wunderland 0.72.2 → 0.81.0

package/dist/runtime/tools/ToolApprovalHandler.d.ts

@@ -0,0 +1,152 @@
+/**
+ * @fileoverview HITL approval flow, security tier permission checks,
+ * step-up authorization, guardrails validation, and tool allowlist/denylist
+ * checking.
+ *
+ * Extracted from `tool-calling.ts` to isolate the authorization and
+ * guardrails layer from the LLM loop and streaming logic. Both the
+ * non-streaming {@link runToolCallingTurn} and streaming
+ * {@link streamToolCallingTurn} delegate tool authorization to the
+ * functions exported here.
+ *
+ * @module wunderland/runtime/ToolApprovalHandler
+ */
+import type { StepUpAuthorizationManager } from '../../security/StepUpAuthorizationManager.js';
+import type { ToolInstance } from './tool-helpers.js';
+export { TOOL_FALLBACK_MAP } from './tool-helpers.js';
+/**
+ * Options for {@link authorizeToolCall}.
+ *
+ * Contains everything needed to decide whether a tool call should be
+ * executed, denied, or escalated to the user for HITL approval.
+ */
+export interface ToolAuthorizationOpts {
+    /** The resolved tool instance. */
+    tool: ToolInstance;
+    /** The canonical tool name (after any rewriting). */
+    toolName: string;
+    /** The tool call arguments from the LLM. */
+    args: Record<string, unknown>;
+    /** The tool call ID for message correlation. */
+    callId: string;
+    /** The authorization manager instance. */
+    authManager: StepUpAuthorizationManager;
+    /** Shared context passed to tool execution. */
+    toolContext: Record<string, unknown>;
+    /** Whether to skip all permission checks. */
+    dangerouslySkipPermissions: boolean;
+    /** Interactive permission callback for HITL approval. */
+    askPermission: (tool: ToolInstance, args: Record<string, unknown>) => Promise<boolean>;
+    /** Whether to wrap tool output for the LLM. */
+    shouldWrapToolOutputs: boolean;
+    /** Whether to abort on any tool failure. */
+    failClosedOnToolFailure: boolean;
+    /** Mutable message array for pushing denial messages. */
+    messages: Array<Record<string, unknown>>;
+}
+/**
+ * Result of a tool authorization check.
+ */
+export interface ToolAuthorizationResult {
+    /** Whether the tool call is authorized to proceed. */
+    authorized: boolean;
+    /** Whether the user explicitly approved this call via HITL. */
+    hitlApproved: boolean;
+    /** If authorization failed and fail_closed is active, the reply to return. */
+    earlyReturn?: string;
+    /** If authorization failed, the denial reason. */
+    error?: string;
+}
+/**
+ * Options for {@link executeWithGuardrails}.
+ *
+ * Encapsulates the guardrails validation, folder escalation, and
+ * tool execution within a single instrumented span.
+ */
+export interface GuardrailExecutionOpts {
+    /** The resolved tool instance. */
+    tool: ToolInstance;
+    /** The canonical tool name. */
+    toolName: string;
+    /** The resolved tool key from the tool map. */
+    resolvedToolKey: string;
+    /** The tool call arguments. */
+    args: Record<string, unknown>;
+    /** The tool call ID. */
+    callId: string;
+    /** Shared context passed to tool execution. */
+    toolContext: Record<string, unknown>;
+    /** Per-call tool context (may include onToolProgress). */
+    callToolContext: Record<string, unknown>;
+    /** Whether the user already HITL-approved this call (skip re-prompting). */
+    hitlApproved: boolean;
+    /** Whether to skip all permission checks. */
+    dangerouslySkipPermissions: boolean;
+    /** Interactive permission callback for folder escalation. */
+    askPermission: (tool: ToolInstance, args: Record<string, unknown>) => Promise<boolean>;
+}
+/**
+ * Perform step-up authorization for a tool call.
+ *
+ * Evaluates the tool against the {@link StepUpAuthorizationManager}'s
+ * tier configuration:
+ *
+ * - **Tier 1 (Autonomous)**: Auto-approved, no prompt.
+ * - **Tier 2 (Async Review)**: Auto-approved, queued for review.
+ * - **Tier 3 (Sync HITL)**: Prompts the user via `askPermission`.
+ *
+ * When `dangerouslySkipPermissions` is `true`, all tiers are auto-approved.
+ *
+ * @param opts - Authorization options.
+ * @returns Authorization result indicating whether to proceed.
+ */
+export declare function authorizeToolCall(opts: ToolAuthorizationOpts): Promise<ToolAuthorizationResult>;
+/**
+ * Execute a tool with guardrails validation and folder escalation.
+ *
+ * Wraps tool execution inside an OTel span and performs:
+ *
+ * 1. **Pre-check**: `file_read` on directories fails fast with a helpful message.
+ * 2. **Guardrails validation**: Checks folder access rules, sandbox boundaries.
+ * 3. **Folder escalation**: If denied paths are escalatable, prompts the user
+ *    (or auto-grants if HITL already approved this call) and adds folder rules.
+ * 4. **Execution**: Calls `tool.execute(args, callToolContext)`.
+ *
+ * @param opts - Execution options.
+ * @returns The tool execution result.
+ */
+export declare function executeWithGuardrails(opts: GuardrailExecutionOpts): Promise<{
+    success: boolean;
+    output?: unknown;
+    error?: string;
+}>;
+/**
+ * Build the tool result message payload, including fallback suggestions
+ * for failed or empty-result tools.
+ *
+ * @param result - The tool execution result.
+ * @param toolName - The canonical tool name.
+ * @param callId - The tool call ID.
+ * @param toolMap - The current tool map (to check fallback availability).
+ * @param shouldWrapToolOutputs - Whether to wrap output for the LLM.
+ * @param debugMode - Whether to log debug output.
+ * @returns The message content string to push into the conversation.
+ */
+export declare function buildToolResultPayload(result: {
+    success: boolean;
+    output?: unknown;
+    error?: string;
+}, toolName: string, callId: string, toolMap: Map<string, ToolInstance>, shouldWrapToolOutputs: boolean, debugMode: boolean): Promise<string>;
+/**
+ * Build the error payload for a tool that threw an exception.
+ *
+ * Includes API key guidance hints and suggested fallback tools when
+ * available in the tool map.
+ *
+ * @param errMsg - The error message from the thrown exception.
+ * @param toolName - The canonical tool name.
+ * @param toolMap - The current tool map.
+ * @returns The JSON-serialized error payload.
+ */
+export declare function buildToolErrorPayload(errMsg: string, toolName: string, toolMap: Map<string, ToolInstance>): Promise<string>;
+//# sourceMappingURL=ToolApprovalHandler.d.ts.map

package/dist/runtime/tools/ToolApprovalHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolApprovalHandler.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/ToolApprovalHandler.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;GAYG;AAMH,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC/F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAetD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAItD;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,kCAAkC;IAClC,IAAI,EAAE,YAAY,CAAC;IACnB,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,WAAW,EAAE,0BAA0B,CAAC;IACxC,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,6CAA6C;IAC7C,0BAA0B,EAAE,OAAO,CAAC;IACpC,yDAAyD;IACzD,aAAa,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvF,+CAA+C;IAC/C,qBAAqB,EAAE,OAAO,CAAC;IAC/B,4CAA4C;IAC5C,uBAAuB,EAAE,OAAO,CAAC;IACjC,yDAAyD;IACzD,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,sDAAsD;IACtD,UAAU,EAAE,OAAO,CAAC;IACpB,+DAA+D;IAC/D,YAAY,EAAE,OAAO,CAAC;IACtB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,kCAAkC;IAClC,IAAI,EAAE,YAAY,CAAC;IACnB,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,eAAe,EAAE,MAAM,CAAC;IACxB,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,0DAA0D;IAC1D,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,4EAA4E;IAC5E,YAAY,EAAE,OAAO,CAAC;IACtB,6CAA6C;IAC7C,0BAA0B,EAAE,OAAO,CAAC;IACpC,6DAA6D;IAC7D,aAAa,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxF;AAID;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,uBAAuB,CAAC,CA0DlC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA+FjE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EAC9D,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,EAClC,qBAAqB,EAAE,OAAO,EAC9B,SAAS,EAAE,OAAO,GACjB,OAAO,CAAC,MAAM,CAAC,CAqCjB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,GACjC,OAAO,CAAC,MAAM,CAAC,CAcjB"}

package/dist/runtime/tools/ToolApprovalHandler.js

@@ -0,0 +1,269 @@
+// @ts-nocheck
+/**
+ * @fileoverview HITL approval flow, security tier permission checks,
+ * step-up authorization, guardrails validation, and tool allowlist/denylist
+ * checking.
+ *
+ * Extracted from `tool-calling.ts` to isolate the authorization and
+ * guardrails layer from the LLM loop and streaming logic. Both the
+ * non-streaming {@link runToolCallingTurn} and streaming
+ * {@link streamToolCallingTurn} delegate tool authorization to the
+ * functions exported here.
+ *
+ * @module wunderland/runtime/ToolApprovalHandler
+ */
+import * as path from 'node:path';
+import { ToolRiskTier, } from '../../types/core-types.js';
+import { getGuardrails, toAuthorizableTool, wrapUntrustedToolOutput, getAgentIdForGuardrails, getAgentWorkspaceDirFromContext, withSpan, redactToolOutputForLLM, safeJsonStringify, isEmptySearchResult, TOOL_FALLBACK_MAP, } from './tool-helpers.js';
+// Re-export TOOL_FALLBACK_MAP for consumers that import from this module.
+export { TOOL_FALLBACK_MAP } from './tool-helpers.js';
+// ── Functions ──────────────────────────────────────────────────────────────
+/**
+ * Perform step-up authorization for a tool call.
+ *
+ * Evaluates the tool against the {@link StepUpAuthorizationManager}'s
+ * tier configuration:
+ *
+ * - **Tier 1 (Autonomous)**: Auto-approved, no prompt.
+ * - **Tier 2 (Async Review)**: Auto-approved, queued for review.
+ * - **Tier 3 (Sync HITL)**: Prompts the user via `askPermission`.
+ *
+ * When `dangerouslySkipPermissions` is `true`, all tiers are auto-approved.
+ *
+ * @param opts - Authorization options.
+ * @returns Authorization result indicating whether to proceed.
+ */
+export async function authorizeToolCall(opts) {
+    const { tool, toolName, args, callId, authManager, toolContext, dangerouslySkipPermissions, askPermission, shouldWrapToolOutputs, failClosedOnToolFailure, messages } = opts;
+    const authResult = await authManager.authorize({
+        tool: toAuthorizableTool(tool),
+        args,
+        context: {
+            userId: String(toolContext?.['userContext'] && typeof toolContext['userContext'] === 'object'
+                ? toolContext['userContext']?.['userId'] ?? 'cli-user'
+                : 'cli-user'),
+            sessionId: String(toolContext?.['gmiId'] ?? 'cli'),
+            gmiId: String(toolContext?.['personaId'] ?? 'cli'),
+        },
+        timestamp: new Date(),
+    });
+    if (!authResult.authorized) {
+        if (authResult.tier === ToolRiskTier.TIER_3_SYNC_HITL && !dangerouslySkipPermissions) {
+            const ok = await askPermission(tool, args);
+            if (!ok) {
+                const denial = JSON.stringify({ error: `Permission denied for tool: ${toolName}` });
+                messages.push({
+                    role: 'tool',
+                    tool_call_id: callId,
+                    content: shouldWrapToolOutputs
+                        ? wrapUntrustedToolOutput(denial, { toolName, toolCallId: callId, includeWarning: false })
+                        : denial,
+                });
+                const earlyReturn = failClosedOnToolFailure
+                    ? `[tool_failure_mode=fail_closed] Permission denied for tool: ${toolName}.`
+                    : undefined;
+                if (earlyReturn) {
+                    messages.push({ role: 'assistant', content: earlyReturn });
+                }
+                return { authorized: false, hitlApproved: false, earlyReturn, error: `Permission denied for tool: ${toolName}` };
+            }
+            return { authorized: true, hitlApproved: true };
+        }
+        else if (!dangerouslySkipPermissions) {
+            const denial = JSON.stringify({ error: `Permission denied for tool: ${toolName}` });
+            messages.push({
+                role: 'tool',
+                tool_call_id: callId,
+                content: shouldWrapToolOutputs
+                    ? wrapUntrustedToolOutput(denial, { toolName, toolCallId: callId, includeWarning: false })
+                    : denial,
+            });
+            const earlyReturn = failClosedOnToolFailure
+                ? `[tool_failure_mode=fail_closed] Permission denied for tool: ${toolName}.`
+                : undefined;
+            if (earlyReturn) {
+                messages.push({ role: 'assistant', content: earlyReturn });
+            }
+            return { authorized: false, hitlApproved: false, earlyReturn, error: `Permission denied for tool: ${toolName}` };
+        }
+        // dangerouslySkipPermissions — fall through to authorized
+    }
+    return { authorized: true, hitlApproved: false };
+}
+/**
+ * Execute a tool with guardrails validation and folder escalation.
+ *
+ * Wraps tool execution inside an OTel span and performs:
+ *
+ * 1. **Pre-check**: `file_read` on directories fails fast with a helpful message.
+ * 2. **Guardrails validation**: Checks folder access rules, sandbox boundaries.
+ * 3. **Folder escalation**: If denied paths are escalatable, prompts the user
+ *    (or auto-grants if HITL already approved this call) and adds folder rules.
+ * 4. **Execution**: Calls `tool.execute(args, callToolContext)`.
+ *
+ * @param opts - Execution options.
+ * @returns The tool execution result.
+ */
+export async function executeWithGuardrails(opts) {
+    return await withSpan('wunderland.tool.execute', {
+        tool_name: opts.toolName,
+        tool_category: opts.tool.category ?? '',
+        tool_has_side_effects: opts.tool.hasSideEffects === true,
+        authorized: true,
+    }, async () => {
+        // Pre-check: file_read on directories should fail-fast
+        if (opts.tool.name === 'file_read') {
+            const readPath = opts.args.path || opts.args.file_path || opts.args.filePath;
+            if (typeof readPath === 'string') {
+                try {
+                    const fsp = await import('node:fs/promises');
+                    const s = await fsp.stat(path.resolve(readPath));
+                    if (s.isDirectory()) {
+                        return {
+                            success: false,
+                            error: `"${readPath}" is a directory, not a file. Use list_directory to view directory contents.`,
+                        };
+                    }
+                }
+                catch { /* path doesn't exist — let normal flow handle */ }
+            }
+        }
+        // Guardrails validation
+        const guardrails = getGuardrails();
+        const agentId = getAgentIdForGuardrails(opts.toolContext);
+        const guardrailsCheck = await guardrails.validateBeforeExecution({
+            toolId: opts.resolvedToolKey || opts.tool.name,
+            toolName: opts.tool.name,
+            args: opts.args,
+            agentId,
+            userId: opts.toolContext.userContext?.userId,
+            sessionId: opts.toolContext.sessionId,
+            workingDirectory: getAgentWorkspaceDirFromContext(opts.toolContext, agentId),
+            tool: opts.tool,
+        });
+        if (!guardrailsCheck.allowed) {
+            // Attempt automatic permission escalation via HITL
+            const deniedPaths = (guardrailsCheck.violations || [])
+                .map(v => v.attemptedPath)
+                .filter((p) => !!p);
+            const allEscalatable = deniedPaths.length > 0 && deniedPaths.every(p => guardrails.isEscalatable(p));
+            if (allEscalatable) {
+                const operation = deniedPaths.length > 0 ? (guardrailsCheck.violations?.[0]?.operation || opts.tool.name) : opts.tool.name;
+                const isWrite = operation.includes('write') || operation.includes('delete') || operation.includes('append');
+                const autoGrant = opts.hitlApproved || opts.dangerouslySkipPermissions;
+                const approved = autoGrant || (opts.askPermission
+                    ? await opts.askPermission({ ...opts.tool, name: `folder_access:${opts.tool.name}`, description: `Grant ${isWrite ? 'write' : 'read'} access to: ${deniedPaths.join(', ')}` }, { paths: deniedPaths, operation: isWrite ? 'write' : 'read', originalTool: opts.tool.name })
+                    : false);
+                if (approved) {
+                    for (const p of deniedPaths) {
+                        const dir = p.endsWith('/') ? p : path.dirname(p);
+                        guardrails.addFolderRule(agentId, {
+                            pattern: `${dir}/**`,
+                            read: true,
+                            write: isWrite,
+                            description: `Granted at runtime for ${opts.tool.name}`,
+                        });
+                        const shellSvc = opts.tool.shellService;
+                        if (shellSvc && typeof shellSvc.addReadRoot === 'function') {
+                            shellSvc.addReadRoot(dir);
+                            if (isWrite) {
+                                shellSvc.addWriteRoot(dir);
+                            }
+                        }
+                    }
+                    return await opts.tool.execute(opts.args, opts.callToolContext);
+                }
+            }
+            return {
+                success: false,
+                error: guardrailsCheck.reason,
+                output: {
+                    violations: guardrailsCheck.violations,
+                    canRequestAccess: allEscalatable,
+                },
+            };
+        }
+        return await opts.tool.execute(opts.args, opts.callToolContext);
+    });
+}
+/**
+ * Build the tool result message payload, including fallback suggestions
+ * for failed or empty-result tools.
+ *
+ * @param result - The tool execution result.
+ * @param toolName - The canonical tool name.
+ * @param callId - The tool call ID.
+ * @param toolMap - The current tool map (to check fallback availability).
+ * @param shouldWrapToolOutputs - Whether to wrap output for the LLM.
+ * @param debugMode - Whether to log debug output.
+ * @returns The message content string to push into the conversation.
+ */
+export async function buildToolResultPayload(result, toolName, callId, toolMap, shouldWrapToolOutputs, debugMode) {
+    let payload;
+    if (result?.success) {
+        payload = redactToolOutputForLLM(result.output);
+        const emptyFallbacks = TOOL_FALLBACK_MAP[toolName];
+        const availableEmptyFallbacks = emptyFallbacks?.filter(f => toolMap?.has(f));
+        if (availableEmptyFallbacks?.length && isEmptySearchResult(result.output)) {
+            payload = {
+                ...((typeof payload === 'object' && payload) || { output: payload }),
+                suggestedFallbacks: availableEmptyFallbacks,
+                hint: 'Search returned 0 results. Try the suggested fallback tools.',
+            };
+        }
+    }
+    else {
+        const errorMsg = result?.error || 'Tool failed';
+        let apiKeyHint;
+        try {
+            const registry = await import('@framers/agentos-extensions-registry');
+            const getApiKeyGuidance = registry.getApiKeyGuidance;
+            if (typeof getApiKeyGuidance === 'function')
+                apiKeyHint = getApiKeyGuidance(errorMsg, toolName) ?? undefined;
+        }
+        catch { /* best-effort */ }
+        const fallbacksOnFail = TOOL_FALLBACK_MAP[toolName];
+        const availableFallbacksOnFail = fallbacksOnFail?.filter(f => toolMap?.has(f));
+        payload = {
+            error: errorMsg,
+            ...(apiKeyHint ? { apiKeyGuidance: apiKeyHint } : null),
+            ...(availableFallbacksOnFail?.length ? { suggestedFallbacks: availableFallbacksOnFail } : null),
+        };
+    }
+    const json = safeJsonStringify(payload, 20000);
+    if (debugMode) {
+        console.log(`[tool-calling] Tool ${toolName} result: success=${result?.success}, output=${json.slice(0, 300)}`);
+    }
+    return shouldWrapToolOutputs
+        ? wrapUntrustedToolOutput(json, { toolName, toolCallId: callId, includeWarning: true })
+        : json;
+}
+/**
+ * Build the error payload for a tool that threw an exception.
+ *
+ * Includes API key guidance hints and suggested fallback tools when
+ * available in the tool map.
+ *
+ * @param errMsg - The error message from the thrown exception.
+ * @param toolName - The canonical tool name.
+ * @param toolMap - The current tool map.
+ * @returns The JSON-serialized error payload.
+ */
+export async function buildToolErrorPayload(errMsg, toolName, toolMap) {
+    let apiKeyGuidance;
+    try {
+        const registry = await import('@framers/agentos-extensions-registry');
+        const getApiKeyGuidance = registry.getApiKeyGuidance;
+        if (typeof getApiKeyGuidance === 'function')
+            apiKeyGuidance = getApiKeyGuidance(errMsg, toolName) ?? undefined;
+    }
+    catch { /* best-effort */ }
+    const fallbacks = TOOL_FALLBACK_MAP[toolName];
+    const availableFallbacks = fallbacks?.filter(f => toolMap?.has(f));
+    return JSON.stringify({
+        error: `Tool threw: ${errMsg}`,
+        ...(apiKeyGuidance ? { apiKeyGuidance } : null),
+        ...(availableFallbacks?.length ? { suggestedFallbacks: availableFallbacks } : null),
+    });
+}
+//# sourceMappingURL=ToolApprovalHandler.js.map

package/dist/runtime/tools/ToolApprovalHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolApprovalHandler.js","sourceRoot":"","sources":["../../../src/runtime/tools/ToolApprovalHandler.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,YAAY,GACb,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EACvB,+BAA+B,EAC/B,QAAQ,EACR,sBAAsB,EACtB,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,0EAA0E;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AA8EtD,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAA2B;IAE3B,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,0BAA0B,EAAE,aAAa,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAE7K,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC;QAC7C,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC;QAC9B,IAAI;QACJ,OAAO,EAAE;YACP,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC,IAAI,OAAO,WAAW,CAAC,aAAa,CAAC,KAAK,QAAQ;gBAC3F,CAAC,CAAE,WAAW,CAAC,aAAa,CAA6B,EAAE,CAAC,QAAQ,CAAC,IAAI,UAAU;gBACnF,CAAC,CAAC,UAAU,CAAC;YACf,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;YAClD,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC;SACnD;QACD,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC,CAAC;IAEH,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAC3B,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,CAAC,gBAAgB,IAAI,CAAC,0BAA0B,EAAE,CAAC;YACrF,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,+BAA+B,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACpF,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,MAAM;oBACZ,YAAY,EAAE,MAAM;oBACpB,OAAO,EAAE,qBAAqB;wBAC5B,CAAC,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;wBAC1F,CAAC,CAAC,MAAM;iBACX,CAAC,CAAC;gBACH,MAAM,WAAW,GAAG,uBAAuB;oBACzC,CAAC,CAAC,+DAA+D,QAAQ,GAAG;oBAC5E,CAAC,CAAC,SAAS,CAAC;gBACd,IAAI,WAAW,EAAE,CAAC;oBAChB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBACD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,+BAA+B,QAAQ,EAAE,EAAE,CAAC;YACnH,CAAC;YACD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAClD,CAAC;aAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,+BAA+B,QAAQ,EAAE,EAAE,CAAC,CAAC;YACpF,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,MAAM;gBACZ,YAAY,EAAE,MAAM;gBACpB,OAAO,EAAE,qBAAqB;oBAC5B,CAAC,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;oBAC1F,CAAC,CAAC,MAAM;aACX,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,uBAAuB;gBACzC,CAAC,CAAC,+DAA+D,QAAQ,GAAG;gBAC5E,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,WAAW,EAAE,CAAC;gBAChB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,+BAA+B,QAAQ,EAAE,EAAE,CAAC;QACnH,CAAC;QACD,0DAA0D;IAC5D,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAA4B;IAE5B,OAAO,MAAM,QAAQ,CACnB,yBAAyB,EACzB;QACE,SAAS,EAAE,IAAI,CAAC,QAAQ;QACxB,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE;QACvC,qBAAqB,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,IAAI;QACxD,UAAU,EAAE,IAAI;KACjB,EACD,KAAK,IAAI,EAAE;QACT,uDAAuD;QACvD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAI,IAAI,CAAC,IAAY,CAAC,IAAI,IAAK,IAAI,CAAC,IAAY,CAAC,SAAS,IAAK,IAAI,CAAC,IAAY,CAAC,QAAQ,CAAC;YACxG,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;oBAC7C,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;oBACjD,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;wBACpB,OAAO;4BACL,OAAO,EAAE,KAAK;4BACd,KAAK,EAAE,IAAI,QAAQ,8EAA8E;yBAClG,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAC,iDAAiD,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1D,MAAM,eAAe,GAAG,MAAM,UAAU,CAAC,uBAAuB,CAAC;YAC/D,MAAM,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI;YAC9C,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACxB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO;YACP,MAAM,EAAG,IAAI,CAAC,WAAW,CAAC,WAAmB,EAAE,MAAM;YACrD,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,SAA+B;YAC3D,gBAAgB,EAAE,+BAA+B,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;YAC5E,IAAI,EAAE,IAAI,CAAC,IAAW;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;YAC7B,mDAAmD;YACnD,MAAM,WAAW,GAAG,CAAC,eAAe,CAAC,UAAU,IAAI,EAAE,CAAC;iBACnD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;iBACzB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;YAErG,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC3H,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAE5G,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,0BAA0B,CAAC;gBACvE,MAAM,QAAQ,GAAG,SAAS,IAAI,CAAC,IAAI,CAAC,aAAa;oBAC/C,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CACtB,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,iBAAiB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,SAAS,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,eAAe,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAkB,EAClK,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAC5F;oBACH,CAAC,CAAC,KAAK,CAAC,CAAC;gBAEX,IAAI,QAAQ,EAAE,CAAC;oBACb,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;wBAC5B,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;wBAClD,UAAU,CAAC,aAAa,CAAC,OAAO,EAAE;4BAChC,OAAO,EAAE,GAAG,GAAG,KAAK;4BACpB,IAAI,EAAE,IAAI;4BACV,KAAK,EAAE,OAAO;4BACd,WAAW,EAAE,0BAA0B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;yBACxD,CAAC,CAAC;wBAEH,MAAM,QAAQ,GAAI,IAAI,CAAC,IAAY,CAAC,YAAY,CAAC;wBACjD,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;4BAC3D,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;4BAC1B,IAAI,OAAO,EAAE,CAAC;gCACZ,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;4BAC7B,CAAC;wBACH,CAAC;oBACH,CAAC;oBACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,eAAe,CAAC,MAAM;gBAC7B,MAAM,EAAE;oBACN,UAAU,EAAE,eAAe,CAAC,UAAU;oBACtC,gBAAgB,EAAE,cAAc;iBACjC;aACF,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAClE,CAAC,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAA8D,EAC9D,QAAgB,EAChB,MAAc,EACd,OAAkC,EAClC,qBAA8B,EAC9B,SAAkB;IAElB,IAAI,OAAgB,CAAC;IACrB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;QACpB,OAAO,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,cAAc,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,uBAAuB,GAAG,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,IAAI,uBAAuB,EAAE,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1E,OAAO,GAAG;gBACR,GAAG,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpE,kBAAkB,EAAE,uBAAuB;gBAC3C,IAAI,EAAE,8DAA8D;aACrE,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,MAAM,EAAE,KAAK,IAAI,aAAa,CAAC;QAChD,IAAI,UAA8B,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;YACtE,MAAM,iBAAiB,GAAI,QAAgB,CAAC,iBAAiB,CAAC;YAC9D,IAAI,OAAO,iBAAiB,KAAK,UAAU;gBAAE,UAAU,GAAG,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC;QAC/G,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC7B,MAAM,eAAe,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,wBAAwB,GAAG,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,OAAO,GAAG;YACR,KAAK,EAAE,QAAQ;YACf,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACvD,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAChG,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,uBAAuB,QAAQ,oBAAoB,MAAM,EAAE,OAAO,YAAY,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,qBAAqB;QAC1B,CAAC,CAAC,uBAAuB,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QACvF,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,QAAgB,EAChB,OAAkC;IAElC,IAAI,cAAkC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;QACtE,MAAM,iBAAiB,GAAI,QAAgB,CAAC,iBAAiB,CAAC;QAC9D,IAAI,OAAO,iBAAiB,KAAK,UAAU;YAAE,cAAc,GAAG,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC;IACjH,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC7B,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,kBAAkB,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,KAAK,EAAE,eAAe,MAAM,EAAE;QAC9B,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/C,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;KACpF,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/tools/ToolRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolRegistry.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/ToolRegistry.ts"],"names":[],"mappings":"AACA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAG9C,MAAM,WAAW,kBAAkB;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,KAAK,GAAG,MAAM,CAAC;IAClC,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,KAAK,GAAG,MAAM,CAAC;IAClC,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,KAAK,GAAG,MAAM,CAAC;CAC1C;AAED;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;CAatB,CAAC;AA8BX;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CA0CzF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAyDxH;AAGD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC"}

package/dist/runtime/tools/ToolRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolRegistry.js","sourceRoot":"","sources":["../../../src/runtime/tools/ToolRegistry.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;;GASG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAiC7E;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,UAAU,EAAE,YAAY;IACxB,kBAAkB,EAAE,oBAAoB;IACxC,UAAU,EAAE,YAAY;IACxB,WAAW,EAAE,aAAa;IAC1B,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,cAAc,EAAE,gBAAgB;IAChC,cAAc,EAAE,gBAAgB;IAChC,WAAW,EAAE,aAAa;IAC1B,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;CAClB,CAAC;AAEX;;;GAGG;AACH,SAAS,eAAe,CAAC,MAA2B;IAClD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,WAAoB,EAAE,MAAe,EAAE,EAAE;QACjE,MAAM,GAAG,GAAG,WAAW,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACtE,IAAI,GAAG;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC9B,CAAC,CAAC;IAEF,GAAG,CAAC,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAC7D,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAC7D,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IAC1D,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IACtD,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IAC1D,GAAG,CAAC,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAC7D,GAAG,CAAC,mBAAmB,EAAE,MAAM,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;IACzE,GAAG,CAAC,iBAAiB,EAAE,MAAM,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACnE,GAAG,CAAC,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAC7D,GAAG,CAAC,iBAAiB,EAAE,MAAM,EAAE,cAAc,EAAE,qBAAqB,CAAC,CAAC;IACtE,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAAC;IAChE,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAE7D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAA2B;IACrE,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC;QAC3C,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,KAAK;QAC7B,KAAK,EAAE,MAAM,EAAE,KAAK;QACpB,YAAY,EAAE,MAAM,EAAE,YAAY;QAClC,QAAQ,EAAE,MAAM;QAChB,OAAO;QACP,SAAS,EAAE;YACT,iBAAiB,EAAE;gBACjB,OAAO,EAAE;oBACP,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;oBAChE,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;oBACnE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;oBAC5E,cAAc,EAAE,MAAM,EAAE,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB;oBACtE,eAAe,EAAE,MAAM,EAAE,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB;oBACzE,mBAAmB,EAAE,MAAM,EAAE,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB;oBACtF,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;oBACnE,eAAe,EAAE,MAAM,EAAE,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;oBACvE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;iBAC3E;aACF;SACF;KAC6C,CAAC,CAAC;IAElD,MAAM,KAAK,GAAY,EAAE,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,UAAU;YAAE,SAAS;QACzE,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YAC3C,KAAK,MAAM,UAAU,IAAK,aAAqB,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;gBAClE,IAAI,UAAU,EAAE,IAAI,KAAK,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;oBACtD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA2B;IAC7D,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAExC,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IACjI,MAAM,cAAc,GAAG,CAAC,CAAC,CACvB,OAAO,CAAC,eAAe,CAAC;QACxB,OAAO,CAAC,mBAAmB,CAAC;QAC5B,MAAM,EAAE,aAAa;QACrB,OAAO,CAAC,GAAG,CAAC,eAAe,CAC5B,CAAC;IACF,MAAM,cAAc,GAAG,CAAC,CAAC,CACvB,OAAO,CAAC,eAAe,CAAC;QACxB,OAAO,CAAC,iBAAiB,CAAC;QAC1B,MAAM,EAAE,mBAAmB;QAC3B,OAAO,CAAC,GAAG,CAAC,sBAAsB,CACnC,CAAC;IAEF,OAAO;QACL,CAAC,mBAAmB,CAAC,UAAU,CAAC,EAAE;YAChC,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8FAA8F;SAC/H;QACD,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,EAAE;YACxC,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8FAA8F;SAC/H;QACD,CAAC,mBAAmB,CAAC,UAAU,CAAC,EAAE;YAChC,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8FAA8F;SAC/H;QACD,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE;YACjC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;YACtC,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB;SAC1E;QACD,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE;YAClC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;YACpC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB;SACtE;QACD,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE;YAClC,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAClG,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBAC3F,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,uBAAuB;SAC5B;QACD,CAAC,mBAAmB,CAAC,cAAc,CAAC,EAAE;YACpC,SAAS,EAAE,cAAc;YACzB,MAAM,EAAE,cAAc;gBACpB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,yFAAyF;SAC9F;QACD,CAAC,mBAAmB,CAAC,cAAc,CAAC,EAAE;YACpC,SAAS,EAAE,cAAc;YACzB,MAAM,EAAE,cAAc;gBACpB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,8FAA8F;SACnG;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC"}

package/dist/runtime/tools/ToolStreamProcessor.d.ts

@@ -0,0 +1,200 @@
+/**
+ * @fileoverview Streaming tool-call parsing and SSE chunk assembly.
+ *
+ * Extracted from `tool-calling.ts` to isolate the streaming-specific
+ * logic (SSE line iteration, token yielding, multi-round streaming loop)
+ * from the non-streaming tool-calling loop and the shared authorization
+ * layer.
+ *
+ * The main export is {@link streamToolCallingTurn}, an async generator
+ * that yields individual text tokens as they arrive from the LLM streaming
+ * API, enabling real-time TTS playback.
+ *
+ * @module wunderland/runtime/ToolStreamProcessor
+ */
+import type { StepUpAuthorizationConfig } from '../../types/core-types.js';
+import type { StepUpAuthorizationManager } from '../../security/StepUpAuthorizationManager.js';
+import type { ToolInstance, LLMProviderConfig } from './tool-helpers.js';
+/**
+ * Options for {@link streamToolCallingTurn}.
+ *
+ * Mirrors `runToolCallingTurn` options with the addition of an `AbortSignal`
+ * that enables external cancellation of the in-flight streaming LLM request.
+ * This is critical for the voice pipeline's barge-in flow: when the user
+ * starts speaking while the agent is mid-response, the pipeline aborts the
+ * signal to immediately stop token generation at the provider, saving both
+ * latency and tokens.
+ *
+ * @see {@link streamToolCallingTurn}
+ */
+export interface StreamToolCallingTurnOpts {
+    /** LLM provider identifier (e.g. `'openai'`, `'openrouter'`, `'ollama'`). */
+    providerId?: string;
+    /** API key (or promise resolving to one) for the LLM provider. */
+    apiKey: string | Promise<string>;
+    /** Model name/ID (e.g. `'gpt-4o-mini'`, `'llama3'`). */
+    model: string;
+    /**
+     * Mutable conversation history. The streaming function appends assistant
+     * and tool messages to this array as the conversation progresses.
+     */
+    messages: Array<Record<string, unknown>>;
+    /** Map of tool name -> tool instance for tool execution. */
+    toolMap: Map<string, ToolInstance>;
+    /** Pre-built tool definitions (overrides auto-generation from toolMap). */
+    toolDefs?: Array<Record<string, unknown>>;
+    /** Lazy tool definition supplier (called per round; overrides toolDefs). */
+    getToolDefs?: () => Array<Record<string, unknown>>;
+    /** Shared context object passed to every tool `execute()` call. */
+    toolContext: Record<string, unknown>;
+    /** Maximum number of LLM round-trips before forcibly stopping. */
+    maxRounds: number;
+    /** When `true`, bypasses all step-up authorization checks. */
+    dangerouslySkipPermissions: boolean;
+    /** Custom step-up authorization tier configuration. */
+    stepUpAuthConfig?: StepUpAuthorizationConfig;
+    /** Interactive permission callback for Tier 3 (sync HITL) tools. */
+    askPermission: (tool: ToolInstance, args: Record<string, unknown>) => Promise<boolean>;
+    /** Optional checkpoint callback invoked before executing a batch of tool calls. */
+    askCheckpoint?: (info: {
+        round: number;
+        toolCalls: Array<{
+            toolName: string;
+            hasSideEffects: boolean;
+            args: Record<string, unknown>;
+        }>;
+    }) => Promise<boolean>;
+    /** Notification callback fired when a tool call is about to execute. */
+    onToolCall?: (tool: ToolInstance, args: Record<string, unknown>) => void;
+    /** Notification callback fired after each tool call completes. */
+    onToolResult?: (info: {
+        toolName: string;
+        args: Record<string, unknown>;
+        success: boolean;
+        error?: string;
+        output?: unknown;
+        durationMs: number;
+    }) => void;
+    /** Pre-configured authorization manager (skips internal creation). */
+    authorizationManager?: StepUpAuthorizationManager;
+    /** Custom base URL for the LLM API endpoint. */
+    baseUrl?: string;
+    /** Fallback LLM provider config for automatic retry on transient errors. */
+    fallback?: LLMProviderConfig;
+    /** Callback fired when the primary provider fails and we fall back. */
+    onFallback?: (primaryError: Error, fallbackProvider: string) => void;
+    /** Lazy API key supplier (alternative to static `apiKey`). */
+    getApiKey?: () => string | Promise<string>;
+    /** Ollama-specific runtime options (e.g. num_ctx, num_gpu). */
+    ollamaOptions?: Record<string, unknown>;
+    /**
+     * Behavior when a tool execution fails.
+     * - `'fail_open'` — report the error to the LLM and let it continue.
+     * - `'fail_closed'` — immediately abort the turn.
+     */
+    toolFailureMode?: 'fail_open' | 'fail_closed';
+    /** When `true`, tool names that require sanitization cause an error instead. */
+    strictToolNames?: boolean;
+    /** Enable verbose debug logging for the streaming loop. */
+    debug?: boolean;
+    /** Progress callback for long-running tool executions. */
+    onToolProgress?: (info: {
+        toolName: string;
+        phase: string;
+        message: string;
+        progress?: number;
+    }) => void;
+    /**
+     * External abort signal for cancelling the in-flight streaming LLM request.
+     *
+     * When aborted, the HTTP stream is terminated immediately via the
+     * `AbortController` wired into `fetch()`. This is the primary mechanism
+     * for voice pipeline barge-in: the orchestrator calls `abort()` on the
+     * agent session, which triggers this signal, stopping token generation
+     * at the provider.
+     *
+     * @see {@link StreamingPipelineAgentSession.abort}
+     */
+    signal?: AbortSignal;
+}
+/**
+ * Streaming variant of `runToolCallingTurn`.
+ *
+ * Yields individual text tokens as they arrive from the LLM streaming API,
+ * enabling real-time TTS playback (~500ms first-token latency instead of
+ * waiting for the full LLM response). Tool-call rounds are handled
+ * identically to the non-streaming variant: tool execution blocks, then
+ * the next LLM round resumes streaming.
+ *
+ * ## Multi-round streaming + blocking tool execution
+ *
+ * The outer loop runs up to `opts.maxRounds` LLM round-trips:
+ *
+ * 1. **Stream phase** -- Send the conversation to the LLM with
+ *    `stream: true` and yield text tokens as they arrive via SSE. Tool-call
+ *    fragments are accumulated silently by `wrapStreamingLLMAsGenerator`.
+ * 2. **Tool phase** (blocking) -- If the model's `finish_reason` is
+ *    `'tool_calls'`, execute each requested tool synchronously. Tool
+ *    results are appended to `opts.messages` as `role: 'tool'` messages.
+ * 3. **Next round** -- Loop back to step 1 with the updated conversation
+ *    history, allowing the model to incorporate tool results and stream
+ *    more text or request additional tools.
+ *
+ * The generator terminates when the model finishes with text only
+ * (`finish_reason: 'stop'`), the abort signal fires, or the round limit
+ * is reached.
+ *
+ * ## AbortSignal integration
+ *
+ * The optional `opts.signal` is wired through three layers:
+ * - **Outer loop**: checked at the start of each round and after tool execution.
+ * - **SSE fetch**: passed to `fetch()` so the HTTP connection is torn down
+ *   immediately on abort, stopping token generation at the provider.
+ * - **Token iteration**: checked between each yielded token so the generator
+ *   exits promptly after abort.
+ *
+ * This triple-layer cancellation ensures that voice pipeline barge-in stops
+ * the LLM within one event-loop tick of the abort signal.
+ *
+ * ## Provider fallback
+ *
+ * For providers that do not support SSE streaming (Ollama, Anthropic via
+ * the Messages API), this automatically falls back to the non-streaming
+ * `runToolCallingTurn` and post-splits the complete response into
+ * word-boundary chunks so the caller still receives an incremental token
+ * stream.
+ *
+ * @param opts - Configuration for the streaming tool-calling turn.
+ * @yields Individual text token strings (typically 1-4 words each).
+ * @returns The full accumulated reply text after all rounds complete.
+ *
+ * @example
+ * ```ts
+ * const controller = new AbortController();
+ * const gen = streamToolCallingTurn({
+ *   providerId: 'openai',
+ *   apiKey: process.env.OPENAI_API_KEY!,
+ *   model: 'gpt-4o-mini',
+ *   messages: [{ role: 'user', content: 'Hello' }],
+ *   toolMap: myToolMap,
+ *   toolContext: {},
+ *   maxRounds: 8,
+ *   dangerouslySkipPermissions: true,
+ *   askPermission: async () => true,
+ *   signal: controller.signal,
+ * });
+ *
+ * let result = await gen.next();
+ * while (!result.done) {
+ *   ttsEngine.feed(result.value); // stream to TTS immediately
+ *   result = await gen.next();
+ * }
+ * const fullReply = result.value;
+ * ```
+ *
+ * @see {@link runToolCallingTurn} for the non-streaming variant.
+ * @see {@link wrapStreamingLLMAsGenerator} for the SSE-to-generator adapter.
+ * @see {@link streamingOpenaiChatWithTools} for the HTTP streaming layer.
+ */
+export declare function streamToolCallingTurn(opts: StreamToolCallingTurnOpts): AsyncGenerator<string, string, undefined>;
+//# sourceMappingURL=ToolStreamProcessor.d.ts.map