@tencent-ai/agent-harness 0.2.0-beta.7 → 0.2.0-beta.8

package/cli/dist-server/types/node/tools/report-findings-tool.d.ts

@@ -0,0 +1,97 @@
+import { z } from 'zod';
+import { BaseTool } from './base-tool';
+import { Tool, ToolResult } from './tool-protocol';
+import { ToolNames } from '../../vendor/cbc-shared/node/index.js';
+declare const ReportFindingsParameters: z.ZodObject<{
+    findings: z.ZodArray<z.ZodObject<{
+        file: z.ZodString;
+        summary: z.ZodString;
+        failureScenario: z.ZodString;
+        category: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        file: string;
+        summary: string;
+        failureScenario: string;
+        category?: string | undefined;
+    }, {
+        file: string;
+        summary: string;
+        failureScenario: string;
+        category?: string | undefined;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    findings: {
+        file: string;
+        summary: string;
+        failureScenario: string;
+        category?: string | undefined;
+    }[];
+}, {
+    findings: {
+        file: string;
+        summary: string;
+        failureScenario: string;
+        category?: string | undefined;
+    }[];
+}>;
+/**
+ * ReportFindings 工具（issue #74425）——让代码审查类 Agent（code-reviewer /
+ * silent-failure-hunter / type-design-analyzer / comment-analyzer 等）把审查发现的
+ * 问题以结构化字段（file / summary / failureScenario / 可选 category）提交，由终端 UI
+ * 渲染成专门的列表组件，而不是纯文本堆在对话里。对齐 Claude Code Tools Reference 的
+ * ReportFindings 章节。
+ *
+ * 数据契约本身与终端渲染无关，可被其他宿主（如 WorkBuddy）复用自己的 UI 消费同一份
+ * 结构化数据，不需要复用本仓库的 FindingsToolCall 渲染组件。
+ *
+ * 默认开启：该工具不调用额外模型、不产生额度成本，与 ImageGen/VideoGen 那一档"默认关闭
+ * 需 productFeature 开关"的工具不同，而是与 PushNotification 同档——仅用单层环境变量兜底，
+ * 可通过 CODEBUDDY_REPORT_FINDINGS_ENABLED=false 关闭。
+ *
+ * 延迟加载：product.json 顶层 tools[] 给本工具设置了 deferLoading: true——默认不直接
+ * 出现在模型工具列表里，需先经 ToolSearch 发现、再通过 DeferExecuteTool 间接调用。
+ * 理由：该工具只在"代码审查"这一类特定场景下才会被调用（由生效的审查指令驱动，不是
+ * 通用工具），常驻工具列表对绝大多数非审查会话是纯粹的体积浪费，对齐 PushNotification/
+ * ImageGen 等同类工具的做法。isEnabled 只有单层 env 开关，不需要 shouldShowInToolSearch
+ * （该方法只用于 ComputerUse/TeamCreate 这类存在运行时门控、索引后仍可能不可调用的场景）。
+ */
+export declare class ReportFindingsTool extends BaseTool implements Tool {
+    name: ToolNames;
+    description: string;
+    parameters: z.ZodObject<{
+        findings: z.ZodArray<z.ZodObject<{
+            file: z.ZodString;
+            summary: z.ZodString;
+            failureScenario: z.ZodString;
+            category: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            file: string;
+            summary: string;
+            failureScenario: string;
+            category?: string | undefined;
+        }, {
+            file: string;
+            summary: string;
+            failureScenario: string;
+            category?: string | undefined;
+        }>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        findings: {
+            file: string;
+            summary: string;
+            failureScenario: string;
+            category?: string | undefined;
+        }[];
+    }, {
+        findings: {
+            file: string;
+            summary: string;
+            failureScenario: string;
+            category?: string | undefined;
+        }[];
+    }>;
+    needsApproval: boolean;
+    isEnabled: () => Promise<boolean>;
+    execute(input: z.infer<typeof ReportFindingsParameters>): Promise<ToolResult>;
+}
+export {};

package/cli/dist-server/types/node/tools/sandbox-approval-review.d.ts

@@ -0,0 +1,40 @@
+import type { SecurityReviewMetrics } from '../../workspace/agent-client-protocol/lib/common/index.js';
+import type { ReviewerRecovery } from '../../vendor/cbc-core/node/index.js';
+import type { RunToolApprovalItem } from '../../vendor/cbc-shared/node/index.js';
+import type { SecurityReviewFailureReason, SecurityReviewSandboxInterceptType } from '../../workspace/telemetry/lib/common/index.js';
+export { SANDBOX_REVIEW_PROVIDER_KEY } from '../../workspace/agent-client-protocol/lib/common/index.js';
+export interface SandboxReviewOperation {
+    interceptType: SecurityReviewSandboxInterceptType;
+    operation: string;
+    toolName: string;
+    path?: string;
+    /** Shell 运行中沙箱观察到并要求审批的文件路径，区别于 command 文本里出现的路径。 */
+    askPaths?: string[];
+    /** Shell 运行中沙箱观察到并要求审批的子进程命令，区别于顶层 command。 */
+    askCommands?: string[];
+    /** Shell 运行中沙箱观察到并要求审批的网络目标。 */
+    askNetworkTargets?: string[];
+    host?: string;
+    port?: number;
+    scheme?: string;
+    command?: string;
+    cwd?: string;
+    mutation?: Record<string, unknown>;
+    scope: 'operation' | 'unsandboxed-command';
+    incomplete?: boolean;
+}
+export interface SandboxReviewDecision extends SecurityReviewMetrics {
+    recovery?: ReviewerRecovery;
+    decision: 'allow' | 'deny';
+    reason: string;
+}
+export interface SandboxReviewAttempt {
+    outcome: 'allow' | 'block' | 'unavailable' | 'not_run';
+    requestAttempted: boolean;
+    failureReason?: SecurityReviewFailureReason;
+    recovery?: ReviewerRecovery;
+    notRunReason?: 'cancelled_before_request' | 'action_incomplete' | 'context_too_large';
+    durationMs: number;
+}
+export declare function registerSandboxReviewOperation(item: RunToolApprovalItem, operation: SandboxReviewOperation): void;
+export declare function getSandboxReviewOperation(item: RunToolApprovalItem): Readonly<SandboxReviewOperation> | undefined;

package/cli/dist-server/types/node/tools/sandbox-permission-file-tool.d.ts

@@ -0,0 +1,14 @@
+import type { RunContext, ToolExecuteArgument } from '../../vendor/cbc-shared/node/index.js';
+import type { Session } from '../../vendor/cbc-core/node/index.js';
+import { BaseTool } from './base-tool';
+/**
+ * File-writing tools whose permission decision is delegated to the sandbox
+ * write-rule guard whenever the sandbox path is active.
+ *
+ * The legacy permission service remains the fallback when sandbox execution is
+ * disabled or unavailable. ToolManager still executes PreToolUse hooks on the
+ * cache-miss path before SandboxWriteRuleGuard runs.
+ */
+export declare abstract class SandboxPermissionFileTool extends BaseTool {
+    needsApproval: (runContext: RunContext<Session>, input: ToolExecuteArgument<any>, callId?: string) => Promise<boolean>;
+}

package/cli/dist-server/types/node/tools/sandbox-write-rule-guard.d.ts

@@ -0,0 +1,126 @@
+import { Logger } from '@celljs/core';
+import type { SandboxRuleContext } from '../../workspace/agent-client-protocol/lib/common/index.js';
+import { type InterruptionService as IInterruptionService, type Session } from '../../vendor/cbc-core/node/index.js';
+import { type FunctionCallItem } from '../../vendor/cbc-shared/node/index.js';
+import { type AcpAgentManager as IAcpAgentManager, type AcpBroadcastService as IAcpBroadcastService } from '../acp/acp-protocol';
+import { type ISandboxCLILifecycle } from '../sandbox-cli/sandbox-cli-lifecycle-protocol';
+import { type SandboxRuleSyncService as ISandboxRuleSyncService } from '../sandbox-cli/sandbox-rule-sync-service';
+import { type SandboxTurnConfig as ISandboxTurnConfig } from '../sandbox-cli/sandbox-turn-config';
+import { type SecurityReviewGate as SecurityReviewGateContract } from '../security-review/protocol';
+import { type SandboxCenterIpcClient as ISandboxCenterIpcClient } from '../sensitive-content/sandbox-center-ipc-client-protocol';
+export declare const SandboxWriteRuleGuard: unique symbol;
+export interface SandboxWriteRuleEffect {
+    targetPath: string;
+    existedBefore: boolean;
+    beforeExecute(): Promise<void>;
+    afterSuccess(): Promise<void>;
+}
+export interface SandboxWriteRuleGuard {
+    ensureNetworkApproval(toolName: string, decision: NetworkRuleDecision, session: Session, details?: {
+        toolCall: FunctionCallItem;
+    }): Promise<void>;
+    ensureNetworkAllowed(toolName: string, toolInput: Record<string, any> | undefined, session: Session, details?: {
+        toolCall: FunctionCallItem;
+    }): Promise<void>;
+    ensureReadAllowed(toolName: string, toolInput: Record<string, any> | undefined, session: Session, details?: {
+        toolCall: FunctionCallItem;
+    }): Promise<void>;
+    ensureAllowed(toolName: string, toolInput: Record<string, any> | undefined, session: Session, details?: {
+        toolCall: FunctionCallItem;
+    }): Promise<void>;
+    prepareWrite(toolName: string, toolInput: Record<string, any> | undefined, session: Session, details?: {
+        toolCall: FunctionCallItem;
+    }): Promise<SandboxWriteRuleEffect | undefined>;
+}
+type NetworkRuleAction = 'allow' | 'ask' | 'deny';
+interface NetworkRuleDecision {
+    ruleContext?: SandboxRuleContext;
+    host: string;
+    port?: number;
+    scheme?: string;
+    action: NetworkRuleAction;
+    reason?: string;
+    matchedRule?: string;
+}
+export declare class SandboxWriteRuleGuardImpl implements SandboxWriteRuleGuard {
+    protected readonly turnConfig: ISandboxTurnConfig;
+    protected readonly lifecycle: ISandboxCLILifecycle;
+    protected readonly sandboxCenterClient?: ISandboxCenterIpcClient;
+    protected readonly sandboxRuleSyncService?: ISandboxRuleSyncService;
+    protected readonly logger: Logger;
+    protected readonly interruptionService?: IInterruptionService;
+    protected readonly securityReviewGate?: SecurityReviewGateContract;
+    protected readonly acpAgentManager?: IAcpAgentManager;
+    protected readonly acpBroadcastService?: IAcpBroadcastService;
+    ensureNetworkAllowed(toolName: string, toolInput: Record<string, any> | undefined, session: Session, details?: {
+        toolCall: FunctionCallItem;
+    }): Promise<void>;
+    ensureNetworkApproval(toolName: string, decision: NetworkRuleDecision, session: Session, details?: {
+        toolCall: FunctionCallItem;
+    }): Promise<void>;
+    private networkApprovalKey;
+    private getNetworkHosts;
+    private getNetworkRuleDecision;
+    ensureReadAllowed(toolName: string, toolInput: Record<string, any> | undefined, session: Session, details?: {
+        toolCall: FunctionCallItem;
+    }): Promise<void>;
+    ensureAllowed(toolName: string, toolInput: Record<string, any> | undefined, session: Session, details?: {
+        toolCall: FunctionCallItem;
+    }): Promise<void>;
+    prepareWrite(toolName: string, toolInput: Record<string, any> | undefined, session: Session, details?: {
+        toolCall: FunctionCallItem;
+    }): Promise<SandboxWriteRuleEffect | undefined>;
+    private ensureWriteAskApproved;
+    private revalidateAppearedWrite;
+    private createEffect;
+    private isFileBackupEnabled;
+    private shouldModifyBackupBeforeWrite;
+    private shouldRegisterCreatedFileForRollback;
+    private maybeModifyBackupBeforeWrite;
+    private isModifyBackupExcludedPath;
+    private getModifyBackupExcludedPathOptions;
+    private isModifyBackupSupportedPlatform;
+    private supportsAutoGrantRuleEffect;
+    private getPlatform;
+    /**
+     * 备份被边界拒绝的错误识别(P2 失败分档)。
+     *
+     * center 侧错误文案带两类标记(backup/dispatch.rs):
+     * - "escapes session boundary" —— 树外且规则层未放行
+     * - "in sensitive area" —— 敏感区(系统区/凭据目录),规则放行亦拒
+     *
+     * 这两类拒绝发生在**授权平面已放行**的前提下(本方法只在
+     * prepareWrite 的 allow/审批通过分支被调)——备份是回滚保障不是写入
+     * 许可,为备份失败阻断用户已授权的写是本末倒置(WorkBuddy-20260827
+     * 事故根因)。降级为 warn + 跳过备份继续写,丢该文件的回滚保证。
+     * 边界内(申报根/会话树)的备份失败是系统故障,维持阻断。
+     */
+    private isBoundaryRejection;
+    private modifyBackup;
+    private rememberSessionFileApproval;
+    private addAutoGrantRuleForCreatedPath;
+    private statPath;
+    private matchRuntimeRuleOrDeny;
+    private matchRuntimeRule;
+    private getRuntimeMatchTimeoutMs;
+    private getApprovalTimeoutMs;
+    private isBlockingRule;
+    private getOperationAction;
+    private getTargetPath;
+    private appendFileApprovalAudit;
+    private shouldRecordAllowAudit;
+    private getMatchedRule;
+    private getToolCallId;
+    private normalizeTargetPath;
+    private normalizeApprovalTargetPath;
+    /** 仅在可提供目录授权时返回；否则按原审批语义处理。 */
+    private getDirectoryApprovalContext;
+    private requestApproval;
+    private handleApprovalTimeout;
+    private findMainSessionSafe;
+    private getAcpAgentForSession;
+    private buildSyntheticApprovalItem;
+    private buildApprovalMetadata;
+    private ensureStableToolCallId;
+}
+export {};

package/cli/dist-server/types/node/tools/send-message-tool.d.ts

@@ -0,0 +1,116 @@
+import { type AgentRunScope as IAgentRunScope, type Session } from '../../vendor/cbc-core/node/index.js';
+import { type RunContext, ToolNames } from '../../vendor/cbc-shared/node/index.js';
+import { Logger } from '../../workspace/telemetry/lib/common/index.js';
+import { z } from 'zod';
+import { BaseTool } from './base-tool';
+import { Tool, ToolCallArgumentRenderer, ToolResult } from './tool-protocol';
+/**
+ * Structured data for SendMessage tool rendering.
+ * This is passed to the UI layer via renderer.value for human-like display.
+ */
+export interface SendMessageRenderData {
+    /** Message type: message, broadcast, shutdown_request, shutdown_response, plan_approval_response */
+    type: 'message' | 'broadcast' | 'shutdown_request' | 'shutdown_response' | 'plan_approval_response';
+    /** Sender name (for display context) */
+    sender: string;
+    /** Recipient name or '@team' for broadcast */
+    recipient?: string;
+    /** Recipient's color for display */
+    recipientColor?: string;
+    /** Short summary/preview text */
+    summary?: string;
+    /** Result message shown below the header */
+    resultMessage: string;
+    /** For shutdown/plan_approval: whether approved */
+    approved?: boolean;
+    /** Number of recipients for broadcast */
+    recipientCount?: number;
+}
+/**
+ * SendMessage tool - unified messaging for Agent Team communication.
+ *
+ * Supports 5 message types:
+ *   - message: Direct message to a specific teammate
+ *   - broadcast: Message to all teammates (use sparingly)
+ *   - shutdown_request: Request a teammate to shut down
+ *   - shutdown_response: Respond to a shutdown request
+ *   - plan_approval_response: Approve or reject a plan
+ */
+export declare class SendMessageTool extends BaseTool implements Tool {
+    protected readonly logger: Logger;
+    protected readonly agentRunScope?: IAgentRunScope;
+    name: ToolNames;
+    description: string;
+    shouldShowInToolSearch: () => boolean;
+    parameters: z.ZodObject<{
+        type: z.ZodEnum<["message", "broadcast", "shutdown_request", "shutdown_response", "plan_approval_response"]>;
+        recipient: z.ZodOptional<z.ZodString>;
+        content: z.ZodOptional<z.ZodString>;
+        summary: z.ZodOptional<z.ZodString>;
+        request_id: z.ZodOptional<z.ZodString>;
+        approve: z.ZodOptional<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        type: "message" | "broadcast" | "shutdown_request" | "shutdown_response" | "plan_approval_response";
+        summary?: string | undefined;
+        content?: string | undefined;
+        approve?: boolean | undefined;
+        request_id?: string | undefined;
+        recipient?: string | undefined;
+    }, {
+        type: "message" | "broadcast" | "shutdown_request" | "shutdown_response" | "plan_approval_response";
+        summary?: string | undefined;
+        content?: string | undefined;
+        approve?: boolean | undefined;
+        request_id?: string | undefined;
+        recipient?: string | undefined;
+    }>;
+    argumentRenderer: ToolCallArgumentRenderer;
+    needsApproval: boolean;
+    /**
+     * Auto mode classifier projection (Claude alignment, decision D1): a plain
+     * message projects `to ${recipient}: ${content}`; structured control messages
+     * (shutdown / plan-approval) project a short summary. Consumed in history —
+     * SendMessage has `needsApproval = false`, so the current action never reaches
+     * the classifier directly.
+     */
+    toAutoClassifierInput(input: unknown): string;
+    isEnabled: () => boolean;
+    execute(input: {
+        type: string;
+        recipient?: string;
+        content?: string;
+        summary?: string;
+        request_id?: string;
+        approve?: boolean;
+    }, context?: RunContext<Session>): Promise<ToolResult>;
+    /**
+     * Resolve a recipient by name, checking both formal TeamManager and implicit TeamMemberRegistry.
+     * `teamName` scopes the implicit registry lookup so cross-team same-name members
+     * cannot be matched as this sender's recipient.
+     *
+     * Falls back to a single `refreshFromDisk()` re-read when neither in-memory
+     * source has the recipient. This closes the spawn-race window where one
+     * teammate has been persisted to `config.json` but not yet reflected in
+     * the current process's TeamManager snapshot (e.g. concurrent spawns).
+     */
+    private resolveRecipient;
+    /**
+     * Map a recipient name to its canonical form (e.g. "main" → "team-lead").
+     */
+    private resolveRecipientName;
+    /**
+     * Notify an in-process logical actor after its inbox append is durable.
+     * The actor owns serialization and revalidates the human-turn lease at the
+     * actual paused -> running boundary.
+     */
+    private kickRecipient;
+    /**
+     * Get all known member names from both formal TeamManager and TeamMemberRegistry.
+     */
+    private getAllMemberNames;
+    private handleMessage;
+    private handleBroadcast;
+    private handleShutdownRequest;
+    private handleShutdownResponse;
+    private handlePlanApprovalResponse;
+}

package/cli/dist-server/types/node/tools/send-user-message-attachments.d.ts

@@ -0,0 +1,22 @@
+/**
+ * SendUserMessage 工具解析后的附件元信息（issue #82025，对齐 claude-code）。
+ *
+ * `file_uuid` 预留给远程上传场景（BRIDGE_MODE 专属），本期只解析本地元信息、
+ * 不做上传，因此始终为 undefined。上传与客户端消费按 issue 备注另行拆分。
+ */
+export interface ResolvedAttachment {
+    path: string;
+    size: number;
+    isImage: boolean;
+    file_uuid?: string;
+}
+/**
+ * 校验附件路径：文件须存在且为常规文件。任一不满足抛出可读错误，
+ * 让模型看到失败原因（cwd 一并带上，便于定位相对路径）。
+ */
+export declare function validateAttachmentPaths(rawPaths: string[]): Promise<void>;
+/**
+ * 解析附件路径为元信息 `{ path, size, isImage }`。串行 stat 保持顺序确定，
+ * 与入参顺序一致。本期不做远程上传。
+ */
+export declare function resolveAttachments(rawPaths: string[]): Promise<ResolvedAttachment[]>;

package/cli/dist-server/types/node/tools/send-user-message-tool.d.ts

@@ -0,0 +1,60 @@
+import { Logger } from '../../workspace/telemetry/lib/common/index.js';
+import { z } from 'zod';
+import { RunContext } from '../../vendor/cbc-shared/node/index.js';
+import { Session } from '../../vendor/cbc-core/node/index.js';
+import { BaseTool } from './base-tool';
+import { BriefModeService } from './brief-mode-service';
+import { ResolvedAttachment } from './send-user-message-attachments';
+import { Tool, ToolCallArgumentRenderer, ToolResult } from './tool-protocol';
+import { ToolNames } from '../../vendor/cbc-shared/node/index.js';
+/**
+ * SendUserMessage 工具的结构化返回数据（issue #82025，对齐 claude-code）。
+ *
+ * 挂在 `ToolResult.rawResponse` 上，供 hooks /客户端渲染侧消费。
+ */
+export interface SendUserMessageOutput {
+    /** 面向用户的消息（markdown）。 */
+    message: string;
+    /** 解析后的附件元信息；无附件时缺省。 */
+    attachments?: ResolvedAttachment[];
+    /** 工具执行时刻的 ISO 时间戳。 */
+    sentAt: string;
+}
+/**
+ * SendUserMessage 工具 —— Agent 面向用户的显式通信通道（Brief 模式，issue #82025）。
+ *
+ * 对齐 claude-code 的 BriefTool：开启 `--brief` 后作为 Agent 面向用户的主要可见输出通道。
+ * 工具常驻工具列表，`isEnabled` 在未开 Brief 模式时隐藏它。
+ */
+export declare class SendUserMessageTool extends BaseTool implements Tool {
+    protected readonly logger: Logger;
+    protected readonly briefModeService: BriefModeService;
+    name: ToolNames;
+    description: string;
+    shouldShowInToolSearch: () => boolean;
+    parameters: z.ZodObject<{
+        message: z.ZodString;
+        attachments: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        status: z.ZodEnum<["normal", "proactive"]>;
+    }, "strip", z.ZodTypeAny, {
+        message: string;
+        status: "proactive" | "normal";
+        attachments?: string[] | undefined;
+    }, {
+        message: string;
+        status: "proactive" | "normal";
+        attachments?: string[] | undefined;
+    }>;
+    argumentRenderer: ToolCallArgumentRenderer;
+    needsApproval: boolean;
+    /**
+     * Auto mode classifier projection: 面向用户的消息本身即分类相关文本。
+     */
+    toAutoClassifierInput(input: unknown): string;
+    isEnabled: () => boolean;
+    execute(input: {
+        message: string;
+        attachments?: string[];
+        status: 'normal' | 'proactive';
+    }, _context?: RunContext<Session>): Promise<ToolResult>;
+}

package/cli/dist-server/types/node/tools/shell-stream-pusher.d.ts

@@ -0,0 +1,25 @@
+import { Logger } from '@celljs/core';
+import type { Session } from '../../vendor/cbc-core/node/index.js';
+export declare const ShellStreamPusher: unique symbol;
+export interface ShellStreamPusherOptions {
+    toolName: string;
+    resultId: string;
+    callId: string;
+    /** 从工具开始执行攒到当下的**全量**输出 buffer（追加 statusText 后的整体文本），不是增量 delta。
+     *  \r 折叠与半截序列收尾都依赖全量语义：传 delta 会导致帧间内容错乱且无任何报错。 */
+    value: string;
+}
+export interface ShellStreamPusherService {
+    push(session: Session | undefined, opts: ShellStreamPusherOptions): void;
+}
+/**
+ * shell 类工具（Bash / REPL）的流式进度推送：统一拼 function_call_result 帧，
+ * value 过 toShellDisplayText 后作为 `renderer.value` 与流式 `content` 下发。
+ *
+ * 流式帧直接走 inputSubject（不进 history、不过 AgentInputItemProcessor 链），
+ * 因此最终结果的清洗出口（input-item-processors）覆盖不到这里，由本服务补位。
+ */
+export declare class ShellStreamPusherImpl implements ShellStreamPusherService {
+    protected readonly logger: Logger;
+    push(session: Session | undefined, opts: ShellStreamPusherOptions): void;
+}

package/cli/dist-server/types/node/tools/skill-manage-tool.d.ts

@@ -0,0 +1,77 @@
+import { Session } from '../../vendor/cbc-core/node/index.js';
+import { Agent, ToolNames } from '../../vendor/cbc-shared/node/index.js';
+import { ProductManager } from '../../workspace/product/lib/common/index.js';
+import { Logger } from '../../workspace/telemetry/lib/common/index.js';
+import type { RunContext } from '@openai/agents';
+import { z } from 'zod';
+import { BaseTool } from './base-tool';
+import { Tool, ToolCallArgumentRenderer, ToolResult } from './tool-protocol';
+declare const SkillManageParameters: z.ZodObject<{
+    action: z.ZodEnum<["list", "create", "modify", "delete"]>;
+    name: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    action: "list" | "delete" | "create" | "modify";
+    name?: string | undefined;
+}, {
+    action: "list" | "delete" | "create" | "modify";
+    name?: string | undefined;
+}>;
+export declare class SkillManageTool extends BaseTool implements Tool {
+    protected readonly productManager: ProductManager;
+    protected readonly logger: Logger;
+    name: ToolNames;
+    description: string;
+    parameters: z.ZodObject<{
+        action: z.ZodEnum<["list", "create", "modify", "delete"]>;
+        name: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        action: "list" | "delete" | "create" | "modify";
+        name?: string | undefined;
+    }, {
+        action: "list" | "delete" | "create" | "modify";
+        name?: string | undefined;
+    }>;
+    needsApproval: boolean;
+    argumentRenderer: ToolCallArgumentRenderer;
+    /**
+     * Controlled by ProductFeature.SkillManage.
+     * Disabled by default; can be enabled via product config or client settings.
+     */
+    isEnabled: (_args: {
+        runContext: RunContext<Session>;
+        agent: Agent;
+    }) => Promise<boolean>;
+    execute(input: z.infer<typeof SkillManageParameters>, context: RunContext<Session>): Promise<ToolResult>;
+    private handleList;
+    private handleCreate;
+    private handleModify;
+    private handleDelete;
+    /**
+     * Read the agent-created-skills.json registry file.
+     * Returns empty registry if file doesn't exist or is malformed.
+     */
+    private readRegistry;
+    /**
+     * Check if a skill name exists in the registry file.
+     */
+    private isInRegistry;
+    /**
+     * Check if a skill's SKILL.md file contains `agent_created: true` in frontmatter.
+     */
+    private hasAgentCreatedFrontmatter;
+    /**
+     * Dual validation: checks both the registry file and SKILL.md frontmatter.
+     * Either source confirming agent-created is sufficient (fault-tolerant design).
+     * Returns error message string if validation fails, undefined if OK.
+     */
+    private validateAgentCreated;
+    private findSkillByName;
+    private listDirectoryContents;
+    private generateSkillTemplate;
+    /**
+     * Truncate output to MAX_TOOL_OUTPUT_LENGTH to prevent context overflow.
+     * Preserves the beginning of the output and appends a truncation marker.
+     */
+    private truncateOutput;
+}
+export {};