@orion-agents/orion-code 0.1.8 → 0.2.0

package/dist/tools/core/exec-command.js

@@ -0,0 +1,347 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.coreTool = void 0;
+const child_process_1 = require("child_process");
+const fs_1 = require("fs");
+const path_1 = require("path");
+const tool_1 = require("../../framework/tool");
+const descriptors_1 = require("../../runtime/core-tools/descriptors");
+const bash_security_1 = require("../bash_security");
+const sandbox_1 = require("../sandbox");
+const common_1 = require("./common");
+const EXEC_COMMAND_MIN_TIMEOUT_MS = 1;
+const EXEC_COMMAND_MAX_TIMEOUT_MS = 600000;
+const EXEC_COMMAND_MIN_OUTPUT_BYTES = 1024;
+const EXEC_COMMAND_MAX_OUTPUT_BYTES = 10 * 1024 * 1024;
+const descriptor = (0, descriptors_1.coreToolDescriptorV1)('exec_command');
+exports.coreTool = (0, tool_1.buildTool)({
+    name: descriptor.name,
+    aliases: [...descriptor.aliases],
+    description: descriptor.description,
+    parameters: structuredClone(descriptor.parameters),
+    execute: async (args, context) => {
+        // Ensure command is a valid string
+        const command = args.command;
+        if (!command || typeof command !== 'string') {
+            return { success: false, output: '', error: 'exec_command requires a command parameter' };
+        }
+        // Issue #32 #3.2: 传递 abortSignal
+        return execCommand_(command, args.cwd, args.timeout, args.maxOutput, context.abortSignal, context.cwd);
+    },
+    validateInput: args => (0, common_1.validateOptionalSafeInteger)(args, 'exec_command', 'timeout', EXEC_COMMAND_MIN_TIMEOUT_MS, EXEC_COMMAND_MAX_TIMEOUT_MS) ??
+        (0, common_1.validateOptionalSafeInteger)(args, 'exec_command', 'maxOutput', EXEC_COMMAND_MIN_OUTPUT_BYTES, EXEC_COMMAND_MAX_OUTPUT_BYTES),
+    isDestructive: args => {
+        const cmd = args.command || '';
+        return (0, bash_security_1.containsRecursiveRm)(cmd) || /(?:^|[;&|]\s*)(?:[^\s]+\/)?(?:mkfs|dd)(?:\s|$)/.test(cmd);
+    },
+    checkPermissions: (args, context) => {
+        const cmd = args.command || '';
+        // Use the bash_security module for comprehensive checks
+        const security = (0, bash_security_1.assessCommandSecurity)(cmd);
+        if (security.level === 'blocked') {
+            return {
+                behavior: 'deny',
+                reason: security.reason || `Command blocked by safety policy: ${cmd.slice(0, 50)}`,
+            };
+        }
+        // v0.1.3-2 §1.2: a configured-but-unusable sandbox is a hard deny, decided
+        // here so the user sees the reason instead of an opaque execution failure.
+        let paths;
+        try {
+            paths = resolveExecCommandPaths(args.cwd, context?.cwd);
+        }
+        catch (error) {
+            return {
+                behavior: 'deny',
+                reason: error instanceof Error ? error.message : 'exec_command cwd is outside workspace',
+            };
+        }
+        const { workdir, projectRoot } = paths;
+        const sandboxSettings = (0, sandbox_1.resolveSandboxSettings)(projectRoot);
+        let sandboxNote = '';
+        if ((sandboxSettings.profile ?? 'none') !== 'none') {
+            const plan = (0, sandbox_1.planSandboxedCommand)(cmd, {
+                cwd: workdir,
+                projectRoot,
+                settings: sandboxSettings,
+            });
+            if (!plan.ok) {
+                return {
+                    behavior: 'deny',
+                    reason: `sandbox profile "${plan.profile}" is configured but cannot be applied — ${plan.reason}`,
+                };
+            }
+            sandboxNote = ` [${(0, sandbox_1.describeSandboxPlan)(plan)}]`;
+        }
+        if (security.level === 'safe' && security.isReadOnly) {
+            return { behavior: 'allow' };
+        }
+        if (security.level === 'caution') {
+            return {
+                behavior: 'ask',
+                reason: (security.reason || 'Command requires confirmation') + sandboxNote,
+            };
+        }
+        // Default: ask for confirmation
+        return { behavior: 'ask', reason: 'Command requires confirmation' + sandboxNote };
+    },
+    isReadOnly: args => {
+        const cmd = args.command || '';
+        return (0, bash_security_1.isReadOnlyCommand)(cmd);
+    },
+    isConcurrencySafe: args => {
+        const cmd = args.command || '';
+        return (0, bash_security_1.isReadOnlyCommand)(cmd);
+    },
+    userFacingName: args => `Exec ${(0, common_1.compactOneLine)(args.command || '', 80)}`,
+    getSummary: (args, result) => {
+        const command = args.command || '';
+        const commandSummary = command ? `\n  $ ${(0, common_1.compactOneLine)(command, 160)}` : '';
+        if (!result.success) {
+            const detail = (0, common_1.summarizeFailedToolResult)(result);
+            return `🔧 exec → error${detail ? ` (${detail})` : ''}${commandSummary}`;
+        }
+        const bytes = Buffer.byteLength(result.output, 'utf8');
+        return `🔧 exec (${bytes}B output)${commandSummary}`;
+    },
+});
+// Issue #32 #3.2: execCommand_ 支持 abortSignal
+function resolveExecCommandPaths(cwd, baseCwd) {
+    const projectRoot = (0, path_1.resolve)(baseCwd ?? process.cwd());
+    if (!cwd)
+        return { workdir: projectRoot, projectRoot };
+    const normalizedCwd = (0, common_1.normalizeToolPath)(cwd);
+    if ((0, path_1.isAbsolute)(normalizedCwd)) {
+        throw new Error('exec_command cwd must be a workspace-relative path');
+    }
+    const workdir = (0, common_1.safePath)(normalizedCwd, projectRoot);
+    if (!(0, common_1.isExecCwdWithinWorkspace)(workdir, projectRoot)) {
+        throw new Error('exec_command cwd must stay within the workspace');
+    }
+    return {
+        workdir,
+        projectRoot,
+    };
+}
+async function execCommand_(command, cwd, timeout, maxOutput, abortSignal, baseCwd, sandbox) {
+    let paths;
+    try {
+        paths = resolveExecCommandPaths(cwd, baseCwd);
+    }
+    catch (error) {
+        return {
+            success: false,
+            output: '',
+            error: error instanceof Error ? error.message : 'exec_command cwd is outside workspace',
+        };
+    }
+    const { workdir, projectRoot } = paths;
+    // v0.1.3-2 §1.2: plan the (possibly sandboxed) argv before spawning. A
+    // configured sandbox that cannot be honoured must refuse the command rather
+    // than silently degrade into an unsandboxed run.
+    const plan = (0, sandbox_1.planSandboxedCommand)(command, {
+        cwd: workdir,
+        projectRoot,
+        settings: sandbox ?? (0, sandbox_1.resolveSandboxSettings)(projectRoot),
+    });
+    if (!plan.ok) {
+        return {
+            success: false,
+            output: '',
+            error: `Refusing to run: sandbox profile "${plan.profile}" is configured but cannot be applied — ${plan.reason}. ` +
+                'Set sandbox.profile to "none" to run without isolation.',
+        };
+    }
+    return new Promise(resolve => {
+        const timeoutMs = timeout ?? 30000;
+        const maxBytes = maxOutput ?? 51200; // Default 50KB, Issue #28 fix
+        // The docker backend bind-mounts `workdir` into the container; the host
+        // directory must exist at container-creation time or the mount fails with a
+        // confusing "nonexistent directory" error. Create it deterministically
+        // rather than relying on docker to materialise it.
+        if (plan.backend === 'docker') {
+            try {
+                (0, fs_1.mkdirSync)(workdir, { recursive: true });
+            }
+            catch {
+                // If it cannot be created we let the spawn fail with a clear error.
+            }
+        }
+        // Use spawn for streaming output with truncation support. The user command
+        // is a single argv element, so no intermediate shell re-parses it.
+        const useProcessGroup = process.platform !== 'win32';
+        const child = (0, child_process_1.spawn)(plan.file, plan.args, {
+            cwd: workdir,
+            detached: useProcessGroup,
+        });
+        // Issue #53: exec_command runs a complete command as a single argv element
+        // and never pipes input into it. If stdin stays open, stdin-reading commands
+        // (cat, sort, grep, `python3 -`, ...) block waiting for EOF until the timeout.
+        // Close it immediately so the child receives EOF and can proceed.
+        child.stdin?.end();
+        let stdoutData = '';
+        let stderrData = '';
+        let stdoutTruncated = false;
+        let stderrTruncated = false;
+        // Issue #32 修复：使用独立计数器
+        let stdoutBytes = 0;
+        let stderrBytes = 0;
+        let interrupted = null;
+        // Issue #32 #3.2: AbortSignal 处理
+        // Declared uninitialized on purpose: `finish()` below closes over it before the
+        // `timeoutId = setTimeout(...)` assignment. `const` without an initializer is a
+        // compile error (TS1155), and inlining the assignment would put it in the closure's TDZ.
+        // eslint-disable-next-line prefer-const
+        let timeoutId;
+        let killTimerId;
+        let settled = false;
+        const finish = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            if (timeoutId)
+                clearTimeout(timeoutId);
+            if (killTimerId)
+                clearTimeout(killTimerId);
+            if (abortSignal) {
+                abortSignal.removeEventListener('abort', abortHandler);
+            }
+            resolve(result);
+        };
+        const terminateChild = () => {
+            if (!child.pid || child.killed)
+                return;
+            try {
+                if (useProcessGroup) {
+                    process.kill(-child.pid, 'SIGTERM');
+                }
+                else {
+                    child.kill('SIGTERM');
+                }
+            }
+            catch {
+                child.kill('SIGTERM');
+            }
+            killTimerId = setTimeout(() => {
+                if (!child.pid || child.killed || settled)
+                    return;
+                try {
+                    if (useProcessGroup) {
+                        process.kill(-child.pid, 'SIGKILL');
+                    }
+                    else {
+                        child.kill('SIGKILL');
+                    }
+                }
+                catch {
+                    child.kill('SIGKILL');
+                }
+            }, 500);
+            killTimerId.unref?.();
+        };
+        const abortHandler = () => {
+            interrupted = 'aborted';
+            terminateChild();
+        };
+        if (abortSignal) {
+            abortSignal.addEventListener('abort', abortHandler);
+            if (abortSignal.aborted) {
+                abortHandler();
+            }
+        }
+        // Timeout handling
+        timeoutId = setTimeout(() => {
+            if (!interrupted) {
+                interrupted = 'timeout';
+                terminateChild();
+            }
+        }, timeoutMs);
+        // Stream stdout with truncation
+        child.stdout.on('data', (data) => {
+            if (!stdoutTruncated) {
+                const chunk = data.toString();
+                // Issue #30: count UTF-8 bytes, not UTF-16 code units, so CJK/emoji
+                // output is bounded by `maxBytes` (a UTF-16 count could exceed it ~2x).
+                const chunkBytes = Buffer.byteLength(chunk, 'utf8');
+                if (stdoutBytes + chunkBytes > maxBytes) {
+                    stdoutTruncated = true;
+                    const room = Math.max(0, maxBytes - stdoutBytes);
+                    // Byte-accurate truncation that respects multi-byte character boundaries.
+                    stdoutData += (0, common_1.truncateToBytes)(chunk, room).text;
+                    stdoutBytes = maxBytes;
+                }
+                else {
+                    stdoutData += chunk;
+                    stdoutBytes += chunkBytes;
+                }
+            }
+        });
+        // Stream stderr with truncation (Issue #32 修复：使用独立计数器)
+        child.stderr.on('data', (data) => {
+            if (!stderrTruncated) {
+                const chunk = data.toString();
+                // Issue #30: count UTF-8 bytes, not UTF-16 code units.
+                const chunkBytes = Buffer.byteLength(chunk, 'utf8');
+                if (stderrBytes + chunkBytes > maxBytes) {
+                    stderrTruncated = true;
+                    const room = Math.max(0, maxBytes - stderrBytes);
+                    stderrData += (0, common_1.truncateToBytes)(chunk, room).text;
+                    stderrBytes = maxBytes;
+                }
+                else {
+                    stderrData += chunk;
+                    stderrBytes += chunkBytes;
+                }
+            }
+        });
+        child.on('close', code => {
+            if (interrupted === 'aborted') {
+                finish({
+                    success: false,
+                    output: (0, common_1.truncateToBytes)(stdoutData, maxBytes).text,
+                    error: 'Command aborted by user',
+                });
+                return;
+            }
+            if (interrupted === 'timeout') {
+                finish({
+                    success: false,
+                    output: (0, common_1.truncateToBytes)(stdoutData, maxBytes).text,
+                    error: `Command timed out after ${timeoutMs}ms`,
+                });
+                return;
+            }
+            const output = stdoutData.trim();
+            const errOutput = stderrData.trim();
+            // Add truncation notice if output was truncated
+            let finalOutput = output;
+            if (stdoutTruncated) {
+                finalOutput += '\n\n[... output truncated, exceeded 50KB limit]';
+            }
+            if (code !== 0) {
+                finish({
+                    success: false,
+                    output: finalOutput || errOutput,
+                    error: `Command exited with code ${code}`,
+                });
+            }
+            else {
+                finish({
+                    success: true,
+                    output: finalOutput || '(no output)',
+                    error: stderrTruncated
+                        ? errOutput + '\n\n[... stderr truncated]'
+                        : errOutput || undefined,
+                });
+            }
+        });
+        child.on('error', err => {
+            finish({
+                success: false,
+                output: '',
+                error: err.message,
+            });
+        });
+    });
+}
+//# sourceMappingURL=exec-command.js.map

package/dist/tools/core/exec-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec-command.js","sourceRoot":"","sources":["../../../src/tools/core/exec-command.ts"],"names":[],"mappings":";;;AAAA,iDAAsC;AACtC,2BAA+B;AAC/B,+BAA2C;AAE3C,+CAAkE;AAClE,sEAA4E;AAC5E,oDAAiG;AACjG,wCAKoB;AACpB,qCAQkB;AAElB,MAAM,2BAA2B,GAAG,CAAC,CAAC;AACtC,MAAM,2BAA2B,GAAG,MAAO,CAAC;AAC5C,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAC3C,MAAM,6BAA6B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEvD,MAAM,UAAU,GAAG,IAAA,kCAAoB,EAAC,cAAc,CAAC,CAAC;AAE3C,QAAA,QAAQ,GAAG,IAAA,gBAAS,EAAC;IAChC,IAAI,EAAE,UAAU,CAAC,IAAI;IACrB,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC;IAChC,WAAW,EAAE,UAAU,CAAC,WAAW;IACnC,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC;IAClD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC/B,mCAAmC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,2CAA2C,EAAE,CAAC;QAC5F,CAAC;QACD,iCAAiC;QACjC,OAAO,YAAY,CACjB,OAAO,EACP,IAAI,CAAC,GAAyB,EAC9B,IAAI,CAAC,OAA6B,EAClC,IAAI,CAAC,SAA+B,EACpC,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,GAAG,CACZ,CAAC;IACJ,CAAC;IACD,aAAa,EAAE,IAAI,CAAC,EAAE,CACpB,IAAA,oCAA2B,EACzB,IAAI,EACJ,cAAc,EACd,SAAS,EACT,2BAA2B,EAC3B,2BAA2B,CAC5B;QACD,IAAA,oCAA2B,EACzB,IAAI,EACJ,cAAc,EACd,WAAW,EACX,6BAA6B,EAC7B,6BAA6B,CAC9B;IACH,aAAa,EAAE,IAAI,CAAC,EAAE;QACpB,MAAM,GAAG,GAAI,IAAI,CAAC,OAAkB,IAAI,EAAE,CAAC;QAC3C,OAAO,IAAA,mCAAmB,EAAC,GAAG,CAAC,IAAI,gDAAgD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChG,CAAC;IACD,gBAAgB,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;QAClC,MAAM,GAAG,GAAI,IAAI,CAAC,OAAkB,IAAI,EAAE,CAAC;QAE3C,wDAAwD;QACxD,MAAM,QAAQ,GAAG,IAAA,qCAAqB,EAAC,GAAG,CAAC,CAAC;QAE5C,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO;gBACL,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,qCAAqC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;aACnF,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,2EAA2E;QAC3E,IAAI,KAA+C,CAAC;QACpD,IAAI,CAAC;YACH,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,GAAyB,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC;aACzF,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;QACvC,MAAM,eAAe,GAAG,IAAA,gCAAsB,EAAC,WAAW,CAAC,CAAC;QAC5D,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,eAAe,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,IAAA,8BAAoB,EAAC,GAAG,EAAE;gBACrC,GAAG,EAAE,OAAO;gBACZ,WAAW;gBACX,QAAQ,EAAE,eAAe;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACb,OAAO;oBACL,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,oBAAoB,IAAI,CAAC,OAAO,2CAA2C,IAAI,CAAC,MAAM,EAAE;iBACjG,CAAC;YACJ,CAAC;YACD,WAAW,GAAG,KAAK,IAAA,6BAAmB,EAAC,IAAI,CAAC,GAAG,CAAC;QAClD,CAAC;QAED,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACrD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAC/B,CAAC;QAED,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,IAAI,+BAA+B,CAAC,GAAG,WAAW;aAC3E,CAAC;QACJ,CAAC;QAED,gCAAgC;QAChC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,GAAG,WAAW,EAAE,CAAC;IACpF,CAAC;IACD,UAAU,EAAE,IAAI,CAAC,EAAE;QACjB,MAAM,GAAG,GAAI,IAAI,CAAC,OAAkB,IAAI,EAAE,CAAC;QAC3C,OAAO,IAAA,iCAAiB,EAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IACD,iBAAiB,EAAE,IAAI,CAAC,EAAE;QACxB,MAAM,GAAG,GAAI,IAAI,CAAC,OAAkB,IAAI,EAAE,CAAC;QAC3C,OAAO,IAAA,iCAAiB,EAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IACD,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,IAAA,uBAAc,EAAE,IAAI,CAAC,OAAkB,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE;IACpF,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAI,IAAI,CAAC,OAAkB,IAAI,EAAE,CAAC;QAC/C,MAAM,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,IAAA,uBAAc,EAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAA,kCAAyB,EAAC,MAAM,CAAC,CAAC;YACjD,OAAO,kBAAkB,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,CAAC;QAC3E,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACvD,OAAO,YAAY,KAAK,YAAY,cAAc,EAAE,CAAC;IACvD,CAAC;CACF,CAAC,CAAC;AAEH,8CAA8C;AAC9C,SAAS,uBAAuB,CAC9B,GAAY,EACZ,OAAgB;IAEhB,MAAM,WAAW,GAAG,IAAA,cAAO,EAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;IAEvD,MAAM,aAAa,GAAG,IAAA,0BAAiB,EAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,IAAA,iBAAU,EAAC,aAAa,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,iBAAQ,EAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACrD,IAAI,CAAC,IAAA,iCAAwB,EAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO;QACL,OAAO;QACP,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,OAAe,EACf,GAAY,EACZ,OAAgB,EAChB,SAAkB,EAClB,WAAyB,EACzB,OAAgB,EAChB,OAAuB;IAEvB,IAAI,KAA+C,CAAC;IACpD,IAAI,CAAC;QACH,KAAK,GAAG,uBAAuB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC;SACxF,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAEvC,uEAAuE;IACvE,4EAA4E;IAC5E,iDAAiD;IACjD,MAAM,IAAI,GAAG,IAAA,8BAAoB,EAAC,OAAO,EAAE;QACzC,GAAG,EAAE,OAAO;QACZ,WAAW;QACX,QAAQ,EAAE,OAAO,IAAI,IAAA,gCAAsB,EAAC,WAAW,CAAC;KACzD,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,EAAE;YACV,KAAK,EACH,qCAAqC,IAAI,CAAC,OAAO,2CAA2C,IAAI,CAAC,MAAM,IAAI;gBAC3G,yDAAyD;SAC5D,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QAC3B,MAAM,SAAS,GAAG,OAAO,IAAI,KAAK,CAAC;QACnC,MAAM,QAAQ,GAAG,SAAS,IAAI,KAAK,CAAC,CAAC,8BAA8B;QAEnE,wEAAwE;QACxE,4EAA4E;QAC5E,uEAAuE;QACvE,mDAAmD;QACnD,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,IAAA,cAAS,EAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,oEAAoE;YACtE,CAAC;QACH,CAAC;QAED,2EAA2E;QAC3E,mEAAmE;QACnE,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QACrD,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YACxC,GAAG,EAAE,OAAO;YACZ,QAAQ,EAAE,eAAe;SAC1B,CAAC,CAAC;QAEH,2EAA2E;QAC3E,6EAA6E;QAC7E,+EAA+E;QAC/E,kEAAkE;QAClE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QAEnB,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,uBAAuB;QACvB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,WAAW,GAAiC,IAAI,CAAC;QAErD,iCAAiC;QACjC,gFAAgF;QAChF,gFAAgF;QAChF,yFAAyF;QACzF,wCAAwC;QACxC,IAAI,SAAqC,CAAC;QAC1C,IAAI,WAAuC,CAAC;QAC5C,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,MAAM,MAAM,GAAG,CAAC,MAAkB,EAAE,EAAE;YACpC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,WAAW;gBAAE,YAAY,CAAC,WAAW,CAAC,CAAC;YAC3C,IAAI,WAAW,EAAE,CAAC;gBAChB,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACzD,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC;QAEF,MAAM,cAAc,GAAG,GAAG,EAAE;YAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,MAAM;gBAAE,OAAO;YACvC,IAAI,CAAC;gBACH,IAAI,eAAe,EAAE,CAAC;oBACpB,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACtC,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAED,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO;oBAAE,OAAO;gBAClD,IAAI,CAAC;oBACH,IAAI,eAAe,EAAE,CAAC;wBACpB,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;oBACtC,CAAC;yBAAM,CAAC;wBACN,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACxB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC,EAAE,GAAG,CAAC,CAAC;YACR,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;QACxB,CAAC,CAAC;QAEF,MAAM,YAAY,GAAG,GAAG,EAAE;YACxB,WAAW,GAAG,SAAS,CAAC;YACxB,cAAc,EAAE,CAAC;QACnB,CAAC,CAAC;QAEF,IAAI,WAAW,EAAE,CAAC;YAChB,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACpD,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;gBACxB,YAAY,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC1B,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,WAAW,GAAG,SAAS,CAAC;gBACxB,cAAc,EAAE,CAAC;YACnB,CAAC;QACH,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,gCAAgC;QAChC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACvC,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9B,oEAAoE;gBACpE,wEAAwE;gBACxE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACpD,IAAI,WAAW,GAAG,UAAU,GAAG,QAAQ,EAAE,CAAC;oBACxC,eAAe,GAAG,IAAI,CAAC;oBACvB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC,CAAC;oBACjD,0EAA0E;oBAC1E,UAAU,IAAI,IAAA,wBAAe,EAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC;oBAChD,WAAW,GAAG,QAAQ,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACN,UAAU,IAAI,KAAK,CAAC;oBACpB,WAAW,IAAI,UAAU,CAAC;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,uDAAuD;QACvD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACvC,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9B,uDAAuD;gBACvD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACpD,IAAI,WAAW,GAAG,UAAU,GAAG,QAAQ,EAAE,CAAC;oBACxC,eAAe,GAAG,IAAI,CAAC;oBACvB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC,CAAC;oBACjD,UAAU,IAAI,IAAA,wBAAe,EAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC;oBAChD,WAAW,GAAG,QAAQ,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACN,UAAU,IAAI,KAAK,CAAC;oBACpB,WAAW,IAAI,UAAU,CAAC;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;YACvB,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,CAAC;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,IAAA,wBAAe,EAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,IAAI;oBAClD,KAAK,EAAE,yBAAyB;iBACjC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,CAAC;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,IAAA,wBAAe,EAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,IAAI;oBAClD,KAAK,EAAE,2BAA2B,SAAS,IAAI;iBAChD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;YAEpC,gDAAgD;YAChD,IAAI,WAAW,GAAG,MAAM,CAAC;YACzB,IAAI,eAAe,EAAE,CAAC;gBACpB,WAAW,IAAI,iDAAiD,CAAC;YACnE,CAAC;YAED,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,MAAM,CAAC;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,WAAW,IAAI,SAAS;oBAChC,KAAK,EAAE,4BAA4B,IAAI,EAAE;iBAC1C,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC;oBACL,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,WAAW,IAAI,aAAa;oBACpC,KAAK,EAAE,eAAe;wBACpB,CAAC,CAAC,SAAS,GAAG,4BAA4B;wBAC1C,CAAC,CAAC,SAAS,IAAI,SAAS;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE;YACtB,MAAM,CAAC;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,GAAG,CAAC,OAAO;aACnB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/core/glob.d.ts

@@ -0,0 +1,2 @@
+export declare const coreTool: import("../../framework/tool").OrionCodeTool;
+//# sourceMappingURL=glob.d.ts.map

package/dist/tools/core/glob.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"glob.d.ts","sourceRoot":"","sources":["../../../src/tools/core/glob.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,QAAQ,8CAsBnB,CAAC"}

package/dist/tools/core/glob.js

@@ -0,0 +1,133 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.coreTool = void 0;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const tool_1 = require("../../framework/tool");
+const descriptors_1 = require("../../runtime/core-tools/descriptors");
+const errors_1 = require("../../utils/errors");
+const common_1 = require("./common");
+const descriptor = (0, descriptors_1.coreToolDescriptorV1)('glob');
+exports.coreTool = (0, tool_1.buildTool)({
+    name: descriptor.name,
+    aliases: [...descriptor.aliases],
+    description: descriptor.description,
+    parameters: structuredClone(descriptor.parameters),
+    execute: async (args, context) => {
+        // Ensure pattern is a valid string
+        const pattern = args.pattern;
+        if (!pattern || typeof pattern !== 'string') {
+            return { success: false, output: '', error: 'glob requires a pattern parameter' };
+        }
+        return glob_(pattern, args.path, context.cwd);
+    },
+    isReadOnly: () => true,
+    isConcurrencySafe: () => true,
+    userFacingName: args => `Glob ${args.pattern}`,
+    getSummary: (args, result) => {
+        const pattern = args.pattern;
+        if (!result.success)
+            return `🔍 glob ${pattern} → error`;
+        const count = result.output.split('\n').filter(Boolean).length;
+        return `🔍 glob ${pattern} → ${count} matches`;
+    },
+});
+/**
+ * Glob 模式匹配 - 简化版实现
+ * 支持: **（递归目录）、*（任意字符）、?（单个字符）
+ */
+async function glob_(pattern, basePath, cwd) {
+    try {
+        const normalizedBasePath = basePath ? (0, common_1.normalizeToolPath)(basePath) : (cwd ?? process.cwd());
+        const base = basePath ? (0, common_1.safePath)(basePath, cwd) : (cwd ?? process.cwd());
+        const workspaceRoot = cwd ?? process.cwd();
+        if (!(0, common_1.isWithinWorkspace)(base, workspaceRoot)) {
+            return {
+                success: false,
+                output: '',
+                error: `Refusing to search outside the workspace: ${normalizedBasePath}`,
+            };
+        }
+        if (!(0, fs_1.existsSync)(base)) {
+            return { success: false, output: '', error: `Path not found: ${normalizedBasePath}` };
+        }
+        if (!(0, fs_1.statSync)(base).isDirectory()) {
+            return {
+                success: false,
+                output: '',
+                error: `Path is not a directory: ${normalizedBasePath}`,
+            };
+        }
+        const results = [];
+        // Convert glob pattern to regex.
+        // Escape ALL regex metacharacters first, then translate glob wildcards.
+        // Escaping only `.` (the old behavior) left parens/brackets/+/^/$/| as
+        // regex syntax: a literal "(group)" became a capture group (so the real
+        // file stopped matching) and an unbalanced "[" made new RegExp throw.
+        function globToRegex(pat) {
+            // Use placeholders for glob wildcards so escaping does not touch them.
+            let regex = pat;
+            // **/ at start - matches optional path (including empty)
+            regex = regex.replace(/^\*\*\//, '<<STARSTAR_SLASH_START>>');
+            // **/ in middle - matches any number of path segments
+            regex = regex.replace(/\*\*\//g, '<<STARSTAR_SLASH>>');
+            // standalone ** - matches anything
+            regex = regex.replace(/\*\*/g, '<<STARSTAR>>');
+            // Escape every regex metacharacter in the remaining literal text.
+            // NOTE: * and ? are glob wildcards, handled below - do not escape them.
+            regex = regex.replace(/[.+^${}()|[\]\\]/g, '\\$&');
+            // * matches anything except /
+            regex = regex.replace(/\*/g, '[^/]*');
+            // ? matches single char except /
+            regex = regex.replace(/\?/g, '[^/]');
+            // Now restore ** placeholders
+            regex = regex.replace(/<<STARSTAR_SLASH_START>>/g, '(.*\\/)?');
+            regex = regex.replace(/<<STARSTAR_SLASH>>/g, '([^/]+\\/)*');
+            regex = regex.replace(/<<STARSTAR>>/g, '.*');
+            return new RegExp(`^${regex}$`);
+        }
+        const regex = globToRegex(pattern);
+        // Recursive walk with a depth cap so a pathological tree (or symlink loop)
+        // cannot hang or OOM the tool.
+        const MAX_DEPTH = 16;
+        function walk(dir, prefix, depth) {
+            if (depth > MAX_DEPTH)
+                return;
+            try {
+                const entries = (0, fs_1.readdirSync)(dir, { withFileTypes: true });
+                for (const entry of entries) {
+                    if (entry.name.startsWith('.'))
+                        continue;
+                    const relPath = prefix ? `${prefix}/${entry.name}` : entry.name;
+                    if (entry.isDirectory()) {
+                        walk((0, path_1.join)(dir, entry.name), relPath, depth + 1);
+                    }
+                    else {
+                        if (regex.test(relPath)) {
+                            results.push(relPath);
+                        }
+                    }
+                }
+            }
+            catch {
+                // skip unreadable directories
+            }
+        }
+        walk(base, '', 0);
+        if (results.length === 0) {
+            return { success: true, output: 'No files found matching pattern' };
+        }
+        // Limit output to 200 matches
+        const maxMatches = 200;
+        const sorted = results.sort();
+        const output = sorted.length > maxMatches
+            ? sorted.slice(0, maxMatches).join('\n') +
+                `\n\n[... truncated, ${sorted.length - maxMatches} more matches]`
+            : sorted.join('\n');
+        return { success: true, output };
+    }
+    catch (err) {
+        return { success: false, output: '', error: (0, errors_1.errorMessage)(err) };
+    }
+}
+//# sourceMappingURL=glob.js.map

package/dist/tools/core/glob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"glob.js","sourceRoot":"","sources":["../../../src/tools/core/glob.ts"],"names":[],"mappings":";;;AAAA,2BAAuD;AACvD,+BAA4B;AAE5B,+CAAkE;AAClE,sEAA4E;AAC5E,+CAAkD;AAClD,qCAA0E;AAE1E,MAAM,UAAU,GAAG,IAAA,kCAAoB,EAAC,MAAM,CAAC,CAAC;AAEnC,QAAA,QAAQ,GAAG,IAAA,gBAAS,EAAC;IAChC,IAAI,EAAE,UAAU,CAAC,IAAI;IACrB,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC;IAChC,WAAW,EAAE,UAAU,CAAC,WAAW;IACnC,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC;IAClD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QAC/B,mCAAmC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;QACpF,CAAC;QACD,OAAO,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,IAA0B,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACtE,CAAC;IACD,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI;IACtB,iBAAiB,EAAE,GAAG,EAAE,CAAC,IAAI;IAC7B,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,IAAI,CAAC,OAAiB,EAAE;IACxD,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAiB,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,WAAW,OAAO,UAAU,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAC/D,OAAO,WAAW,OAAO,MAAM,KAAK,UAAU,CAAC;IACjD,CAAC;CACF,CAAC,CAAC;AAEH;;;GAGG;AACH,KAAK,UAAU,KAAK,CAAC,OAAe,EAAE,QAAiB,EAAE,GAAY;IACnE,IAAI,CAAC;QACH,MAAM,kBAAkB,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAA,0BAAiB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAA,iBAAQ,EAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACzE,MAAM,aAAa,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAC3C,IAAI,CAAC,IAAA,0BAAiB,EAAC,IAAI,EAAE,aAAa,CAAC,EAAE,CAAC;YAC5C,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,6CAA6C,kBAAkB,EAAE;aACzE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAA,eAAU,EAAC,IAAI,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,mBAAmB,kBAAkB,EAAE,EAAE,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,IAAA,aAAQ,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,4BAA4B,kBAAkB,EAAE;aACxD,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,iCAAiC;QACjC,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,sEAAsE;QACtE,SAAS,WAAW,CAAC,GAAW;YAC9B,uEAAuE;YACvE,IAAI,KAAK,GAAG,GAAG,CAAC;YAEhB,yDAAyD;YACzD,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;YAE7D,sDAAsD;YACtD,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;YAEvD,mCAAmC;YACnC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAE/C,kEAAkE;YAClE,wEAAwE;YACxE,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;YAEnD,8BAA8B;YAC9B,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAEtC,iCAAiC;YACjC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAErC,8BAA8B;YAC9B,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,2BAA2B,EAAE,UAAU,CAAC,CAAC;YAC/D,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,aAAa,CAAC,CAAC;YAC5D,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;YAE7C,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAEnC,2EAA2E;QAC3E,+BAA+B;QAC/B,MAAM,SAAS,GAAG,EAAE,CAAC;QACrB,SAAS,IAAI,CAAC,GAAW,EAAE,MAAc,EAAE,KAAa;YACtD,IAAI,KAAK,GAAG,SAAS;gBAAE,OAAO;YAC9B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAA,gBAAW,EAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;wBAAE,SAAS;oBAEzC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;oBAEhE,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;wBACxB,IAAI,CAAC,IAAA,WAAI,EAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;oBAClD,CAAC;yBAAM,CAAC;wBACN,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;4BACxB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBACxB,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,8BAA8B;YAChC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAElB,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;QACtE,CAAC;QAED,8BAA8B;QAC9B,MAAM,UAAU,GAAG,GAAG,CAAC;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,GAAG,UAAU;YACxB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtC,uBAAuB,MAAM,CAAC,MAAM,GAAG,UAAU,gBAAgB;YACnE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAExB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAA,qBAAY,EAAC,GAAG,CAAC,EAAE,CAAC;IAClE,CAAC;AACH,CAAC"}

package/dist/tools/core/grep.d.ts

@@ -0,0 +1,12 @@
+export declare const coreTool: import("../../framework/tool").OrionCodeTool;
+/**
+ * Validate a caller-supplied regular expression pattern before compiling it.
+ *
+ * Issue #79: `grep_` compiles user/model-supplied patterns with `new RegExp`
+ * directly. A pathological pattern with a quantified group that itself contains
+ * a quantifier (e.g. `(a+)+`, `(\d+)*`) triggers catastrophic backtracking
+ * (ReDoS) and can hang the process on adversarial input (prompt injection).
+ * Reject empty/oversized patterns and the classic nested-quantifier shapes.
+ */
+export declare function validateRegexPattern(pattern: string): string | null;
+//# sourceMappingURL=grep.d.ts.map

package/dist/tools/core/grep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grep.d.ts","sourceRoot":"","sources":["../../../src/tools/core/grep.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,QAAQ,8CA4BnB,CAAC;AAEH;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAkCnE"}