@det-acp/core 0.2.0 → 0.3.0

package/dist/tools/file-delete.js

@@ -0,0 +1,143 @@
+/**
+ * file:delete — Scoped file deletion tool adapter.
+ *
+ * Deletes files within allowed path scopes, enforcing policy constraints.
+ * Creates a full backup of file contents for rollback support.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import { z } from 'zod';
+import { ToolAdapter } from './base.js';
+import { evaluateAction } from '../policy/evaluator.js';
+export const FileDeleteInputSchema = z.object({
+    path: z.string().min(1, 'File path is required'),
+    /** If true, do not error when the file does not exist */
+    force: z.boolean().default(false),
+});
+export class FileDeleteAdapter extends ToolAdapter {
+    name = 'file:delete';
+    description = 'Delete a file within allowed path scopes (with backup for rollback)';
+    inputSchema = FileDeleteInputSchema;
+    validate(input, policy) {
+        const parsed = FileDeleteInputSchema.safeParse(input);
+        if (!parsed.success) {
+            return {
+                verdict: 'deny',
+                tool: this.name,
+                reasons: parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`),
+            };
+        }
+        return evaluateAction({ tool: this.name, input: parsed.data }, policy);
+    }
+    async dryRun(input, _ctx) {
+        const { path: filePath, force } = input;
+        const absPath = path.resolve(filePath);
+        const exists = fs.existsSync(absPath);
+        const warnings = [];
+        if (!exists && !force) {
+            warnings.push(`File does not exist: ${absPath}`);
+        }
+        let size = 0;
+        if (exists) {
+            try {
+                const stat = fs.statSync(absPath);
+                size = stat.size;
+                if (stat.isDirectory()) {
+                    warnings.push(`Path is a directory, not a file: ${absPath}`);
+                }
+            }
+            catch {
+                warnings.push(`Cannot stat file: ${absPath}`);
+            }
+        }
+        return {
+            tool: this.name,
+            wouldDo: exists
+                ? `Delete file: ${absPath} (${size} bytes)`
+                : `No-op: file does not exist: ${absPath}`,
+            estimatedChanges: exists ? [absPath] : [],
+            warnings,
+        };
+    }
+    async execute(input, ctx) {
+        const start = Date.now();
+        const { path: filePath, force } = input;
+        const absPath = path.resolve(filePath);
+        const artifacts = [];
+        try {
+            const exists = fs.existsSync(absPath);
+            if (!exists) {
+                if (force) {
+                    return this.success({ path: absPath, deleted: false, reason: 'File did not exist' }, Date.now() - start);
+                }
+                return this.failure(`File does not exist: ${absPath}`, Date.now() - start);
+            }
+            // Verify it's a file, not a directory
+            const stat = fs.statSync(absPath);
+            if (stat.isDirectory()) {
+                return this.failure(`Path is a directory, not a file: ${absPath}`, Date.now() - start);
+            }
+            // Backup file content for rollback
+            const content = fs.readFileSync(absPath);
+            const checksum = crypto.createHash('sha256').update(content).digest('hex');
+            artifacts.push({
+                type: 'checksum',
+                value: `sha256:${checksum}`,
+                description: `Checksum of deleted file: ${absPath}`,
+            });
+            artifacts.push({
+                type: 'log',
+                value: `Deleted: ${absPath} (${stat.size} bytes)`,
+                description: 'Deletion record',
+            });
+            // Store rollback data (full content backup)
+            const rollbackKey = `file:delete:${absPath}`;
+            ctx.rollbackData[rollbackKey] = {
+                path: absPath,
+                content: content.toString('base64'),
+                mode: stat.mode,
+            };
+            // Delete the file
+            fs.unlinkSync(absPath);
+            ctx.budget.filesChanged++;
+            return this.success({ path: absPath, deleted: true, size: stat.size }, Date.now() - start, artifacts);
+        }
+        catch (err) {
+            return this.failure(err.message, Date.now() - start);
+        }
+    }
+    async rollback(input, ctx) {
+        const { path: filePath } = input;
+        const absPath = path.resolve(filePath);
+        const rollbackKey = `file:delete:${absPath}`;
+        const rollbackData = ctx.rollbackData[rollbackKey];
+        if (!rollbackData) {
+            return {
+                tool: this.name,
+                success: false,
+                description: 'No rollback data available',
+                error: 'Rollback data not found — execute() may not have been called',
+            };
+        }
+        try {
+            // Restore the file from the base64-encoded backup
+            const content = Buffer.from(rollbackData.content, 'base64');
+            fs.writeFileSync(rollbackData.path, content, { mode: rollbackData.mode });
+            return {
+                tool: this.name,
+                success: true,
+                description: `Restored deleted file: ${rollbackData.path}`,
+            };
+        }
+        catch (err) {
+            return {
+                tool: this.name,
+                success: false,
+                description: `Failed to restore deleted file: ${rollbackData.path}`,
+                error: err.message,
+            };
+        }
+    }
+}
+//# sourceMappingURL=file-delete.js.map

package/dist/tools/file-delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-delete.js","sourceRoot":"","sources":["../../src/tools/file-delete.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAWxD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;IAChD,yDAAyD;IACzD,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAClC,CAAC,CAAC;AAIH,MAAM,OAAO,iBAAkB,SAAQ,WAAW;IACvC,IAAI,GAAG,aAAa,CAAC;IACrB,WAAW,GAAG,qEAAqE,CAAC;IACpF,WAAW,GAAG,qBAAqB,CAAC;IAE7C,QAAQ,CAAC,KAAc,EAAE,MAAc;QACrC,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7E,CAAC;QACJ,CAAC;QAED,OAAO,cAAc,CACnB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,EACvC,MAAM,CACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B,EAAE,IAAsB;QACjE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAwB,CAAC;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAClC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;gBACjB,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBACvB,QAAQ,CAAC,IAAI,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,IAAI,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,MAAM;gBACb,CAAC,CAAC,gBAAgB,OAAO,KAAK,IAAI,SAAS;gBAC3C,CAAC,CAAC,+BAA+B,OAAO,EAAE;YAC5C,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;YACzC,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA8B,EAAE,GAAqB;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAwB,CAAC;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,SAAS,GAAwB,EAAE,CAAC;QAE1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAC/D,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CACnB,CAAC;gBACJ,CAAC;gBACD,OAAO,IAAI,CAAC,OAAO,CAAC,wBAAwB,OAAO,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;YAC7E,CAAC;YAED,sCAAsC;YACtC,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC,OAAO,CAAC,oCAAoC,OAAO,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;YACzF,CAAC;YAED,mCAAmC;YACnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE3E,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,UAAU,QAAQ,EAAE;gBAC3B,WAAW,EAAE,6BAA6B,OAAO,EAAE;aACpD,CAAC,CAAC;YAEH,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE,YAAY,OAAO,KAAK,IAAI,CAAC,IAAI,SAAS;gBACjD,WAAW,EAAE,iBAAiB;aAC/B,CAAC,CAAC;YAEH,4CAA4C;YAC5C,MAAM,WAAW,GAAG,eAAe,OAAO,EAAE,CAAC;YAC7C,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG;gBAC9B,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACnC,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC;YAEF,kBAAkB;YAClB,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAEvB,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAE1B,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EACjD,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAClB,SAAS,CACV,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,OAAO,CAAE,GAAa,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA8B,EAAE,GAAqB;QAClE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAwB,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,eAAe,OAAO,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,WAAW,CAIpC,CAAC;QAEd,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,4BAA4B;gBACzC,KAAK,EAAE,8DAA8D;aACtE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,kDAAkD;YAClD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC5D,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;YAE1E,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,0BAA0B,YAAY,CAAC,IAAI,EAAE;aAC3D,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,mCAAmC,YAAY,CAAC,IAAI,EAAE;gBACnE,KAAK,EAAG,GAAa,CAAC,OAAO;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/tools/file-move.d.ts

@@ -0,0 +1,30 @@
+/**
+ * file:move — Scoped file move/rename tool adapter.
+ *
+ * Moves or renames files within allowed path scopes.
+ * Both source and destination must be within policy scope.
+ * Full rollback support: moves the file back to original location.
+ */
+import { z } from 'zod';
+import { ToolAdapter } from './base.js';
+import type { DryRunResult, ExecutionContext, ExecutionResult, Policy, RollbackResult, ValidationResult } from '../types.js';
+export declare const FileMoveInputSchema: z.ZodObject<{
+    source: z.ZodString;
+    destination: z.ZodString;
+    overwrite: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type FileMoveInput = z.infer<typeof FileMoveInputSchema>;
+export declare class FileMoveAdapter extends ToolAdapter {
+    readonly name = "file:move";
+    readonly description = "Move or rename a file within allowed path scopes";
+    readonly inputSchema: z.ZodObject<{
+        source: z.ZodString;
+        destination: z.ZodString;
+        overwrite: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>;
+    validate(input: unknown, policy: Policy): ValidationResult;
+    dryRun(input: Record<string, unknown>, _ctx: ExecutionContext): Promise<DryRunResult>;
+    execute(input: Record<string, unknown>, ctx: ExecutionContext): Promise<ExecutionResult>;
+    rollback(input: Record<string, unknown>, ctx: ExecutionContext): Promise<RollbackResult>;
+}
+//# sourceMappingURL=file-move.d.ts.map

package/dist/tools/file-move.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-move.d.ts","sourceRoot":"","sources":["../../src/tools/file-move.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,eAAe,EAEf,MAAM,EACN,cAAc,EACd,gBAAgB,EACjB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,mBAAmB;;;;iBAK9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,qBAAa,eAAgB,SAAQ,WAAW;IAC9C,QAAQ,CAAC,IAAI,eAAe;IAC5B,QAAQ,CAAC,WAAW,sDAAsD;IAC1E,QAAQ,CAAC,WAAW;;;;sBAAuB;IAE3C,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB;IAyCpD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;IA2BrF,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAmExF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC;CA+C/F"}

package/dist/tools/file-move.js

@@ -0,0 +1,167 @@
+/**
+ * file:move — Scoped file move/rename tool adapter.
+ *
+ * Moves or renames files within allowed path scopes.
+ * Both source and destination must be within policy scope.
+ * Full rollback support: moves the file back to original location.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import { z } from 'zod';
+import { ToolAdapter } from './base.js';
+import { evaluateAction } from '../policy/evaluator.js';
+export const FileMoveInputSchema = z.object({
+    source: z.string().min(1, 'Source path is required'),
+    destination: z.string().min(1, 'Destination path is required'),
+    /** Overwrite destination if it exists */
+    overwrite: z.boolean().default(false),
+});
+export class FileMoveAdapter extends ToolAdapter {
+    name = 'file:move';
+    description = 'Move or rename a file within allowed path scopes';
+    inputSchema = FileMoveInputSchema;
+    validate(input, policy) {
+        const parsed = FileMoveInputSchema.safeParse(input);
+        if (!parsed.success) {
+            return {
+                verdict: 'deny',
+                tool: this.name,
+                reasons: parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`),
+            };
+        }
+        // Validate both source and destination paths against the policy
+        const sourceResult = evaluateAction({ tool: this.name, input: { ...parsed.data, path: parsed.data.source } }, policy);
+        if (sourceResult.verdict === 'deny') {
+            return {
+                ...sourceResult,
+                reasons: sourceResult.reasons.map((r) => `Source: ${r}`),
+            };
+        }
+        const destResult = evaluateAction({ tool: this.name, input: { ...parsed.data, path: parsed.data.destination } }, policy);
+        if (destResult.verdict === 'deny') {
+            return {
+                ...destResult,
+                reasons: destResult.reasons.map((r) => `Destination: ${r}`),
+            };
+        }
+        // Return the more restrictive result (gate > allow)
+        if (sourceResult.verdict === 'gate' || destResult.verdict === 'gate') {
+            return sourceResult.verdict === 'gate' ? sourceResult : destResult;
+        }
+        return sourceResult;
+    }
+    async dryRun(input, _ctx) {
+        const { source, destination, overwrite } = input;
+        const absSrc = path.resolve(source);
+        const absDest = path.resolve(destination);
+        const warnings = [];
+        if (!fs.existsSync(absSrc)) {
+            warnings.push(`Source file does not exist: ${absSrc}`);
+        }
+        if (fs.existsSync(absDest) && !overwrite) {
+            warnings.push(`Destination already exists and overwrite is false: ${absDest}`);
+        }
+        const destDir = path.dirname(absDest);
+        if (!fs.existsSync(destDir)) {
+            warnings.push(`Destination directory does not exist: ${destDir}`);
+        }
+        return {
+            tool: this.name,
+            wouldDo: `Move ${absSrc} → ${absDest}`,
+            estimatedChanges: [absSrc, absDest],
+            warnings,
+        };
+    }
+    async execute(input, ctx) {
+        const start = Date.now();
+        const { source, destination, overwrite } = input;
+        const absSrc = path.resolve(source);
+        const absDest = path.resolve(destination);
+        const artifacts = [];
+        try {
+            // Check source exists
+            if (!fs.existsSync(absSrc)) {
+                return this.failure(`Source file does not exist: ${absSrc}`, Date.now() - start);
+            }
+            // Check destination doesn't exist (unless overwrite)
+            let destExisted = false;
+            let destPreviousContent = null;
+            if (fs.existsSync(absDest)) {
+                if (!overwrite) {
+                    return this.failure(`Destination already exists: ${absDest}. Set overwrite: true to replace.`, Date.now() - start);
+                }
+                destExisted = true;
+                destPreviousContent = fs.readFileSync(absDest, 'base64');
+            }
+            // Checksum source before move
+            const srcContent = fs.readFileSync(absSrc);
+            const srcChecksum = crypto.createHash('sha256').update(srcContent).digest('hex');
+            artifacts.push({
+                type: 'checksum',
+                value: `sha256:${srcChecksum}`,
+                description: `Checksum of moved file (source: ${absSrc})`,
+            });
+            artifacts.push({
+                type: 'log',
+                value: `Moved: ${absSrc} → ${absDest}`,
+                description: 'Move record',
+            });
+            // Store rollback data
+            const rollbackKey = `file:move:${absSrc}:${absDest}`;
+            ctx.rollbackData[rollbackKey] = {
+                source: absSrc,
+                destination: absDest,
+                destExisted,
+                destPreviousContent,
+            };
+            // Execute the move
+            fs.renameSync(absSrc, absDest);
+            ctx.budget.filesChanged++;
+            return this.success({ source: absSrc, destination: absDest, size: srcContent.length }, Date.now() - start, artifacts);
+        }
+        catch (err) {
+            return this.failure(err.message, Date.now() - start);
+        }
+    }
+    async rollback(input, ctx) {
+        const { source, destination } = input;
+        const absSrc = path.resolve(source);
+        const absDest = path.resolve(destination);
+        const rollbackKey = `file:move:${absSrc}:${absDest}`;
+        const rollbackData = ctx.rollbackData[rollbackKey];
+        if (!rollbackData) {
+            return {
+                tool: this.name,
+                success: false,
+                description: 'No rollback data available',
+                error: 'Rollback data not found — execute() may not have been called',
+            };
+        }
+        try {
+            // Move file back to original location
+            if (fs.existsSync(rollbackData.destination)) {
+                fs.renameSync(rollbackData.destination, rollbackData.source);
+            }
+            // Restore overwritten destination if applicable
+            if (rollbackData.destExisted && rollbackData.destPreviousContent !== null) {
+                const content = Buffer.from(rollbackData.destPreviousContent, 'base64');
+                fs.writeFileSync(rollbackData.destination, content);
+            }
+            return {
+                tool: this.name,
+                success: true,
+                description: `Moved ${rollbackData.destination} back to ${rollbackData.source}`,
+            };
+        }
+        catch (err) {
+            return {
+                tool: this.name,
+                success: false,
+                description: `Failed to rollback file move`,
+                error: err.message,
+            };
+        }
+    }
+}
+//# sourceMappingURL=file-move.js.map

package/dist/tools/file-move.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-move.js","sourceRoot":"","sources":["../../src/tools/file-move.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAWxD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;IACpD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,8BAA8B,CAAC;IAC9D,yCAAyC;IACzC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACtC,CAAC,CAAC;AAIH,MAAM,OAAO,eAAgB,SAAQ,WAAW;IACrC,IAAI,GAAG,WAAW,CAAC;IACnB,WAAW,GAAG,kDAAkD,CAAC;IACjE,WAAW,GAAG,mBAAmB,CAAC;IAE3C,QAAQ,CAAC,KAAc,EAAE,MAAc;QACrC,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7E,CAAC;QACJ,CAAC;QAED,gEAAgE;QAChE,MAAM,YAAY,GAAG,cAAc,CACjC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EACxE,MAAM,CACP,CAAC;QACF,IAAI,YAAY,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YACpC,OAAO;gBACL,GAAG,YAAY;gBACf,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;aACzD,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,cAAc,CAC/B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,EAC7E,MAAM,CACP,CAAC;QACF,IAAI,UAAU,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAClC,OAAO;gBACL,GAAG,UAAU;gBACb,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC;aAC5D,CAAC;QACJ,CAAC;QAED,oDAAoD;QACpD,IAAI,YAAY,CAAC,OAAO,KAAK,MAAM,IAAI,UAAU,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YACrE,OAAO,YAAY,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;QACrE,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B,EAAE,IAAsB;QACjE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,KAAsB,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,QAAQ,CAAC,IAAI,CAAC,sDAAsD,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,yCAAyC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,QAAQ,MAAM,MAAM,OAAO,EAAE;YACtC,gBAAgB,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;YACnC,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA8B,EAAE,GAAqB;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,KAAsB,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAwB,EAAE,CAAC;QAE1C,IAAI,CAAC;YACH,sBAAsB;YACtB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,+BAA+B,MAAM,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;YACnF,CAAC;YAED,qDAAqD;YACrD,IAAI,WAAW,GAAG,KAAK,CAAC;YACxB,IAAI,mBAAmB,GAAkB,IAAI,CAAC;YAC9C,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,IAAI,CAAC,OAAO,CACjB,+BAA+B,OAAO,mCAAmC,EACzE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CACnB,CAAC;gBACJ,CAAC;gBACD,WAAW,GAAG,IAAI,CAAC;gBACnB,mBAAmB,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC3D,CAAC;YAED,8BAA8B;YAC9B,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjF,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,UAAU,WAAW,EAAE;gBAC9B,WAAW,EAAE,mCAAmC,MAAM,GAAG;aAC1D,CAAC,CAAC;YAEH,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE,UAAU,MAAM,MAAM,OAAO,EAAE;gBACtC,WAAW,EAAE,aAAa;aAC3B,CAAC,CAAC;YAEH,sBAAsB;YACtB,MAAM,WAAW,GAAG,aAAa,MAAM,IAAI,OAAO,EAAE,CAAC;YACrD,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG;gBAC9B,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,OAAO;gBACpB,WAAW;gBACX,mBAAmB;aACpB,CAAC;YAEF,mBAAmB;YACnB,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAE/B,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAE1B,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,EACjE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAClB,SAAS,CACV,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,OAAO,CAAE,GAAa,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA8B,EAAE,GAAqB;QAClE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,KAAsB,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,aAAa,MAAM,IAAI,OAAO,EAAE,CAAC;QACrD,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,WAAW,CAKpC,CAAC;QAEd,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,4BAA4B;gBACzC,KAAK,EAAE,8DAA8D;aACtE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,sCAAsC;YACtC,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5C,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YAC/D,CAAC;YAED,gDAAgD;YAChD,IAAI,YAAY,CAAC,WAAW,IAAI,YAAY,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;gBAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;gBACxE,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACtD,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,SAAS,YAAY,CAAC,WAAW,YAAY,YAAY,CAAC,MAAM,EAAE;aAChF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,8BAA8B;gBAC3C,KAAK,EAAG,GAAa,CAAC,OAAO;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/tools/git-commit.d.ts

@@ -0,0 +1,33 @@
+/**
+ * git:commit — Scoped git commit tool adapter.
+ *
+ * Stages and commits changes in a repository.
+ * Rollback support via git revert.
+ */
+import { z } from 'zod';
+import { ToolAdapter } from './base.js';
+import type { DryRunResult, ExecutionContext, ExecutionResult, Policy, RollbackResult, ValidationResult } from '../types.js';
+export declare const GitCommitInputSchema: z.ZodObject<{
+    repo: z.ZodString;
+    message: z.ZodString;
+    paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    stageAll: z.ZodDefault<z.ZodBoolean>;
+    author: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type GitCommitInput = z.infer<typeof GitCommitInputSchema>;
+export declare class GitCommitAdapter extends ToolAdapter {
+    readonly name = "git:commit";
+    readonly description = "Stage and commit changes in a git repository";
+    readonly inputSchema: z.ZodObject<{
+        repo: z.ZodString;
+        message: z.ZodString;
+        paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        stageAll: z.ZodDefault<z.ZodBoolean>;
+        author: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    validate(input: unknown, policy: Policy): ValidationResult;
+    dryRun(input: Record<string, unknown>, _ctx: ExecutionContext): Promise<DryRunResult>;
+    execute(input: Record<string, unknown>, ctx: ExecutionContext): Promise<ExecutionResult>;
+    rollback(input: Record<string, unknown>, ctx: ExecutionContext): Promise<RollbackResult>;
+}
+//# sourceMappingURL=git-commit.d.ts.map

package/dist/tools/git-commit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-commit.d.ts","sourceRoot":"","sources":["../../src/tools/git-commit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,eAAe,EAEf,MAAM,EACN,cAAc,EACd,gBAAgB,EACjB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,oBAAoB;;;;;;iBAS/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,qBAAa,gBAAiB,SAAQ,WAAW;IAC/C,QAAQ,CAAC,IAAI,gBAAgB;IAC7B,QAAQ,CAAC,WAAW,kDAAkD;IACtE,QAAQ,CAAC,WAAW;;;;;;sBAAwB;IAE5C,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB;IAgBpD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;IA2BrF,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IA8ExF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC;CA4D/F"}

package/dist/tools/git-commit.js

@@ -0,0 +1,176 @@
+/**
+ * git:commit — Scoped git commit tool adapter.
+ *
+ * Stages and commits changes in a repository.
+ * Rollback support via git revert.
+ */
+import { execSync } from 'node:child_process';
+import crypto from 'node:crypto';
+import { z } from 'zod';
+import { ToolAdapter } from './base.js';
+import { evaluateAction } from '../policy/evaluator.js';
+export const GitCommitInputSchema = z.object({
+    repo: z.string().min(1, 'Repository path is required'),
+    message: z.string().min(1, 'Commit message is required'),
+    /** Paths to stage before committing. If empty, commits currently staged changes. */
+    paths: z.array(z.string()).optional(),
+    /** Stage all tracked changes (git add -u) before committing */
+    stageAll: z.boolean().default(false),
+    /** Author override in "Name <email>" format */
+    author: z.string().optional(),
+});
+export class GitCommitAdapter extends ToolAdapter {
+    name = 'git:commit';
+    description = 'Stage and commit changes in a git repository';
+    inputSchema = GitCommitInputSchema;
+    validate(input, policy) {
+        const parsed = GitCommitInputSchema.safeParse(input);
+        if (!parsed.success) {
+            return {
+                verdict: 'deny',
+                tool: this.name,
+                reasons: parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`),
+            };
+        }
+        return evaluateAction({ tool: this.name, input: parsed.data }, policy);
+    }
+    async dryRun(input, _ctx) {
+        const { repo, message, paths, stageAll } = input;
+        const warnings = [];
+        try {
+            // Check if there are changes to commit
+            const status = execSync('git status --porcelain', {
+                cwd: repo,
+                encoding: 'utf-8',
+                timeout: 10000,
+            }).trim();
+            if (!status && !paths?.length && !stageAll) {
+                warnings.push('No changes detected to commit');
+            }
+        }
+        catch (err) {
+            warnings.push(`Cannot check git status: ${err.message}`);
+        }
+        return {
+            tool: this.name,
+            wouldDo: `Commit to ${repo}: "${message.slice(0, 72)}"${stageAll ? ' (staging all)' : ''}`,
+            estimatedChanges: [`Git commit in ${repo}`],
+            warnings,
+        };
+    }
+    async execute(input, ctx) {
+        const start = Date.now();
+        const { repo, message, paths, stageAll, author } = input;
+        const artifacts = [];
+        try {
+            // Stage changes
+            if (paths && paths.length > 0) {
+                const sanitizedPaths = paths.map((p) => `"${p}"`).join(' ');
+                execSync(`git add ${sanitizedPaths}`, {
+                    cwd: repo,
+                    encoding: 'utf-8',
+                    timeout: 10000,
+                });
+            }
+            else if (stageAll) {
+                execSync('git add -u', {
+                    cwd: repo,
+                    encoding: 'utf-8',
+                    timeout: 10000,
+                });
+            }
+            // Build commit command
+            let commitCmd = `git commit -m "${message.replace(/"/g, '\\"')}"`;
+            if (author) {
+                commitCmd += ` --author="${author.replace(/"/g, '\\"')}"`;
+            }
+            const output = execSync(commitCmd, {
+                cwd: repo,
+                encoding: 'utf-8',
+                timeout: 30000,
+            });
+            // Get the commit hash
+            const commitHash = execSync('git rev-parse HEAD', {
+                cwd: repo,
+                encoding: 'utf-8',
+                timeout: 5000,
+            }).trim();
+            const messageHash = crypto.createHash('sha256').update(message).digest('hex');
+            artifacts.push({
+                type: 'checksum',
+                value: `commit:${commitHash}`,
+                description: `Commit hash`,
+            });
+            artifacts.push({
+                type: 'checksum',
+                value: `message:sha256:${messageHash}`,
+                description: 'Commit message hash',
+            });
+            artifacts.push({
+                type: 'log',
+                value: output.trim().slice(0, 4096),
+                description: 'Git commit output',
+            });
+            // Store rollback data
+            const rollbackKey = `git:commit:${repo}:${commitHash}`;
+            ctx.rollbackData[rollbackKey] = {
+                repo,
+                commitHash,
+            };
+            return this.success({ commitHash, message, repo }, Date.now() - start, artifacts);
+        }
+        catch (err) {
+            return this.failure(err.message, Date.now() - start);
+        }
+    }
+    async rollback(input, ctx) {
+        const { repo } = input;
+        // Find the rollback data by searching for the repo key prefix
+        const rollbackKey = Object.keys(ctx.rollbackData).find((k) => k.startsWith(`git:commit:${repo}:`));
+        if (!rollbackKey) {
+            return {
+                tool: this.name,
+                success: false,
+                description: 'No rollback data available',
+                error: 'Rollback data not found — execute() may not have been called',
+            };
+        }
+        const rollbackData = ctx.rollbackData[rollbackKey];
+        try {
+            // Verify HEAD is still the commit we made
+            const currentHead = execSync('git rev-parse HEAD', {
+                cwd: rollbackData.repo,
+                encoding: 'utf-8',
+                timeout: 5000,
+            }).trim();
+            if (currentHead !== rollbackData.commitHash) {
+                return {
+                    tool: this.name,
+                    success: false,
+                    description: 'Cannot rollback — HEAD has moved since the commit was made',
+                    error: `Expected HEAD ${rollbackData.commitHash}, found ${currentHead}`,
+                };
+            }
+            // Soft reset to undo the commit while keeping changes staged
+            execSync('git reset --soft HEAD~1', {
+                cwd: rollbackData.repo,
+                encoding: 'utf-8',
+                timeout: 10000,
+            });
+            return {
+                tool: this.name,
+                success: true,
+                description: `Rolled back commit ${rollbackData.commitHash} (changes are staged)`,
+            };
+        }
+        catch (err) {
+            return {
+                tool: this.name,
+                success: false,
+                description: `Failed to rollback git commit`,
+                error: err.message,
+            };
+        }
+    }
+}
+//# sourceMappingURL=git-commit.js.map

package/dist/tools/git-commit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-commit.js","sourceRoot":"","sources":["../../src/tools/git-commit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAWxD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,6BAA6B,CAAC;IACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,4BAA4B,CAAC;IACxD,oFAAoF;IACpF,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrC,+DAA+D;IAC/D,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,+CAA+C;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAIH,MAAM,OAAO,gBAAiB,SAAQ,WAAW;IACtC,IAAI,GAAG,YAAY,CAAC;IACpB,WAAW,GAAG,8CAA8C,CAAC;IAC7D,WAAW,GAAG,oBAAoB,CAAC;IAE5C,QAAQ,CAAC,KAAc,EAAE,MAAc;QACrC,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7E,CAAC;QACJ,CAAC;QAED,OAAO,cAAc,CACnB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,EACvC,MAAM,CACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B,EAAE,IAAsB;QACjE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,KAAuB,CAAC;QACnE,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,CAAC;YACH,uCAAuC;YACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,wBAAwB,EAAE;gBAChD,GAAG,EAAE,IAAI;gBACT,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,KAAK;aACf,CAAC,CAAC,IAAI,EAAE,CAAC;YAEV,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC3C,QAAQ,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,4BAA6B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,aAAa,IAAI,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE;YAC1F,gBAAgB,EAAE,CAAC,iBAAiB,IAAI,EAAE,CAAC;YAC3C,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA8B,EAAE,GAAqB;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,KAAuB,CAAC;QAC3E,MAAM,SAAS,GAAwB,EAAE,CAAC;QAE1C,IAAI,CAAC;YACH,gBAAgB;YAChB,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,cAAc,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC5D,QAAQ,CAAC,WAAW,cAAc,EAAE,EAAE;oBACpC,GAAG,EAAE,IAAI;oBACT,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,KAAK;iBACf,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,QAAQ,EAAE,CAAC;gBACpB,QAAQ,CAAC,YAAY,EAAE;oBACrB,GAAG,EAAE,IAAI;oBACT,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,KAAK;iBACf,CAAC,CAAC;YACL,CAAC;YAED,uBAAuB;YACvB,IAAI,SAAS,GAAG,kBAAkB,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;YAClE,IAAI,MAAM,EAAE,CAAC;gBACX,SAAS,IAAI,cAAc,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC;YAC5D,CAAC;YAED,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE;gBACjC,GAAG,EAAE,IAAI;gBACT,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YAEH,sBAAsB;YACtB,MAAM,UAAU,GAAG,QAAQ,CAAC,oBAAoB,EAAE;gBAChD,GAAG,EAAE,IAAI;gBACT,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,IAAI;aACd,CAAC,CAAC,IAAI,EAAE,CAAC;YAEV,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE9E,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,UAAU,UAAU,EAAE;gBAC7B,WAAW,EAAE,aAAa;aAC3B,CAAC,CAAC;YAEH,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,kBAAkB,WAAW,EAAE;gBACtC,WAAW,EAAE,qBAAqB;aACnC,CAAC,CAAC;YAEH,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;gBACnC,WAAW,EAAE,mBAAmB;aACjC,CAAC,CAAC;YAEH,sBAAsB;YACtB,MAAM,WAAW,GAAG,cAAc,IAAI,IAAI,UAAU,EAAE,CAAC;YACvD,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG;gBAC9B,IAAI;gBACJ,UAAU;aACX,CAAC;YAEF,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,EAC7B,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAClB,SAAS,CACV,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,OAAO,CAAE,GAAa,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA8B,EAAE,GAAqB;QAClE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAuB,CAAC;QAEzC,8DAA8D;QAC9D,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CACpD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,IAAI,GAAG,CAAC,CAC3C,CAAC;QAEF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,4BAA4B;gBACzC,KAAK,EAAE,8DAA8D;aACtE,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,WAAW,CAGhD,CAAC;QAEF,IAAI,CAAC;YACH,0CAA0C;YAC1C,MAAM,WAAW,GAAG,QAAQ,CAAC,oBAAoB,EAAE;gBACjD,GAAG,EAAE,YAAY,CAAC,IAAI;gBACtB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,IAAI;aACd,CAAC,CAAC,IAAI,EAAE,CAAC;YAEV,IAAI,WAAW,KAAK,YAAY,CAAC,UAAU,EAAE,CAAC;gBAC5C,OAAO;oBACL,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,OAAO,EAAE,KAAK;oBACd,WAAW,EAAE,4DAA4D;oBACzE,KAAK,EAAE,iBAAiB,YAAY,CAAC,UAAU,WAAW,WAAW,EAAE;iBACxE,CAAC;YACJ,CAAC;YAED,6DAA6D;YAC7D,QAAQ,CAAC,yBAAyB,EAAE;gBAClC,GAAG,EAAE,YAAY,CAAC,IAAI;gBACtB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,KAAK;aACf,CAAC,CAAC;YAEH,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,sBAAsB,YAAY,CAAC,UAAU,uBAAuB;aAClF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,+BAA+B;gBAC5C,KAAK,EAAG,GAAa,CAAC,OAAO;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/tools/git-status.d.ts

@@ -0,0 +1,29 @@
+/**
+ * git:status — Read-only git status tool adapter.
+ *
+ * Reports the working tree status of a git repository.
+ * Read-only operation — no rollback needed.
+ */
+import { z } from 'zod';
+import { ToolAdapter } from './base.js';
+import type { DryRunResult, ExecutionContext, ExecutionResult, Policy, RollbackResult, ValidationResult } from '../types.js';
+export declare const GitStatusInputSchema: z.ZodObject<{
+    repo: z.ZodString;
+    short: z.ZodDefault<z.ZodBoolean>;
+    branch: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type GitStatusInput = z.infer<typeof GitStatusInputSchema>;
+export declare class GitStatusAdapter extends ToolAdapter {
+    readonly name = "git:status";
+    readonly description = "Get git working tree status for a repository";
+    readonly inputSchema: z.ZodObject<{
+        repo: z.ZodString;
+        short: z.ZodDefault<z.ZodBoolean>;
+        branch: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>;
+    validate(input: unknown, policy: Policy): ValidationResult;
+    dryRun(input: Record<string, unknown>, _ctx: ExecutionContext): Promise<DryRunResult>;
+    execute(input: Record<string, unknown>, _ctx: ExecutionContext): Promise<ExecutionResult>;
+    rollback(_input: Record<string, unknown>, _ctx: ExecutionContext): Promise<RollbackResult>;
+}
+//# sourceMappingURL=git-status.d.ts.map

package/dist/tools/git-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-status.d.ts","sourceRoot":"","sources":["../../src/tools/git-status.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,MAAM,EACN,cAAc,EACd,gBAAgB,EACjB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,oBAAoB;;;;iBAM/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAQlE,qBAAa,gBAAiB,SAAQ,WAAW;IAC/C,QAAQ,CAAC,IAAI,gBAAgB;IAC7B,QAAQ,CAAC,WAAW,kDAAkD;IACtE,QAAQ,CAAC,WAAW;;;;sBAAwB;IAE5C,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB;IAgBpD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;IAUrF,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAoHzF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC;CAOjG"}