nduka 1.0.0

package/dist/tool-runtime/mcp-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-executor.d.ts","sourceRoot":"","sources":["../../src/tool-runtime/mcp-executor.ts"],"names":[],"mappings":"AAGA,OAAO,EAA8C,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAErG,MAAM,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;AACnE,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AAkCrC,qBAAa,eAAe;IAGd,OAAO,CAAC,UAAU;IAAiD,OAAO,CAAC,OAAO;IAF9F,OAAO,CAAC,KAAK,CAA4B;gBAErB,UAAU,GAAE,eAA6C,EAAU,OAAO,GAAE,SAAiB;IAI3G,OAAO,CAAC,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;YAmC7E,SAAS;CAexB"}

package/dist/tool-runtime/mcp-executor.js

@@ -0,0 +1,102 @@
+import { randomUUID } from 'node:crypto';
+import { OAuthRefreshTokenProvider } from './oauth.js';
+import { validateToolUrl } from './manifest.js';
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function parseJsonRpcBody(text) {
+    try {
+        return text ? JSON.parse(text) : null;
+    }
+    catch {
+        throw new Error('MCP server returned non-JSON response');
+    }
+}
+function contentToData(result) {
+    if ('structuredContent' in result)
+        return result.structuredContent;
+    const content = result.content;
+    if (Array.isArray(content)) {
+        const text = content
+            .filter((item) => isRecord(item) && item.type === 'text' && typeof item.text === 'string')
+            .map((item) => item.text)
+            .join('\n')
+            .trim();
+        if (text) {
+            try {
+                return JSON.parse(text);
+            }
+            catch {
+                throw new Error('MCP tool returned unstructured text instead of structured data');
+            }
+        }
+    }
+    return result;
+}
+export class McpToolExecutor {
+    resolveEnv;
+    fetcher;
+    oauth;
+    constructor(resolveEnv = (name) => process.env[name], fetcher = fetch) {
+        this.resolveEnv = resolveEnv;
+        this.fetcher = fetcher;
+        this.oauth = new OAuthRefreshTokenProvider(resolveEnv, fetcher);
+    }
+    async execute(config, args) {
+        if (!config.endpointUrl)
+            throw new Error(`MCP server ${config.serverName} is missing endpointUrl`);
+        const url = validateToolUrl(config.endpointUrl, config.allowedHosts || []);
+        const headers = { accept: 'application/json', 'content-type': 'application/json' };
+        await this.applyAuth(headers, config.auth);
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), config.timeoutMs || 30_000);
+        try {
+            const response = await this.fetcher(url, {
+                method: 'POST',
+                headers,
+                body: JSON.stringify({
+                    jsonrpc: '2.0',
+                    id: randomUUID(),
+                    method: 'tools/call',
+                    params: { name: config.toolName, arguments: args },
+                }),
+                signal: controller.signal,
+                redirect: 'error',
+            });
+            const body = parseJsonRpcBody(await response.text());
+            if (!response.ok)
+                throw new Error(`MCP HTTP request failed with status ${response.status}`);
+            if (!isRecord(body))
+                throw new Error('MCP server returned invalid JSON-RPC response');
+            if (isRecord(body.error))
+                throw new Error(`MCP tool error: ${String(body.error.message || body.error.code || 'unknown error')}`);
+            if (!isRecord(body.result))
+                throw new Error('MCP response is missing result object');
+            if (body.result.isError === true)
+                throw new Error(`MCP tool execution failed: ${JSON.stringify(body.result).slice(0, 500)}`);
+            return contentToData(body.result);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    async applyAuth(headers, auth) {
+        if (!auth || auth.mode === 'none')
+            return;
+        if (auth.mode === 'env_ref') {
+            const value = this.resolveEnv(auth.envName || '');
+            if (!value)
+                throw new Error(`Missing environment value for ${auth.envName}`);
+            headers[auth.headerName || 'authorization'] = value;
+            return;
+        }
+        if (auth.mode === 'oauth_refresh') {
+            if (!auth.oauth)
+                throw new Error('MCP OAuth auth is missing oauth config');
+            headers.authorization = `Bearer ${await this.oauth.getAccessToken(auth.oauth)}`;
+            return;
+        }
+        throw new Error(`Unsupported MCP auth mode: ${auth.mode}`);
+    }
+}
+//# sourceMappingURL=mcp-executor.js.map

package/dist/tool-runtime/mcp-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-executor.js","sourceRoot":"","sources":["../../src/tool-runtime/mcp-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,eAAe,EAAuD,MAAM,eAAe,CAAC;AAKrG,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,MAA+B;IACpD,IAAI,mBAAmB,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,iBAAiB,CAAC;IACnE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,OAAO;aACjB,MAAM,CAAC,CAAC,IAAI,EAAmC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;aAC1H,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;aACxB,IAAI,CAAC,IAAI,CAAC;aACV,IAAI,EAAE,CAAC;QACV,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,eAAe;IAGN;IAAmE;IAF/E,KAAK,CAA4B;IAEzC,YAAoB,aAA8B,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAU,UAAqB,KAAK;QAA7F,eAAU,GAAV,UAAU,CAA+C;QAAU,YAAO,GAAP,OAAO,CAAmB;QAC/G,IAAI,CAAC,KAAK,GAAG,IAAI,yBAAyB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAA2B,EAAE,IAA6B;QACtE,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,MAAM,CAAC,UAAU,yBAAyB,CAAC,CAAC;QACnG,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAC3E,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QAC3G,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAE3C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;QAE/E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;gBACvC,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,EAAE,EAAE,UAAU,EAAE;oBAChB,MAAM,EAAE,YAAY;oBACpB,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE;iBACnD,CAAC;gBACF,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5F,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACtF,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC,EAAE,CAAC,CAAC;YACjI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACrF,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC7H,OAAO,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,OAA+B,EAAE,IAAsC;QAC7F,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO;QAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7E,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,eAAe,CAAC,GAAG,KAAK,CAAC;YACpD,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC3E,OAAO,CAAC,aAAa,GAAG,UAAU,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAChF,OAAO;QACT,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8BAA+B,IAAyB,CAAC,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;CACF"}

package/dist/tool-runtime/multipart.d.ts

@@ -0,0 +1,12 @@
+export interface SecureToolMultipartFileConfig {
+    source: 'argument';
+    argumentName?: string;
+    allowedMimeTypes?: string[];
+    maxBytes?: number;
+}
+export interface SecureToolMultipartConfig {
+    fields?: Record<string, string>;
+    files?: Record<string, SecureToolMultipartFileConfig>;
+}
+export declare function buildMultipartFormData(config: SecureToolMultipartConfig | undefined, args: Record<string, unknown>): FormData;
+//# sourceMappingURL=multipart.d.ts.map

package/dist/tool-runtime/multipart.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multipart.d.ts","sourceRoot":"","sources":["../../src/tool-runtime/multipart.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,UAAU,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;CACvD;AA0BD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,yBAAyB,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,QAAQ,CA6B7H"}

package/dist/tool-runtime/multipart.js

@@ -0,0 +1,47 @@
+import { Buffer } from 'node:buffer';
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function safeFilename(value, fallback) {
+    const base = (value || fallback).split(/[\\/]/).pop() || fallback;
+    return base.replace(/[^A-Za-z0-9._-]/g, '_').slice(0, 120) || fallback;
+}
+function fileValue(value, fieldName) {
+    if (!isRecord(value))
+        throw new Error(`Multipart file ${fieldName} must be an object`);
+    return {
+        filename: typeof value.filename === 'string' ? value.filename : undefined,
+        mimeType: typeof value.mimeType === 'string' ? value.mimeType : undefined,
+        dataBase64: typeof value.dataBase64 === 'string' ? value.dataBase64 : undefined,
+    };
+}
+export function buildMultipartFormData(config, args) {
+    const form = new FormData();
+    for (const [fieldName, argName] of Object.entries(config?.fields || {})) {
+        const value = args[argName];
+        if (value === undefined || value === null)
+            continue;
+        if (typeof value !== 'string' && typeof value !== 'number' && typeof value !== 'boolean') {
+            throw new Error(`Multipart field ${fieldName} must be string, number, or boolean`);
+        }
+        form.append(fieldName, String(value));
+    }
+    for (const [fieldName, fileConfig] of Object.entries(config?.files || {})) {
+        const argName = fileConfig.argumentName || fieldName;
+        const value = fileValue(args[argName], argName);
+        if (!value.dataBase64)
+            throw new Error(`Multipart file ${fieldName} is missing dataBase64`);
+        const mimeType = value.mimeType || 'application/octet-stream';
+        if (fileConfig.allowedMimeTypes && !fileConfig.allowedMimeTypes.includes(mimeType)) {
+            throw new Error(`Multipart file ${fieldName} mime type is not allowed: ${mimeType}`);
+        }
+        const bytes = Buffer.from(value.dataBase64, 'base64');
+        if (fileConfig.maxBytes && bytes.byteLength > fileConfig.maxBytes) {
+            throw new Error(`Multipart file ${fieldName} exceeds maxBytes`);
+        }
+        const filename = safeFilename(value.filename, `${fieldName}.bin`);
+        form.append(fieldName, new Blob([bytes], { type: mimeType }), filename);
+    }
+    return form;
+}
+//# sourceMappingURL=multipart.js.map

package/dist/tool-runtime/multipart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multipart.js","sourceRoot":"","sources":["../../src/tool-runtime/multipart.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAoBrC,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,QAAgB;IAC/D,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,QAAQ,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,QAAQ,CAAC;IAClE,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,SAAiB;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,oBAAoB,CAAC,CAAC;IACvF,OAAO;QACL,QAAQ,EAAE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACzE,QAAQ,EAAE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QACzE,UAAU,EAAE,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAA6C,EAAE,IAA6B;IACjH,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;IAE5B,KAAK,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YACzF,MAAM,IAAI,KAAK,CAAC,mBAAmB,SAAS,qCAAqC,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1E,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,IAAI,SAAS,CAAC;QACrD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,wBAAwB,CAAC,CAAC;QAC5F,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,0BAA0B,CAAC;QAC9D,IAAI,UAAU,CAAC,gBAAgB,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,8BAA8B,QAAQ,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,UAAU,CAAC,QAAQ,IAAI,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,kBAAkB,SAAS,mBAAmB,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,SAAS,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/tool-runtime/oauth.d.ts

@@ -0,0 +1,18 @@
+export interface OAuthRefreshConfig {
+    tokenUrl: string;
+    allowedHosts: string[];
+    clientIdEnvName?: string;
+    clientSecretEnvName?: string;
+    refreshTokenEnvName: string;
+    scope?: string;
+}
+export type ToolEnvResolver = (name: string) => string | undefined;
+export type ToolFetch = typeof fetch;
+export declare class OAuthRefreshTokenProvider {
+    private resolveEnv;
+    private fetcher;
+    private cache;
+    constructor(resolveEnv?: ToolEnvResolver, fetcher?: ToolFetch);
+    getAccessToken(config: OAuthRefreshConfig, forceRefresh?: boolean): Promise<string>;
+}
+//# sourceMappingURL=oauth.d.ts.map

package/dist/tool-runtime/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/tool-runtime/oauth.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;AACnE,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AA4BrC,qBAAa,yBAAyB;IAGxB,OAAO,CAAC,UAAU;IAAiD,OAAO,CAAC,OAAO;IAF9F,OAAO,CAAC,KAAK,CAAkC;gBAE3B,UAAU,GAAE,eAA6C,EAAU,OAAO,GAAE,SAAiB;IAE3G,cAAc,CAAC,MAAM,EAAE,kBAAkB,EAAE,YAAY,UAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;CAgDxF"}

package/dist/tool-runtime/oauth.js

@@ -0,0 +1,80 @@
+function validateHttpsUrl(rawUrl, allowedHosts) {
+    let url;
+    try {
+        url = new URL(rawUrl);
+    }
+    catch {
+        throw new Error(`Invalid OAuth token URL: ${rawUrl}`);
+    }
+    if (url.protocol !== 'https:')
+        throw new Error('OAuth token URL must use HTTPS');
+    const host = url.hostname.toLowerCase();
+    if (!allowedHosts.map((item) => item.toLowerCase()).includes(host))
+        throw new Error(`OAuth token URL host is not allowlisted: ${host}`);
+    return url;
+}
+function requiredEnv(resolveEnv, name, label) {
+    if (!name)
+        throw new Error(`${label} envName is required`);
+    const value = resolveEnv(name);
+    if (!value)
+        throw new Error(`Missing environment value for ${name}`);
+    return value;
+}
+export class OAuthRefreshTokenProvider {
+    resolveEnv;
+    fetcher;
+    cache = new Map();
+    constructor(resolveEnv = (name) => process.env[name], fetcher = fetch) {
+        this.resolveEnv = resolveEnv;
+        this.fetcher = fetcher;
+    }
+    async getAccessToken(config, forceRefresh = false) {
+        const cacheKey = `${config.tokenUrl}:${config.refreshTokenEnvName}`;
+        const cached = this.cache.get(cacheKey);
+        if (!forceRefresh && cached && cached.expiresAt > Date.now() + 30_000)
+            return cached.accessToken;
+        const tokenUrl = validateHttpsUrl(config.tokenUrl, config.allowedHosts);
+        const refreshToken = cached?.refreshToken || requiredEnv(this.resolveEnv, config.refreshTokenEnvName, 'refreshToken');
+        const body = new URLSearchParams();
+        body.set('grant_type', 'refresh_token');
+        body.set('refresh_token', refreshToken);
+        if (config.scope)
+            body.set('scope', config.scope);
+        const headers = { accept: 'application/json', 'content-type': 'application/x-www-form-urlencoded' };
+        const clientId = config.clientIdEnvName ? this.resolveEnv(config.clientIdEnvName) : undefined;
+        const clientSecret = config.clientSecretEnvName ? this.resolveEnv(config.clientSecretEnvName) : undefined;
+        if (clientId && clientSecret) {
+            headers.authorization = `Basic ${Buffer.from(`${clientId}:${clientSecret}`).toString('base64')}`;
+        }
+        else if (clientId) {
+            body.set('client_id', clientId);
+        }
+        const response = await this.fetcher(tokenUrl, {
+            method: 'POST',
+            headers,
+            body,
+            redirect: 'error',
+        });
+        const text = await response.text();
+        let parsed;
+        try {
+            parsed = text ? JSON.parse(text) : {};
+        }
+        catch {
+            parsed = { error: text.slice(0, 500) };
+        }
+        if (!response.ok || typeof parsed !== 'object' || parsed === null || !('access_token' in parsed)) {
+            throw new Error(`OAuth refresh failed with HTTP ${response.status}`);
+        }
+        const record = parsed;
+        const accessToken = typeof record.access_token === 'string' ? record.access_token : '';
+        if (!accessToken)
+            throw new Error('OAuth refresh response did not include access_token');
+        const nextRefreshToken = typeof record.refresh_token === 'string' && record.refresh_token ? record.refresh_token : refreshToken;
+        const expiresIn = typeof record.expires_in === 'number' && Number.isFinite(record.expires_in) ? record.expires_in : 3600;
+        this.cache.set(cacheKey, { accessToken, refreshToken: nextRefreshToken, expiresAt: Date.now() + Math.max(60, expiresIn) * 1000 });
+        return accessToken;
+    }
+}
+//# sourceMappingURL=oauth.js.map

package/dist/tool-runtime/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/tool-runtime/oauth.ts"],"names":[],"mappings":"AAkBA,SAAS,gBAAgB,CAAC,MAAc,EAAE,YAAsB;IAC9D,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;IACxI,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,UAA2B,EAAE,IAAwB,EAAE,KAAa;IACvF,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,yBAAyB;IAGhB;IAAmE;IAF/E,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE/C,YAAoB,aAA8B,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAU,UAAqB,KAAK;QAA7F,eAAU,GAAV,UAAU,CAA+C;QAAU,YAAO,GAAP,OAAO,CAAmB;IAAG,CAAC;IAErH,KAAK,CAAC,cAAc,CAAC,MAA0B,EAAE,YAAY,GAAG,KAAK;QACnE,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,YAAY,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;YAAE,OAAO,MAAM,CAAC,WAAW,CAAC;QAEjG,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;QACxE,MAAM,YAAY,GAAG,MAAM,EAAE,YAAY,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;QACtH,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,KAAK;YAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAElD,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,mCAAmC,EAAE,CAAC;QAC5H,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9F,MAAM,YAAY,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1G,IAAI,QAAQ,IAAI,YAAY,EAAE,CAAC;YAC7B,OAAO,CAAC,aAAa,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnG,CAAC;aAAM,IAAI,QAAQ,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;YAC5C,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI;YACJ,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACzC,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC,EAAE,CAAC;YACjG,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,MAAM,GAAG,MAAiC,CAAC;QACjD,MAAM,WAAW,GAAG,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzF,MAAM,gBAAgB,GAAG,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC;QAChI,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QACzH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QAClI,OAAO,WAAW,CAAC;IACrB,CAAC;CACF"}

package/dist/tool-runtime/orchestrator.d.ts

@@ -0,0 +1,38 @@
+import { ToolExecutionRuntime, type ToolDefinition, type ToolResult } from './engine.js';
+import { HttpToolExecutor } from './http-executor.js';
+import { McpToolExecutor } from './mcp-executor.js';
+import { type SecureToolManifest } from './manifest.js';
+import { ToolCallPlanner, type ToolCallPlan } from './planner.js';
+import type { ToolActorRole } from './policy.js';
+import { type SecureToolResponseConfig } from './response-template.js';
+export interface SecureToolContext {
+    text: string;
+    tenantId: string;
+    userId: string;
+    chatId: string;
+    actorRole: ToolActorRole;
+    approved?: boolean;
+}
+export interface SecureToolHandleResult {
+    handled: boolean;
+    reply: string;
+    plan?: ToolCallPlan;
+    result?: ToolResult;
+}
+export declare function formatSecureToolSuccess(toolName: string, data: unknown, response?: SecureToolResponseConfig): string;
+export declare function formatSecureToolPolicyReply(result: ToolResult, toolName: string, response?: SecureToolResponseConfig): string;
+export declare class SecureToolOrchestrator {
+    private runtime;
+    private planner;
+    private responses;
+    constructor(runtime: ToolExecutionRuntime, planner: ToolCallPlanner, responses?: Map<string, SecureToolResponseConfig | undefined>);
+    static fromManifest(manifest: SecureToolManifest, planner: ToolCallPlanner, httpExecutor?: HttpToolExecutor, mcpExecutor?: McpToolExecutor): SecureToolOrchestrator;
+    grantPermission(tenantId: string, toolName: string): void;
+    getToolDefinitions(): ToolDefinition[];
+    getAuditTrail(tenantId?: string, limit?: number): import("./engine.js").ToolAuditEntry[];
+    plan(text: string): Promise<ToolCallPlan>;
+    executePlan(context: SecureToolContext, plan: ToolCallPlan): Promise<SecureToolHandleResult | null>;
+    handle(context: SecureToolContext): Promise<SecureToolHandleResult | null>;
+}
+export declare function registerManifestTools(runtime: ToolExecutionRuntime, manifest: SecureToolManifest, httpExecutor?: HttpToolExecutor, mcpExecutor?: McpToolExecutor): void;
+//# sourceMappingURL=orchestrator.d.ts.map

package/dist/tool-runtime/orchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../../src/tool-runtime/orchestrator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,KAAK,kBAAkB,EAA+B,MAAM,eAAe,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAA0D,KAAK,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAG/H,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,aAAa,CAAC;IACzB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AASD,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,wBAAwB,GAAG,MAAM,CAEpH;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,wBAAwB,GAAG,MAAM,CAE7H;AAED,qBAAa,sBAAsB;IAE/B,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,SAAS;gBAFT,OAAO,EAAE,oBAAoB,EAC7B,OAAO,EAAE,eAAe,EACxB,SAAS,GAAE,GAAG,CAAC,MAAM,EAAE,wBAAwB,GAAG,SAAS,CAAa;IAGlF,MAAM,CAAC,YAAY,CACjB,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,eAAe,EACxB,YAAY,mBAAyB,EACrC,WAAW,kBAAwB,GAClC,sBAAsB;IAMzB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;IAIzD,kBAAkB,IAAI,cAAc,EAAE;IAItC,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,SAAM;IAItC,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAKzC,WAAW,CAAC,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAqBnG,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;CAGjF;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,oBAAoB,EAC7B,QAAQ,EAAE,kBAAkB,EAC5B,YAAY,mBAAyB,EACrC,WAAW,kBAAwB,GAClC,IAAI,CAEN"}

package/dist/tool-runtime/orchestrator.js

@@ -0,0 +1,117 @@
+import { randomUUID } from 'node:crypto';
+import { ToolExecutionRuntime } from './engine.js';
+import { HttpToolExecutor } from './http-executor.js';
+import { McpToolExecutor } from './mcp-executor.js';
+import { formatConfiguredToolError, formatConfiguredToolSuccess } from './response-template.js';
+import { runSecureToolWorkflow } from './workflow-runner.js';
+function formatPolicyReply(result, toolName, response) {
+    if (result.policyDecision === 'confirmation_required') {
+        return `I can use ${toolName}, but I need approval before checking that information. Reply with approval and the exact details you want checked.`;
+    }
+    return formatConfiguredToolError(toolName, result.error, response);
+}
+export function formatSecureToolSuccess(toolName, data, response) {
+    return formatConfiguredToolSuccess(toolName, data, response);
+}
+export function formatSecureToolPolicyReply(result, toolName, response) {
+    return formatPolicyReply(result, toolName, response);
+}
+export class SecureToolOrchestrator {
+    runtime;
+    planner;
+    responses;
+    constructor(runtime, planner, responses = new Map()) {
+        this.runtime = runtime;
+        this.planner = planner;
+        this.responses = responses;
+    }
+    static fromManifest(manifest, planner, httpExecutor = new HttpToolExecutor(), mcpExecutor = new McpToolExecutor()) {
+        const runtime = new ToolExecutionRuntime(false);
+        registerManifestTools(runtime, manifest, httpExecutor, mcpExecutor);
+        return new SecureToolOrchestrator(runtime, planner, new Map(manifest.tools.map((tool) => [tool.name, tool.response])));
+    }
+    grantPermission(tenantId, toolName) {
+        this.runtime.grantPermission(tenantId, toolName);
+    }
+    getToolDefinitions() {
+        return this.runtime.getRegistry().listTools();
+    }
+    getAuditTrail(tenantId, limit = 100) {
+        return this.runtime.getAuditTrail(tenantId, limit);
+    }
+    async plan(text) {
+        const tools = this.getToolDefinitions().filter((tool) => tool.enabled !== false);
+        return this.planner.plan(text, tools);
+    }
+    async executePlan(context, plan) {
+        if (plan.action === 'none')
+            return null;
+        if (plan.action === 'clarify')
+            return { handled: true, reply: plan.reason || 'I need one more detail before I can use that tool.', plan };
+        if (!plan.toolName)
+            return null;
+        const response = this.responses.get(plan.toolName);
+        const result = await this.runtime.execute({
+            id: randomUUID(),
+            toolName: plan.toolName,
+            arguments: plan.arguments || {},
+            tenantId: context.tenantId,
+            userId: context.userId,
+            chatId: context.chatId,
+            executionId: randomUUID(),
+            timestamp: Date.now(),
+            actorRole: context.actorRole,
+            approved: context.approved,
+        });
+        if (!result.success)
+            return { handled: true, reply: formatPolicyReply(result, plan.toolName, response), plan, result };
+        return { handled: true, reply: formatConfiguredToolSuccess(plan.toolName, result.data, response), plan, result };
+    }
+    async handle(context) {
+        return this.executePlan(context, await this.plan(context.text));
+    }
+}
+export function registerManifestTools(runtime, manifest, httpExecutor = new HttpToolExecutor(), mcpExecutor = new McpToolExecutor()) {
+    for (const tool of manifest.tools.filter((item) => item.enabled !== false))
+        runtime.registerManifestTool(tool, executorForTool(tool, manifest, runtime, httpExecutor, mcpExecutor));
+}
+function executorForTool(tool, manifest, runtime, httpExecutor, mcpExecutor) {
+    if (tool.type === 'mock')
+        return async () => tool.mockResponse || {};
+    if (tool.type === 'http' || tool.type === 'webhook') {
+        if (!tool.api)
+            throw new Error(`HTTP/webhook tool ${tool.name} is missing api config`);
+        return async (args) => httpExecutor.execute(tool.api, args);
+    }
+    if (tool.type === 'mcp') {
+        if (!tool.mcp)
+            throw new Error(`MCP tool ${tool.name} is missing mcp config`);
+        return async (args) => mcpExecutor.execute(tool.mcp, args);
+    }
+    if (tool.type === 'workflow') {
+        if (!tool.workflow)
+            throw new Error(`Workflow tool ${tool.name} is missing workflow config`);
+        return async (args) => runSecureToolWorkflow(tool.workflow.steps, args, {
+            executeTool: (toolName, toolArgs) => {
+                if (!manifest.tools.some((item) => item.name === toolName))
+                    throw new Error(`Workflow references unknown tool: ${toolName}`);
+                const tenantId = String(args.tenantId || 'default');
+                runtime.grantPermission(tenantId, toolName);
+                return runtime.execute({
+                    id: randomUUID(),
+                    toolName,
+                    arguments: toolArgs,
+                    tenantId,
+                    userId: String(args.userId || 'workflow'),
+                    chatId: String(args.chatJid || 'workflow'),
+                    executionId: randomUUID(),
+                    timestamp: Date.now(),
+                    actorRole: 'customer',
+                    approved: true,
+                });
+            },
+        });
+    }
+    return undefined;
+}
+//# sourceMappingURL=orchestrator.js.map

package/dist/tool-runtime/orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.js","sourceRoot":"","sources":["../../src/tool-runtime/orchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,oBAAoB,EAAwC,MAAM,aAAa,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAIpD,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAiC,MAAM,wBAAwB,CAAC;AAC/H,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAkB7D,SAAS,iBAAiB,CAAC,MAAkB,EAAE,QAAgB,EAAE,QAAmC;IAClG,IAAI,MAAM,CAAC,cAAc,KAAK,uBAAuB,EAAE,CAAC;QACtD,OAAO,aAAa,QAAQ,qHAAqH,CAAC;IACpJ,CAAC;IACD,OAAO,yBAAyB,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAgB,EAAE,IAAa,EAAE,QAAmC;IAC1G,OAAO,2BAA2B,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAkB,EAAE,QAAgB,EAAE,QAAmC;IACnH,OAAO,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,OAAO,sBAAsB;IAEvB;IACA;IACA;IAHV,YACU,OAA6B,EAC7B,OAAwB,EACxB,YAA+D,IAAI,GAAG,EAAE;QAFxE,YAAO,GAAP,OAAO,CAAsB;QAC7B,YAAO,GAAP,OAAO,CAAiB;QACxB,cAAS,GAAT,SAAS,CAA+D;IAC/E,CAAC;IAEJ,MAAM,CAAC,YAAY,CACjB,QAA4B,EAC5B,OAAwB,EACxB,YAAY,GAAG,IAAI,gBAAgB,EAAE,EACrC,WAAW,GAAG,IAAI,eAAe,EAAE;QAEnC,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAChD,qBAAqB,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QACpE,OAAO,IAAI,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACzH,CAAC;IAED,eAAe,CAAC,QAAgB,EAAE,QAAgB;QAChD,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,CAAC;IAChD,CAAC;IAED,aAAa,CAAC,QAAiB,EAAE,KAAK,GAAG,GAAG;QAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAA0B,EAAE,IAAkB;QAC9D,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,IAAI,oDAAoD,EAAE,IAAI,EAAE,CAAC;QAC1I,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YACxC,EAAE,EAAE,UAAU,EAAE;YAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,EAAE;YAC/B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,WAAW,EAAE,UAAU,EAAE;YACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACvH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,2BAA2B,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAA0B;QACrC,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CACnC,OAA6B,EAC7B,QAA4B,EAC5B,YAAY,GAAG,IAAI,gBAAgB,EAAE,EACrC,WAAW,GAAG,IAAI,eAAe,EAAE;IAEnC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC;QAAE,OAAO,CAAC,oBAAoB,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;AACtL,CAAC;AAED,SAAS,eAAe,CACtB,IAA4B,EAC5B,QAA4B,EAC5B,OAA6B,EAC7B,YAA8B,EAC9B,WAA4B;IAE5B,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;IACrE,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,IAAI,wBAAwB,CAAC,CAAC;QACvF,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,GAAI,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,IAAI,wBAAwB,CAAC,CAAC;QAC9E,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,GAAI,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,IAAI,6BAA6B,CAAC,CAAC;QAC7F,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,QAAS,CAAC,KAAK,EAAE,IAAI,EAAE;YACvE,WAAW,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE;gBAClC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;gBAC7H,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,CAAC;gBACpD,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBAC5C,OAAO,OAAO,CAAC,OAAO,CAAC;oBACrB,EAAE,EAAE,UAAU,EAAE;oBAChB,QAAQ;oBACR,SAAS,EAAE,QAAQ;oBACnB,QAAQ;oBACR,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC;oBACzC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC;oBAC1C,WAAW,EAAE,UAAU,EAAE;oBACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,SAAS,EAAE,UAAU;oBACrB,QAAQ,EAAE,IAAI;iBACf,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/tool-runtime/planner.d.ts

@@ -0,0 +1,23 @@
+import type { ToolDefinition } from './engine.js';
+export type ToolPlanAction = 'tool_call' | 'none' | 'clarify';
+export interface ToolCallPlan {
+    action: ToolPlanAction;
+    toolName?: string;
+    arguments?: Record<string, unknown>;
+    confidence: number;
+    reason?: string;
+}
+export type ToolPlannerCompletion = (prompt: string) => Promise<string>;
+export interface ToolCallPlannerOptions {
+    minimumConfidence?: number;
+}
+export declare class ToolCallPlanner {
+    private complete;
+    private minimumConfidence;
+    constructor(complete: ToolPlannerCompletion, options?: ToolCallPlannerOptions);
+    buildPrompt(userMessage: string, tools: ToolDefinition[]): string;
+    plan(userMessage: string, tools: ToolDefinition[]): Promise<ToolCallPlan>;
+    parsePlan(raw: string): ToolCallPlan;
+    validatePlan(plan: ToolCallPlan, tools: ToolDefinition[]): ToolCallPlan;
+}
+//# sourceMappingURL=planner.d.ts.map

package/dist/tool-runtime/planner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"planner.d.ts","sourceRoot":"","sources":["../../src/tool-runtime/planner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,MAAM,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAExE,MAAM,WAAW,sBAAsB;IACrC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAsDD,qBAAa,eAAe;IAGd,OAAO,CAAC,QAAQ;IAF5B,OAAO,CAAC,iBAAiB,CAAS;gBAEd,QAAQ,EAAE,qBAAqB,EAAE,OAAO,GAAE,sBAA2B;IAIzF,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,MAAM;IAsB3D,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAM/E,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY;IAoBpC,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,YAAY;CAUxE"}

package/dist/tool-runtime/planner.js

@@ -0,0 +1,126 @@
+function stripReasoning(text) {
+    return text
+        .replace(/<think>[\s\S]*?<\/think>/gi, '')
+        .replace(/<reasoning>[\s\S]*?<\/reasoning>/gi, '')
+        .trim();
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function extractJsonObject(text) {
+    const cleaned = stripReasoning(text);
+    const fenced = cleaned.match(/```(?:json)?\s*([\s\S]*?)```/i);
+    if (fenced?.[1])
+        return fenced[1].trim();
+    const start = cleaned.indexOf('{');
+    const end = cleaned.lastIndexOf('}');
+    if (start === -1 || end === -1 || end <= start)
+        return null;
+    return cleaned.slice(start, end + 1);
+}
+function toNumber(value, fallback) {
+    return typeof value === 'number' && Number.isFinite(value) ? value : fallback;
+}
+function allowedArgNames(tool) {
+    return new Set(Object.keys(tool.inputSchema));
+}
+function validateArguments(tool, args) {
+    const errors = [];
+    const allowed = allowedArgNames(tool);
+    for (const key of Object.keys(args)) {
+        if (!allowed.has(key))
+            errors.push(`Unexpected argument: ${key}`);
+    }
+    for (const [key, schema] of Object.entries(tool.inputSchema)) {
+        if (schema.required && !(key in args))
+            errors.push(`Missing required argument: ${key}`);
+        if (key in args) {
+            const value = args[key];
+            const actual = Array.isArray(value) ? 'array' : typeof value;
+            if (schema.type === 'array') {
+                if (!Array.isArray(value))
+                    errors.push(`Invalid argument type for ${key}: expected array, got ${actual}`);
+            }
+            else if (schema.type === 'object') {
+                if (!isRecord(value))
+                    errors.push(`Invalid argument type for ${key}: expected object, got ${actual}`);
+            }
+            else if (actual !== schema.type) {
+                errors.push(`Invalid argument type for ${key}: expected ${schema.type}, got ${actual}`);
+            }
+        }
+    }
+    return errors;
+}
+export class ToolCallPlanner {
+    complete;
+    minimumConfidence;
+    constructor(complete, options = {}) {
+        this.complete = complete;
+        this.minimumConfidence = options.minimumConfidence ?? 0.75;
+    }
+    buildPrompt(userMessage, tools) {
+        const safeTools = tools.map((tool) => ({
+            name: tool.name,
+            description: tool.description,
+            naturalLanguage: tool.naturalLanguage || null,
+            inputSchema: tool.inputSchema,
+            riskLevel: tool.riskLevel || tool.permission,
+            requiresApproval: tool.requiresApproval,
+        }));
+        return [
+            'You are a tool-call planner for a WhatsApp business assistant.',
+            'Decide whether the user request should call exactly one available tool.',
+            'Use each tool naturalLanguage.useWhen, naturalLanguage.triggerPhrases, and naturalLanguage.examples as the routing guide. Do not use hardcoded business categories.',
+            'Return only JSON with this shape:',
+            '{"action":"tool_call|none|clarify","toolName":null,"arguments":{},"confidence":0,"reason":"brief"}',
+            'Never invent tools or arguments. Never execute tools. If required details are missing, use action clarify.',
+            '',
+            `Available tools: ${JSON.stringify(safeTools)}`,
+            `User message: ${JSON.stringify(userMessage)}`,
+        ].join('\n');
+    }
+    async plan(userMessage, tools) {
+        if (tools.length === 0)
+            return { action: 'none', confidence: 0, reason: 'No tools available' };
+        const raw = await this.complete(this.buildPrompt(userMessage, tools));
+        return this.validatePlan(this.parsePlan(raw), tools);
+    }
+    parsePlan(raw) {
+        const json = extractJsonObject(raw);
+        if (!json)
+            return { action: 'none', confidence: 0, reason: 'Planner did not return JSON' };
+        try {
+            const parsed = JSON.parse(json);
+            if (!isRecord(parsed))
+                return { action: 'none', confidence: 0, reason: 'Planner JSON was not an object' };
+            const action = parsed.action === 'tool_call' || parsed.action === 'clarify' || parsed.action === 'none' ? parsed.action : 'none';
+            const args = isRecord(parsed.arguments) ? parsed.arguments : {};
+            return {
+                action,
+                toolName: typeof parsed.toolName === 'string' ? parsed.toolName : undefined,
+                arguments: args,
+                confidence: toNumber(parsed.confidence, 0),
+                reason: typeof parsed.reason === 'string' ? parsed.reason : undefined,
+            };
+        }
+        catch {
+            return { action: 'none', confidence: 0, reason: 'Planner JSON could not be parsed' };
+        }
+    }
+    validatePlan(plan, tools) {
+        if (plan.action !== 'tool_call')
+            return plan;
+        if (plan.confidence < this.minimumConfidence)
+            return { action: 'clarify', confidence: plan.confidence, toolName: plan.toolName, arguments: plan.arguments || {}, reason: 'Planner confidence was too low' };
+        const tool = tools.find((item) => item.name === plan.toolName);
+        if (!tool)
+            return { action: 'none', confidence: 0, reason: 'Planner selected an unavailable tool' };
+        const args = plan.arguments || {};
+        const errors = validateArguments(tool, args);
+        if (errors.length > 0)
+            return { action: 'clarify', confidence: plan.confidence, toolName: tool.name, arguments: args, reason: errors.join(', ') };
+        return { ...plan, toolName: tool.name, arguments: args };
+    }
+}
+//# sourceMappingURL=planner.js.map