@esankhan3/anvil-agent-core 0.1.0

package/dist/tools/__tests__/builtin.test.js

@@ -0,0 +1,242 @@
+/**
+ * Adversarial tests for `BuiltinToolExecutor`. These tools form a
+ * security boundary — every test here is a known escape vector that
+ * must stay closed.
+ */
+import { describe, it, before, after } from 'node:test';
+import assert from 'node:assert/strict';
+import { mkdtempSync, mkdirSync, writeFileSync, symlinkSync, rmSync, realpathSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+import { BuiltinToolExecutor, PathEscapeError, resolveSafe, TOOL_CLASS } from '../index.js';
+let root = '';
+let outsider = '';
+before(() => {
+    // realpathSync resolves macOS /var → /private/var so path-prefix asserts
+    // line up with what resolveSafe canonicalizes to.
+    root = realpathSync(mkdtempSync(join(tmpdir(), 'anvil-tools-')));
+    outsider = realpathSync(mkdtempSync(join(tmpdir(), 'anvil-outside-')));
+    writeFileSync(join(root, 'hello.txt'), 'hello world\nline2\nline3\n');
+    writeFileSync(join(outsider, 'secret.txt'), 'top secret');
+    mkdirSync(join(root, 'src'), { recursive: true });
+    writeFileSync(join(root, 'src', 'a.ts'), 'export const a = 1;\n');
+    writeFileSync(join(root, 'src', 'b.ts'), 'export const b = 2;\n');
+});
+after(() => {
+    rmSync(root, { recursive: true, force: true });
+    rmSync(outsider, { recursive: true, force: true });
+});
+const ALL = ['read_file', 'write_file', 'edit', 'bash', 'grep', 'glob', 'list'];
+const READ_ONLY = ['read_file', 'grep', 'glob', 'list'];
+function makeCall(name, args) {
+    return { id: `call-${Math.random().toString(36).slice(2, 8)}`, name, arguments: args };
+}
+function ctx(workingDir, signal) {
+    return { workingDir, abortSignal: signal ?? new AbortController().signal };
+}
+// ────────────────────────────────────────────────────────────────────────
+// Schema filtering / permission
+// ────────────────────────────────────────────────────────────────────────
+describe('BuiltinToolExecutor — schema filtering', () => {
+    it('listSchemas only returns allowed tools', () => {
+        const ex = new BuiltinToolExecutor({ allowedTools: READ_ONLY });
+        const names = ex.listSchemas().map((s) => s.name).sort();
+        assert.deepEqual(names, [...READ_ONLY].sort());
+    });
+    it('execute rejects denied tool with isError:true', async () => {
+        const ex = new BuiltinToolExecutor({ allowedTools: READ_ONLY });
+        const r = await ex.execute(makeCall('bash', { command: 'echo nope' }), ctx(root));
+        assert.equal(r.isError, true);
+        assert.match(r.content, /not permitted/);
+    });
+    it('execute rejects unknown tool name (gated by permission first)', async () => {
+        // Unknown tools are blocked at the permission gate before reaching the
+        // handler dispatch — the user-facing message is "not permitted", which
+        // is also the right message for misconfigured registries.
+        const ex = new BuiltinToolExecutor({ allowedTools: ALL });
+        const r = await ex.execute(makeCall('eval_code', { command: 'rm -rf /' }), ctx(root));
+        assert.equal(r.isError, true);
+        assert.match(r.content, /not permitted/);
+    });
+    it('TOOL_CLASS exposes a read|write|exec mapping for every built-in', () => {
+        for (const name of ALL) {
+            assert.ok(['read', 'write', 'exec'].includes(TOOL_CLASS[name]));
+        }
+    });
+});
+// ────────────────────────────────────────────────────────────────────────
+// Path guard — every escape vector
+// ────────────────────────────────────────────────────────────────────────
+describe('resolveSafe — path escape vectors', () => {
+    it('blocks parent-directory traversal via ..', () => {
+        assert.throws(() => resolveSafe('../escape.txt', root), PathEscapeError);
+        assert.throws(() => resolveSafe('../../escape.txt', root), PathEscapeError);
+        assert.throws(() => resolveSafe('foo/../../escape.txt', root), PathEscapeError);
+    });
+    it('blocks absolute paths outside workingDir', () => {
+        assert.throws(() => resolveSafe('/etc/passwd', root), PathEscapeError);
+        assert.throws(() => resolveSafe(join(outsider, 'secret.txt'), root), PathEscapeError);
+    });
+    it('allows paths inside workingDir', () => {
+        assert.equal(resolveSafe('hello.txt', root).endsWith('hello.txt'), true);
+        assert.equal(resolveSafe('src/a.ts', root).endsWith('src/a.ts'), true);
+    });
+    it('blocks symlink targets that point outside workingDir', () => {
+        const linkPath = join(root, 'evil-link');
+        try {
+            symlinkSync(join(outsider, 'secret.txt'), linkPath);
+        }
+        catch { /* macOS may need permission */
+            return;
+        }
+        assert.throws(() => resolveSafe('evil-link', root), PathEscapeError);
+    });
+    it('allows non-existent files inside workingDir (so write_file can create them)', () => {
+        const target = resolveSafe('new/dir/and/file.txt', root);
+        assert.ok(target.startsWith(root));
+    });
+    it('rejects empty / non-string path', () => {
+        assert.throws(() => resolveSafe('', root), PathEscapeError);
+        assert.throws(() => resolveSafe(undefined, root), PathEscapeError);
+    });
+});
+// ────────────────────────────────────────────────────────────────────────
+// read_file
+// ────────────────────────────────────────────────────────────────────────
+describe('read_file', () => {
+    const ex = () => new BuiltinToolExecutor({ allowedTools: READ_ONLY });
+    it('reads a file inside workingDir', async () => {
+        const r = await ex().execute(makeCall('read_file', { path: 'hello.txt' }), ctx(root));
+        assert.equal(r.isError, false);
+        assert.match(r.content, /hello world/);
+    });
+    it('honors offset + limit', async () => {
+        const r = await ex().execute(makeCall('read_file', { path: 'hello.txt', offset: 2, limit: 1 }), ctx(root));
+        assert.equal(r.isError, false);
+        assert.equal(r.content.trim(), 'line2');
+    });
+    it('rejects path that escapes workingDir', async () => {
+        const r = await ex().execute(makeCall('read_file', { path: '../escape.txt' }), ctx(root));
+        assert.equal(r.isError, true);
+        assert.match(r.content, /escapes workingDir/);
+    });
+    it('rejects directory targets', async () => {
+        const r = await ex().execute(makeCall('read_file', { path: 'src' }), ctx(root));
+        assert.equal(r.isError, true);
+    });
+});
+// ────────────────────────────────────────────────────────────────────────
+// write_file + edit
+// ────────────────────────────────────────────────────────────────────────
+describe('write_file', () => {
+    it('creates a new file with parent dirs', async () => {
+        const ex = new BuiltinToolExecutor({ allowedTools: ['write_file'] });
+        const r = await ex.execute(makeCall('write_file', { path: 'new/path/x.txt', content: 'fresh' }), ctx(root));
+        assert.equal(r.isError, false);
+    });
+    it('refuses paths outside workingDir', async () => {
+        const ex = new BuiltinToolExecutor({ allowedTools: ['write_file'] });
+        const r = await ex.execute(makeCall('write_file', { path: '../injected.txt', content: 'no' }), ctx(root));
+        assert.equal(r.isError, true);
+    });
+});
+describe('edit', () => {
+    const ex = () => new BuiltinToolExecutor({ allowedTools: ['edit'] });
+    it('replaces a unique anchor', async () => {
+        writeFileSync(join(root, 'edit-target.txt'), 'aaa BBB ccc\n');
+        const r = await ex().execute(makeCall('edit', { path: 'edit-target.txt', old_string: 'BBB', new_string: 'XXX' }), ctx(root));
+        assert.equal(r.isError, false);
+    });
+    it('refuses ambiguous anchor without replace_all', async () => {
+        writeFileSync(join(root, 'ambig.txt'), 'foo foo foo\n');
+        const r = await ex().execute(makeCall('edit', { path: 'ambig.txt', old_string: 'foo', new_string: 'bar' }), ctx(root));
+        assert.equal(r.isError, true);
+        assert.match(r.content, /matched 3 times/);
+    });
+    it('replace_all replaces every occurrence', async () => {
+        writeFileSync(join(root, 'rep.txt'), 'foo foo foo\n');
+        const r = await ex().execute(makeCall('edit', { path: 'rep.txt', old_string: 'foo', new_string: 'bar', replace_all: true }), ctx(root));
+        assert.equal(r.isError, false);
+    });
+    it('fails when old_string is not found', async () => {
+        writeFileSync(join(root, 'miss.txt'), 'nothing here\n');
+        const r = await ex().execute(makeCall('edit', { path: 'miss.txt', old_string: 'absent', new_string: 'present' }), ctx(root));
+        assert.equal(r.isError, true);
+        assert.match(r.content, /not found/);
+    });
+    it('fails when target file does not exist', async () => {
+        const r = await ex().execute(makeCall('edit', { path: 'nonexistent.txt', old_string: 'x', new_string: 'y' }), ctx(root));
+        assert.equal(r.isError, true);
+        assert.match(r.content, /not found/);
+    });
+});
+// ────────────────────────────────────────────────────────────────────────
+// bash — timeout + abort
+// ────────────────────────────────────────────────────────────────────────
+describe('bash', () => {
+    it('runs a simple command and returns stdout', async () => {
+        const ex = new BuiltinToolExecutor({ allowedTools: ['bash'] });
+        const r = await ex.execute(makeCall('bash', { command: 'printf hello' }), ctx(root));
+        assert.equal(r.isError, false);
+        assert.match(r.content, /hello/);
+    });
+    it('reports non-zero exit as isError:true', async () => {
+        const ex = new BuiltinToolExecutor({ allowedTools: ['bash'] });
+        const r = await ex.execute(makeCall('bash', { command: 'exit 7' }), ctx(root));
+        assert.equal(r.isError, true);
+        assert.match(r.content, /exit 7/);
+    });
+    it('kills on timeout', async () => {
+        const ex = new BuiltinToolExecutor({ allowedTools: ['bash'] });
+        const r = await ex.execute(makeCall('bash', { command: 'sleep 5', timeout_ms: 200 }), ctx(root));
+        assert.equal(r.isError, true);
+        assert.match(r.content, /timed out/);
+    });
+    it('kills on abort', async () => {
+        const ex = new BuiltinToolExecutor({ allowedTools: ['bash'] });
+        const ac = new AbortController();
+        const promise = ex.execute(makeCall('bash', { command: 'sleep 5' }), ctx(root, ac.signal));
+        setTimeout(() => ac.abort(), 50);
+        const r = await promise;
+        assert.equal(r.isError, true);
+        assert.match(r.content, /aborted/);
+    });
+    it('runs in workingDir, not process cwd', async () => {
+        const ex = new BuiltinToolExecutor({ allowedTools: ['bash'] });
+        const r = await ex.execute(makeCall('bash', { command: 'pwd' }), ctx(root));
+        assert.equal(r.isError, false);
+        assert.match(r.content, new RegExp(root.split('/').slice(-2).join('/')));
+    });
+});
+// ────────────────────────────────────────────────────────────────────────
+// grep / glob / list
+// ────────────────────────────────────────────────────────────────────────
+describe('grep / glob / list', () => {
+    it('grep finds matches with file:line prefix', async () => {
+        const ex = new BuiltinToolExecutor({ allowedTools: ['grep'] });
+        const r = await ex.execute(makeCall('grep', { pattern: 'export const' }), ctx(root));
+        if (r.isError && /spawn error/.test(r.content))
+            return; // ripgrep not installed in CI
+        assert.equal(r.isError, false);
+        assert.match(r.content, /a\.ts/);
+    });
+    it('glob lists files matching pattern', async () => {
+        const ex = new BuiltinToolExecutor({ allowedTools: ['glob'] });
+        const r = await ex.execute(makeCall('glob', { pattern: '**/*.ts' }), ctx(root));
+        if (r.isError && /spawn error/.test(r.content))
+            return;
+        assert.equal(r.isError, false);
+    });
+    it('list returns one entry per line', async () => {
+        const ex = new BuiltinToolExecutor({ allowedTools: ['list'] });
+        const r = await ex.execute(makeCall('list', {}), ctx(root));
+        assert.equal(r.isError, false);
+        assert.match(r.content, /hello\.txt/);
+    });
+    it('list rejects file targets', async () => {
+        const ex = new BuiltinToolExecutor({ allowedTools: ['list'] });
+        const r = await ex.execute(makeCall('list', { path: 'hello.txt' }), ctx(root));
+        assert.equal(r.isError, true);
+    });
+});
+//# sourceMappingURL=builtin.test.js.map

package/dist/tools/__tests__/builtin.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtin.test.js","sourceRoot":"","sources":["../../../src/tools/__tests__/builtin.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnG,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG5F,IAAI,IAAI,GAAG,EAAE,CAAC;AACd,IAAI,QAAQ,GAAG,EAAE,CAAC;AAElB,MAAM,CAAC,GAAG,EAAE;IACV,yEAAyE;IACzE,kDAAkD;IAClD,IAAI,GAAG,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;IACjE,QAAQ,GAAG,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACvE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,6BAA6B,CAAC,CAAC;IACtE,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;IAC1D,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAClE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,uBAAuB,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,KAAK,CAAC,GAAG,EAAE;IACT,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,MAAM,GAAG,GAAG,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAChF,MAAM,SAAS,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAExD,SAAS,QAAQ,CAAC,IAAY,EAAE,IAA6B;IAC3D,OAAO,EAAE,EAAE,EAAE,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACzF,CAAC;AACD,SAAS,GAAG,CAAC,UAAkB,EAAE,MAAoB;IACnD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM,EAAE,CAAC;AAC7E,CAAC;AAED,2EAA2E;AAC3E,gCAAgC;AAChC,2EAA2E;AAE3E,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAClF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,uEAAuE;QACvE,uEAAuE;QACvE,0DAA0D;QAC1D,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACtF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;YACvB,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,2EAA2E;AAC3E,mCAAmC;AACnC,2EAA2E;AAE3E,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,kBAAkB,EAAE,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;QAC5E,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,sBAAsB,EAAE,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACzC,IAAI,CAAC;YAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,+BAA+B;YAAC,OAAO;QAAC,CAAC;QAC9G,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,MAAM,GAAG,WAAW,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,SAA8B,EAAE,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,2EAA2E;AAC3E,YAAY;AACZ,2EAA2E;AAE3E,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,IAAI,mBAAmB,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;IAEtE,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,CAAC,GAAG,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACtF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,CAAC,GAAG,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3G,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,CAAC,GAAG,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1F,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,CAAC,GAAG,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAChF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,2EAA2E;AAC3E,oBAAoB;AACpB,2EAA2E;AAE3E,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,EAAE,YAAY,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5G,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,EAAE,YAAY,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1G,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;IACpB,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,IAAI,mBAAmB,CAAC,EAAE,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAErE,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,CAAC,GAAG,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7H,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,eAAe,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACvH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,eAAe,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACxI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7H,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,CAAC,GAAG,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACzH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,2EAA2E;AAC3E,yBAAyB;AACzB,2EAA2E;AAE3E,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;IACpB,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,EAAE,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,EAAE,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;QAChC,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,EAAE,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACjG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE;QAC9B,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,EAAE,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3F,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC;QACxB,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,EAAE,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,2EAA2E;AAC3E,qBAAqB;AACrB,2EAA2E;AAE3E,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,EAAE,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,CAAC,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,8BAA8B;QACtF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,EAAE,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,CAAC,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAAE,OAAO;QACvD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,EAAE,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,EAAE,GAAG,IAAI,mBAAmB,CAAC,EAAE,YAAY,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tools/builtin.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Built-in tool executor used by non-Claude adapters (Ollama, future
+ * OpenAI/Gemini agentic paths). Mirrors the minimum subset of Claude
+ * CLI's tools that the pipeline build/validate/ship stages need.
+ *
+ * Permission model:
+ *   - Construction takes an `allowedTools: Set<string>` that comes from
+ *     the stage policy (see core-pipeline/src/routing/stage-permissions).
+ *   - `listSchemas()` filters BEFORE returning so the model never even
+ *     learns about denied tools.
+ *   - `execute()` re-checks (defense in depth) and rejects denied calls
+ *     with `isError: true` rather than throwing — the adapter feeds the
+ *     rejection back to the model so it can recover.
+ */
+import type { ToolCall, ToolSchema } from '../types.js';
+import type { ExecCtx, ToolClass, ToolExecutor, ToolResult } from './types.js';
+export declare const TOOL_CLASS: Readonly<Record<string, ToolClass>>;
+export interface BuiltinToolExecutorOpts {
+    /** Names of tools the executor advertises + permits. Anything outside
+     *  the set is rejected at both listSchemas() and execute(). */
+    allowedTools: Iterable<string>;
+}
+export declare class BuiltinToolExecutor implements ToolExecutor {
+    private readonly allowed;
+    constructor(opts: BuiltinToolExecutorOpts);
+    listSchemas(): ToolSchema[];
+    execute(call: ToolCall, ctx: ExecCtx): Promise<ToolResult>;
+}
+//# sourceMappingURL=builtin.d.ts.map

package/dist/tools/builtin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtin.d.ts","sourceRoot":"","sources":["../../src/tools/builtin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AA4H/E,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAE1D,CAAC;AAMF,MAAM,WAAW,uBAAuB;IACtC;mEAC+D;IAC/D,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CAChC;AAED,qBAAa,mBAAoB,YAAW,YAAY;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;gBAE1B,IAAI,EAAE,uBAAuB;IAIzC,WAAW,IAAI,UAAU,EAAE;IAQrB,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;CAcjE"}