feat: add search_code tool wrapping the cs code-search engine

Add a dedicated, permission-gated search_code tool that wraps boyter/cs
(code spelunker) — a fast, relevance-ranked, structure-aware code search
engine — giving agents a better default than grep/find for exploratory
'where is X / how does Y work' searches (ranked results, snippets, ~5x
smaller payloads).

- packages/core/src/tools/search-code.ts: createSearchCodeTool factory;
  -f json invocation, workdir path containment, graceful missing-binary
  handling (DISPATCH_CS_BIN override), readable per-file formatted output.
- Wire-up: export from core; register in agent-manager (both child-whitelist
  and parent perm paths) behind new perm_search_code; add to summon catalog
  + tools enum; frontend ToolPermissions + settings.
- Docker: build a patched, statically-linked cs (pinned v3.1.0 commit) in a
  golang builder stage and bundle at /usr/local/bin/cs.
- docker/cs/luau-declarations.patch: additive Luau declaration table so
  --only-declarations / definition ranking works for Roblox .luau files
  (upstream has Lua but not Luau). Applied during the Docker build.
- Tests: new search-code.test.ts (stubbed JSON formatting + live-cs
  integration, skipped when cs absent); agent-manager/routes mocks +
  perm-gating assertions; loader pass-through.

All tests (596), biome, and tsc (core/api/frontend) pass. cs-builder Docker
stage verified to build and produce a working patched binary.

2 files changed, 7 insertions, 0 deletions

diff --git a/packages/frontend/src/lib/components/ToolPermissions.svelte b/packages/frontend/src/lib/components/ToolPermissions.svelte
index 0caf0fa..db5055c 100644
--- a/packages/frontend/src/lib/components/ToolPermissions.svelte
+++ b/packages/frontend/src/lib/components/ToolPermissions.svelte
@@ -47,6 +47,11 @@ const toolPermissions: ToolPermission[] = [
 		label: "YouTube transcripts",
 		description: "Allow the AI to fetch YouTube video transcripts",
 	},
+	{
+		id: "search_code",
+		label: "Search code",
+		description: "Allow the AI to search the codebase with the cs ranked code-search engine",
+	},
 ];
 
 const {
diff --git a/packages/frontend/src/lib/settings.svelte.ts b/packages/frontend/src/lib/settings.svelte.ts
index 123008d..30361a7 100644
--- a/packages/frontend/src/lib/settings.svelte.ts
+++ b/packages/frontend/src/lib/settings.svelte.ts
@@ -14,6 +14,7 @@ let toolPerms = $state<Record<string, boolean>>({
 	external_directory: false,
 	web_search: false,
 	youtube_transcribe: false,
+	search_code: false,
 });
 let savedToolPerms = $state<Record<string, boolean>>({
 	read: true,
@@ -26,6 +27,7 @@ let savedToolPerms = $state<Record<string, boolean>>({
 	external_directory: false,
 	web_search: false,
 	youtube_transcribe: false,
+	search_code: false,
 });
 let skillChecks = $state<Record<string, boolean>>({});
 let chunkLimit = $state(100);