@agntk/core 0.1.2 → 0.3.0

package/dist/tools/spawn-agent/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/spawn-agent/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AA6C5C,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;kFAe8D,CAAC;AAEnF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACrE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACjG,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;CAC1F,CAAC,CAAC;AAcH;;GAEG;AACH,KAAK,UAAU,iBAAiB,CAC9B,KAAsB,EACtB,OAA0B;IAE1B,MAAM,EACJ,aAAa,GAAG,CAAC,EACjB,YAAY,GAAG,CAAC,EAChB,WAAW,EACX,QAAQ,GACT,GAAG,OAAO,CAAC;IAEZ,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAEtC,iDAAiD;IACjD,IAAI,YAAY,IAAI,aAAa,EAAE,CAAC;QAClC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,0EAA0E;YACjF,UAAU,EAAE,oDAAoD;SACjE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,+DAA+D;SACvE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAE3C,6BAA6B;IAC7B,MAAM,UAAU,GAAG,OAAO;QACxB,CAAC,CAAC,aAAa,OAAO,cAAc,IAAI,EAAE;QAC1C,CAAC,CAAC,IAAI,CAAC;IAET,qBAAqB;IACrB,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC;YACP,IAAI,EAAE,kBAAkB;YACxB,OAAO;YACP,IAAI;YACJ,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC;YAC3B,IAAI;YACJ,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,aAAa,EAAE,CAAC,EAAE,iCAAiC;SACpD,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAEvD,0BAA0B;QAC1B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAC5C,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACnD,IAAI,QAAQ,EAAE,CAAC;oBACb,QAAQ,CAAC;wBACP,IAAI,EAAE,kBAAkB;wBACxB,OAAO;wBACP,IAAI;wBACJ,IAAI,EAAE,KAAK,CAAC,SAAS;wBACrB,MAAM,EAAE,WAAW;qBACpB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;QAEjC,0BAA0B;QAC1B,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC;gBACP,IAAI,EAAE,kBAAkB;gBACxB,OAAO;gBACP,IAAI;gBACJ,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;QACL,CAAC;QAED,iEAAiE;QACjE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEzD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO;YACP,IAAI;YACJ,OAAO;YACP,OAAO,EAAE,cAAc,IAAI,uBAAuB;SACnD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QAE9E,qBAAqB;QACrB,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC;gBACP,IAAI,EAAE,kBAAkB;gBACxB,OAAO;gBACP,IAAI;gBACJ,IAAI,EAAE,UAAU,YAAY,EAAE;gBAC9B,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO;YACP,IAAI;YACJ,KAAK,EAAE,YAAY;SACpB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,cAAc,CAC3B,UAAkB,EAClB,IAAY,EACZ,YAAoB;IAEpB,yCAAyC;IACzC,IAAI,UAAU,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC7B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,CAAC;YAClC,KAAK,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACrC,MAAM,EAAE,wDAAwD,IAAI,wIAAwI;YAC5M,MAAM,EAAE,kBAAkB,YAAY,0BAA0B,UAAU,EAAE;YAC5E,UAAU,EAAE,CAAC;SACd,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,EAAW,EAAE,CAAC;QACrB,sEAAsE;QACtE,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,2DAA2D,CAAC;IAChG,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAA6B,EAAE;IAClE,OAAO;QACL,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,0BAA0B;QACvC,OAAO,EAAE,CAAC,KAAsB,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/spawn-agent/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AACnF,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AA2C5C,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;kFAe8D,CAAC;AAEnF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;IACrE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACjG,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,CAAC;CAC1F,CAAC,CAAC;AAcH;;GAEG;AACH,KAAK,UAAU,iBAAiB,CAC9B,KAAsB,EACtB,OAA0B;IAE1B,MAAM,EACJ,aAAa,GAAG,CAAC,EACjB,YAAY,GAAG,CAAC,EAChB,WAAW,EACX,QAAQ,GACT,GAAG,OAAO,CAAC;IAEZ,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAEtC,iDAAiD;IACjD,IAAI,YAAY,IAAI,aAAa,EAAE,CAAC;QAClC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,0EAA0E;YACjF,UAAU,EAAE,oDAAoD;SACjE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,+DAA+D;SACvE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAE3C,6BAA6B;IAC7B,MAAM,UAAU,GAAG,OAAO;QACxB,CAAC,CAAC,aAAa,OAAO,cAAc,IAAI,EAAE;QAC1C,CAAC,CAAC,IAAI,CAAC;IAET,qBAAqB;IACrB,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC;YACP,IAAI,EAAE,kBAAkB;YACxB,OAAO;YACP,IAAI;YACJ,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC;YAC3B,IAAI;YACJ,YAAY,EAAE,UAAU,CAAC,YAAY;SACtC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAEvD,0BAA0B;QAC1B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAC5C,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC9C,IAAI,QAAQ,EAAE,CAAC;oBACb,QAAQ,CAAC;wBACP,IAAI,EAAE,kBAAkB;wBACxB,OAAO;wBACP,IAAI;wBACJ,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,MAAM,EAAE,WAAW;qBACpB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;QAEjC,0BAA0B;QAC1B,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC;gBACP,IAAI,EAAE,kBAAkB;gBACxB,OAAO;gBACP,IAAI;gBACJ,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;QACL,CAAC;QAED,iEAAiE;QACjE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEzD,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO;YACP,IAAI;YACJ,OAAO;YACP,OAAO,EAAE,cAAc,IAAI,uBAAuB;SACnD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QAE9E,qBAAqB;QACrB,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC;gBACP,IAAI,EAAE,kBAAkB;gBACxB,OAAO;gBACP,IAAI;gBACJ,IAAI,EAAE,UAAU,YAAY,EAAE;gBAC9B,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO;YACP,IAAI;YACJ,KAAK,EAAE,YAAY;SACpB,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,cAAc,CAC3B,UAAkB,EAClB,IAAY,EACZ,YAAoB;IAEpB,yCAAyC;IACzC,IAAI,UAAU,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QAC7B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,CAAC;YAClC,KAAK,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACrC,MAAM,EAAE,wDAAwD,IAAI,wIAAwI;YAC5M,MAAM,EAAE,kBAAkB,YAAY,0BAA0B,UAAU,EAAE;YAC5E,UAAU,EAAE,CAAC;SACd,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,EAAW,EAAE,CAAC;QACrB,sEAAsE;QACtE,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,2DAA2D,CAAC;IAChG,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAA6B,EAAE;IAClE,OAAO;QACL,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,0BAA0B;QACvC,OAAO,EAAE,CAAC,KAAsB,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,eAAe,oBAAoB,CAAC"}

package/dist/tools/utils/shell.d.ts

@@ -1,4 +1,18 @@
 export declare function isDangerousCommand(command: string): boolean;
+/**
+ * Ensure the requested cwd is within workspaceRoot (or is workspaceRoot itself).
+ * Returns the resolved cwd, or throws if the path escapes the workspace.
+ */
+export declare function validateCwd(cwd: string, workspaceRoot: string): string;
+/**
+ * Build a sanitized copy of process.env suitable for child processes.
+ * Strips all credential-like keys; always preserves PATH, HOME, USER, TERM, LANG, etc.
+ */
+export declare function buildSanitizedEnv(extra?: Record<string, string>): Record<string, string>;
+/**
+ * Redact API keys and secrets from command output before returning to the LLM.
+ */
+export declare function sanitizeOutput(output: string): string;
 export interface ShellOptions {
     cwd?: string;
     timeout?: number;

package/dist/tools/utils/shell.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../../src/tools/utils/shell.ts"],"names":[],"mappings":"AAeA,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,WAAW,CAAC,CA2EtB;AAED,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC;IACT,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC,CAuBD"}
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../../src/tools/utils/shell.ts"],"names":[],"mappings":"AA4FA,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE3D;AAMD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAYtE;AA6BD;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACjC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAmBxB;AAgBD;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAMrD;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,WAAW,CAAC,CA2EtB;AAED,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC;IACT,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC,CAuBD"}

package/dist/tools/utils/shell.js

@@ -1,19 +1,178 @@
 import { spawn } from 'node:child_process';
+import * as path from 'node:path';
+import * as fs from 'node:fs';
+// ============================================================================
+// Dangerous Command Detection (S-1, S-2, S-3, S-4, S-5, S-6)
+// ============================================================================
+/**
+ * Patterns that are unconditionally blocked.
+ *
+ * Covers:
+ *  S-1: rm with any target (not just absolute paths)
+ *  S-2: Nested interpreter invocation (bash -c, python -c, node -e, etc.)
+ *  S-3: Destructive git operations
+ *  S-4: Fork bomb (multiple forms)
+ *  S-5: chmod with dangerous modes (666, setuid, world-writable)
+ *  S-6: Pipe-to-shell / download-and-execute bypass
+ */
 const DANGEROUS_PATTERNS = [
-    /rm\s+(-rf?|--recursive)?\s*[\/~]/i,
-    />\s*\/dev\/sd[a-z]/i,
-    /mkfs\./i,
-    /dd\s+if=/i,
-    /:(){ :|:& };:/,
-    /\b(sudo|su)\b/i,
+    // S-1: rm -r/-rf targeting dangerous targets.
+    //
+    // Dangerous targets: bare `.` (current dir), `..` (parent), `*` (glob all),
+    //   `/` (root), `~` (home), `$(...)` or `${...}` or `` ` `` (command sub)
+    // Safe targets:  `./dist`, `./node_modules`, `./build`, etc. (explicit relative path)
+    //
+    // Strategy: after flags, match a target that is NOT `.` followed by `/`.
+    // `(?!\.[/\w])` means: NOT `.` followed by slash or word char — i.e. not `./dist`.
+    // We then explicitly enumerate dangerous patterns.
+    /\brm\s+(-[^\s]*r[^\s]*\s+|--recursive\s+)((?<!\.)\.\.(?![^\s])|(?<=\s)\.(?=[\s$])|(?<=\s)\.(?=\s|$)|\*|\/|~|\$[({`])/i,
+    // Simpler, more readable alternative that splits into two patterns:
+    // Pattern A: rm -r targeting .. or * or / or ~ or command sub
+    /\brm\s+-[^\s]*r[^\s]*\s+(\*|\/|~|\$[({]|`|\.\.(\s|$|\/))/i,
+    // Pattern B: rm -r targeting bare . (not followed by / or word char meaning ./dist)
+    /\brm\s+-[^\s]*r[^\s]*\s+\.(?![\w\/])/i,
+    // Pattern C: rm without -r but with -f targeting absolute or dangerous paths
+    /\brm\s+-[^\s]*f[^\s]*\s+(\*|~|\$[({]|`|\.\.(\s|$|\/)|\/(?!tmp|var\/tmp))/i,
+    // S-2: Nested interpreter invocation
+    /\b(bash|sh|zsh|dash|ksh|fish|tcsh)\s+(-[ce]|--[a-z]+\s)/i,
+    /\b(python3?|python3\.[0-9]+|pypy3?)\s+-[cC]/i,
+    /\b(node|nodejs|deno|bun)\s+-[eE]/i,
+    /\b(perl|ruby|php|lua|Rscript|groovy)\s+-[e]/i,
+    // S-3: Destructive git operations
+    /\bgit\s+(push\s+[^\n]*--?force|push\s+-f\b)/i,
+    /\bgit\s+reset\s+--hard/i,
+    /\bgit\s+clean\s+-[fdxXqn]*[fF][fdxXqn]*/i,
+    /\bgit\s+rebase\s+(-i|--interactive)/i,
+    // S-4: Fork bomb — colon function form and nohup infinite loop, but NOT normal while loops
+    /:\(\s*\)\s*\{/,
+    /:\s*\(\s*\)\s*\{.*:\s*\|\s*:/,
+    // S-5: chmod dangerous modes (setuid, setgid, world-write, 666, 777)
+    // Allows: 644, 755, 600, 700, u+x, go-w etc.
+    // Blocks: 666, 777, 4xxx (setuid), 2xxx (setgid), +s, o+w, a+w, u+s, g+s
+    /\bchmod\s+(-R\s+)?(666|777|4[0-9]{3}|2[0-9]{3}|\+s|o\+w|a\+w|u\+s|g\+s)/i,
+    // S-6: Pipe-to-shell and download-execute bypasses
+    /\b(curl|wget)\b.*\|\s*(bash|sh|zsh|dash|python3?|node)/i,
+    /\b(curl|wget)\b.*>\s*\S+.*&&\s*(bash|sh|chmod)/i,
+    // Disk/device destruction
+    />\s*\/dev\/(sd[a-z]|nvme[0-9]|hd[a-z]|vd[a-z])/i,
+    /\bmkfs\./i,
+    /\bdd\s+if=/i,
+    // Privilege escalation
+    /\b(sudo|su)\s/i,
     /\b(shutdown|reboot|halt|poweroff)\b/i,
-    /\b(curl|wget)\b.*\|\s*(bash|sh|zsh)\b/i,
-    /\beval\b/i,
-    /\bchmod\s+(-R\s+)?(777|755)\b/i, // Basic check for dangerous permissions
+    // Shell eval builtin — `eval <string>` or `eval "..."`, not English words like 'evaluate'
+    /\beval\s*["'`(]/i,
+    /^eval\s/,
+    /;\s*eval\s/,
+    /&&\s*eval\s/,
+    /\|\s*eval\s/,
+    // MITRE T1027.010: Decode-then-execute bypass patterns
+    // base64 -d / --decode / openssl base64 decode → piped to shell
+    /\b(base64\s+-d|base64\s+--decode|openssl\s+enc\s+-d)\b.*\|\s*(bash|sh|zsh|dash|node|python3?)/i,
+    // xxd hex-decode → piped to shell
+    /\b(xxd\s+-r|xxd\s+--reverse)\b.*\|\s*(bash|sh|zsh|dash|node|python3?)/i,
+    // gzip decompress → piped to shell
+    /\bgzip\s+(-d|--decompress)\b.*\|\s*(bash|sh|zsh|dash)/i,
+    // printf with hex escapes → piped to shell
+    /\bprintf\b.*\\x[0-9a-fA-F]{2}.*\|\s*(bash|sh|zsh|dash)/i,
+    // ANSI-C quoting with octal escapes: $'\173\40...' | sh
+    /\$'\\[0-7]{3,}'.*\|\s*(bash|sh|zsh|dash)/i,
 ];
 export function isDangerousCommand(command) {
     return DANGEROUS_PATTERNS.some((pattern) => pattern.test(command));
 }
+// ============================================================================
+// CWD Validation (S-13)
+// ============================================================================
+/**
+ * Ensure the requested cwd is within workspaceRoot (or is workspaceRoot itself).
+ * Returns the resolved cwd, or throws if the path escapes the workspace.
+ */
+export function validateCwd(cwd, workspaceRoot) {
+    const resolvedCwd = path.resolve(cwd);
+    let realWorkspace;
+    try {
+        realWorkspace = fs.realpathSync(path.resolve(workspaceRoot));
+    }
+    catch {
+        realWorkspace = path.resolve(workspaceRoot);
+    }
+    if (!resolvedCwd.startsWith(realWorkspace + path.sep) && resolvedCwd !== realWorkspace) {
+        throw new Error(`cwd "${cwd}" is outside workspace root`);
+    }
+    return resolvedCwd;
+}
+// ============================================================================
+// Env Var Filtering (A-3)
+// ============================================================================
+/** Key patterns that indicate credentials — stripped from child process env. */
+const SENSITIVE_ENV_PATTERNS = [
+    /API[_-]?KEY/i,
+    /SECRET/i,
+    /TOKEN(?!_DIR|_PATH)/i,
+    /PASSWORD/i,
+    /PASSWD/i,
+    /CREDENTIAL/i,
+    /OPENAI_/i,
+    /ANTHROPIC_/i,
+    /LANGFUSE_/i,
+    /AWS_(?!REGION|DEFAULT_REGION|EXECUTION_ENV)/i,
+    /GOOGLE_(API|CLOUD|APPLICATION)/i,
+    /GITHUB_TOKEN/i,
+    /SLACK_(BOT|APP|SIGNING)/i,
+    /STRIPE_/i,
+    /TWILIO_/i,
+    /SENDGRID_/i,
+    /DATABASE_URL/i,
+    /MONGO(DB)?_URI/i,
+    /REDIS_URL/i,
+];
+/**
+ * Build a sanitized copy of process.env suitable for child processes.
+ * Strips all credential-like keys; always preserves PATH, HOME, USER, TERM, LANG, etc.
+ */
+export function buildSanitizedEnv(extra = {}) {
+    const safe = {};
+    for (const [key, value] of Object.entries(process.env)) {
+        if (value === undefined)
+            continue;
+        if (SENSITIVE_ENV_PATTERNS.some((p) => p.test(key)))
+            continue;
+        safe[key] = value;
+    }
+    // Merge caller-supplied extras, but also filter those
+    for (const [key, value] of Object.entries(extra)) {
+        if (SENSITIVE_ENV_PATTERNS.some((p) => p.test(key)))
+            continue;
+        safe[key] = value;
+    }
+    // Always ensure PATH is present
+    if (process.env.PATH)
+        safe.PATH = process.env.PATH;
+    return safe;
+}
+// ============================================================================
+// Output Sanitization (A-1)
+// ============================================================================
+const SENSITIVE_OUTPUT_PATTERNS = [
+    [/\bsk-[a-zA-Z0-9]{16,}\b/g, '[OPENAI_KEY REDACTED]'],
+    [/\bsk-ant-[a-zA-Z0-9\-]{20,}\b/g, '[ANTHROPIC_KEY REDACTED]'],
+    [/\bghp_[a-zA-Z0-9]{36}\b/g, '[GITHUB_TOKEN REDACTED]'],
+    [/\bxoxb-[a-zA-Z0-9\-]+\b/g, '[SLACK_TOKEN REDACTED]'],
+    [/Bearer\s+[a-zA-Z0-9._\-]{20,}/g, '[BEARER_TOKEN REDACTED]'],
+    // Generic: KEY=value and SECRET=value patterns on a line
+    [/(?:api[_\-]?key|secret|token|password|api_secret)\s*[=:]\s*[^\s'"]{8,}/gi, '[SECRET REDACTED]'],
+];
+/**
+ * Redact API keys and secrets from command output before returning to the LLM.
+ */
+export function sanitizeOutput(output) {
+    let sanitized = output;
+    for (const [pattern, replacement] of SENSITIVE_OUTPUT_PATTERNS) {
+        sanitized = sanitized.replace(pattern, replacement);
+    }
+    return sanitized;
+}
 export async function executeCommand(command, options = {}) {
     const { cwd = process.cwd(), timeout = 30000, maxBuffer = 1024 * 1024, env, } = options;
     const startTime = performance.now();
@@ -23,7 +182,7 @@ export async function executeCommand(command, options = {}) {
         let killed = false;
         const proc = spawn('bash', ['-c', command], {
             cwd,
-            env: { ...process.env, ...env, TERM: 'dumb' },
+            env: { ...buildSanitizedEnv(env), TERM: 'dumb' },
         });
         const timer = setTimeout(() => {
             killed = true;
@@ -55,8 +214,8 @@ export async function executeCommand(command, options = {}) {
         proc.on('close', (code) => {
             clearTimeout(timer);
             resolve({
-                stdout: stdout.trim(),
-                stderr: stderr.trim(),
+                stdout: sanitizeOutput(stdout.trim()),
+                stderr: sanitizeOutput(stderr.trim()),
                 exitCode: code ?? 1,
                 killed,
                 durationMs: performance.now() - startTime,

package/dist/tools/utils/shell.js.map

@@ -1 +1 @@
-{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../../src/tools/utils/shell.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,MAAM,kBAAkB,GAAG;IACzB,mCAAmC;IACnC,qBAAqB;IACrB,SAAS;IACT,WAAW;IACX,eAAe;IACf,gBAAgB;IAChB,sCAAsC;IACtC,wCAAwC;IACxC,WAAW;IACX,gCAAgC,EAAE,wCAAwC;CAC3E,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC;AAkBD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,UAAwB,EAAE;IAE1B,MAAM,EACJ,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EACnB,OAAO,GAAG,KAAK,EACf,SAAS,GAAG,IAAI,GAAG,IAAI,EACvB,GAAG,GACJ,GAAG,OAAO,CAAC;IAEZ,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAEpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;YAC1C,GAAG;YACH,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE;SAC9C,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAErB,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACvB,CAAC;gBAAC,OAAO,EAAW,EAAE,CAAC;gBACvB,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC,EAAE,OAAO,CAAC,CAAC;QAEZ,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC;YAClB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC;YAClB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAC7B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAC7B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC;gBACN,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;gBACrB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;gBACrB,QAAQ,EAAE,IAAI,IAAI,CAAC;gBACnB,MAAM;gBACN,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;aAC1C,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC;gBACN,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;gBACzC,KAAK,EAAE,GAAG,CAAC,OAAO;aACnB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAe,EACf,UAAwB,EAAE;IAO1B,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,4BAA4B;YACnC,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEtD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM;SACP,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC;QAC9B,MAAM;KACP,CAAC;AACJ,CAAC"}
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../../src/tools/utils/shell.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,+EAA+E;AAC/E,6DAA6D;AAC7D,+EAA+E;AAE/E;;;;;;;;;;GAUG;AACH,MAAM,kBAAkB,GAAG;IACzB,8CAA8C;IAC9C,EAAE;IACF,4EAA4E;IAC5E,0EAA0E;IAC1E,sFAAsF;IACtF,EAAE;IACF,yEAAyE;IACzE,mFAAmF;IACnF,mDAAmD;IACnD,uHAAuH;IACvH,oEAAoE;IACpE,8DAA8D;IAC9D,2DAA2D;IAC3D,oFAAoF;IACpF,uCAAuC;IACvC,6EAA6E;IAC7E,2EAA2E;IAE3E,qCAAqC;IACrC,0DAA0D;IAC1D,8CAA8C;IAC9C,mCAAmC;IACnC,8CAA8C;IAE9C,kCAAkC;IAClC,8CAA8C;IAC9C,yBAAyB;IACzB,0CAA0C;IAC1C,sCAAsC;IAEtC,2FAA2F;IAC3F,eAAe;IACf,8BAA8B;IAE9B,qEAAqE;IACrE,6CAA6C;IAC7C,yEAAyE;IACzE,0EAA0E;IAE1E,mDAAmD;IACnD,yDAAyD;IACzD,iDAAiD;IAEjD,0BAA0B;IAC1B,iDAAiD;IACjD,WAAW;IACX,aAAa;IAEb,uBAAuB;IACvB,gBAAgB;IAChB,sCAAsC;IAEtC,0FAA0F;IAC1F,kBAAkB;IAClB,SAAS;IACT,YAAY;IACZ,aAAa;IACb,aAAa;IAEb,uDAAuD;IACvD,gEAAgE;IAChE,gGAAgG;IAChG,kCAAkC;IAClC,wEAAwE;IACxE,mCAAmC;IACnC,wDAAwD;IACxD,2CAA2C;IAC3C,yDAAyD;IACzD,wDAAwD;IACxD,2CAA2C;CAC5C,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,aAAqB;IAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,aAAa,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,6BAA6B,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,+EAA+E;AAC/E,0BAA0B;AAC1B,+EAA+E;AAE/E,gFAAgF;AAChF,MAAM,sBAAsB,GAAG;IAC7B,cAAc;IACd,SAAS;IACT,sBAAsB;IACtB,WAAW;IACX,SAAS;IACT,aAAa;IACb,UAAU;IACV,aAAa;IACb,YAAY;IACZ,8CAA8C;IAC9C,iCAAiC;IACjC,eAAe;IACf,0BAA0B;IAC1B,UAAU;IACV,UAAU;IACV,YAAY;IACZ,eAAe;IACf,iBAAiB;IACjB,YAAY;CACb,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgC,EAAE;IAElC,MAAM,IAAI,GAA2B,EAAE,CAAC;IAExC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,SAAS;QAC9D,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACpB,CAAC;IAED,sDAAsD;IACtD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,SAAS;QAC9D,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACpB,CAAC;IAED,gCAAgC;IAChC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI;QAAE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAEnD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,4BAA4B;AAC5B,+EAA+E;AAE/E,MAAM,yBAAyB,GAA4B;IACzD,CAAC,0BAA0B,EAAE,uBAAuB,CAAC;IACrD,CAAC,gCAAgC,EAAE,0BAA0B,CAAC;IAC9D,CAAC,0BAA0B,EAAE,yBAAyB,CAAC;IACvD,CAAC,0BAA0B,EAAE,wBAAwB,CAAC;IACtD,CAAC,gCAAgC,EAAE,yBAAyB,CAAC;IAC7D,yDAAyD;IACzD,CAAC,0EAA0E,EAAE,mBAAmB,CAAC;CAClG,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,SAAS,GAAG,MAAM,CAAC;IACvB,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,yBAAyB,EAAE,CAAC;QAC/D,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAkBD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,UAAwB,EAAE;IAE1B,MAAM,EACJ,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EACnB,OAAO,GAAG,KAAK,EACf,SAAS,GAAG,IAAI,GAAG,IAAI,EACvB,GAAG,GACJ,GAAG,OAAO,CAAC;IAEZ,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAEpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,KAAK,CAAC;QAEnB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;YAC1C,GAAG;YACH,GAAG,EAAE,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE;SACjD,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,GAAG,IAAI,CAAC;YACd,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAErB,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACvB,CAAC;gBAAC,OAAO,EAAW,EAAE,CAAC;gBACvB,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC,EAAE,OAAO,CAAC,CAAC;QAEZ,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC;YAClB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,IAAI,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC;YAClB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAC7B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QAC7B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC;gBACN,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACrC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACrC,QAAQ,EAAE,IAAI,IAAI,CAAC;gBACnB,MAAM;gBACN,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;aAC1C,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC;gBACN,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,KAAK;gBACb,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;gBACzC,KAAK,EAAE,GAAG,CAAC,OAAO;aACnB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAe,EACf,UAAwB,EAAE;IAO1B,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,4BAA4B;YACnC,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAEtD,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM;SACP,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC;QAC9B,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/types/agent.d.ts

@@ -1,218 +1,98 @@
 /**
- * @fileoverview Core type definitions for AgentOptions and related configuration types.
- * These types define the interface for the createAgent() factory function.
+ * @fileoverview Core type definitions for the agent API.
+ *
+ * The agent is a fully-equipped worker. You give it a name, instructions,
+ * and a prompt. Everything else is auto-detected from the environment.
  */
-import type { LanguageModel, Tool, StepResult, ToolSet } from 'ai';
-import type { SkillsConfig } from '../skills/types.js';
+import type { LanguageModel, LanguageModelUsage, Tool } from 'ai';
 import type { UsageLimits } from '../usage-limits.js';
-import type { ReflectionConfig } from '../reflection.js';
 import type { ApprovalConfig } from '../tools/approval.js';
-import type { GuardrailsConfig } from '../guardrails/types.js';
-import type { StreamEventCallback } from './streaming.js';
-import type { ObservabilityConfig } from '../observability/types.js';
 /**
- * Configuration options for creating an agent via createAgent().
+ * Configuration for creating an agent.
+ *
+ * Only `name` is required. Everything else has sensible defaults or
+ * is auto-detected from the environment.
  */
 export interface AgentOptions {
-    /** System prompt/instructions for the agent. Overrides role-based defaults. */
-    systemPrompt?: string;
-    /** Context to prepend to the system prompt without overriding role defaults.
-     * Useful for injecting environment context (OS, shell, project type, etc.).
+    /**
+     * Display name for this agent.
+     * Used in logs, traces, multi-agent coordination, and persistent state.
+     * Persistent agent state is stored at `~/.agntk/agents/{name}/`.
      */
-    systemPromptPrefix?: string;
-    /** Predefined role with associated system prompt and call options. */
-    role?: AgentRole;
-    /** Unique identifier for the agent instance. */
-    agentId?: string;
-    /** Maximum number of tool execution steps. Default: 10 */
-    maxSteps?: number;
-    /** Token and request caps. Throws UsageLimitExceeded when exceeded.
-     * @example
-     * ```typescript
-     * const agent = createAgent({
-     *   usageLimits: { maxRequests: 20, maxTotalTokens: 100_000 },
-     * });
-     * ```
+    name: string;
+    /**
+     * What this agent does. Natural language context injected as the system prompt.
+     * This is NOT a role — it's the agent's understanding of its job.
      */
-    usageLimits?: UsageLimits;
-    /** Condition to stop agent execution. */
-    stopWhen?: 'task_complete' | 'max_steps' | StopFunction;
-    /** Reflection strategy injected between tool steps.
-     * 'reflact' injects goal-state reflection after every step.
-     * 'periodic' injects reflection every N steps (configurable via frequency).
-     * 'none' preserves default behavior (no reflection).
-     * @example
-     * ```typescript
-     * const agent = createAgent({
-     *   reflection: { strategy: 'reflact' },
-     * });
-     * ```
+    instructions?: string;
+    /**
+     * Where the agent operates. Root for file tools, skill discovery, memory.
+     * Default: process.cwd()
      */
-    reflection?: ReflectionConfig;
-    /** Language model instance. Takes precedence over provider/name. */
-    model?: LanguageModel;
-    /** Model provider to use for automatic model resolution. */
-    modelProvider?: ModelProvider;
-    /** Model name/identifier within the provider. */
-    modelName?: string;
-    /** Custom tools to add to the agent. Merged with preset tools. */
-    tools?: Record<string, Tool>;
-    /** Predefined tool preset to use. Default: 'standard' */
-    toolPreset?: ToolPreset;
-    /** Specific tools to enable (whitelist). If set, only these tools are active. */
-    enableTools?: string[];
-    /** Specific tools to disable (blacklist). Removed from preset/custom tools. */
-    disableTools?: string[];
-    /** Maximum retries per tool when a ModelRetry error is thrown. Default: 3 */
-    maxToolRetries?: number;
-    /** Require human approval before executing dangerous tools.
-     * `true` enables approval for default dangerous tools (shell, browser, file_write, file_edit).
-     * Provide an ApprovalConfig object for fine-grained control.
-     * @example
-     * ```typescript
-     * const agent = createAgent({
-     *   approval: true, // enable for default dangerous tools
-     * });
-     * // or
-     * const agent = createAgent({
-     *   approval: { enabled: true, tools: ['shell'], timeout: 30000 },
-     * });
-     * ```
+    workspaceRoot?: string;
+    /**
+     * Override the auto-selected model.
+     * Most users should never touch this — the agent picks the best
+     * available model from your API keys.
      */
-    approval?: boolean | ApprovalConfig;
-    /** Guardrails for input/output validation.
-     * Input guardrails run before the agent; output guardrails run after.
-     * Both phases execute their guardrails in parallel with fast-fail.
-     * @example
-     * ```typescript
-     * const agent = createAgent({
-     *   guardrails: {
-     *     output: [contentFilter(), lengthLimit({ maxChars: 5000 })],
-     *     onBlock: 'retry',
-     *   },
-     * });
-     * ```
+    model?: LanguageModel;
+    /**
+     * Safety limit on tool-loop iterations. Default: 25
      */
-    guardrails?: GuardrailsConfig;
-    /** Enable spawn_agent tool for sub-agent delegation. Default: false */
-    enableSubAgents?: boolean;
-    /** Custom configurations for specific sub-agent roles. */
-    subAgentRoles?: Record<string, SubAgentConfig>;
-    /** Maximum depth of sub-agent spawning to prevent infinite recursion. Default: 2 */
-    maxSpawnDepth?: number;
-    /** Enable transient streaming for tool data (file contents, shell output, etc). Default: true */
-    enableTransientStreaming?: boolean;
-    /** Enable durable workflow wrapping for tool executions. Default: true */
-    durable?: boolean;
-    /** Configuration for workflow durability. */
-    workflowOptions?: WorkflowOptions;
-    /** Enable persistent memory for the agent. Default: false
-     * When true, creates a MarkdownMemoryStore that reads/writes .agntk/ files.
-     * @example
-     * ```typescript
-     * const agent = createAgent({ enableMemory: true });
-     * ```
+    maxSteps?: number;
+    /**
+     * Token/request caps. Throws UsageLimitExceeded when hit.
      */
-    enableMemory?: boolean;
-    /** Configuration for memory system. */
-    memoryOptions?: MemoryOptions;
-    /** Skills to inject into the agent's system prompt.
-     * Skills are discovered from SKILL.md files in configured directories.
-     * @example
-     * ```typescript
-     * const agent = createAgent({
-     *   skills: { directories: ['.agents/skills'] },
-     * });
-     * ```
+    usageLimits?: UsageLimits;
+    /**
+     * Additional tools to merge with the agent's built-in tools.
+     * Useful for testing with mock tools or adding custom capabilities.
      */
-    skills?: SkillsConfig;
-    /** Root directory for file operations. Used for path security. */
-    workspaceRoot?: string;
-    /** Handler for agent asking user questions. */
-    askUserHandler?: AskUserHandler;
-    /** Callback fired after each tool execution step. */
-    onStepFinish?: StepFinishCallback;
-    /** Callback for streaming events. */
-    onEvent?: StreamEventCallback;
-    /** Telemetry configuration for OpenTelemetry-based tracing.
-     * When provided, initializes observability and passes telemetry settings
-     * to the underlying AI SDK ToolLoopAgent.
+    tools?: Record<string, Tool>;
+    /**
+     * Enable human-in-the-loop approval for dangerous tools.
      *
-     * Requires `langfuse-vercel` and `@vercel/otel` as optional peer dependencies.
-     * Gracefully degrades (no-op) if not installed.
+     * - `true` — use defaults (shell, browser, file_write, file_edit, file_create require approval)
+     * - `ApprovalConfig` — full control over which tools require approval, timeout behaviour, etc.
      *
-     * @example
-     * ```typescript
-     * const agent = createAgent({
-     *   telemetry: {
-     *     provider: { provider: 'langfuse' },
-     *     functionId: 'my-agent',
-     *   },
-     * });
-     * ```
+     * @default false (no approval required)
      */
-    telemetry?: {
-        /** Observability provider config (e.g., Langfuse keys/URL). */
-        provider?: ObservabilityConfig;
-        /** Identifier for this agent function in traces. Defaults to `agent:<agentId>`. */
-        functionId?: string;
-        /** Additional metadata to include in traces. */
-        metadata?: Record<string, unknown>;
-    };
-}
-/** Predefined agent roles with associated configurations. */
-export type AgentRole = 'generic' | 'coder' | 'researcher' | 'analyst';
-/** Supported model providers. */
-export type ModelProvider = 'openrouter' | 'ollama' | 'openai' | (string & {});
-/** Predefined tool presets. */
-export type ToolPreset = 'none' | 'minimal' | 'standard' | 'full';
-/** Custom stop condition function. */
-export type StopFunction = (ctx: StopContext) => boolean;
-/** Context passed to stop condition function. */
-export interface StopContext {
-    steps: StepResult<ToolSet>[];
-    stepCount: number;
+    approval?: boolean | ApprovalConfig;
 }
-/** Handler for user interaction requests. */
-export type AskUserHandler = (question: string) => Promise<string>;
-/** Callback for step completion. */
-export type StepFinishCallback = (step: StepResult<ToolSet>, index: number) => void | Promise<void>;
 /**
- * Callback for streaming events.
- * Re-exported from types/streaming.ts — the canonical source with full type safety.
+ * An agent instance. Stream-only — no generate().
  */
-export type { StreamEvent, StreamEventCallback } from './streaming.js';
-/** Configuration for a sub-agent role. */
-export interface SubAgentConfig {
-    /** Custom instructions for this sub-agent role. */
-    instructions?: string;
-    /** Tools available to this sub-agent. */
-    tools?: string[];
-    /** Model name/identifier for this sub-agent. */
-    model?: string;
-    /** Maximum steps for the sub-agent. Default: 5 */
-    maxSteps?: number;
-}
-/** Configuration for workflow durability. */
-export interface WorkflowOptions {
-    /** Default retry count for failed tool executions. Default: 3 */
-    defaultRetryCount?: number;
-    /** Default timeout for tool executions. Format: "30s", "5m", "1h". Default: "5m" */
-    defaultTimeout?: string;
-    /** Whether independent tools should run in parallel. Default: true */
-    parallelIndependent?: boolean;
-    /** Storage backend for workflow state. Default: 'memory' */
-    storage?: 'vercel' | 'sqlite' | 'memory';
-    /** Workflow run ID for resumption. */
-    workflowRunId?: string;
+export interface Agent {
+    /** The agent's name. */
+    readonly name: string;
+    /** Initialize async resources (memory, telemetry). Called automatically by stream(). */
+    init(): Promise<void>;
+    /**
+     * Stream a response. This is the only way to run an agent.
+     * Returns the AI SDK stream result.
+     */
+    stream(input: {
+        prompt: string;
+    }): Promise<AgentStreamResult>;
+    /** Get the current system prompt (includes auto-injected context + memory). */
+    getSystemPrompt(): string;
+    /** Get the list of all tool names available to this agent. */
+    getToolNames(): string[];
 }
-/** Configuration for the markdown-based memory system. */
-export interface MemoryOptions {
-    /** Directory for project-local memory files. Default: '.agntk' */
-    projectDir?: string;
-    /** Directory for global (cross-project) memory files. Default: '~/.agntk' */
-    globalDir?: string;
-    /** Custom MemoryStore implementation. Overrides file-based defaults. */
-    store?: import('../memory/types').MemoryStore;
+/**
+ * Stream result from an agent.
+ * Wraps the AI SDK ToolLoopAgent stream result with additional metadata.
+ */
+export interface AgentStreamResult {
+    /** Async iterable of stream chunks (text deltas, tool calls, tool results, etc.) */
+    fullStream: AsyncIterable<{
+        type: string;
+        text?: string;
+        [key: string]: unknown;
+    }>;
+    /** Promise-like that resolves to the final text output. */
+    text: PromiseLike<string>;
+    /** Promise-like that resolves to token usage. */
+    usage: PromiseLike<LanguageModelUsage>;
 }
 //# sourceMappingURL=agent.d.ts.map

package/dist/types/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/types/agent.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EAAe,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAMlE;;GAEG;AACH,MAAM,WAAW,YAAY;IAK3B,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B,sEAAsE;IACtE,IAAI,CAAC,EAAE,SAAS,CAAC;IAEjB,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;IAMjB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAE1B,yCAAyC;IACzC,QAAQ,CAAC,EAAE,eAAe,GAAG,WAAW,GAAG,YAAY,CAAC;IAExD;;;;;;;;;;OAUG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAM9B,oEAAoE;IACpE,KAAK,CAAC,EAAE,aAAa,CAAC;IAEtB,4DAA4D;IAC5D,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAE7B,yDAAyD;IACzD,UAAU,CAAC,EAAE,UAAU,CAAC;IAExB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAEvB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAExB,6EAA6E;IAC7E,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;;;;;;;;;;;OAaG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,cAAc,CAAC;IAEpC;;;;;;;;;;;;OAYG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAM9B,uEAAuE;IACvE,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAE/C,oFAAoF;IACpF,aAAa,CAAC,EAAE,MAAM,CAAC;IAMvB,iGAAiG;IACjG,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAMnC,0EAA0E;IAC1E,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,6CAA6C;IAC7C,eAAe,CAAC,EAAE,eAAe,CAAC;IAMlC;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IAEvB,uCAAuC;IACvC,aAAa,CAAC,EAAE,aAAa,CAAC;IAM9B;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IAMtB,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,CAAC;IAMvB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,cAAc,CAAC;IAEhC,qDAAqD;IACrD,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAElC,qCAAqC;IACrC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAM9B;;;;;;;;;;;;;;;;OAgBG;IACH,SAAS,CAAC,EAAE;QACV,+DAA+D;QAC/D,QAAQ,CAAC,EAAE,mBAAmB,CAAC;QAC/B,mFAAmF;QACnF,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,gDAAgD;QAChD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,CAAC;CACH;AAMD,6DAA6D;AAC7D,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,YAAY,GAAG,SAAS,CAAC;AAEvE,iCAAiC;AACjC,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,QAAQ,GAAG,QAAQ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAE/E,+BAA+B;AAC/B,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AAElE,sCAAsC;AACtC,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC;AAEzD,iDAAiD;AACjD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,6CAA6C;AAC7C,MAAM,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEnE,oCAAoC;AACpC,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEpG;;;GAGG;AACH,YAAY,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAMpE,0CAA0C;AAC1C,MAAM,WAAW,cAAc;IAC7B,mDAAmD;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,yCAAyC;IACzC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjB,gDAAgD;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD,6CAA6C;AAC7C,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAE3B,oFAAoF;IACpF,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,sEAAsE;IACtE,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B,4DAA4D;IAC5D,OAAO,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAEzC,sCAAsC;IACtC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAMD,0DAA0D;AAC1D,MAAM,WAAW,aAAa;IAC5B,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,wEAAwE;IACxE,KAAK,CAAC,EAAE,OAAO,iBAAiB,EAAE,WAAW,CAAC;CAC/C"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/types/agent.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAMxD;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAIvB;;;;OAIG;IACH,KAAK,CAAC,EAAE,aAAa,CAAC;IAEtB;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAE1B;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAE7B;;;;;;;OAOG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,cAAc,CAAC;CACrC;AAMD;;GAEG;AACH,MAAM,WAAW,KAAK;IACpB,wBAAwB;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,wFAAwF;IACxF,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtB;;;OAGG;IACH,MAAM,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAE9D,+EAA+E;IAC/E,eAAe,IAAI,MAAM,CAAC;IAE1B,8DAA8D;IAC9D,YAAY,IAAI,MAAM,EAAE,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,oFAAoF;IACpF,UAAU,EAAE,aAAa,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC,CAAC;IACnF,2DAA2D;IAC3D,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1B,iDAAiD;IACjD,KAAK,EAAE,WAAW,CAAC,kBAAkB,CAAC,CAAC;CACxC"}

package/dist/types/agent.js

@@ -1,6 +1,8 @@
 /**
- * @fileoverview Core type definitions for AgentOptions and related configuration types.
- * These types define the interface for the createAgent() factory function.
+ * @fileoverview Core type definitions for the agent API.
+ *
+ * The agent is a fully-equipped worker. You give it a name, instructions,
+ * and a prompt. Everything else is auto-detected from the environment.
  */
 export {};
 //# sourceMappingURL=agent.js.map

package/dist/types/agent.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/types/agent.ts"],"names":[],"mappings":"AAAA;;;GAGG"}
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/types/agent.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/types/index.d.ts

@@ -1,7 +1,7 @@
 /**
  * @fileoverview Type exports for @agntk/core
  */
-export type { AgentOptions, AgentRole, ModelProvider, ToolPreset, StopFunction, StopContext, AskUserHandler, StepFinishCallback, StreamEventCallback, StreamEvent, SubAgentConfig, WorkflowOptions, MemoryOptions, } from './agent.js';
+export type { AgentOptions, Agent, AgentStreamResult, } from './agent.js';
 export { ToolErrorType, ToolError, } from './lifecycle.js';
 export type { ToolLifecycle, ToolContext, ValidationResult, BypassResult, DurabilityConfig, LifecycleToolConfig, ToolExecuteFn, InferToolInput, InferToolOutput, StreamWriter, } from './lifecycle.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,YAAY,EACV,YAAY,EACZ,SAAS,EACT,aAAa,EACb,UAAU,EACV,YAAY,EACZ,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,WAAW,EACX,cAAc,EACd,eAAe,EACf,aAAa,GACd,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,aAAa,EACb,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,EACb,cAAc,EACd,eAAe,EACf,YAAY,GACb,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,YAAY,EACV,YAAY,EACZ,KAAK,EACL,iBAAiB,GAClB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,aAAa,EACb,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,YAAY,EACV,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,aAAa,EACb,cAAc,EACd,eAAe,EACf,YAAY,GACb,MAAM,aAAa,CAAC"}

package/dist/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAmBH,uBAAuB;AACvB,OAAO,EACL,aAAa,EACb,SAAS,GACV,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AASH,uBAAuB;AACvB,OAAO,EACL,aAAa,EACb,SAAS,GACV,MAAM,aAAa,CAAC"}