@cdoing/core 0.1.0

package/dist/tools/sub-agent.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Sub-Agent Tool — allows the agent to spawn child agents for parallel research.
+ *
+ * The sub-agent gets its own conversation context and the same tools,
+ * but cannot spawn further sub-agents (prevents infinite recursion).
+ *
+ * Security:
+ *  - Sub-agents inherit the parent's PermissionManager — all tool calls
+ *    inside the child go through the same deny/ask/allow rules.
+ *  - Task descriptions are screened for destructive intent patterns.
+ *  - Permission prompt shows a ⚠ warning for destructive tasks.
+ *
+ * Features:
+ *  - Custom timeout (useful for long-running tasks like npm install)
+ *  - Background mode (returns agent ID immediately, check status later)
+ *  - Foreground mode (waits for completion, default)
+ */
+import type { BaseTool, ToolDefinition, ToolResult } from "./types";
+import { SubAgentManager } from "./sub-agent-manager";
+/**
+ * Factory function signature for creating sub-agent runners.
+ * Now accepts an AbortSignal so the parent can cancel child agents.
+ */
+export interface SubAgentRunnerFactory {
+    (prompt: string, signal?: AbortSignal): Promise<string>;
+}
+export declare class SubAgentTool implements BaseTool {
+    definition: ToolDefinition;
+    private runnerFactory;
+    private manager;
+    constructor(runnerFactory: SubAgentRunnerFactory, manager: SubAgentManager);
+    execute(input: Record<string, unknown>): Promise<ToolResult>;
+}
+//# sourceMappingURL=sub-agent.d.ts.map

package/dist/tools/sub-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sub-agent.d.ts","sourceRoot":"","sources":["../../src/tools/sub-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AA0BtD;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACzD;AAED,qBAAa,YAAa,YAAW,QAAQ;IAC3C,UAAU,EAAE,cAAc,CAgCxB;IAEF,OAAO,CAAC,aAAa,CAAwB;IAC7C,OAAO,CAAC,OAAO,CAAkB;gBAErB,aAAa,EAAE,qBAAqB,EAAE,OAAO,EAAE,eAAe;IAKpE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;CAiEnE"}

package/dist/tools/sub-agent.js

@@ -0,0 +1,140 @@
+"use strict";
+/**
+ * Sub-Agent Tool — allows the agent to spawn child agents for parallel research.
+ *
+ * The sub-agent gets its own conversation context and the same tools,
+ * but cannot spawn further sub-agents (prevents infinite recursion).
+ *
+ * Security:
+ *  - Sub-agents inherit the parent's PermissionManager — all tool calls
+ *    inside the child go through the same deny/ask/allow rules.
+ *  - Task descriptions are screened for destructive intent patterns.
+ *  - Permission prompt shows a ⚠ warning for destructive tasks.
+ *
+ * Features:
+ *  - Custom timeout (useful for long-running tasks like npm install)
+ *  - Background mode (returns agent ID immediately, check status later)
+ *  - Foreground mode (waits for completion, default)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SubAgentTool = void 0;
+// ── Destructive task detection ──────────────────────────────────────────────
+/**
+ * Patterns in task descriptions that indicate destructive intent.
+ * These trigger an elevated permission prompt (⚠ DESTRUCTIVE) so the
+ * user is clearly warned before the sub-agent is spawned.
+ */
+const DESTRUCTIVE_TASK_PATTERNS = [
+    // File deletion
+    /\bdelete\b.*\bfiles?\b/i, /\bremove\b.*\bfiles?\b/i, /\brm\s+-rf\b/i,
+    /\bwipe\b/i, /\bpurge\b/i, /\bclean\s*up\b/i, /\bnuke\b/i,
+    // Git destructive
+    /\bforce\s*push\b/i, /\bgit\s+reset\s+--hard\b/i, /\bgit\s+clean\b/i,
+    /\brewrite\s+history\b/i, /\bdelete\b.*\bbranch/i,
+    // Database
+    /\bdrop\b.*\b(table|database|collection)\b/i, /\btruncate\b/i,
+    // System
+    /\bkill\b.*\bprocess/i, /\bshutdown\b/i, /\brestart\b.*\bserver/i,
+    /\bformat\b.*\bdisk\b/i,
+    // Destructive ops
+    /\boverwrite\b/i, /\bdestroy\b/i, /\buninstall\b/i,
+    /\bdrop\b.*\bpermission/i, /\brevoke\b/i,
+];
+class SubAgentTool {
+    definition = {
+        name: "sub_agent",
+        description: "Spawn a sub-agent to handle a specific task. The sub-agent has access to the same file and search tools but runs in its own context. Use this for independent tasks like 'find all usages of X', 'read and summarize file Y', or long-running commands like 'npm install'. Supports custom timeout and background mode. The sub-agent cannot spawn further sub-agents.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                task: {
+                    type: "string",
+                    description: "A clear, specific task for the sub-agent to perform",
+                },
+                timeout: {
+                    type: "number",
+                    description: "Custom timeout in milliseconds. Use for long-running tasks (e.g., 300000 for 5 minutes). Default: no timeout (runs until completion).",
+                },
+                background: {
+                    type: "boolean",
+                    description: "If true, returns immediately with an agent ID. Use sub_agent_status to check progress and sub_agent_terminate to stop it. Default: false (waits for completion).",
+                },
+            },
+            required: ["task"],
+        },
+        requiresPermission: true,
+        permissionMessage: (input) => {
+            const task = String(input.task || "").slice(0, 200);
+            if (DESTRUCTIVE_TASK_PATTERNS.some((p) => p.test(task))) {
+                return `⚠ DESTRUCTIVE sub-agent task: ${task}`;
+            }
+            return `Spawn sub-agent: ${task}`;
+        },
+    };
+    runnerFactory;
+    manager;
+    constructor(runnerFactory, manager) {
+        this.runnerFactory = runnerFactory;
+        this.manager = manager;
+    }
+    async execute(input) {
+        const task = input.task;
+        const timeout = input.timeout;
+        const background = input.background;
+        if (!task || task.trim().length === 0) {
+            return { success: false, output: "", error: "Task cannot be empty" };
+        }
+        // Prepend a safety instruction if the task looks destructive.
+        // The sub-agent inherits the parent's PermissionManager so each tool call
+        // will still go through deny/ask/allow checks, but this extra context
+        // makes the LLM aware it should proceed cautiously.
+        const isDestructive = DESTRUCTIVE_TASK_PATTERNS.some((p) => p.test(task));
+        const safeTask = isDestructive
+            ? `[CAUTION: This task involves potentially destructive operations. ` +
+                `You MUST ask for explicit user confirmation before executing any ` +
+                `destructive commands (rm, delete, drop, force push, reset --hard, etc.). ` +
+                `Prefer safe alternatives when possible.]\n\n${task}`
+            : task;
+        const runnerFn = (signal) => this.runnerFactory(safeTask, signal);
+        if (background) {
+            // Background mode: return immediately with agent ID
+            const agentId = this.manager.spawn(task, runnerFn, timeout);
+            return {
+                success: true,
+                output: JSON.stringify({
+                    agent_id: agentId,
+                    status: "running",
+                    message: `Sub-agent spawned in background. Use sub_agent_status with agent_id "${agentId}" to check progress, or sub_agent_terminate to stop it.`,
+                }),
+            };
+        }
+        // Foreground mode: wait for completion
+        try {
+            const entry = await this.manager.spawnAndWait(task, runnerFn, timeout);
+            if (entry.status === "completed") {
+                return {
+                    success: true,
+                    output: entry.output || "(sub-agent returned no output)",
+                };
+            }
+            if (entry.status === "timed_out") {
+                return {
+                    success: false,
+                    output: entry.output || "",
+                    error: `Sub-agent timed out after ${timeout}ms. Partial output (if any) is included. You can retry with a longer timeout or run in background mode.`,
+                };
+            }
+            return {
+                success: false,
+                output: entry.output || "",
+                error: `Sub-agent ${entry.status}: ${entry.error || "unknown error"}`,
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return { success: false, output: "", error: `Sub-agent failed: ${message}` };
+        }
+    }
+}
+exports.SubAgentTool = SubAgentTool;
+//# sourceMappingURL=sub-agent.js.map

package/dist/tools/sub-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sub-agent.js","sourceRoot":"","sources":["../../src/tools/sub-agent.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;AAKH,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,yBAAyB,GAAG;IAChC,gBAAgB;IAChB,yBAAyB,EAAE,yBAAyB,EAAE,eAAe;IACrE,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW;IACzD,kBAAkB;IAClB,mBAAmB,EAAE,2BAA2B,EAAE,kBAAkB;IACpE,wBAAwB,EAAE,uBAAuB;IACjD,WAAW;IACX,4CAA4C,EAAE,eAAe;IAC7D,SAAS;IACT,sBAAsB,EAAE,eAAe,EAAE,wBAAwB;IACjE,uBAAuB;IACvB,kBAAkB;IAClB,gBAAgB,EAAE,cAAc,EAAE,gBAAgB;IAClD,yBAAyB,EAAE,aAAa;CACzC,CAAC;AAUF,MAAa,YAAY;IACvB,UAAU,GAAmB;QAC3B,IAAI,EAAE,WAAW;QACjB,WAAW,EACT,wWAAwW;QAC1W,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,qDAAqD;iBACnE;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,uIAAuI;iBAC1I;gBACD,UAAU,EAAE;oBACV,IAAI,EAAE,SAAS;oBACf,WAAW,EACT,kKAAkK;iBACrK;aACF;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;QACD,kBAAkB,EAAE,IAAI;QACxB,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACpD,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACxD,OAAO,iCAAiC,IAAI,EAAE,CAAC;YACjD,CAAC;YACD,OAAO,oBAAoB,IAAI,EAAE,CAAC;QACpC,CAAC;KACF,CAAC;IAEM,aAAa,CAAwB;IACrC,OAAO,CAAkB;IAEjC,YAAY,aAAoC,EAAE,OAAwB;QACxE,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA8B;QAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAc,CAAC;QAClC,MAAM,OAAO,GAAG,KAAK,CAAC,OAA6B,CAAC;QACpD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAiC,CAAC;QAE3D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;QACvE,CAAC;QAED,8DAA8D;QAC9D,0EAA0E;QAC1E,sEAAsE;QACtE,oDAAoD;QACpD,MAAM,aAAa,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,aAAa;YAC5B,CAAC,CAAC,mEAAmE;gBACnE,mEAAmE;gBACnE,2EAA2E;gBAC3E,+CAA+C,IAAI,EAAE;YACvD,CAAC,CAAC,IAAI,CAAC;QAET,MAAM,QAAQ,GAAG,CAAC,MAAmB,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE/E,IAAI,UAAU,EAAE,CAAC;YACf,oDAAoD;YACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC5D,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;oBACrB,QAAQ,EAAE,OAAO;oBACjB,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,wEAAwE,OAAO,yDAAyD;iBAClJ,CAAC;aACH,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;YAEvE,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACjC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,gCAAgC;iBACzD,CAAC;YACJ,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACjC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE;oBAC1B,KAAK,EAAE,6BAA6B,OAAO,yGAAyG;iBACrJ,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE;gBAC1B,KAAK,EAAE,aAAa,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,IAAI,eAAe,EAAE;aACtE,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,qBAAqB,OAAO,EAAE,EAAE,CAAC;QAC/E,CAAC;IACH,CAAC;CACF;AA5GD,oCA4GC"}

package/dist/tools/system-info.d.ts

@@ -0,0 +1,24 @@
+/**
+ * System Info Tool — gives the LLM runtime awareness of its own
+ * permission mode, settings rules, sandbox config, and available tools.
+ *
+ * This replaces hardcoded permission docs in the system prompt with
+ * a live, queryable tool the agent can call at any time.
+ */
+import type { BaseTool, ToolDefinition, ToolResult } from "./types";
+import type { PermissionManager } from "../permissions";
+import type { SandboxManager } from "../sandbox";
+import type { ToolRegistry } from "./registry";
+export declare class SystemInfoTool implements BaseTool {
+    definition: ToolDefinition;
+    private permissionManager;
+    private sandboxManager?;
+    private toolRegistry;
+    constructor(permissionManager: PermissionManager, toolRegistry: ToolRegistry, sandboxManager?: SandboxManager);
+    execute(input: Record<string, unknown>): Promise<ToolResult>;
+    private buildPermissionsSection;
+    private describeModeEffect;
+    private buildSandboxSection;
+    private buildToolsSection;
+}
+//# sourceMappingURL=system-info.d.ts.map

package/dist/tools/system-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-info.d.ts","sourceRoot":"","sources":["../../src/tools/system-info.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,qBAAa,cAAe,YAAW,QAAQ;IAC7C,UAAU,EAAE,cAAc,CAgBxB;IAEF,OAAO,CAAC,iBAAiB,CAAoB;IAC7C,OAAO,CAAC,cAAc,CAAC,CAAiB;IACxC,OAAO,CAAC,YAAY,CAAe;gBAGjC,iBAAiB,EAAE,iBAAiB,EACpC,YAAY,EAAE,YAAY,EAC1B,cAAc,CAAC,EAAE,cAAc;IAO3B,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;IAiBlE,OAAO,CAAC,uBAAuB;IAsE/B,OAAO,CAAC,kBAAkB;IAiB1B,OAAO,CAAC,mBAAmB;IAgE3B,OAAO,CAAC,iBAAiB;CAiC1B"}

package/dist/tools/system-info.js

@@ -0,0 +1,220 @@
+"use strict";
+/**
+ * System Info Tool — gives the LLM runtime awareness of its own
+ * permission mode, settings rules, sandbox config, and available tools.
+ *
+ * This replaces hardcoded permission docs in the system prompt with
+ * a live, queryable tool the agent can call at any time.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SystemInfoTool = void 0;
+class SystemInfoTool {
+    definition = {
+        name: "system_info",
+        description: "Get information about your current permissions, sandbox restrictions, available tools, and system configuration. Call this when you need to understand what you can or cannot do, or when the user asks about your access level. No arguments required — returns a full status report.",
+        inputSchema: {
+            type: "object",
+            properties: {
+                section: {
+                    type: "string",
+                    description: "Optional: request a specific section. Values: 'permissions', 'sandbox', 'tools', 'all'. Default: 'all'.",
+                },
+            },
+            required: [],
+        },
+        requiresPermission: false,
+    };
+    permissionManager;
+    sandboxManager;
+    toolRegistry;
+    constructor(permissionManager, toolRegistry, sandboxManager) {
+        this.permissionManager = permissionManager;
+        this.toolRegistry = toolRegistry;
+        this.sandboxManager = sandboxManager;
+    }
+    async execute(input) {
+        const section = input.section || "all";
+        const parts = [];
+        if (section === "all" || section === "permissions") {
+            parts.push(this.buildPermissionsSection());
+        }
+        if (section === "all" || section === "sandbox") {
+            parts.push(this.buildSandboxSection());
+        }
+        if (section === "all" || section === "tools") {
+            parts.push(this.buildToolsSection());
+        }
+        return { success: true, output: parts.join("\n\n") };
+    }
+    buildPermissionsSection() {
+        const mode = this.permissionManager.getMode();
+        const rules = this.permissionManager.getSettingsRules();
+        const stored = this.permissionManager.getStoredRules();
+        const lines = [
+            "## Permission System Status",
+            "",
+            `**Current Mode:** ${mode}`,
+            this.describeModeEffect(mode),
+            "",
+        ];
+        // Settings rules
+        if (rules.deny.length || rules.allow.length || rules.ask.length) {
+            lines.push("### Settings Rules (from .claude/settings.json)");
+            lines.push("Rules are evaluated: deny → ask → allow. Deny always wins.");
+            lines.push("");
+            if (rules.deny.length) {
+                lines.push("**Deny (always blocked):**");
+                for (const r of rules.deny)
+                    lines.push(`  - ${r}`);
+            }
+            if (rules.ask.length) {
+                lines.push("**Ask (prompt user, even if allow matches):**");
+                for (const r of rules.ask)
+                    lines.push(`  - ${r}`);
+            }
+            if (rules.allow.length) {
+                lines.push("**Allow (auto-approved):**");
+                for (const r of rules.allow)
+                    lines.push(`  - ${r}`);
+            }
+            lines.push("");
+        }
+        else {
+            lines.push("No settings-based rules configured. All tool calls fall through to the mode-based behavior.");
+            lines.push("");
+        }
+        // Stored rules
+        const globalCount = stored.global.length;
+        const projectCount = stored.project.length;
+        if (globalCount || projectCount) {
+            lines.push("### Previously Approved Rules");
+            if (globalCount) {
+                lines.push(`Global (always): ${globalCount} rule(s)`);
+                for (const r of stored.global) {
+                    lines.push(`  - ${r.tool}${r.inputMatch ? ` (${r.inputMatch})` : ""}`);
+                }
+            }
+            if (projectCount) {
+                lines.push(`Project: ${projectCount} rule(s)`);
+                for (const r of stored.project) {
+                    lines.push(`  - ${r.tool}${r.inputMatch ? ` (${r.inputMatch})` : ""}`);
+                }
+            }
+            lines.push("");
+        }
+        // Decision flow
+        lines.push("### Decision Flow");
+        lines.push("When you call a tool, the system evaluates in this order:");
+        lines.push("1. Bypass mode → allow all");
+        lines.push("2. Tool doesn't require permission (file_read, glob_search, grep_search, system_info) → allow");
+        lines.push("3. Settings deny rule matches → BLOCKED");
+        lines.push("4. Settings ask rule matches → prompt user");
+        lines.push("5. Settings allow rule matches → auto-approve");
+        lines.push("6. Previously approved stored rule → auto-approve");
+        lines.push("7. Mode fallback (plan blocks writes, acceptEdits allows edits, default prompts user)");
+        return lines.join("\n");
+    }
+    describeModeEffect(mode) {
+        switch (mode) {
+            case "default":
+                return "Effect: You must get user approval for every write/exec tool call. Read-only tools (file_read, glob_search, grep_search) work freely.";
+            case "acceptEdits":
+                return "Effect: File writes and edits are auto-approved. Shell commands and file_run still require user approval.";
+            case "plan":
+                return "Effect: READ-ONLY mode. file_write, file_edit, shell_exec, and file_run are completely blocked. You can only read files and search code.";
+            case "dontAsk":
+                return "Effect: Everything is denied unless it matches an explicit allow rule in settings. No user prompts are shown.";
+            case "bypassPermissions":
+                return "Effect: All tools are auto-approved without any prompts. The user has opted into this unsafe mode.";
+            default:
+                return `Effect: Unknown mode "${mode}" — behaves like default.`;
+        }
+    }
+    buildSandboxSection() {
+        const lines = ["## Sandbox Status", ""];
+        if (!this.sandboxManager || !this.sandboxManager.isEnabled()) {
+            lines.push("**Sandbox: DISABLED**");
+            lines.push("No filesystem or network restrictions are enforced beyond the permission system.");
+            return lines.join("\n");
+        }
+        const config = this.sandboxManager.getConfig();
+        lines.push(`**Sandbox: ENABLED (${config.mode} mode)**`);
+        lines.push("");
+        // Mode explanation
+        if (config.mode === "auto-allow") {
+            lines.push("Mode: **auto-allow** — Commands that pass sandbox checks are auto-approved without a permission prompt.");
+        }
+        else {
+            lines.push("Mode: **regular** — Sandbox enforces restrictions, but permission prompts are still shown.");
+        }
+        lines.push("");
+        // Filesystem
+        lines.push("### Filesystem Restrictions");
+        lines.push("Writes are allowed to: the working directory" +
+            (config.filesystem.allowWrite.length ? ` + ${config.filesystem.allowWrite.join(", ")}` : " (only)"));
+        if (config.filesystem.denyWrite.length) {
+            lines.push("Writes DENIED to: " + config.filesystem.denyWrite.join(", "));
+        }
+        if (config.filesystem.denyRead.length) {
+            lines.push("Reads DENIED from: " + config.filesystem.denyRead.join(", "));
+        }
+        if (!config.filesystem.denyWrite.length && !config.filesystem.denyRead.length) {
+            lines.push("No explicit deny rules for filesystem paths.");
+        }
+        lines.push("");
+        // Network
+        lines.push("### Network Restrictions");
+        if (config.network.allowedDomains.length) {
+            lines.push("Allowed domains: " + config.network.allowedDomains.join(", "));
+        }
+        else {
+            lines.push("No domains pre-allowed.");
+        }
+        if (config.network.allowManagedDomainsOnly) {
+            lines.push("Policy: **strict** — non-allowed domains are blocked silently (no user prompt).");
+        }
+        else {
+            lines.push("Policy: **prompt** — non-allowed domains trigger a user prompt for approval.");
+        }
+        lines.push("");
+        // Excluded commands
+        if (config.excludedCommands.length) {
+            lines.push("### Excluded Commands (bypass sandbox, still need permission)");
+            lines.push(config.excludedCommands.join(", "));
+            lines.push("");
+        }
+        // Escape hatch
+        lines.push(`dangerouslyDisableSandbox: ${config.allowUnsandboxedCommands ? "available (user allows)" : "DISABLED (blocked by user)"}`);
+        return lines.join("\n");
+    }
+    buildToolsSection() {
+        const tools = this.toolRegistry.getAll();
+        const lines = ["## Available Tools", ""];
+        const permissionRequired = [];
+        const noPermission = [];
+        for (const tool of tools) {
+            const def = tool.definition;
+            const entry = `- **${def.name}**: ${def.description.split(".")[0]}.`;
+            if (def.requiresPermission) {
+                permissionRequired.push(entry);
+            }
+            else {
+                noPermission.push(entry);
+            }
+        }
+        if (noPermission.length) {
+            lines.push("### Free to use (no permission needed):");
+            lines.push(...noPermission);
+            lines.push("");
+        }
+        if (permissionRequired.length) {
+            lines.push("### Requires permission:");
+            lines.push(...permissionRequired);
+            lines.push("");
+        }
+        lines.push(`Total: ${tools.length} tools (${noPermission.length} free, ${permissionRequired.length} permission-required)`);
+        return lines.join("\n");
+    }
+}
+exports.SystemInfoTool = SystemInfoTool;
+//# sourceMappingURL=system-info.js.map

package/dist/tools/system-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-info.js","sourceRoot":"","sources":["../../src/tools/system-info.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAOH,MAAa,cAAc;IACzB,UAAU,GAAmB;QAC3B,IAAI,EAAE,aAAa;QACnB,WAAW,EACT,wRAAwR;QAC1R,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,WAAW,EACT,yGAAyG;iBAC5G;aACF;YACD,QAAQ,EAAE,EAAE;SACb;QACD,kBAAkB,EAAE,KAAK;KAC1B,CAAC;IAEM,iBAAiB,CAAoB;IACrC,cAAc,CAAkB;IAChC,YAAY,CAAe;IAEnC,YACE,iBAAoC,EACpC,YAA0B,EAC1B,cAA+B;QAE/B,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA8B;QAC1C,MAAM,OAAO,GAAI,KAAK,CAAC,OAAkB,IAAI,KAAK,CAAC;QACnD,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YAC7C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACvD,CAAC;IAEO,uBAAuB;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,CAAC;QAEvD,MAAM,KAAK,GAAa;YACtB,6BAA6B;YAC7B,EAAE;YACF,qBAAqB,IAAI,EAAE;YAC3B,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAC7B,EAAE;SACH,CAAC;QAEF,iBAAiB;QACjB,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;YAC9D,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;YACzE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;gBACzC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI;oBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACrD,CAAC;YACD,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;gBAC5D,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG;oBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;gBACzC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK;oBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,6FAA6F,CAAC,CAAC;YAC1G,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,eAAe;QACf,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QACzC,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAC3C,IAAI,WAAW,IAAI,YAAY,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC5C,IAAI,WAAW,EAAE,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,oBAAoB,WAAW,UAAU,CAAC,CAAC;gBACtD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAC9B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;YACD,IAAI,YAAY,EAAE,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,YAAY,YAAY,UAAU,CAAC,CAAC;gBAC/C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC/B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,gBAAgB;QAChB,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,+FAA+F,CAAC,CAAC;QAC5G,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QACtD,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAC5D,KAAK,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,uFAAuF,CAAC,CAAC;QAEpG,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAEO,kBAAkB,CAAC,IAAY;QACrC,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,SAAS;gBACZ,OAAO,uIAAuI,CAAC;YACjJ,KAAK,aAAa;gBAChB,OAAO,2GAA2G,CAAC;YACrH,KAAK,MAAM;gBACT,OAAO,0IAA0I,CAAC;YACpJ,KAAK,SAAS;gBACZ,OAAO,+GAA+G,CAAC;YACzH,KAAK,mBAAmB;gBACtB,OAAO,oGAAoG,CAAC;YAC9G;gBACE,OAAO,yBAAyB,IAAI,2BAA2B,CAAC;QACpE,CAAC;IACH,CAAC;IAEO,mBAAmB;QACzB,MAAM,KAAK,GAAa,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QAElD,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,EAAE,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACpC,KAAK,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;YAC/F,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,IAAI,UAAU,CAAC,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,mBAAmB;QACnB,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,yGAAyG,CAAC,CAAC;QACxH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,4FAA4F,CAAC,CAAC;QAC3G,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,aAAa;QACb,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,8CAA8C;YACvD,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAEvG,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,oBAAoB,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,qBAAqB,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC9E,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,UAAU;QACV,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,mBAAmB,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7E,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;QAChG,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;QAC7F,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,oBAAoB;QACpB,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;YAC5E,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,eAAe;QACf,KAAK,CAAC,IAAI,CAAC,8BAA8B,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,4BAA4B,EAAE,CAAC,CAAC;QAEvI,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAEO,iBAAiB;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,KAAK,GAAa,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;QAEnD,MAAM,kBAAkB,GAAa,EAAE,CAAC;QACxC,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC;YAC5B,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YACrE,IAAI,GAAG,CAAC,kBAAkB,EAAE,CAAC;gBAC3B,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,IAAI,kBAAkB,CAAC,MAAM,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,MAAM,WAAW,YAAY,CAAC,MAAM,UAAU,kBAAkB,CAAC,MAAM,uBAAuB,CAAC,CAAC;QAE3H,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF;AA1OD,wCA0OC"}

package/dist/tools/todo.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Todo Tool
+ *
+ * Allows the LLM to create, update, and manage tasks during a session.
+ * This helps users see what the agent is working on and track progress.
+ */
+import type { BaseTool, ToolDefinition, ToolResult } from "./types";
+import { TodoStore } from "../utils/todo";
+export declare class TodoTool implements BaseTool {
+    private todoStore;
+    definition: ToolDefinition;
+    constructor(todoStore: TodoStore);
+    execute(input: Record<string, unknown>): Promise<ToolResult>;
+    private getStatusIcon;
+}
+//# sourceMappingURL=todo.d.ts.map

package/dist/tools/todo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"todo.d.ts","sourceRoot":"","sources":["../../src/tools/todo.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACpE,OAAO,EAAE,SAAS,EAAmB,MAAM,eAAe,CAAC;AAE3D,qBAAa,QAAS,YAAW,QAAQ;IA8C3B,OAAO,CAAC,SAAS;IA7C7B,UAAU,EAAE,cAAc,CA2CxB;gBAEkB,SAAS,EAAE,SAAS;IAElC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;IAkFlE,OAAO,CAAC,aAAa;CAQtB"}

package/dist/tools/todo.js

@@ -0,0 +1,144 @@
+"use strict";
+/**
+ * Todo Tool
+ *
+ * Allows the LLM to create, update, and manage tasks during a session.
+ * This helps users see what the agent is working on and track progress.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TodoTool = void 0;
+class TodoTool {
+    todoStore;
+    definition = {
+        name: "todo",
+        description: `Manage tasks for the current session. Use this to:
+- Create tasks to track what needs to be done
+- Update task status as you work (pending -> in_progress -> completed)
+- Help the user see your progress
+
+Actions:
+- create: Create a new task (returns task ID)
+- update: Update a task's status or details
+- list: Show all tasks
+- delete: Remove a task
+
+Always mark tasks as in_progress when starting work, and completed when done.`,
+        inputSchema: {
+            type: "object",
+            properties: {
+                action: {
+                    type: "string",
+                    enum: ["create", "update", "list", "delete"],
+                    description: "The action to perform",
+                },
+                subject: {
+                    type: "string",
+                    description: "Task title (for create)",
+                },
+                description: {
+                    type: "string",
+                    description: "Task description (for create/update)",
+                },
+                id: {
+                    type: "string",
+                    description: "Task ID (for update/delete)",
+                },
+                status: {
+                    type: "string",
+                    enum: ["pending", "in_progress", "completed", "blocked"],
+                    description: "Task status (for update)",
+                },
+            },
+            required: ["action"],
+        },
+        requiresPermission: false,
+    };
+    constructor(todoStore) {
+        this.todoStore = todoStore;
+    }
+    async execute(input) {
+        const action = input.action;
+        switch (action) {
+            case "create": {
+                const subject = input.subject;
+                if (!subject) {
+                    return { success: false, output: "", error: "Subject is required for create" };
+                }
+                const description = input.description;
+                const todo = this.todoStore.create(subject, description);
+                return {
+                    success: true,
+                    output: `Created task #${todo.id}: ${todo.subject}`,
+                };
+            }
+            case "update": {
+                const id = input.id;
+                if (!id) {
+                    return { success: false, output: "", error: "Task ID is required for update" };
+                }
+                const todo = this.todoStore.get(id);
+                if (!todo) {
+                    return { success: false, output: "", error: `Task #${id} not found` };
+                }
+                const updates = {};
+                if (input.status)
+                    updates.status = input.status;
+                if (input.subject)
+                    updates.subject = input.subject;
+                if (input.description)
+                    updates.description = input.description;
+                const updated = this.todoStore.update(id, updates);
+                if (!updated) {
+                    return { success: false, output: "", error: `Failed to update task #${id}` };
+                }
+                const statusIcon = this.getStatusIcon(updated.status);
+                return {
+                    success: true,
+                    output: `Updated task #${id}: ${statusIcon} ${updated.subject} [${updated.status}]`,
+                };
+            }
+            case "list": {
+                const todos = this.todoStore.getAll();
+                if (todos.length === 0) {
+                    return { success: true, output: "No tasks" };
+                }
+                const lines = todos.map(t => {
+                    const icon = this.getStatusIcon(t.status);
+                    const desc = t.description ? ` - ${t.description}` : "";
+                    return `${icon} #${t.id} [${t.status}] ${t.subject}${desc}`;
+                });
+                const summary = this.todoStore.getSummary();
+                lines.push("");
+                lines.push(`Summary: ${summary.completed}/${summary.total} completed`);
+                if (summary.in_progress > 0)
+                    lines.push(`  In progress: ${summary.in_progress}`);
+                if (summary.blocked > 0)
+                    lines.push(`  Blocked: ${summary.blocked}`);
+                return { success: true, output: lines.join("\n") };
+            }
+            case "delete": {
+                const id = input.id;
+                if (!id) {
+                    return { success: false, output: "", error: "Task ID is required for delete" };
+                }
+                const deleted = this.todoStore.delete(id);
+                if (!deleted) {
+                    return { success: false, output: "", error: `Task #${id} not found` };
+                }
+                return { success: true, output: `Deleted task #${id}` };
+            }
+            default:
+                return { success: false, output: "", error: `Unknown action: ${action}` };
+        }
+    }
+    getStatusIcon(status) {
+        switch (status) {
+            case "pending": return "[ ]";
+            case "in_progress": return "[~]";
+            case "completed": return "[x]";
+            case "blocked": return "[!]";
+        }
+    }
+}
+exports.TodoTool = TodoTool;
+//# sourceMappingURL=todo.js.map

package/dist/tools/todo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"todo.js","sourceRoot":"","sources":["../../src/tools/todo.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAKH,MAAa,QAAQ;IA8CC;IA7CpB,UAAU,GAAmB;QAC3B,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE;;;;;;;;;;;8EAW6D;QAC1E,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;oBAC5C,WAAW,EAAE,uBAAuB;iBACrC;gBACD,OAAO,EAAE;oBACP,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,yBAAyB;iBACvC;gBACD,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,sCAAsC;iBACpD;gBACD,EAAE,EAAE;oBACF,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,6BAA6B;iBAC3C;gBACD,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,CAAC;oBACxD,WAAW,EAAE,0BAA0B;iBACxC;aACF;YACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;SACrB;QACD,kBAAkB,EAAE,KAAK;KAC1B,CAAC;IAEF,YAAoB,SAAoB;QAApB,cAAS,GAAT,SAAS,CAAW;IAAG,CAAC;IAE5C,KAAK,CAAC,OAAO,CAAC,KAA8B;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAgB,CAAC;QAEtC,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,OAAO,GAAG,KAAK,CAAC,OAAiB,CAAC;gBACxC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;gBACjF,CAAC;gBACD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAiC,CAAC;gBAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;gBACzD,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,iBAAiB,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,OAAO,EAAE;iBACpD,CAAC;YACJ,CAAC;YAED,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,EAAE,GAAG,KAAK,CAAC,EAAY,CAAC;gBAC9B,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;gBACjF,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;gBACxE,CAAC;gBAED,MAAM,OAAO,GAA0E,EAAE,CAAC;gBAC1F,IAAI,KAAK,CAAC,MAAM;oBAAE,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAoB,CAAC;gBAC9D,IAAI,KAAK,CAAC,OAAO;oBAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAiB,CAAC;gBAC7D,IAAI,KAAK,CAAC,WAAW;oBAAE,OAAO,CAAC,WAAW,GAAG,KAAK,CAAC,WAAqB,CAAC;gBAEzE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBACnD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,EAAE,CAAC;gBAC/E,CAAC;gBAED,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACtD,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,iBAAiB,EAAE,KAAK,UAAU,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,MAAM,GAAG;iBACpF,CAAC;YACJ,CAAC;YAED,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;gBACtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;gBAC/C,CAAC;gBAED,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;oBAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;oBAC1C,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxD,OAAO,GAAG,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;gBAC9D,CAAC,CAAC,CAAC;gBAEH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC;gBAC5C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,YAAY,CAAC,CAAC;gBACvE,IAAI,OAAO,CAAC,WAAW,GAAG,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;gBACjF,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC;oBAAE,KAAK,CAAC,IAAI,CAAC,cAAc,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;gBAErE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrD,CAAC;YAED,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,EAAE,GAAG,KAAK,CAAC,EAAY,CAAC;gBAC9B,IAAI,CAAC,EAAE,EAAE,CAAC;oBACR,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;gBACjF,CAAC;gBACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;gBACxE,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;YAC1D,CAAC;YAED;gBACE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,mBAAmB,MAAM,EAAE,EAAE,CAAC;QAC9E,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,MAAkB;QACtC,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,SAAS,CAAC,CAAC,OAAO,KAAK,CAAC;YAC7B,KAAK,aAAa,CAAC,CAAC,OAAO,KAAK,CAAC;YACjC,KAAK,WAAW,CAAC,CAAC,OAAO,KAAK,CAAC;YAC/B,KAAK,SAAS,CAAC,CAAC,OAAO,KAAK,CAAC;QAC/B,CAAC;IACH,CAAC;CACF;AA1ID,4BA0IC"}

package/dist/tools/types.d.ts

@@ -0,0 +1,20 @@
+/** Schema for a tool the agent can call */
+export interface ToolDefinition {
+    name: string;
+    description: string;
+    inputSchema: Record<string, unknown>;
+    requiresPermission: boolean;
+    permissionMessage?: (input: Record<string, unknown>) => string;
+}
+/** Result returned after executing a tool */
+export interface ToolResult {
+    success: boolean;
+    output: string;
+    error?: string;
+}
+/** Every tool implements this interface */
+export interface BaseTool {
+    definition: ToolDefinition;
+    execute(input: Record<string, unknown>): Promise<ToolResult>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/tools/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC;CAChE;AAED,6CAA6C;AAC7C,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,2CAA2C;AAC3C,MAAM,WAAW,QAAQ;IACvB,UAAU,EAAE,cAAc,CAAC;IAC3B,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAC9D"}