@greppleai/grip 0.1.5 → 0.1.7

package/dist/core/tools/operations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../../src/core/tools/operations.ts"],"names":[],"mappings":"AAEA,OAAO,EAAkD,KAAK,KAAK,EAAoB,MAAM,SAAS,CAAC;AAWvG,OAAO,KAAK,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAa3F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAKN,KAAK,eAAe,EAGpB,MAAM,0CAA0C,CAAC;AAOlD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAElE,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,WAAW,CAAC;AACvE,MAAM,MAAM,4BAA4B,GAAG,OAAO,GAAG,QAAQ,GAAG,aAAa,CAAC;AAC9E,MAAM,MAAM,kCAAkC,GAAG,OAAO,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;AAChG,KAAK,2BAA2B,GAAG,IAAI,CAAC;AAExC,MAAM,WAAW,YAAY;IAC5B,WAAW,EAAE,MAAM,OAAO,CAAC;IAC3B,MAAM,EAAE,MAAM,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC/B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,eAAe;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC9B,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,aAAa,EAAE,CAAC;CACzB;AAED,MAAM,MAAM,eAAe,GACxB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,GAClD;IACA,IAAI,EAAE,QAAQ,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,IAAI,CAAC;IACf,UAAU,EAAE,IAAI,CAAC;IACjB,SAAS,EAAE,iBAAiB,CAAC;CAC5B,CAAC;AAGL,MAAM,WAAW,6BAA6B;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC5C,gBAAgB,EAAE,6BAA6B,CAAC;CAChD;AAED,MAAM,WAAW,sBAAsB;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,eAAO,MAAM,8BAA8B,0GAMhC,CAAC;AAEZ,MAAM,WAAW,6BAA6B;IAC7C,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;CAC5C;AAOD,MAAM,WAAW,0CAA2C,SAAQ,kCAAkC;IACrG,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAID,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;AAErE,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,cAAc,GAAG,sBAAsB,CAkBvF;AAED,MAAM,WAAW,cAAc;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACzE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,YAAY,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,UAAU,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,YAAY,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACzD,mBAAmB,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IACvE,cAAc,CAAC,IAAI,eAAe,CAAC;IACnC,6BAA6B,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,GAAG,4BAA4B,CAAC;IACrG,oBAAoB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,6BAA6B,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IAClH,6BAA6B,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC;IACjF,kBAAkB,CAAC,IAAI,eAAe,CAAC;IACvC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA0B;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAqGD,qBAAa,mBAAoB,YAAW,cAAc;IACzD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,SAAS,CAAqB;IAEtC,YAAY,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,0BAA+B,EAGhE;IAED,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAEhD;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAmD7E;IAEK,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/D;IAEK,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE5C;IAEK,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAErE;IAEK,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE3E;IAEK,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7E;IAEK,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEvE;IAEK,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAEvC;IAEK,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAE7C;IAEK,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAE1E;IAED,cAAc,IAAI,eAAe,CAEhC;CACD;AAED,qBAAa,4BAA6B,YAAW,cAAc;IAClE,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,UAAU,CAAmC;IACrD,OAAO,CAAC,wBAAwB,CAA2B;IAC3D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAyC;IAC1E,OAAO,CAAC,cAAc,CAA4B;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA0C;IAEvE,YAAY,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,EAIhE;IAEK,eAAe,CACpB,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,0CAA+C,GACtD,OAAO,CAAC,eAAe,CAAC,CAe1B;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAM3B;IAED,OAAO,CAAC,iBAAiB;IASnB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAE7E;IAEK,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/D;IAEK,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE5C;IAEK,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAErE;IAEK,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI3E;IAEK,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI7E;IAEK,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnE;IAEK,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAE9C;IAEK,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAE7C;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAEpF;IAEK,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAE5D;IAEK,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAE1E;IAED,cAAc,IAAI,eAAe,CAEhC;IACD,cAAc,IAAI,OAAO,CAExB;IAED,6BAA6B,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,GAAG,kCAAkC,CAExG;IAED,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,6BAA6B,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAE/G;IAED,kBAAkB,IAAI,eAAe,CAEpC;IAED,6BAA6B,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAG9E;IAED,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CASvB;YAEa,iBAAiB;CAe/B;AA+CD,MAAM,WAAW,kCAAkC;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACzC;AAED,qBAAa,oBAAqB,YAAW,cAAc;IAC1D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,mBAAmB,EAAE,kBAAkB,CAAW;IAClD,OAAO,CAAC,WAAW,CAAM;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAChE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAC9D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAyC;IAC1E,OAAO,CAAC,eAAe,CAAoD;IAC3E,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,cAAc,CAA4B;IAElD,OAAO,eAgEN;IAED,OAAa,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,kCAAuC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAoCjH;IAED,OAAa,kBAAkB,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,kCAAuC,GAC9C,OAAO,CAAC,oBAAoB,CAAC,CAiB/B;IAED,6BAA6B,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,GAAG,kCAAkC,CAUxG;IAEK,oBAAoB,CACzB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,6BAA6B,GACvC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAuDnC;IAED,kBAAkB,IAAI,eAAe,CAEpC;IAED,6BAA6B,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAG9E;YAEa,sBAAsB;IAQpC,OAAO,CAAC,OAAO;YAID,eAAe;YAaf,sBAAsB;IA4B9B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAmB7E;IAEK,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/D;IAEK,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAG5C;IAEK,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOrE;IAEK,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAShD;IAEK,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB3E;IAEK,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB7E;IAEK,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEvE;IAEK,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAO9C;IAEK,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAM7C;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CASpF;IAEK,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAc5D;IAEK,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAG1E;IAED,cAAc,IAAI,eAAe,CAShC;IACD,cAAc,IAAI,OAAO,CAExB;IAED,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAKvB;CACD;AAED,wBAAgB,0BAA0B,CACzC,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,kCAAkC,GAC1C,OAAO,CAAC,oBAAoB,CAAC,CAW/B","sourcesContent":["import { type ChildProcess, spawn } from \"node:child_process\";\nimport { createHash } from \"node:crypto\";\nimport { constants, createReadStream, createWriteStream, type Stats, type WriteStream } from \"node:fs\";\nimport {\n\taccess as fsAccess,\n\tmkdir as fsMkdir,\n\treaddir as fsReaddir,\n\treadFile as fsReadFile,\n\tstat as fsStat,\n\twriteFile as fsWriteFile,\n} from \"node:fs/promises\";\nimport { posix, win32 } from \"node:path\";\nimport { pipeline } from \"node:stream/promises\";\nimport type { AgentToolResult, AgentToolUpdateCallback } from \"@greppleai/grip-agent-core\";\nimport WebSocket, { type RawData } from \"ws\";\nimport { DAEMON_WEBSOCKET_PROTOCOL } from \"../../daemon/config.ts\";\nimport { waitForChildProcess } from \"../../utils/child-process.ts\";\nimport { detectSupportedImageMimeTypeFromFile } from \"../../utils/mime.ts\";\nimport {\n\tgetShellConfig,\n\tgetShellEnv,\n\tkillProcessTree,\n\ttrackDetachedChildPid,\n\tuntrackDetachedChildPid,\n} from \"../../utils/shell.ts\";\n\nimport type { PortablePathFlavor } from \"../lsp/portable-path.ts\";\nimport {\n\tDEFAULT_REMOTE_WORKSPACE_PROTOCOL_LIMITS,\n\tdecodeCanonicalBase64,\n\thashRemoteWorkspaceJson,\n\tparseRemoteWorkspaceToolResult,\n\ttype RemoteLspStatus,\n\ttype RemoteWorkspaceClientMessage,\n\ttype RemoteWorkspaceMethod,\n} from \"../remote-workspace-protocol/contract.ts\";\nimport { GuestSharedClientTransport } from \"../remote-workspace-protocol/guest-shared-client.ts\";\nimport {\n\tRemoteWorkspaceClientProtocol,\n\ttype RemoteWorkspaceProtocolCloseReason,\n\tRemoteWorkspaceRequestError,\n} from \"../remote-workspace-protocol/session.ts\";\nimport type { WorkspaceIdentity } from \"../workspace-identity.ts\";\n\nexport type ToolAccessMode = \"exists\" | \"read\" | \"write\" | \"readwrite\";\nexport type WorkspaceToolExecutionTarget = \"local\" | \"remote\" | \"unavailable\";\nexport type RemoteWorkspaceToolExecutionTarget = Exclude<WorkspaceToolExecutionTarget, \"local\">;\ntype RemoteToolTransportProtocol = \"ws\";\n\nexport interface ToolFileStat {\n\tisDirectory: () => boolean;\n\tisFile: () => boolean;\n}\n\nexport interface ToolExecOptions {\n\tcwd?: string;\n\tonData: (data: Buffer) => void;\n\tsignal?: AbortSignal;\n\ttimeout?: number;\n\tenv?: NodeJS.ProcessEnv;\n}\n\nexport interface ToolExecResult {\n\texitCode: number | null;\n}\n\nexport interface ToolMkdirOptions {\n\trecursive?: boolean;\n}\n\nexport interface ToolGlobOptions {\n\tignore: string[];\n\tlimit: number;\n}\n\nexport interface ToolGrepOptions {\n\tpattern: string;\n\tpath: string;\n\tglob?: string;\n\tignoreCase?: boolean;\n\tliteral?: boolean;\n\tlimit: number;\n}\n\nexport interface ToolGrepMatch {\n\tfilePath: string;\n\tlineNumber: number;\n\tlineText?: string;\n}\n\nexport interface ToolGrepResult {\n\tisDirectory: boolean;\n\tmatches: ToolGrepMatch[];\n}\n\nexport type ToolBackendInfo =\n\t| { type: \"local\"; cwd: string }\n\t| { type: \"remote\"; cwd: string; configured: false }\n\t| {\n\t\t\ttype: \"remote\";\n\t\t\tcwd: string;\n\t\t\turl: string;\n\t\t\tprotocol: \"ws\";\n\t\t\tconfigured: true;\n\t\t\tworkspace: WorkspaceIdentity;\n\t  };\n\n// grip-ignore noNearIdenticalDataStructures: Remote backend invocations require host-normalized execution options, while public host invocations accept omitted options and apply defaults.\nexport interface WorkspaceToolRemoteInvocation {\n\ttoolCallId: string;\n\targuments: unknown;\n\tsignal?: AbortSignal;\n\tonUpdate?: AgentToolUpdateCallback<unknown>;\n\texecutionOptions: WorkspaceToolExecutionOptions;\n}\n\nexport interface GripSessionEnvironment {\n\tGRIP_SESSION_ID?: string;\n\tGRIP_SESSION_FILE?: string;\n\tGRIP_PROVIDER?: string;\n\tGRIP_MODEL?: string;\n\tGRIP_REASONING_LEVEL?: string;\n}\n\nexport const GRIP_SESSION_ENVIRONMENT_NAMES = Object.freeze([\n\t\"GRIP_SESSION_ID\",\n\t\"GRIP_SESSION_FILE\",\n\t\"GRIP_PROVIDER\",\n\t\"GRIP_MODEL\",\n\t\"GRIP_REASONING_LEVEL\",\n] as const);\n\nexport interface WorkspaceToolExecutionOptions {\n\timageAutoResize?: boolean;\n\tshellCommandPrefix?: string;\n\tsessionEnvironment?: GripSessionEnvironment;\n}\n\ninterface NormalizedRemoteWorkspaceUrl {\n\turl: string;\n\tprotocol: \"ws\";\n}\n\nexport interface DeferredRemoteToolOperationsConnectOptions extends RemoteToolOperationsConnectOptions {\n\texpectedCwd?: string;\n}\n\ntype SharedExpectedRevision = { sha256: string } | { absent: true };\n\nexport type BorrowedToolOperations = Omit<ToolOperations, \"dispose\">;\n\nexport function borrowToolOperations(operations: ToolOperations): BorrowedToolOperations {\n\tconst boundMethods = new Map<PropertyKey, unknown>();\n\treturn new Proxy(operations, {\n\t\tget(target, property, receiver) {\n\t\t\tif (property === \"dispose\") return undefined;\n\t\t\tconst value = Reflect.get(target, property, receiver) as unknown;\n\t\t\tif (typeof value !== \"function\") return value;\n\t\t\tlet bound = boundMethods.get(property);\n\t\t\tif (!bound) {\n\t\t\t\tbound = value.bind(target);\n\t\t\t\tboundMethods.set(property, bound);\n\t\t\t}\n\t\t\treturn bound;\n\t\t},\n\t\thas(target, property) {\n\t\t\treturn property === \"dispose\" ? false : Reflect.has(target, property);\n\t\t},\n\t}) as BorrowedToolOperations;\n}\n\nexport interface ToolOperations {\n\tcwd: string;\n\texec(command: string, options: ToolExecOptions): Promise<ToolExecResult>;\n\taccess(path: string, mode?: ToolAccessMode): Promise<void>;\n\treadFile(path: string): Promise<Buffer>;\n\twriteFile(path: string, content: string | Buffer): Promise<void>;\n\treadResource?(path: string): Promise<Buffer>;\n\tuploadFile?(sourcePath: string, destinationPath: string): Promise<void>;\n\tdownloadFile?(sourcePath: string, destinationPath: string): Promise<void>;\n\tmkdir(path: string, options?: ToolMkdirOptions): Promise<void>;\n\tstat(path: string): Promise<ToolFileStat>;\n\treaddir(path: string): Promise<string[]>;\n\tglob?(pattern: string, cwd: string, options: ToolGlobOptions): Promise<string[]>;\n\tgrep?(options: ToolGrepOptions): Promise<ToolGrepResult>;\n\tdetectImageMimeType?(path: string): Promise<string | null | undefined>;\n\tgetBackendInfo?(): ToolBackendInfo;\n\tresolveWorkspaceToolExecution?(name: string, parameterSchema: unknown): WorkspaceToolExecutionTarget;\n\texecuteWorkspaceTool?(name: string, invocation: WorkspaceToolRemoteInvocation): Promise<AgentToolResult<unknown>>;\n\tonWorkspaceToolCatalogChanged?(listener: () => void | Promise<void>): () => void;\n\tgetRemoteLspStatus?(): RemoteLspStatus;\n\tdispose?(): Promise<void>;\n}\n\nexport interface LocalToolOperationsOptions {\n\tshellPath?: string;\n}\n\nfunction workspaceRootsEqual(left: string, right: string, pathFlavor: PortablePathFlavor): boolean {\n\tif (pathFlavor === \"windows\") return win32.normalize(left).toLowerCase() === win32.normalize(right).toLowerCase();\n\treturn posix.normalize(left) === posix.normalize(right);\n}\n\nfunction accessModeToFsMode(mode: ToolAccessMode | undefined): number {\n\tswitch (mode) {\n\t\tcase \"read\":\n\t\t\treturn constants.R_OK;\n\t\tcase \"write\":\n\t\t\treturn constants.W_OK;\n\t\tcase \"readwrite\":\n\t\t\treturn constants.R_OK | constants.W_OK;\n\t\tcase \"exists\":\n\t\tcase undefined:\n\t\t\treturn constants.F_OK;\n\t}\n}\n\nconst MAX_TIMEOUT_MS = 2_147_483_647;\nconst MAX_TIMEOUT_SECONDS = MAX_TIMEOUT_MS / 1000;\n\nfunction resolveTimeoutMs(timeout: number | undefined): number | undefined {\n\tif (timeout === undefined) return undefined;\n\tif (!Number.isFinite(timeout) || timeout <= 0) {\n\t\tthrow new Error(\"Invalid timeout: must be a finite number of seconds\");\n\t}\n\n\tconst timeoutMs = timeout * 1000;\n\tif (timeoutMs > MAX_TIMEOUT_MS) {\n\t\tthrow new Error(`Invalid timeout: maximum is ${MAX_TIMEOUT_SECONDS} seconds`);\n\t}\n\treturn timeoutMs;\n}\n\nfunction registerChildProcessAbort(signal: AbortSignal | undefined, child: ChildProcess): () => void {\n\tconst onAbort = (): void => {\n\t\tif (child.pid) killProcessTree(child.pid);\n\t};\n\tif (!signal) return () => undefined;\n\tif (signal.aborted) onAbort();\n\telse signal.addEventListener(\"abort\", onAbort, { once: true });\n\treturn () => signal.removeEventListener(\"abort\", onAbort);\n}\n\nfunction terminateLingeringProcessGroup(child: ChildProcess): void {\n\tif (!child.pid || process.platform === \"win32\") return;\n\ttry {\n\t\tprocess.kill(-child.pid, 0);\n\t\tkillProcessTree(child.pid);\n\t} catch {}\n}\n\nfunction cleanupChildExecution(\n\tchild: ChildProcess,\n\ttimeoutHandle: NodeJS.Timeout | undefined,\n\tremoveAbortListener: () => void,\n): void {\n\tif (child.pid) untrackDetachedChildPid(child.pid);\n\tif (timeoutHandle) clearTimeout(timeoutHandle);\n\tremoveAbortListener();\n}\n\nasync function copyFileStream(sourcePath: string, destinationPath: string): Promise<void> {\n\tawait pipeline(createReadStream(sourcePath), createWriteStream(destinationPath));\n}\n\nfunction writeStreamChunk(stream: WriteStream, chunk: Buffer): Promise<void> {\n\treturn new Promise((resolve, reject) => {\n\t\tconst onError = (error: Error) => {\n\t\t\tstream.off(\"error\", onError);\n\t\t\treject(error);\n\t\t};\n\t\tstream.once(\"error\", onError);\n\t\tstream.write(chunk, (error) => {\n\t\t\tstream.off(\"error\", onError);\n\t\t\tif (error) {\n\t\t\t\treject(error);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tresolve();\n\t\t});\n\t});\n}\n\nfunction endWriteStream(stream: WriteStream): Promise<void> {\n\treturn new Promise((resolve, reject) => {\n\t\tconst onError = (error: Error) => {\n\t\t\tstream.off(\"error\", onError);\n\t\t\treject(error);\n\t\t};\n\t\tstream.once(\"error\", onError);\n\t\tstream.end(() => {\n\t\t\tstream.off(\"error\", onError);\n\t\t\tresolve();\n\t\t});\n\t});\n}\n\nexport class LocalToolOperations implements ToolOperations {\n\tcwd: string;\n\tprivate shellPath: string | undefined;\n\n\tconstructor(cwd: string, options: LocalToolOperationsOptions = {}) {\n\t\tthis.cwd = cwd;\n\t\tthis.shellPath = options.shellPath;\n\t}\n\n\tsetShellPath(shellPath: string | undefined): void {\n\t\tthis.shellPath = shellPath;\n\t}\n\n\tasync exec(command: string, options: ToolExecOptions): Promise<ToolExecResult> {\n\t\tconst timeoutMs = resolveTimeoutMs(options.timeout);\n\t\tconst cwd = options.cwd ?? this.cwd;\n\t\tconst { shell, args } = getShellConfig(this.shellPath);\n\t\ttry {\n\t\t\tawait fsAccess(cwd, constants.F_OK);\n\t\t} catch {\n\t\t\tthrow new Error(`Working directory does not exist: ${cwd}\\nCannot execute bash commands.`);\n\t\t}\n\t\tif (options.signal?.aborted) {\n\t\t\tthrow new Error(\"aborted\");\n\t\t}\n\t\treturn new Promise((resolve, reject) => {\n\t\t\tconst child = spawn(shell, [...args, command], {\n\t\t\t\tcwd,\n\t\t\t\tdetached: process.platform !== \"win32\",\n\t\t\t\tenv: options.env ?? getShellEnv(),\n\t\t\t\tstdio: [\"ignore\", \"pipe\", \"pipe\"],\n\t\t\t\twindowsHide: true,\n\t\t\t});\n\t\t\tif (child.pid) trackDetachedChildPid(child.pid);\n\t\t\tlet timedOut = false;\n\t\t\tlet timeoutHandle: NodeJS.Timeout | undefined;\n\t\t\tif (timeoutMs !== undefined) {\n\t\t\t\ttimeoutHandle = setTimeout(() => {\n\t\t\t\t\ttimedOut = true;\n\t\t\t\t\tif (child.pid) killProcessTree(child.pid);\n\t\t\t\t}, timeoutMs);\n\t\t\t}\n\t\t\tchild.stdout?.on(\"data\", options.onData);\n\t\t\tchild.stderr?.on(\"data\", options.onData);\n\t\t\tconst removeAbortListener = registerChildProcessAbort(options.signal, child);\n\t\t\twaitForChildProcess(child)\n\t\t\t\t.then((code) => {\n\t\t\t\t\tterminateLingeringProcessGroup(child);\n\t\t\t\t\tcleanupChildExecution(child, timeoutHandle, removeAbortListener);\n\t\t\t\t\tif (options.signal?.aborted) {\n\t\t\t\t\t\treject(new Error(\"aborted\"));\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\t\t\t\t\tif (timedOut) {\n\t\t\t\t\t\treject(new Error(`timeout:${options.timeout}`));\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\t\t\t\t\tresolve({ exitCode: code });\n\t\t\t\t})\n\t\t\t\t.catch((error: unknown) => {\n\t\t\t\t\tcleanupChildExecution(child, timeoutHandle, removeAbortListener);\n\t\t\t\t\treject(error);\n\t\t\t\t});\n\t\t});\n\t}\n\n\tasync access(path: string, mode?: ToolAccessMode): Promise<void> {\n\t\tawait fsAccess(path, accessModeToFsMode(mode));\n\t}\n\n\tasync readFile(path: string): Promise<Buffer> {\n\t\treturn fsReadFile(path);\n\t}\n\n\tasync writeFile(path: string, content: string | Buffer): Promise<void> {\n\t\tawait fsWriteFile(path, content, typeof content === \"string\" ? \"utf-8\" : undefined);\n\t}\n\n\tasync uploadFile(sourcePath: string, destinationPath: string): Promise<void> {\n\t\tawait copyFileStream(sourcePath, destinationPath);\n\t}\n\n\tasync downloadFile(sourcePath: string, destinationPath: string): Promise<void> {\n\t\tawait copyFileStream(sourcePath, destinationPath);\n\t}\n\n\tasync mkdir(path: string, options: ToolMkdirOptions = {}): Promise<void> {\n\t\tawait fsMkdir(path, { recursive: options.recursive ?? false });\n\t}\n\n\tasync stat(path: string): Promise<Stats> {\n\t\treturn fsStat(path);\n\t}\n\n\tasync readdir(path: string): Promise<string[]> {\n\t\treturn fsReaddir(path);\n\t}\n\n\tasync detectImageMimeType(path: string): Promise<string | null | undefined> {\n\t\treturn detectSupportedImageMimeTypeFromFile(path);\n\t}\n\n\tgetBackendInfo(): ToolBackendInfo {\n\t\treturn { type: \"local\", cwd: this.cwd };\n\t}\n}\n\nexport class DeferredRemoteToolOperations implements ToolOperations {\n\tcwd: string;\n\tprivate readonly expectedCwd: string;\n\tprivate operations: RemoteToolOperations | undefined;\n\tprivate remoteCatalogUnsubscribe: (() => void) | undefined;\n\tprivate readonly catalogListeners = new Set<() => void | Promise<void>>();\n\tprivate disposePromise: Promise<void> | undefined;\n\tprivate readonly onDisconnect: ((message: string) => void) | undefined;\n\n\tconstructor(cwd: string, onDisconnect?: (message: string) => void) {\n\t\tthis.cwd = cwd;\n\t\tthis.expectedCwd = cwd;\n\t\tthis.onDisconnect = onDisconnect;\n\t}\n\n\tasync configureRemote(\n\t\turl: string,\n\t\toptions: DeferredRemoteToolOperationsConnectOptions = {},\n\t): Promise<ToolBackendInfo> {\n\t\tconst next = await createRemoteToolOperations(url, { ...options, onDisconnect: this.onDisconnect });\n\t\ttry {\n\t\t\tconst stat = await next.stat(next.cwd);\n\t\t\tif (!stat.isDirectory()) throw new Error(`Remote daemon cwd is not a directory: ${next.cwd}`);\n\t\t\tconst expectedCwd = options.expectedCwd ?? this.expectedCwd;\n\t\t\tif (!workspaceRootsEqual(next.cwd, expectedCwd, next.workspacePathFlavor)) {\n\t\t\t\tthrow new Error(`Remote daemon workspace root mismatch: expected ${expectedCwd}, received ${next.cwd}`);\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tawait next.dispose();\n\t\t\tthrow error;\n\t\t}\n\t\tawait this.replaceOperations(next);\n\t\treturn this.getBackendInfo();\n\t}\n\n\tasync clear(): Promise<void> {\n\t\tconst previous = this.operations;\n\t\tthis.remoteCatalogUnsubscribe?.();\n\t\tthis.remoteCatalogUnsubscribe = undefined;\n\t\tthis.operations = undefined;\n\t\tawait previous?.dispose?.();\n\t}\n\n\tprivate requireOperations(): RemoteToolOperations {\n\t\tif (!this.operations) {\n\t\t\tthrow new Error(\n\t\t\t\t\"Remote backend is not configured. Configure it over RPC or with /sandbox before using tools.\",\n\t\t\t);\n\t\t}\n\t\treturn this.operations;\n\t}\n\n\tasync exec(command: string, options: ToolExecOptions): Promise<ToolExecResult> {\n\t\treturn this.requireOperations().exec(command, options);\n\t}\n\n\tasync access(path: string, mode?: ToolAccessMode): Promise<void> {\n\t\tawait this.requireOperations().access(path, mode);\n\t}\n\n\tasync readFile(path: string): Promise<Buffer> {\n\t\treturn this.requireOperations().readFile(path);\n\t}\n\n\tasync writeFile(path: string, content: string | Buffer): Promise<void> {\n\t\tawait this.requireOperations().writeFile(path, content);\n\t}\n\n\tasync uploadFile(sourcePath: string, destinationPath: string): Promise<void> {\n\t\tconst operations = this.requireOperations();\n\t\tif (!operations.uploadFile) throw new Error(\"Remote backend does not support file upload\");\n\t\tawait operations.uploadFile(sourcePath, destinationPath);\n\t}\n\n\tasync downloadFile(sourcePath: string, destinationPath: string): Promise<void> {\n\t\tconst operations = this.requireOperations();\n\t\tif (!operations.downloadFile) throw new Error(\"Remote backend does not support file download\");\n\t\tawait operations.downloadFile(sourcePath, destinationPath);\n\t}\n\n\tasync mkdir(path: string, options?: ToolMkdirOptions): Promise<void> {\n\t\tawait this.requireOperations().mkdir(path, options);\n\t}\n\n\tasync stat(path: string): Promise<ToolFileStat> {\n\t\treturn this.requireOperations().stat(path);\n\t}\n\n\tasync readdir(path: string): Promise<string[]> {\n\t\treturn this.requireOperations().readdir(path);\n\t}\n\n\tasync glob(pattern: string, cwd: string, options: ToolGlobOptions): Promise<string[]> {\n\t\treturn this.requireOperations().glob(pattern, cwd, options);\n\t}\n\n\tasync grep(options: ToolGrepOptions): Promise<ToolGrepResult> {\n\t\treturn this.requireOperations().grep(options);\n\t}\n\n\tasync detectImageMimeType(path: string): Promise<string | null | undefined> {\n\t\treturn this.requireOperations().detectImageMimeType(path);\n\t}\n\n\tgetBackendInfo(): ToolBackendInfo {\n\t\treturn this.operations?.getBackendInfo() ?? { type: \"remote\", cwd: this.cwd, configured: false };\n\t}\n\tisDisconnected(): boolean {\n\t\treturn this.operations?.isDisconnected() ?? false;\n\t}\n\n\tresolveWorkspaceToolExecution(name: string, parameterSchema: unknown): RemoteWorkspaceToolExecutionTarget {\n\t\treturn this.operations ? this.operations.resolveWorkspaceToolExecution(name, parameterSchema) : \"unavailable\";\n\t}\n\n\texecuteWorkspaceTool(name: string, invocation: WorkspaceToolRemoteInvocation): Promise<AgentToolResult<unknown>> {\n\t\treturn this.requireOperations().executeWorkspaceTool(name, invocation);\n\t}\n\n\tgetRemoteLspStatus(): RemoteLspStatus {\n\t\treturn this.operations?.getRemoteLspStatus() ?? { enabled: false, servers: [] };\n\t}\n\n\tonWorkspaceToolCatalogChanged(listener: () => void | Promise<void>): () => void {\n\t\tthis.catalogListeners.add(listener);\n\t\treturn () => this.catalogListeners.delete(listener);\n\t}\n\n\tdispose(): Promise<void> {\n\t\tthis.disposePromise ??= (async () => {\n\t\t\tthis.remoteCatalogUnsubscribe?.();\n\t\t\tthis.remoteCatalogUnsubscribe = undefined;\n\t\t\tconst previous = this.operations;\n\t\t\tthis.operations = undefined;\n\t\t\tawait previous?.dispose?.();\n\t\t})();\n\t\treturn this.disposePromise;\n\t}\n\n\tprivate async replaceOperations(next: RemoteToolOperations): Promise<void> {\n\t\tif (this.disposePromise) {\n\t\t\tawait next.dispose?.();\n\t\t\tthrow new Error(\"Deferred remote backend is disposed\");\n\t\t}\n\t\tconst previous = this.operations;\n\t\tthis.remoteCatalogUnsubscribe?.();\n\t\tthis.remoteCatalogUnsubscribe = undefined;\n\t\tthis.operations = next;\n\t\tthis.cwd = next.cwd;\n\t\tthis.remoteCatalogUnsubscribe = next.onWorkspaceToolCatalogChanged(() =>\n\t\t\tPromise.all([...this.catalogListeners].map((listener) => listener())).then(() => undefined),\n\t\t);\n\t\tawait previous?.dispose?.();\n\t}\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null;\n}\n\nfunction requireRecord(value: unknown, label: string): Record<string, unknown> {\n\tif (!isRecord(value)) throw new Error(`Invalid remote workspace ${label}`);\n\treturn value;\n}\n\nfunction requireString(value: unknown, label: string): string {\n\tif (typeof value !== \"string\") throw new Error(`Invalid remote workspace ${label}`);\n\treturn value;\n}\n\nfunction normalizeRemoteUrl(url: string): NormalizedRemoteWorkspaceUrl {\n\tconst parsed = new URL(url);\n\tif (parsed.protocol !== \"ws:\" && parsed.protocol !== \"wss:\") {\n\t\tthrow new Error(`--remote supports ws:// and wss:// URLs, got ${parsed.protocol}`);\n\t}\n\tif (parsed.username || parsed.password) throw new Error(\"Remote workspace URLs must not contain credentials\");\n\tif (parsed.hash) throw new Error(\"Remote workspace URLs must not contain fragments\");\n\treturn { url: parsed.toString(), protocol: \"ws\" };\n}\n\nfunction websocketPayload(data: RawData): Uint8Array {\n\tif (Buffer.isBuffer(data)) return Uint8Array.from(data);\n\tif (Array.isArray(data)) return Uint8Array.from(Buffer.concat(data));\n\treturn Uint8Array.from(new Uint8Array(data));\n}\n\nfunction websocketCloseCode(reason: RemoteWorkspaceProtocolCloseReason): number {\n\tswitch (reason.code) {\n\t\tcase \"normal\":\n\t\t\treturn 1000;\n\t\tcase \"protocol_error\":\n\t\t\treturn 1002;\n\t\tcase \"invalid_payload\":\n\t\t\treturn 1007;\n\t\tcase \"policy_violation\":\n\t\t\treturn 1008;\n\t\tcase \"message_too_large\":\n\t\t\treturn 1009;\n\t}\n}\n\nexport interface RemoteToolOperationsConnectOptions {\n\ttoken?: string;\n\thandshakeTimeoutMs?: number;\n\tonDisconnect?: (message: string) => void;\n}\n\nexport class RemoteToolOperations implements ToolOperations {\n\treadonly url: string;\n\treadonly protocol: RemoteToolTransportProtocol;\n\tcwd: string;\n\tworkspacePathFlavor: PortablePathFlavor = \"posix\";\n\tprivate workspaceId = \"\";\n\tprivate readonly socket: WebSocket | GuestSharedClientTransport;\n\tprivate readonly isShared: boolean;\n\tprivate readonly client: RemoteWorkspaceClientProtocol;\n\tprivate readonly localToolSchemas = new Map<string, string>();\n\tprivate readonly catalogListeners = new Set<() => void | Promise<void>>();\n\tprivate remoteLspStatus: RemoteLspStatus = { enabled: false, servers: [] };\n\tprivate disconnected = false;\n\tprivate disposePromise: Promise<void> | undefined;\n\n\tprivate constructor(\n\t\turl: string,\n\t\tprotocol: RemoteToolTransportProtocol,\n\t\tsocket: WebSocket | GuestSharedClientTransport,\n\t\toptions: RemoteToolOperationsConnectOptions,\n\t) {\n\t\tthis.url = url;\n\t\tthis.protocol = protocol;\n\t\tthis.socket = socket;\n\t\tthis.isShared = socket instanceof GuestSharedClientTransport;\n\t\tthis.cwd = \"/\";\n\t\tconst transport =\n\t\t\tsocket instanceof GuestSharedClientTransport\n\t\t\t\t? socket\n\t\t\t\t: {\n\t\t\t\t\t\tsend: (message: RemoteWorkspaceClientMessage): Promise<void> =>\n\t\t\t\t\t\t\tnew Promise((resolve, reject) => {\n\t\t\t\t\t\t\t\tif (socket.readyState !== WebSocket.OPEN) {\n\t\t\t\t\t\t\t\t\treject(new Error(\"Remote workspace connection is not open\"));\n\t\t\t\t\t\t\t\t\treturn;\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\tsocket.send(JSON.stringify(message), { binary: false, compress: false }, (error) => {\n\t\t\t\t\t\t\t\t\tif (error) reject(error);\n\t\t\t\t\t\t\t\t\telse resolve();\n\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t}),\n\t\t\t\t\t\tclose: (reason: RemoteWorkspaceProtocolCloseReason): Promise<void> => {\n\t\t\t\t\t\t\tif (socket.readyState === WebSocket.CLOSED) return Promise.resolve();\n\t\t\t\t\t\t\treturn new Promise((resolve) => {\n\t\t\t\t\t\t\t\tsocket.once(\"close\", () => resolve());\n\t\t\t\t\t\t\t\tsocket.close(websocketCloseCode(reason), reason.message);\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\tthis.client = new RemoteWorkspaceClientProtocol(transport, {\n\t\t\trequiredCapabilities: [\"primitive_operations\", \"tool_updates\"],\n\t\t\toptionalCapabilities: this.isShared\n\t\t\t\t? [\"catalog_refresh\", \"artifacts\", \"lsp_status\"]\n\t\t\t\t: [\"catalog_refresh\", \"file_transfer\", \"artifacts\", \"lsp_status\"],\n\t\t\treceiveLimits: DEFAULT_REMOTE_WORKSPACE_PROTOCOL_LIMITS,\n\t\t\tlocalToolSchemas: this.localToolSchemas,\n\t\t\thandshakeTimeoutMs: options.handshakeTimeoutMs,\n\t\t\tonDisconnect: (message) => {\n\t\t\t\tthis.disconnected = true;\n\t\t\t\toptions.onDisconnect?.(message);\n\t\t\t},\n\t\t\tonCatalogRefreshed: async () => {\n\t\t\t\tawait this.refreshRemoteLspStatus();\n\t\t\t\tawait Promise.all([...this.catalogListeners].map((listener) => listener()));\n\t\t\t},\n\t\t});\n\t\tif (socket instanceof GuestSharedClientTransport) {\n\t\t\tsocket.bind(this.client);\n\t\t} else {\n\t\t\tsocket.on(\"message\", (data, isBinary) => {\n\t\t\t\tif (isBinary) {\n\t\t\t\t\tvoid this.client.disconnect(\"Remote workspace sent an unexpected binary frame\");\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tvoid this.client.receive(websocketPayload(data)).catch(() => undefined);\n\t\t\t});\n\t\t\tsocket.on(\"close\", () => void this.client.disconnect(\"Remote workspace connection closed\"));\n\t\t\tsocket.on(\"error\", () => void this.client.disconnect(\"Remote workspace connection failed\"));\n\t\t}\n\t}\n\n\tstatic async connect(url: string, options: RemoteToolOperationsConnectOptions = {}): Promise<RemoteToolOperations> {\n\t\tconst normalized = normalizeRemoteUrl(url);\n\t\tconst token = options.token ?? process.env.GRIP_REMOTE_TOKEN;\n\t\tconst socket = await new Promise<WebSocket>((resolve, reject) => {\n\t\t\tconst websocket = new WebSocket(normalized.url, DAEMON_WEBSOCKET_PROTOCOL, {\n\t\t\t\tperMessageDeflate: false,\n\t\t\t\t...(token ? { headers: { authorization: `Bearer ${token}` } } : {}),\n\t\t\t});\n\t\t\tconst cleanup = () => {\n\t\t\t\twebsocket.off(\"open\", onOpen);\n\t\t\t\twebsocket.off(\"error\", onError);\n\t\t\t};\n\t\t\tconst onOpen = () => {\n\t\t\t\tcleanup();\n\t\t\t\tresolve(websocket);\n\t\t\t};\n\t\t\tconst onError = () => {\n\t\t\t\tcleanup();\n\t\t\t\twebsocket.terminate();\n\t\t\t\treject(new Error(`Failed to connect remote workspace: ${normalized.url}`));\n\t\t\t};\n\t\t\twebsocket.once(\"open\", onOpen);\n\t\t\twebsocket.once(\"error\", onError);\n\t\t});\n\t\tconst operations = new RemoteToolOperations(normalized.url, normalized.protocol, socket, options);\n\t\ttry {\n\t\t\tconst handshake = await operations.client.start();\n\t\t\toperations.cwd = handshake.workspace.root;\n\t\t\toperations.workspacePathFlavor = handshake.workspace.pathFlavor;\n\t\t\toperations.workspaceId = handshake.workspace.id;\n\t\t\tawait operations.refreshRemoteLspStatus();\n\t\t\treturn operations;\n\t\t} catch (error) {\n\t\t\tsocket.terminate();\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tstatic async connectGuestShared(\n\t\turl: string,\n\t\troot: string,\n\t\ttoken: string,\n\t\toptions: RemoteToolOperationsConnectOptions = {},\n\t): Promise<RemoteToolOperations> {\n\t\tconst socket = await GuestSharedClientTransport.attach(url, root, token);\n\t\tconst operations = new RemoteToolOperations(url, \"ws\", socket, options);\n\t\ttry {\n\t\t\tconst handshake = await operations.client.start();\n\t\t\tif (!workspaceRootsEqual(handshake.workspace.root, root, handshake.workspace.pathFlavor)) {\n\t\t\t\tthrow new Error(\"Guest shared workspace root differs from daemon handshake\");\n\t\t\t}\n\t\t\toperations.cwd = handshake.workspace.root;\n\t\t\toperations.workspacePathFlavor = handshake.workspace.pathFlavor;\n\t\t\toperations.workspaceId = handshake.workspace.id;\n\t\t\tawait operations.refreshRemoteLspStatus();\n\t\t\treturn operations;\n\t\t} catch (error) {\n\t\t\tawait socket.close({ code: \"normal\", message: \"Shared guest attach failed\" });\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tresolveWorkspaceToolExecution(name: string, parameterSchema: unknown): RemoteWorkspaceToolExecutionTarget {\n\t\tconst schemaHash = hashRemoteWorkspaceJson(parameterSchema);\n\t\tconst catalogTool = this.client.handshake?.catalog.tools.find((tool) => tool.name === name);\n\t\tif (!catalogTool) return \"unavailable\";\n\t\tif (catalogTool.schemaHash !== schemaHash) {\n\t\t\tthrow new Error(`Remote tool schema does not match the local canonical definition: ${name}`);\n\t\t}\n\t\tthis.localToolSchemas.set(name, schemaHash);\n\t\tthis.client.setLocalToolSchemas(this.localToolSchemas);\n\t\treturn \"remote\";\n\t}\n\n\tasync executeWorkspaceTool(\n\t\tname: string,\n\t\tinvocation: WorkspaceToolRemoteInvocation,\n\t): Promise<AgentToolResult<unknown>> {\n\t\tconst invoke = async () => {\n\t\t\tawait this.client.waitForCatalogRefresh();\n\t\t\tconst handshake = this.client.handshake;\n\t\t\tif (!handshake) throw new Error(\"Remote workspace protocol handshake is unavailable\");\n\t\t\tconst catalogTool = handshake.catalog.tools.find((tool) => tool.name === name);\n\t\t\tconst schemaHash = this.localToolSchemas.get(name);\n\t\t\tif (!catalogTool || !schemaHash || catalogTool.schemaHash !== schemaHash) {\n\t\t\t\tthrow new Error(`Remote tool is unavailable or has schema drift: ${name}`);\n\t\t\t}\n\t\t\tconst expectedRevision = await this.revisionForTool(name, invocation);\n\t\t\tconst result = requireRecord(\n\t\t\t\tawait this.client.request(\n\t\t\t\t\t\"tool.invoke\",\n\t\t\t\t\t{\n\t\t\t\t\t\tgeneration: handshake.catalog.generation,\n\t\t\t\t\t\tcatalogHash: handshake.catalogHash,\n\t\t\t\t\t\ttoolName: name,\n\t\t\t\t\t\tschemaHash,\n\t\t\t\t\t\targumentsPrepared: true,\n\t\t\t\t\t\targuments: invocation.arguments,\n\t\t\t\t\t\t...(expectedRevision ? { expectedRevision } : {}),\n\t\t\t\t\t\texecutionOptions: invocation.executionOptions,\n\t\t\t\t\t},\n\t\t\t\t\t{\n\t\t\t\t\t\tsignal: invocation.signal,\n\t\t\t\t\t\tonUpdate: invocation.onUpdate\n\t\t\t\t\t\t\t? (update) =>\n\t\t\t\t\t\t\t\t\tinvocation.onUpdate!(parseRemoteWorkspaceToolResult(update) as AgentToolResult<unknown>)\n\t\t\t\t\t\t\t: undefined,\n\t\t\t\t\t},\n\t\t\t\t),\n\t\t\t\t\"tool result\",\n\t\t\t);\n\t\t\tconst toolResult = result;\n\t\t\tif (!Array.isArray(toolResult.content)) throw new Error(\"Invalid remote workspace tool result content\");\n\t\t\tif (name.startsWith(\"lsp_\")) await this.refreshRemoteLspStatus().catch(() => undefined);\n\t\t\treturn {\n\t\t\t\tcontent: toolResult.content as AgentToolResult<unknown>[\"content\"],\n\t\t\t\tdetails: toolResult.details,\n\t\t\t\t...(typeof toolResult.terminate === \"boolean\" ? { terminate: toolResult.terminate } : {}),\n\t\t\t};\n\t\t};\n\t\ttry {\n\t\t\treturn await invoke();\n\t\t} catch (error) {\n\t\t\tif (\n\t\t\t\terror instanceof RemoteWorkspaceRequestError &&\n\t\t\t\terror.code === \"stale_generation\" &&\n\t\t\t\terror.executionState === \"not_started\"\n\t\t\t) {\n\t\t\t\treturn invoke();\n\t\t\t}\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tgetRemoteLspStatus(): RemoteLspStatus {\n\t\treturn structuredClone(this.remoteLspStatus);\n\t}\n\n\tonWorkspaceToolCatalogChanged(listener: () => void | Promise<void>): () => void {\n\t\tthis.catalogListeners.add(listener);\n\t\treturn () => this.catalogListeners.delete(listener);\n\t}\n\n\tprivate async refreshRemoteLspStatus(): Promise<void> {\n\t\tif (!this.client.handshake?.catalog.operations.includes(\"lsp.status\")) {\n\t\t\tthis.remoteLspStatus = { enabled: false, servers: [] };\n\t\t\treturn;\n\t\t}\n\t\tthis.remoteLspStatus = (await this.client.request(\"lsp.status\", {})) as RemoteLspStatus;\n\t}\n\n\tprivate request(method: RemoteWorkspaceMethod, params: unknown) {\n\t\treturn this.client.request(method, params);\n\t}\n\n\tprivate async revisionForTool(\n\t\tname: string,\n\t\tinvocation: WorkspaceToolRemoteInvocation,\n\t): Promise<SharedExpectedRevision | undefined> {\n\t\tif (!this.isShared || (name !== \"edit\" && name !== \"write\")) return undefined;\n\t\tconst path = requireString(\n\t\t\trequireRecord(invocation.arguments, \"shared mutation arguments\").path,\n\t\t\t\"shared mutation path\",\n\t\t);\n\t\treturn this.sharedExpectedRevision(path, invocation.signal, name === \"write\");\n\t}\n\n\t/** Observe exact bytes for CAS, or a daemon-confirmed absent target for creation. */\n\tprivate async sharedExpectedRevision(\n\t\tpath: string,\n\t\tsignal?: AbortSignal,\n\t\tallowAbsent = true,\n\t): Promise<SharedExpectedRevision> {\n\t\tlet read: unknown;\n\t\ttry {\n\t\t\tread = await this.client.request(\"workspace.read\", { path }, { signal });\n\t\t} catch (error) {\n\t\t\tif (!allowAbsent) throw error;\n\t\t\t// Do not infer absence from an error message: only a v2 server stat of the\n\t\t\t// same workspace and path may establish the expected-absent precondition.\n\t\t\tconst stat = requireRecord(\n\t\t\t\tawait this.client.request(\"workspace.stat\", { path }, { signal }),\n\t\t\t\t\"shared stat result\",\n\t\t\t);\n\t\t\tif (stat.kind !== \"absent\") throw error;\n\t\t\treturn { absent: true };\n\t\t}\n\t\tconst result = requireRecord(read, \"shared read result\");\n\t\tconst content = decodeCanonicalBase64(\n\t\t\trequireString(result.contentBase64, \"shared read content\"),\n\t\t\tNumber.MAX_SAFE_INTEGER,\n\t\t);\n\t\tconst sha256 = createHash(\"sha256\").update(content).digest(\"hex\");\n\t\tif (result.revision !== sha256) throw new Error(\"Shared daemon did not confirm the observed file revision\");\n\t\treturn { sha256 };\n\t}\n\tasync exec(command: string, options: ToolExecOptions): Promise<ToolExecResult> {\n\t\tconst result = requireRecord(\n\t\t\tawait this.client.request(\n\t\t\t\t\"workspace.exec\",\n\t\t\t\t{ command, cwd: options.cwd ?? this.cwd },\n\t\t\t\t{\n\t\t\t\t\tsignal: options.signal,\n\t\t\t\t\ttimeoutMs: options.timeout === undefined ? undefined : Math.round(options.timeout * 1000),\n\t\t\t\t\tonUpdate: (update) => {\n\t\t\t\t\t\tconst record = requireRecord(update, \"exec update\");\n\t\t\t\t\t\toptions.onData(\n\t\t\t\t\t\t\tdecodeCanonicalBase64(requireString(record.dataBase64, \"exec update data\"), 1024 * 1024),\n\t\t\t\t\t\t);\n\t\t\t\t\t},\n\t\t\t\t},\n\t\t\t),\n\t\t\t\"exec result\",\n\t\t);\n\t\treturn { exitCode: typeof result.exitCode === \"number\" ? result.exitCode : null };\n\t}\n\n\tasync access(path: string, mode?: ToolAccessMode): Promise<void> {\n\t\tawait this.request(\"workspace.access\", { path, ...(mode ? { mode } : {}) });\n\t}\n\n\tasync readFile(path: string): Promise<Buffer> {\n\t\tconst result = requireRecord(await this.request(\"workspace.read\", { path }), \"read result\");\n\t\treturn decodeCanonicalBase64(requireString(result.contentBase64, \"read content\"), Number.MAX_SAFE_INTEGER);\n\t}\n\n\tasync writeFile(path: string, content: string | Buffer): Promise<void> {\n\t\tconst expectedRevision = this.isShared ? await this.sharedExpectedRevision(path) : undefined;\n\t\tawait this.request(\"workspace.write\", {\n\t\t\tpath,\n\t\t\tcontentBase64: Buffer.from(content).toString(\"base64\"),\n\t\t\t...(expectedRevision ? { expectedRevision } : {}),\n\t\t});\n\t}\n\n\tasync readResource(path: string): Promise<Buffer> {\n\t\tif (!this.client.handshake?.catalog.operations.includes(\"resource.read\")) {\n\t\t\tthrow new Error(\"Remote workspace does not expose resource reads\");\n\t\t}\n\t\tconst result = requireRecord(await this.request(\"resource.read\", { path }), \"resource read result\");\n\t\treturn decodeCanonicalBase64(\n\t\t\trequireString(result.contentBase64, \"resource read content\"),\n\t\t\tNumber.MAX_SAFE_INTEGER,\n\t\t);\n\t}\n\n\tasync uploadFile(sourcePath: string, destinationPath: string): Promise<void> {\n\t\tif (this.isShared) throw new Error(\"Shared guest file transfers are unavailable\");\n\t\tconst content = await fsReadFile(sourcePath);\n\t\tconst sha256 = createHash(\"sha256\").update(content).digest(\"hex\");\n\t\tconst handle = this.client.beginRequest(\"transfer.upload\", {\n\t\t\tpath: destinationPath,\n\t\t\tlength: content.byteLength,\n\t\t\tsha256,\n\t\t\toverwrite: true,\n\t\t});\n\t\tconst chunkBytes = this.client.handshake?.limits.maxTransferChunkBytes ?? 64 * 1024;\n\t\tfor (let offset = 0; offset < content.byteLength; offset += chunkBytes) {\n\t\t\tawait handle.sendTransferChunk(content.subarray(offset, Math.min(offset + chunkBytes, content.byteLength)));\n\t\t}\n\t\tawait handle.finishTransfer(content.byteLength, sha256);\n\t\tawait handle.result;\n\t}\n\n\tasync downloadFile(sourcePath: string, destinationPath: string): Promise<void> {\n\t\tif (this.isShared) throw new Error(\"Shared guest file transfers are unavailable\");\n\t\tconst stream = createWriteStream(destinationPath);\n\t\ttry {\n\t\t\tawait this.client.request(\n\t\t\t\t\"transfer.download\",\n\t\t\t\t{ path: sourcePath },\n\t\t\t\t{\n\t\t\t\t\tonTransferChunk: (chunk) => writeStreamChunk(stream, chunk),\n\t\t\t\t},\n\t\t\t);\n\t\t\tawait endWriteStream(stream);\n\t\t} catch (error) {\n\t\t\tstream.destroy();\n\t\t\tthrow error;\n\t\t}\n\t}\n\n\tasync mkdir(path: string, options: ToolMkdirOptions = {}): Promise<void> {\n\t\tawait this.request(\"workspace.mkdir\", { path, recursive: options.recursive ?? false });\n\t}\n\n\tasync stat(path: string): Promise<ToolFileStat> {\n\t\tconst result = requireRecord(await this.request(\"workspace.stat\", { path }), \"stat result\");\n\t\tif (result.kind === \"absent\") throw new Error(`Remote workspace path does not exist: ${path}`);\n\t\treturn {\n\t\t\tisDirectory: () => result.kind === \"directory\",\n\t\t\tisFile: () => result.kind === \"file\",\n\t\t};\n\t}\n\n\tasync readdir(path: string): Promise<string[]> {\n\t\tconst result = requireRecord(await this.request(\"workspace.readdir\", { path }), \"readdir result\");\n\t\tif (!Array.isArray(result.entries) || !result.entries.every((entry) => typeof entry === \"string\")) {\n\t\t\tthrow new Error(\"Invalid remote workspace readdir entries\");\n\t\t}\n\t\treturn result.entries;\n\t}\n\n\tasync glob(pattern: string, cwd: string, options: ToolGlobOptions): Promise<string[]> {\n\t\tconst result = requireRecord(\n\t\t\tawait this.request(\"workspace.glob\", { pattern, cwd, ignore: options.ignore, limit: options.limit }),\n\t\t\t\"glob result\",\n\t\t);\n\t\tif (!Array.isArray(result.matches) || !result.matches.every((entry) => typeof entry === \"string\")) {\n\t\t\tthrow new Error(\"Invalid remote workspace glob matches\");\n\t\t}\n\t\treturn result.matches;\n\t}\n\n\tasync grep(options: ToolGrepOptions): Promise<ToolGrepResult> {\n\t\tconst result = requireRecord(await this.request(\"workspace.grep\", options), \"grep result\");\n\t\tif (!Array.isArray(result.matches)) throw new Error(\"Invalid remote workspace grep matches\");\n\t\treturn {\n\t\t\tisDirectory: result.isDirectory === true,\n\t\t\tmatches: result.matches.map((entry) => {\n\t\t\t\tconst match = requireRecord(entry, \"grep match\");\n\t\t\t\treturn {\n\t\t\t\t\tfilePath: requireString(match.filePath, \"grep file path\"),\n\t\t\t\t\tlineNumber: typeof match.lineNumber === \"number\" ? match.lineNumber : 0,\n\t\t\t\t\t...(typeof match.lineText === \"string\" ? { lineText: match.lineText } : {}),\n\t\t\t\t};\n\t\t\t}),\n\t\t};\n\t}\n\n\tasync detectImageMimeType(path: string): Promise<string | null | undefined> {\n\t\tconst result = requireRecord(await this.request(\"workspace.detect_image_mime\", { path }), \"image MIME result\");\n\t\treturn typeof result.mimeType === \"string\" ? result.mimeType : null;\n\t}\n\n\tgetBackendInfo(): ToolBackendInfo {\n\t\treturn {\n\t\t\ttype: \"remote\",\n\t\t\tcwd: this.cwd,\n\t\t\turl: this.url,\n\t\t\tprotocol: this.protocol,\n\t\t\tconfigured: true,\n\t\t\tworkspace: { id: this.workspaceId, root: this.cwd, pathFlavor: this.workspacePathFlavor },\n\t\t};\n\t}\n\tisDisconnected(): boolean {\n\t\treturn this.disconnected;\n\t}\n\n\tdispose(): Promise<void> {\n\t\tthis.disposePromise ??= this.client.close().catch(() => {\n\t\t\tif (this.socket instanceof WebSocket) this.socket.terminate();\n\t\t});\n\t\treturn this.disposePromise;\n\t}\n}\n\nexport function createRemoteToolOperations(\n\turl: string,\n\toptions?: RemoteToolOperationsConnectOptions,\n): Promise<RemoteToolOperations> {\n\tif (url.startsWith(\"grip+ws:\")) {\n\t\tconst parsed = new URL(url.replace(/^grip\\+/, \"\"));\n\t\tconst root = parsed.searchParams.get(\"root\");\n\t\tif (!root || !posix.isAbsolute(root) || parsed.searchParams.size !== 1 || !options?.token) {\n\t\t\treturn Promise.reject(new Error(\"Invalid guest shared workspace attachment\"));\n\t\t}\n\t\tparsed.search = \"\";\n\t\treturn RemoteToolOperations.connectGuestShared(parsed.toString(), root, options.token, options);\n\t}\n\treturn RemoteToolOperations.connect(url, options);\n}\n"]}
+{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../../src/core/tools/operations.ts"],"names":[],"mappings":"AAEA,OAAO,EAAkD,KAAK,KAAK,EAAoB,MAAM,SAAS,CAAC;AAYvG,OAAO,KAAK,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAa3F,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAKN,KAAK,eAAe,EAGpB,MAAM,0CAA0C,CAAC;AAOlD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAElE,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,WAAW,CAAC;AACvE,MAAM,MAAM,4BAA4B,GAAG,OAAO,GAAG,QAAQ,GAAG,aAAa,CAAC;AAC9E,MAAM,MAAM,kCAAkC,GAAG,OAAO,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;AAChG,KAAK,2BAA2B,GAAG,IAAI,CAAC;AAExC,MAAM,WAAW,YAAY;IAC5B,WAAW,EAAE,MAAM,OAAO,CAAC;IAC3B,MAAM,EAAE,MAAM,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAChC,SAAS,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC/B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,eAAe;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC9B,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,aAAa,EAAE,CAAC;CACzB;AAED,MAAM,MAAM,eAAe,GACxB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,GAClD;IACA,IAAI,EAAE,QAAQ,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,IAAI,CAAC;IACf,UAAU,EAAE,IAAI,CAAC;IACjB,SAAS,EAAE,iBAAiB,CAAC;CAC5B,CAAC;AAGL,MAAM,WAAW,6BAA6B;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC5C,gBAAgB,EAAE,6BAA6B,CAAC;CAChD;AAED,MAAM,WAAW,sBAAsB;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,eAAO,MAAM,8BAA8B,0GAMhC,CAAC;AAEZ,MAAM,WAAW,6BAA6B;IAC7C,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IAC5C,2FAA2F;IAC3F,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAOD,MAAM,WAAW,0CAA2C,SAAQ,kCAAkC;IACrG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAID,MAAM,MAAM,sBAAsB,GAAG,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;AAErE,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,cAAc,GAAG,sBAAsB,CAkBvF;AAED,MAAM,WAAW,cAAc;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACzE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,YAAY,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7C,UAAU,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,YAAY,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACjF,IAAI,CAAC,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IACzD,mBAAmB,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IACvE,oGAAoG;IACpG,2BAA2B,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjE,cAAc,CAAC,IAAI,eAAe,CAAC;IACnC,6BAA6B,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,GAAG,4BAA4B,CAAC;IACrG,oBAAoB,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,6BAA6B,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IAClH,6BAA6B,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC;IACjF,kBAAkB,CAAC,IAAI,eAAe,CAAC;IACvC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA0B;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAqGD,qBAAa,mBAAoB,YAAW,cAAc;IACzD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,SAAS,CAAqB;IAEtC,YAAY,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,0BAA+B,EAGhE;IAED,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAEhD;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAmD7E;IAEK,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/D;IAEK,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE5C;IAEK,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAErE;IAEK,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE3E;IAEK,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE7E;IAEK,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEvE;IAEK,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAEvC;IAEK,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAE7C;IAEK,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAE1E;IAED,cAAc,IAAI,eAAe,CAEhC;CACD;AAED,qBAAa,4BAA6B,YAAW,cAAc;IAClE,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,UAAU,CAAmC;IACrD,OAAO,CAAC,iBAAiB,CAAqB;IAC9C,OAAO,CAAC,wBAAwB,CAA2B;IAC3D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAyC;IAC1E,OAAO,CAAC,cAAc,CAA4B;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA0C;IAEvE,YAAY,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,EAIhE;IAEK,eAAe,CACpB,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,0CAA+C,GACtD,OAAO,CAAC,eAAe,CAAC,CAiB1B;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAO3B;IAED,OAAO,CAAC,iBAAiB;IASnB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAE7E;IAEK,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/D;IAEK,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE5C;IAEK,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAErE;IAEK,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI3E;IAEK,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI7E;IAEK,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnE;IAEK,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAE9C;IAEK,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE7D;IAEK,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBpE;IAEK,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAE7C;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAEpF;IAEK,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAE5D;IAEK,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAE1E;IAED,cAAc,IAAI,eAAe,CAEhC;IACD,cAAc,IAAI,OAAO,CAExB;IAED,6BAA6B,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,GAAG,kCAAkC,CAExG;IAED,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,6BAA6B,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAQ/G;IAED,kBAAkB,IAAI,eAAe,CAEpC;IAED,6BAA6B,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAG9E;IAED,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAUvB;YAEa,iBAAiB;CAe/B;AA+CD,MAAM,WAAW,kCAAkC;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACzC;AAED,qBAAa,oBAAqB,YAAW,cAAc;IAC1D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,mBAAmB,EAAE,kBAAkB,CAAW;IAClD,OAAO,CAAC,WAAW,CAAM;IACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAyC;IAChE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgC;IACvD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAC9D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAyC;IAC1E,OAAO,CAAC,eAAe,CAAoD;IAC3E,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,cAAc,CAA4B;IAElD,OAAO,eAgEN;IAED,OAAa,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,kCAAuC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAoCjH;IAED,OAAa,kBAAkB,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,kCAAuC,GAC9C,OAAO,CAAC,oBAAoB,CAAC,CAiB/B;IAED,6BAA6B,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,GAAG,kCAAkC,CAUxG;IAEK,oBAAoB,CACzB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,6BAA6B,GACvC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAuDnC;IAED,kBAAkB,IAAI,eAAe,CAEpC;IAED,6BAA6B,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAG9E;YAEa,sBAAsB;IAQpC,OAAO,CAAC,OAAO;YAID,eAAe;IAc7B,qFAAqF;YACvE,sBAAsB;IA4B9B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAmB7E;IAEK,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/D;IAEK,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAG5C;IAEK,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOrE;IAEK,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAShD;IAEK,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB3E;IAEK,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB7E;IAEK,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEvE;IAEK,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAO9C;IAEK,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO7D;IAEK,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAM7C;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CASpF;IAEK,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAc5D;IAEK,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAG1E;IAED,cAAc,IAAI,eAAe,CAShC;IACD,cAAc,IAAI,OAAO,CAExB;IAED,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAKvB;CACD;AAED,wBAAgB,0BAA0B,CACzC,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,kCAAkC,GAC1C,OAAO,CAAC,oBAAoB,CAAC,CAW/B"}

package/dist/core/tools/operations.js

@@ -1,8 +1,8 @@
 import { spawn } from "node:child_process";
 import { createHash } from "node:crypto";
 import { constants, createReadStream, createWriteStream } from "node:fs";
-import { access as fsAccess, mkdir as fsMkdir, readdir as fsReaddir, readFile as fsReadFile, stat as fsStat, writeFile as fsWriteFile, } from "node:fs/promises";
-import { posix, win32 } from "node:path";
+import { access as fsAccess, mkdir as fsMkdir, readdir as fsReaddir, readFile as fsReadFile, realpath as fsRealpath, stat as fsStat, writeFile as fsWriteFile, } from "node:fs/promises";
+import { isAbsolute, posix, relative, resolve, sep, win32 } from "node:path";
 import { pipeline } from "node:stream/promises";
 import WebSocket from "ws";
 import { DAEMON_WEBSOCKET_PROTOCOL } from "../../daemon/config.js";
@@ -135,8 +135,6 @@ function endWriteStream(stream) {
     });
 }
 export class LocalToolOperations {
-    cwd;
-    shellPath;
     constructor(cwd, options = {}) {
         this.cwd = cwd;
         this.shellPath = options.shellPath;
@@ -231,14 +229,8 @@ export class LocalToolOperations {
     }
 }
 export class DeferredRemoteToolOperations {
-    cwd;
-    expectedCwd;
-    operations;
-    remoteCatalogUnsubscribe;
-    catalogListeners = new Set();
-    disposePromise;
-    onDisconnect;
     constructor(cwd, onDisconnect) {
+        this.catalogListeners = new Set();
         this.cwd = cwd;
         this.expectedCwd = cwd;
         this.onDisconnect = onDisconnect;
@@ -253,19 +245,22 @@ export class DeferredRemoteToolOperations {
             if (!workspaceRootsEqual(next.cwd, expectedCwd, next.workspacePathFlavor)) {
                 throw new Error(`Remote daemon workspace root mismatch: expected ${expectedCwd}, received ${next.cwd}`);
             }
+            const hostRoot = options.hostWorkspaceRoot ? await fsRealpath(options.hostWorkspaceRoot) : undefined;
+            await this.replaceOperations(next);
+            this.hostWorkspaceRoot = hostRoot;
+            return this.getBackendInfo();
         }
         catch (error) {
             await next.dispose();
             throw error;
         }
-        await this.replaceOperations(next);
-        return this.getBackendInfo();
     }
     async clear() {
         const previous = this.operations;
         this.remoteCatalogUnsubscribe?.();
         this.remoteCatalogUnsubscribe = undefined;
         this.operations = undefined;
+        this.hostWorkspaceRoot = undefined;
         await previous?.dispose?.();
     }
     requireOperations() {
@@ -304,6 +299,29 @@ export class DeferredRemoteToolOperations {
     async stat(path) {
         return this.requireOperations().stat(path);
     }
+    async resolveWorkspaceDirectory(path) {
+        return this.requireOperations().resolveWorkspaceDirectory(path);
+    }
+    async mapWorkspaceDirectoryToHost(guestPath) {
+        const remote = this.requireOperations();
+        const hostRoot = this.hostWorkspaceRoot;
+        if (!hostRoot || remote.workspacePathFlavor !== "posix") {
+            throw new Error("No verified host mount mapping is available for this sandbox");
+        }
+        const canonicalGuest = await remote.resolveWorkspaceDirectory(posix.resolve(this.cwd, guestPath));
+        const suffix = posix.relative(remote.cwd, canonicalGuest);
+        if (suffix === ".." || suffix.startsWith("../") || posix.isAbsolute(suffix)) {
+            throw new Error("Guest directory is outside the mounted workspace");
+        }
+        const hostPath = await fsRealpath(resolve(hostRoot, suffix));
+        const hostRelative = relative(hostRoot, hostPath);
+        if (hostRelative === ".." || hostRelative.startsWith(`..${sep}`) || isAbsolute(hostRelative)) {
+            throw new Error("Host directory escapes the mounted workspace");
+        }
+        if (!(await fsStat(hostPath)).isDirectory())
+            throw new Error("Host working directory is not a directory");
+        return hostPath;
+    }
     async readdir(path) {
         return this.requireOperations().readdir(path);
     }
@@ -326,7 +344,13 @@ export class DeferredRemoteToolOperations {
         return this.operations ? this.operations.resolveWorkspaceToolExecution(name, parameterSchema) : "unavailable";
     }
     executeWorkspaceTool(name, invocation) {
-        return this.requireOperations().executeWorkspaceTool(name, invocation);
+        return this.requireOperations().executeWorkspaceTool(name, {
+            ...invocation,
+            executionOptions: {
+                ...invocation.executionOptions,
+                ...(this.cwd === this.requireOperations().cwd ? {} : { cwd: this.cwd }),
+            },
+        });
     }
     getRemoteLspStatus() {
         return this.operations?.getRemoteLspStatus() ?? { enabled: false, servers: [] };
@@ -341,6 +365,7 @@ export class DeferredRemoteToolOperations {
             this.remoteCatalogUnsubscribe = undefined;
             const previous = this.operations;
             this.operations = undefined;
+            this.hostWorkspaceRoot = undefined;
             await previous?.dispose?.();
         })();
         return this.disposePromise;
@@ -405,20 +430,13 @@ function websocketCloseCode(reason) {
     }
 }
 export class RemoteToolOperations {
-    url;
-    protocol;
-    cwd;
-    workspacePathFlavor = "posix";
-    workspaceId = "";
-    socket;
-    isShared;
-    client;
-    localToolSchemas = new Map();
-    catalogListeners = new Set();
-    remoteLspStatus = { enabled: false, servers: [] };
-    disconnected = false;
-    disposePromise;
     constructor(url, protocol, socket, options) {
+        this.workspacePathFlavor = "posix";
+        this.workspaceId = "";
+        this.localToolSchemas = new Map();
+        this.catalogListeners = new Set();
+        this.remoteLspStatus = { enabled: false, servers: [] };
+        this.disconnected = false;
         this.url = url;
         this.protocol = protocol;
         this.socket = socket;
@@ -620,7 +638,9 @@ export class RemoteToolOperations {
         if (!this.isShared || (name !== "edit" && name !== "write"))
             return undefined;
         const path = requireString(requireRecord(invocation.arguments, "shared mutation arguments").path, "shared mutation path");
-        return this.sharedExpectedRevision(path, invocation.signal, name === "write");
+        const cwd = invocation.executionOptions.cwd;
+        const target = cwd ? (this.workspacePathFlavor === "windows" ? win32 : posix).resolve(cwd, path) : path;
+        return this.sharedExpectedRevision(target, invocation.signal, name === "write");
     }
     /** Observe exact bytes for CAS, or a daemon-confirmed absent target for creation. */
     async sharedExpectedRevision(path, signal, allowAbsent = true) {
@@ -723,6 +743,12 @@ export class RemoteToolOperations {
             isFile: () => result.kind === "file",
         };
     }
+    async resolveWorkspaceDirectory(path) {
+        const result = requireRecord(await this.request("workspace.stat", { path, workspaceOnly: true }), "workspace directory result");
+        if (result.kind !== "directory")
+            throw new Error(`Not a workspace directory: ${path}`);
+        return requireString(result.canonicalPath, "workspace directory canonical path");
+    }
     async readdir(path) {
         const result = requireRecord(await this.request("workspace.readdir", { path }), "readdir result");
         if (!Array.isArray(result.entries) || !result.entries.every((entry) => typeof entry === "string")) {