@easynet/agent-tool 1.0.17 → 1.0.18

package/README.md

@@ -50,13 +50,20 @@ npx agent-tool serve --path dist
 
 ### 2. Configure tool.yaml
 
-Place `tool.yaml` at project root to list tools (used by `createAgentTools` and `agent-tool ls`):
+Place `tool.yaml` at project root to list tools (used by `createAgentTools` and `agent-tool ls`). You can set **sandbox** and **HTTP host security** under `tools`. Host rule: allow iff (host in `allowedHosts`) AND (host not in `blockedHosts`). Lists are merged with programmatic config (union).
+
+**When nothing is set** (no allowedHosts/blockedHosts/sandboxedPath in tool.yaml and no `coreTools` passed in code), it is equivalent to: `allowedHosts: []`, `blockedHosts: []`, `sandboxRoot: process.cwd()`. That means **no HTTP access is allowed** (all HTTP tools will error), and FS tools use the current directory as sandbox. To enable HTTP tools, configure `allowedHosts` (e.g. `["*"]` or specific hostnames).
 
 ```yaml
 tools:
-  - npm:@easynet/agent-tool-builtin#fs.readText
-  - npm:@easynet/agent-tool-builtin#fs.writeText
-  # ...
+  sandboxedPath: ~/.agent/sandbox   # fs tools only access this dir
+  allowedHosts: ["*"]              # allow all; or ["api.github.com", "api.duckduckgo.com"]
+  blockedHosts: []                 # optional; block these even if allowed (e.g. ["*.internal"])
+  blockedCidrs: []                  # optional; CIDR blocklist for resolved IPs
+  list:
+    - npm:@easynet/agent-tool-builtin#fs.readText
+    - npm:@easynet/agent-tool-builtin#fs.writeText
+    # ...
 ```
 
 ### 3. Programmatic: LangChain tools

package/dist/api/createAgentTools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"createAgentTools.d.ts","sourceRoot":"","sources":["../../src/api/createAgentTools.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAaH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAEnE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAErE,MAAM,WAAW,uBAAwB,SAAQ,oBAAoB;IACnE,sHAAsH;IACtH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAcD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,CAAC,EAAE,uBAAuB,GAAG,MAAM,GACzC,uBAAuB,EAAE,CA2B3B;AAED;;;GAGG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAyBpC"}
+{"version":3,"file":"createAgentTools.d.ts","sourceRoot":"","sources":["../../src/api/createAgentTools.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAaH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAEnE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAErE,MAAM,WAAW,uBAAwB,SAAQ,oBAAoB;IACnE,sHAAsH;IACtH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AA6CD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,CAAC,EAAE,uBAAuB,GAAG,MAAM,GACzC,uBAAuB,EAAE,CA2B3B;AAED;;;GAGG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAyBpC"}

package/dist/api/main.cjs

@@ -1,8 +1,8 @@
 'use strict';
 
-var chunkUDGQSHEO_cjs = require('../chunk-UDGQSHEO.cjs');
-var chunkPVVUTEZP_cjs = require('../chunk-PVVUTEZP.cjs');
-var chunkCDTLERB6_cjs = require('../chunk-CDTLERB6.cjs');
+var chunkZIFQWIN3_cjs = require('../chunk-ZIFQWIN3.cjs');
+var chunkOXTQULXH_cjs = require('../chunk-OXTQULXH.cjs');
+var chunkEMI67SPN_cjs = require('../chunk-EMI67SPN.cjs');
 require('../chunk-ZNJBRLKN.cjs');
 require('../chunk-6F5JHLZ7.cjs');
 
@@ -10,47 +10,47 @@ require('../chunk-6F5JHLZ7.cjs');
 
 Object.defineProperty(exports, "createAgentTools", {
   enumerable: true,
-  get: function () { return chunkUDGQSHEO_cjs.createAgentTools; }
+  get: function () { return chunkZIFQWIN3_cjs.createAgentTools; }
 });
 Object.defineProperty(exports, "createLangChainToolsAsync", {
   enumerable: true,
-  get: function () { return chunkUDGQSHEO_cjs.createLangChainToolsAsync; }
+  get: function () { return chunkZIFQWIN3_cjs.createLangChainToolsAsync; }
 });
 Object.defineProperty(exports, "createHttpService", {
   enumerable: true,
-  get: function () { return chunkPVVUTEZP_cjs.createHttpService; }
+  get: function () { return chunkOXTQULXH_cjs.createHttpService; }
 });
 Object.defineProperty(exports, "createMCPServer", {
   enumerable: true,
-  get: function () { return chunkPVVUTEZP_cjs.createMCPServer; }
+  get: function () { return chunkOXTQULXH_cjs.createMCPServer; }
 });
 Object.defineProperty(exports, "createMCPServerStreamableHttp", {
   enumerable: true,
-  get: function () { return chunkPVVUTEZP_cjs.createMCPServerStreamableHttp; }
+  get: function () { return chunkOXTQULXH_cjs.createMCPServerStreamableHttp; }
 });
 Object.defineProperty(exports, "createMCPStreamableHttpHandler", {
   enumerable: true,
-  get: function () { return chunkPVVUTEZP_cjs.createMCPStreamableHttpHandler; }
+  get: function () { return chunkOXTQULXH_cjs.createMCPStreamableHttpHandler; }
 });
 Object.defineProperty(exports, "createOpenAPIServer", {
   enumerable: true,
-  get: function () { return chunkPVVUTEZP_cjs.createHttpService; }
+  get: function () { return chunkOXTQULXH_cjs.createHttpService; }
 });
 Object.defineProperty(exports, "runMCPServerOverStdio", {
   enumerable: true,
-  get: function () { return chunkPVVUTEZP_cjs.runMCPServerOverStdio; }
+  get: function () { return chunkOXTQULXH_cjs.runMCPServerOverStdio; }
 });
 Object.defineProperty(exports, "PTCRuntime", {
   enumerable: true,
-  get: function () { return chunkCDTLERB6_cjs.PTCRuntime; }
+  get: function () { return chunkEMI67SPN_cjs.PTCRuntime; }
 });
 Object.defineProperty(exports, "createRuntimeFromConfig", {
   enumerable: true,
-  get: function () { return chunkCDTLERB6_cjs.createRuntimeFromConfig; }
+  get: function () { return chunkEMI67SPN_cjs.createRuntimeFromConfig; }
 });
 Object.defineProperty(exports, "createRuntimeFromConfigSync", {
   enumerable: true,
-  get: function () { return chunkCDTLERB6_cjs.createRuntimeFromConfigSync; }
+  get: function () { return chunkEMI67SPN_cjs.createRuntimeFromConfigSync; }
 });
 //# sourceMappingURL=main.cjs.map
 //# sourceMappingURL=main.cjs.map

package/dist/api/main.js

@@ -1,6 +1,6 @@
-export { createAgentTools, createLangChainToolsAsync } from '../chunk-M2VNTQHS.js';
-export { createHttpService, createMCPServer, createMCPServerStreamableHttp, createMCPStreamableHttpHandler, createHttpService as createOpenAPIServer, runMCPServerOverStdio } from '../chunk-SIN5JHMP.js';
-export { PTCRuntime, createRuntimeFromConfig, createRuntimeFromConfigSync } from '../chunk-BNHLMLDH.js';
+export { createAgentTools, createLangChainToolsAsync } from '../chunk-7WI5VK5G.js';
+export { createHttpService, createMCPServer, createMCPServerStreamableHttp, createMCPStreamableHttpHandler, createHttpService as createOpenAPIServer, runMCPServerOverStdio } from '../chunk-ETWGKCOP.js';
+export { PTCRuntime, createRuntimeFromConfig, createRuntimeFromConfigSync } from '../chunk-RKN4PT7P.js';
 import '../chunk-AE6FSNGY.js';
 import '../chunk-FR2CXERF.js';
 //# sourceMappingURL=main.js.map

package/dist/api/runtimeFromConfig.d.ts

@@ -13,7 +13,12 @@ export declare const BUILTIN_PKG_NAMES: string[];
 /** Config for core (builtin) tools; matches @easynet/agent-tool-builtin-tools when present. */
 export interface CoreToolsUserConfig {
     sandboxRoot?: string;
+    /** Allowed hosts (e.g. ["*"] or ["api.github.com"]). Merged with tool.yaml. */
     allowedHosts?: string[];
+    /** Block these hosts even if allowed. Merged with tool.yaml. */
+    blockedHosts?: string[];
+    /** CIDR ranges to block for HTTP (SSRF). Overrides builtin default when set. */
+    blockedCidrs?: string[];
 }
 /** Config for example tools; matches @easynet/agent-tool-example-tools when present. */
 export interface ExampleToolsUserConfig {

package/dist/api/runtimeFromConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtimeFromConfig.d.ts","sourceRoot":"","sources":["../../src/api/runtimeFromConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAc3D,oFAAoF;AACpF,eAAO,MAAM,iBAAiB,UAI7B,CAAC;AAEF,+FAA+F;AAC/F,MAAM,WAAW,mBAAmB;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,wFAAwF;AACxF,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,iFAAiF;IACjF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,oEAAoE;IACpE,YAAY,CAAC,EAAE,sBAAsB,CAAC;IACtC,yEAAyE;IACzE,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,UAAU,CAAC;IACpB,QAAQ,EAAE,YAAY,CAAC;CACxB;AAmBD,qKAAqK;AACrK,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAQjG;AA8ED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,GAAE,oBAAyB,GAAG,mBAAmB,CAuDnG;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAe9B"}
+{"version":3,"file":"runtimeFromConfig.d.ts","sourceRoot":"","sources":["../../src/api/runtimeFromConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAc3D,oFAAoF;AACpF,eAAO,MAAM,iBAAiB,UAI7B,CAAC;AAEF,+FAA+F;AAC/F,MAAM,WAAW,mBAAmB;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,wFAAwF;AACxF,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,iFAAiF;IACjF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,oEAAoE;IACpE,YAAY,CAAC,EAAE,sBAAsB,CAAC;IACtC,yEAAyE;IACzE,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,UAAU,CAAC;IACpB,QAAQ,EAAE,YAAY,CAAC;CACxB;AAmBD,qKAAqK;AACrK,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAQjG;AA8ED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,GAAE,oBAAyB,GAAG,mBAAmB,CAuDnG;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAe9B"}

package/dist/{chunk-LIERSUS5.js → chunk-7MRBWT2T.js}

@@ -1,4 +1,4 @@
-import { LANGCHAIN_DIR_NAME, LANGCHAIN_KIND, MCP_KIND } from './chunk-BNHLMLDH.js';
+import { LANGCHAIN_DIR_NAME, LANGCHAIN_KIND, MCP_KIND } from './chunk-RKN4PT7P.js';
 import { DEFAULT_OUTPUT_SCHEMA } from './chunk-5SWSNVMI.js';
 import * as fs3 from 'fs/promises';
 import { readdir, readFile, access, stat } from 'fs/promises';
@@ -1779,5 +1779,5 @@ async function runMcpServer(options = {}) {
 var runGeneratedMCP = runMcpServer;
 
 export { DirectoryScanner, DiscoveryError, SkillManifestError, buildFunctionToTool, buildMcpPackage, initProject, loadMCPTool, loadSkillDefinition, parseSkillMd, runGeneratedMCP, runMcpServer, scan, scanForTools, scanSkillResources, validateFrontmatter };
-//# sourceMappingURL=chunk-LIERSUS5.js.map
-//# sourceMappingURL=chunk-LIERSUS5.js.map
+//# sourceMappingURL=chunk-7MRBWT2T.js.map
+//# sourceMappingURL=chunk-7MRBWT2T.js.map