aec-agent 1.0.0

package/dist/components/tool-hub/built-in-tools/workspace/read-file-tool.js

@@ -0,0 +1,71 @@
+import { argError, formatBytes, numberArg, resolveOptions, stringArg, withSandbox } from "./workspace-helpers.js";
+/**
+ * read_file — read-only. Returns a text file from the agent's workspace with line numbers,
+ * bounded to maxReadBytes; large files are read in line ranges.
+ */
+export class ReadFileTool {
+    name = "tool:read-file";
+    version = "1.0.0";
+    definition;
+    options;
+    constructor(options = {}) {
+        this.options = resolveOptions(options);
+        this.definition = {
+            name: "read_file",
+            description: "Read a text file from your workspace. Lines are prefixed with their line number and a tab " +
+                "(not part of the file — never copy that prefix into edit_file). " +
+                `Returns at most ${formatBytes(this.options.maxReadBytes)}; for bigger files read a range with start_line/end_line.`,
+            parameters: {
+                type: "object",
+                properties: {
+                    path: { type: "string", description: 'File path, relative to your working directory (e.g. "src/app.ts") or under /workspace/shared' },
+                    start_line: { type: "number", description: "First line to read (1-based, optional)" },
+                    end_line: { type: "number", description: "Last line to read (inclusive, optional)" },
+                },
+                required: ["path"],
+            },
+            risk: "read-only",
+            sandboxOperation: "fs.read",
+        };
+    }
+    async execute(args, context) {
+        const path = stringArg(args, "path")?.trim();
+        if (!path)
+            return argError("read_file", '"path" must be a non-empty string');
+        const startLine = numberArg(args, "start_line");
+        const endLine = numberArg(args, "end_line");
+        if ((startLine !== undefined && startLine < 1) || (endLine !== undefined && endLine < 1)) {
+            return argError("read_file", "start_line and end_line are 1-based");
+        }
+        if (startLine !== undefined && endLine !== undefined && endLine < startLine) {
+            return argError("read_file", "end_line must not be before start_line");
+        }
+        return withSandbox("read_file", context, async (env) => {
+            const file = await env.readFile(path, {
+                maxBytes: this.options.maxReadBytes,
+                ...(startLine !== undefined ? { startLine: Math.floor(startLine) } : {}),
+                ...(endLine !== undefined ? { endLine: Math.floor(endLine) } : {}),
+            });
+            const metadata = { path: file.path, size: file.size, sha256: file.sha256, truncated: file.truncated };
+            if (file.content.includes("\u0000")) {
+                return { content: `${file.path} is a binary file (${formatBytes(file.size)}) — it cannot be shown as text.`, metadata };
+            }
+            const first = startLine !== undefined ? Math.floor(startLine) : 1;
+            const lines = file.content === "" ? [] : file.content.split("\n");
+            // A trailing newline is the end of the last line, not an extra empty line.
+            if (lines.length > 1 && lines[lines.length - 1] === "")
+                lines.pop();
+            const width = String(first + lines.length).length;
+            const numbered = lines.map((line, i) => `${String(first + i).padStart(width)}\t${line}`).join("\n");
+            const range = startLine !== undefined || endLine !== undefined
+                ? `, lines ${first}-${first + Math.max(lines.length - 1, 0)}`
+                : "";
+            const header = `${file.path} (${formatBytes(file.size)}${range})`;
+            const footer = file.truncated
+                ? `\n[truncated — the file continues; read more with start_line/end_line]`
+                : "";
+            return { content: `${header}\n${numbered || "(empty file)"}${footer}`, metadata };
+        });
+    }
+}
+//# sourceMappingURL=read-file-tool.js.map

package/dist/components/tool-hub/built-in-tools/workspace/read-file-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-file-tool.js","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/workspace/read-file-tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAElH;;;GAGG;AACH,MAAM,OAAO,YAAY;IACd,IAAI,GAAG,gBAAgB,CAAC;IACxB,OAAO,GAAG,OAAO,CAAC;IAClB,UAAU,CAAiB;IAC5B,OAAO,CAA+B;IAE9C,YAAY,OAAO,GAAyB,EAAE;QAC5C,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,GAAG;YAChB,IAAI,EAAE,WAAW;YACjB,WAAW,EACT,4FAA4F;gBAC5F,kEAAkE;gBAClE,mBAAmB,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,2DAA2D;YACtH,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8FAA8F,EAAE;oBACrI,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wCAAwC,EAAE;oBACrF,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yCAAyC,EAAE;iBACrF;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;YACD,IAAI,EAAE,WAAW;YACjB,gBAAgB,EAAE,SAAS;SAC5B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,OAAoB;QAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;QAC7E,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC;YACzF,OAAO,QAAQ,CAAC,WAAW,EAAE,qCAAqC,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,SAAS,EAAE,CAAC;YAC5E,OAAO,QAAQ,CAAC,WAAW,EAAE,wCAAwC,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,WAAW,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACrD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;gBACpC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;gBACnC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnE,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;YAEtG,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpC,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,sBAAsB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,iCAAiC,EAAE,QAAQ,EAAE,CAAC;YAC1H,CAAC;YAED,MAAM,KAAK,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClE,2EAA2E;YAC3E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;gBAAE,KAAK,CAAC,GAAG,EAAE,CAAC;YACpE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;YAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEpG,MAAM,KAAK,GAAG,SAAS,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS;gBAC5D,CAAC,CAAC,WAAW,KAAK,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE;gBAC7D,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC;YAClE,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS;gBAC3B,CAAC,CAAC,wEAAwE;gBAC1E,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,KAAK,QAAQ,IAAI,cAAc,GAAG,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC;QACpF,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/components/tool-hub/built-in-tools/workspace/run-code-tool.d.ts

@@ -0,0 +1,16 @@
+import type { ToolContext, ToolDefinition, ToolHandler, ToolOutput } from "../../types.js";
+import type { WorkspaceToolOptions } from "./types.js";
+/**
+ * run_code — runs a snippet (python / javascript / shell) in the agent's sandbox with the
+ * same bounds as terminal. Useful for calculations, data wrangling and quick checks
+ * without writing a file first.
+ */
+export declare class RunCodeTool implements ToolHandler {
+    readonly name = "tool:run-code";
+    readonly version = "1.0.0";
+    readonly definition: ToolDefinition;
+    private options;
+    constructor(options?: WorkspaceToolOptions);
+    execute(args: Record<string, unknown>, context: ToolContext): Promise<ToolOutput>;
+}
+//# sourceMappingURL=run-code-tool.d.ts.map

package/dist/components/tool-hub/built-in-tools/workspace/run-code-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-code-tool.d.ts","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/workspace/run-code-tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC3F,OAAO,KAAK,EAAgC,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAYrF;;;;GAIG;AACH,qBAAa,WAAY,YAAW,WAAW;IAC7C,QAAQ,CAAC,IAAI,mBAAmB;IAChC,QAAQ,CAAC,OAAO,WAAW;IAC3B,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,OAAO,CAAC,OAAO,CAA+B;IAE9C,YAAY,OAAO,GAAE,oBAAyB,EAwB7C;IAEK,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CA6BtF;CACF"}

package/dist/components/tool-hub/built-in-tools/workspace/run-code-tool.js

@@ -0,0 +1,72 @@
+import { argError, formatExecResult, resolveOptions, stringArg, timeoutFrom, withSandbox } from "./workspace-helpers.js";
+const MAX_CODE_BYTES = 200_000;
+/** Interpreter per language — the code is passed on stdin, never interpolated into a command line. */
+const INTERPRETERS = {
+    python: ["python3", "-"],
+    javascript: ["node", "-"],
+    shell: ["sh", "-s"],
+};
+/**
+ * run_code — runs a snippet (python / javascript / shell) in the agent's sandbox with the
+ * same bounds as terminal. Useful for calculations, data wrangling and quick checks
+ * without writing a file first.
+ */
+export class RunCodeTool {
+    name = "tool:run-code";
+    version = "1.0.0";
+    definition;
+    options;
+    constructor(options = {}) {
+        this.options = resolveOptions(options);
+        this.definition = {
+            name: "run_code",
+            description: "Run a short program in your sandbox and get its output — python (python3), javascript (node) or shell (sh). " +
+                "Runs in your working directory, so it can read and write your workspace files. Print what you need to see. " +
+                `Default timeout ${Math.round(this.options.defaultTimeoutMs / 1000)} s.`,
+            parameters: {
+                type: "object",
+                properties: {
+                    language: { type: "string", enum: Object.keys(INTERPRETERS), description: "Programming language" },
+                    code: { type: "string", description: "The program source" },
+                    cwd: { type: "string", description: "Directory to run in (default: your working directory)" },
+                    timeout_seconds: {
+                        type: "number",
+                        description: `Kill the program after this many seconds (max ${Math.round(this.options.maxTimeoutMs / 1000)})`,
+                    },
+                },
+                required: ["language", "code"],
+            },
+            risk: "draft",
+            sandboxOperation: "exec",
+        };
+    }
+    async execute(args, context) {
+        const language = stringArg(args, "language") ?? "";
+        const interpreter = INTERPRETERS[language];
+        if (!interpreter)
+            return argError("run_code", `"language" must be one of ${Object.keys(INTERPRETERS).join(", ")}`);
+        const code = stringArg(args, "code");
+        if (!code?.trim())
+            return argError("run_code", '"code" must be a non-empty string');
+        if (Buffer.byteLength(code, "utf8") > MAX_CODE_BYTES) {
+            return argError("run_code", `code is too long (max ${MAX_CODE_BYTES} bytes) — write it to a file and run it with terminal`);
+        }
+        const cwd = stringArg(args, "cwd")?.trim() || undefined;
+        return withSandbox("run_code", context, async (env) => {
+            const timeoutMs = timeoutFrom(args, this.options, env);
+            const result = await env.exec({
+                command: interpreter,
+                stdin: code,
+                ...(cwd ? { cwd } : {}),
+                timeoutMs,
+                maxOutputBytes: env.limits.maxExecOutputBytes,
+            }, context.signal ? { signal: context.signal } : undefined);
+            const output = formatExecResult(`${language} program`, result, timeoutMs, this.options.maxDisplayOutputBytes);
+            if (result.exitCode === 127) {
+                output.content += `\n${interpreter[0]} is not installed in this sandbox.`;
+            }
+            return output;
+        });
+    }
+}
+//# sourceMappingURL=run-code-tool.js.map

package/dist/components/tool-hub/built-in-tools/workspace/run-code-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-code-tool.js","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/workspace/run-code-tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAEzH,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,sGAAsG;AACtG,MAAM,YAAY,GAA6B;IAC7C,MAAM,EAAE,CAAC,SAAS,EAAE,GAAG,CAAC;IACxB,UAAU,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC;IACzB,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;CACpB,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,WAAW;IACb,IAAI,GAAG,eAAe,CAAC;IACvB,OAAO,GAAG,OAAO,CAAC;IAClB,UAAU,CAAiB;IAC5B,OAAO,CAA+B;IAE9C,YAAY,OAAO,GAAyB,EAAE;QAC5C,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,GAAG;YAChB,IAAI,EAAE,UAAU;YAChB,WAAW,EACT,8GAA8G;gBAC9G,6GAA6G;gBAC7G,mBAAmB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,KAAK;YAC1E,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE;oBAClG,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE;oBAC3D,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uDAAuD,EAAE;oBAC7F,eAAe,EAAE;wBACf,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,iDAAiD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG;qBAC9G;iBACF;gBACD,QAAQ,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;aAC/B;YACD,IAAI,EAAE,OAAO;YACb,gBAAgB,EAAE,MAAM;SACzB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,OAAoB;QAC/D,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,WAAW;YAAE,OAAO,QAAQ,CAAC,UAAU,EAAE,6BAA6B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnH,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;YAAE,OAAO,QAAQ,CAAC,UAAU,EAAE,mCAAmC,CAAC,CAAC;QACpF,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,cAAc,EAAE,CAAC;YACrD,OAAO,QAAQ,CAAC,UAAU,EAAE,yBAAyB,cAAc,uDAAuD,CAAC,CAAC;QAC9H,CAAC;QACD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QAExD,OAAO,WAAW,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAC3B;gBACE,OAAO,EAAE,WAAW;gBACpB,KAAK,EAAE,IAAI;gBACX,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvB,SAAS;gBACT,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,kBAAkB;aAC9C,EACD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CACxD,CAAC;YACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,QAAQ,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;YAC9G,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,CAAC,OAAO,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,oCAAoC,CAAC;YAC5E,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/components/tool-hub/built-in-tools/workspace/search-files-tool.d.ts

@@ -0,0 +1,12 @@
+import type { ToolContext, ToolDefinition, ToolHandler, ToolOutput } from "../../types.js";
+import type { WorkspaceToolOptions } from "./types.js";
+/** search_files — read-only content search that runs where the files are, bounded. */
+export declare class SearchFilesTool implements ToolHandler {
+    readonly name = "tool:search-files";
+    readonly version = "1.0.0";
+    readonly definition: ToolDefinition;
+    private options;
+    constructor(options?: WorkspaceToolOptions);
+    execute(args: Record<string, unknown>, context: ToolContext): Promise<ToolOutput>;
+}
+//# sourceMappingURL=search-files-tool.d.ts.map

package/dist/components/tool-hub/built-in-tools/workspace/search-files-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-files-tool.d.ts","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/workspace/search-files-tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC3F,OAAO,KAAK,EAAgC,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAKrF,sFAAsF;AACtF,qBAAa,eAAgB,YAAW,WAAW;IACjD,QAAQ,CAAC,IAAI,uBAAuB;IACpC,QAAQ,CAAC,OAAO,WAAW;IAC3B,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,OAAO,CAAC,OAAO,CAA+B;IAE9C,YAAY,OAAO,GAAE,oBAAyB,EAsB7C;IAEK,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CA+BtF;CACF"}

package/dist/components/tool-hub/built-in-tools/workspace/search-files-tool.js

@@ -0,0 +1,64 @@
+import { argError, boolArg, numberArg, resolveOptions, stringArg, withSandbox } from "./workspace-helpers.js";
+const MAX_LINE_CHARS = 300;
+/** search_files — read-only content search that runs where the files are, bounded. */
+export class SearchFilesTool {
+    name = "tool:search-files";
+    version = "1.0.0";
+    definition;
+    options;
+    constructor(options = {}) {
+        this.options = resolveOptions(options);
+        this.definition = {
+            name: "search_files",
+            description: "Search the contents of files in your workspace. Returns matching lines as path:line: text. " +
+                "Plain text by default; set regex for a regular expression. Narrow with path and glob (e.g. \"*.md\").",
+            parameters: {
+                type: "object",
+                properties: {
+                    pattern: { type: "string", description: "Text (or regular expression when regex is true) to look for" },
+                    path: { type: "string", description: "Folder or file to search (default: your working directory)" },
+                    regex: { type: "boolean", description: "Treat pattern as a JavaScript regular expression (default false)" },
+                    case_sensitive: { type: "boolean", description: "Match case exactly (default true)" },
+                    glob: { type: "string", description: 'File name filter, e.g. "*.ts" (optional)' },
+                    max_matches: { type: "number", description: `Most matches to return (default and max ${this.options.maxSearchMatches})` },
+                },
+                required: ["pattern"],
+            },
+            risk: "read-only",
+            sandboxOperation: "fs.search",
+        };
+    }
+    async execute(args, context) {
+        const pattern = stringArg(args, "pattern");
+        if (!pattern)
+            return argError("search_files", '"pattern" must be a non-empty string');
+        const path = stringArg(args, "path")?.trim() || undefined;
+        const glob = stringArg(args, "glob")?.trim() || undefined;
+        const requested = numberArg(args, "max_matches");
+        const maxMatches = Math.min(this.options.maxSearchMatches, requested && requested > 0 ? Math.floor(requested) : this.options.maxSearchMatches);
+        return withSandbox("search_files", context, async (env) => {
+            const result = await env.search({
+                pattern,
+                ...(path ? { path } : {}),
+                literal: boolArg(args, "regex") !== true,
+                caseSensitive: boolArg(args, "case_sensitive") !== false,
+                ...(glob ? { glob } : {}),
+                maxMatches,
+            });
+            const where = path ?? env.workingDir;
+            if (result.matches.length === 0) {
+                return { content: `No matches for "${pattern}" in ${where}.`, metadata: { count: 0, truncated: result.truncated } };
+            }
+            const lines = result.matches.map((m) => {
+                const text = m.text.length > MAX_LINE_CHARS ? `${m.text.slice(0, MAX_LINE_CHARS)}…` : m.text;
+                return `${m.path}:${m.line}: ${text}`;
+            });
+            const footer = result.truncated ? `\n[more matches not shown — narrow the search with path or glob]` : "";
+            return {
+                content: `${result.matches.length} match${result.matches.length === 1 ? "" : "es"} for "${pattern}" in ${where}:\n${lines.join("\n")}${footer}`,
+                metadata: { count: result.matches.length, truncated: result.truncated },
+            };
+        });
+    }
+}
+//# sourceMappingURL=search-files-tool.js.map

package/dist/components/tool-hub/built-in-tools/workspace/search-files-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-files-tool.js","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/workspace/search-files-tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE9G,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,sFAAsF;AACtF,MAAM,OAAO,eAAe;IACjB,IAAI,GAAG,mBAAmB,CAAC;IAC3B,OAAO,GAAG,OAAO,CAAC;IAClB,UAAU,CAAiB;IAC5B,OAAO,CAA+B;IAE9C,YAAY,OAAO,GAAyB,EAAE;QAC5C,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,GAAG;YAChB,IAAI,EAAE,cAAc;YACpB,WAAW,EACT,6FAA6F;gBAC7F,uGAAuG;YACzG,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6DAA6D,EAAE;oBACvG,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4DAA4D,EAAE;oBACnG,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,kEAAkE,EAAE;oBAC3G,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,mCAAmC,EAAE;oBACrF,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0CAA0C,EAAE;oBACjF,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2CAA2C,IAAI,CAAC,OAAO,CAAC,gBAAgB,GAAG,EAAE;iBAC1H;gBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;aACtB;YACD,IAAI,EAAE,WAAW;YACjB,gBAAgB,EAAE,WAAW;SAC9B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,OAAoB;QAC/D,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,cAAc,EAAE,sCAAsC,CAAC,CAAC;QACtF,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QAC1D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QAC1D,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,SAAS,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAE/I,OAAO,WAAW,CAAC,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACxD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;gBAC9B,OAAO;gBACP,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzB,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,IAAI;gBACxC,aAAa,EAAE,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,KAAK,KAAK;gBACxD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzB,UAAU;aACX,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC;YACrC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChC,OAAO,EAAE,OAAO,EAAE,mBAAmB,OAAO,QAAQ,KAAK,GAAG,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC;YACtH,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBACrC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC7F,OAAO,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACxC,CAAC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,kEAAkE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1G,OAAO;gBACL,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,SAAS,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,OAAO,QAAQ,KAAK,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,EAAE;gBAC/I,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE;aACxE,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/components/tool-hub/built-in-tools/workspace/terminal-tool.d.ts

@@ -0,0 +1,19 @@
+import type { ToolContext, ToolDefinition, ToolHandler, ToolOutput } from "../../types.js";
+import type { WorkspaceToolOptions } from "./types.js";
+/**
+ * terminal — runs one command in the agent's sandbox: bounded time and output, no
+ * server environment variables, working directory inside the workspace. Uses the
+ * sandbox's shell when it offers one ("exec.shell"); otherwise runs simple
+ * commands as argv and refuses shell syntax.
+ */
+export declare class TerminalTool implements ToolHandler {
+    readonly name = "tool:terminal";
+    readonly version = "1.0.0";
+    readonly definition: ToolDefinition;
+    private options;
+    constructor(options?: WorkspaceToolOptions);
+    execute(args: Record<string, unknown>, context: ToolContext): Promise<ToolOutput>;
+}
+/** Split a simple command line into argv (quotes supported). null = needs a shell. */
+export declare function splitArgv(command: string): string[] | null;
+//# sourceMappingURL=terminal-tool.d.ts.map

package/dist/components/tool-hub/built-in-tools/workspace/terminal-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-tool.d.ts","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/workspace/terminal-tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC3F,OAAO,KAAK,EAAgC,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAKrF;;;;;GAKG;AACH,qBAAa,YAAa,YAAW,WAAW;IAC9C,QAAQ,CAAC,IAAI,mBAAmB;IAChC,QAAQ,CAAC,OAAO,WAAW;IAC3B,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,OAAO,CAAC,OAAO,CAA+B;IAE9C,YAAY,OAAO,GAAE,oBAAyB,EAwB7C;IAEK,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CA8BtF;CACF;AAED,sFAAsF;AACtF,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAiC1D"}

package/dist/components/tool-hub/built-in-tools/workspace/terminal-tool.js

@@ -0,0 +1,111 @@
+import { argError, formatExecResult, resolveOptions, stringArg, timeoutFrom, withSandbox } from "./workspace-helpers.js";
+const MAX_COMMAND_CHARS = 10_000;
+/**
+ * terminal — runs one command in the agent's sandbox: bounded time and output, no
+ * server environment variables, working directory inside the workspace. Uses the
+ * sandbox's shell when it offers one ("exec.shell"); otherwise runs simple
+ * commands as argv and refuses shell syntax.
+ */
+export class TerminalTool {
+    name = "tool:terminal";
+    version = "1.0.0";
+    definition;
+    options;
+    constructor(options = {}) {
+        this.options = resolveOptions(options);
+        this.definition = {
+            name: "terminal",
+            description: "Run a shell command in your sandbox (Linux) and get its exit code and output — e.g. build, test, git, " +
+                "file conversions. Starts in your working directory. No network unless the sandbox allows it. " +
+                `Default timeout ${Math.round(this.options.defaultTimeoutMs / 1000)} s; long output is shortened to its start and end. ` +
+                "Do not start interactive programs or servers that never exit.",
+            parameters: {
+                type: "object",
+                properties: {
+                    command: { type: "string", description: 'The command line, e.g. "npm test" or "ls -la src | head"' },
+                    cwd: { type: "string", description: "Directory to run in (default: your working directory)" },
+                    timeout_seconds: {
+                        type: "number",
+                        description: `Kill the command after this many seconds (max ${Math.round(this.options.maxTimeoutMs / 1000)})`,
+                    },
+                },
+                required: ["command"],
+            },
+            risk: "draft",
+            sandboxOperation: "exec",
+        };
+    }
+    async execute(args, context) {
+        const command = stringArg(args, "command")?.trim();
+        if (!command)
+            return argError("terminal", '"command" must be a non-empty string');
+        if (command.length > MAX_COMMAND_CHARS)
+            return argError("terminal", `command is too long (max ${MAX_COMMAND_CHARS} characters)`);
+        const cwd = stringArg(args, "cwd")?.trim() || undefined;
+        return withSandbox("terminal", context, async (env) => {
+            let argv;
+            let shell = false;
+            if (env.capabilities.has("exec.shell")) {
+                argv = [command];
+                shell = true;
+            }
+            else {
+                const parsed = splitArgv(command);
+                if (!parsed) {
+                    return argError("terminal", "this sandbox runs commands without a shell — pipes, redirects, variables and command chaining are not available. Run one program with its arguments.");
+                }
+                argv = parsed;
+            }
+            const timeoutMs = timeoutFrom(args, this.options, env);
+            // The sandbox's own output ceiling stops runaway commands; the model sees a head/tail excerpt.
+            const result = await env.exec({ command: argv, shell, ...(cwd ? { cwd } : {}), timeoutMs, maxOutputBytes: env.limits.maxExecOutputBytes }, context.signal ? { signal: context.signal } : undefined);
+            return formatExecResult(command, result, timeoutMs, this.options.maxDisplayOutputBytes);
+        });
+    }
+}
+/** Split a simple command line into argv (quotes supported). null = needs a shell. */
+export function splitArgv(command) {
+    const argv = [];
+    let current = "";
+    let quote = null;
+    let hasToken = false;
+    for (let i = 0; i < command.length; i++) {
+        const ch = command[i];
+        if (quote) {
+            if (ch === quote)
+                quote = null;
+            else if (ch === "\\" && quote === '"' && i + 1 < command.length)
+                current += command[++i];
+            else
+                current += ch;
+            continue;
+        }
+        if (ch === '"' || ch === "'") {
+            quote = ch;
+            hasToken = true;
+        }
+        else if (/\s/.test(ch)) {
+            if (hasToken)
+                argv.push(current);
+            current = "";
+            hasToken = false;
+        }
+        else if ("|&;<>()$`*?{}~".includes(ch)) {
+            return null;
+        }
+        else if (ch === "\\" && i + 1 < command.length) {
+            current += command[++i];
+            hasToken = true;
+        }
+        else {
+            current += ch;
+            hasToken = true;
+        }
+    }
+    if (quote)
+        return null;
+    if (hasToken)
+        argv.push(current);
+    return argv.length ? argv : null;
+}
+//# sourceMappingURL=terminal-tool.js.map

package/dist/components/tool-hub/built-in-tools/workspace/terminal-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-tool.js","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/workspace/terminal-tool.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAEzH,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,OAAO,YAAY;IACd,IAAI,GAAG,eAAe,CAAC;IACvB,OAAO,GAAG,OAAO,CAAC;IAClB,UAAU,CAAiB;IAC5B,OAAO,CAA+B;IAE9C,YAAY,OAAO,GAAyB,EAAE;QAC5C,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,UAAU,GAAG;YAChB,IAAI,EAAE,UAAU;YAChB,WAAW,EACT,wGAAwG;gBACxG,+FAA+F;gBAC/F,mBAAmB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,qDAAqD;gBACxH,+DAA+D;YACjE,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0DAA0D,EAAE;oBACpG,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uDAAuD,EAAE;oBAC7F,eAAe,EAAE;wBACf,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,iDAAiD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG;qBAC9G;iBACF;gBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;aACtB;YACD,IAAI,EAAE,OAAO;YACb,gBAAgB,EAAE,MAAM;SACzB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,OAAoB;QAC/D,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,UAAU,EAAE,sCAAsC,CAAC,CAAC;QAClF,IAAI,OAAO,CAAC,MAAM,GAAG,iBAAiB;YAAE,OAAO,QAAQ,CAAC,UAAU,EAAE,4BAA4B,iBAAiB,cAAc,CAAC,CAAC;QACjI,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QAExD,OAAO,WAAW,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACpD,IAAI,IAAc,CAAC;YACnB,IAAI,KAAK,GAAG,KAAK,CAAC;YAClB,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;gBACvC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;gBACjB,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;gBAClC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,QAAQ,CACb,UAAU,EACV,sJAAsJ,CACvJ,CAAC;gBACJ,CAAC;gBACD,IAAI,GAAG,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACvD,+FAA+F;YAC/F,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAC3B,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAC3G,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CACxD,CAAC;YACF,OAAO,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAC1F,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,sFAAsF;AACtF,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,KAAK,GAAqB,IAAI,CAAC;IACnC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,EAAE,KAAK,KAAK;gBAAE,KAAK,GAAG,IAAI,CAAC;iBAC1B,IAAI,EAAE,KAAK,IAAI,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM;gBAAE,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;;gBACpF,OAAO,IAAI,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,KAAK,GAAG,EAAE,CAAC;YACX,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACzB,IAAI,QAAQ;gBAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;aAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;aAAM,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YACjD,OAAO,IAAI,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,EAAE,CAAC;YACd,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,KAAK;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACnC,CAAC"}

package/dist/components/tool-hub/built-in-tools/workspace/types.d.ts

@@ -0,0 +1,16 @@
+export interface WorkspaceToolOptions {
+    /** Most bytes of a file read_file returns to the model. Default 100 000. */
+    maxReadBytes?: number;
+    /** Most bytes of command output shown to the model (head + tail kept). Default 30 000. */
+    maxDisplayOutputBytes?: number;
+    /** Command timeout when the model gives none. Default 120 s. */
+    defaultTimeoutMs?: number;
+    /** Ceiling for timeout_seconds (the sandbox clamps further). Default 10 min. */
+    maxTimeoutMs?: number;
+    /** Most entries list_files returns. Default 500. */
+    maxListEntries?: number;
+    /** Most matches search_files returns. Default 100. */
+    maxSearchMatches?: number;
+}
+export type ResolvedWorkspaceToolOptions = Required<WorkspaceToolOptions>;
+//# sourceMappingURL=types.d.ts.map

package/dist/components/tool-hub/built-in-tools/workspace/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/workspace/types.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,oBAAoB;IACnC,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0FAA0F;IAC1F,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,gEAAgE;IAChE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oDAAoD;IACpD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,sDAAsD;IACtD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC,oBAAoB,CAAC,CAAC"}

package/dist/components/tool-hub/built-in-tools/workspace/types.js

@@ -0,0 +1,8 @@
+// ---------------------------------------------------------------------------
+// Workspace tools (A-61) — file and terminal tools that run ONLY through the
+// agent's SandboxView (ToolContext.getSandbox()), never node:fs or
+// child_process. The sandbox enforces paths, limits and isolation; these
+// options only bound what is shown to the model.
+// ---------------------------------------------------------------------------
+export {};
+//# sourceMappingURL=types.js.map

package/dist/components/tool-hub/built-in-tools/workspace/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/workspace/types.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,6EAA6E;AAC7E,mEAAmE;AACnE,yEAAyE;AACzE,iDAAiD;AACjD,8EAA8E"}

package/dist/components/tool-hub/built-in-tools/workspace/workspace-helpers.d.ts

@@ -0,0 +1,29 @@
+import type { ExecResult, SandboxView } from "../../../sandbox-hub/types/sandbox.js";
+import type { ToolContext, ToolOutput } from "../../types.js";
+import type { ResolvedWorkspaceToolOptions, WorkspaceToolOptions } from "./types.js";
+export declare function resolveOptions(options?: WorkspaceToolOptions): ResolvedWorkspaceToolOptions;
+/**
+ * Run `fn` against the agent's sandbox. Every SandboxError becomes an error result
+ * the model can act on; deterministic failures (path escape, not found, …) are marked
+ * non-retryable so the harness does not repeat them.
+ */
+export declare function withSandbox(toolName: string, context: ToolContext, fn: (env: SandboxView) => Promise<ToolOutput>): Promise<ToolOutput>;
+export declare function argError(toolName: string, message: string): ToolOutput;
+export declare function stringArg(args: Record<string, unknown>, key: string): string | undefined;
+export declare function numberArg(args: Record<string, unknown>, key: string): number | undefined;
+export declare function boolArg(args: Record<string, unknown>, key: string): boolean | undefined;
+/** timeout_seconds → ms, bounded by the tool options and the sandbox. */
+export declare function timeoutFrom(args: Record<string, unknown>, options: ResolvedWorkspaceToolOptions, env: SandboxView): number;
+export declare function formatBytes(bytes: number): string;
+/** Keep the head and the tail of a long text (the end of a build log is what matters). */
+export declare function headTail(text: string, maxBytes: number): {
+    text: string;
+    cut: boolean;
+};
+/**
+ * A command result for the model: status line, then bounded stdout/stderr. Non-zero exit,
+ * timeout and cancel are error results that are NEVER retried by the harness — re-running
+ * a command automatically could repeat its side effects.
+ */
+export declare function formatExecResult(label: string, result: ExecResult, timeoutMs: number, maxDisplayBytes: number): ToolOutput;
+//# sourceMappingURL=workspace-helpers.d.ts.map

package/dist/components/tool-hub/built-in-tools/workspace/workspace-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-helpers.d.ts","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/workspace/workspace-helpers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,KAAK,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAKrF,wBAAgB,cAAc,CAAC,OAAO,GAAE,oBAAyB,GAAG,4BAA4B,CAW/F;AAYD;;;;GAIG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,WAAW,EACpB,EAAE,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,UAAU,CAAC,GAC5C,OAAO,CAAC,UAAU,CAAC,CAkBrB;AAED,wBAAgB,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,CAEtE;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGxF;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGxF;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAGvF;AAED,yEAAyE;AACzE,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE,4BAA4B,EACrC,GAAG,EAAE,WAAW,GACf,MAAM,CAIR;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIjD;AAED,0FAA0F;AAC1F,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,OAAO,CAAA;CAAE,CAYvF;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,MAAM,GACtB,UAAU,CA8BZ"}

package/dist/components/tool-hub/built-in-tools/workspace/workspace-helpers.js

@@ -0,0 +1,128 @@
+import { SandboxError } from "../../../../kernel/errors/sandbox-error.js";
+// Shared plumbing for the workspace tools: sandbox access, argument parsing,
+// SandboxError → ToolOutput mapping, and bounded output formatting.
+export function resolveOptions(options = {}) {
+    const positive = (value, fallback) => typeof value === "number" && Number.isFinite(value) && value > 0 ? Math.floor(value) : fallback;
+    return {
+        maxReadBytes: positive(options.maxReadBytes, 100_000),
+        maxDisplayOutputBytes: positive(options.maxDisplayOutputBytes, 30_000),
+        defaultTimeoutMs: positive(options.defaultTimeoutMs, 120_000),
+        maxTimeoutMs: positive(options.maxTimeoutMs, 10 * 60_000),
+        maxListEntries: positive(options.maxListEntries, 500),
+        maxSearchMatches: positive(options.maxSearchMatches, 100),
+    };
+}
+const HINTS = {
+    path_escape: 'Only paths inside your workspace are allowed — relative paths like "src/app.ts", or "/workspace/shared/…" for files shared with other agents.',
+    disabled: "This agent has no sandbox. Ask the user to enable one in the agent's Sandbox settings.",
+    not_configured: "No sandbox is configured on this server.",
+    environment_unavailable: "The sandbox is not available right now (e.g. Docker is not running).",
+    not_found: "Check the path with list_files.",
+    conflict: "The file changed since you read it — read it again before editing.",
+};
+/**
+ * Run `fn` against the agent's sandbox. Every SandboxError becomes an error result
+ * the model can act on; deterministic failures (path escape, not found, …) are marked
+ * non-retryable so the harness does not repeat them.
+ */
+export async function withSandbox(toolName, context, fn) {
+    if (!context.getSandbox) {
+        return { content: `${toolName}: this agent has no workspace — no sandbox is available`, isError: true, retryable: false };
+    }
+    try {
+        return await fn(await context.getSandbox());
+    }
+    catch (error) {
+        if (error instanceof SandboxError) {
+            const hint = HINTS[error.code];
+            return {
+                content: `${toolName} failed (${error.code}): ${error.message}${hint ? `\n${hint}` : ""}`,
+                isError: true,
+                retryable: error.retryable,
+                metadata: { code: error.code },
+            };
+        }
+        return { content: `${toolName} failed: ${error instanceof Error ? error.message : String(error)}`, isError: true };
+    }
+}
+export function argError(toolName, message) {
+    return { content: `${toolName}: ${message}`, isError: true, retryable: false };
+}
+export function stringArg(args, key) {
+    const value = args[key];
+    return typeof value === "string" ? value : undefined;
+}
+export function numberArg(args, key) {
+    const value = args[key];
+    return typeof value === "number" && Number.isFinite(value) ? value : undefined;
+}
+export function boolArg(args, key) {
+    const value = args[key];
+    return typeof value === "boolean" ? value : undefined;
+}
+/** timeout_seconds → ms, bounded by the tool options and the sandbox. */
+export function timeoutFrom(args, options, env) {
+    const seconds = numberArg(args, "timeout_seconds");
+    const requested = seconds !== undefined && seconds > 0 ? seconds * 1000 : options.defaultTimeoutMs;
+    return Math.max(1, Math.floor(Math.min(requested, options.maxTimeoutMs, env.limits.maxExecTimeoutMs)));
+}
+export function formatBytes(bytes) {
+    if (bytes < 1024)
+        return `${bytes} B`;
+    if (bytes < 1024 * 1024)
+        return `${(bytes / 1024).toFixed(1)} KB`;
+    return `${(bytes / 1024 / 1024).toFixed(1)} MB`;
+}
+/** Keep the head and the tail of a long text (the end of a build log is what matters). */
+export function headTail(text, maxBytes) {
+    const buf = Buffer.from(text, "utf8");
+    if (buf.length <= maxBytes)
+        return { text, cut: false };
+    const head = Math.floor(maxBytes / 3);
+    const tail = maxBytes - head;
+    const omitted = buf.length - head - tail;
+    return {
+        text: `${buf.subarray(0, head).toString("utf8")}\n… [${formatBytes(omitted)} omitted] …\n` +
+            buf.subarray(buf.length - tail).toString("utf8"),
+        cut: true,
+    };
+}
+/**
+ * A command result for the model: status line, then bounded stdout/stderr. Non-zero exit,
+ * timeout and cancel are error results that are NEVER retried by the harness — re-running
+ * a command automatically could repeat its side effects.
+ */
+export function formatExecResult(label, result, timeoutMs, maxDisplayBytes) {
+    const status = [
+        result.timedOut
+            ? `timed out after ${Math.round(timeoutMs / 1000)} s (killed)`
+            : result.cancelled
+                ? "cancelled"
+                : `exit code ${result.exitCode}`,
+        `${(result.durationMs / 1000).toFixed(1)} s`,
+        ...(result.truncated ? ["output limit reached — the command was stopped"] : []),
+    ];
+    const stdout = headTail(result.stdout, Math.ceil(maxDisplayBytes * 0.7));
+    const stderr = headTail(result.stderr, Math.floor(maxDisplayBytes * 0.3));
+    const sections = [`$ ${label}`, status.join(" · ")];
+    if (result.stdout)
+        sections.push(`stdout:\n${stdout.text}`);
+    if (result.stderr)
+        sections.push(`stderr:\n${stderr.text}`);
+    if (!result.stdout && !result.stderr)
+        sections.push("(no output)");
+    const ok = result.exitCode === 0 && !result.timedOut && !result.cancelled;
+    return {
+        content: sections.join("\n"),
+        ...(ok ? {} : { isError: true, retryable: false }),
+        metadata: {
+            exitCode: result.exitCode,
+            timedOut: result.timedOut,
+            cancelled: result.cancelled,
+            truncated: result.truncated,
+            durationMs: result.durationMs,
+            displayTruncated: stdout.cut || stderr.cut,
+        },
+    };
+}
+//# sourceMappingURL=workspace-helpers.js.map