@molecule/api-ai-tools 1.16.6 → 1.16.7

package/README.md

@@ -3,7 +3,7 @@ AUTO-GENERATED — DO NOT EDIT THIS FILE.
 Generated by `mlcl sync-docs` from the package's src/index.ts JSDoc + mlcl/registry.json.
 Edits here are overwritten on the next commit (molecule's pre-commit hook regenerates).
 To change this document, edit the module-level JSDoc in src/index.ts.
-Generated: 2026-11-05T22:20:21.693Z
+Generated: 2026-11-06T02:27:22.476Z
 -->
 
 # @molecule/api-ai-tools
@@ -1188,6 +1188,30 @@ interface ExecutionBackend {
   /** Write content to a file. Creates parent directories as needed. */
   writeFile(path: string, content: string): Promise<void>
 
+  /**
+   * Optional single-call path check and bounded text read for write/edit tools.
+   * `realPath` must be resolved before reading; never read outside `symlinkRoot`.
+   * Null `content` means missing; omit it for a native read (large/unreadable text).
+   * Returned text must match readFile's decoding and honor any host file-method wrappers.
+   * Implementations must use this backend's `run` so host command wrappers still apply.
+   */
+  readFileForUpdate?(
+    path: string,
+    symlinkRoot?: string,
+  ): Promise<{ realPath: string; content?: string | null }>
+
+  /**
+   * Optional write followed by the supplied parse command in one transport call.
+   * Null means unsupported BEFORE a successful write; the caller uses writeFile/run.
+   * Never retry a transport error after a write may have landed. After-write and
+   * file-change hooks use the ordinary path so their ordering before parsing stays intact.
+   */
+  writeFileAndCheck?(
+    path: string,
+    content: string,
+    command: string,
+  ): Promise<{ stdout: string; stderr: string; exitCode: number } | null>
+
   /** Delete a file. */
   deleteFile(path: string): Promise<void>
 
@@ -1710,8 +1734,8 @@ function createLocalBackend(projectRoot: string): ExecutionBackend
 
 #### `createSandboxBackend(sandbox, projectRoot)`
 
-Create an ExecutionBackend that delegates to a Docker sandbox instance.
-The sandbox.exec method is inherently safe — it runs inside an isolated Docker container.
+Create an ExecutionBackend that delegates to an isolated sandbox instance.
+The sandbox.exec method runs inside the provider's isolated environment.
 
 ```typescript
 function createSandboxBackend(sandbox: SandboxLike, projectRoot?: string): ExecutionBackend
@@ -5723,6 +5747,11 @@ Peer dependencies:
   to the model, and execute `catalog.loader` like any other tool. Loading only
   exposes schemas, never grants permission or runs a tool. Persist its loaded
   names with `onLoad` to keep them available across turns and compaction.
+- **Sandbox writes batch transport work.** The optional backend operations
+  `readFileForUpdate` and `writeFileAndCheck` combine path safety with the old-text
+  read, then the write with its parse check. Diff tracking and redaction checks
+  stay in the tools. Format and change hooks retain their ordering before parsing;
+  large files and backends without these operations use the native file APIs.
 - **Scope the tool set per agent** with `include`/`exclude` — a read-only agent
   should not receive `write_file`/`exec_command`.
 - Outputs are size-capped (`MAX_READ_SIZE`, `MAX_OUTPUT_SIZE`, …) and searches

package/dist/backends/sandbox-file-operations.d.ts

@@ -0,0 +1,11 @@
+/** Bounded file/command batching for sandbox transports; native file APIs remain the fallback. */
+import type { ExecutionBackend } from '../types.js';
+/**
+ * Batch sandbox filesystem work through the backend's current command wrapper.
+ * Keeping `this.run` preserves a host's environment and module-resolution prelude.
+ *
+ * @param native - Original file delegates; host overrides must not be bypassed.
+ * @returns Optional backend operations that retain native fallbacks for large files.
+ */
+export declare function sandboxFileOperations(native: Pick<ExecutionBackend, 'readFile' | 'writeFile'>): Pick<ExecutionBackend, 'readFileForUpdate' | 'writeFileAndCheck'>;
+//# sourceMappingURL=sandbox-file-operations.d.ts.map

package/dist/backends/sandbox-file-operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-file-operations.d.ts","sourceRoot":"","sources":["../../src/backends/sandbox-file-operations.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAElG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAenD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,GAAG,WAAW,CAAC,GACvD,IAAI,CAAC,gBAAgB,EAAE,mBAAmB,GAAG,mBAAmB,CAAC,CA2FnE"}

package/dist/backends/sandbox-file-operations.js

@@ -0,0 +1,100 @@
+/** Bounded file/command batching for sandbox transports; native file APIs remain the fallback. */
+import { shellQuote } from '../utilities.js';
+// envd may truncate command output; Docker also caps a shell argument at 128 KiB.
+// Keep both envelopes small, and accept a read only after its complete JSON arrives.
+const MAX_ENVELOPE = 24_000;
+const WRITE_MARK = 'MOL_FILE_WRITTEN\n';
+const NO_WRITE_MARK = 'MOL_FILE_NOT_WRITTEN\n';
+// Native text APIs may strip an initial UTF-8 BOM (Response.text), whereas
+// command envelopes preserve it. Keep that provider-specific decoding on the native path.
+const READ_SCRIPT = `const fs=require('fs'),cp=require('child_process');const p=process.argv[1],root=process.argv[2];let realPath='';if(root){const r=cp.spawnSync('readlink',['-f',p],{encoding:'utf8'});realPath=(r.status===0?r.stdout:p).trim()}let out={realPath};if(!root||!realPath||realPath===root||realPath.startsWith(root==='/'?'/':root+'/')){try{if(fs.statSync(p).size<=24000){const content=fs.readFileSync(p,'utf8');if(content.charCodeAt(0)!==65279&&Buffer.byteLength(JSON.stringify({realPath,content}))<=24000)out={realPath,content}}}catch(e){if(e.code==='ENOENT'||e.code==='ENOTDIR')out.content=null;/* other errors use the native API */}}process.stdout.write(JSON.stringify(out))`;
+const WRITE_SCRIPT = `const fs=require('fs'),cp=require('child_process'),path=require('path');const r=JSON.parse(Buffer.from(process.argv[1],'base64').toString('utf8'));try{fs.mkdirSync(path.dirname(r.path),{recursive:true});fs.writeFileSync(r.path,r.content,'utf8')}catch(e){process.stdout.write('MOL_FILE_NOT_WRITTEN\\n');process.exit(1)}process.stdout.write('MOL_FILE_WRITTEN\\n');const c=cp.spawnSync('sh',['-c',r.command],{cwd:path.dirname(r.path),encoding:'utf8',timeout:15000,maxBuffer:10*1024*1024});process.stdout.write(JSON.stringify({stdout:c.stdout||'',stderr:c.stderr||'',exitCode:c.status??1}))`;
+/**
+ * Batch sandbox filesystem work through the backend's current command wrapper.
+ * Keeping `this.run` preserves a host's environment and module-resolution prelude.
+ *
+ * @param native - Original file delegates; host overrides must not be bypassed.
+ * @returns Optional backend operations that retain native fallbacks for large files.
+ */
+export function sandboxFileOperations(native) {
+    let supported = false;
+    const { readFile, writeFile } = native;
+    return {
+        async readFileForUpdate(path, symlinkRoot) {
+            const q = shellQuote(path);
+            // The native API may resolve relative paths against a different base than exec.
+            if (!path.startsWith('/') || this.readFile !== readFile) {
+                if (!symlinkRoot)
+                    return { realPath: '' };
+                const checked = await this.run(`readlink -f ${q} 2>/dev/null || echo ${q}`, {
+                    timeout: 5000,
+                });
+                return { realPath: checked.stdout.trim() };
+            }
+            const result = await this.run(`node -e ${shellQuote(READ_SCRIPT)} ${q} ${shellQuote(symlinkRoot ?? '')}`, {
+                timeout: 5000,
+            });
+            try {
+                const body = JSON.parse(result.stdout);
+                if (body &&
+                    typeof body === 'object' &&
+                    'realPath' in body &&
+                    typeof body.realPath === 'string') {
+                    supported = true;
+                    if ('content' in body && (typeof body.content === 'string' || body.content === null))
+                        return { realPath: body.realPath, content: body.content };
+                    return { realPath: body.realPath };
+                }
+            }
+            catch (_error) {
+                // Missing Node or truncated/malformed stdout cannot supply file contents.
+            }
+            supported = false;
+            if (!symlinkRoot)
+                return { realPath: '' };
+            // Native path verification still decides safety when batching is unavailable.
+            const checked = await this.run(`readlink -f ${q} 2>/dev/null || echo ${q}`, { timeout: 5000 });
+            return { realPath: checked.stdout.trim() };
+        },
+        async writeFileAndCheck(path, content, command) {
+            if (!path.startsWith('/') || !supported || this.writeFile !== writeFile)
+                return null;
+            const request = Buffer.from(JSON.stringify({ path, content, command })).toString('base64');
+            if (request.length > MAX_ENVELOPE)
+                return null;
+            const result = await this.run(`node -e ${shellQuote(WRITE_SCRIPT)} ${shellQuote(request)}`, {
+                // The target's parent may be created by this very write. The child parse
+                // command enters it only after mkdir/write have succeeded.
+                cwd: this.projectRoot,
+                timeout: 20_000,
+            });
+            if (!result.stdout.startsWith(WRITE_MARK)) {
+                // No successful write acknowledged (e.g. no Node or a filesystem error).
+                // The native API retains its provider-specific error and directory behavior.
+                if (result.stdout.startsWith(NO_WRITE_MARK) ||
+                    (result.exitCode === 127 && /node.*not found/.test(result.stderr)))
+                    return null;
+                throw new Error('Sandbox file write returned no completion acknowledgement; not retrying an uncertain write');
+            }
+            try {
+                const check = JSON.parse(result.stdout.slice(WRITE_MARK.length));
+                if (typeof check.stdout === 'string' &&
+                    typeof check.stderr === 'string' &&
+                    typeof check.exitCode === 'number')
+                    return check;
+            }
+            catch (_error) {
+                // The write succeeded, but its check output was truncated. Recheck only;
+                // never replay an acknowledged write or a failed transport.
+            }
+            return this.run(command, {
+                cwd: path.slice(0, path.lastIndexOf('/')) || '/',
+                timeout: 15_000,
+            }).catch((_error) => {
+                // Like the ordinary post-write check, an unavailable parser adds no syntax note.
+                // The write was acknowledged above, so only the best-effort check failed here.
+                return { stdout: '', stderr: '', exitCode: 0 };
+            });
+        },
+    };
+}

package/dist/backends/sandbox.d.ts

@@ -14,12 +14,12 @@ interface SandboxLike {
         name: string;
         type: 'file' | 'directory';
     }>>;
-    /** Sandbox command execution — already sandboxed within Docker. */
+    /** Sandbox command execution — already isolated by the provider. */
     [key: string]: any;
 }
 /**
- * Create an ExecutionBackend that delegates to a Docker sandbox instance.
- * The sandbox.exec method is inherently safe — it runs inside an isolated Docker container.
+ * Create an ExecutionBackend that delegates to an isolated sandbox instance.
+ * The sandbox.exec method runs inside the provider's isolated environment.
  *
  * @param sandbox - A running Sandbox instance from `@molecule/api-code-sandbox`
  * @param projectRoot - Root directory inside the sandbox (default: '/workspace')

package/dist/backends/sandbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/backends/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAGnD,sFAAsF;AACtF,UAAU,WAAW;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACvC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvD,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAA;KAAE,CAAC,CAAC,CAAA;IACnF,mEAAmE;IAEnE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CACnB;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,WAAW,EACpB,WAAW,SAAe,GACzB,gBAAgB,CAmDlB"}
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../src/backends/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAInD,sFAAsF;AACtF,UAAU,WAAW;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACvC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvD,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAA;KAAE,CAAC,CAAC,CAAA;IACnF,oEAAoE;IAEpE,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;CACnB;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,WAAW,EACpB,WAAW,SAAe,GACzB,gBAAgB,CAuDlB"}

package/dist/backends/sandbox.js

@@ -5,16 +5,17 @@
  * @module
  */
 import { shellQuote } from '../utilities.js';
+import { sandboxFileOperations } from './sandbox-file-operations.js';
 /**
- * Create an ExecutionBackend that delegates to a Docker sandbox instance.
- * The sandbox.exec method is inherently safe — it runs inside an isolated Docker container.
+ * Create an ExecutionBackend that delegates to an isolated sandbox instance.
+ * The sandbox.exec method runs inside the provider's isolated environment.
  *
  * @param sandbox - A running Sandbox instance from `@molecule/api-code-sandbox`
  * @param projectRoot - Root directory inside the sandbox (default: '/workspace')
  * @returns A backend that proxies all filesystem calls into the sandbox.
  */
 export function createSandboxBackend(sandbox, projectRoot = '/workspace') {
-    return {
+    const backend = {
         projectRoot,
         readFile(path) {
             return sandbox.readFile(path);
@@ -54,9 +55,10 @@ export function createSandboxBackend(sandbox, projectRoot = '/workspace') {
             const fullCommand = budgetSeconds
                 ? `o=$(mktemp); e=$(mktemp); timeout -k 5 ${budgetSeconds} bash -c ${shellQuote(anchored)} > "$o" 2> "$e" < /dev/null; c=$?; cat "$o"; cat "$e" >&2; rm -f "$o" "$e"; exit $c`
                 : anchored;
-            // sandbox.exec is the Sandbox interface method — runs inside Docker, inherently sandboxed
+            // sandbox.exec is the Sandbox interface method — runs inside the provider's isolated environment
             const result = await sandbox.exec(fullCommand, { timeout: opts?.timeout });
             return { stdout: result.stdout, stderr: result.stderr, exitCode: result.exitCode };
         },
     };
+    return Object.assign(backend, typeof sandbox.exec === 'function' ? sandboxFileOperations(backend) : {});
 }

package/dist/index.d.ts

@@ -81,6 +81,11 @@
  *   to the model, and execute `catalog.loader` like any other tool. Loading only
  *   exposes schemas, never grants permission or runs a tool. Persist its loaded
  *   names with `onLoad` to keep them available across turns and compaction.
+ * - **Sandbox writes batch transport work.** The optional backend operations
+ *   `readFileForUpdate` and `writeFileAndCheck` combine path safety with the old-text
+ *   read, then the write with its parse check. Diff tracking and redaction checks
+ *   stay in the tools. Format and change hooks retain their ordering before parsing;
+ *   large files and backends without these operations use the native file APIs.
  * - **Scope the tool set per agent** with `include`/`exclude` — a read-only agent
  *   should not receive `write_file`/`exec_command`.
  * - Outputs are size-capped (`MAX_READ_SIZE`, `MAX_OUTPUT_SIZE`, …) and searches

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6IG;AAEH,cAAc,qBAAqB,CAAA;AACnC,cAAc,uBAAuB,CAAA;AACrC,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,uBAAuB,CAAA;AACrC,cAAc,cAAc,CAAA;AAC5B,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,uBAAuB,CAAA;AACrC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,yBAAyB,CAAA;AACvC,cAAc,wBAAwB,CAAA;AACtC,cAAc,cAAc,CAAA;AAC5B,cAAc,qBAAqB,CAAA;AACnC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,YAAY,CAAA;AAC1B,cAAc,sBAAsB,CAAA;AACpC,cAAc,YAAY,CAAA;AAC1B,cAAc,gBAAgB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkJG;AAEH,cAAc,qBAAqB,CAAA;AACnC,cAAc,uBAAuB,CAAA;AACrC,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,uBAAuB,CAAA;AACrC,cAAc,cAAc,CAAA;AAC5B,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,uBAAuB,CAAA;AACrC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,oBAAoB,CAAA;AAClC,cAAc,yBAAyB,CAAA;AACvC,cAAc,wBAAwB,CAAA;AACtC,cAAc,cAAc,CAAA;AAC5B,cAAc,qBAAqB,CAAA;AACnC,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,mBAAmB,CAAA;AACjC,cAAc,YAAY,CAAA;AAC1B,cAAc,sBAAsB,CAAA;AACpC,cAAc,YAAY,CAAA;AAC1B,cAAc,gBAAgB,CAAA"}

package/dist/index.js

@@ -81,6 +81,11 @@
  *   to the model, and execute `catalog.loader` like any other tool. Loading only
  *   exposes schemas, never grants permission or runs a tool. Persist its loaded
  *   names with `onLoad` to keep them available across turns and compaction.
+ * - **Sandbox writes batch transport work.** The optional backend operations
+ *   `readFileForUpdate` and `writeFileAndCheck` combine path safety with the old-text
+ *   read, then the write with its parse check. Diff tracking and redaction checks
+ *   stay in the tools. Format and change hooks retain their ordering before parsing;
+ *   large files and backends without these operations use the native file APIs.
  * - **Scope the tool set per agent** with `include`/`exclude` — a read-only agent
  *   should not receive `write_file`/`exec_command`.
  * - Outputs are size-capped (`MAX_READ_SIZE`, `MAX_OUTPUT_SIZE`, …) and searches

package/dist/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AA2B9C,OAAO,EAIL,KAAK,mBAAmB,EAEzB,MAAM,wBAAwB,CAAA;AAsC/B;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,GAAG,KAAK,CAAC,EACnD,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAmB9B;AAuLD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAahG;AAkeD,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAkInE;;;GAGG;AACH,eAAO,MAAM,iBAAiB,QAEA,CAAA;AAE9B;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,wBAAwB,QAI6C,CAAA;AA0DlF;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUhE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGtE;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,qBAAqB;IACpC,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,8FAA8F;IAC9F,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC5B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAA;AAoBpF;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,CAAC,GACxE,qBAAqB,CAkBvB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,qBAAqB,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiCxB;AA2GD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,eAAe,GAAG,MAAM,EAAE,CA0pGxF"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AA2B9C,OAAO,EAIL,KAAK,mBAAmB,EAEzB,MAAM,wBAAwB,CAAA;AAsC/B;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,GAAG,KAAK,CAAC,EACnD,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAmB9B;AAuLD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAahG;AAkeD,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAkInE;;;GAGG;AACH,eAAO,MAAM,iBAAiB,QAEA,CAAA;AAE9B;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,wBAAwB,QAI6C,CAAA;AA0DlF;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUhE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGtE;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,qBAAqB;IACpC,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,8FAA8F;IAC9F,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;CAC5B;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAA;AAoBpF;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,GAAG,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,CAAC,GACxE,qBAAqB,CAkBvB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,MAAM,EACZ,KAAK,CAAC,EAAE,qBAAqB,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiCxB;AA2GD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,eAAe,GAAG,MAAM,EAAE,CA0sGxF"}

package/dist/tools.js

@@ -1145,13 +1145,14 @@ export function buildTools(backend, config) {
      * is ~50 ms; the executor sees the exact line while the edit is still in
      * front of it.
      */
-    async function syntaxErrorAfterWrite(path) {
+    async function syntaxErrorAfterWrite(path, checked) {
         const command = parseCheckCommand(path);
         if (!command)
             return {};
-        const result = await backend
-            .run(command, { cwd: path.slice(0, path.lastIndexOf('/')) || '/', timeout: 15_000 })
-            .catch(() => null);
+        const result = checked ??
+            (await backend
+                .run(command, { cwd: path.slice(0, path.lastIndexOf('/')) || '/', timeout: 15_000 })
+                .catch(() => null));
         const problem = result ? parseCheckProblem(result) : null;
         // JSX in a `.ts` file parses as a type assertion and fails on the first
         // attribute — `Expected ">" but found "className"` — which does not say the
@@ -1232,7 +1233,7 @@ export function buildTools(backend, config) {
      * @param path - Candidate filesystem path after `resolve()`.
      * @returns An error message when unsafe, otherwise `null`.
      */
-    async function checkSymlink(path) {
+    async function checkSymlink(path, probe) {
         if (!symlinkGuards)
             return null;
         // The retry budget is failure-aware. A plain slow answer gets ONE quick retry
@@ -1249,7 +1250,9 @@ export function buildTools(backend, config) {
             attempts++;
             const started = Date.now();
             try {
-                const result = await backend.run(`readlink -f ${shellQuote(path)} 2>/dev/null || echo ${shellQuote(path)}`, { timeout: 5000 });
+                const result = probe
+                    ? await probe()
+                    : await backend.run(`readlink -f ${shellQuote(path)} 2>/dev/null || echo ${shellQuote(path)}`, { timeout: 5000 });
                 const realPath = result.stdout.trim();
                 if (realPath &&
                     realPath !== root &&
@@ -1286,6 +1289,37 @@ export function buildTools(backend, config) {
         return (`Unable to verify path safety: the sandbox's command channel failed (${err?.name ?? 'Error'}: ${String(err?.message ?? err).slice(0, 160)}), ` +
             'so the path was refused to stay safe. Retry the call; if every file tool fails this way, the sandbox needs a restart.');
     }
+    /** Guard and old-text read share a transport when the backend offers it. */
+    async function readBeforeWrite(path) {
+        let content;
+        if (!backend.readFileForUpdate)
+            return { error: await checkSymlink(path) };
+        const probe = async () => {
+            const result = await backend.readFileForUpdate(path, symlinkGuards ? root : undefined);
+            content = result.content;
+            return { stdout: result.realPath };
+        };
+        if (symlinkGuards)
+            return { error: await checkSymlink(path, probe), content };
+        try {
+            await probe();
+        }
+        catch (_error) {
+            // No safety check was requested; a failed optimization leaves the native read in charge.
+        }
+        return { error: null, content };
+    }
+    /** A formatter needs its original write/hook/reread/check ordering. */
+    async function writeAndCheck(path, content) {
+        const command = parseCheckCommand(path);
+        if (!onAfterWrite && !onFileChange && command && backend.writeFileAndCheck) {
+            const result = await backend.writeFileAndCheck(path, content, command);
+            if (result !== null)
+                return result;
+        }
+        await backend.writeFile(path, content);
+        return null;
+    }
     /**
      * Strip control characters and optionally redact secrets from tool output.
      *
@@ -1968,13 +2002,13 @@ export function buildTools(backend, config) {
                 return {
                     error: `Content too large (${Math.round(content.length / 1024)}KB). Maximum is ${MAX_WRITE_SIZE / 1024 / 1024}MB.`,
                 };
-            const symlinkErr = await checkSymlink(path);
-            if (symlinkErr)
-                return { error: symlinkErr };
+            const before = await readBeforeWrite(path);
+            if (before.error)
+                return { error: before.error };
             try {
                 let oldContent = null;
                 try {
-                    oldContent = await backend.readFile(path);
+                    oldContent = before.content !== undefined ? before.content : await backend.readFile(path);
                 }
                 catch (_error) {
                     /* file doesn't exist yet — oldContent stays null */
@@ -1988,7 +2022,7 @@ export function buildTools(backend, config) {
                 }
                 if (onFileDiff)
                     onFileDiff({ path, oldContent, newContent: content });
-                await backend.writeFile(path, content);
+                const checked = await writeAndCheck(path, content);
                 if (onAfterWrite)
                     await onAfterWrite(path).catch(() => { });
                 // The text on disk is the text just written unless an after-write hook (a formatter)
@@ -2011,7 +2045,7 @@ export function buildTools(backend, config) {
                     diff,
                     totalLines: countLines(finalContent),
                     ...(echo !== null ? { excerpt: sanitizeFileContent(echo, path) } : {}),
-                    ...(await syntaxErrorAfterWrite(path)),
+                    ...(await syntaxErrorAfterWrite(path, checked)),
                 };
             }
             catch (e) {
@@ -2067,11 +2101,11 @@ export function buildTools(backend, config) {
                 return {
                     error: 'No replacements provided. Use { replacements: [{ old_string, new_string }] } or { old_string, new_string }.',
                 };
-            const symlinkErr = await checkSymlink(path);
-            if (symlinkErr)
-                return { error: symlinkErr };
+            const before = await readBeforeWrite(path);
+            if (before.error)
+                return { error: before.error };
             try {
-                let content = await backend.readFile(path);
+                let content = before.content ?? (await backend.readFile(path));
                 // A transiently-empty read here made every old_string "not found", which
                 // steers the model to re-read and then rewrite a file it never saw. Same
                 // verification as read_file: empty is only believed once it is confirmed.
@@ -2450,7 +2484,7 @@ export function buildTools(backend, config) {
                 }
                 if (onFileDiff)
                     onFileDiff({ path, oldContent, newContent: content });
-                await backend.writeFile(path, content);
+                const checked = await writeAndCheck(path, content);
                 if (onAfterWrite)
                     await onAfterWrite(path).catch(() => { });
                 if (onFileChange)
@@ -2483,7 +2517,7 @@ export function buildTools(backend, config) {
                     r.old_string.endsWith('\n') &&
                     r.new_string !== '' &&
                     !r.new_string.endsWith('\n'));
-                const syntax = await syntaxErrorAfterWrite(path);
+                const syntax = await syntaxErrorAfterWrite(path, checked);
                 // A parse error and a dropped line break are two OBSERVATIONS, not one
                 // accident. A join only sometimes breaks the syntax (same-line JSX siblings
                 // parse), and the diagnostic usually comes from something else in the same

package/dist/types.d.ts

@@ -22,6 +22,28 @@ export interface ExecutionBackend {
     readFile(path: string): Promise<string>;
     /** Write content to a file. Creates parent directories as needed. */
     writeFile(path: string, content: string): Promise<void>;
+    /**
+     * Optional single-call path check and bounded text read for write/edit tools.
+     * `realPath` must be resolved before reading; never read outside `symlinkRoot`.
+     * Null `content` means missing; omit it for a native read (large/unreadable text).
+     * Returned text must match readFile's decoding and honor any host file-method wrappers.
+     * Implementations must use this backend's `run` so host command wrappers still apply.
+     */
+    readFileForUpdate?(path: string, symlinkRoot?: string): Promise<{
+        realPath: string;
+        content?: string | null;
+    }>;
+    /**
+     * Optional write followed by the supplied parse command in one transport call.
+     * Null means unsupported BEFORE a successful write; the caller uses writeFile/run.
+     * Never retry a transport error after a write may have landed. After-write and
+     * file-change hooks use the ordinary path so their ordering before parsing stays intact.
+     */
+    writeFileAndCheck?(path: string, content: string, command: string): Promise<{
+        stdout: string;
+        stderr: string;
+        exitCode: number;
+    } | null>;
     /** Delete a file. */
     deleteFile(path: string): Promise<void>;
     /** List entries in a directory. */

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yFAAyF;IACzF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAE5B;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;IAEzB,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAEvC,qEAAqE;IACrE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvD,qBAAqB;IACrB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvC,mCAAmC;IACnC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAA;KAAE,CAAC,CAAC,CAAA;IAEnF;;;OAGG;IACH,GAAG,CACD,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QACL,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB;;;;;WAKG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,GACA,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACjE;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,0FAA0F;IAC1F,IAAI,EAAE,MAAM,CAAA;IACZ;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACxD;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAElB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAElB,wEAAwE;IACxE,UAAU,CAAC,EAAE,OAAO,CAAA;IAEpB,2FAA2F;IAC3F,aAAa,CAAC,EAAE,OAAO,CAAA;IAEvB,iFAAiF;IACjF,aAAa,CAAC,EAAE,OAAO,CAAA;IAEvB,2FAA2F;IAC3F,sBAAsB,CAAC,EAAE,OAAO,CAAA;IAEhC;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,CAAA;IAE1E;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IAEtB;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IAExB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IAErB;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;IAE1D;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAE3B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE7B;;;;;;;;;;;;;;OAcG;IACH,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAA;IAEhC;;;;;;;;;;;OAWG;IACH,kBAAkB,CAAC,EAAE,MAAM,SAAS,MAAM,EAAE,CAAA;IAE5C;;;;;;;;;;;;;;OAcG;IACH,gBAAgB,CAAC,EAAE,CACjB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,KACR,OAAO,CAAC,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IAE3E;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IAE1F;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IAEjF,uGAAuG;IACvG,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAE9C,yEAAyE;IACzE,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAA;IAE3C,wFAAwF;IACxF,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAA;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAA;IACxC,IAAI,EAAE,MAAM,CAAA;CACb;AAED,+DAA+D;AAC/D,MAAM,WAAW,UAAU;IACzB,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,yBAAyB;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAA;IAEjB,yBAAyB;IACzB,WAAW,EAAE,MAAM,CAAA;IAEnB,+DAA+D;IAC/D,KAAK,EAAE,MAAM,EAAE,CAAA;IAEf,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IAEjB,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,UAAU,EAAE,CAAA;IAE/B,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;CAC1B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yFAAyF;IACzF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAE5B;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;IAEzB,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAEvC,qEAAqE;IACrE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvD;;;;;;OAMG;IACH,iBAAiB,CAAC,CAChB,IAAI,EAAE,MAAM,EACZ,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAA;IAEzD;;;;;OAKG;IACH,iBAAiB,CAAC,CAChB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IAEvE,qBAAqB;IACrB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvC,mCAAmC;IACnC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAA;KAAE,CAAC,CAAC,CAAA;IAEnF;;;OAGG;IACH,GAAG,CACD,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;QACL,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB;;;;;WAKG;QACH,QAAQ,CAAC,EAAE,MAAM,CAAA;KAClB,GACA,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACjE;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,0FAA0F;IAC1F,IAAI,EAAE,MAAM,CAAA;IACZ;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CACxD;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAElB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAElB,wEAAwE;IACxE,UAAU,CAAC,EAAE,OAAO,CAAA;IAEpB,2FAA2F;IAC3F,aAAa,CAAC,EAAE,OAAO,CAAA;IAEvB,iFAAiF;IACjF,aAAa,CAAC,EAAE,OAAO,CAAA;IAEvB,2FAA2F;IAC3F,sBAAsB,CAAC,EAAE,OAAO,CAAA;IAEhC;;;;;;;;;;;OAWG;IACH,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,GAAG,SAAS,CAAA;IAE1E;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IAEtB;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IAExB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IAErB;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;IAE1D;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAE3B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAE7B;;;;;;;;;;;;;;OAcG;IACH,gBAAgB,CAAC,EAAE,MAAM,OAAO,CAAA;IAEhC;;;;;;;;;;;OAWG;IACH,kBAAkB,CAAC,EAAE,MAAM,SAAS,MAAM,EAAE,CAAA;IAE5C;;;;;;;;;;;;;;OAcG;IACH,gBAAgB,CAAC,EAAE,CACjB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,KACR,OAAO,CAAC,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IAE3E;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IAE1F;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAA;IAEjF,uGAAuG;IACvG,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAE9C,yEAAyE;IACzE,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAA;IAE3C,wFAAwF;IACxF,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAA;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAA;IACxC,IAAI,EAAE,MAAM,CAAA;CACb;AAED,+DAA+D;AAC/D,MAAM,WAAW,UAAU;IACzB,kBAAkB;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,yBAAyB;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAA;IAEjB,yBAAyB;IACzB,WAAW,EAAE,MAAM,CAAA;IAEnB,+DAA+D;IAC/D,KAAK,EAAE,MAAM,EAAE,CAAA;IAEf,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IAEjB,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,UAAU,EAAE,CAAA;IAE/B,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;CAC1B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@molecule/api-ai-tools",
-  "version": "1.16.6",
+  "version": "1.16.7",
   "description": "Shared AI agent tools with backend abstraction for sandbox and local execution",
   "type": "module",
   "main": "dist/index.js",