@agentforge/tools 0.16.78 → 0.16.80

package/README.md

@@ -225,6 +225,21 @@ const safeDirectoryTools = createDirectoryOperationTools({ policy });
 
 The policy rejects `..` traversal, resolved symlink escapes, paths outside configured roots, and recursive deletion of a configured root. Use `allowedRoots` for multiple roots. Keep the default unrestricted exports for trusted local automation only; `allowOutsideRoots: true` is an explicit privileged opt-out when a configured factory must access the wider host filesystem. The `file-exists` tool preserves its legacy result shape for successful and missing-path checks, while policy violations return `{ success: false, error }`. Detailed `directory-list` results use non-following `lstat` metadata for symlink entries under both default and confined policies.
 
+For the recommended model-exposed setup, use the combined preset. It requires a workspace or allowed root, applies the same root confinement to all file and directory tools, and retains the web policy's localhost, private-network, link-local, metadata, and redirect checks:
+
+```typescript
+import { createModelSafeToolPreset } from '@agentforge/tools';
+
+const { tools } = createModelSafeToolPreset({
+  fileSystem: { workspaceRoot: process.cwd() },
+  web: { http: { defaultTimeout: 15000 } },
+});
+
+const agentTools = tools;
+```
+
+The preset deliberately ignores privileged filesystem and network opt-ins such as `allowOutsideRoots` and `allowPrivateNetwork`. Use the existing standalone factories for trusted operator-controlled automation that needs those capabilities.
+
 ### Utility Tools (22 tools)
 
 General utility tools for common operations.

package/dist/index.cjs

@@ -9877,6 +9877,44 @@ function createPathUtilityTools(config = {}) {
     createPathNormalizeTool()
   ];
 }
+
+// src/model-safe.ts
+function requireFilesystemRoot(options) {
+  if (!options?.workspaceRoot && !options?.allowedRoots?.length) {
+    throw new Error("Model-safe tool preset requires workspaceRoot or allowedRoots");
+  }
+  return {
+    ...options,
+    allowOutsideRoots: false,
+    allowRootDeletion: false
+  };
+}
+function modelSafeDestinationPolicy(policy = {}) {
+  return {
+    ...DEFAULT_DESTINATION_POLICY,
+    ...policy,
+    allowLocalhost: false,
+    allowPrivateNetwork: false,
+    allowLinkLocal: false,
+    allowMetadata: false
+  };
+}
+function createModelSafeToolPreset(options = {}) {
+  const fileSystemPolicy = createFileSystemPolicy(requireFilesystemRoot(options.fileSystem));
+  const destinationPolicy = modelSafeDestinationPolicy(options.web?.destinationPolicy);
+  const fileTools = createFileOperationTools({ ...options.file, policy: fileSystemPolicy });
+  const directoryTools = createDirectoryOperationTools({ ...options.directory, policy: fileSystemPolicy });
+  const webTools = [
+    ...createHttpTools({ ...options.web?.http, destinationPolicy }),
+    ...createScraperTools({ ...options.web?.scraper, destinationPolicy })
+  ];
+  return {
+    fileTools,
+    directoryTools,
+    webTools,
+    tools: [...fileTools, ...directoryTools, ...webTools]
+  };
+}
 var CurrentDateTimeSchema = zod.z.object({
   format: zod.z.enum(["iso", "unix", "custom"]).default("iso").describe("Output format"),
   customFormat: zod.z.string().optional().describe('Custom format string (e.g., "yyyy-MM-dd HH:mm:ss") when format is "custom"'),
@@ -10848,6 +10886,7 @@ exports.createJsonTools = createJsonTools;
 exports.createJsonValidatorTool = createJsonValidatorTool;
 exports.createMathFunctionsTool = createMathFunctionsTool;
 exports.createMathOperationTools = createMathOperationTools;
+exports.createModelSafeToolPreset = createModelSafeToolPreset;
 exports.createNeo4jCreateNodeWithEmbeddingTool = createNeo4jCreateNodeWithEmbeddingTool;
 exports.createNeo4jFindNodesTool = createNeo4jFindNodesTool;
 exports.createNeo4jGetSchemaTool = createNeo4jGetSchemaTool;