@nexagent-cli/cli 0.2.0

package/dist/tools/file-search.js

@@ -0,0 +1,133 @@
+// ============================================================
+// Tool: file_search — Search file contents with regex or literal
+// ============================================================
+import { readFile, readdir, stat } from 'node:fs/promises';
+import { join, resolve, relative } from 'node:path';
+import { generateId } from '@nexagent-cli/shared';
+export class FileSearchTool {
+    name = 'file_search';
+    version = '1.0.0';
+    description = 'Search for a pattern in file contents across the workspace. Returns matching file paths with line numbers and context.';
+    enabled = true;
+    riskLevel = 'low';
+    permissions = ['fs:read'];
+    parameters = {
+        type: 'object',
+        properties: {
+            pattern: {
+                type: 'string',
+                description: 'Search pattern (regex or literal string)',
+            },
+            regex: {
+                type: 'boolean',
+                description: 'Treat pattern as regex (default: false)',
+            },
+            case_sensitive: {
+                type: 'boolean',
+                description: 'Case-sensitive search (default: false)',
+            },
+            file_pattern: {
+                type: 'string',
+                description: 'Glob-style file extension filter (e.g. "*.ts")',
+            },
+            path: {
+                type: 'string',
+                description: 'Directory to search in (default: workspace root)',
+            },
+            max_results: {
+                type: 'number',
+                description: 'Maximum number of results to return (default: 50)',
+            },
+            context_lines: {
+                type: 'number',
+                description: 'Number of context lines around each match (default: 2)',
+            },
+        },
+        required: ['pattern'],
+    };
+    async execute(args, ctx) {
+        const { pattern, regex = false, case_sensitive = false, file_pattern, path: searchPath = '.', max_results = 50, context_lines = 2, } = args;
+        const flags = case_sensitive ? 'g' : 'gi';
+        const re = regex
+            ? new RegExp(pattern, flags)
+            : new RegExp(pattern.replace(/[.*+?^${}()|[\]\\]/g, '\\$&'), flags);
+        const absDir = resolve(ctx.workspaceDir, searchPath);
+        const files = await this.collectFiles(absDir, file_pattern);
+        const results = [];
+        for (const file of files) {
+            if (results.length >= max_results)
+                break;
+            try {
+                const content = await readFile(file, 'utf-8');
+                const lines = content.split('\n');
+                for (let i = 0; i < lines.length; i++) {
+                    re.lastIndex = 0;
+                    if (re.test(lines[i])) {
+                        const start = Math.max(0, i - context_lines);
+                        const end = Math.min(lines.length - 1, i + context_lines);
+                        const context = lines.slice(start, end + 1);
+                        results.push({
+                            file: relative(ctx.workspaceDir, file),
+                            line: i + 1,
+                            content: lines[i],
+                            context,
+                        });
+                        if (results.length >= max_results)
+                            break;
+                    }
+                }
+            }
+            catch {
+                // skip unreadable files
+            }
+        }
+        const summary = results
+            .map(r => `${r.file}:${r.line}: ${r.content.trim()}`)
+            .join('\n');
+        return {
+            success: true,
+            output: `Found ${results.length} match(es) for "${pattern}"\n${summary}`,
+            data: { pattern, results, total: results.length },
+            executionId: generateId(),
+            durationMs: 0,
+        };
+    }
+    async collectFiles(dir, filePattern) {
+        const files = [];
+        const SKIP_DIRS = new Set(['node_modules', '.git', 'dist', '.nexagent', '__pycache__', 'venv']);
+        const walk = async (d) => {
+            let items;
+            try {
+                items = await readdir(d);
+            }
+            catch {
+                return;
+            }
+            for (const item of items) {
+                if (item.startsWith('.') && item !== '.')
+                    continue;
+                const full = join(d, item);
+                try {
+                    const s = await stat(full);
+                    if (s.isDirectory()) {
+                        if (!SKIP_DIRS.has(item))
+                            await walk(full);
+                    }
+                    else {
+                        if (!filePattern || this.matchPattern(item, filePattern)) {
+                            files.push(full);
+                        }
+                    }
+                }
+                catch { /* skip */ }
+            }
+        };
+        await walk(dir);
+        return files;
+    }
+    matchPattern(filename, pattern) {
+        const regex = new RegExp('^' + pattern.replace(/\./g, '\\.').replace(/\*/g, '.*') + '$');
+        return regex.test(filename);
+    }
+}
+//# sourceMappingURL=file-search.js.map

package/dist/tools/file-search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-search.js","sourceRoot":"","sources":["../../../../src/tools/file-search.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,iEAAiE;AACjE,+DAA+D;AAE/D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,MAAM,OAAO,cAAc;IACzB,IAAI,GAAU,aAAa,CAAC;IAC5B,OAAO,GAAO,OAAO,CAAC;IACtB,WAAW,GAAG,wHAAwH,CAAC;IACvI,OAAO,GAAO,IAAI,CAAC;IACnB,SAAS,GAAK,KAAc,CAAC;IAC7B,WAAW,GAAG,CAAC,SAAS,CAAU,CAAC;IAEnC,UAAU,GAAqB;QAC7B,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,OAAO,EAAE;gBACP,IAAI,EAAS,QAAQ;gBACrB,WAAW,EAAE,0CAA0C;aACxD;YACD,KAAK,EAAE;gBACL,IAAI,EAAS,SAAS;gBACtB,WAAW,EAAE,yCAAyC;aACvD;YACD,cAAc,EAAE;gBACd,IAAI,EAAS,SAAS;gBACtB,WAAW,EAAE,wCAAwC;aACtD;YACD,YAAY,EAAE;gBACZ,IAAI,EAAS,QAAQ;gBACrB,WAAW,EAAE,gDAAgD;aAC9D;YACD,IAAI,EAAE;gBACJ,IAAI,EAAS,QAAQ;gBACrB,WAAW,EAAE,kDAAkD;aAChE;YACD,WAAW,EAAE;gBACX,IAAI,EAAS,QAAQ;gBACrB,WAAW,EAAE,mDAAmD;aACjE;YACD,aAAa,EAAE;gBACb,IAAI,EAAS,QAAQ;gBACrB,WAAW,EAAE,wDAAwD;aACtE;SACF;QACD,QAAQ,EAAE,CAAC,SAAS,CAAC;KACtB,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,IAAa,EAAE,GAAgB;QAC3C,MAAM,EACJ,OAAO,EACP,KAAK,GAAY,KAAK,EACtB,cAAc,GAAG,KAAK,EACtB,YAAY,EACZ,IAAI,EAAW,UAAU,GAAG,GAAG,EAC/B,WAAW,GAAM,EAAE,EACnB,aAAa,GAAI,CAAC,GACnB,GAAG,IAGH,CAAC;QAEF,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1C,MAAM,EAAE,GAAM,KAAK;YACjB,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC;YAC5B,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;QAEtE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,KAAK,GAAI,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QAE7D,MAAM,OAAO,GAA8E,EAAE,CAAC;QAE9F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW;gBAAE,MAAM;YACzC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAC9C,MAAM,KAAK,GAAK,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACtC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;oBACjB,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;wBACvB,MAAM,KAAK,GAAK,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC;wBAC/C,MAAM,GAAG,GAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC;wBAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;wBAC5C,OAAO,CAAC,IAAI,CAAC;4BACX,IAAI,EAAK,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC;4BACzC,IAAI,EAAK,CAAC,GAAG,CAAC;4BACd,OAAO,EAAE,KAAK,CAAC,CAAC,CAAE;4BAClB,OAAO;yBACR,CAAC,CAAC;wBACH,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW;4BAAE,MAAM;oBAC3C,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,OAAO;aACpB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;aACpD,IAAI,CAAC,IAAI,CAAC,CAAC;QAEd,OAAO;YACL,OAAO,EAAM,IAAI;YACjB,MAAM,EAAO,SAAS,OAAO,CAAC,MAAM,mBAAmB,OAAO,MAAM,OAAO,EAAE;YAC7E,IAAI,EAAS,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE;YACxD,WAAW,EAAE,UAAU,EAAE;YACzB,UAAU,EAAG,CAAC;SACf,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,GAAW,EAAE,WAAoB;QAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CAAC;QAEhG,MAAM,IAAI,GAAG,KAAK,EAAE,CAAS,EAAiB,EAAE;YAC9C,IAAI,KAAe,CAAC;YACpB,IAAI,CAAC;gBAAC,KAAK,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO;YAAC,CAAC;YAEnD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,KAAK,GAAG;oBAAE,SAAS;gBACnD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBAC3B,IAAI,CAAC;oBACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC3B,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;wBACpB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;4BAAE,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC7C,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;4BACzD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;wBACnB,CAAC;oBACH,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;YACxB,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,YAAY,CAAC,QAAgB,EAAE,OAAe;QACpD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QACzF,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;CACF"}

package/dist/tools/file-write.d.ts

@@ -0,0 +1,14 @@
+import type { Tool, ToolContext, ToolResult, JSONSchemaObject } from '@nexagent-cli/shared';
+export declare class FileWriteTool implements Tool {
+    name: string;
+    version: string;
+    description: string;
+    enabled: boolean;
+    riskLevel: "medium";
+    permissions: readonly ["fs:write"];
+    parameters: JSONSchemaObject;
+    execute(args: unknown, ctx: ToolContext): Promise<ToolResult>;
+    dryRun(args: unknown, _ctx: ToolContext): Promise<string>;
+    private resolveSafe;
+}
+//# sourceMappingURL=file-write.d.ts.map

package/dist/tools/file-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-write.d.ts","sourceRoot":"","sources":["../../../../src/tools/file-write.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAG5F,qBAAa,aAAc,YAAW,IAAI;IACxC,IAAI,SAAuB;IAC3B,OAAO,SAAe;IACtB,WAAW,SAA0G;IACrH,OAAO,UAAY;IACnB,SAAS,EAAK,QAAQ,CAAU;IAChC,WAAW,wBAAyB;IAEpC,UAAU,EAAE,gBAAgB,CAkB1B;IAEI,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAwC7D,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAK/D,OAAO,CAAC,WAAW;CAQpB"}

package/dist/tools/file-write.js

@@ -0,0 +1,80 @@
+// ============================================================
+// Tool: file_write — Atomically write file content
+// Uses temp-file → rename to prevent partial writes
+// ============================================================
+import { writeFile, mkdir, rename } from 'node:fs/promises';
+import { resolve, relative, dirname } from 'node:path';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { generateId } from '@nexagent-cli/shared';
+export class FileWriteTool {
+    name = 'file_write';
+    version = '1.0.0';
+    description = 'Write content to a file atomically. Creates parent directories as needed. Overwrites existing files.';
+    enabled = true;
+    riskLevel = 'medium';
+    permissions = ['fs:write'];
+    parameters = {
+        type: 'object',
+        properties: {
+            path: {
+                type: 'string',
+                description: 'Path to write, relative to workspace directory',
+            },
+            content: {
+                type: 'string',
+                description: 'Full file content to write',
+            },
+            encoding: {
+                type: 'string',
+                description: 'Encoding: utf-8 or base64',
+                enum: ['utf-8', 'base64'],
+            },
+        },
+        required: ['path', 'content'],
+    };
+    async execute(args, ctx) {
+        const { path, content, encoding = 'utf-8' } = args;
+        const executionId = generateId();
+        const absPath = this.resolveSafe(path, ctx.workspaceDir);
+        if (ctx.dryRun) {
+            return {
+                success: true,
+                output: `[DRY RUN] Would write ${content.length} chars to ${path}`,
+                data: { path, bytes: content.length, dryRun: true },
+                executionId,
+                durationMs: 0,
+            };
+        }
+        // Create parent directories
+        await mkdir(dirname(absPath), { recursive: true });
+        // Atomic write: temp file → rename
+        const tmpPath = join(tmpdir(), `nexagent-${executionId}`);
+        const buf = encoding === 'base64'
+            ? Buffer.from(content, 'base64')
+            : content;
+        await writeFile(tmpPath, buf, { encoding: encoding === 'base64' ? undefined : 'utf-8' });
+        await rename(tmpPath, absPath);
+        return {
+            success: true,
+            output: `Wrote ${content.length} chars to ${path}`,
+            data: { path, bytes: content.length },
+            executionId,
+            durationMs: 0,
+            bytesWritten: content.length,
+        };
+    }
+    async dryRun(args, _ctx) {
+        const { path, content } = args;
+        return `Would write ${content.length} chars to "${path}"`;
+    }
+    resolveSafe(filePath, workspaceDir) {
+        const abs = resolve(workspaceDir, filePath);
+        const rel = relative(workspaceDir, abs);
+        if (rel.startsWith('..') || require('node:path').isAbsolute(rel)) {
+            throw new Error(`Path traversal denied: "${filePath}" is outside the workspace`);
+        }
+        return abs;
+    }
+}
+//# sourceMappingURL=file-write.js.map

package/dist/tools/file-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-write.js","sourceRoot":"","sources":["../../../../src/tools/file-write.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,mDAAmD;AACnD,oDAAoD;AACpD,+DAA+D;AAE/D,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAQ,WAAW,CAAC;AAEnC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,MAAM,OAAO,aAAa;IACxB,IAAI,GAAU,YAAY,CAAC;IAC3B,OAAO,GAAO,OAAO,CAAC;IACtB,WAAW,GAAG,sGAAsG,CAAC;IACrH,OAAO,GAAO,IAAI,CAAC;IACnB,SAAS,GAAK,QAAiB,CAAC;IAChC,WAAW,GAAG,CAAC,UAAU,CAAU,CAAC;IAEpC,UAAU,GAAqB;QAC7B,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,IAAI,EAAE;gBACJ,IAAI,EAAS,QAAQ;gBACrB,WAAW,EAAE,gDAAgD;aAC9D;YACD,OAAO,EAAE;gBACP,IAAI,EAAS,QAAQ;gBACrB,WAAW,EAAE,4BAA4B;aAC1C;YACD,QAAQ,EAAE;gBACR,IAAI,EAAS,QAAQ;gBACrB,WAAW,EAAE,2BAA2B;gBACxC,IAAI,EAAS,CAAC,OAAO,EAAE,QAAQ,CAAC;aACjC;SACF;QACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;KAC9B,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,IAAa,EAAE,GAAgB;QAC3C,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,GAAG,OAAO,EAAE,GAAG,IAE7C,CAAC;QACF,MAAM,WAAW,GAAG,UAAU,EAAE,CAAC;QAEjC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;QAEzD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAM,IAAI;gBACjB,MAAM,EAAO,yBAAyB,OAAO,CAAC,MAAM,aAAa,IAAI,EAAE;gBACvE,IAAI,EAAS,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE;gBAC1D,WAAW;gBACX,UAAU,EAAG,CAAC;aACf,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,MAAM,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnD,mCAAmC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,WAAW,EAAE,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAO,QAAQ,KAAK,QAAQ;YACnC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;YAChC,CAAC,CAAC,OAAO,CAAC;QAEZ,MAAM,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACzF,MAAM,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAE/B,OAAO;YACL,OAAO,EAAQ,IAAI;YACnB,MAAM,EAAS,SAAS,OAAO,CAAC,MAAM,aAAa,IAAI,EAAE;YACzD,IAAI,EAAW,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE;YAC9C,WAAW;YACX,UAAU,EAAK,CAAC;YAChB,YAAY,EAAG,OAAO,CAAC,MAAM;SAC9B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAa,EAAE,IAAiB;QAC3C,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAyC,CAAC;QACpE,OAAO,eAAe,OAAO,CAAC,MAAM,cAAc,IAAI,GAAG,CAAC;IAC5D,CAAC;IAEO,WAAW,CAAC,QAAgB,EAAE,YAAoB;QACxD,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,4BAA4B,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/tools/memory-read.d.ts

@@ -0,0 +1,22 @@
+import type { Tool, ToolContext, ToolResult, JSONSchemaObject } from '@nexagent-cli/shared';
+export declare class MemoryReadTool implements Tool {
+    name: string;
+    version: string;
+    description: string;
+    enabled: boolean;
+    riskLevel: "low";
+    permissions: readonly ["memory:read"];
+    parameters: JSONSchemaObject;
+    execute(args: unknown, ctx: ToolContext): Promise<ToolResult>;
+}
+export declare class MemoryWriteTool implements Tool {
+    name: string;
+    version: string;
+    description: string;
+    enabled: boolean;
+    riskLevel: "medium";
+    permissions: readonly ["memory:write"];
+    parameters: JSONSchemaObject;
+    execute(args: unknown, ctx: ToolContext): Promise<ToolResult>;
+}
+//# sourceMappingURL=memory-read.d.ts.map

package/dist/tools/memory-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-read.d.ts","sourceRoot":"","sources":["../../../../src/tools/memory-read.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAqB,MAAM,sBAAsB,CAAC;AAG/G,qBAAa,cAAe,YAAW,IAAI;IACzC,IAAI,SAAwB;IAC5B,OAAO,SAAe;IACtB,WAAW,SAAmJ;IAC9J,OAAO,UAAY;IACnB,SAAS,EAAK,KAAK,CAAU;IAC7B,WAAW,2BAA4B;IAEvC,UAAU,EAAE,gBAAgB,CAkB1B;IAEI,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;CAmDpE;AAMD,qBAAa,eAAgB,YAAW,IAAI;IAC1C,IAAI,SAAyB;IAC7B,OAAO,SAAe;IACtB,WAAW,SAA2J;IACtK,OAAO,UAAY;IACnB,SAAS,EAAK,QAAQ,CAAU;IAChC,WAAW,4BAA6B;IAExC,UAAU,EAAE,gBAAgB,CAkB1B;IAEI,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;CAepE"}

package/dist/tools/memory-read.js

@@ -0,0 +1,114 @@
+// ============================================================
+// Tool: memory_read — Read blocks from agent memory
+// Wired directly into MemoryManager when available in context.
+// ============================================================
+import { generateId } from '@nexagent-cli/shared';
+export class MemoryReadTool {
+    name = 'memory_read';
+    version = '1.1.0';
+    description = 'Read one or more memory blocks from the agent\'s persistent memory. Use to recall facts about the user, learned preferences, or past context.';
+    enabled = true;
+    riskLevel = 'low';
+    permissions = ['memory:read'];
+    parameters = {
+        type: 'object',
+        properties: {
+            block_type: {
+                type: 'string',
+                description: 'Filter by block type: persona, user_profile, task_context, learned_facts, skill_preferences, conversation_summary, custom',
+                enum: ['persona', 'user_profile', 'task_context', 'learned_facts', 'skill_preferences', 'conversation_summary', 'custom'],
+            },
+            query: {
+                type: 'string',
+                description: 'Semantic search query to find relevant memory blocks',
+            },
+            limit: {
+                type: 'number',
+                description: 'Max blocks to return (default: 5)',
+            },
+        },
+        required: [],
+    };
+    async execute(args, ctx) {
+        const { block_type, query, limit = 5 } = args;
+        // If MemoryManager is available via context, query it directly
+        if (ctx.memory) {
+            const opts = {
+                semanticQuery: query,
+                includeArchived: false,
+                limit,
+                pinFirst: true,
+            };
+            const blocks = await ctx.memory.read(opts);
+            // Filter by block_type if requested
+            const filtered = block_type
+                ? blocks.filter((b) => b.blockType === block_type)
+                : blocks;
+            const output = filtered.length === 0
+                ? `No memory blocks found (type: ${block_type ?? 'all'}, query: "${query ?? 'none'}").`
+                : `Found ${filtered.length} memory block(s):\n` + filtered.map((b, i) => `${i + 1}. [${b.blockType}] ${b.content.slice(0, 120)}${b.content.length > 120 ? '...' : ''}`).join('\n');
+            ctx.emit('memory:read', {
+                blockIds: filtered.map((b) => b.id),
+                tokenCount: filtered.reduce((s, b) => s + (b.tokenEstimate ?? 0), 0),
+            });
+            return {
+                success: true,
+                output,
+                data: { blocks: filtered.map((b) => ({ id: b.id, type: b.blockType, content: b.content })) },
+                executionId: generateId(),
+                durationMs: 0,
+            };
+        }
+        // Fallback when MemoryManager is not injected
+        ctx.emit('memory:read', { blockIds: [], tokenCount: 0 });
+        return {
+            success: true,
+            output: `Memory read requested (type: ${block_type ?? 'all'}, query: "${query ?? 'none'}", limit: ${limit}) — MemoryManager not available in this context.`,
+            data: { note: 'MemoryManager not injected. Memory is still assembled at context-build time.' },
+            executionId: generateId(),
+            durationMs: 0,
+        };
+    }
+}
+// ============================================================
+// Tool: memory_write — Propose a memory block update
+// ============================================================
+export class MemoryWriteTool {
+    name = 'memory_write';
+    version = '1.0.0';
+    description = 'Propose an update to a memory block. The agent will record this for the user to review. Use to save important facts, user preferences, or task notes.';
+    enabled = true;
+    riskLevel = 'medium';
+    permissions = ['memory:write'];
+    parameters = {
+        type: 'object',
+        properties: {
+            block_type: {
+                type: 'string',
+                description: 'Type of memory block to write',
+                enum: ['persona', 'user_profile', 'task_context', 'learned_facts', 'skill_preferences', 'conversation_summary', 'custom'],
+            },
+            content: {
+                type: 'string',
+                description: 'The content to store in this memory block',
+            },
+            rationale: {
+                type: 'string',
+                description: 'Why you are saving this information',
+            },
+        },
+        required: ['block_type', 'content', 'rationale'],
+    };
+    async execute(args, ctx) {
+        const { block_type, content, rationale } = args;
+        ctx.emit('memory:write', { blockId: generateId(), blockType: block_type });
+        return {
+            success: true,
+            output: `Memory write proposal queued: [${block_type}] "${content.slice(0, 80)}..."`,
+            data: { block_type, content, rationale },
+            executionId: generateId(),
+            durationMs: 0,
+        };
+    }
+}
+//# sourceMappingURL=memory-read.js.map

package/dist/tools/memory-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-read.js","sourceRoot":"","sources":["../../../../src/tools/memory-read.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,oDAAoD;AACpD,+DAA+D;AAC/D,+DAA+D;AAG/D,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,MAAM,OAAO,cAAc;IACzB,IAAI,GAAU,aAAa,CAAC;IAC5B,OAAO,GAAO,OAAO,CAAC;IACtB,WAAW,GAAG,+IAA+I,CAAC;IAC9J,OAAO,GAAO,IAAI,CAAC;IACnB,SAAS,GAAK,KAAc,CAAC;IAC7B,WAAW,GAAG,CAAC,aAAa,CAAU,CAAC;IAEvC,UAAU,GAAqB;QAC7B,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,UAAU,EAAE;gBACV,IAAI,EAAS,QAAQ;gBACrB,WAAW,EAAE,2HAA2H;gBACxI,IAAI,EAAE,CAAC,SAAS,EAAC,cAAc,EAAC,cAAc,EAAC,eAAe,EAAC,mBAAmB,EAAC,sBAAsB,EAAC,QAAQ,CAAC;aACpH;YACD,KAAK,EAAE;gBACL,IAAI,EAAS,QAAQ;gBACrB,WAAW,EAAE,sDAAsD;aACpE;YACD,KAAK,EAAE;gBACL,IAAI,EAAS,QAAQ;gBACrB,WAAW,EAAE,mCAAmC;aACjD;SACF;QACD,QAAQ,EAAE,EAAE;KACb,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,IAAa,EAAE,GAAgB;QAC3C,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,EAAE,GAAG,IAExC,CAAC;QAEF,+DAA+D;QAC/D,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,MAAM,IAAI,GAAsB;gBAC9B,aAAa,EAAE,KAAK;gBACpB,eAAe,EAAE,KAAK;gBACtB,KAAK;gBACL,QAAQ,EAAE,IAAI;aACf,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE3C,oCAAoC;YACpC,MAAM,QAAQ,GAAG,UAAU;gBACzB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC;gBACvD,CAAC,CAAC,MAAM,CAAC;YAEX,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAClC,CAAC,CAAC,iCAAiC,UAAU,IAAI,KAAK,aAAa,KAAK,IAAI,MAAM,KAAK;gBACvF,CAAC,CAAC,SAAS,QAAQ,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,CAAS,EAAE,EAAE,CACjF,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEjB,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE;gBACtB,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAS,EAAE,CAAM,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;aAClF,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAM,IAAI;gBACjB,MAAM;gBACN,IAAI,EAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE;gBACxG,WAAW,EAAE,UAAU,EAAE;gBACzB,UAAU,EAAG,CAAC;aACf,CAAC;QACJ,CAAC;QAED,8CAA8C;QAC9C,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QACzD,OAAO;YACL,OAAO,EAAM,IAAI;YACjB,MAAM,EAAO,gCAAgC,UAAU,IAAI,KAAK,aAAa,KAAK,IAAI,MAAM,aAAa,KAAK,kDAAkD;YAChK,IAAI,EAAS,EAAE,IAAI,EAAE,8EAA8E,EAAE;YACrG,WAAW,EAAE,UAAU,EAAE;YACzB,UAAU,EAAG,CAAC;SACf,CAAC;IACJ,CAAC;CACF;AAED,+DAA+D;AAC/D,qDAAqD;AACrD,+DAA+D;AAE/D,MAAM,OAAO,eAAe;IAC1B,IAAI,GAAU,cAAc,CAAC;IAC7B,OAAO,GAAO,OAAO,CAAC;IACtB,WAAW,GAAG,uJAAuJ,CAAC;IACtK,OAAO,GAAO,IAAI,CAAC;IACnB,SAAS,GAAK,QAAiB,CAAC;IAChC,WAAW,GAAG,CAAC,cAAc,CAAU,CAAC;IAExC,UAAU,GAAqB;QAC7B,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE;YACV,UAAU,EAAE;gBACV,IAAI,EAAS,QAAQ;gBACrB,WAAW,EAAE,+BAA+B;gBAC5C,IAAI,EAAE,CAAC,SAAS,EAAC,cAAc,EAAC,cAAc,EAAC,eAAe,EAAC,mBAAmB,EAAC,sBAAsB,EAAC,QAAQ,CAAC;aACpH;YACD,OAAO,EAAE;gBACP,IAAI,EAAS,QAAQ;gBACrB,WAAW,EAAE,2CAA2C;aACzD;YACD,SAAS,EAAE;gBACT,IAAI,EAAS,QAAQ;gBACrB,WAAW,EAAE,qCAAqC;aACnD;SACF;QACD,QAAQ,EAAE,CAAC,YAAY,EAAE,SAAS,EAAE,WAAW,CAAC;KACjD,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,IAAa,EAAE,GAAgB;QAC3C,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAE1C,CAAC;QAEF,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QAE3E,OAAO;YACL,OAAO,EAAM,IAAI;YACjB,MAAM,EAAO,kCAAkC,UAAU,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;YACzF,IAAI,EAAS,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE;YAC/C,WAAW,EAAE,UAAU,EAAE;YACzB,UAAU,EAAG,CAAC;SACf,CAAC;IACJ,CAAC;CACF"}

package/dist/tools/memory-write.d.ts

@@ -0,0 +1,2 @@
+export { MemoryWriteTool } from './memory-read.js';
+//# sourceMappingURL=memory-write.d.ts.map

package/dist/tools/memory-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-write.d.ts","sourceRoot":"","sources":["../../../../src/tools/memory-write.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/tools/memory-write.js

@@ -0,0 +1,5 @@
+// ============================================================
+// Tool: memory_write — re-exported from memory-read.ts for clean barrel
+// ============================================================
+export { MemoryWriteTool } from './memory-read.js';
+//# sourceMappingURL=memory-write.js.map

package/dist/tools/memory-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-write.js","sourceRoot":"","sources":["../../../../src/tools/memory-write.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,wEAAwE;AACxE,+DAA+D;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/tools/registry.d.ts

@@ -0,0 +1,12 @@
+import type { Tool, LLMToolDefinition } from '@nexagent-cli/shared';
+export declare class ToolRegistry {
+    private tools;
+    register(tool: Tool): void;
+    get(name: string): Tool | undefined;
+    list(): Tool[];
+    /** Convert registered tools to LLM function-call format */
+    toToolDefinitions(allowList: string[], blockList: string[]): LLMToolDefinition[];
+}
+/** Create a pre-loaded registry with all default tools */
+export declare function createDefaultRegistry(): Promise<ToolRegistry>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/tools/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../src/tools/registry.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEpE,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAA2B;IAExC,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI;IAI1B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS;IAInC,IAAI,IAAI,IAAI,EAAE;IAId,2DAA2D;IAC3D,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,iBAAiB,EAAE;CAiBjF;AAED,0DAA0D;AAC1D,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,YAAY,CAAC,CAyCnE"}

package/dist/tools/registry.js

@@ -0,0 +1,66 @@
+// ============================================================
+// Tool Registry — central registration and lookup
+// ============================================================
+export class ToolRegistry {
+    tools = new Map();
+    register(tool) {
+        this.tools.set(tool.name, tool);
+    }
+    get(name) {
+        return this.tools.get(name);
+    }
+    list() {
+        return [...this.tools.values()];
+    }
+    /** Convert registered tools to LLM function-call format */
+    toToolDefinitions(allowList, blockList) {
+        return this.list()
+            .filter(t => {
+            if (!t.enabled)
+                return false;
+            if (blockList.includes(t.name))
+                return false;
+            if (allowList.length > 0 && !allowList.includes(t.name))
+                return false;
+            return true;
+        })
+            .map(t => ({
+            type: 'function',
+            function: {
+                name: t.name,
+                description: t.description,
+                parameters: t.parameters,
+            },
+        }));
+    }
+}
+/** Create a pre-loaded registry with all default tools */
+export async function createDefaultRegistry() {
+    const registry = new ToolRegistry();
+    const [{ FileReadTool }, { FileWriteTool }, { FileEditTool }, { FileListTool }, { FileSearchTool }, { FileDeleteTool }, { ShellExecTool }, { WebFetchTool }, { WebSearchTool }, { MemoryReadTool }, { MemoryWriteTool },] = await Promise.all([
+        import('./file-read.js'),
+        import('./file-write.js'),
+        import('./file-edit.js'),
+        import('./file-list.js'),
+        import('./file-search.js'),
+        import('./file-delete.js'),
+        import('./shell-exec.js'),
+        import('./web-fetch.js'),
+        import('./web-search.js'),
+        import('./memory-read.js'),
+        import('./memory-write.js'),
+    ]);
+    registry.register(new FileReadTool());
+    registry.register(new FileWriteTool());
+    registry.register(new FileEditTool());
+    registry.register(new FileListTool());
+    registry.register(new FileSearchTool());
+    registry.register(new FileDeleteTool());
+    registry.register(new ShellExecTool());
+    registry.register(new WebFetchTool());
+    registry.register(new WebSearchTool());
+    registry.register(new MemoryReadTool());
+    registry.register(new MemoryWriteTool());
+    return registry;
+}
+//# sourceMappingURL=registry.js.map

package/dist/tools/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../../src/tools/registry.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,kDAAkD;AAClD,+DAA+D;AAI/D,MAAM,OAAO,YAAY;IACf,KAAK,GAAG,IAAI,GAAG,EAAgB,CAAC;IAExC,QAAQ,CAAC,IAAU;QACjB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,2DAA2D;IAC3D,iBAAiB,CAAC,SAAmB,EAAE,SAAmB;QACxD,OAAO,IAAI,CAAC,IAAI,EAAE;aACf,MAAM,CAAC,CAAC,CAAC,EAAE;YACV,IAAI,CAAC,CAAC,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC;YAC7B,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC7C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YACtE,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;aACD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACT,IAAI,EAAE,UAAmB;YACzB,QAAQ,EAAE;gBACR,IAAI,EAAS,CAAC,CAAC,IAAI;gBACnB,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,UAAU,EAAG,CAAC,CAAC,UAAgD;aAChE;SACF,CAAC,CAAC,CAAC;IACR,CAAC;CACF;AAED,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IACpC,MAAM,CACJ,EAAE,YAAY,EAAE,EAChB,EAAE,aAAa,EAAE,EACjB,EAAE,YAAY,EAAE,EAChB,EAAE,YAAY,EAAE,EAChB,EAAE,cAAc,EAAE,EAClB,EAAE,cAAc,EAAE,EAClB,EAAE,aAAa,EAAE,EACjB,EAAE,YAAY,EAAE,EAChB,EAAE,aAAa,EAAE,EACjB,EAAE,cAAc,EAAE,EAClB,EAAE,eAAe,EAAE,EACpB,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpB,MAAM,CAAC,gBAAgB,CAAC;QACxB,MAAM,CAAC,iBAAiB,CAAC;QACzB,MAAM,CAAC,gBAAgB,CAAC;QACxB,MAAM,CAAC,gBAAgB,CAAC;QACxB,MAAM,CAAC,kBAAkB,CAAC;QAC1B,MAAM,CAAC,kBAAkB,CAAC;QAC1B,MAAM,CAAC,iBAAiB,CAAC;QACzB,MAAM,CAAC,gBAAgB,CAAC;QACxB,MAAM,CAAC,iBAAiB,CAAC;QACzB,MAAM,CAAC,kBAAkB,CAAC;QAC1B,MAAM,CAAC,mBAAmB,CAAC;KAC5B,CAAC,CAAC;IAEH,QAAQ,CAAC,QAAQ,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,IAAI,aAAa,EAAE,CAAC,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,IAAI,aAAa,EAAE,CAAC,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,IAAI,YAAY,EAAE,CAAC,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,IAAI,aAAa,EAAE,CAAC,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC;IAEzC,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/tools/shell-exec.d.ts

@@ -0,0 +1,14 @@
+import type { Tool, ToolContext, ToolResult, JSONSchemaObject } from '@nexagent-cli/shared';
+export declare class ShellExecTool implements Tool {
+    name: string;
+    version: string;
+    description: string;
+    enabled: boolean;
+    riskLevel: "high";
+    permissions: readonly ["shell:exec"];
+    parameters: JSONSchemaObject;
+    execute(args: unknown, ctx: ToolContext): Promise<ToolResult>;
+    dryRun(args: unknown, _ctx: ToolContext): Promise<string>;
+    private detectShell;
+}
+//# sourceMappingURL=shell-exec.d.ts.map

package/dist/tools/shell-exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-exec.d.ts","sourceRoot":"","sources":["../../../../src/tools/shell-exec.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAG5F,qBAAa,aAAc,YAAW,IAAI;IACxC,IAAI,SAAuB;IAC3B,OAAO,SAAe;IACtB,WAAW,SAA4L;IACvM,OAAO,UAAY;IACnB,SAAS,EAAK,MAAM,CAAU;IAC9B,WAAW,0BAA2B;IAEtC,UAAU,EAAE,gBAAgB,CAqB1B;IAEI,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAiF7D,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC;IAK/D,OAAO,CAAC,WAAW;CASpB"}

package/dist/tools/shell-exec.js

@@ -0,0 +1,112 @@
+// ============================================================
+// Tool: shell_exec — Execute shell commands in the workspace
+// Windows-safe: auto-detects cmd/PowerShell/bash
+// ============================================================
+import { spawn } from 'node:child_process';
+import { resolve } from 'node:path';
+import { generateId, GLOBAL_SHELL_BLOCKLIST } from '@nexagent-cli/shared';
+export class ShellExecTool {
+    name = 'shell_exec';
+    version = '1.0.0';
+    description = 'Execute a shell command in the workspace directory. Output is captured and returned. Long-running commands time out after timeout_ms. Dangerous commands are blocked by safety checks.';
+    enabled = true;
+    riskLevel = 'high';
+    permissions = ['shell:exec'];
+    parameters = {
+        type: 'object',
+        properties: {
+            command: {
+                type: 'string',
+                description: 'The shell command to execute',
+            },
+            cwd: {
+                type: 'string',
+                description: 'Working directory for the command (relative to workspace, default: workspace root)',
+            },
+            timeout_ms: {
+                type: 'number',
+                description: 'Timeout in milliseconds (default: 30000, max: 120000)',
+            },
+            env: {
+                type: 'object',
+                description: 'Additional environment variables as key-value pairs',
+            },
+        },
+        required: ['command'],
+    };
+    async execute(args, ctx) {
+        const { command, cwd: relCwd = '.', timeout_ms: timeout = 30_000, env: extraEnv = {}, } = args;
+        // Blocklist check (belt-and-suspenders on top of safety gate)
+        for (const blocked of GLOBAL_SHELL_BLOCKLIST) {
+            if (command.toLowerCase().includes(blocked.toLowerCase())) {
+                throw new Error(`Command blocked by global blocklist: "${blocked}"`);
+            }
+        }
+        if (ctx.dryRun) {
+            return {
+                success: true,
+                output: `[DRY RUN] Would execute: ${command}`,
+                data: { dryRun: true, command },
+                executionId: generateId(),
+                durationMs: 0,
+            };
+        }
+        const absCwd = resolve(ctx.workspaceDir, relCwd);
+        const executionId = generateId();
+        const start = Date.now();
+        const effectiveTout = Math.min(timeout, 120_000);
+        const { shell, shellFlag } = this.detectShell();
+        return new Promise((resolve_p, reject) => {
+            const proc = spawn(shell, [shellFlag, command], {
+                cwd: absCwd,
+                env: { ...process.env, ...extraEnv },
+                stdio: 'pipe',
+            });
+            let stdout = '';
+            let stderr = '';
+            proc.stdout?.on('data', (d) => { stdout += d.toString(); });
+            proc.stderr?.on('data', (d) => { stderr += d.toString(); });
+            const timer = setTimeout(() => {
+                proc.kill('SIGTERM');
+                reject(new Error(`Command timed out after ${effectiveTout}ms: ${command}`));
+            }, effectiveTout);
+            proc.on('close', (code) => {
+                clearTimeout(timer);
+                const durationMs = Date.now() - start;
+                const combined = [stdout, stderr].filter(Boolean).join('\n--- stderr ---\n');
+                const truncated = combined.length > 20_000
+                    ? combined.slice(0, 20_000) + '\n[...output truncated at 20k chars...]'
+                    : combined;
+                if (code !== 0 && !stderr) {
+                    reject(new Error(`Command exited with code ${code}: ${truncated}`));
+                    return;
+                }
+                resolve_p({
+                    success: code === 0,
+                    output: truncated || `(no output, exit code ${code})`,
+                    data: { exitCode: code, stdout, stderr, command, durationMs },
+                    executionId,
+                    durationMs,
+                });
+            });
+            proc.on('error', (err) => {
+                clearTimeout(timer);
+                reject(new Error(`Failed to spawn process: ${err.message}`));
+            });
+        });
+    }
+    async dryRun(args, _ctx) {
+        const { command } = args;
+        return `Would execute shell command: "${command}"`;
+    }
+    detectShell() {
+        if (process.platform === 'win32') {
+            // Prefer PowerShell 7, fall back to cmd
+            return process.env['PSModulePath']
+                ? { shell: 'pwsh.exe', shellFlag: '-Command' }
+                : { shell: 'cmd.exe', shellFlag: '/c' };
+        }
+        return { shell: process.env['SHELL'] ?? '/bin/sh', shellFlag: '-c' };
+    }
+}
+//# sourceMappingURL=shell-exec.js.map