@assemblyline-agents/runtime 1.0.0 → 3.0.0

package/dist/builtin-tools.js

@@ -1,4 +1,9 @@
-import { approvalNever, normalizeSandboxPath as normalizeCoreSandboxPath } from "@assemblyline-agents/core";
+import { createHash } from "node:crypto";
+import { approvalNever, approvalRequired, normalizeSandboxPath as normalizeCoreSandboxPath } from "@assemblyline-agents/core";
+import { DEFAULT_DELIVERY_FILE_MAX_BYTES, deliveryFileContentType } from "./delivery-queue.js";
+import { internalDeliveryArtifactReason } from "./delivery-artifacts.js";
+import { boundedPositiveIntEnv } from "./env-config.js";
+import { workspaceContentBlobKey } from "./workspace-service.js";
 export const READ_TOOL_NAME = "read";
 export const WRITE_TOOL_NAME = "write";
 export const EDIT_TOOL_NAME = "edit";
@@ -6,12 +11,19 @@ export const DELETE_TOOL_NAME = "delete";
 export const LIST_TOOL_NAME = "list";
 export const GREP_TOOL_NAME = "grep";
 export const BASH_TOOL_NAME = "bash";
-export const ASK_QUESTION_TOOL_NAME = "ask_question";
-export const SPAWN_SUBAGENT_TOOL_NAME = "spawn_subagent";
+export const DELIVER_ARTIFACT_TOOL_NAME = "deliver_artifact";
 export const LOAD_SKILL_TOOL_NAME = "load_skill";
 export const TOOL_SEARCH_TOOL_NAME = "tool_search";
-export const TOOL_DESCRIBE_TOOL_NAME = "tool_describe";
-export const TOOL_CALL_TOOL_NAME = "tool_call";
+export const PAIR_TOOL_NAME = "pair";
+export const HISTORY_SEARCH_TOOL_NAME = "history_search";
+export const FILES_SEARCH_TOOL_NAME = "files_search";
+export const FILES_MOUNT_TOOL_NAME = "files_mount";
+export const WORKSPACE_SEARCH_TOOL_NAME = "workspace_search";
+export const WORKSPACE_STATUS_TOOL_NAME = "workspace_status";
+export const WORKSPACE_CHECKPOINT_CREATE_TOOL_NAME = "workspace_checkpoint_create";
+export const WORKSPACE_CHECKPOINT_LIST_TOOL_NAME = "workspace_checkpoint_list";
+export const WORKSPACE_CHECKPOINT_RESTORE_TOOL_NAME = "workspace_checkpoint_restore";
+export const WORKSPACE_FORK_TOOL_NAME = "workspace_fork";
 export const CORE_HARNESS_TOOL_NAMES = [
     READ_TOOL_NAME,
     WRITE_TOOL_NAME,
@@ -20,12 +32,19 @@ export const CORE_HARNESS_TOOL_NAMES = [
     LIST_TOOL_NAME,
     GREP_TOOL_NAME,
     BASH_TOOL_NAME,
-    ASK_QUESTION_TOOL_NAME,
-    SPAWN_SUBAGENT_TOOL_NAME,
+    DELIVER_ARTIFACT_TOOL_NAME,
     LOAD_SKILL_TOOL_NAME,
     TOOL_SEARCH_TOOL_NAME,
-    TOOL_DESCRIBE_TOOL_NAME,
-    TOOL_CALL_TOOL_NAME
+    PAIR_TOOL_NAME,
+    HISTORY_SEARCH_TOOL_NAME,
+    FILES_SEARCH_TOOL_NAME,
+    FILES_MOUNT_TOOL_NAME,
+    WORKSPACE_SEARCH_TOOL_NAME,
+    WORKSPACE_STATUS_TOOL_NAME,
+    WORKSPACE_CHECKPOINT_CREATE_TOOL_NAME,
+    WORKSPACE_CHECKPOINT_LIST_TOOL_NAME,
+    WORKSPACE_CHECKPOINT_RESTORE_TOOL_NAME,
+    WORKSPACE_FORK_TOOL_NAME
 ];
 const CORE_HARNESS_TOOL_NAME_SET = new Set(CORE_HARNESS_TOOL_NAMES);
 const BUILTIN_SOURCE = {
@@ -38,7 +57,7 @@ const PATH_SCHEMA = {
 };
 const READ_COMPILED_TOOL = {
     name: READ_TOOL_NAME,
-    description: "Read a file from the sandbox filesystem. Lazily hydrates logical OpenEve paths before reading.",
+    description: "Read a file from the sandbox filesystem. Lazily hydrates logical Assembly Line paths before reading.",
     inputSchema: {
         type: "object",
         additionalProperties: false,
@@ -82,7 +101,7 @@ const WRITE_COMPILED_TOOL = {
 };
 const EDIT_COMPILED_TOOL = {
     name: EDIT_TOOL_NAME,
-    description: "Edit a sandbox file by replacing exact text. Hydrates the path first when it is a logical OpenEve resource.",
+    description: "Edit a sandbox file by replacing exact text. Hydrates the path first when it is a logical Assembly Line resource.",
     inputSchema: {
         type: "object",
         additionalProperties: false,
@@ -127,7 +146,7 @@ const DELETE_COMPILED_TOOL = {
 };
 const LIST_COMPILED_TOOL = {
     name: LIST_TOOL_NAME,
-    description: "List files under a sandbox path. Lazily hydrates bounded logical OpenEve roots before listing.",
+    description: "List files under a sandbox path. Lazily hydrates bounded logical Assembly Line roots before listing.",
     inputSchema: {
         type: "object",
         additionalProperties: false,
@@ -191,49 +210,26 @@ const BASH_COMPILED_TOOL = {
     hasToModelOutput: true,
     source: BUILTIN_SOURCE
 };
-const ASK_QUESTION_COMPILED_TOOL = {
-    name: ASK_QUESTION_TOOL_NAME,
-    description: "Ask the user a concise clarifying question and pause the run until the answer is available.",
+const DELIVER_ARTIFACT_COMPILED_TOOL = {
+    name: DELIVER_ARTIFACT_TOOL_NAME,
+    description: "Required for file delivery: select one completed /workspace file for exact attachment to the user. Call once for each file the final answer should attach; a link in the final answer does not attach a file.",
     inputSchema: {
         type: "object",
         additionalProperties: false,
         properties: {
-            question: { type: "string" },
-            choices: { type: "array", items: { type: "string" } },
-            allowFreeform: { type: "boolean" },
-            metadata: { type: "object", additionalProperties: true }
+            path: {
+                type: "string",
+                description: "Exact non-reserved /workspace file path to deliver, such as /workspace/Investment_Memo.xlsx."
+            }
         },
-        required: ["question"]
-    },
-    needsApproval: approvalNever(),
-    defaultEnabled: true,
-    visibility: "always",
-    execution: "direct",
-    tags: ["human", "question"],
-    aliases: ["clarify"],
-    hasToModelOutput: true,
-    source: BUILTIN_SOURCE
-};
-const SPAWN_SUBAGENT_COMPILED_TOOL = {
-    name: SPAWN_SUBAGENT_TOOL_NAME,
-    description: "Spawn a configured subagent by name for delegated work.",
-    inputSchema: {
-        type: "object",
-        additionalProperties: true,
-        properties: {
-            name: { type: "string", description: "Subagent name." },
-            task: { type: "string" },
-            expectedOutput: { type: "string" },
-            constraints: { type: "array", items: { type: "string" } }
-        },
-        required: ["name", "task"]
+        required: ["path"]
     },
     needsApproval: approvalNever(),
     defaultEnabled: true,
     visibility: "always",
     execution: "direct",
-    tags: ["subagent", "delegate"],
-    aliases: ["delegate", "agent"],
+    tags: ["artifact", "delivery", "workspace", "file"],
+    aliases: ["send_file", "attach_file"],
     hasToModelOutput: true,
     source: BUILTIN_SOURCE
 };
@@ -259,7 +255,7 @@ const LOAD_SKILL_COMPILED_TOOL = {
 };
 const TOOL_SEARCH_COMPILED_TOOL = {
     name: TOOL_SEARCH_TOOL_NAME,
-    description: "Search deferred non-core tools by name, description, tags, aliases, or connection. Returns compact metadata only.",
+    description: "Find and activate deferred framework, authored, and connection tools. Matching tools become directly callable.",
     inputSchema: {
         type: "object",
         additionalProperties: false,
@@ -280,45 +276,209 @@ const TOOL_SEARCH_COMPILED_TOOL = {
     hasToModelOutput: true,
     source: BUILTIN_SOURCE
 };
-const TOOL_DESCRIBE_COMPILED_TOOL = {
-    name: TOOL_DESCRIBE_TOOL_NAME,
-    description: "Return the full schema for one deferred tool previously found with tool_search.",
+// The universal connection-pairing entry point. Deliberately a default-enabled
+// core tool rather than a discovered connection tool: a pasted binding packet
+// is often the FIRST interaction with a connection, so its landing spot must
+// not depend on the discovery chain (tool_search → connection metadata) that
+// breaks precisely when a connection is misconfigured. It remains visible even
+// when no connection is configured so the model can explain that state.
+const PAIR_COMPILED_TOOL = {
+    name: PAIR_TOOL_NAME,
+    description: "Pair a connection by redeeming a one-time pairing packet or claim code. When the user pastes binding or pairing instructions for a connection, call this with the FULL pasted text as `secret`; the host exchanges the code and stores the credential durably. Only call this for a supplied packet; the tool's presence does not mean an existing grant is missing. Omit `connection` when only one connection supports pairing.",
     inputSchema: {
         type: "object",
         additionalProperties: false,
         properties: {
-            name: { type: "string" }
+            connection: {
+                type: "string",
+                description: "Connection name to pair. Optional when exactly one live connection supports pairing."
+            },
+            secret: {
+                type: "string",
+                description: "The full pasted pairing packet, binding instructions, or one-time claim code."
+            }
         },
-        required: ["name"]
+        required: ["secret"]
     },
     needsApproval: approvalNever(),
     defaultEnabled: true,
     visibility: "always",
     execution: "direct",
-    tags: ["tools", "deferred", "describe"],
-    aliases: ["schema"],
+    tags: ["connections", "pairing", "credentials"],
+    aliases: ["bind", "pair_connection"],
     hasToModelOutput: true,
     source: BUILTIN_SOURCE
 };
-const TOOL_CALL_COMPILED_TOOL = {
-    name: TOOL_CALL_TOOL_NAME,
-    description: "Call a deferred non-core tool by name with JSON arguments. The underlying tool is logged and policy-checked directly.",
+const HISTORY_SEARCH_COMPILED_TOOL = {
+    name: HISTORY_SEARCH_TOOL_NAME,
+    description: "Search attributed conversation and channel history without loading the full history into the prompt. Access scope is enforced by the runtime.",
     inputSchema: {
         type: "object",
         additionalProperties: false,
         properties: {
-            name: { type: "string" },
-            arguments: { type: "object", additionalProperties: true },
-            input: { type: "object", additionalProperties: true }
+            query: { type: "string", description: "Words or concepts to find." },
+            scope: {
+                type: "string",
+                enum: ["current_conversation", "current_channel", "my_conversations"],
+                description: "History boundary. Defaults to the current conversation."
+            },
+            limit: { type: "number", description: "Maximum results. Defaults to 8 and is capped at 50." }
         },
-        required: ["name"]
+        required: ["query"]
+    },
+    needsApproval: approvalNever(),
+    defaultEnabled: false,
+    visibility: "deferred",
+    execution: "direct",
+    tags: ["history", "search", "conversations", "channels"],
+    aliases: ["conversation_search", "search_history"],
+    hasToModelOutput: true,
+    source: BUILTIN_SOURCE
+};
+const FILES_SEARCH_COMPILED_TOOL = {
+    name: FILES_SEARCH_TOOL_NAME,
+    description: "Find files previously shared or created in the current durable workspace. Omit query to list the most recent files.",
+    inputSchema: {
+        type: "object",
+        additionalProperties: false,
+        properties: {
+            query: { type: "string", description: "Optional filename, path, or file id fragment." },
+            limit: { type: "number", description: "Maximum results. Defaults to 50 and is capped at 200." }
+        }
+    },
+    needsApproval: approvalNever(),
+    defaultEnabled: true,
+    visibility: "always",
+    execution: "direct",
+    tags: ["files", "search", "workspace", "durability"],
+    aliases: ["files_list", "attachments_search"],
+    hasToModelOutput: true,
+    source: BUILTIN_SOURCE
+};
+const FILES_MOUNT_COMPILED_TOOL = {
+    name: FILES_MOUNT_TOOL_NAME,
+    description: "Mount one durable workspace file into the current sandbox at the returned read-only /files/library path.",
+    inputSchema: {
+        type: "object",
+        additionalProperties: false,
+        properties: {
+            fileId: { type: "string", description: "Exact file id returned by files_search." }
+        },
+        required: ["fileId"]
     },
     needsApproval: approvalNever(),
     defaultEnabled: true,
     visibility: "always",
+    execution: "sandbox",
+    tags: ["files", "sandbox", "workspace", "durability"],
+    aliases: ["mount_file", "attachment_mount"],
+    hasToModelOutput: true,
+    source: BUILTIN_SOURCE
+};
+const WORKSPACE_STATUS_COMPILED_TOOL = {
+    name: WORKSPACE_STATUS_TOOL_NAME,
+    description: "Show the current durable workspace head, size, version count, and named checkpoints.",
+    inputSchema: { type: "object", additionalProperties: false, properties: {} },
+    needsApproval: approvalNever(),
+    defaultEnabled: false,
+    visibility: "deferred",
     execution: "direct",
-    tags: ["tools", "deferred", "call"],
-    aliases: ["invoke"],
+    tags: ["workspace", "versions", "status"],
+    aliases: ["workspace_info"],
+    hasToModelOutput: true,
+    source: BUILTIN_SOURCE
+};
+const WORKSPACE_SEARCH_COMPILED_TOOL = {
+    name: WORKSPACE_SEARCH_TOOL_NAME,
+    description: "Search a committed durable workspace without hydrating it. Results identify the exact version and ranking source.",
+    inputSchema: {
+        type: "object",
+        additionalProperties: false,
+        properties: {
+            query: { type: "string", description: "Words or concepts to find." },
+            versionId: { type: "string", description: "Optional committed version. Defaults to the current head." },
+            limit: { type: "number", description: "Maximum results. Defaults to 8 and is capped at 100." }
+        },
+        required: ["query"]
+    },
+    needsApproval: approvalNever(),
+    defaultEnabled: false,
+    visibility: "deferred",
+    execution: "direct",
+    tags: ["workspace", "search", "versions"],
+    aliases: ["search_workspace"],
+    hasToModelOutput: true,
+    source: BUILTIN_SOURCE
+};
+const WORKSPACE_CHECKPOINT_CREATE_COMPILED_TOOL = {
+    name: WORKSPACE_CHECKPOINT_CREATE_TOOL_NAME,
+    description: "Name the current committed workspace version without copying its files.",
+    inputSchema: {
+        type: "object",
+        additionalProperties: false,
+        properties: {
+            name: { type: "string", description: "Workspace-local checkpoint name." },
+            replace: { type: "boolean", description: "Replace an existing name. Defaults to false." }
+        },
+        required: ["name"]
+    },
+    needsApproval: approvalNever(),
+    defaultEnabled: false,
+    visibility: "deferred",
+    execution: "direct",
+    tags: ["workspace", "checkpoint", "versions"],
+    aliases: ["workspace_savepoint"],
+    hasToModelOutput: true,
+    source: BUILTIN_SOURCE
+};
+const WORKSPACE_CHECKPOINT_LIST_COMPILED_TOOL = {
+    name: WORKSPACE_CHECKPOINT_LIST_TOOL_NAME,
+    description: "List named checkpoints for the current durable workspace.",
+    inputSchema: { type: "object", additionalProperties: false, properties: {} },
+    needsApproval: approvalNever(),
+    defaultEnabled: false,
+    visibility: "deferred",
+    execution: "direct",
+    tags: ["workspace", "checkpoint", "list"],
+    aliases: ["workspace_savepoints"],
+    hasToModelOutput: true,
+    source: BUILTIN_SOURCE
+};
+const WORKSPACE_CHECKPOINT_RESTORE_COMPILED_TOOL = {
+    name: WORKSPACE_CHECKPOINT_RESTORE_TOOL_NAME,
+    description: "Restore a named checkpoint as a new workspace head while preserving all later versions.",
+    inputSchema: {
+        type: "object",
+        additionalProperties: false,
+        properties: { name: { type: "string", description: "Checkpoint name to restore." } },
+        required: ["name"]
+    },
+    needsApproval: approvalRequired("Restoring replaces the current workspace tree with a prior committed version."),
+    defaultEnabled: false,
+    visibility: "deferred",
+    execution: "direct",
+    tags: ["workspace", "checkpoint", "restore"],
+    aliases: ["workspace_rollback"],
+    hasToModelOutput: true,
+    source: BUILTIN_SOURCE
+};
+const WORKSPACE_FORK_COMPILED_TOOL = {
+    name: WORKSPACE_FORK_TOOL_NAME,
+    description: "Create an independent copy-on-write workspace from the current head or a named checkpoint.",
+    inputSchema: {
+        type: "object",
+        additionalProperties: false,
+        properties: {
+            name: { type: "string", description: "Optional display name for the new workspace." },
+            checkpoint: { type: "string", description: "Optional checkpoint to fork instead of the current head." }
+        }
+    },
+    needsApproval: approvalNever(),
+    defaultEnabled: false,
+    visibility: "deferred",
+    execution: "direct",
+    tags: ["workspace", "fork", "branch"],
+    aliases: ["workspace_branch"],
     hasToModelOutput: true,
     source: BUILTIN_SOURCE
 };
@@ -330,17 +490,24 @@ const BUILT_IN_COMPILED_TOOLS = [
     LIST_COMPILED_TOOL,
     GREP_COMPILED_TOOL,
     BASH_COMPILED_TOOL,
-    ASK_QUESTION_COMPILED_TOOL,
-    SPAWN_SUBAGENT_COMPILED_TOOL,
+    DELIVER_ARTIFACT_COMPILED_TOOL,
     LOAD_SKILL_COMPILED_TOOL,
     TOOL_SEARCH_COMPILED_TOOL,
-    TOOL_DESCRIBE_COMPILED_TOOL,
-    TOOL_CALL_COMPILED_TOOL
+    PAIR_COMPILED_TOOL,
+    HISTORY_SEARCH_COMPILED_TOOL,
+    FILES_SEARCH_COMPILED_TOOL,
+    FILES_MOUNT_COMPILED_TOOL,
+    WORKSPACE_SEARCH_COMPILED_TOOL,
+    WORKSPACE_STATUS_COMPILED_TOOL,
+    WORKSPACE_CHECKPOINT_CREATE_COMPILED_TOOL,
+    WORKSPACE_CHECKPOINT_LIST_COMPILED_TOOL,
+    WORKSPACE_CHECKPOINT_RESTORE_COMPILED_TOOL,
+    WORKSPACE_FORK_COMPILED_TOOL
 ];
-export function runtimeToolsForManifest(manifest) {
-    const builtInNamed = new Map(manifest.tools.filter((tool) => CORE_HARNESS_TOOL_NAME_SET.has(tool.name)).map((tool) => [tool.name, tool]));
+export function runtimeToolsForSurface(authoredTools) {
+    const builtInNamed = new Map(authoredTools.filter((tool) => CORE_HARNESS_TOOL_NAME_SET.has(tool.name)).map((tool) => [tool.name, tool]));
     return [
-        ...manifest.tools.filter((tool) => !CORE_HARNESS_TOOL_NAME_SET.has(tool.name) && !tool.disabled),
+        ...authoredTools.filter((tool) => !CORE_HARNESS_TOOL_NAME_SET.has(tool.name) && !tool.disabled),
         ...BUILT_IN_COMPILED_TOOLS.flatMap((builtin) => {
             const authored = builtInNamed.get(builtin.name);
             if (!authored)
@@ -368,18 +535,32 @@ export function builtInToolDefinition(name) {
         return grepToolDefinition;
     if (name === BASH_TOOL_NAME)
         return bashToolDefinition;
-    if (name === ASK_QUESTION_TOOL_NAME)
-        return askQuestionToolDefinition;
-    if (name === SPAWN_SUBAGENT_TOOL_NAME)
-        return spawnSubagentToolDefinition;
+    if (name === DELIVER_ARTIFACT_TOOL_NAME)
+        return deliverArtifactToolDefinition;
     if (name === LOAD_SKILL_TOOL_NAME)
         return runtimeHandledToolDefinition(LOAD_SKILL_COMPILED_TOOL);
     if (name === TOOL_SEARCH_TOOL_NAME)
         return runtimeHandledToolDefinition(TOOL_SEARCH_COMPILED_TOOL);
-    if (name === TOOL_DESCRIBE_TOOL_NAME)
-        return runtimeHandledToolDefinition(TOOL_DESCRIBE_COMPILED_TOOL);
-    if (name === TOOL_CALL_TOOL_NAME)
-        return runtimeHandledToolDefinition(TOOL_CALL_COMPILED_TOOL);
+    if (name === PAIR_TOOL_NAME)
+        return runtimeHandledToolDefinition(PAIR_COMPILED_TOOL);
+    if (name === HISTORY_SEARCH_TOOL_NAME)
+        return runtimeHandledToolDefinition(HISTORY_SEARCH_COMPILED_TOOL);
+    if (name === FILES_SEARCH_TOOL_NAME)
+        return runtimeHandledToolDefinition(FILES_SEARCH_COMPILED_TOOL);
+    if (name === FILES_MOUNT_TOOL_NAME)
+        return runtimeHandledToolDefinition(FILES_MOUNT_COMPILED_TOOL);
+    if (name === WORKSPACE_SEARCH_TOOL_NAME)
+        return runtimeHandledToolDefinition(WORKSPACE_SEARCH_COMPILED_TOOL);
+    if (name === WORKSPACE_STATUS_TOOL_NAME)
+        return runtimeHandledToolDefinition(WORKSPACE_STATUS_COMPILED_TOOL);
+    if (name === WORKSPACE_CHECKPOINT_CREATE_TOOL_NAME)
+        return runtimeHandledToolDefinition(WORKSPACE_CHECKPOINT_CREATE_COMPILED_TOOL);
+    if (name === WORKSPACE_CHECKPOINT_LIST_TOOL_NAME)
+        return runtimeHandledToolDefinition(WORKSPACE_CHECKPOINT_LIST_COMPILED_TOOL);
+    if (name === WORKSPACE_CHECKPOINT_RESTORE_TOOL_NAME)
+        return runtimeHandledToolDefinition(WORKSPACE_CHECKPOINT_RESTORE_COMPILED_TOOL);
+    if (name === WORKSPACE_FORK_TOOL_NAME)
+        return runtimeHandledToolDefinition(WORKSPACE_FORK_COMPILED_TOOL);
     return undefined;
 }
 export function isBuiltInToolName(name) {
@@ -513,40 +694,53 @@ const bashToolDefinition = {
         return sandbox.shell(command, options);
     }
 };
-const askQuestionToolDefinition = {
-    ...toolDefinitionBase(ASK_QUESTION_COMPILED_TOOL),
+const deliverArtifactToolDefinition = {
+    ...toolDefinitionBase(DELIVER_ARTIFACT_COMPILED_TOOL),
     async execute(input, ctx) {
         const raw = recordInput(input);
-        const question = typeof raw.question === "string" ? raw.question.trim() : "";
-        if (!question)
-            throw new Error("ask_question requires a non-empty question.");
-        const options = {};
-        if (Array.isArray(raw.choices))
-            options.choices = raw.choices.map(String).filter(Boolean);
-        if (typeof raw.allowFreeform === "boolean")
-            options.allowFreeform = raw.allowFreeform;
-        if (raw.metadata && typeof raw.metadata === "object" && !Array.isArray(raw.metadata)) {
-            options.metadata = raw.metadata;
+        const path = requiredPath(raw.path);
+        if (!path.startsWith("/workspace/") || path === "/workspace/") {
+            throw new Error("deliver_artifact requires an exact file path below /workspace.");
         }
-        return ctx.askQuestion(question, options);
-    }
-};
-const spawnSubagentToolDefinition = {
-    ...toolDefinitionBase(SPAWN_SUBAGENT_COMPILED_TOOL),
-    async execute(input, ctx) {
-        if (!ctx.spawnSubagent)
-            throw new Error("Subagent spawning is not available in this runtime.");
-        const raw = recordInput(input);
-        const name = typeof raw.name === "string" ? raw.name.trim() : "";
-        const task = typeof raw.task === "string" ? raw.task.trim() : "";
-        if (!name || !task)
-            throw new Error("spawn_subagent requires name and task.");
-        return ctx.spawnSubagent({
-            name,
-            task,
-            ...(typeof raw.expectedOutput === "string" ? { expectedOutput: raw.expectedOutput } : {}),
-            ...(Array.isArray(raw.constraints) ? { constraints: raw.constraints.map(String) } : {})
+        const relativePath = path.slice("/workspace/".length);
+        const topLevel = relativePath.split("/", 1)[0] ?? "";
+        if (["memory", "skills", "history", "files", ".agents", ".assembly-line"].includes(topLevel)) {
+            throw new Error(`deliver_artifact cannot deliver reserved workspace path ${path}.`);
+        }
+        if (internalDeliveryArtifactReason(relativePath)) {
+            throw new Error(`deliver_artifact cannot deliver internal or cache path ${path}.`);
+        }
+        await ctx.hydrateSandboxPath?.(path);
+        const sandbox = await ctx.getSandbox();
+        if (!sandbox.readFileBytes) {
+            throw new Error("deliver_artifact requires a sandbox adapter with byte-preserving exact file reads.");
+        }
+        const contents = await sandbox.readFileBytes(path);
+        const bytes = Buffer.from(contents);
+        const sizeBytes = bytes.byteLength;
+        const maxBytes = boundedPositiveIntEnv(ctx.channel?.env.ASSEMBLY_LINE_DELIVERY_FILE_MAX_BYTES, DEFAULT_DELIVERY_FILE_MAX_BYTES, 1, 1024 * 1024 * 1024);
+        if (sizeBytes > maxBytes) {
+            throw new Error(`Selected delivery artifact ${path} is ${sizeBytes} bytes, exceeding the configured limit of ${maxBytes}.`);
+        }
+        if (!ctx.blob)
+            throw new Error("deliver_artifact requires blob storage.");
+        const contentType = deliveryFileContentType(relativePath);
+        const sha256 = createHash("sha256").update(bytes).digest("hex");
+        const blob = await ctx.blob.put(workspaceContentBlobKey(sha256), bytes, { contentType, visibility: "private" });
+        await ctx.emit("artifact.delivery_selected", {
+            path,
+            relativePath,
+            sizeBytes: blob.size,
+            contentType,
+            sha256: blob.sha256,
+            blobKey: blob.key
         });
+        return {
+            path,
+            sizeBytes,
+            downloadUrl: `sandbox:${path}`,
+            selectedForDelivery: true
+        };
     }
 };
 function toolDefinitionBase(tool) {
@@ -554,7 +748,6 @@ function toolDefinitionBase(tool) {
         description: tool.description,
         inputSchema: tool.inputSchema,
         needsApproval: false,
-        defaultEnabled: tool.defaultEnabled,
         capability: {
             visibility: tool.visibility,
             execution: tool.execution,
@@ -573,7 +766,7 @@ function runtimeHandledToolDefinition(tool) {
     return {
         ...toolDefinitionBase(tool),
         async execute() {
-            throw new Error(`${tool.name} is handled by the OpenEve runtime dispatcher.`);
+            throw new Error(`${tool.name} is handled by the Assembly Line runtime dispatcher.`);
         }
     };
 }
@@ -605,8 +798,8 @@ function boundedNumber(value, fallback, min, max) {
 async function listSandboxEntries(sandbox, path, limit) {
     if (!sandbox.listFiles)
         throw new Error("This sandbox adapter does not support file listing.");
-    const entries = await sandbox.listFiles(path);
-    return entries.slice(0, limit).map((entry) => {
+    const entries = await sandbox.listFiles(path, { limit, includeContents: false });
+    return entries.map((entry) => {
         const out = { path: entry.path };
         if (entry.size !== undefined)
             out.size = entry.size;
@@ -616,7 +809,7 @@ async function listSandboxEntries(sandbox, path, limit) {
 async function grepSandbox(sandbox, path, pattern, literal, limit) {
     if (!sandbox.listFiles)
         throw new Error("This sandbox adapter does not support grep without file listing.");
-    const entries = await sandbox.listFiles(path);
+    const entries = await sandbox.listFiles(path, { includeContents: true });
     const matches = [];
     const regexp = literal ? undefined : new RegExp(pattern, "u");
     for (const entry of entries) {
@@ -673,8 +866,8 @@ export function builtInToolContext(tool) {
  *
  *   export default defineTool({ ...builtInToolDefaults.write, execute: guarded });
  *
- * The deferred bridge tools (load_skill, tool_search, tool_describe, tool_call)
- * are runtime-handled and have no wrappable executor, so they are not listed.
+ * The discovery tools (load_skill and tool_search) are runtime-handled and have
+ * no wrappable executor, so they are not listed.
  */
 export const builtInToolDefaults = Object.freeze({
     read: readToolDefinition,
@@ -684,7 +877,6 @@ export const builtInToolDefaults = Object.freeze({
     list: listToolDefinition,
     grep: grepToolDefinition,
     bash: bashToolDefinition,
-    ask_question: askQuestionToolDefinition,
-    spawn_subagent: spawnSubagentToolDefinition
+    deliver_artifact: deliverArtifactToolDefinition
 });
 //# sourceMappingURL=builtin-tools.js.map