@aria-cli/tools 1.0.18 → 1.0.31
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/.aria-build-stamp.json +1 -1
- package/dist/ask-user-interaction.js +23 -0
- package/dist/cache/web-cache.js +67 -0
- package/dist/definitions/arion.js +105 -0
- package/dist/definitions/browser/browser.js +419 -0
- package/dist/definitions/browser/index.js +5 -0
- package/dist/definitions/browser/pw-downloads.js +115 -0
- package/dist/definitions/browser/pw-interactions.js +200 -0
- package/dist/definitions/browser/pw-responses.js +77 -0
- package/dist/definitions/browser/pw-session.js +311 -0
- package/dist/definitions/browser/pw-shared.js +67 -0
- package/dist/definitions/browser/pw-snapshot.js +302 -0
- package/dist/definitions/browser/pw-state.js +63 -0
- package/dist/definitions/browser/types.js +5 -0
- package/dist/definitions/code-intelligence.js +471 -0
- package/dist/definitions/core.js +110 -0
- package/dist/definitions/delegation.js +513 -0
- package/dist/definitions/deploy.js +66 -0
- package/dist/definitions/filesystem.js +197 -0
- package/dist/definitions/frg.js +64 -0
- package/{dist-cjs/definitions/index.d.ts → dist/definitions/index.js} +2 -0
- package/dist/definitions/memory.js +124 -0
- package/dist/definitions/messaging.js +626 -0
- package/dist/definitions/meta.js +350 -0
- package/dist/definitions/network.js +160 -0
- package/dist/definitions/outlook.js +278 -0
- package/dist/definitions/patch/apply-patch.js +185 -0
- package/dist/definitions/patch/fuzzy-match.js +167 -0
- package/{dist-cjs/definitions/patch/index.d.ts → dist/definitions/patch/index.js} +1 -0
- package/dist/definitions/patch/patch-parser.js +208 -0
- package/dist/definitions/patch/sandbox-paths.js +106 -0
- package/dist/definitions/process/index.js +5 -0
- package/dist/definitions/process/process-registry.js +214 -0
- package/dist/definitions/process/process.js +387 -0
- package/dist/definitions/process/pty-keys.js +255 -0
- package/dist/definitions/process/session-slug.js +143 -0
- package/dist/definitions/quip.js +196 -0
- package/dist/definitions/search.js +61 -0
- package/dist/definitions/session-history.js +70 -0
- package/dist/definitions/shell.js +182 -0
- package/dist/definitions/slack.js +181 -0
- package/dist/definitions/web.js +110 -0
- package/dist/{dns-pinning-vc0r0vpx.js → dns-pinning-7szqhtmq.js} +1 -1
- package/dist/executors/apply-patch.js +902 -0
- package/dist/executors/arion.js +120 -0
- package/dist/executors/code-intelligence.js +883 -0
- package/dist/executors/deploy.js +849 -0
- package/dist/executors/filesystem.js +1119 -0
- package/dist/executors/frg-freshness.js +577 -0
- package/dist/executors/frg.js +299 -0
- package/{dist-cjs/executors/index.d.ts → dist/executors/index.js} +22 -19
- package/dist/executors/learning-meta.js +1147 -0
- package/dist/executors/lsp-client.js +297 -0
- package/dist/executors/memory.js +751 -0
- package/dist/executors/meta.js +221 -0
- package/dist/executors/process-registry.js +466 -0
- package/dist/executors/pty-session-store.js +31 -0
- package/dist/executors/pty.js +281 -0
- package/dist/executors/restart.js +120 -0
- package/dist/executors/search-freshness.js +196 -0
- package/dist/executors/search-types.js +53 -0
- package/dist/executors/search.js +67 -0
- package/dist/executors/self-diagnose.js +399 -0
- package/dist/executors/session-history.js +284 -0
- package/dist/executors/shell-safety.js +474 -0
- package/dist/executors/shell.js +955 -0
- package/dist/executors/utils.js +34 -0
- package/dist/executors/web.js +543 -0
- package/dist/extraction/content-extraction.js +248 -0
- package/dist/extraction/index.js +5 -0
- package/dist/headless-control-contract.js +968 -0
- package/dist/{index-x52t2mbj.js → index-45qvfjbf.js} +2 -2
- package/dist/{index-8xap0se3.js → index-b3sdwzh5.js} +1 -1
- package/dist/index-tvryzx00.js +2 -0
- package/dist/index.js +71 -372
- package/dist/local-control-http-auth.js +3 -0
- package/dist/{lsp-client-msnj763y.js → lsp-client-3qxptwyw.js} +1 -1
- package/dist/mcp/client.js +182 -0
- package/dist/mcp/connection.js +484 -0
- package/dist/mcp/index.js +11 -0
- package/dist/mcp/jsonrpc.js +145 -0
- package/dist/mcp/types.js +8 -0
- package/dist/network-control-adapter.js +73 -0
- package/dist/network-runtime/address-types.js +166 -0
- package/dist/network-runtime/db-owner-fencing.js +70 -0
- package/dist/network-runtime/delivery-receipts.js +270 -0
- package/dist/network-runtime/direct-endpoint-authority.js +26 -0
- package/dist/network-runtime/index.js +13 -1
- package/dist/network-runtime/local-control-contract.js +628 -0
- package/dist/network-runtime/node-store-contract.js +35 -0
- package/dist/network-runtime/pair-route-contract.js +78 -0
- package/dist/network-runtime/peer-capabilities.js +29 -0
- package/dist/network-runtime/peer-principal-ref.js +13 -0
- package/dist/network-runtime/peer-state-machine.js +122 -0
- package/dist/network-runtime/protocol-schemas.js +206 -0
- package/dist/network-runtime/runtime-bootstrap-contract.js +61 -0
- package/dist/outlook/desktop-session.js +280 -0
- package/dist/policy.js +150 -0
- package/dist/providers/brave.js +63 -0
- package/dist/providers/duckduckgo.js +177 -0
- package/dist/providers/exa.js +64 -0
- package/dist/providers/firecrawl.js +56 -0
- package/{dist-cjs/providers/index.d.ts → dist/providers/index.js} +1 -1
- package/dist/providers/jina.js +50 -0
- package/dist/providers/router.js +97 -0
- package/dist/providers/search-provider.js +33 -0
- package/dist/providers/tavily.js +55 -0
- package/dist/pty-w5c9dv33.js +1 -0
- package/dist/quip/desktop-session.js +318 -0
- package/{dist-cjs/registry/index.d.ts → dist/registry/index.js} +1 -0
- package/dist/registry/registry.js +757 -0
- package/dist/runtime-socket-local-control-client.js +331 -0
- package/dist/security/dns-normalization.js +20 -0
- package/dist/security/dns-pinning.js +124 -0
- package/dist/security/external-content.js +92 -0
- package/dist/security/ssrf.js +182 -0
- package/dist/session-history-gk75e3ta.js +1 -0
- package/dist/slack/desktop-session.js +325 -0
- package/dist/tool-factory.js +48 -0
- package/dist/types.js +8 -0
- package/dist/utils/retry.js +133 -0
- package/dist/utils/safe-parse-json.js +161 -0
- package/dist/utils/url.js +20 -0
- package/dist-cjs/ask-user-interaction.js +28 -0
- package/dist-cjs/cache/web-cache.js +71 -0
- package/dist-cjs/definitions/arion.js +108 -0
- package/dist-cjs/definitions/browser/browser.js +422 -0
- package/dist-cjs/definitions/browser/index.js +9 -0
- package/dist-cjs/definitions/browser/pw-downloads.js +118 -0
- package/dist-cjs/definitions/browser/pw-interactions.js +214 -0
- package/dist-cjs/definitions/browser/pw-responses.js +85 -0
- package/dist-cjs/definitions/browser/pw-session.js +327 -0
- package/dist-cjs/definitions/browser/pw-shared.js +73 -0
- package/dist-cjs/definitions/browser/pw-snapshot.js +308 -0
- package/dist-cjs/definitions/browser/pw-state.js +71 -0
- package/dist-cjs/definitions/browser/types.js +6 -0
- package/dist-cjs/definitions/code-intelligence.js +474 -0
- package/dist-cjs/definitions/core.js +134 -0
- package/dist-cjs/definitions/delegation.js +516 -0
- package/dist-cjs/definitions/deploy.js +69 -0
- package/dist-cjs/definitions/filesystem.js +200 -0
- package/dist-cjs/definitions/frg.js +67 -0
- package/dist-cjs/definitions/index.js +44 -0
- package/dist-cjs/definitions/memory.js +127 -0
- package/dist-cjs/definitions/messaging.js +632 -0
- package/dist-cjs/definitions/meta.js +353 -0
- package/dist-cjs/definitions/network.js +163 -0
- package/dist-cjs/definitions/outlook.js +281 -0
- package/dist-cjs/definitions/patch/apply-patch.js +192 -0
- package/dist-cjs/definitions/patch/fuzzy-match.js +173 -0
- package/dist-cjs/definitions/patch/index.js +6 -0
- package/dist-cjs/definitions/patch/patch-parser.js +216 -0
- package/dist-cjs/definitions/patch/sandbox-paths.js +114 -0
- package/dist-cjs/definitions/process/index.js +9 -0
- package/dist-cjs/definitions/process/process-registry.js +232 -0
- package/dist-cjs/definitions/process/process.js +390 -0
- package/dist-cjs/definitions/process/pty-keys.js +260 -0
- package/dist-cjs/definitions/process/session-slug.js +146 -0
- package/dist-cjs/definitions/quip.js +199 -0
- package/dist-cjs/definitions/search.js +64 -0
- package/dist-cjs/definitions/session-history.js +73 -0
- package/dist-cjs/definitions/shell.js +185 -0
- package/dist-cjs/definitions/slack.js +184 -0
- package/dist-cjs/definitions/web.js +113 -0
- package/dist-cjs/executors/apply-patch.js +939 -0
- package/dist-cjs/executors/arion.js +126 -0
- package/dist-cjs/executors/code-intelligence.js +926 -0
- package/dist-cjs/executors/deploy.js +870 -0
- package/dist-cjs/executors/filesystem.js +1164 -0
- package/dist-cjs/executors/frg-freshness.js +628 -0
- package/dist-cjs/executors/frg.js +335 -0
- package/dist-cjs/executors/index.js +144 -0
- package/dist-cjs/executors/learning-meta.js +1166 -0
- package/dist-cjs/executors/memory.js +797 -0
- package/dist-cjs/executors/meta.js +227 -0
- package/dist-cjs/executors/process-registry.js +470 -0
- package/dist-cjs/executors/pty-session-store.js +35 -0
- package/dist-cjs/executors/pty.js +289 -0
- package/dist-cjs/executors/restart.js +156 -0
- package/dist-cjs/executors/search-freshness.js +235 -0
- package/dist-cjs/executors/search-types.js +57 -0
- package/dist-cjs/executors/search.js +103 -0
- package/dist-cjs/executors/self-diagnose.js +435 -0
- package/dist-cjs/executors/session-history.js +321 -0
- package/dist-cjs/executors/shell-safety.js +479 -0
- package/dist-cjs/executors/shell.js +1002 -0
- package/dist-cjs/executors/utils.js +74 -0
- package/dist-cjs/executors/web.js +548 -0
- package/dist-cjs/extraction/content-extraction.js +289 -0
- package/dist-cjs/extraction/index.js +9 -0
- package/dist-cjs/headless-control-contract.js +973 -0
- package/dist-cjs/index.js +436 -385
- package/dist-cjs/local-control-http-auth.js +6 -0
- package/dist-cjs/mcp/client.js +186 -0
- package/dist-cjs/mcp/connection.js +488 -0
- package/dist-cjs/mcp/index.js +31 -0
- package/dist-cjs/mcp/jsonrpc.js +149 -0
- package/dist-cjs/mcp/types.js +9 -0
- package/dist-cjs/network-control-adapter.js +78 -0
- package/dist-cjs/network-runtime/address-types.js +169 -0
- package/dist-cjs/network-runtime/db-owner-fencing.js +77 -0
- package/dist-cjs/network-runtime/delivery-receipts.js +279 -0
- package/dist-cjs/network-runtime/direct-endpoint-authority.js +30 -0
- package/dist-cjs/network-runtime/index.js +173 -8
- package/dist-cjs/network-runtime/local-control-contract.js +634 -0
- package/dist-cjs/network-runtime/node-store-contract.js +39 -0
- package/dist-cjs/network-runtime/pair-route-contract.js +81 -0
- package/dist-cjs/network-runtime/peer-capabilities.js +38 -0
- package/dist-cjs/network-runtime/peer-principal-ref.js +16 -0
- package/dist-cjs/network-runtime/peer-state-machine.js +130 -0
- package/dist-cjs/network-runtime/protocol-schemas.js +213 -0
- package/dist-cjs/network-runtime/runtime-bootstrap-contract.js +64 -0
- package/dist-cjs/outlook/desktop-session.js +319 -0
- package/dist-cjs/policy.js +156 -0
- package/dist-cjs/providers/brave.js +67 -0
- package/dist-cjs/providers/duckduckgo.js +181 -0
- package/dist-cjs/providers/exa.js +68 -0
- package/dist-cjs/providers/firecrawl.js +60 -0
- package/dist-cjs/providers/index.js +18 -0
- package/dist-cjs/providers/jina.js +54 -0
- package/dist-cjs/providers/router.js +101 -0
- package/dist-cjs/providers/search-provider.js +37 -0
- package/dist-cjs/providers/tavily.js +59 -0
- package/dist-cjs/quip/desktop-session.js +354 -0
- package/dist-cjs/registry/index.js +7 -0
- package/dist-cjs/registry/registry.js +762 -0
- package/dist-cjs/runtime-socket-local-control-client.js +368 -0
- package/dist-cjs/security/dns-normalization.js +23 -0
- package/dist-cjs/security/dns-pinning.js +161 -0
- package/dist-cjs/security/external-content.js +96 -0
- package/dist-cjs/security/ssrf.js +222 -0
- package/dist-cjs/slack/desktop-session.js +367 -0
- package/dist-cjs/tool-factory.js +51 -0
- package/dist-cjs/types.js +9 -0
- package/dist-cjs/utils/retry.js +170 -0
- package/dist-cjs/utils/safe-parse-json.js +165 -0
- package/dist-cjs/utils/url.js +24 -0
- package/package.json +11 -10
- package/dist/ask-user-interaction.d.ts +0 -10
- package/dist/cache/web-cache.d.ts +0 -52
- package/dist/definitions/arion.d.ts +0 -8
- package/dist/definitions/browser/browser.d.ts +0 -2
- package/dist/definitions/browser/index.d.ts +0 -1
- package/dist/definitions/browser/pw-downloads.d.ts +0 -13
- package/dist/definitions/browser/pw-interactions.d.ts +0 -78
- package/dist/definitions/browser/pw-responses.d.ts +0 -28
- package/dist/definitions/browser/pw-session.d.ts +0 -65
- package/dist/definitions/browser/pw-shared.d.ts +0 -22
- package/dist/definitions/browser/pw-snapshot.d.ts +0 -34
- package/dist/definitions/browser/pw-state.d.ts +0 -22
- package/dist/definitions/browser/types.d.ts +0 -277
- package/dist/definitions/code-intelligence.d.ts +0 -8
- package/dist/definitions/core.d.ts +0 -47
- package/dist/definitions/delegation.d.ts +0 -11
- package/dist/definitions/deploy.d.ts +0 -15
- package/dist/definitions/filesystem.d.ts +0 -9
- package/dist/definitions/frg.d.ts +0 -3
- package/dist/definitions/index.d.ts +0 -19
- package/dist/definitions/memory.d.ts +0 -8
- package/dist/definitions/messaging.d.ts +0 -11
- package/dist/definitions/meta.d.ts +0 -11
- package/dist/definitions/network.d.ts +0 -11
- package/dist/definitions/outlook.d.ts +0 -2
- package/dist/definitions/patch/apply-patch.d.ts +0 -11
- package/dist/definitions/patch/fuzzy-match.d.ts +0 -10
- package/dist/definitions/patch/index.d.ts +0 -1
- package/dist/definitions/patch/patch-parser.d.ts +0 -50
- package/dist/definitions/patch/sandbox-paths.d.ts +0 -18
- package/dist/definitions/process/index.d.ts +0 -1
- package/dist/definitions/process/process-registry.d.ts +0 -67
- package/dist/definitions/process/process.d.ts +0 -9
- package/dist/definitions/process/pty-keys.d.ts +0 -13
- package/dist/definitions/process/session-slug.d.ts +0 -1
- package/dist/definitions/quip.d.ts +0 -2
- package/dist/definitions/search.d.ts +0 -9
- package/dist/definitions/session-history.d.ts +0 -11
- package/dist/definitions/shell.d.ts +0 -8
- package/dist/definitions/slack.d.ts +0 -2
- package/dist/definitions/web.d.ts +0 -8
- package/dist/executors/apply-patch.d.ts +0 -51
- package/dist/executors/arion.d.ts +0 -50
- package/dist/executors/code-intelligence.d.ts +0 -138
- package/dist/executors/deploy.d.ts +0 -169
- package/dist/executors/filesystem.d.ts +0 -150
- package/dist/executors/frg-freshness.d.ts +0 -93
- package/dist/executors/frg.d.ts +0 -27
- package/dist/executors/index.d.ts +0 -44
- package/dist/executors/learning-meta.d.ts +0 -87
- package/dist/executors/lsp-client.d.ts +0 -38
- package/dist/executors/memory.d.ts +0 -203
- package/dist/executors/meta.d.ts +0 -73
- package/dist/executors/process-registry.d.ts +0 -98
- package/dist/executors/pty-session-store.d.ts +0 -14
- package/dist/executors/pty.d.ts +0 -133
- package/dist/executors/restart.d.ts +0 -13
- package/dist/executors/search-freshness.d.ts +0 -50
- package/dist/executors/search-types.d.ts +0 -52
- package/dist/executors/search.d.ts +0 -11
- package/dist/executors/self-diagnose.d.ts +0 -89
- package/dist/executors/session-history.d.ts +0 -75
- package/dist/executors/shell-safety.d.ts +0 -27
- package/dist/executors/shell.d.ts +0 -168
- package/dist/executors/utils.d.ts +0 -20
- package/dist/executors/web.d.ts +0 -89
- package/dist/extraction/content-extraction.d.ts +0 -48
- package/dist/extraction/index.d.ts +0 -4
- package/dist/headless-control-contract.d.ts +0 -3182
- package/dist/index-a2fr1b3x.js +0 -2
- package/dist/index.d.ts +0 -62
- package/dist/local-control-http-auth.d.ts +0 -2
- package/dist/mcp/client.d.ts +0 -68
- package/dist/mcp/connection.d.ts +0 -54
- package/dist/mcp/index.d.ts +0 -10
- package/dist/mcp/jsonrpc.d.ts +0 -36
- package/dist/mcp/types.d.ts +0 -178
- package/dist/network-control-adapter.d.ts +0 -4
- package/dist/network-runtime/address-types.d.ts +0 -201
- package/dist/network-runtime/db-owner-fencing.d.ts +0 -43
- package/dist/network-runtime/delivery-receipts.d.ts +0 -117
- package/dist/network-runtime/direct-endpoint-authority.d.ts +0 -8
- package/dist/network-runtime/index.d.ts +0 -24
- package/dist/network-runtime/local-control-contract.d.ts +0 -758
- package/dist/network-runtime/node-store-contract.d.ts +0 -49
- package/dist/network-runtime/pair-route-contract.d.ts +0 -100
- package/dist/network-runtime/peer-capabilities.d.ts +0 -10
- package/dist/network-runtime/peer-principal-ref.d.ts +0 -9
- package/dist/network-runtime/peer-state-machine.d.ts +0 -70
- package/dist/network-runtime/protocol-schemas.d.ts +0 -328
- package/dist/network-runtime/runtime-bootstrap-contract.d.ts +0 -81
- package/dist/outlook/desktop-session.d.ts +0 -68
- package/dist/policy.d.ts +0 -43
- package/dist/providers/brave.d.ts +0 -10
- package/dist/providers/duckduckgo.d.ts +0 -18
- package/dist/providers/exa.d.ts +0 -10
- package/dist/providers/firecrawl.d.ts +0 -10
- package/dist/providers/index.d.ts +0 -8
- package/dist/providers/jina.d.ts +0 -10
- package/dist/providers/router.d.ts +0 -21
- package/dist/providers/search-provider.d.ts +0 -35
- package/dist/providers/tavily.d.ts +0 -10
- package/dist/pty-ff59hy75.js +0 -1
- package/dist/quip/desktop-session.d.ts +0 -69
- package/dist/registry/index.d.ts +0 -1
- package/dist/registry/registry.d.ts +0 -156
- package/dist/runtime-socket-local-control-client.d.ts +0 -10
- package/dist/security/dns-normalization.d.ts +0 -6
- package/dist/security/dns-pinning.d.ts +0 -27
- package/dist/security/external-content.d.ts +0 -40
- package/dist/security/ssrf.d.ts +0 -40
- package/dist/session-history-6gn52xhp.js +0 -1
- package/dist/slack/desktop-session.d.ts +0 -69
- package/dist/tool-factory.d.ts +0 -46
- package/dist/types.d.ts +0 -1192
- package/dist/utils/retry.d.ts +0 -11
- package/dist/utils/safe-parse-json.d.ts +0 -26
- package/dist/utils/url.d.ts +0 -10
- package/dist-cjs/ask-user-interaction.d.ts +0 -10
- package/dist-cjs/cache/web-cache.d.ts +0 -52
- package/dist-cjs/definitions/arion.d.ts +0 -8
- package/dist-cjs/definitions/browser/browser.d.ts +0 -2
- package/dist-cjs/definitions/browser/index.d.ts +0 -1
- package/dist-cjs/definitions/browser/pw-downloads.d.ts +0 -13
- package/dist-cjs/definitions/browser/pw-interactions.d.ts +0 -78
- package/dist-cjs/definitions/browser/pw-responses.d.ts +0 -28
- package/dist-cjs/definitions/browser/pw-session.d.ts +0 -65
- package/dist-cjs/definitions/browser/pw-shared.d.ts +0 -22
- package/dist-cjs/definitions/browser/pw-snapshot.d.ts +0 -34
- package/dist-cjs/definitions/browser/pw-state.d.ts +0 -22
- package/dist-cjs/definitions/browser/types.d.ts +0 -277
- package/dist-cjs/definitions/code-intelligence.d.ts +0 -8
- package/dist-cjs/definitions/core.d.ts +0 -47
- package/dist-cjs/definitions/delegation.d.ts +0 -11
- package/dist-cjs/definitions/deploy.d.ts +0 -15
- package/dist-cjs/definitions/filesystem.d.ts +0 -9
- package/dist-cjs/definitions/frg.d.ts +0 -3
- package/dist-cjs/definitions/memory.d.ts +0 -8
- package/dist-cjs/definitions/messaging.d.ts +0 -11
- package/dist-cjs/definitions/meta.d.ts +0 -11
- package/dist-cjs/definitions/network.d.ts +0 -11
- package/dist-cjs/definitions/outlook.d.ts +0 -2
- package/dist-cjs/definitions/patch/apply-patch.d.ts +0 -11
- package/dist-cjs/definitions/patch/fuzzy-match.d.ts +0 -10
- package/dist-cjs/definitions/patch/patch-parser.d.ts +0 -50
- package/dist-cjs/definitions/patch/sandbox-paths.d.ts +0 -18
- package/dist-cjs/definitions/process/index.d.ts +0 -1
- package/dist-cjs/definitions/process/process-registry.d.ts +0 -67
- package/dist-cjs/definitions/process/process.d.ts +0 -9
- package/dist-cjs/definitions/process/pty-keys.d.ts +0 -13
- package/dist-cjs/definitions/process/session-slug.d.ts +0 -1
- package/dist-cjs/definitions/quip.d.ts +0 -2
- package/dist-cjs/definitions/search.d.ts +0 -9
- package/dist-cjs/definitions/session-history.d.ts +0 -11
- package/dist-cjs/definitions/shell.d.ts +0 -8
- package/dist-cjs/definitions/slack.d.ts +0 -2
- package/dist-cjs/definitions/web.d.ts +0 -8
- package/dist-cjs/executors/apply-patch.d.ts +0 -51
- package/dist-cjs/executors/arion.d.ts +0 -50
- package/dist-cjs/executors/code-intelligence.d.ts +0 -138
- package/dist-cjs/executors/deploy.d.ts +0 -169
- package/dist-cjs/executors/filesystem.d.ts +0 -150
- package/dist-cjs/executors/frg-freshness.d.ts +0 -93
- package/dist-cjs/executors/frg.d.ts +0 -27
- package/dist-cjs/executors/learning-meta.d.ts +0 -87
- package/dist-cjs/executors/lsp-client.d.ts +0 -38
- package/dist-cjs/executors/memory.d.ts +0 -203
- package/dist-cjs/executors/meta.d.ts +0 -73
- package/dist-cjs/executors/process-registry.d.ts +0 -98
- package/dist-cjs/executors/pty-session-store.d.ts +0 -14
- package/dist-cjs/executors/pty.d.ts +0 -133
- package/dist-cjs/executors/restart.d.ts +0 -13
- package/dist-cjs/executors/search-freshness.d.ts +0 -50
- package/dist-cjs/executors/search-types.d.ts +0 -52
- package/dist-cjs/executors/search.d.ts +0 -11
- package/dist-cjs/executors/self-diagnose.d.ts +0 -89
- package/dist-cjs/executors/session-history.d.ts +0 -75
- package/dist-cjs/executors/shell-safety.d.ts +0 -27
- package/dist-cjs/executors/shell.d.ts +0 -168
- package/dist-cjs/executors/utils.d.ts +0 -20
- package/dist-cjs/executors/web.d.ts +0 -89
- package/dist-cjs/extraction/content-extraction.d.ts +0 -48
- package/dist-cjs/extraction/index.d.ts +0 -4
- package/dist-cjs/headless-control-contract.d.ts +0 -3182
- package/dist-cjs/index.d.ts +0 -62
- package/dist-cjs/local-control-http-auth.d.ts +0 -2
- package/dist-cjs/mcp/client.d.ts +0 -68
- package/dist-cjs/mcp/connection.d.ts +0 -54
- package/dist-cjs/mcp/index.d.ts +0 -10
- package/dist-cjs/mcp/jsonrpc.d.ts +0 -36
- package/dist-cjs/mcp/types.d.ts +0 -178
- package/dist-cjs/network-control-adapter.d.ts +0 -4
- package/dist-cjs/network-runtime/address-types.d.ts +0 -201
- package/dist-cjs/network-runtime/db-owner-fencing.d.ts +0 -43
- package/dist-cjs/network-runtime/delivery-receipts.d.ts +0 -117
- package/dist-cjs/network-runtime/direct-endpoint-authority.d.ts +0 -8
- package/dist-cjs/network-runtime/index.d.ts +0 -24
- package/dist-cjs/network-runtime/local-control-contract.d.ts +0 -758
- package/dist-cjs/network-runtime/node-store-contract.d.ts +0 -49
- package/dist-cjs/network-runtime/pair-route-contract.d.ts +0 -100
- package/dist-cjs/network-runtime/peer-capabilities.d.ts +0 -10
- package/dist-cjs/network-runtime/peer-principal-ref.d.ts +0 -9
- package/dist-cjs/network-runtime/peer-state-machine.d.ts +0 -70
- package/dist-cjs/network-runtime/protocol-schemas.d.ts +0 -328
- package/dist-cjs/network-runtime/runtime-bootstrap-contract.d.ts +0 -81
- package/dist-cjs/outlook/desktop-session.d.ts +0 -68
- package/dist-cjs/policy.d.ts +0 -43
- package/dist-cjs/providers/brave.d.ts +0 -10
- package/dist-cjs/providers/duckduckgo.d.ts +0 -18
- package/dist-cjs/providers/exa.d.ts +0 -10
- package/dist-cjs/providers/firecrawl.d.ts +0 -10
- package/dist-cjs/providers/jina.d.ts +0 -10
- package/dist-cjs/providers/router.d.ts +0 -21
- package/dist-cjs/providers/search-provider.d.ts +0 -35
- package/dist-cjs/providers/tavily.d.ts +0 -10
- package/dist-cjs/quip/desktop-session.d.ts +0 -69
- package/dist-cjs/registry/registry.d.ts +0 -156
- package/dist-cjs/runtime-socket-local-control-client.d.ts +0 -10
- package/dist-cjs/security/dns-normalization.d.ts +0 -6
- package/dist-cjs/security/dns-pinning.d.ts +0 -27
- package/dist-cjs/security/external-content.d.ts +0 -40
- package/dist-cjs/security/ssrf.d.ts +0 -40
- package/dist-cjs/slack/desktop-session.d.ts +0 -69
- package/dist-cjs/tool-factory.d.ts +0 -46
- package/dist-cjs/types.d.ts +0 -1192
- package/dist-cjs/utils/retry.d.ts +0 -11
- package/dist-cjs/utils/safe-parse-json.d.ts +0 -26
- package/dist-cjs/utils/url.d.ts +0 -10
|
@@ -0,0 +1,280 @@
|
|
|
1
|
+
import os from "node:os";
|
|
2
|
+
import path from "node:path";
|
|
3
|
+
import { promises as fs } from "node:fs";
|
|
4
|
+
const OUTLOOK_SESSION_DIR = path.join(os.homedir(), ".aria", "outlook-session");
|
|
5
|
+
const OUTLOOK_TOKEN_CACHE = path.join(os.homedir(), ".aria", "cache", "outlook-token.json");
|
|
6
|
+
const OUTLOOK_WEB_URL = "https://outlook.office.com/mail/";
|
|
7
|
+
// Outlook web uses outlook.office.com-scoped tokens, not graph.microsoft.com.
|
|
8
|
+
// The Outlook REST v2 API at outlook.office.com/api/v2.0 accepts these tokens.
|
|
9
|
+
const OUTLOOK_REST_API_BASE = "https://outlook.office.com/api/v2.0";
|
|
10
|
+
const DEFAULT_BOOTSTRAP_TIMEOUT_MS = 60_000;
|
|
11
|
+
async function loadCachedToken() {
|
|
12
|
+
try {
|
|
13
|
+
const raw = await fs.readFile(OUTLOOK_TOKEN_CACHE, "utf-8");
|
|
14
|
+
const cached = JSON.parse(raw);
|
|
15
|
+
// Token valid if >5 min remaining
|
|
16
|
+
if (cached.bearerToken && cached.expiresAt > Date.now() + 5 * 60_000) {
|
|
17
|
+
return cached;
|
|
18
|
+
}
|
|
19
|
+
}
|
|
20
|
+
catch {
|
|
21
|
+
// no cache or invalid
|
|
22
|
+
}
|
|
23
|
+
return null;
|
|
24
|
+
}
|
|
25
|
+
async function saveCachedToken(token, email) {
|
|
26
|
+
// Decode JWT to get expiry
|
|
27
|
+
let exp = Date.now() + 60 * 60_000; // default 1h
|
|
28
|
+
try {
|
|
29
|
+
const part = token.split(".")[1];
|
|
30
|
+
if (!part)
|
|
31
|
+
throw new Error("no payload");
|
|
32
|
+
const payload = JSON.parse(Buffer.from(part, "base64").toString());
|
|
33
|
+
if (payload.exp)
|
|
34
|
+
exp = payload.exp * 1000;
|
|
35
|
+
}
|
|
36
|
+
catch {
|
|
37
|
+
/* best-effort */
|
|
38
|
+
}
|
|
39
|
+
const cached = { bearerToken: token, accountEmail: email, expiresAt: exp };
|
|
40
|
+
await fs.mkdir(path.dirname(OUTLOOK_TOKEN_CACHE), { recursive: true });
|
|
41
|
+
await fs.writeFile(OUTLOOK_TOKEN_CACHE, JSON.stringify(cached, null, 2));
|
|
42
|
+
}
|
|
43
|
+
// Outlook REST v2 returns PascalCase keys (Subject, From, EmailAddress)
|
|
44
|
+
// while Graph API uses camelCase (subject, from, emailAddress).
|
|
45
|
+
// Helper to read a field with either casing.
|
|
46
|
+
function field(obj, camelKey) {
|
|
47
|
+
if (camelKey in obj)
|
|
48
|
+
return obj[camelKey];
|
|
49
|
+
const pascalKey = camelKey.charAt(0).toUpperCase() + camelKey.slice(1);
|
|
50
|
+
return obj[pascalKey];
|
|
51
|
+
}
|
|
52
|
+
function fieldStr(obj, camelKey) {
|
|
53
|
+
const v = field(obj, camelKey);
|
|
54
|
+
return typeof v === "string" ? v : "";
|
|
55
|
+
}
|
|
56
|
+
function parseRecipient(recipient) {
|
|
57
|
+
const emailAddress = field(recipient, "emailAddress") ?? null;
|
|
58
|
+
if (!emailAddress || typeof emailAddress !== "object")
|
|
59
|
+
return null;
|
|
60
|
+
return {
|
|
61
|
+
name: fieldStr(emailAddress, "name"),
|
|
62
|
+
email: fieldStr(emailAddress, "address"),
|
|
63
|
+
};
|
|
64
|
+
}
|
|
65
|
+
function parseRecipients(raw) {
|
|
66
|
+
if (!Array.isArray(raw))
|
|
67
|
+
return [];
|
|
68
|
+
return raw
|
|
69
|
+
.filter((r) => !!r && typeof r === "object")
|
|
70
|
+
.map(parseRecipient)
|
|
71
|
+
.filter((r) => r !== null);
|
|
72
|
+
}
|
|
73
|
+
function toMessageView(msg) {
|
|
74
|
+
const fromRaw = field(msg, "from");
|
|
75
|
+
const from = fromRaw && typeof fromRaw === "object"
|
|
76
|
+
? parseRecipient(fromRaw)
|
|
77
|
+
: null;
|
|
78
|
+
return {
|
|
79
|
+
id: fieldStr(msg, "id") || fieldStr(msg, "Id"),
|
|
80
|
+
subject: fieldStr(msg, "subject"),
|
|
81
|
+
from: from ?? { name: "", email: "" },
|
|
82
|
+
toRecipients: parseRecipients(field(msg, "toRecipients")),
|
|
83
|
+
receivedDateTime: fieldStr(msg, "receivedDateTime"),
|
|
84
|
+
isRead: field(msg, "isRead") === true,
|
|
85
|
+
hasAttachments: field(msg, "hasAttachments") === true,
|
|
86
|
+
bodyPreview: fieldStr(msg, "bodyPreview"),
|
|
87
|
+
conversationId: fieldStr(msg, "conversationId"),
|
|
88
|
+
};
|
|
89
|
+
}
|
|
90
|
+
function toMessageDetail(msg) {
|
|
91
|
+
const view = toMessageView(msg);
|
|
92
|
+
const bodyRaw = field(msg, "body");
|
|
93
|
+
const body = bodyRaw && typeof bodyRaw === "object" ? bodyRaw : {};
|
|
94
|
+
return {
|
|
95
|
+
...view,
|
|
96
|
+
body: {
|
|
97
|
+
contentType: fieldStr(body, "contentType") || "text",
|
|
98
|
+
content: fieldStr(body, "content"),
|
|
99
|
+
},
|
|
100
|
+
ccRecipients: parseRecipients(field(msg, "ccRecipients")),
|
|
101
|
+
importance: fieldStr(msg, "importance") || "normal",
|
|
102
|
+
};
|
|
103
|
+
}
|
|
104
|
+
async function waitForMailBearerToken(page, timeoutMs) {
|
|
105
|
+
return new Promise((resolve, reject) => {
|
|
106
|
+
const timer = setTimeout(() => {
|
|
107
|
+
page.off("request", handleRequest);
|
|
108
|
+
reject(new Error("Timed out waiting for a Mail-scoped bearer token. " +
|
|
109
|
+
"Ensure you are logged in to outlook.office.com."));
|
|
110
|
+
}, timeoutMs);
|
|
111
|
+
const seen = new Set();
|
|
112
|
+
const handleRequest = (request) => {
|
|
113
|
+
const authHeader = request.headers()["authorization"];
|
|
114
|
+
if (!authHeader || !authHeader.startsWith("Bearer "))
|
|
115
|
+
return;
|
|
116
|
+
const bearerToken = authHeader.slice(7);
|
|
117
|
+
const dedup = bearerToken.substring(0, 30);
|
|
118
|
+
if (seen.has(dedup))
|
|
119
|
+
return;
|
|
120
|
+
seen.add(dedup);
|
|
121
|
+
// Decode JWT payload to extract email and scopes
|
|
122
|
+
let accountEmail = "";
|
|
123
|
+
let scp = "";
|
|
124
|
+
try {
|
|
125
|
+
const payloadB64 = bearerToken.split(".")[1];
|
|
126
|
+
if (payloadB64) {
|
|
127
|
+
const payload = JSON.parse(Buffer.from(payloadB64, "base64url").toString("utf8"));
|
|
128
|
+
scp = typeof payload.scp === "string" ? payload.scp : "";
|
|
129
|
+
accountEmail =
|
|
130
|
+
typeof payload.upn === "string"
|
|
131
|
+
? payload.upn
|
|
132
|
+
: typeof payload.preferred_username === "string"
|
|
133
|
+
? payload.preferred_username
|
|
134
|
+
: typeof payload.unique_name === "string"
|
|
135
|
+
? payload.unique_name
|
|
136
|
+
: "";
|
|
137
|
+
}
|
|
138
|
+
}
|
|
139
|
+
catch {
|
|
140
|
+
// JWT decode is best-effort
|
|
141
|
+
}
|
|
142
|
+
// Only accept tokens with Mail.Read scope (from outlook.cloud.microsoft)
|
|
143
|
+
if (!scp.includes("Mail.Read"))
|
|
144
|
+
return;
|
|
145
|
+
clearTimeout(timer);
|
|
146
|
+
page.off("request", handleRequest);
|
|
147
|
+
resolve({ bearerToken, accountEmail });
|
|
148
|
+
};
|
|
149
|
+
page.on("request", handleRequest);
|
|
150
|
+
});
|
|
151
|
+
}
|
|
152
|
+
// Stateless client using a cached bearer token (no Playwright needed)
|
|
153
|
+
function createStatelessClient(bearerToken, accountEmail) {
|
|
154
|
+
const invokeApi = async (method, endpoint, body) => {
|
|
155
|
+
const url = `${OUTLOOK_REST_API_BASE}${endpoint}`;
|
|
156
|
+
const headers = {
|
|
157
|
+
Authorization: `Bearer ${bearerToken}`,
|
|
158
|
+
"Content-Type": "application/json",
|
|
159
|
+
};
|
|
160
|
+
const resp = await fetch(url, {
|
|
161
|
+
method,
|
|
162
|
+
headers,
|
|
163
|
+
body: body ? JSON.stringify(body) : undefined,
|
|
164
|
+
});
|
|
165
|
+
if (resp.status === 204)
|
|
166
|
+
return { status: 204 };
|
|
167
|
+
const text = await resp.text();
|
|
168
|
+
let json;
|
|
169
|
+
try {
|
|
170
|
+
json = JSON.parse(text);
|
|
171
|
+
}
|
|
172
|
+
catch {
|
|
173
|
+
throw new Error(`Outlook API ${method} ${endpoint} returned non-JSON (HTTP ${resp.status}).`);
|
|
174
|
+
}
|
|
175
|
+
if (resp.status >= 400) {
|
|
176
|
+
const error = json.error && typeof json.error === "object" ? json.error : {};
|
|
177
|
+
const code = typeof error.code === "string" ? error.code : `http_${resp.status}`;
|
|
178
|
+
const message = typeof error.message === "string" ? error.message : "Unknown error";
|
|
179
|
+
throw new Error(`Outlook API ${method} ${endpoint} failed: ${code} — ${message}`);
|
|
180
|
+
}
|
|
181
|
+
return json;
|
|
182
|
+
};
|
|
183
|
+
return buildClientMethods(invokeApi, accountEmail, async () => {
|
|
184
|
+
/* no-op close */
|
|
185
|
+
});
|
|
186
|
+
}
|
|
187
|
+
export async function createOutlookDesktopClient(opts) {
|
|
188
|
+
const timeoutMs = opts?.bootstrapTimeoutMs ?? DEFAULT_BOOTSTRAP_TIMEOUT_MS;
|
|
189
|
+
// Strategy 1: Use cached token if still valid (no Playwright needed)
|
|
190
|
+
const cached = await loadCachedToken();
|
|
191
|
+
if (cached) {
|
|
192
|
+
return createStatelessClient(cached.bearerToken, cached.accountEmail);
|
|
193
|
+
}
|
|
194
|
+
// Strategy 2: Launch Playwright headful to get a fresh token via SSO
|
|
195
|
+
// Must be headful — Microsoft SSO blocks headless Chromium
|
|
196
|
+
await fs.mkdir(OUTLOOK_SESSION_DIR, { recursive: true });
|
|
197
|
+
const playwright = await import("playwright");
|
|
198
|
+
const context = await playwright.chromium.launchPersistentContext(OUTLOOK_SESSION_DIR, {
|
|
199
|
+
headless: false,
|
|
200
|
+
args: ["--start-maximized"],
|
|
201
|
+
viewport: null,
|
|
202
|
+
});
|
|
203
|
+
const page = context.pages()[0] ?? (await context.newPage());
|
|
204
|
+
const bootstrapPromise = waitForMailBearerToken(page, timeoutMs);
|
|
205
|
+
await page.goto(OUTLOOK_WEB_URL, {
|
|
206
|
+
waitUntil: "domcontentloaded",
|
|
207
|
+
timeout: timeoutMs,
|
|
208
|
+
});
|
|
209
|
+
const { bearerToken, accountEmail } = await bootstrapPromise;
|
|
210
|
+
// Cache the token for subsequent calls (avoids launching Playwright)
|
|
211
|
+
await saveCachedToken(bearerToken, accountEmail);
|
|
212
|
+
// Close browser immediately — we have the token, use stateless client
|
|
213
|
+
await page.close().catch(() => undefined);
|
|
214
|
+
await context.close().catch(() => undefined);
|
|
215
|
+
return createStatelessClient(bearerToken, accountEmail);
|
|
216
|
+
}
|
|
217
|
+
function buildClientMethods(invokeApi, accountEmail, closeFn) {
|
|
218
|
+
return {
|
|
219
|
+
getAccountEmail: () => accountEmail,
|
|
220
|
+
listMessages: async ({ folder = "inbox", limit = 20, filter, search }) => {
|
|
221
|
+
const params = new URLSearchParams();
|
|
222
|
+
params.set("$top", String(Math.max(1, Math.min(limit, 50))));
|
|
223
|
+
params.set("$select", "Id,Subject,From,ToRecipients,ReceivedDateTime,IsRead,HasAttachments,BodyPreview,ConversationId");
|
|
224
|
+
params.set("$orderby", "ReceivedDateTime desc");
|
|
225
|
+
if (filter)
|
|
226
|
+
params.set("$filter", filter);
|
|
227
|
+
if (search)
|
|
228
|
+
params.set("$search", `"${search}"`);
|
|
229
|
+
const endpoint = `/me/mailFolders/${encodeURIComponent(folder)}/messages?${params.toString()}`;
|
|
230
|
+
const json = await invokeApi("GET", endpoint);
|
|
231
|
+
const rawMessages = Array.isArray(json.value) ? json.value : [];
|
|
232
|
+
const messages = rawMessages
|
|
233
|
+
.filter((m) => !!m && typeof m === "object")
|
|
234
|
+
.map(toMessageView);
|
|
235
|
+
return {
|
|
236
|
+
accountEmail,
|
|
237
|
+
folder,
|
|
238
|
+
messages,
|
|
239
|
+
totalCount: typeof json["@odata.count"] === "number" ? json["@odata.count"] : messages.length,
|
|
240
|
+
};
|
|
241
|
+
},
|
|
242
|
+
getMessage: async ({ messageId }) => {
|
|
243
|
+
const json = await invokeApi("GET", `/me/messages/${encodeURIComponent(messageId)}`);
|
|
244
|
+
return toMessageDetail(json);
|
|
245
|
+
},
|
|
246
|
+
sendMessage: async ({ to, cc, subject, body, bodyType = "text" }) => {
|
|
247
|
+
const toRecipients = to.map((email) => ({
|
|
248
|
+
EmailAddress: { Address: email },
|
|
249
|
+
}));
|
|
250
|
+
const ccRecipients = (cc ?? []).map((email) => ({
|
|
251
|
+
EmailAddress: { Address: email },
|
|
252
|
+
}));
|
|
253
|
+
await invokeApi("POST", "/me/sendMail", {
|
|
254
|
+
Message: {
|
|
255
|
+
Subject: subject,
|
|
256
|
+
Body: { ContentType: bodyType === "html" ? "HTML" : "Text", Content: body },
|
|
257
|
+
ToRecipients: toRecipients,
|
|
258
|
+
...(ccRecipients.length > 0 ? { CcRecipients: ccRecipients } : {}),
|
|
259
|
+
},
|
|
260
|
+
});
|
|
261
|
+
return { accountEmail, status: "sent" };
|
|
262
|
+
},
|
|
263
|
+
replyMessage: async ({ messageId, body, bodyType = "text", replyAll = false }) => {
|
|
264
|
+
const replyMethod = replyAll ? "ReplyAll" : "Reply";
|
|
265
|
+
await invokeApi("POST", `/me/messages/${encodeURIComponent(messageId)}/${replyMethod}`, {
|
|
266
|
+
Comment: body,
|
|
267
|
+
...(bodyType === "html"
|
|
268
|
+
? {
|
|
269
|
+
Message: {
|
|
270
|
+
Body: { ContentType: "HTML", Content: body },
|
|
271
|
+
},
|
|
272
|
+
}
|
|
273
|
+
: {}),
|
|
274
|
+
});
|
|
275
|
+
return { accountEmail, status: "sent" };
|
|
276
|
+
},
|
|
277
|
+
close: closeFn,
|
|
278
|
+
};
|
|
279
|
+
}
|
|
280
|
+
//# sourceMappingURL=desktop-session.js.map
|
package/dist/policy.js
ADDED
|
@@ -0,0 +1,150 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Tool Policy Engine
|
|
3
|
+
*
|
|
4
|
+
* Evaluates whether a tool is allowed based on allow/deny lists with group expansion.
|
|
5
|
+
* Supports layered policy merging (intersection semantics) for arion + RunOptions policies.
|
|
6
|
+
*/
|
|
7
|
+
/** Built-in tool groups */
|
|
8
|
+
export const TOOL_GROUPS = {
|
|
9
|
+
"group:memory": [
|
|
10
|
+
"remember",
|
|
11
|
+
"recall",
|
|
12
|
+
"forget",
|
|
13
|
+
"recall_knowledge",
|
|
14
|
+
"reflect",
|
|
15
|
+
"search",
|
|
16
|
+
"learn",
|
|
17
|
+
"session_history",
|
|
18
|
+
],
|
|
19
|
+
"group:web": ["web_search", "web_fetch", "browse", "browser"],
|
|
20
|
+
"group:filesystem": ["read_file", "write_file", "edit_file", "glob", "grep", "ls", "apply_patch"],
|
|
21
|
+
"group:shell": [
|
|
22
|
+
"bash",
|
|
23
|
+
"exec",
|
|
24
|
+
"spawn",
|
|
25
|
+
"kill",
|
|
26
|
+
"list_processes",
|
|
27
|
+
"wait_process",
|
|
28
|
+
"write_stdin",
|
|
29
|
+
"process",
|
|
30
|
+
],
|
|
31
|
+
"group:arion": [
|
|
32
|
+
"hatch_arion",
|
|
33
|
+
"wake_arion",
|
|
34
|
+
"rest_arion",
|
|
35
|
+
"retire_arion",
|
|
36
|
+
"delegate_arion",
|
|
37
|
+
"manage_network",
|
|
38
|
+
"list_clients",
|
|
39
|
+
"deploy",
|
|
40
|
+
],
|
|
41
|
+
"group:meta": [
|
|
42
|
+
"ask_user",
|
|
43
|
+
"quest_update",
|
|
44
|
+
"quest_list",
|
|
45
|
+
"search",
|
|
46
|
+
"learn",
|
|
47
|
+
"learn_tool",
|
|
48
|
+
"learn_skill",
|
|
49
|
+
"create_tool",
|
|
50
|
+
"create_skill",
|
|
51
|
+
"use_skill",
|
|
52
|
+
"restart",
|
|
53
|
+
"spawn_worker",
|
|
54
|
+
"check_delegation",
|
|
55
|
+
"pause_delegation",
|
|
56
|
+
"resume_delegation",
|
|
57
|
+
"quest_report",
|
|
58
|
+
"self_diagnose",
|
|
59
|
+
],
|
|
60
|
+
};
|
|
61
|
+
/**
|
|
62
|
+
* Expand group references in a policy list.
|
|
63
|
+
* "group:memory" → ["remember", "recall", "forget", "reflect"]
|
|
64
|
+
* Individual tool names pass through unchanged.
|
|
65
|
+
* Unknown group names are ignored (treated as empty).
|
|
66
|
+
*/
|
|
67
|
+
export function expandGroups(names) {
|
|
68
|
+
const result = new Set();
|
|
69
|
+
for (const name of names) {
|
|
70
|
+
const lower = name.toLowerCase();
|
|
71
|
+
if (lower.startsWith("group:")) {
|
|
72
|
+
const members = TOOL_GROUPS[lower];
|
|
73
|
+
if (members) {
|
|
74
|
+
for (const member of members) {
|
|
75
|
+
result.add(member.toLowerCase());
|
|
76
|
+
}
|
|
77
|
+
}
|
|
78
|
+
// Unknown group names are silently ignored
|
|
79
|
+
}
|
|
80
|
+
else {
|
|
81
|
+
result.add(lower);
|
|
82
|
+
}
|
|
83
|
+
}
|
|
84
|
+
return result;
|
|
85
|
+
}
|
|
86
|
+
/**
|
|
87
|
+
* Evaluate whether a tool is allowed by a policy.
|
|
88
|
+
* Rules:
|
|
89
|
+
* 1. If allow is empty/undefined and restrictAllow is false/undefined
|
|
90
|
+
* → all tools allowed (then check deny)
|
|
91
|
+
* 2. If allow is non-empty OR restrictAllow=true
|
|
92
|
+
* → only listed tools/groups allowed (empty allow + restrictAllow=true denies all)
|
|
93
|
+
* 3. Deny always wins over allow
|
|
94
|
+
*/
|
|
95
|
+
export function isToolAllowed(toolName, policy) {
|
|
96
|
+
const normalized = toolName.toLowerCase();
|
|
97
|
+
// Check allow list: when restricted, tool must be in allowed set.
|
|
98
|
+
const isAllowRestricted = policy.restrictAllow === true || (policy.allow !== undefined && policy.allow.length > 0);
|
|
99
|
+
if (isAllowRestricted) {
|
|
100
|
+
const allowed = expandGroups(policy.allow ?? []);
|
|
101
|
+
if (!allowed.has(normalized)) {
|
|
102
|
+
return false;
|
|
103
|
+
}
|
|
104
|
+
}
|
|
105
|
+
// Check deny list: deny always wins
|
|
106
|
+
if (policy.deny && policy.deny.length > 0) {
|
|
107
|
+
const denied = expandGroups(policy.deny);
|
|
108
|
+
if (denied.has(normalized)) {
|
|
109
|
+
return false;
|
|
110
|
+
}
|
|
111
|
+
}
|
|
112
|
+
return true;
|
|
113
|
+
}
|
|
114
|
+
/**
|
|
115
|
+
* Merge two policies (intersection). Used for layered evaluation:
|
|
116
|
+
* arion policy ∩ RunOptions policy = effective policy.
|
|
117
|
+
* A tool must be allowed by BOTH layers.
|
|
118
|
+
*/
|
|
119
|
+
export function mergePolicies(a, b) {
|
|
120
|
+
// Merge deny: union of both deny lists
|
|
121
|
+
const mergedDeny = [...(a.deny ?? []), ...(b.deny ?? [])];
|
|
122
|
+
// Merge allow with restriction semantics:
|
|
123
|
+
// - both restricted: intersection (possibly empty = deny all)
|
|
124
|
+
// - one restricted: inherit that restriction
|
|
125
|
+
// - neither restricted: unrestricted
|
|
126
|
+
const aRestricts = a.restrictAllow === true || (a.allow?.length ?? 0) > 0;
|
|
127
|
+
const bRestricts = b.restrictAllow === true || (b.allow?.length ?? 0) > 0;
|
|
128
|
+
let mergedAllow;
|
|
129
|
+
let mergedRestrictAllow = false;
|
|
130
|
+
if (aRestricts && bRestricts) {
|
|
131
|
+
const expandedA = expandGroups(a.allow ?? []);
|
|
132
|
+
const expandedB = expandGroups(b.allow ?? []);
|
|
133
|
+
mergedAllow = [...expandedA].filter((name) => expandedB.has(name));
|
|
134
|
+
mergedRestrictAllow = true;
|
|
135
|
+
}
|
|
136
|
+
else if (aRestricts) {
|
|
137
|
+
mergedAllow = [...(a.allow ?? [])];
|
|
138
|
+
mergedRestrictAllow = true;
|
|
139
|
+
}
|
|
140
|
+
else if (bRestricts) {
|
|
141
|
+
mergedAllow = [...(b.allow ?? [])];
|
|
142
|
+
mergedRestrictAllow = true;
|
|
143
|
+
}
|
|
144
|
+
return {
|
|
145
|
+
...(mergedAllow !== undefined ? { allow: mergedAllow } : {}),
|
|
146
|
+
...(mergedRestrictAllow ? { restrictAllow: true } : {}),
|
|
147
|
+
...(mergedDeny.length ? { deny: mergedDeny } : {}),
|
|
148
|
+
};
|
|
149
|
+
}
|
|
150
|
+
//# sourceMappingURL=policy.js.map
|
|
@@ -0,0 +1,63 @@
|
|
|
1
|
+
import { createProviderAbortSignal, resolveSearchProviderEnv } from "./search-provider.js";
|
|
2
|
+
export class BraveSearchProvider {
|
|
3
|
+
env;
|
|
4
|
+
name = "brave";
|
|
5
|
+
requiresApiKey = true;
|
|
6
|
+
priority = 1;
|
|
7
|
+
constructor(env = process.env) {
|
|
8
|
+
this.env = env;
|
|
9
|
+
}
|
|
10
|
+
isAvailable() {
|
|
11
|
+
const apiKey = resolveSearchProviderEnv(this.env).BRAVE_API_KEY;
|
|
12
|
+
return Boolean(apiKey && apiKey.trim().length > 0);
|
|
13
|
+
}
|
|
14
|
+
async search(query, options) {
|
|
15
|
+
const apiKey = resolveSearchProviderEnv(this.env).BRAVE_API_KEY;
|
|
16
|
+
if (!apiKey) {
|
|
17
|
+
throw new Error("BRAVE_API_KEY environment variable is not set");
|
|
18
|
+
}
|
|
19
|
+
const limit = options?.limit ?? 5;
|
|
20
|
+
const url = new URL("https://api.search.brave.com/res/v1/web/search");
|
|
21
|
+
url.searchParams.set("q", query);
|
|
22
|
+
url.searchParams.set("count", String(limit));
|
|
23
|
+
// Handle timeRange option (map to Brave's freshness parameter)
|
|
24
|
+
if (options?.timeRange) {
|
|
25
|
+
const freshnessMap = {
|
|
26
|
+
day: "pd",
|
|
27
|
+
week: "pw",
|
|
28
|
+
month: "pm",
|
|
29
|
+
year: "py",
|
|
30
|
+
};
|
|
31
|
+
const freshness = freshnessMap[options.timeRange];
|
|
32
|
+
if (freshness) {
|
|
33
|
+
url.searchParams.set("freshness", freshness);
|
|
34
|
+
}
|
|
35
|
+
}
|
|
36
|
+
const { signal, cleanup } = createProviderAbortSignal(30_000, options?.signal);
|
|
37
|
+
try {
|
|
38
|
+
const response = await fetch(url.toString(), {
|
|
39
|
+
method: "GET",
|
|
40
|
+
headers: {
|
|
41
|
+
Accept: "application/json",
|
|
42
|
+
"X-Subscription-Token": apiKey,
|
|
43
|
+
},
|
|
44
|
+
signal,
|
|
45
|
+
});
|
|
46
|
+
if (!response.ok) {
|
|
47
|
+
throw new Error(`Brave Search API error: ${response.status} ${response.statusText}`);
|
|
48
|
+
}
|
|
49
|
+
const json = await response.json();
|
|
50
|
+
const webResults = json.web?.results || [];
|
|
51
|
+
return webResults.map((r) => ({
|
|
52
|
+
title: r.title,
|
|
53
|
+
url: r.url,
|
|
54
|
+
content: r.description,
|
|
55
|
+
score: r.relevance_score,
|
|
56
|
+
}));
|
|
57
|
+
}
|
|
58
|
+
finally {
|
|
59
|
+
cleanup();
|
|
60
|
+
}
|
|
61
|
+
}
|
|
62
|
+
}
|
|
63
|
+
//# sourceMappingURL=brave.js.map
|
|
@@ -0,0 +1,177 @@
|
|
|
1
|
+
import { createProviderAbortSignal } from "./search-provider.js";
|
|
2
|
+
export class DuckDuckGoSearchProvider {
|
|
3
|
+
name = "duckduckgo";
|
|
4
|
+
requiresApiKey = false;
|
|
5
|
+
priority = 6;
|
|
6
|
+
isAvailable() {
|
|
7
|
+
// DuckDuckGo is always available (no API key required)
|
|
8
|
+
return true;
|
|
9
|
+
}
|
|
10
|
+
async search(query, options) {
|
|
11
|
+
const limit = options?.limit ?? 5;
|
|
12
|
+
// DuckDuckGo HTML search endpoint (we'll parse the HTML response)
|
|
13
|
+
// The Instant Answer API doesn't provide web search results, only factoids
|
|
14
|
+
const url = new URL("https://html.duckduckgo.com/html/");
|
|
15
|
+
url.searchParams.set("q", query);
|
|
16
|
+
const { signal, cleanup } = createProviderAbortSignal(30_000, options?.signal);
|
|
17
|
+
try {
|
|
18
|
+
const response = await fetch(url.toString(), {
|
|
19
|
+
method: "GET",
|
|
20
|
+
signal,
|
|
21
|
+
headers: {
|
|
22
|
+
"User-Agent": "Mozilla/5.0 (compatible; ARIA/1.0)",
|
|
23
|
+
},
|
|
24
|
+
});
|
|
25
|
+
if (!response.ok) {
|
|
26
|
+
throw new Error(`DuckDuckGo Search error: ${response.status} ${response.statusText}`);
|
|
27
|
+
}
|
|
28
|
+
const html = await response.text();
|
|
29
|
+
// Parse HTML to extract search results
|
|
30
|
+
// DuckDuckGo HTML results have result__a (title/url) and result__snippet (description)
|
|
31
|
+
const results = [];
|
|
32
|
+
// First pass: extract all result__a links (title + url)
|
|
33
|
+
const linkMap = new Map();
|
|
34
|
+
const linkRegex = /<a(?=[^>]*\bclass=(["'])[^"']*\bresult__a\b[^"']*\1)(?=[^>]*\bhref=(["'])(.*?)\2)[^>]*>([\s\S]*?)<\/a>/gi;
|
|
35
|
+
let match;
|
|
36
|
+
let resultAnchorCount = 0;
|
|
37
|
+
while ((match = linkRegex.exec(html)) !== null) {
|
|
38
|
+
const rawHref = match[3];
|
|
39
|
+
const rawTitle = match[4];
|
|
40
|
+
if (!rawHref || !rawTitle) {
|
|
41
|
+
continue;
|
|
42
|
+
}
|
|
43
|
+
resultAnchorCount++;
|
|
44
|
+
const url = this.resolveDuckDuckGoResultUrl(rawHref);
|
|
45
|
+
if (!url) {
|
|
46
|
+
continue;
|
|
47
|
+
}
|
|
48
|
+
const title = this.stripHtmlTags(rawTitle);
|
|
49
|
+
if (!title) {
|
|
50
|
+
continue;
|
|
51
|
+
}
|
|
52
|
+
linkMap.set(url, { title, url });
|
|
53
|
+
}
|
|
54
|
+
// If DDG returned result anchors but we extracted zero usable URLs, parsing is stale.
|
|
55
|
+
// Throw to allow router fallback rather than silently returning empty results.
|
|
56
|
+
if (resultAnchorCount > 0 && linkMap.size === 0) {
|
|
57
|
+
throw new Error("Could not resolve any result URLs from DuckDuckGo response");
|
|
58
|
+
}
|
|
59
|
+
// Second pass: extract snippets
|
|
60
|
+
const snippetRegex = /<(?:a|div|span)(?=[^>]*\bclass=(["'])[^"']*\bresult__snippet\b[^"']*\1)[^>]*>([\s\S]*?)<\/(?:a|div|span)>/gi;
|
|
61
|
+
const snippets = [];
|
|
62
|
+
while ((match = snippetRegex.exec(html)) !== null) {
|
|
63
|
+
const rawSnippet = match[2];
|
|
64
|
+
snippets.push(this.stripHtmlTags(rawSnippet ?? ""));
|
|
65
|
+
}
|
|
66
|
+
// Combine results (matching by order, which should align)
|
|
67
|
+
const linkEntries = Array.from(linkMap.values());
|
|
68
|
+
for (let i = 0; i < Math.min(linkEntries.length, limit); i++) {
|
|
69
|
+
const link = linkEntries[i];
|
|
70
|
+
if (!link) {
|
|
71
|
+
continue;
|
|
72
|
+
}
|
|
73
|
+
const snippet = snippets[i] || link.title;
|
|
74
|
+
results.push({
|
|
75
|
+
title: link.title,
|
|
76
|
+
url: link.url,
|
|
77
|
+
content: snippet,
|
|
78
|
+
});
|
|
79
|
+
}
|
|
80
|
+
return results;
|
|
81
|
+
}
|
|
82
|
+
finally {
|
|
83
|
+
cleanup();
|
|
84
|
+
}
|
|
85
|
+
}
|
|
86
|
+
/**
|
|
87
|
+
* Strip HTML tags from a string
|
|
88
|
+
*/
|
|
89
|
+
stripHtmlTags(html) {
|
|
90
|
+
return html
|
|
91
|
+
.replace(/<[^>]*>/g, "")
|
|
92
|
+
.replace(/ /g, " ")
|
|
93
|
+
.replace(/&/g, "&")
|
|
94
|
+
.replace(/</g, "<")
|
|
95
|
+
.replace(/>/g, ">")
|
|
96
|
+
.replace(/"/g, '"')
|
|
97
|
+
.replace(/'/g, "'")
|
|
98
|
+
.trim();
|
|
99
|
+
}
|
|
100
|
+
/**
|
|
101
|
+
* Decode HTML entities in URLs
|
|
102
|
+
*/
|
|
103
|
+
decodeHtmlEntities(text) {
|
|
104
|
+
return text
|
|
105
|
+
.replace(/&/g, "&")
|
|
106
|
+
.replace(/</g, "<")
|
|
107
|
+
.replace(/>/g, ">")
|
|
108
|
+
.replace(/"/g, '"')
|
|
109
|
+
.replace(/'/g, "'");
|
|
110
|
+
}
|
|
111
|
+
resolveDuckDuckGoResultUrl(rawHref) {
|
|
112
|
+
const decodedHref = this.decodeHtmlEntities(rawHref).trim();
|
|
113
|
+
if (!decodedHref) {
|
|
114
|
+
return null;
|
|
115
|
+
}
|
|
116
|
+
let absoluteHref = decodedHref;
|
|
117
|
+
if (absoluteHref.startsWith("//")) {
|
|
118
|
+
absoluteHref = `https:${absoluteHref}`;
|
|
119
|
+
}
|
|
120
|
+
else if (absoluteHref.startsWith("/")) {
|
|
121
|
+
absoluteHref = `https://duckduckgo.com${absoluteHref}`;
|
|
122
|
+
}
|
|
123
|
+
let parsed;
|
|
124
|
+
try {
|
|
125
|
+
parsed = new URL(absoluteHref);
|
|
126
|
+
}
|
|
127
|
+
catch {
|
|
128
|
+
return null;
|
|
129
|
+
}
|
|
130
|
+
const hostname = parsed.hostname.toLowerCase();
|
|
131
|
+
if (hostname === "duckduckgo.com" || hostname.endsWith(".duckduckgo.com")) {
|
|
132
|
+
const redirected = parsed.searchParams.get("uddg");
|
|
133
|
+
if (!redirected) {
|
|
134
|
+
return null;
|
|
135
|
+
}
|
|
136
|
+
return this.normalizeResultUrl(redirected);
|
|
137
|
+
}
|
|
138
|
+
return this.normalizeResultUrl(absoluteHref);
|
|
139
|
+
}
|
|
140
|
+
normalizeResultUrl(candidate) {
|
|
141
|
+
let value = candidate.trim();
|
|
142
|
+
if (!value) {
|
|
143
|
+
return null;
|
|
144
|
+
}
|
|
145
|
+
if (value.startsWith("//")) {
|
|
146
|
+
value = `https:${value}`;
|
|
147
|
+
}
|
|
148
|
+
// Some uddg values are encoded multiple times; decode at most twice.
|
|
149
|
+
for (let i = 0; i < 2; i++) {
|
|
150
|
+
try {
|
|
151
|
+
const decoded = decodeURIComponent(value);
|
|
152
|
+
if (decoded === value) {
|
|
153
|
+
break;
|
|
154
|
+
}
|
|
155
|
+
value = decoded;
|
|
156
|
+
}
|
|
157
|
+
catch {
|
|
158
|
+
break;
|
|
159
|
+
}
|
|
160
|
+
}
|
|
161
|
+
try {
|
|
162
|
+
const parsed = new URL(value);
|
|
163
|
+
if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
|
|
164
|
+
return null;
|
|
165
|
+
}
|
|
166
|
+
const hostname = parsed.hostname.toLowerCase();
|
|
167
|
+
if (hostname === "duckduckgo.com" || hostname.endsWith(".duckduckgo.com")) {
|
|
168
|
+
return null;
|
|
169
|
+
}
|
|
170
|
+
return parsed.toString();
|
|
171
|
+
}
|
|
172
|
+
catch {
|
|
173
|
+
return null;
|
|
174
|
+
}
|
|
175
|
+
}
|
|
176
|
+
}
|
|
177
|
+
//# sourceMappingURL=duckduckgo.js.map
|