joonecli 0.2.0 → 0.2.2

package/dist/hitl/bridge.js

@@ -41,23 +41,10 @@ export class HITLBridge extends EventEmitter {
             options,
             createdAt: Date.now(),
         };
-        return new Promise((resolve, reject) => {
+        return new Promise((resolve) => {
             this.pendingResolvers.set(id, resolve);
             // Emit the question so the TUI can render it
             this.emit("question", payload);
-            // Timeout: auto-reject if user doesn't respond
-            const timer = setTimeout(() => {
-                if (this.pendingResolvers.has(id)) {
-                    this.pendingResolvers.delete(id);
-                    resolve("[No response — the user did not answer within the timeout period.]");
-                }
-            }, this.timeoutMs);
-            // Clean up timer if resolved before timeout
-            const originalResolve = this.pendingResolvers.get(id);
-            this.pendingResolvers.set(id, (answer) => {
-                clearTimeout(timer);
-                originalResolve(answer);
-            });
         });
     }
     /**
@@ -82,19 +69,6 @@ export class HITLBridge extends EventEmitter {
             this.pendingResolvers.set(id, wrappedResolve);
             // Emit so the TUI can render the permission prompt
             this.emit("permission", payload);
-            // Timeout: auto-deny
-            const timer = setTimeout(() => {
-                if (this.pendingResolvers.has(id)) {
-                    this.pendingResolvers.delete(id);
-                    resolve(false); // Denied by timeout
-                }
-            }, this.timeoutMs);
-            // Clean up timer on resolve
-            const current = this.pendingResolvers.get(id);
-            this.pendingResolvers.set(id, (answer) => {
-                clearTimeout(timer);
-                current(answer);
-            });
         });
     }
     /**

package/dist/hitl/bridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../src/hitl/bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAwB3C;;;;;;;;;GASG;AACH,MAAM,OAAO,UAAW,SAAQ,YAAY;IAChC,MAAM,CAAC,QAAQ,GAAsB,IAAI,CAAC;IAC1C,gBAAgB,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC/D,SAAS,CAAS;IAClB,eAAe,GAAG,CAAC,CAAC;IAE5B,YAAY,YAAoB,CAAC,GAAG,EAAE,GAAG,IAAI;QACzC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,SAAkB;QACjC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACvB,UAAU,CAAC,QAAQ,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,CAAC;IAC/B,CAAC;IAED,MAAM,CAAC,aAAa;QAChB,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,OAAkB;QAC9C,MAAM,EAAE,GAAG,UAAU,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAE5D,MAAM,OAAO,GAAiB;YAC1B,EAAE;YACF,QAAQ;YACR,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC;QAEF,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAEvC,6CAA6C;YAC7C,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAE/B,+CAA+C;YAC/C,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBAChC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACjC,OAAO,CAAC,oEAAoE,CAAC,CAAC;gBAClF,CAAC;YACL,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAEnB,4CAA4C;YAC5C,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;YACvD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAc,EAAE,EAAE;gBAC7C,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,eAAe,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CAAC,QAAgB,EAAE,IAA6B;QACnE,MAAM,EAAE,GAAG,aAAa,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAE/D,MAAM,OAAO,GAA0B;YACnC,EAAE;YACF,QAAQ;YACR,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC;QAEF,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACpC,MAAM,cAAc,GAAG,CAAC,MAAc,EAAE,EAAE;gBACtC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC/C,OAAO,CAAC,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,SAAS,CAAC,CAAC;YACpF,CAAC,CAAC;YAEF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,cAAqB,CAAC,CAAC;YAErD,mDAAmD;YACnD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAEjC,qBAAqB;YACrB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;oBAChC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACjC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB;gBACxC,CAAC;YACL,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAEnB,4BAA4B;YAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;YAC/C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,MAAc,EAAE,EAAE;gBAC7C,YAAY,CAAC,KAAK,CAAC,CAAC;gBACnB,OAAe,CAAC,MAAM,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,EAAU,EAAE,MAAc;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,QAAQ,EAAE,CAAC;YACX,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;IACL,CAAC;IAED;;OAEG;IACH,kBAAkB;QACd,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC;IAC1C,CAAC"}
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../src/hitl/bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAwB3C;;;;;;;;;GASG;AACH,MAAM,OAAO,UAAW,SAAQ,YAAY;IAChC,MAAM,CAAC,QAAQ,GAAsB,IAAI,CAAC;IAC1C,gBAAgB,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC/D,SAAS,CAAS;IAClB,eAAe,GAAG,CAAC,CAAC;IAE5B,YAAY,YAAoB,CAAC,GAAG,EAAE,GAAG,IAAI;QACzC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;IAED,MAAM,CAAC,WAAW,CAAC,SAAkB;QACjC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;YACvB,UAAU,CAAC,QAAQ,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,CAAC;IAC/B,CAAC;IAED,MAAM,CAAC,aAAa;QAChB,UAAU,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,OAAkB;QAC9C,MAAM,EAAE,GAAG,UAAU,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAE5D,MAAM,OAAO,GAAiB;YAC1B,EAAE;YACF,QAAQ;YACR,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC;QAEF,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;YACnC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAEvC,6CAA6C;YAC7C,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CAAC,QAAgB,EAAE,IAA6B;QACnE,MAAM,EAAE,GAAG,aAAa,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAE/D,MAAM,OAAO,GAA0B;YACnC,EAAE;YACF,QAAQ;YACR,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC;QAEF,OAAO,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACpC,MAAM,cAAc,GAAG,CAAC,MAAc,EAAE,EAAE;gBACtC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC/C,OAAO,CAAC,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,SAAS,CAAC,CAAC;YACpF,CAAC,CAAC;YAEF,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,cAAqB,CAAC,CAAC;YAErD,mDAAmD;YACnD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,EAAU,EAAE,MAAc;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,QAAQ,EAAE,CAAC;YACX,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;IACL,CAAC;IAED;;OAEG;IACH,kBAAkB;QACd,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC;IAC1C,CAAC"}

package/dist/middleware/loopDetection.d.ts

@@ -1,28 +1,12 @@
-import { ToolCallContext, ToolMiddleware } from "./types.js";
 /**
- * Prevents the "Blind Retry" doom loop.
+ * Creates a middleware that prevents the "Blind Retry" doom loop.
  *
- * Tracks a rolling window of recent tool call signatures. If the same
- * tool + args combination appears N times consecutively, the call is
- * rejected with an instruction to try a different approach.
+ * Inspects the conversation history right before the model is called.
+ * If the last N AI messages contain the exact same tool calls, it
+ * injects a warning message to force the model to try a different approach.
  *
  * Reference: docs/02_edge_cases_and_mitigations.md — "The Blind Retry Doom Loop"
+ *
+ * @param threshold - Number of identical consecutive calls before blocking (default: 3).
  */
-export declare class LoopDetectionMiddleware implements ToolMiddleware {
-    readonly name = "LoopDetection";
-    private history;
-    private readonly threshold;
-    /**
-     * @param threshold - Number of identical consecutive calls before blocking (default: 3).
-     */
-    constructor(threshold?: number);
-    /**
-     * Creates a signature string for a tool call (name + sorted args JSON).
-     */
-    private signature;
-    before(ctx: ToolCallContext): ToolCallContext | string;
-    /**
-     * Resets the history. Useful for testing or session boundaries.
-     */
-    reset(): void;
-}
+export declare function createLoopDetectionMiddleware(threshold?: number): import("langchain").AgentMiddleware<undefined, undefined, unknown, readonly (import("@langchain/core/tools").ClientTool | import("@langchain/core/tools").ServerTool)[]>;

package/dist/middleware/loopDetection.js

@@ -1,49 +1,45 @@
+import { createMiddleware } from "langchain";
+import { AIMessage, HumanMessage } from "@langchain/core/messages";
 /**
- * Prevents the "Blind Retry" doom loop.
+ * Creates a middleware that prevents the "Blind Retry" doom loop.
  *
- * Tracks a rolling window of recent tool call signatures. If the same
- * tool + args combination appears N times consecutively, the call is
- * rejected with an instruction to try a different approach.
+ * Inspects the conversation history right before the model is called.
+ * If the last N AI messages contain the exact same tool calls, it
+ * injects a warning message to force the model to try a different approach.
  *
  * Reference: docs/02_edge_cases_and_mitigations.md — "The Blind Retry Doom Loop"
+ *
+ * @param threshold - Number of identical consecutive calls before blocking (default: 3).
  */
-export class LoopDetectionMiddleware {
-    name = "LoopDetection";
-    history = [];
-    threshold;
-    /**
-     * @param threshold - Number of identical consecutive calls before blocking (default: 3).
-     */
-    constructor(threshold = 3) {
-        this.threshold = threshold;
-    }
-    /**
-     * Creates a signature string for a tool call (name + sorted args JSON).
-     */
-    signature(ctx) {
-        return `${ctx.toolName}:${JSON.stringify(ctx.args, Object.keys(ctx.args).sort())}`;
-    }
-    before(ctx) {
-        const sig = this.signature(ctx);
-        this.history.push(sig);
-        // Keep only the last N entries to avoid unbounded growth
-        if (this.history.length > this.threshold * 2) {
-            this.history = this.history.slice(-this.threshold * 2);
-        }
-        // Check if the last `threshold` entries are all identical
-        const tail = this.history.slice(-this.threshold);
-        if (tail.length >= this.threshold &&
-            tail.every((s) => s === sig)) {
-            return (`⚠ Loop detected: You have called "${ctx.toolName}" with identical arguments ` +
-                `${this.threshold} times consecutively. Stop this approach and try a different strategy.`);
-        }
-        return ctx;
-    }
-    /**
-     * Resets the history. Useful for testing or session boundaries.
-     */
-    reset() {
-        this.history = [];
-    }
+export function createLoopDetectionMiddleware(threshold = 3) {
+    const signature = (calls) => {
+        return calls
+            .map((c) => `${c.name}:${JSON.stringify(c.args, Object.keys(c.args || {}).sort())}`)
+            .join("|");
+    };
+    return createMiddleware({
+        name: "LoopDetectionMiddleware",
+        wrapModelCall: async (request, handler) => {
+            // Extract recent AI messages that have tool calls
+            const aiMessagesWithTools = request.messages.filter((m) => m instanceof AIMessage && m.tool_calls !== undefined && m.tool_calls.length > 0);
+            if (aiMessagesWithTools.length >= threshold) {
+                const recent = aiMessagesWithTools.slice(-threshold);
+                const sigs = recent.map((m) => signature(m.tool_calls));
+                const allIdentical = sigs.every((sig) => sig === sigs[0]);
+                if (allIdentical) {
+                    // Identify the tools for the warning
+                    const toolNames = recent[0].tool_calls.map(c => c.name).join(", ");
+                    // Inject a strong human message to break the loop
+                    const updatedMessages = [
+                        ...request.messages,
+                        new HumanMessage(`⚠ Loop detected: You have called the tools [${toolNames}] with identical arguments ` +
+                            `${threshold} times consecutively. Stop this approach and try a different strategy immediately.`)
+                    ];
+                    return handler({ ...request, messages: updatedMessages });
+                }
+            }
+            return handler(request);
+        },
+    });
 }
 //# sourceMappingURL=loopDetection.js.map

package/dist/middleware/loopDetection.js.map

@@ -1 +1 @@
-{"version":3,"file":"loopDetection.js","sourceRoot":"","sources":["../../src/middleware/loopDetection.ts"],"names":[],"mappings":"AAEA;;;;;;;;GAQG;AACH,MAAM,OAAO,uBAAuB;IACzB,IAAI,GAAG,eAAe,CAAC;IAExB,OAAO,GAAa,EAAE,CAAC;IACd,SAAS,CAAS;IAEnC;;OAEG;IACH,YAAY,SAAS,GAAG,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,GAAoB;QACpC,OAAO,GAAG,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IACrF,CAAC;IAED,MAAM,CAAC,GAAoB;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAEhC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEvB,yDAAyD;QACzD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QACzD,CAAC;QAED,0DAA0D;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,IACE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS;YAC7B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,EAC5B,CAAC;YACD,OAAO,CACL,qCAAqC,GAAG,CAAC,QAAQ,6BAA6B;gBAC9E,GAAG,IAAI,CAAC,SAAS,wEAAwE,CAC1F,CAAC;QACJ,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;IACpB,CAAC;CACF"}
+{"version":3,"file":"loopDetection.js","sourceRoot":"","sources":["../../src/middleware/loopDetection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAe,MAAM,0BAA0B,CAAC;AAGhF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAAC,SAAS,GAAG,CAAC;IACzD,MAAM,SAAS,GAAG,CAAC,KAAwC,EAAU,EAAE;QACrE,OAAO,KAAK;aACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;aACnF,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,CAAC,CAAC;IAEF,OAAO,gBAAgB,CAAC;QACtB,IAAI,EAAE,yBAAyB;QAC/B,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;YACxC,kDAAkD;YAClD,MAAM,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CACjD,CAAC,CAAC,EAAkB,EAAE,CAAC,CAAC,YAAY,SAAS,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CACvG,CAAC;YAEF,IAAI,mBAAmB,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;gBAC5C,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;gBACrD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,UAAW,CAAC,CAAC,CAAC;gBAEzD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAE1D,IAAI,YAAY,EAAE,CAAC;oBACjB,qCAAqC;oBACrC,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,UAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAEpE,kDAAkD;oBAClD,MAAM,eAAe,GAAG;wBACtB,GAAG,OAAO,CAAC,QAAQ;wBACnB,IAAI,YAAY,CACd,+CAA+C,SAAS,6BAA6B;4BACrF,GAAG,SAAS,oFAAoF,CACjG;qBACF,CAAC;oBAEF,OAAO,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC;YAED,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/sandbox/whitelistedBackend.d.ts

@@ -0,0 +1,5 @@
+import { LocalShellBackend } from "deepagents";
+export declare class WhitelistedLocalShellBackend extends LocalShellBackend {
+    constructor(config?: any);
+    execute(command: string): Promise<import("deepagents").ExecuteResponse>;
+}

package/dist/sandbox/whitelistedBackend.js

@@ -0,0 +1,27 @@
+import { LocalShellBackend } from "deepagents";
+const ALLOWED_BINARIES = new Set(["npm", "npx", "node", "ls", "dir", "echo", "cat", "git"]);
+export class WhitelistedLocalShellBackend extends LocalShellBackend {
+    constructor(config) {
+        super(config);
+    }
+    async execute(command) {
+        const trimmed = command.trim();
+        const binary = trimmed.split(/\s+/)[0];
+        if (!ALLOWED_BINARIES.has(binary)) {
+            return {
+                output: `Security Error: Command '${binary}' is not allowed. Only [${Array.from(ALLOWED_BINARIES).join(", ")}] are permitted.`,
+                exitCode: 1,
+                truncated: false
+            };
+        }
+        if (/[&|;`$]/.test(trimmed)) {
+            return {
+                output: `Security Error: Command contains forbidden shell operators (&, |, ;, \`, $).`,
+                exitCode: 1,
+                truncated: false
+            };
+        }
+        return super.execute(command);
+    }
+}
+//# sourceMappingURL=whitelistedBackend.js.map

package/dist/sandbox/whitelistedBackend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whitelistedBackend.js","sourceRoot":"","sources":["../../src/sandbox/whitelistedBackend.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAI/C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAE5F,MAAM,OAAO,4BAA6B,SAAQ,iBAAiB;IAC/D,YAAY,MAAY;QACpB,KAAK,CAAC,MAAM,CAAC,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAe;QACzB,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAEvC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,OAAO;gBACH,MAAM,EAAE,4BAA4B,MAAM,2BAA2B,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB;gBAC9H,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,KAAK;aACnB,CAAC;QACN,CAAC;QAED,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACH,MAAM,EAAE,8EAA8E;gBACtF,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,KAAK;aACnB,CAAC;QACN,CAAC;QAED,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;CACJ"}

package/dist/tools/askUser.d.ts

@@ -1,10 +1,19 @@
-import { DynamicToolInterface } from "./index.js";
+import { z } from "zod";
 /**
- * AskUserQuestionTool — allows the agent to ask the user a clarifying question mid-turn.
+ * askUserQuestionTool — allows the agent to ask the user a clarifying question mid-turn.
  *
  * Use cases:
  * - Resolving ambiguous requirements before coding.
  * - Getting user preferences (framework choice, styling, naming).
  * - Requesting approval of an implementation plan before proceeding.
  */
-export declare const AskUserQuestionTool: DynamicToolInterface;
+export declare const askUserQuestionTool: import("langchain").DynamicStructuredTool<z.ZodObject<{
+    question: z.ZodString;
+    options: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>, {
+    question: string;
+    options?: string[];
+}, {
+    question: string;
+    options?: string[] | undefined;
+}, string, "ask_user_question">;

package/dist/tools/askUser.js

@@ -1,42 +1,30 @@
 import { HITLBridge } from "../hitl/bridge.js";
+import { tool } from "langchain";
+import { z } from "zod";
 /**
- * AskUserQuestionTool — allows the agent to ask the user a clarifying question mid-turn.
+ * askUserQuestionTool — allows the agent to ask the user a clarifying question mid-turn.
  *
  * Use cases:
  * - Resolving ambiguous requirements before coding.
  * - Getting user preferences (framework choice, styling, naming).
  * - Requesting approval of an implementation plan before proceeding.
  */
-export const AskUserQuestionTool = {
+export const askUserQuestionTool = tool(async ({ question, options }) => {
+    if (!question || question.trim() === "") {
+        return "Error: You must provide a non-empty question.";
+    }
+    const bridge = HITLBridge.getInstance();
+    const answer = await bridge.askUser(question, options);
+    return answer;
+}, {
     name: "ask_user_question",
     description: "Ask the user a question and wait for their response. " +
         "Use this when you need clarification on the task, user preferences, " +
         "or approval before proceeding with a significant change. " +
         "You may optionally provide a list of answer choices.",
-    schema: {
-        type: "object",
-        properties: {
-            question: {
-                type: "string",
-                description: "The question to ask the user.",
-            },
-            options: {
-                type: "array",
-                items: { type: "string" },
-                description: "Optional list of predefined answer choices.",
-            },
-        },
-        required: ["question"],
-    },
-    async execute(args) {
-        const question = args.question;
-        const options = args.options;
-        if (!question || question.trim() === "") {
-            return { content: "Error: You must provide a non-empty question.", isError: true };
-        }
-        const bridge = HITLBridge.getInstance();
-        const answer = await bridge.askUser(question, options);
-        return { content: answer };
-    },
-};
+    schema: z.object({
+        question: z.string().describe("The question to ask the user."),
+        options: z.array(z.string()).optional().describe("Optional list of predefined answer choices."),
+    }),
+});
 //# sourceMappingURL=askUser.js.map

package/dist/tools/askUser.js.map

@@ -1 +1 @@
-{"version":3,"file":"askUser.js","sourceRoot":"","sources":["../../src/tools/askUser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG/C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAyB;IACrD,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACP,uDAAuD;QACvD,sEAAsE;QACtE,2DAA2D;QAC3D,sDAAsD;IAC1D,MAAM,EAAE;QACJ,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE;YACR,QAAQ,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,+BAA+B;aAC/C;YACD,OAAO,EAAE;gBACL,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,WAAW,EAAE,6CAA6C;aAC7D;SACJ;QACD,QAAQ,EAAE,CAAC,UAAU,CAAC;KACzB;IACD,KAAK,CAAC,OAAO,CAAC,IAA6B;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAkB,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAA+B,CAAC;QAErD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACtC,OAAO,EAAE,OAAO,EAAE,+CAA+C,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACvF,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEvD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;CACJ,CAAC"}
+{"version":3,"file":"askUser.js","sourceRoot":"","sources":["../../src/tools/askUser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CACnC,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAA4C,EAAE,EAAE;IACtE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACtC,OAAO,+CAA+C,CAAC;IAC3D,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAEvD,OAAO,MAAM,CAAC;AAClB,CAAC,EACD;IACI,IAAI,EAAE,mBAAmB;IACzB,WAAW,EACP,uDAAuD;QACvD,sEAAsE;QACtE,2DAA2D;QAC3D,sDAAsD;IAC1D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;QAC9D,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;KAClG,CAAC;CACL,CACJ,CAAC"}

package/dist/tools/bashTool.d.ts

@@ -0,0 +1,11 @@
+import { z } from "zod";
+import { SandboxManager } from "../sandbox/manager.js";
+import { FileSync } from "../sandbox/sync.js";
+export declare function bindSandbox(sandbox: SandboxManager, fileSync: FileSync): void;
+export declare const bashTool: import("langchain").DynamicStructuredTool<z.ZodObject<{
+    command: z.ZodString;
+}, z.core.$strip>, {
+    command: string;
+}, {
+    command: string;
+}, string, "bash">;

package/dist/tools/bashTool.js

@@ -0,0 +1,51 @@
+import { tool } from "langchain";
+import { z } from "zod";
+const BLOCKED_PATTERNS = [
+    // Destructive
+    [/rm\s+(-\w*r\w*f\w*|-\w*f\w*r\w*)\s+\/(\*)?(?:\s|$)/, "destructive: rm -rf /"],
+    [/mkfs\b/, "destructive: filesystem format"],
+    [/\bdd\s+.*of=\/dev\//, "destructive: raw disk write"],
+    [/chmod\s+(-\w+\s+)*777\s+\//, "dangerous: chmod 777 on root"],
+    // Interactive / hanging
+    [/\b(vim|vi|nano|emacs|pico)\b/, "interactive: text editor (hangs the sandbox)"],
+    [/\b(less|more)\b/, "interactive: pager (hangs the sandbox)"],
+    [/\b(top|htop|glances)\b/, "interactive: process monitor (hangs the sandbox)"],
+    [/\bman\s+\w+/, "interactive: man page (hangs the sandbox)"],
+    // Network abuse: pipe-to-shell
+    [/curl\s+.*\|\s*(sh|bash|zsh)/, "unsafe: pipe remote script to shell"],
+    [/wget\s+.*\|\s*(sh|bash|zsh)/, "unsafe: pipe remote script to shell"],
+];
+let _sandboxManager = null;
+let _fileSync = null;
+export function bindSandbox(sandbox, fileSync) {
+    _sandboxManager = sandbox;
+    _fileSync = fileSync;
+}
+export const bashTool = tool(async ({ command }) => {
+    for (const [pattern, reason] of BLOCKED_PATTERNS) {
+        if (pattern.test(command)) {
+            return (`⚠ Blocked: Command rejected by sanitizer.\n` +
+                `Reason: ${reason}\n` +
+                `Command: ${command}\n` +
+                `Use a safer alternative or refine your approach.`);
+        }
+    }
+    if (!_sandboxManager || !_sandboxManager.isActive()) {
+        throw new Error("Sandbox is not active. Cannot execute bash commands without an active sandbox session.");
+    }
+    if (_fileSync && _fileSync.pendingCount() > 0) {
+        await _fileSync.syncToSandbox(_sandboxManager);
+    }
+    const result = await _sandboxManager.exec(command);
+    if (result.exitCode !== 0) {
+        return `Command failed (exit code ${result.exitCode}):\nSTDOUT:\n${result.stdout}\nSTDERR:\n${result.stderr}`;
+    }
+    return result.stdout || "(no output)";
+}, {
+    name: "bash",
+    description: "Runs a shell command inside an isolated sandbox. Use for tests, scripts, or installing dependencies. The host machine is never exposed.",
+    schema: z.object({
+        command: z.string().describe("The shell command to execute"),
+    }),
+});
+//# sourceMappingURL=bashTool.js.map

package/dist/tools/bashTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bashTool.js","sourceRoot":"","sources":["../../src/tools/bashTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,MAAM,gBAAgB,GAAuB;IACzC,cAAc;IACd,CAAC,oDAAoD,EAAE,uBAAuB,CAAC;IAC/E,CAAC,QAAQ,EAAE,gCAAgC,CAAC;IAC5C,CAAC,qBAAqB,EAAE,6BAA6B,CAAC;IACtD,CAAC,4BAA4B,EAAE,8BAA8B,CAAC;IAE9D,wBAAwB;IACxB,CAAC,8BAA8B,EAAE,8CAA8C,CAAC;IAChF,CAAC,iBAAiB,EAAE,wCAAwC,CAAC;IAC7D,CAAC,wBAAwB,EAAE,kDAAkD,CAAC;IAC9E,CAAC,aAAa,EAAE,2CAA2C,CAAC;IAE5D,+BAA+B;IAC/B,CAAC,6BAA6B,EAAE,qCAAqC,CAAC;IACtE,CAAC,6BAA6B,EAAE,qCAAqC,CAAC;CACzE,CAAC;AAEF,IAAI,eAAe,GAA0B,IAAI,CAAC;AAClD,IAAI,SAAS,GAAoB,IAAI,CAAC;AAEtC,MAAM,UAAU,WAAW,CAAC,OAAuB,EAAE,QAAkB;IACnE,eAAe,GAAG,OAAO,CAAC;IAC1B,SAAS,GAAG,QAAQ,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,MAAM,QAAQ,GAAG,IAAI,CACxB,KAAK,EAAE,EAAE,OAAO,EAAuB,EAAE,EAAE;IACvC,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;QAC/C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,OAAO,CACH,6CAA6C;gBAC7C,WAAW,MAAM,IAAI;gBACrB,YAAY,OAAO,IAAI;gBACvB,kDAAkD,CACrD,CAAC;QACN,CAAC;IACL,CAAC;IAED,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACX,wFAAwF,CAC3F,CAAC;IACN,CAAC;IAED,IAAI,SAAS,IAAI,SAAS,CAAC,YAAY,EAAE,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,SAAS,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,6BAA6B,MAAM,CAAC,QAAQ,gBAAgB,MAAM,CAAC,MAAM,cAAc,MAAM,CAAC,MAAM,EAAE,CAAC;IAClH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,IAAI,aAAa,CAAC;AAC1C,CAAC,EACD;IACI,IAAI,EAAE,MAAM;IACZ,WAAW,EACP,yIAAyI;IAC7I,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;KAC/D,CAAC;CACL,CACJ,CAAC"}

package/dist/tools/index.d.ts

@@ -1,28 +1,15 @@
-import { SandboxManager } from "../sandbox/manager.js";
-import { FileSync } from "../sandbox/sync.js";
-import { AgentEventEmitter } from "../core/events.js";
-export interface ToolResult {
-    content: string;
-    metadata?: Record<string, any>;
-    isError?: boolean;
-}
-export interface DynamicToolInterface {
-    name: string;
-    description: string;
-    schema: Record<string, any>;
-    execute: (args: any, emitter?: AgentEventEmitter) => Promise<ToolResult> | ToolResult;
-}
-/**
- * Binds the tools to a SandboxManager and FileSync instance.
- * Must be called at session start before any tool executions.
- */
-export declare function bindSandbox(sandbox: SandboxManager, fileSync: FileSync): void;
-/**
- * Security: Validates that a resolved path is strictly inside the given workspace dir.
- * Prevents directory traversal attacks from accessing sensitive host files.
- */
-export declare function isPathInsideWorkspace(resolvedPath: string, workspaceDir?: string): boolean;
-export declare const BashTool: DynamicToolInterface;
-export declare const ReadFileTool: DynamicToolInterface;
-export declare const WriteFileTool: DynamicToolInterface;
-export declare const CORE_TOOLS: DynamicToolInterface[];
+import { bindSandbox } from "./bashTool.js";
+export { bindSandbox };
+export declare const CORE_TOOLS: (import("langchain").DynamicStructuredTool<import("zod").ZodObject<{
+    command: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, {
+    command: string;
+}, {
+    command: string;
+}, string, "install_host_dependencies"> | import("langchain").DynamicStructuredTool<import("zod").ZodObject<{
+    command: import("zod").ZodString;
+}, import("zod/v4/core").$strip>, {
+    command: string;
+}, {
+    command: string;
+}, string, "bash">)[];