codebase-cli 2.0.0-pre.0

package/dist/tools/permission.js

@@ -0,0 +1,168 @@
+/**
+ * Read-only shell command allowlist. Direct port from
+ * permission.go:65-90 on origin/anthropic-support. Adding a prefix
+ * requires a code-review note: why is this safe?
+ *
+ * Matching rules:
+ *   - exact match against the first piped/conditional segment
+ *   - prefix-with-space match (so `git log` matches `git log --oneline`)
+ *
+ * Anything that survives the dangerous-pattern check AND matches a
+ * read-only prefix bypasses the permission gate. Everything else prompts.
+ */
+export const READ_ONLY_SHELL_PREFIXES = [
+    // Listing + viewing
+    "ls",
+    "cat",
+    "head",
+    "tail",
+    "wc",
+    "file",
+    "stat",
+    "tree",
+    "basename",
+    "dirname",
+    "realpath",
+    // Search
+    "grep",
+    "egrep",
+    "fgrep",
+    "rg",
+    "find",
+    "fd",
+    "ag",
+    "locate",
+    // Git read
+    "git status",
+    "git log",
+    "git diff",
+    "git show",
+    "git branch",
+    "git remote",
+    "git tag",
+    "git stash list",
+    "git config --get",
+    "git rev-parse",
+    "git ls-files",
+    "git blame",
+    "git describe",
+    "git shortlog",
+    "git reflog",
+    // Build / test (run the same command repeatedly is fine)
+    "go vet",
+    "go build",
+    "go test",
+    "go fmt",
+    "gofmt -l",
+    "npm test",
+    "npm run",
+    "npm ls",
+    "npm view",
+    "npm outdated",
+    "pnpm test",
+    "pnpm run",
+    "yarn test",
+    "yarn run",
+    "pytest",
+    "python -c",
+    "python3 -c",
+    "ruby -e",
+    "node -e",
+    "node --check",
+    "deno check",
+    "cargo check",
+    "cargo build",
+    "cargo test",
+    "cargo clippy",
+    "make",
+    "mvn test",
+    "gradle test",
+    // System inspection
+    "du",
+    "df",
+    "uname",
+    "whoami",
+    "pwd",
+    "env",
+    "printenv",
+    "hostname",
+    "uptime",
+    "id",
+    "groups",
+    "ps",
+    "who",
+    // Pipe-friendly text utilities
+    "jq",
+    "sort",
+    "uniq",
+    "tr",
+    "cut",
+    "awk",
+    "sed",
+    "echo",
+    "printf",
+    "date",
+    "which",
+    "type",
+    "command -v",
+    "diff",
+    "cmp",
+    "yes",
+];
+/**
+ * Patterns that always force a permission prompt, even if the leading
+ * command looks read-only. These are the "if you do this without
+ * approval and it goes wrong, the user loses data" patterns.
+ */
+export const DANGEROUS_PATTERNS = [
+    /\brm\s+-r?-?f\s+\//,
+    /\brm\s+-r?-?f\s+~/,
+    /:\s*\(\s*\)\s*\{[^}]*:\s*\|\s*:[^}]*\}\s*;/, // fork bomb
+    /\bdd\s+(?:[a-z]+=\S+\s+)*of=\/dev\//,
+    /\bmkfs(?:\.\w+)?\b/,
+    /\bshutdown\b/,
+    /\breboot\b/,
+    />\s*\/dev\/sd[a-z]/,
+    /\bchmod\s+(?:-R\s+)?(?:777|0?000)\s+\//,
+];
+/** True if the shell command should require user approval before running. */
+export function shellNeedsPermission(rawCommand) {
+    const cmd = rawCommand.trim();
+    if (!cmd)
+        return true;
+    if (DANGEROUS_PATTERNS.some((re) => re.test(cmd)))
+        return true;
+    const firstSegment = splitFirstSegment(cmd);
+    return !isReadOnlyPrefix(firstSegment);
+}
+/** True if the leading token of a chained shell expression is on the allowlist. */
+function isReadOnlyPrefix(segment) {
+    const trimmed = segment.trim();
+    for (const prefix of READ_ONLY_SHELL_PREFIXES) {
+        if (trimmed === prefix || trimmed.startsWith(`${prefix} `)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Extract the first command in a chain. Splits on shell separators while
+ * ignoring those inside single or double quotes — we don't want
+ * `echo "rm -rf /"` to be misclassified.
+ */
+function splitFirstSegment(cmd) {
+    let inSingle = false;
+    let inDouble = false;
+    for (let i = 0; i < cmd.length; i++) {
+        const ch = cmd[i];
+        if (ch === "'" && !inDouble)
+            inSingle = !inSingle;
+        else if (ch === '"' && !inSingle)
+            inDouble = !inDouble;
+        else if (!inSingle && !inDouble && (ch === "|" || ch === ";" || ch === "&")) {
+            return cmd.slice(0, i);
+        }
+    }
+    return cmd;
+}
+//# sourceMappingURL=permission.js.map

package/dist/tools/permission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission.js","sourceRoot":"","sources":["../../src/tools/permission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAsB;IAC1D,oBAAoB;IACpB,IAAI;IACJ,KAAK;IACL,MAAM;IACN,MAAM;IACN,IAAI;IACJ,MAAM;IACN,MAAM;IACN,MAAM;IACN,UAAU;IACV,SAAS;IACT,UAAU;IAEV,SAAS;IACT,MAAM;IACN,OAAO;IACP,OAAO;IACP,IAAI;IACJ,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,QAAQ;IAER,WAAW;IACX,YAAY;IACZ,SAAS;IACT,UAAU;IACV,UAAU;IACV,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,gBAAgB;IAChB,kBAAkB;IAClB,eAAe;IACf,cAAc;IACd,WAAW;IACX,cAAc;IACd,cAAc;IACd,YAAY;IAEZ,yDAAyD;IACzD,QAAQ;IACR,UAAU;IACV,SAAS;IACT,QAAQ;IACR,UAAU;IACV,UAAU;IACV,SAAS;IACT,QAAQ;IACR,UAAU;IACV,cAAc;IACd,WAAW;IACX,UAAU;IACV,WAAW;IACX,UAAU;IACV,QAAQ;IACR,WAAW;IACX,YAAY;IACZ,SAAS;IACT,SAAS;IACT,cAAc;IACd,YAAY;IACZ,aAAa;IACb,aAAa;IACb,YAAY;IACZ,cAAc;IACd,MAAM;IACN,UAAU;IACV,aAAa;IAEb,oBAAoB;IACpB,IAAI;IACJ,IAAI;IACJ,OAAO;IACP,QAAQ;IACR,KAAK;IACL,KAAK;IACL,UAAU;IACV,UAAU;IACV,QAAQ;IACR,IAAI;IACJ,QAAQ;IACR,IAAI;IACJ,KAAK;IAEL,+BAA+B;IAC/B,IAAI;IACJ,MAAM;IACN,MAAM;IACN,IAAI;IACJ,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,MAAM;IACN,YAAY;IACZ,MAAM;IACN,KAAK;IACL,KAAK;CACL,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACpD,oBAAoB;IACpB,mBAAmB;IACnB,4CAA4C,EAAE,YAAY;IAC1D,qCAAqC;IACrC,oBAAoB;IACpB,cAAc;IACd,YAAY;IACZ,oBAAoB;IACpB,wCAAwC;CACxC,CAAC;AAEF,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACtD,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/D,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;AACxC,CAAC;AAED,mFAAmF;AACnF,SAAS,gBAAgB,CAAC,OAAe;IACxC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,wBAAwB,EAAE,CAAC;QAC/C,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACrC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ;YAAE,QAAQ,GAAG,CAAC,QAAQ,CAAC;aAC7C,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,QAAQ;YAAE,QAAQ,GAAG,CAAC,QAAQ,CAAC;aAClD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC;YAC7E,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxB,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/dist/tools/plan-mode.js

@@ -0,0 +1,76 @@
+import { Type } from "typebox";
+const EnterParams = Type.Object({
+    reason: Type.Optional(Type.String({
+        description: "Why you're entering plan mode. Optional, shown in the result for the user.",
+    })),
+});
+const ENTER_DESCRIPTION = `Enter plan mode. While active, destructive tools (write_file, edit_file, multi_edit, notebook_edit, shell, git_commit, git_branch, enter_worktree, exit_worktree) will be BLOCKED at the permission gate — only read tools work.
+
+Use this when the user asks for a complex multi-step change. The flow is:
+1. enter_plan_mode (no args, optionally a reason)
+2. Investigate freely with read_file, list_files, glob, grep, etc.
+3. Produce a markdown plan as a regular assistant message.
+4. Call exit_plan_mode with the plan as the argument. The user sees the plan in the result.
+5. After exit, you have full tool access again to execute the plan.
+
+Don't enter plan mode for trivial single-step changes — the gate just adds friction there. Don't try to write files while in plan mode; the gate will block and you'll have to retry without progress.`;
+export function createEnterPlanMode(ctx) {
+    return {
+        name: "enter_plan_mode",
+        label: "Plan: enter",
+        description: ENTER_DESCRIPTION,
+        parameters: EnterParams,
+        executionMode: "sequential",
+        execute: async (_id, params) => {
+            ctx.planMode.enter();
+            const reason = params.reason?.trim() || null;
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: reason
+                            ? `Entered plan mode (${reason}). Write/edit/shell tools are blocked until exit_plan_mode.`
+                            : "Entered plan mode. Write/edit/shell tools are blocked until exit_plan_mode.",
+                    },
+                ],
+                details: { active: true, reason },
+            };
+        },
+    };
+}
+const ExitParams = Type.Object({
+    plan: Type.String({
+        minLength: 1,
+        description: "The markdown plan you've produced. The user sees this verbatim and can choose whether to continue.",
+    }),
+});
+const EXIT_DESCRIPTION = `Exit plan mode and present your plan to the user.
+
+Pass the markdown plan as 'plan'. The user sees it in the result and can either let you continue executing the plan, or interrupt with corrections. After this returns you have full tool access again.
+
+Don't exit without a plan. Don't exit if you're still investigating — keep using read tools first.`;
+export function createExitPlanMode(ctx) {
+    return {
+        name: "exit_plan_mode",
+        label: "Plan: exit",
+        description: EXIT_DESCRIPTION,
+        parameters: ExitParams,
+        executionMode: "sequential",
+        execute: async (_id, params) => {
+            ctx.planMode.exit();
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: `Exited plan mode. Plan presented:\n\n${params.plan}\n\nFull tool access restored. Execute the plan in order; stop or revise if the user pushes back.`,
+                    },
+                ],
+                details: { active: false, plan: params.plan },
+            };
+        },
+    };
+}
+export function createPlanModeTools(ctx) {
+    return [createEnterPlanMode(ctx), createExitPlanMode(ctx)];
+}
+//# sourceMappingURL=plan-mode.js.map

package/dist/tools/plan-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-mode.js","sourceRoot":"","sources":["../../src/tools/plan-mode.ts"],"names":[],"mappings":"AACA,OAAO,EAA6B,IAAI,EAAE,MAAM,SAAS,CAAC;AAG1D,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC;IAC/B,MAAM,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,MAAM,CAAC;QACX,WAAW,EAAE,4EAA4E;KACzF,CAAC,CACF;CACD,CAAC,CAAC;AASH,MAAM,iBAAiB,GAAG;;;;;;;;;uMAS6K,CAAC;AAExM,MAAM,UAAU,mBAAmB,CAAC,GAAgB;IACnD,OAAO;QACN,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,aAAa;QACpB,WAAW,EAAE,iBAAiB;QAC9B,UAAU,EAAE,WAAW;QACvB,aAAa,EAAE,YAAY;QAC3B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;YAC9B,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;YAC7C,OAAO;gBACN,OAAO,EAAE;oBACR;wBACC,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,MAAM;4BACX,CAAC,CAAC,sBAAsB,MAAM,6DAA6D;4BAC3F,CAAC,CAAC,6EAA6E;qBAChF;iBACD;gBACD,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE;aACjC,CAAC;QACH,CAAC;KACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;IAC9B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QACjB,SAAS,EAAE,CAAC;QACZ,WAAW,EAAE,oGAAoG;KACjH,CAAC;CACF,CAAC,CAAC;AASH,MAAM,gBAAgB,GAAG;;;;mGAI0E,CAAC;AAEpG,MAAM,UAAU,kBAAkB,CAAC,GAAgB;IAClD,OAAO;QACN,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,gBAAgB;QAC7B,UAAU,EAAE,UAAU;QACtB,aAAa,EAAE,YAAY;QAC3B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;YAC9B,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO;gBACN,OAAO,EAAE;oBACR;wBACC,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,wCAAwC,MAAM,CAAC,IAAI,mGAAmG;qBAC5J;iBACD;gBACD,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;aAC7C,CAAC;QACH,CAAC;KACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAgB;IACnD,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5D,CAAC"}

package/dist/tools/read-file.js

@@ -0,0 +1,135 @@
+import { readFileSync, statSync } from "node:fs";
+import { extname } from "node:path";
+import { Type } from "typebox";
+import { BinaryFileError, FileTooLargeError } from "./errors.js";
+import { detectEol, isLikelyBinary, resolveInsideCwd, stripBOM } from "./file-ops.js";
+const Params = Type.Object({
+    path: Type.String({
+        description: "File path (absolute or relative to the project root).",
+    }),
+    offset: Type.Optional(Type.Integer({
+        minimum: 1,
+        description: "1-based starting line. Defaults to 1.",
+    })),
+    limit: Type.Optional(Type.Integer({
+        minimum: 1,
+        maximum: 2000,
+        description: "Max lines to return. Defaults to 2000.",
+    })),
+});
+const DEFAULT_LIMIT = 2000;
+const MAX_FILE_BYTES = 5 * 1024 * 1024;
+const IMAGE_MIME = {
+    ".png": "image/png",
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".gif": "image/gif",
+    ".webp": "image/webp",
+    ".bmp": "image/bmp",
+};
+const DESCRIPTION = `Read the contents of a text or image file.
+
+Arguments:
+- path: file path. Absolute or relative to the project root. Symlinks are followed but resolved targets must remain inside the project root.
+- offset (optional): 1-based first line to return. Default 1.
+- limit (optional): max lines to return. Default 2000, max 2000.
+
+Behavior:
+- Text files: returned line-numbered (six-column gutter, tab, content), suitable for the model to quote back into edit_file.
+- Image files (.png, .jpg, .jpeg, .gif, .webp, .bmp): returned as a vision payload — works only with image-capable models.
+- Files > 5 MB are rejected; use shell head/tail/sed for huge files.
+- Binary text files are rejected.
+- Reading a file records a snapshot for read-before-edit. If the file changes on disk before edit_file fires, the edit is rejected with a clear error.`;
+export function createReadFile(ctx) {
+    return {
+        name: "read_file",
+        label: "Read",
+        description: DESCRIPTION,
+        parameters: Params,
+        executionMode: "parallel",
+        execute: async (_toolCallId, params) => {
+            const absPath = resolveInsideCwd(ctx.cwd, params.path);
+            let stat;
+            try {
+                stat = statSync(absPath);
+            }
+            catch (err) {
+                const reason = err instanceof Error ? err.message : String(err);
+                throw new Error(`Cannot read ${params.path}: ${reason}`);
+            }
+            if (stat.isDirectory()) {
+                throw new Error(`${params.path} is a directory; use list_files to enumerate its contents.`);
+            }
+            // Image branch
+            const ext = extname(absPath).toLowerCase();
+            const mime = IMAGE_MIME[ext];
+            if (mime) {
+                if (stat.size > MAX_FILE_BYTES) {
+                    throw new FileTooLargeError(params.path, stat.size, MAX_FILE_BYTES);
+                }
+                const data = readFileSync(absPath).toString("base64");
+                return {
+                    content: [{ type: "image", data, mimeType: mime }],
+                    details: {
+                        path: absPath,
+                        bytes: stat.size,
+                        totalLines: 0,
+                        returnedLines: 0,
+                        hasBOM: false,
+                        eol: "",
+                        isPartialView: false,
+                        isImage: true,
+                    },
+                };
+            }
+            if (stat.size > MAX_FILE_BYTES) {
+                throw new FileTooLargeError(params.path, stat.size, MAX_FILE_BYTES);
+            }
+            const raw = readFileSync(absPath);
+            if (isLikelyBinary(raw)) {
+                throw new BinaryFileError(params.path);
+            }
+            const { content, hasBOM } = stripBOM(raw);
+            const eol = detectEol(content);
+            const allLines = content.split(/\r\n|\n/);
+            // Trailing-newline files split into an extra empty trailing element; trim it for line counts.
+            const totalLines = allLines.length > 0 && allLines[allLines.length - 1] === "" ? allLines.length - 1 : allLines.length;
+            const offset = params.offset ?? 1;
+            const limit = params.limit ?? DEFAULT_LIMIT;
+            const startIdx = Math.max(0, offset - 1);
+            const endIdx = Math.min(startIdx + limit, totalLines);
+            const isPartialView = startIdx > 0 || endIdx < totalLines;
+            const slice = allLines.slice(startIdx, endIdx);
+            const formatted = slice.map((line, i) => `${pad6(startIdx + i + 1)}\t${line}`).join("\n");
+            const tail = isPartialView ? `\n... (showing lines ${startIdx + 1}-${endIdx} of ${totalLines})` : "";
+            ctx.fileStateCache.record({
+                path: absPath,
+                content,
+                mtimeMs: stat.mtimeMs,
+                size: stat.size,
+                hasBOM,
+                eol,
+                isPartialView,
+                range: isPartialView ? { startLine: startIdx + 1, endLine: endIdx } : undefined,
+                storedAt: Date.now(),
+            });
+            return {
+                content: [{ type: "text", text: formatted + tail }],
+                details: {
+                    path: absPath,
+                    bytes: stat.size,
+                    totalLines,
+                    returnedLines: slice.length,
+                    hasBOM,
+                    eol,
+                    isPartialView,
+                    isImage: false,
+                },
+            };
+        },
+    };
+}
+function pad6(n) {
+    return String(n).padStart(6, " ");
+}
+//# sourceMappingURL=read-file.js.map

package/dist/tools/read-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-file.js","sourceRoot":"","sources":["../../src/tools/read-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAe,IAAI,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAGtF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QACjB,WAAW,EAAE,uDAAuD;KACpE,CAAC;IACF,MAAM,EAAE,IAAI,CAAC,QAAQ,CACpB,IAAI,CAAC,OAAO,CAAC;QACZ,OAAO,EAAE,CAAC;QACV,WAAW,EAAE,uCAAuC;KACpD,CAAC,CACF;IACD,KAAK,EAAE,IAAI,CAAC,QAAQ,CACnB,IAAI,CAAC,OAAO,CAAC;QACZ,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,wCAAwC;KACrD,CAAC,CACF;CACD,CAAC,CAAC;AAeH,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACvC,MAAM,UAAU,GAA2B;IAC1C,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;CACnB,CAAC;AAEF,MAAM,WAAW,GAAG;;;;;;;;;;;;uJAYmI,CAAC;AAExJ,MAAM,UAAU,cAAc,CAAC,GAAgB;IAC9C,OAAO;QACN,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,MAAM;QACb,WAAW,EAAE,WAAW;QACxB,UAAU,EAAE,MAAM;QAClB,aAAa,EAAE,UAAU;QACzB,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAEvD,IAAI,IAAiC,CAAC;YACtC,IAAI,CAAC;gBACJ,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChE,MAAM,IAAI,KAAK,CAAC,eAAe,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,IAAI,4DAA4D,CAAC,CAAC;YAC7F,CAAC;YAED,eAAe;YACf,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,IAAI,EAAE,CAAC;gBACV,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;oBAChC,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;gBACrE,CAAC;gBACD,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACtD,OAAO;oBACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;oBAClD,OAAO,EAAE;wBACR,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,IAAI,CAAC,IAAI;wBAChB,UAAU,EAAE,CAAC;wBACb,aAAa,EAAE,CAAC;wBAChB,MAAM,EAAE,KAAK;wBACb,GAAG,EAAE,EAAE;wBACP,aAAa,EAAE,KAAK;wBACpB,OAAO,EAAE,IAAI;qBACb;iBACD,CAAC;YACH,CAAC;YAED,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;gBAChC,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;YAED,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC1C,8FAA8F;YAC9F,MAAM,UAAU,GACf,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAErG,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;YAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,aAAa,CAAC;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,KAAK,EAAE,UAAU,CAAC,CAAC;YACtD,MAAM,aAAa,GAAG,QAAQ,GAAG,CAAC,IAAI,MAAM,GAAG,UAAU,CAAC;YAE1D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1F,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,wBAAwB,QAAQ,GAAG,CAAC,IAAI,MAAM,OAAO,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAErG,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC;gBACzB,IAAI,EAAE,OAAO;gBACb,OAAO;gBACP,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM;gBACN,GAAG;gBACH,aAAa;gBACb,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS;gBAC/E,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;aACpB,CAAC,CAAC;YAEH,OAAO;gBACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,IAAI,EAAE,CAAC;gBACnD,OAAO,EAAE;oBACR,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,IAAI,CAAC,IAAI;oBAChB,UAAU;oBACV,aAAa,EAAE,KAAK,CAAC,MAAM;oBAC3B,MAAM;oBACN,GAAG;oBACH,aAAa;oBACb,OAAO,EAAE,KAAK;iBACd;aACD,CAAC;QACH,CAAC;KACD,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,CAAS;IACtB,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC"}

package/dist/tools/registry.js

@@ -0,0 +1,52 @@
+import { createAskUser } from "./ask-user.js";
+import { createDispatchAgent } from "./dispatch-agent.js";
+import { createEditFile } from "./edit-file.js";
+import { createGitBranch } from "./git/branch.js";
+import { createGitCommit } from "./git/commit.js";
+import { createGitDiff } from "./git/diff.js";
+import { createGitLog } from "./git/log.js";
+import { createGitStatus } from "./git/status.js";
+import { createEnterWorktree, createExitWorktree } from "./git/worktree.js";
+import { createGlob } from "./glob.js";
+import { createGrep } from "./grep.js";
+import { createListFiles } from "./list-files.js";
+import { createMultiEdit } from "./multi-edit.js";
+import { createNotebookEdit } from "./notebook-edit.js";
+import { createPlanModeTools } from "./plan-mode.js";
+import { createReadFile } from "./read-file.js";
+import { createShell } from "./shell.js";
+import { createTaskTools } from "./tasks.js";
+import { createWebFetch } from "./web-fetch.js";
+import { createWebSearch } from "./web-search.js";
+import { createWriteFile } from "./write-file.js";
+/**
+ * Returns every built-in tool, configured against the given context.
+ * Phase 2 commits append factories to this list one by one.
+ */
+export function buildTools(ctx) {
+    return [
+        createReadFile(ctx),
+        createEditFile(ctx),
+        createMultiEdit(ctx),
+        createNotebookEdit(ctx),
+        createWriteFile(ctx),
+        createShell(ctx),
+        createListFiles(ctx),
+        createGlob(ctx),
+        createGrep(ctx),
+        createGitStatus(ctx),
+        createGitDiff(ctx),
+        createGitLog(ctx),
+        createGitCommit(ctx),
+        createGitBranch(ctx),
+        createEnterWorktree(ctx),
+        createExitWorktree(ctx),
+        createAskUser(ctx),
+        ...createPlanModeTools(ctx),
+        createWebFetch(ctx),
+        createWebSearch(ctx),
+        createDispatchAgent(ctx),
+        ...createTaskTools(ctx),
+    ];
+}
+//# sourceMappingURL=registry.js.map

package/dist/tools/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/tools/registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,GAAgB;IAC1C,OAAO;QACN,cAAc,CAAC,GAAG,CAAC;QACnB,cAAc,CAAC,GAAG,CAAC;QACnB,eAAe,CAAC,GAAG,CAAC;QACpB,kBAAkB,CAAC,GAAG,CAAC;QACvB,eAAe,CAAC,GAAG,CAAC;QACpB,WAAW,CAAC,GAAG,CAAC;QAChB,eAAe,CAAC,GAAG,CAAC;QACpB,UAAU,CAAC,GAAG,CAAC;QACf,UAAU,CAAC,GAAG,CAAC;QACf,eAAe,CAAC,GAAG,CAAC;QACpB,aAAa,CAAC,GAAG,CAAC;QAClB,YAAY,CAAC,GAAG,CAAC;QACjB,eAAe,CAAC,GAAG,CAAC;QACpB,eAAe,CAAC,GAAG,CAAC;QACpB,mBAAmB,CAAC,GAAG,CAAC;QACxB,kBAAkB,CAAC,GAAG,CAAC;QACvB,aAAa,CAAC,GAAG,CAAC;QAClB,GAAG,mBAAmB,CAAC,GAAG,CAAC;QAC3B,cAAc,CAAC,GAAG,CAAC;QACnB,eAAe,CAAC,GAAG,CAAC;QACpB,mBAAmB,CAAC,GAAG,CAAC;QACxB,GAAG,eAAe,CAAC,GAAG,CAAC;KACvB,CAAC;AACH,CAAC"}

package/dist/tools/shell.js

@@ -0,0 +1,216 @@
+import { spawn } from "node:child_process";
+import { randomBytes } from "node:crypto";
+import { writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join, resolve } from "node:path";
+import { Type } from "typebox";
+import { TimeoutError } from "./errors.js";
+const Params = Type.Object({
+    command: Type.String({
+        description: "Shell command to run via /bin/sh -c (Unix) or cmd.exe /c (Windows). Pipes and redirection allowed.",
+    }),
+    cwd: Type.Optional(Type.String({
+        description: "Working directory, relative to the project root. Defaults to the project root. Must remain inside the project root.",
+    })),
+    timeout_ms: Type.Optional(Type.Integer({
+        minimum: 100,
+        maximum: 600_000,
+        description: "Kill the command after this many ms. Default 30000. Max 600000 (10 min).",
+    })),
+});
+const DEFAULT_TIMEOUT_MS = 30_000;
+const VISIBLE_CAP_BYTES = 30_000;
+const HEAD_RATIO = 0.6;
+const DESCRIPTION = `Run a shell command. Output is streamed back as it arrives so long-running commands surface progress immediately.
+
+Behavior:
+- Runs through the platform shell (sh -c on Unix, cmd /c on Windows) so pipes and redirection work.
+- Output is captured combined (stdout + stderr in source order). Up to ~30 KB is shown to you; anything beyond is written to a temp file whose path is reported in the result so you can read selectively.
+- Default timeout is 30 seconds; raise via timeout_ms (max 10 minutes). On timeout you'll see "command timed out".
+- The cwd defaults to the project root. Set cwd if the command needs to run elsewhere within the project.
+- Aborting the agent (Ctrl-C) propagates to the running command via SIGTERM.
+
+Permission gating: write/destructive shell commands are gated by a hook before reaching this tool. Read-only commands (ls, cat, grep, rg, git log, npm test, etc.) bypass the gate.`;
+export function createShell(ctx) {
+    return {
+        name: "shell",
+        label: "Shell",
+        description: DESCRIPTION,
+        parameters: Params,
+        executionMode: "sequential",
+        execute: async (toolCallId, params, signal, onUpdate) => {
+            const cwd = resolveSubCwd(ctx.cwd, params.cwd);
+            const timeoutMs = params.timeout_ms ?? DEFAULT_TIMEOUT_MS;
+            const startedAt = Date.now();
+            const acc = new OutputAccumulator();
+            let timedOut = false;
+            let aborted = false;
+            let updateTimer;
+            let lastUpdateAt = 0;
+            const child = spawn(params.command, {
+                shell: true,
+                cwd,
+                env: process.env,
+                stdio: ["ignore", "pipe", "pipe"],
+                detached: process.platform !== "win32",
+            });
+            const flushUpdate = () => {
+                if (!onUpdate)
+                    return;
+                const now = Date.now();
+                if (now - lastUpdateAt < 100)
+                    return;
+                lastUpdateAt = now;
+                const visible = acc.visible(VISIBLE_CAP_BYTES);
+                onUpdate(buildPartial(params.command, visible.text, acc.size()));
+            };
+            const stop = (kind) => {
+                if (kind === "timeout")
+                    timedOut = true;
+                if (kind === "abort")
+                    aborted = true;
+                killProcess(child);
+            };
+            child.stdout?.on("data", (chunk) => {
+                acc.add(chunk);
+                scheduleUpdate();
+            });
+            child.stderr?.on("data", (chunk) => {
+                acc.add(chunk);
+                scheduleUpdate();
+            });
+            function scheduleUpdate() {
+                if (!onUpdate || updateTimer)
+                    return;
+                updateTimer = setTimeout(() => {
+                    updateTimer = undefined;
+                    flushUpdate();
+                }, 100);
+            }
+            const abortHandler = () => stop("abort");
+            signal?.addEventListener("abort", abortHandler);
+            const timeoutTimer = setTimeout(() => stop("timeout"), timeoutMs);
+            const exit = await new Promise((resolveExit) => {
+                child.on("error", (err) => {
+                    acc.add(Buffer.from(`\n[shell error: ${err.message}]\n`, "utf8"));
+                    resolveExit({ code: 1, signal: null });
+                });
+                child.on("close", (code, sig) => resolveExit({ code, signal: sig }));
+            });
+            signal?.removeEventListener("abort", abortHandler);
+            clearTimeout(timeoutTimer);
+            if (updateTimer)
+                clearTimeout(updateTimer);
+            const durationMs = Date.now() - startedAt;
+            const visible = acc.visible(VISIBLE_CAP_BYTES);
+            const spillPath = visible.truncated ? spillToFile(toolCallId, acc.full()) : null;
+            if (timedOut) {
+                throw new TimeoutError(Math.round(timeoutMs / 1000), "shell");
+            }
+            const summary = formatSummary(visible.text, exit, durationMs, acc.size(), spillPath, aborted);
+            return {
+                content: [{ type: "text", text: summary }],
+                details: {
+                    command: params.command,
+                    exitCode: exit.code,
+                    signal: exit.signal,
+                    durationMs,
+                    bytesTotal: acc.size(),
+                    truncated: visible.truncated,
+                    spillPath,
+                    timedOut,
+                    aborted,
+                },
+            };
+        },
+    };
+}
+function resolveSubCwd(projectCwd, requested) {
+    if (!requested)
+        return resolve(projectCwd);
+    const abs = resolve(projectCwd, requested);
+    if (abs !== resolve(projectCwd) && !abs.startsWith(`${resolve(projectCwd)}/`)) {
+        throw new Error(`cwd ${requested} is outside the project root.`);
+    }
+    return abs;
+}
+function killProcess(child) {
+    if (!child.pid)
+        return;
+    try {
+        if (process.platform !== "win32") {
+            // Negative pid kills the entire process group spawned via detached:true.
+            process.kill(-child.pid, "SIGTERM");
+        }
+        else {
+            child.kill("SIGTERM");
+        }
+    }
+    catch {
+        // already exited
+    }
+}
+function spillToFile(toolCallId, full) {
+    const safeId = toolCallId.replace(/[^A-Za-z0-9_-]/g, "_").slice(0, 32) || randomBytes(4).toString("hex");
+    const path = join(tmpdir(), `codebase-shell-${safeId}-${Date.now()}.log`);
+    writeFileSync(path, full);
+    return path;
+}
+function formatSummary(visible, exit, durationMs, bytesTotal, spillPath, aborted) {
+    const lines = [];
+    lines.push(visible);
+    lines.push("");
+    const exitLabel = aborted ? "aborted" : exit.signal ? `killed by ${exit.signal}` : `exit ${exit.code ?? "?"}`;
+    lines.push(`[${exitLabel} in ${durationMs}ms; ${bytesTotal} bytes total]`);
+    if (spillPath) {
+        lines.push(`[full output spilled to ${spillPath}]`);
+    }
+    return lines.join("\n");
+}
+function buildPartial(command, visible, bytesTotal) {
+    return {
+        content: [{ type: "text", text: visible }],
+        details: {
+            command,
+            exitCode: null,
+            signal: null,
+            durationMs: 0,
+            bytesTotal,
+            truncated: false,
+            spillPath: null,
+            timedOut: false,
+            aborted: false,
+        },
+    };
+}
+/**
+ * Buffers stdout/stderr chunks. Tracks total bytes so we can decide when to
+ * spill, and produces a head+tail visible slice when over budget.
+ */
+export class OutputAccumulator {
+    chunks = [];
+    totalBytes = 0;
+    add(chunk) {
+        this.chunks.push(chunk);
+        this.totalBytes += chunk.length;
+    }
+    size() {
+        return this.totalBytes;
+    }
+    full() {
+        return Buffer.concat(this.chunks);
+    }
+    visible(cap) {
+        const all = this.full();
+        if (all.length <= cap) {
+            return { text: all.toString("utf8"), truncated: false };
+        }
+        const headSize = Math.floor(cap * HEAD_RATIO);
+        const noticeStart = `\n…[${all.length - cap} bytes truncated]…\n`;
+        const tailSize = cap - headSize - Buffer.byteLength(noticeStart, "utf8");
+        const head = all.subarray(0, headSize).toString("utf8");
+        const tail = tailSize > 0 ? all.subarray(all.length - tailSize).toString("utf8") : "";
+        return { text: head + noticeStart + tail, truncated: true };
+    }
+}
+//# sourceMappingURL=shell.js.map