@shuyhere/takotako 0.0.1

package/dist/tools/exec-safety.js

@@ -0,0 +1,141 @@
+/**
+ * Exec safety — command validation, dangerous command detection,
+ * working directory restrictions, timeout enforcement, and output limits.
+ *
+ * This module sits between the agent's exec tool call and actual shell
+ * execution. It validates commands against safety rules before they run.
+ */
+import { resolve, relative } from 'node:path';
+// ─── Dangerous command patterns ──────────────────────────────────────
+/** Patterns that match commands known to be destructive or dangerous. */
+const DANGEROUS_PATTERNS = [
+    // Filesystem destruction
+    { pattern: /\brm\s+(-[a-zA-Z]*f[a-zA-Z]*\s+)?(-[a-zA-Z]*r[a-zA-Z]*\s+)?\/\s*$/, description: 'rm on root filesystem', severity: 'block' },
+    { pattern: /\brm\s+.*-[a-zA-Z]*r[a-zA-Z]*f|rm\s+.*-[a-zA-Z]*f[a-zA-Z]*r/, description: 'Recursive force delete', severity: 'warn' },
+    { pattern: /\bmkfs\b/, description: 'Filesystem format command', severity: 'block' },
+    { pattern: /\bdd\s+.*of=\/dev\//, description: 'Direct disk write via dd', severity: 'block' },
+    { pattern: />\s*\/dev\/[sh]d[a-z]/, description: 'Direct write to disk device', severity: 'block' },
+    // System modification
+    { pattern: /\bchmod\s+.*-R\s+.*\//, description: 'Recursive permission change on root-level path', severity: 'warn' },
+    { pattern: /\bchown\s+.*-R\s+.*\//, description: 'Recursive ownership change on root-level path', severity: 'warn' },
+    // Docker destruction
+    { pattern: /\bdocker\s+rm\s+.*-f/, description: 'Force remove Docker container', severity: 'warn' },
+    { pattern: /\bdocker\s+system\s+prune/, description: 'Docker system prune', severity: 'warn' },
+    { pattern: /\bdocker\s+volume\s+rm/, description: 'Docker volume removal', severity: 'warn' },
+    // Git destruction
+    { pattern: /\bgit\s+push\s+.*--force\b/, description: 'Git force push', severity: 'warn' },
+    { pattern: /\bgit\s+reset\s+--hard\b/, description: 'Git hard reset', severity: 'warn' },
+    { pattern: /\bgit\s+clean\s+.*-f/, description: 'Git clean (force)', severity: 'warn' },
+    // Data exfiltration
+    { pattern: /\bcurl\s+.*-d\s+.*@/, description: 'curl posting file contents', severity: 'warn' },
+    { pattern: /\bwget\s+.*--post-file/, description: 'wget posting file contents', severity: 'warn' },
+    // Process/system
+    { pattern: /\bkill\s+-9\s+1\b/, description: 'Kill init process', severity: 'block' },
+    { pattern: /\bshutdown\b/, description: 'System shutdown command', severity: 'block' },
+    { pattern: /\breboot\b/, description: 'System reboot command', severity: 'block' },
+    { pattern: /:(){ :\|:& };:/, description: 'Fork bomb', severity: 'block' },
+    // Credential/secret access
+    { pattern: /\bcat\s+.*\.env\b/, description: 'Reading .env file (may contain secrets)', severity: 'warn' },
+    { pattern: /\bcat\s+.*credentials/, description: 'Reading credentials file', severity: 'warn' },
+    { pattern: /\bcat\s+.*\/etc\/shadow/, description: 'Reading shadow password file', severity: 'block' },
+    { pattern: /\bcat\s+.*id_rsa/, description: 'Reading SSH private key', severity: 'warn' },
+];
+const DEFAULT_OPTIONS = {
+    workspaceRoot: process.cwd(),
+    workDir: process.cwd(),
+    maxTimeout: 120_000,
+    defaultTimeout: 30_000,
+    maxOutputSize: 1024 * 1024,
+    allowOutsideWorkspace: false,
+};
+// ─── ExecSafety class ────────────────────────────────────────────────
+/**
+ * ExecSafety — validates and constrains shell command execution.
+ *
+ * Checks:
+ * 1. Dangerous command detection (block or warn)
+ * 2. Working directory restrictions
+ * 3. Timeout enforcement (clamped to max)
+ * 4. Output size limits
+ */
+export class ExecSafety {
+    options;
+    constructor(options) {
+        this.options = { ...DEFAULT_OPTIONS, ...options };
+    }
+    /**
+     * Validate a command before execution.
+     *
+     * @param command - Shell command string
+     * @param requestedTimeout - Timeout requested by the caller
+     * @returns Validation result with allowed status, warnings, and effective params
+     */
+    validate(command, requestedTimeout) {
+        const warnings = [];
+        let blocked = false;
+        let blockReason;
+        // 1. Check against dangerous patterns
+        for (const { pattern, description, severity } of DANGEROUS_PATTERNS) {
+            if (pattern.test(command)) {
+                if (severity === 'block') {
+                    blocked = true;
+                    blockReason = `Blocked: ${description}`;
+                    break;
+                }
+                else {
+                    warnings.push(`Warning: ${description}`);
+                }
+            }
+        }
+        // 2. Check working directory constraints
+        if (!this.options.allowOutsideWorkspace && this.options.workDir) {
+            const cdMatch = command.match(/\bcd\s+([^\s;&|]+)/);
+            if (cdMatch) {
+                const targetDir = resolve(this.options.workDir, cdMatch[1]);
+                const rel = relative(this.options.workspaceRoot, targetDir);
+                if (rel.startsWith('..')) {
+                    warnings.push(`Warning: "cd ${cdMatch[1]}" navigates outside workspace root`);
+                }
+            }
+        }
+        // 3. Enforce timeout ceiling
+        const effectiveTimeout = Math.min(requestedTimeout ?? this.options.defaultTimeout, this.options.maxTimeout);
+        // 4. Output size limit
+        const maxOutputSize = this.options.maxOutputSize;
+        return {
+            allowed: !blocked,
+            warnings,
+            blockReason,
+            command,
+            timeout: effectiveTimeout,
+            maxOutputSize,
+        };
+    }
+    /**
+     * Check if a specific command is dangerous (quick check, no full validation).
+     */
+    isDangerous(command) {
+        return DANGEROUS_PATTERNS.some(({ pattern, severity }) => severity === 'block' && pattern.test(command));
+    }
+    /**
+     * Get all warnings for a command without blocking.
+     */
+    getWarnings(command) {
+        const warnings = [];
+        for (const { pattern, description } of DANGEROUS_PATTERNS) {
+            if (pattern.test(command)) {
+                warnings.push(description);
+            }
+        }
+        return warnings;
+    }
+    /** Update the workspace root. */
+    setWorkspaceRoot(root) {
+        this.options.workspaceRoot = root;
+    }
+    /** Update the working directory. */
+    setWorkDir(dir) {
+        this.options.workDir = dir;
+    }
+}
+//# sourceMappingURL=exec-safety.js.map

package/dist/tools/exec-safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec-safety.js","sourceRoot":"","sources":["../../src/tools/exec-safety.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAE9C,wEAAwE;AAExE,yEAAyE;AACzE,MAAM,kBAAkB,GAAgF;IACtG,yBAAyB;IACzB,EAAE,OAAO,EAAE,mEAAmE,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,EAAE,OAAO,EAAE;IACzI,EAAE,OAAO,EAAE,6DAA6D,EAAE,WAAW,EAAE,wBAAwB,EAAE,QAAQ,EAAE,MAAM,EAAE;IACnI,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,2BAA2B,EAAE,QAAQ,EAAE,OAAO,EAAE;IACpF,EAAE,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,0BAA0B,EAAE,QAAQ,EAAE,OAAO,EAAE;IAC9F,EAAE,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,6BAA6B,EAAE,QAAQ,EAAE,OAAO,EAAE;IAEnG,sBAAsB;IACtB,EAAE,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,gDAAgD,EAAE,QAAQ,EAAE,MAAM,EAAE;IACrH,EAAE,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,+CAA+C,EAAE,QAAQ,EAAE,MAAM,EAAE;IAEpH,qBAAqB;IACrB,EAAE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,+BAA+B,EAAE,QAAQ,EAAE,MAAM,EAAE;IACnG,EAAE,OAAO,EAAE,2BAA2B,EAAE,WAAW,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC9F,EAAE,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAE7F,kBAAkB;IAClB,EAAE,OAAO,EAAE,4BAA4B,EAAE,WAAW,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC1F,EAAE,OAAO,EAAE,0BAA0B,EAAE,WAAW,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE;IACxF,EAAE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAEvF,oBAAoB;IACpB,EAAE,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,4BAA4B,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC/F,EAAE,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAE,4BAA4B,EAAE,QAAQ,EAAE,MAAM,EAAE;IAElG,iBAAiB;IACjB,EAAE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,mBAAmB,EAAE,QAAQ,EAAE,OAAO,EAAE;IACrF,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,yBAAyB,EAAE,QAAQ,EAAE,OAAO,EAAE;IACtF,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,EAAE,OAAO,EAAE;IAClF,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE;IAE1E,2BAA2B;IAC3B,EAAE,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,yCAAyC,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC1G,EAAE,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,0BAA0B,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC/F,EAAE,OAAO,EAAE,yBAAyB,EAAE,WAAW,EAAE,8BAA8B,EAAE,QAAQ,EAAE,OAAO,EAAE;IACtG,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,yBAAyB,EAAE,QAAQ,EAAE,MAAM,EAAE;CAC1F,CAAC;AAoCF,MAAM,eAAe,GAAgC;IACnD,aAAa,EAAE,OAAO,CAAC,GAAG,EAAE;IAC5B,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;IACtB,UAAU,EAAE,OAAO;IACnB,cAAc,EAAE,MAAM;IACtB,aAAa,EAAE,IAAI,GAAG,IAAI;IAC1B,qBAAqB,EAAE,KAAK;CAC7B,CAAC;AAEF,wEAAwE;AAExE;;;;;;;;GAQG;AACH,MAAM,OAAO,UAAU;IACb,OAAO,CAA8B;IAE7C,YAAY,OAA2B;QACrC,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,EAAE,CAAC;IACpD,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,OAAe,EAAE,gBAAyB;QACjD,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,WAA+B,CAAC;QAEpC,sCAAsC;QACtC,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,kBAAkB,EAAE,CAAC;YACpE,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACzB,OAAO,GAAG,IAAI,CAAC;oBACf,WAAW,GAAG,YAAY,WAAW,EAAE,CAAC;oBACxC,MAAM;gBACR,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CAAC,YAAY,WAAW,EAAE,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACpD,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5D,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;gBAC5D,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACzB,QAAQ,CAAC,IAAI,CAAC,gBAAgB,OAAO,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAC/B,gBAAgB,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,EAC/C,IAAI,CAAC,OAAO,CAAC,UAAU,CACxB,CAAC;QAEF,uBAAuB;QACvB,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;QAEjD,OAAO;YACL,OAAO,EAAE,CAAC,OAAO;YACjB,QAAQ;YACR,WAAW;YACX,OAAO;YACP,OAAO,EAAE,gBAAgB;YACzB,aAAa;SACd,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,OAAe;QACzB,OAAO,kBAAkB,CAAC,IAAI,CAC5B,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CACzE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,OAAe;QACzB,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,kBAAkB,EAAE,CAAC;YAC1D,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,iCAAiC;IACjC,gBAAgB,CAAC,IAAY;QAC3B,IAAI,CAAC,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IACpC,CAAC;IAED,oCAAoC;IACpC,UAAU,CAAC,GAAW;QACpB,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,GAAG,CAAC;IAC7B,CAAC;CACF"}

package/dist/tools/exec.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Execution tools — exec, process.
+ * Kernel tools (always available).
+ *
+ * Now integrates ExecSafety for command validation, dangerous command
+ * detection, timeout enforcement, and output size limits.
+ */
+import type { Tool } from './tool.js';
+import { type ExecSafetyOptions } from './exec-safety.js';
+import { ExecApprovalManager, type ApprovalConfig } from '../core/exec-approvals.js';
+import type { CacheManager } from '../cache/manager.js';
+/** Wire the cache manager into exec tools. */
+export declare function setExecCacheManager(manager: CacheManager): void;
+/** Configure the shared ExecSafety instance. */
+export declare function configureExecSafety(options: ExecSafetyOptions): void;
+/** Configure the shared ExecApprovalManager instance. */
+export declare function configureExecApprovals(config: Partial<ApprovalConfig>): void;
+/** Get the shared approval manager (if configured). */
+export declare function getApprovalManager(): ExecApprovalManager | null;
+export declare const execTool: Tool;
+export declare const processTool: Tool;
+/** All execution tools. */
+export declare const execTools: Tool[];
+//# sourceMappingURL=exec.d.ts.map

package/dist/tools/exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../src/tools/exec.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,IAAI,EAA2B,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAc,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,2BAA2B,CAAC;AACrF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAUxD,8CAA8C;AAC9C,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAE/D;AAED,gDAAgD;AAChD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAEpE;AAED,yDAAyD;AACzD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI,CAE5E;AAED,uDAAuD;AACvD,wBAAgB,kBAAkB,IAAI,mBAAmB,GAAG,IAAI,CAE/D;AAiBD,eAAO,MAAM,QAAQ,EAAE,IA0FtB,CAAC;AAaF,eAAO,MAAM,WAAW,EAAE,IAiEzB,CAAC;AAEF,2BAA2B;AAC3B,eAAO,MAAM,SAAS,EAAE,IAAI,EAA4B,CAAC"}

package/dist/tools/exec.js

@@ -0,0 +1,191 @@
+/**
+ * Execution tools — exec, process.
+ * Kernel tools (always available).
+ *
+ * Now integrates ExecSafety for command validation, dangerous command
+ * detection, timeout enforcement, and output size limits.
+ */
+import { exec as execCb, spawn } from 'node:child_process';
+import { promisify } from 'node:util';
+import { ExecSafety } from './exec-safety.js';
+import { ExecApprovalManager } from '../core/exec-approvals.js';
+const execAsync = promisify(execCb);
+// ─── Shared exec safety instance ─────────────────────────────────────
+let execSafety = null;
+let approvalManager = null;
+let cacheManager = null;
+/** Wire the cache manager into exec tools. */
+export function setExecCacheManager(manager) {
+    cacheManager = manager;
+}
+/** Configure the shared ExecSafety instance. */
+export function configureExecSafety(options) {
+    execSafety = new ExecSafety(options);
+}
+/** Configure the shared ExecApprovalManager instance. */
+export function configureExecApprovals(config) {
+    approvalManager = new ExecApprovalManager(config);
+}
+/** Get the shared approval manager (if configured). */
+export function getApprovalManager() {
+    return approvalManager;
+}
+/** Get or create the ExecSafety instance. */
+function getExecSafety() {
+    if (!execSafety) {
+        execSafety = new ExecSafety();
+    }
+    return execSafety;
+}
+export const execTool = {
+    name: 'exec',
+    description: 'Execute a shell command and return its output. Commands are validated for safety before execution.',
+    group: 'runtime',
+    parameters: {
+        type: 'object',
+        properties: {
+            command: { type: 'string', description: 'Shell command to execute' },
+            timeout: { type: 'number', description: 'Timeout in milliseconds (default: 30000)' },
+        },
+        required: ['command'],
+    },
+    async execute(params, ctx) {
+        const { command, timeout } = params;
+        const safety = getExecSafety();
+        // Update safety with current context
+        if (ctx.workspaceRoot)
+            safety.setWorkspaceRoot(ctx.workspaceRoot);
+        if (ctx.workDir)
+            safety.setWorkDir(ctx.workDir);
+        // Check exec approvals before safety validation
+        if (approvalManager) {
+            const approvalReq = approvalManager.checkCommand(command, ctx.sessionId);
+            if (approvalReq) {
+                if (approvalReq.status === 'denied' || approvalReq.riskLevel === 'blocked') {
+                    return {
+                        output: `Command blocked: ${approvalReq.reason}`,
+                        success: false,
+                        error: approvalReq.reason,
+                    };
+                }
+                if (approvalReq.status === 'pending') {
+                    return {
+                        output: approvalManager.formatRequest(approvalReq),
+                        success: false,
+                        error: 'Awaiting user approval',
+                        data: { approvalRequest: approvalReq },
+                    };
+                }
+            }
+        }
+        // Validate the command
+        const validation = safety.validate(command, timeout);
+        if (!validation.allowed) {
+            return {
+                output: `Command blocked: ${validation.blockReason}`,
+                success: false,
+                error: validation.blockReason,
+            };
+        }
+        // Include warnings in the output prefix
+        let warningPrefix = '';
+        if (validation.warnings.length > 0) {
+            warningPrefix = validation.warnings.join('\n') + '\n---\n';
+        }
+        // Check tool cache for deterministic commands
+        if (cacheManager) {
+            const cached = cacheManager.tool.get(command, ctx.workDir);
+            if (cached !== null) {
+                return { output: warningPrefix + cached.output, success: cached.success };
+            }
+        }
+        try {
+            const { stdout, stderr } = await execAsync(validation.command, {
+                cwd: ctx.workDir,
+                timeout: validation.timeout,
+                maxBuffer: validation.maxOutputSize,
+            });
+            const output = [stdout, stderr].filter(Boolean).join('\n');
+            // Truncate output if it exceeds max size
+            const truncated = output.length > validation.maxOutputSize
+                ? output.slice(0, validation.maxOutputSize) + '\n[... output truncated]'
+                : output;
+            // Cache the result for future calls
+            cacheManager?.tool.set(command, ctx.workDir, truncated, true);
+            return { output: warningPrefix + truncated, success: true };
+        }
+        catch (err) {
+            const e = err;
+            const output = [e.stdout, e.stderr].filter(Boolean).join('\n');
+            return { output: warningPrefix + output, success: false, error: e.message };
+        }
+    },
+};
+// ─── process ────────────────────────────────────────────────────────
+/** Active background processes tracked by the process tool. */
+const activeProcesses = new Map();
+export const processTool = {
+    name: 'process',
+    description: 'Manage background processes (start, stop, list). Start commands are validated for safety.',
+    group: 'runtime',
+    parameters: {
+        type: 'object',
+        properties: {
+            action: { type: 'string', enum: ['start', 'stop', 'list'], description: 'Action to perform' },
+            command: { type: 'string', description: 'Command to start (for "start" action)' },
+            id: { type: 'string', description: 'Process ID (for "stop" action)' },
+        },
+        required: ['action'],
+    },
+    async execute(params, ctx) {
+        const { action, command, id } = params;
+        switch (action) {
+            case 'start': {
+                if (!command)
+                    return { output: '', success: false, error: 'command required for start' };
+                // Validate the command before starting
+                const safety = getExecSafety();
+                const validation = safety.validate(command);
+                if (!validation.allowed) {
+                    return {
+                        output: `Command blocked: ${validation.blockReason}`,
+                        success: false,
+                        error: validation.blockReason,
+                    };
+                }
+                const procId = crypto.randomUUID().slice(0, 8);
+                const child = spawn('sh', ['-c', command], {
+                    cwd: ctx.workDir,
+                    stdio: 'pipe',
+                    detached: true,
+                });
+                activeProcesses.set(procId, child);
+                child.on('exit', () => activeProcesses.delete(procId));
+                let warningNote = '';
+                if (validation.warnings.length > 0) {
+                    warningNote = ` (warnings: ${validation.warnings.join('; ')})`;
+                }
+                return { output: `Started process ${procId}: ${command}${warningNote}`, success: true };
+            }
+            case 'stop': {
+                if (!id)
+                    return { output: '', success: false, error: 'id required for stop' };
+                const proc = activeProcesses.get(id);
+                if (!proc)
+                    return { output: '', success: false, error: `Process ${id} not found` };
+                proc.kill();
+                activeProcesses.delete(id);
+                return { output: `Stopped process ${id}`, success: true };
+            }
+            case 'list': {
+                const list = Array.from(activeProcesses.entries()).map(([pid, child]) => `${pid}: pid=${child.pid}`);
+                return { output: list.join('\n') || '(no active processes)', success: true };
+            }
+            default:
+                return { output: '', success: false, error: `Unknown action: ${action}` };
+        }
+    },
+};
+/** All execution tools. */
+export const execTools = [execTool, processTool];
+//# sourceMappingURL=exec.js.map

package/dist/tools/exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.js","sourceRoot":"","sources":["../../src/tools/exec.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,IAAI,MAAM,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,UAAU,EAA0B,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAuB,MAAM,2BAA2B,CAAC;AAGrF,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;AAEpC,wEAAwE;AAExE,IAAI,UAAU,GAAsB,IAAI,CAAC;AACzC,IAAI,eAAe,GAA+B,IAAI,CAAC;AACvD,IAAI,YAAY,GAAwB,IAAI,CAAC;AAE7C,8CAA8C;AAC9C,MAAM,UAAU,mBAAmB,CAAC,OAAqB;IACvD,YAAY,GAAG,OAAO,CAAC;AACzB,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,mBAAmB,CAAC,OAA0B;IAC5D,UAAU,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,sBAAsB,CAAC,MAA+B;IACpE,eAAe,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,kBAAkB;IAChC,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,6CAA6C;AAC7C,SAAS,aAAa;IACpB,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,UAAU,GAAG,IAAI,UAAU,EAAE,CAAC;IAChC,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AASD,MAAM,CAAC,MAAM,QAAQ,GAAS;IAC5B,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,oGAAoG;IACjH,KAAK,EAAE,SAAS;IAChB,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0BAA0B,EAAE;YACpE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0CAA0C,EAAE;SACrF;QACD,QAAQ,EAAE,CAAC,SAAS,CAAC;KACtB;IAED,KAAK,CAAC,OAAO,CAAC,MAAe,EAAE,GAAgB;QAC7C,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAoB,CAAC;QAClD,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAE/B,qCAAqC;QACrC,IAAI,GAAG,CAAC,aAAa;YAAE,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAClE,IAAI,GAAG,CAAC,OAAO;YAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAEhD,gDAAgD;QAChD,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,WAAW,GAAG,eAAe,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;YACzE,IAAI,WAAW,EAAE,CAAC;gBAChB,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,IAAI,WAAW,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC3E,OAAO;wBACL,MAAM,EAAE,oBAAoB,WAAW,CAAC,MAAM,EAAE;wBAChD,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,WAAW,CAAC,MAAM;qBAC1B,CAAC;gBACJ,CAAC;gBACD,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACrC,OAAO;wBACL,MAAM,EAAE,eAAe,CAAC,aAAa,CAAC,WAAW,CAAC;wBAClD,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,wBAAwB;wBAC/B,IAAI,EAAE,EAAE,eAAe,EAAE,WAAW,EAAE;qBACvC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAErD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO;gBACL,MAAM,EAAE,oBAAoB,UAAU,CAAC,WAAW,EAAE;gBACpD,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,UAAU,CAAC,WAAW;aAC9B,CAAC;QACJ,CAAC;QAED,wCAAwC;QACxC,IAAI,aAAa,GAAG,EAAE,CAAC;QACvB,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;QAC7D,CAAC;QAED,8CAA8C;QAC9C,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YAC5E,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE;gBAC7D,GAAG,EAAE,GAAG,CAAC,OAAO;gBAChB,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,SAAS,EAAE,UAAU,CAAC,aAAa;aACpC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC3D,yCAAyC;YACzC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,aAAa;gBACxD,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,aAAa,CAAC,GAAG,0BAA0B;gBACxE,CAAC,CAAC,MAAM,CAAC;YAEX,oCAAoC;YACpC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;YAE9D,OAAO,EAAE,MAAM,EAAE,aAAa,GAAG,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,GAA6D,CAAC;YACxE,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/D,OAAO,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QAC9E,CAAC;IACH,CAAC;CACF,CAAC;AAEF,uEAAuE;AAEvE,+DAA+D;AAC/D,MAAM,eAAe,GAAG,IAAI,GAAG,EAAwB,CAAC;AAQxD,MAAM,CAAC,MAAM,WAAW,GAAS;IAC/B,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,2FAA2F;IACxG,KAAK,EAAE,SAAS;IAChB,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE;YAC7F,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE;YACjF,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;SACtE;QACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;KACrB;IAED,KAAK,CAAC,OAAO,CAAC,MAAe,EAAE,GAAgB;QAC7C,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,MAAuB,CAAC;QAExD,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,IAAI,CAAC,OAAO;oBAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;gBAEzF,uCAAuC;gBACvC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;gBAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC5C,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;oBACxB,OAAO;wBACL,MAAM,EAAE,oBAAoB,UAAU,CAAC,WAAW,EAAE;wBACpD,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,UAAU,CAAC,WAAW;qBAC9B,CAAC;gBACJ,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;oBACzC,GAAG,EAAE,GAAG,CAAC,OAAO;oBAChB,KAAK,EAAE,MAAM;oBACb,QAAQ,EAAE,IAAI;iBACf,CAAC,CAAC;gBACH,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBACnC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAEvD,IAAI,WAAW,GAAG,EAAE,CAAC;gBACrB,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnC,WAAW,GAAG,eAAe,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;gBACjE,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,mBAAmB,MAAM,KAAK,OAAO,GAAG,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC1F,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;gBAC9E,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrC,IAAI,CAAC,IAAI;oBAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;gBACnF,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC3B,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC5D,CAAC;YACD,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CACpD,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,SAAS,KAAK,CAAC,GAAG,EAAE,CAC7C,CAAC;gBACF,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC/E,CAAC;YACD;gBACE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,MAAM,EAAE,EAAE,CAAC;QAC9E,CAAC;IACH,CAAC;CACF,CAAC;AAEF,2BAA2B;AAC3B,MAAM,CAAC,MAAM,SAAS,GAAW,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC"}

package/dist/tools/fs.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Filesystem tools — read, write, edit, apply_patch.
+ * Kernel tools (always available).
+ */
+import type { Tool } from './tool.js';
+import type { CacheManager } from '../cache/manager.js';
+/** Wire the cache manager into filesystem tools. */
+export declare function setFsCacheManager(manager: CacheManager): void;
+export declare const readTool: Tool;
+export declare const writeTool: Tool;
+export declare const editTool: Tool;
+export declare const applyPatchTool: Tool;
+/** All filesystem tools. */
+export declare const fsTools: Tool[];
+//# sourceMappingURL=fs.d.ts.map

package/dist/tools/fs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../../src/tools/fs.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,IAAI,EAA2B,MAAM,WAAW,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAMxD,oDAAoD;AACpD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI,CAE7D;AAUD,eAAO,MAAM,QAAQ,EAAE,IAwCtB,CAAC;AASF,eAAO,MAAM,SAAS,EAAE,IAyBvB,CAAC;AAUF,eAAO,MAAM,QAAQ,EAAE,IA+BtB,CAAC;AASF,eAAO,MAAM,cAAc,EAAE,IAsC5B,CAAC;AAwHF,4BAA4B;AAC5B,eAAO,MAAM,OAAO,EAAE,IAAI,EAAoD,CAAC"}

package/dist/tools/fs.js

@@ -0,0 +1,249 @@
+/**
+ * Filesystem tools — read, write, edit, apply_patch.
+ * Kernel tools (always available).
+ */
+import { readFile, writeFile, mkdir } from 'node:fs/promises';
+import { resolve, dirname } from 'node:path';
+// ─── Cache integration ──────────────────────────────────────────────
+let cacheManager = null;
+/** Wire the cache manager into filesystem tools. */
+export function setFsCacheManager(manager) {
+    cacheManager = manager;
+}
+export const readTool = {
+    name: 'read',
+    description: 'Read a file from disk. Optionally specify start/end line numbers.',
+    group: 'fs',
+    parameters: {
+        type: 'object',
+        properties: {
+            path: { type: 'string', description: 'File path (absolute or relative to workDir)' },
+            start: { type: 'number', description: 'Start line (1-based, optional)' },
+            end: { type: 'number', description: 'End line (1-based, inclusive, optional)' },
+        },
+        required: ['path'],
+    },
+    async execute(params, ctx) {
+        const { path, start, end } = params;
+        const fullPath = resolve(ctx.workDir, path);
+        try {
+            // Check file cache first
+            let content;
+            const cached = cacheManager ? await cacheManager.file.get(fullPath) : null;
+            if (cached !== null) {
+                content = cached;
+            }
+            else {
+                content = await readFile(fullPath, 'utf-8');
+                // Store in cache for future reads
+                if (cacheManager)
+                    await cacheManager.file.set(fullPath, content);
+            }
+            if (start !== undefined || end !== undefined) {
+                const lines = content.split('\n');
+                const s = (start ?? 1) - 1;
+                const e = end ?? lines.length;
+                const slice = lines.slice(s, e);
+                return { output: slice.map((l, i) => `${s + i + 1}\t${l}`).join('\n'), success: true };
+            }
+            return { output: content, success: true };
+        }
+        catch (err) {
+            return { output: '', success: false, error: `Failed to read ${path}: ${err}` };
+        }
+    },
+};
+export const writeTool = {
+    name: 'write',
+    description: 'Write content to a file, creating it if necessary.',
+    group: 'fs',
+    parameters: {
+        type: 'object',
+        properties: {
+            path: { type: 'string', description: 'File path' },
+            content: { type: 'string', description: 'File content to write' },
+        },
+        required: ['path', 'content'],
+    },
+    async execute(params, ctx) {
+        const { path, content } = params;
+        const fullPath = resolve(ctx.workDir, path);
+        try {
+            await writeFile(fullPath, content, 'utf-8');
+            // Invalidate cache on write
+            cacheManager?.onFileWrite(fullPath);
+            return { output: `Wrote ${content.length} bytes to ${path}`, success: true };
+        }
+        catch (err) {
+            return { output: '', success: false, error: `Failed to write ${path}: ${err}` };
+        }
+    },
+};
+export const editTool = {
+    name: 'edit',
+    description: 'Replace an exact string in a file with a new string.',
+    group: 'fs',
+    parameters: {
+        type: 'object',
+        properties: {
+            path: { type: 'string', description: 'File path' },
+            old_string: { type: 'string', description: 'Exact text to find and replace' },
+            new_string: { type: 'string', description: 'Replacement text' },
+        },
+        required: ['path', 'old_string', 'new_string'],
+    },
+    async execute(params, ctx) {
+        const { path, old_string, new_string } = params;
+        const fullPath = resolve(ctx.workDir, path);
+        try {
+            const content = await readFile(fullPath, 'utf-8');
+            if (!content.includes(old_string)) {
+                return { output: '', success: false, error: 'old_string not found in file' };
+            }
+            const updated = content.replace(old_string, new_string);
+            await writeFile(fullPath, updated, 'utf-8');
+            // Invalidate cache on edit
+            cacheManager?.onFileWrite(fullPath);
+            return { output: `Edited ${path}`, success: true };
+        }
+        catch (err) {
+            return { output: '', success: false, error: `Failed to edit ${path}: ${err}` };
+        }
+    },
+};
+export const applyPatchTool = {
+    name: 'apply_patch',
+    description: 'Apply a unified diff patch to a file.',
+    group: 'fs',
+    parameters: {
+        type: 'object',
+        properties: {
+            path: { type: 'string', description: 'File path' },
+            patch: { type: 'string', description: 'Unified diff patch content' },
+        },
+        required: ['path', 'patch'],
+    },
+    async execute(params, ctx) {
+        const { path, patch } = params;
+        const fullPath = resolve(ctx.workDir, path);
+        try {
+            // Read existing file (may not exist for new files)
+            let content;
+            try {
+                content = await readFile(fullPath, 'utf-8');
+            }
+            catch {
+                content = '';
+            }
+            const lines = content.split('\n');
+            const result = applyUnifiedDiff(lines, patch);
+            if (!result.success) {
+                return { output: '', success: false, error: result.error };
+            }
+            await mkdir(dirname(fullPath), { recursive: true });
+            await writeFile(fullPath, result.lines.join('\n'), 'utf-8');
+            return { output: `Patched ${path} (${result.hunksApplied} hunks applied)`, success: true };
+        }
+        catch (err) {
+            return { output: '', success: false, error: `Failed to apply patch to ${path}: ${err}` };
+        }
+    },
+};
+function parseHunkHeader(line) {
+    const match = line.match(/^@@\s+-(\d+)(?:,(\d+))?\s+\+(\d+)(?:,(\d+))?\s+@@/);
+    if (!match)
+        return null;
+    return {
+        oldStart: parseInt(match[1], 10),
+        oldCount: match[2] !== undefined ? parseInt(match[2], 10) : 1,
+        newStart: parseInt(match[3], 10),
+        newCount: match[4] !== undefined ? parseInt(match[4], 10) : 1,
+    };
+}
+function applyUnifiedDiff(originalLines, patch) {
+    const patchLines = patch.split('\n');
+    const result = [...originalLines];
+    let hunksApplied = 0;
+    let offset = 0; // Track line number shifts from previous hunks
+    let i = 0;
+    while (i < patchLines.length) {
+        // Skip file headers (--- and +++)
+        if (patchLines[i].startsWith('---') || patchLines[i].startsWith('+++')) {
+            i++;
+            continue;
+        }
+        // Find hunk header
+        const header = parseHunkHeader(patchLines[i]);
+        if (!header) {
+            i++;
+            continue;
+        }
+        i++;
+        // Collect hunk lines
+        const removals = [];
+        const additions = [];
+        let contextCount = 0;
+        let linePos = header.oldStart - 1 + offset;
+        const hunkLines = [];
+        while (i < patchLines.length && !patchLines[i].startsWith('@@')) {
+            const line = patchLines[i];
+            if (line.startsWith('+')) {
+                hunkLines.push({ type: '+', text: line.slice(1) });
+            }
+            else if (line.startsWith('-')) {
+                hunkLines.push({ type: '-', text: line.slice(1) });
+            }
+            else if (line.startsWith(' ') || line === '') {
+                hunkLines.push({ type: ' ', text: line.slice(1) });
+            }
+            else {
+                // Not a diff line — stop this hunk
+                break;
+            }
+            i++;
+        }
+        // Apply hunk: walk through and do removals/additions
+        let pos = header.oldStart - 1 + offset;
+        const newLines = [];
+        let oldIdx = 0;
+        // Copy lines before this hunk
+        for (let j = 0; j < pos && j < result.length; j++) {
+            newLines.push(result[j]);
+        }
+        // Apply hunk changes
+        let srcPos = pos;
+        for (const hl of hunkLines) {
+            if (hl.type === ' ') {
+                // Context line — copy from source
+                if (srcPos < result.length) {
+                    newLines.push(result[srcPos]);
+                }
+                srcPos++;
+            }
+            else if (hl.type === '-') {
+                // Remove line — skip in source
+                srcPos++;
+            }
+            else if (hl.type === '+') {
+                // Add line
+                newLines.push(hl.text);
+            }
+        }
+        // Copy remaining lines after hunk
+        for (let j = srcPos; j < result.length; j++) {
+            newLines.push(result[j]);
+        }
+        // Replace result
+        result.length = 0;
+        result.push(...newLines);
+        offset += (header.newCount - header.oldCount);
+        hunksApplied++;
+    }
+    if (hunksApplied === 0) {
+        return { success: false, lines: originalLines, hunksApplied: 0, error: 'No hunks found in patch' };
+    }
+    return { success: true, lines: result, hunksApplied };
+}
+/** All filesystem tools. */
+export const fsTools = [readTool, writeTool, editTool, applyPatchTool];
+//# sourceMappingURL=fs.js.map