms`)), ms)),
+    ]);
+}
+function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+export class ToolRegistry {
+    tools = new Map();
+    executors = new Map();
+    register(definition, executor) {
+        validateToolId(definition.name);
+        if (this.tools.has(definition.name))
+            throw new Error(`Duplicate tool registration: ${definition.name}`);
+        this.tools.set(definition.name, { ...definition, enabled: definition.enabled !== false });
+        this.executors.set(definition.name, executor);
+    }
+    getTool(name) {
+        return this.tools.get(name);
+    }
+    listTools() {
+        return Array.from(this.tools.values());
+    }
+    async execute(call) {
+        const tool = this.tools.get(call.toolName);
+        const executor = this.executors.get(call.toolName);
+        const startTime = Date.now();
+        if (!tool || !executor) {
+            return { callId: call.id, success: false, error: `Unknown tool: ${call.toolName}`, latencyMs: 0, retries: 0 };
+        }
+        const schemaErrors = validateInput(tool, call.arguments);
+        if (schemaErrors.length > 0) {
+            return { callId: call.id, success: false, error: `Schema validation failed: ${schemaErrors.join(', ')}`, latencyMs: Date.now() - startTime, retries: 0 };
+        }
+        let lastError;
+        for (let attempt = 0; attempt <= tool.maxRetries; attempt++) {
+            try {
+                const result = await withTimeout(executor(call.arguments), tool.timeoutMs);
+                const outputErrors = validateOutput(tool, result);
+                if (outputErrors.length > 0)
+                    throw new Error(`Output validation failed: ${outputErrors.join(', ')}`);
+                return { callId: call.id, success: true, data: result, latencyMs: Date.now() - startTime, retries: attempt };
+            }
+            catch (err) {
+                lastError = err.message;
+                if (attempt < tool.maxRetries)
+                    await delay(250 * Math.pow(2, attempt));
+            }
+        }
+        return {
+            callId: call.id,
+            success: false,
+            error: lastError || 'Max retries exceeded',
+            latencyMs: Date.now() - startTime,
+            retries: tool.maxRetries,
+        };
+    }
+}
+export class ToolExecutionRuntime {
+    registry;
+    auditLog = [];
+    tenantPermissions = new Map();
+    policy = new ToolPolicyEngine();
+    constructor(registerLegacyMocks = true) {
+        this.registry = new ToolRegistry();
+        if (registerLegacyMocks)
+            this.registerLegacyMockTools();
+    }
+    grantPermission(tenantId, toolName) {
+        if (!this.tenantPermissions.has(tenantId))
+            this.tenantPermissions.set(tenantId, new Set());
+        this.tenantPermissions.get(tenantId).add(toolName);
+    }
+    registerManifestTool(tool, executor) {
+        const definition = toolDefinitionFromManifest(tool);
+        this.registry.register(definition, executor || (async () => tool.mockResponse || {}));
+    }
+    registerManifest(manifest, executors = {}) {
+        for (const tool of manifest.tools)
+            this.registerManifestTool(tool, executors[tool.name]);
+    }
+    async execute(call) {
+        const tool = this.registry.getTool(call.toolName);
+        const startTime = Date.now();
+        const policyResult = this.policy.evaluate(call, tool, this.tenantPermissions);
+        if (policyResult.decision !== 'allowed') {
+            this.auditLog.push(createToolAuditEntry({
+                call,
+                tool,
+                result: null,
+                success: false,
+                error: policyResult.reason,
+                policyDecision: policyResult.decision,
+                latencyMs: Date.now() - startTime,
+            }));
+            return { callId: call.id, success: false, error: policyResult.reason || policyResult.decision, latencyMs: Date.now() - startTime, retries: 0, policyDecision: policyResult.decision };
+        }
+        const result = await this.registry.execute(call);
+        const policyDecision = result.success ? 'allowed' : 'denied';
+        this.auditLog.push(createToolAuditEntry({
+            call,
+            tool,
+            result: result.data,
+            success: result.success,
+            error: result.error,
+            policyDecision,
+            latencyMs: result.latencyMs,
+        }));
+        return { ...result, policyDecision };
+    }
+    getAuditTrail(tenantId, limit = 100) {
+        const entries = tenantId ? this.auditLog.filter((entry) => entry.tenantId === tenantId) : this.auditLog;
+        return entries.slice(-limit);
+    }
+    getRegistry() {
+        return this.registry;
+    }
+    reset() {
+        this.auditLog = [];
+        this.tenantPermissions.clear();
+    }
+    registerLegacyMockTools() {
+        this.registry.register({
+            name: 'web_search',
+            description: 'Legacy mock web search used by older unit tests only',
+            permission: 'read',
+            riskLevel: 'public_read',
+            inputSchema: { query: { type: 'string', required: true, description: 'Search query' } },
+            outputSchema: { results: { type: 'array' } },
+            timeoutMs: 10_000,
+            maxRetries: 0,
+            tenantScoped: true,
+            requiresApproval: false,
+        }, async (args) => ({ query: args.query, results: [`Result for: ${args.query}`], source: 'mock' }));
+        this.registry.register({
+            name: 'crm_lookup',
+            description: 'Legacy mock CRM lookup used by older unit tests only',
+            permission: 'read',
+            riskLevel: 'sensitive_read',
+            inputSchema: { customerId: { type: 'string', required: true } },
+            outputSchema: { customerId: { type: 'string' }, name: { type: 'string' }, tier: { type: 'string' } },
+            timeoutMs: 5_000,
+            maxRetries: 0,
+            tenantScoped: true,
+            requiresApproval: false,
+        }, async (args) => ({ customerId: args.customerId, name: 'Mock Customer', tier: 'premium' }));
+        this.registry.register({
+            name: 'send_email',
+            description: 'Legacy mock outbound message action used by older unit tests only',
+            permission: 'write',
+            riskLevel: 'external_side_effect',
+            inputSchema: { to: { type: 'string', required: true }, subject: { type: 'string', required: true }, body: { type: 'string', required: true } },
+            outputSchema: { sent: { type: 'boolean' }, messageId: { type: 'string' } },
+            timeoutMs: 10_000,
+            maxRetries: 0,
+            tenantScoped: true,
+            requiresApproval: true,
+        }, async () => ({ sent: true, messageId: randomUUID() }));
+    }
+}
+//# sourceMappingURL=engine.js.map

package/dist/tool-runtime/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/tool-runtime/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,0BAA0B,EAAwD,MAAM,eAAe,CAAC;AACjH,OAAO,EAAE,gBAAgB,EAAmE,MAAM,aAAa,CAAC;AAkKhH,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,QAAgB;IACzD,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AACnC,CAAC;AAGD,SAAS,qBAAqB,CAAC,MAAuB,EAAE,IAA6B;IACnF,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACjF,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IAEjD,IAAI,MAAM,CAAC,QAAQ,KAAK,aAAa,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAE9C,IAAI,OAAO,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACrE,IAAI,MAAM,KAAK,MAAM,CAAC,YAAY,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;QAC1D,CAAC;QAED,IAAI,QAAQ,IAAI,MAAM,CAAC,YAAY,IAAI,KAAK,KAAK,MAAM,CAAC,YAAY,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1F,IAAI,WAAW,IAAI,MAAM,CAAC,YAAY,IAAI,KAAK,KAAK,MAAM,CAAC,YAAY,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAEhG,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,IAAoB,EAAE,IAA6B;IACxE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAE7D,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QAE1F,IAAI,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;YAChD,SAAS;QACX,CAAC;QAED,IAAI,CAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,qBAAqB,KAAK,cAAc,MAAM,CAAC,IAAI,SAAS,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;QAC3H,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,IAAoB,EAAE,MAAe;IAC3D,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACjF,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAChE,IAAI,KAAK,IAAI,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACtE,MAAM,CAAC,IAAI,CAAC,4BAA4B,KAAK,cAAc,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,WAAW,CAAI,OAAmB,EAAE,EAAU;IAC3D,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,OAAO;QACP,IAAI,OAAO,CAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;KACjH,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,OAAO,YAAY;IACf,KAAK,GAAgC,IAAI,GAAG,EAAE,CAAC;IAC/C,SAAS,GAAqE,IAAI,GAAG,EAAE,CAAC;IAEhG,QAAQ,CAAC,UAA0B,EAAE,QAA6D;QAChG,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QACxG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,GAAG,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,SAAS;QACP,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAc;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvB,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAChH,CAAC;QAED,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC3J,CAAC;QAED,IAAI,SAA6B,CAAC;QAClC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;YAC5D,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3E,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBAClD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACrG,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YAC/G,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAI,GAAa,CAAC,OAAO,CAAC;gBACnC,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU;oBAAE,MAAM,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAED,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,SAAS,IAAI,sBAAsB;YAC1C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACjC,OAAO,EAAE,IAAI,CAAC,UAAU;SACzB,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,oBAAoB;IACvB,QAAQ,CAAe;IACvB,QAAQ,GAAqB,EAAE,CAAC;IAChC,iBAAiB,GAA6B,IAAI,GAAG,EAAE,CAAC;IACxD,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAExC,YAAY,mBAAmB,GAAG,IAAI;QACpC,IAAI,CAAC,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;QACnC,IAAI,mBAAmB;YAAE,IAAI,CAAC,uBAAuB,EAAE,CAAC;IAC1D,CAAC;IAED,eAAe,CAAC,QAAgB,EAAE,QAAgB;QAChD,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAED,oBAAoB,CAAC,IAA4B,EAAE,QAA8D;QAC/G,MAAM,UAAU,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,gBAAgB,CAAC,QAA4B,EAAE,YAAiF,EAAE;QAChI,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK;YAAE,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAc;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAE9E,IAAI,YAAY,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC;gBACtC,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,YAAY,CAAC,MAAM;gBAC1B,cAAc,EAAE,YAAY,CAAC,QAAQ;gBACrC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aAClC,CAAC,CAAC,CAAC;YACJ,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC;QACxL,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,cAAc,GAAuB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC;YACtC,IAAI;YACJ,IAAI;YACJ,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,cAAc;YACd,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;IACvC,CAAC;IAED,aAAa,CAAC,QAAiB,EAAE,KAAK,GAAG,GAAG;QAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;QACxG,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;IACjC,CAAC;IAEO,uBAAuB;QAC7B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACrB,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,sDAAsD;YACnE,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,aAAa;YACxB,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE;YACvF,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;YAC5C,SAAS,EAAE,MAAM;YACjB,UAAU,EAAE,CAAC;YACb,YAAY,EAAE,IAAI;YAClB,gBAAgB,EAAE,KAAK;SACxB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,eAAe,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAEpG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACrB,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,sDAAsD;YACnE,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,gBAAgB;YAC3B,WAAW,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;YAC/D,YAAY,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YACpG,SAAS,EAAE,KAAK;YAChB,UAAU,EAAE,CAAC;YACb,YAAY,EAAE,IAAI;YAClB,gBAAgB,EAAE,KAAK;SACxB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAE9F,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACrB,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,mEAAmE;YAChF,UAAU,EAAE,OAAO;YACnB,SAAS,EAAE,sBAAsB;YACjC,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;YAC9I,YAAY,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YAC1E,SAAS,EAAE,MAAM;YACjB,UAAU,EAAE,CAAC;YACb,YAAY,EAAE,IAAI;YAClB,gBAAgB,EAAE,IAAI;SACvB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;CACF"}

package/dist/tool-runtime/http-executor.d.ts

@@ -0,0 +1,19 @@
+import { type SecureToolApiConfig } from './manifest.js';
+export interface HttpToolExecutionResult {
+    status: number;
+    ok: boolean;
+    body: unknown;
+}
+export type ToolEnvResolver = (name: string) => string | undefined;
+export type ToolFetch = typeof fetch;
+export declare class HttpToolExecutor {
+    private resolveEnv;
+    private fetcher;
+    private oauth;
+    constructor(resolveEnv?: ToolEnvResolver, fetcher?: ToolFetch);
+    execute(api: SecureToolApiConfig, args: Record<string, unknown>): Promise<HttpToolExecutionResult>;
+    private applyAuth;
+    private performFetch;
+    private parseResponse;
+}
+//# sourceMappingURL=http-executor.d.ts.map

package/dist/tool-runtime/http-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-executor.d.ts","sourceRoot":"","sources":["../../src/tool-runtime/http-executor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAmB,KAAK,mBAAmB,EAA6B,MAAM,eAAe,CAAC;AAErG,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;AACnE,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AAErC,qBAAa,gBAAgB;IAGf,OAAO,CAAC,UAAU;IAAiD,OAAO,CAAC,OAAO;IAF9F,OAAO,CAAC,KAAK,CAA4B;gBAErB,UAAU,GAAE,eAA6C,EAAU,OAAO,GAAE,SAAiB;IAI3G,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,uBAAuB,CAAC;YA6B1F,SAAS;YAgBT,YAAY;YAgBZ,aAAa;CAS5B"}

package/dist/tool-runtime/http-executor.js

@@ -0,0 +1,85 @@
+import { buildMultipartFormData } from './multipart.js';
+import { OAuthRefreshTokenProvider } from './oauth.js';
+import { validateToolUrl } from './manifest.js';
+export class HttpToolExecutor {
+    resolveEnv;
+    fetcher;
+    oauth;
+    constructor(resolveEnv = (name) => process.env[name], fetcher = fetch) {
+        this.resolveEnv = resolveEnv;
+        this.fetcher = fetcher;
+        this.oauth = new OAuthRefreshTokenProvider(resolveEnv, fetcher);
+    }
+    async execute(api, args) {
+        const url = validateToolUrl(api.url, api.allowedHosts);
+        const baseHeaders = { accept: 'application/json' };
+        await this.applyAuth(baseHeaders, api.auth, false);
+        let body;
+        if (api.method === 'GET') {
+            for (const [key, value] of Object.entries(args)) {
+                if (typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean')
+                    url.searchParams.set(key, String(value));
+            }
+        }
+        else if (api.bodyType === 'multipart') {
+            body = buildMultipartFormData(api.multipart, args);
+        }
+        else {
+            baseHeaders['content-type'] = 'application/json';
+            body = JSON.stringify(args);
+        }
+        let response = await this.performFetch(api, url, baseHeaders, body);
+        if (response.status === 401 && api.auth?.mode === 'oauth_refresh') {
+            const retryHeaders = { ...baseHeaders };
+            await this.applyAuth(retryHeaders, api.auth, true);
+            response = await this.performFetch(api, url, retryHeaders, body);
+        }
+        const parsed = await this.parseResponse(response);
+        return { status: response.status, ok: response.ok, body: parsed };
+    }
+    async applyAuth(headers, auth, forceRefresh) {
+        if (!auth || auth.mode === 'none')
+            return;
+        if (auth.mode === 'env_ref') {
+            const value = this.resolveEnv(auth.envName || '');
+            if (!value)
+                throw new Error(`Missing environment value for ${auth.envName}`);
+            headers[auth.headerName || 'x-api-key'] = value;
+            return;
+        }
+        if (auth.mode === 'oauth_refresh') {
+            if (!auth.oauth)
+                throw new Error('OAuth auth is missing oauth config');
+            headers.authorization = `Bearer ${await this.oauth.getAccessToken(auth.oauth, forceRefresh)}`;
+            return;
+        }
+        throw new Error(`Unsupported auth mode: ${auth.mode}`);
+    }
+    async performFetch(api, url, headers, body) {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), api.timeoutMs);
+        try {
+            return await this.fetcher(url, {
+                method: api.method,
+                headers,
+                body: body,
+                signal: controller.signal,
+                redirect: 'error',
+            });
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    async parseResponse(response) {
+        const text = await response.text();
+        const limited = text.slice(0, 200_000);
+        try {
+            return limited ? JSON.parse(limited) : null;
+        }
+        catch {
+            return limited;
+        }
+    }
+}
+//# sourceMappingURL=http-executor.js.map

package/dist/tool-runtime/http-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-executor.js","sourceRoot":"","sources":["../../src/tool-runtime/http-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,eAAe,EAAuD,MAAM,eAAe,CAAC;AAWrG,MAAM,OAAO,gBAAgB;IAGP;IAAmE;IAF/E,KAAK,CAA4B;IAEzC,YAAoB,aAA8B,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAU,UAAqB,KAAK;QAA7F,eAAU,GAAV,UAAU,CAA+C;QAAU,YAAO,GAAP,OAAO,CAAmB;QAC/G,IAAI,CAAC,KAAK,GAAG,IAAI,yBAAyB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAwB,EAAE,IAA6B;QACnE,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,WAAW,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QAC3E,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAEnD,IAAI,IAAa,CAAC;QAElB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;oBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACrI,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACxC,IAAI,GAAG,sBAAsB,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YACjD,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QACpE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,KAAK,eAAe,EAAE,CAAC;YAClE,MAAM,YAAY,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;YACxC,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACnD,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAClD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,OAA+B,EAAE,IAAsC,EAAE,YAAqB;QACpH,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO;QAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7E,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,WAAW,CAAC,GAAG,KAAK,CAAC;YAChD,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACvE,OAAO,CAAC,aAAa,GAAG,UAAU,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;YAC9F,OAAO;QACT,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0BAA2B,IAAyB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,GAAwB,EAAE,GAAQ,EAAE,OAA+B,EAAE,IAAa;QAC3G,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC7B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,OAAO;gBACP,IAAI,EAAE,IAAW;gBACjB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,QAAkB;QAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;CACF"}

package/dist/tool-runtime/identity.d.ts

@@ -0,0 +1,25 @@
+export interface SecureToolIdentityProfile {
+    tenantId: string;
+    displayName?: string;
+    allowedTools: string[];
+    variables: Record<string, string | number | boolean>;
+}
+export interface SecureToolIdentityConfig {
+    defaultTenantId: string;
+    profiles: Record<string, Partial<SecureToolIdentityProfile> & {
+        variables?: Record<string, string | number | boolean>;
+    }>;
+}
+export interface SecureToolIdentityResolution {
+    tenantId: string;
+    profile: SecureToolIdentityProfile | null;
+}
+export declare function secureToolIdentityPath(): string;
+export declare function loadSecureToolIdentityConfig(path?: string): SecureToolIdentityConfig;
+export declare class SecureToolIdentityService {
+    private config;
+    constructor(config?: SecureToolIdentityConfig);
+    resolve(chatJid: string, senderJid?: string): SecureToolIdentityResolution;
+    reload(config?: SecureToolIdentityConfig): void;
+}
+//# sourceMappingURL=identity.d.ts.map

package/dist/tool-runtime/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/tool-runtime/identity.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,wBAAwB;IACvC,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,yBAAyB,CAAC,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;CAC1H;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,yBAAyB,GAAG,IAAI,CAAC;CAC3C;AAmBD,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAED,wBAAgB,4BAA4B,CAAC,IAAI,SAA2B,GAAG,wBAAwB,CAatG;AAED,qBAAa,yBAAyB;IACxB,OAAO,CAAC,MAAM;gBAAN,MAAM,GAAE,wBAAyD;IAErF,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,4BAA4B;IAS1E,MAAM,CAAC,MAAM,GAAE,wBAAyD,GAAG,IAAI;CAGhF"}

package/dist/tool-runtime/identity.js

@@ -0,0 +1,55 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function normalizeJid(jid) {
+    return (jid || '').trim().toLowerCase();
+}
+function normalizeProfile(raw, defaultTenantId) {
+    return {
+        tenantId: typeof raw.tenantId === 'string' && raw.tenantId.trim() ? raw.tenantId.trim() : defaultTenantId,
+        displayName: typeof raw.displayName === 'string' ? raw.displayName : undefined,
+        allowedTools: Array.isArray(raw.allowedTools) ? raw.allowedTools.filter((item) => typeof item === 'string' && item.trim().length > 0).map((item) => item.trim()) : [],
+        variables: isRecord(raw.variables) ? Object.fromEntries(Object.entries(raw.variables).filter(([, value]) => typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean')) : {},
+    };
+}
+export function secureToolIdentityPath() {
+    return process.env.CHATBOT_SECURE_TOOL_IDENTITIES_PATH || process.env.SECURE_TOOL_IDENTITIES_PATH || './config/secure-tool-identities.json';
+}
+export function loadSecureToolIdentityConfig(path = secureToolIdentityPath()) {
+    const resolved = resolve(process.cwd(), path);
+    if (!existsSync(resolved))
+        return { defaultTenantId: process.env.SECURE_TOOLS_DEFAULT_TENANT || 'default', profiles: {} };
+    const raw = JSON.parse(readFileSync(resolved, 'utf-8'));
+    if (!isRecord(raw))
+        throw new Error('Secure tool identity config must be an object');
+    const defaultTenantId = typeof raw.defaultTenantId === 'string' && raw.defaultTenantId.trim() ? raw.defaultTenantId.trim() : process.env.SECURE_TOOLS_DEFAULT_TENANT || 'default';
+    const profiles = {};
+    if (isRecord(raw.profiles)) {
+        for (const [jid, profile] of Object.entries(raw.profiles)) {
+            if (isRecord(profile))
+                profiles[normalizeJid(jid)] = profile;
+        }
+    }
+    return { defaultTenantId, profiles };
+}
+export class SecureToolIdentityService {
+    config;
+    constructor(config = loadSecureToolIdentityConfig()) {
+        this.config = config;
+    }
+    resolve(chatJid, senderJid) {
+        const chatKey = normalizeJid(chatJid);
+        const senderKey = normalizeJid(senderJid);
+        const raw = this.config.profiles[chatKey] || (senderKey ? this.config.profiles[senderKey] : undefined);
+        if (!raw)
+            return { tenantId: this.config.defaultTenantId, profile: null };
+        const profile = normalizeProfile(raw, this.config.defaultTenantId);
+        return { tenantId: profile.tenantId, profile };
+    }
+    reload(config = loadSecureToolIdentityConfig()) {
+        this.config = config;
+    }
+}
+//# sourceMappingURL=identity.js.map

package/dist/tool-runtime/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/tool-runtime/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmBpC,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAmG,EAAE,eAAuB;IACpJ,OAAO;QACL,QAAQ,EAAE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,eAAe;QACzG,WAAW,EAAE,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QAC9E,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;QACrL,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,CAAC,CAA8C,CAAC,CAAC,CAAC,EAAE;KACrP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,OAAO,OAAO,CAAC,GAAG,CAAC,mCAAmC,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,sCAAsC,CAAC;AAC9I,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAI,GAAG,sBAAsB,EAAE;IAC1E,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC1H,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAY,CAAC;IACnE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACrF,MAAM,eAAe,GAAG,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,IAAI,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,SAAS,CAAC;IAClL,MAAM,QAAQ,GAAyC,EAAE,CAAC;IAC1D,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1D,IAAI,QAAQ,CAAC,OAAO,CAAC;gBAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,OAAuD,CAAC;QAC/G,CAAC;IACH,CAAC;IACD,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,OAAO,yBAAyB;IAChB;IAApB,YAAoB,SAAmC,4BAA4B,EAAE;QAAjE,WAAM,GAAN,MAAM,CAA2D;IAAG,CAAC;IAEzF,OAAO,CAAC,OAAe,EAAE,SAAkB;QACzC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvG,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC1E,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACnE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,SAAmC,4BAA4B,EAAE;QACtE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF"}

package/dist/tool-runtime/index.d.ts

@@ -0,0 +1,3 @@
+export { ToolRegistry, ToolExecutionRuntime } from './engine.js';
+export type { ToolDefinition, ToolCall, ToolResult, ToolAuditEntry, ToolPermission } from './engine.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/tool-runtime/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tool-runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACjE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC"}

package/dist/tool-runtime/index.js

@@ -0,0 +1,2 @@
+export { ToolRegistry, ToolExecutionRuntime } from './engine.js';
+//# sourceMappingURL=index.js.map

package/dist/tool-runtime/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tool-runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC"}