@tianshu-ai/tianshu 0.3.0

package/plugins/microsandbox/dist/tools/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../src/tools/build.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,EAAE;AACF,wCAAwC;AACxC,EAAE;AACF,mEAAmE;AACnE,8DAA8D;AAC9D,4CAA4C;AAC5C,mEAAmE;AACnE,8DAA8D;AAC9D,kEAAkE;AAClE,oEAAoE;AACpE,oBAAoB;AACpB,gEAAgE;AAChE,mEAAmE;AACnE,6DAA6D;AAC7D,oEAAoE;AACpE,8DAA8D;AAE9D,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EACL,WAAW,EACX,QAAQ,GAGT,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,cAAc,GACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,gBAAgB,GAEjB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,GAEnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,WAAW,EACX,WAAW,EACX,YAAY,GAEb,MAAM,qBAAqB,CAAC;AAE7B,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAEtD,kEAAkE;AAElE,SAAS,kBAAkB,CAAC,GAAqB;IAC/C,6DAA6D;IAC7D,+CAA+C;IAC/C,OAAO,IAAI,CAAC,IAAI,CACd,GAAG,CAAC,aAAa,EACjB,SAAS,EACT,GAAG,CAAC,QAAQ,EACZ,WAAW,CACZ,CAAC;AACJ,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;IACrB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,CACL,GAAG,CAAC,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG;QAChE,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CACnE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,GAAqB,EACrB,OAAe;IAEf,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,KAAK,EAAE,qBAAqB,OAAO,qBAAqB,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,KAAK,EAAE,4BAA4B,OAAO,EAAE,EAAE,CAAC;QAC1D,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IAC9D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,gBAAgB;YAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QACnE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,kEAAkE;AAElE,MAAM,CAAC,MAAM,gBAAgB,GAAc;IACzC,MAAM,EAAE;QACN,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE;;;;;;;;;;;;;;;;;;;;;;;;8EAwB6D;QAC1E,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,IAAI,CAAC,QAAQ,CACtB,IAAI,CAAC,MAAM,CAAC;gBACV,WAAW,EAAE,iEAAiE,uBAAuB,IAAI;aAC1G,CAAC,CACH;SACF,CAAC;KACH;IAED,KAAK,CAAC,SAAS,CAAC,GAAG;QACjB,OAAO,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG;QACrB,MAAM,QAAQ,GAAK,IAAgC,CAAC,SAAoB;YACtE,IAAI,uBAAuB,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,OAAO,IAAI,MAAM;YAAE,OAAO,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAExD,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,WAAW,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAEtC,wDAAwD;QACxD,8DAA8D;QAC9D,+DAA+D;QAC/D,+DAA+D;QAC/D,4DAA4D;QAC5D,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE;YAC7B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC;gBACjC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,WAAW;gBACX,OAAO;gBACP,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,YAAY,EAAE,KAAK;gBACnB,KAAK;aACN,CAAC,CAAC;YACH,MAAM,IAAI,GAAkB;gBAC1B,OAAO;gBACP,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACjC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,eAAe,EAAE,MAAM,CAAC,UAAU;aACnC,CAAC;YACF,MAAM,kBAAkB,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAChD,OAAO,QAAQ,CACb,SAAS,MAAM,CAAC,YAAY,OAAO,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;gBAC3E,wBAAwB,OAAO,sDAAsD;gBACrF,oBAAoB,MAAM,CAAC,OAAO,EAAE,EACtC,IAAI,CACL,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,gBAAgB,EAAE,CAAC;gBACpC,yDAAyD;gBACzD,2DAA2D;gBAC3D,4DAA4D;gBAC5D,6DAA6D;gBAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvC,OAAO,WAAW,CAChB,iBAAiB,GAAG,CAAC,OAAO,MAAM;oBAChC,mBAAmB,GAAG,CAAC,MAAM,IAAI;oBACjC,2BAA2B,IAAI,EAAE,EACnC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CACtC,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,WAAW,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;CACF,CAAC;AAEF,kEAAkE;AAElE,MAAM,CAAC,MAAM,qBAAqB,GAAc;IAC9C,MAAM,EAAE;QACN,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE;;sCAEqB;QAClC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;KAC5B;IAED,KAAK,CAAC,SAAS,CAAC,GAAG;QACjB,OAAO,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClC,QAAQ,EAAE,CAAC,CAAC,OAAO;YACnB,aAAa,EAAE,CAAC,CAAC,YAAY;YAC7B,UAAU,EAAE,CAAC,CAAC,SAAS;YACvB,QAAQ,EAAE,CAAC,CAAC,OAAO;YACnB,WAAW,EAAE,CAAC,CAAC,UAAU;YACzB,gBAAgB,EAAE,CAAC,CAAC,eAAe;YACnC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK;SACrE,CAAC,CAAC,CAAC;QACJ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,QAAQ,CAAC,+CAA+C,EAAE;gBAC/D,MAAM,EAAE,EAAE;gBACV,SAAS,EAAE,OAAO,EAAE,YAAY,IAAI,IAAI;aACzC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GACX,GAAG,QAAQ,CAAC,MAAM,sBAAsB,OAAO,EAAE,YAAY,IAAI,QAAQ,IAAI;YAC7E,QAAQ;iBACL,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CACvG;iBACA,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,OAAO,QAAQ,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3F,CAAC;CACF,CAAC;AAEF,kEAAkE;AAElE,MAAM,CAAC,MAAM,mBAAmB,GAAc;IAC5C,MAAM,EAAE;QACN,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE;;;;;;uDAMsC;QACnD,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC;gBACpB,WAAW,EACT,oHAAoH;aACvH,CAAC;SACH,CAAC;KACH;IAED,KAAK,CAAC,SAAS,CAAC,GAAG;QACjB,OAAO,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG;QACrB,MAAM,OAAO,GAAG,MAAM,CAAE,IAA+B,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,sBAAsB,CAAC,CAAC;QAEzD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,WAAW,CAChB,UAAU,OAAO,4EAA4E,CAC9F,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,WAAW,CAChB,aAAa,IAAI,CAAC,YAAY,gEAAgE,CAC/F,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,OAAO,GAAmB;YAC9B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,2DAA2D;YAC3D,2DAA2D;YAC3D,kDAAkD;YAClD,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,WAAW,EAAE,GAAG,CAAC,MAAM;SACxB,CAAC;QACF,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACnC,OAAO,QAAQ,CACb,sBAAsB,IAAI,CAAC,YAAY,qDAAqD,EAC5F,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAC7C,CAAC;IACJ,CAAC;CACF,CAAC"}

package/plugins/microsandbox/dist/tools/index.d.ts

@@ -0,0 +1,9 @@
+import type { AgentTool } from "@tianshu/plugin-sdk";
+export { BuildSandboxTool, ListSandboxBuildsTool, UseSandboxBuildTool, } from "./build.js";
+export { makeBrowserToolset } from "./browser.js";
+export declare const ExecTool: AgentTool;
+export declare const ResetSandboxTool: AgentTool;
+export declare const GetSandboxStatusTool: AgentTool;
+export declare const UpdateSandboxConfigTool: AgentTool;
+export declare const BrowserHealthCheckTool: AgentTool;
+//# sourceMappingURL=index.d.ts.map

package/plugins/microsandbox/dist/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EACV,SAAS,EAKV,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAqBlD,eAAO,MAAM,QAAQ,EAAE,SAsJtB,CAAC;AAgDF,eAAO,MAAM,gBAAgB,EAAE,SAsC9B,CAAC;AAIF,eAAO,MAAM,oBAAoB,EAAE,SA4BlC,CAAC;AAcF,eAAO,MAAM,uBAAuB,EAAE,SA6FrC,CAAC;AA+BF,eAAO,MAAM,sBAAsB,EAAE,SAiCpC,CAAC"}

package/plugins/microsandbox/dist/tools/index.js

@@ -0,0 +1,430 @@
+// Agent tools the microsandbox plugin contributes.
+//
+// Each tool is a self-contained `AgentTool` (schema + execute +
+// optional available()). The plugin's server.ts wires them into
+// `exports.tools` keyed by manifest's `contributes.tools[].module`.
+//
+// `available()` only matters for `exec`: ADR-0004 §10 says we
+// should NOT advertise exec to the model when the runner is in
+// `state: error` (e.g. nullable runner). The other three tools
+// (reset_sandbox / get_sandbox_status / update_sandbox_config)
+// stay visible because they're exactly how the agent recovers.
+import { Type } from "typebox";
+export { BuildSandboxTool, ListSandboxBuildsTool, UseSandboxBuildTool, } from "./build.js";
+export { makeBrowserToolset } from "./browser.js";
+const DEFAULT_EXEC_TIMEOUT_MS = 5 * 60_000;
+const MAX_EXEC_TIMEOUT_MS = 30 * 60_000;
+const STDOUT_LINE_CAP = 200;
+const STDOUT_BYTE_CAP = 8_000;
+function getRunner(ctx) {
+    return ctx.capabilities.get("sandbox.shell");
+}
+// ─── exec ──────────────────────────────────────────────────────────
+// Path inside the sandbox guest where the active user's host home
+// is bind-mounted to. Mirrors the ./users/<userId>/ layout that the
+// host workspace uses (per ADR-0001 §2) so a relative path means
+// the same file on both sides.
+function defaultUserWorkdir(userId) {
+    return `/workspace/users/${userId}`;
+}
+export const ExecTool = {
+    schema: {
+        name: "exec",
+        description: `Run a shell command inside the per-tenant sandbox. The sandbox boots \
+on first call (cold start ~10s), so subsequent calls in the same conversation are fast.
+
+Default timeout: ${DEFAULT_EXEC_TIMEOUT_MS / 1000}s. Raise \`timeout_ms\` for long-running tasks; cap is ${MAX_EXEC_TIMEOUT_MS / 1000}s.
+
+Outputs are truncated at ${STDOUT_LINE_CAP} lines / ${STDOUT_BYTE_CAP} bytes per stream. \
+Pipe to a file (\`> out.log\`) if you need the full output, then read it with \
+\`read_file\`.
+
+Default working dir is your user's home inside the sandbox — the same dir that \
+\`write_file\`/\`read_file\` see as their root. So a file \`write_file("foo.py")\` \
+creates is reachable as \`exec("python3 foo.py")\` (relative to the default cwd).
+
+⚠️ Path semantics differ from \`write_file\`/\`read_file\`: inside this shell, \
+\`/\` is the sandbox OS root (with \`/etc\`, \`/usr\`, …), NOT the workspace root. \
+A file written via \`write_file("foo.py")\` lives at \`/workspace/users/<userId>/foo.py\` \
+inside the sandbox. To stay sane, **use relative paths in both tools** \
+(\`write_file("foo.py")\` + \`exec("python3 foo.py")\`). If you need an absolute \
+path in \`exec\`, write \`/workspace/users/<userId>/foo.py\` — a leading-slash path \
+from \`write_file\`/\`read_file\` does NOT carry over verbatim.
+
+Pass an absolute path in \`workdir\` to step outside the user home (e.g. to poke at \
+\`/etc\` or \`/usr\`).
+
+Files written under your user dir persist on the host; everything else (installs, /tmp, …) \
+is wiped when you call \`reset_sandbox\`.`,
+        parameters: Type.Object({
+            command: Type.String({
+                description: "Shell command. Equivalent to `bash -c <command>` inside the sandbox. Multi-line scripts are fine.",
+            }),
+            workdir: Type.Optional(Type.String({
+                description: "Working dir inside the guest. Defaults to the user's home (= the same dir read_file/write_file see). Pass an absolute path to override.",
+            })),
+            timeout_ms: Type.Optional(Type.Integer({
+                minimum: 1,
+                maximum: MAX_EXEC_TIMEOUT_MS,
+                description: `Override per-call timeout. Hard cap ${MAX_EXEC_TIMEOUT_MS}ms.`,
+            })),
+        }),
+    },
+    // Hide `exec` from the model when the runner is in error (nullable
+    // runner, failed VM start). Recovery tools stay visible — the
+    // agent uses them to fix things.
+    async available(ctx) {
+        const runner = getRunner(ctx);
+        if (!runner)
+            return false;
+        try {
+            const status = await runner.status();
+            return status.state !== "error";
+        }
+        catch {
+            return false;
+        }
+    },
+    async execute(args, ctx) {
+        const runner = getRunner(ctx);
+        if (!runner) {
+            return errorResult("sandbox.shell capability not registered");
+        }
+        const command = String(args.command ?? "");
+        if (!command)
+            return errorResult("command is required");
+        const workdir = typeof args.workdir === "string"
+            ? args.workdir
+            : defaultUserWorkdir(ctx.userId);
+        const timeoutMs = clampTimeout(args.timeout_ms);
+        // Outer watchdog: belt-and-braces guard against `runner.exec`
+        // never resolving. The runner already has its own timeout +
+        // SIGKILL race, but if the SDK hangs *before* that race is
+        // wired up (e.g. `shellStream(script)` itself blocks because
+        // the host-guest agent socket is dead), the inner timeout is
+        // never armed and the tool call hangs forever — taking the
+        // whole worker turn down with it. We give the runner its own
+        // budget plus 5s slack, then fail the tool call with a
+        // structured timeout so the agent can move on (or the worker
+        // pool can decide to retry the task).
+        const watchdogMs = timeoutMs > 0 ? timeoutMs + 5_000 : 0;
+        try {
+            const execP = runner.exec({
+                command,
+                workdir,
+                timeoutMs,
+                userId: ctx.userId,
+                taskId: ctx.taskId,
+                sessionId: ctx.sessionId,
+                // Pipe the agent loop's abort signal through so the
+                // runner can SIGKILL the guest process the moment a
+                // `task_abort` (or watchdog) fires, instead of waiting
+                // for the per-call timeout. Without this, an aborted
+                // worker run still has to drain the current exec
+                // before the harness can settle and the worker shows
+                // 'busy' for up to timeoutMs.
+                signal: ctx.signal,
+            });
+            const WATCHDOG = Symbol("exec-watchdog");
+            const watchdogP = watchdogMs > 0
+                ? new Promise((resolve) => setTimeout(() => resolve(WATCHDOG), watchdogMs))
+                : new Promise(() => { });
+            const winner = await Promise.race([execP, watchdogP]);
+            if (winner === WATCHDOG) {
+                // If the outer signal already fired, the runner *should*
+                // have aborted on its own; the watchdog is just a
+                // belt-and-braces guard. Either way the agent gets a
+                // structured timeout.
+                void ctx.signal; // (no-op; documents the relationship)
+                return {
+                    ok: false,
+                    exit_code: -1,
+                    stdout: "",
+                    stderr: `[microsandbox] exec watchdog fired after ${watchdogMs}ms — ` +
+                        `the sandbox runner did not return in time. The host-guest ` +
+                        `channel may be wedged; try \`reset_sandbox\` if this repeats.`,
+                    truncated: false,
+                    duration_ms: watchdogMs,
+                    timed_out: true,
+                };
+            }
+            const result = winner;
+            const stdout = truncate(result.stdout);
+            const stderr = truncate(result.stderr);
+            return {
+                ok: result.exitCode === 0 && !result.timedOut && !result.aborted,
+                exit_code: result.exitCode,
+                stdout: stdout.text,
+                stderr: stderr.text,
+                truncated: stdout.truncated || stderr.truncated,
+                duration_ms: result.durationMs,
+                timed_out: result.timedOut,
+                aborted: result.aborted ?? false,
+            };
+        }
+        catch (err) {
+            return errorResult(`exec failed before reaching the sandbox: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    },
+};
+function errorResult(message) {
+    return {
+        ok: false,
+        exit_code: -1,
+        stdout: "",
+        stderr: message,
+        truncated: false,
+        duration_ms: 0,
+        timed_out: false,
+    };
+}
+function clampTimeout(raw) {
+    if (typeof raw !== "number" || !Number.isFinite(raw) || raw <= 0) {
+        return DEFAULT_EXEC_TIMEOUT_MS;
+    }
+    return Math.min(raw, MAX_EXEC_TIMEOUT_MS);
+}
+function truncate(s) {
+    if (s.length === 0)
+        return { text: s, truncated: false };
+    let truncated = false;
+    let out = s;
+    if (Buffer.byteLength(out, "utf8") > STDOUT_BYTE_CAP) {
+        const buf = Buffer.from(out, "utf8");
+        out = buf.subarray(0, STDOUT_BYTE_CAP).toString("utf8");
+        truncated = true;
+    }
+    const lines = out.split("\n");
+    if (lines.length > STDOUT_LINE_CAP) {
+        out = lines.slice(0, STDOUT_LINE_CAP).join("\n");
+        truncated = true;
+    }
+    if (truncated) {
+        out += `\n[output truncated at ${STDOUT_LINE_CAP} lines / ${STDOUT_BYTE_CAP} bytes]`;
+    }
+    return { text: out, truncated };
+}
+// ─── reset_sandbox ─────────────────────────────────────────────────
+export const ResetSandboxTool = {
+    schema: {
+        name: "reset_sandbox",
+        description: `Tear down the sandbox VM and re-create it from scratch. Use this when \
+\`exec\` keeps failing due to a stuck process, corrupted state, OOM, or runaway services. \
+Files under /workspace survive (they live on the host); installed packages, running daemons, \
+/tmp, and any in-VM state do not.
+
+Idempotent: safe to call even if the sandbox isn't running.`,
+        parameters: Type.Object({}),
+    },
+    async execute(_args, ctx) {
+        const runner = getRunner(ctx);
+        if (!runner) {
+            return {
+                ok: false,
+                message: "sandbox.shell capability not registered",
+                status: { state: "error", uptimeMs: 0 },
+            };
+        }
+        try {
+            await runner.reset();
+            const status = await runner.status();
+            return {
+                ok: true,
+                message: "sandbox reset; next exec will start a fresh VM",
+                status,
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return {
+                ok: false,
+                message: `reset failed: ${message}`,
+                status: { state: "error", uptimeMs: 0, lastError: message },
+            };
+        }
+    },
+};
+// ─── get_sandbox_status ────────────────────────────────────────────
+export const GetSandboxStatusTool = {
+    schema: {
+        name: "get_sandbox_status",
+        description: `Return the sandbox's current liveness snapshot: state, uptime, last error \
+(if any), and provider-specific metadata (image, cpus, memory, last exec time, …). Use this \
+when an \`exec\` call returned a confusing error and you want a structured signal before \
+deciding to \`reset_sandbox\`.`,
+        parameters: Type.Object({}),
+    },
+    async execute(_args, ctx) {
+        const runner = getRunner(ctx);
+        if (!runner) {
+            return {
+                ok: false,
+                state: "error",
+                message: "sandbox.shell capability not registered",
+            };
+        }
+        const s = await runner.status();
+        return {
+            ok: true,
+            state: s.state,
+            uptime_ms: s.uptimeMs,
+            last_error: s.lastError ?? null,
+            meta: s.meta ?? {},
+        };
+    },
+};
+// ─── update_sandbox_config ────────────────────────────────────────
+const CONFIGURABLE_KEYS = [
+    "image",
+    "cpus",
+    "memoryMib",
+    "sandboxName",
+    "idleShutdownMs",
+    "execTimeoutMs",
+];
+export const UpdateSandboxConfigTool = {
+    schema: {
+        name: "update_sandbox_config",
+        description: `Edit this tenant's sandbox config (image / cpus / memory / …). \
+Persists to the tenant config file; the change takes effect for new requests. \
+The currently-running sandbox VM is **not** restarted automatically — call \
+\`reset_sandbox\` after this if you want the new settings to apply right now.
+
+Configurable fields:
+- \`image\` (string): OCI image for the sandbox VM. Default \`python:3.12-slim\`.
+- \`cpus\` (integer): vCPU count.
+- \`memory_mib\` (integer): memory in MiB.
+- \`sandbox_name\` (string): sandbox name; rarely needs changing.
+- \`idle_shutdown_ms\` (integer): idle ms before the VM is paused. 0 disables.
+- \`exec_timeout_ms\` (integer): default per-exec timeout in ms.
+
+Only the fields you pass are touched; omitted fields keep their current value.`,
+        parameters: Type.Object({
+            image: Type.Optional(Type.String()),
+            cpus: Type.Optional(Type.Integer({ minimum: 1 })),
+            memory_mib: Type.Optional(Type.Integer({ minimum: 64 })),
+            sandbox_name: Type.Optional(Type.String()),
+            idle_shutdown_ms: Type.Optional(Type.Integer({ minimum: 0 })),
+            exec_timeout_ms: Type.Optional(Type.Integer({ minimum: 1 })),
+        }),
+    },
+    async execute(args, ctx) {
+        const fs = await import("node:fs");
+        const path = await import("node:path");
+        const mapped = {};
+        const a = args;
+        if (typeof a.image === "string")
+            mapped.image = a.image;
+        if (typeof a.cpus === "number")
+            mapped.cpus = Math.floor(a.cpus);
+        if (typeof a.memory_mib === "number")
+            mapped.memoryMib = Math.floor(a.memory_mib);
+        if (typeof a.sandbox_name === "string")
+            mapped.sandboxName = a.sandbox_name;
+        if (typeof a.idle_shutdown_ms === "number") {
+            mapped.idleShutdownMs = Math.floor(a.idle_shutdown_ms);
+        }
+        if (typeof a.exec_timeout_ms === "number") {
+            mapped.execTimeoutMs = Math.floor(a.exec_timeout_ms);
+        }
+        const changedKeys = Object.keys(mapped);
+        if (changedKeys.length === 0) {
+            return { ok: false, changed: {}, reset_required: false, message: "no config keys provided" };
+        }
+        // Tenant config path: <tenantHomeDir>/tenants/<id>/config.json.
+        // We round-trip through JSON.parse/stringify rather than
+        // calling the host's loadTenantConfig() helper to keep this
+        // plugin self-contained.
+        const cfgPath = path.join(ctx.tenantHomeDir, "tenants", ctx.tenantId, "config.json");
+        try {
+            let cfg = {};
+            try {
+                cfg = JSON.parse(fs.readFileSync(cfgPath, "utf8"));
+            }
+            catch (err) {
+                const code = err.code;
+                if (code !== "ENOENT")
+                    throw err;
+            }
+            const plugins = (cfg.plugins ?? {});
+            const current = plugins.microsandbox ?? {};
+            const currentConfig = current.config ?? {};
+            const nextConfig = { ...currentConfig, ...mapped };
+            plugins.microsandbox = { ...current, config: nextConfig };
+            cfg.plugins = plugins;
+            fs.mkdirSync(path.dirname(cfgPath), { recursive: true });
+            fs.writeFileSync(cfgPath, JSON.stringify(cfg, null, 2) + "\n", "utf8");
+            return {
+                ok: true,
+                changed: mapped,
+                reset_required: requiresReset(mapped),
+                message: "sandbox config updated; call reset_sandbox to apply to the running VM",
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return {
+                ok: false,
+                changed: {},
+                reset_required: false,
+                message: `failed to write tenant config: ${message}`,
+            };
+        }
+    },
+};
+function requiresReset(changes) {
+    return Object.keys(changes).some((k) => k === "image" || k === "cpus" || k === "memoryMib" || k === "sandboxName");
+}
+// ─── browser_health_check ─────────────────────────────────────────
+//
+// Probes CDP /json/version through the host port forward and turns
+// the outcome into an agent-readable {ok, latency, error?, suggestion?}
+// envelope. Sidecar's `health()` does the heavy lifting; this tool
+// just routes capability lookup + result shaping.
+//
+// Why a tool and not a passive monitor: a passive monitor would
+// either dump notifications into the chat ("CDP latency 2400ms!")
+// — noisy when the sandbox is fine — or have to maintain its own
+// definition of "fine", which we don't yet have data to set well.
+// As a tool, the agent calls it AFTER a browser_* call returned a
+// suspicious error and decides whether to call browser_restart /
+// reset_sandbox / give up. That matches today's intervention
+// model (worker → main agent → decision) without bolting on a
+// background process.
+function getBrowserSidecar(ctx) {
+    return ctx.capabilities.get("browser.cdp");
+}
+export const BrowserHealthCheckTool = {
+    schema: {
+        name: "browser_health_check",
+        description: "Probe the in-sandbox browser stack (chromium + Playwright MCP). " +
+            "Returns `{ok, latencyMs, browser?, error?, suggestion?}`. " +
+            "Call this after a browser_* tool returned a confusing error or " +
+            "exec-style timeout to confirm whether the browser stack itself is " +
+            "alive. The `suggestion` field, when present, names the next " +
+            "concrete recovery step (browser_restart / reset_sandbox).",
+        parameters: Type.Object({}),
+    },
+    available: (ctx) => ctx.capabilities.has("browser.cdp"),
+    async execute(_args, ctx) {
+        const sidecar = getBrowserSidecar(ctx);
+        if (!sidecar) {
+            return {
+                ok: false,
+                text: "browser.cdp capability not registered (no browser sidecar)",
+                data: { ok: false, error: "no sidecar" },
+            };
+        }
+        const h = await sidecar.health();
+        const head = h.ok
+            ? `Browser CDP healthy (${h.latencyMs}ms${h.browser ? `, ${h.browser}` : ""})`
+            : `Browser CDP unhealthy: ${h.error ?? "(no error message)"}`;
+        const tail = h.suggestion ? `\nSuggested next step: ${h.suggestion}` : "";
+        return {
+            ok: h.ok,
+            text: head + tail,
+            data: h,
+        };
+    },
+};
+//# sourceMappingURL=index.js.map

package/plugins/microsandbox/dist/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,gEAAgE;AAChE,gEAAgE;AAChE,oEAAoE;AACpE,EAAE;AACF,8DAA8D;AAC9D,+DAA+D;AAC/D,+DAA+D;AAC/D,+DAA+D;AAC/D,+DAA+D;AAE/D,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAQ/B,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,uBAAuB,GAAG,CAAC,GAAG,MAAM,CAAC;AAC3C,MAAM,mBAAmB,GAAG,EAAE,GAAG,MAAM,CAAC;AACxC,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B,SAAS,SAAS,CAAC,GAAqB;IACtC,OAAO,GAAG,CAAC,YAAY,CAAC,GAAG,CAAgB,eAAe,CAAC,CAAC;AAC9D,CAAC;AAED,sEAAsE;AAEtE,kEAAkE;AAClE,oEAAoE;AACpE,iEAAiE;AACjE,+BAA+B;AAC/B,SAAS,kBAAkB,CAAC,MAAc;IACxC,OAAO,oBAAoB,MAAM,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAc;IACjC,MAAM,EAAE;QACN,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE;;;mBAGE,uBAAuB,GAAG,IAAI,0DAA0D,mBAAmB,GAAG,IAAI;;2BAE1G,eAAe,YAAY,eAAe;;;;;;;;;;;;;;;;;;;;0CAoB3B;QACtC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC;gBACnB,WAAW,EACT,mGAAmG;aACtG,CAAC;YACF,OAAO,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,MAAM,CAAC;gBACV,WAAW,EACT,yIAAyI;aAC5I,CAAC,CACH;YACD,UAAU,EAAE,IAAI,CAAC,QAAQ,CACvB,IAAI,CAAC,OAAO,CAAC;gBACX,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,mBAAmB;gBAC5B,WAAW,EAAE,uCAAuC,mBAAmB,KAAK;aAC7E,CAAC,CACH;SACF,CAAC;KACH;IAED,mEAAmE;IACnE,8DAA8D;IAC9D,iCAAiC;IACjC,KAAK,CAAC,SAAS,CAAC,GAAqB;QACnC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACrC,OAAO,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG;QACrB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,WAAW,CAAC,yCAAyC,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAE,IAA8B,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO;YAAE,OAAO,WAAW,CAAC,qBAAqB,CAAC,CAAC;QACxD,MAAM,OAAO,GACX,OAAQ,IAA8B,CAAC,OAAO,KAAK,QAAQ;YACzD,CAAC,CAAG,IAA4B,CAAC,OAAkB;YACnD,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,YAAY,CAAE,IAAiC,CAAC,UAAU,CAAC,CAAC;QAC9E,8DAA8D;QAC9D,4DAA4D;QAC5D,2DAA2D;QAC3D,6DAA6D;QAC7D,6DAA6D;QAC7D,2DAA2D;QAC3D,6DAA6D;QAC7D,uDAAuD;QACvD,6DAA6D;QAC7D,sCAAsC;QACtC,MAAM,UAAU,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;gBACxB,OAAO;gBACP,OAAO;gBACP,SAAS;gBACT,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,oDAAoD;gBACpD,oDAAoD;gBACpD,uDAAuD;gBACvD,qDAAqD;gBACrD,iDAAiD;gBACjD,qDAAqD;gBACrD,8BAA8B;gBAC9B,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;YACzC,MAAM,SAAS,GACb,UAAU,GAAG,CAAC;gBACZ,CAAC,CAAC,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,EAAE,CACvC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,CAChD;gBACH,CAAC,CAAC,IAAI,OAAO,CAAQ,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;YACtD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxB,yDAAyD;gBACzD,kDAAkD;gBAClD,qDAAqD;gBACrD,sBAAsB;gBACtB,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,sCAAsC;gBACvD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,SAAS,EAAE,CAAC,CAAC;oBACb,MAAM,EAAE,EAAE;oBACV,MAAM,EACJ,4CAA4C,UAAU,OAAO;wBAC7D,4DAA4D;wBAC5D,+DAA+D;oBACjE,SAAS,EAAE,KAAK;oBAChB,WAAW,EAAE,UAAU;oBACvB,SAAS,EAAE,IAAI;iBAChB,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC;YACtB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvC,OAAO;gBACL,EAAE,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO;gBAChE,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC1B,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS;gBAC/C,WAAW,EAAE,MAAM,CAAC,UAAU;gBAC9B,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC1B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK;aACjC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,WAAW,CAChB,4CAA4C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/F,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC;AAEF,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO;QACL,EAAE,EAAE,KAAK;QACT,SAAS,EAAE,CAAC,CAAC;QACb,MAAM,EAAE,EAAE;QACV,MAAM,EAAE,OAAO;QACf,SAAS,EAAE,KAAK;QAChB,WAAW,EAAE,CAAC;QACd,SAAS,EAAE,KAAK;KACjB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACjE,OAAO,uBAAuB,CAAC;IACjC,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;AAC5C,CAAC;AAOD,SAAS,QAAQ,CAAC,CAAS;IACzB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACzD,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrC,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxD,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACnC,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,GAAG,IAAI,0BAA0B,eAAe,YAAY,eAAe,SAAS,CAAC;IACvF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC;AAED,sEAAsE;AAEtE,MAAM,CAAC,MAAM,gBAAgB,GAAc;IACzC,MAAM,EAAE;QACN,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE;;;;;4DAK2C;QACxD,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;KAC5B;IAED,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,yCAAyC;gBAClD,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAA0B;aAChE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACrC,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,gDAAgD;gBACzD,MAAM;aACP,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,iBAAiB,OAAO,EAAE;gBACnC,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAA0B;aACpF,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC;AAEF,sEAAsE;AAEtE,MAAM,CAAC,MAAM,oBAAoB,GAAc;IAC7C,MAAM,EAAE;QACN,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE;;;+BAGc;QAC3B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;KAC5B;IAED,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,OAAO;gBACd,OAAO,EAAE,yCAAyC;aACnD,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QAChC,OAAO;YACL,EAAE,EAAE,IAAI;YACR,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,SAAS,EAAE,CAAC,CAAC,QAAQ;YACrB,UAAU,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI;YAC/B,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE;SACnB,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,qEAAqE;AAErE,MAAM,iBAAiB,GAAG;IACxB,OAAO;IACP,MAAM;IACN,WAAW;IACX,aAAa;IACb,gBAAgB;IAChB,eAAe;CACP,CAAC;AAGX,MAAM,CAAC,MAAM,uBAAuB,GAAc;IAChD,MAAM,EAAE;QACN,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE;;;;;;;;;;;;;+EAa8D;QAC3E,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YACjD,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;YACxD,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC1C,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YAC7D,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;SAC7D,CAAC;KACH;IAED,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG;QACrB,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAEvC,MAAM,MAAM,GAA8C,EAAE,CAAC;QAC7D,MAAM,CAAC,GAAG,IAA+B,CAAC;QAC1C,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAAE,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;QACxD,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;YAAE,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAClF,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ;YAAE,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,YAAY,CAAC;QAC5E,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;YAC3C,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;QAC/F,CAAC;QAED,gEAAgE;QAChE,yDAAyD;QACzD,4DAA4D;QAC5D,yBAAyB;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CACvB,GAAG,CAAC,aAAa,EACjB,SAAS,EACT,GAAG,CAAC,QAAQ,EACZ,aAAa,CACd,CAAC;QACF,IAAI,CAAC;YACH,IAAI,GAAG,GAA4B,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAA4B,CAAC;YAChF,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,IAAI,GAAI,GAAyB,CAAC,IAAI,CAAC;gBAC7C,IAAI,IAAI,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAC;YACnC,CAAC;YACD,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAA4C,CAAC;YAC/E,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;YAC3C,MAAM,aAAa,GAChB,OAAgD,CAAC,MAAM,IAAI,EAAE,CAAC;YACjE,MAAM,UAAU,GAAG,EAAE,GAAG,aAAa,EAAE,GAAG,MAAM,EAAE,CAAC;YACnD,OAAO,CAAC,YAAY,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAC1D,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;YACtB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACzD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;YACvE,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,MAAM;gBACf,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC;gBACrC,OAAO,EACL,uEAAuE;aAC1E,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,EAAE;gBACX,cAAc,EAAE,KAAK;gBACrB,OAAO,EAAE,kCAAkC,OAAO,EAAE;aACrD,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC;AAEF,SAAS,aAAa,CAAC,OAAkD;IACvE,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAC9B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,aAAa,CACjF,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,EAAE;AACF,mEAAmE;AACnE,wEAAwE;AACxE,mEAAmE;AACnE,kDAAkD;AAClD,EAAE;AACF,gEAAgE;AAChE,kEAAkE;AAClE,iEAAiE;AACjE,kEAAkE;AAClE,kEAAkE;AAClE,iEAAiE;AACjE,6DAA6D;AAC7D,8DAA8D;AAC9D,sBAAsB;AAEtB,SAAS,iBAAiB,CACxB,GAAqB;IAErB,OAAO,GAAG,CAAC,YAAY,CAAC,GAAG,CAAiB,aAAa,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAc;IAC/C,MAAM,EAAE;QACN,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EACT,kEAAkE;YAClE,4DAA4D;YAC5D,iEAAiE;YACjE,oEAAoE;YACpE,8DAA8D;YAC9D,2DAA2D;QAC7D,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;KAC5B;IACD,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC;IACvD,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,MAAM,OAAO,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,4DAA4D;gBAClE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE;aACzC,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE;YACf,CAAC,CAAC,wBAAwB,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;YAC9E,CAAC,CAAC,0BAA0B,CAAC,CAAC,KAAK,IAAI,oBAAoB,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO;YACL,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,IAAI,GAAG,IAAI;YACjB,IAAI,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;CACF,CAAC"}

package/plugins/microsandbox/dist/tools/mcp-client.d.ts

@@ -0,0 +1,63 @@
+export interface McpToolResult {
+    content?: Array<{
+        type: "text";
+        text: string;
+    } | {
+        type: "image";
+        data: string;
+        mimeType: string;
+    } | {
+        type: "resource";
+        resource: unknown;
+    }>;
+    isError?: boolean;
+    /** Some tools (browser_take_screenshot) return additional fields. */
+    [key: string]: unknown;
+}
+export declare class McpClientError extends Error {
+    readonly code?: number | undefined;
+    constructor(message: string, code?: number | undefined);
+}
+export declare class McpClient {
+    /** e.g. http://localhost:6701 (no trailing slash). */
+    private readonly baseUrl;
+    /** Per-call request timeout. Default 30s. */
+    private readonly timeoutMs;
+    private sessionId;
+    private nextId;
+    private initialised;
+    private readonly host;
+    private readonly port;
+    /** Host header to send. Always the MCP server's bound address
+     *  inside the sandbox (default localhost:3200), regardless of
+     *  whatever forwarded port we connect to from the host. */
+    private readonly hostHeader;
+    constructor(
+    /** e.g. http://localhost:6701 (no trailing slash). */
+    baseUrl: string, 
+    /** Per-call request timeout. Default 30s. */
+    timeoutMs?: number, 
+    /** Override the upstream MCP server's bound Host. Defaults to
+     *  `localhost:3200` which is what the supervisord-managed
+     *  Playwright MCP listens on inside browser.yaml's VM. */
+    upstreamHost?: string);
+    /** One-shot: open an MCP session, call a tool, close. Caller
+     *  doesn't have to manage session lifecycle. */
+    callTool(name: string, args: Record<string, unknown>): Promise<McpToolResult>;
+    /** Returns the registered tools advertised by the server. Mostly
+     *  useful for diagnostics; the host already knows tool names from
+     *  manifest contributions. */
+    listTools(): Promise<{
+        tools: Array<{
+            name: string;
+            description?: string;
+        }>;
+    }>;
+    private initialise;
+    private request;
+    private notify;
+    /** Send a single POST to /mcp using node:http, with the Host
+     *  header pinned to the upstream MCP's bound address. */
+    private send;
+}
+//# sourceMappingURL=mcp-client.d.ts.map

package/plugins/microsandbox/dist/tools/mcp-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-client.d.ts","sourceRoot":"","sources":["../../src/tools/mcp-client.ts"],"names":[],"mappings":"AAsDA,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,KAAK,CACX;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAC9B;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GACjD;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAC1C,CAAC;IACF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qEAAqE;IACrE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,qBAAa,cAAe,SAAQ,KAAK;IAGrC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;gBADtB,OAAO,EAAE,MAAM,EACN,IAAI,CAAC,EAAE,MAAM,YAAA;CAKzB;AAED,qBAAa,SAAS;IAYlB,sDAAsD;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,6CAA6C;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS;IAd5B,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B;;+DAE2D;IAC3D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;;IAGlC,sDAAsD;IACrC,OAAO,EAAE,MAAM;IAChC,6CAA6C;IAC5B,SAAS,GAAE,MAAe;IAC3C;;8DAE0D;IAC1D,YAAY,GAAE,MAAyB;IAQzC;oDACgD;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;IASnF;;kCAE8B;IACxB,SAAS,IAAI,OAAO,CAAC;QAAE,KAAK,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;YAOtE,UAAU;YAoBV,OAAO;YAyCP,MAAM;IAwBpB;6DACyD;IACzD,OAAO,CAAC,IAAI;CAsCb"}