@marifold/core 0.60.0

package/dist/agent/tools/DelegateTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DelegateTool.d.ts","sourceRoot":"","sources":["../../../src/agent/tools/DelegateTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAqC,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE1H,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,CAAC,OAAO,EAAE,kBAAkB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjE,gBAAgB,EAAE,MAAM,MAAM,EAAE,CAAC;CAClC;AAED;;;;GAIG;AACH,qBAAa,YAAa,YAAW,SAAS;IAmBhC,OAAO,CAAC,QAAQ,CAAC,IAAI;IAlBjC,QAAQ,CAAC,IAAI,EAAG,UAAU,CAAU;IACpC,QAAQ,CAAC,UAAU;QACjB,IAAI;QACJ,WAAW;QAKX,UAAU;YACR,IAAI;YACJ,UAAU;gBACR,OAAO;oBAAI,IAAI;oBAAY,WAAW;;gBACtC,MAAM;oBAAI,IAAI;oBAAY,WAAW;;;YAEvC,QAAQ;;MAEV;IAEF,YAA6B,IAAI,EAAE,gBAAgB,EAAI;IAEvD,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,MAAM,CAGtD;IAEK,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAyBvG;CACF"}

package/dist/agent/tools/DelegateTool.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DelegateTool = void 0;
+const ToolRegistry_1 = require("../ToolRegistry");
+/**
+ * Minimal multi-model orchestration: run a one-shot request through another
+ * profile (and therefore that profile's provider/model). Delegated requests
+ * are plain asks — no tools — so delegation depth is structurally 1.
+ */
+class DelegateTool {
+    deps;
+    kind = 'delegate';
+    definition = {
+        name: 'ask_profile',
+        description: [
+            'Send a one-shot prompt to another Marifold profile, which may use a different model, and return its reply without tools.',
+            'When to use: a known specialized profile is materially better suited to a bounded subtask, such as translation.',
+            'When NOT to use: ordinary work the active profile can complete, tool-using or multi-step delegation, implicit profile discovery, or recursive delegation.',
+        ].join(' '),
+        parameters: {
+            type: 'object',
+            properties: {
+                profile: { type: 'string', description: 'Name of the target profile.' },
+                prompt: { type: 'string', description: 'The prompt to send to that profile.' },
+            },
+            required: ['profile', 'prompt'],
+        },
+    };
+    constructor(deps) {
+        this.deps = deps;
+    }
+    summarizeCall(input) {
+        const profile = typeof input.profile === 'string' ? input.profile : '<missing profile>';
+        return `ask profile '${profile}'`;
+    }
+    async execute(input, ctx) {
+        const profile = (0, ToolRegistry_1.requireStringInput)(input, 'profile', 'ask_profile');
+        const prompt = (0, ToolRegistry_1.requireStringInput)(input, 'prompt', 'ask_profile');
+        const known = this.deps.listProfileNames();
+        if (!known.includes(profile)) {
+            return {
+                content: `Profile '${profile}' does not exist. Available profiles: ${known.join(', ') || '(none)'}.`,
+                summary: `unknown profile '${profile}'`,
+                isError: true,
+            };
+        }
+        const result = await this.deps.ask({ prompt, profile });
+        if (!result.ok) {
+            return {
+                content: `Profile '${profile}' request failed: ${result.error?.message ?? 'unknown error'}`,
+                summary: `profile '${profile}' failed`,
+                isError: true,
+            };
+        }
+        return {
+            content: (0, ToolRegistry_1.capToolOutput)(result.text, ctx.outputLimit),
+            summary: `profile '${profile}' replied`,
+        };
+    }
+}
+exports.DelegateTool = DelegateTool;
+//# sourceMappingURL=DelegateTool.js.map

package/dist/agent/tools/DelegateTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DelegateTool.js","sourceRoot":"","sources":["../../../src/agent/tools/DelegateTool.ts"],"names":[],"mappings":";;;AACA,kDAA0H;AAkB1H;;;;GAIG;AACH;IAmB+B,IAAI;IAlBxB,IAAI,GAAG,UAAmB,CAAC;IAC3B,UAAU,GAAG;QACpB,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE;YACX,0HAA0H;YAC1H,iHAAiH;YACjH,2JAA2J;SAC5J,CAAC,IAAI,CAAC,GAAG,CAAC;QACX,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6BAA6B,EAAE;gBACvE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;aAC/E;YACD,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;SAChC;KACF,CAAC;IAEF,YAA6B,IAAsB;oBAAtB,IAAI;IAAqB,CAAC;IAEvD,aAAa,CAAC,KAAgC;QAC5C,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC;QACxF,OAAO,gBAAgB,OAAO,GAAG,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAgC,EAAE,GAAyB;QACvE,MAAM,OAAO,GAAG,IAAA,iCAAkB,EAAC,KAAK,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAA,iCAAkB,EAAC,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAElE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,OAAO,EAAE,YAAY,OAAO,yCAAyC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG;gBACpG,OAAO,EAAE,oBAAoB,OAAO,GAAG;gBACvC,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,YAAY,OAAO,qBAAqB,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE;gBAC3F,OAAO,EAAE,YAAY,OAAO,UAAU;gBACtC,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,IAAA,4BAAa,EAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC;YACpD,OAAO,EAAE,YAAY,OAAO,WAAW;SACxC,CAAC;IACJ,CAAC;CACF"}

package/dist/agent/tools/InspectAttachmentTool.d.ts

@@ -0,0 +1,25 @@
+import type { JSONValue } from '@priest-ai/core';
+import { AgentTool, ToolExecutionContext, ToolExecutionResult, ToolRiskAssessment } from '../ToolRegistry';
+/** Attachment-scoped, read-only inspection. The model supplies an opaque ID,
+ * never a host path; the run workspace resolves that ID to the exact upload. */
+export declare class InspectAttachmentTool implements AgentTool {
+    readonly kind: 'read';
+    readonly definition: {
+        name: string;
+        description: string;
+        parameters: {
+            type: string;
+            properties: {
+                attachment_id: {
+                    type: string;
+                    description: string;
+                };
+            };
+            required: string[];
+        };
+    };
+    summarizeCall(input: Record<string, JSONValue>): string;
+    assessRisk(): ToolRiskAssessment;
+    execute(input: Record<string, JSONValue>, ctx: ToolExecutionContext): Promise<ToolExecutionResult>;
+}
+//# sourceMappingURL=InspectAttachmentTool.d.ts.map

package/dist/agent/tools/InspectAttachmentTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"InspectAttachmentTool.d.ts","sourceRoot":"","sources":["../../../src/agent/tools/InspectAttachmentTool.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EACL,SAAS,EAGT,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AAUzB;gFACgF;AAChF,qBAAa,qBAAsB,YAAW,SAAS;IACrD,QAAQ,CAAC,IAAI,EAAG,MAAM,CAAU;IAChC,QAAQ,CAAC,UAAU;QACjB,IAAI;QACJ,WAAW;QAMX,UAAU;YACR,IAAI;YACJ,UAAU;gBACR,aAAa;oBACX,IAAI;oBACJ,WAAW;;;YAGf,QAAQ;;MAEV;IAEF,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,MAAM,CAEtD;IAED,UAAU,IAAI,kBAAkB,CAK/B;IAEK,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAuCvG;CACF"}

package/dist/agent/tools/InspectAttachmentTool.js

@@ -0,0 +1,129 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InspectAttachmentTool = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const ToolRegistry_1 = require("../ToolRegistry");
+const ReadFileTool_1 = require("./ReadFileTool");
+const TEXT_EXTENSIONS = new Set([
+    '.txt', '.md', '.markdown', '.json', '.jsonl', '.yaml', '.yml', '.toml', '.ini',
+    '.csv', '.tsv', '.xml', '.html', '.css', '.js', '.mjs', '.cjs', '.ts', '.tsx',
+    '.jsx', '.py', '.rb', '.go', '.rs', '.java', '.kt', '.swift', '.c', '.h', '.cpp',
+    '.hpp', '.cs', '.sh', '.zsh', '.bash', '.fish', '.sql', '.log', '.diff', '.patch',
+]);
+/** Attachment-scoped, read-only inspection. The model supplies an opaque ID,
+ * never a host path; the run workspace resolves that ID to the exact upload. */
+class InspectAttachmentTool {
+    kind = 'read';
+    definition = {
+        name: 'inspect_attachment',
+        description: [
+            'Inspect one attachment uploaded for the current run by its attachment ID.',
+            'Images become visible to the model; text and pre-extracted documents return bounded readable text; other binaries return safe metadata and their read-only run path.',
+            'When to use: the objective or skill depends on an attached image, document, spreadsheet, audio file, or other upload.',
+            'When NOT to use: arbitrary filesystem paths, bundled skill files, or information already present in the prompt.',
+        ].join(' '),
+        parameters: {
+            type: 'object',
+            properties: {
+                attachment_id: {
+                    type: 'string',
+                    description: 'Opaque ID from the current run attachment manifest, such as attachment-1.',
+                },
+            },
+            required: ['attachment_id'],
+        },
+    };
+    summarizeCall(input) {
+        return `inspect ${typeof input.attachment_id === 'string' ? input.attachment_id : '<missing attachment>'}`;
+    }
+    assessRisk() {
+        // The ID can resolve only inside the current run manifest. Uploading the
+        // attachment is the user's explicit grant to inspect it; no host path can
+        // be smuggled through this tool.
+        return { escalate: false, trusted: true };
+    }
+    async execute(input, ctx) {
+        const id = (0, ToolRegistry_1.requireStringInput)(input, 'attachment_id', 'inspect_attachment');
+        const attachment = ctx.workspace?.attachments.find(candidate => candidate.id === id);
+        if (!attachment) {
+            const available = ctx.workspace?.attachments.map(candidate => candidate.id).join(', ') || '(none)';
+            return {
+                content: `Attachment '${id}' is not available in this run. Available attachment IDs: ${available}.`,
+                summary: `attachment ${id} not found`,
+                isError: true,
+            };
+        }
+        if (attachment.image) {
+            return {
+                content: `Attachment ${attachment.id} (${attachment.name}, ${attachment.mediaType}) is now visible as image input. Inspect the image itself before answering.`,
+                images: [attachment.image],
+                summary: `opened image ${attachment.name}`,
+            };
+        }
+        const text = attachment.inspectionText ?? readTextAttachment(attachment.path, attachment.name, attachment.mediaType);
+        if (text !== undefined) {
+            return {
+                content: (0, ToolRegistry_1.capToolOutput)(text, ctx.outputLimit),
+                summary: `inspected ${attachment.name}`,
+            };
+        }
+        const location = attachment.path ? `\nRead-only run path: ${attachment.path}` : '';
+        return {
+            content: [
+                `Attachment: ${attachment.name}`,
+                `Media type: ${attachment.mediaType}`,
+                `Size: ${(0, ReadFileTool_1.formatBytes)(attachment.size)}`,
+                location,
+                'No built-in readable preview is available for this format. Use a format-specific local tool against the run path if the task requires deeper inspection.',
+            ].filter(Boolean).join('\n'),
+            summary: `inspected metadata for ${attachment.name}`,
+        };
+    }
+}
+exports.InspectAttachmentTool = InspectAttachmentTool;
+function readTextAttachment(filePath, name, mediaType) {
+    if (!filePath || (!mediaType.startsWith('text/') && !TEXT_EXTENSIONS.has(path.extname(name).toLowerCase()))) {
+        return undefined;
+    }
+    try {
+        return fs.readFileSync(filePath, 'utf8');
+    }
+    catch (error) {
+        return `Could not read ${name}: ${error instanceof Error ? error.message : String(error)}`;
+    }
+}
+//# sourceMappingURL=InspectAttachmentTool.js.map

package/dist/agent/tools/InspectAttachmentTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"InspectAttachmentTool.js","sourceRoot":"","sources":["../../../src/agent/tools/InspectAttachmentTool.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,MAAY,EAAE,+BAAW;AACzB,MAAY,IAAI,iCAAa;AAE7B,kDAOyB;AACzB,iDAA6C;AAE7C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAC/E,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IAC7E,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM;IAChF,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ;CAClF,CAAC,CAAC;AAEH;gFACgF;AAChF;IACW,IAAI,GAAG,MAAe,CAAC;IACvB,UAAU,GAAG;QACpB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE;YACX,2EAA2E;YAC3E,sKAAsK;YACtK,uHAAuH;YACvH,iHAAiH;SAClH,CAAC,IAAI,CAAC,GAAG,CAAC;QACX,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,aAAa,EAAE;oBACb,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,2EAA2E;iBACzF;aACF;YACD,QAAQ,EAAE,CAAC,eAAe,CAAC;SAC5B;KACF,CAAC;IAEF,aAAa,CAAC,KAAgC;QAC5C,OAAO,WAAW,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC;IAC7G,CAAC;IAED,UAAU;QACR,yEAAyE;QACzE,0EAA0E;QAC1E,iCAAiC;QACjC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAgC,EAAE,GAAyB;QACvE,MAAM,EAAE,GAAG,IAAA,iCAAkB,EAAC,KAAK,EAAE,eAAe,EAAE,oBAAoB,CAAC,CAAC;QAC5E,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC;YACnG,OAAO;gBACL,OAAO,EAAE,eAAe,EAAE,6DAA6D,SAAS,GAAG;gBACnG,OAAO,EAAE,cAAc,EAAE,YAAY;gBACrC,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,OAAO;gBACL,OAAO,EAAE,cAAc,UAAU,CAAC,EAAE,KAAK,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,SAAS,6EAA6E;gBAC9J,MAAM,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;gBAC1B,OAAO,EAAE,gBAAgB,UAAU,CAAC,IAAI,EAAE;aAC3C,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,UAAU,CAAC,cAAc,IAAI,kBAAkB,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QACrH,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO;gBACL,OAAO,EAAE,IAAA,4BAAa,EAAC,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC;gBAC7C,OAAO,EAAE,aAAa,UAAU,CAAC,IAAI,EAAE;aACxC,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,OAAO;YACL,OAAO,EAAE;gBACP,eAAe,UAAU,CAAC,IAAI,EAAE;gBAChC,eAAe,UAAU,CAAC,SAAS,EAAE;gBACrC,SAAS,IAAA,0BAAW,EAAC,UAAU,CAAC,IAAI,CAAC,EAAE;gBACvC,QAAQ;gBACR,0JAA0J;aAC3J,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5B,OAAO,EAAE,0BAA0B,UAAU,CAAC,IAAI,EAAE;SACrD,CAAC;IACJ,CAAC;CACF;;AAED,SAAS,kBAAkB,CAAC,QAA4B,EAAE,IAAY,EAAE,SAAiB;IACvF,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC;QAC5G,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,kBAAkB,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7F,CAAC;AACH,CAAC"}

package/dist/agent/tools/PythonPackageTool.d.ts

@@ -0,0 +1,26 @@
+import { JSONValue } from '@priest-ai/core';
+import { AgentTool, ToolExecutionContext, ToolExecutionResult, ToolRiskAssessment } from '../ToolRegistry';
+export declare class PythonPackageTool implements AgentTool {
+    readonly kind: 'network';
+    readonly definition: {
+        name: string;
+        description: string;
+        parameters: {
+            type: string;
+            properties: {
+                packages: {
+                    type: string;
+                    items: {
+                        type: string;
+                    };
+                    description: string;
+                };
+            };
+            required: string[];
+        };
+    };
+    summarizeCall(input: Record<string, JSONValue>): string;
+    assessRisk(_input: Record<string, JSONValue>, _ctx: ToolExecutionContext): ToolRiskAssessment;
+    execute(input: Record<string, JSONValue>, ctx: ToolExecutionContext): Promise<ToolExecutionResult>;
+}
+//# sourceMappingURL=PythonPackageTool.d.ts.map

package/dist/agent/tools/PythonPackageTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PythonPackageTool.d.ts","sourceRoot":"","sources":["../../../src/agent/tools/PythonPackageTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAO5C,OAAO,EACL,SAAS,EACT,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AAOzB,qBAAa,iBAAkB,YAAW,SAAS;IACjD,QAAQ,CAAC,IAAI,EAAG,SAAS,CAAU;IACnC,QAAQ,CAAC,UAAU;QACjB,IAAI;QACJ,WAAW;QAMX,UAAU;YACR,IAAI;YACJ,UAAU;gBACR,QAAQ;oBACN,IAAI;oBACJ,KAAK;wBAAI,IAAI;;oBACb,WAAW;;;YAGf,QAAQ;;MAEV;IAEF,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,MAAM,CAGtD;IAED,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,oBAAoB,GAAG,kBAAkB,CAM5F;IAEK,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAqDvG;CACF"}

package/dist/agent/tools/PythonPackageTool.js

@@ -0,0 +1,105 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PythonPackageTool = void 0;
+const ScopedProcess_1 = require("../ScopedProcess");
+const MAX_PACKAGES_PER_CALL = 20;
+// Registry requirement with optional extras/version markers. Deliberately
+// excludes flags, filesystem paths, URLs, Git sources, and editable installs.
+const SAFE_REQUIREMENT = /^[A-Za-z0-9][A-Za-z0-9._-]*(?:\[[A-Za-z0-9._,-]+\])?(?:\s*(?:===|==|~=|!=|<=|>=|<|>)\s*[A-Za-z0-9*+!._-]+)?$/;
+class PythonPackageTool {
+    kind = 'network';
+    definition = {
+        name: 'python_package_install',
+        description: [
+            'Install Python registry packages into this run’s disposable uv environment.',
+            'When to use: a required Python import is missing and installing a named PyPI dependency is necessary to complete the objective.',
+            'When NOT to use: speculative dependencies, packages already available, non-Python tools, URLs, Git sources, paths, flags, or global installs.',
+            'Use this instead of pip/uv inside shell_exec.',
+        ].join(' '),
+        parameters: {
+            type: 'object',
+            properties: {
+                packages: {
+                    type: 'array',
+                    items: { type: 'string' },
+                    description: 'PyPI requirement names, preferably version-pinned (for example openpyxl==3.1.5).',
+                },
+            },
+            required: ['packages'],
+        },
+    };
+    summarizeCall(input) {
+        const packages = packageInputs(input);
+        return `install ${packages.length > 0 ? packages.join(', ') : '<missing packages>'} into this run’s Python environment`;
+    }
+    assessRisk(_input, _ctx) {
+        return {
+            escalate: true,
+            persistable: false,
+            reason: 'package installation downloads and executes third-party code for this run',
+        };
+    }
+    async execute(input, ctx) {
+        const packages = packageInputs(input);
+        const invalid = packages.find(pkg => !SAFE_REQUIREMENT.test(pkg));
+        if (packages.length === 0 || packages.length > MAX_PACKAGES_PER_CALL || invalid) {
+            return {
+                content: invalid
+                    ? `Refused unsafe Python requirement '${invalid}'. Use a registry package name with an optional version constraint.`
+                    : `Provide between 1 and ${MAX_PACKAGES_PER_CALL} Python package requirements.`,
+                summary: 'refused Python package installation',
+                isError: true,
+            };
+        }
+        if (!ctx.workspace) {
+            return {
+                content: 'Marifold refused package installation without an isolated run workspace.',
+                summary: 'blocked Python package installation',
+                isError: true,
+            };
+        }
+        const environmentError = await (0, ScopedProcess_1.ensurePythonEnvironment)(ctx.workspace, ctx.outputLimit, ctx.signal);
+        if (environmentError)
+            return environmentError;
+        const uv = (0, ScopedProcess_1.findExecutable)(process.platform === 'win32' ? 'uv.exe' : 'uv');
+        if (!uv) {
+            return {
+                content: 'uv is required for isolated package installation, but it was not found on PATH.',
+                summary: 'could not install Python packages',
+                isError: true,
+            };
+        }
+        const installerRoots = [
+            ctx.workspace.workDir,
+            ctx.workspace.homeDir,
+            ctx.workspace.tempDir,
+            ctx.workspace.cacheDir,
+            ctx.workspace.venvDir,
+        ];
+        return (0, ScopedProcess_1.runScopedProcess)({
+            executable: uv,
+            args: ['pip', 'install', '--python', (0, ScopedProcess_1.pythonInVenv)(ctx.workspace), ...packages],
+            workspace: ctx.workspace,
+            cwd: ctx.workspace.workDir,
+            // Package build hooks are untrusted third-party code. While network is
+            // enabled they may only see the disposable environment, never attached
+            // files, the selected repository, or trusted host folders.
+            readRoots: installerRoots,
+            writeRoots: installerRoots,
+            network: true,
+            timeoutMs: 180_000,
+            outputLimit: ctx.outputLimit,
+            signal: ctx.signal,
+            successSummary: `installed ${packages.join(', ')} into this run’s Python environment`,
+            failureSummary: `could not install ${packages.join(', ')}`,
+        });
+    }
+}
+exports.PythonPackageTool = PythonPackageTool;
+function packageInputs(input) {
+    const value = input.packages;
+    if (!Array.isArray(value))
+        return [];
+    return value.flatMap(item => typeof item === 'string' && item.trim() ? [item.trim()] : []);
+}
+//# sourceMappingURL=PythonPackageTool.js.map

package/dist/agent/tools/PythonPackageTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PythonPackageTool.js","sourceRoot":"","sources":["../../../src/agent/tools/PythonPackageTool.ts"],"names":[],"mappings":";;;AACA,oDAK0B;AAQ1B,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,0EAA0E;AAC1E,8EAA8E;AAC9E,MAAM,gBAAgB,GAAG,8GAA8G,CAAC;AAExI;IACW,IAAI,GAAG,SAAkB,CAAC;IAC1B,UAAU,GAAG;QACpB,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE;YACX,6EAA6E;YAC7E,iIAAiI;YACjI,+IAA+I;YAC/I,+CAA+C;SAChD,CAAC,IAAI,CAAC,GAAG,CAAC;QACX,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE;oBACR,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,WAAW,EAAE,kFAAkF;iBAChG;aACF;YACD,QAAQ,EAAE,CAAC,UAAU,CAAC;SACvB;KACF,CAAC;IAEF,aAAa,CAAC,KAAgC;QAC5C,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACtC,OAAO,WAAW,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,oBAAoB,qCAAqC,CAAC;IAC1H,CAAC;IAED,UAAU,CAAC,MAAiC,EAAE,IAA0B;QACtE,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,KAAK;YAClB,MAAM,EAAE,2EAA2E;SACpF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAgC,EAAE,GAAyB;QACvE,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,qBAAqB,IAAI,OAAO,EAAE,CAAC;YAChF,OAAO;gBACL,OAAO,EAAE,OAAO;oBACd,CAAC,CAAC,sCAAsC,OAAO,qEAAqE;oBACpH,CAAC,CAAC,yBAAyB,qBAAqB,+BAA+B;gBACjF,OAAO,EAAE,qCAAqC;gBAC9C,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,0EAA0E;gBACnF,OAAO,EAAE,qCAAqC;gBAC9C,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,MAAM,gBAAgB,GAAG,MAAM,IAAA,uCAAuB,EAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACnG,IAAI,gBAAgB;YAAE,OAAO,gBAAgB,CAAC;QAC9C,MAAM,EAAE,GAAG,IAAA,8BAAc,EAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1E,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,OAAO;gBACL,OAAO,EAAE,iFAAiF;gBAC1F,OAAO,EAAE,mCAAmC;gBAC5C,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,GAAG;YACrB,GAAG,CAAC,SAAS,CAAC,OAAO;YACrB,GAAG,CAAC,SAAS,CAAC,OAAO;YACrB,GAAG,CAAC,SAAS,CAAC,OAAO;YACrB,GAAG,CAAC,SAAS,CAAC,QAAQ;YACtB,GAAG,CAAC,SAAS,CAAC,OAAO;SACtB,CAAC;QACF,OAAO,IAAA,gCAAgB,EAAC;YACtB,UAAU,EAAE,EAAE;YACd,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,IAAA,4BAAY,EAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,CAAC;YAC9E,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO;YAC1B,uEAAuE;YACvE,uEAAuE;YACvE,2DAA2D;YAC3D,SAAS,EAAE,cAAc;YACzB,UAAU,EAAE,cAAc;YAC1B,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,OAAO;YAClB,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,cAAc,EAAE,aAAa,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,qCAAqC;YACrF,cAAc,EAAE,qBAAqB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC3D,CAAC,CAAC;IACL,CAAC;CACF;;AAED,SAAS,aAAa,CAAC,KAAgC;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC7F,CAAC"}

package/dist/agent/tools/ReadFileTool.d.ts

@@ -0,0 +1,24 @@
+import { JSONValue } from '@priest-ai/core';
+import { AgentTool, ToolExecutionContext, ToolExecutionResult, ToolRiskAssessment } from '../ToolRegistry';
+export declare class ReadFileTool implements AgentTool {
+    readonly kind: 'read';
+    readonly definition: {
+        name: string;
+        description: string;
+        parameters: {
+            type: string;
+            properties: {
+                path: {
+                    type: string;
+                    description: string;
+                };
+            };
+            required: string[];
+        };
+    };
+    summarizeCall(input: Record<string, JSONValue>): string;
+    assessRisk(input: Record<string, JSONValue>, ctx: ToolExecutionContext): ToolRiskAssessment;
+    execute(input: Record<string, JSONValue>, ctx: ToolExecutionContext): Promise<ToolExecutionResult>;
+}
+export declare function formatBytes(bytes: number): string;
+//# sourceMappingURL=ReadFileTool.d.ts.map

package/dist/agent/tools/ReadFileTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReadFileTool.d.ts","sourceRoot":"","sources":["../../../src/agent/tools/ReadFileTool.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAO5C,OAAO,EACL,SAAS,EAGT,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AAEzB,qBAAa,YAAa,YAAW,SAAS;IAC5C,QAAQ,CAAC,IAAI,EAAG,MAAM,CAAU;IAChC,QAAQ,CAAC,UAAU;QACjB,IAAI;QACJ,WAAW;QAKX,UAAU;YACR,IAAI;YACJ,UAAU;gBACR,IAAI;oBAAI,IAAI;oBAAY,WAAW;;;YAErC,QAAQ;;MAEV;IAEF,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,MAAM,CAEtD;IAED,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,oBAAoB,GAAG,kBAAkB,CAa1F;IAEK,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA4BvG;CACF;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIjD"}

package/dist/agent/tools/ReadFileTool.js

@@ -0,0 +1,112 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ReadFileTool = void 0;
+exports.formatBytes = formatBytes;
+const fs = __importStar(require("fs"));
+const RunWorkspace_1 = require("../RunWorkspace");
+const ToolRegistry_1 = require("../ToolRegistry");
+class ReadFileTool {
+    kind = 'read';
+    definition = {
+        name: 'read_file',
+        description: [
+            'Read one local UTF-8 text file with bounded output, or list one known directory level.',
+            'When to use: inspect an exact path, read source or instructions before acting, or confirm a written file.',
+            'When NOT to use: broad content search, binary-file extraction, facts already available in context, or speculative filesystem exploration.',
+        ].join(' '),
+        parameters: {
+            type: 'object',
+            properties: {
+                path: { type: 'string', description: 'File path, absolute, relative to the working directory, or ~/ relative to the user home.' },
+            },
+            required: ['path'],
+        },
+    };
+    summarizeCall(input) {
+        return `read ${typeof input.path === 'string' ? input.path : '<missing path>'}`;
+    }
+    assessRisk(input, ctx) {
+        if (typeof input.path !== 'string' || !ctx.workspace)
+            return { escalate: false };
+        const target = (0, RunWorkspace_1.resolveToolPath)(input.path, ctx.workspace, ctx.cwd);
+        if ((0, RunWorkspace_1.isInsideAnyRoot)(target, ctx.workspace.readRoots))
+            return { escalate: false };
+        const nonPersistable = (0, RunWorkspace_1.isOutsideUserHome)(target, ctx.workspace) || (0, RunWorkspace_1.isSensitiveHostPath)(target, ctx.workspace);
+        return {
+            escalate: true,
+            persistable: !nonPersistable,
+            reason: nonPersistable
+                ? `reading ${target} is outside this run's persistent filesystem scope`
+                : `reading ${target} is outside this run's working and trusted folders`,
+            targetPath: target,
+        };
+    }
+    async execute(input, ctx) {
+        const target = (0, RunWorkspace_1.resolveToolPath)((0, ToolRegistry_1.requireStringInput)(input, 'path', 'read_file'), ctx.workspace, ctx.cwd);
+        let content;
+        try {
+            const stat = fs.statSync(target);
+            if (stat.isDirectory()) {
+                const entries = fs.readdirSync(target).sort((a, b) => a.localeCompare(b));
+                return {
+                    content: entries.join('\n'),
+                    summary: `listed ${entries.length} entries in ${target}`,
+                };
+            }
+            content = fs.readFileSync(target, 'utf-8');
+        }
+        catch (error) {
+            return {
+                content: `Could not read ${target}: ${error instanceof Error ? error.message : String(error)}`,
+                summary: `failed to read ${target}`,
+                isError: true,
+            };
+        }
+        return {
+            content: (0, ToolRegistry_1.capToolOutput)(content, ctx.outputLimit),
+            summary: `read ${formatBytes(Buffer.byteLength(content, 'utf-8'))} from ${target}`,
+        };
+    }
+}
+exports.ReadFileTool = ReadFileTool;
+function formatBytes(bytes) {
+    if (bytes < 1024)
+        return `${bytes}B`;
+    if (bytes < 1024 * 1024)
+        return `${(bytes / 1024).toFixed(1)}KB`;
+    return `${(bytes / (1024 * 1024)).toFixed(1)}MB`;
+}
+//# sourceMappingURL=ReadFileTool.js.map

package/dist/agent/tools/ReadFileTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReadFileTool.js","sourceRoot":"","sources":["../../../src/agent/tools/ReadFileTool.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,MAAY,EAAE,+BAAW;AAEzB,kDAKyB;AACzB,kDAOyB;AAEzB;IACW,IAAI,GAAG,MAAe,CAAC;IACvB,UAAU,GAAG;QACpB,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE;YACX,wFAAwF;YACxF,2GAA2G;YAC3G,2IAA2I;SAC5I,CAAC,IAAI,CAAC,GAAG,CAAC;QACX,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0FAA0F,EAAE;aAClI;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;KACF,CAAC;IAEF,aAAa,CAAC,KAAgC;QAC5C,OAAO,QAAQ,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAClF,CAAC;IAED,UAAU,CAAC,KAAgC,EAAE,GAAyB;QACpE,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,SAAS;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACjF,MAAM,MAAM,GAAG,IAAA,8BAAe,EAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,IAAA,8BAAe,EAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACjF,MAAM,cAAc,GAAG,IAAA,gCAAiB,EAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,IAAI,IAAA,kCAAmB,EAAC,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9G,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,CAAC,cAAc;YAC5B,MAAM,EAAE,cAAc;gBACpB,CAAC,CAAC,WAAW,MAAM,oDAAoD;gBACvE,CAAC,CAAC,WAAW,MAAM,oDAAoD;YACzE,UAAU,EAAE,MAAM;SACnB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAgC,EAAE,GAAyB;QACvE,MAAM,MAAM,GAAG,IAAA,8BAAe,EAC5B,IAAA,iCAAkB,EAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAC9C,GAAG,CAAC,SAAS,EACb,GAAG,CAAC,GAAG,CACR,CAAC;QACF,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1E,OAAO;oBACL,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC3B,OAAO,EAAE,UAAU,OAAO,CAAC,MAAM,eAAe,MAAM,EAAE;iBACzD,CAAC;YACJ,CAAC;YACD,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,kBAAkB,MAAM,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;gBAC9F,OAAO,EAAE,kBAAkB,MAAM,EAAE;gBACnC,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,OAAO;YACL,OAAO,EAAE,IAAA,4BAAa,EAAC,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC;YAChD,OAAO,EAAE,QAAQ,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,MAAM,EAAE;SACnF,CAAC;IACJ,CAAC;CACF;;AAED,qBAA4B,KAAa;IACvC,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,GAAG,KAAK,GAAG,CAAC;IACrC,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC"}

package/dist/agent/tools/ShellExecTool.d.ts

@@ -0,0 +1,23 @@
+import { JSONValue } from '@priest-ai/core';
+import { AgentTool, ToolExecutionContext, ToolExecutionResult, ToolRiskAssessment } from '../ToolRegistry';
+export declare class ShellExecTool implements AgentTool {
+    readonly kind: 'shell';
+    readonly definition: {
+        name: string;
+        description: string;
+        parameters: {
+            type: string;
+            properties: {
+                command: {
+                    type: string;
+                    description: string;
+                };
+            };
+            required: string[];
+        };
+    };
+    summarizeCall(input: Record<string, JSONValue>): string;
+    assessRisk(_input: Record<string, JSONValue>, ctx: ToolExecutionContext): ToolRiskAssessment;
+    execute(input: Record<string, JSONValue>, ctx: ToolExecutionContext): Promise<ToolExecutionResult>;
+}
+//# sourceMappingURL=ShellExecTool.d.ts.map

package/dist/agent/tools/ShellExecTool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShellExecTool.d.ts","sourceRoot":"","sources":["../../../src/agent/tools/ShellExecTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EACL,SAAS,EAET,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,iBAAiB,CAAC;AAEzB,qBAAa,aAAc,YAAW,SAAS;IAC7C,QAAQ,CAAC,IAAI,EAAG,OAAO,CAAU;IACjC,QAAQ,CAAC,UAAU;QACjB,IAAI;QACJ,WAAW;QAOX,UAAU;YACR,IAAI;YACJ,UAAU;gBACR,OAAO;oBAAI,IAAI;oBAAY,WAAW;;;YAExC,QAAQ;;MAEV;IAEF,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,MAAM,CAEtD;IAED,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,oBAAoB,GAAG,kBAAkB,CAkB3F;IAEK,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAwBvG;CACF"}

package/dist/agent/tools/ShellExecTool.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ShellExecTool = void 0;
+const ScopedProcess_1 = require("../ScopedProcess");
+const ToolRegistry_1 = require("../ToolRegistry");
+class ShellExecTool {
+    kind = 'shell';
+    definition = {
+        name: 'shell_exec',
+        description: [
+            'Run a shell command in the working directory and return stdout/stderr. Commands time out after 60 seconds.',
+            'When to use: run a focused test, build, formatter, program, or filesystem/process operation that dedicated tools cannot perform.',
+            'When NOT to use: read a known text file, write exact file content, access the network, install Python packages, or demonstrate unnecessary command execution.',
+            'The process sandbox can write only the working directory, configured trusted folders, and private run directories—even after the user approves execution.',
+            'For an explicit output file elsewhere, use write_file instead of shell redirection.',
+        ].join(' '),
+        parameters: {
+            type: 'object',
+            properties: {
+                command: { type: 'string', description: 'The shell command to run. ~ and $HOME refer to the user home; filesystem sandbox limits still apply.' },
+            },
+            required: ['command'],
+        },
+    };
+    summarizeCall(input) {
+        return `run \`${typeof input.command === 'string' ? input.command : '<missing command>'}\``;
+    }
+    assessRisk(_input, ctx) {
+        if (!ctx.workspace) {
+            return {
+                blocked: true,
+                escalate: false,
+                persistable: false,
+                reason: 'shell execution has no isolated run workspace',
+            };
+        }
+        if (ctx.workspace.externalRoots.length > 0) {
+            return {
+                escalate: true,
+                persistable: false,
+                reason: `this run can write an external root: ${ctx.workspace.externalRoots.join(', ')}`,
+                targetPath: ctx.workspace.externalRoots[0],
+            };
+        }
+        return { escalate: false };
+    }
+    async execute(input, ctx) {
+        const command = (0, ToolRegistry_1.requireStringInput)(input, 'command', 'shell_exec');
+        if (!ctx.workspace) {
+            return {
+                content: 'Marifold refused to run a shell command without an isolated run workspace.',
+                summary: `\`${command}\` blocked`,
+                isError: true,
+            };
+        }
+        if (/\b(?:python(?:3(?:\.\d+)?)?|pip3?|uv)\b/.test(command)) {
+            const environmentError = await (0, ScopedProcess_1.ensurePythonEnvironment)(ctx.workspace, ctx.outputLimit, ctx.signal);
+            if (environmentError)
+                return environmentError;
+        }
+        return (0, ScopedProcess_1.runScopedProcess)({
+            executable: '/bin/sh',
+            args: ['-c', command],
+            workspace: ctx.workspace,
+            cwd: ctx.workspace.cwd,
+            network: false,
+            outputLimit: ctx.outputLimit,
+            signal: ctx.signal,
+            successSummary: `ran \`${command}\` in isolated workspace`,
+            failureSummary: `\`${command}\` failed in isolated workspace`,
+        });
+    }
+}
+exports.ShellExecTool = ShellExecTool;
+//# sourceMappingURL=ShellExecTool.js.map

package/dist/agent/tools/ShellExecTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ShellExecTool.js","sourceRoot":"","sources":["../../../src/agent/tools/ShellExecTool.ts"],"names":[],"mappings":";;;AACA,oDAA6E;AAC7E,kDAMyB;AAEzB;IACW,IAAI,GAAG,OAAgB,CAAC;IACxB,UAAU,GAAG;QACpB,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE;YACX,4GAA4G;YAC5G,kIAAkI;YAClI,+JAA+J;YAC/J,2JAA2J;YAC3J,qFAAqF;SACtF,CAAC,IAAI,CAAC,GAAG,CAAC;QACX,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sGAAsG,EAAE;aACjJ;YACD,QAAQ,EAAE,CAAC,SAAS,CAAC;SACtB;KACF,CAAC;IAEF,aAAa,CAAC,KAAgC;QAC5C,OAAO,SAAS,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,IAAI,CAAC;IAC9F,CAAC;IAED,UAAU,CAAC,MAAiC,EAAE,GAAyB;QACrE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE,KAAK;gBACf,WAAW,EAAE,KAAK;gBAClB,MAAM,EAAE,+CAA+C;aACxD,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,KAAK;gBAClB,MAAM,EAAE,wCAAwC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACxF,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;aAC3C,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAgC,EAAE,GAAyB;QACvE,MAAM,OAAO,GAAG,IAAA,iCAAkB,EAAC,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QACnE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;YACnB,OAAO;gBACL,OAAO,EAAE,4EAA4E;gBACrF,OAAO,EAAE,KAAK,OAAO,YAAY;gBACjC,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,IAAI,yCAAyC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,MAAM,gBAAgB,GAAG,MAAM,IAAA,uCAAuB,EAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YACnG,IAAI,gBAAgB;gBAAE,OAAO,gBAAgB,CAAC;QAChD,CAAC;QACD,OAAO,IAAA,gCAAgB,EAAC;YACtB,UAAU,EAAE,SAAS;YACrB,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC;YACrB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,GAAG;YACtB,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,cAAc,EAAE,SAAS,OAAO,0BAA0B;YAC1D,cAAc,EAAE,KAAK,OAAO,iCAAiC;SAC9D,CAAC,CAAC;IACL,CAAC;CACF"}