erosolar-cli 2.1.172 → 2.1.173

package/README.md

@@ -4,7 +4,7 @@ Unified command-line agent with a single, persistent chat box pinned to the bott
 
 ## Highlights
 - One chat box, always on the bottom during the entire session (idle or streaming).
-- Shared control bar for status, verify/build toggle, auto-continue, and context gauge.
+- Shared control bar for status, verification/build toggles, and context gauge.
 - Works with OpenAI, Anthropic, Google, xAI, DeepSeek, and local Ollama using the same UI contract.
 - Multi-agent Task tool with built-in general-purpose, explore (read-only), and plan subagents; add custom agents from `.claude/agents`, `~/.claude/agents`, or `--agents` JSON.
 

package/agents/erosolar-code.rules.json

@@ -7,8 +7,8 @@
   "description": "Lean, aggressive coding agent. Act first, ask only when blocked.",
   "globalPrinciples": [
     {
-      "id": "core.act",
-      "summary": "ACT by default. Execute tools immediately. Only ask if genuinely blocked or request is unsafe.",
+      "id": "core.act_first",
+      "summary": "Every response MUST include tool calls. Brief explanation is optional. Text-only responses are not allowed during investigation.",
       "severity": "critical"
     },
     {

package/agents/general.rules.json

@@ -8,9 +8,9 @@
   "globalPrinciples": [
     {
       "id": "guardrail.clarify_ambiguous",
-      "summary": "CRITICAL: If user request is vague, single-word, or ambiguous (e.g., 'typing', 'fix it', 'help'), ASK for clarification FIRST. Do NOT explore or guess.",
-      "detail": "Respond with: 'Could you clarify what you mean by [X]? For example: [option A], [option B], or [option C]?' Only proceed after clarification.",
-      "severity": "critical"
+      "summary": "Only ask for clarification when the request is truly uninterpretable (single words like 'typing' with no context). For requests with reasonable interpretations (like 'find junk code'), act on the most likely interpretation first.",
+      "detail": "If a request could mean multiple things but has a reasonable default interpretation, take action. Only ask when you genuinely cannot determine what the user wants. 'Got any junk code to remove?' → search for unused code. 'Fix it' → if context exists, fix it; if not, ask what to fix.",
+      "severity": "recommended"
     },
     {
       "id": "guardrail.concise_responses",
@@ -42,11 +42,29 @@
       "detail": "Keep tool usage auditable by narrating the intent before running them and summarizing their output afterward.",
       "severity": "required"
     },
+    {
+      "id": "guardrail.bias_to_action",
+      "summary": "CRITICAL: Act first, ask later. When the user makes a request, immediately use tools to investigate and accomplish it. NEVER ask clarifying questions when you can take reasonable action instead.",
+      "detail": "For 'find junk code' or 'cleanup': 1) search_files for 'TODO|FIXME|HACK|XXX', 2) grep for unused exports 'export.*(?!.*import)', 3) find empty/stub files, 4) look for commented-out code blocks. For 'fix bug' or 'debug': 1) search for error messages, 2) trace the code path, 3) read relevant files, 4) propose a fix. NEVER respond with just 'What would you like me to do?' when you can investigate.",
+      "severity": "critical"
+    },
     {
       "id": "guardrail.continuous_execution",
       "summary": "CRITICAL: Continue using tools until the task is complete. Do NOT stop after reading files—immediately proceed to make the requested edits. Do NOT describe what you WILL do—just DO it by calling the appropriate tools. After each tool call, continue with the next step until the task is fully accomplished.",
       "severity": "critical"
     },
+    {
+      "id": "guardrail.smart_narration",
+      "summary": "CRITICAL: Narrate meaningfully. Share key insights and discoveries, not mechanical step descriptions. Say what you FOUND, not what you're DOING.",
+      "detail": "Good: 'Found the bug: processInput clears suggestions before Enter is handled (line 234)'. Bad: 'Let me trace processInput... Let me check the suggestions... I see it now, let me look at...'. For complex debugging, provide progress updates on discoveries, not tool invocations.",
+      "severity": "critical"
+    },
+    {
+      "id": "guardrail.deep_investigation",
+      "summary": "For ANY exploratory request, perform thorough multi-step investigation using 5-10+ tool calls. Do NOT stop after 2 tools.",
+      "detail": "When exploring: 1) list_files to get overview, 2) search_files for patterns, 3) read_file on suspicious files, 4) grep for related patterns, 5) check imports/exports, 6) look for test files, 7) check for duplicates. Report findings as you discover them. A proper investigation uses MANY tools, not just 1-2.",
+      "severity": "critical"
+    },
     {
       "id": "guardrail.manual_loop_supervision",
       "summary": "Humans supervise the loop manually—escalate when you lack evidence or stall.",

package/dist/capabilities/askUserCapability.js

@@ -95,7 +95,7 @@ Examples:
             const input = await display.captureUserInput({ trim: true, resetBuffer: true });
             return input.trim();
         };
-        // Display the question and options inside the chat overlay (no scrollback printing)
+        // Display the question and options inline (no extra scrollback noise)
         const { lines, displayOptions } = formatAskUserPrompt(question, { maxOptions: MAX_ASK_USER_OPTIONS });
         display.showInlinePanel(lines);
         try {

package/dist/capabilities/askUserCapability.js.map

@@ -1 +1 @@
-{"version":3,"file":"askUserCapability.js","sourceRoot":"","sources":["../../src/capabilities/askUserCapability.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,oBAAoB,GAGrB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AASvC,MAAM,OAAO,iBAAiB;IAC5B,EAAE,GAAG,qBAAqB,CAAC;IAC3B,WAAW,GAAG,0CAA0C,CAAC;IAEzD,KAAK,CAAC,MAAM,CAAC,QAA2B;QACtC,OAAO;YACL,EAAE,EAAE,gBAAgB;YACpB,WAAW,EAAE,qCAAqC;YAClD,SAAS,EAAE;gBACT,EAAE,EAAE,UAAU;gBACd,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,mBAAmB;wBACzB,WAAW,EAAE;;;;;;;;;;;uEAW8C;wBAC3D,UAAU,EAAE;4BACV,IAAI,EAAE,QAAQ;4BACd,UAAU,EAAE;gCACV,SAAS,EAAE;oCACT,IAAI,EAAE,OAAO;oCACb,WAAW,EAAE,2CAA2C;oCACxD,KAAK,EAAE;wCACL,IAAI,EAAE,QAAQ;wCACd,UAAU,EAAE;4CACV,QAAQ,EAAE;gDACR,IAAI,EAAE,QAAQ;gDACd,WAAW,EAAE,gEAAgE;6CAC9E;4CACD,MAAM,EAAE;gDACN,IAAI,EAAE,QAAQ;gDACd,WAAW,EAAE,iFAAiF;6CAC/F;4CACD,OAAO,EAAE;gDACP,IAAI,EAAE,OAAO;gDACb,WAAW,EAAE,iCAAiC;gDAC9C,QAAQ,EAAE,CAAC;gDACX,QAAQ,EAAE,oBAAoB;gDAC9B,KAAK,EAAE;oDACL,IAAI,EAAE,QAAQ;oDACd,UAAU,EAAE;wDACV,KAAK,EAAE;4DACL,IAAI,EAAE,QAAQ;4DACd,WAAW,EAAE,0BAA0B;yDACxC;wDACD,WAAW,EAAE;4DACX,IAAI,EAAE,QAAQ;4DACd,WAAW,EAAE,iDAAiD;yDAC/D;qDACF;oDACD,QAAQ,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC;iDACnC;6CACF;4CACD,WAAW,EAAE;gDACX,IAAI,EAAE,SAAS;gDACf,WAAW,EAAE,2BAA2B;6CACzC;yCACF;wCACD,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC;qCAC3D;iCACF;6BACF;4BACD,QAAQ,EAAE,CAAC,WAAW,CAAC;yBACxB;wBACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;4BACtB,MAAM,EAAE,SAAS,EAAE,GAAG,IAAiC,CAAC;4BAExD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gCACxD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;4BAC5D,CAAC;4BAED,MAAM,OAAO,GAAsC,EAAE,CAAC;4BAEtD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gCACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;gCAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;4BACpC,CAAC;4BAED,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;wBACrC,CAAC;qBACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,QAAkB;QAC1C,MAAM,SAAS,GAAG,KAAK,IAAqB,EAAE;YAC5C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;YAChF,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC,CAAC;QAEF,oFAAoF;QACpF,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,mBAAmB,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACtG,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAEvD,IAAI,YAAY,KAAK,OAAO,IAAI,YAAY,KAAK,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;gBACnF,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;gBACjF,MAAM,WAAW,GAAG,MAAM,SAAS,EAAE,CAAC;gBACtC,OAAO,WAAW,CAAC,IAAI,EAAE,CAAC;YAC5B,CAAC;YAED,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7D,MAAM,QAAQ,GAAa,EAAE,CAAC;gBAE9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBAC1C,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;wBAC3E,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC;gBAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,OAAO,QAAQ,CAAC;gBAClB,CAAC;gBACD,kDAAkD;gBAClD,OAAO,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YACjD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;gBAC9E,OAAO,cAAc,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,KAAK,CAAC;YAC3C,CAAC;YAED,OAAO,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"askUserCapability.js","sourceRoot":"","sources":["../../src/capabilities/askUserCapability.ts"],"names":[],"mappings":"AACA,OAAO,EACL,mBAAmB,EACnB,oBAAoB,GAGrB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AASvC,MAAM,OAAO,iBAAiB;IAC5B,EAAE,GAAG,qBAAqB,CAAC;IAC3B,WAAW,GAAG,0CAA0C,CAAC;IAEzD,KAAK,CAAC,MAAM,CAAC,QAA2B;QACtC,OAAO;YACL,EAAE,EAAE,gBAAgB;YACpB,WAAW,EAAE,qCAAqC;YAClD,SAAS,EAAE;gBACT,EAAE,EAAE,UAAU;gBACd,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,mBAAmB;wBACzB,WAAW,EAAE;;;;;;;;;;;uEAW8C;wBAC3D,UAAU,EAAE;4BACV,IAAI,EAAE,QAAQ;4BACd,UAAU,EAAE;gCACV,SAAS,EAAE;oCACT,IAAI,EAAE,OAAO;oCACb,WAAW,EAAE,2CAA2C;oCACxD,KAAK,EAAE;wCACL,IAAI,EAAE,QAAQ;wCACd,UAAU,EAAE;4CACV,QAAQ,EAAE;gDACR,IAAI,EAAE,QAAQ;gDACd,WAAW,EAAE,gEAAgE;6CAC9E;4CACD,MAAM,EAAE;gDACN,IAAI,EAAE,QAAQ;gDACd,WAAW,EAAE,iFAAiF;6CAC/F;4CACD,OAAO,EAAE;gDACP,IAAI,EAAE,OAAO;gDACb,WAAW,EAAE,iCAAiC;gDAC9C,QAAQ,EAAE,CAAC;gDACX,QAAQ,EAAE,oBAAoB;gDAC9B,KAAK,EAAE;oDACL,IAAI,EAAE,QAAQ;oDACd,UAAU,EAAE;wDACV,KAAK,EAAE;4DACL,IAAI,EAAE,QAAQ;4DACd,WAAW,EAAE,0BAA0B;yDACxC;wDACD,WAAW,EAAE;4DACX,IAAI,EAAE,QAAQ;4DACd,WAAW,EAAE,iDAAiD;yDAC/D;qDACF;oDACD,QAAQ,EAAE,CAAC,OAAO,EAAE,aAAa,CAAC;iDACnC;6CACF;4CACD,WAAW,EAAE;gDACX,IAAI,EAAE,SAAS;gDACf,WAAW,EAAE,2BAA2B;6CACzC;yCACF;wCACD,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC;qCAC3D;iCACF;6BACF;4BACD,QAAQ,EAAE,CAAC,WAAW,CAAC;yBACxB;wBACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;4BACtB,MAAM,EAAE,SAAS,EAAE,GAAG,IAAiC,CAAC;4BAExD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gCACxD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;4BAC5D,CAAC;4BAED,MAAM,OAAO,GAAsC,EAAE,CAAC;4BAEtD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gCACjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;gCAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;4BACpC,CAAC;4BAED,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;wBACrC,CAAC;qBACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,QAAkB;QAC1C,MAAM,SAAS,GAAG,KAAK,IAAqB,EAAE;YAC5C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;YAChF,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC,CAAC;QAEF,sEAAsE;QACtE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,mBAAmB,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACtG,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAEvD,IAAI,YAAY,KAAK,OAAO,IAAI,YAAY,KAAK,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;gBACnF,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;gBACjF,MAAM,WAAW,GAAG,MAAM,SAAS,EAAE,CAAC;gBACtC,OAAO,WAAW,CAAC,IAAI,EAAE,CAAC;YAC5B,CAAC;YAED,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC7D,MAAM,QAAQ,GAAa,EAAE,CAAC;gBAE9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBAC1C,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;wBAC3E,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC;gBAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,OAAO,QAAQ,CAAC;gBAClB,CAAC;gBACD,kDAAkD;gBAClD,OAAO,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YACjD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;gBAC9E,OAAO,cAAc,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,KAAK,CAAC;YAC3C,CAAC;YAED,OAAO,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;CACF"}

package/dist/capabilities/statusCapability.js

@@ -30,8 +30,8 @@ export function createStatusCapability(statusTracker) {
                     tools: [
                         {
                             name: 'set_status',
-                            description: 'Update the live status bar with a short, present-tense note about what you are doing. ' +
-                                'Use an empty message to clear it.',
+                            description: 'RARELY NEEDED. Only use for long-running operations. Do NOT use to narrate what you plan to do. ' +
+                                'Call actual tools (list_files, read_file, search_files) instead of setting status.',
                             parameters: {
                                 type: 'object',
                                 properties: {

package/dist/capabilities/statusCapability.js.map

@@ -1 +1 @@
-{"version":3,"file":"statusCapability.js","sourceRoot":"","sources":["../../src/capabilities/statusCapability.ts"],"names":[],"mappings":"AAUA,MAAM,UAAU,sBAAsB,CAAC,aAAgC;IACrE,MAAM,UAAU,GAAG,cAAc,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEjD,MAAM,UAAU,GAAG,CAAC,EAAU,EAAQ,EAAE;QACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,CAAC,KAAc,EAA8B,EAAE;QACnE,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YAC7G,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,2BAA2B;QAC/B,WAAW,EAAE,gFAAgF;QAC7F,KAAK,CAAC,MAAM;YACV,OAAO;gBACL,EAAE,EAAE,gBAAgB;gBACpB,WAAW,EAAE,kCAAkC;gBAC/C,SAAS,EAAE;oBACT,EAAE,EAAE,gBAAgB;oBACpB,WAAW,EAAE,sCAAsC;oBACnD,KAAK,EAAE;wBACL;4BACE,IAAI,EAAE,YAAY;4BAClB,WAAW,EACT,wFAAwF;gCACxF,mCAAmC;4BACrC,UAAU,EAAE;gCACV,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,OAAO,EAAE;wCACP,IAAI,EAAE,QAAQ;wCACd,WAAW,EAAE,wEAAwE;qCACtF;oCACD,MAAM,EAAE;wCACN,IAAI,EAAE,QAAQ;wCACd,WAAW,EAAE,oDAAoD;qCAClE;oCACD,IAAI,EAAE;wCACJ,IAAI,EAAE,QAAQ;wCACd,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;wCAC9C,WAAW,EAAE,sCAAsC;qCACpD;oCACD,MAAM,EAAE;wCACN,IAAI,EAAE,QAAQ;wCACd,WAAW,EAAE,4EAA4E;qCAC1F;iCACF;gCACD,oBAAoB,EAAE,KAAK;6BAC5B;4BACD,OAAO,EAAE,CAAC,OAAgC,EAAE,EAAE;gCAC5C,MAAM,IAAI,GAAG,OAAwB,CAAC;gCACtC,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;gCAChE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;gCAC3D,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gCACtC,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;oCAC5F,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;oCACzB,CAAC,CAAC,IAAI,CAAC;gCAET,UAAU,CAAC,UAAU,CAAC,CAAC;gCAEvB,IAAI,CAAC,OAAO,EAAE,CAAC;oCACb,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;oCACxC,OAAO,iBAAiB,CAAC;gCAC3B,CAAC;gCAED,aAAa,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gCAElE,IAAI,GAAG,EAAE,CAAC;oCACR,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;wCAC5B,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;wCACxC,UAAU,CAAC,UAAU,CAAC,CAAC;oCACzB,CAAC,EAAE,GAAG,CAAC,CAAC;oCACR,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gCAChC,CAAC;gCAED,OAAO,eAAe,OAAO,EAAE,CAAC;4BAClC,CAAC;yBACF;qBACF;iBACF;gBACD,OAAO;oBACL,UAAU,CAAC,UAAU,CAAC,CAAC;oBACvB,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;gBAC1C,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"statusCapability.js","sourceRoot":"","sources":["../../src/capabilities/statusCapability.ts"],"names":[],"mappings":"AAUA,MAAM,UAAU,sBAAsB,CAAC,aAAgC;IACrE,MAAM,UAAU,GAAG,cAAc,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IAEjD,MAAM,UAAU,GAAG,CAAC,EAAU,EAAQ,EAAE;QACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,QAAQ,EAAE,CAAC;YACb,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,CAAC,KAAc,EAA8B,EAAE;QACnE,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YAC7G,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,2BAA2B;QAC/B,WAAW,EAAE,gFAAgF;QAC7F,KAAK,CAAC,MAAM;YACV,OAAO;gBACL,EAAE,EAAE,gBAAgB;gBACpB,WAAW,EAAE,kCAAkC;gBAC/C,SAAS,EAAE;oBACT,EAAE,EAAE,gBAAgB;oBACpB,WAAW,EAAE,sCAAsC;oBACnD,KAAK,EAAE;wBACL;4BACE,IAAI,EAAE,YAAY;4BAClB,WAAW,EACT,kGAAkG;gCAClG,oFAAoF;4BACtF,UAAU,EAAE;gCACV,IAAI,EAAE,QAAQ;gCACd,UAAU,EAAE;oCACV,OAAO,EAAE;wCACP,IAAI,EAAE,QAAQ;wCACd,WAAW,EAAE,wEAAwE;qCACtF;oCACD,MAAM,EAAE;wCACN,IAAI,EAAE,QAAQ;wCACd,WAAW,EAAE,oDAAoD;qCAClE;oCACD,IAAI,EAAE;wCACJ,IAAI,EAAE,QAAQ;wCACd,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;wCAC9C,WAAW,EAAE,sCAAsC;qCACpD;oCACD,MAAM,EAAE;wCACN,IAAI,EAAE,QAAQ;wCACd,WAAW,EAAE,4EAA4E;qCAC1F;iCACF;gCACD,oBAAoB,EAAE,KAAK;6BAC5B;4BACD,OAAO,EAAE,CAAC,OAAgC,EAAE,EAAE;gCAC5C,MAAM,IAAI,GAAG,OAAwB,CAAC;gCACtC,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;gCAChE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;gCAC3D,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gCACtC,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;oCAC5F,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;oCACzB,CAAC,CAAC,IAAI,CAAC;gCAET,UAAU,CAAC,UAAU,CAAC,CAAC;gCAEvB,IAAI,CAAC,OAAO,EAAE,CAAC;oCACb,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;oCACxC,OAAO,iBAAiB,CAAC;gCAC3B,CAAC;gCAED,aAAa,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;gCAElE,IAAI,GAAG,EAAE,CAAC;oCACR,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;wCAC5B,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;wCACxC,UAAU,CAAC,UAAU,CAAC,CAAC;oCACzB,CAAC,EAAE,GAAG,CAAC,CAAC;oCACR,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gCAChC,CAAC;gCAED,OAAO,eAAe,OAAO,EAAE,CAAC;4BAClC,CAAC;yBACF;qBACF;iBACF;gBACD,OAAO;oBACL,UAAU,CAAC,UAAU,CAAC,CAAC;oBACvB,aAAa,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;gBAC1C,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/codex/capabilities/codexCoreCapability.d.ts

@@ -0,0 +1,6 @@
+import type { CapabilityContribution, CapabilityContext, CapabilityModule } from '../../runtime/agentHost.js';
+export declare class CodexCoreCapabilityModule implements CapabilityModule {
+    readonly id = "capability.codex.core";
+    create(context: CapabilityContext): Promise<CapabilityContribution>;
+}
+//# sourceMappingURL=codexCoreCapability.d.ts.map

package/dist/codex/capabilities/codexCoreCapability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codexCoreCapability.d.ts","sourceRoot":"","sources":["../../../src/codex/capabilities/codexCoreCapability.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAmB9G,qBAAa,yBAA0B,YAAW,gBAAgB;IAChE,QAAQ,CAAC,EAAE,2BAA2B;IAEhC,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAiB1E"}

package/dist/codex/capabilities/codexCoreCapability.js

@@ -0,0 +1,516 @@
+import { promisify } from 'node:util';
+import { exec as execCallback, spawn } from 'node:child_process';
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+import { resolveCodexContext } from '../types.js';
+import { resolveWorkingPath, isPathInside } from '../fs.js';
+import { updatePlan } from '../persistence/planStore.js';
+import { loadMcpServers } from '../../mcp/config.js';
+import { McpStdioClient } from '../../mcp/stdioClient.js';
+import { McpSseClient } from '../../mcp/sseClient.js';
+import { formatContentBlock } from '../../mcp/toolBridge.js';
+const exec = promisify(execCallback);
+export class CodexCoreCapabilityModule {
+    id = 'capability.codex.core';
+    async create(context) {
+        const codexContext = resolveCodexContext(context.env, context.workingDir);
+        return {
+            id: 'codex.core',
+            description: 'Codex-compatible core tools (shell_command, apply_patch, update_plan, MCP helpers, view_image).',
+            toolSuite: {
+                id: 'codex-core',
+                description: 'Codex CLI core tools',
+                tools: createCodexTools(codexContext),
+            },
+            metadata: {
+                sandboxMode: codexContext.sandboxMode,
+                networkAccess: codexContext.networkAccess,
+                approvalPolicy: codexContext.approvalPolicy,
+            },
+        };
+    }
+}
+function createCodexTools(context) {
+    return [
+        {
+            name: 'shell_command',
+            description: 'Execute a shell command within the workspace. Respects sandbox restrictions and enforces workspace scoping.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    command: { type: 'string' },
+                    workdir: { type: 'string', description: 'Optional working directory relative to workspace.' },
+                    timeout_ms: { type: 'number', description: 'Optional timeout in milliseconds.' },
+                    with_escalated_permissions: { type: 'boolean' },
+                    justification: { type: 'string' },
+                },
+                required: ['command'],
+            },
+            handler: async (args) => runShellCommand(context, args),
+        },
+        {
+            name: 'apply_patch',
+            description: 'Apply a unified diff patch within the workspace (guarded).',
+            parameters: {
+                type: 'object',
+                properties: {
+                    patch: { type: 'string' },
+                    workdir: { type: 'string', description: 'Optional working directory relative to workspace.' },
+                },
+                required: ['patch'],
+            },
+            handler: async (args) => applyPatch(context, args),
+        },
+        {
+            name: 'update_plan',
+            description: 'Persist plan steps with Codex semantics (one in_progress at a time).',
+            parameters: {
+                type: 'object',
+                properties: {
+                    explanation: { type: 'string' },
+                    plan: {
+                        type: 'array',
+                        items: {
+                            type: 'object',
+                            required: ['step', 'status'],
+                            properties: {
+                                step: { type: 'string' },
+                                status: { type: 'string', enum: ['pending', 'in_progress', 'completed'] },
+                            },
+                        },
+                    },
+                },
+                required: ['plan'],
+            },
+            handler: async (args) => updatePlanState(context, args),
+        },
+        {
+            name: 'list_mcp_resources',
+            description: 'List resources exposed by configured MCP servers.',
+            parameters: {
+                type: 'object',
+                properties: {},
+            },
+            handler: async () => listMcpResources(context),
+        },
+        {
+            name: 'read_mcp_resource',
+            description: 'Read a resource from an MCP server and return its content.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    server: { type: 'string' },
+                    uri: { type: 'string' },
+                },
+                required: ['server', 'uri'],
+            },
+            handler: async (args) => readMcpResource(context, args),
+        },
+        {
+            name: 'list_mcp_resource_templates',
+            description: 'List MCP resource templates from configured servers.',
+            parameters: {
+                type: 'object',
+                properties: {},
+            },
+            handler: async () => listMcpResourceTemplates(context),
+        },
+        {
+            name: 'view_image',
+            description: 'Load an image from disk and return base64 metadata for display.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    path: { type: 'string' },
+                },
+                required: ['path'],
+            },
+            handler: async (args) => viewImage(context, args),
+        },
+    ];
+}
+async function runShellCommand(context, args) {
+    const command = typeof args['command'] === 'string' ? args['command'].trim() : '';
+    if (!command) {
+        return 'Error: command must be a non-empty string.';
+    }
+    const escalationRequested = args['with_escalated_permissions'] === true;
+    if (escalationRequested && (context.approvalPolicy === 'never' || context.approvalPolicy === 'untrusted')) {
+        return `Blocked: escalated permissions are disabled by approval policy (${context.approvalPolicy}).`;
+    }
+    const escalationNotice = escalationRequested && context.approvalPolicy !== 'on-failure'
+        ? `Note: escalation requested but running under "${context.approvalPolicy}" policy within current sandbox.`
+        : null;
+    // Basic sandbox guardrail: prevent escape from workspace
+    const cwd = resolveSafeCwd(context, args['workdir']);
+    if (context.sandboxMode === 'read-only' && isPotentiallyMutating(command)) {
+        return 'Blocked: sandbox is read-only.';
+    }
+    // Optional: respect restricted network flag (best-effort, advisory)
+    if (context.networkAccess === 'restricted' && isNetworkCommand(command)) {
+        return 'Blocked: network access is restricted in this sandbox.';
+    }
+    try {
+        const timeout = typeof args['timeout_ms'] === 'number' ? Math.max(1, Math.floor(args['timeout_ms'])) : undefined;
+        const { stdout, stderr } = await exec(command, { cwd, timeout });
+        if (stderr && stderr.trim()) {
+            const payload = [stdout.trim(), stderr.trim()].filter(Boolean).join('\n');
+            return escalationNotice ? [escalationNotice, payload].filter(Boolean).join('\n') : payload;
+        }
+        const payload = stdout.trim();
+        return escalationNotice ? [escalationNotice, payload].filter(Boolean).join('\n') : payload;
+    }
+    catch (error) {
+        const err = error;
+        const stderr = typeof err?.stderr === 'string' ? err.stderr.trim() : '';
+        const stdout = typeof err?.stdout === 'string' ? err.stdout.trim() : '';
+        const message = err?.message ? String(err.message) : 'Shell command failed.';
+        const payload = [stdout, stderr, message].filter(Boolean).join('\n');
+        return escalationNotice ? [escalationNotice, payload].filter(Boolean).join('\n') : payload;
+    }
+}
+async function applyPatch(context, args) {
+    const patch = typeof args['patch'] === 'string' ? args['patch'] : '';
+    if (!patch.trim()) {
+        return 'Error: patch must be a non-empty string.';
+    }
+    if (context.sandboxMode === 'read-only') {
+        return 'Blocked: sandbox is read-only.';
+    }
+    const cwd = resolveSafeCwd(context, args['workdir']);
+    const violations = findPatchViolations(context.workingDir, patch);
+    if (violations.length) {
+        return `Rejected patch: paths escape workspace:\n${violations.join('\n')}`;
+    }
+    try {
+        const output = await applyPatchWithBinary(patch, cwd);
+        return output;
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return `Failed to apply patch: ${message}`;
+    }
+}
+async function applyPatchWithBinary(patch, cwd) {
+    return new Promise((resolve, reject) => {
+        const child = spawn('patch', ['-p0', '-u', '-N', '--binary'], { cwd });
+        let stdout = '';
+        let stderr = '';
+        child.stdout.on('data', (data) => {
+            stdout += data.toString();
+        });
+        child.stderr.on('data', (data) => {
+            stderr += data.toString();
+        });
+        child.on('error', (error) => {
+            reject(error);
+        });
+        child.on('close', (code) => {
+            if (code === 0) {
+                resolve([stdout.trim(), stderr.trim()].filter(Boolean).join('\n') || 'Patch applied.');
+                return;
+            }
+            reject(new Error(stderr.trim() || `patch exited with code ${code}`));
+        });
+        child.stdin.write(patch);
+        child.stdin.end();
+    });
+}
+async function updatePlanState(context, args) {
+    const explanation = typeof args['explanation'] === 'string' ? args['explanation'] : undefined;
+    const planArg = Array.isArray(args['plan']) ? args['plan'] : [];
+    const nextPlan = planArg
+        .map((entry) => ({
+        step: typeof entry?.step === 'string' ? entry.step : '',
+        status: entry?.status,
+    }))
+        .filter((entry) => Boolean(entry.step));
+    const state = await updatePlan(context.workingDir, { plan: nextPlan, explanation });
+    return formatPlan(state);
+}
+async function listMcpResources(context) {
+    const servers = await loadMcpServers({ workingDir: context.workingDir, env: context.env });
+    if (!servers.length) {
+        return 'No MCP servers configured.';
+    }
+    const records = [];
+    for (const server of servers) {
+        const client = createMcpClient(server, context.workingDir);
+        try {
+            const resources = await client.listResources();
+            records.push({
+                server: server.id,
+                type: server.type,
+                description: server.description,
+                location: server.type === 'sse' ? server.url : server.command,
+                resources,
+            });
+        }
+        catch (error) {
+            records.push({
+                server: server.id,
+                type: server.type,
+                description: server.description,
+                location: server.type === 'sse' ? server.url : server.command,
+                error: formatMcpError(error),
+            });
+        }
+        finally {
+            await client.dispose();
+        }
+    }
+    return JSON.stringify(records, null, 2);
+}
+async function readMcpResource(context, args) {
+    const serverId = typeof args['server'] === 'string' ? args['server'].trim() : '';
+    const uri = typeof args['uri'] === 'string' ? args['uri'].trim() : '';
+    if (!serverId || !uri) {
+        return 'Error: server and uri are required.';
+    }
+    const server = await findMcpServer(context, serverId);
+    if (!server) {
+        return `Server "${serverId}" is not configured.`;
+    }
+    const client = createMcpClient(server, context.workingDir);
+    try {
+        const result = await client.readResource(uri);
+        const blocks = normalizeContentBlocks(result);
+        const formatted = blocks
+            .map((block) => formatContentBlock(block))
+            .filter((line) => Boolean(line?.trim()));
+        const lines = [];
+        lines.push(`Server: ${serverId}`);
+        const label = result.resource?.name || result.resource?.uri;
+        lines.push(`Resource: ${label && label !== uri ? `${uri} (${label})` : uri}`);
+        if (result.resource?.mimeType) {
+            lines.push(`MIME: ${result.resource.mimeType}`);
+        }
+        if (result.resource?.description) {
+            lines.push(result.resource.description);
+        }
+        if (formatted.length) {
+            lines.push('', ...formatted);
+        }
+        else {
+            lines.push('No content returned for this resource.');
+        }
+        return lines.join('\n');
+    }
+    catch (error) {
+        return `Failed to read ${serverId}:${uri}: ${formatMcpError(error)}`;
+    }
+    finally {
+        await client.dispose();
+    }
+}
+async function listMcpResourceTemplates(context) {
+    const servers = await loadMcpServers({ workingDir: context.workingDir, env: context.env });
+    if (!servers.length) {
+        return 'No MCP servers configured.';
+    }
+    const records = [];
+    for (const server of servers) {
+        const client = createMcpClient(server, context.workingDir);
+        try {
+            const templates = await client.listResourceTemplates();
+            records.push({
+                server: server.id,
+                type: server.type,
+                description: server.description,
+                location: server.type === 'sse' ? server.url : server.command,
+                templates,
+            });
+        }
+        catch (error) {
+            records.push({
+                server: server.id,
+                type: server.type,
+                description: server.description,
+                location: server.type === 'sse' ? server.url : server.command,
+                error: formatMcpError(error),
+            });
+        }
+        finally {
+            await client.dispose();
+        }
+    }
+    return JSON.stringify(records, null, 2);
+}
+function createMcpClient(config, workingDir) {
+    return config.type === 'sse' ? new McpSseClient(config) : new McpStdioClient(config, workingDir);
+}
+async function findMcpServer(context, id) {
+    const servers = await loadMcpServers({ workingDir: context.workingDir, env: context.env });
+    return servers.find((server) => server.id === id) ?? null;
+}
+function normalizeContentBlocks(result) {
+    if (!result) {
+        return [];
+    }
+    if (Array.isArray(result.content)) {
+        return result.content;
+    }
+    if (Array.isArray(result.contents)) {
+        return result.contents;
+    }
+    return [];
+}
+function formatMcpError(error) {
+    if (error instanceof Error) {
+        return error.message;
+    }
+    return String(error);
+}
+async function viewImage(context, args) {
+    const targetPath = typeof args['path'] === 'string' ? args['path'] : '';
+    if (!targetPath.trim()) {
+        return 'Error: path is required.';
+    }
+    const resolved = resolveWorkingPath(context.workingDir, targetPath);
+    try {
+        const data = await readFile(resolved);
+        const size = data.byteLength;
+        if (size > 1024 * 1024) {
+            return `Image too large to inline (${size} bytes). Path: ${resolved}`;
+        }
+        const base64 = data.toString('base64');
+        const ext = path.extname(resolved).replace(/^\./, '') || 'octet-stream';
+        return JSON.stringify({ path: resolved, size, encoding: 'base64', mediaType: `image/${ext}`, data: base64 }, null, 2);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return `Failed to read image: ${message}`;
+    }
+}
+function resolveSafeCwd(context, workdir) {
+    const base = context.workingDir;
+    const cwd = resolveWorkingPath(base, typeof workdir === 'string' ? workdir : undefined);
+    if (context.sandboxMode === 'read-only') {
+        return base;
+    }
+    return cwd;
+}
+function findPatchViolations(baseDir, patch) {
+    const violations = [];
+    const lines = patch.split('\n');
+    const paths = new Set();
+    for (const line of lines) {
+        const diffMatch = line.match(/^diff --git a\/(\S+) b\/(\S+)/);
+        if (diffMatch && diffMatch[1] && diffMatch[2]) {
+            paths.add(diffMatch[1]);
+            paths.add(diffMatch[2]);
+            continue;
+        }
+        const plusMatch = line.match(/^\+\+\+ ([^\t]+)/);
+        if (plusMatch && plusMatch[1]) {
+            paths.add(plusMatch[1]);
+            continue;
+        }
+        const minusMatch = line.match(/^\-\-\- ([^\t]+)/);
+        if (minusMatch && minusMatch[1]) {
+            paths.add(minusMatch[1]);
+        }
+    }
+    for (const candidate of paths) {
+        if (candidate === '/dev/null') {
+            continue;
+        }
+        const cleaned = candidate.replace(/^[ab]\//, '');
+        const resolved = path.resolve(baseDir, cleaned);
+        if (!isPathInside(baseDir, resolved)) {
+            violations.push(`${candidate} -> ${resolved}`);
+        }
+    }
+    return violations;
+}
+function isPotentiallyMutating(command) {
+    const normalized = command.toLowerCase();
+    if (/>|>>/.test(command)) {
+        return true;
+    }
+    if (/\bsudo\b/.test(normalized)) {
+        return true;
+    }
+    const directMutators = [
+        'rm',
+        'rmdir',
+        'mv',
+        'cp',
+        'ln',
+        'mkdir',
+        'touch',
+        'chmod',
+        'chown',
+        'truncate',
+        'dd',
+        'mkfs',
+        'mount',
+        'umount',
+        'tee',
+        'docker',
+        'kubectl',
+        'helm',
+    ];
+    for (const token of directMutators) {
+        const pattern = new RegExp(`\\b${token}\\b`);
+        if (pattern.test(normalized)) {
+            return true;
+        }
+    }
+    const packageManagers = /\b(npm|yarn|pnpm|pip|pip3|brew|apt(-get)?|yum|dnf|pacman|apk|cargo|go\s+install|go\s+get|bundle|gem|composer|dotnet|nuget|conda|mamba)\b/;
+    if (packageManagers.test(normalized)) {
+        return true;
+    }
+    if (/\bsed\b[^\n]*\s-i\b/.test(normalized) || /\bperl\b[^\n]*\s-i\b/.test(normalized)) {
+        return true;
+    }
+    const gitMutations = /\bgit\s+(commit|push|pull|merge|rebase|reset|checkout|clean|apply|am|cherry-pick|fetch|clone|init|switch)\b/;
+    if (gitMutations.test(normalized)) {
+        return true;
+    }
+    return false;
+}
+function isNetworkCommand(command) {
+    const normalized = command.toLowerCase();
+    const checks = [
+        /\bcurl\b/i,
+        /\bwget\b/i,
+        /\bhttp(s)?:\/\//i,
+        /\bgit\s+(clone|fetch|pull)\b/i,
+        /\bssh\b(?!-keygen)/i,
+        /\bscp\b/i,
+        /\bsftp\b/i,
+        /\bftp\b/i,
+        /\brsync\b/i,
+        /\bnc\b\s+/i,
+        /\bdocker\s+(pull|run|build)\b/i,
+    ];
+    if (checks.some((pattern) => pattern.test(command))) {
+        return true;
+    }
+    const packageNetwork = [
+        /\b(npm|yarn|pnpm)\s+(install|add|update|upgrade|ci|publish|link)\b/i,
+        /\b(pip|pip3)\s+(install|download)\b/i,
+        /\bcargo\b\s+(install|update)\b/i,
+        /\bgo\s+(get|install)\b/i,
+        /\bbundle\b\s+install\b/i,
+        /\bgem\b\s+(install|update)\b/i,
+        /\bcomposer\b\s+(install|update|require)\b/i,
+        /\b(brew|apt-get|apt|yum|dnf|pacman|apk)\b/i,
+        /\b(conda|mamba)\b\s+(install|update|create)\b/i,
+    ];
+    if (packageNetwork.some((pattern) => pattern.test(normalized))) {
+        return true;
+    }
+    return false;
+}
+function formatPlan(state) {
+    const header = state.explanation ? `${state.explanation.trim()}\n\n` : '';
+    const body = state.plan.length === 0
+        ? 'Plan is empty.'
+        : state.plan
+            .map((item, index) => `${index + 1}. [${item.status}] ${item.step}`)
+            .join('\n');
+    return `${header}${body}`;
+}
+//# sourceMappingURL=codexCoreCapability.js.map