@det-acp/core 0.2.1 → 0.3.0

package/dist/tools/file-copy.js

@@ -0,0 +1,170 @@
+/**
+ * file:copy — Scoped file copy tool adapter.
+ *
+ * Copies files within allowed path scopes.
+ * Both source and destination must be within policy scope.
+ * Rollback support: removes the copied file (or restores overwritten content).
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import { z } from 'zod';
+import { ToolAdapter } from './base.js';
+import { evaluateAction } from '../policy/evaluator.js';
+export const FileCopyInputSchema = z.object({
+    source: z.string().min(1, 'Source path is required'),
+    destination: z.string().min(1, 'Destination path is required'),
+    /** Overwrite destination if it exists */
+    overwrite: z.boolean().default(false),
+});
+export class FileCopyAdapter extends ToolAdapter {
+    name = 'file:copy';
+    description = 'Copy a file within allowed path scopes';
+    inputSchema = FileCopyInputSchema;
+    validate(input, policy) {
+        const parsed = FileCopyInputSchema.safeParse(input);
+        if (!parsed.success) {
+            return {
+                verdict: 'deny',
+                tool: this.name,
+                reasons: parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`),
+            };
+        }
+        // Source must be readable
+        const sourceResult = evaluateAction({ tool: 'file:read', input: { path: parsed.data.source } }, policy);
+        if (sourceResult.verdict === 'deny') {
+            return {
+                verdict: 'deny',
+                tool: this.name,
+                reasons: sourceResult.reasons.map((r) => `Source: ${r}`),
+            };
+        }
+        // Destination must be writable
+        const destResult = evaluateAction({ tool: 'file:write', input: { path: parsed.data.destination, content: '' } }, policy);
+        if (destResult.verdict === 'deny') {
+            return {
+                verdict: 'deny',
+                tool: this.name,
+                reasons: destResult.reasons.map((r) => `Destination: ${r}`),
+            };
+        }
+        // Evaluate the copy action itself for gate checks
+        return evaluateAction({ tool: this.name, input: parsed.data }, policy);
+    }
+    async dryRun(input, _ctx) {
+        const { source, destination, overwrite } = input;
+        const absSrc = path.resolve(source);
+        const absDest = path.resolve(destination);
+        const warnings = [];
+        if (!fs.existsSync(absSrc)) {
+            warnings.push(`Source file does not exist: ${absSrc}`);
+        }
+        if (fs.existsSync(absDest) && !overwrite) {
+            warnings.push(`Destination already exists and overwrite is false: ${absDest}`);
+        }
+        const destDir = path.dirname(absDest);
+        if (!fs.existsSync(destDir)) {
+            warnings.push(`Destination directory does not exist: ${destDir}`);
+        }
+        return {
+            tool: this.name,
+            wouldDo: `Copy ${absSrc} → ${absDest}`,
+            estimatedChanges: [absDest],
+            warnings,
+        };
+    }
+    async execute(input, ctx) {
+        const start = Date.now();
+        const { source, destination, overwrite } = input;
+        const absSrc = path.resolve(source);
+        const absDest = path.resolve(destination);
+        const artifacts = [];
+        try {
+            if (!fs.existsSync(absSrc)) {
+                return this.failure(`Source file does not exist: ${absSrc}`, Date.now() - start);
+            }
+            // Check destination
+            let destExisted = false;
+            let destPreviousContent = null;
+            if (fs.existsSync(absDest)) {
+                if (!overwrite) {
+                    return this.failure(`Destination already exists: ${absDest}. Set overwrite: true to replace.`, Date.now() - start);
+                }
+                destExisted = true;
+                destPreviousContent = fs.readFileSync(absDest, 'base64');
+            }
+            // Read source and compute checksum
+            const srcContent = fs.readFileSync(absSrc);
+            const srcChecksum = crypto.createHash('sha256').update(srcContent).digest('hex');
+            artifacts.push({
+                type: 'checksum',
+                value: `sha256:${srcChecksum}`,
+                description: `Checksum of copied file`,
+            });
+            artifacts.push({
+                type: 'log',
+                value: `Copied: ${absSrc} → ${absDest} (${srcContent.length} bytes)`,
+                description: 'Copy record',
+            });
+            // Store rollback data
+            const rollbackKey = `file:copy:${absSrc}:${absDest}`;
+            ctx.rollbackData[rollbackKey] = {
+                destination: absDest,
+                destExisted,
+                destPreviousContent,
+            };
+            // Execute the copy
+            fs.copyFileSync(absSrc, absDest);
+            ctx.budget.filesChanged++;
+            ctx.budget.totalOutputBytes += srcContent.length;
+            return this.success({ source: absSrc, destination: absDest, size: srcContent.length }, Date.now() - start, artifacts);
+        }
+        catch (err) {
+            return this.failure(err.message, Date.now() - start);
+        }
+    }
+    async rollback(input, ctx) {
+        const { source, destination } = input;
+        const absSrc = path.resolve(source);
+        const absDest = path.resolve(destination);
+        const rollbackKey = `file:copy:${absSrc}:${absDest}`;
+        const rollbackData = ctx.rollbackData[rollbackKey];
+        if (!rollbackData) {
+            return {
+                tool: this.name,
+                success: false,
+                description: 'No rollback data available',
+                error: 'Rollback data not found — execute() may not have been called',
+            };
+        }
+        try {
+            if (rollbackData.destExisted && rollbackData.destPreviousContent !== null) {
+                // Restore overwritten destination
+                const content = Buffer.from(rollbackData.destPreviousContent, 'base64');
+                fs.writeFileSync(rollbackData.destination, content);
+            }
+            else {
+                // Remove the copied file
+                if (fs.existsSync(rollbackData.destination)) {
+                    fs.unlinkSync(rollbackData.destination);
+                }
+            }
+            return {
+                tool: this.name,
+                success: true,
+                description: rollbackData.destExisted
+                    ? `Restored original content at ${rollbackData.destination}`
+                    : `Removed copied file ${rollbackData.destination}`,
+            };
+        }
+        catch (err) {
+            return {
+                tool: this.name,
+                success: false,
+                description: `Failed to rollback file copy`,
+                error: err.message,
+            };
+        }
+    }
+}
+//# sourceMappingURL=file-copy.js.map

package/dist/tools/file-copy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-copy.js","sourceRoot":"","sources":["../../src/tools/file-copy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAWxD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;IACpD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,8BAA8B,CAAC;IAC9D,yCAAyC;IACzC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACtC,CAAC,CAAC;AAIH,MAAM,OAAO,eAAgB,SAAQ,WAAW;IACrC,IAAI,GAAG,WAAW,CAAC;IACnB,WAAW,GAAG,wCAAwC,CAAC;IACvD,WAAW,GAAG,mBAAmB,CAAC;IAE3C,QAAQ,CAAC,KAAc,EAAE,MAAc;QACrC,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7E,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,MAAM,YAAY,GAAG,cAAc,CACjC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAC1D,MAAM,CACP,CAAC;QACF,IAAI,YAAY,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;aACzD,CAAC;QACJ,CAAC;QAED,+BAA+B;QAC/B,MAAM,UAAU,GAAG,cAAc,CAC/B,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAC7E,MAAM,CACP,CAAC;QACF,IAAI,UAAU,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC;aAC5D,CAAC;QACJ,CAAC;QAED,kDAAkD;QAClD,OAAO,cAAc,CACnB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,EACvC,MAAM,CACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B,EAAE,IAAsB;QACjE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,KAAsB,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,QAAQ,CAAC,IAAI,CAAC,sDAAsD,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,yCAAyC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,QAAQ,MAAM,MAAM,OAAO,EAAE;YACtC,gBAAgB,EAAE,CAAC,OAAO,CAAC;YAC3B,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA8B,EAAE,GAAqB;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,KAAsB,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAwB,EAAE,CAAC;QAE1C,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,+BAA+B,MAAM,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;YACnF,CAAC;YAED,oBAAoB;YACpB,IAAI,WAAW,GAAG,KAAK,CAAC;YACxB,IAAI,mBAAmB,GAAkB,IAAI,CAAC;YAC9C,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,IAAI,CAAC,OAAO,CACjB,+BAA+B,OAAO,mCAAmC,EACzE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CACnB,CAAC;gBACJ,CAAC;gBACD,WAAW,GAAG,IAAI,CAAC;gBACnB,mBAAmB,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC3D,CAAC;YAED,mCAAmC;YACnC,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjF,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,UAAU,WAAW,EAAE;gBAC9B,WAAW,EAAE,yBAAyB;aACvC,CAAC,CAAC;YAEH,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE,WAAW,MAAM,MAAM,OAAO,KAAK,UAAU,CAAC,MAAM,SAAS;gBACpE,WAAW,EAAE,aAAa;aAC3B,CAAC,CAAC;YAEH,sBAAsB;YACtB,MAAM,WAAW,GAAG,aAAa,MAAM,IAAI,OAAO,EAAE,CAAC;YACrD,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG;gBAC9B,WAAW,EAAE,OAAO;gBACpB,WAAW;gBACX,mBAAmB;aACpB,CAAC;YAEF,mBAAmB;YACnB,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAEjC,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC1B,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,UAAU,CAAC,MAAM,CAAC;YAEjD,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,EACjE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAClB,SAAS,CACV,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,OAAO,CAAE,GAAa,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA8B,EAAE,GAAqB;QAClE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,KAAsB,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,aAAa,MAAM,IAAI,OAAO,EAAE,CAAC;QACrD,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,WAAW,CAIpC,CAAC;QAEd,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,4BAA4B;gBACzC,KAAK,EAAE,8DAA8D;aACtE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,IAAI,YAAY,CAAC,WAAW,IAAI,YAAY,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;gBAC1E,kCAAkC;gBAClC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;gBACxE,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACtD,CAAC;iBAAM,CAAC;gBACN,yBAAyB;gBACzB,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC5C,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,YAAY,CAAC,WAAW;oBACnC,CAAC,CAAC,gCAAgC,YAAY,CAAC,WAAW,EAAE;oBAC5D,CAAC,CAAC,uBAAuB,YAAY,CAAC,WAAW,EAAE;aACtD,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,8BAA8B;gBAC3C,KAAK,EAAG,GAAa,CAAC,OAAO;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/tools/file-delete.d.ts

@@ -0,0 +1,27 @@
+/**
+ * file:delete — Scoped file deletion tool adapter.
+ *
+ * Deletes files within allowed path scopes, enforcing policy constraints.
+ * Creates a full backup of file contents for rollback support.
+ */
+import { z } from 'zod';
+import { ToolAdapter } from './base.js';
+import type { DryRunResult, ExecutionContext, ExecutionResult, Policy, RollbackResult, ValidationResult } from '../types.js';
+export declare const FileDeleteInputSchema: z.ZodObject<{
+    path: z.ZodString;
+    force: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type FileDeleteInput = z.infer<typeof FileDeleteInputSchema>;
+export declare class FileDeleteAdapter extends ToolAdapter {
+    readonly name = "file:delete";
+    readonly description = "Delete a file within allowed path scopes (with backup for rollback)";
+    readonly inputSchema: z.ZodObject<{
+        path: z.ZodString;
+        force: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>;
+    validate(input: unknown, policy: Policy): ValidationResult;
+    dryRun(input: Record<string, unknown>, _ctx: ExecutionContext): Promise<DryRunResult>;
+    execute(input: Record<string, unknown>, ctx: ExecutionContext): Promise<ExecutionResult>;
+    rollback(input: Record<string, unknown>, ctx: ExecutionContext): Promise<RollbackResult>;
+}
+//# sourceMappingURL=file-delete.d.ts.map

package/dist/tools/file-delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-delete.d.ts","sourceRoot":"","sources":["../../src/tools/file-delete.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,eAAe,EAEf,MAAM,EACN,cAAc,EACd,gBAAgB,EACjB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,qBAAqB;;;iBAIhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,qBAAa,iBAAkB,SAAQ,WAAW;IAChD,QAAQ,CAAC,IAAI,iBAAiB;IAC9B,QAAQ,CAAC,WAAW,yEAAyE;IAC7F,QAAQ,CAAC,WAAW;;;sBAAyB;IAE7C,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB;IAgBpD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;IAiCrF,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAgExF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC;CAsC/F"}

package/dist/tools/file-delete.js

@@ -0,0 +1,143 @@
+/**
+ * file:delete — Scoped file deletion tool adapter.
+ *
+ * Deletes files within allowed path scopes, enforcing policy constraints.
+ * Creates a full backup of file contents for rollback support.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import { z } from 'zod';
+import { ToolAdapter } from './base.js';
+import { evaluateAction } from '../policy/evaluator.js';
+export const FileDeleteInputSchema = z.object({
+    path: z.string().min(1, 'File path is required'),
+    /** If true, do not error when the file does not exist */
+    force: z.boolean().default(false),
+});
+export class FileDeleteAdapter extends ToolAdapter {
+    name = 'file:delete';
+    description = 'Delete a file within allowed path scopes (with backup for rollback)';
+    inputSchema = FileDeleteInputSchema;
+    validate(input, policy) {
+        const parsed = FileDeleteInputSchema.safeParse(input);
+        if (!parsed.success) {
+            return {
+                verdict: 'deny',
+                tool: this.name,
+                reasons: parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`),
+            };
+        }
+        return evaluateAction({ tool: this.name, input: parsed.data }, policy);
+    }
+    async dryRun(input, _ctx) {
+        const { path: filePath, force } = input;
+        const absPath = path.resolve(filePath);
+        const exists = fs.existsSync(absPath);
+        const warnings = [];
+        if (!exists && !force) {
+            warnings.push(`File does not exist: ${absPath}`);
+        }
+        let size = 0;
+        if (exists) {
+            try {
+                const stat = fs.statSync(absPath);
+                size = stat.size;
+                if (stat.isDirectory()) {
+                    warnings.push(`Path is a directory, not a file: ${absPath}`);
+                }
+            }
+            catch {
+                warnings.push(`Cannot stat file: ${absPath}`);
+            }
+        }
+        return {
+            tool: this.name,
+            wouldDo: exists
+                ? `Delete file: ${absPath} (${size} bytes)`
+                : `No-op: file does not exist: ${absPath}`,
+            estimatedChanges: exists ? [absPath] : [],
+            warnings,
+        };
+    }
+    async execute(input, ctx) {
+        const start = Date.now();
+        const { path: filePath, force } = input;
+        const absPath = path.resolve(filePath);
+        const artifacts = [];
+        try {
+            const exists = fs.existsSync(absPath);
+            if (!exists) {
+                if (force) {
+                    return this.success({ path: absPath, deleted: false, reason: 'File did not exist' }, Date.now() - start);
+                }
+                return this.failure(`File does not exist: ${absPath}`, Date.now() - start);
+            }
+            // Verify it's a file, not a directory
+            const stat = fs.statSync(absPath);
+            if (stat.isDirectory()) {
+                return this.failure(`Path is a directory, not a file: ${absPath}`, Date.now() - start);
+            }
+            // Backup file content for rollback
+            const content = fs.readFileSync(absPath);
+            const checksum = crypto.createHash('sha256').update(content).digest('hex');
+            artifacts.push({
+                type: 'checksum',
+                value: `sha256:${checksum}`,
+                description: `Checksum of deleted file: ${absPath}`,
+            });
+            artifacts.push({
+                type: 'log',
+                value: `Deleted: ${absPath} (${stat.size} bytes)`,
+                description: 'Deletion record',
+            });
+            // Store rollback data (full content backup)
+            const rollbackKey = `file:delete:${absPath}`;
+            ctx.rollbackData[rollbackKey] = {
+                path: absPath,
+                content: content.toString('base64'),
+                mode: stat.mode,
+            };
+            // Delete the file
+            fs.unlinkSync(absPath);
+            ctx.budget.filesChanged++;
+            return this.success({ path: absPath, deleted: true, size: stat.size }, Date.now() - start, artifacts);
+        }
+        catch (err) {
+            return this.failure(err.message, Date.now() - start);
+        }
+    }
+    async rollback(input, ctx) {
+        const { path: filePath } = input;
+        const absPath = path.resolve(filePath);
+        const rollbackKey = `file:delete:${absPath}`;
+        const rollbackData = ctx.rollbackData[rollbackKey];
+        if (!rollbackData) {
+            return {
+                tool: this.name,
+                success: false,
+                description: 'No rollback data available',
+                error: 'Rollback data not found — execute() may not have been called',
+            };
+        }
+        try {
+            // Restore the file from the base64-encoded backup
+            const content = Buffer.from(rollbackData.content, 'base64');
+            fs.writeFileSync(rollbackData.path, content, { mode: rollbackData.mode });
+            return {
+                tool: this.name,
+                success: true,
+                description: `Restored deleted file: ${rollbackData.path}`,
+            };
+        }
+        catch (err) {
+            return {
+                tool: this.name,
+                success: false,
+                description: `Failed to restore deleted file: ${rollbackData.path}`,
+                error: err.message,
+            };
+        }
+    }
+}
+//# sourceMappingURL=file-delete.js.map

package/dist/tools/file-delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-delete.js","sourceRoot":"","sources":["../../src/tools/file-delete.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAWxD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC;IAChD,yDAAyD;IACzD,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAClC,CAAC,CAAC;AAIH,MAAM,OAAO,iBAAkB,SAAQ,WAAW;IACvC,IAAI,GAAG,aAAa,CAAC;IACrB,WAAW,GAAG,qEAAqE,CAAC;IACpF,WAAW,GAAG,qBAAqB,CAAC;IAE7C,QAAQ,CAAC,KAAc,EAAE,MAAc;QACrC,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7E,CAAC;QACJ,CAAC;QAED,OAAO,cAAc,CACnB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,EACvC,MAAM,CACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B,EAAE,IAAsB;QACjE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAwB,CAAC;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAClC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;gBACjB,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBACvB,QAAQ,CAAC,IAAI,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,CAAC,IAAI,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,MAAM;gBACb,CAAC,CAAC,gBAAgB,OAAO,KAAK,IAAI,SAAS;gBAC3C,CAAC,CAAC,+BAA+B,OAAO,EAAE;YAC5C,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;YACzC,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA8B,EAAE,GAAqB;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAwB,CAAC;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,SAAS,GAAwB,EAAE,CAAC;QAE1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAC/D,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CACnB,CAAC;gBACJ,CAAC;gBACD,OAAO,IAAI,CAAC,OAAO,CAAC,wBAAwB,OAAO,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;YAC7E,CAAC;YAED,sCAAsC;YACtC,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,OAAO,IAAI,CAAC,OAAO,CAAC,oCAAoC,OAAO,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;YACzF,CAAC;YAED,mCAAmC;YACnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAE3E,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,UAAU,QAAQ,EAAE;gBAC3B,WAAW,EAAE,6BAA6B,OAAO,EAAE;aACpD,CAAC,CAAC;YAEH,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE,YAAY,OAAO,KAAK,IAAI,CAAC,IAAI,SAAS;gBACjD,WAAW,EAAE,iBAAiB;aAC/B,CAAC,CAAC;YAEH,4CAA4C;YAC5C,MAAM,WAAW,GAAG,eAAe,OAAO,EAAE,CAAC;YAC7C,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG;gBAC9B,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACnC,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB,CAAC;YAEF,kBAAkB;YAClB,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAEvB,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAE1B,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EACjD,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAClB,SAAS,CACV,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,OAAO,CAAE,GAAa,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA8B,EAAE,GAAqB;QAClE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAwB,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,eAAe,OAAO,EAAE,CAAC;QAC7C,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,WAAW,CAIpC,CAAC;QAEd,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,4BAA4B;gBACzC,KAAK,EAAE,8DAA8D;aACtE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,kDAAkD;YAClD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC5D,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;YAE1E,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,0BAA0B,YAAY,CAAC,IAAI,EAAE;aAC3D,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,mCAAmC,YAAY,CAAC,IAAI,EAAE;gBACnE,KAAK,EAAG,GAAa,CAAC,OAAO;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/tools/file-move.d.ts

@@ -0,0 +1,30 @@
+/**
+ * file:move — Scoped file move/rename tool adapter.
+ *
+ * Moves or renames files within allowed path scopes.
+ * Both source and destination must be within policy scope.
+ * Full rollback support: moves the file back to original location.
+ */
+import { z } from 'zod';
+import { ToolAdapter } from './base.js';
+import type { DryRunResult, ExecutionContext, ExecutionResult, Policy, RollbackResult, ValidationResult } from '../types.js';
+export declare const FileMoveInputSchema: z.ZodObject<{
+    source: z.ZodString;
+    destination: z.ZodString;
+    overwrite: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type FileMoveInput = z.infer<typeof FileMoveInputSchema>;
+export declare class FileMoveAdapter extends ToolAdapter {
+    readonly name = "file:move";
+    readonly description = "Move or rename a file within allowed path scopes";
+    readonly inputSchema: z.ZodObject<{
+        source: z.ZodString;
+        destination: z.ZodString;
+        overwrite: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>;
+    validate(input: unknown, policy: Policy): ValidationResult;
+    dryRun(input: Record<string, unknown>, _ctx: ExecutionContext): Promise<DryRunResult>;
+    execute(input: Record<string, unknown>, ctx: ExecutionContext): Promise<ExecutionResult>;
+    rollback(input: Record<string, unknown>, ctx: ExecutionContext): Promise<RollbackResult>;
+}
+//# sourceMappingURL=file-move.d.ts.map

package/dist/tools/file-move.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-move.d.ts","sourceRoot":"","sources":["../../src/tools/file-move.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,eAAe,EAEf,MAAM,EACN,cAAc,EACd,gBAAgB,EACjB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,mBAAmB;;;;iBAK9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,qBAAa,eAAgB,SAAQ,WAAW;IAC9C,QAAQ,CAAC,IAAI,eAAe;IAC5B,QAAQ,CAAC,WAAW,sDAAsD;IAC1E,QAAQ,CAAC,WAAW;;;;sBAAuB;IAE3C,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB;IAyCpD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;IA2BrF,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IAmExF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC;CA+C/F"}

package/dist/tools/file-move.js

@@ -0,0 +1,167 @@
+/**
+ * file:move — Scoped file move/rename tool adapter.
+ *
+ * Moves or renames files within allowed path scopes.
+ * Both source and destination must be within policy scope.
+ * Full rollback support: moves the file back to original location.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import { z } from 'zod';
+import { ToolAdapter } from './base.js';
+import { evaluateAction } from '../policy/evaluator.js';
+export const FileMoveInputSchema = z.object({
+    source: z.string().min(1, 'Source path is required'),
+    destination: z.string().min(1, 'Destination path is required'),
+    /** Overwrite destination if it exists */
+    overwrite: z.boolean().default(false),
+});
+export class FileMoveAdapter extends ToolAdapter {
+    name = 'file:move';
+    description = 'Move or rename a file within allowed path scopes';
+    inputSchema = FileMoveInputSchema;
+    validate(input, policy) {
+        const parsed = FileMoveInputSchema.safeParse(input);
+        if (!parsed.success) {
+            return {
+                verdict: 'deny',
+                tool: this.name,
+                reasons: parsed.error.issues.map((i) => `${i.path.join('.')}: ${i.message}`),
+            };
+        }
+        // Validate both source and destination paths against the policy
+        const sourceResult = evaluateAction({ tool: this.name, input: { ...parsed.data, path: parsed.data.source } }, policy);
+        if (sourceResult.verdict === 'deny') {
+            return {
+                ...sourceResult,
+                reasons: sourceResult.reasons.map((r) => `Source: ${r}`),
+            };
+        }
+        const destResult = evaluateAction({ tool: this.name, input: { ...parsed.data, path: parsed.data.destination } }, policy);
+        if (destResult.verdict === 'deny') {
+            return {
+                ...destResult,
+                reasons: destResult.reasons.map((r) => `Destination: ${r}`),
+            };
+        }
+        // Return the more restrictive result (gate > allow)
+        if (sourceResult.verdict === 'gate' || destResult.verdict === 'gate') {
+            return sourceResult.verdict === 'gate' ? sourceResult : destResult;
+        }
+        return sourceResult;
+    }
+    async dryRun(input, _ctx) {
+        const { source, destination, overwrite } = input;
+        const absSrc = path.resolve(source);
+        const absDest = path.resolve(destination);
+        const warnings = [];
+        if (!fs.existsSync(absSrc)) {
+            warnings.push(`Source file does not exist: ${absSrc}`);
+        }
+        if (fs.existsSync(absDest) && !overwrite) {
+            warnings.push(`Destination already exists and overwrite is false: ${absDest}`);
+        }
+        const destDir = path.dirname(absDest);
+        if (!fs.existsSync(destDir)) {
+            warnings.push(`Destination directory does not exist: ${destDir}`);
+        }
+        return {
+            tool: this.name,
+            wouldDo: `Move ${absSrc} → ${absDest}`,
+            estimatedChanges: [absSrc, absDest],
+            warnings,
+        };
+    }
+    async execute(input, ctx) {
+        const start = Date.now();
+        const { source, destination, overwrite } = input;
+        const absSrc = path.resolve(source);
+        const absDest = path.resolve(destination);
+        const artifacts = [];
+        try {
+            // Check source exists
+            if (!fs.existsSync(absSrc)) {
+                return this.failure(`Source file does not exist: ${absSrc}`, Date.now() - start);
+            }
+            // Check destination doesn't exist (unless overwrite)
+            let destExisted = false;
+            let destPreviousContent = null;
+            if (fs.existsSync(absDest)) {
+                if (!overwrite) {
+                    return this.failure(`Destination already exists: ${absDest}. Set overwrite: true to replace.`, Date.now() - start);
+                }
+                destExisted = true;
+                destPreviousContent = fs.readFileSync(absDest, 'base64');
+            }
+            // Checksum source before move
+            const srcContent = fs.readFileSync(absSrc);
+            const srcChecksum = crypto.createHash('sha256').update(srcContent).digest('hex');
+            artifacts.push({
+                type: 'checksum',
+                value: `sha256:${srcChecksum}`,
+                description: `Checksum of moved file (source: ${absSrc})`,
+            });
+            artifacts.push({
+                type: 'log',
+                value: `Moved: ${absSrc} → ${absDest}`,
+                description: 'Move record',
+            });
+            // Store rollback data
+            const rollbackKey = `file:move:${absSrc}:${absDest}`;
+            ctx.rollbackData[rollbackKey] = {
+                source: absSrc,
+                destination: absDest,
+                destExisted,
+                destPreviousContent,
+            };
+            // Execute the move
+            fs.renameSync(absSrc, absDest);
+            ctx.budget.filesChanged++;
+            return this.success({ source: absSrc, destination: absDest, size: srcContent.length }, Date.now() - start, artifacts);
+        }
+        catch (err) {
+            return this.failure(err.message, Date.now() - start);
+        }
+    }
+    async rollback(input, ctx) {
+        const { source, destination } = input;
+        const absSrc = path.resolve(source);
+        const absDest = path.resolve(destination);
+        const rollbackKey = `file:move:${absSrc}:${absDest}`;
+        const rollbackData = ctx.rollbackData[rollbackKey];
+        if (!rollbackData) {
+            return {
+                tool: this.name,
+                success: false,
+                description: 'No rollback data available',
+                error: 'Rollback data not found — execute() may not have been called',
+            };
+        }
+        try {
+            // Move file back to original location
+            if (fs.existsSync(rollbackData.destination)) {
+                fs.renameSync(rollbackData.destination, rollbackData.source);
+            }
+            // Restore overwritten destination if applicable
+            if (rollbackData.destExisted && rollbackData.destPreviousContent !== null) {
+                const content = Buffer.from(rollbackData.destPreviousContent, 'base64');
+                fs.writeFileSync(rollbackData.destination, content);
+            }
+            return {
+                tool: this.name,
+                success: true,
+                description: `Moved ${rollbackData.destination} back to ${rollbackData.source}`,
+            };
+        }
+        catch (err) {
+            return {
+                tool: this.name,
+                success: false,
+                description: `Failed to rollback file move`,
+                error: err.message,
+            };
+        }
+    }
+}
+//# sourceMappingURL=file-move.js.map

package/dist/tools/file-move.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-move.js","sourceRoot":"","sources":["../../src/tools/file-move.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAWxD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,yBAAyB,CAAC;IACpD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,8BAA8B,CAAC;IAC9D,yCAAyC;IACzC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACtC,CAAC,CAAC;AAIH,MAAM,OAAO,eAAgB,SAAQ,WAAW;IACrC,IAAI,GAAG,WAAW,CAAC;IACnB,WAAW,GAAG,kDAAkD,CAAC;IACjE,WAAW,GAAG,mBAAmB,CAAC;IAE3C,QAAQ,CAAC,KAAc,EAAE,MAAc;QACrC,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAC7E,CAAC;QACJ,CAAC;QAED,gEAAgE;QAChE,MAAM,YAAY,GAAG,cAAc,CACjC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EACxE,MAAM,CACP,CAAC;QACF,IAAI,YAAY,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YACpC,OAAO;gBACL,GAAG,YAAY;gBACf,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;aACzD,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,cAAc,CAC/B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,EAC7E,MAAM,CACP,CAAC;QACF,IAAI,UAAU,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAClC,OAAO;gBACL,GAAG,UAAU;gBACb,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC;aAC5D,CAAC;QACJ,CAAC;QAED,oDAAoD;QACpD,IAAI,YAAY,CAAC,OAAO,KAAK,MAAM,IAAI,UAAU,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YACrE,OAAO,YAAY,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;QACrE,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B,EAAE,IAAsB;QACjE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,KAAsB,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,QAAQ,CAAC,IAAI,CAAC,sDAAsD,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,yCAAyC,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,QAAQ,MAAM,MAAM,OAAO,EAAE;YACtC,gBAAgB,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;YACnC,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAA8B,EAAE,GAAqB;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,KAAsB,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAwB,EAAE,CAAC;QAE1C,IAAI,CAAC;YACH,sBAAsB;YACtB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,+BAA+B,MAAM,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;YACnF,CAAC;YAED,qDAAqD;YACrD,IAAI,WAAW,GAAG,KAAK,CAAC;YACxB,IAAI,mBAAmB,GAAkB,IAAI,CAAC;YAC9C,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,OAAO,IAAI,CAAC,OAAO,CACjB,+BAA+B,OAAO,mCAAmC,EACzE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CACnB,CAAC;gBACJ,CAAC;gBACD,WAAW,GAAG,IAAI,CAAC;gBACnB,mBAAmB,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC3D,CAAC;YAED,8BAA8B;YAC9B,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjF,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,UAAU,WAAW,EAAE;gBAC9B,WAAW,EAAE,mCAAmC,MAAM,GAAG;aAC1D,CAAC,CAAC;YAEH,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE,UAAU,MAAM,MAAM,OAAO,EAAE;gBACtC,WAAW,EAAE,aAAa;aAC3B,CAAC,CAAC;YAEH,sBAAsB;YACtB,MAAM,WAAW,GAAG,aAAa,MAAM,IAAI,OAAO,EAAE,CAAC;YACrD,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG;gBAC9B,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,OAAO;gBACpB,WAAW;gBACX,mBAAmB;aACpB,CAAC;YAEF,mBAAmB;YACnB,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAE/B,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAE1B,OAAO,IAAI,CAAC,OAAO,CACjB,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,EACjE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAClB,SAAS,CACV,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,OAAO,CAAE,GAAa,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA8B,EAAE,GAAqB;QAClE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,KAAsB,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,aAAa,MAAM,IAAI,OAAO,EAAE,CAAC;QACrD,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,WAAW,CAKpC,CAAC;QAEd,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,4BAA4B;gBACzC,KAAK,EAAE,8DAA8D;aACtE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,sCAAsC;YACtC,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5C,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;YAC/D,CAAC;YAED,gDAAgD;YAChD,IAAI,YAAY,CAAC,WAAW,IAAI,YAAY,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;gBAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;gBACxE,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACtD,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,SAAS,YAAY,CAAC,WAAW,YAAY,YAAY,CAAC,MAAM,EAAE;aAChF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,KAAK;gBACd,WAAW,EAAE,8BAA8B;gBAC3C,KAAK,EAAG,GAAa,CAAC,OAAO;aAC9B,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/tools/git-commit.d.ts

@@ -0,0 +1,33 @@
+/**
+ * git:commit — Scoped git commit tool adapter.
+ *
+ * Stages and commits changes in a repository.
+ * Rollback support via git revert.
+ */
+import { z } from 'zod';
+import { ToolAdapter } from './base.js';
+import type { DryRunResult, ExecutionContext, ExecutionResult, Policy, RollbackResult, ValidationResult } from '../types.js';
+export declare const GitCommitInputSchema: z.ZodObject<{
+    repo: z.ZodString;
+    message: z.ZodString;
+    paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    stageAll: z.ZodDefault<z.ZodBoolean>;
+    author: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type GitCommitInput = z.infer<typeof GitCommitInputSchema>;
+export declare class GitCommitAdapter extends ToolAdapter {
+    readonly name = "git:commit";
+    readonly description = "Stage and commit changes in a git repository";
+    readonly inputSchema: z.ZodObject<{
+        repo: z.ZodString;
+        message: z.ZodString;
+        paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        stageAll: z.ZodDefault<z.ZodBoolean>;
+        author: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    validate(input: unknown, policy: Policy): ValidationResult;
+    dryRun(input: Record<string, unknown>, _ctx: ExecutionContext): Promise<DryRunResult>;
+    execute(input: Record<string, unknown>, ctx: ExecutionContext): Promise<ExecutionResult>;
+    rollback(input: Record<string, unknown>, ctx: ExecutionContext): Promise<RollbackResult>;
+}
+//# sourceMappingURL=git-commit.d.ts.map

package/dist/tools/git-commit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-commit.d.ts","sourceRoot":"","sources":["../../src/tools/git-commit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,eAAe,EAEf,MAAM,EACN,cAAc,EACd,gBAAgB,EACjB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,oBAAoB;;;;;;iBAS/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,qBAAa,gBAAiB,SAAQ,WAAW;IAC/C,QAAQ,CAAC,IAAI,gBAAgB;IAC7B,QAAQ,CAAC,WAAW,kDAAkD;IACtE,QAAQ,CAAC,WAAW;;;;;;sBAAwB;IAE5C,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB;IAgBpD,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;IA2BrF,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;IA8ExF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC;CA4D/F"}