@elie-laloum/outpost 4.2.0 → 5.0.0

package/dist/adapters/models/stop-reasons.constants.d.ts

@@ -0,0 +1,4 @@
+import type { ModelStopReason } from "../../domain/model.types.ts";
+export declare const ANTHROPIC_STOP_REASONS: Readonly<Record<string, ModelStopReason>>;
+export declare const CHAT_FINISH_REASONS: Readonly<Record<string, ModelStopReason>>;
+export declare const RESPONSES_INCOMPLETE_REASONS: Readonly<Record<string, ModelStopReason>>;

package/dist/adapters/models/stop-reasons.constants.js

@@ -0,0 +1,19 @@
+export const ANTHROPIC_STOP_REASONS = {
+    end_turn: "end",
+    stop_sequence: "end",
+    tool_use: "tool-calls",
+    max_tokens: "max-tokens",
+    model_context_window_exceeded: "max-tokens",
+    refusal: "refusal",
+};
+export const CHAT_FINISH_REASONS = {
+    stop: "end",
+    tool_calls: "tool-calls",
+    length: "max-tokens",
+    content_filter: "refusal",
+};
+export const RESPONSES_INCOMPLETE_REASONS = {
+    max_output_tokens: "max-tokens",
+    content_filter: "refusal",
+};
+//# sourceMappingURL=stop-reasons.constants.js.map

package/dist/adapters/models/stop-reasons.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stop-reasons.constants.js","sourceRoot":"","sources":["../../../src/adapters/models/stop-reasons.constants.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,sBAAsB,GACjC;IACE,QAAQ,EAAE,KAAK;IACf,aAAa,EAAE,KAAK;IACpB,QAAQ,EAAE,YAAY;IACtB,UAAU,EAAE,YAAY;IACxB,6BAA6B,EAAE,YAAY;IAC3C,OAAO,EAAE,SAAS;CACnB,CAAC;AAEJ,MAAM,CAAC,MAAM,mBAAmB,GAA8C;IAC5E,IAAI,EAAE,KAAK;IACX,UAAU,EAAE,YAAY;IACxB,MAAM,EAAE,YAAY;IACpB,cAAc,EAAE,SAAS;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAErC;IACF,iBAAiB,EAAE,YAAY;IAC/B,cAAc,EAAE,SAAS;CAC1B,CAAC","sourcesContent":["import type { ModelStopReason } from \"../../domain/model.types.ts\";\n\nexport const ANTHROPIC_STOP_REASONS: Readonly<Record<string, ModelStopReason>> =\n  {\n    end_turn: \"end\",\n    stop_sequence: \"end\",\n    tool_use: \"tool-calls\",\n    max_tokens: \"max-tokens\",\n    model_context_window_exceeded: \"max-tokens\",\n    refusal: \"refusal\",\n  };\n\nexport const CHAT_FINISH_REASONS: Readonly<Record<string, ModelStopReason>> = {\n  stop: \"end\",\n  tool_calls: \"tool-calls\",\n  length: \"max-tokens\",\n  content_filter: \"refusal\",\n};\n\nexport const RESPONSES_INCOMPLETE_REASONS: Readonly<\n  Record<string, ModelStopReason>\n> = {\n  max_output_tokens: \"max-tokens\",\n  content_filter: \"refusal\",\n};\n"]}

package/dist/adapters/models/stream-events.d.ts

@@ -0,0 +1,3 @@
+import type { ServerSentEvent } from "../../infrastructure/sse.types.ts";
+export declare function eventData(event: ServerSentEvent): Record<string, unknown>;
+export declare function streamFailure(data: Record<string, unknown>): never;

package/dist/adapters/models/stream-events.js

@@ -0,0 +1,22 @@
+import { OutpostError } from "../../domain/errors.js";
+import { object } from "./model-response.js";
+export function eventData(event) {
+    let value;
+    try {
+        value = JSON.parse(event.data);
+    }
+    catch {
+        throw new OutpostError("response", "Model stream event is not valid JSON");
+    }
+    return object(value);
+}
+export function streamFailure(data) {
+    const error = data.error;
+    const type = error && typeof error === "object" && "type" in error
+        ? String(error.type)
+        : undefined;
+    throw new OutpostError("provider", "Model stream reported an error", {
+        ...(type ? { type } : {}),
+    });
+}
+//# sourceMappingURL=stream-events.js.map

package/dist/adapters/models/stream-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-events.js","sourceRoot":"","sources":["../../../src/adapters/models/stream-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAE7C,MAAM,UAAU,SAAS,CAAC,KAAsB;IAC9C,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,sCAAsC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAA6B;IACzD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzB,MAAM,IAAI,GACR,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK;QACnD,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,gCAAgC,EAAE;QACnE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1B,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { OutpostError } from \"../../domain/errors.ts\";\nimport type { ServerSentEvent } from \"../../infrastructure/sse.types.ts\";\nimport { object } from \"./model-response.ts\";\n\nexport function eventData(event: ServerSentEvent): Record<string, unknown> {\n  let value: unknown;\n  try {\n    value = JSON.parse(event.data);\n  } catch {\n    throw new OutpostError(\"response\", \"Model stream event is not valid JSON\");\n  }\n  return object(value);\n}\n\nexport function streamFailure(data: Record<string, unknown>): never {\n  const error = data.error;\n  const type =\n    error && typeof error === \"object\" && \"type\" in error\n      ? String(error.type)\n      : undefined;\n  throw new OutpostError(\"provider\", \"Model stream reported an error\", {\n    ...(type ? { type } : {}),\n  });\n}\n"]}

package/dist/adapters/tools/edit-tools.d.ts

@@ -0,0 +1,2 @@
+import type { HarnessToolset } from "../../domain/tool.types.ts";
+export declare function harnessEditTools(): HarnessToolset;

package/dist/adapters/tools/edit-tools.js

@@ -0,0 +1,84 @@
+import { writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { defineHarnessTool, defineHarnessToolset } from "../../domain/tool.js";
+import { digest, downloadFile, repositoryPath, sandboxPath, withStaging, } from "./sandbox-files.js";
+export function harnessEditTools() {
+    return defineHarnessToolset({
+        name: "edit",
+        tools: [writeFileTool(), editFileTool()],
+    });
+}
+function writeFileTool() {
+    return defineHarnessTool({
+        name: "write_file",
+        description: "Create or replace a UTF-8 file relative to the repository root with the given content. Prefer edit_file to change part of an existing file.",
+        input: {
+            type: "object",
+            properties: {
+                path: { type: "string", minLength: 1 },
+                content: { type: "string" },
+            },
+            required: ["path", "content"],
+            additionalProperties: false,
+        },
+        resources: (input) => ({ paths: [input.path] }),
+        execute: (input, context) => withStaging(async (directory) => {
+            repositoryPath(input.path);
+            const staged = join(directory, "file");
+            await writeFile(staged, input.content);
+            await upload(context, staged, input.path);
+            return `Wrote ${Buffer.byteLength(input.content)} bytes to ${input.path}`;
+        }),
+    });
+}
+function editFileTool() {
+    return defineHarnessTool({
+        name: "edit_file",
+        description: "Replace an exact text in a UTF-8 file. old_text must appear exactly once unless replace_all is true; include surrounding lines to make it unique.",
+        input: {
+            type: "object",
+            properties: {
+                path: { type: "string", minLength: 1 },
+                old_text: { type: "string", minLength: 1 },
+                new_text: { type: "string" },
+                replace_all: { type: "boolean" },
+            },
+            required: ["path", "old_text", "new_text"],
+            additionalProperties: false,
+        },
+        resources: (input) => ({ paths: [input.path] }),
+        execute: (input, context) => withStaging(async (directory) => {
+            const original = await downloadFile(context, input.path, join(directory, "file"));
+            const text = original.bytes.toString("utf8");
+            const occurrences = text.split(input.old_text).length - 1;
+            if (occurrences === 0)
+                return {
+                    content: `old_text was not found in ${input.path}`,
+                    isError: true,
+                };
+            if (occurrences > 1 && !input.replace_all)
+                return {
+                    content: `old_text appears ${occurrences} times in ${input.path}; add surrounding lines or set replace_all`,
+                    isError: true,
+                };
+            const updated = input.replace_all
+                ? text.split(input.old_text).join(input.new_text)
+                : text.replace(input.old_text, () => input.new_text);
+            const current = await downloadFile(context, input.path, join(directory, "current"));
+            if (digest(current.bytes) !== digest(original.bytes))
+                return {
+                    content: `${input.path} changed during the edit; read it again and retry`,
+                    isError: true,
+                };
+            await writeFile(original.staged, updated);
+            await upload(context, original.staged, input.path);
+            return `Replaced ${input.replace_all ? occurrences : 1} occurrence(s) in ${input.path}`;
+        }),
+    });
+}
+function upload(context, staged, path) {
+    return context.sandbox.upload(staged, sandboxPath(context, path), {
+        signal: context.signal,
+    });
+}
+//# sourceMappingURL=edit-tools.js.map

package/dist/adapters/tools/edit-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"edit-tools.js","sourceRoot":"","sources":["../../../src/adapters/tools/edit-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAK/E,OAAO,EACL,MAAM,EACN,YAAY,EACZ,cAAc,EACd,WAAW,EACX,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAG5B,MAAM,UAAU,gBAAgB;IAC9B,OAAO,oBAAoB,CAAC;QAC1B,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,CAAC;KACzC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,iBAAiB,CAAC;QACvB,IAAI,EAAE,YAAY;QAClB,WAAW,EACT,6IAA6I;QAC/I,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACtC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC5B;YACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;YAC7B,oBAAoB,EAAE,KAAK;SAC5B;QACD,SAAS,EAAE,CAAC,KAAqB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,OAAO,EAAE,CAAC,KAAqB,EAAE,OAAO,EAAE,EAAE,CAC1C,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;YAC9B,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACvC,MAAM,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACvC,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,OAAO,SAAS,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5E,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,iBAAiB,CAAC;QACvB,IAAI,EAAE,WAAW;QACjB,WAAW,EACT,mJAAmJ;QACrJ,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACtC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;aACjC;YACD,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC;YAC1C,oBAAoB,EAAE,KAAK;SAC5B;QACD,SAAS,EAAE,CAAC,KAAoB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,CAAC,KAAoB,EAAE,OAAO,EAAE,EAAE,CACzC,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;YAC9B,MAAM,QAAQ,GAAG,MAAM,YAAY,CACjC,OAAO,EACP,KAAK,CAAC,IAAI,EACV,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CACxB,CAAC;YACF,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YAC1D,IAAI,WAAW,KAAK,CAAC;gBACnB,OAAO;oBACL,OAAO,EAAE,6BAA6B,KAAK,CAAC,IAAI,EAAE;oBAClD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,IAAI,WAAW,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW;gBACvC,OAAO;oBACL,OAAO,EAAE,oBAAoB,WAAW,aAAa,KAAK,CAAC,IAAI,4CAA4C;oBAC3G,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW;gBAC/B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACjD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACvD,MAAM,OAAO,GAAG,MAAM,YAAY,CAChC,OAAO,EACP,KAAK,CAAC,IAAI,EACV,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAC3B,CAAC;YACF,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAClD,OAAO;oBACL,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,mDAAmD;oBACzE,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC1C,MAAM,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACnD,OAAO,YAAY,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,qBAAqB,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1F,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,OAA2B,EAAE,MAAc,EAAE,IAAY;IACvE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;QAChE,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport { defineHarnessTool, defineHarnessToolset } from \"../../domain/tool.ts\";\nimport type {\n  HarnessToolContext,\n  HarnessToolset,\n} from \"../../domain/tool.types.ts\";\nimport {\n  digest,\n  downloadFile,\n  repositoryPath,\n  sandboxPath,\n  withStaging,\n} from \"./sandbox-files.ts\";\nimport type { EditFileInput, WriteFileInput } from \"./tools.types.ts\";\n\nexport function harnessEditTools(): HarnessToolset {\n  return defineHarnessToolset({\n    name: \"edit\",\n    tools: [writeFileTool(), editFileTool()],\n  });\n}\n\nfunction writeFileTool() {\n  return defineHarnessTool({\n    name: \"write_file\",\n    description:\n      \"Create or replace a UTF-8 file relative to the repository root with the given content. Prefer edit_file to change part of an existing file.\",\n    input: {\n      type: \"object\",\n      properties: {\n        path: { type: \"string\", minLength: 1 },\n        content: { type: \"string\" },\n      },\n      required: [\"path\", \"content\"],\n      additionalProperties: false,\n    },\n    resources: (input: WriteFileInput) => ({ paths: [input.path] }),\n    execute: (input: WriteFileInput, context) =>\n      withStaging(async (directory) => {\n        repositoryPath(input.path);\n        const staged = join(directory, \"file\");\n        await writeFile(staged, input.content);\n        await upload(context, staged, input.path);\n        return `Wrote ${Buffer.byteLength(input.content)} bytes to ${input.path}`;\n      }),\n  });\n}\n\nfunction editFileTool() {\n  return defineHarnessTool({\n    name: \"edit_file\",\n    description:\n      \"Replace an exact text in a UTF-8 file. old_text must appear exactly once unless replace_all is true; include surrounding lines to make it unique.\",\n    input: {\n      type: \"object\",\n      properties: {\n        path: { type: \"string\", minLength: 1 },\n        old_text: { type: \"string\", minLength: 1 },\n        new_text: { type: \"string\" },\n        replace_all: { type: \"boolean\" },\n      },\n      required: [\"path\", \"old_text\", \"new_text\"],\n      additionalProperties: false,\n    },\n    resources: (input: EditFileInput) => ({ paths: [input.path] }),\n    execute: (input: EditFileInput, context) =>\n      withStaging(async (directory) => {\n        const original = await downloadFile(\n          context,\n          input.path,\n          join(directory, \"file\"),\n        );\n        const text = original.bytes.toString(\"utf8\");\n        const occurrences = text.split(input.old_text).length - 1;\n        if (occurrences === 0)\n          return {\n            content: `old_text was not found in ${input.path}`,\n            isError: true,\n          };\n        if (occurrences > 1 && !input.replace_all)\n          return {\n            content: `old_text appears ${occurrences} times in ${input.path}; add surrounding lines or set replace_all`,\n            isError: true,\n          };\n        const updated = input.replace_all\n          ? text.split(input.old_text).join(input.new_text)\n          : text.replace(input.old_text, () => input.new_text);\n        const current = await downloadFile(\n          context,\n          input.path,\n          join(directory, \"current\"),\n        );\n        if (digest(current.bytes) !== digest(original.bytes))\n          return {\n            content: `${input.path} changed during the edit; read it again and retry`,\n            isError: true,\n          };\n        await writeFile(original.staged, updated);\n        await upload(context, original.staged, input.path);\n        return `Replaced ${input.replace_all ? occurrences : 1} occurrence(s) in ${input.path}`;\n      }),\n  });\n}\n\nfunction upload(context: HarnessToolContext, staged: string, path: string) {\n  return context.sandbox.upload(staged, sandboxPath(context, path), {\n    signal: context.signal,\n  });\n}\n"]}

package/dist/adapters/tools/file-tools.d.ts

@@ -0,0 +1,2 @@
+import type { HarnessToolset } from "../../domain/tool.types.ts";
+export declare function harnessFileTools(): HarnessToolset;

package/dist/adapters/tools/file-tools.js

@@ -0,0 +1,97 @@
+import { join } from "node:path";
+import { glob } from "../../domain/glob.js";
+import { defineHarnessTool, defineHarnessToolset } from "../../domain/tool.js";
+import { anywhere, downloadFile, repositoryPath, withStaging, } from "./sandbox-files.js";
+import { TOOL_LIMITS } from "./tools.constants.js";
+export function harnessFileTools() {
+    return defineHarnessToolset({
+        name: "files",
+        tools: [readFileTool(), listFilesTool()],
+    });
+}
+function readFileTool() {
+    return defineHarnessTool({
+        name: "read_file",
+        description: "Read a UTF-8 text file relative to the repository root. Lines are numbered; use offset and limit for long files.",
+        readOnly: true,
+        input: {
+            type: "object",
+            properties: {
+                path: { type: "string", minLength: 1 },
+                offset: { type: "integer", minimum: 1 },
+                limit: { type: "integer", minimum: 1, maximum: TOOL_LIMITS.readLines },
+            },
+            required: ["path"],
+            additionalProperties: false,
+        },
+        resources: (input) => ({ paths: [input.path] }),
+        execute: (input, context) => withStaging(async (directory) => {
+            const file = await downloadFile(context, input.path, join(directory, "file"));
+            const lines = file.bytes.toString("utf8").split(/\r?\n/);
+            if (lines.at(-1) === "")
+                lines.pop();
+            const start = (input.offset ?? 1) - 1;
+            const selected = lines.slice(start, start + (input.limit ?? TOOL_LIMITS.readLines));
+            const width = String(start + selected.length).length;
+            const body = selected
+                .map((line, index) => `${String(start + index + 1).padStart(width)}\t${line}`)
+                .join("\n");
+            const end = start + selected.length;
+            const note = end < lines.length || start > 0
+                ? `\n[lines ${start + 1}-${end} of ${lines.length}]`
+                : "";
+            return lines.length ? `${body}${note}` : "(empty file)";
+        }),
+    });
+}
+function listFilesTool() {
+    return defineHarnessTool({
+        name: "list_files",
+        description: "List files in the repository that are tracked or not ignored by Git, optionally under a directory and filtered by a glob such as src/**/*.ts; a glob without a slash matches file names at any depth.",
+        readOnly: true,
+        input: {
+            type: "object",
+            properties: {
+                path: { type: "string" },
+                pattern: { type: "string", minLength: 1 },
+            },
+            additionalProperties: false,
+        },
+        resources: (input) => ({ paths: [input.path ?? "."] }),
+        async execute(input, context) {
+            const scope = repositoryPath(input.path ?? ".") || ".";
+            const result = await context.sandbox.invoke({
+                executable: "git",
+                arguments: [
+                    "ls-files",
+                    "-z",
+                    "--cached",
+                    "--others",
+                    "--exclude-standard",
+                    "--",
+                    scope,
+                ],
+                retain: TOOL_LIMITS.commandCharacters * 10,
+                signal: context.signal,
+            });
+            if (result.status !== 0)
+                return {
+                    content: result.stderr || "git ls-files failed",
+                    isError: true,
+                };
+            const matcher = input.pattern
+                ? glob(anywhere(input.pattern), "path")
+                : undefined;
+            const files = [...new Set(result.stdout.split("\0").filter(Boolean))]
+                .filter((file) => !matcher || matcher.test(file))
+                .sort();
+            const shown = files.slice(0, TOOL_LIMITS.listEntries);
+            if (!shown.length)
+                return "No files found.";
+            return shown.length < files.length
+                ? `${shown.join("\n")}\n[${files.length - shown.length} more files; narrow the path or pattern]`
+                : shown.join("\n");
+        },
+    });
+}
+//# sourceMappingURL=file-tools.js.map

package/dist/adapters/tools/file-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-tools.js","sourceRoot":"","sources":["../../../src/adapters/tools/file-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EACL,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,oBAAoB,CAAC;QAC1B,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,CAAC;KACzC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,iBAAiB,CAAC;QACvB,IAAI,EAAE,WAAW;QACjB,WAAW,EACT,kHAAkH;QACpH,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACtC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE;gBACvC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,SAAS,EAAE;aACvE;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;YAClB,oBAAoB,EAAE,KAAK;SAC5B;QACD,SAAS,EAAE,CAAC,KAAoB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,CAAC,KAAoB,EAAE,OAAO,EAAE,EAAE,CACzC,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,MAAM,YAAY,CAC7B,OAAO,EACP,KAAK,CAAC,IAAI,EACV,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CACxB,CAAC;YACF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzD,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;gBAAE,KAAK,CAAC,GAAG,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAC1B,KAAK,EACL,KAAK,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,WAAW,CAAC,SAAS,CAAC,CAC/C,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;YACrD,MAAM,IAAI,GAAG,QAAQ;iBAClB,GAAG,CACF,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,GAAG,MAAM,CAAC,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAC1D;iBACA,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,GAAG,GAAG,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;YACpC,MAAM,IAAI,GACR,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC;gBAC7B,CAAC,CAAC,YAAY,KAAK,GAAG,CAAC,IAAI,GAAG,OAAO,KAAK,CAAC,MAAM,GAAG;gBACpD,CAAC,CAAC,EAAE,CAAC;YACT,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;QAC1D,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa;IACpB,OAAO,iBAAiB,CAAC;QACvB,IAAI,EAAE,YAAY;QAClB,WAAW,EACT,uMAAuM;QACzM,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;aAC1C;YACD,oBAAoB,EAAE,KAAK;SAC5B;QACD,SAAS,EAAE,CAAC,KAAqB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACtE,KAAK,CAAC,OAAO,CAAC,KAAqB,EAAE,OAAO;YAC1C,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC1C,UAAU,EAAE,KAAK;gBACjB,SAAS,EAAE;oBACT,UAAU;oBACV,IAAI;oBACJ,UAAU;oBACV,UAAU;oBACV,oBAAoB;oBACpB,IAAI;oBACJ,KAAK;iBACN;gBACD,MAAM,EAAE,WAAW,CAAC,iBAAiB,GAAG,EAAE;gBAC1C,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBACrB,OAAO;oBACL,OAAO,EAAE,MAAM,CAAC,MAAM,IAAI,qBAAqB;oBAC/C,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO;gBAC3B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;gBACvC,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;iBAClE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBAChD,IAAI,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC;YACtD,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO,iBAAiB,CAAC;YAC5C,OAAO,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM;gBAChC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,0CAA0C;gBAChG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { join } from \"node:path\";\nimport { glob } from \"../../domain/glob.ts\";\nimport { defineHarnessTool, defineHarnessToolset } from \"../../domain/tool.ts\";\nimport type { HarnessToolset } from \"../../domain/tool.types.ts\";\nimport {\n  anywhere,\n  downloadFile,\n  repositoryPath,\n  withStaging,\n} from \"./sandbox-files.ts\";\nimport { TOOL_LIMITS } from \"./tools.constants.ts\";\nimport type { ListFilesInput, ReadFileInput } from \"./tools.types.ts\";\n\nexport function harnessFileTools(): HarnessToolset {\n  return defineHarnessToolset({\n    name: \"files\",\n    tools: [readFileTool(), listFilesTool()],\n  });\n}\n\nfunction readFileTool() {\n  return defineHarnessTool({\n    name: \"read_file\",\n    description:\n      \"Read a UTF-8 text file relative to the repository root. Lines are numbered; use offset and limit for long files.\",\n    readOnly: true,\n    input: {\n      type: \"object\",\n      properties: {\n        path: { type: \"string\", minLength: 1 },\n        offset: { type: \"integer\", minimum: 1 },\n        limit: { type: \"integer\", minimum: 1, maximum: TOOL_LIMITS.readLines },\n      },\n      required: [\"path\"],\n      additionalProperties: false,\n    },\n    resources: (input: ReadFileInput) => ({ paths: [input.path] }),\n    execute: (input: ReadFileInput, context) =>\n      withStaging(async (directory) => {\n        const file = await downloadFile(\n          context,\n          input.path,\n          join(directory, \"file\"),\n        );\n        const lines = file.bytes.toString(\"utf8\").split(/\\r?\\n/);\n        if (lines.at(-1) === \"\") lines.pop();\n        const start = (input.offset ?? 1) - 1;\n        const selected = lines.slice(\n          start,\n          start + (input.limit ?? TOOL_LIMITS.readLines),\n        );\n        const width = String(start + selected.length).length;\n        const body = selected\n          .map(\n            (line, index) =>\n              `${String(start + index + 1).padStart(width)}\\t${line}`,\n          )\n          .join(\"\\n\");\n        const end = start + selected.length;\n        const note =\n          end < lines.length || start > 0\n            ? `\\n[lines ${start + 1}-${end} of ${lines.length}]`\n            : \"\";\n        return lines.length ? `${body}${note}` : \"(empty file)\";\n      }),\n  });\n}\n\nfunction listFilesTool() {\n  return defineHarnessTool({\n    name: \"list_files\",\n    description:\n      \"List files in the repository that are tracked or not ignored by Git, optionally under a directory and filtered by a glob such as src/**/*.ts; a glob without a slash matches file names at any depth.\",\n    readOnly: true,\n    input: {\n      type: \"object\",\n      properties: {\n        path: { type: \"string\" },\n        pattern: { type: \"string\", minLength: 1 },\n      },\n      additionalProperties: false,\n    },\n    resources: (input: ListFilesInput) => ({ paths: [input.path ?? \".\"] }),\n    async execute(input: ListFilesInput, context) {\n      const scope = repositoryPath(input.path ?? \".\") || \".\";\n      const result = await context.sandbox.invoke({\n        executable: \"git\",\n        arguments: [\n          \"ls-files\",\n          \"-z\",\n          \"--cached\",\n          \"--others\",\n          \"--exclude-standard\",\n          \"--\",\n          scope,\n        ],\n        retain: TOOL_LIMITS.commandCharacters * 10,\n        signal: context.signal,\n      });\n      if (result.status !== 0)\n        return {\n          content: result.stderr || \"git ls-files failed\",\n          isError: true,\n        };\n      const matcher = input.pattern\n        ? glob(anywhere(input.pattern), \"path\")\n        : undefined;\n      const files = [...new Set(result.stdout.split(\"\\0\").filter(Boolean))]\n        .filter((file) => !matcher || matcher.test(file))\n        .sort();\n      const shown = files.slice(0, TOOL_LIMITS.listEntries);\n      if (!shown.length) return \"No files found.\";\n      return shown.length < files.length\n        ? `${shown.join(\"\\n\")}\\n[${files.length - shown.length} more files; narrow the path or pattern]`\n        : shown.join(\"\\n\");\n    },\n  });\n}\n"]}

package/dist/adapters/tools/git-tools.d.ts

@@ -0,0 +1,2 @@
+import type { HarnessToolset } from "../../domain/tool.types.ts";
+export declare function harnessGitTools(): HarnessToolset;

package/dist/adapters/tools/git-tools.js

@@ -0,0 +1,54 @@
+import { defineHarnessTool, defineHarnessToolset } from "../../domain/tool.js";
+import { commandOutput } from "./sandbox-files.js";
+import { GIT_BLOCKED_OPTIONS, GIT_READ_COMMANDS, TOOL_LIMITS, } from "./tools.constants.js";
+export function harnessGitTools() {
+    return defineHarnessToolset({
+        name: "git",
+        tools: [
+            defineHarnessTool({
+                name: "git",
+                description: "Run a read-only Git command (status, diff, log or show) in the repository with extra arguments, for example log with -n 5 --oneline.",
+                readOnly: true,
+                input: {
+                    type: "object",
+                    properties: {
+                        command: { enum: [...GIT_READ_COMMANDS] },
+                        arguments: { type: "array", items: { type: "string" } },
+                    },
+                    required: ["command"],
+                    additionalProperties: false,
+                },
+                resources: (input) => ({
+                    command: ["git", input.command, ...(input.arguments ?? [])].join(" "),
+                }),
+                async execute(input, context) {
+                    const blocked = (input.arguments ?? []).find((argument) => GIT_BLOCKED_OPTIONS.some((option) => argument.startsWith(option)));
+                    if (blocked)
+                        return {
+                            content: `Unsupported Git option: ${blocked}`,
+                            isError: true,
+                        };
+                    const result = await context.sandbox.invoke({
+                        executable: "git",
+                        arguments: [
+                            "--no-pager",
+                            input.command,
+                            ...(input.command === "status"
+                                ? []
+                                : ["--no-ext-diff", "--no-textconv"]),
+                            ...(input.arguments ?? []),
+                        ],
+                        stdin: "",
+                        retain: TOOL_LIMITS.commandCharacters,
+                        signal: context.signal,
+                    });
+                    return {
+                        content: commandOutput(result),
+                        isError: result.status !== 0,
+                    };
+                },
+            }),
+        ],
+    });
+}
+//# sourceMappingURL=git-tools.js.map

package/dist/adapters/tools/git-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-tools.js","sourceRoot":"","sources":["../../../src/adapters/tools/git-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAG9B,MAAM,UAAU,eAAe;IAC7B,OAAO,oBAAoB,CAAC;QAC1B,IAAI,EAAE,KAAK;QACX,KAAK,EAAE;YACL,iBAAiB,CAAC;gBAChB,IAAI,EAAE,KAAK;gBACX,WAAW,EACT,sIAAsI;gBACxI,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,GAAG,iBAAiB,CAAC,EAAE;wBACzC,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;qBACxD;oBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;oBACrB,oBAAoB,EAAE,KAAK;iBAC5B;gBACD,SAAS,EAAE,CAAC,KAAe,EAAE,EAAE,CAAC,CAAC;oBAC/B,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;iBACtE,CAAC;gBACF,KAAK,CAAC,OAAO,CAAC,KAAe,EAAE,OAAO;oBACpC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACxD,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAClE,CAAC;oBACF,IAAI,OAAO;wBACT,OAAO;4BACL,OAAO,EAAE,2BAA2B,OAAO,EAAE;4BAC7C,OAAO,EAAE,IAAI;yBACd,CAAC;oBACJ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;wBAC1C,UAAU,EAAE,KAAK;wBACjB,SAAS,EAAE;4BACT,YAAY;4BACZ,KAAK,CAAC,OAAO;4BACb,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ;gCAC5B,CAAC,CAAC,EAAE;gCACJ,CAAC,CAAC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;4BACvC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;yBAC3B;wBACD,KAAK,EAAE,EAAE;wBACT,MAAM,EAAE,WAAW,CAAC,iBAAiB;wBACrC,MAAM,EAAE,OAAO,CAAC,MAAM;qBACvB,CAAC,CAAC;oBACH,OAAO;wBACL,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC;wBAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;qBAC7B,CAAC;gBACJ,CAAC;aACF,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { defineHarnessTool, defineHarnessToolset } from \"../../domain/tool.ts\";\nimport type { HarnessToolset } from \"../../domain/tool.types.ts\";\nimport { commandOutput } from \"./sandbox-files.ts\";\nimport {\n  GIT_BLOCKED_OPTIONS,\n  GIT_READ_COMMANDS,\n  TOOL_LIMITS,\n} from \"./tools.constants.ts\";\nimport type { GitInput } from \"./tools.types.ts\";\n\nexport function harnessGitTools(): HarnessToolset {\n  return defineHarnessToolset({\n    name: \"git\",\n    tools: [\n      defineHarnessTool({\n        name: \"git\",\n        description:\n          \"Run a read-only Git command (status, diff, log or show) in the repository with extra arguments, for example log with -n 5 --oneline.\",\n        readOnly: true,\n        input: {\n          type: \"object\",\n          properties: {\n            command: { enum: [...GIT_READ_COMMANDS] },\n            arguments: { type: \"array\", items: { type: \"string\" } },\n          },\n          required: [\"command\"],\n          additionalProperties: false,\n        },\n        resources: (input: GitInput) => ({\n          command: [\"git\", input.command, ...(input.arguments ?? [])].join(\" \"),\n        }),\n        async execute(input: GitInput, context) {\n          const blocked = (input.arguments ?? []).find((argument) =>\n            GIT_BLOCKED_OPTIONS.some((option) => argument.startsWith(option)),\n          );\n          if (blocked)\n            return {\n              content: `Unsupported Git option: ${blocked}`,\n              isError: true,\n            };\n          const result = await context.sandbox.invoke({\n            executable: \"git\",\n            arguments: [\n              \"--no-pager\",\n              input.command,\n              ...(input.command === \"status\"\n                ? []\n                : [\"--no-ext-diff\", \"--no-textconv\"]),\n              ...(input.arguments ?? []),\n            ],\n            stdin: \"\",\n            retain: TOOL_LIMITS.commandCharacters,\n            signal: context.signal,\n          });\n          return {\n            content: commandOutput(result),\n            isError: result.status !== 0,\n          };\n        },\n      }),\n    ],\n  });\n}\n"]}

package/dist/adapters/tools/sandbox-files.d.ts

@@ -0,0 +1,10 @@
+import type { CommandResult } from "../../domain/command.types.ts";
+import type { HarnessToolContext } from "../../domain/tool.types.ts";
+import type { SandboxFile } from "./tools.types.ts";
+export declare function repositoryPath(path: string): string;
+export declare function sandboxPath(context: HarnessToolContext, path: string): string;
+export declare function withStaging<T>(operation: (directory: string) => Promise<T>): Promise<T>;
+export declare function downloadFile(context: HarnessToolContext, path: string, staged: string): Promise<SandboxFile>;
+export declare function digest(bytes: Buffer): string;
+export declare function commandOutput(result: CommandResult): string;
+export declare function anywhere(pattern: string): string;

package/dist/adapters/tools/sandbox-files.js

@@ -0,0 +1,60 @@
+import { createHash } from "node:crypto";
+import { lstat, mkdtemp, readFile, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join, posix } from "node:path";
+import { normalizeResourcePath } from "../../domain/permissions.js";
+import { TOOL_LIMITS } from "./tools.constants.js";
+export function repositoryPath(path) {
+    const normalized = normalizeResourcePath(path);
+    if (normalized === undefined)
+        throw new Error(`Path must stay inside the repository: ${path}`);
+    return normalized;
+}
+export function sandboxPath(context, path) {
+    const normalized = repositoryPath(path);
+    return normalized
+        ? posix.join(context.sandbox.root, normalized)
+        : context.sandbox.root;
+}
+export async function withStaging(operation) {
+    const directory = await mkdtemp(join(tmpdir(), "outpost-tool-"));
+    try {
+        return await operation(directory);
+    }
+    finally {
+        await rm(directory, { recursive: true, force: true });
+    }
+}
+export async function downloadFile(context, path, staged) {
+    await context.sandbox.download(sandboxPath(context, path), staged, {
+        signal: context.signal,
+    });
+    const info = await lstat(staged);
+    if (info.isSymbolicLink())
+        throw new Error(`${path} is a symbolic link; links are not followed`);
+    if (!info.isFile())
+        throw new Error(`${path} is not a regular file`);
+    if (info.size > TOOL_LIMITS.fileBytes)
+        throw new Error(`${path} has ${info.size} bytes; the limit is ${TOOL_LIMITS.fileBytes}`);
+    const bytes = await readFile(staged);
+    if (bytes.subarray(0, TOOL_LIMITS.binaryProbeBytes).includes(0))
+        throw new Error(`${path} looks binary and cannot be read as text`);
+    return { staged, bytes };
+}
+export function digest(bytes) {
+    return createHash("sha256").update(bytes).digest("hex");
+}
+export function commandOutput(result) {
+    const note = (text) => text.length >= TOOL_LIMITS.commandCharacters
+        ? `[output truncated to the last ${TOOL_LIMITS.commandCharacters} characters]\n${text}`
+        : text;
+    return [
+        `exit status: ${result.status}`,
+        ...(result.stdout ? ["--- stdout ---", note(result.stdout)] : []),
+        ...(result.stderr ? ["--- stderr ---", note(result.stderr)] : []),
+    ].join("\n");
+}
+export function anywhere(pattern) {
+    return pattern.includes("/") ? pattern : `**/${pattern}`;
+}
+//# sourceMappingURL=sandbox-files.js.map

package/dist/adapters/tools/sandbox-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-files.js","sourceRoot":"","sources":["../../../src/adapters/tools/sandbox-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,UAAU,KAAK,SAAS;QAC1B,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;IACnE,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAA2B,EAAE,IAAY;IACnE,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,UAAU;QACf,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC;QAC9C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAA4C;IAE5C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,OAA2B,EAC3B,IAAY,EACZ,MAAc;IAEd,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE;QACjE,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,cAAc,EAAE;QACvB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,6CAA6C,CAAC,CAAC;IACxE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,wBAAwB,CAAC,CAAC;IACrE,IAAI,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,SAAS;QACnC,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,QAAQ,IAAI,CAAC,IAAI,wBAAwB,WAAW,CAAC,SAAS,EAAE,CACxE,CAAC;IACJ,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,0CAA0C,CAAC,CAAC;IACrE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAqB;IACjD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAC5B,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,iBAAiB;QAC1C,CAAC,CAAC,iCAAiC,WAAW,CAAC,iBAAiB,iBAAiB,IAAI,EAAE;QACvF,CAAC,CAAC,IAAI,CAAC;IACX,OAAO;QACL,gBAAgB,MAAM,CAAC,MAAM,EAAE;QAC/B,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC;AAC3D,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { lstat, mkdtemp, readFile, rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join, posix } from \"node:path\";\nimport { normalizeResourcePath } from \"../../domain/permissions.ts\";\nimport type { CommandResult } from \"../../domain/command.types.ts\";\nimport type { HarnessToolContext } from \"../../domain/tool.types.ts\";\nimport { TOOL_LIMITS } from \"./tools.constants.ts\";\nimport type { SandboxFile } from \"./tools.types.ts\";\n\nexport function repositoryPath(path: string): string {\n  const normalized = normalizeResourcePath(path);\n  if (normalized === undefined)\n    throw new Error(`Path must stay inside the repository: ${path}`);\n  return normalized;\n}\n\nexport function sandboxPath(context: HarnessToolContext, path: string): string {\n  const normalized = repositoryPath(path);\n  return normalized\n    ? posix.join(context.sandbox.root, normalized)\n    : context.sandbox.root;\n}\n\nexport async function withStaging<T>(\n  operation: (directory: string) => Promise<T>,\n): Promise<T> {\n  const directory = await mkdtemp(join(tmpdir(), \"outpost-tool-\"));\n  try {\n    return await operation(directory);\n  } finally {\n    await rm(directory, { recursive: true, force: true });\n  }\n}\n\nexport async function downloadFile(\n  context: HarnessToolContext,\n  path: string,\n  staged: string,\n): Promise<SandboxFile> {\n  await context.sandbox.download(sandboxPath(context, path), staged, {\n    signal: context.signal,\n  });\n  const info = await lstat(staged);\n  if (info.isSymbolicLink())\n    throw new Error(`${path} is a symbolic link; links are not followed`);\n  if (!info.isFile()) throw new Error(`${path} is not a regular file`);\n  if (info.size > TOOL_LIMITS.fileBytes)\n    throw new Error(\n      `${path} has ${info.size} bytes; the limit is ${TOOL_LIMITS.fileBytes}`,\n    );\n  const bytes = await readFile(staged);\n  if (bytes.subarray(0, TOOL_LIMITS.binaryProbeBytes).includes(0))\n    throw new Error(`${path} looks binary and cannot be read as text`);\n  return { staged, bytes };\n}\n\nexport function digest(bytes: Buffer): string {\n  return createHash(\"sha256\").update(bytes).digest(\"hex\");\n}\n\nexport function commandOutput(result: CommandResult): string {\n  const note = (text: string) =>\n    text.length >= TOOL_LIMITS.commandCharacters\n      ? `[output truncated to the last ${TOOL_LIMITS.commandCharacters} characters]\\n${text}`\n      : text;\n  return [\n    `exit status: ${result.status}`,\n    ...(result.stdout ? [\"--- stdout ---\", note(result.stdout)] : []),\n    ...(result.stderr ? [\"--- stderr ---\", note(result.stderr)] : []),\n  ].join(\"\\n\");\n}\n\nexport function anywhere(pattern: string): string {\n  return pattern.includes(\"/\") ? pattern : `**/${pattern}`;\n}\n"]}

package/dist/adapters/tools/search-tools.d.ts

@@ -0,0 +1,2 @@
+import type { HarnessToolset } from "../../domain/tool.types.ts";
+export declare function harnessSearchTools(): HarnessToolset;

package/dist/adapters/tools/search-tools.js

@@ -0,0 +1,65 @@
+import { defineHarnessTool, defineHarnessToolset } from "../../domain/tool.js";
+import { anywhere, repositoryPath } from "./sandbox-files.js";
+import { TOOL_LIMITS } from "./tools.constants.js";
+export function harnessSearchTools() {
+    return defineHarnessToolset({ name: "search", tools: [searchTool()] });
+}
+function searchTool() {
+    return defineHarnessTool({
+        name: "search",
+        description: "Search repository files that are tracked or not ignored by Git for an extended regular expression. Returns path:line:text matches. A glob without a slash matches file names at any depth.",
+        readOnly: true,
+        input: {
+            type: "object",
+            properties: {
+                pattern: { type: "string", minLength: 1 },
+                path: { type: "string" },
+                glob: { type: "string", minLength: 1 },
+                ignore_case: { type: "boolean" },
+                max_results: {
+                    type: "integer",
+                    minimum: 1,
+                    maximum: TOOL_LIMITS.searchMatches,
+                },
+            },
+            required: ["pattern"],
+            additionalProperties: false,
+        },
+        resources: (input) => ({ paths: [input.path ?? "."] }),
+        async execute(input, context) {
+            const scope = repositoryPath(input.path ?? ".") || ".";
+            const result = await context.sandbox.invoke({
+                executable: "git",
+                arguments: [
+                    "grep",
+                    "--untracked",
+                    "-n",
+                    "-I",
+                    "--no-color",
+                    "--full-name",
+                    "-E",
+                    ...(input.ignore_case ? ["-i"] : []),
+                    "-e",
+                    input.pattern,
+                    "--",
+                    input.glob
+                        ? `:(glob)${scope === "." ? "" : `${scope}/`}${anywhere(input.glob)}`
+                        : scope,
+                ],
+                retain: TOOL_LIMITS.commandCharacters,
+                signal: context.signal,
+            });
+            if (result.status === 1)
+                return "No matches.";
+            if (result.status !== 0)
+                return { content: result.stderr || "git grep failed", isError: true };
+            const limit = input.max_results ?? TOOL_LIMITS.searchMatches;
+            const matches = result.stdout.split("\n").filter(Boolean);
+            const shown = matches.slice(0, limit);
+            return shown.length < matches.length
+                ? `${shown.join("\n")}\n[${matches.length - shown.length} more matches; refine the search]`
+                : shown.join("\n");
+        },
+    });
+}
+//# sourceMappingURL=search-tools.js.map

package/dist/adapters/tools/search-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-tools.js","sourceRoot":"","sources":["../../../src/adapters/tools/search-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,MAAM,UAAU,kBAAkB;IAChC,OAAO,oBAAoB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,iBAAiB,CAAC;QACvB,IAAI,EAAE,QAAQ;QACd,WAAW,EACT,4LAA4L;QAC9L,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACzC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;gBACtC,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBAChC,WAAW,EAAE;oBACX,IAAI,EAAE,SAAS;oBACf,OAAO,EAAE,CAAC;oBACV,OAAO,EAAE,WAAW,CAAC,aAAa;iBACnC;aACF;YACD,QAAQ,EAAE,CAAC,SAAS,CAAC;YACrB,oBAAoB,EAAE,KAAK;SAC5B;QACD,SAAS,EAAE,CAAC,KAAkB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACnE,KAAK,CAAC,OAAO,CAAC,KAAkB,EAAE,OAAO;YACvC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC1C,UAAU,EAAE,KAAK;gBACjB,SAAS,EAAE;oBACT,MAAM;oBACN,aAAa;oBACb,IAAI;oBACJ,IAAI;oBACJ,YAAY;oBACZ,aAAa;oBACb,IAAI;oBACJ,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACpC,IAAI;oBACJ,KAAK,CAAC,OAAO;oBACb,IAAI;oBACJ,KAAK,CAAC,IAAI;wBACR,CAAC,CAAC,UAAU,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;wBACrE,CAAC,CAAC,KAAK;iBACV;gBACD,MAAM,EAAE,WAAW,CAAC,iBAAiB;gBACrC,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,aAAa,CAAC;YAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBACrB,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,IAAI,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACxE,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,IAAI,WAAW,CAAC,aAAa,CAAC;YAC7D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;gBAClC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,mCAAmC;gBAC3F,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { defineHarnessTool, defineHarnessToolset } from \"../../domain/tool.ts\";\nimport type { HarnessToolset } from \"../../domain/tool.types.ts\";\nimport { anywhere, repositoryPath } from \"./sandbox-files.ts\";\nimport { TOOL_LIMITS } from \"./tools.constants.ts\";\nimport type { SearchInput } from \"./tools.types.ts\";\n\nexport function harnessSearchTools(): HarnessToolset {\n  return defineHarnessToolset({ name: \"search\", tools: [searchTool()] });\n}\n\nfunction searchTool() {\n  return defineHarnessTool({\n    name: \"search\",\n    description:\n      \"Search repository files that are tracked or not ignored by Git for an extended regular expression. Returns path:line:text matches. A glob without a slash matches file names at any depth.\",\n    readOnly: true,\n    input: {\n      type: \"object\",\n      properties: {\n        pattern: { type: \"string\", minLength: 1 },\n        path: { type: \"string\" },\n        glob: { type: \"string\", minLength: 1 },\n        ignore_case: { type: \"boolean\" },\n        max_results: {\n          type: \"integer\",\n          minimum: 1,\n          maximum: TOOL_LIMITS.searchMatches,\n        },\n      },\n      required: [\"pattern\"],\n      additionalProperties: false,\n    },\n    resources: (input: SearchInput) => ({ paths: [input.path ?? \".\"] }),\n    async execute(input: SearchInput, context) {\n      const scope = repositoryPath(input.path ?? \".\") || \".\";\n      const result = await context.sandbox.invoke({\n        executable: \"git\",\n        arguments: [\n          \"grep\",\n          \"--untracked\",\n          \"-n\",\n          \"-I\",\n          \"--no-color\",\n          \"--full-name\",\n          \"-E\",\n          ...(input.ignore_case ? [\"-i\"] : []),\n          \"-e\",\n          input.pattern,\n          \"--\",\n          input.glob\n            ? `:(glob)${scope === \".\" ? \"\" : `${scope}/`}${anywhere(input.glob)}`\n            : scope,\n        ],\n        retain: TOOL_LIMITS.commandCharacters,\n        signal: context.signal,\n      });\n      if (result.status === 1) return \"No matches.\";\n      if (result.status !== 0)\n        return { content: result.stderr || \"git grep failed\", isError: true };\n      const limit = input.max_results ?? TOOL_LIMITS.searchMatches;\n      const matches = result.stdout.split(\"\\n\").filter(Boolean);\n      const shown = matches.slice(0, limit);\n      return shown.length < matches.length\n        ? `${shown.join(\"\\n\")}\\n[${matches.length - shown.length} more matches; refine the search]`\n        : shown.join(\"\\n\");\n    },\n  });\n}\n"]}

package/dist/adapters/tools/shell-tools.d.ts

@@ -0,0 +1,3 @@
+import type { HarnessToolset } from "../../domain/tool.types.ts";
+import type { ShellToolsOptions } from "./tools.types.ts";
+export declare function harnessShellTools(options?: ShellToolsOptions): HarnessToolset;

package/dist/adapters/tools/shell-tools.js

@@ -0,0 +1,38 @@
+import { positive } from "../../domain/errors.js";
+import { defineHarnessTool, defineHarnessToolset } from "../../domain/tool.js";
+import { commandOutput } from "./sandbox-files.js";
+import { TOOL_LIMITS } from "./tools.constants.js";
+export function harnessShellTools(options = {}) {
+    const deadlineMs = positive(options.deadlineMs ?? TOOL_LIMITS.shellDeadlineMs, "Shell deadlineMs");
+    return defineHarnessToolset({
+        name: "shell",
+        tools: [
+            defineHarnessTool({
+                name: "shell",
+                description: "Run a POSIX shell command in the repository root and return its exit status, stdout and stderr. Commands have a deadline and no interactive input.",
+                input: {
+                    type: "object",
+                    properties: { command: { type: "string", minLength: 1 } },
+                    required: ["command"],
+                    additionalProperties: false,
+                },
+                resources: (input) => ({ command: input.command }),
+                async execute(input, context) {
+                    const result = await context.sandbox.invoke({
+                        executable: "sh",
+                        arguments: ["-c", input.command],
+                        stdin: "",
+                        deadlineMs,
+                        retain: TOOL_LIMITS.commandCharacters,
+                        signal: context.signal,
+                    });
+                    return {
+                        content: commandOutput(result),
+                        isError: result.status !== 0,
+                    };
+                },
+            }),
+        ],
+    });
+}
+//# sourceMappingURL=shell-tools.js.map

package/dist/adapters/tools/shell-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-tools.js","sourceRoot":"","sources":["../../../src/adapters/tools/shell-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,MAAM,UAAU,iBAAiB,CAC/B,UAA6B,EAAE;IAE/B,MAAM,UAAU,GAAG,QAAQ,CACzB,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC,eAAe,EACjD,kBAAkB,CACnB,CAAC;IACF,OAAO,oBAAoB,CAAC;QAC1B,IAAI,EAAE,OAAO;QACb,KAAK,EAAE;YACL,iBAAiB,CAAC;gBAChB,IAAI,EAAE,OAAO;gBACb,WAAW,EACT,oJAAoJ;gBACtJ,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;oBACzD,QAAQ,EAAE,CAAC,SAAS,CAAC;oBACrB,oBAAoB,EAAE,KAAK;iBAC5B;gBACD,SAAS,EAAE,CAAC,KAAiB,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC9D,KAAK,CAAC,OAAO,CAAC,KAAiB,EAAE,OAAO;oBACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;wBAC1C,UAAU,EAAE,IAAI;wBAChB,SAAS,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC;wBAChC,KAAK,EAAE,EAAE;wBACT,UAAU;wBACV,MAAM,EAAE,WAAW,CAAC,iBAAiB;wBACrC,MAAM,EAAE,OAAO,CAAC,MAAM;qBACvB,CAAC,CAAC;oBACH,OAAO;wBACL,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC;wBAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;qBAC7B,CAAC;gBACJ,CAAC;aACF,CAAC;SACH;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { positive } from \"../../domain/errors.ts\";\nimport { defineHarnessTool, defineHarnessToolset } from \"../../domain/tool.ts\";\nimport type { HarnessToolset } from \"../../domain/tool.types.ts\";\nimport { commandOutput } from \"./sandbox-files.ts\";\nimport { TOOL_LIMITS } from \"./tools.constants.ts\";\nimport type { ShellInput, ShellToolsOptions } from \"./tools.types.ts\";\n\nexport function harnessShellTools(\n  options: ShellToolsOptions = {},\n): HarnessToolset {\n  const deadlineMs = positive(\n    options.deadlineMs ?? TOOL_LIMITS.shellDeadlineMs,\n    \"Shell deadlineMs\",\n  );\n  return defineHarnessToolset({\n    name: \"shell\",\n    tools: [\n      defineHarnessTool({\n        name: \"shell\",\n        description:\n          \"Run a POSIX shell command in the repository root and return its exit status, stdout and stderr. Commands have a deadline and no interactive input.\",\n        input: {\n          type: \"object\",\n          properties: { command: { type: \"string\", minLength: 1 } },\n          required: [\"command\"],\n          additionalProperties: false,\n        },\n        resources: (input: ShellInput) => ({ command: input.command }),\n        async execute(input: ShellInput, context) {\n          const result = await context.sandbox.invoke({\n            executable: \"sh\",\n            arguments: [\"-c\", input.command],\n            stdin: \"\",\n            deadlineMs,\n            retain: TOOL_LIMITS.commandCharacters,\n            signal: context.signal,\n          });\n          return {\n            content: commandOutput(result),\n            isError: result.status !== 0,\n          };\n        },\n      }),\n    ],\n  });\n}\n"]}

package/dist/adapters/tools/tools.constants.d.ts

@@ -0,0 +1,11 @@
+export declare const TOOL_LIMITS: {
+    readonly readLines: 2000;
+    readonly fileBytes: number;
+    readonly binaryProbeBytes: 8000;
+    readonly listEntries: 1000;
+    readonly searchMatches: 200;
+    readonly commandCharacters: 200000;
+    readonly shellDeadlineMs: 120000;
+};
+export declare const GIT_READ_COMMANDS: readonly ["status", "diff", "log", "show"];
+export declare const GIT_BLOCKED_OPTIONS: string[];

package/dist/adapters/tools/tools.constants.js

@@ -0,0 +1,17 @@
+export const TOOL_LIMITS = {
+    readLines: 2_000,
+    fileBytes: 4 * 1024 * 1024,
+    binaryProbeBytes: 8_000,
+    listEntries: 1_000,
+    searchMatches: 200,
+    commandCharacters: 200_000,
+    shellDeadlineMs: 120_000,
+};
+export const GIT_READ_COMMANDS = ["status", "diff", "log", "show"];
+export const GIT_BLOCKED_OPTIONS = [
+    "--output",
+    "--ext-diff",
+    "--textconv",
+    "--open-files-in-pager",
+];
+//# sourceMappingURL=tools.constants.js.map

package/dist/adapters/tools/tools.constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.constants.js","sourceRoot":"","sources":["../../../src/adapters/tools/tools.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,SAAS,EAAE,KAAK;IAChB,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAC1B,gBAAgB,EAAE,KAAK;IACvB,WAAW,EAAE,KAAK;IAClB,aAAa,EAAE,GAAG;IAClB,iBAAiB,EAAE,OAAO;IAC1B,eAAe,EAAE,OAAO;CAChB,CAAC;AAEX,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAU,CAAC;AAE5E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,UAAU;IACV,YAAY;IACZ,YAAY;IACZ,uBAAuB;CACxB,CAAC","sourcesContent":["export const TOOL_LIMITS = {\n  readLines: 2_000,\n  fileBytes: 4 * 1024 * 1024,\n  binaryProbeBytes: 8_000,\n  listEntries: 1_000,\n  searchMatches: 200,\n  commandCharacters: 200_000,\n  shellDeadlineMs: 120_000,\n} as const;\n\nexport const GIT_READ_COMMANDS = [\"status\", \"diff\", \"log\", \"show\"] as const;\n\nexport const GIT_BLOCKED_OPTIONS = [\n  \"--output\",\n  \"--ext-diff\",\n  \"--textconv\",\n  \"--open-files-in-pager\",\n];\n"]}