@chances-ai/engine 28.0.0 → 29.0.0

package/dist/hashline/types.d.ts

@@ -0,0 +1,117 @@
+/**
+ * Pure data types shared across the hashline parser, applier, and patcher.
+ * Nothing in this file references a filesystem, agent runtime, or schema
+ * library — keep it that way.
+ *
+ * Ported from oh-my-pi `packages/hashline/src/types.ts` (7.9 task 09). The
+ * line-anchored patch language + content-hash anchoring + delimiter-balance
+ * auto-repair design is oh-my-pi's; chances-cli changes are confined to the
+ * hash function (cross-runtime, see `format.ts`), the integrity check (exact
+ * snapshot-text equality, see `patcher.ts`), and the FS seam (`fs.ts`).
+ */
+/** A line-number anchor (1-indexed). */
+export interface Anchor {
+    line: number;
+}
+/** Where an `insert` edit should land relative to existing content. */
+export type Cursor = {
+    kind: "bof";
+} | {
+    kind: "eof";
+} | {
+    kind: "before_anchor";
+    anchor: Anchor;
+} | {
+    kind: "after_anchor";
+    anchor: Anchor;
+};
+/**
+ * A single low-level edit produced by the parser and consumed by the applier.
+ * Multi-line replacements decompose to one `insert` per replacement line plus
+ * one `delete` per consumed line. Replacement payloads are tagged so the
+ * applier can distinguish literal insertion from new content for a deleted
+ * line.
+ */
+export type Edit = {
+    kind: "insert";
+    cursor: Cursor;
+    text: string;
+    lineNum: number;
+    index: number;
+    mode?: "replacement";
+} | {
+    kind: "delete";
+    anchor: Anchor;
+    lineNum: number;
+    index: number;
+    oldAssertion?: string;
+} | {
+    /**
+     * Deferred block edit (`replace block N:` / `delete block N`). The exact
+     * line span is unknown at parse time — it is computed by
+     * {@link resolveBlockEdits} once file text + path (→ language) are
+     * available, then expanded into concrete edits: a non-empty `payloads`
+     * (from `replace block`) becomes the same `replacement` inserts + deletes
+     * that `replace start..end:` produces; an empty `payloads` (from `delete
+     * block`) becomes a pure range deletion. `applyEdits` never sees this
+     * variant.
+     */
+    kind: "block";
+    anchor: Anchor;
+    payloads: string[];
+    lineNum: number;
+    index: number;
+};
+/** Result of applying a parsed set of edits to a text body. */
+export interface ApplyResult {
+    /** Post-edit text body. */
+    text: string;
+    /** First line number (1-indexed) that changed, or `undefined` for a no-op apply. */
+    firstChangedLine?: number;
+    /** Diagnostic warnings collected by the parser, patcher, or recovery. */
+    warnings?: string[];
+}
+/** A parsed `[A..B]` line range. */
+export interface ParsedRange {
+    start: Anchor;
+    end: Anchor;
+}
+/** Optional hints for {@link splitPatchInput}. */
+export interface SplitOptions {
+    /** Resolves absolute paths inside hashline headers to cwd-relative form. */
+    cwd?: string;
+    /**
+     * Fallback path used when the input lacks a `¶PATH` header but contains
+     * recognizable hashline operations. Lets streaming previews work before
+     * the model has written the header.
+     */
+    path?: string;
+}
+/**
+ * Resolved 1-indexed inclusive line span of a `replace block N:` target.
+ */
+export interface BlockSpan {
+    /** First line of the block (1-indexed, inclusive). */
+    start: number;
+    /** Last line of the block (1-indexed, inclusive). */
+    end: number;
+}
+/** Request handed to a {@link BlockResolver} to resolve one `replace block N:` anchor. */
+export interface BlockResolverRequest {
+    /** Target file path (used to infer language by extension). */
+    path: string;
+    /** Full text the block must be resolved against (the snapshot the tag names). */
+    text: string;
+    /** 1-indexed line the block must begin on. */
+    line: number;
+}
+/**
+ * Resolves a `replace block N:` anchor to the line span of the syntactic block
+ * that begins on line N. Returns `null` when no block can be resolved
+ * (unrecognized language, blank/out-of-range line, no node begins there, or the
+ * resolved subtree has a syntax error). Pure seam: the hashline core declares
+ * the contract; the host injects a tree-sitter-backed implementation (in
+ * chances-cli, `native.blockRangeAt` — task 02 wave-2).
+ */
+export type BlockResolver = (request: BlockResolverRequest) => BlockSpan | null;
+//# sourceMappingURL=types.d.ts.map

package/dist/hashline/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/hashline/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,wCAAwC;AACxC,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,uEAAuE;AACvE,MAAM,MAAM,MAAM,GACd;IAAE,IAAI,EAAE,KAAK,CAAA;CAAE,GACf;IAAE,IAAI,EAAE,KAAK,CAAA;CAAE,GACf;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,MAAM,IAAI,GACZ;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,aAAa,CAAC;CACtB,GACD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACzF;IACE;;;;;;;;;OASG;IACH,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEN,+DAA+D;AAC/D,MAAM,WAAW,WAAW;IAC1B,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,oFAAoF;IACpF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,oCAAoC;AACpC,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED,kDAAkD;AAClD,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;CACb;AAED,0FAA0F;AAC1F,MAAM,WAAW,oBAAoB;IACnC,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,oBAAoB,KAAK,SAAS,GAAG,IAAI,CAAC"}

package/dist/hashline/types.js

@@ -0,0 +1,13 @@
+/**
+ * Pure data types shared across the hashline parser, applier, and patcher.
+ * Nothing in this file references a filesystem, agent runtime, or schema
+ * library — keep it that way.
+ *
+ * Ported from oh-my-pi `packages/hashline/src/types.ts` (7.9 task 09). The
+ * line-anchored patch language + content-hash anchoring + delimiter-balance
+ * auto-repair design is oh-my-pi's; chances-cli changes are confined to the
+ * hash function (cross-runtime, see `format.ts`), the integrity check (exact
+ * snapshot-text equality, see `patcher.ts`), and the FS seam (`fs.ts`).
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/hashline/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/hashline/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/tools/builtins/_hashline-fs.d.ts

@@ -0,0 +1,16 @@
+import { type BlockResolver, Filesystem, type WriteResult } from "../../hashline/index.js";
+import type { ToolContext } from "../types.js";
+/** Disk-backed hashline {@link Filesystem} bound to one tool-call's context. */
+export declare class EngineToolFs extends Filesystem {
+    private readonly ctx;
+    constructor(ctx: ToolContext);
+    readText(path: string): Promise<string>;
+    preflightWrite(path: string): Promise<void>;
+    writeText(path: string, content: string): Promise<WriteResult>;
+    /** Lexical resolve — MUST equal the `read` tool's snapshot key (see
+     * `hashlineSnapshotKey`) so a tag minted by read resolves on edit. */
+    canonicalPath(path: string): string;
+}
+/** Native-backed block resolver for `replace block N:` / `delete block N`. */
+export declare function makeBlockResolver(): BlockResolver;
+//# sourceMappingURL=_hashline-fs.d.ts.map

package/dist/tools/builtins/_hashline-fs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_hashline-fs.d.ts","sourceRoot":"","sources":["../../../src/tools/builtins/_hashline-fs.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,KAAK,aAAa,EAAE,UAAU,EAAiB,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC1G,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/C,gFAAgF;AAChF,qBAAa,YAAa,SAAQ,UAAU;IAC9B,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,EAAE,WAAW;IAI9B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAMvC,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3C,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAQ7E;0EACsE;IAC7D,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;CAG7C;AAED,8EAA8E;AAC9E,wBAAgB,iBAAiB,IAAI,aAAa,CAUjD"}

package/dist/tools/builtins/_hashline-fs.js

@@ -0,0 +1,62 @@
+/**
+ * Engine-side bridges between the pure hashline core and the live workspace:
+ *
+ * - {@link EngineToolFs} — a hashline {@link Filesystem} whose writes route
+ *   through `guardWrite` (realpath jail + protected-path floor) + atomic
+ *   temp-then-rename + fs-scan cache invalidation, and whose `canonicalPath`
+ *   matches the `read` tool's snapshot key so tags resolve.
+ * - {@link makeBlockResolver} — a {@link BlockResolver} backed by the native
+ *   tree-sitter `blockRangeAt` (task 02 wave-2), capability-gated per call
+ *   (R1-S6): a slim native build / parse failure resolves to `null`, which the
+ *   patcher turns into a "use `replace N..M:`" error rather than crashing.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { native } from "@chances-ai/native";
+import { Filesystem, NotFoundError } from "../../hashline/index.js";
+import { guardWrite, hashlineSnapshotKey, writeFileAtomic } from "./_shared.js";
+/** Disk-backed hashline {@link Filesystem} bound to one tool-call's context. */
+export class EngineToolFs extends Filesystem {
+    ctx;
+    constructor(ctx) {
+        super();
+        this.ctx = ctx;
+    }
+    async readText(path) {
+        const abs = hashlineSnapshotKey(this.ctx, path);
+        if (!existsSync(abs))
+            throw new NotFoundError(path);
+        return readFileSync(abs, "utf8");
+    }
+    async preflightWrite(path) {
+        // Fail-closed BEFORE any section commits: a jail escape / protected path
+        // throws here so a multi-section batch lands nothing (all-or-nothing).
+        guardWrite(this.ctx, path);
+    }
+    async writeText(path, content) {
+        const real = guardWrite(this.ctx, path);
+        writeFileAtomic(real, content);
+        // Keep grep/glob/ast within the same turn consistent ([10.4]).
+        native.invalidateFsScanCache(dirname(real));
+        return { text: content };
+    }
+    /** Lexical resolve — MUST equal the `read` tool's snapshot key (see
+     * `hashlineSnapshotKey`) so a tag minted by read resolves on edit. */
+    canonicalPath(path) {
+        return hashlineSnapshotKey(this.ctx, path);
+    }
+}
+/** Native-backed block resolver for `replace block N:` / `delete block N`. */
+export function makeBlockResolver() {
+    return ({ path, text, line }) => {
+        try {
+            const range = native.blockRangeAt({ code: text, path, line });
+            return range ? { start: range.startLine, end: range.endLine } : null;
+        }
+        catch {
+            // AST_UNAVAILABLE (slim native) or any parse failure → unresolved.
+            return null;
+        }
+    };
+}
+//# sourceMappingURL=_hashline-fs.js.map

package/dist/tools/builtins/_hashline-fs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_hashline-fs.js","sourceRoot":"","sources":["../../../src/tools/builtins/_hashline-fs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAsB,UAAU,EAAE,aAAa,EAAoB,MAAM,yBAAyB,CAAC;AAE1G,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEhF,gFAAgF;AAChF,MAAM,OAAO,YAAa,SAAQ,UAAU;IACb;IAA7B,YAA6B,GAAgB;QAC3C,KAAK,EAAE,CAAC;QADmB,QAAG,GAAH,GAAG,CAAa;IAE7C,CAAC;IAEQ,KAAK,CAAC,QAAQ,CAAC,IAAY;QAClC,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;QACpD,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAEQ,KAAK,CAAC,cAAc,CAAC,IAAY;QACxC,yEAAyE;QACzE,uEAAuE;QACvE,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAEQ,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAe;QACpD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACxC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC/B,+DAA+D;QAC/D,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;0EACsE;IAC7D,aAAa,CAAC,IAAY;QACjC,OAAO,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;CACF;AAED,8EAA8E;AAC9E,MAAM,UAAU,iBAAiB;IAC/B,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9D,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/builtins/_image.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Image handling for the `read` tool (7.9 [5.5], "image done fully"). Detects
+ * image files by magic bytes, then resizes/re-encodes them to a vision token
+ * budget via `sharp` (a LAZY optional peer — absent ⇒ a clear install hint, the
+ * tool degrades, nothing else breaks). The Rust image path noted in decision
+ * 5.5 is a task-02 third-wave follow-up; sharp lands the feature now.
+ */
+import type { ToolImagePart } from "../types.js";
+/** Magic-byte → MIME sniffer for the formats we support. Returns null for non-images. */
+export declare function sniffImageMime(buf: Buffer): string | null;
+export type ImageReadResult = {
+    ok: true;
+    output: string;
+    images: ToolImagePart[];
+} | {
+    ok: false;
+    output: string;
+};
+/**
+ * Read `buf` (already sniffed as `mime`) into a vision-ready {@link ToolImagePart}.
+ * Resizes the long edge to {@link MAX_EDGE} (never enlarges) so the encoded image
+ * fits a sane token budget; returns base64 bytes + MIME. Without the `sharp`
+ * peer, returns an actionable `ok:false` instead of shipping a multi-MB original.
+ */
+export declare function readImageAsParts(buf: Buffer, displayPath: string, mime: string): Promise<ImageReadResult>;
+//# sourceMappingURL=_image.d.ts.map

package/dist/tools/builtins/_image.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_image.d.ts","sourceRoot":"","sources":["../../../src/tools/builtins/_image.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAgBjD,yFAAyF;AACzF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYzD;AAmBD,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,aAAa,EAAE,CAAA;CAAE,GACrD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAgC/G"}

package/dist/tools/builtins/_image.js

@@ -0,0 +1,76 @@
+/** Long-edge cap (px) — matches Anthropic's vision guidance; keeps the encoded
+ * image well under a sane per-image token budget. */
+const MAX_EDGE = 1568;
+/** Magic-byte → MIME sniffer for the formats we support. Returns null for non-images. */
+export function sniffImageMime(buf) {
+    if (buf.length >= 8 && buf[0] === 0x89 && buf[1] === 0x50 && buf[2] === 0x4e && buf[3] === 0x47)
+        return "image/png";
+    if (buf.length >= 3 && buf[0] === 0xff && buf[1] === 0xd8 && buf[2] === 0xff)
+        return "image/jpeg";
+    if (buf.length >= 6 && buf[0] === 0x47 && buf[1] === 0x49 && buf[2] === 0x46 && buf[3] === 0x38)
+        return "image/gif";
+    if (buf.length >= 12 &&
+        buf[0] === 0x52 && buf[1] === 0x49 && buf[2] === 0x46 && buf[3] === 0x46 && // RIFF
+        buf[8] === 0x57 && buf[9] === 0x45 && buf[10] === 0x42 && buf[11] === 0x50 // WEBP
+    ) {
+        return "image/webp";
+    }
+    return null;
+}
+/** Map a sharp output format to a MIME type. */
+function formatToMime(format, fallback) {
+    switch (format) {
+        case "png":
+            return "image/png";
+        case "jpeg":
+        case "jpg":
+            return "image/jpeg";
+        case "gif":
+            return "image/gif";
+        case "webp":
+            return "image/webp";
+        default:
+            return fallback;
+    }
+}
+/**
+ * Read `buf` (already sniffed as `mime`) into a vision-ready {@link ToolImagePart}.
+ * Resizes the long edge to {@link MAX_EDGE} (never enlarges) so the encoded image
+ * fits a sane token budget; returns base64 bytes + MIME. Without the `sharp`
+ * peer, returns an actionable `ok:false` instead of shipping a multi-MB original.
+ */
+export async function readImageAsParts(buf, displayPath, mime) {
+    // Lazy optional peer: a non-literal specifier keeps it out of the type graph
+    // (sharp isn't a declared dependency), so a missing peer is a runtime null.
+    const specifier = "sharp";
+    const mod = (await import(specifier).catch(() => null));
+    const sharp = mod?.default;
+    if (typeof sharp !== "function") {
+        return {
+            ok: false,
+            output: `Cannot read image ${displayPath}: the optional 'sharp' peer is not installed. Run \`bun add sharp\` to enable image reading.`,
+        };
+    }
+    try {
+        const pipeline = sharp(buf);
+        const meta = await pipeline.metadata();
+        const w = meta.width ?? 0;
+        const h = meta.height ?? 0;
+        const needsResize = w > MAX_EDGE || h > MAX_EDGE;
+        const out = needsResize
+            ? await pipeline.resize({ width: MAX_EDGE, height: MAX_EDGE, fit: "inside", withoutEnlargement: true }).toBuffer()
+            : buf;
+        const outMime = formatToMime(meta.format, mime);
+        const dims = w && h ? ` ${w}×${h}` : "";
+        const resizedNote = needsResize ? ` (resized to fit ${MAX_EDGE}px for the model)` : "";
+        return {
+            ok: true,
+            output: `[image: ${displayPath}${dims}, ${outMime}${resizedNote}]`,
+            images: [{ data: out.toString("base64"), mimeType: outMime }],
+        };
+    }
+    catch (err) {
+        return { ok: false, output: `Failed to decode image ${displayPath}: ${err instanceof Error ? err.message : String(err)}` };
+    }
+}
+//# sourceMappingURL=_image.js.map

package/dist/tools/builtins/_image.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_image.js","sourceRoot":"","sources":["../../../src/tools/builtins/_image.ts"],"names":[],"mappings":"AASA;qDACqD;AACrD,MAAM,QAAQ,GAAG,IAAI,CAAC;AAYtB,yFAAyF;AACzF,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IACpH,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,YAAY,CAAC;IAClG,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IACpH,IACE,GAAG,CAAC,MAAM,IAAI,EAAE;QAChB,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO;QACnF,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,OAAO;MAClF,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gDAAgD;AAChD,SAAS,YAAY,CAAC,MAA0B,EAAE,QAAgB;IAChE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,KAAK;YACR,OAAO,WAAW,CAAC;QACrB,KAAK,MAAM,CAAC;QACZ,KAAK,KAAK;YACR,OAAO,YAAY,CAAC;QACtB,KAAK,KAAK;YACR,OAAO,WAAW,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,YAAY,CAAC;QACtB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAMD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,WAAmB,EAAE,IAAY;IACnF,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,SAAS,GAAG,OAAO,CAAC;IAC1B,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAuB,CAAC;IAC9E,MAAM,KAAK,GAAG,GAAG,EAAE,OAAO,CAAC;IAC3B,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,qBAAqB,WAAW,8FAA8F;SACvI,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QAC3B,MAAM,WAAW,GAAG,CAAC,GAAG,QAAQ,IAAI,CAAC,GAAG,QAAQ,CAAC;QACjD,MAAM,GAAG,GAAG,WAAW;YACrB,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;YAClH,CAAC,CAAC,GAAG,CAAC;QACR,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,oBAAoB,QAAQ,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,WAAW,WAAW,GAAG,IAAI,KAAK,OAAO,GAAG,WAAW,GAAG;YAClE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;SAC9D,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,WAAW,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC7H,CAAC;AACH,CAAC"}

package/dist/tools/builtins/_login-shell.d.ts

@@ -0,0 +1,17 @@
+/** Merge `login` PATH entries into `current`, appending only entries not already
+ * present (current dirs keep priority). Pure — the unit-testable core. */
+export declare function mergePath(current: string, login: string): string;
+/** Ask the login shell for its PATH (`$SHELL -lc 'printf %s "$PATH"'`). Returns
+ * the trimmed PATH, or null on any failure. Injectable for tests. */
+export declare function resolveLoginPath(run?: (shell: string, args: string[]) => {
+    status: number | null;
+    stdout: string;
+}): string | null;
+/**
+ * Resolve + merge the login-shell PATH into `process.env.PATH` once per process.
+ * Best-effort and idempotent; safe to call before every bash run.
+ */
+export declare function ensureLoginShellPath(): void;
+/** Test-only: re-arm the one-shot guard. */
+export declare function __resetLoginShellPath(): void;
+//# sourceMappingURL=_login-shell.d.ts.map

package/dist/tools/builtins/_login-shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_login-shell.d.ts","sourceRoot":"","sources":["../../../src/tools/builtins/_login-shell.ts"],"names":[],"mappings":"AAeA;0EAC0E;AAC1E,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAUhE;AAED;qEACqE;AACrE,wBAAgB,gBAAgB,CAC9B,GAAG,GAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK;IAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAG9E,GACA,MAAM,GAAG,IAAI,CAUf;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,IAAI,IAAI,CAQ3C;AAED,4CAA4C;AAC5C,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C"}

package/dist/tools/builtins/_login-shell.js

@@ -0,0 +1,66 @@
+/**
+ * (7.9 [5.9], goose) Login-shell PATH pre-resolution. A GUI-launched process
+ * (the Electron desktop, a double-clicked app) inherits a minimal `PATH` that
+ * omits the user's real toolchain dirs (`/opt/homebrew/bin`, nvm, cargo, …), so
+ * `bash` can't find `node`/`cargo`/`rg`. goose fixes this by asking the user's
+ * login shell for its `PATH` once and merging the missing entries into
+ * `process.env.PATH`, which every child process then inherits.
+ *
+ * One-shot + idempotent. No-op on Windows, when opted out
+ * (`CHANCES_NO_LOGIN_PATH=1`), or when the login shell can't be queried.
+ */
+import { spawnSync } from "node:child_process";
+let resolved = false;
+/** Merge `login` PATH entries into `current`, appending only entries not already
+ * present (current dirs keep priority). Pure — the unit-testable core. */
+export function mergePath(current, login) {
+    const out = current.split(":").filter(Boolean);
+    const seen = new Set(out);
+    for (const entry of login.split(":").filter(Boolean)) {
+        if (!seen.has(entry)) {
+            out.push(entry);
+            seen.add(entry);
+        }
+    }
+    return out.join(":");
+}
+/** Ask the login shell for its PATH (`$SHELL -lc 'printf %s "$PATH"'`). Returns
+ * the trimmed PATH, or null on any failure. Injectable for tests. */
+export function resolveLoginPath(run = (shell, args) => {
+    const r = spawnSync(shell, args, { encoding: "utf8", timeout: 3000 });
+    return { status: r.status, stdout: r.stdout ?? "" };
+}) {
+    const shell = process.env.SHELL || "/bin/bash";
+    try {
+        const r = run(shell, ["-lc", 'printf %s "$PATH"']);
+        if (r.status !== 0)
+            return null;
+        const path = r.stdout.trim();
+        return path.length > 0 ? path : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Resolve + merge the login-shell PATH into `process.env.PATH` once per process.
+ * Best-effort and idempotent; safe to call before every bash run.
+ */
+export function ensureLoginShellPath() {
+    if (resolved)
+        return;
+    resolved = true;
+    if (process.platform === "win32")
+        return;
+    if (process.env.CHANCES_NO_LOGIN_PATH === "1")
+        return;
+    const login = resolveLoginPath();
+    if (!login)
+        return;
+    process.env.PATH = mergePath(process.env.PATH ?? "", login);
+}
+/** Test-only: re-arm the one-shot guard. */
+export function __resetLoginShellPath() {
+    resolved = false;
+}
+//# sourceMappingURL=_login-shell.js.map

package/dist/tools/builtins/_login-shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_login-shell.js","sourceRoot":"","sources":["../../../src/tools/builtins/_login-shell.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C,IAAI,QAAQ,GAAG,KAAK,CAAC;AAErB;0EAC0E;AAC1E,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,KAAa;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED;qEACqE;AACrE,MAAM,UAAU,gBAAgB,CAC9B,MAAoF,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IAClG,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;AACtD,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,WAAW,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAClC,IAAI,QAAQ;QAAE,OAAO;IACrB,QAAQ,GAAG,IAAI,CAAC;IAChB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,GAAG;QAAE,OAAO;IACtD,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,qBAAqB;IACnC,QAAQ,GAAG,KAAK,CAAC;AACnB,CAAC"}

package/dist/tools/builtins/_notebook.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Jupyter notebook (`.ipynb`) rendering for the `read` tool (7.9 [5.5], the
+ * "notebooks last" stage of the staged multimodal decision — delivered this
+ * task, no longer deferred). A notebook is JSON, so reading the raw file would
+ * dump unreadable escaped source + base64 output blobs at the model. Instead we
+ * parse `cells[]` and render a compact, legible cell view (source + text
+ * outputs). This is a READ-ONLY view: it carries no `¶path#tag` hashline header
+ * because the model must not line-edit a rendered notebook — to change a
+ * notebook, edit the raw `.ipynb` JSON (a future NotebookEdit tool). No external
+ * dependency: pure `JSON.parse`.
+ */
+import type { ToolResult } from "../types.js";
+/** Render an `.ipynb` JSON document as a compact, read-only cell view. */
+export declare function renderNotebook(raw: string, displayPath: string): ToolResult;
+//# sourceMappingURL=_notebook.d.ts.map

package/dist/tools/builtins/_notebook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_notebook.d.ts","sourceRoot":"","sources":["../../../src/tools/builtins/_notebook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA6D9C,0EAA0E;AAC1E,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,UAAU,CA+B3E"}

package/dist/tools/builtins/_notebook.js

@@ -0,0 +1,81 @@
+/** Char budget for the rendered notebook before truncation (≈ read token cap). */
+const MAX_RENDER_CHARS = 200_000;
+/** Per-cell output char cap so one chatty cell can't dominate the render. */
+const MAX_OUTPUT_CHARS = 4_000;
+/** `.ipynb` source/text fields are either a string or an array of line strings. */
+function joinSource(src) {
+    if (Array.isArray(src))
+        return src.join("");
+    return typeof src === "string" ? src : "";
+}
+function stripAnsi(text) {
+    // Strip terminal control sequences that show up in stream/traceback output.
+    // biome-ignore lint/suspicious/noControlCharactersInRegex: stripping ANSI by design.
+    return text.replace(/\[[0-9;]*m/g, "");
+}
+function renderOutputs(outputs) {
+    const blocks = [];
+    for (const out of outputs) {
+        switch (out.output_type) {
+            case "stream":
+                blocks.push(stripAnsi(joinSource(out.text)));
+                break;
+            case "execute_result":
+            case "display_data": {
+                const plain = out.data?.["text/plain"];
+                if (plain !== undefined)
+                    blocks.push(joinSource(plain));
+                else if (out.data)
+                    blocks.push(`[${Object.keys(out.data).join(", ")} output]`);
+                break;
+            }
+            case "error":
+                blocks.push(stripAnsi([`${out.ename ?? "Error"}: ${out.evalue ?? ""}`, ...(out.traceback ?? [])].join("\n")));
+                break;
+            default:
+                break;
+        }
+    }
+    let text = blocks.join("\n").replace(/\n+$/, "");
+    if (text.length > MAX_OUTPUT_CHARS)
+        text = `${text.slice(0, MAX_OUTPUT_CHARS)}\n… [output truncated]`;
+    return text;
+}
+/** Render an `.ipynb` JSON document as a compact, read-only cell view. */
+export function renderNotebook(raw, displayPath) {
+    let nb;
+    try {
+        nb = JSON.parse(raw);
+    }
+    catch (err) {
+        return { ok: false, output: `Not a valid .ipynb (JSON parse failed) ${displayPath}: ${err instanceof Error ? err.message : String(err)}` };
+    }
+    const cells = Array.isArray(nb.cells) ? nb.cells : null;
+    if (!cells)
+        return { ok: false, output: `No cells[] found in ${displayPath} — not a Jupyter notebook.` };
+    const parts = [
+        `[notebook: ${displayPath}, ${cells.length} cell(s) — read-only rendering; edit the raw .ipynb JSON to change it]`,
+    ];
+    let truncated = false;
+    for (let i = 0; i < cells.length; i++) {
+        if (parts.join("\n").length > MAX_RENDER_CHARS) {
+            truncated = true;
+            break;
+        }
+        const cell = cells[i];
+        const type = cell.cell_type ?? "unknown";
+        const src = joinSource(cell.source).replace(/\n$/, "");
+        parts.push(`\n# Cell ${i + 1} · ${type}`);
+        if (src.length > 0)
+            parts.push(src);
+        if (type === "code" && Array.isArray(cell.outputs) && cell.outputs.length > 0) {
+            const outText = renderOutputs(cell.outputs);
+            if (outText.length > 0)
+                parts.push(`## Output:\n${outText}`);
+        }
+    }
+    if (truncated)
+        parts.push(`\n… [notebook truncated at ${MAX_RENDER_CHARS} chars — open the raw file for the rest]`);
+    return { ok: true, output: parts.join("\n") };
+}
+//# sourceMappingURL=_notebook.js.map

package/dist/tools/builtins/_notebook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_notebook.js","sourceRoot":"","sources":["../../../src/tools/builtins/_notebook.ts"],"names":[],"mappings":"AAaA,kFAAkF;AAClF,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACjC,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAkB/B,mFAAmF;AACnF,SAAS,UAAU,CAAC,GAAkC;IACpD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5C,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,4EAA4E;IAC5E,qFAAqF;IACrF,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,aAAa,CAAC,OAAyB;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,QAAQ,GAAG,CAAC,WAAW,EAAE,CAAC;YACxB,KAAK,QAAQ;gBACX,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC7C,MAAM;YACR,KAAK,gBAAgB,CAAC;YACtB,KAAK,cAAc,CAAC,CAAC,CAAC;gBACpB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC;gBACvC,IAAI,KAAK,KAAK,SAAS;oBAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAA0B,CAAC,CAAC,CAAC;qBACxE,IAAI,GAAG,CAAC,IAAI;oBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAC/E,MAAM;YACR,CAAC;YACD,KAAK,OAAO;gBACV,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAC9G,MAAM;YACR;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IACD,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,MAAM,GAAG,gBAAgB;QAAE,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,wBAAwB,CAAC;IACtG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,WAAmB;IAC7D,IAAI,EAA8B,CAAC;IACnC,IAAI,CAAC;QACH,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,WAAW,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC7I,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,WAAW,4BAA4B,EAAE,CAAC;IAEzG,MAAM,KAAK,GAAa;QACtB,cAAc,WAAW,KAAK,KAAK,CAAC,MAAM,wEAAwE;KACnH,CAAC;IACF,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;YAC/C,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM;QACR,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC;QACzC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9E,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,IAAI,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,8BAA8B,gBAAgB,0CAA0C,CAAC,CAAC;IACpH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAChD,CAAC"}

package/dist/tools/builtins/_pdf.d.ts

@@ -0,0 +1,19 @@
+/**
+ * PDF text extraction for the `read` tool (7.9 [5.5], the "PDF after image"
+ * stage — delivered this task, no longer deferred). PDFs are binary, so they
+ * route here before the binary reject (like images). Text is extracted via
+ * `unpdf` — a LAZY optional peer (absent ⇒ a clear `bun add unpdf` hint; the
+ * tool degrades, nothing else breaks), mirroring the `sharp` image peer. The
+ * extracted text is a READ-ONLY view (no `¶path#tag`): the model cannot
+ * line-edit a PDF.
+ */
+import type { ToolResult } from "../types.js";
+/** Magic-byte sniff: a PDF starts with `%PDF`. */
+export declare function sniffPdf(buf: Buffer): boolean;
+/**
+ * Extract text from a PDF `buf` into a read-only tool result. Without the
+ * `unpdf` peer, returns an actionable `ok:false` instead of refusing as a
+ * generic binary file.
+ */
+export declare function readPdfAsText(buf: Buffer, displayPath: string): Promise<ToolResult>;
+//# sourceMappingURL=_pdf.d.ts.map

package/dist/tools/builtins/_pdf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"_pdf.d.ts","sourceRoot":"","sources":["../../../src/tools/builtins/_pdf.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAK9C,kDAAkD;AAClD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAE7C;AAUD;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CA4BzF"}

package/dist/tools/builtins/_pdf.js

@@ -0,0 +1,42 @@
+/** Char budget for extracted PDF text before truncation (≈ read token cap). */
+const MAX_TEXT_CHARS = 200_000;
+/** Magic-byte sniff: a PDF starts with `%PDF`. */
+export function sniffPdf(buf) {
+    return buf.length >= 5 && buf[0] === 0x25 && buf[1] === 0x50 && buf[2] === 0x44 && buf[3] === 0x46;
+}
+/**
+ * Extract text from a PDF `buf` into a read-only tool result. Without the
+ * `unpdf` peer, returns an actionable `ok:false` instead of refusing as a
+ * generic binary file.
+ */
+export async function readPdfAsText(buf, displayPath) {
+    // Lazy optional peer: a non-literal specifier keeps it out of the type graph
+    // (unpdf isn't a declared dependency), so a missing peer is a runtime null.
+    const specifier = "unpdf";
+    const mod = (await import(specifier).catch(() => null));
+    if (!mod || typeof mod.getDocumentProxy !== "function" || typeof mod.extractText !== "function") {
+        return {
+            ok: false,
+            output: `Cannot read PDF ${displayPath}: the optional 'unpdf' peer is not installed. Run \`bun add unpdf\` to enable PDF reading.`,
+        };
+    }
+    try {
+        const doc = await mod.getDocumentProxy(new Uint8Array(buf));
+        const { totalPages, text } = await mod.extractText(doc, { mergePages: true });
+        let body = Array.isArray(text) ? text.join("\n\n") : String(text);
+        let truncated = false;
+        if (body.length > MAX_TEXT_CHARS) {
+            body = body.slice(0, MAX_TEXT_CHARS);
+            truncated = true;
+        }
+        const note = truncated ? `\n\n… [PDF text truncated at ${MAX_TEXT_CHARS} chars]` : "";
+        return {
+            ok: true,
+            output: `[pdf: ${displayPath}, ${totalPages} page(s), text extracted — read-only]\n\n${body}${note}`,
+        };
+    }
+    catch (err) {
+        return { ok: false, output: `Failed to extract PDF text from ${displayPath}: ${err instanceof Error ? err.message : String(err)}` };
+    }
+}
+//# sourceMappingURL=_pdf.js.map

package/dist/tools/builtins/_pdf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_pdf.js","sourceRoot":"","sources":["../../../src/tools/builtins/_pdf.ts"],"names":[],"mappings":"AAWA,+EAA+E;AAC/E,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,kDAAkD;AAClD,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;AACrG,CAAC;AAUD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,WAAmB;IAClE,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,SAAS,GAAG,OAAO,CAAC;IAC1B,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAuB,CAAC;IAC9E,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,gBAAgB,KAAK,UAAU,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAChG,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mBAAmB,WAAW,4FAA4F;SACnI,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,IAAI,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClE,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YACjC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;YACrC,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,gCAAgC,cAAc,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,OAAO;YACL,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,SAAS,WAAW,KAAK,UAAU,4CAA4C,IAAI,GAAG,IAAI,EAAE;SACrG,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,WAAW,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IACtI,CAAC;AACH,CAAC"}