@agent-native/core 0.49.27 → 0.50.0

package/dist/workspace-files/tool.js

@@ -1,10 +1,9 @@
 /**
- * `workspace-files` agent tool.
+ * `workspace-files` bridge tool.
  *
  * A single tool with an `action` discriminator covering write, append, read,
- * list, delete, and grep. Files persist across conversations; the agent uses
- * them to stage large intermediate results (fetched pages, per-item memos)
- * and then read back selectively for synthesis.
+ * list, delete, and grep. It is kept for `run-code` workspaceRead/workspaceWrite
+ * compatibility and delegates storage to the Resources table.
  *
  * Scope is automatically resolved from the active request context:
  *  - org scope when a request orgId is present (shared across users in the org)
@@ -27,10 +26,12 @@ function resolveScope() {
 export function createWorkspaceFilesTool() {
     return {
         "workspace-files": {
+            agentTool: false,
             readOnly: false,
             tool: {
                 description: [
-                    "Durable scratch-file storage for the agent. Files persist across conversations and are scoped to the current org/user.",
+                    "Bridge-only workspace file storage backed by Resources. Files are scoped to the current org/user and appear in the Resources workspace.",
+                    "Use scratch/... for temporary intermediate results; scratch files are hidden from the Resources view by default and expire. Use durable folder names for files the user explicitly wants to keep/manage.",
                     "Use this to stage large intermediate results (fetched pages, per-item analysis memos, API payloads) so they don't consume context window, then read them back selectively for synthesis.",
                     "",
                     "Typical fusion-style workflow:",
@@ -40,7 +41,7 @@ export function createWorkspaceFilesTool() {
                     "  4. `delete` temp files when no longer needed.",
                     "",
                     "Actions:",
-                    "  write   — create or overwrite a file. Max 2 MB per file, 200 MB total.",
+                    "  write   — create or overwrite a file. Max 2 MB per file.",
                     "  append  — append text to a file (or create if absent).",
                     "  read    — read content, optionally with offset/maxChars for paging large files.",
                     "  list    — list files (with optional path prefix filter) showing name, size, updated.",
@@ -57,7 +58,7 @@ export function createWorkspaceFilesTool() {
                         },
                         path: {
                             type: "string",
-                            description: 'File path relative to the scope root, e.g. "analysis/q2-memos/acme.md". Required for write/append/read/delete. Optional for list/grep (acts as prefix filter).',
+                            description: 'File path relative to the scope root, e.g. "scratch/analysis/q2-memos/acme.md". Required for write/append/read/delete. Optional for list/grep (acts as prefix filter).',
                         },
                         content: {
                             type: "string",

package/dist/workspace-files/tool.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool.js","sourceRoot":"","sources":["../../src/workspace-files/tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EACL,eAAe,EACf,mBAAmB,GACpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,GAEnB,MAAM,YAAY,CAAC;AAEpB,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,sEAAsE;AACtE,SAAS,YAAY;IACnB,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,IAAI,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,IAAI,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACpD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO;QACL,iBAAiB,EAAE;YACjB,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE;gBACJ,WAAW,EAAE;oBACX,wHAAwH;oBACxH,0LAA0L;oBAC1L,EAAE;oBACF,gCAAgC;oBAChC,2EAA2E;oBAC3E,iGAAiG;oBACjG,2DAA2D;oBAC3D,iDAAiD;oBACjD,EAAE;oBACF,UAAU;oBACV,0EAA0E;oBAC1E,0DAA0D;oBAC1D,mFAAmF;oBACnF,wFAAwF;oBACxF,oCAAoC;oBACpC,mEAAmE;iBACpE,CAAC,IAAI,CAAC,IAAI,CAAC;gBACZ,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;4BAC3D,WAAW,EAAE,uBAAuB;yBACrC;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,gKAAgK;yBACnK;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,6DAA6D;yBAChE;wBACD,WAAW,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,gHAAgH;yBACnH;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,8EAA8E;yBACjF;wBACD,QAAQ,EAAE;4BACR,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,uDAAuD,kBAAkB,UAAU,cAAc,GAAG;yBAClH;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,oHAAoH;yBACvH;wBACD,QAAQ,EAAE;4BACR,IAAI,EAAE,SAAS;4BACf,WAAW,EACT,sFAAsF;yBACzF;qBACF;oBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;iBACrB;aACF;YAED,GAAG,EAAE,KAAK,EAAE,IAA6B,EAAmB,EAAE;gBAC5D,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO,mEAAmE,CAAC;gBAC7E,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAEhD,IAAI,CAAC;oBACH,QAAQ,MAAM,EAAE,CAAC;wBACf,KAAK,OAAO,CAAC,CAAC,CAAC;4BACb,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAC5C,IAAI,CAAC,IAAI;gCAAE,OAAO,oCAAoC,CAAC;4BACvD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;4BAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC,CAAC;4BAC7D,MAAM,IAAI,GAAG,MAAM,kBAAkB,CACnC,KAAK,EACL,IAAI,EACJ,OAAO,EACP,WAAW,CACZ,CAAC;4BACF,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,MAAM,EAAE,OAAO;gCACf,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,SAAS,EAAE,IAAI,CAAC,SAAS;6BAC1B,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,QAAQ,CAAC,CAAC,CAAC;4BACd,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAC5C,IAAI,CAAC,IAAI;gCAAE,OAAO,qCAAqC,CAAC;4BACxD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;4BAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC,CAAC;4BAC7D,MAAM,IAAI,GAAG,MAAM,mBAAmB,CACpC,KAAK,EACL,IAAI,EACJ,OAAO,EACP,WAAW,CACZ,CAAC;4BACF,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,MAAM,EAAE,QAAQ;gCAChB,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,SAAS,EAAE,IAAI,CAAC,SAAS;6BAC1B,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,MAAM,CAAC,CAAC,CAAC;4BACZ,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAC5C,IAAI,CAAC,IAAI;gCAAE,OAAO,mCAAmC,CAAC;4BACtD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;4BACtC,MAAM,MAAM,GACV,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;4BAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;4BACrC,MAAM,QAAQ,GACZ,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;gCACnC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC;gCAClC,CAAC,CAAC,kBAAkB,CAAC;4BAEzB,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE;gCAChD,MAAM;gCACN,QAAQ;6BACT,CAAC,CAAC;4BACH,IAAI,CAAC,IAAI,EAAE,CAAC;gCACV,OAAO,IAAI,CAAC,SAAS,CAAC;oCACpB,EAAE,EAAE,KAAK;oCACT,KAAK,EAAE,oBAAoB,IAAI,GAAG;iCACnC,CAAC,CAAC;4BACL,CAAC;4BAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC;4BAClD,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,WAAW,EAAE,IAAI,CAAC,WAAW;gCAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,OAAO,EAAE,IAAI,CAAC,OAAO;gCACrB,GAAG,CAAC,SAAS;oCACX,CAAC,CAAC;wCACE,SAAS,EAAE,IAAI;wCACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM;wCACxC,IAAI,EAAE,kDAAkD,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;qCACvF;oCACH,CAAC,CAAC,EAAE,CAAC;6BACR,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,MAAM,CAAC,CAAC,CAAC;4BACZ,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;4BAChE,MAAM,KAAK,GAAG,MAAM,kBAAkB,CACpC,KAAK,EACL,MAAM,IAAI,SAAS,CACpB,CAAC;4BACF,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,KAAK,EAAE,KAAK,CAAC,MAAM;gCACnB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oCACvB,IAAI,EAAE,CAAC,CAAC,IAAI;oCACZ,SAAS,EAAE,CAAC,CAAC,SAAS;oCACtB,WAAW,EAAE,CAAC,CAAC,WAAW;oCAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;iCACvB,CAAC,CAAC;6BACJ,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,QAAQ,CAAC,CAAC,CAAC;4BACd,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAC5C,IAAI,CAAC,IAAI;gCAAE,OAAO,qCAAqC,CAAC;4BACxD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;4BACvD,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,OAAO;gCACP,IAAI;6BACL,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,MAAM,CAAC,CAAC,CAAC;4BACZ,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAClD,IAAI,CAAC,OAAO;gCAAE,OAAO,sCAAsC,CAAC;4BAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;4BAChE,MAAM,QAAQ,GACZ,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC;4BAC7D,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE;gCACvD,UAAU,EAAE,MAAM,IAAI,SAAS;gCAC/B,QAAQ;gCACR,iBAAiB,EAAE,EAAE;gCACrB,QAAQ,EAAE,EAAE;6BACb,CAAC,CAAC;4BACH,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,OAAO;gCACP,UAAU,EAAE,OAAO,CAAC,MAAM;gCAC1B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oCAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;oCACZ,IAAI,EAAE,CAAC,CAAC,UAAU;oCAClB,IAAI,EAAE,CAAC,CAAC,IAAI;iCACb,CAAC,CAAC;6BACJ,CAAC,CAAC;wBACL,CAAC;wBAED;4BACE,OAAO,0BAA0B,MAAM,4DAA4D,CAAC;oBACxG,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC","sourcesContent":["/**\n * `workspace-files` agent tool.\n *\n * A single tool with an `action` discriminator covering write, append, read,\n * list, delete, and grep. Files persist across conversations; the agent uses\n * them to stage large intermediate results (fetched pages, per-item memos)\n * and then read back selectively for synthesis.\n *\n * Scope is automatically resolved from the active request context:\n *  - org scope when a request orgId is present (shared across users in the org)\n *  - user scope otherwise (personal to the requesting user's email)\n */\n\nimport type { ActionEntry } from \"../agent/production-agent.js\";\nimport {\n  getRequestOrgId,\n  getRequestUserEmail,\n} from \"../server/request-context.js\";\nimport {\n  writeWorkspaceFile,\n  appendWorkspaceFile,\n  readWorkspaceFile,\n  listWorkspaceFiles,\n  deleteWorkspaceFile,\n  grepWorkspaceFiles,\n  type WorkspaceFilesScope,\n} from \"./store.js\";\n\nconst MAX_READ_CHARS = 100_000;\nconst DEFAULT_READ_CHARS = 40_000;\n\n/** Resolve scope from the current request context (org-preferred). */\nfunction resolveScope(): WorkspaceFilesScope | null {\n  const orgId = getRequestOrgId();\n  if (orgId) return { scope: \"org\", scopeId: orgId };\n  const email = getRequestUserEmail();\n  if (email) return { scope: \"user\", scopeId: email };\n  return null;\n}\n\nexport function createWorkspaceFilesTool(): Record<string, ActionEntry> {\n  return {\n    \"workspace-files\": {\n      readOnly: false,\n      tool: {\n        description: [\n          \"Durable scratch-file storage for the agent. Files persist across conversations and are scoped to the current org/user.\",\n          \"Use this to stage large intermediate results (fetched pages, per-item analysis memos, API payloads) so they don't consume context window, then read them back selectively for synthesis.\",\n          \"\",\n          \"Typical fusion-style workflow:\",\n          \"  1. Fan out: for each item, fetch data and `write` a per-item memo file.\",\n          \"  2. Synthesize: `list` files, then `read` each memo (with offset/maxChars to page large ones).\",\n          \"  3. Optionally `grep` across all memos to find patterns.\",\n          \"  4. `delete` temp files when no longer needed.\",\n          \"\",\n          \"Actions:\",\n          \"  write   — create or overwrite a file. Max 2 MB per file, 200 MB total.\",\n          \"  append  — append text to a file (or create if absent).\",\n          \"  read    — read content, optionally with offset/maxChars for paging large files.\",\n          \"  list    — list files (with optional path prefix filter) showing name, size, updated.\",\n          \"  delete  — delete a file by path.\",\n          \"  grep    — search content across files for a substring or regex.\",\n        ].join(\"\\n\"),\n        parameters: {\n          type: \"object\",\n          properties: {\n            action: {\n              type: \"string\",\n              enum: [\"write\", \"append\", \"read\", \"list\", \"delete\", \"grep\"],\n              description: \"Operation to perform.\",\n            },\n            path: {\n              type: \"string\",\n              description:\n                'File path relative to the scope root, e.g. \"analysis/q2-memos/acme.md\". Required for write/append/read/delete. Optional for list/grep (acts as prefix filter).',\n            },\n            content: {\n              type: \"string\",\n              description:\n                \"Text content to write or append. Required for write/append.\",\n            },\n            contentType: {\n              type: \"string\",\n              description:\n                'MIME type for new files. Default: \"text/plain\". Use \"application/json\" for JSON, \"text/markdown\" for Markdown.',\n            },\n            offset: {\n              type: \"number\",\n              description:\n                \"Character offset to start reading from (for paging large files). Default: 0.\",\n            },\n            maxChars: {\n              type: \"number\",\n              description: `Maximum characters to return when reading. Default: ${DEFAULT_READ_CHARS}. Max: ${MAX_READ_CHARS}.`,\n            },\n            pattern: {\n              type: \"string\",\n              description:\n                \"Search pattern for grep. Required for grep action. A plain substring by default; set useRegex to true for a regex.\",\n            },\n            useRegex: {\n              type: \"boolean\",\n              description:\n                \"When true, treat `pattern` as a JavaScript regex (case-insensitive). Default: false.\",\n            },\n          },\n          required: [\"action\"],\n        },\n      },\n\n      run: async (args: Record<string, unknown>): Promise<string> => {\n        const scope = resolveScope();\n        if (!scope) {\n          return \"Error: workspace-files requires an authenticated request context.\";\n        }\n\n        const action = String(args.action ?? \"\").trim();\n\n        try {\n          switch (action) {\n            case \"write\": {\n              const path = String(args.path ?? \"\").trim();\n              if (!path) return \"Error: path is required for write.\";\n              const content = String(args.content ?? \"\");\n              const contentType = String(args.contentType ?? \"text/plain\");\n              const meta = await writeWorkspaceFile(\n                scope,\n                path,\n                content,\n                contentType,\n              );\n              return JSON.stringify({\n                ok: true,\n                action: \"write\",\n                path: meta.path,\n                sizeBytes: meta.sizeBytes,\n                updatedAt: meta.updatedAt,\n              });\n            }\n\n            case \"append\": {\n              const path = String(args.path ?? \"\").trim();\n              if (!path) return \"Error: path is required for append.\";\n              const content = String(args.content ?? \"\");\n              const contentType = String(args.contentType ?? \"text/plain\");\n              const meta = await appendWorkspaceFile(\n                scope,\n                path,\n                content,\n                contentType,\n              );\n              return JSON.stringify({\n                ok: true,\n                action: \"append\",\n                path: meta.path,\n                sizeBytes: meta.sizeBytes,\n                updatedAt: meta.updatedAt,\n              });\n            }\n\n            case \"read\": {\n              const path = String(args.path ?? \"\").trim();\n              if (!path) return \"Error: path is required for read.\";\n              const rawOffset = Number(args.offset);\n              const offset =\n                Number.isFinite(rawOffset) && rawOffset > 0 ? rawOffset : 0;\n              const rawMax = Number(args.maxChars);\n              const maxChars =\n                Number.isFinite(rawMax) && rawMax > 0\n                  ? Math.min(rawMax, MAX_READ_CHARS)\n                  : DEFAULT_READ_CHARS;\n\n              const file = await readWorkspaceFile(scope, path, {\n                offset,\n                maxChars,\n              });\n              if (!file) {\n                return JSON.stringify({\n                  ok: false,\n                  error: `File not found: \"${path}\"`,\n                });\n              }\n\n              const truncated = file.content.length >= maxChars;\n              return JSON.stringify({\n                ok: true,\n                path: file.path,\n                contentType: file.contentType,\n                sizeBytes: file.sizeBytes,\n                updatedAt: file.updatedAt,\n                content: file.content,\n                ...(truncated\n                  ? {\n                      truncated: true,\n                      nextOffset: offset + file.content.length,\n                      hint: `File has more content. Call again with offset: ${offset + file.content.length}`,\n                    }\n                  : {}),\n              });\n            }\n\n            case \"list\": {\n              const prefix = args.path ? String(args.path).trim() : undefined;\n              const files = await listWorkspaceFiles(\n                scope,\n                prefix || undefined,\n              );\n              return JSON.stringify({\n                ok: true,\n                count: files.length,\n                files: files.map((f) => ({\n                  path: f.path,\n                  sizeBytes: f.sizeBytes,\n                  contentType: f.contentType,\n                  updatedAt: f.updatedAt,\n                })),\n              });\n            }\n\n            case \"delete\": {\n              const path = String(args.path ?? \"\").trim();\n              if (!path) return \"Error: path is required for delete.\";\n              const deleted = await deleteWorkspaceFile(scope, path);\n              return JSON.stringify({\n                ok: true,\n                deleted,\n                path,\n              });\n            }\n\n            case \"grep\": {\n              const pattern = String(args.pattern ?? \"\").trim();\n              if (!pattern) return \"Error: pattern is required for grep.\";\n              const prefix = args.path ? String(args.path).trim() : undefined;\n              const useRegex =\n                args.useRegex === true || String(args.useRegex) === \"true\";\n              const matches = await grepWorkspaceFiles(scope, pattern, {\n                pathPrefix: prefix || undefined,\n                useRegex,\n                maxMatchesPerFile: 20,\n                maxFiles: 50,\n              });\n              return JSON.stringify({\n                ok: true,\n                pattern,\n                matchCount: matches.length,\n                matches: matches.map((m) => ({\n                  path: m.path,\n                  line: m.lineNumber,\n                  text: m.line,\n                })),\n              });\n            }\n\n            default:\n              return `Error: unknown action \"${action}\". Valid actions: write, append, read, list, delete, grep.`;\n          }\n        } catch (err) {\n          const msg = err instanceof Error ? err.message : String(err);\n          return JSON.stringify({ ok: false, error: msg });\n        }\n      },\n    },\n  };\n}\n"]}
+{"version":3,"file":"tool.js","sourceRoot":"","sources":["../../src/workspace-files/tool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EACL,eAAe,EACf,mBAAmB,GACpB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,GAEnB,MAAM,YAAY,CAAC;AAEpB,MAAM,cAAc,GAAG,OAAO,CAAC;AAC/B,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,sEAAsE;AACtE,SAAS,YAAY;IACnB,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,IAAI,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,IAAI,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACpD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO;QACL,iBAAiB,EAAE;YACjB,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE;gBACJ,WAAW,EAAE;oBACX,yIAAyI;oBACzI,0MAA0M;oBAC1M,0LAA0L;oBAC1L,EAAE;oBACF,gCAAgC;oBAChC,2EAA2E;oBAC3E,iGAAiG;oBACjG,2DAA2D;oBAC3D,iDAAiD;oBACjD,EAAE;oBACF,UAAU;oBACV,4DAA4D;oBAC5D,0DAA0D;oBAC1D,mFAAmF;oBACnF,wFAAwF;oBACxF,oCAAoC;oBACpC,mEAAmE;iBACpE,CAAC,IAAI,CAAC,IAAI,CAAC;gBACZ,UAAU,EAAE;oBACV,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,IAAI,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;4BAC3D,WAAW,EAAE,uBAAuB;yBACrC;wBACD,IAAI,EAAE;4BACJ,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,wKAAwK;yBAC3K;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,6DAA6D;yBAChE;wBACD,WAAW,EAAE;4BACX,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,gHAAgH;yBACnH;wBACD,MAAM,EAAE;4BACN,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,8EAA8E;yBACjF;wBACD,QAAQ,EAAE;4BACR,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,uDAAuD,kBAAkB,UAAU,cAAc,GAAG;yBAClH;wBACD,OAAO,EAAE;4BACP,IAAI,EAAE,QAAQ;4BACd,WAAW,EACT,oHAAoH;yBACvH;wBACD,QAAQ,EAAE;4BACR,IAAI,EAAE,SAAS;4BACf,WAAW,EACT,sFAAsF;yBACzF;qBACF;oBACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;iBACrB;aACF;YAED,GAAG,EAAE,KAAK,EAAE,IAA6B,EAAmB,EAAE;gBAC5D,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO,mEAAmE,CAAC;gBAC7E,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAEhD,IAAI,CAAC;oBACH,QAAQ,MAAM,EAAE,CAAC;wBACf,KAAK,OAAO,CAAC,CAAC,CAAC;4BACb,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAC5C,IAAI,CAAC,IAAI;gCAAE,OAAO,oCAAoC,CAAC;4BACvD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;4BAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC,CAAC;4BAC7D,MAAM,IAAI,GAAG,MAAM,kBAAkB,CACnC,KAAK,EACL,IAAI,EACJ,OAAO,EACP,WAAW,CACZ,CAAC;4BACF,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,MAAM,EAAE,OAAO;gCACf,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,SAAS,EAAE,IAAI,CAAC,SAAS;6BAC1B,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,QAAQ,CAAC,CAAC,CAAC;4BACd,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAC5C,IAAI,CAAC,IAAI;gCAAE,OAAO,qCAAqC,CAAC;4BACxD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;4BAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,YAAY,CAAC,CAAC;4BAC7D,MAAM,IAAI,GAAG,MAAM,mBAAmB,CACpC,KAAK,EACL,IAAI,EACJ,OAAO,EACP,WAAW,CACZ,CAAC;4BACF,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,MAAM,EAAE,QAAQ;gCAChB,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,SAAS,EAAE,IAAI,CAAC,SAAS;6BAC1B,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,MAAM,CAAC,CAAC,CAAC;4BACZ,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAC5C,IAAI,CAAC,IAAI;gCAAE,OAAO,mCAAmC,CAAC;4BACtD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;4BACtC,MAAM,MAAM,GACV,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;4BAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;4BACrC,MAAM,QAAQ,GACZ,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;gCACnC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC;gCAClC,CAAC,CAAC,kBAAkB,CAAC;4BAEzB,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE;gCAChD,MAAM;gCACN,QAAQ;6BACT,CAAC,CAAC;4BACH,IAAI,CAAC,IAAI,EAAE,CAAC;gCACV,OAAO,IAAI,CAAC,SAAS,CAAC;oCACpB,EAAE,EAAE,KAAK;oCACT,KAAK,EAAE,oBAAoB,IAAI,GAAG;iCACnC,CAAC,CAAC;4BACL,CAAC;4BAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC;4BAClD,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,WAAW,EAAE,IAAI,CAAC,WAAW;gCAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gCACzB,OAAO,EAAE,IAAI,CAAC,OAAO;gCACrB,GAAG,CAAC,SAAS;oCACX,CAAC,CAAC;wCACE,SAAS,EAAE,IAAI;wCACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM;wCACxC,IAAI,EAAE,kDAAkD,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;qCACvF;oCACH,CAAC,CAAC,EAAE,CAAC;6BACR,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,MAAM,CAAC,CAAC,CAAC;4BACZ,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;4BAChE,MAAM,KAAK,GAAG,MAAM,kBAAkB,CACpC,KAAK,EACL,MAAM,IAAI,SAAS,CACpB,CAAC;4BACF,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,KAAK,EAAE,KAAK,CAAC,MAAM;gCACnB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oCACvB,IAAI,EAAE,CAAC,CAAC,IAAI;oCACZ,SAAS,EAAE,CAAC,CAAC,SAAS;oCACtB,WAAW,EAAE,CAAC,CAAC,WAAW;oCAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;iCACvB,CAAC,CAAC;6BACJ,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,QAAQ,CAAC,CAAC,CAAC;4BACd,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAC5C,IAAI,CAAC,IAAI;gCAAE,OAAO,qCAAqC,CAAC;4BACxD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;4BACvD,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,OAAO;gCACP,IAAI;6BACL,CAAC,CAAC;wBACL,CAAC;wBAED,KAAK,MAAM,CAAC,CAAC,CAAC;4BACZ,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;4BAClD,IAAI,CAAC,OAAO;gCAAE,OAAO,sCAAsC,CAAC;4BAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;4BAChE,MAAM,QAAQ,GACZ,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC;4BAC7D,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE;gCACvD,UAAU,EAAE,MAAM,IAAI,SAAS;gCAC/B,QAAQ;gCACR,iBAAiB,EAAE,EAAE;gCACrB,QAAQ,EAAE,EAAE;6BACb,CAAC,CAAC;4BACH,OAAO,IAAI,CAAC,SAAS,CAAC;gCACpB,EAAE,EAAE,IAAI;gCACR,OAAO;gCACP,UAAU,EAAE,OAAO,CAAC,MAAM;gCAC1B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oCAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;oCACZ,IAAI,EAAE,CAAC,CAAC,UAAU;oCAClB,IAAI,EAAE,CAAC,CAAC,IAAI;iCACb,CAAC,CAAC;6BACJ,CAAC,CAAC;wBACL,CAAC;wBAED;4BACE,OAAO,0BAA0B,MAAM,4DAA4D,CAAC;oBACxG,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBACnD,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC","sourcesContent":["/**\n * `workspace-files` bridge tool.\n *\n * A single tool with an `action` discriminator covering write, append, read,\n * list, delete, and grep. It is kept for `run-code` workspaceRead/workspaceWrite\n * compatibility and delegates storage to the Resources table.\n *\n * Scope is automatically resolved from the active request context:\n *  - org scope when a request orgId is present (shared across users in the org)\n *  - user scope otherwise (personal to the requesting user's email)\n */\n\nimport type { ActionEntry } from \"../agent/production-agent.js\";\nimport {\n  getRequestOrgId,\n  getRequestUserEmail,\n} from \"../server/request-context.js\";\nimport {\n  writeWorkspaceFile,\n  appendWorkspaceFile,\n  readWorkspaceFile,\n  listWorkspaceFiles,\n  deleteWorkspaceFile,\n  grepWorkspaceFiles,\n  type WorkspaceFilesScope,\n} from \"./store.js\";\n\nconst MAX_READ_CHARS = 100_000;\nconst DEFAULT_READ_CHARS = 40_000;\n\n/** Resolve scope from the current request context (org-preferred). */\nfunction resolveScope(): WorkspaceFilesScope | null {\n  const orgId = getRequestOrgId();\n  if (orgId) return { scope: \"org\", scopeId: orgId };\n  const email = getRequestUserEmail();\n  if (email) return { scope: \"user\", scopeId: email };\n  return null;\n}\n\nexport function createWorkspaceFilesTool(): Record<string, ActionEntry> {\n  return {\n    \"workspace-files\": {\n      agentTool: false,\n      readOnly: false,\n      tool: {\n        description: [\n          \"Bridge-only workspace file storage backed by Resources. Files are scoped to the current org/user and appear in the Resources workspace.\",\n          \"Use scratch/... for temporary intermediate results; scratch files are hidden from the Resources view by default and expire. Use durable folder names for files the user explicitly wants to keep/manage.\",\n          \"Use this to stage large intermediate results (fetched pages, per-item analysis memos, API payloads) so they don't consume context window, then read them back selectively for synthesis.\",\n          \"\",\n          \"Typical fusion-style workflow:\",\n          \"  1. Fan out: for each item, fetch data and `write` a per-item memo file.\",\n          \"  2. Synthesize: `list` files, then `read` each memo (with offset/maxChars to page large ones).\",\n          \"  3. Optionally `grep` across all memos to find patterns.\",\n          \"  4. `delete` temp files when no longer needed.\",\n          \"\",\n          \"Actions:\",\n          \"  write   — create or overwrite a file. Max 2 MB per file.\",\n          \"  append  — append text to a file (or create if absent).\",\n          \"  read    — read content, optionally with offset/maxChars for paging large files.\",\n          \"  list    — list files (with optional path prefix filter) showing name, size, updated.\",\n          \"  delete  — delete a file by path.\",\n          \"  grep    — search content across files for a substring or regex.\",\n        ].join(\"\\n\"),\n        parameters: {\n          type: \"object\",\n          properties: {\n            action: {\n              type: \"string\",\n              enum: [\"write\", \"append\", \"read\", \"list\", \"delete\", \"grep\"],\n              description: \"Operation to perform.\",\n            },\n            path: {\n              type: \"string\",\n              description:\n                'File path relative to the scope root, e.g. \"scratch/analysis/q2-memos/acme.md\". Required for write/append/read/delete. Optional for list/grep (acts as prefix filter).',\n            },\n            content: {\n              type: \"string\",\n              description:\n                \"Text content to write or append. Required for write/append.\",\n            },\n            contentType: {\n              type: \"string\",\n              description:\n                'MIME type for new files. Default: \"text/plain\". Use \"application/json\" for JSON, \"text/markdown\" for Markdown.',\n            },\n            offset: {\n              type: \"number\",\n              description:\n                \"Character offset to start reading from (for paging large files). Default: 0.\",\n            },\n            maxChars: {\n              type: \"number\",\n              description: `Maximum characters to return when reading. Default: ${DEFAULT_READ_CHARS}. Max: ${MAX_READ_CHARS}.`,\n            },\n            pattern: {\n              type: \"string\",\n              description:\n                \"Search pattern for grep. Required for grep action. A plain substring by default; set useRegex to true for a regex.\",\n            },\n            useRegex: {\n              type: \"boolean\",\n              description:\n                \"When true, treat `pattern` as a JavaScript regex (case-insensitive). Default: false.\",\n            },\n          },\n          required: [\"action\"],\n        },\n      },\n\n      run: async (args: Record<string, unknown>): Promise<string> => {\n        const scope = resolveScope();\n        if (!scope) {\n          return \"Error: workspace-files requires an authenticated request context.\";\n        }\n\n        const action = String(args.action ?? \"\").trim();\n\n        try {\n          switch (action) {\n            case \"write\": {\n              const path = String(args.path ?? \"\").trim();\n              if (!path) return \"Error: path is required for write.\";\n              const content = String(args.content ?? \"\");\n              const contentType = String(args.contentType ?? \"text/plain\");\n              const meta = await writeWorkspaceFile(\n                scope,\n                path,\n                content,\n                contentType,\n              );\n              return JSON.stringify({\n                ok: true,\n                action: \"write\",\n                path: meta.path,\n                sizeBytes: meta.sizeBytes,\n                updatedAt: meta.updatedAt,\n              });\n            }\n\n            case \"append\": {\n              const path = String(args.path ?? \"\").trim();\n              if (!path) return \"Error: path is required for append.\";\n              const content = String(args.content ?? \"\");\n              const contentType = String(args.contentType ?? \"text/plain\");\n              const meta = await appendWorkspaceFile(\n                scope,\n                path,\n                content,\n                contentType,\n              );\n              return JSON.stringify({\n                ok: true,\n                action: \"append\",\n                path: meta.path,\n                sizeBytes: meta.sizeBytes,\n                updatedAt: meta.updatedAt,\n              });\n            }\n\n            case \"read\": {\n              const path = String(args.path ?? \"\").trim();\n              if (!path) return \"Error: path is required for read.\";\n              const rawOffset = Number(args.offset);\n              const offset =\n                Number.isFinite(rawOffset) && rawOffset > 0 ? rawOffset : 0;\n              const rawMax = Number(args.maxChars);\n              const maxChars =\n                Number.isFinite(rawMax) && rawMax > 0\n                  ? Math.min(rawMax, MAX_READ_CHARS)\n                  : DEFAULT_READ_CHARS;\n\n              const file = await readWorkspaceFile(scope, path, {\n                offset,\n                maxChars,\n              });\n              if (!file) {\n                return JSON.stringify({\n                  ok: false,\n                  error: `File not found: \"${path}\"`,\n                });\n              }\n\n              const truncated = file.content.length >= maxChars;\n              return JSON.stringify({\n                ok: true,\n                path: file.path,\n                contentType: file.contentType,\n                sizeBytes: file.sizeBytes,\n                updatedAt: file.updatedAt,\n                content: file.content,\n                ...(truncated\n                  ? {\n                      truncated: true,\n                      nextOffset: offset + file.content.length,\n                      hint: `File has more content. Call again with offset: ${offset + file.content.length}`,\n                    }\n                  : {}),\n              });\n            }\n\n            case \"list\": {\n              const prefix = args.path ? String(args.path).trim() : undefined;\n              const files = await listWorkspaceFiles(\n                scope,\n                prefix || undefined,\n              );\n              return JSON.stringify({\n                ok: true,\n                count: files.length,\n                files: files.map((f) => ({\n                  path: f.path,\n                  sizeBytes: f.sizeBytes,\n                  contentType: f.contentType,\n                  updatedAt: f.updatedAt,\n                })),\n              });\n            }\n\n            case \"delete\": {\n              const path = String(args.path ?? \"\").trim();\n              if (!path) return \"Error: path is required for delete.\";\n              const deleted = await deleteWorkspaceFile(scope, path);\n              return JSON.stringify({\n                ok: true,\n                deleted,\n                path,\n              });\n            }\n\n            case \"grep\": {\n              const pattern = String(args.pattern ?? \"\").trim();\n              if (!pattern) return \"Error: pattern is required for grep.\";\n              const prefix = args.path ? String(args.path).trim() : undefined;\n              const useRegex =\n                args.useRegex === true || String(args.useRegex) === \"true\";\n              const matches = await grepWorkspaceFiles(scope, pattern, {\n                pathPrefix: prefix || undefined,\n                useRegex,\n                maxMatchesPerFile: 20,\n                maxFiles: 50,\n              });\n              return JSON.stringify({\n                ok: true,\n                pattern,\n                matchCount: matches.length,\n                matches: matches.map((m) => ({\n                  path: m.path,\n                  line: m.lineNumber,\n                  text: m.line,\n                })),\n              });\n            }\n\n            default:\n              return `Error: unknown action \"${action}\". Valid actions: write, append, read, list, delete, grep.`;\n          }\n        } catch (err) {\n          const msg = err instanceof Error ? err.message : String(err);\n          return JSON.stringify({ ok: false, error: msg });\n        }\n      },\n    },\n  };\n}\n"]}

package/docs/content/deployment.md

@@ -306,7 +306,7 @@ export default createAgentChatPlugin({
 The available modes are:
 
 - `off` — the default. No code-execution tools are registered in production.
-- `sandboxed` — registers `run-code`, an isolated Node.js JavaScript runner with a scrubbed environment, a fresh temp directory, output/time limits, and a localhost bridge to allowlisted registered tools such as `provider-api-request`, `provider-api-docs`, `provider-api-catalog`, `web-request`, and `workspace-files`.
+- `sandboxed` — registers `run-code`, an isolated Node.js JavaScript runner with a scrubbed environment, a fresh temp directory, output/time limits, and a localhost bridge to allowlisted registered tools such as `provider-api-request`, `provider-api-docs`, `provider-api-catalog`, `web-request`, and the Resources-backed workspace file bridge used by `workspaceRead` / `workspaceWrite`.
 - `trusted` — registers `run-code` plus the full coding tool registry (`bash`, `read`, `edit`, `write`). Use this only for single-tenant or operator-controlled deployments where full shell access to the host is intentional.
 
 Set `AGENT_PROD_CODE_EXECUTION=sandboxed` or `AGENT_PROD_CODE_EXECUTION=trusted` to override the plugin option for a specific deployment without a code change. `AGENT_PROD_CODE_EXECUTION=off` forces code execution off even when the plugin option enables it.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-native/core",
-  "version": "0.49.27",
+  "version": "0.50.0",
   "type": "module",
   "engines": {
     "node": ">=22"
@@ -132,6 +132,7 @@
     "./tailwind": "./dist/tailwind.preset.js",
     "./styles/agent-native.css": "./dist/styles/agent-native.css",
     "./agent/engine": "./dist/agent/engine/index.js",
+    "./agent/harness": "./dist/agent/harness/index.js",
     "./tsconfig.base.json": "./tsconfig.base.json"
   },
   "sideEffects": [

package/src/templates/workspace-core/.agents/skills/harness-agents/SKILL.md

@@ -0,0 +1,98 @@
+---
+name: harness-agents
+description: >-
+  Add or use full agent harness runtimes like Claude Code, Codex, Pi, Cursor, or Mastra inside Agent Native.
+scope: dev
+---
+
+# Harness Agents
+
+## Rule
+
+Full agent harnesses are not `AgentEngine` providers. Use the `AgentHarness`
+substrate in `@agent-native/core/agent/harness`.
+
+## Why
+
+`AgentEngine` is for one model round trip beneath `runAgentLoop`. Harnesses like
+Claude Code, Codex, Pi, Cursor, and Mastra own their own loop, workspace,
+native tools, session state, compaction, approval model, and sandbox behavior.
+Putting a harness under `AgentEngine.stream()` double-runs the loop and loses
+session lifecycle semantics.
+
+## How
+
+1. Register or resolve a harness adapter.
+
+```ts
+import {
+  registerBuiltinAgentHarnesses,
+  resolveAgentHarness,
+} from "@agent-native/core/agent/harness";
+
+registerBuiltinAgentHarnesses();
+const harness = resolveAgentHarness("ai-sdk-harness:codex");
+```
+
+2. Start a turn through the run-manager bridge.
+
+```ts
+import { startAgentHarnessRun } from "@agent-native/core/agent/harness";
+
+startAgentHarnessRun({
+  runId,
+  threadId,
+  adapter: harness,
+  input: { prompt },
+  createSession: {
+    sessionId,
+    resumeState,
+    instructions,
+    sandbox,
+    permissionMode: "allow-reads",
+  },
+  ownerEmail,
+  orgId,
+});
+```
+
+3. Persist native session state in SQL.
+
+Use `saveAgentHarnessSession`, `updateAgentHarnessSession`, and
+`getLatestAgentHarnessSessionForThread`. The `resumeState` is opaque; Agent
+Native stores it but does not inspect it.
+
+4. Surface runs through background agents.
+
+Harness runs are projected into the shared `BackgroundAgentRun` shape with
+`createAgentHarnessBackgroundAgentController()` and are available through the
+existing run routes as `goalId=agent-harness`.
+
+## Adapter Guidance
+
+- Keep harness packages optional. Use dynamic imports in adapters and expose an
+  install hint through `installPackage`.
+- Use the AI SDK harness adapter as one implementation, not as Agent Native's
+  public abstraction.
+- For bridge-backed coding harnesses, require a real sandbox/workspace provider.
+  Do not run arbitrary coding agents in the host process by default.
+- Pass only a narrow, intentional set of Agent Native actions as host tools.
+  Preserve `defineAction` auth, request context, timeouts, truncation, and
+  read-only metadata.
+
+## Don't
+
+- Don't add Claude Code, Codex, Cursor, Mastra, or Pi as an `AgentEngine`.
+- Don't replay full Agent Native chat history into a native harness each turn.
+  Resume the harness session instead.
+- Don't store resume state in `application_state`; it belongs in the harness
+  session SQL table.
+- Don't expose every app action to every harness session by default.
+
+## Related Skills
+
+- `adding-a-feature` — feature parity across UI/actions/instructions/state.
+- `delegate-to-agent` — background agents use run-manager infrastructure.
+- `external-agents` — expose openable resources and external-agent surfaces.
+- `storing-data` — durable SQL state and additive schema changes.
+

package/dist/workspace-files/schema.d.ts

@@ -1,195 +0,0 @@
-/**
- * SQL schema for workspace_files — durable scratch storage for the agent.
- *
- * Files are scoped to either a user (scope="user", scope_id=email) or a
- * workspace / org (scope="org", scope_id=orgId), mirroring the secrets table
- * pattern. Paths are unique per scope+scope_id pair and may include path
- * separators (e.g. "analysis/2026-q2/step1.md").
- *
- * Size limits:
- *   - Per-file content: 2 MB (enforced in the store layer).
- *   - Per-scope total: 200 MB (enforced in the store layer).
- */
-export declare const workspaceFiles: import("drizzle-orm/sqlite-core").SQLiteTableWithColumns<{
-    name: "workspace_files";
-    schema: undefined;
-    columns: {
-        id: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "id";
-            tableName: "workspace_files";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: true;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number;
-        }>;
-        scope: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "scope";
-            tableName: "workspace_files";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number;
-        }>;
-        scopeId: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "scope_id";
-            tableName: "workspace_files";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number;
-        }>;
-        path: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "path";
-            tableName: "workspace_files";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number;
-        }>;
-        content: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "content";
-            tableName: "workspace_files";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: true;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number;
-        }>;
-        contentType: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "content_type";
-            tableName: "workspace_files";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: true;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number;
-        }>;
-        sizeBytes: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "size_bytes";
-            tableName: "workspace_files";
-            dataType: "number";
-            columnType: "SQLiteInteger";
-            data: number;
-            driverParam: number;
-            notNull: true;
-            hasDefault: true;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: undefined;
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {}>;
-        createdAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "created_at";
-            tableName: "workspace_files";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number;
-        }>;
-        updatedAt: import("drizzle-orm/sqlite-core").SQLiteColumn<{
-            name: "updated_at";
-            tableName: "workspace_files";
-            dataType: "string";
-            columnType: "SQLiteText";
-            data: string;
-            driverParam: string;
-            notNull: true;
-            hasDefault: false;
-            isPrimaryKey: false;
-            isAutoincrement: false;
-            hasRuntimeDefault: false;
-            enumValues: [string, ...string[]];
-            baseColumn: never;
-            identity: undefined;
-            generated: undefined;
-        }, {}, {
-            length: number;
-        }>;
-    };
-    dialect: "sqlite";
-}>;
-/**
- * Raw CREATE TABLE SQL used by the on-demand migration path.
- * Written for SQLite; the migration runner adapts it for Postgres.
- */
-export declare const WORKSPACE_FILES_CREATE_SQL = "CREATE TABLE IF NOT EXISTS workspace_files (\n  id TEXT PRIMARY KEY,\n  scope TEXT NOT NULL,\n  scope_id TEXT NOT NULL,\n  path TEXT NOT NULL,\n  content TEXT NOT NULL DEFAULT '',\n  content_type TEXT NOT NULL DEFAULT 'text/plain',\n  size_bytes INTEGER NOT NULL DEFAULT 0,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL,\n  UNIQUE(scope, scope_id, path)\n)";
-export declare const WORKSPACE_FILES_INDEX_SQL = "CREATE INDEX IF NOT EXISTS workspace_files_scope_idx ON workspace_files (scope, scope_id, updated_at)";
-//# sourceMappingURL=schema.d.ts.map

package/dist/workspace-files/schema.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/workspace-files/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgBzB,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,0BAA0B,oXAWrC,CAAC;AAEH,eAAO,MAAM,yBAAyB,0GAA0G,CAAC"}

package/dist/workspace-files/schema.js

@@ -1,48 +0,0 @@
-/**
- * SQL schema for workspace_files — durable scratch storage for the agent.
- *
- * Files are scoped to either a user (scope="user", scope_id=email) or a
- * workspace / org (scope="org", scope_id=orgId), mirroring the secrets table
- * pattern. Paths are unique per scope+scope_id pair and may include path
- * separators (e.g. "analysis/2026-q2/step1.md").
- *
- * Size limits:
- *   - Per-file content: 2 MB (enforced in the store layer).
- *   - Per-scope total: 200 MB (enforced in the store layer).
- */
-import { table, text, integer } from "../db/schema.js";
-export const workspaceFiles = table("workspace_files", {
-    id: text("id").primaryKey(),
-    /** "user" or "org" */
-    scope: text("scope").notNull(),
-    /** Email for user-scope; orgId for org-scope. */
-    scopeId: text("scope_id").notNull(),
-    /** Relative path within the scope, e.g. "memos/q2.md". Unique per scope+scopeId. */
-    path: text("path").notNull(),
-    /** File content (text). */
-    content: text("content").notNull().default(""),
-    /** MIME type, e.g. "text/plain", "application/json". */
-    contentType: text("content_type").notNull().default("text/plain"),
-    /** Byte length of content (utf-8). */
-    sizeBytes: integer("size_bytes").notNull().default(0),
-    createdAt: text("created_at").notNull(),
-    updatedAt: text("updated_at").notNull(),
-});
-/**
- * Raw CREATE TABLE SQL used by the on-demand migration path.
- * Written for SQLite; the migration runner adapts it for Postgres.
- */
-export const WORKSPACE_FILES_CREATE_SQL = `CREATE TABLE IF NOT EXISTS workspace_files (
-  id TEXT PRIMARY KEY,
-  scope TEXT NOT NULL,
-  scope_id TEXT NOT NULL,
-  path TEXT NOT NULL,
-  content TEXT NOT NULL DEFAULT '',
-  content_type TEXT NOT NULL DEFAULT 'text/plain',
-  size_bytes INTEGER NOT NULL DEFAULT 0,
-  created_at TEXT NOT NULL,
-  updated_at TEXT NOT NULL,
-  UNIQUE(scope, scope_id, path)
-)`;
-export const WORKSPACE_FILES_INDEX_SQL = `CREATE INDEX IF NOT EXISTS workspace_files_scope_idx ON workspace_files (scope, scope_id, updated_at)`;
-//# sourceMappingURL=schema.js.map

package/dist/workspace-files/schema.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/workspace-files/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAEvD,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC,iBAAiB,EAAE;IACrD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE;IAC3B,sBAAsB;IACtB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC9B,iDAAiD;IACjD,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACnC,oFAAoF;IACpF,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,2BAA2B;IAC3B,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,wDAAwD;IACxD,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;IACjE,sCAAsC;IACtC,SAAS,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;CACxC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;;;;;;;;;;;EAWxC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,uGAAuG,CAAC","sourcesContent":["/**\n * SQL schema for workspace_files — durable scratch storage for the agent.\n *\n * Files are scoped to either a user (scope=\"user\", scope_id=email) or a\n * workspace / org (scope=\"org\", scope_id=orgId), mirroring the secrets table\n * pattern. Paths are unique per scope+scope_id pair and may include path\n * separators (e.g. \"analysis/2026-q2/step1.md\").\n *\n * Size limits:\n *   - Per-file content: 2 MB (enforced in the store layer).\n *   - Per-scope total: 200 MB (enforced in the store layer).\n */\n\nimport { table, text, integer } from \"../db/schema.js\";\n\nexport const workspaceFiles = table(\"workspace_files\", {\n  id: text(\"id\").primaryKey(),\n  /** \"user\" or \"org\" */\n  scope: text(\"scope\").notNull(),\n  /** Email for user-scope; orgId for org-scope. */\n  scopeId: text(\"scope_id\").notNull(),\n  /** Relative path within the scope, e.g. \"memos/q2.md\". Unique per scope+scopeId. */\n  path: text(\"path\").notNull(),\n  /** File content (text). */\n  content: text(\"content\").notNull().default(\"\"),\n  /** MIME type, e.g. \"text/plain\", \"application/json\". */\n  contentType: text(\"content_type\").notNull().default(\"text/plain\"),\n  /** Byte length of content (utf-8). */\n  sizeBytes: integer(\"size_bytes\").notNull().default(0),\n  createdAt: text(\"created_at\").notNull(),\n  updatedAt: text(\"updated_at\").notNull(),\n});\n\n/**\n * Raw CREATE TABLE SQL used by the on-demand migration path.\n * Written for SQLite; the migration runner adapts it for Postgres.\n */\nexport const WORKSPACE_FILES_CREATE_SQL = `CREATE TABLE IF NOT EXISTS workspace_files (\n  id TEXT PRIMARY KEY,\n  scope TEXT NOT NULL,\n  scope_id TEXT NOT NULL,\n  path TEXT NOT NULL,\n  content TEXT NOT NULL DEFAULT '',\n  content_type TEXT NOT NULL DEFAULT 'text/plain',\n  size_bytes INTEGER NOT NULL DEFAULT 0,\n  created_at TEXT NOT NULL,\n  updated_at TEXT NOT NULL,\n  UNIQUE(scope, scope_id, path)\n)`;\n\nexport const WORKSPACE_FILES_INDEX_SQL = `CREATE INDEX IF NOT EXISTS workspace_files_scope_idx ON workspace_files (scope, scope_id, updated_at)`;\n"]}