@puku-ai/sdk 2.0.3 → 2.1.0

package/dist/tools/agent-toolset/node.browser.d.mts

@@ -1,51 +0,0 @@
-/**
- * Browser stub for `tools/agent-toolset/node`.
- *
- * The real module implements the `agent_toolset_20260401` tools on top of Node
- * built-ins (`node:child_process`, `node:fs`, …), which browser bundlers cannot
- * resolve. The `browser` field in `package.json` substitutes this stub in
- * browser builds so the SDK bundles cleanly for web targets; Node runtimes and
- * node-target bundles ignore the mapping and load the real implementation.
- *
- * Every value export here throws an {@link AnthropicError} when used — the
- * agent toolset only works in Node.js or a Node-compatible runtime. Type
- * exports are re-exported from the real module (erased at build time), so
- * type-level usage is unaffected.
- */
-import { AnthropicError } from '../../core/error.js';
-import type { PukuAI as Anthropic } from '../../client.js';
-import type { BetaRunnableTool } from '../../lib/tools/BetaRunnableTool.js';
-import type { AgentToolContext } from './node.js';
-export type { AgentToolContext } from './node.js';
-export declare function setupSkills(_ctx: AgentToolContext): Promise<() => Promise<void>>;
-export declare function resolveSkillVersion(_client: Anthropic, _skillId: string, _version: string): Promise<string>;
-export declare function extractSkillArchive(_resp: Response, _dest: string): Promise<void>;
-export declare function betaAgentToolset20260401(_ctx: AgentToolContext): BetaRunnableTool[];
-export declare function resolvePath(_ctx: AgentToolContext, _p: string): Promise<string>;
-/**
- * A bash command exceeded its `timeoutMs`. Carries the timeout so a caller can
- * tell it apart from an abort without matching on the message text.
- */
-export declare class BashTimeoutError extends AnthropicError {
-    readonly timeoutMs: number;
-    constructor(timeoutMs: number);
-}
-export declare class BashSession {
-    constructor(_dir: string, _env?: NodeJS.ProcessEnv);
-    get closed(): boolean;
-    exec(_command: string, _opts?: {
-        timeoutMs?: number;
-        signal?: AbortSignal | null | undefined;
-    }): Promise<{
-        output: string;
-        exitCode: number;
-    }>;
-    close(): void;
-}
-export declare function betaBashTool(_ctx: AgentToolContext): BetaRunnableTool;
-export declare function betaReadTool(_ctx: AgentToolContext): BetaRunnableTool;
-export declare function betaWriteTool(_ctx: AgentToolContext): BetaRunnableTool;
-export declare function betaEditTool(_ctx: AgentToolContext): BetaRunnableTool;
-export declare function betaGlobTool(_ctx: AgentToolContext): BetaRunnableTool;
-export declare function betaGrepTool(_ctx: AgentToolContext): BetaRunnableTool;
-//# sourceMappingURL=node.browser.d.ts.map

package/dist/tools/agent-toolset/node.browser.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"node.browser.d.ts","sourceRoot":"","sources":["../../../src/vendor/tools/agent-toolset/node.browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAC5E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAElD,YAAY,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAMlD,wBAAgB,WAAW,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAEhF;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE3G;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEjF;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,CAEnF;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE/E;AAED;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,cAAc;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,SAAS,EAAE,MAAM;CAK9B;AAED,qBAAa,WAAW;gBACV,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,UAAU;IAIlD,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,IAAI,CACF,QAAQ,EAAE,MAAM,EAChB,KAAK,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,CAAA;KAAO,GAC1E,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAIhD,KAAK,IAAI,IAAI;CAGd;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,CAErE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,CAErE;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,CAEtE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,CAErE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,CAErE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,CAErE"}

package/dist/tools/agent-toolset/node.browser.js

@@ -1,94 +0,0 @@
-"use strict";
-/**
- * Browser stub for `tools/agent-toolset/node`.
- *
- * The real module implements the `agent_toolset_20260401` tools on top of Node
- * built-ins (`node:child_process`, `node:fs`, …), which browser bundlers cannot
- * resolve. The `browser` field in `package.json` substitutes this stub in
- * browser builds so the SDK bundles cleanly for web targets; Node runtimes and
- * node-target bundles ignore the mapping and load the real implementation.
- *
- * Every value export here throws an {@link AnthropicError} when used — the
- * agent toolset only works in Node.js or a Node-compatible runtime. Type
- * exports are re-exported from the real module (erased at build time), so
- * type-level usage is unaffected.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.BashSession = exports.BashTimeoutError = void 0;
-exports.setupSkills = setupSkills;
-exports.resolveSkillVersion = resolveSkillVersion;
-exports.extractSkillArchive = extractSkillArchive;
-exports.betaAgentToolset20260401 = betaAgentToolset20260401;
-exports.resolvePath = resolvePath;
-exports.betaBashTool = betaBashTool;
-exports.betaReadTool = betaReadTool;
-exports.betaWriteTool = betaWriteTool;
-exports.betaEditTool = betaEditTool;
-exports.betaGlobTool = betaGlobTool;
-exports.betaGrepTool = betaGrepTool;
-const error_js_1 = require("../../core/error.js");
-function nodeOnly(name) {
-    throw new error_js_1.AnthropicError(`${name} requires Node.js or a Node-compatible runtime`);
-}
-function setupSkills(_ctx) {
-    return nodeOnly('setupSkills');
-}
-function resolveSkillVersion(_client, _skillId, _version) {
-    return nodeOnly('resolveSkillVersion');
-}
-function extractSkillArchive(_resp, _dest) {
-    return nodeOnly('extractSkillArchive');
-}
-function betaAgentToolset20260401(_ctx) {
-    return nodeOnly('betaAgentToolset20260401');
-}
-function resolvePath(_ctx, _p) {
-    return nodeOnly('resolvePath');
-}
-/**
- * A bash command exceeded its `timeoutMs`. Carries the timeout so a caller can
- * tell it apart from an abort without matching on the message text.
- */
-class BashTimeoutError extends error_js_1.AnthropicError {
-    timeoutMs;
-    constructor(timeoutMs) {
-        super(`bash command timed out after ${timeoutMs}ms`);
-        this.name = 'BashTimeoutError';
-        this.timeoutMs = timeoutMs;
-    }
-}
-exports.BashTimeoutError = BashTimeoutError;
-class BashSession {
-    constructor(_dir, _env) {
-        nodeOnly('BashSession');
-    }
-    get closed() {
-        return nodeOnly('BashSession');
-    }
-    exec(_command, _opts = {}) {
-        return nodeOnly('BashSession');
-    }
-    close() {
-        nodeOnly('BashSession');
-    }
-}
-exports.BashSession = BashSession;
-function betaBashTool(_ctx) {
-    return nodeOnly('betaBashTool');
-}
-function betaReadTool(_ctx) {
-    return nodeOnly('betaReadTool');
-}
-function betaWriteTool(_ctx) {
-    return nodeOnly('betaWriteTool');
-}
-function betaEditTool(_ctx) {
-    return nodeOnly('betaEditTool');
-}
-function betaGlobTool(_ctx) {
-    return nodeOnly('betaGlobTool');
-}
-function betaGrepTool(_ctx) {
-    return nodeOnly('betaGrepTool');
-}
-//# sourceMappingURL=node.browser.js.map

package/dist/tools/agent-toolset/node.browser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"node.browser.js","sourceRoot":"","sources":["../../../src/vendor/tools/agent-toolset/node.browser.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAaH,kCAEC;AAED,kDAEC;AAED,kDAEC;AAED,4DAEC;AAED,kCAEC;AAqCD,oCAEC;AAED,oCAEC;AAED,sCAEC;AAED,oCAEC;AAED,oCAEC;AAED,oCAEC;AAxFD,kDAAqD;AAOrD,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,IAAI,yBAAc,CAAC,GAAG,IAAI,gDAAgD,CAAC,CAAC;AACpF,CAAC;AAED,SAAgB,WAAW,CAAC,IAAsB;IAChD,OAAO,QAAQ,CAAC,aAAa,CAAC,CAAC;AACjC,CAAC;AAED,SAAgB,mBAAmB,CAAC,OAAkB,EAAE,QAAgB,EAAE,QAAgB;IACxF,OAAO,QAAQ,CAAC,qBAAqB,CAAC,CAAC;AACzC,CAAC;AAED,SAAgB,mBAAmB,CAAC,KAAe,EAAE,KAAa;IAChE,OAAO,QAAQ,CAAC,qBAAqB,CAAC,CAAC;AACzC,CAAC;AAED,SAAgB,wBAAwB,CAAC,IAAsB;IAC7D,OAAO,QAAQ,CAAC,0BAA0B,CAAC,CAAC;AAC9C,CAAC;AAED,SAAgB,WAAW,CAAC,IAAsB,EAAE,EAAU;IAC5D,OAAO,QAAQ,CAAC,aAAa,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAa,gBAAiB,SAAQ,yBAAc;IACzC,SAAS,CAAS;IAE3B,YAAY,SAAiB;QAC3B,KAAK,CAAC,gCAAgC,SAAS,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AARD,4CAQC;AAED,MAAa,WAAW;IACtB,YAAY,IAAY,EAAE,IAAwB;QAChD,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,MAAM;QACR,OAAO,QAAQ,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,CACF,QAAgB,EAChB,QAAyE,EAAE;QAE3E,OAAO,QAAQ,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,KAAK;QACH,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC1B,CAAC;CACF;AAnBD,kCAmBC;AAED,SAAgB,YAAY,CAAC,IAAsB;IACjD,OAAO,QAAQ,CAAC,cAAc,CAAC,CAAC;AAClC,CAAC;AAED,SAAgB,YAAY,CAAC,IAAsB;IACjD,OAAO,QAAQ,CAAC,cAAc,CAAC,CAAC;AAClC,CAAC;AAED,SAAgB,aAAa,CAAC,IAAsB;IAClD,OAAO,QAAQ,CAAC,eAAe,CAAC,CAAC;AACnC,CAAC;AAED,SAAgB,YAAY,CAAC,IAAsB;IACjD,OAAO,QAAQ,CAAC,cAAc,CAAC,CAAC;AAClC,CAAC;AAED,SAAgB,YAAY,CAAC,IAAsB;IACjD,OAAO,QAAQ,CAAC,cAAc,CAAC,CAAC;AAClC,CAAC;AAED,SAAgB,YAAY,CAAC,IAAsB;IACjD,OAAO,QAAQ,CAAC,cAAc,CAAC,CAAC;AAClC,CAAC"}

package/dist/tools/agent-toolset/node.browser.mjs

@@ -1,78 +0,0 @@
-/**
- * Browser stub for `tools/agent-toolset/node`.
- *
- * The real module implements the `agent_toolset_20260401` tools on top of Node
- * built-ins (`node:child_process`, `node:fs`, …), which browser bundlers cannot
- * resolve. The `browser` field in `package.json` substitutes this stub in
- * browser builds so the SDK bundles cleanly for web targets; Node runtimes and
- * node-target bundles ignore the mapping and load the real implementation.
- *
- * Every value export here throws an {@link AnthropicError} when used — the
- * agent toolset only works in Node.js or a Node-compatible runtime. Type
- * exports are re-exported from the real module (erased at build time), so
- * type-level usage is unaffected.
- */
-import { AnthropicError } from '../../core/error.js';
-function nodeOnly(name) {
-    throw new AnthropicError(`${name} requires Node.js or a Node-compatible runtime`);
-}
-export function setupSkills(_ctx) {
-    return nodeOnly('setupSkills');
-}
-export function resolveSkillVersion(_client, _skillId, _version) {
-    return nodeOnly('resolveSkillVersion');
-}
-export function extractSkillArchive(_resp, _dest) {
-    return nodeOnly('extractSkillArchive');
-}
-export function betaAgentToolset20260401(_ctx) {
-    return nodeOnly('betaAgentToolset20260401');
-}
-export function resolvePath(_ctx, _p) {
-    return nodeOnly('resolvePath');
-}
-/**
- * A bash command exceeded its `timeoutMs`. Carries the timeout so a caller can
- * tell it apart from an abort without matching on the message text.
- */
-export class BashTimeoutError extends AnthropicError {
-    timeoutMs;
-    constructor(timeoutMs) {
-        super(`bash command timed out after ${timeoutMs}ms`);
-        this.name = 'BashTimeoutError';
-        this.timeoutMs = timeoutMs;
-    }
-}
-export class BashSession {
-    constructor(_dir, _env) {
-        nodeOnly('BashSession');
-    }
-    get closed() {
-        return nodeOnly('BashSession');
-    }
-    exec(_command, _opts = {}) {
-        return nodeOnly('BashSession');
-    }
-    close() {
-        nodeOnly('BashSession');
-    }
-}
-export function betaBashTool(_ctx) {
-    return nodeOnly('betaBashTool');
-}
-export function betaReadTool(_ctx) {
-    return nodeOnly('betaReadTool');
-}
-export function betaWriteTool(_ctx) {
-    return nodeOnly('betaWriteTool');
-}
-export function betaEditTool(_ctx) {
-    return nodeOnly('betaEditTool');
-}
-export function betaGlobTool(_ctx) {
-    return nodeOnly('betaGlobTool');
-}
-export function betaGrepTool(_ctx) {
-    return nodeOnly('betaGrepTool');
-}
-//# sourceMappingURL=node.browser.js.map

package/dist/tools/agent-toolset/node.browser.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"node.browser.js","sourceRoot":"","sources":["../../../src/vendor/tools/agent-toolset/node.browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAOrD,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,IAAI,cAAc,CAAC,GAAG,IAAI,gDAAgD,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAsB;IAChD,OAAO,QAAQ,CAAC,aAAa,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAkB,EAAE,QAAgB,EAAE,QAAgB;IACxF,OAAO,QAAQ,CAAC,qBAAqB,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAe,EAAE,KAAa;IAChE,OAAO,QAAQ,CAAC,qBAAqB,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAsB;IAC7D,OAAO,QAAQ,CAAC,0BAA0B,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAsB,EAAE,EAAU;IAC5D,OAAO,QAAQ,CAAC,aAAa,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,gBAAiB,SAAQ,cAAc;IACzC,SAAS,CAAS;IAE3B,YAAY,SAAiB;QAC3B,KAAK,CAAC,gCAAgC,SAAS,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,WAAW;IACtB,YAAY,IAAY,EAAE,IAAwB;QAChD,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,MAAM;QACR,OAAO,QAAQ,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,CACF,QAAgB,EAChB,QAAyE,EAAE;QAE3E,OAAO,QAAQ,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,KAAK;QACH,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,UAAU,YAAY,CAAC,IAAsB;IACjD,OAAO,QAAQ,CAAC,cAAc,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAsB;IACjD,OAAO,QAAQ,CAAC,cAAc,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAsB;IAClD,OAAO,QAAQ,CAAC,eAAe,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAsB;IACjD,OAAO,QAAQ,CAAC,cAAc,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAsB;IACjD,OAAO,QAAQ,CAAC,cAAc,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAsB;IACjD,OAAO,QAAQ,CAAC,cAAc,CAAC,CAAC;AAClC,CAAC"}

package/dist/tools/agent-toolset/node.d.mts

@@ -1,158 +0,0 @@
-/**
- * Node implementation of the `agent_toolset_20260401` tools — `bash`, `read`,
- * `write`, `edit`, `glob`, `grep` — plus the workdir/skills
- * {@link AgentToolContext}.
- *
- * This mirrors `@anthropic-ai/sdk/tools/memory/node`: it is the explicit,
- * Node-only entry point for these implementations. Importing it pulls in
- * `node:child_process`, `node:fs`, etc., so it is kept separate from the rest of
- * the SDK — depending on it is an opt-in.
- *
- * **Node 22+ is required** for this module: the `glob` tool uses the native
- * `fs.glob`, added in Node 22. The rest of the SDK still supports Node 18+; only
- * the agent toolset has this requirement.
- *
- * The result of {@link betaAgentToolset20260401} is a plain `BetaRunnableTool[]`;
- * hand it to any tool runner — `client.beta.messages.toolRunner({ …, tools })`
- * for the Messages API, or `client.beta.sessions.events.toolRunner({ …, tools })`
- * for a managed-agents session:
- *
- * ```ts
- * import { betaAgentToolset20260401 } from '@anthropic-ai/sdk/tools/agent-toolset/node';
- *
- * const tools = betaAgentToolset20260401({ workdir: '/work' });
- * const tools2 = betaAgentToolset20260401({ workdir: '/work' }).filter((t) => t.name !== 'bash');
- * ```
- *
- * Trust model: the file tools confine to `workdir` (symlink-aware) and are safe
- * without a sandbox; `bash` is unrestricted and should run inside one. See
- * {@link AgentToolContext}.
- */
-import type { PukuAI as Anthropic } from '../../client.js';
-import { AnthropicError } from '../../core/error.js';
-import type { BetaRunnableTool } from '../../lib/tools/BetaRunnableTool.js';
-export { setupSkills, resolveSkillVersion, extractSkillArchive } from './skills.js';
-/**
- * A bash command exceeded its `timeoutMs`. Carries the timeout so a caller can
- * tell it apart from an abort without matching on the message text.
- */
-export declare class BashTimeoutError extends AnthropicError {
-    readonly timeoutMs: number;
-    constructor(timeoutMs: number);
-}
-/**
- * Workdir + path-policy for the agent toolset.
- *
- * Trust model — two tiers:
- *
- * - The file tools ({@link betaReadTool}, {@link betaWriteTool},
- *   {@link betaEditTool}, {@link betaGlobTool}, {@link betaGrepTool}) confine to
- *   `workdir` unless `unrestrictedPaths` is set. {@link resolvePath}
- *   canonicalizes the target (resolving every symlink, including the leaf)
- *   before the check *and* returns that canonical path for the operation, so a
- *   symlink inside the workdir that points outside it neither passes the check
- *   nor gets followed afterwards — this is a real boundary, not a lexical hint
- *   (modulo the residual TOCTOU noted on {@link resolvePath}).
- * - {@link betaBashTool} runs an unrestricted `/bin/bash` and cannot be
- *   confined. Run it — and, for defense in depth, the whole toolset — inside a
- *   sandbox the host controls (e.g. a self-hosted environment runner).
- */
-export interface AgentToolContext {
-    /** Base directory for resolving relative tool paths. */
-    workdir: string;
-    /**
-     * When `false` (default), the file tools reject paths that resolve outside
-     * `workdir` (symlinks resolved). Does **not** constrain {@link betaBashTool}.
-     */
-    unrestrictedPaths?: boolean;
-    /**
-     * Anthropic client. Optional — the bare toolset needs no client; it is only
-     * used by `setupSkills`, which (together with {@link AgentToolContext.sessionId})
-     * fetches the session's resolved agent and downloads each of its skills into
-     * `{workdir}/skills/<name>/`.
-     */
-    client?: Anthropic;
-    /** Session whose agent's skills `setupSkills` should download. */
-    sessionId?: string;
-    /**
-     * Optional environment for the bash subprocess. When unset, the bash tool
-     * inherits the process environment with the runner's `ANTHROPIC_*`
-     * credentials scrubbed. When provided, it FULLY REPLACES that default
-     * environment — the mapping is used verbatim and is NOT merged with or added
-     * to the scrubbed process environment. To keep the defaults plus extra vars,
-     * build the combined mapping yourself before passing it.
-     */
-    env?: NodeJS.ProcessEnv;
-    /**
-     * Size cap for the `read` and `edit` tools, which both load the whole file into
-     * memory. `undefined` (default) uses the built-in 256 KiB cap; a positive number
-     * sets a custom cap; `null` disables the cap entirely. Disabling it reintroduces
-     * the OOM risk on a model-controlled path, so pass `null` only when the sandbox
-     * can absorb arbitrarily large files. The non-regular-file (FIFO/device) guard
-     * always applies regardless of this value.
-     */
-    maxFileBytes?: number | null;
-}
-/**
- * Returns the `agent_toolset_20260401` implementations bound to `ctx`. The
- * result is a plain array of `BetaRunnableTool`; filter or extend it before
- * handing it to a tool runner:
- *
- * ```ts
- * const tools = [...betaAgentToolset20260401(ctx), myCustomTool];
- * const tools = betaAgentToolset20260401(ctx).filter((t) => t.name !== 'grep');
- * ```
- *
- * Concurrency note: `client.beta.sessions.events.toolRunner` dispatches a
- * session's tool calls serially (the sessions API delivers one `agent.tool_use`
- * at a time). `client.beta.messages.toolRunner` runs a turn's `tool.run` calls
- * via `Promise.all`. The toolset below is safe under either model —
- * {@link betaBashTool} serializes its persistent shell internally and the FS
- * tools are independent per call — but {@link betaEditTool}/{@link betaWriteTool}
- * cannot synchronize concurrent writes to the *same* file across processes, so a
- * multi-edit turn touching one path is still subject to inherent FS lost-update
- * races. Custom tools that close over mutable state should do their own queueing.
- */
-export declare function betaAgentToolset20260401(ctx: AgentToolContext): BetaRunnableTool[];
-/**
- * Resolve `p` against `ctx.workdir`. Absolute and relative inputs go through
- * the same canonicalise-then-contain check — an absolute path that lands inside
- * the workdir is permitted, only paths that resolve *outside* are rejected.
- * Every symlink in `p` (including the leaf, even a dangling one) is resolved
- * before the workdir check, and the resolved path is what the tool then operates
- * on, so a symlink inside the workdir that points outside it can neither pass
- * the check nor be followed afterwards. See the trust model on
- * {@link AgentToolContext}.
- *
- * Residual TOCTOU: a component could still be swapped for a symlink between this
- * call and the eventual `fs` operation. Closing that fully needs per-component
- * `O_NOFOLLOW`/`openat`, which Node does not expose ergonomically; the same
- * residual exposure exists in `tools/memory/node` and is why a sandbox is still
- * recommended for the toolset as a whole.
- */
-export declare function resolvePath(ctx: AgentToolContext, p: string): Promise<string>;
-/**
- * A persistent /bin/bash process. State (cwd, env, background jobs) survives
- * across exec() calls. Uses pipes rather than a PTY so input is never echoed.
- */
-export declare class BashSession {
-    #private;
-    constructor(dir: string, env?: NodeJS.ProcessEnv);
-    /** Whether the underlying shell process has exited. */
-    get closed(): boolean;
-    exec(command: string, opts?: {
-        timeoutMs?: number;
-        signal?: AbortSignal | null | undefined;
-    }): Promise<{
-        output: string;
-        exitCode: number;
-    }>;
-    close(): void;
-}
-export declare function betaBashTool(ctx: AgentToolContext): BetaRunnableTool;
-export declare function betaReadTool(ctx: AgentToolContext): BetaRunnableTool;
-export declare function betaWriteTool(ctx: AgentToolContext): BetaRunnableTool;
-export declare function betaEditTool(ctx: AgentToolContext): BetaRunnableTool;
-export declare function betaGlobTool(ctx: AgentToolContext): BetaRunnableTool;
-export declare function betaGrepTool(ctx: AgentToolContext): BetaRunnableTool;
-//# sourceMappingURL=node.d.ts.map

package/dist/tools/agent-toolset/node.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../../src/vendor/tools/agent-toolset/node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAQH,OAAO,KAAK,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAM5E,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAYpF;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,cAAc;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,SAAS,EAAE,MAAM;CAK9B;AAqBD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,CASlF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAE7E;AA0BD;;;GAGG;AACH,qBAAa,WAAW;;gBASV,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAA+B;IAyBpE,uDAAuD;IACvD,IAAI,MAAM,IAAI,OAAO,CAEpB;IAkBK,IAAI,CACR,OAAO,EAAE,MAAM,EACf,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,CAAA;KAAO,GACzE,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IA+DhD,KAAK,IAAI,IAAI;CAkBd;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CAgEpE;AAID,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CAiDpE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CAqBrE;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CA8DpE;AAID,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CAgFpE;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,gBAAgB,GAAG,gBAAgB,CAmBpE"}