bernard-agent 0.8.1 → 0.9.0

package/dist/tools/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":";;AA+BA,kCA0BC;AAzDD,yCAA6C;AAC7C,2CAAkE;AAClE,+CAAmD;AACnD,uCAA4C;AAC5C,iDAAoD;AACpD,uCAA4C;AAC5C,qCAA+C;AAC/C,6CAAmD;AACnD,qCAA6C;AAC7C,uCAA2C;AAC3C,uCAA4C;AAC5C,6CAAiD;AACjD,mDAAuD;AAUvD;;;;;;;;GAQG;AACH,SAAgB,WAAW,CACzB,OAAoB,EACpB,WAAwB,EACxB,QAA8B,EAC9B,YAA2B,EAC3B,eAAiC,EACjC,cAAqC,EACrC,MAAsB;IAEtB,OAAO;QACL,KAAK,EAAE,IAAA,0BAAe,EAAC,OAAO,CAAC;QAC/B,MAAM,EAAE,IAAA,4BAAgB,EAAC,WAAW,CAAC;QACrC,OAAO,EAAE,IAAA,6BAAiB,EAAC,WAAW,CAAC;QACvC,OAAO,EAAE,IAAA,8BAAiB,EAAC,YAAY,CAAC;QACxC,UAAU,EAAE,IAAA,oCAAoB,EAAC,eAAe,EAAE,cAAc,EAAE,MAAM,CAAC;QACzE,QAAQ,EAAE,IAAA,gCAAkB,GAAE;QAC9B,GAAG,IAAA,yBAAe,GAAE;QACpB,GAAG,IAAA,iCAAkB,GAAE;QACvB,GAAG,IAAA,yBAAe,GAAE;QACpB,UAAU,EAAE,IAAA,4BAAmB,GAAE;QACjC,WAAW,EAAE,IAAA,gCAAmB,GAAE;QAClC,QAAQ,EAAE,IAAA,0BAAiB,GAAE;QAC7B,IAAI,EAAE,IAAA,wBAAc,GAAE;QACtB,GAAG,IAAA,yBAAe,GAAE;QACpB,GAAG,QAAQ;KACZ,CAAC;AACJ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":";;AAiCA,kCA4BC;AA7DD,yCAA6C;AAC7C,2CAAkE;AAClE,+CAAmD;AACnD,uCAA4C;AAC5C,iDAAoD;AACpD,mDAAuD;AACvD,uCAA4C;AAC5C,qCAA+C;AAC/C,6CAAmD;AACnD,qCAA6C;AAC7C,mDAAsD;AACtD,uCAA2C;AAC3C,uCAA4C;AAC5C,6CAAiD;AACjD,mDAAuD;AAUvD;;;;;;;;GAQG;AACH,SAAgB,WAAW,CACzB,OAAoB,EACpB,WAAwB,EACxB,QAA8B,EAC9B,YAA2B,EAC3B,eAAiC,EACjC,cAAqC,EACrC,MAAsB;IAEtB,OAAO;QACL,KAAK,EAAE,IAAA,0BAAe,EAAC,OAAO,CAAC;QAC/B,MAAM,EAAE,IAAA,4BAAgB,EAAC,WAAW,CAAC;QACrC,OAAO,EAAE,IAAA,6BAAiB,EAAC,WAAW,CAAC;QACvC,OAAO,EAAE,IAAA,8BAAiB,EAAC,YAAY,CAAC;QACxC,UAAU,EAAE,IAAA,oCAAoB,EAAC,eAAe,EAAE,cAAc,EAAE,MAAM,CAAC;QACzE,QAAQ,EAAE,IAAA,gCAAkB,GAAE;QAC9B,GAAG,IAAA,yBAAe,GAAE;QACpB,GAAG,IAAA,iCAAkB,GAAE;QACvB,GAAG,IAAA,oCAAoB,GAAE;QACzB,GAAG,IAAA,yBAAe,GAAE;QACpB,UAAU,EAAE,IAAA,4BAAmB,GAAE;QACjC,WAAW,EAAE,IAAA,gCAAmB,GAAE;QAClC,QAAQ,EAAE,IAAA,0BAAiB,GAAE;QAC7B,UAAU,EAAE,IAAA,mCAAmB,GAAE;QACjC,IAAI,EAAE,IAAA,wBAAc,GAAE;QACtB,GAAG,IAAA,yBAAe,GAAE;QACpB,GAAG,QAAQ;KACZ,CAAC;AACJ,CAAC"}

package/dist/tools/mcp.d.ts

@@ -13,21 +13,21 @@ export declare function createMCPConfigTool(): import("ai").Tool<z.ZodObject<{
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
     action: "list" | "add" | "remove" | "get";
-    command?: string | undefined;
     key?: string | undefined;
+    command?: string | undefined;
     env?: Record<string, string> | undefined;
     args?: string[] | undefined;
 }, {
     action: "list" | "add" | "remove" | "get";
-    command?: string | undefined;
     key?: string | undefined;
+    command?: string | undefined;
     env?: Record<string, string> | undefined;
     args?: string[] | undefined;
 }>, string> & {
     execute: (args: {
         action: "list" | "add" | "remove" | "get";
-        command?: string | undefined;
         key?: string | undefined;
+        command?: string | undefined;
         env?: Record<string, string> | undefined;
         args?: string[] | undefined;
     }, options: import("ai").ToolExecutionOptions) => PromiseLike<string>;

package/dist/tools/plan.d.ts

@@ -0,0 +1,81 @@
+import { z } from 'zod';
+import type { PlanStore } from '../plan-store.js';
+/**
+ * Creates the `plan` tool for coordinator (ReAct) mode.
+ *
+ * Each step carries a verification criterion at creation time. Marking a step
+ * `done` requires a `signoff` attesting that the verification was actually
+ * performed. `cancelled`/`error` require `note` (no sign-off, since the step
+ * did not succeed).
+ */
+export declare function createPlanTool(planStore: PlanStore): import("ai").Tool<z.ZodObject<{
+    action: z.ZodEnum<["create", "update", "add", "view"]>;
+    steps: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        description: z.ZodString;
+        verification: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        description: string;
+        verification: string;
+    }, {
+        description: string;
+        verification: string;
+    }>, "many">>;
+    step: z.ZodOptional<z.ZodObject<{
+        description: z.ZodString;
+        verification: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        description: string;
+        verification: string;
+    }, {
+        description: string;
+        verification: string;
+    }>>;
+    id: z.ZodOptional<z.ZodNumber>;
+    status: z.ZodOptional<z.ZodEnum<["pending", "in_progress", "done", "cancelled", "error"]>>;
+    note: z.ZodOptional<z.ZodString>;
+    signoff: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    action: "add" | "update" | "create" | "view";
+    status?: "error" | "done" | "pending" | "in_progress" | "cancelled" | undefined;
+    id?: number | undefined;
+    note?: string | undefined;
+    signoff?: string | undefined;
+    steps?: {
+        description: string;
+        verification: string;
+    }[] | undefined;
+    step?: {
+        description: string;
+        verification: string;
+    } | undefined;
+}, {
+    action: "add" | "update" | "create" | "view";
+    status?: "error" | "done" | "pending" | "in_progress" | "cancelled" | undefined;
+    id?: number | undefined;
+    note?: string | undefined;
+    signoff?: string | undefined;
+    steps?: {
+        description: string;
+        verification: string;
+    }[] | undefined;
+    step?: {
+        description: string;
+        verification: string;
+    } | undefined;
+}>, string> & {
+    execute: (args: {
+        action: "add" | "update" | "create" | "view";
+        status?: "error" | "done" | "pending" | "in_progress" | "cancelled" | undefined;
+        id?: number | undefined;
+        note?: string | undefined;
+        signoff?: string | undefined;
+        steps?: {
+            description: string;
+            verification: string;
+        }[] | undefined;
+        step?: {
+            description: string;
+            verification: string;
+        } | undefined;
+    }, options: import("ai").ToolExecutionOptions) => PromiseLike<string>;
+};

package/dist/tools/plan.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPlanTool = createPlanTool;
+const ai_1 = require("ai");
+const zod_1 = require("zod");
+const output_js_1 = require("../output.js");
+const stepInputSchema = zod_1.z.object({
+    description: zod_1.z
+        .string()
+        .min(1, 'description must not be empty')
+        .describe('What this step accomplishes.'),
+    verification: zod_1.z
+        .string()
+        .min(1, 'verification must not be empty')
+        .describe('Concrete check that proves the step succeeded — a command to run, a file to read, a URL to GET, an output substring to look for. Must be observable, not subjective.'),
+});
+/**
+ * Creates the `plan` tool for coordinator (ReAct) mode.
+ *
+ * Each step carries a verification criterion at creation time. Marking a step
+ * `done` requires a `signoff` attesting that the verification was actually
+ * performed. `cancelled`/`error` require `note` (no sign-off, since the step
+ * did not succeed).
+ */
+function createPlanTool(planStore) {
+    // Suppress redundant re-renders: the model often calls `view` repeatedly
+    // (and may also re-issue an `update` that produces no visible change).
+    // Compare against the last rendered string and skip printing when identical.
+    let lastRendered = null;
+    const printIfChanged = () => {
+        const rendered = planStore.render();
+        if (rendered === lastRendered)
+            return;
+        lastRendered = rendered;
+        (0, output_js_1.printPlan)(planStore.view());
+    };
+    return (0, ai_1.tool)({
+        description: "Track and manage a structured plan for the current turn. Required in coordinator mode. Each step has a `verification` criterion (set at creation) describing how you'll prove it succeeded. Actions: 'create' seeds a plan with step objects {description, verification}; 'add' appends one such step; 'update' transitions a step's status; 'view' shows the plan. Marking 'done' requires `signoff` (attesting verification was performed). Marking 'cancelled' or 'error' requires `note` (the reason). The plan is visible to the user.",
+        parameters: zod_1.z.object({
+            action: zod_1.z.enum(['create', 'update', 'add', 'view']).describe('The action to perform'),
+            steps: zod_1.z
+                .array(stepInputSchema)
+                .optional()
+                .describe('Required for create: ordered list of {description, verification} objects.'),
+            step: stepInputSchema
+                .optional()
+                .describe('Required for add: a {description, verification} object.'),
+            id: zod_1.z.number().optional().describe('Required for update: step id'),
+            status: zod_1.z
+                .enum(['pending', 'in_progress', 'done', 'cancelled', 'error'])
+                .optional()
+                .describe('Required for update: new status'),
+            note: zod_1.z
+                .string()
+                .optional()
+                .describe('Required when transitioning to cancelled or error: 1-2 sentences explaining why the step did not complete.'),
+            signoff: zod_1.z
+                .string()
+                .optional()
+                .describe('Required when transitioning to done: a brief statement (1-2 sentences) attesting that the verification criterion was checked and passed. Cite the concrete evidence (command output, file contents, status code) — do not just restate the description.'),
+        }),
+        execute: async ({ action, steps, step, id, status, note, signoff }) => {
+            switch (action) {
+                case 'create': {
+                    if (!steps || steps.length === 0) {
+                        return 'Error: steps is required for create action and must be non-empty.';
+                    }
+                    const created = planStore.create(steps);
+                    printIfChanged();
+                    return `Plan created with ${created.length} step${created.length === 1 ? '' : 's'}.`;
+                }
+                case 'add': {
+                    if (!step)
+                        return 'Error: step is required for add action ({description, verification}).';
+                    const added = planStore.add(step);
+                    printIfChanged();
+                    return `Step ${added.id} added.`;
+                }
+                case 'update': {
+                    if (id === undefined || !status) {
+                        return 'Error: id and status are required for update action.';
+                    }
+                    if (status === 'done' && !signoff) {
+                        return 'Error: signoff is required when marking a step done. Cite the verification evidence (command output, file contents, status code) — do not just restate the step description.';
+                    }
+                    if ((status === 'cancelled' || status === 'error') && !note) {
+                        return `Error: note is required when marking a step ${status}. Explain why the step did not complete in 1-2 sentences.`;
+                    }
+                    const updated = planStore.update(id, status, { note, signoff });
+                    if (!updated)
+                        return `Error: no step found with id ${id}.`;
+                    printIfChanged();
+                    return `Step ${id} -> ${status}.`;
+                }
+                case 'view': {
+                    const current = planStore.view();
+                    if (current.length === 0)
+                        return 'No plan in progress. Use create to start one.';
+                    printIfChanged();
+                    return `Plan: ${current.length} step${current.length === 1 ? '' : 's'}, ${planStore.unresolvedCount()} unresolved.`;
+                }
+                default:
+                    return `Unknown action: ${action}`;
+            }
+        },
+    });
+}
+//# sourceMappingURL=plan.js.map

package/dist/tools/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../src/tools/plan.ts"],"names":[],"mappings":";;AA0BA,wCAoFC;AA9GD,2BAA0B;AAC1B,6BAAwB;AAExB,4CAAyC;AAEzC,MAAM,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/B,WAAW,EAAE,OAAC;SACX,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,+BAA+B,CAAC;SACvC,QAAQ,CAAC,8BAA8B,CAAC;IAC3C,YAAY,EAAE,OAAC;SACZ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,gCAAgC,CAAC;SACxC,QAAQ,CACP,sKAAsK,CACvK;CACJ,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,SAAgB,cAAc,CAAC,SAAoB;IACjD,yEAAyE;IACzE,uEAAuE;IACvE,6EAA6E;IAC7E,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,MAAM,cAAc,GAAG,GAAG,EAAE;QAC1B,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;QACpC,IAAI,QAAQ,KAAK,YAAY;YAAE,OAAO;QACtC,YAAY,GAAG,QAAQ,CAAC;QACxB,IAAA,qBAAS,EAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC;IAEF,OAAO,IAAA,SAAI,EAAC;QACV,WAAW,EACT,6gBAA6gB;QAC/gB,UAAU,EAAE,OAAC,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YACrF,KAAK,EAAE,OAAC;iBACL,KAAK,CAAC,eAAe,CAAC;iBACtB,QAAQ,EAAE;iBACV,QAAQ,CAAC,2EAA2E,CAAC;YACxF,IAAI,EAAE,eAAe;iBAClB,QAAQ,EAAE;iBACV,QAAQ,CAAC,yDAAyD,CAAC;YACtE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;YAClE,MAAM,EAAE,OAAC;iBACN,IAAI,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;iBAC9D,QAAQ,EAAE;iBACV,QAAQ,CAAC,iCAAiC,CAAC;YAC9C,IAAI,EAAE,OAAC;iBACJ,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,4GAA4G,CAC7G;YACH,OAAO,EAAE,OAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,yPAAyP,CAC1P;SACJ,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAmB,EAAE;YACrF,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACjC,OAAO,mEAAmE,CAAC;oBAC7E,CAAC;oBACD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACxC,cAAc,EAAE,CAAC;oBACjB,OAAO,qBAAqB,OAAO,CAAC,MAAM,QAAQ,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;gBACvF,CAAC;gBACD,KAAK,KAAK,CAAC,CAAC,CAAC;oBACX,IAAI,CAAC,IAAI;wBAAE,OAAO,uEAAuE,CAAC;oBAC1F,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAClC,cAAc,EAAE,CAAC;oBACjB,OAAO,QAAQ,KAAK,CAAC,EAAE,SAAS,CAAC;gBACnC,CAAC;gBACD,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;wBAChC,OAAO,sDAAsD,CAAC;oBAChE,CAAC;oBACD,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;wBAClC,OAAO,8KAA8K,CAAC;oBACxL,CAAC;oBACD,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;wBAC5D,OAAO,+CAA+C,MAAM,2DAA2D,CAAC;oBAC1H,CAAC;oBACD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;oBAChE,IAAI,CAAC,OAAO;wBAAE,OAAO,gCAAgC,EAAE,GAAG,CAAC;oBAC3D,cAAc,EAAE,CAAC;oBACjB,OAAO,QAAQ,EAAE,OAAO,MAAM,GAAG,CAAC;gBACpC,CAAC;gBACD,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;oBACjC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;wBAAE,OAAO,+CAA+C,CAAC;oBACjF,cAAc,EAAE,CAAC;oBACjB,OAAO,SAAS,OAAO,CAAC,MAAM,QAAQ,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC,eAAe,EAAE,cAAc,CAAC;gBACtH,CAAC;gBACD;oBACE,OAAO,mBAAmB,MAAM,EAAE,CAAC;YACvC,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/result-cap.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Default cap on characters returned from a sub-agent or specialist to the
+ * parent agent's context. The user still sees full output via printToolResult
+ * in onStepFinish.
+ */
+export declare const DEFAULT_SUBAGENT_RESULT_MAX_CHARS = 4000;
+/**
+ * Parses a raw env-var value into a positive integer cap.
+ * Falls back to {@link DEFAULT_SUBAGENT_RESULT_MAX_CHARS} when the input is
+ * missing, non-numeric, or below 1.
+ */
+export declare function parseSubagentResultMaxChars(raw: string | undefined): number;
+/**
+ * Resolved cap, honoring the BERNARD_SUBAGENT_RESULT_MAX_CHARS env var.
+ * Read once at module load. Set the env var before launching Bernard to override.
+ */
+export declare const SUBAGENT_RESULT_MAX_CHARS: number;
+/**
+ * Caps a sub-agent or specialist result string to prevent context bloat in
+ * the parent agent. The total returned length is guaranteed to be `<= maxChars`
+ * — the truncation marker is included in the budget. When `maxChars` is
+ * smaller than the marker itself, a truncated marker is returned.
+ */
+export declare function capSubagentResult(text: string, maxChars?: number): string;

package/dist/tools/result-cap.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SUBAGENT_RESULT_MAX_CHARS = exports.DEFAULT_SUBAGENT_RESULT_MAX_CHARS = void 0;
+exports.parseSubagentResultMaxChars = parseSubagentResultMaxChars;
+exports.capSubagentResult = capSubagentResult;
+/**
+ * Default cap on characters returned from a sub-agent or specialist to the
+ * parent agent's context. The user still sees full output via printToolResult
+ * in onStepFinish.
+ */
+exports.DEFAULT_SUBAGENT_RESULT_MAX_CHARS = 4000;
+/**
+ * Parses a raw env-var value into a positive integer cap.
+ * Falls back to {@link DEFAULT_SUBAGENT_RESULT_MAX_CHARS} when the input is
+ * missing, non-numeric, or below 1.
+ */
+function parseSubagentResultMaxChars(raw) {
+    if (!raw)
+        return exports.DEFAULT_SUBAGENT_RESULT_MAX_CHARS;
+    const parsed = parseInt(raw, 10);
+    if (!Number.isFinite(parsed) || parsed < 1)
+        return exports.DEFAULT_SUBAGENT_RESULT_MAX_CHARS;
+    return Math.floor(parsed);
+}
+/**
+ * Resolved cap, honoring the BERNARD_SUBAGENT_RESULT_MAX_CHARS env var.
+ * Read once at module load. Set the env var before launching Bernard to override.
+ */
+exports.SUBAGENT_RESULT_MAX_CHARS = parseSubagentResultMaxChars(process.env.BERNARD_SUBAGENT_RESULT_MAX_CHARS);
+/**
+ * Caps a sub-agent or specialist result string to prevent context bloat in
+ * the parent agent. The total returned length is guaranteed to be `<= maxChars`
+ * — the truncation marker is included in the budget. When `maxChars` is
+ * smaller than the marker itself, a truncated marker is returned.
+ */
+function capSubagentResult(text, maxChars = exports.SUBAGENT_RESULT_MAX_CHARS) {
+    if (text.length <= maxChars)
+        return text;
+    const marker = `\n...[output truncated at ${maxChars} chars]`;
+    if (marker.length >= maxChars)
+        return marker.slice(0, maxChars);
+    return text.slice(0, maxChars - marker.length) + marker;
+}
+//# sourceMappingURL=result-cap.js.map

package/dist/tools/result-cap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"result-cap.js","sourceRoot":"","sources":["../../src/tools/result-cap.ts"],"names":[],"mappings":";;;AAYA,kEAKC;AAgBD,8CAQC;AAzCD;;;;GAIG;AACU,QAAA,iCAAiC,GAAG,IAAI,CAAC;AAEtD;;;;GAIG;AACH,SAAgB,2BAA2B,CAAC,GAAuB;IACjE,IAAI,CAAC,GAAG;QAAE,OAAO,yCAAiC,CAAC;IACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,yCAAiC,CAAC;IACrF,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACU,QAAA,yBAAyB,GAAG,2BAA2B,CAClE,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAC9C,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,iBAAiB,CAC/B,IAAY,EACZ,WAAmB,iCAAyB;IAE5C,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,MAAM,GAAG,6BAA6B,QAAQ,SAAS,CAAC;IAC9D,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;AAC1D,CAAC"}

package/dist/tools/routine.d.ts

@@ -14,21 +14,21 @@ export declare function createRoutineTool(routineStore?: RoutineStore): import("
     content: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     action: "list" | "read" | "delete" | "update" | "create";
-    content?: string | undefined;
     name?: string | undefined;
+    content?: string | undefined;
     id?: string | undefined;
     description?: string | undefined;
 }, {
     action: "list" | "read" | "delete" | "update" | "create";
-    content?: string | undefined;
     name?: string | undefined;
+    content?: string | undefined;
     id?: string | undefined;
     description?: string | undefined;
 }>, string> & {
     execute: (args: {
         action: "list" | "read" | "delete" | "update" | "create";
-        content?: string | undefined;
         name?: string | undefined;
+        content?: string | undefined;
         id?: string | undefined;
         description?: string | undefined;
     }, options: import("ai").ToolExecutionOptions) => PromiseLike<string>;

package/dist/tools/shell.d.ts

@@ -8,11 +8,24 @@ import type { ToolOptions, ShellResult } from './types.js';
  * @returns `true` if the command matches a dangerous pattern.
  */
 export declare function isDangerous(command: string): boolean;
+/**
+ * The agent's system prompt instructs the model to write temp scripts under
+ * this prefix and clean them up afterward, so the cleanup must not require
+ * confirmation.
+ */
+export declare const BERNARD_TMP_PREFIX: string;
+/**
+ * Commands that match a dangerous pattern but should bypass the confirmation
+ * prompt because they operate exclusively on Bernard's own workspace.
+ *
+ * @internal Exported for testing only.
+ */
+export declare function isSafelisted(command: string): boolean;
 /**
  * Creates the shell execution tool that runs commands in the user's terminal.
  *
  * Dangerous commands are intercepted and require explicit user confirmation
- * before execution.
+ * before execution, unless they match a safelist of Bernard-owned operations.
  *
  * @param options - Shell timeout and dangerous-command confirmation callback.
  */

package/dist/tools/shell.js

@@ -1,10 +1,47 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.BERNARD_TMP_PREFIX = void 0;
 exports.isDangerous = isDangerous;
+exports.isSafelisted = isSafelisted;
 exports.createShellTool = createShellTool;
 const ai_1 = require("ai");
 const zod_1 = require("zod");
 const node_child_process_1 = require("node:child_process");
+const os = __importStar(require("node:os"));
+const path = __importStar(require("node:path"));
 const DANGEROUS_PATTERNS = [
     /\brm\s+(-[^\s]*\s+)*-[^\s]*r/, // rm with -r flag
     /\brm\s+(-[^\s]*\s+)*-[^\s]*f/, // rm with -f flag
@@ -31,11 +68,56 @@ const DANGEROUS_PATTERNS = [
 function isDangerous(command) {
     return DANGEROUS_PATTERNS.some((pattern) => pattern.test(command));
 }
+// Reject commands containing these so the safelist can't be tricked into
+// composing additional shell work outside its narrow scope.
+const META_RE = /[;&|`>]|\$\(/;
+// Glob characters would let the shell expand the path past the prefix check.
+const GLOB_RE = /[*?[\]{}!]/;
+// Quotes or expansion sigils inside a token signal an attempt to inject more
+// shell work — the safelist only handles literal paths.
+const UNSAFE_TOKEN_CHARS = /['"`$\\]/;
+/**
+ * The agent's system prompt instructs the model to write temp scripts under
+ * this prefix and clean them up afterward, so the cleanup must not require
+ * confirmation.
+ */
+exports.BERNARD_TMP_PREFIX = path.join(os.tmpdir(), 'bernard-');
+/**
+ * Commands that match a dangerous pattern but should bypass the confirmation
+ * prompt because they operate exclusively on Bernard's own workspace.
+ *
+ * @internal Exported for testing only.
+ */
+function isSafelisted(command) {
+    const trimmed = command.trim();
+    if (!/^rm(\s|$)/.test(trimmed))
+        return false;
+    if (META_RE.test(trimmed))
+        return false;
+    const paths = trimmed
+        .split(/\s+/)
+        .slice(1)
+        .filter((t) => !t.startsWith('-'));
+    if (paths.length === 0)
+        return false;
+    return paths.every((t) => {
+        if (GLOB_RE.test(t))
+            return false;
+        if (UNSAFE_TOKEN_CHARS.test(t))
+            return false;
+        if (t.split('/').includes('..'))
+            return false;
+        // Resolve against cwd to catch `bernard-x/../..` traversal that would
+        // escape the tmp prefix once the shell evaluates it.
+        const resolved = path.resolve(t);
+        return resolved.startsWith(exports.BERNARD_TMP_PREFIX);
+    });
+}
 /**
  * Creates the shell execution tool that runs commands in the user's terminal.
  *
  * Dangerous commands are intercepted and require explicit user confirmation
- * before execution.
+ * before execution, unless they match a safelist of Bernard-owned operations.
  *
  * @param options - Shell timeout and dangerous-command confirmation callback.
  */
@@ -45,9 +127,9 @@ function createShellTool(options) {
         parameters: zod_1.z.object({
             command: zod_1.z.string().describe('The shell command to execute'),
         }),
-        execute: async ({ command }) => {
-            if (isDangerous(command)) {
-                const confirmed = await options.confirmDangerous(command);
+        execute: async ({ command }, execOptions) => {
+            if (isDangerous(command) && !isSafelisted(command)) {
+                const confirmed = await options.confirmDangerous(command, execOptions?.abortSignal);
                 if (!confirmed) {
                     return { output: 'Command cancelled by user.', is_error: false };
                 }

package/dist/tools/shell.js.map

@@ -1 +1 @@
-{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/tools/shell.ts"],"names":[],"mappings":";;AA6BA,kCAEC;AAUD,0CAiCC;AA1ED,2BAA0B;AAC1B,6BAAwB;AACxB,2DAA8C;AAG9C,MAAM,kBAAkB,GAAG;IACzB,8BAA8B,EAAE,kBAAkB;IAClD,8BAA8B,EAAE,kBAAkB;IAClD,UAAU;IACV,UAAU;IACV,SAAS;IACT,iBAAiB;IACjB,iBAAiB;IACjB,gBAAgB;IAChB,YAAY;IACZ,cAAc;IACd,qCAAqC;IACrC,eAAe;IACf,WAAW;IACX,aAAa;CACd,CAAC;AAEF;;;;;;GAMG;AACH,SAAgB,WAAW,CAAC,OAAe;IACzC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,eAAe,CAAC,OAAoB;IAClD,OAAO,IAAA,SAAI,EAAC;QACV,WAAW,EACT,+NAA+N;QACjO,UAAU,EAAE,OAAC,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;SAC7D,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAwB,EAAE;YACnD,IAAI,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;gBAC1D,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,EAAE,MAAM,EAAE,4BAA4B,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBACnE,CAAC;YACH,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAA,6BAAQ,EAAC,OAAO,EAAE;oBAC/B,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,OAAO,CAAC,YAAY;oBAC7B,SAAS,EAAE,IAAI,GAAG,IAAI,GAAG,EAAE,EAAE,OAAO;oBACpC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;iBAChC,CAAC,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YAC9D,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,SAAS,GAAG,GAA6D,CAAC;gBAChF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;gBACtC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;gBACtC,MAAM,MAAM,GACV,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,OAAO,IAAI,gBAAgB,CAAC;gBACvF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACpC,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/tools/shell.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,kCAEC;AA0BD,oCAoBC;AAUD,0CAiCC;AA1HD,2BAA0B;AAC1B,6BAAwB;AACxB,2DAA8C;AAC9C,4CAA8B;AAC9B,gDAAkC;AAGlC,MAAM,kBAAkB,GAAG;IACzB,8BAA8B,EAAE,kBAAkB;IAClD,8BAA8B,EAAE,kBAAkB;IAClD,UAAU;IACV,UAAU;IACV,SAAS;IACT,iBAAiB;IACjB,iBAAiB;IACjB,gBAAgB;IAChB,YAAY;IACZ,cAAc;IACd,qCAAqC;IACrC,eAAe;IACf,WAAW;IACX,aAAa;CACd,CAAC;AAEF;;;;;;GAMG;AACH,SAAgB,WAAW,CAAC,OAAe;IACzC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,yEAAyE;AACzE,4DAA4D;AAC5D,MAAM,OAAO,GAAG,cAAc,CAAC;AAE/B,6EAA6E;AAC7E,MAAM,OAAO,GAAG,YAAY,CAAC;AAE7B,6EAA6E;AAC7E,wDAAwD;AACxD,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAEtC;;;;GAIG;AACU,QAAA,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC;AAErE;;;;;GAKG;AACH,SAAgB,YAAY,CAAC,OAAe;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAExC,MAAM,KAAK,GAAG,OAAO;SAClB,KAAK,CAAC,KAAK,CAAC;SACZ,KAAK,CAAC,CAAC,CAAC;SACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAErC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QACvB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAClC,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7C,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9C,sEAAsE;QACtE,qDAAqD;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,QAAQ,CAAC,UAAU,CAAC,0BAAkB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,eAAe,CAAC,OAAoB;IAClD,OAAO,IAAA,SAAI,EAAC;QACV,WAAW,EACT,+NAA+N;QACjO,UAAU,EAAE,OAAC,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;SAC7D,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,WAAW,EAAwB,EAAE;YAChE,IAAI,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;gBACpF,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,EAAE,MAAM,EAAE,4BAA4B,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;gBACnE,CAAC;YACH,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAA,6BAAQ,EAAC,OAAO,EAAE;oBAC/B,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,OAAO,CAAC,YAAY;oBAC7B,SAAS,EAAE,IAAI,GAAG,IAAI,GAAG,EAAE,EAAE,OAAO;oBACpC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;iBAChC,CAAC,CAAC;gBACH,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YAC9D,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,MAAM,SAAS,GAAG,GAA6D,CAAC;gBAChF,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;gBACtC,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;gBACtC,MAAM,MAAM,GACV,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,OAAO,IAAI,gBAAgB,CAAC;gBACvF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACpC,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/specialist-run.d.ts

@@ -7,9 +7,11 @@ import type { SpecialistStore } from '../specialists.js';
 /**
  * Creates the specialist execution tool for running tasks through a saved specialist profile.
  *
- * Each specialist run receives its own `generateText` loop with a 10-step budget
- * and no conversation history. The specialist's system prompt and guidelines are
- * used as the persona. Shares the concurrency pool with sub-agents and tasks.
+ * Each specialist run receives its own `generateText` loop with a step budget of
+ * `ceil(config.maxSteps * SPECIALIST_STEP_RATIO)` (tripled and clamped via
+ * `computeEffectiveMaxSteps` when ReAct mode is on) and no conversation history.
+ * The specialist's system prompt and guidelines are used as the persona. Shares
+ * the concurrency pool with sub-agents and tasks.
  *
  * @param config - Bernard configuration (provider, model, token limits).
  * @param options - Shell execution options forwarded to child tool sets.