@xopcai/xopc 0.0.308 → 0.0.309

package/dist/src/agent/tools/repository-search.js

@@ -1,84 +1,137 @@
 import { prepareSafeToolEnv } from "../sandbox/sanitize-env-vars.js";
 import { evaluateFilePolicy } from "../sandbox/exec-policy.js";
+import { dataScheduler } from "../data-acquisition/scheduler.js";
 import { resolveRipgrepBinary } from "../../infra/ripgrep.js";
 import { lstatSync } from "node:fs";
 import { spawn } from "node:child_process";
+import { StringDecoder } from "node:string_decoder";
 //#region src/agent/tools/repository-search.ts
-/** Bounded native search; unavailable tools and invalid regexes are explicit failures. */
-async function repositorySearch(cwd, args, signal) {
-	signal?.throwIfAborted();
-	const binary = await resolveRipgrepBinary();
-	return new Promise((resolve, reject) => {
-		const separator = args.indexOf("--");
-		const options = separator < 0 ? args : args.slice(0, separator);
-		const targets = separator < 0 ? [] : args.slice(separator);
-		const excluded = [
-			".git",
-			"node_modules",
-			".env",
-			".env.*",
-			".ssh",
-			".aws",
-			".gnupg",
-			".docker",
-			".config",
-			".netrc",
-			".npmrc",
-			".cargo/credentials",
-			".kube",
-			".xopc"
-		];
-		const child = spawn(binary, [
-			"--no-config",
-			"--hidden",
-			...options,
-			...excluded.flatMap((path) => [
-				"--glob",
-				`!**/${path}`,
-				"--glob",
-				`!**/${path}/**`
-			]),
-			"--no-follow",
-			...targets
-		], {
-			cwd,
-			env: prepareSafeToolEnv(process.env)
-		});
-		const chunks = [];
-		let bytes = 0, truncated = false, stderr = "";
-		const timer = setTimeout(() => child.kill("SIGKILL"), 1e4);
-		const abort = () => child.kill("SIGKILL");
-		signal?.addEventListener("abort", abort, { once: true });
-		child.stdout.on("data", (chunk) => {
-			const remaining = Math.max(0, 5e4 - bytes);
-			chunks.push(chunk.subarray(0, remaining));
-			bytes += chunk.length;
-			if (bytes > 5e4) {
-				truncated = true;
-				child.kill("SIGKILL");
-			}
-		});
-		child.stderr.on("data", (chunk) => {
-			stderr = (stderr + String(chunk)).slice(-4e3);
-		});
-		child.on("error", reject);
-		child.on("close", (code) => {
-			clearTimeout(timer);
-			signal?.removeEventListener("abort", abort);
-			if (signal?.aborted) {
-				reject(signal.reason ?? /* @__PURE__ */ new Error("Search aborted"));
-				return;
-			}
-			if (code !== 0 && code !== 1 && !truncated) {
-				reject(new Error(stderr || "Search did not complete; check ripgrep installation or narrow the search."));
-				return;
-			}
-			resolve({
-				output: Buffer.concat(chunks).toString("utf8"),
-				truncated
+function parseRepositoryMatch(workspace, line) {
+	if (!line) return void 0;
+	const event = JSON.parse(line);
+	if (event.type !== "match" && event.type !== "context") return void 0;
+	const data = event.data;
+	if (typeof data?.path?.text !== "string" || typeof data.lines?.text !== "string" || !Number.isInteger(data.line_number) || !isSearchFileAllowed(workspace, data.path.text)) return void 0;
+	return {
+		path: data.path.text,
+		line: data.line_number,
+		text: data.lines.text.replace(/\r?\n$/, ""),
+		match: event.type === "match"
+	};
+}
+/** One bounded process path for raw filename output and streamed JSON events. */
+async function repositorySearch(cwd, args, signal, options = {}) {
+	const deadline = AbortSignal.any([...signal ? [signal] : [], AbortSignal.timeout(1e4)]);
+	return dataScheduler.run(cwd, deadline, async () => {
+		deadline.throwIfAborted();
+		const binary = await resolveRipgrepBinary();
+		deadline.throwIfAborted();
+		return new Promise((resolve, reject) => {
+			const separator = args.indexOf("--");
+			const searchOptions = separator < 0 ? args : args.slice(0, separator);
+			const targets = separator < 0 ? [] : args.slice(separator);
+			const excluded = [
+				".git",
+				"node_modules",
+				".env",
+				".env.*",
+				".ssh",
+				".aws",
+				".gnupg",
+				".docker",
+				".config",
+				".netrc",
+				".npmrc",
+				".cargo/credentials",
+				".kube",
+				".xopc"
+			];
+			const child = spawn(binary, [
+				"--no-config",
+				"--hidden",
+				...searchOptions,
+				...excluded.flatMap((path) => [
+					"--glob",
+					`!**/${path}`,
+					"--glob",
+					`!**/${path}/**`
+				]),
+				"--no-follow",
+				...targets
+			], {
+				cwd,
+				env: prepareSafeToolEnv(process.env)
+			});
+			const chunks = [];
+			const decoder = new StringDecoder("utf8");
+			let bytes = 0, truncated = false, stderr = "", pending = "";
+			let failure;
+			const stop = () => child.kill("SIGKILL");
+			const consume = (text) => {
+				pending += text;
+				let newline;
+				while (!truncated && (newline = pending.indexOf("\n")) !== -1) {
+					const line = pending.slice(0, newline);
+					pending = pending.slice(newline + 1);
+					if (options.onLine?.(line) === false) {
+						truncated = true;
+						stop();
+					}
+				}
+			};
+			deadline.addEventListener("abort", stop, { once: true });
+			child.stdout.on("data", (chunk) => {
+				if (truncated || failure) return;
+				const remaining = Math.max(0, (options.maxBytes ?? 5e4) - bytes);
+				const selected = chunk.subarray(0, remaining);
+				bytes += chunk.length;
+				try {
+					if (options.onLine) consume(decoder.write(selected));
+					else chunks.push(selected);
+				} catch (error) {
+					failure = error instanceof Error ? error : new Error(String(error));
+					stop();
+				}
+				if (bytes > (options.maxBytes ?? 5e4)) {
+					truncated = true;
+					stop();
+				}
+			});
+			child.stderr.on("data", (chunk) => {
+				stderr = (stderr + String(chunk)).slice(-4e3);
+			});
+			child.on("error", (error) => {
+				failure = error;
+			});
+			child.on("close", (code) => {
+				deadline.removeEventListener("abort", stop);
+				if (deadline.aborted) {
+					reject(deadline.reason);
+					return;
+				}
+				if (failure) {
+					reject(failure);
+					return;
+				}
+				if (code !== 0 && code !== 1 && !truncated) {
+					reject(new Error(stderr || "Search did not complete; narrow the search."));
+					return;
+				}
+				try {
+					if (options.onLine && !truncated) {
+						consume(decoder.end());
+						if (pending && options.onLine(pending) === false) truncated = true;
+					}
+					resolve({
+						output: Buffer.concat(chunks).toString("utf8"),
+						truncated
+					});
+				} catch (error) {
+					reject(error);
+				}
 			});
+			if (deadline.aborted) stop();
 		});
-		if (signal?.aborted) abort();
 	});
 }
 /** Search results must satisfy the same policy as direct file reads. */
@@ -97,4 +150,4 @@ function isSearchFileAllowed(workspace, path) {
 	}
 }
 //#endregion
-export { isSearchFileAllowed, repositorySearch };
+export { isSearchFileAllowed, parseRepositoryMatch, repositorySearch };

package/dist/src/agent/tools/web.js

@@ -1,6 +1,6 @@
 import { SearchProviderRegistry } from "./search/registry.js";
 import { resolveWebSearchConfig } from "./search/resolve-config.js";
-import { checkUrlSafety, checkWebsiteBlocklist } from "./url-safety.js";
+import { fetchPublicText } from "./fetch-text.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/web.ts
 const WebSearchSchema = Type.Object({
@@ -16,6 +16,7 @@ function createWebSearchTool(getConfig) {
 		description: "Search the web. Uses configured search APIs when set; otherwise falls back to a built-in HTML search (region-aware).",
 		parameters: WebSearchSchema,
 		label: "🔍 Web Search",
+		supportsParallel: true,
 		async execute(_toolCallId, params, signal) {
 			const p = params;
 			const cfg = resolveWebSearchConfig(getConfig()?.tools?.web);
@@ -49,13 +50,15 @@ function createWebSearchTool(getConfig) {
 						type: "text",
 						text: `Search error: ${error instanceof Error ? error.message : String(error)}`
 					}],
-					details: { results: [] }
+					details: {
+						results: [],
+						error: error instanceof Error ? error.message : String(error)
+					}
 				};
 			}
 		}
 	};
 }
-const MAX_FETCH_CHARS = 6e6;
 const WebFetchSchema = Type.Object({
 	url: Type.String({ description: "The URL to fetch" }),
 	maxChars: Type.Optional(Type.Number({ description: "Maximum characters to return (default: 10000)" }))
@@ -76,47 +79,35 @@ function createWebFetchTool(getConfig) {
 		description: "Fetch and extract readable content from a URL (HTML via Readability; plain text as-is).",
 		parameters: WebFetchSchema,
 		label: "🌐 Web Fetch",
+		supportsParallel: true,
 		async execute(_toolCallId, params, signal) {
 			try {
 				const p = params;
-				const safety = checkUrlSafety(p.url);
-				if (!safety.safe) return {
-					content: [{
-						type: "text",
-						text: `Blocked: ${safety.reason}`
-					}],
-					details: {}
-				};
-				const blocked = checkWebsiteBlocklist(p.url, getConfig()?.tools?.web?.blocklist);
-				if (blocked) return {
-					content: [{
-						type: "text",
-						text: `Blocked: ${blocked.message}`
-					}],
-					details: {}
-				};
-				const response = await fetch(p.url, { signal });
-				if (!response.ok) throw new Error(`HTTP ${response.status}`);
-				const html = await response.text();
-				if (html.length > MAX_FETCH_CHARS) throw new Error("Response too large");
+				const fetched = await fetchPublicText(p.url, getConfig()?.tools?.web?.blocklist, signal);
+				const html = fetched.text;
 				const maxChars = p.maxChars || 1e4;
-				const contentType = response.headers.get("content-type") ?? "";
+				const contentType = fetched.contentType;
 				const looksHtml = /html|xml/i.test(contentType) || /^[\s\n]*</.test(html.slice(0, Math.min(500, html.length)));
 				let text;
 				if (looksHtml) try {
-					text = await extractReadableText(html, p.url);
+					text = await extractReadableText(html, fetched.url);
 					if (!text || text.length < 40) text = stripHtmlFallback(html);
 				} catch {
 					text = stripHtmlFallback(html);
 				}
 				else text = html.trim();
-				if (text.length > maxChars) text = text.substring(0, maxChars) + "\n\n[truncated...]";
+				const truncated = text.length > maxChars;
+				if (truncated) text = text.substring(0, maxChars) + "\n\n[truncated...]";
 				return {
 					content: [{
 						type: "text",
 						text
 					}],
-					details: {}
+					details: {
+						truncated,
+						complete: !truncated,
+						url: fetched.url
+					}
 				};
 			} catch (error) {
 				return {
@@ -124,7 +115,7 @@ function createWebFetchTool(getConfig) {
 						type: "text",
 						text: `Fetch error: ${error instanceof Error ? error.message : String(error)}`
 					}],
-					details: {}
+					details: { error: error instanceof Error ? error.message : String(error) }
 				};
 			}
 		}

package/dist/src/agent/workflow/subagent-runner.js

@@ -2,7 +2,9 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { createSqliteTranscriptRuntime } from "../embedded/transcript-runtime.js";
 import { createDelegateChildHandle } from "../child-agent-factory.js";
-import { DEFAULT_DELEGATE_TOOLS, DELEGATE_BLOCKED_TOOLS } from "../tools/delegate-tool.js";
+import { DELEGATION_TOOL_CAPABILITIES, protectDelegatedTool, resolveDelegationTools } from "../tools/delegation-policy.js";
+import { DELEGATE_BLOCKED_TOOLS } from "../tools/delegate-tool.js";
+import { createDelegationParentPolicy } from "../tools/delegation-parent-policy.js";
 import { STRUCTURED_OUTPUT_TOOL_NAME, createStructuredOutputTool } from "./structured-output-tool.js";
 //#region src/agent/workflow/subagent-runner.ts
 init_logger();
@@ -38,11 +40,27 @@ var DelegateSubagentRunner = class {
 			agentId: this.deps.agentId,
 			getConfig: this.deps.getConfig,
 			toolExecutorConfig: this.deps.toolExecutorConfig,
+			authorizeToolCall: createDelegationParentPolicy({
+				getConfig: this.deps.getConfig,
+				conversationId: opts.sessionMetadata?.parentConversationId,
+				agentId: this.deps.agentId
+			}).beforeToolCall,
 			buildChildTools: (childOpts) => {
-				const base = this.deps.buildChildTools({
+				const candidates = this.deps.buildChildTools({
 					...childOpts,
 					agentId: this.deps.agentId ?? childOpts.agentId
 				});
+				const access = resolveDelegationTools(candidates.map((tool) => tool.name), "custom", opts.allowedToolNames, [
+					"local_read",
+					"web_read",
+					"knowledge_read",
+					"skills_read",
+					"external_read",
+					...opts.allowedToolNames?.includes("browser_use") ? ["browser"] : []
+				]);
+				if (access.rejected.length) throw new Error(`Workflow delegation rejected tools: ${JSON.stringify(access.rejected)}. Use delegate_task implement for isolated writes and commands.`);
+				const granted = new Set(access.granted);
+				const base = candidates.filter((tool) => granted.has(tool.name)).map(protectDelegatedTool);
 				if (!wantStructured || !opts.schema) return base;
 				return [...base.filter((t) => t.name !== STRUCTURED_OUTPUT_TOOL_NAME), createStructuredOutputTool({
 					schema: opts.schema,
@@ -129,7 +147,11 @@ var DelegateSubagentRunner = class {
 	}
 };
 function resolveAllowedToolNames(requested, wantStructured) {
-	const filtered = (requested ?? [...DEFAULT_DELEGATE_TOOLS]).map((s) => String(s).trim()).filter((s) => s.length > 0).filter((s) => !DELEGATE_BLOCKED_TOOLS.has(s));
+	const filtered = (requested ?? Object.keys(DELEGATION_TOOL_CAPABILITIES).filter((name) => ![
+		"local_write",
+		"command",
+		"browser"
+	].includes(DELEGATION_TOOL_CAPABILITIES[name]))).map((s) => String(s).trim()).filter((s) => s.length > 0).filter((s) => !DELEGATE_BLOCKED_TOOLS.has(s));
 	if (wantStructured && !filtered.includes("structured_output")) filtered.push(STRUCTURED_OUTPUT_TOOL_NAME);
 	return [...new Set(filtered)];
 }

package/dist/src/agent/workflow/workflow-child-tools.js

@@ -1,13 +1,22 @@
-import { EXTERNAL_TOOL_NAMES } from "../external-tools/gateway-tools.js";
-import "../external-tools/index.js";
+import { resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { AgentToolsFactory } from "../tools/factory.js";
 //#region src/agent/workflow/workflow-child-tools.ts
 /** Builds the tool set for workflow child agents (wired from gateway to avoid cycles). */
 function buildWorkflowChildTools(childOptions) {
+	const config = childOptions.getConfig();
+	const profile = config ? childOptions.browserConversationId ? resolveEffectiveAgentProfileForSession(config, childOptions.browserConversationId) : childOptions.agentId ? resolveEffectiveAgentProfile(config, childOptions.agentId) : resolveEffectiveAgentProfileForSession(config, void 0) : void 0;
 	return new AgentToolsFactory({
 		workspace: childOptions.workspace,
 		bus: childOptions.bus,
-		getCurrentContext: () => null,
+		getCurrentContext: () => childOptions.browserConversationId ? {
+			conversationId: childOptions.browserConversationId,
+			channel: "workflow",
+			chatId: childOptions.browserConversationId,
+			origin: {
+				type: "system",
+				source: "workflow"
+			}
+		} : null,
 		getConfig: childOptions.getConfig,
 		getPrimaryModel: () => childOptions.model,
 		endpointTools: childOptions.endpointTools,
@@ -17,11 +26,7 @@ function buildWorkflowChildTools(childOptions) {
 		getPrimaryModel: () => childOptions.model,
 		agentId: childOptions.agentId,
 		conversationId: childOptions.browserConversationId,
-		disabledTools: new Set([
-			EXTERNAL_TOOL_NAMES.search,
-			EXTERNAL_TOOL_NAMES.describe,
-			EXTERNAL_TOOL_NAMES.execute
-		])
+		disabledTools: profile?.tools.denied
 	});
 }
 //#endregion

package/dist/src/agent-config/schema.d.ts

@@ -96,6 +96,7 @@ export declare const ToolPolicySchema: z.ZodObject<{
         deny: "deny";
         ask: "ask";
     }>;
+    readOnly: z.ZodOptional<z.ZodBoolean>;
     maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
     timeoutMs: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strict>;
@@ -105,6 +106,7 @@ export declare const ToolPoliciesSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
         deny: "deny";
         ask: "ask";
     }>;
+    readOnly: z.ZodOptional<z.ZodBoolean>;
     maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
     timeoutMs: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strict>>;
@@ -198,6 +200,7 @@ export declare const AgentDefaultsSchema: z.ZodObject<{
             deny: "deny";
             ask: "ask";
         }>;
+        readOnly: z.ZodOptional<z.ZodBoolean>;
         maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
         timeoutMs: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>>;
@@ -289,6 +292,7 @@ export declare const AgentEntrySchema: z.ZodObject<{
             deny: "deny";
             ask: "ask";
         }>;
+        readOnly: z.ZodOptional<z.ZodBoolean>;
         maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
         timeoutMs: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>>;
@@ -370,6 +374,7 @@ export declare const AgentsConfigSchema: z.ZodObject<{
                 deny: "deny";
                 ask: "ask";
             }>;
+            readOnly: z.ZodOptional<z.ZodBoolean>;
             maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
             timeoutMs: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>>;
@@ -457,6 +462,7 @@ export declare const AgentsConfigSchema: z.ZodObject<{
                 deny: "deny";
                 ask: "ask";
             }>;
+            readOnly: z.ZodOptional<z.ZodBoolean>;
             maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
             timeoutMs: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>>;
@@ -544,6 +550,7 @@ export declare const EffectiveAgentConfigSchema: z.ZodObject<{
             deny: "deny";
             ask: "ask";
         }>;
+        readOnly: z.ZodOptional<z.ZodBoolean>;
         maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
         timeoutMs: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strict>>;

package/dist/src/agent-config/schema.js

@@ -49,6 +49,8 @@ var init_schema = __esmMin((() => {
 	]);
 	ToolPolicySchema = z.object({
 		mode: ToolModeSchema,
+		/** Host assertion for external tools; remote annotations alone cannot grant read access. */
+		readOnly: z.boolean().optional(),
 		maxCallsPerTurn: z.number().int().positive().optional(),
 		timeoutMs: z.number().int().positive().optional()
 	}).strict();

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -53,7 +53,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v185).`,
+		message: `SQLite schema v${status.dbVersion} (current release v186).`,
 		hints: []
 	};
 }

package/dist/src/config/schema.d.ts

@@ -100,6 +100,7 @@ export declare const AgentsConfigSchema: z.ZodDefault<z.ZodObject<{
                 deny: "deny";
                 ask: "ask";
             }>;
+            readOnly: z.ZodOptional<z.ZodBoolean>;
             maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
             timeoutMs: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>>;
@@ -187,6 +188,7 @@ export declare const AgentsConfigSchema: z.ZodDefault<z.ZodObject<{
                 deny: "deny";
                 ask: "ask";
             }>;
+            readOnly: z.ZodOptional<z.ZodBoolean>;
             maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
             timeoutMs: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>>;
@@ -1610,6 +1612,7 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                     deny: "deny";
                     ask: "ask";
                 }>;
+                readOnly: z.ZodOptional<z.ZodBoolean>;
                 maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
                 timeoutMs: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strict>>>;
@@ -1697,6 +1700,7 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                     deny: "deny";
                     ask: "ask";
                 }>;
+                readOnly: z.ZodOptional<z.ZodBoolean>;
                 maxCallsPerTurn: z.ZodOptional<z.ZodNumber>;
                 timeoutMs: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strict>>>;

package/dist/src/gateway/agent-builtin-tools.d.ts

@@ -277,4 +277,4 @@ export declare const GATEWAY_BUILTIN_TOOLS: readonly [{
         readonly zh: "使用已验证的参数执行选定的外部工具。";
     };
 }];
-export declare const GATEWAY_BUILTIN_TOOL_IDS: ("automation" | "workflow" | "find" | "image" | "knowledge_search" | "knowledge_get" | "knowledge_write" | "user_context_search" | "user_context_get" | "user_context_update" | "web_search" | "web_fetch" | "browser_use" | "grep" | "session_search" | "read_file" | "list_dir" | "write_file" | "apply_patch" | "exec_command" | "update_plan" | "todo" | "clarify" | "web_extract" | "image_generate" | "skills_list" | "skill_view" | "skill_manage" | "skills_marketplace_search" | "xopc_tool_search" | "xopc_tool_describe" | "xopc_tool_execute" | "send_message" | "send_media" | "read_media" | "create_share" | "session_status" | "memory_maintenance" | "computer_use" | "tool_manual" | "delegate_task" | "skill_install" | "text_to_speech" | "execute_code" | "create_desktop_pet")[];
+export declare const GATEWAY_BUILTIN_TOOL_IDS: ("automation" | "workflow" | "find" | "image" | "knowledge_search" | "knowledge_get" | "knowledge_write" | "user_context_search" | "user_context_get" | "user_context_update" | "web_search" | "web_fetch" | "browser_use" | "grep" | "session_search" | "read_file" | "list_dir" | "write_file" | "apply_patch" | "exec_command" | "update_plan" | "todo" | "clarify" | "xopc_tool_execute" | "web_extract" | "image_generate" | "skills_list" | "skill_view" | "skill_manage" | "skills_marketplace_search" | "xopc_tool_search" | "xopc_tool_describe" | "send_message" | "send_media" | "read_media" | "create_share" | "session_status" | "memory_maintenance" | "computer_use" | "tool_manual" | "delegate_task" | "skill_install" | "text_to_speech" | "execute_code" | "create_desktop_pet")[];

package/dist/src/gateway/heartbeat/service.js

@@ -4,11 +4,11 @@ import { init_agent_scope, resolveDefaultAgentId } from "../../agent/agent-scope
 import { createConversation, init_conversation_repository, resolveRoutedConversation } from "../../storage/sqlite/conversation-repository.js";
 import { shouldSilence, stripHeartbeatToken } from "../../heartbeat/tokens.js";
 import { proactiveChecksAllowed, proactivePreferences } from "../../proactive/policy/service.js";
+import { beginHeartbeatCheck, completeHeartbeatCheck, deliverHeartbeatChecks, recentHeartbeatChecks, recoverHeartbeatChecks } from "./check-store.js";
+import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { isWithinActiveHours } from "../../heartbeat/active-hours.js";
 import { isHeartbeatContentEmpty } from "../../heartbeat/content-check.js";
-import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { createHeartbeatWake } from "../../heartbeat/wake.js";
-import { beginHeartbeatCheck, completeHeartbeatCheck, deliverHeartbeatChecks, recentHeartbeatChecks, recoverHeartbeatChecks } from "./check-store.js";
 import { resolveHeartbeatMdPath } from "../workspace-heartbeat-path.js";
 import { readFile } from "fs/promises";
 //#region src/gateway/heartbeat/service.ts

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -49,6 +49,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
             };
             tools: Record<string, {
                 mode: "allow" | "deny" | "ask";
+                readOnly?: boolean;
                 maxCallsPerTurn?: number;
                 timeoutMs?: number;
             }>;
@@ -99,6 +100,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
             };
             tools: Record<string, {
                 mode: "allow" | "deny" | "ask";
+                readOnly?: boolean;
                 maxCallsPerTurn?: number;
                 timeoutMs?: number;
             }>;