@chances-ai/engine 24.0.0

package/dist/tools/builtins/web-fetch.js

@@ -0,0 +1,353 @@
+import { AppError, ErrorCode } from "@chances-ai/runtime";
+import { optBool, optNum, str } from "./_shared.js";
+const DEFAULT_TIMEOUT_MS = 30_000;
+const DEFAULT_MAX_BYTES = 250 * 1024;
+/** Absolute ceiling on caller-supplied `maxBytes`. A misbehaving model could
+ * otherwise ask for a multi-GB body and force memory growth. 4 MiB is
+ * generous for any realistic doc page while still bounded. */
+const MAX_BYTES_CEILING = 4 * 1024 * 1024;
+const MAX_REDIRECTS = 10;
+const URL_MAX_LENGTH = 2048;
+/**
+ * Refuses RFC1918, loopback, link-local, CGNAT, and common internal hostnames.
+ * The goal is SSRF defense: a model that asks for `http://169.254.169.254/...`
+ * (cloud metadata) or `http://10.0.0.5/admin` (an internal box) must be denied
+ * before the gate even prompts. Operators who legitimately want to fetch a
+ * local dev server can edit the config — the explicit override is the trust
+ * signal, not a silent fallback.
+ */
+function isPrivateIPv4(a, b) {
+    if (a === 0)
+        return true; // 0.0.0.0/8
+    if (a === 10)
+        return true; // 10.0.0.0/8
+    if (a === 127)
+        return true; // loopback
+    if (a === 169 && b === 254)
+        return true; // link-local
+    if (a === 172 && b >= 16 && b <= 31)
+        return true; // 172.16.0.0/12
+    if (a === 192 && b === 168)
+        return true; // 192.168.0.0/16
+    if (a === 100 && b >= 64 && b <= 127)
+        return true; // CGNAT 100.64.0.0/10
+    return false;
+}
+/**
+ * If `inner` is an IPv4-mapped IPv6 address (`::ffff:a.b.c.d` or its hex
+ * canonicalization like `::ffff:7f00:1`), return the embedded IPv4 octets.
+ * URL parsers (Bun's included) silently canonicalize the dotted form into
+ * hex, so a check that only sees `127.0.0.1` literals misses an attacker
+ * who writes `[::ffff:127.0.0.1]` — it lands as `[::ffff:7f00:1]` and
+ * defeats the IPv4 branch entirely.
+ */
+function parseMappedIPv4(inner) {
+    // Bun normalizes `::ffff:127.0.0.1` to `::ffff:7f00:1` and elides leading zeros.
+    // Reject early if the address isn't a mapped form.
+    const mapped = inner.match(/^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i);
+    if (mapped) {
+        const hi = parseInt(mapped[1], 16);
+        const lo = parseInt(mapped[2], 16);
+        return [(hi >> 8) & 0xff, hi & 0xff, (lo >> 8) & 0xff, lo & 0xff];
+    }
+    // Dotted-quad form preserved (e.g. some parsers leave `::ffff:127.0.0.1`).
+    const dotted = inner.match(/^::ffff:(\d+)\.(\d+)\.(\d+)\.(\d+)$/i);
+    if (dotted) {
+        return [Number(dotted[1]), Number(dotted[2]), Number(dotted[3]), Number(dotted[4])];
+    }
+    return null;
+}
+function isPrivateHost(hostname) {
+    // Normalize once: lowercase + strip *all* trailing dots. `localhost.` is
+    // the same host as `localhost` in DNS; `localhost..` is malformed but a
+    // resolver may still accept it, so a single-dot strip would leave a
+    // bypass. Trailing dots are never load-bearing for the public suffix.
+    const host = hostname.toLowerCase().replace(/\.+$/, "");
+    const ipv4 = host.match(/^(\d+)\.(\d+)\.(\d+)\.(\d+)$/);
+    if (ipv4)
+        return isPrivateIPv4(Number(ipv4[1]), Number(ipv4[2]));
+    if (host.startsWith("[") && host.endsWith("]")) {
+        const inner = host.slice(1, -1);
+        if (inner === "::1" || inner === "::")
+            return true;
+        const mapped = parseMappedIPv4(inner);
+        if (mapped)
+            return isPrivateIPv4(mapped[0], mapped[1]);
+        // Unique local addresses fc00::/7 (covers fc** and fd**).
+        if (inner.startsWith("fc") || inner.startsWith("fd"))
+            return true;
+        // Link-local fe80::/10 — top 10 bits of the first hextet are 1111111010,
+        // so the first hextet falls in the range fe80–febf inclusive. `fe80:`
+        // alone misses `fea0::1`, `febf::1`, etc.
+        const firstHextet = parseInt(inner.split(":")[0], 16);
+        if (!Number.isNaN(firstHextet) && (firstHextet & 0xffc0) === 0xfe80)
+            return true;
+        return false;
+    }
+    if (host === "localhost")
+        return true;
+    if (host.endsWith(".localhost"))
+        return true;
+    if (host.endsWith(".local"))
+        return true;
+    if (host.endsWith(".internal"))
+        return true;
+    return false;
+}
+function validateUrl(raw) {
+    if (raw.length > URL_MAX_LENGTH) {
+        throw new AppError(ErrorCode.Tool, `URL too long (>${URL_MAX_LENGTH} chars)`);
+    }
+    let u;
+    try {
+        u = new URL(raw);
+    }
+    catch {
+        throw new AppError(ErrorCode.Tool, `Invalid URL: ${raw}`);
+    }
+    if (u.protocol !== "http:" && u.protocol !== "https:") {
+        throw new AppError(ErrorCode.Tool, `Unsupported URL scheme: ${u.protocol}`);
+    }
+    if (u.username || u.password) {
+        throw new AppError(ErrorCode.Tool, "URL must not contain credentials");
+    }
+    if (isPrivateHost(u.hostname)) {
+        throw new AppError(ErrorCode.Tool, `Refusing to fetch private/local address: ${u.hostname}`);
+    }
+    return u;
+}
+/** Same registrable host, or one is the `www.` variant of the other. */
+function isSameHostOrWwwVariant(a, b) {
+    if (a.host === b.host)
+        return true;
+    const stripWww = (h) => (h.startsWith("www.") ? h.slice(4) : h);
+    return stripWww(a.host) === stripWww(b.host);
+}
+/**
+ * Minimal HTML → readable text. Deliberately string-based (no DOM, no turndown
+ * dep) for v1: we trade markdown fidelity for a 60-LoC implementation with
+ * zero new dependencies. Most use cases (docs, README mirrors, news pages)
+ * survive this cleanly; rich pages still produce *readable* text even if the
+ * markdown is rough. `raw: true` bypasses this entirely for callers that want
+ * the original HTML. A turndown / readability upgrade is a v2+ candidate.
+ */
+function decodeEntities(s) {
+    return s
+        .replace(/&nbsp;/g, " ")
+        .replace(/&amp;/g, "&")
+        .replace(/&lt;/g, "<")
+        .replace(/&gt;/g, ">")
+        .replace(/&quot;/g, '"')
+        .replace(/&#39;/g, "'")
+        .replace(/&apos;/g, "'");
+}
+export function htmlToText(html) {
+    // Capture title before we touch tags — a title like `<title>A <b>B</b></title>`
+    // would otherwise either keep `<b>` (bad heading) or get duplicated as body
+    // text after we strip and replace block tags.
+    const titleMatch = html.match(/<title[^>]*>([\s\S]*?)<\/title>/i);
+    const title = titleMatch?.[1] ? decodeEntities(titleMatch[1].replace(/<[^>]+>/g, "")).trim() : "";
+    let s = html
+        .replace(/<script\b[^>]*>[\s\S]*?<\/script>/gi, "")
+        .replace(/<style\b[^>]*>[\s\S]*?<\/style>/gi, "")
+        // Best-effort: an unclosed <script> or <style> would otherwise leak its
+        // body into output. Drop everything from an unclosed opener to end.
+        .replace(/<script\b[^>]*>[\s\S]*$/gi, "")
+        .replace(/<style\b[^>]*>[\s\S]*$/gi, "")
+        .replace(/<!--[\s\S]*?-->/g, "")
+        // Strip the captured title block so it isn't duplicated in body output.
+        .replace(/<title[^>]*>[\s\S]*?<\/title>/gi, "")
+        .replace(/<\/(p|div|section|article|li|tr|h[1-6])[^>]*>/gi, "\n\n")
+        .replace(/<(p|div|section|article|li|tr|h[1-6])[^>]*>/gi, "\n")
+        .replace(/<br\s*\/?>/gi, "\n")
+        .replace(/<hr\s*\/?>/gi, "\n---\n")
+        .replace(/<[^>]+>/g, "");
+    s = decodeEntities(s)
+        .replace(/[ \t]+/g, " ")
+        .replace(/\n[ \t]+/g, "\n")
+        .replace(/\n{3,}/g, "\n\n")
+        .trim();
+    if (title)
+        return `# ${title}\n\n${s}`;
+    return s;
+}
+async function readBodyCapped(res, maxBytes) {
+    const reader = res.body?.getReader();
+    if (!reader)
+        return { body: "", truncated: false };
+    const chunks = [];
+    let received = 0;
+    let truncated = false;
+    for (;;) {
+        const { value, done } = await reader.read();
+        if (done)
+            break;
+        if (received + value.byteLength > maxBytes) {
+            const room = maxBytes - received;
+            if (room > 0)
+                chunks.push(value.subarray(0, room));
+            truncated = true;
+            try {
+                await reader.cancel();
+            }
+            catch {
+                /* best-effort */
+            }
+            break;
+        }
+        chunks.push(value);
+        received += value.byteLength;
+    }
+    // Decode as UTF-8; lossy for non-UTF responses but the LLM will see "?" runs
+    // rather than crash. We mark Content-Type in the header so the model knows.
+    const total = chunks.reduce((acc, c) => acc + c.byteLength, 0);
+    const merged = new Uint8Array(total);
+    let offset = 0;
+    for (const c of chunks) {
+        merged.set(c, offset);
+        offset += c.byteLength;
+    }
+    return { body: new TextDecoder("utf-8", { fatal: false }).decode(merged), truncated };
+}
+async function followRedirects(initial, signal, maxBytes) {
+    let url = initial;
+    let redirectsLeft = MAX_REDIRECTS;
+    for (;;) {
+        const res = await fetch(url.toString(), { redirect: "manual", signal });
+        const status = res.status;
+        if (status >= 300 && status < 400) {
+            const loc = res.headers.get("location");
+            if (loc) {
+                if (redirectsLeft-- === 0) {
+                    throw new AppError(ErrorCode.Tool, `Too many redirects (>${MAX_REDIRECTS})`);
+                }
+                const target = new URL(loc, url);
+                // Re-validate: a redirect to file://, localhost, or a private IP must
+                // be refused regardless of how friendly the source URL looked.
+                validateUrl(target.toString());
+                if (!isSameHostOrWwwVariant(url, target)) {
+                    try {
+                        await res.body?.cancel();
+                    }
+                    catch {
+                        /* best-effort */
+                    }
+                    return {
+                        finalUrl: url.toString(),
+                        status,
+                        contentType: "text/plain",
+                        body: `Cross-host redirect to ${target.toString()} — re-invoke web_fetch with the new URL if you trust it.`,
+                        truncated: false,
+                    };
+                }
+                try {
+                    await res.body?.cancel();
+                }
+                catch {
+                    /* best-effort */
+                }
+                url = target;
+                continue;
+            }
+        }
+        const contentType = res.headers.get("content-type") ?? "application/octet-stream";
+        const { body, truncated } = await readBodyCapped(res, maxBytes);
+        return { finalUrl: url.toString(), status, contentType, body, truncated };
+    }
+}
+export const webFetchTool = {
+    name: "web_fetch",
+    description: "Fetch a URL and return its content as text the model can read. http(s) only; literal private IPs (RFC1918, loopback, link-local, CGNAT, IPv4-mapped IPv6) and credentials in the URL are rejected. Note: lexical filtering only — a public hostname that DNS-resolves to a private address is NOT blocked at the validator (a v2+ item); the per-call `network-read` prompt is the user-side defense. text/html is reduced to readable text; JSON / markdown / plain text pass through. Use raw:true to get the unprocessed body. Cross-host redirects are not followed automatically — a one-line note is returned instead so the model can re-invoke with the new URL.",
+    category: "network-read",
+    parameters: {
+        type: "object",
+        properties: {
+            url: { type: "string", description: "Absolute http(s) URL to fetch." },
+            raw: { type: "boolean", description: "Skip HTML→text reduction; return the body as received." },
+            maxBytes: {
+                type: "number",
+                description: `Cap on body bytes (default ${DEFAULT_MAX_BYTES}). Responses are truncated to fit.`,
+            },
+            timeoutMs: {
+                type: "number",
+                description: `Per-request timeout in ms (default ${DEFAULT_TIMEOUT_MS}).`,
+            },
+        },
+        required: ["url"],
+    },
+    summarize: (args) => `web_fetch ${str(args, "url")}`,
+    // (5.3) Scope the permission cache to the specific URL. Without a cacheKey
+    // the gate would key on the bare tool name `web_fetch`, so a single
+    // "[a] yes, don't ask again" (or an explicit remember) would blanket-approve
+    // EVERY future URL — defeating the per-URL egress defense (codex 5.3 Round-2
+    // MUST-FIX #1). With a per-URL key, approving URL A never pre-approves URL B;
+    // re-fetching the identical URL you just approved simply doesn't re-prompt.
+    // The raw URL string is used verbatim (no normalization) — any textual
+    // difference re-prompts, which is the safe direction.
+    permission(args) {
+        const url = str(args, "url");
+        return {
+            name: "web_fetch",
+            category: "network-read",
+            summary: `web_fetch ${url}`,
+            args,
+            cacheKey: `web_fetch:${url}`,
+        };
+    },
+    async execute(args, ctx) {
+        const raw = optBool(args, "raw") ?? false;
+        const requestedMaxBytes = optNum(args, "maxBytes") ?? DEFAULT_MAX_BYTES;
+        // Clamp model-controlled cap into [1, MAX_BYTES_CEILING]. Non-positive /
+        // non-finite values fall through to the default — silently accepting "0"
+        // would always return an empty body which is unhelpful, and accepting a
+        // huge value would let a model force memory growth.
+        const maxBytes = Number.isFinite(requestedMaxBytes) && requestedMaxBytes >= 1
+            ? Math.min(Math.floor(requestedMaxBytes), MAX_BYTES_CEILING)
+            : DEFAULT_MAX_BYTES;
+        const timeoutMs = optNum(args, "timeoutMs") ?? DEFAULT_TIMEOUT_MS;
+        let initial;
+        try {
+            initial = validateUrl(str(args, "url"));
+        }
+        catch (e) {
+            return { ok: false, output: e.message };
+        }
+        // Compose request timeout + caller cancel into one signal.
+        const ac = new AbortController();
+        const timer = setTimeout(() => ac.abort(new Error(`Timeout after ${timeoutMs} ms`)), timeoutMs);
+        let onAbort;
+        if (ctx.signal.aborted) {
+            ac.abort(ctx.signal.reason ?? new Error("Cancelled"));
+        }
+        else {
+            onAbort = () => ac.abort(ctx.signal.reason ?? new Error("Cancelled"));
+            ctx.signal.addEventListener("abort", onAbort, { once: true });
+        }
+        try {
+            const r = await followRedirects(initial, ac.signal, maxBytes);
+            const isHtml = /^\s*text\/html\b/i.test(r.contentType);
+            const body = !raw && isHtml ? htmlToText(r.body) : r.body;
+            const header = [
+                `URL: ${initial.toString()}`,
+                `Final-URL: ${r.finalUrl}`,
+                `Status: ${r.status}`,
+                `Content-Type: ${r.contentType}`,
+                `Truncated: ${r.truncated}`,
+            ].join("\n");
+            // ok:true even for HTTP 4xx/5xx — the model can read the status line in
+            // the header and the error body below. ok:false is reserved for network
+            // / validation / timeout failures where there's nothing meaningful to return.
+            return { ok: true, output: `${header}\n\n${body}` };
+        }
+        catch (e) {
+            const err = e;
+            return { ok: false, output: `web_fetch failed: ${err.message}` };
+        }
+        finally {
+            clearTimeout(timer);
+            if (onAbort)
+                ctx.signal.removeEventListener("abort", onAbort);
+        }
+    },
+};
+//# sourceMappingURL=web-fetch.js.map

package/dist/tools/builtins/web-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-fetch.js","sourceRoot":"","sources":["../../../src/tools/builtins/web-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC;AACrC;;8DAE8D;AAC9D,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1C,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B;;;;;;;GAOG;AACH,SAAS,aAAa,CAAC,CAAS,EAAE,CAAS;IACzC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,YAAY;IACtC,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,aAAa;IACxC,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,WAAW;IACvC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,aAAa;IACtD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,CAAC,gBAAgB;IAClE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,iBAAiB;IAC1D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,CAAC,sBAAsB;IACzE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,iFAAiF;IACjF,mDAAmD;IACnD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACxE,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QACpC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QACpC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,2EAA2E;IAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACnE,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,yEAAyE;IACzE,wEAAwE;IACxE,oEAAoE;IACpE,sEAAsE;IACtE,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAExD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACxD,IAAI,IAAI;QAAE,OAAO,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACnD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,MAAM;YAAE,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,0DAA0D;QAC1D,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAClE,yEAAyE;QACzE,sEAAsE;QACtE,0CAA0C;QAC1C,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACjF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,GAAG,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,kBAAkB,cAAc,SAAS,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,gBAAgB,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtD,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,kCAAkC,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,4CAA4C,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,wEAAwE;AACxE,SAAS,sBAAsB,CAAC,CAAM,EAAE,CAAM;IAC5C,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CAAC,CAAS;IAC/B,OAAO,CAAC;SACL,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,gFAAgF;IAChF,4EAA4E;IAC5E,8CAA8C;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAElG,IAAI,CAAC,GAAG,IAAI;SACT,OAAO,CAAC,qCAAqC,EAAE,EAAE,CAAC;SAClD,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC;QACjD,wEAAwE;QACxE,oEAAoE;SACnE,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC;SACxC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC;SACvC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;QAChC,wEAAwE;SACvE,OAAO,CAAC,iCAAiC,EAAE,EAAE,CAAC;SAC9C,OAAO,CAAC,iDAAiD,EAAE,MAAM,CAAC;SAClE,OAAO,CAAC,+CAA+C,EAAE,IAAI,CAAC;SAC9D,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC;SAC7B,OAAO,CAAC,cAAc,EAAE,SAAS,CAAC;SAClC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC;SAClB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC;SAC1B,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,IAAI,EAAE,CAAC;IACV,IAAI,KAAK;QAAE,OAAO,KAAK,KAAK,OAAO,CAAC,EAAE,CAAC;IACvC,OAAO,CAAC,CAAC;AACX,CAAC;AAUD,KAAK,UAAU,cAAc,CAAC,GAAa,EAAE,QAAgB;IAC3D,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IACrC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACnD,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,SAAS,CAAC;QACR,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,QAAQ,GAAG,QAAQ,CAAC;YACjC,IAAI,IAAI,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YACnD,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;YACD,MAAM;QACR,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC;IAC/B,CAAC;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACtB,MAAM,IAAI,CAAC,CAAC,UAAU,CAAC;IACzB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;AACxF,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAY,EAAE,MAAmB,EAAE,QAAgB;IAChF,IAAI,GAAG,GAAG,OAAO,CAAC;IAClB,IAAI,aAAa,GAAG,aAAa,CAAC;IAClC,SAAS,CAAC;QACR,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;QAC1B,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACxC,IAAI,GAAG,EAAE,CAAC;gBACR,IAAI,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC;oBAC1B,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,wBAAwB,aAAa,GAAG,CAAC,CAAC;gBAC/E,CAAC;gBACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACjC,sEAAsE;gBACtE,+DAA+D;gBAC/D,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC/B,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;oBACzC,IAAI,CAAC;wBACH,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;oBAC3B,CAAC;oBAAC,MAAM,CAAC;wBACP,iBAAiB;oBACnB,CAAC;oBACD,OAAO;wBACL,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE;wBACxB,MAAM;wBACN,WAAW,EAAE,YAAY;wBACzB,IAAI,EAAE,0BAA0B,MAAM,CAAC,QAAQ,EAAE,0DAA0D;wBAC3G,SAAS,EAAE,KAAK;qBACjB,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC3B,CAAC;gBAAC,MAAM,CAAC;oBACP,iBAAiB;gBACnB,CAAC;gBACD,GAAG,GAAG,MAAM,CAAC;gBACb,SAAS;YACX,CAAC;QACH,CAAC;QACD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,0BAA0B,CAAC;QAClF,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAChE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAS;IAChC,IAAI,EAAE,WAAW;IACjB,WAAW,EACT,0oBAA0oB;IAC5oB,QAAQ,EAAE,cAAc;IACxB,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;YACtE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,wDAAwD,EAAE;YAC/F,QAAQ,EAAE;gBACR,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,8BAA8B,iBAAiB,oCAAoC;aACjG;YACD,SAAS,EAAE;gBACT,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,sCAAsC,kBAAkB,IAAI;aAC1E;SACF;QACD,QAAQ,EAAE,CAAC,KAAK,CAAC;KAClB;IACD,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE;IACpD,2EAA2E;IAC3E,oEAAoE;IACpE,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,uEAAuE;IACvE,sDAAsD;IACtD,UAAU,CAAC,IAAI;QACb,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC7B,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE,aAAa,GAAG,EAAE;YAC3B,IAAI;YACJ,QAAQ,EAAE,aAAa,GAAG,EAAE;SAC7B,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG;QACrB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC;QAC1C,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,iBAAiB,CAAC;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,oDAAoD;QACpD,MAAM,QAAQ,GACZ,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,iBAAiB,IAAI,CAAC;YAC1D,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;YAC5D,CAAC,CAAC,iBAAiB,CAAC;QACxB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,kBAAkB,CAAC;QAElE,IAAI,OAAY,CAAC;QACjB,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;QACrD,CAAC;QAED,2DAA2D;QAC3D,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,iBAAiB,SAAS,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAChG,IAAI,OAAiC,CAAC;QACtC,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YACtE,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;YACvD,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1D,MAAM,MAAM,GAAG;gBACb,QAAQ,OAAO,CAAC,QAAQ,EAAE,EAAE;gBAC5B,cAAc,CAAC,CAAC,QAAQ,EAAE;gBAC1B,WAAW,CAAC,CAAC,MAAM,EAAE;gBACrB,iBAAiB,CAAC,CAAC,WAAW,EAAE;gBAChC,cAAc,CAAC,CAAC,SAAS,EAAE;aAC5B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,wEAAwE;YACxE,wEAAwE;YACxE,8EAA8E;YAC9E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,IAAI,EAAE,EAAE,CAAC;QACtD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,CAAU,CAAC;YACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QACnE,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,OAAO;gBAAE,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/tools/builtins/write.d.ts

@@ -0,0 +1,3 @@
+import type { Tool } from "../types.js";
+export declare const writeTool: Tool;
+//# sourceMappingURL=write.d.ts.map

package/dist/tools/builtins/write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.d.ts","sourceRoot":"","sources":["../../../src/tools/builtins/write.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,aAAa,CAAC;AAGpD,eAAO,MAAM,SAAS,EAAE,IAuCvB,CAAC"}

package/dist/tools/builtins/write.js

@@ -0,0 +1,48 @@
+import { existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { native } from "@chances-ai/native";
+import { linesDiff } from "../diff.js";
+import { PREVIEW_BYTE_CAP, safePath, str } from "./_shared.js";
+export const writeTool = {
+    name: "write",
+    description: "Create or overwrite a file in the workspace.",
+    category: "file-write",
+    parameters: {
+        type: "object",
+        properties: { path: { type: "string" }, content: { type: "string" } },
+        required: ["path", "content"],
+    },
+    summarize: (args, ctx) => {
+        const path = str(args, "path");
+        const content = str(args, "content");
+        let abs = null;
+        try {
+            abs = safePath(ctx, path, { resolveSymlinks: true });
+        }
+        catch {
+            return `write ${path} (${content.length} bytes)`;
+        }
+        if (!existsSync(abs)) {
+            const lineCount = content === "" ? 0 : content.split("\n").length;
+            return `create ${path} (${content.length} bytes, ${lineCount} lines)`;
+        }
+        const priorSize = statSync(abs).size;
+        if (priorSize > PREVIEW_BYTE_CAP || content.length > PREVIEW_BYTE_CAP) {
+            return `overwrite ${path} (${priorSize} → ${content.length} bytes; diff preview skipped)`;
+        }
+        const before = readFileSync(abs, "utf8");
+        if (before === content)
+            return `overwrite ${path} (no changes)`;
+        return `overwrite ${path}\n${linesDiff(before, content)}`;
+    },
+    async execute(args, ctx) {
+        const path = safePath(ctx, str(args, "path"), { resolveSymlinks: true });
+        mkdirSync(dirname(path), { recursive: true });
+        writeFileSync(path, str(args, "content"));
+        // Drop the shared fs-scan cache for this dir so a later glob/ast in the
+        // same turn sees the new file ([10.4]).
+        native.invalidateFsScanCache(dirname(path));
+        return { ok: true, output: `Wrote ${str(args, "path")}` };
+    },
+};
+//# sourceMappingURL=write.js.map

package/dist/tools/builtins/write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write.js","sourceRoot":"","sources":["../../../src/tools/builtins/write.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAE/D,MAAM,CAAC,MAAM,SAAS,GAAS;IAC7B,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,8CAA8C;IAC3D,QAAQ,EAAE,YAAY;IACtB,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACrE,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;KAC9B;IACD,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACrC,IAAI,GAAG,GAAkB,IAAI,CAAC;QAC9B,IAAI,CAAC;YACH,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,IAAI,KAAK,OAAO,CAAC,MAAM,SAAS,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAClE,OAAO,UAAU,IAAI,KAAK,OAAO,CAAC,MAAM,WAAW,SAAS,SAAS,CAAC;QACxE,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACrC,IAAI,SAAS,GAAG,gBAAgB,IAAI,OAAO,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;YACtE,OAAO,aAAa,IAAI,KAAK,SAAS,MAAM,OAAO,CAAC,MAAM,+BAA+B,CAAC;QAC5F,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,aAAa,IAAI,eAAe,CAAC;QAChE,OAAO,aAAa,IAAI,KAAK,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IAC5D,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG;QACrB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1C,wEAAwE;QACxE,wCAAwC;QACxC,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IAC5D,CAAC;CACF,CAAC"}

package/dist/tools/builtins.d.ts

@@ -0,0 +1,9 @@
+import type { Tool } from "./types.js";
+/**
+ * Registry of first-party tools the engine ships with. New tools live in their
+ * own module under `./builtins/<name>.ts`; this file is a pure barrel so the
+ * registration surface stays one-line-per-tool and reviewers can see the full
+ * tool inventory at a glance.
+ */
+export declare const builtinTools: Tool[];
+//# sourceMappingURL=builtins.d.ts.map

package/dist/tools/builtins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtins.d.ts","sourceRoot":"","sources":["../../src/tools/builtins.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAYvC;;;;;GAKG;AACH,eAAO,MAAM,YAAY,EAAE,IAAI,EAW9B,CAAC"}

package/dist/tools/builtins.js

@@ -0,0 +1,29 @@
+import { readTool } from "./builtins/read.js";
+import { writeTool } from "./builtins/write.js";
+import { editTool } from "./builtins/edit.js";
+import { bashTool } from "./builtins/bash.js";
+import { grepTool } from "./builtins/grep.js";
+import { globTool } from "./builtins/glob.js";
+import { diffTool } from "./builtins/diff.js";
+import { webFetchTool } from "./builtins/web-fetch.js";
+import { lspTool } from "./builtins/lsp.js";
+import { askUserQuestionTool } from "./builtins/ask-user-question.js";
+/**
+ * Registry of first-party tools the engine ships with. New tools live in their
+ * own module under `./builtins/<name>.ts`; this file is a pure barrel so the
+ * registration surface stays one-line-per-tool and reviewers can see the full
+ * tool inventory at a glance.
+ */
+export const builtinTools = [
+    readTool,
+    writeTool,
+    editTool,
+    bashTool,
+    grepTool,
+    globTool,
+    diffTool,
+    webFetchTool,
+    lspTool,
+    askUserQuestionTool,
+];
+//# sourceMappingURL=builtins.js.map

package/dist/tools/builtins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtins.js","sourceRoot":"","sources":["../../src/tools/builtins.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAW;IAClC,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,YAAY;IACZ,OAAO;IACP,mBAAmB;CACpB,CAAC"}

package/dist/tools/diff.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Block-diff helper used by `write` / `edit` to give the permission overlay
+ * something meaningful to render. This is not a Myers LCS diff: it finds the
+ * leading and trailing common prefixes and shows everything between as a
+ * removed-then-added block. That is "good enough" for an approval preview —
+ * the user sees what changes; line numbers anchor the change against the
+ * original file. For workflows that need a true diff (e.g. patch review) a 2.x
+ * tool can produce one via the native crate.
+ */
+export declare function linesDiff(before: string, after: string, maxLines?: number): string;
+/** Compact summary line that pairs with `linesDiff` in tool summaries:
+ * `2 deletions, 3 additions` etc. Cheap to compute and useful even when the
+ * full diff is truncated for display. */
+export declare function diffStats(before: string, after: string): {
+    removed: number;
+    added: number;
+};
+//# sourceMappingURL=diff.d.ts.map

package/dist/tools/diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../src/tools/diff.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,SAAK,GAAG,MAAM,CA4B9E;AAED;;yCAEyC;AACzC,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAa3F"}

package/dist/tools/diff.js

@@ -0,0 +1,57 @@
+/**
+ * Block-diff helper used by `write` / `edit` to give the permission overlay
+ * something meaningful to render. This is not a Myers LCS diff: it finds the
+ * leading and trailing common prefixes and shows everything between as a
+ * removed-then-added block. That is "good enough" for an approval preview —
+ * the user sees what changes; line numbers anchor the change against the
+ * original file. For workflows that need a true diff (e.g. patch review) a 2.x
+ * tool can produce one via the native crate.
+ */
+export function linesDiff(before, after, maxLines = 14) {
+    if (before === after)
+        return "(no changes)";
+    const a = before.split("\n");
+    const b = after.split("\n");
+    let start = 0;
+    while (start < a.length && start < b.length && a[start] === b[start])
+        start++;
+    let endA = a.length;
+    let endB = b.length;
+    while (endA > start && endB > start && a[endA - 1] === b[endB - 1]) {
+        endA--;
+        endB--;
+    }
+    const removed = a.slice(start, endA);
+    const added = b.slice(start, endB);
+    const rows = [`@@ -${start + 1},${removed.length} +${start + 1},${added.length} @@`];
+    for (const line of removed)
+        rows.push(`- ${line}`);
+    for (const line of added)
+        rows.push(`+ ${line}`);
+    if (rows.length <= maxLines + 1)
+        return rows.join("\n");
+    const half = Math.floor(maxLines / 2);
+    const head = rows.slice(0, half);
+    const tail = rows.slice(rows.length - half);
+    return [...head, `… (${rows.length - maxLines} lines elided)`, ...tail].join("\n");
+}
+/** Compact summary line that pairs with `linesDiff` in tool summaries:
+ * `2 deletions, 3 additions` etc. Cheap to compute and useful even when the
+ * full diff is truncated for display. */
+export function diffStats(before, after) {
+    if (before === after)
+        return { removed: 0, added: 0 };
+    const a = before.split("\n");
+    const b = after.split("\n");
+    let start = 0;
+    while (start < a.length && start < b.length && a[start] === b[start])
+        start++;
+    let endA = a.length;
+    let endB = b.length;
+    while (endA > start && endB > start && a[endA - 1] === b[endB - 1]) {
+        endA--;
+        endB--;
+    }
+    return { removed: endA - start, added: endB - start };
+}
+//# sourceMappingURL=diff.js.map

package/dist/tools/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../src/tools/diff.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,KAAa,EAAE,QAAQ,GAAG,EAAE;IACpE,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,cAAc,CAAC;IAE5C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,CAAC,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;QAAE,KAAK,EAAE,CAAC;IAE9E,IAAI,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;IACpB,IAAI,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;IACpB,OAAO,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,EAAE,CAAC;QACP,IAAI,EAAE,CAAC;IACT,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAEnC,MAAM,IAAI,GAAa,CAAC,OAAO,KAAK,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;IAC/F,KAAK,MAAM,IAAI,IAAI,OAAO;QAAE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAEjD,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,IAAI,EAAE,MAAM,IAAI,CAAC,MAAM,GAAG,QAAQ,gBAAgB,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrF,CAAC;AAED;;yCAEyC;AACzC,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,KAAa;IACrD,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACtD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,CAAC,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;QAAE,KAAK,EAAE,CAAC;IAC9E,IAAI,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;IACpB,IAAI,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;IACpB,OAAO,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,EAAE,CAAC;QACP,IAAI,EAAE,CAAC;IACT,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,GAAG,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,CAAC;AACxD,CAAC"}

package/dist/tools/index.d.ts

@@ -0,0 +1,10 @@
+export type { Tool, ToolContext, ToolLspHost, ToolResult, ToolCategory, PermissionRequest, AuthorizationRequest, QuestionRequest, QuestionSpec, QuestionOption, PermissionResolver, PermissionDecision, AuthorizationDecision, QuestionDecision, } from "./types.js";
+export { ASK_USER_QUESTION_TOOL_NAME, READONLY_CATEGORIES } from "./types.js";
+export { ToolRegistry } from "./registry.js";
+export { type PermissionCacheScope, type PermissionEvaluation, PermissionGate } from "./permission.js";
+export { CATEGORY_TIER, isAutoApprovedByMode, isBlockedByMode, modeBlockReason, } from "./approval.js";
+export { builtinTools } from "./builtins.js";
+export { type CreatePtyToolDeps, createPtyTool } from "./builtins/pty.js";
+export { cleanOutput, persistFullOutput, stripAnsi } from "./builtins/_shared.js";
+export { linesDiff, diffStats } from "./diff.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,IAAI,EACJ,WAAW,EACX,WAAW,EACX,UAAU,EACV,YAAY,EACZ,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EACf,YAAY,EACZ,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,KAAK,oBAAoB,EAAE,KAAK,oBAAoB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACvG,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,eAAe,EACf,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,KAAK,iBAAiB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC"}

package/dist/tools/index.js

@@ -0,0 +1,9 @@
+export { ASK_USER_QUESTION_TOOL_NAME, READONLY_CATEGORIES } from "./types.js";
+export { ToolRegistry } from "./registry.js";
+export { PermissionGate } from "./permission.js";
+export { CATEGORY_TIER, isAutoApprovedByMode, isBlockedByMode, modeBlockReason, } from "./approval.js";
+export { builtinTools } from "./builtins.js";
+export { createPtyTool } from "./builtins/pty.js";
+export { cleanOutput, persistFullOutput, stripAnsi } from "./builtins/_shared.js";
+export { linesDiff, diffStats } from "./diff.js";
+//# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAwD,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACvG,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,eAAe,EACf,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAA0B,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC"}