atom-lite 0.1.0 → 0.5.1

package/dist/mcp/tools.js

@@ -0,0 +1,162 @@
+import { checkApproval } from "../runtime/approvals.js";
+export const MCP_APPROVAL_REQUIRED = "MCP_APPROVAL_REQUIRED";
+export const MCP_CALL_FAILED = "MCP_CALL_FAILED";
+export const MCP_APPROVAL_PREFIX = "mcp";
+/**
+ * Wrap one discovered MCP tool as an Atom-lite `Tool`. The execution path is
+ * the same as built-ins: it receives the normal context, honours approval
+ * policy, and returns the normal result shape.
+ */
+export class McpTool {
+    manager;
+    tool;
+    definition;
+    constructor(manager, tool) {
+        this.manager = manager;
+        this.tool = tool;
+        this.definition = {
+            name: tool.name,
+            description: tool.description,
+            parameters: tool.inputSchema,
+        };
+    }
+    async execute(call, ctx) {
+        const args = (call.arguments ?? {});
+        const current = this.manager
+            .tools()
+            .find((t) => t.server === this.tool.server &&
+            t.remoteName === this.tool.remoteName);
+        const requiresApproval = current?.requiresApproval ?? this.tool.requiresApproval;
+        const callTimeoutMs = current?.callTimeoutMs ?? this.tool.callTimeoutMs;
+        if (requiresApproval) {
+            const approvals = ctx.approvals;
+            const request = {
+                command: `${MCP_APPROVAL_PREFIX} ${this.tool.server}/${this.tool.remoteName} ${JSON.stringify(args)}`,
+                cwd: ctx.workspace,
+                timeoutMs: callTimeoutMs,
+                sandboxed: true,
+            };
+            if (!approvals) {
+                return {
+                    toolCallId: call.id,
+                    name: this.tool.name,
+                    content: `${MCP_APPROVAL_REQUIRED}: approvals unavailable`,
+                    isError: true,
+                };
+            }
+            const decision = await checkApproval(approvals, request);
+            if (!decision.allowed) {
+                return {
+                    toolCallId: call.id,
+                    name: this.tool.name,
+                    content: `${MCP_APPROVAL_REQUIRED}: ${this.tool.server}/${this.tool.remoteName}`,
+                    isError: true,
+                };
+            }
+        }
+        try {
+            const result = await this.manager.callTool(this.tool.server, this.tool.remoteName, args, { signal: ctx.signal });
+            return {
+                toolCallId: call.id,
+                name: this.tool.name,
+                content: summariseMcpResult(result),
+                isError: Boolean(result?.isError),
+            };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            if (message === "USER_CANCELLED") {
+                return {
+                    toolCallId: call.id,
+                    name: this.tool.name,
+                    content: "USER_CANCELLED",
+                    isError: true,
+                };
+            }
+            return {
+                toolCallId: call.id,
+                name: this.tool.name,
+                content: `${MCP_CALL_FAILED}: ${message}`,
+                isError: true,
+            };
+        }
+    }
+}
+export function createMcpTools(manager) {
+    return manager.tools().map((tool) => new McpTool(manager, tool));
+}
+/** Map an MCP tool result into the single string Atom-lite tools use. */
+export function summariseMcpResult(result) {
+    if (result == null)
+        return "";
+    if (typeof result !== "object")
+        return String(result);
+    const record = result;
+    if (Array.isArray(record.content)) {
+        const parts = record.content.map((part) => {
+            if (!part || typeof part !== "object")
+                return String(part);
+            const typed = part;
+            if (typed.type === "text" && typeof typed.text === "string") {
+                return typed.text;
+            }
+            if (typed.type === "image") {
+                const mime = typeof typed.mimeType === "string" ? typed.mimeType : "image";
+                const bytes = byteLengthOf(typed.data);
+                return `[${mime} ${bytes} bytes]`;
+            }
+            if (typed.type === "audio") {
+                const mime = typeof typed.mimeType === "string" ? typed.mimeType : "audio";
+                const bytes = byteLengthOf(typed.data);
+                return `[${mime} ${bytes} bytes]`;
+            }
+            if (typed.type === "resource") {
+                const resource = typed.resource;
+                if (resource && typeof resource === "object") {
+                    const r = resource;
+                    const mime = typeof r.mimeType === "string" ? r.mimeType : "resource";
+                    const bytes = byteLengthOf(r.blob);
+                    return `[${mime} ${bytes} bytes]`;
+                }
+                return "[resource]";
+            }
+            if (typed.type === "resource_link") {
+                return typeof typed.uri === "string"
+                    ? `[resource_link ${typed.uri}]`
+                    : "[resource_link]";
+            }
+            if (typeof typed.type === "string") {
+                const mime = typeof typed.mimeType === "string" ? typed.mimeType : typed.type;
+                const bytes = byteLengthOf(typed.data ?? typed.blob);
+                if (bytes > 0)
+                    return `[${mime} ${bytes} bytes]`;
+                return `[${typed.type}]`;
+            }
+            return `[${JSON.stringify(typed).slice(0, 120)}]`;
+        });
+        return parts.join("\n").trim();
+    }
+    if (typeof record.result === "string")
+        return record.result;
+    try {
+        return JSON.stringify(record);
+    }
+    catch {
+        return String(record);
+    }
+}
+function byteLengthOf(value) {
+    if (typeof value === "string") {
+        // MCP image/audio data is base64.
+        try {
+            return Buffer.byteLength(value, "base64");
+        }
+        catch {
+            return Buffer.byteLength(value, "utf8");
+        }
+    }
+    if (value instanceof Uint8Array)
+        return value.byteLength;
+    return 0;
+}
+//# sourceMappingURL=tools.js.map

package/dist/mcp/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/mcp/tools.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAIxD,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AAC7D,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AACjD,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAEzC;;;;GAIG;AACH,MAAM,OAAO,OAAO;IAIC;IACA;IAJV,UAAU,CAAqB;IAExC,YACmB,OAAmB,EACnB,IAAkB;QADlB,YAAO,GAAP,OAAO,CAAY;QACnB,SAAI,GAAJ,IAAI,CAAc;QAEnC,IAAI,CAAC,UAAU,GAAG;YAChB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,IAAI,CAAC,WAAW;SAC7B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAc,EAAE,GAAgB;QAC5C,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAA4B,CAAC;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO;aACzB,KAAK,EAAE;aACP,IAAI,CACH,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM;YAC7B,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,CAAC,UAAU,CACxC,CAAC;QACJ,MAAM,gBAAgB,GACpB,OAAO,EAAE,gBAAgB,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;QAC1D,MAAM,aAAa,GACjB,OAAO,EAAE,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;QAEpD,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;YAChC,MAAM,OAAO,GAAG;gBACd,OAAO,EAAE,GAAG,mBAAmB,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;gBACrG,GAAG,EAAE,GAAG,CAAC,SAAS;gBAClB,SAAS,EAAE,aAAa;gBACxB,SAAS,EAAE,IAAI;aAChB,CAAC;YACF,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO;oBACL,UAAU,EAAE,IAAI,CAAC,EAAE;oBACnB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;oBACpB,OAAO,EAAE,GAAG,qBAAqB,yBAAyB;oBAC1D,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACzD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACtB,OAAO;oBACL,UAAU,EAAE,IAAI,CAAC,EAAE;oBACnB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;oBACpB,OAAO,EAAE,GAAG,qBAAqB,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;oBAChF,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CACxC,IAAI,CAAC,IAAI,CAAC,MAAM,EAChB,IAAI,CAAC,IAAI,CAAC,UAAU,EACpB,IAAI,EACJ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CACvB,CAAC;YACF,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;gBACpB,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC;gBACnC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;aAClC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzD,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;gBACjC,OAAO;oBACL,UAAU,EAAE,IAAI,CAAC,EAAE;oBACnB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;oBACpB,OAAO,EAAE,gBAAgB;oBACzB,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,EAAE;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;gBACpB,OAAO,EAAE,GAAG,eAAe,KAAK,OAAO,EAAE;gBACzC,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,cAAc,CAAC,OAAmB;IAChD,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,kBAAkB,CAAC,MAAe;IAChD,IAAI,MAAM,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC9B,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAiC,CAAC;IACjD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACxC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,IAA+B,CAAC;YAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5D,OAAO,KAAK,CAAC,IAAI,CAAC;YACpB,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC3B,MAAM,IAAI,GACR,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;gBAChE,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACvC,OAAO,IAAI,IAAI,IAAI,KAAK,SAAS,CAAC;YACpC,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC3B,MAAM,IAAI,GACR,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;gBAChE,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACvC,OAAO,IAAI,IAAI,IAAI,KAAK,SAAS,CAAC;YACpC,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;gBAChC,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBAC7C,MAAM,CAAC,GAAG,QAAmC,CAAC;oBAC9C,MAAM,IAAI,GACR,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;oBAC3D,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBACnC,OAAO,IAAI,IAAI,IAAI,KAAK,SAAS,CAAC;gBACpC,CAAC;gBACD,OAAO,YAAY,CAAC;YACtB,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBACnC,OAAO,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;oBAClC,CAAC,CAAC,kBAAkB,KAAK,CAAC,GAAG,GAAG;oBAChC,CAAC,CAAC,iBAAiB,CAAC;YACxB,CAAC;YACD,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,IAAI,GACR,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;gBACnE,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;gBACrD,IAAI,KAAK,GAAG,CAAC;oBAAE,OAAO,IAAI,IAAI,IAAI,KAAK,SAAS,CAAC;gBACjD,OAAO,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC;YAC3B,CAAC;YACD,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC;QACpD,CAAC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IAC5D,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,kCAAkC;QAClC,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,IAAI,KAAK,YAAY,UAAU;QAAE,OAAO,KAAK,CAAC,UAAU,CAAC;IACzD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/mcp/types.d.ts

@@ -0,0 +1,92 @@
+import type { McpServerConfig } from "../config/schema.js";
+export type { McpServerConfig };
+export type JsonRpcId = number | string;
+export interface JsonRpcRequest {
+    jsonrpc: "2.0";
+    id: JsonRpcId;
+    method: string;
+    params?: unknown;
+}
+export interface JsonRpcNotification {
+    jsonrpc: "2.0";
+    method: string;
+    params?: unknown;
+}
+export interface JsonRpcSuccess {
+    jsonrpc: "2.0";
+    id: JsonRpcId;
+    result: unknown;
+}
+export interface JsonRpcFailure {
+    jsonrpc: "2.0";
+    id: JsonRpcId;
+    error: {
+        code: number;
+        message: string;
+        data?: unknown;
+    };
+}
+export type JsonRpcMessage = JsonRpcRequest | JsonRpcNotification | JsonRpcSuccess | JsonRpcFailure;
+export interface McpTransportCloseInfo {
+    code?: number | null;
+    signal?: string | null;
+}
+export interface McpTransportHandlers {
+    onMessage(message: unknown): void;
+    onError(error: Error): void;
+    onClose(info: McpTransportCloseInfo): void;
+}
+/** A bidirectional JSON-RPC carrier. Tests inject a fake; production uses stdio. */
+export interface McpTransport {
+    start(): Promise<void>;
+    send(message: unknown): void;
+    close(): void | Promise<void>;
+    setHandlers(handlers: McpTransportHandlers): void;
+    /** Optional diagnostic text (stderr) for connection failures. */
+    stderrText?(): string;
+}
+export type McpTransportFactory = (serverName: string, config: McpServerConfig) => McpTransport;
+export interface McpRemoteTool {
+    name: string;
+    description?: string;
+    inputSchema?: Record<string, unknown>;
+}
+/** A discovered tool after namespacing and policy decoration. */
+export interface McpToolState {
+    server: string;
+    remoteName: string;
+    /** Namespaced model-facing name: `mcp__<server>__<tool>`. */
+    name: string;
+    description: string;
+    inputSchema: Record<string, unknown>;
+    requiresApproval: boolean;
+    callTimeoutMs: number;
+}
+export type McpServerState = "disabled" | "idle" | "connecting" | "ready" | "failed" | "closed";
+export interface McpServerStatus {
+    name: string;
+    state: McpServerState;
+    enabled: boolean;
+    requiresApproval: boolean;
+    toolCount: number;
+    tools: string[];
+    lastError?: string;
+}
+export type McpEvent = {
+    type: "mcp_server_connected";
+    server: string;
+    toolCount: number;
+} | {
+    type: "mcp_server_failed";
+    server: string;
+    error: string;
+} | {
+    type: "mcp_tools_changed";
+    server: string;
+    toolCount: number;
+};
+export interface McpCallResult {
+    content?: unknown;
+    isError?: boolean;
+    [key: string]: unknown;
+}

package/dist/mcp/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/mcp/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/mcp/types.ts"],"names":[],"mappings":""}

package/dist/providers/factory.js

@@ -29,6 +29,7 @@ export function createProvider(config, profileName, modelOverride) {
             model: modelOverride ?? pcfg.model,
             headers: pcfg.headers,
             keepAlive: pcfg.keepAlive,
+            think: pcfg.think,
             options: pcfg.options,
             contextWindow: pcfg.contextWindow,
         });

package/dist/providers/factory.js.map

@@ -1 +1 @@
-{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../src/providers/factory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,WAAoB,EACpB,aAAsB;IAEtB,MAAM,IAAI,GAAG,WAAW,IAAI,MAAM,CAAC,eAAe,CAAC;IACnD,MAAM,IAAI,GAAI,MAAM,CAAC,SAAiC,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI;QACP,OAAO,IAAI,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,qCAAqC,EAAE,CAAC,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,OAAO,IAAI,uBAAuB,CAAC;YACjC,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,0BAA0B;YACnD,KAAK,EAAE,aAAa,IAAI,IAAI,CAAC,KAAK;YAClC,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,IAAI,aAAa,CAAC;YACvB,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,wBAAwB;YACjD,KAAK,EAAE,aAAa,IAAI,IAAI,CAAC,KAAK;YAClC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,OAAO,IAAI,aAAa,CAAC;YACvB,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,aAAa,IAAI,IAAI,CAAC,KAAK;YAClC,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,YAAY,CAAC;QACtB,EAAE,IAAI,EAAE,iBAAiB,IAAI,CAAC,IAAI,uBAAuB,EAAE;KAC5D,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../src/providers/factory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,WAAoB,EACpB,aAAsB;IAEtB,MAAM,IAAI,GAAG,WAAW,IAAI,MAAM,CAAC,eAAe,CAAC;IACnD,MAAM,IAAI,GAAI,MAAM,CAAC,SAAiC,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI;QACP,OAAO,IAAI,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,qCAAqC,EAAE,CAAC,CAAC,CAAC;IAC7E,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,OAAO,IAAI,uBAAuB,CAAC;YACjC,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,0BAA0B;YACnD,KAAK,EAAE,aAAa,IAAI,IAAI,CAAC,KAAK;YAClC,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,IAAI,aAAa,CAAC;YACvB,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,wBAAwB;YACjD,KAAK,EAAE,aAAa,IAAI,IAAI,CAAC,KAAK;YAClC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,OAAO,IAAI,aAAa,CAAC;YACvB,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,aAAa,IAAI,IAAI,CAAC,KAAK;YAClC,MAAM;YACN,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,YAAY,CAAC;QACtB,EAAE,IAAI,EAAE,iBAAiB,IAAI,CAAC,IAAI,uBAAuB,EAAE;KAC5D,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/executor.d.ts

@@ -0,0 +1,2 @@
+export declare class Executor {
+}

package/dist/runtime/executor.js

@@ -0,0 +1,4 @@
+// Executor placeholder.
+export class Executor {
+}
+//# sourceMappingURL=executor.js.map

package/dist/runtime/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/runtime/executor.ts"],"names":[],"mappings":"AAAA,wBAAwB;AACxB,MAAM,OAAO,QAAQ;CAEpB"}

package/dist/runtime/scheduler.d.ts

@@ -1,7 +1,8 @@
 import type { ToolCall } from "../types.js";
 import type { Tool, ToolContext } from "../tools/types.js";
 import type { ToolResult } from "../tools/types.js";
-import { LockManager, type Release } from "./locks.js";
-export declare function executeToolBatch(calls: ToolCall[], toolMap: Map<string, Tool>, ctx: ToolContext, maxParallel: number, signal: AbortSignal, lockManager?: LockManager, bashConcurrency?: "serial" | "parallel"): Promise<ToolResult[]>;
+import { LockManager } from "./locks.js";
+export { ToolExecutor } from "./tool-executor.js";
 export { LockManager };
-export type { Release };
+export type { Release } from "./locks.js";
+export declare function executeToolBatch(calls: ToolCall[], toolMap: Map<string, Tool>, ctx: ToolContext, maxParallel: number, signal: AbortSignal, lockManager?: LockManager, bashConcurrency?: "serial" | "parallel"): Promise<ToolResult[]>;

package/dist/runtime/scheduler.js

@@ -1,103 +1,12 @@
-import { resolve } from "node:path";
+import { ToolExecutor } from "./tool-executor.js";
 import { LockManager } from "./locks.js";
-function resourceKey(call, workspace) {
-    const args = call.arguments ?? {};
-    if (call.name === "bash")
-        return "__bash__";
-    const p = args.path ?? args.cwd ?? "";
-    const key = String(p);
-    return key === "" ? "" : resolve(workspace, key);
-}
-function isMutation(call) {
-    return call.name === "write" || call.name === "edit";
-}
-function isBash(call) {
-    return call.name === "bash";
-}
+export { ToolExecutor } from "./tool-executor.js";
+export { LockManager };
 export async function executeToolBatch(calls, toolMap, ctx, maxParallel, signal, lockManager, bashConcurrency = "serial") {
-    const lm = lockManager ?? new LockManager();
-    const n = calls.length;
-    const results = new Array(n);
-    const acquire = async (call) => {
-        if (isBash(call)) {
-            return bashConcurrency === "parallel"
-                ? lm.acquireGlobalBarrier(signal)
-                : lm.acquireGlobal(signal);
-        }
-        if (call.name === "webfetch" || call.name === "websearch") {
-            // No file lock; network-only. Return a no-op release.
-            return () => { };
-        }
-        const key = resourceKey(call, ctx.workspace);
-        if (key === "")
-            return () => { };
-        if (isMutation(call))
-            return lm.acquireWrite(key, signal);
-        return lm.acquireRead(key, signal);
-    };
-    // Concurrency pool
-    let active = 0;
-    const queue = [];
-    function acquireSlot() {
-        return new Promise((resolve) => {
-            if (active < maxParallel) {
-                active++;
-                resolve();
-            }
-            else {
-                queue.push(resolve);
-            }
-        });
-    }
-    function releaseSlot() {
-        if (queue.length > 0) {
-            const next = queue.shift();
-            next();
-        }
-        else {
-            active--;
-        }
-    }
-    const tasks = calls.map((call, i) => {
-        return (async () => {
-            if (signal.aborted) {
-                results[i] = { toolCallId: call.id, name: call.name, content: "USER_CANCELLED", isError: true };
-                return;
-            }
-            let release;
-            await acquireSlot();
-            try {
-                release = await acquire(call);
-                if (signal.aborted) {
-                    results[i] = { toolCallId: call.id, name: call.name, content: "USER_CANCELLED", isError: true };
-                    return;
-                }
-                const tool = toolMap.get(call.name);
-                if (!tool) {
-                    results[i] = { toolCallId: call.id, name: call.name, content: `TOOL_NOT_FOUND: ${call.name}`, isError: true };
-                }
-                else {
-                    const r = await tool.execute(call, ctx);
-                    results[i] = r;
-                }
-            }
-            catch (err) {
-                results[i] = {
-                    toolCallId: call.id,
-                    name: call.name,
-                    content: `COMMAND_FAILED: ${err instanceof Error ? err.message : String(err)}`,
-                    isError: true,
-                };
-            }
-            finally {
-                if (release)
-                    release();
-                releaseSlot();
-            }
-        })();
+    const executor = new ToolExecutor({
+        maxParallelToolCalls: maxParallel,
+        bashConcurrency,
     });
-    await Promise.all(tasks);
-    return results;
+    return executor.run(calls, { ...ctx, toolMap }, signal);
 }
-export { LockManager };
 //# sourceMappingURL=scheduler.js.map

package/dist/runtime/scheduler.js.map

@@ -1 +1 @@
-{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../src/runtime/scheduler.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAgB,MAAM,YAAY,CAAC;AAEvD,SAAS,WAAW,CAAC,IAAc,EAAE,SAAiB;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;IAClC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,UAAU,CAAC;IAC5C,MAAM,CAAC,GAAI,IAAY,CAAC,IAAI,IAAK,IAAY,CAAC,GAAG,IAAI,EAAE,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACtB,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,UAAU,CAAC,IAAc;IAChC,OAAO,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC;AACvD,CAAC;AAED,SAAS,MAAM,CAAC,IAAc;IAC5B,OAAO,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAiB,EACjB,OAA0B,EAC1B,GAAgB,EAChB,WAAmB,EACnB,MAAmB,EACnB,WAAyB,EACzB,kBAAyC,QAAQ;IAEjD,MAAM,EAAE,GAAG,WAAW,IAAI,IAAI,WAAW,EAAE,CAAC;IAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IACvB,MAAM,OAAO,GAAiB,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAG,KAAK,EAAE,IAAc,EAAoB,EAAE;QACzD,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACjB,OAAO,eAAe,KAAK,UAAU;gBACnC,CAAC,CAAC,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC;gBACjC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC1D,sDAAsD;YACtD,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,GAAG,KAAK,EAAE;YAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;QAChC,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,mBAAmB;IACnB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,KAAK,GAAsB,EAAE,CAAC;IACpC,SAAS,WAAW;QAClB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,IAAI,MAAM,GAAG,WAAW,EAAE,CAAC;gBACzB,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,SAAS,WAAW;QAClB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YAC5B,IAAI,EAAE,CAAC;QACT,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,CAAC;QACX,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QAClC,OAAO,CAAC,KAAK,IAAI,EAAE;YACjB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBAChG,OAAO;YACT,CAAC;YACD,IAAI,OAA4B,CAAC;YACjC,MAAM,WAAW,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC9B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;oBAChG,OAAO;gBACT,CAAC;gBACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,mBAAmB,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBAChH,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;oBACxC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACjB,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,CAAC,CAAC,GAAG;oBACX,UAAU,EAAE,IAAI,CAAC,EAAE;oBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,mBAAmB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;oBAC9E,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,IAAI,OAAO;oBAAE,OAAO,EAAE,CAAC;gBACvB,WAAW,EAAE,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,CAAC"}
+{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../src/runtime/scheduler.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,CAAC;AAGvB,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAiB,EACjB,OAA0B,EAC1B,GAAgB,EAChB,WAAmB,EACnB,MAAmB,EACnB,WAAyB,EACzB,kBAAyC,QAAQ;IAEjD,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC;QAChC,oBAAoB,EAAE,WAAW;QACjC,eAAe;KAChB,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;AAC1D,CAAC"}

package/dist/runtime/tool-executor.d.ts

@@ -0,0 +1,18 @@
+import type { ToolCall } from "../types.js";
+import type { Tool, ToolContext } from "../tools/types.js";
+import type { ToolResult } from "../tools/types.js";
+import { LockManager } from "./locks.js";
+export interface ToolExecutorOptions {
+    maxParallelToolCalls?: number;
+    bashConcurrency?: "serial" | "parallel";
+    limits?: unknown;
+}
+export declare class ToolExecutor {
+    private maxParallel;
+    private bashConcurrency;
+    constructor(options?: ToolExecutorOptions);
+    run(calls: ToolCall[], context: ToolContext & {
+        toolMap: Map<string, Tool>;
+        lockManager?: LockManager;
+    }, signal: AbortSignal): Promise<ToolResult[]>;
+}

package/dist/runtime/tool-executor.js

@@ -0,0 +1,126 @@
+import { resolve } from "node:path";
+import { LockManager } from "./locks.js";
+function resourceKey(call, workspace) {
+    const args = call.arguments ?? {};
+    if (call.name === "bash")
+        return "__bash__";
+    const p = args.path ?? args.cwd ?? "";
+    const key = String(p);
+    return key === "" ? "" : resolve(workspace, key);
+}
+function isMutation(call) {
+    return call.name === "write" || call.name === "edit";
+}
+function isBash(call) {
+    return call.name === "bash";
+}
+function isRemote(call) {
+    return call.name.startsWith("mcp__");
+}
+export class ToolExecutor {
+    maxParallel;
+    bashConcurrency;
+    constructor(options = {}) {
+        this.maxParallel = options.maxParallelToolCalls ?? 4;
+        this.bashConcurrency = options.bashConcurrency ?? "serial";
+    }
+    async run(calls, context, signal) {
+        const toolMap = context.toolMap;
+        const lockManager = context.lockManager;
+        const ctx = context;
+        const lm = lockManager ?? new LockManager();
+        const n = calls.length;
+        const results = new Array(n);
+        const maxParallel = this.maxParallel;
+        const bashConcurrency = this.bashConcurrency;
+        const acquire = async (call) => {
+            if (isBash(call)) {
+                return bashConcurrency === "parallel"
+                    ? lm.acquireGlobalBarrier(signal)
+                    : lm.acquireGlobal(signal);
+            }
+            if (call.name === "webfetch" || call.name === "websearch") {
+                return () => { };
+            }
+            if (isRemote(call)) {
+                return () => { };
+            }
+            const key = resourceKey(call, ctx.workspace);
+            if (key === "")
+                return () => { };
+            const tool = toolMap.get(call.name);
+            const readOnly = tool?.annotations?.readOnlyHint === true;
+            if (isMutation(call))
+                return lm.acquireWrite(key, signal);
+            // Extension tools: read-only hint => read lock; otherwise (including
+            // unclassified path-bearing tools) => write lock.
+            if (tool?.annotations !== undefined && !readOnly) {
+                return lm.acquireWrite(key, signal);
+            }
+            return lm.acquireRead(key, signal);
+        };
+        let active = 0;
+        const queue = [];
+        function acquireSlot() {
+            return new Promise((resolve) => {
+                if (active < maxParallel) {
+                    active++;
+                    resolve();
+                }
+                else {
+                    queue.push(resolve);
+                }
+            });
+        }
+        function releaseSlot() {
+            if (queue.length > 0) {
+                const next = queue.shift();
+                next();
+            }
+            else {
+                active--;
+            }
+        }
+        const tasks = calls.map((call, i) => {
+            return (async () => {
+                if (signal.aborted) {
+                    results[i] = { toolCallId: call.id, name: call.name, content: "USER_CANCELLED", isError: true };
+                    return;
+                }
+                let release;
+                await acquireSlot();
+                try {
+                    release = await acquire(call);
+                    if (signal.aborted) {
+                        results[i] = { toolCallId: call.id, name: call.name, content: "USER_CANCELLED", isError: true };
+                        return;
+                    }
+                    const tool = toolMap.get(call.name);
+                    if (!tool) {
+                        results[i] = { toolCallId: call.id, name: call.name, content: `TOOL_NOT_FOUND: ${call.name}`, isError: true };
+                    }
+                    else {
+                        const r = await tool.execute(call, ctx);
+                        results[i] = r;
+                    }
+                }
+                catch (err) {
+                    results[i] = {
+                        toolCallId: call.id,
+                        name: call.name,
+                        content: `COMMAND_FAILED: ${err instanceof Error ? err.message : String(err)}`,
+                        isError: true,
+                    };
+                }
+                finally {
+                    if (release)
+                        release();
+                    releaseSlot();
+                }
+            })();
+        });
+        await Promise.all(tasks);
+        return results;
+    }
+}
+//# sourceMappingURL=tool-executor.js.map

package/dist/runtime/tool-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-executor.js","sourceRoot":"","sources":["../../src/runtime/tool-executor.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAgB,MAAM,YAAY,CAAC;AAEvD,SAAS,WAAW,CAAC,IAAc,EAAE,SAAiB;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;IAClC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,UAAU,CAAC;IAC5C,MAAM,CAAC,GAAI,IAAY,CAAC,IAAI,IAAK,IAAY,CAAC,GAAG,IAAI,EAAE,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACtB,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,UAAU,CAAC,IAAc;IAChC,OAAO,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC;AACvD,CAAC;AAED,SAAS,MAAM,CAAC,IAAc;IAC5B,OAAO,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC;AAC9B,CAAC;AAED,SAAS,QAAQ,CAAC,IAAc;IAC9B,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AACvC,CAAC;AAQD,MAAM,OAAO,YAAY;IACf,WAAW,CAAS;IACpB,eAAe,CAAwB;IAE/C,YAAY,UAA+B,EAAE;QAC3C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,oBAAoB,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,QAAQ,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,GAAG,CACP,KAAiB,EACjB,OAAgF,EAChF,MAAmB;QAEnB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACxC,MAAM,GAAG,GAAG,OAAO,CAAC;QACpB,MAAM,EAAE,GAAG,WAAW,IAAI,IAAI,WAAW,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;QACvB,MAAM,OAAO,GAAiB,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACrC,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;QAE7C,MAAM,OAAO,GAAG,KAAK,EAAE,IAAc,EAAoB,EAAE;YACzD,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjB,OAAO,eAAe,KAAK,UAAU;oBACnC,CAAC,CAAC,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC;oBACjC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC1D,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;YAClB,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnB,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;YAC7C,IAAI,GAAG,KAAK,EAAE;gBAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;YAChC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,QAAQ,GAAG,IAAI,EAAE,WAAW,EAAE,YAAY,KAAK,IAAI,CAAC;YAC1D,IAAI,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC1D,qEAAqE;YACrE,kDAAkD;YAClD,IAAI,IAAI,EAAE,WAAW,KAAK,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACjD,OAAO,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC;QAEF,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,KAAK,GAAsB,EAAE,CAAC;QACpC,SAAS,WAAW;YAClB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBACnC,IAAI,MAAM,GAAG,WAAW,EAAE,CAAC;oBACzB,MAAM,EAAE,CAAC;oBACT,OAAO,EAAE,CAAC;gBACZ,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QACD,SAAS,WAAW;YAClB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;gBAC5B,IAAI,EAAE,CAAC;YACT,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,CAAC;YACX,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;YAClC,OAAO,CAAC,KAAK,IAAI,EAAE;gBACjB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;oBAChG,OAAO;gBACT,CAAC;gBACD,IAAI,OAA4B,CAAC;gBACjC,MAAM,WAAW,EAAE,CAAC;gBACpB,IAAI,CAAC;oBACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC9B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBACnB,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;wBAChG,OAAO;oBACT,CAAC;oBACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACpC,IAAI,CAAC,IAAI,EAAE,CAAC;wBACV,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,mBAAmB,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;oBAChH,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;wBACxC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;oBACjB,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,CAAC,CAAC,GAAG;wBACX,UAAU,EAAE,IAAI,CAAC,EAAE;wBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,OAAO,EAAE,mBAAmB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;wBAC9E,OAAO,EAAE,IAAI;qBACd,CAAC;gBACJ,CAAC;wBAAS,CAAC;oBACT,IAAI,OAAO;wBAAE,OAAO,EAAE,CAAC;oBACvB,WAAW,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/security/process.d.ts

@@ -1 +1,11 @@
 export declare function defaultShell(): string;
+/**
+ * Terminate a spawned child and, where possible, its whole process tree.
+ * POSIX: kill the process group (requires the child to have been spawned with
+ * `detached: true`). Windows: use `taskkill /T`.
+ */
+export declare function terminateProcessTree(child: {
+    pid?: number;
+    killed?: boolean;
+    kill(signal?: NodeJS.Signals | number): boolean;
+}, signal?: NodeJS.Signals): void;

package/dist/security/process.js

@@ -1,8 +1,44 @@
 // Process policy helpers (full implementation in later tickets).
+import { execSync } from "node:child_process";
 export function defaultShell() {
     if (process.platform === "win32") {
         return process.env.ComSpec ?? "cmd.exe";
     }
     return process.env.SHELL ?? "/bin/sh";
 }
+/**
+ * Terminate a spawned child and, where possible, its whole process tree.
+ * POSIX: kill the process group (requires the child to have been spawned with
+ * `detached: true`). Windows: use `taskkill /T`.
+ */
+export function terminateProcessTree(child, signal = "SIGTERM") {
+    const pid = child.pid;
+    if (!pid)
+        return;
+    if (process.platform === "win32") {
+        try {
+            execSync(`taskkill /PID ${pid} /T /F`, { stdio: "ignore" });
+        }
+        catch {
+            try {
+                child.kill();
+            }
+            catch {
+                // Ignore.
+            }
+        }
+        return;
+    }
+    try {
+        process.kill(-pid, signal);
+    }
+    catch {
+        try {
+            child.kill(signal);
+        }
+        catch {
+            // Ignore.
+        }
+    }
+}
 //# sourceMappingURL=process.js.map