@greppleai/grip 0.0.0-stage → 0.0.1

package/examples/sandbox-docker/Dockerfile

@@ -0,0 +1,274 @@
+FROM ubuntu:26.04
+
+SHELL ["/bin/bash", "-o", "pipefail", "-c"]
+
+ARG MISE_VERSION=v2026.7.13
+ARG NODE_VERSION=26.5.0
+
+RUN apt-get update \
+	&& DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
+		bash \
+		build-essential \
+		ca-certificates \
+		curl \
+		fd-find \
+		file \
+		git \
+		jq \
+		less \
+		make \
+		nodejs \
+		npm \
+		openssh-client \
+		pkg-config \
+		python3 \
+		python3-pip \
+		python3-venv \
+		ripgrep \
+		sudo \
+		unzip \
+		xz-utils \
+		zip \
+	&& ln -s /usr/bin/fdfind /usr/local/bin/fd \
+	&& mkdir -p /workspace /home/grip /etc/grip \
+	&& chown 1000:1000 /workspace /home/grip \
+	&& rm -rf /var/lib/apt/lists/*
+
+RUN curl -fsSL https://mise.run | MISE_VERSION="${MISE_VERSION}" sh \
+	&& install -m 0755 /root/.local/bin/mise /usr/local/bin/mise \
+	&& rm -rf /root/.local
+
+ENV MISE_DATA_DIR=/home/grip/.local/share/mise
+ENV MISE_CONFIG_DIR=/home/grip/.config/mise
+ENV MISE_CACHE_DIR=/home/grip/.cache/mise
+ENV NPM_CONFIG_PREFIX=/home/grip/.npm-global
+ENV PATH=/home/grip/.local/share/mise/shims:/home/grip/.npm-global/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+
+RUN mkdir -p \
+		/home/grip/.cache \
+		/home/grip/.config \
+		/home/grip/.grip \
+		/home/grip/.local/share \
+		/home/grip/.npm-global \
+	&& mise install "node@${NODE_VERSION}" \
+	&& mise use --global "node@${NODE_VERSION}" \
+	&& node --version \
+	&& npm --version \
+	&& npm install -g \
+		agent-browser@0.33.0 \
+		@astrojs/language-server@latest \
+		@biomejs/biome@latest \
+		@tailwindcss/language-server@latest \
+		@vue/language-server@latest \
+		bash-language-server@latest \
+		dockerfile-language-server-nodejs@latest \
+		pyright@latest \
+		svelte-language-server@latest \
+		typescript@latest \
+		typescript-language-server@latest \
+		vscode-langservers-extracted@latest \
+		yaml-language-server@latest \
+	&& HOME=/home/grip agent-browser install --with-deps \
+	&& npm cache clean --force \
+	&& rm -rf /var/lib/apt/lists/* \
+	&& chown -R 1000:1000 /home/grip
+
+RUN cat >/etc/grip/lsp.json <<'JSON'
+{
+  "enabled": true,
+  "servers": [
+    {
+      "id": "typescript",
+      "selectors": [
+        { "languageId": "javascript", "pattern": "**/*.js" },
+        { "languageId": "javascriptreact", "pattern": "**/*.jsx" },
+        { "languageId": "typescript", "pattern": "**/*.ts" },
+        { "languageId": "typescriptreact", "pattern": "**/*.tsx" }
+      ],
+      "transport": { "type": "spawn", "command": "typescript-language-server", "args": ["--stdio"] },
+      "lifecycle": { "type": "managed" },
+      "workspace": { "type": "markers", "markers": ["tsconfig.json", "jsconfig.json", "package.json"], "fallback": "session" },
+      "timeouts": { "connectMs": 5000, "initializeMs": 15000, "requestMs": 15000, "shutdownMs": 3000 }
+    },
+    {
+      "id": "pyright",
+      "selectors": [{ "languageId": "python", "pattern": "**/*.py" }],
+      "transport": { "type": "spawn", "command": "pyright-langserver", "args": ["--stdio"] },
+      "lifecycle": { "type": "managed" },
+      "workspace": { "type": "markers", "markers": ["pyproject.toml", "setup.py", "setup.cfg", "requirements.txt"], "fallback": "session" },
+      "timeouts": { "connectMs": 5000, "initializeMs": 15000, "requestMs": 15000, "shutdownMs": 3000 }
+    },
+    {
+      "id": "json",
+      "selectors": [
+        { "languageId": "json", "pattern": "**/*.json" },
+        { "languageId": "jsonc", "pattern": "**/*.jsonc" }
+      ],
+      "transport": { "type": "spawn", "command": "vscode-json-language-server", "args": ["--stdio"] },
+      "lifecycle": { "type": "managed" },
+      "workspace": { "type": "session" }
+    },
+    {
+      "id": "html",
+      "selectors": [{ "languageId": "html", "pattern": "**/*.html" }],
+      "transport": { "type": "spawn", "command": "vscode-html-language-server", "args": ["--stdio"] },
+      "lifecycle": { "type": "managed" },
+      "workspace": { "type": "session" }
+    },
+    {
+      "id": "css",
+      "selectors": [
+        { "languageId": "css", "pattern": "**/*.css" },
+        { "languageId": "scss", "pattern": "**/*.scss" },
+        { "languageId": "less", "pattern": "**/*.less" }
+      ],
+      "transport": { "type": "spawn", "command": "vscode-css-language-server", "args": ["--stdio"] },
+      "lifecycle": { "type": "managed" },
+      "workspace": { "type": "session" }
+    },
+    {
+      "id": "yaml",
+      "selectors": [
+        { "languageId": "yaml", "pattern": "**/*.yaml" },
+        { "languageId": "yaml", "pattern": "**/*.yml" }
+      ],
+      "transport": { "type": "spawn", "command": "yaml-language-server", "args": ["--stdio"] },
+      "lifecycle": { "type": "managed" },
+      "workspace": { "type": "session" }
+    },
+    {
+      "id": "bash",
+      "selectors": [
+        { "languageId": "shellscript", "pattern": "**/*.sh" },
+        { "languageId": "shellscript", "pattern": "**/*.bash" },
+        { "languageId": "shellscript", "pattern": "**/.env" }
+      ],
+      "transport": { "type": "spawn", "command": "bash-language-server", "args": ["start"] },
+      "lifecycle": { "type": "managed" },
+      "workspace": { "type": "session" }
+    },
+    {
+      "id": "dockerfile",
+      "selectors": [
+        { "languageId": "dockerfile", "pattern": "**/Dockerfile" },
+        { "languageId": "dockerfile", "pattern": "**/*.Dockerfile" }
+      ],
+      "transport": { "type": "spawn", "command": "docker-langserver", "args": ["--stdio"] },
+      "lifecycle": { "type": "managed" },
+      "workspace": { "type": "session" }
+    },
+    {
+      "id": "tailwindcss",
+      "selectors": [
+        { "languageId": "html", "pattern": "**/*.html" },
+        { "languageId": "javascriptreact", "pattern": "**/*.jsx" },
+        { "languageId": "typescriptreact", "pattern": "**/*.tsx" },
+        { "languageId": "vue", "pattern": "**/*.vue" },
+        { "languageId": "svelte", "pattern": "**/*.svelte" }
+      ],
+      "transport": { "type": "spawn", "command": "tailwindcss-language-server", "args": ["--stdio"] },
+      "lifecycle": { "type": "managed" },
+      "workspace": { "type": "markers", "markers": ["tailwind.config.js", "tailwind.config.cjs", "tailwind.config.mjs", "tailwind.config.ts", "package.json"], "fallback": "session" },
+      "priority": 50
+    },
+    {
+      "id": "vue",
+      "selectors": [{ "languageId": "vue", "pattern": "**/*.vue" }],
+      "transport": { "type": "spawn", "command": "vue-language-server", "args": ["--stdio"] },
+      "lifecycle": { "type": "managed" },
+      "workspace": { "type": "markers", "markers": ["package.json", "vue.config.js", "vite.config.ts", "vite.config.js"], "fallback": "session" }
+    },
+    {
+      "id": "svelte",
+      "selectors": [{ "languageId": "svelte", "pattern": "**/*.svelte" }],
+      "transport": { "type": "spawn", "command": "svelteserver", "args": ["--stdio"] },
+      "lifecycle": { "type": "managed" },
+      "workspace": { "type": "markers", "markers": ["package.json", "svelte.config.js", "svelte.config.mjs"], "fallback": "session" }
+    },
+    {
+      "id": "astro",
+      "selectors": [{ "languageId": "astro", "pattern": "**/*.astro" }],
+      "transport": { "type": "spawn", "command": "astro-ls", "args": ["--stdio"] },
+      "lifecycle": { "type": "managed" },
+      "workspace": { "type": "markers", "markers": ["package.json", "astro.config.mjs", "astro.config.ts"], "fallback": "session" }
+    },
+    {
+      "id": "biome",
+      "selectors": [
+        { "languageId": "javascript", "pattern": "**/*.js" },
+        { "languageId": "javascriptreact", "pattern": "**/*.jsx" },
+        { "languageId": "typescript", "pattern": "**/*.ts" },
+        { "languageId": "typescriptreact", "pattern": "**/*.tsx" },
+        { "languageId": "json", "pattern": "**/*.json" },
+        { "languageId": "jsonc", "pattern": "**/*.jsonc" }
+      ],
+      "transport": { "type": "spawn", "command": "biome", "args": ["lsp-proxy"] },
+      "lifecycle": { "type": "managed" },
+      "workspace": { "type": "markers", "markers": ["biome.json", "biome.jsonc", "package.json"], "fallback": "none" },
+      "priority": 40
+    }
+  ]
+}
+JSON
+
+RUN cat >/SANDBOX.md <<'EOF'
+# Grip Sandbox
+
+This container is the Grip workspace sandbox. The host workspace is mounted read/write at `/workspace`; Grip itself remains the orchestrator outside the container. Grip loads this file into the model system prompt when the sandbox daemon is connected.
+
+Included tooling:
+
+- `grip --daemon` for remote workspace tools
+- `git`, `curl`, `ripgrep`, `fd`, `jq`, `file`, `less`, `make`, `build-essential`
+- Node.js with `npm`
+- Python 3 with `pip` and `venv`
+- `mise` for per-project tool installation (`mise install`, `mise use`, `mise x`)
+- `agent-browser` with Chrome for Testing for headless browser automation (`agent-browser open`, `agent-browser snapshot`, `agent-browser close`)
+- common npm-based LSP servers for TypeScript/JavaScript, Python, JSON, HTML, CSS, YAML, Bash, Dockerfile, Tailwind CSS, Vue, Svelte, Astro, and Biome
+
+LSP is enabled through `/etc/grip/lsp.json` via `GRIP_DAEMON_LSP_CONFIG`. Servers are spawned inside the container, so they see `/workspace` paths and can only inspect the mounted workspace plus the container filesystem.
+
+Useful commands:
+
+```bash
+mise --version
+mise install          # install tools from .mise.toml / mise.toml / .tool-versions
+npm --version
+agent-browser --version
+agent-browser doctor --json
+grip --version
+```
+
+Security model:
+
+- `/workspace` is the host project mount and is intentionally writable.
+- `/tmp` is writable temporary storage. Use it for ad-hoc scripts, generated artifacts, and disposable intermediate files.
+- Host paths outside mounted volumes are not available to agent workspace tools.
+- Do not mount Docker socket, SSH keys, home directories, or extra secrets unless you explicitly want the sandbox to access them.
+EOF
+
+RUN cp /SANDBOX.md /etc/grip/SANDBOX.md
+
+ARG GRIP_RELEASE_NODE_DIR=node
+COPY ${GRIP_RELEASE_NODE_DIR}/ /opt/grip/
+
+RUN test -x /opt/grip/grip \
+	&& ln -s /opt/grip/grip /usr/local/bin/grip \
+	&& grip --help >/dev/null
+
+ENV GRIP_DAEMON_HOST=0.0.0.0
+ENV GRIP_DAEMON_PORT=8787
+ENV GRIP_DAEMON_CWD=/workspace
+ENV GRIP_DAEMON_TEMP_ROOT=/tmp
+ENV TMPDIR=/tmp
+ENV GRIP_DAEMON_ALLOW_INSECURE_TRANSPORT=1
+ENV GRIP_DAEMON_ALLOW_PROCESS_EXEC=1
+ENV GRIP_DAEMON_LSP_CONFIG=/etc/grip/lsp.json
+ENV GRIP_DAEMON_SANDBOX_INSTRUCTIONS=/etc/grip/SANDBOX.md
+ENV HOME=/home/grip
+
+WORKDIR /workspace
+USER 1000:1000
+EXPOSE 8787
+
+CMD ["grip", "--daemon"]

package/examples/sandbox-docker/README.md

@@ -0,0 +1,88 @@
+# Grip sandbox Docker image
+
+This image is the base runtime for `/sandbox start`. It contains the packaged `grip` CLI and starts the integrated workspace daemon with `grip --daemon`.
+
+## Build from a local release
+
+Create local release artifacts from the repository root:
+
+```bash
+npm run release:local -- --out /tmp/grip-local-release --force
+```
+
+Build the image with the local release directory as the Docker context:
+
+```bash
+docker build \
+  -f packages/coding-agent/examples/sandbox-docker/Dockerfile \
+  -t grip-sandbox:local \
+  /tmp/grip-local-release
+```
+
+The Dockerfile consumes `/tmp/grip-local-release/node`, which is the isolated npm install produced from the locally packed tarballs. Do not use `--skip-install`; a tarball-only release does not contain the `node/` install directory the Dockerfile copies.
+
+If you use a different directory name inside the build context, pass it explicitly:
+
+```bash
+docker build \
+  --build-arg GRIP_RELEASE_NODE_DIR=my-node-install \
+  -f packages/coding-agent/examples/sandbox-docker/Dockerfile \
+  -t grip-sandbox:local \
+  /path/to/context
+```
+
+## Runtime defaults
+
+The image sets:
+
+- workspace directory: `/workspace`
+- additional confined temporary root: `/tmp` via `GRIP_DAEMON_TEMP_ROOT`
+- daemon command: `grip --daemon`
+- daemon host inside the image: `0.0.0.0` (the configured `daemonHostBind` controls Docker's published host address)
+- daemon port inside the container: `8787`
+- process execution: enabled for Grip shell/tool execution inside the container
+- user: unprivileged `grip` user with uid `1000`
+- sandbox-only user instructions: `/home/grip/.grip/AGENTS.md` (loaded when present; run `/reload` after changing it)
+
+`GRIP_DAEMON_TOKEN` is intentionally not baked into the image. `/sandbox start` generates a token and passes it through the container environment. For manual runs, provide a long random token yourself:
+
+```bash
+docker run --rm \
+  --name grip-sandbox-local \
+  --network bridge \
+  --publish 127.0.0.1:8787:8787 \
+  -e GRIP_DAEMON_HOST=0.0.0.0 \
+  -e GRIP_DAEMON_TOKEN=dev-token-dev-token-dev-token-dev-token \
+  -v "$PWD:/workspace" \
+  grip-sandbox:local
+```
+
+Then connect a local Grip process as the orchestrator:
+
+```bash
+GRIP_REMOTE_TOKEN=dev-token-dev-token-dev-token-dev-token ./grip-test.sh --remote ws://127.0.0.1:8787/grip/workspace
+```
+
+## Use with `/sandbox start`
+
+Override the sandbox image for one start:
+
+```text
+/sandbox start --image grip-sandbox:local
+```
+
+Or configure the default image with normal sandbox precedence:
+
+```bash
+GRIP_SANDBOX_IMAGE=grip-sandbox:local ./grip-test.sh
+```
+
+The sandbox service mounts the current workspace at `/workspace`, uses Docker bridge networking, publishes only the authenticated daemon port to the configured host bind address (loopback by default), and supplies `GRIP_DAEMON_TOKEN` through the Docker environment. Sandbox processes cannot directly use host loopback services. Tokens must not be put in image layers, command-line arguments, labels, or URLs. See [Workspace Sandbox](../../docs/sandbox.md) for `/sandbox` commands, configuration precedence, stop behavior, troubleshooting, and security boundaries.
+
+## Notes
+
+- The image uses the integrated `grip --daemon` command from `@greppleai/grip`.
+- The mounted workspace is read/write. Files created by the container are owned by uid `1000` unless Docker is run with a different user policy.
+- `/tmp` is writable container-local scratch storage and is not mounted from the host by default.
+- Bridge networking and loopback-only daemon publication avoid exposing host loopback services to the container.
+- Docker is not a complete security boundary. Treat this image and any override image as trusted code for the mounted workspace.

package/examples/sdk/01-minimal.ts

@@ -0,0 +1,27 @@
+/**
+ * Minimal SDK Usage
+ *
+ * Uses all defaults: discovers skills, extensions, tools, context files
+ * from cwd and ~/.grip/agent. Model chosen from settings or first available.
+ */
+
+import { GripAgent } from "@greppleai/grip";
+
+const pi = await GripAgent.create();
+const session = await pi.createAgentSession();
+
+try {
+	session.subscribe((event) => {
+		if (event.type === "message_update" && event.assistantMessageEvent.type === "text_delta") {
+			process.stdout.write(event.assistantMessageEvent.delta);
+		}
+	});
+
+	await session.prompt("What files are in the current directory?");
+	session.state.messages.forEach((msg) => {
+		console.log(msg);
+	});
+	console.log();
+} finally {
+	await pi.dispose();
+}

package/examples/sdk/02-custom-model.ts

@@ -0,0 +1,54 @@
+/**
+ * Custom Model Selection
+ *
+ * Shows how to select a specific model and thinking level.
+ */
+
+import { AuthStorage, GripAgent, ModelRegistry } from "@greppleai/grip";
+import { getModel } from "@greppleai/grip-ai";
+
+// Set up auth storage and model registry
+const authStorage = AuthStorage.create();
+const modelRegistry = ModelRegistry.create(authStorage);
+
+// Option 1: Find a specific built-in model by provider/id
+const opus = getModel("anthropic", "claude-opus-4-5");
+if (opus) {
+	console.log(`Found model: ${opus.provider}/${opus.id}`);
+}
+
+// Option 2: Find model via registry (includes custom models from models.json)
+const customModel = modelRegistry.find("my-provider", "my-model");
+if (customModel) {
+	console.log(`Found custom model: ${customModel.provider}/${customModel.id}`);
+}
+
+// Option 3: Pick from available models (have valid API keys)
+const available = await modelRegistry.getAvailable();
+console.log(
+	"Available models:",
+	available.map((m) => `${m.provider}/${m.id}`),
+);
+
+if (available.length > 0) {
+	const pi = await GripAgent.create({
+		model: available[0],
+		thinkingLevel: "medium", // off, low, medium, high
+		authStorage,
+		modelRegistry,
+	});
+	const session = await pi.createAgentSession();
+
+	try {
+		session.subscribe((event) => {
+			if (event.type === "message_update" && event.assistantMessageEvent.type === "text_delta") {
+				process.stdout.write(event.assistantMessageEvent.delta);
+			}
+		});
+
+		await session.prompt("Say hello in one sentence.");
+		console.log();
+	} finally {
+		await pi.dispose();
+	}
+}

package/examples/sdk/03-custom-prompt.ts

@@ -0,0 +1,76 @@
+/**
+ * Custom System Prompt
+ *
+ * Shows how to replace or modify the default system prompt.
+ */
+
+import { DefaultResourceLoader, GripAgent, getAgentDir, InMemorySessionManager } from "@greppleai/grip";
+
+const cwd = process.cwd();
+const agentDir = getAgentDir();
+
+// Option 1: Replace prompt entirely
+const loader1 = new DefaultResourceLoader({
+	cwd,
+	agentDir,
+	systemPromptOverride: () => `You are a helpful assistant that speaks like a pirate.
+Always end responses with "Arrr!"`,
+	// Needed to avoid DefaultResourceLoader appending APPEND_SYSTEM.md from ~/.grip/agent or <cwd>/.grip.
+	appendSystemPromptOverride: () => [],
+});
+await loader1.reload();
+
+const pi1 = await GripAgent.create({
+	cwd,
+	agentDir,
+	resourceLoader: loader1,
+	sessionManager: new InMemorySessionManager(),
+});
+const session1 = await pi1.createAgentSession();
+
+try {
+	session1.subscribe((event) => {
+		if (event.type === "message_update" && event.assistantMessageEvent.type === "text_delta") {
+			process.stdout.write(event.assistantMessageEvent.delta);
+		}
+	});
+
+	console.log("=== Replace prompt ===");
+	await session1.prompt("What is 2 + 2?");
+	console.log("\n");
+} finally {
+	await pi1.dispose();
+}
+
+// Option 2: Append instructions to the default prompt
+const loader2 = new DefaultResourceLoader({
+	cwd,
+	agentDir,
+	appendSystemPromptOverride: (base) => [
+		...base,
+		"## Additional Instructions\n- Always be concise\n- Use bullet points when listing things",
+	],
+});
+await loader2.reload();
+
+const pi2 = await GripAgent.create({
+	cwd,
+	agentDir,
+	resourceLoader: loader2,
+	sessionManager: new InMemorySessionManager(),
+});
+const session2 = await pi2.createAgentSession();
+
+try {
+	session2.subscribe((event) => {
+		if (event.type === "message_update" && event.assistantMessageEvent.type === "text_delta") {
+			process.stdout.write(event.assistantMessageEvent.delta);
+		}
+	});
+
+	console.log("=== Modify prompt ===");
+	await session2.prompt("List 3 benefits of TypeScript.");
+	console.log();
+} finally {
+	await pi2.dispose();
+}

package/examples/sdk/04-skills.ts

@@ -0,0 +1,60 @@
+/**
+ * Skills Configuration
+ *
+ * Skills provide specialized instructions loaded into the system prompt.
+ * Discover, filter, merge, or replace them.
+ */
+
+import {
+	createSyntheticSourceInfo,
+	DefaultResourceLoader,
+	GripAgent,
+	getAgentDir,
+	InMemorySessionManager,
+	type Skill,
+} from "@greppleai/grip";
+
+// Or define custom skills inline
+const customSkill: Skill = {
+	name: "my-skill",
+	description: "Custom project instructions",
+	filePath: "/virtual/SKILL.md",
+	baseDir: "/virtual",
+	sourceInfo: createSyntheticSourceInfo("/virtual/SKILL.md", { source: "sdk" }),
+	disableModelInvocation: false,
+};
+
+const cwd = process.cwd();
+const agentDir = getAgentDir();
+const loader = new DefaultResourceLoader({
+	cwd,
+	agentDir,
+	skillsOverride: (current) => {
+		const filteredSkills = current.skills.filter((s) => s.name.includes("browser") || s.name.includes("search"));
+		return {
+			skills: [...filteredSkills, customSkill],
+			diagnostics: current.diagnostics,
+		};
+	},
+});
+await loader.reload();
+
+// Discover all skills from cwd/.grip/skills, ~/.grip/agent/skills, etc.
+const { skills: allSkills, diagnostics } = loader.getSkills();
+console.log(
+	"Discovered skills:",
+	allSkills.map((s) => s.name),
+);
+if (diagnostics.length > 0) {
+	console.log("Warnings:", diagnostics);
+}
+
+const pi = await GripAgent.create({
+	cwd,
+	agentDir,
+	resourceLoader: loader,
+	sessionManager: new InMemorySessionManager(),
+});
+await pi.createAgentSession();
+console.log("Session created with filtered skills");
+await pi.dispose();

package/examples/sdk/05-tools.ts

@@ -0,0 +1,55 @@
+/**
+ * Tools Configuration
+ *
+ * Use tool names to choose which built-in tools are enabled.
+ *
+ * Tool names are matched against all available tools. If you use a custom `cwd`,
+ * GripAgent applies that cwd when it builds the actual built-in tools.
+ *
+ * For custom tools, see 06-extensions.ts - custom tools are registered via the
+ * extensions system using pi.registerTool().
+ */
+
+import { GripAgent, InMemorySessionManager } from "@greppleai/grip";
+
+interface ToolSessionOptions {
+	cwd?: string;
+	tools: string[];
+}
+async function createToolSession(options: ToolSessionOptions) {
+	const cwd = options.cwd ?? process.cwd();
+	const pi = await GripAgent.create({
+		cwd,
+		tools: options.tools,
+		sessionManager: new InMemorySessionManager(cwd),
+	});
+	await pi.createAgentSession();
+	return pi;
+}
+
+// Read-only mode (no edit/write)
+const readOnlyPi = await createToolSession({ tools: ["read", "grep", "find", "ls"] });
+console.log("Read-only session created");
+await readOnlyPi.dispose();
+
+// Custom tool selection
+const customToolsPi = await createToolSession({ tools: ["read", "bash", "grep"] });
+console.log("Custom tools session created");
+await customToolsPi.dispose();
+
+// With custom cwd
+const customCwd = "/path/to/project";
+const customCwdPi = await createToolSession({
+	cwd: customCwd,
+	tools: ["read", "bash", "edit", "write"],
+});
+console.log("Custom cwd session created");
+await customCwdPi.dispose();
+
+// Or pick specific tools for custom cwd
+const specificToolsPi = await createToolSession({
+	cwd: customCwd,
+	tools: ["read", "bash", "grep"],
+});
+console.log("Specific tools with custom cwd session created");
+await specificToolsPi.dispose();