@corenel/harness 0.1.0

package/dist/tools/todo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"todo.js","sourceRoot":"","sources":["../../tools/todo.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,aAAa,GAAc;IACtC,IAAI,EAAE,YAAY;IAClB,SAAS,EAAE,IAAI,EAAE,+DAA+D;IAChF,WAAW,EACT,mGAAmG;QACnG,mGAAmG;QACnG,qGAAqG;QACrG,uGAAuG;QACvG,mDAAmD;IACrD,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,KAAK,EAAE;gBACL,IAAI,EAAE,OAAO;gBACb,WAAW,EAAE,6CAA6C;gBAC1D,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uDAAuD,EAAE;wBAC5F,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+CAA+C,EAAE;wBACvF,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE;wBACpF,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,2BAA2B,EAAE;wBAClE,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,6BAA6B,EAAE;wBACnG,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gDAAgD,EAAE;qBAC5F;oBACD,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC;iBACpC;aACF;SACF;QACD,QAAQ,EAAE,CAAC,OAAO,CAAC;KACpB;IACD,KAAK,CAAC,GAAG,CAAC,IAAI;QACZ,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAE,IAA4B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,IAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACzG,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,WAAW,CAAC,CAAC,MAAM,CAAC;QAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,aAAa,CAAC,CAAC;QACtE,OAAO,sBAAsB,IAAI,IAAI,KAAK,CAAC,MAAM,QAAQ,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;IACtG,CAAC;CACF,CAAC"}

package/dist/tools/urlGuard.d.ts

@@ -0,0 +1,9 @@
+/** Validate a tool-supplied URL. Returns null when allowed, else a human-readable
+ * reason it is refused (http(s) only; no internal/loopback/metadata hosts). */
+export declare function outboundUrlError(raw: string): string | null;
+/** fetch() with SSRF protection: the URL and every redirect hop are validated by
+ * outboundUrlError, following redirects MANUALLY so a 3xx can't escape to an
+ * internal host. Throws Error(reason) on a blocked URL/hop. In the browser a
+ * cross-origin redirect is opaque (unreadable) and is refused rather than followed. */
+export declare function safeFetch(url: string, init?: RequestInit): Promise<Response>;
+//# sourceMappingURL=urlGuard.d.ts.map

package/dist/tools/urlGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"urlGuard.d.ts","sourceRoot":"","sources":["../../tools/urlGuard.ts"],"names":[],"mappings":"AAiCA;+EAC+E;AAC/E,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAU3D;AAID;;;uFAGuF;AACvF,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,CActF"}

package/dist/tools/urlGuard.js

@@ -0,0 +1,80 @@
+/* SSRF guard for outbound HTTP issued by agent/workflow tools. The kernel is
+ * host-agnostic: the same api_request tool / api node runs in the browser (where
+ * the same-origin policy limits reach) AND in the Node/sidecar host (where it does
+ * not), so refusing internal targets has to live HERE, not rely on CORS.
+ *
+ * outboundUrlError validates a single URL (scheme + host); safeFetch follows
+ * redirects manually so a 3xx can't bounce from an allowed host to an internal one.
+ */
+/** Hostnames / IP literals a tool-driven request must never reach: loopback,
+ * link-local (incl. the cloud metadata endpoint), private and CGNAT ranges. */
+function isBlockedHost(host) {
+    const h = host.toLowerCase().replace(/^\[/, '').replace(/\]$/, ''); // strip IPv6 brackets
+    if (!h)
+        return true;
+    if (h === 'localhost' || h.endsWith('.localhost'))
+        return true;
+    if (h === 'metadata.google.internal' || h.endsWith('.internal') || h.endsWith('.local'))
+        return true;
+    // IPv6 loopback / unspecified / unique-local (fc00::/7) / link-local (fe80::/10).
+    if (h === '::1' || h === '::')
+        return true;
+    if (/^f[cd][0-9a-f]{2}:/.test(h) || /^fe[89ab][0-9a-f]:/.test(h))
+        return true;
+    // IPv4 literal.
+    const m = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(h);
+    if (m) {
+        const a = Number(m[1]);
+        const b = Number(m[2]);
+        if (a === 0 || a === 10 || a === 127)
+            return true; // this-host / private / loopback
+        if (a === 169 && b === 254)
+            return true; // link-local + cloud metadata (169.254.169.254)
+        if (a === 172 && b >= 16 && b <= 31)
+            return true; // private
+        if (a === 192 && b === 168)
+            return true; // private
+        if (a === 100 && b >= 64 && b <= 127)
+            return true; // CGNAT (100.64.0.0/10)
+    }
+    return false;
+}
+/** Validate a tool-supplied URL. Returns null when allowed, else a human-readable
+ * reason it is refused (http(s) only; no internal/loopback/metadata hosts). */
+export function outboundUrlError(raw) {
+    let u;
+    try {
+        u = new URL(raw);
+    }
+    catch {
+        return `invalid URL: "${raw}"`;
+    }
+    if (u.protocol !== 'http:' && u.protocol !== 'https:')
+        return `url must be http(s): "${raw}"`;
+    if (isBlockedHost(u.hostname))
+        return `refusing to call an internal/loopback host: "${u.hostname}"`;
+    return null;
+}
+const MAX_REDIRECTS = 5;
+/** fetch() with SSRF protection: the URL and every redirect hop are validated by
+ * outboundUrlError, following redirects MANUALLY so a 3xx can't escape to an
+ * internal host. Throws Error(reason) on a blocked URL/hop. In the browser a
+ * cross-origin redirect is opaque (unreadable) and is refused rather than followed. */
+export async function safeFetch(url, init = {}) {
+    let current = url;
+    for (let hop = 0; hop <= MAX_REDIRECTS; hop++) {
+        const bad = outboundUrlError(current);
+        if (bad)
+            throw new Error(bad);
+        const res = await fetch(current, { ...init, redirect: 'manual' });
+        if (res.type === 'opaqueredirect')
+            throw new Error('refusing to follow an opaque cross-origin redirect');
+        if (res.status >= 300 && res.status < 400 && res.headers.has('location')) {
+            current = new URL(res.headers.get('location'), current).toString();
+            continue;
+        }
+        return res;
+    }
+    throw new Error(`too many redirects (> ${MAX_REDIRECTS})`);
+}
+//# sourceMappingURL=urlGuard.js.map

package/dist/tools/urlGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"urlGuard.js","sourceRoot":"","sources":["../../tools/urlGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;+EAC+E;AAC/E,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,sBAAsB;IAC1F,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,CAAC,KAAK,0BAA0B,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACrG,kFAAkF;IAClF,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9E,gBAAgB;IAChB,MAAM,CAAC,GAAG,8CAA8C,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,EAAE,CAAC;QACN,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,iCAAiC;QACpF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,gDAAgD;QACzF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC,CAAC,UAAU;QAC5D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,UAAU;QACnD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB;IAC7E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;+EAC+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,GAAG,GAAG,CAAC;IACjC,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,yBAAyB,GAAG,GAAG,CAAC;IAC9F,IAAI,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,OAAO,gDAAgD,CAAC,CAAC,QAAQ,GAAG,CAAC;IACpG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB;;;uFAGuF;AACvF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,OAAoB,EAAE;IACjE,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClE,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACzG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACzE,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC7E,SAAS;QACX,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,aAAa,GAAG,CAAC,CAAC;AAC7D,CAAC"}

package/dist/tools/web.d.ts

@@ -0,0 +1,3 @@
+import type { AgentTool } from '@corenel/protocol';
+export declare const webSearchTool: AgentTool;
+//# sourceMappingURL=web.d.ts.map

package/dist/tools/web.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../../tools/web.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAOnD,eAAO,MAAM,aAAa,EAAE,SA6B3B,CAAC"}

package/dist/tools/web.js

@@ -0,0 +1,35 @@
+function str(args, key) {
+    const v = args[key];
+    return typeof v === 'string' ? v : v == null ? '' : String(v);
+}
+export const webSearchTool = {
+    name: 'web_search',
+    // Gateway-backed (can spend the Prompd-paid Tavily fallback) — account-gated
+    // when run directly from the console.
+    requiresFeature: 'llm-execution',
+    description: 'Search the web for current information and return the top results (title, URL, snippet) ' +
+        'plus a short synthesized answer. Use for facts that may be recent or outside your knowledge.',
+    parameters: {
+        type: 'object',
+        properties: { query: { type: 'string', description: 'The search query.' } },
+        required: ['query'],
+    },
+    async run(args, ctx) {
+        if (!ctx.http)
+            throw new Error('Web search is unavailable here.');
+        const query = str(args, 'query');
+        if (!query.trim())
+            throw new Error('Provide a non-empty query.');
+        const r = await ctx.http.post('/tools/web-search', { query });
+        const data = r?.data || {};
+        const results = data.results || [];
+        const parts = [];
+        if (data.answer)
+            parts.push(`Answer: ${data.answer}`);
+        if (results.length) {
+            parts.push(results.map((x, i) => `${i + 1}. ${x.title || x.url}\n${x.url}\n${(x.content || '').trim()}`).join('\n\n'));
+        }
+        return parts.join('\n\n') || 'No results.';
+    },
+};
+//# sourceMappingURL=web.js.map

package/dist/tools/web.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web.js","sourceRoot":"","sources":["../../tools/web.ts"],"names":[],"mappings":"AAKA,SAAS,GAAG,CAAC,IAA6B,EAAE,GAAW;IACrD,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAc;IACtC,IAAI,EAAE,YAAY;IAClB,6EAA6E;IAC7E,sCAAsC;IACtC,eAAe,EAAE,eAAe;IAChC,WAAW,EACT,0FAA0F;QAC1F,8FAA8F;IAChG,UAAU,EAAE;QACV,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE,EAAE;QAC3E,QAAQ,EAAE,CAAC,OAAO,CAAC;KACpB;IACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG;QACjB,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;QAC3B,MAAM,OAAO,GAA8D,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QAC9F,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACtD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CACR,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAC3G,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC;IAC7C,CAAC;CACF,CAAC"}

package/package.json

@@ -0,0 +1,55 @@
+{
+  "name": "@corenel/harness",
+  "version": "0.1.0",
+  "type": "module",
+  "description": "Corenel — host-agnostic agent harness (kernel). Consumed as source; the app resolves it via the `corenel` path alias, node consumers via this workspace package + the exports map below. The app never hits these exports (the alias intercepts first), so the .ts-only wildcard is safe — node only ever imports the clean .ts kernel subpaths (e.g. corenel/sidecar/server), never the coupled .tsx UI.",
+  "exports": {
+    ".": "./index.ts",
+    "./guardrail": "./guardrail/index.ts",
+    "./prompts": "./prompts/index.ts",
+    "./prompts/library": "./prompts/library/index.ts",
+    "./*": "./*.ts"
+  },
+  "dependencies": {
+    "@corenel/protocol": "workspace:*",
+    "openai": "^4.77.0",
+    "yaml": "^2.8.3"
+  },
+  "peerDependencies": {
+    "@xyflow/react": "^12.11.0",
+    "dagre": "^0.8.5",
+    "react": "^18.3.1"
+  },
+  "publishConfig": {
+    "access": "public",
+    "exports": {
+      ".": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "./guardrail": {
+        "types": "./dist/guardrail/index.d.ts",
+        "default": "./dist/guardrail/index.js"
+      },
+      "./prompts": {
+        "types": "./dist/prompts/index.d.ts",
+        "default": "./dist/prompts/index.js"
+      },
+      "./prompts/library": {
+        "types": "./dist/prompts/library/index.d.ts",
+        "default": "./dist/prompts/library/index.js"
+      },
+      "./*": {
+        "types": "./dist/*.d.ts",
+        "default": "./dist/*.js"
+      }
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "prepublishOnly": "tsc -p tsconfig.build.json"
+  }
+}