@vraxis/agent-v 0.6.0 → 0.7.1

package/dist/tools/browser.d.ts

@@ -0,0 +1,25 @@
+import { type AgentTool, type JsonObject } from "../core/index.js";
+export interface BrowserController {
+    currentUrl(options?: {
+        abortSignal?: AbortSignal;
+    }): Promise<string>;
+    snapshot(options?: {
+        abortSignal?: AbortSignal;
+    }): Promise<JsonObject>;
+    navigate(url: string, options?: {
+        abortSignal?: AbortSignal;
+    }): Promise<JsonObject>;
+    click(target: string, options?: {
+        abortSignal?: AbortSignal;
+    }): Promise<JsonObject>;
+    type(target: string, text: string, options?: {
+        abortSignal?: AbortSignal;
+    }): Promise<JsonObject>;
+}
+export interface BrowserToolOptions {
+    controller: BrowserController;
+    allowedOrigins: readonly string[];
+    timeoutMs?: number;
+}
+export declare function createBrowserTools(options: BrowserToolOptions): readonly AgentTool[];
+//# sourceMappingURL=browser.d.ts.map

package/dist/tools/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/tools/browser.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG7F,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACrE,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACvE,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACpF,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACpF,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAClG;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,iBAAiB,CAAC;IAC9B,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAmBD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,kBAAkB,GAAG,SAAS,SAAS,EAAE,CAmFpF"}

package/dist/tools/browser.js

@@ -0,0 +1,118 @@
+import { defineOutput, defineTool } from "../core/index.js";
+import { standardToolNames } from "./names.js";
+function origin(raw) {
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        throw new TypeError("Browser URL must be valid.");
+    }
+    if (!['http:', 'https:'].includes(url.protocol))
+        throw new TypeError("Browser tools support only HTTP and HTTPS URLs.");
+    if (url.username || url.password)
+        throw new TypeError("Browser URLs containing credentials are not allowed.");
+    const loopback = ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+    if (url.protocol === "http:" && !loopback)
+        throw new TypeError("Remote browser origins must use HTTPS.");
+    return url.origin;
+}
+function stringInput(value, field) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new TypeError("Browser input must be an object.");
+    const selected = value[field];
+    if (typeof selected !== "string" || !selected.trim())
+        throw new TypeError(`${field} must be a non-empty string.`);
+    return selected;
+}
+export function createBrowserTools(options) {
+    const allowed = new Set(options.allowedOrigins.map(origin));
+    if (!allowed.size)
+        throw new TypeError("Browser tools require at least one allowed origin.");
+    const timeoutMs = options.timeoutMs ?? 15_000;
+    const verifyCurrentOrigin = async (signal) => {
+        const current = await options.controller.currentUrl({ abortSignal: signal });
+        if (!allowed.has(origin(current)))
+            throw new TypeError(`Browser origin ${origin(current)} is not allowed.`);
+    };
+    const objectOutput = defineOutput({
+        name: "browser-result",
+        jsonSchema: { type: "object" },
+        parse(value) {
+            if (!value || typeof value !== "object" || Array.isArray(value))
+                throw new TypeError("Browser controller results must be objects.");
+            return value;
+        },
+    });
+    const guarded = (definition) => defineTool({
+        ...definition,
+        risk: "external-side-effect",
+        sideEffect: "non-idempotent",
+        requiredPermissions: ["browser:control"],
+        requiresApproval: true,
+        approvalCategory: "browser",
+        approvalReason: "Allow this agent to control the browser on an approved origin.",
+        timeoutMs,
+    });
+    return [
+        defineTool({
+            name: standardToolNames.browserSnapshot,
+            version: "1.0.0",
+            description: "Read the current page through a host browser controller.",
+            input: defineOutput({ name: "browser-snapshot-input", jsonSchema: { type: "object", additionalProperties: false }, parse: () => ({}) }),
+            output: objectOutput,
+            risk: "read",
+            sideEffect: "none",
+            requiredPermissions: ["browser:read"],
+            requiresApproval: false,
+            timeoutMs,
+            async execute(_, context) {
+                await verifyCurrentOrigin(context.abortSignal);
+                return options.controller.snapshot({ abortSignal: context.abortSignal });
+            },
+        }),
+        guarded({
+            name: standardToolNames.browserNavigate,
+            version: "1.0.0",
+            description: "Navigate the controlled browser to an allowed origin.",
+            input: defineOutput({ name: "browser-navigate-input", jsonSchema: { type: "object", properties: { url: { type: "string" } }, required: ["url"], additionalProperties: false }, parse(value) {
+                    const url = stringInput(value, "url");
+                    if (!allowed.has(origin(url)))
+                        throw new TypeError(`Browser origin ${origin(url)} is not allowed.`);
+                    return { url };
+                } }),
+            output: objectOutput,
+            async execute({ url }, context) { return options.controller.navigate(url, { abortSignal: context.abortSignal }); },
+        }),
+        guarded({
+            name: standardToolNames.browserClick,
+            version: "1.0.0",
+            description: "Click a stable target in the controlled browser.",
+            input: defineOutput({ name: "browser-click-input", jsonSchema: { type: "object", properties: { target: { type: "string" } }, required: ["target"], additionalProperties: false }, parse(value) { return { target: stringInput(value, "target") }; } }),
+            output: objectOutput,
+            async execute({ target }, context) {
+                await verifyCurrentOrigin(context.abortSignal);
+                return options.controller.click(target, { abortSignal: context.abortSignal });
+            },
+        }),
+        guarded({
+            name: standardToolNames.browserType,
+            version: "1.0.0",
+            description: "Type text into a stable target in the controlled browser.",
+            input: defineOutput({ name: "browser-type-input", jsonSchema: { type: "object", properties: { target: { type: "string" }, text: { type: "string" } }, required: ["target", "text"], additionalProperties: false }, parse(value) {
+                    if (!value || typeof value !== "object" || Array.isArray(value))
+                        throw new TypeError("Browser input must be an object.");
+                    const input = value;
+                    if (typeof input.text !== "string")
+                        throw new TypeError("text must be a string.");
+                    return { target: stringInput(value, "target"), text: input.text };
+                } }),
+            output: objectOutput,
+            async execute({ target, text }, context) {
+                await verifyCurrentOrigin(context.abortSignal);
+                return options.controller.type(target, text, { abortSignal: context.abortSignal });
+            },
+        }),
+    ];
+}
+//# sourceMappingURL=browser.js.map

package/dist/tools/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../../src/tools/browser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAmC,MAAM,kBAAkB,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAgB/C,SAAS,MAAM,CAAC,GAAW;IACzB,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAAC,CAAC;IACxF,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;IACxH,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAC9G,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5E,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IACzG,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IACzH,MAAM,QAAQ,GAAI,KAAiC,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IAClH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAA2B;IAC5D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAC;IAC7F,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,MAAM,mBAAmB,GAAG,KAAK,EAAE,MAAoB,EAAE,EAAE;QACzD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,kBAAkB,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC9G,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,YAAY,CAAC;QAChC,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC9B,KAAK,CAAC,KAAK;YACT,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;YACpI,OAAO,KAAmB,CAAC;QAC7B,CAAC;KACF,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,CAAC,UAA4K,EAAE,EAAE,CAAC,UAAU,CAAC;QAC3M,GAAG,UAAU;QACb,IAAI,EAAE,sBAA+B;QACrC,UAAU,EAAE,gBAAyB;QACrC,mBAAmB,EAAE,CAAC,iBAAiB,CAAC;QACxC,gBAAgB,EAAE,IAAI;QACtB,gBAAgB,EAAE,SAAkB;QACpC,cAAc,EAAE,gEAAgE;QAChF,SAAS;KACV,CAAC,CAAC;IACH,OAAO;QACL,UAAU,CAAC;YACT,IAAI,EAAE,iBAAiB,CAAC,eAAe;YACvC,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,0DAA0D;YACvE,KAAK,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,oBAAoB,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACvI,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,MAAM;YAClB,mBAAmB,EAAE,CAAC,cAAc,CAAC;YACrC,gBAAgB,EAAE,KAAK;YACvB,SAAS;YACT,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO;gBACtB,MAAM,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBAC/C,OAAO,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YAC3E,CAAC;SACF,CAAC;QACF,OAAO,CAAC;YACN,IAAI,EAAE,iBAAiB,CAAC,eAAe;YACvC,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,uDAAuD;YACpE,KAAK,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,KAAK;oBACxL,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;oBACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;wBAAE,MAAM,IAAI,SAAS,CAAC,kBAAkB,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;oBACpG,OAAO,EAAE,GAAG,EAAE,CAAC;gBACjB,CAAC,EAAE,CAAC;YACJ,MAAM,EAAE,YAAY;YACpB,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,IAAI,OAAO,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;SACnH,CAAC;QACF,OAAO,CAAC;YACN,IAAI,EAAE,iBAAiB,CAAC,YAAY;YACpC,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,kDAAkD;YAC/D,KAAK,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,KAAK,IAAI,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtP,MAAM,EAAE,YAAY;YACpB,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,OAAO;gBAC/B,MAAM,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBAC/C,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YAChF,CAAC;SACF,CAAC;QACF,OAAO,CAAC;YACN,IAAI,EAAE,iBAAiB,CAAC,WAAW;YACnC,OAAO,EAAE,OAAO;YAChB,WAAW,EAAE,2DAA2D;YACxE,KAAK,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC,KAAK;oBAC5N,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;wBAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;oBACzH,MAAM,KAAK,GAAG,KAAgC,CAAC;oBAC/C,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAC;oBAClF,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;gBACpE,CAAC,EAAE,CAAC;YACJ,MAAM,EAAE,YAAY;YACpB,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO;gBACrC,MAAM,mBAAmB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBAC/C,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YACrF,CAAC;SACF,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/tools/http.d.ts

@@ -0,0 +1,9 @@
+import { type AgentTool } from "../core/index.js";
+export interface HttpFetchToolOptions {
+    allowedHosts: readonly string[];
+    fetch?: typeof globalThis.fetch;
+    maxResponseBytes?: number;
+    timeoutMs?: number;
+}
+export declare function createHttpFetchTool(options: HttpFetchToolOptions): AgentTool;
+//# sourceMappingURL=http.d.ts.map

package/dist/tools/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/tools/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,KAAK,SAAS,EAAmB,MAAM,kBAAkB,CAAC;AAG7F,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAwCD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,SAAS,CAwD5E"}

package/dist/tools/http.js

@@ -0,0 +1,123 @@
+import { defineOutput, defineTool } from "../core/index.js";
+import { standardToolNames } from "./names.js";
+async function readBoundedBody(response, limit) {
+    if (!response.body)
+        return { body: "", truncated: false };
+    const reader = response.body.getReader();
+    const chunks = [];
+    let total = 0;
+    let truncated = false;
+    try {
+        while (true) {
+            const next = await reader.read();
+            if (next.done)
+                break;
+            const remaining = limit - total;
+            if (remaining <= 0) {
+                truncated = true;
+                break;
+            }
+            const chunk = next.value.byteLength > remaining ? next.value.slice(0, remaining) : next.value;
+            chunks.push(chunk);
+            total += chunk.byteLength;
+            if (chunk.byteLength < next.value.byteLength) {
+                truncated = true;
+                break;
+            }
+        }
+    }
+    finally {
+        if (truncated)
+            await reader.cancel().catch(() => undefined);
+        reader.releaseLock();
+    }
+    const combined = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        combined.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return { body: new TextDecoder().decode(combined), truncated };
+}
+function allowedUrl(raw, allowedHosts) {
+    if (typeof raw !== "string" || !raw.trim())
+        throw new TypeError("url must be a non-empty string.");
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        throw new TypeError("url must be a valid URL.");
+    }
+    if (url.username || url.password)
+        throw new TypeError("URLs containing credentials are not allowed.");
+    const loopback = ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+    if (url.protocol !== "https:" && !(url.protocol === "http:" && loopback))
+        throw new TypeError("Remote requests must use HTTPS.");
+    if (!allowedHosts.has(url.host.toLowerCase()) && !allowedHosts.has(url.hostname.toLowerCase()))
+        throw new TypeError(`Host ${url.host} is not allowed.`);
+    return url;
+}
+export function createHttpFetchTool(options) {
+    const allowedHosts = new Set(options.allowedHosts.map((host) => host.trim().toLowerCase()).filter(Boolean));
+    if (!allowedHosts.size)
+        throw new TypeError("http-fetch requires at least one allowed host.");
+    const performFetch = options.fetch ?? globalThis.fetch;
+    if (!performFetch)
+        throw new TypeError("No fetch implementation is available.");
+    const maxResponseBytes = options.maxResponseBytes ?? 256_000;
+    return defineTool({
+        name: standardToolNames.httpFetch,
+        version: "1.0.0",
+        description: "Fetch a bounded HTTPS or loopback resource from an explicit host allowlist.",
+        input: defineOutput({
+            name: "http-fetch-input",
+            jsonSchema: {
+                type: "object",
+                properties: { url: { type: "string" }, method: { enum: ["GET", "HEAD"] } },
+                required: ["url"],
+                additionalProperties: false,
+            },
+            parse(value) {
+                if (!value || typeof value !== "object" || Array.isArray(value))
+                    throw new TypeError("HTTP input must be an object.");
+                const input = value;
+                const url = allowedUrl(input.url, allowedHosts);
+                const method = input.method === undefined ? "GET" : input.method;
+                if (method !== "GET" && method !== "HEAD")
+                    throw new TypeError("method must be GET or HEAD.");
+                return { url: url.href, method };
+            },
+        }),
+        output: defineOutput({
+            name: "http-fetch-output",
+            jsonSchema: { type: "object" },
+            parse(value) {
+                if (!value || typeof value !== "object" || Array.isArray(value))
+                    throw new TypeError("HTTP output must be an object.");
+                return value;
+            },
+        }),
+        risk: "external-side-effect",
+        sideEffect: "none",
+        requiredPermissions: ["network:fetch"],
+        requiresApproval: true,
+        approvalCategory: "network",
+        approvalReason: "Allow this agent to send a request to an approved network host.",
+        timeoutMs: options.timeoutMs ?? 15_000,
+        async execute(input, context) {
+            const response = await performFetch(input.url, { method: input.method, redirect: "manual", signal: context.abortSignal });
+            const bounded = input.method === "HEAD" ? { body: "", truncated: false } : await readBoundedBody(response, maxResponseBytes);
+            return {
+                url: input.url,
+                status: response.status,
+                ok: response.ok,
+                contentType: response.headers.get("content-type") ?? "",
+                body: bounded.body,
+                truncated: bounded.truncated,
+                redirectLocation: response.headers.get("location") ?? "",
+            };
+        },
+    });
+}
+//# sourceMappingURL=http.js.map

package/dist/tools/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/tools/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAmC,MAAM,kBAAkB,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAS/C,KAAK,UAAU,eAAe,CAAC,QAAkB,EAAE,KAAa;IAC9D,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK,CAAC;YAChC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;gBAAC,SAAS,GAAG,IAAI,CAAC;gBAAC,MAAM;YAAC,CAAC;YAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;YAC9F,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;YAC1B,IAAI,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;gBAAC,SAAS,GAAG,IAAI,CAAC;gBAAC,MAAM;YAAC,CAAC;QAC5E,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,SAAS;YAAE,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAAC,CAAC;IACxF,OAAO,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,UAAU,CAAC,GAAY,EAAE,YAAiC;IACjE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACnG,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAC;IAAC,CAAC;IACtF,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IACtG,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5E,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACjI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,QAAQ,GAAG,CAAC,IAAI,kBAAkB,CAAC,CAAC;IACxJ,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAA6B;IAC/D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5G,IAAI,CAAC,YAAY,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IAC9F,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACvD,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAChF,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC;IAC7D,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,iBAAiB,CAAC,SAAS;QACjC,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,6EAA6E;QAC1F,KAAK,EAAE,YAAY,CAAC;YAClB,IAAI,EAAE,kBAAkB;YACxB,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE;gBAC1E,QAAQ,EAAE,CAAC,KAAK,CAAC;gBACjB,oBAAoB,EAAE,KAAK;aAC5B;YACD,KAAK,CAAC,KAAK;gBACT,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;gBACtH,MAAM,KAAK,GAAG,KAAgC,CAAC;gBAC/C,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBAChD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;gBACjE,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM;oBAAE,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC;gBAC9F,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YACnC,CAAC;SACF,CAAC;QACF,MAAM,EAAE,YAAY,CAAC;YACnB,IAAI,EAAE,mBAAmB;YACzB,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC9B,KAAK,CAAC,KAAK;gBACT,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAAE,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;gBACvH,OAAO,KAAmB,CAAC;YAC7B,CAAC;SACF,CAAC;QACF,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,MAAM;QAClB,mBAAmB,EAAE,CAAC,eAAe,CAAC;QACtC,gBAAgB,EAAE,IAAI;QACtB,gBAAgB,EAAE,SAAS;QAC3B,cAAc,EAAE,iEAAiE;QACjF,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,MAAM;QACtC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO;YAC1B,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YAC1H,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;YAC7H,OAAO;gBACL,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE;gBACvD,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE;aACzD,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/index.d.ts

@@ -0,0 +1,6 @@
+export * from "./approval.js";
+export * from "./browser.js";
+export * from "./http.js";
+export * from "./names.js";
+export * from "./pure.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC"}

package/dist/tools/index.js

@@ -0,0 +1,6 @@
+export * from "./approval.js";
+export * from "./browser.js";
+export * from "./http.js";
+export * from "./names.js";
+export * from "./pure.js";
+//# sourceMappingURL=index.js.map

package/dist/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC"}

package/dist/tools/names.d.ts

@@ -0,0 +1,19 @@
+export declare const standardToolNames: {
+    readonly calculate: "calculate";
+    readonly dateTime: "date-time";
+    readonly validateJson: "validate-json";
+    readonly listDirectory: "list-directory";
+    readonly readText: "read-text";
+    readonly searchText: "search-text";
+    readonly writeText: "write-text";
+    readonly applyTextEdits: "apply-text-edits";
+    readonly gitStatus: "git-status";
+    readonly gitDiff: "git-diff";
+    readonly runCommand: "run-command";
+    readonly httpFetch: "http-fetch";
+    readonly browserSnapshot: "browser-snapshot";
+    readonly browserNavigate: "browser-navigate";
+    readonly browserClick: "browser-click";
+    readonly browserType: "browser-type";
+};
+//# sourceMappingURL=names.d.ts.map

package/dist/tools/names.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"names.d.ts","sourceRoot":"","sources":["../../src/tools/names.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;CAiBpB,CAAC"}

package/dist/tools/names.js

@@ -0,0 +1,19 @@
+export const standardToolNames = {
+    calculate: "calculate",
+    dateTime: "date-time",
+    validateJson: "validate-json",
+    listDirectory: "list-directory",
+    readText: "read-text",
+    searchText: "search-text",
+    writeText: "write-text",
+    applyTextEdits: "apply-text-edits",
+    gitStatus: "git-status",
+    gitDiff: "git-diff",
+    runCommand: "run-command",
+    httpFetch: "http-fetch",
+    browserSnapshot: "browser-snapshot",
+    browserNavigate: "browser-navigate",
+    browserClick: "browser-click",
+    browserType: "browser-type",
+};
+//# sourceMappingURL=names.js.map

package/dist/tools/names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"names.js","sourceRoot":"","sources":["../../src/tools/names.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,WAAW;IACrB,YAAY,EAAE,eAAe;IAC7B,aAAa,EAAE,gBAAgB;IAC/B,QAAQ,EAAE,WAAW;IACrB,UAAU,EAAE,aAAa;IACzB,SAAS,EAAE,YAAY;IACvB,cAAc,EAAE,kBAAkB;IAClC,SAAS,EAAE,YAAY;IACvB,OAAO,EAAE,UAAU;IACnB,UAAU,EAAE,aAAa;IACzB,SAAS,EAAE,YAAY;IACvB,eAAe,EAAE,kBAAkB;IACnC,eAAe,EAAE,kBAAkB;IACnC,YAAY,EAAE,eAAe;IAC7B,WAAW,EAAE,cAAc;CACnB,CAAC"}

package/dist/tools/node/index.d.ts

@@ -0,0 +1,20 @@
+import { type AgentTool } from "../../core/index.js";
+export interface FilesystemToolOptions {
+    rootPath: string;
+    maxFileBytes?: number;
+    maxSearchFiles?: number;
+    maxSearchResults?: number;
+    ignoredDirectories?: readonly string[];
+}
+export declare function createFilesystemTools(options: FilesystemToolOptions): Promise<readonly AgentTool[]>;
+export interface DevelopmentToolOptions {
+    rootPath: string;
+    allowedCommands: readonly string[];
+    inheritedEnvironment?: readonly string[];
+    environment?: Readonly<Record<string, string>>;
+    maxOutputBytes?: number;
+    timeoutMs?: number;
+}
+export declare function createDevelopmentTools(options: DevelopmentToolOptions): Promise<readonly AgentTool[]>;
+export declare function createWorkspaceTools(options: FilesystemToolOptions & Partial<Omit<DevelopmentToolOptions, "rootPath">>): Promise<readonly AgentTool[]>;
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/node/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/node/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAA4B,KAAK,SAAS,EAAmB,MAAM,qBAAqB,CAAC;AA0DhG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC,CAqMzG;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAYD,wBAAsB,sBAAsB,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC,CAuF3G;AAED,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAAC,GAAG,OAAO,CAAC,SAAS,SAAS,EAAE,CAAC,CAW5J"}