tryassay 0.3.0 → 0.11.0

package/dist/runtime/strategy-library.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategy-library.js","sourceRoot":"","sources":["../../src/runtime/strategy-library.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,kDAAkD;AAClD,wDAAwD;AACxD,qCAAqC;AACrC,+DAA+D;AAE/D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAQvD,MAAM,OAAO,eAAe;IAClB,UAAU,GAA0B,IAAI,GAAG,EAAE,CAAC;IAEtD,YAAY,OAAoB;QAC9B,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,aAA4B;QACrD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;aACjD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,aAAa,KAAK,aAAa,CAAC;aACrE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,wCAAwC;aACtE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,GAAG,CAAC,CAAC,gCAAgC;aAClE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;QAEjD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,UAAkB,EAClB,OAA0B,EAC1B,oBAA4B,EAC5B,UAAkB;QAElB,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ;YAAE,OAAO;QAEtB,QAAQ,CAAC,SAAS,EAAE,CAAC;QACrB,IAAI,OAAO,KAAK,SAAS;YAAE,QAAQ,CAAC,cAAc,EAAE,CAAC;QACrD,QAAQ,CAAC,WAAW,GAAG,QAAQ,CAAC,SAAS,GAAG,CAAC;YAC3C,CAAC,CAAC,QAAQ,CAAC,cAAc,GAAG,QAAQ,CAAC,SAAS;YAC9C,CAAC,CAAC,CAAC,CAAC;QAEN,6CAA6C;QAC7C,MAAM,SAAS,GAAG,QAAQ,CAAC,uBAAuB,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAC9E,QAAQ,CAAC,uBAAuB,GAAG,CAAC,SAAS,GAAG,oBAAoB,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC;QAE3F,+BAA+B;QAC/B,MAAM,YAAY,GAAG,QAAQ,CAAC,aAAa,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QACvE,QAAQ,CAAC,aAAa,GAAG,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC;QAE1E,QAAQ,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,WAAyB;QACtC,0DAA0D;QAC1D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;QAC/C,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;gBAAE,SAAS;YACxC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAClC,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBACnD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACpC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAe,EAAE,CAAC;QAErC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS,CAAC,2BAA2B;YAE1D,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAExC,2DAA2D;YAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;iBAClD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,aAAa,KAAK,MAAuB,CAAC,CAAC;YACnF,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC;gBAAE,SAAS,CAAC,4BAA4B;YAEhE,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,MAAuB,EAAE,IAAI,CAAC,CAAC;gBACnF,IAAI,QAAQ,EAAE,CAAC;oBACb,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;oBAC3C,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,sDAAsD;YACxD,CAAC;QACH,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,MAAM;QACJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,CAAC,UAAsB;QACzB,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,MAAc,EACd,aAA4B,EAC5B,WAAyB;QAEzB,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAClD,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;YAC/C,QAAQ,EAAE,CAAC,CAAC,SAAS,CAAC,eAAe;SACtC,CAAC,CAAC,CAAC;QAEJ,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC5C,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,kGAAkG;YAC1G,QAAQ,EAAE,CAAC;oBACT,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,SAAS,WAAW,CAAC,MAAM,+BAA+B,MAAM,iBAAiB,aAAa;;;EAG7G,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;;;;;;;EAOlC;iBACK,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,IAAI,CAAC;YACH,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC1B,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAIhC,CAAC;YAEF,OAAO;gBACL,EAAE,EAAE,UAAU,EAAE;gBAChB,MAAM;gBACN,aAAa;gBACb,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,SAAS,EAAE,CAAC;gBACZ,cAAc,EAAE,CAAC;gBACjB,WAAW,EAAE,CAAC;gBACd,uBAAuB,EAAE,CAAC;gBAC1B,aAAa,EAAE,CAAC;gBAChB,QAAQ,EAAE,EAAE;gBACZ,cAAc,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/runtime/supabase-experience-store.d.ts

@@ -0,0 +1,19 @@
+import type { ExperienceStoreInterface } from './reflector.js';
+import type { Experience, ExperienceOutcome, SkillProfile, ScoredExperience } from './types.js';
+export declare class SupabaseExperienceStore implements ExperienceStoreInterface {
+    private supabase;
+    private localFallback;
+    private online;
+    constructor(supabaseUrl: string, supabaseKey: string, localFallbackPath: string);
+    save(experience: Experience): Promise<void>;
+    search(query: string, limit?: number): Promise<ScoredExperience[]>;
+    getByDomain(domain: string, limit?: number): Promise<Experience[]>;
+    getByOutcome(outcome: ExperienceOutcome, limit?: number): Promise<Experience[]>;
+    getRecent(limit?: number): Promise<Experience[]>;
+    count(): Promise<number>;
+    getStats(): Promise<SkillProfile[]>;
+    getRelevantExperiences(context: string, limit?: number): Promise<Experience[]>;
+    isOnline(): boolean;
+    private fallbackSearch;
+    private rowToExperience;
+}

package/dist/runtime/supabase-experience-store.js

@@ -0,0 +1,215 @@
+// ============================================================
+// Assay Verified Agent Runtime — Supabase Experience Store
+// Replaces NDJSON file with Supabase pgvector for semantic search.
+// Falls back to local file when Supabase is unreachable.
+// ============================================================
+import { createClient } from '@supabase/supabase-js';
+import { ExperienceStore } from './reflector.js';
+// ── Embedding ─────────────────────────────────────────────────
+function buildEmbeddingText(exp) {
+    const parts = [
+        exp.domain,
+        exp.decision.reasoning.slice(0, 300),
+        exp.lessons.join('. '),
+        exp.outcome,
+        exp.delta?.slice(0, 200) ?? '',
+    ];
+    return parts.filter(Boolean).join(' | ');
+}
+async function computeEmbedding(text) {
+    // Use Anthropic's message API to generate a pseudo-embedding
+    // by hashing the semantic content. For production, swap to
+    // a dedicated embedding model (OpenAI text-embedding-3-small
+    // or Voyage AI). For now, use OpenAI since it's already a dep.
+    const { default: OpenAI } = await import('openai');
+    const client = new OpenAI();
+    const response = await client.embeddings.create({
+        model: 'text-embedding-3-small',
+        input: text.slice(0, 8000),
+    });
+    return response.data[0].embedding;
+}
+// ── SupabaseExperienceStore ──────────────────────────────────
+export class SupabaseExperienceStore {
+    supabase;
+    localFallback;
+    online = true;
+    constructor(supabaseUrl, supabaseKey, localFallbackPath) {
+        this.supabase = createClient(supabaseUrl, supabaseKey);
+        this.localFallback = new ExperienceStore(localFallbackPath);
+    }
+    async save(experience) {
+        // Always write to local fallback
+        await this.localFallback.save(experience);
+        // Try Supabase
+        try {
+            const embeddingText = buildEmbeddingText(experience);
+            const embedding = await computeEmbedding(embeddingText);
+            const { error } = await this.supabase.from('experiences').insert({
+                id: experience.id,
+                agent_name: experience.observation.source === 'filesystem'
+                    ? 'default'
+                    : 'default',
+                domain: experience.domain,
+                outcome: experience.outcome,
+                delta: experience.delta,
+                lessons: experience.lessons,
+                tags: experience.tags,
+                timestamp: experience.timestamp,
+                observation: experience.observation,
+                decision: experience.decision,
+                plan: experience.plan,
+                verification: experience.verification,
+                execution: experience.execution,
+                embedding: embedding,
+            });
+            if (error) {
+                console.error(`[SupabaseStore] Insert error: ${error.message}`);
+                this.online = false;
+            }
+            else {
+                this.online = true;
+            }
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.error(`[SupabaseStore] Save failed, using local only: ${msg}`);
+            this.online = false;
+        }
+    }
+    async search(query, limit = 5) {
+        if (!this.online) {
+            return this.fallbackSearch(query, limit);
+        }
+        try {
+            const queryEmbedding = await computeEmbedding(query);
+            const { data, error } = await this.supabase.rpc('match_experiences', {
+                query_embedding: queryEmbedding,
+                match_threshold: 0.3,
+                match_count: limit,
+            });
+            if (error || !data) {
+                console.error(`[SupabaseStore] Search error: ${error?.message}`);
+                return this.fallbackSearch(query, limit);
+            }
+            return data.map((row) => ({
+                experience: this.rowToExperience(row),
+                similarity: row.similarity,
+            }));
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            console.error(`[SupabaseStore] Search failed, using fallback: ${msg}`);
+            this.online = false;
+            return this.fallbackSearch(query, limit);
+        }
+    }
+    async getByDomain(domain, limit = 50) {
+        if (!this.online) {
+            return this.localFallback.getByDomain(domain);
+        }
+        try {
+            const { data, error } = await this.supabase
+                .from('experiences')
+                .select('*')
+                .eq('domain', domain)
+                .order('timestamp', { ascending: false })
+                .limit(limit);
+            if (error || !data) {
+                return this.localFallback.getByDomain(domain);
+            }
+            return data.map((row) => this.rowToExperience(row));
+        }
+        catch {
+            return this.localFallback.getByDomain(domain);
+        }
+    }
+    async getByOutcome(outcome, limit = 50) {
+        if (!this.online) {
+            return [];
+        }
+        try {
+            const { data, error } = await this.supabase
+                .from('experiences')
+                .select('*')
+                .eq('outcome', outcome)
+                .order('timestamp', { ascending: false })
+                .limit(limit);
+            if (error || !data)
+                return [];
+            return data.map((row) => this.rowToExperience(row));
+        }
+        catch {
+            return [];
+        }
+    }
+    async getRecent(limit = 10) {
+        if (!this.online) {
+            return [];
+        }
+        try {
+            const { data, error } = await this.supabase
+                .from('experiences')
+                .select('*')
+                .order('timestamp', { ascending: false })
+                .limit(limit);
+            if (error || !data)
+                return [];
+            return data.map((row) => this.rowToExperience(row));
+        }
+        catch {
+            return [];
+        }
+    }
+    async count() {
+        if (!this.online)
+            return 0;
+        try {
+            const { count, error } = await this.supabase
+                .from('experiences')
+                .select('*', { count: 'exact', head: true });
+            if (error || count === null)
+                return 0;
+            return count;
+        }
+        catch {
+            return 0;
+        }
+    }
+    async getStats() {
+        return this.localFallback.getStats();
+    }
+    // Interface compatibility method
+    async getRelevantExperiences(context, limit = 5) {
+        const scored = await this.search(context, limit);
+        return scored.map(s => s.experience);
+    }
+    isOnline() {
+        return this.online;
+    }
+    // ── Helpers ─────────────────────────────────────────────────
+    async fallbackSearch(query, limit) {
+        const results = await this.localFallback.getRelevantExperiences(query, limit);
+        return results.map((exp, i) => ({
+            experience: exp,
+            similarity: 1 - (i * 0.1), // approximate ranking
+        }));
+    }
+    rowToExperience(row) {
+        return {
+            id: row.id,
+            observation: row.observation,
+            decision: row.decision,
+            plan: row.plan,
+            verification: row.verification,
+            execution: row.execution,
+            outcome: row.outcome,
+            delta: row.delta ?? '',
+            lessons: row.lessons ?? [],
+            domain: row.domain,
+            tags: row.tags ?? [],
+            timestamp: row.timestamp,
+        };
+    }
+}
+//# sourceMappingURL=supabase-experience-store.js.map

package/dist/runtime/supabase-experience-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supabase-experience-store.js","sourceRoot":"","sources":["../../src/runtime/supabase-experience-store.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,2DAA2D;AAC3D,mEAAmE;AACnE,yDAAyD;AACzD,+DAA+D;AAE/D,OAAO,EAAE,YAAY,EAAkB,MAAM,uBAAuB,CAAC;AAErE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AASjD,iEAAiE;AAEjE,SAAS,kBAAkB,CAAC,GAAe;IACzC,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,MAAM;QACV,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QACpC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QACtB,GAAG,CAAC,OAAO;QACX,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE;KAC/B,CAAC;IACF,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,6DAA6D;IAC7D,2DAA2D;IAC3D,6DAA6D;IAC7D,+DAA+D;IAC/D,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;QAC9C,KAAK,EAAE,wBAAwB;QAC/B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACpC,CAAC;AAED,gEAAgE;AAEhE,MAAM,OAAO,uBAAuB;IAC1B,QAAQ,CAAiB;IACzB,aAAa,CAAkB;IAC/B,MAAM,GAAY,IAAI,CAAC;IAE/B,YACE,WAAmB,EACnB,WAAmB,EACnB,iBAAyB;QAEzB,IAAI,CAAC,QAAQ,GAAG,YAAY,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACvD,IAAI,CAAC,aAAa,GAAG,IAAI,eAAe,CAAC,iBAAiB,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,UAAsB;QAC/B,iCAAiC;QACjC,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE1C,eAAe;QACf,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;YACrD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,CAAC;YAExD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;gBAC/D,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,UAAU,EAAE,UAAU,CAAC,WAAW,CAAC,MAAM,KAAK,YAAY;oBACxD,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,SAAS;gBACb,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,YAAY,EAAE,UAAU,CAAC,YAAY;gBACrC,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,SAAS,EAAE,SAAS;aACrB,CAAC,CAAC;YAEH,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,CAAC,KAAK,CAAC,iCAAiC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YACrB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,kDAAkD,GAAG,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,QAAgB,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;QAED,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAErD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,mBAAmB,EAAE;gBACnE,eAAe,EAAE,cAAc;gBAC/B,eAAe,EAAE,GAAG;gBACpB,WAAW,EAAE,KAAK;aACnB,CAAC,CAAC;YAEH,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnB,OAAO,CAAC,KAAK,CAAC,iCAAiC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;gBACjE,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC3C,CAAC;YAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAA4B,EAAE,EAAE,CAAC,CAAC;gBACjD,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;gBACrC,UAAU,EAAE,GAAG,CAAC,UAAoB;aACrC,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,kDAAkD,GAAG,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACpB,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,QAAgB,EAAE;QAClD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;iBACxC,IAAI,CAAC,aAAa,CAAC;iBACnB,MAAM,CAAC,GAAG,CAAC;iBACX,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;iBACpB,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;iBACxC,KAAK,CAAC,KAAK,CAAC,CAAC;YAEhB,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnB,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAChD,CAAC;YAED,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAA4B,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,OAA0B,EAAE,QAAgB,EAAE;QAC/D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;iBACxC,IAAI,CAAC,aAAa,CAAC;iBACnB,MAAM,CAAC,GAAG,CAAC;iBACX,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC;iBACtB,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;iBACxC,KAAK,CAAC,KAAK,CAAC,CAAC;YAEhB,IAAI,KAAK,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAA4B,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,QAAgB,EAAE;QAChC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;iBACxC,IAAI,CAAC,aAAa,CAAC;iBACnB,MAAM,CAAC,GAAG,CAAC;iBACX,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;iBACxC,KAAK,CAAC,KAAK,CAAC,CAAC;YAEhB,IAAI,KAAK,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAA4B,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC;QAE3B,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ;iBACzC,IAAI,CAAC,aAAa,CAAC;iBACnB,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAE/C,IAAI,KAAK,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;IACvC,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,sBAAsB,CAAC,OAAe,EAAE,QAAgB,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,+DAA+D;IAEvD,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,KAAa;QACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9E,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,UAAU,EAAE,GAAG;YACf,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,sBAAsB;SAClD,CAAC,CAAC,CAAC;IACN,CAAC;IAEO,eAAe,CAAC,GAA4B;QAClD,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAY;YACpB,WAAW,EAAE,GAAG,CAAC,WAAwC;YACzD,QAAQ,EAAE,GAAG,CAAC,QAAkC;YAChD,IAAI,EAAE,GAAG,CAAC,IAA0B;YACpC,YAAY,EAAE,GAAG,CAAC,YAA0C;YAC5D,SAAS,EAAE,GAAG,CAAC,SAAoC;YACnD,OAAO,EAAE,GAAG,CAAC,OAAgC;YAC7C,KAAK,EAAG,GAAG,CAAC,KAAgB,IAAI,EAAE;YAClC,OAAO,EAAG,GAAG,CAAC,OAAoB,IAAI,EAAE;YACxC,MAAM,EAAE,GAAG,CAAC,MAAgB;YAC5B,IAAI,EAAG,GAAG,CAAC,IAAiB,IAAI,EAAE;YAClC,SAAS,EAAE,GAAG,CAAC,SAAmB;SACnC,CAAC;IACJ,CAAC;CACF"}

package/dist/runtime/tool-approval.d.ts

@@ -0,0 +1,51 @@
+import type { ToolDefinition, ToolVerification, ModificationProposal, ModificationApproval, ProposalStatus } from './types.js';
+import { ToolVerifier } from './tool-verifier.js';
+import { CapabilityRegistryManager } from './capability-registry.js';
+export interface PendingApproval {
+    readonly proposal: ModificationProposal;
+    readonly verification: ToolVerification;
+    readonly toolDefinition: ToolDefinition;
+    readonly toolSourceDir: string;
+}
+export declare class ToolApprovalManager {
+    private verifier;
+    private registry;
+    private pendingApprovals;
+    private approvalHistoryPath;
+    constructor(registry: CapabilityRegistryManager, verifier?: ToolVerifier, approvalHistoryPath?: string);
+    /**
+     * Propose a new tool. Runs verification and queues for human approval.
+     * Returns the proposal ID and verification result.
+     */
+    propose(tool: ToolDefinition, toolSourceDir: string, justification: {
+        capability_gap: string;
+        evidence: string[];
+        expected_impact: string;
+        risk_assessment: string;
+    }): Promise<{
+        proposalId: string;
+        verification: ToolVerification;
+        status: ProposalStatus;
+    }>;
+    /**
+     * List all pending approvals.
+     */
+    listPending(): PendingApproval[];
+    /**
+     * Get a specific pending approval.
+     */
+    getPending(proposalId: string): PendingApproval | undefined;
+    /**
+     * Approve a pending tool proposal. Activates the tool in the registry.
+     */
+    approve(proposalId: string, approvedBy: string, reasoning: string, conditions?: string[]): Promise<ModificationApproval>;
+    /**
+     * Reject a pending tool proposal.
+     */
+    reject(proposalId: string, rejectedBy: string, reasoning: string): Promise<ModificationApproval>;
+    /**
+     * Rollback the last registry change.
+     */
+    rollback(rolledBackBy: string): Promise<boolean>;
+    private logApproval;
+}

package/dist/runtime/tool-approval.js

@@ -0,0 +1,148 @@
+// ============================================================
+// Assay Verified Agent Runtime — Tool Approval Flow
+// Orchestrates: propose → verify → approve → activate
+// Human approval is required before any tool goes active.
+// ============================================================
+import { randomUUID } from 'node:crypto';
+import { mkdir, appendFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { ToolVerifier } from './tool-verifier.js';
+// ── Tool Approval Manager ──────────────────────────────────
+export class ToolApprovalManager {
+    verifier;
+    registry;
+    pendingApprovals = new Map();
+    approvalHistoryPath;
+    constructor(registry, verifier, approvalHistoryPath) {
+        this.registry = registry;
+        this.verifier = verifier ?? new ToolVerifier();
+        this.approvalHistoryPath = approvalHistoryPath ?? '.assay/tool-approvals.ndjson';
+    }
+    /**
+     * Propose a new tool. Runs verification and queues for human approval.
+     * Returns the proposal ID and verification result.
+     */
+    async propose(tool, toolSourceDir, justification) {
+        const proposalId = `mod_${Date.now()}_${randomUUID().slice(0, 8)}`;
+        // Create the proposal
+        const proposal = {
+            id: proposalId,
+            type: 'tool',
+            timestamp: new Date().toISOString(),
+            title: `New tool: ${tool.name}`,
+            description: tool.description,
+            payload: tool,
+            justification,
+            safety: {
+                modifies_layer2: false,
+                modifies_approval_framework: false,
+                trust_level_required: 'provisional',
+                rollback_plan: `Deprecate tool ${tool.id} and rollback registry`,
+            },
+            proposed_by: tool.created_by,
+            status: 'verifying',
+        };
+        // Run verification
+        const verification = await this.verifier.verify(tool, toolSourceDir);
+        // Update proposal status based on verification
+        let status;
+        if (verification.verdict === 'reject') {
+            status = 'rejected';
+        }
+        else {
+            status = 'pending_approval';
+            // Queue for human approval
+            this.pendingApprovals.set(proposalId, {
+                proposal: { ...proposal, status, verification_id: verification.verification_id },
+                verification,
+                toolDefinition: tool,
+                toolSourceDir,
+            });
+        }
+        return { proposalId, verification, status };
+    }
+    /**
+     * List all pending approvals.
+     */
+    listPending() {
+        return Array.from(this.pendingApprovals.values());
+    }
+    /**
+     * Get a specific pending approval.
+     */
+    getPending(proposalId) {
+        return this.pendingApprovals.get(proposalId);
+    }
+    /**
+     * Approve a pending tool proposal. Activates the tool in the registry.
+     */
+    async approve(proposalId, approvedBy, reasoning, conditions) {
+        const pending = this.pendingApprovals.get(proposalId);
+        if (!pending) {
+            throw new Error(`No pending approval found for proposal "${proposalId}"`);
+        }
+        const approval = {
+            proposal_id: proposalId,
+            decision: 'approved',
+            decided_by: approvedBy,
+            decided_at: new Date().toISOString(),
+            reasoning,
+            conditions,
+        };
+        // Activate the tool in the registry
+        const approvedTool = {
+            ...pending.toolDefinition,
+            status: 'approved',
+        };
+        this.registry.addTool(approvedTool, approvedBy, proposalId);
+        await this.registry.save();
+        // Remove from pending
+        this.pendingApprovals.delete(proposalId);
+        // Log the approval
+        await this.logApproval(approval);
+        return approval;
+    }
+    /**
+     * Reject a pending tool proposal.
+     */
+    async reject(proposalId, rejectedBy, reasoning) {
+        const pending = this.pendingApprovals.get(proposalId);
+        if (!pending) {
+            throw new Error(`No pending approval found for proposal "${proposalId}"`);
+        }
+        const approval = {
+            proposal_id: proposalId,
+            decision: 'rejected',
+            decided_by: rejectedBy,
+            decided_at: new Date().toISOString(),
+            reasoning,
+        };
+        // Remove from pending
+        this.pendingApprovals.delete(proposalId);
+        // Log the rejection
+        await this.logApproval(approval);
+        return approval;
+    }
+    /**
+     * Rollback the last registry change.
+     */
+    async rollback(rolledBackBy) {
+        const success = this.registry.rollback(rolledBackBy);
+        if (success) {
+            await this.registry.save();
+        }
+        return success;
+    }
+    // ── Private ──────────────────────────────────────────────
+    async logApproval(approval) {
+        try {
+            await mkdir(dirname(this.approvalHistoryPath), { recursive: true });
+            const line = JSON.stringify(approval) + '\n';
+            await appendFile(this.approvalHistoryPath, line, 'utf-8');
+        }
+        catch {
+            // Non-critical: approval history logging failure doesn't block the flow
+        }
+    }
+}
+//# sourceMappingURL=tool-approval.js.map

package/dist/runtime/tool-approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-approval.js","sourceRoot":"","sources":["../../src/runtime/tool-approval.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,oDAAoD;AACpD,sDAAsD;AACtD,0DAA0D;AAC1D,+DAA+D;AAE/D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AASpC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAYlD,8DAA8D;AAE9D,MAAM,OAAO,mBAAmB;IACtB,QAAQ,CAAe;IACvB,QAAQ,CAA4B;IACpC,gBAAgB,GAAiC,IAAI,GAAG,EAAE,CAAC;IAC3D,mBAAmB,CAAS;IAEpC,YACE,QAAmC,EACnC,QAAuB,EACvB,mBAA4B;QAE5B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,IAAI,YAAY,EAAE,CAAC;QAC/C,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,IAAI,8BAA8B,CAAC;IACnF,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CACX,IAAoB,EACpB,aAAqB,EACrB,aAKC;QAMD,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAEnE,sBAAsB;QACtB,MAAM,QAAQ,GAAyB;YACrC,EAAE,EAAE,UAAU;YACd,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,aAAa,IAAI,CAAC,IAAI,EAAE;YAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,OAAO,EAAE,IAAI;YACb,aAAa;YACb,MAAM,EAAE;gBACN,eAAe,EAAE,KAAc;gBAC/B,2BAA2B,EAAE,KAAc;gBAC3C,oBAAoB,EAAE,aAA2B;gBACjD,aAAa,EAAE,kBAAkB,IAAI,CAAC,EAAE,wBAAwB;aACjE;YACD,WAAW,EAAE,IAAI,CAAC,UAAU;YAC5B,MAAM,EAAE,WAAW;SACpB,CAAC;QAEF,mBAAmB;QACnB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAErE,+CAA+C;QAC/C,IAAI,MAAsB,CAAC;QAC3B,IAAI,YAAY,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,GAAG,UAAU,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,kBAAkB,CAAC;YAC5B,2BAA2B;YAC3B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE;gBACpC,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,CAAC,eAAe,EAAE;gBAChF,YAAY;gBACZ,cAAc,EAAE,IAAI;gBACpB,aAAa;aACd,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,UAAkB;QAC3B,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,UAAkB,EAClB,UAAkB,EAClB,SAAiB,EACjB,UAAqB;QAErB,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,2CAA2C,UAAU,GAAG,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,QAAQ,GAAyB;YACrC,WAAW,EAAE,UAAU;YACvB,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,UAAU;YACtB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,SAAS;YACT,UAAU;SACX,CAAC;QAEF,oCAAoC;QACpC,MAAM,YAAY,GAAmB;YACnC,GAAG,OAAO,CAAC,cAAc;YACzB,MAAM,EAAE,UAAU;SACnB,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAE3B,sBAAsB;QACtB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAEzC,mBAAmB;QACnB,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAEjC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,UAAkB,EAClB,UAAkB,EAClB,SAAiB;QAEjB,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,2CAA2C,UAAU,GAAG,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,QAAQ,GAAyB;YACrC,WAAW,EAAE,UAAU;YACvB,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,UAAU;YACtB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,SAAS;SACV,CAAC;QAEF,sBAAsB;QACtB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAEzC,oBAAoB;QACpB,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAEjC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,YAAoB;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACrD,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4DAA4D;IAEpD,KAAK,CAAC,WAAW,CAAC,QAA8B;QACtD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;YAC7C,MAAM,UAAU,CAAC,IAAI,CAAC,mBAAmB,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;QAC1E,CAAC;IACH,CAAC;CACF"}

package/dist/runtime/tool-sandbox.d.ts

@@ -0,0 +1,43 @@
+import type { ToolDefinition, ToolConstraints, ToolTestResult } from './types.js';
+export interface SandboxRequest {
+    readonly toolId: string;
+    readonly entryPoint: string;
+    readonly functionName: string;
+    readonly input: unknown;
+    readonly constraints: ToolConstraints;
+}
+export interface SandboxResponse {
+    readonly status: 'success' | 'error' | 'timeout' | 'constraint_violation';
+    readonly output?: unknown;
+    readonly error?: string;
+    readonly durationMs: number;
+    readonly memoryUsageMb?: number;
+    readonly networkAttempts?: readonly string[];
+    readonly filesystemWrites?: readonly string[];
+}
+export declare class ToolSandbox {
+    private sandboxDir;
+    constructor(sandboxBaseDir?: string);
+    /**
+     * Execute a tool in a sandboxed child process.
+     * Enforces all constraints from the ToolDefinition.
+     */
+    execute(request: SandboxRequest): Promise<SandboxResponse>;
+    /**
+     * Run a full test suite against a tool: happy path, malformed input,
+     * timeout behavior, and constraint compliance.
+     */
+    runTestSuite(tool: ToolDefinition, toolSourceDir: string): Promise<{
+        happy_path: ToolTestResult;
+        malformed_input: ToolTestResult;
+        timeout_behavior: ToolTestResult;
+        constraint_compliance: ToolTestResult;
+    }>;
+    private forkAndRun;
+    private generateRunnerScript;
+    private runSingleTest;
+    private runTimeoutTest;
+    private runConstraintComplianceTest;
+    private generateHappyPathInput;
+    private generateMalformedInput;
+}