@lunora/agent 1.0.0-alpha.1 → 1.0.0-alpha.100

package/dist/packem_shared/voice-turn-BRj_it54.mjs

@@ -0,0 +1 @@
+import{f as P,a as q}from"./base64-5eyBfWO3.mjs";import{c as z}from"./agent-loop-CE_Q6bk9.mjs";import{buildModelMessages as G}from"./buildModelMessages-Y4tGo1T9.mjs";import{toFunctionReference as T}from"./AGENT_MODULE-M4D1EejI.mjs";const D=new TextDecoder;new TextEncoder;const N="=",Q=t=>{if(t)try{const e=t[0]==="{"?t:D.decode(P(t)),n=JSON.parse(e);if(n&&typeof n=="object"&&!Array.isArray(n))return n}catch{}},ct=t=>{if(t){if(!t.startsWith(N))return t;try{return D.decode(P(t.slice(N.length)))}catch{return}}},dt=t=>{const e=Number(t);return Number.isFinite(e)&&e>0?e:void 0},ut=t=>typeof t=="number"&&Date.now()>=t,ft=t=>{try{t.send(JSON.stringify({code:"TOKEN_EXPIRED",error:{code:"TOKEN_EXPIRED",message:"authentication token expired"},message:"authentication token expired",type:"error"})),t.close?.(4001,"token_expired")}catch{}},Y=16e3,Z=1,tt=16,M=/[.!?]\s/u,et=/\s/u,nt=async function*(t){if(t instanceof Uint8Array){yield t;return}if(t instanceof ReadableStream){const e=t.getReader();try{for(;;){const{done:n,value:r}=await e.read();if(n)break;yield r}}finally{e.releaseLock()}return}yield*t},yt=(t,e=Y,n=Z,r=tt)=>{const i=n*r/8,p=e*i,m=new ArrayBuffer(44+t.byteLength),s=new DataView(m),u=(l,E)=>{for(let d=0;d<E.length;d+=1)s.setUint8(l+d,E.codePointAt(d)??0)};u(0,"RIFF"),s.setUint32(4,36+t.byteLength,!0),u(8,"WAVE"),u(12,"fmt "),s.setUint32(16,16,!0),s.setUint16(20,1,!0),s.setUint16(22,n,!0),s.setUint32(24,e,!0),s.setUint32(28,p,!0),s.setUint16(32,i,!0),s.setUint16(34,r,!0),u(36,"data"),s.setUint32(40,t.byteLength,!0);const a=new Uint8Array(m);return a.set(t,44),a},st=t=>{const e=[];let n=t,r=M.exec(n);for(;r;){let i=r.index+1;for(;i<n.length&&et.test(n[i]??"");)i+=1;const p=n.slice(0,i).trim();p.length>0&&e.push(p),n=n.slice(i),r=M.exec(n)}return{rest:n,sentences:e}},pt=async t=>{const{agent:e,compact:n,connectionId:r,env:i,exportName:p,owner:m,paths:s,pcm:u,run:a,send:l,sendAudio:E,signal:d,streamGenerate:C,synthesize:H,text:L,threadKey:o,transcribe:F,turn:U,waitForDrain:O}=t,h=()=>d.aborted,v=T(s.appendMessage),$=T(s.ensureThread),B=T(s.listMessages),b=T(s.patchThread);await a($,{agent:p,key:o,...e.initialState===void 0?{}:{initialState:e.initialState},...m===void 0?{}:{owner:m}});try{const f=(L??(u?await F(u):"")).trim();if(f.length===0)return await a(b,{key:o,status:"idle"}),{assistantText:"",interrupted:!1,userText:""};l({text:f,type:"user_transcript"}),await a(v,{content:f,messageKey:`voice:${r}:${String(U)}:user`,role:"user",threadKey:o}),await a(b,{key:o,status:"running"});const I=typeof e.instructions=="function"?e.instructions({env:i,input:f,threadKey:o}):e.instructions,K=await a(B,{key:o}),{history:j,summary:R}=await z({agent:e,compact:n,env:i},K),W=G({history:j,...I===void 0?{}:{instructions:I},...R===void 0?{}:{summary:R}});let g="",w="",S=Promise.resolve();const V=async c=>{if(h()||c.length===0)return;let x=!1;try{for await(const y of nt(await H(c,d))){if(h()||(await O?.(),h()))break;E(y),x=!0}}catch(y){l({message:y instanceof Error?y.message:String(y),type:"error"})}x&&(w=w.length>0?`${w} ${c}`:c)},_=c=>{S=S.then(async()=>V(c))},X=await C({messages:W,signal:d},c=>{if(h())return;l({text:c,type:"assistant_delta"}),g+=c;const{rest:x,sentences:y}=st(g);g=x;for(const J of y)_(J)});!h()&&g.trim().length>0&&_(g.trim()),g="",await S;const k=h(),A=k?w:X.text;return await a(v,{content:A,messageKey:`voice:${r}:${String(U)}:assistant`,role:"assistant",threadKey:o}),await a(b,{key:o,status:"idle"}),l(k?{type:"interrupted"}:{text:A,type:"assistant_done"}),{assistantText:A,interrupted:k,userText:f}}catch(f){throw await a(b,{key:o,status:"idle"}),f}},lt=t=>Q(t),ht=t=>{if(typeof t=="object"&&t!==null&&"text"in t){const{text:e}=t;return typeof e=="string"?e:""}return""},gt=t=>{if(t instanceof Uint8Array||t instanceof ReadableStream)return t;if(t instanceof Response&&t.body)return t.body;if(typeof t=="object"&&t!==null&&"audio"in t){const{audio:e}=t;if(typeof e=="string")return q(e);if(e instanceof ReadableStream||e instanceof Uint8Array)return e}return new Uint8Array(0)};export{dt as a,ft as b,yt as c,ct as d,ht as e,gt as f,ut as i,lt as p,pt as r,nt as t};

package/dist/reply.d.mts

@@ -0,0 +1,40 @@
+import { Mailer } from '@lunora/mail';
+import { InboundEmail } from '@lunora/mail/inbound';
+import { a as AgentReplyRef } from "./packem_shared/types.d-B8WZl1rU.mjs";
+import 'ai';
+/** The email arm of {@link AgentReplyRef}, narrowed for the helpers below. */
+type EmailReplyRef = Extract<AgentReplyRef, {
+  channel: "email";
+}>;
+/**
+ * Capture a reply reference from an already-parsed inbound email — call it in
+ * an `onEmail` mapper and put the result on the run's `replyRef`.
+ *
+ * Returns `undefined` when the message carries no `Message-ID`: there is
+ * nothing to thread a reply against, and an unthreaded reply lands as a new
+ * conversation in the recipient's client, which is worse than not replying.
+ */
+declare const captureEmailReplyRef: (email: InboundEmail) => EmailReplyRef | undefined;
+/** RFC 5322 threading: append the replied-to id to any existing `References` chain. */
+declare const buildReferences: (replyRef: EmailReplyRef) => string;
+/** Subject + body of a reply. */
+interface ReplyBody {
+  subject: string;
+  text: string;
+}
+/**
+ * Send a threaded reply through the app's own `@lunora/mail` mailer.
+ *
+ * The mailer is a parameter rather than something this module constructs: the
+ * app already configures one (API key or `send_email` binding), and passing it
+ * in keeps this module free of any runtime dependency on `@lunora/mail`.
+ *
+ * The reply goes to the original sender, from the mailer's configured default.
+ * An app running several aliases that wants the reply to come from whichever
+ * mailbox received the message passes `from: replyRef.to[0]` itself — a
+ * decision only the app can make.
+ */
+declare const replyToEmail: (mailer: Mailer, replyRef: EmailReplyRef, body: ReplyBody) => Promise<{
+  id: string;
+}>;
+export { type EmailReplyRef, ReplyBody, buildReferences, captureEmailReplyRef, replyToEmail };

package/dist/reply.d.ts

@@ -0,0 +1,40 @@
+import { Mailer } from '@lunora/mail';
+import { InboundEmail } from '@lunora/mail/inbound';
+import { a as AgentReplyRef } from "./packem_shared/types.d-B8WZl1rU.js";
+import 'ai';
+/** The email arm of {@link AgentReplyRef}, narrowed for the helpers below. */
+type EmailReplyRef = Extract<AgentReplyRef, {
+  channel: "email";
+}>;
+/**
+ * Capture a reply reference from an already-parsed inbound email — call it in
+ * an `onEmail` mapper and put the result on the run's `replyRef`.
+ *
+ * Returns `undefined` when the message carries no `Message-ID`: there is
+ * nothing to thread a reply against, and an unthreaded reply lands as a new
+ * conversation in the recipient's client, which is worse than not replying.
+ */
+declare const captureEmailReplyRef: (email: InboundEmail) => EmailReplyRef | undefined;
+/** RFC 5322 threading: append the replied-to id to any existing `References` chain. */
+declare const buildReferences: (replyRef: EmailReplyRef) => string;
+/** Subject + body of a reply. */
+interface ReplyBody {
+  subject: string;
+  text: string;
+}
+/**
+ * Send a threaded reply through the app's own `@lunora/mail` mailer.
+ *
+ * The mailer is a parameter rather than something this module constructs: the
+ * app already configures one (API key or `send_email` binding), and passing it
+ * in keeps this module free of any runtime dependency on `@lunora/mail`.
+ *
+ * The reply goes to the original sender, from the mailer's configured default.
+ * An app running several aliases that wants the reply to come from whichever
+ * mailbox received the message passes `from: replyRef.to[0]` itself — a
+ * decision only the app can make.
+ */
+declare const replyToEmail: (mailer: Mailer, replyRef: EmailReplyRef, body: ReplyBody) => Promise<{
+  id: string;
+}>;
+export { type EmailReplyRef, ReplyBody, buildReferences, captureEmailReplyRef, replyToEmail };

package/dist/reply.mjs

@@ -0,0 +1 @@
+const t=e=>{if(e.messageId!==void 0)return{channel:"email",from:e.from,messageId:e.messageId,to:e.to,...e.references===void 0?{}:{references:e.references}}},n=e=>e.references===void 0?e.messageId:`${e.references} ${e.messageId}`,c=async(e,s,r)=>e.send({headers:{"In-Reply-To":s.messageId,References:n(s)},subject:r.subject,text:r.text,to:s.from});export{n as buildReferences,t as captureEmailReplyRef,c as replyToEmail};

package/dist/sandbox.d.mts

@@ -1,10 +1,11 @@
-import { a as AgentToolContext, b as AgentToolDefinition } from "./packem_shared/types.d-BWG0uUtX.mjs";
+import { b as AgentToolContext, c as AgentToolDefinition } from "./packem_shared/types.d-B8WZl1rU.mjs";
 import '@lunora/mail/inbound';
 import 'ai';
 /**
-* The model-provided input to a {@link browserTool} call — a discriminated
-* union on `op` so one tool exposes every headless-browser capability.
-*/
+ * The model-provided input to a {@link browserTool} call — a discriminated
+ * union on `op` so one tool exposes every headless-browser capability.
+ * @experimental
+ */
 type BrowserToolInput = {
   fullPage?: boolean;
   op: "screenshot";
@@ -22,11 +23,12 @@ type BrowserToolInput = {
   url: string;
 };
 /**
-* The model-provided input to a {@link containerTool} call — a discriminated
-* union on `op`. `fetch` sends an HTTP request to the container; `exec` asks it
-* to run a command (routed as a POST to `/exec`, since the container surface
-* exposes no first-class exec RPC — the container app must serve that route).
-*/
+ * The model-provided input to a {@link containerTool} call — a discriminated
+ * union on `op`. `fetch` sends an HTTP request to the container; `exec` asks it
+ * to run a command (delegated to `ctx.containers.<name>.exec`, the first-class
+ * exec contract in `@lunora/container`; the container app serves its route).
+ * @experimental
+ */
 type ContainerToolInput = {
   args?: string[];
   command?: string;
@@ -37,25 +39,29 @@ type ContainerToolInput = {
   op: "fetch";
   path: string;
 };
-/** Author-supplied config for `browserTool`. */
+/**
+ * Author-supplied config for `browserTool`.
+ * @experimental
+ */
 interface BrowserToolOptions {
   /** Override the model-facing description (what the tool does). */
   description?: string;
   /**
-  * Gate a call behind a human approval. Defaults to **unattended** (no gate),
-  * matching the AI SDK. `browserTool` fetches a model-chosen `url` with no
-  * allowlist, so it is an SSRF surface: a prompt-injected model can point it at
-  * an internal/link-local address and read the response back into context. Pass
-  * a boolean or a predicate to gate it (evaluated from replay-stable input, so
-  * keep it deterministic).
-  */
+   * Gate a call behind a human approval. Defaults to **unattended** (no gate),
+   * matching the AI SDK. `browserTool` fetches a model-chosen `url` with no
+   * allowlist, so it is an SSRF surface: a prompt-injected model can point it at
+   * an internal/link-local address and read the response back into context. Pass
+   * a boolean or a predicate to gate it (evaluated from replay-stable input, so
+   * keep it deterministic).
+   */
   needsApproval?: ((input: BrowserToolInput) => boolean) | boolean;
 }
 /**
-* The model-provided input to a {@link fsTool} call — a discriminated union on
-* `op` over an R2-backed virtual filesystem. Paths are relative to the tool's
-* pinned `root`; a `..` that escapes the root is rejected server-side.
-*/
+ * The model-provided input to a {@link fsTool} call — a discriminated union on
+ * `op` over an R2-backed virtual filesystem. Paths are relative to the tool's
+ * pinned `root`; a `..` that escapes the root is rejected server-side.
+ * @experimental
+ */
 type FsToolInput = {
   op: "ls";
   path?: string;
@@ -73,113 +79,127 @@ type FsToolInput = {
   op: "write";
   path: string;
 };
-/** Author-supplied config for `fsTool`. */
+/**
+ * Author-supplied config for `fsTool`.
+ * @experimental
+ */
 interface FsToolOptions {
   /** Override the model-facing description (what the tool does). */
   description?: string;
   /**
-  * Gate a call behind a human approval. Defaults to gating the WRITING ops
-  * (`write`, `rm`) — a prompt-injected model shouldn't silently overwrite or
-  * delete the sandbox — while `ls`/`read`/`stat` run unattended. Pass a boolean
-  * or a predicate (evaluated from replay-stable input, so keep it deterministic).
-  */
+   * Gate a call behind a human approval. Defaults to gating the WRITING ops
+   * (`write`, `rm`) — a prompt-injected model shouldn't silently overwrite or
+   * delete the sandbox — while `ls`/`read`/`stat` run unattended. Pass a boolean
+   * or a predicate (evaluated from replay-stable input, so keep it deterministic).
+   */
   needsApproval?: ((input: FsToolInput) => boolean) | boolean;
   /**
-  * The key prefix every path is scoped under, isolating this tool's files from
-  * the rest of the bucket. Either a fixed string (e.g. `"agents/support"`) or a
-  * function of the tool context — return `` `agents/${ctx.threadKey}` `` (or an
-  * owner-derived prefix) to give each run/user its OWN namespace in a
-  * multi-tenant agent. Default: the bucket root (shared — set a root for
-  * multi-tenant use). The server rejects any `..` that would escape it.
-  */
+   * The key prefix every path is scoped under, isolating this tool's files from
+   * the rest of the bucket. Either a fixed string (e.g. `"agents/support"`) or a
+   * function of the tool context — return `` `agents/${ctx.threadKey}` `` (or an
+   * owner-derived prefix) to give each run/user its OWN namespace in a
+   * multi-tenant agent. Default: the bucket root (shared — set a root for
+   * multi-tenant use). The server rejects any `..` that would escape it.
+   */
   root?: ((context: AgentToolContext) => string) | string;
 }
-/** Author-supplied config for `containerTool`. */
+/**
+ * Author-supplied config for `containerTool`.
+ * @experimental
+ */
 interface ContainerToolOptions {
   /** Override the model-facing description (what the tool does). */
   description?: string;
   /**
-  * Gate a call behind a human approval. Defaults to gating any command
-  * execution: an `exec`, AND a `fetch` whose path resolves to the privileged
-  * `/exec` route (both reach the same command-execution path in the container,
-  * so gating on the `op` name alone would let a `fetch` to `/exec` run a
-  * command unattended). A plain `fetch` to any other route runs unattended.
-  * Pass a boolean or your own predicate to change that. Evaluated from
-  * replay-stable input, so keep it deterministic.
-  */
+   * Gate a call behind a human approval. Defaults to gating any command
+   * execution — an `exec` — plus any `fetch` using a non-idempotent method
+   * (POST/PUT/PATCH/DELETE), so a prompt-injected model cannot reach some
+   * other mutating route unattended. A read-only `fetch` runs unattended. The
+   * exec route itself needs no special case: `@lunora/container` reserves
+   * `/__lunora/*` and refuses a `fetch` into it. Pass a boolean or your own
+   * predicate to change that. Evaluated from replay-stable input, so keep it
+   * deterministic.
+   */
   needsApproval?: ((input: ContainerToolInput) => boolean) | boolean;
 }
 /**
-* A batteries-included agent tool that drives Cloudflare Browser Rendering. One
-* tool exposes every browser op (screenshot / pdf / content / scrape); the model
-* picks via `op`. The call dispatches to the auto-registered `sandbox:invoke`
-* action — which runs on an action ctx carrying `ctx.browser`. Importing the tool
-* makes codegen register the dispatcher and provision the `BROWSER` binding; like
-* any `ctx.browser` user, the app still supplies a `config.browser` thunk
-* (`createBrowser({ binding: env.BROWSER, launch })` with the optional
-* `@cloudflare/playwright` `launch` peer) to `createShardDO()` — codegen never
-* injects that peer, so the browser op throws a directed error until it is wired.
-*
-* Security: the model chooses the `url` with no allowlist, so this is an SSRF
-* surface — pass `opts.needsApproval` to gate calls a prompt-injected model
-* could aim at internal/link-local endpoints.
-*
-* ```ts
-* import { browserTool, defineAgent } from "@lunora/agent/sandbox";
-*
-* export const researcher = defineAgent({
-*     model: "@cf/meta/llama-3.3-70b-instruct-fp8-fast",
-*     tools: { browser: browserTool() },
-* });
-* ```
-*/
+ * A batteries-included agent tool that drives Cloudflare Browser Rendering. One
+ * tool exposes every browser op (screenshot / pdf / content / scrape); the model
+ * picks via `op`. The call dispatches to the auto-registered `sandbox:invoke`
+ * action — which runs on an action ctx carrying `ctx.browser`. Importing the tool
+ * makes codegen register the dispatcher and provision the `BROWSER` binding; like
+ * any `ctx.browser` user, the app still supplies a `config.browser` thunk
+ * (`createBrowser({ binding: env.BROWSER, launch })` with the optional
+ * `@cloudflare/playwright` `launch` peer) to `createShardDO()` — codegen never
+ * injects that peer, so the browser op throws a directed error until it is wired.
+ *
+ * Security: the model chooses the `url` with no allowlist, so this is an SSRF
+ * surface — pass `opts.needsApproval` to gate calls a prompt-injected model
+ * could aim at internal/link-local endpoints.
+ *
+ * ```ts
+ * import { browserTool, defineAgent } from "@lunora/agent/sandbox";
+ *
+ * export const researcher = defineAgent({
+ *     model: "@cf/meta/llama-3.3-70b-instruct-fp8-fast",
+ *     tools: { browser: browserTool() },
+ * });
+ * ```
+ * @experimental
+ */
 declare const browserTool: (options?: BrowserToolOptions) => AgentToolDefinition<BrowserToolInput, string>;
 /**
-* A batteries-included agent tool that talks to a declared Cloudflare
-* Container. `name` is the `ctx.containers.&lt;name>` key (the `lunora/containers.ts`
-* export). One tool exposes `fetch` (HTTP request) and `exec` (run a command);
-* the model picks via `op`. The call dispatches to the auto-registered
-* `sandbox:invoke` action, which carries `ctx.containers`.
-*
-* By default a `fetch` runs unattended while command execution is gated behind a
-* human approval — an `exec`, AND a `fetch` whose path resolves to the privileged
-* `/exec` route (both reach the same command-execution path in the container, so
-* gating on the `op` name alone would let a `fetch` to `/exec` run a command
-* unattended). Note a `fetch` can still reach any *other* container route
-* unattended, so scope the container's routes accordingly. Pass
-* `opts.needsApproval` to widen or disable the gate.
-*
-* ```ts
-* import { containerTool, defineAgent } from "@lunora/agent/sandbox";
-*
-* export const ops = defineAgent({
-*     model: "@cf/meta/llama-3.3-70b-instruct-fp8-fast",
-*     tools: { sandbox: containerTool("sandbox") },
-* });
-* ```
-*/
+ * A batteries-included agent tool that talks to a declared Cloudflare
+ * Container. `name` is the `ctx.containers.<name>` key (the `lunora/containers.ts`
+ * export). One tool exposes `fetch` (HTTP request) and `exec` (run a command);
+ * the model picks via `op`. The call dispatches to the auto-registered
+ * `sandbox:invoke` action, which carries `ctx.containers`.
+ *
+ * By default a read-only (GET/HEAD/OPTIONS, or method-omitted) `fetch` runs
+ * unattended while everything else is gated behind a human approval — an
+ * `exec`; a `fetch` whose path resolves to the privileged exec route (both
+ * reach the same command-execution path in the container, so gating on the
+ * `op` name alone would let a `fetch` to it run a command unattended);
+ * and a `fetch` using a non-idempotent method (POST/PUT/PATCH/DELETE) to ANY
+ * route, since a prompt-injected model could otherwise mutate container state
+ * through some other privileged route just by avoiding the literal exec
+ * path. A `fetch` can still reach any *other read* route unattended, so scope
+ * the container's GET routes accordingly. Pass `opts.needsApproval` to widen
+ * or disable the gate.
+ *
+ * ```ts
+ * import { containerTool, defineAgent } from "@lunora/agent/sandbox";
+ *
+ * export const ops = defineAgent({
+ *     model: "@cf/meta/llama-3.3-70b-instruct-fp8-fast",
+ *     tools: { sandbox: containerTool("sandbox") },
+ * });
+ * ```
+ * @experimental
+ */
 declare const containerTool: (name: string, options?: ContainerToolOptions) => AgentToolDefinition<ContainerToolInput, string>;
 /**
-* A batteries-included agent tool exposing a persistent, R2-backed virtual
-* filesystem. `bucket` is the R2 binding name; every path is scoped under the
-* pinned `opts.root` (a `..` that would escape it is rejected). One tool exposes
-* `ls`/`read`/`write`/`rm`/`stat`; the model picks via `op`. The call dispatches
-* to the auto-registered `sandbox:invoke` action, which reads the bucket from
-* `ctx.env`. workerd has no real shell — this is object-store-backed file I/O.
-*
-* By default the writing ops (`write`/`rm`) pause for a human approval while
-* reads run unattended; pass `opts.needsApproval` to change that. Importing the
-* tool registers the dispatcher; the app must declare the `r2_bucket` binding in
-* `wrangler.jsonc` (the fs op throws a directed error until it is wired).
-*
-* ```ts
-* import { defineAgent, fsTool } from "@lunora/agent/sandbox";
-*
-* export const coder = defineAgent({
-*     model: "@cf/meta/llama-3.3-70b-instruct-fp8-fast",
-*     tools: { fs: fsTool("SANDBOX_BUCKET", { root: "agents/coder" }) },
-* });
-* ```
-*/
+ * A batteries-included agent tool exposing a persistent, R2-backed virtual
+ * filesystem. `bucket` is the R2 binding name; every path is scoped under the
+ * pinned `opts.root` (a `..` that would escape it is rejected). One tool exposes
+ * `ls`/`read`/`write`/`rm`/`stat`; the model picks via `op`. The call dispatches
+ * to the auto-registered `sandbox:invoke` action, which reads the bucket from
+ * `ctx.env`. workerd has no real shell — this is object-store-backed file I/O.
+ *
+ * By default the writing ops (`write`/`rm`) pause for a human approval while
+ * reads run unattended; pass `opts.needsApproval` to change that. Importing the
+ * tool registers the dispatcher; the app must declare the `r2_bucket` binding in
+ * `wrangler.jsonc` (the fs op throws a directed error until it is wired).
+ *
+ * ```ts
+ * import { defineAgent, fsTool } from "@lunora/agent/sandbox";
+ *
+ * export const coder = defineAgent({
+ *     model: "@cf/meta/llama-3.3-70b-instruct-fp8-fast",
+ *     tools: { fs: fsTool("SANDBOX_BUCKET", { root: "agents/coder" }) },
+ * });
+ * ```
+ * @experimental
+ */
 declare const fsTool: (bucket: string, options?: FsToolOptions) => AgentToolDefinition<FsToolInput>;
 export { type BrowserToolInput, type BrowserToolOptions, type ContainerToolInput, type ContainerToolOptions, type FsToolInput, type FsToolOptions, browserTool, containerTool, fsTool };