elelem-tools 0.1.1 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 76ec7a010fbd709f164dbf2ac05b85bd60187e1451a6505726fc7f35dbd9d7eb
-  data.tar.gz: 74de74a8b6add422ef3db5ade2bb9f3eec63eb1373687e324145b2cd09de48c8
+  metadata.gz: 4b0f5e3a9dd3ff1d691507d3eaffb33f083d57eb607ce2be6af72862820d56ad
+  data.tar.gz: 918f507fd626ed799f2469412ed990061ba51739363b3296456151691418a0de
 SHA512:
-  metadata.gz: 49fd1c98c79f4d45d6039d71347b6d96268a6bc10b594b96e9e4a24d54f863c4e0091fd457dfbd7e6bb3caca22bfda71b3c82c350cea2390b14173b81b271124
-  data.tar.gz: 8049db48ab2f0c0ca92b5db290e8827f2bc2f0f5eef144407872a4bd4f0ebe4850621610abf865ce0161e813edfb427a8a0a64e842fdc33c0027f4bb15c221db
+  metadata.gz: 3f1fcbc49703bb6fbf87d96593fe5b7e5be04833c9e8af3f4cc27f9a9fc395fbb5b912b57a00eef9d82b9e5bdcf425d1f58424f9d26d384084eaa7ca9f7c7dc5
+  data.tar.gz: fc5bff90cd435be07a865803f5f269a50b2b98ba4950934031ce19d9131a1ed7e3ee30a4908784221f87e956062a9bf590ef7b4e3afa25f52fe80a24627d0d0c

data/.github/workflows/release.yml

@@ -0,0 +1,61 @@
+name: Release
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+permissions: {}
+
+concurrency:
+  group: release
+  cancel-in-progress: false
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+        with:
+          persist-credentials: false
+      - uses: ruby/setup-ruby@3ff19f5e2baf30647122352b96108b1fbe250c64 # v1.299.0
+        with:
+          ruby-version: "4.0"
+          bundler-cache: true
+      - run: bin/test
+      - run: bin/lint
+
+  release-please:
+    needs: test
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+    outputs:
+      release_created: ${{ steps.release.outputs.release_created }}
+    steps:
+      - id: release
+        uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
+        with:
+          config-file: release-please-config.json
+          manifest-file: .release-please-manifest.json
+
+  publish:
+    needs: release-please
+    if: needs.release-please.outputs.release_created == 'true'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
+        with:
+          persist-credentials: false
+      - uses: ruby/setup-ruby@3ff19f5e2baf30647122352b96108b1fbe250c64 # v1.299.0
+        with:
+          ruby-version: "4.0"
+          bundler-cache: true
+      - uses: rubygems/release-gem@7f9650160c1a4e7989fdc9855807bdbd421d8b6b # v1.4.1

data/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.3.0"
+}

data/.rspec

@@ -0,0 +1 @@
+--require spec_helper

data/.rubocop.yml

@@ -0,0 +1,62 @@
+AllCops:
+  NewCops: enable
+  TargetRubyVersion: 4.0
+  SuggestExtensions: false
+  Exclude:
+    - "pkg/**/*"
+    - "bin/**/*"
+    - "vendor/**/*"
+    - "fixtures/**/*"
+
+Metrics:
+  Enabled: false
+
+Naming/PredicateMethod:
+  AllowedMethods:
+    - call
+    - run
+    - summarize
+    - prompt
+
+Naming/MethodParameterName:
+  AllowedNames:
+    - me
+    - id
+    - as
+    - io
+
+Style/GlobalVars:
+  Exclude:
+    - "spec/**/*"
+
+Lint/EmptyBlock:
+  Exclude:
+    - "spec/**/*"
+
+Lint/UselessDefaultValueArgument:
+  Enabled: false
+
+Lint/RedundantRequireStatement:
+  Enabled: false
+
+Lint/UnusedBlockArgument:
+  IgnoreEmptyBlocks: true
+  AllowUnusedKeywordArguments: true
+
+Style/Documentation:
+  Enabled: false
+
+Style/FormatStringToken:
+  Enabled: false
+
+Style/FrozenStringLiteralComment:
+  Enabled: true
+
+Style/StringLiterals:
+  EnforcedStyle: double_quotes
+
+Style/StringLiteralsInInterpolation:
+  EnforcedStyle: double_quotes
+
+Layout/LineLength:
+  Max: 120

data/CHANGELOG.md

@@ -0,0 +1,27 @@
+# Changelog
+
+## [0.3.0](https://github.com/elelem-sh/tools/compare/v0.2.0...v0.3.0) (2026-11-15)
+
+
+### Bug Fixes
+
+* a built command skips its prompt only after a person approved the tool that built it (elelem-sh/elelem.sh[#3](https://github.com/elelem-sh/tools/issues/3)) ([0f47899](https://github.com/elelem-sh/tools/commit/0f4789942fe36b780beab507f2d406286852ca1e))
+* a command a tool builds itself does not ask again after the tool was approved (elelem-sh/elelem.sh[#3](https://github.com/elelem-sh/tools/issues/3)) ([097b5b9](https://github.com/elelem-sh/tools/commit/097b5b98411857bd2b94ea439a41ce175ac889cd))
+* a failed verify check is an error, so the model sees ok: false ([acddd22](https://github.com/elelem-sh/tools/commit/acddd22fe00653bf5f09110dc4d84434f17e8f37))
+* a failing git command is an error, and grep with no matches is not (elelem-sh/elelem.sh[#20](https://github.com/elelem-sh/tools/issues/20)) ([fedc829](https://github.com/elelem-sh/tools/commit/fedc8295646dfed601cc2e9120434738b9542ac1))
+* ask before running a tool whose permission policy is misspelled ([4adf5f6](https://github.com/elelem-sh/tools/commit/4adf5f6d22230dca701cdd72b8ee45efc346655a))
+* edit counts overlapping matches and edits files that are not UTF-8 (elelem-sh/elelem.sh[#21](https://github.com/elelem-sh/tools/issues/21)) ([c3c2f73](https://github.com/elelem-sh/tools/commit/c3c2f737358d9df67f4fd75a4c952c70ab960b60))
+* edit fails when old is missing or repeated, and takes new literally (elelem-sh/elelem.sh[#21](https://github.com/elelem-sh/tools/issues/21)) ([c2fd4eb](https://github.com/elelem-sh/tools/commit/c2fd4eb9f78ce1c13717c9e04ac7d08e5256bb2a))
+* end of input at a permission prompt refuses (elelem-sh/elelem.sh[#2](https://github.com/elelem-sh/tools/issues/2)) ([dd75f4b](https://github.com/elelem-sh/tools/commit/dd75f4b2d5749b6972f2cfc7e24718654c4f809d))
+* git always asks for its exact command line, since repository config can make any git command run a program ([d50005a](https://github.com/elelem-sh/tools/commit/d50005a9be0d56f1561887f7abe55ee4c3be23bb))
+* git asks once, at execute, for its exact command line ([4dc6bd9](https://github.com/elelem-sh/tools/commit/4dc6bd975c7fa3441af6baee50d72e8662a176eb))
+* grep and glob also fall back when rg or fd cannot run (elelem-sh/elelem.sh[#20](https://github.com/elelem-sh/tools/issues/20)) ([8a5a5d7](https://github.com/elelem-sh/tools/commit/8a5a5d7924dcfebd310efbb8cbcb841e02de48c3))
+* grep and glob fall back only when rg or fd is not installed (elelem-sh/elelem.sh[#20](https://github.com/elelem-sh/tools/issues/20)) ([43180e3](https://github.com/elelem-sh/tools/commit/43180e30477eeeec5388a953376c2b53f14b865b))
+* grep, glob, list and git never take a model-chosen value as an option that runs a program ([0aca202](https://github.com/elelem-sh/tools/commit/0aca2029521e1793c0e631dfa4df24c7eafebe46))
+* only Enter, y or yes allow at a permission prompt (elelem-sh/elelem.sh[#2](https://github.com/elelem-sh/tools/issues/2)) ([d853f3b](https://github.com/elelem-sh/tools/commit/d853f3bf714142ce1f1303744815baa1ab44af97))
+* only read-only git commands share the git approval; any other git command asks for its exact command line ([bbc1a0f](https://github.com/elelem-sh/tools/commit/bbc1a0ff5bc66b9c95b145653942f768df90a1a1))
+* permission prompts escape characters that could redraw them (elelem-sh/elelem.sh[#2](https://github.com/elelem-sh/tools/issues/2)) ([fa46378](https://github.com/elelem-sh/tools/commit/fa463789635d446fced2b84dc6358d51c9389ed5))
+* permission prompts show the command, and verify is allowed by default (elelem-sh/elelem.sh[#3](https://github.com/elelem-sh/tools/issues/3)) ([97c3437](https://github.com/elelem-sh/tools/commit/97c3437b6ec494c9b27d61e6ab11ee2632d5d3ed))
+* require elelem ~> 0.12, the floor builtins/skills actually need ([48b5818](https://github.com/elelem-sh/tools/commit/48b5818282b37877d72c55aeb79ec20ded25c1b4))
+* require elelem 0.13.1, verify each written file, and grep with no matches is not an error ([4dfab39](https://github.com/elelem-sh/tools/commit/4dfab39bb738f3e41e3d2cb28093a22204409911))
+* verify escapes the path before passing it to the shell ([ed52cf8](https://github.com/elelem-sh/tools/commit/ed52cf8f4682225fff4d0a1380f6c44fb59dd614))

data/Rakefile

@@ -1,4 +1,8 @@
 # frozen_string_literal: true
 
 require "bundler/gem_tasks"
-task default: %i[]
+require "rspec/core/rake_task"
+
+RSpec::Core::RakeTask.new(:spec)
+
+task default: %i[spec]

data/lib/elelem/tools/compact.rb

@@ -1,10 +1,12 @@
 # frozen_string_literal: true
 
-Elelem::Plugins.register(:compact) do |agent|
-  agent.commands.register("compact", description: "Compress context") do
-    response = agent.turn("Summarize: accomplishments, state, next steps. Brief.")
-    agent.conversation.clear!
-    agent.conversation.add(role: "user", content: "Context: #{response}")
-    agent.terminal.say "  → compacted"
+Elelem.configure do |config|
+  config.setup(:compact) do |agent|
+    agent.commands.register("compact", description: "Compress context") do
+      response = agent.turn("Summarize: accomplishments, state, next steps. Brief.")
+      agent.conversation.clear!
+      agent.conversation.add(role: "user", content: "Context: #{response}")
+      agent.output.say "  -> compacted"
+    end
   end
 end

data/lib/elelem/tools/confirm.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+Elelem.configure do |config|
+  config.setup(:confirm) do |agent|
+    permissions = Elelem::Tools::Permissions.new
+
+    agent.toolbox.before do |args, tool_name:|
+      permissions.check(tool_name, args, input: agent.input)
+    end
+  end
+end

data/lib/elelem/tools/edit.rb

@@ -1,15 +1,21 @@
 # frozen_string_literal: true
 
-Elelem::Plugins.register(:edit) do |agent|
-  agent.toolbox.add("edit",
-    description: "Replace first occurrence of text in file",
-    params: { path: { type: "string" }, old: { type: "string" }, new: { type: "string" } },
-    required: ["path", "old", "new"]
-  ) do |args|
-    path = Pathname.new(args["path"]).expand_path
-    content = path.read
-    agent.toolbox
-      .run("write", { "path" => args["path"], "content" => content.sub(args["old"], args["new"]) })
-      .merge(replaced: args["old"], with: args["new"])
+Elelem.configure do |config|
+  config.setup(:edit) do |agent|
+    agent.toolbox.add("edit",
+                      description: "Replace the one occurrence of old with new in a file",
+                      params: { path: { type: "string" }, old: { type: "string" }, new: { type: "string" } },
+                      required: %w[path old new]) do |args|
+      content = Pathname.new(args["path"]).expand_path.read
+      first = content.index(args["old"]) unless args["old"].empty?
+      next { error: "old not found" } unless first
+      # index also finds overlapping matches, and copes with invalid bytes.
+      next { error: "old matches more than once; include more context" } if content.index(args["old"], first + 1)
+
+      # The block form takes new literally, so \0 and \1 are not expanded.
+      agent.toolbox
+           .run("write", { "path" => args["path"], "content" => content.sub(args["old"]) { args["new"] } })
+           .merge(replaced: args["old"], with: args["new"])
+    end
   end
 end

data/lib/elelem/tools/eval.rb

@@ -1,20 +1,21 @@
 # frozen_string_literal: true
 
-Elelem::Plugins.register(:eval) do |agent|
-  description = <<~'DESC'
-    Evaluate Ruby code. Available API:
+Elelem.configure do |config|
+  config.setup(:eval) do |agent|
+    description = <<~'DESC'
+      Evaluate Ruby code. Available API:
 
-    name = "search"
-    agent.toolbox.add(name, description: "Search using rg", params: { query: { type: "string" } }, required: ["query"], aliases: []) do |args|
-      agent.toolbox.run("execute", { "command" => "rg --json -nI -F #{args["query"]}" })
-    end
-  DESC
+      name = "search"
+      agent.toolbox.add(name, description: "Search using rg", params: { query: { type: "string" } }, required: ["query"], aliases: []) do |args|
+        agent.toolbox.run("execute", { "command" => "rg --json -nI -F #{args["query"]}" })
+      end
+    DESC
 
-  agent.toolbox.add("eval",
-    description: description,
-    params: { ruby: { type: "string" } },
-    required: ["ruby"]
-  ) do |args|
-    { result: binding.eval(args["ruby"]) }
+    agent.toolbox.add("eval",
+                      description: description,
+                      params: { ruby: { type: "string" } },
+                      required: ["ruby"]) do |args|
+      { result: binding.eval(args["ruby"]) } # rubocop:disable Security/Eval
+    end
   end
 end

data/lib/elelem/tools/exec.rb

@@ -0,0 +1,50 @@
+# frozen_string_literal: true
+
+module Elelem
+  module Tools
+    # glob, grep and list run their command through execute. When a person was
+    # just asked about the outer call, which shows the same arguments, the
+    # command it builds does not ask again. When the outer call was allowed
+    # without asking, the command still asks. A deny on execute always applies.
+    # git is not one of them: repository config can make any git command run a
+    # program, so git is allowed by default and execute asks for its exact
+    # command line, once.
+    def self.exec(toolbox, *args)
+      command = args.flatten.map { |a| Shellwords.escape(a.to_s) }.join(" ")
+      nested { toolbox.run("execute", { "command" => command }) }
+    end
+
+    def self.nested
+      outer = Thread.current[:elelem_tools_nested]
+      Thread.current[:elelem_tools_nested] = true
+      yield
+    ensure
+      Thread.current[:elelem_tools_nested] = outer
+    end
+
+    def self.nested?
+      Thread.current[:elelem_tools_nested] == true
+    end
+
+    def self.approved?
+      Thread.current[:elelem_tools_approved] == true
+    end
+
+    def self.approved=(value)
+      Thread.current[:elelem_tools_approved] = value
+    end
+
+    # rg and grep exit 1 when nothing matches. That is an answer, not a failure.
+    def self.no_matches(result)
+      return result unless result[:exit_status] == 1 && result[:content].to_s.strip.empty?
+
+      result.to_h.except(:ok, :error).merge(content: "no matches")
+    end
+
+    # bash exits 127 when the command is not installed, 126 when it cannot run
+    # it. rg exits 1 when nothing matches, which is not a reason to fall back.
+    def self.missing?(result)
+      [126, 127].include?(result[:exit_status])
+    end
+  end
+end

data/lib/elelem/tools/fork.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+module Elelem
+  module Tools
+    def self.fork(agent, template:)
+      Elelem::Agent.new(agent.provider, toolbox: agent.toolbox, output: agent.output, template: template)
+    end
+  end
+end

data/lib/elelem/tools/git.rb

@@ -1,15 +1,19 @@
 # frozen_string_literal: true
 
-Elelem::Plugins.register(:git) do |agent|
-  agent.toolbox.add("git",
-    description: "Run git command",
-    params: { command: { type: "string" }, args: { type: "array", items: { type: "string" } } },
-    required: ["command"]
-  ) do |args|
-    agent.toolbox.exec("git", args["command"], *(args["args"] || []))
-  end
+Elelem.configure do |config|
+  config.setup(:git) do |agent|
+    agent.toolbox.add("git",
+                      description: "Run git command",
+                      params: { command: { type: "string" }, args: { type: "array", items: { type: "string" } } },
+                      required: ["command"]) do |args|
+      # Not Tools.exec: config (aliases, hooks, filters, textconv, signing) can
+      # make any git command run a program, so execute asks for the exact line.
+      line = ["git", args["command"], *(args["args"] || [])].map { |a| Shellwords.escape(a.to_s) }.join(" ")
+      agent.toolbox.run("execute", { "command" => line })
+    end
 
-  agent.toolbox.after("git") do |_, result|
-    agent.terminal.say "  ! #{result[:error]}" if result[:error]
+    agent.toolbox.after("git") do |_, result|
+      agent.output.say "  ! #{result[:error]}" if result[:error]
+    end
   end
 end

data/lib/elelem/tools/glob.rb

@@ -1,13 +1,18 @@
 # frozen_string_literal: true
 
-Elelem::Plugins.register(:glob) do |agent|
-  agent.toolbox.add("glob",
-    description: "Find files matching pattern",
-    params: { pattern: { type: "string" }, path: { type: "string" } },
-    required: ["pattern"]
-  ) do |args|
-    path = args["path"].to_s.empty? ? "." : args["path"]
-    result = agent.toolbox.exec("fd", "--glob", args["pattern"], path)
-    result[:ok] ? result : agent.toolbox.exec("find", path, "-name", args["pattern"])
+Elelem.configure do |config|
+  config.setup(:glob) do |agent|
+    agent.toolbox.add("glob",
+                      description: "Find files matching pattern",
+                      params: { pattern: { type: "string" }, path: { type: "string" } },
+                      required: ["pattern"]) do |args|
+      path = args["path"].to_s.empty? ? "." : args["path"]
+      # find has no --, so a path like -delete becomes ./-delete.
+      path = "./#{path}" if path.start_with?("-")
+      result = Elelem::Tools.exec(agent.toolbox, "fd", "--glob", "--", args["pattern"], path)
+      next result unless Elelem::Tools.missing?(result)
+
+      Elelem::Tools.exec(agent.toolbox, "find", path, "-name", args["pattern"])
+    end
   end
 end

data/lib/elelem/tools/grep.rb

@@ -1,22 +1,27 @@
 # frozen_string_literal: true
 
-Elelem::Plugins.register(:grep) do |agent|
-  agent.toolbox.add("grep",
-    description: "Search file contents",
-    params: { pattern: { type: "string" }, path: { type: "string" }, glob: { type: "string" } },
-    required: ["pattern"]
-  ) do |args|
-    path = args["path"].to_s.empty? ? "." : args["path"]
-    glob = args["glob"]
+Elelem.configure do |config|
+  config.setup(:grep) do |agent|
+    agent.toolbox.add("grep",
+                      description: "Search file contents",
+                      params: { pattern: { type: "string" }, path: { type: "string" }, glob: { type: "string" } },
+                      required: ["pattern"]) do |args|
+      path = args["path"].to_s.empty? ? "." : args["path"]
+      glob = args["glob"]
 
-    rg_args = ["rg", "-n", args["pattern"], path]
-    rg_args += ["-g", glob] if glob
-    result = agent.toolbox.exec(*rg_args)
-    next result if result[:ok]
-
-    grep_args = ["grep", "-rn"]
-    grep_args += ["--include", glob] if glob
-    grep_args += [args["pattern"], path]
-    agent.toolbox.exec(*grep_args)
+      # -e and -- keep a pattern or path starting with - from being read as an
+      # option, such as rg --pre=CMD, which runs a program on every file.
+      rg_args = ["rg", "-n"]
+      rg_args += ["-g", glob] if glob
+      rg_args += ["-e", args["pattern"], "--", path]
+      result = Elelem::Tools.exec(agent.toolbox, *rg_args)
+      if Elelem::Tools.missing?(result)
+        grep_args = ["grep", "-rn"]
+        grep_args += ["--include", glob] if glob
+        grep_args += ["-e", args["pattern"], "--", path]
+        result = Elelem::Tools.exec(agent.toolbox, *grep_args)
+      end
+      Elelem::Tools.no_matches(result)
+    end
   end
 end

data/lib/elelem/tools/init.rb

@@ -1,29 +1,31 @@
 # frozen_string_literal: true
 
-Elelem::Plugins.register(:init) do |agent|
-  agent.commands.register("init", description: "Generate AGENTS.md") do
-    system_prompt = <<~PROMPT
-      AGENTS.md generator. Analyze codebase and write AGENTS.md to project root.
+Elelem.configure do |config|
+  config.setup(:init) do |agent|
+    agent.commands.register("init", description: "Generate AGENTS.md") do
+      template = <<~PROMPT
+        AGENTS.md generator. Analyze codebase and write AGENTS.md to project root.
 
-      # AGENTS.md Spec (https://agents.md/)
-      A file providing context and instructions for AI coding agents.
+        # AGENTS.md Spec (https://agents.md/)
+        A file providing context and instructions for AI coding agents.
 
-      ## Recommended Sections
-      - Commands: build, test, lint commands
-      - Code Style: conventions, patterns
-      - Architecture: key components and flow
-      - Testing: how to run tests
+        ## Recommended Sections
+        - Commands: build, test, lint commands
+        - Code Style: conventions, patterns
+        - Architecture: key components and flow
+        - Testing: how to run tests
 
-      ## Process
-      1. Read README.md if present
-      2. Identify language (Gemfile, package.json, go.mod)
-      3. Find test scripts (bin/test, npm test)
-      4. Check linter configs
-      5. Write concise AGENTS.md
+        ## Process
+        1. Read README.md if present
+        2. Identify language (Gemfile, package.json, go.mod)
+        3. Find test scripts (bin/test, npm test)
+        4. Check linter configs
+        5. Write concise AGENTS.md
 
-      Keep it minimal. No fluff.
-    PROMPT
+        Keep it minimal. No fluff.
+      PROMPT
 
-    agent.fork(system_prompt: system_prompt).turn("Generate AGENTS.md for this project")
+      Elelem::Tools.fork(agent, template: template).turn("Generate AGENTS.md for this project")
+    end
   end
 end

data/lib/elelem/tools/interview.rb

@@ -1,14 +1,15 @@
 # frozen_string_literal: true
 
-Elelem::Plugins.register(:interview) do |agent|
-  agent.toolbox.add("interview",
-    description: "Ask the user a question and wait for their response",
-    params: {
-      question: { type: "string", description: "The question to ask the user" },
-    },
-    required: ["question"]
-  ) do |args|
-    agent.terminal.say(agent.terminal.markdown(args["question"]))
-    { answer: agent.terminal.ask("> ") }
+Elelem.configure do |config|
+  config.setup(:interview) do |agent|
+    agent.toolbox.add("interview",
+                      description: "Ask the user a question and wait for their response",
+                      params: {
+                        question: { type: "string", description: "The question to ask the user" }
+                      },
+                      required: ["question"]) do |args|
+      agent.output.say(args["question"], as: :markdown)
+      { answer: agent.input.ask("> ") }
+    end
   end
 end

data/lib/elelem/tools/list.rb

@@ -1,14 +1,15 @@
 # frozen_string_literal: true
 
-Elelem::Plugins.register(:list) do |agent|
-  agent.toolbox.add("list",
-    description: "List directory contents",
-    params: { path: { type: "string" }, recursive: { type: "boolean" } },
-    required: [],
-    aliases: ["ls"]
-  ) do |args|
-    path = args["path"] && !args["path"].empty? ? args["path"] : "."
-    flags = args["recursive"] ? "-laR" : "-la"
-    agent.toolbox.exec("ls", flags, path)
+Elelem.configure do |config|
+  config.setup(:list) do |agent|
+    agent.toolbox.add("list",
+                      description: "List directory contents",
+                      params: { path: { type: "string" }, recursive: { type: "boolean" } },
+                      required: [],
+                      aliases: ["ls"]) do |args|
+      path = args["path"] && !args["path"].empty? ? args["path"] : "."
+      flags = args["recursive"] ? "-laR" : "-la"
+      Elelem::Tools.exec(agent.toolbox, "ls", flags, "--", path)
+    end
   end
 end

data/lib/elelem/tools/permissions.json

@@ -0,0 +1,7 @@
+{
+  "execute": "ask",
+  "git": "allow",
+  "read": "allow",
+  "verify": "allow",
+  "write": "allow"
+}