@clarvis/agent-tools 0.1.0

package/SPEC.md

@@ -0,0 +1,266 @@
+# @clarvis/agent-tools — Specification
+
+This document specifies the behavior of each tool exposed by
+`@clarvis/agent-tools`. For installation, configuration, and the
+security model, see [README.md](./README.md).
+
+## Conventions
+
+- **Return value.** Each tool call returns `{ isError, text }`. On success
+  `text` is the tool's output; on failure `isError` is set and `text` is a JSON
+  error object (see [Errors](#errors)).
+- **Result format.** On success every tool returns plain text **except `bash`**,
+  whose success result is a JSON object (`exit_code`, `stdout`, `stderr`,
+  `signal`, `timed_out`); a non-zero exit is a success (`isError` false), not an
+  error. Only spawn/timeout/output-limit failures of `bash` flag `isError`. All
+  failures, for every tool, are the JSON error object above.
+- **Paths.** A path is resolved verbatim if absolute, otherwise against the
+  workspace root. By default the result is **confined to the workspace root**:
+  `../` traversal, absolute paths outside the root, and symlinks that resolve
+  outside it are rejected with `path_escape` (the existing portion of the path is
+  canonicalized with `realpath`, so symlink hops are caught). Confinement is
+  disabled by `ALLOW_OUTSIDE_WORKSPACE=1` / `--allow-outside-workspace`, which
+  restores unrestricted resolution (see README → Security).
+- **Input size.** The file-reading tools (`read_file`, `edit_file`, `multi_edit`,
+  `apply_patch`, and the in-process `grep` backend) refuse a file larger than
+  `MAX_FILE_BYTES` (default 20000000): the read/edit tools fail with `too_large`,
+  and `grep` skips the oversized file.
+- **Text & encoding.** Text tools operate on UTF-8. A UTF-16 file with a BOM (LE/BE)
+  is decoded by `read_file`, but the editing tools refuse it (`is_binary`) rather than
+  rewrite it as UTF-8. Other binary files (NUL byte in the first/last 8 KB, no UTF-16
+  BOM) are rejected by the text tools with `is_binary`.
+- **Line endings & BOM.** On read, content is normalized to `\n` for matching.
+  On write, the editing tools (`edit_file`, `multi_edit`, `apply_patch` modify)
+  **preserve each untouched line's original terminator** (`\r\n`, `\n`, or lone
+  `\r`); newly inserted or edited lines use the file's dominant terminator. A
+  leading UTF-8 BOM is preserved.
+- **Output bounding.** Every result is capped to `MAX_OUTPUT_BYTES` (default
+  131072), truncated on a UTF-8 boundary with a trailing marker.
+- **Atomicity.** All mutations write to a temp file and `rename` into place;
+  multi-file operations (`apply_patch`) are staged and committed transactionally
+  with rollback (a rename/move participates with both its source and destination). Writes to the same path are serialized by an in-process lock —
+  this is the single-process contract; concurrent processes or external
+  editors are **not** coordinated. A symlink target is refused (the link is not
+  followed and not replaced).
+- **BOM.** A leading U+FEFF is treated as a byte-order mark: stripped from the
+  content returned by `read_file`/used for matching, and re-emitted on write.
+
+## Read-only surface
+
+In `--read-only` mode only `read_file`, `list_dir`, `glob`, and `grep` are
+exposed; the mutating tools are not registered.
+
+---
+
+## read_file
+
+Read a text file. UTF-8 by default; a UTF-16 file with a byte-order mark (LE/BE) is
+detected and decoded.
+
+**Input:** `path` (string, required); `offset` (integer, 1-based start line,
+default 1; a negative value counts from the end — `-N` reads the last N lines; 0 is
+invalid); `limit` (integer, max lines, default tool-defined).
+
+**Behavior:** Returns lines prefixed with right-aligned line numbers and a tab.
+Empty file returns `(empty file)`. Over-long lines are truncated with a marker, and no
+single emitted line exceeds `MAX_OUTPUT_BYTES` (a longer line is byte-truncated on a UTF-8
+boundary). At least one line is always shown. When more lines remain, a continuation hint
+with the next `offset` is appended.
+
+**Errors:** `not_found`, `not_a_file` (directory), `is_binary`, `too_large`,
+`path_escape`, `invalid_input` (offset 0, or a positive offset past EOF).
+
+## list_dir
+
+List the entries of a directory.
+
+**Input:** `path` (string, default workspace root).
+
+**Behavior:** One entry per line; directories are marked. An empty directory
+returns a sentinel line rather than an empty result.
+
+**Errors:** `not_found`, `not_a_file` (path is a file), `path_escape`, `io_error`.
+
+## glob
+
+Find files (not directories) by glob pattern.
+
+**Input:** `pattern` (string, required, e.g. `**/*.ts`); `path` (base dir,
+default workspace root); `respect_gitignore` (boolean, default true).
+
+**Behavior:** Returns matching file paths, most-recently-modified first. Hidden
+files are included; when `respect_gitignore` is true, files ignored by the git
+ignore stack and the `.git/` directory are skipped. No matches returns
+`(no matches)`.
+
+**Errors:** `not_found`, `path_escape`, `invalid_input` (bad glob).
+
+## grep
+
+Search file contents by regular expression, recursively.
+
+**Input:** `pattern` (string, required, Rust/ripgrep regex syntax); `path` (file
+or dir, default workspace root); `glob` (restrict to matching files);
+`output_mode` (`files_with_matches` | `content` | `count`, default
+`files_with_matches`); `ignore_case` (boolean, default false); `context`
+(integer, both sides, content mode only, default 0); `before_context` /
+`after_context` (integers, content mode only — `ripgrep` `-B`/`-A`; each overrides
+`context` for that side); `head_limit` (integer ≥ 1, max results to return — files in
+`files_with_matches`/`count`, matches in `content`; omit for unlimited, still
+byte-bounded); `offset` (integer ≥ 0, 0-based number of leading results to skip —
+**a result offset, not `read_file`'s line offset**); `multiline` (boolean, default
+false — match across line boundaries, ripgrep `--multiline --multiline-dotall`).
+
+**Behavior:** Uses ripgrep when available, otherwise an equivalent in-process
+fallback. Both backends apply one consistent policy: **hidden files are
+searched, the `.git/` directory is skipped, and the full git ignore stack is
+respected** (nested `.gitignore`, parent directories up to the repository root,
+`.git/info/exclude`, and the global excludes file). Binary files are skipped, as
+are files larger than `MAX_FILE_BYTES` in the in-process backend. No matches
+returns `(no matches)` (a success). Output is deterministic (sorted by path, then
+line number). The pattern is validated by the active backend: ripgrep reports its
+own syntax errors, and the in-process fallback compiles the pattern as a
+JavaScript `RegExp`; a pattern valid for one engine but not the other is accepted
+or rejected by whichever backend runs.
+
+**Multiline.** With `multiline` true, `.` also matches newlines and `^`/`$` anchor at
+line boundaries, so a single match may span several lines; in `content` mode it renders
+as the spanned lines under the start line's `path:line:` prefix, and it still counts as
+one match for `count` and as one unit for `head_limit`/`offset` paging. A match that
+spans `\n` may differ between the two backends on CRLF files (the in-process backend
+matches against `\n`-normalized text).
+
+**Pagination.** `head_limit`/`offset` page over the result units (files, or matches in
+content mode) **within the collected result window** — re-run with `offset` advanced to
+get the next page. A footer reports state honestly: when the underlying scan was
+truncated by the output cap it warns the result is **incomplete** and to narrow the
+query (and does **not** suggest paging, since unscanned files cannot be reached);
+otherwise, when more units remain it prints `showing A..B of N; call again with
+offset=B for more`; an `offset` past the end on a complete scan returns
+`(no results at offset N; M total)`.
+
+**Errors:** `not_found`, `path_escape`, `invalid_input` (bad regex).
+
+## write_file
+
+Create or overwrite a file with the given content (atomic).
+
+**Input:** `path` (string, required); `content` (string, required).
+
+**Behavior:** Writes `content` exactly. Missing parent directories are created.
+
+**Errors:** `not_a_file`, `path_escape`, `io_error`.
+
+## edit_file
+
+Replace one exact occurrence of `old_string` with `new_string`.
+
+**Input:** `path` (required); `old_string` (required, matched literally, without
+read_file's line-number prefixes); `new_string` (required, must differ);
+`replace_all` (boolean, default false).
+
+**Behavior:** `old_string` is first matched **literally and exactly**, and must be
+unique unless `replace_all` is set. When an exact match is **not** found (single-
+replacement path only — `replace_all` stays exact-only), a **whitespace-tolerant
+cascade** runs: it tries, strictest→loosest, an indentation-flexible, a per-line-
+trimmed, an all-whitespace-collapsed, and finally a trimmed-substring match. It applies
+**only when it resolves to exactly one region** (otherwise `ambiguous_match`, never a
+guess); `new_string` is substituted verbatim (no re-indentation), and the result message
+discloses that a tolerant match was used. Line endings/BOM are preserved per the
+conventions above.
+
+Note the verbatim substitution replaces the **whole matched region, including its original
+leading indentation**, with `new_string` exactly as given. So a tolerant match can change a
+line's indentation if `new_string` does not itself carry it — the disclosed result message
+flags this and re-reading the file is recommended. (This is a deliberate trade-off: the tool
+never guesses re-indentation.)
+
+**Errors:** `no_match`, `ambiguous_match` (multiple exact or multiple tolerant
+matches without `replace_all`), `invalid_input` (identical strings), `not_found`,
+`is_binary`, `too_large`, `path_escape`.
+
+## multi_edit
+
+Apply several `edit_file`-style edits to ONE file in a single atomic call.
+
+**Input:** `path` (required); `edits` (array of `{ old_string, new_string,
+replace_all? }`, required).
+
+**Behavior:** Edits run in order, each operating on the result of the previous, and
+each inherits `edit_file`'s exact-then-whitespace-tolerant matching. The whole batch is
+applied atomically; any failing edit aborts the call with its index and nothing is
+written.
+
+**Errors:** as `edit_file`, prefixed with the failing edit index.
+
+## apply_patch
+
+Apply a unified diff across one or more files atomically.
+
+**Input:** `patch` (string, required, unified diff). A `/dev/null` source (`---`)
+denotes a create and a `/dev/null` target (`+++`) a delete. A block whose old and new
+paths differ is a **rename/move**: with hunks it moves and edits in one step, without
+hunks (or with a content-reproducing hunk) it is a pure rename that preserves the file's
+exact bytes.
+
+**Behavior:** Each file block is validated and applied; all changes commit
+together or roll back together (a rename participates with both its endpoints). Creating
+an existing path, a rename whose destination already exists, or multiple blocks naming
+the same path (including either endpoint of a rename), is rejected. Modified and
+moved-and-edited files preserve line endings/BOM per the conventions; created files use
+LF; a pure rename leaves the bytes and mode untouched. The file tools operate on UTF-8:
+a UTF-16 file is **read** by `read_file` but the editing tools (`edit_file`,
+`multi_edit`, `apply_patch`) refuse it (`is_binary`) rather than silently rewrite it as
+UTF-8.
+
+**Errors:** `patch_failed` (hunk did not apply; reports the file), `invalid_input`,
+`not_found`, `not_a_file`, `is_binary`, `too_large`, `path_escape`, `io_error`.
+
+## bash
+
+Run a shell command via `sh -c` and return stdout, stderr, and exit code.
+
+**Input:** `command` (string, required); `cwd` (string, default workspace root);
+`timeout_ms` (integer, default `BASH_TIMEOUT_MS` = 120000; may be raised up to
+`BASH_TIMEOUT_MAX_MS` = 600000 for a long build/test/install — a larger request is
+clamped to the ceiling, not rejected).
+
+**Behavior:** The command runs to completion and **blocks** until it exits;
+stdin is closed. A long-lived process (dev server, watcher) must be backgrounded
+with its output redirected, e.g. `npm start > /tmp/out.log 2>&1 &`. On success
+the result is a JSON object `{ exit_code, stdout, stderr, signal, timed_out }`.
+A non-zero exit is a normal result, not an error.
+
+stdout and stderr are budgeted against a shared `MAX_OUTPUT_BYTES`; overflow is
+written to a `.clarvis/` spill file referenced in the result. There is a hard
+per-stream in-memory ceiling: a command producing unbounded output is killed
+(process group) and the call fails with `output_limit`.
+
+On timeout the process group is killed and `timeout` is returned (with the
+partial stdout/stderr).
+
+**Errors:** `timeout`, `output_limit`, `not_found`/`not_a_file` (bad `cwd`),
+`path_escape` (`cwd` outside the workspace), `io_error` (spawn failure).
+
+---
+
+## Errors
+
+Errors are returned as a JSON object `{ "error": <code>, "message": <string>, ...fields }`.
+The codes are:
+
+| Code              | Meaning                                                    |
+| ----------------- | --------------------------------------------------------- |
+| `invalid_input`   | Arguments failed schema or semantic validation.           |
+| `not_found`       | Path does not exist.                                       |
+| `not_a_file`      | Path was a directory where a file was expected (or vice). |
+| `is_binary`       | File appears to be binary; text tools refuse it.          |
+| `no_match`        | `edit_file`/`multi_edit` could not find `old_string`.     |
+| `ambiguous_match` | `old_string` matched more than once without `replace_all`.|
+| `patch_failed`    | A patch hunk did not apply cleanly.                       |
+| `timeout`         | `bash` command exceeded its timeout.                      |
+| `output_limit`    | `bash` output exceeded the hard capture ceiling.          |
+| `too_large`       | Input file exceeded `MAX_FILE_BYTES`.                     |
+| `path_escape`     | Path resolved outside the confined workspace root.        |
+| `io_error`        | An underlying filesystem/process error.                   |
+| `internal`        | Unexpected internal error.                                |

package/dist/config.d.ts

@@ -0,0 +1,29 @@
+export interface ServerConfig {
+    workspaceRoot: string;
+    maxOutputBytes: number;
+    maxFileBytes: number;
+    bashTimeoutMs: number;
+    bashTimeoutMaxMs: number;
+    ripgrepAvailable: boolean;
+    readOnly: boolean;
+    confineToWorkspace: boolean;
+}
+export declare const DEFAULT_MAX_OUTPUT_BYTES = 131072;
+export declare const DEFAULT_MAX_FILE_BYTES = 20000000;
+export declare const DEFAULT_BASH_TIMEOUT_MS = 120000;
+export declare const DEFAULT_BASH_TIMEOUT_MAX_MS = 600000;
+export declare class StartupError extends Error {
+}
+export interface AgentToolsOptions {
+    workspaceRoot: string;
+    readOnly?: boolean;
+    confineToWorkspace?: boolean;
+    maxOutputBytes?: number;
+    maxFileBytes?: number;
+    bashTimeoutMs?: number;
+    bashTimeoutMaxMs?: number;
+    probeRipgrep?: () => boolean;
+}
+export declare function resolveConfig(options: AgentToolsOptions): ServerConfig;
+export declare function buildConfig(argv: string[], env: NodeJS.ProcessEnv, probe?: () => boolean): ServerConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IAEtB,cAAc,EAAE,MAAM,CAAC;IAEvB,YAAY,EAAE,MAAM,CAAC;IAErB,aAAa,EAAE,MAAM,CAAC;IAEtB,gBAAgB,EAAE,MAAM,CAAC;IAEzB,gBAAgB,EAAE,OAAO,CAAC;IAE1B,QAAQ,EAAE,OAAO,CAAC;IAElB,kBAAkB,EAAE,OAAO,CAAC;CAC7B;AAED,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAC/C,eAAO,MAAM,sBAAsB,WAAa,CAAC;AACjD,eAAO,MAAM,uBAAuB,SAAS,CAAC;AAC9C,eAAO,MAAM,2BAA2B,SAAS,CAAC;AAIlD,qBAAa,YAAa,SAAQ,KAAK;CAAG;AAoG1C,MAAM,WAAW,iBAAiB;IAChC,aAAa,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,EAAE,OAAO,CAAC;IAEnB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC;CAC9B;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,YAAY,CAoCtE;AAED,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EAAE,EACd,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,KAAK,GAAE,MAAM,OAAsB,GAClC,YAAY,CAsCd"}

package/dist/config.js

@@ -0,0 +1,145 @@
+import { spawnSync } from "node:child_process";
+import { statSync } from "node:fs";
+import path from "node:path";
+export const DEFAULT_MAX_OUTPUT_BYTES = 131072;
+export const DEFAULT_MAX_FILE_BYTES = 20_000_000;
+export const DEFAULT_BASH_TIMEOUT_MS = 120000;
+export const DEFAULT_BASH_TIMEOUT_MAX_MS = 600000;
+const MIN_OUTPUT_BYTES = 1024;
+const MIN_FILE_BYTES = 1024;
+export class StartupError extends Error {
+}
+function parseWorkspaceArg(argv) {
+    for (let i = 0; i < argv.length; i++) {
+        const arg = argv[i];
+        if (arg === undefined)
+            continue;
+        if (arg === "--workspace") {
+            const value = argv[i + 1];
+            if (value === undefined || value.startsWith("--")) {
+                throw new StartupError("--workspace requires a path argument");
+            }
+            return value;
+        }
+        if (arg.startsWith("--workspace=")) {
+            const value = arg.slice("--workspace=".length);
+            if (value === "")
+                throw new StartupError("--workspace requires a path argument");
+            return value;
+        }
+    }
+    return undefined;
+}
+const BOOL_TRUE = new Set(["1", "true", "yes", "on"]);
+const BOOL_FALSE = new Set(["0", "false", "no", "off", ""]);
+function resolveReadOnly(argv, env) {
+    if (argv.includes("--read-only"))
+        return true;
+    const raw = env.READ_ONLY;
+    if (raw === undefined)
+        return false;
+    const norm = raw.trim().toLowerCase();
+    if (BOOL_TRUE.has(norm))
+        return true;
+    if (BOOL_FALSE.has(norm))
+        return false;
+    throw new StartupError(`READ_ONLY must be one of 1/true/yes/on or 0/false/no/off, got: ${raw}`);
+}
+function resolveConfine(argv, env) {
+    if (argv.includes("--allow-outside-workspace"))
+        return false;
+    const raw = env.ALLOW_OUTSIDE_WORKSPACE;
+    if (raw === undefined)
+        return true;
+    const norm = raw.trim().toLowerCase();
+    if (BOOL_TRUE.has(norm))
+        return false;
+    if (BOOL_FALSE.has(norm))
+        return true;
+    throw new StartupError(`ALLOW_OUTSIDE_WORKSPACE must be one of 1/true/yes/on or 0/false/no/off, got: ${raw}`);
+}
+function parsePositiveInt(value, fallback, name, min = 1) {
+    if (value === undefined || value === "")
+        return fallback;
+    if (!/^\d+$/.test(value)) {
+        throw new StartupError(`${name} must be a positive integer, got: ${value}`);
+    }
+    const n = Number(value);
+    if (!Number.isSafeInteger(n) || n < min) {
+        throw new StartupError(`${name} must be an integer >= ${min}, got: ${value}`);
+    }
+    return n;
+}
+function probeRipgrep() {
+    try {
+        const res = spawnSync("rg", ["--version"], { stdio: "ignore" });
+        return res.status === 0;
+    }
+    catch {
+        return false;
+    }
+}
+function validateWorkspace(rawRoot) {
+    const workspaceRoot = path.resolve(rawRoot);
+    let stat;
+    try {
+        stat = statSync(workspaceRoot);
+    }
+    catch {
+        throw new StartupError(`Workspace root does not exist: ${workspaceRoot}`);
+    }
+    if (!stat.isDirectory()) {
+        throw new StartupError(`Workspace root is not a directory: ${workspaceRoot}`);
+    }
+    return workspaceRoot;
+}
+function requireMin(n, min, name) {
+    if (!Number.isSafeInteger(n) || n < min) {
+        throw new StartupError(`${name} must be an integer >= ${min}, got: ${String(n)}`);
+    }
+    return n;
+}
+function assertTimeoutOrder(min, max, minLabel, maxLabel) {
+    if (max < min) {
+        throw new StartupError(`${maxLabel} (${max}) must be >= ${minLabel} (${min}).`);
+    }
+}
+export function resolveConfig(options) {
+    if (!options.workspaceRoot) {
+        throw new StartupError("No workspace root: options.workspaceRoot is required.");
+    }
+    const workspaceRoot = validateWorkspace(options.workspaceRoot);
+    const bashTimeoutMs = requireMin(options.bashTimeoutMs ?? DEFAULT_BASH_TIMEOUT_MS, 1, "bashTimeoutMs");
+    const bashTimeoutMaxMs = requireMin(options.bashTimeoutMaxMs ?? DEFAULT_BASH_TIMEOUT_MAX_MS, 1, "bashTimeoutMaxMs");
+    assertTimeoutOrder(bashTimeoutMs, bashTimeoutMaxMs, "bashTimeoutMs", "bashTimeoutMaxMs");
+    return {
+        workspaceRoot,
+        maxOutputBytes: requireMin(options.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES, MIN_OUTPUT_BYTES, "maxOutputBytes"),
+        maxFileBytes: requireMin(options.maxFileBytes ?? DEFAULT_MAX_FILE_BYTES, MIN_FILE_BYTES, "maxFileBytes"),
+        bashTimeoutMs,
+        bashTimeoutMaxMs,
+        ripgrepAvailable: (options.probeRipgrep ?? probeRipgrep)(),
+        readOnly: options.readOnly ?? false,
+        confineToWorkspace: options.confineToWorkspace ?? true,
+    };
+}
+export function buildConfig(argv, env, probe = probeRipgrep) {
+    const rawRoot = parseWorkspaceArg(argv) ?? env.WORKSPACE_ROOT;
+    if (!rawRoot) {
+        throw new StartupError("No workspace root: pass --workspace <path> or set WORKSPACE_ROOT.");
+    }
+    const bashTimeoutMs = parsePositiveInt(env.BASH_TIMEOUT_MS, DEFAULT_BASH_TIMEOUT_MS, "BASH_TIMEOUT_MS");
+    const bashTimeoutMaxMs = parsePositiveInt(env.BASH_TIMEOUT_MAX_MS, DEFAULT_BASH_TIMEOUT_MAX_MS, "BASH_TIMEOUT_MAX_MS");
+    assertTimeoutOrder(bashTimeoutMs, bashTimeoutMaxMs, "BASH_TIMEOUT_MS", "BASH_TIMEOUT_MAX_MS");
+    return resolveConfig({
+        workspaceRoot: rawRoot,
+        maxOutputBytes: parsePositiveInt(env.MAX_OUTPUT_BYTES, DEFAULT_MAX_OUTPUT_BYTES, "MAX_OUTPUT_BYTES", MIN_OUTPUT_BYTES),
+        maxFileBytes: parsePositiveInt(env.MAX_FILE_BYTES, DEFAULT_MAX_FILE_BYTES, "MAX_FILE_BYTES", MIN_FILE_BYTES),
+        bashTimeoutMs,
+        bashTimeoutMaxMs,
+        readOnly: resolveReadOnly(argv, env),
+        confineToWorkspace: resolveConfine(argv, env),
+        probeRipgrep: probe,
+    });
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,IAAI,MAAM,WAAW,CAAC;AAoB7B,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAC/C,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAC;AACjD,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAC9C,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAClD,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,MAAM,OAAO,YAAa,SAAQ,KAAK;CAAG;AAE1C,SAAS,iBAAiB,CAAC,IAAc;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,YAAY,CAAC,sCAAsC,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC/C,IAAI,KAAK,KAAK,EAAE;gBAAE,MAAM,IAAI,YAAY,CAAC,sCAAsC,CAAC,CAAC;YACjF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AACtD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AAE5D,SAAS,eAAe,CAAC,IAAc,EAAE,GAAsB;IAC7D,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC;IAC1B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,IAAI,YAAY,CAAC,kEAAkE,GAAG,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,cAAc,CAAC,IAAc,EAAE,GAAsB;IAC5D,IAAI,IAAI,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,uBAAuB,CAAC;IACxC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,IAAI,YAAY,CACpB,gFAAgF,GAAG,EAAE,CACtF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAyB,EACzB,QAAgB,EAChB,IAAY,EACZ,GAAG,GAAG,CAAC;IAEP,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IACzD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,qCAAqC,KAAK,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACxC,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,0BAA0B,GAAG,UAAU,KAAK,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChE,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,kCAAkC,aAAa,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,YAAY,CAAC,sCAAsC,aAAa,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,SAAS,UAAU,CAAC,CAAS,EAAE,GAAW,EAAE,IAAY;IACtD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACxC,MAAM,IAAI,YAAY,CAAC,GAAG,IAAI,0BAA0B,GAAG,UAAU,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW,EAAE,GAAW,EAAE,QAAgB,EAAE,QAAgB;IACtF,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,YAAY,CAAC,GAAG,QAAQ,KAAK,GAAG,gBAAgB,QAAQ,KAAK,GAAG,IAAI,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAoBD,MAAM,UAAU,aAAa,CAAC,OAA0B;IACtD,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,IAAI,YAAY,CAAC,uDAAuD,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,aAAa,GAAG,iBAAiB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAE/D,MAAM,aAAa,GAAG,UAAU,CAC9B,OAAO,CAAC,aAAa,IAAI,uBAAuB,EAChD,CAAC,EACD,eAAe,CAChB,CAAC;IACF,MAAM,gBAAgB,GAAG,UAAU,CACjC,OAAO,CAAC,gBAAgB,IAAI,2BAA2B,EACvD,CAAC,EACD,kBAAkB,CACnB,CAAC;IACF,kBAAkB,CAAC,aAAa,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC;IAEzF,OAAO;QACL,aAAa;QACb,cAAc,EAAE,UAAU,CACxB,OAAO,CAAC,cAAc,IAAI,wBAAwB,EAClD,gBAAgB,EAChB,gBAAgB,CACjB;QACD,YAAY,EAAE,UAAU,CACtB,OAAO,CAAC,YAAY,IAAI,sBAAsB,EAC9C,cAAc,EACd,cAAc,CACf;QACD,aAAa;QACb,gBAAgB;QAChB,gBAAgB,EAAE,CAAC,OAAO,CAAC,YAAY,IAAI,YAAY,CAAC,EAAE;QAC1D,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,KAAK;QACnC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,IAAI;KACvD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,IAAc,EACd,GAAsB,EACtB,QAAuB,YAAY;IAEnC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,cAAc,CAAC;IAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,YAAY,CAAC,mEAAmE,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,aAAa,GAAG,gBAAgB,CACpC,GAAG,CAAC,eAAe,EACnB,uBAAuB,EACvB,iBAAiB,CAClB,CAAC;IACF,MAAM,gBAAgB,GAAG,gBAAgB,CACvC,GAAG,CAAC,mBAAmB,EACvB,2BAA2B,EAC3B,qBAAqB,CACtB,CAAC;IACF,kBAAkB,CAAC,aAAa,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,qBAAqB,CAAC,CAAC;IAE9F,OAAO,aAAa,CAAC;QACnB,aAAa,EAAE,OAAO;QACtB,cAAc,EAAE,gBAAgB,CAC9B,GAAG,CAAC,gBAAgB,EACpB,wBAAwB,EACxB,kBAAkB,EAClB,gBAAgB,CACjB;QACD,YAAY,EAAE,gBAAgB,CAC5B,GAAG,CAAC,cAAc,EAClB,sBAAsB,EACtB,gBAAgB,EAChB,cAAc,CACf;QACD,aAAa;QACb,gBAAgB;QAChB,QAAQ,EAAE,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC;QACpC,kBAAkB,EAAE,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC;QAC7C,YAAY,EAAE,KAAK;KACpB,CAAC,CAAC;AACL,CAAC"}

package/dist/core.d.ts

@@ -0,0 +1,13 @@
+import type { ServerConfig } from "./config.js";
+export interface DispatchResult {
+    isError: boolean;
+    text: string;
+}
+export interface ToolInfo {
+    name: string;
+    description: string;
+    inputSchema: Record<string, unknown>;
+}
+export declare function listTools(config: ServerConfig): ToolInfo[];
+export declare function dispatch(name: string, args: Record<string, unknown>, config: ServerConfig): Promise<DispatchResult>;
+//# sourceMappingURL=core.d.ts.map

package/dist/core.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAmBhD,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,QAAQ,EAAE,CAM1D;AAED,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,cAAc,CAAC,CAyBzB"}

package/dist/core.js

@@ -0,0 +1,43 @@
+import { createRequire } from "node:module";
+import { ToolError, serializeError } from "./errors.js";
+import { bound } from "./lib/output.js";
+import { tools, getTool, selectSurface } from "./tools/registry.js";
+const Ajv = createRequire(import.meta.url)("ajv").default;
+const ajv = new Ajv({ allErrors: true, useDefaults: true });
+const validators = new Map();
+for (const tool of tools) {
+    validators.set(tool.name, ajv.compile(tool.inputSchema));
+}
+export function listTools(config) {
+    return selectSurface(config.readOnly).map((t) => ({
+        name: t.name,
+        description: t.description,
+        inputSchema: t.inputSchema,
+    }));
+}
+export async function dispatch(name, args, config) {
+    const tool = getTool(name, selectSurface(config.readOnly));
+    if (!tool) {
+        return {
+            isError: true,
+            text: serializeError(new ToolError("not_found", `Unknown tool: ${name}`)),
+        };
+    }
+    const validate = validators.get(name);
+    const filled = structuredClone(args);
+    if (!validate(filled)) {
+        const detail = ajv.errorsText(validate.errors, { separator: "; " });
+        return {
+            isError: true,
+            text: serializeError(new ToolError("invalid_input", detail || "invalid arguments")),
+        };
+    }
+    try {
+        const text = await tool.handler(filled, config);
+        return { isError: false, text: tool.bounded ? text : bound(text, config.maxOutputBytes) };
+    }
+    catch (err) {
+        return { isError: true, text: serializeError(err) };
+    }
+}
+//# sourceMappingURL=core.js.map

package/dist/core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAYpE,MAAM,GAAG,GAAI,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAe,CAAC,OAAO,CAAC;AAEzE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5D,MAAM,UAAU,GAAG,IAAI,GAAG,EAA4B,CAAC;AACvD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;IACzB,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;AAC3D,CAAC;AAaD,MAAM,UAAU,SAAS,CAAC,MAAoB;IAC5C,OAAO,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;KAC3B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAY,EACZ,IAA6B,EAC7B,MAAoB;IAEpB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,cAAc,CAAC,IAAI,SAAS,CAAC,WAAW,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;SAC1E,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;IACvC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,OAAO;YACL,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,cAAc,CAAC,IAAI,SAAS,CAAC,eAAe,EAAE,MAAM,IAAI,mBAAmB,CAAC,CAAC;SACpF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;IAC5F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;IACtD,CAAC;AACH,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,9 @@
+export type ErrorCode = "invalid_input" | "not_found" | "not_a_file" | "is_binary" | "no_match" | "ambiguous_match" | "patch_failed" | "io_error" | "timeout" | "output_limit" | "too_large" | "path_escape" | "internal";
+export declare class ToolError extends Error {
+    readonly code: ErrorCode;
+    readonly fields: Record<string, unknown>;
+    constructor(code: ErrorCode, message: string, fields?: Record<string, unknown>);
+}
+export declare function serializeError(err: unknown): string;
+export declare function fsError(err: NodeJS.ErrnoException, path: string): ToolError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,SAAS,GACjB,eAAe,GACf,WAAW,GACX,YAAY,GACZ,WAAW,GACX,UAAU,GACV,iBAAiB,GACjB,cAAc,GACd,UAAU,GACV,SAAS,GACT,cAAc,GACd,WAAW,GACX,aAAa,GACb,UAAU,CAAC;AAEf,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAE7B,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAMnF;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAOnD;AAED,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAO3E"}

package/dist/errors.js

@@ -0,0 +1,29 @@
+import { warn } from "./lib/log.js";
+export class ToolError extends Error {
+    code;
+    fields;
+    constructor(code, message, fields = {}) {
+        super(message);
+        this.name = "ToolError";
+        this.code = code;
+        this.fields = fields;
+    }
+}
+export function serializeError(err) {
+    if (err instanceof ToolError) {
+        return JSON.stringify({ error: err.code, message: err.message, ...err.fields });
+    }
+    const detail = err instanceof Error ? (err.stack ?? err.message) : String(err);
+    warn(`clarvis-agent-tools: internal error: ${detail}\n`);
+    return JSON.stringify({ error: "internal", message: "internal error" });
+}
+export function fsError(err, path) {
+    if (err.code === "ENOENT")
+        return new ToolError("not_found", `No such file: ${path}`, { path });
+    if (err.code === "EISDIR")
+        return new ToolError("not_a_file", `Path is a directory: ${path}`, { path });
+    if (err.code === "ENOTDIR")
+        return new ToolError("not_a_file", `Not a directory: ${path}`, { path });
+    return new ToolError("io_error", `${err.code ?? "EIO"}: ${err.message}`, { path });
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAiBpC,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,IAAI,CAAY;IAChB,MAAM,CAA0B;IAEzC,YAAY,IAAe,EAAE,OAAe,EAAE,SAAkC,EAAE;QAChF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/E,IAAI,CAAC,wCAAwC,MAAM,IAAI,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAA0B,EAAE,IAAY;IAC9D,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,SAAS,CAAC,WAAW,EAAE,iBAAiB,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAChG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;QACvB,OAAO,IAAI,SAAS,CAAC,YAAY,EAAE,wBAAwB,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;QACxB,OAAO,IAAI,SAAS,CAAC,YAAY,EAAE,oBAAoB,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,OAAO,IAAI,SAAS,CAAC,UAAU,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,KAAK,KAAK,GAAG,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AACrF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,20 @@
+import type { AgentToolsOptions, ServerConfig } from "./config.js";
+import type { DispatchResult, ToolInfo } from "./core.js";
+export interface AgentTools {
+    readonly config: ServerConfig;
+    listTools(): ToolInfo[];
+    callTool(name: string, args?: Record<string, unknown>): Promise<DispatchResult>;
+}
+export declare function createAgentTools(options: AgentToolsOptions): AgentTools;
+export { dispatch, listTools } from "./core.js";
+export type { DispatchResult, ToolInfo } from "./core.js";
+export { resolveConfig, buildConfig, StartupError, DEFAULT_MAX_OUTPUT_BYTES, DEFAULT_MAX_FILE_BYTES, DEFAULT_BASH_TIMEOUT_MS, DEFAULT_BASH_TIMEOUT_MAX_MS, } from "./config.js";
+export type { ServerConfig, AgentToolsOptions } from "./config.js";
+export { tools, readOnlyTools, getTool, selectSurface } from "./tools/registry.js";
+export type { ToolDef } from "./tools/types.js";
+export { ToolError, serializeError, fsError } from "./errors.js";
+export type { ErrorCode } from "./errors.js";
+export { sweepSpillDir } from "./lib/output.js";
+export { setWarnSink } from "./lib/log.js";
+export type { WarnSink } from "./lib/log.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE1D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAE9B,SAAS,IAAI,QAAQ,EAAE,CAAC;IAExB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACjF;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,GAAG,UAAU,CAOvE;AAED,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAChD,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE1D,OAAO,EACL,aAAa,EACb,WAAW,EACX,YAAY,EACZ,wBAAwB,EACxB,sBAAsB,EACtB,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACnF,YAAY,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEhD,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACjE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,YAAY,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,17 @@
+import { resolveConfig } from "./config.js";
+import { dispatch, listTools } from "./core.js";
+export function createAgentTools(options) {
+    const config = resolveConfig(options);
+    return {
+        config,
+        listTools: () => listTools(config),
+        callTool: (name, args = {}) => dispatch(name, args, config),
+    };
+}
+export { dispatch, listTools } from "./core.js";
+export { resolveConfig, buildConfig, StartupError, DEFAULT_MAX_OUTPUT_BYTES, DEFAULT_MAX_FILE_BYTES, DEFAULT_BASH_TIMEOUT_MS, DEFAULT_BASH_TIMEOUT_MAX_MS, } from "./config.js";
+export { tools, readOnlyTools, getTool, selectSurface } from "./tools/registry.js";
+export { ToolError, serializeError, fsError } from "./errors.js";
+export { sweepSpillDir } from "./lib/output.js";
+export { setWarnSink } from "./lib/log.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAYhD,MAAM,UAAU,gBAAgB,CAAC,OAA0B;IACzD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,OAAO;QACL,MAAM;QACN,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC;QAClC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGhD,OAAO,EACL,aAAa,EACb,WAAW,EACX,YAAY,EACZ,wBAAwB,EACxB,sBAAsB,EACtB,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGnF,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAGjE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/dist/lib/atomic.d.ts

@@ -0,0 +1,11 @@
+export declare function withFileLock<T>(absPath: string, fn: () => Promise<T>): Promise<T>;
+export declare function withFileLocks<T>(paths: string[], fn: () => Promise<T>): Promise<T>;
+export declare function writeAtomic(target: string, content: string): Promise<void>;
+export interface FileOp {
+    type: "create" | "modify" | "delete" | "rename";
+    path: string;
+    from?: string;
+    content?: string;
+}
+export declare function applyOpsAtomic(ops: FileOp[]): Promise<void>;
+//# sourceMappingURL=atomic.d.ts.map

package/dist/lib/atomic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomic.d.ts","sourceRoot":"","sources":["../../src/lib/atomic.ts"],"names":[],"mappings":"AAOA,wBAAgB,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAYjF;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAGlF;AAiED,wBAAsB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAahF;AAED,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAoLD,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgCjE"}