wunderland 0.72.2 → 0.82.0

package/dist/runtime/tools/attach-env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attach-env.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/attach-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,oEAAoE;AACpE,MAAM,WAAW,aAAa;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG;IAAE,MAAM,CAAC,EAAE,aAAa,CAAA;CAAE,CAcxG"}

package/dist/runtime/tools/attach-env.js

@@ -0,0 +1,41 @@
+/**
+ * @fileoverview Build browser-automation attach options from the environment.
+ *
+ * The attach tool family (`browser_attach_*`) is off unless the pack is
+ * constructed with `attach.expectedIdentity`. A normal `wunderland mission run`
+ * never passes that, so without this the tools would never load from the CLI.
+ * This sources the attach config from env vars (mirroring how voice-synthesis
+ * pulls its provider keys) so setting `WUNDERLAND_ATTACH_IDENTITY` is all it
+ * takes to make the capability reachable.
+ *
+ * @module wunderland/runtime/tools/attach-env
+ */
+/**
+ * Read attach options from an environment map.
+ *
+ * @returns `{ attach }` when `WUNDERLAND_ATTACH_IDENTITY` is set, else `{}`
+ *   (attach stays off).
+ */
+export function attachOptionsFromEnv(env) {
+    const expectedIdentity = env.WUNDERLAND_ATTACH_IDENTITY?.trim();
+    if (!expectedIdentity)
+        return {};
+    const attach = { expectedIdentity };
+    if (env.WUNDERLAND_ATTACH_TRANSPORT === 'cdp')
+        attach.transport = 'cdp';
+    else if (env.WUNDERLAND_ATTACH_TRANSPORT === 'jxa')
+        attach.transport = 'jxa';
+    const hosts = env.WUNDERLAND_ATTACH_HOSTS?.split(',')
+        .map((s) => s.trim())
+        .filter(Boolean);
+    if (hosts && hosts.length)
+        attach.allowHosts = hosts;
+    if (env.WUNDERLAND_ATTACH_LEASE?.trim())
+        attach.leaseFile = env.WUNDERLAND_ATTACH_LEASE.trim();
+    if (env.WUNDERLAND_ATTACH_PROFILE_ROOT?.trim())
+        attach.profileRoot = env.WUNDERLAND_ATTACH_PROFILE_ROOT.trim();
+    if (env.WUNDERLAND_ATTACH_PROBE_URL?.trim())
+        attach.identityProbeUrl = env.WUNDERLAND_ATTACH_PROBE_URL.trim();
+    return { attach };
+}
+//# sourceMappingURL=attach-env.js.map

package/dist/runtime/tools/attach-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attach-env.js","sourceRoot":"","sources":["../../../src/runtime/tools/attach-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAYH;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAuC;IAC1E,MAAM,gBAAgB,GAAG,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAAC;IAChE,IAAI,CAAC,gBAAgB;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,MAAM,GAAkB,EAAE,gBAAgB,EAAE,CAAC;IACnD,IAAI,GAAG,CAAC,2BAA2B,KAAK,KAAK;QAAE,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC;SACnE,IAAI,GAAG,CAAC,2BAA2B,KAAK,KAAK;QAAE,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC;IAC7E,MAAM,KAAK,GAAG,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC,GAAG,CAAC;SAClD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM;QAAE,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC;IACrD,IAAI,GAAG,CAAC,uBAAuB,EAAE,IAAI,EAAE;QAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC;IAC/F,IAAI,GAAG,CAAC,8BAA8B,EAAE,IAAI,EAAE;QAAE,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,8BAA8B,CAAC,IAAI,EAAE,CAAC;IAC/G,IAAI,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE;QAAE,MAAM,CAAC,gBAAgB,GAAG,GAAG,CAAC,2BAA2B,CAAC,IAAI,EAAE,CAAC;IAC9G,OAAO,EAAE,MAAM,EAAE,CAAC;AACpB,CAAC"}

package/dist/runtime/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC"}

package/dist/runtime/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/tools/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC"}

package/dist/runtime/tools/ollama-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ollama-options.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/ollama-options.ts"],"names":[],"mappings":"AACA,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,wBAAgB,yBAAyB,CACvC,MAAM,CAAC,EAAE,mBAAmB,GAC3B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAYrC"}

package/dist/runtime/tools/ollama-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ollama-options.js","sourceRoot":"","sources":["../../../src/runtime/tools/ollama-options.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,yBAAyB,CACvC,MAA4B;IAE5B,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE9B,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7F,OAAO,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACxE,OAAO,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC"}

package/dist/runtime/tools/policy.d.ts

@@ -0,0 +1,98 @@
+/**
+ * @fileoverview Runtime policy helpers for Wunderland.
+ *
+ * Normalizes agent.config.json policy fields (tier/permissions/modes) and
+ * filters tool exposure accordingly.
+ *
+ * This is intentionally conservative: permission sets and tool access profiles
+ * are enforced even in autonomous mode. "Autonomous" only affects approvals,
+ * not what the agent is allowed to do.
+ */
+import { type GranularPermissions, type PermissionSetName, type SecurityTierName } from '../../security/SecurityTiers.js';
+import { type ToolAccessProfileName } from '../../autonomy/social/ToolAccessProfiles.js';
+import type { FolderPermissionConfig } from '../../security/FolderPermissions.js';
+import type { ToolInstance } from './tool-calling.js';
+export type ExecutionMode = 'autonomous' | 'human-all' | 'human-dangerous';
+/**
+ * Resolved guardrail pack overrides from `agent.config.json` `security.guardrailPacks`.
+ * Each key toggles a specific guardrail extension pack on/off, overriding tier defaults.
+ */
+export interface GuardrailPackOverrides {
+    /** Four-tier PII detection and redaction. */
+    piiRedaction?: boolean;
+    /** ML-based toxicity, injection, and jailbreak detection. */
+    mlClassifiers?: boolean;
+    /** Embedding-based topic enforcement + drift detection. */
+    topicality?: boolean;
+    /** OWASP Top 10 code safety scanning. */
+    codeSafety?: boolean;
+    /** RAG-grounded hallucination detection via NLI. */
+    groundingGuard?: boolean;
+}
+/**
+ * Fully normalized runtime policy resolved from agent config + CLI flags.
+ *
+ * This structure is passed to every runtime subsystem (tool filtering,
+ * authorization, system prompt building, guardrails) so they all use a
+ * single, consistent set of resolved values.
+ */
+export type NormalizedRuntimePolicy = {
+    securityTier: SecurityTierName;
+    permissionSet: PermissionSetName;
+    toolAccessProfile: ToolAccessProfileName;
+    executionMode: ExecutionMode;
+    wrapToolOutputs: boolean;
+    folderPermissions?: FolderPermissionConfig;
+    /**
+     * Per-agent guardrail pack overrides (from `security.guardrailPacks`).
+     * When present, merged on top of the tier's default pack config.
+     */
+    guardrailPackOverrides?: GuardrailPackOverrides;
+    /**
+     * When `true`, all guardrail extension packs are disabled.
+     * Equivalent to `--no-guardrails` CLI flag.
+     */
+    disableGuardrailPacks?: boolean;
+    /**
+     * Explicit list of pack short-names to enable (overrides tier defaults).
+     * Equivalent to `--guardrails=pii,code-safety` CLI flag.
+     */
+    enableOnlyGuardrailPacks?: string[];
+};
+export declare function normalizeSecurityTier(raw: unknown): SecurityTierName;
+export declare function normalizePermissionSet(raw: unknown, tier: SecurityTierName): PermissionSetName;
+export declare function normalizeExecutionMode(raw: unknown, tier: SecurityTierName): ExecutionMode;
+export declare function normalizeToolAccessProfile(raw: unknown): ToolAccessProfileName;
+export declare function normalizeWrapToolOutputs(raw: unknown, tier: SecurityTierName): boolean;
+export declare function normalizeFolderPermissions(raw: unknown): FolderPermissionConfig | undefined;
+/**
+ * Extracts guardrail pack overrides from `security.guardrailPacks` in agent config.
+ *
+ * @param raw - The `security.guardrailPacks` value from agent.config.json.
+ * @returns Normalized overrides, or `undefined` if none specified.
+ */
+export declare function normalizeGuardrailPackOverrides(raw: unknown): GuardrailPackOverrides | undefined;
+/**
+ * Normalizes the full runtime policy from agent config (merged with CLI overrides).
+ *
+ * This is the single source of truth for all runtime security decisions.
+ * CLI flags like `--security-tier`, `--no-guardrails`, and `--guardrails=...`
+ * should be merged into the `agentConfig` object before calling this function.
+ *
+ * @param agentConfig - Merged agent config object (config file + CLI overrides).
+ * @returns Fully normalized runtime policy.
+ */
+export declare function normalizeRuntimePolicy(agentConfig: any): NormalizedRuntimePolicy;
+export declare function getPermissionsForSet(name: PermissionSetName): GranularPermissions;
+export declare function filterToolMapByPolicy(opts: {
+    toolMap: Map<string, ToolInstance>;
+    toolAccessProfile: ToolAccessProfileName;
+    permissions: GranularPermissions;
+}): {
+    toolMap: Map<string, ToolInstance>;
+    dropped: Array<{
+        tool: string;
+        reason: string;
+    }>;
+};
+//# sourceMappingURL=policy.d.ts.map

package/dist/runtime/tools/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/policy.ts"],"names":[],"mappings":"AACA;;;;;;;;;GASG;AAEH,OAAO,EAGL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAKL,KAAK,qBAAqB,EAC3B,MAAM,6CAA6C,CAAC;AACrD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,WAAW,GAAG,iBAAiB,CAAC;AAE3E;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,6CAA6C;IAC7C,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,6DAA6D;IAC7D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,2DAA2D;IAC3D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,yCAAyC;IACzC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,oDAAoD;IACpD,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC,YAAY,EAAE,gBAAgB,CAAC;IAC/B,aAAa,EAAE,iBAAiB,CAAC;IACjC,iBAAiB,EAAE,qBAAqB,CAAC;IACzC,aAAa,EAAE,aAAa,CAAC;IAC7B,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;IAC3C;;;OAGG;IACH,sBAAsB,CAAC,EAAE,sBAAsB,CAAC;IAChD;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;OAGG;IACH,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;CACrC,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAIpE;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,gBAAgB,GACrB,iBAAiB,CAKnB;AAED,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,gBAAgB,GACrB,aAAa,CAQf;AAED,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,qBAAqB,CAI9E;AAED,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAItF;AAED,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,sBAAsB,GAAG,SAAS,CAG3F;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAAC,GAAG,EAAE,OAAO,GAAG,sBAAsB,GAAG,SAAS,CAYhG;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,GAAG,GAAG,uBAAuB,CA2BhF;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,GAAG,mBAAmB,CAOjF;AA8CD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACnC,iBAAiB,EAAE,qBAAqB,CAAC;IACzC,WAAW,EAAE,mBAAmB,CAAC;CAClC,GAAG;IAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAuF3F"}

package/dist/runtime/tools/policy.js

@@ -0,0 +1,253 @@
+// @ts-nocheck
+/**
+ * @fileoverview Runtime policy helpers for Wunderland.
+ *
+ * Normalizes agent.config.json policy fields (tier/permissions/modes) and
+ * filters tool exposure accordingly.
+ *
+ * This is intentionally conservative: permission sets and tool access profiles
+ * are enforced even in autonomous mode. "Autonomous" only affects approvals,
+ * not what the agent is allowed to do.
+ */
+import { PERMISSION_SETS, SECURITY_TIERS, } from '../../security/SecurityTiers.js';
+import { getToolAccessProfile, getToolCategory, isValidToolAccessProfile, } from '../../autonomy/social/ToolAccessProfiles.js';
+export function normalizeSecurityTier(raw) {
+    const v = typeof raw === 'string' ? raw.trim().toLowerCase() : '';
+    if (v && (v in SECURITY_TIERS))
+        return v;
+    return 'balanced';
+}
+export function normalizePermissionSet(raw, tier) {
+    const v = typeof raw === 'string' ? raw.trim() : '';
+    if (v && (v in PERMISSION_SETS))
+        return v;
+    // Default to tier recommendation when not explicitly set.
+    return SECURITY_TIERS[tier]?.permissionSet ?? 'supervised';
+}
+export function normalizeExecutionMode(raw, tier) {
+    const v = typeof raw === 'string' ? raw.trim() : '';
+    if (v === 'autonomous' || v === 'human-all' || v === 'human-dangerous')
+        return v;
+    // Tier-derived default when not specified.
+    if (tier === 'dangerous' || tier === 'permissive')
+        return 'autonomous';
+    if (tier === 'paranoid')
+        return 'human-all';
+    return 'human-dangerous';
+}
+export function normalizeToolAccessProfile(raw) {
+    const v = typeof raw === 'string' ? raw.trim() : '';
+    if (v && isValidToolAccessProfile(v))
+        return v;
+    return 'assistant';
+}
+export function normalizeWrapToolOutputs(raw, tier) {
+    // Opt-out knob. Default ON except in `dangerous`.
+    if (typeof raw === 'boolean')
+        return raw;
+    return tier !== 'dangerous';
+}
+export function normalizeFolderPermissions(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        return undefined;
+    return raw;
+}
+/**
+ * Extracts guardrail pack overrides from `security.guardrailPacks` in agent config.
+ *
+ * @param raw - The `security.guardrailPacks` value from agent.config.json.
+ * @returns Normalized overrides, or `undefined` if none specified.
+ */
+export function normalizeGuardrailPackOverrides(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        return undefined;
+    const obj = raw;
+    const result = {};
+    let hasAny = false;
+    for (const [key, value] of Object.entries(obj)) {
+        if (typeof value === 'boolean') {
+            result[key] = value;
+            hasAny = true;
+        }
+    }
+    return hasAny ? result : undefined;
+}
+/**
+ * Normalizes the full runtime policy from agent config (merged with CLI overrides).
+ *
+ * This is the single source of truth for all runtime security decisions.
+ * CLI flags like `--security-tier`, `--no-guardrails`, and `--guardrails=...`
+ * should be merged into the `agentConfig` object before calling this function.
+ *
+ * @param agentConfig - Merged agent config object (config file + CLI overrides).
+ * @returns Fully normalized runtime policy.
+ */
+export function normalizeRuntimePolicy(agentConfig) {
+    const securityTier = normalizeSecurityTier(agentConfig?.securityTier ?? agentConfig?.security?.tier);
+    const permissionSet = normalizePermissionSet(agentConfig?.permissionSet ?? agentConfig?.security?.permissionSet, securityTier);
+    const toolAccessProfile = normalizeToolAccessProfile(agentConfig?.toolAccessProfile);
+    const executionMode = normalizeExecutionMode(agentConfig?.executionMode, securityTier);
+    const wrapToolOutputs = normalizeWrapToolOutputs(agentConfig?.security?.wrapToolOutputs, securityTier);
+    const folderPermissions = normalizeFolderPermissions(agentConfig?.security?.folderPermissions);
+    const guardrailPackOverrides = normalizeGuardrailPackOverrides(agentConfig?.security?.guardrailPacks);
+    // CLI-level guardrail flags (injected by chat.ts / start command before calling this).
+    const disableGuardrailPacks = agentConfig?.disableGuardrailPacks === true;
+    const enableOnlyGuardrailPacks = Array.isArray(agentConfig?.enableOnlyGuardrailPacks) && agentConfig.enableOnlyGuardrailPacks.length > 0
+        ? agentConfig.enableOnlyGuardrailPacks
+        : undefined;
+    return {
+        securityTier,
+        permissionSet,
+        toolAccessProfile,
+        executionMode,
+        wrapToolOutputs,
+        folderPermissions,
+        guardrailPackOverrides,
+        disableGuardrailPacks,
+        enableOnlyGuardrailPacks,
+    };
+}
+export function getPermissionsForSet(name) {
+    return {
+        filesystem: { ...PERMISSION_SETS[name].filesystem },
+        network: { ...PERMISSION_SETS[name].network },
+        system: { ...PERMISSION_SETS[name].system },
+        data: { ...PERMISSION_SETS[name].data },
+    };
+}
+function isFilesystemReadTool(toolName) {
+    return toolName === 'file_read' || toolName === 'list_directory' || toolName === 'file_search' || toolName === 'read_file' || toolName === 'file_info';
+}
+function isFilesystemWriteTool(toolName) {
+    return toolName === 'file_write' || toolName === 'file_append' || toolName === 'file_delete' || toolName === 'write_file' || toolName === 'create_spreadsheet' || toolName === 'create_document';
+}
+function isCliExecutionTool(toolName) {
+    return toolName === 'shell_execute' || toolName === 'run_command' || toolName === 'shell_exec';
+}
+function isNetworkTool(tool) {
+    const name = tool.name || '';
+    if (name === 'web_search' || name === 'news_search')
+        return true;
+    if (name.startsWith('browser_'))
+        return true;
+    if (Array.isArray(tool.requiredCapabilities)) {
+        return tool.requiredCapabilities.some((c) => typeof c === 'string' && c.startsWith('capability:web_'));
+    }
+    const cat = typeof tool.category === 'string' ? tool.category.trim().toLowerCase() : '';
+    if (cat === 'search' || cat === 'research')
+        return true;
+    return false;
+}
+function isExternalApiSideEffectTool(tool) {
+    // Conservative rule: if a tool is marked as having side effects and it isn't
+    // clearly a local-only operation (filesystem/system/memory), treat it as an
+    // external API side effect for permission-set gating.
+    if (tool.hasSideEffects !== true)
+        return false;
+    const cat = typeof tool.category === 'string' ? tool.category.trim().toLowerCase() : '';
+    if (!cat)
+        return true;
+    if (cat === 'filesystem' || cat === 'system' || cat === 'memory')
+        return false;
+    return true;
+}
+function isMemoryReadTool(toolName) {
+    return toolName === 'memory_read' || toolName === 'conversation_history';
+}
+function isMemoryWriteTool(toolName) {
+    return toolName === 'memory_write';
+}
+export function filterToolMapByPolicy(opts) {
+    const profile = getToolAccessProfile(opts.toolAccessProfile);
+    const out = new Map();
+    const dropped = [];
+    function mapToolCategory(tool) {
+        // Prefer explicit tool-name mapping when known.
+        const byId = getToolCategory(tool.name);
+        if (byId)
+            return byId;
+        // Fall back to extension-provided category strings (best-effort).
+        const c = typeof tool.category === 'string' ? tool.category.trim().toLowerCase() : '';
+        if (!c)
+            return undefined;
+        if (c === 'research')
+            return 'search';
+        if (c === 'search')
+            return 'search';
+        if (c === 'media')
+            return 'media';
+        if (c === 'productivity')
+            return 'productivity';
+        if (c === 'communication' || c === 'communications')
+            return 'communication';
+        if (c === 'social')
+            return 'social';
+        if (c === 'system')
+            return 'system';
+        if (c === 'filesystem')
+            return 'filesystem';
+        if (c === 'scheduling')
+            return 'scheduling';
+        return undefined;
+    }
+    function isAllowedByProfile(tool) {
+        // Always apply filesystem/system overrides by tool name.
+        if (isFilesystemReadTool(tool.name) || isFilesystemWriteTool(tool.name)) {
+            const cat = 'filesystem';
+            if (profile.blockedCategories.includes(cat))
+                return false;
+            return profile.allowedCategories.includes(cat);
+        }
+        if (isCliExecutionTool(tool.name)) {
+            const cat = 'system';
+            if (profile.blockedCategories.includes(cat))
+                return false;
+            return profile.allowedCategories.includes(cat);
+        }
+        const cat = mapToolCategory(tool);
+        if (!cat)
+            return profile.name === 'unrestricted';
+        if (profile.blockedCategories.includes(cat))
+            return false;
+        return profile.allowedCategories.includes(cat);
+    }
+    for (const [name, tool] of opts.toolMap.entries()) {
+        if (!tool?.name)
+            continue;
+        if (!isAllowedByProfile(tool)) {
+            dropped.push({ tool: tool.name, reason: `blocked_by_tool_access_profile:${profile.name}` });
+            continue;
+        }
+        if (isFilesystemReadTool(tool.name) && opts.permissions.filesystem.read !== true) {
+            dropped.push({ tool: tool.name, reason: 'blocked_by_permission_set:filesystem.read=false' });
+            continue;
+        }
+        if (isFilesystemWriteTool(tool.name) && opts.permissions.filesystem.write !== true) {
+            dropped.push({ tool: tool.name, reason: 'blocked_by_permission_set:filesystem.write=false' });
+            continue;
+        }
+        if (isCliExecutionTool(tool.name) && opts.permissions.system.cliExecution !== true) {
+            dropped.push({ tool: tool.name, reason: 'blocked_by_permission_set:system.cliExecution=false' });
+            continue;
+        }
+        if (isNetworkTool(tool) && opts.permissions.network.httpRequests !== true) {
+            dropped.push({ tool: tool.name, reason: 'blocked_by_permission_set:network.httpRequests=false' });
+            continue;
+        }
+        if (isMemoryReadTool(tool.name) && opts.permissions.data.memoryRead !== true) {
+            dropped.push({ tool: tool.name, reason: 'blocked_by_permission_set:data.memoryRead=false' });
+            continue;
+        }
+        if (isMemoryWriteTool(tool.name) && opts.permissions.data.memoryWrite !== true) {
+            dropped.push({ tool: tool.name, reason: 'blocked_by_permission_set:data.memoryWrite=false' });
+            continue;
+        }
+        if (isExternalApiSideEffectTool(tool) && opts.permissions.network.externalApis !== true) {
+            dropped.push({ tool: tool.name, reason: 'blocked_by_permission_set:network.externalApis=false' });
+            continue;
+        }
+        out.set(name, tool);
+    }
+    return { toolMap: out, dropped };
+}
+//# sourceMappingURL=policy.js.map

package/dist/runtime/tools/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/runtime/tools/policy.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;;GASG;AAEH,OAAO,EACL,eAAe,EACf,cAAc,GAIf,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,wBAAwB,GAGzB,MAAM,6CAA6C,CAAC;AAsDrD,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,MAAM,CAAC,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,cAAc,CAAC;QAAE,OAAO,CAAqB,CAAC;IAC7D,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,GAAY,EACZ,IAAsB;IAEtB,MAAM,CAAC,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,eAAe,CAAC;QAAE,OAAO,CAAsB,CAAC;IAC/D,0DAA0D;IAC1D,OAAO,cAAc,CAAC,IAAI,CAAC,EAAE,aAAa,IAAI,YAAY,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,GAAY,EACZ,IAAsB;IAEtB,MAAM,CAAC,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,iBAAiB;QAAE,OAAO,CAAC,CAAC;IAEjF,2CAA2C;IAC3C,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC;IACvE,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,WAAW,CAAC;IAC5C,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,GAAY;IACrD,MAAM,CAAC,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,IAAI,CAAC,IAAI,wBAAwB,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAC/C,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,GAAY,EAAE,IAAsB;IAC3E,kDAAkD;IAClD,IAAI,OAAO,GAAG,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IACzC,OAAO,IAAI,KAAK,WAAW,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,GAAY;IACrD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5E,OAAO,GAA6B,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAAC,GAAY;IAC1D,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5E,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAc,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC7B,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACrC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAgB;IACrD,MAAM,YAAY,GAAG,qBAAqB,CAAC,WAAW,EAAE,YAAY,IAAI,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrG,MAAM,aAAa,GAAG,sBAAsB,CAAC,WAAW,EAAE,aAAa,IAAI,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;IAC/H,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACrF,MAAM,aAAa,GAAG,sBAAsB,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;IACvF,MAAM,eAAe,GAAG,wBAAwB,CAAC,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;IACvG,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,WAAW,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAC/F,MAAM,sBAAsB,GAAG,+BAA+B,CAAC,WAAW,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IAEtG,uFAAuF;IACvF,MAAM,qBAAqB,GAAG,WAAW,EAAE,qBAAqB,KAAK,IAAI,CAAC;IAC1E,MAAM,wBAAwB,GAC5B,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,wBAAwB,CAAC,IAAI,WAAW,CAAC,wBAAwB,CAAC,MAAM,GAAG,CAAC;QACrG,CAAC,CAAC,WAAW,CAAC,wBAAwB;QACtC,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO;QACL,YAAY;QACZ,aAAa;QACb,iBAAiB;QACjB,aAAa;QACb,eAAe;QACf,iBAAiB;QACjB,sBAAsB;QACtB,qBAAqB;QACrB,wBAAwB;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAuB;IAC1D,OAAO;QACL,UAAU,EAAE,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;QACnD,OAAO,EAAE,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE;QAC7C,MAAM,EAAE,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;QAC3C,IAAI,EAAE,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,gBAAgB,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,CAAC;AACzJ,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC7C,OAAO,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,oBAAoB,IAAI,QAAQ,KAAK,iBAAiB,CAAC;AACnM,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,OAAO,QAAQ,KAAK,eAAe,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,YAAY,CAAC;AACjG,CAAC;AAED,SAAS,aAAa,CAAC,IAAkB;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IAC7B,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACzG,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAkB;IACrD,6EAA6E;IAC7E,4EAA4E;IAC5E,sDAAsD;IACtD,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAE/C,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,GAAG,KAAK,YAAY,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,OAAO,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,sBAAsB,CAAC;AAC3E,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,QAAQ,KAAK,cAAc,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAIrC;IACC,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC5C,MAAM,OAAO,GAA4C,EAAE,CAAC;IAE5D,SAAS,eAAe,CAAC,IAAkB;QACzC,gDAAgD;QAChD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QAEtB,kEAAkE;QAClE,MAAM,CAAC,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,IAAI,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QAEzB,IAAI,CAAC,KAAK,UAAU;YAAE,OAAO,QAAQ,CAAC;QACtC,IAAI,CAAC,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACpC,IAAI,CAAC,KAAK,OAAO;YAAE,OAAO,OAAO,CAAC;QAClC,IAAI,CAAC,KAAK,cAAc;YAAE,OAAO,cAAc,CAAC;QAChD,IAAI,CAAC,KAAK,eAAe,IAAI,CAAC,KAAK,gBAAgB;YAAE,OAAO,eAAe,CAAC;QAC5E,IAAI,CAAC,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACpC,IAAI,CAAC,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACpC,IAAI,CAAC,KAAK,YAAY;YAAE,OAAO,YAAY,CAAC;QAC5C,IAAI,CAAC,KAAK,YAAY;YAAE,OAAO,YAAY,CAAC;QAE5C,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,SAAS,kBAAkB,CAAC,IAAkB;QAC5C,yDAAyD;QACzD,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxE,MAAM,GAAG,GAAiB,YAAY,CAAC;YACvC,IAAI,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1D,OAAO,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,GAAG,GAAiB,QAAQ,CAAC;YACnC,IAAI,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1D,OAAO,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG;YAAE,OAAO,OAAO,CAAC,IAAI,KAAK,cAAc,CAAC;QACjD,IAAI,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1D,OAAO,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC,IAAI,EAAE,IAAI;YAAE,SAAS;QAE1B,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,kCAAkC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC5F,SAAS;QACX,CAAC;QAED,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACjF,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,iDAAiD,EAAE,CAAC,CAAC;YAC7F,SAAS;QACX,CAAC;QACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC,CAAC;YAC9F,SAAS;QACX,CAAC;QACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YACnF,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAC,CAAC;YACjG,SAAS;QACX,CAAC;QACD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1E,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,sDAAsD,EAAE,CAAC,CAAC;YAClG,SAAS;QACX,CAAC;QACD,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAC7E,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,iDAAiD,EAAE,CAAC,CAAC;YAC7F,SAAS;QACX,CAAC;QACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC/E,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC,CAAC;YAC9F,SAAS;QACX,CAAC;QACD,IAAI,2BAA2B,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YACxF,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,sDAAsD,EAAE,CAAC,CAAC;YAClG,SAAS;QACX,CAAC;QAED,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC"}

package/dist/runtime/tools/tool-calling.d.ts

@@ -0,0 +1,111 @@
+/**
+ * @fileoverview OpenAI-compatible tool-calling loop helpers used by Wunderland runtimes.
+ *
+ * Integrates {@link StepUpAuthorizationManager} for tiered tool authorization:
+ * - Tier 1 (Autonomous): Execute without approval — read-only, safe tools
+ * - Tier 2 (Async Review): Execute, then queue for human review
+ * - Tier 3 (Sync HITL): Require explicit human approval before execution
+ *
+ * When `dangerouslySkipPermissions` is true (e.g. via the CLI flag
+ * `--dangerously-skip-permissions`), uses {@link FULLY_AUTONOMOUS_STEP_UP_AUTH_CONFIG}
+ * which auto-approves ALL tool calls — skills, side effects, capabilities,
+ * destructive commands, build commands, and every other tool type.
+ *
+ * @module wunderland/runtime/tool-calling
+ */
+import { StepUpAuthorizationManager } from '../../security/StepUpAuthorizationManager.js';
+import { type StepUpAuthorizationConfig } from '../../types/core-types.js';
+export { getGuardrailsInstance, getSecurityPipeline, initializeSecurityPipeline, resetSecurityPipeline, safeJsonStringify, truncateString, buildToolDefs, openaiChatWithTools, type ToolInstance, type ToolCallMessage, type LLMProviderConfig, type SecurityPipelineInitOptions, } from './tool-helpers.js';
+import type { ToolInstance, LLMProviderConfig } from './tool-helpers.js';
+export declare function runToolCallingTurn(opts: {
+    providerId?: string;
+    apiKey: string | Promise<string>;
+    model: string;
+    messages: Array<Record<string, unknown>>;
+    toolMap: Map<string, ToolInstance>;
+    /**
+     * Optional static tool defs. Prefer omitting this and letting the loop
+     * derive tool defs from the mutable `toolMap` each round.
+     */
+    toolDefs?: Array<Record<string, unknown>>;
+    /** Optional callback to provide tool defs per round (schema-on-demand). */
+    getToolDefs?: () => Array<Record<string, unknown>>;
+    toolContext: Record<string, unknown>;
+    maxRounds: number;
+    dangerouslySkipPermissions: boolean;
+    /** Optional step-up auth config — when provided, overrides DEFAULT_STEP_UP_AUTH_CONFIG. */
+    stepUpAuthConfig?: StepUpAuthorizationConfig;
+    askPermission: (tool: ToolInstance, args: Record<string, unknown>) => Promise<boolean>;
+    /** Optional checkpoint hook (used for "human after each round" modes). */
+    askCheckpoint?: (info: {
+        round: number;
+        toolCalls: Array<{
+            toolName: string;
+            hasSideEffects: boolean;
+            args: Record<string, unknown>;
+        }>;
+    }) => Promise<boolean>;
+    onToolCall?: (tool: ToolInstance, args: Record<string, unknown>) => void;
+    /** Called after each tool execution with the result. Use for logging, learning, metrics. */
+    onToolResult?: (info: {
+        toolName: string;
+        args: Record<string, unknown>;
+        success: boolean;
+        error?: string;
+        output?: unknown;
+        durationMs: number;
+    }) => void;
+    /** Called when the LLM emits streamed text before the turn completes. */
+    onTextDelta?: (content: string) => void;
+    /**
+     * Called once per provider response with token usage and cost — same
+     * payload shape as `recordWunderlandTokenUsage`'s observability hook,
+     * surfaced to the caller so per-node accumulators (e.g. mission report
+     * cost telemetry) can be built without going through the global
+     * observability sink.
+     *
+     * Fired on every successful round of the ReAct loop — caller is
+     * responsible for accumulating across rounds.
+     */
+    onUsage?: (usage: {
+        prompt_tokens?: number;
+        completion_tokens?: number;
+        total_tokens?: number;
+        costUSD?: number;
+        model?: string;
+        providerId?: string;
+    }) => void;
+    /** Optional pre-configured authorization manager. Created automatically if not provided. */
+    authorizationManager?: StepUpAuthorizationManager;
+    /** Override the API base URL for the primary provider. */
+    baseUrl?: string;
+    /** Fallback provider config (e.g. OpenRouter). */
+    fallback?: LLMProviderConfig;
+    /** Called when a fallback is triggered. */
+    onFallback?: (primaryError: Error, fallbackProvider: string) => void;
+    /** Async key resolver for OAuth. When set, called instead of using the static apiKey. */
+    getApiKey?: () => string | Promise<string>;
+    /** Native Ollama request options such as num_ctx / num_gpu. */
+    ollamaOptions?: Record<string, unknown>;
+    /** Tool-call failure behavior. Default: fail_open. */
+    toolFailureMode?: 'fail_open' | 'fail_closed';
+    /** Enforce strict OpenAI-compatible function names and fail on rewrites/collisions. */
+    strictToolNames?: boolean;
+    /** Enable verbose tool-calling logs. Defaults to false; set to true or use DEBUG=1 for diagnostics. */
+    debug?: boolean;
+    /**
+     * Optional callback fired when a tool emits progress events during execution.
+     * Used by long-running tools like deep_research to report intermediate steps.
+     * The callback receives the tool name, a phase label, a human-readable message,
+     * and an optional 0-1 progress fraction.
+     */
+    onToolProgress?: (info: {
+        toolName: string;
+        phase: string;
+        message: string;
+        progress?: number;
+    }) => void;
+}): Promise<string>;
+export { streamToolCallingTurn, type StreamToolCallingTurnOpts, } from './ToolStreamProcessor.js';
+export { TOOL_FALLBACK_MAP } from './ToolApprovalHandler.js';
+//# sourceMappingURL=tool-calling.d.ts.map

package/dist/runtime/tools/tool-calling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-calling.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/tool-calling.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACL,0BAA0B,EAC3B,MAAM,8CAA8C,CAAC;AACtD,OAAO,EAEL,KAAK,yBAAyB,EAC/B,MAAM,2BAA2B,CAAC;AA4CnC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,0BAA0B,EAC1B,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,2BAA2B,GACjC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAkBzE,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACzC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACnC;;;OAGG;IACH,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1C,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,0BAA0B,EAAE,OAAO,CAAC;IACpC,2FAA2F;IAC3F,gBAAgB,CAAC,EAAE,yBAAyB,CAAC;IAC7C,aAAa,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvF,0EAA0E;IAC1E,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,KAAK,CAAC;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,cAAc,EAAE,OAAO,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC,CAAC;KAChG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvB,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACzE,4FAA4F;IAC5F,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,KAAK,IAAI,CAAC;IACX,yEAAyE;IACzE,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE;QAChB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,KAAK,IAAI,CAAC;IACX,4FAA4F;IAC5F,oBAAoB,CAAC,EAAE,0BAA0B,CAAC;IAClD,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,2CAA2C;IAC3C,UAAU,CAAC,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,KAAK,IAAI,CAAC;IACrE,yFAAyF;IACzF,SAAS,CAAC,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,sDAAsD;IACtD,eAAe,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC;IAC9C,uFAAuF;IACvF,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,uGAAuG;IACvG,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,KAAK,IAAI,CAAC;CACZ,GAAG,OAAO,CAAC,MAAM,CAAC,CAgvBlB;AAMD,OAAO,EACL,qBAAqB,EACrB,KAAK,yBAAyB,GAC/B,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC"}