siclaw 0.1.0

package/dist/tools/run-skill.js

@@ -0,0 +1,169 @@
+import { Type } from "@sinclair/typebox";
+import { spawn } from "node:child_process";
+import { Text } from "@mariozechner/pi-tui";
+import { processToolOutput, renderTextResult } from "./tool-render.js";
+import { loadConfig } from "../core/config.js";
+import { resolveKubeconfigPath } from "./kubeconfig-resolver.js";
+import { sanitizeEnv } from "./sanitize-env.js";
+import { parseArgs } from "./command-sets.js";
+import { resolveSkillScript, listSkillScripts, listAllSkillsWithScripts, } from "./script-resolver.js";
+export function createRunSkillTool(kubeconfigRef) {
+    return {
+        name: "run_skill",
+        label: "Run Skill",
+        renderCall(args, theme) {
+            return new Text(theme.fg("toolTitle", theme.bold("run_skill")) +
+                " " + theme.fg("accent", args?.skill || "") +
+                "/" + theme.fg("accent", args?.script || "") +
+                (args?.args ? " " + theme.fg("muted", args.args) : ""), 0, 0);
+        },
+        renderResult: renderTextResult,
+        description: `Execute a skill script by skill name and script filename.
+
+Skills have helper scripts under their scripts/ directory. Use this tool to run them instead of calling bash directly.
+
+Parameters:
+- skill: Skill name (e.g. "find-node", "roce-perftest-pod")
+- script: Script filename (e.g. "find-node.sh", "run-perftest.py")
+- args: Optional command-line arguments
+- timeout_seconds: Timeout (default: 180, max: 300)
+
+Examples:
+- skill: "find-node", script: "find-node.sh", args: "A100"
+- skill: "roce-perftest-pod", script: "run-perftest.py", args: "--server-pod srv --client-pod cli --server-ns ns --client-ns ns"
+- skill: "roce-check-node-config", script: "check-node-config.py", args: "--node node1 --mode sriov-switchdev"
+
+Do NOT use the bash tool to run skill scripts. Always use this tool instead.
+Read the skill's SKILL.md first to understand required parameters and usage.`,
+        parameters: Type.Object({
+            skill: Type.String({
+                description: "Skill name (e.g. 'find-node', 'roce-perftest-pod')",
+            }),
+            script: Type.String({
+                description: "Script filename within the skill (e.g. 'find-node.sh', 'run-perftest.py')",
+            }),
+            args: Type.Optional(Type.String({
+                description: "Command-line arguments to pass to the script",
+            })),
+            timeout_seconds: Type.Optional(Type.Number({
+                description: "Timeout in seconds (default: 180, max: 300)",
+            })),
+        }),
+        async execute(_toolCallId, rawParams, signal) {
+            const params = rawParams;
+            const skill = params.skill?.trim();
+            const script = params.script?.trim();
+            if (!skill || !script) {
+                return {
+                    content: [{ type: "text", text: "Error: both skill and script are required." }],
+                    details: { error: true },
+                };
+            }
+            // Validate no path traversal
+            if (skill.includes("/") || skill.includes("\\") || script.includes("/") || script.includes("\\")) {
+                return {
+                    content: [{ type: "text", text: "Error: skill and script names must not contain path separators." }],
+                    details: { error: true },
+                };
+            }
+            const resolved = resolveSkillScript(skill, script);
+            if (!resolved) {
+                const available = listSkillScripts(skill);
+                let hint;
+                if (available.length > 0) {
+                    hint = `Available scripts for "${skill}": ${available.join(", ")}`;
+                }
+                else {
+                    // List all skills that DO have scripts to help the LLM
+                    const allSkillsWithScripts = listAllSkillsWithScripts();
+                    hint = `Skill "${skill}" has no scripts directory — follow its SKILL.md instructions using bash/other tools instead.`;
+                    if (allSkillsWithScripts.length > 0) {
+                        hint += `\n\nSkills with scripts: ${allSkillsWithScripts.map((s) => `${s.skill} (${s.scripts.join(", ")})`).join("; ")}`;
+                    }
+                }
+                return {
+                    content: [{ type: "text", text: `Error: script "${script}" not found in skill "${skill}". ${hint}` }],
+                    details: { error: true },
+                };
+            }
+            const args = params.args?.trim() || "";
+            // Security: parse args into array and pass via spawn() — never interpolate
+            // into a shell command string (prevents shell injection via args parameter)
+            const cmdArgs = args ? parseArgs(args) : [];
+            const timeout = Math.min(params.timeout_seconds ?? 180, 300) * 1000;
+            try {
+                const child = spawn(resolved.interpreter, [resolved.path, ...cmdArgs], {
+                    detached: true, // make child a process group leader for clean group kill
+                    stdio: ["ignore", "pipe", "pipe"],
+                    env: {
+                        ...sanitizeEnv(process.env),
+                        SICLAW_DEBUG_IMAGE: loadConfig().debugImage,
+                        ...(kubeconfigRef?.credentialsDir ? { SICLAW_CREDENTIALS_DIR: kubeconfigRef.credentialsDir } : {}),
+                        KUBECONFIG: resolveKubeconfigPath(kubeconfigRef?.credentialsDir) || "/dev/null",
+                    },
+                });
+                const onAbort = () => {
+                    // Kill the entire process group so cleanup doesn't block the abort.
+                    try {
+                        process.kill(-child.pid, "SIGKILL");
+                    }
+                    catch {
+                        child.kill("SIGKILL");
+                    }
+                };
+                signal?.addEventListener("abort", onAbort, { once: true });
+                const timer = setTimeout(() => {
+                    try {
+                        process.kill(-child.pid, "SIGKILL");
+                    }
+                    catch {
+                        child.kill("SIGKILL");
+                    }
+                }, timeout);
+                const MAX_OUTPUT = 10 * 1024 * 1024; // 10 MB — matches old exec() maxBuffer
+                const { stdout, stderr } = await new Promise((resolve, reject) => {
+                    let stdout = "";
+                    let stderr = "";
+                    let totalSize = 0;
+                    child.stdout.on("data", (chunk) => {
+                        totalSize += chunk.length;
+                        if (totalSize <= MAX_OUTPUT)
+                            stdout += chunk.toString();
+                    });
+                    child.stderr.on("data", (chunk) => {
+                        totalSize += chunk.length;
+                        if (totalSize <= MAX_OUTPUT)
+                            stderr += chunk.toString();
+                    });
+                    child.on("close", (code) => {
+                        clearTimeout(timer);
+                        signal?.removeEventListener("abort", onAbort);
+                        if (code === 0)
+                            resolve({ stdout, stderr });
+                        else
+                            reject(Object.assign(new Error(`exit ${code}`), { code, stdout, stderr }));
+                    });
+                    child.on("error", (err) => {
+                        clearTimeout(timer);
+                        signal?.removeEventListener("abort", onAbort);
+                        reject(err);
+                    });
+                });
+                const output = stdout.trim() +
+                    (stderr.trim() ? `\n\nSTDERR:\n${stderr.trim()}` : "");
+                return {
+                    content: [{ type: "text", text: processToolOutput(output) }],
+                    details: { exitCode: 0 },
+                };
+            }
+            catch (err) {
+                const output = `Exit code: ${err.code ?? "unknown"}\n${err.stdout?.trim() ?? ""}\n${err.stderr?.trim() ?? err.message}`;
+                return {
+                    content: [{ type: "text", text: processToolOutput(output) }],
+                    details: { exitCode: err.code, error: true },
+                };
+            }
+        },
+    };
+}
+//# sourceMappingURL=run-skill.js.map

package/dist/tools/run-skill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-skill.js","sourceRoot":"","sources":["../../src/tools/run-skill.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAE5C,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAS9B,MAAM,UAAU,kBAAkB,CAAC,aAA6B;IAC9D,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,WAAW;QAClB,UAAU,CAAC,IAAS,EAAE,KAAU;YAC9B,OAAO,IAAI,IAAI,CACb,KAAK,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC5C,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAC3C,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC;gBAC5C,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EACxD,CAAC,EAAE,CAAC,CACL,CAAC;QACJ,CAAC;QACD,YAAY,EAAE,gBAAgB;QAC9B,WAAW,EAAE;;;;;;;;;;;;;;;;6EAgB4D;QACzE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC;gBACjB,WAAW,EAAE,oDAAoD;aAClE,CAAC;YACF,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;gBAClB,WAAW,EAAE,2EAA2E;aACzF,CAAC;YACF,IAAI,EAAE,IAAI,CAAC,QAAQ,CACjB,IAAI,CAAC,MAAM,CAAC;gBACV,WAAW,EAAE,8CAA8C;aAC5D,CAAC,CACH;YACD,eAAe,EAAE,IAAI,CAAC,QAAQ,CAC5B,IAAI,CAAC,MAAM,CAAC;gBACV,WAAW,EAAE,6CAA6C;aAC3D,CAAC,CACH;SACF,CAAC;QACF,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM;YAC1C,MAAM,MAAM,GAAG,SAA2B,CAAC;YAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;YAErC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;gBACtB,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4CAA4C,EAAE,CAAC;oBAC/E,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;iBACzB,CAAC;YACJ,CAAC;YAED,6BAA6B;YAC7B,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjG,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iEAAiE,EAAE,CAAC;oBACpG,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;iBACzB,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBAC1C,IAAI,IAAY,CAAC;gBACjB,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzB,IAAI,GAAG,0BAA0B,KAAK,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrE,CAAC;qBAAM,CAAC;oBACN,uDAAuD;oBACvD,MAAM,oBAAoB,GAAG,wBAAwB,EAAE,CAAC;oBACxD,IAAI,GAAG,UAAU,KAAK,+FAA+F,CAAC;oBACtH,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACpC,IAAI,IAAI,4BAA4B,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3H,CAAC;gBACH,CAAC;gBACD,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,MAAM,yBAAyB,KAAK,MAAM,IAAI,EAAE,EAAE,CAAC;oBACrG,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;iBACzB,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACvC,2EAA2E;YAC3E,4EAA4E;YAC5E,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAE5C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;YAEpE,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,EAAE;oBACrE,QAAQ,EAAE,IAAI,EAAE,yDAAyD;oBACzE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;oBACjC,GAAG,EAAE;wBACH,GAAG,WAAW,CAAC,OAAO,CAAC,GAA6B,CAAC;wBACrD,kBAAkB,EAAE,UAAU,EAAE,CAAC,UAAU;wBAC3C,GAAG,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,aAAa,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAClG,UAAU,EAAE,qBAAqB,CAAC,aAAa,EAAE,cAAc,CAAC,IAAI,WAAW;qBAChF;iBACF,CAAC,CAAC;gBAEH,MAAM,OAAO,GAAG,GAAG,EAAE;oBACnB,oEAAoE;oBACpE,IAAI,CAAC;wBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAI,EAAE,SAAS,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC;wBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAAC,CAAC;gBAChF,CAAC,CAAC;gBACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAE3D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC5B,IAAI,CAAC;wBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAI,EAAE,SAAS,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC;wBAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAAC,CAAC;gBAChF,CAAC,EAAE,OAAO,CAAC,CAAC;gBAEZ,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,uCAAuC;gBAC9E,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,OAAO,CAAqC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBACjG,IAAI,MAAM,GAAG,EAAE,CAAC;oBAChB,IAAI,MAAM,GAAG,EAAE,CAAC;oBAChB,IAAI,SAAS,GAAG,CAAC,CAAC;oBAClB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;wBACxC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;wBAC1B,IAAI,SAAS,IAAI,UAAU;4BAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBAC1D,CAAC,CAAC,CAAC;oBACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;wBACxC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;wBAC1B,IAAI,SAAS,IAAI,UAAU;4BAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBAC1D,CAAC,CAAC,CAAC;oBACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;wBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;wBACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;wBAC9C,IAAI,IAAI,KAAK,CAAC;4BAAE,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;;4BACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;oBAClF,CAAC,CAAC,CAAC;oBACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;wBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;wBACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;wBAC9C,MAAM,CAAC,GAAG,CAAC,CAAC;oBACd,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE;oBAC1B,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,gBAAgB,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACzD,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5D,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;iBACzB,CAAC;YACJ,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,MAAM,MAAM,GAAG,cAAc,GAAG,CAAC,IAAI,IAAI,SAAS,KAAK,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACxH,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5D,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE;iBAC7C,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/sanitize-env.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Sanitize environment variables for child processes.
+ *
+ * Filters out sensitive env vars (API keys, tokens, secrets) before spawning
+ * subprocess shells, preventing the model from using `printenv` to leak them.
+ *
+ * Strategy: block known-dangerous suffixes/names, pass through everything else
+ * (PATH, HOME, LANG, etc.) to keep tools functional.
+ */
+/**
+ * Return a sanitized copy of the given env vars object.
+ * Sensitive keys are removed entirely (not masked).
+ */
+export declare function sanitizeEnv(env: Record<string, string | undefined>): Record<string, string | undefined>;

package/dist/tools/sanitize-env.js

@@ -0,0 +1,95 @@
+/**
+ * Sanitize environment variables for child processes.
+ *
+ * Filters out sensitive env vars (API keys, tokens, secrets) before spawning
+ * subprocess shells, preventing the model from using `printenv` to leak them.
+ *
+ * Strategy: block known-dangerous suffixes/names, pass through everything else
+ * (PATH, HOME, LANG, etc.) to keep tools functional.
+ */
+/** Env var names that are always blocked (exact match, case-insensitive). */
+const BLOCKED_EXACT = new Set([
+    "ANTHROPIC_API_KEY",
+    "OPENAI_API_KEY",
+    "OPENAI_API_BASE",
+    "AZURE_OPENAI_API_KEY",
+    "GOOGLE_API_KEY",
+    "AWS_SECRET_ACCESS_KEY",
+    "AWS_SESSION_TOKEN",
+    "TELEGRAM_BOT_TOKEN",
+    "SLACK_TOKEN",
+    "SLACK_BOT_TOKEN",
+    "GITHUB_TOKEN",
+    "GH_TOKEN",
+    "GITLAB_TOKEN",
+    "NPM_TOKEN",
+    "DOCKER_PASSWORD",
+    "DATABASE_URL",
+    "REDIS_URL",
+]);
+/** Suffixes that indicate a sensitive env var. */
+const BLOCKED_SUFFIXES = [
+    "_API_KEY",
+    "_APIKEY",
+    "_SECRET",
+    "_SECRET_KEY",
+    "_TOKEN",
+    "_PASSWORD",
+    "_PRIVATE_KEY",
+    "_CREDENTIALS",
+];
+/** SICLAW_* vars that are safe to pass through (non-secret config). */
+const SICLAW_SAFE = new Set([
+    "SICLAW_DEBUG_IMAGE",
+    "SICLAW_CREDENTIALS_DIR",
+]);
+/** Prefixes to always allow even if they match a suffix pattern. */
+const ALLOW_PREFIXES = [
+    "KUBECONFIG", // handled separately
+    "PATH",
+    "HOME",
+    "LANG",
+    "LC_",
+    "TERM",
+    "SHELL",
+    "USER",
+    "LOGNAME",
+    "HOSTNAME",
+    "NODE_",
+    "NPM_CONFIG_",
+    "EDITOR",
+    "TZ",
+    "TMPDIR",
+    "XDG_",
+];
+function isSensitive(name) {
+    const upper = name.toUpperCase();
+    // SICLAW_* vars: only allow explicitly safe ones
+    if (upper.startsWith("SICLAW_")) {
+        return !SICLAW_SAFE.has(upper);
+    }
+    // Explicit allow-list takes precedence
+    if (ALLOW_PREFIXES.some((p) => upper.startsWith(p)))
+        return false;
+    // Exact match blocklist
+    if (BLOCKED_EXACT.has(upper))
+        return true;
+    // Suffix match
+    if (BLOCKED_SUFFIXES.some((s) => upper.endsWith(s)))
+        return true;
+    return false;
+}
+/**
+ * Return a sanitized copy of the given env vars object.
+ * Sensitive keys are removed entirely (not masked).
+ */
+export function sanitizeEnv(env) {
+    const result = {};
+    for (const [key, value] of Object.entries(env)) {
+        if (!isSensitive(key)) {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=sanitize-env.js.map

package/dist/tools/sanitize-env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-env.js","sourceRoot":"","sources":["../../src/tools/sanitize-env.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,6EAA6E;AAC7E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,mBAAmB;IACnB,gBAAgB;IAChB,iBAAiB;IACjB,sBAAsB;IACtB,gBAAgB;IAChB,uBAAuB;IACvB,mBAAmB;IACnB,oBAAoB;IACpB,aAAa;IACb,iBAAiB;IACjB,cAAc;IACd,UAAU;IACV,cAAc;IACd,WAAW;IACX,iBAAiB;IACjB,cAAc;IACd,WAAW;CACZ,CAAC,CAAC;AAEH,kDAAkD;AAClD,MAAM,gBAAgB,GAAG;IACvB,UAAU;IACV,SAAS;IACT,SAAS;IACT,aAAa;IACb,QAAQ;IACR,WAAW;IACX,cAAc;IACd,cAAc;CACf,CAAC;AAEF,uEAAuE;AACvE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,oBAAoB;IACpB,wBAAwB;CACzB,CAAC,CAAC;AAEH,oEAAoE;AACpE,MAAM,cAAc,GAAG;IACrB,YAAY,EAAK,qBAAqB;IACtC,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,OAAO;IACP,MAAM;IACN,SAAS;IACT,UAAU;IACV,OAAO;IACP,aAAa;IACb,QAAQ;IACR,IAAI;IACJ,QAAQ;IACR,MAAM;CACP,CAAC;AAEF,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAEjC,iDAAiD;IACjD,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,uCAAuC;IACvC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAElE,wBAAwB;IACxB,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1C,eAAe;IACf,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAuC;IACjE,MAAM,MAAM,GAAuC,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/tools/script-resolver.d.ts

@@ -0,0 +1,35 @@
+/** Check if a skill exists in the materialized bundle (personal/team) */
+export declare function skillExistsInBundle(skillName: string): boolean;
+/** Check if a skill exists as a non-disabled builtin (skills/core/) */
+export declare function skillExistsAsBuiltin(skillName: string): boolean;
+export interface ResolvedScript {
+    path: string;
+    content: string;
+    interpreter: "bash" | "python3";
+}
+/**
+ * Resolve a skill script.
+ * Searches the single skills directory (bundle model) or scope dirs (CLI fallback).
+ */
+export declare function resolveSkillScript(skill: string, script: string): ResolvedScript | null;
+/**
+ * List available scripts for a given skill.
+ */
+export declare function listSkillScripts(skill: string): string[];
+/**
+ * List all skills that have scripts.
+ */
+export declare function listAllSkillsWithScripts(): Array<{
+    skill: string;
+    scripts: string[];
+}>;
+/**
+ * Unified entry point: resolve a script from skill scripts.
+ * Requires a skill name.
+ */
+export declare function resolveScript(params: {
+    skill?: string;
+    script: string;
+}): ResolvedScript | {
+    error: string;
+};

package/dist/tools/script-resolver.js

@@ -0,0 +1,213 @@
+import * as path from "node:path";
+import * as fs from "node:fs";
+import { loadConfig } from "../core/config.js";
+function skillsBase() {
+    const config = loadConfig();
+    return path.resolve(process.cwd(), config.paths.skillsDir);
+}
+/** Builtin skills directory (baked into Docker image at skills/core/) */
+function builtinCoreDir() {
+    return path.resolve(process.cwd(), "skills", "core");
+}
+/** Load disabled builtins list (written by agentbox startup from bundle API) */
+function loadDisabledBuiltins() {
+    try {
+        const filePath = path.join(skillsBase(), ".disabled-builtins.json");
+        if (fs.existsSync(filePath)) {
+            return new Set(JSON.parse(fs.readFileSync(filePath, "utf-8")));
+        }
+    }
+    catch { /* ignore malformed file */ }
+    return new Set();
+}
+/**
+ * Skill scope directories to search (in priority order, CLI fallback).
+ * Higher-specificity scopes first: personal > team > builtin.
+ */
+const SKILL_SCOPES = ["user", "extension", "team", "core"];
+/**
+ * Build the list of directories to search for a specific skill's scripts.
+ *
+ * Priority: personal/team (bundle) > builtin (Docker image).
+ * 1. Bundle-materialized (skillsBase/<skill>/) — contains personal or team
+ * 2. CLI fallback: scope subdirectories (user > team > core)
+ * 3. Builtin fallback (skills/core/) — unless disabled
+ */
+function getSkillScriptDirs(skill) {
+    const base = skillsBase();
+    // 1. Bundle-materialized skills (personal/team override builtins)
+    const directPath = path.join(base, skill, "scripts");
+    if (fs.existsSync(directPath))
+        return [directPath];
+    // 2. CLI fallback: search all scope directories (user > team > core)
+    const dirs = [];
+    for (const scope of SKILL_SCOPES) {
+        const dir = path.join(base, scope, skill, "scripts");
+        if (fs.existsSync(dir))
+            dirs.push(dir);
+    }
+    if (dirs.length > 0)
+        return dirs;
+    // 3. Builtin fallback (skills/core/) — for skills not in the bundle
+    const disabled = loadDisabledBuiltins();
+    if (!disabled.has(skill)) {
+        const builtinPath = path.join(builtinCoreDir(), skill, "scripts");
+        if (fs.existsSync(builtinPath))
+            return [builtinPath];
+    }
+    return [];
+}
+/**
+ * Build the list of base directories for enumerating all skills.
+ *
+ * Priority: personal/team (bundle) > builtin (Docker image).
+ * Uses seenSkills dedup in callers so first-wins = highest priority.
+ */
+function getSkillBaseDirs() {
+    const base = skillsBase();
+    // 1. Bundle-materialized skills (personal/team first)
+    const hasDirectSkills = fs.existsSync(base) && fs.readdirSync(base).some((entry) => !entry.startsWith(".") && !SKILL_SCOPES.includes(entry) &&
+        fs.statSync(path.join(base, entry)).isDirectory());
+    if (hasDirectSkills) {
+        const dirs = [base];
+        // Builtin as fallback for skills not in the bundle
+        const coreDir = builtinCoreDir();
+        if (fs.existsSync(coreDir))
+            dirs.push(coreDir);
+        return dirs;
+    }
+    // 2. CLI fallback: search all scope directories (user > team > core)
+    return SKILL_SCOPES
+        .map((scope) => path.join(base, scope))
+        .filter((dir) => fs.existsSync(dir));
+}
+/** Check if a skill exists in the materialized bundle (personal/team) */
+export function skillExistsInBundle(skillName) {
+    const dir = path.join(skillsBase(), skillName);
+    return fs.existsSync(dir) && fs.statSync(dir).isDirectory();
+}
+/** Check if a skill exists as a non-disabled builtin (skills/core/) */
+export function skillExistsAsBuiltin(skillName) {
+    const disabled = loadDisabledBuiltins();
+    if (disabled.has(skillName))
+        return false;
+    const dir = path.join(builtinCoreDir(), skillName);
+    return fs.existsSync(dir) && fs.statSync(dir).isDirectory();
+}
+/**
+ * Resolve a skill script.
+ * Searches the single skills directory (bundle model) or scope dirs (CLI fallback).
+ */
+export function resolveSkillScript(skill, script) {
+    for (const dir of getSkillScriptDirs(skill)) {
+        const scriptPath = path.join(dir, script);
+        if (fs.existsSync(scriptPath)) {
+            return {
+                path: scriptPath,
+                content: fs.readFileSync(scriptPath, "utf-8"),
+                interpreter: script.endsWith(".py") ? "python3" : "bash",
+            };
+        }
+    }
+    return null;
+}
+/**
+ * List available scripts for a given skill.
+ */
+export function listSkillScripts(skill) {
+    const scripts = new Set();
+    for (const dir of getSkillScriptDirs(skill)) {
+        try {
+            for (const f of fs.readdirSync(dir)) {
+                if (f.endsWith(".sh") || f.endsWith(".py"))
+                    scripts.add(f);
+            }
+        }
+        catch {
+            /* dir may not exist */
+        }
+    }
+    return [...scripts];
+}
+/**
+ * List all skills that have scripts.
+ */
+export function listAllSkillsWithScripts() {
+    const result = [];
+    const seen = new Set();
+    const disabled = loadDisabledBuiltins();
+    const coreDir = builtinCoreDir();
+    for (const base of getSkillBaseDirs()) {
+        const isBuiltinDir = base === coreDir;
+        try {
+            for (const d of fs.readdirSync(base, { withFileTypes: true })) {
+                if (d.name.startsWith("_"))
+                    continue; // skip _lib etc.
+                if ((!d.isDirectory() && !d.isSymbolicLink()) || seen.has(d.name))
+                    continue;
+                // Skip disabled builtins so they don't shadow bundle overrides
+                if (isBuiltinDir && disabled.has(d.name))
+                    continue;
+                const scriptsDir = path.join(base, d.name, "scripts");
+                try {
+                    const scripts = fs
+                        .readdirSync(scriptsDir)
+                        .filter((f) => f.endsWith(".sh") || f.endsWith(".py"));
+                    if (scripts.length > 0) {
+                        seen.add(d.name);
+                        result.push({ skill: d.name, scripts });
+                    }
+                }
+                catch {
+                    /* no scripts dir */
+                }
+            }
+        }
+        catch {
+            /* dir doesn't exist */
+        }
+    }
+    return result;
+}
+/**
+ * Unified entry point: resolve a script from skill scripts.
+ * Requires a skill name.
+ */
+export function resolveScript(params) {
+    const script = params.script?.trim();
+    if (!script) {
+        return { error: "Script name is required." };
+    }
+    if (script.includes("/") ||
+        script.includes("\\")) {
+        return {
+            error: "Script name must not contain path separators.",
+        };
+    }
+    const skill = params.skill?.trim();
+    if (!skill) {
+        return { error: "Skill name is required." };
+    }
+    if (skill.includes("/") || skill.includes("\\")) {
+        return {
+            error: "Skill name must not contain path separators.",
+        };
+    }
+    const resolved = resolveSkillScript(skill, script);
+    if (!resolved) {
+        const available = listSkillScripts(skill);
+        if (available.length > 0) {
+            return {
+                error: `Script "${script}" not found in skill "${skill}". Available: ${available.join(", ")}`,
+            };
+        }
+        const allSkills = listAllSkillsWithScripts();
+        let hint = `Skill "${skill}" has no scripts directory.`;
+        if (allSkills.length > 0) {
+            hint += `\nSkills with scripts: ${allSkills.map((s) => `${s.skill} (${s.scripts.join(", ")})`).join("; ")}`;
+        }
+        return { error: hint };
+    }
+    return resolved;
+}
+//# sourceMappingURL=script-resolver.js.map

package/dist/tools/script-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"script-resolver.js","sourceRoot":"","sources":["../../src/tools/script-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,SAAS,UAAU;IACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AAC7D,CAAC;AAED,yEAAyE;AACzE,SAAS,cAAc;IACrB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,gFAAgF;AAChF,SAAS,oBAAoB;IAC3B,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,yBAAyB,CAAC,CAAC;QACpE,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAa,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;IACvC,OAAO,IAAI,GAAG,EAAE,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAE3D;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAE1B,kEAAkE;IAClE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IACrD,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAEnD,qEAAqE;IACrE,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QACrD,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAEjC,oEAAoE;IACpE,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAClE,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB;IACvB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAE1B,sDAAsD;IACtD,MAAM,eAAe,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CACtE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CACpD,CAAC;IACF,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,mDAAmD;QACnD,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;QACjC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qEAAqE;IACrE,OAAO,YAAY;SAChB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;SACtC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,CAAC,CAAC;IAC/C,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AAC9D,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,oBAAoB,CAAC,SAAiB;IACpD,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,SAAS,CAAC,CAAC;IACnD,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AAC9D,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAa,EACb,MAAc;IAEd,KAAK,MAAM,GAAG,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC;gBAC7C,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;aACzD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB;IAItC,MAAM,MAAM,GAAgD,EAAE,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACtC,MAAM,YAAY,GAAG,IAAI,KAAK,OAAO,CAAC;QACtC,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC9D,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS,CAAC,iBAAiB;gBACvD,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC/D,SAAS;gBACX,+DAA+D;gBAC/D,IAAI,YAAY,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACnD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACtD,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,EAAE;yBACf,WAAW,CAAC,UAAU,CAAC;yBACvB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;oBACzD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACvB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;wBACjB,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;oBAC1C,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,oBAAoB;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAG7B;IACC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;IAC/C,CAAC;IAED,IACE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QACpB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EACrB,CAAC;QACD,OAAO;YACL,KAAK,EAAE,+CAA+C;SACvD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,OAAO;YACL,KAAK,EAAE,8CAA8C;SACtD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO;gBACL,KAAK,EAAE,WAAW,MAAM,yBAAyB,KAAK,iBAAiB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC9F,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,wBAAwB,EAAE,CAAC;QAC7C,IAAI,IAAI,GAAG,UAAU,KAAK,6BAA6B,CAAC;QACxD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,IAAI,IAAI,0BAA0B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9G,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/tools/tool-render.d.ts

@@ -0,0 +1,20 @@
+import { Text } from "@mariozechner/pi-tui";
+/**
+ * Strip ANSI escape codes and control characters from output.
+ * Keeps tabs, newlines, and carriage returns.
+ */
+export declare function sanitizeOutput(text: string): string;
+/**
+ * Sanitize and truncate tool output for the LLM.
+ * - Strips ANSI codes and control characters
+ * - When truncated, saves full output to a temp file and tells the LLM the path
+ * - Keeps the first HEAD_CHARS and last TAIL_CHARS characters, drops the middle
+ */
+export declare function processToolOutput(text: string): string;
+/** @deprecated Use processToolOutput instead */
+export declare const truncateOutput: typeof processToolOutput;
+/**
+ * Shared renderResult for custom tools.
+ * Shows last PREVIEW_LINES when collapsed; all lines when expanded (ctrl+o).
+ */
+export declare function renderTextResult(result: any, options: any, theme: any): Text;

package/dist/tools/tool-render.js

@@ -0,0 +1,77 @@
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { randomBytes } from "node:crypto";
+import { Text } from "@mariozechner/pi-tui";
+const PREVIEW_LINES = 5;
+/**
+ * Maximum characters of tool output sent to the LLM.
+ * Keeps head + tail and drops the middle, so the model sees
+ * both the beginning (headers, config) and end (results, errors).
+ */
+const MAX_CHARS = 8000;
+const HEAD_CHARS = 3000;
+const TAIL_CHARS = 3000;
+// ANSI escape code pattern (same regex as strip-ansi package)
+// eslint-disable-next-line no-control-regex
+const ANSI_RE = /[\u001B\u009B][[\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\d/#&.:=?%@~_]+)*|[a-zA-Z\d]+(?:;[-a-zA-Z\d/#&.:=?%@~_]*)*)?\u0007)|(?:(?:\d{1,4}(?:;\d{0,4})*)?[\dA-PR-TZcf-nq-uy=><~]))/g;
+// Control characters except tab(0x09), newline(0x0A), carriage return(0x0D)
+// eslint-disable-next-line no-control-regex
+const CTRL_RE = /[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]/g;
+/**
+ * Strip ANSI escape codes and control characters from output.
+ * Keeps tabs, newlines, and carriage returns.
+ */
+export function sanitizeOutput(text) {
+    return text.replace(ANSI_RE, "").replace(CTRL_RE, "");
+}
+/**
+ * Save text to a temporary file, return the file path.
+ */
+function saveTempFile(text) {
+    const id = randomBytes(4).toString("hex");
+    const filePath = path.join(os.tmpdir(), `siclaw-output-${id}.log`);
+    fs.writeFileSync(filePath, text, "utf-8");
+    return filePath;
+}
+/**
+ * Sanitize and truncate tool output for the LLM.
+ * - Strips ANSI codes and control characters
+ * - When truncated, saves full output to a temp file and tells the LLM the path
+ * - Keeps the first HEAD_CHARS and last TAIL_CHARS characters, drops the middle
+ */
+export function processToolOutput(text) {
+    const clean = sanitizeOutput(text);
+    if (clean.length <= MAX_CHARS)
+        return clean;
+    const fullPath = saveTempFile(clean);
+    const head = clean.slice(0, HEAD_CHARS);
+    const tail = clean.slice(-TAIL_CHARS);
+    const totalLines = clean.split("\n").length;
+    return `${head}\n\n... [${totalLines} lines total, output truncated. Full output saved to: ${fullPath}]\n\n${tail}`;
+}
+/** @deprecated Use processToolOutput instead */
+export const truncateOutput = processToolOutput;
+/**
+ * Shared renderResult for custom tools.
+ * Shows last PREVIEW_LINES when collapsed; all lines when expanded (ctrl+o).
+ */
+export function renderTextResult(result, options, theme) {
+    const textBlocks = (result.content || []).filter((c) => c.type === "text");
+    const output = textBlocks
+        .map((c) => c.text || "")
+        .join("\n")
+        .trim();
+    if (!output)
+        return new Text("", 0, 0);
+    const lines = output.split("\n");
+    const styled = lines.map((l) => theme.fg("toolOutput", l));
+    if (options.expanded || lines.length <= PREVIEW_LINES) {
+        return new Text("\n" + styled.join("\n"), 0, 0);
+    }
+    const preview = styled.slice(-PREVIEW_LINES);
+    const skipped = lines.length - PREVIEW_LINES;
+    const hint = theme.fg("muted", `... (${skipped} earlier lines, ctrl+o to expand)`);
+    return new Text("\n" + hint + "\n" + preview.join("\n"), 0, 0);
+}
+//# sourceMappingURL=tool-render.js.map