eve 0.65.0 → 0.66.0

package/dist/src/extensions/code/extension/lib/computer-use-sandbox.d.ts

@@ -0,0 +1,9 @@
+import type { SandboxSession } from "eve/sandbox";
+type ComputerUseSandbox = Pick<SandboxSession, "resolvePath" | "run" | "writeTextFile">;
+/** Include this in the consumer sandbox revalidation key so cached templates rebuild when computer use changes. */
+export declare const COMPUTER_USE_REVALIDATION_KEY = "computer-use:0.12.5:2026-09-17.1";
+/** Install the desktop packages and embedded driver required by computer use. */
+export declare function installComputerUse(sandbox: ComputerUseSandbox): Promise<void>;
+/** Start the managed display and driver for one consumer sandbox session. */
+export declare function startComputerUse(sandbox: Pick<SandboxSession, "resolvePath" | "run">): Promise<void>;
+export {};

package/dist/src/extensions/code/extension/lib/computer-use-sandbox.js

@@ -0,0 +1,120 @@
+import{shellQuote}from"./shell.js";import{commandFailureDetail}from"./command-failure.js";import{COMPUTER_USE_DRIVER_SOURCES}from"./computer-use-driver-source.js";import{computerUseDisplayCommand,computerUseDriverStartCommand,computerUsePaths}from"./computer-use.js";const COMPUTER_USE_REVALIDATION_KEY=`computer-use:0.12.5:2026-09-17.1`;async function installComputerUse(e){let t=computerUsePaths(e),n=e.resolvePath(`.eve-code/install-computer-use.sh`);await e.run({command:`mkdir -p ${shellQuote(t.driverRoot)}`}),await Promise.all([...Object.entries(COMPUTER_USE_DRIVER_SOURCES).map(([n,r])=>e.writeTextFile({path:`${t.driverRoot}/${n}`,content:r})),e.writeTextFile({path:n,content:computerUseInstallScript(e)})]);let r=await e.run({command:[`set -e`,`if [ "$(id -u)" = 0 ]; then`,`  bash ${shellQuote(n)}`,`elif command -v sudo >/dev/null 2>&1; then`,`  sudo -n bash ${shellQuote(n)}`,`else`,`  echo 'computer-use requires an apt-based sandbox image with root or passwordless sudo' >&2`,`  exit 1`,`fi`].join(`
+`)});if(r.exitCode!==0)throw Error(`computer-use installation failed (exit ${r.exitCode}): ${commandFailureDetail(r)}`)}async function startComputerUse(e){let t={TERM:`xterm-256color`},n=await e.run({command:computerUseDisplayCommand(e),env:t});if(n.exitCode!==0)throw Error(`computer-use display startup failed (exit ${n.exitCode}): ${commandFailureDetail(n)}`);let r=await e.run({command:computerUseDriverStartCommand(e),env:t});if(r.exitCode!==0)throw Error(`computer-use driver startup failed (exit ${r.exitCode}): ${commandFailureDetail(r)}`)}function computerUseInstallScript(e){let t=computerUsePaths(e);return`#!/usr/bin/env bash
+set -euo pipefail
+
+command -v apt-get >/dev/null || {
+  echo "computer-use requires an apt-based sandbox image" >&2
+  exit 1
+}
+
+apt-get update
+DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends ca-certificates curl
+apt-get clean
+
+install -d -m 0755 /etc/apt/keyrings
+curl -fsSL https://packages.mozilla.org/apt/repo-signing-key.gpg \\
+  -o /etc/apt/keyrings/packages.mozilla.org.asc
+printf '%s\\n' \\
+  'Types: deb' \\
+  'URIs: https://packages.mozilla.org/apt' \\
+  'Suites: mozilla' \\
+  'Components: main' \\
+  'Architectures: amd64 arm64' \\
+  'Signed-By: /etc/apt/keyrings/packages.mozilla.org.asc' \\
+  > /etc/apt/sources.list.d/mozilla.sources
+printf '%s\\n' \\
+  'Package: *' \\
+  'Pin: origin packages.mozilla.org' \\
+  'Pin-Priority: 1000' \\
+  > /etc/apt/preferences.d/mozilla
+
+apt-get update
+FIREFOX_ESR_VERSION="$(apt-cache madison firefox-esr | awk '$3 ~ /^140\\./ { print $3; exit }')"
+if [[ -z "\${FIREFOX_ESR_VERSION}" ]]; then
+  echo "Mozilla's repository does not offer the Firefox ESR 140 line" >&2
+  exit 1
+fi
+
+DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \\
+  at-spi2-core \\
+  ca-certificates \\
+  curl \\
+  dbus-x11 \\
+  ffmpeg \\
+  fontconfig \\
+  gnome-themes-extra \\
+  gtk2-engines-murrine \\
+  libxi6 \\
+  libxkbcommon0 \\
+  sassc \\
+  x11-utils \\
+  xclip \\
+  xdotool \\
+  xfce4 \\
+  xterm \\
+  xvfb \\
+  xz-utils
+apt-get clean
+DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \\
+  "firefox-esr=\${FIREFOX_ESR_VERSION}"
+apt-get clean
+
+GEIST_MONO_VERSION=3.4.0
+GEIST_MONO_SHA256=43ef3d73cadddea5be746e20c9f27fbaa59ceb106b8b26f7245ba2de2e46b1f6
+COLLOID_COMMIT=fd805dbeeacb12f7971b98408c415c3f472e5aef
+COLLOID_SHA256=0f19442b9bd1\
+e08e93a223518ce70cd2e47e05ed530fd3345c7e79ea75ea5f83
+TEMP_DIR="$(mktemp -d)"
+trap 'rm -rf "\${TEMP_DIR}"' EXIT
+
+curl -fsSL \\
+  "https://github.com/ryanoasis/nerd-fonts/releases/download/v\${GEIST_MONO_VERSION}/GeistMono.tar.xz" \\
+  -o "\${TEMP_DIR}/geist-mono.tar.xz"
+echo "\${GEIST_MONO_SHA256}  \${TEMP_DIR}/geist-mono.tar.xz" | sha256sum --check --status
+install -d -m 0755 /usr/local/share/fonts/geist-mono
+tar -xJf "\${TEMP_DIR}/geist-mono.tar.xz" -C /usr/local/share/fonts/geist-mono \\
+  GeistMonoNerdFont-Regular.otf GeistMonoNerdFont-Bold.otf
+fc-cache -f
+
+curl -fsSL \\
+  "https://github.com/vinceliuice/Colloid-gtk-theme/archive/\${COLLOID_COMMIT}.tar.gz" \\
+  -o "\${TEMP_DIR}/colloid.tar.gz"
+echo "\${COLLOID_SHA256}  \${TEMP_DIR}/colloid.tar.gz" | sha256sum --check --status
+mkdir -p "\${TEMP_DIR}/colloid"
+tar -xzf "\${TEMP_DIR}/colloid.tar.gz" -C "\${TEMP_DIR}/colloid" --strip-components=1
+(
+  cd "\${TEMP_DIR}/colloid"
+  ./install.sh -d /usr/share/themes -n Colloid -t default -c dark --tweaks black
+  SRC_DIR="$(pwd)/src"
+  source ./assets.sh
+  blackness=true
+  colorscheme=false
+  normal=false
+  make_assets /usr/share/themes Colloid '' -Dark '' '' ''
+  test -f /usr/share/themes/Colloid-Dark/xfwm4/close-active.svg
+  test -f /usr/share/themes/Colloid-Dark/xfwm4/hide-active.svg
+  test -f /usr/share/themes/Colloid-Dark/xfwm4/maximize-active.svg
+)
+
+install -d -m 0755 ${shellQuote(t.managedBrowserRoot)}
+cat >${shellQuote(`${t.managedBrowserRoot}/xdg-open`)} <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+url="\${1:-}"
+[[ "\${url}" =~ ^https?:// ]] || { echo "managed xdg-open accepts HTTP(S) URLs only" >&2; exit 2; }
+export DISPLAY=:99
+window="$(xdotool search --onlyvisible --class firefox-esr | head -n 1)"
+[[ -n "\${window}" ]] || { echo "managed Firefox is not running" >&2; exit 1; }
+xdotool windowactivate --sync "\${window}"
+xdotool key --clearmodifiers ctrl+l
+xdotool type --clearmodifiers --delay 1 "\${url}"
+xdotool key --clearmodifiers Return
+EOF
+chmod 0755 ${shellQuote(`${t.managedBrowserRoot}/xdg-open`)}
+ln -sfn xdg-open ${shellQuote(`${t.managedBrowserRoot}/x-www-browser`)}
+ln -sfn xdg-open ${shellQuote(`${t.managedBrowserRoot}/sensible-browser`)}
+
+npm install --prefix ${shellQuote(t.driverRoot)} --ignore-scripts --no-audit --no-fund
+apt-get clean
+rm -rf /var/lib/apt/lists/*
+`}export{COMPUTER_USE_REVALIDATION_KEY,installComputerUse,startComputerUse};

package/dist/src/extensions/code/extension/lib/computer-use.d.ts

@@ -0,0 +1,36 @@
+import type { SandboxSession } from "eve/sandbox";
+type PathSandbox = Pick<SandboxSession, "resolvePath">;
+export declare function computerUsePaths(sandbox: PathSandbox): {
+    root: string;
+    driverRoot: string;
+    driverSocket: string;
+    latestScreenshot: string;
+    managedBrowserRoot: string;
+};
+type LaunchAction = {
+    action: "launch";
+    app: "xterm";
+    instance?: "primary" | "secondary";
+} | {
+    action: "launch";
+    app: "firefox";
+    url?: string;
+};
+type DriverAction = {
+    action: string;
+} & Record<string, unknown>;
+export interface ComputerUseDriverRequest {
+    action: DriverAction;
+    screenshotPath: string;
+}
+export declare function screenshotPath(sandbox: PathSandbox, path?: string): string;
+export declare function recordingPath(sandbox: PathSandbox, path?: string): string;
+export declare function computerUseDriverRequest(action: DriverAction, screenshot: string): ComputerUseDriverRequest;
+export declare function computerUseDriverCommand(sandbox: PathSandbox): string;
+export declare function computerUseDriverStartCommand(sandbox: PathSandbox): string;
+export declare function computerUseDisplayCommand(sandbox: PathSandbox): string;
+export declare function computerUseDesktopSizeCommand(sandbox: PathSandbox, size: "full_hd" | "large_16_9" | "social_16_9"): string;
+export declare function computerUseLaunchCommand(sandbox: PathSandbox, action: LaunchAction): string;
+export declare function computerUseFocusCommand(sandbox: PathSandbox, app: "firefox" | "xterm", instance?: "primary" | "secondary"): string;
+export declare function computerUseWindowLayoutCommand(sandbox: PathSandbox, layout: "maximized" | "left" | "right", window?: string): string;
+export {};

package/dist/src/extensions/code/extension/lib/computer-use.js

@@ -0,0 +1,78 @@
+import{shellQuote}from"./shell.js";function computerUsePaths(e){let t=e.resolvePath(`computer-use`);return{root:t,driverRoot:e.resolvePath(`.eve-code/computer-use-driver`),driverSocket:`${t}/cua-driver.sock`,latestScreenshot:`${t}/latest.png`,managedBrowserRoot:e.resolvePath(`.eve-code/managed-browser`)}}const FIREFOX_USER_JS=[`user_pref("toolkit.legacyUserProfileCustomizations.stylesheets", true);`,`user_pref("ui.systemUsesDarkTheme", 1);`,`user_pref("browser.theme.toolbar-theme", 0);`,`user_pref("browser.theme.content-theme", 0);`,`user_pref("layout.css.prefers-color-scheme.content-override", 0);`,`user_pref("privacy.resistFingerprinting", false);`,`user_pref("browser.tabs.inTitlebar", 0);`,`user_pref("browser.toolbars.bookmarks.visibility", "never");`,`user_pref("browser.urlbar.quicksuggest.enabled", false);`,`user_pref("browser.urlbar.suggest.quicksuggest.nonsponsored", false);`,`user_pref("browser.urlbar.suggest.quicksuggest.sponsored", false);`,`user_pref("browser.urlbar.suggest.searches", false);`,`user_pref("browser.urlbar.suggest.topsites", false);`,`user_pref("browser.urlbar.suggest.trending", false);`,`user_pref("browser.urlbar.suggest.history", false);`,`user_pref("browser.urlbar.suggest.bookmark", false);`,`user_pref("browser.urlbar.suggest.openpage", false);`,`user_pref("browser.urlbar.maxRichResults", 0);`,`user_pref("browser.newtabpage.activity-stream.feeds.topsites", false);`,`user_pref("browser.newtabpage.activity-stream.feeds.section.topstories", false);`].join(`
+`),TERMINAL_XRESOURCES=`XTerm*background: #0A0A0A.XTerm*foreground: #bbbbbb.XTerm*cursorColor: #bbbbbb.XTerm*pointerColor: #bbbbbb.XTerm*highlightColorMode: true.XTerm*highlightReverse: false.XTerm*highlightColor: #ffffff.XTerm*highlightTextColor: #000000.XTerm*scrollBar: false.XTerm*toolBar: false.XTerm*color0: #000000.XTerm*color1: #e52222.XTerm*color2: #a6e32d.XTerm*color3: #fc951e.XTerm*color4: #c48dff.XTerm*color5: #fa2573.XTerm*color6: #67d9f0.XTerm*color7: #f2f2f2.XTerm*color8: #555555.XTerm*color9: #ff5555.XTerm*color10: #55ff55.XTerm*color11: #ffff55.XTerm*color12: #5555ff.XTerm*color13: #ff55ff.XTerm*color14: #55ffff.XTerm*color15: #ffffff`.split(`.`).join(`
+`);function screenshotPath(e,t){let n=computerUsePaths(e);return t===void 0?n.latestScreenshot:`${n.root}/${t}`}function recordingPath(e,t){return`${computerUsePaths(e).root}/${t??`recording-${crypto.randomUUID()}.mp4`}`}function computerUseDriverRequest(e,t){return{action:e,screenshotPath:t}}function computerUseDriverCommand(e){return`node ${shellQuote(`${computerUsePaths(e).driverRoot}/client.mjs`)}`}function computerUseDriverStartCommand(e){let t=computerUsePaths(e),n=`COMPUTER_USE_SOCKET_PATH=${shellQuote(t.driverSocket)}`,r=`COMPUTER_USE_ROOT=${shellQuote(t.root)}`,i=`COMPUTER_USE_REQUEST='{"action":"health"}' ${n} ${`node ${shellQuote(`${t.driverRoot}/client.mjs`)}`}`;return[`set -euo pipefail`,`mkdir -p ${shellQuote(t.root)}`,`if ! ${i} >/dev/null 2>&1; then`,`  rm -f ${shellQuote(t.driverSocket)}`,`  setsid -f env DISPLAY=:99 XCURSOR_SIZE=32 CUA_DRIVER_RS_TELEMETRY_ENABLED=false CUA_DRIVER_RS_UPDATE_CHECK=false ${n} ${r} node ${shellQuote(`${t.driverRoot}/server.mjs`)} </dev/null > ${shellQuote(`${t.root}/cua-driver.log`)} 2>&1`,`fi`,`for _ in $(seq 1 100); do`,`  ${i} >/dev/null 2>&1 && exit 0`,`  sleep 0.1`,`done`,`tail -n 200 ${shellQuote(`${t.root}/cua-driver.log`)} >&2 || true`,`exit 1`].join(`
+`)}function computerUseDisplayCommand(e){let{root:t}=computerUsePaths(e),n=[xfconfSetCommand(`xsettings`,`/Net/ThemeName`,`string`,`Colloid-Dark`),xfconfSetCommand(`xsettings`,`/Net/PreferDarkTheme`,`bool`,`true`),xfconfSetCommand(`xsettings`,`/Net/IconThemeName`,`string`,`Adwaita`),xfconfSetCommand(`xsettings`,`/Gtk/CursorThemeSize`,`int`,`32`),xfconfSetCommand(`xfwm4`,`/general/theme`,`string`,`Colloid-Dark`),xfconfSetCommand(`xsettings`,`/Gtk/FontName`,`string`,`Geist 10`),xfconfSetCommand(`xsettings`,`/Gtk/MonospaceFontName`,`string`,`GeistMono Nerd Font 10`),xfconfSetCommand(`xfwm4`,`/general/button_layout`,`string`,`CHM|`),xfconfSetCommand(`xfwm4`,`/general/title_alignment`,`string`,`center`),xfconfSetCommand(`xfwm4`,`/general/title_font`,`string`,`Geist Medium 11`),xfconfSetCommand(`xfwm4`,`/general/show_dock_shadow`,`bool`,`false`),xfconfSetCommand(`xfwm4`,`/general/shadow_opacity`,`int`,`35`)];return[`set -euo pipefail`,`command -v Xvfb >/dev/null && command -v xfwm4 >/dev/null || exit 0`,`mkdir -p ${t}`,`if ! xdpyinfo -display :99 >/dev/null 2>&1; then`,`  setsid -f Xvfb :99 -screen 0 1920x1080x24 -ac +extension RANDR > ${t}/xvfb.log 2>&1`,`fi`,`for _ in $(seq 1 50); do`,`  xdpyinfo -display :99 >/dev/null 2>&1 && break`,`  sleep 0.1`,`done`,`xdpyinfo -display :99 >/dev/null`,`dbus_output=$(dbus-launch --sh-syntax)`,`eval "$dbus_output"`,...n,`printf '%s' "$DBUS_SESSION_BUS_ADDRESS" > ${t}/dbus-session-address`,`chmod 0600 ${t}/dbus-session-address`,`setsid -f env DISPLAY=:99 DBUS_SESSION_BUS_ADDRESS="$DBUS_SESSION_BUS_ADDRESS" XCURSOR_SIZE=32 xfsettingsd --replace > ${t}/xfsettingsd.log 2>&1`,`for _ in $(seq 1 50); do`,`  pgrep -f '[x]fsettingsd' >/dev/null && break`,`  sleep 0.1`,`done`,`if ! pgrep -f '[x]fsettingsd' >/dev/null; then cat ${t}/xfsettingsd.log >&2 || true; echo 'xfsettingsd did not start' >&2; exit 1; fi`,`setsid -f env DISPLAY=:99 DBUS_SESSION_BUS_ADDRESS="$DBUS_SESSION_BUS_ADDRESS" XCURSOR_SIZE=32 xfwm4 --replace --compositor=on > ${t}/xfwm4.log 2>&1`,`for _ in $(seq 1 100); do`,`  DISPLAY=:99 xprop -root _NET_SUPPORTING_WM_CHECK 2>/dev/null | grep -Eq 'window id # 0x[1-9a-f]' && break`,`  sleep 0.1`,`done`,`if ! DISPLAY=:99 xprop -root _NET_SUPPORTING_WM_CHECK 2>/dev/null | grep -Eq 'window id # 0x[1-9a-f]'; then`,`  cat ${t}/xfwm4.log >&2 || true`,`  echo 'xfwm4 did not claim the X11 display' >&2`,`  exit 1`,`fi`,`DISPLAY=:99 xsetroot -solid '#000000'`].join(`
+`)}function desktopEnvironmentPrefix(e){let{root:t}=computerUsePaths(e);return`export DISPLAY=:99; export DBUS_SESSION_BUS_ADDRESS="$(cat ${t}/dbus-session-address)"; export XCURSOR_SIZE=32`}function xfconfSetCommand(e,t,n,r){return`DISPLAY=:99 xfconf-query -c ${e} -p ${t} --create -t ${n} -s ${shellQuote(r)}`}function computerUseDesktopSizeCommand(e,t){let n={full_hd:`1920x1080`,large_16_9:`1600x900`,social_16_9:`1280x720`}[t];return[desktopEnvironmentPrefix(e),`if xdotool search --onlyvisible --class firefox-esr >/dev/null 2>&1 || xdotool search --onlyvisible --classname ComputerUseTerminalPrimary >/dev/null 2>&1 || xdotool search --onlyvisible --classname ComputerUseTerminalSecondary >/dev/null 2>&1; then`,`  echo 'desktop size must be selected before launching managed windows' >&2`,`  exit 1`,`fi`,`xrandr --fb ${n}`,`xdpyinfo -display :99 | grep -q 'dimensions: *${n} pixels'`,"xdotool mousemove $(( ${dimensions%x*} / 2 )) $(( ${dimensions#*x} / 2 ))",`xsetroot -solid '#000000'`].join(`
+`)}function computerUseLaunchCommand(e,t){let n=computerUsePaths(e),r=n.root;switch(t.app){case`xterm`:{let i=t.instance??`primary`,a=i===`primary`?`ComputerUseTerminalPrimary`:`ComputerUseTerminalSecondary`,o=i===`primary`?`Terminal 1`:`Terminal 2`,s=`DISPLAY=:99 xdotool search --onlyvisible --classname ${a}`;return[`mkdir -p ${r}`,`printf '%s\\n' ${shellQuote(TERMINAL_XRESOURCES)} > ${r}/Xresources`,`printf '%s\\n' ${shellQuote(`unset PROMPT_COMMAND; unset CI; export TERM=xterm-256color; export PATH='${n.managedBrowserRoot}:'"$PATH"; export PS1='▲  \\W/ '`)} > ${r}/terminal-rc`,desktopEnvironmentPrefix(e),`xrdb -merge ${r}/Xresources`,`if ! ${s} >/dev/null 2>&1; then`,`  setsid -f env DISPLAY=:99 DBUS_SESSION_BUS_ADDRESS="$DBUS_SESSION_BUS_ADDRESS" xterm -name ${a} -title ${shellQuote(o)} -xrm '${a}*background: #0A0A0A' -xrm '${a}*foreground: #bbbbbb' -xrm '${a}*cursorColor: #bbbbbb' -xrm '${a}*highlightColorMode: true' -xrm '${a}*highlightReverse: false' -xrm '${a}*highlightColor: #ffffff' -xrm '${a}*highlightTextColor: #000000' -fa ${shellQuote(`GeistMono Nerd Font`)} -fs 18 -hm -selbg '#ffffff' -selfg '#000000' +bc +sb -e bash --noprofile --rcfile ${r}/terminal-rc -i </dev/null > ${r}/xterm-${i}.log 2>&1`,`fi`,`for _ in $(seq 1 50); do`,`  ${s} >/dev/null 2>&1 && break`,`  sleep 0.1`,`done`,`window=$(${s} | head -n 1)`,`xdotool windowactivate --sync "$window"`,requireWindowDecorationCommand(`"$window"`,`xterm ${i}`),computerUseWindowLayoutCommand(e,`maximized`,`"$window"`)].join(`
+`)}case`firefox`:{let n=`${r}/firefox-profile`,i=`DISPLAY=:99 xdotool search --onlyvisible --class firefox-esr`,a=t.url?[`  window=$(${i} | head -n 1)`,`  previous_title=$(DISPLAY=:99 xdotool getwindowname "$window" 2>/dev/null || true)`,`  DISPLAY=:99 xdotool windowactivate --sync "$window"`,`  DISPLAY=:99 xdotool key --clearmodifiers ctrl+l`,`  DISPLAY=:99 xdotool type --clearmodifiers ${shellQuote(t.url)}`,`  DISPLAY=:99 xdotool key --clearmodifiers Return`]:[],o=t.url?[`window=$(${i} | head -n 1)`,`for _ in $(seq 1 50); do`,`  title=$(DISPLAY=:99 xdotool getwindowname "$window" 2>/dev/null || true)`,'  [[ -n "${title}" && "${title}" != "${previous_title}" ]] && break',`  sleep 0.1`,`done`]:[];return[`mkdir -p ${r} ${n}/chrome`,`printf '%s\n' ${shellQuote(FIREFOX_USER_JS)} > ${n}/user.js`,`printf '%s\n' ${shellQuote(`
+@namespace url("http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul");
+
+/* Demo chrome: native title bar, then back/forward and the address bar. */
+#TabsToolbar,
+#toolbar-menubar,
+#PersonalToolbar,
+#PanelUI-button,
+#fxa-toolbar-menu-button,
+#firefox-view-button,
+#unified-extensions-button,
+#downloads-button,
+#home-button,
+#library-button,
+#nav-bar-overflow-button,
+#identity-box,
+#tracking-protection-icon-container,
+#page-action-buttons {
+  display: none !important;
+}
+
+#main-window {
+  background: #000 !important;
+}
+
+#navigator-toolbox {
+  background: #111 !important;
+  border-radius: 8px 8px 0 0 !important;
+  overflow: hidden !important;
+}
+
+#nav-bar {
+  background: #111 !important;
+  border: 0 !important;
+  box-shadow: none !important;
+  min-height: 42px !important;
+  padding: 4px 8px !important;
+}
+
+/* Firefox paints its rectangular client surface over XFWM's lower corners.
+   Clip the browser content so the black window background forms the radius. */
+#browser,
+#appcontent,
+#tabbrowser-tabbox,
+#tabbrowser-tabpanels {
+  background: #000 !important;
+  border-radius: 0 0 8px 8px !important;
+  overflow: hidden !important;
+}
+
+#urlbar-background {
+  background: #1a1a1a !important;
+  border: 1px solid #333 !important;
+  border-radius: 6px !important;
+  box-shadow: none !important;
+}
+
+#urlbar-input,
+#urlbar-scheme {
+  color: #ededed !important;
+}
+
+#back-button,
+#forward-button {
+  display: flex !important;
+  color: #ededed !important;
+}
+`)} > ${n}/chrome/userChrome.css`,desktopEnvironmentPrefix(e),`if ! ${i} >/dev/null 2>&1; then`,...t.url?[`  previous_title='Mozilla Firefox'`]:[],`  setsid -f env DISPLAY=:99 DBUS_SESSION_BUS_ADDRESS="$DBUS_SESSION_BUS_ADDRESS" GTK_THEME=Colloid-Dark firefox-esr --no-remote --new-instance --profile ${n} ${shellQuote(t.url??`about:blank`)} </dev/null > ${r}/firefox.log 2>&1`,...a.length>0?[`else`,...a]:[],`fi`,`for _ in $(seq 1 100); do`,`  ${i} >/dev/null 2>&1 && break`,`  sleep 0.1`,`done`,`${i} >/dev/null`,...o,`window=$(${i} | head -n 1)`,`DISPLAY=:99 xdotool windowactivate --sync "$window"`,requireWindowDecorationCommand(`"$window"`,`Firefox`),computerUseWindowLayoutCommand(e,`maximized`,`"$window"`)].join(`
+`)}}}function requireWindowDecorationCommand(e,t){return[`for _ in $(seq 1 50); do`,`  DISPLAY=:99 xprop -id ${e} _NET_FRAME_EXTENTS 2>/dev/null | grep -q '=.*,' && break`,`  sleep 0.1`,`done`,`DISPLAY=:99 xprop -id ${e} _NET_FRAME_EXTENTS 2>/dev/null | grep -q '=.*,' || { echo ${shellQuote(`${t} opened without window-manager decorations`)} >&2; exit 1; }`].join(`
+`)}function computerUseFocusCommand(e,t,n=`primary`){let r=t===`firefox`?`xdotool search --onlyvisible --class firefox-esr`:`xdotool search --onlyvisible --classname ${n===`primary`?`ComputerUseTerminalPrimary`:`ComputerUseTerminalSecondary`}`;return[desktopEnvironmentPrefix(e),`window=$(${r} | head -n 1)`,`test -n "$window" || { echo ${shellQuote(`${t} ${n} window is not running`)} >&2; exit 1; }`,`xdotool windowactivate --sync "$window"`].join(`
+`)}function computerUseWindowLayoutCommand(e,t,n=`"$(DISPLAY=:99 xdotool getactivewindow)"`){let r={maximized:{height:`"$usable_height"`,width:`"$usable_width"`,x:`24`,y:`24`},left:{height:`"$usable_height"`,width:`"$left_width"`,x:`24`,y:`24`},right:{height:`"$usable_height"`,width:`"$right_width"`,x:`"$right_x"`,y:`24`}}[t];return[desktopEnvironmentPrefix(e),`dimensions=$(xdpyinfo -display :99 | awk '/dimensions:/{print $2; exit}')`,'screen_width="${dimensions%x*}"','screen_height="${dimensions#*x}"',`usable_width=$((screen_width - 48))`,`usable_height=$((screen_height - 48))`,`left_width=$(((usable_width - 12) / 2))`,`right_x=$((24 + left_width + 12))`,`right_width=$((usable_width - left_width - 12))`,`xdotool windowactivate --sync ${n}`,`xdotool windowmove ${n} ${r.x} ${r.y}`,`xdotool windowsize ${n} ${r.width} ${r.height}`].join(`
+`)}export{computerUseDesktopSizeCommand,computerUseDisplayCommand,computerUseDriverCommand,computerUseDriverRequest,computerUseDriverStartCommand,computerUseFocusCommand,computerUseLaunchCommand,computerUsePaths,computerUseWindowLayoutCommand,recordingPath,screenshotPath};

package/dist/src/extensions/code/extension/lib/connect-authentication.d.ts

@@ -0,0 +1,7 @@
+import { getToken } from "@vercel/connect";
+import type { SandboxSession } from "eve/sandbox";
+import extension from "../extension.ts";
+type ExtensionConfig = typeof extension.config;
+type GetToken = typeof getToken;
+export declare function authenticateTurn(config: ExtensionConfig, getSandbox: () => Promise<SandboxSession>, getConnectToken?: GetToken): Promise<void>;
+export {};

package/dist/src/extensions/code/extension/lib/connect-authentication.js

@@ -0,0 +1 @@
+import"../extension.js";import{ConnectError,ConnectorInstallationRequiredError,getToken}from"../../../../node_modules/.pnpm/@vercel_connect@2.2.0_@ai-sdk_mcp@2.0.52_zod@4.5.4__@auth_core@0.41.2_@chat-adapter_sla_37d5e4f23f0f03cba2e0819e67e81b38/node_modules/@vercel/connect/dist/token.js";import"../../../../node_modules/.pnpm/@vercel_connect@2.2.0_@ai-sdk_mcp@2.0.52_zod@4.5.4__@auth_core@0.41.2_@chat-adapter_sla_37d5e4f23f0f03cba2e0819e67e81b38/node_modules/@vercel/connect/dist/index.js";import{authenticateVercel}from"./credentials.js";async function authenticateTurn(e,t,n=getToken){if(e.vercel===void 0)return;let r=await t(),i=await resolveToken(e.vercel.connector,{subject:{type:`app`}},n);await authenticateVercel(r,{token:i,delivery:e.vercel.delivery,broker:e.broker})}async function resolveToken(e,t,n){try{let r=await n(e,t);if(r.length===0)throw Error(`Connect returned an empty token`);return r}catch(t){let n=t instanceof ConnectorInstallationRequiredError?`connector installation is required`:t instanceof ConnectError?`Connect rejected the token request`:`Connect token request failed`,r=t instanceof Error?t.message:String(t);throw Error(`${n} for ${JSON.stringify(e)}: ${r}`,{cause:t})}}export{authenticateTurn};

package/dist/src/extensions/code/extension/lib/credentials.d.ts

@@ -0,0 +1,13 @@
+import type { SandboxSession } from "eve/sandbox";
+export interface BrokeredCredentialOptions {
+    readonly token: string;
+    /**
+     * `firewall` keeps the token outside the sandbox. `command` writes it into
+     * git config or the CLI environment for backends without network policies.
+     */
+    readonly delivery?: "firewall" | "command";
+    /** Consumer-owned network-policy merge for hosts and their injected headers. */
+    readonly broker?: (sandbox: SandboxSession, rules: Record<string, Record<string, string>>) => Promise<void>;
+}
+export declare function authenticateGitHub(sandbox: SandboxSession, options: BrokeredCredentialOptions): Promise<void>;
+export declare function authenticateVercel(sandbox: SandboxSession, options: BrokeredCredentialOptions): Promise<void>;

package/dist/src/extensions/code/extension/lib/credentials.js

@@ -0,0 +1,3 @@
+import{toolingPaths}from"./tooling.js";const headersBySandbox=new WeakMap,policyQueues=new WeakMap,environmentQueues=new WeakMap;async function authenticateGitHub(e,t){let n=`Basic ${Buffer.from(`x-access-token:${t.token}`).toString(`base64`)}`;if(t.delivery===`command`){let r=await e.run({command:`git config --global http.https://github.com/.extraheader ${shellQuote(`Authorization: ${n}`)}`});if(r.exitCode!==0)throw Error(`Failed to configure GitHub authentication for git: ${r.stderr}`);await writeToolEnvironment(e,`GH_TOKEN`,t.token);return}await brokerRules(e,{"github.com":{authorization:n},"api.github.com":{authorization:n}},t.broker)}async function authenticateVercel(e,t){if(t.delivery===`command`){await writeToolEnvironment(e,`VERCEL_TOKEN`,t.token);return}let n={authorization:`Bearer ${t.token}`};await brokerRules(e,{"api.vercel.com":n,"vercel.com":n},t.broker)}async function brokerRules(e,t,n){if(n!==void 0){await n(e,t);return}if(!hasMutableNetworkPolicy(e))throw Error(`eve-code firewall credential delivery requires a sandbox provider with mutable network policy (setNetworkPolicy). Use delivery: "command" or pass a broker callback.`);let r=headersBySandbox.get(e)??new Map;for(let[e,n]of Object.entries(t))r.set(e,{...r.get(e),...n});headersBySandbox.set(e,r);let i=(policyQueues.get(e)??Promise.resolve()).then(async()=>{let t={"*":[]};for(let[e,n]of r)t[e]=[{transform:[{headers:n}]}];await e.setNetworkPolicy({allow:t})});policyQueues.set(e,i);try{await i}finally{policyQueues.get(e)===i&&policyQueues.delete(e)}}async function writeToolEnvironment(e,t,n){let r=(environmentQueues.get(e)??Promise.resolve()).then(async()=>{let r=toolingPaths(e).env,i=(await e.readTextFile({path:r})??``).split(`
+`).filter(e=>e.length>0&&!e.startsWith(`export ${t}=`));i.push(`export ${t}=${shellQuote(n)}`),await e.writeTextFile({path:r,content:`${i.join(`
+`)}\n`});let a=await e.run({command:`chmod 600 ${shellQuote(r)}`});if(a.exitCode!==0)throw Error(`Failed to secure eve-code CLI environment: ${a.stderr}`)});environmentQueues.set(e,r);try{await r}finally{environmentQueues.get(e)===r&&environmentQueues.delete(e)}}function hasMutableNetworkPolicy(e){return`setNetworkPolicy`in e}function shellQuote(e){return`'${e.replaceAll(`'`,`'"'"'`)}'`}export{authenticateGitHub,authenticateVercel};

package/dist/src/extensions/code/extension/lib/diagnostics.d.ts

@@ -0,0 +1,30 @@
+import type { SandboxSession } from "eve/sandbox";
+export interface PostEditDiagnostic {
+    readonly check: "git-diff" | "syntax" | "typescript" | "whitespace";
+    readonly code?: number;
+    readonly column?: number;
+    readonly line?: number;
+    readonly message: string;
+    readonly path?: string;
+}
+type DiagnosticsSandbox = Pick<SandboxSession, "readTextFile" | "resolvePath" | "run">;
+export declare function runPostEditDiagnostics(input: {
+    readonly addedPaths?: readonly string[];
+    readonly changedPaths: readonly string[];
+    readonly deletedPaths: readonly string[];
+    readonly repoRoot: string;
+    readonly sandbox: DiagnosticsSandbox;
+}): Promise<PostEditDiagnostic[]>;
+/**
+ * Type diagnostics through the worker installed by `installCodeTooling`.
+ * Silently contributes nothing when the worker is absent, so consumers that
+ * skip the tooling still get every other check.
+ */
+export declare function runTypeScriptDiagnostics(input: {
+    readonly paths: readonly string[];
+    readonly repoRoot: string;
+    readonly sandbox: DiagnosticsSandbox;
+}): Promise<PostEditDiagnostic[]>;
+/** Drop type diagnostics that already existed before the patch, matched by path, code, and message. */
+export declare function onlyNewTypeDiagnostics(diagnostics: readonly PostEditDiagnostic[], baseline: readonly PostEditDiagnostic[]): PostEditDiagnostic[];
+export {};

package/dist/src/extensions/code/extension/lib/diagnostics.js

@@ -0,0 +1,6 @@
+import{shellQuote}from"./shell.js";import{toolingPaths}from"./tooling.js";import{extname}from"node:path";async function runPostEditDiagnostics(e){let t=[...new Set([...e.changedPaths,...e.deletedPaths])],n=[];if(t.length>0)try{let r=await e.sandbox.run({command:`git -C ${shellQuote(e.repoRoot)} diff --check -- ${t.map(shellQuote).join(` `)}`});r.exitCode!==0&&n.push({check:`git-diff`,message:boundedDiagnostic(r.stderr||r.stdout||`git diff --check failed`)})}catch(e){n.push({check:`git-diff`,message:`Could not run git diff --check: ${errorMessage(e)}`})}for(let t of e.addedPaths??[])try{let r=await e.sandbox.readTextFile({path:`${e.repoRoot}/${t}`});if(r===null)continue;let i=whitespaceIssues(r);i.length>0&&n.push({check:`whitespace`,path:t,message:i.join(`
+`)})}catch(e){n.push({check:`whitespace`,path:t,message:`Could not inspect added file: ${errorMessage(e)}`})}for(let t=0;t<e.changedPaths.length;t+=8){let r=await Promise.all(e.changedPaths.slice(t,t+8).map(async t=>{let n=syntaxCommand(e.repoRoot,t);if(n===null)return null;try{let r=await e.sandbox.run({command:n});if(r.exitCode===0)return null;let i=r.stderr||r.stdout||`syntax check failed`;return i.includes(`ERR_UNSUPPORTED_TYPESCRIPT_SYNTAX`)?null:{check:`syntax`,path:t,message:boundedDiagnostic(i)}}catch(e){return{check:`syntax`,path:t,message:`Could not run syntax check: ${errorMessage(e)}`}}}));for(let e of r)e!==null&&n.push(e)}return n.push(...await runTypeScriptDiagnostics({paths:e.changedPaths,repoRoot:e.repoRoot,sandbox:e.sandbox})),n}async function runTypeScriptDiagnostics(e){let t=e.paths.filter(isTypeScriptPath);if(t.length===0)return[];let n=toolingPaths(e.sandbox);if(await e.sandbox.readTextFile({path:n.worker})===null)return[];let r=[];for(let i=0;i<t.length;i+=4){let a=await Promise.all(t.slice(i,i+4).map(async t=>{let r=Buffer.from(JSON.stringify({filePath:t,repoRoot:e.repoRoot,typescriptPath:n.typescriptModule}),`utf8`).toString(`base64`);try{let i=await e.sandbox.run({command:`node ${shellQuote(n.worker)}`,env:{EVE_CODE_DIAGNOSTICS_REQUEST:r}});return i.exitCode===0?(JSON.parse(i.stdout).diagnostics??[]).map(e=>({check:`typescript`,code:e.code,column:e.column,line:e.line,message:e.message,path:t})):[{check:`typescript`,path:t,message:boundedDiagnostic(i.stderr||i.stdout||`TypeScript diagnostics failed`)}]}catch(e){return[{check:`typescript`,path:t,message:`Could not run TypeScript diagnostics: ${errorMessage(e)}`}]}}));r.push(...a.flat())}return r}function onlyNewTypeDiagnostics(e,t){let n=new Map;for(let e of t){if(e.check!==`typescript`||e.code===void 0)continue;let t=typeDiagnosticKey(e);n.set(t,(n.get(t)??0)+1)}return e.filter(e=>{if(e.check!==`typescript`||e.code===void 0)return!0;let t=typeDiagnosticKey(e),r=n.get(t)??0;return r===0||(n.set(t,r-1),!1)})}function typeDiagnosticKey(e){return`${e.path??``}\0${e.code??``}\0${e.message}`}function isTypeScriptPath(e){return/\.(?:cts|mts|ts|tsx)$/u.test(e)}function syntaxCommand(e,t){let n=shellQuote(`${e}/${t}`);switch(extname(t).toLowerCase()){case`.cjs`:case`.js`:case`.mjs`:return`node --check ${n}`;case`.cts`:case`.mts`:case`.ts`:return`node --experimental-strip-types --check ${n}`;case`.json`:return`node -e ${shellQuote(`JSON.parse(require('node:fs').readFileSync(process.argv[1], 'utf8'))`)} ${n}`;case`.bash`:case`.sh`:return`bash -n ${n}`;case`.py`:return`if command -v python3 >/dev/null 2>&1; then python3 -c ${shellQuote(`import ast,pathlib,sys; ast.parse(pathlib.Path(sys.argv[1]).read_text())`)} ${n}; fi`;default:return null}}function boundedDiagnostic(e){let t=e.trim().split(`
+`),n=t.slice(-100);for(;n.length>1&&Buffer.byteLength(n.join(`
+`),`utf8`)>8192;)n=n.slice(1);let r=t.length-n.length;return r>0?`[${r} earlier lines omitted]\n${n.join(`
+`)}`:n.join(`
+`)}function whitespaceIssues(e){let t=[];for(let[n,r]of e.split(/\r?\n/u).entries())if(/^(?:<<<<<<<|=======|>>>>>>>)(?: |$)/u.test(r)?t.push(`line ${n+1}: unresolved conflict marker`):/[\t ]+$/u.test(r)&&t.push(`line ${n+1}: trailing whitespace`),t.length===20)break;return t}function errorMessage(e){return e instanceof Error?e.message:String(e)}export{onlyNewTypeDiagnostics,runPostEditDiagnostics,runTypeScriptDiagnostics};

package/dist/src/extensions/code/extension/lib/generated-paths.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Generated-file detection for repository edit tools.
+ *
+ * Models otherwise spend minutes generating lockfile hunks token by token.
+ * Generated files must change through the deterministic command that
+ * generates them, never through model-authored patches.
+ */
+export interface GeneratedPathMatch {
+    readonly path: string;
+    readonly label: string;
+    readonly remedy: string;
+}
+/** Paths named by `*** Add File:` / `*** Update File:` / `*** Delete File:` / `*** Move to:` headers. */
+export declare function patchTargetPaths(patchText: string): readonly string[];
+/** Generated files targeted by the patch, with the deterministic remedy for each. */
+export declare function findGeneratedPatchTargets(patchText: string): readonly GeneratedPathMatch[];
+/** One actionable error message covering every generated target in the patch. */
+export declare function generatedPatchTargetsError(matches: readonly GeneratedPathMatch[]): string;

package/dist/src/extensions/code/extension/lib/generated-paths.js

@@ -0,0 +1,2 @@
+const GENERATED_PATH_RULES=[{test:e=>/(^|\/)(pnpm-lock\.yaml|package-lock\.json|yarn\.lock|bun\.lockb?)$/u.test(e),label:`package manager lockfile`,remedy:"run the package manager in the sandbox (for example `pnpm install`) so it regenerates the lockfile"},{test:e=>/(^|\/)(dist|\.next|\.eve|coverage)\//u.test(e),label:`build output`,remedy:`run the build command that produces this directory`},{test:e=>/(^|\/)vendor-compiled\//u.test(e),label:`vendored compiled asset`,remedy:`run the repository's vendoring script that regenerates this directory`},{test:e=>/(^|\/)node_modules\//u.test(e),label:`installed dependency`,remedy:`change the dependency declaration and reinstall instead`}];function patchTargetPaths(e){let t=[];for(let n of e.matchAll(/^\*\*\* (?:Add File|Update File|Delete File|Move to): (.+)$/gmu)){let e=n[1]?.trim();e!==void 0&&e.length>0&&t.push(e)}return t}function findGeneratedPatchTargets(e){let t=[];for(let n of patchTargetPaths(e)){let e=GENERATED_PATH_RULES.find(e=>e.test(n));e!==void 0&&t.push({label:e.label,path:n,remedy:e.remedy})}return t}function generatedPatchTargetsError(e){return[`This patch targets generated files, which must not be edited through model-authored patches:`,...e.map(e=>`- ${e.path} (${e.label}): ${e.remedy}`),`Use the deterministic operation instead. Preserve existing user changes; if regeneration would overwrite them, stop and ask for explicit authorization.`].join(`
+`)}export{findGeneratedPatchTargets,generatedPatchTargetsError,patchTargetPaths};

package/dist/src/extensions/code/extension/lib/github-shell-schema.d.ts

@@ -0,0 +1,11 @@
+import { z } from "zod";
+export declare const githubShellInputSchema: z.ZodObject<{
+    command: z.ZodString;
+    permissions: z.ZodArray<z.ZodObject<{
+        provider: z.ZodLiteral<"github">;
+        repositories: z.ZodArray<z.ZodString>;
+        access: z.ZodLiteral<"write">;
+    }, z.core.$strip>>;
+    description: z.ZodString;
+    workingDirectory: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;

package/dist/src/extensions/code/extension/lib/github-shell-schema.js

@@ -0,0 +1 @@
+import{z}from"#compiled/zod/index.js";const permissionSchema=z.object({provider:z.literal(`github`),repositories:z.array(z.string().regex(/^[A-Za-z0-9-]+\/[A-Za-z0-9._-]+$/u)).length(1),access:z.literal(`write`)}),githubShellInputSchema=z.object({command:z.string().trim().min(1).max(2e4),permissions:z.array(permissionSchema).length(1),description:z.string().trim().min(1).max(500).describe(`the concrete GitHub-side result expected from this command`),workingDirectory:z.string().trim().min(1).max(1e3).optional().describe(`sandbox workspace directory; defaults to /workspace`)});export{githubShellInputSchema};

package/dist/src/extensions/code/extension/lib/github-shell.d.ts

@@ -0,0 +1,53 @@
+import { getToken } from "@vercel/connect";
+import type { SandboxSession } from "eve/sandbox";
+export interface GitHubPermission {
+    readonly access: "write";
+    readonly provider: "github";
+    readonly repositories: readonly string[];
+}
+export interface GitHubShellInput {
+    readonly command: string;
+    readonly description: string;
+    readonly permissions: readonly GitHubPermission[];
+    readonly workingDirectory?: string;
+}
+export interface GitHubShellOutput {
+    readonly exitCode: number;
+    readonly stderr: string;
+    readonly stdout: string;
+    readonly truncated: boolean;
+}
+interface GitHubConfig {
+    readonly broker: (sandbox: SandboxSession, rules: Readonly<Record<string, readonly GitHubLeaseRule[]>> | null) => Promise<void>;
+    readonly connector: string;
+    readonly org: string;
+}
+export interface GitHubLeaseRule {
+    readonly match?: {
+        readonly headers?: readonly {
+            readonly key?: {
+                readonly exact: string;
+            };
+            readonly value?: {
+                readonly exact?: string;
+                readonly regex?: string;
+            };
+        }[];
+    };
+    readonly transform: readonly {
+        readonly headers: Readonly<Record<string, string>>;
+    }[];
+}
+interface GitHubShellDependencies {
+    readonly getConnectToken?: typeof getToken;
+    readonly getSandbox: () => Promise<SandboxSession>;
+    /** Serializes credential leases per eve session; every `ctx.getSandbox()` call returns a new handle. */
+    readonly sessionId: string;
+}
+export declare function githubShellApproval(input: GitHubShellInput | undefined): "not-applicable" | {
+    type: "denied";
+    reason: string;
+};
+export declare function executeGitHubShell(input: GitHubShellInput, config: GitHubConfig | undefined, dependencies: GitHubShellDependencies): Promise<GitHubShellOutput>;
+export declare function parseCommand(command: string): string[];
+export {};

package/dist/src/extensions/code/extension/lib/github-shell.js

@@ -0,0 +1 @@
+import{getToken}from"../../../../node_modules/.pnpm/@vercel_connect@2.2.0_@ai-sdk_mcp@2.0.52_zod@4.5.4__@auth_core@0.41.2_@chat-adapter_sla_37d5e4f23f0f03cba2e0819e67e81b38/node_modules/@vercel/connect/dist/token.js";import"../../../../node_modules/.pnpm/@vercel_connect@2.2.0_@ai-sdk_mcp@2.0.52_zod@4.5.4__@auth_core@0.41.2_@chat-adapter_sla_37d5e4f23f0f03cba2e0819e67e81b38/node_modules/@vercel/connect/dist/index.js";import{shellQuote}from"./shell.js";import{toolingPaths}from"./tooling.js";import{validateRepositoryRoot}from"./repository-root.js";import{posix}from"node:path";const MAX_OUTPUT_BYTES=1e5,leaseQueues=new Map,ALLOWED_GIT_REMOTE_COMMANDS=new Set([`fetch`,`ls-remote`,`pull`,`push`]);function githubShellApproval(e){if(!e)return`not-applicable`;try{return validateGitHubShellInput(e),`not-applicable`}catch(e){return{type:`denied`,reason:e instanceof Error?e.message:`Invalid GitHub command.`}}}async function executeGitHubShell(e,t,n){if(!t)throw Error(`GitHub command access is not configured for this agent.`);let r=validateGitHubShellInput(e),i=await n.getSandbox(),a=resolveWorkingDirectory(i,e.workingDirectory);(r[0]===`git`||r[0]===`gh-signed-commit`)&&(a=await validateRepositoryRoot(i,a));let o=e.permissions[0].repositories,s=await assertCommandTargets(r,o,a,i),c=repositoryNames(o,t.org),l={authorizationDetails:[{type:`github_app_installation`,org:t.org,repositories:c}],subject:{type:`app`}},u=await(n.getConnectToken??getToken)(t.connector,l);if(!u)throw Error(`Connect returned an empty token for ${JSON.stringify(t.connector)}.`);let d=executablePath(r[0],i),f=s?[`-c`,`protocol.allow=never`,`-c`,`protocol.https.allow=always`,r[1],`https://github.com/${s}.git`,...r.slice(3)]:r.slice(1),p=`cd ${shellQuote(a)} && exec ${shellQuote(d)} ${f.map(shellQuote).join(` `)}`,m=`Basic ${Buffer.from(`x-access-token:${u}`).toString(`base64`)}`,h=crypto.randomUUID(),g=`eve-github-${h}`,_=`/tmp/eve-code-gh-${h}`,v=`Basic ${Buffer.from(`x-access-token:${g}`).toString(`base64`)}`,y;try{y=await withGitHubCredentialLease(i,n.sessionId,{authorization:m,placeholder:g,placeholderAuthorization:v,token:u},()=>{let e={GH_CONFIG_DIR:_,GH_PROMPT_DISABLED:`1`};return r[0]!==`git`&&(e.GH_TOKEN=g),e.GIT_CONFIG_COUNT=`2`,e.GIT_CONFIG_KEY_0=`http.https://github.com/.extraheader`,e.GIT_CONFIG_VALUE_0=`Authorization: ${v}`,e.GIT_CONFIG_KEY_1=`core.hooksPath`,e.GIT_CONFIG_VALUE_1=`/dev/null`,e.GIT_TERMINAL_PROMPT=`0`,e.PATH=`/usr/local/bin:/usr/bin:/bin`,i.run({command:p,env:e})},t.broker)}finally{await i.removePath({path:_,recursive:!0,force:!0})}let b=sanitizeOutput(y.stdout,u,m),x=sanitizeOutput(y.stderr,u,m);return{exitCode:y.exitCode,stdout:b.value,stderr:x.value,truncated:b.truncated||x.truncated}}async function withGitHubCredentialLease(e,t,n,r,i){let a=leaseQueues.get(t)??Promise.resolve(),o,s=new Promise(e=>{o=e}),c=a.then(()=>s);leaseQueues.set(t,c),await a;try{return await i(e,{"api.github.com":[{match:{headers:[{key:{exact:`authorization`},value:{regex:`^(?:token|Bearer) ${n.placeholder}$`}}]},transform:[{headers:{authorization:`Bearer ${n.token}`}}]}],"github.com":[{match:{headers:[{key:{exact:`authorization`},value:{exact:n.placeholderAuthorization}}]},transform:[{headers:{authorization:n.authorization}}]}]}),await r()}finally{try{await i(e,null)}finally{o(),leaseQueues.get(t)===c&&leaseQueues.delete(t)}}}function parseCommand(e){let t=e.trim();if(!t)throw Error(`GitHub command must not be empty.`);let n=[],r=``,i=null,a=!1,o=!1;for(let e of t){if(a){r+=e,a=!1,o=!0;continue}if(e===`\\`&&i!==`single`){a=!0,o=!0;continue}if(i===`single`){e===`'`?i=null:r+=e;continue}if(i===`double`){if(e===`"`)i=null;else if(e===`$`||e==="`")throw unsupportedSyntax();else r+=e;continue}if(e===`'`)i=`single`,o=!0;else if(e===`"`)i=`double`,o=!0;else if(/\s/u.test(e))o&&=(n.push(r),r=``,!1);else if(";&|<>$`(){}".includes(e))throw unsupportedSyntax();else r+=e,o=!0}if(a||i)throw Error(`GitHub command contains an unfinished quote or escape.`);if(o&&n.push(r),n.length===0)throw Error(`GitHub command must not be empty.`);return n}function validateGitHubShellInput(e){let t=parseCommand(e.command),n=e.permissions[0];if(e.permissions.length!==1||n?.provider!==`github`)throw Error(`Exactly one GitHub permission is required.`);if(n.access!==`write`)throw Error(`GitHub App commands require explicit write-capable access.`);if(!e.description.trim())throw Error(`description must describe the intended result.`);let[r,i]=t;if(r===`gh`){if(!i)throw Error(`A gh subcommand is required.`)}else if(r===`git`){if(!i||!ALLOWED_GIT_REMOTE_COMMANDS.has(i))throw Error(`Authenticated git supports only fetch, ls-remote, pull, and push; clone with gh repo clone.`)}else if(r!==`gh-signed-commit`)throw Error(`GitHub commands must use gh, an authenticated git remote command, or gh-signed-commit.`);return t}async function assertCommandTargets(e,t,n,r){let i=new Set(t.map(e=>e.toLowerCase())),a,o;if(e[0]===`git`){if(e[2]!==`origin`)throw Error(`Authenticated git commands must use the validated origin remote.`);let t=e[1]===`push`,i=await r.run({command:`cd ${shellQuote(n)} && git remote get-url ${t?`--push `:``}origin`,env:{GIT_TERMINAL_PROMPT:`0`,PATH:`/usr/bin:/bin`}});if(i.exitCode!==0)throw Error(`Could not resolve the origin GitHub repository.`);a=repositoryFromRemote(i.stdout.trim()),o=[a]}else if(e[0]===`gh-signed-commit`){if(o=repoFlagTargets(e.slice(1)),o.length===0)throw Error(`gh-signed-commit requires an explicit --repo owner/repository target.`)}else o=repoFlagTargets(e.slice(1)),e[1]===`repo`&&(e[2]===`clone`||e[2]===`view`||e[2]===`fork`)&&e[3]&&!e[3].startsWith(`-`)&&o.push(canonicalRepository(e[3]));for(let e of o)if(!i.has(e.toLowerCase()))throw Error(`Command target ${JSON.stringify(e)} is not in the declared repositories.`);return a}function repoFlagTargets(e){let t=[];for(let n=0;n<e.length;n+=1){let r=e[n];if(r===`--repo`||r===`-R`){let i=e[n+1];if(!i)throw Error(`${r} requires an owner/repository value.`);t.push(canonicalRepository(i)),n+=1}else r?.startsWith(`--repo=`)&&t.push(canonicalRepository(r.slice(7)))}return t}function repositoryFromRemote(e){let t=/^https:\/\/github\.com\/([^/]+\/[^/]+?)(?:\.git)?$/iu.exec(e);if(t?.[1])return canonicalRepository(t[1]);let n=/^git@github\.com:([^/]+\/[^/]+?)(?:\.git)?$/iu.exec(e);if(n?.[1])return canonicalRepository(n[1]);throw Error(`The origin remote is not a canonical GitHub repository URL.`)}function canonicalRepository(e){let t=e.replace(/\.git$/iu,``);if(!/^[A-Za-z0-9-]+\/[A-Za-z0-9._-]+$/u.test(t))throw Error(`Invalid GitHub repository ${JSON.stringify(e)}.`);return t}function repositoryNames(e,t){if(e.length!==1)throw Error(`Exactly one GitHub repository is required.`);let n=new Set;for(let r of e){let e=/^([A-Za-z0-9-]+)\/([A-Za-z0-9._-]+)$/u.exec(r);if(!e)throw Error(`Invalid GitHub repository ${JSON.stringify(r)}.`);if(e[1]?.toLowerCase()!==t.toLowerCase())throw Error(`Repository ${JSON.stringify(r)} is outside ${t}.`);n.add(e[2])}if(n.size!==1)throw Error(`Exactly one GitHub repository is required.`);return[...n]}function executablePath(e,t){return e===`gh`?toolingPaths(t).ghReal:e===`gh-signed-commit`?toolingPaths(t).trustedSignedCommit:`git`}function resolveWorkingDirectory(e,t){let n=posix.resolve(`/`,e.resolvePath(``)),r=posix.resolve(`/`,e.resolvePath(t?.trim()||``));if(r!==n&&!r.startsWith(`${n}/`))throw Error(`GitHub command workingDirectory must stay inside the sandbox workspace.`);return r}function sanitizeOutput(e,t,n){let r=e.replaceAll(t,`[redacted]`).replaceAll(n,`[redacted]`);return Buffer.byteLength(r)<=MAX_OUTPUT_BYTES?{value:r,truncated:!1}:{value:`[output truncated: showing final ${MAX_OUTPUT_BYTES} bytes]\n${Buffer.from(r).subarray(-1e5).toString()}`,truncated:!0}}function unsupportedSyntax(){return Error(`GitHub commands support argv syntax only, not pipes, redirects, substitutions, or shell operators.`)}export{executeGitHubShell,githubShellApproval,parseCommand};

package/dist/src/extensions/code/extension/lib/grep-search.d.ts

@@ -0,0 +1,61 @@
+export declare const DEFAULT_GREP_LIMIT = 50;
+export declare const MAX_GREP_LIMIT = 200;
+export declare const MAX_GREP_COMMAND_BYTES: number;
+export declare const MAX_GREP_LINE_BYTES: number;
+export declare const MAX_GREP_RETURN_BYTES: number;
+export declare const GREP_OUTPUT_MODES: readonly ["files_with_matches", "content", "count"];
+export type GrepOutputMode = (typeof GREP_OUTPUT_MODES)[number];
+export interface GrepCommandInput {
+    readonly contextLines: number;
+    readonly glob: string | undefined;
+    readonly ignoreCase: boolean;
+    readonly limit: number;
+    readonly literal: boolean;
+    readonly outputMode: GrepOutputMode;
+    readonly path: string;
+    readonly pattern: string;
+}
+export interface GrepSearchResult {
+    readonly content: string;
+    readonly matchCount: number;
+    readonly outputMode: GrepOutputMode;
+    readonly path: string;
+    readonly truncated: boolean;
+}
+export interface GrepSandbox {
+    resolvePath(path: string): string;
+    run(input: {
+        abortSignal?: AbortSignal;
+        command: string;
+    }): PromiseLike<{
+        exitCode: number;
+        stderr: string;
+        stdout: string;
+    }>;
+}
+export interface GrepToolInput {
+    readonly context?: number;
+    readonly glob?: string;
+    readonly ignoreCase?: boolean;
+    readonly limit?: number;
+    readonly literal?: boolean;
+    readonly outputMode?: GrepOutputMode;
+    readonly path?: string;
+    readonly pattern: string;
+}
+/** Identifiers are faster as fixed strings. Regex syntax keeps the regex engine. */
+export declare function shouldUseFixedStrings(pattern: string, literal: boolean | undefined): boolean;
+export declare function effectiveOutputMode(outputMode: GrepOutputMode | undefined): GrepOutputMode;
+export declare function effectiveLimit(limit: number | undefined): number;
+export declare function assertWorkspacePath(resolved: string, requested?: string): string;
+export declare function executeGrepSearch(input: GrepToolInput, sandbox: GrepSandbox, abortSignal?: AbortSignal): Promise<GrepSearchResult>;
+export declare function buildSearchCommand(input: GrepCommandInput): string;
+export declare function buildRipgrepCommand(input: GrepCommandInput): string;
+export declare function buildPosixGrepCommand(input: GrepCommandInput): string;
+export declare function processGrepOutput(input: {
+    readonly commandTruncated?: boolean;
+    readonly limit: number;
+    readonly outputMode: GrepOutputMode;
+    readonly path: string;
+    readonly stdout: string;
+}): GrepSearchResult;

package/dist/src/extensions/code/extension/lib/grep-search.js

@@ -0,0 +1,6 @@
+import{shellQuote}from"./shell.js";const DEFAULT_GREP_LIMIT=50,MAX_GREP_LIMIT=200,MAX_GREP_COMMAND_BYTES=262144,MAX_GREP_LINE_BYTES=8192,MAX_GREP_RETURN_BYTES=65536,REGEX_META=/[\\^$.*+?()[\]{}|]/u,GREP_OUTPUT_MODES=[`files_with_matches`,`content`,`count`];function shouldUseFixedStrings(e,t){return t===!0||t!==!1&&!REGEX_META.test(e)}function effectiveOutputMode(e){return e??`files_with_matches`}function effectiveLimit(e){return Math.min(Math.max(1,e??50),200)}function assertWorkspacePath(e,t){if(t!==void 0&&t.split(/[\\/]/u).includes(`..`))throw Error(`grep path must not contain '..'`);if(e!==`/workspace`&&!e.startsWith(`/workspace/`))throw Error(`grep path must stay under /workspace: ${e}`);if(e.split(`/`).includes(`..`))throw Error(`grep path must not contain '..'`);return e}async function executeGrepSearch(e,t,n){let r=assertWorkspacePath(t.resolvePath(e.path??`/workspace`),e.path),i=await sandboxRealPath(t,t.resolvePath(``),`sandbox workspace`,n),a=await sandboxRealPath(t,r,`grep path`,n);assertRealPathWithinWorkspace(a,i);let o=effectiveOutputMode(e.outputMode),s=effectiveLimit(e.limit),c=buildSearchCommand({contextLines:e.context??0,glob:e.glob,ignoreCase:e.ignoreCase===!0,limit:s,literal:shouldUseFixedStrings(e.pattern,e.literal),outputMode:o,path:a,pattern:e.pattern}),l=await t.run({abortSignal:n,command:c}),u=truncateUtf8(l.stdout,MAX_GREP_COMMAND_BYTES),d=u.truncated;if(l.exitCode!==0&&l.exitCode!==1||l.exitCode===1&&l.stderr.trim().length>0){let e=l.stderr.trim()||u.value.trim()||`no command output`;throw Error(`grep failed (exit ${l.exitCode}): ${truncateUtf8(e,MAX_GREP_LINE_BYTES).value}`)}return processGrepOutput({commandTruncated:d,limit:s,outputMode:o,path:r,stdout:u.value})}async function sandboxRealPath(e,t,n,r){let i=await e.run({abortSignal:r,command:`realpath -z -- ${shellQuote(t)}`});if(i.exitCode!==0){let e=i.stderr.trim()||i.stdout.trim()||`no command output`;throw Error(`${n} could not be resolved: ${truncateUtf8(e,MAX_GREP_LINE_BYTES).value}`)}let a=i.stdout.endsWith(`\0`)?i.stdout.slice(0,-1):i.stdout;if(a.length===0||a.includes(`\0`))throw Error(`${n} returned an invalid realpath`);return a}function assertRealPathWithinWorkspace(e,t){if(e!==t&&!e.startsWith(`${t}/`))throw Error(`grep path resolves outside /workspace: ${e}`)}function buildSearchCommand(e){return[`set -o pipefail`,`{`,`  if command -v rg >/dev/null 2>&1; then`,`    ${buildRipgrepCommand(e)}`,`  else`,`    ${buildPosixGrepCommand(e)}`,`  fi`,`} 2>&1 | head -c 262145`,"search_status=${PIPESTATUS[0]}",`if [ "$search_status" -eq 141 ]; then exit 0; fi`,`exit "$search_status"`].join(`
+`)}function buildRipgrepCommand(e){let t=[`rg`,`--color=never`,`--hidden`,`--glob`,shellQuote(`!.git/*`)];switch(e.ignoreCase&&t.push(`--ignore-case`),e.literal&&t.push(`--fixed-strings`),e.glob!==void 0&&t.push(`--glob`,shellQuote(e.glob)),e.outputMode){case`files_with_matches`:t.push(`--files-with-matches`,`--max-count`,`1`);break;case`count`:t.push(`--count`);break;case`content`:t.push(`--line-number`,`--with-filename`,`--null`),e.contextLines>0&&t.push(`--context`,String(e.contextLines)),t.push(`--max-count`,String(e.limit))}return t.push(`--`,shellQuote(e.pattern),shellQuote(e.path)),t.join(` `)}function buildPosixGrepCommand(e){let t=[`grep`,`-r`,`--exclude-dir=.git`];switch(e.ignoreCase&&t.push(`-i`),e.literal?t.push(`-F`):t.push(`-E`),e.glob!==void 0&&t.push(`--include=${shellQuote(e.glob)}`),e.outputMode){case`files_with_matches`:t.push(`-l`);break;case`count`:t.push(`-c`);break;case`content`:t.push(`-n`,`-H`,`-Z`),e.contextLines>0&&t.push(`-C`,String(e.contextLines)),t.push(`-m`,String(e.limit))}return t.push(`-e`,shellQuote(e.pattern),shellQuote(e.path)),t.join(` `)}function processGrepOutput(e){let t=e.stdout.split(`
+`),n=[],r=`
+
+[Output truncated. Narrow path or glob, or lower context.]`,i=MAX_GREP_RETURN_BYTES-Buffer.byteLength(r),a=0,o=0,s=0,c=e.commandTruncated===!0,appendLine=e=>{let t=Buffer.byteLength(e)+(n.length===0?0:1);return a+t>i?!1:(n.push(e),a+=t,!0)};for(let r=0;r<t.length;r+=1){let i=t[r]??``;if(i.length===0&&r===t.length-1)continue;if(i===`--`){if(n.length>0&&!appendLine(i)){c=!0;break}continue}let a=i,l=e.outputMode!==`content`;if(e.outputMode===`content`){let e=normalizeContentLine(i);a=e.line,l=e.isMatch}let u=0;if(e.outputMode===`count`&&(u=parseCountLine(a),u===0))continue;if(s>=e.limit){c=!0;break}let d=truncateUtf8(a,MAX_GREP_LINE_BYTES);if(d.truncated&&(c=!0),!appendLine(d.value)){c=!0;break}s+=1,e.outputMode===`count`?o+=u:l&&(o+=1)}if(n.length===0)return{content:c?`[Output truncated. Narrow path or glob, or lower context.]`:`No matches found`,matchCount:0,outputMode:e.outputMode,path:e.path,truncated:c};let l=n.join(`
+`);return c&&(l+=r),{content:l,matchCount:o,outputMode:e.outputMode,path:e.path,truncated:c}}function normalizeContentLine(e){let t=e.lastIndexOf(`\0`);if(t===-1)return{isMatch:!1,line:e};let n=e.slice(0,t),r=e.slice(t+1),i=/^(\d+)([:-])(.*)$/u.exec(r);if(i===null)return{isMatch:!1,line:`${n}:${r}`};let[,a,o,s]=i;return{isMatch:o===`:`,line:`${n}${o}${a}${o}${s}`}}function parseCountLine(e){let t=e.lastIndexOf(`:`);if(t===-1)return 0;let n=Number(e.slice(t+1));return Number.isFinite(n)&&n>0?n:0}function truncateUtf8(e,t){if(Buffer.byteLength(e)<=t)return{truncated:!1,value:e};let n=0,r=``;for(let i of e){let e=Buffer.byteLength(i);if(n+e>t)break;r+=i,n+=e}return{truncated:!0,value:r}}export{DEFAULT_GREP_LIMIT,GREP_OUTPUT_MODES,MAX_GREP_COMMAND_BYTES,MAX_GREP_LIMIT,MAX_GREP_LINE_BYTES,MAX_GREP_RETURN_BYTES,assertWorkspacePath,buildPosixGrepCommand,buildRipgrepCommand,buildSearchCommand,effectiveLimit,effectiveOutputMode,executeGrepSearch,processGrepOutput,shouldUseFixedStrings};

package/dist/src/extensions/code/extension/lib/guidelines.d.ts

@@ -0,0 +1,25 @@
+/** Minimal sandbox surface this tool needs. */
+export interface SandboxLike {
+    run(options: {
+        command: string;
+    }): PromiseLike<{
+        exitCode: number;
+        stdout: string;
+        stderr: string;
+    }>;
+}
+export interface RepoGuidelines {
+    /** Repo-relative path of the root guideline file, or null when absent. */
+    rootPath: string | null;
+    /** Root guideline content (capped at {@link MAX_GUIDELINE_BYTES}). */
+    root: string | null;
+    /** True when the root content hit the cap; read rootPath for the rest. */
+    rootTruncated: boolean;
+    /** Repo-relative paths of nested guideline files, shallowest first. */
+    nested: string[];
+}
+/**
+ * Find the repo's agent guideline files. One winner per directory:
+ * AGENTS.md beats CLAUDE.md (CLAUDE.md is often just a pointer at it).
+ */
+export declare function discoverGuidelines(sandbox: SandboxLike, dir: string): Promise<RepoGuidelines>;

package/dist/src/extensions/code/extension/lib/guidelines.js

@@ -0,0 +1,2 @@
+const MAX_GUIDELINE_BYTES=12e3;async function discoverGuidelines(e,t){let n={rootPath:null,root:null,rootTruncated:!1,nested:[]},r=await e.run({command:`git -C ${t} ls-files | grep -E '(^|/)(AGENTS|CLAUDE)\\.md$' || true`});if(r.exitCode!==0)return n;let i=new Map;for(let e of r.stdout.split(`
+`)){let t=e.trim();if(t.length===0)continue;let n=t.lastIndexOf(`/`),r=n===-1?``:t.slice(0,n),a=n===-1?t:t.slice(n+1);(!i.has(r)||a===`AGENTS.md`)&&i.set(r,t)}let a=i.get(``)??null,o=null,s=!1;if(a!==null){let n=await e.run({command:`head -c 12001 ${JSON.stringify(`${t}/${a}`)}`});n.exitCode===0&&n.stdout.trim().length>0&&(s=Buffer.byteLength(n.stdout,`utf8`)>MAX_GUIDELINE_BYTES,o=s?`${n.stdout.slice(0,MAX_GUIDELINE_BYTES)}\n\n[truncated: read ${a} for the full guidelines]`:n.stdout)}let c=[...i.entries()].filter(([e])=>e!==``).map(([,e])=>e).sort((e,t)=>e.split(`/`).length-t.split(`/`).length).slice(0,50);return{rootPath:a,root:o,rootTruncated:s,nested:c}}export{discoverGuidelines};

package/dist/src/extensions/code/extension/lib/patch.d.ts

@@ -0,0 +1,35 @@
+import type { SandboxSession } from "eve/sandbox";
+export type PatchHunk = {
+    readonly type: "add";
+    readonly path: string;
+    readonly contents: string;
+} | {
+    readonly type: "delete";
+    readonly path: string;
+} | {
+    readonly type: "update";
+    readonly path: string;
+    readonly movePath?: string;
+    readonly chunks: readonly UpdateChunk[];
+};
+export interface UpdateChunk {
+    readonly oldLines: readonly string[];
+    readonly newLines: readonly string[];
+    readonly changeContext?: string;
+    readonly endOfFile?: boolean;
+}
+export interface AppliedPatchFile {
+    readonly operation: "add" | "delete" | "move" | "update";
+    readonly path: string;
+    readonly previousPath?: string;
+}
+export declare function applyPatchToSandbox(input: {
+    readonly beforeCommit?: (files: readonly AppliedPatchFile[]) => Promise<void>;
+    readonly patchText: string;
+    readonly repoRoot: string;
+    readonly sandbox: SandboxSession;
+    /** Serializes patches per eve session; every `ctx.getSandbox()` call returns a new handle. */
+    readonly sessionId: string;
+}): Promise<AppliedPatchFile[]>;
+export declare function parsePatch(patchText: string): readonly PatchHunk[];
+export declare function deriveUpdatedContent(path: string, chunks: readonly UpdateChunk[], original: string): string;