@bastani/atomic 0.9.2-alpha.1 → 0.9.3-alpha.1

package/dist/core/extensions/tool-events.d.ts

@@ -1,6 +1,6 @@
 import type { ImageContent, TextContent } from "@earendil-works/pi-ai";
 import type { EditToolDetails } from "../tools/edit.ts";
-import type { BashToolDetails, BashToolInput, EditToolInput, FindToolDetails, FindToolInput, GrepToolDetails, GrepToolInput, LsToolDetails, LsToolInput, ReadToolDetails, ReadToolInput, WriteToolInput } from "../tools/index.ts";
+import type { BashToolDetails, BashToolInput, EditToolInput, FindToolDetails, FindToolInput, LsToolDetails, LsToolInput, ReadToolDetails, ReadToolInput, SearchToolDetails, SearchToolInput, WriteToolInput } from "../tools/index.ts";
 interface ToolCallEventBase {
     type: "tool_call";
     toolCallId: string;
@@ -21,14 +21,14 @@ export interface WriteToolCallEvent extends ToolCallEventBase {
     toolName: "write";
     input: WriteToolInput;
 }
-export interface GrepToolCallEvent extends ToolCallEventBase {
-    toolName: "grep";
-    input: GrepToolInput;
-}
 export interface FindToolCallEvent extends ToolCallEventBase {
     toolName: "find";
     input: FindToolInput;
 }
+export interface SearchToolCallEvent extends ToolCallEventBase {
+    toolName: "search";
+    input: SearchToolInput;
+}
 export interface LsToolCallEvent extends ToolCallEventBase {
     toolName: "ls";
     input: LsToolInput;
@@ -43,7 +43,7 @@ export interface CustomToolCallEvent extends ToolCallEventBase {
  * `event.input` is mutable. Mutate it in place to patch tool arguments before execution.
  * Later `tool_call` handlers see earlier mutations. No re-validation is performed after mutation.
  */
-export type ToolCallEvent = BashToolCallEvent | ReadToolCallEvent | EditToolCallEvent | WriteToolCallEvent | GrepToolCallEvent | FindToolCallEvent | LsToolCallEvent | CustomToolCallEvent;
+export type ToolCallEvent = BashToolCallEvent | ReadToolCallEvent | EditToolCallEvent | WriteToolCallEvent | FindToolCallEvent | SearchToolCallEvent | LsToolCallEvent | CustomToolCallEvent;
 interface ToolResultEventBase {
     type: "tool_result";
     toolCallId: string;
@@ -67,14 +67,14 @@ export interface WriteToolResultEvent extends ToolResultEventBase {
     toolName: "write";
     details: undefined;
 }
-export interface GrepToolResultEvent extends ToolResultEventBase {
-    toolName: "grep";
-    details: GrepToolDetails | undefined;
-}
 export interface FindToolResultEvent extends ToolResultEventBase {
     toolName: "find";
     details: FindToolDetails | undefined;
 }
+export interface SearchToolResultEvent extends ToolResultEventBase {
+    toolName: "search";
+    details: SearchToolDetails | undefined;
+}
 export interface LsToolResultEvent extends ToolResultEventBase {
     toolName: "ls";
     details: LsToolDetails | undefined;
@@ -84,13 +84,13 @@ export interface CustomToolResultEvent extends ToolResultEventBase {
     details: unknown;
 }
 /** Fired after a tool executes. Can modify result. */
-export type ToolResultEvent = BashToolResultEvent | ReadToolResultEvent | EditToolResultEvent | WriteToolResultEvent | GrepToolResultEvent | FindToolResultEvent | LsToolResultEvent | CustomToolResultEvent;
+export type ToolResultEvent = BashToolResultEvent | ReadToolResultEvent | EditToolResultEvent | WriteToolResultEvent | FindToolResultEvent | SearchToolResultEvent | LsToolResultEvent | CustomToolResultEvent;
 export declare function isBashToolResult(e: ToolResultEvent): e is BashToolResultEvent;
 export declare function isReadToolResult(e: ToolResultEvent): e is ReadToolResultEvent;
 export declare function isEditToolResult(e: ToolResultEvent): e is EditToolResultEvent;
 export declare function isWriteToolResult(e: ToolResultEvent): e is WriteToolResultEvent;
-export declare function isGrepToolResult(e: ToolResultEvent): e is GrepToolResultEvent;
 export declare function isFindToolResult(e: ToolResultEvent): e is FindToolResultEvent;
+export declare function isSearchToolResult(e: ToolResultEvent): e is SearchToolResultEvent;
 export declare function isLsToolResult(e: ToolResultEvent): e is LsToolResultEvent;
 /**
  * Type guard for narrowing ToolCallEvent by tool name.
@@ -116,8 +116,8 @@ export declare function isToolCallEventType(toolName: "bash", event: ToolCallEve
 export declare function isToolCallEventType(toolName: "read", event: ToolCallEvent): event is ReadToolCallEvent;
 export declare function isToolCallEventType(toolName: "edit", event: ToolCallEvent): event is EditToolCallEvent;
 export declare function isToolCallEventType(toolName: "write", event: ToolCallEvent): event is WriteToolCallEvent;
-export declare function isToolCallEventType(toolName: "grep", event: ToolCallEvent): event is GrepToolCallEvent;
 export declare function isToolCallEventType(toolName: "find", event: ToolCallEvent): event is FindToolCallEvent;
+export declare function isToolCallEventType(toolName: "search", event: ToolCallEvent): event is SearchToolCallEvent;
 export declare function isToolCallEventType(toolName: "ls", event: ToolCallEvent): event is LsToolCallEvent;
 export declare function isToolCallEventType<TName extends string, TInput extends Record<string, unknown>>(toolName: TName, event: ToolCallEvent): event is ToolCallEvent & {
     toolName: TName;

package/dist/core/extensions/tool-events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-events.d.ts","sourceRoot":"","sources":["../../../src/core/extensions/tool-events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EACX,eAAe,EACf,aAAa,EACb,aAAa,EACb,eAAe,EACf,aAAa,EACb,eAAe,EACf,aAAa,EACb,aAAa,EACb,WAAW,EACX,eAAe,EACf,aAAa,EACb,cAAc,EACd,MAAM,mBAAmB,CAAC;AAM3B,UAAU,iBAAiB;IAC1B,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC;CACrB;AAED,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC;CACrB;AAED,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC;CACrB;AAED,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IAC5D,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,cAAc,CAAC;CACtB;AAED,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC;CACrB;AAED,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC;CACrB;AAED,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACzD,QAAQ,EAAE,IAAI,CAAC;IACf,KAAK,EAAE,WAAW,CAAC;CACnB;AAED,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC7D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GACtB,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,GAClB,iBAAiB,GACjB,iBAAiB,GACjB,eAAe,GACf,mBAAmB,CAAC;AAEvB,UAAU,mBAAmB;IAC5B,IAAI,EAAE,aAAa,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,EAAE,CAAC,WAAW,GAAG,YAAY,CAAC,EAAE,CAAC;IACxC,OAAO,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,eAAe,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,eAAe,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,eAAe,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,oBAAqB,SAAQ,mBAAmB;IAChE,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,SAAS,CAAC;CACnB;AAED,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,eAAe,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,eAAe,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,iBAAkB,SAAQ,mBAAmB;IAC7D,QAAQ,EAAE,IAAI,CAAC;IACf,OAAO,EAAE,aAAa,GAAG,SAAS,CAAC;CACnC;AAED,MAAM,WAAW,qBAAsB,SAAQ,mBAAmB;IACjE,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CACjB;AAED,sDAAsD;AACtD,MAAM,MAAM,eAAe,GACxB,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,oBAAoB,GACpB,mBAAmB,GACnB,mBAAmB,GACnB,iBAAiB,GACjB,qBAAqB,CAAC;AAGzB,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,IAAI,mBAAmB,CAE7E;AACD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,IAAI,mBAAmB,CAE7E;AACD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,IAAI,mBAAmB,CAE7E;AACD,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,IAAI,oBAAoB,CAE/E;AACD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,IAAI,mBAAmB,CAE7E;AACD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,IAAI,mBAAmB,CAE7E;AACD,wBAAgB,cAAc,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,IAAI,iBAAiB,CAEzE;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,iBAAiB,CAAC;AACxG,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,iBAAiB,CAAC;AACxG,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,iBAAiB,CAAC;AACxG,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,kBAAkB,CAAC;AAC1G,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,iBAAiB,CAAC;AACxG,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,iBAAiB,CAAC;AACxG,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,eAAe,CAAC;AACpG,wBAAgB,mBAAmB,CAAC,KAAK,SAAS,MAAM,EAAE,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/F,QAAQ,EAAE,KAAK,EACf,KAAK,EAAE,aAAa,GAClB,KAAK,IAAI,aAAa,GAAG;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC","sourcesContent":["import type { ImageContent, TextContent } from \"@earendil-works/pi-ai\";\nimport type { EditToolDetails } from \"../tools/edit.ts\";\nimport type {\n\tBashToolDetails,\n\tBashToolInput,\n\tEditToolInput,\n\tFindToolDetails,\n\tFindToolInput,\n\tGrepToolDetails,\n\tGrepToolInput,\n\tLsToolDetails,\n\tLsToolInput,\n\tReadToolDetails,\n\tReadToolInput,\n\tWriteToolInput,\n} from \"../tools/index.ts\";\n\n// ============================================================================\n// Tool Events\n// ============================================================================\n\ninterface ToolCallEventBase {\n\ttype: \"tool_call\";\n\ttoolCallId: string;\n}\n\nexport interface BashToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"bash\";\n\tinput: BashToolInput;\n}\n\nexport interface ReadToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"read\";\n\tinput: ReadToolInput;\n}\n\nexport interface EditToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"edit\";\n\tinput: EditToolInput;\n}\n\nexport interface WriteToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"write\";\n\tinput: WriteToolInput;\n}\n\nexport interface GrepToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"grep\";\n\tinput: GrepToolInput;\n}\n\nexport interface FindToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"find\";\n\tinput: FindToolInput;\n}\n\nexport interface LsToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"ls\";\n\tinput: LsToolInput;\n}\n\nexport interface CustomToolCallEvent extends ToolCallEventBase {\n\ttoolName: string;\n\tinput: Record<string, unknown>;\n}\n\n/**\n * Fired before a tool executes. Can block.\n *\n * `event.input` is mutable. Mutate it in place to patch tool arguments before execution.\n * Later `tool_call` handlers see earlier mutations. No re-validation is performed after mutation.\n */\nexport type ToolCallEvent =\n\t| BashToolCallEvent\n\t| ReadToolCallEvent\n\t| EditToolCallEvent\n\t| WriteToolCallEvent\n\t| GrepToolCallEvent\n\t| FindToolCallEvent\n\t| LsToolCallEvent\n\t| CustomToolCallEvent;\n\ninterface ToolResultEventBase {\n\ttype: \"tool_result\";\n\ttoolCallId: string;\n\tinput: Record<string, unknown>;\n\tcontent: (TextContent | ImageContent)[];\n\tisError: boolean;\n}\n\nexport interface BashToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"bash\";\n\tdetails: BashToolDetails | undefined;\n}\n\nexport interface ReadToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"read\";\n\tdetails: ReadToolDetails | undefined;\n}\n\nexport interface EditToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"edit\";\n\tdetails: EditToolDetails | undefined;\n}\n\nexport interface WriteToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"write\";\n\tdetails: undefined;\n}\n\nexport interface GrepToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"grep\";\n\tdetails: GrepToolDetails | undefined;\n}\n\nexport interface FindToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"find\";\n\tdetails: FindToolDetails | undefined;\n}\n\nexport interface LsToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"ls\";\n\tdetails: LsToolDetails | undefined;\n}\n\nexport interface CustomToolResultEvent extends ToolResultEventBase {\n\ttoolName: string;\n\tdetails: unknown;\n}\n\n/** Fired after a tool executes. Can modify result. */\nexport type ToolResultEvent =\n\t| BashToolResultEvent\n\t| ReadToolResultEvent\n\t| EditToolResultEvent\n\t| WriteToolResultEvent\n\t| GrepToolResultEvent\n\t| FindToolResultEvent\n\t| LsToolResultEvent\n\t| CustomToolResultEvent;\n\n// Type guards for ToolResultEvent\nexport function isBashToolResult(e: ToolResultEvent): e is BashToolResultEvent {\n\treturn e.toolName === \"bash\";\n}\nexport function isReadToolResult(e: ToolResultEvent): e is ReadToolResultEvent {\n\treturn e.toolName === \"read\";\n}\nexport function isEditToolResult(e: ToolResultEvent): e is EditToolResultEvent {\n\treturn e.toolName === \"edit\";\n}\nexport function isWriteToolResult(e: ToolResultEvent): e is WriteToolResultEvent {\n\treturn e.toolName === \"write\";\n}\nexport function isGrepToolResult(e: ToolResultEvent): e is GrepToolResultEvent {\n\treturn e.toolName === \"grep\";\n}\nexport function isFindToolResult(e: ToolResultEvent): e is FindToolResultEvent {\n\treturn e.toolName === \"find\";\n}\nexport function isLsToolResult(e: ToolResultEvent): e is LsToolResultEvent {\n\treturn e.toolName === \"ls\";\n}\n\n/**\n * Type guard for narrowing ToolCallEvent by tool name.\n *\n * Built-in tools narrow automatically (no type params needed):\n * ```ts\n * if (isToolCallEventType(\"bash\", event)) {\n *   event.input.command;  // string\n * }\n * ```\n *\n * Custom tools require explicit type parameters:\n * ```ts\n * if (isToolCallEventType<\"my_tool\", MyToolInput>(\"my_tool\", event)) {\n *   event.input.action;  // typed\n * }\n * ```\n *\n * Note: Direct narrowing via `event.toolName === \"bash\"` doesn't work because\n * CustomToolCallEvent.toolName is `string` which overlaps with all literals.\n */\nexport function isToolCallEventType(toolName: \"bash\", event: ToolCallEvent): event is BashToolCallEvent;\nexport function isToolCallEventType(toolName: \"read\", event: ToolCallEvent): event is ReadToolCallEvent;\nexport function isToolCallEventType(toolName: \"edit\", event: ToolCallEvent): event is EditToolCallEvent;\nexport function isToolCallEventType(toolName: \"write\", event: ToolCallEvent): event is WriteToolCallEvent;\nexport function isToolCallEventType(toolName: \"grep\", event: ToolCallEvent): event is GrepToolCallEvent;\nexport function isToolCallEventType(toolName: \"find\", event: ToolCallEvent): event is FindToolCallEvent;\nexport function isToolCallEventType(toolName: \"ls\", event: ToolCallEvent): event is LsToolCallEvent;\nexport function isToolCallEventType<TName extends string, TInput extends Record<string, unknown>>(\n\ttoolName: TName,\n\tevent: ToolCallEvent,\n): event is ToolCallEvent & { toolName: TName; input: TInput };\nexport function isToolCallEventType(toolName: string, event: ToolCallEvent): boolean {\n\treturn event.toolName === toolName;\n}\n"]}
+{"version":3,"file":"tool-events.d.ts","sourceRoot":"","sources":["../../../src/core/extensions/tool-events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EACX,eAAe,EACf,aAAa,EACb,aAAa,EACb,eAAe,EACf,aAAa,EACb,aAAa,EACb,WAAW,EACX,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,MAAM,mBAAmB,CAAC;AAM3B,UAAU,iBAAiB;IAC1B,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC;CACrB;AAED,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC;CACrB;AAED,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC;CACrB;AAED,MAAM,WAAW,kBAAmB,SAAQ,iBAAiB;IAC5D,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,cAAc,CAAC;CACtB;AAED,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC;CACrB;AAED,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC7D,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,eAAe,CAAC;CACvB;AAED,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACzD,QAAQ,EAAE,IAAI,CAAC;IACf,KAAK,EAAE,WAAW,CAAC;CACnB;AAED,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC7D,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GACtB,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,GAClB,iBAAiB,GACjB,mBAAmB,GACnB,eAAe,GACf,mBAAmB,CAAC;AAEvB,UAAU,mBAAmB;IAC5B,IAAI,EAAE,aAAa,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,EAAE,CAAC,WAAW,GAAG,YAAY,CAAC,EAAE,CAAC;IACxC,OAAO,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,eAAe,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,eAAe,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,eAAe,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,oBAAqB,SAAQ,mBAAmB;IAChE,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,SAAS,CAAC;CACnB;AAED,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,eAAe,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,qBAAsB,SAAQ,mBAAmB;IACjE,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,iBAAiB,GAAG,SAAS,CAAC;CACvC;AAED,MAAM,WAAW,iBAAkB,SAAQ,mBAAmB;IAC7D,QAAQ,EAAE,IAAI,CAAC;IACf,OAAO,EAAE,aAAa,GAAG,SAAS,CAAC;CACnC;AAED,MAAM,WAAW,qBAAsB,SAAQ,mBAAmB;IACjE,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CACjB;AAED,sDAAsD;AACtD,MAAM,MAAM,eAAe,GACxB,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,oBAAoB,GACpB,mBAAmB,GACnB,qBAAqB,GACrB,iBAAiB,GACjB,qBAAqB,CAAC;AAGzB,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,IAAI,mBAAmB,CAE7E;AACD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,IAAI,mBAAmB,CAE7E;AACD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,IAAI,mBAAmB,CAE7E;AACD,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,IAAI,oBAAoB,CAE/E;AACD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,IAAI,mBAAmB,CAE7E;AACD,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,IAAI,qBAAqB,CAEjF;AACD,wBAAgB,cAAc,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,IAAI,iBAAiB,CAEzE;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,iBAAiB,CAAC;AACxG,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,iBAAiB,CAAC;AACxG,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,iBAAiB,CAAC;AACxG,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,kBAAkB,CAAC;AAC1G,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,iBAAiB,CAAC;AACxG,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,mBAAmB,CAAC;AAC5G,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,GAAG,KAAK,IAAI,eAAe,CAAC;AACpG,wBAAgB,mBAAmB,CAAC,KAAK,SAAS,MAAM,EAAE,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/F,QAAQ,EAAE,KAAK,EACf,KAAK,EAAE,aAAa,GAClB,KAAK,IAAI,aAAa,GAAG;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC","sourcesContent":["import type { ImageContent, TextContent } from \"@earendil-works/pi-ai\";\nimport type { EditToolDetails } from \"../tools/edit.ts\";\nimport type {\n\tBashToolDetails,\n\tBashToolInput,\n\tEditToolInput,\n\tFindToolDetails,\n\tFindToolInput,\n\tLsToolDetails,\n\tLsToolInput,\n\tReadToolDetails,\n\tReadToolInput,\n\tSearchToolDetails,\n\tSearchToolInput,\n\tWriteToolInput,\n} from \"../tools/index.ts\";\n\n// ============================================================================\n// Tool Events\n// ============================================================================\n\ninterface ToolCallEventBase {\n\ttype: \"tool_call\";\n\ttoolCallId: string;\n}\n\nexport interface BashToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"bash\";\n\tinput: BashToolInput;\n}\n\nexport interface ReadToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"read\";\n\tinput: ReadToolInput;\n}\n\nexport interface EditToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"edit\";\n\tinput: EditToolInput;\n}\n\nexport interface WriteToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"write\";\n\tinput: WriteToolInput;\n}\n\nexport interface FindToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"find\";\n\tinput: FindToolInput;\n}\n\nexport interface SearchToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"search\";\n\tinput: SearchToolInput;\n}\n\nexport interface LsToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"ls\";\n\tinput: LsToolInput;\n}\n\nexport interface CustomToolCallEvent extends ToolCallEventBase {\n\ttoolName: string;\n\tinput: Record<string, unknown>;\n}\n\n/**\n * Fired before a tool executes. Can block.\n *\n * `event.input` is mutable. Mutate it in place to patch tool arguments before execution.\n * Later `tool_call` handlers see earlier mutations. No re-validation is performed after mutation.\n */\nexport type ToolCallEvent =\n\t| BashToolCallEvent\n\t| ReadToolCallEvent\n\t| EditToolCallEvent\n\t| WriteToolCallEvent\n\t| FindToolCallEvent\n\t| SearchToolCallEvent\n\t| LsToolCallEvent\n\t| CustomToolCallEvent;\n\ninterface ToolResultEventBase {\n\ttype: \"tool_result\";\n\ttoolCallId: string;\n\tinput: Record<string, unknown>;\n\tcontent: (TextContent | ImageContent)[];\n\tisError: boolean;\n}\n\nexport interface BashToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"bash\";\n\tdetails: BashToolDetails | undefined;\n}\n\nexport interface ReadToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"read\";\n\tdetails: ReadToolDetails | undefined;\n}\n\nexport interface EditToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"edit\";\n\tdetails: EditToolDetails | undefined;\n}\n\nexport interface WriteToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"write\";\n\tdetails: undefined;\n}\n\nexport interface FindToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"find\";\n\tdetails: FindToolDetails | undefined;\n}\n\nexport interface SearchToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"search\";\n\tdetails: SearchToolDetails | undefined;\n}\n\nexport interface LsToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"ls\";\n\tdetails: LsToolDetails | undefined;\n}\n\nexport interface CustomToolResultEvent extends ToolResultEventBase {\n\ttoolName: string;\n\tdetails: unknown;\n}\n\n/** Fired after a tool executes. Can modify result. */\nexport type ToolResultEvent =\n\t| BashToolResultEvent\n\t| ReadToolResultEvent\n\t| EditToolResultEvent\n\t| WriteToolResultEvent\n\t| FindToolResultEvent\n\t| SearchToolResultEvent\n\t| LsToolResultEvent\n\t| CustomToolResultEvent;\n\n// Type guards for ToolResultEvent\nexport function isBashToolResult(e: ToolResultEvent): e is BashToolResultEvent {\n\treturn e.toolName === \"bash\";\n}\nexport function isReadToolResult(e: ToolResultEvent): e is ReadToolResultEvent {\n\treturn e.toolName === \"read\";\n}\nexport function isEditToolResult(e: ToolResultEvent): e is EditToolResultEvent {\n\treturn e.toolName === \"edit\";\n}\nexport function isWriteToolResult(e: ToolResultEvent): e is WriteToolResultEvent {\n\treturn e.toolName === \"write\";\n}\nexport function isFindToolResult(e: ToolResultEvent): e is FindToolResultEvent {\n\treturn e.toolName === \"find\";\n}\nexport function isSearchToolResult(e: ToolResultEvent): e is SearchToolResultEvent {\n\treturn e.toolName === \"search\";\n}\nexport function isLsToolResult(e: ToolResultEvent): e is LsToolResultEvent {\n\treturn e.toolName === \"ls\";\n}\n\n/**\n * Type guard for narrowing ToolCallEvent by tool name.\n *\n * Built-in tools narrow automatically (no type params needed):\n * ```ts\n * if (isToolCallEventType(\"bash\", event)) {\n *   event.input.command;  // string\n * }\n * ```\n *\n * Custom tools require explicit type parameters:\n * ```ts\n * if (isToolCallEventType<\"my_tool\", MyToolInput>(\"my_tool\", event)) {\n *   event.input.action;  // typed\n * }\n * ```\n *\n * Note: Direct narrowing via `event.toolName === \"bash\"` doesn't work because\n * CustomToolCallEvent.toolName is `string` which overlaps with all literals.\n */\nexport function isToolCallEventType(toolName: \"bash\", event: ToolCallEvent): event is BashToolCallEvent;\nexport function isToolCallEventType(toolName: \"read\", event: ToolCallEvent): event is ReadToolCallEvent;\nexport function isToolCallEventType(toolName: \"edit\", event: ToolCallEvent): event is EditToolCallEvent;\nexport function isToolCallEventType(toolName: \"write\", event: ToolCallEvent): event is WriteToolCallEvent;\nexport function isToolCallEventType(toolName: \"find\", event: ToolCallEvent): event is FindToolCallEvent;\nexport function isToolCallEventType(toolName: \"search\", event: ToolCallEvent): event is SearchToolCallEvent;\nexport function isToolCallEventType(toolName: \"ls\", event: ToolCallEvent): event is LsToolCallEvent;\nexport function isToolCallEventType<TName extends string, TInput extends Record<string, unknown>>(\n\ttoolName: TName,\n\tevent: ToolCallEvent,\n): event is ToolCallEvent & { toolName: TName; input: TInput };\nexport function isToolCallEventType(toolName: string, event: ToolCallEvent): boolean {\n\treturn event.toolName === toolName;\n}\n"]}

package/dist/core/extensions/tool-events.js

@@ -11,12 +11,12 @@ export function isEditToolResult(e) {
 export function isWriteToolResult(e) {
     return e.toolName === "write";
 }
-export function isGrepToolResult(e) {
-    return e.toolName === "grep";
-}
 export function isFindToolResult(e) {
     return e.toolName === "find";
 }
+export function isSearchToolResult(e) {
+    return e.toolName === "search";
+}
 export function isLsToolResult(e) {
     return e.toolName === "ls";
 }

package/dist/core/extensions/tool-events.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-events.js","sourceRoot":"","sources":["../../../src/core/extensions/tool-events.ts"],"names":[],"mappings":"AA6IA,kCAAkC;AAClC,MAAM,UAAU,gBAAgB,CAAC,CAAkB;IAClD,OAAO,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;AAC9B,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,CAAkB;IAClD,OAAO,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;AAC9B,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,CAAkB;IAClD,OAAO,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;AAC9B,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,CAAkB;IACnD,OAAO,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;AAC/B,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,CAAkB;IAClD,OAAO,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;AAC9B,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,CAAkB;IAClD,OAAO,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;AAC9B,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,CAAkB;IAChD,OAAO,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC;AAC5B,CAAC;AAiCD,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,KAAoB;IACzE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC;AACpC,CAAC","sourcesContent":["import type { ImageContent, TextContent } from \"@earendil-works/pi-ai\";\nimport type { EditToolDetails } from \"../tools/edit.ts\";\nimport type {\n\tBashToolDetails,\n\tBashToolInput,\n\tEditToolInput,\n\tFindToolDetails,\n\tFindToolInput,\n\tGrepToolDetails,\n\tGrepToolInput,\n\tLsToolDetails,\n\tLsToolInput,\n\tReadToolDetails,\n\tReadToolInput,\n\tWriteToolInput,\n} from \"../tools/index.ts\";\n\n// ============================================================================\n// Tool Events\n// ============================================================================\n\ninterface ToolCallEventBase {\n\ttype: \"tool_call\";\n\ttoolCallId: string;\n}\n\nexport interface BashToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"bash\";\n\tinput: BashToolInput;\n}\n\nexport interface ReadToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"read\";\n\tinput: ReadToolInput;\n}\n\nexport interface EditToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"edit\";\n\tinput: EditToolInput;\n}\n\nexport interface WriteToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"write\";\n\tinput: WriteToolInput;\n}\n\nexport interface GrepToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"grep\";\n\tinput: GrepToolInput;\n}\n\nexport interface FindToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"find\";\n\tinput: FindToolInput;\n}\n\nexport interface LsToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"ls\";\n\tinput: LsToolInput;\n}\n\nexport interface CustomToolCallEvent extends ToolCallEventBase {\n\ttoolName: string;\n\tinput: Record<string, unknown>;\n}\n\n/**\n * Fired before a tool executes. Can block.\n *\n * `event.input` is mutable. Mutate it in place to patch tool arguments before execution.\n * Later `tool_call` handlers see earlier mutations. No re-validation is performed after mutation.\n */\nexport type ToolCallEvent =\n\t| BashToolCallEvent\n\t| ReadToolCallEvent\n\t| EditToolCallEvent\n\t| WriteToolCallEvent\n\t| GrepToolCallEvent\n\t| FindToolCallEvent\n\t| LsToolCallEvent\n\t| CustomToolCallEvent;\n\ninterface ToolResultEventBase {\n\ttype: \"tool_result\";\n\ttoolCallId: string;\n\tinput: Record<string, unknown>;\n\tcontent: (TextContent | ImageContent)[];\n\tisError: boolean;\n}\n\nexport interface BashToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"bash\";\n\tdetails: BashToolDetails | undefined;\n}\n\nexport interface ReadToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"read\";\n\tdetails: ReadToolDetails | undefined;\n}\n\nexport interface EditToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"edit\";\n\tdetails: EditToolDetails | undefined;\n}\n\nexport interface WriteToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"write\";\n\tdetails: undefined;\n}\n\nexport interface GrepToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"grep\";\n\tdetails: GrepToolDetails | undefined;\n}\n\nexport interface FindToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"find\";\n\tdetails: FindToolDetails | undefined;\n}\n\nexport interface LsToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"ls\";\n\tdetails: LsToolDetails | undefined;\n}\n\nexport interface CustomToolResultEvent extends ToolResultEventBase {\n\ttoolName: string;\n\tdetails: unknown;\n}\n\n/** Fired after a tool executes. Can modify result. */\nexport type ToolResultEvent =\n\t| BashToolResultEvent\n\t| ReadToolResultEvent\n\t| EditToolResultEvent\n\t| WriteToolResultEvent\n\t| GrepToolResultEvent\n\t| FindToolResultEvent\n\t| LsToolResultEvent\n\t| CustomToolResultEvent;\n\n// Type guards for ToolResultEvent\nexport function isBashToolResult(e: ToolResultEvent): e is BashToolResultEvent {\n\treturn e.toolName === \"bash\";\n}\nexport function isReadToolResult(e: ToolResultEvent): e is ReadToolResultEvent {\n\treturn e.toolName === \"read\";\n}\nexport function isEditToolResult(e: ToolResultEvent): e is EditToolResultEvent {\n\treturn e.toolName === \"edit\";\n}\nexport function isWriteToolResult(e: ToolResultEvent): e is WriteToolResultEvent {\n\treturn e.toolName === \"write\";\n}\nexport function isGrepToolResult(e: ToolResultEvent): e is GrepToolResultEvent {\n\treturn e.toolName === \"grep\";\n}\nexport function isFindToolResult(e: ToolResultEvent): e is FindToolResultEvent {\n\treturn e.toolName === \"find\";\n}\nexport function isLsToolResult(e: ToolResultEvent): e is LsToolResultEvent {\n\treturn e.toolName === \"ls\";\n}\n\n/**\n * Type guard for narrowing ToolCallEvent by tool name.\n *\n * Built-in tools narrow automatically (no type params needed):\n * ```ts\n * if (isToolCallEventType(\"bash\", event)) {\n *   event.input.command;  // string\n * }\n * ```\n *\n * Custom tools require explicit type parameters:\n * ```ts\n * if (isToolCallEventType<\"my_tool\", MyToolInput>(\"my_tool\", event)) {\n *   event.input.action;  // typed\n * }\n * ```\n *\n * Note: Direct narrowing via `event.toolName === \"bash\"` doesn't work because\n * CustomToolCallEvent.toolName is `string` which overlaps with all literals.\n */\nexport function isToolCallEventType(toolName: \"bash\", event: ToolCallEvent): event is BashToolCallEvent;\nexport function isToolCallEventType(toolName: \"read\", event: ToolCallEvent): event is ReadToolCallEvent;\nexport function isToolCallEventType(toolName: \"edit\", event: ToolCallEvent): event is EditToolCallEvent;\nexport function isToolCallEventType(toolName: \"write\", event: ToolCallEvent): event is WriteToolCallEvent;\nexport function isToolCallEventType(toolName: \"grep\", event: ToolCallEvent): event is GrepToolCallEvent;\nexport function isToolCallEventType(toolName: \"find\", event: ToolCallEvent): event is FindToolCallEvent;\nexport function isToolCallEventType(toolName: \"ls\", event: ToolCallEvent): event is LsToolCallEvent;\nexport function isToolCallEventType<TName extends string, TInput extends Record<string, unknown>>(\n\ttoolName: TName,\n\tevent: ToolCallEvent,\n): event is ToolCallEvent & { toolName: TName; input: TInput };\nexport function isToolCallEventType(toolName: string, event: ToolCallEvent): boolean {\n\treturn event.toolName === toolName;\n}\n"]}
+{"version":3,"file":"tool-events.js","sourceRoot":"","sources":["../../../src/core/extensions/tool-events.ts"],"names":[],"mappings":"AA6IA,kCAAkC;AAClC,MAAM,UAAU,gBAAgB,CAAC,CAAkB;IAClD,OAAO,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;AAC9B,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,CAAkB;IAClD,OAAO,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;AAC9B,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,CAAkB;IAClD,OAAO,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;AAC9B,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,CAAkB;IACnD,OAAO,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC;AAC/B,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,CAAkB;IAClD,OAAO,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC;AAC9B,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,CAAkB;IACpD,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;AAChC,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,CAAkB;IAChD,OAAO,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC;AAC5B,CAAC;AAiCD,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,KAAoB;IACzE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC;AACpC,CAAC","sourcesContent":["import type { ImageContent, TextContent } from \"@earendil-works/pi-ai\";\nimport type { EditToolDetails } from \"../tools/edit.ts\";\nimport type {\n\tBashToolDetails,\n\tBashToolInput,\n\tEditToolInput,\n\tFindToolDetails,\n\tFindToolInput,\n\tLsToolDetails,\n\tLsToolInput,\n\tReadToolDetails,\n\tReadToolInput,\n\tSearchToolDetails,\n\tSearchToolInput,\n\tWriteToolInput,\n} from \"../tools/index.ts\";\n\n// ============================================================================\n// Tool Events\n// ============================================================================\n\ninterface ToolCallEventBase {\n\ttype: \"tool_call\";\n\ttoolCallId: string;\n}\n\nexport interface BashToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"bash\";\n\tinput: BashToolInput;\n}\n\nexport interface ReadToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"read\";\n\tinput: ReadToolInput;\n}\n\nexport interface EditToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"edit\";\n\tinput: EditToolInput;\n}\n\nexport interface WriteToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"write\";\n\tinput: WriteToolInput;\n}\n\nexport interface FindToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"find\";\n\tinput: FindToolInput;\n}\n\nexport interface SearchToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"search\";\n\tinput: SearchToolInput;\n}\n\nexport interface LsToolCallEvent extends ToolCallEventBase {\n\ttoolName: \"ls\";\n\tinput: LsToolInput;\n}\n\nexport interface CustomToolCallEvent extends ToolCallEventBase {\n\ttoolName: string;\n\tinput: Record<string, unknown>;\n}\n\n/**\n * Fired before a tool executes. Can block.\n *\n * `event.input` is mutable. Mutate it in place to patch tool arguments before execution.\n * Later `tool_call` handlers see earlier mutations. No re-validation is performed after mutation.\n */\nexport type ToolCallEvent =\n\t| BashToolCallEvent\n\t| ReadToolCallEvent\n\t| EditToolCallEvent\n\t| WriteToolCallEvent\n\t| FindToolCallEvent\n\t| SearchToolCallEvent\n\t| LsToolCallEvent\n\t| CustomToolCallEvent;\n\ninterface ToolResultEventBase {\n\ttype: \"tool_result\";\n\ttoolCallId: string;\n\tinput: Record<string, unknown>;\n\tcontent: (TextContent | ImageContent)[];\n\tisError: boolean;\n}\n\nexport interface BashToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"bash\";\n\tdetails: BashToolDetails | undefined;\n}\n\nexport interface ReadToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"read\";\n\tdetails: ReadToolDetails | undefined;\n}\n\nexport interface EditToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"edit\";\n\tdetails: EditToolDetails | undefined;\n}\n\nexport interface WriteToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"write\";\n\tdetails: undefined;\n}\n\nexport interface FindToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"find\";\n\tdetails: FindToolDetails | undefined;\n}\n\nexport interface SearchToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"search\";\n\tdetails: SearchToolDetails | undefined;\n}\n\nexport interface LsToolResultEvent extends ToolResultEventBase {\n\ttoolName: \"ls\";\n\tdetails: LsToolDetails | undefined;\n}\n\nexport interface CustomToolResultEvent extends ToolResultEventBase {\n\ttoolName: string;\n\tdetails: unknown;\n}\n\n/** Fired after a tool executes. Can modify result. */\nexport type ToolResultEvent =\n\t| BashToolResultEvent\n\t| ReadToolResultEvent\n\t| EditToolResultEvent\n\t| WriteToolResultEvent\n\t| FindToolResultEvent\n\t| SearchToolResultEvent\n\t| LsToolResultEvent\n\t| CustomToolResultEvent;\n\n// Type guards for ToolResultEvent\nexport function isBashToolResult(e: ToolResultEvent): e is BashToolResultEvent {\n\treturn e.toolName === \"bash\";\n}\nexport function isReadToolResult(e: ToolResultEvent): e is ReadToolResultEvent {\n\treturn e.toolName === \"read\";\n}\nexport function isEditToolResult(e: ToolResultEvent): e is EditToolResultEvent {\n\treturn e.toolName === \"edit\";\n}\nexport function isWriteToolResult(e: ToolResultEvent): e is WriteToolResultEvent {\n\treturn e.toolName === \"write\";\n}\nexport function isFindToolResult(e: ToolResultEvent): e is FindToolResultEvent {\n\treturn e.toolName === \"find\";\n}\nexport function isSearchToolResult(e: ToolResultEvent): e is SearchToolResultEvent {\n\treturn e.toolName === \"search\";\n}\nexport function isLsToolResult(e: ToolResultEvent): e is LsToolResultEvent {\n\treturn e.toolName === \"ls\";\n}\n\n/**\n * Type guard for narrowing ToolCallEvent by tool name.\n *\n * Built-in tools narrow automatically (no type params needed):\n * ```ts\n * if (isToolCallEventType(\"bash\", event)) {\n *   event.input.command;  // string\n * }\n * ```\n *\n * Custom tools require explicit type parameters:\n * ```ts\n * if (isToolCallEventType<\"my_tool\", MyToolInput>(\"my_tool\", event)) {\n *   event.input.action;  // typed\n * }\n * ```\n *\n * Note: Direct narrowing via `event.toolName === \"bash\"` doesn't work because\n * CustomToolCallEvent.toolName is `string` which overlaps with all literals.\n */\nexport function isToolCallEventType(toolName: \"bash\", event: ToolCallEvent): event is BashToolCallEvent;\nexport function isToolCallEventType(toolName: \"read\", event: ToolCallEvent): event is ReadToolCallEvent;\nexport function isToolCallEventType(toolName: \"edit\", event: ToolCallEvent): event is EditToolCallEvent;\nexport function isToolCallEventType(toolName: \"write\", event: ToolCallEvent): event is WriteToolCallEvent;\nexport function isToolCallEventType(toolName: \"find\", event: ToolCallEvent): event is FindToolCallEvent;\nexport function isToolCallEventType(toolName: \"search\", event: ToolCallEvent): event is SearchToolCallEvent;\nexport function isToolCallEventType(toolName: \"ls\", event: ToolCallEvent): event is LsToolCallEvent;\nexport function isToolCallEventType<TName extends string, TInput extends Record<string, unknown>>(\n\ttoolName: TName,\n\tevent: ToolCallEvent,\n): event is ToolCallEvent & { toolName: TName; input: TInput };\nexport function isToolCallEventType(toolName: string, event: ToolCallEvent): boolean {\n\treturn event.toolName === toolName;\n}\n"]}

package/dist/core/extensions/types.d.ts

@@ -28,5 +28,5 @@ export type * from "./tool-events.ts";
 export type * from "./tool-types.ts";
 export type * from "./ui-types.ts";
 export { defineTool } from "./tool-types.ts";
-export { isBashToolResult, isEditToolResult, isFindToolResult, isGrepToolResult, isLsToolResult, isReadToolResult, isToolCallEventType, isWriteToolResult, } from "./tool-events.ts";
+export { isBashToolResult, isEditToolResult, isFindToolResult, isLsToolResult, isSearchToolResult, isReadToolResult, isToolCallEventType, isWriteToolResult, } from "./tool-events.ts";
 //# sourceMappingURL=types.d.ts.map

package/dist/core/extensions/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/extensions/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,YAAY,EAAE,eAAe,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACjH,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,YAAY,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AACpE,mBAAmB,mBAAmB,CAAC;AACvC,mBAAmB,gBAAgB,CAAC;AACpC,mBAAmB,oBAAoB,CAAC;AACxC,mBAAmB,oBAAoB,CAAC;AACxC,mBAAmB,oBAAoB,CAAC;AACxC,mBAAmB,kBAAkB,CAAC;AACtC,mBAAmB,oBAAoB,CAAC;AACxC,mBAAmB,qBAAqB,CAAC;AACzC,mBAAmB,oBAAoB,CAAC;AACxC,mBAAmB,qBAAqB,CAAC;AACzC,mBAAmB,kBAAkB,CAAC;AACtC,mBAAmB,iBAAiB,CAAC;AACrC,mBAAmB,eAAe,CAAC;AAEnC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EACN,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,GACjB,MAAM,kBAAkB,CAAC","sourcesContent":["/**\n * Extension system types.\n *\n * Extensions are TypeScript modules that can:\n * - Subscribe to agent lifecycle events\n * - Register LLM-callable tools\n * - Register commands, keyboard shortcuts, and CLI flags\n * - Interact with the user via UI primitives\n *\n * This file preserves the public import path for extension authors while the\n * declarations live in responsibility-focused sibling modules.\n */\n\nexport type { AgentToolResult, AgentToolUpdateCallback, ToolExecutionMode } from \"@earendil-works/pi-agent-core\";\nexport type { ExecOptions, ExecResult } from \"../exec.ts\";\nexport type { AppKeybinding, KeybindingsManager } from \"../keybindings.ts\";\nexport type { BuildSystemPromptOptions } from \"../system-prompt.ts\";\nexport type * from \"./agent-events.ts\";\nexport type * from \"./api-types.ts\";\nexport type * from \"./command-types.ts\";\nexport type * from \"./context-types.ts\";\nexport type * from \"./event-results.ts\";\nexport type * from \"./event-types.ts\";\nexport type * from \"./message-types.ts\";\nexport type * from \"./provider-types.ts\";\nexport type * from \"./runtime-types.ts\";\nexport type * from \"./session-events.ts\";\nexport type * from \"./tool-events.ts\";\nexport type * from \"./tool-types.ts\";\nexport type * from \"./ui-types.ts\";\n\nexport { defineTool } from \"./tool-types.ts\";\nexport {\n\tisBashToolResult,\n\tisEditToolResult,\n\tisFindToolResult,\n\tisGrepToolResult,\n\tisLsToolResult,\n\tisReadToolResult,\n\tisToolCallEventType,\n\tisWriteToolResult,\n} from \"./tool-events.ts\";\n"]}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/extensions/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,YAAY,EAAE,eAAe,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACjH,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,YAAY,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AACpE,mBAAmB,mBAAmB,CAAC;AACvC,mBAAmB,gBAAgB,CAAC;AACpC,mBAAmB,oBAAoB,CAAC;AACxC,mBAAmB,oBAAoB,CAAC;AACxC,mBAAmB,oBAAoB,CAAC;AACxC,mBAAmB,kBAAkB,CAAC;AACtC,mBAAmB,oBAAoB,CAAC;AACxC,mBAAmB,qBAAqB,CAAC;AACzC,mBAAmB,oBAAoB,CAAC;AACxC,mBAAmB,qBAAqB,CAAC;AACzC,mBAAmB,kBAAkB,CAAC;AACtC,mBAAmB,iBAAiB,CAAC;AACrC,mBAAmB,eAAe,CAAC;AAEnC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EACN,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,GACjB,MAAM,kBAAkB,CAAC","sourcesContent":["/**\n * Extension system types.\n *\n * Extensions are TypeScript modules that can:\n * - Subscribe to agent lifecycle events\n * - Register LLM-callable tools\n * - Register commands, keyboard shortcuts, and CLI flags\n * - Interact with the user via UI primitives\n *\n * This file preserves the public import path for extension authors while the\n * declarations live in responsibility-focused sibling modules.\n */\n\nexport type { AgentToolResult, AgentToolUpdateCallback, ToolExecutionMode } from \"@earendil-works/pi-agent-core\";\nexport type { ExecOptions, ExecResult } from \"../exec.ts\";\nexport type { AppKeybinding, KeybindingsManager } from \"../keybindings.ts\";\nexport type { BuildSystemPromptOptions } from \"../system-prompt.ts\";\nexport type * from \"./agent-events.ts\";\nexport type * from \"./api-types.ts\";\nexport type * from \"./command-types.ts\";\nexport type * from \"./context-types.ts\";\nexport type * from \"./event-results.ts\";\nexport type * from \"./event-types.ts\";\nexport type * from \"./message-types.ts\";\nexport type * from \"./provider-types.ts\";\nexport type * from \"./runtime-types.ts\";\nexport type * from \"./session-events.ts\";\nexport type * from \"./tool-events.ts\";\nexport type * from \"./tool-types.ts\";\nexport type * from \"./ui-types.ts\";\n\nexport { defineTool } from \"./tool-types.ts\";\nexport {\n\tisBashToolResult,\n\tisEditToolResult,\n\tisFindToolResult,\n\tisLsToolResult,\n\tisSearchToolResult,\n\tisReadToolResult,\n\tisToolCallEventType,\n\tisWriteToolResult,\n} from \"./tool-events.ts\";\n"]}

package/dist/core/extensions/types.js

@@ -11,5 +11,5 @@
  * declarations live in responsibility-focused sibling modules.
  */
 export { defineTool } from "./tool-types.js";
-export { isBashToolResult, isEditToolResult, isFindToolResult, isGrepToolResult, isLsToolResult, isReadToolResult, isToolCallEventType, isWriteToolResult, } from "./tool-events.js";
+export { isBashToolResult, isEditToolResult, isFindToolResult, isLsToolResult, isSearchToolResult, isReadToolResult, isToolCallEventType, isWriteToolResult, } from "./tool-events.js";
 //# sourceMappingURL=types.js.map

package/dist/core/extensions/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/extensions/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAoBH,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EACN,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,GACjB,MAAM,kBAAkB,CAAC","sourcesContent":["/**\n * Extension system types.\n *\n * Extensions are TypeScript modules that can:\n * - Subscribe to agent lifecycle events\n * - Register LLM-callable tools\n * - Register commands, keyboard shortcuts, and CLI flags\n * - Interact with the user via UI primitives\n *\n * This file preserves the public import path for extension authors while the\n * declarations live in responsibility-focused sibling modules.\n */\n\nexport type { AgentToolResult, AgentToolUpdateCallback, ToolExecutionMode } from \"@earendil-works/pi-agent-core\";\nexport type { ExecOptions, ExecResult } from \"../exec.ts\";\nexport type { AppKeybinding, KeybindingsManager } from \"../keybindings.ts\";\nexport type { BuildSystemPromptOptions } from \"../system-prompt.ts\";\nexport type * from \"./agent-events.ts\";\nexport type * from \"./api-types.ts\";\nexport type * from \"./command-types.ts\";\nexport type * from \"./context-types.ts\";\nexport type * from \"./event-results.ts\";\nexport type * from \"./event-types.ts\";\nexport type * from \"./message-types.ts\";\nexport type * from \"./provider-types.ts\";\nexport type * from \"./runtime-types.ts\";\nexport type * from \"./session-events.ts\";\nexport type * from \"./tool-events.ts\";\nexport type * from \"./tool-types.ts\";\nexport type * from \"./ui-types.ts\";\n\nexport { defineTool } from \"./tool-types.ts\";\nexport {\n\tisBashToolResult,\n\tisEditToolResult,\n\tisFindToolResult,\n\tisGrepToolResult,\n\tisLsToolResult,\n\tisReadToolResult,\n\tisToolCallEventType,\n\tisWriteToolResult,\n} from \"./tool-events.ts\";\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/extensions/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAoBH,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EACN,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,GACjB,MAAM,kBAAkB,CAAC","sourcesContent":["/**\n * Extension system types.\n *\n * Extensions are TypeScript modules that can:\n * - Subscribe to agent lifecycle events\n * - Register LLM-callable tools\n * - Register commands, keyboard shortcuts, and CLI flags\n * - Interact with the user via UI primitives\n *\n * This file preserves the public import path for extension authors while the\n * declarations live in responsibility-focused sibling modules.\n */\n\nexport type { AgentToolResult, AgentToolUpdateCallback, ToolExecutionMode } from \"@earendil-works/pi-agent-core\";\nexport type { ExecOptions, ExecResult } from \"../exec.ts\";\nexport type { AppKeybinding, KeybindingsManager } from \"../keybindings.ts\";\nexport type { BuildSystemPromptOptions } from \"../system-prompt.ts\";\nexport type * from \"./agent-events.ts\";\nexport type * from \"./api-types.ts\";\nexport type * from \"./command-types.ts\";\nexport type * from \"./context-types.ts\";\nexport type * from \"./event-results.ts\";\nexport type * from \"./event-types.ts\";\nexport type * from \"./message-types.ts\";\nexport type * from \"./provider-types.ts\";\nexport type * from \"./runtime-types.ts\";\nexport type * from \"./session-events.ts\";\nexport type * from \"./tool-events.ts\";\nexport type * from \"./tool-types.ts\";\nexport type * from \"./ui-types.ts\";\n\nexport { defineTool } from \"./tool-types.ts\";\nexport {\n\tisBashToolResult,\n\tisEditToolResult,\n\tisFindToolResult,\n\tisLsToolResult,\n\tisSearchToolResult,\n\tisReadToolResult,\n\tisToolCallEventType,\n\tisWriteToolResult,\n} from \"./tool-events.ts\";\n"]}

package/dist/core/flattened-tool-arguments.d.ts

@@ -38,4 +38,22 @@ export declare function parseFlattenedKeyPath(key: string): Array<string | numbe
  * plain key equal to one of those names.
  */
 export declare function reconstructFlattenedKeys(args: Record<string, unknown>, shouldSplit: (key: string) => boolean): Record<string, unknown>;
+/**
+ * Reconstruct flattened tool-call arguments into nested arrays/objects using
+ * schema-aware disambiguation for dotted keys.
+ *
+ * - Bracket-indexed keys (`ids[0]`, `files[0].path`) are always reconstructed.
+ * - Purely dotted keys (`parent.child`) are reconstructed only when the optional
+ *   `schema` marks their head segment as an object/array container property.
+ *   The presence of a bracket-indexed sibling does NOT force a pure dotted key
+ *   to split, so a literal property name such as `filter.name` survives intact
+ *   even when a sibling like `ids[0]` is present (issue #1496).
+ * - Otherwise dotted keys are preserved verbatim — fixing the regression where a
+ *   literal property name like `filter.name` was silently corrupted.
+ *
+ * Returns the original reference unchanged when there is nothing to
+ * reconstruct. Prototype-pollution safety is delegated to
+ * {@link reconstructFlattenedKeys}.
+ */
+export declare function unflattenArgumentsWithSchema(args: Record<string, unknown>, schema?: unknown): Record<string, unknown>;
 //# sourceMappingURL=flattened-tool-arguments.d.ts.map

package/dist/core/flattened-tool-arguments.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flattened-tool-arguments.d.ts","sourceRoot":"","sources":["../../src/core/flattened-tool-arguments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AASH;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,SAAS,CAmCrF;AA0CD;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GACpC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAazB","sourcesContent":["/**\n * Canonical reconstruction of flattened tool-call arguments.\n *\n * Some upstream providers — notably GitHub Copilot Gemini models proxied through\n * Google's GenAI API — serialize array/object function-call arguments as\n * flattened, indexed keys on the wire. For example a tool called with\n * `{ keywords: [\"a\", \"b\"] }` arrives as `{ \"keywords[0]\": \"a\", \"keywords[1]\": \"b\" }`,\n * and `{ files: [{ path }] }` as `{ \"files[0].path\": \"...\" }`.\n *\n * This module is the single source of truth for turning those flattened keys\n * back into nested arrays/objects. Both the host runtime's per-tool\n * normalization (gated to Copilot Gemini, schema-aware) and the MCP `callTool`\n * boundary (provider-agnostic, bracket self-gating) delegate here so the two\n * paths cannot drift — in particular so the prototype-pollution guard lives in\n * exactly one place.\n *\n * Security: argument keys cross a trust boundary (model/provider wire → tool /\n * MCP server validation). A key path that walks through `__proto__`,\n * `constructor`, or `prototype` could otherwise reach `Object.prototype` and\n * mutate it process-wide. Any key whose path contains such a segment — at any\n * position, including the final segment and a literal plain key — is dropped.\n */\n\n/** Key segments that must never be written or traversed (prototype pollution). */\nconst UNSAFE_KEY_SEGMENTS: ReadonlySet<string> = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\n\nfunction isUnsafeSegment(segment: string | number): boolean {\n  return typeof segment === \"string\" && UNSAFE_KEY_SEGMENTS.has(segment);\n}\n\n/**\n * Parse a flattened key such as `a.b[0].c` into path segments\n * `[\"a\", \"b\", 0, \"c\"]`. Returns `undefined` for a plain key with no `.`/`[`, or\n * for a malformed bracket expression (left untouched by the caller).\n */\nexport function parseFlattenedKeyPath(key: string): Array<string | number> | undefined {\n  if (!/[.[]/.test(key)) return undefined;\n  const segments: Array<string | number> = [];\n  let current = \"\";\n  let index = 0;\n  const flush = () => {\n    if (current !== \"\") {\n      segments.push(current);\n      current = \"\";\n    }\n  };\n  while (index < key.length) {\n    const char = key[index];\n    if (char === \".\") {\n      flush();\n      index += 1;\n    } else if (char === \"[\") {\n      flush();\n      const end = key.indexOf(\"]\", index);\n      if (end === -1) return undefined; // malformed — leave key untouched\n      const inner = key.slice(index + 1, end);\n      const numeric = Number(inner);\n      if (inner.trim() !== \"\" && Number.isInteger(numeric) && numeric >= 0) {\n        segments.push(numeric);\n      } else {\n        segments.push(inner.replace(/^[\"']|[\"']$/g, \"\"));\n      }\n      index = end + 1;\n    } else {\n      current += char;\n      index += 1;\n    }\n  }\n  flush();\n  return segments.length > 0 ? segments : undefined;\n}\n\n/** Assign `value` at the given path inside `root`, creating arrays/objects as needed. */\nfunction assignFlattenedKeyPath(\n  root: Record<string | number, unknown>,\n  segments: Array<string | number>,\n  value: unknown,\n): void {\n  let node: Record<string | number, unknown> = root;\n  for (let i = 0; i < segments.length - 1; i += 1) {\n    const segment = segments[i];\n    const nextIsIndex = typeof segments[i + 1] === \"number\";\n    const existing = node[segment];\n    if (existing === null || existing === undefined || typeof existing !== \"object\") {\n      node[segment] = nextIsIndex ? [] : {};\n    }\n    node = node[segment] as Record<string | number, unknown>;\n  }\n  node[segments[segments.length - 1]] = value;\n}\n\n/**\n * Remove empty holes from sparse arrays produced by out-of-order indices.\n *\n * Note: this collapses holes rather than preserving them — `name[0]` + `name[2]`\n * (no index 1) becomes a dense 2-element array `[a, c]`, not `[a, <hole>, c]`.\n * That is the intended healing for Gemini's flattened output (which emits\n * contiguous indices in practice); it would, however, silently misalign two\n * arrays that were meant to be index-paired.\n */\nfunction compactSparseArrays(value: unknown): unknown {\n  if (Array.isArray(value)) {\n    return value.filter((entry) => entry !== undefined).map((entry) => compactSparseArrays(entry));\n  }\n  if (value !== null && typeof value === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const [key, entry] of Object.entries(value)) out[key] = compactSparseArrays(entry);\n    return out;\n  }\n  return value;\n}\n\n/**\n * Reconstruct (unflatten) flattened keys into nested arrays/objects — for\n * example `\"items[0]\"` -> `{ items: [...] }` and `\"parent.child\"` ->\n * `{ parent: { child: ... } }`. `shouldSplit` decides, per key, whether it is a\n * flattened path (true) or an opaque literal key to be preserved (false);\n * callers apply their own gating/schema logic there.\n *\n * Prototype-pollution safe: a key whose parsed path contains `__proto__`,\n * `constructor`, or `prototype` (at any position) is dropped, as is a literal\n * plain key equal to one of those names.\n */\nexport function reconstructFlattenedKeys(\n  args: Record<string, unknown>,\n  shouldSplit: (key: string) => boolean,\n): Record<string, unknown> {\n  const result: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(args)) {\n    const segments = shouldSplit(key) ? parseFlattenedKeyPath(key) : undefined;\n    if (!segments) {\n      // Plain passthrough — but never assign a literal prototype-polluting key.\n      if (!UNSAFE_KEY_SEGMENTS.has(key)) result[key] = value;\n      continue;\n    }\n    if (segments.some(isUnsafeSegment)) continue; // drop a polluting path entirely\n    assignFlattenedKeyPath(result, segments, value);\n  }\n  return compactSparseArrays(result) as Record<string, unknown>;\n}\n"]}
+{"version":3,"file":"flattened-tool-arguments.d.ts","sourceRoot":"","sources":["../../src/core/flattened-tool-arguments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AASH;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,SAAS,CAmCrF;AA0CD;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GACpC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAazB;AAyFD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,CAAC,EAAE,OAAO,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYzB","sourcesContent":["/**\n * Canonical reconstruction of flattened tool-call arguments.\n *\n * Some upstream providers — notably GitHub Copilot Gemini models proxied through\n * Google's GenAI API — serialize array/object function-call arguments as\n * flattened, indexed keys on the wire. For example a tool called with\n * `{ keywords: [\"a\", \"b\"] }` arrives as `{ \"keywords[0]\": \"a\", \"keywords[1]\": \"b\" }`,\n * and `{ files: [{ path }] }` as `{ \"files[0].path\": \"...\" }`.\n *\n * This module is the single source of truth for turning those flattened keys\n * back into nested arrays/objects. Both the host runtime's per-tool\n * normalization (gated to Copilot Gemini, schema-aware) and the MCP `callTool`\n * boundary (provider-agnostic, bracket self-gating) delegate here so the two\n * paths cannot drift — in particular so the prototype-pollution guard lives in\n * exactly one place.\n *\n * Security: argument keys cross a trust boundary (model/provider wire → tool /\n * MCP server validation). A key path that walks through `__proto__`,\n * `constructor`, or `prototype` could otherwise reach `Object.prototype` and\n * mutate it process-wide. Any key whose path contains such a segment — at any\n * position, including the final segment and a literal plain key — is dropped.\n */\n\n/** Key segments that must never be written or traversed (prototype pollution). */\nconst UNSAFE_KEY_SEGMENTS: ReadonlySet<string> = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\n\nfunction isUnsafeSegment(segment: string | number): boolean {\n  return typeof segment === \"string\" && UNSAFE_KEY_SEGMENTS.has(segment);\n}\n\n/**\n * Parse a flattened key such as `a.b[0].c` into path segments\n * `[\"a\", \"b\", 0, \"c\"]`. Returns `undefined` for a plain key with no `.`/`[`, or\n * for a malformed bracket expression (left untouched by the caller).\n */\nexport function parseFlattenedKeyPath(key: string): Array<string | number> | undefined {\n  if (!/[.[]/.test(key)) return undefined;\n  const segments: Array<string | number> = [];\n  let current = \"\";\n  let index = 0;\n  const flush = () => {\n    if (current !== \"\") {\n      segments.push(current);\n      current = \"\";\n    }\n  };\n  while (index < key.length) {\n    const char = key[index];\n    if (char === \".\") {\n      flush();\n      index += 1;\n    } else if (char === \"[\") {\n      flush();\n      const end = key.indexOf(\"]\", index);\n      if (end === -1) return undefined; // malformed — leave key untouched\n      const inner = key.slice(index + 1, end);\n      const numeric = Number(inner);\n      if (inner.trim() !== \"\" && Number.isInteger(numeric) && numeric >= 0) {\n        segments.push(numeric);\n      } else {\n        segments.push(inner.replace(/^[\"']|[\"']$/g, \"\"));\n      }\n      index = end + 1;\n    } else {\n      current += char;\n      index += 1;\n    }\n  }\n  flush();\n  return segments.length > 0 ? segments : undefined;\n}\n\n/** Assign `value` at the given path inside `root`, creating arrays/objects as needed. */\nfunction assignFlattenedKeyPath(\n  root: Record<string | number, unknown>,\n  segments: Array<string | number>,\n  value: unknown,\n): void {\n  let node: Record<string | number, unknown> = root;\n  for (let i = 0; i < segments.length - 1; i += 1) {\n    const segment = segments[i];\n    const nextIsIndex = typeof segments[i + 1] === \"number\";\n    const existing = node[segment];\n    if (existing === null || existing === undefined || typeof existing !== \"object\") {\n      node[segment] = nextIsIndex ? [] : {};\n    }\n    node = node[segment] as Record<string | number, unknown>;\n  }\n  node[segments[segments.length - 1]] = value;\n}\n\n/**\n * Remove empty holes from sparse arrays produced by out-of-order indices.\n *\n * Note: this collapses holes rather than preserving them — `name[0]` + `name[2]`\n * (no index 1) becomes a dense 2-element array `[a, c]`, not `[a, <hole>, c]`.\n * That is the intended healing for Gemini's flattened output (which emits\n * contiguous indices in practice); it would, however, silently misalign two\n * arrays that were meant to be index-paired.\n */\nfunction compactSparseArrays(value: unknown): unknown {\n  if (Array.isArray(value)) {\n    return value.filter((entry) => entry !== undefined).map((entry) => compactSparseArrays(entry));\n  }\n  if (value !== null && typeof value === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const [key, entry] of Object.entries(value)) out[key] = compactSparseArrays(entry);\n    return out;\n  }\n  return value;\n}\n\n/**\n * Reconstruct (unflatten) flattened keys into nested arrays/objects — for\n * example `\"items[0]\"` -> `{ items: [...] }` and `\"parent.child\"` ->\n * `{ parent: { child: ... } }`. `shouldSplit` decides, per key, whether it is a\n * flattened path (true) or an opaque literal key to be preserved (false);\n * callers apply their own gating/schema logic there.\n *\n * Prototype-pollution safe: a key whose parsed path contains `__proto__`,\n * `constructor`, or `prototype` (at any position) is dropped, as is a literal\n * plain key equal to one of those names.\n */\nexport function reconstructFlattenedKeys(\n  args: Record<string, unknown>,\n  shouldSplit: (key: string) => boolean,\n): Record<string, unknown> {\n  const result: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(args)) {\n    const segments = shouldSplit(key) ? parseFlattenedKeyPath(key) : undefined;\n    if (!segments) {\n      // Plain passthrough — but never assign a literal prototype-polluting key.\n      if (!UNSAFE_KEY_SEGMENTS.has(key)) result[key] = value;\n      continue;\n    }\n    if (segments.some(isUnsafeSegment)) continue; // drop a polluting path entirely\n    assignFlattenedKeyPath(result, segments, value);\n  }\n  return compactSparseArrays(result) as Record<string, unknown>;\n}\n\n// ---------------------------------------------------------------------------\n// Schema-aware unflattening\n// ---------------------------------------------------------------------------\n//\n// A flattened key with a bracket index (`foo[0]`) is unambiguous and is always\n// reconstructed. A purely dotted key (`parent.child`) is ambiguous: it could be\n// a real nested path *or* a legitimate argument whose name literally contains\n// a dot (for example an MCP tool whose JSON Schema declares a property named\n// `filter.name`). To avoid corrupting such literal dotted keys, a dotted key is\n// only split when the tool's `inputSchema` proves its head segment is an\n// object/array container property. The presence of a bracket-indexed sibling\n// does NOT force a pure dotted key to split — the two are decided per key, so\n// a literal property such as `filter.name` survives intact even when a bracket\n// sibling like `ids[0]` is present (issue #1496). Callers that only want the\n// unambiguous bracket case can omit the schema.\n\ntype JsonRecord = Record<string, unknown>;\n\nfunction isPlainObject(value: unknown): value is JsonRecord {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n/** A flattened key contains a bracket index like `foo[0]`. */\nfunction hasBracketIndex(key: string): boolean {\n  return /\\[\\d+\\]/.test(key);\n}\n\n/** A schema node that holds a nested object/array (so dotted keys are real paths). */\nfunction isContainerSchema(schema: unknown): boolean {\n  if (!isPlainObject(schema)) return false;\n  if (schema.type === \"object\" || schema.type === \"array\") return true;\n  if (\"properties\" in schema || \"items\" in schema) return true;\n  const union = schema.anyOf ?? schema.oneOf;\n  if (Array.isArray(union)) return union.some((branch) => isContainerSchema(branch));\n  return false;\n}\n\n/** Exact top-level `schema.properties` names (literal property keys). */\nfunction literalPropertyNames(schema: unknown): Set<string> {\n  const names = new Set<string>();\n  if (!isPlainObject(schema)) return names;\n  const properties = schema.properties;\n  if (!isPlainObject(properties)) return names;\n  for (const name of Object.keys(properties)) names.add(name);\n  return names;\n}\n\n/** Top-level property names whose schema is an object/array container. */\nfunction containerPropertyNames(schema: unknown): Set<string> {\n  const names = new Set<string>();\n  if (!isPlainObject(schema)) return names;\n  const properties = schema.properties;\n  if (!isPlainObject(properties)) return names;\n  for (const [name, sub] of Object.entries(properties)) {\n    if (isContainerSchema(sub)) names.add(name);\n  }\n  return names;\n}\n\n/** Whether `key` is a pure dotted path (`parent.child`) headed by a container prop. */\nfunction isDottedContainerKey(key: string, containers: Set<string>): boolean {\n  const dot = key.indexOf(\".\");\n  if (dot <= 0) return false;\n  return containers.has(key.slice(0, dot));\n}\n\n/**\n * Decide whether a flattened key should be split into nested path segments.\n *\n * - Bracket-indexed keys (`foo[0]`, `foo[0].bar`) always split: they are\n *   unambiguous evidence of provider flattening.\n * - Purely dotted keys (`parent.child`) split only when the schema marks their\n *   head segment as an object/array container property AND the schema does not\n *   declare the full key as a literal top-level property. The latter guard\n *   protects a schema that intentionally defines both a literal dotted property\n *   (e.g. `filter.name`) and a same-head container (e.g. `filter`): the literal\n *   property wins and is preserved verbatim (reviewer-b P2, issue #1496). The\n *   presence of a bracket-indexed sibling does NOT force a pure dotted key to\n *   split, so a literal property name such as `filter.name` is preserved\n *   verbatim even when a sibling like `ids[0]` is reconstructed.\n */\nfunction shouldSplitKey(key: string, containers: Set<string>, literals: Set<string>): boolean {\n  if (hasBracketIndex(key)) return true;\n  if (literals.has(key)) return false; // explicit literal property wins\n  return isDottedContainerKey(key, containers);\n}\n\n/**\n * Reconstruct flattened tool-call arguments into nested arrays/objects using\n * schema-aware disambiguation for dotted keys.\n *\n * - Bracket-indexed keys (`ids[0]`, `files[0].path`) are always reconstructed.\n * - Purely dotted keys (`parent.child`) are reconstructed only when the optional\n *   `schema` marks their head segment as an object/array container property.\n *   The presence of a bracket-indexed sibling does NOT force a pure dotted key\n *   to split, so a literal property name such as `filter.name` survives intact\n *   even when a sibling like `ids[0]` is present (issue #1496).\n * - Otherwise dotted keys are preserved verbatim — fixing the regression where a\n *   literal property name like `filter.name` was silently corrupted.\n *\n * Returns the original reference unchanged when there is nothing to\n * reconstruct. Prototype-pollution safety is delegated to\n * {@link reconstructFlattenedKeys}.\n */\nexport function unflattenArgumentsWithSchema(\n  args: Record<string, unknown>,\n  schema?: unknown,\n): Record<string, unknown> {\n  const keys = Object.keys(args);\n  const literals = literalPropertyNames(schema);\n  const containers = containerPropertyNames(schema);\n  const hasBracket = keys.some((key) => hasBracketIndex(key));\n  // A dotted key needs splitting only if it is not a literal property AND its\n  // head is a schema container. Literal dotted properties are always preserved.\n  const hasSplittableDotted = keys.some(\n    (key) => !literals.has(key) && isDottedContainerKey(key, containers),\n  );\n  if (!hasBracket && !hasSplittableDotted) return args;\n  return reconstructFlattenedKeys(args, (key) => shouldSplitKey(key, containers, literals));\n}\n"]}

package/dist/core/flattened-tool-arguments.js

@@ -133,4 +133,108 @@ export function reconstructFlattenedKeys(args, shouldSplit) {
     }
     return compactSparseArrays(result);
 }
+function isPlainObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** A flattened key contains a bracket index like `foo[0]`. */
+function hasBracketIndex(key) {
+    return /\[\d+\]/.test(key);
+}
+/** A schema node that holds a nested object/array (so dotted keys are real paths). */
+function isContainerSchema(schema) {
+    if (!isPlainObject(schema))
+        return false;
+    if (schema.type === "object" || schema.type === "array")
+        return true;
+    if ("properties" in schema || "items" in schema)
+        return true;
+    const union = schema.anyOf ?? schema.oneOf;
+    if (Array.isArray(union))
+        return union.some((branch) => isContainerSchema(branch));
+    return false;
+}
+/** Exact top-level `schema.properties` names (literal property keys). */
+function literalPropertyNames(schema) {
+    const names = new Set();
+    if (!isPlainObject(schema))
+        return names;
+    const properties = schema.properties;
+    if (!isPlainObject(properties))
+        return names;
+    for (const name of Object.keys(properties))
+        names.add(name);
+    return names;
+}
+/** Top-level property names whose schema is an object/array container. */
+function containerPropertyNames(schema) {
+    const names = new Set();
+    if (!isPlainObject(schema))
+        return names;
+    const properties = schema.properties;
+    if (!isPlainObject(properties))
+        return names;
+    for (const [name, sub] of Object.entries(properties)) {
+        if (isContainerSchema(sub))
+            names.add(name);
+    }
+    return names;
+}
+/** Whether `key` is a pure dotted path (`parent.child`) headed by a container prop. */
+function isDottedContainerKey(key, containers) {
+    const dot = key.indexOf(".");
+    if (dot <= 0)
+        return false;
+    return containers.has(key.slice(0, dot));
+}
+/**
+ * Decide whether a flattened key should be split into nested path segments.
+ *
+ * - Bracket-indexed keys (`foo[0]`, `foo[0].bar`) always split: they are
+ *   unambiguous evidence of provider flattening.
+ * - Purely dotted keys (`parent.child`) split only when the schema marks their
+ *   head segment as an object/array container property AND the schema does not
+ *   declare the full key as a literal top-level property. The latter guard
+ *   protects a schema that intentionally defines both a literal dotted property
+ *   (e.g. `filter.name`) and a same-head container (e.g. `filter`): the literal
+ *   property wins and is preserved verbatim (reviewer-b P2, issue #1496). The
+ *   presence of a bracket-indexed sibling does NOT force a pure dotted key to
+ *   split, so a literal property name such as `filter.name` is preserved
+ *   verbatim even when a sibling like `ids[0]` is reconstructed.
+ */
+function shouldSplitKey(key, containers, literals) {
+    if (hasBracketIndex(key))
+        return true;
+    if (literals.has(key))
+        return false; // explicit literal property wins
+    return isDottedContainerKey(key, containers);
+}
+/**
+ * Reconstruct flattened tool-call arguments into nested arrays/objects using
+ * schema-aware disambiguation for dotted keys.
+ *
+ * - Bracket-indexed keys (`ids[0]`, `files[0].path`) are always reconstructed.
+ * - Purely dotted keys (`parent.child`) are reconstructed only when the optional
+ *   `schema` marks their head segment as an object/array container property.
+ *   The presence of a bracket-indexed sibling does NOT force a pure dotted key
+ *   to split, so a literal property name such as `filter.name` survives intact
+ *   even when a sibling like `ids[0]` is present (issue #1496).
+ * - Otherwise dotted keys are preserved verbatim — fixing the regression where a
+ *   literal property name like `filter.name` was silently corrupted.
+ *
+ * Returns the original reference unchanged when there is nothing to
+ * reconstruct. Prototype-pollution safety is delegated to
+ * {@link reconstructFlattenedKeys}.
+ */
+export function unflattenArgumentsWithSchema(args, schema) {
+    const keys = Object.keys(args);
+    const literals = literalPropertyNames(schema);
+    const containers = containerPropertyNames(schema);
+    const hasBracket = keys.some((key) => hasBracketIndex(key));
+    // A dotted key needs splitting only if it is not a literal property AND its
+    // head is a schema container. Literal dotted properties are always preserved.
+    const hasSplittableDotted = keys.some((key) => !literals.has(key) && isDottedContainerKey(key, containers));
+    if (!hasBracket && !hasSplittableDotted)
+        return args;
+    return reconstructFlattenedKeys(args, (key) => shouldSplitKey(key, containers, literals));
+}
 //# sourceMappingURL=flattened-tool-arguments.js.map

package/dist/core/flattened-tool-arguments.js.map

@@ -1 +1 @@
-{"version":3,"file":"flattened-tool-arguments.js","sourceRoot":"","sources":["../../src/core/flattened-tool-arguments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,kFAAkF;AAClF,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAEpG,SAAS,eAAe,CAAC,OAAwB;IAC/C,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IACF,OAAO,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,KAAK,EAAE,CAAC;YACR,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,KAAK,EAAE,CAAC;YACR,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpC,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC,CAAC,kCAAkC;YACpE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;gBACrE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;YACnD,CAAC;YACD,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,IAAI,CAAC;YAChB,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,KAAK,EAAE,CAAC;IACR,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,yFAAyF;AACzF,SAAS,sBAAsB,CAC7B,IAAsC,EACtC,QAAgC,EAChC,KAAc;IAEd,IAAI,IAAI,GAAqC,IAAI,CAAC;IAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,WAAW,GAAG,OAAO,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAChF,IAAI,CAAC,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAqC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;AAC9C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACxF,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAA6B,EAC7B,WAAqC;IAErC,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,0EAA0E;YAC1E,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACvD,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC;YAAE,SAAS,CAAC,iCAAiC;QAC/E,sBAAsB,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,mBAAmB,CAAC,MAAM,CAA4B,CAAC;AAChE,CAAC","sourcesContent":["/**\n * Canonical reconstruction of flattened tool-call arguments.\n *\n * Some upstream providers — notably GitHub Copilot Gemini models proxied through\n * Google's GenAI API — serialize array/object function-call arguments as\n * flattened, indexed keys on the wire. For example a tool called with\n * `{ keywords: [\"a\", \"b\"] }` arrives as `{ \"keywords[0]\": \"a\", \"keywords[1]\": \"b\" }`,\n * and `{ files: [{ path }] }` as `{ \"files[0].path\": \"...\" }`.\n *\n * This module is the single source of truth for turning those flattened keys\n * back into nested arrays/objects. Both the host runtime's per-tool\n * normalization (gated to Copilot Gemini, schema-aware) and the MCP `callTool`\n * boundary (provider-agnostic, bracket self-gating) delegate here so the two\n * paths cannot drift — in particular so the prototype-pollution guard lives in\n * exactly one place.\n *\n * Security: argument keys cross a trust boundary (model/provider wire → tool /\n * MCP server validation). A key path that walks through `__proto__`,\n * `constructor`, or `prototype` could otherwise reach `Object.prototype` and\n * mutate it process-wide. Any key whose path contains such a segment — at any\n * position, including the final segment and a literal plain key — is dropped.\n */\n\n/** Key segments that must never be written or traversed (prototype pollution). */\nconst UNSAFE_KEY_SEGMENTS: ReadonlySet<string> = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\n\nfunction isUnsafeSegment(segment: string | number): boolean {\n  return typeof segment === \"string\" && UNSAFE_KEY_SEGMENTS.has(segment);\n}\n\n/**\n * Parse a flattened key such as `a.b[0].c` into path segments\n * `[\"a\", \"b\", 0, \"c\"]`. Returns `undefined` for a plain key with no `.`/`[`, or\n * for a malformed bracket expression (left untouched by the caller).\n */\nexport function parseFlattenedKeyPath(key: string): Array<string | number> | undefined {\n  if (!/[.[]/.test(key)) return undefined;\n  const segments: Array<string | number> = [];\n  let current = \"\";\n  let index = 0;\n  const flush = () => {\n    if (current !== \"\") {\n      segments.push(current);\n      current = \"\";\n    }\n  };\n  while (index < key.length) {\n    const char = key[index];\n    if (char === \".\") {\n      flush();\n      index += 1;\n    } else if (char === \"[\") {\n      flush();\n      const end = key.indexOf(\"]\", index);\n      if (end === -1) return undefined; // malformed — leave key untouched\n      const inner = key.slice(index + 1, end);\n      const numeric = Number(inner);\n      if (inner.trim() !== \"\" && Number.isInteger(numeric) && numeric >= 0) {\n        segments.push(numeric);\n      } else {\n        segments.push(inner.replace(/^[\"']|[\"']$/g, \"\"));\n      }\n      index = end + 1;\n    } else {\n      current += char;\n      index += 1;\n    }\n  }\n  flush();\n  return segments.length > 0 ? segments : undefined;\n}\n\n/** Assign `value` at the given path inside `root`, creating arrays/objects as needed. */\nfunction assignFlattenedKeyPath(\n  root: Record<string | number, unknown>,\n  segments: Array<string | number>,\n  value: unknown,\n): void {\n  let node: Record<string | number, unknown> = root;\n  for (let i = 0; i < segments.length - 1; i += 1) {\n    const segment = segments[i];\n    const nextIsIndex = typeof segments[i + 1] === \"number\";\n    const existing = node[segment];\n    if (existing === null || existing === undefined || typeof existing !== \"object\") {\n      node[segment] = nextIsIndex ? [] : {};\n    }\n    node = node[segment] as Record<string | number, unknown>;\n  }\n  node[segments[segments.length - 1]] = value;\n}\n\n/**\n * Remove empty holes from sparse arrays produced by out-of-order indices.\n *\n * Note: this collapses holes rather than preserving them — `name[0]` + `name[2]`\n * (no index 1) becomes a dense 2-element array `[a, c]`, not `[a, <hole>, c]`.\n * That is the intended healing for Gemini's flattened output (which emits\n * contiguous indices in practice); it would, however, silently misalign two\n * arrays that were meant to be index-paired.\n */\nfunction compactSparseArrays(value: unknown): unknown {\n  if (Array.isArray(value)) {\n    return value.filter((entry) => entry !== undefined).map((entry) => compactSparseArrays(entry));\n  }\n  if (value !== null && typeof value === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const [key, entry] of Object.entries(value)) out[key] = compactSparseArrays(entry);\n    return out;\n  }\n  return value;\n}\n\n/**\n * Reconstruct (unflatten) flattened keys into nested arrays/objects — for\n * example `\"items[0]\"` -> `{ items: [...] }` and `\"parent.child\"` ->\n * `{ parent: { child: ... } }`. `shouldSplit` decides, per key, whether it is a\n * flattened path (true) or an opaque literal key to be preserved (false);\n * callers apply their own gating/schema logic there.\n *\n * Prototype-pollution safe: a key whose parsed path contains `__proto__`,\n * `constructor`, or `prototype` (at any position) is dropped, as is a literal\n * plain key equal to one of those names.\n */\nexport function reconstructFlattenedKeys(\n  args: Record<string, unknown>,\n  shouldSplit: (key: string) => boolean,\n): Record<string, unknown> {\n  const result: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(args)) {\n    const segments = shouldSplit(key) ? parseFlattenedKeyPath(key) : undefined;\n    if (!segments) {\n      // Plain passthrough — but never assign a literal prototype-polluting key.\n      if (!UNSAFE_KEY_SEGMENTS.has(key)) result[key] = value;\n      continue;\n    }\n    if (segments.some(isUnsafeSegment)) continue; // drop a polluting path entirely\n    assignFlattenedKeyPath(result, segments, value);\n  }\n  return compactSparseArrays(result) as Record<string, unknown>;\n}\n"]}
+{"version":3,"file":"flattened-tool-arguments.js","sourceRoot":"","sources":["../../src/core/flattened-tool-arguments.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,kFAAkF;AAClF,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAEpG,SAAS,eAAe,CAAC,OAAwB;IAC/C,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IACF,OAAO,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,KAAK,EAAE,CAAC;YACR,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACxB,KAAK,EAAE,CAAC;YACR,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACpC,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC,CAAC,kCAAkC;YACpE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;gBACrE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;YACnD,CAAC;YACD,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,IAAI,CAAC;YAChB,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IACD,KAAK,EAAE,CAAC;IACR,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,yFAAyF;AACzF,SAAS,sBAAsB,CAC7B,IAAsC,EACtC,QAAgC,EAChC,KAAc;IAEd,IAAI,IAAI,GAAqC,IAAI,CAAC;IAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,WAAW,GAAG,OAAO,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,QAAQ,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAChF,IAAI,CAAC,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAqC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;AAC9C,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACxF,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAA6B,EAC7B,WAAqC;IAErC,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,0EAA0E;YAC1E,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACvD,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC;YAAE,SAAS,CAAC,iCAAiC;QAC/E,sBAAsB,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,mBAAmB,CAAC,MAAM,CAA4B,CAAC;AAChE,CAAC;AAoBD,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,8DAA8D;AAC9D,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,sFAAsF;AACtF,SAAS,iBAAiB,CAAC,MAAe;IACxC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACrE,IAAI,YAAY,IAAI,MAAM,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC;IAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;IACnF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yEAAyE;AACzE,SAAS,oBAAoB,CAAC,MAAe;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACrC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0EAA0E;AAC1E,SAAS,sBAAsB,CAAC,MAAe;IAC7C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACrC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACrD,IAAI,iBAAiB,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uFAAuF;AACvF,SAAS,oBAAoB,CAAC,GAAW,EAAE,UAAuB;IAChE,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,cAAc,CAAC,GAAW,EAAE,UAAuB,EAAE,QAAqB;IACjF,IAAI,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,iCAAiC;IACtE,OAAO,oBAAoB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,IAA6B,EAC7B,MAAgB;IAEhB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CACnC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,oBAAoB,CAAC,GAAG,EAAE,UAAU,CAAC,CACrE,CAAC;IACF,IAAI,CAAC,UAAU,IAAI,CAAC,mBAAmB;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,wBAAwB,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC5F,CAAC","sourcesContent":["/**\n * Canonical reconstruction of flattened tool-call arguments.\n *\n * Some upstream providers — notably GitHub Copilot Gemini models proxied through\n * Google's GenAI API — serialize array/object function-call arguments as\n * flattened, indexed keys on the wire. For example a tool called with\n * `{ keywords: [\"a\", \"b\"] }` arrives as `{ \"keywords[0]\": \"a\", \"keywords[1]\": \"b\" }`,\n * and `{ files: [{ path }] }` as `{ \"files[0].path\": \"...\" }`.\n *\n * This module is the single source of truth for turning those flattened keys\n * back into nested arrays/objects. Both the host runtime's per-tool\n * normalization (gated to Copilot Gemini, schema-aware) and the MCP `callTool`\n * boundary (provider-agnostic, bracket self-gating) delegate here so the two\n * paths cannot drift — in particular so the prototype-pollution guard lives in\n * exactly one place.\n *\n * Security: argument keys cross a trust boundary (model/provider wire → tool /\n * MCP server validation). A key path that walks through `__proto__`,\n * `constructor`, or `prototype` could otherwise reach `Object.prototype` and\n * mutate it process-wide. Any key whose path contains such a segment — at any\n * position, including the final segment and a literal plain key — is dropped.\n */\n\n/** Key segments that must never be written or traversed (prototype pollution). */\nconst UNSAFE_KEY_SEGMENTS: ReadonlySet<string> = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\n\nfunction isUnsafeSegment(segment: string | number): boolean {\n  return typeof segment === \"string\" && UNSAFE_KEY_SEGMENTS.has(segment);\n}\n\n/**\n * Parse a flattened key such as `a.b[0].c` into path segments\n * `[\"a\", \"b\", 0, \"c\"]`. Returns `undefined` for a plain key with no `.`/`[`, or\n * for a malformed bracket expression (left untouched by the caller).\n */\nexport function parseFlattenedKeyPath(key: string): Array<string | number> | undefined {\n  if (!/[.[]/.test(key)) return undefined;\n  const segments: Array<string | number> = [];\n  let current = \"\";\n  let index = 0;\n  const flush = () => {\n    if (current !== \"\") {\n      segments.push(current);\n      current = \"\";\n    }\n  };\n  while (index < key.length) {\n    const char = key[index];\n    if (char === \".\") {\n      flush();\n      index += 1;\n    } else if (char === \"[\") {\n      flush();\n      const end = key.indexOf(\"]\", index);\n      if (end === -1) return undefined; // malformed — leave key untouched\n      const inner = key.slice(index + 1, end);\n      const numeric = Number(inner);\n      if (inner.trim() !== \"\" && Number.isInteger(numeric) && numeric >= 0) {\n        segments.push(numeric);\n      } else {\n        segments.push(inner.replace(/^[\"']|[\"']$/g, \"\"));\n      }\n      index = end + 1;\n    } else {\n      current += char;\n      index += 1;\n    }\n  }\n  flush();\n  return segments.length > 0 ? segments : undefined;\n}\n\n/** Assign `value` at the given path inside `root`, creating arrays/objects as needed. */\nfunction assignFlattenedKeyPath(\n  root: Record<string | number, unknown>,\n  segments: Array<string | number>,\n  value: unknown,\n): void {\n  let node: Record<string | number, unknown> = root;\n  for (let i = 0; i < segments.length - 1; i += 1) {\n    const segment = segments[i];\n    const nextIsIndex = typeof segments[i + 1] === \"number\";\n    const existing = node[segment];\n    if (existing === null || existing === undefined || typeof existing !== \"object\") {\n      node[segment] = nextIsIndex ? [] : {};\n    }\n    node = node[segment] as Record<string | number, unknown>;\n  }\n  node[segments[segments.length - 1]] = value;\n}\n\n/**\n * Remove empty holes from sparse arrays produced by out-of-order indices.\n *\n * Note: this collapses holes rather than preserving them — `name[0]` + `name[2]`\n * (no index 1) becomes a dense 2-element array `[a, c]`, not `[a, <hole>, c]`.\n * That is the intended healing for Gemini's flattened output (which emits\n * contiguous indices in practice); it would, however, silently misalign two\n * arrays that were meant to be index-paired.\n */\nfunction compactSparseArrays(value: unknown): unknown {\n  if (Array.isArray(value)) {\n    return value.filter((entry) => entry !== undefined).map((entry) => compactSparseArrays(entry));\n  }\n  if (value !== null && typeof value === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const [key, entry] of Object.entries(value)) out[key] = compactSparseArrays(entry);\n    return out;\n  }\n  return value;\n}\n\n/**\n * Reconstruct (unflatten) flattened keys into nested arrays/objects — for\n * example `\"items[0]\"` -> `{ items: [...] }` and `\"parent.child\"` ->\n * `{ parent: { child: ... } }`. `shouldSplit` decides, per key, whether it is a\n * flattened path (true) or an opaque literal key to be preserved (false);\n * callers apply their own gating/schema logic there.\n *\n * Prototype-pollution safe: a key whose parsed path contains `__proto__`,\n * `constructor`, or `prototype` (at any position) is dropped, as is a literal\n * plain key equal to one of those names.\n */\nexport function reconstructFlattenedKeys(\n  args: Record<string, unknown>,\n  shouldSplit: (key: string) => boolean,\n): Record<string, unknown> {\n  const result: Record<string, unknown> = {};\n  for (const [key, value] of Object.entries(args)) {\n    const segments = shouldSplit(key) ? parseFlattenedKeyPath(key) : undefined;\n    if (!segments) {\n      // Plain passthrough — but never assign a literal prototype-polluting key.\n      if (!UNSAFE_KEY_SEGMENTS.has(key)) result[key] = value;\n      continue;\n    }\n    if (segments.some(isUnsafeSegment)) continue; // drop a polluting path entirely\n    assignFlattenedKeyPath(result, segments, value);\n  }\n  return compactSparseArrays(result) as Record<string, unknown>;\n}\n\n// ---------------------------------------------------------------------------\n// Schema-aware unflattening\n// ---------------------------------------------------------------------------\n//\n// A flattened key with a bracket index (`foo[0]`) is unambiguous and is always\n// reconstructed. A purely dotted key (`parent.child`) is ambiguous: it could be\n// a real nested path *or* a legitimate argument whose name literally contains\n// a dot (for example an MCP tool whose JSON Schema declares a property named\n// `filter.name`). To avoid corrupting such literal dotted keys, a dotted key is\n// only split when the tool's `inputSchema` proves its head segment is an\n// object/array container property. The presence of a bracket-indexed sibling\n// does NOT force a pure dotted key to split — the two are decided per key, so\n// a literal property such as `filter.name` survives intact even when a bracket\n// sibling like `ids[0]` is present (issue #1496). Callers that only want the\n// unambiguous bracket case can omit the schema.\n\ntype JsonRecord = Record<string, unknown>;\n\nfunction isPlainObject(value: unknown): value is JsonRecord {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n/** A flattened key contains a bracket index like `foo[0]`. */\nfunction hasBracketIndex(key: string): boolean {\n  return /\\[\\d+\\]/.test(key);\n}\n\n/** A schema node that holds a nested object/array (so dotted keys are real paths). */\nfunction isContainerSchema(schema: unknown): boolean {\n  if (!isPlainObject(schema)) return false;\n  if (schema.type === \"object\" || schema.type === \"array\") return true;\n  if (\"properties\" in schema || \"items\" in schema) return true;\n  const union = schema.anyOf ?? schema.oneOf;\n  if (Array.isArray(union)) return union.some((branch) => isContainerSchema(branch));\n  return false;\n}\n\n/** Exact top-level `schema.properties` names (literal property keys). */\nfunction literalPropertyNames(schema: unknown): Set<string> {\n  const names = new Set<string>();\n  if (!isPlainObject(schema)) return names;\n  const properties = schema.properties;\n  if (!isPlainObject(properties)) return names;\n  for (const name of Object.keys(properties)) names.add(name);\n  return names;\n}\n\n/** Top-level property names whose schema is an object/array container. */\nfunction containerPropertyNames(schema: unknown): Set<string> {\n  const names = new Set<string>();\n  if (!isPlainObject(schema)) return names;\n  const properties = schema.properties;\n  if (!isPlainObject(properties)) return names;\n  for (const [name, sub] of Object.entries(properties)) {\n    if (isContainerSchema(sub)) names.add(name);\n  }\n  return names;\n}\n\n/** Whether `key` is a pure dotted path (`parent.child`) headed by a container prop. */\nfunction isDottedContainerKey(key: string, containers: Set<string>): boolean {\n  const dot = key.indexOf(\".\");\n  if (dot <= 0) return false;\n  return containers.has(key.slice(0, dot));\n}\n\n/**\n * Decide whether a flattened key should be split into nested path segments.\n *\n * - Bracket-indexed keys (`foo[0]`, `foo[0].bar`) always split: they are\n *   unambiguous evidence of provider flattening.\n * - Purely dotted keys (`parent.child`) split only when the schema marks their\n *   head segment as an object/array container property AND the schema does not\n *   declare the full key as a literal top-level property. The latter guard\n *   protects a schema that intentionally defines both a literal dotted property\n *   (e.g. `filter.name`) and a same-head container (e.g. `filter`): the literal\n *   property wins and is preserved verbatim (reviewer-b P2, issue #1496). The\n *   presence of a bracket-indexed sibling does NOT force a pure dotted key to\n *   split, so a literal property name such as `filter.name` is preserved\n *   verbatim even when a sibling like `ids[0]` is reconstructed.\n */\nfunction shouldSplitKey(key: string, containers: Set<string>, literals: Set<string>): boolean {\n  if (hasBracketIndex(key)) return true;\n  if (literals.has(key)) return false; // explicit literal property wins\n  return isDottedContainerKey(key, containers);\n}\n\n/**\n * Reconstruct flattened tool-call arguments into nested arrays/objects using\n * schema-aware disambiguation for dotted keys.\n *\n * - Bracket-indexed keys (`ids[0]`, `files[0].path`) are always reconstructed.\n * - Purely dotted keys (`parent.child`) are reconstructed only when the optional\n *   `schema` marks their head segment as an object/array container property.\n *   The presence of a bracket-indexed sibling does NOT force a pure dotted key\n *   to split, so a literal property name such as `filter.name` survives intact\n *   even when a sibling like `ids[0]` is present (issue #1496).\n * - Otherwise dotted keys are preserved verbatim — fixing the regression where a\n *   literal property name like `filter.name` was silently corrupted.\n *\n * Returns the original reference unchanged when there is nothing to\n * reconstruct. Prototype-pollution safety is delegated to\n * {@link reconstructFlattenedKeys}.\n */\nexport function unflattenArgumentsWithSchema(\n  args: Record<string, unknown>,\n  schema?: unknown,\n): Record<string, unknown> {\n  const keys = Object.keys(args);\n  const literals = literalPropertyNames(schema);\n  const containers = containerPropertyNames(schema);\n  const hasBracket = keys.some((key) => hasBracketIndex(key));\n  // A dotted key needs splitting only if it is not a literal property AND its\n  // head is a schema container. Literal dotted properties are always preserved.\n  const hasSplittableDotted = keys.some(\n    (key) => !literals.has(key) && isDottedContainerKey(key, containers),\n  );\n  if (!hasBracket && !hasSplittableDotted) return args;\n  return reconstructFlattenedKeys(args, (key) => shouldSplitKey(key, containers, literals));\n}\n"]}

package/dist/core/sdk-exports.d.ts

@@ -3,5 +3,5 @@ export type { ExtensionAPI, ExtensionCommandContext, ExtensionContext, Extension
 export type { PromptTemplate } from "./prompt-templates.ts";
 export type { Skill } from "./skills.ts";
 export type { JsonObject, JsonPrimitive, JsonValue, StructuredOutputCapture, StructuredOutputFileCapture, StructuredOutputToolOptions, Tool, } from "./tools/index.ts";
-export { withFileMutationQueue, STRUCTURED_OUTPUT_TOOL_NAME, createCodingTools, createReadOnlyTools, createReadTool, createBashTool, createEditTool, createWriteTool, createGrepTool, createFindTool, createLsTool, createStructuredOutputCapture, createStructuredOutputTool, } from "./tools/index.ts";
+export { withFileMutationQueue, STRUCTURED_OUTPUT_TOOL_NAME, createCodingTools, createReadOnlyTools, createReadTool, createBashTool, createEditTool, createWriteTool, createFindTool, createSearchTool, createLsTool, createStructuredOutputCapture, createStructuredOutputTool, } from "./tools/index.ts";
 //# sourceMappingURL=sdk-exports.d.ts.map

package/dist/core/sdk-exports.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sdk-exports.d.ts","sourceRoot":"","sources":["../../src/core/sdk-exports.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAC3C,YAAY,EACV,YAAY,EACZ,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,YAAY,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzC,YAAY,EACV,UAAU,EACV,aAAa,EACb,SAAS,EACT,uBAAuB,EACvB,2BAA2B,EAC3B,2BAA2B,EAC3B,IAAI,GACL,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAE3B,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,EACd,cAAc,EACd,YAAY,EACZ,6BAA6B,EAC7B,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC","sourcesContent":["export * from \"./agent-session-runtime.ts\";\nexport type {\n  ExtensionAPI,\n  ExtensionCommandContext,\n  ExtensionContext,\n  ExtensionFactory,\n  SlashCommandInfo,\n  SlashCommandSource,\n  ToolDefinition,\n} from \"./extensions/index.ts\";\nexport type { PromptTemplate } from \"./prompt-templates.ts\";\nexport type { Skill } from \"./skills.ts\";\nexport type {\n  JsonObject,\n  JsonPrimitive,\n  JsonValue,\n  StructuredOutputCapture,\n  StructuredOutputFileCapture,\n  StructuredOutputToolOptions,\n  Tool,\n} from \"./tools/index.ts\";\n\nexport {\n  withFileMutationQueue,\n  STRUCTURED_OUTPUT_TOOL_NAME,\n  // Tool factories (for custom cwd)\n  createCodingTools,\n  createReadOnlyTools,\n  createReadTool,\n  createBashTool,\n  createEditTool,\n  createWriteTool,\n  createGrepTool,\n  createFindTool,\n  createLsTool,\n  createStructuredOutputCapture,\n  createStructuredOutputTool,\n} from \"./tools/index.ts\";\n\n"]}
+{"version":3,"file":"sdk-exports.d.ts","sourceRoot":"","sources":["../../src/core/sdk-exports.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAC3C,YAAY,EACV,YAAY,EACZ,uBAAuB,EACvB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,GACf,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,YAAY,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzC,YAAY,EACV,UAAU,EACV,aAAa,EACb,SAAS,EACT,uBAAuB,EACvB,2BAA2B,EAC3B,2BAA2B,EAC3B,IAAI,GACL,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,qBAAqB,EACrB,2BAA2B,EAE3B,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,6BAA6B,EAC7B,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC","sourcesContent":["export * from \"./agent-session-runtime.ts\";\nexport type {\n  ExtensionAPI,\n  ExtensionCommandContext,\n  ExtensionContext,\n  ExtensionFactory,\n  SlashCommandInfo,\n  SlashCommandSource,\n  ToolDefinition,\n} from \"./extensions/index.ts\";\nexport type { PromptTemplate } from \"./prompt-templates.ts\";\nexport type { Skill } from \"./skills.ts\";\nexport type {\n  JsonObject,\n  JsonPrimitive,\n  JsonValue,\n  StructuredOutputCapture,\n  StructuredOutputFileCapture,\n  StructuredOutputToolOptions,\n  Tool,\n} from \"./tools/index.ts\";\n\nexport {\n  withFileMutationQueue,\n  STRUCTURED_OUTPUT_TOOL_NAME,\n  // Tool factories (for custom cwd)\n  createCodingTools,\n  createReadOnlyTools,\n  createReadTool,\n  createBashTool,\n  createEditTool,\n  createWriteTool,\n  createFindTool,\n  createSearchTool,\n  createLsTool,\n  createStructuredOutputCapture,\n  createStructuredOutputTool,\n} from \"./tools/index.ts\";\n\n"]}

package/dist/core/sdk-exports.js

@@ -1,5 +1,5 @@
 export * from "./agent-session-runtime.js";
 export { withFileMutationQueue, STRUCTURED_OUTPUT_TOOL_NAME, 
 // Tool factories (for custom cwd)
-createCodingTools, createReadOnlyTools, createReadTool, createBashTool, createEditTool, createWriteTool, createGrepTool, createFindTool, createLsTool, createStructuredOutputCapture, createStructuredOutputTool, } from "./tools/index.js";
+createCodingTools, createReadOnlyTools, createReadTool, createBashTool, createEditTool, createWriteTool, createFindTool, createSearchTool, createLsTool, createStructuredOutputCapture, createStructuredOutputTool, } from "./tools/index.js";
 //# sourceMappingURL=sdk-exports.js.map

package/dist/core/sdk-exports.js.map

@@ -1 +1 @@
-{"version":3,"file":"sdk-exports.js","sourceRoot":"","sources":["../../src/core/sdk-exports.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAsB3C,OAAO,EACL,qBAAqB,EACrB,2BAA2B;AAC3B,kCAAkC;AAClC,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,EACd,cAAc,EACd,YAAY,EACZ,6BAA6B,EAC7B,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC","sourcesContent":["export * from \"./agent-session-runtime.ts\";\nexport type {\n  ExtensionAPI,\n  ExtensionCommandContext,\n  ExtensionContext,\n  ExtensionFactory,\n  SlashCommandInfo,\n  SlashCommandSource,\n  ToolDefinition,\n} from \"./extensions/index.ts\";\nexport type { PromptTemplate } from \"./prompt-templates.ts\";\nexport type { Skill } from \"./skills.ts\";\nexport type {\n  JsonObject,\n  JsonPrimitive,\n  JsonValue,\n  StructuredOutputCapture,\n  StructuredOutputFileCapture,\n  StructuredOutputToolOptions,\n  Tool,\n} from \"./tools/index.ts\";\n\nexport {\n  withFileMutationQueue,\n  STRUCTURED_OUTPUT_TOOL_NAME,\n  // Tool factories (for custom cwd)\n  createCodingTools,\n  createReadOnlyTools,\n  createReadTool,\n  createBashTool,\n  createEditTool,\n  createWriteTool,\n  createGrepTool,\n  createFindTool,\n  createLsTool,\n  createStructuredOutputCapture,\n  createStructuredOutputTool,\n} from \"./tools/index.ts\";\n\n"]}
+{"version":3,"file":"sdk-exports.js","sourceRoot":"","sources":["../../src/core/sdk-exports.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAsB3C,OAAO,EACL,qBAAqB,EACrB,2BAA2B;AAC3B,kCAAkC;AAClC,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,EACd,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,6BAA6B,EAC7B,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC","sourcesContent":["export * from \"./agent-session-runtime.ts\";\nexport type {\n  ExtensionAPI,\n  ExtensionCommandContext,\n  ExtensionContext,\n  ExtensionFactory,\n  SlashCommandInfo,\n  SlashCommandSource,\n  ToolDefinition,\n} from \"./extensions/index.ts\";\nexport type { PromptTemplate } from \"./prompt-templates.ts\";\nexport type { Skill } from \"./skills.ts\";\nexport type {\n  JsonObject,\n  JsonPrimitive,\n  JsonValue,\n  StructuredOutputCapture,\n  StructuredOutputFileCapture,\n  StructuredOutputToolOptions,\n  Tool,\n} from \"./tools/index.ts\";\n\nexport {\n  withFileMutationQueue,\n  STRUCTURED_OUTPUT_TOOL_NAME,\n  // Tool factories (for custom cwd)\n  createCodingTools,\n  createReadOnlyTools,\n  createReadTool,\n  createBashTool,\n  createEditTool,\n  createWriteTool,\n  createFindTool,\n  createSearchTool,\n  createLsTool,\n  createStructuredOutputCapture,\n  createStructuredOutputTool,\n} from \"./tools/index.ts\";\n\n"]}

package/dist/core/sdk-types.d.ts

@@ -34,14 +34,14 @@ export interface CreateAgentSessionOptions {
      *
      * - "all": start with no tools enabled
      * - "builtin": disable the default built-in tools (read, bash, edit, write,
-     *   ask_user_question, todo) but keep extension/custom tools enabled
+     *   find, search, ask_user_question, todo) but keep extension/custom tools enabled
      */
     noTools?: "all" | "builtin";
     /**
      * Optional allowlist of tool names.
      *
      * When omitted, pi enables the default built-in tools (read, bash, edit, write,
-     * ask_user_question, todo) and leaves extension/custom tools enabled unless
+     * find, search, ask_user_question, todo) and leaves extension/custom tools enabled unless
      * `noTools` changes that default.
      * When provided, only the listed tool names are enabled, minus any names in
      * `excludedTools`.

package/dist/core/sdk-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sdk-types.d.ts","sourceRoot":"","sources":["../../src/core/sdk-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE3H,MAAM,WAAW,yBAAyB;IACxC,4EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,oFAAoF;IACpF,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,uFAAuF;IACvF,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B,iEAAiE;IACjE,KAAK,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,4FAA4F;IAC5F,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,oHAAoH;IACpH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iFAAiF;IACjF,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,gEAAgE;IAChE,YAAY,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAAC,aAAa,CAAC,EAAE,aAAa,CAAA;KAAE,CAAC,CAAC;IAE3E;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;IAC5B;;;;;;;;OAQG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,gEAAgE;IAChE,WAAW,CAAC,EAAE,cAAc,EAAE,CAAC;IAE/B,oEAAoE;IACpE,cAAc,CAAC,EAAE,cAAc,CAAC;IAEhC,2DAA2D;IAC3D,cAAc,CAAC,EAAE,cAAc,CAAC;IAEhC,uEAAuE;IACvE,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,8EAA8E;IAC9E,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;CAC7C;AAED,qCAAqC;AACrC,MAAM,WAAW,wBAAwB;IACvC,0BAA0B;IAC1B,OAAO,EAAE,YAAY,CAAC;IACtB,mEAAmE;IACnE,gBAAgB,EAAE,oBAAoB,CAAC;IACvC,wEAAwE;IACxE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,4FAA4F;IAC5F,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,2EAA2E;IAC3E,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport type { Api, Model } from \"@earendil-works/pi-ai\";\nimport type { AuthStorage } from \"./auth-storage.ts\";\nimport type { ModelRegistry } from \"./model-registry.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\nimport type { SessionManager } from \"./session-manager.ts\";\nimport type { SettingsManager } from \"./settings-manager.ts\";\nimport type { AgentSession } from \"./agent-session.ts\";\nimport type { LoadExtensionsResult, OrchestrationContext, SessionStartEvent, ToolDefinition } from \"./extensions/index.ts\";\n\nexport interface CreateAgentSessionOptions {\n  /** Working directory for project-local discovery. Default: process.cwd() */\n  cwd?: string;\n  /** Global config directory. Default: ~/.atomic/agent */\n  agentDir?: string;\n\n  /** Auth storage for credentials. Default: AuthStorage.create(agentDir/auth.json) */\n  authStorage?: AuthStorage;\n  /** Model registry. Default: ModelRegistry.create(authStorage, agentDir/models.json) */\n  modelRegistry?: ModelRegistry;\n\n  /** Model to use. Default: from settings, else first available */\n  model?: Model<Api>;\n  /** Thinking level. Default: from settings, else 'medium' (clamped to model capabilities) */\n  thinkingLevel?: ThinkingLevel;\n  /** Context window token count. Default: model scalar contextWindow, or settings/session override when supported. */\n  contextWindow?: number;\n  /** Treat unsupported contextWindow as an error instead of a warning/fallback. */\n  contextWindowStrict?: boolean;\n  /** Models available for cycling (Ctrl+P in interactive mode) */\n  scopedModels?: Array<{ model: Model<Api>; thinkingLevel?: ThinkingLevel }>;\n\n  /**\n   * Optional default tool suppression mode when no explicit allowlist is provided.\n   *\n   * - \"all\": start with no tools enabled\n   * - \"builtin\": disable the default built-in tools (read, bash, edit, write,\n   *   ask_user_question, todo) but keep extension/custom tools enabled\n   */\n  noTools?: \"all\" | \"builtin\";\n  /**\n   * Optional allowlist of tool names.\n   *\n   * When omitted, pi enables the default built-in tools (read, bash, edit, write,\n   * ask_user_question, todo) and leaves extension/custom tools enabled unless\n   * `noTools` changes that default.\n   * When provided, only the listed tool names are enabled, minus any names in\n   * `excludedTools`.\n   */\n  tools?: string[];\n  /**\n   * Optional blocklist of tool names.\n   *\n   * Matching built-in, extension, and SDK custom tools are omitted from the\n   * final session tool registry and active tool set. Unknown names are ignored.\n   */\n  excludedTools?: string[];\n  /** Custom tools to register (in addition to built-in tools). */\n  customTools?: ToolDefinition[];\n\n  /** Resource loader. When omitted, DefaultResourceLoader is used. */\n  resourceLoader?: ResourceLoader;\n\n  /** Session manager. Default: SessionManager.create(cwd) */\n  sessionManager?: SessionManager;\n\n  /** Settings manager. Default: SettingsManager.create(cwd, agentDir) */\n  settingsManager?: SettingsManager;\n  /** Session start event metadata for extension runtime startup. */\n  sessionStartEvent?: SessionStartEvent;\n  /** Session-scoped orchestration policy exposed to extension/tool handlers. */\n  orchestrationContext?: OrchestrationContext;\n}\n\n/** Result from createAgentSession */\nexport interface CreateAgentSessionResult {\n  /** The created session */\n  session: AgentSession;\n  /** Extensions result (for UI context setup in interactive mode) */\n  extensionsResult: LoadExtensionsResult;\n  /** Warning if session was restored with a different model than saved */\n  modelFallbackMessage?: string;\n  /** Warning if a saved/default context window could not be applied to the selected model. */\n  contextWindowWarning?: string;\n  /** Error if an explicit strict context-window selection is unsupported. */\n  contextWindowError?: string;\n}\n\n"]}
+{"version":3,"file":"sdk-types.d.ts","sourceRoot":"","sources":["../../src/core/sdk-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE3H,MAAM,WAAW,yBAAyB;IACxC,4EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,oFAAoF;IACpF,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,uFAAuF;IACvF,aAAa,CAAC,EAAE,aAAa,CAAC;IAE9B,iEAAiE;IACjE,KAAK,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,4FAA4F;IAC5F,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,oHAAoH;IACpH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iFAAiF;IACjF,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,gEAAgE;IAChE,YAAY,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAAC,aAAa,CAAC,EAAE,aAAa,CAAA;KAAE,CAAC,CAAC;IAE3E;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC;IAC5B;;;;;;;;OAQG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,gEAAgE;IAChE,WAAW,CAAC,EAAE,cAAc,EAAE,CAAC;IAE/B,oEAAoE;IACpE,cAAc,CAAC,EAAE,cAAc,CAAC;IAEhC,2DAA2D;IAC3D,cAAc,CAAC,EAAE,cAAc,CAAC;IAEhC,uEAAuE;IACvE,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,8EAA8E;IAC9E,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;CAC7C;AAED,qCAAqC;AACrC,MAAM,WAAW,wBAAwB;IACvC,0BAA0B;IAC1B,OAAO,EAAE,YAAY,CAAC;IACtB,mEAAmE;IACnE,gBAAgB,EAAE,oBAAoB,CAAC;IACvC,wEAAwE;IACxE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,4FAA4F;IAC5F,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,2EAA2E;IAC3E,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport type { Api, Model } from \"@earendil-works/pi-ai\";\nimport type { AuthStorage } from \"./auth-storage.ts\";\nimport type { ModelRegistry } from \"./model-registry.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\nimport type { SessionManager } from \"./session-manager.ts\";\nimport type { SettingsManager } from \"./settings-manager.ts\";\nimport type { AgentSession } from \"./agent-session.ts\";\nimport type { LoadExtensionsResult, OrchestrationContext, SessionStartEvent, ToolDefinition } from \"./extensions/index.ts\";\n\nexport interface CreateAgentSessionOptions {\n  /** Working directory for project-local discovery. Default: process.cwd() */\n  cwd?: string;\n  /** Global config directory. Default: ~/.atomic/agent */\n  agentDir?: string;\n\n  /** Auth storage for credentials. Default: AuthStorage.create(agentDir/auth.json) */\n  authStorage?: AuthStorage;\n  /** Model registry. Default: ModelRegistry.create(authStorage, agentDir/models.json) */\n  modelRegistry?: ModelRegistry;\n\n  /** Model to use. Default: from settings, else first available */\n  model?: Model<Api>;\n  /** Thinking level. Default: from settings, else 'medium' (clamped to model capabilities) */\n  thinkingLevel?: ThinkingLevel;\n  /** Context window token count. Default: model scalar contextWindow, or settings/session override when supported. */\n  contextWindow?: number;\n  /** Treat unsupported contextWindow as an error instead of a warning/fallback. */\n  contextWindowStrict?: boolean;\n  /** Models available for cycling (Ctrl+P in interactive mode) */\n  scopedModels?: Array<{ model: Model<Api>; thinkingLevel?: ThinkingLevel }>;\n\n  /**\n   * Optional default tool suppression mode when no explicit allowlist is provided.\n   *\n   * - \"all\": start with no tools enabled\n   * - \"builtin\": disable the default built-in tools (read, bash, edit, write,\n   *   find, search, ask_user_question, todo) but keep extension/custom tools enabled\n   */\n  noTools?: \"all\" | \"builtin\";\n  /**\n   * Optional allowlist of tool names.\n   *\n   * When omitted, pi enables the default built-in tools (read, bash, edit, write,\n   * find, search, ask_user_question, todo) and leaves extension/custom tools enabled unless\n   * `noTools` changes that default.\n   * When provided, only the listed tool names are enabled, minus any names in\n   * `excludedTools`.\n   */\n  tools?: string[];\n  /**\n   * Optional blocklist of tool names.\n   *\n   * Matching built-in, extension, and SDK custom tools are omitted from the\n   * final session tool registry and active tool set. Unknown names are ignored.\n   */\n  excludedTools?: string[];\n  /** Custom tools to register (in addition to built-in tools). */\n  customTools?: ToolDefinition[];\n\n  /** Resource loader. When omitted, DefaultResourceLoader is used. */\n  resourceLoader?: ResourceLoader;\n\n  /** Session manager. Default: SessionManager.create(cwd) */\n  sessionManager?: SessionManager;\n\n  /** Settings manager. Default: SettingsManager.create(cwd, agentDir) */\n  settingsManager?: SettingsManager;\n  /** Session start event metadata for extension runtime startup. */\n  sessionStartEvent?: SessionStartEvent;\n  /** Session-scoped orchestration policy exposed to extension/tool handlers. */\n  orchestrationContext?: OrchestrationContext;\n}\n\n/** Result from createAgentSession */\nexport interface CreateAgentSessionResult {\n  /** The created session */\n  session: AgentSession;\n  /** Extensions result (for UI context setup in interactive mode) */\n  extensionsResult: LoadExtensionsResult;\n  /** Warning if session was restored with a different model than saved */\n  modelFallbackMessage?: string;\n  /** Warning if a saved/default context window could not be applied to the selected model. */\n  contextWindowWarning?: string;\n  /** Error if an explicit strict context-window selection is unsupported. */\n  contextWindowError?: string;\n}\n\n"]}

package/dist/core/sdk-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"sdk-types.js","sourceRoot":"","sources":["../../src/core/sdk-types.ts"],"names":[],"mappings":"","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport type { Api, Model } from \"@earendil-works/pi-ai\";\nimport type { AuthStorage } from \"./auth-storage.ts\";\nimport type { ModelRegistry } from \"./model-registry.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\nimport type { SessionManager } from \"./session-manager.ts\";\nimport type { SettingsManager } from \"./settings-manager.ts\";\nimport type { AgentSession } from \"./agent-session.ts\";\nimport type { LoadExtensionsResult, OrchestrationContext, SessionStartEvent, ToolDefinition } from \"./extensions/index.ts\";\n\nexport interface CreateAgentSessionOptions {\n  /** Working directory for project-local discovery. Default: process.cwd() */\n  cwd?: string;\n  /** Global config directory. Default: ~/.atomic/agent */\n  agentDir?: string;\n\n  /** Auth storage for credentials. Default: AuthStorage.create(agentDir/auth.json) */\n  authStorage?: AuthStorage;\n  /** Model registry. Default: ModelRegistry.create(authStorage, agentDir/models.json) */\n  modelRegistry?: ModelRegistry;\n\n  /** Model to use. Default: from settings, else first available */\n  model?: Model<Api>;\n  /** Thinking level. Default: from settings, else 'medium' (clamped to model capabilities) */\n  thinkingLevel?: ThinkingLevel;\n  /** Context window token count. Default: model scalar contextWindow, or settings/session override when supported. */\n  contextWindow?: number;\n  /** Treat unsupported contextWindow as an error instead of a warning/fallback. */\n  contextWindowStrict?: boolean;\n  /** Models available for cycling (Ctrl+P in interactive mode) */\n  scopedModels?: Array<{ model: Model<Api>; thinkingLevel?: ThinkingLevel }>;\n\n  /**\n   * Optional default tool suppression mode when no explicit allowlist is provided.\n   *\n   * - \"all\": start with no tools enabled\n   * - \"builtin\": disable the default built-in tools (read, bash, edit, write,\n   *   ask_user_question, todo) but keep extension/custom tools enabled\n   */\n  noTools?: \"all\" | \"builtin\";\n  /**\n   * Optional allowlist of tool names.\n   *\n   * When omitted, pi enables the default built-in tools (read, bash, edit, write,\n   * ask_user_question, todo) and leaves extension/custom tools enabled unless\n   * `noTools` changes that default.\n   * When provided, only the listed tool names are enabled, minus any names in\n   * `excludedTools`.\n   */\n  tools?: string[];\n  /**\n   * Optional blocklist of tool names.\n   *\n   * Matching built-in, extension, and SDK custom tools are omitted from the\n   * final session tool registry and active tool set. Unknown names are ignored.\n   */\n  excludedTools?: string[];\n  /** Custom tools to register (in addition to built-in tools). */\n  customTools?: ToolDefinition[];\n\n  /** Resource loader. When omitted, DefaultResourceLoader is used. */\n  resourceLoader?: ResourceLoader;\n\n  /** Session manager. Default: SessionManager.create(cwd) */\n  sessionManager?: SessionManager;\n\n  /** Settings manager. Default: SettingsManager.create(cwd, agentDir) */\n  settingsManager?: SettingsManager;\n  /** Session start event metadata for extension runtime startup. */\n  sessionStartEvent?: SessionStartEvent;\n  /** Session-scoped orchestration policy exposed to extension/tool handlers. */\n  orchestrationContext?: OrchestrationContext;\n}\n\n/** Result from createAgentSession */\nexport interface CreateAgentSessionResult {\n  /** The created session */\n  session: AgentSession;\n  /** Extensions result (for UI context setup in interactive mode) */\n  extensionsResult: LoadExtensionsResult;\n  /** Warning if session was restored with a different model than saved */\n  modelFallbackMessage?: string;\n  /** Warning if a saved/default context window could not be applied to the selected model. */\n  contextWindowWarning?: string;\n  /** Error if an explicit strict context-window selection is unsupported. */\n  contextWindowError?: string;\n}\n\n"]}
+{"version":3,"file":"sdk-types.js","sourceRoot":"","sources":["../../src/core/sdk-types.ts"],"names":[],"mappings":"","sourcesContent":["import type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport type { Api, Model } from \"@earendil-works/pi-ai\";\nimport type { AuthStorage } from \"./auth-storage.ts\";\nimport type { ModelRegistry } from \"./model-registry.ts\";\nimport type { ResourceLoader } from \"./resource-loader.ts\";\nimport type { SessionManager } from \"./session-manager.ts\";\nimport type { SettingsManager } from \"./settings-manager.ts\";\nimport type { AgentSession } from \"./agent-session.ts\";\nimport type { LoadExtensionsResult, OrchestrationContext, SessionStartEvent, ToolDefinition } from \"./extensions/index.ts\";\n\nexport interface CreateAgentSessionOptions {\n  /** Working directory for project-local discovery. Default: process.cwd() */\n  cwd?: string;\n  /** Global config directory. Default: ~/.atomic/agent */\n  agentDir?: string;\n\n  /** Auth storage for credentials. Default: AuthStorage.create(agentDir/auth.json) */\n  authStorage?: AuthStorage;\n  /** Model registry. Default: ModelRegistry.create(authStorage, agentDir/models.json) */\n  modelRegistry?: ModelRegistry;\n\n  /** Model to use. Default: from settings, else first available */\n  model?: Model<Api>;\n  /** Thinking level. Default: from settings, else 'medium' (clamped to model capabilities) */\n  thinkingLevel?: ThinkingLevel;\n  /** Context window token count. Default: model scalar contextWindow, or settings/session override when supported. */\n  contextWindow?: number;\n  /** Treat unsupported contextWindow as an error instead of a warning/fallback. */\n  contextWindowStrict?: boolean;\n  /** Models available for cycling (Ctrl+P in interactive mode) */\n  scopedModels?: Array<{ model: Model<Api>; thinkingLevel?: ThinkingLevel }>;\n\n  /**\n   * Optional default tool suppression mode when no explicit allowlist is provided.\n   *\n   * - \"all\": start with no tools enabled\n   * - \"builtin\": disable the default built-in tools (read, bash, edit, write,\n   *   find, search, ask_user_question, todo) but keep extension/custom tools enabled\n   */\n  noTools?: \"all\" | \"builtin\";\n  /**\n   * Optional allowlist of tool names.\n   *\n   * When omitted, pi enables the default built-in tools (read, bash, edit, write,\n   * find, search, ask_user_question, todo) and leaves extension/custom tools enabled unless\n   * `noTools` changes that default.\n   * When provided, only the listed tool names are enabled, minus any names in\n   * `excludedTools`.\n   */\n  tools?: string[];\n  /**\n   * Optional blocklist of tool names.\n   *\n   * Matching built-in, extension, and SDK custom tools are omitted from the\n   * final session tool registry and active tool set. Unknown names are ignored.\n   */\n  excludedTools?: string[];\n  /** Custom tools to register (in addition to built-in tools). */\n  customTools?: ToolDefinition[];\n\n  /** Resource loader. When omitted, DefaultResourceLoader is used. */\n  resourceLoader?: ResourceLoader;\n\n  /** Session manager. Default: SessionManager.create(cwd) */\n  sessionManager?: SessionManager;\n\n  /** Settings manager. Default: SettingsManager.create(cwd, agentDir) */\n  settingsManager?: SettingsManager;\n  /** Session start event metadata for extension runtime startup. */\n  sessionStartEvent?: SessionStartEvent;\n  /** Session-scoped orchestration policy exposed to extension/tool handlers. */\n  orchestrationContext?: OrchestrationContext;\n}\n\n/** Result from createAgentSession */\nexport interface CreateAgentSessionResult {\n  /** The created session */\n  session: AgentSession;\n  /** Extensions result (for UI context setup in interactive mode) */\n  extensionsResult: LoadExtensionsResult;\n  /** Warning if session was restored with a different model than saved */\n  modelFallbackMessage?: string;\n  /** Warning if a saved/default context window could not be applied to the selected model. */\n  contextWindowWarning?: string;\n  /** Error if an explicit strict context-window selection is unsupported. */\n  contextWindowError?: string;\n}\n\n"]}