@carto-knowledge/runner 0.2.3 → 0.2.5

package/dist/index.js

@@ -0,0 +1,305 @@
+// src/runner.ts
+import { Cli } from "clipanion";
+
+// src/tokenizer.ts
+function tokenize(commandLine) {
+  const tokens = [];
+  let current = "";
+  let inQuote = null;
+  let escaped = false;
+  for (let i = 0; i < commandLine.length; i++) {
+    const char = commandLine[i];
+    if (escaped) {
+      current += char;
+      escaped = false;
+      continue;
+    }
+    if (char === "\\") {
+      escaped = true;
+      continue;
+    }
+    if (inQuote) {
+      if (char === inQuote) {
+        tokens.push(current);
+        current = "";
+        inQuote = null;
+      } else {
+        current += char;
+      }
+    } else if (char === '"' || char === "'") {
+      inQuote = char;
+    } else if (char === " " || char === "	") {
+      if (current) {
+        tokens.push(current);
+        current = "";
+      }
+    } else {
+      current += char;
+    }
+  }
+  if (current) {
+    tokens.push(current);
+  }
+  return tokens;
+}
+function extractCommandPath(tokens) {
+  const path = [];
+  for (const token of tokens) {
+    if (token.startsWith("-")) break;
+    path.push(token);
+  }
+  return path.join(" ");
+}
+
+// src/allowlist.ts
+function checkAllowlist(commandPath, config) {
+  const normalizedPath = commandPath.toLowerCase().trim();
+  if (config.commands.some((cmd) => cmd.toLowerCase() === normalizedPath)) {
+    return { allowed: true };
+  }
+  if (config.commands.some((cmd) => normalizedPath.startsWith(cmd.toLowerCase() + " "))) {
+    return { allowed: true };
+  }
+  return {
+    allowed: false,
+    error: {
+      code: "COMMAND_NOT_ALLOWED",
+      message: `Command '${commandPath}' is not in the allowlist. Allowed commands: ${config.commands.join(", ")}`
+    }
+  };
+}
+var DEFAULT_ALLOWLIST = {
+  commands: [
+    // Folder reads
+    "folder tree",
+    "folder list",
+    "folder get",
+    // Item reads
+    "item search",
+    "item get",
+    "item list",
+    "item get-by-uri",
+    "item segments",
+    // Edge reads
+    "edge list",
+    "edge get",
+    // Share link reads
+    "share-link list",
+    "share-link analytics",
+    // Librarian
+    "librarian chat"
+  ]
+};
+var WRITE_ALLOWLIST = {
+  commands: [
+    ...DEFAULT_ALLOWLIST.commands,
+    // Folder writes
+    "folder create",
+    "folder update",
+    "folder delete",
+    "folder move",
+    "folder restructure",
+    "folder create-tree",
+    // Item writes
+    "item create",
+    "item update",
+    "item delete",
+    "item update content",
+    "item upload",
+    "item assign",
+    "item move",
+    // Edge writes
+    "edge create",
+    "edge update",
+    "edge delete",
+    // Share link writes
+    "share-link create",
+    "share-link delete"
+  ]
+};
+
+// src/envelope.ts
+function successEnvelope(command, result, requestId) {
+  return {
+    ok: true,
+    command,
+    result,
+    requestId,
+    schemaVersion: 1
+  };
+}
+function errorEnvelope(command, error, requestId) {
+  return {
+    ok: false,
+    command,
+    error,
+    requestId,
+    schemaVersion: 1
+  };
+}
+var ErrorCodes = {
+  COMMAND_NOT_ALLOWED: "COMMAND_NOT_ALLOWED",
+  COMMAND_NOT_FOUND: "COMMAND_NOT_FOUND",
+  INVALID_ARGUMENTS: "INVALID_ARGUMENTS",
+  AUTH_ERROR: "AUTH_ERROR",
+  EXECUTION_ERROR: "EXECUTION_ERROR",
+  PARSE_ERROR: "PARSE_ERROR"
+};
+
+// src/runtime.ts
+var WorkerRuntime = class {
+  constructor(authToken, apiBaseUrl) {
+    this.authToken = authToken;
+    this.apiBaseUrl = apiBaseUrl;
+  }
+  isInteractive = false;
+  isToolMode = true;
+  async getAuthToken() {
+    return this.authToken;
+  }
+  log(message) {
+    console.log(`[carto-cli] ${message}`);
+  }
+  warn(message) {
+    console.warn(`[carto-cli] ${message}`);
+  }
+  error(message) {
+    console.error(`[carto-cli] ${message}`);
+  }
+};
+var CliRuntime = class {
+  constructor(config) {
+    this.config = config;
+    this.isInteractive = process.stdout.isTTY ?? false;
+  }
+  isInteractive;
+  isToolMode = false;
+  get apiBaseUrl() {
+    return this.config.apiBaseUrl;
+  }
+  async getAuthToken() {
+    if (!this.config.authToken) {
+      throw new Error("Not authenticated. Run `carto auth login` first.");
+    }
+    return this.config.authToken;
+  }
+  log(message) {
+    console.log(message);
+  }
+  warn(message) {
+    console.warn(message);
+  }
+  error(message) {
+    console.error(message);
+  }
+};
+
+// src/runner.ts
+import { allCommands } from "@carto-knowledge/commands";
+import { CartoClient } from "@carto-knowledge/core";
+async function runInProcess(commandLine, options) {
+  const { requestId, authToken, apiBaseUrl, allowlist = DEFAULT_ALLOWLIST } = options;
+  if (!commandLine || typeof commandLine !== "string") {
+    return errorEnvelope("", {
+      code: ErrorCodes.INVALID_ARGUMENTS,
+      message: "commandLine must be a non-empty string"
+    }, requestId);
+  }
+  if (!authToken) {
+    return errorEnvelope("", {
+      code: ErrorCodes.AUTH_ERROR,
+      message: "authToken is required"
+    }, requestId);
+  }
+  const tokens = tokenize(commandLine.trim());
+  if (tokens.length === 0) {
+    return errorEnvelope("", {
+      code: ErrorCodes.INVALID_ARGUMENTS,
+      message: "Empty command line"
+    }, requestId);
+  }
+  const commandPath = extractCommandPath(tokens);
+  const allowlistResult = checkAllowlist(commandPath, allowlist);
+  if (!allowlistResult.allowed) {
+    return errorEnvelope(commandPath, allowlistResult.error, requestId);
+  }
+  const augmentedTokens = [
+    ...tokens,
+    "--format",
+    "json"
+  ];
+  const cli = new Cli({
+    binaryName: "carto",
+    enableCapture: true
+  });
+  for (const CommandClass of allCommands) {
+    cli.register(CommandClass);
+  }
+  let stdoutData = "";
+  let stderrData = "";
+  const stdout = {
+    write(chunk) {
+      stdoutData += typeof chunk === "string" ? chunk : new TextDecoder().decode(chunk);
+      return true;
+    }
+  };
+  const stderr = {
+    write(chunk) {
+      stderrData += typeof chunk === "string" ? chunk : new TextDecoder().decode(chunk);
+      return true;
+    }
+  };
+  const runtime = new WorkerRuntime(authToken, apiBaseUrl);
+  const client = new CartoClient({
+    baseUrl: apiBaseUrl,
+    getAuthToken: async () => authToken
+  });
+  const context = {
+    stdin: process.stdin,
+    stdout,
+    stderr,
+    env: {},
+    colorDepth: 1,
+    client,
+    runtime
+  };
+  try {
+    const exitCode = await cli.run(augmentedTokens, context);
+    const output = stdoutData.trim();
+    const errorOutput = stderrData.trim();
+    if (exitCode === 0) {
+      try {
+        const result = output ? JSON.parse(output) : null;
+        return successEnvelope(commandPath, result, requestId);
+      } catch {
+        return successEnvelope(commandPath, { text: output }, requestId);
+      }
+    } else {
+      return errorEnvelope(commandPath, {
+        code: ErrorCodes.EXECUTION_ERROR,
+        message: errorOutput || output || `Command exited with code ${exitCode}`
+      }, requestId);
+    }
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    console.error(`[carto-cli] Execution error for '${commandPath}':`, error);
+    return errorEnvelope(commandPath, {
+      code: ErrorCodes.EXECUTION_ERROR,
+      message
+    }, requestId);
+  }
+}
+export {
+  CliRuntime,
+  DEFAULT_ALLOWLIST,
+  ErrorCodes,
+  WRITE_ALLOWLIST,
+  WorkerRuntime,
+  checkAllowlist,
+  errorEnvelope,
+  extractCommandPath,
+  runInProcess,
+  successEnvelope,
+  tokenize
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/runner.ts","../src/tokenizer.ts","../src/allowlist.ts","../src/envelope.ts","../src/runtime.ts"],"sourcesContent":["// ABOUTME: Executes CLI commands in-process without subprocess spawning\n// ABOUTME: Designed for Cloudflare Worker compatibility\n\nimport { Cli } from 'clipanion';\nimport { tokenize, extractCommandPath } from './tokenizer';\nimport { checkAllowlist, AllowlistConfig, DEFAULT_ALLOWLIST } from './allowlist';\nimport { successEnvelope, errorEnvelope, CommandOutput, ErrorCodes } from './envelope';\nimport { WorkerRuntime } from './runtime';\nimport { allCommands } from '@carto-knowledge/commands';\nimport { CartoClient } from '@carto-knowledge/core';\n\nexport interface RunOptions {\n  /** Correlation ID for tracing */\n  requestId?: string;\n\n  /** Auth token for API calls */\n  authToken: string;\n\n  /** Base URL for Carto API */\n  apiBaseUrl: string;\n\n  /** Command allowlist (defaults to read-only operations) */\n  allowlist?: AllowlistConfig;\n}\n\n/**\n * Executes a CLI command in-process.\n *\n * Designed for Worker runtime:\n * - No subprocess spawning\n * - Captures output to memory streams\n * - Forces JSON output and non-interactive mode\n * - Validates against allowlist\n *\n * @param commandLine - Command string, e.g., \"folder tree --library my-lib\"\n * @param options - Execution options including auth and allowlist\n * @returns Structured command output envelope\n */\nexport async function runInProcess(\n  commandLine: string,\n  options: RunOptions\n): Promise<CommandOutput> {\n  const { requestId, authToken, apiBaseUrl, allowlist = DEFAULT_ALLOWLIST } = options;\n\n  // Defensive: Validate inputs\n  if (!commandLine || typeof commandLine !== 'string') {\n    return errorEnvelope('', {\n      code: ErrorCodes.INVALID_ARGUMENTS,\n      message: 'commandLine must be a non-empty string',\n    }, requestId);\n  }\n\n  if (!authToken) {\n    return errorEnvelope('', {\n      code: ErrorCodes.AUTH_ERROR,\n      message: 'authToken is required',\n    }, requestId);\n  }\n\n  // Parse command line\n  const tokens = tokenize(commandLine.trim());\n\n  if (tokens.length === 0) {\n    return errorEnvelope('', {\n      code: ErrorCodes.INVALID_ARGUMENTS,\n      message: 'Empty command line',\n    }, requestId);\n  }\n\n  const commandPath = extractCommandPath(tokens);\n\n  // Check allowlist\n  const allowlistResult = checkAllowlist(commandPath, allowlist);\n  if (!allowlistResult.allowed) {\n    return errorEnvelope(commandPath, allowlistResult.error!, requestId);\n  }\n\n  // Force tool-mode flags\n  const augmentedTokens = [\n    ...tokens,\n    '--format', 'json',\n  ];\n\n  // Create CLI instance\n  const cli = new Cli({\n    binaryName: 'carto',\n    enableCapture: true,\n  });\n\n  // Register all commands\n  for (const CommandClass of allCommands) {\n    cli.register(CommandClass);\n  }\n\n  // Capture output to memory using simple buffers (Worker-compatible)\n  let stdoutData = '';\n  let stderrData = '';\n\n  const stdout = {\n    write(chunk: string | Uint8Array): boolean {\n      stdoutData += typeof chunk === 'string' ? chunk : new TextDecoder().decode(chunk);\n      return true;\n    },\n  };\n\n  const stderr = {\n    write(chunk: string | Uint8Array): boolean {\n      stderrData += typeof chunk === 'string' ? chunk : new TextDecoder().decode(chunk);\n      return true;\n    },\n  };\n\n  // Create runtime and client\n  const runtime = new WorkerRuntime(authToken, apiBaseUrl);\n  const client = new CartoClient({\n    baseUrl: apiBaseUrl,\n    getAuthToken: async () => authToken,\n  });\n\n  // Create context matching CartoCommandContext\n  // Type assertion needed because we use minimal stream stubs for Worker compatibility\n  // Clipanion only uses the write() method at runtime\n  const context = {\n    stdin: process.stdin,\n    stdout,\n    stderr,\n    env: {},\n    colorDepth: 1,\n    client,\n    runtime,\n  } as unknown as Parameters<typeof cli.run>[1];\n\n  try {\n    const exitCode = await cli.run(augmentedTokens, context);\n    const output = stdoutData.trim();\n    const errorOutput = stderrData.trim();\n\n    if (exitCode === 0) {\n      // Parse JSON output from command\n      try {\n        const result = output ? JSON.parse(output) : null;\n        return successEnvelope(commandPath, result, requestId);\n      } catch {\n        // Command succeeded but output wasn't JSON (shouldn't happen in tool mode)\n        return successEnvelope(commandPath, { text: output }, requestId);\n      }\n    } else {\n      // Command failed\n      return errorEnvelope(commandPath, {\n        code: ErrorCodes.EXECUTION_ERROR,\n        message: errorOutput || output || `Command exited with code ${exitCode}`,\n      }, requestId);\n    }\n  } catch (error) {\n    // Unexpected error during execution\n    const message = error instanceof Error ? error.message : String(error);\n    console.error(`[carto-cli] Execution error for '${commandPath}':`, error);\n\n    return errorEnvelope(commandPath, {\n      code: ErrorCodes.EXECUTION_ERROR,\n      message,\n    }, requestId);\n  }\n}\n\n// Re-export for convenience\nexport { DEFAULT_ALLOWLIST, WRITE_ALLOWLIST } from './allowlist';\nexport type { AllowlistConfig } from './allowlist';\nexport type { CommandOutput } from './envelope';\n","// ABOUTME: Tokenizes command line strings for in-process CLI execution\n// ABOUTME: Handles quoted strings and shell-like argument parsing\n\n/**\n * Tokenizes a command line string, handling quoted strings.\n *\n * Examples:\n * - \"folder tree\" => ['folder', 'tree']\n * - \"--name 'My Folder'\" => ['--name', 'My Folder']\n * - '--name \"My Folder\"' => ['--name', 'My Folder']\n * - \"folder create --name 'Test's Folder'\" => handles escaped quotes\n */\nexport function tokenize(commandLine: string): string[] {\n  const tokens: string[] = [];\n  let current = '';\n  let inQuote: string | null = null;\n  let escaped = false;\n\n  for (let i = 0; i < commandLine.length; i++) {\n    const char = commandLine[i];\n\n    if (escaped) {\n      current += char;\n      escaped = false;\n      continue;\n    }\n\n    if (char === '\\\\') {\n      escaped = true;\n      continue;\n    }\n\n    if (inQuote) {\n      if (char === inQuote) {\n        // Empty quoted string should still produce a token\n        tokens.push(current);\n        current = '';\n        inQuote = null;\n      } else {\n        current += char;\n      }\n    } else if (char === '\"' || char === \"'\") {\n      inQuote = char;\n    } else if (char === ' ' || char === '\\t') {\n      if (current) {\n        tokens.push(current);\n        current = '';\n      }\n    } else {\n      current += char;\n    }\n  }\n\n  if (current) {\n    tokens.push(current);\n  }\n\n  return tokens;\n}\n\n/**\n * Extracts the command path from tokens (before any options).\n *\n * Examples:\n * - ['folder', 'tree', '--library', 'x'] => 'folder tree'\n * - ['item', 'search', '-q', 'hello'] => 'item search'\n */\nexport function extractCommandPath(tokens: string[]): string {\n  const path: string[] = [];\n  for (const token of tokens) {\n    if (token.startsWith('-')) break;\n    path.push(token);\n  }\n  return path.join(' ');\n}\n","// ABOUTME: Validates commands against an allowlist for tool-mode execution\n// ABOUTME: Prevents unauthorized command execution in Worker context\n\nexport interface AllowlistConfig {\n  commands: string[];  // e.g., ['folder tree', 'item search']\n}\n\nexport interface AllowlistResult {\n  allowed: boolean;\n  error?: {\n    code: 'COMMAND_NOT_ALLOWED';\n    message: string;\n  };\n}\n\n/**\n * Checks if a command matches the allowlist.\n *\n * Defensive validation:\n * - Normalizes command path (lowercase, trim)\n * - Supports prefix matching for subcommands\n */\nexport function checkAllowlist(\n  commandPath: string,\n  config: AllowlistConfig\n): AllowlistResult {\n  const normalizedPath = commandPath.toLowerCase().trim();\n\n  // Check exact match\n  if (config.commands.some(cmd => cmd.toLowerCase() === normalizedPath)) {\n    return { allowed: true };\n  }\n\n  // Check prefix match (e.g., 'folder' allows 'folder tree', 'folder create')\n  if (config.commands.some(cmd => normalizedPath.startsWith(cmd.toLowerCase() + ' '))) {\n    return { allowed: true };\n  }\n\n  return {\n    allowed: false,\n    error: {\n      code: 'COMMAND_NOT_ALLOWED',\n      message: `Command '${commandPath}' is not in the allowlist. ` +\n        `Allowed commands: ${config.commands.join(', ')}`,\n    },\n  };\n}\n\n/**\n * Default allowlist for Worker tool mode.\n * Read-only operations by default.\n */\nexport const DEFAULT_ALLOWLIST: AllowlistConfig = {\n  commands: [\n    // Folder reads\n    'folder tree',\n    'folder list',\n    'folder get',\n    // Item reads\n    'item search',\n    'item get',\n    'item list',\n    'item get-by-uri',\n    'item segments',\n    // Edge reads\n    'edge list',\n    'edge get',\n    // Share link reads\n    'share-link list',\n    'share-link analytics',\n    // Librarian\n    'librarian chat',\n  ],\n};\n\n/**\n * Extended allowlist including write operations.\n * Use when agent needs to modify data.\n */\nexport const WRITE_ALLOWLIST: AllowlistConfig = {\n  commands: [\n    ...DEFAULT_ALLOWLIST.commands,\n    // Folder writes\n    'folder create',\n    'folder update',\n    'folder delete',\n    'folder move',\n    'folder restructure',\n    'folder create-tree',\n    // Item writes\n    'item create',\n    'item update',\n    'item delete',\n    'item update content',\n    'item upload',\n    'item assign',\n    'item move',\n    // Edge writes\n    'edge create',\n    'edge update',\n    'edge delete',\n    // Share link writes\n    'share-link create',\n    'share-link delete',\n  ],\n};\n","// ABOUTME: Wraps CLI command outputs in structured JSON envelopes\n// ABOUTME: Provides consistent response format for Mastra tool integration\n\nexport interface CommandError {\n  code: string;\n  message: string;\n}\n\nexport interface CommandOutput<T = unknown> {\n  ok: boolean;\n  command: string;\n  result?: T;\n  error?: CommandError;\n  requestId?: string;\n  schemaVersion: 1;\n}\n\n/**\n * Creates a successful output envelope.\n */\nexport function successEnvelope<T>(\n  command: string,\n  result: T,\n  requestId?: string\n): CommandOutput<T> {\n  return {\n    ok: true,\n    command,\n    result,\n    requestId,\n    schemaVersion: 1,\n  };\n}\n\n/**\n * Creates an error output envelope.\n */\nexport function errorEnvelope(\n  command: string,\n  error: CommandError,\n  requestId?: string\n): CommandOutput<never> {\n  return {\n    ok: false,\n    command,\n    error,\n    requestId,\n    schemaVersion: 1,\n  };\n}\n\n/**\n * Common error codes for CLI operations.\n */\nexport const ErrorCodes = {\n  COMMAND_NOT_ALLOWED: 'COMMAND_NOT_ALLOWED',\n  COMMAND_NOT_FOUND: 'COMMAND_NOT_FOUND',\n  INVALID_ARGUMENTS: 'INVALID_ARGUMENTS',\n  AUTH_ERROR: 'AUTH_ERROR',\n  EXECUTION_ERROR: 'EXECUTION_ERROR',\n  PARSE_ERROR: 'PARSE_ERROR',\n} as const;\n","// ABOUTME: Abstracts runtime differences between CLI and Worker execution\n// ABOUTME: Provides consistent interface for auth, logging, and config\n\nexport interface CartoRuntime {\n  // Authentication\n  getAuthToken(): Promise<string>;\n\n  // API access\n  apiBaseUrl: string;\n\n  // Environment flags\n  isInteractive: boolean;\n  isToolMode: boolean;\n\n  // Logging (respects --quiet, routes to correct streams)\n  log(message: string): void;\n  warn(message: string): void;\n  error(message: string): void;\n}\n\n/**\n * Worker runtime - receives auth from request context.\n * Non-interactive, always tool mode.\n */\nexport class WorkerRuntime implements CartoRuntime {\n  isInteractive = false;\n  isToolMode = true;\n\n  constructor(\n    private authToken: string,\n    public apiBaseUrl: string,\n  ) {}\n\n  async getAuthToken(): Promise<string> {\n    return this.authToken;\n  }\n\n  log(message: string): void {\n    console.log(`[carto-cli] ${message}`);\n  }\n\n  warn(message: string): void {\n    console.warn(`[carto-cli] ${message}`);\n  }\n\n  error(message: string): void {\n    console.error(`[carto-cli] ${message}`);\n  }\n}\n\n/**\n * CLI runtime - reads from config file or env vars.\n * Interactive when terminal attached.\n *\n * Compatible with both Bun and Node.js runtimes.\n */\nexport class CliRuntime implements CartoRuntime {\n  isInteractive: boolean;\n  isToolMode = false;\n\n  constructor(\n    private config: { apiBaseUrl: string; authToken?: string },\n  ) {\n    // Works in both Bun and Node.js\n    this.isInteractive = process.stdout.isTTY ?? false;\n  }\n\n  get apiBaseUrl(): string {\n    return this.config.apiBaseUrl;\n  }\n\n  async getAuthToken(): Promise<string> {\n    if (!this.config.authToken) {\n      throw new Error('Not authenticated. Run `carto auth login` first.');\n    }\n    return this.config.authToken;\n  }\n\n  log(message: string): void {\n    console.log(message);\n  }\n\n  warn(message: string): void {\n    console.warn(message);\n  }\n\n  error(message: string): void {\n    console.error(message);\n  }\n}\n"],"mappings":";AAGA,SAAS,WAAW;;;ACSb,SAAS,SAAS,aAA+B;AACtD,QAAM,SAAmB,CAAC;AAC1B,MAAI,UAAU;AACd,MAAI,UAAyB;AAC7B,MAAI,UAAU;AAEd,WAAS,IAAI,GAAG,IAAI,YAAY,QAAQ,KAAK;AAC3C,UAAM,OAAO,YAAY,CAAC;AAE1B,QAAI,SAAS;AACX,iBAAW;AACX,gBAAU;AACV;AAAA,IACF;AAEA,QAAI,SAAS,MAAM;AACjB,gBAAU;AACV;AAAA,IACF;AAEA,QAAI,SAAS;AACX,UAAI,SAAS,SAAS;AAEpB,eAAO,KAAK,OAAO;AACnB,kBAAU;AACV,kBAAU;AAAA,MACZ,OAAO;AACL,mBAAW;AAAA,MACb;AAAA,IACF,WAAW,SAAS,OAAO,SAAS,KAAK;AACvC,gBAAU;AAAA,IACZ,WAAW,SAAS,OAAO,SAAS,KAAM;AACxC,UAAI,SAAS;AACX,eAAO,KAAK,OAAO;AACnB,kBAAU;AAAA,MACZ;AAAA,IACF,OAAO;AACL,iBAAW;AAAA,IACb;AAAA,EACF;AAEA,MAAI,SAAS;AACX,WAAO,KAAK,OAAO;AAAA,EACrB;AAEA,SAAO;AACT;AASO,SAAS,mBAAmB,QAA0B;AAC3D,QAAM,OAAiB,CAAC;AACxB,aAAW,SAAS,QAAQ;AAC1B,QAAI,MAAM,WAAW,GAAG,EAAG;AAC3B,SAAK,KAAK,KAAK;AAAA,EACjB;AACA,SAAO,KAAK,KAAK,GAAG;AACtB;;;ACpDO,SAAS,eACd,aACA,QACiB;AACjB,QAAM,iBAAiB,YAAY,YAAY,EAAE,KAAK;AAGtD,MAAI,OAAO,SAAS,KAAK,SAAO,IAAI,YAAY,MAAM,cAAc,GAAG;AACrE,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB;AAGA,MAAI,OAAO,SAAS,KAAK,SAAO,eAAe,WAAW,IAAI,YAAY,IAAI,GAAG,CAAC,GAAG;AACnF,WAAO,EAAE,SAAS,KAAK;AAAA,EACzB;AAEA,SAAO;AAAA,IACL,SAAS;AAAA,IACT,OAAO;AAAA,MACL,MAAM;AAAA,MACN,SAAS,YAAY,WAAW,gDACT,OAAO,SAAS,KAAK,IAAI,CAAC;AAAA,IACnD;AAAA,EACF;AACF;AAMO,IAAM,oBAAqC;AAAA,EAChD,UAAU;AAAA;AAAA,IAER;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAEA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAEA;AAAA,IACA;AAAA;AAAA,IAEA;AAAA,IACA;AAAA;AAAA,IAEA;AAAA,EACF;AACF;AAMO,IAAM,kBAAmC;AAAA,EAC9C,UAAU;AAAA,IACR,GAAG,kBAAkB;AAAA;AAAA,IAErB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAEA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAEA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAEA;AAAA,IACA;AAAA,EACF;AACF;;;ACrFO,SAAS,gBACd,SACA,QACA,WACkB;AAClB,SAAO;AAAA,IACL,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,eAAe;AAAA,EACjB;AACF;AAKO,SAAS,cACd,SACA,OACA,WACsB;AACtB,SAAO;AAAA,IACL,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA,eAAe;AAAA,EACjB;AACF;AAKO,IAAM,aAAa;AAAA,EACxB,qBAAqB;AAAA,EACrB,mBAAmB;AAAA,EACnB,mBAAmB;AAAA,EACnB,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,aAAa;AACf;;;ACrCO,IAAM,gBAAN,MAA4C;AAAA,EAIjD,YACU,WACD,YACP;AAFQ;AACD;AAAA,EACN;AAAA,EANH,gBAAgB;AAAA,EAChB,aAAa;AAAA,EAOb,MAAM,eAAgC;AACpC,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,IAAI,SAAuB;AACzB,YAAQ,IAAI,eAAe,OAAO,EAAE;AAAA,EACtC;AAAA,EAEA,KAAK,SAAuB;AAC1B,YAAQ,KAAK,eAAe,OAAO,EAAE;AAAA,EACvC;AAAA,EAEA,MAAM,SAAuB;AAC3B,YAAQ,MAAM,eAAe,OAAO,EAAE;AAAA,EACxC;AACF;AAQO,IAAM,aAAN,MAAyC;AAAA,EAI9C,YACU,QACR;AADQ;AAGR,SAAK,gBAAgB,QAAQ,OAAO,SAAS;AAAA,EAC/C;AAAA,EARA;AAAA,EACA,aAAa;AAAA,EASb,IAAI,aAAqB;AACvB,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,MAAM,eAAgC;AACpC,QAAI,CAAC,KAAK,OAAO,WAAW;AAC1B,YAAM,IAAI,MAAM,kDAAkD;AAAA,IACpE;AACA,WAAO,KAAK,OAAO;AAAA,EACrB;AAAA,EAEA,IAAI,SAAuB;AACzB,YAAQ,IAAI,OAAO;AAAA,EACrB;AAAA,EAEA,KAAK,SAAuB;AAC1B,YAAQ,KAAK,OAAO;AAAA,EACtB;AAAA,EAEA,MAAM,SAAuB;AAC3B,YAAQ,MAAM,OAAO;AAAA,EACvB;AACF;;;AJjFA,SAAS,mBAAmB;AAC5B,SAAS,mBAAmB;AA6B5B,eAAsB,aACpB,aACA,SACwB;AACxB,QAAM,EAAE,WAAW,WAAW,YAAY,YAAY,kBAAkB,IAAI;AAG5E,MAAI,CAAC,eAAe,OAAO,gBAAgB,UAAU;AACnD,WAAO,cAAc,IAAI;AAAA,MACvB,MAAM,WAAW;AAAA,MACjB,SAAS;AAAA,IACX,GAAG,SAAS;AAAA,EACd;AAEA,MAAI,CAAC,WAAW;AACd,WAAO,cAAc,IAAI;AAAA,MACvB,MAAM,WAAW;AAAA,MACjB,SAAS;AAAA,IACX,GAAG,SAAS;AAAA,EACd;AAGA,QAAM,SAAS,SAAS,YAAY,KAAK,CAAC;AAE1C,MAAI,OAAO,WAAW,GAAG;AACvB,WAAO,cAAc,IAAI;AAAA,MACvB,MAAM,WAAW;AAAA,MACjB,SAAS;AAAA,IACX,GAAG,SAAS;AAAA,EACd;AAEA,QAAM,cAAc,mBAAmB,MAAM;AAG7C,QAAM,kBAAkB,eAAe,aAAa,SAAS;AAC7D,MAAI,CAAC,gBAAgB,SAAS;AAC5B,WAAO,cAAc,aAAa,gBAAgB,OAAQ,SAAS;AAAA,EACrE;AAGA,QAAM,kBAAkB;AAAA,IACtB,GAAG;AAAA,IACH;AAAA,IAAY;AAAA,EACd;AAGA,QAAM,MAAM,IAAI,IAAI;AAAA,IAClB,YAAY;AAAA,IACZ,eAAe;AAAA,EACjB,CAAC;AAGD,aAAW,gBAAgB,aAAa;AACtC,QAAI,SAAS,YAAY;AAAA,EAC3B;AAGA,MAAI,aAAa;AACjB,MAAI,aAAa;AAEjB,QAAM,SAAS;AAAA,IACb,MAAM,OAAqC;AACzC,oBAAc,OAAO,UAAU,WAAW,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK;AAChF,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,SAAS;AAAA,IACb,MAAM,OAAqC;AACzC,oBAAc,OAAO,UAAU,WAAW,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK;AAChF,aAAO;AAAA,IACT;AAAA,EACF;AAGA,QAAM,UAAU,IAAI,cAAc,WAAW,UAAU;AACvD,QAAM,SAAS,IAAI,YAAY;AAAA,IAC7B,SAAS;AAAA,IACT,cAAc,YAAY;AAAA,EAC5B,CAAC;AAKD,QAAM,UAAU;AAAA,IACd,OAAO,QAAQ;AAAA,IACf;AAAA,IACA;AAAA,IACA,KAAK,CAAC;AAAA,IACN,YAAY;AAAA,IACZ;AAAA,IACA;AAAA,EACF;AAEA,MAAI;AACF,UAAM,WAAW,MAAM,IAAI,IAAI,iBAAiB,OAAO;AACvD,UAAM,SAAS,WAAW,KAAK;AAC/B,UAAM,cAAc,WAAW,KAAK;AAEpC,QAAI,aAAa,GAAG;AAElB,UAAI;AACF,cAAM,SAAS,SAAS,KAAK,MAAM,MAAM,IAAI;AAC7C,eAAO,gBAAgB,aAAa,QAAQ,SAAS;AAAA,MACvD,QAAQ;AAEN,eAAO,gBAAgB,aAAa,EAAE,MAAM,OAAO,GAAG,SAAS;AAAA,MACjE;AAAA,IACF,OAAO;AAEL,aAAO,cAAc,aAAa;AAAA,QAChC,MAAM,WAAW;AAAA,QACjB,SAAS,eAAe,UAAU,4BAA4B,QAAQ;AAAA,MACxE,GAAG,SAAS;AAAA,IACd;AAAA,EACF,SAAS,OAAO;AAEd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,YAAQ,MAAM,oCAAoC,WAAW,MAAM,KAAK;AAExE,WAAO,cAAc,aAAa;AAAA,MAChC,MAAM,WAAW;AAAA,MACjB;AAAA,IACF,GAAG,SAAS;AAAA,EACd;AACF;","names":[]}

package/package.json

@@ -1,31 +1,39 @@
 {
   "name": "@carto-knowledge/runner",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "type": "module",
-  "main": "./src/index.ts",
-  "types": "./src/index.ts",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
   "exports": {
     ".": {
-      "import": "./src/index.ts",
-      "types": "./src/index.ts"
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
     }
   },
+  "files": [
+    "dist"
+  ],
   "publishConfig": {
     "access": "public"
   },
-  "scripts": {
-    "test": "bun test",
-    "test:watch": "bun test --watch",
-    "typecheck": "bun x tsc --noEmit"
-  },
   "dependencies": {
-    "@carto-knowledge/core": "^0.2.0",
-    "@carto-knowledge/commands": "^0.2.3",
-    "clipanion": "^4.0.0-rc.4"
+    "clipanion": "^4.0.0-rc.4",
+    "@carto-knowledge/commands": "0.2.5",
+    "@carto-knowledge/core": "0.2.1"
   },
   "devDependencies": {
     "@types/bun": "latest",
     "bun-types": "latest",
+    "tsup": "^8.3.5",
     "typescript": "^5.4.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "bun test",
+    "test:watch": "bun test --watch",
+    "typecheck": "bun x tsc --noEmit",
+    "test:runtime": "pnpm build && node --input-type=module -e \"import('./dist/index.js')\""
   }
-}
+}

package/.turbo/turbo-typecheck.log

@@ -1,6 +0,0 @@
-
-> @carto/runner@0.1.0 typecheck /Users/pureicis/dev/carto/frontend_v1/packages/carto-runner
-> bun x tsc --noEmit
-
-../carto-commands/src/librarian/chat.ts(39,21): error TS2339: Property 'folderId' does not exist on type 'CreateConversationRequest'.
- ELIFECYCLE  Command failed with exit code 2.

package/bun.lock

@@ -1,38 +0,0 @@
-{
-  "lockfileVersion": 1,
-  "workspaces": {
-    "": {
-      "name": "@carto/runner",
-      "dependencies": {
-        "@carto-knowledge/commands": "^0.1.0",
-        "@carto-knowledge/core": "^0.1.0",
-        "clipanion": "^4.0.0-rc.4",
-      },
-      "devDependencies": {
-        "@types/bun": "latest",
-        "typescript": "^5.4.0",
-      },
-    },
-  },
-  "packages": {
-    "@carto-knowledge/commands": ["@carto-knowledge/commands@0.1.0", "", { "dependencies": { "@carto-knowledge/core": "^0.1.0", "clipanion": "^4.0.0-rc.4" } }, "sha512-/6JxxaDdyYsyh+Y8Bw9WN4ZMa3yowQN+TBDl8NkymcMyYHnQ6g8DHHOm0vEt0s6U45AlmHlxXn8dNJXHS96I6Q=="],
-
-    "@carto-knowledge/core": ["@carto-knowledge/core@0.1.0", "", { "dependencies": { "zod": "^3.23.0" } }, "sha512-MVYEeSWZY4uNKwVF/WvJEf4vqMNNeYnCnxaR43m4UL5PzIPRdu8+Q/0DLUAzwLktqHXpv9kXIFsVZETXfC7J3g=="],
-
-    "@types/bun": ["@types/bun@1.3.6", "", { "dependencies": { "bun-types": "1.3.6" } }, "sha512-uWCv6FO/8LcpREhenN1d1b6fcspAB+cefwD7uti8C8VffIv0Um08TKMn98FynpTiU38+y2dUO55T11NgDt8VAA=="],
-
-    "@types/node": ["@types/node@22.19.7", "", { "dependencies": { "undici-types": "~6.21.0" } }, "sha512-MciR4AKGHWl7xwxkBa6xUGxQJ4VBOmPTF7sL+iGzuahOFaO0jHCsuEfS80pan1ef4gWId1oWOweIhrDEYLuaOw=="],
-
-    "bun-types": ["bun-types@1.3.6", "", { "dependencies": { "@types/node": "*" } }, "sha512-OlFwHcnNV99r//9v5IIOgQ9Uk37gZqrNMCcqEaExdkVq3Avwqok1bJFmvGMCkCE0FqzdY8VMOZpfpR3lwI+CsQ=="],
-
-    "clipanion": ["clipanion@4.0.0-rc.4", "", { "dependencies": { "typanion": "^3.8.0" } }, "sha512-CXkMQxU6s9GklO/1f714dkKBMu1lopS1WFF0B8o4AxPykR1hpozxSiUZ5ZUeBjfPgCWqbcNOtZVFhB8Lkfp1+Q=="],
-
-    "typanion": ["typanion@3.14.0", "", {}, "sha512-ZW/lVMRabETuYCd9O9ZvMhAh8GslSqaUjxmK/JLPCh6l73CvLBiuXswj/+7LdnWOgYsQ130FqLzFz5aGT4I3Ug=="],
-
-    "typescript": ["typescript@5.9.3", "", { "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" } }, "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw=="],
-
-    "undici-types": ["undici-types@6.21.0", "", {}, "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ=="],
-
-    "zod": ["zod@3.25.76", "", {}, "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ=="],
-  }
-}

package/src/allowlist.test.ts

@@ -1,126 +0,0 @@
-// ABOUTME: Tests for command allowlist validation
-// ABOUTME: Validates command filtering for tool-mode execution
-
-import { describe, it, expect } from 'bun:test';
-import { checkAllowlist, DEFAULT_ALLOWLIST, WRITE_ALLOWLIST } from './allowlist';
-
-describe('checkAllowlist', () => {
-  it('allows exact match', () => {
-    const result = checkAllowlist('folder tree', { commands: ['folder tree'] });
-    expect(result.allowed).toBe(true);
-    expect(result.error).toBeUndefined();
-  });
-
-  it('allows case-insensitive match', () => {
-    const result = checkAllowlist('FOLDER TREE', { commands: ['folder tree'] });
-    expect(result.allowed).toBe(true);
-  });
-
-  it('rejects non-matching command', () => {
-    const result = checkAllowlist('folder delete', { commands: ['folder tree'] });
-    expect(result.allowed).toBe(false);
-    expect(result.error?.code).toBe('COMMAND_NOT_ALLOWED');
-    expect(result.error?.message).toContain('folder delete');
-    expect(result.error?.message).toContain('folder tree');
-  });
-
-  it('allows prefix match', () => {
-    const result = checkAllowlist('folder tree', { commands: ['folder'] });
-    expect(result.allowed).toBe(true);
-  });
-
-  it('handles empty allowlist', () => {
-    const result = checkAllowlist('anything', { commands: [] });
-    expect(result.allowed).toBe(false);
-  });
-
-  it('trims whitespace', () => {
-    const result = checkAllowlist('  folder tree  ', { commands: ['folder tree'] });
-    expect(result.allowed).toBe(true);
-  });
-
-  it('allows multiple commands in allowlist', () => {
-    const result = checkAllowlist('item search', { commands: ['folder tree', 'item search', 'librarian chat'] });
-    expect(result.allowed).toBe(true);
-  });
-
-  it('does not allow partial command name match', () => {
-    // 'fold' should not match 'folder tree'
-    const result = checkAllowlist('fold', { commands: ['folder tree'] });
-    expect(result.allowed).toBe(false);
-  });
-});
-
-describe('DEFAULT_ALLOWLIST', () => {
-  it('includes read-only folder operations', () => {
-    expect(DEFAULT_ALLOWLIST.commands).toContain('folder tree');
-    expect(DEFAULT_ALLOWLIST.commands).toContain('folder list');
-    expect(DEFAULT_ALLOWLIST.commands).toContain('folder get');
-  });
-
-  it('includes read-only item operations', () => {
-    expect(DEFAULT_ALLOWLIST.commands).toContain('item search');
-    expect(DEFAULT_ALLOWLIST.commands).toContain('item get');
-    expect(DEFAULT_ALLOWLIST.commands).toContain('item list');
-    expect(DEFAULT_ALLOWLIST.commands).toContain('item get-by-uri');
-    expect(DEFAULT_ALLOWLIST.commands).toContain('item segments');
-  });
-
-  it('includes read-only edge operations', () => {
-    expect(DEFAULT_ALLOWLIST.commands).toContain('edge list');
-    expect(DEFAULT_ALLOWLIST.commands).toContain('edge get');
-  });
-
-  it('includes read-only share-link operations', () => {
-    expect(DEFAULT_ALLOWLIST.commands).toContain('share-link list');
-    expect(DEFAULT_ALLOWLIST.commands).toContain('share-link analytics');
-  });
-
-  it('includes librarian chat', () => {
-    expect(DEFAULT_ALLOWLIST.commands).toContain('librarian chat');
-  });
-
-  it('does not include write operations', () => {
-    expect(DEFAULT_ALLOWLIST.commands).not.toContain('folder create');
-    expect(DEFAULT_ALLOWLIST.commands).not.toContain('item create');
-    expect(DEFAULT_ALLOWLIST.commands).not.toContain('edge create');
-    expect(DEFAULT_ALLOWLIST.commands).not.toContain('share-link create');
-  });
-});
-
-describe('WRITE_ALLOWLIST', () => {
-  it('includes all read operations', () => {
-    for (const cmd of DEFAULT_ALLOWLIST.commands) {
-      expect(WRITE_ALLOWLIST.commands).toContain(cmd);
-    }
-  });
-
-  it('includes folder write operations', () => {
-    expect(WRITE_ALLOWLIST.commands).toContain('folder create');
-    expect(WRITE_ALLOWLIST.commands).toContain('folder update');
-    expect(WRITE_ALLOWLIST.commands).toContain('folder delete');
-    expect(WRITE_ALLOWLIST.commands).toContain('folder move');
-    expect(WRITE_ALLOWLIST.commands).toContain('folder restructure');
-    expect(WRITE_ALLOWLIST.commands).toContain('folder create-tree');
-  });
-
-  it('includes item write operations', () => {
-    expect(WRITE_ALLOWLIST.commands).toContain('item create');
-    expect(WRITE_ALLOWLIST.commands).toContain('item update');
-    expect(WRITE_ALLOWLIST.commands).toContain('item delete');
-    expect(WRITE_ALLOWLIST.commands).toContain('item update content');
-    expect(WRITE_ALLOWLIST.commands).toContain('item upload');
-    expect(WRITE_ALLOWLIST.commands).toContain('item assign');
-  });
-
-  it('includes edge write operations', () => {
-    expect(WRITE_ALLOWLIST.commands).toContain('edge create');
-    expect(WRITE_ALLOWLIST.commands).toContain('edge update');
-    expect(WRITE_ALLOWLIST.commands).toContain('edge delete');
-  });
-
-  it('includes share-link write operations', () => {
-    expect(WRITE_ALLOWLIST.commands).toContain('share-link create');
-    expect(WRITE_ALLOWLIST.commands).toContain('share-link delete');
-  });
-});

package/src/allowlist.ts

@@ -1,105 +0,0 @@
-// ABOUTME: Validates commands against an allowlist for tool-mode execution
-// ABOUTME: Prevents unauthorized command execution in Worker context
-
-export interface AllowlistConfig {
-  commands: string[];  // e.g., ['folder tree', 'item search']
-}
-
-export interface AllowlistResult {
-  allowed: boolean;
-  error?: {
-    code: 'COMMAND_NOT_ALLOWED';
-    message: string;
-  };
-}
-
-/**
- * Checks if a command matches the allowlist.
- *
- * Defensive validation:
- * - Normalizes command path (lowercase, trim)
- * - Supports prefix matching for subcommands
- */
-export function checkAllowlist(
-  commandPath: string,
-  config: AllowlistConfig
-): AllowlistResult {
-  const normalizedPath = commandPath.toLowerCase().trim();
-
-  // Check exact match
-  if (config.commands.some(cmd => cmd.toLowerCase() === normalizedPath)) {
-    return { allowed: true };
-  }
-
-  // Check prefix match (e.g., 'folder' allows 'folder tree', 'folder create')
-  if (config.commands.some(cmd => normalizedPath.startsWith(cmd.toLowerCase() + ' '))) {
-    return { allowed: true };
-  }
-
-  return {
-    allowed: false,
-    error: {
-      code: 'COMMAND_NOT_ALLOWED',
-      message: `Command '${commandPath}' is not in the allowlist. ` +
-        `Allowed commands: ${config.commands.join(', ')}`,
-    },
-  };
-}
-
-/**
- * Default allowlist for Worker tool mode.
- * Read-only operations by default.
- */
-export const DEFAULT_ALLOWLIST: AllowlistConfig = {
-  commands: [
-    // Folder reads
-    'folder tree',
-    'folder list',
-    'folder get',
-    // Item reads
-    'item search',
-    'item get',
-    'item list',
-    'item get-by-uri',
-    'item segments',
-    // Edge reads
-    'edge list',
-    'edge get',
-    // Share link reads
-    'share-link list',
-    'share-link analytics',
-    // Librarian
-    'librarian chat',
-  ],
-};
-
-/**
- * Extended allowlist including write operations.
- * Use when agent needs to modify data.
- */
-export const WRITE_ALLOWLIST: AllowlistConfig = {
-  commands: [
-    ...DEFAULT_ALLOWLIST.commands,
-    // Folder writes
-    'folder create',
-    'folder update',
-    'folder delete',
-    'folder move',
-    'folder restructure',
-    'folder create-tree',
-    // Item writes
-    'item create',
-    'item update',
-    'item delete',
-    'item update content',
-    'item upload',
-    'item assign',
-    // Edge writes
-    'edge create',
-    'edge update',
-    'edge delete',
-    // Share link writes
-    'share-link create',
-    'share-link delete',
-  ],
-};