import { createRegistry } from '../../registry.js';
import { auditLogTool } from './audit_log.js';
import { agentInventoryTool } from './agent_inventory.js';
import { pendingReviewTool } from './pending_review.js';
import { resourceExposureTool } from './resource_exposure.js';
import { tokenAuditTool } from './token_audit.js';

// Yerin's security toolset — read-only observability, kept in its own registry
// so the security agent gets security tools (not Dross's propose_change). A
// future MCP server can expose this registry the same way companion-stdio.js
// exposes companionRegistry. Roadmap for further tools: see docs/yerin-security-agent.md
export const securityRegistry = createRegistry();
securityRegistry.registerTool(auditLogTool);
securityRegistry.registerTool(agentInventoryTool);
securityRegistry.registerTool(pendingReviewTool);
securityRegistry.registerTool(resourceExposureTool);
securityRegistry.registerTool(tokenAuditTool);