@theokit/sdk-tools 0.12.0 → 0.14.0

package/dist/index.d.cts

@@ -1,4 +1,5 @@
 import { CustomTool, ConfigurationError } from '@theokit/sdk';
+import { InteractiveProvider } from '@theokit/sdk/interactive';
 import { FilesystemProvider } from '@theokit/sdk/filesystem';
 
 /**
@@ -153,6 +154,33 @@ interface CreateGlobToolOptions {
 }
 declare function createGlobTool(opts: CreateGlobToolOptions): CustomTool;
 
+/**
+ * `interactive_shell` + `write_stdin` — built-in tools for driving an interactive
+ * session (a REPL, `git rebase -i`, any command that PROMPTS for stdin).
+ *
+ * Surface-agnostic by construction: both tools depend on an INJECTED
+ * `InteractiveProvider` (`@theokit/sdk/interactive`) exactly as `read_file`
+ * depends on `FilesystemProvider`. The HOST supplies the backend — a local
+ * `@theokit/sdk-pty` (terminal), a container/E2B backend (cluster/web), or a
+ * Tauri backend (desktop) — so the SAME tool runs on every theokit surface with
+ * NO native dependency here. When no backend is injected (or it cannot allocate
+ * a session) the tool returns `{ ok: false, error: 'interactive_unavailable' }`
+ * and the agent falls back to non-interactive exec.
+ *
+ * Return shapes (always a JSON string):
+ *   interactive_shell → `{ ok: true, session_id, output }` | `{ ok: false, error }`
+ *   write_stdin       → `{ ok: true, output, alive }`       | `{ ok: false, error }`
+ */
+
+interface CreateInteractiveShellToolOptions {
+    /** The interactive backend, or a per-request resolver of one (injected — never a direct native dep). */
+    interactive: InteractiveProvider<unknown>;
+}
+/** Start an interactive session; returns a `session_id` to drive with `write_stdin`. */
+declare function createInteractiveShellTool(opts: CreateInteractiveShellToolOptions): CustomTool;
+/** Write to a live interactive session's stdin and read the output it produces. */
+declare function createWriteStdinTool(opts: CreateInteractiveShellToolOptions): CustomTool;
+
 /**
  * Composable command-permission policy layer (M3-6).
  *
@@ -182,6 +210,34 @@ declare function commandDenialReason(command: string, policies: CommandPolicy[])
 /** `true` when no policy denies `command` (an empty policy array allows everything). */
 declare function isCommandAllowed(command: string, policies: CommandPolicy[]): boolean;
 
+/**
+ * Context-tolerant single-occurrence text matching (`seek_sequence` parity, ported
+ * from the AgentBuilder Codex clone, M10/M13). Where a naive `edit_file` matches
+ * `old_string` byte-for-byte (or with a single whitespace-normalized fallback),
+ * this matcher is safe AND forgiving:
+ *
+ *   Stage 1 — exact byte substring, with an **ambiguity guard**: if the target
+ *     appears more than once it throws instead of silently editing the first hit
+ *     (a too-short `old_string` editing the wrong location is the classic footgun).
+ *   Stage 2 — line-based match down a **strictness ladder** (exact → rstrip → trim
+ *     → unicode-normalize), stopping at the first rung that yields exactly ONE
+ *     match; a rung matching 2+ positions throws (ambiguous), never picks one.
+ *
+ * Pure. Preserves the file's CRLF/LF style on the replaced region. Throws typed
+ * {@link ContextMatchError} (`empty | ambiguous | not_found`) so the caller maps to
+ * its own `{ ok: false, error }` shape.
+ */
+type ContextMatchReason = "empty" | "ambiguous" | "not_found";
+declare class ContextMatchError extends Error {
+    readonly reason: ContextMatchReason;
+    constructor(reason: ContextMatchReason, message: string);
+}
+/**
+ * Return `content` with the single occurrence of `find` replaced by `replace`, using the two-stage
+ * context-tolerant matcher. Throws {@link ContextMatchError} on empty/ambiguous/not-found.
+ */
+declare function replaceUnique(content: string, find: string, replace: string): string;
+
 /**
  * SSRF guard for network tools (M3-1).
  *
@@ -975,4 +1031,4 @@ interface CreateWriteFileToolOptions {
 }
 declare function createWriteFileTool(opts: CreateWriteFileToolOptions): CustomTool;
 
-export { CatastrophicCommandError, type CommandPolicy, type CreateApplyPatchToolOptions, type CreateBraveWebSearchAdapterOptions, type CreateEditFileToolOptions, type CreateGenericHttpSearchAdapterOptions, type CreateGitDiffToolOptions, type CreateGlobToolOptions, type CreateListDirToolOptions, type CreateReadFileToolOptions, type CreateRunVitestToolOptions, type CreateSearchTextToolOptions, type CreateShellToolOptions, type CreateWebFetchToolOptions, type CreateWebSearchToolOptions, type CreateWriteFileToolOptions, DEFAULT_TOOL_GUIDANCE, type EnvContextOptions, type PlanModeTool, type PlanModeToolOptions, type PlanModeToolWithStore, type PlanNode, type QuestionTool, type QuestionToolOptions, ReadTracker, ReasoningTools, RedirectBlockedError, type RepoMapOptions, type ResolveAndScreenOptions, type ScreenedFetchOptions, type SessionArtifactStore, type SessionArtifactStoreOptions, SsrfBlockedError, type TodoItem, type TodolistTool, type ToolGuidanceMap, type TruncationOptions, type TruncationResult, type VitestSummary, type WebSearchCallback, type WebSearchResult, buildEnvContext, buildRepoMap, catastrophicShellReason, commandDenialReason, createApplyPatchTool, createBraveWebSearchAdapter, createEditFileTool, createGenericHttpSearchAdapter, createGitDiffTool, createGlobTool, createListDirTool, createPlanModeTool, createQuestionTool, createReadFileTool, createRunVitestTool, createSearchTextTool, createSessionArtifactStore, createShellTool, createTodolistTool, createWebFetchTool, createWebSearchTool, createWriteFileTool, denyCatastrophicCommands, formatCode, formatDiff, formatError, formatFileList, injectGuidance, isBlockedIp, isCommandAllowed, renderToolList, resolveAndScreen, screenedFetch, todoItemsToPlanNodes, truncateOutput, withDefaultGuidance, withDescription, withName, withShellExitGuidance, withToolResultGuidance };
+export { CatastrophicCommandError, type CommandPolicy, ContextMatchError, type ContextMatchReason, type CreateApplyPatchToolOptions, type CreateBraveWebSearchAdapterOptions, type CreateEditFileToolOptions, type CreateGenericHttpSearchAdapterOptions, type CreateGitDiffToolOptions, type CreateGlobToolOptions, type CreateInteractiveShellToolOptions, type CreateListDirToolOptions, type CreateReadFileToolOptions, type CreateRunVitestToolOptions, type CreateSearchTextToolOptions, type CreateShellToolOptions, type CreateWebFetchToolOptions, type CreateWebSearchToolOptions, type CreateWriteFileToolOptions, DEFAULT_TOOL_GUIDANCE, type EnvContextOptions, type PlanModeTool, type PlanModeToolOptions, type PlanModeToolWithStore, type PlanNode, type QuestionTool, type QuestionToolOptions, ReadTracker, ReasoningTools, RedirectBlockedError, type RepoMapOptions, type ResolveAndScreenOptions, type ScreenedFetchOptions, type SessionArtifactStore, type SessionArtifactStoreOptions, SsrfBlockedError, type TodoItem, type TodolistTool, type ToolGuidanceMap, type TruncationOptions, type TruncationResult, type VitestSummary, type WebSearchCallback, type WebSearchResult, buildEnvContext, buildRepoMap, catastrophicShellReason, commandDenialReason, createApplyPatchTool, createBraveWebSearchAdapter, createEditFileTool, createGenericHttpSearchAdapter, createGitDiffTool, createGlobTool, createInteractiveShellTool, createListDirTool, createPlanModeTool, createQuestionTool, createReadFileTool, createRunVitestTool, createSearchTextTool, createSessionArtifactStore, createShellTool, createTodolistTool, createWebFetchTool, createWebSearchTool, createWriteFileTool, createWriteStdinTool, denyCatastrophicCommands, formatCode, formatDiff, formatError, formatFileList, injectGuidance, isBlockedIp, isCommandAllowed, renderToolList, replaceUnique, resolveAndScreen, screenedFetch, todoItemsToPlanNodes, truncateOutput, withDefaultGuidance, withDescription, withName, withShellExitGuidance, withToolResultGuidance };

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 import { CustomTool, ConfigurationError } from '@theokit/sdk';
+import { InteractiveProvider } from '@theokit/sdk/interactive';
 import { FilesystemProvider } from '@theokit/sdk/filesystem';
 
 /**
@@ -153,6 +154,33 @@ interface CreateGlobToolOptions {
 }
 declare function createGlobTool(opts: CreateGlobToolOptions): CustomTool;
 
+/**
+ * `interactive_shell` + `write_stdin` — built-in tools for driving an interactive
+ * session (a REPL, `git rebase -i`, any command that PROMPTS for stdin).
+ *
+ * Surface-agnostic by construction: both tools depend on an INJECTED
+ * `InteractiveProvider` (`@theokit/sdk/interactive`) exactly as `read_file`
+ * depends on `FilesystemProvider`. The HOST supplies the backend — a local
+ * `@theokit/sdk-pty` (terminal), a container/E2B backend (cluster/web), or a
+ * Tauri backend (desktop) — so the SAME tool runs on every theokit surface with
+ * NO native dependency here. When no backend is injected (or it cannot allocate
+ * a session) the tool returns `{ ok: false, error: 'interactive_unavailable' }`
+ * and the agent falls back to non-interactive exec.
+ *
+ * Return shapes (always a JSON string):
+ *   interactive_shell → `{ ok: true, session_id, output }` | `{ ok: false, error }`
+ *   write_stdin       → `{ ok: true, output, alive }`       | `{ ok: false, error }`
+ */
+
+interface CreateInteractiveShellToolOptions {
+    /** The interactive backend, or a per-request resolver of one (injected — never a direct native dep). */
+    interactive: InteractiveProvider<unknown>;
+}
+/** Start an interactive session; returns a `session_id` to drive with `write_stdin`. */
+declare function createInteractiveShellTool(opts: CreateInteractiveShellToolOptions): CustomTool;
+/** Write to a live interactive session's stdin and read the output it produces. */
+declare function createWriteStdinTool(opts: CreateInteractiveShellToolOptions): CustomTool;
+
 /**
  * Composable command-permission policy layer (M3-6).
  *
@@ -182,6 +210,34 @@ declare function commandDenialReason(command: string, policies: CommandPolicy[])
 /** `true` when no policy denies `command` (an empty policy array allows everything). */
 declare function isCommandAllowed(command: string, policies: CommandPolicy[]): boolean;
 
+/**
+ * Context-tolerant single-occurrence text matching (`seek_sequence` parity, ported
+ * from the AgentBuilder Codex clone, M10/M13). Where a naive `edit_file` matches
+ * `old_string` byte-for-byte (or with a single whitespace-normalized fallback),
+ * this matcher is safe AND forgiving:
+ *
+ *   Stage 1 — exact byte substring, with an **ambiguity guard**: if the target
+ *     appears more than once it throws instead of silently editing the first hit
+ *     (a too-short `old_string` editing the wrong location is the classic footgun).
+ *   Stage 2 — line-based match down a **strictness ladder** (exact → rstrip → trim
+ *     → unicode-normalize), stopping at the first rung that yields exactly ONE
+ *     match; a rung matching 2+ positions throws (ambiguous), never picks one.
+ *
+ * Pure. Preserves the file's CRLF/LF style on the replaced region. Throws typed
+ * {@link ContextMatchError} (`empty | ambiguous | not_found`) so the caller maps to
+ * its own `{ ok: false, error }` shape.
+ */
+type ContextMatchReason = "empty" | "ambiguous" | "not_found";
+declare class ContextMatchError extends Error {
+    readonly reason: ContextMatchReason;
+    constructor(reason: ContextMatchReason, message: string);
+}
+/**
+ * Return `content` with the single occurrence of `find` replaced by `replace`, using the two-stage
+ * context-tolerant matcher. Throws {@link ContextMatchError} on empty/ambiguous/not-found.
+ */
+declare function replaceUnique(content: string, find: string, replace: string): string;
+
 /**
  * SSRF guard for network tools (M3-1).
  *
@@ -975,4 +1031,4 @@ interface CreateWriteFileToolOptions {
 }
 declare function createWriteFileTool(opts: CreateWriteFileToolOptions): CustomTool;
 
-export { CatastrophicCommandError, type CommandPolicy, type CreateApplyPatchToolOptions, type CreateBraveWebSearchAdapterOptions, type CreateEditFileToolOptions, type CreateGenericHttpSearchAdapterOptions, type CreateGitDiffToolOptions, type CreateGlobToolOptions, type CreateListDirToolOptions, type CreateReadFileToolOptions, type CreateRunVitestToolOptions, type CreateSearchTextToolOptions, type CreateShellToolOptions, type CreateWebFetchToolOptions, type CreateWebSearchToolOptions, type CreateWriteFileToolOptions, DEFAULT_TOOL_GUIDANCE, type EnvContextOptions, type PlanModeTool, type PlanModeToolOptions, type PlanModeToolWithStore, type PlanNode, type QuestionTool, type QuestionToolOptions, ReadTracker, ReasoningTools, RedirectBlockedError, type RepoMapOptions, type ResolveAndScreenOptions, type ScreenedFetchOptions, type SessionArtifactStore, type SessionArtifactStoreOptions, SsrfBlockedError, type TodoItem, type TodolistTool, type ToolGuidanceMap, type TruncationOptions, type TruncationResult, type VitestSummary, type WebSearchCallback, type WebSearchResult, buildEnvContext, buildRepoMap, catastrophicShellReason, commandDenialReason, createApplyPatchTool, createBraveWebSearchAdapter, createEditFileTool, createGenericHttpSearchAdapter, createGitDiffTool, createGlobTool, createListDirTool, createPlanModeTool, createQuestionTool, createReadFileTool, createRunVitestTool, createSearchTextTool, createSessionArtifactStore, createShellTool, createTodolistTool, createWebFetchTool, createWebSearchTool, createWriteFileTool, denyCatastrophicCommands, formatCode, formatDiff, formatError, formatFileList, injectGuidance, isBlockedIp, isCommandAllowed, renderToolList, resolveAndScreen, screenedFetch, todoItemsToPlanNodes, truncateOutput, withDefaultGuidance, withDescription, withName, withShellExitGuidance, withToolResultGuidance };
+export { CatastrophicCommandError, type CommandPolicy, ContextMatchError, type ContextMatchReason, type CreateApplyPatchToolOptions, type CreateBraveWebSearchAdapterOptions, type CreateEditFileToolOptions, type CreateGenericHttpSearchAdapterOptions, type CreateGitDiffToolOptions, type CreateGlobToolOptions, type CreateInteractiveShellToolOptions, type CreateListDirToolOptions, type CreateReadFileToolOptions, type CreateRunVitestToolOptions, type CreateSearchTextToolOptions, type CreateShellToolOptions, type CreateWebFetchToolOptions, type CreateWebSearchToolOptions, type CreateWriteFileToolOptions, DEFAULT_TOOL_GUIDANCE, type EnvContextOptions, type PlanModeTool, type PlanModeToolOptions, type PlanModeToolWithStore, type PlanNode, type QuestionTool, type QuestionToolOptions, ReadTracker, ReasoningTools, RedirectBlockedError, type RepoMapOptions, type ResolveAndScreenOptions, type ScreenedFetchOptions, type SessionArtifactStore, type SessionArtifactStoreOptions, SsrfBlockedError, type TodoItem, type TodolistTool, type ToolGuidanceMap, type TruncationOptions, type TruncationResult, type VitestSummary, type WebSearchCallback, type WebSearchResult, buildEnvContext, buildRepoMap, catastrophicShellReason, commandDenialReason, createApplyPatchTool, createBraveWebSearchAdapter, createEditFileTool, createGenericHttpSearchAdapter, createGitDiffTool, createGlobTool, createInteractiveShellTool, createListDirTool, createPlanModeTool, createQuestionTool, createReadFileTool, createRunVitestTool, createSearchTextTool, createSessionArtifactStore, createShellTool, createTodolistTool, createWebFetchTool, createWebSearchTool, createWriteFileTool, createWriteStdinTool, denyCatastrophicCommands, formatCode, formatDiff, formatError, formatFileList, injectGuidance, isBlockedIp, isCommandAllowed, renderToolList, replaceUnique, resolveAndScreen, screenedFetch, todoItemsToPlanNodes, truncateOutput, withDefaultGuidance, withDescription, withName, withShellExitGuidance, withToolResultGuidance };

package/dist/index.js

@@ -6,6 +6,7 @@ import { existsSync, statSync, mkdirSync, writeFileSync, realpathSync, readFileS
 import { safeFilenameForId, safePathJoin as safePathJoin$1 } from '@theokit/sdk/path-safety';
 import { replaceFileAtomic } from '@theokit/sdk/persistence';
 import { spawn } from 'child_process';
+import { resolveInteractive, InteractiveUnavailableError, NoSuchSessionError } from '@theokit/sdk/interactive';
 import { lookup } from 'dns/promises';
 import { isIP } from 'net';
 import { resolveFilesystem, FileNotFoundError, FilesystemSecurityError, FilesystemReadOnlyError, StaleFileError, FilesystemError } from '@theokit/sdk/filesystem';
@@ -263,6 +264,90 @@ function createSessionArtifactStore(options) {
   }
   return { write, read, has, list, path };
 }
+
+// src/internal/context-match.ts
+var ContextMatchError = class extends Error {
+  reason;
+  constructor(reason, message) {
+    super(message);
+    this.name = "ContextMatchError";
+    this.reason = reason;
+  }
+};
+function normalizeUnicode(s) {
+  return s.replace(/[‐-―−]/g, "-").replace(/[‘-‛]/g, "'").replace(/[“-‟]/g, '"').replace(/[ -   　]/g, " ");
+}
+var LINE_MATCH_LADDER = [
+  (s) => s,
+  // exact
+  (s) => s.replace(/\s+$/, ""),
+  // rstrip (ignore trailing whitespace)
+  (s) => s.trim(),
+  // trim (ignore leading + trailing)
+  (s) => normalizeUnicode(s).trim()
+  // unicode + trim (loosest)
+];
+function matchesAt(lines, pattern, i, norm) {
+  for (let p = 0; p < pattern.length; p++) {
+    const lineAt = lines[i + p];
+    const patAt = pattern[p];
+    if (lineAt === void 0 || patAt === void 0 || norm(lineAt) !== norm(patAt)) return false;
+  }
+  return true;
+}
+function findHits(lines, pattern, norm) {
+  const hits = [];
+  for (let i = 0; i + pattern.length <= lines.length; i++) {
+    if (matchesAt(lines, pattern, i, norm)) hits.push(i);
+  }
+  return hits;
+}
+function seekUniqueLineMatch(lines, pattern, find) {
+  if (pattern.length === 0 || pattern.length > lines.length) return null;
+  for (const norm of LINE_MATCH_LADDER) {
+    const hits = findHits(lines, pattern, norm);
+    if (hits.length === 1) return hits[0] ?? null;
+    if (hits.length > 1) {
+      throw new ContextMatchError(
+        "ambiguous",
+        `target text is ambiguous (multiple matches); include more context:
+${find}`
+      );
+    }
+  }
+  return null;
+}
+function replaceUnique(content, find, replace) {
+  if (find === "") {
+    throw new ContextMatchError(
+      "empty",
+      "empty find is not a valid target; provide the text to replace"
+    );
+  }
+  const first = content.indexOf(find);
+  if (first !== -1) {
+    if (content.indexOf(find, first + 1) !== -1) {
+      throw new ContextMatchError(
+        "ambiguous",
+        `target text is ambiguous (multiple matches); include more context:
+${find}`
+      );
+    }
+    return content.slice(0, first) + replace + content.slice(first + find.length);
+  }
+  const lines = content.split("\n");
+  const at = seekUniqueLineMatch(lines, find.split("\n"), find);
+  if (at === null) {
+    throw new ContextMatchError("not_found", `target text not found:
+${find}`);
+  }
+  const patternLen = find.split("\n").length;
+  const matchedCrlf = patternLen > 0 && lines.slice(at, at + patternLen).every((l) => l.endsWith("\r"));
+  const replaceLines = matchedCrlf ? replace.split("\n").map((l) => l.endsWith("\r") ? l : `${l}\r`) : replace.split("\n");
+  return [...lines.slice(0, at), ...replaceLines, ...lines.slice(at + patternLen)].join("\n");
+}
+
+// src/edit-file.ts
 function createEditFileTool(opts) {
   const { projectRoot } = opts;
   return Tool.create({
@@ -304,26 +389,36 @@ function createEditFileTool(opts) {
       const exactIdx = content.indexOf(old_string);
       if (exactIdx !== -1) {
         await copyFile(absolutePath, `${absolutePath}.bak`);
-        const result2 = content.slice(0, exactIdx) + new_string + content.slice(exactIdx + old_string.length);
-        await writeFile(absolutePath, result2, "utf-8");
+        const result = content.slice(0, exactIdx) + new_string + content.slice(exactIdx + old_string.length);
+        await writeFile(absolutePath, result, "utf-8");
         return JSON.stringify({ ok: true, replacements: 1 });
       }
       const normalizedContent = normalizeWhitespace(content);
       const normalizedOld = normalizeWhitespace(old_string);
       const normalizedIdx = normalizedContent.indexOf(normalizedOld);
-      if (normalizedIdx === -1) {
-        return JSON.stringify({ ok: false, error: "no_match", path });
+      if (normalizedIdx !== -1) {
+        const span = findOriginalSpan(
+          content,
+          normalizedContent,
+          normalizedIdx,
+          normalizedOld.length
+        );
+        await copyFile(absolutePath, `${absolutePath}.bak`);
+        const result = content.slice(0, span.start) + new_string + content.slice(span.end);
+        await writeFile(absolutePath, result, "utf-8");
+        return JSON.stringify({ ok: true, replacements: 1 });
+      }
+      try {
+        const result = replaceUnique(content, old_string, new_string);
+        await copyFile(absolutePath, `${absolutePath}.bak`);
+        await writeFile(absolutePath, result, "utf-8");
+        return JSON.stringify({ ok: true, replacements: 1 });
+      } catch (err) {
+        if (err instanceof ContextMatchError) {
+          return JSON.stringify({ ok: false, error: "no_match", path });
+        }
+        throw err;
       }
-      const span = findOriginalSpan(
-        content,
-        normalizedContent,
-        normalizedIdx,
-        normalizedOld.length
-      );
-      await copyFile(absolutePath, `${absolutePath}.bak`);
-      const result = content.slice(0, span.start) + new_string + content.slice(span.end);
-      await writeFile(absolutePath, result, "utf-8");
-      return JSON.stringify({ ok: true, replacements: 1 });
     }
   });
 }
@@ -595,6 +690,60 @@ function globToRegex(pattern) {
   }
   return new RegExp(`^${regexStr}$`);
 }
+function toErrorJson(err) {
+  if (err instanceof InteractiveUnavailableError) {
+    return JSON.stringify({ ok: false, error: "interactive_unavailable" });
+  }
+  if (err instanceof NoSuchSessionError) {
+    return JSON.stringify({ ok: false, error: "no_such_session" });
+  }
+  throw err;
+}
+function createInteractiveShellTool(opts) {
+  const { interactive } = opts;
+  return Tool.create({
+    name: "interactive_shell",
+    description: "Start an interactive shell session for a command that PROMPTS for input or is a REPL (python, node, `git rebase -i`, a `read` prompt) \u2014 NOT for one-shot commands (use shell_exec). Returns a session_id; drive it with write_stdin, reading the incremental output each step. Returns { ok, session_id, output } or { ok: false, error }.",
+    inputSchema: z.object({
+      command: z.string().min(1).describe("Command to run interactively, e.g. 'python3' or 'bash -i'."),
+      yield_time_ms: z.number().int().positive().optional().describe("How long to wait for startup output before returning (clamped by the backend).")
+    }),
+    handler: async ({ command, yield_time_ms }, ctx) => {
+      try {
+        const backend = await resolveInteractive(interactive, ctx ?? {});
+        const { sessionId, output } = await backend.startInteractive(command, {
+          yieldMs: yield_time_ms
+        });
+        return JSON.stringify({ ok: true, session_id: sessionId, output });
+      } catch (err) {
+        return toErrorJson(err);
+      }
+    }
+  });
+}
+function createWriteStdinTool(opts) {
+  const { interactive } = opts;
+  return Tool.create({
+    name: "write_stdin",
+    description: "Write input to a live interactive session (from interactive_shell) and read the output it produces during the wait window. Include a trailing newline to submit a line. Returns { ok, output, alive } (alive:false means the session exited) or { ok: false, error }.",
+    inputSchema: z.object({
+      session_id: z.string().min(1).describe("The session_id returned by interactive_shell."),
+      input: z.string().describe("Text to write to stdin (add a trailing '\\n' to submit a line)."),
+      yield_time_ms: z.number().int().positive().optional().describe("How long to wait for output before returning (clamped by the backend).")
+    }),
+    handler: async ({ session_id, input, yield_time_ms }, ctx) => {
+      try {
+        const backend = await resolveInteractive(interactive, ctx ?? {});
+        const { output, alive } = await backend.writeStdin(session_id, input, {
+          yieldMs: yield_time_ms
+        });
+        return JSON.stringify({ ok: true, output, alive });
+      } catch (err) {
+        return toErrorJson(err);
+      }
+    }
+  });
+}
 var CatastrophicCommandError = class extends ConfigurationError {
   name = "CatastrophicCommandError";
   constructor(reason) {
@@ -2247,6 +2396,6 @@ async function isBinaryFile(absolutePath) {
   }
 }
 
-export { CatastrophicCommandError, DEFAULT_TOOL_GUIDANCE, ReadTracker, ReasoningTools, RedirectBlockedError, SsrfBlockedError, buildEnvContext, buildRepoMap, catastrophicShellReason, commandDenialReason, createApplyPatchTool, createBraveWebSearchAdapter, createEditFileTool, createGenericHttpSearchAdapter, createGitDiffTool, createGlobTool, createListDirTool, createPlanModeTool, createQuestionTool, createReadFileTool, createRunVitestTool, createSearchTextTool, createSessionArtifactStore, createShellTool, createTodolistTool, createWebFetchTool, createWebSearchTool, createWriteFileTool, denyCatastrophicCommands, formatCode, formatDiff, formatError, formatFileList, injectGuidance, isBlockedIp, isCommandAllowed, renderToolList, resolveAndScreen, screenedFetch, todoItemsToPlanNodes, truncateOutput, withDefaultGuidance, withDescription, withName, withShellExitGuidance, withToolResultGuidance };
+export { CatastrophicCommandError, ContextMatchError, DEFAULT_TOOL_GUIDANCE, ReadTracker, ReasoningTools, RedirectBlockedError, SsrfBlockedError, buildEnvContext, buildRepoMap, catastrophicShellReason, commandDenialReason, createApplyPatchTool, createBraveWebSearchAdapter, createEditFileTool, createGenericHttpSearchAdapter, createGitDiffTool, createGlobTool, createInteractiveShellTool, createListDirTool, createPlanModeTool, createQuestionTool, createReadFileTool, createRunVitestTool, createSearchTextTool, createSessionArtifactStore, createShellTool, createTodolistTool, createWebFetchTool, createWebSearchTool, createWriteFileTool, createWriteStdinTool, denyCatastrophicCommands, formatCode, formatDiff, formatError, formatFileList, injectGuidance, isBlockedIp, isCommandAllowed, renderToolList, replaceUnique, resolveAndScreen, screenedFetch, todoItemsToPlanNodes, truncateOutput, withDefaultGuidance, withDescription, withName, withShellExitGuidance, withToolResultGuidance };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map