eve 0.75.0 → 0.76.0

package/dist/src/extensions/code/extension/lib/repository-root.js

@@ -1 +1 @@
-import{shellQuote}from"./shell.js";async function validateRepositoryRoot(e,t){if(!t.startsWith(`/`))throw Error(`root must be an absolute sandbox path`);let n=await realPath(e,e.resolvePath(``),`sandbox workspace`),r=await realPath(e,t,`root`);if(r!==n&&!r.startsWith(`${n}/`))throw Error(`root must be inside the sandbox workspace: ${t}`);let i=await e.run({command:`git -C ${shellQuote(r)} rev-parse --show-toplevel`});if(i.exitCode!==0||i.stdout.trim()!==r)throw Error(`root is not a git work tree root: ${t}`);return r}async function realPath(e,t,n){let r=await e.run({command:`realpath -e -- ${shellQuote(t)}`});if(r.exitCode!==0)throw Error(`Could not resolve ${n} ${t}: ${r.stderr}`);return r.stdout.trim()}export{validateRepositoryRoot};
+import{shellQuote}from"./shell.js";import{resolveWorkspaceDirectory}from"./workspace-root.js";async function validateRepositoryRoot(e,t){let n=await resolveWorkspaceDirectory(e,t),r=await e.run({command:`git -C ${shellQuote(n)} rev-parse --show-toplevel`});if(r.exitCode!==0||r.stdout.trim()!==n)throw Error(`root is not a git work tree root: ${t}`);return n}export{validateRepositoryRoot};

package/dist/src/extensions/code/extension/lib/sandbox.d.ts

@@ -10,4 +10,5 @@ export declare function installCodeTooling(sandbox: ToolingSandbox, options?: {
 export { authenticateGitHub, authenticateVercel, type BrokeredCredentialOptions, } from "./credentials.ts";
 /** @deprecated Import from `eve/computer-use/sandbox` and mount `eve/computer-use`. */
 export { COMPUTER_USE_REVALIDATION_KEY, installComputerUse, startComputerUse, } from "eve/computer-use/sandbox";
-export { executeGitHubShell, githubShellApproval, type GitHubLeaseRule, type GitHubShellInput, type GitHubShellOutput, } from "./github-shell.ts";
+/** @deprecated Import from `eve/extensions/git/sandbox`. */
+export { executeGitHubShell, githubShellApproval, type GitHubLeaseRule, type GitHubShellInput, type GitHubShellOutput, } from "eve/extensions/git/sandbox";

package/dist/src/extensions/code/extension/lib/sandbox.js

@@ -1,2 +1,2 @@
-import{GH_SIGNED_COMMIT_SOURCE}from"./signed-commit.js";import{DIAGNOSTICS_WORKER_SOURCE,TYPESCRIPT_VERSION,ghWrapperSource,toolingPaths,typescriptInstallCommand,vercelWrapperSource}from"./tooling.js";import{authenticateGitHub,authenticateVercel}from"./credentials.js";import{commandFailureDetail}from"./command-failure.js";import{executeGitHubShell,githubShellApproval}from"./github-shell.js";import{COMPUTER_USE_REVALIDATION_KEY,installComputerUse,startComputerUse}from"eve/computer-use/sandbox";const CODE_TOOLING_REVALIDATION_KEY=`eve-code-tooling:3:3:${TYPESCRIPT_VERSION}`;async function installCodeTooling(e,t={}){let n=toolingPaths(e);await Promise.all([e.writeTextFile({path:n.ghWrapper,content:ghWrapperSource(e)}),e.writeTextFile({path:n.signedCommit,content:GH_SIGNED_COMMIT_SOURCE}),e.writeTextFile({path:n.workerSource,content:DIAGNOSTICS_WORKER_SOURCE}),...t.vercel===!0?[e.writeTextFile({path:n.vercelWrapper,content:vercelWrapperSource(e)})]:[]]);let r=await e.run({command:toolingInstallCommand(e,t.vercel===!0)});if(r.exitCode!==0)throw Error(`eve-code tooling installation failed (exit ${r.exitCode}): ${commandFailureDetail(r)}`)}function toolingInstallCommand(e,t){let n=toolingPaths(e),quote=e=>`'${e.replaceAll(`'`,`'"'"'`)}'`;return[`set -e`,`mkdir -p ${quote(n.root)}`,`if ! command -v gh >/dev/null 2>&1; then`,`  command -v apt-get >/dev/null 2>&1 || { echo 'eve-code requires gh or apt-get' >&2; exit 1; }`,`  if [ "$(id -u)" = 0 ]; then APT=apt-get; else command -v sudo >/dev/null 2>&1 || { echo 'eve-code needs root or sudo to install gh' >&2; exit 1; }; APT='sudo -n apt-get'; fi`,`  $APT update && $APT install -y gh`,`fi`,`chmod 755 ${quote(n.ghWrapper)} ${quote(n.signedCommit)}`,`if [ "$(id -u)" = 0 ]; then INSTALL=install; else INSTALL='sudo -n install'; fi`,`$INSTALL -d -o root -g root -m 755 ${quote(n.trustedRoot)} ${quote(n.typescriptRoot)}`,`[ -x /usr/bin/gh ] || { echo 'eve-code requires gh at /usr/bin/gh' >&2; exit 1; }`,`$INSTALL -m 755 /usr/bin/gh ${quote(n.ghReal)}`,`$INSTALL -m 755 ${quote(n.signedCommit)} ${quote(n.trustedSignedCommit)}`,`$INSTALL -m 644 ${quote(n.workerSource)} ${quote(n.worker)}`,`$INSTALL -m 755 ${quote(n.ghWrapper)} /usr/local/bin/gh`,`$INSTALL -m 755 ${quote(n.trustedSignedCommit)} /usr/local/bin/gh-signed-commit`,typescriptInstallCommand(e),...t?[`if [ "$(id -u)" = 0 ]; then npm install -g vercel@latest; else sudo -n npm install -g vercel@latest; fi`,`$INSTALL -m 755 ${quote(n.vercelWrapper)} /usr/local/bin/vercel`,`$INSTALL -m 755 ${quote(n.vercelWrapper)} /usr/local/bin/vc`]:[]].join(`
+import{DIAGNOSTICS_WORKER_SOURCE,GH_SIGNED_COMMIT_SOURCE,GH_SIGNED_COMMIT_VERSION,TYPESCRIPT_VERSION,ghWrapperSource,toolingPaths,typescriptInstallCommand,vercelWrapperSource}from"./tooling.js";import{authenticateGitHub,authenticateVercel}from"./credentials.js";import{commandFailureDetail}from"./command-failure.js";import{executeGitHubShell,githubShellApproval}from"eve/extensions/git/sandbox";import{COMPUTER_USE_REVALIDATION_KEY,installComputerUse,startComputerUse}from"eve/computer-use/sandbox";const CODE_TOOLING_REVALIDATION_KEY=`eve-code-tooling:3:${GH_SIGNED_COMMIT_VERSION}:${TYPESCRIPT_VERSION}`;async function installCodeTooling(e,t={}){let n=toolingPaths(e);await Promise.all([e.writeTextFile({path:n.ghWrapper,content:ghWrapperSource(e)}),e.writeTextFile({path:n.signedCommit,content:GH_SIGNED_COMMIT_SOURCE}),e.writeTextFile({path:n.workerSource,content:DIAGNOSTICS_WORKER_SOURCE}),...t.vercel===!0?[e.writeTextFile({path:n.vercelWrapper,content:vercelWrapperSource(e)})]:[]]);let r=await e.run({command:toolingInstallCommand(e,t.vercel===!0)});if(r.exitCode!==0)throw Error(`eve-code tooling installation failed (exit ${r.exitCode}): ${commandFailureDetail(r)}`)}function toolingInstallCommand(e,t){let n=toolingPaths(e),quote=e=>`'${e.replaceAll(`'`,`'"'"'`)}'`;return[`set -e`,`mkdir -p ${quote(n.root)}`,`if ! command -v gh >/dev/null 2>&1; then`,`  command -v apt-get >/dev/null 2>&1 || { echo 'eve-code requires gh or apt-get' >&2; exit 1; }`,`  if [ "$(id -u)" = 0 ]; then APT=apt-get; else command -v sudo >/dev/null 2>&1 || { echo 'eve-code needs root or sudo to install gh' >&2; exit 1; }; APT='sudo -n apt-get'; fi`,`  $APT update && $APT install -y gh`,`fi`,`chmod 755 ${quote(n.ghWrapper)} ${quote(n.signedCommit)}`,`if [ "$(id -u)" = 0 ]; then INSTALL=install; else INSTALL='sudo -n install'; fi`,`$INSTALL -d -o root -g root -m 755 ${quote(n.trustedRoot)} ${quote(n.typescriptRoot)}`,`[ -x /usr/bin/gh ] || { echo 'eve-code requires gh at /usr/bin/gh' >&2; exit 1; }`,`$INSTALL -m 755 /usr/bin/gh ${quote(n.ghReal)}`,`$INSTALL -m 755 ${quote(n.signedCommit)} ${quote(n.trustedSignedCommit)}`,`$INSTALL -m 644 ${quote(n.workerSource)} ${quote(n.worker)}`,`$INSTALL -m 755 ${quote(n.ghWrapper)} /usr/local/bin/gh`,`$INSTALL -m 755 ${quote(n.trustedSignedCommit)} /usr/local/bin/gh-signed-commit`,typescriptInstallCommand(e),...t?[`if [ "$(id -u)" = 0 ]; then npm install -g vercel@latest; else sudo -n npm install -g vercel@latest; fi`,`$INSTALL -m 755 ${quote(n.vercelWrapper)} /usr/local/bin/vercel`,`$INSTALL -m 755 ${quote(n.vercelWrapper)} /usr/local/bin/vc`]:[]].join(`
 `)}export{CODE_TOOLING_REVALIDATION_KEY,COMPUTER_USE_REVALIDATION_KEY,authenticateGitHub,authenticateVercel,executeGitHubShell,githubShellApproval,installCodeTooling,installComputerUse,startComputerUse};

package/dist/src/extensions/code/extension/lib/tooling.d.ts

@@ -1,16 +1,16 @@
 import type { SandboxSession } from "eve/sandbox";
-import { GH_SIGNED_COMMIT_SOURCE, GH_SIGNED_COMMIT_VERSION } from "./signed-commit.ts";
+import { GH_SIGNED_COMMIT_SOURCE, GH_SIGNED_COMMIT_VERSION } from "eve/extensions/git/sandbox";
 export { GH_SIGNED_COMMIT_SOURCE, GH_SIGNED_COMMIT_VERSION };
 export declare const TYPESCRIPT_VERSION = "6.0.3";
 export declare function toolingPaths(sandbox: Pick<SandboxSession, "resolvePath">): {
     root: string;
     trustedRoot: string;
     env: string;
-    ghReal: string;
+    ghReal: "/usr/local/lib/eve-code/gh";
     ghWrapper: string;
     vercelWrapper: string;
     signedCommit: string;
-    trustedSignedCommit: string;
+    trustedSignedCommit: "/usr/local/lib/eve-code/gh-signed-commit";
     typescriptRoot: string;
     typescriptModule: string;
     workerSource: string;
@@ -21,7 +21,7 @@ export declare function vercelWrapperSource(sandbox: Pick<SandboxSession, "resol
 export declare function typescriptInstallCommand(sandbox: Pick<SandboxSession, "resolvePath">): string;
 /**
  * Runs inside the sandbox with `node`. Reads one base64 JSON request from
- * `EVE_CODE_DIAGNOSTICS_REQUEST` (`{ repoRoot, filePath }`), loads only the
+ * `EVE_CODE_DIAGNOSTICS_REQUEST` (`{ patchRoot, filePath }`), loads only the
  * bootstrap-installed compiler, and prints `{ diagnostics }`.
  */
 export declare const DIAGNOSTICS_WORKER_SOURCE: string;

package/dist/src/extensions/code/extension/lib/tooling.js

@@ -1,12 +1,12 @@
-import{GH_SIGNED_COMMIT_SOURCE,GH_SIGNED_COMMIT_VERSION}from"./signed-commit.js";import{shellQuote}from"./shell.js";const TYPESCRIPT_VERSION=`6.0.3`,TRUSTED_TOOLING_ROOT=`/usr/local/lib/eve-code`,TYPESCRIPT_MODULE=`${TRUSTED_TOOLING_ROOT}/typescript/node_modules/typescript/lib/typescript.js`;function toolingPaths(e){let t=e.resolvePath(`.eve-code`),n=TRUSTED_TOOLING_ROOT;return{root:t,trustedRoot:n,env:`${t}/env`,ghReal:`${n}/gh`,ghWrapper:`${t}/gh`,vercelWrapper:`${t}/vercel`,signedCommit:`${t}/gh-signed-commit`,trustedSignedCommit:`${n}/gh-signed-commit`,typescriptRoot:`${n}/typescript`,typescriptModule:TYPESCRIPT_MODULE,workerSource:`${t}/diagnostics.cjs`,worker:`${n}/diagnostics.cjs`}}function ghWrapperSource(e){let t=toolingPaths(e);return`#!/usr/bin/env bash\nset -euo pipefail\n[[ ! -f ${JSON.stringify(t.env)} ]] || source ${JSON.stringify(t.env)}\nexport GH_TOKEN="\${GH_TOKEN:-ghp_000000000000000000000000000000000000}"\nexec ${JSON.stringify(t.ghReal)} "$@"\n`}function vercelWrapperSource(e){let t=toolingPaths(e);return`#!/usr/bin/env bash\nset -euo pipefail\n[[ ! -f ${JSON.stringify(t.env)} ]] || source ${JSON.stringify(t.env)}\nexport VERCEL_TOKEN="\${VERCEL_TOKEN:-eve-code-firewall-placeholder}"\nexec node "$(npm root -g)/vercel/dist/index.js" "$@"\n`}function typescriptInstallCommand(e){let{typescriptRoot:t}=toolingPaths(e),n=`${t}/npmrc`,r=[`set -e`,`cd ${shellQuote(t)}`,`umask 022`,`: > ${shellQuote(n)}`,`npm install --prefix ${shellQuote(t)} --ignore-scripts --no-audit --no-fund typescript@${TYPESCRIPT_VERSION}`,`chmod -R go-w ${shellQuote(t)}`].join(`
+import{shellQuote}from"./shell.js";import{GH_SIGNED_COMMIT_SOURCE,GH_SIGNED_COMMIT_VERSION,GITHUB_TOOLING_PATHS}from"eve/extensions/git/sandbox";const TYPESCRIPT_VERSION=`6.0.3`,TRUSTED_TOOLING_ROOT=`/usr/local/lib/eve-code`,TYPESCRIPT_MODULE=`${TRUSTED_TOOLING_ROOT}/typescript/node_modules/typescript/lib/typescript.js`;function toolingPaths(e){let t=e.resolvePath(`.eve-code`),n=TRUSTED_TOOLING_ROOT;return{root:t,trustedRoot:n,env:`${t}/env`,ghReal:GITHUB_TOOLING_PATHS.ghReal,ghWrapper:`${t}/gh`,vercelWrapper:`${t}/vercel`,signedCommit:`${t}/gh-signed-commit`,trustedSignedCommit:GITHUB_TOOLING_PATHS.trustedSignedCommit,typescriptRoot:`${n}/typescript`,typescriptModule:TYPESCRIPT_MODULE,workerSource:`${t}/diagnostics.cjs`,worker:`${n}/diagnostics.cjs`}}function ghWrapperSource(e){let t=toolingPaths(e);return`#!/usr/bin/env bash\nset -euo pipefail\n[[ ! -f ${JSON.stringify(t.env)} ]] || source ${JSON.stringify(t.env)}\nexport GH_TOKEN="\${GH_TOKEN:-ghp_000000000000000000000000000000000000}"\nexec ${JSON.stringify(t.ghReal)} "$@"\n`}function vercelWrapperSource(e){let t=toolingPaths(e);return`#!/usr/bin/env bash\nset -euo pipefail\n[[ ! -f ${JSON.stringify(t.env)} ]] || source ${JSON.stringify(t.env)}\nexport VERCEL_TOKEN="\${VERCEL_TOKEN:-eve-code-firewall-placeholder}"\nexec node "$(npm root -g)/vercel/dist/index.js" "$@"\n`}function typescriptInstallCommand(e){let{typescriptRoot:t}=toolingPaths(e),n=`${t}/npmrc`,r=[`set -e`,`cd ${shellQuote(t)}`,`umask 022`,`: > ${shellQuote(n)}`,`npm install --prefix ${shellQuote(t)} --ignore-scripts --no-audit --no-fund typescript@${TYPESCRIPT_VERSION}`,`chmod -R go-w ${shellQuote(t)}`].join(`
 `),i=`/usr/bin/env -i HOME=/root PATH=/usr/local/bin:/usr/bin:/bin NPM_CONFIG_USERCONFIG=/dev/null NPM_CONFIG_GLOBALCONFIG=${shellQuote(n)} NPM_CONFIG_REGISTRY=https://registry.npmjs.org /bin/sh -c ${shellQuote(r)}`;return`if [ "$(id -u)" = 0 ]; then ${i}; else sudo -n ${i}; fi`}const DIAGNOSTICS_WORKER_SOURCE=String.raw`const fs = require("node:fs");
 const path = require("node:path");
 
 const { EVE_CODE_DIAGNOSTICS_REQUEST = "" } = require("node:process").env;
 const request = JSON.parse(Buffer.from(EVE_CODE_DIAGNOSTICS_REQUEST, "base64").toString());
-const repoRoot = fs.realpathSync(request.repoRoot);
-const fileName = fs.realpathSync(path.join(repoRoot, request.filePath));
-if (fileName !== repoRoot && !fileName.startsWith(repoRoot + path.sep)) {
+const patchRoot = fs.realpathSync(request.patchRoot);
+const fileName = fs.realpathSync(path.join(patchRoot, request.filePath));
+if (fileName !== patchRoot && !fileName.startsWith(patchRoot + path.sep)) {
   throw new Error("file escapes repository: " + request.filePath);
 }
 
@@ -36,7 +36,7 @@ const host = {
   directoryExists: ts.sys.directoryExists,
   fileExists: ts.sys.fileExists,
   getCompilationSettings: () => options,
-  getCurrentDirectory: () => repoRoot,
+  getCurrentDirectory: () => patchRoot,
   getDefaultLibFileName: (compilerOptions) => ts.getDefaultLibFilePath(compilerOptions),
   getNewLine: () => ts.sys.newLine,
   getScriptFileNames: () => fileNames,
@@ -71,12 +71,12 @@ process.stdout.write(JSON.stringify({ diagnostics }));
 
 function nearestConfig(start) {
   let current = start;
-  while (current === repoRoot || current.startsWith(repoRoot + path.sep)) {
+  while (current === patchRoot || current.startsWith(patchRoot + path.sep)) {
     for (const name of ["tsconfig.json", "jsconfig.json"]) {
       const candidate = path.join(current, name);
       if (fs.existsSync(candidate)) return candidate;
     }
-    if (current === repoRoot) break;
+    if (current === patchRoot) break;
     current = path.dirname(current);
   }
   return null;

package/dist/src/extensions/code/extension/lib/workspace-root.d.ts

@@ -0,0 +1,31 @@
+/**
+ * The single containment check for sandbox paths that tools read or write.
+ * The workspace root differs by provider (`/workspace`, `/app`, ...), so the
+ * boundary is the real path of `resolvePath("")`, never a literal prefix.
+ */
+export interface WorkspaceSandbox {
+    resolvePath(path: string): string;
+    run(input: {
+        abortSignal?: AbortSignal;
+        command: string;
+    }): PromiseLike<{
+        exitCode: number;
+        stderr: string;
+        stdout: string;
+    }>;
+}
+/** NUL-delimited output keeps paths that contain newlines unambiguous. */
+export declare function sandboxRealPath(sandbox: WorkspaceSandbox, path: string, label: string, abortSignal?: AbortSignal): Promise<string>;
+/**
+ * Resolves `path` (default: the workspace root) to a real path inside the real
+ * workspace. Symlinks are followed before the check, so a link cannot escape.
+ */
+export declare function resolveInWorkspace(sandbox: WorkspaceSandbox, path: string | undefined, label: string, abortSignal?: AbortSignal): Promise<{
+    readonly path: string;
+    readonly workspace: string;
+}>;
+/**
+ * An absolute directory inside the workspace (default: the workspace root).
+ * Git is not required; `validateRepositoryRoot` adds that check.
+ */
+export declare function resolveWorkspaceDirectory(sandbox: WorkspaceSandbox, root?: string): Promise<string>;

package/dist/src/extensions/code/extension/lib/workspace-root.js

@@ -0,0 +1 @@
+import{shellQuote}from"./shell.js";async function sandboxRealPath(e,t,n,r){let i=await e.run({abortSignal:r,command:`realpath -e -z -- ${shellQuote(t)}`});if(i.exitCode!==0){let e=i.stderr.trim()||i.stdout.trim()||`no command output`;throw Error(`${n} could not be resolved: ${e.slice(0,2e3)}`)}let a=i.stdout.endsWith(`\0`)?i.stdout.slice(0,-1):i.stdout;if(a.length===0||a.includes(`\0`))throw Error(`${n} returned an invalid realpath`);return a}async function resolveInWorkspace(e,t,n,r){let i=await sandboxRealPath(e,e.resolvePath(``),`sandbox workspace`,r);if(t===void 0)return{path:i,workspace:i};let a=await sandboxRealPath(e,t,n,r);if(!(i===`/`||a===i||a.startsWith(`${i}/`)))throw Error(`${n} resolves outside the workspace ${i}: ${a}`);return{path:a,workspace:i}}async function resolveWorkspaceDirectory(e,t){if(t!==void 0&&!t.startsWith(`/`))throw Error(`root must be an absolute sandbox path`);return(await resolveInWorkspace(e,t,`root`)).path}export{resolveInWorkspace,resolveWorkspaceDirectory,sandboxRealPath};

package/dist/src/extensions/code/extension/skills/pr.d.ts

@@ -0,0 +1,6 @@
+/** @deprecated Mount `eve/extensions/git`, which contributes the same skill as `git__pr`. */
+declare const _default: import("eve/skills").DynamicSentinel<{
+    description: string;
+    markdown: string;
+} | null>;
+export default _default;

package/dist/src/extensions/code/extension/skills/pr.js

@@ -0,0 +1 @@
+import{deprecatedGitHubConfigured}from"../lib/github-compat.js";import{prSkillDescription,prSkillMarkdown}from"eve/extensions/git/sandbox";import{defineDynamic,defineSkill}from"eve/skills";var pr_default=defineDynamic({events:{"session.started":()=>deprecatedGitHubConfigured()?defineSkill({description:prSkillDescription(!0),markdown:prSkillMarkdown(!0)}):null}});export{pr_default as default};

package/dist/src/extensions/code/extension/tools/apply_patch.d.ts

@@ -1,6 +1,6 @@
 import { type PostEditDiagnostic } from "../lib/diagnostics.ts";
 declare const _default: import("eve/tools").ToolDefinition<{
-    root: string;
+    root?: string | undefined;
     patchText: string;
 }, {
     diagnostics: {
@@ -18,7 +18,7 @@ declare const _default: import("eve/tools").ToolDefinition<{
     }[];
 }> & {
     execute(input: {
-        root: string;
+        root?: string | undefined;
         patchText: string;
     }, ctx: import("eve/tools").ToolContext): Promise<{
         diagnostics: PostEditDiagnostic[];

package/dist/src/extensions/code/extension/tools/apply_patch.js

@@ -1,2 +1,2 @@
-import{onlyNewTypeDiagnostics,runPostEditDiagnostics,runTypeScriptDiagnostics}from"../lib/diagnostics.js";import{findGeneratedPatchTargets,generatedPatchTargetsError}from"../lib/generated-paths.js";import{validateRepositoryRoot}from"../lib/repository-root.js";import{applyPatchToSandbox}from"../lib/patch.js";import{z}from"#compiled/zod/index.js";import{defineTool}from"eve/tools";import{never}from"eve/tools/approval";const DiagnosticSchema=z.object({check:z.enum([`git-diff`,`syntax`,`typescript`,`whitespace`]),code:z.number().int().optional(),column:z.number().int().optional(),line:z.number().int().optional(),message:z.string(),path:z.string().optional()});var apply_patch_default=defineTool({description:[`Apply targeted changes inside a git checkout in the sandbox workspace.`,`Use this instead of rewriting complete files or writing through bash.`,`Write small hunks against current file contents. If a hunk misses, re-read that file and rewrite only the failed hunk. Do not retry the same patch text.`,`The patch is fully parsed and every source file is verified before any write.`,`After writing, the tool runs bounded whitespace, syntax, and TypeScript checks and`,`returns only diagnostics the patch introduced.`,`Patch format:`,`*** Begin Patch`,`*** Add File: path (every content line starts with +)`,`*** Update File: path (optional *** Move to: new-path, followed by @@ chunks)`,`*** Delete File: path`,`*** End Patch`,`Paths are relative to the repository and may not escape it.`,`Generated files (lockfiles, dist/, vendor-compiled/) are rejected: change them`,`through the command that generates them, never through a patch.`].join(`
-`),approval:never(),label:{start:({root:e})=>`Patch ${e}`},inputSchema:z.object({root:z.string().min(1).describe(`absolute git checkout root inside the sandbox workspace`),patchText:z.string().min(1).max(5e5).describe(`complete *** Begin Patch text`)}),outputSchema:z.object({diagnostics:z.array(DiagnosticSchema),files:z.array(z.object({operation:z.enum([`add`,`delete`,`move`,`update`]),path:z.string(),previousPath:z.string().optional()}))}),async execute({root:e,patchText:t},n){let r=findGeneratedPatchTargets(t);if(r.length>0)throw Error(generatedPatchTargetsError(r));let i=await n.getSandbox(),a=await validateRepositoryRoot(i,e),o=[],s=await applyPatchToSandbox({async beforeCommit(e){o=await runTypeScriptDiagnostics({paths:e.filter(e=>e.operation===`update`).map(e=>e.path),repoRoot:a,sandbox:i})},patchText:t,repoRoot:a,sandbox:i,sessionId:n.session.id}),c=s.filter(e=>e.operation!==`delete`).map(e=>e.path),l=s.filter(e=>e.operation===`add`||e.operation===`move`).map(e=>e.path),u=[...s.filter(e=>e.operation===`delete`).map(e=>e.path),...s.flatMap(e=>e.operation===`move`&&e.previousPath!==void 0?[e.previousPath]:[])];return{diagnostics:onlyNewTypeDiagnostics(await runPostEditDiagnostics({addedPaths:l,changedPaths:c,deletedPaths:u,repoRoot:a,sandbox:i}),o),files:s}}});export{apply_patch_default as default};
+import{onlyNewTypeDiagnostics,runPostEditDiagnostics,runTypeScriptDiagnostics}from"../lib/diagnostics.js";import{findGeneratedPatchTargets,generatedPatchTargetsError}from"../lib/generated-paths.js";import{resolveWorkspaceDirectory}from"../lib/workspace-root.js";import{applyPatchToSandbox}from"../lib/patch.js";import{z}from"#compiled/zod/index.js";import{defineTool}from"eve/tools";import{never}from"eve/tools/approval";const DiagnosticSchema=z.object({check:z.enum([`git-diff`,`syntax`,`typescript`,`whitespace`]),code:z.number().int().optional(),column:z.number().int().optional(),line:z.number().int().optional(),message:z.string(),path:z.string().optional()});var apply_patch_default=defineTool({description:[`Apply targeted changes to files in the sandbox workspace. No git checkout is required.`,`Use this instead of rewriting complete files or writing through bash.`,`Write small hunks against current file contents. If a hunk misses, re-read that file and rewrite only the failed hunk. Do not retry the same patch text.`,`The patch is fully parsed and every source file is verified before any write.`,`After writing, the tool runs bounded whitespace, syntax, and TypeScript checks and`,`returns only diagnostics the patch introduced.`,`Patch format:`,`*** Begin Patch`,`*** Add File: path (every content line starts with +)`,`*** Update File: path (optional *** Move to: new-path, followed by @@ chunks)`,`*** Delete File: path`,`*** End Patch`,`Paths are relative to root and may not escape it.`,`Generated files (lockfiles, dist/, vendor-compiled/) are rejected: change them`,`through the command that generates them, never through a patch.`].join(`
+`),approval:never(),label:{start:({root:e})=>`Patch ${e??`workspace`}`},inputSchema:z.object({root:z.string().min(1).optional().describe(`absolute directory inside the sandbox workspace that patch paths are relative to; defaults to the workspace root`),patchText:z.string().min(1).max(5e5).describe(`complete *** Begin Patch text`)}),outputSchema:z.object({diagnostics:z.array(DiagnosticSchema),files:z.array(z.object({operation:z.enum([`add`,`delete`,`move`,`update`]),path:z.string(),previousPath:z.string().optional()}))}),async execute({root:e,patchText:t},n){let r=findGeneratedPatchTargets(t);if(r.length>0)throw Error(generatedPatchTargetsError(r));let i=await n.getSandbox(),a=await resolveWorkspaceDirectory(i,e),o=[],s=new Map,c=await applyPatchToSandbox({async beforeCommit(e){for(let t of e)s.set(t.path,t.previousContent);o=await runTypeScriptDiagnostics({paths:e.filter(e=>e.operation===`update`).map(e=>e.path),patchRoot:a,sandbox:i})},patchText:t,patchRoot:a,sandbox:i,sessionId:n.session.id}),l=c.filter(e=>e.operation!==`delete`).map(e=>e.path),u=c.filter(e=>e.operation===`add`||e.operation===`move`).map(e=>e.path),d=[...c.filter(e=>e.operation===`delete`).map(e=>e.path),...c.flatMap(e=>e.operation===`move`&&e.previousPath!==void 0?[e.previousPath]:[])];return{diagnostics:onlyNewTypeDiagnostics(await runPostEditDiagnostics({addedPaths:u,changedPaths:l,deletedPaths:d,patchRoot:a,previousContents:s,sandbox:i}),o),files:c}}});export{apply_patch_default as default};

package/dist/src/extensions/code/extension/tools/gh.d.ts

@@ -1,4 +1,5 @@
-declare const _default: import("eve/tools").ToolDefinition<{
+/** @deprecated Mount `eve/extensions/git` with `github` config. */
+declare const _default: import("eve/tools").DynamicSentinel<(import("eve/tools").ToolDefinition<{
     command: string;
     permissions: {
         provider: "github";
@@ -22,6 +23,6 @@ declare const _default: import("eve/tools").ToolDefinition<{
         }[];
         description: string;
         workingDirectory?: string | undefined;
-    }, ctx: import("eve/tools").ToolContext): Promise<import("../lib/github-shell.ts").GitHubShellOutput>;
-};
+    }, ctx: import("eve/tools").ToolContext): Promise<import("../lib/sandbox.ts").GitHubShellOutput>;
+}) | null>;
 export default _default;

package/dist/src/extensions/code/extension/tools/gh.js

@@ -1 +1 @@
-import extension_default from"../extension.js";import{githubShellInputSchema}from"../lib/github-shell-schema.js";import{executeGitHubShell,githubShellApproval}from"../lib/github-shell.js";import{z}from"#compiled/zod/index.js";import{defineTool}from"eve/tools";var gh_default=defineTool({description:`Run one authenticated GitHub command in the sandbox. The full gh CLI surface is available. Commands run without an approval prompt; description records the GitHub-side result the command intends to produce. Declare exactly one repository in the configured GitHub organization: Connect mints the real token for only that repository, and the sandbox process receives only a placeholder GH_TOKEN that the firewall exchanges on matching GitHub requests. GitHub rejects access outside the token's server-side repository scope; commands that explicitly name another repository with -R, --repo, --repo=, or a repository argument to gh repo clone, view, or fork are denied before minting. Use simple argv quoting only, never environment assignments, pipes, redirects, substitutions, or other shell syntax. gh alias and extension commands may execute local code, but remain sandboxed. Use git here only for authenticated fetch, pull, push, or ls-remote against a strictly validated origin, and use gh-signed-commit only with --repo. Use ordinary bash for local git status, diff, add, commit, and rebase.`,approval:({toolInput:e})=>githubShellApproval(e),inputSchema:githubShellInputSchema,outputSchema:z.object({exitCode:z.number().int(),stderr:z.string(),stdout:z.string(),truncated:z.boolean()}),execute(e,t){return executeGitHubShell(e,extension_default.config.github,{getSandbox:()=>t.getSandbox(),sessionId:t.session.id})}});export{gh_default as default};
+import{deprecatedGitHubConfigured,gh}from"../lib/github-compat.js";import{defineDynamic}from"eve/tools";var gh_default=defineDynamic({events:{"session.started":()=>deprecatedGitHubConfigured()?gh:null}});export{gh_default as default};

package/dist/src/extensions/code/extension/tools/grep.js

@@ -1 +1 @@
-import{GREP_OUTPUT_MODES,executeGrepSearch}from"../lib/grep-search.js";import{z}from"#compiled/zod/index.js";import{defineTool}from"eve/tools";const InputSchema=z.object({context:z.number().int().min(0).optional().describe(`Context lines around each content match. Ignored unless outputMode is content.`),glob:z.string().optional().describe(`Limit files, for example "*.ts" or "*.{ts,tsx}".`),ignoreCase:z.boolean().optional().describe(`Case-insensitive search. Defaults to false.`),limit:z.number().int().min(1).max(200).optional().describe(`Maximum rows to return. Defaults to 50.`),literal:z.boolean().optional().describe(`Force a literal match. Defaults to true for identifier-like patterns, false when the pattern uses regex syntax.`),outputMode:z.enum(GREP_OUTPUT_MODES).optional().describe(`files_with_matches lists files and stops at the first hit in each (default). content returns matching lines. count returns per-file totals.`),path:z.string().optional().describe(`Directory or file under /workspace. Defaults to /workspace. Narrow this first.`),pattern:z.string().min(1).describe(`Regex or literal to search for.`)});var grep_default=defineTool({description:[`Fast sandbox content search powered by ripgrep.`,`Start with outputMode files_with_matches and a narrow path or glob. That stops at the first hit per file.`,`Use content only after you know which files matter. Use count to size a pattern before reading hits.`,`Function names and error strings are matched as fixed strings unless you set literal false or the pattern uses regex syntax.`,`With ripgrep, respects .gitignore. The POSIX fallback does not read .gitignore; both include hidden files and exclude .git.`].join(` `),inputSchema:InputSchema,outputSchema:z.object({content:z.string(),matchCount:z.number().int(),outputMode:z.enum(GREP_OUTPUT_MODES),path:z.string(),truncated:z.boolean()}),async execute(e,t){return executeGrepSearch(e,await t.getSandbox(),t.abortSignal)}});export{grep_default as default};
+import{GREP_OUTPUT_MODES,executeGrepSearch}from"../lib/grep-search.js";import{z}from"#compiled/zod/index.js";import{defineTool}from"eve/tools";const InputSchema=z.object({context:z.number().int().min(0).optional().describe(`Context lines around each content match. Ignored unless outputMode is content.`),glob:z.string().optional().describe(`Limit files, for example "*.ts" or "*.{ts,tsx}".`),ignoreCase:z.boolean().optional().describe(`Case-insensitive search. Defaults to false.`),limit:z.number().int().min(1).max(200).optional().describe(`Maximum rows to return. Defaults to 50.`),literal:z.boolean().optional().describe(`Force a literal match. Defaults to true for identifier-like patterns, false when the pattern uses regex syntax.`),outputMode:z.enum(GREP_OUTPUT_MODES).optional().describe(`files_with_matches lists files and stops at the first hit in each (default). content returns matching lines. count returns per-file totals.`),path:z.string().optional().describe(`Directory or file inside the workspace. Defaults to the workspace root. Narrow this first.`),pattern:z.string().min(1).describe(`Regex or literal to search for.`)});var grep_default=defineTool({description:[`Fast sandbox content search powered by ripgrep.`,`Start with outputMode files_with_matches and a narrow path or glob. That stops at the first hit per file.`,`Use content only after you know which files matter. Use count to size a pattern before reading hits.`,`Function names and error strings are matched as fixed strings unless you set literal false or the pattern uses regex syntax.`,`With ripgrep, respects .gitignore. The POSIX fallback does not read .gitignore; both include hidden files and exclude .git.`].join(` `),inputSchema:InputSchema,outputSchema:z.object({content:z.string(),matchCount:z.number().int(),outputMode:z.enum(GREP_OUTPUT_MODES),path:z.string(),truncated:z.boolean()}),async execute(e,t){return executeGrepSearch(e,await t.getSandbox(),t.abortSignal)}});export{grep_default as default};

package/dist/src/extensions/code/tools.d.ts

@@ -1,5 +1,6 @@
 export { default as apply_patch } from "./extension/tools/apply_patch.ts";
 /** @deprecated Import from `eve/computer-use/tools` and mount `eve/computer-use`. */
 export { computer_use } from "../../computer-use/tools.ts";
-export { default as gh } from "./extension/tools/gh.ts";
+/** @deprecated Import from `eve/extensions/git/tools` and mount `eve/extensions/git`. */
+export { gh } from "./extension/lib/github-compat.ts";
 export { default as grep } from "./extension/tools/grep.ts";

package/dist/src/extensions/code/tools.js

@@ -1 +1 @@
-import computer_use_default from"../../computer-use/extension/tools/computer_use.js";import"../../computer-use/tools.js";import grep_default from"./extension/tools/grep.js";import apply_patch_default from"./extension/tools/apply_patch.js";import gh_default from"./extension/tools/gh.js";export{apply_patch_default as apply_patch,computer_use_default as computer_use,gh_default as gh,grep_default as grep};
+import computer_use_default from"../../computer-use/extension/tools/computer_use.js";import"../../computer-use/tools.js";import{gh}from"./extension/lib/github-compat.js";import grep_default from"./extension/tools/grep.js";import apply_patch_default from"./extension/tools/apply_patch.js";export{apply_patch_default as apply_patch,computer_use_default as computer_use,gh,grep_default as grep};

package/dist/src/extensions/git/extension/extension.d.ts

@@ -0,0 +1,12 @@
+import { z } from "zod";
+import type { GitHubConfig } from "./lib/github-shell.ts";
+export type { GitHubLeaseRule } from "./lib/github-shell.ts";
+export type GitHubLeaseBroker = GitHubConfig["broker"];
+declare const _default: import("eve/extension").ExtensionHandle<z.ZodObject<{
+    github: z.ZodOptional<z.ZodObject<{
+        connector: z.ZodString;
+        org: z.ZodString;
+        broker: z.ZodCustom<(sandbox: import("../../../shared/sandbox-session.ts").SandboxSession, rules: Readonly<Record<string, readonly import("./lib/github-shell.ts").GitHubLeaseRule[]>> | null) => Promise<void>, (sandbox: import("../../../shared/sandbox-session.ts").SandboxSession, rules: Readonly<Record<string, readonly import("./lib/github-shell.ts").GitHubLeaseRule[]>> | null) => Promise<void>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>>;
+export default _default;

package/dist/src/extensions/git/extension/extension.js

@@ -0,0 +1 @@
+import{z}from"#compiled/zod/index.js";import{defineExtension}from"eve/extension";var extension_default=defineExtension({config:z.object({github:z.object({connector:z.string().min(1),org:z.string().min(1),broker:z.custom(e=>typeof e==`function`)}).optional()})});export{extension_default as default};

package/dist/src/extensions/git/extension/instructions/github.d.ts

@@ -0,0 +1,2 @@
+declare const _default: import("eve/instructions").DynamicSentinel<import("eve/instructions").DynamicInstructionsResult>;
+export default _default;

package/dist/src/extensions/git/extension/instructions/github.js

@@ -0,0 +1 @@
+import extension_default from"../extension.js";import{githubInstructions}from"../lib/github-guidance.js";import{defineDynamic,defineInstructions}from"eve/instructions";var github_default=defineDynamic({events:{"session.started":()=>defineInstructions({content:githubInstructions(extension_default.config.github!==void 0)})}});export{github_default as default};

package/dist/src/extensions/git/extension/lib/gh-tool.d.ts

@@ -0,0 +1,29 @@
+import { type GitHubConfig } from "./github-shell.ts";
+export declare const GH_TOOL_DESCRIPTION = "Run one authenticated GitHub command in the sandbox. The full gh CLI surface is available. Commands run without an approval prompt; description records the GitHub-side result the command intends to produce. Declare exactly one repository in the configured GitHub organization: Connect mints the real token for only that repository, and the sandbox process receives only a placeholder GH_TOKEN that the firewall exchanges on matching GitHub requests. GitHub rejects access outside the token's server-side repository scope; commands that explicitly name another repository with -R, --repo, --repo=, or a repository argument to gh repo clone, view, or fork are denied before minting. Use simple argv quoting only, never environment assignments, pipes, redirects, substitutions, or other shell syntax. gh alias and extension commands may execute local code, but remain sandboxed. Use git here only for authenticated fetch, pull, push, or ls-remote against a strictly validated origin, and use gh-signed-commit only with --repo. Use ordinary bash for local git status, diff, add, commit, and rebase.";
+/** The Connect-brokered `gh` tool, bound to one extension's GitHub config. */
+export declare function defineGhTool(github: () => GitHubConfig | undefined, description?: string): import("eve/tools").ToolDefinition<{
+    command: string;
+    permissions: {
+        provider: "github";
+        repositories: string[];
+        access: "write";
+    }[];
+    description: string;
+    workingDirectory?: string | undefined;
+}, {
+    exitCode: number;
+    stderr: string;
+    stdout: string;
+    truncated: boolean;
+}> & {
+    execute(input: {
+        command: string;
+        permissions: {
+            provider: "github";
+            repositories: string[];
+            access: "write";
+        }[];
+        description: string;
+        workingDirectory?: string | undefined;
+    }, ctx: import("eve/tools").ToolContext): Promise<import("./github-shell.ts").GitHubShellOutput>;
+};

package/dist/src/extensions/git/extension/lib/gh-tool.js

@@ -0,0 +1 @@
+import{executeGitHubShell,githubShellApproval}from"./github-shell.js";import{githubShellInputSchema}from"./github-shell-schema.js";import{z}from"#compiled/zod/index.js";import{defineTool}from"eve/tools";const GH_TOOL_DESCRIPTION=`Run one authenticated GitHub command in the sandbox. The full gh CLI surface is available. Commands run without an approval prompt; description records the GitHub-side result the command intends to produce. Declare exactly one repository in the configured GitHub organization: Connect mints the real token for only that repository, and the sandbox process receives only a placeholder GH_TOKEN that the firewall exchanges on matching GitHub requests. GitHub rejects access outside the token's server-side repository scope; commands that explicitly name another repository with -R, --repo, --repo=, or a repository argument to gh repo clone, view, or fork are denied before minting. Use simple argv quoting only, never environment assignments, pipes, redirects, substitutions, or other shell syntax. gh alias and extension commands may execute local code, but remain sandboxed. Use git here only for authenticated fetch, pull, push, or ls-remote against a strictly validated origin, and use gh-signed-commit only with --repo. Use ordinary bash for local git status, diff, add, commit, and rebase.`;function defineGhTool(e,t=GH_TOOL_DESCRIPTION){return defineTool({description:t,approval:({toolInput:e})=>githubShellApproval(e),inputSchema:githubShellInputSchema,outputSchema:z.object({exitCode:z.number().int(),stderr:z.string(),stdout:z.string(),truncated:z.boolean()}),execute(t,n){return executeGitHubShell(t,e(),{getSandbox:()=>n.getSandbox(),sessionId:n.session.id})}})}export{GH_TOOL_DESCRIPTION,defineGhTool};

package/dist/src/extensions/git/extension/lib/github-guidance.d.ts

@@ -0,0 +1,3 @@
+export declare function githubInstructions(github: boolean): string;
+export declare function prSkillDescription(github: boolean): string;
+export declare function prSkillMarkdown(github: boolean): string;

package/dist/src/extensions/git/extension/lib/github-guidance.js

@@ -0,0 +1,49 @@
+function githubInstructions(e){return`${e?"# GitHub\n\nGitHub credentials are not available to ordinary `bash`. Use the `gh` tool for every authenticated GitHub operation. The full `gh` CLI surface is available. Declare exactly one repository in the configured organization with write-capable access. Authenticated commands run without an approval prompt; describe the intended GitHub-side result accurately in `description`. Connect mints the real token for only the declared repository. The sandbox process receives only a placeholder `GH_TOKEN`, and the firewall exchanges it on matching GitHub requests. GitHub rejects access outside the token's server-side repository scope. Never put credentials in URLs or commands. If access is denied, report it plainly and stop.\n\nPass commands as simple argv with ordinary quoting. Do not use environment assignments, pipes, redirects, substitutions, or other shell syntax. Commands without an explicit repository may use normal `gh` context, but their token remains scoped to the declared repository. An explicit `-R`, `--repo`, `--repo=`, or repository argument to `gh repo clone`, `view`, or `fork` must match the declaration.\n\nDetermine the repositories needed to complete the task through source discovery and investigation, even when the requester does not name them. Do not ask the requester to enumerate repositories that can be discovered, and never default to the current agent's repository. The agent may select additional repositories as the work reveals them. Each authenticated command declares exactly one target repository and mints a credential lease for that repository at the moment it is needed, so cross-repository work uses separate scoped commands and leases.\n\nClone with `gh repo clone owner/name`. Use authenticated `git fetch`, `git pull`, `git push`, and `git ls-remote` through the `gh` tool too. Local `git status`, `diff`, `add`, `commit`, and `rebase` remain ordinary `bash` commands because they need no GitHub credential.\n\nUse GitHub CLI commands through the `gh` tool for issues, pull requests, reviews, Actions, CI, authentication status, configuration, aliases, extensions, and API requests. Common commands include `gh pr create --draft`, `gh pr checks`, `gh run rerun --failed`, and `gh pr review`, but they are not restrictions.\n\nRepositories that require verified signatures reject ordinary sandbox commits. Stage the intended changes explicitly, run `gh-signed-commit --repo owner/name --branch <branch> -m <headline>` through the `gh` tool, then create the draft pull request through the same tool.\n":"# GitHub\n\nUse the `gh` and `git` CLIs in `bash` for GitHub operations: cloning, fetching, pushing, issues, pull requests, reviews, and CI. They authenticate with the credentials already configured in the shell. Never put credentials in URLs or commands. If access is denied, report it plainly and stop.\n"}\nLoad the pr skill before publishing. Create one pull request per request unless the requester asks otherwise.\n`}function prSkillDescription(e){return e?`Prepare and publish a draft pull request with a signed commit, motivation-led description, testable hypothesis, and validation evidence.`:`Prepare and publish a draft pull request with a motivation-led description, testable hypothesis, and validation evidence.`}function prSkillMarkdown(e){return`# Publish a proposal
+
+Fetch the current base immediately before publication. Rebase onto it, or replay only the intended diff onto a clean checkout when local commits are unavailable. Stop on conflicts, stale refs, unexpected paths, or unrelated reversions.
+
+${e?`Stage only the intended changes. Repositories that require verified commits must use:
+
+\`\`\`sh
+gh-signed-commit --repo owner/name --branch <branch> --base <base> -m "<headline>" [-b "<body>"]
+\`\`\`
+
+The command commits only staged changes and synchronizes the checkout to the signed remote commit. Then write the PR body to a file and create one draft:`:`Stage only the intended changes, commit them, and push the branch. Then write the PR body to a file and create one draft:`}
+
+\`\`\`sh
+gh pr create --draft --title "<title>" --body-file <path> --base <base> --head <branch>
+\`\`\`
+
+Use a specific title that names the behavior or problem. Never use placeholders such as \`prepare changes\`. Keep secrets, private context, credentials, and requester identity out of public metadata.
+
+Write directly and top-down. Start with impact, then explain the essential decisions and why this shape tests the hypothesis. Prefer simple English and brief context over a wall of generated prose. Include truthful reproduction and validation evidence.
+
+A useful description answers:
+
+1. Why the change is necessary.
+2. Why this approach is the smallest sound solution.
+3. Which entry points and data flows change.
+4. What evidence verifies the expected outcome.
+
+Prefer this shape unless the repository has a required template:
+
+\`\`\`markdown
+[One-line summary of what changed and why]
+
+**Why**
+
+[Observed problem, evidence, and impact]
+
+**Approach**
+
+Because [cause], changing [mechanism] should [expected outcome].
+
+**Validation**
+
+[Focused checks and results]
+
+**Relevant context**
+
+[Only the implementation or data-flow details reviewers need]
+\`\`\`
+`}export{githubInstructions,prSkillDescription,prSkillMarkdown};

package/dist/src/extensions/{code → git}/extension/lib/github-shell.d.ts

@@ -17,7 +17,7 @@ export interface GitHubShellOutput {
     readonly stdout: string;
     readonly truncated: boolean;
 }
-interface GitHubConfig {
+export interface GitHubConfig {
     readonly broker: (sandbox: SandboxSession, rules: Readonly<Record<string, readonly GitHubLeaseRule[]>> | null) => Promise<void>;
     readonly connector: string;
     readonly org: string;

package/dist/src/extensions/git/extension/lib/github-shell.js

@@ -0,0 +1 @@
+import{shellQuote}from"./shell.js";import{validateRepositoryRoot}from"./repository-root.js";import{GITHUB_TOOLING_PATHS}from"./tooling.js";import{posix}from"node:path";import{getToken}from"#compiled/@vercel/connect/index.js";const MAX_OUTPUT_BYTES=1e5,leaseQueues=new Map,ALLOWED_GIT_REMOTE_COMMANDS=new Set([`fetch`,`ls-remote`,`pull`,`push`]);function githubShellApproval(e){if(!e)return`not-applicable`;try{return validateGitHubShellInput(e),`not-applicable`}catch(e){return{type:`denied`,reason:e instanceof Error?e.message:`Invalid GitHub command.`}}}async function executeGitHubShell(e,t,n){if(!t)throw Error(`GitHub command access is not configured for this agent.`);let r=validateGitHubShellInput(e),i=await n.getSandbox(),a=resolveWorkingDirectory(i,e.workingDirectory);(r[0]===`git`||r[0]===`gh-signed-commit`)&&(a=await validateRepositoryRoot(i,a));let o=e.permissions[0].repositories,s=await assertCommandTargets(r,o,a,i),c=repositoryNames(o,t.org),l={authorizationDetails:[{type:`github_app_installation`,org:t.org,repositories:c}],subject:{type:`app`}},u=await(n.getConnectToken??getToken)(t.connector,l);if(!u)throw Error(`Connect returned an empty token for ${JSON.stringify(t.connector)}.`);let d=executablePath(r[0]),f=s?[`-c`,`protocol.allow=never`,`-c`,`protocol.https.allow=always`,r[1],`https://github.com/${s}.git`,...r.slice(3)]:r.slice(1),p=`cd ${shellQuote(a)} && exec ${shellQuote(d)} ${f.map(shellQuote).join(` `)}`,m=`Basic ${Buffer.from(`x-access-token:${u}`).toString(`base64`)}`,h=crypto.randomUUID(),g=`eve-github-${h}`,_=`/tmp/eve-code-gh-${h}`,v=`Basic ${Buffer.from(`x-access-token:${g}`).toString(`base64`)}`,y;try{y=await withGitHubCredentialLease(i,n.sessionId,{authorization:m,placeholder:g,placeholderAuthorization:v,token:u},()=>{let e={GH_CONFIG_DIR:_,GH_PROMPT_DISABLED:`1`};return r[0]!==`git`&&(e.GH_TOKEN=g),e.GIT_CONFIG_COUNT=`2`,e.GIT_CONFIG_KEY_0=`http.https://github.com/.extraheader`,e.GIT_CONFIG_VALUE_0=`Authorization: ${v}`,e.GIT_CONFIG_KEY_1=`core.hooksPath`,e.GIT_CONFIG_VALUE_1=`/dev/null`,e.GIT_TERMINAL_PROMPT=`0`,e.PATH=`/usr/local/bin:/usr/bin:/bin`,i.run({command:p,env:e})},t.broker)}finally{await i.removePath({path:_,recursive:!0,force:!0})}let b=sanitizeOutput(y.stdout,u,m),x=sanitizeOutput(y.stderr,u,m);return{exitCode:y.exitCode,stdout:b.value,stderr:x.value,truncated:b.truncated||x.truncated}}async function withGitHubCredentialLease(e,t,n,r,i){let a=leaseQueues.get(t)??Promise.resolve(),o,s=new Promise(e=>{o=e}),c=a.then(()=>s);leaseQueues.set(t,c),await a;try{return await i(e,{"api.github.com":[{match:{headers:[{key:{exact:`authorization`},value:{regex:`^(?:token|Bearer) ${n.placeholder}$`}}]},transform:[{headers:{authorization:`Bearer ${n.token}`}}]}],"github.com":[{match:{headers:[{key:{exact:`authorization`},value:{exact:n.placeholderAuthorization}}]},transform:[{headers:{authorization:n.authorization}}]}]}),await r()}finally{try{await i(e,null)}finally{o(),leaseQueues.get(t)===c&&leaseQueues.delete(t)}}}function parseCommand(e){let t=e.trim();if(!t)throw Error(`GitHub command must not be empty.`);let n=[],r=``,i=null,a=!1,o=!1;for(let e of t){if(a){r+=e,a=!1,o=!0;continue}if(e===`\\`&&i!==`single`){a=!0,o=!0;continue}if(i===`single`){e===`'`?i=null:r+=e;continue}if(i===`double`){if(e===`"`)i=null;else if(e===`$`||e==="`")throw unsupportedSyntax();else r+=e;continue}if(e===`'`)i=`single`,o=!0;else if(e===`"`)i=`double`,o=!0;else if(/\s/u.test(e))o&&=(n.push(r),r=``,!1);else if(";&|<>$`(){}".includes(e))throw unsupportedSyntax();else r+=e,o=!0}if(a||i)throw Error(`GitHub command contains an unfinished quote or escape.`);if(o&&n.push(r),n.length===0)throw Error(`GitHub command must not be empty.`);return n}function validateGitHubShellInput(e){let t=parseCommand(e.command),n=e.permissions[0];if(e.permissions.length!==1||n?.provider!==`github`)throw Error(`Exactly one GitHub permission is required.`);if(n.access!==`write`)throw Error(`GitHub App commands require explicit write-capable access.`);if(!e.description.trim())throw Error(`description must describe the intended result.`);let[r,i]=t;if(r===`gh`){if(!i)throw Error(`A gh subcommand is required.`)}else if(r===`git`){if(!i||!ALLOWED_GIT_REMOTE_COMMANDS.has(i))throw Error(`Authenticated git supports only fetch, ls-remote, pull, and push; clone with gh repo clone.`)}else if(r!==`gh-signed-commit`)throw Error(`GitHub commands must use gh, an authenticated git remote command, or gh-signed-commit.`);return t}async function assertCommandTargets(e,t,n,r){let i=new Set(t.map(e=>e.toLowerCase())),a,o;if(e[0]===`git`){if(e[2]!==`origin`)throw Error(`Authenticated git commands must use the validated origin remote.`);let t=e[1]===`push`,i=await r.run({command:`cd ${shellQuote(n)} && git remote get-url ${t?`--push `:``}origin`,env:{GIT_TERMINAL_PROMPT:`0`,PATH:`/usr/bin:/bin`}});if(i.exitCode!==0)throw Error(`Could not resolve the origin GitHub repository.`);a=repositoryFromRemote(i.stdout.trim()),o=[a]}else if(e[0]===`gh-signed-commit`){if(o=repoFlagTargets(e.slice(1)),o.length===0)throw Error(`gh-signed-commit requires an explicit --repo owner/repository target.`)}else o=repoFlagTargets(e.slice(1)),e[1]===`repo`&&(e[2]===`clone`||e[2]===`view`||e[2]===`fork`)&&e[3]&&!e[3].startsWith(`-`)&&o.push(canonicalRepository(e[3]));for(let e of o)if(!i.has(e.toLowerCase()))throw Error(`Command target ${JSON.stringify(e)} is not in the declared repositories.`);return a}function repoFlagTargets(e){let t=[];for(let n=0;n<e.length;n+=1){let r=e[n];if(r===`--repo`||r===`-R`){let i=e[n+1];if(!i)throw Error(`${r} requires an owner/repository value.`);t.push(canonicalRepository(i)),n+=1}else r?.startsWith(`--repo=`)&&t.push(canonicalRepository(r.slice(7)))}return t}function repositoryFromRemote(e){let t=/^https:\/\/github\.com\/([^/]+\/[^/]+?)(?:\.git)?$/iu.exec(e);if(t?.[1])return canonicalRepository(t[1]);let n=/^git@github\.com:([^/]+\/[^/]+?)(?:\.git)?$/iu.exec(e);if(n?.[1])return canonicalRepository(n[1]);throw Error(`The origin remote is not a canonical GitHub repository URL.`)}function canonicalRepository(e){let t=e.replace(/\.git$/iu,``);if(!/^[A-Za-z0-9-]+\/[A-Za-z0-9._-]+$/u.test(t))throw Error(`Invalid GitHub repository ${JSON.stringify(e)}.`);return t}function repositoryNames(e,t){if(e.length!==1)throw Error(`Exactly one GitHub repository is required.`);let n=new Set;for(let r of e){let e=/^([A-Za-z0-9-]+)\/([A-Za-z0-9._-]+)$/u.exec(r);if(!e)throw Error(`Invalid GitHub repository ${JSON.stringify(r)}.`);if(e[1]?.toLowerCase()!==t.toLowerCase())throw Error(`Repository ${JSON.stringify(r)} is outside ${t}.`);n.add(e[2])}if(n.size!==1)throw Error(`Exactly one GitHub repository is required.`);return[...n]}function executablePath(e){return e===`gh`?GITHUB_TOOLING_PATHS.ghReal:e===`gh-signed-commit`?GITHUB_TOOLING_PATHS.trustedSignedCommit:`git`}function resolveWorkingDirectory(e,t){let n=posix.resolve(`/`,e.resolvePath(``)),r=posix.resolve(`/`,e.resolvePath(t?.trim()||``));if(r!==n&&!r.startsWith(`${n}/`))throw Error(`GitHub command workingDirectory must stay inside the sandbox workspace.`);return r}function sanitizeOutput(e,t,n){let r=e.replaceAll(t,`[redacted]`).replaceAll(n,`[redacted]`);return Buffer.byteLength(r)<=MAX_OUTPUT_BYTES?{value:r,truncated:!1}:{value:`[output truncated: showing final ${MAX_OUTPUT_BYTES} bytes]\n${Buffer.from(r).subarray(-1e5).toString()}`,truncated:!0}}function unsupportedSyntax(){return Error(`GitHub commands support argv syntax only, not pipes, redirects, substitutions, or shell operators.`)}export{executeGitHubShell,githubShellApproval,parseCommand};

package/dist/src/extensions/git/extension/lib/repository-root.d.ts

@@ -0,0 +1,5 @@
+import type { SandboxSession } from "eve/sandbox";
+type RootSandbox = Pick<SandboxSession, "resolvePath" | "run">;
+/** A workspace directory that must also be the top of a git work tree. */
+export declare function validateRepositoryRoot(sandbox: RootSandbox, root: string): Promise<string>;
+export {};

package/dist/src/extensions/git/extension/lib/repository-root.js

@@ -0,0 +1 @@
+import{shellQuote}from"./shell.js";async function validateRepositoryRoot(e,t){if(!t.startsWith(`/`))throw Error(`root must be an absolute sandbox path`);let n=await realPath(e,e.resolvePath(``),`sandbox workspace`),r=await realPath(e,t,`root`);if(!(n===`/`||r===n||r.startsWith(`${n}/`)))throw Error(`root resolves outside the workspace ${n}: ${r}`);let i=await e.run({command:`git -C ${shellQuote(r)} rev-parse --show-toplevel`});if(i.exitCode!==0||i.stdout.trim()!==r)throw Error(`root is not a git work tree root: ${t}`);return r}async function realPath(e,t,n){let r=await e.run({command:`realpath -e -z -- ${shellQuote(t)}`});if(r.exitCode!==0){let e=r.stderr.trim()||r.stdout.trim()||`no command output`;throw Error(`${n} could not be resolved: ${e.slice(0,2e3)}`)}let i=r.stdout.endsWith(`\0`)?r.stdout.slice(0,-1):r.stdout;if(i.length===0||i.includes(`\0`))throw Error(`${n} returned an invalid realpath`);return i}export{validateRepositoryRoot};

package/dist/src/extensions/git/extension/lib/sandbox.d.ts

@@ -0,0 +1,6 @@
+/** Consumer-facing helpers exported as `eve/extensions/git/sandbox`. */
+export { executeGitHubShell, githubShellApproval, type GitHubConfig, type GitHubLeaseRule, type GitHubShellInput, type GitHubShellOutput, } from "./github-shell.ts";
+export { GH_SIGNED_COMMIT_SOURCE, GH_SIGNED_COMMIT_VERSION } from "./signed-commit.ts";
+export { GITHUB_TOOLING_PATHS } from "./tooling.ts";
+export { defineGhTool, GH_TOOL_DESCRIPTION } from "./gh-tool.ts";
+export { githubInstructions, prSkillDescription, prSkillMarkdown } from "./github-guidance.ts";

package/dist/src/extensions/git/extension/lib/sandbox.js

@@ -0,0 +1 @@
+import{githubInstructions,prSkillDescription,prSkillMarkdown}from"./github-guidance.js";import{GITHUB_TOOLING_PATHS}from"./tooling.js";import{executeGitHubShell,githubShellApproval}from"./github-shell.js";import{GH_TOOL_DESCRIPTION,defineGhTool}from"./gh-tool.js";import{GH_SIGNED_COMMIT_SOURCE,GH_SIGNED_COMMIT_VERSION}from"./signed-commit.js";export{GH_SIGNED_COMMIT_SOURCE,GH_SIGNED_COMMIT_VERSION,GH_TOOL_DESCRIPTION,GITHUB_TOOLING_PATHS,defineGhTool,executeGitHubShell,githubInstructions,githubShellApproval,prSkillDescription,prSkillMarkdown};

package/dist/src/extensions/git/extension/lib/shell.d.ts

@@ -0,0 +1 @@
+export declare function shellQuote(value: string): string;

package/dist/src/extensions/git/extension/lib/shell.js

@@ -0,0 +1 @@
+function shellQuote(e){return`'${e.replaceAll(`'`,`'"'"'`)}'`}export{shellQuote};

package/dist/src/extensions/git/extension/lib/tooling.d.ts

@@ -0,0 +1,4 @@
+export declare const GITHUB_TOOLING_PATHS: {
+    readonly ghReal: "/usr/local/lib/eve-code/gh";
+    readonly trustedSignedCommit: "/usr/local/lib/eve-code/gh-signed-commit";
+};

package/dist/src/extensions/git/extension/lib/tooling.js

@@ -0,0 +1 @@
+const TRUSTED_TOOLING_ROOT=`/usr/local/lib/eve-code`,GITHUB_TOOLING_PATHS={ghReal:`${TRUSTED_TOOLING_ROOT}/gh`,trustedSignedCommit:`${TRUSTED_TOOLING_ROOT}/gh-signed-commit`};export{GITHUB_TOOLING_PATHS};

package/dist/src/extensions/git/extension/skills/pr.d.ts

@@ -0,0 +1,5 @@
+declare const _default: import("eve/skills").DynamicSentinel<{
+    description: string;
+    markdown: string;
+}>;
+export default _default;

package/dist/src/extensions/git/extension/skills/pr.js

@@ -0,0 +1 @@
+import extension_default from"../extension.js";import{prSkillDescription,prSkillMarkdown}from"../lib/github-guidance.js";import{defineDynamic,defineSkill}from"eve/skills";var pr_default=defineDynamic({events:{"session.started":()=>{let e=extension_default.config.github!==void 0;return defineSkill({description:prSkillDescription(e),markdown:prSkillMarkdown(e)})}}});export{pr_default as default};

package/dist/src/extensions/git/extension/tools/gh.d.ts

@@ -0,0 +1,28 @@
+/** Present only with `github` config; otherwise agents use `gh` from their own shell. */
+declare const _default: import("eve/tools").DynamicSentinel<(import("eve/tools").ToolDefinition<{
+    command: string;
+    permissions: {
+        provider: "github";
+        repositories: string[];
+        access: "write";
+    }[];
+    description: string;
+    workingDirectory?: string | undefined;
+}, {
+    exitCode: number;
+    stderr: string;
+    stdout: string;
+    truncated: boolean;
+}> & {
+    execute(input: {
+        command: string;
+        permissions: {
+            provider: "github";
+            repositories: string[];
+            access: "write";
+        }[];
+        description: string;
+        workingDirectory?: string | undefined;
+    }, ctx: import("eve/tools").ToolContext): Promise<import("../lib/github-shell.ts").GitHubShellOutput>;
+}) | null>;
+export default _default;

package/dist/src/extensions/git/extension/tools/gh.js

@@ -0,0 +1 @@
+import extension_default from"../extension.js";import{defineGhTool}from"../lib/gh-tool.js";import{defineDynamic}from"eve/tools";var gh_default=defineDynamic({events:{"session.started":()=>extension_default.config.github===void 0?null:defineGhTool(()=>extension_default.config.github)}});export{gh_default as default};

package/dist/src/extensions/git/tools.d.ts

@@ -0,0 +1,27 @@
+/** The Connect-brokered `gh` tool, bound to the `eve/extensions/git` mount's `github` config. */
+export declare const gh: import("../../tools/definition.ts").ToolDefinition<{
+    command: string;
+    permissions: {
+        provider: "github";
+        repositories: string[];
+        access: "write";
+    }[];
+    description: string;
+    workingDirectory?: string | undefined;
+}, {
+    exitCode: number;
+    stderr: string;
+    stdout: string;
+    truncated: boolean;
+}> & {
+    execute(input: {
+        command: string;
+        permissions: {
+            provider: "github";
+            repositories: string[];
+            access: "write";
+        }[];
+        description: string;
+        workingDirectory?: string | undefined;
+    }, ctx: import("../../tools/definition.ts").ToolContext): Promise<import("./extension/lib/github-shell.ts").GitHubShellOutput>;
+};

package/dist/src/extensions/git/tools.js

@@ -0,0 +1 @@
+import extension_default from"./extension/extension.js";import{defineGhTool}from"./extension/lib/gh-tool.js";const gh=defineGhTool(()=>extension_default.config.github);export{gh};

package/dist/src/framework/sources/registry.js

@@ -1 +1 @@
-import{resolveInstalledPackageInfo}from"#internal/application/package.js";import{createAgentSourceRegistry,defineProgrammaticAgentSource,loadProgrammaticModuleNamespace,memoizeModuleNamespaceFactories}from"#compiler/source-graph.js";const revision=`eve@${resolveInstalledPackageInfo().version}:compiled-manifest-v52`,localDefaults=defineProgrammaticAgentSource({id:`eve:defaults`,revision,modules:[{logicalPath:`agent.ts`,loadNamespace:()=>import(`#framework/sources/modules/agent.js`)},{logicalPath:`sandbox.ts`,semanticRevision:`eve:default-sandbox:v1`,loadNamespace:()=>import(`#framework/sources/modules/sandbox.js`)},{logicalPath:`tools/bash.ts`,loadNamespace:()=>import(`#tools/provided/bash.js`)},{logicalPath:`tools/read_file.ts`,loadNamespace:()=>import(`#tools/provided/read-file.js`)},{logicalPath:`tools/write_file.ts`,loadNamespace:()=>import(`#tools/provided/write-file.js`)},{logicalPath:`tools/web_fetch.ts`,loadNamespace:()=>import(`#tools/provided/web-fetch.js`)},{logicalPath:`tools/load_skill.ts`,loadNamespace:()=>import(`#tools/provided/load-skill.js`)},{logicalPath:`tools/connection_tools.ts`,loadNamespace:()=>import(`#tools/framework/connection-tools.js`)},{logicalPath:`tools/web_search.ts`,loadNamespace:()=>import(`#tools/provided/web-search.js`)}]}),rootDefaults=defineProgrammaticAgentSource({id:`eve:root-defaults`,revision,modules:[{logicalPath:`tools/agent.ts`,loadNamespace:()=>import(`#tools/framework/agent.js`)},{logicalPath:`channels/eve.ts`,loadNamespace:()=>import(`#framework/sources/modules/eve-channel.js`)},{logicalPath:`channels/home.ts`,loadNamespace:()=>import(`#framework/sources/modules/home-channel.js`)}]}),scheduleCollectionWrapperTemplateSource=defineProgrammaticAgentSource({id:`eve:schedule-collection-wrapper`,revision,modules:[{logicalPath:`tools/schedule-collection-wrapper.ts`,loadNamespace:async e=>{let{loadScheduleCollectionWrapperNamespace:t}=await import(`#framework/sources/modules/schedule-collection-wrapper.js`);return await t(e)}}]}),memoryWrapperTemplateSource=defineProgrammaticAgentSource({id:`eve:memory-wrapper`,revision,modules:[{logicalPath:`tools/memory-wrapper.ts`,loadNamespace:async e=>{let{loadMemoryWrapperNamespace:t}=await import(`#framework/sources/modules/memory-wrapper.js`);return await t(e)}}]}),frameworkAgentSourceRegistry=createAgentSourceRegistry([{applyTo:`all-local-nodes`,source:localDefaults},{applyTo:`root`,source:rootDefaults}],{templates:[memoryWrapperTemplateSource,scheduleCollectionWrapperTemplateSource]}),memoryWrapperTemplate=frameworkAgentSourceRegistry.templates.get(memoryWrapperTemplateSource.id),scheduleCollectionWrapperTemplate=frameworkAgentSourceRegistry.templates.get(scheduleCollectionWrapperTemplateSource.id);async function loadFrameworkProgrammaticModule(e,t){return memoizeModuleNamespaceFactories(await loadProgrammaticModuleNamespace({backing:e,dependencyNamespaces:t,registries:[frameworkAgentSourceRegistry]}))}export{frameworkAgentSourceRegistry,loadFrameworkProgrammaticModule,memoryWrapperTemplate,scheduleCollectionWrapperTemplate};
+import{resolveInstalledPackageInfo}from"#internal/application/package.js";import{createAgentSourceRegistry,defineProgrammaticAgentSource,loadProgrammaticModuleNamespace,memoizeModuleNamespaceFactories}from"#compiler/source-graph.js";const revision=`eve@${resolveInstalledPackageInfo().version}:compiled-manifest-v53`,localDefaults=defineProgrammaticAgentSource({id:`eve:defaults`,revision,modules:[{logicalPath:`agent.ts`,loadNamespace:()=>import(`#framework/sources/modules/agent.js`)},{logicalPath:`sandbox.ts`,semanticRevision:`eve:default-sandbox:v1`,loadNamespace:()=>import(`#framework/sources/modules/sandbox.js`)},{logicalPath:`tools/bash.ts`,loadNamespace:()=>import(`#tools/provided/bash.js`)},{logicalPath:`tools/read_file.ts`,loadNamespace:()=>import(`#tools/provided/read-file.js`)},{logicalPath:`tools/write_file.ts`,loadNamespace:()=>import(`#tools/provided/write-file.js`)},{logicalPath:`tools/web_fetch.ts`,loadNamespace:()=>import(`#tools/provided/web-fetch.js`)},{logicalPath:`tools/web_search.ts`,loadNamespace:()=>import(`#tools/provided/web-search.js`)}]}),rootDefaults=defineProgrammaticAgentSource({id:`eve:root-defaults`,revision,modules:[{logicalPath:`tools/agent.ts`,loadNamespace:()=>import(`#tools/framework/agent.js`)},{logicalPath:`channels/eve.ts`,loadNamespace:()=>import(`#framework/sources/modules/eve-channel.js`)},{logicalPath:`channels/home.ts`,loadNamespace:()=>import(`#framework/sources/modules/home-channel.js`)}]}),scheduleCollectionWrapperTemplateSource=defineProgrammaticAgentSource({id:`eve:schedule-collection-wrapper`,revision,modules:[{logicalPath:`tools/schedule-collection-wrapper.ts`,loadNamespace:async e=>{let{loadScheduleCollectionWrapperNamespace:t}=await import(`#framework/sources/modules/schedule-collection-wrapper.js`);return await t(e)}}]}),memoryWrapperTemplateSource=defineProgrammaticAgentSource({id:`eve:memory-wrapper`,revision,modules:[{logicalPath:`tools/memory-wrapper.ts`,loadNamespace:async e=>{let{loadMemoryWrapperNamespace:t}=await import(`#framework/sources/modules/memory-wrapper.js`);return await t(e)}}]}),frameworkAgentSourceRegistry=createAgentSourceRegistry([{applyTo:`all-local-nodes`,source:localDefaults},{applyTo:`root`,source:rootDefaults}],{templates:[memoryWrapperTemplateSource,scheduleCollectionWrapperTemplateSource]}),memoryWrapperTemplate=frameworkAgentSourceRegistry.templates.get(memoryWrapperTemplateSource.id),scheduleCollectionWrapperTemplate=frameworkAgentSourceRegistry.templates.get(scheduleCollectionWrapperTemplateSource.id);async function loadFrameworkProgrammaticModule(e,t){return memoizeModuleNamespaceFactories(await loadProgrammaticModuleNamespace({backing:e,dependencyNamespaces:t,registries:[frameworkAgentSourceRegistry]}))}export{frameworkAgentSourceRegistry,loadFrameworkProgrammaticModule,memoryWrapperTemplate,scheduleCollectionWrapperTemplate};

package/dist/src/harness/action-presentation.d.ts

@@ -1,7 +1,7 @@
 import type { ToolSet, TypedToolCall } from "ai";
 import type { ActionPresentationByCallId } from "#protocol/message.js";
 import type { HarnessToolDefinition } from "#harness/execute-tool.js";
-import type { HarnessToolMap } from "#harness/types.js";
+import type { HarnessToolLookup } from "#harness/types.js";
 import type { RuntimeActionRequest } from "#shared/action-types.js";
 export interface RuntimeActionRequestProjection {
     readonly action: RuntimeActionRequest;
@@ -9,7 +9,7 @@ export interface RuntimeActionRequestProjection {
 }
 export declare function createPresentedRuntimeActionRequestFromToolCall(input: {
     readonly toolCall: TypedToolCall<ToolSet>;
-    readonly tools: HarnessToolMap;
+    readonly tools: HarnessToolLookup;
 }): RuntimeActionRequestProjection;
 /** Calls a tool's label callback with a detached, JSON-safe input copy. */
 export declare function projectToolStartLabel(definition: {

package/dist/src/harness/action-result-helpers.d.ts

@@ -1,5 +1,5 @@
 import type { ModelMessage, ToolSet, TypedToolError, TypedToolResult } from "ai";
-import type { RuntimeToolResultActionResult } from "#shared/action-types.js";
+import type { RuntimeActionResult, RuntimeToolResultActionResult } from "#shared/action-types.js";
 type ToolResponsePart = Extract<ModelMessage, {
     role: "tool";
 }>["content"][number];
@@ -33,6 +33,12 @@ export declare function createRuntimeToolResultFromStepResult(toolResult: TypedT
  * `tool-error` part.
  */
 export declare function createRuntimeToolResultFromToolError(toolError: TypedToolError<ToolSet>): RuntimeToolResultActionResult;
+/**
+ * The action result a call's tool result reports. A skill load reports the
+ * `load-skill-result` of the skill its `input` names, as its call reports a
+ * `load-skill` action.
+ */
+export declare function toActionResult(result: RuntimeToolResultActionResult, input: unknown): RuntimeActionResult;
 /**
  * Builds the inline tool-result message part that repairs model history after a
  * local tool execution error.
@@ -45,6 +51,8 @@ export declare function createToolResultMessagePartFromToolError(toolError: Type
  * after `tool-output-denied` chunks — surface the result only on the
  * response messages array).
  */
-export declare function createRuntimeToolResultFromMessagePart(part: ToolResultPart): RuntimeToolResultActionResult;
+export declare function createRuntimeToolResultFromMessagePart(part: ToolResultPart, 
+/** The entry the result's call ran, which history names after the catalog tool for a call made through one. */
+toolName: string): RuntimeToolResultActionResult;
 export declare function isToolResultError(output: ToolResultPart["output"]): boolean;
 export {};