@poe-platform/safe-bash 0.1.818 → 0.1.820

package/dist/safe-bash-command-llm/index.js

@@ -4,84 +4,114 @@ import {
 import "../safe-bash/command-chunks/chunk-54KLOXWD.js";
 import {
   createElevenLabsProvider
-} from "../safe-bash/command-chunks/chunk-O2XP6HQN.js";
+} from "../safe-bash/command-chunks/chunk-ZBGP6XEG.js";
 import "../safe-bash/command-chunks/chunk-OE4JR6WJ.js";
 import {
   chatJson,
   createOpenAiProvider,
-  jsonString,
   openAiChatOptions
-} from "../safe-bash/command-chunks/chunk-E3BL7W5C.js";
-import "../safe-bash/command-chunks/chunk-GDH7OVYK.js";
-import "../safe-bash/command-chunks/chunk-WKUV62RJ.js";
-import "../safe-bash/command-chunks/chunk-4SISSPIH.js";
+} from "../safe-bash/command-chunks/chunk-IAHYG67O.js";
+import {
+  jsonString
+} from "../safe-bash/command-chunks/chunk-CJIFJ45R.js";
+import "../safe-bash/command-chunks/chunk-UN2RIRCD.js";
+import "../safe-bash/command-chunks/chunk-HLRLMFMS.js";
 import {
+  LlmCancelToolCall,
   createLlmCommand,
   createLlmCommands,
+  createLlmFragmentLoaders,
+  createLlmFragmentSource,
   createLlmInputBudget,
   createLlmTemplateStore,
+  createLlmToolRegistry,
+  createLlmUrlFragmentSource,
   createLlmUrlSource,
   evaluateLlmTemplate,
+  executeLlmToolCalls,
   findExtractedRange,
+  getLlmFragmentPrefix,
   getLlmModelAliases,
   llmCommands,
   llmReferenceVersion,
   llmTemplateUsesInput,
+  loadLlmPluginFragments,
   parseLlmSchemaDsl,
   resolveLlmSchemaInput,
   selectLlmModelByQuery,
+  selectLlmTools,
   serializeLlmTokenUsage,
+  streamLlmToolChain,
   validateLlmTemplateParameters
-} from "../safe-bash/command-chunks/chunk-KSM5CCHT.js";
+} from "../safe-bash/command-chunks/chunk-FVHPDYV5.js";
+import "../safe-bash/command-chunks/chunk-MCUDSE4H.js";
 import {
-  createLlmService,
-  validateModelOptions
-} from "../safe-bash/command-chunks/chunk-7ITPO2V6.js";
+  createLlmConfiguration
+} from "../safe-bash/command-chunks/chunk-WOT2YXBT.js";
 import {
-  createLlmConfiguration,
   createLlmSpool
-} from "../safe-bash/command-chunks/chunk-7YDJ7LDO.js";
+} from "../safe-bash/command-chunks/chunk-BZLLQWRK.js";
+import {
+  createLlmService,
+  validateModelOptions
+} from "../safe-bash/command-chunks/chunk-YNFQ5AXM.js";
+import "../safe-bash/command-chunks/chunk-3PO534WJ.js";
 import {
   getLlmAttachmentUrlId
-} from "../safe-bash/command-chunks/chunk-2ZWRW6UQ.js";
+} from "../safe-bash/command-chunks/chunk-B74LVFAN.js";
+import "../safe-bash/command-chunks/chunk-GDH7OVYK.js";
+import {
+  base64Stream
+} from "../safe-bash/command-chunks/chunk-GQV5RWMN.js";
+import "../safe-bash/command-chunks/chunk-CKQ5SXOO.js";
 import {
   resolveUrlAttachment
-} from "../safe-bash/command-chunks/chunk-OTEHQQU7.js";
+} from "../safe-bash/command-chunks/chunk-B6NAEWHC.js";
+import "../safe-bash/command-chunks/chunk-E47FFS5M.js";
+import "../safe-bash/command-chunks/chunk-QX3WKBLI.js";
 import {
-  base64Stream,
   jsonValue
-} from "../safe-bash/command-chunks/chunk-UVZJAV2S.js";
+} from "../safe-bash/command-chunks/chunk-GNPPPYDF.js";
 import "../safe-bash/command-chunks/chunk-VMA3NJXU.js";
-import "../safe-bash/command-chunks/chunk-UN2RIRCD.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
+  LlmCancelToolCall,
   createElevenLabsProvider,
   createLlmCommand,
   createLlmCommands,
   createLlmConfiguration,
+  createLlmFragmentLoaders,
+  createLlmFragmentSource,
   createLlmInputBudget,
   createLlmService,
   createLlmSpool,
   createLlmTemplateStore,
+  createLlmToolRegistry,
+  createLlmUrlFragmentSource,
   createLlmUrlSource,
   createOpenAiProvider,
   base64Stream as encodeLlmBase64,
   evaluateLlmTemplate,
+  executeLlmToolCalls,
   findExtractedRange,
   getLlmAttachmentUrlId,
+  getLlmFragmentPrefix,
   getLlmModelAliases,
   llmCommands,
   llmReferenceVersion,
   llmTemplateUsesInput,
+  loadLlmPluginFragments,
   openAiChatOptions,
   parseLlmSchemaDsl,
   resolveLlmSchemaInput,
   resolveUrlAttachment as resolveLlmUrlAttachment,
   selectLlmModelByQuery,
+  selectLlmTools,
   jsonString as serializeLlmJsonString,
   jsonValue as serializeLlmJsonValue,
   serializeLlmTokenUsage,
   chatJson as serializeOpenAiChatRequest,
+  streamLlmToolChain,
   templateYaml,
   validateLlmTemplateParameters,
   validateModelOptions

package/dist/safe-bash-command-llm/input-budget.d.ts

@@ -10,5 +10,7 @@ export declare function createLlmInputBudget(limits?: LlmInputLimits, parent?: C
     readonly totalBytes: number;
     remaining(materialized?: boolean): number;
     admit(size: number, materialized?: boolean): void;
+    /** Charge materialization of bytes already admitted as streamed input. */
+    materialize(size: number): void;
     admitText(text: string): void;
 };

package/dist/safe-bash-command-llm/openai-sse.d.ts

@@ -1,3 +1,3 @@
 import type { LlmResponseMetadata } from "./types.js";
 import type { ByteSource } from "../safe-bash-contracts/index.js";
-export declare function openAiChat(source: ByteSource, signal: AbortSignal, limit?: number, responseLimit?: number): AsyncGenerator<string, LlmResponseMetadata>;
+export declare function openAiChat(source: ByteSource, signal: AbortSignal, limit?: number, responseLimit?: number, toolLimit?: number): AsyncGenerator<string, LlmResponseMetadata>;

package/dist/safe-bash-command-llm/openai-sse.js

@@ -1,7 +1,10 @@
 import {
   openAiChat
-} from "../safe-bash/command-chunks/chunk-WKUV62RJ.js";
+} from "../safe-bash/command-chunks/chunk-CJIFJ45R.js";
 import "../safe-bash/command-chunks/chunk-UN2RIRCD.js";
+import "../safe-bash/command-chunks/chunk-E47FFS5M.js";
+import "../safe-bash/command-chunks/chunk-QX3WKBLI.js";
+import "../safe-bash/command-chunks/chunk-GNPPPYDF.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   openAiChat

package/dist/safe-bash-command-llm/openai.js

@@ -1,15 +1,19 @@
 import {
   chatJson,
   createOpenAiProvider
-} from "../safe-bash/command-chunks/chunk-E3BL7W5C.js";
+} from "../safe-bash/command-chunks/chunk-IAHYG67O.js";
+import "../safe-bash/command-chunks/chunk-CJIFJ45R.js";
+import "../safe-bash/command-chunks/chunk-UN2RIRCD.js";
+import "../safe-bash/command-chunks/chunk-HLRLMFMS.js";
+import "../safe-bash/command-chunks/chunk-B74LVFAN.js";
 import "../safe-bash/command-chunks/chunk-GDH7OVYK.js";
-import "../safe-bash/command-chunks/chunk-WKUV62RJ.js";
-import "../safe-bash/command-chunks/chunk-4SISSPIH.js";
-import "../safe-bash/command-chunks/chunk-2ZWRW6UQ.js";
-import "../safe-bash/command-chunks/chunk-OTEHQQU7.js";
-import "../safe-bash/command-chunks/chunk-UVZJAV2S.js";
+import "../safe-bash/command-chunks/chunk-GQV5RWMN.js";
+import "../safe-bash/command-chunks/chunk-CKQ5SXOO.js";
+import "../safe-bash/command-chunks/chunk-B6NAEWHC.js";
+import "../safe-bash/command-chunks/chunk-E47FFS5M.js";
+import "../safe-bash/command-chunks/chunk-QX3WKBLI.js";
+import "../safe-bash/command-chunks/chunk-GNPPPYDF.js";
 import "../safe-bash/command-chunks/chunk-VMA3NJXU.js";
-import "../safe-bash/command-chunks/chunk-UN2RIRCD.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   createOpenAiProvider,

package/dist/safe-bash-command-llm/providers/elevenlabs.js

@@ -1,9 +1,9 @@
 import "../../safe-bash/command-chunks/chunk-W5KJO3MW.js";
 import {
   createElevenLabsProvider
-} from "../../safe-bash/command-chunks/chunk-O2XP6HQN.js";
+} from "../../safe-bash/command-chunks/chunk-ZBGP6XEG.js";
 import "../../safe-bash/command-chunks/chunk-OE4JR6WJ.js";
-import "../../safe-bash/command-chunks/chunk-4SISSPIH.js";
+import "../../safe-bash/command-chunks/chunk-HLRLMFMS.js";
 import "../../safe-bash/command-chunks/chunk-VMA3NJXU.js";
 import "../../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {

package/dist/safe-bash-command-llm/providers/index.js

@@ -3,25 +3,31 @@ import "../../safe-bash/command-chunks/chunk-MUUY3FZC.js";
 import "../../safe-bash/command-chunks/chunk-54KLOXWD.js";
 import {
   createElevenLabsProvider
-} from "../../safe-bash/command-chunks/chunk-O2XP6HQN.js";
+} from "../../safe-bash/command-chunks/chunk-ZBGP6XEG.js";
 import "../../safe-bash/command-chunks/chunk-OE4JR6WJ.js";
 import {
   chatJson,
   createOpenAiProvider,
-  jsonString,
   openAiChatOptions
-} from "../../safe-bash/command-chunks/chunk-E3BL7W5C.js";
+} from "../../safe-bash/command-chunks/chunk-IAHYG67O.js";
+import {
+  jsonString
+} from "../../safe-bash/command-chunks/chunk-CJIFJ45R.js";
+import "../../safe-bash/command-chunks/chunk-UN2RIRCD.js";
+import "../../safe-bash/command-chunks/chunk-HLRLMFMS.js";
+import "../../safe-bash/command-chunks/chunk-B74LVFAN.js";
 import "../../safe-bash/command-chunks/chunk-GDH7OVYK.js";
-import "../../safe-bash/command-chunks/chunk-WKUV62RJ.js";
-import "../../safe-bash/command-chunks/chunk-4SISSPIH.js";
-import "../../safe-bash/command-chunks/chunk-2ZWRW6UQ.js";
-import "../../safe-bash/command-chunks/chunk-OTEHQQU7.js";
 import {
-  base64Stream,
+  base64Stream
+} from "../../safe-bash/command-chunks/chunk-GQV5RWMN.js";
+import "../../safe-bash/command-chunks/chunk-CKQ5SXOO.js";
+import "../../safe-bash/command-chunks/chunk-B6NAEWHC.js";
+import "../../safe-bash/command-chunks/chunk-E47FFS5M.js";
+import "../../safe-bash/command-chunks/chunk-QX3WKBLI.js";
+import {
   jsonValue
-} from "../../safe-bash/command-chunks/chunk-UVZJAV2S.js";
+} from "../../safe-bash/command-chunks/chunk-GNPPPYDF.js";
 import "../../safe-bash/command-chunks/chunk-VMA3NJXU.js";
-import "../../safe-bash/command-chunks/chunk-UN2RIRCD.js";
 import "../../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   createElevenLabsProvider,

package/dist/safe-bash-command-llm/providers/openai.js

@@ -2,15 +2,19 @@ import "../../safe-bash/command-chunks/chunk-MUUY3FZC.js";
 import {
   chatJson,
   createOpenAiProvider
-} from "../../safe-bash/command-chunks/chunk-E3BL7W5C.js";
+} from "../../safe-bash/command-chunks/chunk-IAHYG67O.js";
+import "../../safe-bash/command-chunks/chunk-CJIFJ45R.js";
+import "../../safe-bash/command-chunks/chunk-UN2RIRCD.js";
+import "../../safe-bash/command-chunks/chunk-HLRLMFMS.js";
+import "../../safe-bash/command-chunks/chunk-B74LVFAN.js";
 import "../../safe-bash/command-chunks/chunk-GDH7OVYK.js";
-import "../../safe-bash/command-chunks/chunk-WKUV62RJ.js";
-import "../../safe-bash/command-chunks/chunk-4SISSPIH.js";
-import "../../safe-bash/command-chunks/chunk-2ZWRW6UQ.js";
-import "../../safe-bash/command-chunks/chunk-OTEHQQU7.js";
-import "../../safe-bash/command-chunks/chunk-UVZJAV2S.js";
+import "../../safe-bash/command-chunks/chunk-GQV5RWMN.js";
+import "../../safe-bash/command-chunks/chunk-CKQ5SXOO.js";
+import "../../safe-bash/command-chunks/chunk-B6NAEWHC.js";
+import "../../safe-bash/command-chunks/chunk-E47FFS5M.js";
+import "../../safe-bash/command-chunks/chunk-QX3WKBLI.js";
+import "../../safe-bash/command-chunks/chunk-GNPPPYDF.js";
 import "../../safe-bash/command-chunks/chunk-VMA3NJXU.js";
-import "../../safe-bash/command-chunks/chunk-UN2RIRCD.js";
 import "../../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   createOpenAiProvider,

package/dist/safe-bash-command-llm/providers/shared.d.ts

@@ -1,6 +1,8 @@
 import type { ByteSource } from "../../safe-bash-contracts/io.js";
 import type { HttpHeaders } from "../../safe-bash-contracts/http.js";
 export interface LlmProviderLimits {
+    /** Aggregate retained tool names, IDs and JSON arguments across response deltas. */
+    readonly maxToolCallBytes: number;
     readonly maxRequestBytes: number;
     readonly maxResponseBytes: number;
     readonly maxEventBytes: number;

package/dist/safe-bash-command-llm/providers/shared.js

@@ -3,7 +3,7 @@ import {
   jsonBody,
   multipart,
   providerLimits
-} from "../../safe-bash/command-chunks/chunk-4SISSPIH.js";
+} from "../../safe-bash/command-chunks/chunk-HLRLMFMS.js";
 import "../../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {
   credential,

package/dist/safe-bash-command-llm/retained-spool.d.ts

@@ -1,3 +1,4 @@
+import type { LlmInputSource } from "./types.js";
 import { type FileSystem } from "../safe-bash-contracts/index.js";
 /** Retain bytes in caller-owned staging and replay bounded identity-checked reads. */
 export declare function createLlmSpool(fs: FileSystem, directory: string, signal: AbortSignal, purpose?: "input" | "output"): Promise<{
@@ -9,5 +10,8 @@ export declare function createLlmSpool(fs: FileSystem, directory: string, signal
         start: number;
         end: number;
     } | undefined>): AsyncIterable<Uint8Array>;
+    /** A fresh identity-checked reader. Disposing it never closes the backing
+     * spool; closing the spool retires every outstanding reader. */
+    lease(leaseSignal?: AbortSignal): Promise<LlmInputSource>;
     close(): Promise<void>;
 }>;

package/dist/safe-bash-command-llm/service.d.ts

@@ -31,7 +31,9 @@ export type LlmStreamEvent = {
 export interface LlmService {
     readonly version: 1;
     readonly models: readonly LlmServiceModel[];
-    resolve(model?: string): LlmServiceModel;
+    resolve(model?: string, options?: {
+        readonly async?: boolean;
+    }): LlmServiceModel;
     complete(request: LlmServiceRequest): AsyncIterable<string | Uint8Array, LlmResponseMetadata | void>;
     stream(request: LlmServiceRequest): AsyncIterable<LlmStreamEvent>;
     streamSources?(request: LlmServiceSourceRequest): AsyncIterable<LlmStreamEvent>;

package/dist/safe-bash-command-llm/service.js

@@ -1,7 +1,10 @@
 import {
   createLlmService
-} from "../safe-bash/command-chunks/chunk-7ITPO2V6.js";
-import "../safe-bash/command-chunks/chunk-OTEHQQU7.js";
+} from "../safe-bash/command-chunks/chunk-YNFQ5AXM.js";
+import "../safe-bash/command-chunks/chunk-3PO534WJ.js";
+import "../safe-bash/command-chunks/chunk-CKQ5SXOO.js";
+import "../safe-bash/command-chunks/chunk-B6NAEWHC.js";
+import "../safe-bash/command-chunks/chunk-GNPPPYDF.js";
 import "../safe-bash/command-chunks/chunk-VMA3NJXU.js";
 import "../safe-bash/command-chunks/chunk-65DS4IOB.js";
 export {

package/dist/safe-bash-command-llm/tool-chain.d.ts

@@ -0,0 +1,22 @@
+import type { LlmStreamEvent } from "./service.js";
+import { type LlmToolExecutionOptions, type LlmToolExecutionResult } from "./tool-execution.js";
+export interface LlmToolChainOptions extends Omit<LlmToolExecutionOptions, "calls" | "maxOutputBytes"> {
+    /** Open one response through the shared service. The host supplies all request
+     * data and owns continuation state. Called only after all prior results have
+     * been visited. Index is zero-based; use the supplied cancellation signal. */
+    readonly openResponse: (index: number, signal: AbortSignal) => AsyncIterable<LlmStreamEvent>;
+    /** Borrow each result during this callback; consume/stage leases before returning.
+     * Async visitors may overlap. Use the original call index for ordered staging. */
+    readonly visit: (result: LlmToolExecutionResult, index: number) => void | PromiseLike<void>;
+    /** Pinned SDK default is 10 (the CLI uses 5). Zero/null disables this limit.
+     * Use bigint for Python integers outside the JavaScript safe integer range. */
+    readonly chainLimit?: number | bigint | null;
+    /** Aggregate response text/bytes and tool-call controls, across all rounds. */
+    readonly maxOutputBytes?: number;
+    /** Aggregate consumed tool output and attachment bytes, across all rounds. */
+    readonly maxToolOutputBytes?: number;
+}
+/** Pinned chain rounds without a retained response/conversation list.
+ * The consumer observes response events before tool execution; returning early
+ * aborts the current response and never executes its outstanding tools. */
+export declare function streamLlmToolChain(options: LlmToolChainOptions): AsyncGenerator<LlmStreamEvent>;

package/dist/safe-bash-command-llm/tool-execution.d.ts

@@ -0,0 +1,55 @@
+import type { CommandContext, FileSystem } from "../safe-bash-contracts/index.js";
+import type { LlmTool, LlmToolCall, LlmOption, LlmInputSource, LlmSourceAttachment } from "./types.js";
+export interface LlmToolContext {
+    readonly fs: FileSystem;
+    readonly cwd: string;
+    readonly signal: AbortSignal;
+    readonly capabilities?: CommandContext["capabilities"];
+    /** Remaining output admission. Implementations own pre-return acquisition. */
+    readonly maxBytes: number;
+}
+export type LlmToolOutput = ({
+    readonly output: LlmOption;
+    readonly source?: never;
+} | {
+    readonly source: LlmInputSource;
+    readonly output?: never;
+}) & {
+    readonly attachments?: readonly LlmSourceAttachment[];
+};
+export interface LlmExecutableTool extends LlmTool {
+    /** Shared runtime preparation runs once per distinct hook, before approvals.
+     * The runtime owns per-instance initialization and retirement. */
+    readonly prepare?: (context: LlmToolContext, mode: {
+        readonly async: boolean;
+    }) => void | PromiseLike<void>;
+    /** Declared coroutine, eligible for concurrent execution in async mode.
+     * Promise-returning synchronous implementations leave this unset. */
+    readonly async?: boolean;
+    readonly implementation?: (args: Readonly<Record<string, LlmOption>>, context: LlmToolContext) => LlmToolOutput | PromiseLike<LlmToolOutput>;
+}
+export interface LlmToolExecutionResult {
+    readonly call: LlmToolCall;
+    readonly output: LlmInputSource;
+    readonly attachments: readonly LlmSourceAttachment[];
+    readonly executed: boolean;
+    readonly exception?: unknown;
+}
+export interface LlmToolExecutionOptions {
+    /** Pinned AsyncResponse semantics; default is serial Response execution. */
+    readonly async?: boolean;
+    readonly tools: readonly LlmExecutableTool[];
+    readonly calls: readonly LlmToolCall[];
+    readonly context: Omit<LlmToolContext, "maxBytes">;
+    readonly maxOutputBytes?: number;
+    readonly beforeCall?: (tool: LlmExecutableTool | undefined, call: LlmToolCall, context: LlmToolContext) => void | PromiseLike<void>;
+}
+/** Throw only from beforeCall to decline this call and continue the batch. */
+export declare class LlmCancelToolCall extends Error {
+}
+/** Execute using pinned Response/AsyncResponse semantics. Each result is
+ * borrowed only during visit; stage it in caller storage if needed later. In
+ * async mode visitors may overlap and run in completion order; the second
+ * argument is the original call index for host-owned ordered staging. No
+ * result payloads, conversation, response list or history are retained. */
+export declare function executeLlmToolCalls(options: LlmToolExecutionOptions, visit: (result: LlmToolExecutionResult, index: number) => void | PromiseLike<void>): Promise<void>;

package/dist/safe-bash-command-llm/tool-registry.d.ts

@@ -0,0 +1,43 @@
+import type { CommandContext } from "../safe-bash-contracts/index.js";
+import type { LlmExecutableTool } from "./tool-execution.js";
+/** Display metadata supplied by the host that registers the callable. */
+export interface LlmRegisteredTool extends LlmExecutableTool {
+    readonly registryKey?: string;
+    /** Index in the loader request’s toolNames, shared by expanded toolbox methods. */
+    readonly selectionIndex?: number;
+    readonly plugin?: string;
+    readonly signature?: string;
+}
+/** Registry keys gain collision suffixes; callable names remain unchanged. */
+export declare function createLlmToolRegistry(tools: Iterable<LlmRegisteredTool>): ReadonlyMap<string, LlmRegisteredTool>;
+/** Resolve the whole selection before any callable executes. */
+export declare function selectLlmTools(registry: ReadonlyMap<string, LlmRegisteredTool>, names: readonly string[]): readonly LlmRegisteredTool[];
+export interface LlmToolboxDescription {
+    readonly name: string;
+    readonly tools: readonly Pick<LlmRegisteredTool, "name" | "description" | "inputSchema" | "signature">[];
+}
+export interface LlmPluginQuery {
+    readonly all: boolean;
+    readonly hooks: readonly string[];
+}
+export interface LlmPluginInfo {
+    readonly name: string;
+    readonly hooks: readonly string[];
+    readonly version?: string;
+}
+/** An invocation-owned runtime for Python tools and plugin discovery. The caller owns
+ * canonical storage, transport and admission; closing retires all callables. */
+export type LlmToolLoader = (options: {
+    readonly context: CommandContext;
+    readonly definitions: readonly string[];
+    readonly toolNames?: readonly string[];
+    readonly discovery?: boolean;
+    readonly pluginQuery?: LlmPluginQuery;
+    readonly maxInputBytes: number;
+    readonly maxOutputBytes: number;
+}) => Promise<{
+    readonly tools: readonly LlmRegisteredTool[];
+    readonly toolboxes?: readonly LlmToolboxDescription[];
+    readonly plugins?: readonly LlmPluginInfo[];
+    close(): Promise<void>;
+}>;

package/dist/safe-bash-command-llm/types.d.ts

@@ -1,3 +1,5 @@
+import type { LlmFragmentLoader } from "./fragment-loaders.js";
+import type { LlmRegisteredTool, LlmToolLoader } from "./tool-registry.js";
 import type { ByteSource } from "../safe-bash-contracts/index.js";
 import type { LlmService } from "./service.js";
 import type { LlmTemplateLoader } from "./templates.js";
@@ -5,8 +7,29 @@ import type { LlmCollectionCommands } from './collections-command-types.js';
 export type LlmOption = string | number | boolean | null | readonly LlmOption[] | {
     readonly [key: string]: LlmOption;
 };
-export type LlmCapability = "messages" | "schema" | "embed" | "embed-binary" | "embed-mixed";
+export type LlmCapability = "messages" | "schema" | "tools" | "embed" | "embed-binary" | "embed-mixed";
+/** Declarative tools only. Execution and retention belong to the caller. */
+export interface LlmTool {
+    readonly name: string;
+    readonly description?: string | null;
+    readonly inputSchema: Readonly<Record<string, LlmOption>>;
+}
+export interface LlmToolCall {
+    readonly id?: string;
+    readonly name: string;
+    readonly arguments: LlmOption;
+}
+/** Caller-owned messages for one request. Tool results use toolCallId; only
+ * assistant messages may carry toolCalls. Tool output content can be a source. */
+export interface LlmMessage<Content = string, Attachment = LlmAttachment> {
+    readonly role: 'system' | 'user' | 'assistant' | 'tool';
+    readonly content: Content;
+    readonly attachments?: readonly Attachment[];
+    readonly toolCalls?: readonly LlmToolCall[];
+    readonly toolCallId?: string;
+}
 export interface LlmResponseMetadata {
+    readonly toolCalls?: readonly LlmToolCall[];
     readonly usage?: Readonly<Record<string, unknown>>;
     readonly metadata?: Readonly<Record<string, unknown>>;
 }
@@ -26,6 +49,13 @@ export interface LlmModelOption {
     readonly nullable?: boolean;
 }
 export interface LlmModel {
+    /** False forces complete-response output even when a caller requests streaming. */
+    readonly canStream?: boolean;
+    /** Optional reference display text, independent of transport/provider identity. */
+    readonly displayName?: string;
+    /** Paired async definition. Omitted fields inherit the sync metadata; IDs and
+     * aliases are shared. The provider receives request.async for dispatch. */
+    readonly asyncModel?: Partial<Omit<LlmModel, "id" | "aliases" | "asyncModel">>;
     /** Maximum inputs accepted in one embedding request for this model. */
     readonly embeddingBatchSize?: number;
     /** Source input support for this model; otherwise inferred from the provider hook. */
@@ -78,14 +108,13 @@ export type LlmSourceAttachment = {
     readonly source?: never;
 });
 export interface LlmRequest {
+    /** Select the registered async model definition before request admission. */
+    readonly async?: boolean;
+    tools?: readonly LlmTool[];
     model: string;
     prompt: string;
     system?: string;
-    messages?: readonly {
-        readonly role: "system" | "user" | "assistant";
-        readonly content: string;
-        readonly attachments?: LlmRequest["attachments"];
-    }[];
+    messages?: readonly LlmMessage[];
     schema?: Readonly<Record<string, unknown>>;
     attachments: readonly LlmAttachment[];
     options: Readonly<Record<string, LlmOption>>;
@@ -107,6 +136,9 @@ export interface LlmCommandsOptions {
     readonly providers?: readonly LlmProvider[];
     readonly defaultModel?: string;
     readonly replace?: boolean;
+    readonly fragmentLoaders?: ReadonlyMap<string, LlmFragmentLoader>;
+    readonly tools?: ReadonlyMap<string, LlmRegisteredTool>;
+    readonly loadTools?: LlmToolLoader;
     readonly templateLoaders?: ReadonlyMap<string, LlmTemplateLoader>;
     readonly maxRemoteTemplateBytes?: number;
 }
@@ -119,10 +151,6 @@ export interface LlmInputSource {
 export interface LlmSourceRequest extends Omit<LlmRequest, "prompt" | "system" | "messages" | "attachments"> {
     readonly prompt: LlmInputSource;
     readonly system?: LlmInputSource;
-    readonly messages?: readonly {
-        readonly role: "system" | "user" | "assistant";
-        readonly content: LlmInputSource;
-        readonly attachments?: LlmSourceRequest["attachments"];
-    }[];
+    readonly messages?: readonly LlmMessage<LlmInputSource, LlmSourceAttachment>[];
     readonly attachments: readonly LlmSourceAttachment[];
 }

package/dist/safe-bash-command-llm/url-fragment-source.d.ts

@@ -0,0 +1,6 @@
+import { type LlmUrlSourceOptions } from "./url-source.js";
+import type { LlmFragmentInputSource } from "./fragments.js";
+/** HTTPX-compatible UTF-8/single-byte text, acquired only through caller fetch.
+ * Redirects are limited to three, raw bytes are admitted before decoding, and
+ * emitted UTF-8 chunks remain bounded. Other declared codecs fail explicitly. */
+export declare function createLlmUrlFragmentSource(options: Omit<LlmUrlSourceOptions, "maxRedirects">): LlmFragmentInputSource;

package/dist/safe-bash-command-llm/url-source.d.ts

@@ -4,9 +4,11 @@ export interface LlmUrlSourceOptions {
     readonly fetch: typeof globalThis.fetch;
     readonly signal: AbortSignal;
     readonly maxBytes?: number;
+    /** Explicit redirect allowance; defaults to zero for attachment acquisition. */
+    readonly maxRedirects?: number;
     /** Charge aggregate host input before a downloaded chunk is exposed or copied. */
     readonly admitBytes?: (bytes: number) => void;
 }
 /** A single-use remote input lease. Uses only the injected transport; downloads
- * are pulled on demand, never materialized, and redirects are not followed. */
+ * are pulled on demand, never materialized, and redirects require an explicit allowance. */
 export declare function createLlmUrlSource(options: LlmUrlSourceOptions): LlmInputSource;

package/dist/safe-bash-command-mcp/index.browser.d.ts

@@ -892,6 +892,7 @@ interface RemoteMcpToolInvocation {
     readonly signal: AbortSignal;
 }
 type RemoteMcpToolProgress = Omit<ProgressParams, "progressToken">;
+/** Each callback is bounded separately by requestTimeoutMs; the caller signal bounds the invocation. */
 interface RemoteMcpToolLifecycleOptions {
     /** Runs after input validation and connection setup, before invoking tools/call. */
     readonly onToolStart?: (invocation: RemoteMcpToolInvocation) => void | Promise<void>;

package/dist/safe-bash-command-mcp/index.browser.js

@@ -7994,10 +7994,7 @@ async function callCommandTool(server, params, options) {
   if (options.onToolStart === void 0 && options.onToolProgress === void 0)
     return withRemoteMcpClient(server, options, (client) => client.callTool(params, { signal: options.signal }));
   const controller = new AbortController();
-  const signals = [options.signal, controller.signal];
-  if (options.requestTimeoutMs !== void 0 && options.requestTimeoutMs !== Infinity)
-    signals.push(AbortSignal.timeout(options.requestTimeoutMs));
-  const signal = AbortSignal.any(signals);
+  const signal = AbortSignal.any([options.signal, controller.signal]);
   const invocation = Object.freeze({
     invocationId: Array.from(crypto.getRandomValues(new Uint32Array(4)), (word) => word.toString(16).padStart(8, "0")).join(""),
     serverName: server.name,
@@ -8007,11 +8004,14 @@ async function callCommandTool(server, params, options) {
   let events = 0;
   const observe = async (callback) => {
     signal.throwIfAborted();
+    const deadline = options.requestTimeoutMs === void 0 || options.requestTimeoutMs === Infinity ? void 0 : setTimeout(() => controller.abort(new DOMException("MCP tool lifecycle callback timed out", "TimeoutError")), options.requestTimeoutMs);
     try {
       await interruptible(Promise.resolve(callback()), signal);
     } catch {
       if (!signal.aborted) controller.abort(new Error("MCP tool lifecycle callback failed"));
       signal.throwIfAborted();
+    } finally {
+      clearTimeout(deadline);
     }
     signal.throwIfAborted();
   };

package/dist/safe-bash-command-mcp/index.d.ts

@@ -892,6 +892,7 @@ interface RemoteMcpToolInvocation {
     readonly signal: AbortSignal;
 }
 type RemoteMcpToolProgress = Omit<ProgressParams, "progressToken">;
+/** Each callback is bounded separately by requestTimeoutMs; the caller signal bounds the invocation. */
 interface RemoteMcpToolLifecycleOptions {
     /** Runs after input validation and connection setup, before invoking tools/call. */
     readonly onToolStart?: (invocation: RemoteMcpToolInvocation) => void | Promise<void>;