pi-forge 0.0.0 → 1.1.4

package/dist/server/sse-bridge.js

@@ -0,0 +1,220 @@
+import { randomUUID } from "node:crypto";
+/**
+ * Per-client outbound-buffer cap. When Node's internal socket buffer
+ * for a given client exceeds this many bytes, we drop the client
+ * rather than retain it indefinitely. A wedged consumer (paused tab,
+ * stopped-reading client, ws-proxy that buffers without flushing)
+ * can otherwise balloon resident memory by hundreds of MB during a
+ * verbose tool execution before the kernel forces socket close.
+ *
+ * 256 KB matches roughly 50-100 typical events worth of unflushed
+ * data — well above any legitimate transient buffering and below
+ * the threshold where memory pressure starts mattering.
+ */
+const BACKPRESSURE_LIMIT_BYTES = 256 * 1024;
+/**
+ * Cadence at which we send an SSE comment line (`: heartbeat\n\n`) on
+ * every open stream. EventSource ignores comment lines silently, so the
+ * browser sees nothing — but the bytes reset any idle-connection timer
+ * sitting between us and the client. OpenShift's HAProxy router defaults
+ * `timeout server` to 30s for HTTP routes, and any L7 proxy / load
+ * balancer enforces a similar window; with no agent activity between
+ * turns, an idle SSE stream gets killed by the middlebox and the
+ * browser shows "reconnecting." 20s gives us comfortable margin under
+ * the typical 30s default.
+ */
+const HEARTBEAT_INTERVAL_MS = 20_000;
+/**
+ * Event types we forward to browser clients. Anything else from the SDK is
+ * dropped on the floor — keeps the wire stream stable across SDK upgrades and
+ * matches the dev-plan catalog.
+ */
+const ALLOWED_EVENT_TYPES = new Set([
+    "agent_start",
+    "agent_end",
+    "turn_start",
+    "turn_end",
+    "message_start",
+    "message_update",
+    "message_end",
+    "tool_execution_start",
+    "tool_execution_update",
+    "tool_execution_end",
+    "tool_call",
+    "tool_result",
+    "queue_update",
+    "compaction_start",
+    "compaction_end",
+    "auto_retry_start",
+    "auto_retry_end",
+    "snapshot",
+]);
+export function isAllowedEvent(event) {
+    return ALLOWED_EVENT_TYPES.has(event.type);
+}
+/**
+ * Serialize an event into the SSE wire format. Returns the full chunk
+ * including the trailing blank line that delimits messages.
+ */
+export function serializeSSE(event) {
+    return `data: ${JSON.stringify(event)}\n\n`;
+}
+/**
+ * Build a snapshot from the current LiveSession state. Pulled out so callers
+ * (and tests) can assert the same shape the bridge sends on connect.
+ */
+export function buildSnapshot(live) {
+    return {
+        type: "snapshot",
+        sessionId: live.sessionId,
+        projectId: live.projectId,
+        messages: live.session.messages,
+        isStreaming: live.session.isStreaming,
+    };
+}
+/**
+ * Hijack the Fastify reply and turn it into a long-lived SSE stream attached
+ * to `live.clients`. Sends a snapshot immediately, forwards filtered
+ * AgentSessionEvents, and unregisters on socket close.
+ *
+ * The caller's route handler should NOT call `reply.send()` — `hijack()`
+ * tells Fastify the response is being driven manually.
+ *
+ * Throws if the prelude (writeHead / snapshot write) fails. The caller is a
+ * route handler that has already hijacked, so Fastify's reply.send(err)
+ * fallback is a no-op; this function destroys the underlying socket on
+ * failure so the client doesn't hang waiting for headers.
+ */
+export function createSSEClient(reply, live) {
+    reply.hijack();
+    const raw = reply.raw;
+    // Closure state — declared up here so the prelude's catch can clean up
+    // even if `client` was never finalized.
+    let registeredClient;
+    let closed = false;
+    // The whole prelude (headers, registration, snapshot) is guarded as one
+    // unit. Anything that throws here would otherwise hang the client socket:
+    // after hijack() Fastify's wrap-thenable.js catches the throw and calls
+    // reply.send(err), which is a no-op because reply.sent === true post-hijack.
+    // Net result without this guard: no headers, no body, no end → connection
+    // hangs until the OS times out. So on any prelude failure we destroy the
+    // raw socket and remove the partially-registered client from the registry.
+    try {
+        raw.writeHead(200, {
+            "Content-Type": "text/event-stream",
+            "Cache-Control": "no-cache, no-transform",
+            Connection: "keep-alive",
+            // Disable proxy buffering (nginx, Caddy) so events flush immediately.
+            "X-Accel-Buffering": "no",
+        });
+        const id = randomUUID();
+        /**
+         * Direct raw write that bypasses the event filter. Used for synthetic
+         * frames the bridge owns (snapshot today; heartbeats / keepalive in
+         * later phases). Filter-bypass cannot leak SDK events because callers
+         * supply already-shaped objects.
+         */
+        let heartbeatTimer;
+        const close = () => {
+            if (closed)
+                return;
+            closed = true;
+            if (heartbeatTimer !== undefined) {
+                clearInterval(heartbeatTimer);
+                heartbeatTimer = undefined;
+            }
+            if (registeredClient !== undefined)
+                live.clients.delete(registeredClient);
+            try {
+                raw.end();
+            }
+            catch {
+                // socket already torn down — fine
+            }
+        };
+        const writeRaw = (chunk) => {
+            if (closed)
+                return;
+            // Backpressure guard: if the OS-side socket buffer has accumulated
+            // more than BACKPRESSURE_LIMIT_BYTES of unwritten bytes, the
+            // consumer is wedged (slow network, paused tab, hostile client
+            // that opened the SSE stream and stopped reading). Drop the
+            // client rather than letting Node's internal buffer grow without
+            // bound — `live.clients` retains the SSEClient object until
+            // socket close fires, and a wedged TCP socket can take 30+
+            // seconds to time out. Without this, repeated events on a
+            // verbose tool execution can balloon resident memory by hundreds
+            // of MB before the kernel forces the close.
+            if (raw.writableLength > BACKPRESSURE_LIMIT_BYTES) {
+                close();
+                return;
+            }
+            try {
+                raw.write(chunk);
+            }
+            catch {
+                // Socket already torn down (client dropped, network blip).
+                // Close cleans up the registry entry + ends the response.
+                close();
+            }
+        };
+        const send = (event) => {
+            if (closed)
+                return;
+            if (!isAllowedEvent(event))
+                return;
+            writeRaw(serializeSSE(event));
+        };
+        const client = { id, send, close };
+        registeredClient = client;
+        // Order matters: write the snapshot BEFORE adding to live.clients.
+        // The registry's subscribe handler (session-registry.ts:makeSubscribeHandler)
+        // fans events out to live.clients synchronously inside the SDK's emit
+        // call. If we registered first, an SDK event firing in the window
+        // between live.clients.add and the snapshot write would land on the
+        // wire BEFORE the snapshot — and the browser treats `snapshot` as
+        // authoritative (replaces messagesBySession), so a streaming token
+        // delta arriving before the snapshot would be wiped on the
+        // snapshot's arrival. Snapshot first → register second → events
+        // start flowing in the correct order.
+        //
+        // Snapshot bypass — uses writeRaw, the same surface a future heartbeat
+        // would use. Server-issued synthetic frames flow through writeRaw;
+        // SDK-relayed events flow through send (which applies the filter).
+        writeRaw(serializeSSE(buildSnapshot(live)));
+        live.clients.add(client);
+        // Wire close listeners AFTER the snapshot write so an immediate socket
+        // close can't double-fire close() before the registry is in a coherent
+        // state. Node's 'close' event fires next-tick anyway, but explicit
+        // ordering is cheap insurance.
+        raw.on("close", close);
+        raw.on("error", close);
+        // Idle-timer reset for L7 proxies (OpenShift HAProxy router, nginx,
+        // ALB, etc.). Comment line, no `data:` field — EventSource skips it.
+        // Uses writeRaw so the same backpressure guard applies; if the socket
+        // is wedged the heartbeat will trip the limit and call close(), which
+        // tears the timer down.
+        heartbeatTimer = setInterval(() => {
+            writeRaw(": heartbeat\n\n");
+        }, HEARTBEAT_INTERVAL_MS);
+        // Don't keep the Node event loop alive just for heartbeats — when
+        // the socket closes the close handler clears the timer anyway.
+        heartbeatTimer.unref();
+        return client;
+    }
+    catch (err) {
+        // Prelude failure — clean up partial state and tear the socket down so
+        // the client gets a connection drop instead of a hung half-open socket.
+        closed = true;
+        if (registeredClient !== undefined)
+            live.clients.delete(registeredClient);
+        try {
+            raw.destroy();
+        }
+        catch {
+            // already destroyed
+        }
+        throw err;
+    }
+}
+//# sourceMappingURL=sse-bridge.js.map

package/dist/server/sse-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse-bridge.js","sourceRoot":"","sources":["../src/sse-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzC;;;;;;;;;;;GAWG;AACH,MAAM,wBAAwB,GAAG,GAAG,GAAG,IAAI,CAAC;AAE5C;;;;;;;;;;GAUG;AACH,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAcrC;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS;IAC1C,aAAa;IACb,WAAW;IACX,YAAY;IACZ,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,aAAa;IACb,sBAAsB;IACtB,uBAAuB;IACvB,oBAAoB;IACpB,WAAW;IACX,aAAa;IACb,cAAc;IACd,kBAAkB;IAClB,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;IAChB,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,UAAU,cAAc,CAAC,KAAuB;IACpD,OAAO,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAgC;IAC3D,OAAO,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAiB;IAC7C,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;QAC/B,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;KACtC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,KAAmB,EAAE,IAAiB;IACpE,KAAK,CAAC,MAAM,EAAE,CAAC;IACf,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IAEtB,uEAAuE;IACvE,wCAAwC;IACxC,IAAI,gBAAuC,CAAC;IAC5C,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,wEAAwE;IACxE,0EAA0E;IAC1E,wEAAwE;IACxE,6EAA6E;IAC7E,0EAA0E;IAC1E,yEAAyE;IACzE,2EAA2E;IAC3E,IAAI,CAAC;QACH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,wBAAwB;YACzC,UAAU,EAAE,YAAY;YACxB,sEAAsE;YACtE,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QAExB;;;;;WAKG;QACH,IAAI,cAA0C,CAAC;QAE/C,MAAM,KAAK,GAAG,GAAS,EAAE;YACvB,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBACjC,aAAa,CAAC,cAAc,CAAC,CAAC;gBAC9B,cAAc,GAAG,SAAS,CAAC;YAC7B,CAAC;YACD,IAAI,gBAAgB,KAAK,SAAS;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC1E,IAAI,CAAC;gBACH,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAQ,EAAE;YACvC,IAAI,MAAM;gBAAE,OAAO;YACnB,mEAAmE;YACnE,6DAA6D;YAC7D,+DAA+D;YAC/D,4DAA4D;YAC5D,iEAAiE;YACjE,4DAA4D;YAC5D,2DAA2D;YAC3D,0DAA0D;YAC1D,iEAAiE;YACjE,4CAA4C;YAC5C,IAAI,GAAG,CAAC,cAAc,GAAG,wBAAwB,EAAE,CAAC;gBAClD,KAAK,EAAE,CAAC;gBACR,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,2DAA2D;gBAC3D,0DAA0D;gBAC1D,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,IAAI,GAAG,CAAC,KAAiE,EAAQ,EAAE;YACvF,IAAI,MAAM;gBAAE,OAAO;YACnB,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC;gBAAE,OAAO;YACnC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAChC,CAAC,CAAC;QAEF,MAAM,MAAM,GAAc,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC9C,gBAAgB,GAAG,MAAM,CAAC;QAE1B,mEAAmE;QACnE,8EAA8E;QAC9E,sEAAsE;QACtE,kEAAkE;QAClE,oEAAoE;QACpE,kEAAkE;QAClE,mEAAmE;QACnE,2DAA2D;QAC3D,gEAAgE;QAChE,sCAAsC;QACtC,EAAE;QACF,uEAAuE;QACvE,mEAAmE;QACnE,mEAAmE;QACnE,QAAQ,CAAC,YAAY,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEzB,uEAAuE;QACvE,uEAAuE;QACvE,mEAAmE;QACnE,+BAA+B;QAC/B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACvB,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAEvB,oEAAoE;QACpE,qEAAqE;QACrE,sEAAsE;QACtE,sEAAsE;QACtE,wBAAwB;QACxB,cAAc,GAAG,WAAW,CAAC,GAAG,EAAE;YAChC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QAC9B,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAC1B,kEAAkE;QAClE,+DAA+D;QAC/D,cAAc,CAAC,KAAK,EAAE,CAAC;QAEvB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,GAAG,IAAI,CAAC;QACd,IAAI,gBAAgB,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1E,IAAI,CAAC;YACH,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/server/tool-overrides.js

@@ -0,0 +1,277 @@
+/**
+ * pi-forge-private per-tool overrides at
+ * `${FORGE_DATA_DIR}/tool-overrides.json`.
+ *
+ * Two layers, both allow-by-default:
+ *
+ *   1. **Global** — flat sets `builtin` / `mcp`. A tool whose name
+ *      appears in the relevant set is disabled for every project
+ *      that doesn't override it.
+ *   2. **Per-project** — tri-state. For each project the user can
+ *      explicitly enable a tool (overrides global disable),
+ *      explicitly disable it (overrides global enable), or stay
+ *      silent (= inherit global).
+ *
+ * Effective state for a tool in project P:
+ *
+ *   project[P].enable.includes(name)   → enabled  (project override wins)
+ *   project[P].disable.includes(name)  → disabled (project override wins)
+ *   otherwise                          → !global[family].includes(name)
+ *
+ * Same shape as `skill-overrides.ts` for the per-project layer; the
+ * difference is the global layer (skills don't have one — pi's
+ * `settings.skills` lives in pi config, not in this file). Same
+ * atomic-write shape (.tmp + rename, mode 0600). Empty arrays /
+ * empty project entries are pruned so the file doesn't grow with
+ * stale keys after a series of toggles back to inherit.
+ *
+ * Naming convention matches the names pi sees on the wire:
+ *   - builtin:  bare tool name (`bash`, `read`, `grep`, …)
+ *   - mcp:      bridged tool name `<server>__<tool>` (the same format
+ *               `mcp/manager.bridgeMcpTool` produces; pi never sees
+ *               the un-prefixed inner name from the MCP server)
+ *
+ * Lives outside `${PI_CONFIG_DIR}` because pi's SDK has no native
+ * concept of per-tool toggles — this is purely a pi-forge filter
+ * applied to the `tools` allowlist passed to `createAgentSession`.
+ */
+import { chmodSync } from "node:fs";
+import { mkdir, readFile, rename, unlink, writeFile } from "node:fs/promises";
+import { dirname } from "node:path";
+import { randomUUID } from "node:crypto";
+import { config } from "./config.js";
+const EMPTY = { builtin: [], mcp: [], extension: [], projects: {} };
+function emptyProject() {
+    return {
+        builtin: { enable: [], disable: [] },
+        mcp: { enable: [], disable: [] },
+        extension: { enable: [], disable: [] },
+    };
+}
+async function ensureDir() {
+    await mkdir(dirname(config.toolOverridesFile), { recursive: true });
+}
+async function atomicWrite(data) {
+    await ensureDir();
+    const path = config.toolOverridesFile;
+    const tmp = `${path}.${randomUUID()}.tmp`;
+    await writeFile(tmp, JSON.stringify(data, null, 2), { mode: 0o600 });
+    try {
+        chmodSync(tmp, 0o600);
+    }
+    catch {
+        // best-effort
+    }
+    try {
+        await rename(tmp, path);
+    }
+    catch (err) {
+        await unlink(tmp).catch(() => undefined);
+        throw err;
+    }
+}
+function normalizeFamilyOverrides(v) {
+    if (typeof v !== "object" || v === null)
+        return { enable: [], disable: [] };
+    const obj = v;
+    return {
+        enable: Array.isArray(obj.enable)
+            ? obj.enable.filter((n) => typeof n === "string")
+            : [],
+        disable: Array.isArray(obj.disable)
+            ? obj.disable.filter((n) => typeof n === "string")
+            : [],
+    };
+}
+/**
+ * Read the current overrides from disk. Returns an empty shape if
+ * the file is missing, malformed, or has unexpected fields — same
+ * "errors don't bubble" posture as skill-overrides, so a corrupt
+ * file at boot doesn't block session creation. Backwards-compatible
+ * with files written by the pre-per-project version (no `projects`
+ * key).
+ */
+export async function readToolOverrides() {
+    try {
+        const raw = await readFile(config.toolOverridesFile, "utf8");
+        if (raw.trim().length === 0) {
+            return { builtin: [], mcp: [], extension: [], projects: {} };
+        }
+        const parsed = JSON.parse(raw);
+        if (typeof parsed !== "object" || parsed === null) {
+            return { builtin: [], mcp: [], extension: [], projects: {} };
+        }
+        const obj = parsed;
+        const builtin = Array.isArray(obj.builtin)
+            ? obj.builtin.filter((n) => typeof n === "string")
+            : [];
+        const mcp = Array.isArray(obj.mcp)
+            ? obj.mcp.filter((n) => typeof n === "string")
+            : [];
+        // `extension` is a new family added alongside the existing
+        // builtin/mcp pair. Backwards-compatible: an older overrides
+        // file with no `extension` key parses to the empty list, so
+        // every extension tool is enabled by default until the user
+        // explicitly disables it.
+        const extension = Array.isArray(obj.extension)
+            ? obj.extension.filter((n) => typeof n === "string")
+            : [];
+        const projects = {};
+        if (typeof obj.projects === "object" && obj.projects !== null) {
+            for (const [pid, val] of Object.entries(obj.projects)) {
+                if (typeof val !== "object" || val === null)
+                    continue;
+                const v = val;
+                projects[pid] = {
+                    builtin: normalizeFamilyOverrides(v.builtin),
+                    mcp: normalizeFamilyOverrides(v.mcp),
+                    extension: normalizeFamilyOverrides(v.extension),
+                };
+            }
+        }
+        return { builtin, mcp, extension, projects };
+    }
+    catch (err) {
+        if (err.code === "ENOENT") {
+            return { builtin: [], mcp: [], extension: [], projects: {} };
+        }
+        throw err;
+    }
+}
+/**
+ * Toggle a tool's GLOBAL state. `enabled: false` adds the name to
+ * the disabled set; `enabled: true` removes it (returning to the
+ * implicit-enabled default). Idempotent.
+ */
+export async function setToolEnabled(family, name, enabled) {
+    const cur = await readToolOverrides();
+    const list = familyList(cur, family);
+    const idx = list.indexOf(name);
+    if (enabled) {
+        if (idx === -1)
+            return cur; // already enabled (not in disabled set)
+        list.splice(idx, 1);
+    }
+    else {
+        if (idx !== -1)
+            return cur; // already disabled
+        list.push(name);
+    }
+    await atomicWrite(cur);
+    return cur;
+}
+function familyList(cur, family) {
+    if (family === "builtin")
+        return cur.builtin;
+    if (family === "mcp")
+        return cur.mcp;
+    return cur.extension;
+}
+function projectFamily(entry, family) {
+    if (family === "builtin")
+        return entry.builtin;
+    if (family === "mcp")
+        return entry.mcp;
+    return entry.extension;
+}
+/**
+ * Set or clear a per-project override for a single tool.
+ * `state: "enabled" | "disabled"` adds an explicit override;
+ * `state: undefined` clears any existing override (= inherit
+ * global). Empty project entries are pruned.
+ */
+export async function setProjectToolOverride(projectId, family, name, state) {
+    const cur = await readToolOverrides();
+    const entry = cur.projects[projectId] ?? emptyProject();
+    const fam = projectFamily(entry, family);
+    // Remove from BOTH lists first — flipping enable→disable or vice
+    // versa is just remove + maybe add. Same dance as
+    // skill-overrides.setProjectSkillOverride.
+    fam.enable = fam.enable.filter((n) => n !== name);
+    fam.disable = fam.disable.filter((n) => n !== name);
+    if (state === "enabled")
+        fam.enable.push(name);
+    else if (state === "disabled")
+        fam.disable.push(name);
+    // Prune the project entry if every family is empty after the
+    // toggle. Keeps the file from accumulating stale keys after the
+    // user toggles back to inherit.
+    const empty = entry.builtin.enable.length === 0 &&
+        entry.builtin.disable.length === 0 &&
+        entry.mcp.enable.length === 0 &&
+        entry.mcp.disable.length === 0 &&
+        entry.extension.enable.length === 0 &&
+        entry.extension.disable.length === 0;
+    if (empty) {
+        delete cur.projects[projectId];
+    }
+    else {
+        cur.projects[projectId] = entry;
+    }
+    await atomicWrite(cur);
+    return cur;
+}
+/**
+ * Look up a project's explicit position on a tool. Returns
+ * `undefined` when the project has no opinion (= inherit from
+ * global).
+ */
+export function getProjectToolState(overrides, projectId, family, name) {
+    const entry = overrides.projects[projectId];
+    if (entry === undefined)
+        return undefined;
+    const fam = projectFamily(entry, family);
+    if (fam.enable.includes(name))
+        return "enabled";
+    if (fam.disable.includes(name))
+        return "disabled";
+    return undefined;
+}
+/**
+ * Compute whether a tool is effective (enabled) for a project,
+ * combining the global default with any per-project override.
+ * Pass `projectId === undefined` to evaluate global state only.
+ */
+export function isToolEffective(overrides, projectId, family, name) {
+    if (projectId !== undefined) {
+        const state = getProjectToolState(overrides, projectId, family, name);
+        if (state === "enabled")
+            return true;
+        if (state === "disabled")
+            return false;
+    }
+    return !familyList(overrides, family).includes(name);
+}
+/**
+ * Apply the overrides as a filter over a candidate tool list.
+ * Returns the names that should remain ACTIVE for the given
+ * project (or globally if `projectId === undefined`).
+ *
+ * Used at every `createAgentSession` call site to filter the
+ * allowlist passed as `tools: [...]`. Builds the family-sets once
+ * per call so the filter is O(1) per tool.
+ */
+export function filterEnabledTools(overrides, projectId, candidates) {
+    return candidates
+        .filter(({ family, name }) => isToolEffective(overrides, projectId, family, name))
+        .map(({ name }) => name);
+}
+export async function getAllToolOverrides() {
+    const cur = await readToolOverrides();
+    return { projects: cur.projects };
+}
+/**
+ * Drop every override mention of a deleted project so the file
+ * doesn't accumulate orphaned entries. Called from project-manager
+ * on project delete (parallels `skill-overrides.clearProjectOverrides`).
+ */
+export async function clearProjectOverrides(projectId) {
+    const cur = await readToolOverrides();
+    if (cur.projects[projectId] === undefined)
+        return;
+    delete cur.projects[projectId];
+    await atomicWrite(cur);
+}
+/** Suppress unused-export warning for tests that import EMPTY. */
+export const _EMPTY_FOR_TESTS = EMPTY;
+//# sourceMappingURL=tool-overrides.js.map

package/dist/server/tool-overrides.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-overrides.js","sourceRoot":"","sources":["../src/tool-overrides.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AA6BrC,MAAM,KAAK,GAAkB,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAEnF,SAAS,YAAY;IACnB,OAAO;QACL,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QACpC,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAChC,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;KACvC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAmB;IAC5C,MAAM,SAAS,EAAE,CAAC;IAClB,MAAM,IAAI,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACtC,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAC1C,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,CAAU;IAC1C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC5E,MAAM,GAAG,GAAG,CAA4C,CAAC;IACzD,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAC/B,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAC9D,CAAC,CAAC,EAAE;QACN,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YACjC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAC/D,CAAC,CAAC,EAAE;KACP,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QAC7D,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC/D,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAClD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC/D,CAAC;QACD,MAAM,GAAG,GAAG,MAKX,CAAC;QACF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YACxC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAC/D,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAChC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAC3D,CAAC,CAAC,EAAE,CAAC;QACP,2DAA2D;QAC3D,6DAA6D;QAC7D,4DAA4D;QAC5D,4DAA4D;QAC5D,0BAA0B;QAC1B,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;YAC5C,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YACjE,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,QAAQ,GAAqC,EAAE,CAAC;QACtD,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC9D,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAmC,CAAC,EAAE,CAAC;gBACjF,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;oBAAE,SAAS;gBACtD,MAAM,CAAC,GAAG,GAAgE,CAAC;gBAC3E,QAAQ,CAAC,GAAG,CAAC,GAAG;oBACd,OAAO,EAAE,wBAAwB,CAAC,CAAC,CAAC,OAAO,CAAC;oBAC5C,GAAG,EAAE,wBAAwB,CAAC,CAAC,CAAC,GAAG,CAAC;oBACpC,SAAS,EAAE,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;iBACjD,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC/D,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAkB,EAClB,IAAY,EACZ,OAAgB;IAEhB,MAAM,GAAG,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC,CAAC,wCAAwC;QACpE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC,CAAC,mBAAmB;QAC/C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,GAAkB,EAAE,MAAkB;IACxD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAC7C,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC;IACrC,OAAO,GAAG,CAAC,SAAS,CAAC;AACvB,CAAC;AAED,SAAS,aAAa,CAAC,KAAuB,EAAE,MAAkB;IAChE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IAC/C,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC;IACvC,OAAO,KAAK,CAAC,SAAS,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB,EACjB,MAAkB,EAClB,IAAY,EACZ,KAAoC;IAEpC,MAAM,GAAG,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,YAAY,EAAE,CAAC;IACxD,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,iEAAiE;IACjE,kDAAkD;IAClD,2CAA2C;IAC3C,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAClD,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACpD,IAAI,KAAK,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC1C,IAAI,KAAK,KAAK,UAAU;QAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEtD,6DAA6D;IAC7D,gEAAgE;IAChE,gCAAgC;IAChC,MAAM,KAAK,GACT,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QACjC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAClC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAC7B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAC9B,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QACnC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;IACvC,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IAClC,CAAC;IACD,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,SAAwB,EACxB,SAAiB,EACjB,MAAkB,EAClB,IAAY;IAEZ,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAClD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,SAAwB,EACxB,SAA6B,EAC7B,MAAkB,EAClB,IAAY;IAEZ,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,mBAAmB,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QACtE,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACrC,IAAI,KAAK,KAAK,UAAU;YAAE,OAAO,KAAK,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAwB,EACxB,SAA6B,EAC7B,UAAkD;IAElD,OAAO,UAAU;SACd,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;SACjF,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAqBD,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,GAAG,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACtC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAiB;IAC3D,MAAM,GAAG,GAAG,MAAM,iBAAiB,EAAE,CAAC;IACtC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,SAAS;QAAE,OAAO;IAClD,OAAO,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC/B,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC"}