# Coding Tools, Sandboxing, and Personas (@arnilo/prism-coding-tools)

The `@arnilo/prism-coding-tools` family package unifies Prism's coding agent tools, security sandboxing, document reading, OpenAPI integration, Linux desktop automation, Dev inspector, and persona extensions into explicit, import-isolated subpaths.

## Installation

```bash
npm install @arnilo/prism @arnilo/prism-coding-tools
```

For document reading or specialized persona integrations, install the optional peer dependencies as needed:

```bash
# PDF and DOCX document extraction
npm install pdf-parse mammoth

# Ponytail upstream integration
npm install @dietrichgebert/ponytail
```

## Subpaths Map

| Subpath | Description | Optional Peers |
|---|---|---|
| `@arnilo/prism-coding-tools/agent` | Core coding tools (read, write, edit, search, bash, git, diagnostics, check, ast-grep, lsp) | — |
| `@arnilo/prism-coding-tools/security` | Sandbox execution adapters (Docker/OCI, native disposable sandbox, approval policies, egress proxy) | — |
| `@arnilo/prism-coding-tools/openapi` | OpenAPI 3.x tool generator and executor with SSRF protection and parameter validation | — |
| `@arnilo/prism-coding-tools/computer-use-linux` | Linux desktop observation and targeting tool bridge | — |
| `@arnilo/prism-coding-tools/dev` | Loopback-only developer inspector, event timeline visualizer, and local replay server | — |
| `@arnilo/prism-coding-tools/dev/cli` | Command-line entrypoint for `prism dev` | — |
| `@arnilo/prism-coding-tools/caveman` | Caveman ultra-terse engineering persona extension | — |
| `@arnilo/prism-coding-tools/ponytail` | Ponytail multi-agent planning and delegation persona extension | `@dietrichgebert/ponytail` |
| `@arnilo/prism-coding-tools/impeccable` | Impeccable high-precision frontend engineering persona extension | — |

## CLI

```bash
# Start the loopback dev inspector
npx prism-dev --port 4311
```

## Usage Examples

### Creating Coding Tools
```ts
import { createCodingTools } from "@arnilo/prism-coding-tools/agent";

const tools = createCodingTools({
  workspaceRoot: process.cwd(),
});
```

### Sandboxed Execution
```ts
import { createDockerSandbox, createSandboxCodingComposition } from "@arnilo/prism-coding-tools/security";

const composition = createSandboxCodingComposition({
  workspaceMode: "sandbox",
  sandbox: createDockerSandbox({
    image: "node:20-alpine@sha256:...",
    workspaceRoot: process.cwd(),
  }),
});
```

### Persona Extensions
```ts
import { createCavemanExtension } from "@arnilo/prism-coding-tools/caveman";
import { createPonytailExtension } from "@arnilo/prism-coding-tools/ponytail";
import { createImpeccableExtension } from "@arnilo/prism-coding-tools/impeccable";

const caveman = createCavemanExtension();
const ponytail = createPonytailExtension();
const impeccable = createImpeccableExtension();
```

## Security & Import Isolation

- Importing `@arnilo/prism-coding-tools/agent` never loads Docker sandbox adapters, desktop MCP bridges, document parser peers, or Dev inspector modules.
- Document parser peers (`pdf-parse`, `mammoth`) and Ponytail optional peer fail closed when absent.
- Persona extensions are pure prompt and behavior modifiers and never gain implicit host privileges.