@phuetz/code-buddy 1.1.0 → 1.3.0

package/dist/tools/application-profiles.js

@@ -19,6 +19,41 @@ export const APPLICATION_PROFILES = [
         ],
         notes: 'Uses Windows COM automation when Excel is installed, then falls back to desktop control. Cell writes and saves require explicit confirmation for live runs.',
     },
+    {
+        id: 'powerpoint',
+        aliases: ['ppt', 'pptx', 'microsoft powerpoint', 'presentation', 'slides'],
+        name: 'Microsoft PowerPoint',
+        riskLevel: 'high',
+        defaultPolicy: 'confirm',
+        processNames: ['POWERPNT'],
+        titleHints: ['PowerPoint'],
+        launchCommand: 'powerpnt.exe',
+        executableCandidates: ['powerpnt.exe'],
+        capabilities: [
+            'open presentation',
+            'add slide',
+            'set text via COM',
+            'save presentation',
+        ],
+        notes: 'Uses Windows COM automation when PowerPoint is installed.',
+    },
+    {
+        id: 'word',
+        aliases: ['doc', 'docx', 'microsoft word', 'word processor'],
+        name: 'Microsoft Word',
+        riskLevel: 'high',
+        defaultPolicy: 'confirm',
+        processNames: ['WINWORD'],
+        titleHints: ['Word'],
+        launchCommand: 'winword.exe',
+        executableCandidates: ['winword.exe'],
+        capabilities: [
+            'open document',
+            'type text via COM',
+            'save document',
+        ],
+        notes: 'Uses Windows COM automation when Word is installed.',
+    },
     {
         id: 'notepad',
         aliases: ['bloc-notes', 'notepad.exe', 'text editor'],
@@ -99,6 +134,9 @@ export const APPLICATION_PROFILES = [
     },
 ];
 export function listApplicationProfiles() {
+    // The Office profiles (excel/powerpoint/word) are advertised on every platform
+    // for a consistent catalog; their COM-backed actions fail closed with a clear
+    // "requires Windows COM" error off-Windows, so listing them cross-platform is safe.
     return APPLICATION_PROFILES;
 }
 export function resolveApplicationProfile(appName) {

package/dist/tools/bash/bash-tool.d.ts

@@ -72,6 +72,7 @@ export declare class BashTool implements Disposable {
      * await bash.execute('npm install', 120000);
      */
     execute(command: string, timeout?: number): Promise<ToolResult>;
+    private resolveRtkCommand;
     /**
      * Checkpoint files that would be affected by destructive commands.
      * Parses command arguments to identify file targets of rm, mv, etc.

package/dist/tools/bash/bash-tool.js

@@ -28,6 +28,7 @@ import { SafeBinariesChecker } from '../../security/safe-binaries.js';
 import { getCheckpointManager } from '../../checkpoints/checkpoint-manager.js';
 import { auditLogger } from '../../security/audit-logger.js';
 import { buildBashEnvPrelude, CONTROLLED_SUBPROCESS_ENV } from './env-overrides.js';
+import { rewriteCommandWithRtk } from './rtk-rewrite.js';
 export class BashTool {
     currentDirectory = process.cwd();
     confirmationService = ConfirmationService.getInstance();
@@ -331,8 +332,9 @@ export class BashTool {
                     };
                 }
             }
+            const executionCommand = await this.resolveRtkCommand(command);
             // Execute using spawn (safer than exec)
-            const result = await this.executeWithSpawn(command, {
+            const result = await this.executeWithSpawn(executionCommand, {
                 timeout,
                 cwd: this.currentDirectory,
             });
@@ -340,7 +342,7 @@ export class BashTool {
                 const errorMessage = result.stderr || `Command exited with code ${result.exitCode}`;
                 // Attempt self-healing if enabled
                 if (this.selfHealingEnabled) {
-                    const healingResult = await this.selfHealingEngine.attemptHealing(command, errorMessage, async (fixCmd) => {
+                    const healingResult = await this.selfHealingEngine.attemptHealing(executionCommand, errorMessage, async (fixCmd) => {
                         // Execute fix command without self-healing to avoid recursion
                         const fixResult = await this.executeWithSpawn(fixCmd, {
                             timeout: timeout * 2, // Give more time for fix commands
@@ -405,6 +407,18 @@ export class BashTool {
             };
         }
     }
+    async resolveRtkCommand(command) {
+        const rewrite = await rewriteCommandWithRtk(command);
+        if (!rewrite.rewritten)
+            return command;
+        const safetyValidation = validateCommandSafety(rewrite.command);
+        if (!safetyValidation.valid)
+            return command;
+        const validation = this.validateCommand(rewrite.command);
+        if (!validation.valid)
+            return command;
+        return rewrite.command;
+    }
     /**
      * Checkpoint files that would be affected by destructive commands.
      * Parses command arguments to identify file targets of rm, mv, etc.

package/dist/tools/bash/command-validator.js

@@ -17,6 +17,9 @@ import { auditLogger } from '../../security/audit-logger.js';
  * Handles paths, env var prefixes, and common shell constructs
  */
 export function extractBaseCommand(command) {
+    // Defensive: a malformed tool call can pass a non-string command.
+    if (typeof command !== 'string')
+        return null;
     // Trim and handle empty
     const trimmed = command.trim();
     if (!trimmed)

package/dist/tools/bash/rtk-rewrite.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Optional RTK command rewriting.
+ *
+ * RTK is a CLI proxy, not a TypeScript library. We integrate through its
+ * stable `rtk rewrite <command>` interface and fail open: when RTK is absent,
+ * disabled, times out, or proposes no rewrite, the original command is used.
+ */
+export interface RtkRewriteResult {
+    originalCommand: string;
+    command: string;
+    rewritten: boolean;
+    reason?: string;
+}
+export declare function isRtkRewriteEnabled(env?: NodeJS.ProcessEnv): boolean;
+export declare function getRtkRewriteTimeoutMs(env?: NodeJS.ProcessEnv): number;
+export declare function rewriteCommandWithRtk(command: string): Promise<RtkRewriteResult>;

package/dist/tools/bash/rtk-rewrite.js

@@ -0,0 +1,100 @@
+/**
+ * Optional RTK command rewriting.
+ *
+ * RTK is a CLI proxy, not a TypeScript library. We integrate through its
+ * stable `rtk rewrite <command>` interface and fail open: when RTK is absent,
+ * disabled, times out, or proposes no rewrite, the original command is used.
+ */
+import { spawn } from 'child_process';
+import { getShellEnvPolicy } from '../../security/shell-env-policy.js';
+import { getFilteredEnv } from './command-validator.js';
+import { CONTROLLED_SUBPROCESS_ENV } from './env-overrides.js';
+const DEFAULT_RTK_TIMEOUT_MS = 1000;
+const MAX_REWRITE_OUTPUT_BYTES = 64 * 1024;
+export function isRtkRewriteEnabled(env = process.env) {
+    const raw = (env.CODEBUDDY_RTK_REWRITE ?? env.CODEBUDDY_RTK ?? '').trim().toLowerCase();
+    return raw === '1' || raw === 'true' || raw === 'yes' || raw === 'on' || raw === 'auto';
+}
+export function getRtkRewriteTimeoutMs(env = process.env) {
+    const raw = Number(env.CODEBUDDY_RTK_TIMEOUT_MS);
+    if (Number.isFinite(raw) && raw >= 50 && raw <= 10000) {
+        return Math.trunc(raw);
+    }
+    return DEFAULT_RTK_TIMEOUT_MS;
+}
+export async function rewriteCommandWithRtk(command) {
+    const originalCommand = command;
+    // Defensive: a malformed tool call can pass a non-string command.
+    if (typeof command !== 'string') {
+        return { originalCommand, command, rewritten: false, reason: 'invalid-command' };
+    }
+    if (!isRtkRewriteEnabled()) {
+        return { originalCommand, command, rewritten: false, reason: 'disabled' };
+    }
+    const trimmed = command.trim();
+    if (!trimmed) {
+        return { originalCommand, command, rewritten: false, reason: 'empty-command' };
+    }
+    if (/^rtk(?:\s|$)/.test(trimmed)) {
+        return { originalCommand, command, rewritten: false, reason: 'already-rtk' };
+    }
+    return new Promise((resolve) => {
+        let stdout = '';
+        let settled = false;
+        const finish = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            resolve(result);
+        };
+        const filteredEnv = getFilteredEnv();
+        const env = {
+            ...getShellEnvPolicy().buildEnv(filteredEnv),
+            ...CONTROLLED_SUBPROCESS_ENV,
+        };
+        const proc = spawn('rtk', ['rewrite', command], {
+            shell: false,
+            env,
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        const timer = setTimeout(() => {
+            try {
+                proc.kill('SIGTERM');
+            }
+            catch {
+                // Process already exited.
+            }
+            finish({ originalCommand, command, rewritten: false, reason: 'timeout' });
+        }, getRtkRewriteTimeoutMs());
+        proc.stdout?.on('data', (data) => {
+            if (stdout.length >= MAX_REWRITE_OUTPUT_BYTES)
+                return;
+            stdout += data.toString();
+            if (stdout.length > MAX_REWRITE_OUTPUT_BYTES) {
+                stdout = stdout.slice(0, MAX_REWRITE_OUTPUT_BYTES);
+            }
+        });
+        proc.on('error', () => {
+            clearTimeout(timer);
+            finish({ originalCommand, command, rewritten: false, reason: 'spawn-error' });
+        });
+        proc.on('close', () => {
+            clearTimeout(timer);
+            const rewritten = stdout.trim();
+            if (!rewritten) {
+                finish({ originalCommand, command, rewritten: false, reason: 'no-rewrite' });
+                return;
+            }
+            if (rewritten === trimmed) {
+                finish({ originalCommand, command, rewritten: false, reason: 'unchanged' });
+                return;
+            }
+            if (rewritten.includes('\n')) {
+                finish({ originalCommand, command, rewritten: false, reason: 'multiline-rewrite' });
+                return;
+            }
+            finish({ originalCommand, command: rewritten, rewritten: true });
+        });
+    });
+}
+//# sourceMappingURL=rtk-rewrite.js.map

package/dist/tools/bash/streaming-executor.js

@@ -11,6 +11,7 @@ import { validateCommand } from './command-validator.js';
 import { getFilteredEnv } from './command-validator.js';
 import { getShellEnvPolicy } from '../../security/shell-env-policy.js';
 import { buildBashEnvPrelude, CONTROLLED_SUBPROCESS_ENV } from './env-overrides.js';
+import { rewriteCommandWithRtk } from './rtk-rewrite.js';
 /**
  * Execute a command with streaming output.
  * Yields each line of stdout/stderr as it arrives.
@@ -45,6 +46,18 @@ export async function* executeStreaming(command, timeout = 30000, deps) {
             return { success: false, error: confirmationResult.feedback || 'Cancelled by user' };
         }
     }
+    const rewrite = await rewriteCommandWithRtk(command);
+    let executionCommand = command;
+    if (rewrite.rewritten) {
+        const rewrittenValidation = validateCommand(rewrite.command);
+        const rewrittenSandboxValidation = deps.getSandboxManager().validateCommand(rewrite.command);
+        const rewrittenSafetyValidation = validateCommandSafety(rewrite.command);
+        if (rewrittenValidation.valid &&
+            rewrittenSandboxValidation.valid &&
+            rewrittenSafetyValidation.valid) {
+            executionCommand = rewrite.command;
+        }
+    }
     // Spawn the process
     const isWindows = process.platform === 'win32';
     const policyEnv = getShellEnvPolicy().buildEnv(getFilteredEnv());
@@ -52,7 +65,7 @@ export async function* executeStreaming(command, timeout = 30000, deps) {
         ...policyEnv,
         ...CONTROLLED_SUBPROCESS_ENV,
     };
-    const proc = spawn('bash', ['-c', `${buildBashEnvPrelude()}\n${command}`], {
+    const proc = spawn('bash', ['-c', `${buildBashEnvPrelude()}\n${executionCommand}`], {
         shell: false,
         cwd: deps.getCurrentDirectory(),
         env: controlledEnv,

package/dist/tools/computer-control-tool.d.ts

@@ -41,7 +41,7 @@ export declare function resolveGroundingCoordinatesToAbsolute(rel: {
     x: number;
     y: number;
 } | null;
-export type ComputerAction = 'snapshot' | 'snapshot_with_screenshot' | 'get_element' | 'find_elements' | 'click_element_by_name' | 'click_button' | 'click_link' | 'fill_text_field' | 'clear_and_type' | 'select_dropdown_option' | 'select_radio' | 'activate_tab' | 'select_list_item' | 'open_menu_item' | 'toggle_checkbox' | 'set_slider_value' | 'select_tree_item' | 'expand_tree_item' | 'collapse_tree_item' | 'assert_text_visible' | 'assert_element_visible' | 'inspect_dialog' | 'click_dialog_button' | 'handle_dialog' | 'list_app_profiles' | 'get_app_profile' | 'open_app' | 'focus_app' | 'read_app_text' | 'save_app_document' | 'excel_open_workbook' | 'excel_set_cell' | 'excel_get_cell' | 'excel_save_workbook' | 'use_app_workflow' | 'macro' | 'click_text' | 'save_macro' | 'play_macro' | 'list_macros' | 'delete_macro' | 'wait_for_text' | 'speak' | 'click' | 'left_click' | 'middle_click' | 'double_click' | 'right_click' | 'move_mouse' | 'drag' | 'scroll' | 'cursor_position' | 'wait' | 'type' | 'key' | 'key_down' | 'key_up' | 'hotkey' | 'get_windows' | 'get_window' | 'list_window_matches' | 'wait_for_window' | 'focus_window' | 'close_window' | 'get_active_window' | 'minimize_window' | 'maximize_window' | 'restore_window' | 'move_window' | 'resize_window' | 'set_window' | 'act_on_best_window' | 'get_audit_log' | 'clear_audit_log' | 'export_audit_log' | 'set_pilot_mode' | 'get_pilot_mode' | 'get_volume' | 'set_volume' | 'get_brightness' | 'set_brightness' | 'notify' | 'lock' | 'sleep' | 'start_recording' | 'stop_recording' | 'recording_status' | 'system_info' | 'battery_info' | 'network_info' | 'check_permission';
+export type ComputerAction = 'snapshot' | 'snapshot_with_screenshot' | 'get_element' | 'find_elements' | 'click_element_by_name' | 'click_button' | 'click_link' | 'fill_text_field' | 'clear_and_type' | 'select_dropdown_option' | 'select_radio' | 'activate_tab' | 'select_list_item' | 'open_menu_item' | 'toggle_checkbox' | 'set_slider_value' | 'select_tree_item' | 'expand_tree_item' | 'collapse_tree_item' | 'assert_text_visible' | 'assert_element_visible' | 'inspect_dialog' | 'click_dialog_button' | 'handle_dialog' | 'list_app_profiles' | 'get_app_profile' | 'open_app' | 'focus_app' | 'read_app_text' | 'save_app_document' | 'excel_open_workbook' | 'excel_set_cell' | 'excel_get_cell' | 'excel_save_workbook' | 'powerpoint_open_presentation' | 'powerpoint_add_slide' | 'powerpoint_set_text' | 'powerpoint_save_presentation' | 'word_open_document' | 'word_type_text' | 'word_save_document' | 'use_app_workflow' | 'macro' | 'click_text' | 'save_macro' | 'play_macro' | 'list_macros' | 'delete_macro' | 'wait_for_text' | 'speak' | 'click' | 'left_click' | 'middle_click' | 'double_click' | 'right_click' | 'move_mouse' | 'drag' | 'scroll' | 'cursor_position' | 'wait' | 'type' | 'key' | 'key_down' | 'key_up' | 'hotkey' | 'get_windows' | 'get_window' | 'list_window_matches' | 'wait_for_window' | 'focus_window' | 'close_window' | 'get_active_window' | 'minimize_window' | 'maximize_window' | 'restore_window' | 'move_window' | 'resize_window' | 'set_window' | 'act_on_best_window' | 'get_audit_log' | 'clear_audit_log' | 'export_audit_log' | 'set_pilot_mode' | 'get_pilot_mode' | 'get_volume' | 'set_volume' | 'get_brightness' | 'set_brightness' | 'notify' | 'lock' | 'sleep' | 'start_recording' | 'stop_recording' | 'recording_status' | 'system_info' | 'battery_info' | 'network_info' | 'check_permission';
 export interface ComputerControlInput {
     action: ComputerAction;
     pilotMode?: 'cautious' | 'normal' | 'fast';
@@ -52,6 +52,7 @@ export interface ComputerControlInput {
     exportAuditPath?: string;
     policyOverrides?: Record<string, 'allow' | 'block' | 'confirm'>;
     interactiveOnly?: boolean;
+    useOmniParser?: boolean;
     ref?: number;
     role?: string;
     name?: string;
@@ -61,6 +62,9 @@ export interface ComputerControlInput {
     sheetName?: string;
     cell?: string;
     value?: string | number | boolean | null;
+    slideIndex?: number;
+    shapeIndex?: number;
+    layoutIndex?: number;
     x?: number;
     y?: number;
     width?: number;
@@ -116,6 +120,7 @@ export declare class ComputerControlTool {
     private systemControl;
     private snapshotManager;
     private screenRecorder;
+    private omniParser;
     private lastTargetFocusProof;
     private lastVisualContextProof;
     /**
@@ -169,10 +174,18 @@ export declare class ComputerControlTool {
     private readAppText;
     private saveAppDocument;
     private withDerivedTextDocumentTarget;
+    private basenameForWindowTitle;
     private excelOpenWorkbook;
     private excelSetCell;
     private excelGetCell;
     private excelSaveWorkbook;
+    private powerpointOpenPresentation;
+    private powerpointAddSlide;
+    private powerpointSetText;
+    private powerpointSavePresentation;
+    private wordOpenDocument;
+    private wordTypeText;
+    private wordSaveDocument;
     private click;
     private doubleClick;
     private rightClick;
@@ -228,6 +241,8 @@ export declare class ComputerControlTool {
     private buildStartProcessScript;
     private runPowerShellEncoded;
     private runExcelAutomation;
+    private runPowerpointAutomation;
+    private runWordAutomation;
     private tryWindowsSelectDropdownOption;
     private tryWindowsActivateNamedRole;
     private tryWindowsSetRangeValue;