@xopcai/xopc 0.0.392 → 0.0.394

package/dist/src/agent/tools/exec-command.js

@@ -1,14 +1,16 @@
 import { runProcess } from "../../process/run-process.js";
+import { readWorkspaceRevision } from "../coding/workspace-revision.js";
 import { commandRegistry, commandTimeout } from "../commands/command-registry.js";
 import { evaluateExecPolicy } from "../sandbox/exec-policy.js";
 import { formatSize, truncateTail } from "./truncate.js";
 import { publishArtifactPaths } from "./publish-artifacts.js";
+import { classifyVerificationCommand } from "../coding/verification-command.js";
 import { resolve } from "node:path";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/exec-command.ts
 const DEFAULT_MAX_OUTPUT_CHARS = 5e4;
 const ExecCommandSchema = Type.Object({
-	cmd: Type.String({ description: "Command for the default platform shell: /bin/sh on Unix and in Docker; cmd.exe on Windows hosts. Use portable syntax, or invoke an installed shell explicitly for shell-specific features." }),
+	cmd: Type.String({ description: "Command for the default platform shell: /bin/sh on Unix and in Docker; cmd.exe on Windows hosts. Commands start in the workspace; use cwd instead of cd. For verification, invoke the existing test runner directly without shell chains, pipes, or output filters so its exit status and evidence remain unambiguous. Use maxOutputChars to limit output." }),
 	cwd: Type.Optional(Type.String({ description: "Working directory. Relative paths are resolved under the agent workspace." })),
 	timeoutMs: Type.Optional(Type.Number({ description: "Command timeout in milliseconds. Defaults to 1800000 (30m) and is capped at 14400000 (4h)." })),
 	maxOutputChars: Type.Optional(Type.Number({ description: "Maximum characters returned to the model. UI streaming still receives output deltas." })),
@@ -17,9 +19,10 @@ const ExecCommandSchema = Type.Object({
 		maximum: 6e4,
 		description: "Return a running job after this wait; manage it with managed_job. Omit to wait for completion. Cannot be combined with outputs."
 	})),
+	reuseVerification: Type.Optional(Type.Boolean({ description: "Publish outputs using this exact command and cwd from a prior successful check at the identical workspace revision, without executing again. Requires outputs. Fails closed if no matching evidence; omit when a fresh execution is required." })),
 	outputs: Type.Optional(Type.Array(Type.String({ minLength: 1 }), {
 		maxItems: 50,
-		description: "Final user-facing files created by this command. Relative paths resolve under the effective cwd and are persisted as chat deliverables after a successful command."
+		description: "Final user-facing files to persist after this command succeeds, including files written earlier in the task. Put all final paths on the final verification command to verify and publish in one call. Relative paths resolve under the effective cwd."
 	}))
 });
 function clampMaxOutputChars(raw) {
@@ -52,6 +55,7 @@ function formatOutputForModel(details, maxOutputChars) {
 	};
 }
 function createExecCommandTool(workspaceCwd, options) {
+	const successfulChecks = /* @__PURE__ */ new Map();
 	return {
 		name: "exec_command",
 		description: [
@@ -60,7 +64,7 @@ function createExecCommandTool(workspaceCwd, options) {
 			"Use apply_patch for file edits; do not edit files by shell redirection unless explicitly necessary.",
 			"Relative cwd values resolve under the current agent workspace.",
 			"Use a fresh output directory with mkdir -p. Avoid destructive cleanup such as rm -rf on variable paths; blocked cleanup should be removed, never disguised or moved to bypass policy. A syntax preflight on Unix host commands prevents partial writes from malformed shell syntax.",
-			"When the command creates final user-facing files, declare all final paths in outputs so they are persisted with this command."
+			"Default delivery is a workspace link. For requested downloads, add outputs to a necessary check. After it passed, use reuseVerification:true with the same cmd/cwd and outputs to publish without executing again; never rerun solely for attachments. Successful receipts need no republishing."
 		].join(" "),
 		parameters: ExecCommandSchema,
 		label: "Run Command",
@@ -170,9 +174,40 @@ function createExecCommandTool(workspaceCwd, options) {
 					};
 				}
 			}
+			const checkKey = JSON.stringify([policy.effectiveCwd, command]);
+			if (params.reuseVerification) {
+				signal?.throwIfAborted();
+				const previous = successfulChecks.get(checkKey);
+				const revision = await readWorkspaceRevision(workspaceCwd);
+				if (!params.outputs?.length || isolation || !revision || previous?.revision !== revision) throw new Error("Nothing executed or published: no reusable successful check at this workspace revision. Use an existing artifact receipt, publish_artifacts, or perform necessary fresh verification.");
+				const artifacts = await publishArtifactPaths({
+					paths: params.outputs,
+					baseDir: policy.effectiveCwd,
+					workspaceRoot: workspaceCwd,
+					toolCallId
+				});
+				return {
+					content: [{
+						type: "text",
+						text: `No command executed. Reused successful check ${previous.toolCallId} at unchanged revision ${revision}. Artifacts: ${artifacts.filter((item) => item.availability === "available").length} published.`
+					}],
+					details: {
+						...previous.details,
+						id: void 0,
+						durationMs: 0,
+						stdout: "",
+						stderr: "",
+						aggregatedOutput: "",
+						executionPerformed: false,
+						reusedFromToolCallId: previous.toolCallId,
+						artifacts
+					}
+				};
+			}
 			const runtimeEnv = options?.prepareEnv ? await options.prepareEnv(policy.sanitizedEnv, policy.effectiveCwd) : policy.sanitizedEnv;
 			const owner = options?.getConversationId?.() ?? workspaceCwd;
 			const registry = commandRegistry();
+			successfulChecks.delete(checkKey);
 			let commandResult = await registry.start({
 				workspace: workspaceCwd,
 				isolation,
@@ -232,6 +267,16 @@ function createExecCommandTool(workspaceCwd, options) {
 				const published = details.artifacts.filter((item) => item.availability === "available").length;
 				const failed = details.artifacts.length - published;
 				resultText += `\n\nArtifacts: ${published} published${failed > 0 ? `, ${failed} failed` : ""}.`;
+				resultText += `\n${details.artifacts.map((item) => `${JSON.stringify(item.title)}: ${item.availability}`).join("\n")}`;
+			}
+			if (!isolation && details.status === "success" && details.exitCode === 0 && classifyVerificationCommand(command) === "check") {
+				const revision = await readWorkspaceRevision(workspaceCwd);
+				const receipt = commandResult;
+				if (revision && receipt.startRevision === revision && receipt.endRevision === revision) successfulChecks.set(checkKey, {
+					revision,
+					toolCallId,
+					details
+				});
 			}
 			return {
 				content: [{

package/dist/src/agent/tools/factory.d.ts

@@ -27,6 +27,7 @@ import type { WorkflowRunServiceLike } from '../../workflows/service/workflow-ru
 import type { SkillManager } from '../skills/skill-manager.js';
 import { type ToolExecutorConfig } from './executor.js';
 export interface ToolFactoryDeps {
+    isWorkspaceTrusted?: (workspaceDir: string) => boolean | null | undefined;
     workspace: string;
     extensionRegistry?: ExtensionRegistry;
     getCurrentContext: () => {

package/dist/src/agent/tools/factory.js

@@ -8,24 +8,24 @@ import { getSessionMetadata } from "../../storage/sqlite/session-read-repository
 import { patchSessionMetadata } from "../../storage/sqlite/session-repository.js";
 import { getSessionTaskPlan, setSessionTaskPlan } from "../../storage/sqlite/session-task-plan-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
-import { resolveUserContextSessionAccess } from "../../user-context/access-policy.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../agent-scope.js";
-import { resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession } from "../../config/agent-profile.js";
-import { PERSONAL_TOOL_DESCRIPTIONS } from "../../personal-agent/policy.js";
+import { buildRuntimeEnvironment } from "../../runtime-tools/environment.js";
+import { skillEnvironmentId } from "../skills/installer.js";
+import { resolveEffectiveAgentConfigForAgent } from "../../config/agent-profile.js";
 import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
+import { resolveUserContextSessionAccess } from "../../user-context/access-policy.js";
+import { PERSONAL_TOOL_DESCRIPTIONS } from "../../personal-agent/policy.js";
 import { PERSONAL_REQUEST_TOOL_IDS, TASK_EXECUTION_TOOL_IDS, filterExecutionTools, resolveExecutionToolPolicy } from "../embedded/execution-tool-policy.js";
 import { LOCAL_READ_MAX_CHARS } from "./local-read-budget.js";
 import { createPersonalAttentionTool } from "./personal-attention-tool.js";
+import { withCoreToolExposure } from "./toolExposure.js";
 import { markCodemodeCoreRead } from "./codemode-permissions.js";
 import "../../../packages/browser-control-contract/src/index.js";
 import { getEmbeddedExecutionRunId, getEmbeddedExecutionSession } from "../embedded/execution-context.js";
 import { wrapToolsWithProtection } from "./executor.js";
-import { EXTERNAL_TOOL_NAMES } from "../external-tools/gateway-tools.js";
 import { createDefaultExternalToolGatewayTools } from "../external-tools/index.js";
 import { createReadFileTool } from "./read.js";
 import { createDataBatchTool } from "./dataBatch.js";
-import { buildRuntimeEnvironment } from "../../runtime-tools/environment.js";
-import { skillEnvironmentId } from "../skills/installer.js";
 import { createWriteFileTool } from "./write.js";
 import { createListDirTool } from "./list-dir.js";
 import { createPublishArtifactsTool } from "./publish-artifacts.js";
@@ -85,7 +85,7 @@ import { ComputerRuntime } from "../../computer/runtime.js";
 import { createComputerUseTool } from "./computer-use-tool.js";
 import { createReviewWorkspaceTool } from "./review-workspace.js";
 import { createLanguageDiagnosticsTool } from "./language-diagnostics.js";
-import { createDelegationParentPolicy } from "./delegation-parent-policy.js";
+import { createNoninteractiveToolPolicy } from "./noninteractive-tool-policy.js";
 import { mergeTtsConfigFromAppConfig } from "../../voice/tts/merge-config.js";
 import { createTextToSpeechTool } from "./tts-tool.js";
 import { getAgentCapabilityToolNames } from "../capabilities/registry.js";
@@ -268,7 +268,7 @@ var AgentToolsFactory = class AgentToolsFactory {
 			agentId: options?.agentId ?? (cfg ? resolveDefaultAgentId() : "main")
 		});
 		const agentId = options?.agentId;
-		const resolvedAgentId = agentId ?? (cfg ? resolveDefaultAgentId() : "main");
+		const resolvedAgentId = agentId ?? (executionConversationId ? getSessionMetadata(executionConversationId)?.agentId : void 0) ?? (cfg ? resolveDefaultAgentId() : "main");
 		const personalExecution = executionConversationId ? personalRequestForExecution(executionConversationId) : void 0;
 		const personalExecutionMarker = executionConversationId && isXopcDatabaseOpen() ? getSessionMetadata(executionConversationId)?.customData?.personalReadRequestId : void 0;
 		if (personalExecution && executionConversationId && personalExecutionMarker !== personalExecution.requestId) patchSessionMetadata(executionConversationId, { customData: {
@@ -292,7 +292,7 @@ var AgentToolsFactory = class AgentToolsFactory {
 			return key ? getSessionMetadata(key)?.projectId : void 0;
 		};
 		const getCommandIsolation = () => {
-			return this.deps.getConfig?.() ? (currentConversationId() ? resolveEffectiveAgentConfigForSession(currentConversationId()) : resolveEffectiveAgentConfigForAgent(resolvedAgentId)).config.runtime.commandIsolation : void 0;
+			return this.deps.getConfig?.() ? resolveEffectiveAgentConfigForAgent(resolvedAgentId).config.runtime.commandIsolation : void 0;
 		};
 		const externalTools = createDefaultExternalToolGatewayTools({
 			workspace,
@@ -578,9 +578,10 @@ var AgentToolsFactory = class AgentToolsFactory {
 				startWorkflowRun: this.deps.getWorkflowRunService ? (params) => this.deps.getWorkflowRunService().startWorkflowRun(params) : void 0
 			})] : [],
 			...primary ? [createDelegateTool({
+				isWorkspaceTrusted: this.deps.isWorkspaceTrusted,
 				workspace,
 				getParentTools: () => options?.getParentTools?.() ?? filterToolsByDisabledSet(core, disabled),
-				createParentPolicy: options?.createDelegationPolicy ?? (() => createDelegationParentPolicy({
+				createParentPolicy: options?.createDelegationPolicy ?? (() => createNoninteractiveToolPolicy({
 					getConfig: () => this.deps.getConfig?.(),
 					conversationId: currentConversationId(),
 					agentId: resolvedAgentId
@@ -602,6 +603,8 @@ var AgentToolsFactory = class AgentToolsFactory {
 				},
 				toolExecutorConfig: this.deps.toolExecutorConfig,
 				buildChildTools: (childOpts) => {
+					const childAgentId = childOpts.agentId ?? resolvedAgentId;
+					const childConfig = childOpts.getConfig() ? resolveEffectiveAgentConfigForAgent(childAgentId).config : void 0;
 					return new AgentToolsFactory({
 						workspace: childOpts.workspace,
 						bus: childOpts.bus,
@@ -609,21 +612,17 @@ var AgentToolsFactory = class AgentToolsFactory {
 						getConfig: childOpts.getConfig,
 						getPrimaryModel: () => childOpts.model,
 						endpointTools: childOpts.endpointTools ?? this.deps.endpointTools,
-						toolExecutorConfig: childOpts.toolExecutorConfig
+						toolExecutorConfig: {
+							...childOpts.toolExecutorConfig,
+							resolveTimeoutMs: (name) => childOpts.getConfig() ? resolveEffectiveAgentConfigForAgent(childAgentId).config.tools[name]?.timeoutMs : void 0
+						}
 					}).createAllTools({
 						workspace: childOpts.workspace,
 						getPrimaryModel: () => childOpts.model,
-						agentId: options?.agentId ?? childOpts.agentId,
-						conversationId: childOpts.browserConversationId,
-						toolAllowlist: options?.toolAllowlist,
-						disabledTools: new Set([
-							...disabled ?? [],
-							EXTERNAL_TOOL_NAMES.search,
-							EXTERNAL_TOOL_NAMES.describe,
-							EXTERNAL_TOOL_NAMES.execute,
-							EXTERNAL_TOOL_NAMES.requireConnection,
-							EXTERNAL_TOOL_NAMES.updateConnectionObjective
-						])
+						agentId: childAgentId,
+						conversationId: childOpts.conversationId,
+						toolAllowlist: childConfig?.toolAllowlist,
+						disabledTools: new Set(Object.entries(childConfig?.tools ?? {}).filter(([, policy]) => policy.mode === "deny").map(([name]) => name))
 					});
 				}
 			})] : [],
@@ -641,7 +640,7 @@ var AgentToolsFactory = class AgentToolsFactory {
 			"xopc_tool_execute"
 		].some((name) => !disabled?.has(name))) {
 			const dataTools = () => {
-				const policies = this.deps.getConfig?.() ? (currentConversationId() ? resolveEffectiveAgentConfigForSession(currentConversationId()) : resolveEffectiveAgentConfigForAgent(resolvedAgentId)).config.tools : void 0;
+				const policies = this.deps.getConfig?.() ? resolveEffectiveAgentConfigForAgent(resolvedAgentId).config.tools : void 0;
 				if (policies?.data_batch?.mode === "deny") return [];
 				return filterToolsByDisabledSet(core, disabled).filter((tool) => (!allowed || allowed.has(tool.name)) && policies?.[tool.name]?.mode !== "deny");
 			};
@@ -654,7 +653,7 @@ var AgentToolsFactory = class AgentToolsFactory {
 		return filterExecutionTools(executionToolPolicy, filterToolsByDisabledSet(core.map(markCodemodeCoreRead), disabled).filter((tool) => (!allowed || allowed.has(tool.name)) && !(personalToolsConfigured && tool.name === "clarify")).map((tool) => personalToolsConfigured && !tool.name.startsWith("personal_") && PERSONAL_TOOL_DESCRIPTIONS[tool.name] ? {
 			...tool,
 			description: PERSONAL_TOOL_DESCRIPTIONS[tool.name]
-		} : tool));
+		} : tool)).map((tool) => executionToolPolicy.discovery ? withCoreToolExposure(tool) : tool);
 	}
 	createCapabilityTools(capabilityNames, options) {
 		const disabled = options?.disabledTools;

package/dist/src/agent/tools/{delegation-parent-policy.d.ts → noninteractive-tool-policy.d.ts}

@@ -1,6 +1,6 @@
 import type { Config } from '../../config/schema.js';
 /** Noninteractive callers cannot silently turn an ask policy into an allow. */
-export declare function createDelegationParentPolicy(options: {
+export declare function createNoninteractiveToolPolicy(options: {
     getConfig: () => Config | undefined;
     conversationId?: string;
     agentId?: string;

package/dist/src/agent/tools/{delegation-parent-policy.js → noninteractive-tool-policy.js}

@@ -1,8 +1,8 @@
 import { resolveEffectiveAgentConfigForAgent, resolveEffectiveAgentConfigForSession } from "../../config/agent-profile.js";
 import { createAgentTurnPolicy } from "../orchestration/agent-turn-policy.js";
-//#region src/agent/tools/delegation-parent-policy.ts
+//#region src/agent/tools/noninteractive-tool-policy.ts
 /** Noninteractive callers cannot silently turn an ask policy into an allow. */
-function createDelegationParentPolicy(options) {
+function createNoninteractiveToolPolicy(options) {
 	const policies = (name, args) => {
 		if (!options.getConfig()) return [];
 		const resolved = options.conversationId ? resolveEffectiveAgentConfigForSession(options.conversationId) : options.agentId ? resolveEffectiveAgentConfigForAgent(options.agentId) : resolveEffectiveAgentConfigForSession(void 0);
@@ -23,7 +23,7 @@ function createDelegationParentPolicy(options) {
 			const blocked = policies(context.toolCall.name, context.args).find((policy) => policy.mode !== "allow");
 			return blocked ? {
 				block: true,
-				reason: `${blocked.id} requires parent authorization (${blocked.mode}).`
+				reason: `${blocked.id} requires authorization (${blocked.mode}).`
 			} : void 0;
 		},
 		resolveToolLimit: (name, args) => {
@@ -36,4 +36,4 @@ function createDelegationParentPolicy(options) {
 	});
 }
 //#endregion
-export { createDelegationParentPolicy };
+export { createNoninteractiveToolPolicy };

package/dist/src/agent/tools/personal-attention-tool.js

@@ -1,7 +1,7 @@
 import { getSqliteDatabase, init_transaction } from "../../storage/sqlite/transaction.js";
 import { init_session_instance_repository, readCurrentTranscriptId } from "../../storage/sqlite/session-instance-repository.js";
-import { resolveUserContextSessionAccess } from "../../user-context/access-policy.js";
 import { getPersonalAgentByConversation } from "../../personal-agent/repository.js";
+import { resolveUserContextSessionAccess } from "../../user-context/access-policy.js";
 import { boundedPersonalResult } from "./personal-result-budget.js";
 import { parseLocalCheckTime } from "../../personal-agent/proactivity/follow-up-request.js";
 import { applyThreadFeedback, getAttention, getProactivitySettings, listAttention, listInterestCandidates, patchAttention, patchProactivitySettings, rollbackStrategy, saveAttention, strategyState, userText } from "../../personal-agent/proactivity/repository.js";

package/dist/src/agent/tools/personal-read-tool.js

@@ -1,7 +1,7 @@
+import { CapabilityDispatcher } from "../../capabilities/runtime/dispatcher.js";
 import { isPersonalConversation } from "../../personal-agent/repository.js";
 import { LOCAL_READ_MAX_CHARS } from "./local-read-budget.js";
 import { getEmbeddedExecutionSession } from "../embedded/execution-context.js";
-import { CapabilityDispatcher } from "../../capabilities/runtime/dispatcher.js";
 import { registerNoteReadCapabilities } from "../../notes/capabilities/read.js";
 import { registerProjectReadCapabilities } from "../../projects/capabilities/read.js";
 import { registerAutomationReadCapabilities } from "../../automations/capabilities/read.js";

package/dist/src/agent/tools/personal-request-result-tool.js

@@ -1,9 +1,9 @@
 import { getSqliteDatabase, init_transaction, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
 import { TaskRunRepository, init_task_run_repository } from "../../tasks/task-run-repository.js";
 import { init_request_repository, personalRequestForExecution } from "../../personal-agent/request-repository.js";
-import { assertPersonalRequestAccountAccess } from "../../personal-agent/request-access.js";
 import { TaskCollaborationRepository } from "../../tasks/task-collaboration-repository.js";
 import { selectionRequestHash } from "../../agent-matching/selection-repository.js";
+import { assertPersonalRequestAccountAccess } from "../../personal-agent/request-access.js";
 import { PersonalRequestResultSchema } from "../../personal-agent/request-result.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/personal-request-result-tool.ts

package/dist/src/agent/tools/personal-request-tool.js

@@ -5,11 +5,11 @@ import { getPersonalRequest, init_request_repository, listPersonalRequests, upda
 import { getActiveConnectionWait, init_connection_wait_repository, reviseCurrentConnectionObjective, updateConnectionWait } from "../../storage/sqlite/connection-wait-repository.js";
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
 import { init_session_repository } from "../../storage/sqlite/session-repository.js";
-import { isPersonalConversation } from "../../personal-agent/repository.js";
 import { TaskAllocationRepository } from "../../tasks/task-allocation-repository.js";
+import { isPersonalConversation } from "../../personal-agent/repository.js";
+import { selectionRequestHash } from "../../agent-matching/selection-repository.js";
 import { boundedPersonalResult } from "./personal-result-budget.js";
 import { personalCapabilities } from "../../personal-agent/capability-service.js";
-import { selectionRequestHash } from "../../agent-matching/selection-repository.js";
 import { createPersonalTaskTool } from "./personal-task-tool.js";
 import { assertPersonalRequestTimeRange, cancelPersonalRequest, personalRequestSnapshot, publishPersonalRequest, stopPersonalRequestExecution, submitPersonalRequest } from "../../personal-agent/request-service.js";
 import { Type } from "@sinclair/typebox";

package/dist/src/agent/tools/personal-task-tool.js

@@ -6,20 +6,20 @@ import { TaskRepository, init_task_repository } from "../../tasks/task-repositor
 import { getPersonalRequest, init_request_repository } from "../../personal-agent/request-repository.js";
 import { getSessionMetadata } from "../../storage/sqlite/session-read-repository.js";
 import { init_sqlite } from "../../storage/sqlite/index.js";
-import { isPersonalConversation } from "../../personal-agent/repository.js";
 import { TaskAllocationRepository } from "../../tasks/task-allocation-repository.js";
 import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
+import { isPersonalConversation } from "../../personal-agent/repository.js";
 import { TaskOriginRepository } from "../../tasks/task-origin-repository.js";
-import { boundedPersonalResult } from "./personal-result-budget.js";
-import { TaskCollaborationRepository } from "../../tasks/task-collaboration-repository.js";
 import { parseTaskHandoffReferences } from "../../tasks/task-handoff.js";
+import { TaskCollaborationRepository } from "../../tasks/task-collaboration-repository.js";
 import { TaskApplicationService } from "../../tasks/task-application-service.js";
-import { PERSONAL_WORKER_RESULT_GUIDANCE } from "../../personal-agent/communication.js";
+import { AgentSelectionRepository, selectionRequestHash } from "../../agent-matching/selection-repository.js";
 import { getAvailablePersonalAgentTools, personalAgentModelAvailability } from "../../personal-agent/specialist-capabilities.js";
 import { assessSpecialist, matchSpecialists } from "../../agent-matching/service.js";
-import { createXopcUseTool } from "./xopc-use-tool.js";
-import { AgentSelectionRepository, selectionRequestHash } from "../../agent-matching/selection-repository.js";
 import { assertSpecialistEligible, createSelectedTask } from "../../agent-matching/delegation-service.js";
+import { boundedPersonalResult } from "./personal-result-budget.js";
+import { PERSONAL_WORKER_RESULT_GUIDANCE } from "../../personal-agent/communication.js";
+import { createXopcUseTool } from "./xopc-use-tool.js";
 import { cancelPersonalTask } from "../../personal-agent/task-cancel.js";
 import { randomUUID } from "node:crypto";
 import { Type } from "@sinclair/typebox";

package/dist/src/agent/tools/publish-artifacts.js

@@ -1,9 +1,9 @@
 import { turnOutcomeKindFromFileName, turnOutcomeMimeTypeFromFileName } from "../../../packages/gateway-contract/src/turn-outcome.js";
 import { init_src } from "../../../packages/gateway-contract/src/index.js";
+import { fileResourceId, fileSpaceId } from "../../files/file-service.js";
 import { evaluateFilePolicy } from "../sandbox/exec-policy.js";
 import { readWorkspaceFile } from "../sandbox/fileAccess.js";
 import { resolvePathUnderWorkspace } from "./tool-paths.js";
-import { fileResourceId, fileSpaceId } from "../../files/file-service.js";
 import { persistToolMedia } from "./tool-media.js";
 import { basename, isAbsolute, relative, sep } from "node:path";
 import { Type } from "@sinclair/typebox";
@@ -75,7 +75,7 @@ function createPublishArtifactsTool(workspace) {
 	return {
 		name: "publish_artifacts",
 		label: "Publish Artifacts",
-		description: "Publish completed user-facing files into durable chat artifacts. Call this after exec_command or another runtime creates spreadsheets, presentations, PDFs, documents, archives, or other files. Pass every final deliverable together; do not publish temporary or source files.",
+		description: "Publish only completed requested user-facing files missing a current successful artifact receipt. This tool cannot read, edit, create files, or execute commands. If a required edit is blocked, report that limitation without publishing the original or probing this tool. Pass missing final paths together; exclude unchanged captured files, temporary files, and source edits.",
 		parameters: PublishArtifactsSchema,
 		mutationScope: "none",
 		supportsParallel: false,

package/dist/src/agent/tools/review-workspace.js

@@ -1,5 +1,5 @@
-import { readWorkspaceRevision } from "../coding/workspace-revision.js";
 import { prepareSafeToolEnv } from "../sandbox/sanitize-env-vars.js";
+import { readWorkspaceRevision } from "../coding/workspace-revision.js";
 import { evaluateFilePolicy } from "../sandbox/exec-policy.js";
 import { checkedFilePath, readWorkspaceFile } from "../sandbox/fileAccess.js";
 import { resolve } from "node:path";

package/dist/src/agent/tools/search/cache.d.ts

@@ -1,4 +1,4 @@
-import type { SearchResult } from './types.js';
+import type { SearchMetadata, SearchResult } from './types.js';
 export declare const SEARCH_CACHE_TTL_MS: number;
 export interface SearchCacheEntry {
     key: string;
@@ -7,11 +7,13 @@ export interface SearchCacheEntry {
     results: SearchResult[];
     provider: string;
     capturedAt: number;
+    metadata?: SearchMetadata;
 }
 export interface SearchCache {
     get(key: string): SearchCacheEntry | undefined;
     set(entry: SearchCacheEntry): void;
 }
+export declare function withoutSearchCache<T>(run: () => T): T;
 /** Research owns this scope. No account-wide or cross-conversation cache exists. */
 export declare function withSearchCache<T>(cache: SearchCache, run: () => T): T;
 export declare function currentSearchCache(): SearchCache | undefined;

package/dist/src/agent/tools/search/cache.js

@@ -2,6 +2,9 @@ import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/agent/tools/search/cache.ts
 const SEARCH_CACHE_TTL_MS = 10 * 6e4;
 const searchCache = new AsyncLocalStorage();
+function withoutSearchCache(run) {
+	return searchCache.exit(run);
+}
 /** Research owns this scope. No account-wide or cross-conversation cache exists. */
 function withSearchCache(cache, run) {
 	return searchCache.run(cache, run);
@@ -16,4 +19,4 @@ var SearchCacheWriteError = class extends Error {
 	}
 };
 //#endregion
-export { SEARCH_CACHE_TTL_MS, SearchCacheWriteError, currentSearchCache, withSearchCache };
+export { SEARCH_CACHE_TTL_MS, SearchCacheWriteError, currentSearchCache, withSearchCache, withoutSearchCache };

package/dist/src/agent/tools/search/providers/deepseek-protocol.d.ts

@@ -0,0 +1,9 @@
+export declare function deepseekSearchEndpoint(baseUrl?: string): string;
+export declare function deepseekSearchBody(query: string, count: number): string;
+export declare function deepseekSearchResults(body: unknown): Array<{
+    title: string;
+    url: string;
+    description: string;
+    publishedAt?: string;
+}>;
+export declare function readDeepseekResponse(response: Response): Promise<unknown>;

package/dist/src/agent/tools/search/providers/deepseek-protocol.js

@@ -0,0 +1,84 @@
+import { __esmMin } from "../../../../../_virtual/_rolldown/runtime.js";
+//#region src/agent/tools/search/providers/deepseek-protocol.ts
+function deepseekSearchEndpoint(baseUrl = "https://api.deepseek.com") {
+	const url = new URL(baseUrl);
+	if (url.protocol !== "https:" || url.username || url.password || url.search || url.hash || ![
+		"",
+		"/",
+		"/v1",
+		"/v1/"
+	].includes(url.pathname)) throw new Error("DeepSeek API base URL must be an HTTPS origin with optional /v1");
+	return `${url.origin}/v1/tools/search`;
+}
+function deepseekSearchBody(query, count) {
+	if (!query.trim() || Array.from(query).length > 128) throw new Error("DeepSeek search query must contain 1–128 Unicode characters");
+	return JSON.stringify({
+		query,
+		count: Math.max(1, Math.min(50, Math.floor(count))),
+		need_content: false
+	});
+}
+function deepseekSearchResults(body) {
+	if (!body || typeof body !== "object" || !("results" in body) || !Array.isArray(body.results)) throw new Error("DeepSeek search returned an invalid response");
+	const seen = /* @__PURE__ */ new Set();
+	return body.results.flatMap((item) => {
+		if (!item || typeof item !== "object") return [];
+		const row = item;
+		if (typeof row.title !== "string" || !row.title.trim() || typeof row.url !== "string") return [];
+		let url;
+		try {
+			url = new URL(row.url);
+		} catch {
+			return [];
+		}
+		if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || seen.has(url.href)) return [];
+		seen.add(url.href);
+		const description = typeof row.summary === "string" && row.summary.trim() ? row.summary : typeof row.snippet === "string" ? row.snippet : "";
+		return [{
+			title: row.title.trim().slice(0, 300),
+			url: url.href,
+			description: description.trim().slice(0, 800),
+			...typeof row.date === "string" && row.date.length <= 100 ? { publishedAt: row.date } : {}
+		}];
+	});
+}
+async function readDeepseekResponse(response) {
+	const limit = 2 * 1024 * 1024;
+	if (Number(response.headers.get("content-length")) > limit) {
+		await response.body?.cancel();
+		throw new Error("DeepSeek search response is too large");
+	}
+	const reader = response.body?.getReader();
+	if (!reader) throw new Error("DeepSeek search returned an empty response");
+	const chunks = [];
+	let length = 0;
+	try {
+		while (true) {
+			const { value, done } = await reader.read();
+			if (done) break;
+			length += value.byteLength;
+			if (length > limit) {
+				await reader.cancel();
+				throw new Error("DeepSeek search response is too large");
+			}
+			chunks.push(value);
+		}
+	} finally {
+		reader.releaseLock();
+	}
+	const bytes = new Uint8Array(length);
+	let offset = 0;
+	for (const chunk of chunks) {
+		bytes.set(chunk, offset);
+		offset += chunk.byteLength;
+	}
+	try {
+		return JSON.parse(new TextDecoder().decode(bytes));
+	} catch {
+		throw new Error("DeepSeek search returned invalid JSON");
+	}
+}
+var init_deepseek_protocol = __esmMin((() => {}));
+//#endregion
+init_deepseek_protocol();
+export { deepseekSearchBody, deepseekSearchEndpoint, deepseekSearchResults, init_deepseek_protocol, readDeepseekResponse };

package/dist/src/agent/tools/search/providers/deepseek.d.ts

@@ -0,0 +1,9 @@
+import type { SearchProvider, SearchResult } from '../types.js';
+export declare class DeepSeekProvider implements SearchProvider {
+    private readonly apiKey;
+    private readonly baseUrl?;
+    readonly name = "deepseek";
+    constructor(apiKey: string, baseUrl?: string);
+    isAvailable(): boolean;
+    search(query: string, count: number, signal?: AbortSignal): Promise<SearchResult[]>;
+}

package/dist/src/agent/tools/search/providers/deepseek.js

@@ -0,0 +1,55 @@
+import { deepseekSearchBody, deepseekSearchEndpoint, deepseekSearchResults, init_deepseek_protocol, readDeepseekResponse } from "./deepseek-protocol.js";
+import { searchHttpError } from "../errors.js";
+import { SearchRateLimitError, SearchRequestGate } from "../request-gate.js";
+//#region src/agent/tools/search/providers/deepseek.ts
+init_deepseek_protocol();
+const gate = new SearchRequestGate();
+var DeepSeekProvider = class {
+	name = "deepseek";
+	constructor(apiKey, baseUrl) {
+		this.apiKey = apiKey;
+		this.baseUrl = baseUrl;
+	}
+	isAvailable() {
+		return Boolean(this.apiKey.trim());
+	}
+	async search(query, count, signal) {
+		const endpoint = deepseekSearchEndpoint(this.baseUrl);
+		const body = deepseekSearchBody(query, count);
+		try {
+			await gate.wait(signal);
+		} catch (error) {
+			if (error instanceof SearchRateLimitError) throw searchHttpError(new Response(null, {
+				status: 429,
+				headers: { "retry-after": String(error.retryAfterMs / 1e3) }
+			}));
+			throw error;
+		}
+		const response = await fetch(endpoint, {
+			method: "POST",
+			redirect: "error",
+			signal,
+			headers: {
+				authorization: `Bearer ${this.apiKey}`,
+				"content-type": "application/json",
+				accept: "application/json"
+			},
+			body
+		});
+		if (!response.ok) {
+			if (response.status === 429) {
+				const retryAfter = response.headers.get("retry-after");
+				const ms = retryAfter === null ? 1e3 : Number.isFinite(Number(retryAfter)) ? Number(retryAfter) * 1e3 : Date.parse(retryAfter) - Date.now();
+				gate.cooldown(Number.isFinite(ms) ? Math.max(1e3, ms) : 1e3);
+			}
+			await response.body?.cancel();
+			throw searchHttpError(response, response.status === 402 ? "DeepSeek search account balance is insufficient" : `DeepSeek search failed (${response.status})`);
+		}
+		return deepseekSearchResults(await readDeepseekResponse(response)).slice(0, count).map(({ publishedAt: _date, ...result }) => ({
+			...result,
+			source: this.name
+		}));
+	}
+};
+//#endregion
+export { DeepSeekProvider };

package/dist/src/agent/tools/search/providers/xopc-cloud.d.ts

@@ -1,6 +1,6 @@
 import { type ModelCatalogStore } from '../../../../providers/model-catalog-store.js';
 import { type ProviderAuthService } from '../../../../providers/provider-auth-service.js';
-import type { SearchProvider, SearchResult } from '../types.js';
+import type { SearchExecution, SearchProvider, SearchResult } from '../types.js';
 interface XopcCloudSearchProviderOptions {
     region: 'cn' | 'global';
     fetchImpl?: typeof fetch;
@@ -17,5 +17,6 @@ export declare class XopcCloudSearchProvider implements SearchProvider {
     cacheIdentity(): string;
     isAvailable(): boolean;
     search(query: string, count: number, signal?: AbortSignal): Promise<SearchResult[]>;
+    searchWithMetadata(query: string, count: number, signal?: AbortSignal): Promise<SearchExecution>;
 }
 export {};