wunderland 0.72.2 → 0.82.0

package/dist/runtime/tools/ToolApprovalHandler.d.ts

@@ -0,0 +1,152 @@
+/**
+ * @fileoverview HITL approval flow, security tier permission checks,
+ * step-up authorization, guardrails validation, and tool allowlist/denylist
+ * checking.
+ *
+ * Extracted from `tool-calling.ts` to isolate the authorization and
+ * guardrails layer from the LLM loop and streaming logic. Both the
+ * non-streaming {@link runToolCallingTurn} and streaming
+ * {@link streamToolCallingTurn} delegate tool authorization to the
+ * functions exported here.
+ *
+ * @module wunderland/runtime/ToolApprovalHandler
+ */
+import type { StepUpAuthorizationManager } from '../../security/StepUpAuthorizationManager.js';
+import type { ToolInstance } from './tool-helpers.js';
+export { TOOL_FALLBACK_MAP } from './tool-helpers.js';
+/**
+ * Options for {@link authorizeToolCall}.
+ *
+ * Contains everything needed to decide whether a tool call should be
+ * executed, denied, or escalated to the user for HITL approval.
+ */
+export interface ToolAuthorizationOpts {
+    /** The resolved tool instance. */
+    tool: ToolInstance;
+    /** The canonical tool name (after any rewriting). */
+    toolName: string;
+    /** The tool call arguments from the LLM. */
+    args: Record<string, unknown>;
+    /** The tool call ID for message correlation. */
+    callId: string;
+    /** The authorization manager instance. */
+    authManager: StepUpAuthorizationManager;
+    /** Shared context passed to tool execution. */
+    toolContext: Record<string, unknown>;
+    /** Whether to skip all permission checks. */
+    dangerouslySkipPermissions: boolean;
+    /** Interactive permission callback for HITL approval. */
+    askPermission: (tool: ToolInstance, args: Record<string, unknown>) => Promise<boolean>;
+    /** Whether to wrap tool output for the LLM. */
+    shouldWrapToolOutputs: boolean;
+    /** Whether to abort on any tool failure. */
+    failClosedOnToolFailure: boolean;
+    /** Mutable message array for pushing denial messages. */
+    messages: Array<Record<string, unknown>>;
+}
+/**
+ * Result of a tool authorization check.
+ */
+export interface ToolAuthorizationResult {
+    /** Whether the tool call is authorized to proceed. */
+    authorized: boolean;
+    /** Whether the user explicitly approved this call via HITL. */
+    hitlApproved: boolean;
+    /** If authorization failed and fail_closed is active, the reply to return. */
+    earlyReturn?: string;
+    /** If authorization failed, the denial reason. */
+    error?: string;
+}
+/**
+ * Options for {@link executeWithGuardrails}.
+ *
+ * Encapsulates the guardrails validation, folder escalation, and
+ * tool execution within a single instrumented span.
+ */
+export interface GuardrailExecutionOpts {
+    /** The resolved tool instance. */
+    tool: ToolInstance;
+    /** The canonical tool name. */
+    toolName: string;
+    /** The resolved tool key from the tool map. */
+    resolvedToolKey: string;
+    /** The tool call arguments. */
+    args: Record<string, unknown>;
+    /** The tool call ID. */
+    callId: string;
+    /** Shared context passed to tool execution. */
+    toolContext: Record<string, unknown>;
+    /** Per-call tool context (may include onToolProgress). */
+    callToolContext: Record<string, unknown>;
+    /** Whether the user already HITL-approved this call (skip re-prompting). */
+    hitlApproved: boolean;
+    /** Whether to skip all permission checks. */
+    dangerouslySkipPermissions: boolean;
+    /** Interactive permission callback for folder escalation. */
+    askPermission: (tool: ToolInstance, args: Record<string, unknown>) => Promise<boolean>;
+}
+/**
+ * Perform step-up authorization for a tool call.
+ *
+ * Evaluates the tool against the {@link StepUpAuthorizationManager}'s
+ * tier configuration:
+ *
+ * - **Tier 1 (Autonomous)**: Auto-approved, no prompt.
+ * - **Tier 2 (Async Review)**: Auto-approved, queued for review.
+ * - **Tier 3 (Sync HITL)**: Prompts the user via `askPermission`.
+ *
+ * When `dangerouslySkipPermissions` is `true`, all tiers are auto-approved.
+ *
+ * @param opts - Authorization options.
+ * @returns Authorization result indicating whether to proceed.
+ */
+export declare function authorizeToolCall(opts: ToolAuthorizationOpts): Promise<ToolAuthorizationResult>;
+/**
+ * Execute a tool with guardrails validation and folder escalation.
+ *
+ * Wraps tool execution inside an OTel span and performs:
+ *
+ * 1. **Pre-check**: `file_read` on directories fails fast with a helpful message.
+ * 2. **Guardrails validation**: Checks folder access rules, sandbox boundaries.
+ * 3. **Folder escalation**: If denied paths are escalatable, prompts the user
+ *    (or auto-grants if HITL already approved this call) and adds folder rules.
+ * 4. **Execution**: Calls `tool.execute(args, callToolContext)`.
+ *
+ * @param opts - Execution options.
+ * @returns The tool execution result.
+ */
+export declare function executeWithGuardrails(opts: GuardrailExecutionOpts): Promise<{
+    success: boolean;
+    output?: unknown;
+    error?: string;
+}>;
+/**
+ * Build the tool result message payload, including fallback suggestions
+ * for failed or empty-result tools.
+ *
+ * @param result - The tool execution result.
+ * @param toolName - The canonical tool name.
+ * @param callId - The tool call ID.
+ * @param toolMap - The current tool map (to check fallback availability).
+ * @param shouldWrapToolOutputs - Whether to wrap output for the LLM.
+ * @param debugMode - Whether to log debug output.
+ * @returns The message content string to push into the conversation.
+ */
+export declare function buildToolResultPayload(result: {
+    success: boolean;
+    output?: unknown;
+    error?: string;
+}, toolName: string, callId: string, toolMap: Map<string, ToolInstance>, shouldWrapToolOutputs: boolean, debugMode: boolean): Promise<string>;
+/**
+ * Build the error payload for a tool that threw an exception.
+ *
+ * Includes API key guidance hints and suggested fallback tools when
+ * available in the tool map.
+ *
+ * @param errMsg - The error message from the thrown exception.
+ * @param toolName - The canonical tool name.
+ * @param toolMap - The current tool map.
+ * @returns The JSON-serialized error payload.
+ */
+export declare function buildToolErrorPayload(errMsg: string, toolName: string, toolMap: Map<string, ToolInstance>): Promise<string>;
+//# sourceMappingURL=ToolApprovalHandler.d.ts.map

package/dist/runtime/tools/ToolApprovalHandler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolApprovalHandler.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/ToolApprovalHandler.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;GAYG;AAMH,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC/F,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAetD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAItD;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,kCAAkC;IAClC,IAAI,EAAE,YAAY,CAAC;IACnB,qDAAqD;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,WAAW,EAAE,0BAA0B,CAAC;IACxC,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,6CAA6C;IAC7C,0BAA0B,EAAE,OAAO,CAAC;IACpC,yDAAyD;IACzD,aAAa,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvF,+CAA+C;IAC/C,qBAAqB,EAAE,OAAO,CAAC;IAC/B,4CAA4C;IAC5C,uBAAuB,EAAE,OAAO,CAAC;IACjC,yDAAyD;IACzD,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,sDAAsD;IACtD,UAAU,EAAE,OAAO,CAAC;IACpB,+DAA+D;IAC/D,YAAY,EAAE,OAAO,CAAC;IACtB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,kCAAkC;IAClC,IAAI,EAAE,YAAY,CAAC;IACnB,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,+CAA+C;IAC/C,eAAe,EAAE,MAAM,CAAC;IACxB,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,wBAAwB;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,0DAA0D;IAC1D,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,4EAA4E;IAC5E,YAAY,EAAE,OAAO,CAAC;IACtB,6CAA6C;IAC7C,0BAA0B,EAAE,OAAO,CAAC;IACpC,6DAA6D;IAC7D,aAAa,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxF;AAID;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,qBAAqB,GAC1B,OAAO,CAAC,uBAAuB,CAAC,CA0DlC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA+FjE;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EAC9D,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,EAClC,qBAAqB,EAAE,OAAO,EAC9B,SAAS,EAAE,OAAO,GACjB,OAAO,CAAC,MAAM,CAAC,CAqCjB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,GACjC,OAAO,CAAC,MAAM,CAAC,CAcjB"}

package/dist/runtime/tools/ToolApprovalHandler.js

@@ -0,0 +1,269 @@
+// @ts-nocheck
+/**
+ * @fileoverview HITL approval flow, security tier permission checks,
+ * step-up authorization, guardrails validation, and tool allowlist/denylist
+ * checking.
+ *
+ * Extracted from `tool-calling.ts` to isolate the authorization and
+ * guardrails layer from the LLM loop and streaming logic. Both the
+ * non-streaming {@link runToolCallingTurn} and streaming
+ * {@link streamToolCallingTurn} delegate tool authorization to the
+ * functions exported here.
+ *
+ * @module wunderland/runtime/ToolApprovalHandler
+ */
+import * as path from 'node:path';
+import { ToolRiskTier, } from '../../types/core-types.js';
+import { getGuardrails, toAuthorizableTool, wrapUntrustedToolOutput, getAgentIdForGuardrails, getAgentWorkspaceDirFromContext, withSpan, redactToolOutputForLLM, safeJsonStringify, isEmptySearchResult, TOOL_FALLBACK_MAP, } from './tool-helpers.js';
+// Re-export TOOL_FALLBACK_MAP for consumers that import from this module.
+export { TOOL_FALLBACK_MAP } from './tool-helpers.js';
+// ── Functions ──────────────────────────────────────────────────────────────
+/**
+ * Perform step-up authorization for a tool call.
+ *
+ * Evaluates the tool against the {@link StepUpAuthorizationManager}'s
+ * tier configuration:
+ *
+ * - **Tier 1 (Autonomous)**: Auto-approved, no prompt.
+ * - **Tier 2 (Async Review)**: Auto-approved, queued for review.
+ * - **Tier 3 (Sync HITL)**: Prompts the user via `askPermission`.
+ *
+ * When `dangerouslySkipPermissions` is `true`, all tiers are auto-approved.
+ *
+ * @param opts - Authorization options.
+ * @returns Authorization result indicating whether to proceed.
+ */
+export async function authorizeToolCall(opts) {
+    const { tool, toolName, args, callId, authManager, toolContext, dangerouslySkipPermissions, askPermission, shouldWrapToolOutputs, failClosedOnToolFailure, messages } = opts;
+    const authResult = await authManager.authorize({
+        tool: toAuthorizableTool(tool),
+        args,
+        context: {
+            userId: String(toolContext?.['userContext'] && typeof toolContext['userContext'] === 'object'
+                ? toolContext['userContext']?.['userId'] ?? 'cli-user'
+                : 'cli-user'),
+            sessionId: String(toolContext?.['gmiId'] ?? 'cli'),
+            gmiId: String(toolContext?.['personaId'] ?? 'cli'),
+        },
+        timestamp: new Date(),
+    });
+    if (!authResult.authorized) {
+        if (authResult.tier === ToolRiskTier.TIER_3_SYNC_HITL && !dangerouslySkipPermissions) {
+            const ok = await askPermission(tool, args);
+            if (!ok) {
+                const denial = JSON.stringify({ error: `Permission denied for tool: ${toolName}` });
+                messages.push({
+                    role: 'tool',
+                    tool_call_id: callId,
+                    content: shouldWrapToolOutputs
+                        ? wrapUntrustedToolOutput(denial, { toolName, toolCallId: callId, includeWarning: false })
+                        : denial,
+                });
+                const earlyReturn = failClosedOnToolFailure
+                    ? `[tool_failure_mode=fail_closed] Permission denied for tool: ${toolName}.`
+                    : undefined;
+                if (earlyReturn) {
+                    messages.push({ role: 'assistant', content: earlyReturn });
+                }
+                return { authorized: false, hitlApproved: false, earlyReturn, error: `Permission denied for tool: ${toolName}` };
+            }
+            return { authorized: true, hitlApproved: true };
+        }
+        else if (!dangerouslySkipPermissions) {
+            const denial = JSON.stringify({ error: `Permission denied for tool: ${toolName}` });
+            messages.push({
+                role: 'tool',
+                tool_call_id: callId,
+                content: shouldWrapToolOutputs
+                    ? wrapUntrustedToolOutput(denial, { toolName, toolCallId: callId, includeWarning: false })
+                    : denial,
+            });
+            const earlyReturn = failClosedOnToolFailure
+                ? `[tool_failure_mode=fail_closed] Permission denied for tool: ${toolName}.`
+                : undefined;
+            if (earlyReturn) {
+                messages.push({ role: 'assistant', content: earlyReturn });
+            }
+            return { authorized: false, hitlApproved: false, earlyReturn, error: `Permission denied for tool: ${toolName}` };
+        }
+        // dangerouslySkipPermissions — fall through to authorized
+    }
+    return { authorized: true, hitlApproved: false };
+}
+/**
+ * Execute a tool with guardrails validation and folder escalation.
+ *
+ * Wraps tool execution inside an OTel span and performs:
+ *
+ * 1. **Pre-check**: `file_read` on directories fails fast with a helpful message.
+ * 2. **Guardrails validation**: Checks folder access rules, sandbox boundaries.
+ * 3. **Folder escalation**: If denied paths are escalatable, prompts the user
+ *    (or auto-grants if HITL already approved this call) and adds folder rules.
+ * 4. **Execution**: Calls `tool.execute(args, callToolContext)`.
+ *
+ * @param opts - Execution options.
+ * @returns The tool execution result.
+ */
+export async function executeWithGuardrails(opts) {
+    return await withSpan('wunderland.tool.execute', {
+        tool_name: opts.toolName,
+        tool_category: opts.tool.category ?? '',
+        tool_has_side_effects: opts.tool.hasSideEffects === true,
+        authorized: true,
+    }, async () => {
+        // Pre-check: file_read on directories should fail-fast
+        if (opts.tool.name === 'file_read') {
+            const readPath = opts.args.path || opts.args.file_path || opts.args.filePath;
+            if (typeof readPath === 'string') {
+                try {
+                    const fsp = await import('node:fs/promises');
+                    const s = await fsp.stat(path.resolve(readPath));
+                    if (s.isDirectory()) {
+                        return {
+                            success: false,
+                            error: `"${readPath}" is a directory, not a file. Use list_directory to view directory contents.`,
+                        };
+                    }
+                }
+                catch { /* path doesn't exist — let normal flow handle */ }
+            }
+        }
+        // Guardrails validation
+        const guardrails = getGuardrails();
+        const agentId = getAgentIdForGuardrails(opts.toolContext);
+        const guardrailsCheck = await guardrails.validateBeforeExecution({
+            toolId: opts.resolvedToolKey || opts.tool.name,
+            toolName: opts.tool.name,
+            args: opts.args,
+            agentId,
+            userId: opts.toolContext.userContext?.userId,
+            sessionId: opts.toolContext.sessionId,
+            workingDirectory: getAgentWorkspaceDirFromContext(opts.toolContext, agentId),
+            tool: opts.tool,
+        });
+        if (!guardrailsCheck.allowed) {
+            // Attempt automatic permission escalation via HITL
+            const deniedPaths = (guardrailsCheck.violations || [])
+                .map(v => v.attemptedPath)
+                .filter((p) => !!p);
+            const allEscalatable = deniedPaths.length > 0 && deniedPaths.every(p => guardrails.isEscalatable(p));
+            if (allEscalatable) {
+                const operation = deniedPaths.length > 0 ? (guardrailsCheck.violations?.[0]?.operation || opts.tool.name) : opts.tool.name;
+                const isWrite = operation.includes('write') || operation.includes('delete') || operation.includes('append');
+                const autoGrant = opts.hitlApproved || opts.dangerouslySkipPermissions;
+                const approved = autoGrant || (opts.askPermission
+                    ? await opts.askPermission({ ...opts.tool, name: `folder_access:${opts.tool.name}`, description: `Grant ${isWrite ? 'write' : 'read'} access to: ${deniedPaths.join(', ')}` }, { paths: deniedPaths, operation: isWrite ? 'write' : 'read', originalTool: opts.tool.name })
+                    : false);
+                if (approved) {
+                    for (const p of deniedPaths) {
+                        const dir = p.endsWith('/') ? p : path.dirname(p);
+                        guardrails.addFolderRule(agentId, {
+                            pattern: `${dir}/**`,
+                            read: true,
+                            write: isWrite,
+                            description: `Granted at runtime for ${opts.tool.name}`,
+                        });
+                        const shellSvc = opts.tool.shellService;
+                        if (shellSvc && typeof shellSvc.addReadRoot === 'function') {
+                            shellSvc.addReadRoot(dir);
+                            if (isWrite) {
+                                shellSvc.addWriteRoot(dir);
+                            }
+                        }
+                    }
+                    return await opts.tool.execute(opts.args, opts.callToolContext);
+                }
+            }
+            return {
+                success: false,
+                error: guardrailsCheck.reason,
+                output: {
+                    violations: guardrailsCheck.violations,
+                    canRequestAccess: allEscalatable,
+                },
+            };
+        }
+        return await opts.tool.execute(opts.args, opts.callToolContext);
+    });
+}
+/**
+ * Build the tool result message payload, including fallback suggestions
+ * for failed or empty-result tools.
+ *
+ * @param result - The tool execution result.
+ * @param toolName - The canonical tool name.
+ * @param callId - The tool call ID.
+ * @param toolMap - The current tool map (to check fallback availability).
+ * @param shouldWrapToolOutputs - Whether to wrap output for the LLM.
+ * @param debugMode - Whether to log debug output.
+ * @returns The message content string to push into the conversation.
+ */
+export async function buildToolResultPayload(result, toolName, callId, toolMap, shouldWrapToolOutputs, debugMode) {
+    let payload;
+    if (result?.success) {
+        payload = redactToolOutputForLLM(result.output);
+        const emptyFallbacks = TOOL_FALLBACK_MAP[toolName];
+        const availableEmptyFallbacks = emptyFallbacks?.filter(f => toolMap?.has(f));
+        if (availableEmptyFallbacks?.length && isEmptySearchResult(result.output)) {
+            payload = {
+                ...((typeof payload === 'object' && payload) || { output: payload }),
+                suggestedFallbacks: availableEmptyFallbacks,
+                hint: 'Search returned 0 results. Try the suggested fallback tools.',
+            };
+        }
+    }
+    else {
+        const errorMsg = result?.error || 'Tool failed';
+        let apiKeyHint;
+        try {
+            const registry = await import('@framers/agentos-extensions-registry');
+            const getApiKeyGuidance = registry.getApiKeyGuidance;
+            if (typeof getApiKeyGuidance === 'function')
+                apiKeyHint = getApiKeyGuidance(errorMsg, toolName) ?? undefined;
+        }
+        catch { /* best-effort */ }
+        const fallbacksOnFail = TOOL_FALLBACK_MAP[toolName];
+        const availableFallbacksOnFail = fallbacksOnFail?.filter(f => toolMap?.has(f));
+        payload = {
+            error: errorMsg,
+            ...(apiKeyHint ? { apiKeyGuidance: apiKeyHint } : null),
+            ...(availableFallbacksOnFail?.length ? { suggestedFallbacks: availableFallbacksOnFail } : null),
+        };
+    }
+    const json = safeJsonStringify(payload, 20000);
+    if (debugMode) {
+        console.log(`[tool-calling] Tool ${toolName} result: success=${result?.success}, output=${json.slice(0, 300)}`);
+    }
+    return shouldWrapToolOutputs
+        ? wrapUntrustedToolOutput(json, { toolName, toolCallId: callId, includeWarning: true })
+        : json;
+}
+/**
+ * Build the error payload for a tool that threw an exception.
+ *
+ * Includes API key guidance hints and suggested fallback tools when
+ * available in the tool map.
+ *
+ * @param errMsg - The error message from the thrown exception.
+ * @param toolName - The canonical tool name.
+ * @param toolMap - The current tool map.
+ * @returns The JSON-serialized error payload.
+ */
+export async function buildToolErrorPayload(errMsg, toolName, toolMap) {
+    let apiKeyGuidance;
+    try {
+        const registry = await import('@framers/agentos-extensions-registry');
+        const getApiKeyGuidance = registry.getApiKeyGuidance;
+        if (typeof getApiKeyGuidance === 'function')
+            apiKeyGuidance = getApiKeyGuidance(errMsg, toolName) ?? undefined;
+    }
+    catch { /* best-effort */ }
+    const fallbacks = TOOL_FALLBACK_MAP[toolName];
+    const availableFallbacks = fallbacks?.filter(f => toolMap?.has(f));
+    return JSON.stringify({
+        error: `Tool threw: ${errMsg}`,
+        ...(apiKeyGuidance ? { apiKeyGuidance } : null),
+        ...(availableFallbacks?.length ? { suggestedFallbacks: availableFallbacks } : null),
+    });
+}
+//# sourceMappingURL=ToolApprovalHandler.js.map

package/dist/runtime/tools/ToolApprovalHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolApprovalHandler.js","sourceRoot":"","sources":["../../../src/runtime/tools/ToolApprovalHandler.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,YAAY,GACb,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,uBAAuB,EACvB,uBAAuB,EACvB,+BAA+B,EAC/B,QAAQ,EACR,sBAAsB,EACtB,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,0EAA0E;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AA8EtD,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAA2B;IAE3B,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,0BAA0B,EAAE,aAAa,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAE7K,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC;QAC7C,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC;QAC9B,IAAI;QACJ,OAAO,EAAE;YACP,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,aAAa,CAAC,IAAI,OAAO,WAAW,CAAC,aAAa,CAAC,KAAK,QAAQ;gBAC3F,CAAC,CAAE,WAAW,CAAC,aAAa,CAA6B,EAAE,CAAC,QAAQ,CAAC,IAAI,UAAU;gBACnF,CAAC,CAAC,UAAU,CAAC;YACf,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;YAClD,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC;SACnD;QACD,SAAS,EAAE,IAAI,IAAI,EAAE;KACtB,CAAC,CAAC;IAEH,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAC3B,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,CAAC,gBAAgB,IAAI,CAAC,0BAA0B,EAAE,CAAC;YACrF,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,+BAA+B,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACpF,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,MAAM;oBACZ,YAAY,EAAE,MAAM;oBACpB,OAAO,EAAE,qBAAqB;wBAC5B,CAAC,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;wBAC1F,CAAC,CAAC,MAAM;iBACX,CAAC,CAAC;gBACH,MAAM,WAAW,GAAG,uBAAuB;oBACzC,CAAC,CAAC,+DAA+D,QAAQ,GAAG;oBAC5E,CAAC,CAAC,SAAS,CAAC;gBACd,IAAI,WAAW,EAAE,CAAC;oBAChB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBACD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,+BAA+B,QAAQ,EAAE,EAAE,CAAC;YACnH,CAAC;YACD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAClD,CAAC;aAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,+BAA+B,QAAQ,EAAE,EAAE,CAAC,CAAC;YACpF,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,MAAM;gBACZ,YAAY,EAAE,MAAM;gBACpB,OAAO,EAAE,qBAAqB;oBAC5B,CAAC,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;oBAC1F,CAAC,CAAC,MAAM;aACX,CAAC,CAAC;YACH,MAAM,WAAW,GAAG,uBAAuB;gBACzC,CAAC,CAAC,+DAA+D,QAAQ,GAAG;gBAC5E,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,WAAW,EAAE,CAAC;gBAChB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,+BAA+B,QAAQ,EAAE,EAAE,CAAC;QACnH,CAAC;QACD,0DAA0D;IAC5D,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAA4B;IAE5B,OAAO,MAAM,QAAQ,CACnB,yBAAyB,EACzB;QACE,SAAS,EAAE,IAAI,CAAC,QAAQ;QACxB,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE;QACvC,qBAAqB,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,IAAI;QACxD,UAAU,EAAE,IAAI;KACjB,EACD,KAAK,IAAI,EAAE;QACT,uDAAuD;QACvD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAI,IAAI,CAAC,IAAY,CAAC,IAAI,IAAK,IAAI,CAAC,IAAY,CAAC,SAAS,IAAK,IAAI,CAAC,IAAY,CAAC,QAAQ,CAAC;YACxG,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;oBAC7C,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;oBACjD,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;wBACpB,OAAO;4BACL,OAAO,EAAE,KAAK;4BACd,KAAK,EAAE,IAAI,QAAQ,8EAA8E;yBAClG,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAC,iDAAiD,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1D,MAAM,eAAe,GAAG,MAAM,UAAU,CAAC,uBAAuB,CAAC;YAC/D,MAAM,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI;YAC9C,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACxB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO;YACP,MAAM,EAAG,IAAI,CAAC,WAAW,CAAC,WAAmB,EAAE,MAAM;YACrD,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,SAA+B;YAC3D,gBAAgB,EAAE,+BAA+B,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;YAC5E,IAAI,EAAE,IAAI,CAAC,IAAW;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;YAC7B,mDAAmD;YACnD,MAAM,WAAW,GAAG,CAAC,eAAe,CAAC,UAAU,IAAI,EAAE,CAAC;iBACnD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC;iBACzB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;YAErG,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC3H,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAE5G,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,0BAA0B,CAAC;gBACvE,MAAM,QAAQ,GAAG,SAAS,IAAI,CAAC,IAAI,CAAC,aAAa;oBAC/C,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CACtB,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,iBAAiB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,SAAS,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,eAAe,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAkB,EAClK,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAC5F;oBACH,CAAC,CAAC,KAAK,CAAC,CAAC;gBAEX,IAAI,QAAQ,EAAE,CAAC;oBACb,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;wBAC5B,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;wBAClD,UAAU,CAAC,aAAa,CAAC,OAAO,EAAE;4BAChC,OAAO,EAAE,GAAG,GAAG,KAAK;4BACpB,IAAI,EAAE,IAAI;4BACV,KAAK,EAAE,OAAO;4BACd,WAAW,EAAE,0BAA0B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;yBACxD,CAAC,CAAC;wBAEH,MAAM,QAAQ,GAAI,IAAI,CAAC,IAAY,CAAC,YAAY,CAAC;wBACjD,IAAI,QAAQ,IAAI,OAAO,QAAQ,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;4BAC3D,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;4BAC1B,IAAI,OAAO,EAAE,CAAC;gCACZ,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;4BAC7B,CAAC;wBACH,CAAC;oBACH,CAAC;oBACD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,eAAe,CAAC,MAAM;gBAC7B,MAAM,EAAE;oBACN,UAAU,EAAE,eAAe,CAAC,UAAU;oBACtC,gBAAgB,EAAE,cAAc;iBACjC;aACF,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAClE,CAAC,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAA8D,EAC9D,QAAgB,EAChB,MAAc,EACd,OAAkC,EAClC,qBAA8B,EAC9B,SAAkB;IAElB,IAAI,OAAgB,CAAC;IACrB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;QACpB,OAAO,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,cAAc,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,uBAAuB,GAAG,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,IAAI,uBAAuB,EAAE,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1E,OAAO,GAAG;gBACR,GAAG,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpE,kBAAkB,EAAE,uBAAuB;gBAC3C,IAAI,EAAE,8DAA8D;aACrE,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,MAAM,EAAE,KAAK,IAAI,aAAa,CAAC;QAChD,IAAI,UAA8B,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;YACtE,MAAM,iBAAiB,GAAI,QAAgB,CAAC,iBAAiB,CAAC;YAC9D,IAAI,OAAO,iBAAiB,KAAK,UAAU;gBAAE,UAAU,GAAG,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC;QAC/G,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC7B,MAAM,eAAe,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,wBAAwB,GAAG,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,OAAO,GAAG;YACR,KAAK,EAAE,QAAQ;YACf,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YACvD,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SAChG,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,uBAAuB,QAAQ,oBAAoB,MAAM,EAAE,OAAO,YAAY,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,qBAAqB;QAC1B,CAAC,CAAC,uBAAuB,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QACvF,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,QAAgB,EAChB,OAAkC;IAElC,IAAI,cAAkC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;QACtE,MAAM,iBAAiB,GAAI,QAAgB,CAAC,iBAAiB,CAAC;QAC9D,IAAI,OAAO,iBAAiB,KAAK,UAAU;YAAE,cAAc,GAAG,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC;IACjH,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC7B,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,kBAAkB,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,KAAK,EAAE,eAAe,MAAM,EAAE;QAC9B,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/C,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;KACpF,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/tools/ToolRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolRegistry.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/ToolRegistry.ts"],"names":[],"mappings":"AACA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAI9C,MAAM,WAAW,kBAAkB;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,KAAK,GAAG,MAAM,CAAC;IAClC,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,KAAK,GAAG,MAAM,CAAC;IAClC,kFAAkF;IAClF,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,KAAK,GAAG,MAAM,CAAC;CAC1C;AAED;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;CAatB,CAAC;AA8BX;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAgDzF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAyDxH;AAGD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC"}

package/dist/runtime/tools/ToolRegistry.js

@@ -0,0 +1,171 @@
+// @ts-nocheck
+/**
+ * @fileoverview Wunderland Tool Registry — uses the curated extensions registry
+ * to load all available tools via a single `createCuratedManifest()` call.
+ *
+ * Instead of manually importing and wiring each extension, this delegates to
+ * `@framers/agentos-extensions-registry` which handles lazy loading, secret
+ * resolution, and factory invocation for all curated tools.
+ *
+ * @module wunderland/tools/ToolRegistry
+ */
+import { createCuratedManifest } from '@framers/agentos-extensions-registry';
+import { attachOptionsFromEnv } from './attach-env.js';
+/**
+ * All tool IDs that can be registered in the Wunderland system.
+ */
+export const WUNDERLAND_TOOL_IDS = {
+    WEB_SEARCH: 'web_search',
+    RESEARCH_AGGREGATE: 'research_aggregate',
+    FACT_CHECK: 'fact_check',
+    NEWS_SEARCH: 'news_search',
+    GIPHY_SEARCH: 'giphy_search',
+    IMAGE_SEARCH: 'image_search',
+    TEXT_TO_SPEECH: 'text_to_speech',
+    SPEECH_TO_TEXT: 'speech_to_text',
+    SOCIAL_POST: 'social_post',
+    FEED_READ: 'feed_read',
+    FEED_SEARCH: 'feed_search',
+    MEMORY_READ: 'memory_read',
+};
+/**
+ * Build a secrets map from config values and environment variables.
+ * Keys match the secret IDs expected by extension `getSecret()` resolvers.
+ */
+function buildSecretsMap(config) {
+    const secrets = {};
+    const add = (key, configValue, envKey) => {
+        const val = configValue || (envKey ? process.env[envKey] : undefined);
+        if (val)
+            secrets[key] = val;
+    };
+    add('serper.apiKey', config?.serperApiKey, 'SERPER_API_KEY');
+    add('serpapi.apiKey', config?.serpApiKey, 'SERPAPI_API_KEY');
+    add('brave.apiKey', config?.braveApiKey, 'BRAVE_API_KEY');
+    add('searxng.url', config?.searxngUrl, 'SEARXNG_URL');
+    add('giphy.apiKey', config?.giphyApiKey, 'GIPHY_API_KEY');
+    add('openai.apiKey', config?.openaiApiKey, 'OPENAI_API_KEY');
+    add('elevenlabs.apiKey', config?.elevenLabsApiKey, 'ELEVENLABS_API_KEY');
+    add('deepgram.apiKey', config?.deepgramApiKey, 'DEEPGRAM_API_KEY');
+    add('pexels.apiKey', config?.pexelsApiKey, 'PEXELS_API_KEY');
+    add('unsplash.apiKey', config?.unsplashApiKey, 'UNSPLASH_ACCESS_KEY');
+    add('pixabay.apiKey', config?.pixabayApiKey, 'PIXABAY_API_KEY');
+    add('newsapi.apiKey', config?.newsApiKey, 'NEWSAPI_API_KEY');
+    return secrets;
+}
+/**
+ * Creates all available tools via the curated extensions registry.
+ * Only tools whose packages are installed will be loaded (via dynamic import).
+ * API keys resolve from config → secrets map → environment variables.
+ */
+export async function createWunderlandTools(config) {
+    const secrets = buildSecretsMap(config);
+    const manifest = await createCuratedManifest({
+        tools: config?.tools ?? 'all',
+        voice: config?.voice,
+        productivity: config?.productivity,
+        channels: 'none',
+        secrets,
+        overrides: {
+            // Attach tools (browser_attach_*) load only when WUNDERLAND_ATTACH_IDENTITY
+            // is set — the pack stays launch-mode-only otherwise. See
+            // docs/features/ASSISTANT_BROWSER_ATTACH.md.
+            'browser-automation': {
+                options: attachOptionsFromEnv(process.env),
+            },
+            'voice-synthesis': {
+                options: {
+                    openaiApiKey: config?.openaiApiKey || process.env.OPENAI_API_KEY,
+                    openaiBaseUrl: config?.openaiBaseUrl || process.env.OPENAI_BASE_URL,
+                    elevenLabsApiKey: config?.elevenLabsApiKey || process.env.ELEVENLABS_API_KEY,
+                    deepgramApiKey: config?.deepgramApiKey || process.env.DEEPGRAM_API_KEY,
+                    deepgramBaseUrl: config?.deepgramBaseUrl || process.env.DEEPGRAM_BASE_URL,
+                    whisperLocalBaseUrl: config?.whisperLocalBaseUrl || process.env.WHISPER_LOCAL_BASE_URL,
+                    ollamaBaseUrl: config?.ollamaBaseUrl || process.env.OLLAMA_BASE_URL,
+                    defaultProvider: config?.defaultTtsProvider || process.env.TTS_PROVIDER,
+                    defaultSttProvider: config?.defaultSttProvider || process.env.STT_PROVIDER,
+                },
+            },
+        },
+    });
+    const tools = [];
+    for (const pack of manifest.packs) {
+        if (!('factory' in pack) || typeof pack.factory !== 'function')
+            continue;
+        try {
+            const extensionPack = await pack.factory();
+            for (const descriptor of extensionPack.descriptors || []) {
+                if (descriptor?.kind === 'tool' && descriptor.payload) {
+                    tools.push(descriptor.payload);
+                }
+            }
+        }
+        catch {
+            // Extension pack failed to initialize — skip silently
+        }
+    }
+    return tools;
+}
+/**
+ * Returns a map of tool name → availability status for diagnostic purposes.
+ */
+export function getToolAvailability(config) {
+    const secrets = buildSecretsMap(config);
+    const hasWebKey = !!(secrets['serper.apiKey'] || secrets['serpapi.apiKey'] || secrets['brave.apiKey'] || secrets['searxng.url']);
+    const hasTtsProvider = !!(secrets['openai.apiKey'] ||
+        secrets['elevenlabs.apiKey'] ||
+        config?.ollamaBaseUrl ||
+        process.env.OLLAMA_BASE_URL);
+    const hasSttProvider = !!(secrets['openai.apiKey'] ||
+        secrets['deepgram.apiKey'] ||
+        config?.whisperLocalBaseUrl ||
+        process.env.WHISPER_LOCAL_BASE_URL);
+    return {
+        [WUNDERLAND_TOOL_IDS.WEB_SEARCH]: {
+            available: true,
+            reason: hasWebKey ? undefined : 'No web-search providers configured (Serper/SerpAPI/Brave/SearXNG); using DuckDuckGo fallback',
+        },
+        [WUNDERLAND_TOOL_IDS.RESEARCH_AGGREGATE]: {
+            available: true,
+            reason: hasWebKey ? undefined : 'No web-search providers configured (Serper/SerpAPI/Brave/SearXNG); using DuckDuckGo fallback',
+        },
+        [WUNDERLAND_TOOL_IDS.FACT_CHECK]: {
+            available: true,
+            reason: hasWebKey ? undefined : 'No web-search providers configured (Serper/SerpAPI/Brave/SearXNG); using DuckDuckGo fallback',
+        },
+        [WUNDERLAND_TOOL_IDS.NEWS_SEARCH]: {
+            available: !!secrets['newsapi.apiKey'],
+            reason: secrets['newsapi.apiKey'] ? undefined : 'NEWSAPI_API_KEY not set',
+        },
+        [WUNDERLAND_TOOL_IDS.GIPHY_SEARCH]: {
+            available: !!secrets['giphy.apiKey'],
+            reason: secrets['giphy.apiKey'] ? undefined : 'GIPHY_API_KEY not set',
+        },
+        [WUNDERLAND_TOOL_IDS.IMAGE_SEARCH]: {
+            available: !!(secrets['pexels.apiKey'] || secrets['unsplash.apiKey'] || secrets['pixabay.apiKey']),
+            reason: (secrets['pexels.apiKey'] || secrets['unsplash.apiKey'] || secrets['pixabay.apiKey'])
+                ? undefined
+                : 'No image API keys set',
+        },
+        [WUNDERLAND_TOOL_IDS.TEXT_TO_SPEECH]: {
+            available: hasTtsProvider,
+            reason: hasTtsProvider
+                ? undefined
+                : 'No TTS provider configured. Set OPENAI_API_KEY, ELEVENLABS_API_KEY, or OLLAMA_BASE_URL.',
+        },
+        [WUNDERLAND_TOOL_IDS.SPEECH_TO_TEXT]: {
+            available: hasSttProvider,
+            reason: hasSttProvider
+                ? undefined
+                : 'No STT provider configured. Set OPENAI_API_KEY, DEEPGRAM_API_KEY, or WHISPER_LOCAL_BASE_URL.',
+        },
+    };
+}
+// Re-export extension tools for convenience (individual packages remain as deps)
+export { SerperSearchTool } from './SerperSearchTool.js';
+export { WebSearchTool, ResearchAggregatorTool, FactCheckTool } from '@framers/agentos-ext-web-search';
+export { GiphySearchTool } from '@framers/agentos-ext-giphy';
+export { ImageSearchTool } from '@framers/agentos-ext-image-search';
+export { TextToSpeechTool } from '@framers/agentos-ext-voice-synthesis';
+export { NewsSearchTool } from '@framers/agentos-ext-news-search';
+//# sourceMappingURL=ToolRegistry.js.map

package/dist/runtime/tools/ToolRegistry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolRegistry.js","sourceRoot":"","sources":["../../../src/runtime/tools/ToolRegistry.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;;GASG;AAGH,OAAO,EAAE,qBAAqB,EAAE,MAAM,sCAAsC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAiCvD;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,UAAU,EAAE,YAAY;IACxB,kBAAkB,EAAE,oBAAoB;IACxC,UAAU,EAAE,YAAY;IACxB,WAAW,EAAE,aAAa;IAC1B,YAAY,EAAE,cAAc;IAC5B,YAAY,EAAE,cAAc;IAC5B,cAAc,EAAE,gBAAgB;IAChC,cAAc,EAAE,gBAAgB;IAChC,WAAW,EAAE,aAAa;IAC1B,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;CAClB,CAAC;AAEX;;;GAGG;AACH,SAAS,eAAe,CAAC,MAA2B;IAClD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAE3C,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,WAAoB,EAAE,MAAe,EAAE,EAAE;QACjE,MAAM,GAAG,GAAG,WAAW,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACtE,IAAI,GAAG;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC9B,CAAC,CAAC;IAEF,GAAG,CAAC,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAC7D,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAC7D,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IAC1D,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;IACtD,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;IAC1D,GAAG,CAAC,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAC7D,GAAG,CAAC,mBAAmB,EAAE,MAAM,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;IACzE,GAAG,CAAC,iBAAiB,EAAE,MAAM,EAAE,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACnE,GAAG,CAAC,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAC7D,GAAG,CAAC,iBAAiB,EAAE,MAAM,EAAE,cAAc,EAAE,qBAAqB,CAAC,CAAC;IACtE,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,aAAa,EAAE,iBAAiB,CAAC,CAAC;IAChE,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAE7D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAA2B;IACrE,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC;QAC3C,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,KAAK;QAC7B,KAAK,EAAE,MAAM,EAAE,KAAK;QACpB,YAAY,EAAE,MAAM,EAAE,YAAY;QAClC,QAAQ,EAAE,MAAM;QAChB,OAAO;QACP,SAAS,EAAE;YACT,4EAA4E;YAC5E,0DAA0D;YAC1D,6CAA6C;YAC7C,oBAAoB,EAAE;gBACpB,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC;aAC3C;YACD,iBAAiB,EAAE;gBACjB,OAAO,EAAE;oBACP,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;oBAChE,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;oBACnE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB;oBAC5E,cAAc,EAAE,MAAM,EAAE,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB;oBACtE,eAAe,EAAE,MAAM,EAAE,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB;oBACzE,mBAAmB,EAAE,MAAM,EAAE,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB;oBACtF,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe;oBACnE,eAAe,EAAE,MAAM,EAAE,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;oBACvE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY;iBAC3E;aACF;SACF;KAC6C,CAAC,CAAC;IAElD,MAAM,KAAK,GAAY,EAAE,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,UAAU;YAAE,SAAS;QACzE,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YAC3C,KAAK,MAAM,UAAU,IAAK,aAAqB,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;gBAClE,IAAI,UAAU,EAAE,IAAI,KAAK,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;oBACtD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA2B;IAC7D,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAExC,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IACjI,MAAM,cAAc,GAAG,CAAC,CAAC,CACvB,OAAO,CAAC,eAAe,CAAC;QACxB,OAAO,CAAC,mBAAmB,CAAC;QAC5B,MAAM,EAAE,aAAa;QACrB,OAAO,CAAC,GAAG,CAAC,eAAe,CAC5B,CAAC;IACF,MAAM,cAAc,GAAG,CAAC,CAAC,CACvB,OAAO,CAAC,eAAe,CAAC;QACxB,OAAO,CAAC,iBAAiB,CAAC;QAC1B,MAAM,EAAE,mBAAmB;QAC3B,OAAO,CAAC,GAAG,CAAC,sBAAsB,CACnC,CAAC;IAEF,OAAO;QACL,CAAC,mBAAmB,CAAC,UAAU,CAAC,EAAE;YAChC,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8FAA8F;SAC/H;QACD,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,EAAE;YACxC,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8FAA8F;SAC/H;QACD,CAAC,mBAAmB,CAAC,UAAU,CAAC,EAAE;YAChC,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8FAA8F;SAC/H;QACD,CAAC,mBAAmB,CAAC,WAAW,CAAC,EAAE;YACjC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;YACtC,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB;SAC1E;QACD,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE;YAClC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;YACpC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB;SACtE;QACD,CAAC,mBAAmB,CAAC,YAAY,CAAC,EAAE;YAClC,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAClG,MAAM,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBAC3F,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,uBAAuB;SAC5B;QACD,CAAC,mBAAmB,CAAC,cAAc,CAAC,EAAE;YACpC,SAAS,EAAE,cAAc;YACzB,MAAM,EAAE,cAAc;gBACpB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,yFAAyF;SAC9F;QACD,CAAC,mBAAmB,CAAC,cAAc,CAAC,EAAE;YACpC,SAAS,EAAE,cAAc;YACzB,MAAM,EAAE,cAAc;gBACpB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,8FAA8F;SACnG;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACvG,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC"}