@hflin/cclin 0.1.0

package/dist/tools/registry.test.js

@@ -0,0 +1,100 @@
+/**
+ * @file Unit tests for ToolRegistry (Phase 3).
+ *
+ * Tests: register, get, has, size, getAll, registerMany,
+ *        toOpenAITools, toMarkdown
+ */
+import { describe, it, expect, beforeEach } from 'vitest';
+import { ToolRegistry } from './registry.js';
+// ─── Test Fixtures ────────────────────────────────────────────────────────────
+function makeTool(name, mutating = false) {
+    return {
+        name,
+        description: `${name} tool description`,
+        inputSchema: {
+            type: 'object',
+            properties: {
+                path: { type: 'string', description: 'file path' },
+            },
+            required: ['path'],
+        },
+        isMutating: mutating,
+        execute: async () => ({ output: `${name} result` }),
+    };
+}
+// ─── Tests ────────────────────────────────────────────────────────────────────
+describe('ToolRegistry', () => {
+    let registry;
+    beforeEach(() => {
+        registry = new ToolRegistry();
+    });
+    it('should start empty', () => {
+        expect(registry.size).toBe(0);
+        expect(registry.getAll()).toEqual([]);
+    });
+    it('should register and retrieve a tool', () => {
+        const tool = makeTool('read_file');
+        registry.register(tool);
+        expect(registry.size).toBe(1);
+        expect(registry.has('read_file')).toBe(true);
+        expect(registry.get('read_file')).toBe(tool);
+    });
+    it('should return undefined for unknown tools', () => {
+        expect(registry.get('nonexistent')).toBeUndefined();
+        expect(registry.has('nonexistent')).toBe(false);
+    });
+    it('should register many tools at once', () => {
+        const tools = [makeTool('a'), makeTool('b'), makeTool('c')];
+        registry.registerMany(tools);
+        expect(registry.size).toBe(3);
+        expect(registry.has('a')).toBe(true);
+        expect(registry.has('b')).toBe(true);
+        expect(registry.has('c')).toBe(true);
+    });
+    it('should overwrite on duplicate name', () => {
+        const tool1 = makeTool('read_file');
+        const tool2 = makeTool('read_file');
+        tool2.description = 'updated description';
+        registry.register(tool1);
+        registry.register(tool2);
+        expect(registry.size).toBe(1);
+        expect(registry.get('read_file')?.description).toBe('updated description');
+    });
+    it('should convert to OpenAI tools format', () => {
+        registry.register(makeTool('bash'));
+        const openAITools = registry.toOpenAITools();
+        expect(openAITools).toHaveLength(1);
+        expect(openAITools[0]).toEqual({
+            type: 'function',
+            function: {
+                name: 'bash',
+                description: 'bash tool description',
+                parameters: {
+                    type: 'object',
+                    properties: {
+                        path: {
+                            type: 'string',
+                            description: 'file path',
+                        },
+                    },
+                    required: ['path'],
+                },
+            },
+        });
+    });
+    it('should generate markdown text', () => {
+        registry.register(makeTool('read_file'));
+        const md = registry.toMarkdown();
+        expect(md).toContain('### read_file');
+        expect(md).toContain('read_file tool description');
+        expect(md).toContain('Parameters Schema');
+        expect(md).toContain('"type": "object"');
+    });
+    it('should return all tools in insertion order', () => {
+        registry.register(makeTool('a'));
+        registry.register(makeTool('b'));
+        const all = registry.getAll();
+        expect(all.map((t) => t.name)).toEqual(['a', 'b']);
+    });
+});
+//# sourceMappingURL=registry.test.js.map

package/dist/tools/registry.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.test.js","sourceRoot":"","sources":["../../src/tools/registry.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAG5C,iFAAiF;AAEjF,SAAS,QAAQ,CAAC,IAAY,EAAE,QAAQ,GAAG,KAAK;IAC5C,OAAO;QACH,IAAI;QACJ,WAAW,EAAE,GAAG,IAAI,mBAAmB;QACvC,WAAW,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACR,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE;aACrD;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACrB;QACD,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,SAAS,EAAE,CAAC;KACtD,CAAA;AACL,CAAC;AAED,iFAAiF;AAEjF,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC1B,IAAI,QAAsB,CAAA;IAE1B,UAAU,CAAC,GAAG,EAAE;QACZ,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC1B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAA;QAClC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;QAEvB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5C,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;QACnD,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC1C,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;QAC3D,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;QAE5B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAA;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAA;QACnC,KAAK,CAAC,WAAW,GAAG,qBAAqB,CAAA;QAEzC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACxB,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAExB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC,IAAI,CAC/C,qBAAqB,CACxB,CAAA;IACL,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC7C,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QACnC,MAAM,WAAW,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAA;QAE5C,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3B,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE;gBACN,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAE,uBAAuB;gBACpC,UAAU,EAAE;oBACR,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACR,IAAI,EAAE;4BACF,IAAI,EAAE,QAAQ;4BACd,WAAW,EAAE,WAAW;yBAC3B;qBACJ;oBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;iBACrB;aACJ;SACJ,CAAC,CAAA;IACN,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACrC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAA;QACxC,MAAM,EAAE,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAA;QAEhC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;QACrC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAA;QAClD,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAA;QACzC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QAClD,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;QAChC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;QAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAA;QAE7B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;AACN,CAAC,CAAC,CAAA"}

package/dist/tools/router.d.ts

@@ -0,0 +1,62 @@
+/**
+ * @file 工具路由器 — 统一管理内置工具和 MCP 工具。
+ *
+ * Phase 9：在 ToolRegistry（内置）和 McpToolRegistry（MCP）之上
+ * 提供统一的工具查询、执行描述生成接口。
+ *
+ * 设计思路：
+ *   1. ToolRouter 不替代 ToolRegistry/McpToolRegistry，而是组合它们
+ *   2. 工具查找优先内置，fallback 到 MCP
+ *   3. 实现 ToolQueryable 接口，可直接替换 ToolOrchestrator 的依赖
+ *   4. toOpenAITools() / toMarkdown() 合并两组工具的输出
+ */
+import type { ToolDefinition, MCPServerConfig } from '../types.js';
+/**
+ * 统一工具路由器。
+ *
+ * 用法：
+ * ```ts
+ * const router = new ToolRouter()
+ * router.registerNativeTools([readFileTool, bashTool])
+ * await router.loadMcpServers(mcpConfig)
+ *
+ * const tools = router.toOpenAITools()   // 传给 LLM
+ * const tool = router.get('bash')        // 查找工具
+ * ```
+ */
+export declare class ToolRouter {
+    private nativeRegistry;
+    private mcpRegistry;
+    /** 注册单个内置工具。 */
+    registerNativeTool(tool: ToolDefinition): void;
+    /** 批量注册内置工具。 */
+    registerNativeTools(tools: ToolDefinition[]): void;
+    /** 连接并加载所有 MCP Server。 */
+    loadMcpServers(servers: Record<string, MCPServerConfig>): Promise<number>;
+    /** 获取指定工具（优先内置，fallback MCP）。 */
+    get(name: string): ToolDefinition | undefined;
+    /** 获取所有工具（内置 + MCP）。 */
+    getAllTools(): ToolDefinition[];
+    /** 检查工具是否存在。 */
+    has(name: string): boolean;
+    /** 获取工具数量统计。 */
+    getToolCount(): {
+        native: number;
+        mcp: number;
+        total: number;
+    };
+    /** 转换为 OpenAI function calling 的 tools 参数格式。 */
+    toOpenAITools(): Array<{
+        type: 'function';
+        function: {
+            name: string;
+            description: string;
+            parameters: Record<string, unknown>;
+        };
+    }>;
+    /** 转换为 Markdown 文本，供系统提示词注入。 */
+    toMarkdown(): string;
+    /** 清理所有 MCP 连接。 */
+    dispose(): Promise<void>;
+}
+//# sourceMappingURL=router.d.ts.map

package/dist/tools/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/tools/router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAMlE;;;;;;;;;;;;GAYG;AACH,qBAAa,UAAU;IACnB,OAAO,CAAC,cAAc,CAAqB;IAC3C,OAAO,CAAC,WAAW,CAAwB;IAI3C,gBAAgB;IAChB,kBAAkB,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAI9C,gBAAgB;IAChB,mBAAmB,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,IAAI;IAIlD,0BAA0B;IACpB,cAAc,CAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GACzC,OAAO,CAAC,MAAM,CAAC;IAMlB,iCAAiC;IACjC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAK7C,wBAAwB;IACxB,WAAW,IAAI,cAAc,EAAE;IAO/B,gBAAgB;IAChB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAK1B,gBAAgB;IAChB,YAAY,IAAI;QACZ,MAAM,EAAE,MAAM,CAAA;QACd,GAAG,EAAE,MAAM,CAAA;QACX,KAAK,EAAE,MAAM,CAAA;KAChB;IAQD,gDAAgD;IAChD,aAAa,IAAI,KAAK,CAAC;QACnB,IAAI,EAAE,UAAU,CAAA;QAChB,QAAQ,EAAE;YACN,IAAI,EAAE,MAAM,CAAA;YACZ,WAAW,EAAE,MAAM,CAAA;YACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SACtC,CAAA;KACJ,CAAC;IAWF,gCAAgC;IAChC,UAAU,IAAI,MAAM;IAyCpB,mBAAmB;IACb,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAGjC"}

package/dist/tools/router.js

@@ -0,0 +1,119 @@
+/**
+ * @file 工具路由器 — 统一管理内置工具和 MCP 工具。
+ *
+ * Phase 9：在 ToolRegistry（内置）和 McpToolRegistry（MCP）之上
+ * 提供统一的工具查询、执行描述生成接口。
+ *
+ * 设计思路：
+ *   1. ToolRouter 不替代 ToolRegistry/McpToolRegistry，而是组合它们
+ *   2. 工具查找优先内置，fallback 到 MCP
+ *   3. 实现 ToolQueryable 接口，可直接替换 ToolOrchestrator 的依赖
+ *   4. toOpenAITools() / toMarkdown() 合并两组工具的输出
+ */
+import { ToolRegistry } from './registry.js';
+import { McpToolRegistry } from './mcp-registry.js';
+// ─── ToolRouter 类 ────────────────────────────────────────────────────────
+/**
+ * 统一工具路由器。
+ *
+ * 用法：
+ * ```ts
+ * const router = new ToolRouter()
+ * router.registerNativeTools([readFileTool, bashTool])
+ * await router.loadMcpServers(mcpConfig)
+ *
+ * const tools = router.toOpenAITools()   // 传给 LLM
+ * const tool = router.get('bash')        // 查找工具
+ * ```
+ */
+export class ToolRouter {
+    nativeRegistry = new ToolRegistry();
+    mcpRegistry = new McpToolRegistry();
+    // ── 注册方法 ──────────────────────────────────────
+    /** 注册单个内置工具。 */
+    registerNativeTool(tool) {
+        this.nativeRegistry.register(tool);
+    }
+    /** 批量注册内置工具。 */
+    registerNativeTools(tools) {
+        this.nativeRegistry.registerMany(tools);
+    }
+    /** 连接并加载所有 MCP Server。 */
+    async loadMcpServers(servers) {
+        return this.mcpRegistry.loadServers(servers);
+    }
+    // ── 查询方法 ──────────────────────────────────────
+    /** 获取指定工具（优先内置，fallback MCP）。 */
+    get(name) {
+        return this.nativeRegistry.get(name)
+            ?? this.mcpRegistry.get(name);
+    }
+    /** 获取所有工具（内置 + MCP）。 */
+    getAllTools() {
+        return [
+            ...this.nativeRegistry.getAll(),
+            ...this.mcpRegistry.getAll(),
+        ];
+    }
+    /** 检查工具是否存在。 */
+    has(name) {
+        return this.nativeRegistry.has(name)
+            || this.mcpRegistry.has(name);
+    }
+    /** 获取工具数量统计。 */
+    getToolCount() {
+        const native = this.nativeRegistry.size;
+        const mcp = this.mcpRegistry.size;
+        return { native, mcp, total: native + mcp };
+    }
+    // ── 格式转换 ──────────────────────────────────────
+    /** 转换为 OpenAI function calling 的 tools 参数格式。 */
+    toOpenAITools() {
+        return this.getAllTools().map((tool) => ({
+            type: 'function',
+            function: {
+                name: tool.name,
+                description: tool.description,
+                parameters: tool.inputSchema,
+            },
+        }));
+    }
+    /** 转换为 Markdown 文本，供系统提示词注入。 */
+    toMarkdown() {
+        const sections = [];
+        const nativeTools = this.nativeRegistry.getAll();
+        if (nativeTools.length > 0) {
+            sections.push('## Built-in Tools\n');
+            for (const tool of nativeTools) {
+                sections.push(`### ${tool.name}\n${tool.description}\n\n` +
+                    `**Parameters Schema**:\n\`\`\`json\n` +
+                    `${JSON.stringify(tool.inputSchema, null, 2)}\n\`\`\``);
+            }
+        }
+        const mcpTools = this.mcpRegistry.getAll();
+        if (mcpTools.length > 0) {
+            sections.push('\n## External MCP Tools\n');
+            const grouped = new Map();
+            for (const tool of mcpTools) {
+                const list = grouped.get(tool.serverName) ?? [];
+                list.push(tool);
+                grouped.set(tool.serverName, list);
+            }
+            for (const [server, tools] of grouped) {
+                sections.push(`**Server: ${server}**\n`);
+                for (const tool of tools) {
+                    sections.push(`### ${tool.name}\n${tool.description}\n\n` +
+                        `**Parameters Schema**:\n\`\`\`json\n` +
+                        `${JSON.stringify(tool.inputSchema, null, 2)}\n\`\`\``);
+                }
+            }
+        }
+        return sections.join('\n\n');
+    }
+    // ── 生命周期 ──────────────────────────────────────
+    /** 清理所有 MCP 连接。 */
+    async dispose() {
+        await this.mcpRegistry.dispose();
+    }
+}
+//# sourceMappingURL=router.js.map

package/dist/tools/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/tools/router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAEnD,4EAA4E;AAE5E;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,UAAU;IACX,cAAc,GAAG,IAAI,YAAY,EAAE,CAAA;IACnC,WAAW,GAAG,IAAI,eAAe,EAAE,CAAA;IAE3C,iDAAiD;IAEjD,gBAAgB;IAChB,kBAAkB,CAAC,IAAoB;QACnC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IACtC,CAAC;IAED,gBAAgB;IAChB,mBAAmB,CAAC,KAAuB;QACvC,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;IAC3C,CAAC;IAED,0BAA0B;IAC1B,KAAK,CAAC,cAAc,CAChB,OAAwC;QAExC,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;IAChD,CAAC;IAED,iDAAiD;IAEjD,iCAAiC;IACjC,GAAG,CAAC,IAAY;QACZ,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;eAC7B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC;IAED,wBAAwB;IACxB,WAAW;QACP,OAAO;YACH,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE;YAC/B,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE;SAC/B,CAAA;IACL,CAAC;IAED,gBAAgB;IAChB,GAAG,CAAC,IAAY;QACZ,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;eAC7B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC;IAED,gBAAgB;IAChB,YAAY;QAKR,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAA;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAA;QACjC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,EAAE,CAAA;IAC/C,CAAC;IAED,iDAAiD;IAEjD,gDAAgD;IAChD,aAAa;QAQT,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACrC,IAAI,EAAE,UAAmB;YACzB,QAAQ,EAAE;gBACN,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,UAAU,EAAE,IAAI,CAAC,WAAW;aAC/B;SACJ,CAAC,CAAC,CAAA;IACP,CAAC;IAED,gCAAgC;IAChC,UAAU;QACN,MAAM,QAAQ,GAAa,EAAE,CAAA;QAE7B,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAA;QAChD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;YACpC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CACT,OAAO,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,MAAM;oBAC3C,sCAAsC;oBACtC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,CACzD,CAAA;YACL,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAA;QAC1C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;YAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAA;YAClD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAA;gBAC/C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;YACtC,CAAC;YACD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;gBACpC,QAAQ,CAAC,IAAI,CAAC,aAAa,MAAM,MAAM,CAAC,CAAA;gBACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACvB,QAAQ,CAAC,IAAI,CACT,OAAO,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,MAAM;wBAC3C,sCAAsC;wBACtC,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,CACzD,CAAA;gBACL,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAChC,CAAC;IAED,iDAAiD;IAEjD,mBAAmB;IACnB,KAAK,CAAC,OAAO;QACT,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAA;IACpC,CAAC;CACJ"}

package/dist/tools/router.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @file Unit tests for ToolRouter (Phase 9).
+ *
+ * Tests: Native priority, get, has, toOpenAITools, toMarkdown
+ */
+export {};
+//# sourceMappingURL=router.test.d.ts.map

package/dist/tools/router.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.test.d.ts","sourceRoot":"","sources":["../../src/tools/router.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/tools/router.test.js

@@ -0,0 +1,102 @@
+/**
+ * @file Unit tests for ToolRouter (Phase 9).
+ *
+ * Tests: Native priority, get, has, toOpenAITools, toMarkdown
+ */
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { ToolRouter } from './router.js';
+import { ToolRegistry } from './registry.js';
+// Simple mock for McpToolRegistry to avoid full MCP client dependency
+class MockMcpRegistry {
+    tools = new Map();
+    async getTools() {
+        return Array.from(this.tools.values());
+    }
+    get(name) {
+        return this.tools.get(name);
+    }
+    has(name) {
+        return this.tools.has(name);
+    }
+    getAll() {
+        return Array.from(this.tools.values());
+    }
+}
+describe('ToolRouter', () => {
+    let nativeReg;
+    let mcpReg;
+    let router;
+    beforeEach(() => {
+        nativeReg = new ToolRegistry();
+        mcpReg = new MockMcpRegistry();
+        router = new ToolRouter();
+        // Inject nativeRegistry and mcpRegistry manually for tests
+        // since they are internal and not passed via constructor
+        Object.assign(router, { nativeRegistry: nativeReg, mcpRegistry: mcpReg });
+    });
+    function makeTool(name) {
+        return {
+            name,
+            description: `${name} desc`,
+            inputSchema: { type: 'object', properties: {} },
+            isMutating: false,
+            execute: vi.fn(),
+        };
+    }
+    it('should query both registries for has()', async () => {
+        nativeReg.register(makeTool('native_tool'));
+        mcpReg.tools.set('mcp_tool', makeTool('mcp_tool'));
+        expect(router.has('native_tool')).toBe(true);
+        expect(router.has('mcp_tool')).toBe(true);
+        expect(router.has('unknown')).toBe(false);
+    });
+    it('should return undefined from get() if not found', async () => {
+        expect(router.get('unknown')).toBeUndefined();
+    });
+    it('should get from native registry', async () => {
+        nativeReg.register(makeTool('native_tool'));
+        const tool = router.get('native_tool');
+        expect(tool).toBeDefined();
+        expect(tool?.name).toBe('native_tool');
+    });
+    it('should get from mcp registry', async () => {
+        mcpReg.tools.set('mcp_tool', makeTool('mcp_tool'));
+        const tool = router.get('mcp_tool');
+        expect(tool).toBeDefined();
+        expect(tool?.name).toBe('mcp_tool');
+    });
+    it('should prioritize native tools over mcp tools on exact name match', async () => {
+        const nativeOne = makeTool('conflict_tool');
+        nativeOne.description = 'NATIVE';
+        const mcpOne = makeTool('conflict_tool');
+        mcpOne.description = 'MCP';
+        nativeReg.register(nativeOne);
+        mcpReg.tools.set('conflict_tool', mcpOne);
+        // `get` should return the native one
+        const tool = router.get('conflict_tool');
+        expect(tool?.description).toBe('NATIVE');
+    });
+    it('should combine tools from both in getAllTools()', async () => {
+        nativeReg.register(makeTool('n1'));
+        mcpReg.tools.set('m1', makeTool('m1'));
+        const all = router.getAllTools();
+        expect(all).toHaveLength(2);
+        expect(all.map(t => t.name).sort()).toEqual(['m1', 'n1']);
+    });
+    it('should correctly build markdown docs', async () => {
+        nativeReg.register(makeTool('sys_info'));
+        mcpReg.tools.set('web_search', makeTool('web_search'));
+        const md = router.toMarkdown();
+        expect(md).toContain('### sys_info');
+        expect(md).toContain('### web_search');
+    });
+    it('should correctly format combined list as OpenAI tools', async () => {
+        nativeReg.register(makeTool('sys_info'));
+        mcpReg.tools.set('web_search', makeTool('web_search'));
+        const schemas = router.toOpenAITools();
+        expect(schemas).toHaveLength(2);
+        const names = schemas.map(s => s.function.name).sort();
+        expect(names).toEqual(['sys_info', 'web_search']);
+    });
+});
+//# sourceMappingURL=router.test.js.map

package/dist/tools/router.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.test.js","sourceRoot":"","sources":["../../src/tools/router.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAG5C,sEAAsE;AACtE,MAAM,eAAe;IACjB,KAAK,GAAgC,IAAI,GAAG,EAAE,CAAA;IAE9C,KAAK,CAAC,QAAQ;QACV,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1C,CAAC;IAED,GAAG,CAAC,IAAY;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC;IAED,GAAG,CAAC,IAAY;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC;IAED,MAAM;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;IAC1C,CAAC;CACJ;AAED,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IACxB,IAAI,SAAuB,CAAA;IAC3B,IAAI,MAAuB,CAAA;IAC3B,IAAI,MAAkB,CAAA;IAEtB,UAAU,CAAC,GAAG,EAAE;QACZ,SAAS,GAAG,IAAI,YAAY,EAAE,CAAA;QAC9B,MAAM,GAAG,IAAI,eAAe,EAAE,CAAA;QAC9B,MAAM,GAAG,IAAI,UAAU,EAAE,CAAA;QACzB,2DAA2D;QAC3D,yDAAyD;QACzD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,MAAa,EAAE,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;IAEF,SAAS,QAAQ,CAAC,IAAY;QAC1B,OAAO;YACH,IAAI;YACJ,WAAW,EAAE,GAAG,IAAI,OAAO;YAC3B,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;YAC/C,UAAU,EAAE,KAAK;YACjB,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE;SACnB,CAAA;IACL,CAAC;IAED,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACpD,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAA;QAC3C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAA;QAElD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC5C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC7C,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAA;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;QAC1B,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAA;QAClD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QACnC,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAA;QAC1B,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,SAAS,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAA;QAC3C,SAAS,CAAC,WAAW,GAAG,QAAQ,CAAA;QAEhC,MAAM,MAAM,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAA;QACxC,MAAM,CAAC,WAAW,GAAG,KAAK,CAAA;QAE1B,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;QAC7B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;QAEzC,qCAAqC;QACrC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC7D,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;QAClC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;QAEtC,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;QAChC,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QAClD,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAA;QAEtD,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;QAC9B,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QACpC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACnE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAA;QAEtD,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,EAAE,CAAA;QACtC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAE/B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;QACtD,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;AACN,CAAC,CAAC,CAAA"}

package/dist/tools/safety.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @file 安全工具函数 — 路径校验、命令分级、敏感文件检测。
+ *
+ * Phase 3：基础安全机制。
+ * Phase 4 将在此基础上增加完整审批流程。
+ */
+export declare function validatePath(filePath: string): {
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+};
+export type CommandSafety = 'safe' | 'confirm' | 'block';
+export declare function classifyCommand(command: string): CommandSafety;
+export declare function isSensitiveFile(filePath: string): boolean;
+//# sourceMappingURL=safety.d.ts.map

package/dist/tools/safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../src/tools/safety.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAsDH,wBAAgB,YAAY,CACxB,QAAQ,EAAE,MAAM,GACjB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAS7C;AAID,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAA;AAExD,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAU9D;AAID,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAQzD"}

package/dist/tools/safety.js

@@ -0,0 +1,81 @@
+/**
+ * @file 安全工具函数 — 路径校验、命令分级、敏感文件检测。
+ *
+ * Phase 3：基础安全机制。
+ * Phase 4 将在此基础上增加完整审批流程。
+ */
+import * as path from 'node:path';
+// ─── 敏感文件列表 ─────────────────────────────────────────────────────────────
+/** 不应被读写的敏感文件模式。 */
+const SENSITIVE_PATTERNS = [
+    '.env',
+    '.env.local',
+    '.env.production',
+    'id_rsa',
+    'id_ed25519',
+    'id_ecdsa',
+    '.ssh/config',
+    '.npmrc',
+    '.pypirc',
+    'credentials',
+    'shadow',
+    'passwd',
+];
+// ─── 危险命令列表 ─────────────────────────────────────────────────────────────
+/** 绝对禁止执行的命令（block 级别）。 */
+const BLOCKED_COMMANDS = new Set([
+    'rm -rf /',
+    'rm -rf ~',
+    'rm -rf /*',
+    'mkfs',
+    'dd if=',
+    ':(){:|:&};:',
+    'shutdown',
+    'reboot',
+    'halt',
+    'poweroff',
+    'format',
+]);
+/** 需要用户确认的命令前缀（confirm 级别）。 */
+const CONFIRM_PREFIXES = [
+    'rm ',
+    'rmdir ',
+    'del ',
+    'rd ',
+    'mv ',
+    'chmod ',
+    'chown ',
+    'kill ',
+    'pkill ',
+];
+// ─── 路径校验 ─────────────────────────────────────────────────────────────────
+export function validatePath(filePath) {
+    const normalized = path.normalize(filePath);
+    if (normalized.includes('..')) {
+        return { ok: false, error: `Path traversal detected: ${filePath}` };
+    }
+    if (isSensitiveFile(filePath)) {
+        return { ok: false, error: `Access to sensitive file denied: ${filePath}` };
+    }
+    return { ok: true };
+}
+export function classifyCommand(command) {
+    const trimmed = command.trim().toLowerCase();
+    for (const blocked of BLOCKED_COMMANDS) {
+        if (trimmed.includes(blocked))
+            return 'block';
+    }
+    for (const prefix of CONFIRM_PREFIXES) {
+        if (trimmed.startsWith(prefix))
+            return 'confirm';
+    }
+    return 'safe';
+}
+// ─── 敏感文件检测 ──────────────────────────────────────────────────────────────
+export function isSensitiveFile(filePath) {
+    const basename = path.basename(filePath);
+    const normalized = filePath.replace(/\\/g, '/');
+    return SENSITIVE_PATTERNS.some((pattern) => basename === pattern ||
+        normalized.endsWith(`/${pattern}`));
+}
+//# sourceMappingURL=safety.js.map

package/dist/tools/safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../src/tools/safety.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAA;AAEjC,2EAA2E;AAE3E,oBAAoB;AACpB,MAAM,kBAAkB,GAAG;IACvB,MAAM;IACN,YAAY;IACZ,iBAAiB;IACjB,QAAQ;IACR,YAAY;IACZ,UAAU;IACV,aAAa;IACb,QAAQ;IACR,SAAS;IACT,aAAa;IACb,QAAQ;IACR,QAAQ;CACX,CAAA;AAED,2EAA2E;AAE3E,2BAA2B;AAC3B,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC7B,UAAU;IACV,UAAU;IACV,WAAW;IACX,MAAM;IACN,QAAQ;IACR,aAAa;IACb,UAAU;IACV,QAAQ;IACR,MAAM;IACN,UAAU;IACV,QAAQ;CACX,CAAC,CAAA;AAEF,+BAA+B;AAC/B,MAAM,gBAAgB,GAAG;IACrB,KAAK;IACL,QAAQ;IACR,MAAM;IACN,KAAK;IACL,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,QAAQ;CACX,CAAA;AAED,6EAA6E;AAE7E,MAAM,UAAU,YAAY,CACxB,QAAgB;IAEhB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IAC3C,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,QAAQ,EAAE,EAAE,CAAA;IACvE,CAAC;IACD,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,QAAQ,EAAE,EAAE,CAAA;IAC/E,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;AACvB,CAAC;AAMD,MAAM,UAAU,eAAe,CAAC,OAAe;IAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAE5C,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAA;IACjD,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;QACpC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAA;IACpD,CAAC;IACD,OAAO,MAAM,CAAA;AACjB,CAAC;AAED,4EAA4E;AAE5E,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACxC,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAC/C,OAAO,kBAAkB,CAAC,IAAI,CAC1B,CAAC,OAAO,EAAE,EAAE,CACR,QAAQ,KAAK,OAAO;QACpB,UAAU,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC,CACzC,CAAA;AACL,CAAC"}

package/dist/tools/safety.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @file Unit tests for safety module (Phase 3).
+ *
+ * Tests: validatePath, classifyCommand, isSensitiveFile
+ */
+export {};
+//# sourceMappingURL=safety.test.d.ts.map

package/dist/tools/safety.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.test.d.ts","sourceRoot":"","sources":["../../src/tools/safety.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/tools/safety.test.js

@@ -0,0 +1,104 @@
+/**
+ * @file Unit tests for safety module (Phase 3).
+ *
+ * Tests: validatePath, classifyCommand, isSensitiveFile
+ */
+import { describe, it, expect } from 'vitest';
+import { validatePath, classifyCommand, isSensitiveFile } from './safety.js';
+// ─── validatePath ─────────────────────────────────────────────────────────────
+describe('validatePath', () => {
+    it('should accept a normal relative path', () => {
+        const result = validatePath('src/index.ts');
+        expect(result).toEqual({ ok: true });
+    });
+    it('should accept an absolute path without traversal', () => {
+        const result = validatePath('/home/user/project/file.ts');
+        expect(result).toEqual({ ok: true });
+    });
+    it('should reject path traversal with ..', () => {
+        const result = validatePath('../../../etc/passwd');
+        expect(result.ok).toBe(false);
+        if (!result.ok) {
+            expect(result.error).toContain('Path traversal');
+        }
+    });
+    it('should reject hidden traversal like foo/../../bar', () => {
+        const result = validatePath('foo/../../bar');
+        expect(result.ok).toBe(false);
+    });
+    it('should reject access to sensitive files', () => {
+        const result = validatePath('.env');
+        expect(result.ok).toBe(false);
+        if (!result.ok) {
+            expect(result.error).toContain('sensitive');
+        }
+    });
+    it('should reject access to SSH keys', () => {
+        const result = validatePath('id_rsa');
+        expect(result.ok).toBe(false);
+    });
+});
+// ─── classifyCommand ──────────────────────────────────────────────────────────
+describe('classifyCommand', () => {
+    it('should block rm -rf /', () => {
+        expect(classifyCommand('rm -rf /')).toBe('block');
+    });
+    it('should block shutdown', () => {
+        expect(classifyCommand('shutdown')).toBe('block');
+    });
+    it('should block fork bomb', () => {
+        expect(classifyCommand(':(){:|:&};:')).toBe('block');
+    });
+    it('should require confirm for rm commands', () => {
+        expect(classifyCommand('rm foo.txt')).toBe('confirm');
+    });
+    it('should require confirm for mv commands', () => {
+        expect(classifyCommand('mv a.txt b.txt')).toBe('confirm');
+    });
+    it('should require confirm for kill commands', () => {
+        expect(classifyCommand('kill 1234')).toBe('confirm');
+    });
+    it('should mark ls as safe', () => {
+        expect(classifyCommand('ls -la')).toBe('safe');
+    });
+    it('should mark cat as safe', () => {
+        expect(classifyCommand('cat file.txt')).toBe('safe');
+    });
+    it('should mark echo as safe', () => {
+        expect(classifyCommand('echo hello')).toBe('safe');
+    });
+    it('should be case-insensitive', () => {
+        expect(classifyCommand('SHUTDOWN')).toBe('block');
+    });
+    it('should trim whitespace', () => {
+        expect(classifyCommand('  rm foo  ')).toBe('confirm');
+    });
+});
+// ─── isSensitiveFile ──────────────────────────────────────────────────────────
+describe('isSensitiveFile', () => {
+    it('should detect .env', () => {
+        expect(isSensitiveFile('.env')).toBe(true);
+    });
+    it('should detect .env.local', () => {
+        expect(isSensitiveFile('.env.local')).toBe(true);
+    });
+    it('should detect id_rsa in any directory', () => {
+        expect(isSensitiveFile('/home/user/.ssh/id_rsa')).toBe(true);
+    });
+    it('should detect id_ed25519', () => {
+        expect(isSensitiveFile('id_ed25519')).toBe(true);
+    });
+    it('should detect .ssh/config via path suffix', () => {
+        expect(isSensitiveFile('/home/user/.ssh/config')).toBe(true);
+    });
+    it('should detect .npmrc', () => {
+        expect(isSensitiveFile('.npmrc')).toBe(true);
+    });
+    it('should not flag normal files', () => {
+        expect(isSensitiveFile('index.ts')).toBe(false);
+    });
+    it('should not flag package.json', () => {
+        expect(isSensitiveFile('package.json')).toBe(false);
+    });
+});
+//# sourceMappingURL=safety.test.js.map