@xopcai/xopc 0.0.313 → 0.0.315

package/dist/src/agent/tools/review-workspace.js

@@ -1,5 +1,5 @@
-import { prepareSafeToolEnv } from "../sandbox/sanitize-env-vars.js";
 import { readWorkspaceRevision } from "../coding/workspace-revision.js";
+import { prepareSafeToolEnv } from "../sandbox/sanitize-env-vars.js";
 import { evaluateFilePolicy } from "../sandbox/exec-policy.js";
 import { checkedFilePath, readWorkspaceFile } from "../sandbox/fileAccess.js";
 import { resolve } from "node:path";

package/dist/src/agent/tools/scoped-workspace-tools.d.ts

@@ -0,0 +1,8 @@
+import type { AgentTool } from '@earendil-works/pi-agent-core';
+/** Bounded file capability shared by background task executors; no command authority. */
+export declare function createScopedWorkspaceTools(input: {
+    workspace: string;
+    writable: boolean;
+    signal: AbortSignal;
+    guard: () => void;
+}): AgentTool[];

package/dist/src/agent/tools/scoped-workspace-tools.js

@@ -0,0 +1,81 @@
+import { checkedFilePath, readWorkspaceFile, writeWorkspaceFile } from "../sandbox/fileAccess.js";
+import { resolve } from "node:path";
+import { existsSync, readdirSync } from "node:fs";
+import { createHash } from "node:crypto";
+import { Type } from "@sinclair/typebox";
+//#region src/agent/tools/scoped-workspace-tools.ts
+/** Bounded file capability shared by background task executors; no command authority. */
+function createScopedWorkspaceTools(input) {
+	const readVersions = /* @__PURE__ */ new Map();
+	const hash = (content) => createHash("sha256").update(content).digest("hex");
+	const guard = () => {
+		input.signal.throwIfAborted();
+		input.guard();
+	};
+	const result = (value) => ({
+		content: [{
+			type: "text",
+			text: typeof value === "string" ? value : JSON.stringify(value)
+		}],
+		details: {}
+	});
+	const path = (value, operation) => {
+		if (value.split(/[\\/]/).some((segment) => segment === ".git" || segment === ".xopc")) throw new Error("Protected project metadata");
+		const checked = checkedFilePath(input.workspace, resolve(input.workspace, value), operation);
+		if (checked.split(/[\\/]/).some((segment) => segment === ".git")) throw new Error("Protected project metadata");
+		return checked;
+	};
+	const tools = [{
+		name: "read_file",
+		label: "Read workspace file",
+		description: "Read a UTF-8 file inside the authorized workspace (maximum 256 KB).",
+		parameters: Type.Object({ path: Type.String() }),
+		async execute(_id, args) {
+			guard();
+			const file = path(args.path, "read");
+			const content = readWorkspaceFile(input.workspace, file, 262144);
+			readVersions.set(file, hash(content));
+			return result(content.toString("utf8"));
+		}
+	}, {
+		name: "list_directory",
+		label: "List workspace directory",
+		description: "List one workspace directory, maximum 500 entries.",
+		parameters: Type.Object({ path: Type.String() }),
+		async execute(_id, args) {
+			guard();
+			return result(readdirSync(path(args.path, "read"), { withFileTypes: true }).filter((entry) => ![
+				".git",
+				".xopc",
+				".env"
+			].includes(entry.name)).slice(0, 500).map((entry) => ({
+				name: entry.name,
+				directory: entry.isDirectory()
+			})));
+		}
+	}];
+	if (input.writable) tools.push({
+		name: "write_file",
+		label: "Write workspace file",
+		description: "Write a UTF-8 file only inside the authorized workspace. Read existing content before editing. Maximum 256 KB.",
+		parameters: Type.Object({
+			path: Type.String(),
+			content: Type.String({ maxLength: 262144 })
+		}),
+		async execute(_id, args) {
+			guard();
+			if (Buffer.byteLength(args.content) > 262144) throw new Error("File write budget exceeded");
+			const file = path(args.path, "write");
+			if (existsSync(file)) {
+				if (!readVersions.has(file)) throw new Error("Read the existing file before editing");
+				if (readVersions.get(file) !== hash(readWorkspaceFile(input.workspace, file, 262144))) throw new Error("File changed since read; inspect the new content before editing");
+			} else if (readVersions.has(file)) throw new Error("File was removed after read; do not recreate without review");
+			writeWorkspaceFile(input.workspace, file, args.content);
+			readVersions.set(file, hash(args.content));
+			return result("Saved");
+		}
+	});
+	return tools;
+}
+//#endregion
+export { createScopedWorkspaceTools };

package/dist/src/agent/tools/send-media.js

@@ -1,9 +1,9 @@
 import { turnOutcomeKindFromFileName } from "../../../packages/gateway-contract/src/turn-outcome.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
-import { resolvePathUnderWorkspace } from "./tool-paths.js";
-import { MEDIA_MAX_BYTES } from "../../media/store.js";
 import { readWorkspaceFile } from "../sandbox/fileAccess.js";
 import { checkFileSafety } from "../prompt/safety.js";
+import { resolvePathUnderWorkspace } from "./tool-paths.js";
+import { MEDIA_MAX_BYTES } from "../../media/store.js";
 import { persistToolMedia } from "./tool-media.js";
 import { basename } from "node:path";
 import { Type } from "@sinclair/typebox";

package/dist/src/agent/tools/skills-tools.js

@@ -1,7 +1,7 @@
 import { resolveStateDir } from "../../config/paths-state.js";
 import { init_paths } from "../../config/paths.js";
-import { createSkillConfigManager, isSkillEnabled, resolveSkillConfig } from "../skills/config.js";
 import { DEFAULT_MAX_BYTES, formatSize, truncateHead } from "./truncate.js";
+import { createSkillConfigManager, isSkillEnabled, resolveSkillConfig } from "../skills/config.js";
 import { resolveSkillReadablePath } from "../skills/skill-view-path.js";
 import { readFileSync, statSync } from "fs";
 import { Type } from "@sinclair/typebox";

package/dist/src/agent/tools/user-context-tool.js

@@ -1,7 +1,7 @@
+import { retrievalLexicalSimilarity } from "../../retrieval/textFeatures.js";
 import { deleteUserAssertion, getAssertionSlot, getUserAssertion, listUserAssertions, reconcileAssertion, setAssertionStatus } from "../../user-model/repository.js";
 import { canUseAssertion } from "../../user-model/usage-policy.js";
 import "../../user-model/index.js";
-import { retrievalLexicalSimilarity } from "../../retrieval/textFeatures.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/user-context-tool.ts
 const SearchSchema = Type.Object({

package/dist/src/agent/tools/write.js

@@ -1,9 +1,9 @@
 import { appendProductDeliveryText } from "../../../packages/gateway-contract/src/product-delivery.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
-import { fileResourceId, fileSpaceId } from "../../files/file-service.js";
-import { isBareProfileMarkdownFileName, resolvePathUnderWorkspace, resolveProfileMarkdownPathIfBareName } from "./tool-paths.js";
 import { writeWorkspaceFile } from "../sandbox/fileAccess.js";
 import { checkFileSafety } from "../prompt/safety.js";
+import { isBareProfileMarkdownFileName, resolvePathUnderWorkspace, resolveProfileMarkdownPathIfBareName } from "./tool-paths.js";
+import { fileResourceId, fileSpaceId } from "../../files/file-service.js";
 import { basename, relative, sep } from "path";
 import { realpath } from "fs/promises";
 import { Type } from "@sinclair/typebox";

package/dist/src/agent/tools/xopc-use-tool.d.ts

@@ -1,18 +1,19 @@
 import type { SceneAccess } from '../../scenes/httpServices.js';
+import { type CapabilityContext } from '../../capabilities/runtime/dispatcher.js';
 import type { AgentTool } from '@earendil-works/pi-agent-core';
 import { type ProductDeliveryEnvelope } from '@xopcai/gateway-contract';
-import { type AutomationService } from '../../automations/index.js';
+import type { AutomationService } from '../../automations/index.js';
 import type { Config } from '../../config/schema.js';
 import type { NotesService } from '../../notes/index.js';
 import { type ProjectService } from '../../projects/index.js';
 import type { LocalAppService } from '../../local-apps/index.js';
 declare const XopcUseToolSchema: import("@sinclair/typebox").TObject<{
-    mode: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"scene">, import("@sinclair/typebox").TLiteral<"project">, import("@sinclair/typebox").TLiteral<"automation">, import("@sinclair/typebox").TLiteral<"note">, import("@sinclair/typebox").TLiteral<"task">, import("@sinclair/typebox").TLiteral<"task_run">, import("@sinclair/typebox").TLiteral<"local_app">, import("@sinclair/typebox").TLiteral<"settings">]>;
+    mode: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"context">, import("@sinclair/typebox").TLiteral<"scene">, import("@sinclair/typebox").TLiteral<"project">, import("@sinclair/typebox").TLiteral<"automation">, import("@sinclair/typebox").TLiteral<"note">, import("@sinclair/typebox").TLiteral<"task">, import("@sinclair/typebox").TLiteral<"task_run">, import("@sinclair/typebox").TLiteral<"local_app">, import("@sinclair/typebox").TLiteral<"settings">]>;
     command: import("@sinclair/typebox").TString;
     args: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TAny>>;
     dryRun: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
 }>;
-export type XopcUseMode = 'scene' | 'project' | 'automation' | 'note' | 'task' | 'task_run' | 'local_app' | 'settings';
+export type XopcUseMode = 'context' | 'scene' | 'project' | 'automation' | 'note' | 'task' | 'task_run' | 'local_app' | 'settings';
 export interface XopcUseToolInput {
     mode: XopcUseMode;
     command: string;
@@ -20,6 +21,7 @@ export interface XopcUseToolInput {
     dryRun?: boolean;
 }
 export interface XopcUseToolDeps {
+    authorizeCapability?: CapabilityContext['authorize'];
     getWorkspace?: () => string;
     getConfig?: () => Config | undefined;
     getCurrentAgentId?: () => string | undefined;
@@ -28,6 +30,7 @@ export interface XopcUseToolDeps {
     getSceneAccess?: () => SceneAccess | undefined;
     getNotesService?: () => NotesService | undefined;
     getProjectService?: () => ProjectService | undefined;
+    getWorkDiscovery?: () => import('../../work-discovery/service.js').WorkDiscoveryService | undefined;
     getLocalAppService?: () => LocalAppService | undefined;
     dispatchTaskEvents?: () => void;
     dispatchTaskRuns?: () => void;