@nestm/storage 0.1.0-alpha.6 → 0.1.0-alpha.8

package/SECURITY.md

@@ -46,3 +46,72 @@ the validated `head` or with an immutable provider version. Ordinary `copy`
 does not protect against a staging-key replay between validation and copy.
 Conditional promotion keeps the staging source; delete it only after the
 application's metadata transaction commits.
+
+## Workspace security boundary
+
+`StorageWorkspace` is a narrowing capability for storage operations. Construct
+it from trusted application context, keep the underlying `StorageClient` and
+mount prefix private, and pass only the workspace or its AI tool set to
+untrusted agent code. A tenant id, run id, prefix, provider cursor, snapshot id,
+or fork id supplied by a model is not a safe mount coordinate.
+
+The workspace accepts only canonical mount-relative POSIX paths and rechecks
+every key returned by a driver before unscoping it. Pagination cursors are bound
+to the store, normalized physical prefix, stable mount identity, trusted
+tenant/workspace scope, operation, complete effective limits, normalized query,
+and expiry. Provider continuations and prefixes stay inside the encrypted or
+server-side payload. Both layers are non-consuming: a durable opaque token
+store must read rather than consume a record, and an embedded provider cursor
+must remain replayable through a fresh compatible driver against the same
+backend namespace while that provider cursor remains valid and available.
+Provider cursors cannot depend on process-local state; an adapter for a
+consuming or instance-bound backend token must materialize a stable continuation
+before exposing paginated `StorageDriver.list` results.
+
+Under unchanged provider-visible state, cursors are reusable while their
+provider continuation remains valid and available. The authenticated expiry is
+an authorization ceiling, not a guarantee of provider-token lifetime, snapshot
+isolation, provider/network availability, or valid credentials. Provider
+invalidation remains an operational failure, and concurrent mutations remain
+subject to provider ordering, duplicate, and omission semantics.
+
+Production pagination must configure either the built-in AES-256-GCM codec with
+a dedicated shared 32-byte key ring or an authenticated shared durable token
+store. Do not reuse an authentication, session, storage-provider, or encryption
+key from another purpose. All replicas must use the same stable identities and
+key ring, compatible driver configuration, and logical backend namespace. New
+cursors use the active key id; retain prior keys for at least the maximum cursor
+TTL during rotation. Dropping a key, changing a binding field, or restarting
+with a different ephemeral key intentionally invalidates outstanding cursors.
+Tokens and decoded payloads are bounded, and malformed, altered, expired,
+cross-query, cross-operation, cross-workspace, and cross-store cursors fail
+closed.
+
+Permissions, byte limits, result limits, and conditional mutation preconditions
+are enforced inside the capability; tool omission and user approval are
+additional workflow controls, not the authorization boundary.
+
+Conditional mutations can still have an ambiguous outcome when a remote
+provider commits and then loses or violates its response, or when a configured
+post-operation plugin fails after the driver has committed. The API fails
+closed in that case: inspect the logical destination and reconcile it before
+retrying. Create-only and ETag preconditions prevent a blind retry from
+silently overwriting a different object, but they cannot make a multi-object
+move transactionally atomic.
+
+This guarantee covers calls made through `StorageWorkspace`. It does not
+confine arbitrary `node:fs`, shell, subprocess, or native-code access in the
+same process. A coding harness with built-in shell or filesystem tools must run
+inside an OS sandbox (container, VM, or equivalent) that exposes only a
+materialized workspace. Setting `cwd` to a workspace directory is not
+isolation.
+
+For local filesystem storage, use a dedicated service-owned root and do not let
+another untrusted process mutate its directory tree concurrently. High-level
+Node filesystem checks reject symlinks and hard-linked object files in existing
+workspace read and mutation paths, including metadata sidecars, but cannot
+provide a race-proof boundary against an actor that can replace path components
+between validation and use. For that threat model, mount only the workspace
+into a separate UID/container/VM and synchronize approved results back through
+storage. The local adapter also commits the body and metadata sidecar as two
+files; a process crash between their atomic renames can require reconciliation.

package/dist/ai-sdk/ai-sdk-workspace-tools.d.ts

@@ -0,0 +1,74 @@
+import { type JSONValue, type ToolSet } from 'ai';
+import { type StorageWorkspace } from '../workspace/index.js';
+import { type StorageErrorCode as StorageErrorCodeValue } from '../storage.error.js';
+export declare const AI_SDK_WORKSPACE_TOOL_NAMES: readonly ['workspace_list', 'workspace_stat', 'workspace_read_file', 'workspace_search', 'workspace_write_file', 'workspace_copy_file', 'workspace_move_file', 'workspace_delete_file'];
+export type AiSdkWorkspaceToolName = (typeof AI_SDK_WORKSPACE_TOOL_NAMES)[number];
+export type AiSdkWorkspaceMutationToolName = Extract<AiSdkWorkspaceToolName, 'workspace_write_file' | 'workspace_copy_file' | 'workspace_move_file' | 'workspace_delete_file'>;
+/**
+ * Approval policy for mutation tools. An omitted entry defaults to requiring
+ * approval, matching an omitted policy.
+ */
+export type AiSdkWorkspaceApprovalConfig = boolean | Partial<Record<AiSdkWorkspaceMutationToolName, boolean>>;
+export interface AiSdkWorkspaceCreateConflict {
+    /** The logical destination inside the mounted workspace. */
+    readonly path: string;
+}
+export type AiSdkWorkspaceCreateConflictMapper<Result extends JSONValue> = (conflict: AiSdkWorkspaceCreateConflict) => PromiseLike<Result> | Result;
+export interface CreateAiSdkWorkspaceToolsOptions<CreateConflictResult extends JSONValue = never> {
+    /** The already-mounted, policy-enforcing workspace exposed to the tools. */
+    workspace: StorageWorkspace;
+    /**
+     * Optional tighter read ceiling. Values above the workspace ceiling are
+     * clamped; the model cannot choose or raise this value.
+     */
+    maxReadBytes?: number;
+    /** Mutation tools require approval by default. */
+    requireApproval?: AiSdkWorkspaceApprovalConfig;
+    /**
+     * Maps an atomic create collision to an application result. When omitted,
+     * the collision remains an AiSdkWorkspaceToolError like every other storage
+     * failure. Replace conflicts are never mapped by this hook.
+     */
+    mapCreateConflict?: AiSdkWorkspaceCreateConflictMapper<CreateConflictResult>;
+}
+export type AiSdkWorkspaceToolErrorCode = StorageErrorCodeValue;
+/**
+ * Safe error exposed at the AI tool boundary. It deliberately carries no
+ * provider error, storage key, mount prefix, store name, or cause.
+ */
+export declare class AiSdkWorkspaceToolError extends Error {
+    readonly code: AiSdkWorkspaceToolErrorCode;
+    constructor(code: AiSdkWorkspaceToolErrorCode);
+}
+export interface AiSdkWorkspaceFileResult {
+    kind: 'file';
+    path: string;
+    name: string;
+    size: number;
+    contentType: string;
+    etag?: string;
+    lastModified?: string;
+}
+export interface AiSdkWorkspaceDirectoryResult {
+    kind: 'directory';
+    path: string;
+    name: string;
+}
+export type AiSdkWorkspaceEntryResult = AiSdkWorkspaceFileResult | AiSdkWorkspaceDirectoryResult;
+export interface AiSdkWorkspaceTextFileResult extends AiSdkWorkspaceFileResult {
+    text: string;
+}
+export interface AiSdkWorkspacePageResult {
+    entries: AiSdkWorkspaceEntryResult[];
+    cursor?: string;
+}
+/**
+ * Creates Vercel AI SDK tools backed only by a mounted StorageWorkspace.
+ *
+ * A tool is omitted unless the workspace grants its required permission.
+ * The workspace remains the enforcing boundary if a retained tool reference
+ * is invoked after further narrowing.
+ */
+export declare function createAiSdkWorkspaceTools<CreateConflictResult extends JSONValue = never>({ workspace, maxReadBytes: requestedMaxReadBytes, requireApproval, mapCreateConflict, }: CreateAiSdkWorkspaceToolsOptions<CreateConflictResult>): ToolSet;
+export declare function isAiSdkWorkspaceMutationToolName(value: string): value is AiSdkWorkspaceMutationToolName;
+//# sourceMappingURL=ai-sdk-workspace-tools.d.ts.map

package/dist/ai-sdk/ai-sdk-workspace-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-sdk-workspace-tools.d.ts","sourceRoot":"","sources":["../../src/ai-sdk/ai-sdk-workspace-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,SAAS,EAAE,KAAK,OAAO,EAAE,MAAM,IAAI,CAAC;AAGxD,OAAO,EAGL,KAAK,gBAAgB,EAItB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAGL,KAAK,gBAAgB,IAAI,qBAAqB,EAC/C,MAAM,qBAAqB,CAAC;AAG7B,eAAO,MAAM,2BAA2B,YACtC,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,CACf,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/C,MAAM,MAAM,8BAA8B,GAAG,OAAO,CAClD,sBAAsB,EACpB,sBAAsB,GACtB,qBAAqB,GACrB,qBAAqB,GACrB,uBAAuB,CAC1B,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,4BAA4B,GACtC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,8BAA8B,EAAE,OAAO,CAAC,CAAC,CAAC;AAErE,MAAM,WAAW,4BAA4B;IAC3C,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,kCAAkC,CAAC,MAAM,SAAS,SAAS,IAAI,CACzE,QAAQ,EAAE,4BAA4B,KACnC,WAAW,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;AAElC,MAAM,WAAW,gCAAgC,CAC/C,oBAAoB,SAAS,SAAS,GAAG,KAAK;IAE9C,4EAA4E;IAC5E,SAAS,EAAE,gBAAgB,CAAC;IAC5B;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kDAAkD;IAClD,eAAe,CAAC,EAAE,4BAA4B,CAAC;IAC/C;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,kCAAkC,CAAC,oBAAoB,CAAC,CAAC;CAC9E;AAED,MAAM,MAAM,2BAA2B,GAAG,qBAAqB,CAAC;AAsBhE;;;GAGG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,EAAE,2BAA2B,CAAC;IAE3C,YAAY,IAAI,EAAE,2BAA2B,EAI5C;CACF;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,6BAA6B;IAC5C,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,yBAAyB,GACnC,wBAAwB,GAAG,6BAA6B,CAAC;AAE3D,MAAM,WAAW,4BAA6B,SAAQ,wBAAwB;IAC5E,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,yBAAyB,EAAE,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AA2OD;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,oBAAoB,SAAS,SAAS,GAAG,KAAK,EAC9C,EACA,SAAS,EACT,YAAY,EAAE,qBAAqB,EACnC,eAAsB,EACtB,iBAAiB,GAClB,EAAE,gCAAgC,CAAC,oBAAoB,CAAC,GAAG,OAAO,CA6SlE;AAED,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,MAAM,GACZ,KAAK,IAAI,8BAA8B,CAEzC"}

package/dist/ai-sdk/ai-sdk-workspace-tools.js

@@ -0,0 +1,414 @@
+import { tool } from 'ai';
+import { z } from 'zod';
+import { STORAGE_WORKSPACE_MAX_CURSOR_BYTES, isStorageWorkspaceError, } from '../workspace/index.js';
+import { StorageErrorCode, isStorageError, } from '../storage.error.js';
+import { isCanonicalStorageEtag } from '../storage-etag.js';
+export const AI_SDK_WORKSPACE_TOOL_NAMES = [
+    'workspace_list',
+    'workspace_stat',
+    'workspace_read_file',
+    'workspace_search',
+    'workspace_write_file',
+    'workspace_copy_file',
+    'workspace_move_file',
+    'workspace_delete_file',
+];
+const SAFE_ERROR_MESSAGES = {
+    [StorageErrorCode.NOT_FOUND]: 'The requested workspace path was not found.',
+    [StorageErrorCode.UNAUTHORIZED]: 'This operation is not permitted in the workspace.',
+    [StorageErrorCode.CONFLICT]: 'The operation conflicts with current workspace state. Refresh metadata and retry with the current ETag or a new destination.',
+    [StorageErrorCode.READ_ONLY]: 'This operation is not permitted in the workspace.',
+    [StorageErrorCode.INVALID_ARGUMENT]: 'The workspace tool input was rejected.',
+    [StorageErrorCode.NOT_SUPPORTED]: 'This workspace operation is not supported by the configured storage.',
+    [StorageErrorCode.ABORTED]: 'The workspace operation was aborted.',
+    [StorageErrorCode.TIMEOUT]: 'The workspace operation timed out.',
+    [StorageErrorCode.LIMIT_EXCEEDED]: 'The workspace operation exceeded a configured limit.',
+    [StorageErrorCode.PROVIDER]: 'The workspace operation failed.',
+};
+/**
+ * Safe error exposed at the AI tool boundary. It deliberately carries no
+ * provider error, storage key, mount prefix, store name, or cause.
+ */
+export class AiSdkWorkspaceToolError extends Error {
+    code;
+    constructor(code) {
+        super(SAFE_ERROR_MESSAGES[code]);
+        this.name = 'AiSdkWorkspaceToolError';
+        this.code = code;
+    }
+}
+const mutationToolNames = new Set([
+    'workspace_write_file',
+    'workspace_copy_file',
+    'workspace_move_file',
+    'workspace_delete_file',
+]);
+const utf8Encoder = new TextEncoder();
+const forbiddenUnicodeCharacter = /\p{C}/u;
+const workspaceCursor = /^[A-Za-z0-9._-]+$/u;
+const windowsDeviceName = /^(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\..*)?$/iu;
+function isLogicalPath(value) {
+    if (value.length === 0 ||
+        value.startsWith('/') ||
+        value.endsWith('/') ||
+        value !== value.normalize('NFC') ||
+        value.includes('\\') ||
+        forbiddenUnicodeCharacter.test(value)) {
+        return false;
+    }
+    return value
+        .split('/')
+        .every((segment) => segment.length > 0 &&
+        segment !== '.' &&
+        segment !== '..' &&
+        !segment.includes(':') &&
+        !segment.endsWith('.') &&
+        !segment.endsWith(' ') &&
+        !windowsDeviceName.test(segment));
+}
+function logicalPath(label, maxBytes) {
+    return z
+        .string()
+        .min(1)
+        .refine(isLogicalPath, {
+        message: `${label} must be a portable, NFC-normalized, relative POSIX workspace path.`,
+    })
+        .refine((value) => utf8Encoder.encode(value).byteLength <= maxBytes, {
+        message: `${label} exceeds the ${maxBytes}-byte workspace path limit.`,
+    })
+        .describe(`${label}. Use an NFC-normalized relative POSIX path inside the mounted workspace. Empty, dot, parent, colon, trailing dot or space, and Windows reserved device segments are forbidden.`);
+}
+function searchQuery(maxBytes) {
+    return z
+        .string()
+        .min(1)
+        .refine((value) => !value.includes('\\') && !forbiddenUnicodeCharacter.test(value), { message: 'Search query contains forbidden characters.' })
+        .refine((value) => utf8Encoder.encode(value).byteLength <= maxBytes, {
+        message: `Search query exceeds the ${maxBytes}-byte workspace limit.`,
+    })
+        .describe('Path pattern or text to find inside the mounted workspace.');
+}
+function boundedEtag() {
+    return z
+        .string()
+        .refine(isCanonicalStorageEtag, {
+        message: 'ETag must be a canonical bare value of at most 1,024 bytes.',
+    })
+        .describe('Exact canonical bare ETag returned by the latest workspace stat or read.');
+}
+function continuationCursor(description, maxBytes) {
+    return z
+        .string()
+        .min(1)
+        .max(Math.min(STORAGE_WORKSPACE_MAX_CURSOR_BYTES, maxBytes))
+        .regex(workspaceCursor, 'Cursor must be the bounded opaque token returned by the workspace.')
+        .optional()
+        .describe(description);
+}
+function positiveIntegerAtMost(maximum, description) {
+    return z
+        .number()
+        .int()
+        .positive()
+        .max(maximum)
+        .optional()
+        .describe(description);
+}
+function operationOptions(signal) {
+    return signal === undefined ? {} : { signal };
+}
+function resolveApproval(toolName, config) {
+    return typeof config === 'boolean' ? config : (config[toolName] ?? true);
+}
+function resolveReadLimit(workspace, requested) {
+    const workspaceLimit = workspace.limits.maxReadBytes;
+    if (!Number.isSafeInteger(workspaceLimit) || workspaceLimit <= 0) {
+        throw new RangeError('workspace.limits.maxReadBytes must be a positive safe integer.');
+    }
+    if (requested !== undefined &&
+        (!Number.isSafeInteger(requested) || requested <= 0)) {
+        throw new RangeError('maxReadBytes must be a positive safe integer.');
+    }
+    return Math.min(requested ?? workspaceLimit, workspaceLimit);
+}
+function sanitizeToolError(error, signal) {
+    if (error instanceof AiSdkWorkspaceToolError) {
+        return error;
+    }
+    if (signal?.aborted === true) {
+        return new AiSdkWorkspaceToolError(StorageErrorCode.ABORTED);
+    }
+    if (isStorageWorkspaceError(error)) {
+        return new AiSdkWorkspaceToolError(error.code);
+    }
+    if (isStorageError(error)) {
+        return new AiSdkWorkspaceToolError(error.code);
+    }
+    return new AiSdkWorkspaceToolError(StorageErrorCode.PROVIDER);
+}
+async function executeSafely(signal, operation) {
+    try {
+        return await operation();
+    }
+    catch (error) {
+        throw sanitizeToolError(error, signal);
+    }
+}
+async function executeCreateAware(signal, input, operation, mapCreateConflict) {
+    try {
+        return await operation();
+    }
+    catch (error) {
+        const safeError = sanitizeToolError(error, signal);
+        if (input.mode === 'create' &&
+            safeError.code === StorageErrorCode.CONFLICT &&
+            mapCreateConflict !== undefined) {
+            try {
+                return await mapCreateConflict({ path: input.path });
+            }
+            catch {
+                throw new AiSdkWorkspaceToolError(StorageErrorCode.PROVIDER);
+            }
+        }
+        throw safeError;
+    }
+}
+function serializeFile(file) {
+    if (file.etag !== undefined && !isCanonicalStorageEtag(file.etag)) {
+        throw new Error('Workspace returned a malformed ETag.');
+    }
+    return {
+        kind: 'file',
+        path: file.path,
+        name: file.name,
+        size: file.size,
+        contentType: file.contentType,
+        ...(file.etag === undefined ? {} : { etag: file.etag }),
+        ...(file.lastModified === undefined
+            ? {}
+            : { lastModified: file.lastModified.toISOString() }),
+    };
+}
+function serializeEntry(entry) {
+    return entry.kind === 'file'
+        ? serializeFile(entry)
+        : { kind: 'directory', path: entry.path, name: entry.name };
+}
+function serializeTextFile(file) {
+    return { ...serializeFile(file), text: file.text };
+}
+function serializePage(page) {
+    return {
+        entries: page.entries.map(serializeEntry),
+        ...(page.cursor === undefined ? {} : { cursor: page.cursor }),
+    };
+}
+/**
+ * Creates Vercel AI SDK tools backed only by a mounted StorageWorkspace.
+ *
+ * A tool is omitted unless the workspace grants its required permission.
+ * The workspace remains the enforcing boundary if a retained tool reference
+ * is invoked after further narrowing.
+ */
+export function createAiSdkWorkspaceTools({ workspace, maxReadBytes: requestedMaxReadBytes, requireApproval = true, mapCreateConflict, }) {
+    const maxReadBytes = resolveReadLimit(workspace, requestedMaxReadBytes);
+    const tools = {};
+    const pathSchema = logicalPath('File path', workspace.limits.maxPathBytes);
+    const directorySchema = logicalPath('Directory path', workspace.limits.maxPathBytes);
+    const etagSchema = boundedEtag();
+    if (workspace.allows('list')) {
+        tools.workspace_list = tool({
+            description: 'List files and directories inside the mounted workspace. Omit directory to list the workspace root.',
+            // Optional pagination and directory inputs are not compatible with
+            // OpenAI strict function schemas, which require every property.
+            strict: false,
+            inputSchema: z
+                .object({
+                directory: directorySchema.optional(),
+                recursive: z
+                    .boolean()
+                    .optional()
+                    .describe('Whether to include descendants recursively.'),
+                limit: positiveIntegerAtMost(workspace.limits.maxPageSize, `Maximum entries to return, up to ${workspace.limits.maxPageSize}.`),
+                cursor: continuationCursor('Opaque cursor returned by a preceding list call. It may be replayed before expiry while its provider continuation remains valid; repeat the same directory, recursive, and limit options when continuing.', workspace.limits.maxCursorBytes),
+            })
+                .strict(),
+            execute: (input, { abortSignal }) => executeSafely(abortSignal, async () => serializePage(await workspace.list({
+                ...(input.directory === undefined
+                    ? {}
+                    : { directory: input.directory }),
+                ...(input.recursive === undefined
+                    ? {}
+                    : { recursive: input.recursive }),
+                ...(input.limit === undefined ? {} : { limit: input.limit }),
+                ...(input.cursor === undefined ? {} : { cursor: input.cursor }),
+                ...operationOptions(abortSignal),
+            }))),
+        });
+    }
+    if (workspace.allows('read')) {
+        tools.workspace_stat = tool({
+            description: 'Inspect a file inside the mounted workspace without reading its contents. Returns the ETag required for safe replace, move, and delete operations.',
+            strict: true,
+            inputSchema: z.object({ path: pathSchema }).strict(),
+            execute: ({ path }, { abortSignal }) => executeSafely(abortSignal, async () => serializeFile(await workspace.stat(path, operationOptions(abortSignal)))),
+        });
+        tools.workspace_read_file = tool({
+            description: `Read a UTF-8 text file inside the mounted workspace. The result is bounded to ${maxReadBytes} bytes.`,
+            strict: true,
+            inputSchema: z.object({ path: pathSchema }).strict(),
+            execute: ({ path }, { abortSignal }) => executeSafely(abortSignal, async () => serializeTextFile(await workspace.readText(path, {
+                maxBytes: maxReadBytes,
+                ...operationOptions(abortSignal),
+            }))),
+        });
+    }
+    if (workspace.allows('search')) {
+        tools.workspace_search = tool({
+            description: 'Search logical paths inside the mounted workspace using a bounded glob, substring, or exact match. Omit directory to search from the workspace root.',
+            // Search intentionally has optional filters and cursor inputs.
+            strict: false,
+            inputSchema: z
+                .object({
+                query: searchQuery(workspace.limits.maxPathBytes),
+                directory: directorySchema.optional(),
+                match: z
+                    .enum(['glob', 'substring', 'exact'])
+                    .optional()
+                    .describe('Matching strategy; defaults to glob.'),
+                caseInsensitive: z.boolean().optional(),
+                limit: positiveIntegerAtMost(workspace.limits.maxSearchResults, `Maximum matches to return, up to ${workspace.limits.maxSearchResults}.`),
+                cursor: continuationCursor('Opaque cursor returned by a preceding search call. It may be replayed before expiry while its provider continuation remains valid; repeat the same query, directory, match, caseInsensitive, and limit options when continuing.', workspace.limits.maxCursorBytes),
+            })
+                .strict(),
+            execute: ({ query, directory, match, caseInsensitive, limit, cursor }, { abortSignal }) => executeSafely(abortSignal, async () => serializePage(await workspace.search(query, {
+                ...(directory === undefined ? {} : { directory }),
+                ...(match === undefined ? {} : { match }),
+                ...(caseInsensitive === undefined ? {} : { caseInsensitive }),
+                ...(limit === undefined ? {} : { limit }),
+                ...(cursor === undefined ? {} : { cursor }),
+                ...operationOptions(abortSignal),
+            }))),
+        });
+    }
+    const canCreate = workspace.allows('create');
+    const canReplace = workspace.allows('replace');
+    if (canCreate || canReplace) {
+        const commonWriteShape = {
+            path: pathSchema,
+            content: z
+                .string()
+                .refine((value) => utf8Encoder.encode(value).byteLength <=
+                workspace.limits.maxWriteBytes, {
+                message: `Content exceeds the ${workspace.limits.maxWriteBytes}-byte workspace write limit.`,
+            })
+                .describe(`UTF-8 text to write. The workspace enforces its ${workspace.limits.maxWriteBytes}-byte write limit.`),
+        };
+        const createSchema = z
+            .object({ ...commonWriteShape, mode: z.literal('create') })
+            .strict();
+        const replaceSchema = z
+            .object({
+            ...commonWriteShape,
+            mode: z.literal('replace'),
+            etag: etagSchema,
+        })
+            .strict();
+        const inputSchema = canCreate && canReplace
+            ? z.discriminatedUnion('mode', [createSchema, replaceSchema])
+            : canCreate
+                ? createSchema
+                : replaceSchema;
+        tools.workspace_write_file = tool({
+            description: canCreate && canReplace
+                ? 'Create a new UTF-8 text file or replace an existing file inside the mounted workspace. Create fails if the destination exists; replace requires its current ETag.'
+                : canCreate
+                    ? 'Create a new UTF-8 text file inside the mounted workspace. The operation fails if the destination already exists.'
+                    : 'Replace an existing UTF-8 text file inside the mounted workspace using its current ETag.',
+            // The combined create/replace schema is a discriminated union. OpenAI
+            // strict function tools reject its root-level oneOf, while the runtime
+            // Zod schema continues to validate every tool call in non-strict mode.
+            strict: !(canCreate && canReplace),
+            inputSchema,
+            needsApproval: resolveApproval('workspace_write_file', requireApproval),
+            execute: (input, { abortSignal }) => executeCreateAware(abortSignal, input, async () => serializeFile(input.mode === 'create'
+                ? await workspace.writeFile(input.path, input.content, {
+                    mode: 'create',
+                    ...operationOptions(abortSignal),
+                })
+                : await workspace.writeFile(input.path, input.content, {
+                    mode: 'replace',
+                    etag: input.etag,
+                    ...operationOptions(abortSignal),
+                })), mapCreateConflict),
+        });
+    }
+    const canCopy = workspace.allows('copy') &&
+        workspace.allows('read') &&
+        workspace.allows('create');
+    if (canCopy) {
+        tools.workspace_copy_file = tool({
+            description: 'Copy an exact observed version of a file inside the mounted workspace. The source remains intact, and the operation fails if the source changed or the destination already exists.',
+            strict: true,
+            inputSchema: z
+                .object({
+                source: logicalPath('Source file path', workspace.limits.maxPathBytes),
+                destination: logicalPath('Destination file path', workspace.limits.maxPathBytes),
+                etag: etagSchema.describe('Exact ETag of the source returned by the latest workspace stat or read.'),
+            })
+                .strict(),
+            needsApproval: resolveApproval('workspace_copy_file', requireApproval),
+            execute: ({ source, destination, etag }, { abortSignal }) => executeSafely(abortSignal, async () => serializeFile(await workspace.copyFile(source, destination, {
+                etag,
+                ...operationOptions(abortSignal),
+            }))),
+        });
+    }
+    const canMove = workspace.allows('move') &&
+        workspace.allows('read') &&
+        workspace.allows('create') &&
+        workspace.allows('delete');
+    if (canMove) {
+        tools.workspace_move_file = tool({
+            description: "Move a file inside the mounted workspace using the source's current ETag. The operation fails if the destination already exists. If source deletion cannot be confirmed, the destination is retained and the tool reports a conflict; inspect both paths before retrying.",
+            strict: true,
+            inputSchema: z
+                .object({
+                source: logicalPath('Source file path', workspace.limits.maxPathBytes),
+                destination: logicalPath('Destination file path', workspace.limits.maxPathBytes),
+                etag: etagSchema.describe('Exact ETag of the source returned by the latest workspace stat or read.'),
+            })
+                .strict(),
+            needsApproval: resolveApproval('workspace_move_file', requireApproval),
+            execute: ({ source, destination, etag }, { abortSignal }) => executeSafely(abortSignal, async () => serializeFile(await workspace.moveFile(source, destination, {
+                etag,
+                ...operationOptions(abortSignal),
+            }))),
+        });
+    }
+    if (workspace.allows('delete')) {
+        tools.workspace_delete_file = tool({
+            description: 'Delete a file inside the mounted workspace using its current ETag.',
+            strict: true,
+            inputSchema: z
+                .object({
+                path: pathSchema,
+                etag: etagSchema,
+            })
+                .strict(),
+            needsApproval: resolveApproval('workspace_delete_file', requireApproval),
+            execute: ({ path, etag }, { abortSignal }) => executeSafely(abortSignal, async () => {
+                await workspace.deleteFile(path, {
+                    etag,
+                    ...operationOptions(abortSignal),
+                });
+                return { deleted: true, path };
+            }),
+        });
+    }
+    return tools;
+}
+export function isAiSdkWorkspaceMutationToolName(value) {
+    return mutationToolNames.has(value);
+}
+//# sourceMappingURL=ai-sdk-workspace-tools.js.map

package/dist/ai-sdk/ai-sdk-workspace-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-sdk-workspace-tools.js","sourceRoot":"","sources":["../../src/ai-sdk/ai-sdk-workspace-tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAgC,MAAM,IAAI,CAAC;AACxD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,kCAAkC,EAClC,uBAAuB,GAKxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,gBAAgB,EAChB,cAAc,GAEf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,gBAAgB;IAChB,gBAAgB;IAChB,qBAAqB;IACrB,kBAAkB;IAClB,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,uBAAuB;CACf,CAAC;AAmDX,MAAM,mBAAmB,GAErB;IACF,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,6CAA6C;IAC3E,CAAC,gBAAgB,CAAC,YAAY,CAAC,EAC7B,mDAAmD;IACrD,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EACzB,8HAA8H;IAChI,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAC1B,mDAAmD;IACrD,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,wCAAwC;IAC7E,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAC9B,sEAAsE;IACxE,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,sCAAsC;IAClE,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,oCAAoC;IAChE,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAC/B,sDAAsD;IACxD,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,iCAAiC;CAC/D,CAAC;AAEF;;;GAGG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACvC,IAAI,CAA8B;IAE3C,YAAY,IAAiC;QAC3C,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AA8BD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAiC;IAChE,sBAAsB;IACtB,qBAAqB;IACrB,qBAAqB;IACrB,uBAAuB;CACxB,CAAC,CAAC;AACH,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AACtC,MAAM,yBAAyB,GAAG,QAAQ,CAAC;AAC3C,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAC7C,MAAM,iBAAiB,GAAG,oDAAoD,CAAC;AAE/E,SAAS,aAAa,CAAC,KAAa;IAClC,IACE,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,KAAK,KAAK,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC;QAChC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpB,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EACrC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,KAAK,CACJ,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,MAAM,GAAG,CAAC;QAClB,OAAO,KAAK,GAAG;QACf,OAAO,KAAK,IAAI;QAChB,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QACtB,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QACtB,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QACtB,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,CACnC,CAAC;AACN,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,QAAgB;IAClD,OAAO,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,MAAM,CAAC,aAAa,EAAE;QACrB,OAAO,EAAE,GAAG,KAAK,qEAAqE;KACvF,CAAC;SACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,IAAI,QAAQ,EAAE;QACnE,OAAO,EAAE,GAAG,KAAK,gBAAgB,QAAQ,6BAA6B;KACvE,CAAC;SACD,QAAQ,CACP,GAAG,KAAK,iLAAiL,CAC1L,CAAC;AACN,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EACjE,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAC3D;SACA,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,IAAI,QAAQ,EAAE;QACnE,OAAO,EAAE,4BAA4B,QAAQ,wBAAwB;KACtE,CAAC;SACD,QAAQ,CAAC,4DAA4D,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,CAAC;SACL,MAAM,EAAE;SACR,MAAM,CAAC,sBAAsB,EAAE;QAC9B,OAAO,EAAE,6DAA6D;KACvE,CAAC;SACD,QAAQ,CACP,0EAA0E,CAC3E,CAAC;AACN,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB,EAAE,QAAgB;IAC/D,OAAO,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,kCAAkC,EAAE,QAAQ,CAAC,CAAC;SAC3D,KAAK,CACJ,eAAe,EACf,oEAAoE,CACrE;SACA,QAAQ,EAAE;SACV,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe,EAAE,WAAmB;IACjE,OAAO,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,OAAO,CAAC;SACZ,QAAQ,EAAE;SACV,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA+B;IAGvD,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,eAAe,CACtB,QAAwC,EACxC,MAAoC;IAEpC,OAAO,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,gBAAgB,CACvB,SAA2B,EAC3B,SAA6B;IAE7B,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,UAAU,CAClB,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,IACE,SAAS,KAAK,SAAS;QACvB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,CAAC,EACpD,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,+CAA+C,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,cAAc,EAAE,cAAc,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAc,EACd,MAA+B;IAE/B,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,MAA+B,EAC/B,SAAgC;IAEhC,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAI/B,MAA+B,EAC/B,KAAmD,EACnD,SAAgC,EAChC,iBACsE;IAEtE,IAAI,CAAC;QACH,OAAO,MAAM,SAAS,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACnD,IACE,KAAK,CAAC,IAAI,KAAK,QAAQ;YACvB,SAAS,CAAC,IAAI,KAAK,gBAAgB,CAAC,QAAQ;YAC5C,iBAAiB,KAAK,SAAS,EAC/B,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,iBAAiB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,uBAAuB,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QACD,MAAM,SAAS,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAA0B;IAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,KAA4B;IAE5B,OAAO,KAAK,CAAC,IAAI,KAAK,MAAM;QAC1B,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,iBAAiB,CACxB,IAA8B;IAE9B,OAAO,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,IAGtB;IACC,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAEvC,EACA,SAAS,EACT,YAAY,EAAE,qBAAqB,EACnC,eAAe,GAAG,IAAI,EACtB,iBAAiB,GACsC;IACvD,MAAM,YAAY,GAAG,gBAAgB,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IACxE,MAAM,KAAK,GAAY,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,WAAW,CACjC,gBAAgB,EAChB,SAAS,CAAC,MAAM,CAAC,YAAY,CAC9B,CAAC;IACF,MAAM,UAAU,GAAG,WAAW,EAAE,CAAC;IAEjC,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;YAC1B,WAAW,EACT,qGAAqG;YACvG,mEAAmE;YACnE,gEAAgE;YAChE,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,CAAC;iBACX,MAAM,CAAC;gBACN,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;gBACrC,SAAS,EAAE,CAAC;qBACT,OAAO,EAAE;qBACT,QAAQ,EAAE;qBACV,QAAQ,CAAC,6CAA6C,CAAC;gBAC1D,KAAK,EAAE,qBAAqB,CAC1B,SAAS,CAAC,MAAM,CAAC,WAAW,EAC5B,oCAAoC,SAAS,CAAC,MAAM,CAAC,WAAW,GAAG,CACpE;gBACD,MAAM,EAAE,kBAAkB,CACxB,2MAA2M,EAC3M,SAAS,CAAC,MAAM,CAAC,cAAc,CAChC;aACF,CAAC;iBACD,MAAM,EAAE;YACX,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAClC,aAAa,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CACpC,aAAa,CACX,MAAM,SAAS,CAAC,IAAI,CAAC;gBACnB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;oBAC/B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;gBACnC,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;oBAC/B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;gBACnC,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC5D,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC/D,GAAG,gBAAgB,CAAC,WAAW,CAAC;aACjC,CAAC,CACH,CACF;SACJ,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;YAC1B,WAAW,EACT,oJAAoJ;YACtJ,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACpD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CACrC,aAAa,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CACpC,aAAa,CACX,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAC1D,CACF;SACJ,CAAC,CAAC;QAEH,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAC/B,WAAW,EAAE,iFAAiF,YAAY,SAAS;YACnH,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;YACpD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CACrC,aAAa,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CACpC,iBAAiB,CACf,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE;gBAC7B,QAAQ,EAAE,YAAY;gBACtB,GAAG,gBAAgB,CAAC,WAAW,CAAC;aACjC,CAAC,CACH,CACF;SACJ,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC5B,WAAW,EACT,sJAAsJ;YACxJ,+DAA+D;YAC/D,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,CAAC;iBACX,MAAM,CAAC;gBACN,KAAK,EAAE,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;gBACjD,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;gBACrC,KAAK,EAAE,CAAC;qBACL,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;qBACpC,QAAQ,EAAE;qBACV,QAAQ,CAAC,sCAAsC,CAAC;gBACnD,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;gBACvC,KAAK,EAAE,qBAAqB,CAC1B,SAAS,CAAC,MAAM,CAAC,gBAAgB,EACjC,oCAAoC,SAAS,CAAC,MAAM,CAAC,gBAAgB,GAAG,CACzE;gBACD,MAAM,EAAE,kBAAkB,CACxB,iOAAiO,EACjO,SAAS,CAAC,MAAM,CAAC,cAAc,CAChC;aACF,CAAC;iBACD,MAAM,EAAE;YACX,OAAO,EAAE,CACP,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,EAC3D,EAAE,WAAW,EAAE,EACf,EAAE,CACF,aAAa,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CACpC,aAAa,CACX,MAAM,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE;gBAC5B,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;gBACjD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;gBACzC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;gBAC7D,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;gBACzC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;gBAC3C,GAAG,gBAAgB,CAAC,WAAW,CAAC;aACjC,CAAC,CACH,CACF;SACJ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,SAAS,IAAI,UAAU,EAAE,CAAC;QAC5B,MAAM,gBAAgB,GAAG;YACvB,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU;gBACpC,SAAS,CAAC,MAAM,CAAC,aAAa,EAChC;gBACE,OAAO,EAAE,uBAAuB,SAAS,CAAC,MAAM,CAAC,aAAa,8BAA8B;aAC7F,CACF;iBACA,QAAQ,CACP,mDAAmD,SAAS,CAAC,MAAM,CAAC,aAAa,oBAAoB,CACtG;SACJ,CAAC;QACF,MAAM,YAAY,GAAG,CAAC;aACnB,MAAM,CAAC,EAAE,GAAG,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;aAC1D,MAAM,EAAE,CAAC;QACZ,MAAM,aAAa,GAAG,CAAC;aACpB,MAAM,CAAC;YACN,GAAG,gBAAgB;YACnB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;YAC1B,IAAI,EAAE,UAAU;SACjB,CAAC;aACD,MAAM,EAAE,CAAC;QACZ,MAAM,WAAW,GACf,SAAS,IAAI,UAAU;YACrB,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;YAC7D,CAAC,CAAC,SAAS;gBACT,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,aAAa,CAAC;QAEtB,KAAK,CAAC,oBAAoB,GAAG,IAAI,CAI/B;YACA,WAAW,EACT,SAAS,IAAI,UAAU;gBACrB,CAAC,CAAC,mKAAmK;gBACrK,CAAC,CAAC,SAAS;oBACT,CAAC,CAAC,mHAAmH;oBACrH,CAAC,CAAC,0FAA0F;YAClG,sEAAsE;YACtE,uEAAuE;YACvE,uEAAuE;YACvE,MAAM,EAAE,CAAC,CAAC,SAAS,IAAI,UAAU,CAAC;YAClC,WAAW;YACX,aAAa,EAAE,eAAe,CAAC,sBAAsB,EAAE,eAAe,CAAC;YACvE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAClC,kBAAkB,CAChB,WAAW,EACX,KAAK,EACL,KAAK,IAAI,EAAE,CACT,aAAa,CACX,KAAK,CAAC,IAAI,KAAK,QAAQ;gBACrB,CAAC,CAAC,MAAM,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE;oBACnD,IAAI,EAAE,QAAQ;oBACd,GAAG,gBAAgB,CAAC,WAAW,CAAC;iBACjC,CAAC;gBACJ,CAAC,CAAC,MAAM,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE;oBACnD,IAAI,EAAE,SAAS;oBACf,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,GAAG,gBAAgB,CAAC,WAAW,CAAC;iBACjC,CAAC,CACP,EACH,iBAAiB,CAClB;SACJ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GACX,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;QACxB,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;QACxB,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAC/B,WAAW,EACT,oLAAoL;YACtL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,CAAC;iBACX,MAAM,CAAC;gBACN,MAAM,EAAE,WAAW,CACjB,kBAAkB,EAClB,SAAS,CAAC,MAAM,CAAC,YAAY,CAC9B;gBACD,WAAW,EAAE,WAAW,CACtB,uBAAuB,EACvB,SAAS,CAAC,MAAM,CAAC,YAAY,CAC9B;gBACD,IAAI,EAAE,UAAU,CAAC,QAAQ,CACvB,yEAAyE,CAC1E;aACF,CAAC;iBACD,MAAM,EAAE;YACX,aAAa,EAAE,eAAe,CAAC,qBAAqB,EAAE,eAAe,CAAC;YACtE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAC1D,aAAa,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CACpC,aAAa,CACX,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE;gBAC5C,IAAI;gBACJ,GAAG,gBAAgB,CAAC,WAAW,CAAC;aACjC,CAAC,CACH,CACF;SACJ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GACX,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;QACxB,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;QACxB,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC1B,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC;YAC/B,WAAW,EACT,2QAA2Q;YAC7Q,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,CAAC;iBACX,MAAM,CAAC;gBACN,MAAM,EAAE,WAAW,CACjB,kBAAkB,EAClB,SAAS,CAAC,MAAM,CAAC,YAAY,CAC9B;gBACD,WAAW,EAAE,WAAW,CACtB,uBAAuB,EACvB,SAAS,CAAC,MAAM,CAAC,YAAY,CAC9B;gBACD,IAAI,EAAE,UAAU,CAAC,QAAQ,CACvB,yEAAyE,CAC1E;aACF,CAAC;iBACD,MAAM,EAAE;YACX,aAAa,EAAE,eAAe,CAAC,qBAAqB,EAAE,eAAe,CAAC;YACtE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAC1D,aAAa,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CACpC,aAAa,CACX,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE;gBAC5C,IAAI;gBACJ,GAAG,gBAAgB,CAAC,WAAW,CAAC;aACjC,CAAC,CACH,CACF;SACJ,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,qBAAqB,GAAG,IAAI,CAAC;YACjC,WAAW,EACT,oEAAoE;YACtE,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,CAAC;iBACX,MAAM,CAAC;gBACN,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,UAAU;aACjB,CAAC;iBACD,MAAM,EAAE;YACX,aAAa,EAAE,eAAe,CAAC,uBAAuB,EAAE,eAAe,CAAC;YACxE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAC3C,aAAa,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;gBACpC,MAAM,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE;oBAC/B,IAAI;oBACJ,GAAG,gBAAgB,CAAC,WAAW,CAAC;iBACjC,CAAC,CAAC;gBACH,OAAO,EAAE,OAAO,EAAE,IAAa,EAAE,IAAI,EAAE,CAAC;YAC1C,CAAC,CAAC;SACL,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAAa;IAEb,OAAO,iBAAiB,CAAC,GAAG,CAAC,KAAuC,CAAC,CAAC;AACxE,CAAC","sourcesContent":["import { tool, type JSONValue, type ToolSet } from 'ai';\nimport { z } from 'zod';\n\nimport {\n  STORAGE_WORKSPACE_MAX_CURSOR_BYTES,\n  isStorageWorkspaceError,\n  type StorageWorkspace,\n  type StorageWorkspaceEntry,\n  type StorageWorkspaceFile,\n  type StorageWorkspaceTextFile,\n} from '../workspace/index.js';\nimport {\n  StorageErrorCode,\n  isStorageError,\n  type StorageErrorCode as StorageErrorCodeValue,\n} from '../storage.error.js';\nimport { isCanonicalStorageEtag } from '../storage-etag.js';\n\nexport const AI_SDK_WORKSPACE_TOOL_NAMES = [\n  'workspace_list',\n  'workspace_stat',\n  'workspace_read_file',\n  'workspace_search',\n  'workspace_write_file',\n  'workspace_copy_file',\n  'workspace_move_file',\n  'workspace_delete_file',\n] as const;\n\nexport type AiSdkWorkspaceToolName =\n  (typeof AI_SDK_WORKSPACE_TOOL_NAMES)[number];\n\nexport type AiSdkWorkspaceMutationToolName = Extract<\n  AiSdkWorkspaceToolName,\n  | 'workspace_write_file'\n  | 'workspace_copy_file'\n  | 'workspace_move_file'\n  | 'workspace_delete_file'\n>;\n\n/**\n * Approval policy for mutation tools. An omitted entry defaults to requiring\n * approval, matching an omitted policy.\n */\nexport type AiSdkWorkspaceApprovalConfig =\n  boolean | Partial<Record<AiSdkWorkspaceMutationToolName, boolean>>;\n\nexport interface AiSdkWorkspaceCreateConflict {\n  /** The logical destination inside the mounted workspace. */\n  readonly path: string;\n}\n\nexport type AiSdkWorkspaceCreateConflictMapper<Result extends JSONValue> = (\n  conflict: AiSdkWorkspaceCreateConflict,\n) => PromiseLike<Result> | Result;\n\nexport interface CreateAiSdkWorkspaceToolsOptions<\n  CreateConflictResult extends JSONValue = never,\n> {\n  /** The already-mounted, policy-enforcing workspace exposed to the tools. */\n  workspace: StorageWorkspace;\n  /**\n   * Optional tighter read ceiling. Values above the workspace ceiling are\n   * clamped; the model cannot choose or raise this value.\n   */\n  maxReadBytes?: number;\n  /** Mutation tools require approval by default. */\n  requireApproval?: AiSdkWorkspaceApprovalConfig;\n  /**\n   * Maps an atomic create collision to an application result. When omitted,\n   * the collision remains an AiSdkWorkspaceToolError like every other storage\n   * failure. Replace conflicts are never mapped by this hook.\n   */\n  mapCreateConflict?: AiSdkWorkspaceCreateConflictMapper<CreateConflictResult>;\n}\n\nexport type AiSdkWorkspaceToolErrorCode = StorageErrorCodeValue;\n\nconst SAFE_ERROR_MESSAGES: Readonly<\n  Record<AiSdkWorkspaceToolErrorCode, string>\n> = {\n  [StorageErrorCode.NOT_FOUND]: 'The requested workspace path was not found.',\n  [StorageErrorCode.UNAUTHORIZED]:\n    'This operation is not permitted in the workspace.',\n  [StorageErrorCode.CONFLICT]:\n    'The operation conflicts with current workspace state. Refresh metadata and retry with the current ETag or a new destination.',\n  [StorageErrorCode.READ_ONLY]:\n    'This operation is not permitted in the workspace.',\n  [StorageErrorCode.INVALID_ARGUMENT]: 'The workspace tool input was rejected.',\n  [StorageErrorCode.NOT_SUPPORTED]:\n    'This workspace operation is not supported by the configured storage.',\n  [StorageErrorCode.ABORTED]: 'The workspace operation was aborted.',\n  [StorageErrorCode.TIMEOUT]: 'The workspace operation timed out.',\n  [StorageErrorCode.LIMIT_EXCEEDED]:\n    'The workspace operation exceeded a configured limit.',\n  [StorageErrorCode.PROVIDER]: 'The workspace operation failed.',\n};\n\n/**\n * Safe error exposed at the AI tool boundary. It deliberately carries no\n * provider error, storage key, mount prefix, store name, or cause.\n */\nexport class AiSdkWorkspaceToolError extends Error {\n  readonly code: AiSdkWorkspaceToolErrorCode;\n\n  constructor(code: AiSdkWorkspaceToolErrorCode) {\n    super(SAFE_ERROR_MESSAGES[code]);\n    this.name = 'AiSdkWorkspaceToolError';\n    this.code = code;\n  }\n}\n\nexport interface AiSdkWorkspaceFileResult {\n  kind: 'file';\n  path: string;\n  name: string;\n  size: number;\n  contentType: string;\n  etag?: string;\n  lastModified?: string;\n}\n\nexport interface AiSdkWorkspaceDirectoryResult {\n  kind: 'directory';\n  path: string;\n  name: string;\n}\n\nexport type AiSdkWorkspaceEntryResult =\n  AiSdkWorkspaceFileResult | AiSdkWorkspaceDirectoryResult;\n\nexport interface AiSdkWorkspaceTextFileResult extends AiSdkWorkspaceFileResult {\n  text: string;\n}\n\nexport interface AiSdkWorkspacePageResult {\n  entries: AiSdkWorkspaceEntryResult[];\n  cursor?: string;\n}\n\nconst mutationToolNames = new Set<AiSdkWorkspaceMutationToolName>([\n  'workspace_write_file',\n  'workspace_copy_file',\n  'workspace_move_file',\n  'workspace_delete_file',\n]);\nconst utf8Encoder = new TextEncoder();\nconst forbiddenUnicodeCharacter = /\\p{C}/u;\nconst workspaceCursor = /^[A-Za-z0-9._-]+$/u;\nconst windowsDeviceName = /^(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\\..*)?$/iu;\n\nfunction isLogicalPath(value: string): boolean {\n  if (\n    value.length === 0 ||\n    value.startsWith('/') ||\n    value.endsWith('/') ||\n    value !== value.normalize('NFC') ||\n    value.includes('\\\\') ||\n    forbiddenUnicodeCharacter.test(value)\n  ) {\n    return false;\n  }\n\n  return value\n    .split('/')\n    .every(\n      (segment) =>\n        segment.length > 0 &&\n        segment !== '.' &&\n        segment !== '..' &&\n        !segment.includes(':') &&\n        !segment.endsWith('.') &&\n        !segment.endsWith(' ') &&\n        !windowsDeviceName.test(segment),\n    );\n}\n\nfunction logicalPath(label: string, maxBytes: number) {\n  return z\n    .string()\n    .min(1)\n    .refine(isLogicalPath, {\n      message: `${label} must be a portable, NFC-normalized, relative POSIX workspace path.`,\n    })\n    .refine((value) => utf8Encoder.encode(value).byteLength <= maxBytes, {\n      message: `${label} exceeds the ${maxBytes}-byte workspace path limit.`,\n    })\n    .describe(\n      `${label}. Use an NFC-normalized relative POSIX path inside the mounted workspace. Empty, dot, parent, colon, trailing dot or space, and Windows reserved device segments are forbidden.`,\n    );\n}\n\nfunction searchQuery(maxBytes: number) {\n  return z\n    .string()\n    .min(1)\n    .refine(\n      (value) =>\n        !value.includes('\\\\') && !forbiddenUnicodeCharacter.test(value),\n      { message: 'Search query contains forbidden characters.' },\n    )\n    .refine((value) => utf8Encoder.encode(value).byteLength <= maxBytes, {\n      message: `Search query exceeds the ${maxBytes}-byte workspace limit.`,\n    })\n    .describe('Path pattern or text to find inside the mounted workspace.');\n}\n\nfunction boundedEtag() {\n  return z\n    .string()\n    .refine(isCanonicalStorageEtag, {\n      message: 'ETag must be a canonical bare value of at most 1,024 bytes.',\n    })\n    .describe(\n      'Exact canonical bare ETag returned by the latest workspace stat or read.',\n    );\n}\n\nfunction continuationCursor(description: string, maxBytes: number) {\n  return z\n    .string()\n    .min(1)\n    .max(Math.min(STORAGE_WORKSPACE_MAX_CURSOR_BYTES, maxBytes))\n    .regex(\n      workspaceCursor,\n      'Cursor must be the bounded opaque token returned by the workspace.',\n    )\n    .optional()\n    .describe(description);\n}\n\nfunction positiveIntegerAtMost(maximum: number, description: string) {\n  return z\n    .number()\n    .int()\n    .positive()\n    .max(maximum)\n    .optional()\n    .describe(description);\n}\n\nfunction operationOptions(signal: AbortSignal | undefined): {\n  signal?: AbortSignal;\n} {\n  return signal === undefined ? {} : { signal };\n}\n\nfunction resolveApproval(\n  toolName: AiSdkWorkspaceMutationToolName,\n  config: AiSdkWorkspaceApprovalConfig,\n): boolean {\n  return typeof config === 'boolean' ? config : (config[toolName] ?? true);\n}\n\nfunction resolveReadLimit(\n  workspace: StorageWorkspace,\n  requested: number | undefined,\n): number {\n  const workspaceLimit = workspace.limits.maxReadBytes;\n  if (!Number.isSafeInteger(workspaceLimit) || workspaceLimit <= 0) {\n    throw new RangeError(\n      'workspace.limits.maxReadBytes must be a positive safe integer.',\n    );\n  }\n  if (\n    requested !== undefined &&\n    (!Number.isSafeInteger(requested) || requested <= 0)\n  ) {\n    throw new RangeError('maxReadBytes must be a positive safe integer.');\n  }\n  return Math.min(requested ?? workspaceLimit, workspaceLimit);\n}\n\nfunction sanitizeToolError(\n  error: unknown,\n  signal: AbortSignal | undefined,\n): AiSdkWorkspaceToolError {\n  if (error instanceof AiSdkWorkspaceToolError) {\n    return error;\n  }\n  if (signal?.aborted === true) {\n    return new AiSdkWorkspaceToolError(StorageErrorCode.ABORTED);\n  }\n  if (isStorageWorkspaceError(error)) {\n    return new AiSdkWorkspaceToolError(error.code);\n  }\n  if (isStorageError(error)) {\n    return new AiSdkWorkspaceToolError(error.code);\n  }\n  return new AiSdkWorkspaceToolError(StorageErrorCode.PROVIDER);\n}\n\nasync function executeSafely<Result>(\n  signal: AbortSignal | undefined,\n  operation: () => Promise<Result>,\n): Promise<Result> {\n  try {\n    return await operation();\n  } catch (error) {\n    throw sanitizeToolError(error, signal);\n  }\n}\n\nasync function executeCreateAware<\n  Result,\n  CreateConflictResult extends JSONValue,\n>(\n  signal: AbortSignal | undefined,\n  input: { mode: 'create' | 'replace'; path: string },\n  operation: () => Promise<Result>,\n  mapCreateConflict:\n    AiSdkWorkspaceCreateConflictMapper<CreateConflictResult> | undefined,\n): Promise<CreateConflictResult | Result> {\n  try {\n    return await operation();\n  } catch (error) {\n    const safeError = sanitizeToolError(error, signal);\n    if (\n      input.mode === 'create' &&\n      safeError.code === StorageErrorCode.CONFLICT &&\n      mapCreateConflict !== undefined\n    ) {\n      try {\n        return await mapCreateConflict({ path: input.path });\n      } catch {\n        throw new AiSdkWorkspaceToolError(StorageErrorCode.PROVIDER);\n      }\n    }\n    throw safeError;\n  }\n}\n\nfunction serializeFile(file: StorageWorkspaceFile): AiSdkWorkspaceFileResult {\n  if (file.etag !== undefined && !isCanonicalStorageEtag(file.etag)) {\n    throw new Error('Workspace returned a malformed ETag.');\n  }\n  return {\n    kind: 'file',\n    path: file.path,\n    name: file.name,\n    size: file.size,\n    contentType: file.contentType,\n    ...(file.etag === undefined ? {} : { etag: file.etag }),\n    ...(file.lastModified === undefined\n      ? {}\n      : { lastModified: file.lastModified.toISOString() }),\n  };\n}\n\nfunction serializeEntry(\n  entry: StorageWorkspaceEntry,\n): AiSdkWorkspaceEntryResult {\n  return entry.kind === 'file'\n    ? serializeFile(entry)\n    : { kind: 'directory', path: entry.path, name: entry.name };\n}\n\nfunction serializeTextFile(\n  file: StorageWorkspaceTextFile,\n): AiSdkWorkspaceTextFileResult {\n  return { ...serializeFile(file), text: file.text };\n}\n\nfunction serializePage(page: {\n  entries: StorageWorkspaceEntry[];\n  cursor?: string;\n}): AiSdkWorkspacePageResult {\n  return {\n    entries: page.entries.map(serializeEntry),\n    ...(page.cursor === undefined ? {} : { cursor: page.cursor }),\n  };\n}\n\n/**\n * Creates Vercel AI SDK tools backed only by a mounted StorageWorkspace.\n *\n * A tool is omitted unless the workspace grants its required permission.\n * The workspace remains the enforcing boundary if a retained tool reference\n * is invoked after further narrowing.\n */\nexport function createAiSdkWorkspaceTools<\n  CreateConflictResult extends JSONValue = never,\n>({\n  workspace,\n  maxReadBytes: requestedMaxReadBytes,\n  requireApproval = true,\n  mapCreateConflict,\n}: CreateAiSdkWorkspaceToolsOptions<CreateConflictResult>): ToolSet {\n  const maxReadBytes = resolveReadLimit(workspace, requestedMaxReadBytes);\n  const tools: ToolSet = {};\n  const pathSchema = logicalPath('File path', workspace.limits.maxPathBytes);\n  const directorySchema = logicalPath(\n    'Directory path',\n    workspace.limits.maxPathBytes,\n  );\n  const etagSchema = boundedEtag();\n\n  if (workspace.allows('list')) {\n    tools.workspace_list = tool({\n      description:\n        'List files and directories inside the mounted workspace. Omit directory to list the workspace root.',\n      // Optional pagination and directory inputs are not compatible with\n      // OpenAI strict function schemas, which require every property.\n      strict: false,\n      inputSchema: z\n        .object({\n          directory: directorySchema.optional(),\n          recursive: z\n            .boolean()\n            .optional()\n            .describe('Whether to include descendants recursively.'),\n          limit: positiveIntegerAtMost(\n            workspace.limits.maxPageSize,\n            `Maximum entries to return, up to ${workspace.limits.maxPageSize}.`,\n          ),\n          cursor: continuationCursor(\n            'Opaque cursor returned by a preceding list call. It may be replayed before expiry while its provider continuation remains valid; repeat the same directory, recursive, and limit options when continuing.',\n            workspace.limits.maxCursorBytes,\n          ),\n        })\n        .strict(),\n      execute: (input, { abortSignal }) =>\n        executeSafely(abortSignal, async () =>\n          serializePage(\n            await workspace.list({\n              ...(input.directory === undefined\n                ? {}\n                : { directory: input.directory }),\n              ...(input.recursive === undefined\n                ? {}\n                : { recursive: input.recursive }),\n              ...(input.limit === undefined ? {} : { limit: input.limit }),\n              ...(input.cursor === undefined ? {} : { cursor: input.cursor }),\n              ...operationOptions(abortSignal),\n            }),\n          ),\n        ),\n    });\n  }\n\n  if (workspace.allows('read')) {\n    tools.workspace_stat = tool({\n      description:\n        'Inspect a file inside the mounted workspace without reading its contents. Returns the ETag required for safe replace, move, and delete operations.',\n      strict: true,\n      inputSchema: z.object({ path: pathSchema }).strict(),\n      execute: ({ path }, { abortSignal }) =>\n        executeSafely(abortSignal, async () =>\n          serializeFile(\n            await workspace.stat(path, operationOptions(abortSignal)),\n          ),\n        ),\n    });\n\n    tools.workspace_read_file = tool({\n      description: `Read a UTF-8 text file inside the mounted workspace. The result is bounded to ${maxReadBytes} bytes.`,\n      strict: true,\n      inputSchema: z.object({ path: pathSchema }).strict(),\n      execute: ({ path }, { abortSignal }) =>\n        executeSafely(abortSignal, async () =>\n          serializeTextFile(\n            await workspace.readText(path, {\n              maxBytes: maxReadBytes,\n              ...operationOptions(abortSignal),\n            }),\n          ),\n        ),\n    });\n  }\n\n  if (workspace.allows('search')) {\n    tools.workspace_search = tool({\n      description:\n        'Search logical paths inside the mounted workspace using a bounded glob, substring, or exact match. Omit directory to search from the workspace root.',\n      // Search intentionally has optional filters and cursor inputs.\n      strict: false,\n      inputSchema: z\n        .object({\n          query: searchQuery(workspace.limits.maxPathBytes),\n          directory: directorySchema.optional(),\n          match: z\n            .enum(['glob', 'substring', 'exact'])\n            .optional()\n            .describe('Matching strategy; defaults to glob.'),\n          caseInsensitive: z.boolean().optional(),\n          limit: positiveIntegerAtMost(\n            workspace.limits.maxSearchResults,\n            `Maximum matches to return, up to ${workspace.limits.maxSearchResults}.`,\n          ),\n          cursor: continuationCursor(\n            'Opaque cursor returned by a preceding search call. It may be replayed before expiry while its provider continuation remains valid; repeat the same query, directory, match, caseInsensitive, and limit options when continuing.',\n            workspace.limits.maxCursorBytes,\n          ),\n        })\n        .strict(),\n      execute: (\n        { query, directory, match, caseInsensitive, limit, cursor },\n        { abortSignal },\n      ) =>\n        executeSafely(abortSignal, async () =>\n          serializePage(\n            await workspace.search(query, {\n              ...(directory === undefined ? {} : { directory }),\n              ...(match === undefined ? {} : { match }),\n              ...(caseInsensitive === undefined ? {} : { caseInsensitive }),\n              ...(limit === undefined ? {} : { limit }),\n              ...(cursor === undefined ? {} : { cursor }),\n              ...operationOptions(abortSignal),\n            }),\n          ),\n        ),\n    });\n  }\n\n  const canCreate = workspace.allows('create');\n  const canReplace = workspace.allows('replace');\n  if (canCreate || canReplace) {\n    const commonWriteShape = {\n      path: pathSchema,\n      content: z\n        .string()\n        .refine(\n          (value) =>\n            utf8Encoder.encode(value).byteLength <=\n            workspace.limits.maxWriteBytes,\n          {\n            message: `Content exceeds the ${workspace.limits.maxWriteBytes}-byte workspace write limit.`,\n          },\n        )\n        .describe(\n          `UTF-8 text to write. The workspace enforces its ${workspace.limits.maxWriteBytes}-byte write limit.`,\n        ),\n    };\n    const createSchema = z\n      .object({ ...commonWriteShape, mode: z.literal('create') })\n      .strict();\n    const replaceSchema = z\n      .object({\n        ...commonWriteShape,\n        mode: z.literal('replace'),\n        etag: etagSchema,\n      })\n      .strict();\n    const inputSchema =\n      canCreate && canReplace\n        ? z.discriminatedUnion('mode', [createSchema, replaceSchema])\n        : canCreate\n          ? createSchema\n          : replaceSchema;\n\n    tools.workspace_write_file = tool<\n      z.infer<typeof inputSchema>,\n      unknown,\n      Record<string, unknown>\n    >({\n      description:\n        canCreate && canReplace\n          ? 'Create a new UTF-8 text file or replace an existing file inside the mounted workspace. Create fails if the destination exists; replace requires its current ETag.'\n          : canCreate\n            ? 'Create a new UTF-8 text file inside the mounted workspace. The operation fails if the destination already exists.'\n            : 'Replace an existing UTF-8 text file inside the mounted workspace using its current ETag.',\n      // The combined create/replace schema is a discriminated union. OpenAI\n      // strict function tools reject its root-level oneOf, while the runtime\n      // Zod schema continues to validate every tool call in non-strict mode.\n      strict: !(canCreate && canReplace),\n      inputSchema,\n      needsApproval: resolveApproval('workspace_write_file', requireApproval),\n      execute: (input, { abortSignal }) =>\n        executeCreateAware(\n          abortSignal,\n          input,\n          async () =>\n            serializeFile(\n              input.mode === 'create'\n                ? await workspace.writeFile(input.path, input.content, {\n                    mode: 'create',\n                    ...operationOptions(abortSignal),\n                  })\n                : await workspace.writeFile(input.path, input.content, {\n                    mode: 'replace',\n                    etag: input.etag,\n                    ...operationOptions(abortSignal),\n                  }),\n            ),\n          mapCreateConflict,\n        ),\n    });\n  }\n\n  const canCopy =\n    workspace.allows('copy') &&\n    workspace.allows('read') &&\n    workspace.allows('create');\n  if (canCopy) {\n    tools.workspace_copy_file = tool({\n      description:\n        'Copy an exact observed version of a file inside the mounted workspace. The source remains intact, and the operation fails if the source changed or the destination already exists.',\n      strict: true,\n      inputSchema: z\n        .object({\n          source: logicalPath(\n            'Source file path',\n            workspace.limits.maxPathBytes,\n          ),\n          destination: logicalPath(\n            'Destination file path',\n            workspace.limits.maxPathBytes,\n          ),\n          etag: etagSchema.describe(\n            'Exact ETag of the source returned by the latest workspace stat or read.',\n          ),\n        })\n        .strict(),\n      needsApproval: resolveApproval('workspace_copy_file', requireApproval),\n      execute: ({ source, destination, etag }, { abortSignal }) =>\n        executeSafely(abortSignal, async () =>\n          serializeFile(\n            await workspace.copyFile(source, destination, {\n              etag,\n              ...operationOptions(abortSignal),\n            }),\n          ),\n        ),\n    });\n  }\n\n  const canMove =\n    workspace.allows('move') &&\n    workspace.allows('read') &&\n    workspace.allows('create') &&\n    workspace.allows('delete');\n  if (canMove) {\n    tools.workspace_move_file = tool({\n      description:\n        \"Move a file inside the mounted workspace using the source's current ETag. The operation fails if the destination already exists. If source deletion cannot be confirmed, the destination is retained and the tool reports a conflict; inspect both paths before retrying.\",\n      strict: true,\n      inputSchema: z\n        .object({\n          source: logicalPath(\n            'Source file path',\n            workspace.limits.maxPathBytes,\n          ),\n          destination: logicalPath(\n            'Destination file path',\n            workspace.limits.maxPathBytes,\n          ),\n          etag: etagSchema.describe(\n            'Exact ETag of the source returned by the latest workspace stat or read.',\n          ),\n        })\n        .strict(),\n      needsApproval: resolveApproval('workspace_move_file', requireApproval),\n      execute: ({ source, destination, etag }, { abortSignal }) =>\n        executeSafely(abortSignal, async () =>\n          serializeFile(\n            await workspace.moveFile(source, destination, {\n              etag,\n              ...operationOptions(abortSignal),\n            }),\n          ),\n        ),\n    });\n  }\n\n  if (workspace.allows('delete')) {\n    tools.workspace_delete_file = tool({\n      description:\n        'Delete a file inside the mounted workspace using its current ETag.',\n      strict: true,\n      inputSchema: z\n        .object({\n          path: pathSchema,\n          etag: etagSchema,\n        })\n        .strict(),\n      needsApproval: resolveApproval('workspace_delete_file', requireApproval),\n      execute: ({ path, etag }, { abortSignal }) =>\n        executeSafely(abortSignal, async () => {\n          await workspace.deleteFile(path, {\n            etag,\n            ...operationOptions(abortSignal),\n          });\n          return { deleted: true as const, path };\n        }),\n    });\n  }\n\n  return tools;\n}\n\nexport function isAiSdkWorkspaceMutationToolName(\n  value: string,\n): value is AiSdkWorkspaceMutationToolName {\n  return mutationToolNames.has(value as AiSdkWorkspaceMutationToolName);\n}\n"]}