@elie-laloum/outpost 11.0.1 → 11.1.2

package/CHANGELOG.md

@@ -1,5 +1,50 @@
 # Changelog
 
+## 11.1.2
+
+This release adds YAML workflow composition, terminal recipe dialogues and Git-free file workspaces while preserving existing Git APIs and defaults.
+
+- Reorganize the English and French Guide around user tasks, with focused pages, preserved routes and section anchors, clearer setup paths and nine downloadable example projects. Make mobile diagrams readable without zoom and clarify desktop flow conditions. Correct journal/replay side effects, Git path handling and recovery instructions; document the local review report produced by the webhook example.
+- Show every public API overload and its own property table, correctly mark required fields from mapped types, and link reference contracts to their practical guides.
+- Define private vulnerability reporting through GitHub Security and security-fix support for the latest major version.
+- Make recipe contract classification portable across Windows and POSIX source paths, and resolve temporary directory aliases in the macOS recovery test.
+- Build public declarations before checking consumer fixture types so validation works on a fresh checkout.
+- Prepare the Git-free Node image explicitly for container tests and document the required image pull.
+- Create the host UID's account in the Git-free package test image, and adapt container documentation checks to the simplified setup example.
+- Fix Windows output publication permission checks and relative file/directory link copies. Keep ownership and escape checks, and make recipe test cleanup, process assertions and host commands portable.
+
+- Add explicit directory-copy, read-only/writable source-mount and ephemeral file workspaces without host Git, configuration version 3, provider workspace capabilities and file dispatch/report contracts. Preserve legacy Git APIs and configuration defaults. Journal protected output publication with conditional rollback and explicit recovery; conserve settled files and conversations for local or explicit Transport-backed portable resume. Cover independent commands, cross-process dialogue, interrupted publication and an installed CLI running with Node, Docker and tar on a host without Git. Native CLI file variants and live cloud/Firecracker validation remain unvalidated.
+
+- Add a runnable Linear development recipe with a separate TypeScript application, validated private API-key caching, issue selection, plan approval, implementation, enforced tests and formatted observation. Extend terminal recipe interaction to unsigned gates with saved evidence and explicit decisions; signed gates retain external proof submission. Test the flow offline with real Git and simulated services; live Linear/Codex remains unvalidated.
+
+- Handle durable recipe questions directly in the CLI: automatic terminal prompts, actor selection, saved answers and continuation without a custom runner. Add interactive/headless flags, keep JSON reporting final-only, and preserve pending questions on cancellation. Cover offline cross-process resume and real terminal input; no paid agent calls.
+
+- Serve recipe and configuration JSON Schemas from documentation URLs under `/schemas/`, with immutable per-version copies reconstructed from stable Git tags. Preserve archives across GitHub Pages deployments, check JSON content and HTTP responses, and document editor setup in English and French.
+
+- Complete the seven YAML composition lots with explicit experimental speculation, cumulative durable usage receipts, conflict resolvers, native reporters and OpenTelemetry. Keep machine settings in named local components, synchronize and close execution sandboxes before integration, and report resolver usage separately. Generate component documentation and enforce per-export/per-option parity classifications in CI. Add an offline community recipe and example; paid/cloud/remote-SDK validation remains absent.
+
+- Compose YAML SQLite/HTTP/BullMQ queues, recipe and native workflow jobs, queued tasks, cron schedules and authenticated webhook services. Add explicit recipe enqueue/serve commands with native ownership, cancellation, token rotation and job identities. Verify local service composition and real Redis 7 without paid calls.
+
+- Add durable YAML checkpoints with exact Git workspace restoration, artifacts, caches, signed gates, dialogues, quota pauses and cumulative budgets. Add recipe status/resume/answer/decide; require explicit replay and revision-fenced recovery after interruption. Exercise separate processes, preserved uncommitted files and original diff guards offline; live cloud restoration remains unvalidated.
+
+- Compose format-3 workflows with structured JSON inputs, typed result references, conditions, transformations, local task callbacks, native loop and decision tasks, and isolated multi-repository dispatch. Preserve native scheduling and usage accounting, refuse overlapping shared workspaces, and project execution results to JSON. Add an offline example and YAML/TypeScript equivalence tests using real Git repositories.
+
+- Compose the Outpost harness, model and decision providers, tools, skills, hooks, permissions, context strategies, routing, fallback agents and conversation stores from YAML. Format-3 agent steps accept dispatch options and structured response references. Callback extensions declare a static slot contract; schemas distinguish data schemas from component references. Compare delegated YAML and TypeScript runs offline, and exercise the compiled CLI against a local streaming model fixture.
+
+- Extend YAML configuration with named providers, native sandbox and workspace options, portable profiles, CLI harness settings, MCP declarations, local transports and host-side secret selections. Generate option schemas from TypeScript contracts, reject dependency cycles before imports, resolve installed ESM-only extensions, and redact selected values from observation and reports. Cover local lifecycle execution and YAML/TypeScript request equivalence; cloud and paid agent calls remain unvalidated.
+
+- Begin YAML composition parity with configuration format 2, recipe format 3, the `/recipes` registry/runtime API, explicit observation and final reports, static extension validation and a versioned public-contract inventory. Recipe execution is silent unless outputs or `--json` are requested; failures still print diagnostics.
+
+- Add reusable YAML recipes with typed inputs, defaults and enums, dependency result references and editor schemas. Run with separate recipe and execution YAML files covering sandbox providers, CLI agents, model selection and explicit credential references; retain literal format 1 and TypeScript configuration compatibility. Add `recipe init`, allocation-free `validate`, `list` and integrity-checked `fetch`, repeated `--input` flags, three bundled Git catalogue recipes and third-party HTTPS catalogues. Fix CLI Git integration, bounded outputs and diagnostics, and final reporting after cleanup. Cover real local Git execution and cross-repository reuse; HTTP downloads are tested with simulated responses and paid agent/cloud runs remain unvalidated.
+
+## 11.1.1
+
+Publication was blocked after coverage passed: the SQLite recipe example deleted its temporary directory before closing its inspection queue on Windows. No package or documentation deployment was published. Version 11.1.2 fixes cleanup order and checks examples and package consumption before coverage in CI.
+
+## 11.1.0
+
+Publication was blocked by a Windows regression test that incremented an inode beyond JavaScript's safe integer precision. No package or documentation deployment was published. The fixture was corrected for the next release attempt.
+
 ## 11.0.1
 
 This major release adds workspace integration safeguards, portable agent profiles, execution reports and state tracking, monetary budgets, incremental preparation, cloud dependency caches, offline workflow testing and optional secret sources. Update exhaustive consumers for `FaultCode` (`guard`, `stuck`), `AgentEvent` and `ObservationEvent` (`stuck`), stopped reasons (`stuck`), `StorageCategoryName` (`runs`) and `WorkflowBudgetExceeded.dimension` (`cost`). Implementations and test doubles of `DispatchResult` and `WarmDispatchResult` must provide `report()`; custom `ObservationHub` implementations must provide `redacting` and `redact()`. Existing entry points remain available. Best-of-N speculation remains experimental, and the live-validation limits below still apply.

package/README.md

@@ -24,6 +24,8 @@
 
 Outpost is a TypeScript library and CLI for running coding agents in sandboxes and composing their work. Give an agent a task, choose its execution environment, and collect its answer, commits and usage. Start with one request; add parallel tasks, verification loops and human decisions as your workflow grows.
 
+Directory and ephemeral workspaces run commands and compatible harnesses without host Git. Configuration version 3 declares file sources, runtime storage and protected output publication; existing Git defaults stay unchanged. See the [English guide](docs/src/content/docs/guide/workspaces.md) or [French guide](docs/src/content/docs/fr/guide/workspaces.md).
+
 ## Why Outpost?
 
 - **Choose your agent and sandbox independently.** Run Claude Code, Codex, Antigravity, GitHub Copilot CLI or Kimi Code with Docker, Podman, Vercel or Daytona.
@@ -34,7 +36,7 @@ Outpost is a TypeScript library and CLI for running coding agents in sandboxes a
 
 ## Quickstart
 
-You need **Node.js 24+**, **Git**, a repository with at least one commit, and **Docker** running. This example uses Codex with account authentication: prepare its host login using the [Codex guide](https://elie-laloum.github.io/outpost/guide/codex/) before running a task. [Authentication](https://elie-laloum.github.io/outpost/guide/authentication/) covers other agents and API-key billing.
+You need **Node.js 24+**, **Git**, a repository with a committed README, and **Docker** running. This example uses Codex with account authentication: prepare its host login using the [Codex guide](https://elie-laloum.github.io/outpost/guide/codex/) before running a task. [Authentication](https://elie-laloum.github.io/outpost/guide/authentication/) covers other agents and API-key billing.
 
 Install the package, then build the agent image in a dedicated directory:
 
@@ -54,7 +56,6 @@ Use an ESM directory (`"type": "module"` in `package.json`); a CommonJS reposito
 import {
   createAgent,
   createCodexHarness,
-  createReporter,
   dispatch,
 } from "@elie-laloum/outpost";
 import { createDockerSandboxProvider } from "@elie-laloum/outpost/providers/docker";
@@ -65,17 +66,15 @@ const result = await dispatch({
     harness: createCodexHarness({ authentication: "account" }),
   }),
   sandboxProvider: createDockerSandboxProvider({ image: "outpost:dev" }),
-  observe: createReporter(),
-  branch: { mode: "named", name: "outpost/fix-tests" },
+  branch: { mode: "named", name: "outpost/readme-review" },
   brief: {
-    text: "Fix the failing tests, run them to verify and commit the change.",
+    text: "Review the README setup instructions. Report problems or say none were found. Do not edit files.",
   },
 });
 
-// Example output:
-// [outpost · pass 1] running · codex
-// Fixed the failing tests and committed the change.
-// [outpost · pass 1] finished · 12.00s · status 0 · input 1200 · cache read 0 · cache write 0 · output 320
+console.log(result.text);
+console.log(result.commits);
+// Expected commits: []
 ```
 
 `dispatch()` closes the sandbox it allocates; the named branch remains for review. Use a fresh branch name for each independent task. The agent’s answer is not an enforced test result: add explicit verification when checks must gate integration.
@@ -95,6 +94,7 @@ const result = await dispatch({
 | Build an agent with your own tools and instructions | [Custom harness](https://elie-laloum.github.io/outpost/guide/harness/)                           |
 | Read execution state by ID                          | [Execution state](https://elie-laloum.github.io/outpost/guide/run-state/)                        |
 | Test workflows without accounts or model calls      | [Workflow testing](https://elie-laloum.github.io/outpost/guide/testing-workflows/)               |
+| Create, share and run YAML recipes                  | [YAML recipes](https://elie-laloum.github.io/outpost/guide/yaml-recipes/)                        |
 | Resume or recover interrupted work                  | [Failure recovery](https://elie-laloum.github.io/outpost/guide/recovery/)                        |
 
 The [Guide](https://elie-laloum.github.io/outpost/guide/introduction/) explains behavior with focused examples. The [Reference](https://elie-laloum.github.io/outpost/reference/) documents exact contracts. Both are available in English and French.

package/SECURITY.md

@@ -2,9 +2,19 @@
 
 Outpost runs coding agents that execute arbitrary project commands. Use it with repositories and credentials appropriate for that task.
 
+## File workspaces
+
+File workspaces can run without Git. Directory copies exclude Git and Outpost control metadata; ordinary source files remain data, including any credential files the caller selected. New copies, snapshots and publications reject outgoing links and special files; link checks expand captured aliases before parent traversal and refuse missing targets or excluded aliases. Explicit source mounts expose the complete source; writable mounts change it immediately and cleanup never rolls those effects back. Owned working roots and runtime control storage remain separate. The local provider remains unisolated.
+
+Protected publication uses destination manifests, host-user overlap locks, same-filesystem quarantine, exclusive installation and conditional reverse rollback. These locks coordinate Outpost writers without preventing external edits. Publication is recoverable across operations, not an atomic transaction over an entire tree. Concurrent changes can leave backups and journal operations requiring explicit recovery. File snapshots establish file integrity, not disposal of unknown cloud resources or authorization to recover owners and replay interrupted work.
+
+## Sandbox access
+
 By default, Docker/Podman expose the selected checkout, Git metadata and explicit volumes. The Docker socket is not mounted by default. Containers use a chosen UID/GID, dropped capabilities, no-new-privileges and a private home. Extra devices, writable mounts and elevated hooks expand the boundary deliberately.
 
-Shared Git metadata is writable by the agent. A mounted sandbox is not an adversarial boundary protecting the host repository or its configuration. Outpost disables host Git hooks for its own Git commands, but a malicious repository can contain other executable configuration or project tooling. Do not run untrusted repositories with valuable host credentials. Host `local()` provides no isolation.
+Shared Git metadata is writable by the agent. A mounted sandbox is not an adversarial boundary protecting the host repository or its configuration. Outpost disables host Git hooks for its own Git commands, but a malicious repository can contain other executable configuration or project tooling. Do not run untrusted repositories with valuable host credentials. Host `createLocalSandboxProvider()` provides no isolation.
+
+## Git and integration
 
 Workspace diff guards are integration checks, not filesystem permissions or an adversarial security boundary. They inspect only the final committed diff: an agent can modify files and restore them before the check, and uncommitted files are excluded. Use named or integration workspaces to retain refused work separately from the host checkout.
 
@@ -20,20 +30,36 @@ Portable agent profiles carry literal guidance and protocol tool restrictions, n
 
 MCP servers are programs or endpoints you choose; they receive the variables you name and act with the agent's authority. Outpost writes MCP configuration with variable references only, never secret values. Kimi and Antigravity configuration is merged into the agent home file, which is the user's own home with `createLocalSandboxProvider()`. Built-in harness servers and their HTTP bridge run inside the sandbox, so egress policies apply to them; CLI agents contact HTTP servers themselves from the sandbox. `oauth: "login"` copies the selected MCP OAuth tokens of Claude Code, Codex or Kimi from the host into the private sandbox home; a refresh there can rotate the refresh token and invalidate the host login. OAuth client secrets for the built-in harness stay in the sandbox environment.
 
+## Secrets in saved data
+
 Conversation transcripts, logs, bundles and patches may contain secrets. Optional `redact` expressions mask matching strings before Outpost observation receivers and supported conversation captures, including decoded text session bundles. They do not detect unknown secrets, join fragments across event boundaries, rewrite native sandbox files or temporary staging, sanitize checkpoints, returned values other than run reports or existing archives, or make arbitrary binary content safe. A masked transcript can lose data needed for native resume or signed reasoning replay. Runtime files are ignored by Git and sensitive files are created with restrictive permissions where supported. Keep API keys in environment variables or ignored `.env` files. Never embed tokens in tracked configuration, remote URLs or examples.
 
-Report vulnerabilities privately using the repository's security reporting channel when enabled, or contact the maintainer through the hosting profile. Do not include live credentials in reports. V1 receives fixes for reproducible security defects.
+## Reporting and supported versions
+
+Report vulnerabilities privately through [GitHub Security](https://github.com/elie-laloum/outpost/security/advisories/new). Do not include live credentials in reports. Only the latest major version receives security fixes; upgrade to that major before requesting a fix for an older release.
+
+## Shared storage and ownership
 
 Explicit storage transports can send artifacts, journals, transcripts, recovery payloads, execution snapshots, observation events and operational metadata to the configured object store. Run projections share the bounded delivery and redaction limits of other observation sinks; an expired heartbeat is suspected abandonment and never authorizes replay or resource recovery. The caller owns the S3 client and credentials; they are not forwarded to agents. Use a dedicated private bucket prefix and access policy. Object revisions fence cooperating writers but do not authenticate artifact producers or operators. Stop an abandoned runner independently before releasing its checkpoint ownership; a remote PID is not proof of inactivity.
 
+## Firecracker
+
 The optional Firecracker jailer mode requires a trusted root supervisor and root-owned boot assets, executables, SSH trust files, jail base and cgroup v2 parent. Outpost does not elevate privileges. The VMM drops to the explicitly selected non-root UID/GID, uses the jailer's mount namespace and receives CPU, memory, swap and process limits. The supervisor remains privileged and outside the VMM cgroup; its workflow code, configuration, dependencies and transfer destinations must be trusted. Guest file downloads currently buffer individual files in the supervisor, so the VMM memory limit is not a total host-resource budget. Kernel work outside that cgroup is likewise not charged to its CPU quota. Operators own TAP setup, network filtering, parent resources and crash recovery. Control-plane resource accounting and adversarial validation of this mode remain open.
 
+## Network policies
+
 Egress policies restrict sandbox outbound connections, not host model-provider or decision-provider calls, image downloads or cloud control-plane traffic. Vercel domain rules inspect TLS SNI rather than encrypted HTTP Host headers; allowed CIDRs grant independent IP access and denied CIDRs take precedence. A domain allowlist is not a general defense against exfiltration through allowed services or shared infrastructure. Mounted host sockets can expose separate network capabilities. Outpost copies network configuration at provider composition.
 
 Daytona egress is sent at creation and confirmed through its network-update API before Outpost prepares the workspace or exposes the lease. A rejected confirmation fails acquisition and triggers deletion. Tier 3/4 and WRITE_SANDBOXES are required; native creation options alone do not establish this guarantee. Autonomous image startup precedes confirmation and must be trusted, without embedded secrets or startup workloads. Unsupported combinations and wildcard patterns that would implicitly grant apex access are rejected. Docker/Podman allowlists remain unsupported; local and Firecracker execution reject Outpost egress policies. See the bilingual outbound-network guide for capabilities and live-validation limits.
 
+## Approvals and idempotency
+
 Signed workflow gates verify an Ed25519 key bound to an approver, not a human login. The signing service must authenticate the user and their intent. Keep private keys outside worker sandboxes; trust the configured verifier and public-key source. Gate authentication requirements participate in checkpoint identity, but signatures do not authenticate checkpoint storage. Revocation rejects new proofs and does not undo already persisted decisions. HTTP queue bearer tokens authorize all queue operations; dynamic token sources allow rotation, not tenant isolation. Use trusted TLS termination for remote connections. Idempotency keys only prevent duplicate external effects when the effect service atomically deduplicates them and retains receipts throughout the replay window.
 
+## Dependency caches
+
 Cloud dependency caches archive only the declared download directories through a host-side Transport. Storage credentials are not installed in the sandbox. Later runs trust the bytes written by previous agents and transport writers; keep credentials out of caches and use a private prefix. Immutable cache snapshots persist until explicitly removed, including superseded or unpublished snapshots. Compatibility hashes and chunk digests provide isolation and integrity, not producer authentication.
 
+## Secret managers
+
 Secret-source resolution runs on the host before sandbox allocation. Outpost reads only requested names and returns immutable variables without writing the values to disk or changing process.env. Vault/OpenBao KV v2 and AWS JSON fields require fetching an enclosing document; split unrelated secrets when they must not be fetched together. Injected SDK clients are caller-owned, and their authentication configuration and caching remain the caller’s responsibility. fromSecrets discards vendor exception messages and causes; never log the returned object. The selected values become readable by every process receiving those variables. Startup snapshots do not rotate inside a running sandbox.

package/dist/adapters/testing/scripted-agent.js

@@ -43,6 +43,11 @@ export function scriptedAgent(options) {
     const adapter = {
         kind: "cli",
         harness,
+        fileWorkspaces: {
+            dispatch: !options.turns.some((turn) => turn.commit),
+            continuation: true,
+            repairs: true,
+        },
         name: options.name ?? "scripted",
         usage: "events",
         capture: false,

package/dist/adapters/testing/scripted-agent.js.map

@@ -1 +1 @@
-{"version":3,"file":"scripted-agent.js","sourceRoot":"","sources":["../../../src/adapters/testing/scripted-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iDAAiD,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAG3E,MAAM,UAAU,aAAa,CAAC,OAA6B;IACzD,SAAS,CACP,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EACxB,2CAA2C,CAC5C,CAAC;IACF,SAAS,CACP,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAC5D,qCAAqC,CACtC,CAAC;IACF,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACzC,MAAM,MAAM,GAAiB;YAC3B,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,YAAY,EAAE;YAC1C,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;SACtC,CAAC;QACF,SAAS,CACP,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,EAC5D,mDAAmD,CACpD,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;YAClE,SAAS,CACP,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,EAC9D,yCAAyC,CAC1C,CAAC;YACF,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE;aAC1D,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC;YACxB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;YACzB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC;QACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,OAAO,GAAe,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IACjE,MAAM,OAAO,GAAa;QACxB,IAAI,EAAE,KAAK;QACX,OAAO;QACP,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,UAAU;QAChC,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,KAAK;QACf,qBAAqB,EAAE,IAAI;QAC3B,OAAO,CAAC,KAAK;YACX,SAAS,CACP,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EACnE,8DAA8D,CAC/D,CAAC;YACF,SAAS,CACP,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE,KAAK,YAAY,EAC7D,+BAA+B,CAChC,CAAC;YACF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/B,IAAI,MAAM,KAAK,SAAS;gBACtB,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;YACtE,OAAO;gBACL,UAAU,EAAE,kBAAkB;gBAC9B,SAAS,EAAE,CAAC,MAAM,CAAC;gBACnB,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;aACxB,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI;YACT,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChC,SAAS,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;YACpD,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC;KACF,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport type {\n  AgentEvent,\n  CliAgent,\n  CliHarness,\n} from \"../../domain/agent.types.ts\";\nimport { invariant, OutpostError } from \"../../domain/errors.ts\";\nimport { scriptedExecutable } from \"../../infrastructure/scripted-turn.constants.ts\";\nimport { readScriptedRecipe } from \"../../infrastructure/scripted-turn.ts\";\nimport type { ScriptedAgentOptions } from \"./scripted-agent.types.ts\";\n\nexport function scriptedAgent(options: ScriptedAgentOptions): CliAgent {\n  invariant(\n    options.turns.length > 0,\n    \"Scripted agents require at least one turn\",\n  );\n  invariant(\n    options.name === undefined || options.name.trim().length > 0,\n    \"Scripted agent name cannot be empty\",\n  );\n  const conversation = randomUUID();\n  const decoded = new Map<string, AgentEvent>();\n  const recipes = options.turns.map((turn) => {\n    const events: AgentEvent[] = [\n      { kind: \"conversation\", id: conversation },\n      ...structuredClone(turn.events ?? []),\n    ];\n    invariant(\n      !turn.events?.some((event) => event.kind === \"conversation\"),\n      \"Scripted agents own their conversation identifier\",\n    );\n    if (turn.text !== undefined) events.push({ kind: \"text\", text: turn.text });\n    if (turn.usage || !events.some((event) => event.kind === \"usage\")) {\n      invariant(\n        !turn.usage || !events.some((event) => event.kind === \"usage\"),\n        \"Declare usage in either events or usage\",\n      );\n      events.push({\n        kind: \"usage\",\n        tokens: { input: 0, cached: 0, output: 0, ...turn.usage },\n      });\n    }\n    if (!events.some((event) => event.kind === \"finished\"))\n      events.push({ kind: \"finished\" });\n    const lines = events.map((event) => {\n      const line = JSON.stringify(event);\n      decoded.set(line, event);\n      return line;\n    });\n    const text = JSON.stringify({\n      events: lines,\n      status: turn.status ?? 0,\n      stderr: turn.stderr ?? \"\",\n      ...(turn.commit ? { commit: turn.commit } : {}),\n    });\n    readScriptedRecipe(text);\n    return text;\n  });\n  let next = 0;\n  const harness: CliHarness = { kind: \"cli\", bind: () => adapter };\n  const adapter: CliAgent = {\n    kind: \"cli\",\n    harness,\n    name: options.name ?? \"scripted\",\n    usage: \"events\",\n    capture: false,\n    resumable: true,\n    forkable: false,\n    requiresFinishedEvent: true,\n    request(input) {\n      invariant(\n        !input.interactive && !input.liveInput && !input.continuation?.fork,\n        \"Scripted agents do not support terminals, live input or fork\",\n      );\n      invariant(\n        !input.continuation || input.continuation.id === conversation,\n        \"Unknown scripted conversation\",\n      );\n      const recipe = recipes[next++];\n      if (recipe === undefined)\n        throw new OutpostError(\"process\", \"Scripted agent turns exhausted\");\n      return {\n        executable: scriptedExecutable,\n        arguments: [recipe],\n        stdin: input.text ?? \"\",\n      };\n    },\n    events(line) {\n      const event = decoded.get(line);\n      invariant(event, \"Unexpected scripted agent event\");\n      return [structuredClone(event)];\n    },\n  };\n  return adapter;\n}\n"]}
+{"version":3,"file":"scripted-agent.js","sourceRoot":"","sources":["../../../src/adapters/testing/scripted-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iDAAiD,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAG3E,MAAM,UAAU,aAAa,CAAC,OAA6B;IACzD,SAAS,CACP,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EACxB,2CAA2C,CAC5C,CAAC;IACF,SAAS,CACP,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAC5D,qCAAqC,CACtC,CAAC;IACF,MAAM,YAAY,GAAG,UAAU,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACzC,MAAM,MAAM,GAAiB;YAC3B,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,YAAY,EAAE;YAC1C,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;SACtC,CAAC;QACF,SAAS,CACP,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,EAC5D,mDAAmD,CACpD,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,CAAC;YAClE,SAAS,CACP,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,EAC9D,yCAAyC,CAC1C,CAAC;YACF,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE;aAC1D,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC;YACxB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;YACzB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC;QACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,OAAO,GAAe,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IACjE,MAAM,OAAO,GAAa;QACxB,IAAI,EAAE,KAAK;QACX,OAAO;QACP,cAAc,EAAE;YACd,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC;YACpD,YAAY,EAAE,IAAI;YAClB,OAAO,EAAE,IAAI;SACd;QACD,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,UAAU;QAChC,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,KAAK;QACf,qBAAqB,EAAE,IAAI;QAC3B,OAAO,CAAC,KAAK;YACX,SAAS,CACP,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EACnE,8DAA8D,CAC/D,CAAC;YACF,SAAS,CACP,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE,KAAK,YAAY,EAC7D,+BAA+B,CAChC,CAAC;YACF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/B,IAAI,MAAM,KAAK,SAAS;gBACtB,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;YACtE,OAAO;gBACL,UAAU,EAAE,kBAAkB;gBAC9B,SAAS,EAAE,CAAC,MAAM,CAAC;gBACnB,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;aACxB,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI;YACT,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChC,SAAS,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;YACpD,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC;KACF,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport type {\n  AgentEvent,\n  CliAgent,\n  CliHarness,\n} from \"../../domain/agent.types.ts\";\nimport { invariant, OutpostError } from \"../../domain/errors.ts\";\nimport { scriptedExecutable } from \"../../infrastructure/scripted-turn.constants.ts\";\nimport { readScriptedRecipe } from \"../../infrastructure/scripted-turn.ts\";\nimport type { ScriptedAgentOptions } from \"./scripted-agent.types.ts\";\n\nexport function scriptedAgent(options: ScriptedAgentOptions): CliAgent {\n  invariant(\n    options.turns.length > 0,\n    \"Scripted agents require at least one turn\",\n  );\n  invariant(\n    options.name === undefined || options.name.trim().length > 0,\n    \"Scripted agent name cannot be empty\",\n  );\n  const conversation = randomUUID();\n  const decoded = new Map<string, AgentEvent>();\n  const recipes = options.turns.map((turn) => {\n    const events: AgentEvent[] = [\n      { kind: \"conversation\", id: conversation },\n      ...structuredClone(turn.events ?? []),\n    ];\n    invariant(\n      !turn.events?.some((event) => event.kind === \"conversation\"),\n      \"Scripted agents own their conversation identifier\",\n    );\n    if (turn.text !== undefined) events.push({ kind: \"text\", text: turn.text });\n    if (turn.usage || !events.some((event) => event.kind === \"usage\")) {\n      invariant(\n        !turn.usage || !events.some((event) => event.kind === \"usage\"),\n        \"Declare usage in either events or usage\",\n      );\n      events.push({\n        kind: \"usage\",\n        tokens: { input: 0, cached: 0, output: 0, ...turn.usage },\n      });\n    }\n    if (!events.some((event) => event.kind === \"finished\"))\n      events.push({ kind: \"finished\" });\n    const lines = events.map((event) => {\n      const line = JSON.stringify(event);\n      decoded.set(line, event);\n      return line;\n    });\n    const text = JSON.stringify({\n      events: lines,\n      status: turn.status ?? 0,\n      stderr: turn.stderr ?? \"\",\n      ...(turn.commit ? { commit: turn.commit } : {}),\n    });\n    readScriptedRecipe(text);\n    return text;\n  });\n  let next = 0;\n  const harness: CliHarness = { kind: \"cli\", bind: () => adapter };\n  const adapter: CliAgent = {\n    kind: \"cli\",\n    harness,\n    fileWorkspaces: {\n      dispatch: !options.turns.some((turn) => turn.commit),\n      continuation: true,\n      repairs: true,\n    },\n    name: options.name ?? \"scripted\",\n    usage: \"events\",\n    capture: false,\n    resumable: true,\n    forkable: false,\n    requiresFinishedEvent: true,\n    request(input) {\n      invariant(\n        !input.interactive && !input.liveInput && !input.continuation?.fork,\n        \"Scripted agents do not support terminals, live input or fork\",\n      );\n      invariant(\n        !input.continuation || input.continuation.id === conversation,\n        \"Unknown scripted conversation\",\n      );\n      const recipe = recipes[next++];\n      if (recipe === undefined)\n        throw new OutpostError(\"process\", \"Scripted agent turns exhausted\");\n      return {\n        executable: scriptedExecutable,\n        arguments: [recipe],\n        stdin: input.text ?? \"\",\n      };\n    },\n    events(line) {\n      const event = decoded.get(line);\n      invariant(event, \"Unexpected scripted agent event\");\n      return [structuredClone(event)];\n    },\n  };\n  return adapter;\n}\n"]}

package/dist/adapters/tools/file-tools.d.ts

@@ -1,2 +1,3 @@
 import type { HarnessToolset } from "../../domain/tool.types.ts";
-export declare function createHarnessFileTools(): HarnessToolset;
+import type { FileSelectionOptions } from "./tools.types.ts";
+export declare function createHarnessFileTools(options?: FileSelectionOptions): HarnessToolset;

package/dist/adapters/tools/file-tools.js

@@ -3,10 +3,15 @@ import { glob } from "../../domain/glob.js";
 import { defineHarnessTool, defineHarnessToolset } from "../../domain/tool.js";
 import { anywhere, downloadFile, repositoryPath, withStaging, } from "./sandbox-files.js";
 import { TOOL_LIMITS } from "./tools.constants.js";
-export function createHarnessFileTools() {
+import { filesystemSelectionScript } from "./filesystem-selection.constants.js";
+import { invariant } from "../../domain/errors.js";
+export function createHarnessFileTools(options = {}) {
+    invariant(options.selection === undefined ||
+        options.selection === "git" ||
+        options.selection === "filesystem", "File selection must be git or filesystem");
     return defineHarnessToolset({
         name: "files",
-        tools: [readFileTool(), listFilesTool()],
+        tools: [readFileTool(), listFilesTool(options.selection ?? "git")],
     });
 }
 function readFileTool() {
@@ -44,10 +49,13 @@ function readFileTool() {
         }),
     });
 }
-function listFilesTool() {
+function listFilesTool(selection) {
     return defineHarnessTool({
+        ...(selection === "git" ? { workspace: "git" } : {}),
         name: "list_files",
-        description: "List files in the repository that are tracked or not ignored by Git, optionally under a directory and filtered by a glob such as src/**/*.ts; a glob without a slash matches file names at any depth.",
+        description: selection === "git"
+            ? "List files tracked or not ignored by Git, optionally under a directory and filtered by a glob."
+            : "List ordinary workspace files without following links or applying Git ignore rules, optionally under a directory and filtered by a glob.",
         readOnly: true,
         input: {
             type: "object",
@@ -60,23 +68,37 @@ function listFilesTool() {
         resources: (input) => ({ paths: [input.path ?? "."] }),
         async execute(input, context) {
             const scope = repositoryPath(input.path ?? ".") || ".";
+            const invocation = selection === "filesystem"
+                ? {
+                    executable: "node",
+                    arguments: [
+                        "-e",
+                        `(function(){${filesystemSelectionScript}})()`,
+                        "list",
+                        scope,
+                        "{}",
+                    ],
+                }
+                : {
+                    executable: "git",
+                    arguments: [
+                        "ls-files",
+                        "-z",
+                        "--cached",
+                        "--others",
+                        "--exclude-standard",
+                        "--",
+                        scope,
+                    ],
+                };
             const result = await context.sandbox.invoke({
-                executable: "git",
-                arguments: [
-                    "ls-files",
-                    "-z",
-                    "--cached",
-                    "--others",
-                    "--exclude-standard",
-                    "--",
-                    scope,
-                ],
+                ...invocation,
                 retain: TOOL_LIMITS.commandCharacters * 10,
                 signal: context.signal,
             });
             if (result.status !== 0)
                 return {
-                    content: result.stderr || "git ls-files failed",
+                    content: result.stderr || "File listing failed",
                     isError: true,
                 };
             const matcher = input.pattern

package/dist/adapters/tools/file-tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-tools.js","sourceRoot":"","sources":["../../../src/adapters/tools/file-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EACL,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,MAAM,UAAU,sBAAsB;IACpC,OAAO,oBAAoB,CAAC;QAC1B,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,CAAC;KACzC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,iBAAiB,CAAC;QACvB,IAAI,EAAE,WAAW;QACjB,WAAW,EACT,kHAAkH;QACpH,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACtC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;gBACvC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,SAAS,EAAE;aACvE;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,oBAAoB,EAAE,KAAK;SAC5B;QACD,SAAS,EAAE,CAAC,KAAoB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,CAAC,KAAoB,EAAE,OAAO,EAAE,EAAE,CACzC,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,MAAM,YAAY,CAC7B,OAAO,EACP,KAAK,CAAC,IAAI,EACV,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CACxB,CAAC;YACF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzD,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;gBAAE,KAAK,CAAC,GAAG,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAC1B,KAAK,EACL,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,WAAW,CAAC,SAAS,CAAC,CAC/C,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;YACrD,MAAM,IAAI,GAAG,QAAQ;iBAClB,GAAG,CACF,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,GAAG,MAAM,CAAC,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAC1D;iBACA,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,GAAG,GAAG,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;YACpC,MAAM,IAAI,GACR,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC;gBAC7B,CAAC,CAAC,YAAY,KAAK,GAAG,CAAC,IAAI,GAAG,OAAO,KAAK,CAAC,MAAM,GAAG;gBACpD,CAAC,CAAC,EAAE,CAAC;YACT,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;QAC1D,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,iBAAiB,CAAC;QACvB,IAAI,EAAE,YAAY;QAClB,WAAW,EACT,uMAAuM;QACzM,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;aAC1C;YACD,oBAAoB,EAAE,KAAK;SAC5B;QACD,SAAS,EAAE,CAAC,KAAqB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACtE,KAAK,CAAC,OAAO,CAAC,KAAqB,EAAE,OAAO;YAC1C,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC1C,UAAU,EAAE,KAAK;gBACjB,SAAS,EAAE;oBACT,UAAU;oBACV,IAAI;oBACJ,UAAU;oBACV,UAAU;oBACV,oBAAoB;oBACpB,IAAI;oBACJ,KAAK;iBACN;gBACD,MAAM,EAAE,WAAW,CAAC,iBAAiB,GAAG,EAAE;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBACrB,OAAO;oBACL,OAAO,EAAE,MAAM,CAAC,MAAM,IAAI,qBAAqB;oBAC/C,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO;gBAC3B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;gBACvC,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;iBAClE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBAChD,IAAI,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC;YACtD,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO,iBAAiB,CAAC;YAC5C,OAAO,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM;gBAChC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,0CAA0C;gBAChG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { join } from \"node:path\";\nimport { glob } from \"../../domain/glob.ts\";\nimport { defineHarnessTool, defineHarnessToolset } from \"../../domain/tool.ts\";\nimport type { HarnessToolset } from \"../../domain/tool.types.ts\";\nimport {\n  anywhere,\n  downloadFile,\n  repositoryPath,\n  withStaging,\n} from \"./sandbox-files.ts\";\nimport { TOOL_LIMITS } from \"./tools.constants.ts\";\nimport type { ListFilesInput, ReadFileInput } from \"./tools.types.ts\";\n\nexport function createHarnessFileTools(): HarnessToolset {\n  return defineHarnessToolset({\n    name: \"files\",\n    tools: [readFileTool(), listFilesTool()],\n  });\n}\n\nfunction readFileTool() {\n  return defineHarnessTool({\n    name: \"read_file\",\n    description:\n      \"Read a UTF-8 text file relative to the repository root. Lines are numbered; use offset and limit for long files.\",\n    readOnly: true,\n    input: {\n      type: \"object\",\n      properties: {\n        path: { type: \"string\", minLength: 1 },\n        offset: { type: \"integer\", minimum: 1 },\n        limit: { type: \"integer\", minimum: 1, maximum: TOOL_LIMITS.readLines },\n      },\n      required: [\"path\"],\n      additionalProperties: false,\n    },\n    resources: (input: ReadFileInput) => ({ paths: [input.path] }),\n    execute: (input: ReadFileInput, context) =>\n      withStaging(async (directory) => {\n        const file = await downloadFile(\n          context,\n          input.path,\n          join(directory, \"file\"),\n        );\n        const lines = file.bytes.toString(\"utf8\").split(/\\r?\\n/);\n        if (lines.at(-1) === \"\") lines.pop();\n        const start = (input.offset ?? 1) - 1;\n        const selected = lines.slice(\n          start,\n          start + (input.limit ?? TOOL_LIMITS.readLines),\n        );\n        const width = String(start + selected.length).length;\n        const body = selected\n          .map(\n            (line, index) =>\n              `${String(start + index + 1).padStart(width)}\\t${line}`,\n          )\n          .join(\"\\n\");\n        const end = start + selected.length;\n        const note =\n          end < lines.length || start > 0\n            ? `\\n[lines ${start + 1}-${end} of ${lines.length}]`\n            : \"\";\n        return lines.length ? `${body}${note}` : \"(empty file)\";\n      }),\n  });\n}\n\nfunction listFilesTool() {\n  return defineHarnessTool({\n    name: \"list_files\",\n    description:\n      \"List files in the repository that are tracked or not ignored by Git, optionally under a directory and filtered by a glob such as src/**/*.ts; a glob without a slash matches file names at any depth.\",\n    readOnly: true,\n    input: {\n      type: \"object\",\n      properties: {\n        path: { type: \"string\" },\n        pattern: { type: \"string\", minLength: 1 },\n      },\n      additionalProperties: false,\n    },\n    resources: (input: ListFilesInput) => ({ paths: [input.path ?? \".\"] }),\n    async execute(input: ListFilesInput, context) {\n      const scope = repositoryPath(input.path ?? \".\") || \".\";\n      const result = await context.sandbox.invoke({\n        executable: \"git\",\n        arguments: [\n          \"ls-files\",\n          \"-z\",\n          \"--cached\",\n          \"--others\",\n          \"--exclude-standard\",\n          \"--\",\n          scope,\n        ],\n        retain: TOOL_LIMITS.commandCharacters * 10,\n        signal: context.signal,\n      });\n      if (result.status !== 0)\n        return {\n          content: result.stderr || \"git ls-files failed\",\n          isError: true,\n        };\n      const matcher = input.pattern\n        ? glob(anywhere(input.pattern), \"path\")\n        : undefined;\n      const files = [...new Set(result.stdout.split(\"\\0\").filter(Boolean))]\n        .filter((file) => !matcher || matcher.test(file))\n        .sort();\n      const shown = files.slice(0, TOOL_LIMITS.listEntries);\n      if (!shown.length) return \"No files found.\";\n      return shown.length < files.length\n        ? `${shown.join(\"\\n\")}\\n[${files.length - shown.length} more files; narrow the path or pattern]`\n        : shown.join(\"\\n\");\n    },\n  });\n}\n"]}
+{"version":3,"file":"file-tools.js","sourceRoot":"","sources":["../../../src/adapters/tools/file-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EACL,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAMnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,MAAM,UAAU,sBAAsB,CACpC,UAAgC,EAAE;IAElC,SAAS,CACP,OAAO,CAAC,SAAS,KAAK,SAAS;QAC7B,OAAO,CAAC,SAAS,KAAK,KAAK;QAC3B,OAAO,CAAC,SAAS,KAAK,YAAY,EACpC,0CAA0C,CAC3C,CAAC;IACF,OAAO,oBAAoB,CAAC;QAC1B,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,CAAC,YAAY,EAAE,EAAE,aAAa,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;KACnE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,iBAAiB,CAAC;QACvB,IAAI,EAAE,WAAW;QACjB,WAAW,EACT,kHAAkH;QACpH,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACtC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;gBACvC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,SAAS,EAAE;aACvE;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,oBAAoB,EAAE,KAAK;SAC5B;QACD,SAAS,EAAE,CAAC,KAAoB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,CAAC,KAAoB,EAAE,OAAO,EAAE,EAAE,CACzC,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,MAAM,YAAY,CAC7B,OAAO,EACP,KAAK,CAAC,IAAI,EACV,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CACxB,CAAC;YACF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzD,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;gBAAE,KAAK,CAAC,GAAG,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAC1B,KAAK,EACL,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,WAAW,CAAC,SAAS,CAAC,CAC/C,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;YACrD,MAAM,IAAI,GAAG,QAAQ;iBAClB,GAAG,CACF,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,GAAG,MAAM,CAAC,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAC1D;iBACA,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,GAAG,GAAG,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;YACpC,MAAM,IAAI,GACR,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC;gBAC7B,CAAC,CAAC,YAAY,KAAK,GAAG,CAAC,IAAI,GAAG,OAAO,KAAK,CAAC,MAAM,GAAG;gBACpD,CAAC,CAAC,EAAE,CAAC;YACT,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;QAC1D,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,SAA+B;IACpD,OAAO,iBAAiB,CAAC;QACvB,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,IAAI,EAAE,YAAY;QAClB,WAAW,EACT,SAAS,KAAK,KAAK;YACjB,CAAC,CAAC,gGAAgG;YAClG,CAAC,CAAC,0IAA0I;QAChJ,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;aAC1C;YACD,oBAAoB,EAAE,KAAK;SAC5B;QACD,SAAS,EAAE,CAAC,KAAqB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACtE,KAAK,CAAC,OAAO,CAAC,KAAqB,EAAE,OAAO;YAC1C,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC;YACvD,MAAM,UAAU,GACd,SAAS,KAAK,YAAY;gBACxB,CAAC,CAAC;oBACE,UAAU,EAAE,MAAM;oBAClB,SAAS,EAAE;wBACT,IAAI;wBACJ,eAAe,yBAAyB,MAAM;wBAC9C,MAAM;wBACN,KAAK;wBACL,IAAI;qBACL;iBACF;gBACH,CAAC,CAAC;oBACE,UAAU,EAAE,KAAK;oBACjB,SAAS,EAAE;wBACT,UAAU;wBACV,IAAI;wBACJ,UAAU;wBACV,UAAU;wBACV,oBAAoB;wBACpB,IAAI;wBACJ,KAAK;qBACN;iBACF,CAAC;YACR,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC1C,GAAG,UAAU;gBACb,MAAM,EAAE,WAAW,CAAC,iBAAiB,GAAG,EAAE;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBACrB,OAAO;oBACL,OAAO,EAAE,MAAM,CAAC,MAAM,IAAI,qBAAqB;oBAC/C,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO;gBAC3B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;gBACvC,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;iBAClE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBAChD,IAAI,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC;YACtD,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO,iBAAiB,CAAC;YAC5C,OAAO,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM;gBAChC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,0CAA0C;gBAChG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { join } from \"node:path\";\nimport { glob } from \"../../domain/glob.ts\";\nimport { defineHarnessTool, defineHarnessToolset } from \"../../domain/tool.ts\";\nimport type { HarnessToolset } from \"../../domain/tool.types.ts\";\nimport {\n  anywhere,\n  downloadFile,\n  repositoryPath,\n  withStaging,\n} from \"./sandbox-files.ts\";\nimport { TOOL_LIMITS } from \"./tools.constants.ts\";\nimport type {\n  FileSelectionOptions,\n  ListFilesInput,\n  ReadFileInput,\n} from \"./tools.types.ts\";\nimport { filesystemSelectionScript } from \"./filesystem-selection.constants.ts\";\nimport { invariant } from \"../../domain/errors.ts\";\n\nexport function createHarnessFileTools(\n  options: FileSelectionOptions = {},\n): HarnessToolset {\n  invariant(\n    options.selection === undefined ||\n      options.selection === \"git\" ||\n      options.selection === \"filesystem\",\n    \"File selection must be git or filesystem\",\n  );\n  return defineHarnessToolset({\n    name: \"files\",\n    tools: [readFileTool(), listFilesTool(options.selection ?? \"git\")],\n  });\n}\n\nfunction readFileTool() {\n  return defineHarnessTool({\n    name: \"read_file\",\n    description:\n      \"Read a UTF-8 text file relative to the repository root. Lines are numbered; use offset and limit for long files.\",\n    readOnly: true,\n    input: {\n      type: \"object\",\n      properties: {\n        path: { type: \"string\", minLength: 1 },\n        offset: { type: \"integer\", minimum: 1 },\n        limit: { type: \"integer\", minimum: 1, maximum: TOOL_LIMITS.readLines },\n      },\n      required: [\"path\"],\n      additionalProperties: false,\n    },\n    resources: (input: ReadFileInput) => ({ paths: [input.path] }),\n    execute: (input: ReadFileInput, context) =>\n      withStaging(async (directory) => {\n        const file = await downloadFile(\n          context,\n          input.path,\n          join(directory, \"file\"),\n        );\n        const lines = file.bytes.toString(\"utf8\").split(/\\r?\\n/);\n        if (lines.at(-1) === \"\") lines.pop();\n        const start = (input.offset ?? 1) - 1;\n        const selected = lines.slice(\n          start,\n          start + (input.limit ?? TOOL_LIMITS.readLines),\n        );\n        const width = String(start + selected.length).length;\n        const body = selected\n          .map(\n            (line, index) =>\n              `${String(start + index + 1).padStart(width)}\\t${line}`,\n          )\n          .join(\"\\n\");\n        const end = start + selected.length;\n        const note =\n          end < lines.length || start > 0\n            ? `\\n[lines ${start + 1}-${end} of ${lines.length}]`\n            : \"\";\n        return lines.length ? `${body}${note}` : \"(empty file)\";\n      }),\n  });\n}\n\nfunction listFilesTool(selection: \"git\" | \"filesystem\") {\n  return defineHarnessTool({\n    ...(selection === \"git\" ? { workspace: \"git\" as const } : {}),\n    name: \"list_files\",\n    description:\n      selection === \"git\"\n        ? \"List files tracked or not ignored by Git, optionally under a directory and filtered by a glob.\"\n        : \"List ordinary workspace files without following links or applying Git ignore rules, optionally under a directory and filtered by a glob.\",\n    readOnly: true,\n    input: {\n      type: \"object\",\n      properties: {\n        path: { type: \"string\" },\n        pattern: { type: \"string\", minLength: 1 },\n      },\n      additionalProperties: false,\n    },\n    resources: (input: ListFilesInput) => ({ paths: [input.path ?? \".\"] }),\n    async execute(input: ListFilesInput, context) {\n      const scope = repositoryPath(input.path ?? \".\") || \".\";\n      const invocation =\n        selection === \"filesystem\"\n          ? {\n              executable: \"node\",\n              arguments: [\n                \"-e\",\n                `(function(){${filesystemSelectionScript}})()`,\n                \"list\",\n                scope,\n                \"{}\",\n              ],\n            }\n          : {\n              executable: \"git\",\n              arguments: [\n                \"ls-files\",\n                \"-z\",\n                \"--cached\",\n                \"--others\",\n                \"--exclude-standard\",\n                \"--\",\n                scope,\n              ],\n            };\n      const result = await context.sandbox.invoke({\n        ...invocation,\n        retain: TOOL_LIMITS.commandCharacters * 10,\n        signal: context.signal,\n      });\n      if (result.status !== 0)\n        return {\n          content: result.stderr || \"File listing failed\",\n          isError: true,\n        };\n      const matcher = input.pattern\n        ? glob(anywhere(input.pattern), \"path\")\n        : undefined;\n      const files = [...new Set(result.stdout.split(\"\\0\").filter(Boolean))]\n        .filter((file) => !matcher || matcher.test(file))\n        .sort();\n      const shown = files.slice(0, TOOL_LIMITS.listEntries);\n      if (!shown.length) return \"No files found.\";\n      return shown.length < files.length\n        ? `${shown.join(\"\\n\")}\\n[${files.length - shown.length} more files; narrow the path or pattern]`\n        : shown.join(\"\\n\");\n    },\n  });\n}\n"]}

package/dist/adapters/tools/filesystem-selection.constants.d.ts

@@ -0,0 +1 @@
+export declare const filesystemSelectionScript = "const fs=require('node:fs');const p=require('node:path');\nconst [mode,scope,encoded]=process.argv.slice(1);const options=JSON.parse(encoded);const root=process.cwd();let count=0,total=0;const files=[];\nconst visit=directory=>{for(const name of fs.readdirSync(p.join(root,directory)).sort()){if(name==='.git'||name==='.outpost')continue;const path=p.posix.join(directory,name),info=fs.lstatSync(p.join(root,path));if(++count>100000)throw Error('Filesystem selection exceeds entry limit');if(info.isSymbolicLink())continue;if(info.isDirectory()){visit(path);continue}if(info.isFile())files.push(path)}};\nfor(let ancestor=scope;ancestor!=='.';ancestor=p.dirname(ancestor)){if(fs.lstatSync(p.join(root,ancestor)).isSymbolicLink())throw Error('Filesystem selection cannot traverse links')}const info=fs.lstatSync(p.join(root,scope));if(info.isSymbolicLink())throw Error('Filesystem selection cannot traverse links');if(info.isDirectory())visit(scope==='.'?'':scope);else if(info.isFile())files.push(scope);\nif(mode==='list'){const text=files.join('\\0');if(Buffer.byteLength(text)>2000000)throw Error('Filesystem listing exceeds output limit');process.stdout.write(text);return}\nconst expression=new RegExp(options.pattern,options.ignore_case?'i':'');const matches=[];for(const path of files){if(options.glob&&!p.matchesGlob(path,options.glob.includes('/')?options.glob:'**/'+options.glob))continue;const info=fs.lstatSync(p.join(root,path));if(info.size>4194304)continue;total+=info.size;if(total>33554432)throw Error('Filesystem search exceeds byte limit');const file=fs.openSync(p.join(root,path),fs.constants.O_RDONLY|fs.constants.O_NOFOLLOW);let data;try{const before=fs.fstatSync(file);if(!before.isFile()||before.size>4194304)continue;const bounded=Buffer.alloc(before.size+1);let length=0;while(length<bounded.length){const read=fs.readSync(file,bounded,length,bounded.length-length,length);if(!read)break;length+=read}if(length>before.size)throw Error('Filesystem search source grew');data=bounded.subarray(0,length);const after=fs.fstatSync(file);if(before.size!==after.size||before.mtimeMs!==after.mtimeMs||before.ctimeMs!==after.ctimeMs)throw Error('Filesystem search source changed')}finally{fs.closeSync(file)}if(data.subarray(0,8000).includes(0))continue;const lines=data.toString('utf8').split(/\\r?\\n/);for(let i=0;i<lines.length;i++){if(!expression.test(lines[i]))continue;matches.push(path+':'+(i+1)+':'+lines[i]);if(Buffer.byteLength(matches.join('\\n'))>200000)throw Error('Filesystem search exceeds output limit');if(matches.length>(options.max_results??200)){process.stdout.write(matches.slice(0,-1).join('\\n')+'\\n[more matches; refine the search]');return}}}const text=matches.join('\\n');if(Buffer.byteLength(text)>200000)throw Error('Filesystem search exceeds output limit');process.stdout.write(text);";

package/dist/adapters/tools/filesystem-selection.constants.js

@@ -0,0 +1,7 @@
+export const filesystemSelectionScript = `const fs=require('node:fs');const p=require('node:path');
+const [mode,scope,encoded]=process.argv.slice(1);const options=JSON.parse(encoded);const root=process.cwd();let count=0,total=0;const files=[];
+const visit=directory=>{for(const name of fs.readdirSync(p.join(root,directory)).sort()){if(name==='.git'||name==='.outpost')continue;const path=p.posix.join(directory,name),info=fs.lstatSync(p.join(root,path));if(++count>100000)throw Error('Filesystem selection exceeds entry limit');if(info.isSymbolicLink())continue;if(info.isDirectory()){visit(path);continue}if(info.isFile())files.push(path)}};
+for(let ancestor=scope;ancestor!=='.';ancestor=p.dirname(ancestor)){if(fs.lstatSync(p.join(root,ancestor)).isSymbolicLink())throw Error('Filesystem selection cannot traverse links')}const info=fs.lstatSync(p.join(root,scope));if(info.isSymbolicLink())throw Error('Filesystem selection cannot traverse links');if(info.isDirectory())visit(scope==='.'?'':scope);else if(info.isFile())files.push(scope);
+if(mode==='list'){const text=files.join('\\0');if(Buffer.byteLength(text)>2000000)throw Error('Filesystem listing exceeds output limit');process.stdout.write(text);return}
+const expression=new RegExp(options.pattern,options.ignore_case?'i':'');const matches=[];for(const path of files){if(options.glob&&!p.matchesGlob(path,options.glob.includes('/')?options.glob:'**/'+options.glob))continue;const info=fs.lstatSync(p.join(root,path));if(info.size>4194304)continue;total+=info.size;if(total>33554432)throw Error('Filesystem search exceeds byte limit');const file=fs.openSync(p.join(root,path),fs.constants.O_RDONLY|fs.constants.O_NOFOLLOW);let data;try{const before=fs.fstatSync(file);if(!before.isFile()||before.size>4194304)continue;const bounded=Buffer.alloc(before.size+1);let length=0;while(length<bounded.length){const read=fs.readSync(file,bounded,length,bounded.length-length,length);if(!read)break;length+=read}if(length>before.size)throw Error('Filesystem search source grew');data=bounded.subarray(0,length);const after=fs.fstatSync(file);if(before.size!==after.size||before.mtimeMs!==after.mtimeMs||before.ctimeMs!==after.ctimeMs)throw Error('Filesystem search source changed')}finally{fs.closeSync(file)}if(data.subarray(0,8000).includes(0))continue;const lines=data.toString('utf8').split(/\\r?\\n/);for(let i=0;i<lines.length;i++){if(!expression.test(lines[i]))continue;matches.push(path+':'+(i+1)+':'+lines[i]);if(Buffer.byteLength(matches.join('\\n'))>200000)throw Error('Filesystem search exceeds output limit');if(matches.length>(options.max_results??200)){process.stdout.write(matches.slice(0,-1).join('\\n')+'\\n[more matches; refine the search]');return}}}const text=matches.join('\\n');if(Buffer.byteLength(text)>200000)throw Error('Filesystem search exceeds output limit');process.stdout.write(text);`;
+//# sourceMappingURL=filesystem-selection.constants.js.map

package/dist/adapters/tools/filesystem-selection.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem-selection.constants.js","sourceRoot":"","sources":["../../../src/adapters/tools/filesystem-selection.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,yBAAyB,GAAG;;;;;qnDAK4kD,CAAC","sourcesContent":["export const filesystemSelectionScript = `const fs=require('node:fs');const p=require('node:path');\nconst [mode,scope,encoded]=process.argv.slice(1);const options=JSON.parse(encoded);const root=process.cwd();let count=0,total=0;const files=[];\nconst visit=directory=>{for(const name of fs.readdirSync(p.join(root,directory)).sort()){if(name==='.git'||name==='.outpost')continue;const path=p.posix.join(directory,name),info=fs.lstatSync(p.join(root,path));if(++count>100000)throw Error('Filesystem selection exceeds entry limit');if(info.isSymbolicLink())continue;if(info.isDirectory()){visit(path);continue}if(info.isFile())files.push(path)}};\nfor(let ancestor=scope;ancestor!=='.';ancestor=p.dirname(ancestor)){if(fs.lstatSync(p.join(root,ancestor)).isSymbolicLink())throw Error('Filesystem selection cannot traverse links')}const info=fs.lstatSync(p.join(root,scope));if(info.isSymbolicLink())throw Error('Filesystem selection cannot traverse links');if(info.isDirectory())visit(scope==='.'?'':scope);else if(info.isFile())files.push(scope);\nif(mode==='list'){const text=files.join('\\\\0');if(Buffer.byteLength(text)>2000000)throw Error('Filesystem listing exceeds output limit');process.stdout.write(text);return}\nconst expression=new RegExp(options.pattern,options.ignore_case?'i':'');const matches=[];for(const path of files){if(options.glob&&!p.matchesGlob(path,options.glob.includes('/')?options.glob:'**/'+options.glob))continue;const info=fs.lstatSync(p.join(root,path));if(info.size>4194304)continue;total+=info.size;if(total>33554432)throw Error('Filesystem search exceeds byte limit');const file=fs.openSync(p.join(root,path),fs.constants.O_RDONLY|fs.constants.O_NOFOLLOW);let data;try{const before=fs.fstatSync(file);if(!before.isFile()||before.size>4194304)continue;const bounded=Buffer.alloc(before.size+1);let length=0;while(length<bounded.length){const read=fs.readSync(file,bounded,length,bounded.length-length,length);if(!read)break;length+=read}if(length>before.size)throw Error('Filesystem search source grew');data=bounded.subarray(0,length);const after=fs.fstatSync(file);if(before.size!==after.size||before.mtimeMs!==after.mtimeMs||before.ctimeMs!==after.ctimeMs)throw Error('Filesystem search source changed')}finally{fs.closeSync(file)}if(data.subarray(0,8000).includes(0))continue;const lines=data.toString('utf8').split(/\\\\r?\\\\n/);for(let i=0;i<lines.length;i++){if(!expression.test(lines[i]))continue;matches.push(path+':'+(i+1)+':'+lines[i]);if(Buffer.byteLength(matches.join('\\\\n'))>200000)throw Error('Filesystem search exceeds output limit');if(matches.length>(options.max_results??200)){process.stdout.write(matches.slice(0,-1).join('\\\\n')+'\\\\n[more matches; refine the search]');return}}}const text=matches.join('\\\\n');if(Buffer.byteLength(text)>200000)throw Error('Filesystem search exceeds output limit');process.stdout.write(text);`;\n"]}

package/dist/adapters/tools/git-tools.js

@@ -6,6 +6,7 @@ export function createHarnessGitTools() {
         name: "git",
         tools: [
             defineHarnessTool({
+                workspace: "git",
                 name: "git",
                 description: "Run a read-only Git command (status, diff, log or show) in the repository with extra arguments, for example log with -n 5 --oneline.",
                 readOnly: true,

package/dist/adapters/tools/git-tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"git-tools.js","sourceRoot":"","sources":["../../../src/adapters/tools/git-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAG9B,MAAM,UAAU,qBAAqB;IACnC,OAAO,oBAAoB,CAAC;QAC1B,IAAI,EAAE,KAAK;QACX,KAAK,EAAE;YACL,iBAAiB,CAAC;gBAChB,IAAI,EAAE,KAAK;gBACX,WAAW,EACT,sIAAsI;gBACxI,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,iBAAiB,CAAC,EAAE;wBACzC,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;qBACxD;oBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;oBACrB,oBAAoB,EAAE,KAAK;iBAC5B;gBACD,SAAS,EAAE,CAAC,KAAe,EAAE,EAAE,CAAC,CAAC;oBAC/B,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;iBACtE,CAAC;gBACF,KAAK,CAAC,OAAO,CAAC,KAAe,EAAE,OAAO;oBACpC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACxD,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAClE,CAAC;oBACF,IAAI,OAAO;wBACT,OAAO;4BACL,OAAO,EAAE,2BAA2B,OAAO,EAAE;4BAC7C,OAAO,EAAE,IAAI;yBACd,CAAC;oBACJ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;wBAC1C,UAAU,EAAE,KAAK;wBACjB,SAAS,EAAE;4BACT,YAAY;4BACZ,KAAK,CAAC,OAAO;4BACb,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ;gCAC5B,CAAC,CAAC,EAAE;gCACJ,CAAC,CAAC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;4BACvC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;yBAC3B;wBACD,KAAK,EAAE,EAAE;wBACT,MAAM,EAAE,WAAW,CAAC,iBAAiB;wBACrC,MAAM,EAAE,OAAO,CAAC,MAAM;qBACvB,CAAC,CAAC;oBACH,OAAO;wBACL,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC;wBAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;qBAC7B,CAAC;gBACJ,CAAC;aACF,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { defineHarnessTool, defineHarnessToolset } from \"../../domain/tool.ts\";\nimport type { HarnessToolset } from \"../../domain/tool.types.ts\";\nimport { commandOutput } from \"./sandbox-files.ts\";\nimport {\n  GIT_BLOCKED_OPTIONS,\n  GIT_READ_COMMANDS,\n  TOOL_LIMITS,\n} from \"./tools.constants.ts\";\nimport type { GitInput } from \"./tools.types.ts\";\n\nexport function createHarnessGitTools(): HarnessToolset {\n  return defineHarnessToolset({\n    name: \"git\",\n    tools: [\n      defineHarnessTool({\n        name: \"git\",\n        description:\n          \"Run a read-only Git command (status, diff, log or show) in the repository with extra arguments, for example log with -n 5 --oneline.\",\n        readOnly: true,\n        input: {\n          type: \"object\",\n          properties: {\n            command: { enum: [...GIT_READ_COMMANDS] },\n            arguments: { type: \"array\", items: { type: \"string\" } },\n          },\n          required: [\"command\"],\n          additionalProperties: false,\n        },\n        resources: (input: GitInput) => ({\n          command: [\"git\", input.command, ...(input.arguments ?? [])].join(\" \"),\n        }),\n        async execute(input: GitInput, context) {\n          const blocked = (input.arguments ?? []).find((argument) =>\n            GIT_BLOCKED_OPTIONS.some((option) => argument.startsWith(option)),\n          );\n          if (blocked)\n            return {\n              content: `Unsupported Git option: ${blocked}`,\n              isError: true,\n            };\n          const result = await context.sandbox.invoke({\n            executable: \"git\",\n            arguments: [\n              \"--no-pager\",\n              input.command,\n              ...(input.command === \"status\"\n                ? []\n                : [\"--no-ext-diff\", \"--no-textconv\"]),\n              ...(input.arguments ?? []),\n            ],\n            stdin: \"\",\n            retain: TOOL_LIMITS.commandCharacters,\n            signal: context.signal,\n          });\n          return {\n            content: commandOutput(result),\n            isError: result.status !== 0,\n          };\n        },\n      }),\n    ],\n  });\n}\n"]}
+{"version":3,"file":"git-tools.js","sourceRoot":"","sources":["../../../src/adapters/tools/git-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAG9B,MAAM,UAAU,qBAAqB;IACnC,OAAO,oBAAoB,CAAC;QAC1B,IAAI,EAAE,KAAK;QACX,KAAK,EAAE;YACL,iBAAiB,CAAC;gBAChB,SAAS,EAAE,KAAK;gBAChB,IAAI,EAAE,KAAK;gBACX,WAAW,EACT,sIAAsI;gBACxI,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,iBAAiB,CAAC,EAAE;wBACzC,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;qBACxD;oBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;oBACrB,oBAAoB,EAAE,KAAK;iBAC5B;gBACD,SAAS,EAAE,CAAC,KAAe,EAAE,EAAE,CAAC,CAAC;oBAC/B,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;iBACtE,CAAC;gBACF,KAAK,CAAC,OAAO,CAAC,KAAe,EAAE,OAAO;oBACpC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACxD,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAClE,CAAC;oBACF,IAAI,OAAO;wBACT,OAAO;4BACL,OAAO,EAAE,2BAA2B,OAAO,EAAE;4BAC7C,OAAO,EAAE,IAAI;yBACd,CAAC;oBACJ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;wBAC1C,UAAU,EAAE,KAAK;wBACjB,SAAS,EAAE;4BACT,YAAY;4BACZ,KAAK,CAAC,OAAO;4BACb,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ;gCAC5B,CAAC,CAAC,EAAE;gCACJ,CAAC,CAAC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;4BACvC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;yBAC3B;wBACD,KAAK,EAAE,EAAE;wBACT,MAAM,EAAE,WAAW,CAAC,iBAAiB;wBACrC,MAAM,EAAE,OAAO,CAAC,MAAM;qBACvB,CAAC,CAAC;oBACH,OAAO;wBACL,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC;wBAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;qBAC7B,CAAC;gBACJ,CAAC;aACF,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { defineHarnessTool, defineHarnessToolset } from \"../../domain/tool.ts\";\nimport type { HarnessToolset } from \"../../domain/tool.types.ts\";\nimport { commandOutput } from \"./sandbox-files.ts\";\nimport {\n  GIT_BLOCKED_OPTIONS,\n  GIT_READ_COMMANDS,\n  TOOL_LIMITS,\n} from \"./tools.constants.ts\";\nimport type { GitInput } from \"./tools.types.ts\";\n\nexport function createHarnessGitTools(): HarnessToolset {\n  return defineHarnessToolset({\n    name: \"git\",\n    tools: [\n      defineHarnessTool({\n        workspace: \"git\",\n        name: \"git\",\n        description:\n          \"Run a read-only Git command (status, diff, log or show) in the repository with extra arguments, for example log with -n 5 --oneline.\",\n        readOnly: true,\n        input: {\n          type: \"object\",\n          properties: {\n            command: { enum: [...GIT_READ_COMMANDS] },\n            arguments: { type: \"array\", items: { type: \"string\" } },\n          },\n          required: [\"command\"],\n          additionalProperties: false,\n        },\n        resources: (input: GitInput) => ({\n          command: [\"git\", input.command, ...(input.arguments ?? [])].join(\" \"),\n        }),\n        async execute(input: GitInput, context) {\n          const blocked = (input.arguments ?? []).find((argument) =>\n            GIT_BLOCKED_OPTIONS.some((option) => argument.startsWith(option)),\n          );\n          if (blocked)\n            return {\n              content: `Unsupported Git option: ${blocked}`,\n              isError: true,\n            };\n          const result = await context.sandbox.invoke({\n            executable: \"git\",\n            arguments: [\n              \"--no-pager\",\n              input.command,\n              ...(input.command === \"status\"\n                ? []\n                : [\"--no-ext-diff\", \"--no-textconv\"]),\n              ...(input.arguments ?? []),\n            ],\n            stdin: \"\",\n            retain: TOOL_LIMITS.commandCharacters,\n            signal: context.signal,\n          });\n          return {\n            content: commandOutput(result),\n            isError: result.status !== 0,\n          };\n        },\n      }),\n    ],\n  });\n}\n"]}

package/dist/adapters/tools/search-tools.d.ts

@@ -1,2 +1,3 @@
 import type { HarnessToolset } from "../../domain/tool.types.ts";
-export declare function createHarnessSearchTools(): HarnessToolset;
+import type { FileSelectionOptions } from "./tools.types.ts";
+export declare function createHarnessSearchTools(options?: FileSelectionOptions): HarnessToolset;

package/dist/adapters/tools/search-tools.js

@@ -1,13 +1,24 @@
 import { defineHarnessTool, defineHarnessToolset } from "../../domain/tool.js";
 import { anywhere, repositoryPath } from "./sandbox-files.js";
 import { TOOL_LIMITS } from "./tools.constants.js";
-export function createHarnessSearchTools() {
-    return defineHarnessToolset({ name: "search", tools: [searchTool()] });
+import { filesystemSelectionScript } from "./filesystem-selection.constants.js";
+import { invariant } from "../../domain/errors.js";
+export function createHarnessSearchTools(options = {}) {
+    invariant(options.selection === undefined ||
+        options.selection === "git" ||
+        options.selection === "filesystem", "Search selection must be git or filesystem");
+    return defineHarnessToolset({
+        name: "search",
+        tools: [searchTool(options.selection ?? "git")],
+    });
 }
-function searchTool() {
+function searchTool(selection) {
     return defineHarnessTool({
+        ...(selection === "git" ? { workspace: "git" } : {}),
         name: "search",
-        description: "Search repository files that are tracked or not ignored by Git for an extended regular expression. Returns path:line:text matches. A glob without a slash matches file names at any depth.",
+        description: selection === "git"
+            ? "Search files tracked or not ignored by Git for an extended regular expression. Returns path:line:text matches."
+            : "Search ordinary workspace files for a JavaScript regular expression without following links or applying Git ignore rules. Returns path:line:text matches.",
         readOnly: true,
         input: {
             type: "object",
@@ -28,31 +39,50 @@ function searchTool() {
         resources: (input) => ({ paths: [input.path ?? "."] }),
         async execute(input, context) {
             const scope = repositoryPath(input.path ?? ".") || ".";
+            const invocation = selection === "filesystem"
+                ? {
+                    executable: "node",
+                    arguments: [
+                        "-e",
+                        `(function(){${filesystemSelectionScript}})()`,
+                        "search",
+                        scope,
+                        JSON.stringify(input),
+                    ],
+                }
+                : {
+                    executable: "git",
+                    arguments: [
+                        "grep",
+                        "--untracked",
+                        "-n",
+                        "-I",
+                        "--no-color",
+                        "--full-name",
+                        "-E",
+                        ...(input.ignore_case ? ["-i"] : []),
+                        "-e",
+                        input.pattern,
+                        "--",
+                        input.glob
+                            ? `:(glob)${scope === "." ? "" : `${scope}/`}${anywhere(input.glob)}`
+                            : scope,
+                    ],
+                };
             const result = await context.sandbox.invoke({
-                executable: "git",
-                arguments: [
-                    "grep",
-                    "--untracked",
-                    "-n",
-                    "-I",
-                    "--no-color",
-                    "--full-name",
-                    "-E",
-                    ...(input.ignore_case ? ["-i"] : []),
-                    "-e",
-                    input.pattern,
-                    "--",
-                    input.glob
-                        ? `:(glob)${scope === "." ? "" : `${scope}/`}${anywhere(input.glob)}`
-                        : scope,
-                ],
+                ...invocation,
                 retain: TOOL_LIMITS.commandCharacters,
                 signal: context.signal,
             });
             if (result.status === 1)
                 return "No matches.";
             if (result.status !== 0)
-                return { content: result.stderr || "git grep failed", isError: true };
+                return {
+                    content: result.stderr || "File search failed",
+                    isError: true,
+                };
+            if (!result.stdout)
+                return "No matches.";
             const limit = input.max_results ?? TOOL_LIMITS.searchMatches;
             const matches = result.stdout.split("\n").filter(Boolean);
             const shown = matches.slice(0, limit);

package/dist/adapters/tools/search-tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"search-tools.js","sourceRoot":"","sources":["../../../src/adapters/tools/search-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,MAAM,UAAU,wBAAwB;IACtC,OAAO,oBAAoB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,iBAAiB,CAAC;QACvB,IAAI,EAAE,QAAQ;QACd,WAAW,EACT,4LAA4L;QAC9L,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACzC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACtC,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBAChC,WAAW,EAAE;oBACX,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,CAAC;oBACV,OAAO,EAAE,WAAW,CAAC,aAAa;iBACnC;aACF;YACD,QAAQ,EAAE,CAAC,SAAS,CAAC;YACrB,oBAAoB,EAAE,KAAK;SAC5B;QACD,SAAS,EAAE,CAAC,KAAkB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACnE,KAAK,CAAC,OAAO,CAAC,KAAkB,EAAE,OAAO;YACvC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC1C,UAAU,EAAE,KAAK;gBACjB,SAAS,EAAE;oBACT,MAAM;oBACN,aAAa;oBACb,IAAI;oBACJ,IAAI;oBACJ,YAAY;oBACZ,aAAa;oBACb,IAAI;oBACJ,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpC,IAAI;oBACJ,KAAK,CAAC,OAAO;oBACb,IAAI;oBACJ,KAAK,CAAC,IAAI;wBACR,CAAC,CAAC,UAAU,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;wBACrE,CAAC,CAAC,KAAK;iBACV;gBACD,MAAM,EAAE,WAAW,CAAC,iBAAiB;gBACrC,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,aAAa,CAAC;YAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBACrB,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,IAAI,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACxE,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,IAAI,WAAW,CAAC,aAAa,CAAC;YAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;gBAClC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,mCAAmC;gBAC3F,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { defineHarnessTool, defineHarnessToolset } from \"../../domain/tool.ts\";\nimport type { HarnessToolset } from \"../../domain/tool.types.ts\";\nimport { anywhere, repositoryPath } from \"./sandbox-files.ts\";\nimport { TOOL_LIMITS } from \"./tools.constants.ts\";\nimport type { SearchInput } from \"./tools.types.ts\";\n\nexport function createHarnessSearchTools(): HarnessToolset {\n  return defineHarnessToolset({ name: \"search\", tools: [searchTool()] });\n}\n\nfunction searchTool() {\n  return defineHarnessTool({\n    name: \"search\",\n    description:\n      \"Search repository files that are tracked or not ignored by Git for an extended regular expression. Returns path:line:text matches. A glob without a slash matches file names at any depth.\",\n    readOnly: true,\n    input: {\n      type: \"object\",\n      properties: {\n        pattern: { type: \"string\", minLength: 1 },\n        path: { type: \"string\" },\n        glob: { type: \"string\", minLength: 1 },\n        ignore_case: { type: \"boolean\" },\n        max_results: {\n          type: \"integer\",\n          minimum: 1,\n          maximum: TOOL_LIMITS.searchMatches,\n        },\n      },\n      required: [\"pattern\"],\n      additionalProperties: false,\n    },\n    resources: (input: SearchInput) => ({ paths: [input.path ?? \".\"] }),\n    async execute(input: SearchInput, context) {\n      const scope = repositoryPath(input.path ?? \".\") || \".\";\n      const result = await context.sandbox.invoke({\n        executable: \"git\",\n        arguments: [\n          \"grep\",\n          \"--untracked\",\n          \"-n\",\n          \"-I\",\n          \"--no-color\",\n          \"--full-name\",\n          \"-E\",\n          ...(input.ignore_case ? [\"-i\"] : []),\n          \"-e\",\n          input.pattern,\n          \"--\",\n          input.glob\n            ? `:(glob)${scope === \".\" ? \"\" : `${scope}/`}${anywhere(input.glob)}`\n            : scope,\n        ],\n        retain: TOOL_LIMITS.commandCharacters,\n        signal: context.signal,\n      });\n      if (result.status === 1) return \"No matches.\";\n      if (result.status !== 0)\n        return { content: result.stderr || \"git grep failed\", isError: true };\n      const limit = input.max_results ?? TOOL_LIMITS.searchMatches;\n      const matches = result.stdout.split(\"\\n\").filter(Boolean);\n      const shown = matches.slice(0, limit);\n      return shown.length < matches.length\n        ? `${shown.join(\"\\n\")}\\n[${matches.length - shown.length} more matches; refine the search]`\n        : shown.join(\"\\n\");\n    },\n  });\n}\n"]}
+{"version":3,"file":"search-tools.js","sourceRoot":"","sources":["../../../src/adapters/tools/search-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,MAAM,UAAU,wBAAwB,CACtC,UAAgC,EAAE;IAElC,SAAS,CACP,OAAO,CAAC,SAAS,KAAK,SAAS;QAC7B,OAAO,CAAC,SAAS,KAAK,KAAK;QAC3B,OAAO,CAAC,SAAS,KAAK,YAAY,EACpC,4CAA4C,CAC7C,CAAC;IACF,OAAO,oBAAoB,CAAC;QAC1B,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,SAA+B;IACjD,OAAO,iBAAiB,CAAC;QACvB,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,IAAI,EAAE,QAAQ;QACd,WAAW,EACT,SAAS,KAAK,KAAK;YACjB,CAAC,CAAC,gHAAgH;YAClH,CAAC,CAAC,2JAA2J;QACjK,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACzC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACtC,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBAChC,WAAW,EAAE;oBACX,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,CAAC;oBACV,OAAO,EAAE,WAAW,CAAC,aAAa;iBACnC;aACF;YACD,QAAQ,EAAE,CAAC,SAAS,CAAC;YACrB,oBAAoB,EAAE,KAAK;SAC5B;QACD,SAAS,EAAE,CAAC,KAAkB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACnE,KAAK,CAAC,OAAO,CAAC,KAAkB,EAAE,OAAO;YACvC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC;YACvD,MAAM,UAAU,GACd,SAAS,KAAK,YAAY;gBACxB,CAAC,CAAC;oBACE,UAAU,EAAE,MAAM;oBAClB,SAAS,EAAE;wBACT,IAAI;wBACJ,eAAe,yBAAyB,MAAM;wBAC9C,QAAQ;wBACR,KAAK;wBACL,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;qBACtB;iBACF;gBACH,CAAC,CAAC;oBACE,UAAU,EAAE,KAAK;oBACjB,SAAS,EAAE;wBACT,MAAM;wBACN,aAAa;wBACb,IAAI;wBACJ,IAAI;wBACJ,YAAY;wBACZ,aAAa;wBACb,IAAI;wBACJ,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBACpC,IAAI;wBACJ,KAAK,CAAC,OAAO;wBACb,IAAI;wBACJ,KAAK,CAAC,IAAI;4BACR,CAAC,CAAC,UAAU,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;4BACrE,CAAC,CAAC,KAAK;qBACV;iBACF,CAAC;YACR,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC1C,GAAG,UAAU;gBACb,MAAM,EAAE,WAAW,CAAC,iBAAiB;gBACrC,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,aAAa,CAAC;YAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBACrB,OAAO;oBACL,OAAO,EAAE,MAAM,CAAC,MAAM,IAAI,oBAAoB;oBAC9C,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,OAAO,aAAa,CAAC;YACzC,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,IAAI,WAAW,CAAC,aAAa,CAAC;YAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;gBAClC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,mCAAmC;gBAC3F,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { defineHarnessTool, defineHarnessToolset } from \"../../domain/tool.ts\";\nimport type { HarnessToolset } from \"../../domain/tool.types.ts\";\nimport { anywhere, repositoryPath } from \"./sandbox-files.ts\";\nimport { TOOL_LIMITS } from \"./tools.constants.ts\";\nimport type { FileSelectionOptions, SearchInput } from \"./tools.types.ts\";\nimport { filesystemSelectionScript } from \"./filesystem-selection.constants.ts\";\nimport { invariant } from \"../../domain/errors.ts\";\n\nexport function createHarnessSearchTools(\n  options: FileSelectionOptions = {},\n): HarnessToolset {\n  invariant(\n    options.selection === undefined ||\n      options.selection === \"git\" ||\n      options.selection === \"filesystem\",\n    \"Search selection must be git or filesystem\",\n  );\n  return defineHarnessToolset({\n    name: \"search\",\n    tools: [searchTool(options.selection ?? \"git\")],\n  });\n}\n\nfunction searchTool(selection: \"git\" | \"filesystem\") {\n  return defineHarnessTool({\n    ...(selection === \"git\" ? { workspace: \"git\" as const } : {}),\n    name: \"search\",\n    description:\n      selection === \"git\"\n        ? \"Search files tracked or not ignored by Git for an extended regular expression. Returns path:line:text matches.\"\n        : \"Search ordinary workspace files for a JavaScript regular expression without following links or applying Git ignore rules. Returns path:line:text matches.\",\n    readOnly: true,\n    input: {\n      type: \"object\",\n      properties: {\n        pattern: { type: \"string\", minLength: 1 },\n        path: { type: \"string\" },\n        glob: { type: \"string\", minLength: 1 },\n        ignore_case: { type: \"boolean\" },\n        max_results: {\n          type: \"integer\",\n          minimum: 1,\n          maximum: TOOL_LIMITS.searchMatches,\n        },\n      },\n      required: [\"pattern\"],\n      additionalProperties: false,\n    },\n    resources: (input: SearchInput) => ({ paths: [input.path ?? \".\"] }),\n    async execute(input: SearchInput, context) {\n      const scope = repositoryPath(input.path ?? \".\") || \".\";\n      const invocation =\n        selection === \"filesystem\"\n          ? {\n              executable: \"node\",\n              arguments: [\n                \"-e\",\n                `(function(){${filesystemSelectionScript}})()`,\n                \"search\",\n                scope,\n                JSON.stringify(input),\n              ],\n            }\n          : {\n              executable: \"git\",\n              arguments: [\n                \"grep\",\n                \"--untracked\",\n                \"-n\",\n                \"-I\",\n                \"--no-color\",\n                \"--full-name\",\n                \"-E\",\n                ...(input.ignore_case ? [\"-i\"] : []),\n                \"-e\",\n                input.pattern,\n                \"--\",\n                input.glob\n                  ? `:(glob)${scope === \".\" ? \"\" : `${scope}/`}${anywhere(input.glob)}`\n                  : scope,\n              ],\n            };\n      const result = await context.sandbox.invoke({\n        ...invocation,\n        retain: TOOL_LIMITS.commandCharacters,\n        signal: context.signal,\n      });\n      if (result.status === 1) return \"No matches.\";\n      if (result.status !== 0)\n        return {\n          content: result.stderr || \"File search failed\",\n          isError: true,\n        };\n      if (!result.stdout) return \"No matches.\";\n      const limit = input.max_results ?? TOOL_LIMITS.searchMatches;\n      const matches = result.stdout.split(\"\\n\").filter(Boolean);\n      const shown = matches.slice(0, limit);\n      return shown.length < matches.length\n        ? `${shown.join(\"\\n\")}\\n[${matches.length - shown.length} more matches; refine the search]`\n        : shown.join(\"\\n\");\n    },\n  });\n}\n"]}

package/dist/adapters/tools/tools.types.d.ts

@@ -1,4 +1,7 @@
 import type { GIT_READ_COMMANDS } from "./tools.constants.ts";
+export interface FileSelectionOptions {
+    readonly selection?: "git" | "filesystem";
+}
 export interface ReadFileInput {
     readonly path: string;
     readonly offset?: number;

package/dist/adapters/tools/tools.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"tools.types.js","sourceRoot":"","sources":["../../../src/adapters/tools/tools.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { GIT_READ_COMMANDS } from \"./tools.constants.ts\";\n\nexport interface ReadFileInput {\n  readonly path: string;\n  readonly offset?: number;\n  readonly limit?: number;\n}\n\nexport interface ListFilesInput {\n  readonly path?: string;\n  readonly pattern?: string;\n}\n\nexport interface WriteFileInput {\n  readonly path: string;\n  readonly content: string;\n}\n\nexport interface EditFileInput {\n  readonly path: string;\n  readonly old_text: string;\n  readonly new_text: string;\n  readonly replace_all?: boolean;\n}\n\nexport interface SearchInput {\n  readonly pattern: string;\n  readonly path?: string;\n  readonly glob?: string;\n  readonly ignore_case?: boolean;\n  readonly max_results?: number;\n}\n\nexport interface ShellInput {\n  readonly command: string;\n}\n\nexport interface GitInput {\n  readonly command: (typeof GIT_READ_COMMANDS)[number];\n  readonly arguments?: readonly string[];\n}\n\nexport interface ShellToolsOptions {\n  readonly deadlineMs?: number;\n}\n\nexport interface SandboxFile {\n  readonly staged: string;\n  readonly bytes: Buffer;\n}\n"]}
+{"version":3,"file":"tools.types.js","sourceRoot":"","sources":["../../../src/adapters/tools/tools.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { GIT_READ_COMMANDS } from \"./tools.constants.ts\";\n\nexport interface FileSelectionOptions {\n  readonly selection?: \"git\" | \"filesystem\";\n}\n\nexport interface ReadFileInput {\n  readonly path: string;\n  readonly offset?: number;\n  readonly limit?: number;\n}\n\nexport interface ListFilesInput {\n  readonly path?: string;\n  readonly pattern?: string;\n}\n\nexport interface WriteFileInput {\n  readonly path: string;\n  readonly content: string;\n}\n\nexport interface EditFileInput {\n  readonly path: string;\n  readonly old_text: string;\n  readonly new_text: string;\n  readonly replace_all?: boolean;\n}\n\nexport interface SearchInput {\n  readonly pattern: string;\n  readonly path?: string;\n  readonly glob?: string;\n  readonly ignore_case?: boolean;\n  readonly max_results?: number;\n}\n\nexport interface ShellInput {\n  readonly command: string;\n}\n\nexport interface GitInput {\n  readonly command: (typeof GIT_READ_COMMANDS)[number];\n  readonly arguments?: readonly string[];\n}\n\nexport interface ShellToolsOptions {\n  readonly deadlineMs?: number;\n}\n\nexport interface SandboxFile {\n  readonly staged: string;\n  readonly bytes: Buffer;\n}\n"]}