Tools

Each tool is a function the agent can call mid-run. Tools live inside the agent's ToolRegistry. Built-ins ship with the runtime. Local plugin manifests can be loaded from disk for development; per-org customer installs and marketplace-style enablement are not shipped yet (see authoring).

Built-ins

shell

Run a bash command inside the org's shared sandbox workspace. There is no host filesystem access; outbound network is controlled by policy.

{ "command": "ls -la /workspace", "timeoutSec": 30 }

browser

Shared sandbox browser. Subset of actions — navigate, click, type, getText, screenshot. Network access is controlled by policy.

{ "action": "navigate", "url": "https://example.com" }

memory_save / memory_recall

Persistent per-org notes, full-text searchable. Use for facts, partial work, anything to remember across runs.

{ "content": "user prefers dark mode", "kind": "preference" }

delegate

Spawn a focused sub-agent. Sub-agent has the same tools (minus delegate — no recursion) and inherits the parent's org.

{ "objective": "research the topic", "context": "constraints…" }

Plugin manifest (preview)

Local development tools ship a manifest.json next to their handler. See authoring for the worked example.

{
  "name": "greet",
  "version": "0.1.0",
  "description": "Says hello",
  "permissions": { "network": [], "fs": [], "exec": [] },
  "requiredEnv": [],
  "handlerEntry": "./index.ts"
}