@qduc/term2 0.21.0 → 0.22.1

package/dist/tools/system/run-code/run-code.d.ts

@@ -0,0 +1,98 @@
+import type { ExecutionContext } from '../../../services/execution-context.js';
+import { z } from 'zod';
+import type { ILoggingService } from '../../../services/service-interfaces.js';
+import type { ToolApprovalPolicyRegistry } from '../../../services/approval/tool-approval-policy-registry.js';
+import type { NestedApprovalOwner } from '../../../services/approval/nested-approval-owner.js';
+import { type AnyToolDefinition, type FormatCommandMessage, type SchemaToolDefinition, type ToolRegistry } from '../../types.js';
+export declare const TOOL_NAME_RUN_CODE = "run_code";
+export declare const TOOL_NAME_DESCRIBE = "describe";
+/**
+ * Script-shaped limits. They are deliberately not the workflow's: a workflow
+ * spawns a handful of agents, while a script's whole point is looping over many
+ * cheap tool calls.
+ */
+export declare const RUN_CODE_LIMITS: {
+    /** Total `tools.*` calls one script may make. */
+    readonly maxCalls: 200;
+    /** Parallel-safe calls that may overlap; others take a serial lane of one. */
+    readonly maxConcurrency: 8;
+    /** Per-result cap. A larger result is truncated with an explicit marker. */
+    readonly maxResultChars: 100000;
+    /** Maximum raw bytes in one media attachment retained outside the script. */
+    readonly maxMediaBytes: number;
+    /** Maximum raw bytes and attachment count retained for one script run. */
+    readonly maxMediaTotalBytes: number;
+    readonly maxMediaAttachments: 32;
+    readonly maxCodeBytes: 65536;
+    readonly maxOutputBytes: 262144;
+    readonly maxConsoleBytes: 262144;
+};
+/**
+ * Tools a script may never call.
+ *
+ * `run_code` excludes itself because each run owns its own call budget, and
+ * nesting would let one run spend many. The rest are the workflow's prohibited
+ * set: `run_subagent` in particular spawns agents outside any run budget, so a
+ * script could loop on it indefinitely. Shell tools are excluded because their
+ * complete approval state also lives in the interactive batch coordinator.
+ */
+export declare const RUN_CODE_PROHIBITED_TOOLS: ReadonlySet<string>;
+export declare const runCodeParametersSchema: z.ZodObject<{
+    code: z.ZodString;
+    include_console: z.ZodOptional<z.ZodBoolean>;
+    timeout_ms: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+    description: z.ZodString;
+}, z.core.$strip>;
+export type RunCodeParams = z.infer<typeof runCodeParametersSchema>;
+/**
+ * Terminal semantic outcome of one observed nested action call, derived
+ * host-side from the raw executor result. Promise fulfillment alone is never
+ * success: only the per-tool adapter maps a resolved value to `applied`.
+ */
+export type RunCodeActionOutcome = 'applied' | 'not_applied' | 'failed' | 'unknown';
+/**
+ * One host-observed nested action receipt. The ledger is host-private: script
+ * code has no write path to it, so a script cannot catch, relabel, or
+ * contradict its way out of an observed outcome.
+ */
+export interface RunCodeActionReceipt {
+    /** Stable call identity (`<bridgeRunId>:<callId>`, or `:rejected-<seq>` pre-admission). */
+    callId: string;
+    tool: string;
+    outcome: RunCodeActionOutcome;
+    reason?: string;
+}
+/** One `tools.*` call observed during a run, for the user-facing summary. */
+export interface RunCodeCallRecord {
+    tool: string;
+    outcome: 'ok' | 'error' | 'approval_required' | 'unknown_policy' | 'policy_error' | 'interceptor_denied' | 'unknown_tool' | 'invalid_params' | 'prohibited' | 'describe';
+    durationMs: number;
+    directlyCallable?: boolean;
+}
+export interface CreateRunCodeToolOptions {
+    loggingService: ILoggingService;
+    /**
+     * Resolves the tools exposed to the script. Supplying it directly is a test
+     * seam; in production {@link bindRunCodeRegistry} installs the wrapped
+     * registry, so scripts go through the same policy layer as a direct call.
+     */
+    getToolRegistry?: () => ToolRegistry;
+    /** Policy authority used for out-of-band script calls. */
+    approvalPolicyRegistry: ToolApprovalPolicyRegistry;
+    getCwd?: () => string;
+    executionContext?: ExecutionContext;
+    nestedApprovalOwner?: NestedApprovalOwner;
+    sessionAccess?: import('../../../services/session/session-access-state.js').SessionAccessState;
+    nestedCompatibility?: import('../../../services/session/nested-tool-compatibility-state.js').NestedToolCompatibilityState;
+}
+/** Installs the wrapped registry into any `run_code` definition in `tools`. */
+export declare function bindRunCodeRegistry(tools: ToolRegistry): void;
+export declare function bindRunCodeNestedApprovalOwner(tools: ToolRegistry, owner: NestedApprovalOwner): void;
+/**
+ * Direct calls are the tools a script structurally cannot reach, including
+ * `run_code` itself. Visibility does not depend on `canRequireApproval`.
+ */
+export declare function isDirectlyCallable(tool: Pick<AnyToolDefinition, 'name'>): boolean;
+export declare const formatRunCodeCommandMessage: FormatCommandMessage;
+export declare function createRunCodeToolDefinition(options: CreateRunCodeToolOptions): SchemaToolDefinition<typeof runCodeParametersSchema>;
+//# sourceMappingURL=run-code.d.ts.map

package/dist/tools/system/run-code/run-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-code.d.ts","sourceRoot":"","sources":["../../../../source/tools/system/run-code/run-code.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC/E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yCAAyC,CAAC;AAE/E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6DAA6D,CAAC;AAC9G,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAE/F,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,YAAY,EAClB,MAAM,gBAAgB,CAAC;AAgBxB,eAAO,MAAM,kBAAkB,aAAa,CAAC;AAC7C,eAAO,MAAM,kBAAkB,aAAa,CAAC;AAU7C;;;;GAIG;AACH,eAAO,MAAM,eAAe;IAC1B,iDAAiD;aACjD,QAAQ,EAAE,GAAG;IACb,8EAA8E;aAC9E,cAAc,EAAE,CAAC;IACjB,4EAA4E;aAC5E,cAAc,EAAE,MAAO;IACvB,6EAA6E;aAC7E,aAAa;IACb,0EAA0E;aAC1E,kBAAkB;aAClB,mBAAmB,EAAE,EAAE;aACvB,YAAY,EAAE,KAAM;aACpB,cAAc,EAAE,MAAO;aACvB,eAAe,EAAE,MAAO;CAChB,CAAC;AAEX;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAWxD,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;iBAqBlC,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AA6BpE;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEpF;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,2FAA2F;IAC3F,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,oBAAoB,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AA0DD,6EAA6E;AAC7E,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EACH,IAAI,GACJ,OAAO,GACP,mBAAmB,GACnB,gBAAgB,GAChB,cAAc,GACd,oBAAoB,GACpB,cAAc,GACd,gBAAgB,GAChB,YAAY,GACZ,UAAU,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,eAAe,CAAC;IAChC;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,YAAY,CAAC;IACrC,0DAA0D;IAC1D,sBAAsB,EAAE,0BAA0B,CAAC;IACnD,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,aAAa,CAAC,EAAE,OAAO,mDAAmD,EAAE,kBAAkB,CAAC;IAC/F,mBAAmB,CAAC,EAAE,OAAO,8DAA8D,EAAE,4BAA4B,CAAC;CAC3H;AAiBD,+EAA+E;AAC/E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAI7D;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAIpG;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,GAAG,OAAO,CAEjF;AA8QD,eAAO,MAAM,2BAA2B,EAAE,oBAkBzC,CAAC;AAoCF,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,wBAAwB,GAChC,oBAAoB,CAAC,OAAO,uBAAuB,CAAC,CAqdtD"}