illusion-code 0.1.0__py3-none-any.whl

illusion/tools/notebook_edit_tool.py

@@ -0,0 +1,242 @@
+"""
+最小 Jupyter notebook 编辑工具
+==============================
+
+本模块提供编辑 Jupyter notebook 单元格的功能，无需使用 nbformat。
+
+主要组件：
+    - NotebookEditTool: 编辑 notebook 单元格的工具
+
+使用示例：
+    >>> from illusion.tools import NotebookEditTool
+    >>> tool = NotebookEditTool()
+"""
+
+from __future__ import annotations
+
+import json
+import secrets
+from pathlib import Path
+from typing import Literal
+
+from pydantic import BaseModel, Field
+
+from illusion.tools.base import BaseTool, ToolExecutionContext, ToolResult
+
+
+class NotebookEditToolInput(BaseModel):
+    """Notebook 编辑参数。
+
+    属性：
+        notebook_path: Jupyter notebook 文件的绝对路径
+        cell_id: 要编辑的单元格 ID
+        new_source: 单元格的新源代码
+        cell_type: 单元格类型（code 或 markdown）
+        edit_mode: 编辑类型：replace、insert 或 delete
+    """
+
+    notebook_path: str = Field(description="The absolute path to the Jupyter notebook file")
+    cell_id: str | None = Field(
+        default=None,
+        description="The ID of the cell to edit. Use edit_mode=insert to add a new cell at this index, edit_mode=delete to delete.",
+    )
+    new_source: str = Field(default="", description="The new source for the cell")
+    cell_type: Literal["code", "markdown"] | None = Field(
+        default=None,
+        description="The type of the cell (code or markdown). Required for insert mode. Defaults to the current cell type for replace.",
+    )
+    edit_mode: Literal["replace", "insert", "delete"] = Field(
+        default="replace",
+        description="The type of edit to make. replace: replace cell content, insert: add new cell at index, delete: remove the cell.",
+    )
+
+
+class NotebookEditTool(BaseTool):
+    """编辑 notebook 单元格而不需要 nbformat。
+
+    用于修改 Jupyter notebook (.ipynb 文件) 中的单元格内容。
+    """
+
+    name = "notebook_edit"
+    description = """Completely replaces the contents of a specific cell in a Jupyter notebook (.ipynb file) with new source. Jupyter notebooks are interactive documents that combine code, text, and visualizations, commonly used for data analysis and scientific computing. The notebook_path parameter must be an absolute path, not a relative path. The cell_id is 0-indexed. Use edit_mode=insert to add a new cell at the index specified by cell_id. Use edit_mode=delete to delete the cell at the index specified by cell_id. Defaults to edit_mode=replace. When using edit_mode=insert, cell_type is required. When using edit_mode=replace, cell_type defaults to the current cell type."""
+    input_model = NotebookEditToolInput
+
+    async def execute(
+        self,
+        arguments: NotebookEditToolInput,
+        context: ToolExecutionContext,
+    ) -> ToolResult:
+        # 解析文件路径
+        path = _resolve_path(context.cwd, arguments.notebook_path)
+
+        # 验证 .ipynb 扩展名
+        if path.suffix.lower() != ".ipynb":
+            return ToolResult(
+                output=f"File must have .ipynb extension: {path}",
+                is_error=True,
+            )
+
+        # 对现有文件进行读后编辑检查
+        if path.exists():
+            from illusion.tools.file_edit_tool import has_file_been_read
+            if not has_file_been_read(str(path)):
+                return ToolResult(
+                    output=f"You must read the file at {path} using the Read tool before you can edit it.",
+                    is_error=True,
+                )
+
+        # 加载 notebook
+        notebook = _load_notebook(path)
+        if notebook is None:
+            return ToolResult(output=f"Notebook not found: {path}", is_error=True)
+
+        # 获取单元格列表
+        cells = notebook.setdefault("cells", [])
+
+        # 从 cell_id 解析单元格索引
+        cell_index = _resolve_cell_index(cells, arguments.cell_id)
+        if cell_index is None:
+            return ToolResult(
+                output=f"Cell ID '{arguments.cell_id}' not found in notebook {path}",
+                is_error=True,
+            )
+
+        # 确定单元格类型
+        effective_cell_type = arguments.cell_type
+        if effective_cell_type is None:
+            if arguments.edit_mode == "insert":
+                return ToolResult(
+                    output="cell_type is required for insert mode",
+                    is_error=True,
+                )
+            # 对于 replace/delete，使用现有单元格类型
+            if 0 <= cell_index < len(cells):
+                effective_cell_type = cells[cell_index].get("cell_type", "code")
+            else:
+                effective_cell_type = "code"
+
+        # 执行编辑操作
+        if arguments.edit_mode == "delete":
+            if cell_index >= len(cells):
+                return ToolResult(
+                    output=f"Cell index {cell_index} out of range (notebook has {len(cells)} cells)",
+                    is_error=True,
+                )
+            cells.pop(cell_index)
+            _save_notebook(path, notebook)
+            return ToolResult(
+                output=f"Deleted cell {cell_index} from {path}"
+            )
+
+        if arguments.edit_mode == "insert":
+            new_cell = _empty_cell(effective_cell_type)
+            new_cell["id"] = _generate_cell_id()
+            new_cell["source"] = arguments.new_source
+            # 在指定索引处插入
+            insert_at = min(cell_index, len(cells))
+            cells.insert(insert_at, new_cell)
+            _save_notebook(path, notebook)
+            return ToolResult(
+                output=f"Inserted cell at index {insert_at} in {path}"
+            )
+
+        # Replace 模式
+        if cell_index >= len(cells):
+            return ToolResult(
+                output=f"Cell index {cell_index} out of range (notebook has {len(cells)} cells)",
+                is_error=True,
+            )
+
+        cell = cells[cell_index]
+        cell["cell_type"] = effective_cell_type
+        cell.setdefault("metadata", {})
+        if effective_cell_type == "code":
+            cell.setdefault("outputs", [])
+            cell.setdefault("execution_count", None)
+            # 替换时重置执行状态
+            cell["execution_count"] = None
+            cell["outputs"] = []
+
+        cell["source"] = arguments.new_source
+
+        _save_notebook(path, notebook)
+        return ToolResult(output=f"Updated notebook cell {cell_index} in {path}")
+
+
+def _resolve_path(base: Path, candidate: str) -> Path:
+    """解析相对路径为绝对路径。"""
+    path = Path(candidate).expanduser()
+    if not path.is_absolute():
+        path = base / path
+    return path.resolve()
+
+
+def _resolve_cell_index(cells: list[dict], cell_id: str | None) -> int | None:
+    """将 cell_id 解析为数字索引。
+
+    支持：
+    - None → 默认为 0
+    - 数字索引如 "3" → 3
+    - "cell-N" 格式 → N
+    - 实际单元格 ID 字符串 → 按 id 字段匹配
+    """
+    if cell_id is None:
+        return 0
+
+    # 尝试直接解析为数字索引
+    try:
+        return int(cell_id)
+    except ValueError:
+        pass
+
+    # 尝试 "cell-N" 格式
+    if cell_id.startswith("cell-"):
+        try:
+            return int(cell_id[5:])
+        except ValueError:
+            pass
+
+    # 尝试匹配实际单元格 ID
+    for i, cell in enumerate(cells):
+        if cell.get("id") == cell_id:
+            return i
+
+    return None
+
+
+def _load_notebook(path: Path) -> dict | None:
+    """从磁盘加载 notebook。如果文件不存在返回 None。"""
+    if not path.exists():
+        return None
+    return json.loads(path.read_text(encoding="utf-8"))
+
+
+def _save_notebook(path: Path, notebook: dict) -> None:
+    """将 notebook 保存到磁盘。"""
+    path.parent.mkdir(parents=True, exist_ok=True)
+    path.write_text(json.dumps(notebook, indent=1) + "\n", encoding="utf-8")
+
+
+def _generate_cell_id() -> str:
+    """为 nbformat >= 4.5 生成唯一的单元格 ID。"""
+    return secrets.token_hex(8)
+
+
+def _empty_cell(cell_type: str) -> dict:
+    """创建空单元格。"""
+    if cell_type == "markdown":
+        return {"cell_type": "markdown", "metadata": {}, "source": ""}
+    return {
+        "cell_type": "code",
+        "metadata": {},
+        "source": "",
+        "outputs": [],
+        "execution_count": None,
+    }
+
+
+def _normalize_source(source: str | list[str]) -> str:
+    """规范化源代码（支持字符串或字符串列表）。"""
+    if isinstance(source, list):
+        return "".join(source)
+    return str(source)

illusion/tools/powershell_tool.py

@@ -0,0 +1,334 @@
+"""
+PowerShell 命令执行工具
+======================
+
+本模块提供执行 PowerShell 命令并捕获标准输出/错误的功能。
+
+主要组件：
+    - PowerShellTool: 执行 PowerShell 命令的工具
+
+使用示例：
+    >>> from illusion.tools import PowerShellTool
+    >>> tool = PowerShellTool()
+"""
+
+from __future__ import annotations
+
+import asyncio
+import os
+import shutil
+import subprocess
+import sys
+from pathlib import Path
+from typing import Literal
+
+from pydantic import BaseModel, Field
+
+from illusion.tools.base import BaseTool, ToolExecutionContext, ToolResult
+from illusion.tools.shell_common import MAX_OUTPUT_LENGTH, CommandExecutor
+
+
+# PowerShell 版本类型
+PowerShellEdition = Literal["core", "desktop"]
+
+
+# ---------------------------------------------------------------------------
+# PowerShell 检测
+# ---------------------------------------------------------------------------
+
+def _find_powershell() -> str | None:
+    """在系统上查找 PowerShell。优先 pwsh (Core 7+) 而非 powershell (5.1)。"""
+    pwsh = shutil.which("pwsh")
+    if pwsh:
+        return pwsh
+    ps = shutil.which("powershell")
+    if ps:
+        return ps
+    return None
+
+
+def _get_powershell_edition(powershell_path: str | None) -> PowerShellEdition | None:
+    """根据可执行文件名确定 PowerShell 版本。
+
+    'pwsh' → Core (7+), 'powershell' → Desktop (5.1)。
+    """
+    if not powershell_path:
+        return None
+    base = powershell_path.replace("/", "\\").split("\\")[-1].lower()
+    base = base.replace(".exe", "")
+    if base == "pwsh":
+        return "core"
+    return "desktop"
+
+
+# ---------------------------------------------------------------------------
+# 提示词生成
+# ---------------------------------------------------------------------------
+
+_DEFAULT_TIMEOUT_MS = 120_000  # 默认超时 2 分钟
+_MAX_TIMEOUT_MS = 600_000      # 最大超时 10 分钟
+
+
+def _get_background_usage_note() -> str | None:
+    if os.environ.get("ILLUSION_DISABLE_BACKGROUND_TASKS", "").lower() in ("1", "true"):
+        return None
+    return (
+        "  - You can use the `run_in_background` parameter to run the command in the background. "
+        "Only use this if you don't need the result immediately and are OK being notified when "
+        "the command completes later. You do not need to check the output right away - you'll be "
+        "notified when it finishes."
+    )
+
+
+def _get_sleep_guidance() -> str | None:
+    if os.environ.get("ILLUSION_DISABLE_BACKGROUND_TASKS", "").lower() in ("1", "true"):
+        return None
+    return (
+        "  - Avoid unnecessary `Start-Sleep` commands:\n"
+        "    - Do not sleep between commands that can run immediately — just run them.\n"
+        "    - If your command is long running and you would like to be notified when it "
+        "finishes — simply run your command using `run_in_background`. There is no need to "
+        "sleep in this case.\n"
+        "    - Do not retry failing commands in a sleep loop — diagnose the root cause or "
+        "consider an alternative approach.\n"
+        "    - If waiting for a background task you started with `run_in_background`, you will "
+        "be notified when it completes — do not poll.\n"
+        "    - If you must poll an external process, use a check command rather than sleeping first.\n"
+        "    - If you must sleep, keep the duration short (1-5 seconds) to avoid blocking the user."
+    )
+
+
+def _get_edition_section(edition: PowerShellEdition | None) -> str:
+    """Version-specific syntax guidance.
+
+    The model's training data covers both editions but it can't tell which one
+    it's targeting, so it either emits pwsh-7 syntax on 5.1 (parser error → exit 1)
+    or needlessly avoids && on 7.
+    """
+    if edition == "desktop":
+        return (
+            "PowerShell edition: Windows PowerShell 5.1 (powershell.exe)\n"
+            "   - Pipeline chain operators `&&` and `||` are NOT available — they cause a parser "
+            "error. To run B only if A succeeds: `A; if ($?) { B }`. To chain unconditionally: `A; B`.\n"
+            "   - Ternary (`?:`), null-coalescing (`??`), and null-conditional (`?.`) operators are "
+            "NOT available. Use `if/else` and explicit `$null -eq` checks instead.\n"
+            "   - Avoid `2>&1` on native executables. In 5.1, redirecting a native command's stderr "
+            "inside PowerShell wraps each line in an ErrorRecord (NativeCommandError) and sets `$?` to "
+            "`$false` even when the exe returned exit code 0. stderr is already captured for you — "
+            "don't redirect it.\n"
+            "   - Default file encoding is UTF-16 LE (with BOM). When writing files other tools will "
+            "read, pass `-Encoding utf8` to `Out-File`/`Set-Content`.\n"
+            "   - `ConvertFrom-Json` returns a PSCustomObject, not a hashtable. `-AsHashtable` is not available."
+        )
+    if edition == "core":
+        return (
+            "PowerShell edition: PowerShell 7+ (pwsh)\n"
+            "   - Pipeline chain operators `&&` and `||` ARE available and work like bash. Prefer "
+            "`cmd1 && cmd2` over `cmd1; cmd2` when cmd2 should only run if cmd1 succeeds.\n"
+            "   - Ternary (`$cond ? $a : $b`), null-coalescing (`??`), and null-conditional (`?.`) "
+            "operators are available.\n"
+            "   - Default file encoding is UTF-8 without BOM."
+        )
+    # Detection not yet resolved or PS not installed — give conservative 5.1-safe guidance.
+    return (
+        "PowerShell edition: unknown — assume Windows PowerShell 5.1 for compatibility\n"
+        "   - Do NOT use `&&`, `||`, ternary `?:`, null-coalescing `??`, or null-conditional `?:`. "
+        "These are PowerShell 7+ only and parser-error on 5.1.\n"
+        "   - To chain commands conditionally: `A; if ($?) { B }`. Unconditionally: `A; B`."
+    )
+
+
+def _build_powershell_description() -> str:
+    ps_path = _find_powershell()
+    edition = _get_powershell_edition(ps_path)
+    background_note = _get_background_usage_note()
+    sleep_guidance = _get_sleep_guidance()
+
+    sections = [
+        "Executes a given PowerShell command with optional timeout. Each invocation starts a "
+        "fresh PowerShell process; shell state (variables, functions) does not persist between calls.",
+        "",
+        "IMPORTANT: This tool is for terminal operations via PowerShell: git, npm, docker, and PS "
+        "cmdlets. DO NOT use it for file operations (reading, writing, editing, searching, finding files) "
+        "- use the specialized tools for this instead.",
+        "",
+        _get_edition_section(edition),
+        "",
+        "Before executing the command, please follow these steps:",
+        "",
+        "1. Directory Verification:",
+        "   - If the command will create new directories or files, first use `Get-ChildItem` (or `ls`) "
+        "to verify the parent directory exists and is the correct location",
+        "",
+        "2. Command Execution:",
+        "   - Always quote file paths that contain spaces with double quotes",
+        "   - Capture the output of the command.",
+        "",
+        "PowerShell Syntax Notes:",
+        '   - Variables use $ prefix: $myVar = "value"',
+        "   - Escape character is backtick (`), not backslash",
+        "   - Use Verb-Noun cmdlet naming: Get-ChildItem, Set-Location, New-Item, Remove-Item",
+        "   - Common aliases: ls (Get-ChildItem), cd (Set-Location), cat (Get-Content), rm (Remove-Item)",
+        "   - Pipe operator | works similarly to bash but passes objects, not text",
+        "   - Use Select-Object, Where-Object, ForEach-Object for filtering and transformation",
+        '   - String interpolation: "Hello $name" or "Hello $($obj.Property)"',
+        "   - Registry access uses PSDrive prefixes: `HKLM:\\SOFTWARE\\...`, `HKCU:\\...` — NOT raw "
+        "`HKEY_LOCAL_MACHINE\\...`",
+        '   - Environment variables: read with `$env:NAME`, set with `$env:NAME = "value"` '
+        "(NOT `Set-Variable` or bash `export`)",
+        '   - Call native exe with spaces in path via call operator: `& "C:\\Program Files\\App\\app.exe" arg1 arg2`',
+        "",
+        "Interactive and blocking commands (will hang — this tool runs with -NonInteractive):",
+        "   - NEVER use `Read-Host`, `Get-Credential`, `Out-GridView`, `$Host.UI.PromptForChoice`, or `pause`",
+        "   - Destructive cmdlets (`Remove-Item`, `Stop-Process`, `Clear-Content`, etc.) may prompt for "
+        "confirmation. Add `-Confirm:$false` when you intend the action to proceed. Use `-Force` for "
+        "read-only/hidden items.",
+        "   - Never use `git rebase -i`, `git add -i`, or other commands that open an interactive editor",
+        "",
+        "Passing multiline strings (commit messages, file content) to native executables:",
+        "   - Use a single-quoted here-string so PowerShell does not expand `$` or backticks inside. "
+        "The closing `'@` MUST be at column 0 (no leading whitespace) on its own line — indenting it "
+        "is a parse error:",
+        "<example>",
+        "git commit -m @'",
+        "Commit message here.",
+        "Second line with $literal dollar signs.",
+        "'@",
+        "</example>",
+        "   - Use `@'...'@` (single-quoted, literal) not `@\"...\"@` (double-quoted, interpolated) "
+        "unless you need variable expansion",
+        "   - For arguments containing `-`, `@`, or other characters PowerShell parses as operators, "
+        "use the stop-parsing token: `git log --% --format=%H`",
+        "",
+        "Usage notes:",
+        "  - The command argument is required.",
+        f"  - You can specify an optional timeout in milliseconds (up to {_MAX_TIMEOUT_MS}ms / "
+        f"{_MAX_TIMEOUT_MS // 60000} minutes). If not specified, commands will timeout after "
+        f"{_DEFAULT_TIMEOUT_MS}ms ({_DEFAULT_TIMEOUT_MS // 60000} minutes).",
+        "  - It is very helpful if you write a clear, concise description of what this command does.",
+        f"  - If the output exceeds {MAX_OUTPUT_LENGTH} characters, output will be truncated before "
+        "being returned to you.",
+    ]
+
+    if background_note is not None:
+        sections.append(background_note)
+
+    sections.extend([
+        "  - Avoid using PowerShell to run commands that have dedicated tools, unless explicitly instructed:",
+        "    - File search: Use Glob (NOT Get-ChildItem -Recurse)",
+        "    - Content search: Use Grep (NOT Select-String)",
+        "    - Read files: Use Read (NOT Get-Content)",
+        "    - Edit files: Use Edit",
+        "    - Write files: Use Write (NOT Set-Content/Out-File)",
+        "    - Communication: Output text directly (NOT Write-Output/Write-Host)",
+        "  - When issuing multiple commands:",
+        "    - If the commands are independent and can run in parallel, make multiple PowerShell tool "
+        "calls in a single message.",
+        "    - If the commands depend on each other and must run sequentially, chain them in a single "
+        "PowerShell call (see edition-specific chaining syntax above).",
+        "    - Use `;` only when you need to run commands sequentially but don't care if earlier commands fail.",
+        "    - DO NOT use newlines to separate commands (newlines are ok in quoted strings and here-strings)",
+        "  - Do NOT prefix commands with `cd` or `Set-Location` -- the working directory is already set "
+        "to the correct project directory automatically.",
+    ])
+
+    if sleep_guidance is not None:
+        sections.append(sleep_guidance)
+
+    sections.extend([
+        "  - For git commands:",
+        "    - Prefer to create a new commit rather than amending an existing commit.",
+        "    - Before running destructive operations (e.g., git reset --hard, git push --force, "
+        "git checkout --), consider whether there is a safer alternative that achieves the same goal. "
+        "Only use destructive operations when they are truly the best approach.",
+        "    - Never skip hooks (--no-verify) or bypass signing (--no-gpg-sign, -c commit.gpgsign=false) "
+        "unless the user has explicitly asked for it. If a hook fails, investigate and fix the underlying issue.",
+    ])
+
+    return "\n".join(sections)
+
+
+class PowerShellToolInput(BaseModel):
+    """Arguments for the powershell tool."""
+
+    command: str = Field(description="PowerShell command to execute")
+    cwd: str | None = Field(default=None, description="Working directory override")
+    timeout_ms: int = Field(default=120000, ge=1000, le=600000)
+    run_in_background: bool = Field(
+        default=False,
+        description="Set to true to run this command in the background",
+    )
+
+
+class PowerShellTool(BaseTool):
+    """执行 PowerShell 命令并捕获标准输出/错误。
+
+    用于在 Windows 平台上执行 PowerShell 命令。
+    """
+
+    name = "powershell"
+    description = _build_powershell_description()
+    input_model = PowerShellToolInput
+
+    async def execute(self, arguments: PowerShellToolInput, context: ToolExecutionContext) -> ToolResult:
+        # 查找 PowerShell
+        powershell = _find_powershell()
+        if powershell is None:
+            return ToolResult(output="PowerShell is not available on this machine", is_error=True)
+
+        # 解析工作目录
+        cwd = Path(arguments.cwd).expanduser() if arguments.cwd else context.cwd
+
+        # 确定版本特定的标志
+        edition = _get_powershell_edition(powershell)
+        if edition == "core":
+            # pwsh 7+ 支持 -NoProfile -NonInteractive -Command
+            args = ["-NoProfile", "-NonInteractive", "-Command", arguments.command]
+        else:
+            # Windows PowerShell 5.1
+            args = ["-NoLogo", "-NoProfile", "-NonInteractive", "-Command", arguments.command]
+
+        # 创建子进程
+        kwargs: dict = {}
+        if sys.platform == "win32":
+            kwargs["creationflags"] = subprocess.CREATE_NO_WINDOW
+        process = await asyncio.create_subprocess_exec(
+            powershell,
+            *args,
+            cwd=str(cwd.resolve()),
+            stdin=asyncio.subprocess.DEVNULL,
+            stdout=asyncio.subprocess.PIPE,
+            stderr=asyncio.subprocess.PIPE,
+            **kwargs,
+        )
+
+        # 后台运行模式
+        if arguments.run_in_background:
+            async def _background_wait():
+                try:
+                    # 必须消费 stdout/stderr，避免管道缓冲区满导致进程挂起
+                    stdout_task = asyncio.create_task(process.stdout.read())
+                    stderr_task = asyncio.create_task(process.stderr.read())
+                    await process.wait()
+                    stdout_task.cancel()
+                    stderr_task.cancel()
+                except Exception:
+                    pass
+
+            asyncio.create_task(_background_wait(), name=f"ps-bg-{process.pid}")
+            return ToolResult(
+                output=f"Command launched in background (pid={process.pid})",
+                is_error=False,
+            )
+
+        # 执行命令并归一化结果
+        timeout_seconds = arguments.timeout_ms // 1000
+        result = await CommandExecutor.run_and_normalize(
+            process,
+            timeout=timeout_seconds,
+        )
+        return ToolResult(
+            output=result.output,
+            is_error=result.is_error,
+            metadata=dict(result.metadata),
+        )

illusion/tools/read_mcp_resource_tool.py

@@ -0,0 +1,63 @@
+"""
+MCP 资源读取工具
+================
+
+本模块提供读取 MCP 资源的功能。
+
+主要组件：
+    - ReadMcpResourceTool: 从 MCP 服务器读取资源
+
+使用示例：
+    >>> from illusion.tools import ReadMcpResourceTool
+    >>> tool = ReadMcpResourceTool(manager)
+"""
+
+from __future__ import annotations
+
+from pydantic import BaseModel, Field
+
+from illusion.mcp.client import McpClientManager
+from illusion.tools.base import BaseTool, ToolExecutionContext, ToolResult
+
+
+class ReadMcpResourceToolInput(BaseModel):
+    """MCP 资源读取参数。
+
+    属性：
+        server: MCP 服务器名称
+        uri: 资源 URI
+    """
+
+    server: str = Field(description="MCP server name")
+    uri: str = Field(description="Resource URI")
+
+
+class ReadMcpResourceTool(BaseTool):
+    """从 MCP 服务器读取一个资源。
+
+    用于访问 MCP 服务器提供的资源内容。
+    """
+
+    name = "read_mcp_resource"
+    description = """Reads a specific resource from an MCP server, identified by server name and resource URI.
+
+Parameters:
+- server (required): The name of the MCP server from which to read the resource
+- uri (required): The URI of the resource to read"""
+    input_model = ReadMcpResourceToolInput
+
+    def __init__(self, manager: McpClientManager) -> None:
+        self._manager = manager
+
+    def is_read_only(self, arguments: ReadMcpResourceToolInput) -> bool:
+        del arguments
+        return True
+
+    async def execute(self, arguments: ReadMcpResourceToolInput, context: ToolExecutionContext) -> ToolResult:
+        del context
+        # 读取资源
+        try:
+            output = await self._manager.read_resource(arguments.server, arguments.uri)
+        except ValueError as exc:
+            return ToolResult(output=str(exc), is_error=True)
+        return ToolResult(output=output)