@tencent-ai/agent-harness 0.2.0-beta.7 → 0.2.0-beta.8

package/cli/dist-server/types/node/tools/todo-write-tool.d.ts

@@ -0,0 +1,117 @@
+import { Workspace } from '../../workspace/runtime/lib/common/index.js';
+import { z } from 'zod';
+import { RunContext } from '../../vendor/cbc-shared/node/index.js';
+import { Session } from '../../vendor/cbc-core/node/index.js';
+import { BaseTool } from './base-tool';
+import { TodoStorageService } from './todo-storage-service';
+import { Tool, ToolCallArgumentRenderer, ToolResult } from './tool-protocol';
+import { ToolNames } from '../../vendor/cbc-shared/node/index.js';
+declare const TodoWriteParameters: z.ZodObject<{
+    oldTodos: z.ZodArray<z.ZodObject<{
+        content: z.ZodString;
+        activeForm: z.ZodString;
+        status: z.ZodEnum<["pending", "in_progress", "completed"]>;
+    }, "strip", z.ZodTypeAny, {
+        content: string;
+        status: "pending" | "in_progress" | "completed";
+        activeForm: string;
+    }, {
+        content: string;
+        status: "pending" | "in_progress" | "completed";
+        activeForm: string;
+    }>, "many">;
+    newTodos: z.ZodArray<z.ZodObject<{
+        content: z.ZodString;
+        activeForm: z.ZodString;
+        status: z.ZodEnum<["pending", "in_progress", "completed"]>;
+    }, "strip", z.ZodTypeAny, {
+        content: string;
+        status: "pending" | "in_progress" | "completed";
+        activeForm: string;
+    }, {
+        content: string;
+        status: "pending" | "in_progress" | "completed";
+        activeForm: string;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    oldTodos: {
+        content: string;
+        status: "pending" | "in_progress" | "completed";
+        activeForm: string;
+    }[];
+    newTodos: {
+        content: string;
+        status: "pending" | "in_progress" | "completed";
+        activeForm: string;
+    }[];
+}, {
+    oldTodos: {
+        content: string;
+        status: "pending" | "in_progress" | "completed";
+        activeForm: string;
+    }[];
+    newTodos: {
+        content: string;
+        status: "pending" | "in_progress" | "completed";
+        activeForm: string;
+    }[];
+}>;
+export declare class TodoWriteTool extends BaseTool implements Tool {
+    protected readonly workspace: Workspace;
+    protected readonly todoStorageService: TodoStorageService;
+    name: ToolNames;
+    parameters: z.ZodObject<{
+        oldTodos: z.ZodArray<z.ZodObject<{
+            content: z.ZodString;
+            activeForm: z.ZodString;
+            status: z.ZodEnum<["pending", "in_progress", "completed"]>;
+        }, "strip", z.ZodTypeAny, {
+            content: string;
+            status: "pending" | "in_progress" | "completed";
+            activeForm: string;
+        }, {
+            content: string;
+            status: "pending" | "in_progress" | "completed";
+            activeForm: string;
+        }>, "many">;
+        newTodos: z.ZodArray<z.ZodObject<{
+            content: z.ZodString;
+            activeForm: z.ZodString;
+            status: z.ZodEnum<["pending", "in_progress", "completed"]>;
+        }, "strip", z.ZodTypeAny, {
+            content: string;
+            status: "pending" | "in_progress" | "completed";
+            activeForm: string;
+        }, {
+            content: string;
+            status: "pending" | "in_progress" | "completed";
+            activeForm: string;
+        }>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        oldTodos: {
+            content: string;
+            status: "pending" | "in_progress" | "completed";
+            activeForm: string;
+        }[];
+        newTodos: {
+            content: string;
+            status: "pending" | "in_progress" | "completed";
+            activeForm: string;
+        }[];
+    }, {
+        oldTodos: {
+            content: string;
+            status: "pending" | "in_progress" | "completed";
+            activeForm: string;
+        }[];
+        newTodos: {
+            content: string;
+            status: "pending" | "in_progress" | "completed";
+            activeForm: string;
+        }[];
+    }>;
+    argumentRenderer: ToolCallArgumentRenderer;
+    needsApproval: boolean;
+    execute(input: z.infer<typeof TodoWriteParameters>, context?: RunContext<Session>): Promise<ToolResult>;
+}
+export {};

package/cli/dist-server/types/node/tools/tool-always-approval-service.d.ts

@@ -0,0 +1,73 @@
+import { Session } from '../../vendor/cbc-core/node/index.js';
+import { ApprovalScope, RuleValue, RunToolApprovalItem } from '../../vendor/cbc-shared/node/index.js';
+import { ToolAlwaysApprovalService } from './tool-protocol';
+/**
+ * 宿主注入的「审批记忆分组」（通用机制，不绑定任何具体工具）。
+ *
+ * 默认不设置 —— 每个工具各记各的，与历史行为一致。
+ *
+ * 动机：审批记忆的天然粒度是单个工具名，但一件用户心智上的「同一件事」可能由多个
+ * 兄弟工具承载（例如同一种产物的几条不同输入路径）。此时用户对其中一个点了
+ * 「本次会话始终允许」，换一条路径就会被重新询问 —— 用户视角是「我明明允许过了」。
+ * 宿主把这些工具声明成一组后，组内任一工具被记住，同组其余工具即视为已授权。
+ *
+ * 值为 JSON：`{"<组名>": ["<工具名>", ...], ...}`。
+ * 解析失败 / 格式不合法时整体退回单工具语义（**不放宽**授权，只是不合并），
+ * 绝不让配置错误把审批链路搞崩。
+ */
+export declare const ENV_APPROVAL_MEMORY_GROUPS = "CODEBUDDY_APPROVAL_MEMORY_GROUPS";
+export declare class ToolAlwaysApprovalServiceImpl implements ToolAlwaysApprovalService {
+    private readonly storeMap;
+    getSessionApprovalRules(session: Session, item: RunToolApprovalItem): RuleValue[];
+    approve(session: Session, item: RunToolApprovalItem, scope?: ApprovalScope, ruleToolName?: string): Promise<void>;
+    /**
+     * 把一次「本次会话始终允许」落到磁盘状态文件，供宿主闸门 hook 跨进程读回。
+     *
+     * 仅当工具命中宿主 `CODEBUDDY_APPROVAL_MEMORY_GROUPS` 分组声明且 scope 为 session 级
+     * 时落盘（其它工具没有 hook 消费方；持久授权走 settings，本就不受进程更替影响）。
+     * 全程 fail-soft：任何异常吞掉 —— 落盘失败最多下个进程周期多弹一次窗，
+     * 绝不能让用户的审批操作失败。
+     */
+    private persistSessionApprovalIfDeclared;
+    isApproved(session: Session, item: RunToolApprovalItem): boolean;
+    clear(sessionId: string): void;
+    private getOrCreateStore;
+    private createStoreForTool;
+    private readonly sessionCaches;
+    private getSessionCache;
+    private getToolSignature;
+    /**
+     * 工具名 → 审批记忆键：命中宿主声明的分组时返回组 key，否则原样返回工具名。
+     *
+     * 只影响「记住/复用」的粒度，不影响是否需要审批 —— 没被用户显式批准过的组，
+     * 第一次仍会正常弹窗。
+     */
+    private resolveMemoryKey;
+    private checkSafety;
+    /**
+     * 向上同步授权到主 session
+     * 当 subagent 中用户选择 "don't ask again this session" 时，
+     * 同时将缓存和规则同步到主 session，使授权在整个会话范围内生效
+     */
+    private syncApprovalToMainSession;
+    /**
+     * Resolve approval rules based on tool type and arguments.
+     *
+     * This method generates appropriate RuleValue(s) for different tool types.
+     *
+     * Most tools use a tool-name rule for the session. Skill is target-scoped so
+     * approving one Skill cannot silently approve every other Skill.
+     *
+     * For more granular control, users should use settings-based rules like:
+     * - Bash(npm run *) - allow specific command patterns
+     * - Edit(src/*.ts) - allow specific file patterns
+     *
+     * @param item The tool approval item containing tool name and arguments
+     * @returns Array of RuleValue objects for the permission update
+     */
+    private resolveApprovalRules;
+    private resolveApprovalTarget;
+    /** 与 toolName 同组的全部工具名；未分组时返回空数组。 */
+    private resolveGroupMembers;
+    private resolveStableSkillName;
+}

package/cli/dist-server/types/node/tools/tool-argument-rewrite-service.d.ts

@@ -0,0 +1,4 @@
+import { ToolArgumentRewriteService } from './tool-protocol';
+export declare class ToolArgumentRewriteServiceImpl implements ToolArgumentRewriteService {
+    process(input: any): any;
+}

package/cli/dist-server/types/node/tools/tool-error-codes.d.ts

@@ -0,0 +1,140 @@
+/**
+ * WorkBuddy CLI 工具错误码枚举
+ *
+ * 纯数字字符串格式，与 agent-craft-core 的 ToolCallErrorCode 编号段对齐（相同工具相同编号），
+ * 保证 ClickHouse chat_tool_action 聚合 SQL（REGEXP '^[0-9]+$'）能同时覆盖两条上报路径的数据。
+ *
+ * 编号段分配：
+ *   1000-1099   read_file
+ *   2000-2099   write_to_file
+ *   4000-4099   replace_in_file
+ *   7100-7199   search_content
+ *   7200-7299   glob
+ *   8000-8099   bash
+ *   19200-19209 AskUserQuestion
+ *   19910-19919 present_files
+ *   19920-19929 Agent
+ *   19930-19939 后台任务定位（TaskStop/TaskOutput）
+ *   19940-19949 A2A（出站，issue #99451）
+ *   90000-99999 通用
+ */
+export declare enum ToolErrorCode {
+    Success = "0",
+    ReadFileError = "1000",
+    ReadFileNotFoundError = "1001",
+    ReadFilePermissionError = "1002",
+    ReadFilePathError = "1003",
+    ReadFileEncodingError = "1004",
+    ReadFileTokenLimitExceededError = "1005",
+    ReadFileTooLargeError = "1006",
+    ReadFileBinaryError = "1007",
+    ReadFileOffsetBeyondEOFError = "1008",
+    ReadFileInvalidParamsError = "1009",
+    ReadFileModelNoImageSupportError = "1010",
+    ReadFileImageTooLargeError = "1011",
+    ReadFileInvalidNotebookError = "1012",
+    ReadFileStreamReadError = "1013",
+    WriteFileError = "2000",
+    WriteFilePermissionError = "2001",
+    WriteFilePathError = "2002",
+    WriteFileLockError = "2003",
+    WriteFileEncodingError = "2004",
+    WriteFileContentError = "2005",
+    WriteFileArtifactPathError = "2006",
+    WriteFileDiskFullError = "2007",
+    WriteFileSandboxError = "2008",
+    WriteFileNotReadError = "2009",
+    WriteFileModifiedSinceReadError = "2010",
+    ReplaceInFileError = "4000",
+    ReplaceExecuteError = "4001",
+    ReplaceTimeoutError = "4002",
+    ReplaceNoMatchesError = "4003",
+    ReplaceNoContentChangedError = "4004",
+    ReplaceUnKnownError = "4005",
+    ReplaceCommitFileError = "4006",
+    ReplaceVscodeError = "4007",
+    ReplaceMultipleMatchesError = "4008",
+    ReplaceArtifactPathError = "4009",
+    ReplaceFileNotReadError = "4010",
+    ReplaceFileModifiedSinceReadError = "4011",
+    ReplaceFilePathError = "4012",
+    ReplacePermissionError = "4013",
+    ReplaceSandboxError = "4014",
+    ReplaceInternalError = "4015",
+    ReplaceDiskFullError = "4016",
+    SearchContentError = "7100",
+    SearchContentPathError = "7101",
+    SearchContentPatternError = "7102",
+    SearchContentParseError = "7103",
+    SearchContentPermissionError = "7104",
+    GlobError = "7200",
+    GlobPathError = "7201",
+    GlobPatternError = "7202",
+    GlobInvalidParamsError = "7203",
+    GlobPermissionError = "7204",
+    ExecuteCommandError = "8000",
+    ExecuteCommandTimeoutError = "8001",
+    ExecuteCommandExitCodeError = "8002",
+    ExecuteCommandMissingError = "8003",
+    ExecuteCommandEnvError = "8004",
+    ExecuteCommandKilledError = "8005",
+    ExecuteCommandSandboxDeniedError = "8006",
+    ExecuteCommandSandboxInfrastructureError = "8007",
+    ExecuteCommandSecurityBlockedError = "8008",
+    ExecuteCommandBackgroundUnsupportedError = "8009",
+    ExecuteCommandEscalationDeniedError = "8010",
+    ExecuteCommandSystemToolDisabledError = "8011",
+    ExecuteCommandCancelledError = "8012",
+    ExecuteCommandSignalTerminatedError = "8013",
+    ExecuteCommandRootResolveError = "8014",
+    AskFollowupQuestionError = "19200",
+    AskFollowupMissingToolCallIdError = "19201",
+    AskFollowupNoAnswersError = "19202",
+    AskFollowupInvalidParamsError = "19203",
+    AskFollowupUserDeclinedError = "19204",
+    /** Tool 被 env / capability 门控关闭，理论上不应被模型选到；防御性回报。 */
+    AskStructuredInputDisabledError = "19205",
+    /** 缺少 toolCallId 或 requestedSchema 校验失败。 */
+    AskStructuredInputInvalidParamsError = "19206",
+    /** 未找到可用的 ACP / SDK elicitation 通道。 */
+    AskStructuredInputNoChannelError = "19207",
+    /** 用户 decline/cancel。 */
+    AskStructuredInputUserDeclinedError = "19208",
+    /** 客户端返回响应形状非法（非 accept/decline/cancel）。 */
+    AskStructuredInputMalformedResponseError = "19209",
+    PresentFilesError = "19910",
+    PresentFilesInvalidParamsError = "19911",
+    PresentFilesPermissionDeniedError = "19912",
+    PresentFilesTimeoutError = "19913",
+    AgentExecutionError = "19920",
+    AgentSessionRequiredError = "19921",
+    AgentInvalidParamsError = "19922",
+    AgentMaxTurnsError = "19923",
+    AgentNestingDepthLimitError = "19924",
+    AgentSpawnLimitError = "19925",
+    /** TaskStop：目标 task_id 不存在于 AgentTaskManager 与 ToolManager 后台任务表中。 */
+    TaskStopNotFoundError = "19930",
+    /** TaskOutput：目标 task_id 不存在于 AgentTaskManager 与 ToolManager 后台任务表中。 */
+    TaskOutputNotFoundError = "19931",
+    A2ADisabledError = "19940",
+    A2AAgentNotFoundError = "19941",
+    A2ASkillNotFoundError = "19942",
+    A2ACallError = "19943",
+    A2ATimeoutError = "19944",
+    A2ANotAllowedInSubSessionError = "19945",
+    A2ATaskNotFoundError = "19946",
+    A2ATaskNotCancelableError = "19947",
+    A2AAmbiguousAgentError = "19948",
+    /** 远端 A2A 端点返回 HTTP 401，且宿主没有（或拒绝了）完成授权，重试后仍未通过。 */
+    A2AAuthRequiredError = "19949",
+    InvalidParameterError = "90000",
+    ExecuteError = "90001",
+    ExecuteTimeoutError = "90002",
+    ToolTimeoutError = "90003",
+    ToolCancelledError = "90004",
+    /** 写前 checkpoint 备份失败：拦下本次写入，避免文件在没有回退快照的情况下被改动 */
+    CheckpointBackupFailedError = "90005",
+    UnknownToolError = "99999"
+}
+/** 根据错误码获取枚举名（如 '1001' → 'ReadFileNotFoundError'） */
+export declare function getToolErrorName(code: string): string;

package/cli/dist-server/types/node/tools/tool-hook-manager.d.ts

@@ -0,0 +1,61 @@
+import { Session } from '../../vendor/cbc-core/node/index.js';
+import { Logger } from '../../workspace/telemetry/lib/common/index.js';
+import { GalileoSessionBridge } from '../galileo/galileo-session-bridge-protocol';
+import { HookManager } from '../hooks/hook-protocol';
+import { ToolHookManager } from './tool-protocol';
+/**
+ * Implementation of ToolHookManager
+ * Handles PreToolUse and PostToolUse hooks with Claude Code compatibility
+ */
+export declare class ToolHookManagerImpl implements ToolHookManager {
+    protected readonly hookManager: HookManager;
+    protected readonly logger: Logger;
+    protected readonly galileoSessionBridge: GalileoSessionBridge;
+    protected readonly toolErrorResolvers: Map<string, (error: unknown) => string | undefined>;
+    /**
+     * Execute PreToolUse hooks
+     */
+    executePreToolUseHooks(toolName: string, toolInput: Record<string, any>, session: Session, transcriptPath: string, cwd?: string, callId?: string): Promise<{
+        allowed: boolean;
+        modifiedInput?: Record<string, any>;
+        message?: string;
+        permissionDecision?: 'allow' | 'deny' | 'ask';
+        permissionDecisionReason?: string;
+        runtimeSecurity?: Record<string, unknown>;
+        /** hook 声明的审批元数据（已过形状校验），见 readApprovalMeta。 */
+        approvalMeta?: Record<string, string>;
+        callId?: string;
+        preventContinuation?: boolean;
+    }>;
+    /**
+     * Execute PostToolUse hooks
+     *
+     * NOTE: toolResponse should be the RAW response from the tool,
+     * not the ToolResult wrapper. This ensures Claude Code compatibility.
+     */
+    executePostToolUseHooks(toolName: string, toolInput: Record<string, any>, toolResponse: unknown, session: Session, transcriptPath: string, cwd?: string, callId?: string): Promise<{
+        message?: string;
+        additionalContext?: string;
+        updatedToolOutput?: unknown;
+        callId?: string;
+    }>;
+    /**
+     * Execute PostToolUseFailure hooks (Claude Code parity).
+     * Observe-only: can inject additionalContext, cannot block.
+     */
+    executePostToolUseFailureHooks(toolName: string, toolInput: Record<string, any>, error: unknown, session: Session, transcriptPath: string, cwd?: string, callId?: string, isInterrupt?: boolean): Promise<{
+        message?: string;
+        additionalContext?: string;
+        updatedToolOutput?: unknown;
+    }>;
+    /**
+     * Register a tool-level thrown error classifier.
+     */
+    registerToolErrorResolver(toolName: string, resolver: (error: unknown) => string | undefined): void;
+    /**
+     * thrown 路径上非 ToolExecutionError（如 framework 在 execute 前抛的 zod 校验 Error、
+     * 普通运行时异常）的兜底分类：优先调用工具自己注册的 resolver，再按通用特征推断，
+     * 避免这类 thrown 全部落 99999。已 typed 的工具不走这里（优先用 toolErrorCode）。
+     */
+    private resolveThrownErrorCode;
+}