@inhuman.tools/turn 0.2.0 → 0.3.0

package/dist/tool-runtime/handler.js

@@ -1,22 +1,57 @@
+var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
+    var useValue = arguments.length > 2;
+    for (var i = 0; i < initializers.length; i++) {
+        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+    }
+    return useValue ? value : void 0;
+};
+var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
+    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+    var _, done = false;
+    for (var i = decorators.length - 1; i >= 0; i--) {
+        var context = {};
+        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
+        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
+        if (kind === "accessor") {
+            if (result === void 0) continue;
+            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+            if (_ = accept(result.get)) descriptor.get = _;
+            if (_ = accept(result.set)) descriptor.set = _;
+            if (_ = accept(result.init)) initializers.unshift(_);
+        }
+        else if (_ = accept(result)) {
+            if (kind === "field") initializers.unshift(_);
+            else descriptor[key] = _;
+        }
+    }
+    if (target) Object.defineProperty(target, contextIn.name, descriptor);
+    done = true;
+};
 /**
  * Project-bound mint of one model tool_call. Does not execute.
  * Connection-sourced names are MCPToolJob; write_file / edit_file are
  * FileMutateToolJob; pack / unknown are SystemToolJob.
- * `agentCallFromWire` mints `agent__ask` / `agent__send`. `admit` wraps it; the turn calls it directly.
+ * `agentCallFromWire` mints `agent__ask` / `agent__send`. `admit` wraps it with frozen policy and retention facts.
  * Both append onto `AdmitContext.parent` when the caller passes one. They do not enqueue.
  * Bot-call pack tools and standing bot invocations mint BotCallJob.
  * `scheme_repl` is a ProgrammaticJob bag. Inner admits reuse this door.
  */
 import { createHash } from "node:crypto";
-import { AgentCallJob, BotCallJob, AgentCallbackJob, AgentMessageJob, AgentNotifyJob, AGENT_ASK, AGENT_MESSAGE, AGENT_NOTIFY, AGENT_RESPOND, AGENT_SEND, AGENT_VOID, CallDelivery, CONTEXT_NEED_TOOL_NAME, ContextNeedToolJob, FailureOutcome, FileMutateToolJob, MCPToolJob, McpToolExpectation, mcpToolListHas, parseWebExtractArgs, parseWebSearchArgs, ProgrammaticJob, SCHEME_REPL_TOOL_NAME, SCHEME_WATCH_TOOL_NAME, SessionTurn, storageIncludingOffTape, SystemToolJob, WEB_EXTRACT_TOOL_NAME, WEB_SEARCH_TOOL_NAME, WebExtractExpectation, WebExtractToolJob, WebSearchExpectation, WebSearchToolJob, writePluginMeta, } from "@inhuman.tools/harness-model";
+import { AgentCallJob, BotCallJob, AgentCallbackJob, AgentMessageJob, AgentNotifyJob, AGENT_ASK, AGENT_MESSAGE, AGENT_NOTIFY, AGENT_RESPOND, AGENT_SEND, AGENT_VOID, CallDelivery, FailureOutcome, FileMutateToolJob, MCPToolJob, McpToolExpectation, mcpToolListHas, parseWebExtractArgs, parseWebSearchArgs, ProgrammaticJob, SCHEME_REPL_TOOL_NAME, SCHEME_WATCH_TOOL_NAME, SessionTurn, storageIncludingOffTape, SystemToolJob, WEB_EXTRACT_TOOL_NAME, WEB_SEARCH_TOOL_NAME, WebExtractExpectation, WebExtractToolJob, WebSearchExpectation, WebSearchToolJob, writePluginMeta, } from "@inhuman.tools/harness-model";
 import { parseJsonRecord } from "@inhuman.tools/harness-model/json-record";
+import { action } from "mobx";
 import { externalizePrior } from "./blob-port.js";
 import { peelAgentCallArgs, requestIdOf } from "./peel.js";
 import { workerToolAllowed } from "./worker-tools.js";
 import { lineStartOfSpan, writeFileAdmitSnap } from "./write-admit.js";
 import { policyOfTurn, stampJobRetention } from "../context/retention/index.js";
 import { peelShellCwd } from "../policy-processor/peel-cwd.js";
-import { agentCallSupportsNotify } from "../tool-catalog/index.js";
+import { agentCallSupportsNotify, behaviorEntriesOf, } from "../tool-catalog/index.js";
 function pluginRevision(catalog, pluginName) {
     const record = catalog.pluginInstall?.plugins.get(pluginName);
     if (record == null)
@@ -40,8 +75,12 @@ function priorProps(text) {
     return text === null ? {} : externalizePrior(text);
 }
 function catalogFlags(entry) {
+    const continuation = entry?.continuation ?? {
+        kind: entry?.triggersReactLoop === false ? "none" : "observation",
+    };
     return {
-        triggersReactLoop: entry?.triggersReactLoop ?? true,
+        continuationJson: JSON.stringify(continuation),
+        triggersReactLoop: continuation.kind === "observation",
         tapeHidden: entry?.tapeHidden ?? false,
         isSideChannel: entry?.isSideChannel === true,
     };
@@ -101,16 +140,16 @@ function admitExam(call, ctx, entry) {
         bag.outcomeSnap ??= { ok: true, value: { job_id: bag.toolCallId, background: true } };
     }
     ctx.originTurn?.pushChild(bag);
-    const action = exam.admit(prefix, input);
-    let jobUuid = "";
+    const admittedAction = exam.admit(prefix, input);
+    let jobUuid;
     try {
         jobUuid = bag.uuid;
     }
     catch {
         jobUuid = "";
     }
-    const actionRec = asRecord(action);
-    writePluginMeta(bag, pluginId, actionRec == null ? action : { ...actionRec, jobUuid }, true);
+    const actionRec = asRecord(admittedAction);
+    writePluginMeta(bag, pluginId, actionRec == null ? admittedAction : { ...actionRec, jobUuid }, true);
     return bag;
 }
 function rejectedComms(kind, toolCallId, name, argsJson, text) {
@@ -148,6 +187,9 @@ export function agentCallFromWire(call, catalog, ctx = {}) {
     if (ctx.session != null && !workerToolAllowed(catalog, ctx.session.agent.spec.name, name, ctx.session)) {
         return appendJob(ctx, ceilingJob(call));
     }
+    const flags = catalogFlags(catalog.catalogEntry(call.function.name) ??
+        catalog.privateWorkerEntries.find((row) => row.wireName === call.function.name) ??
+        behaviorEntriesOf(ctx.session).find((row) => row.wireName === call.function.name));
     const peeled = peelAgentCallArgs(call.function.arguments);
     const spec = parseJsonRecord(peeled.argsJson)?.spec;
     // Select the explicit child or bot node at admission;
@@ -159,6 +201,7 @@ export function agentCallFromWire(call, catalog, ctx = {}) {
             argsJson: peeled.argsJson,
             botName: spec.trim(),
             voidLegal: name === AGENT_SEND ? peeled.voidLegal : false,
+            ...flags,
             readonly: peeled.readonly,
             responseSchema: peeled.responseSchema,
             ...stamp(peeled.argsJson),
@@ -170,6 +213,7 @@ export function agentCallFromWire(call, catalog, ctx = {}) {
         argsJson: peeled.argsJson,
         regenerateable: false,
         voidLegal: name === AGENT_SEND ? peeled.voidLegal : false,
+        ...flags,
         readonly: peeled.readonly,
         responseSchema: peeled.responseSchema,
         constitution: peeled.constitution,
@@ -180,93 +224,131 @@ export function agentCallFromWire(call, catalog, ctx = {}) {
         ...stamp(peeled.argsJson),
     }));
 }
-export class ToolCallHandler {
-    kernel;
-    constructor(kernel) {
-        this.kernel = kernel;
-    }
-    admit(call, catalog = this.kernel.catalog, ctx = {}) {
-        const job = this.#admit(call, catalog, ctx);
-        // R2: the horizon is resolved once, here, from the turn's R1 policy and the catalog as it is now.
-        const entry = catalog.catalogEntry(call.function.name) ?? this.kernel.catalog.catalogEntry(call.function.name);
-        const turn = ctx.originTurn ?? ctx.session?.head ?? null;
-        stampJobRetention(job, policyOfTurn(turn instanceof SessionTurn ? turn : null), {
-            ...(entry?.class === undefined ? {} : { entryClass: entry.class }),
-            ...(entry?.retention === undefined ? {} : { hint: entry.retention }),
-        });
-        return job;
-    }
-    #admit(call, catalog, ctx) {
-        const place = (job) => appendJob(ctx, job);
-        const toolCallId = call.id;
-        const name = call.function.name;
-        const argsJson = call.function.arguments;
-        if (ctx.session != null && !workerToolAllowed(catalog, ctx.session.agent.spec.name, name, ctx.session)) {
-            return place(ceilingJob(call));
+let ToolCallHandler = (() => {
+    let _instanceExtraInitializers = [];
+    let _admit_decorators;
+    return class ToolCallHandler {
+        static {
+            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(null) : void 0;
+            _admit_decorators = [action];
+            __esDecorate(this, null, _admit_decorators, { kind: "method", name: "admit", static: false, private: false, access: { has: obj => "admit" in obj, get: obj => obj.admit }, metadata: _metadata }, null, _instanceExtraInitializers);
+            if (_metadata) Object.defineProperty(this, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
         }
-        if (name === SCHEME_REPL_TOOL_NAME || name === SCHEME_WATCH_TOOL_NAME) {
-            const flagged = name === SCHEME_WATCH_TOOL_NAME ? { background: true, walkBoundary: true } : stamp(argsJson);
-            const job = new ProgrammaticJob({
-                toolName: name,
-                toolCallId,
-                argsJson,
-                ...flagged,
-            });
-            if (job.background && job.toolCallId.trim() !== "") {
-                job.outcomeSnap ??= { ok: true, value: { job_id: job.toolCallId, background: true } };
-            }
-            return place(job);
+        kernel = __runInitializers(this, _instanceExtraInitializers);
+        constructor(kernel) {
+            this.kernel = kernel;
         }
-        const viewEntry = catalog.catalogEntry(name);
-        const kernelEntry = this.kernel.catalog.catalogEntry(name);
-        const entry = viewEntry ?? kernelEntry ?? catalog.privateWorkerEntries.find((row) => row.wireName === name);
-        const regenerateable = viewEntry?.class === "read";
-        if (entry?.exam != null) {
-            return place(admitExam(call, ctx, entry));
+        admit(call, catalog = this.kernel.catalog, ctx = {}) {
+            const job = this.#admit(call, catalog, { ...ctx, parent: undefined });
+            // R2: the horizon is resolved once, here, from the turn's R1 policy and the catalog as it is now.
+            const entry = catalog.catalogEntry(call.function.name) ??
+                this.kernel.catalog.catalogEntry(call.function.name) ??
+                catalog.privateWorkerEntries.find((row) => row.wireName === call.function.name) ??
+                behaviorEntriesOf(ctx.session).find((row) => row.wireName === call.function.name);
+            const policy = catalogFlags(entry);
+            job.continuationJson = policy.continuationJson;
+            job.triggersReactLoop = policy.triggersReactLoop;
+            job.isSideChannel = policy.isSideChannel;
+            job.tapeHidden = policy.tapeHidden;
+            const turn = ctx.originTurn ?? ctx.session?.head ?? null;
+            stampJobRetention(job, policyOfTurn(turn instanceof SessionTurn ? turn : null), {
+                ...(entry?.class === undefined ? {} : { entryClass: entry.class }),
+                ...(entry?.retention === undefined ? {} : { hint: entry.retention }),
+            });
+            return appendJob(ctx, job);
         }
-        if (entry?.packMeta?.kind === "bot-call") {
-            const meta = entry.packMeta;
-            const recipe = catalog.recipe(meta.target);
-            const known = recipe != null;
-            const revision = pluginRevision(catalog, meta.pluginName);
-            const peeled = peelAgentCallArgs(argsJson);
-            const job = new BotCallJob({
-                toolCallId,
-                name,
-                argsJson: peeled.argsJson,
-                botName: meta.target,
-                regenerateable: false,
-                voidLegal: peeled.voidLegal,
-                readonly: peeled.readonly,
-                responseSchema: peeled.responseSchema,
-                contributionPluginName: meta.pluginName,
-                contributionBotName: meta.target,
-                contributionRevision: revision,
-                ...(meta.background ? { background: true, walkBoundary: true } : stamp(argsJson)),
-                ...(known
-                    ? {}
-                    : {
-                        outcome: new FailureOutcome({
-                            code: "unknown_recipe",
-                            message: "unknown recipe",
+        #admit(call, catalog, ctx) {
+            const place = (job) => appendJob(ctx, job);
+            const toolCallId = call.id;
+            const name = call.function.name;
+            const argsJson = call.function.arguments;
+            if (ctx.session != null && !workerToolAllowed(catalog, ctx.session.agent.spec.name, name, ctx.session)) {
+                return place(ceilingJob(call));
+            }
+            if (name === SCHEME_REPL_TOOL_NAME || name === SCHEME_WATCH_TOOL_NAME) {
+                const flagged = name === SCHEME_WATCH_TOOL_NAME ? { background: true, walkBoundary: true } : stamp(argsJson);
+                const job = new ProgrammaticJob({
+                    toolName: name,
+                    toolCallId,
+                    argsJson,
+                    ...catalogFlags(catalog.catalogEntry(name) ?? this.kernel.catalog.catalogEntry(name)),
+                    ...flagged,
+                });
+                if (job.background && job.toolCallId.trim() !== "") {
+                    job.outcomeSnap ??= { ok: true, value: { job_id: job.toolCallId, background: true } };
+                }
+                return place(job);
+            }
+            const viewEntry = catalog.catalogEntry(name);
+            const kernelEntry = this.kernel.catalog.catalogEntry(name);
+            const entry = viewEntry ?? kernelEntry ?? catalog.privateWorkerEntries.find((row) => row.wireName === name);
+            const regenerateable = viewEntry?.class === "read";
+            if (entry?.exam != null) {
+                return place(admitExam(call, ctx, entry));
+            }
+            if (entry?.packMeta?.kind === "bot-call") {
+                const meta = entry.packMeta;
+                const recipe = catalog.recipe(meta.target);
+                const known = recipe != null;
+                const revision = pluginRevision(catalog, meta.pluginName);
+                const peeled = peelAgentCallArgs(argsJson);
+                const job = new BotCallJob({
+                    toolCallId,
+                    name,
+                    argsJson: peeled.argsJson,
+                    botName: meta.target,
+                    regenerateable: false,
+                    voidLegal: peeled.voidLegal,
+                    readonly: peeled.readonly,
+                    responseSchema: peeled.responseSchema,
+                    contributionPluginName: meta.pluginName,
+                    contributionBotName: meta.target,
+                    contributionRevision: revision,
+                    ...(meta.background ? { background: true, walkBoundary: true } : stamp(argsJson)),
+                    ...(known
+                        ? {}
+                        : {
+                            outcome: new FailureOutcome({
+                                code: "unknown_recipe",
+                                message: "unknown recipe",
+                            }),
+                            completed: true,
+                        }),
+                });
+                if (known && meta.lifetime != null)
+                    job.delivery = new CallDelivery({ lifetime: meta.lifetime });
+                return place(job);
+            }
+            if (entry?.source.kind === "connection") {
+                const hidden = viewEntry == null && !catalog.privateWorkerEntries.some((row) => row.wireName === name);
+                const blocked = ctx.session != null &&
+                    mcpToolListHas(ctx.session.toolBlocklist, entry.source.connectionKey, entry.source.serverToolName);
+                if (hidden || blocked) {
+                    return place(new MCPToolJob({
+                        toolCallId,
+                        name,
+                        argsJson,
+                        regenerateable: false,
+                        connectionKey: entry.source.connectionKey,
+                        serverToolName: entry.source.serverToolName,
+                        expectation: new McpToolExpectation({
+                            connectionId: entry.source.connectionKey,
+                            serverToolName: entry.source.serverToolName,
+                            argsJson,
                         }),
+                        humanApprove: false,
                         completed: true,
-                    }),
-            });
-            if (known && meta.lifetime != null)
-                job.delivery = new CallDelivery({ lifetime: meta.lifetime });
-            return place(job);
-        }
-        if (entry?.source.kind === "connection") {
-            const hidden = viewEntry == null && !catalog.privateWorkerEntries.some((row) => row.wireName === name);
-            const blocked = ctx.session != null &&
-                mcpToolListHas(ctx.session.toolBlocklist, entry.source.connectionKey, entry.source.serverToolName);
-            if (hidden || blocked) {
+                        outcomeJson: JSON.stringify({
+                            ok: false,
+                            text: `unknown MCP tool "${entry.source.serverToolName}"`,
+                        }),
+                    }));
+                }
                 return place(new MCPToolJob({
                     toolCallId,
                     name,
                     argsJson,
-                    regenerateable: false,
+                    regenerateable,
                     connectionKey: entry.source.connectionKey,
                     serverToolName: entry.source.serverToolName,
                     expectation: new McpToolExpectation({
@@ -274,187 +356,159 @@ export class ToolCallHandler {
                         serverToolName: entry.source.serverToolName,
                         argsJson,
                     }),
-                    humanApprove: false,
-                    completed: true,
-                    outcomeJson: JSON.stringify({
-                        ok: false,
-                        text: `unknown MCP tool "${entry.source.serverToolName}"`,
-                    }),
                 }));
             }
-            return place(new MCPToolJob({
-                toolCallId,
-                name,
-                argsJson,
-                regenerateable,
-                connectionKey: entry.source.connectionKey,
-                serverToolName: entry.source.serverToolName,
-                expectation: new McpToolExpectation({
-                    connectionId: entry.source.connectionKey,
-                    serverToolName: entry.source.serverToolName,
+            if (name === AGENT_ASK || name === AGENT_SEND) {
+                return agentCallFromWire(call, catalog, ctx);
+            }
+            const requestId = requestIdOf(argsJson);
+            const ownsOpen = ctx.session != null && requestId !== "" && ctx.session.agentCallbacks[requestId] != null;
+            if (name === AGENT_RESPOND || name === AGENT_VOID) {
+                if (ownsOpen) {
+                    return place(new AgentCallbackJob({
+                        toolCallId,
+                        name,
+                        argsJson,
+                        regenerateable: false,
+                        ...stamp(argsJson),
+                    }));
+                }
+                return place(rejectedComms("callback", toolCallId, name, argsJson, "no open callback"));
+            }
+            if (name === AGENT_NOTIFY) {
+                const open = ownsOpen && ctx.loadAgentCall != null ? ctx.loadAgentCall(requestId) : undefined;
+                if (open != null && agentCallSupportsNotify(catalog, open.name)) {
+                    return place(new AgentNotifyJob({
+                        toolCallId,
+                        name,
+                        argsJson,
+                        regenerateable: false,
+                        ...stamp(argsJson),
+                    }));
+                }
+                return place(rejectedComms("notify", toolCallId, name, argsJson, "no open notify"));
+            }
+            if (name === AGENT_MESSAGE) {
+                return place(new AgentMessageJob({
+                    toolCallId,
+                    name,
                     argsJson,
-                }),
-            }));
-        }
-        if (name === AGENT_ASK || name === AGENT_SEND) {
-            return agentCallFromWire(call, catalog, ctx);
-        }
-        const requestId = requestIdOf(argsJson);
-        const ownsOpen = ctx.session != null && requestId !== "" && ctx.session.agentCallbacks[requestId] != null;
-        if (name === AGENT_RESPOND || name === AGENT_VOID) {
-            if (ownsOpen) {
-                return place(new AgentCallbackJob({
+                    regenerateable: false,
+                    ...stamp(argsJson),
+                }));
+            }
+            if (name === WEB_SEARCH_TOOL_NAME) {
+                const parsed = parseWebSearchArgs(argsJson);
+                return place(new WebSearchToolJob({
                     toolCallId,
                     name,
                     argsJson,
                     regenerateable: false,
+                    expectation: new WebSearchExpectation({
+                        connectionId: WEB_SEARCH_TOOL_NAME,
+                        query: parsed.query,
+                        limit: parsed.limit,
+                    }),
                     ...stamp(argsJson),
                 }));
             }
-            return place(rejectedComms("callback", toolCallId, name, argsJson, "no open callback"));
-        }
-        if (name === AGENT_NOTIFY) {
-            const open = ownsOpen && ctx.loadAgentCall != null ? ctx.loadAgentCall(requestId) : undefined;
-            if (open != null && agentCallSupportsNotify(catalog, open.name)) {
-                return place(new AgentNotifyJob({
+            if (name === WEB_EXTRACT_TOOL_NAME) {
+                const parsed = parseWebExtractArgs(argsJson);
+                return place(new WebExtractToolJob({
                     toolCallId,
                     name,
                     argsJson,
                     regenerateable: false,
+                    expectation: new WebExtractExpectation({
+                        connectionId: WEB_EXTRACT_TOOL_NAME,
+                        url: parsed.url,
+                        charLimit: parsed.charLimit,
+                    }),
                     ...stamp(argsJson),
                 }));
             }
-            return place(rejectedComms("notify", toolCallId, name, argsJson, "no open notify"));
-        }
-        if (name === AGENT_MESSAGE) {
-            return place(new AgentMessageJob({
-                toolCallId,
-                name,
-                argsJson,
-                regenerateable: false,
-                ...stamp(argsJson),
-            }));
-        }
-        if (name === CONTEXT_NEED_TOOL_NAME) {
-            return place(new ContextNeedToolJob({
-                toolCallId,
-                name,
-                argsJson,
-                regenerateable: false,
-                ...stamp(argsJson),
-                ...catalogFlags(entry),
-            }));
-        }
-        if (name === WEB_SEARCH_TOOL_NAME) {
-            const parsed = parseWebSearchArgs(argsJson);
-            return place(new WebSearchToolJob({
-                toolCallId,
-                name,
-                argsJson,
-                regenerateable: false,
-                expectation: new WebSearchExpectation({
-                    connectionId: WEB_SEARCH_TOOL_NAME,
-                    query: parsed.query,
-                    limit: parsed.limit,
-                }),
-                ...stamp(argsJson),
-            }));
-        }
-        if (name === WEB_EXTRACT_TOOL_NAME) {
-            const parsed = parseWebExtractArgs(argsJson);
-            return place(new WebExtractToolJob({
-                toolCallId,
-                name,
-                argsJson,
-                regenerateable: false,
-                expectation: new WebExtractExpectation({
-                    connectionId: WEB_EXTRACT_TOOL_NAME,
-                    url: parsed.url,
-                    charLimit: parsed.charLimit,
-                }),
-                ...stamp(argsJson),
-            }));
-        }
-        const fileRoot = ctx.session?.path.trim() ?? "";
-        const fileSnap = (name === "write_file" || name === "edit_file") && fileRoot !== ""
-            ? writeFileAdmitSnap(fileRoot, argsJson)
-            : null;
-        let oldString = "";
-        if (name === "edit_file") {
-            const parsed = parseJsonRecord(argsJson === "" ? "{}" : argsJson);
-            const old = parsed == null ? undefined : parsed.old_string;
-            if (typeof old === "string")
-                oldString = old;
-        }
-        const priorLineStart = name === "edit_file" && fileSnap?.priorContent != null ? lineStartOfSpan(fileSnap.priorContent, oldString) : null;
-        let shellArgsJson = argsJson;
-        let shellRefuse;
-        if (name === "shell") {
-            const parsed = parseJsonRecord(argsJson === "" ? "{}" : argsJson);
-            if (parsed != null) {
-                const command = parsed.command;
-                if (typeof command === "string" && command !== "") {
-                    const cwdArg = typeof parsed.cwd === "string" ? parsed.cwd : undefined;
-                    const peeled = peelShellCwd(command, cwdArg);
-                    if (peeled !== null && peeled.command === "") {
-                        shellRefuse = "cwd only; use the cwd arg on the next call";
-                    }
-                    else if (peeled !== null) {
-                        shellArgsJson = JSON.stringify({
-                            ...parsed,
-                            cwd: peeled.cwd,
-                            command: peeled.command,
-                        });
+            const fileRoot = ctx.session?.path.trim() ?? "";
+            const fileSnap = (name === "write_file" || name === "edit_file") && fileRoot !== ""
+                ? writeFileAdmitSnap(fileRoot, argsJson)
+                : null;
+            let oldString = "";
+            if (name === "edit_file") {
+                const parsed = parseJsonRecord(argsJson === "" ? "{}" : argsJson);
+                const old = parsed == null ? undefined : parsed.old_string;
+                if (typeof old === "string")
+                    oldString = old;
+            }
+            const priorLineStart = name === "edit_file" && fileSnap?.priorContent != null ? lineStartOfSpan(fileSnap.priorContent, oldString) : null;
+            let shellArgsJson = argsJson;
+            let shellRefuse;
+            if (name === "shell") {
+                const parsed = parseJsonRecord(argsJson === "" ? "{}" : argsJson);
+                if (parsed != null) {
+                    const command = parsed.command;
+                    if (typeof command === "string" && command !== "") {
+                        const cwdArg = typeof parsed.cwd === "string" ? parsed.cwd : undefined;
+                        const peeled = peelShellCwd(command, cwdArg);
+                        if (peeled !== null && peeled.command === "") {
+                            shellRefuse = "cwd only; use the cwd arg on the next call";
+                        }
+                        else if (peeled !== null) {
+                            shellArgsJson = JSON.stringify({
+                                ...parsed,
+                                cwd: peeled.cwd,
+                                command: peeled.command,
+                            });
+                        }
                     }
                 }
             }
-        }
-        if (shellRefuse !== undefined) {
-            return place(new SystemToolJob({
-                toolCallId,
-                name,
-                argsJson: shellArgsJson,
-                regenerateable: false,
-                completed: true,
-                outcomeJson: JSON.stringify({ ok: false, text: shellRefuse }),
-            }));
-        }
-        if (name === "write_file" || name === "edit_file") {
-            if (name === "write_file" && fileSnap?.refuse != null) {
-                return place(new FileMutateToolJob({
+            if (shellRefuse !== undefined) {
+                return place(new SystemToolJob({
                     toolCallId,
                     name,
-                    argsJson,
+                    argsJson: shellArgsJson,
                     regenerateable: false,
                     completed: true,
-                    existed: fileSnap.existed,
-                    ...priorProps(fileSnap.priorContent),
-                    outcomeJson: JSON.stringify({ ok: false, text: fileSnap.refuse }),
+                    outcomeJson: JSON.stringify({ ok: false, text: shellRefuse }),
+                }));
+            }
+            if (name === "write_file" || name === "edit_file") {
+                if (name === "write_file" && fileSnap?.refuse != null) {
+                    return place(new FileMutateToolJob({
+                        toolCallId,
+                        name,
+                        argsJson,
+                        regenerateable: false,
+                        completed: true,
+                        existed: fileSnap.existed,
+                        ...priorProps(fileSnap.priorContent),
+                        outcomeJson: JSON.stringify({ ok: false, text: fileSnap.refuse }),
+                    }));
+                }
+                const prior = fileSnap == null
+                    ? {}
+                    : {
+                        ...(fileSnap.existed === null ? {} : { existed: fileSnap.existed }),
+                        ...priorProps(fileSnap.priorContent),
+                        ...(priorLineStart == null ? {} : { priorLineStart }),
+                    };
+                return place(new FileMutateToolJob({
+                    toolCallId,
+                    name,
+                    argsJson,
+                    regenerateable,
+                    ...catalogFlags(entry),
+                    ...prior,
                 }));
             }
-            const prior = fileSnap == null
-                ? {}
-                : {
-                    ...(fileSnap.existed === null ? {} : { existed: fileSnap.existed }),
-                    ...priorProps(fileSnap.priorContent),
-                    ...(priorLineStart == null ? {} : { priorLineStart }),
-                };
-            return place(new FileMutateToolJob({
+            return place(new SystemToolJob({
                 toolCallId,
                 name,
-                argsJson,
+                argsJson: shellArgsJson,
                 regenerateable,
                 ...catalogFlags(entry),
-                ...prior,
             }));
         }
-        return place(new SystemToolJob({
-            toolCallId,
-            name,
-            argsJson: shellArgsJson,
-            regenerateable,
-            ...catalogFlags(entry),
-        }));
-    }
-}
+    };
+})();
+export { ToolCallHandler };
 //# sourceMappingURL=handler.js.map