@jungjaehoon/mama-os 0.25.0 → 0.26.0

package/dist/agent/gateway-tool-executor.js

@@ -61,6 +61,8 @@ const mama_core_1 = require("@jungjaehoon/mama-core");
 const security_monitor_js_1 = require("../security/security-monitor.js");
 const secret_filter_js_1 = require("../memory/secret-filter.js");
 const scope_context_js_1 = require("../memory/scope-context.js");
+const drive_tools_js_1 = require("./drive-tools.js");
+const untrusted_content_js_1 = require("../utils/untrusted-content.js");
 const types_js_1 = require("./types.js");
 const sqlite_js_1 = __importDefault(require("../sqlite.js"));
 const mama_tool_handlers_js_1 = require("./mama-tool-handlers.js");
@@ -368,6 +370,7 @@ const VALID_TOOLS = tool_registry_js_1.ToolRegistry.getValidToolNames();
 const SENSITIVE_KEYS = ['token', 'bot_token', 'app_token', 'api_token', 'api_key', 'secret'];
 const execFileAsync = (0, util_1.promisify)(child_process_1.execFile);
 class GatewayToolExecutor {
+    driveTools = new drive_tools_js_1.DriveToolService();
     mamaApi = null;
     mamaDbPath;
     sessionStore;
@@ -1489,6 +1492,13 @@ class GatewayToolExecutor {
         if (!VALID_TOOLS.includes(toolName)) {
             throw new types_js_1.AgentError(`Unknown tool: ${toolName}. Valid tools: ${VALID_TOOLS.join(', ')}`, 'UNKNOWN_TOOL', undefined, false);
         }
+        if (toolName.startsWith('drive_') &&
+            this.getExecutionState().agentContext?.roleName !== 'owner_console') {
+            return {
+                success: false,
+                error: 'Permission denied: Google Drive tools are restricted to owner_console.',
+            };
+        }
         // Structurally disallowed tools are per-call policy carried by the execution
         // context (a shared executor serves many agents with different blocks).
         const activeDisallowed = this.getExecutionState()?.disallowedGatewayTools;
@@ -1538,6 +1548,31 @@ class GatewayToolExecutor {
                     return await this.executeSlackSend(input);
                 case 'telegram_send':
                     return await this.executeTelegramSend(input);
+                case 'drive_list_drives':
+                    return {
+                        success: true,
+                        result: (0, drive_tools_js_1.asUntrustedDriveEvidence)(await this.driveTools.listDrives()),
+                    };
+                case 'drive_browse':
+                    return {
+                        success: true,
+                        result: (0, drive_tools_js_1.asUntrustedDriveEvidence)(await this.driveTools.browse(input)),
+                    };
+                case 'drive_find_folder':
+                    return {
+                        success: true,
+                        result: (0, drive_tools_js_1.asUntrustedDriveEvidence)(await this.driveTools.findFolder(input)),
+                    };
+                case 'drive_download':
+                    return {
+                        success: true,
+                        result: (0, drive_tools_js_1.asUntrustedDriveEvidence)(await this.driveTools.download(input)),
+                    };
+                case 'drive_upload':
+                    return {
+                        success: true,
+                        result: (0, drive_tools_js_1.asUntrustedDriveEvidence)(await this.driveTools.upload(input)),
+                    };
                 // Browser tools
                 case 'browser_navigate':
                     return await this.executeBrowserNavigate(input);
@@ -3475,6 +3510,7 @@ class GatewayToolExecutor {
         try {
             policy = projectCodeActToolPolicy({
                 tier,
+                roleName: state.agentContext?.roleName,
                 role: state.agentContext?.role,
                 disallowedTools: state.disallowedGatewayTools,
                 requestedAllowedTools: input.allowedTools,
@@ -3497,12 +3533,25 @@ class GatewayToolExecutor {
             parentToolName: 'code_act',
         };
         const bridge = new HostBridge(this, this.roleManager, nestedExecutionContext);
+        let usedUntrustedDriveEvidence = false;
+        bridge.onToolUse = (toolName, _toolInput, result) => {
+            if (result !== undefined && toolName.startsWith('drive_') && toolName !== 'drive_upload') {
+                usedUntrustedDriveEvidence = true;
+            }
+        };
         bridge.injectInto(sandbox, policy.names);
         const result = await sandbox.execute(input.code);
+        const successfulMessage = JSON.stringify({
+            value: result.value,
+            logs: result.logs,
+            metrics: result.metrics,
+        });
         return {
             success: result.success,
             message: result.success
-                ? JSON.stringify({ value: result.value, logs: result.logs, metrics: result.metrics })
+                ? usedUntrustedDriveEvidence
+                    ? (0, untrusted_content_js_1.wrapUntrustedContent)('google-drive-code-act', successfulMessage)
+                    : successfulMessage
                 : `Code-Act error: ${result.error?.message || 'Unknown error'}`,
         };
     }