wunderland 0.72.2 → 0.82.0

package/dist/runtime/tools/RAGTool.js

@@ -0,0 +1,132 @@
+// @ts-nocheck
+/**
+ * @fileoverview RAG memory query tool for Wunderland agents.
+ * Allows agents to search their RAG memory during tool-calling conversations.
+ * Supports audit trail generation for transparent RAG operation tracking.
+ * @module wunderland/tools/RAGTool
+ */
+import { WunderlandRAGClient } from '../../memory/rag/rag-client.js';
+export const RAG_TOOL_ID = 'rag_query';
+export class RAGTool {
+    id = RAG_TOOL_ID;
+    name = RAG_TOOL_ID;
+    displayName = 'RAG Memory Query';
+    description = 'Search the agent knowledge base using semantic and keyword retrieval. Returns relevant document chunks with audit trail.';
+    hasSideEffects = false;
+    category = 'memory';
+    inputSchema = {
+        type: 'object',
+        properties: {
+            query: { type: 'string', description: 'The search query text.' },
+            topK: { type: 'number', description: 'Maximum number of results to return (default: 5).' },
+            collectionId: { type: 'string', description: 'Optional collection ID to search within.' },
+            preset: { type: 'string', enum: ['fast', 'balanced', 'accurate'], description: 'Retrieval preset override.' },
+            includeGraphRag: { type: 'boolean', description: 'When true, include graph-based entity and relationship context.' },
+            includeAudit: { type: 'boolean', description: 'When true, include RAG audit metadata.' },
+            debug: { type: 'boolean', description: 'When true, include pipeline debug trace.' },
+        },
+        required: ['query'],
+    };
+    config;
+    client;
+    constructor(config) {
+        this.config = config;
+        this.client = new WunderlandRAGClient({ baseUrl: config.backendUrl, authToken: config.authToken });
+    }
+    async execute(input, _context) {
+        const query = input.query;
+        const topK = input.topK ?? this.config.defaultTopK ?? 5;
+        const collectionId = input.collectionId;
+        const request = {
+            query,
+            topK,
+            preset: input.preset
+                ?? this.config.preset
+                ?? undefined,
+            collectionIds: collectionId
+                ? [collectionId]
+                : this.config.defaultCollectionIds,
+            includeAudit: typeof input.includeAudit === 'boolean'
+                ? input.includeAudit
+                : (this.config.includeAudit ?? true),
+            includeGraphRag: typeof input.includeGraphRag === 'boolean'
+                ? input.includeGraphRag
+                : (this.config.includeGraphRag ?? false),
+            debug: typeof input.debug === 'boolean'
+                ? input.debug
+                : (this.config.includeDebug ?? false),
+            queryVariants: this.config.queryVariants,
+            rewrite: this.config.rewrite,
+            hyde: this.config.hyde,
+            strategy: this.config.strategy,
+            strategyParams: this.config.strategyParams,
+            similarityThreshold: this.config.similarityThreshold,
+            filters: this.config.filters,
+            includeMetadata: this.config.includeMetadata,
+        };
+        try {
+            const result = await this.client.query(request);
+            const chunks = (result.chunks ?? []).map((c) => ({
+                content: c.content,
+                score: c.score,
+                documentId: c.documentId,
+                metadata: c.metadata,
+            }));
+            // Log audit trail if available
+            const auditTrail = result.auditTrail;
+            if (auditTrail && this.config.auditLog && this.config.seedId) {
+                this.config.auditLog.log({
+                    seedId: this.config.seedId,
+                    action: 'rag_query',
+                    outcome: 'success',
+                    durationMs: auditTrail.summary.totalDurationMs,
+                    metadata: {
+                        trailId: auditTrail.trailId,
+                        query: auditTrail.query,
+                        totalOperations: auditTrail.summary.totalOperations,
+                        totalLLMCalls: auditTrail.summary.totalLLMCalls,
+                        totalTokens: auditTrail.summary.totalTokens,
+                        totalCostUSD: auditTrail.summary.totalCostUSD,
+                        operationTypes: auditTrail.summary.operationTypes,
+                        sourceSummary: auditTrail.summary.sourceSummary,
+                    },
+                });
+            }
+            // Build output with audit summary for agent transparency
+            const output = {
+                query,
+                results: chunks,
+                totalResults: result.totalResults,
+            };
+            if (typeof result.hydeUsed === 'boolean') {
+                output.hydeUsed = result.hydeUsed;
+            }
+            if (auditTrail) {
+                output.audit = {
+                    operations: auditTrail.summary.totalOperations,
+                    llmCalls: auditTrail.summary.totalLLMCalls,
+                    tokens: auditTrail.summary.totalTokens,
+                    costUSD: auditTrail.summary.totalCostUSD,
+                    methods: auditTrail.summary.operationTypes,
+                    sources: auditTrail.summary.sourceSummary.uniqueDocuments,
+                    durationMs: auditTrail.summary.totalDurationMs,
+                };
+            }
+            if (result.graphContext)
+                output.graphContext = result.graphContext;
+            if (result.debugTrace)
+                output.debugTrace = result.debugTrace;
+            return {
+                success: true,
+                output: JSON.stringify(output),
+            };
+        }
+        catch (err) {
+            return {
+                success: false,
+                output: `RAG query error: ${err instanceof Error ? err.message : String(err)}`,
+            };
+        }
+    }
+}
+//# sourceMappingURL=RAGTool.js.map

package/dist/runtime/tools/RAGTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RAGTool.js","sourceRoot":"","sources":["../../../src/runtime/tools/RAGTool.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;GAKG;AAIH,OAAO,EAAE,mBAAmB,EAAsB,MAAM,gCAAgC,CAAC;AAmDzF,MAAM,CAAC,MAAM,WAAW,GAAG,WAAW,CAAC;AAEvC,MAAM,OAAO,OAAO;IACT,EAAE,GAAG,WAAW,CAAC;IACjB,IAAI,GAAG,WAAW,CAAC;IACnB,WAAW,GAAG,kBAAkB,CAAC;IACjC,WAAW,GAAG,0HAA0H,CAAC;IACzI,cAAc,GAAG,KAAK,CAAC;IACvB,QAAQ,GAAG,QAAQ,CAAC;IAEpB,WAAW,GAAqB;QACvC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE;YAChE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mDAAmD,EAAE;YAC1F,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0CAA0C,EAAE;YACzF,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,WAAW,EAAE,4BAA4B,EAAE;YAC7G,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,iEAAiE,EAAE;YACpH,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,wCAAwC,EAAE;YACxF,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,0CAA0C,EAAE;SACpF;QACD,QAAQ,EAAE,CAAC,OAAO,CAAC;KACpB,CAAC;IAEe,MAAM,CAAgB;IACtB,MAAM,CAAsB;IAE7C,YAAY,MAAqB;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,IAAI,mBAAmB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACrG,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA8B,EAAE,QAA+B;QAC3E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAe,CAAC;QACpC,MAAM,IAAI,GAAI,KAAK,CAAC,IAAe,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;QACpE,MAAM,YAAY,GAAG,KAAK,CAAC,YAAkC,CAAC;QAC9D,MAAM,OAAO,GAAkB;YAC7B,KAAK;YACL,IAAI;YACJ,MAAM,EACH,KAAK,CAAC,MAAkC;mBACtC,IAAI,CAAC,MAAM,CAAC,MAAM;mBAClB,SAAS;YACd,aAAa,EAAE,YAAY;gBACzB,CAAC,CAAC,CAAC,YAAY,CAAC;gBAChB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB;YACpC,YAAY,EACV,OAAO,KAAK,CAAC,YAAY,KAAK,SAAS;gBACrC,CAAC,CAAC,KAAK,CAAC,YAAY;gBACpB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC;YACxC,eAAe,EACb,OAAO,KAAK,CAAC,eAAe,KAAK,SAAS;gBACxC,CAAC,CAAC,KAAK,CAAC,eAAe;gBACvB,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,KAAK,CAAC;YAC5C,KAAK,EACH,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS;gBAC9B,CAAC,CAAC,KAAK,CAAC,KAAK;gBACb,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,KAAK,CAAC;YACzC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;YACxC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc;YAC1C,mBAAmB,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB;YACpD,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;SAC7C,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC;gBACpD,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CAAC,CAAC;YAEJ,+BAA+B;YAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,UAAuC,CAAC;YAClE,IAAI,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;oBACvB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;oBAC1B,MAAM,EAAE,WAAW;oBACnB,OAAO,EAAE,SAAS;oBAClB,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,eAAe;oBAC9C,QAAQ,EAAE;wBACR,OAAO,EAAE,UAAU,CAAC,OAAO;wBAC3B,KAAK,EAAE,UAAU,CAAC,KAAK;wBACvB,eAAe,EAAE,UAAU,CAAC,OAAO,CAAC,eAAe;wBACnD,aAAa,EAAE,UAAU,CAAC,OAAO,CAAC,aAAa;wBAC/C,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,WAAW;wBAC3C,YAAY,EAAE,UAAU,CAAC,OAAO,CAAC,YAAY;wBAC7C,cAAc,EAAE,UAAU,CAAC,OAAO,CAAC,cAAc;wBACjD,aAAa,EAAE,UAAU,CAAC,OAAO,CAAC,aAAa;qBAChD;iBACF,CAAC,CAAC;YACL,CAAC;YAED,yDAAyD;YACzD,MAAM,MAAM,GAA4B;gBACtC,KAAK;gBACL,OAAO,EAAE,MAAM;gBACf,YAAY,EAAE,MAAM,CAAC,YAAY;aAClC,CAAC;YACF,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACzC,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YACpC,CAAC;YACD,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,GAAG;oBACb,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,eAAe;oBAC9C,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,aAAa;oBAC1C,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,WAAW;oBACtC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,YAAY;oBACxC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,cAAc;oBAC1C,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,aAAa,CAAC,eAAe;oBACzD,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,eAAe;iBAC/C,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,YAAY;gBAAE,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;YACnE,IAAI,MAAM,CAAC,UAAU;gBAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;YAE7D,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;aAC/B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,oBAAoB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aAC/E,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/runtime/tools/RequestFolderAccessTool.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @fileoverview RequestFolderAccessTool — lets agents request filesystem
+ * permissions from the user at runtime via HITL approval.
+ *
+ * Instead of giving up with "I don't have permission", the agent can call
+ * this tool to explain WHY it needs access and let the user approve or deny.
+ *
+ * @module wunderland/tools/RequestFolderAccessTool
+ */
+import type { ITool } from '@framers/agentos';
+import type { SafeGuardrails } from '../../security/SafeGuardrails.js';
+export interface FolderPermissionRequest {
+    path: string;
+    operation: 'read' | 'write';
+    reason: string;
+    recursive: boolean;
+}
+export interface RequestFolderAccessDeps {
+    guardrails: SafeGuardrails;
+    /** Callback that presents the request to the user and returns true if approved. */
+    requestPermission: (req: FolderPermissionRequest) => Promise<boolean>;
+    /** Agent ID for guardrails lookups. */
+    agentId: string;
+    /** Optional callback to propagate approved paths to the CLI executor's filesystem roots. */
+    onFolderGranted?: (resolvedPath: string, operation: 'read' | 'write') => void;
+}
+export declare function createRequestFolderAccessTool(deps: RequestFolderAccessDeps): ITool;
+//# sourceMappingURL=RequestFolderAccessTool.d.ts.map

package/dist/runtime/tools/RequestFolderAccessTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RequestFolderAccessTool.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/RequestFolderAccessTool.ts"],"names":[],"mappings":"AACA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EACV,KAAK,EAIN,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAGvE,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,cAAc,CAAC;IAC3B,mFAAmF;IACnF,iBAAiB,EAAE,CAAC,GAAG,EAAE,uBAAuB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACtE,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,4FAA4F;IAC5F,eAAe,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,KAAK,IAAI,CAAC;CAC/E;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,uBAAuB,GAAG,KAAK,CA8HlF"}

package/dist/runtime/tools/RequestFolderAccessTool.js

@@ -0,0 +1,124 @@
+// @ts-nocheck
+/**
+ * @fileoverview RequestFolderAccessTool — lets agents request filesystem
+ * permissions from the user at runtime via HITL approval.
+ *
+ * Instead of giving up with "I don't have permission", the agent can call
+ * this tool to explain WHY it needs access and let the user approve or deny.
+ *
+ * @module wunderland/tools/RequestFolderAccessTool
+ */
+import * as path from 'node:path';
+import { expandTilde } from '../../security/FolderPermissions.js';
+export function createRequestFolderAccessTool(deps) {
+    const inputSchema = {
+        type: 'object',
+        properties: {
+            path: {
+                type: 'string',
+                description: 'Directory or file path to request access to (e.g. ~/Documents/project or /home/user/data).',
+            },
+            operation: {
+                type: 'string',
+                enum: ['read', 'write'],
+                description: 'Type of access needed. "write" also grants read access.',
+            },
+            reason: {
+                type: 'string',
+                description: 'Human-readable explanation of why you need this access. Be specific about what you plan to do.',
+            },
+            recursive: {
+                type: 'boolean',
+                default: true,
+                description: 'Whether to include all subdirectories (default: true).',
+            },
+        },
+        required: ['path', 'operation', 'reason'],
+    };
+    return {
+        id: 'request_folder_access',
+        name: 'request_folder_access',
+        displayName: 'Request Folder Access',
+        description: 'Request permission to access a filesystem directory. Use this when a file operation is denied, ' +
+            'or proactively before accessing folders outside your workspace. Explain your reason clearly so the user can make an informed decision.',
+        category: 'security',
+        hasSideEffects: true,
+        inputSchema,
+        async execute(args, _ctx) {
+            const rawPath = typeof args.path === 'string' ? args.path.trim() : '';
+            if (!rawPath) {
+                return { success: false, error: 'Missing required field "path".' };
+            }
+            const operation = args.operation === 'write' ? 'write' : 'read';
+            const reason = typeof args.reason === 'string' ? args.reason.trim() : 'No reason provided';
+            const recursive = args.recursive !== false;
+            // Resolve to absolute path
+            const resolved = path.resolve(expandTilde(rawPath));
+            // Check if path is non-escalatable (sensitive credentials/system files)
+            if (!deps.guardrails.isEscalatable(resolved)) {
+                return {
+                    success: false,
+                    error: `Access to "${resolved}" cannot be granted through this tool. This path contains sensitive system files or credentials. To access it, modify the agent's folder permission config directly.`,
+                };
+            }
+            // Check if we already have access
+            const existing = deps.guardrails.getFolderPermissions(deps.agentId);
+            if (existing) {
+                const { checkFolderAccess } = await import('../../security/FolderPermissions.js');
+                const tierPerms = undefined; // We don't have tier perms here, but the guardrails check will use them
+                const currentAccess = checkFolderAccess(resolved, operation, existing, tierPerms);
+                if (currentAccess.allowed) {
+                    return {
+                        success: true,
+                        output: {
+                            granted: true,
+                            alreadyHadAccess: true,
+                            path: resolved,
+                            operation,
+                        },
+                    };
+                }
+            }
+            // Request permission from user
+            const approved = await deps.requestPermission({
+                path: resolved,
+                operation,
+                reason,
+                recursive,
+            });
+            if (!approved) {
+                return {
+                    success: true,
+                    output: {
+                        granted: false,
+                        path: resolved,
+                        operation,
+                        message: 'The user denied this access request.',
+                    },
+                };
+            }
+            // User approved — add the rule at runtime
+            const pattern = recursive ? `${resolved}/**` : resolved;
+            const rule = {
+                pattern,
+                read: true,
+                write: operation === 'write',
+                description: `Granted at runtime: ${reason}`,
+            };
+            deps.guardrails.addFolderRule(deps.agentId, rule);
+            // Propagate to CLI executor's ShellService filesystem roots
+            deps.onFolderGranted?.(resolved, operation);
+            return {
+                success: true,
+                output: {
+                    granted: true,
+                    path: resolved,
+                    pattern,
+                    operation,
+                    message: `Access granted. You can now ${operation} files in ${resolved}.`,
+                },
+            };
+        },
+    };
+}
+//# sourceMappingURL=RequestFolderAccessTool.js.map

package/dist/runtime/tools/RequestFolderAccessTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RequestFolderAccessTool.js","sourceRoot":"","sources":["../../../src/runtime/tools/RequestFolderAccessTool.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;GAQG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAQlC,OAAO,EAAE,WAAW,EAAyB,MAAM,qCAAqC,CAAC;AAmBzF,MAAM,UAAU,6BAA6B,CAAC,IAA6B;IACzE,MAAM,WAAW,GAAqB;QACpC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,4FAA4F;aAC1G;YACD,SAAS,EAAE;gBACT,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;gBACvB,WAAW,EAAE,yDAAyD;aACvE;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,gGAAgG;aAC9G;YACD,SAAS,EAAE;gBACT,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,wDAAwD;aACtE;SACF;QACD,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC;KAC1C,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,uBAAuB;QAC3B,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,uBAAuB;QACpC,WAAW,EACT,iGAAiG;YACjG,wIAAwI;QAC1I,QAAQ,EAAE,UAAU;QACpB,cAAc,EAAE,IAAI;QACpB,WAAW;QAEX,KAAK,CAAC,OAAO,CACX,IAA6B,EAC7B,IAA0B;YAE1B,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;YACrE,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YAChE,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC;YAC3F,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;YAE3C,2BAA2B;YAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YAEpD,wEAAwE;YACxE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7C,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,cAAc,QAAQ,sKAAsK;iBACpM,CAAC;YACJ,CAAC;YAED,kCAAkC;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;gBAClF,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,wEAAwE;gBACrG,MAAM,aAAa,GAAG,iBAAiB,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAClF,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;oBAC1B,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,MAAM,EAAE;4BACN,OAAO,EAAE,IAAI;4BACb,gBAAgB,EAAE,IAAI;4BACtB,IAAI,EAAE,QAAQ;4BACd,SAAS;yBACV;qBACF,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,+BAA+B;YAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC;gBAC5C,IAAI,EAAE,QAAQ;gBACd,SAAS;gBACT,MAAM;gBACN,SAAS;aACV,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE;wBACN,OAAO,EAAE,KAAK;wBACd,IAAI,EAAE,QAAQ;wBACd,SAAS;wBACT,OAAO,EAAE,sCAAsC;qBAChD;iBACF,CAAC;YACJ,CAAC;YAED,0CAA0C;YAC1C,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,QAAQ,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;YACxD,MAAM,IAAI,GAAqB;gBAC7B,OAAO;gBACP,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,SAAS,KAAK,OAAO;gBAC5B,WAAW,EAAE,uBAAuB,MAAM,EAAE;aAC7C,CAAC;YAEF,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAElD,4DAA4D;YAC5D,IAAI,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAE5C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE;oBACN,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,QAAQ;oBACd,OAAO;oBACP,SAAS;oBACT,OAAO,EAAE,+BAA+B,SAAS,aAAa,QAAQ,GAAG;iBAC1E;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime/tools/SerperSearchTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SerperSearchTool.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/SerperSearchTool.ts"],"names":[],"mappings":"AACA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAE3G,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,KAAK,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,gBAAiB,YAAW,KAAK,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IACnF,QAAQ,CAAC,EAAE,0BAA0B;IACrC,QAAQ,CAAC,IAAI,gBAAgB;IAC7B,QAAQ,CAAC,WAAW,gBAAgB;IACpC,QAAQ,CAAC,WAAW,SAGwD;IAC5E,QAAQ,CAAC,QAAQ,cAAc;IAC/B,QAAQ,CAAC,OAAO,WAAW;IAC3B,QAAQ,CAAC,cAAc,SAAS;IAEhC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAmBpC;IAEF,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAiBrC;IAEF,QAAQ,CAAC,oBAAoB,WAA6B;IAE1D,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,CAAC,EAAE,MAAM;IAIrB,OAAO,CACX,IAAI,EAAE,iBAAiB,EACvB,QAAQ,EAAE,oBAAoB,GAC7B,OAAO,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;CAiFpD"}

package/dist/runtime/tools/SerperSearchTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SerperSearchTool.js","sourceRoot":"","sources":["../../../src/runtime/tools/SerperSearchTool.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;GAOG;AAyBH,MAAM,OAAO,gBAAgB;IAClB,EAAE,GAAG,sBAAsB,CAAC;IAC5B,IAAI,GAAG,YAAY,CAAC;IACpB,WAAW,GAAG,YAAY,CAAC;IAC3B,WAAW,GAClB,kFAAkF;QAClF,2EAA2E;QAC3E,yEAAyE,CAAC;IACnE,QAAQ,GAAG,UAAU,CAAC;IACtB,OAAO,GAAG,OAAO,CAAC;IAClB,cAAc,GAAG,KAAK,CAAC;IAEvB,WAAW,GAAqB;QACvC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0BAA0B,EAAE;YAClE,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;gBAClC,WAAW,EAAE,uCAAuC;gBACpD,OAAO,EAAE,QAAQ;aAClB;YACD,GAAG,EAAE;gBACH,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,EAAE;gBACX,WAAW,EAAE,6CAA6C;gBAC1D,OAAO,EAAE,CAAC;aACX;SACF;QACD,QAAQ,EAAE,CAAC,OAAO,CAAC;KACpB,CAAC;IAEO,YAAY,GAAqB;QACxC,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,OAAO,EAAE;gBACP,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;wBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC5B;iBACF;aACF;SACF;KACF,CAAC;IAEO,oBAAoB,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAElD,MAAM,CAAS;IAEvB,YAAY,MAAe;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,OAAO,CACX,IAAuB,EACvB,QAA8B;QAE9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;QACrE,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAE1B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,UAAU,KAAK,MAAM;gBACpC,CAAC,CAAC,gCAAgC;gBAClC,CAAC,CAAC,UAAU,KAAK,QAAQ;oBACvB,CAAC,CAAC,kCAAkC;oBACpC,CAAC,CAAC,kCAAkC,CAAC;YAEzC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;gBACrC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,WAAW,EAAE,IAAI,CAAC,MAAM;oBACxB,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;aAC7C,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,qBAAqB,QAAQ,CAAC,MAAM,MAAM,SAAS,EAAE;iBAC7D,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAQ,CAAC;YAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE1C,wCAAwC;YACxC,IAAI,OAAO,GAAkC,EAAE,CAAC;YAEhD,IAAI,UAAU,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACvC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC;oBAC/D,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE;oBAC/C,QAAQ,EAAE,CAAC,GAAG,CAAC;oBACf,IAAI,EAAE,IAAI,CAAC,IAAI;iBAChB,CAAC,CAAC,CAAC;YACN,CAAC;iBAAM,IAAI,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAClD,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC;oBACjE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;oBACvB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ;oBAChC,OAAO,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;oBAC1B,QAAQ,EAAE,CAAC,GAAG,CAAC;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACxB,CAAC,CAAC,CAAC;YACN,CAAC;iBAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxB,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC;oBACvD,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;oBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACxB,CAAC,CAAC,CAAC;YACN,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE;oBACN,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,UAAU;oBAChB,OAAO;oBACP,YAAY,EAAE,IAAI,CAAC,gBAAgB,EAAE,YAAY;oBACjD,UAAU;iBACX;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,sBAAsB,GAAG,CAAC,OAAO,EAAE;aAC3C,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/runtime/tools/SocialPostTool.d.ts

@@ -0,0 +1,76 @@
+/**
+ * @fileoverview SocialPostTool — the only tool that can publish to the Wonderland feed.
+ *
+ * This tool is:
+ * - Only available to Publisher agents in Public (Citizen) mode
+ * - Blocked by the ContextFirewall in Private (Assistant) mode
+ * - Requires a valid InputManifest to publish
+ *
+ * @module wunderland/tools/SocialPostTool
+ */
+import type { InputManifest, WonderlandPost } from '../../autonomy/social/types.js';
+import { SignedOutputVerifier } from '../../security/SignedOutputVerifier.js';
+/**
+ * Result of a publish attempt.
+ */
+export interface PublishResult {
+    success: boolean;
+    postId?: string;
+    publishedAt?: string;
+    error?: string;
+    validationErrors?: string[];
+    validationWarnings?: string[];
+}
+/**
+ * Callback invoked when a post is successfully validated and ready for storage.
+ */
+export type PostStorageCallback = (post: WonderlandPost) => Promise<void>;
+/**
+ * SocialPostTool — the only tool that can write to the Wonderland feed.
+ *
+ * This is the "last gate" before a post enters the social network.
+ * It validates the InputManifest, verifies the signature, and persists the post.
+ *
+ * @example
+ * ```typescript
+ * const tool = new SocialPostTool(verifier, async (post) => {
+ *   await database.posts.insert(post);
+ * });
+ *
+ * const result = await tool.publish({
+ *   seedId: 'seed-123',
+ *   content: 'My autonomous observation...',
+ *   manifest: validManifest,
+ * });
+ * ```
+ */
+export declare class SocialPostTool {
+    /** Tool ID for registration with AgentOS */
+    static readonly TOOL_ID = "social_post";
+    private validator;
+    private storageCallback;
+    constructor(verifier: SignedOutputVerifier, storageCallback: PostStorageCallback, trustedSources?: string[]);
+    /**
+     * Publish a post to Wonderland.
+     *
+     * Validates the InputManifest, then persists the post.
+     */
+    publish(params: {
+        seedId: string;
+        content: string;
+        manifest: InputManifest;
+        replyToPostId?: string;
+        agentLevel?: number;
+    }): Promise<PublishResult>;
+    /**
+     * Returns the tool definition for AgentOS tool registration.
+     */
+    static getToolDefinition(): {
+        toolId: string;
+        name: string;
+        description: string;
+        category: string;
+        riskTier: number;
+    };
+}
+//# sourceMappingURL=SocialPostTool.d.ts.map

package/dist/runtime/tools/SocialPostTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SocialPostTool.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/SocialPostTool.ts"],"names":[],"mappings":"AACA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAEpF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAE9E;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,IAAI,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1E;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,cAAc;IACzB,4CAA4C;IAC5C,MAAM,CAAC,QAAQ,CAAC,OAAO,iBAAiB;IAExC,OAAO,CAAC,SAAS,CAAyB;IAC1C,OAAO,CAAC,eAAe,CAAsB;gBAG3C,QAAQ,EAAE,oBAAoB,EAC9B,eAAe,EAAE,mBAAmB,EACpC,cAAc,CAAC,EAAE,MAAM,EAAE;IAM3B;;;;OAIG;IACG,OAAO,CAAC,MAAM,EAAE;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,aAAa,CAAC;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,aAAa,CAAC;IA8D1B;;OAEG;IACH,MAAM,CAAC,iBAAiB,IAAI;QAC1B,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;KAClB;CASF"}

package/dist/runtime/tools/SocialPostTool.js

@@ -0,0 +1,116 @@
+// @ts-nocheck
+/**
+ * @fileoverview SocialPostTool — the only tool that can publish to the Wonderland feed.
+ *
+ * This tool is:
+ * - Only available to Publisher agents in Public (Citizen) mode
+ * - Blocked by the ContextFirewall in Private (Assistant) mode
+ * - Requires a valid InputManifest to publish
+ *
+ * @module wunderland/tools/SocialPostTool
+ */
+import { InputManifestValidator } from '../../autonomy/social/InputManifest.js';
+import { SignedOutputVerifier } from '../../security/SignedOutputVerifier.js';
+/**
+ * SocialPostTool — the only tool that can write to the Wonderland feed.
+ *
+ * This is the "last gate" before a post enters the social network.
+ * It validates the InputManifest, verifies the signature, and persists the post.
+ *
+ * @example
+ * ```typescript
+ * const tool = new SocialPostTool(verifier, async (post) => {
+ *   await database.posts.insert(post);
+ * });
+ *
+ * const result = await tool.publish({
+ *   seedId: 'seed-123',
+ *   content: 'My autonomous observation...',
+ *   manifest: validManifest,
+ * });
+ * ```
+ */
+export class SocialPostTool {
+    /** Tool ID for registration with AgentOS */
+    static TOOL_ID = 'social_post';
+    validator;
+    storageCallback;
+    constructor(verifier, storageCallback, trustedSources) {
+        this.validator = new InputManifestValidator(verifier, trustedSources);
+        this.storageCallback = storageCallback;
+    }
+    /**
+     * Publish a post to Wonderland.
+     *
+     * Validates the InputManifest, then persists the post.
+     */
+    async publish(params) {
+        // 1. Validate manifest
+        const validation = this.validator.validate(params.manifest);
+        if (!validation.valid) {
+            return {
+                success: false,
+                error: 'InputManifest validation failed',
+                validationErrors: validation.errors,
+                validationWarnings: validation.warnings,
+            };
+        }
+        // 2. Check content
+        if (!params.content || params.content.trim().length === 0) {
+            return {
+                success: false,
+                error: 'Post content cannot be empty',
+            };
+        }
+        // 3. Check seedId matches manifest
+        if (params.seedId !== params.manifest.seedId) {
+            return {
+                success: false,
+                error: `SeedId mismatch: request says '${params.seedId}' but manifest says '${params.manifest.seedId}'`,
+            };
+        }
+        // 4. Build the post
+        const now = new Date().toISOString();
+        const post = {
+            postId: crypto.randomUUID(),
+            seedId: params.seedId,
+            content: params.content,
+            manifest: params.manifest,
+            status: 'published',
+            replyToPostId: params.replyToPostId,
+            createdAt: now,
+            publishedAt: now,
+            engagement: { likes: 0, downvotes: 0, boosts: 0, replies: 0, views: 0 },
+            agentLevelAtPost: params.agentLevel ?? 1,
+        };
+        // 5. Persist
+        try {
+            await this.storageCallback(post);
+        }
+        catch (err) {
+            return {
+                success: false,
+                error: `Storage failed: ${err.message}`,
+            };
+        }
+        return {
+            success: true,
+            postId: post.postId,
+            publishedAt: post.publishedAt,
+            validationWarnings: validation.warnings.length > 0 ? validation.warnings : undefined,
+        };
+    }
+    /**
+     * Returns the tool definition for AgentOS tool registration.
+     */
+    static getToolDefinition() {
+        return {
+            toolId: SocialPostTool.TOOL_ID,
+            name: 'Social Post',
+            description: 'Publish a post to the Wonderland feed. Requires a valid InputManifest proving autonomous authorship.',
+            category: 'communication',
+            riskTier: 2, // Tier 2: async review (RabbitHole approval)
+        };
+    }
+}
+//# sourceMappingURL=SocialPostTool.js.map

package/dist/runtime/tools/SocialPostTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SocialPostTool.js","sourceRoot":"","sources":["../../../src/runtime/tools/SocialPostTool.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;;GASG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAC;AAmB9E;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,cAAc;IACzB,4CAA4C;IAC5C,MAAM,CAAU,OAAO,GAAG,aAAa,CAAC;IAEhC,SAAS,CAAyB;IAClC,eAAe,CAAsB;IAE7C,YACE,QAA8B,EAC9B,eAAoC,EACpC,cAAyB;QAEzB,IAAI,CAAC,SAAS,GAAG,IAAI,sBAAsB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACtE,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,MAMb;QACC,uBAAuB;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE5D,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,iCAAiC;gBACxC,gBAAgB,EAAE,UAAU,CAAC,MAAM;gBACnC,kBAAkB,EAAE,UAAU,CAAC,QAAQ;aACxC,CAAC;QACJ,CAAC;QAED,mBAAmB;QACnB,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,8BAA8B;aACtC,CAAC;QACJ,CAAC;QAED,mCAAmC;QACnC,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC7C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,kCAAkC,MAAM,CAAC,MAAM,wBAAwB,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG;aACxG,CAAC;QACJ,CAAC;QAED,oBAAoB;QACpB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,GAAmB;YAC3B,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,WAAW;YACnB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,SAAS,EAAE,GAAG;YACd,WAAW,EAAE,GAAG;YAChB,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;YACvE,gBAAgB,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC;SACzC,CAAC;QAEF,aAAa;QACb,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,mBAAmB,GAAG,CAAC,OAAO,EAAE;aACxC,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,kBAAkB,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACrF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,iBAAiB;QAOtB,OAAO;YACL,MAAM,EAAE,cAAc,CAAC,OAAO;YAC9B,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,sGAAsG;YACnH,QAAQ,EAAE,eAAe;YACzB,QAAQ,EAAE,CAAC,EAAE,6CAA6C;SAC3D,CAAC;IACJ,CAAC"}