@nervekit/tools 0.1.0

package/dist/safety/command-policy-parser.js

@@ -0,0 +1,121 @@
+import { parse as shellParse } from "shell-quote";
+function isOpEntry(entry) {
+    return typeof entry === "object" && typeof entry.op === "string";
+}
+function isCommentEntry(entry) {
+    return typeof entry === "object" && typeof entry.comment === "string";
+}
+export function parseCommand(command) {
+    try {
+        const result = shellParse(command, (key) => `$${key}`);
+        if (!Array.isArray(result))
+            return null;
+        return result;
+    }
+    catch {
+        return null;
+    }
+}
+/** Detect $() and backtick command substitution outside single quotes. */
+export function hasCommandSubstitution(command) {
+    let inSingleQuote = false;
+    let inDoubleQuote = false;
+    let escaped = false;
+    for (let i = 0; i < command.length; i++) {
+        const char = command[i];
+        if (escaped) {
+            escaped = false;
+            continue;
+        }
+        if (char === "\\" && inDoubleQuote) {
+            escaped = true;
+            continue;
+        }
+        if (char === "'" && !inDoubleQuote) {
+            inSingleQuote = !inSingleQuote;
+            continue;
+        }
+        if (char === '"' && !inSingleQuote) {
+            inDoubleQuote = !inDoubleQuote;
+            continue;
+        }
+        if (!inSingleQuote) {
+            if (char === "$" && command[i + 1] === "(")
+                return true;
+            if (char === "`")
+                return true;
+        }
+    }
+    return false;
+}
+export function hasUnsafeConstructs(entries) {
+    for (let i = 0; i < entries.length; i++) {
+        const entry = entries[i];
+        if (!isOpEntry(entry))
+            continue;
+        const op = entry.op;
+        if (op === "<(" || op === ">(")
+            return true;
+        if (op === "(" || op === ")")
+            return true;
+        if (op === "<<<")
+            return true;
+        if (op === "&") {
+            const next = entries[i + 1];
+            if (i + 2 < entries.length &&
+                isOpEntry(next) &&
+                next.op === ">" &&
+                entries[i + 2] === "/dev/null") {
+                continue;
+            }
+            return true;
+        }
+    }
+    return false;
+}
+export function hasUnsafeRedirects(entries) {
+    for (let i = 0; i < entries.length; i++) {
+        const entry = entries[i];
+        if (!isOpEntry(entry))
+            continue;
+        const op = entry.op;
+        if (op === ">" || op === ">>") {
+            const target = entries[i + 1];
+            if (typeof target === "string" && target === "/dev/null") {
+                i++;
+                continue;
+            }
+            return true;
+        }
+        if (op === "<")
+            return true;
+        if (op === ">&") {
+            const target = entries[i + 1];
+            if (typeof target === "string" && /^\d$/.test(target)) {
+                i++;
+                continue;
+            }
+            return true;
+        }
+    }
+    return false;
+}
+export function extractSegments(entries) {
+    const segments = [[]];
+    for (const entry of entries) {
+        if (isCommentEntry(entry))
+            continue;
+        if (typeof entry === "string") {
+            segments[segments.length - 1].push(entry);
+            continue;
+        }
+        if (!isOpEntry(entry))
+            continue;
+        if (["|", "||", "&&", ";"].includes(entry.op)) {
+            if (segments[segments.length - 1].length > 0)
+                segments.push([]);
+        }
+    }
+    return segments.filter((segment) => segment.length > 0);
+}
+//# sourceMappingURL=command-policy-parser.js.map

package/dist/safety/command-policy-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-policy-parser.js","sourceRoot":"","sources":["../../src/safety/command-policy-parser.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,UAAU,EAAE,MAAM,aAAa,CAAC;AAIlD,SAAS,SAAS,CAAC,KAAiB;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC;AACnE,CAAC;AAED,SAAS,cAAc,CAAC,KAAiB;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,OAAO,MAAsB,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAExB,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,GAAG,KAAK,CAAC;YAChB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,IAAI,IAAI,aAAa,EAAE,CAAC;YACnC,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACnC,aAAa,GAAG,CAAC,aAAa,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACnC,aAAa,GAAG,CAAC,aAAa,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,IAAI,IAAI,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YACxD,IAAI,IAAI,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;QAChC,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAqB;IACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,SAAS;QAEhC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QAEpB,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC5C,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC1C,IAAI,EAAE,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAE9B,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5B,IACE,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM;gBACtB,SAAS,CAAC,IAAI,CAAC;gBACf,IAAI,CAAC,EAAE,KAAK,GAAG;gBACf,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,WAAW,EAC9B,CAAC;gBACD,SAAS;YACX,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAqB;IACtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,SAAS;QAEhC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QAEpB,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;gBACzD,CAAC,EAAE,CAAC;gBACJ,SAAS;YACX,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,EAAE,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAE5B,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtD,CAAC,EAAE,CAAC;gBACJ,SAAS;YACX,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAqB;IACnD,MAAM,QAAQ,GAAe,CAAC,EAAE,CAAC,CAAC;IAElC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,cAAc,CAAC,KAAK,CAAC;YAAE,SAAS;QAEpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1C,SAAS;QACX,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,SAAS;QAEhC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9C,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC1D,CAAC"}

package/dist/safety/command-policy-wrappers.d.ts

@@ -0,0 +1,6 @@
+export declare function stripEnvVarAssignments(tokens: string[]): string[];
+export declare function normalizeCommandName(command: string): string;
+export declare function unwrapCommandTokens(tokens: string[]): string[];
+export declare function getXargsInvokedCommandIndex(tokens: string[]): number | undefined;
+export declare function hasAnyToken(tokens: string[], blocked: Set<string>): boolean;
+//# sourceMappingURL=command-policy-wrappers.d.ts.map

package/dist/safety/command-policy-wrappers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-policy-wrappers.d.ts","sourceRoot":"","sources":["../../src/safety/command-policy-wrappers.ts"],"names":[],"mappings":"AAAA,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CASjE;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE5D;AAiBD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAgD9D;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,MAAM,EAAE,GACf,MAAM,GAAG,SAAS,CAmBpB;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAE3E"}

package/dist/safety/command-policy-wrappers.js

@@ -0,0 +1,95 @@
+export function stripEnvVarAssignments(tokens) {
+    let index = 0;
+    while (index < tokens.length &&
+        /^[A-Za-z_][A-Za-z0-9_]*=/.test(tokens[index] ?? "")) {
+        index++;
+    }
+    return tokens.slice(index);
+}
+export function normalizeCommandName(command) {
+    return (command.split("/").pop() ?? command).trim();
+}
+function stripLeadingOptions(tokens) {
+    let index = 0;
+    while (tokens[index]?.startsWith("-"))
+        index++;
+    return tokens.slice(index);
+}
+const WRAPPER_ROOT_COMMANDS = new Set([
+    "command",
+    "env",
+    "nice",
+    "nohup",
+    "time",
+    "timeout",
+]);
+export function unwrapCommandTokens(tokens) {
+    let current = tokens;
+    for (let depth = 0; depth < 5; depth++) {
+        const rootCommand = normalizeCommandName(current[0] ?? "");
+        if (!WRAPPER_ROOT_COMMANDS.has(rootCommand))
+            break;
+        if (rootCommand === "env") {
+            let index = 1;
+            while (index < current.length) {
+                const token = current[index];
+                if (token === "-u" || token === "--unset" || token === "-S") {
+                    index += 2;
+                    continue;
+                }
+                if (token.startsWith("-")) {
+                    index++;
+                    continue;
+                }
+                if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(token)) {
+                    index++;
+                    continue;
+                }
+                break;
+            }
+            current = current.slice(index);
+            continue;
+        }
+        if (rootCommand === "timeout") {
+            const withoutOptions = stripLeadingOptions(current.slice(1));
+            current = withoutOptions.slice(1);
+            continue;
+        }
+        if (rootCommand === "nice") {
+            let index = 1;
+            if (current[index] === "-n")
+                index += 2;
+            else if (current[index]?.startsWith("-n"))
+                index++;
+            while (current[index]?.startsWith("-"))
+                index++;
+            current = current.slice(index);
+            continue;
+        }
+        current = stripLeadingOptions(current.slice(1));
+    }
+    return current;
+}
+export function getXargsInvokedCommandIndex(tokens) {
+    for (let i = 1; i < tokens.length; i++) {
+        const token = tokens[i];
+        if (token === "-E" ||
+            token === "-I" ||
+            token === "-L" ||
+            token === "-P" ||
+            token === "-d" ||
+            token === "-n" ||
+            token === "-s") {
+            i++;
+            continue;
+        }
+        if (token.startsWith("-"))
+            continue;
+        return i;
+    }
+    return undefined;
+}
+export function hasAnyToken(tokens, blocked) {
+    return tokens.some((token) => blocked.has(token));
+}
+//# sourceMappingURL=command-policy-wrappers.js.map

package/dist/safety/command-policy-wrappers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-policy-wrappers.js","sourceRoot":"","sources":["../../src/safety/command-policy-wrappers.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,sBAAsB,CAAC,MAAgB;IACrD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OACE,KAAK,GAAG,MAAM,CAAC,MAAM;QACrB,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EACpD,CAAC;QACD,KAAK,EAAE,CAAC;IACV,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAgB;IAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC;QAAE,KAAK,EAAE,CAAC;IAC/C,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,SAAS;IACT,KAAK;IACL,MAAM;IACN,OAAO;IACP,MAAM;IACN,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,UAAU,mBAAmB,CAAC,MAAgB;IAClD,IAAI,OAAO,GAAG,MAAM,CAAC;IAErB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,MAAM;QAEnD,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;YAC1B,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,OAAO,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBAC5D,KAAK,IAAI,CAAC,CAAC;oBACX,SAAS;gBACX,CAAC;gBACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,KAAK,EAAE,CAAC;oBACR,SAAS;gBACX,CAAC;gBACD,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC3C,KAAK,EAAE,CAAC;oBACR,SAAS;gBACX,CAAC;gBACD,MAAM;YACR,CAAC;YACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,cAAc,GAAG,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QAED,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI;gBAAE,KAAK,IAAI,CAAC,CAAC;iBACnC,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC;gBAAE,KAAK,EAAE,CAAC;YACnD,OAAO,OAAO,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC;gBAAE,KAAK,EAAE,CAAC;YAChD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,MAAgB;IAEhB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IACE,KAAK,KAAK,IAAI;YACd,KAAK,KAAK,IAAI;YACd,KAAK,KAAK,IAAI;YACd,KAAK,KAAK,IAAI;YACd,KAAK,KAAK,IAAI;YACd,KAAK,KAAK,IAAI;YACd,KAAK,KAAK,IAAI,EACd,CAAC;YACD,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAgB,EAAE,OAAoB;IAChE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACpD,CAAC"}

package/dist/safety/command-policy.d.ts

@@ -0,0 +1,6 @@
+export declare function hasShellControlOperator(command: string): boolean;
+export declare function isKnownReadOnlyCommand(command: string): boolean;
+export declare function hasDangerousCommandPattern(command: string): boolean;
+export declare function isLikelyLongRunningCommand(command: string): boolean;
+export declare function isAllowedPlanModeBashCommand(command: string): boolean;
+//# sourceMappingURL=command-policy.d.ts.map

package/dist/safety/command-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-policy.d.ts","sourceRoot":"","sources":["../../src/safety/command-policy.ts"],"names":[],"mappings":"AAuBA,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAMhE;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAe/D;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAInE;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAWnE;AA8DD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAcrE"}

package/dist/safety/command-policy.js

@@ -0,0 +1,118 @@
+import { isBlockedGitInvocation } from "./command-policy-git.js";
+import { isBlockedByCommandOptions, isBlockedLongRunningInvocation, } from "./command-policy-options.js";
+import { isBlockedPackageManagerInvocation, isBlockedSystemPackageManagerInvocation, } from "./command-policy-packages.js";
+import { extractSegments, hasCommandSubstitution, hasUnsafeConstructs, hasUnsafeRedirects, parseCommand, } from "./command-policy-parser.js";
+import { getXargsInvokedCommandIndex, normalizeCommandName, stripEnvVarAssignments, unwrapCommandTokens, } from "./command-policy-wrappers.js";
+export function hasShellControlOperator(command) {
+    return (/[><|`$();]/.test(command) ||
+        command.includes("&&") ||
+        command.includes("||"));
+}
+export function isKnownReadOnlyCommand(command) {
+    const normalized = command.trim().replace(/\s+/g, " ");
+    if (!normalized || hasShellControlOperator(normalized))
+        return false;
+    const first = normalized.split(" ")[0];
+    if (["pwd", "ls", "find", "rg", "grep", "which", "cat"].includes(first))
+        return true;
+    if (normalized === "git status" || normalized.startsWith("git status "))
+        return true;
+    if (normalized === "git diff" || normalized.startsWith("git diff "))
+        return true;
+    if (normalized === "git log" || normalized.startsWith("git log "))
+        return true;
+    if (normalized === "git show" || normalized.startsWith("git show "))
+        return true;
+    return false;
+}
+export function hasDangerousCommandPattern(command) {
+    return /(^|\s)(rm\s+-rf|sudo|mkfs|dd\s+if=|chmod\s+-R|chown\s+-R|git\s+reset\s+--hard|git\s+clean\s+-fd|docker\s+system\s+prune|kubectl\s+delete)(\s|$)/.test(command);
+}
+export function isLikelyLongRunningCommand(command) {
+    const normalized = command.trim().replace(/\s+/g, " ");
+    if (!normalized)
+        return false;
+    return (/(^|\s)(npm|pnpm|yarn|bun)\s+(run\s+)?(dev|start|serve|preview|watch)(\s|$)/.test(normalized) ||
+        /(^|\s)(vite|next\s+dev|svelte-kit\s+dev|astro\s+dev|webpack\s+serve|nodemon|tsx\s+watch|tsc\s+--watch|cargo\s+watch)(\s|$)/.test(normalized));
+}
+const BLOCKED_BASH_ROOT_COMMANDS = new Set([
+    "chmod",
+    "chgrp",
+    "chown",
+    "code",
+    "cp",
+    "dash",
+    "dd",
+    "doas",
+    "emacs",
+    "eval",
+    "exec",
+    "fish",
+    "function",
+    "kill",
+    "killall",
+    "ln",
+    "mkdir",
+    "mkfs",
+    "mount",
+    "mv",
+    "nano",
+    "pkill",
+    "rm",
+    "rmdir",
+    "sh",
+    "shred",
+    "sudo",
+    "tee",
+    "touch",
+    "truncate",
+    "umount",
+    "vi",
+    "vim",
+    "zsh",
+]);
+function isBlockedCommandSegment(tokens) {
+    const stripped = stripEnvVarAssignments(tokens);
+    const unwrapped = unwrapCommandTokens(stripped);
+    if (unwrapped.length === 0)
+        return false;
+    const rootCommand = normalizeCommandName(unwrapped[0]);
+    if (rootCommand === "xargs") {
+        const invokedIndex = getXargsInvokedCommandIndex(unwrapped);
+        if (invokedIndex === undefined)
+            return false;
+        return isBlockedCommandSegment(unwrapped.slice(invokedIndex));
+    }
+    if (BLOCKED_BASH_ROOT_COMMANDS.has(rootCommand))
+        return true;
+    if (isBlockedLongRunningInvocation(unwrapped))
+        return true;
+    if (isBlockedGitInvocation(unwrapped))
+        return true;
+    if (isBlockedPackageManagerInvocation(unwrapped, isBlockedCommandSegment)) {
+        return true;
+    }
+    if (isBlockedSystemPackageManagerInvocation(unwrapped))
+        return true;
+    return isBlockedByCommandOptions(unwrapped, isBlockedCommandSegment);
+}
+export function isAllowedPlanModeBashCommand(command) {
+    if (!command.trim())
+        return false;
+    if (isLikelyLongRunningCommand(command))
+        return false;
+    if (hasCommandSubstitution(command))
+        return false;
+    const entries = parseCommand(command);
+    if (!entries || entries.length === 0)
+        return false;
+    if (hasUnsafeConstructs(entries))
+        return false;
+    if (hasUnsafeRedirects(entries))
+        return false;
+    const segments = extractSegments(entries);
+    if (segments.length === 0)
+        return false;
+    return segments.every((segment) => !isBlockedCommandSegment(segment));
+}
+//# sourceMappingURL=command-policy.js.map

package/dist/safety/command-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-policy.js","sourceRoot":"","sources":["../../src/safety/command-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EACL,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,iCAAiC,EACjC,uCAAuC,GACxC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,YAAY,GACb,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,2BAA2B,EAC3B,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,8BAA8B,CAAC;AAEtC,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,OAAO,CACL,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAC1B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,IAAI,uBAAuB,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,IAAI,UAAU,KAAK,YAAY,IAAI,UAAU,CAAC,UAAU,CAAC,aAAa,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,IAAI,UAAU,KAAK,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC;QAC/D,OAAO,IAAI,CAAC;IACd,IAAI,UAAU,KAAK,UAAU,IAAI,UAAU,CAAC,UAAU,CAAC,WAAW,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,OAAO,iJAAiJ,CAAC,IAAI,CAC3J,OAAO,CACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,CACL,4EAA4E,CAAC,IAAI,CAC/E,UAAU,CACX;QACD,4HAA4H,CAAC,IAAI,CAC/H,UAAU,CACX,CACF,CAAC;AACJ,CAAC;AAED,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,IAAI;IACJ,MAAM;IACN,IAAI;IACJ,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,UAAU;IACV,MAAM;IACN,SAAS;IACT,IAAI;IACJ,OAAO;IACP,MAAM;IACN,OAAO;IACP,IAAI;IACJ,MAAM;IACN,OAAO;IACP,IAAI;IACJ,OAAO;IACP,IAAI;IACJ,OAAO;IACP,MAAM;IACN,KAAK;IACL,OAAO;IACP,UAAU;IACV,QAAQ;IACR,IAAI;IACJ,KAAK;IACL,KAAK;CACN,CAAC,CAAC;AAEH,SAAS,uBAAuB,CAAC,MAAgB;IAC/C,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEzC,MAAM,WAAW,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvD,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,2BAA2B,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7C,OAAO,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,0BAA0B,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,8BAA8B,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,sBAAsB,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,IAAI,iCAAiC,CAAC,SAAS,EAAE,uBAAuB,CAAC,EAAE,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,uCAAuC,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,OAAO,yBAAyB,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAAe;IAC1D,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,0BAA0B,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACtD,IAAI,sBAAsB,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAElD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,mBAAmB,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,kBAAkB,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAE9C,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAExC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;AACxE,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,78 @@
+import type { ToolContentBlockPayload, ToolExecutionResultPayload, ToolImageContentPayload, ToolTextContentPayload } from "@nervekit/shared";
+import type { PythonRuntime } from "./execution/python/runtime.js";
+export type ToolExecutionOutputUpdate = {
+    kind: "output";
+    stream: "stdout" | "stderr" | "combined";
+    chunk: string;
+};
+export type ToolExecutionContext = {
+    cwd: string;
+    signal?: AbortSignal;
+    dataDir?: string;
+    getApiKey?: (provider: string) => Promise<string | undefined>;
+    pythonRuntime?: PythonRuntime;
+    pythonPolicy?: {
+        allowNetwork: boolean;
+        allowFileWrite: boolean;
+    };
+    onUpdate?: (update: ToolExecutionOutputUpdate) => void;
+};
+export type ToolTextContent = ToolTextContentPayload;
+export type ToolImageContent = ToolImageContentPayload;
+export type ToolContentBlock = ToolContentBlockPayload;
+export type ToolExecutionResult = ToolExecutionResultPayload;
+export type ToolPathArgs = {
+    path?: unknown;
+};
+export type ReadToolArgs = ToolPathArgs & {
+    offset?: unknown;
+    limit?: unknown;
+    byteOffset?: unknown;
+    byteLimit?: unknown;
+};
+export type WriteToolArgs = ToolPathArgs & {
+    content?: unknown;
+};
+export type EditToolArgs = ToolPathArgs & {
+    dryRun?: unknown;
+    replacements?: unknown;
+    insertions?: unknown;
+    lineReplacements?: unknown;
+    lineInsertions?: unknown;
+    patch?: unknown;
+};
+export type BashToolArgs = {
+    command?: unknown;
+    timeout?: unknown;
+};
+export type PythonToolArgs = {
+    code?: unknown;
+    path?: unknown;
+    cwd?: unknown;
+    timeout?: unknown;
+    env?: unknown;
+};
+export type LsToolArgs = ToolPathArgs & {
+    limit?: unknown;
+};
+export type FindToolArgs = ToolPathArgs & {
+    pattern?: unknown;
+    limit?: unknown;
+};
+export type GrepToolArgs = ToolPathArgs & {
+    pattern?: unknown;
+    glob?: unknown;
+    ignoreCase?: unknown;
+    literal?: unknown;
+    context?: unknown;
+    limit?: unknown;
+};
+export type WebSearchToolArgs = {
+    query?: unknown;
+    max_results?: unknown;
+};
+export type WebFetchToolArgs = {
+    url?: unknown;
+    raw?: unknown;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,0BAA0B,EAC1B,uBAAuB,EACvB,sBAAsB,EACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAEnE,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAC;IACzC,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9D,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,YAAY,CAAC,EAAE;QACb,YAAY,EAAE,OAAO,CAAC;QACtB,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,yBAAyB,KAAK,IAAI,CAAC;CACxD,CAAC;AAGF,MAAM,MAAM,eAAe,GAAG,sBAAsB,CAAC;AACrD,MAAM,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AACvD,MAAM,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AACvD,MAAM,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAE7D,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG;IACxC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG;IACzC,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG;IACxC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,YAAY,GAAG;IACtC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG;IACxC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG;IACxC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,GAAG,CAAC,EAAE,OAAO,CAAC;CACf,CAAC"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@nervekit/tools",
+  "version": "0.1.0",
+  "author": "ThilinaTLM",
+  "license": "Apache-2.0",
+  "type": "module",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ThilinaTLM/nerve.git",
+    "directory": "packages/tools"
+  },
+  "homepage": "https://github.com/ThilinaTLM/nerve#readme",
+  "files": [
+    "dist/**",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "diff": "^8.0.4",
+    "node-html-markdown": "^2.0.0",
+    "shell-quote": "^1.8.4",
+    "typebox": "1.1.38",
+    "@nervekit/shared": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "24.10.1",
+    "@types/shell-quote": "^1.7.5",
+    "typescript": "5.9.3"
+  },
+  "engines": {
+    "node": ">=24.0.0"
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "check": "tsc -b --pretty false",
+    "test": "tsx --test test/*.test.ts"
+  }
+}