@vextlabs/theron-cli 0.3.0 → 0.4.0

package/dist/tools/task.js

@@ -0,0 +1,166 @@
+// Task tool — bounded read-only subagent over fetch to /api/cli/chat.
+// Allows only Read/Grep/Glob/LS. Aggregate AbortController timeout (default 300s).
+// No agent_type param (CLI version).
+import { execRead } from "./read.js";
+import { execGrep } from "./grep.js";
+import { execGlob } from "./glob.js";
+import { execLs } from "./ls.js";
+import { buildLocalToolSchemas } from "@vextlabs/theron-agent-sdk";
+const MAX_TURNS = 10;
+const DEFAULT_TIMEOUT_SECONDS = 300;
+// Read-only tool schemas for the sub-agent.
+const READ_ONLY_SCHEMAS = buildLocalToolSchemas({
+    Read: "Read a file from the workspace.",
+    Grep: "Search file contents with a regex.",
+    Glob: "Find files by glob pattern.",
+    LS: "List files and directories in a path.",
+});
+const READ_ONLY_NAMES = new Set(["Read", "Grep", "Glob", "LS"]);
+const READ_ONLY_TOOL_SCHEMAS = READ_ONLY_SCHEMAS.filter((s) => READ_ONLY_NAMES.has(s.function.name));
+export async function execTask(args, ctx) {
+    if (!args.prompt || !args.prompt.trim()) {
+        return "[error] prompt must be a non-empty string.";
+    }
+    if (!ctx.apiUrl) {
+        return "[error] apiUrl not configured — cannot spawn subagent.";
+    }
+    const timeoutMs = Math.max(10_000, (args.timeout_seconds ?? DEFAULT_TIMEOUT_SECONDS) * 1000);
+    const abort = new AbortController();
+    const timer = setTimeout(() => abort.abort(new Error(`Task timed out after ${timeoutMs / 1000}s`)), timeoutMs);
+    try {
+        return await runTask(args, ctx, abort.signal);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+async function runTask(args, ctx, signal) {
+    const messages = [
+        { role: "user", content: args.prompt.trim() },
+    ];
+    const accumulatedText = [];
+    const label = args.description ? `[Task: ${args.description}]` : "[Task]";
+    for (let turn = 0; turn < MAX_TURNS; turn++) {
+        if (signal.aborted) {
+            return `${label}\n[error] Task timed out.\n${accumulatedText.join("")}`;
+        }
+        let response;
+        try {
+            const turnSignal = AbortSignal.any
+                ? AbortSignal.any([signal, AbortSignal.timeout(60_000)])
+                : signal;
+            response = await fetch(`${ctx.apiUrl.replace(/\/$/, "")}/api/cli/chat`, {
+                method: "POST",
+                headers: {
+                    "content-type": "application/json",
+                    ...(ctx.apiKey ? { authorization: `Bearer ${ctx.apiKey}` } : {}),
+                    accept: "application/x-ndjson",
+                },
+                body: JSON.stringify({
+                    messages,
+                    tools: READ_ONLY_TOOL_SCHEMAS,
+                    surface: "cli",
+                }),
+                signal: turnSignal,
+            });
+        }
+        catch (err) {
+            return `${label}\n[error] Network error on turn ${turn + 1}: ${err instanceof Error ? err.message : String(err)}\n${accumulatedText.join("")}`;
+        }
+        if (!response.ok || !response.body) {
+            let detail = "";
+            try {
+                detail = (await response.text()).slice(0, 300);
+            }
+            catch { /* ignore */ }
+            return `${label}\n[error] HTTP ${response.status} on turn ${turn + 1}: ${detail}\n${accumulatedText.join("")}`;
+        }
+        const reader = response.body.getReader();
+        const decoder = new TextDecoder();
+        let buf = "";
+        let turnText = "";
+        const toolCalls = [];
+        let stopReason = "end_turn";
+        try {
+            outer: while (true) {
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                buf += decoder.decode(value, { stream: true });
+                let idx;
+                while ((idx = buf.indexOf("\n")) >= 0) {
+                    const line = buf.slice(0, idx).trim();
+                    buf = buf.slice(idx + 1);
+                    if (!line)
+                        continue;
+                    let frame;
+                    try {
+                        frame = JSON.parse(line);
+                    }
+                    catch {
+                        continue;
+                    }
+                    if (frame.type === "text_delta" && frame.delta) {
+                        turnText += frame.delta;
+                    }
+                    else if (frame.type === "tool_call" && frame.id && frame.name && frame.args) {
+                        toolCalls.push({ id: frame.id, name: frame.name, args: frame.args });
+                    }
+                    else if (frame.type === "turn_end" && frame.stop_reason) {
+                        stopReason = frame.stop_reason;
+                        break outer;
+                    }
+                    else if (frame.type === "error" && frame.message) {
+                        return `${label}\n[error] Subagent error: ${frame.message}\n${accumulatedText.join("")}`;
+                    }
+                }
+            }
+        }
+        catch (err) {
+            return `${label}\n[error] Stream error on turn ${turn + 1}: ${err instanceof Error ? err.message : String(err)}\n${accumulatedText.join("")}`;
+        }
+        if (turnText)
+            accumulatedText.push(turnText);
+        messages.push({ role: "assistant", content: turnText, tool_calls: toolCalls });
+        if (stopReason !== "tool_use" || toolCalls.length === 0)
+            break;
+        for (const call of toolCalls) {
+            if (!READ_ONLY_NAMES.has(call.name)) {
+                messages.push({
+                    role: "tool",
+                    tool_call_id: call.id,
+                    content: `[error] Tool "${call.name}" is not available in a read-only subagent.`,
+                });
+                continue;
+            }
+            let result;
+            try {
+                switch (call.name) {
+                    case "Read":
+                        result = await execRead(call.args, ctx);
+                        break;
+                    case "Grep":
+                        result = await execGrep(call.args, ctx);
+                        break;
+                    case "Glob":
+                        result = await execGlob(call.args, ctx);
+                        break;
+                    case "LS":
+                        result = await execLs(call.args, ctx);
+                        break;
+                    default:
+                        result = `[error] Unknown read-only tool: ${call.name}`;
+                }
+            }
+            catch (err) {
+                result = `[error] ${call.name} threw: ${err instanceof Error ? err.message : String(err)}`;
+            }
+            messages.push({ role: "tool", tool_call_id: call.id, content: result });
+        }
+    }
+    const finalText = accumulatedText.join("").trim();
+    if (!finalText)
+        return `${label}\n[subagent returned no text]`;
+    return `${label}\n${finalText}`;
+}
+//# sourceMappingURL=task.js.map

package/dist/tools/task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task.js","sourceRoot":"","sources":["../../src/tools/task.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,mFAAmF;AACnF,qCAAqC;AAGrC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AASnE,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,4CAA4C;AAC5C,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;IAC9C,IAAI,EAAE,iCAAiC;IACvC,IAAI,EAAE,oCAAoC;IAC1C,IAAI,EAAE,6BAA6B;IACnC,EAAE,EAAE,uCAAuC;CAC5C,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AAChE,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5D,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CACrC,CAAC;AAqBF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAc,EAAE,GAAgB;IAC7D,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACxC,OAAO,4CAA4C,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,wDAAwD,CAAC;IAClE,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,eAAe,IAAI,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7F,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,wBAAwB,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAE/G,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAc,EAAE,GAAgB,EAAE,MAAmB;IAC1E,MAAM,QAAQ,GAAiB;QAC7B,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;KAC9C,CAAC;IAEF,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;IAE1E,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,GAAG,KAAK,8BAA8B,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1E,CAAC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,UAAU,GAAI,WAA8D,CAAC,GAAG;gBACpF,CAAC,CAAE,WAA6D,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC3G,CAAC,CAAC,MAAM,CAAC;YACX,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,EAAE;gBACtE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,MAAM,EAAE,sBAAsB;iBAC/B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,QAAQ;oBACR,KAAK,EAAE,sBAAsB;oBAC7B,OAAO,EAAE,KAAK;iBACf,CAAC;gBACF,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,KAAK,mCAAmC,IAAI,GAAG,CAAC,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACjJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC;gBAAC,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAC9E,OAAO,GAAG,KAAK,kBAAkB,QAAQ,CAAC,MAAM,YAAY,IAAI,GAAG,CAAC,KAAK,MAAM,KAAK,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACjH,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,MAAM,SAAS,GAAuE,EAAE,CAAC;QACzF,IAAI,UAAU,GAAG,UAAU,CAAC;QAE5B,IAAI,CAAC;YACH,KAAK,EACL,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI;oBAAE,MAAM;gBAChB,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,IAAI,GAAW,CAAC;gBAChB,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;oBACtC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;oBACzB,IAAI,CAAC,IAAI;wBAAE,SAAS;oBACpB,IAAI,KAAkB,CAAC;oBACvB,IAAI,CAAC;wBAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC;wBAAC,SAAS;oBAAC,CAAC;oBACpE,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;wBAC/C,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC;oBAC1B,CAAC;yBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;wBAC9E,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;oBACvE,CAAC;yBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;wBAC1D,UAAU,GAAG,KAAK,CAAC,WAAW,CAAC;wBAC/B,MAAM,KAAK,CAAC;oBACd,CAAC;yBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;wBACnD,OAAO,GAAG,KAAK,6BAA6B,KAAK,CAAC,OAAO,KAAK,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;oBAC3F,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,KAAK,kCAAkC,IAAI,GAAG,CAAC,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAChJ,CAAC;QAED,IAAI,QAAQ;YAAE,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAE/E,IAAI,UAAU,KAAK,UAAU,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;QAE/D,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,MAAM;oBACZ,YAAY,EAAE,IAAI,CAAC,EAAE;oBACrB,OAAO,EAAE,iBAAiB,IAAI,CAAC,IAAI,6CAA6C;iBACjF,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;oBAClB,KAAK,MAAM;wBACT,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAA8D,EAAE,GAAG,CAAC,CAAC;wBAClG,MAAM;oBACR,KAAK,MAAM;wBACT,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAqF,EAAE,GAAG,CAAC,CAAC;wBACzH,MAAM;oBACR,KAAK,MAAM;wBACT,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAA0C,EAAE,GAAG,CAAC,CAAC;wBAC9E,MAAM;oBACR,KAAK,IAAI;wBACP,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAyB,EAAE,GAAG,CAAC,CAAC;wBAC3D,MAAM;oBACR;wBACE,MAAM,GAAG,mCAAmC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5D,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,WAAW,IAAI,CAAC,IAAI,WAAW,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7F,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,IAAI,CAAC,SAAS;QAAE,OAAO,GAAG,KAAK,+BAA+B,CAAC;IAC/D,OAAO,GAAG,KAAK,KAAK,SAAS,EAAE,CAAC;AAClC,CAAC"}

package/dist/tools/todowrite.d.ts

@@ -0,0 +1,12 @@
+import type { ToolContext } from "./index.js";
+export interface TodoItem {
+    content: string;
+    status: "pending" | "in_progress" | "completed";
+    activeForm?: string;
+}
+interface TodoWriteArgs {
+    todos: TodoItem[];
+}
+export declare function execTodoWrite(args: TodoWriteArgs, _ctx: ToolContext): Promise<string>;
+export declare function describeCurrentList(): string;
+export {};

package/dist/tools/todowrite.js

@@ -0,0 +1,38 @@
+// TodoWrite tool — structured task list for the current session.
+// Module-level state persists across tool calls within one CLI session.
+// Module-level state — persists for the CLI session.
+let todoList = [];
+export async function execTodoWrite(args, _ctx) {
+    if (!Array.isArray(args.todos)) {
+        return "[error] todos must be an array.";
+    }
+    for (const item of args.todos) {
+        if (typeof item.content !== "string" || !item.content.trim()) {
+            return "[error] Each todo must have a non-empty string content field.";
+        }
+        if (!["pending", "in_progress", "completed"].includes(item.status)) {
+            return `[error] Invalid status "${item.status}" — must be pending, in_progress, or completed.`;
+        }
+    }
+    todoList = args.todos.map((t) => ({
+        content: t.content,
+        status: t.status,
+        activeForm: t.activeForm ?? "",
+    }));
+    return renderList(todoList);
+}
+function renderList(list) {
+    if (list.length === 0)
+        return "Todo list is empty.";
+    const lines = list.map((item) => {
+        const mark = item.status === "completed" ? "[x]" :
+            item.status === "in_progress" ? "[~]" :
+                "[ ]";
+        return `${mark} ${item.content}`;
+    });
+    return lines.join("\n");
+}
+export function describeCurrentList() {
+    return renderList(todoList);
+}
+//# sourceMappingURL=todowrite.js.map

package/dist/tools/todowrite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"todowrite.js","sourceRoot":"","sources":["../../src/tools/todowrite.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,wEAAwE;AAUxE,qDAAqD;AACrD,IAAI,QAAQ,GAAe,EAAE,CAAC;AAM9B,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAmB,EAAE,IAAiB;IACxE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,iCAAiC,CAAC;IAC3C,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7D,OAAO,+DAA+D,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO,2BAA2B,IAAI,CAAC,MAAM,iDAAiD,CAAC;QACjG,CAAC;IACH,CAAC;IACD,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChC,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,EAAE;KAC/B,CAAC,CAAC,CAAC;IACJ,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB;IAClC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC9B,MAAM,IAAI,GACR,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACvC,KAAK,CAAC;QACR,OAAO,GAAG,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC"}

package/dist/tools/webfetch.d.ts

@@ -0,0 +1,6 @@
+import type { ToolContext } from "./index.js";
+interface WebFetchArgs {
+    url: string;
+}
+export declare function execWebFetch(args: WebFetchArgs, ctx: ToolContext): Promise<string>;
+export {};

package/dist/tools/webfetch.js

@@ -0,0 +1,98 @@
+// WebFetch tool — fetches a URL, strips HTML to readable text, 15s timeout,
+// truncates to ctx.maxBytes. SSRF guard rejects file://, loopback, and
+// private IP ranges.
+// Patterns to strip from HTML before returning to the model.
+const SCRIPT_STYLE_RE = /<(script|style)[^>]*>[\s\S]*?<\/\1>/gi;
+const HTML_COMMENT_RE = /<!--[\s\S]*?-->/g;
+const HTML_TAG_RE = /<[^>]+>/g;
+const MULTI_BLANK_RE = /\n{3,}/g;
+/** Returns an error string if the URL should be rejected, else null. */
+function ssrfCheck(parsed) {
+    if (parsed.protocol === "file:")
+        return "file: protocol is not allowed.";
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+        return `protocol "${parsed.protocol}" is not allowed; only http: and https: are permitted.`;
+    }
+    const host = parsed.hostname.toLowerCase();
+    if (host === "localhost" || host === "127.0.0.1" || host === "::1" || host === "[::1]") {
+        return `host "${host}" is a loopback address and is not allowed.`;
+    }
+    const v4 = host.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+    if (v4) {
+        const [, a, b] = v4.map(Number);
+        if (a === 10)
+            return `host "${host}" is in a private IP range and is not allowed.`;
+        if (a === 172 && b >= 16 && b <= 31)
+            return `host "${host}" is in a private IP range and is not allowed.`;
+        if (a === 192 && b === 168)
+            return `host "${host}" is in a private IP range and is not allowed.`;
+        if (a === 169 && b === 254)
+            return `host "${host}" is a link-local address and is not allowed.`;
+    }
+    return null;
+}
+export async function execWebFetch(args, ctx) {
+    let parsed;
+    try {
+        parsed = new URL(args.url);
+    }
+    catch {
+        return `[error] Invalid URL: ${args.url}`;
+    }
+    const ssrfErr = ssrfCheck(parsed);
+    if (ssrfErr)
+        return `[error] SSRF guard: ${ssrfErr}`;
+    const url = parsed.toString();
+    let response;
+    try {
+        response = await fetch(url, {
+            headers: {
+                "user-agent": "Mozilla/5.0 (compatible; TheronCLI/1.0; +https://itstheron.com)",
+                "accept": "text/html,application/xhtml+xml,text/plain;q=0.9,*/*;q=0.8",
+            },
+            signal: AbortSignal.timeout(15_000),
+        });
+    }
+    catch (err) {
+        return `[error] Fetch failed for ${url}: ${err instanceof Error ? err.message : String(err)}`;
+    }
+    if (!response.ok) {
+        return `[error] HTTP ${response.status} ${response.statusText} for ${url}`;
+    }
+    const contentType = response.headers.get("content-type") ?? "";
+    let body;
+    try {
+        body = await response.text();
+    }
+    catch (err) {
+        return `[error] Could not read response body: ${err instanceof Error ? err.message : String(err)}`;
+    }
+    let text;
+    if (contentType.includes("html")) {
+        text = body
+            .replace(SCRIPT_STYLE_RE, " ")
+            .replace(HTML_COMMENT_RE, " ")
+            .replace(HTML_TAG_RE, " ")
+            .replace(/&nbsp;/g, " ")
+            .replace(/&amp;/g, "&")
+            .replace(/&lt;/g, "<")
+            .replace(/&gt;/g, ">")
+            .replace(/&quot;/g, '"')
+            .replace(/&#39;/g, "'")
+            .replace(/[ \t]+/g, " ")
+            .replace(/^ +/gm, "")
+            .replace(MULTI_BLANK_RE, "\n\n")
+            .trim();
+    }
+    else {
+        text = body;
+    }
+    const cap = ctx.maxBytes;
+    const note = Buffer.byteLength(text, "utf-8") > cap ? "\n[content truncated to maxBytes]" : "";
+    if (Buffer.byteLength(text, "utf-8") > cap) {
+        const buf = Buffer.from(text, "utf-8");
+        text = buf.slice(0, cap).toString("utf-8");
+    }
+    return `${url}\n${text}${note}`;
+}
+//# sourceMappingURL=webfetch.js.map

package/dist/tools/webfetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webfetch.js","sourceRoot":"","sources":["../../src/tools/webfetch.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,uEAAuE;AACvE,qBAAqB;AAQrB,6DAA6D;AAC7D,MAAM,eAAe,GAAG,uCAAuC,CAAC;AAChE,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAC3C,MAAM,WAAW,GAAG,UAAU,CAAC;AAC/B,MAAM,cAAc,GAAG,SAAS,CAAC;AAEjC,wEAAwE;AACxE,SAAS,SAAS,CAAC,MAAW;IAC5B,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,gCAAgC,CAAC;IACzE,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,OAAO,aAAa,MAAM,CAAC,QAAQ,wDAAwD,CAAC;IAC9F,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACvF,OAAO,SAAS,IAAI,6CAA6C,CAAC;IACpE,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACtE,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,SAAS,IAAI,gDAAgD,CAAC;QACnF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,SAAS,IAAI,gDAAgD,CAAC;QAC1G,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,SAAS,IAAI,gDAAgD,CAAC;QACjG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,SAAS,IAAI,+CAA+C,CAAC;IAClG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAkB,EAAE,GAAgB;IACrE,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,wBAAwB,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5C,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,OAAO;QAAE,OAAO,uBAAuB,OAAO,EAAE,CAAC;IAErD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC9B,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC1B,OAAO,EAAE;gBACP,YAAY,EAAE,iEAAiE;gBAC/E,QAAQ,EAAE,4DAA4D;aACvE;YACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,4BAA4B,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAChG,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,gBAAgB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,QAAQ,GAAG,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAC/D,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,yCAAyC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACrG,CAAC;IAED,IAAI,IAAY,CAAC;IACjB,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,IAAI,GAAG,IAAI;aACR,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;aAC7B,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;aAC7B,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;aACzB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;aACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;aACtB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;aACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;aACrB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;aACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;aACtB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;aACvB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;aACpB,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC;aAC/B,IAAI,EAAE,CAAC;IACZ,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC;IACzB,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,GAAG,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACvC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,GAAG,GAAG,KAAK,IAAI,GAAG,IAAI,EAAE,CAAC;AAClC,CAAC"}

package/dist/tools/websearch.d.ts

@@ -0,0 +1,7 @@
+import type { ToolContext } from "./index.js";
+interface WebSearchArgs {
+    query: string;
+    max_results?: number;
+}
+export declare function execWebSearch(args: WebSearchArgs, _ctx: ToolContext): Promise<string>;
+export {};

package/dist/tools/websearch.js

@@ -0,0 +1,83 @@
+// WebSearch tool — DuckDuckGo HTML scrape returning title + URL + snippet.
+// No API key required.
+const MAX_RESULTS_CAP = 20;
+const DEFAULT_MAX = 10;
+const RESULT_LINK_RE = /<a[^>]+class="[^"]*result__a[^"]*"[^>]*href="([^"]*)"[^>]*>([\s\S]*?)<\/a>/gi;
+const HTML_ENTITY_RE = /&[a-z]+;|&#\d+;/gi;
+const HTML_TAG_INLINE_RE = /<[^>]+>/g;
+function decodeEntities(s) {
+    return s
+        .replace(/&amp;/g, "&")
+        .replace(/&lt;/g, "<")
+        .replace(/&gt;/g, ">")
+        .replace(/&quot;/g, '"')
+        .replace(/&#39;/g, "'")
+        .replace(/&nbsp;/g, " ")
+        .replace(HTML_ENTITY_RE, " ");
+}
+function stripTags(s) {
+    return s.replace(HTML_TAG_INLINE_RE, "").trim();
+}
+export async function execWebSearch(args, _ctx) {
+    if (!args.query || !args.query.trim()) {
+        return "[error] query must be a non-empty string.";
+    }
+    const maxResults = Math.min(args.max_results && args.max_results > 0 ? args.max_results : DEFAULT_MAX, MAX_RESULTS_CAP);
+    const encoded = encodeURIComponent(args.query.trim());
+    const searchUrl = `https://html.duckduckgo.com/html/?q=${encoded}`;
+    let response;
+    try {
+        response = await fetch(searchUrl, {
+            headers: {
+                "user-agent": "Mozilla/5.0 (compatible; TheronCLI/1.0; +https://itstheron.com)",
+                "accept": "text/html,*/*;q=0.8",
+                "accept-language": "en-US,en;q=0.9",
+            },
+            signal: AbortSignal.timeout(15_000),
+        });
+    }
+    catch (err) {
+        return `[error] Search request failed: ${err instanceof Error ? err.message : String(err)}`;
+    }
+    if (!response.ok) {
+        return `[error] DuckDuckGo returned HTTP ${response.status} for "${args.query}"`;
+    }
+    let html;
+    try {
+        html = await response.text();
+    }
+    catch (err) {
+        return `[error] Could not read search response: ${err instanceof Error ? err.message : String(err)}`;
+    }
+    const results = [];
+    let match;
+    RESULT_LINK_RE.lastIndex = 0;
+    while ((match = RESULT_LINK_RE.exec(html)) !== null && results.length < maxResults) {
+        const rawHref = match[1];
+        const rawTitle = match[2];
+        const title = decodeEntities(stripTags(rawTitle)).replace(/\s+/g, " ").trim();
+        if (!title)
+            continue;
+        let url = rawHref;
+        try {
+            const hrefUrl = new URL(rawHref, "https://html.duckduckgo.com");
+            const uddg = hrefUrl.searchParams.get("uddg");
+            if (uddg) {
+                url = decodeURIComponent(uddg);
+            }
+            else {
+                url = hrefUrl.toString();
+            }
+        }
+        catch { /* keep rawHref */ }
+        if (!url || url.startsWith("https://duckduckgo.com"))
+            continue;
+        results.push({ title, url });
+    }
+    if (results.length === 0) {
+        return `[no results found for "${args.query}"]`;
+    }
+    const lines = results.map((r, i) => `${i + 1}. ${r.title}\n   ${r.url}`);
+    return `Web search: "${args.query}" (${results.length} result${results.length === 1 ? "" : "s"})\n\n${lines.join("\n\n")}`;
+}
+//# sourceMappingURL=websearch.js.map

package/dist/tools/websearch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"websearch.js","sourceRoot":"","sources":["../../src/tools/websearch.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,uBAAuB;AASvB,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB,MAAM,cAAc,GAAG,8EAA8E,CAAC;AACtG,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAEtC,SAAS,cAAc,CAAC,CAAS;IAC/B,OAAO,CAAC;SACL,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC;SACvB,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAmB,EAAE,IAAiB;IACxE,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QACtC,OAAO,2CAA2C,CAAC;IACrD,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CACzB,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EACzE,eAAe,CAChB,CAAC;IAEF,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,uCAAuC,OAAO,EAAE,CAAC;IAEnE,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;YAChC,OAAO,EAAE;gBACP,YAAY,EAAE,iEAAiE;gBAC/E,QAAQ,EAAE,qBAAqB;gBAC/B,iBAAiB,EAAE,gBAAgB;aACpC;YACD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,kCAAkC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9F,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,oCAAoC,QAAQ,CAAC,MAAM,SAAS,IAAI,CAAC,KAAK,GAAG,CAAC;IACnF,CAAC;IAED,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,2CAA2C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IACvG,CAAC;IAED,MAAM,OAAO,GAA0C,EAAE,CAAC;IAC1D,IAAI,KAA6B,CAAC;IAClC,cAAc,CAAC,SAAS,GAAG,CAAC,CAAC;IAE7B,OAAO,CAAC,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QACnF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9E,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,IAAI,GAAG,GAAG,OAAO,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,IAAI,EAAE,CAAC;gBACT,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAE9B,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,wBAAwB,CAAC;YAAE,SAAS;QAC/D,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,0BAA0B,IAAI,CAAC,KAAK,IAAI,CAAC;IAClD,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACzE,OAAO,gBAAgB,IAAI,CAAC,KAAK,MAAM,OAAO,CAAC,MAAM,UAAU,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;AAC7H,CAAC"}

package/dist/tools/write.js

@@ -3,13 +3,29 @@
 // already passed.
 import { promises as fs } from "node:fs";
 import path from "node:path";
+import { sha256Hex, receiptLocalAction } from "../receipt.js";
+import { snapshot } from "../checkpoints.js";
 export async function execWrite(args, ctx) {
     const target = path.isAbsolute(args.file_path)
         ? args.file_path
         : path.resolve(ctx.cwd, args.file_path);
+    // Snapshot the file's current content BEFORE overwriting so /rewind can
+    // restore it.  Fail-safe: a read error (file missing, permission denied)
+    // is swallowed — the write still proceeds normally.
+    await snapshot(target).catch(() => undefined);
     await fs.mkdir(path.dirname(target), { recursive: true });
     await fs.writeFile(target, args.content, "utf-8");
+    const byteLen = Buffer.byteLength(args.content, "utf-8");
     const lineCount = args.content.split(/\r?\n/).length;
-    return `Wrote ${target} (${lineCount} lines, ${Buffer.byteLength(args.content, "utf-8")} bytes)`;
+    const baseResult = `Wrote ${target} (${lineCount} lines, ${byteLen} bytes)`;
+    // Mint a STOA receipt for this write. Fail-open: if the receipt POST
+    // fails, the base result is returned unmodified.
+    const postSha256 = sha256Hex(args.content);
+    const verifyUrl = await receiptLocalAction(ctx.apiUrl, ctx.apiKey, "local_write", {
+        path: target,
+        bytes: byteLen,
+        post_sha256: postSha256,
+    }).catch(() => null);
+    return verifyUrl ? baseResult + "\nsigned -- verify: " + verifyUrl : baseResult;
 }
 //# sourceMappingURL=write.js.map

package/dist/tools/write.js.map

@@ -1 +1 @@
-{"version":3,"file":"write.js","sourceRoot":"","sources":["../../src/tools/write.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,qEAAqE;AACrE,kBAAkB;AAElB,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAQ7B,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAe,EAAE,GAAgB;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC,SAAS;QAChB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAE1C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACrD,OAAO,SAAS,MAAM,KAAK,SAAS,WAAW,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC;AACnG,CAAC"}
+{"version":3,"file":"write.js","sourceRoot":"","sources":["../../src/tools/write.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,qEAAqE;AACrE,kBAAkB;AAElB,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAO7C,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAe,EAAE,GAAgB;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC,SAAS;QAChB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAE1C,wEAAwE;IACxE,yEAAyE;IACzE,oDAAoD;IACpD,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAE9C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACrD,MAAM,UAAU,GAAG,SAAS,MAAM,KAAK,SAAS,WAAW,OAAO,SAAS,CAAC;IAE5E,qEAAqE;IACrE,iDAAiD;IACjD,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,kBAAkB,CACxC,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,MAAM,EACV,aAAa,EACb;QACE,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,OAAO;QACd,WAAW,EAAE,UAAU;KACxB,CACF,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAEpB,OAAO,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,sBAAsB,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;AAClF,CAAC"}

package/dist/verifiers/confidence_marked.d.ts

@@ -0,0 +1,2 @@
+import type { Verifier } from "./types.js";
+export declare const confidenceMarkedKernel: Verifier;

package/dist/verifiers/confidence_marked.js

@@ -0,0 +1,49 @@
+// Confidence-marked gate — promotes the previously-inert `confidence_marked`
+// alias (which just ran style_lint) into a real kernel.
+//
+// Research / science / scholarly / policy answers should CALIBRATE: a strong
+// factual claim with zero uncertainty language reads as overconfident, the #1
+// epistemic failure mode for these domains. This kernel fires (warn) only when
+// a SUBSTANTIVE answer in a calibration-expected profile contains NO hedging or
+// confidence language anywhere — a deliberately conservative trigger to avoid
+// punishing answers that are already appropriately calibrated. It never blocks
+// (calibration is a quality nudge, not a hard gate).
+// Profiles where explicit uncertainty calibration is expected.
+const CALIBRATION_PROFILES = new Set([
+    "research", "science", "academic", "policy", "strategy", "medical", "business", "investor",
+]);
+// Any one of these counts as calibration: hedges, evidence-strength language,
+// explicit confidence markers, ranges, or qualifiers.
+const CONFIDENCE_MARKERS = [
+    /\b(likely|unlikely|probabl(y|e)|possibl(y|e)|uncertain(ty)?|tentativ(e|ely)|preliminary)\b/i,
+    /\b(approximately|roughly|around|estimate[ds]?|on the order of|circa)\b/i,
+    /\b(appears?|seems?|suggests?|indicates?|implies?)\b/i,
+    /\b(may|might|could|can|would)\b/i,
+    /\b(evidence (suggests|indicates|is (mixed|weak|strong|limited)))\b/i,
+    /\b(high|medium|moderate|low)[- ]confidence\b/i,
+    /\bconfidence(:| level| is)\b/i,
+    /\b(established|contested|speculative|well[- ]supported|inconclusive|debated)\b/i,
+    /[~±]\s*\d/, // ~50, ±3
+    /\b\d+(\.\d+)?\s*(to|–|-)\s*\d/, // a numeric range (50 to 60, 50–60)
+    /\b(assum(e|ption|ing)|caveat|limitation|depends on)\b/i,
+];
+const SUBSTANTIVE_CHARS = 400;
+export const confidenceMarkedKernel = {
+    slug: "confidence_marked",
+    describe: "Nudge for calibrated uncertainty in research/science answers (no hedging at all → warn)",
+    async run(ctx) {
+        if (!CALIBRATION_PROFILES.has(ctx.profile))
+            return [];
+        const text = ctx.assistantText ?? "";
+        if (text.trim().length < SUBSTANTIVE_CHARS)
+            return [];
+        if (CONFIDENCE_MARKERS.some((re) => re.test(text)))
+            return [];
+        return [{
+                severity: "warn",
+                kernel: "confidence_marked",
+                message: "No uncertainty/confidence calibration found. Mark how strongly the evidence supports each key claim (e.g. \"evidence suggests…\", \"likely\", a confidence level, or a range) and separate established from contested from speculative.",
+            }];
+    },
+};
+//# sourceMappingURL=confidence_marked.js.map

package/dist/verifiers/confidence_marked.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confidence_marked.js","sourceRoot":"","sources":["../../src/verifiers/confidence_marked.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,wDAAwD;AACxD,EAAE;AACF,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,gFAAgF;AAChF,8EAA8E;AAC9E,+EAA+E;AAC/E,qDAAqD;AAIrD,+DAA+D;AAC/D,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU;CAC3F,CAAC,CAAC;AAEH,8EAA8E;AAC9E,sDAAsD;AACtD,MAAM,kBAAkB,GAAG;IACzB,6FAA6F;IAC7F,yEAAyE;IACzE,sDAAsD;IACtD,kCAAkC;IAClC,qEAAqE;IACrE,+CAA+C;IAC/C,+BAA+B;IAC/B,iFAAiF;IACjF,WAAW,EAAwB,UAAU;IAC7C,+BAA+B,EAAG,oCAAoC;IACtE,wDAAwD;CACzD,CAAC;AAEF,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,MAAM,CAAC,MAAM,sBAAsB,GAAa;IAC9C,IAAI,EAAE,mBAAmB;IACzB,QAAQ,EAAE,yFAAyF;IACnG,KAAK,CAAC,GAAG,CAAC,GAAoB;QAC5B,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,iBAAiB;YAAE,OAAO,EAAE,CAAC;QACtD,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9D,OAAO,CAAC;gBACN,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,mBAAmB;gBAC3B,OAAO,EACL,yOAAyO;aAC5O,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/verifiers/disclaimer_gate.d.ts

@@ -0,0 +1,2 @@
+import type { Verifier } from "./types.js";
+export declare const disclaimerGateKernel: Verifier;

package/dist/verifiers/disclaimer_gate.js

@@ -0,0 +1,57 @@
+// Disclaimer gate — makes the safety-critical methodologies enforceable.
+//
+// The therapy / trader / trainer / medical methodologies (src/profiles/
+// methodologies/*) each PROMISE a closing safety disclaimer ("this isn't
+// therapy — reach out to 988", "educational, not investment advice", "see a
+// sports-medicine physician", "not a substitute for a physician"). A promise
+// the model can silently drop is not a guarantee. This kernel asserts the
+// disclaimer is actually present on substantive turns and BLOCKS (feeds back
+// into the next turn) when it's missing — the same discipline the pentest
+// evidence_gate applies to findings, applied to user-safety language.
+// Profile → required closing disclaimer. Only these safety-sensitive,
+// educational-not-professional profiles are gated.
+const DISCLAIMERS = {
+    therapy: {
+        label: "not-therapy / crisis resource",
+        any: [/\b988\b/, /crisis (lifeline|line)/i, /licensed (therapist|clinician|counselor)/i, /\bisn'?t therapy\b/i, /not (a substitute for |real )?therapy/i],
+        fix: 'End with the not-therapy disclaimer, e.g. "This isn\'t therapy — if things feel heavy, reach out to a licensed therapist or 988."',
+    },
+    trader: {
+        label: "not-investment-advice",
+        any: [/not (investment |financial )?advice/i, /licensed (financial )?advisor/i, /past performance/i, /\beducational\b/i],
+        fix: 'End with the not-advice disclaimer, e.g. "This is educational. Past performance does not predict future results. Talk to a licensed advisor."',
+    },
+    trainer: {
+        label: "see-a-physician",
+        any: [/physician/i, /sports[- ]medicine/i, /medical (advice|professional)/i, /\bdoctor\b/i, /healthcare (provider|professional)/i],
+        fix: 'End with the safety disclaimer, e.g. "If anything hurts beyond normal soreness, see a sports-medicine physician."',
+    },
+    medical: {
+        label: "not-a-substitute-for-a-physician",
+        any: [/physician/i, /healthcare (provider|professional)/i, /\bdoctor\b/i, /not a substitute/i, /consult (a|your) (doctor|physician|clinician)/i, /medical advice/i],
+        fix: 'Add the educational-use disclaimer — this is not a substitute for a licensed physician; the user should consult one.',
+    },
+};
+// Below this length a turn is a clarifying aside, not substantive advice;
+// don't force a disclaimer onto "Which symptom do you mean?".
+const SUBSTANTIVE_CHARS = 240;
+export const disclaimerGateKernel = {
+    slug: "disclaimer_gate",
+    describe: "Assert the required safety disclaimer is present (therapy/trader/trainer/medical)",
+    async run(ctx) {
+        const spec = DISCLAIMERS[ctx.profile];
+        if (!spec)
+            return [];
+        const text = ctx.assistantText ?? "";
+        if (text.trim().length < SUBSTANTIVE_CHARS)
+            return [];
+        if (spec.any.some((re) => re.test(text)))
+            return [];
+        return [{
+                severity: "block",
+                kernel: "disclaimer_gate",
+                message: `Missing the required ${spec.label} disclaimer for ${ctx.profile} mode. ${spec.fix}`,
+            }];
+    },
+};
+//# sourceMappingURL=disclaimer_gate.js.map

package/dist/verifiers/disclaimer_gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disclaimer_gate.js","sourceRoot":"","sources":["../../src/verifiers/disclaimer_gate.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,EAAE;AACF,wEAAwE;AACxE,yEAAyE;AACzE,4EAA4E;AAC5E,6EAA6E;AAC7E,0EAA0E;AAC1E,6EAA6E;AAC7E,0EAA0E;AAC1E,sEAAsE;AAatE,sEAAsE;AACtE,mDAAmD;AACnD,MAAM,WAAW,GAAmC;IAClD,OAAO,EAAE;QACP,KAAK,EAAE,+BAA+B;QACtC,GAAG,EAAE,CAAC,SAAS,EAAE,yBAAyB,EAAE,2CAA2C,EAAE,qBAAqB,EAAE,wCAAwC,CAAC;QACzJ,GAAG,EAAE,mIAAmI;KACzI;IACD,MAAM,EAAE;QACN,KAAK,EAAE,uBAAuB;QAC9B,GAAG,EAAE,CAAC,sCAAsC,EAAE,gCAAgC,EAAE,mBAAmB,EAAE,kBAAkB,CAAC;QACxH,GAAG,EAAE,+IAA+I;KACrJ;IACD,OAAO,EAAE;QACP,KAAK,EAAE,iBAAiB;QACxB,GAAG,EAAE,CAAC,YAAY,EAAE,qBAAqB,EAAE,gCAAgC,EAAE,aAAa,EAAE,qCAAqC,CAAC;QAClI,GAAG,EAAE,mHAAmH;KACzH;IACD,OAAO,EAAE;QACP,KAAK,EAAE,kCAAkC;QACzC,GAAG,EAAE,CAAC,YAAY,EAAE,qCAAqC,EAAE,aAAa,EAAE,mBAAmB,EAAE,gDAAgD,EAAE,iBAAiB,CAAC;QACnK,GAAG,EAAE,sHAAsH;KAC5H;CACF,CAAC;AAEF,0EAA0E;AAC1E,8DAA8D;AAC9D,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,MAAM,CAAC,MAAM,oBAAoB,GAAa;IAC5C,IAAI,EAAE,iBAAiB;IACvB,QAAQ,EAAE,mFAAmF;IAC7F,KAAK,CAAC,GAAG,CAAC,GAAoB;QAC5B,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,iBAAiB;YAAE,OAAO,EAAE,CAAC;QACtD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QACpD,OAAO,CAAC;gBACN,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,iBAAiB;gBACzB,OAAO,EAAE,wBAAwB,IAAI,CAAC,KAAK,mBAAmB,GAAG,CAAC,OAAO,UAAU,IAAI,CAAC,GAAG,EAAE;aAC9F,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/verifiers/index.d.ts

@@ -1,5 +1,10 @@
 import type { VerifierContext, VerifierIssue } from "./types.js";
 export type { Verifier, VerifierContext, VerifierIssue } from "./types.js";
+/** All registered verifier slugs (real kernels + aliases). Used by the
+ *  integrity test to catch a profile referencing a slug that doesn't resolve
+ *  to a kernel (runVerifiers silently drops unknown slugs, so without this a
+ *  typo'd verifier slug would be an invisible no-op). */
+export declare function listVerifierSlugs(): string[];
 /** Run the kernels for the active profile in parallel. Each kernel
  *  has its own 5s timeout — slow kernels return [] rather than block
  *  the loop. Total wall time bounded by max(per-kernel time, 5s). */