new work zone

.github/workflows/ci.yml

@@ -335,6 +335,9 @@ jobs:
       fail-fast: false
       matrix:
         os: [ubuntu-latest, macos-15, windows-2025]
+    defaults:
+      run:
+        shell: bash
     permissions:
       contents: read
     steps:
@@ -347,6 +350,17 @@ jobs:
         with:
           python-version: '3.11'
 
+      - name: Install ripgrep
+        run: |
+          if ! command -v rg >/dev/null 2>&1; then
+            case "$RUNNER_OS" in
+              Linux) sudo apt-get update && sudo apt-get install -y ripgrep ;;
+              macOS) brew install ripgrep ;;
+              Windows) choco install ripgrep -y --no-progress ;;
+            esac
+          fi
+          rg --version
+
       - name: Install deps + coverage tools
         env:
           CMAKE_POLICY_VERSION_MINIMUM: '3.5'

.gitmodules

@@ -1,4 +1,4 @@
 [submodule "algorithm/lazyllm"]
 	path = algorithm/lazyllm
-	url = https://github.com/LazyAGI/LazyLLM.git
-	branch = main
+	url = https://github.com/YuZou-coding/LazyLLM.git
+	branch = codex/tool-host-access-lifecycle

algorithm/lazymind/chat/api/subagent_routes.py

@@ -32,6 +32,7 @@ async def run_subagent(
         Optional[List[Dict[str, Any]]],
         Body(description='Core-owned durable step snapshot used for resume'),
     ] = None,
+    workspace_execution: Annotated[Optional[Dict[str, Any]], Body(description='Core private execution identity')] = None,
 ):
     from lazymind.chat.engine.subagent.runner import run_subagent_stream
 
@@ -45,6 +46,7 @@ async def run_subagent(
             tools=tools,
             task_spec=task_spec,
             initial_steps=initial_steps,
+            workspace_execution=workspace_execution,
         ),
         media_type='text/event-stream',
     )

algorithm/lazymind/chat/engine/agent_runtime/compactors.py

@@ -152,7 +152,7 @@ def _classify(tool_name: str) -> str:
     )) or name.endswith('_search') or 'search' in name:
         return 'search'
     if any(token in name for token in (
-        'read_file', 'read_user_attachment', 'feishuwikifs_read', 'cat_file',
+        'read', 'read_file_resource', 'read_user_attachment', 'feishuwikifs_read', 'cat_file',
     )) or name.endswith('_read') or name.endswith('.read') or name == 'read' \
             or name.endswith('_read_file') or name.endswith('_read_with_references'):
         return 'file'
@@ -235,7 +235,8 @@ def compact_file_result(tool_name: str, content: Any, observation: Any = None) -
     if eof is not None:
         lines.append(f'EOF: {bool(eof)}')
     if next_offset is not None:
-        lines.append(f'Continue with read_file(target={locator!r}, offset={next_offset}).')
+        reader, argument = ('read', 'path') if tool_name == 'read' else ('read_file_resource', 'target')
+        lines.append(f'Continue with {reader}({argument}={locator!r}, offset={next_offset}).')
     lines.append('Content excerpt:')
     lines.append(_head_tail(body, head=500, tail=300))
     return '\n'.join(lines), 'file_locator' if locator else 'file'
@@ -511,14 +512,15 @@ def format_spilled_tool_notice(
     content: Any,
     rel_path: str,
     size_bytes: int,
+    workspace: str = '',
 ) -> str:
     size_kb = size_bytes / 1024
     lines = [
         '[Large tool result offloaded to workspace]',
         f'Tool: {tool_name or "tool"}',
-        f'File path (relative to workspace): {rel_path}',
+        f'File path: {os.path.join(workspace, rel_path) if workspace else rel_path}',
         f'Size: {size_kb:.1f} KB',
-        'Use read_file on this path if you need more than the excerpt below.',
+        'Use read on this path if you need more than the excerpt below.',
     ]
     lines.extend(_browser_spill_metadata(tool_name, content))
     lines.extend([
@@ -548,7 +550,7 @@ def compact_or_spill_tool_result(
         except Exception:
             rel_path = None
         if rel_path:
-            notice = format_spilled_tool_notice(tool_name, content, rel_path, size_bytes)
+            notice = format_spilled_tool_notice(tool_name, content, rel_path, size_bytes, workspace)
             return notice, 'spill', before, estimate_tokens(notice), rel_path, size_bytes
     if _file_result_details(tool_name, content, observation):
         compacted, compactor, before_tokens, after_tokens = compact_tool_result(
@@ -583,7 +585,7 @@ def plan_tool_result_compaction(
         )
         rel_path = os.path.join('tool_spills', filename)
         spill_bytes = len(spill_text.encode('utf-8', errors='replace'))
-        notice = format_spilled_tool_notice(tool_name, content, rel_path, spill_bytes)
+        notice = format_spilled_tool_notice(tool_name, content, rel_path, spill_bytes, workspace)
         after = estimate_tokens(notice)
         if after < before:
             return ToolCompactionPlan(
@@ -645,6 +647,7 @@ def commit_tool_result_plan(
         plan.original_content,
         rel_path,
         plan.spill_bytes,
+        workspace,
     )
     return ToolCompactionPlan(
         notice,

algorithm/lazymind/chat/engine/agent_runtime/executor.py

@@ -166,13 +166,22 @@ def create_agent(self, llm: Any, plan: AgentRunPlan) -> Any:
             prompt=plan.prompt.system_prompt,
             **kwargs,
         )
+        trusted_opaque_tools = tuple(
+            tool for name in (getattr(agent, '_skill_tool_names', set()) & {'run_script'})
+            if (tool := agent._tools_manager.tools_info.get(name)) is not None
+        )
+        permission = options.workspace_permission
         agent._tools_manager = ToolExecutionMiddleware(
             CitationResultMiddleware(agent._tools_manager),
             failure_policy=FailureRetryPolicy(options.tool_failure_limits),
             expanded_round_limit=max(2, int(_cfg['agentic_expanded_max_rounds'])),
             cancel_check=options.extra_stop_condition,
             repeat_monitor=repeat_monitor,
             notice_buffer=notice_buffer,
+            authorization_gate=options.authorization_gate,
+            workspace_permission=permission,
+            tool_context=options.tool_context,
+            trusted_opaque_tools=trusted_opaque_tools,
         )
         agent._agent_lab_run_id = run_id
         agent._runtime_llm = llm

algorithm/lazymind/chat/engine/agent_runtime/models.py

@@ -4,6 +4,8 @@
 from enum import Enum
 from typing import Any, Callable, Literal, Optional, Tuple
 
+from ..tools.workspace_context import ToolResolutionContext
+
 
 class AgentRole(str, Enum):
     CHAT = 'chat'
@@ -52,6 +54,10 @@ class AgentExecutionOptions:
     llm_config: Optional[dict[str, Any]] = None
     max_input_tokens: Optional[Any] = None
     history_compactor: Optional[Callable[..., list[dict[str, Any]]]] = None
+    authorization_gate: Optional[Callable[..., Any]] = None
+    tool_configs: Optional[list[Any]] = None
+    workspace_permission: Any = None
+    tool_context: ToolResolutionContext | None = None
 
 
 CompressionTrigger = Literal['pre_turn', 'mid_turn']

algorithm/lazymind/chat/engine/agent_runtime/telemetry.py

@@ -13,11 +13,11 @@
 _PREVIEW_CHARS = 400
 
 _FILE_READ_TOOLS = {
-    'read_file',
+    'read_file_resource',
     'read_user_attachment',
     'feishuwikifs_read',
     'cat_file',
-    'LocalFileToolkit_read',
+    'read',
 }
 _HARNESS_TOOLS = {
     'create_subagent',