aec-agent 1.0.3 → 1.0.4

package/dist/components/tool-hub/built-in-tools/preview/service-tools.js

@@ -0,0 +1,180 @@
+import { citeLinkNote } from "../../tool-links.js";
+import { argError, numberArg, stringArg, withSandbox } from "../workspace/workspace-helpers.js";
+// A-124 phase 2: dev servers in the agent's sandbox. A service is a long-running process
+// (npm run dev, a Python server) the user sees live next to the chat through the preview
+// origin, hot reload included. start_service returns a "service://<name>/" link
+// (ToolResult.link, A-132); the host turns it into a URL on an origin of its own.
+/** How long start_service waits for the port before it answers. */
+const START_WAIT_MS = 30_000;
+const LOG_TAIL_BYTES = 4_000;
+/** The link of a service (its root page). */
+export function serviceLink(name) {
+    return { uri: `service://${name}/`, name, type: "service" };
+}
+function noServices(tool) {
+    return argError(tool, "this agent's sandbox cannot run services — use preview for static pages");
+}
+function describe(s) {
+    const state = s.status === "exited" ? `exited${s.exitCode !== undefined && s.exitCode !== null ? ` (code ${s.exitCode})` : ""}` : s.status;
+    return `${s.name} · ${state} · port ${s.port} · ${s.command}`;
+}
+async function logTail(env, name) {
+    const logs = await env.serviceLogs(name, { maxBytes: LOG_TAIL_BYTES }).catch(() => null);
+    if (!logs || !logs.text.trim())
+        return "(no output)";
+    return `${logs.truncated ? "…" : ""}${logs.text.trimEnd()}`;
+}
+const sleep = (ms, signal) => new Promise((resolve) => {
+    const t = setTimeout(resolve, ms);
+    signal?.addEventListener("abort", () => { clearTimeout(t); resolve(); }, { once: true });
+});
+/** start_service — start a dev server and show it live. */
+export class StartServiceTool {
+    name = "tool:start-service";
+    version = "1.0.0";
+    definition = {
+        name: "start_service",
+        description: "Start a long-running web server in your workspace (a dev server with hot reload, an API, a Python server) " +
+            "and show it to the user live next to the chat. The command gets its port in $PORT and must listen on it " +
+            'on 127.0.0.1 — e.g. "npx vite --host 127.0.0.1 --port $PORT", "python3 -m http.server $PORT --bind 127.0.0.1". ' +
+            "It keeps running after this call; edits to its files show up through its own reload. Your sandbox may have no " +
+            "internet, so dependencies must already be installed. For plain HTML files use preview instead.",
+        parameters: {
+            type: "object",
+            properties: {
+                name: { type: "string", description: 'Short name, lower-case letters, digits and dashes, e.g. "web"' },
+                command: { type: "string", description: "Shell command that starts the server (use $PORT)" },
+                cwd: { type: "string", description: "Folder to run it in (default: your working directory)" },
+                port: { type: "number", description: "Only when the server cannot take $PORT: the fixed port it listens on" },
+            },
+            required: ["name", "command"],
+        },
+        risk: "draft",
+        sandboxOperation: "exec",
+    };
+    async execute(args, context) {
+        const name = stringArg(args, "name")?.trim();
+        const command = stringArg(args, "command")?.trim();
+        if (!name)
+            return argError("start_service", '"name" is required');
+        if (!command)
+            return argError("start_service", '"command" is required');
+        const cwd = stringArg(args, "cwd")?.trim();
+        const port = numberArg(args, "port");
+        return withSandbox("start_service", context, async (env) => {
+            if (!env.startService || !env.listServices)
+                return noServices("start_service");
+            const started = await env.startService({ name, command, ...(cwd ? { cwd } : {}), ...(port !== undefined ? { port: Math.floor(port) } : {}) }, { signal: context.signal });
+            let info = started;
+            const deadline = Date.now() + START_WAIT_MS;
+            while (info.status === "starting" && Date.now() < deadline && !context.signal?.aborted) {
+                await sleep(500, context.signal);
+                info = (await env.listServices({ signal: context.signal })).find((s) => s.name === name) ?? info;
+            }
+            if (info.status === "exited") {
+                return {
+                    content: `start_service: ${name} exited${info.exitCode != null ? ` with code ${info.exitCode}` : ""} before it listened on port ${info.port}. Its output:\n${await logTail(env, name)}`,
+                    isError: true,
+                    retryable: false,
+                    metadata: { name, port: info.port, status: info.status },
+                };
+            }
+            const link = serviceLink(name);
+            const content = info.status === "listening"
+                ? `${name} is running on port ${info.port} — the user sees it live next to the chat.${citeLinkNote(link)}`
+                : `${name} started but is not listening on port ${info.port} yet (still starting after ${START_WAIT_MS / 1000} s). ` +
+                    `Check it with list_services / service_logs. Its output so far:\n${await logTail(env, name)}${citeLinkNote(link)}`;
+            return { content, link, metadata: { name, port: info.port, status: info.status } };
+        });
+    }
+}
+/** stop_service — stop a running service. */
+export class StopServiceTool {
+    name = "tool:stop-service";
+    version = "1.0.0";
+    definition = {
+        name: "stop_service",
+        description: "Stop one of your running services (see list_services). Its preview stops working.",
+        parameters: {
+            type: "object",
+            properties: { name: { type: "string", description: "The service's name" } },
+            required: ["name"],
+        },
+        risk: "draft",
+        sandboxOperation: "exec",
+    };
+    async execute(args, context) {
+        const name = stringArg(args, "name")?.trim();
+        if (!name)
+            return argError("stop_service", '"name" is required');
+        return withSandbox("stop_service", context, async (env) => {
+            if (!env.stopService)
+                return noServices("stop_service");
+            const stopped = await env.stopService(name, { signal: context.signal });
+            if (!stopped)
+                return argError("stop_service", `there is no service named "${name}" — see list_services`);
+            return { content: `Stopped ${name}.`, metadata: { name, status: stopped.status } };
+        });
+    }
+}
+/** list_services — the agent's services and their state. */
+export class ListServicesTool {
+    name = "tool:list-services";
+    version = "1.0.0";
+    definition = {
+        name: "list_services",
+        description: "List your services (started with start_service): name, state (starting, listening, exited), port and command.",
+        parameters: { type: "object", properties: {}, required: [] },
+        risk: "read-only",
+        sandboxOperation: "fs.read",
+    };
+    async execute(_args, context) {
+        return withSandbox("list_services", context, async (env) => {
+            if (!env.listServices)
+                return noServices("list_services");
+            const services = await env.listServices({ signal: context.signal });
+            if (services.length === 0)
+                return { content: "No services. Start one with start_service.", metadata: { count: 0 } };
+            return {
+                content: `${services.length} service${services.length === 1 ? "" : "s"}:\n${services.map(describe).join("\n")}`,
+                metadata: { count: services.length, services: services.map((s) => ({ name: s.name, status: s.status, port: s.port })) },
+            };
+        });
+    }
+}
+/** service_logs — the end of a service's output. */
+export class ServiceLogsTool {
+    name = "tool:service-logs";
+    version = "1.0.0";
+    definition = {
+        name: "service_logs",
+        description: "Read the end of a service's output (stdout and stderr) — to see why it fails or what it printed.",
+        parameters: {
+            type: "object",
+            properties: {
+                name: { type: "string", description: "The service's name" },
+                max_bytes: { type: "number", description: "How much of the end to return (default 8000)" },
+            },
+            required: ["name"],
+        },
+        risk: "read-only",
+        sandboxOperation: "fs.read",
+    };
+    async execute(args, context) {
+        const name = stringArg(args, "name")?.trim();
+        if (!name)
+            return argError("service_logs", '"name" is required');
+        const maxBytes = numberArg(args, "max_bytes");
+        return withSandbox("service_logs", context, async (env) => {
+            if (!env.serviceLogs)
+                return noServices("service_logs");
+            const logs = await env.serviceLogs(name, { maxBytes: maxBytes && maxBytes > 0 ? Math.floor(maxBytes) : 8_000, signal: context.signal });
+            const text = logs.text.trimEnd();
+            return {
+                content: text ? `${logs.truncated ? "…" : ""}${text}` : `${name} printed nothing yet.`,
+                metadata: { name, truncated: logs.truncated },
+            };
+        });
+    }
+}
+//# sourceMappingURL=service-tools.js.map

package/dist/components/tool-hub/built-in-tools/preview/service-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-tools.js","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/preview/service-tools.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAEhG,yFAAyF;AACzF,yFAAyF;AACzF,gFAAgF;AAChF,kFAAkF;AAElF,mEAAmE;AACnE,MAAM,aAAa,GAAG,MAAM,CAAC;AAC7B,MAAM,cAAc,GAAG,KAAK,CAAC;AAE7B,6CAA6C;AAC7C,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,EAAE,GAAG,EAAE,aAAa,IAAI,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,QAAQ,CAAC,IAAI,EAAE,yEAAyE,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,QAAQ,CAAC,CAAc;IAC9B,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3I,OAAO,GAAG,CAAC,CAAC,IAAI,MAAM,KAAK,WAAW,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,GAAgB,EAAE,IAAY;IACnD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,WAAY,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC1F,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,aAAa,CAAC;IACrD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,MAAoB,EAAE,EAAE,CACjD,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;IAC5B,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAClC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3F,CAAC,CAAC,CAAC;AAEL,2DAA2D;AAC3D,MAAM,OAAO,gBAAgB;IAClB,IAAI,GAAG,oBAAoB,CAAC;IAC5B,OAAO,GAAG,OAAO,CAAC;IAClB,UAAU,GAAmB;QACpC,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,4GAA4G;YAC5G,0GAA0G;YAC1G,iHAAiH;YACjH,gHAAgH;YAChH,gGAAgG;QAClG,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+DAA+D,EAAE;gBACtG,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kDAAkD,EAAE;gBAC5F,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uDAAuD,EAAE;gBAC7F,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sEAAsE,EAAE;aAC9G;YACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;SAC9B;QACD,IAAI,EAAE,OAAO;QACb,gBAAgB,EAAE,MAAM;KACzB,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,OAAoB;QAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;QAClE,IAAI,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,OAAO,WAAW,CAAC,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACzD,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,GAAG,CAAC,YAAY;gBAAE,OAAO,UAAU,CAAC,eAAe,CAAC,CAAC;YAC/E,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,YAAY,CACpC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EACrG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAC3B,CAAC;YACF,IAAI,IAAI,GAAG,OAAO,CAAC;YACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;YAC5C,OAAO,IAAI,CAAC,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBACvF,MAAM,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;gBACjC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC;YACnG,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7B,OAAO;oBACL,OAAO,EAAE,kBAAkB,IAAI,UAAU,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,+BAA+B,IAAI,CAAC,IAAI,kBAAkB,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE;oBACvL,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,KAAK;oBAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;iBACzD,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,OAAO,GACX,IAAI,CAAC,MAAM,KAAK,WAAW;gBACzB,CAAC,CAAC,GAAG,IAAI,uBAAuB,IAAI,CAAC,IAAI,6CAA6C,YAAY,CAAC,IAAI,CAAC,EAAE;gBAC1G,CAAC,CAAC,GAAG,IAAI,yCAAyC,IAAI,CAAC,IAAI,8BAA8B,aAAa,GAAG,IAAI,OAAO;oBAClH,mEAAmE,MAAM,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACzH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACrF,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,6CAA6C;AAC7C,MAAM,OAAO,eAAe;IACjB,IAAI,GAAG,mBAAmB,CAAC;IAC3B,OAAO,GAAG,OAAO,CAAC;IAClB,UAAU,GAAmB;QACpC,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,mFAAmF;QAChG,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE,EAAE;YAC3E,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;QACD,IAAI,EAAE,OAAO;QACb,gBAAgB,EAAE,MAAM;KACzB,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,OAAoB;QAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC;QACjE,OAAO,WAAW,CAAC,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACxD,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;YACxD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,OAAO;gBAAE,OAAO,QAAQ,CAAC,cAAc,EAAE,8BAA8B,IAAI,uBAAuB,CAAC,CAAC;YACzG,OAAO,EAAE,OAAO,EAAE,WAAW,IAAI,GAAG,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACrF,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,4DAA4D;AAC5D,MAAM,OAAO,gBAAgB;IAClB,IAAI,GAAG,oBAAoB,CAAC;IAC5B,OAAO,GAAG,OAAO,CAAC;IAClB,UAAU,GAAmB;QACpC,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,+GAA+G;QAC5H,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC5D,IAAI,EAAE,WAAW;QACjB,gBAAgB,EAAE,SAAS;KAC5B,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,KAA8B,EAAE,OAAoB;QAChE,OAAO,WAAW,CAAC,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACzD,IAAI,CAAC,GAAG,CAAC,YAAY;gBAAE,OAAO,UAAU,CAAC,eAAe,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACpE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,OAAO,EAAE,4CAA4C,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YACpH,OAAO;gBACL,OAAO,EAAE,GAAG,QAAQ,CAAC,MAAM,WAAW,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC/G,QAAQ,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE;aACxH,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,oDAAoD;AACpD,MAAM,OAAO,eAAe;IACjB,IAAI,GAAG,mBAAmB,CAAC;IAC3B,OAAO,GAAG,OAAO,CAAC;IAClB,UAAU,GAAmB;QACpC,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,kGAAkG;QAC/G,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE;gBAC3D,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8CAA8C,EAAE;aAC3F;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;QACD,IAAI,EAAE,WAAW;QACjB,gBAAgB,EAAE,SAAS;KAC5B,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,OAAoB;QAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC9C,OAAO,WAAW,CAAC,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACxD,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,QAAQ,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACxI,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,uBAAuB;gBACtF,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;aAC9C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/components/tool-hub/built-in-tools/secrets/create-secret-tools.d.ts

@@ -0,0 +1,6 @@
+import type { ToolHandler } from "../../types.js";
+/** Tool names of the secret tools (A-101), for agent allowlists. */
+export declare const SECRET_TOOL_NAMES: readonly ["list_secrets", "manage_secret"];
+/** Both secret tools — register them with `core.useTool()`. http_request is a web tool (HttpRequestTool). */
+export declare function createSecretTools(): ToolHandler[];
+//# sourceMappingURL=create-secret-tools.d.ts.map

package/dist/components/tool-hub/built-in-tools/secrets/create-secret-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-secret-tools.d.ts","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/secrets/create-secret-tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAIlD,oEAAoE;AACpE,eAAO,MAAM,iBAAiB,YAAI,cAAc,EAAE,eAAe,CAAU,CAAC;AAE5E,6GAA6G;AAC7G,wBAAgB,iBAAiB,IAAI,WAAW,EAAE,CAEjD"}

package/dist/components/tool-hub/built-in-tools/secrets/create-secret-tools.js

@@ -0,0 +1,9 @@
+import { ListSecretsTool } from "./list-secrets-tool.js";
+import { ManageSecretTool } from "./manage-secret-tool.js";
+/** Tool names of the secret tools (A-101), for agent allowlists. */
+export const SECRET_TOOL_NAMES = ["list_secrets", "manage_secret"];
+/** Both secret tools — register them with `core.useTool()`. http_request is a web tool (HttpRequestTool). */
+export function createSecretTools() {
+    return [new ListSecretsTool(), new ManageSecretTool()];
+}
+//# sourceMappingURL=create-secret-tools.js.map

package/dist/components/tool-hub/built-in-tools/secrets/create-secret-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-secret-tools.js","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/secrets/create-secret-tools.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D,oEAAoE;AACpE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,cAAc,EAAE,eAAe,CAAU,CAAC;AAE5E,6GAA6G;AAC7G,MAAM,UAAU,iBAAiB;IAC/B,OAAO,CAAC,IAAI,eAAe,EAAE,EAAE,IAAI,gBAAgB,EAAE,CAAC,CAAC;AACzD,CAAC"}

package/dist/components/tool-hub/built-in-tools/secrets/list-secrets-tool.d.ts

@@ -0,0 +1,12 @@
+import type { ToolContext, ToolDefinition, ToolHandler, ToolOutput } from "../../types.js";
+/**
+ * list_secrets (A-101) — read-only. The secrets this agent can use: its own and the global
+ * ones it enabled, with what each is for and where it may be used. Never values.
+ */
+export declare class ListSecretsTool implements ToolHandler {
+    readonly name = "tool:list-secrets";
+    readonly version = "1.0.0";
+    readonly definition: ToolDefinition;
+    execute(_args: Record<string, unknown>, context: ToolContext): Promise<ToolOutput>;
+}
+//# sourceMappingURL=list-secrets-tool.d.ts.map

package/dist/components/tool-hub/built-in-tools/secrets/list-secrets-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-secrets-tool.d.ts","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/secrets/list-secrets-tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAG3F;;;GAGG;AACH,qBAAa,eAAgB,YAAW,WAAW;IACjD,QAAQ,CAAC,IAAI,uBAAuB;IACpC,QAAQ,CAAC,OAAO,WAAW;IAC3B,QAAQ,CAAC,UAAU,EAAE,cAAc,CAOjC;IAEI,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CASvF;CACF"}

package/dist/components/tool-hub/built-in-tools/secrets/list-secrets-tool.js

@@ -0,0 +1,30 @@
+import { describeSecret, secretToolError } from "./secret-tool-helpers.js";
+/**
+ * list_secrets (A-101) — read-only. The secrets this agent can use: its own and the global
+ * ones it enabled, with what each is for and where it may be used. Never values.
+ */
+export class ListSecretsTool {
+    name = "tool:list-secrets";
+    version = "1.0.0";
+    definition = {
+        name: "list_secrets",
+        description: "List the secrets (API keys, tokens) you can use: name, what it is for, which tools may use it and which hosts it may be sent to. " +
+            "Values are never shown — use a secret with {{secret:NAME}} in http_request, or `secrets` in terminal / run_code.",
+        parameters: { type: "object", properties: {} },
+        risk: "read-only",
+    };
+    async execute(_args, context) {
+        if (!context.secrets)
+            return { content: "list_secrets: this agent has no secret store.", isError: true, retryable: false };
+        try {
+            const secrets = await context.secrets.list();
+            if (!secrets.length)
+                return { content: "You have no secrets yet." };
+            return { content: secrets.map((s) => `- ${describeSecret(s)}`).join("\n") };
+        }
+        catch (err) {
+            return secretToolError("list_secrets", err);
+        }
+    }
+}
+//# sourceMappingURL=list-secrets-tool.js.map

package/dist/components/tool-hub/built-in-tools/secrets/list-secrets-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-secrets-tool.js","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/secrets/list-secrets-tool.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3E;;;GAGG;AACH,MAAM,OAAO,eAAe;IACjB,IAAI,GAAG,mBAAmB,CAAC;IAC3B,OAAO,GAAG,OAAO,CAAC;IAClB,UAAU,GAAmB;QACpC,IAAI,EAAE,cAAc;QACpB,WAAW,EACT,mIAAmI;YACnI,kHAAkH;QACpH,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;QAC9C,IAAI,EAAE,WAAW;KAClB,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,KAA8B,EAAE,OAAoB;QAChE,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,+CAA+C,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC3H,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,OAAO,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;YACpE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,eAAe,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;CACF"}

package/dist/components/tool-hub/built-in-tools/secrets/manage-secret-tool.d.ts

@@ -0,0 +1,22 @@
+import type { ToolContext, ToolDefinition, ToolHandler, ToolOutput } from "../../types.js";
+/**
+ * manage_secret (A-101) — creates, changes and deletes this agent's own secrets.
+ *
+ * The model never handles a value: "create" and "set_value" ask the user to type it into a
+ * masked field (InteractionHandler.requestSecret), and it goes from there straight to the
+ * SecretHub. The result only says what was stored. A chat app or an unattended run can't
+ * take a value, so those actions fail there.
+ *
+ * Risk "consequential": every call waits for the user's approval (they see the name, the
+ * allowed hosts and tools). Global secrets are managed by people only (the host's UI/API).
+ * Subagents never get this tool.
+ */
+export declare class ManageSecretTool implements ToolHandler {
+    readonly name = "tool:manage-secret";
+    readonly version = "1.0.0";
+    readonly definition: ToolDefinition;
+    execute(args: Record<string, unknown>, context: ToolContext): Promise<ToolOutput>;
+    /** The value the user typed into the masked field, or undefined when they cancelled. */
+    private askValue;
+}
+//# sourceMappingURL=manage-secret-tool.d.ts.map

package/dist/components/tool-hub/built-in-tools/secrets/manage-secret-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-secret-tool.d.ts","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/secrets/manage-secret-tool.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAM3F;;;;;;;;;;;GAWG;AACH,qBAAa,gBAAiB,YAAW,WAAW;IAClD,QAAQ,CAAC,IAAI,wBAAwB;IACrC,QAAQ,CAAC,OAAO,WAAW;IAC3B,QAAQ,CAAC,UAAU,EAAE,cAAc,CAmBjC;IAEI,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAyCtF;IAED,wFAAwF;YAC1E,QAAQ;CAyBvB"}

package/dist/components/tool-hub/built-in-tools/secrets/manage-secret-tool.js

@@ -0,0 +1,113 @@
+import { SecretError } from "../../../../kernel/errors/secret-error.js";
+import { checkSecretName, normalizeDefinition } from "../../../secret-hub/rules.js";
+import { raceAbort } from "../../../multi-agent-orchestration/agent/agent-loop/components/abort.js";
+import { describeSecret, secretToolError, stringList } from "./secret-tool-helpers.js";
+const ACTIONS = ["create", "update", "set_value", "delete"];
+/**
+ * manage_secret (A-101) — creates, changes and deletes this agent's own secrets.
+ *
+ * The model never handles a value: "create" and "set_value" ask the user to type it into a
+ * masked field (InteractionHandler.requestSecret), and it goes from there straight to the
+ * SecretHub. The result only says what was stored. A chat app or an unattended run can't
+ * take a value, so those actions fail there.
+ *
+ * Risk "consequential": every call waits for the user's approval (they see the name, the
+ * allowed hosts and tools). Global secrets are managed by people only (the host's UI/API).
+ * Subagents never get this tool.
+ */
+export class ManageSecretTool {
+    name = "tool:manage-secret";
+    version = "1.0.0";
+    definition = {
+        name: "manage_secret",
+        description: "Create, change or delete one of your secrets (an API key or token the user wants you to use). " +
+            "create / set_value: the user types the value into a masked field — never ask for it in the chat and never put a value in these arguments. " +
+            "Set allowed_hosts to the API host(s) the key is for (e.g. api.example.com, or *.example.com); a secret with no hosts can't be sent anywhere. " +
+            "allowed_tools defaults to http_request; add terminal or run_code only when a command needs the key as an environment variable.",
+        parameters: {
+            type: "object",
+            properties: {
+                action: { type: "string", enum: [...ACTIONS], description: "create, update (description/hosts/tools), set_value (a new value), delete" },
+                name: { type: "string", description: "Upper-case name, e.g. OPENWEATHER_API_KEY — what you write in {{secret:NAME}}" },
+                description: { type: "string", description: "What the key is for (create/update)" },
+                allowed_hosts: { type: "array", items: { type: "string" }, description: "Hosts it may be sent to (create/update)" },
+                allowed_tools: { type: "array", items: { type: "string" }, description: 'Tools that may use it (create/update), default ["http_request"]' },
+            },
+            required: ["action", "name"],
+        },
+        risk: "consequential",
+    };
+    async execute(args, context) {
+        const secrets = context.secrets;
+        if (!secrets)
+            return { content: "manage_secret: this agent has no secret store.", isError: true, retryable: false };
+        const action = args["action"];
+        if (!ACTIONS.includes(action))
+            return { content: `manage_secret: action must be one of ${ACTIONS.join(", ")}`, isError: true, retryable: false };
+        try {
+            const name = checkSecretName(args["name"]);
+            const definition = {
+                ...(typeof args["description"] === "string" ? { description: args["description"] } : {}),
+                ...(stringList(args, "allowed_hosts") ? { allowedHosts: stringList(args, "allowed_hosts") } : {}),
+                ...(stringList(args, "allowed_tools") ? { allowedTools: stringList(args, "allowed_tools") } : {}),
+            };
+            const own = (await secrets.list()).find((s) => s.name === name && s.scope === "agent");
+            switch (action) {
+                case "create": {
+                    if (own)
+                        throw new SecretError(`you already have a secret named ${name} — use set_value to give it a new value`, "already_exists");
+                    const meta = normalizeDefinition(definition);
+                    const value = await this.askValue(context, { name, ...meta });
+                    if (value === undefined)
+                        return { content: `The user cancelled — secret ${name} was not created.`, retryable: false };
+                    const created = await secrets.create({ name, ...meta }, value);
+                    return { content: `Stored secret ${describeSecret(created)}. Use it as {{secret:${name}}}.` };
+                }
+                case "update": {
+                    if (!own)
+                        throw new SecretError(`you have no secret named ${name}`, "not_found");
+                    return { content: `Updated secret ${describeSecret(await secrets.update(name, definition))}.` };
+                }
+                case "set_value": {
+                    if (!own)
+                        throw new SecretError(`you have no secret named ${name}`, "not_found");
+                    const value = await this.askValue(context, { ...own, replacing: true });
+                    if (value === undefined)
+                        return { content: `The user cancelled — secret ${name} keeps its value.`, retryable: false };
+                    return { content: `Secret ${describeSecret(await secrets.setValue(name, value))} has a new value.` };
+                }
+                case "delete": {
+                    if (!own)
+                        throw new SecretError(`you have no secret named ${name}`, "not_found");
+                    await secrets.delete(name);
+                    return { content: `Deleted secret ${name}.` };
+                }
+            }
+        }
+        catch (err) {
+            return secretToolError("manage_secret", err);
+        }
+    }
+    /** The value the user typed into the masked field, or undefined when they cancelled. */
+    async askValue(context, secret) {
+        const handler = context.interaction;
+        if (!handler?.requestSecret) {
+            throw new SecretError("no one can enter a secret value here — ask the user to add it in the web app (Capabilities → Secrets)", "unavailable");
+        }
+        const outcome = await raceAbort(handler.requestSecret({
+            sessionId: context.sessionId,
+            ...(context.agentId ? { agentId: context.agentId } : {}),
+            ...(context.toolCallId ? { toolCallId: context.toolCallId } : {}),
+            name: secret.name,
+            ...(secret.description ? { description: secret.description } : {}),
+            allowedHosts: secret.allowedHosts,
+            allowedTools: secret.allowedTools,
+            ...(secret.replacing ? { replacing: true } : {}),
+        }), context.signal);
+        if (outcome.aborted)
+            return undefined;
+        const value = outcome.value.value;
+        return typeof value === "string" && value.length ? value : undefined;
+    }
+}
+//# sourceMappingURL=manage-secret-tool.js.map

package/dist/components/tool-hub/built-in-tools/secrets/manage-secret-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manage-secret-tool.js","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/secrets/manage-secret-tool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,2CAA2C,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACpF,OAAO,EAAE,SAAS,EAAE,MAAM,yEAAyE,CAAC;AAEpG,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEvF,MAAM,OAAO,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC;AAGrE;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,gBAAgB;IAClB,IAAI,GAAG,oBAAoB,CAAC;IAC5B,OAAO,GAAG,OAAO,CAAC;IAClB,UAAU,GAAmB;QACpC,IAAI,EAAE,eAAe;QACrB,WAAW,EACT,gGAAgG;YAChG,4IAA4I;YAC5I,+IAA+I;YAC/I,gIAAgI;QAClI,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,WAAW,EAAE,2EAA2E,EAAE;gBACxI,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+EAA+E,EAAE;gBACtH,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qCAAqC,EAAE;gBACnF,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,yCAAyC,EAAE;gBACnH,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,iEAAiE,EAAE;aAC5I;YACD,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC7B;QACD,IAAI,EAAE,eAAe;KACtB,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,OAAoB;QAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,OAAO,EAAE,gDAAgD,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACpH,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAW,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,wCAAwC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACjJ,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG;gBACjB,GAAG,CAAC,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxF,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,IAAI,EAAE,eAAe,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClG,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,UAAU,CAAC,IAAI,EAAE,eAAe,CAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnG,CAAC;YACF,MAAM,GAAG,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC;YACvF,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,QAAQ,EAAE,CAAC;oBACd,IAAI,GAAG;wBAAE,MAAM,IAAI,WAAW,CAAC,mCAAmC,IAAI,yCAAyC,EAAE,gBAAgB,CAAC,CAAC;oBACnI,MAAM,IAAI,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;oBAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;oBAC9D,IAAI,KAAK,KAAK,SAAS;wBAAE,OAAO,EAAE,OAAO,EAAE,+BAA+B,IAAI,mBAAmB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;oBACtH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;oBAC/D,OAAO,EAAE,OAAO,EAAE,iBAAiB,cAAc,CAAC,OAAO,CAAC,wBAAwB,IAAI,KAAK,EAAE,CAAC;gBAChG,CAAC;gBACD,KAAK,QAAQ,EAAE,CAAC;oBACd,IAAI,CAAC,GAAG;wBAAE,MAAM,IAAI,WAAW,CAAC,4BAA4B,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;oBACjF,OAAO,EAAE,OAAO,EAAE,kBAAkB,cAAc,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC;gBAClG,CAAC;gBACD,KAAK,WAAW,EAAE,CAAC;oBACjB,IAAI,CAAC,GAAG;wBAAE,MAAM,IAAI,WAAW,CAAC,4BAA4B,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;oBACjF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBACxE,IAAI,KAAK,KAAK,SAAS;wBAAE,OAAO,EAAE,OAAO,EAAE,+BAA+B,IAAI,mBAAmB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;oBACtH,OAAO,EAAE,OAAO,EAAE,UAAU,cAAc,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,mBAAmB,EAAE,CAAC;gBACvG,CAAC;gBACD,KAAK,QAAQ,EAAE,CAAC;oBACd,IAAI,CAAC,GAAG;wBAAE,MAAM,IAAI,WAAW,CAAC,4BAA4B,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;oBACjF,MAAM,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC3B,OAAO,EAAE,OAAO,EAAE,kBAAkB,IAAI,GAAG,EAAE,CAAC;gBAChD,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,eAAe,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,wFAAwF;IAChF,KAAK,CAAC,QAAQ,CACpB,OAAoB,EACpB,MAAmH;QAEnH,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC;YAC5B,MAAM,IAAI,WAAW,CAAC,uGAAuG,EAAE,aAAa,CAAC,CAAC;QAChJ,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,SAAS,CAC7B,OAAO,CAAC,aAAa,CAAC;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjD,CAAC,EACF,OAAO,CAAC,MAAM,CACf,CAAC;QACF,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,CAAC;CACF"}

package/dist/components/tool-hub/built-in-tools/secrets/secret-tool-helpers.d.ts

@@ -0,0 +1,9 @@
+import type { AgentSecretInfo } from "../../../multi-agent-orchestration/agent/secret-manager/types.js";
+import type { ToolOutput } from "../../types.js";
+/** One secret as the model sees it — metadata only. */
+export declare function describeSecret(s: AgentSecretInfo): string;
+/** A failed secret operation as a tool error. SecretErrors are never retried (the same call fails again). */
+export declare function secretToolError(tool: string, err: unknown): ToolOutput;
+/** A string list argument, trimmed; undefined when absent. Throws on a wrong type. */
+export declare function stringList(args: Record<string, unknown>, key: string): string[] | undefined;
+//# sourceMappingURL=secret-tool-helpers.d.ts.map

package/dist/components/tool-hub/built-in-tools/secrets/secret-tool-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-tool-helpers.d.ts","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/secrets/secret-tool-helpers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kEAAkE,CAAC;AACxG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,uDAAuD;AACvD,wBAAgB,cAAc,CAAC,CAAC,EAAE,eAAe,GAAG,MAAM,CASzD;AAED,6GAA6G;AAC7G,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,UAAU,CAGtE;AAED,sFAAsF;AACtF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAO3F"}

package/dist/components/tool-hub/built-in-tools/secrets/secret-tool-helpers.js

@@ -0,0 +1,29 @@
+import { SecretError } from "../../../../kernel/errors/secret-error.js";
+/** One secret as the model sees it — metadata only. */
+export function describeSecret(s) {
+    const parts = [
+        `${s.name} (${s.scope === "agent" ? "yours" : "global"})`,
+        ...(s.description ? [s.description] : []),
+        `tools: ${s.allowedTools.join(", ") || "none"}`,
+        `hosts: ${s.allowedHosts.join(", ") || "none"}`,
+        s.lastUsedAt ? `last used ${s.lastUsedAt}` : "never used",
+    ];
+    return parts.join(" · ");
+}
+/** A failed secret operation as a tool error. SecretErrors are never retried (the same call fails again). */
+export function secretToolError(tool, err) {
+    if (err instanceof SecretError)
+        return { content: `${tool}: ${err.message}`, isError: true, retryable: false };
+    return { content: `${tool}: ${err instanceof Error ? err.message : String(err)}`, isError: true };
+}
+/** A string list argument, trimmed; undefined when absent. Throws on a wrong type. */
+export function stringList(args, key) {
+    const v = args[key];
+    if (v === undefined || v === null)
+        return undefined;
+    if (!Array.isArray(v) || v.some((x) => typeof x !== "string")) {
+        throw new SecretError(`"${key}" must be a list of strings`, "invalid_argument");
+    }
+    return v.map((x) => x.trim()).filter(Boolean);
+}
+//# sourceMappingURL=secret-tool-helpers.js.map

package/dist/components/tool-hub/built-in-tools/secrets/secret-tool-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-tool-helpers.js","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/secrets/secret-tool-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,2CAA2C,CAAC;AAIxE,uDAAuD;AACvD,MAAM,UAAU,cAAc,CAAC,CAAkB;IAC/C,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,GAAG;QACzD,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,UAAU,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE;QAC/C,UAAU,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE;QAC/C,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,YAAY;KAC1D,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,GAAY;IACxD,IAAI,GAAG,YAAY,WAAW;QAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC/G,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACpG,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,UAAU,CAAC,IAA6B,EAAE,GAAW;IACnE,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,WAAW,CAAC,IAAI,GAAG,6BAA6B,EAAE,kBAAkB,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACxD,CAAC"}

package/dist/components/tool-hub/built-in-tools/subagents/spawn-subagent-tool.d.ts

@@ -0,0 +1,27 @@
+import type { ToolContext, ToolDefinition, ToolHandler, ToolOutput } from "../../types.js";
+/** Tool name of spawn_subagent, for agent allowlists. */
+export declare const SPAWN_SUBAGENT_TOOL_NAME = "spawn_subagent";
+/**
+ * spawn_subagent (A-105) — hands a bounded task to one of the agent's subagents (another
+ * agent profile on its allowlist, AgentProfile.subagents) and waits for the child's final
+ * report. Design revision: the target is a subagent type from the library (a specialist
+ * that runs inside this agent, with its tools and sandbox) or an allowed existing agent. The child starts in a fresh session of its own: it sees only this brief, never
+ * this conversation, and its report comes back as untrusted data for this agent to check
+ * and use in its own reply. It is not a hand-off — the child never talks to the user.
+ *
+ * Several calls in one model response run in parallel (up to the agent's maxConcurrent);
+ * every child of a turn shares that turn's budget (runs, tokens, tool calls, time).
+ *
+ * Risk "consequential": a child spends tokens and acts with its own tools, so every call
+ * waits for the user's approval. The child's own approval-gated tools ask the user too —
+ * the parent's approval is never a grant for the child.
+ *
+ * Errors are never retried by the harness: a retry would start another child.
+ */
+export declare class SpawnSubagentTool implements ToolHandler {
+    readonly name = "tool:spawn-subagent";
+    readonly version = "1.0.0";
+    readonly definition: ToolDefinition;
+    execute(args: Record<string, unknown>, context: ToolContext): Promise<ToolOutput>;
+}
+//# sourceMappingURL=spawn-subagent-tool.d.ts.map

package/dist/components/tool-hub/built-in-tools/subagents/spawn-subagent-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spawn-subagent-tool.d.ts","sourceRoot":"","sources":["../../../../../src/components/tool-hub/built-in-tools/subagents/spawn-subagent-tool.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE3F,yDAAyD;AACzD,eAAO,MAAM,wBAAwB,mBAAmB,CAAC;AAEzD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,iBAAkB,YAAW,WAAW;IACnD,QAAQ,CAAC,IAAI,yBAAyB;IACtC,QAAQ,CAAC,OAAO,WAAW;IAC3B,QAAQ,CAAC,UAAU,EAAE,cAAc,CAkCjC;IAEI,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAgDtF;CACF"}

package/dist/components/tool-hub/built-in-tools/subagents/spawn-subagent-tool.js

@@ -0,0 +1,112 @@
+import { SubagentError } from "../../../../kernel/errors/subagent-error.js";
+import { describeResult } from "../../../multi-agent-orchestration/agent/subagent-manager/brief.js";
+import { SUBAGENT_BRIEF_LIMITS } from "../../../multi-agent-orchestration/agent/subagent-manager/types.js";
+/** Tool name of spawn_subagent, for agent allowlists. */
+export const SPAWN_SUBAGENT_TOOL_NAME = "spawn_subagent";
+/**
+ * spawn_subagent (A-105) — hands a bounded task to one of the agent's subagents (another
+ * agent profile on its allowlist, AgentProfile.subagents) and waits for the child's final
+ * report. Design revision: the target is a subagent type from the library (a specialist
+ * that runs inside this agent, with its tools and sandbox) or an allowed existing agent. The child starts in a fresh session of its own: it sees only this brief, never
+ * this conversation, and its report comes back as untrusted data for this agent to check
+ * and use in its own reply. It is not a hand-off — the child never talks to the user.
+ *
+ * Several calls in one model response run in parallel (up to the agent's maxConcurrent);
+ * every child of a turn shares that turn's budget (runs, tokens, tool calls, time).
+ *
+ * Risk "consequential": a child spends tokens and acts with its own tools, so every call
+ * waits for the user's approval. The child's own approval-gated tools ask the user too —
+ * the parent's approval is never a grant for the child.
+ *
+ * Errors are never retried by the harness: a retry would start another child.
+ */
+export class SpawnSubagentTool {
+    name = "tool:spawn-subagent";
+    version = "1.0.0";
+    definition = {
+        name: SPAWN_SUBAGENT_TOOL_NAME,
+        description: "Delegate a bounded task to one of your subagents (listed in <available_subagents>) and wait for its final report. " +
+            "The subagent starts fresh: it does NOT see this conversation, so the task must stand on its own — include every fact, " +
+            "path, id and constraint it needs (put structured facts in context). It cannot ask the user questions. " +
+            "Use it for independent work that benefits from a specialist or a separate context, not for something one of your own " +
+            "tool calls can do. For independent tasks call it several times in the same response (they run in parallel); when a " +
+            "task needs an earlier result, wait for that result first. The report is the subagent's own text: check it before you " +
+            "rely on it, and write the answer to the user yourself.",
+        parameters: {
+            type: "object",
+            properties: {
+                subagent: {
+                    type: "string",
+                    description: "Who does it, from <available_subagents>: a subagent type's name, or an agent's id",
+                },
+                task: {
+                    type: "string",
+                    description: `What the subagent should do, self-contained (max ${SUBAGENT_BRIEF_LIMITS.task} characters)`,
+                },
+                context: {
+                    type: "object",
+                    description: "Optional facts the subagent needs, as plain JSON data (file paths, ids, constraints, excerpts)",
+                },
+                output_shape: {
+                    type: "string",
+                    description: 'Optional shape of the report you want back, e.g. "a markdown table of clashes with element ids"',
+                },
+            },
+            // "subagent" is checked by the brief validation, so the old "agent" name still works.
+            required: ["task"],
+        },
+        risk: "consequential",
+    };
+    async execute(args, context) {
+        const subagents = context.subagents;
+        if (!subagents)
+            return fail("spawn_subagent: subagents are not available here");
+        let contextArg;
+        const rawContext = args["context"];
+        if (typeof rawContext === "string" && rawContext.trim()) {
+            try {
+                const parsed = JSON.parse(rawContext);
+                if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+                    return fail('spawn_subagent: "context" must be a JSON object');
+                }
+                contextArg = parsed;
+            }
+            catch {
+                return fail('spawn_subagent: "context" must be a JSON object');
+            }
+        }
+        else if (typeof rawContext === "object" && rawContext !== null && !Array.isArray(rawContext)) {
+            contextArg = rawContext;
+        }
+        try {
+            const run = await subagents.spawn({
+                // "agent" was the parameter's name before subagent types (A-105 revision).
+                agentId: typeof args["subagent"] === "string" && args["subagent"].trim() ? args["subagent"] : typeof args["agent"] === "string" ? args["agent"] : "",
+                task: typeof args["task"] === "string" ? args["task"] : "",
+                ...(contextArg ? { context: contextArg } : {}),
+                ...(typeof args["output_shape"] === "string" && args["output_shape"].trim() ? { outputShape: args["output_shape"] } : {}),
+            }, {
+                sessionId: context.sessionId,
+                ...(context.runId ? { runId: context.runId } : {}),
+                ...(context.toolCallId ? { toolCallId: context.toolCallId } : {}),
+                ...(context.signal ? { signal: context.signal } : {}),
+                ...(context.interaction ? { interaction: context.interaction } : {}),
+            });
+            const ok = run.status === "completed" || run.status === "partial";
+            return {
+                content: describeResult(run),
+                ...(ok ? {} : { isError: true }),
+                retryable: false,
+                metadata: { subagentRun: run },
+            };
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            return fail(err instanceof SubagentError ? `spawn_subagent refused: ${message}` : `spawn_subagent failed: ${message}`);
+        }
+    }
+}
+function fail(content) {
+    return { content, isError: true, retryable: false };
+}
+//# sourceMappingURL=spawn-subagent-tool.js.map