@tencent-ai/agent-harness 0.2.0-beta.7 → 0.2.0-beta.8

package/cli/dist-server/types/node/tools/edit-tool.d.ts

@@ -0,0 +1,83 @@
+import { Session } from '../../vendor/cbc-core/node/index.js';
+import { type FunctionCallItem, ToolArg, ToolNames } from '../../vendor/cbc-shared/node/index.js';
+import { Workspace } from '../../workspace/runtime/lib/common/index.js';
+import type { RunContext } from '@openai/agents';
+import { z } from 'zod';
+import { CodeRatioReportingService } from '../code-ratio';
+import { TelemetryService } from '../telemetry';
+import { type FileChangeArtifactPublisher as FileChangeArtifactPublisherContract } from './file-change-artifact-publisher';
+import { SandboxPermissionFileTool } from './sandbox-permission-file-tool';
+import { ReadFileStateService, Tool, ToolCallArgumentRenderer, ToolResult } from './tool-protocol';
+declare const EditParameters: z.ZodObject<{
+    file_path: z.ZodString;
+    old_string: z.ZodString;
+    new_string: z.ZodString;
+    replace_all: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    file_path: string;
+    new_string: string;
+    old_string: string;
+    replace_all: boolean;
+}, {
+    file_path: string;
+    new_string: string;
+    old_string: string;
+    replace_all?: boolean | undefined;
+}>;
+export declare class EditTool extends SandboxPermissionFileTool implements Tool {
+    protected readonly workspace: Workspace;
+    protected readonly readFileStateService: ReadFileStateService;
+    protected readonly telemetryService: TelemetryService;
+    protected readonly codeRatioReportingService?: CodeRatioReportingService;
+    protected readonly fileChangeArtifactPublisher?: FileChangeArtifactPublisherContract;
+    name: ToolNames;
+    aliases: string[];
+    parameters: z.ZodObject<{
+        file_path: z.ZodString;
+        old_string: z.ZodString;
+        new_string: z.ZodString;
+        replace_all: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, "strip", z.ZodTypeAny, {
+        file_path: string;
+        new_string: string;
+        old_string: string;
+        replace_all: boolean;
+    }, {
+        file_path: string;
+        new_string: string;
+        old_string: string;
+        replace_all?: boolean | undefined;
+    }>;
+    argumentRenderer: ToolCallArgumentRenderer;
+    resolveNeedPermissionArgs(_runContext: RunContext, input: z.infer<typeof EditParameters>, _callId?: string): ToolArg[];
+    /**
+     * Auto mode classifier projection: `${file_path}: ${new_string}` (strict
+     * Claude alignment, decision D1) — the new content is what the classifier
+     * inspects for a dangerous payload.
+     */
+    toAutoClassifierInput(input: unknown): string;
+    execute(input: z.infer<typeof EditParameters>, context: RunContext<Session>, details?: {
+        toolCall: FunctionCallItem;
+    }): Promise<ToolResult>;
+    /**
+     * 兜底来自 IO 操作（writeFileContent / readFileContent 等）的普通 Error：这类异常常丢失
+     * errno，故同时按 errno 与 message 关键词识别。applyTextReplacement 抛的带码
+     * ToolExecutionError 由 execute 原样透传，不进入此方法。
+     * 优先级：无内容变更(4004) → 多重匹配(4008) → 路径不存在(4012) →
+     * 权限(4013) → 未匹配(4003) → 沙箱(4014) → 空指针 crash(4015) → 兜底(4000)。
+     */
+    private classifyEditError;
+    /**
+     * 校验参数，失败时抛出带细分错误码的 ToolExecutionError：
+     * - zod 失败 / 空路径 → InvalidParameterError(90000)
+     * - old==new（无变更）→ ReplaceNoContentChangedError(4004)
+     * - 新建文件逃生口：old_string==='' 且文件不存在 → 放行（当 Write 用）
+     * 直接抛而非返回字符串，避免各场景被统一压成 90000，无法在监控聚合中区分。
+     */
+    private validateToolParams;
+    private countOccurrences;
+    private resolveFilePath;
+    private isUtf8Encoding;
+    private reportFileAction;
+}
+export {};

package/cli/dist-server/types/node/tools/enter-planmode-tool.d.ts

@@ -0,0 +1,29 @@
+import { Logger } from '@celljs/core';
+import { PromptManager } from '../../workspace/prompts/lib/common/index.js';
+import { Workspace } from '../../workspace/runtime/lib/common/index.js';
+import { EventService } from '../../workspace/telemetry/lib/common/index.js';
+import { z } from 'zod';
+import { AgentInputItem, RunContext } from '../../vendor/cbc-shared/node/index.js';
+import { ShellService } from '../shell';
+import { BaseTool } from './base-tool';
+import { PlanStorageService } from './plan-storage-service';
+import { Tool, ToolCallArgumentRenderer, ToolResult } from './tool-protocol';
+import { ToolNames } from '../../vendor/cbc-shared/node/index.js';
+declare const EnterPlanModeParameters: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+export declare class EnterPlanModeTool extends BaseTool implements Tool {
+    protected readonly workspace: Workspace;
+    protected readonly shellService: ShellService;
+    protected readonly promptManager: PromptManager;
+    protected readonly planStorageService: PlanStorageService;
+    protected readonly eventService: EventService;
+    protected readonly logger: Logger;
+    name: ToolNames;
+    description: string;
+    parameters: z.ZodObject<{}, "strip", z.ZodTypeAny, {}, {}>;
+    argumentRenderer: ToolCallArgumentRenderer;
+    needsApproval: boolean;
+    execute(input: z.infer<typeof EnterPlanModeParameters>, context?: RunContext): Promise<ToolResult>;
+    private reportPlanAction;
+    resolveRejectedResult(rawItem: AgentInputItem): Promise<AgentInputItem[]>;
+}
+export {};

package/cli/dist-server/types/node/tools/enter-worktree-tool.d.ts

@@ -0,0 +1,59 @@
+/**
+ * EnterWorktree Agent Tool
+ *
+ * 允许 Agent 在会话中动态创建 git worktree 并切换到其中。
+ * 这是 worktree 功能的核心交互入口，Agent 可以根据用户自然语言请求自主调用。
+ *
+ * 没有这个 Tool 注册，Agent 遇到 "start a worktree" 请求时不知道有 worktree 工具可用，
+ * 会尝试用 Bash 自行组装 git 命令，产生完全不同的（错误的）用户体验。
+ */
+import { z } from 'zod';
+import { BaseTool } from './base-tool';
+import { Tool, ToolResult } from './tool-protocol';
+import { ToolNames } from '../../vendor/cbc-shared/node/index.js';
+/**
+ * EnterWorktree 工具参数 schema
+ */
+declare const EnterWorktreeParameters: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    branch: z.ZodOptional<z.ZodString>;
+    path: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    branch?: string | undefined;
+    name?: string | undefined;
+    path?: string | undefined;
+}, {
+    branch?: string | undefined;
+    name?: string | undefined;
+    path?: string | undefined;
+}>;
+type EnterWorktreeInput = z.infer<typeof EnterWorktreeParameters>;
+export declare class EnterWorktreeTool extends BaseTool implements Tool {
+    name: ToolNames;
+    description: string;
+    aliases: string[];
+    parameters: z.ZodObject<{
+        name: z.ZodOptional<z.ZodString>;
+        branch: z.ZodOptional<z.ZodString>;
+        path: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        branch?: string | undefined;
+        name?: string | undefined;
+        path?: string | undefined;
+    }, {
+        branch?: string | undefined;
+        name?: string | undefined;
+        path?: string | undefined;
+    }>;
+    private worktreeSessionManager;
+    /**
+     * 权限：始终需要用户确认
+     * 原因：会改变进程工作目录，影响后续所有操作
+     */
+    needsApproval: boolean;
+    /**
+     * 执行 worktree 创建
+     */
+    execute(input: EnterWorktreeInput): Promise<ToolResult>;
+}
+export {};

package/cli/dist-server/types/node/tools/exit-planmode-tool.d.ts

@@ -0,0 +1,86 @@
+import { Logger } from '@celljs/core';
+import { AgentInputItem, RunContext, ToolNames } from '../../vendor/cbc-shared/node/index.js';
+import { PromptManager } from '../../workspace/prompts/lib/common/index.js';
+import { Workspace } from '../../workspace/runtime/lib/common/index.js';
+import { EventService } from '../../workspace/telemetry/lib/common/index.js';
+import { z } from 'zod';
+import { ShellService } from '../shell';
+import { BaseTool } from './base-tool';
+import { PlanStorageService } from './plan-storage-service';
+import { Tool, ToolCallArgumentRenderer, ToolResult } from './tool-protocol';
+declare const ExitPlanModeParameters: z.ZodObject<{
+    allowedPrompts: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        tool: z.ZodEnum<["Bash"]>;
+        prompt: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        prompt: string;
+        tool: "Bash";
+    }, {
+        prompt: string;
+        tool: "Bash";
+    }>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    allowedPrompts?: {
+        prompt: string;
+        tool: "Bash";
+    }[] | undefined;
+}, {
+    allowedPrompts?: {
+        prompt: string;
+        tool: "Bash";
+    }[] | undefined;
+}>;
+export declare class ExitPlanModeTool extends BaseTool implements Tool {
+    protected readonly workspace: Workspace;
+    protected readonly shellService: ShellService;
+    protected readonly promptManager: PromptManager;
+    protected readonly planStorageService: PlanStorageService;
+    protected readonly eventService: EventService;
+    protected readonly logger: Logger;
+    name: ToolNames;
+    description: string;
+    parameters: z.ZodObject<{
+        allowedPrompts: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            tool: z.ZodEnum<["Bash"]>;
+            prompt: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            prompt: string;
+            tool: "Bash";
+        }, {
+            prompt: string;
+            tool: "Bash";
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        allowedPrompts?: {
+            prompt: string;
+            tool: "Bash";
+        }[] | undefined;
+    }, {
+        allowedPrompts?: {
+            prompt: string;
+            tool: "Bash";
+        }[] | undefined;
+    }>;
+    argumentRenderer: ToolCallArgumentRenderer;
+    needsApproval: boolean;
+    execute(input: z.infer<typeof ExitPlanModeParameters>, context?: RunContext): Promise<ToolResult>;
+    /**
+     * Teammate ExitPlanMode handler.
+     *
+     * Teammates spawned with `mode='plan'` cannot exit plan mode unilaterally —
+     * the team-lead owns the approval. To avoid deadlocking the parent (who is
+     * waiting on the teammate session and the approval UI simultaneously), we:
+     *   - Drop a `plan_approval_request` message in the team-lead's inbox.
+     *   - Return immediately with a result telling the model the request was sent.
+     *   - Leave permission mode untouched **here**. Restoring it is owned by the
+     *     response-handling path: `TeamMember.applyPlanApprovalResponses()`
+     *     (`agent-team/team-member.ts`) consumes the lead's
+     *     `plan_approval_response` and unlocks plan mode on approve (#82046).
+     *     Until that response arrives the teammate stays in plan mode, but the
+     *     parent spinner is unblocked.
+     */
+    private handleTeammateExitPlanMode;
+    private reportPlanAction;
+    resolveRejectedResult(rawItem: AgentInputItem): Promise<AgentInputItem[]>;
+}
+export {};

package/cli/dist-server/types/node/tools/file-change-artifact-publisher.d.ts

@@ -0,0 +1,82 @@
+import type { Session } from '../../vendor/cbc-core/node/index.js';
+import type { FileChangeArtifact } from './file-change-artifact';
+/**
+ * Optional bridge from a file tool's authoritative pre-write plan to protocol
+ * consumers. File tools own the mutation data; transports decide whether a
+ * prepared preview is useful for the current session.
+ */
+export declare const FileChangeArtifactPublisher: unique symbol;
+/**
+ * Bind file-change artifact work to the protocol owner of the concrete run.
+ *
+ * This is deliberately process-local and replaceable. A passive observer must
+ * not enable diff construction for a WorkBuddy/compatibility run, and a later
+ * run on the same Session object must be able to clear an earlier v2 owner.
+ */
+export declare function setSessionAcpV2FileChangeArtifactOwner(session: Session, canonicalV2Owner: boolean): void;
+/** Copy the process-local run owner to a newly created or resumed child. */
+export declare function inheritSessionAcpV2FileChangeArtifactOwner(child: Session, parent: Session): void;
+export declare function shouldPersistAcpV2FileChangeArtifacts(session: Session): boolean;
+export interface FileChangeArtifactPublisherRequest {
+    session: Session;
+    toolCallId: string;
+    toolName: string;
+    rawInput?: Record<string, unknown>;
+    artifact: FileChangeArtifact;
+}
+export interface FileChangeCapturePathKind {
+    fileType: 'text' | 'directory' | 'symlink' | null;
+    patchableText: boolean;
+}
+/**
+ * Classify the exact path entry used by a file tool without following links.
+ *
+ * The existing tools intentionally keep their historical write path and link
+ * following behaviour. ACP presentation, however, must not claim that a link
+ * itself is a regular text file or publish a text patch that an IDE could later
+ * apply to the link identity. Unknown/special entries therefore remain visible
+ * in `changes` but fail closed to `patch: null`.
+ */
+export declare function inspectFileChangeCapturePath(filePath: string, isNewFile: boolean): Promise<FileChangeCapturePathKind>;
+export interface FileChangeToolPresentation {
+    name: 'Write' | 'Edit' | 'MultiEdit';
+    title: string;
+    kind: 'edit';
+}
+/** Describe the three file tools from the artifact's final execution path. */
+export declare function createFileChangeToolPresentation(toolName: unknown, artifact: FileChangeArtifact): FileChangeToolPresentation | undefined;
+export interface PreparedAcpV2FileChange {
+    artifact: FileChangeArtifact;
+    rawInput?: Record<string, unknown>;
+}
+/** Remember the exact prepared projection for a later live failed result. */
+export declare function rememberPreparedAcpV2FileChange(request: FileChangeArtifactPublisherRequest): void;
+/** Read a detached live projection without consuming it for other observers. */
+export declare function readPreparedAcpV2FileChange(sessionId: string, toolCallId: string): PreparedAcpV2FileChange | undefined;
+/**
+ * Remove and tombstone a denied result. The tombstone also defeats a delayed
+ * fire-and-forget publisher, so sensitive plaintext cannot be reintroduced
+ * after history admission has failed closed.
+ */
+export declare function withholdPreparedAcpV2FileChange(session: Session, toolCallId: string): void;
+export declare const MAX_FILE_CHANGE_RAW_INPUT_BYTES: number;
+/** Return a detached, JSON-safe tool input only when it fits the wire/history budget. */
+export declare function createBoundedFileChangeRawInput(value: unknown): Record<string, unknown> | undefined;
+export interface FileChangeArtifactPublisher {
+    /** Avoid diff work when no canonical consumer can observe the artifact. */
+    shouldCapture(session: Session): boolean;
+    /**
+     * Schedule the prepared artifact before the corresponding mutation starts.
+     * The caller does not wait for transport delivery: presentation latency or
+     * failure must never delay or fail a validated file operation.
+     */
+    publishPrepared(request: FileChangeArtifactPublisherRequest): Promise<void>;
+}
+export interface LiveFileChangeProjection {
+    artifact: FileChangeArtifact;
+    rawInput?: Record<string, unknown>;
+}
+export declare function rememberLiveFileChangeProjection(item: object, artifact: FileChangeArtifact, rawInput?: Record<string, unknown>): void;
+export declare function readLiveFileChangeProjection(item: object): LiveFileChangeProjection | undefined;
+export declare function clearLiveFileChangeProjection(item: object): void;
+export declare function parsePersistedFileChangeRawInput(value: unknown): Record<string, unknown> | undefined;

package/cli/dist-server/types/node/tools/glob-tool.d.ts

@@ -0,0 +1,102 @@
+import { Logger } from '@celljs/core';
+import { Session } from '../../vendor/cbc-core/node/index.js';
+import { ToolArg, ToolNames } from '../../vendor/cbc-shared/node/index.js';
+import { Workspace } from '../../workspace/runtime/lib/common/index.js';
+import type { RunContext } from '@openai/agents';
+import { z } from 'zod';
+import { BaseTool } from './base-tool';
+import { Tool, ToolCallArgumentRenderer, ToolResult } from './tool-protocol';
+declare const GlobParameters: z.ZodObject<{
+    pattern: z.ZodString;
+    path: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodNumber>;
+    offset: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    offset: number;
+    pattern: string;
+    limit: number;
+    path?: string | undefined;
+}, {
+    pattern: string;
+    path?: string | undefined;
+    offset?: number | undefined;
+    limit?: number | undefined;
+}>;
+export declare class GlobTool extends BaseTool implements Tool {
+    protected readonly workspace: Workspace;
+    protected readonly logger: Logger;
+    /**
+     * Tool-level timeout (ms) bounding the WHOLE glob search, including the
+     * fallback path. Exposed as an instance field so tests can shrink it.
+     */
+    protected fallbackTimeoutMs: number;
+    name: ToolNames;
+    aliases: string[];
+    parameters: z.ZodObject<{
+        pattern: z.ZodString;
+        path: z.ZodOptional<z.ZodString>;
+        limit: z.ZodDefault<z.ZodNumber>;
+        offset: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        offset: number;
+        pattern: string;
+        limit: number;
+        path?: string | undefined;
+    }, {
+        pattern: string;
+        path?: string | undefined;
+        offset?: number | undefined;
+        limit?: number | undefined;
+    }>;
+    argumentRenderer: ToolCallArgumentRenderer;
+    resolveNeedPermissionArgs(runContext: RunContext, input: z.infer<typeof GlobParameters>, callId?: string): ToolArg[];
+    /**
+     * Auto mode classifier projection: the glob pattern (Claude alignment,
+     * decision D1). Glob is in the read-only history set; consulted only when it
+     * is the current action being classified.
+     */
+    toAutoClassifierInput(input: unknown): string;
+    resolveThrownErrorCode(error: unknown): string;
+    execute(input: z.infer<typeof GlobParameters>, context: RunContext<Session>): Promise<ToolResult>;
+    /**
+     * Run the glob search under a hard tool-level timeout that covers BOTH the
+     * ripgrep path and the npm `glob` fallback. The previous implementation only
+     * bounded ripgrep; the fallback could hang forever (#59151).
+     *
+     * The timeout is enforced via `Promise.race` against a timer, so the tool is
+     * guaranteed to settle after {@link GLOB_FALLBACK_TIMEOUT_MS} even if the
+     * underlying `glob()` walk does not honor the abort signal promptly. We also
+     * abort the derived controller so the in-flight ripgrep child / glob walk is
+     * asked to stop and is not leaked.
+     */
+    private searchWithTimeout;
+    /**
+     * Try ripgrep first, fall back to npm `glob` only for genuine "ripgrep
+     * unavailable / failed to run" errors. A timeout or abort must NOT fall back
+     * (the fallback would just hang on the same huge directory), so those are
+     * detected and rethrown instead.
+     */
+    private runSearch;
+    private isRipgrepAvailable;
+    private shouldFallbackFromRipgrep;
+    private runFallbackSearch;
+    /** Whether an error came from a search timeout or abort (no fallback allowed). */
+    private isTimeoutOrAbortError;
+    private classifyGlobError;
+    private wrapGlobError;
+    private isTimeoutError;
+    private isAbortError;
+    private isPermissionError;
+    private isPathError;
+    private isPatternError;
+    private isPatternValidationError;
+    private isInvalidParamsError;
+    private getErrorDetails;
+    private createEmptyResult;
+    private resolveSearchDirectory;
+    private normalizeGlobParams;
+    private performRipgrepGlobSearch;
+    private performFallbackGlobSearch;
+    private get rootDirectory();
+}
+export {};

package/cli/dist-server/types/node/tools/grep-tool.d.ts

@@ -0,0 +1,141 @@
+import { Logger } from '@celljs/core';
+import { Session } from '../../vendor/cbc-core/node/index.js';
+import { ToolArg, ToolNames } from '../../vendor/cbc-shared/node/index.js';
+import { Workspace } from '../../workspace/runtime/lib/common/index.js';
+import type { RunContext } from '@openai/agents';
+import { z } from 'zod';
+import { type SandboxOrchestrator as ISandboxOrchestrator } from '../permission';
+import { type SandboxTurnConfig as ISandboxTurnConfig } from '../sandbox-cli/sandbox-turn-config';
+import { BaseTool } from './base-tool';
+import { type SandboxApprovalRequesterContext } from './bash-sandbox-approval-requester';
+import { Tool, ToolCallArgumentRenderer, ToolResult } from './tool-protocol';
+declare const GrepParameters: z.ZodObject<{
+    pattern: z.ZodString;
+    path: z.ZodOptional<z.ZodString>;
+    glob: z.ZodOptional<z.ZodString>;
+    output_mode: z.ZodOptional<z.ZodEnum<["content", "files_with_matches", "count"]>>;
+    '-B': z.ZodOptional<z.ZodNumber>;
+    '-A': z.ZodOptional<z.ZodNumber>;
+    '-C': z.ZodOptional<z.ZodNumber>;
+    context: z.ZodOptional<z.ZodNumber>;
+    '-n': z.ZodOptional<z.ZodBoolean>;
+    '-i': z.ZodOptional<z.ZodBoolean>;
+    type: z.ZodOptional<z.ZodString>;
+    head_limit: z.ZodOptional<z.ZodNumber>;
+    offset: z.ZodOptional<z.ZodNumber>;
+    multiline: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    pattern: string;
+    type?: string | undefined;
+    context?: number | undefined;
+    path?: string | undefined;
+    offset?: number | undefined;
+    glob?: string | undefined;
+    output_mode?: "content" | "count" | "files_with_matches" | undefined;
+    '-A'?: number | undefined;
+    '-B'?: number | undefined;
+    '-C'?: number | undefined;
+    head_limit?: number | undefined;
+    multiline?: boolean | undefined;
+    '-n'?: boolean | undefined;
+    '-i'?: boolean | undefined;
+}, {
+    pattern: string;
+    type?: string | undefined;
+    context?: number | undefined;
+    path?: string | undefined;
+    offset?: number | undefined;
+    glob?: string | undefined;
+    output_mode?: "content" | "count" | "files_with_matches" | undefined;
+    '-A'?: number | undefined;
+    '-B'?: number | undefined;
+    '-C'?: number | undefined;
+    head_limit?: number | undefined;
+    multiline?: boolean | undefined;
+    '-n'?: boolean | undefined;
+    '-i'?: boolean | undefined;
+}>;
+type GrepParams = z.infer<typeof GrepParameters>;
+export declare class GrepTool extends BaseTool implements Tool {
+    protected readonly workspace: Workspace;
+    protected readonly sandboxTurnConfig: ISandboxTurnConfig;
+    protected readonly sandboxOrchestrator: ISandboxOrchestrator;
+    protected readonly logger: Logger;
+    name: ToolNames;
+    aliases: string[];
+    parameters: z.ZodObject<{
+        pattern: z.ZodString;
+        path: z.ZodOptional<z.ZodString>;
+        glob: z.ZodOptional<z.ZodString>;
+        output_mode: z.ZodOptional<z.ZodEnum<["content", "files_with_matches", "count"]>>;
+        '-B': z.ZodOptional<z.ZodNumber>;
+        '-A': z.ZodOptional<z.ZodNumber>;
+        '-C': z.ZodOptional<z.ZodNumber>;
+        context: z.ZodOptional<z.ZodNumber>;
+        '-n': z.ZodOptional<z.ZodBoolean>;
+        '-i': z.ZodOptional<z.ZodBoolean>;
+        type: z.ZodOptional<z.ZodString>;
+        head_limit: z.ZodOptional<z.ZodNumber>;
+        offset: z.ZodOptional<z.ZodNumber>;
+        multiline: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        pattern: string;
+        type?: string | undefined;
+        context?: number | undefined;
+        path?: string | undefined;
+        offset?: number | undefined;
+        glob?: string | undefined;
+        output_mode?: "content" | "count" | "files_with_matches" | undefined;
+        '-A'?: number | undefined;
+        '-B'?: number | undefined;
+        '-C'?: number | undefined;
+        head_limit?: number | undefined;
+        multiline?: boolean | undefined;
+        '-n'?: boolean | undefined;
+        '-i'?: boolean | undefined;
+    }, {
+        pattern: string;
+        type?: string | undefined;
+        context?: number | undefined;
+        path?: string | undefined;
+        offset?: number | undefined;
+        glob?: string | undefined;
+        output_mode?: "content" | "count" | "files_with_matches" | undefined;
+        '-A'?: number | undefined;
+        '-B'?: number | undefined;
+        '-C'?: number | undefined;
+        head_limit?: number | undefined;
+        multiline?: boolean | undefined;
+        '-n'?: boolean | undefined;
+        '-i'?: boolean | undefined;
+    }>;
+    argumentRenderer: ToolCallArgumentRenderer;
+    resolveNeedPermissionArgs(runContext: RunContext, input: GrepParams, callId?: string): ToolArg[];
+    /**
+     * Auto mode classifier projection: `${pattern} in ${path}` / `${pattern}`
+     * (Claude alignment, decision D1). Grep is in the read-only history set;
+     * consulted only when it is the current action being classified.
+     */
+    toAutoClassifierInput(input: unknown): string;
+    execute(input: GrepParams, context: RunContext<Session>, details?: SandboxApprovalRequesterContext['details']): Promise<ToolResult>;
+    /**
+     * 先归一化支持的字符串参数，再校验。仅在未指定输出模式时，
+     * 根据有效的上下文或行号选项推断 content 模式。
+     */
+    private normalizeGrepParams;
+    /**
+     * 将底层异常映射到 search_content 细分错误码：
+     * 权限(EACCES/EPERM) → 7104；路径(ENOENT/ENOTDIR) → 7101；
+     * 非法正则(SyntaxError / stderr 含 regex 关键字) → 7102；其余 → 7100。
+     */
+    private classifyGrepError;
+    private resolveSearchPath;
+    private performRipgrepSearch;
+    private getSandboxRgStreamExecutor;
+    private executeRipgrepWithSandboxApproval;
+    private formatResult;
+    private performSystemGrepSearch;
+    private performJavaScriptSearch;
+    private get rootDirectory();
+}
+export {};

package/cli/dist-server/types/node/tools/image-edit-tool.d.ts

@@ -0,0 +1,94 @@
+import { Session } from '../../vendor/cbc-core/node/index.js';
+import { Agent, ToolNames } from '../../vendor/cbc-shared/node/index.js';
+import { ProductManager } from '../../workspace/product/lib/common/index.js';
+import { Logger } from '../../workspace/telemetry/lib/common/index.js';
+import type { RunContext } from '@openai/agents';
+import { z } from 'zod';
+import { BaseTool } from './base-tool';
+import { ImageService, Tool, ToolResult } from './tool-protocol';
+export { IMAGE_TO_IMAGE_MODEL_TAG } from './tool-protocol';
+/**
+ * 图生图参数 - 扩展基础参数 + 图生图特有参数
+ */
+declare const ImageEditParameters: z.ZodObject<{
+    prompt: z.ZodString;
+    size: z.ZodOptional<z.ZodString>;
+    quality: z.ZodOptional<z.ZodString>;
+    style: z.ZodOptional<z.ZodString>;
+    background: z.ZodOptional<z.ZodString>;
+    footnote: z.ZodOptional<z.ZodString>;
+    revise: z.ZodOptional<z.ZodBoolean>;
+    output_dir: z.ZodOptional<z.ZodString>;
+} & {
+    image: z.ZodString;
+    input_fidelity: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    image: string;
+    prompt: string;
+    size?: string | undefined;
+    background?: string | undefined;
+    quality?: string | undefined;
+    style?: string | undefined;
+    footnote?: string | undefined;
+    revise?: boolean | undefined;
+    output_dir?: string | undefined;
+    input_fidelity?: string | undefined;
+}, {
+    image: string;
+    prompt: string;
+    size?: string | undefined;
+    background?: string | undefined;
+    quality?: string | undefined;
+    style?: string | undefined;
+    footnote?: string | undefined;
+    revise?: boolean | undefined;
+    output_dir?: string | undefined;
+    input_fidelity?: string | undefined;
+}>;
+export declare class ImageEditTool extends BaseTool implements Tool {
+    protected readonly imageService: ImageService;
+    protected readonly productManager: ProductManager;
+    protected readonly logger: Logger;
+    name: ToolNames;
+    description: string;
+    parameters: z.ZodObject<{
+        prompt: z.ZodString;
+        size: z.ZodOptional<z.ZodString>;
+        quality: z.ZodOptional<z.ZodString>;
+        style: z.ZodOptional<z.ZodString>;
+        background: z.ZodOptional<z.ZodString>;
+        footnote: z.ZodOptional<z.ZodString>;
+        revise: z.ZodOptional<z.ZodBoolean>;
+        output_dir: z.ZodOptional<z.ZodString>;
+    } & {
+        image: z.ZodString;
+        input_fidelity: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        image: string;
+        prompt: string;
+        size?: string | undefined;
+        background?: string | undefined;
+        quality?: string | undefined;
+        style?: string | undefined;
+        footnote?: string | undefined;
+        revise?: boolean | undefined;
+        output_dir?: string | undefined;
+        input_fidelity?: string | undefined;
+    }, {
+        image: string;
+        prompt: string;
+        size?: string | undefined;
+        background?: string | undefined;
+        quality?: string | undefined;
+        style?: string | undefined;
+        footnote?: string | undefined;
+        revise?: boolean | undefined;
+        output_dir?: string | undefined;
+        input_fidelity?: string | undefined;
+    }>;
+    isEnabled: (_args: {
+        runContext: RunContext<Session>;
+        agent: Agent;
+    }) => Promise<boolean>;
+    execute(input: z.infer<typeof ImageEditParameters>, context: RunContext<Session>): Promise<ToolResult>;
+}