@easynet/agent-tool-buildin 0.0.3 → 0.0.4

package/dist/types.d.ts

@@ -2,12 +2,15 @@ import type { ExecContext } from "@easynet/agent-tool";
 import type { Evidence } from "@easynet/agent-tool";
 /**
  * Configuration for core tools runtime.
+ * HTTP: allow iff (host in allowedHosts) AND (host not in blockedHosts). tool.yaml and code are merged (union).
  */
 export interface CoreToolsConfig {
     /** Absolute path. All FS operations are confined within this root. */
     sandboxRoot: string;
-    /** Only these hosts may be fetched. Supports wildcard prefix (e.g. "*.github.com"). */
+    /** Allowed hosts. Use ["*"] for allow-all. Supports "*.github.com", exact host. */
     allowedHosts: string[];
+    /** Block these hosts even if allowed. Supports "*.internal", exact host. */
+    blockedHosts: string[];
     /** Maximum bytes for fs.readText (default: 5MB) */
     maxReadBytes: number;
     /** Maximum bytes for HTTP response body (default: 5MB) */
@@ -32,7 +35,7 @@ export interface CoreToolsConfig {
 /**
  * Default configuration values for core tools.
  */
-export declare const DEFAULT_CORE_TOOLS_CONFIG: Omit<CoreToolsConfig, "sandboxRoot" | "allowedHosts">;
+export declare const DEFAULT_CORE_TOOLS_CONFIG: Omit<CoreToolsConfig, "sandboxRoot" | "allowedHosts" | "blockedHosts">;
 /**
  * Context passed to each core tool handler.
  */

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,WAAW,EAAE,MAAM,CAAC;IACpB,uFAAuF;IACvF,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mDAAmD;IACnD,YAAY,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,YAAY,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,gBAAgB,EAAE,MAAM,CAAC;IACzB,8EAA8E;IAC9E,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,kDAAkD;IAClD,gBAAgB,EAAE,MAAM,CAAC;IACzB,0CAA0C;IAC1C,aAAa,EAAE,MAAM,CAAC;IACtB,2FAA2F;IAC3F,6BAA6B,EAAE,OAAO,CAAC;IACvC,gGAAgG;IAChG,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,+DAA+D;IAC/D,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sDAAsD;IACtD,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,eAAO,MAAM,yBAAyB,EAAE,IAAI,CAAC,eAAe,EAAE,aAAa,GAAG,cAAc,CAgC3F,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,QAAQ,EAAE,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,WAAW,EAAE,MAAM,CAAC;IACpB,mFAAmF;IACnF,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,4EAA4E;IAC5E,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,mDAAmD;IACnD,YAAY,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,YAAY,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,gBAAgB,EAAE,MAAM,CAAC;IACzB,8EAA8E;IAC9E,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,kDAAkD;IAClD,gBAAgB,EAAE,MAAM,CAAC;IACzB,0CAA0C;IAC1C,aAAa,EAAE,MAAM,CAAC;IACtB,2FAA2F;IAC3F,6BAA6B,EAAE,OAAO,CAAC;IACvC,gGAAgG;IAChG,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,+DAA+D;IAC/D,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sDAAsD;IACtD,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,eAAO,MAAM,yBAAyB,EAAE,IAAI,CAC1C,eAAe,EACf,aAAa,GAAG,cAAc,GAAG,cAAc,CAiChD,CAAC;AAEF;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,QAAQ,EAAE,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@easynet/agent-tool-buildin",
-  "version": "0.0.3",
+  "version": "0.0.4",
   "description": "Built-in tools for @easynet/agent-tool: FS, HTTP, util, security (sandbox, SSRF).",
   "type": "module",
   "main": "./dist/index.cjs",

package/dist/security/sandbox.d.ts

@@ -1,9 +0,0 @@
-/**
- * Resolve an input path to an absolute path within the sandbox.
- * Throws PATH_OUTSIDE_SANDBOX if the resolved path escapes the sandbox root.
- *
- * For existing files: uses realpath to resolve symlinks.
- * For non-existing files (write targets): resolves the parent directory.
- */
-export declare function resolveSandboxedPath(inputPath: string, sandboxRoot: string): Promise<string>;
-//# sourceMappingURL=sandbox.d.ts.map

package/dist/security/sandbox.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../security/sandbox.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,MAAM,CAAC,CA0CjB"}

package/dist/security/ssrf.d.ts

@@ -1,12 +0,0 @@
-/**
- * Validate a URL against allowed hosts and blocked CIDRs.
- * Prevents SSRF by checking both hostname allowlist and resolved IP addresses.
- *
- * @throws HTTP_DISALLOWED_HOST if the URL is blocked
- */
-export declare function validateUrl(url: string, allowedHosts: string[], blockedCidrs: string[]): Promise<URL>;
-/**
- * Check if an IPv4 address falls within any blocked CIDR range.
- */
-export declare function isIpInBlockedCidrs(ip: string, cidrs: string[]): boolean;
-//# sourceMappingURL=ssrf.d.ts.map

package/dist/security/ssrf.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ssrf.d.ts","sourceRoot":"","sources":["../../security/ssrf.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EAAE,EACtB,YAAY,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,GAAG,CAAC,CAwDd;AAuBD;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAevE"}