@scanton/phase2s 0.13.0

package/dist/src/tools/glob-tool.js

@@ -0,0 +1,38 @@
+import { z } from "zod";
+import { glob } from "glob";
+import { resolve, sep } from "node:path";
+const params = z.object({
+    pattern: z.string().describe("Glob pattern to match files (e.g. '**/*.ts')"),
+    cwd: z.string().optional().describe("Base directory to search from"),
+    ignore: z.array(z.string()).optional().describe("Patterns to ignore"),
+});
+export const globTool = {
+    name: "glob",
+    description: "Find files matching a glob pattern. Returns matching file paths.",
+    parameters: params,
+    async execute(raw) {
+        const args = params.parse(raw);
+        // Sandbox: validate the cwd parameter stays inside the project
+        const projectRoot = process.cwd();
+        const cwdPath = args.cwd ? resolve(args.cwd) : projectRoot;
+        if (!cwdPath.startsWith(projectRoot + sep) && cwdPath !== projectRoot) {
+            return { success: false, output: "", error: `cwd outside project directory: ${args.cwd}` };
+        }
+        try {
+            const files = await glob(args.pattern, {
+                cwd: cwdPath,
+                ignore: args.ignore ?? ["node_modules/**", ".git/**"],
+                nodir: true,
+            });
+            if (files.length === 0) {
+                return { success: true, output: "No files matched the pattern." };
+            }
+            return { success: true, output: files.join("\n") };
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            return { success: false, output: "", error: msg };
+        }
+    },
+};
+//# sourceMappingURL=glob-tool.js.map

package/dist/src/tools/glob-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"glob-tool.js","sourceRoot":"","sources":["../../../src/tools/glob-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAGzC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8CAA8C,CAAC;IAC5E,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;IACpE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;CACtE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAmB;IACtC,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,kEAAkE;IAC/E,UAAU,EAAE,MAAM;IAClB,KAAK,CAAC,OAAO,CAAC,GAAY;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE/B,+DAA+D;QAC/D,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAC3D,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YACtE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,kCAAkC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC7F,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;gBACrC,GAAG,EAAE,OAAO;gBACZ,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,iBAAiB,EAAE,SAAS,CAAC;gBACrD,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;YACpE,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACpD,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/src/tools/grep-tool.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDefinition } from "./types.js";
+export declare const grepTool: ToolDefinition;
+//# sourceMappingURL=grep-tool.d.ts.map

package/dist/src/tools/grep-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grep-tool.d.ts","sourceRoot":"","sources":["../../../src/tools/grep-tool.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,YAAY,CAAC;AAY7D,eAAO,MAAM,QAAQ,EAAE,cAqDtB,CAAC"}

package/dist/src/tools/grep-tool.js

@@ -0,0 +1,59 @@
+import { z } from "zod";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { resolve, sep } from "node:path";
+const execFileAsync = promisify(execFile);
+const params = z.object({
+    pattern: z.string().describe("Regex pattern to search for"),
+    path: z.string().optional().describe("File or directory to search (default: current directory)"),
+    filePattern: z.string().optional().describe("Only search files matching this glob (e.g. '*.ts')"),
+    caseSensitive: z.boolean().optional().describe("Case sensitive search (default: true)"),
+    maxResults: z.number().optional().describe("Maximum number of results (default: 50)"),
+});
+export const grepTool = {
+    name: "grep",
+    description: "Search file contents for a regex pattern. Returns matching lines with file paths and line numbers.",
+    parameters: params,
+    async execute(raw) {
+        const args = params.parse(raw);
+        const grepArgs = ["-rn", "--color=never"];
+        if (!args.caseSensitive && args.caseSensitive !== undefined) {
+            grepArgs.push("-i");
+        }
+        if (args.filePattern) {
+            grepArgs.push("--include", args.filePattern);
+        }
+        // Always exclude common noise
+        grepArgs.push("--exclude-dir=node_modules", "--exclude-dir=.git", "--exclude-dir=dist");
+        grepArgs.push(args.pattern);
+        // Sandbox: resolve and validate the search path
+        const projectRoot = process.cwd();
+        const searchPath = args.path ? resolve(args.path) : projectRoot;
+        if (!searchPath.startsWith(projectRoot + sep) && searchPath !== projectRoot) {
+            return { success: false, output: "", error: `Path outside project directory: ${args.path}` };
+        }
+        grepArgs.push(searchPath);
+        try {
+            const { stdout } = await execFileAsync("grep", grepArgs, {
+                maxBuffer: 1024 * 1024 * 5,
+                timeout: 15_000,
+            });
+            const lines = stdout.trim().split("\n");
+            const maxResults = args.maxResults ?? 50;
+            const truncated = lines.slice(0, maxResults);
+            let output = truncated.join("\n");
+            if (lines.length > maxResults) {
+                output += `\n\n... (${lines.length - maxResults} more results truncated)`;
+            }
+            return { success: true, output };
+        }
+        catch (err) {
+            if (err && typeof err === "object" && "code" in err && err.code === 1) {
+                return { success: true, output: "No matches found." };
+            }
+            const msg = err instanceof Error ? err.message : String(err);
+            return { success: false, output: "", error: msg };
+        }
+    },
+};
+//# sourceMappingURL=grep-tool.js.map

package/dist/src/tools/grep-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grep-tool.js","sourceRoot":"","sources":["../../../src/tools/grep-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAGzC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAC3D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;IAChG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oDAAoD,CAAC;IACjG,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACvF,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;CACtF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAmB;IACtC,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,oGAAoG;IACjH,UAAU,EAAE,MAAM;IAClB,KAAK,CAAC,OAAO,CAAC,GAAY;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAE1C,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YAC5D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/C,CAAC;QAED,8BAA8B;QAC9B,QAAQ,CAAC,IAAI,CAAC,4BAA4B,EAAE,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;QAExF,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE5B,gDAAgD;QAChD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;QAChE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;YAC5E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,mCAAmC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/F,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE1B,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE;gBACvD,SAAS,EAAE,IAAI,GAAG,IAAI,GAAG,CAAC;gBAC1B,OAAO,EAAE,MAAM;aAChB,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;YACzC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YAE7C,IAAI,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;gBAC9B,MAAM,IAAI,YAAY,KAAK,CAAC,MAAM,GAAG,UAAU,0BAA0B,CAAC;YAC5E,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAK,GAAwB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC5F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;YACxD,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACpD,CAAC;IACH,CAAC;CACF,CAAC"}

package/dist/src/tools/index.d.ts

@@ -0,0 +1,5 @@
+import { ToolRegistry } from "./registry.js";
+export declare function createDefaultRegistry(allowDestructive?: boolean): ToolRegistry;
+export { ToolRegistry } from "./registry.js";
+export type { ToolDefinition, ToolResult, OpenAIFunctionDef } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAO7C,wBAAgB,qBAAqB,CAAC,gBAAgB,UAAQ,GAAG,YAAY,CAQ5E;AAED,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC"}

package/dist/src/tools/index.js

@@ -0,0 +1,17 @@
+import { ToolRegistry } from "./registry.js";
+import { fileReadTool } from "./file-read.js";
+import { fileWriteTool } from "./file-write.js";
+import { createShellTool } from "./shell.js";
+import { globTool } from "./glob-tool.js";
+import { grepTool } from "./grep-tool.js";
+export function createDefaultRegistry(allowDestructive = false) {
+    const registry = new ToolRegistry();
+    registry.register(fileReadTool);
+    registry.register(fileWriteTool);
+    registry.register(createShellTool(allowDestructive));
+    registry.register(globTool);
+    registry.register(grepTool);
+    return registry;
+}
+export { ToolRegistry } from "./registry.js";
+//# sourceMappingURL=index.js.map

package/dist/src/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,UAAU,qBAAqB,CAAC,gBAAgB,GAAG,KAAK;IAC5D,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrD,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC"}

package/dist/src/tools/registry.d.ts

@@ -0,0 +1,13 @@
+import { ToolDefinition, ToolResult, type OpenAIFunctionDef } from "./types.js";
+export declare class ToolRegistry {
+    private tools;
+    register(tool: ToolDefinition): void;
+    get(name: string): ToolDefinition | undefined;
+    list(): ToolDefinition[];
+    names(): string[];
+    /** Get all tools as OpenAI function definitions */
+    toOpenAI(): OpenAIFunctionDef[];
+    /** Execute a tool by name with parsed arguments */
+    execute(name: string, args: unknown): Promise<ToolResult>;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/src/tools/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/tools/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAgB,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE9F,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAqC;IAElD,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAIpC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAI7C,IAAI,IAAI,cAAc,EAAE;IAIxB,KAAK,IAAI,MAAM,EAAE;IAIjB,mDAAmD;IACnD,QAAQ,IAAI,iBAAiB,EAAE;IAI/B,mDAAmD;IAC7C,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;CA6BhE"}

package/dist/src/tools/registry.js

@@ -0,0 +1,50 @@
+import { toolToOpenAI } from "./types.js";
+export class ToolRegistry {
+    tools = new Map();
+    register(tool) {
+        this.tools.set(tool.name, tool);
+    }
+    get(name) {
+        return this.tools.get(name);
+    }
+    list() {
+        return Array.from(this.tools.values());
+    }
+    names() {
+        return Array.from(this.tools.keys());
+    }
+    /** Get all tools as OpenAI function definitions */
+    toOpenAI() {
+        return this.list().map(toolToOpenAI);
+    }
+    /** Execute a tool by name with parsed arguments */
+    async execute(name, args) {
+        const tool = this.tools.get(name);
+        if (!tool) {
+            return {
+                success: false,
+                output: "",
+                error: `Unknown tool: ${name}`,
+            };
+        }
+        const parsed = tool.parameters.safeParse(args);
+        if (!parsed.success) {
+            return {
+                success: false,
+                output: "",
+                error: `Invalid arguments for ${name}: ${parsed.error.message}`,
+            };
+        }
+        try {
+            return await tool.execute(parsed.data);
+        }
+        catch (err) {
+            return {
+                success: false,
+                output: "",
+                error: `Tool ${name} failed: ${err instanceof Error ? err.message : String(err)}`,
+            };
+        }
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/src/tools/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/tools/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,YAAY,EAA0B,MAAM,YAAY,CAAC;AAE9F,MAAM,OAAO,YAAY;IACf,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAElD,QAAQ,CAAC,IAAoB;QAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,KAAK;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,mDAAmD;IACnD,QAAQ;QACN,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC;IAED,mDAAmD;IACnD,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,IAAa;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,iBAAiB,IAAI,EAAE;aAC/B,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,yBAAyB,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;aAChE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,QAAQ,IAAI,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aAClF,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/src/tools/sandbox.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Shared sandbox enforcement helper.
+ *
+ * Resolves `filePath` to its real (symlink-expanded) absolute path and
+ * verifies it lives inside `cwd` (also resolved via realpath).
+ *
+ * Why realpath() instead of resolve()?
+ * `path.resolve()` does lexical normalization only — it cannot follow symlinks.
+ * A symlink at `<project>/link -> /etc` would pass a `resolve()`-based check
+ * because the resolved path starts with the project root. `realpath()` follows
+ * the chain and returns `/etc`, which correctly fails the sandbox check.
+ *
+ * Edge cases:
+ * - File does not exist: realpath() throws ENOENT. We catch it and fall back
+ *   to lexical resolve() for the sandbox check. The caller (file_write with
+ *   createDirs) must ensure parent dirs exist before calling assertInSandbox
+ *   when it needs the realpath guarantee for a new file.
+ * - Dangling symlink (points to non-existent target): realpath() throws. We
+ *   catch it and return a sandbox error WITHOUT leaking the absolute path in
+ *   the error message (the raw realpath error would expose it).
+ * - `cwd` itself: we realpath() it once per call, which is cheap and correct.
+ *
+ * @param filePath  The user-supplied (potentially relative) file path.
+ * @param cwd       The project root to sandbox against. Defaults to process.cwd().
+ * @returns         The resolved absolute path (realpath or lexical fallback).
+ * @throws          Error with a safe message if the path escapes the sandbox.
+ */
+export declare function assertInSandbox(filePath: string, cwd?: string): Promise<string>;
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/src/tools/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/tools/sandbox.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,GAAG,GAAE,MAAsB,GAC1B,OAAO,CAAC,MAAM,CAAC,CAoDjB"}

package/dist/src/tools/sandbox.js

@@ -0,0 +1,84 @@
+import { realpath } from "node:fs/promises";
+import { resolve, sep, dirname, basename } from "node:path";
+/**
+ * Shared sandbox enforcement helper.
+ *
+ * Resolves `filePath` to its real (symlink-expanded) absolute path and
+ * verifies it lives inside `cwd` (also resolved via realpath).
+ *
+ * Why realpath() instead of resolve()?
+ * `path.resolve()` does lexical normalization only — it cannot follow symlinks.
+ * A symlink at `<project>/link -> /etc` would pass a `resolve()`-based check
+ * because the resolved path starts with the project root. `realpath()` follows
+ * the chain and returns `/etc`, which correctly fails the sandbox check.
+ *
+ * Edge cases:
+ * - File does not exist: realpath() throws ENOENT. We catch it and fall back
+ *   to lexical resolve() for the sandbox check. The caller (file_write with
+ *   createDirs) must ensure parent dirs exist before calling assertInSandbox
+ *   when it needs the realpath guarantee for a new file.
+ * - Dangling symlink (points to non-existent target): realpath() throws. We
+ *   catch it and return a sandbox error WITHOUT leaking the absolute path in
+ *   the error message (the raw realpath error would expose it).
+ * - `cwd` itself: we realpath() it once per call, which is cheap and correct.
+ *
+ * @param filePath  The user-supplied (potentially relative) file path.
+ * @param cwd       The project root to sandbox against. Defaults to process.cwd().
+ * @returns         The resolved absolute path (realpath or lexical fallback).
+ * @throws          Error with a safe message if the path escapes the sandbox.
+ */
+export async function assertInSandbox(filePath, cwd = process.cwd()) {
+    // Resolve cwd via realpath to handle the case where cwd itself is a symlink.
+    let realCwd;
+    try {
+        realCwd = await realpath(cwd);
+    }
+    catch {
+        // cwd doesn't exist or isn't accessible — use lexical fallback
+        realCwd = resolve(cwd);
+    }
+    // Attempt to resolve the file path via realpath (follows symlinks).
+    let resolvedPath;
+    let usedRealpath = true;
+    try {
+        resolvedPath = await realpath(resolve(cwd, filePath));
+    }
+    catch (err) {
+        // File doesn't exist yet (ENOENT) OR is a dangling symlink.
+        // For ENOENT we fall back to lexical resolve (safe — new files can't escape
+        // the sandbox via lexical path alone).
+        // For other errors (dangling symlinks, permission issues) we conservatively
+        // block rather than risk leaking data or paths.
+        const code = err.code;
+        if (code === "ENOENT") {
+            // File doesn't exist yet. Try realpath() on the parent directory to catch
+            // the case where the parent is a symlink pointing outside cwd.
+            // e.g. <project>/exfil -> /etc, then write to exfil/newfile.txt must be blocked.
+            const absFilePath = resolve(cwd, filePath);
+            const parentDir = dirname(absFilePath);
+            try {
+                const realParent = await realpath(parentDir);
+                // Parent exists and was realpath'd — compose the final path from the real parent.
+                resolvedPath = realParent + sep + basename(absFilePath);
+                // usedRealpath remains true — we have a realpath-based parent.
+            }
+            catch {
+                // Parent also doesn't exist (multi-level new path) — lexical fallback.
+                // This is safe because lexical normalization prevents `../` escapes.
+                resolvedPath = absFilePath;
+                usedRealpath = false;
+            }
+        }
+        else {
+            // Dangling symlink or other error — block without leaking the path.
+            throw new Error(`Path outside project directory: ${filePath}`);
+        }
+    }
+    // Sandbox check: resolved path must be inside cwd.
+    const sandboxRoot = usedRealpath ? realCwd : resolve(cwd);
+    if (!resolvedPath.startsWith(sandboxRoot + sep) && resolvedPath !== sandboxRoot) {
+        throw new Error(`Path outside project directory: ${filePath}`);
+    }
+    return resolvedPath;
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/src/tools/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../src/tools/sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE5D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAgB,EAChB,MAAc,OAAO,CAAC,GAAG,EAAE;IAE3B,6EAA6E;IAC7E,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;QAC/D,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,oEAAoE;IACpE,IAAI,YAAoB,CAAC;IACzB,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,YAAY,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,4DAA4D;QAC5D,4EAA4E;QAC5E,uCAAuC;QACvC,4EAA4E;QAC5E,gDAAgD;QAChD,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,0EAA0E;YAC1E,+DAA+D;YAC/D,iFAAiF;YACjF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAC7C,kFAAkF;gBAClF,YAAY,GAAG,UAAU,GAAG,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACxD,+DAA+D;YACjE,CAAC;YAAC,MAAM,CAAC;gBACP,uEAAuE;gBACvE,qEAAqE;gBACrE,YAAY,GAAG,WAAW,CAAC;gBAC3B,YAAY,GAAG,KAAK,CAAC;YACvB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,oEAAoE;YACpE,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/src/tools/shell.d.ts

@@ -0,0 +1,10 @@
+import type { ToolDefinition } from "./types.js";
+/**
+ * Create a shell tool with configurable destructive command behavior.
+ *
+ * When allowDestructive is false (default), commands matching DESTRUCTIVE_PATTERNS
+ * are blocked and return success: false. When true, they are allowed with a warning.
+ */
+export declare function createShellTool(allowDestructive?: boolean): ToolDefinition;
+export declare const shellTool: ToolDefinition;
+//# sourceMappingURL=shell.d.ts.map

package/dist/src/tools/shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../../src/tools/shell.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,YAAY,CAAC;AA0B7D;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,gBAAgB,UAAQ,GAAG,cAAc,CAuExE;AAID,eAAO,MAAM,SAAS,gBAAyB,CAAC"}

package/dist/src/tools/shell.js

@@ -0,0 +1,108 @@
+import { z } from "zod";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { resolve, sep } from "node:path";
+const execFileAsync = promisify(execFile);
+/** Patterns that suggest a destructive or exfiltration-risk command. */
+const DESTRUCTIVE_PATTERNS = [
+    /rm\s+-[a-zA-Z]*r[a-zA-Z]*f/i, // rm -rf variants (case-insensitive: -RF, -rF, etc.)
+    /rm\s+-[a-zA-Z]*f[a-zA-Z]*r/i, // rm -fr variants (case-insensitive)
+    /\bcurl\b.*\|\s*(ba)?sh/, // curl | sh / curl | bash
+    /\bwget\b.*\|\s*(ba)?sh/, // wget | sh
+    /git\s+push\s+.*--force/, // git push --force
+    /git\s+push\s+-f\b/, // git push -f
+    /:\s*>\s*\S+/, // : > file (truncate via colon)
+    /\bdd\b.*of=/, // dd to any output file (device or otherwise)
+    /\bchmod\s+0?777\b/, // world-writable permission (octal 777 or 0777)
+    /\bsudo\b/, // sudo escalation
+    /\bmkfs\b/, // filesystem format (always destructive)
+    /:\s*\(\s*\)\s*\{.*\|.*&/, // fork bomb :(){ :|:& };:
+];
+const params = z.object({
+    command: z.string().describe("Shell command to execute"),
+    timeout: z.number().min(1_000).max(300_000).optional().describe("Timeout in milliseconds (default: 30000, max: 300000)"),
+    cwd: z.string().optional().describe("Working directory for the command (defaults to project directory)"),
+});
+/**
+ * Create a shell tool with configurable destructive command behavior.
+ *
+ * When allowDestructive is false (default), commands matching DESTRUCTIVE_PATTERNS
+ * are blocked and return success: false. When true, they are allowed with a warning.
+ */
+export function createShellTool(allowDestructive = false) {
+    return {
+        name: "shell",
+        description: "Execute a shell command and return its output. Use for running builds, tests, git commands, etc.",
+        parameters: params,
+        async execute(raw) {
+            const args = params.parse(raw);
+            const timeout = args.timeout ?? 30_000;
+            // Check for destructive patterns
+            for (const pattern of DESTRUCTIVE_PATTERNS) {
+                if (pattern.test(args.command)) {
+                    if (!allowDestructive) {
+                        return {
+                            success: false,
+                            output: "",
+                            error: "Blocked: destructive command detected. Set allowDestructive: true in .phase2s.yaml to enable.",
+                        };
+                    }
+                    process.stdout.write(`  [shell] ⚠ Destructive command (allowDestructive: true): ${args.command}\n`);
+                    break;
+                }
+            }
+            // Sandbox: reject cwd values that escape the project directory
+            const projectRoot = process.cwd();
+            let cwdPath = projectRoot;
+            if (args.cwd) {
+                const resolvedCwd = resolve(args.cwd);
+                if (!resolvedCwd.startsWith(projectRoot + sep) && resolvedCwd !== projectRoot) {
+                    return {
+                        success: false,
+                        output: "",
+                        error: `cwd outside project directory: ${args.cwd}`,
+                    };
+                }
+                cwdPath = resolvedCwd;
+            }
+            try {
+                const { stdout, stderr } = await execFileAsync("/bin/sh", ["-c", args.command], {
+                    timeout,
+                    maxBuffer: 1024 * 1024 * 10, // 10MB
+                    cwd: cwdPath,
+                });
+                // Return stdout and stderr separately so the LLM gets accurate signal
+                const parts = [];
+                if (stdout)
+                    parts.push(stdout);
+                if (stderr)
+                    parts.push(`[stderr]\n${stderr}`);
+                return { success: true, output: parts.join("\n") || "(no output)" };
+            }
+            catch (err) {
+                if (err && typeof err === "object" && "stdout" in err) {
+                    const execErr = err;
+                    const parts = [];
+                    if (execErr.stdout)
+                        parts.push(execErr.stdout);
+                    if (execErr.stderr)
+                        parts.push(`[stderr]\n${execErr.stderr}`);
+                    const errorMsg = execErr.killed
+                        ? `Command timed out after ${timeout}ms`
+                        : `Command exited with code ${execErr.code}`;
+                    return {
+                        success: false,
+                        output: parts.join("\n"),
+                        error: errorMsg,
+                    };
+                }
+                const msg = err instanceof Error ? err.message : String(err);
+                return { success: false, output: "", error: msg };
+            }
+        },
+    };
+}
+// Backward-compat export — blocks destructive commands (safe default).
+// All existing non-destructive shell tests use this directly and are unaffected.
+export const shellTool = createShellTool(false);
+//# sourceMappingURL=shell.js.map

package/dist/src/tools/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../../src/tools/shell.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAGzC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,wEAAwE;AACxE,MAAM,oBAAoB,GAAG;IAC3B,6BAA6B,EAAI,qDAAqD;IACtF,6BAA6B,EAAI,qCAAqC;IACtE,wBAAwB,EAAU,0BAA0B;IAC5D,wBAAwB,EAAU,YAAY;IAC9C,wBAAwB,EAAU,mBAAmB;IACrD,mBAAmB,EAAe,cAAc;IAChD,aAAa,EAAqB,gCAAgC;IAClE,aAAa,EAAqB,8CAA8C;IAChF,mBAAmB,EAAe,gDAAgD;IAClF,UAAU,EAAwB,kBAAkB;IACpD,UAAU,EAAwB,yCAAyC;IAC3E,yBAAyB,EAAS,0BAA0B;CAC7D,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IACxD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IACxH,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mEAAmE,CAAC;CACzG,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,gBAAgB,GAAG,KAAK;IACtD,OAAO;QACL,IAAI,EAAE,OAAO;QACb,WAAW,EAAE,kGAAkG;QAC/G,UAAU,EAAE,MAAM;QAClB,KAAK,CAAC,OAAO,CAAC,GAAY;YACxB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC;YAEvC,iCAAiC;YACjC,KAAK,MAAM,OAAO,IAAI,oBAAoB,EAAE,CAAC;gBAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC/B,IAAI,CAAC,gBAAgB,EAAE,CAAC;wBACtB,OAAO;4BACL,OAAO,EAAE,KAAK;4BACd,MAAM,EAAE,EAAE;4BACV,KAAK,EAAE,+FAA+F;yBACvG,CAAC;oBACJ,CAAC;oBACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6DAA6D,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;oBACpG,MAAM;gBACR,CAAC;YACH,CAAC;YAED,+DAA+D;YAC/D,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;YAClC,IAAI,OAAO,GAAG,WAAW,CAAC;YAC1B,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACb,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,GAAG,GAAG,CAAC,IAAI,WAAW,KAAK,WAAW,EAAE,CAAC;oBAC9E,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,EAAE;wBACV,KAAK,EAAE,kCAAkC,IAAI,CAAC,GAAG,EAAE;qBACpD,CAAC;gBACJ,CAAC;gBACD,OAAO,GAAG,WAAW,CAAC;YACxB,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;oBAC9E,OAAO;oBACP,SAAS,EAAE,IAAI,GAAG,IAAI,GAAG,EAAE,EAAE,OAAO;oBACpC,GAAG,EAAE,OAAO;iBACb,CAAC,CAAC;gBAEH,sEAAsE;gBACtE,MAAM,KAAK,GAAa,EAAE,CAAC;gBAC3B,IAAI,MAAM;oBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC/B,IAAI,MAAM;oBAAE,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,EAAE,CAAC,CAAC;gBAC9C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,EAAE,CAAC;YACtE,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;oBACtD,MAAM,OAAO,GAAG,GAAsG,CAAC;oBACvH,MAAM,KAAK,GAAa,EAAE,CAAC;oBAC3B,IAAI,OAAO,CAAC,MAAM;wBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAC/C,IAAI,OAAO,CAAC,MAAM;wBAAE,KAAK,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM;wBAC7B,CAAC,CAAC,2BAA2B,OAAO,IAAI;wBACxC,CAAC,CAAC,4BAA4B,OAAO,CAAC,IAAI,EAAE,CAAC;oBAC/C,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;wBACxB,KAAK,EAAE,QAAQ;qBAChB,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;YACpD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,iFAAiF;AACjF,MAAM,CAAC,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC"}

package/dist/src/tools/types.d.ts

@@ -0,0 +1,25 @@
+import { z } from "zod";
+export interface ToolResult {
+    success: boolean;
+    output: string;
+    error?: string;
+}
+export interface ToolDefinition {
+    name: string;
+    description: string;
+    parameters: z.ZodType;
+    execute(params: unknown): Promise<ToolResult>;
+}
+/** OpenAI-compatible function definition for tool calling */
+export interface OpenAIFunctionDef {
+    type: "function";
+    function: {
+        name: string;
+        description: string;
+        parameters: Record<string, unknown>;
+    };
+}
+/** Convert a zod schema to a JSON Schema-like object for OpenAI */
+export declare function zodToJsonSchema(schema: z.ZodType): Record<string, unknown>;
+export declare function toolToOpenAI(tool: ToolDefinition): OpenAIFunctionDef;
+//# sourceMappingURL=types.d.ts.map

package/dist/src/tools/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/tools/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC;IACtB,OAAO,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAC/C;AAED,6DAA6D;AAC7D,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACrC,CAAC;CACH;AAED,mEAAmE;AACnE,wBAAgB,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAoB1E;AAyBD,wBAAgB,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,iBAAiB,CASpE"}

package/dist/src/tools/types.js

@@ -0,0 +1,54 @@
+import { z } from "zod";
+/** Convert a zod schema to a JSON Schema-like object for OpenAI */
+export function zodToJsonSchema(schema) {
+    if (schema instanceof z.ZodObject) {
+        const shape = schema.shape;
+        const properties = {};
+        const required = [];
+        for (const [key, value] of Object.entries(shape)) {
+            properties[key] = zodFieldToJson(value);
+            if (!(value instanceof z.ZodOptional)) {
+                required.push(key);
+            }
+        }
+        return {
+            type: "object",
+            properties,
+            required: required.length > 0 ? required : undefined,
+        };
+    }
+    return { type: "object" };
+}
+function zodFieldToJson(field) {
+    if (field instanceof z.ZodString) {
+        return { type: "string", description: field.description };
+    }
+    if (field instanceof z.ZodNumber) {
+        return { type: "number", description: field.description };
+    }
+    if (field instanceof z.ZodBoolean) {
+        return { type: "boolean", description: field.description };
+    }
+    if (field instanceof z.ZodOptional) {
+        return zodFieldToJson(field.unwrap());
+    }
+    if (field instanceof z.ZodArray) {
+        return {
+            type: "array",
+            items: zodFieldToJson(field.element),
+            description: field.description,
+        };
+    }
+    return { type: "string" };
+}
+export function toolToOpenAI(tool) {
+    return {
+        type: "function",
+        function: {
+            name: tool.name,
+            description: tool.description,
+            parameters: zodToJsonSchema(tool.parameters),
+        },
+    };
+}
+//# sourceMappingURL=types.js.map

package/dist/src/tools/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/tools/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAyBxB,mEAAmE;AACnE,MAAM,UAAU,eAAe,CAAC,MAAiB;IAC/C,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAkC,CAAC;QACxD,MAAM,UAAU,GAA4B,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,UAAU,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,UAAU;YACV,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACrD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,cAAc,CAAC,KAAgB;IACtC,IAAI,KAAK,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,KAAK,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACnC,OAAO,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChC,OAAO;YACL,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;YACpC,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAoB;IAC/C,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE;YACR,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC;SAC7C;KACF,CAAC;AACJ,CAAC"}

package/dist/src/utils/logger.d.ts

@@ -0,0 +1,10 @@
+export declare const log: {
+    info(msg: string): void;
+    success(msg: string): void;
+    warn(msg: string): void;
+    error(msg: string): void;
+    tool(name: string, msg: string): void;
+    assistant(msg: string): void;
+    dim(msg: string): void;
+};
+//# sourceMappingURL=logger.d.ts.map

package/dist/src/utils/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../src/utils/logger.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,GAAG;cACJ,MAAM,GAAG,IAAI;iBAGV,MAAM,GAAG,IAAI;cAGhB,MAAM,GAAG,IAAI;eAGZ,MAAM,GAAG,IAAI;eAGb,MAAM,OAAO,MAAM,GAAG,IAAI;mBAGtB,MAAM,GAAG,IAAI;aAGnB,MAAM,GAAG,IAAI;CAGvB,CAAC"}

package/dist/src/utils/logger.js

@@ -0,0 +1,25 @@
+import chalk from "chalk";
+export const log = {
+    info(msg) {
+        console.log(chalk.blue("i"), msg);
+    },
+    success(msg) {
+        console.log(chalk.green("✓"), msg);
+    },
+    warn(msg) {
+        console.log(chalk.yellow("⚠"), msg);
+    },
+    error(msg) {
+        console.error(chalk.red("✗"), msg);
+    },
+    tool(name, msg) {
+        console.log(chalk.dim(`  [${name}]`), chalk.dim(msg));
+    },
+    assistant(msg) {
+        console.log(msg);
+    },
+    dim(msg) {
+        console.log(chalk.dim(msg));
+    },
+};
+//# sourceMappingURL=logger.js.map

package/dist/src/utils/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../src/utils/logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,IAAI,CAAC,GAAW;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,CAAC,GAAW;QACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,GAAW;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,CAAC,GAAW;QACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,IAAY,EAAE,GAAW;QAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,SAAS,CAAC,GAAW;QACnB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,GAAG,CAAC,GAAW;QACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,CAAC;CACF,CAAC"}

package/dist/src/utils/prompt.d.ts

@@ -0,0 +1,3 @@
+import type { ToolDefinition } from "../tools/types.js";
+export declare function buildSystemPrompt(tools: ToolDefinition[], customPrompt?: string, learnings?: string): string;
+//# sourceMappingURL=prompt.d.ts.map

package/dist/src/utils/prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../../src/utils/prompt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE,YAAY,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CA8B5G"}