octoflow-core 1.0.0

package/dist/actions/builtin/auth.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/actions/builtin/auth.ts"],
+  "sourcesContent": ["import type { OAuthProviderId } from '../../auth/types.js';\nimport { defineAction } from '../define.js';\nimport type { ActionDefinition } from '../types.js';\nimport { optionalStringArg, requiredStringArg } from './args.js';\n\nconst noopAuth = (): void => {\n  /* UI layer handles via auth:login:start event */\n};\n\nconst OAUTH_PROVIDERS: OAuthProviderId[] = ['anthropic', 'openai', 'copilot'];\n\nconst PROVIDER_DISPLAY: Record<OAuthProviderId, string> = {\n  anthropic: 'Anthropic (Claude Max/Pro)',\n  openai: 'OpenAI (ChatGPT Plus/Pro)',\n  copilot: 'GitHub Copilot',\n};\n\nexport function createAuthActions(): ActionDefinition[] {\n  const loginActions = OAUTH_PROVIDERS.map((provider) =>\n    defineAction({\n      name: `auth_login_${provider}`,\n      description: `Authenticate with ${PROVIDER_DISPLAY[provider]} via OAuth. Call this when you receive an auth-required error for ${provider}.`,\n      parameters: { type: 'object', properties: {} },\n      execute: async (_args, ctx) => {\n        const token = await ctx.bridge.auth.login(provider, {\n          onAuth: noopAuth,\n          onDeviceCode: noopAuth,\n        });\n        return { authenticated: true, provider, expiresAt: token.expiresAt };\n      },\n      tags: ['auth', 'builtin'],\n    })\n  );\n\n  return [\n    ...loginActions,\n\n    defineAction({\n      name: 'auth_status',\n      description:\n        'Check authentication status for all configured OAuth providers. Returns provider name, state (connected/disconnected/expired), and expiry time.',\n      parameters: {\n        type: 'object',\n        properties: {\n          provider: {\n            type: 'string',\n            description:\n              'Optional: check a specific provider only (anthropic, openai, copilot)',\n          },\n        },\n      },\n      execute: async (args, ctx) => {\n        return ctx.bridge.auth.getAuthStatus(\n          optionalStringArg(args, 'provider')\n        );\n      },\n      tags: ['auth', 'builtin'],\n    }),\n\n    defineAction({\n      name: 'auth_refresh',\n      description: 'Refresh an expiring or expired OAuth token for a provider.',\n      parameters: {\n        type: 'object',\n        properties: {\n          provider: {\n            type: 'string',\n            description: 'Provider to refresh (anthropic, openai, copilot)',\n          },\n        },\n        required: ['provider'],\n      },\n      execute: async (args, ctx) => {\n        const provider = requiredStringArg(args, 'provider');\n        const token = await ctx.bridge.auth.refreshAuth(provider);\n        return { refreshed: true, provider, expiresAt: token.expiresAt };\n      },\n      tags: ['auth', 'builtin'],\n    }),\n\n    defineAction({\n      name: 'auth_logout',\n      description: 'Log out from an OAuth provider and revoke the token.',\n      parameters: {\n        type: 'object',\n        properties: {\n          provider: {\n            type: 'string',\n            description:\n              'Provider to log out from (anthropic, openai, copilot)',\n          },\n        },\n        required: ['provider'],\n      },\n      execute: async (args, ctx) => {\n        const provider = requiredStringArg(args, 'provider');\n        await ctx.bridge.auth.logout(provider);\n        return { loggedOut: true, provider };\n      },\n      requireApproval: true,\n      tags: ['auth', 'builtin', 'destructive'],\n    }),\n  ];\n}\n"],
+  "mappings": "AACA,SAAS,oBAAoB;AAE7B,SAAS,mBAAmB,yBAAyB;AAErD,MAAM,WAAW,MAAY;AAE7B;AAEA,MAAM,kBAAqC,CAAC,aAAa,UAAU,SAAS;AAE5E,MAAM,mBAAoD;AAAA,EACxD,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,SAAS;AACX;AAEO,SAAS,oBAAwC;AACtD,QAAM,eAAe,gBAAgB;AAAA,IAAI,CAAC,aACxC,aAAa;AAAA,MACX,MAAM,cAAc,QAAQ;AAAA,MAC5B,aAAa,qBAAqB,iBAAiB,QAAQ,CAAC,qEAAqE,QAAQ;AAAA,MACzI,YAAY,EAAE,MAAM,UAAU,YAAY,CAAC,EAAE;AAAA,MAC7C,SAAS,OAAO,OAAO,QAAQ;AAC7B,cAAM,QAAQ,MAAM,IAAI,OAAO,KAAK,MAAM,UAAU;AAAA,UAClD,QAAQ;AAAA,UACR,cAAc;AAAA,QAChB,CAAC;AACD,eAAO,EAAE,eAAe,MAAM,UAAU,WAAW,MAAM,UAAU;AAAA,MACrE;AAAA,MACA,MAAM,CAAC,QAAQ,SAAS;AAAA,IAC1B,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,GAAG;AAAA,IAEH,aAAa;AAAA,MACX,MAAM;AAAA,MACN,aACE;AAAA,MACF,YAAY;AAAA,QACV,MAAM;AAAA,QACN,YAAY;AAAA,UACV,UAAU;AAAA,YACR,MAAM;AAAA,YACN,aACE;AAAA,UACJ;AAAA,QACF;AAAA,MACF;AAAA,MACA,SAAS,OAAO,MAAM,QAAQ;AAC5B,eAAO,IAAI,OAAO,KAAK;AAAA,UACrB,kBAAkB,MAAM,UAAU;AAAA,QACpC;AAAA,MACF;AAAA,MACA,MAAM,CAAC,QAAQ,SAAS;AAAA,IAC1B,CAAC;AAAA,IAED,aAAa;AAAA,MACX,MAAM;AAAA,MACN,aAAa;AAAA,MACb,YAAY;AAAA,QACV,MAAM;AAAA,QACN,YAAY;AAAA,UACV,UAAU;AAAA,YACR,MAAM;AAAA,YACN,aAAa;AAAA,UACf;AAAA,QACF;AAAA,QACA,UAAU,CAAC,UAAU;AAAA,MACvB;AAAA,MACA,SAAS,OAAO,MAAM,QAAQ;AAC5B,cAAM,WAAW,kBAAkB,MAAM,UAAU;AACnD,cAAM,QAAQ,MAAM,IAAI,OAAO,KAAK,YAAY,QAAQ;AACxD,eAAO,EAAE,WAAW,MAAM,UAAU,WAAW,MAAM,UAAU;AAAA,MACjE;AAAA,MACA,MAAM,CAAC,QAAQ,SAAS;AAAA,IAC1B,CAAC;AAAA,IAED,aAAa;AAAA,MACX,MAAM;AAAA,MACN,aAAa;AAAA,MACb,YAAY;AAAA,QACV,MAAM;AAAA,QACN,YAAY;AAAA,UACV,UAAU;AAAA,YACR,MAAM;AAAA,YACN,aACE;AAAA,UACJ;AAAA,QACF;AAAA,QACA,UAAU,CAAC,UAAU;AAAA,MACvB;AAAA,MACA,SAAS,OAAO,MAAM,QAAQ;AAC5B,cAAM,WAAW,kBAAkB,MAAM,UAAU;AACnD,cAAM,IAAI,OAAO,KAAK,OAAO,QAAQ;AACrC,eAAO,EAAE,WAAW,MAAM,SAAS;AAAA,MACrC;AAAA,MACA,iBAAiB;AAAA,MACjB,MAAM,CAAC,QAAQ,WAAW,aAAa;AAAA,IACzC,CAAC;AAAA,EACH;AACF;",
+  "names": []
+}

package/dist/actions/builtin/bash.d.ts

@@ -0,0 +1,16 @@
+import type { ActionDefinition } from '../types.js';
+export interface BashActionsOptions {
+    /**
+     * Disable the built-in command denylist and approval default. Every bash
+     * call will run without pre-execution safety checks. Use only in trusted
+     * automation. Emits an advisory in the action response the first time a
+     * command runs under this mode.
+     */
+    dangerouslyDisableBashSecurity?: boolean;
+    /** Default output byte cap (head+tail truncation). Defaults to 200_000. */
+    defaultOutputByteLimit?: number;
+    /** Default timeout in ms when the caller does not provide one. Defaults to 30_000. */
+    defaultTimeoutMs?: number;
+}
+export declare function createBashActions(opts?: BashActionsOptions): ActionDefinition[];
+//# sourceMappingURL=bash.d.ts.map

package/dist/actions/builtin/bash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash.d.ts","sourceRoot":"","sources":["../../../src/actions/builtin/bash.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAIpD,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,8BAA8B,CAAC,EAAE,OAAO,CAAC;IACzC,2EAA2E;IAC3E,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,sFAAsF;IACtF,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAmND,wBAAgB,iBAAiB,CAC/B,IAAI,GAAE,kBAAuB,GAC5B,gBAAgB,EAAE,CAwFpB"}

package/dist/actions/builtin/bash.js

@@ -0,0 +1,219 @@
+import { spawn, spawnSync } from "node:child_process";
+import {
+  checkCommandRisk,
+  truncateOutput
+} from "../../adapters/agents/runtime/command-safety.js";
+import { defineAction } from "../define.js";
+import { requiredStringArg } from "./args.js";
+import { mergeProcessEnv, validateEnvKeys } from "./shell-shared.js";
+const DEFAULT_OUTPUT_BYTE_LIMIT = 2e5;
+const DEFAULT_TIMEOUT_MS = 3e4;
+function resolveBashBinary() {
+  if (process.platform !== "win32") return "/bin/bash";
+  const candidates = ["bash.exe", "bash"];
+  for (const candidate of candidates) {
+    const probe = spawnSync("where", [candidate], { encoding: "buffer" });
+    if (probe.status === 0) {
+      const out = probe.stdout.toString().split(/\r?\n/).map((s) => s.trim()).filter(Boolean);
+      if (out.length > 0) return out[0] ?? null;
+    }
+  }
+  return null;
+}
+function spawnAndCollect(bin, args, opts) {
+  return new Promise((resolve) => {
+    const proc = spawn(bin, args, {
+      cwd: opts.cwd,
+      env: opts.env,
+      shell: false
+    });
+    const stdoutChunks = [];
+    const stderrChunks = [];
+    let stdoutBytes = 0;
+    let stderrBytes = 0;
+    let timedOut = false;
+    const hardCap = opts.outputByteLimit * 4;
+    const onStdout = (chunk) => {
+      if (stdoutBytes < hardCap) {
+        stdoutChunks.push(chunk);
+        stdoutBytes += chunk.length;
+      }
+    };
+    const onStderr = (chunk) => {
+      if (stderrBytes < hardCap) {
+        stderrChunks.push(chunk);
+        stderrBytes += chunk.length;
+      }
+    };
+    proc.stdout.on("data", onStdout);
+    proc.stderr.on("data", onStderr);
+    const killTimer = setTimeout(() => {
+      timedOut = true;
+      try {
+        proc.kill("SIGKILL");
+      } catch {
+      }
+    }, opts.timeoutMs);
+    let finished = false;
+    const finish = (exitCode) => {
+      if (finished) return;
+      finished = true;
+      clearTimeout(killTimer);
+      resolve({
+        stdout: Buffer.concat(stdoutChunks),
+        stderr: Buffer.concat(stderrChunks),
+        exitCode,
+        timedOut
+      });
+    };
+    proc.on("close", (code) => finish(code));
+    proc.on("error", (err) => {
+      stderrChunks.push(
+        Buffer.from(err instanceof Error ? err.message : String(err))
+      );
+      finish(-1);
+    });
+  });
+}
+async function runBash(inv, securityDisabled) {
+  if (inv.env) {
+    try {
+      validateEnvKeys(inv.env);
+    } catch (err) {
+      return { error: err instanceof Error ? err.message : String(err) };
+    }
+  }
+  const commandForCheck = inv.mode === "shell" ? inv.command : inv.command;
+  const argsForCheck = inv.mode === "shell" ? [] : inv.args;
+  let warning;
+  if (!securityDisabled) {
+    const risk = checkCommandRisk(commandForCheck, argsForCheck);
+    if (risk.level === "blocked") {
+      return {
+        error: `Command blocked: ${risk.reason ?? "dangerous pattern"}`,
+        command: inv.command,
+        args: inv.args
+      };
+    }
+    if (risk.level === "high-risk") {
+      warning = `High-risk pattern: ${risk.reason ?? "flag injection"}`;
+    }
+  }
+  let bin;
+  let spawnArgs;
+  let runner;
+  if (inv.mode === "shell") {
+    const bashBin = resolveBashBinary();
+    if (!bashBin) {
+      return {
+        error: 'bash_not_available: install Git Bash / WSL, or use mode: "argv" for cross-platform commands.',
+        platform: process.platform
+      };
+    }
+    bin = bashBin;
+    spawnArgs = ["-lc", inv.command];
+    runner = "shell-bash";
+  } else {
+    bin = inv.command;
+    spawnArgs = inv.args;
+    runner = "argv";
+  }
+  const mergedEnv = mergeProcessEnv(inv.env);
+  const { stdout, stderr, exitCode, timedOut } = await spawnAndCollect(
+    bin,
+    spawnArgs,
+    {
+      cwd: inv.workdir,
+      env: mergedEnv,
+      timeoutMs: inv.timeoutMs,
+      outputByteLimit: inv.outputByteLimit
+    }
+  );
+  const stdoutTrunc = truncateOutput(stdout, inv.outputByteLimit);
+  const stderrTrunc = truncateOutput(stderr, inv.outputByteLimit);
+  return {
+    stdout: stdoutTrunc.content.toString("utf8"),
+    stderr: stderrTrunc.content.toString("utf8"),
+    exitCode,
+    truncated: stdoutTrunc.truncated || stderrTrunc.truncated,
+    timedOut,
+    runner,
+    platform: process.platform,
+    ...warning ? { warning } : {}
+  };
+}
+function createBashActions(opts = {}) {
+  const securityDisabled = opts.dangerouslyDisableBashSecurity === true;
+  const defaultTimeout = opts.defaultTimeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const defaultOutputLimit = opts.defaultOutputByteLimit ?? DEFAULT_OUTPUT_BYTE_LIMIT;
+  return [
+    defineAction({
+      name: "bash",
+      description: 'Execute a shell command. Default mode="argv" (safest, no shell interpretation): pass binary as `command`, arguments as `args`. mode="shell" for pipelines/redirects (runs under bash -lc). Always set `workdir`; do not use `cd`. Long output is head+tail truncated. Dangerous patterns (rm -rf /, curl | sh, bash -c) are blocked.',
+      parameters: {
+        type: "object",
+        properties: {
+          command: {
+            type: "string",
+            description: 'Argv mode: the executable (e.g. "npm", "python3", "git"). Shell mode: the full command string.'
+          },
+          args: {
+            type: "array",
+            items: { type: "string" },
+            description: "Argument list for argv mode (ignored in shell mode). Each element is a separate argv token."
+          },
+          workdir: {
+            type: "string",
+            description: "REQUIRED. Working directory for the command. Do not use `cd` inside the command \u2014 set this instead."
+          },
+          env: {
+            type: "object",
+            additionalProperties: { type: "string" },
+            description: "Extra environment variables (merged on top of the current environment). Keys must be valid identifier names."
+          },
+          mode: {
+            type: "string",
+            enum: ["argv", "shell"],
+            description: "Execution mode. `argv` (default) = no shell interpretation. `shell` = bash -lc on Unix, bash.exe on Windows."
+          },
+          timeout_ms: {
+            type: "number",
+            description: `Maximum execution time in milliseconds before the process is killed. Defaults to ${defaultTimeout}.`
+          },
+          output_byte_limit: {
+            type: "number",
+            description: `Maximum bytes of stdout/stderr returned; excess is head+tail truncated. Defaults to ${defaultOutputLimit}.`
+          }
+        },
+        required: ["command", "workdir"]
+      },
+      execute: async (args) => {
+        const command = requiredStringArg(args, "command");
+        const argv = Array.isArray(args.args) ? args.args : [];
+        const workdir = requiredStringArg(args, "workdir");
+        const env = args.env != null && typeof args.env === "object" ? args.env : void 0;
+        const mode = args.mode === "shell" ? "shell" : "argv";
+        const timeoutMs = typeof args.timeout_ms === "number" ? args.timeout_ms : defaultTimeout;
+        const outputByteLimit = typeof args.output_byte_limit === "number" ? args.output_byte_limit : defaultOutputLimit;
+        return runBash(
+          {
+            command,
+            args: argv,
+            workdir,
+            env,
+            mode,
+            timeoutMs,
+            outputByteLimit
+          },
+          securityDisabled
+        );
+      },
+      requireApproval: !securityDisabled,
+      tags: ["shell", "bash", "exec", "builtin"]
+    })
+  ];
+}
+export {
+  createBashActions
+};
+//# sourceMappingURL=bash.js.map

package/dist/actions/builtin/bash.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/actions/builtin/bash.ts"],
+  "sourcesContent": ["import { spawn, spawnSync } from 'node:child_process';\n\nimport {\n  checkCommandRisk,\n  truncateOutput,\n} from '../../adapters/agents/runtime/command-safety.js';\nimport { defineAction } from '../define.js';\nimport type { ActionDefinition } from '../types.js';\nimport { requiredStringArg } from './args.js';\nimport { mergeProcessEnv, validateEnvKeys } from './shell-shared.js';\n\nexport interface BashActionsOptions {\n  /**\n   * Disable the built-in command denylist and approval default. Every bash\n   * call will run without pre-execution safety checks. Use only in trusted\n   * automation. Emits an advisory in the action response the first time a\n   * command runs under this mode.\n   */\n  dangerouslyDisableBashSecurity?: boolean;\n  /** Default output byte cap (head+tail truncation). Defaults to 200_000. */\n  defaultOutputByteLimit?: number;\n  /** Default timeout in ms when the caller does not provide one. Defaults to 30_000. */\n  defaultTimeoutMs?: number;\n}\n\nconst DEFAULT_OUTPUT_BYTE_LIMIT = 200_000;\nconst DEFAULT_TIMEOUT_MS = 30_000;\n\ninterface BashInvocation {\n  command: string;\n  args: string[];\n  workdir: string;\n  env?: Record<string, string>;\n  mode: 'argv' | 'shell';\n  timeoutMs: number;\n  outputByteLimit: number;\n}\n\ntype BashRunner = 'argv' | 'shell-bash';\n\ninterface BashResult {\n  stdout: string;\n  stderr: string;\n  exitCode: number | null;\n  truncated: boolean;\n  timedOut: boolean;\n  runner: BashRunner;\n  platform: NodeJS.Platform;\n  warning?: string;\n}\n\ntype BashError = {\n  error: string;\n  command?: string;\n  args?: string[];\n  platform?: NodeJS.Platform;\n};\n\nfunction resolveBashBinary(): string | null {\n  if (process.platform !== 'win32') return '/bin/bash';\n  const candidates = ['bash.exe', 'bash'];\n  for (const candidate of candidates) {\n    const probe = spawnSync('where', [candidate], { encoding: 'buffer' });\n    if (probe.status === 0) {\n      const out = probe.stdout\n        .toString()\n        .split(/\\r?\\n/)\n        .map((s) => s.trim())\n        .filter(Boolean);\n      if (out.length > 0) return out[0] ?? null;\n    }\n  }\n  return null;\n}\n\nfunction spawnAndCollect(\n  bin: string,\n  args: string[],\n  opts: {\n    cwd: string;\n    env?: NodeJS.ProcessEnv;\n    timeoutMs: number;\n    outputByteLimit: number;\n  }\n): Promise<{\n  stdout: Buffer;\n  stderr: Buffer;\n  exitCode: number | null;\n  timedOut: boolean;\n}> {\n  return new Promise((resolve) => {\n    const proc = spawn(bin, args, {\n      cwd: opts.cwd,\n      env: opts.env,\n      shell: false,\n    });\n    const stdoutChunks: Buffer[] = [];\n    const stderrChunks: Buffer[] = [];\n    let stdoutBytes = 0;\n    let stderrBytes = 0;\n    let timedOut = false;\n    const hardCap = opts.outputByteLimit * 4; // streaming guard: stop collecting well beyond truncation budget\n\n    const onStdout = (chunk: Buffer): void => {\n      if (stdoutBytes < hardCap) {\n        stdoutChunks.push(chunk);\n        stdoutBytes += chunk.length;\n      }\n    };\n    const onStderr = (chunk: Buffer): void => {\n      if (stderrBytes < hardCap) {\n        stderrChunks.push(chunk);\n        stderrBytes += chunk.length;\n      }\n    };\n\n    proc.stdout.on('data', onStdout);\n    proc.stderr.on('data', onStderr);\n\n    const killTimer = setTimeout(() => {\n      timedOut = true;\n      try {\n        proc.kill('SIGKILL');\n      } catch {\n        /* process already exited \u2014 best-effort kill */\n      }\n    }, opts.timeoutMs);\n\n    // Guard against Node.js emitting both 'error' and 'close' for the same\n    // process failure (e.g. ENOENT on spawn).  The first call to finish()\n    // resolves the Promise; subsequent calls are no-ops.\n    let finished = false;\n    const finish = (exitCode: number | null): void => {\n      if (finished) return;\n      finished = true;\n      clearTimeout(killTimer);\n      resolve({\n        stdout: Buffer.concat(stdoutChunks),\n        stderr: Buffer.concat(stderrChunks),\n        exitCode,\n        timedOut,\n      });\n    };\n\n    proc.on('close', (code) => finish(code));\n    proc.on('error', (err) => {\n      stderrChunks.push(\n        Buffer.from(err instanceof Error ? err.message : String(err))\n      );\n      finish(-1);\n    });\n  });\n}\n\nasync function runBash(\n  inv: BashInvocation,\n  securityDisabled: boolean\n): Promise<BashResult | BashError> {\n  if (inv.env) {\n    try {\n      validateEnvKeys(inv.env);\n    } catch (err) {\n      return { error: err instanceof Error ? err.message : String(err) };\n    }\n  }\n\n  const commandForCheck = inv.mode === 'shell' ? inv.command : inv.command;\n  const argsForCheck = inv.mode === 'shell' ? [] : inv.args;\n  let warning: string | undefined;\n\n  if (!securityDisabled) {\n    const risk = checkCommandRisk(commandForCheck, argsForCheck);\n    if (risk.level === 'blocked') {\n      return {\n        error: `Command blocked: ${risk.reason ?? 'dangerous pattern'}`,\n        command: inv.command,\n        args: inv.args,\n      };\n    }\n    if (risk.level === 'high-risk') {\n      warning = `High-risk pattern: ${risk.reason ?? 'flag injection'}`;\n    }\n  }\n\n  let bin: string;\n  let spawnArgs: string[];\n  let runner: BashRunner;\n\n  if (inv.mode === 'shell') {\n    const bashBin = resolveBashBinary();\n    if (!bashBin) {\n      return {\n        error:\n          'bash_not_available: install Git Bash / WSL, or use mode: \"argv\" for cross-platform commands.',\n        platform: process.platform,\n      };\n    }\n    bin = bashBin;\n    spawnArgs = ['-lc', inv.command];\n    runner = 'shell-bash';\n  } else {\n    bin = inv.command;\n    spawnArgs = inv.args;\n    runner = 'argv';\n  }\n\n  const mergedEnv = mergeProcessEnv(inv.env);\n\n  const { stdout, stderr, exitCode, timedOut } = await spawnAndCollect(\n    bin,\n    spawnArgs,\n    {\n      cwd: inv.workdir,\n      env: mergedEnv,\n      timeoutMs: inv.timeoutMs,\n      outputByteLimit: inv.outputByteLimit,\n    }\n  );\n\n  const stdoutTrunc = truncateOutput(stdout, inv.outputByteLimit);\n  const stderrTrunc = truncateOutput(stderr, inv.outputByteLimit);\n\n  return {\n    stdout: stdoutTrunc.content.toString('utf8'),\n    stderr: stderrTrunc.content.toString('utf8'),\n    exitCode,\n    truncated: stdoutTrunc.truncated || stderrTrunc.truncated,\n    timedOut,\n    runner,\n    platform: process.platform,\n    ...(warning ? { warning } : {}),\n  };\n}\n\nexport function createBashActions(\n  opts: BashActionsOptions = {}\n): ActionDefinition[] {\n  const securityDisabled = opts.dangerouslyDisableBashSecurity === true;\n  const defaultTimeout = opts.defaultTimeoutMs ?? DEFAULT_TIMEOUT_MS;\n  const defaultOutputLimit =\n    opts.defaultOutputByteLimit ?? DEFAULT_OUTPUT_BYTE_LIMIT;\n\n  return [\n    defineAction({\n      name: 'bash',\n      description:\n        'Execute a shell command. Default mode=\"argv\" (safest, no shell interpretation): pass binary as `command`, arguments as `args`. mode=\"shell\" for pipelines/redirects (runs under bash -lc). Always set `workdir`; do not use `cd`. Long output is head+tail truncated. Dangerous patterns (rm -rf /, curl | sh, bash -c) are blocked.',\n      parameters: {\n        type: 'object',\n        properties: {\n          command: {\n            type: 'string',\n            description:\n              'Argv mode: the executable (e.g. \"npm\", \"python3\", \"git\"). Shell mode: the full command string.',\n          },\n          args: {\n            type: 'array',\n            items: { type: 'string' },\n            description:\n              'Argument list for argv mode (ignored in shell mode). Each element is a separate argv token.',\n          },\n          workdir: {\n            type: 'string',\n            description:\n              'REQUIRED. Working directory for the command. Do not use `cd` inside the command \u2014 set this instead.',\n          },\n          env: {\n            type: 'object',\n            additionalProperties: { type: 'string' },\n            description:\n              'Extra environment variables (merged on top of the current environment). Keys must be valid identifier names.',\n          },\n          mode: {\n            type: 'string',\n            enum: ['argv', 'shell'],\n            description:\n              'Execution mode. `argv` (default) = no shell interpretation. `shell` = bash -lc on Unix, bash.exe on Windows.',\n          },\n          timeout_ms: {\n            type: 'number',\n            description: `Maximum execution time in milliseconds before the process is killed. Defaults to ${defaultTimeout}.`,\n          },\n          output_byte_limit: {\n            type: 'number',\n            description: `Maximum bytes of stdout/stderr returned; excess is head+tail truncated. Defaults to ${defaultOutputLimit}.`,\n          },\n        },\n        required: ['command', 'workdir'],\n      },\n      execute: async (args) => {\n        const command = requiredStringArg(args, 'command');\n        const argv = Array.isArray(args.args) ? (args.args as string[]) : [];\n        const workdir = requiredStringArg(args, 'workdir');\n        const env =\n          args.env != null && typeof args.env === 'object'\n            ? (args.env as Record<string, string>)\n            : undefined;\n        const mode: 'argv' | 'shell' = args.mode === 'shell' ? 'shell' : 'argv';\n        const timeoutMs =\n          typeof args.timeout_ms === 'number'\n            ? args.timeout_ms\n            : defaultTimeout;\n        const outputByteLimit =\n          typeof args.output_byte_limit === 'number'\n            ? args.output_byte_limit\n            : defaultOutputLimit;\n\n        return runBash(\n          {\n            command,\n            args: argv,\n            workdir,\n            env,\n            mode,\n            timeoutMs,\n            outputByteLimit,\n          },\n          securityDisabled\n        );\n      },\n      requireApproval: !securityDisabled,\n      tags: ['shell', 'bash', 'exec', 'builtin'],\n    }),\n  ];\n}\n"],
+  "mappings": "AAAA,SAAS,OAAO,iBAAiB;AAEjC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,SAAS,yBAAyB;AAClC,SAAS,iBAAiB,uBAAuB;AAgBjD,MAAM,4BAA4B;AAClC,MAAM,qBAAqB;AAgC3B,SAAS,oBAAmC;AAC1C,MAAI,QAAQ,aAAa,QAAS,QAAO;AACzC,QAAM,aAAa,CAAC,YAAY,MAAM;AACtC,aAAW,aAAa,YAAY;AAClC,UAAM,QAAQ,UAAU,SAAS,CAAC,SAAS,GAAG,EAAE,UAAU,SAAS,CAAC;AACpE,QAAI,MAAM,WAAW,GAAG;AACtB,YAAM,MAAM,MAAM,OACf,SAAS,EACT,MAAM,OAAO,EACb,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AACjB,UAAI,IAAI,SAAS,EAAG,QAAO,IAAI,CAAC,KAAK;AAAA,IACvC;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,gBACP,KACA,MACA,MAWC;AACD,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,UAAM,OAAO,MAAM,KAAK,MAAM;AAAA,MAC5B,KAAK,KAAK;AAAA,MACV,KAAK,KAAK;AAAA,MACV,OAAO;AAAA,IACT,CAAC;AACD,UAAM,eAAyB,CAAC;AAChC,UAAM,eAAyB,CAAC;AAChC,QAAI,cAAc;AAClB,QAAI,cAAc;AAClB,QAAI,WAAW;AACf,UAAM,UAAU,KAAK,kBAAkB;AAEvC,UAAM,WAAW,CAAC,UAAwB;AACxC,UAAI,cAAc,SAAS;AACzB,qBAAa,KAAK,KAAK;AACvB,uBAAe,MAAM;AAAA,MACvB;AAAA,IACF;AACA,UAAM,WAAW,CAAC,UAAwB;AACxC,UAAI,cAAc,SAAS;AACzB,qBAAa,KAAK,KAAK;AACvB,uBAAe,MAAM;AAAA,MACvB;AAAA,IACF;AAEA,SAAK,OAAO,GAAG,QAAQ,QAAQ;AAC/B,SAAK,OAAO,GAAG,QAAQ,QAAQ;AAE/B,UAAM,YAAY,WAAW,MAAM;AACjC,iBAAW;AACX,UAAI;AACF,aAAK,KAAK,SAAS;AAAA,MACrB,QAAQ;AAAA,MAER;AAAA,IACF,GAAG,KAAK,SAAS;AAKjB,QAAI,WAAW;AACf,UAAM,SAAS,CAAC,aAAkC;AAChD,UAAI,SAAU;AACd,iBAAW;AACX,mBAAa,SAAS;AACtB,cAAQ;AAAA,QACN,QAAQ,OAAO,OAAO,YAAY;AAAA,QAClC,QAAQ,OAAO,OAAO,YAAY;AAAA,QAClC;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH;AAEA,SAAK,GAAG,SAAS,CAAC,SAAS,OAAO,IAAI,CAAC;AACvC,SAAK,GAAG,SAAS,CAAC,QAAQ;AACxB,mBAAa;AAAA,QACX,OAAO,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,MAC9D;AACA,aAAO,EAAE;AAAA,IACX,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAe,QACb,KACA,kBACiC;AACjC,MAAI,IAAI,KAAK;AACX,QAAI;AACF,sBAAgB,IAAI,GAAG;AAAA,IACzB,SAAS,KAAK;AACZ,aAAO,EAAE,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,EAAE;AAAA,IACnE;AAAA,EACF;AAEA,QAAM,kBAAkB,IAAI,SAAS,UAAU,IAAI,UAAU,IAAI;AACjE,QAAM,eAAe,IAAI,SAAS,UAAU,CAAC,IAAI,IAAI;AACrD,MAAI;AAEJ,MAAI,CAAC,kBAAkB;AACrB,UAAM,OAAO,iBAAiB,iBAAiB,YAAY;AAC3D,QAAI,KAAK,UAAU,WAAW;AAC5B,aAAO;AAAA,QACL,OAAO,oBAAoB,KAAK,UAAU,mBAAmB;AAAA,QAC7D,SAAS,IAAI;AAAA,QACb,MAAM,IAAI;AAAA,MACZ;AAAA,IACF;AACA,QAAI,KAAK,UAAU,aAAa;AAC9B,gBAAU,sBAAsB,KAAK,UAAU,gBAAgB;AAAA,IACjE;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI,IAAI,SAAS,SAAS;AACxB,UAAM,UAAU,kBAAkB;AAClC,QAAI,CAAC,SAAS;AACZ,aAAO;AAAA,QACL,OACE;AAAA,QACF,UAAU,QAAQ;AAAA,MACpB;AAAA,IACF;AACA,UAAM;AACN,gBAAY,CAAC,OAAO,IAAI,OAAO;AAC/B,aAAS;AAAA,EACX,OAAO;AACL,UAAM,IAAI;AACV,gBAAY,IAAI;AAChB,aAAS;AAAA,EACX;AAEA,QAAM,YAAY,gBAAgB,IAAI,GAAG;AAEzC,QAAM,EAAE,QAAQ,QAAQ,UAAU,SAAS,IAAI,MAAM;AAAA,IACnD;AAAA,IACA;AAAA,IACA;AAAA,MACE,KAAK,IAAI;AAAA,MACT,KAAK;AAAA,MACL,WAAW,IAAI;AAAA,MACf,iBAAiB,IAAI;AAAA,IACvB;AAAA,EACF;AAEA,QAAM,cAAc,eAAe,QAAQ,IAAI,eAAe;AAC9D,QAAM,cAAc,eAAe,QAAQ,IAAI,eAAe;AAE9D,SAAO;AAAA,IACL,QAAQ,YAAY,QAAQ,SAAS,MAAM;AAAA,IAC3C,QAAQ,YAAY,QAAQ,SAAS,MAAM;AAAA,IAC3C;AAAA,IACA,WAAW,YAAY,aAAa,YAAY;AAAA,IAChD;AAAA,IACA;AAAA,IACA,UAAU,QAAQ;AAAA,IAClB,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/B;AACF;AAEO,SAAS,kBACd,OAA2B,CAAC,GACR;AACpB,QAAM,mBAAmB,KAAK,mCAAmC;AACjE,QAAM,iBAAiB,KAAK,oBAAoB;AAChD,QAAM,qBACJ,KAAK,0BAA0B;AAEjC,SAAO;AAAA,IACL,aAAa;AAAA,MACX,MAAM;AAAA,MACN,aACE;AAAA,MACF,YAAY;AAAA,QACV,MAAM;AAAA,QACN,YAAY;AAAA,UACV,SAAS;AAAA,YACP,MAAM;AAAA,YACN,aACE;AAAA,UACJ;AAAA,UACA,MAAM;AAAA,YACJ,MAAM;AAAA,YACN,OAAO,EAAE,MAAM,SAAS;AAAA,YACxB,aACE;AAAA,UACJ;AAAA,UACA,SAAS;AAAA,YACP,MAAM;AAAA,YACN,aACE;AAAA,UACJ;AAAA,UACA,KAAK;AAAA,YACH,MAAM;AAAA,YACN,sBAAsB,EAAE,MAAM,SAAS;AAAA,YACvC,aACE;AAAA,UACJ;AAAA,UACA,MAAM;AAAA,YACJ,MAAM;AAAA,YACN,MAAM,CAAC,QAAQ,OAAO;AAAA,YACtB,aACE;AAAA,UACJ;AAAA,UACA,YAAY;AAAA,YACV,MAAM;AAAA,YACN,aAAa,oFAAoF,cAAc;AAAA,UACjH;AAAA,UACA,mBAAmB;AAAA,YACjB,MAAM;AAAA,YACN,aAAa,uFAAuF,kBAAkB;AAAA,UACxH;AAAA,QACF;AAAA,QACA,UAAU,CAAC,WAAW,SAAS;AAAA,MACjC;AAAA,MACA,SAAS,OAAO,SAAS;AACvB,cAAM,UAAU,kBAAkB,MAAM,SAAS;AACjD,cAAM,OAAO,MAAM,QAAQ,KAAK,IAAI,IAAK,KAAK,OAAoB,CAAC;AACnE,cAAM,UAAU,kBAAkB,MAAM,SAAS;AACjD,cAAM,MACJ,KAAK,OAAO,QAAQ,OAAO,KAAK,QAAQ,WACnC,KAAK,MACN;AACN,cAAM,OAAyB,KAAK,SAAS,UAAU,UAAU;AACjE,cAAM,YACJ,OAAO,KAAK,eAAe,WACvB,KAAK,aACL;AACN,cAAM,kBACJ,OAAO,KAAK,sBAAsB,WAC9B,KAAK,oBACL;AAEN,eAAO;AAAA,UACL;AAAA,YACE;AAAA,YACA,MAAM;AAAA,YACN;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UACF;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,MACA,iBAAiB,CAAC;AAAA,MAClB,MAAM,CAAC,SAAS,QAAQ,QAAQ,SAAS;AAAA,IAC3C,CAAC;AAAA,EACH;AACF;",
+  "names": []
+}

package/dist/actions/builtin/files-helpers.d.ts

@@ -0,0 +1,15 @@
+export declare const MAX_READ_BYTES = 1000000;
+export interface PagedReadResult {
+    content: string;
+    limit: number;
+    offset: number;
+    totalLines: number;
+}
+export declare function lineOffset(value: unknown): number;
+export declare function lineLimit(value: unknown): number | undefined;
+export declare function readPagedFile(filePath: string, offsetArg: unknown, limitArg: unknown): Promise<PagedReadResult>;
+/** Convert a simple glob pattern to a RegExp (supports * ** ?) */
+export declare function globToRegex(pattern: string): RegExp;
+/** Recursively walk a directory and yield relative file paths (async). */
+export declare function walkDir(root: string, rel?: string): AsyncGenerator<string>;
+//# sourceMappingURL=files-helpers.d.ts.map

package/dist/actions/builtin/files-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files-helpers.d.ts","sourceRoot":"","sources":["../../../src/actions/builtin/files-helpers.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,cAAc,UAAY,CAAC;AAExC,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAIjD;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAI5D;AAED,wBAAsB,aAAa,CACjC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,OAAO,EAClB,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,eAAe,CAAC,CAiC1B;AAED,kEAAkE;AAClE,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAanD;AAED,0EAA0E;AAC1E,wBAAuB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAK,GAAG,cAAc,CAAC,MAAM,CAAC,CAY7E"}

package/dist/actions/builtin/files-helpers.js

@@ -0,0 +1,70 @@
+import fs from "node:fs";
+import fsp from "node:fs/promises";
+import path from "node:path";
+const MAX_READ_BYTES = 1e6;
+function lineOffset(value) {
+  return typeof value === "number" && Number.isFinite(value) ? Math.max(0, value - 1) : 0;
+}
+function lineLimit(value) {
+  return typeof value === "number" && Number.isFinite(value) ? Math.max(0, value) : void 0;
+}
+async function readPagedFile(filePath, offsetArg, limitArg) {
+  const start = lineOffset(offsetArg);
+  const requestedLimit = lineLimit(limitArg);
+  const end = requestedLimit == null ? Number.POSITIVE_INFINITY : start + requestedLimit;
+  const selected = [];
+  let carry = "";
+  let lineNumber = 0;
+  const processLine = (line) => {
+    if (lineNumber >= start && lineNumber < end) {
+      selected.push(line);
+    }
+    lineNumber++;
+  };
+  for await (const chunk of fs.createReadStream(filePath, {
+    encoding: "utf8"
+  })) {
+    const parts = `${carry}${String(chunk)}`.split("\n");
+    carry = parts.pop() ?? "";
+    for (const line of parts) {
+      processLine(line);
+    }
+  }
+  processLine(carry);
+  return {
+    content: selected.join("\n"),
+    totalLines: lineNumber,
+    offset: start + 1,
+    limit: requestedLimit ?? lineNumber - start
+  };
+}
+function globToRegex(pattern) {
+  const escaped = pattern.split("**").map(
+    (part) => part.split("*").map(
+      (s) => s.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\?/g, "[^/]")
+    ).join("[^/]*")
+  ).join(".*");
+  return new RegExp(`^${escaped}$`);
+}
+async function* walkDir(root, rel = "") {
+  const entries = await fsp.readdir(path.join(root, rel), {
+    withFileTypes: true
+  });
+  for (const entry of entries) {
+    const entryRel = rel ? `${rel}/${entry.name}` : entry.name;
+    if (entry.isDirectory()) {
+      yield* walkDir(root, entryRel);
+    } else {
+      yield entryRel;
+    }
+  }
+}
+export {
+  MAX_READ_BYTES,
+  globToRegex,
+  lineLimit,
+  lineOffset,
+  readPagedFile,
+  walkDir
+};
+//# sourceMappingURL=files-helpers.js.map

package/dist/actions/builtin/files-helpers.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/actions/builtin/files-helpers.ts"],
+  "sourcesContent": ["import fs from 'node:fs';\nimport fsp from 'node:fs/promises';\nimport path from 'node:path';\n\nexport const MAX_READ_BYTES = 1_000_000; // 1 MB soft cap before requiring offset/limit\n\nexport interface PagedReadResult {\n  content: string;\n  limit: number;\n  offset: number;\n  totalLines: number;\n}\n\nexport function lineOffset(value: unknown): number {\n  return typeof value === 'number' && Number.isFinite(value)\n    ? Math.max(0, value - 1)\n    : 0;\n}\n\nexport function lineLimit(value: unknown): number | undefined {\n  return typeof value === 'number' && Number.isFinite(value)\n    ? Math.max(0, value)\n    : undefined;\n}\n\nexport async function readPagedFile(\n  filePath: string,\n  offsetArg: unknown,\n  limitArg: unknown\n): Promise<PagedReadResult> {\n  const start = lineOffset(offsetArg);\n  const requestedLimit = lineLimit(limitArg);\n  const end =\n    requestedLimit == null ? Number.POSITIVE_INFINITY : start + requestedLimit;\n  const selected: string[] = [];\n  let carry = '';\n  let lineNumber = 0;\n\n  const processLine = (line: string): void => {\n    if (lineNumber >= start && lineNumber < end) {\n      selected.push(line);\n    }\n    lineNumber++;\n  };\n\n  for await (const chunk of fs.createReadStream(filePath, {\n    encoding: 'utf8',\n  })) {\n    const parts = `${carry}${String(chunk)}`.split('\\n');\n    carry = parts.pop() ?? '';\n    for (const line of parts) {\n      processLine(line);\n    }\n  }\n  processLine(carry);\n\n  return {\n    content: selected.join('\\n'),\n    totalLines: lineNumber,\n    offset: start + 1,\n    limit: requestedLimit ?? lineNumber - start,\n  };\n}\n\n/** Convert a simple glob pattern to a RegExp (supports * ** ?) */\nexport function globToRegex(pattern: string): RegExp {\n  const escaped = pattern\n    .split('**')\n    .map((part) =>\n      part\n        .split('*')\n        .map((s) =>\n          s.replace(/[.+^${}()|[\\]\\\\]/g, '\\\\$&').replace(/\\?/g, '[^/]')\n        )\n        .join('[^/]*')\n    )\n    .join('.*');\n  return new RegExp(`^${escaped}$`);\n}\n\n/** Recursively walk a directory and yield relative file paths (async). */\nexport async function* walkDir(root: string, rel = ''): AsyncGenerator<string> {\n  const entries = await fsp.readdir(path.join(root, rel), {\n    withFileTypes: true,\n  });\n  for (const entry of entries) {\n    const entryRel = rel ? `${rel}/${entry.name}` : entry.name;\n    if (entry.isDirectory()) {\n      yield* walkDir(root, entryRel);\n    } else {\n      yield entryRel;\n    }\n  }\n}\n"],
+  "mappings": "AAAA,OAAO,QAAQ;AACf,OAAO,SAAS;AAChB,OAAO,UAAU;AAEV,MAAM,iBAAiB;AASvB,SAAS,WAAW,OAAwB;AACjD,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IACrD,KAAK,IAAI,GAAG,QAAQ,CAAC,IACrB;AACN;AAEO,SAAS,UAAU,OAAoC;AAC5D,SAAO,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,IACrD,KAAK,IAAI,GAAG,KAAK,IACjB;AACN;AAEA,eAAsB,cACpB,UACA,WACA,UAC0B;AAC1B,QAAM,QAAQ,WAAW,SAAS;AAClC,QAAM,iBAAiB,UAAU,QAAQ;AACzC,QAAM,MACJ,kBAAkB,OAAO,OAAO,oBAAoB,QAAQ;AAC9D,QAAM,WAAqB,CAAC;AAC5B,MAAI,QAAQ;AACZ,MAAI,aAAa;AAEjB,QAAM,cAAc,CAAC,SAAuB;AAC1C,QAAI,cAAc,SAAS,aAAa,KAAK;AAC3C,eAAS,KAAK,IAAI;AAAA,IACpB;AACA;AAAA,EACF;AAEA,mBAAiB,SAAS,GAAG,iBAAiB,UAAU;AAAA,IACtD,UAAU;AAAA,EACZ,CAAC,GAAG;AACF,UAAM,QAAQ,GAAG,KAAK,GAAG,OAAO,KAAK,CAAC,GAAG,MAAM,IAAI;AACnD,YAAQ,MAAM,IAAI,KAAK;AACvB,eAAW,QAAQ,OAAO;AACxB,kBAAY,IAAI;AAAA,IAClB;AAAA,EACF;AACA,cAAY,KAAK;AAEjB,SAAO;AAAA,IACL,SAAS,SAAS,KAAK,IAAI;AAAA,IAC3B,YAAY;AAAA,IACZ,QAAQ,QAAQ;AAAA,IAChB,OAAO,kBAAkB,aAAa;AAAA,EACxC;AACF;AAGO,SAAS,YAAY,SAAyB;AACnD,QAAM,UAAU,QACb,MAAM,IAAI,EACV;AAAA,IAAI,CAAC,SACJ,KACG,MAAM,GAAG,EACT;AAAA,MAAI,CAAC,MACJ,EAAE,QAAQ,qBAAqB,MAAM,EAAE,QAAQ,OAAO,MAAM;AAAA,IAC9D,EACC,KAAK,OAAO;AAAA,EACjB,EACC,KAAK,IAAI;AACZ,SAAO,IAAI,OAAO,IAAI,OAAO,GAAG;AAClC;AAGA,gBAAuB,QAAQ,MAAc,MAAM,IAA4B;AAC7E,QAAM,UAAU,MAAM,IAAI,QAAQ,KAAK,KAAK,MAAM,GAAG,GAAG;AAAA,IACtD,eAAe;AAAA,EACjB,CAAC;AACD,aAAW,SAAS,SAAS;AAC3B,UAAM,WAAW,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,KAAK,MAAM;AACtD,QAAI,MAAM,YAAY,GAAG;AACvB,aAAO,QAAQ,MAAM,QAAQ;AAAA,IAC/B,OAAO;AACL,YAAM;AAAA,IACR;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/actions/builtin/files.d.ts

@@ -0,0 +1,12 @@
+import type { ActionDefinition } from '../types.js';
+export interface FileActionsOptions {
+    /**
+     * Root directory. When set, every path-taking file action rejects inputs
+     * that escape it via traversal (`..`). When unset, traversal above `cwd`
+     * is still rejected — absolute paths and in-tree paths are permitted
+     * so existing call sites keep working.
+     */
+    readonly workspace?: string;
+}
+export declare function createFileActions(opts?: FileActionsOptions): ActionDefinition[];
+//# sourceMappingURL=files.d.ts.map

package/dist/actions/builtin/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../../src/actions/builtin/files.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAWpD,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAmBD,wBAAgB,iBAAiB,CAC/B,IAAI,GAAE,kBAAuB,GAC5B,gBAAgB,EAAE,CA0UpB"}