duocode 0.1.0

package/dist/tools/executor.js

@@ -0,0 +1,340 @@
+/**
+ * Tool execution engine.
+ * Receives a ToolCall from a model, executes it against the local filesystem
+ * or shell, and returns a ToolResult.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { execSync } from "node:child_process";
+import { resolvePermission } from "./permissions.js";
+// ── Path safety ──────────────────────────────────────────────────
+function safePath(projectRoot, inputPath) {
+    const resolved = path.isAbsolute(inputPath)
+        ? path.resolve(inputPath)
+        : path.resolve(projectRoot, inputPath);
+    return path.normalize(resolved);
+}
+function safeWritePath(projectRoot, inputPath) {
+    const resolved = safePath(projectRoot, inputPath);
+    if (!resolved.startsWith(projectRoot)) {
+        throw new Error(`Write outside project root blocked: ${inputPath}`);
+    }
+    return resolved;
+}
+// ── Classification ───────────────────────────────────────────────
+function toToolAction(call) {
+    const categoryMap = {
+        read_file: "read",
+        list_directory: "read",
+        search_files: "search",
+        write_file: "write",
+        edit_file: "write",
+        run_command: "execute",
+    };
+    return {
+        tool: call.name,
+        category: categoryMap[call.name] ?? "read",
+        summary: buildSummary(call),
+        input: call.input,
+    };
+}
+function buildSummary(call) {
+    switch (call.name) {
+        case "read_file":
+            return `Read ${call.input.path}`;
+        case "write_file":
+            return `Write ${call.input.path}`;
+        case "edit_file":
+            return `Edit ${call.input.path}`;
+        case "list_directory":
+            return `List ${call.input.path}`;
+        case "search_files":
+            return `Search for "${call.input.pattern}" in ${call.input.path}`;
+        case "run_command":
+            return `Run: ${String(call.input.command).slice(0, 80)}`;
+        default:
+            return call.name;
+    }
+}
+// ── Individual tool handlers ─────────────────────────────────────
+function executeReadFile(ctx, input) {
+    const filePath = safePath(ctx.projectRoot, String(input.path));
+    if (!fs.existsSync(filePath)) {
+        return `Error: File not found: ${filePath}`;
+    }
+    const stat = fs.statSync(filePath);
+    if (stat.isDirectory()) {
+        return `Error: ${filePath} is a directory. Use list_directory instead.`;
+    }
+    const maxBytes = ctx.maxFileReadBytes ?? 256 * 1024;
+    if (stat.size > maxBytes) {
+        return `Error: File too large (${stat.size} bytes). Use offset/limit.`;
+    }
+    const content = fs.readFileSync(filePath, "utf-8");
+    const lines = content.split("\n");
+    const offset = Math.max(1, Number(input.offset) || 1);
+    const limit = Number(input.limit) || lines.length;
+    const slice = lines.slice(offset - 1, offset - 1 + limit);
+    return slice
+        .map((line, i) => `${String(offset + i).padStart(5)} ${line}`)
+        .join("\n");
+}
+function executeWriteFile(ctx, input) {
+    const filePath = safeWritePath(ctx.projectRoot, String(input.path));
+    const content = String(input.content);
+    const existed = fs.existsSync(filePath);
+    const oldContent = existed ? fs.readFileSync(filePath, "utf-8") : null;
+    const dir = path.dirname(filePath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    fs.writeFileSync(filePath, content, "utf-8");
+    ctx.fileChanges.push({
+        filePath: path.relative(ctx.projectRoot, filePath),
+        type: existed ? "edit" : "create",
+        oldContent,
+        newContent: content,
+    });
+    const lineCount = content.split("\n").length;
+    const relPath = path.relative(ctx.projectRoot, filePath);
+    return existed
+        ? `Updated ${relPath} (${lineCount} lines)`
+        : `Created ${relPath} (${lineCount} lines)`;
+}
+function executeEditFile(ctx, input) {
+    const filePath = safeWritePath(ctx.projectRoot, String(input.path));
+    if (!fs.existsSync(filePath)) {
+        return `Error: File not found: ${filePath}`;
+    }
+    const oldContent = fs.readFileSync(filePath, "utf-8");
+    const oldString = String(input.old_string);
+    const newString = String(input.new_string);
+    const occurrences = oldContent.split(oldString).length - 1;
+    if (occurrences === 0) {
+        return (`Error: old_string not found in ` +
+            `${path.relative(ctx.projectRoot, filePath)}. ` +
+            `Verify the exact text including whitespace.`);
+    }
+    if (occurrences > 1) {
+        return (`Error: old_string found ${occurrences} times in ` +
+            `${path.relative(ctx.projectRoot, filePath)}. ` +
+            `Provide more surrounding context to make it unique.`);
+    }
+    const newContent = oldContent.replace(oldString, newString);
+    fs.writeFileSync(filePath, newContent, "utf-8");
+    ctx.fileChanges.push({
+        filePath: path.relative(ctx.projectRoot, filePath),
+        type: "edit",
+        oldContent,
+        newContent,
+        editDescription: `Replaced ${oldString.split("\n").length} line(s)`,
+    });
+    return `Edited ${path.relative(ctx.projectRoot, filePath)}`;
+}
+function executeListDirectory(ctx, input) {
+    const dirPath = safePath(ctx.projectRoot, String(input.path));
+    if (!fs.existsSync(dirPath)) {
+        return `Error: Directory not found: ${dirPath}`;
+    }
+    if (!fs.statSync(dirPath).isDirectory()) {
+        return `Error: ${dirPath} is a file, not a directory.`;
+    }
+    const recursive = Boolean(input.recursive);
+    const maxDepth = recursive ? 3 : 1;
+    const entries = [];
+    const skip = new Set([
+        "node_modules", ".git", "dist", ".next", "__pycache__", ".venv",
+    ]);
+    function walk(dir, depth, prefix) {
+        if (depth > maxDepth || entries.length >= 500)
+            return;
+        let items;
+        try {
+            items = fs.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const item of items.sort((a, b) => a.name.localeCompare(b.name))) {
+            if (skip.has(item.name) && depth > 0)
+                continue;
+            const isDir = item.isDirectory();
+            entries.push(`${prefix}${item.name}${isDir ? "/" : ""}`);
+            if (isDir && depth < maxDepth) {
+                walk(path.join(dir, item.name), depth + 1, prefix + "  ");
+            }
+        }
+    }
+    walk(dirPath, 0, "");
+    if (entries.length >= 500)
+        entries.push("... (truncated at 500 entries)");
+    return entries.join("\n") || "(empty directory)";
+}
+function executeSearchFiles(ctx, input) {
+    const dirPath = safePath(ctx.projectRoot, String(input.path));
+    const patternStr = String(input.pattern);
+    const glob = input.glob ? String(input.glob) : undefined;
+    if (!fs.existsSync(dirPath)) {
+        return `Error: Directory not found: ${dirPath}`;
+    }
+    let regex;
+    try {
+        regex = new RegExp(patternStr, "gi");
+    }
+    catch {
+        return `Error: Invalid regex: ${patternStr}`;
+    }
+    const results = [];
+    const maxResults = 50;
+    const binaryExts = new Set([
+        ".png", ".jpg", ".gif", ".ico", ".woff", ".woff2",
+        ".ttf", ".eot", ".zip", ".tar", ".gz", ".db", ".sqlite",
+    ]);
+    const skip = new Set([
+        "node_modules", ".git", "dist", ".next", "__pycache__", ".venv",
+    ]);
+    function matchGlob(filename, pattern) {
+        const ext = pattern.replace("*", "");
+        return filename.endsWith(ext);
+    }
+    function search(dir, depth) {
+        if (depth > 5 || results.length >= maxResults)
+            return;
+        let items;
+        try {
+            items = fs.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const item of items) {
+            if (skip.has(item.name))
+                continue;
+            const fullPath = path.join(dir, item.name);
+            if (item.isDirectory()) {
+                search(fullPath, depth + 1);
+                continue;
+            }
+            if (glob && !matchGlob(item.name, glob))
+                continue;
+            if (binaryExts.has(path.extname(item.name).toLowerCase()))
+                continue;
+            try {
+                const stat = fs.statSync(fullPath);
+                if (stat.size > 512 * 1024)
+                    continue;
+                const content = fs.readFileSync(fullPath, "utf-8");
+                const lines = content.split("\n");
+                for (let i = 0; i < lines.length; i++) {
+                    regex.lastIndex = 0;
+                    if (regex.test(lines[i])) {
+                        const relPath = path.relative(ctx.projectRoot, fullPath);
+                        results.push(`${relPath}:${i + 1}: ${lines[i].trim()}`);
+                        if (results.length >= maxResults)
+                            return;
+                    }
+                }
+            }
+            catch {
+                /* skip unreadable files */
+            }
+        }
+    }
+    search(dirPath, 0);
+    if (results.length === 0) {
+        const rel = path.relative(ctx.projectRoot, dirPath) || ".";
+        return `No matches found for "${patternStr}" in ${rel}`;
+    }
+    let output = results.join("\n");
+    if (results.length >= maxResults) {
+        output += `\n... (truncated at ${maxResults} results)`;
+    }
+    return output;
+}
+function executeRunCommand(ctx, input) {
+    const command = String(input.command);
+    const cwd = input.cwd
+        ? safePath(ctx.projectRoot, String(input.cwd))
+        : ctx.projectRoot;
+    const timeoutMs = Math.min(Number(input.timeout) || 30000, 120000);
+    const maxOutput = ctx.maxCommandOutputBytes ?? 64 * 1024;
+    try {
+        const output = execSync(command, {
+            cwd,
+            timeout: timeoutMs,
+            maxBuffer: maxOutput,
+            encoding: "utf-8",
+            stdio: ["pipe", "pipe", "pipe"],
+            env: { ...process.env, FORCE_COLOR: "0" },
+        });
+        return output || "(no output)";
+    }
+    catch (error) {
+        const exec = error;
+        if (exec.killed)
+            return `Command timed out after ${timeoutMs}ms`;
+        const parts = [];
+        if (exec.status !== undefined)
+            parts.push(`Exit code: ${exec.status}`);
+        if (exec.stdout)
+            parts.push(`stdout:\n${exec.stdout}`);
+        if (exec.stderr)
+            parts.push(`stderr:\n${exec.stderr}`);
+        return parts.length > 0
+            ? parts.join("\n")
+            : `Error: ${error instanceof Error ? error.message : String(error)}`;
+    }
+}
+// ── Main dispatcher ──────────────────────────────────────────────
+const HANDLERS = {
+    read_file: executeReadFile,
+    write_file: executeWriteFile,
+    edit_file: executeEditFile,
+    list_directory: executeListDirectory,
+    search_files: executeSearchFiles,
+    run_command: executeRunCommand,
+};
+export async function executeTool(ctx, call) {
+    const start = Date.now();
+    const action = toToolAction(call);
+    const allowed = await resolvePermission(action, ctx.permissions);
+    if (!allowed) {
+        return {
+            tool: call.name,
+            success: false,
+            output: `Permission denied: ${action.summary}`,
+            durationMs: Date.now() - start,
+            requiredApproval: true,
+        };
+    }
+    const handler = HANDLERS[call.name];
+    if (!handler) {
+        return {
+            tool: call.name,
+            success: false,
+            output: `Unknown tool: ${call.name}`,
+            durationMs: Date.now() - start,
+            requiredApproval: false,
+        };
+    }
+    try {
+        const output = handler(ctx, call.input);
+        return {
+            tool: call.name,
+            success: !output.startsWith("Error:"),
+            output,
+            durationMs: Date.now() - start,
+            requiredApproval: action.category === "write" || action.category === "execute",
+        };
+    }
+    catch (error) {
+        return {
+            tool: call.name,
+            success: false,
+            output: `Error: ${error instanceof Error ? error.message : String(error)}`,
+            durationMs: Date.now() - start,
+            requiredApproval: false,
+        };
+    }
+}
+//# sourceMappingURL=executor.js.map

package/dist/tools/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/tools/executor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAI9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAarD,oEAAoE;AAEpE,SAAS,QAAQ,CAAC,WAAmB,EAAE,SAAiB;IACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QACzC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACzB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IACzC,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,WAAmB,EAAE,SAAiB;IAC3D,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,uCAAuC,SAAS,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oEAAoE;AAEpE,SAAS,YAAY,CAAC,IAAc;IAClC,MAAM,WAAW,GAA2C;QAC1D,SAAS,EAAE,MAAM;QACjB,cAAc,EAAE,MAAM;QACtB,YAAY,EAAE,QAAQ;QACtB,UAAU,EAAE,OAAO;QACnB,SAAS,EAAE,OAAO;QAClB,WAAW,EAAE,SAAS;KACvB,CAAC;IACF,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM;QAC1C,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAc;IAClC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,WAAW;YACd,OAAO,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACnC,KAAK,YAAY;YACf,OAAO,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACpC,KAAK,WAAW;YACd,OAAO,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACnC,KAAK,gBAAgB;YACnB,OAAO,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACnC,KAAK,cAAc;YACjB,OAAO,eAAe,IAAI,CAAC,KAAK,CAAC,OAAO,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACpE,KAAK,aAAa;YAChB,OAAO,QAAQ,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC3D;YACE,OAAO,IAAI,CAAC,IAAI,CAAC;IACrB,CAAC;AACH,CAAC;AAED,oEAAoE;AAEpE,SAAS,eAAe,CACtB,GAAoB,EACpB,KAA8B;IAE9B,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAE/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,0BAA0B,QAAQ,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACvB,OAAO,UAAU,QAAQ,8CAA8C,CAAC;IAC1E,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,gBAAgB,IAAI,GAAG,GAAG,IAAI,CAAC;IACpD,IAAI,IAAI,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC;QACzB,OAAO,0BAA0B,IAAI,CAAC,IAAI,4BAA4B,CAAC;IACzE,CAAC;IAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAE1D,OAAO,KAAK;SACT,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;SAC7D,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CACvB,GAAoB,EACpB,KAA8B;IAE9B,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEvE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAE7C,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC;QAClD,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;QACjC,UAAU;QACV,UAAU,EAAE,OAAO;KACpB,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACzD,OAAO,OAAO;QACZ,CAAC,CAAC,WAAW,OAAO,KAAK,SAAS,SAAS;QAC3C,CAAC,CAAC,WAAW,OAAO,KAAK,SAAS,SAAS,CAAC;AAChD,CAAC;AAED,SAAS,eAAe,CACtB,GAAoB,EACpB,KAA8B;IAE9B,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAEpE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,0BAA0B,QAAQ,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAE3D,IAAI,WAAW,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CACL,iCAAiC;YACjC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI;YAC/C,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,CACL,2BAA2B,WAAW,YAAY;YAClD,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI;YAC/C,qDAAqD,CACtD,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC5D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAEhD,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC;QAClD,IAAI,EAAE,MAAM;QACZ,UAAU;QACV,UAAU;QACV,eAAe,EAAE,YAAY,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,UAAU;KACpE,CAAC,CAAC;IAEH,OAAO,UAAU,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,SAAS,oBAAoB,CAC3B,GAAoB,EACpB,KAA8B;IAE9B,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAE9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,+BAA+B,OAAO,EAAE,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACxC,OAAO,UAAU,OAAO,8BAA8B,CAAC;IACzD,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC;QACnB,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO;KAChE,CAAC,CAAC;IAEH,SAAS,IAAI,CAAC,GAAW,EAAE,KAAa,EAAE,MAAc;QACtD,IAAI,KAAK,GAAG,QAAQ,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO;QAEtD,IAAI,KAAkB,CAAC;QACvB,IAAI,CAAC;YACH,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACtE,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC;gBAAE,SAAS;YAE/C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAEzD,IAAI,KAAK,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;gBAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAErB,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAC1E,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC;AACnD,CAAC;AAED,SAAS,kBAAkB,CACzB,GAAoB,EACpB,KAA8B;IAE9B,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEzD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,+BAA+B,OAAO,EAAE,CAAC;IAClD,CAAC;IAED,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,yBAAyB,UAAU,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAG,EAAE,CAAC;IACtB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;QACzB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ;QACjD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS;KACxD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC;QACnB,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO;KAChE,CAAC,CAAC;IAEH,SAAS,SAAS,CAAC,QAAgB,EAAE,OAAe;QAClD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,SAAS,MAAM,CAAC,GAAW,EAAE,KAAa;QACxC,IAAI,KAAK,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,IAAI,UAAU;YAAE,OAAO;QAEtD,IAAI,KAAkB,CAAC;QACvB,IAAI,CAAC;YACH,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAE3C,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,MAAM,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC5B,SAAS;YACX,CAAC;YAED,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;gBAAE,SAAS;YAClD,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBAAE,SAAS;YAEpE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,IAAI,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI;oBAAE,SAAS;gBAErC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACtC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;oBACpB,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBACzB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;wBACzD,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;wBACxD,IAAI,OAAO,CAAC,MAAM,IAAI,UAAU;4BAAE,OAAO;oBAC3C,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAEnB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC;QAC3D,OAAO,yBAAyB,UAAU,QAAQ,GAAG,EAAE,CAAC;IAC1D,CAAC;IAED,IAAI,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,OAAO,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;QACjC,MAAM,IAAI,uBAAuB,UAAU,WAAW,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CACxB,GAAoB,EACpB,KAA8B;IAE9B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG;QACnB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;IACpB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAM,EAAE,MAAO,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,GAAG,CAAC,qBAAqB,IAAI,EAAE,GAAG,IAAI,CAAC;IAEzD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE;YAC/B,GAAG;YACH,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,SAAS;YACpB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE;SAC1C,CAAC,CAAC;QACH,OAAO,MAAM,IAAI,aAAa,CAAC;IACjC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAKZ,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,2BAA2B,SAAS,IAAI,CAAC;QAEjE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACvE,IAAI,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC;YACrB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YAClB,CAAC,CAAC,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACzE,CAAC;AACH,CAAC;AAED,oEAAoE;AAEpE,MAAM,QAAQ,GAGV;IACF,SAAS,EAAE,eAAe;IAC1B,UAAU,EAAE,gBAAgB;IAC5B,SAAS,EAAE,eAAe;IAC1B,cAAc,EAAE,oBAAoB;IACpC,YAAY,EAAE,kBAAkB;IAChC,WAAW,EAAE,iBAAiB;CAC/B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAoB,EACpB,IAAc;IAEd,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,sBAAsB,MAAM,CAAC,OAAO,EAAE;YAC9C,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC9B,gBAAgB,EAAE,IAAI;SACvB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,iBAAiB,IAAI,CAAC,IAAI,EAAE;YACpC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC9B,gBAAgB,EAAE,KAAK;SACxB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;YACrC,MAAM;YACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC9B,gBAAgB,EACd,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;SAC/D,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;YAC1E,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;YAC9B,gBAAgB,EAAE,KAAK;SACxB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/tools/permissions.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Permission model for tool execution.
+ * Controls which tools can run automatically vs requiring user confirmation.
+ */
+import type { ToolAction } from "./tool_types.js";
+export type PermissionLevel = "auto" | "confirm-writes" | "confirm-all" | "read-only";
+export type ConfirmToolCallback = (action: ToolAction) => Promise<boolean>;
+export interface PermissionConfig {
+    level: PermissionLevel;
+    confirmCallback?: ConfirmToolCallback;
+    /** Regex patterns for commands that are always allowed */
+    allowedCommandPatterns?: string[];
+    /** Regex patterns for commands that are always denied */
+    deniedCommandPatterns?: string[];
+}
+export declare function checkPermission(action: ToolAction, config: PermissionConfig): "allow" | "deny" | "confirm";
+export declare function resolvePermission(action: ToolAction, config: PermissionConfig): Promise<boolean>;

package/dist/tools/permissions.js

@@ -0,0 +1,139 @@
+/** Binaries that are always denied regardless of arguments. */
+const BLOCKED_BINARIES = new Set([
+    "mkfs", "mkfs.ext4", "mkfs.xfs", "mkfs.btrfs",
+    "fdisk", "parted", "wipefs",
+    "shutdown", "reboot", "halt", "poweroff",
+    "iptables", "ip6tables", "nft",
+    "passwd", "useradd", "userdel", "usermod",
+    "mount", "umount",
+]);
+/** Binaries that are denied when used with dangerous argument patterns. */
+const DANGEROUS_COMBOS = [
+    { binary: "rm", test: (args) => args.some((a) => /^-.*r/i.test(a)) && args.some((a) => a === "/" || a === "/*") },
+    { binary: "rm", test: (args) => args.some((a) => /^-.*f.*r|^-.*r.*f/i.test(a)) && args.some((a) => a.startsWith("/") && a.split("/").length <= 2) },
+    { binary: "dd", test: (args) => args.some((a) => a.startsWith("if=") || a.startsWith("of=/dev/")) },
+    { binary: "chmod", test: (args) => args.some((a) => a === "777") && args.some((a) => a === "/" || a === "-R") },
+    { binary: "chown", test: (args) => args.some((a) => a === "-R") && args.some((a) => a === "/") },
+];
+/**
+ * Extract individual command segments from a shell command line.
+ * Splits on pipes, semicolons, &&, ||, $(), backticks.
+ * Returns the binary name for each segment.
+ */
+function extractCommandBinaries(command) {
+    // Split on shell operators to get individual commands
+    const segments = command
+        .replace(/`[^`]*`/g, " __backtick__ ") // flag backtick substitutions
+        .replace(/\$\([^)]*\)/g, " __subshell__ ") // flag $() substitutions
+        .split(/\s*(?:&&|\|\||[;|])\s*/);
+    const binaries = [];
+    for (const seg of segments) {
+        const trimmed = seg.trim();
+        if (!trimmed)
+            continue;
+        // Skip env var prefixes like FOO=bar
+        const tokens = trimmed.split(/\s+/).filter((t) => !t.includes("=") || t.startsWith("-"));
+        const bin = tokens[0];
+        if (bin) {
+            // Extract basename (handle /usr/bin/rm → rm)
+            const basename = bin.split("/").pop() ?? bin;
+            // Strip any quoting tricks: "r"m → rm, r''m → rm
+            const cleaned = basename.replace(/["']/g, "");
+            binaries.push(cleaned);
+        }
+        // Flag if backtick or subshell substitution is present (potential evasion)
+        if (trimmed.includes("__backtick__") || trimmed.includes("__subshell__")) {
+            binaries.push("__shell_substitution__");
+        }
+    }
+    return binaries;
+}
+function extractArgs(command, binary) {
+    const idx = command.indexOf(binary);
+    if (idx < 0)
+        return [];
+    const rest = command.slice(idx + binary.length).trim();
+    return rest.split(/\s+/).filter(Boolean);
+}
+/** Regex patterns that indicate fork bombs or redirect attacks. */
+const STRUCTURAL_DENY_PATTERNS = [
+    /:\s*\(\)\s*\{/, // fork bomb: :() { ... }
+    />\s*\/dev\/[sh]d/, // redirect to block device
+    />\s*\/proc\//, // redirect to /proc
+    />\s*\/sys\//, // redirect to /sys
+    /\beval\b.*\$\{?[A-Z]/, // eval with env var expansion
+];
+function isCommandDenied(command) {
+    // Check structural patterns (fork bombs, device redirects)
+    for (const pattern of STRUCTURAL_DENY_PATTERNS) {
+        if (pattern.test(command))
+            return true;
+    }
+    const binaries = extractCommandBinaries(command);
+    // Block shell substitution in non-auto modes (evasion vector)
+    if (binaries.includes("__shell_substitution__"))
+        return true;
+    for (const bin of binaries) {
+        if (BLOCKED_BINARIES.has(bin))
+            return true;
+        for (const combo of DANGEROUS_COMBOS) {
+            if (combo.binary === bin) {
+                const args = extractArgs(command, bin);
+                if (combo.test(args))
+                    return true;
+            }
+        }
+    }
+    return false;
+}
+export function checkPermission(action, config) {
+    if (config.level === "read-only") {
+        return action.category === "write" || action.category === "execute"
+            ? "deny"
+            : "allow";
+    }
+    // Check denied patterns for commands
+    if (action.category === "execute") {
+        const command = String(action.input.command ?? "");
+        // Built-in binary/structural checks
+        if (isCommandDenied(command))
+            return "deny";
+        // User-configured deny patterns
+        for (const raw of config.deniedCommandPatterns ?? []) {
+            if (new RegExp(raw).test(command))
+                return "deny";
+        }
+        // User-configured allow patterns
+        for (const raw of config.allowedCommandPatterns ?? []) {
+            if (new RegExp(raw).test(command))
+                return "allow";
+        }
+    }
+    if (config.level === "auto")
+        return "allow";
+    // Reads and searches never need confirmation
+    if (action.category === "read" || action.category === "search") {
+        return "allow";
+    }
+    if (config.level === "confirm-writes") {
+        return action.category === "write" || action.category === "execute"
+            ? "confirm"
+            : "allow";
+    }
+    // confirm-all
+    return "confirm";
+}
+export async function resolvePermission(action, config) {
+    const decision = checkPermission(action, config);
+    if (decision === "allow")
+        return true;
+    if (decision === "deny")
+        return false;
+    // Confirm — delegate to callback
+    if (config.confirmCallback) {
+        return config.confirmCallback(action);
+    }
+    // No callback available — default deny for safety
+    return false;
+}
+//# sourceMappingURL=permissions.js.map

package/dist/tools/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/tools/permissions.ts"],"names":[],"mappings":"AAuBA,+DAA+D;AAC/D,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY;IAC7C,OAAO,EAAE,QAAQ,EAAE,QAAQ;IAC3B,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU;IACxC,UAAU,EAAE,WAAW,EAAE,KAAK;IAC9B,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;IACzC,OAAO,EAAE,QAAQ;CAClB,CAAC,CAAC;AAEH,2EAA2E;AAC3E,MAAM,gBAAgB,GAAiE;IACrF,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE;IACjH,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE;IACnJ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE;IACnG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE;IAC/G,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE;CACjG,CAAC;AAEF;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,OAAe;IAC7C,sDAAsD;IACtD,MAAM,QAAQ,GAAG,OAAO;SACrB,OAAO,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAK,8BAA8B;SACxE,OAAO,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAE,yBAAyB;SACpE,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAEnC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,qCAAqC;QACrC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACzF,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,GAAG,EAAE,CAAC;YACR,6CAA6C;YAC7C,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC;YAC7C,iDAAiD;YACjD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC9C,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QAED,2EAA2E;QAC3E,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACzE,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,MAAc;IAClD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,mEAAmE;AACnE,MAAM,wBAAwB,GAAG;IAC/B,eAAe,EAAY,yBAAyB;IACpD,kBAAkB,EAAS,2BAA2B;IACtD,cAAc,EAAa,oBAAoB;IAC/C,aAAa,EAAc,mBAAmB;IAC9C,sBAAsB,EAAI,8BAA8B;CACzD,CAAC;AAEF,SAAS,eAAe,CAAC,OAAe;IACtC,2DAA2D;IAC3D,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IACzC,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAEjD,8DAA8D;IAC9D,IAAI,QAAQ,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAAE,OAAO,IAAI,CAAC;IAE7D,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAE3C,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;YACrC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,OAAO,IAAI,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,MAAkB,EAClB,MAAwB;IAExB,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YACjE,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,OAAO,CAAC;IACd,CAAC;IAED,qCAAqC;IACrC,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAEnD,oCAAoC;QACpC,IAAI,eAAe,CAAC,OAAO,CAAC;YAAE,OAAO,MAAM,CAAC;QAE5C,gCAAgC;QAChC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,qBAAqB,IAAI,EAAE,EAAE,CAAC;YACrD,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO,MAAM,CAAC;QACnD,CAAC;QAED,iCAAiC;QACjC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,sBAAsB,IAAI,EAAE,EAAE,CAAC;YACtD,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO,OAAO,CAAC;QACpD,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC;IAE5C,6CAA6C;IAC7C,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC/D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,KAAK,gBAAgB,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YACjE,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,OAAO,CAAC;IACd,CAAC;IAED,cAAc;IACd,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAkB,EAClB,MAAwB;IAExB,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEjD,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAEtC,iCAAiC;IACjC,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,kDAAkD;IAClD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/tools/tool_types.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Shared type definitions for the tool execution system.
+ * Phase 1 implements the tool loop; Phase 2 provides diff display,
+ * approval, context, and retry modules that the loop consumes.
+ */
+export type ToolCategory = "read" | "write" | "execute" | "search" | "ask";
+export interface ToolAction {
+    /** Tool name (e.g. "read_file", "edit_file", "run_command") */
+    tool: string;
+    /** Category for approval routing */
+    category: ToolCategory;
+    /** Human-readable summary of what this action does */
+    summary: string;
+    /** Tool input parameters */
+    input: Record<string, unknown>;
+}
+export interface ToolResult {
+    tool: string;
+    success: boolean;
+    output: string;
+    /** Milliseconds elapsed */
+    durationMs: number;
+    /** Whether the user was prompted for approval */
+    requiredApproval: boolean;
+}
+export interface FileChange {
+    filePath: string;
+    type: "create" | "edit" | "delete";
+    oldContent: string | null;
+    newContent: string | null;
+    /** For edit_file: the search/replace pair */
+    editDescription?: string;
+}
+export interface CommandRequest {
+    command: string;
+    args: string[];
+    cwd?: string;
+    timeoutMs?: number;
+    /** If true, stdout/stderr is streamed to the terminal live */
+    inheritStdio?: boolean;
+}
+export interface CommandResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+    timedOut: boolean;
+    durationMs: number;
+}

package/dist/tools/tool_types.js

@@ -0,0 +1,7 @@
+/**
+ * Shared type definitions for the tool execution system.
+ * Phase 1 implements the tool loop; Phase 2 provides diff display,
+ * approval, context, and retry modules that the loop consumes.
+ */
+export {};
+//# sourceMappingURL=tool_types.js.map

package/dist/tools/tool_types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool_types.js","sourceRoot":"","sources":["../../src/tools/tool_types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/ui/banner.d.ts

@@ -0,0 +1,4 @@
+export declare function banner(): string;
+export declare function printManPage(): void;
+export declare function printModels(): void;
+export declare function checkPromptClarity(input: string): string | null;