studiograph 1.3.3 → 1.3.4

package/dist/agent/tools/permission-tools.js

@@ -1,61 +1,26 @@
 /**
  * Permission Tools for Studiograph Agent
  *
- * GitHub-based org, team, and collection access management.
- * Wraps GitHubService methods so the agent can manage permissions conversationally.
+ * Self-hosted user and per-collection access management backed by AuthService.
  */
 import { Type as T } from '@sinclair/typebox';
 import { wrapToolResult } from './graph-tools.js';
-import { loadToken, getAuthenticatedOctokit } from '../../auth/github.js';
-import { GitHubService } from '../../services/github-service.js';
-function getService(config) {
-    const org = config.github?.org;
-    if (!org)
-        return null;
-    const stored = loadToken();
-    if (!stored)
-        return null;
-    return new GitHubService(getAuthenticatedOctokit(stored.token), org);
-}
-function extractRepoName(url) {
-    if (!url)
-        return undefined;
-    const match = url.match(/\/([^/]+?)(?:\.git)?$/);
-    return match?.[1];
-}
-function resolveRepoName(config, collection) {
-    const repo = config.repos?.find(r => r.name === collection);
-    if (!repo)
-        return null;
-    return extractRepoName(repo.github_url) ?? repo.name;
-}
-const PERMISSION_LABELS = {
-    pull: 'Read',
-    push: 'Member',
-    admin: 'Admin',
-    maintain: 'Maintain',
-    triage: 'Triage',
-};
-function friendlyPermission(perm) {
-    return PERMISSION_LABELS[perm] ?? perm;
-}
-export function createPermissionTools(config) {
+export function createPermissionTools(authService) {
     return [
         {
-            name: 'permission_list_members',
-            label: 'List Org Members',
-            description: 'List all members of the GitHub organization, including their roles (admin or member).',
+            name: 'permission_list_users',
+            label: 'List Users',
+            description: 'List all workspace users with their roles and collection access.',
             parameters: T.Object({}),
             execute: async (_toolCallId, _params) => {
-                const service = getService(config);
-                if (!service)
-                    return wrapToolResult({ error: 'GitHub not configured' });
                 try {
-                    const members = await service.listMembers();
-                    return wrapToolResult(members.map(m => ({
-                        login: m.login,
-                        role: m.role,
-                        name: m.name,
+                    const users = authService.listUsers();
+                    return wrapToolResult(users.map(u => ({
+                        id: u.id,
+                        email: u.email,
+                        displayName: u.displayName,
+                        role: u.role,
+                        collections: u.role === 'admin' ? '(all — admin)' : authService.getUserCollections(u.id),
                     })));
                 }
                 catch (err) {
@@ -64,44 +29,44 @@ export function createPermissionTools(config) {
             },
         },
         {
-            name: 'permission_invite_member',
-            label: 'Invite to Org',
-            description: 'Invite a GitHub user to the organization. Requires admin role. Always confirm with the user before calling this.',
+            name: 'permission_create_user',
+            label: 'Create User',
+            description: 'Create a new workspace user with email, password, name, and role. Always confirm with the user before calling this.',
             parameters: T.Object({
-                username: T.String({ description: 'GitHub username to invite' }),
+                email: T.String({ description: 'Email address' }),
+                password: T.String({ description: 'Password (minimum 8 characters)' }),
+                name: T.String({ description: 'Display name' }),
+                role: T.Optional(T.String({ description: 'Role: admin or member. Defaults to member.' })),
             }),
             execute: async (_toolCallId, params) => {
-                const service = getService(config);
-                if (!service)
-                    return wrapToolResult({ error: 'GitHub not configured' });
                 try {
-                    const isMember = await service.isOrgMember(params.username);
-                    if (isMember)
-                        return wrapToolResult({ status: 'already_member', username: params.username });
-                    await service.inviteUser(params.username);
-                    return wrapToolResult({ status: 'invited', username: params.username });
+                    const role = (params.role === 'admin' ? 'admin' : 'member');
+                    const user = authService.createUser(params.email, params.password, params.name, role);
+                    return wrapToolResult({ created: true, email: user.email, displayName: user.displayName, role: user.role });
                 }
                 catch (err) {
-                    if (err?.status === 422)
-                        return wrapToolResult({ status: 'already_invited', username: params.username });
                     return wrapToolResult({ error: err.message });
                 }
             },
         },
         {
-            name: 'permission_remove_member',
-            label: 'Remove from Org',
-            description: 'Remove a user from the GitHub organization. Requires admin role. Always confirm with the user before calling this.',
+            name: 'permission_delete_user',
+            label: 'Delete User',
+            description: 'Delete a workspace user by email. Always confirm with the user before calling this.',
             parameters: T.Object({
-                username: T.String({ description: 'GitHub username to remove' }),
+                email: T.String({ description: 'Email of the user to delete' }),
             }),
             execute: async (_toolCallId, params) => {
-                const service = getService(config);
-                if (!service)
-                    return wrapToolResult({ error: 'GitHub not configured' });
                 try {
-                    await service.removeUser(params.username);
-                    return wrapToolResult({ ok: true, username: params.username });
+                    const users = authService.listUsers();
+                    const target = users.find(u => u.email === params.email.toLowerCase().trim());
+                    if (!target)
+                        return wrapToolResult({ error: `User "${params.email}" not found` });
+                    if (target.role === 'admin' && users.filter(u => u.role === 'admin').length <= 1) {
+                        return wrapToolResult({ error: 'Cannot delete the last admin' });
+                    }
+                    const deleted = authService.deleteUser(params.email);
+                    return wrapToolResult(deleted ? { ok: true, email: params.email } : { error: `User "${params.email}" not found` });
                 }
                 catch (err) {
                     return wrapToolResult({ error: err.message });
@@ -109,31 +74,23 @@ export function createPermissionTools(config) {
             },
         },
         {
-            name: 'permission_list_access',
-            label: 'List Collection Access',
-            description: 'List teams and collaborators with access to a specific collection (GitHub repo).',
+            name: 'permission_grant_access',
+            label: 'Grant Collection Access',
+            description: 'Grant a user access to a collection. Specify user by email and collection by name. Always confirm with the user before calling this.',
             parameters: T.Object({
+                email: T.String({ description: 'Email of the user to grant access to' }),
                 collection: T.String({ description: 'Collection name' }),
             }),
             execute: async (_toolCallId, params) => {
-                const service = getService(config);
-                if (!service)
-                    return wrapToolResult({ error: 'GitHub not configured' });
-                const repoName = resolveRepoName(config, params.collection);
-                if (!repoName)
-                    return wrapToolResult({ error: `Collection "${params.collection}" not found` });
                 try {
-                    const { teams, collaborators } = await service.getRepoAccess(repoName);
-                    return wrapToolResult({
-                        collection: params.collection,
-                        repoName,
-                        teams: teams.map(t => ({ team: t.teamName, permission: friendlyPermission(t.permission) })),
-                        collaborators: collaborators.map(c => ({
-                            login: c.login,
-                            permission: friendlyPermission(c.permission),
-                            pending: c.pending ?? false,
-                        })),
-                    });
+                    const users = authService.listUsers();
+                    const user = users.find(u => u.email === params.email.toLowerCase().trim());
+                    if (!user)
+                        return wrapToolResult({ error: `User "${params.email}" not found` });
+                    if (user.role === 'admin')
+                        return wrapToolResult({ info: 'Admins already have access to all collections' });
+                    authService.grantCollectionAccess(user.id, params.collection);
+                    return wrapToolResult({ ok: true, email: params.email, collection: params.collection });
                 }
                 catch (err) {
                     return wrapToolResult({ error: err.message });
@@ -141,30 +98,21 @@ export function createPermissionTools(config) {
             },
         },
         {
-            name: 'permission_grant_access',
-            label: 'Grant Collection Access',
-            description: 'Grant a GitHub user access to a collection via an auto-managed team. The user gets instant access if they are an org member, or a pending invite if not. Always confirm with the user before calling this.',
+            name: 'permission_revoke_access',
+            label: 'Revoke Collection Access',
+            description: 'Revoke a user\'s access to a collection. Always confirm with the user before calling this.',
             parameters: T.Object({
+                email: T.String({ description: 'Email of the user to revoke access from' }),
                 collection: T.String({ description: 'Collection name' }),
-                username: T.String({ description: 'GitHub username to grant access to' }),
-                permission: T.Optional(T.String({ description: 'Permission level: pull (read), push (member), or admin. Defaults to push.' })),
             }),
             execute: async (_toolCallId, params) => {
-                const service = getService(config);
-                if (!service)
-                    return wrapToolResult({ error: 'GitHub not configured' });
-                const repoName = resolveRepoName(config, params.collection);
-                if (!repoName)
-                    return wrapToolResult({ error: `Collection "${params.collection}" not found` });
                 try {
-                    const result = await service.grantAccessViaTeam(repoName, params.username, params.permission ?? 'push');
-                    return wrapToolResult({
-                        collection: params.collection,
-                        username: params.username,
-                        permission: friendlyPermission(params.permission ?? 'push'),
-                        isOrgMember: result.isOrgMember,
-                        status: result.status,
-                    });
+                    const users = authService.listUsers();
+                    const user = users.find(u => u.email === params.email.toLowerCase().trim());
+                    if (!user)
+                        return wrapToolResult({ error: `User "${params.email}" not found` });
+                    authService.revokeCollectionAccess(user.id, params.collection);
+                    return wrapToolResult({ ok: true, email: params.email, collection: params.collection });
                 }
                 catch (err) {
                     return wrapToolResult({ error: err.message });
@@ -172,30 +120,19 @@ export function createPermissionTools(config) {
             },
         },
         {
-            name: 'permission_revoke_access',
-            label: 'Revoke Collection Access',
-            description: 'Revoke a user\'s access to a collection. Removes them from the auto-managed team and as a direct collaborator. Always confirm with the user before calling this.',
+            name: 'permission_list_collection_access',
+            label: 'List Collection Access',
+            description: 'List users who have been granted access to a specific collection.',
             parameters: T.Object({
                 collection: T.String({ description: 'Collection name' }),
-                username: T.String({ description: 'GitHub username to revoke access from' }),
             }),
             execute: async (_toolCallId, params) => {
-                const service = getService(config);
-                if (!service)
-                    return wrapToolResult({ error: 'GitHub not configured' });
-                const repoName = resolveRepoName(config, params.collection);
-                if (!repoName)
-                    return wrapToolResult({ error: `Collection "${params.collection}" not found` });
                 try {
-                    try {
-                        await service.removeFromTeam(repoName, params.username);
-                    }
-                    catch { /* not on team */ }
-                    try {
-                        await service.revokeUserAccess(repoName, params.username);
-                    }
-                    catch { /* not a collaborator */ }
-                    return wrapToolResult({ ok: true, collection: params.collection, username: params.username });
+                    const users = authService.getCollectionUsers(params.collection);
+                    return wrapToolResult({
+                        collection: params.collection,
+                        users: users.map(u => ({ email: u.email, displayName: u.displayName, role: u.role })),
+                    });
                 }
                 catch (err) {
                     return wrapToolResult({ error: err.message });

package/dist/agent/tools/permission-tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"permission-tools.js","sourceRoot":"","sources":["../../../src/agent/tools/permission-tools.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAGjE,SAAS,UAAU,CAAC,MAAuB;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;IAC/B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,IAAI,aAAa,CAAC,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,eAAe,CAAC,GAAY;IACnC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACjD,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,eAAe,CAAC,MAAuB,EAAE,UAAkB;IAClE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;IAC5D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC;AACvD,CAAC;AAED,MAAM,iBAAiB,GAA2B;IAChD,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;CACjB,CAAC;AAEF,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAuB;IAC3D,OAAO;QACL;YACE,IAAI,EAAE,yBAAyB;YAC/B,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,uFAAuF;YACpG,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,OAAY,EAAE,EAAE;gBACnD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;gBACnC,IAAI,CAAC,OAAO;oBAAE,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBACxE,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;oBAC5C,OAAO,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBACtC,KAAK,EAAE,CAAC,CAAC,KAAK;wBACd,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;qBACb,CAAC,CAAC,CAAC,CAAC;gBACP,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;SACF;QACD;YACE,IAAI,EAAE,0BAA0B;YAChC,KAAK,EAAE,eAAe;YACtB,WAAW,EAAE,kHAAkH;YAC/H,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;gBACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC;aACjE,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,MAA4B,EAAE,EAAE;gBACnE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;gBACnC,IAAI,CAAC,OAAO;oBAAE,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBACxE,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC5D,IAAI,QAAQ;wBAAE,OAAO,cAAc,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAC7F,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC1C,OAAO,cAAc,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC1E,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,IAAI,GAAG,EAAE,MAAM,KAAK,GAAG;wBAAE,OAAO,cAAc,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACzG,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;SACF;QACD;YACE,IAAI,EAAE,0BAA0B;YAChC,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,oHAAoH;YACjI,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;gBACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE,CAAC;aACjE,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,MAA4B,EAAE,EAAE;gBACnE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;gBACnC,IAAI,CAAC,OAAO;oBAAE,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBACxE,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAC1C,OAAO,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACjE,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;SACF;QACD;YACE,IAAI,EAAE,wBAAwB;YAC9B,KAAK,EAAE,wBAAwB;YAC/B,WAAW,EAAE,kFAAkF;YAC/F,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;gBACnB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;aACzD,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,MAA8B,EAAE,EAAE;gBACrE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;gBACnC,IAAI,CAAC,OAAO;oBAAE,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBACxE,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC5D,IAAI,CAAC,QAAQ;oBAAE,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,eAAe,MAAM,CAAC,UAAU,aAAa,EAAE,CAAC,CAAC;gBAC/F,IAAI,CAAC;oBACH,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;oBACvE,OAAO,cAAc,CAAC;wBACpB,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,QAAQ;wBACR,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;wBAC3F,aAAa,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;4BACrC,KAAK,EAAE,CAAC,CAAC,KAAK;4BACd,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC;4BAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK;yBAC5B,CAAC,CAAC;qBACJ,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;SACF;QACD;YACE,IAAI,EAAE,yBAAyB;YAC/B,KAAK,EAAE,yBAAyB;YAChC,WAAW,EAAE,4MAA4M;YACzN,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;gBACnB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;gBACxD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC;gBACzE,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,2EAA2E,EAAE,CAAC,CAAC;aAC/H,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,MAAqE,EAAE,EAAE;gBAC5G,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;gBACnC,IAAI,CAAC,OAAO;oBAAE,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBACxE,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC5D,IAAI,CAAC,QAAQ;oBAAE,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,eAAe,MAAM,CAAC,UAAU,aAAa,EAAE,CAAC,CAAC;gBAC/F,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,CAAC;oBACxG,OAAO,cAAc,CAAC;wBACpB,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,UAAU,EAAE,kBAAkB,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC;wBAC3D,WAAW,EAAE,MAAM,CAAC,WAAW;wBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;qBACtB,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;SACF;QACD;YACE,IAAI,EAAE,0BAA0B;YAChC,KAAK,EAAE,0BAA0B;YACjC,WAAW,EAAE,kKAAkK;YAC/K,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;gBACnB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;gBACxD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC;aAC7E,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,MAAgD,EAAE,EAAE;gBACvF,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;gBACnC,IAAI,CAAC,OAAO;oBAAE,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBACxE,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC5D,IAAI,CAAC,QAAQ;oBAAE,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,eAAe,MAAM,CAAC,UAAU,aAAa,EAAE,CAAC,CAAC;gBAC/F,IAAI,CAAC;oBACH,IAAI,CAAC;wBAAC,MAAM,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;oBAC5F,IAAI,CAAC;wBAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;oBACrG,OAAO,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAChG,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"permission-tools.js","sourceRoot":"","sources":["../../../src/agent/tools/permission-tools.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGlD,MAAM,UAAU,qBAAqB,CAAC,WAAwB;IAC5D,OAAO;QACL;YACE,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,YAAY;YACnB,WAAW,EAAE,kEAAkE;YAC/E,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,OAAY,EAAE,EAAE;gBACnD,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;oBACtC,OAAO,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBACpC,EAAE,EAAE,CAAC,CAAC,EAAE;wBACR,KAAK,EAAE,CAAC,CAAC,KAAK;wBACd,WAAW,EAAE,CAAC,CAAC,WAAW;wBAC1B,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,WAAW,EAAE,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;qBACzF,CAAC,CAAC,CAAC,CAAC;gBACP,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;SACF;QACD;YACE,IAAI,EAAE,wBAAwB;YAC9B,KAAK,EAAE,aAAa;YACpB,WAAW,EAAE,qHAAqH;YAClI,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;gBACnB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;gBACjD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iCAAiC,EAAE,CAAC;gBACtE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC;gBAC/C,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,4CAA4C,EAAE,CAAC,CAAC;aAC1F,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,MAAwE,EAAE,EAAE;gBAC/G,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAuB,CAAC;oBAClF,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;oBACtF,OAAO,cAAc,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9G,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;SACF;QACD;YACE,IAAI,EAAE,wBAAwB;YAC9B,KAAK,EAAE,aAAa;YACpB,WAAW,EAAE,qFAAqF;YAClG,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;gBACnB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,CAAC;aAChE,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,MAAyB,EAAE,EAAE;gBAChE,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;oBACtC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC9E,IAAI,CAAC,MAAM;wBAAE,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,SAAS,MAAM,CAAC,KAAK,aAAa,EAAE,CAAC,CAAC;oBAClF,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;wBACjF,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;oBACnE,CAAC;oBACD,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACrD,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,MAAM,CAAC,KAAK,aAAa,EAAE,CAAC,CAAC;gBACrH,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;SACF;QACD;YACE,IAAI,EAAE,yBAAyB;YAC/B,KAAK,EAAE,yBAAyB;YAChC,WAAW,EAAE,sIAAsI;YACnJ,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;gBACnB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC;gBACxE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;aACzD,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,MAA6C,EAAE,EAAE;gBACpF,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;oBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC5E,IAAI,CAAC,IAAI;wBAAE,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,SAAS,MAAM,CAAC,KAAK,aAAa,EAAE,CAAC,CAAC;oBAChF,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;wBAAE,OAAO,cAAc,CAAC,EAAE,IAAI,EAAE,+CAA+C,EAAE,CAAC,CAAC;oBAC5G,WAAW,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;oBAC9D,OAAO,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC1F,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;SACF;QACD;YACE,IAAI,EAAE,0BAA0B;YAChC,KAAK,EAAE,0BAA0B;YACjC,WAAW,EAAE,4FAA4F;YACzG,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;gBACnB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,yCAAyC,EAAE,CAAC;gBAC3E,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;aACzD,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,MAA6C,EAAE,EAAE;gBACpF,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;oBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC5E,IAAI,CAAC,IAAI;wBAAE,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,SAAS,MAAM,CAAC,KAAK,aAAa,EAAE,CAAC,CAAC;oBAChF,WAAW,CAAC,sBAAsB,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;oBAC/D,OAAO,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC1F,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;SACF;QACD;YACE,IAAI,EAAE,mCAAmC;YACzC,KAAK,EAAE,wBAAwB;YAC/B,WAAW,EAAE,mEAAmE;YAChF,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;gBACnB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC;aACzD,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,MAA8B,EAAE,EAAE;gBACrE,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,WAAW,CAAC,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;oBAChE,OAAO,cAAc,CAAC;wBACpB,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;qBACtF,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,OAAO,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/agent/tools/sync-tools.d.ts

@@ -1,10 +1,11 @@
 /**
- * Sync & Enrich Tools for Studiograph Agent
+ * Sync & Workspace Tools for Studiograph Agent
  *
- * These tools allow the agent to orchestrate sync and enrich operations:
- * - Run the sync pipeline, apply staging, commit
- * - Run LLM enrichment on entities
- * - Manage source configs
+ * These tools allow the agent to:
+ * - Sync external data into collections (collection-scoped sync)
+ * - Refresh individual synced entities from their source
+ * - Manage workspace git operations (commit, push, pull, status)
+ * - Inspect MCP connectors for sync configuration
  */
 import type { WorkspaceConfig } from '../../core/types.js';
 import type { ConnectorRegistry } from './connector-tools.js';
@@ -23,7 +24,7 @@ export declare function createSyncTools(workspacePath: string, workspaceConfig:
     label: string;
     description: string;
     parameters: import("@sinclair/typebox").TObject<{}>;
-    execute: (toolCallId: string, params: any) => Promise<{
+    execute: (toolCallId: string, _params: any) => Promise<{
         content: {
             type: "text";
             text: string;