39 lines
2.5 KiB
JSON
39 lines
2.5 KiB
JSON
{
|
||
"initial": [
|
||
{
|
||
"name": "run_code",
|
||
"description": "Execute a Python program against the available tools. Takes two required arguments: `code`, the program to execute, and `description`, a short summary of what the program does. Call tools as `await tools.name(args)` per the declarations in the system prompt. Curate the program output. Image-bearing subtool results are attached after the run. The program is the body of an async Python function. Top-level await and return are supported. Emit output with print(...) or return a lossless JSON value. Only printed values and the returned value become program output. Each call runs in a fresh Python process; variables and imported modules do not persist across calls. Relative paths use the supplied working directory; only TMPDIR is set in the environment. Direct filesystem access follows this execution's sandbox policy. Each program starts in the Session's current directory. Running programs keep their initial directory. A sandbox escalation approves this complete program for one execution only. Nested tools retain their own policies and approvals. Request wider access only after evidence of a denial. Earlier effects may already have completed: inspect them before explicitly retrying. Programs are never replayed automatically.",
|
||
"parameters": {
|
||
"type": "object",
|
||
"properties": {
|
||
"code": {
|
||
"type": "string",
|
||
"description": "The Python program to execute, following this tool's execution instructions."
|
||
},
|
||
"description": {
|
||
"type": "string",
|
||
"description": "Clear, concise description of what this program does in active voice, 5-10 words (shown in the UI). Examples: \"Count TODO markers across packages\"; \"Read failing test and its fixture\"; \"Rename config key in every cordis.yml\"."
|
||
},
|
||
"sandbox_permissions": {
|
||
"type": "string",
|
||
"description": "Wider sandbox mode for this complete program execution; requires justification and approval.",
|
||
"enum": [
|
||
"workspace-write",
|
||
"danger-full-access"
|
||
]
|
||
},
|
||
"justification": {
|
||
"type": "string",
|
||
"description": "Reason this complete program needs wider access, shown to the user for approval. Use the language of the user’s current request."
|
||
}
|
||
},
|
||
"required": [
|
||
"code",
|
||
"description"
|
||
]
|
||
}
|
||
}
|
||
],
|
||
"changes": []
|
||
}
|