micro-models-agent 2.16.0 → 2.17.1

package/dist/tools/browser.js

@@ -1,160 +0,0 @@
-import { BrowserSession } from "../modules/browser/session";
-import { DEFAULT_BROWSER_CONFIG } from "../modules/browser/types";
-import { bufferToDataUrl } from "../llm/image-utils";
-import { t } from "../i18n/index";
-import { defaultOutputBus } from "../output";
-import { errMsg } from "../utils";
-import { join } from "path";
-import { mkdirSync } from "fs";
-import { projectMmaDir } from "../config/paths";
-let session = null;
-/**
- * Тестовый seam: подмена фабрики сессии без `vi.mock` (в Bun он глобален на
- * процесс). Используется только в тестах сериализации действий.
- */
-let sessionFactory;
-/** @internal */
-export function setBrowserSessionFactoryForTest(factory) {
-    sessionFactory = factory;
-    session = null;
-}
-/**
- * Сериализация действий. В MoE параллельные волны делят module-level сессию:
- * одновременный `execute()` перетирает состояние страницы, а `close()` одного
- * субагента убивает сессию остальных. Promise-chain гарантирует, что в браузере
- * одновременно выполняется ровно одно действие.
- */
-let actionChain = Promise.resolve();
-/** Сериализует действия: одновременно в браузере ровно одно. */
-function serialize(fn) {
-    const run = actionChain.then(fn, fn);
-    actionChain = run.then(() => undefined, () => undefined);
-    return run;
-}
-/** Ленивая module-level сессия (cookie-dir в project .mma). */
-function getSession(ctx) {
-    if (!session) {
-        const cookieDir = join(projectMmaDir(ctx.baseDir), "browser");
-        mkdirSync(cookieDir, { recursive: true });
-        session = sessionFactory
-            ? sessionFactory(ctx)
-            : new BrowserSession({
-                ...DEFAULT_BROWSER_CONFIG,
-                headless: ctx.config.browser?.headless ?? true,
-                maxElements: ctx.config.browser?.maxElements ?? 30,
-                maxContentChars: ctx.config.browser?.maxContentChars ?? 2500,
-                maxConsoleEntries: ctx.config.browser?.maxConsoleEntries ?? 40,
-                maxConsoleLineChars: ctx.config.browser?.maxConsoleLineChars ?? 400,
-                navigationTimeout: ctx.config.browser?.navigationTimeout ?? 15000,
-                viewportWidth: ctx.config.browser?.viewportWidth ?? 1280,
-                viewportHeight: ctx.config.browser?.viewportHeight ?? 720,
-                cookieDir,
-            });
-    }
-    return session;
-}
-/** Скриншот для текстовой модели: пометка + текстовый снапшот. */
-export function formatScreenshotForTextModel(snapshot) {
-    return `${t("tool.screenshot_unavailable")}\n\n${snapshot}`;
-}
-/**
- * Превращает PNG-буфер скриншота в image-part для доставки модели. Размер
- * ограничивается `bufferToDataUrl` (ресайз ≤800px, JPEG) — иначе base64
- * раздул бы контекст малыша (32K).
- */
-export async function screenshotToImagePart(screenshot) {
-    const { dataUrl } = await bufferToDataUrl(screenshot);
-    return { type: "image_url", image_url: { url: dataUrl } };
-}
-/** Фабрика browser-тула (сессия ленивая, module-level). */
-export function createBrowserTool() {
-    return {
-        name: "browser",
-        icon: "🌐",
-        tags: ["browser", "vision"],
-        description: [
-            "Control a headless browser. Navigate pages, click elements, type text, scroll, take screenshots.",
-            "Runs a real browser with JavaScript enabled — use it for JS-rendered sites (weather, dashboards, SPAs) where web_fetch/web_browse return empty content.",
-            "Do NOT use it for search queries: search engines (Google, Yandex, Bing) block headless browsers with CAPTCHA/429/redirect pages — use the web_search tool for searching.",
-            "Each snapshot returns: a numbered list of interactive elements, the visible page text (Content section), browser console messages, and network errors.",
-            "Use the Content section to understand what the page says; use element numbers as targets for click/type.",
-            "Actions: open (url), click (target), type (target, text), scroll (direction), back, forward, screenshot, snapshot, close, wait (ms).",
-        ].join(" "),
-        parameters: {
-            type: "object",
-            properties: {
-                action: {
-                    type: "string",
-                    enum: [
-                        "open",
-                        "click",
-                        "type",
-                        "scroll",
-                        "back",
-                        "forward",
-                        "screenshot",
-                        "snapshot",
-                        "close",
-                        "wait",
-                    ],
-                    description: "Browser action to perform",
-                },
-                url: {
-                    type: "string",
-                    description: 'URL to open (for action "open")',
-                },
-                target: {
-                    type: "number",
-                    description: 'Element number from snapshot (for action "click" or "type")',
-                },
-                text: {
-                    type: "string",
-                    description: 'Text to type (for action "type")',
-                },
-                direction: {
-                    type: "string",
-                    enum: ["up", "down", "top", "bottom"],
-                    description: 'Scroll direction (for action "scroll", default "down")',
-                },
-                ms: {
-                    type: "number",
-                    description: 'Milliseconds to wait (for action "wait", default 1000)',
-                },
-            },
-            required: ["action"],
-        },
-        handler: async (ctx, args) => {
-            const action = String(args.action || "");
-            if (!action) {
-                return { success: false, output: t("tool.action_required") };
-            }
-            const s = getSession(ctx);
-            const result = await serialize(() => s.execute(action, args));
-            if (result.screenshot) {
-                // vision берётся из резолвера возможностей активной модели
-                // (пресет + native-probe + конфиг), а не из эвристики по имени.
-                // Без vision отдаём текстовый snapshot — base64 в контекст не льём.
-                if (ctx.capabilities?.vision) {
-                    return {
-                        success: result.success,
-                        output: result.output,
-                        images: [await screenshotToImagePart(result.screenshot)],
-                    };
-                }
-                return { success: result.success, output: formatScreenshotForTextModel(result.output) };
-            }
-            return { success: result.success, output: result.output };
-        },
-    };
-}
-/** Закрывает сессию после текущего действия (не посреди навигации). */
-export function closeBrowserSession() {
-    const s = session;
-    session = null;
-    if (!s)
-        return;
-    // Дожидаемся текущего действия, чтобы не закрыть браузер во время навигации.
-    actionChain = actionChain.then(() => s.close().catch((err) => {
-        defaultOutputBus.log("warn", "browser", `Failed to close browser session: ${errMsg(err)}`);
-    }));
-}

package/dist/tools/chunk-query.js

@@ -1,112 +0,0 @@
-/** Тул ответа по большому тексту: чанкинг + параллельные запросы + синтез. */
-import { readFileSync } from "node:fs";
-import { resolve } from "node:path";
-import { t } from "../i18n/index";
-import { isPathInScope } from "../modules/security/path-validator";
-import { DEFAULT_SECURITY_CONFIG } from "../config/security";
-import { runChunkQuery } from "../modules/context/chunk-query";
-/** Отвечает на вопрос по тексту вне контекстного окна (чанк-параллелизм). */
-export const chunkQueryTool = {
-    name: "chunk_query",
-    icon: "🧩",
-    description: "Answer a query over a large text (file or inline) by splitting it into chunks and querying the model per chunk in parallel, then optionally synthesizing a final answer. Use when the input is too large for the context window.",
-    tags: ["research"],
-    /** Несколько LLM-вызовов (чанк-запросы + синтез) — нужен больший бюджет. */
-    timeoutMs: 300000,
-    parameters: {
-        type: "object",
-        properties: {
-            query: {
-                type: "string",
-                description: "The question to answer over the text.",
-            },
-            input_path: {
-                type: "string",
-                description: "Path to the large text file (scope-checked). Preferred over text.",
-            },
-            text: {
-                type: "string",
-                description: "Inline text. Use only when a file path is not available.",
-            },
-            chunk_chars: {
-                type: "number",
-                description: "Approximate chunk size in chars (default 12000).",
-            },
-            max_parallel: {
-                type: "number",
-                description: "Max parallel chunk queries (default from config.subagent.maxParallelChunkQueries).",
-            },
-            max_chunk_tokens: {
-                type: "number",
-                description: "Cap on generated tokens per chunk call (default 1024).",
-            },
-            max_synthesis_tokens: {
-                type: "number",
-                description: "Cap on generated tokens for the synthesis call (default 2048).",
-            },
-            reasoning_effort: {
-                type: "string",
-                enum: ["none", "low", "medium", "high", "max"],
-                description: 'Reasoning effort for chunk/synthesis calls (default "none"). "none" prevents long thinking chains from eating the token budget on reasoning models.',
-            },
-            synthesize: {
-                type: "boolean",
-                description: "Run a final synthesis call over chunk answers (default true).",
-            },
-        },
-        required: ["query"],
-    },
-    handler: async (ctx, args) => {
-        const query = String(args.query || "");
-        const inputPath = args.input_path ? String(args.input_path) : undefined;
-        const text = args.text ? String(args.text) : undefined;
-        if (!query)
-            return { success: false, output: t("tool.chunk_query_no_query") };
-        if (!inputPath && !text)
-            return { success: false, output: t("tool.chunk_query_no_input") };
-        let content = text || "";
-        if (inputPath) {
-            // Та же политика, что у read_file: глобальные security-пути (.env/ключи)
-            // + скоуп субагента.
-            const resolvedInput = resolve(ctx.baseDir, inputPath);
-            const check = isPathInScope(ctx.baseDir, resolvedInput, ctx.scope, ctx.config?.security?.paths || DEFAULT_SECURITY_CONFIG.paths);
-            if (!check.allowed) {
-                return {
-                    success: false,
-                    output: t("tool.chunk_query_path_not_allowed", { reason: check.reason || "Path not allowed" }),
-                };
-            }
-            try {
-                content = readFileSync(resolvedInput, "utf8");
-            }
-            catch (e) {
-                return {
-                    success: false,
-                    output: t("tool.chunk_query_read_failed", { path: inputPath, error: e.message }),
-                };
-            }
-        }
-        if (!ctx.llmProvider) {
-            return { success: false, output: t("tool.chunk_query_no_provider") };
-        }
-        const maxParallel = typeof args.max_parallel === "number"
-            ? args.max_parallel
-            : (ctx.config.subagent?.maxParallelChunkQueries ?? 4);
-        const res = await runChunkQuery(ctx.llmProvider, content, query, {
-            chunkChars: typeof args.chunk_chars === "number" ? args.chunk_chars : undefined,
-            maxParallel,
-            synthesize: typeof args.synthesize === "boolean" ? args.synthesize : undefined,
-            maxChunkTokens: typeof args.max_chunk_tokens === "number" ? args.max_chunk_tokens : undefined,
-            maxSynthesisTokens: typeof args.max_synthesis_tokens === "number" ? args.max_synthesis_tokens : undefined,
-            reasoningEffort: ["none", "low", "medium", "high", "max"].includes(args.reasoning_effort)
-                ? args.reasoning_effort
-                : undefined,
-            logger: ctx.logger,
-        });
-        ctx.logger.debug(`chunk_query: ${res.chunks} chunk(s), ${res.totalChars} chars, max parallel ${res.maxParallelObserved}`);
-        return {
-            success: true,
-            output: `[chunk_query] ${res.chunks} chunk(s), ${res.totalChars} chars, max parallel ${res.maxParallelObserved}\n\n${res.synthesis || res.answers.join("\n")}`,
-        };
-    },
-};

package/dist/tools/create-dir.js

@@ -1,60 +0,0 @@
-/** Тул создания каталога (рекурсивно, с security-проверками). */
-import { mkdirSync, existsSync } from "fs";
-import { t } from "../i18n/index";
-import { isPathWritable } from "../modules/security/path-validator";
-import { logFileWrite, logSecurityBlock } from "../modules/security/audit-log";
-import { getSessionSecurityConfig } from "../modules/security/session-isolation";
-import { safeResolvePath } from "./path-utils";
-import { protectedPathBlock } from "../modules/security/protected-paths";
-/** Создаёт каталог со всеми промежуточными. */
-export const createDirTool = {
-    name: "create_dir",
-    icon: "📁",
-    description: "Create a directory (and any intermediate directories).",
-    tags: ["file"],
-    parameters: {
-        type: "object",
-        properties: {
-            path: { type: "string", description: "Directory path" },
-        },
-        required: ["path"],
-    },
-    handler: async (ctx, args) => {
-        const path = String(args.path);
-        const resolved = safeResolvePath(ctx.baseDir, path);
-        const securityConfig = ctx.sessionContext
-            ? getSessionSecurityConfig(ctx.config, ctx.sessionContext)
-            : ctx.config.security;
-        // Лимит файловых операций.
-        const maxFileOps = securityConfig?.maxFileOperations ?? 100;
-        const currentCount = ctx.fileOperationsCount ?? 0;
-        if (currentCount >= maxFileOps) {
-            logSecurityBlock(ctx.sessionId, "file_write", `Maximum file operations (${maxFileOps}) exceeded`, path);
-            return {
-                success: false,
-                output: `[SECURITY BLOCKED] Maximum file operations (${maxFileOps}) exceeded`,
-            };
-        }
-        // Проверка прав на путь.
-        const scopeCheck = isPathWritable(ctx.baseDir, resolved, ctx.scope, ctx.config.security?.paths);
-        if (!scopeCheck.allowed) {
-            logSecurityBlock(ctx.sessionId, "file_write", scopeCheck.reason || "Path not allowed", path);
-            return {
-                success: false,
-                output: t("file.path_not_allowed", {
-                    path: `${path} — ${scopeCheck.reason}`,
-                }),
-            };
-        }
-        // Защищённые пути (.git/, .env-каталоги, …) — спросить юзера.
-        const protectedBlock = protectedPathBlock(ctx, resolved, path);
-        if (protectedBlock)
-            return protectedBlock;
-        if (!existsSync(resolved)) {
-            mkdirSync(resolved, { recursive: true });
-        }
-        ctx.fileOperationsCount = currentCount + 1;
-        logFileWrite(ctx.sessionId, path, true, "Directory created");
-        return { success: true, output: t("file.created", { path }) };
-    },
-};

package/dist/tools/delete-file.js

@@ -1,67 +0,0 @@
-/** Тул удаления файла (с diff удалённого, security-проверки). */
-import { unlinkSync, existsSync, statSync, readFileSync } from "fs";
-import { t } from "../i18n/index";
-import { isPathWritable } from "../modules/security/path-validator";
-import { logFileDelete, logSecurityBlock } from "../modules/security/audit-log";
-import { getSessionSecurityConfig } from "../modules/security/session-isolation";
-import { generateDeleteDiff } from "../ui/diff";
-import { safeResolvePath } from "./path-utils";
-import { protectedPathBlock } from "../modules/security/protected-paths";
-/** Удаляет файл; каталоги отклоняет. Возвращает diff удалённого. */
-export const deleteFileTool = {
-    name: "delete_file",
-    icon: "🗑️",
-    description: "Delete a file from the filesystem.",
-    tags: ["file"],
-    parameters: {
-        type: "object",
-        properties: {
-            path: { type: "string", description: "File path" },
-        },
-        required: ["path"],
-    },
-    handler: async (ctx, args) => {
-        const path = String(args.path);
-        const resolved = safeResolvePath(ctx.baseDir, path);
-        const securityConfig = ctx.sessionContext
-            ? getSessionSecurityConfig(ctx.config, ctx.sessionContext)
-            : ctx.config.security;
-        // Лимит файловых операций.
-        const maxFileOps = securityConfig?.maxFileOperations ?? 100;
-        const currentCount = ctx.fileOperationsCount ?? 0;
-        if (currentCount >= maxFileOps) {
-            logSecurityBlock(ctx.sessionId, "file_delete", `Maximum file operations (${maxFileOps}) exceeded`, path);
-            return {
-                success: false,
-                output: `[SECURITY BLOCKED] Maximum file operations (${maxFileOps}) exceeded`,
-            };
-        }
-        // Проверка прав на путь.
-        const scopeCheck = isPathWritable(ctx.baseDir, resolved, ctx.scope, ctx.config.security?.paths);
-        if (!scopeCheck.allowed) {
-            logSecurityBlock(ctx.sessionId, "file_delete", scopeCheck.reason || "Path not allowed", path);
-            return {
-                success: false,
-                output: t("file.path_not_allowed", {
-                    path: `${path} — ${scopeCheck.reason}`,
-                }),
-            };
-        }
-        // Защищённые пути (.git/, .env, ключи) — спросить юзера.
-        const protectedBlock = protectedPathBlock(ctx, resolved, path, "file_delete");
-        if (protectedBlock)
-            return protectedBlock;
-        if (!existsSync(resolved)) {
-            return { success: false, output: t("file.notfound", { path }) };
-        }
-        if (statSync(resolved).isDirectory()) {
-            return { success: false, output: t("file.is_directory", { path }) };
-        }
-        const content = readFileSync(resolved, "utf-8");
-        unlinkSync(resolved);
-        const diff = generateDeleteDiff(content);
-        ctx.fileOperationsCount = currentCount + 1;
-        logFileDelete(ctx.sessionId, path, true);
-        return { success: true, output: t("file.deleted", { path }), diff };
-    },
-};

package/dist/tools/download-file.js

@@ -1,142 +0,0 @@
-/** Тул скачивания URL в файл (байты, SSRF-защита, cap размера). */
-import { writeFileSync, mkdirSync } from "fs";
-import { dirname, resolve } from "path";
-import { t } from "../i18n/index";
-import { BlockedRedirectError, fetchValidated, isUrlAllowed, sanitizeUrl, } from "../modules/security/network-validator";
-import { isPathWritable } from "../modules/security/path-validator";
-import { protectedPathBlock } from "../modules/security/protected-paths";
-import { logNetworkRequest, logFileWrite, logSecurityBlock } from "../modules/security/audit-log";
-import { getSessionSecurityConfig } from "../modules/security/session-isolation";
-import { DEFAULT_SECURITY_CONFIG } from "../config/security";
-import { safeResolvePath } from "./path-utils";
-/** Дефолтный cap скачивания (байты). Чанковые ответы без content-length
- * проверяются после чтения тела. */
-export const MAX_DOWNLOAD_BYTES = 100 * 1024 * 1024;
-/** Качает бинарник в файл; возвращает путь/размер/тип. Параметры: url, path, max_bytes. */
-export const downloadFileTool = {
-    name: "download_file",
-    icon: "⬇️",
-    description: "Download a file (image, archive, binary, font, etc.) from a URL and save it to disk. Returns only the path, size and content type — read the saved file with read_file/attach_image afterwards. Use this for binary files; web_fetch/web_browse return text only and cannot save bytes.",
-    tags: ["research"],
-    parameters: {
-        type: "object",
-        properties: {
-            url: { type: "string", description: "URL to download" },
-            path: {
-                type: "string",
-                description: "Destination path (relative to the working directory)",
-            },
-            max_bytes: {
-                type: "number",
-                description: "Optional size cap in bytes (default 100 MB)",
-            },
-        },
-        required: ["url", "path"],
-    },
-    handler: async (ctx, args) => {
-        const url = String(args.url || "").trim();
-        const path = String(args.path || "").trim();
-        if (!url || !path) {
-            return { success: false, output: t("tool.invalid_params") };
-        }
-        // Сеть: те же правила, что у web_fetch/web_browse.
-        const securityConfig = ctx.sessionContext
-            ? getSessionSecurityConfig(ctx.config, ctx.sessionContext).network
-            : ctx.config.security?.network || DEFAULT_SECURITY_CONFIG.network;
-        const validation = isUrlAllowed(url, securityConfig);
-        if (!validation.allowed) {
-            logSecurityBlock(ctx.sessionId, "network_request", validation.reason || "URL blocked by security policy", sanitizeUrl(url));
-            return {
-                success: false,
-                output: `[SECURITY BLOCKED] URL is not allowed: ${validation.reason}`,
-            };
-        }
-        // Путь: резолв от baseDir + проверка записи.
-        const resolved = safeResolvePath(ctx.baseDir, path);
-        const scopeCheck = isPathWritable(ctx.baseDir, resolved, ctx.scope, ctx.config.security?.paths);
-        if (!scopeCheck.allowed) {
-            logSecurityBlock(ctx.sessionId, "file_write", scopeCheck.reason || "Path not allowed", path);
-            return {
-                success: false,
-                output: t("file.path_not_allowed", {
-                    path: `${path} — ${scopeCheck.reason}`,
-                }),
-            };
-        }
-        // Тот же guard записи, что у write/edit: онбординг-allowlist и always-on
-        // проверка защищённых путей (иначе скачиванием перезаписали бы .env/ключи,
-        // которые остальные тулы записи отклоняют).
-        if (ctx.writePathAllowlist) {
-            const ok = ctx.writePathAllowlist.some((p) => resolve(p).toLowerCase() === resolve(resolved).toLowerCase());
-            if (!ok) {
-                return {
-                    success: false,
-                    output: t("file.path_not_allowed", {
-                        path: `${path} — ${t("onboarding.write_restricted")}`,
-                    }),
-                };
-            }
-        }
-        const protectedBlock = protectedPathBlock(ctx, resolved, path);
-        if (protectedBlock)
-            return protectedBlock;
-        const maxBytes = Number(args.max_bytes) > 0 ? Number(args.max_bytes) : MAX_DOWNLOAD_BYTES;
-        try {
-            // Редиректы перевадидируются (SSRF) внутри хелпера.
-            const { response } = await fetchValidated(url, securityConfig, {
-                signal: AbortSignal.timeout(securityConfig?.requestTimeout || 15000),
-            });
-            if (!response.ok) {
-                logNetworkRequest(ctx.sessionId, sanitizeUrl(url), false, `Status: ${response.status}`);
-                return {
-                    success: false,
-                    output: t("error.http", {
-                        status: response.status,
-                        statusText: response.statusText,
-                    }),
-                };
-            }
-            const contentLength = Number(response.headers.get("content-length") || "0");
-            if (contentLength > maxBytes) {
-                logNetworkRequest(ctx.sessionId, sanitizeUrl(url), false, `Too large: ${contentLength}`);
-                return {
-                    success: false,
-                    output: t("tool.download_too_large", { max: String(maxBytes) }),
-                };
-            }
-            const buffer = Buffer.from(await response.arrayBuffer());
-            if (buffer.byteLength > maxBytes) {
-                logNetworkRequest(ctx.sessionId, sanitizeUrl(url), false, `Too large: ${buffer.byteLength}`);
-                return {
-                    success: false,
-                    output: t("tool.download_too_large", { max: String(maxBytes) }),
-                };
-            }
-            mkdirSync(dirname(resolved), { recursive: true });
-            writeFileSync(resolved, buffer);
-            const contentType = response.headers.get("content-type")?.split(";")[0]?.trim() || "unknown";
-            logNetworkRequest(ctx.sessionId, sanitizeUrl(url), true, `Status: ${response.status}`);
-            logFileWrite(ctx.sessionId, resolved, true, `Downloaded ${buffer.byteLength} bytes`);
-            return {
-                success: true,
-                output: t("tool.downloaded", {
-                    url: sanitizeUrl(url),
-                    path: resolved,
-                    size: String(buffer.byteLength),
-                    type: contentType,
-                }),
-            };
-        }
-        catch (e) {
-            if (e instanceof BlockedRedirectError) {
-                logSecurityBlock(ctx.sessionId, "network_request", e.reason, sanitizeUrl(url));
-                return { success: false, output: `[SECURITY BLOCKED] redirect: ${e.reason}` };
-            }
-            logNetworkRequest(ctx.sessionId, sanitizeUrl(url), false, `Error: ${e.message}`);
-            return {
-                success: false,
-                output: t("error.fetch_failed", { message: e.message }),
-            };
-        }
-    },
-};