@qlingzzy/qling 1.0.0

package/dist/tools/bash.js

@@ -0,0 +1,278 @@
+// ============================================================
+// 轻灵 - bash 工具 v3
+// - exec → spawn（非阻塞父进程）
+// - 超时自动 kill
+// - stdout/stderr 正确路由（避免 NotADirectoryError）
+// ============================================================
+import { spawn, execFileSync } from "child_process";
+import { stat } from "fs/promises";
+import { toolError, toolSuccess } from "./error-utils.js";
+import { getRuntimeRootsFromEnv, isWithinAllowedRoots, resolveToolPath } from "../runtime-paths.js";
+const MAX_COMMAND_LENGTH = 5000;
+const MAX_OUTPUT_BYTES = 1024 * 1024; // 1MB per stream
+export const bashTool = {
+    name: "bash",
+    description: "Execute shell commands on Linux/Windows (git, npm, file operations, CLI tools). Returns stdout/stderr. Hook intercepts dangerous operations (rm -rf, disk format, etc.).",
+    longDescription: `执行 shell 命令的万能工具。**Linux**: 通过 /bin/sh 执行。**Windows**: 通过 cmd.exe 执行（而非 PowerShell）。
+**重要 - Windows 用户**：Windows 上请使用标准的 cmd.exe 命令（dir, type, copy, del 等），不要使用 PowerShell 独有语法（Invoke-WebRequest 等）。cmd.exe 不支持 PowerShell cmdlet。
+**Linux 用户**：通过 /bin/sh 执行标准 POSIX 命令。
+
+**使用场景**:
+- git 操作（git add, git commit, git push）
+- npm/node 命令（npm install, node scripts）
+- 文件操作（ls, cp, mv, mkdir）
+- 进程管理（ps, kill, pgrep）
+- 网络工具（curl, wget, ping）
+- 编译构建（make, gcc, cargo）
+
+**注意事项**:
+- rm -rf 等危险操作会被 Hook 拦截并要求确认
+- Windows 下需要通过 cmd.exe /c 执行
+- 长时间运行的命令建议设置 timeout`,
+    parameters: {
+        type: "object",
+        properties: {
+            command: {
+                type: "string",
+                description: "Shell command to execute",
+            },
+            cwd: {
+                type: "string",
+                description: "Working directory (optional, defaults to current)",
+            },
+            timeout: {
+                type: "number",
+                description: "Timeout in seconds (default: 60, max: 300)",
+            },
+            env_allowlist: {
+                type: "array",
+                description: "Extra environment keys to inherit from host process",
+            },
+            env_inject: {
+                type: "object",
+                description: "Explicit env key/value overrides (guarded by key format check)",
+            },
+        },
+        required: ["command"],
+    },
+    paramSchema: {
+        command: {
+            type: "string",
+            description: "要执行的完整 shell 命令",
+            minLength: 1,
+            maxLength: 5000,
+        },
+        cwd: {
+            type: "string",
+            description: "工作目录路径（可选）。Linux 格式: /home/user/project，Windows 格式: C:\\Users\\...",
+        },
+        timeout: {
+            type: "number",
+            description: "命令超时秒数。默认 60 秒，最大 300 秒。超时后进程会被 SIGTERM 强制终止。",
+            minimum: 1,
+            maximum: 300,
+            default: 60,
+        },
+        env_allowlist: {
+            type: "array",
+            description: "额外继承的环境变量名数组，例如 [\"HTTP_PROXY\"]",
+            items: { type: "string", description: "环境变量名" },
+        },
+        env_inject: {
+            type: "object",
+            description: "显式注入的环境变量键值对（键必须匹配 ^[A-Z_][A-Z0-9_]*$）",
+        },
+    },
+    examples: [
+        "git status",
+        "npm install express",
+        "curl -X GET https://api.example.com/data",
+        "ls -la /tmp",
+    ],
+    seeAlso: ["read", "write"],
+    scenes: ["coding", "system"],
+    priority: 8,
+    readOnly: false,
+    destructive: false,
+    concurrencySafe: false,
+    dangerousPatterns: [
+        "rm -rf /",
+        "rm -rf /*",
+        ":(){ :|:& };:", // fork bomb
+        "mkfs",
+        "dd if=/dev/zero",
+        "> /etc/passwd",
+    ],
+    effortHint: "medium",
+};
+export async function runBash(args) {
+    const command = String(args.command ?? "").trim();
+    if (!command) {
+        return toolError("BASH_EMPTY_COMMAND", "command is required");
+    }
+    if (command.length > MAX_COMMAND_LENGTH) {
+        return toolError("BASH_COMMAND_TOO_LONG", `command exceeds ${MAX_COMMAND_LENGTH} characters (current: ${command.length})`);
+    }
+    const timeoutSec = Math.max(1, Math.min(300, args.timeout ?? 60));
+    const roots = getRuntimeRootsFromEnv();
+    const cwdInput = String(args.cwd ?? ".").trim();
+    const cwd = resolveToolPath(cwdInput, roots, "workspace");
+    if (!isWithinAllowedRoots(cwd, roots)) {
+        return toolError("BASH_OUTSIDE_ALLOWED_ROOT", `${cwd} is outside allowed roots`);
+    }
+    try {
+        const cwdStat = await stat(cwd);
+        if (!cwdStat.isDirectory()) {
+            return toolError("BASH_INVALID_CWD", `${cwd} is not a directory`);
+        }
+    }
+    catch {
+        return toolError("BASH_CWD_NOT_FOUND", `cwd not found: ${cwd}`);
+    }
+    return new Promise((resolve) => {
+        const timeout = timeoutSec * 1000;
+        const shell = process.platform === "win32" ? "cmd.exe" : "/bin/sh";
+        const shellArgs = process.platform === "win32" ? ["/c", command] : ["-c", command];
+        const proc = spawn(shell, shellArgs, {
+            cwd,
+            env: buildSafeEnv(args.env_allowlist ?? [], args.env_inject ?? {}),
+            stdio: ["ignore", "pipe", "pipe"],
+            windowsHide: true,
+        });
+        let stdout = "";
+        let stderr = "";
+        let stdoutBytes = 0;
+        let stderrBytes = 0;
+        let stdoutTruncated = false;
+        let stderrTruncated = false;
+        let settled = false;
+        let timedOut = false;
+        const appendCapped = (current, incoming, currentBytes) => {
+            if (currentBytes >= MAX_OUTPUT_BYTES) {
+                return { next: current, bytes: currentBytes, truncated: true };
+            }
+            const remaining = MAX_OUTPUT_BYTES - currentBytes;
+            if (incoming.byteLength <= remaining) {
+                return {
+                    next: current + incoming.toString(),
+                    bytes: currentBytes + incoming.byteLength,
+                    truncated: false,
+                };
+            }
+            return {
+                next: current + incoming.subarray(0, remaining).toString(),
+                bytes: MAX_OUTPUT_BYTES,
+                truncated: true,
+            };
+        };
+        const finish = (code, signal) => {
+            if (settled)
+                return;
+            settled = true;
+            const stdoutSuffix = stdoutTruncated ? `\n[stdout truncated at ${MAX_OUTPUT_BYTES} bytes]` : "";
+            const stderrSuffix = stderrTruncated ? `\n[stderr truncated at ${MAX_OUTPUT_BYTES} bytes]` : "";
+            // 超时
+            if (timedOut) {
+                resolve(toolError("BASH_TIMEOUT", `killed after ${timeoutSec}s timeout\nstdout:\n${stdout}${stdoutSuffix}\nstderr:\n${stderr}${stderrSuffix}`));
+                return;
+            }
+            // 组合输出（避免 stderr 干扰主输出）
+            const combined = stderr.trim().length > 0
+                ? `stdout:\n${stdout}${stdoutSuffix}\nstderr:\n${stderr}${stderrSuffix}`
+                : `${stdout || "(no output)"}${stdoutSuffix}`;
+            if ((code ?? 0) !== 0) {
+                resolve(toolError("BASH_EXIT_NON_ZERO", `exit code: ${code ?? "null"}\n${combined}`));
+                return;
+            }
+            if (stderr.trim()) {
+                resolve(toolSuccess(combined));
+            }
+            else {
+                resolve(toolSuccess(combined));
+            }
+        };
+        // 超时控制
+        const timer = setTimeout(() => {
+            timedOut = true;
+            if (process.platform === "win32") {
+                // Windows: 用 taskkill 强制终止进程树
+                try {
+                    execFileSync("taskkill", ["/pid", String(proc.pid), "/T", "/F"], { timeout: 5000 });
+                }
+                catch {
+                    proc.kill();
+                }
+            }
+            else {
+                proc.kill("SIGTERM");
+                setTimeout(() => {
+                    if (!settled)
+                        proc.kill("SIGKILL");
+                }, 2000);
+            }
+        }, timeout);
+        proc.stdout?.on("data", (chunk) => {
+            const next = appendCapped(stdout, chunk, stdoutBytes);
+            stdout = next.next;
+            stdoutBytes = next.bytes;
+            stdoutTruncated ||= next.truncated;
+        });
+        proc.stderr?.on("data", (chunk) => {
+            const next = appendCapped(stderr, chunk, stderrBytes);
+            stderr = next.next;
+            stderrBytes = next.bytes;
+            stderrTruncated ||= next.truncated;
+        });
+        proc.on("close", (code, signal) => {
+            clearTimeout(timer);
+            finish(code, signal);
+        });
+        proc.on("error", (err) => {
+            clearTimeout(timer);
+            if (!settled) {
+                settled = true;
+                resolve(toolError("BASH_SPAWN_ERROR", `spawn error: ${err.message}`));
+            }
+        });
+    });
+}
+function buildSafeEnv(envAllowlist, envInject) {
+    const safe = {};
+    const baseKeys = new Set([
+        "PATH",
+        "HOME",
+        "USERPROFILE",
+        "TMP",
+        "TEMP",
+        "SYSTEMROOT",
+        "WINDIR",
+        "COMSPEC",
+        "PATHEXT",
+        "TERM",
+        "LANG",
+        "LC_ALL",
+    ]);
+    for (const [key, value] of Object.entries(process.env)) {
+        if (key.startsWith("QLING_") || baseKeys.has(key.toUpperCase())) {
+            safe[key] = value;
+        }
+    }
+    for (const key of envAllowlist) {
+        const normalized = key.trim();
+        if (!isSafeEnvKey(normalized))
+            continue;
+        if (process.env[normalized] !== undefined) {
+            safe[normalized] = process.env[normalized];
+        }
+    }
+    for (const [key, value] of Object.entries(envInject)) {
+        const normalized = key.trim();
+        if (!isSafeEnvKey(normalized))
+            continue;
+        safe[normalized] = String(value);
+    }
+    return safe;
+}
+function isSafeEnvKey(key) {
+    return /^[A-Z_][A-Z0-9_]*$/.test(key);
+}

package/dist/tools/browser-fetch.d.ts

@@ -0,0 +1,7 @@
+import { ToolDefinition, ToolResult } from "../types.js";
+export declare const browserFetchTool: ToolDefinition;
+export declare function runBrowserFetch(args: {
+    url: string;
+    wait_for?: string;
+}): Promise<ToolResult>;
+//# sourceMappingURL=browser-fetch.d.ts.map

package/dist/tools/browser-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-fetch.d.ts","sourceRoot":"","sources":["../../src/tools/browser-fetch.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzD,eAAO,MAAM,gBAAgB,EAAE,cAiD9B,CAAC;AAEF,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,UAAU,CAAC,CAsFtB"}

package/dist/tools/browser-fetch.js

@@ -0,0 +1,133 @@
+// ============================================================
+// 轻灵 - browser_fetch 工具 (v0.5 M3)
+// 基于 Playwright 的文档抓取工具，支持 JS 渲染与分页摘要
+// ============================================================
+import { chromium } from "playwright";
+import { appendGuardAudit, checkUrlFetchPolicy } from "../guard.js";
+import { guardConfigFromEnv } from "../config.js";
+import { toolError } from "./error-utils.js";
+export const browserFetchTool = {
+    name: "browser_fetch",
+    description: "Fetch and summarize content from JavaScript-heavy websites using a real browser.",
+    longDescription: `高级网页抓取工具。使用 Chromium 内核加载页面，支持单页应用 (SPA) 与 JS 动态渲染。
+
+**使用场景**:
+- 抓取现代技术文档（如 React, Next.js 官网）
+- 提取需要等待加载的动态数据
+- 获取网页的清晰文本摘要（自动过滤广告与杂质）
+
+**约束**:
+- 仅限文档检索与公开信息获取。
+- 不支持登录、表单提交或任何交互式自动化。`,
+    parameters: {
+        type: "object",
+        properties: {
+            url: {
+                type: "string",
+                description: "The URL of the website to fetch",
+            },
+            wait_for: {
+                type: "string",
+                description: "Optional CSS selector to wait for before extracting content",
+            }
+        },
+        required: ["url"],
+    },
+    paramSchema: {
+        url: {
+            type: "string",
+            description: "要访问的网页 URL。",
+            pattern: "^https?://",
+            required: true,
+        },
+        wait_for: {
+            type: "string",
+            description: "可选的 CSS 选择器。等待该元素出现后再提取内容，适用于异步加载页面。",
+        }
+    },
+    examples: [
+        'browser_fetch url="https://playwright.dev/docs/intro"',
+        'browser_fetch url="https://nextjs.org/docs" wait_for=".prose"',
+    ],
+    scenes: ["web", "research", "documentation"],
+    priority: 8,
+    readOnly: true,
+    destructive: false,
+    concurrencySafe: false, // 浏览器操作较重，建议顺序执行
+    effortHint: "high",
+};
+export async function runBrowserFetch(args) {
+    const rawUrl = String(args.url ?? "").trim();
+    if (!rawUrl) {
+        return toolError("BROWSER_FETCH_MISSING_URL", "url is required");
+    }
+    let target;
+    try {
+        target = new URL(rawUrl);
+    }
+    catch {
+        return toolError("BROWSER_FETCH_INVALID_URL", `invalid url: ${rawUrl}`);
+    }
+    // Phase 1.5: 与 url_fetch 共用网络 Guard（prefix / 私网 / network mode）
+    const guard = guardConfigFromEnv();
+    const decision = await checkUrlFetchPolicy(target, guard);
+    if (!decision.allowed) {
+        await appendGuardAudit(guard, {
+            tool: "browser_fetch",
+            action: "deny",
+            category: decision.category,
+            target: target.toString(),
+            reason: decision.reason,
+        });
+        return toolError("BROWSER_FETCH_GUARD_BLOCKED", decision.reason ?? "guard denied browser_fetch", { category: "network" });
+    }
+    const browser = await chromium.launch({ headless: true });
+    const context = await browser.newContext({
+        userAgent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
+    });
+    const page = await context.newPage();
+    try {
+        console.error(`🌐 正在打开浏览器访问: ${rawUrl}...`);
+        await page.goto(rawUrl, { waitUntil: "domcontentloaded", timeout: 30000 });
+        if (args.wait_for) {
+            await page.waitForSelector(args.wait_for, { timeout: 10000 });
+        }
+        else {
+            // 默认等待 2 秒确保某些动态脚本执行
+            await page.waitForTimeout(2000);
+        }
+        // 提取核心文本
+        const title = await page.title();
+        const content = await page.evaluate(() => {
+            // 移除干扰元素
+            const junk = document.querySelectorAll("nav, footer, script, style, ads, .ads, #ads");
+            junk.forEach(el => el.remove());
+            return document.body.innerText;
+        });
+        await browser.close();
+        const cleanedContent = content
+            .replace(/\n\s*\n/g, "\n\n")
+            .trim()
+            .slice(0, 15000); // 截断以防超出 context
+        await appendGuardAudit(guard, {
+            tool: "browser_fetch",
+            action: "allow",
+            category: "network",
+            target: rawUrl,
+        });
+        return {
+            tool_call_id: "",
+            output: `📄 【网页抓取结果】: ${title}\nURL: ${rawUrl}\n\n${cleanedContent}`,
+            meta: { title, url: rawUrl }
+        };
+    }
+    catch (err) {
+        await browser.close();
+        return {
+            tool_call_id: "",
+            output: `Error: Failed to fetch page via browser: ${err.message}`,
+            is_error: true,
+            error: { code: "BROWSER_FETCH_FAILED", message: err.message, category: "network" }
+        };
+    }
+}

package/dist/tools/error-utils.d.ts

@@ -0,0 +1,9 @@
+import { ToolResult } from "../types.js";
+export interface ToolErrorOptions {
+    retriable?: boolean;
+    category?: "validation" | "permission" | "network" | "io" | "runtime";
+}
+export declare function toolError(code: string, message: string, options?: ToolErrorOptions): ToolResult;
+export declare function toolSuccess(output: string): ToolResult;
+export declare function getErrorMessage(err: unknown): string;
+//# sourceMappingURL=error-utils.d.ts.map

package/dist/tools/error-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-utils.d.ts","sourceRoot":"","sources":["../../src/tools/error-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG,SAAS,GAAG,IAAI,GAAG,SAAS,CAAC;CACvE;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,UAAU,CAYnG;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAKtD;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAGpD"}

package/dist/tools/error-utils.js

@@ -0,0 +1,35 @@
+export function toolError(code, message, options = {}) {
+    return {
+        tool_call_id: "",
+        output: `Error: [${code}] ${message}`,
+        is_error: true,
+        error: {
+            code,
+            message,
+            retriable: options.retriable ?? false,
+            category: options.category ?? inferErrorCategory(code),
+        },
+    };
+}
+export function toolSuccess(output) {
+    return {
+        tool_call_id: "",
+        output,
+    };
+}
+export function getErrorMessage(err) {
+    if (err instanceof Error && err.message)
+        return err.message;
+    return String(err);
+}
+function inferErrorCategory(code) {
+    if (/_INVALID_|_MISSING_|_EMPTY_|_UNSUPPORTED_/.test(code))
+        return "validation";
+    if (/_DENIED/.test(code))
+        return "permission";
+    if (/_NETWORK_|_URL_FETCH_|_TIMEOUT/.test(code))
+        return "network";
+    if (/_PATH_|_FILE_|_READ_|_WRITE_/.test(code))
+        return "io";
+    return "runtime";
+}

package/dist/tools/index.d.ts

@@ -0,0 +1,27 @@
+import { ToolCall, ToolResult, ToolDefinition } from "../types.js";
+import { bashTool } from "./bash.js";
+import { readTool } from "./read.js";
+import { writeTool } from "./write.js";
+import { todoTool } from "./todo.js";
+import { skillTool } from "./skill.js";
+import { searchTool } from "./search.js";
+import { plannerTool } from "./planner.js";
+import { urlFetchTool } from "./url-fetch.js";
+import { subtaskTool } from "./subtask.js";
+import { visionAnalyzeTool } from "./vision-analyze.js";
+import { browserFetchTool } from "./browser-fetch.js";
+import { patchTool } from "./patch.js";
+import type { MCPRegistry } from "../mcp/registry.js";
+export { bashTool, readTool, writeTool, todoTool, skillTool, searchTool, plannerTool, urlFetchTool, subtaskTool, visionAnalyzeTool, browserFetchTool, patchTool };
+export declare const ALL_TOOLS: ToolDefinition[];
+export declare function setMCPRegistry(registry: MCPRegistry): void;
+export declare function getMCPRegistry(): MCPRegistry | null;
+export interface ToolRegistryBuildOptions {
+    staticEnabled?: Record<string, boolean>;
+    runtimeInjected?: ToolDefinition[];
+    channelContextual?: ToolDefinition[];
+}
+export declare function buildToolRegistry(options?: ToolRegistryBuildOptions): ToolDefinition[];
+export declare function dispatch(toolCall: ToolCall): Promise<ToolResult>;
+export declare function dispatchAll(toolCalls: ToolCall[]): Promise<ToolResult[]>;
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAW,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAW,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAY,SAAS,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAW,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAY,SAAS,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAa,UAAU,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAc,WAAW,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAe,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAc,WAAW,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAoB,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAmB,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAY,SAAS,EAAE,MAAM,YAAY,CAAC;AAGjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC;AAElK,eAAO,MAAM,SAAS,EAAE,cAAc,EAErC,CAAC;AAKF,wBAAgB,cAAc,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI,CAE1D;AAED,wBAAgB,cAAc,IAAI,WAAW,GAAG,IAAI,CAEnD;AAED,MAAM,WAAW,wBAAwB;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC,iBAAiB,CAAC,EAAE,cAAc,EAAE,CAAC;CACtC;AAED,wBAAgB,iBAAiB,CAAC,OAAO,GAAE,wBAA6B,GAAG,cAAc,EAAE,CAU1F;AAmBD,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CA6BtE;AAED,wBAAsB,WAAW,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAE9E"}

package/dist/tools/index.js

@@ -0,0 +1,86 @@
+// ============================================================
+// 轻灵 - 工具调度器
+// ============================================================
+import { runBash, bashTool } from "./bash.js";
+import { runRead, readTool } from "./read.js";
+import { runWrite, writeTool } from "./write.js";
+import { runTodo, todoTool } from "./todo.js";
+import { runSkill, skillTool } from "./skill.js";
+import { runSearch, searchTool } from "./search.js";
+import { runPlanner, plannerTool } from "./planner.js";
+import { runUrlFetch, urlFetchTool } from "./url-fetch.js";
+import { runSubtask, subtaskTool } from "./subtask.js";
+import { runVisionAnalyze, visionAnalyzeTool } from "./vision-analyze.js";
+import { runBrowserFetch, browserFetchTool } from "./browser-fetch.js";
+import { runPatch, patchTool } from "./patch.js";
+import { toolError } from "./error-utils.js";
+import { isMCPTool, parseMCPToolName } from "../mcp/bridge.js";
+export { bashTool, readTool, writeTool, todoTool, skillTool, searchTool, plannerTool, urlFetchTool, subtaskTool, visionAnalyzeTool, browserFetchTool, patchTool };
+export const ALL_TOOLS = [
+    bashTool, readTool, writeTool, todoTool, skillTool, searchTool, plannerTool, urlFetchTool, subtaskTool, visionAnalyzeTool, browserFetchTool, patchTool
+];
+// Runtime MCP registry reference
+let mcpRegistry = null;
+export function setMCPRegistry(registry) {
+    mcpRegistry = registry;
+}
+export function getMCPRegistry() {
+    return mcpRegistry;
+}
+export function buildToolRegistry(options = {}) {
+    const staticEnabled = options.staticEnabled ?? {};
+    const staticLayer = ALL_TOOLS.filter((t) => staticEnabled[t.name] !== false);
+    const merged = [...staticLayer, ...(options.runtimeInjected ?? []), ...(options.channelContextual ?? [])];
+    const byName = new Map();
+    for (const tool of merged) {
+        byName.set(tool.name, tool);
+    }
+    return Array.from(byName.values());
+}
+const handlers = {
+    bash: runBash,
+    read: runRead,
+    write: runWrite,
+    todo: runTodo,
+    skill: runSkill,
+    search: runSearch,
+    planner: runPlanner,
+    url_fetch: runUrlFetch,
+    subtask: runSubtask,
+    vision_analyze: runVisionAnalyze,
+    browser_fetch: runBrowserFetch,
+    patch: runPatch,
+};
+export async function dispatch(toolCall) {
+    // MCP tool routing
+    if (isMCPTool(toolCall.name) && mcpRegistry) {
+        const parsed = parseMCPToolName(toolCall.name);
+        if (parsed) {
+            const result = await mcpRegistry.callTool(parsed.serverName, parsed.toolName, toolCall.arguments);
+            return { ...result, tool_call_id: toolCall.id };
+        }
+    }
+    const handler = handlers[toolCall.name];
+    if (!handler) {
+        return { ...toolError("TOOL_NOT_FOUND", `unknown tool '${toolCall.name}'`), tool_call_id: toolCall.id };
+    }
+    try {
+        const result = await handler(toolCall.arguments);
+        return {
+            ...result,
+            tool_call_id: toolCall.id,
+        };
+    }
+    catch (err) {
+        return {
+            ...toolError("TOOL_DISPATCH_FAILED", err instanceof Error ? err.message : String(err), {
+                retriable: false,
+                category: "runtime",
+            }),
+            tool_call_id: toolCall.id,
+        };
+    }
+}
+export async function dispatchAll(toolCalls) {
+    return Promise.all(toolCalls.map(dispatch));
+}

package/dist/tools/patch.d.ts

@@ -0,0 +1,22 @@
+import { ToolDefinition, ToolResult } from "../types.js";
+/** 超过该字节数拒绝做 LCS diff / 写入，防止超大文件 OOM */
+export declare const PATCH_MAX_FILE_BYTES: number;
+export declare const patchTool: ToolDefinition;
+interface PatchChunk {
+    search: string;
+    replace: string;
+}
+export interface PatchLineStats {
+    added: number;
+    removed: number;
+    unchanged: number;
+}
+export declare function computeLineStats(originalContent: string, newContent: string): PatchLineStats;
+export declare function runPatch(args: {
+    path: string;
+    chunks: PatchChunk[];
+    dry_run?: boolean;
+}): Promise<ToolResult>;
+export declare function generateUnifiedDiff(filePath: string, originalContent: string, newContent: string): string;
+export {};
+//# sourceMappingURL=patch.d.ts.map

package/dist/tools/patch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch.d.ts","sourceRoot":"","sources":["../../src/tools/patch.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AASzD,yCAAyC;AACzC,eAAO,MAAM,oBAAoB,QAAkB,CAAC;AAEpD,eAAO,MAAM,SAAS,EAAE,cA+EvB,CAAC;AAEF,UAAU,UAAU;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,gBAAgB,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,cAAc,CAmC5F;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GAAG,OAAO,CAAC,UAAU,CAAC,CA4HtB;AAkID,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,MAAM,GACjB,MAAM,CA6IR"}