/** * @license * Copyright 2025 Google LLC * SPDX-License-Identifier: Apache-2.0 */ import { FunctionDeclaration, PartListUnion } from '@google/genai'; import { ToolErrorType } from './tool-error.js'; import { DiffUpdateResult } from '../ide/ideContext.js'; import { SchemaValidator } from '../utils/schemaValidator.js'; /** * Represents a validated and ready-to-execute tool call. * An instance of this is created by a `ToolBuilder`. */ export interface ToolInvocation< TParams extends object, TResult extends ToolResult, > { /** * The validated parameters for this specific invocation. */ params: TParams; /** * Gets a pre-execution description of the tool operation. * * @returns A markdown string describing what the tool will do. */ getDescription(): string; /** * Determines what file system paths the tool will affect. * @returns A list of such paths. */ toolLocations(): ToolLocation[]; /** * Determines if the tool should prompt for confirmation before execution. * @returns Confirmation details or false if no confirmation is needed. */ shouldConfirmExecute( abortSignal: AbortSignal, ): Promise; /** * Executes the tool with the validated parameters. * @param signal AbortSignal for tool cancellation. * @param updateOutput Optional callback to stream output. * @returns Result of the tool execution. */ execute( signal: AbortSignal, updateOutput?: (output: string) => void, ): Promise; } /** * A convenience base class for ToolInvocation. */ export abstract class BaseToolInvocation< TParams extends object, TResult extends ToolResult, > implements ToolInvocation { constructor(readonly params: TParams) {} abstract getDescription(): string; toolLocations(): ToolLocation[] { return []; } shouldConfirmExecute( _abortSignal: AbortSignal, ): Promise { return Promise.resolve(false); } abstract execute( signal: AbortSignal, updateOutput?: (output: string) => void, ): Promise; } /** * A type alias for a tool invocation where the specific parameter and result types are not known. */ export type AnyToolInvocation = ToolInvocation; /** * Interface for a tool builder that validates parameters and creates invocations. */ export interface ToolBuilder< TParams extends object, TResult extends ToolResult, > { /** * The internal name of the tool (used for API calls). */ name: string; /** * The user-friendly display name of the tool. */ displayName: string; /** * Description of what the tool does. */ description: string; /** * The kind of tool for categorization and permissions */ kind: Kind; /** * Function declaration schema from @google/genai. */ schema: FunctionDeclaration; /** * Whether the tool's output should be rendered as markdown. */ isOutputMarkdown: boolean; /** * Whether the tool supports live (streaming) output. */ canUpdateOutput: boolean; /** * Validates raw parameters and builds a ready-to-execute invocation. * @param params The raw, untrusted parameters from the model. * @returns A valid `ToolInvocation` if successful. Throws an error if validation fails. */ build(params: TParams): ToolInvocation; } /** * New base class for tools that separates validation from execution. * New tools should extend this class. */ export abstract class DeclarativeTool< TParams extends object, TResult extends ToolResult, > implements ToolBuilder { constructor( readonly name: string, readonly displayName: string, readonly description: string, readonly kind: Kind, readonly parameterSchema: unknown, readonly isOutputMarkdown: boolean = true, readonly canUpdateOutput: boolean = false, ) {} get schema(): FunctionDeclaration { return { name: this.name, description: this.description, parametersJsonSchema: this.parameterSchema, }; } /** * Validates the raw tool parameters. * Subclasses should override this to add custom validation logic * beyond the JSON schema check. * @param params The raw parameters from the model. * @returns An error message string if invalid, null otherwise. */ validateToolParams(_params: TParams): string | null { // Base implementation can be extended by subclasses. return null; } /** * The core of the new pattern. It validates parameters and, if successful, * returns a `ToolInvocation` object that encapsulates the logic for the * specific, validated call. * @param params The raw, untrusted parameters from the model. * @returns A `ToolInvocation` instance. */ abstract build(params: TParams): ToolInvocation; /** * A convenience method that builds and executes the tool in one step. * Throws an error if validation fails. * @param params The raw, untrusted parameters from the model. * @param signal AbortSignal for tool cancellation. * @param updateOutput Optional callback to stream output. * @returns The result of the tool execution. */ async buildAndExecute( params: TParams, signal: AbortSignal, updateOutput?: (output: string) => void, ): Promise { const invocation = this.build(params); return invocation.execute(signal, updateOutput); } /** * Similar to `build` but never throws. * @param params The raw, untrusted parameters from the model. * @returns A `ToolInvocation` instance. */ private silentBuild( params: TParams, ): ToolInvocation | Error { try { return this.build(params); } catch (e) { if (e instanceof Error) { return e; } return new Error(String(e)); } } /** * A convenience method that builds and executes the tool in one step. * Never throws. * @param params The raw, untrusted parameters from the model. * @params abortSignal a signal to abort. * @returns The result of the tool execution. */ async validateBuildAndExecute( params: TParams, abortSignal: AbortSignal, ): Promise { const invocationOrError = this.silentBuild(params); if (invocationOrError instanceof Error) { const errorMessage = invocationOrError.message; return { llmContent: `Error: Invalid parameters provided. Reason: ${errorMessage}`, returnDisplay: errorMessage, error: { message: errorMessage, type: ToolErrorType.INVALID_TOOL_PARAMS, }, }; } try { return await invocationOrError.execute(abortSignal); } catch (error) { const errorMessage = error instanceof Error ? error.message : String(error); return { llmContent: `Error: Tool call execution failed. Reason: ${errorMessage}`, returnDisplay: errorMessage, error: { message: errorMessage, type: ToolErrorType.EXECUTION_FAILED, }, }; } } } /** * New base class for declarative tools that separates validation from execution. * New tools should extend this class, which provides a `build` method that * validates parameters before deferring to a `createInvocation` method for * the final `ToolInvocation` object instantiation. */ export abstract class BaseDeclarativeTool< TParams extends object, TResult extends ToolResult, > extends DeclarativeTool { build(params: TParams): ToolInvocation { const validationError = this.validateToolParams(params); if (validationError) { throw new Error(validationError); } return this.createInvocation(params); } override validateToolParams(params: TParams): string | null { const errors = SchemaValidator.validate( this.schema.parametersJsonSchema, params, ); if (errors) { return errors; } return this.validateToolParamValues(params); } protected validateToolParamValues(_params: TParams): string | null { // Base implementation can be extended by subclasses. return null; } protected abstract createInvocation( params: TParams, ): ToolInvocation; } /** * A type alias for a declarative tool where the specific parameter and result types are not known. */ export type AnyDeclarativeTool = DeclarativeTool; export interface ToolResult { /** * A short, one-line summary of the tool's action and result. * e.g., "Read 5 files", "Wrote 256 bytes to foo.txt" */ summary?: string; /** * Content meant to be included in LLM history. * This should represent the factual outcome of the tool execution. */ llmContent: PartListUnion; /** * Markdown string for user display. * This provides a user-friendly summary or visualization of the result. * NOTE: This might also be considered UI-specific and could potentially be * removed or modified in a further refactor if the server becomes purely API-driven. * For now, we keep it as the core logic in ReadFileTool currently produces it. */ returnDisplay: ToolResultDisplay; /** * If this property is present, the tool call is considered a failure. */ error?: { message: string; // raw error message type?: ToolErrorType; // An optional machine-readable error type (e.g., 'FILE_NOT_FOUND'). }; } /** * Detects cycles in a JSON schemas due to `$ref`s. * @param schema The root of the JSON schema. * @returns `true` if a cycle is detected, `false` otherwise. */ export function hasCycleInSchema(schema: object): boolean { function resolveRef(ref: string): object | null { if (!ref.startsWith('#/')) { return null; } const path = ref.substring(2).split('/'); let current: unknown = schema; for (const segment of path) { if ( typeof current !== 'object' || current === null || !Object.prototype.hasOwnProperty.call(current, segment) ) { return null; } current = (current as Record)[segment]; } return current as object; } function traverse( node: unknown, visitedRefs: Set, pathRefs: Set, ): boolean { if (typeof node !== 'object' || node === null) { return false; } if (Array.isArray(node)) { for (const item of node) { if (traverse(item, visitedRefs, pathRefs)) { return true; } } return false; } if ('$ref' in node && typeof node.$ref === 'string') { const ref = node.$ref; if (ref === '#/' || pathRefs.has(ref)) { // A ref to just '#/' is always a cycle. return true; // Cycle detected! } if (visitedRefs.has(ref)) { return false; // Bail early, we have checked this ref before. } const resolvedNode = resolveRef(ref); if (resolvedNode) { // Add it to both visited and the current path visitedRefs.add(ref); pathRefs.add(ref); const hasCycle = traverse(resolvedNode, visitedRefs, pathRefs); pathRefs.delete(ref); // Backtrack, leaving it in visited return hasCycle; } } // Crawl all the properties of node for (const key in node) { if (Object.prototype.hasOwnProperty.call(node, key)) { if ( traverse( (node as Record)[key], visitedRefs, pathRefs, ) ) { return true; } } } return false; } return traverse(schema, new Set(), new Set()); } export type ToolResultDisplay = string | FileDiff; export interface FileDiff { fileDiff: string; fileName: string; originalContent: string | null; newContent: string; diffStat?: DiffStat; } export interface DiffStat { ai_removed_lines: number; ai_added_lines: number; user_added_lines: number; user_removed_lines: number; } export interface ToolEditConfirmationDetails { type: 'edit'; title: string; onConfirm: ( outcome: ToolConfirmationOutcome, payload?: ToolConfirmationPayload, ) => Promise; fileName: string; filePath: string; fileDiff: string; originalContent: string | null; newContent: string; isModifying?: boolean; ideConfirmation?: Promise; } export interface ToolConfirmationPayload { // used to override `modifiedProposedContent` for modifiable tools in the // inline modify flow newContent: string; } export interface ToolExecuteConfirmationDetails { type: 'exec'; title: string; onConfirm: (outcome: ToolConfirmationOutcome) => Promise; command: string; rootCommand: string; } export interface ToolMcpConfirmationDetails { type: 'mcp'; title: string; serverName: string; toolName: string; toolDisplayName: string; onConfirm: (outcome: ToolConfirmationOutcome) => Promise; } export interface ToolInfoConfirmationDetails { type: 'info'; title: string; onConfirm: (outcome: ToolConfirmationOutcome) => Promise; prompt: string; urls?: string[]; } export type ToolCallConfirmationDetails = | ToolEditConfirmationDetails | ToolExecuteConfirmationDetails | ToolMcpConfirmationDetails | ToolInfoConfirmationDetails; export enum ToolConfirmationOutcome { ProceedOnce = 'proceed_once', ProceedAlways = 'proceed_always', ProceedAlwaysServer = 'proceed_always_server', ProceedAlwaysTool = 'proceed_always_tool', ModifyWithEditor = 'modify_with_editor', Cancel = 'cancel', } export enum Kind { Read = 'read', Edit = 'edit', Delete = 'delete', Move = 'move', Search = 'search', Execute = 'execute', Think = 'think', Fetch = 'fetch', Other = 'other', } export interface ToolLocation { // Absolute path to the file path: string; // Which line (if known) line?: number; }