@amodalai/runtime 0.1.0

package/dist/src/agent/tool-context-builder.test.js

@@ -0,0 +1,152 @@
+/**
+ * @license
+ * Copyright 2025 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { buildToolContext } from './tool-context-builder.js';
+// Mock the request-helper module
+const { mockMakeApiRequest } = vi.hoisted(() => ({
+    mockMakeApiRequest: vi.fn().mockResolvedValue({ output: '{"ok":true}' }),
+}));
+vi.mock('./request-helper.js', () => ({
+    makeApiRequest: mockMakeApiRequest,
+}));
+function makeTool(overrides = {}) {
+    return {
+        name: 'test_tool',
+        description: 'Test tool',
+        parameters: {},
+        confirm: false,
+        timeout: 5000,
+        env: ['ALLOWED_KEY'],
+        handlerPath: '/tmp/handler.ts',
+        location: '/tmp',
+        hasPackageJson: false,
+        hasDockerfile: false,
+        hasSetupScript: false,
+        hasRequirementsTxt: false,
+        sandboxLanguage: 'typescript',
+        ...overrides,
+    };
+}
+function makeSession() {
+    return {
+        id: 'test-session',
+        runtime: {
+            repo: {
+                config: { name: 'test', version: '1.0.0', models: { main: { provider: 'anthropic', model: 'test' } } },
+                connections: new Map(),
+                skills: [],
+                agents: {},
+                automations: [],
+                knowledge: [],
+                evals: [],
+                tools: [],
+            },
+            connectionsMap: {},
+            userRoles: ['analyst'],
+            fieldScrubber: null,
+            telemetry: { logScrub: vi.fn() },
+            actionGate: { evaluate: vi.fn() },
+            outputPipeline: { process: vi.fn() },
+            compiledContext: { systemPrompt: '', tokenUsage: { total: 0, used: 0, remaining: 0, sectionBreakdown: {} }, sections: [] },
+        },
+        tenantId: 'test-tenant',
+        conversationHistory: [],
+        createdAt: Date.now(),
+        lastAccessedAt: Date.now(),
+        planModeManager: { isActive: vi.fn(() => false), enter: vi.fn(), exit: vi.fn(), getPlanningReminder: vi.fn(), getApprovedPlanContext: vi.fn() },
+        exploreConfig: { model: { provider: 'anthropic', model: 'test' }, maxTurns: 5, maxDepth: 2, systemPrompt: '' },
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    };
+}
+describe('buildToolContext', () => {
+    const signal = AbortSignal.timeout(10000);
+    beforeEach(() => {
+        vi.clearAllMocks();
+    });
+    it('provides user roles', () => {
+        const session = makeSession();
+        const ctx = buildToolContext(session, makeTool(), signal);
+        expect(ctx.user.roles).toEqual(['analyst']);
+    });
+    it('provides env() that respects allowlist', () => {
+        process.env['ALLOWED_KEY'] = 'secret-value';
+        process.env['BLOCKED_KEY'] = 'blocked-value';
+        const ctx = buildToolContext(makeSession(), makeTool(), signal);
+        expect(ctx.env('ALLOWED_KEY')).toBe('secret-value');
+        expect(ctx.env('BLOCKED_KEY')).toBeUndefined();
+        delete process.env['ALLOWED_KEY'];
+        delete process.env['BLOCKED_KEY'];
+    });
+    it('provides log() that writes to stderr', () => {
+        const stderrSpy = vi.spyOn(process.stderr, 'write').mockImplementation(() => true);
+        const ctx = buildToolContext(makeSession(), makeTool(), signal);
+        ctx.log('hello world');
+        expect(stderrSpy).toHaveBeenCalledWith(expect.stringContaining('hello world'));
+        stderrSpy.mockRestore();
+    });
+    it('provides an abort signal', () => {
+        const ctx = buildToolContext(makeSession(), makeTool(), signal);
+        expect(ctx.signal).toBeDefined();
+        expect(ctx.signal.aborted).toBe(false);
+    });
+    it('rejects non-GET requests when confirm is false', async () => {
+        const ctx = buildToolContext(makeSession(), makeTool({ confirm: false }), signal);
+        await expect(ctx.request('crm', '/deals', { method: 'POST' })).rejects.toThrow(/only GET requests are allowed/);
+    });
+    it('allows non-GET requests when confirm is true', async () => {
+        mockMakeApiRequest.mockResolvedValueOnce({ output: '{"ok":true}' });
+        const ctx = buildToolContext(makeSession(), makeTool({ confirm: true }), signal);
+        const result = await ctx.request('crm', '/deals', { method: 'POST' });
+        expect(result).toEqual({ ok: true });
+        expect(mockMakeApiRequest).toHaveBeenCalledOnce();
+    });
+    it('allows GET requests when confirm is false', async () => {
+        mockMakeApiRequest.mockResolvedValueOnce({ output: '{"ok":true}' });
+        const ctx = buildToolContext(makeSession(), makeTool({ confirm: false }), signal);
+        const result = await ctx.request('crm', '/deals');
+        expect(result).toEqual({ ok: true });
+        expect(mockMakeApiRequest).toHaveBeenCalledOnce();
+    });
+    it('provides exec() that runs shell commands', async () => {
+        const ctx = buildToolContext(makeSession(), makeTool(), signal);
+        const result = await ctx.exec('echo "hello from exec"');
+        expect(result.exitCode).toBe(0);
+        expect(result.stdout.trim()).toBe('hello from exec');
+    });
+    it('exec() captures non-zero exit codes', async () => {
+        const ctx = buildToolContext(makeSession(), makeTool(), signal);
+        const result = await ctx.exec('exit 42');
+        expect(result.exitCode).toBe(42);
+    });
+    it('exec() uses tool location as default cwd', async () => {
+        const ctx = buildToolContext(makeSession(), makeTool({ location: '/tmp' }), signal);
+        const result = await ctx.exec('pwd');
+        // macOS: /tmp is a symlink to /private/tmp
+        expect(result.stdout.trim()).toMatch(/\/?tmp$/);
+    });
+    it('exec() delegates to session.shellExecutor when present', async () => {
+        const mockShellExecutor = {
+            exec: vi.fn().mockResolvedValue({ stdout: 'sandbox output', stderr: '', exitCode: 0 }),
+        };
+        const session = makeSession();
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        session.shellExecutor = mockShellExecutor;
+        const ctx = buildToolContext(session, makeTool(), signal);
+        const result = await ctx.exec('echo hello');
+        expect(result.stdout).toBe('sandbox output');
+        expect(result.exitCode).toBe(0);
+        expect(mockShellExecutor.exec).toHaveBeenCalledWith('echo hello', 5000, expect.any(AbortSignal));
+    });
+    it('exec() falls back to local when no shellExecutor', async () => {
+        const session = makeSession();
+        // No shellExecutor set
+        const ctx = buildToolContext(session, makeTool(), signal);
+        const result = await ctx.exec('echo "local fallback"');
+        expect(result.exitCode).toBe(0);
+        expect(result.stdout.trim()).toBe('local fallback');
+    });
+});
+//# sourceMappingURL=tool-context-builder.test.js.map

package/dist/src/agent/tool-context-builder.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-context-builder.test.js","sourceRoot":"","sources":["../../../src/agent/tool-context-builder.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAC,MAAM,QAAQ,CAAC;AAE5D,OAAO,EAAC,gBAAgB,EAAC,MAAM,2BAA2B,CAAC;AAG3D,iCAAiC;AACjC,MAAM,EAAC,kBAAkB,EAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7C,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAC,MAAM,EAAE,aAAa,EAAC,CAAC;CACvE,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,cAAc,EAAE,kBAAkB;CACnC,CAAC,CAAC,CAAC;AAEJ,SAAS,QAAQ,CAAC,YAAiC,EAAE;IACnD,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,WAAW;QACxB,UAAU,EAAE,EAAE;QACd,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,IAAI;QACb,GAAG,EAAE,CAAC,aAAa,CAAC;QACpB,WAAW,EAAE,iBAAiB;QAC9B,QAAQ,EAAE,MAAM;QAChB,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,KAAK;QACpB,cAAc,EAAE,KAAK;QACrB,kBAAkB,EAAE,KAAK;QACzB,eAAe,EAAE,YAAY;QAC7B,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,WAAW;IAClB,OAAO;QACL,EAAE,EAAE,cAAc;QAClB,OAAO,EAAE;YACP,IAAI,EAAE;gBACJ,MAAM,EAAE,EAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAC,IAAI,EAAE,EAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAC,EAAC,EAAC;gBAChG,WAAW,EAAE,IAAI,GAAG,EAAE;gBACtB,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,EAAE;gBACV,WAAW,EAAE,EAAE;gBACf,SAAS,EAAE,EAAE;gBACb,KAAK,EAAE,EAAE;gBACT,KAAK,EAAE,EAAE;aACV;YACD,cAAc,EAAE,EAAE;YAClB,SAAS,EAAE,CAAC,SAAS,CAAC;YACtB,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,EAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,EAAC;YAC9B,UAAU,EAAE,EAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,EAAC;YAC/B,cAAc,EAAE,EAAC,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,EAAC;YAClC,eAAe,EAAE,EAAC,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,EAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAC,EAAE,QAAQ,EAAE,EAAE,EAAC;SACvH;QACD,QAAQ,EAAE,aAAa;QACvB,mBAAmB,EAAE,EAAE;QACvB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;QAC1B,eAAe,EAAE,EAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAC;QAC7I,aAAa,EAAE,EAAC,KAAK,EAAE,EAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAC;QAC5G,8DAA8D;KACtC,CAAC;AAC3B,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE1C,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,cAAc,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,eAAe,CAAC;QAE7C,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;QAEhE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAE/C,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAClC,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,SAAS,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnF,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;QAEhE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACvB,MAAM,CAAC,SAAS,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;QAE/E,SAAS,CAAC,WAAW,EAAE,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,EAAC,OAAO,EAAE,KAAK,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAEhF,MAAM,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAC,MAAM,EAAE,MAAM,EAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC1E,+BAA+B,CAChC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,kBAAkB,CAAC,qBAAqB,CAAC,EAAC,MAAM,EAAE,aAAa,EAAC,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,EAAC,OAAO,EAAE,IAAI,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAE/E,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAC,MAAM,EAAE,MAAM,EAAC,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAC,EAAE,EAAE,IAAI,EAAC,CAAC,CAAC;QACnC,MAAM,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,kBAAkB,CAAC,qBAAqB,CAAC,EAAC,MAAM,EAAE,aAAa,EAAC,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,EAAC,OAAO,EAAE,KAAK,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAEhF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAC,EAAE,EAAE,IAAI,EAAC,CAAC,CAAC;QACnC,MAAM,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,EAAC,QAAQ,EAAE,MAAM,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,2CAA2C;QAC3C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,iBAAiB,GAAG;YACxB,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAC,CAAC;SACrF,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,8DAA8D;QAC7D,OAAe,CAAC,aAAa,GAAG,iBAAiB,CAAC;QAEnD,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAE5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACjD,YAAY,EACZ,IAAI,EACJ,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CACxB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,uBAAuB;QACvB,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAEvD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/agent/tool-executor-local.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @license
+ * Copyright 2025 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import type { CustomToolExecutor, CustomToolContext, LoadedTool } from '@amodalai/core';
+/**
+ * Executes custom tool handlers locally via dynamic import.
+ */
+export declare class LocalToolExecutor implements CustomToolExecutor {
+    private readonly handlerCache;
+    execute(tool: LoadedTool, params: Record<string, unknown>, ctx: CustomToolContext): Promise<unknown>;
+    dispose(): void;
+    private loadHandler;
+}

package/dist/src/agent/tool-executor-local.js

@@ -0,0 +1,74 @@
+/**
+ * @license
+ * Copyright 2025 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import { pathToFileURL } from 'node:url';
+/**
+ * Executes custom tool handlers locally via dynamic import.
+ */
+export class LocalToolExecutor {
+    handlerCache = new Map();
+    async execute(tool, params, ctx) {
+        try {
+            const handler = await this.loadHandler(tool);
+            const fn = resolveHandlerFn(handler, tool.name);
+            const result = await fn(params, ctx);
+            // Wrap non-object results
+            if (result === null || result === undefined) {
+                return { result: null };
+            }
+            if (typeof result !== 'object' || Array.isArray(result)) {
+                return { result };
+            }
+            return result;
+        }
+        catch (err) {
+            if (ctx.signal.aborted) {
+                return { error: 'Tool execution aborted' };
+            }
+            const message = err instanceof Error ? err.message : String(err);
+            return { error: message };
+        }
+    }
+    dispose() {
+        this.handlerCache.clear();
+    }
+    async loadHandler(tool) {
+        const cached = this.handlerCache.get(tool.handlerPath);
+        if (cached) {
+            return cached;
+        }
+        const moduleUrl = pathToFileURL(tool.handlerPath).href;
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- dynamic import returns unknown
+        const mod = await import(moduleUrl);
+        if (typeof mod.default !== 'function' && !isDefineToolResult(mod.default)) {
+            throw new Error(`Tool "${tool.name}" handler must export a default function or use defineToolHandler()`);
+        }
+        this.handlerCache.set(tool.handlerPath, mod);
+        return mod;
+    }
+}
+/**
+ * Check if a default export is a defineToolHandler result.
+ */
+function isDefineToolResult(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        '__toolHandler' in value &&
+        value['__toolHandler'] === true);
+}
+/**
+ * Resolve the actual handler function from a module's default export.
+ * Handles both plain functions and defineToolHandler results.
+ */
+function resolveHandlerFn(mod, toolName) {
+    if (typeof mod.default === 'function') {
+        return mod.default;
+    }
+    if (isDefineToolResult(mod.default)) {
+        return mod.default.handler;
+    }
+    throw new Error(`Tool "${toolName}" handler must export a default function or use defineToolHandler()`);
+}
+//# sourceMappingURL=tool-executor-local.js.map

package/dist/src/agent/tool-executor-local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-executor-local.js","sourceRoot":"","sources":["../../../src/agent/tool-executor-local.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,aAAa,EAAC,MAAM,UAAU,CAAC;AASvC;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACX,YAAY,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEjE,KAAK,CAAC,OAAO,CACX,IAAgB,EAChB,MAA+B,EAC/B,GAAsB;QAEtB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAErC,0BAA0B;YAC1B,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC5C,OAAO,EAAC,MAAM,EAAE,IAAI,EAAC,CAAC;YACxB,CAAC;YACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxD,OAAO,EAAC,MAAM,EAAC,CAAC;YAClB,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACvB,OAAO,EAAC,KAAK,EAAE,wBAAwB,EAAC,CAAC;YAC3C,CAAC;YACD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,EAAC,KAAK,EAAE,OAAO,EAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAgB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC;QACvD,yGAAyG;QACzG,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAA6B,CAAC;QAEhE,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,CAAC,IAAI,qEAAqE,CACxF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC7C,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,KAAc;IACxC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,eAAe,IAAI,KAAK;QACxB,KAAK,CAAC,eAAe,CAAC,KAAK,IAAI,CAChC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,GAAkB,EAAE,QAAgB;IAC5D,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACtC,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;IAC7B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,SAAS,QAAQ,qEAAqE,CAAC,CAAC;AAC1G,CAAC"}

package/dist/src/agent/tool-executor-local.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2025 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+export {};

package/dist/src/agent/tool-executor-local.test.js

@@ -0,0 +1,116 @@
+/**
+ * @license
+ * Copyright 2025 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { mkdtempSync, mkdirSync, writeFileSync, rmSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+import { LocalToolExecutor } from './tool-executor-local.js';
+describe('LocalToolExecutor', () => {
+    let tempDir;
+    let executor;
+    beforeEach(() => {
+        tempDir = mkdtempSync(join(tmpdir(), 'tool-executor-test-'));
+        executor = new LocalToolExecutor();
+    });
+    afterEach(() => {
+        executor.dispose();
+        rmSync(tempDir, { recursive: true, force: true });
+    });
+    function createHandler(name, code) {
+        const handlerDir = join(tempDir, name);
+        mkdirSync(handlerDir, { recursive: true });
+        // Write as .mjs so dynamic import works without TS compilation
+        const handlerPath = join(handlerDir, 'handler.mjs');
+        writeFileSync(handlerPath, code);
+        return handlerPath;
+    }
+    function makeTool(handlerPath, overrides = {}) {
+        return {
+            name: 'test_tool',
+            description: 'Test tool',
+            parameters: {},
+            confirm: false,
+            timeout: 5000,
+            env: [],
+            handlerPath,
+            location: tempDir,
+            hasPackageJson: false,
+            hasDockerfile: false,
+            hasSetupScript: false,
+            hasRequirementsTxt: false,
+            sandboxLanguage: 'typescript',
+            ...overrides,
+        };
+    }
+    function makeCtx() {
+        return {
+            exec: async () => ({ stdout: '', stderr: '', exitCode: 0 }),
+            request: async () => ({}),
+            env: () => undefined,
+            log: () => { },
+            user: { roles: [] },
+            signal: AbortSignal.timeout(10000),
+        };
+    }
+    it('executes a handler that returns an object', async () => {
+        const handlerPath = createHandler('obj-handler', 'export default async (params) => ({ value: params.x * 2 });');
+        const tool = makeTool(handlerPath);
+        const result = await executor.execute(tool, { x: 5 }, makeCtx());
+        expect(result).toEqual({ value: 10 });
+    });
+    it('wraps non-object return values', async () => {
+        const handlerPath = createHandler('num-handler', 'export default async () => 42;');
+        const tool = makeTool(handlerPath);
+        const result = await executor.execute(tool, {}, makeCtx());
+        expect(result).toEqual({ result: 42 });
+    });
+    it('wraps null return values', async () => {
+        const handlerPath = createHandler('null-handler', 'export default async () => null;');
+        const tool = makeTool(handlerPath);
+        const result = await executor.execute(tool, {}, makeCtx());
+        expect(result).toEqual({ result: null });
+    });
+    it('wraps array return values', async () => {
+        const handlerPath = createHandler('arr-handler', 'export default async () => [1, 2, 3];');
+        const tool = makeTool(handlerPath);
+        const result = await executor.execute(tool, {}, makeCtx());
+        expect(result).toEqual({ result: [1, 2, 3] });
+    });
+    it('catches handler errors', async () => {
+        const handlerPath = createHandler('err-handler', 'export default async () => { throw new Error("boom"); };');
+        const tool = makeTool(handlerPath);
+        const result = await executor.execute(tool, {}, makeCtx());
+        expect(result).toEqual({ error: 'boom' });
+    });
+    it('caches imported modules', async () => {
+        const handlerPath = createHandler('cache-handler', 'let count = 0; export default async () => ({ count: ++count });');
+        const tool = makeTool(handlerPath);
+        const ctx = makeCtx();
+        const r1 = await executor.execute(tool, {}, ctx);
+        const r2 = await executor.execute(tool, {}, ctx);
+        // Both calls use the same module (count increments)
+        expect(r1).toEqual({ count: 1 });
+        expect(r2).toEqual({ count: 2 });
+    });
+    it('clears cache on dispose', async () => {
+        const handlerPath = createHandler('dispose-handler', 'export default async () => ({ ok: true });');
+        const tool = makeTool(handlerPath);
+        await executor.execute(tool, {}, makeCtx());
+        executor.dispose();
+        // After dispose, a new executor needs to reimport
+        const executor2 = new LocalToolExecutor();
+        const result = await executor2.execute(tool, {}, makeCtx());
+        expect(result).toEqual({ ok: true });
+        executor2.dispose();
+    });
+    it('throws for handler without default export', async () => {
+        const handlerPath = createHandler('no-default', 'export const handler = async () => ({});');
+        const tool = makeTool(handlerPath);
+        const result = await executor.execute(tool, {}, makeCtx());
+        expect(result).toHaveProperty('error');
+    });
+});
+//# sourceMappingURL=tool-executor-local.test.js.map

package/dist/src/agent/tool-executor-local.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-executor-local.test.js","sourceRoot":"","sources":["../../../src/agent/tool-executor-local.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAC,MAAM,QAAQ,CAAC;AACnE,OAAO,EAAC,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAC,MAAM,SAAS,CAAC;AACtE,OAAO,EAAC,IAAI,EAAC,MAAM,WAAW,CAAC;AAC/B,OAAO,EAAC,MAAM,EAAC,MAAM,SAAS,CAAC;AAE/B,OAAO,EAAC,iBAAiB,EAAC,MAAM,0BAA0B,CAAC;AAE3D,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,IAAI,OAAe,CAAC;IACpB,IAAI,QAA2B,CAAC;IAEhC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC7D,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,QAAQ,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,CAAC,OAAO,EAAE,EAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,SAAS,aAAa,CAAC,IAAY,EAAE,IAAY;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACvC,SAAS,CAAC,UAAU,EAAE,EAAC,SAAS,EAAE,IAAI,EAAC,CAAC,CAAC;QACzC,+DAA+D;QAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACpD,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACjC,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,SAAS,QAAQ,CAAC,WAAmB,EAAE,YAAiC,EAAE;QACxE,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,WAAW,EAAE,WAAW;YACxB,UAAU,EAAE,EAAE;YACd,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,EAAE;YACP,WAAW;YACX,QAAQ,EAAE,OAAO;YACjB,cAAc,EAAE,KAAK;YACrB,aAAa,EAAE,KAAK;YACpB,cAAc,EAAE,KAAK;YACrB,kBAAkB,EAAE,KAAK;YACzB,eAAe,EAAE,YAAY;YAC7B,GAAG,SAAS;SACb,CAAC;IACJ,CAAC;IAED,SAAS,OAAO;QACd,OAAO;YACL,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAC,CAAC;YACzD,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;YACzB,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS;YACpB,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC;YACb,IAAI,EAAE,EAAC,KAAK,EAAE,EAAE,EAAC;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC;IACJ,CAAC;IAED,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,WAAW,GAAG,aAAa,CAAC,aAAa,EAC7C,6DAA6D,CAC9D,CAAC;QACF,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAC,CAAC,EAAE,CAAC,EAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAC,KAAK,EAAE,EAAE,EAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,WAAW,GAAG,aAAa,CAAC,aAAa,EAC7C,gCAAgC,CACjC,CAAC;QACF,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAC,MAAM,EAAE,EAAE,EAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,WAAW,GAAG,aAAa,CAAC,cAAc,EAC9C,kCAAkC,CACnC,CAAC;QACF,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAC,MAAM,EAAE,IAAI,EAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,WAAW,GAAG,aAAa,CAAC,aAAa,EAC7C,uCAAuC,CACxC,CAAC;QACF,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,WAAW,GAAG,aAAa,CAAC,aAAa,EAC7C,0DAA0D,CAC3D,CAAC;QACF,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAC,KAAK,EAAE,MAAM,EAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,WAAW,GAAG,aAAa,CAAC,eAAe,EAC/C,iEAAiE,CAClE,CAAC;QACF,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QAEtB,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAEjD,oDAAoD;QACpD,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAC,KAAK,EAAE,CAAC,EAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAC,KAAK,EAAE,CAAC,EAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,WAAW,GAAG,aAAa,CAAC,iBAAiB,EACjD,4CAA4C,CAC7C,CAAC;QACF,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEnC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5C,QAAQ,CAAC,OAAO,EAAE,CAAC;QAEnB,kDAAkD;QAClD,MAAM,SAAS,GAAG,IAAI,iBAAiB,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAC,EAAE,EAAE,IAAI,EAAC,CAAC,CAAC;QACnC,SAAS,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,WAAW,GAAG,aAAa,CAAC,YAAY,EAC5C,0CAA0C,CAC3C,CAAC;QACF,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/agent/tool-harness-template.d.ts

@@ -0,0 +1,23 @@
+/**
+ * @license
+ * Copyright 2025 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+/**
+ * Generates the entry.js content for a sandbox tool wrapper.
+ *
+ * This script runs inside a Daytona sandbox workspace:
+ * 1. Reads invocation payload from /tmp/invocation.json
+ * 2. Imports the tool handler
+ * 3. Creates a proxy ToolContext (where request() and exec() delegate to the host)
+ * 4. Executes the handler
+ * 5. Writes JSON result to stdout
+ */
+export declare function generateToolHarnessEntry(handlerRelativePath: string): string;
+/**
+ * Generates a default Dockerfile for tools without a custom one.
+ *
+ * The image contains Node 22 (Alpine), installs npm deps if present,
+ * and copies the full tool directory into /tool.
+ */
+export declare function generateDefaultDockerfile(hasPackageJson: boolean): string;

package/dist/src/agent/tool-harness-template.js

@@ -0,0 +1,94 @@
+/**
+ * @license
+ * Copyright 2025 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+/**
+ * Generates the entry.js content for a sandbox tool wrapper.
+ *
+ * This script runs inside a Daytona sandbox workspace:
+ * 1. Reads invocation payload from /tmp/invocation.json
+ * 2. Imports the tool handler
+ * 3. Creates a proxy ToolContext (where request() and exec() delegate to the host)
+ * 4. Executes the handler
+ * 5. Writes JSON result to stdout
+ */
+export function generateToolHarnessEntry(handlerRelativePath) {
+    return `
+import {readFileSync} from 'node:fs';
+import {execSync} from 'node:child_process';
+import handler from '${handlerRelativePath}';
+
+const payload = JSON.parse(readFileSync('/tmp/invocation.json', 'utf-8'));
+const {params, callbackUrl} = payload;
+
+// Resolve handler function — supports both plain functions and defineToolHandler
+const fn = typeof handler === 'function'
+  ? handler
+  : (handler.__toolHandler ? handler.handler : handler);
+
+const ctx = {
+  async request(connection, endpoint, options) {
+    const res = await fetch(callbackUrl + '/request', {
+      method: 'POST',
+      headers: {'Content-Type': 'application/json'},
+      body: JSON.stringify({connection, endpoint, ...options}),
+    });
+    return res.json();
+  },
+  exec(command, options) {
+    try {
+      const stdout = execSync(command, {
+        cwd: options?.cwd ?? '/tool',
+        timeout: options?.timeout ?? payload.timeout ?? 30000,
+        maxBuffer: 1024 * 1024,
+        encoding: 'utf-8',
+      });
+      return { stdout, stderr: '', exitCode: 0 };
+    } catch (err) {
+      return {
+        stdout: err.stdout ?? '',
+        stderr: err.stderr ?? err.message,
+        exitCode: typeof err.status === 'number' ? err.status : 1,
+      };
+    }
+  },
+  env(name) {
+    return process.env[name];
+  },
+  log(message) {
+    process.stderr.write('[tool] ' + message + '\\n');
+  },
+  user: payload.user ?? {roles: []},
+  signal: AbortSignal.timeout(payload.timeout ?? 30000),
+};
+
+try {
+  const result = await fn(params, ctx);
+  process.stdout.write(JSON.stringify({result}) + '\\n');
+} catch (err) {
+  process.stdout.write(JSON.stringify({error: err.message ?? String(err)}) + '\\n');
+  process.exit(1);
+}
+`.trim();
+}
+/**
+ * Generates a default Dockerfile for tools without a custom one.
+ *
+ * The image contains Node 22 (Alpine), installs npm deps if present,
+ * and copies the full tool directory into /tool.
+ */
+export function generateDefaultDockerfile(hasPackageJson) {
+    const lines = [
+        'FROM node:22-alpine',
+        'WORKDIR /tool',
+    ];
+    if (hasPackageJson) {
+        lines.push('COPY package.json package-lock.json* ./');
+        lines.push('RUN npm install --production');
+    }
+    lines.push('COPY . .');
+    lines.push('');
+    return lines.join('\n');
+}
+//# sourceMappingURL=tool-harness-template.js.map

package/dist/src/agent/tool-harness-template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-harness-template.js","sourceRoot":"","sources":["../../../src/agent/tool-harness-template.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,mBAA2B;IAClE,OAAO;;;uBAGc,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqDzC,CAAC,IAAI,EAAE,CAAC;AACT,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,cAAuB;IAC/D,MAAM,KAAK,GAAG;QACZ,qBAAqB;QACrB,eAAe;KAChB,CAAC;IAEF,IAAI,cAAc,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/src/agent/user-context-fetcher.d.ts

@@ -0,0 +1,25 @@
+/**
+ * @license
+ * Copyright 2025 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import type { AmodalRepo } from '@amodalai/core';
+import type { ConnectionsMap } from '@amodalai/core';
+/**
+ * Fetches user context from a configured endpoint.
+ *
+ * The `config.userContext` value is a string like "GET crm/users/me"
+ * (method connection/path). The connection auth is resolved from
+ * the connections map.
+ */
+export declare function fetchUserContext(repo: AmodalRepo, tenantToken: string, connectionsMap: ConnectionsMap): Promise<Record<string, unknown>>;
+interface ParsedSpec {
+    method: string;
+    connection: string;
+    path: string;
+}
+/**
+ * Parse "GET crm/users/me" → {method: "GET", connection: "crm", path: "users/me"}
+ */
+declare function parseUserContextSpec(spec: string): ParsedSpec | null;
+export { parseUserContextSpec as _parseUserContextSpecForTesting };

package/dist/src/agent/user-context-fetcher.js

@@ -0,0 +1,79 @@
+/**
+ * @license
+ * Copyright 2025 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+/**
+ * Fetches user context from a configured endpoint.
+ *
+ * The `config.userContext` value is a string like "GET crm/users/me"
+ * (method connection/path). The connection auth is resolved from
+ * the connections map.
+ */
+export async function fetchUserContext(repo, tenantToken, connectionsMap) {
+    const spec = repo.config.userContext;
+    if (!spec) {
+        return {};
+    }
+    const parsed = parseUserContextSpec(spec);
+    if (!parsed) {
+        return {};
+    }
+    const connConfig = connectionsMap[parsed.connection];
+    if (!connConfig) {
+        return {};
+    }
+    // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- SDK boundary: connections map values are records
+    const baseUrl = connConfig['base_url'];
+    if (!baseUrl) {
+        return {};
+    }
+    const url = `${baseUrl.replace(/\/$/, '')}/${parsed.path.replace(/^\//, '')}`;
+    const headers = {
+        'Content-Type': 'application/json',
+        'Authorization': `Bearer ${tenantToken}`,
+    };
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 5000);
+    try {
+        const response = await fetch(url, {
+            method: parsed.method,
+            headers,
+            signal: controller.signal,
+        });
+        if (!response.ok) {
+            return {};
+        }
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- SDK boundary: expecting JSON object from API
+        const data = (await response.json());
+        return data;
+    }
+    catch {
+        return {};
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+/**
+ * Parse "GET crm/users/me" → {method: "GET", connection: "crm", path: "users/me"}
+ */
+function parseUserContextSpec(spec) {
+    const parts = spec.trim().split(/\s+/);
+    if (parts.length < 2) {
+        return null;
+    }
+    const method = parts[0]?.toUpperCase() ?? '';
+    const fullPath = parts[1] ?? '';
+    const slashIdx = fullPath.indexOf('/');
+    if (slashIdx === -1) {
+        return { method, connection: fullPath, path: '/' };
+    }
+    return {
+        method,
+        connection: fullPath.substring(0, slashIdx),
+        path: fullPath.substring(slashIdx),
+    };
+}
+export { parseUserContextSpec as _parseUserContextSpecForTesting };
+//# sourceMappingURL=user-context-fetcher.js.map

package/dist/src/agent/user-context-fetcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-context-fetcher.js","sourceRoot":"","sources":["../../../src/agent/user-context-fetcher.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAgB,EAChB,WAAmB,EACnB,cAA8B;IAE9B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;IACrC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACrD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,2HAA2H;IAC3H,MAAM,OAAO,GAAI,UAAsC,CAAC,UAAU,CAAuB,CAAC;IAC1F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;IAE9E,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,eAAe,EAAE,UAAU,WAAW,EAAE;KACzC,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;IAE3D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO;YACP,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,uHAAuH;QACvH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;QAChE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAQD;;GAEG;AACH,SAAS,oBAAoB,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEhC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,OAAO,EAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAC,CAAC;IACnD,CAAC;IAED,OAAO;QACL,MAAM;QACN,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC;QAC3C,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,OAAO,EAAC,oBAAoB,IAAI,+BAA+B,EAAC,CAAC"}

package/dist/src/agent/user-context-fetcher.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2025 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+export {};