thumbgate 1.30.0 → 1.34.0

package/scripts/tool-registry.js

@@ -248,6 +248,20 @@ const TOOLS = [
         scope: MEMORY_SCOPE_SCHEMA,
         requireScope: { type: 'boolean', description: 'Fail closed unless a complete four-field scope is supplied.' },
         includeShared: { type: 'boolean', description: 'Include explicitly shared memories with scoped results. Defaults true.' },
+        filters: {
+          type: 'object',
+          description: 'Pre-filter the candidate corpus before lexical or vector ranking.',
+          properties: {
+            domain: { type: ['string', 'array'], items: { type: 'string' } },
+            signal: { type: ['string', 'array'], items: { type: 'string' } },
+            source: { type: ['string', 'array'], items: { type: 'string' } },
+            toolsUsed: { type: ['string', 'array'], items: { type: 'string' } },
+            tags: { type: 'array', items: { type: 'string' } },
+            requireAllTags: { type: 'boolean' },
+          },
+        },
+        queryRewrite: { type: 'boolean', description: 'Enable bounded deterministic synonym expansion when the original lexical match is weak. Defaults true.' },
+        includeRetrievalMeta: { type: 'boolean', description: 'Include path provenance such as lexical/dense pools and query variants.' },
       },
       required: ['toolName'],
     },
@@ -276,6 +290,17 @@ const TOOLS = [
         limit: { type: 'number', description: 'Maximum results to return (default 10)' },
         source: { type: 'string', enum: ['all', 'feedback', 'context', 'rules', 'documents'], description: 'Restrict search to a single ThumbGate source.' },
         signal: { type: 'string', enum: ['up', 'down', 'positive', 'negative'], description: 'Optional feedback-signal filter when searching feedback data.' },
+        filters: {
+          type: 'object',
+          description: 'Pre-filter imported documents before chunk ranking.',
+          properties: {
+            tags: { type: 'array', items: { type: 'string' } },
+            requireAllTags: { type: 'boolean' },
+            sourceFormat: { type: 'string' },
+            sourceType: { type: 'string' },
+          },
+        },
+        queryRewrite: { type: 'boolean', description: 'Enable bounded deterministic synonym expansion. Defaults true.' },
       },
     },
   }),
@@ -1160,14 +1185,91 @@ const TOOLS = [
       },
     },
   }),
+  destructiveTool({
+    name: 'create_purchase_requisition',
+    description: 'Create an append-only purchase requisition and independent human-escalation request. This does not authorize spending.',
+    inputSchema: {
+      type: 'object',
+      additionalProperties: false,
+      required: ['taskId', 'vendor', 'amountUsd', 'purpose', 'sourceMessageId', 'evidence', 'toolName', 'toolInput'],
+      properties: {
+        taskId: { type: 'string', minLength: 1 },
+        vendor: { type: 'string', minLength: 1 },
+        amountUsd: { type: 'number', exclusiveMinimum: 0 },
+        purpose: { type: 'string', minLength: 1 },
+        sourceMessageId: { type: 'string', minLength: 1, description: 'Stable identifier for the exact user message authorizing the request.' },
+        toolName: { type: 'string', minLength: 1, description: 'Exact future economic tool name. The human-approved requisition is cryptographically bound to it.' },
+        toolInput: { type: 'object', minProperties: 1, description: 'Exact future economic tool input before financialControl metadata is attached. Stored only as a fingerprint.' },
+        evidence: { type: 'array', minItems: 1, items: { type: 'string', minLength: 1 } },
+        ttlMs: { type: 'number', minimum: 1 },
+        idempotencyKey: { type: 'string', minLength: 1 },
+      },
+    },
+  }),
+  readOnlyTool({
+    name: 'list_purchase_requisitions',
+    description: 'List projected purchase-requisition states from the append-only financial ledger and human-review queue.',
+    inputSchema: {
+      type: 'object',
+      additionalProperties: false,
+      properties: {
+        status: { type: 'string' },
+        limit: { type: 'integer', minimum: 1, maximum: 100 },
+      },
+    },
+  }),
+  destructiveTool({
+    name: 'reserve_purchase_requisition',
+    description: 'Reserve a single-use amount from an independently approved purchase requisition. Approval is unavailable from the agent tool surface.',
+    inputSchema: {
+      type: 'object',
+      additionalProperties: false,
+      required: ['requisitionId', 'amountUsd', 'vendor', 'purpose', 'sourceMessageId'],
+      properties: {
+        requisitionId: { type: 'string', minLength: 1 },
+        amountUsd: { type: 'number', exclusiveMinimum: 0 },
+        vendor: { type: 'string', minLength: 1 },
+        purpose: { type: 'string', minLength: 1 },
+        sourceMessageId: { type: 'string', minLength: 1 },
+        ttlMs: { type: 'number', minimum: 1 },
+        idempotencyKey: { type: 'string', minLength: 1 },
+      },
+    },
+  }),
+  destructiveTool({
+    name: 'settle_purchase_requisition',
+    description: 'Commit actual spend with receipt evidence or release an unused reservation. Events are append-only.',
+    inputSchema: {
+      type: 'object',
+      additionalProperties: false,
+      required: ['requisitionId', 'reservationId', 'status'],
+      properties: {
+        requisitionId: { type: 'string', minLength: 1 },
+        reservationId: { type: 'string', minLength: 1 },
+        status: { type: 'string', enum: ['committed', 'released'] },
+        actualAmountUsd: { type: 'number', minimum: 0 },
+        evidence: { type: 'array', items: { type: 'string', minLength: 1 } },
+        reason: { type: 'string' },
+      },
+    },
+  }),
+  readOnlyTool({
+    name: 'reconcile_purchase_ledger',
+    description: 'Reconcile the append-only financial ledger, including totals, stale reservations, status counts, and tamper-evident event hashes.',
+    inputSchema: {
+      type: 'object',
+      additionalProperties: false,
+      properties: {},
+    },
+  }),
   readOnlyTool({
     name: 'verify_claim',
-    description: 'Check whether a claim has enough tracked evidence before the agent asserts it.',
+    description: 'Check whether a claim has enough tracked evidence and, for parseable factual claims (row counts, file lines/bytes/existence, versions), recheck configured SQLite/filesystem/JSON verifiers before the agent asserts it.',
     inputSchema: {
       type: 'object',
       required: ['claim'],
       properties: {
-        claim: { type: 'string', description: 'The claim text to verify' },
+        claim: { type: 'string', description: 'The claim text to verify (e.g. "the row count is 1,284" or "all tests pass")' },
         goalContract: GOAL_CONTRACT_SCHEMA,
       },
     },
@@ -1223,6 +1325,19 @@ const TOOLS = [
           additionalProperties: true,
           description: 'Optional per-action budget controls: maxTokensPerAction, remainingTokens, maxCostUsdPerAction, remainingCostUsd, maxParallelBranches',
         },
+        financialControl: {
+          type: 'object',
+          additionalProperties: false,
+          description: 'Single-use purchase authorization scope from the append-only financial ledger.',
+          properties: {
+            requisitionId: { type: 'string' },
+            reservationId: { type: 'string' },
+            actionId: { type: 'string' },
+            vendor: { type: 'string' },
+            purpose: { type: 'string' },
+            sourceMessageId: { type: 'string' },
+          },
+        },
         workflowPattern: {
           type: 'string',
           enum: ['single_action', 'chaining', 'routing', 'parallelization', 'evaluator-optimizer', 'agent'],
@@ -1285,6 +1400,27 @@ const TOOLS = [
       },
     },
   }),
+  readOnlyTool({
+    name: 'gate_check',
+    // Harnesses with a native pre-tool hook (Claude Code, Codex, Gemini, Forge) get hard
+    // enforcement and never need this. MCP-only harnesses (Cline, Cursor, OpenCode) have no
+    // interception point, so this exposes the SAME gates engine as a tool the agent calls
+    // before acting. adapters/cline/.clinerules has instructed agents to call
+    // `thumbgate.gate_check` since the adapter shipped — but the tool did not exist, so
+    // that enforcement was inert. This makes the documented contract real.
+    description: 'Evaluate a proposed tool call against ThumbGate policy BEFORE executing it. Returns decision "block" (do not run the action; surface the reason) or "allow". Use this when about to run a shell command, write/edit a file, or take any irreversible action.',
+    inputSchema: {
+      type: 'object',
+      required: ['tool_name'],
+      properties: {
+        tool_name: { type: 'string', description: 'The tool about to be invoked (e.g. Bash, Write, Edit)' },
+        tool_input: {
+          type: 'object',
+          description: 'The proposed arguments, e.g. { "command": "rm -rf /" } for Bash or { "file_path": "..." } for Write',
+        },
+      },
+    },
+  }),
   readOnlyTool({
     name: 'gate_stats',
     description: 'Get gate enforcement statistics -- blocked count, warned count, top gates',
@@ -1609,13 +1745,13 @@ const TOOLS = [
   }),
   readOnlyTool({
     name: 'require_evidence_for_claim',
-    description: 'Leader-Agent completion gate. Before any agent declares done/fixed/shipped/resolved, require tracked evidence. Blocking response when evidence missing; callers honor the blocking flag to stop completion claims.',
+    description: 'Leader-Agent completion gate. Before any agent declares done/fixed/shipped/resolved, require tracked session evidence AND recheck parseable factual claims (row counts, file metrics, versions) against configured verifiers. Blocking response when evidence is missing or a factual claim mismatches; callers honor the blocking flag to stop completion claims.',
     inputSchema: {
       type: 'object',
       required: ['claim'],
       properties: {
-        claim: { type: 'string', description: 'The completion claim text to verify (e.g. "Fix shipped", "Tests passing")' },
-        mode: { type: 'string', enum: ['blocking', 'advisory'], description: 'blocking (default) returns blocking=true when evidence missing; advisory returns blocking=false' },
+        claim: { type: 'string', description: 'The completion claim text to verify (e.g. "Fix shipped", "the row count is 1,284")' },
+        mode: { type: 'string', enum: ['blocking', 'advisory'], description: 'blocking (default) returns blocking=true when evidence missing or factual claim mismatches; advisory returns blocking=false' },
         sessionId: { type: 'string', description: 'Optional session id to associate with the gate decision' },
         goalContract: GOAL_CONTRACT_SCHEMA,
       },