@tencent-ai/agent-sdk 0.3.263-dev.90f0e98.202609190050 → 0.3.263

package/cli/dist-server/types/node/tools/tool-permission-strategy.d.ts

@@ -1,83 +0,0 @@
-import { Logger } from '@celljs/core';
-import { RunContext, ToolExecuteArgument } from '../../vendor/cbc-shared/node/index.js';
-import { Session } from '../../vendor/cbc-core/node/index.js';
-import { PermissionMode } from '../../vendor/cbc-shared/node/index.js';
-import { SettingsManager } from '../settings';
-import { BaseTool } from './base-tool';
-import { ToolArg } from '../../vendor/cbc-shared/node/index.js';
-import { ToolPermissionStrategy } from './tool-protocol';
-export declare class ToolPermissionDefaultStrategy implements ToolPermissionStrategy {
-    mode: PermissionMode;
-    protected readonly settingsManager: SettingsManager;
-    protected readonly logger: Logger;
-    needApproval(tool: BaseTool, runContext: RunContext<Session>, input: ToolExecuteArgument<any>, checkArgs: ToolArg[], callId?: string): Promise<boolean>;
-}
-export declare class ToolPermissionAcceptEditsStrategy implements ToolPermissionStrategy {
-    mode: PermissionMode;
-    protected readonly settingsManager: SettingsManager;
-    needApproval(tool: BaseTool, runContext: RunContext<Session>, input: ToolExecuteArgument<any>, checkArgs: ToolArg[], callId?: string): Promise<boolean>;
-}
-export declare class ToolPermissionPlanStrategy implements ToolPermissionStrategy {
-    mode: PermissionMode;
-    protected readonly settingsManager: SettingsManager;
-    protected readonly logger: Logger;
-    needApproval(tool: BaseTool, runContext: RunContext<Session>, input: ToolExecuteArgument<any>, checkArgs: ToolArg[], callId?: string): Promise<boolean>;
-    /**
-     * 委托给进入 plan 模式前的权限策略
-     * 如果没有前置模式，则使用 Default 策略
-     */
-    private delegateToPrePlanStrategy;
-    /**
-     * 检查是否为计划文件的编辑操作
-     * 在计划模式下，写入当前 session 的计划文件不需要授权
-     */
-    private isPlanFileEdit;
-}
-export declare class ToolPermissionBypassPermissionsStrategy implements ToolPermissionStrategy {
-    mode: PermissionMode;
-    protected readonly settingsManager: SettingsManager;
-    needApproval(tool: BaseTool, runContext: RunContext<Session>, input: ToolExecuteArgument<any>, checkArgs: ToolArg[], callId?: string): Promise<boolean>;
-}
-/**
- * Work 权限策略
- * - Read: 不需要授权（不检查信任目录）
- * - Edit: 在信任目录中不需要授权，否则需要授权
- * - Bash: 安全命令不需要授权，否则需要授权
- */
-export declare class ToolPermissionWorkStrategy implements ToolPermissionStrategy {
-    mode: PermissionMode;
-    protected readonly settingsManager: SettingsManager;
-    needApproval(tool: BaseTool, runContext: RunContext<Session>, input: ToolExecuteArgument<any>, checkArgs: ToolArg[], callId?: string): Promise<boolean>;
-}
-/**
- * Delegate 权限策略
- * Delegate 模式下所有允许的工具（协调类）自动批准。
- * 实现类工具已在 isEnabled 层被过滤，不会到达此策略。
- */
-export declare class ToolPermissionDelegateStrategy implements ToolPermissionStrategy {
-    mode: PermissionMode;
-    protected readonly settingsManager: SettingsManager;
-    needApproval(_tool: BaseTool, _runContext: RunContext<Session>, _input: ToolExecuteArgument<any>, _checkArgs: ToolArg[], _callId?: string): Promise<boolean>;
-}
-/**
- * DontAsk 权限策略（安全基线）
- *
- * 对齐 Claude Code 的 dontAsk 语义："Don't prompt for permissions, deny if not
- * pre-approved" —— 只放行 baseline（default 模式）下本就不会弹权限提示的动作，
- * 其余一律走统一出口转 deny。
- *
- * - Read: 信任目录内不需要授权（与 default 一致）；否则需要授权 → deny
- * - Bash: 始终需要授权 → deny。即使命令名在 SAFE_COMMAND_WHITELIST 中（npm/node/
- *   git/python 等），它们能执行任意代码，不属于"预批准"的免提示动作；与 Claude
- *   对齐（如 `npm test` 在 dontAsk 下被拒）。用户可通过 allow 规则显式预批准，
- *   那会在更早的 allow 阶段命中、不会到达本策略。
- * - Edit / 其他: 需要授权 → deny
- *
- * 这里返回 true（需要授权）的情形，由 ToolPermissionService 的统一 ask 收口在
- * dontAsk 模式下转成 deny（不弹权限确认）。
- */
-export declare class ToolPermissionDontAskStrategy implements ToolPermissionStrategy {
-    mode: PermissionMode;
-    protected readonly settingsManager: SettingsManager;
-    needApproval(tool: BaseTool, runContext: RunContext<Session>, input: ToolExecuteArgument<any>, checkArgs: ToolArg[], callId?: string): Promise<boolean>;
-}

package/cli/dist-server/types/node/tools/tool-search-tool.d.ts

@@ -1,113 +0,0 @@
-import type { RunContext } from '@openai/agents';
-import { z } from 'zod';
-import type { Session } from '../../vendor/cbc-core/node/index.js';
-import { BaseTool } from './base-tool';
-import { DeferToolConfigService } from './defer-tool-config-protocol';
-import { Tool, ToolCallArgumentRenderer, ToolManager, ToolResult } from './tool-protocol';
-import { ToolNames } from '../../vendor/cbc-shared/node/index.js';
-import { ToolSearchService } from './tool-search-protocol';
-import { AgentToolDeferOverlayCache } from './tool-spec';
-/**
- * Parameters for the tool_search tool
- */
-declare const ToolSearchParameters: z.ZodObject<{
-    queries: z.ZodOptional<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], unknown>>;
-    tool_names: z.ZodOptional<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], unknown>>;
-    top_k: z.ZodDefault<z.ZodNumber>;
-}, "strip", z.ZodTypeAny, {
-    queries?: string[] | undefined;
-    tool_names?: string[] | undefined;
-    top_k: number;
-}, {
-    queries?: unknown;
-    tool_names?: unknown;
-    top_k?: number | undefined;
-}>;
-/**
- * Tool for searching deferred tools and returning their metadata (name, description, parameter schema).
- *
- * Supports two operations via separate parameters:
- * - "queries": Search by keywords, return top_k results with full details, show remaining as candidates.
- * - "tool_names": Look up tools by exact name(s), with fuzzy search fallback.
- *
- * Tools found by ToolSearch are NOT injected into the LLM tools list.
- * Instead, the model should use DeferExecuteTool to invoke them, passing the
- * tool name and parameters learned from the schema returned here.
- */
-export declare class ToolSearchTool extends BaseTool implements Tool {
-    protected readonly toolSearchService: ToolSearchService;
-    protected readonly deferToolConfigService: DeferToolConfigService;
-    protected readonly toolManager: ToolManager;
-    protected readonly agentToolDeferOverlayCache: AgentToolDeferOverlayCache;
-    name: ToolNames;
-    readonly promptCacheStability: 'volatile';
-    isEnabled: () => Promise<boolean>;
-    parameters: z.ZodObject<{
-        queries: z.ZodOptional<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], unknown>>;
-        tool_names: z.ZodOptional<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], unknown>>;
-        top_k: z.ZodDefault<z.ZodNumber>;
-    }, "strip", z.ZodTypeAny, {
-        queries?: string[] | undefined;
-        tool_names?: string[] | undefined;
-        top_k: number;
-    }, {
-        queries?: unknown;
-        tool_names?: unknown;
-        top_k?: number | undefined;
-    }>;
-    argumentRenderer: ToolCallArgumentRenderer;
-    /**
-     * Tool search does not need user approval
-     */
-    needsApproval: boolean;
-    /**
-     * Maximum output characters, resolved from env var or default.
-     */
-    private readonly maxOutputChars;
-    execute(input: z.infer<typeof ToolSearchParameters>, context: RunContext<Session>): Promise<ToolResult>;
-    /**
-     * 子代理 MCP 白名单判定（对齐 CC：ToolSearch 严格在子代理白名单解析后的工具池内
-     * 搜索，白名单外 MCP 工具不可发现）。agent 未注册白名单时全部放行。
-     * 仅约束 `mcp__` 前缀工具；裸名 MCP 工具是透明代理的全局能力，不走该白名单。
-     */
-    private isMcpToolAllowedForAgent;
-    /**
-     * Search mode: search by keywords, return top_k with full schema, show remaining as candidates.
-     */
-    private executeSearchMode;
-    /**
-     * Lookup mode: look up tools by exact name(s).
-     * Falls back to search(name, 1) when exact match is not found.
-     */
-    private executeLookupMode;
-    /**
-     * Format search mode results with primary tools (including schema) and optional candidates.
-     */
-    private formatSearchResults;
-    /**
-     * Format lookup mode results with full tool info.
-     */
-    private formatLookupResults;
-    /**
-     * 会话级 `Defer(...)` 命中的内置工具如果未被 product 索引，先懒索引一次。
-     *
-     * - tool_names 模式：只索引用户显式问到的那些（避免 queries 模式无谓全扫）
-     * - queries 模式：把 overlay.forceDefer 精确条目全量索引
-     *
-     * 通配条目（`Defer(mcp__*)`）不在此处理：
-     *   1) MCP 工具的索引由 mcp-manager 异步驱动；
-     *   2) 通配反向枚举不出具体工具名。
-     */
-    private ensureForceDeferIndexed;
-    /**
-     * Resolve max output chars from environment variable, falling back to default.
-     * Follows the same pattern as tool-manager.ts initSkillCharBudget().
-     */
-    private initMaxOutputChars;
-    /**
-     * Truncate output string to maxOutputChars limit.
-     * Appends a truncation notice when content exceeds the limit.
-     */
-    private truncateOutput;
-}
-export {};

package/cli/dist-server/types/node/tools/video-gen-tool.d.ts

@@ -1,82 +0,0 @@
-import { Session } from '../../vendor/cbc-core/node/index.js';
-import { Agent, ToolNames } from '../../vendor/cbc-shared/node/index.js';
-import { ProductManager } from '@genie/product';
-import { Logger } from '@genie/telemetry';
-import type { RunContext } from '@openai/agents';
-import { z } from 'zod';
-import { BaseTool } from './base-tool';
-import { ImageService, Tool, ToolResult, VideoService } from './tool-protocol';
-/**
- * 文生视频 + 图生视频参数 Schema
- * image 或 last_image 任意一个存在时为图生视频，否则为文生视频
- */
-declare const VideoGenParameters: z.ZodObject<{
-    prompt: z.ZodOptional<z.ZodString>;
-    image: z.ZodOptional<z.ZodString>;
-    last_image: z.ZodOptional<z.ZodString>;
-    resolution: z.ZodOptional<z.ZodEnum<["720P", "1080P"]>>;
-    aspect_ratio: z.ZodOptional<z.ZodEnum<["16:9", "9:16", "1:1"]>>;
-    negative_prompt: z.ZodOptional<z.ZodString>;
-    enable_audio: z.ZodOptional<z.ZodBoolean>;
-    output_dir: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    prompt?: string | undefined;
-    image?: string | undefined;
-    last_image?: string | undefined;
-    resolution?: "1080P" | "720P" | undefined;
-    aspect_ratio?: "16:9" | "1:1" | "9:16" | undefined;
-    negative_prompt?: string | undefined;
-    enable_audio?: boolean | undefined;
-    output_dir?: string | undefined;
-}, {
-    prompt?: string | undefined;
-    image?: string | undefined;
-    last_image?: string | undefined;
-    resolution?: "1080P" | "720P" | undefined;
-    aspect_ratio?: "16:9" | "1:1" | "9:16" | undefined;
-    negative_prompt?: string | undefined;
-    enable_audio?: boolean | undefined;
-    output_dir?: string | undefined;
-}>;
-export declare class VideoGenTool extends BaseTool implements Tool {
-    protected readonly videoService: VideoService;
-    protected readonly imageService: ImageService;
-    protected readonly productManager: ProductManager;
-    protected readonly logger: Logger;
-    name: ToolNames;
-    description: string;
-    parameters: z.ZodObject<{
-        prompt: z.ZodOptional<z.ZodString>;
-        image: z.ZodOptional<z.ZodString>;
-        last_image: z.ZodOptional<z.ZodString>;
-        resolution: z.ZodOptional<z.ZodEnum<["720P", "1080P"]>>;
-        aspect_ratio: z.ZodOptional<z.ZodEnum<["16:9", "9:16", "1:1"]>>;
-        negative_prompt: z.ZodOptional<z.ZodString>;
-        enable_audio: z.ZodOptional<z.ZodBoolean>;
-        output_dir: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        prompt?: string | undefined;
-        image?: string | undefined;
-        last_image?: string | undefined;
-        resolution?: "1080P" | "720P" | undefined;
-        aspect_ratio?: "16:9" | "1:1" | "9:16" | undefined;
-        negative_prompt?: string | undefined;
-        enable_audio?: boolean | undefined;
-        output_dir?: string | undefined;
-    }, {
-        prompt?: string | undefined;
-        image?: string | undefined;
-        last_image?: string | undefined;
-        resolution?: "1080P" | "720P" | undefined;
-        aspect_ratio?: "16:9" | "1:1" | "9:16" | undefined;
-        negative_prompt?: string | undefined;
-        enable_audio?: boolean | undefined;
-        output_dir?: string | undefined;
-    }>;
-    isEnabled: (_args: {
-        runContext: RunContext<Session>;
-        agent: Agent;
-    }) => Promise<boolean>;
-    execute(input: z.infer<typeof VideoGenParameters>, context: RunContext<Session>): Promise<ToolResult>;
-}
-export {};

package/cli/dist-server/types/node/tools/wait-for-mcp-servers-tool.d.ts

@@ -1,79 +0,0 @@
-import { Logger } from '@celljs/core';
-import { z } from 'zod';
-import { RunContext } from '../../vendor/cbc-shared/node/index.js';
-import { McpManager } from '../mcp/mcp-protocol';
-import { Session } from '../../vendor/cbc-core/node/index.js';
-import { BaseTool } from './base-tool';
-import { Tool, ToolCallArgumentRenderer, ToolResult } from './tool-protocol';
-import { ToolNames } from '../../vendor/cbc-shared/node/index.js';
-declare const WaitForMcpServersParameters: z.ZodObject<{
-    servers: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-}, "strip", z.ZodTypeAny, {
-    servers?: string[] | undefined;
-}, {
-    servers?: string[] | undefined;
-}>;
-type WaitForMcpServersInput = z.infer<typeof WaitForMcpServersParameters>;
-interface WaitForMcpServersOutput {
-    ready: boolean;
-    connected: string[];
-    failed: string[];
-    stillPending: string[];
-    needsAuth: string[];
-    disabled: string[];
-    unknown: string[];
-}
-/**
- * WaitForMcpServers — wait for MCP servers that are still connecting.
- *
- * When a user's request needs tools from a still-connecting server, the LLM
- * can call this tool to block until the server finishes connecting. Once
- * connected, its tools are added to the tool list and can be used directly.
- *
- * Returns ready=true when all target servers are connected, ready=false if
- * any failed to connect, need authentication, or are disabled.
- */
-export declare class WaitForMcpServersTool extends BaseTool implements Tool {
-    protected readonly mcpManager: McpManager;
-    protected readonly logger: Logger;
-    name: ToolNames;
-    description: string;
-    parameters: z.ZodObject<{
-        servers: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    }, "strip", z.ZodTypeAny, {
-        servers?: string[] | undefined;
-    }, {
-        servers?: string[] | undefined;
-    }>;
-    argumentRenderer: ToolCallArgumentRenderer;
-    /** No approval needed — this is a read-only wait operation. */
-    needsApproval: boolean;
-    /**
-     * Enabled iff the feature is not explicitly disabled via env
-     * CODEBUDDY_WAIT_FOR_MCP_SERVERS_ENABLED=0/false.
-     *
-     * Historically this also returned false when no MCP server was in
-     * CONNECTING state. That coupling caused a time-of-check race with the
-     * ToolSearch description: the description is rendered once per session
-     * with the "still connecting" hint baked in, but isEnabled() was
-     * re-evaluated on every LLM request — so a server that finished
-     * connecting between description-render and tool-list-fetch would leave
-     * the hint pointing at a tool the LLM no longer had access to.
-     *
-     * Always exposing the tool removes that drift: when no server is
-     * connecting, execute() returns ready=true immediately (cost ~1ms) and
-     * the tool description itself tells the LLM what it is for, so the
-     * model won't invoke it gratuitously.
-     *
-     * Default: enabled. WB sets this env var to '0' to disable.
-     */
-    isEnabled: () => Promise<boolean>;
-    execute(input: WaitForMcpServersInput, _context: RunContext<Session>): Promise<ToolResult>;
-    private getPendingServerNames;
-    private matchTargets;
-    private classifyResults;
-    private buildResult;
-    private sleep;
-}
-export { WaitForMcpServersParameters };
-export type { WaitForMcpServersInput, WaitForMcpServersOutput };

package/cli/dist-server/types/node/tools/web-fetch-tool.d.ts

@@ -1,164 +0,0 @@
-import { AuthenticationManager } from '@genie/authentication';
-import { PromptRenderer, Session } from '../../vendor/cbc-core/node/index.js';
-import { type FunctionCallItem, RunContext, ToolArg, ToolNames } from '../../vendor/cbc-shared/node/index.js';
-import { ClientInfoProvider, ProductManager } from '@genie/product';
-import { Logger } from '@genie/telemetry';
-import { z } from 'zod';
-import { GalileoService } from '../galileo';
-import { CustomHeadersProvider } from '../http';
-import { ThreatDomainChecker } from '../sandbox-cli/threat-domain-checker';
-import { type SandboxCenterIpcClient } from '../sensitive-content/sandbox-center-ipc-client-protocol';
-import { SettingsManager } from '../settings';
-import { type SandboxTelemetryReporter as ISandboxTelemetryReporter } from '../telemetry/sandbox-telemetry-protocol';
-import { BaseTool } from './base-tool';
-import { type SandboxWriteRuleGuard } from './sandbox-write-rule-guard';
-import { Tool, ToolCallArgumentRenderer, ToolResult } from './tool-protocol';
-declare const WebFetchParameters: z.ZodObject<{
-    url: z.ZodString;
-    prompt: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    url: string;
-    prompt: string;
-}, {
-    url: string;
-    prompt: string;
-}>;
-export declare class WebFetchTool extends BaseTool implements Tool {
-    protected readonly promptRenderer: PromptRenderer;
-    protected readonly logger: Logger;
-    protected readonly sandboxCenterClient?: SandboxCenterIpcClient;
-    protected readonly sandboxWriteRuleGuard?: SandboxWriteRuleGuard;
-    protected readonly productManager: ProductManager;
-    protected readonly authenticationManager: AuthenticationManager;
-    protected readonly clientInfoProvider: ClientInfoProvider;
-    protected readonly settingsManager: SettingsManager;
-    protected readonly customHeadersProvider: CustomHeadersProvider;
-    protected readonly galileoService: GalileoService;
-    protected readonly threatDomainChecker?: ThreatDomainChecker;
-    protected readonly sandboxTelemetryReporter?: ISandboxTelemetryReporter;
-    private readonly WEB_FETCH_API_PATH;
-    name: ToolNames;
-    resolveSensitiveEgress(input: z.infer<typeof WebFetchParameters>, context: RunContext<Session>): Promise<{
-        source: 'web-fetch';
-        inspectionContent: string;
-        destinationKey: string;
-    } | undefined>;
-    parameters: z.ZodObject<{
-        url: z.ZodString;
-        prompt: z.ZodString;
-    }, "strip", z.ZodTypeAny, {
-        url: string;
-        prompt: string;
-    }, {
-        url: string;
-        prompt: string;
-    }>;
-    argumentRenderer: ToolCallArgumentRenderer;
-    private static cache;
-    /**
-     * 已落审计的恶意域名拦截，键为 `sessionId + requestId + target`。
-     *
-     * 模型在同一个 turn 里换 path / query 反复访问同一个恶意域名很常见，逐次落审计会把
-     * 安全中心刷成同一条内容的重复记录。沙箱侧有 `dedupeMaliciousNetworkBlockRecords` 做同样的事，
-     * WebFetch 这条旁路缺了等价保护。静态成员按进程共享，与 `cache` 一致。
-     */
-    private static auditedMaliciousBlocks;
-    resolveNeedPermissionArgs(_runContext: RunContext, input: z.infer<typeof WebFetchParameters>, _callId?: string): ToolArg[];
-    needsApproval: (runContext: RunContext<Session>, input: z.infer<typeof WebFetchParameters>, callId?: string) => Promise<boolean>;
-    /** Auto mode classifier projection: `${url}: ${prompt}` (Claude alignment, decision D1). */
-    toAutoClassifierInput(input: unknown): string;
-    execute(params: z.infer<typeof WebFetchParameters>, context: RunContext<Session>, details?: {
-        toolCall: FunctionCallItem;
-    }): Promise<ToolResult>;
-    /**
-     * 图片 / 二进制没有可摘要文本。直接返回 Bash+Read 指引，
-     * 跳过 AI summary，也不写入缓存——同一 URL 下次可能变成普通页面。
-     */
-    private returnNonTextResourceGuidance;
-    private recordMaliciousWebsiteAudit;
-    /** Check whether the remote API is disabled via environment variable or product feature. */
-    private isRemoteApiDisabled;
-    /**
-     * Race strategy: launch remote API and local fetch concurrently.
-     * - If remote succeeds within WEB_FETCH_API_TIMEOUT_MS (20s), use remote result.
-     * - If remote fails or times out, use local fetch result (already in-flight).
-     * This eliminates sequential latency — local fetch warms up in parallel.
-     *
-     * When CODEBUDDY_DISABLE_WEB_FETCH_REMOTE_API=true, skip remote API entirely and use local fetch only.
-     */
-    private fetchWithFallback;
-    private validateParams;
-    private normalizeUrl;
-    private getCachedEntry;
-    private setCachedContent;
-    private cleanExpiredCache;
-    /**
-     * Fetch content via the backend /agenttool/v1/webfetch API which returns markdown directly.
-     * The caller owns the deadline via `abortSignal` — when triggered, both the promise rejects
-     * and the underlying socket is closed.
-     */
-    private fetchContentViaApi;
-    private resolveCurrentModelName;
-    /**
-     * Local fallback: fetch the URL directly and convert HTML to markdown using turndown.
-     */
-    private fetchAndProcessLocally;
-    /**
-     * Extract useful information from HTML meta tags when body content is empty.
-     * This is particularly useful for SPA pages where the actual content is rendered by JavaScript.
-     */
-    private extractMetaContent;
-    private fetchWithTimeout;
-    /**
-     * WebFetch 的统一 URL 放行入口。
-     *
-     * 判定层级：有序规则首命中 → 恶意库。命中 allow 则跳过恶意库；其余再查
-     * sandbox-cli/Rust 只读 SQLite，与沙箱网络请求共用同一套哈希、主域和子域匹配。
-     */
-    private assertUrlAllowed;
-    private networkTargetKey;
-    /**
-     * 恶意域名库判定：命中抛 `MaliciousWebsiteBlockedError`，其余情形静默返回。
-     *
-     * 从 `assertUrlAllowed` 拆出来，是为了让 `*` deny / default_rule 排在本检查之后。
-     * 写成一段顺序代码的话，中间那几个「不查库」的早退（没有 checker、IP 字面量、
-     * 库不可用）会连这条有序规则一起跳过，把 catch-all deny 放成通过。
-     */
-    private assertNotMaliciousDomain;
-    private processContentWithAI;
-    private createAnalysisPrompt;
-    private createFallbackPrompt;
-    private createFallbackResponse;
-    private createContentSummary;
-    /**
-     * 安全中心：网络拒绝/放行域名检查。
-     *
-     * allow/ask/deny 与是否命中 allow 一律来自 Center `decide_network`。
-     * 有序规则首命中后才查恶意库。`*` deny 在 sandbox 侧会映射成 `cfg.default_rule`，
-     * Center 带 `deferToThreatCheck`，好让恶意库先认领归因——否则 catch-all 期间
-     * 所有恶意命中都会被记成普通策略拒绝。判决两种顺序都是拦，差的只有归因。
-     *
-     * 规则同步和运行时裁决都由 Center 负责，避免 Genie 与 Sandbox 使用不同的
-     * 本地配置快照。
-     */
-    private checkNetworkPolicy;
-    private interpretCenterNetworkDecision;
-    /**
-     * Emit a structured webfetch event to Galileo. Captures:
-     *   - which fetch path won (cache / api / local fallback)
-     *   - whether AI summary was triggered
-     *   - per-branch content lengths and durations (so the dashboard can compare api vs. local)
-     *   - URL host only (no full URL — avoid PII / sensitive query strings)
-     * Failures are swallowed; telemetry must not break the tool's main flow.
-     */
-    private reportTelemetry;
-    /**
-     * Extract host + path from URL safely. Returns host/path separately so the dashboard
-     * can group by host or drill into a specific page. Querystring is intentionally dropped
-     * to avoid leaking tokens / search keywords / other PII embedded in URL params.
-     */
-    private safeUrlParts;
-    /** Truncate string to N chars to keep telemetry attribute payloads bounded. */
-    private truncate;
-}
-export {};

package/cli/dist-server/types/node/tools/web-search-tool.d.ts

@@ -1,79 +0,0 @@
-import { AuthenticationManager } from '@genie/authentication';
-import { ClientInfoProvider, ProductManager } from '@genie/product';
-import { Logger } from '@genie/telemetry';
-import type { RunContext } from '@openai/agents';
-import { z } from 'zod';
-import { type FunctionCallItem } from '../../vendor/cbc-shared/node/index.js';
-import { CustomHeadersProvider } from '../http';
-import { ThreatDomainChecker } from '../sandbox-cli/threat-domain-checker';
-import { Session } from '../../vendor/cbc-core/node/index.js';
-import { SettingsManager } from '../settings';
-import type { SandboxTelemetryReporter as ISandboxTelemetryReporter } from '../telemetry/sandbox-telemetry-protocol';
-import { BaseTool } from './base-tool';
-import { Tool, ToolCallArgumentRenderer, ToolResult } from './tool-protocol';
-import { ToolNames } from '../../vendor/cbc-shared/node/index.js';
-declare const WebSearchParameters: z.ZodObject<{
-    query: z.ZodString;
-    allowed_domains: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    blocked_domains: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-    freshness: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    query: string;
-    allowed_domains?: string[] | undefined;
-    blocked_domains?: string[] | undefined;
-    freshness?: string | undefined;
-}, {
-    query: string;
-    allowed_domains?: string[] | undefined;
-    blocked_domains?: string[] | undefined;
-    freshness?: string | undefined;
-}>;
-export declare class WebSearchTool extends BaseTool implements Tool {
-    protected readonly productManager: ProductManager;
-    protected readonly authenticationManager: AuthenticationManager;
-    protected readonly clientInfoProvider: ClientInfoProvider;
-    protected readonly settingsManager: SettingsManager;
-    protected readonly customHeadersProvider: CustomHeadersProvider;
-    protected readonly logger: Logger;
-    protected readonly threatDomainChecker?: ThreatDomainChecker;
-    protected readonly sandboxTelemetryReporter?: ISandboxTelemetryReporter;
-    private readonly WEB_SEARCH_API_PATH;
-    private readonly WEB_SEARCH_TIMEOUT_MS;
-    name: ToolNames;
-    resolveSensitiveEgress(input: z.infer<typeof WebSearchParameters>): {
-        source: 'web-search';
-        inspectionContent: string;
-        destinationKey: string;
-    } | undefined;
-    parameters: z.ZodObject<{
-        query: z.ZodString;
-        allowed_domains: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        blocked_domains: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        freshness: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        query: string;
-        allowed_domains?: string[] | undefined;
-        blocked_domains?: string[] | undefined;
-        freshness?: string | undefined;
-    }, {
-        query: string;
-        allowed_domains?: string[] | undefined;
-        blocked_domains?: string[] | undefined;
-        freshness?: string | undefined;
-    }>;
-    argumentRenderer: ToolCallArgumentRenderer;
-    aliases: string[];
-    /** Auto mode classifier projection: the search query (Claude alignment, decision D1). */
-    toAutoClassifierInput(input: unknown): string;
-    execute(params: z.infer<typeof WebSearchParameters>, _context: RunContext<Session>, _details?: {
-        toolCall: FunctionCallItem;
-    }): Promise<ToolResult>;
-    private filterUnsafeResults;
-    private recordMaliciousDomainHit;
-    private validateParams;
-    private performWebSearch;
-    private buildRequestBody;
-    private buildStructuredResult;
-    private formatSearchResults;
-}
-export {};

package/cli/dist-server/types/node/tools/webfetch-resource-kind.d.ts

@@ -1,25 +0,0 @@
-/**
- * WebFetch 只处理可读文本。图片 / 二进制资源既没有可摘要的正文，
- * 走 AI summary 还会白烧几十秒。分类与指引文案集中在这里，
- * 供工具 description 与运行时兜底共用同一套措辞。
- */
-export type WebFetchResourceKind = 'text' | 'image' | 'binary';
-export type WebFetchResourceSource = 'api' | 'local';
-export declare function normalizeContentType(contentType: string | undefined): string;
-export declare function classifyResourceKind(contentType: string | undefined): WebFetchResourceKind;
-export declare function suggestedExtensionForContentType(contentType: string | undefined): string;
-/**
- * 图片资源一旦确认，竞速必须立刻结束：远端 EdgeBrowser 对图片通常直接拒，
- * 等 20s 超时再 summary 是线上 SLA 的主要浪费。binary 不抢跑，
- * 避免把少数误标成 application/octet-stream 的 HTML 页提前掐掉。
- */
-export declare function isDecisiveNonTextResourceError(error: unknown): error is NonTextResourceError;
-export declare class NonTextResourceError extends Error {
-    readonly kind: Exclude<WebFetchResourceKind, 'text'>;
-    readonly contentType: string;
-    readonly source: WebFetchResourceSource;
-    constructor(kind: Exclude<WebFetchResourceKind, 'text'>, contentType: string, source: WebFetchResourceSource);
-}
-export declare function buildNonTextResourceGuidance(url: string, contentType: string | undefined, kind: Exclude<WebFetchResourceKind, 'text'>): string;
-/** Best-effort: 释放未消费的响应体，避免把几 MB 二进制读进内存再丢掉。 */
-export declare function discardResponseBody(response: Response): Promise<void>;

package/cli/dist-server/types/node/tools/wechat-reply-tool.d.ts

@@ -1,43 +0,0 @@
-/**
- * WechatReply Tool
- *
- * Allows the AI to send replies back to WeChat users via the WechatChannelBridge.
- * Dynamically enabled/disabled based on WeChat connection status.
- */
-import { z } from 'zod';
-import type { RunContext } from '../../vendor/cbc-shared/node/index.js';
-import type { Session } from '../../vendor/cbc-core/node/index.js';
-import { BaseTool } from './base-tool';
-import { Tool, type ToolResult } from './tool-protocol';
-export declare class WechatReplyTool extends BaseTool implements Tool {
-    name: string;
-    description: string;
-    needsApproval: boolean;
-    /**
-     * Only enabled when WeChat is connected.
-     * Checks WechatClient status dynamically at each agent run.
-     */
-    isEnabled: () => boolean;
-    parameters: z.ZodObject<{
-        chat_id: z.ZodString;
-        text: z.ZodOptional<z.ZodString>;
-        file_path: z.ZodOptional<z.ZodString>;
-        context_token: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        chat_id: string;
-        text?: string | undefined;
-        file_path?: string | undefined;
-        context_token?: string | undefined;
-    }, {
-        chat_id: string;
-        text?: string | undefined;
-        file_path?: string | undefined;
-        context_token?: string | undefined;
-    }>;
-    execute(input: {
-        chat_id: string;
-        text?: string;
-        file_path?: string;
-        context_token?: string;
-    }, context?: RunContext<Session>): Promise<ToolResult>;
-}