talon-agent 1.35.0 → 1.36.0

package/src/core/tools/native.ts

@@ -0,0 +1,138 @@
+import { z } from "zod";
+import type { ToolDefinition } from "./types.js";
+
+/**
+ * Native tools — Talon's own shell/filesystem primitives, the replacement
+ * for the SDK's built-in Bash/Read/Write/Edit/Glob/Grep. They are only
+ * surfaced when `config.nativeTools` is enabled (see the tool composition in
+ * the MCP server); otherwise the built-ins are used.
+ *
+ * Their extra power over the built-ins: every one honours the active
+ * `teleport` target, so with a teleport engaged they run ON a companion
+ * device (via the mesh exec/fs channel) instead of on the daemon host.
+ */
+export const nativeTools: ToolDefinition[] = [
+  {
+    name: "teleport",
+    description:
+      "Switch Talon's native shell/file tools to run ON a companion mesh device (e.g. your phone). After teleporting, bash/read/write/edit/glob/search execute on that device until teleport_back. The device must be online and advertise the 'exec' capability.",
+    schema: {
+      device: z
+        .string()
+        .optional()
+        .describe(
+          "Device id or name fragment (see list_devices). Defaults to the most recent mobile device.",
+        ),
+    },
+    execute: (params, bridge) => bridge("teleport", params),
+    tag: "native",
+  },
+  {
+    name: "teleport_back",
+    description:
+      "Return native tools to the daemon host — bash/read/write/edit/glob/search run locally again.",
+    schema: {},
+    execute: (_params, bridge) => bridge("teleport_back", {}),
+    tag: "native",
+  },
+  {
+    name: "bash",
+    description:
+      "Run a shell command. Runs on the daemon host, or ON the active teleport device if one is engaged. On a teleported device, `cd` persists across calls (a real working-directory session).",
+    schema: {
+      command: z.string().describe("The shell command to run."),
+      cwd: z
+        .string()
+        .optional()
+        .describe(
+          "Working directory (local runs only; teleport tracks its own cwd).",
+        ),
+      timeout_sec: z
+        .number()
+        .optional()
+        .describe(
+          "Max seconds before the command is killed (default 60, max 300).",
+        ),
+    },
+    execute: (params, bridge) => bridge("native_bash", params),
+    tag: "native",
+  },
+  {
+    name: "read",
+    description:
+      "Read a file (with line numbers). Runs on the daemon host or the active teleport device. Supports offset/limit for large files.",
+    schema: {
+      path: z.string().describe("Absolute file path."),
+      offset: z.number().optional().describe("0-based line to start from."),
+      limit: z
+        .number()
+        .optional()
+        .describe("Max lines to return (default/max 2000)."),
+    },
+    execute: (params, bridge) => bridge("native_read", params),
+    tag: "native",
+  },
+  {
+    name: "write",
+    description:
+      "Write (create/overwrite) a file with the given content. Runs on the daemon host or the active teleport device.",
+    schema: {
+      path: z.string().describe("Absolute file path."),
+      content: z.string().describe("Full file content to write."),
+    },
+    execute: (params, bridge) => bridge("native_write", params),
+    tag: "native",
+  },
+  {
+    name: "edit",
+    description:
+      "Exact-string replacement in a file. old_string must be unique unless replace_all is set. Runs on the daemon host or the active teleport device.",
+    schema: {
+      path: z.string().describe("Absolute file path."),
+      old_string: z.string().describe("Exact text to replace."),
+      new_string: z.string().describe("Replacement text."),
+      replace_all: z
+        .boolean()
+        .optional()
+        .describe("Replace every occurrence (default false)."),
+    },
+    execute: (params, bridge) => bridge("native_edit", params),
+    tag: "native",
+  },
+  {
+    name: "glob",
+    description:
+      "Find files matching a glob pattern (ripgrep-backed). Runs on the daemon host or the active teleport device.",
+    schema: {
+      pattern: z.string().describe('Glob pattern, e.g. "**/*.ts".'),
+      path: z
+        .string()
+        .optional()
+        .describe("Root directory to search (default cwd)."),
+    },
+    execute: (params, bridge) => bridge("native_glob", params),
+    tag: "native",
+  },
+  {
+    name: "search",
+    description:
+      "Search file contents with a regex (ripgrep-backed). Runs on the daemon host or the active teleport device.",
+    schema: {
+      pattern: z.string().describe("Regex pattern to search for."),
+      path: z
+        .string()
+        .optional()
+        .describe("Root directory or file (default cwd)."),
+      glob: z
+        .string()
+        .optional()
+        .describe('Filter files by glob, e.g. "*.ts".'),
+      case_insensitive: z
+        .boolean()
+        .optional()
+        .describe("Case-insensitive match (default false)."),
+    },
+    execute: (params, bridge) => bridge("native_search", params),
+    tag: "native",
+  },
+];

package/src/core/tools/types.ts

@@ -27,7 +27,8 @@ export type ToolTag =
   | "web"
   | "admin"
   | "models"
-  | "mesh";
+  | "mesh"
+  | "native";
 
 /** The bridge caller signature — injected into execute(). */
 export type BridgeFunction = (

package/src/frontend/native/index.ts

@@ -1176,6 +1176,8 @@ export function createNativeFrontend(
     storeLocation: (body) => mesh.storeLocation(body),
     listDevices: () => mesh.list(),
     completeCommand: (body) => mesh.completeCommand(body),
+    acceptFileUpload: (token, body) => mesh.acceptFileUpload(token, body),
+    openFileDownload: (token) => mesh.openFileDownload(token),
   };
 
   const nativeCfg = config.native ?? { port: 19880, host: "127.0.0.1" };

package/src/frontend/native/server.ts

@@ -117,6 +117,15 @@ export type BridgeServerHandlers = {
     | Promise<{ devices: DeviceInfo[]; locations: DeviceLocation[] }>;
   /** A device answered a device_command; true when a call was waiting. */
   completeCommand(body: Record<string, unknown>): boolean;
+  /** A device streams a pull-transfer's file body up (raw request body). */
+  acceptFileUpload(
+    token: string,
+    body: IncomingMessage,
+  ): Promise<{ ok: true; bytes: number } | { ok: false; error: string }>;
+  /** Resolve a push-transfer token to the file to stream down, or null. */
+  openFileDownload(
+    token: string,
+  ): Promise<{ path: string; size: number } | null>;
 };
 
 const SSE_PING_MS = 25_000;
@@ -268,7 +277,7 @@ export class BridgeServer {
         backend: s.backend,
         model: s.model,
         activeChats: s.activeChats,
-        capabilities: ["mesh", "mesh-commands"],
+        capabilities: ["mesh", "mesh-commands", "mesh-file-stream"],
       });
     }
 
@@ -394,6 +403,36 @@ export class BridgeServer {
         });
       }
 
+      // Streamed device file transfers (see core/mesh/transfers.ts). The
+      // one-time `transfer` token authorizes exactly one direction+path;
+      // these sit behind the bridge bearer auth like every device route.
+      if (path === "/devices/file") {
+        const token = url.searchParams.get("transfer") ?? "";
+        if (!token)
+          return this.json(res, 400, { ok: false, error: "transfer required" });
+        if (method === "POST") {
+          const result = await this.handlers.acceptFileUpload(token, req);
+          return this.json(res, result.ok ? 200 : 409, result);
+        }
+        if (method === "GET") {
+          const file = await this.handlers.openFileDownload(token);
+          if (!file)
+            return this.json(res, 404, {
+              ok: false,
+              error: "Unknown or already-used transfer token",
+            });
+          res.writeHead(200, {
+            "Content-Type": "application/octet-stream",
+            "Content-Length": String(file.size),
+            ...this.corsHeaders(),
+          });
+          const stream = createReadStream(file.path);
+          stream.on("error", () => res.destroy());
+          stream.pipe(res);
+          return;
+        }
+      }
+
       if (method === "POST" && path === "/upload") {
         const filename = url.searchParams.get("filename") ?? "upload";
         const contentType =

package/src/util/config.ts

@@ -422,6 +422,16 @@ const configSchema = z.object({
   // Native — local bridge for the Electron companion app (apps/desktop)
   native: nativeConfigSchema.optional(),
 
+  // Native tools — replace the SDK's built-in Read/Write/Edit/Bash/Glob/Grep
+  // with Talon's own MCP equivalents (bash/read/write/edit/glob/search). The
+  // native tools additionally route to the active `teleport` node, so file
+  // and shell operations can transparently run on a companion device. When
+  // true, the built-ins are dropped from the model's tool whitelist and the
+  // native tools take their place. Off by default: enabling swaps the model's
+  // own hands, so the cutover should be deliberate and observed (flip to true
+  // and restart), with an instant rollback by flipping back to false.
+  nativeTools: z.boolean().default(false),
+
   // Display name shown in terminal UI (defaults to "Talon")
   botDisplayName: z.string().default("Talon"),