pulseed 0.4.14 → 0.4.16

package/dist/tools/system/EnvTool/EnvTool.d.ts

@@ -4,10 +4,10 @@ export declare const EnvInputSchema: z.ZodObject<{
     query: z.ZodDefault<z.ZodEnum<["node_version", "platform", "env_var", "cwd", "memory", "uptime"]>>;
     varName: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    query: "cwd" | "memory" | "platform" | "uptime" | "node_version" | "env_var";
+    query: "memory" | "cwd" | "platform" | "uptime" | "node_version" | "env_var";
     varName?: string | undefined;
 }, {
-    query?: "cwd" | "memory" | "platform" | "uptime" | "node_version" | "env_var" | undefined;
+    query?: "memory" | "cwd" | "platform" | "uptime" | "node_version" | "env_var" | undefined;
     varName?: string | undefined;
 }>;
 export type EnvInput = z.infer<typeof EnvInputSchema>;
@@ -21,10 +21,10 @@ export declare class EnvTool implements ITool<EnvInput, EnvOutput> {
         query: z.ZodDefault<z.ZodEnum<["node_version", "platform", "env_var", "cwd", "memory", "uptime"]>>;
         varName: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        query: "cwd" | "memory" | "platform" | "uptime" | "node_version" | "env_var";
+        query: "memory" | "cwd" | "platform" | "uptime" | "node_version" | "env_var";
         varName?: string | undefined;
     }, {
-        query?: "cwd" | "memory" | "platform" | "uptime" | "node_version" | "env_var" | undefined;
+        query?: "memory" | "cwd" | "platform" | "uptime" | "node_version" | "env_var" | undefined;
         varName?: string | undefined;
     }>;
     description(_context?: ToolDescriptionContext): string;

package/dist/tools/system/ProcessSessionTool/ProcessSessionTool.d.ts

@@ -10,13 +10,13 @@ export declare const ProcessSessionStartInputSchema: z.ZodObject<{
     command: string;
     args: string[];
     label?: string | undefined;
-    cwd?: string | undefined;
     env?: Record<string, string> | undefined;
+    cwd?: string | undefined;
 }, {
     command: string;
     label?: string | undefined;
-    cwd?: string | undefined;
     env?: Record<string, string> | undefined;
+    cwd?: string | undefined;
     args?: string[] | undefined;
 }>;
 export type ProcessSessionStartInput = z.infer<typeof ProcessSessionStartInputSchema>;
@@ -125,13 +125,13 @@ export declare class ProcessSessionStartTool extends ProcessSessionBaseTool<Proc
         command: string;
         args: string[];
         label?: string | undefined;
-        cwd?: string | undefined;
         env?: Record<string, string> | undefined;
+        cwd?: string | undefined;
     }, {
         command: string;
         label?: string | undefined;
-        cwd?: string | undefined;
         env?: Record<string, string> | undefined;
+        cwd?: string | undefined;
         args?: string[] | undefined;
     }>;
     description(): string;

package/dist/tools/system/ShellTool/ShellTool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ShellTool.d.ts","sourceRoot":"","sources":["../../../../src/tools/system/ShellTool/ShellTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAK9G,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;EAK3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,MAAM,WAAW,WAAW;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;CAAE;AAElF,qBAAa,SAAU,YAAW,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC;IAC9D,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAK7B;IACF,QAAQ,CAAC,WAAW;;;;;;;;;;;;;;;OAAoB;IAExC,WAAW,IAAI,MAAM;IAIf,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IA0BtE,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAgDpG,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO;CAS9C"}
+{"version":3,"file":"ShellTool.d.ts","sourceRoot":"","sources":["../../../../src/tools/system/ShellTool/ShellTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAM9G,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;EAK3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,MAAM,WAAW,WAAW;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;CAAE;AAElF,qBAAa,SAAU,YAAW,KAAK,CAAC,UAAU,EAAE,WAAW,CAAC;IAC9D,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAK7B;IACF,QAAQ,CAAC,WAAW;;;;;;;;;;;;;;;OAAoB;IAExC,WAAW,IAAI,MAAM;IAIf,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IA0BtE,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,qBAAqB,CAAC;IASpG,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO;CAS9C"}

package/dist/tools/system/ShellTool/ShellTool.js

@@ -2,6 +2,7 @@ import { z } from "zod";
 import { execFileNoThrow } from "../../../base/utils/execFileNoThrow.js";
 import { DESCRIPTION } from "./prompt.js";
 import { TAGS, MAX_OUTPUT_CHARS, PERMISSION_LEVEL } from "./constants.js";
+import { assessShellCommand } from "./command-policy.js";
 export const ShellInputSchema = z.object({
     command: z.string().min(1),
     cwd: z.string().optional(),
@@ -46,54 +47,13 @@ export class ShellTool {
         }
     }
     async checkPermissions(input, context) {
-        const cmd = input.command.trim();
-        const SAFE_PATTERNS = [
-            /^(cat|head|tail|wc|ls|pwd|echo|date|hostname|which|type|file)/,
-            /^git\s+(status|log|diff|show|branch|rev-parse|rev-list|describe|tag\s+-l)/,
-            /^npm\s+(ls|list|view|info|outdated|audit)/,
-            /^npx\s+vitest\s+(run|list|--reporter)/,
-            /^npx\s+tsc\s+--noEmit/,
-            /^rg\s/, /^find\s/, /^du\s/, /^df\s/, /^tree\s/,
-        ];
-        const DENY_PATTERNS = [
-            /rm\s/, /mv\s/, /cp\s/, /mkdir\s/, /touch\s/, /chmod\s/, /chown\s/,
-            /git\s+(push|commit|merge|rebase|reset|checkout|clean|stash)/,
-            /npm\s+(install|uninstall|publish|run|exec)/,
-            /curl\s.*(-X\s*(POST|PUT|DELETE|PATCH)|-d\s)/,
-            /wget\s/, /sudo\s/, /mkfs/, /dd\s+if=/, /shutdown/, /reboot/,
-        ];
-        const segments = cmd.split(/\s*(?:&&|\|\||;)\s*/);
-        // Injection patterns always checked regardless of trust level
-        const INJECTION_PATTERNS = [/>/, /\|.*(tee|dd|rm|mv)/];
-        for (const segment of segments) {
-            const trimmed = segment.trim();
-            if (!trimmed)
-                continue;
-            if (INJECTION_PATTERNS.some(p => p.test(trimmed))) {
-                return { status: "denied", reason: `Denied command segment (injection risk): ${trimmed}` };
-            }
-        }
-        // trusted: skip DENY_PATTERNS and SAFE_PATTERNS; only injection checks above apply
-        if (context?.trusted) {
+        const assessment = assessShellCommand(input.command, context?.executionPolicy, context?.trusted === true);
+        if (assessment.status === "allowed")
             return { status: "allowed" };
+        if (assessment.status === "needs_approval") {
+            return { status: "needs_approval", reason: assessment.reason ?? "Shell command requires approval" };
         }
-        for (const segment of segments) {
-            const trimmed = segment.trim();
-            if (!trimmed)
-                continue;
-            if (DENY_PATTERNS.some(p => p.test(trimmed))) {
-                return { status: "denied", reason: `Denied command segment: ${trimmed}` };
-            }
-        }
-        for (const segment of segments) {
-            const trimmed = segment.trim();
-            if (!trimmed)
-                continue;
-            if (!SAFE_PATTERNS.some(p => p.test(trimmed))) {
-                return { status: "needs_approval", reason: `Unknown command segment requires approval: ${trimmed}` };
-            }
-        }
-        return { status: "allowed" };
+        return { status: "denied", reason: assessment.reason ?? "Shell command denied by policy" };
     }
     isConcurrencySafe(input) {
         const cmd = input.command.trim();

package/dist/tools/system/ShellTool/ShellTool.js.map

@@ -1 +1 @@
-{"version":3,"file":"ShellTool.js","sourceRoot":"","sources":["../../../../src/tools/system/ShellTool/ShellTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAE1E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAKH,MAAM,OAAO,SAAS;IACX,QAAQ,GAAiB;QAChC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC;QAC/C,eAAe,EAAE,gBAAgB,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK;QAC1E,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QACvD,cAAc,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;KAClD,CAAC;IACO,WAAW,GAAG,gBAAgB,CAAC;IAExC,WAAW;QACT,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAiB,EAAE,OAAwB;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YACxG,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;YACvC,MAAM,MAAM,GAAgB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;YACvF,OAAO;gBACL,OAAO,EAAE,QAAQ,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM;gBACrC,OAAO,EAAE,QAAQ,KAAK,CAAC;oBACrB,CAAC,CAAC,6BAA6B,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;oBACnG,CAAC,CAAC,wBAAwB,QAAQ,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBACvE,KAAK,EAAE,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC/D,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,eAAe,EAAE,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;aAC7F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE;gBAClF,OAAO,EAAE,2BAA4B,GAAa,CAAC,OAAO,EAAE;gBAC5D,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aAClE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAiB,EAAE,OAAyB;QACjE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG;YACpB,+DAA+D;YAC/D,2EAA2E;YAC3E,2CAA2C;YAC3C,uCAAuC;YACvC,uBAAuB;YACvB,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS;SAChD,CAAC;QACF,MAAM,aAAa,GAAG;YACpB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS;YAClE,6DAA6D;YAC7D,4CAA4C;YAC5C,6CAA6C;YAC7C,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ;SAC7D,CAAC;QACF,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAClD,8DAA8D;QAC9D,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QACvD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAClD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,4CAA4C,OAAO,EAAE,EAAE,CAAC;YAC7F,CAAC;QACH,CAAC;QACD,mFAAmF;QACnF,IAAI,OAAO,EAAE,OAAO,EAAE,CAAC;YACrB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC/B,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC7C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,2BAA2B,OAAO,EAAE,EAAE,CAAC;YAC5E,CAAC;QACH,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC9C,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,8CAA8C,OAAO,EAAE,EAAE,CAAC;YACvG,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,iBAAiB,CAAC,KAAiB;QACjC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,gBAAgB,GAAG;YACvB,sCAAsC;YACtC,sCAAsC;YACtC,OAAO,EAAE,SAAS;SACnB,CAAC;QACF,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC;CACF"}
+{"version":3,"file":"ShellTool.js","sourceRoot":"","sources":["../../../../src/tools/system/ShellTool/ShellTool.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC,CAAC;AAKH,MAAM,OAAO,SAAS;IACX,QAAQ,GAAiB;QAChC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC;QAC/C,eAAe,EAAE,gBAAgB,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK;QAC1E,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QACvD,cAAc,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;KAClD,CAAC;IACO,WAAW,GAAG,gBAAgB,CAAC;IAExC,WAAW;QACT,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAiB,EAAE,OAAwB;QACpD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YACxG,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC;YACvC,MAAM,MAAM,GAAgB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;YACvF,OAAO;gBACL,OAAO,EAAE,QAAQ,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM;gBACrC,OAAO,EAAE,QAAQ,KAAK,CAAC;oBACrB,CAAC,CAAC,6BAA6B,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;oBACnG,CAAC,CAAC,wBAAwB,QAAQ,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBACvE,KAAK,EAAE,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC/D,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,eAAe,EAAE,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;aAC7F,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE;gBAClF,OAAO,EAAE,2BAA4B,GAAa,CAAC,OAAO,EAAE;gBAC5D,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aAClE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAiB,EAAE,OAAyB;QACjE,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC;QAC1G,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAClE,IAAI,UAAU,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YAC3C,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,iCAAiC,EAAE,CAAC;QACtG,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,gCAAgC,EAAE,CAAC;IAC7F,CAAC;IAED,iBAAiB,CAAC,KAAiB;QACjC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,gBAAgB,GAAG;YACvB,sCAAsC;YACtC,sCAAsC;YACtC,OAAO,EAAE,SAAS;SACnB,CAAC;QACF,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,CAAC;CACF"}

package/dist/tools/system/ShellTool/command-policy.d.ts

@@ -0,0 +1,14 @@
+import type { ExecutionPolicy } from "../../../orchestrator/execution/agent-loop/execution-policy.js";
+export interface ShellCommandAssessment {
+    status: "allowed" | "needs_approval" | "denied";
+    reason?: string;
+    capabilities: {
+        readOnly: boolean;
+        localWrite: boolean;
+        network: boolean;
+        destructive: boolean;
+        protectedTarget: boolean;
+    };
+}
+export declare function assessShellCommand(command: string, policy?: ExecutionPolicy, trusted?: boolean): ShellCommandAssessment;
+//# sourceMappingURL=command-policy.d.ts.map

package/dist/tools/system/ShellTool/command-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-policy.d.ts","sourceRoot":"","sources":["../../../../src/tools/system/ShellTool/command-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gEAAgE,CAAC;AAEtG,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,SAAS,GAAG,gBAAgB,GAAG,QAAQ,CAAC;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE;QACZ,QAAQ,EAAE,OAAO,CAAC;QAClB,UAAU,EAAE,OAAO,CAAC;QACpB,OAAO,EAAE,OAAO,CAAC;QACjB,WAAW,EAAE,OAAO,CAAC;QACrB,eAAe,EAAE,OAAO,CAAC;KAC1B,CAAC;CACH;AAiDD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,eAAe,EACxB,OAAO,UAAQ,GACd,sBAAsB,CAkFxB"}

package/dist/tools/system/ShellTool/command-policy.js

@@ -0,0 +1,121 @@
+const SAFE_PATTERNS = [
+    /^(cat|head|tail|wc|ls|pwd|echo|date|hostname|which|type|file)\b/,
+    /^git\s+(status|log|diff|show|branch|rev-parse|rev-list|describe|tag\s+-l)\b/,
+    /^npm\s+(ls|list|view|info|outdated|audit)\b/,
+    /^npx\s+vitest\s+(run|list|--reporter)\b/,
+    /^npx\s+tsc\s+--noemit\b/i,
+    /^rg\b/, /^find\b/, /^du\b/, /^df\b/, /^tree\b/,
+];
+const LOCAL_WRITE_PATTERNS = [
+    /\brm\b/, /\bmv\b/, /\bcp\b/, /\bmkdir\b/, /\btouch\b/, /\bchmod\b/, /\bchown\b/,
+    /\bsed\s+-i\b/, /\bperl\s+-i\b/, /\btee\b/, />/, /\bapply_patch\b/,
+    /\bgit\s+(apply|checkout|restore)\b/,
+    /\bnpm\s+(install|uninstall|run|exec)\b/,
+];
+const NETWORK_PATTERNS = [
+    /\bcurl\b/, /\bwget\b/, /\bssh\b/, /\bscp\b/, /\brsync\b/, /\bpip\s+install\b/,
+    /\bnpm\s+(install|publish)\b/, /\bgit\s+(fetch|pull|push|clone)\b/,
+];
+const DESTRUCTIVE_PATTERNS = [
+    /\brm\b/, /\bmkfs\b/, /\bdd\s+if=/, /\bshutdown\b/, /\breboot\b/,
+    /\bgit\s+(push|commit|merge|rebase|reset|clean|stash)\b/,
+    /\bsudo\b/,
+];
+const BLOCKED_PATTERNS = [
+    /\brm\b/, /\bmv\b/, /\bcp\b/, /\bmkdir\b/, /\btouch\b/, /\bchmod\b/, /\bchown\b/,
+    /\bgit\s+(push|commit|merge|rebase|reset|checkout|clean|stash)\b/,
+    /\bnpm\s+(install|uninstall|publish|run|exec)\b/,
+    /\bcurl\b/, /\bwget\b/, /\bsudo\b/, /\bmkfs\b/, /\bdd\s+if=/, /\bshutdown\b/, /\breboot\b/,
+];
+const INJECTION_PATTERNS = [/>/, /\$\(/, /`/, /\|.*(tee|dd|rm|mv)\b/];
+const PROTECTED_TARGET_PATTERNS = [
+    /\.git\b/i,
+    /\.codex\b/i,
+    /\.agents\b/i,
+    /\.pulseed\b/i,
+    /\bagents\.md\b/i,
+    /\.env(\.[a-z0-9_-]+)?\b/i,
+    /\bnode_modules\b/i,
+    /\bpackage\.json\b/i,
+    /\btsconfig(\.[^/\s]+)?\.json\b/i,
+];
+export function assessShellCommand(command, policy, trusted = false) {
+    const trimmed = command.trim();
+    const segments = trimmed.split(/\s*(?:&&|\|\||;)\s*/).map((segment) => segment.trim()).filter(Boolean);
+    const capabilities = {
+        readOnly: true,
+        localWrite: false,
+        network: false,
+        destructive: false,
+        protectedTarget: false,
+    };
+    for (const segment of segments) {
+        if (INJECTION_PATTERNS.some((pattern) => pattern.test(segment))) {
+            return {
+                status: "denied",
+                reason: `Denied command segment (injection risk): ${segment}`,
+                capabilities,
+            };
+        }
+        const isSafe = SAFE_PATTERNS.some((pattern) => pattern.test(segment));
+        const writes = LOCAL_WRITE_PATTERNS.some((pattern) => pattern.test(segment));
+        const network = NETWORK_PATTERNS.some((pattern) => pattern.test(segment));
+        const destructive = DESTRUCTIVE_PATTERNS.some((pattern) => pattern.test(segment));
+        const protectedTarget = PROTECTED_TARGET_PATTERNS.some((pattern) => pattern.test(segment));
+        if (!isSafe)
+            capabilities.readOnly = false;
+        if (writes)
+            capabilities.localWrite = true;
+        if (network)
+            capabilities.network = true;
+        if (destructive)
+            capabilities.destructive = true;
+        if (protectedTarget)
+            capabilities.protectedTarget = true;
+    }
+    if (trusted && !capabilities.protectedTarget) {
+        return { status: "allowed", capabilities };
+    }
+    if (segments.some((segment) => INJECTION_PATTERNS.some((pattern) => pattern.test(segment)))) {
+        return {
+            status: "denied",
+            reason: `Denied command segment (injection risk): ${segments.find((segment) => INJECTION_PATTERNS.some((pattern) => pattern.test(segment)))}`,
+            capabilities,
+        };
+    }
+    if (segments.some((segment) => BLOCKED_PATTERNS.some((pattern) => pattern.test(segment)))) {
+        return { status: "denied", reason: `Denied command segment: ${segments.find((segment) => BLOCKED_PATTERNS.some((pattern) => pattern.test(segment)))}`, capabilities };
+    }
+    if (capabilities.destructive) {
+        return { status: "denied", reason: "Denied command segment: destructive shell command", capabilities };
+    }
+    if (capabilities.protectedTarget && capabilities.localWrite) {
+        return { status: "denied", reason: "Shell command targets a protected path", capabilities };
+    }
+    if (capabilities.network && policy && !policy.networkAccess) {
+        return { status: "denied", reason: "Network access is disabled for this session", capabilities };
+    }
+    if (!capabilities.localWrite && !capabilities.network && capabilities.readOnly) {
+        return { status: "allowed", capabilities };
+    }
+    if (policy?.sandboxMode === "read_only") {
+        return { status: "denied", reason: "Read-only sandbox blocks mutating shell commands", capabilities };
+    }
+    if (!policy) {
+        return {
+            status: capabilities.localWrite || capabilities.network || !capabilities.readOnly ? "needs_approval" : "allowed",
+            reason: capabilities.localWrite || capabilities.network || !capabilities.readOnly ? "Unknown command segment requires approval" : undefined,
+            capabilities,
+        };
+    }
+    const needsApproval = policy.approvalPolicy !== "never";
+    if (capabilities.localWrite || capabilities.network) {
+        return {
+            status: needsApproval ? "needs_approval" : "allowed",
+            reason: needsApproval ? "Shell command requires approval under current execution policy" : undefined,
+            capabilities,
+        };
+    }
+    return { status: "allowed", capabilities };
+}
+//# sourceMappingURL=command-policy.js.map

package/dist/tools/system/ShellTool/command-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-policy.js","sourceRoot":"","sources":["../../../../src/tools/system/ShellTool/command-policy.ts"],"names":[],"mappings":"AAcA,MAAM,aAAa,GAAG;IACpB,iEAAiE;IACjE,6EAA6E;IAC7E,6CAA6C;IAC7C,yCAAyC;IACzC,0BAA0B;IAC1B,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS;CAChD,CAAC;AAEF,MAAM,oBAAoB,GAAG;IAC3B,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW;IAChF,cAAc,EAAE,eAAe,EAAE,SAAS,EAAE,GAAG,EAAE,iBAAiB;IAClE,oCAAoC;IACpC,wCAAwC;CACzC,CAAC;AAEF,MAAM,gBAAgB,GAAG;IACvB,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB;IAC9E,6BAA6B,EAAE,mCAAmC;CACnE,CAAC;AAEF,MAAM,oBAAoB,GAAG;IAC3B,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY;IAChE,wDAAwD;IACxD,UAAU;CACX,CAAC;AAEF,MAAM,gBAAgB,GAAG;IACvB,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW;IAChF,iEAAiE;IACjE,gDAAgD;IAChD,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY;CAC3F,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAC;AACtE,MAAM,yBAAyB,GAAG;IAChC,UAAU;IACV,YAAY;IACZ,aAAa;IACb,cAAc;IACd,iBAAiB;IACjB,0BAA0B;IAC1B,mBAAmB;IACnB,oBAAoB;IACpB,iCAAiC;CAClC,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,MAAwB,EACxB,OAAO,GAAG,KAAK;IAEf,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvG,MAAM,YAAY,GAAG;QACnB,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,KAAK;QACjB,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,KAAK;QAClB,eAAe,EAAE,KAAK;KACvB,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAChE,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,4CAA4C,OAAO,EAAE;gBAC7D,YAAY;aACb,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1E,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAClF,MAAM,eAAe,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAE3F,IAAI,CAAC,MAAM;YAAE,YAAY,CAAC,QAAQ,GAAG,KAAK,CAAC;QAC3C,IAAI,MAAM;YAAE,YAAY,CAAC,UAAU,GAAG,IAAI,CAAC;QAC3C,IAAI,OAAO;YAAE,YAAY,CAAC,OAAO,GAAG,IAAI,CAAC;QACzC,IAAI,WAAW;YAAE,YAAY,CAAC,WAAW,GAAG,IAAI,CAAC;QACjD,IAAI,eAAe;YAAE,YAAY,CAAC,eAAe,GAAG,IAAI,CAAC;IAC3D,CAAC;IAED,IAAI,OAAO,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,CAAC;QAC7C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;IAC7C,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,4CAA4C,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YAC7I,YAAY;SACb,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,2BAA2B,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,YAAY,EAAE,CAAC;IACxK,CAAC;IACD,IAAI,YAAY,CAAC,WAAW,EAAE,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,mDAAmD,EAAE,YAAY,EAAE,CAAC;IACzG,CAAC;IACD,IAAI,YAAY,CAAC,eAAe,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;QAC5D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,wCAAwC,EAAE,YAAY,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,YAAY,CAAC,OAAO,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC5D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,6CAA6C,EAAE,YAAY,EAAE,CAAC;IACnG,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,UAAU,IAAI,CAAC,YAAY,CAAC,OAAO,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC/E,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;IAC7C,CAAC;IAED,IAAI,MAAM,EAAE,WAAW,KAAK,WAAW,EAAE,CAAC;QACxC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,kDAAkD,EAAE,YAAY,EAAE,CAAC;IACxG,CAAC;IAED,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,MAAM,EAAE,YAAY,CAAC,UAAU,IAAI,YAAY,CAAC,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;YAChH,MAAM,EAAE,YAAY,CAAC,UAAU,IAAI,YAAY,CAAC,OAAO,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,SAAS;YAC3I,YAAY;SACb,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,cAAc,KAAK,OAAO,CAAC;IACxD,IAAI,YAAY,CAAC,UAAU,IAAI,YAAY,CAAC,OAAO,EAAE,CAAC;QACpD,OAAO;YACL,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;YACpD,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,gEAAgE,CAAC,CAAC,CAAC,SAAS;YACpG,YAAY;SACb,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;AAC7C,CAAC"}

package/dist/tools/types.d.ts

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import type { ExecutionPolicy, SubagentRole } from "../orchestrator/execution/agent-loop/execution-policy.js";
 export declare const ToolResultSchema: z.ZodObject<{
     /** Whether the tool invocation succeeded */
     success: z.ZodBoolean;
@@ -85,6 +86,8 @@ export declare const ToolMetadataSchema: z.ZodObject<{
      * Used by the context-filtered tier of the registry.
      */
     tags: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Whether this tool requires network access even if it is otherwise read-only. */
+    requiresNetwork: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     name: string;
     tags: string[];
@@ -96,6 +99,7 @@ export declare const ToolMetadataSchema: z.ZodObject<{
     alwaysLoad: boolean;
     maxConcurrency: number;
     maxOutputChars: number;
+    requiresNetwork?: boolean | undefined;
 }, {
     name: string;
     permissionLevel: "read_only" | "read_metrics" | "write_local" | "execute" | "write_remote";
@@ -107,6 +111,7 @@ export declare const ToolMetadataSchema: z.ZodObject<{
     alwaysLoad?: boolean | undefined;
     maxConcurrency?: number | undefined;
     maxOutputChars?: number | undefined;
+    requiresNetwork?: boolean | undefined;
 }>;
 export type ToolMetadata = z.infer<typeof ToolMetadataSchema>;
 /**
@@ -171,6 +176,10 @@ export interface ToolCallContext {
     }) => Promise<void> | void;
     /** When true, bypass DENY_PATTERNS in ShellTool (internal use only) */
     trusted?: boolean;
+    /** Shared execution policy for chat/agent-loop sessions. */
+    executionPolicy?: ExecutionPolicy;
+    /** Optional subagent role for delegated runs. */
+    agentRole?: SubagentRole;
     /** Abort signal for cancellation */
     abortSignal?: AbortSignal;
     /** Timeout in milliseconds (per-tool-call) */

package/dist/tools/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,gBAAgB;IAC3B,4CAA4C;;IAE5C,6CAA6C;;IAE7C,2CAA2C;;IAE3C,wCAAwC;;IAExC,gDAAgD;;IAEhD,kFAAkF;;IAElF;;;OAGG;;IAEH,2EAA2E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAK3E,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAI1D,eAAO,MAAM,yBAAyB,oFAMpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAI5E,eAAO,MAAM,kBAAkB;IAC7B,+CAA+C;;IAE/C,sCAAsC;;IAEtC,uBAAuB;;IAEvB,uDAAuD;;IAEvD,uDAAuD;;IAEvD;;;;;OAKG;;IAEH,6DAA6D;;IAE7D,qDAAqD;;IAErD,kFAAkF;;IAElF;;;OAGG;;;;;;;;;;;;;;;;;;;;;;;;EAEH,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAI9D;;;;;;GAMG;AACH,MAAM,WAAW,KAAK,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO;IACxD,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAEhC,wEAAwE;IACxE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAE3D;;;;;OAKG;IACH,WAAW,CAAC,OAAO,CAAC,EAAE,sBAAsB,GAAG,MAAM,CAAC;IAEtD;;;OAGG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEnE;;;;OAIG;IACH,gBAAgB,CACd,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAElC;;;;OAIG;IACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3C;AAID,MAAM,WAAW,sBAAsB;IACrC,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6BAA6B;IAC7B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,WAAW,EAAE,OAAO,CAAC;IACrB,4DAA4D;IAC5D,UAAU,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,yDAAyD;IACzD,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC/F,uEAAuE;IACvE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,oCAAoC;IACpC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,MAAM,CAAC,EAAE;QACP,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAC7D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAC5D,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;KAC9D,CAAC;IACF,+EAA+E;IAC/E,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,mBAAmB,CAAC;IACrC,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,YAAY,GAAG,cAAc,GAAG,SAAS,CAAC;CAC1D;AAED,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;IAItC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,0DAA0D,CAAC;AAI9G,eAAO,MAAM,gBAAgB;IAC3B,4CAA4C;;IAE5C,6CAA6C;;IAE7C,2CAA2C;;IAE3C,wCAAwC;;IAExC,gDAAgD;;IAEhD,kFAAkF;;IAElF;;;OAGG;;IAEH,2EAA2E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAK3E,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAI1D,eAAO,MAAM,yBAAyB,oFAMpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAI5E,eAAO,MAAM,kBAAkB;IAC7B,+CAA+C;;IAE/C,sCAAsC;;IAEtC,uBAAuB;;IAEvB,uDAAuD;;IAEvD,uDAAuD;;IAEvD;;;;;OAKG;;IAEH,6DAA6D;;IAE7D,qDAAqD;;IAErD,kFAAkF;;IAElF;;;OAGG;;IAEH,mFAAmF;;;;;;;;;;;;;;;;;;;;;;;;;;EAEnF,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAI9D;;;;;;GAMG;AACH,MAAM,WAAW,KAAK,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO;IACxD,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAEhC,wEAAwE;IACxE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAE3D;;;;;OAKG;IACH,WAAW,CAAC,OAAO,CAAC,EAAE,sBAAsB,GAAG,MAAM,CAAC;IAEtD;;;OAGG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAEnE;;;;OAIG;IACH,gBAAgB,CACd,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAElC;;;;OAIG;IACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3C;AAID,MAAM,WAAW,sBAAsB;IACrC,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6BAA6B;IAC7B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,WAAW,EAAE,OAAO,CAAC;IACrB,4DAA4D;IAC5D,UAAU,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,yDAAyD;IACzD,mBAAmB,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC/F,uEAAuE;IACvE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,iDAAiD;IACjD,SAAS,CAAC,EAAE,YAAY,CAAC;IACzB,oCAAoC;IACpC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,MAAM,CAAC,EAAE;QACP,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAC7D,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;QAC5D,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;KAC9D,CAAC;IACF,+EAA+E;IAC/E,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,mBAAmB,CAAC;IACrC,aAAa,EAAE,OAAO,CAAC;IACvB,aAAa,EAAE,YAAY,GAAG,cAAc,GAAG,SAAS,CAAC;CAC1D;AAED,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;IAItC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}

package/dist/tools/types.js

@@ -62,6 +62,8 @@ export const ToolMetadataSchema = z.object({
      * Used by the context-filtered tier of the registry.
      */
     tags: z.array(z.string()).default([]),
+    /** Whether this tool requires network access even if it is otherwise read-only. */
+    requiresNetwork: z.boolean().optional(),
 });
 export const PermissionCheckResultSchema = z.discriminatedUnion("status", [
     z.object({ status: z.literal("allowed") }),

package/dist/tools/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,sBAAsB;AAEtB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,4CAA4C;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,6CAA6C;IAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IACjB,2CAA2C;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,wCAAwC;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,gDAAgD;IAChD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,kFAAkF;IAClF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC;;;OAGG;IACH,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzC,2EAA2E;IAC3E,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;QACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACpC,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC;AAIH,2BAA2B;AAE3B,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9C,WAAW,EAAO,+DAA+D;IACjF,cAAc,EAAI,0EAA0E;IAC5F,aAAa,EAAK,gDAAgD;IAClE,SAAS,EAAS,wDAAwD;IAC1E,cAAc,EAAI,0DAA0D;CAC7E,CAAC,CAAC;AAIH,wBAAwB;AAExB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,+CAA+C;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,sCAAsC;IACtC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,uBAAuB;IACvB,eAAe,EAAE,yBAAyB;IAC1C,uDAAuD;IACvD,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,uDAAuD;IACvD,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1B;;;;;OAKG;IACH,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,6DAA6D;IAC7D,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtC,qDAAqD;IACrD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACrC,kFAAkF;IAClF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACxC;;;OAGG;IACH,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACtC,CAAC,CAAC;AAyGH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IACxE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;IAC1C,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC7D,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CACtE,CAAC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/tools/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,sBAAsB;AAEtB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,4CAA4C;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,6CAA6C;IAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IACjB,2CAA2C;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,wCAAwC;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,gDAAgD;IAChD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,kFAAkF;IAClF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC;;;OAGG;IACH,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzC,2EAA2E;IAC3E,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;QACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACpC,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC;AAIH,2BAA2B;AAE3B,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9C,WAAW,EAAO,+DAA+D;IACjF,cAAc,EAAI,0EAA0E;IAC5F,aAAa,EAAK,gDAAgD;IAClE,SAAS,EAAS,wDAAwD;IAC1E,cAAc,EAAI,0DAA0D;CAC7E,CAAC,CAAC;AAIH,wBAAwB;AAExB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,+CAA+C;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,sCAAsC;IACtC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,uBAAuB;IACvB,eAAe,EAAE,yBAAyB;IAC1C,uDAAuD;IACvD,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,uDAAuD;IACvD,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1B;;;;;OAKG;IACH,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,6DAA6D;IAC7D,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtC,qDAAqD;IACrD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACrC,kFAAkF;IAClF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACxC;;;OAGG;IACH,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrC,mFAAmF;IACnF,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AA6GH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IACxE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;IAC1C,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC7D,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CACtE,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pulseed",
-  "version": "0.4.14",
+  "version": "0.4.16",
   "description": "AI agent orchestrator that gives existing agents the drive to persist — set a goal, and PulSeed observes, delegates, verifies, and loops until done.",
   "type": "module",
   "main": "dist/index.js",
@@ -41,6 +41,7 @@
   },
   "files": [
     "dist",
+    "assets/seedy.png",
     "README.md",
     "LICENSE"
   ],
@@ -71,16 +72,16 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@anthropic-ai/sdk": "^0.39.0",
+    "@anthropic-ai/sdk": "^0.89.0",
     "@clack/prompts": "^1.2.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "better-sqlite3": "^12.8.0",
+    "better-sqlite3": "^12.9.0",
     "cron-parser": "^5.5.0",
     "glob": "^13.0.0",
     "ink": "^6.8.0",
     "ink-text-input": "^6.0.0",
     "js-yaml": "^4.1.1",
-    "nodemailer": "^8.0.2",
+    "nodemailer": "^8.0.5",
     "openai": "^6.27.0",
     "react": "^19.2.4",
     "zod": "^3.22.0",