@librechat/agents 3.4.7 → 3.5.0

package/dist/cjs/tools/local/LocalExecutionTools.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"LocalExecutionTools.cjs","names":["getLocalCwd","executeLocalCode","getLocalSessionId","CodeExecutionToolName","CodeExecutionToolSchema","executeLocalBashWithArgs","executeLocalBash","BashExecutionToolName","BashToolOutputReferencesGuide","BashExecutionToolSchema"],"sources":["../../../../src/tools/local/LocalExecutionTools.ts"],"sourcesContent":["import { tool } from '@langchain/core/tools';\nimport type { DynamicStructuredTool } from '@langchain/core/tools';\nimport type * as t from '@/types';\nimport {\n  executeLocalBash,\n  executeLocalBashWithArgs,\n  executeLocalCode,\n  getLocalCwd,\n  getLocalSessionId,\n} from './LocalExecutionEngine';\nimport {\n  BashExecutionToolName,\n  BashExecutionToolSchema,\n  BashToolOutputReferencesGuide,\n} from '@/tools/BashExecutor';\nimport {\n  CodeExecutionToolName,\n  CodeExecutionToolSchema,\n} from '@/tools/CodeExecutor';\nimport { Constants } from '@/common';\n\nconst emptyOutputMessage =\n  'stdout: Empty. Ensure you\\'re writing output explicitly.\\n';\n\nexport const LocalCodeExecutionToolDescription = `\nRuns code on the local machine in the configured working directory. Unlike the remote Code API sandbox, this tool can see the local repository, installed runtimes, environment variables, and filesystem available to the host process.\n\nUsage:\n- The remote sandbox API remains the default; this description applies only when local execution mode is enabled.\n- Local commands can use the Anthropic sandbox runtime when local.sandbox.enabled=true and @anthropic-ai/sandbox-runtime is installed.\n- Commands execute in the local working directory and may modify local files.\n- Input code is already displayed to the user, so do not repeat it unless asked.\n- Output is not displayed unless you print it explicitly.\n`.trim();\n\nexport const LocalBashExecutionToolDescription = `\nRuns bash commands on the local machine in the configured working directory. Unlike the remote Code API sandbox, this tool can see the local repository, installed tools, environment variables, and filesystem available to the host process.\n\nUsage:\n- The remote sandbox API remains the default; this description applies only when local execution mode is enabled.\n- Local commands can use the Anthropic sandbox runtime when local.sandbox.enabled=true and @anthropic-ai/sandbox-runtime is installed.\n- Commands execute in the local working directory and may modify local files.\n- Output is not displayed unless you print it explicitly.\n- Prefer project-native commands and inspect files before changing them.\n`.trim();\n\nfunction formatLocalOutput(\n  result: {\n    stdout: string;\n    stderr: string;\n    exitCode: number | null;\n    timedOut: boolean;\n    overflowKilled?: boolean;\n    signal?: string;\n    fullOutputPath?: string;\n  },\n  cwd: string\n): string {\n  let formatted = '';\n  if (result.stdout !== '') {\n    formatted += `stdout:\\n${result.stdout}\\n`;\n  } else {\n    formatted += emptyOutputMessage;\n  }\n\n  if (result.stderr !== '') {\n    formatted += `stderr:\\n${result.stderr}\\n`;\n  }\n\n  if (result.exitCode != null && result.exitCode !== 0) {\n    formatted += `exit_code: ${result.exitCode}\\n`;\n  }\n\n  if (result.timedOut) {\n    formatted += 'timed_out: true\\n';\n  }\n\n  if (result.overflowKilled === true) {\n    // Surface the force-kill explicitly so the model treats this as a\n    // failure rather than misreading \"exit_code: 137 + truncated\n    // stdout\" as a normal completion. (Codex P1 — pre-fix the close\n    // handler swallowed the overflow flag and exitCode was null on\n    // signal-killed processes.)\n    formatted +=\n      'killed: true (output exceeded local.maxSpawnedBytes; process tree was terminated)\\n';\n  } else if (result.signal != null) {\n    // Generic signal kill: `kill -9 $$` from inside the script,\n    // native crash, OS OOM killer, etc. Codex P2 generalization of\n    // the overflow case.\n    formatted += `killed: true (signal=${result.signal})\\n`;\n  }\n\n  if (result.fullOutputPath != null) {\n    formatted += `full_output_path: ${result.fullOutputPath} (output exceeded the configured cap; use bash to inspect — the file holds the complete stdout/stderr)\\n`;\n  }\n\n  formatted += `working_directory: ${cwd}`;\n  return formatted.trim();\n}\n\nexport function createLocalCodeExecutionTool(\n  config: t.LocalExecutionConfig = {}\n): DynamicStructuredTool {\n  return tool(\n    async (rawInput) => {\n      const input = rawInput as {\n        lang: string;\n        code: string;\n        args?: string[];\n      };\n      const cwd = getLocalCwd(config);\n      const result = await executeLocalCode(input, config);\n      return [\n        formatLocalOutput(result, cwd),\n        {\n          session_id: getLocalSessionId(config),\n          files: [],\n        } satisfies t.CodeExecutionArtifact,\n      ];\n    },\n    {\n      name: CodeExecutionToolName,\n      description: LocalCodeExecutionToolDescription,\n      schema: CodeExecutionToolSchema,\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n\nexport function createLocalBashExecutionTool(options?: {\n  config?: t.LocalExecutionConfig;\n  enableToolOutputReferences?: boolean;\n}): DynamicStructuredTool {\n  const config = options?.config ?? {};\n  return tool(\n    async (rawInput) => {\n      const input = rawInput as { command: string; args?: string[] };\n      const cwd = getLocalCwd(config);\n      // Use the standard `bash -lc <command> -- <args...>` form so\n      // `$1`, `$2`, … resolve correctly inside `command`. The\n      // previous implementation appended args literally to the\n      // command string (`${command} ${args.join(' ')}`), which\n      // doesn't populate positional parameters and silently broke\n      // shell snippets like `command: 'echo \"$1\"'`.\n      const result =\n        input.args != null && input.args.length > 0\n          ? await executeLocalBashWithArgs(input.command, input.args, config)\n          : await executeLocalBash(input.command, config);\n      return [\n        formatLocalOutput(result, cwd),\n        {\n          session_id: getLocalSessionId(config),\n          files: [],\n        } satisfies t.CodeExecutionArtifact,\n      ];\n    },\n    {\n      name: BashExecutionToolName,\n      description:\n        options?.enableToolOutputReferences === true\n          ? `${LocalBashExecutionToolDescription}\\n\\n${BashToolOutputReferencesGuide}`\n          : LocalBashExecutionToolDescription,\n      schema: BashExecutionToolSchema,\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n"],"mappings":";;;;;;;AAqBA,MAAM,qBACJ;AAEF,MAAa,oCAAoC;;;;;;;;;EAS/C,KAAK;AAEP,MAAa,oCAAoC;;;;;;;;;EAS/C,KAAK;AAEP,SAAS,kBACP,QASA,KACQ;CACR,IAAI,YAAY;CAChB,IAAI,OAAO,WAAW,IACpB,aAAa,YAAY,OAAO,OAAO;MAEvC,aAAa;CAGf,IAAI,OAAO,WAAW,IACpB,aAAa,YAAY,OAAO,OAAO;CAGzC,IAAI,OAAO,YAAY,QAAQ,OAAO,aAAa,GACjD,aAAa,cAAc,OAAO,SAAS;CAG7C,IAAI,OAAO,UACT,aAAa;CAGf,IAAI,OAAO,mBAAmB,MAM5B,aACE;MACG,IAAI,OAAO,UAAU,MAI1B,aAAa,wBAAwB,OAAO,OAAO;CAGrD,IAAI,OAAO,kBAAkB,MAC3B,aAAa,qBAAqB,OAAO,eAAe;CAG1D,aAAa,sBAAsB;CACnC,OAAO,UAAU,KAAK;AACxB;AAEA,SAAgB,6BACd,SAAiC,CAAC,GACX;CACvB,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAClB,MAAM,QAAQ;EAKd,MAAM,MAAMA,6BAAAA,YAAY,MAAM;EAE9B,OAAO,CACL,kBAAkB,MAFCC,6BAAAA,iBAAiB,OAAO,MAAM,GAEvB,GAAG,GAC7B;GACE,YAAYC,6BAAAA,kBAAkB,MAAM;GACpC,OAAO,CAAC;EACV,CACF;CACF,GACA;EACE,MAAMC,qBAAAA;EACN,aAAa;EACb,QAAQC,qBAAAA;EACR,gBAAA;CACF,CACF;AACF;AAEA,SAAgB,6BAA6B,SAGnB;CACxB,MAAM,SAAS,SAAS,UAAU,CAAC;CACnC,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAClB,MAAM,QAAQ;EACd,MAAM,MAAMJ,6BAAAA,YAAY,MAAM;EAW9B,OAAO,CACL,kBAJA,MAAM,QAAQ,QAAQ,MAAM,KAAK,SAAS,IACtC,MAAMK,6BAAAA,yBAAyB,MAAM,SAAS,MAAM,MAAM,MAAM,IAChE,MAAMC,6BAAAA,iBAAiB,MAAM,SAAS,MAAM,GAEtB,GAAG,GAC7B;GACE,YAAYJ,6BAAAA,kBAAkB,MAAM;GACpC,OAAO,CAAC;EACV,CACF;CACF,GACA;EACE,MAAMK,qBAAAA;EACN,aACE,SAAS,+BAA+B,OACpC,GAAG,kCAAkC,MAAMC,qBAAAA,kCAC3C;EACN,QAAQC,qBAAAA;EACR,gBAAA;CACF,CACF;AACF"}
+{"version":3,"file":"LocalExecutionTools.cjs","names":["getLocalCwd","executeLocalCode","getLocalSessionId","CodeExecutionToolName","CodeExecutionToolSchema","executeLocalBashWithArgs","executeLocalBash","BashExecutionToolName","BashToolOutputReferencesGuide","BashExecutionToolSchema"],"sources":["../../../../src/tools/local/LocalExecutionTools.ts"],"mappings":";;;;;;;AAqBA,MAAM,qBACJ;AAEF,MAAa,oCAAoC;;;;;;;;;EAS/C,KAAK;AAEP,MAAa,oCAAoC;;;;;;;;;EAS/C,KAAK;AAEP,SAAS,kBACP,QASA,KACQ;CACR,IAAI,YAAY;CAChB,IAAI,OAAO,WAAW,IACpB,aAAa,YAAY,OAAO,OAAO;MAEvC,aAAa;CAGf,IAAI,OAAO,WAAW,IACpB,aAAa,YAAY,OAAO,OAAO;CAGzC,IAAI,OAAO,YAAY,QAAQ,OAAO,aAAa,GACjD,aAAa,cAAc,OAAO,SAAS;CAG7C,IAAI,OAAO,UACT,aAAa;CAGf,IAAI,OAAO,mBAAmB,MAM5B,aACE;MACG,IAAI,OAAO,UAAU,MAI1B,aAAa,wBAAwB,OAAO,OAAO;CAGrD,IAAI,OAAO,kBAAkB,MAC3B,aAAa,qBAAqB,OAAO,eAAe;CAG1D,aAAa,sBAAsB;CACnC,OAAO,UAAU,KAAK;AACxB;AAEA,SAAgB,6BACd,SAAiC,CAAC,GACX;CACvB,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAClB,MAAM,QAAQ;EAKd,MAAM,MAAMA,6BAAAA,YAAY,MAAM;EAE9B,OAAO,CACL,kBAAkB,MAFCC,6BAAAA,iBAAiB,OAAO,MAAM,GAEvB,GAAG,GAC7B;GACE,YAAYC,6BAAAA,kBAAkB,MAAM;GACpC,OAAO,CAAC;EACV,CACF;CACF,GACA;EACE,MAAMC,qBAAAA;EACN,aAAa;EACb,QAAQC,qBAAAA;EACR,gBAAA;CACF,CACF;AACF;AAEA,SAAgB,6BAA6B,SAGnB;CACxB,MAAM,SAAS,SAAS,UAAU,CAAC;CACnC,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,aAAa;EAClB,MAAM,QAAQ;EACd,MAAM,MAAMJ,6BAAAA,YAAY,MAAM;EAW9B,OAAO,CACL,kBAJA,MAAM,QAAQ,QAAQ,MAAM,KAAK,SAAS,IACtC,MAAMK,6BAAAA,yBAAyB,MAAM,SAAS,MAAM,MAAM,MAAM,IAChE,MAAMC,6BAAAA,iBAAiB,MAAM,SAAS,MAAM,GAEtB,GAAG,GAC7B;GACE,YAAYJ,6BAAAA,kBAAkB,MAAM;GACpC,OAAO,CAAC;EACV,CACF;CACF,GACA;EACE,MAAMK,qBAAAA;EACN,aACE,SAAS,+BAA+B,OACpC,GAAG,kCAAkC,MAAMC,qBAAAA,kCAC3C;EACN,QAAQC,qBAAAA;EACR,gBAAA;CACF,CACF;AACF"}

package/dist/cjs/tools/local/LocalProgrammaticToolCalling.cjs

@@ -85,18 +85,6 @@ function writeJson(res, status, value) {
 	res.writeHead(status, { "Content-Type": "application/json" });
 	res.end(JSON.stringify(value));
 }
-/**
-* Run the host's `PreToolUse` hook chain for a single bridge call.
-* Returns the (possibly rewritten) input and a `denyReason` if any
-* matcher returned `decision: 'deny'` or `'ask'`. `'ask'` collapses
-* to deny because the bridge can't raise a LangGraph interrupt from
-* inside an HTTP handler — fail-closed matches the rest of the SDK
-* when HITL is unavailable.
-*
-* @internal Exported for tests so the deny / allow / updatedInput /
-*   ask branches can be exercised without standing up the full HTTP
-*   bridge.
-*/
 async function applyPreToolUseHooksForBridge(hookContext, toolName, toolUseId, toolInput) {
 	if (hookContext.registry == null) return { input: toolInput };
 	const result = await require_executeHooks.executeHooks({

package/dist/cjs/tools/local/LocalProgrammaticToolCalling.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"LocalProgrammaticToolCalling.cjs","names":["ProgrammaticToolCallingSchema","BashProgrammaticToolCallingSchema","executeHooks","executeTools","normalizeToPythonIdentifier","normalizeToBashIdentifier","shellQuote","filterBashToolsByUsage","filterToolsByUsage","executeLocalBash","executeLocalCode","formatCompletedResponse","getLocalSessionId","ProgrammaticToolCallingName","ProgrammaticToolCallingDescription","BashProgrammaticToolCallingDescription"],"sources":["../../../../src/tools/local/LocalProgrammaticToolCalling.ts"],"sourcesContent":["import { createServer } from 'http';\nimport { tool } from '@langchain/core/tools';\nimport { randomBytes, randomUUID, timingSafeEqual } from 'crypto';\nimport type { DynamicStructuredTool } from '@langchain/core/tools';\nimport type { IncomingMessage, ServerResponse } from 'http';\nimport type { AddressInfo } from 'net';\nimport type * as t from '@/types';\nimport {\n  executeTools,\n  filterToolsByUsage,\n  formatCompletedResponse,\n  normalizeToPythonIdentifier,\n  ProgrammaticToolCallingName,\n  ProgrammaticToolCallingSchema,\n  ProgrammaticToolCallingDescription,\n} from '@/tools/ProgrammaticToolCalling';\nimport {\n  BashProgrammaticToolCallingSchema,\n  BashProgrammaticToolCallingDescription,\n  filterBashToolsByUsage,\n  normalizeToBashIdentifier,\n} from '@/tools/BashProgrammaticToolCalling';\nimport {\n  executeLocalBash,\n  executeLocalCode,\n  getLocalSessionId,\n  shellQuote,\n} from './LocalExecutionEngine';\nimport { executeHooks } from '@/hooks';\nimport { Constants } from '@/common';\n\nconst DEFAULT_TIMEOUT = 60000;\nconst LOCAL_MIN_TIMEOUT = 1000;\nconst LOCAL_MAX_TIMEOUT = 300000;\n\ntype LocalTimeoutSchema = {\n  type: 'integer';\n  minimum: number;\n  maximum: number;\n  default: number;\n  description: string;\n};\n\ntype LocalProgrammaticToolCallingJsonSchema = {\n  type: 'object';\n  properties: typeof ProgrammaticToolCallingSchema.properties & {\n    timeout: LocalTimeoutSchema;\n    lang: {\n      type: 'string';\n      enum: readonly ['py', 'python', 'bash', 'sh'];\n      default: 'bash';\n      description: string;\n    };\n  };\n  required: readonly ['code'];\n};\n\ntype LocalBashProgrammaticToolCallingJsonSchema = {\n  type: 'object';\n  properties: typeof BashProgrammaticToolCallingSchema.properties & {\n    timeout: LocalTimeoutSchema;\n  };\n  required: readonly ['code'];\n};\n\nfunction normalizeLocalTimeout(timeoutMs: number | undefined): number {\n  if (timeoutMs == null || !Number.isFinite(timeoutMs)) {\n    return DEFAULT_TIMEOUT;\n  }\n\n  return Math.max(LOCAL_MIN_TIMEOUT, Math.floor(timeoutMs));\n}\n\nfunction formatLocalTimeout(timeoutMs: number): string {\n  return timeoutMs % 1000 === 0\n    ? `${timeoutMs / 1000} seconds`\n    : `${timeoutMs} milliseconds`;\n}\n\nfunction createLocalTimeoutSchema(timeoutMs?: number): LocalTimeoutSchema {\n  const defaultTimeout = normalizeLocalTimeout(timeoutMs);\n  const maxTimeout = Math.max(LOCAL_MAX_TIMEOUT, defaultTimeout);\n  const formattedDefault = formatLocalTimeout(defaultTimeout);\n  const formattedMax = formatLocalTimeout(maxTimeout);\n\n  return {\n    type: 'integer',\n    minimum: LOCAL_MIN_TIMEOUT,\n    maximum: maxTimeout,\n    default: defaultTimeout,\n    description:\n      'Maximum local execution time in milliseconds. ' +\n      `Default: ${formattedDefault}. Max: ${formattedMax}.`,\n  };\n}\n\nfunction createLocalProgrammaticToolCallingSchema(\n  localConfig: t.LocalExecutionConfig = {}\n): LocalProgrammaticToolCallingJsonSchema {\n  return {\n    ...ProgrammaticToolCallingSchema,\n    properties: {\n      ...ProgrammaticToolCallingSchema.properties,\n      timeout: createLocalTimeoutSchema(localConfig.timeoutMs),\n      lang: {\n        type: 'string',\n        enum: ['py', 'python', 'bash', 'sh'],\n        default: 'bash',\n        description:\n          'Local engine runtime for orchestration code. Defaults to bash; use py/python for Python orchestration.',\n      },\n    },\n  } as const;\n}\n\nfunction createLocalBashProgrammaticToolCallingSchema(\n  localConfig: t.LocalExecutionConfig = {}\n): LocalBashProgrammaticToolCallingJsonSchema {\n  return {\n    ...BashProgrammaticToolCallingSchema,\n    properties: {\n      ...BashProgrammaticToolCallingSchema.properties,\n      timeout: createLocalTimeoutSchema(localConfig.timeoutMs),\n    },\n  } as const;\n}\n\ntype ToolBridge = {\n  url: string;\n  token: string;\n  close: () => Promise<void>;\n};\n\ntype ToolRequest = {\n  id?: string;\n  name?: string;\n  input?: Record<string, unknown>;\n};\n\nconst BRIDGE_AUTH_HEADER = 'x-librechat-bridge-token';\n\nfunction constantTimeEquals(a: string, b: string): boolean {\n  const aBuf = Buffer.from(a, 'utf8');\n  const bBuf = Buffer.from(b, 'utf8');\n  if (aBuf.length !== bBuf.length) {\n    return false;\n  }\n  return timingSafeEqual(aBuf, bBuf);\n}\n\ntype LocalProgrammaticRuntime = 'python' | 'bash';\n\ntype LocalProgrammaticParams = {\n  code: string;\n  timeout?: number;\n  lang?: string;\n  runtime?: string;\n  language?: string;\n};\n\ntype ToolFilter = (toolDefs: t.LCTool[], code: string) => t.LCTool[];\n\nfunction resolveRuntime(\n  params: LocalProgrammaticParams\n): LocalProgrammaticRuntime {\n  const rawRuntime = params.lang ?? params.runtime ?? params.language ?? 'bash';\n  return rawRuntime === 'py' || rawRuntime === 'python' ? 'python' : 'bash';\n}\n\nfunction toSerializable(value: unknown): unknown {\n  if (value === undefined) {\n    return null;\n  }\n  return value;\n}\n\nasync function readRequestBody(req: IncomingMessage): Promise<ToolRequest> {\n  const chunks: Buffer[] = [];\n  for await (const chunk of req) {\n    chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));\n  }\n  const raw = Buffer.concat(chunks).toString('utf8');\n  if (raw === '') {\n    return {};\n  }\n  return JSON.parse(raw) as ToolRequest;\n}\n\nfunction writeJson(res: ServerResponse, status: number, value: unknown): void {\n  res.writeHead(status, { 'Content-Type': 'application/json' });\n  res.end(JSON.stringify(value));\n}\n\n/**\n * Run the host's `PreToolUse` hook chain for a single bridge call.\n * Returns the (possibly rewritten) input and a `denyReason` if any\n * matcher returned `decision: 'deny'` or `'ask'`. `'ask'` collapses\n * to deny because the bridge can't raise a LangGraph interrupt from\n * inside an HTTP handler — fail-closed matches the rest of the SDK\n * when HITL is unavailable.\n *\n * @internal Exported for tests so the deny / allow / updatedInput /\n *   ask branches can be exercised without standing up the full HTTP\n *   bridge.\n */\nexport async function applyPreToolUseHooksForBridge(\n  hookContext: t.ProgrammaticHookContext,\n  toolName: string,\n  toolUseId: string,\n  toolInput: Record<string, unknown>\n): Promise<{ input: Record<string, unknown>; denyReason?: string }> {\n  if (hookContext.registry == null) {\n    return { input: toolInput };\n  }\n  const result = await executeHooks({\n    registry: hookContext.registry,\n    input: {\n      hook_event_name: 'PreToolUse',\n      runId: hookContext.runId,\n      threadId: hookContext.threadId,\n      agentId: hookContext.agentId,\n      executingAgentId: hookContext.executingAgentId,\n      toolName,\n      toolInput,\n      toolUseId,\n      stepId: '',\n      turn: 0,\n    },\n    sessionId: hookContext.runId,\n    matchQuery: toolName,\n  }).catch(() => undefined);\n  if (result == null) {\n    return { input: toolInput };\n  }\n  const nextInput =\n    result.updatedInput != null\n      ? (result.updatedInput as Record<string, unknown>)\n      : toolInput;\n  if (result.decision === 'deny' || result.decision === 'ask') {\n    return {\n      input: nextInput,\n      denyReason:\n        result.reason ??\n        (result.decision === 'ask'\n          ? `Tool \"${toolName}\" requires human approval; bridge cannot raise an interrupt — denying.`\n          : `Tool \"${toolName}\" denied by PreToolUse hook.`),\n    };\n  }\n  return { input: nextInput };\n}\n\nasync function createToolBridge(\n  toolMap: t.ToolMap,\n  hookContext?: t.ProgrammaticHookContext\n): Promise<ToolBridge> {\n  const token = randomBytes(32).toString('hex');\n  const server = createServer((req, res) => {\n    // `?mode=text` returns the already-serialized result as the body\n    // (or the error message at non-2xx). Python/Node callers stay on\n    // JSON; bash callers using curl can avoid pulling in a JSON\n    // parser dependency (Codex P2 #19 — `python3` was a hard\n    // requirement for the bash bridge, breaking minimal containers).\n    const url = new URL(req.url ?? '/', 'http://127.0.0.1');\n    const isTextMode = url.searchParams.get('mode') === 'text';\n    if (req.method !== 'POST' || url.pathname !== '/tool') {\n      if (isTextMode) {\n        res.writeHead(404, { 'Content-Type': 'text/plain' });\n        res.end('Not found');\n      } else {\n        writeJson(res, 404, { error: 'Not found' });\n      }\n      return;\n    }\n\n    const presented = req.headers[BRIDGE_AUTH_HEADER];\n    const presentedToken = Array.isArray(presented) ? presented[0] : presented;\n    if (\n      typeof presentedToken !== 'string' ||\n      !constantTimeEquals(presentedToken, token)\n    ) {\n      if (isTextMode) {\n        res.writeHead(401, { 'Content-Type': 'text/plain' });\n        res.end('Unauthorized');\n      } else {\n        writeJson(res, 401, { error: 'Unauthorized' });\n      }\n      return;\n    }\n\n    readRequestBody(req)\n      .then(async (body) => {\n        if (typeof body.name !== 'string' || body.name === '') {\n          const message = 'Tool request is missing a tool name.';\n          if (isTextMode) {\n            res.writeHead(400, { 'Content-Type': 'text/plain' });\n            res.end(message);\n          } else {\n            writeJson(res, 400, {\n              call_id: body.id ?? 'invalid',\n              result: null,\n              is_error: true,\n              error_message: message,\n            });\n          }\n          return;\n        }\n\n        const callId = body.id ?? `local_call_${randomUUID()}`;\n        let effectiveInput: Record<string, unknown> = body.input ?? {};\n        if (hookContext != null) {\n          const gate = await applyPreToolUseHooksForBridge(\n            hookContext,\n            body.name,\n            callId,\n            effectiveInput\n          );\n          if (gate.denyReason != null) {\n            const denyMsg = gate.denyReason;\n            if (isTextMode) {\n              res.writeHead(500, { 'Content-Type': 'text/plain' });\n              res.end(denyMsg);\n            } else {\n              writeJson(res, 500, {\n                call_id: callId,\n                result: null,\n                is_error: true,\n                error_message: denyMsg,\n              });\n            }\n            return;\n          }\n          effectiveInput = gate.input;\n        }\n\n        const [result] = await executeTools(\n          [\n            {\n              id: callId,\n              name: body.name,\n              input: effectiveInput,\n            },\n          ],\n          toolMap\n        );\n\n        if (isTextMode) {\n          if (result.is_error === true) {\n            res.writeHead(500, { 'Content-Type': 'text/plain' });\n            res.end(result.error_message ?? `Tool ${body.name} failed`);\n          } else {\n            const value = toSerializable(result.result);\n            const text =\n              typeof value === 'string' ? value : JSON.stringify(value);\n            res.writeHead(200, { 'Content-Type': 'text/plain' });\n            res.end(text);\n          }\n          return;\n        }\n\n        writeJson(res, 200, {\n          ...result,\n          result: toSerializable(result.result),\n        });\n      })\n      .catch((error: Error) => {\n        if (isTextMode) {\n          res.writeHead(500, { 'Content-Type': 'text/plain' });\n          res.end(error.message);\n        } else {\n          writeJson(res, 500, {\n            call_id: 'error',\n            result: null,\n            is_error: true,\n            error_message: error.message,\n          });\n        }\n      });\n  });\n\n  await new Promise<void>((resolve, reject) => {\n    server.once('error', reject);\n    server.listen(0, '127.0.0.1', resolve);\n  });\n\n  const address = server.address() as AddressInfo;\n  return {\n    url: `http://127.0.0.1:${address.port}/tool`,\n    token,\n    close: () =>\n      new Promise((resolve, reject) => {\n        server.close((error) => (error ? reject(error) : resolve()));\n      }),\n  };\n}\n\nfunction indent(code: string): string {\n  return code\n    .split('\\n')\n    .map((line) => `  ${line}`)\n    .join('\\n');\n}\n\nfunction createPythonProgram(\n  code: string,\n  toolDefs: t.LCTool[],\n  bridgeUrl: string,\n  bridgeToken: string\n): string {\n  const functionDefs = toolDefs\n    .map((def) => {\n      const pythonName = normalizeToPythonIdentifier(def.name);\n      return [\n        `async def ${pythonName}(**kwargs):`,\n        `  return await __librechat_call_tool(${JSON.stringify(def.name)}, kwargs)`,\n      ].join('\\n');\n    })\n    .join('\\n\\n');\n\n  return `\nimport asyncio\nimport json\nimport urllib.request\n\n__LIBRECHAT_TOOL_BRIDGE = ${JSON.stringify(bridgeUrl)}\n__LIBRECHAT_TOOL_TOKEN = ${JSON.stringify(bridgeToken)}\n\nasync def __librechat_call_tool(name, payload):\n  body = json.dumps({\"name\": name, \"input\": payload}).encode(\"utf-8\")\n  headers = {\n    \"Content-Type\": \"application/json\",\n    ${JSON.stringify(BRIDGE_AUTH_HEADER)}: __LIBRECHAT_TOOL_TOKEN,\n  }\n\n  def request():\n    req = urllib.request.Request(__LIBRECHAT_TOOL_BRIDGE, data=body, headers=headers, method=\"POST\")\n    with urllib.request.urlopen(req, timeout=300) as response:\n      return response.read().decode(\"utf-8\")\n\n  raw = await asyncio.to_thread(request)\n  result = json.loads(raw)\n  if result.get(\"is_error\"):\n    raise RuntimeError(result.get(\"error_message\") or f\"Tool {name} failed\")\n  return result.get(\"result\")\n\n${functionDefs}\n\nasync def __librechat_main():\n${indent(code)}\n\nasyncio.run(__librechat_main())\n`.trimStart();\n}\n\nexport function _createBashProgramForTests(\n  code: string,\n  toolDefs: t.LCTool[],\n  bridgeUrl: string,\n  bridgeToken: string\n): string {\n  return createBashProgram(code, toolDefs, bridgeUrl, bridgeToken);\n}\n\nfunction createBashProgram(\n  code: string,\n  toolDefs: t.LCTool[],\n  bridgeUrl: string,\n  bridgeToken: string\n): string {\n  const functions = toolDefs\n    .map((def) => {\n      const bashName = normalizeToBashIdentifier(def.name);\n      return [\n        `${bashName}() {`,\n        '  local payload=\"${1:-}\"',\n        '  if [ -z \"$payload\" ]; then payload=\\'{}\\'; fi',\n        `  __librechat_call_tool ${shellQuote(def.name)} \"$payload\"`,\n        '}',\n      ].join('\\n');\n    })\n    .join('\\n\\n');\n\n  return `\n__LIBRECHAT_TOOL_BRIDGE=${shellQuote(bridgeUrl)}\n__LIBRECHAT_TOOL_HEADER=${shellQuote(BRIDGE_AUTH_HEADER)}\n__LIBRECHAT_TOOL_TOKEN=${shellQuote(bridgeToken)}\n\n# Bridge call helper. Tries curl first (universally available, no\n# JSON parser needed thanks to the bridge's ?mode=text endpoint),\n# falls back to python3 for environments without curl. Codex P2 #19\n# flagged that the prior python3-only path broke minimal containers\n# (and Windows hosts without a python3 binary on PATH). Tool names\n# come from Constants.* and are always safe identifiers, so we can\n# splice them into JSON without an escape pass.\n__librechat_call_tool() {\n  local tool_name=\"$1\"\n  local payload=\"$2\"\n  if command -v curl >/dev/null 2>&1; then\n    local body=\"{\\\\\"name\\\\\":\\\\\"$tool_name\\\\\",\\\\\"input\\\\\":$payload}\"\n    local response\n    local http_code\n    response=$(curl -sS -X POST \\\n      -H \"Content-Type: application/json\" \\\n      -H \"$__LIBRECHAT_TOOL_HEADER: $__LIBRECHAT_TOOL_TOKEN\" \\\n      --data-binary \"$body\" \\\n      -w '\\\\n__LIBRECHAT_HTTP_CODE_%{http_code}__' \\\n      \"$__LIBRECHAT_TOOL_BRIDGE?mode=text\")\n    http_code=$(printf '%s' \"$response\" | sed -n 's/.*__LIBRECHAT_HTTP_CODE_\\\\([0-9][0-9]*\\\\)__$/\\\\1/p')\n    local body_only\n    body_only=$(printf '%s' \"$response\" | sed 's/__LIBRECHAT_HTTP_CODE_[0-9][0-9]*__$//')\n    if [ \"$http_code\" = \"200\" ]; then\n      printf '%s' \"$body_only\"\n      return 0\n    fi\n    printf '%s\\\\n' \"$body_only\" >&2\n    return 1\n  elif command -v python3 >/dev/null 2>&1; then\n    python3 - \"$__LIBRECHAT_TOOL_BRIDGE\" \"$tool_name\" \"$payload\" \"$__LIBRECHAT_TOOL_HEADER\" \"$__LIBRECHAT_TOOL_TOKEN\" <<'PY'\nimport json\nimport sys\nimport urllib.request\n\nurl, name, payload, header, token = sys.argv[1], sys.argv[2], sys.argv[3], sys.argv[4], sys.argv[5]\nbody = json.dumps({\"name\": name, \"input\": json.loads(payload)}).encode(\"utf-8\")\nreq = urllib.request.Request(url, data=body, headers={\"Content-Type\": \"application/json\", header: token}, method=\"POST\")\nwith urllib.request.urlopen(req, timeout=300) as response:\n  result = json.loads(response.read().decode(\"utf-8\"))\nif result.get(\"is_error\"):\n  print(result.get(\"error_message\") or f\"Tool {name} failed\", file=sys.stderr)\n  sys.exit(1)\nvalue = result.get(\"result\")\nif isinstance(value, str):\n  print(value)\nelse:\n  print(json.dumps(value))\nPY\n  else\n    printf 'librechat: tool bridge needs either curl or python3 on PATH\\\\n' >&2\n    return 1\n  fi\n}\n\n${functions}\n\n${code}\n`.trimStart();\n}\n\nfunction getProgrammaticContext(config?: {\n  toolCall?: unknown;\n}): Partial<t.ProgrammaticCache> {\n  return (config?.toolCall ?? {}) as Partial<t.ProgrammaticCache>;\n}\n\nfunction createEffectiveToolMap(\n  toolMap: t.ToolMap,\n  toolDefs: t.LCTool[],\n  code: string,\n  filterTools: ToolFilter\n): { effectiveTools: t.LCTool[]; effectiveMap: t.ToolMap } {\n  const effectiveTools = filterTools(toolDefs, code);\n  const effectiveMap = new Map<string, t.GenericTool>(\n    effectiveTools\n      .map((def) => {\n        const executable = toolMap.get(def.name);\n        return executable == null\n          ? undefined\n          : ([def.name, executable] as [string, t.GenericTool]);\n      })\n      .filter((entry): entry is [string, t.GenericTool] => entry != null)\n  );\n\n  return { effectiveTools, effectiveMap };\n}\n\nasync function runLocalProgrammaticTool(args: {\n  params: LocalProgrammaticParams;\n  config?: { toolCall?: unknown };\n  localConfig: t.LocalExecutionConfig;\n  runtime: LocalProgrammaticRuntime;\n}): Promise<[string, t.ProgrammaticExecutionArtifact]> {\n  const { toolMap, toolDefs, hookContext } = getProgrammaticContext(\n    args.config\n  );\n\n  if (toolMap == null || toolMap.size === 0) {\n    throw new Error('No toolMap provided for local programmatic execution.');\n  }\n  if (toolDefs == null || toolDefs.length === 0) {\n    throw new Error(\n      'No tool definitions provided for local programmatic execution.'\n    );\n  }\n\n  const { effectiveTools, effectiveMap } = createEffectiveToolMap(\n    toolMap,\n    toolDefs,\n    args.params.code,\n    args.runtime === 'bash' ? filterBashToolsByUsage : filterToolsByUsage\n  );\n  const bridge = await createToolBridge(effectiveMap, hookContext);\n\n  try {\n    const timeoutMs =\n      args.params.timeout ?? args.localConfig.timeoutMs ?? DEFAULT_TIMEOUT;\n    const result =\n      args.runtime === 'bash'\n        ? await executeLocalBash(\n          createBashProgram(\n            args.params.code,\n            effectiveTools,\n            bridge.url,\n            bridge.token\n          ),\n          { ...args.localConfig, timeoutMs }\n        )\n        : await executeLocalCode(\n          {\n            lang: 'py',\n            code: createPythonProgram(\n              args.params.code,\n              effectiveTools,\n              bridge.url,\n              bridge.token\n            ),\n          },\n          { ...args.localConfig, timeoutMs }\n        );\n\n    if (result.exitCode !== 0 || result.timedOut) {\n      throw new Error(\n        result.stderr !== ''\n          ? result.stderr\n          : `Local ${args.runtime} programmatic execution exited with code ${\n            result.exitCode ?? 'unknown'\n          }`\n      );\n    }\n\n    return formatCompletedResponse({\n      status: 'completed',\n      session_id: getLocalSessionId(args.localConfig),\n      stdout: result.stdout,\n      stderr: result.stderr,\n      files: [],\n    });\n  } finally {\n    await bridge.close();\n  }\n}\n\nexport function createLocalProgrammaticToolCallingTool(\n  localConfig: t.LocalExecutionConfig = {}\n): DynamicStructuredTool {\n  return tool(\n    async (rawParams, config) => {\n      const params = rawParams as LocalProgrammaticParams;\n      return runLocalProgrammaticTool({\n        params,\n        config,\n        localConfig,\n        runtime: resolveRuntime(params),\n      });\n    },\n    {\n      name: ProgrammaticToolCallingName,\n      description: `${ProgrammaticToolCallingDescription}\\n\\nLocal engine: runs bash by default, or Python when \\`lang\\` is \\`py\\` or \\`python\\`, on the host machine and calls tools through an in-process localhost bridge.`,\n      schema: createLocalProgrammaticToolCallingSchema(localConfig),\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n\nexport function createLocalBashProgrammaticToolCallingTool(\n  localConfig: t.LocalExecutionConfig = {}\n): DynamicStructuredTool {\n  return tool(\n    async (rawParams, config) => {\n      const params = rawParams as LocalProgrammaticParams;\n      return runLocalProgrammaticTool({\n        params,\n        config,\n        localConfig,\n        runtime: 'bash',\n      });\n    },\n    {\n      name: Constants.BASH_PROGRAMMATIC_TOOL_CALLING,\n      description: `${BashProgrammaticToolCallingDescription}\\n\\nLocal engine: runs this bash orchestration code on the host machine and calls tools through an in-process localhost bridge.`,\n      schema: createLocalBashProgrammaticToolCallingSchema(localConfig),\n      responseFormat: Constants.CONTENT_AND_ARTIFACT,\n    }\n  );\n}\n"],"mappings":";;;;;;;;;;;AA+BA,MAAM,kBAAkB;AACxB,MAAM,oBAAoB;AAC1B,MAAM,oBAAoB;AAgC1B,SAAS,sBAAsB,WAAuC;CACpE,IAAI,aAAa,QAAQ,CAAC,OAAO,SAAS,SAAS,GACjD,OAAO;CAGT,OAAO,KAAK,IAAI,mBAAmB,KAAK,MAAM,SAAS,CAAC;AAC1D;AAEA,SAAS,mBAAmB,WAA2B;CACrD,OAAO,YAAY,QAAS,IACxB,GAAG,YAAY,IAAK,YACpB,GAAG,UAAU;AACnB;AAEA,SAAS,yBAAyB,WAAwC;CACxE,MAAM,iBAAiB,sBAAsB,SAAS;CACtD,MAAM,aAAa,KAAK,IAAI,mBAAmB,cAAc;CAI7D,OAAO;EACL,MAAM;EACN,SAAS;EACT,SAAS;EACT,SAAS;EACT,aACE,0DATqB,mBAAmB,cAUb,EAAE,SATZ,mBAAmB,UASa,EAAE;CACvD;AACF;AAEA,SAAS,yCACP,cAAsC,CAAC,GACC;CACxC,OAAO;EACL,GAAGA,gCAAAA;EACH,YAAY;GACV,GAAGA,gCAAAA,8BAA8B;GACjC,SAAS,yBAAyB,YAAY,SAAS;GACvD,MAAM;IACJ,MAAM;IACN,MAAM;KAAC;KAAM;KAAU;KAAQ;IAAI;IACnC,SAAS;IACT,aACE;GACJ;EACF;CACF;AACF;AAEA,SAAS,6CACP,cAAsC,CAAC,GACK;CAC5C,OAAO;EACL,GAAGC,oCAAAA;EACH,YAAY;GACV,GAAGA,oCAAAA,kCAAkC;GACrC,SAAS,yBAAyB,YAAY,SAAS;EACzD;CACF;AACF;AAcA,MAAM,qBAAqB;AAE3B,SAAS,mBAAmB,GAAW,GAAoB;CACzD,MAAM,OAAO,OAAO,KAAK,GAAG,MAAM;CAClC,MAAM,OAAO,OAAO,KAAK,GAAG,MAAM;CAClC,IAAI,KAAK,WAAW,KAAK,QACvB,OAAO;CAET,QAAA,GAAA,OAAA,gBAAA,CAAuB,MAAM,IAAI;AACnC;AAcA,SAAS,eACP,QAC0B;CAC1B,MAAM,aAAa,OAAO,QAAQ,OAAO,WAAW,OAAO,YAAY;CACvE,OAAO,eAAe,QAAQ,eAAe,WAAW,WAAW;AACrE;AAEA,SAAS,eAAe,OAAyB;CAC/C,IAAI,UAAU,KAAA,GACZ,OAAO;CAET,OAAO;AACT;AAEA,eAAe,gBAAgB,KAA4C;CACzE,MAAM,SAAmB,CAAC;CAC1B,WAAW,MAAM,SAAS,KACxB,OAAO,KAAK,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,KAAK,CAAC;CAEjE,MAAM,MAAM,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM;CACjD,IAAI,QAAQ,IACV,OAAO,CAAC;CAEV,OAAO,KAAK,MAAM,GAAG;AACvB;AAEA,SAAS,UAAU,KAAqB,QAAgB,OAAsB;CAC5E,IAAI,UAAU,QAAQ,EAAE,gBAAgB,mBAAmB,CAAC;CAC5D,IAAI,IAAI,KAAK,UAAU,KAAK,CAAC;AAC/B;;;;;;;;;;;;;AAcA,eAAsB,8BACpB,aACA,UACA,WACA,WACkE;CAClE,IAAI,YAAY,YAAY,MAC1B,OAAO,EAAE,OAAO,UAAU;CAE5B,MAAM,SAAS,MAAMC,qBAAAA,aAAa;EAChC,UAAU,YAAY;EACtB,OAAO;GACL,iBAAiB;GACjB,OAAO,YAAY;GACnB,UAAU,YAAY;GACtB,SAAS,YAAY;GACrB,kBAAkB,YAAY;GAC9B;GACA;GACA;GACA,QAAQ;GACR,MAAM;EACR;EACA,WAAW,YAAY;EACvB,YAAY;CACd,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;CACxB,IAAI,UAAU,MACZ,OAAO,EAAE,OAAO,UAAU;CAE5B,MAAM,YACJ,OAAO,gBAAgB,OAClB,OAAO,eACR;CACN,IAAI,OAAO,aAAa,UAAU,OAAO,aAAa,OACpD,OAAO;EACL,OAAO;EACP,YACE,OAAO,WACN,OAAO,aAAa,QACjB,SAAS,SAAS,0EAClB,SAAS,SAAS;CAC1B;CAEF,OAAO,EAAE,OAAO,UAAU;AAC5B;AAEA,eAAe,iBACb,SACA,aACqB;CACrB,MAAM,SAAA,GAAA,OAAA,YAAA,CAAoB,EAAE,CAAC,CAAC,SAAS,KAAK;CAC5C,MAAM,UAAA,GAAA,KAAA,aAAA,EAAuB,KAAK,QAAQ;EAMxC,MAAM,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,kBAAkB;EACtD,MAAM,aAAa,IAAI,aAAa,IAAI,MAAM,MAAM;EACpD,IAAI,IAAI,WAAW,UAAU,IAAI,aAAa,SAAS;GACrD,IAAI,YAAY;IACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;IACnD,IAAI,IAAI,WAAW;GACrB,OACE,UAAU,KAAK,KAAK,EAAE,OAAO,YAAY,CAAC;GAE5C;EACF;EAEA,MAAM,YAAY,IAAI,QAAQ;EAC9B,MAAM,iBAAiB,MAAM,QAAQ,SAAS,IAAI,UAAU,KAAK;EACjE,IACE,OAAO,mBAAmB,YAC1B,CAAC,mBAAmB,gBAAgB,KAAK,GACzC;GACA,IAAI,YAAY;IACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;IACnD,IAAI,IAAI,cAAc;GACxB,OACE,UAAU,KAAK,KAAK,EAAE,OAAO,eAAe,CAAC;GAE/C;EACF;EAEA,gBAAgB,GAAG,CAAC,CACjB,KAAK,OAAO,SAAS;GACpB,IAAI,OAAO,KAAK,SAAS,YAAY,KAAK,SAAS,IAAI;IACrD,MAAM,UAAU;IAChB,IAAI,YAAY;KACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;KACnD,IAAI,IAAI,OAAO;IACjB,OACE,UAAU,KAAK,KAAK;KAClB,SAAS,KAAK,MAAM;KACpB,QAAQ;KACR,UAAU;KACV,eAAe;IACjB,CAAC;IAEH;GACF;GAEA,MAAM,SAAS,KAAK,MAAM,eAAA,GAAA,OAAA,WAAA,CAAyB;GACnD,IAAI,iBAA0C,KAAK,SAAS,CAAC;GAC7D,IAAI,eAAe,MAAM;IACvB,MAAM,OAAO,MAAM,8BACjB,aACA,KAAK,MACL,QACA,cACF;IACA,IAAI,KAAK,cAAc,MAAM;KAC3B,MAAM,UAAU,KAAK;KACrB,IAAI,YAAY;MACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;MACnD,IAAI,IAAI,OAAO;KACjB,OACE,UAAU,KAAK,KAAK;MAClB,SAAS;MACT,QAAQ;MACR,UAAU;MACV,eAAe;KACjB,CAAC;KAEH;IACF;IACA,iBAAiB,KAAK;GACxB;GAEA,MAAM,CAAC,UAAU,MAAMC,gCAAAA,aACrB,CACE;IACE,IAAI;IACJ,MAAM,KAAK;IACX,OAAO;GACT,CACF,GACA,OACF;GAEA,IAAI,YAAY;IACd,IAAI,OAAO,aAAa,MAAM;KAC5B,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;KACnD,IAAI,IAAI,OAAO,iBAAiB,QAAQ,KAAK,KAAK,QAAQ;IAC5D,OAAO;KACL,MAAM,QAAQ,eAAe,OAAO,MAAM;KAC1C,MAAM,OACJ,OAAO,UAAU,WAAW,QAAQ,KAAK,UAAU,KAAK;KAC1D,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;KACnD,IAAI,IAAI,IAAI;IACd;IACA;GACF;GAEA,UAAU,KAAK,KAAK;IAClB,GAAG;IACH,QAAQ,eAAe,OAAO,MAAM;GACtC,CAAC;EACH,CAAC,CAAC,CACD,OAAO,UAAiB;GACvB,IAAI,YAAY;IACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;IACnD,IAAI,IAAI,MAAM,OAAO;GACvB,OACE,UAAU,KAAK,KAAK;IAClB,SAAS;IACT,QAAQ;IACR,UAAU;IACV,eAAe,MAAM;GACvB,CAAC;EAEL,CAAC;CACL,CAAC;CAED,MAAM,IAAI,SAAe,SAAS,WAAW;EAC3C,OAAO,KAAK,SAAS,MAAM;EAC3B,OAAO,OAAO,GAAG,aAAa,OAAO;CACvC,CAAC;CAGD,OAAO;EACL,KAAK,oBAFS,OAAO,QAEU,CAAC,CAAC,KAAK;EACtC;EACA,aACE,IAAI,SAAS,SAAS,WAAW;GAC/B,OAAO,OAAO,UAAW,QAAQ,OAAO,KAAK,IAAI,QAAQ,CAAE;EAC7D,CAAC;CACL;AACF;AAEA,SAAS,OAAO,MAAsB;CACpC,OAAO,KACJ,MAAM,IAAI,CAAC,CACX,KAAK,SAAS,KAAK,MAAM,CAAC,CAC1B,KAAK,IAAI;AACd;AAEA,SAAS,oBACP,MACA,UACA,WACA,aACQ;CACR,MAAM,eAAe,SAClB,KAAK,QAAQ;EAEZ,OAAO,CACL,aAFiBC,gCAAAA,4BAA4B,IAAI,IAE3B,EAAE,cACxB,wCAAwC,KAAK,UAAU,IAAI,IAAI,EAAE,UACnE,CAAC,CAAC,KAAK,IAAI;CACb,CAAC,CAAC,CACD,KAAK,MAAM;CAEd,OAAO;;;;;4BAKmB,KAAK,UAAU,SAAS,EAAE;2BAC3B,KAAK,UAAU,WAAW,EAAE;;;;;;MAMjD,KAAK,UAAU,kBAAkB,EAAE;;;;;;;;;;;;;;EAcvC,aAAa;;;EAGb,OAAO,IAAI,EAAE;;;EAGb,UAAU;AACZ;AAEA,SAAgB,2BACd,MACA,UACA,WACA,aACQ;CACR,OAAO,kBAAkB,MAAM,UAAU,WAAW,WAAW;AACjE;AAEA,SAAS,kBACP,MACA,UACA,WACA,aACQ;CACR,MAAM,YAAY,SACf,KAAK,QAAQ;EAEZ,OAAO;GACL,GAFeC,oCAAAA,0BAA0B,IAAI,IAEnC,EAAE;GACZ;GACA;GACA,2BAA2BC,6BAAAA,WAAW,IAAI,IAAI,EAAE;GAChD;EACF,CAAC,CAAC,KAAK,IAAI;CACb,CAAC,CAAC,CACD,KAAK,MAAM;CAEd,OAAO;0BACiBA,6BAAAA,WAAW,SAAS,EAAE;0BACtBA,6BAAAA,WAAW,kBAAkB,EAAE;yBAChCA,6BAAAA,WAAW,WAAW,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyD/C,UAAU;;EAEV,KAAK;EACL,UAAU;AACZ;AAEA,SAAS,uBAAuB,QAEC;CAC/B,OAAQ,QAAQ,YAAY,CAAC;AAC/B;AAEA,SAAS,uBACP,SACA,UACA,MACA,aACyD;CACzD,MAAM,iBAAiB,YAAY,UAAU,IAAI;CAYjD,OAAO;EAAE;EAAgB,cAAA,IAXA,IACvB,eACG,KAAK,QAAQ;GACZ,MAAM,aAAa,QAAQ,IAAI,IAAI,IAAI;GACvC,OAAO,cAAc,OACjB,KAAA,IACC,CAAC,IAAI,MAAM,UAAU;EAC5B,CAAC,CAAC,CACD,QAAQ,UAA4C,SAAS,IAAI,CAGlC;CAAE;AACxC;AAEA,eAAe,yBAAyB,MAKe;CACrD,MAAM,EAAE,SAAS,UAAU,gBAAgB,uBACzC,KAAK,MACP;CAEA,IAAI,WAAW,QAAQ,QAAQ,SAAS,GACtC,MAAM,IAAI,MAAM,uDAAuD;CAEzE,IAAI,YAAY,QAAQ,SAAS,WAAW,GAC1C,MAAM,IAAI,MACR,gEACF;CAGF,MAAM,EAAE,gBAAgB,iBAAiB,uBACvC,SACA,UACA,KAAK,OAAO,MACZ,KAAK,YAAY,SAASC,oCAAAA,yBAAyBC,gCAAAA,kBACrD;CACA,MAAM,SAAS,MAAM,iBAAiB,cAAc,WAAW;CAE/D,IAAI;EACF,MAAM,YACJ,KAAK,OAAO,WAAW,KAAK,YAAY,aAAa;EACvD,MAAM,SACJ,KAAK,YAAY,SACb,MAAMC,6BAAAA,iBACN,kBACE,KAAK,OAAO,MACZ,gBACA,OAAO,KACP,OAAO,KACT,GACA;GAAE,GAAG,KAAK;GAAa;EAAU,CACnC,IACE,MAAMC,6BAAAA,iBACN;GACE,MAAM;GACN,MAAM,oBACJ,KAAK,OAAO,MACZ,gBACA,OAAO,KACP,OAAO,KACT;EACF,GACA;GAAE,GAAG,KAAK;GAAa;EAAU,CACnC;EAEJ,IAAI,OAAO,aAAa,KAAK,OAAO,UAClC,MAAM,IAAI,MACR,OAAO,WAAW,KACd,OAAO,SACP,SAAS,KAAK,QAAQ,2CACtB,OAAO,YAAY,WAEzB;EAGF,OAAOC,gCAAAA,wBAAwB;GAC7B,QAAQ;GACR,YAAYC,6BAAAA,kBAAkB,KAAK,WAAW;GAC9C,QAAQ,OAAO;GACf,QAAQ,OAAO;GACf,OAAO,CAAC;EACV,CAAC;CACH,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;AACF;AAEA,SAAgB,uCACd,cAAsC,CAAC,GAChB;CACvB,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,WAAW,WAAW;EAC3B,MAAM,SAAS;EACf,OAAO,yBAAyB;GAC9B;GACA;GACA;GACA,SAAS,eAAe,MAAM;EAChC,CAAC;CACH,GACA;EACE,MAAMC,gCAAAA;EACN,aAAa,GAAGC,gCAAAA,mCAAmC;EACnD,QAAQ,yCAAyC,WAAW;EAC5D,gBAAA;CACF,CACF;AACF;AAEA,SAAgB,2CACd,cAAsC,CAAC,GAChB;CACvB,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,WAAW,WAAW;EAE3B,OAAO,yBAAyB;GAC9B,QAAA;GACA;GACA;GACA,SAAS;EACX,CAAC;CACH,GACA;EACE,MAAA;EACA,aAAa,GAAGC,oCAAAA,uCAAuC;EACvD,QAAQ,6CAA6C,WAAW;EAChE,gBAAA;CACF,CACF;AACF"}
+{"version":3,"file":"LocalProgrammaticToolCalling.cjs","names":["ProgrammaticToolCallingSchema","BashProgrammaticToolCallingSchema","executeHooks","executeTools","normalizeToPythonIdentifier","normalizeToBashIdentifier","shellQuote","filterBashToolsByUsage","filterToolsByUsage","executeLocalBash","executeLocalCode","formatCompletedResponse","getLocalSessionId","ProgrammaticToolCallingName","ProgrammaticToolCallingDescription","BashProgrammaticToolCallingDescription"],"sources":["../../../../src/tools/local/LocalProgrammaticToolCalling.ts"],"mappings":";;;;;;;;;;;AA+BA,MAAM,kBAAkB;AACxB,MAAM,oBAAoB;AAC1B,MAAM,oBAAoB;AAgC1B,SAAS,sBAAsB,WAAuC;CACpE,IAAI,aAAa,QAAQ,CAAC,OAAO,SAAS,SAAS,GACjD,OAAO;CAGT,OAAO,KAAK,IAAI,mBAAmB,KAAK,MAAM,SAAS,CAAC;AAC1D;AAEA,SAAS,mBAAmB,WAA2B;CACrD,OAAO,YAAY,QAAS,IACxB,GAAG,YAAY,IAAK,YACpB,GAAG,UAAU;AACnB;AAEA,SAAS,yBAAyB,WAAwC;CACxE,MAAM,iBAAiB,sBAAsB,SAAS;CACtD,MAAM,aAAa,KAAK,IAAI,mBAAmB,cAAc;CAI7D,OAAO;EACL,MAAM;EACN,SAAS;EACT,SAAS;EACT,SAAS;EACT,aACE,0DATqB,mBAAmB,cAUb,EAAE,SATZ,mBAAmB,UASa,EAAE;CACvD;AACF;AAEA,SAAS,yCACP,cAAsC,CAAC,GACC;CACxC,OAAO;EACL,GAAGA,gCAAAA;EACH,YAAY;GACV,GAAGA,gCAAAA,8BAA8B;GACjC,SAAS,yBAAyB,YAAY,SAAS;GACvD,MAAM;IACJ,MAAM;IACN,MAAM;KAAC;KAAM;KAAU;KAAQ;IAAI;IACnC,SAAS;IACT,aACE;GACJ;EACF;CACF;AACF;AAEA,SAAS,6CACP,cAAsC,CAAC,GACK;CAC5C,OAAO;EACL,GAAGC,oCAAAA;EACH,YAAY;GACV,GAAGA,oCAAAA,kCAAkC;GACrC,SAAS,yBAAyB,YAAY,SAAS;EACzD;CACF;AACF;AAcA,MAAM,qBAAqB;AAE3B,SAAS,mBAAmB,GAAW,GAAoB;CACzD,MAAM,OAAO,OAAO,KAAK,GAAG,MAAM;CAClC,MAAM,OAAO,OAAO,KAAK,GAAG,MAAM;CAClC,IAAI,KAAK,WAAW,KAAK,QACvB,OAAO;CAET,QAAA,GAAA,OAAA,gBAAA,CAAuB,MAAM,IAAI;AACnC;AAcA,SAAS,eACP,QAC0B;CAC1B,MAAM,aAAa,OAAO,QAAQ,OAAO,WAAW,OAAO,YAAY;CACvE,OAAO,eAAe,QAAQ,eAAe,WAAW,WAAW;AACrE;AAEA,SAAS,eAAe,OAAyB;CAC/C,IAAI,UAAU,KAAA,GACZ,OAAO;CAET,OAAO;AACT;AAEA,eAAe,gBAAgB,KAA4C;CACzE,MAAM,SAAmB,CAAC;CAC1B,WAAW,MAAM,SAAS,KACxB,OAAO,KAAK,OAAO,SAAS,KAAK,IAAI,QAAQ,OAAO,KAAK,KAAK,CAAC;CAEjE,MAAM,MAAM,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM;CACjD,IAAI,QAAQ,IACV,OAAO,CAAC;CAEV,OAAO,KAAK,MAAM,GAAG;AACvB;AAEA,SAAS,UAAU,KAAqB,QAAgB,OAAsB;CAC5E,IAAI,UAAU,QAAQ,EAAE,gBAAgB,mBAAmB,CAAC;CAC5D,IAAI,IAAI,KAAK,UAAU,KAAK,CAAC;AAC/B;AAcA,eAAsB,8BACpB,aACA,UACA,WACA,WACkE;CAClE,IAAI,YAAY,YAAY,MAC1B,OAAO,EAAE,OAAO,UAAU;CAE5B,MAAM,SAAS,MAAMC,qBAAAA,aAAa;EAChC,UAAU,YAAY;EACtB,OAAO;GACL,iBAAiB;GACjB,OAAO,YAAY;GACnB,UAAU,YAAY;GACtB,SAAS,YAAY;GACrB,kBAAkB,YAAY;GAC9B;GACA;GACA;GACA,QAAQ;GACR,MAAM;EACR;EACA,WAAW,YAAY;EACvB,YAAY;CACd,CAAC,CAAC,CAAC,YAAY,KAAA,CAAS;CACxB,IAAI,UAAU,MACZ,OAAO,EAAE,OAAO,UAAU;CAE5B,MAAM,YACJ,OAAO,gBAAgB,OAClB,OAAO,eACR;CACN,IAAI,OAAO,aAAa,UAAU,OAAO,aAAa,OACpD,OAAO;EACL,OAAO;EACP,YACE,OAAO,WACN,OAAO,aAAa,QACjB,SAAS,SAAS,0EAClB,SAAS,SAAS;CAC1B;CAEF,OAAO,EAAE,OAAO,UAAU;AAC5B;AAEA,eAAe,iBACb,SACA,aACqB;CACrB,MAAM,SAAA,GAAA,OAAA,YAAA,CAAoB,EAAE,CAAC,CAAC,SAAS,KAAK;CAC5C,MAAM,UAAA,GAAA,KAAA,aAAA,EAAuB,KAAK,QAAQ;EAMxC,MAAM,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,kBAAkB;EACtD,MAAM,aAAa,IAAI,aAAa,IAAI,MAAM,MAAM;EACpD,IAAI,IAAI,WAAW,UAAU,IAAI,aAAa,SAAS;GACrD,IAAI,YAAY;IACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;IACnD,IAAI,IAAI,WAAW;GACrB,OACE,UAAU,KAAK,KAAK,EAAE,OAAO,YAAY,CAAC;GAE5C;EACF;EAEA,MAAM,YAAY,IAAI,QAAQ;EAC9B,MAAM,iBAAiB,MAAM,QAAQ,SAAS,IAAI,UAAU,KAAK;EACjE,IACE,OAAO,mBAAmB,YAC1B,CAAC,mBAAmB,gBAAgB,KAAK,GACzC;GACA,IAAI,YAAY;IACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;IACnD,IAAI,IAAI,cAAc;GACxB,OACE,UAAU,KAAK,KAAK,EAAE,OAAO,eAAe,CAAC;GAE/C;EACF;EAEA,gBAAgB,GAAG,CAAC,CACjB,KAAK,OAAO,SAAS;GACpB,IAAI,OAAO,KAAK,SAAS,YAAY,KAAK,SAAS,IAAI;IACrD,MAAM,UAAU;IAChB,IAAI,YAAY;KACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;KACnD,IAAI,IAAI,OAAO;IACjB,OACE,UAAU,KAAK,KAAK;KAClB,SAAS,KAAK,MAAM;KACpB,QAAQ;KACR,UAAU;KACV,eAAe;IACjB,CAAC;IAEH;GACF;GAEA,MAAM,SAAS,KAAK,MAAM,eAAA,GAAA,OAAA,WAAA,CAAyB;GACnD,IAAI,iBAA0C,KAAK,SAAS,CAAC;GAC7D,IAAI,eAAe,MAAM;IACvB,MAAM,OAAO,MAAM,8BACjB,aACA,KAAK,MACL,QACA,cACF;IACA,IAAI,KAAK,cAAc,MAAM;KAC3B,MAAM,UAAU,KAAK;KACrB,IAAI,YAAY;MACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;MACnD,IAAI,IAAI,OAAO;KACjB,OACE,UAAU,KAAK,KAAK;MAClB,SAAS;MACT,QAAQ;MACR,UAAU;MACV,eAAe;KACjB,CAAC;KAEH;IACF;IACA,iBAAiB,KAAK;GACxB;GAEA,MAAM,CAAC,UAAU,MAAMC,gCAAAA,aACrB,CACE;IACE,IAAI;IACJ,MAAM,KAAK;IACX,OAAO;GACT,CACF,GACA,OACF;GAEA,IAAI,YAAY;IACd,IAAI,OAAO,aAAa,MAAM;KAC5B,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;KACnD,IAAI,IAAI,OAAO,iBAAiB,QAAQ,KAAK,KAAK,QAAQ;IAC5D,OAAO;KACL,MAAM,QAAQ,eAAe,OAAO,MAAM;KAC1C,MAAM,OACJ,OAAO,UAAU,WAAW,QAAQ,KAAK,UAAU,KAAK;KAC1D,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;KACnD,IAAI,IAAI,IAAI;IACd;IACA;GACF;GAEA,UAAU,KAAK,KAAK;IAClB,GAAG;IACH,QAAQ,eAAe,OAAO,MAAM;GACtC,CAAC;EACH,CAAC,CAAC,CACD,OAAO,UAAiB;GACvB,IAAI,YAAY;IACd,IAAI,UAAU,KAAK,EAAE,gBAAgB,aAAa,CAAC;IACnD,IAAI,IAAI,MAAM,OAAO;GACvB,OACE,UAAU,KAAK,KAAK;IAClB,SAAS;IACT,QAAQ;IACR,UAAU;IACV,eAAe,MAAM;GACvB,CAAC;EAEL,CAAC;CACL,CAAC;CAED,MAAM,IAAI,SAAe,SAAS,WAAW;EAC3C,OAAO,KAAK,SAAS,MAAM;EAC3B,OAAO,OAAO,GAAG,aAAa,OAAO;CACvC,CAAC;CAGD,OAAO;EACL,KAAK,oBAFS,OAAO,QAEU,CAAC,CAAC,KAAK;EACtC;EACA,aACE,IAAI,SAAS,SAAS,WAAW;GAC/B,OAAO,OAAO,UAAW,QAAQ,OAAO,KAAK,IAAI,QAAQ,CAAE;EAC7D,CAAC;CACL;AACF;AAEA,SAAS,OAAO,MAAsB;CACpC,OAAO,KACJ,MAAM,IAAI,CAAC,CACX,KAAK,SAAS,KAAK,MAAM,CAAC,CAC1B,KAAK,IAAI;AACd;AAEA,SAAS,oBACP,MACA,UACA,WACA,aACQ;CACR,MAAM,eAAe,SAClB,KAAK,QAAQ;EAEZ,OAAO,CACL,aAFiBC,gCAAAA,4BAA4B,IAAI,IAE3B,EAAE,cACxB,wCAAwC,KAAK,UAAU,IAAI,IAAI,EAAE,UACnE,CAAC,CAAC,KAAK,IAAI;CACb,CAAC,CAAC,CACD,KAAK,MAAM;CAEd,OAAO;;;;;4BAKmB,KAAK,UAAU,SAAS,EAAE;2BAC3B,KAAK,UAAU,WAAW,EAAE;;;;;;MAMjD,KAAK,UAAU,kBAAkB,EAAE;;;;;;;;;;;;;;EAcvC,aAAa;;;EAGb,OAAO,IAAI,EAAE;;;EAGb,UAAU;AACZ;AAEA,SAAgB,2BACd,MACA,UACA,WACA,aACQ;CACR,OAAO,kBAAkB,MAAM,UAAU,WAAW,WAAW;AACjE;AAEA,SAAS,kBACP,MACA,UACA,WACA,aACQ;CACR,MAAM,YAAY,SACf,KAAK,QAAQ;EAEZ,OAAO;GACL,GAFeC,oCAAAA,0BAA0B,IAAI,IAEnC,EAAE;GACZ;GACA;GACA,2BAA2BC,6BAAAA,WAAW,IAAI,IAAI,EAAE;GAChD;EACF,CAAC,CAAC,KAAK,IAAI;CACb,CAAC,CAAC,CACD,KAAK,MAAM;CAEd,OAAO;0BACiBA,6BAAAA,WAAW,SAAS,EAAE;0BACtBA,6BAAAA,WAAW,kBAAkB,EAAE;yBAChCA,6BAAAA,WAAW,WAAW,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyD/C,UAAU;;EAEV,KAAK;EACL,UAAU;AACZ;AAEA,SAAS,uBAAuB,QAEC;CAC/B,OAAQ,QAAQ,YAAY,CAAC;AAC/B;AAEA,SAAS,uBACP,SACA,UACA,MACA,aACyD;CACzD,MAAM,iBAAiB,YAAY,UAAU,IAAI;CAYjD,OAAO;EAAE;EAAgB,cAAA,IAXA,IACvB,eACG,KAAK,QAAQ;GACZ,MAAM,aAAa,QAAQ,IAAI,IAAI,IAAI;GACvC,OAAO,cAAc,OACjB,KAAA,IACC,CAAC,IAAI,MAAM,UAAU;EAC5B,CAAC,CAAC,CACD,QAAQ,UAA4C,SAAS,IAAI,CAGlC;CAAE;AACxC;AAEA,eAAe,yBAAyB,MAKe;CACrD,MAAM,EAAE,SAAS,UAAU,gBAAgB,uBACzC,KAAK,MACP;CAEA,IAAI,WAAW,QAAQ,QAAQ,SAAS,GACtC,MAAM,IAAI,MAAM,uDAAuD;CAEzE,IAAI,YAAY,QAAQ,SAAS,WAAW,GAC1C,MAAM,IAAI,MACR,gEACF;CAGF,MAAM,EAAE,gBAAgB,iBAAiB,uBACvC,SACA,UACA,KAAK,OAAO,MACZ,KAAK,YAAY,SAASC,oCAAAA,yBAAyBC,gCAAAA,kBACrD;CACA,MAAM,SAAS,MAAM,iBAAiB,cAAc,WAAW;CAE/D,IAAI;EACF,MAAM,YACJ,KAAK,OAAO,WAAW,KAAK,YAAY,aAAa;EACvD,MAAM,SACJ,KAAK,YAAY,SACb,MAAMC,6BAAAA,iBACN,kBACE,KAAK,OAAO,MACZ,gBACA,OAAO,KACP,OAAO,KACT,GACA;GAAE,GAAG,KAAK;GAAa;EAAU,CACnC,IACE,MAAMC,6BAAAA,iBACN;GACE,MAAM;GACN,MAAM,oBACJ,KAAK,OAAO,MACZ,gBACA,OAAO,KACP,OAAO,KACT;EACF,GACA;GAAE,GAAG,KAAK;GAAa;EAAU,CACnC;EAEJ,IAAI,OAAO,aAAa,KAAK,OAAO,UAClC,MAAM,IAAI,MACR,OAAO,WAAW,KACd,OAAO,SACP,SAAS,KAAK,QAAQ,2CACtB,OAAO,YAAY,WAEzB;EAGF,OAAOC,gCAAAA,wBAAwB;GAC7B,QAAQ;GACR,YAAYC,6BAAAA,kBAAkB,KAAK,WAAW;GAC9C,QAAQ,OAAO;GACf,QAAQ,OAAO;GACf,OAAO,CAAC;EACV,CAAC;CACH,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;AACF;AAEA,SAAgB,uCACd,cAAsC,CAAC,GAChB;CACvB,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,WAAW,WAAW;EAC3B,MAAM,SAAS;EACf,OAAO,yBAAyB;GAC9B;GACA;GACA;GACA,SAAS,eAAe,MAAM;EAChC,CAAC;CACH,GACA;EACE,MAAMC,gCAAAA;EACN,aAAa,GAAGC,gCAAAA,mCAAmC;EACnD,QAAQ,yCAAyC,WAAW;EAC5D,gBAAA;CACF,CACF;AACF;AAEA,SAAgB,2CACd,cAAsC,CAAC,GAChB;CACvB,QAAA,GAAA,sBAAA,KAAA,CACE,OAAO,WAAW,WAAW;EAE3B,OAAO,yBAAyB;GAC9B,QAAA;GACA;GACA;GACA,SAAS;EACX,CAAC;CACH,GACA;EACE,MAAA;EACA,aAAa,GAAGC,oCAAAA,uCAAuC;EACvD,QAAQ,6CAA6C,WAAW;EAChE,gBAAA;CACF,CACF;AACF"}

package/dist/cjs/tools/local/attachments.cjs

@@ -1,48 +1,5 @@
 let fs_promises = require("fs/promises");
 //#region src/tools/local/attachments.ts
-/**
-* Detects whether a file on disk is an LLM-renderable attachment
-* (image / PDF) and produces the LangChain `MessageContentComplex[]`
-* payload a `ToolMessage` needs to actually surface those bytes to
-* the vision-capable model.
-*
-* Same approach as LibreChat's `api/server/utils/files.js`: sniff the
-* magic bytes (NOT the extension) so a mislabelled `.png` that's
-* really a binary blob doesn't get embedded as an image. Inlined for
-* the five formats we actually care about (PNG / JPEG / GIF / WebP /
-* PDF) instead of pulling the ESM-only `file-type` package — keeps
-* the test setup CJS-clean.
-*
-* Provider compatibility:
-*   - Anthropic: tool_result content arrays accept `image` / `image_url`
-*     blocks; LangChain's anthropic adapter at
-*     `node_modules/@langchain/anthropic/dist/utils/message_inputs.js`
-*     converts them to native `image` source blocks.
-*   - OpenAI Chat Completions: image_url blocks in tool messages are
-*     accepted on vision-capable models.
-*   - OpenAI Responses API: tool messages are flattened to plain text;
-*     image_url blocks degrade to a JSON description (still useful as
-*     a textual hint to the model).
-*   - Google: image blocks in tool responses are accepted on Gemini
-*     vision models.
-*
-* Configuration:
-*   - `local.attachReadAttachments` (default `'images-only'`) controls
-*     which file kinds are returned as inline attachments. Other kinds
-*     fall through to the existing binary-stub path.
-*   - `local.maxAttachmentBytes` (default 5 MB) caps the pre-encoding
-*     size; oversize attachments degrade to a stub describing the
-*     refusal so the model isn't surprised.
-*/
-/**
-* Magic-byte sniff for the small set of image/PDF formats we care
-* about. We avoided pulling in `file-type` (ESM-only, awkward under
-* ts-jest) since the universe of attachments we want to embed is
-* tiny: PNG, JPEG, GIF, WebP, PDF. All have well-known signatures in
-* the first 12 bytes.
-*
-* Returns `undefined` on no match — caller treats as text/unknown.
-*/
 function sniffMime(buffer) {
 	if (buffer.length < 4) return void 0;
 	if (buffer.length >= 8 && buffer[0] === 137 && buffer[1] === 80 && buffer[2] === 78 && buffer[3] === 71 && buffer[4] === 13 && buffer[5] === 10 && buffer[6] === 26 && buffer[7] === 10) return "image/png";
@@ -104,7 +61,6 @@ async function classifyAttachment(args) {
 		dataUrl
 	};
 }
-/** Build the LangChain content array for an image attachment. */
 function imageAttachmentContent(path, attachment) {
 	return [{
 		type: "text",

package/dist/cjs/tools/local/attachments.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"attachments.cjs","names":["fsOpen","fsReadFile"],"sources":["../../../../src/tools/local/attachments.ts"],"sourcesContent":["/**\n * Detects whether a file on disk is an LLM-renderable attachment\n * (image / PDF) and produces the LangChain `MessageContentComplex[]`\n * payload a `ToolMessage` needs to actually surface those bytes to\n * the vision-capable model.\n *\n * Same approach as LibreChat's `api/server/utils/files.js`: sniff the\n * magic bytes (NOT the extension) so a mislabelled `.png` that's\n * really a binary blob doesn't get embedded as an image. Inlined for\n * the five formats we actually care about (PNG / JPEG / GIF / WebP /\n * PDF) instead of pulling the ESM-only `file-type` package — keeps\n * the test setup CJS-clean.\n *\n * Provider compatibility:\n *   - Anthropic: tool_result content arrays accept `image` / `image_url`\n *     blocks; LangChain's anthropic adapter at\n *     `node_modules/@langchain/anthropic/dist/utils/message_inputs.js`\n *     converts them to native `image` source blocks.\n *   - OpenAI Chat Completions: image_url blocks in tool messages are\n *     accepted on vision-capable models.\n *   - OpenAI Responses API: tool messages are flattened to plain text;\n *     image_url blocks degrade to a JSON description (still useful as\n *     a textual hint to the model).\n *   - Google: image blocks in tool responses are accepted on Gemini\n *     vision models.\n *\n * Configuration:\n *   - `local.attachReadAttachments` (default `'images-only'`) controls\n *     which file kinds are returned as inline attachments. Other kinds\n *     fall through to the existing binary-stub path.\n *   - `local.maxAttachmentBytes` (default 5 MB) caps the pre-encoding\n *     size; oversize attachments degrade to a stub describing the\n *     refusal so the model isn't surprised.\n */\n\nimport { open as fsOpen, readFile as fsReadFile } from 'fs/promises';\nimport type { WorkspaceFS } from './workspaceFS';\n\n/**\n * Magic-byte sniff for the small set of image/PDF formats we care\n * about. We avoided pulling in `file-type` (ESM-only, awkward under\n * ts-jest) since the universe of attachments we want to embed is\n * tiny: PNG, JPEG, GIF, WebP, PDF. All have well-known signatures in\n * the first 12 bytes.\n *\n * Returns `undefined` on no match — caller treats as text/unknown.\n */\nfunction sniffMime(buffer: Buffer): string | undefined {\n  if (buffer.length < 4) return undefined;\n  // PNG: 89 50 4E 47 0D 0A 1A 0A\n  if (\n    buffer.length >= 8 &&\n    buffer[0] === 0x89 &&\n    buffer[1] === 0x50 &&\n    buffer[2] === 0x4e &&\n    buffer[3] === 0x47 &&\n    buffer[4] === 0x0d &&\n    buffer[5] === 0x0a &&\n    buffer[6] === 0x1a &&\n    buffer[7] === 0x0a\n  ) {\n    return 'image/png';\n  }\n  // JPEG: FF D8 FF\n  if (buffer[0] === 0xff && buffer[1] === 0xd8 && buffer[2] === 0xff) {\n    return 'image/jpeg';\n  }\n  // GIF: \"GIF87a\" or \"GIF89a\"\n  if (\n    buffer.length >= 6 &&\n    buffer[0] === 0x47 &&\n    buffer[1] === 0x49 &&\n    buffer[2] === 0x46 &&\n    buffer[3] === 0x38 &&\n    (buffer[4] === 0x37 || buffer[4] === 0x39) &&\n    buffer[5] === 0x61\n  ) {\n    return 'image/gif';\n  }\n  // WebP: \"RIFF\" .... \"WEBP\"\n  if (\n    buffer.length >= 12 &&\n    buffer[0] === 0x52 &&\n    buffer[1] === 0x49 &&\n    buffer[2] === 0x46 &&\n    buffer[3] === 0x46 &&\n    buffer[8] === 0x57 &&\n    buffer[9] === 0x45 &&\n    buffer[10] === 0x42 &&\n    buffer[11] === 0x50\n  ) {\n    return 'image/webp';\n  }\n  // PDF: \"%PDF-\"\n  if (\n    buffer.length >= 5 &&\n    buffer[0] === 0x25 &&\n    buffer[1] === 0x50 &&\n    buffer[2] === 0x44 &&\n    buffer[3] === 0x46 &&\n    buffer[4] === 0x2d\n  ) {\n    return 'application/pdf';\n  }\n  return undefined;\n}\n\nconst SUPPORTED_IMAGE_MIMES = new Set<string>([\n  'image/png',\n  'image/jpeg',\n  'image/gif',\n  'image/webp',\n]);\n\nexport type AttachmentMode = 'images-only' | 'images-and-pdf' | 'off';\n\nexport type Attachment =\n  | {\n      kind: 'image';\n      mime: string;\n      bytes: number;\n      dataUrl: string;\n    }\n  | {\n      kind: 'pdf';\n      mime: 'application/pdf';\n      bytes: number;\n      dataUrl: string;\n    }\n  | {\n      kind: 'binary';\n      mime: string;\n      bytes: number;\n    }\n  | {\n      kind: 'oversize';\n      mime: string;\n      bytes: number;\n      maxBytes: number;\n    }\n  | {\n      kind: 'text-or-unknown';\n      bytes: number;\n    };\n\nexport async function classifyAttachment(args: {\n  path: string;\n  bytes: number;\n  mode: AttachmentMode;\n  maxBytes: number;\n  /**\n   * WorkspaceFS to route I/O through — defaults to host fs/promises\n   * for backward compat. Manual review (finding F): without this\n   * routing, custom/remote FS implementations could either fail to\n   * embed valid attachments or accidentally read a host path with\n   * the same absolute name (since `read_file` itself does go through\n   * the configured WorkspaceFS).\n   */\n  fs?: WorkspaceFS;\n}): Promise<Attachment> {\n  if (args.bytes === 0) {\n    return { kind: 'text-or-unknown', bytes: 0 };\n  }\n\n  // MIME sniffing only needs the first 12 bytes — read just the\n  // header so a 9 MB PNG (under the 10 MB read cap, over the 5 MB\n  // attachment cap) doesn't pull the whole buffer into memory before\n  // we discover it's oversize. Full read happens only when we're\n  // about to base64-embed.\n  const open = args.fs?.open ?? fsOpen;\n  const handle = await open(args.path, 'r');\n  const header = Buffer.alloc(12);\n  let mime: string | undefined;\n  try {\n    await handle.read(header, 0, 12, 0);\n    mime = sniffMime(header);\n  } finally {\n    await handle.close();\n  }\n\n  if (mime == null) {\n    return { kind: 'text-or-unknown', bytes: args.bytes };\n  }\n\n  const wantsImage =\n    args.mode === 'images-only' || args.mode === 'images-and-pdf';\n  const wantsPdf = args.mode === 'images-and-pdf';\n\n  const isImage = wantsImage && SUPPORTED_IMAGE_MIMES.has(mime);\n  const isPdf = wantsPdf && mime === 'application/pdf';\n\n  if (!isImage && !isPdf) {\n    // Both branches returned identical values pre-fix (audit-of-audit\n    // finding #3). The SUPPORTED_ATTACHMENT_MIMES check was dead code —\n    // collapsing to a single return.\n    return { kind: 'binary', mime, bytes: args.bytes };\n  }\n\n  if (args.bytes > args.maxBytes) {\n    return {\n      kind: 'oversize',\n      mime,\n      bytes: args.bytes,\n      maxBytes: args.maxBytes,\n    };\n  }\n\n  const readFile = args.fs?.readFile ?? fsReadFile;\n  const buffer = (await readFile(args.path)) as Buffer;\n  const base64 = buffer.toString('base64');\n  const dataUrl = `data:${mime};base64,${base64}`;\n\n  if (isImage) {\n    return { kind: 'image', mime, bytes: args.bytes, dataUrl };\n  }\n  return {\n    kind: 'pdf',\n    mime: 'application/pdf' as const,\n    bytes: args.bytes,\n    dataUrl,\n  };\n}\n\n/** Build the LangChain content array for an image attachment. */\nexport function imageAttachmentContent(\n  path: string,\n  attachment: Extract<Attachment, { kind: 'image' }>\n): Array<{\n  type: 'text' | 'image_url';\n  text?: string;\n  image_url?: { url: string };\n}> {\n  return [\n    {\n      type: 'text',\n      text:\n        `Read ${path} (${attachment.mime}, ${attachment.bytes} bytes). ` +\n        'The image is attached below for vision-capable models.',\n    },\n    {\n      type: 'image_url',\n      image_url: { url: attachment.dataUrl },\n    },\n  ];\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+CA,SAAS,UAAU,QAAoC;CACrD,IAAI,OAAO,SAAS,GAAG,OAAO,KAAA;CAE9B,IACE,OAAO,UAAU,KACjB,OAAO,OAAO,OACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,IAEd,OAAO;CAGT,IAAI,OAAO,OAAO,OAAQ,OAAO,OAAO,OAAQ,OAAO,OAAO,KAC5D,OAAO;CAGT,IACE,OAAO,UAAU,KACjB,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,OACb,OAAO,OAAO,MAAQ,OAAO,OAAO,OACrC,OAAO,OAAO,IAEd,OAAO;CAGT,IACE,OAAO,UAAU,MACjB,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,QAAQ,MACf,OAAO,QAAQ,IAEf,OAAO;CAGT,IACE,OAAO,UAAU,KACjB,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,IAEd,OAAO;AAGX;AAEA,MAAM,wBAAwB,IAAI,IAAY;CAC5C;CACA;CACA;CACA;AACF,CAAC;AAiCD,eAAsB,mBAAmB,MAcjB;CACtB,IAAI,KAAK,UAAU,GACjB,OAAO;EAAE,MAAM;EAAmB,OAAO;CAAE;CAS7C,MAAM,SAAS,OADF,KAAK,IAAI,QAAQA,YAAAA,KAAAA,CACJ,KAAK,MAAM,GAAG;CACxC,MAAM,SAAS,OAAO,MAAM,EAAE;CAC9B,IAAI;CACJ,IAAI;EACF,MAAM,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC;EAClC,OAAO,UAAU,MAAM;CACzB,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;CAEA,IAAI,QAAQ,MACV,OAAO;EAAE,MAAM;EAAmB,OAAO,KAAK;CAAM;CAGtD,MAAM,aACJ,KAAK,SAAS,iBAAiB,KAAK,SAAS;CAC/C,MAAM,WAAW,KAAK,SAAS;CAE/B,MAAM,UAAU,cAAc,sBAAsB,IAAI,IAAI;CAG5D,IAAI,CAAC,WAAW,EAFF,YAAY,SAAS,oBAMjC,OAAO;EAAE,MAAM;EAAU;EAAM,OAAO,KAAK;CAAM;CAGnD,IAAI,KAAK,QAAQ,KAAK,UACpB,OAAO;EACL,MAAM;EACN;EACA,OAAO,KAAK;EACZ,UAAU,KAAK;CACjB;CAKF,MAAM,UAAS,OAFE,KAAK,IAAI,YAAYC,YAAAA,SAAAA,CACP,KAAK,IAAI,EAAA,CAClB,SAAS,QAAQ;CACvC,MAAM,UAAU,QAAQ,KAAK,UAAU;CAEvC,IAAI,SACF,OAAO;EAAE,MAAM;EAAS;EAAM,OAAO,KAAK;EAAO;CAAQ;CAE3D,OAAO;EACL,MAAM;EACN,MAAM;EACN,OAAO,KAAK;EACZ;CACF;AACF;;AAGA,SAAgB,uBACd,MACA,YAKC;CACD,OAAO,CACL;EACE,MAAM;EACN,MACE,QAAQ,KAAK,IAAI,WAAW,KAAK,IAAI,WAAW,MAAM;CAE1D,GACA;EACE,MAAM;EACN,WAAW,EAAE,KAAK,WAAW,QAAQ;CACvC,CACF;AACF"}
+{"version":3,"file":"attachments.cjs","names":["fsOpen","fsReadFile"],"sources":["../../../../src/tools/local/attachments.ts"],"mappings":";;AA+CA,SAAS,UAAU,QAAoC;CACrD,IAAI,OAAO,SAAS,GAAG,OAAO,KAAA;CAE9B,IACE,OAAO,UAAU,KACjB,OAAO,OAAO,OACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,IAEd,OAAO;CAGT,IAAI,OAAO,OAAO,OAAQ,OAAO,OAAO,OAAQ,OAAO,OAAO,KAC5D,OAAO;CAGT,IACE,OAAO,UAAU,KACjB,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,OACb,OAAO,OAAO,MAAQ,OAAO,OAAO,OACrC,OAAO,OAAO,IAEd,OAAO;CAGT,IACE,OAAO,UAAU,MACjB,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,QAAQ,MACf,OAAO,QAAQ,IAEf,OAAO;CAGT,IACE,OAAO,UAAU,KACjB,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,MACd,OAAO,OAAO,IAEd,OAAO;AAGX;AAEA,MAAM,wBAAwB,IAAI,IAAY;CAC5C;CACA;CACA;CACA;AACF,CAAC;AAiCD,eAAsB,mBAAmB,MAcjB;CACtB,IAAI,KAAK,UAAU,GACjB,OAAO;EAAE,MAAM;EAAmB,OAAO;CAAE;CAS7C,MAAM,SAAS,OADF,KAAK,IAAI,QAAQA,YAAAA,KAAAA,CACJ,KAAK,MAAM,GAAG;CACxC,MAAM,SAAS,OAAO,MAAM,EAAE;CAC9B,IAAI;CACJ,IAAI;EACF,MAAM,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC;EAClC,OAAO,UAAU,MAAM;CACzB,UAAU;EACR,MAAM,OAAO,MAAM;CACrB;CAEA,IAAI,QAAQ,MACV,OAAO;EAAE,MAAM;EAAmB,OAAO,KAAK;CAAM;CAGtD,MAAM,aACJ,KAAK,SAAS,iBAAiB,KAAK,SAAS;CAC/C,MAAM,WAAW,KAAK,SAAS;CAE/B,MAAM,UAAU,cAAc,sBAAsB,IAAI,IAAI;CAG5D,IAAI,CAAC,WAAW,EAFF,YAAY,SAAS,oBAMjC,OAAO;EAAE,MAAM;EAAU;EAAM,OAAO,KAAK;CAAM;CAGnD,IAAI,KAAK,QAAQ,KAAK,UACpB,OAAO;EACL,MAAM;EACN;EACA,OAAO,KAAK;EACZ,UAAU,KAAK;CACjB;CAKF,MAAM,UAAS,OAFE,KAAK,IAAI,YAAYC,YAAAA,SAAAA,CACP,KAAK,IAAI,EAAA,CAClB,SAAS,QAAQ;CACvC,MAAM,UAAU,QAAQ,KAAK,UAAU;CAEvC,IAAI,SACF,OAAO;EAAE,MAAM;EAAS;EAAM,OAAO,KAAK;EAAO;CAAQ;CAE3D,OAAO;EACL,MAAM;EACN,MAAM;EACN,OAAO,KAAK;EACZ;CACF;AACF;AAGA,SAAgB,uBACd,MACA,YAKC;CACD,OAAO,CACL;EACE,MAAM;EACN,MACE,QAAQ,KAAK,IAAI,WAAW,KAAK,IAAI,WAAW,MAAM;CAE1D,GACA;EACE,MAAM;EACN,WAAW,EAAE,KAAK,WAAW,QAAQ;CACvC,CACF;AACF"}

package/dist/cjs/tools/local/bashAst.cjs

@@ -1,20 +1,4 @@
 //#region src/tools/local/bashAst.ts
-/**
-* Categorical-hazard checks layered on top of the existing dangerous-
-* command regex set. These match command-shape signatures that
-* claude-code's tree-sitter AST validator catches via categorical
-* deny-lists (command substitution, zsh-only privileged commands,
-* /proc/<pid>/environ access, IFS injection, etc.).
-*
-* This is *not* a real AST parser. It is a deliberately conservative
-* heuristic pass intended for the local engine's `bashAst: 'auto' |
-* 'strict'` modes; a future PR can swap in a true tree-sitter-bash
-* pass behind the same config field without changing the public API.
-*
-* `runBashAstChecks` runs on the *quote-stripped* command (so quoted
-* strings inside the script don't generate false positives) and
-* returns one finding per matched category.
-*/
 const COMMAND_SUBSTITUTION_PATTERNS = [
 	{
 		code: "cmd-subst-dollar-paren",

package/dist/cjs/tools/local/bashAst.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"bashAst.cjs","names":[],"sources":["../../../../src/tools/local/bashAst.ts"],"sourcesContent":["import type * as t from '@/types';\n\nexport type BashAstFinding = {\n  code: string;\n  message: string;\n  severity: 'warn' | 'deny';\n};\n\n/**\n * Categorical-hazard checks layered on top of the existing dangerous-\n * command regex set. These match command-shape signatures that\n * claude-code's tree-sitter AST validator catches via categorical\n * deny-lists (command substitution, zsh-only privileged commands,\n * /proc/<pid>/environ access, IFS injection, etc.).\n *\n * This is *not* a real AST parser. It is a deliberately conservative\n * heuristic pass intended for the local engine's `bashAst: 'auto' |\n * 'strict'` modes; a future PR can swap in a true tree-sitter-bash\n * pass behind the same config field without changing the public API.\n *\n * `runBashAstChecks` runs on the *quote-stripped* command (so quoted\n * strings inside the script don't generate false positives) and\n * returns one finding per matched category.\n */\n\nconst COMMAND_SUBSTITUTION_PATTERNS: { code: string; rx: RegExp }[] = [\n  { code: 'cmd-subst-dollar-paren', rx: /\\$\\(/ },\n  { code: 'cmd-subst-backtick', rx: /`[^`]*`/ },\n  { code: 'cmd-subst-process-sub', rx: /[<>]\\(/ },\n  { code: 'cmd-subst-zsh-eq', rx: /(?:^|\\s)=[A-Za-z_]/ },\n];\n\nconst ZSH_DANGEROUS_BUILTINS = [\n  'zmodload',\n  'emulate',\n  'sysopen',\n  'sysread',\n  'syswrite',\n  'ztcp',\n  'zsocket',\n  'zf_rm',\n  'zselect',\n];\n\nconst STRICT_DENIED_BUILTINS = [\n  'eval',\n  'exec',\n];\n\nfunction rxForBuiltin(name: string): RegExp {\n  return new RegExp(`\\\\b${name}\\\\b`);\n}\n\nconst PROC_ENVIRON_RX = /\\/proc\\/(?:\\d+|self|\\$[A-Za-z_])\\/environ\\b/;\nconst IFS_INJECTION_RX = /\\bIFS\\s*=/;\nconst HEX_ESCAPE_OBFUSCATION_RX = /\\\\x[0-9a-fA-F]{2}/;\nconst SOURCE_FROM_VAR_RX = /(?:^|\\s)(?:source|\\.)\\s+[\"']?\\$[A-Za-z_]/;\n\nexport function runBashAstChecks(\n  command: string,\n  mode: t.LocalBashAstMode = 'off'\n): BashAstFinding[] {\n  if (mode === 'off') {\n    return [];\n  }\n  const findings: BashAstFinding[] = [];\n  const strict = mode === 'strict';\n\n  for (const { code, rx } of COMMAND_SUBSTITUTION_PATTERNS) {\n    if (rx.test(command)) {\n      findings.push({\n        code,\n        message:\n          'Command substitution can mask intent and exfiltrate variables; not allowed under bashAst.',\n        severity: strict ? 'deny' : 'warn',\n      });\n    }\n  }\n\n  for (const builtin of ZSH_DANGEROUS_BUILTINS) {\n    if (rxForBuiltin(builtin).test(command)) {\n      findings.push({\n        code: `zsh-builtin-${builtin}`,\n        message: `Zsh privileged builtin \"${builtin}\" is denied.`,\n        severity: 'deny',\n      });\n    }\n  }\n\n  if (PROC_ENVIRON_RX.test(command)) {\n    findings.push({\n      code: 'proc-environ-read',\n      message: 'Reads from /proc/<pid>/environ are denied — leaks host secrets.',\n      severity: 'deny',\n    });\n  }\n\n  if (IFS_INJECTION_RX.test(command)) {\n    findings.push({\n      code: 'ifs-injection',\n      message: 'Inline IFS reassignment is suspicious; review the command.',\n      severity: strict ? 'deny' : 'warn',\n    });\n  }\n\n  if (HEX_ESCAPE_OBFUSCATION_RX.test(command)) {\n    findings.push({\n      code: 'hex-escape',\n      message: 'Hex-escaped bytes (\\\\xNN) often hide intent; review the command.',\n      severity: strict ? 'deny' : 'warn',\n    });\n  }\n\n  if (SOURCE_FROM_VAR_RX.test(command)) {\n    findings.push({\n      code: 'source-from-variable',\n      message: 'Sourcing a script from an unbound variable is denied.',\n      severity: 'deny',\n    });\n  }\n\n  if (strict) {\n    for (const builtin of STRICT_DENIED_BUILTINS) {\n      if (rxForBuiltin(builtin).test(command)) {\n        findings.push({\n          code: `strict-${builtin}`,\n          message: `In strict mode, \"${builtin}\" is denied.`,\n          severity: 'deny',\n        });\n      }\n    }\n  }\n\n  return findings;\n}\n\nexport function bashAstFindingsToErrors(\n  findings: BashAstFinding[]\n): { errors: string[]; warnings: string[] } {\n  const errors: string[] = [];\n  const warnings: string[] = [];\n  for (const f of findings) {\n    const formatted = `[bashAst:${f.code}] ${f.message}`;\n    if (f.severity === 'deny') {\n      errors.push(formatted);\n    } else {\n      warnings.push(formatted);\n    }\n  }\n  return { errors, warnings };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAyBA,MAAM,gCAAgE;CACpE;EAAE,MAAM;EAA0B,IAAI;CAAO;CAC7C;EAAE,MAAM;EAAsB,IAAI;CAAU;CAC5C;EAAE,MAAM;EAAyB,IAAI;CAAS;CAC9C;EAAE,MAAM;EAAoB,IAAI;CAAqB;AACvD;AAEA,MAAM,yBAAyB;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,MAAM,yBAAyB,CAC7B,QACA,MACF;AAEA,SAAS,aAAa,MAAsB;CAC1C,OAAO,IAAI,OAAO,MAAM,KAAK,IAAI;AACnC;AAEA,MAAM,kBAAkB;AACxB,MAAM,mBAAmB;AACzB,MAAM,4BAA4B;AAClC,MAAM,qBAAqB;AAE3B,SAAgB,iBACd,SACA,OAA2B,OACT;CAClB,IAAI,SAAS,OACX,OAAO,CAAC;CAEV,MAAM,WAA6B,CAAC;CACpC,MAAM,SAAS,SAAS;CAExB,KAAK,MAAM,EAAE,MAAM,QAAQ,+BACzB,IAAI,GAAG,KAAK,OAAO,GACjB,SAAS,KAAK;EACZ;EACA,SACE;EACF,UAAU,SAAS,SAAS;CAC9B,CAAC;CAIL,KAAK,MAAM,WAAW,wBACpB,IAAI,aAAa,OAAO,CAAC,CAAC,KAAK,OAAO,GACpC,SAAS,KAAK;EACZ,MAAM,eAAe;EACrB,SAAS,2BAA2B,QAAQ;EAC5C,UAAU;CACZ,CAAC;CAIL,IAAI,gBAAgB,KAAK,OAAO,GAC9B,SAAS,KAAK;EACZ,MAAM;EACN,SAAS;EACT,UAAU;CACZ,CAAC;CAGH,IAAI,iBAAiB,KAAK,OAAO,GAC/B,SAAS,KAAK;EACZ,MAAM;EACN,SAAS;EACT,UAAU,SAAS,SAAS;CAC9B,CAAC;CAGH,IAAI,0BAA0B,KAAK,OAAO,GACxC,SAAS,KAAK;EACZ,MAAM;EACN,SAAS;EACT,UAAU,SAAS,SAAS;CAC9B,CAAC;CAGH,IAAI,mBAAmB,KAAK,OAAO,GACjC,SAAS,KAAK;EACZ,MAAM;EACN,SAAS;EACT,UAAU;CACZ,CAAC;CAGH,IAAI;OACG,MAAM,WAAW,wBACpB,IAAI,aAAa,OAAO,CAAC,CAAC,KAAK,OAAO,GACpC,SAAS,KAAK;GACZ,MAAM,UAAU;GAChB,SAAS,oBAAoB,QAAQ;GACrC,UAAU;EACZ,CAAC;CAAA;CAKP,OAAO;AACT;AAEA,SAAgB,wBACd,UAC0C;CAC1C,MAAM,SAAmB,CAAC;CAC1B,MAAM,WAAqB,CAAC;CAC5B,KAAK,MAAM,KAAK,UAAU;EACxB,MAAM,YAAY,YAAY,EAAE,KAAK,IAAI,EAAE;EAC3C,IAAI,EAAE,aAAa,QACjB,OAAO,KAAK,SAAS;OAErB,SAAS,KAAK,SAAS;CAE3B;CACA,OAAO;EAAE;EAAQ;CAAS;AAC5B"}
+{"version":3,"file":"bashAst.cjs","names":[],"sources":["../../../../src/tools/local/bashAst.ts"],"mappings":";AAyBA,MAAM,gCAAgE;CACpE;EAAE,MAAM;EAA0B,IAAI;CAAO;CAC7C;EAAE,MAAM;EAAsB,IAAI;CAAU;CAC5C;EAAE,MAAM;EAAyB,IAAI;CAAS;CAC9C;EAAE,MAAM;EAAoB,IAAI;CAAqB;AACvD;AAEA,MAAM,yBAAyB;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAEA,MAAM,yBAAyB,CAC7B,QACA,MACF;AAEA,SAAS,aAAa,MAAsB;CAC1C,OAAO,IAAI,OAAO,MAAM,KAAK,IAAI;AACnC;AAEA,MAAM,kBAAkB;AACxB,MAAM,mBAAmB;AACzB,MAAM,4BAA4B;AAClC,MAAM,qBAAqB;AAE3B,SAAgB,iBACd,SACA,OAA2B,OACT;CAClB,IAAI,SAAS,OACX,OAAO,CAAC;CAEV,MAAM,WAA6B,CAAC;CACpC,MAAM,SAAS,SAAS;CAExB,KAAK,MAAM,EAAE,MAAM,QAAQ,+BACzB,IAAI,GAAG,KAAK,OAAO,GACjB,SAAS,KAAK;EACZ;EACA,SACE;EACF,UAAU,SAAS,SAAS;CAC9B,CAAC;CAIL,KAAK,MAAM,WAAW,wBACpB,IAAI,aAAa,OAAO,CAAC,CAAC,KAAK,OAAO,GACpC,SAAS,KAAK;EACZ,MAAM,eAAe;EACrB,SAAS,2BAA2B,QAAQ;EAC5C,UAAU;CACZ,CAAC;CAIL,IAAI,gBAAgB,KAAK,OAAO,GAC9B,SAAS,KAAK;EACZ,MAAM;EACN,SAAS;EACT,UAAU;CACZ,CAAC;CAGH,IAAI,iBAAiB,KAAK,OAAO,GAC/B,SAAS,KAAK;EACZ,MAAM;EACN,SAAS;EACT,UAAU,SAAS,SAAS;CAC9B,CAAC;CAGH,IAAI,0BAA0B,KAAK,OAAO,GACxC,SAAS,KAAK;EACZ,MAAM;EACN,SAAS;EACT,UAAU,SAAS,SAAS;CAC9B,CAAC;CAGH,IAAI,mBAAmB,KAAK,OAAO,GACjC,SAAS,KAAK;EACZ,MAAM;EACN,SAAS;EACT,UAAU;CACZ,CAAC;CAGH,IAAI;OACG,MAAM,WAAW,wBACpB,IAAI,aAAa,OAAO,CAAC,CAAC,KAAK,OAAO,GACpC,SAAS,KAAK;GACZ,MAAM,UAAU;GAChB,SAAS,oBAAoB,QAAQ;GACrC,UAAU;EACZ,CAAC;CAAA;CAKP,OAAO;AACT;AAEA,SAAgB,wBACd,UAC0C;CAC1C,MAAM,SAAmB,CAAC;CAC1B,MAAM,WAAqB,CAAC;CAC5B,KAAK,MAAM,KAAK,UAAU;EACxB,MAAM,YAAY,YAAY,EAAE,KAAK,IAAI,EAAE;EAC3C,IAAI,EAAE,aAAa,QACjB,OAAO,KAAK,SAAS;OAErB,SAAS,KAAK,SAAS;CAE3B;CACA,OAAO;EAAE;EAAQ;CAAS;AAC5B"}

package/dist/cjs/tools/local/editStrategies.cjs

@@ -10,11 +10,6 @@ const exactStrategy = (source, oldString) => {
 		end: first + oldString.length
 	};
 };
-/**
-* Match per-line, ignoring trailing whitespace differences. Useful for
-* the very common case where the LLM stripped trailing spaces or added
-* an extra blank.
-*/
 const lineTrimmedStrategy = (source, oldString) => {
 	if (oldString === "") return null;
 	const sourceLines = source.split("\n");
@@ -45,10 +40,6 @@ const lineTrimmedStrategy = (source, oldString) => {
 		end
 	};
 };
-/**
-* Collapse all runs of whitespace to a single space and match. Catches
-* cases where the LLM normalised tabs to spaces or vice-versa.
-*/
 const whitespaceNormalizedStrategy = (source, oldString) => {
 	if (oldString === "") return null;
 	const norm = (s) => s.replace(/\s+/g, " ").trim();
@@ -77,11 +68,6 @@ const whitespaceNormalizedStrategy = (source, oldString) => {
 		end
 	};
 };
-/**
-* Strip the common leading-indent from each line of the needle and
-* each candidate window of the source. Catches the very common case
-* where the LLM omitted the indentation it should have copied.
-*/
 const indentationFlexibleStrategy = (source, oldString) => {
 	if (oldString === "") return null;
 	const stripCommonIndent = (block) => {

package/dist/cjs/tools/local/editStrategies.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"editStrategies.cjs","names":[],"sources":["../../../../src/tools/local/editStrategies.ts"],"sourcesContent":["/**\n * Single-occurrence string-replacement strategies for `edit_file`.\n *\n * The LLM frequently emits an `oldString` whose whitespace, indentation,\n * or escape sequences are slightly off from the on-disk content. Rather\n * than failing the call (which forces a re-read + retry round-trip),\n * we walk a chain of progressively looser matchers, stopping at the\n * first one that locates exactly one match. The matched on-disk slice\n * is then literally replaced with `newString` — we never modify\n * `newString`, only the search.\n *\n * Strategies are ordered from strict to lenient so we don't accidentally\n * over-match a more specific pattern with a looser one. Inspired by\n * opencode's nine-strategy chain (sst/opencode), trimmed to the four\n * highest-yield strategies for a first cut. Add more (block-anchor +\n * Levenshtein, escape-normalized, etc.) as needed.\n */\n\nexport interface EditMatch {\n  /** Strategy name that produced the match, for telemetry/diagnostics. */\n  strategy: string;\n  /** Starting offset in the source. */\n  start: number;\n  /** Ending offset (exclusive). */\n  end: number;\n}\n\nexport type EditStrategy = (\n  source: string,\n  oldString: string\n) => EditMatch | null;\n\nconst exactStrategy: EditStrategy = (source, oldString) => {\n  if (oldString === '') return null;\n  const first = source.indexOf(oldString);\n  if (first === -1) return null;\n  const second = source.indexOf(oldString, first + oldString.length);\n  if (second !== -1) return null;\n  return { strategy: 'exact', start: first, end: first + oldString.length };\n};\n\n/**\n * Match per-line, ignoring trailing whitespace differences. Useful for\n * the very common case where the LLM stripped trailing spaces or added\n * an extra blank.\n */\nconst lineTrimmedStrategy: EditStrategy = (source, oldString) => {\n  if (oldString === '') return null;\n  const sourceLines = source.split('\\n');\n  const oldLines = oldString.split('\\n');\n  if (oldLines.length === 0 || oldLines.length > sourceLines.length) {\n    return null;\n  }\n\n  let foundAt = -1;\n  for (let i = 0; i <= sourceLines.length - oldLines.length; i++) {\n    let ok = true;\n    for (let j = 0; j < oldLines.length; j++) {\n      if (sourceLines[i + j].trimEnd() !== oldLines[j].trimEnd()) {\n        ok = false;\n        break;\n      }\n    }\n    if (!ok) continue;\n    if (foundAt !== -1) return null; // multiple matches\n    foundAt = i;\n  }\n  if (foundAt === -1) return null;\n\n  let start = 0;\n  for (let i = 0; i < foundAt; i++) start += sourceLines[i].length + 1;\n  let end = start;\n  for (let i = 0; i < oldLines.length; i++) {\n    end += sourceLines[foundAt + i].length;\n    if (i < oldLines.length - 1) end += 1;\n  }\n  return { strategy: 'line-trimmed', start, end };\n};\n\n/**\n * Collapse all runs of whitespace to a single space and match. Catches\n * cases where the LLM normalised tabs to spaces or vice-versa.\n */\nconst whitespaceNormalizedStrategy: EditStrategy = (source, oldString) => {\n  if (oldString === '') return null;\n  const norm = (s: string): string => s.replace(/\\s+/g, ' ').trim();\n  const normalizedNeedle = norm(oldString);\n  if (normalizedNeedle === '') return null;\n\n  const sourceLines = source.split('\\n');\n  const needleLines = oldString.split('\\n');\n  if (needleLines.length > sourceLines.length) return null;\n\n  let foundAt = -1;\n  for (let i = 0; i <= sourceLines.length - needleLines.length; i++) {\n    const candidate = sourceLines\n      .slice(i, i + needleLines.length)\n      .join('\\n');\n    if (norm(candidate) !== normalizedNeedle) continue;\n    if (foundAt !== -1) return null;\n    foundAt = i;\n  }\n  if (foundAt === -1) return null;\n\n  let start = 0;\n  for (let i = 0; i < foundAt; i++) start += sourceLines[i].length + 1;\n  let end = start;\n  for (let i = 0; i < needleLines.length; i++) {\n    end += sourceLines[foundAt + i].length;\n    if (i < needleLines.length - 1) end += 1;\n  }\n  return { strategy: 'whitespace-normalized', start, end };\n};\n\n/**\n * Strip the common leading-indent from each line of the needle and\n * each candidate window of the source. Catches the very common case\n * where the LLM omitted the indentation it should have copied.\n */\nconst indentationFlexibleStrategy: EditStrategy = (source, oldString) => {\n  if (oldString === '') return null;\n\n  const stripCommonIndent = (block: string): string => {\n    const lines = block.split('\\n');\n    let common = Number.POSITIVE_INFINITY;\n    for (const line of lines) {\n      if (line.trim() === '') continue;\n      const m = /^(\\s*)/.exec(line);\n      const indent = m ? m[1].length : 0;\n      if (indent < common) common = indent;\n      if (common === 0) break;\n    }\n    if (!Number.isFinite(common) || common === 0) return block;\n    return lines\n      .map((l) => (l.length >= common ? l.slice(common) : l))\n      .join('\\n');\n  };\n\n  const normalizedNeedle = stripCommonIndent(oldString);\n  if (normalizedNeedle === '') return null;\n\n  const sourceLines = source.split('\\n');\n  const needleLines = oldString.split('\\n');\n  if (needleLines.length > sourceLines.length) return null;\n\n  let foundAt = -1;\n  for (let i = 0; i <= sourceLines.length - needleLines.length; i++) {\n    const window = sourceLines.slice(i, i + needleLines.length).join('\\n');\n    if (stripCommonIndent(window) !== normalizedNeedle) continue;\n    if (foundAt !== -1) return null;\n    foundAt = i;\n  }\n  if (foundAt === -1) return null;\n\n  let start = 0;\n  for (let i = 0; i < foundAt; i++) start += sourceLines[i].length + 1;\n  let end = start;\n  for (let i = 0; i < needleLines.length; i++) {\n    end += sourceLines[foundAt + i].length;\n    if (i < needleLines.length - 1) end += 1;\n  }\n  return { strategy: 'indentation-flexible', start, end };\n};\n\nconst STRATEGY_CHAIN: EditStrategy[] = [\n  exactStrategy,\n  lineTrimmedStrategy,\n  whitespaceNormalizedStrategy,\n  indentationFlexibleStrategy,\n];\n\nexport function locateEdit(source: string, oldString: string): EditMatch | null {\n  for (const strategy of STRATEGY_CHAIN) {\n    const match = strategy(source, oldString);\n    if (match != null) {\n      return match;\n    }\n  }\n  return null;\n}\n\nexport function applyEdit(\n  source: string,\n  match: EditMatch,\n  newString: string\n): string {\n  return source.slice(0, match.start) + newString + source.slice(match.end);\n}\n"],"mappings":";AAgCA,MAAM,iBAA+B,QAAQ,cAAc;CACzD,IAAI,cAAc,IAAI,OAAO;CAC7B,MAAM,QAAQ,OAAO,QAAQ,SAAS;CACtC,IAAI,UAAU,IAAI,OAAO;CAEzB,IADe,OAAO,QAAQ,WAAW,QAAQ,UAAU,MAClD,MAAM,IAAI,OAAO;CAC1B,OAAO;EAAE,UAAU;EAAS,OAAO;EAAO,KAAK,QAAQ,UAAU;CAAO;AAC1E;;;;;;AAOA,MAAM,uBAAqC,QAAQ,cAAc;CAC/D,IAAI,cAAc,IAAI,OAAO;CAC7B,MAAM,cAAc,OAAO,MAAM,IAAI;CACrC,MAAM,WAAW,UAAU,MAAM,IAAI;CACrC,IAAI,SAAS,WAAW,KAAK,SAAS,SAAS,YAAY,QACzD,OAAO;CAGT,IAAI,UAAU;CACd,KAAK,IAAI,IAAI,GAAG,KAAK,YAAY,SAAS,SAAS,QAAQ,KAAK;EAC9D,IAAI,KAAK;EACT,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KACnC,IAAI,YAAY,IAAI,EAAE,CAAC,QAAQ,MAAM,SAAS,EAAE,CAAC,QAAQ,GAAG;GAC1D,KAAK;GACL;EACF;EAEF,IAAI,CAAC,IAAI;EACT,IAAI,YAAY,IAAI,OAAO;EAC3B,UAAU;CACZ;CACA,IAAI,YAAY,IAAI,OAAO;CAE3B,IAAI,QAAQ;CACZ,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,KAAK,SAAS,YAAY,EAAE,CAAC,SAAS;CACnE,IAAI,MAAM;CACV,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;EACxC,OAAO,YAAY,UAAU,EAAE,CAAC;EAChC,IAAI,IAAI,SAAS,SAAS,GAAG,OAAO;CACtC;CACA,OAAO;EAAE,UAAU;EAAgB;EAAO;CAAI;AAChD;;;;;AAMA,MAAM,gCAA8C,QAAQ,cAAc;CACxE,IAAI,cAAc,IAAI,OAAO;CAC7B,MAAM,QAAQ,MAAsB,EAAE,QAAQ,QAAQ,GAAG,CAAC,CAAC,KAAK;CAChE,MAAM,mBAAmB,KAAK,SAAS;CACvC,IAAI,qBAAqB,IAAI,OAAO;CAEpC,MAAM,cAAc,OAAO,MAAM,IAAI;CACrC,MAAM,cAAc,UAAU,MAAM,IAAI;CACxC,IAAI,YAAY,SAAS,YAAY,QAAQ,OAAO;CAEpD,IAAI,UAAU;CACd,KAAK,IAAI,IAAI,GAAG,KAAK,YAAY,SAAS,YAAY,QAAQ,KAAK;EAIjE,IAAI,KAHc,YACf,MAAM,GAAG,IAAI,YAAY,MAAM,CAAC,CAChC,KAAK,IACS,CAAC,MAAM,kBAAkB;EAC1C,IAAI,YAAY,IAAI,OAAO;EAC3B,UAAU;CACZ;CACA,IAAI,YAAY,IAAI,OAAO;CAE3B,IAAI,QAAQ;CACZ,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,KAAK,SAAS,YAAY,EAAE,CAAC,SAAS;CACnE,IAAI,MAAM;CACV,KAAK,IAAI,IAAI,GAAG,IAAI,YAAY,QAAQ,KAAK;EAC3C,OAAO,YAAY,UAAU,EAAE,CAAC;EAChC,IAAI,IAAI,YAAY,SAAS,GAAG,OAAO;CACzC;CACA,OAAO;EAAE,UAAU;EAAyB;EAAO;CAAI;AACzD;;;;;;AAOA,MAAM,+BAA6C,QAAQ,cAAc;CACvE,IAAI,cAAc,IAAI,OAAO;CAE7B,MAAM,qBAAqB,UAA0B;EACnD,MAAM,QAAQ,MAAM,MAAM,IAAI;EAC9B,IAAI,SAAS,OAAO;EACpB,KAAK,MAAM,QAAQ,OAAO;GACxB,IAAI,KAAK,KAAK,MAAM,IAAI;GACxB,MAAM,IAAI,SAAS,KAAK,IAAI;GAC5B,MAAM,SAAS,IAAI,EAAE,EAAE,CAAC,SAAS;GACjC,IAAI,SAAS,QAAQ,SAAS;GAC9B,IAAI,WAAW,GAAG;EACpB;EACA,IAAI,CAAC,OAAO,SAAS,MAAM,KAAK,WAAW,GAAG,OAAO;EACrD,OAAO,MACJ,KAAK,MAAO,EAAE,UAAU,SAAS,EAAE,MAAM,MAAM,IAAI,CAAE,CAAC,CACtD,KAAK,IAAI;CACd;CAEA,MAAM,mBAAmB,kBAAkB,SAAS;CACpD,IAAI,qBAAqB,IAAI,OAAO;CAEpC,MAAM,cAAc,OAAO,MAAM,IAAI;CACrC,MAAM,cAAc,UAAU,MAAM,IAAI;CACxC,IAAI,YAAY,SAAS,YAAY,QAAQ,OAAO;CAEpD,IAAI,UAAU;CACd,KAAK,IAAI,IAAI,GAAG,KAAK,YAAY,SAAS,YAAY,QAAQ,KAAK;EAEjE,IAAI,kBADW,YAAY,MAAM,GAAG,IAAI,YAAY,MAAM,CAAC,CAAC,KAAK,IACtC,CAAC,MAAM,kBAAkB;EACpD,IAAI,YAAY,IAAI,OAAO;EAC3B,UAAU;CACZ;CACA,IAAI,YAAY,IAAI,OAAO;CAE3B,IAAI,QAAQ;CACZ,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,KAAK,SAAS,YAAY,EAAE,CAAC,SAAS;CACnE,IAAI,MAAM;CACV,KAAK,IAAI,IAAI,GAAG,IAAI,YAAY,QAAQ,KAAK;EAC3C,OAAO,YAAY,UAAU,EAAE,CAAC;EAChC,IAAI,IAAI,YAAY,SAAS,GAAG,OAAO;CACzC;CACA,OAAO;EAAE,UAAU;EAAwB;EAAO;CAAI;AACxD;AAEA,MAAM,iBAAiC;CACrC;CACA;CACA;CACA;AACF;AAEA,SAAgB,WAAW,QAAgB,WAAqC;CAC9E,KAAK,MAAM,YAAY,gBAAgB;EACrC,MAAM,QAAQ,SAAS,QAAQ,SAAS;EACxC,IAAI,SAAS,MACX,OAAO;CAEX;CACA,OAAO;AACT;AAEA,SAAgB,UACd,QACA,OACA,WACQ;CACR,OAAO,OAAO,MAAM,GAAG,MAAM,KAAK,IAAI,YAAY,OAAO,MAAM,MAAM,GAAG;AAC1E"}
+{"version":3,"file":"editStrategies.cjs","names":[],"sources":["../../../../src/tools/local/editStrategies.ts"],"mappings":";AAgCA,MAAM,iBAA+B,QAAQ,cAAc;CACzD,IAAI,cAAc,IAAI,OAAO;CAC7B,MAAM,QAAQ,OAAO,QAAQ,SAAS;CACtC,IAAI,UAAU,IAAI,OAAO;CAEzB,IADe,OAAO,QAAQ,WAAW,QAAQ,UAAU,MAClD,MAAM,IAAI,OAAO;CAC1B,OAAO;EAAE,UAAU;EAAS,OAAO;EAAO,KAAK,QAAQ,UAAU;CAAO;AAC1E;AAOA,MAAM,uBAAqC,QAAQ,cAAc;CAC/D,IAAI,cAAc,IAAI,OAAO;CAC7B,MAAM,cAAc,OAAO,MAAM,IAAI;CACrC,MAAM,WAAW,UAAU,MAAM,IAAI;CACrC,IAAI,SAAS,WAAW,KAAK,SAAS,SAAS,YAAY,QACzD,OAAO;CAGT,IAAI,UAAU;CACd,KAAK,IAAI,IAAI,GAAG,KAAK,YAAY,SAAS,SAAS,QAAQ,KAAK;EAC9D,IAAI,KAAK;EACT,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KACnC,IAAI,YAAY,IAAI,EAAE,CAAC,QAAQ,MAAM,SAAS,EAAE,CAAC,QAAQ,GAAG;GAC1D,KAAK;GACL;EACF;EAEF,IAAI,CAAC,IAAI;EACT,IAAI,YAAY,IAAI,OAAO;EAC3B,UAAU;CACZ;CACA,IAAI,YAAY,IAAI,OAAO;CAE3B,IAAI,QAAQ;CACZ,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,KAAK,SAAS,YAAY,EAAE,CAAC,SAAS;CACnE,IAAI,MAAM;CACV,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;EACxC,OAAO,YAAY,UAAU,EAAE,CAAC;EAChC,IAAI,IAAI,SAAS,SAAS,GAAG,OAAO;CACtC;CACA,OAAO;EAAE,UAAU;EAAgB;EAAO;CAAI;AAChD;AAMA,MAAM,gCAA8C,QAAQ,cAAc;CACxE,IAAI,cAAc,IAAI,OAAO;CAC7B,MAAM,QAAQ,MAAsB,EAAE,QAAQ,QAAQ,GAAG,CAAC,CAAC,KAAK;CAChE,MAAM,mBAAmB,KAAK,SAAS;CACvC,IAAI,qBAAqB,IAAI,OAAO;CAEpC,MAAM,cAAc,OAAO,MAAM,IAAI;CACrC,MAAM,cAAc,UAAU,MAAM,IAAI;CACxC,IAAI,YAAY,SAAS,YAAY,QAAQ,OAAO;CAEpD,IAAI,UAAU;CACd,KAAK,IAAI,IAAI,GAAG,KAAK,YAAY,SAAS,YAAY,QAAQ,KAAK;EAIjE,IAAI,KAHc,YACf,MAAM,GAAG,IAAI,YAAY,MAAM,CAAC,CAChC,KAAK,IACS,CAAC,MAAM,kBAAkB;EAC1C,IAAI,YAAY,IAAI,OAAO;EAC3B,UAAU;CACZ;CACA,IAAI,YAAY,IAAI,OAAO;CAE3B,IAAI,QAAQ;CACZ,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,KAAK,SAAS,YAAY,EAAE,CAAC,SAAS;CACnE,IAAI,MAAM;CACV,KAAK,IAAI,IAAI,GAAG,IAAI,YAAY,QAAQ,KAAK;EAC3C,OAAO,YAAY,UAAU,EAAE,CAAC;EAChC,IAAI,IAAI,YAAY,SAAS,GAAG,OAAO;CACzC;CACA,OAAO;EAAE,UAAU;EAAyB;EAAO;CAAI;AACzD;AAOA,MAAM,+BAA6C,QAAQ,cAAc;CACvE,IAAI,cAAc,IAAI,OAAO;CAE7B,MAAM,qBAAqB,UAA0B;EACnD,MAAM,QAAQ,MAAM,MAAM,IAAI;EAC9B,IAAI,SAAS,OAAO;EACpB,KAAK,MAAM,QAAQ,OAAO;GACxB,IAAI,KAAK,KAAK,MAAM,IAAI;GACxB,MAAM,IAAI,SAAS,KAAK,IAAI;GAC5B,MAAM,SAAS,IAAI,EAAE,EAAE,CAAC,SAAS;GACjC,IAAI,SAAS,QAAQ,SAAS;GAC9B,IAAI,WAAW,GAAG;EACpB;EACA,IAAI,CAAC,OAAO,SAAS,MAAM,KAAK,WAAW,GAAG,OAAO;EACrD,OAAO,MACJ,KAAK,MAAO,EAAE,UAAU,SAAS,EAAE,MAAM,MAAM,IAAI,CAAE,CAAC,CACtD,KAAK,IAAI;CACd;CAEA,MAAM,mBAAmB,kBAAkB,SAAS;CACpD,IAAI,qBAAqB,IAAI,OAAO;CAEpC,MAAM,cAAc,OAAO,MAAM,IAAI;CACrC,MAAM,cAAc,UAAU,MAAM,IAAI;CACxC,IAAI,YAAY,SAAS,YAAY,QAAQ,OAAO;CAEpD,IAAI,UAAU;CACd,KAAK,IAAI,IAAI,GAAG,KAAK,YAAY,SAAS,YAAY,QAAQ,KAAK;EAEjE,IAAI,kBADW,YAAY,MAAM,GAAG,IAAI,YAAY,MAAM,CAAC,CAAC,KAAK,IACtC,CAAC,MAAM,kBAAkB;EACpD,IAAI,YAAY,IAAI,OAAO;EAC3B,UAAU;CACZ;CACA,IAAI,YAAY,IAAI,OAAO;CAE3B,IAAI,QAAQ;CACZ,KAAK,IAAI,IAAI,GAAG,IAAI,SAAS,KAAK,SAAS,YAAY,EAAE,CAAC,SAAS;CACnE,IAAI,MAAM;CACV,KAAK,IAAI,IAAI,GAAG,IAAI,YAAY,QAAQ,KAAK;EAC3C,OAAO,YAAY,UAAU,EAAE,CAAC;EAChC,IAAI,IAAI,YAAY,SAAS,GAAG,OAAO;CACzC;CACA,OAAO;EAAE,UAAU;EAAwB;EAAO;CAAI;AACxD;AAEA,MAAM,iBAAiC;CACrC;CACA;CACA;CACA;AACF;AAEA,SAAgB,WAAW,QAAgB,WAAqC;CAC9E,KAAK,MAAM,YAAY,gBAAgB;EACrC,MAAM,QAAQ,SAAS,QAAQ,SAAS;EACxC,IAAI,SAAS,MACX,OAAO;CAEX;CACA,OAAO;AACT;AAEA,SAAgB,UACd,QACA,OACA,WACQ;CACR,OAAO,OAAO,MAAM,GAAG,MAAM,KAAK,IAAI,YAAY,OAAO,MAAM,MAAM,GAAG;AAC1E"}

package/dist/cjs/tools/local/resolveLocalExecutionTools.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"resolveLocalExecutionTools.cjs","names":["LOCAL_CODING_BUNDLE_NAMES","createLocalCodeExecutionTool","createLocalBashExecutionTool","createLocalProgrammaticToolCallingTool","createLocalBashProgrammaticToolCallingTool","createCloudflareCodingTools","CODE_EXECUTION_TOOLS","createCloudflareExecutionTool","createLocalCodingTools","createLocalCodingToolDefinitions","createCloudflareCodingToolBundle","createLocalCodingToolBundle"],"sources":["../../../../src/tools/local/resolveLocalExecutionTools.ts"],"sourcesContent":["import type * as t from '@/types';\nimport {\n  createLocalBashProgrammaticToolCallingTool,\n  createLocalProgrammaticToolCallingTool,\n} from './LocalProgrammaticToolCalling';\nimport {\n  createCloudflareCodingToolBundle,\n  createCloudflareCodingTools,\n  createCloudflareExecutionTool,\n} from '@/tools/cloudflare';\nimport {\n  createLocalCodingToolBundle,\n  createLocalCodingToolDefinitions,\n  createLocalCodingTools,\n} from './LocalCodingTools';\nimport {\n  createLocalBashExecutionTool,\n  createLocalCodeExecutionTool,\n} from './LocalExecutionTools';\nimport {\n  Constants,\n  CODE_EXECUTION_TOOLS,\n  LOCAL_CODING_BUNDLE_NAMES,\n} from '@/common';\n\ntype ResolveLocalToolsResult = {\n  toolMap: t.ToolMap;\n  directToolNames: Set<string>;\n  /**\n   * Set when `local.fileCheckpointing === true` AND the auto-bind\n   * coding suite is in use. ToolNode stashes this on the node and\n   * exposes it via `getFileCheckpointer()` so the host can call\n   * `rewind()` after a failed batch. Manual review (finding E)\n   * flagged that the config flag was previously a no-op in the\n   * Run/ToolNode auto-bind path — only direct\n   * `createLocalCodingToolBundle()` callers could access the\n   * checkpointer.\n   */\n  fileCheckpointer?: t.LocalFileCheckpointer;\n};\n\nfunction shouldUseLocalExecution(config?: t.ToolExecutionConfig): boolean {\n  return config?.engine === 'local';\n}\n\nfunction shouldUseCloudflareSandboxExecution(\n  config?: t.ToolExecutionConfig\n): boolean {\n  return config?.engine === 'cloudflare-sandbox';\n}\n\nfunction shouldIncludeCodingTools(config?: t.ToolExecutionConfig): boolean {\n  return (\n    (shouldUseLocalExecution(config) &&\n      config?.local?.includeCodingTools !== false) ||\n    (shouldUseCloudflareSandboxExecution(config) &&\n      config?.cloudflare?.includeCodingTools !== false)\n  );\n}\n\nfunction getCloudflareConfig(\n  config?: t.ToolExecutionConfig\n): t.CloudflareSandboxExecutionConfig {\n  if (config?.cloudflare == null) {\n    throw new Error(\n      'toolExecution.cloudflare is required when engine is \"cloudflare-sandbox\".'\n    );\n  }\n  return config.cloudflare;\n}\n\nfunction getSelectedCloudflareCodingToolNames(\n  config: t.CloudflareSandboxExecutionConfig\n): Set<string> {\n  return new Set(config.codingToolNames ?? LOCAL_CODING_BUNDLE_NAMES);\n}\n\nfunction filterCloudflareCodingToolAllowlist(\n  tools: t.GraphTools | undefined,\n  selectedNames: Set<string>\n): t.GraphTools | undefined {\n  const existingTools = (tools as t.GenericTool[] | undefined) ?? [];\n  if (existingTools.length === 0) {\n    return tools;\n  }\n  return existingTools.filter((existingTool) => {\n    if (!('name' in existingTool) || typeof existingTool.name !== 'string') {\n      return true;\n    }\n    return (\n      !LOCAL_CODING_BUNDLE_NAMES.includes(existingTool.name) ||\n      selectedNames.has(existingTool.name)\n    );\n  });\n}\n\nfunction pruneCloudflareCodingToolAllowlist(\n  toolMap: t.ToolMap,\n  selectedNames: Set<string>\n): void {\n  for (const name of LOCAL_CODING_BUNDLE_NAMES) {\n    if (!selectedNames.has(name)) {\n      toolMap.delete(name);\n    }\n  }\n}\n\nfunction createLocalExecutionTool(\n  name: string,\n  config: t.LocalExecutionConfig\n): t.GenericTool | undefined {\n  switch (name) {\n  case Constants.EXECUTE_CODE:\n    return createLocalCodeExecutionTool(config);\n  case Constants.BASH_TOOL:\n    return createLocalBashExecutionTool({ config });\n  case Constants.PROGRAMMATIC_TOOL_CALLING:\n    return createLocalProgrammaticToolCallingTool(config);\n  case Constants.BASH_PROGRAMMATIC_TOOL_CALLING:\n    return createLocalBashProgrammaticToolCallingTool(config);\n  default:\n    return undefined;\n  }\n}\n\nfunction mergeToolsByName(\n  baseTools: t.GraphTools | undefined,\n  localTools: t.GenericTool[]\n): t.GraphTools {\n  const orderedTools: t.GenericTool[] = [];\n  const indexByName = new Map<string, number>();\n\n  for (const tool of (baseTools as t.GenericTool[] | undefined) ?? []) {\n    if ('name' in tool && typeof tool.name === 'string') {\n      indexByName.set(tool.name, orderedTools.length);\n    }\n    orderedTools.push(tool);\n  }\n\n  for (const tool of localTools) {\n    const existingIndex = indexByName.get(tool.name);\n    if (existingIndex == null) {\n      indexByName.set(tool.name, orderedTools.length);\n      orderedTools.push(tool);\n      continue;\n    }\n    orderedTools[existingIndex] = tool;\n  }\n\n  return orderedTools;\n}\n\nexport function resolveLocalToolsForBinding(args: {\n  tools?: t.GraphTools;\n  toolExecution?: t.ToolExecutionConfig;\n}): t.GraphTools | undefined {\n  if (\n    !shouldUseLocalExecution(args.toolExecution) &&\n    !shouldUseCloudflareSandboxExecution(args.toolExecution)\n  ) {\n    return args.tools;\n  }\n\n  if (shouldUseCloudflareSandboxExecution(args.toolExecution)) {\n    const cloudflareConfig = getCloudflareConfig(args.toolExecution);\n    if (shouldIncludeCodingTools(args.toolExecution)) {\n      const selectedNames =\n        getSelectedCloudflareCodingToolNames(cloudflareConfig);\n      return mergeToolsByName(\n        filterCloudflareCodingToolAllowlist(args.tools, selectedNames),\n        createCloudflareCodingTools(cloudflareConfig)\n      );\n    }\n\n    const replacements = ((args.tools as t.GenericTool[] | undefined) ?? [])\n      .filter(\n        (existingTool): existingTool is t.GenericTool & { name: string } =>\n          'name' in existingTool &&\n          typeof existingTool.name === 'string' &&\n          CODE_EXECUTION_TOOLS.has(existingTool.name)\n      )\n      .map((existingTool) =>\n        createCloudflareExecutionTool(existingTool.name, cloudflareConfig)\n      )\n      .filter(\n        (cloudflareTool): cloudflareTool is t.GenericTool =>\n          cloudflareTool != null\n      );\n\n    return replacements.length === 0\n      ? args.tools\n      : mergeToolsByName(args.tools, replacements);\n  }\n\n  const localConfig = args.toolExecution?.local ?? {};\n  if (shouldIncludeCodingTools(args.toolExecution)) {\n    return mergeToolsByName(args.tools, createLocalCodingTools(localConfig));\n  }\n\n  const replacements = ((args.tools as t.GenericTool[] | undefined) ?? [])\n    .filter(\n      (existingTool): existingTool is t.GenericTool & { name: string } =>\n        'name' in existingTool &&\n        typeof existingTool.name === 'string' &&\n        CODE_EXECUTION_TOOLS.has(existingTool.name)\n    )\n    .map((existingTool) =>\n      createLocalExecutionTool(existingTool.name, localConfig)\n    )\n    .filter((localTool): localTool is t.GenericTool => localTool != null);\n\n  return replacements.length === 0\n    ? args.tools\n    : mergeToolsByName(args.tools, replacements);\n}\n\nexport function resolveLocalToolRegistry(args: {\n  toolRegistry?: t.LCToolRegistry;\n  toolExecution?: t.ToolExecutionConfig;\n}): t.LCToolRegistry | undefined {\n  if (!shouldIncludeCodingTools(args.toolExecution)) {\n    return args.toolRegistry;\n  }\n\n  const registry = new Map(args.toolRegistry ?? []);\n  const selectedNames = shouldUseCloudflareSandboxExecution(args.toolExecution)\n    ? getSelectedCloudflareCodingToolNames(\n      getCloudflareConfig(args.toolExecution)\n    )\n    : undefined;\n  for (const definition of createLocalCodingToolDefinitions()) {\n    if (selectedNames != null && !selectedNames.has(definition.name)) {\n      registry.delete(definition.name);\n      continue;\n    }\n    registry.set(definition.name, definition);\n  }\n  return registry;\n}\n\nexport function resolveLocalExecutionTools(args: {\n  toolMap: t.ToolMap;\n  toolExecution?: t.ToolExecutionConfig;\n  /**\n   * Caller-provided checkpointer that overrides the bundle's\n   * auto-created one. The Graph layer threads a single per-Run\n   * instance so every ToolNode it compiles shares one snapshot\n   * store — without that, a multi-agent graph would each get a\n   * private checkpointer and `Run.rewindFiles()` couldn't reach\n   * any of them.\n   */\n  fileCheckpointer?: t.LocalFileCheckpointer;\n}): ResolveLocalToolsResult {\n  const directToolNames = new Set<string>();\n  if (\n    !shouldUseLocalExecution(args.toolExecution) &&\n    !shouldUseCloudflareSandboxExecution(args.toolExecution)\n  ) {\n    return {\n      toolMap: args.toolMap,\n      directToolNames,\n    };\n  }\n\n  const toolMap = new Map(args.toolMap);\n  let fileCheckpointer: t.LocalFileCheckpointer | undefined;\n\n  if (shouldUseCloudflareSandboxExecution(args.toolExecution)) {\n    const cloudflareConfig = getCloudflareConfig(args.toolExecution);\n    if (shouldIncludeCodingTools(args.toolExecution)) {\n      const selectedNames =\n        getSelectedCloudflareCodingToolNames(cloudflareConfig);\n      pruneCloudflareCodingToolAllowlist(toolMap, selectedNames);\n      if (\n        cloudflareConfig.fileCheckpointing === true ||\n        args.fileCheckpointer != null\n      ) {\n        const bundle = createCloudflareCodingToolBundle(cloudflareConfig, {\n          checkpointer: args.fileCheckpointer,\n        });\n        fileCheckpointer = bundle.checkpointer;\n        for (const cloudflareTool of bundle.tools) {\n          toolMap.set(cloudflareTool.name, cloudflareTool);\n          directToolNames.add(cloudflareTool.name);\n        }\n      } else {\n        for (const cloudflareTool of createCloudflareCodingTools(\n          cloudflareConfig\n        )) {\n          toolMap.set(cloudflareTool.name, cloudflareTool);\n          directToolNames.add(cloudflareTool.name);\n        }\n      }\n    }\n\n    const includeCodingTools = shouldIncludeCodingTools(args.toolExecution);\n    for (const name of CODE_EXECUTION_TOOLS) {\n      if (includeCodingTools) continue;\n      if (!toolMap.has(name)) continue;\n\n      const cloudflareTool = createCloudflareExecutionTool(\n        name,\n        cloudflareConfig\n      );\n      if (cloudflareTool == null) {\n        continue;\n      }\n\n      toolMap.set(name, cloudflareTool);\n      directToolNames.add(name);\n    }\n\n    return { toolMap, directToolNames, fileCheckpointer };\n  }\n\n  const localConfig = args.toolExecution?.local ?? {};\n\n  if (shouldIncludeCodingTools(args.toolExecution)) {\n    // Use the bundle factory when fileCheckpointing is on so we can\n    // surface the checkpointer back to the caller — without this, the\n    // execution-path tools each captured into a checkpointer that was\n    // immediately discarded, making the public `fileCheckpointing`\n    // config flag a silent no-op outside of direct\n    // `createLocalCodingToolBundle()` use.\n    if (\n      localConfig.fileCheckpointing === true ||\n      args.fileCheckpointer != null\n    ) {\n      const bundle = createLocalCodingToolBundle(localConfig, {\n        checkpointer: args.fileCheckpointer,\n      });\n      fileCheckpointer = bundle.checkpointer;\n      for (const localTool of bundle.tools) {\n        toolMap.set(localTool.name, localTool);\n        directToolNames.add(localTool.name);\n      }\n    } else {\n      for (const localTool of createLocalCodingTools(localConfig)) {\n        toolMap.set(localTool.name, localTool);\n        directToolNames.add(localTool.name);\n      }\n    }\n  }\n\n  // When the coding-tool bundle was already installed above, it\n  // already created `bash_tool` / `execute_code` / programmatic-tool\n  // variants. Skip re-creating them here — the audit-of-audit (manual\n  // finding #4) flagged that the original loop overwrote those bundle\n  // instances with fresh ones via `createLocalExecutionTool`, wasting\n  // work and (more importantly) replacing tools the bundle had\n  // already wired up with shared state. The CODE_EXECUTION_TOOLS\n  // loop is now only relevant when the host pre-bound a tool with\n  // one of these names (the `toolMap.has(name)` branch) and coding\n  // tools are off.\n  const includeCodingTools = shouldIncludeCodingTools(args.toolExecution);\n  for (const name of CODE_EXECUTION_TOOLS) {\n    if (includeCodingTools) continue;\n    if (!toolMap.has(name)) continue;\n\n    const localTool = createLocalExecutionTool(name, localConfig);\n    if (localTool == null) {\n      continue;\n    }\n\n    toolMap.set(name, localTool);\n    directToolNames.add(name);\n  }\n\n  return { toolMap, directToolNames, fileCheckpointer };\n}\n"],"mappings":";;;;;;;;AAyCA,SAAS,wBAAwB,QAAyC;CACxE,OAAO,QAAQ,WAAW;AAC5B;AAEA,SAAS,oCACP,QACS;CACT,OAAO,QAAQ,WAAW;AAC5B;AAEA,SAAS,yBAAyB,QAAyC;CACzE,OACG,wBAAwB,MAAM,KAC7B,QAAQ,OAAO,uBAAuB,SACvC,oCAAoC,MAAM,KACzC,QAAQ,YAAY,uBAAuB;AAEjD;AAEA,SAAS,oBACP,QACoC;CACpC,IAAI,QAAQ,cAAc,MACxB,MAAM,IAAI,MACR,6EACF;CAEF,OAAO,OAAO;AAChB;AAEA,SAAS,qCACP,QACa;CACb,OAAO,IAAI,IAAI,OAAO,mBAAmBA,aAAAA,yBAAyB;AACpE;AAEA,SAAS,oCACP,OACA,eAC0B;CAC1B,MAAM,gBAAiB,SAAyC,CAAC;CACjE,IAAI,cAAc,WAAW,GAC3B,OAAO;CAET,OAAO,cAAc,QAAQ,iBAAiB;EAC5C,IAAI,EAAE,UAAU,iBAAiB,OAAO,aAAa,SAAS,UAC5D,OAAO;EAET,OACE,CAACA,aAAAA,0BAA0B,SAAS,aAAa,IAAI,KACrD,cAAc,IAAI,aAAa,IAAI;CAEvC,CAAC;AACH;AAEA,SAAS,mCACP,SACA,eACM;CACN,KAAK,MAAM,QAAQA,aAAAA,2BACjB,IAAI,CAAC,cAAc,IAAI,IAAI,GACzB,QAAQ,OAAO,IAAI;AAGzB;AAEA,SAAS,yBACP,MACA,QAC2B;CAC3B,QAAQ,MAAR;EACA,KAAA,gBACE,OAAOC,4BAAAA,6BAA6B,MAAM;EAC5C,KAAA,aACE,OAAOC,4BAAAA,6BAA6B,EAAE,OAAO,CAAC;EAChD,KAAA,uBACE,OAAOC,qCAAAA,uCAAuC,MAAM;EACtD,KAAA,uBACE,OAAOC,qCAAAA,2CAA2C,MAAM;EAC1D,SACE;CACF;AACF;AAEA,SAAS,iBACP,WACA,YACc;CACd,MAAM,eAAgC,CAAC;CACvC,MAAM,8BAAc,IAAI,IAAoB;CAE5C,KAAK,MAAM,QAAS,aAA6C,CAAC,GAAG;EACnE,IAAI,UAAU,QAAQ,OAAO,KAAK,SAAS,UACzC,YAAY,IAAI,KAAK,MAAM,aAAa,MAAM;EAEhD,aAAa,KAAK,IAAI;CACxB;CAEA,KAAK,MAAM,QAAQ,YAAY;EAC7B,MAAM,gBAAgB,YAAY,IAAI,KAAK,IAAI;EAC/C,IAAI,iBAAiB,MAAM;GACzB,YAAY,IAAI,KAAK,MAAM,aAAa,MAAM;GAC9C,aAAa,KAAK,IAAI;GACtB;EACF;EACA,aAAa,iBAAiB;CAChC;CAEA,OAAO;AACT;AAEA,SAAgB,4BAA4B,MAGf;CAC3B,IACE,CAAC,wBAAwB,KAAK,aAAa,KAC3C,CAAC,oCAAoC,KAAK,aAAa,GAEvD,OAAO,KAAK;CAGd,IAAI,oCAAoC,KAAK,aAAa,GAAG;EAC3D,MAAM,mBAAmB,oBAAoB,KAAK,aAAa;EAC/D,IAAI,yBAAyB,KAAK,aAAa,GAAG;GAChD,MAAM,gBACJ,qCAAqC,gBAAgB;GACvD,OAAO,iBACL,oCAAoC,KAAK,OAAO,aAAa,GAC7DC,+BAAAA,4BAA4B,gBAAgB,CAC9C;EACF;EAEA,MAAM,gBAAiB,KAAK,SAAyC,CAAC,EAAA,CACnE,QACE,iBACC,UAAU,gBACV,OAAO,aAAa,SAAS,YAC7BC,aAAAA,qBAAqB,IAAI,aAAa,IAAI,CAC9C,CAAC,CACA,KAAK,iBACJC,+BAAAA,8BAA8B,aAAa,MAAM,gBAAgB,CACnE,CAAC,CACA,QACE,mBACC,kBAAkB,IACtB;EAEF,OAAO,aAAa,WAAW,IAC3B,KAAK,QACL,iBAAiB,KAAK,OAAO,YAAY;CAC/C;CAEA,MAAM,cAAc,KAAK,eAAe,SAAS,CAAC;CAClD,IAAI,yBAAyB,KAAK,aAAa,GAC7C,OAAO,iBAAiB,KAAK,OAAOC,yBAAAA,uBAAuB,WAAW,CAAC;CAGzE,MAAM,gBAAiB,KAAK,SAAyC,CAAC,EAAA,CACnE,QACE,iBACC,UAAU,gBACV,OAAO,aAAa,SAAS,YAC7BF,aAAAA,qBAAqB,IAAI,aAAa,IAAI,CAC9C,CAAC,CACA,KAAK,iBACJ,yBAAyB,aAAa,MAAM,WAAW,CACzD,CAAC,CACA,QAAQ,cAA0C,aAAa,IAAI;CAEtE,OAAO,aAAa,WAAW,IAC3B,KAAK,QACL,iBAAiB,KAAK,OAAO,YAAY;AAC/C;AAEA,SAAgB,yBAAyB,MAGR;CAC/B,IAAI,CAAC,yBAAyB,KAAK,aAAa,GAC9C,OAAO,KAAK;CAGd,MAAM,WAAW,IAAI,IAAI,KAAK,gBAAgB,CAAC,CAAC;CAChD,MAAM,gBAAgB,oCAAoC,KAAK,aAAa,IACxE,qCACA,oBAAoB,KAAK,aAAa,CACxC,IACE,KAAA;CACJ,KAAK,MAAM,cAAcG,yBAAAA,iCAAiC,GAAG;EAC3D,IAAI,iBAAiB,QAAQ,CAAC,cAAc,IAAI,WAAW,IAAI,GAAG;GAChE,SAAS,OAAO,WAAW,IAAI;GAC/B;EACF;EACA,SAAS,IAAI,WAAW,MAAM,UAAU;CAC1C;CACA,OAAO;AACT;AAEA,SAAgB,2BAA2B,MAYf;CAC1B,MAAM,kCAAkB,IAAI,IAAY;CACxC,IACE,CAAC,wBAAwB,KAAK,aAAa,KAC3C,CAAC,oCAAoC,KAAK,aAAa,GAEvD,OAAO;EACL,SAAS,KAAK;EACd;CACF;CAGF,MAAM,UAAU,IAAI,IAAI,KAAK,OAAO;CACpC,IAAI;CAEJ,IAAI,oCAAoC,KAAK,aAAa,GAAG;EAC3D,MAAM,mBAAmB,oBAAoB,KAAK,aAAa;EAC/D,IAAI,yBAAyB,KAAK,aAAa,GAAG;GAGhD,mCAAmC,SADjC,qCAAqC,gBACiB,CAAC;GACzD,IACE,iBAAiB,sBAAsB,QACvC,KAAK,oBAAoB,MACzB;IACA,MAAM,SAASC,+BAAAA,iCAAiC,kBAAkB,EAChE,cAAc,KAAK,iBACrB,CAAC;IACD,mBAAmB,OAAO;IAC1B,KAAK,MAAM,kBAAkB,OAAO,OAAO;KACzC,QAAQ,IAAI,eAAe,MAAM,cAAc;KAC/C,gBAAgB,IAAI,eAAe,IAAI;IACzC;GACF,OACE,KAAK,MAAM,kBAAkBL,+BAAAA,4BAC3B,gBACF,GAAG;IACD,QAAQ,IAAI,eAAe,MAAM,cAAc;IAC/C,gBAAgB,IAAI,eAAe,IAAI;GACzC;EAEJ;EAEA,MAAM,qBAAqB,yBAAyB,KAAK,aAAa;EACtE,KAAK,MAAM,QAAQC,aAAAA,sBAAsB;GACvC,IAAI,oBAAoB;GACxB,IAAI,CAAC,QAAQ,IAAI,IAAI,GAAG;GAExB,MAAM,iBAAiBC,+BAAAA,8BACrB,MACA,gBACF;GACA,IAAI,kBAAkB,MACpB;GAGF,QAAQ,IAAI,MAAM,cAAc;GAChC,gBAAgB,IAAI,IAAI;EAC1B;EAEA,OAAO;GAAE;GAAS;GAAiB;EAAiB;CACtD;CAEA,MAAM,cAAc,KAAK,eAAe,SAAS,CAAC;CAElD,IAAI,yBAAyB,KAAK,aAAa,GAO7C,IACE,YAAY,sBAAsB,QAClC,KAAK,oBAAoB,MACzB;EACA,MAAM,SAASI,yBAAAA,4BAA4B,aAAa,EACtD,cAAc,KAAK,iBACrB,CAAC;EACD,mBAAmB,OAAO;EAC1B,KAAK,MAAM,aAAa,OAAO,OAAO;GACpC,QAAQ,IAAI,UAAU,MAAM,SAAS;GACrC,gBAAgB,IAAI,UAAU,IAAI;EACpC;CACF,OACE,KAAK,MAAM,aAAaH,yBAAAA,uBAAuB,WAAW,GAAG;EAC3D,QAAQ,IAAI,UAAU,MAAM,SAAS;EACrC,gBAAgB,IAAI,UAAU,IAAI;CACpC;CAcJ,MAAM,qBAAqB,yBAAyB,KAAK,aAAa;CACtE,KAAK,MAAM,QAAQF,aAAAA,sBAAsB;EACvC,IAAI,oBAAoB;EACxB,IAAI,CAAC,QAAQ,IAAI,IAAI,GAAG;EAExB,MAAM,YAAY,yBAAyB,MAAM,WAAW;EAC5D,IAAI,aAAa,MACf;EAGF,QAAQ,IAAI,MAAM,SAAS;EAC3B,gBAAgB,IAAI,IAAI;CAC1B;CAEA,OAAO;EAAE;EAAS;EAAiB;CAAiB;AACtD"}
+{"version":3,"file":"resolveLocalExecutionTools.cjs","names":["LOCAL_CODING_BUNDLE_NAMES","createLocalCodeExecutionTool","createLocalBashExecutionTool","createLocalProgrammaticToolCallingTool","createLocalBashProgrammaticToolCallingTool","createCloudflareCodingTools","CODE_EXECUTION_TOOLS","createCloudflareExecutionTool","createLocalCodingTools","createLocalCodingToolDefinitions","createCloudflareCodingToolBundle","createLocalCodingToolBundle"],"sources":["../../../../src/tools/local/resolveLocalExecutionTools.ts"],"mappings":";;;;;;;;AAyCA,SAAS,wBAAwB,QAAyC;CACxE,OAAO,QAAQ,WAAW;AAC5B;AAEA,SAAS,oCACP,QACS;CACT,OAAO,QAAQ,WAAW;AAC5B;AAEA,SAAS,yBAAyB,QAAyC;CACzE,OACG,wBAAwB,MAAM,KAC7B,QAAQ,OAAO,uBAAuB,SACvC,oCAAoC,MAAM,KACzC,QAAQ,YAAY,uBAAuB;AAEjD;AAEA,SAAS,oBACP,QACoC;CACpC,IAAI,QAAQ,cAAc,MACxB,MAAM,IAAI,MACR,6EACF;CAEF,OAAO,OAAO;AAChB;AAEA,SAAS,qCACP,QACa;CACb,OAAO,IAAI,IAAI,OAAO,mBAAmBA,aAAAA,yBAAyB;AACpE;AAEA,SAAS,oCACP,OACA,eAC0B;CAC1B,MAAM,gBAAiB,SAAyC,CAAC;CACjE,IAAI,cAAc,WAAW,GAC3B,OAAO;CAET,OAAO,cAAc,QAAQ,iBAAiB;EAC5C,IAAI,EAAE,UAAU,iBAAiB,OAAO,aAAa,SAAS,UAC5D,OAAO;EAET,OACE,CAACA,aAAAA,0BAA0B,SAAS,aAAa,IAAI,KACrD,cAAc,IAAI,aAAa,IAAI;CAEvC,CAAC;AACH;AAEA,SAAS,mCACP,SACA,eACM;CACN,KAAK,MAAM,QAAQA,aAAAA,2BACjB,IAAI,CAAC,cAAc,IAAI,IAAI,GACzB,QAAQ,OAAO,IAAI;AAGzB;AAEA,SAAS,yBACP,MACA,QAC2B;CAC3B,QAAQ,MAAR;EACA,KAAA,gBACE,OAAOC,4BAAAA,6BAA6B,MAAM;EAC5C,KAAA,aACE,OAAOC,4BAAAA,6BAA6B,EAAE,OAAO,CAAC;EAChD,KAAA,uBACE,OAAOC,qCAAAA,uCAAuC,MAAM;EACtD,KAAA,uBACE,OAAOC,qCAAAA,2CAA2C,MAAM;EAC1D,SACE;CACF;AACF;AAEA,SAAS,iBACP,WACA,YACc;CACd,MAAM,eAAgC,CAAC;CACvC,MAAM,8BAAc,IAAI,IAAoB;CAE5C,KAAK,MAAM,QAAS,aAA6C,CAAC,GAAG;EACnE,IAAI,UAAU,QAAQ,OAAO,KAAK,SAAS,UACzC,YAAY,IAAI,KAAK,MAAM,aAAa,MAAM;EAEhD,aAAa,KAAK,IAAI;CACxB;CAEA,KAAK,MAAM,QAAQ,YAAY;EAC7B,MAAM,gBAAgB,YAAY,IAAI,KAAK,IAAI;EAC/C,IAAI,iBAAiB,MAAM;GACzB,YAAY,IAAI,KAAK,MAAM,aAAa,MAAM;GAC9C,aAAa,KAAK,IAAI;GACtB;EACF;EACA,aAAa,iBAAiB;CAChC;CAEA,OAAO;AACT;AAEA,SAAgB,4BAA4B,MAGf;CAC3B,IACE,CAAC,wBAAwB,KAAK,aAAa,KAC3C,CAAC,oCAAoC,KAAK,aAAa,GAEvD,OAAO,KAAK;CAGd,IAAI,oCAAoC,KAAK,aAAa,GAAG;EAC3D,MAAM,mBAAmB,oBAAoB,KAAK,aAAa;EAC/D,IAAI,yBAAyB,KAAK,aAAa,GAAG;GAChD,MAAM,gBACJ,qCAAqC,gBAAgB;GACvD,OAAO,iBACL,oCAAoC,KAAK,OAAO,aAAa,GAC7DC,+BAAAA,4BAA4B,gBAAgB,CAC9C;EACF;EAEA,MAAM,gBAAiB,KAAK,SAAyC,CAAC,EAAA,CACnE,QACE,iBACC,UAAU,gBACV,OAAO,aAAa,SAAS,YAC7BC,aAAAA,qBAAqB,IAAI,aAAa,IAAI,CAC9C,CAAC,CACA,KAAK,iBACJC,+BAAAA,8BAA8B,aAAa,MAAM,gBAAgB,CACnE,CAAC,CACA,QACE,mBACC,kBAAkB,IACtB;EAEF,OAAO,aAAa,WAAW,IAC3B,KAAK,QACL,iBAAiB,KAAK,OAAO,YAAY;CAC/C;CAEA,MAAM,cAAc,KAAK,eAAe,SAAS,CAAC;CAClD,IAAI,yBAAyB,KAAK,aAAa,GAC7C,OAAO,iBAAiB,KAAK,OAAOC,yBAAAA,uBAAuB,WAAW,CAAC;CAGzE,MAAM,gBAAiB,KAAK,SAAyC,CAAC,EAAA,CACnE,QACE,iBACC,UAAU,gBACV,OAAO,aAAa,SAAS,YAC7BF,aAAAA,qBAAqB,IAAI,aAAa,IAAI,CAC9C,CAAC,CACA,KAAK,iBACJ,yBAAyB,aAAa,MAAM,WAAW,CACzD,CAAC,CACA,QAAQ,cAA0C,aAAa,IAAI;CAEtE,OAAO,aAAa,WAAW,IAC3B,KAAK,QACL,iBAAiB,KAAK,OAAO,YAAY;AAC/C;AAEA,SAAgB,yBAAyB,MAGR;CAC/B,IAAI,CAAC,yBAAyB,KAAK,aAAa,GAC9C,OAAO,KAAK;CAGd,MAAM,WAAW,IAAI,IAAI,KAAK,gBAAgB,CAAC,CAAC;CAChD,MAAM,gBAAgB,oCAAoC,KAAK,aAAa,IACxE,qCACA,oBAAoB,KAAK,aAAa,CACxC,IACE,KAAA;CACJ,KAAK,MAAM,cAAcG,yBAAAA,iCAAiC,GAAG;EAC3D,IAAI,iBAAiB,QAAQ,CAAC,cAAc,IAAI,WAAW,IAAI,GAAG;GAChE,SAAS,OAAO,WAAW,IAAI;GAC/B;EACF;EACA,SAAS,IAAI,WAAW,MAAM,UAAU;CAC1C;CACA,OAAO;AACT;AAEA,SAAgB,2BAA2B,MAYf;CAC1B,MAAM,kCAAkB,IAAI,IAAY;CACxC,IACE,CAAC,wBAAwB,KAAK,aAAa,KAC3C,CAAC,oCAAoC,KAAK,aAAa,GAEvD,OAAO;EACL,SAAS,KAAK;EACd;CACF;CAGF,MAAM,UAAU,IAAI,IAAI,KAAK,OAAO;CACpC,IAAI;CAEJ,IAAI,oCAAoC,KAAK,aAAa,GAAG;EAC3D,MAAM,mBAAmB,oBAAoB,KAAK,aAAa;EAC/D,IAAI,yBAAyB,KAAK,aAAa,GAAG;GAGhD,mCAAmC,SADjC,qCAAqC,gBACiB,CAAC;GACzD,IACE,iBAAiB,sBAAsB,QACvC,KAAK,oBAAoB,MACzB;IACA,MAAM,SAASC,+BAAAA,iCAAiC,kBAAkB,EAChE,cAAc,KAAK,iBACrB,CAAC;IACD,mBAAmB,OAAO;IAC1B,KAAK,MAAM,kBAAkB,OAAO,OAAO;KACzC,QAAQ,IAAI,eAAe,MAAM,cAAc;KAC/C,gBAAgB,IAAI,eAAe,IAAI;IACzC;GACF,OACE,KAAK,MAAM,kBAAkBL,+BAAAA,4BAC3B,gBACF,GAAG;IACD,QAAQ,IAAI,eAAe,MAAM,cAAc;IAC/C,gBAAgB,IAAI,eAAe,IAAI;GACzC;EAEJ;EAEA,MAAM,qBAAqB,yBAAyB,KAAK,aAAa;EACtE,KAAK,MAAM,QAAQC,aAAAA,sBAAsB;GACvC,IAAI,oBAAoB;GACxB,IAAI,CAAC,QAAQ,IAAI,IAAI,GAAG;GAExB,MAAM,iBAAiBC,+BAAAA,8BACrB,MACA,gBACF;GACA,IAAI,kBAAkB,MACpB;GAGF,QAAQ,IAAI,MAAM,cAAc;GAChC,gBAAgB,IAAI,IAAI;EAC1B;EAEA,OAAO;GAAE;GAAS;GAAiB;EAAiB;CACtD;CAEA,MAAM,cAAc,KAAK,eAAe,SAAS,CAAC;CAElD,IAAI,yBAAyB,KAAK,aAAa,GAO7C,IACE,YAAY,sBAAsB,QAClC,KAAK,oBAAoB,MACzB;EACA,MAAM,SAASI,yBAAAA,4BAA4B,aAAa,EACtD,cAAc,KAAK,iBACrB,CAAC;EACD,mBAAmB,OAAO;EAC1B,KAAK,MAAM,aAAa,OAAO,OAAO;GACpC,QAAQ,IAAI,UAAU,MAAM,SAAS;GACrC,gBAAgB,IAAI,UAAU,IAAI;EACpC;CACF,OACE,KAAK,MAAM,aAAaH,yBAAAA,uBAAuB,WAAW,GAAG;EAC3D,QAAQ,IAAI,UAAU,MAAM,SAAS;EACrC,gBAAgB,IAAI,UAAU,IAAI;CACpC;CAcJ,MAAM,qBAAqB,yBAAyB,KAAK,aAAa;CACtE,KAAK,MAAM,QAAQF,aAAAA,sBAAsB;EACvC,IAAI,oBAAoB;EACxB,IAAI,CAAC,QAAQ,IAAI,IAAI,GAAG;EAExB,MAAM,YAAY,yBAAyB,MAAM,WAAW;EAC5D,IAAI,aAAa,MACf;EAGF,QAAQ,IAAI,MAAM,SAAS;EAC3B,gBAAgB,IAAI,IAAI;CAC1B;CAEA,OAAO;EAAE;EAAS;EAAiB;CAAiB;AACtD"}

package/dist/cjs/tools/local/syntaxCheck.cjs

@@ -2,23 +2,6 @@ const require_workspaceFS = require("./workspaceFS.cjs");
 const require_LocalExecutionEngine = require("./LocalExecutionEngine.cjs");
 let path = require("path");
 //#region src/tools/local/syntaxCheck.ts
-/**
-* Per-file syntax check used by `edit_file` / `write_file` to surface
-* obvious errors immediately after the write — strictly cheaper than
-* full LSP integration and catches the bulk of "you broke the file"
-* regressions a vision-less agent loop would otherwise miss until
-* the next call.
-*
-* Each checker is a tiny shell-out (or in-process function) keyed on
-* file extension. Failures are returned as a single short message;
-* the wiring layer decides whether to append it to the tool result
-* advisorily (`auto`) or to throw and force the model to react
-* (`strict`).
-*
-* We deliberately do NOT cover TypeScript here because per-file `tsc`
-* is slow and per-file syntax (without type info) misses most TS
-* errors anyway. Use the project-level `compile_check` tool for that.
-*/
 let probeCacheByBackend = /* @__PURE__ */ new WeakMap();
 function envCacheKey(env) {
 	if (env == null) return "";
@@ -54,12 +37,6 @@ async function probe(command, args, cached, config) {
 	}
 	return probePromise;
 }
-/**
-* Test-only reset hook. Clears the per-backend probe cache so tests
-* can swap in mocked spawn backends and reprobe deterministically.
-*
-* @internal Not part of the public SDK surface.
-*/
 function _resetSyntaxCheckProbeCacheForTests() {
 	probeCacheByBackend = /* @__PURE__ */ new WeakMap();
 }
@@ -136,14 +113,6 @@ const CHECKERS_BY_EXT = {
 	".sh": bashCheck,
 	".bash": bashCheck
 };
-/**
-* Run the post-edit syntax check for `absolutePath`. Returns
-* `null` when no checker matches the extension (most files), or a
-* `SyntaxCheckOutcome`.
-*
-* Truncates `output` to `maxOutputChars` (default 4096) so a
-* 10MB-of-errors transpiler dump can't blow the model context.
-*/
 async function runPostEditSyntaxCheck(absolutePath, config) {
 	const checker = CHECKERS_BY_EXT[(0, path.extname)(absolutePath).toLowerCase()];
 	if (checker == null) return null;

package/dist/cjs/tools/local/syntaxCheck.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"syntaxCheck.cjs","names":["getSpawn","spawnLocalProcess","path","getWorkspaceFS","isWorkspaceClientTimeoutError"],"sources":["../../../../src/tools/local/syntaxCheck.ts"],"sourcesContent":["/**\n * Per-file syntax check used by `edit_file` / `write_file` to surface\n * obvious errors immediately after the write — strictly cheaper than\n * full LSP integration and catches the bulk of \"you broke the file\"\n * regressions a vision-less agent loop would otherwise miss until\n * the next call.\n *\n * Each checker is a tiny shell-out (or in-process function) keyed on\n * file extension. Failures are returned as a single short message;\n * the wiring layer decides whether to append it to the tool result\n * advisorily (`auto`) or to throw and force the model to react\n * (`strict`).\n *\n * We deliberately do NOT cover TypeScript here because per-file `tsc`\n * is slow and per-file syntax (without type info) misses most TS\n * errors anyway. Use the project-level `compile_check` tool for that.\n */\n\nimport { extname } from 'path';\nimport type * as t from '@/types';\nimport { isWorkspaceClientTimeoutError } from './workspaceFS';\nimport {\n  getSpawn,\n  getWorkspaceFS,\n  spawnLocalProcess,\n} from './LocalExecutionEngine';\n\nexport type SyntaxCheckOutcome =\n  | { ok: true }\n  | { ok: false; checker: string; output: string };\n\nexport type SyntaxChecker = (\n  path: string,\n  config: t.LocalExecutionConfig\n) => Promise<SyntaxCheckOutcome>;\n\n/**\n * Per-backend availability cache for the post-edit syntax-check probe\n * tools (node, python3, bash). Keyed on the *effective spawn backend*\n * — see `getSpawn(config)` in LocalExecutionEngine — so a Run that\n * probes node over Node's child_process can't poison a subsequent Run\n * whose `local.exec.spawn` routes elsewhere (a remote sandbox might\n * have python but not node, etc.).\n *\n * Mirrors the same fix that landed for the ripgrep cache in\n * `LocalCodingTools.ts` after the first round of Codex review.\n * WeakMap keying lets disposed backends GC their entry; the test\n * reset hook re-creates the map.\n */\ntype ProbeKind = 'hasNode' | 'hasPython' | 'hasBash';\ntype ProbeCache = Partial<Record<ProbeKind, Promise<boolean>>>;\n\n// Per-backend × per-env cache. Codex P2 #40 — keying by spawn\n// backend alone misses env-driven availability changes (e.g. PATH\n// loses node between Runs that share the same backend). Same fix\n// shape as the ripgrep cache (Codex P1 #34).\nlet probeCacheByBackend = new WeakMap<\n  t.LocalSpawn,\n  Map<string, ProbeCache>\n>();\n\nfunction envCacheKey(env: NodeJS.ProcessEnv | undefined): string {\n  if (env == null) return '';\n  const sorted: Record<string, string | undefined> = {};\n  for (const k of Object.keys(env).sort()) {\n    sorted[k] = env[k];\n  }\n  return JSON.stringify(sorted);\n}\n\nfunction cacheFor(\n  config: t.LocalExecutionConfig\n): ProbeCache {\n  const backend = getSpawn(config);\n  let envMap = probeCacheByBackend.get(backend);\n  if (envMap == null) {\n    envMap = new Map();\n    probeCacheByBackend.set(backend, envMap);\n  }\n  const envKey = envCacheKey(config.env);\n  let entry = envMap.get(envKey);\n  if (entry == null) {\n    entry = {};\n    envMap.set(envKey, entry);\n  }\n  return entry;\n}\n\nasync function probe(\n  command: string,\n  args: string[],\n  cached: ProbeKind,\n  config: t.LocalExecutionConfig\n): Promise<boolean> {\n  const entry = cacheFor(config);\n  let probePromise = entry[cached];\n  if (probePromise == null) {\n    probePromise = spawnLocalProcess(\n      command,\n      args,\n      { ...config, timeoutMs: 5000, sandbox: { enabled: false } },\n      { internal: true }\n    )\n      .then((result) => result != null && result.exitCode === 0)\n      .catch(() => false);\n    entry[cached] = probePromise;\n  }\n  return probePromise;\n}\n\n/**\n * Test-only reset hook. Clears the per-backend probe cache so tests\n * can swap in mocked spawn backends and reprobe deterministically.\n *\n * @internal Not part of the public SDK surface.\n */\nexport function _resetSyntaxCheckProbeCacheForTests(): void {\n  probeCacheByBackend = new WeakMap();\n}\n\nconst jsCheck: SyntaxChecker = async (path, config) => {\n  if (!(await probe('node', ['--version'], 'hasNode', config))) {\n    return { ok: true };\n  }\n  const result = await spawnLocalProcess(\n    'node',\n    ['--check', path],\n    { ...config, timeoutMs: 5000, sandbox: { enabled: false } },\n    { internal: true }\n  );\n  if (result.exitCode === 0) return { ok: true };\n  return {\n    ok: false,\n    checker: 'node --check',\n    output: result.stderr.trim() || result.stdout.trim() || 'syntax error',\n  };\n};\n\nconst pythonCheck: SyntaxChecker = async (path, config) => {\n  if (!(await probe('python3', ['--version'], 'hasPython', config))) {\n    return { ok: true };\n  }\n  const program =\n    'import py_compile, sys\\n' +\n    'try:\\n' +\n    '  py_compile.compile(sys.argv[1], doraise=True)\\n' +\n    'except py_compile.PyCompileError as e:\\n' +\n    '  print(e.msg.strip(), file=sys.stderr)\\n' +\n    '  sys.exit(1)\\n';\n  const result = await spawnLocalProcess(\n    'python3',\n    ['-c', program, path],\n    { ...config, timeoutMs: 5000, sandbox: { enabled: false } },\n    { internal: true }\n  );\n  if (result.exitCode === 0) return { ok: true };\n  return {\n    ok: false,\n    checker: 'py_compile',\n    output: result.stderr.trim() || result.stdout.trim() || 'syntax error',\n  };\n};\n\nconst jsonCheck: SyntaxChecker = async (path, config) => {\n  // Route through the configured WorkspaceFS so a Run with a custom\n  // `local.exec.fs` (in-memory or remote engine) validates the same\n  // file the write_file/edit_file path actually wrote — pre-fix this\n  // read went to the host fs and either silently passed (no host\n  // file → catch returns undefined → ok: true) or read a different\n  // file with the same absolute path. Codex P1 #24.\n  const fs = getWorkspaceFS(config);\n  const raw = await fs.readFile(path, 'utf8').catch((error) => {\n    // A stalled read must not pass the syntax gate as ok:true — surface it.\n    if (isWorkspaceClientTimeoutError(error)) {\n      throw error;\n    }\n    return undefined;\n  });\n  if (raw == null) return { ok: true };\n  try {\n    JSON.parse(raw);\n    return { ok: true };\n  } catch (err) {\n    return {\n      ok: false,\n      checker: 'JSON.parse',\n      output: (err as Error).message,\n    };\n  }\n};\n\nconst bashCheck: SyntaxChecker = async (path, config) => {\n  if (!(await probe('bash', ['--version'], 'hasBash', config))) {\n    return { ok: true };\n  }\n  const result = await spawnLocalProcess(\n    'bash',\n    ['-n', path],\n    { ...config, timeoutMs: 5000, sandbox: { enabled: false } },\n    { internal: true }\n  );\n  if (result.exitCode === 0) return { ok: true };\n  return {\n    ok: false,\n    checker: 'bash -n',\n    output: result.stderr.trim() || result.stdout.trim() || 'syntax error',\n  };\n};\n\nconst CHECKERS_BY_EXT: Record<string, SyntaxChecker> = {\n  '.js': jsCheck,\n  '.mjs': jsCheck,\n  '.cjs': jsCheck,\n  '.jsx': jsCheck,\n  '.py': pythonCheck,\n  '.pyw': pythonCheck,\n  '.json': jsonCheck,\n  '.sh': bashCheck,\n  '.bash': bashCheck,\n};\n\n/**\n * Run the post-edit syntax check for `absolutePath`. Returns\n * `null` when no checker matches the extension (most files), or a\n * `SyntaxCheckOutcome`.\n *\n * Truncates `output` to `maxOutputChars` (default 4096) so a\n * 10MB-of-errors transpiler dump can't blow the model context.\n */\nexport async function runPostEditSyntaxCheck(\n  absolutePath: string,\n  config: t.LocalExecutionConfig\n): Promise<SyntaxCheckOutcome | null> {\n  const ext = extname(absolutePath).toLowerCase();\n  const checker = (CHECKERS_BY_EXT as Record<string, SyntaxChecker | undefined>)[ext];\n  if (checker == null) return null;\n  try {\n    const result = await checker(absolutePath, config);\n    if (!result.ok) {\n      return {\n        ok: false,\n        checker: result.checker,\n        output: result.output.slice(0, 4096),\n      };\n    }\n    return result;\n  } catch (error) {\n    // Don't swallow a stalled-RPC timeout as \"no checker outcome\" (which would\n    // let the write through without a real syntax gate) — surface it.\n    if (isWorkspaceClientTimeoutError(error)) {\n      throw error;\n    }\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAwDA,IAAI,sCAAsB,IAAI,QAG5B;AAEF,SAAS,YAAY,KAA4C;CAC/D,IAAI,OAAO,MAAM,OAAO;CACxB,MAAM,SAA6C,CAAC;CACpD,KAAK,MAAM,KAAK,OAAO,KAAK,GAAG,CAAC,CAAC,KAAK,GACpC,OAAO,KAAK,IAAI;CAElB,OAAO,KAAK,UAAU,MAAM;AAC9B;AAEA,SAAS,SACP,QACY;CACZ,MAAM,UAAUA,6BAAAA,SAAS,MAAM;CAC/B,IAAI,SAAS,oBAAoB,IAAI,OAAO;CAC5C,IAAI,UAAU,MAAM;EAClB,yBAAS,IAAI,IAAI;EACjB,oBAAoB,IAAI,SAAS,MAAM;CACzC;CACA,MAAM,SAAS,YAAY,OAAO,GAAG;CACrC,IAAI,QAAQ,OAAO,IAAI,MAAM;CAC7B,IAAI,SAAS,MAAM;EACjB,QAAQ,CAAC;EACT,OAAO,IAAI,QAAQ,KAAK;CAC1B;CACA,OAAO;AACT;AAEA,eAAe,MACb,SACA,MACA,QACA,QACkB;CAClB,MAAM,QAAQ,SAAS,MAAM;CAC7B,IAAI,eAAe,MAAM;CACzB,IAAI,gBAAgB,MAAM;EACxB,eAAeC,6BAAAA,kBACb,SACA,MACA;GAAE,GAAG;GAAQ,WAAW;GAAM,SAAS,EAAE,SAAS,MAAM;EAAE,GAC1D,EAAE,UAAU,KAAK,CACnB,CAAC,CACE,MAAM,WAAW,UAAU,QAAQ,OAAO,aAAa,CAAC,CAAC,CACzD,YAAY,KAAK;EACpB,MAAM,UAAU;CAClB;CACA,OAAO;AACT;;;;;;;AAQA,SAAgB,sCAA4C;CAC1D,sCAAsB,IAAI,QAAQ;AACpC;AAEA,MAAM,UAAyB,OAAO,QAAM,WAAW;CACrD,IAAI,CAAE,MAAM,MAAM,QAAQ,CAAC,WAAW,GAAG,WAAW,MAAM,GACxD,OAAO,EAAE,IAAI,KAAK;CAEpB,MAAM,SAAS,MAAMA,6BAAAA,kBACnB,QACA,CAAC,WAAWC,MAAI,GAChB;EAAE,GAAG;EAAQ,WAAW;EAAM,SAAS,EAAE,SAAS,MAAM;CAAE,GAC1D,EAAE,UAAU,KAAK,CACnB;CACA,IAAI,OAAO,aAAa,GAAG,OAAO,EAAE,IAAI,KAAK;CAC7C,OAAO;EACL,IAAI;EACJ,SAAS;EACT,QAAQ,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,KAAK;CAC1D;AACF;AAEA,MAAM,cAA6B,OAAO,QAAM,WAAW;CACzD,IAAI,CAAE,MAAM,MAAM,WAAW,CAAC,WAAW,GAAG,aAAa,MAAM,GAC7D,OAAO,EAAE,IAAI,KAAK;CASpB,MAAM,SAAS,MAAMD,6BAAAA,kBACnB,WACA;EAAC;EAAM;EAASC;CAAI,GACpB;EAAE,GAAG;EAAQ,WAAW;EAAM,SAAS,EAAE,SAAS,MAAM;CAAE,GAC1D,EAAE,UAAU,KAAK,CACnB;CACA,IAAI,OAAO,aAAa,GAAG,OAAO,EAAE,IAAI,KAAK;CAC7C,OAAO;EACL,IAAI;EACJ,SAAS;EACT,QAAQ,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,KAAK;CAC1D;AACF;AAEA,MAAM,YAA2B,OAAO,QAAM,WAAW;CAQvD,MAAM,MAAM,MADDC,6BAAAA,eAAe,MACP,CAAC,CAAC,SAASD,QAAM,MAAM,CAAC,CAAC,OAAO,UAAU;EAE3D,IAAIE,oBAAAA,8BAA8B,KAAK,GACrC,MAAM;CAGV,CAAC;CACD,IAAI,OAAO,MAAM,OAAO,EAAE,IAAI,KAAK;CACnC,IAAI;EACF,KAAK,MAAM,GAAG;EACd,OAAO,EAAE,IAAI,KAAK;CACpB,SAAS,KAAK;EACZ,OAAO;GACL,IAAI;GACJ,SAAS;GACT,QAAS,IAAc;EACzB;CACF;AACF;AAEA,MAAM,YAA2B,OAAO,QAAM,WAAW;CACvD,IAAI,CAAE,MAAM,MAAM,QAAQ,CAAC,WAAW,GAAG,WAAW,MAAM,GACxD,OAAO,EAAE,IAAI,KAAK;CAEpB,MAAM,SAAS,MAAMH,6BAAAA,kBACnB,QACA,CAAC,MAAMC,MAAI,GACX;EAAE,GAAG;EAAQ,WAAW;EAAM,SAAS,EAAE,SAAS,MAAM;CAAE,GAC1D,EAAE,UAAU,KAAK,CACnB;CACA,IAAI,OAAO,aAAa,GAAG,OAAO,EAAE,IAAI,KAAK;CAC7C,OAAO;EACL,IAAI;EACJ,SAAS;EACT,QAAQ,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,KAAK;CAC1D;AACF;AAEA,MAAM,kBAAiD;CACrD,OAAO;CACP,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,OAAO;CACP,QAAQ;CACR,SAAS;CACT,OAAO;CACP,SAAS;AACX;;;;;;;;;AAUA,eAAsB,uBACpB,cACA,QACoC;CAEpC,MAAM,UAAW,iBAAA,GAAA,KAAA,QAAA,CADG,YAAY,CAAC,CAAC,YAC+C;CACjF,IAAI,WAAW,MAAM,OAAO;CAC5B,IAAI;EACF,MAAM,SAAS,MAAM,QAAQ,cAAc,MAAM;EACjD,IAAI,CAAC,OAAO,IACV,OAAO;GACL,IAAI;GACJ,SAAS,OAAO;GAChB,QAAQ,OAAO,OAAO,MAAM,GAAG,IAAI;EACrC;EAEF,OAAO;CACT,SAAS,OAAO;EAGd,IAAIE,oBAAAA,8BAA8B,KAAK,GACrC,MAAM;EAER,OAAO;CACT;AACF"}
+{"version":3,"file":"syntaxCheck.cjs","names":["getSpawn","spawnLocalProcess","path","getWorkspaceFS","isWorkspaceClientTimeoutError"],"sources":["../../../../src/tools/local/syntaxCheck.ts"],"mappings":";;;;AAwDA,IAAI,sCAAsB,IAAI,QAG5B;AAEF,SAAS,YAAY,KAA4C;CAC/D,IAAI,OAAO,MAAM,OAAO;CACxB,MAAM,SAA6C,CAAC;CACpD,KAAK,MAAM,KAAK,OAAO,KAAK,GAAG,CAAC,CAAC,KAAK,GACpC,OAAO,KAAK,IAAI;CAElB,OAAO,KAAK,UAAU,MAAM;AAC9B;AAEA,SAAS,SACP,QACY;CACZ,MAAM,UAAUA,6BAAAA,SAAS,MAAM;CAC/B,IAAI,SAAS,oBAAoB,IAAI,OAAO;CAC5C,IAAI,UAAU,MAAM;EAClB,yBAAS,IAAI,IAAI;EACjB,oBAAoB,IAAI,SAAS,MAAM;CACzC;CACA,MAAM,SAAS,YAAY,OAAO,GAAG;CACrC,IAAI,QAAQ,OAAO,IAAI,MAAM;CAC7B,IAAI,SAAS,MAAM;EACjB,QAAQ,CAAC;EACT,OAAO,IAAI,QAAQ,KAAK;CAC1B;CACA,OAAO;AACT;AAEA,eAAe,MACb,SACA,MACA,QACA,QACkB;CAClB,MAAM,QAAQ,SAAS,MAAM;CAC7B,IAAI,eAAe,MAAM;CACzB,IAAI,gBAAgB,MAAM;EACxB,eAAeC,6BAAAA,kBACb,SACA,MACA;GAAE,GAAG;GAAQ,WAAW;GAAM,SAAS,EAAE,SAAS,MAAM;EAAE,GAC1D,EAAE,UAAU,KAAK,CACnB,CAAC,CACE,MAAM,WAAW,UAAU,QAAQ,OAAO,aAAa,CAAC,CAAC,CACzD,YAAY,KAAK;EACpB,MAAM,UAAU;CAClB;CACA,OAAO;AACT;AAQA,SAAgB,sCAA4C;CAC1D,sCAAsB,IAAI,QAAQ;AACpC;AAEA,MAAM,UAAyB,OAAO,QAAM,WAAW;CACrD,IAAI,CAAE,MAAM,MAAM,QAAQ,CAAC,WAAW,GAAG,WAAW,MAAM,GACxD,OAAO,EAAE,IAAI,KAAK;CAEpB,MAAM,SAAS,MAAMA,6BAAAA,kBACnB,QACA,CAAC,WAAWC,MAAI,GAChB;EAAE,GAAG;EAAQ,WAAW;EAAM,SAAS,EAAE,SAAS,MAAM;CAAE,GAC1D,EAAE,UAAU,KAAK,CACnB;CACA,IAAI,OAAO,aAAa,GAAG,OAAO,EAAE,IAAI,KAAK;CAC7C,OAAO;EACL,IAAI;EACJ,SAAS;EACT,QAAQ,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,KAAK;CAC1D;AACF;AAEA,MAAM,cAA6B,OAAO,QAAM,WAAW;CACzD,IAAI,CAAE,MAAM,MAAM,WAAW,CAAC,WAAW,GAAG,aAAa,MAAM,GAC7D,OAAO,EAAE,IAAI,KAAK;CASpB,MAAM,SAAS,MAAMD,6BAAAA,kBACnB,WACA;EAAC;EAAM;EAASC;CAAI,GACpB;EAAE,GAAG;EAAQ,WAAW;EAAM,SAAS,EAAE,SAAS,MAAM;CAAE,GAC1D,EAAE,UAAU,KAAK,CACnB;CACA,IAAI,OAAO,aAAa,GAAG,OAAO,EAAE,IAAI,KAAK;CAC7C,OAAO;EACL,IAAI;EACJ,SAAS;EACT,QAAQ,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,KAAK;CAC1D;AACF;AAEA,MAAM,YAA2B,OAAO,QAAM,WAAW;CAQvD,MAAM,MAAM,MADDC,6BAAAA,eAAe,MACP,CAAC,CAAC,SAASD,QAAM,MAAM,CAAC,CAAC,OAAO,UAAU;EAE3D,IAAIE,oBAAAA,8BAA8B,KAAK,GACrC,MAAM;CAGV,CAAC;CACD,IAAI,OAAO,MAAM,OAAO,EAAE,IAAI,KAAK;CACnC,IAAI;EACF,KAAK,MAAM,GAAG;EACd,OAAO,EAAE,IAAI,KAAK;CACpB,SAAS,KAAK;EACZ,OAAO;GACL,IAAI;GACJ,SAAS;GACT,QAAS,IAAc;EACzB;CACF;AACF;AAEA,MAAM,YAA2B,OAAO,QAAM,WAAW;CACvD,IAAI,CAAE,MAAM,MAAM,QAAQ,CAAC,WAAW,GAAG,WAAW,MAAM,GACxD,OAAO,EAAE,IAAI,KAAK;CAEpB,MAAM,SAAS,MAAMH,6BAAAA,kBACnB,QACA,CAAC,MAAMC,MAAI,GACX;EAAE,GAAG;EAAQ,WAAW;EAAM,SAAS,EAAE,SAAS,MAAM;CAAE,GAC1D,EAAE,UAAU,KAAK,CACnB;CACA,IAAI,OAAO,aAAa,GAAG,OAAO,EAAE,IAAI,KAAK;CAC7C,OAAO;EACL,IAAI;EACJ,SAAS;EACT,QAAQ,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,KAAK;CAC1D;AACF;AAEA,MAAM,kBAAiD;CACrD,OAAO;CACP,QAAQ;CACR,QAAQ;CACR,QAAQ;CACR,OAAO;CACP,QAAQ;CACR,SAAS;CACT,OAAO;CACP,SAAS;AACX;AAUA,eAAsB,uBACpB,cACA,QACoC;CAEpC,MAAM,UAAW,iBAAA,GAAA,KAAA,QAAA,CADG,YAAY,CAAC,CAAC,YAC+C;CACjF,IAAI,WAAW,MAAM,OAAO;CAC5B,IAAI;EACF,MAAM,SAAS,MAAM,QAAQ,cAAc,MAAM;EACjD,IAAI,CAAC,OAAO,IACV,OAAO;GACL,IAAI;GACJ,SAAS,OAAO;GAChB,QAAQ,OAAO,OAAO,MAAM,GAAG,IAAI;EACrC;EAEF,OAAO;CACT,SAAS,OAAO;EAGd,IAAIE,oBAAAA,8BAA8B,KAAK,GACrC,MAAM;EAER,OAAO;CACT;AACF"}

package/dist/cjs/tools/local/textEncoding.cjs

@@ -1,15 +1,4 @@
 //#region src/tools/local/textEncoding.ts
-/**
-* BOM and line-ending preservation helpers for the local engine's
-* file-mutating tools. We never *introduce* a BOM or change line
-* endings — only preserve what was already on disk so a Windows-
-* checked-in source file stays CRLF and a UTF-8-with-BOM JSON file
-* keeps its BOM after an edit.
-*
-* Inspired by opencode's `Bom` helper. Trimmed to the cases that
-* actually matter for editing source code (UTF-8 BOM only;
-* UTF-16/UTF-32 are out of scope).
-*/
 const UTF8_BOM = "";
 function decodeFile(raw) {
 	const hasBom = raw.startsWith(UTF8_BOM);

package/dist/cjs/tools/local/textEncoding.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"textEncoding.cjs","names":[],"sources":["../../../../src/tools/local/textEncoding.ts"],"sourcesContent":["/**\n * BOM and line-ending preservation helpers for the local engine's\n * file-mutating tools. We never *introduce* a BOM or change line\n * endings — only preserve what was already on disk so a Windows-\n * checked-in source file stays CRLF and a UTF-8-with-BOM JSON file\n * keeps its BOM after an edit.\n *\n * Inspired by opencode's `Bom` helper. Trimmed to the cases that\n * actually matter for editing source code (UTF-8 BOM only;\n * UTF-16/UTF-32 are out of scope).\n */\n\nconst UTF8_BOM = '';\n\nexport interface EncodedFile {\n  /** File contents with BOM stripped. */\n  text: string;\n  /** Whether the on-disk file started with a UTF-8 BOM. */\n  hasBom: boolean;\n  /** Detected newline style. CRLF wins if any CRLF is present. */\n  newline: '\\n' | '\\r\\n';\n}\n\nexport function decodeFile(raw: string): EncodedFile {\n  const hasBom = raw.startsWith(UTF8_BOM);\n  const stripped = hasBom ? raw.slice(1) : raw;\n  const newline = stripped.includes('\\r\\n') ? '\\r\\n' : '\\n';\n  // Internally we always work in LF; encode() restores CRLF on write.\n  const lf = newline === '\\r\\n' ? stripped.replace(/\\r\\n/g, '\\n') : stripped;\n  return { text: lf, hasBom, newline };\n}\n\nexport function encodeFile(text: string, encoding: EncodedFile): string {\n  const out =\n    encoding.newline === '\\r\\n' ? text.replace(/\\n/g, '\\r\\n') : text;\n  return encoding.hasBom ? `${UTF8_BOM}${out}` : out;\n}\n"],"mappings":";;;;;;;;;;;;AAYA,MAAM,WAAW;AAWjB,SAAgB,WAAW,KAA0B;CACnD,MAAM,SAAS,IAAI,WAAW,QAAQ;CACtC,MAAM,WAAW,SAAS,IAAI,MAAM,CAAC,IAAI;CACzC,MAAM,UAAU,SAAS,SAAS,MAAM,IAAI,SAAS;CAGrD,OAAO;EAAE,MADE,YAAY,SAAS,SAAS,QAAQ,SAAS,IAAI,IAAI;EAC/C;EAAQ;CAAQ;AACrC;AAEA,SAAgB,WAAW,MAAc,UAA+B;CACtE,MAAM,MACJ,SAAS,YAAY,SAAS,KAAK,QAAQ,OAAO,MAAM,IAAI;CAC9D,OAAO,SAAS,SAAS,GAAG,WAAW,QAAQ;AACjD"}
+{"version":3,"file":"textEncoding.cjs","names":[],"sources":["../../../../src/tools/local/textEncoding.ts"],"mappings":";AAYA,MAAM,WAAW;AAWjB,SAAgB,WAAW,KAA0B;CACnD,MAAM,SAAS,IAAI,WAAW,QAAQ;CACtC,MAAM,WAAW,SAAS,IAAI,MAAM,CAAC,IAAI;CACzC,MAAM,UAAU,SAAS,SAAS,MAAM,IAAI,SAAS;CAGrD,OAAO;EAAE,MADE,YAAY,SAAS,SAAS,QAAQ,SAAS,IAAI,IAAI;EAC/C;EAAQ;CAAQ;AACrC;AAEA,SAAgB,WAAW,MAAc,UAA+B;CACtE,MAAM,MACJ,SAAS,YAAY,SAAS,KAAK,QAAQ,OAAO,MAAM,IAAI;CAC9D,OAAO,SAAS,SAAS,GAAG,WAAW,QAAQ;AACjD"}

package/dist/cjs/tools/local/workspaceFS.cjs

@@ -1,33 +1,5 @@
 let fs_promises = require("fs/promises");
 //#region src/tools/local/workspaceFS.ts
-/**
-* Engine-agnostic filesystem seam for the local-coding tool suite.
-*
-* The current "local" engine maps every operation to Node's
-* `fs/promises` against the host machine. A future engine — e.g. a
-* stateful remote sandbox (e2b / Modal / Daytona / ssh-jail) —
-* supplies its own `WorkspaceFS` implementation and reuses every
-* tool factory unchanged. Same fuzzy-match `edit_file`, same
-* checkpointer, same syntax-check, same image attachments — only
-* the underlying I/O changes.
-*
-* Path semantics belong to the implementation. The local engine
-* interprets paths as host filesystem paths; a remote engine would
-* interpret them as remote-namespace paths. Tool factories don't
-* inspect the strings beyond passing them through.
-*
-* Keep this surface minimal. Add a method only when an existing
-* tool genuinely needs it; resist the temptation to mirror all of
-* `fs/promises`.
-*/
-/**
-* Thrown when a {@link WorkspaceFS} operation is abandoned by a client-side
-* backstop timeout (a stalled remote/sandbox RPC that never returned). This is
-* DISTINCT from "file not found": callers that catch generic FS failures as
-* absence — e.g. a pre-read before an overwrite, or a `stat` before snapshotting
-* — MUST rethrow this so a stalled read isn't mistaken for a missing file (which
-* would otherwise overwrite an existing file or snapshot it as absent).
-*/
 var WorkspaceClientTimeoutError = class extends Error {
 	code = "WORKSPACE_CLIENT_TIMEOUT";
 	constructor(message) {
@@ -38,11 +10,6 @@ var WorkspaceClientTimeoutError = class extends Error {
 function isWorkspaceClientTimeoutError(error) {
 	return error instanceof WorkspaceClientTimeoutError || typeof error === "object" && error !== null && error.code === "WORKSPACE_CLIENT_TIMEOUT";
 }
-/**
-* Default `WorkspaceFS` backed by Node's `fs/promises` module.
-* Returned by `getWorkspaceFS(config)` when the host hasn't supplied
-* an override on `local.exec.fs`.
-*/
 const nodeWorkspaceFS = {
 	readFile: ((path, encoding) => encoding != null ? (0, fs_promises.readFile)(path, encoding) : (0, fs_promises.readFile)(path)),
 	writeFile: (path, content, options) => (0, fs_promises.writeFile)(path, content, options ?? "utf8"),

package/dist/cjs/tools/local/workspaceFS.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"workspaceFS.cjs","names":[],"sources":["../../../../src/tools/local/workspaceFS.ts"],"sourcesContent":["/**\n * Engine-agnostic filesystem seam for the local-coding tool suite.\n *\n * The current \"local\" engine maps every operation to Node's\n * `fs/promises` against the host machine. A future engine — e.g. a\n * stateful remote sandbox (e2b / Modal / Daytona / ssh-jail) —\n * supplies its own `WorkspaceFS` implementation and reuses every\n * tool factory unchanged. Same fuzzy-match `edit_file`, same\n * checkpointer, same syntax-check, same image attachments — only\n * the underlying I/O changes.\n *\n * Path semantics belong to the implementation. The local engine\n * interprets paths as host filesystem paths; a remote engine would\n * interpret them as remote-namespace paths. Tool factories don't\n * inspect the strings beyond passing them through.\n *\n * Keep this surface minimal. Add a method only when an existing\n * tool genuinely needs it; resist the temptation to mirror all of\n * `fs/promises`.\n */\n\nimport {\n  mkdir as fsMkdir,\n  open as fsOpen,\n  readdir as fsReaddir,\n  readFile as fsReadFile,\n  realpath as fsRealpath,\n  stat as fsStat,\n  unlink as fsUnlink,\n  writeFile as fsWriteFile,\n} from 'fs/promises';\nimport type { MakeDirectoryOptions, Stats, WriteFileOptions } from 'fs';\nimport type { FileHandle } from 'fs/promises';\n\nexport type ReaddirEntry = {\n  name: string;\n  isFile(): boolean;\n  isDirectory(): boolean;\n  isSymbolicLink(): boolean;\n};\n\n/**\n * Thrown when a {@link WorkspaceFS} operation is abandoned by a client-side\n * backstop timeout (a stalled remote/sandbox RPC that never returned). This is\n * DISTINCT from \"file not found\": callers that catch generic FS failures as\n * absence — e.g. a pre-read before an overwrite, or a `stat` before snapshotting\n * — MUST rethrow this so a stalled read isn't mistaken for a missing file (which\n * would otherwise overwrite an existing file or snapshot it as absent).\n */\nexport class WorkspaceClientTimeoutError extends Error {\n  readonly code = 'WORKSPACE_CLIENT_TIMEOUT';\n  constructor(message: string) {\n    super(message);\n    this.name = 'WorkspaceClientTimeoutError';\n  }\n}\n\nexport function isWorkspaceClientTimeoutError(\n  error: unknown\n): error is WorkspaceClientTimeoutError {\n  return (\n    error instanceof WorkspaceClientTimeoutError ||\n    (typeof error === 'object' &&\n      error !== null &&\n      (error as { code?: unknown }).code === 'WORKSPACE_CLIENT_TIMEOUT')\n  );\n}\n\nexport interface WorkspaceFS {\n  readFile(path: string, encoding: 'utf8'): Promise<string>;\n  readFile(path: string): Promise<Buffer>;\n  writeFile(\n    path: string,\n    content: string | Buffer,\n    options?: WriteFileOptions\n  ): Promise<void>;\n  stat(path: string): Promise<Stats>;\n  readdir(\n    path: string,\n    options: { withFileTypes: true }\n  ): Promise<ReaddirEntry[]>;\n  readdir(path: string): Promise<string[]>;\n  mkdir(path: string, options?: MakeDirectoryOptions): Promise<void>;\n  realpath(path: string): Promise<string>;\n  unlink(path: string): Promise<void>;\n  /** Open a file for low-level read access (used by binary detection). */\n  open(path: string, flags: 'r'): Promise<FileHandle>;\n}\n\n/**\n * Default `WorkspaceFS` backed by Node's `fs/promises` module.\n * Returned by `getWorkspaceFS(config)` when the host hasn't supplied\n * an override on `local.exec.fs`.\n */\nexport const nodeWorkspaceFS: WorkspaceFS = {\n  // The runtime impl ignores the encoding-vs-buffer distinction; the\n  // overload signatures above are what callers see.\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  readFile: ((path: string, encoding?: 'utf8') =>\n    encoding != null\n      ? fsReadFile(path, encoding)\n      : fsReadFile(path)) as WorkspaceFS['readFile'],\n  writeFile: (path, content, options) =>\n    fsWriteFile(path, content, options ?? 'utf8'),\n  stat: (path) => fsStat(path),\n  readdir: ((path: string, options?: { withFileTypes: true }) =>\n    options?.withFileTypes === true\n      ? fsReaddir(path, { withFileTypes: true })\n      : fsReaddir(path)) as WorkspaceFS['readdir'],\n  mkdir: async (path, options) => {\n    await fsMkdir(path, options);\n  },\n  realpath: (path) => fsRealpath(path),\n  unlink: (path) => fsUnlink(path),\n  open: (path, flags) => fsOpen(path, flags),\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,IAAa,8BAAb,cAAiD,MAAM;CACrD,OAAgB;CAChB,YAAY,SAAiB;EAC3B,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF;AAEA,SAAgB,8BACd,OACsC;CACtC,OACE,iBAAiB,+BAChB,OAAO,UAAU,YAChB,UAAU,QACT,MAA6B,SAAS;AAE7C;;;;;;AA4BA,MAAa,kBAA+B;CAI1C,YAAY,MAAc,aACxB,YAAY,QAAA,GAAA,YAAA,SAAA,CACG,MAAM,QAAQ,KAAA,GAAA,YAAA,SAAA,CACd,IAAI;CACrB,YAAY,MAAM,SAAS,aAAA,GAAA,YAAA,UAAA,CACb,MAAM,SAAS,WAAW,MAAM;CAC9C,OAAO,UAAA,GAAA,YAAA,KAAA,CAAgB,IAAI;CAC3B,WAAW,MAAc,YACvB,SAAS,kBAAkB,QAAA,GAAA,YAAA,QAAA,CACb,MAAM,EAAE,eAAe,KAAK,CAAC,KAAA,GAAA,YAAA,QAAA,CAC7B,IAAI;CACpB,OAAO,OAAO,MAAM,YAAY;EAC9B,OAAA,GAAA,YAAA,MAAA,CAAc,MAAM,OAAO;CAC7B;CACA,WAAW,UAAA,GAAA,YAAA,SAAA,CAAoB,IAAI;CACnC,SAAS,UAAA,GAAA,YAAA,OAAA,CAAkB,IAAI;CAC/B,OAAO,MAAM,WAAA,GAAA,YAAA,KAAA,CAAiB,MAAM,KAAK;AAC3C"}
+{"version":3,"file":"workspaceFS.cjs","names":[],"sources":["../../../../src/tools/local/workspaceFS.ts"],"mappings":";;AAiDA,IAAa,8BAAb,cAAiD,MAAM;CACrD,OAAgB;CAChB,YAAY,SAAiB;EAC3B,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF;AAEA,SAAgB,8BACd,OACsC;CACtC,OACE,iBAAiB,+BAChB,OAAO,UAAU,YAChB,UAAU,QACT,MAA6B,SAAS;AAE7C;AA4BA,MAAa,kBAA+B;CAI1C,YAAY,MAAc,aACxB,YAAY,QAAA,GAAA,YAAA,SAAA,CACG,MAAM,QAAQ,KAAA,GAAA,YAAA,SAAA,CACd,IAAI;CACrB,YAAY,MAAM,SAAS,aAAA,GAAA,YAAA,UAAA,CACb,MAAM,SAAS,WAAW,MAAM;CAC9C,OAAO,UAAA,GAAA,YAAA,KAAA,CAAgB,IAAI;CAC3B,WAAW,MAAc,YACvB,SAAS,kBAAkB,QAAA,GAAA,YAAA,QAAA,CACb,MAAM,EAAE,eAAe,KAAK,CAAC,KAAA,GAAA,YAAA,QAAA,CAC7B,IAAI;CACpB,OAAO,OAAO,MAAM,YAAY;EAC9B,OAAA,GAAA,YAAA,MAAA,CAAc,MAAM,OAAO;CAC7B;CACA,WAAW,UAAA,GAAA,YAAA,SAAA,CAAoB,IAAI;CACnC,SAAS,UAAA,GAAA,YAAA,OAAA,CAAkB,IAAI;CAC/B,OAAO,MAAM,WAAA,GAAA,YAAA,KAAA,CAAiB,MAAM,KAAK;AAC3C"}

package/dist/cjs/tools/ptcTimeout.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ptcTimeout.cjs","names":[],"sources":["../../../src/tools/ptcTimeout.ts"],"sourcesContent":["import type { JsonSchemaType } from '@/types';\nimport { EnvVar } from '@/common';\n\nexport const DEFAULT_CODE_API_RUN_TIMEOUT_MS = 15_000;\nexport const MIN_CODE_API_RUN_TIMEOUT_MS = 1_000;\nexport const MAX_CODE_API_RUN_TIMEOUT_SCHEMA_MS = 300_000;\n\ntype TimeoutSchema = {\n  type: 'integer';\n  minimum: number;\n  maximum: number;\n  default: number;\n  description: string;\n};\n\nexport type ProgrammaticToolCallingJsonSchema = {\n  type: 'object';\n  properties: {\n    intent: JsonSchemaType;\n    code: {\n      type: 'string';\n      minLength: number;\n      description: string;\n    };\n    timeout: TimeoutSchema;\n  };\n  required: readonly ['code'];\n};\n\nfunction normalizeTimeoutMs(value: number | undefined): number | undefined {\n  if (value == null || !Number.isFinite(value)) {\n    return undefined;\n  }\n\n  return Math.max(MIN_CODE_API_RUN_TIMEOUT_MS, Math.floor(value));\n}\n\nfunction parseTimeoutMs(value: string | undefined): number | undefined {\n  if (value == null || value.trim() === '') {\n    return undefined;\n  }\n\n  return normalizeTimeoutMs(Number(value));\n}\n\nfunction formatTimeout(timeoutMs: number): string {\n  return timeoutMs % 1000 === 0\n    ? `${timeoutMs / 1000} seconds`\n    : `${timeoutMs} milliseconds`;\n}\n\nexport function resolveCodeApiRunTimeoutMs(override?: number): number {\n  return (\n    normalizeTimeoutMs(override) ??\n    parseTimeoutMs(process.env[EnvVar.CODE_API_RUN_TIMEOUT_MS]) ??\n    DEFAULT_CODE_API_RUN_TIMEOUT_MS\n  );\n}\n\nexport function clampCodeApiRunTimeoutMs(\n  timeoutMs: number | undefined,\n  maxRunTimeoutMs = resolveCodeApiRunTimeoutMs()\n): number {\n  const normalizedMaxRunTimeoutMs =\n    normalizeTimeoutMs(maxRunTimeoutMs) ?? DEFAULT_CODE_API_RUN_TIMEOUT_MS;\n  const normalizedTimeoutMs = normalizeTimeoutMs(timeoutMs);\n\n  if (normalizedTimeoutMs == null) {\n    return normalizedMaxRunTimeoutMs;\n  }\n\n  return Math.min(normalizedTimeoutMs, normalizedMaxRunTimeoutMs);\n}\n\nexport function createCodeApiRunTimeoutSchema(\n  maxRunTimeoutMs = resolveCodeApiRunTimeoutMs()\n): TimeoutSchema {\n  const normalizedMaxRunTimeoutMs =\n    normalizeTimeoutMs(maxRunTimeoutMs) ?? DEFAULT_CODE_API_RUN_TIMEOUT_MS;\n  const normalizedSchemaMaxRunTimeoutMs = Math.max(\n    normalizedMaxRunTimeoutMs,\n    MAX_CODE_API_RUN_TIMEOUT_SCHEMA_MS\n  );\n  const formattedTimeout = formatTimeout(normalizedMaxRunTimeoutMs);\n  const formattedSchemaMaxTimeout = formatTimeout(\n    normalizedSchemaMaxRunTimeoutMs\n  );\n\n  return {\n    type: 'integer',\n    minimum: MIN_CODE_API_RUN_TIMEOUT_MS,\n    maximum: normalizedSchemaMaxRunTimeoutMs,\n    default: normalizedMaxRunTimeoutMs,\n    description:\n      'Maximum wall-clock time in milliseconds for one sandbox run or replay iteration. ' +\n      'This is not the total multi-round-trip task budget. ' +\n      `Default: ${formattedTimeout}. ` +\n      'Accepted values above the configured cap are clamped before execution. ' +\n      `Schema max: ${formattedSchemaMaxTimeout}. Configured cap: ${formattedTimeout}.`,\n  };\n}\n"],"mappings":";;AAIA,MAAa,8BAA8B;AAC3C,MAAa,qCAAqC;AAwBlD,SAAS,mBAAmB,OAA+C;CACzE,IAAI,SAAS,QAAQ,CAAC,OAAO,SAAS,KAAK,GACzC;CAGF,OAAO,KAAK,IAAI,6BAA6B,KAAK,MAAM,KAAK,CAAC;AAChE;AAEA,SAAS,eAAe,OAA+C;CACrE,IAAI,SAAS,QAAQ,MAAM,KAAK,MAAM,IACpC;CAGF,OAAO,mBAAmB,OAAO,KAAK,CAAC;AACzC;AAEA,SAAS,cAAc,WAA2B;CAChD,OAAO,YAAY,QAAS,IACxB,GAAG,YAAY,IAAK,YACpB,GAAG,UAAU;AACnB;AAEA,SAAgB,2BAA2B,UAA2B;CACpE,OACE,mBAAmB,QAAQ,KAC3B,eAAe,QAAQ,IAAA,0BAAmC,KAAA;AAG9D;AAEA,SAAgB,yBACd,WACA,kBAAkB,2BAA2B,GACrC;CACR,MAAM,4BACJ,mBAAmB,eAAe,KAAA;CACpC,MAAM,sBAAsB,mBAAmB,SAAS;CAExD,IAAI,uBAAuB,MACzB,OAAO;CAGT,OAAO,KAAK,IAAI,qBAAqB,yBAAyB;AAChE;AAEA,SAAgB,8BACd,kBAAkB,2BAA2B,GAC9B;CACf,MAAM,4BACJ,mBAAmB,eAAe,KAAA;CACpC,MAAM,kCAAkC,KAAK,IAC3C,2BACA,kCACF;CACA,MAAM,mBAAmB,cAAc,yBAAyB;CAKhE,OAAO;EACL,MAAM;EACN,SAAS;EACT,SAAS;EACT,SAAS;EACT,aACE,iJAEY,iBAAiB,uFAZC,cAChC,+BAayC,EAAE,oBAAoB,iBAAiB;CAClF;AACF"}
+{"version":3,"file":"ptcTimeout.cjs","names":[],"sources":["../../../src/tools/ptcTimeout.ts"],"mappings":";;AAIA,MAAa,8BAA8B;AAC3C,MAAa,qCAAqC;AAwBlD,SAAS,mBAAmB,OAA+C;CACzE,IAAI,SAAS,QAAQ,CAAC,OAAO,SAAS,KAAK,GACzC;CAGF,OAAO,KAAK,IAAI,6BAA6B,KAAK,MAAM,KAAK,CAAC;AAChE;AAEA,SAAS,eAAe,OAA+C;CACrE,IAAI,SAAS,QAAQ,MAAM,KAAK,MAAM,IACpC;CAGF,OAAO,mBAAmB,OAAO,KAAK,CAAC;AACzC;AAEA,SAAS,cAAc,WAA2B;CAChD,OAAO,YAAY,QAAS,IACxB,GAAG,YAAY,IAAK,YACpB,GAAG,UAAU;AACnB;AAEA,SAAgB,2BAA2B,UAA2B;CACpE,OACE,mBAAmB,QAAQ,KAC3B,eAAe,QAAQ,IAAA,0BAAmC,KAAA;AAG9D;AAEA,SAAgB,yBACd,WACA,kBAAkB,2BAA2B,GACrC;CACR,MAAM,4BACJ,mBAAmB,eAAe,KAAA;CACpC,MAAM,sBAAsB,mBAAmB,SAAS;CAExD,IAAI,uBAAuB,MACzB,OAAO;CAGT,OAAO,KAAK,IAAI,qBAAqB,yBAAyB;AAChE;AAEA,SAAgB,8BACd,kBAAkB,2BAA2B,GAC9B;CACf,MAAM,4BACJ,mBAAmB,eAAe,KAAA;CACpC,MAAM,kCAAkC,KAAK,IAC3C,2BACA,kCACF;CACA,MAAM,mBAAmB,cAAc,yBAAyB;CAKhE,OAAO;EACL,MAAM;EACN,SAAS;EACT,SAAS;EACT,SAAS;EACT,aACE,iJAEY,iBAAiB,uFAZC,cAChC,+BAayC,EAAE,oBAAoB,iBAAiB;CAClF;AACF"}