@dexto/core 1.4.0 → 1.5.1

package/dist/tools/types.d.ts

@@ -1,6 +1,7 @@
 import type { JSONSchema7 } from 'json-schema';
 import type { ZodSchema } from 'zod';
 import type { ToolDisplayData } from './display-types.js';
+import type { ApprovalRequestDetails, ApprovalResponse } from '../approval/types.js';
 /**
  * Context passed to tool execution
  */
@@ -39,6 +40,48 @@ export interface InternalTool {
      * Returns null if no preview is available.
      */
     generatePreview?: (input: unknown, context?: ToolExecutionContext) => Promise<ToolDisplayData | null>;
+    /**
+     * Optional custom approval override.
+     * If present and returns non-null, this approval request is used instead of
+     * the default tool confirmation. Allows tools to request specialized approval
+     * flows (e.g., directory access approval for file tools).
+     *
+     * @param args The validated input arguments for the tool
+     * @returns ApprovalRequestDetails for custom approval, or null to use default tool confirmation
+     *
+     * @example
+     * ```typescript
+     * // File tool requesting directory access approval for external paths
+     * getApprovalOverride: (args) => {
+     *   const filePath = (args as {file_path: string}).file_path;
+     *   if (!isPathWithinAllowed(filePath)) {
+     *     return {
+     *       type: ApprovalType.DIRECTORY_ACCESS,
+     *       metadata: { path: filePath, operation: 'read', ... }
+     *     };
+     *   }
+     *   return null; // Use default tool confirmation
+     * }
+     * ```
+     */
+    getApprovalOverride?: (args: unknown) => ApprovalRequestDetails | null;
+    /**
+     * Optional callback invoked when custom approval is granted.
+     * Allows tools to handle approval responses (e.g., remember approved directories).
+     * Only called when getApprovalOverride returned non-null and approval was granted.
+     *
+     * @param response The approval response from ApprovalManager
+     *
+     * @example
+     * ```typescript
+     * onApprovalGranted: (response) => {
+     *   if (response.data?.rememberDirectory) {
+     *     directoryApproval.addApproved(parentDir, 'session');
+     *   }
+     * }
+     * ```
+     */
+    onApprovalGranted?: (response: ApprovalResponse) => void;
 }
 /**
  * Standard tool set interface - used by AI/LLM services

package/dist/tools/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,KAAK,CAAC;AACrC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC,8BAA8B;IAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,4CAA4C;IAC5C,WAAW,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC,iDAAiD;IACjD,MAAM,EAAE,OAAO,CAAC;IAChB,gEAAgE;IAChE,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,oEAAoE;IACpE,cAAc,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;CAC5C;AAMD;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,qCAAqC;IACrC,EAAE,EAAE,MAAM,CAAC;IAEX,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;IAEpB,+CAA+C;IAC/C,WAAW,EAAE,SAAS,CAAC;IAEvB,8FAA8F;IAC9F,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,oBAAoB,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAExF;;;;OAIG;IACH,eAAe,CAAC,EAAE,CACd,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,oBAAoB,KAC7B,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;CACxC;AAED;;;GAGG;AACH,MAAM,WAAW,OAAO;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG;QACX,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,WAAW,CAAC;KAC3B,CAAC;CACL;AAMD;;GAEG;AACH,MAAM,WAAW,UAAU;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/E"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,KAAK,CAAC;AACrC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAErF;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC,8BAA8B;IAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,4CAA4C;IAC5C,WAAW,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACzC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAChC,iDAAiD;IACjD,MAAM,EAAE,OAAO,CAAC;IAChB,gEAAgE;IAChE,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,oEAAoE;IACpE,cAAc,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;CAC5C;AAMD;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,qCAAqC;IACrC,EAAE,EAAE,MAAM,CAAC;IAEX,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;IAEpB,+CAA+C;IAC/C,WAAW,EAAE,SAAS,CAAC;IAEvB,8FAA8F;IAC9F,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,oBAAoB,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;IAExF;;;;OAIG;IACH,eAAe,CAAC,EAAE,CACd,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,oBAAoB,KAC7B,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IAErC;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,mBAAmB,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,sBAAsB,GAAG,IAAI,CAAC;IAEvE;;;;;;;;;;;;;;;OAeG;IACH,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,IAAI,CAAC;CAC5D;AAED;;;GAGG;AACH,MAAM,WAAW,OAAO;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG;QACX,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,WAAW,CAAC;KAC3B,CAAC;CACL;AAMD;;GAEG;AACH,MAAM,WAAW,UAAU;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/E"}

package/dist/utils/api-key-resolver.cjs

@@ -31,7 +31,25 @@ const PROVIDER_API_KEY_MAP = {
   google: ["GOOGLE_GENERATIVE_AI_API_KEY", "GOOGLE_API_KEY", "GEMINI_API_KEY"],
   groq: ["GROQ_API_KEY"],
   cohere: ["COHERE_API_KEY"],
-  xai: ["XAI_API_KEY", "X_AI_API_KEY"]
+  xai: ["XAI_API_KEY", "X_AI_API_KEY"],
+  openrouter: ["OPENROUTER_API_KEY"],
+  litellm: ["LITELLM_API_KEY", "LITELLM_KEY"],
+  glama: ["GLAMA_API_KEY"],
+  // Vertex uses ADC (Application Default Credentials), not API keys
+  // GOOGLE_APPLICATION_CREDENTIALS points to service account JSON (optional)
+  // Primary config is GOOGLE_VERTEX_PROJECT (required) + GOOGLE_VERTEX_LOCATION (optional)
+  vertex: [],
+  // Bedrock supports two auth methods:
+  // 1. AWS_BEARER_TOKEN_BEDROCK - Bedrock API key (simplest)
+  // 2. AWS_ACCESS_KEY_ID + AWS_SECRET_ACCESS_KEY + AWS_REGION (IAM credentials)
+  // AWS_SESSION_TOKEN (optional, for temporary credentials)
+  bedrock: ["AWS_BEARER_TOKEN_BEDROCK"],
+  // Local providers don't require API keys
+  local: [],
+  // Native node-llama-cpp execution
+  ollama: []
+  // Ollama server (no authentication required)
+  // TODO: dexto: ['DEXTO_API_KEY'],
   // perplexity: ['PERPLEXITY_API_KEY'],
   // together: ['TOGETHER_API_KEY'],
   // fireworks: ['FIREWORKS_API_KEY'],

package/dist/utils/api-key-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-key-resolver.d.ts","sourceRoot":"","sources":["../../src/utils/api-key-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEnD;;;GAGG;AAGH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,CAY9D,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAelF;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,CAGpE"}
+{"version":3,"file":"api-key-resolver.d.ts","sourceRoot":"","sources":["../../src/utils/api-key-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEnD;;;GAGG;AAGH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,CA4B9D,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAelF;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,CAGpE"}

package/dist/utils/api-key-resolver.js

@@ -7,7 +7,25 @@ const PROVIDER_API_KEY_MAP = {
   google: ["GOOGLE_GENERATIVE_AI_API_KEY", "GOOGLE_API_KEY", "GEMINI_API_KEY"],
   groq: ["GROQ_API_KEY"],
   cohere: ["COHERE_API_KEY"],
-  xai: ["XAI_API_KEY", "X_AI_API_KEY"]
+  xai: ["XAI_API_KEY", "X_AI_API_KEY"],
+  openrouter: ["OPENROUTER_API_KEY"],
+  litellm: ["LITELLM_API_KEY", "LITELLM_KEY"],
+  glama: ["GLAMA_API_KEY"],
+  // Vertex uses ADC (Application Default Credentials), not API keys
+  // GOOGLE_APPLICATION_CREDENTIALS points to service account JSON (optional)
+  // Primary config is GOOGLE_VERTEX_PROJECT (required) + GOOGLE_VERTEX_LOCATION (optional)
+  vertex: [],
+  // Bedrock supports two auth methods:
+  // 1. AWS_BEARER_TOKEN_BEDROCK - Bedrock API key (simplest)
+  // 2. AWS_ACCESS_KEY_ID + AWS_SECRET_ACCESS_KEY + AWS_REGION (IAM credentials)
+  // AWS_SESSION_TOKEN (optional, for temporary credentials)
+  bedrock: ["AWS_BEARER_TOKEN_BEDROCK"],
+  // Local providers don't require API keys
+  local: [],
+  // Native node-llama-cpp execution
+  ollama: []
+  // Ollama server (no authentication required)
+  // TODO: dexto: ['DEXTO_API_KEY'],
   // perplexity: ['PERPLEXITY_API_KEY'],
   // together: ['TOGETHER_API_KEY'],
   // fireworks: ['FIREWORKS_API_KEY'],

package/dist/utils/index.cjs

@@ -23,7 +23,6 @@ __reExport(utils_exports, require("./error-conversion.js"), module.exports);
 __reExport(utils_exports, require("./execution-context.js"), module.exports);
 __reExport(utils_exports, require("./fs-walk.js"), module.exports);
 __reExport(utils_exports, require("./redactor.js"), module.exports);
-__reExport(utils_exports, require("./env-file.js"), module.exports);
 __reExport(utils_exports, require("./debug.js"), module.exports);
 __reExport(utils_exports, require("./safe-stringify.js"), module.exports);
 __reExport(utils_exports, require("./api-key-resolver.js"), module.exports);
@@ -38,7 +37,6 @@ __reExport(utils_exports, require("./defer.js"), module.exports);
   ...require("./execution-context.js"),
   ...require("./fs-walk.js"),
   ...require("./redactor.js"),
-  ...require("./env-file.js"),
   ...require("./debug.js"),
   ...require("./safe-stringify.js"),
   ...require("./api-key-resolver.js"),

package/dist/utils/index.d.ts

@@ -6,7 +6,6 @@ export * from './error-conversion.js';
 export * from './execution-context.js';
 export * from './fs-walk.js';
 export * from './redactor.js';
-export * from './env-file.js';
 export * from './debug.js';
 export * from './safe-stringify.js';
 export * from './api-key-resolver.js';

package/dist/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAKA,cAAc,WAAW,CAAC;AAC1B,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAKA,cAAc,WAAW,CAAC;AAC1B,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC"}

package/dist/utils/index.js

@@ -6,7 +6,6 @@ export * from "./error-conversion.js";
 export * from "./execution-context.js";
 export * from "./fs-walk.js";
 export * from "./redactor.js";
-export * from "./env-file.js";
 export * from "./debug.js";
 export * from "./safe-stringify.js";
 export * from "./api-key-resolver.js";

package/dist/utils/redactor.cjs

@@ -45,10 +45,19 @@ const SENSITIVE_PATTERNS = [
   // OpenAI API keys (at least 20 chars after sk-)
   /\bBearer\s+[A-Za-z0-9\-_.=]+\b/gi,
   // Bearer tokens
-  /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g,
+  /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g
   // Emails
-  /\beyJ[A-Za-z0-9_-]*\.[A-Za-z0-9_-]*\.[A-Za-z0-9_-]*/g
-  // JWT tokens
+];
+const JWT_PATTERN = /\beyJ[A-Za-z0-9_-]*\.[A-Za-z0-9_-]*\.[A-Za-z0-9_-]*/g;
+const SIGNED_URL_PATTERNS = [
+  /supabase\.co\/storage\/.*\?token=/i,
+  // Supabase signed URLs
+  /\.r2\.cloudflarestorage\.com\/.*\?/i,
+  // Cloudflare R2 signed URLs
+  /\.s3\..*amazonaws\.com\/.*\?(X-Amz-|AWSAccessKeyId)/i,
+  // AWS S3 presigned URLs
+  /storage\.googleapis\.com\/.*\?/i
+  // Google Cloud Storage signed URLs
 ];
 const REDACTED = "[REDACTED]";
 const REDACTED_CIRCULAR = "[REDACTED_CIRCULAR]";
@@ -66,12 +75,18 @@ function truncateFileData(value, key, parent) {
   }
   return value;
 }
+function isSignedUrl(value) {
+  return SIGNED_URL_PATTERNS.some((pattern) => pattern.test(value));
+}
 function redactSensitiveData(input, seen = /* @__PURE__ */ new WeakSet()) {
   if (typeof input === "string") {
     let result = input;
     for (const pattern of SENSITIVE_PATTERNS) {
       result = result.replace(pattern, REDACTED);
     }
+    if (!isSignedUrl(result)) {
+      result = result.replace(JWT_PATTERN, REDACTED);
+    }
     return result;
   }
   if (Array.isArray(input)) {

package/dist/utils/redactor.d.ts

@@ -6,12 +6,5 @@
  * - Recursive and preserves structure
  * - Easy to extend
  */
-/**
- * Redacts sensitive data from an object, array, or string.
- * Handles circular references gracefully.
- * @param input - The data to redact
- * @param seen - Internal set to track circular references
- * @returns The redacted data
- */
 export declare function redactSensitiveData(input: unknown, seen?: WeakSet<object>): unknown;
 //# sourceMappingURL=redactor.d.ts.map

package/dist/utils/redactor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redactor.d.ts","sourceRoot":"","sources":["../../src/utils/redactor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAqEH;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,kBAAgB,GAAG,OAAO,CAiCjF"}
+{"version":3,"file":"redactor.d.ts","sourceRoot":"","sources":["../../src/utils/redactor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AA8FH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,kBAAgB,GAAG,OAAO,CAsCjF"}

package/dist/utils/redactor.js

@@ -23,10 +23,19 @@ const SENSITIVE_PATTERNS = [
   // OpenAI API keys (at least 20 chars after sk-)
   /\bBearer\s+[A-Za-z0-9\-_.=]+\b/gi,
   // Bearer tokens
-  /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g,
+  /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g
   // Emails
-  /\beyJ[A-Za-z0-9_-]*\.[A-Za-z0-9_-]*\.[A-Za-z0-9_-]*/g
-  // JWT tokens
+];
+const JWT_PATTERN = /\beyJ[A-Za-z0-9_-]*\.[A-Za-z0-9_-]*\.[A-Za-z0-9_-]*/g;
+const SIGNED_URL_PATTERNS = [
+  /supabase\.co\/storage\/.*\?token=/i,
+  // Supabase signed URLs
+  /\.r2\.cloudflarestorage\.com\/.*\?/i,
+  // Cloudflare R2 signed URLs
+  /\.s3\..*amazonaws\.com\/.*\?(X-Amz-|AWSAccessKeyId)/i,
+  // AWS S3 presigned URLs
+  /storage\.googleapis\.com\/.*\?/i
+  // Google Cloud Storage signed URLs
 ];
 const REDACTED = "[REDACTED]";
 const REDACTED_CIRCULAR = "[REDACTED_CIRCULAR]";
@@ -44,12 +53,18 @@ function truncateFileData(value, key, parent) {
   }
   return value;
 }
+function isSignedUrl(value) {
+  return SIGNED_URL_PATTERNS.some((pattern) => pattern.test(value));
+}
 function redactSensitiveData(input, seen = /* @__PURE__ */ new WeakSet()) {
   if (typeof input === "string") {
     let result = input;
     for (const pattern of SENSITIVE_PATTERNS) {
       result = result.replace(pattern, REDACTED);
     }
+    if (!isSignedUrl(result)) {
+      result = result.replace(JWT_PATTERN, REDACTED);
+    }
     return result;
   }
   if (Array.isArray(input)) {

package/dist/utils/service-initializer.cjs

@@ -45,8 +45,6 @@ var import_manager4 = require("../approval/manager.js");
 var import_memory = require("../memory/index.js");
 var import_manager5 = require("../plugins/manager.js");
 var import_builtins = require("../plugins/registrations/builtins.js");
-var import_filesystem = require("../filesystem/index.js");
-var import_process = require("../process/index.js");
 async function createAgentServices(config, configPath, logger, agentEventBus) {
   if (config.telemetry?.enabled) {
     const { Telemetry } = await import("../telemetry/telemetry.js");
@@ -97,31 +95,17 @@ async function createAgentServices(config, configPath, logger, agentEventBus) {
   );
   (0, import_builtins.registerBuiltInPlugins)({ pluginManager, config });
   logger.debug("Built-in plugins registered");
-  await pluginManager.initialize(config.plugins.custom);
+  await pluginManager.initialize(config.plugins.custom, config.plugins.registry);
   logger.info("Plugin manager initialized");
-  const fileSystemService = new import_filesystem.FileSystemService(
-    {
-      allowedPaths: ["."],
-      blockedPaths: [".git", "node_modules/.bin", ".env"],
-      blockedExtensions: [".exe", ".dll", ".so"],
-      workingDirectory: process.cwd()
-      // Note: enableBackups and backupPath are not configured here
-      // Backups are disabled by default. To enable per-agent backups,
-      // filesystem config would need to be added to AgentConfig schema
-    },
-    logger
-  );
-  await fileSystemService.initialize();
-  logger.debug("FileSystemService initialized");
-  const processService = new import_process.ProcessService(
+  const resourceManager = new import_manager3.ResourceManager(
+    mcpManager,
     {
-      securityLevel: "moderate",
-      workingDirectory: process.cwd()
+      internalResourcesConfig: config.internalResources,
+      blobStore: storageManager.getBlobStore()
     },
     logger
   );
-  await processService.initialize();
-  logger.debug("ProcessService initialized");
+  await resourceManager.initialize();
   const allowedToolsProvider = (0, import_factory.createAllowedToolsProvider)(
     {
       type: config.toolConfirmation.allowedToolsStorage,
@@ -139,14 +123,13 @@ async function createAgentServices(config, configPath, logger, agentEventBus) {
     {
       internalToolsServices: {
         searchService,
-        fileSystemService,
-        processService
+        resourceManager
       },
-      internalToolsConfig: config.internalTools
+      internalToolsConfig: config.internalTools,
+      customToolsConfig: config.customTools
     },
     logger
   );
-  await toolManager.initialize();
   const mcpServerCount = Object.keys(config.mcpServers).length;
   if (mcpServerCount === 0) {
     logger.info("Agent initialized without MCP servers - only built-in capabilities available");
@@ -170,15 +153,6 @@ async function createAgentServices(config, configPath, logger, agentEventBus) {
   );
   const stateManager = new import_state_manager.AgentStateManager(config, agentEventBus, logger);
   logger.debug("Agent state manager initialized");
-  const resourceManager = new import_manager3.ResourceManager(
-    mcpManager,
-    {
-      internalResourcesConfig: config.internalResources,
-      blobStore: storageManager.getBlobStore()
-    },
-    logger
-  );
-  await resourceManager.initialize();
   const sessionManager = new import_session.SessionManager(
     {
       stateManager,

package/dist/utils/service-initializer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service-initializer.d.ts","sourceRoot":"","sources":["../../src/utils/service-initializer.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,OAAO,EAAwB,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAKtD;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG;IACxB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,WAAW,CAAC;IACzB,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,aAAa,EAAE,aAAa,CAAC;IAC7B,YAAY,EAAE,iBAAiB,CAAC;IAChC,cAAc,EAAE,cAAc,CAAC;IAC/B,aAAa,EAAE,aAAa,CAAC;IAC7B,cAAc,EAAE,cAAc,CAAC;IAC/B,eAAe,EAAE,eAAe,CAAC;IACjC,eAAe,EAAE,eAAe,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;IAC7B,aAAa,EAAE,aAAa,CAAC;CAChC,CAAC;AAGF;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACrC,MAAM,EAAE,oBAAoB,EAC5B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,MAAM,EAAE,YAAY,EACpB,aAAa,EAAE,aAAa,GAC7B,OAAO,CAAC,aAAa,CAAC,CAmOxB"}
+{"version":3,"file":"service-initializer.d.ts","sourceRoot":"","sources":["../../src/utils/service-initializer.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,OAAO,EAAwB,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE3E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAGtD;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG;IACxB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,WAAW,CAAC;IACzB,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,aAAa,EAAE,aAAa,CAAC;IAC7B,YAAY,EAAE,iBAAiB,CAAC;IAChC,cAAc,EAAE,cAAc,CAAC;IAC/B,aAAa,EAAE,aAAa,CAAC;IAC7B,cAAc,EAAE,cAAc,CAAC;IAC/B,eAAe,EAAE,eAAe,CAAC;IACjC,eAAe,EAAE,eAAe,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;IAC7B,aAAa,EAAE,aAAa,CAAC;CAChC,CAAC;AAGF;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACrC,MAAM,EAAE,oBAAoB,EAC5B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,MAAM,EAAE,YAAY,EACpB,aAAa,EAAE,aAAa,GAC7B,OAAO,CAAC,aAAa,CAAC,CAgMxB"}

package/dist/utils/service-initializer.js

@@ -13,8 +13,6 @@ import { ApprovalManager } from "../approval/manager.js";
 import { MemoryManager } from "../memory/index.js";
 import { PluginManager } from "../plugins/manager.js";
 import { registerBuiltInPlugins } from "../plugins/registrations/builtins.js";
-import { FileSystemService } from "../filesystem/index.js";
-import { ProcessService } from "../process/index.js";
 async function createAgentServices(config, configPath, logger, agentEventBus) {
   if (config.telemetry?.enabled) {
     const { Telemetry } = await import("../telemetry/telemetry.js");
@@ -65,31 +63,17 @@ async function createAgentServices(config, configPath, logger, agentEventBus) {
   );
   registerBuiltInPlugins({ pluginManager, config });
   logger.debug("Built-in plugins registered");
-  await pluginManager.initialize(config.plugins.custom);
+  await pluginManager.initialize(config.plugins.custom, config.plugins.registry);
   logger.info("Plugin manager initialized");
-  const fileSystemService = new FileSystemService(
-    {
-      allowedPaths: ["."],
-      blockedPaths: [".git", "node_modules/.bin", ".env"],
-      blockedExtensions: [".exe", ".dll", ".so"],
-      workingDirectory: process.cwd()
-      // Note: enableBackups and backupPath are not configured here
-      // Backups are disabled by default. To enable per-agent backups,
-      // filesystem config would need to be added to AgentConfig schema
-    },
-    logger
-  );
-  await fileSystemService.initialize();
-  logger.debug("FileSystemService initialized");
-  const processService = new ProcessService(
+  const resourceManager = new ResourceManager(
+    mcpManager,
     {
-      securityLevel: "moderate",
-      workingDirectory: process.cwd()
+      internalResourcesConfig: config.internalResources,
+      blobStore: storageManager.getBlobStore()
     },
     logger
   );
-  await processService.initialize();
-  logger.debug("ProcessService initialized");
+  await resourceManager.initialize();
   const allowedToolsProvider = createAllowedToolsProvider(
     {
       type: config.toolConfirmation.allowedToolsStorage,
@@ -107,14 +91,13 @@ async function createAgentServices(config, configPath, logger, agentEventBus) {
     {
       internalToolsServices: {
         searchService,
-        fileSystemService,
-        processService
+        resourceManager
       },
-      internalToolsConfig: config.internalTools
+      internalToolsConfig: config.internalTools,
+      customToolsConfig: config.customTools
     },
     logger
   );
-  await toolManager.initialize();
   const mcpServerCount = Object.keys(config.mcpServers).length;
   if (mcpServerCount === 0) {
     logger.info("Agent initialized without MCP servers - only built-in capabilities available");
@@ -138,15 +121,6 @@ async function createAgentServices(config, configPath, logger, agentEventBus) {
   );
   const stateManager = new AgentStateManager(config, agentEventBus, logger);
   logger.debug("Agent state manager initialized");
-  const resourceManager = new ResourceManager(
-    mcpManager,
-    {
-      internalResourcesConfig: config.internalResources,
-      blobStore: storageManager.getBlobStore()
-    },
-    logger
-  );
-  await resourceManager.initialize();
   const sessionManager = new SessionManager(
     {
       stateManager,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dexto/core",
-  "version": "1.4.0",
+  "version": "1.5.1",
   "private": false,
   "type": "module",
   "main": "./dist/index.js",
@@ -20,13 +20,16 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
+    "@ai-sdk/amazon-bedrock": "^3.0.71",
     "@ai-sdk/anthropic": "^2.0.56",
     "@ai-sdk/cohere": "^2.0.0",
     "@ai-sdk/google": "^2.0.0",
+    "@ai-sdk/google-vertex": "^3.0.94",
     "@ai-sdk/groq": "^2.0.0",
     "@ai-sdk/openai": "^2.0.0",
+    "@ai-sdk/provider": "^2.0.0",
     "@ai-sdk/xai": "^2.0.0",
-    "@modelcontextprotocol/sdk": "^1.18.1",
+    "@modelcontextprotocol/sdk": "^1.25.2",
     "@opentelemetry/api": "^1.9.0",
     "ai": "^5.0.0",
     "boxen": "^7.1.1",

package/dist/context/compression/overflow.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"overflow.d.ts","sourceRoot":"","sources":["../../../src/context/compression/overflow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD;;;GAGG;AACH,MAAM,WAAW,WAAW;IACxB,4CAA4C;IAC5C,aAAa,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;CACrB;AAQD;;;;;;;;;;;GAWG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,GAAG,OAAO,CAYhF;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAChC,WAAW,EAAE,WAAW,EACxB,gBAAgB,GAAE,MAAY,GAC/B,MAAM,CAMR"}

package/dist/context/compression/reactive-overflow.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"reactive-overflow.d.ts","sourceRoot":"","sources":["../../../src/context/compression/reactive-overflow.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,aAAa,EAAE,MAAM,IAAI,CAAC;AACtD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAY,MAAM,aAAa,CAAC;AAE7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACpC;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B;AAiBD;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,wBAAyB,YAAW,oBAAoB;IACjE,QAAQ,CAAC,IAAI,uBAAuB;IAEpC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAoC;IAC5D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;gBAE1B,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,uBAAuB,YAAK,EAAE,MAAM,EAAE,YAAY;IAM7F;;;;;;;;;;OAUG;IACG,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IA0C/E;;;OAGG;IACH,OAAO,CAAC,YAAY;IA2CpB;;OAEG;YACW,eAAe;IAmB7B;;OAEG;IACH,OAAO,CAAC,wBAAwB;IA2ChC;;OAEG;IACH,OAAO,CAAC,qBAAqB;CAiChC"}

package/dist/context/compression/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/context/compression/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACjC,yCAAyC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,GAAG,eAAe,EAAE,CAAC;CACjG"}

package/dist/tools/internal-tools/implementations/bash-exec-tool.cjs

@@ -1,130 +0,0 @@
-"use strict";
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var bash_exec_tool_exports = {};
-__export(bash_exec_tool_exports, {
-  createBashExecTool: () => createBashExecTool
-});
-module.exports = __toCommonJS(bash_exec_tool_exports);
-var path = __toESM(require("node:path"), 1);
-var import_zod = require("zod");
-var import_errors = require("../../../process/errors.js");
-const BashExecInputSchema = import_zod.z.object({
-  command: import_zod.z.string().describe("Shell command to execute"),
-  description: import_zod.z.string().optional().describe("Human-readable description of what the command does (5-10 words)"),
-  timeout: import_zod.z.number().int().positive().max(6e5).optional().default(12e4).describe(
-    "Timeout in milliseconds (max: 600000 = 10 minutes, default: 120000 = 2 minutes)"
-  ),
-  run_in_background: import_zod.z.boolean().optional().default(false).describe("Execute command in background (default: false)"),
-  cwd: import_zod.z.string().optional().describe("Working directory for command execution (optional)")
-}).strict();
-function createBashExecTool(processService) {
-  return {
-    id: "bash_exec",
-    description: "Execute a shell command with 2-minute default timeout. Returns stdout, stderr, exit code, and duration. For long-running commands (servers, watchers, npm run dev), MUST use run_in_background=true (use bash_output to retrieve results later). Commands ending with & are blocked - use run_in_background instead. Requires approval (with pattern-based session memory). Always quote file paths with spaces. Security: dangerous commands are blocked, injection attempts are detected.",
-    inputSchema: BashExecInputSchema,
-    /**
-     * Generate preview for approval UI - shows the command to be executed
-     */
-    generatePreview: async (input, _context) => {
-      const { command, run_in_background } = input;
-      const preview = {
-        type: "shell",
-        command,
-        exitCode: 0,
-        // Placeholder - not executed yet
-        duration: 0,
-        // Placeholder - not executed yet
-        ...run_in_background !== void 0 && { isBackground: run_in_background }
-      };
-      return preview;
-    },
-    execute: async (input, context) => {
-      const { command, description, timeout, run_in_background, cwd } = input;
-      let validatedCwd = cwd;
-      if (cwd) {
-        const baseDir = processService.getConfig().workingDirectory || process.cwd();
-        const candidatePath = path.isAbsolute(cwd) ? path.resolve(cwd) : path.resolve(baseDir, cwd);
-        const relativePath = path.relative(baseDir, candidatePath);
-        const isOutsideBase = relativePath.startsWith("..") || path.isAbsolute(relativePath);
-        if (isOutsideBase) {
-          throw import_errors.ProcessError.invalidWorkingDirectory(
-            cwd,
-            `Working directory must be within ${baseDir}`
-          );
-        }
-        validatedCwd = candidatePath;
-      }
-      const result = await processService.executeCommand(command, {
-        description,
-        timeout,
-        runInBackground: run_in_background,
-        cwd: validatedCwd,
-        // Pass abort signal for cancellation support
-        abortSignal: context?.abortSignal
-      });
-      if ("stdout" in result) {
-        const _display = {
-          type: "shell",
-          command,
-          exitCode: result.exitCode,
-          duration: result.duration,
-          isBackground: false,
-          stdout: result.stdout,
-          stderr: result.stderr
-        };
-        return {
-          stdout: result.stdout,
-          stderr: result.stderr,
-          exit_code: result.exitCode,
-          duration: result.duration,
-          _display
-        };
-      } else {
-        const _display = {
-          type: "shell",
-          command,
-          exitCode: 0,
-          // Background process hasn't exited yet
-          duration: 0,
-          // Still running
-          isBackground: true
-        };
-        return {
-          process_id: result.processId,
-          message: `Command started in background with ID: ${result.processId}. Use bash_output to retrieve output.`,
-          _display
-        };
-      }
-    }
-  };
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  createBashExecTool
-});

package/dist/tools/internal-tools/implementations/bash-exec-tool.d.ts

@@ -1,13 +0,0 @@
-/**
- * Bash Execute Tool
- *
- * Internal tool for executing shell commands.
- * Approval is handled at the ToolManager level with pattern-based approval.
- */
-import { InternalTool } from '../../types.js';
-import { ProcessService } from '../../../process/index.js';
-/**
- * Create the bash_exec internal tool
- */
-export declare function createBashExecTool(processService: ProcessService): InternalTool;
-//# sourceMappingURL=bash-exec-tool.d.ts.map

package/dist/tools/internal-tools/implementations/bash-exec-tool.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bash-exec-tool.d.ts","sourceRoot":"","sources":["../../../../src/tools/internal-tools/implementations/bash-exec-tool.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,YAAY,EAAwB,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAgC3D;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,cAAc,EAAE,cAAc,GAAG,YAAY,CAuG/E"}