@paretools/shared 0.6.0 → 0.8.0

package/dist/index.d.ts

@@ -4,5 +4,6 @@ export { stripAnsi } from "./ansi.js";
 export { assertNoFlagInjection, assertAllowedCommand } from "./validation.js";
 export { INPUT_LIMITS } from "./limits.js";
 export { sanitizeErrorOutput } from "./sanitize.js";
+export { shouldRegisterTool } from "./tool-filter.js";
 export type { ToolOutput } from "./types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -4,4 +4,5 @@ export { stripAnsi } from "./ansi.js";
 export { assertNoFlagInjection, assertAllowedCommand } from "./validation.js";
 export { INPUT_LIMITS } from "./limits.js";
 export { sanitizeErrorOutput } from "./sanitize.js";
+export { shouldRegisterTool } from "./tool-filter.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,GAAG,EAAE,YAAY,EAAmC,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,GAAG,EAAE,YAAY,EAAmC,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/runner.d.ts

@@ -3,6 +3,14 @@ export interface RunOptions {
     cwd?: string;
     timeout?: number;
     env?: Record<string, string>;
+    /** Data to write to the child process's stdin. Useful for piping content
+     *  (e.g., `git commit --file -`) instead of passing it as a command arg,
+     *  which avoids cmd.exe argument-length and newline limitations on Windows. */
+    stdin?: string;
+    /** Override shell mode. Defaults to `true` on Windows (for .cmd/.bat wrappers)
+     *  and `false` elsewhere. Set to `false` for native executables (e.g., git)
+     *  whose args contain characters that cmd.exe would misinterpret (like `<>`). */
+    shell?: boolean;
 }
 /** Result of a command execution, containing the exit code and ANSI-stripped stdout/stderr. */
 export interface RunResult {
@@ -13,19 +21,21 @@ export interface RunResult {
 /**
  * Escapes a single argument for safe use with cmd.exe on Windows.
  *
- * When `shell: true` is used with `execFile` on Windows, Node.js wraps each
- * argument in double quotes. Inside double quotes cmd.exe still interprets:
- *   - `%VAR%` for environment variable expansion
- *   - `^` as the escape character itself
- *   - `&`, `|`, `<`, `>` as pipeline / redirection operators
+ * When `shell: true` is used with `execFile` on Windows, Node.js joins the
+ * command and args with spaces to build a cmd.exe command line. It does NOT
+ * automatically quote individual arguments, so args containing spaces would
+ * be split into multiple tokens by cmd.exe.
  *
- * We neutralise these by:
- *   1. Replacing `%` with `%%` (disables env-var expansion inside quotes).
- *   2. Prefixing `^`, `&`, `|`, `<`, `>`, `!` with the cmd.exe escape char `^`.
- *      (`!` must be escaped to prevent delayed expansion of `!VAR!`.)
+ * Strategy:
+ *   - Args with spaces, tabs, or double quotes are wrapped in double quotes.
+ *     Inside double quotes cmd.exe treats `&`, `|`, `<`, `>`, `^` as literal,
+ *     so only `%` needs escaping (`%%`). Internal `"` chars are doubled (`""`).
+ *   - Args without spaces are left unquoted, with cmd.exe metacharacters
+ *     escaped via the caret (`^`) prefix.
+ *   - `%` → `%%` is applied unconditionally (active in both quoted/unquoted).
  *
- * Parentheses `(` `)` are NOT escaped here because inside double-quoted
- * strings they are literal characters and do not affect grouping.
+ * Parentheses `(` `)` are NOT escaped because inside double-quoted strings
+ * they are literal, and outside quotes they rarely appear in tool args.
  */
 export declare function escapeCmdArg(arg: string): string;
 /**

package/dist/runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAIA,uGAAuG;AACvG,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED,+FAA+F;AAC/F,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAiBhD;AAED;;;;;;;;GAQG;AACH,wBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAkEtF"}
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAIA,uGAAuG;AACvG,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B;;mFAE+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;qFAEiF;IACjF,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,+FAA+F;AAC/F,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAqChD;AAED;;;;;;;;GAQG;AACH,wBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CA8EtF"}

package/dist/runner.js

@@ -4,26 +4,47 @@ import { sanitizeErrorOutput } from "./sanitize.js";
 /**
  * Escapes a single argument for safe use with cmd.exe on Windows.
  *
- * When `shell: true` is used with `execFile` on Windows, Node.js wraps each
- * argument in double quotes. Inside double quotes cmd.exe still interprets:
- *   - `%VAR%` for environment variable expansion
- *   - `^` as the escape character itself
- *   - `&`, `|`, `<`, `>` as pipeline / redirection operators
+ * When `shell: true` is used with `execFile` on Windows, Node.js joins the
+ * command and args with spaces to build a cmd.exe command line. It does NOT
+ * automatically quote individual arguments, so args containing spaces would
+ * be split into multiple tokens by cmd.exe.
  *
- * We neutralise these by:
- *   1. Replacing `%` with `%%` (disables env-var expansion inside quotes).
- *   2. Prefixing `^`, `&`, `|`, `<`, `>`, `!` with the cmd.exe escape char `^`.
- *      (`!` must be escaped to prevent delayed expansion of `!VAR!`.)
+ * Strategy:
+ *   - Args with spaces, tabs, or double quotes are wrapped in double quotes.
+ *     Inside double quotes cmd.exe treats `&`, `|`, `<`, `>`, `^` as literal,
+ *     so only `%` needs escaping (`%%`). Internal `"` chars are doubled (`""`).
+ *   - Args without spaces are left unquoted, with cmd.exe metacharacters
+ *     escaped via the caret (`^`) prefix.
+ *   - `%` → `%%` is applied unconditionally (active in both quoted/unquoted).
  *
- * Parentheses `(` `)` are NOT escaped here because inside double-quoted
- * strings they are literal characters and do not affect grouping.
+ * Parentheses `(` `)` are NOT escaped because inside double-quoted strings
+ * they are literal, and outside quotes they rarely appear in tool args.
  */
 export function escapeCmdArg(arg) {
-    // Step 1: Escape % → %% to prevent %VAR% expansion
-    let escaped = arg.replace(/%/g, "%%");
-    // Step 2: Caret-escape cmd.exe metacharacters that are dangerous
-    // even inside double quotes. The caret itself must be escaped first
-    // so that carets we insert are not themselves re-escaped.
+    // NOTE: We intentionally do NOT escape % → %%. While % starts environment
+    // variable expansion in cmd.exe (%VAR%), the %% escape only works in batch
+    // files. When Node.js uses `shell: true`, it runs via `cmd.exe /d /s /c`
+    // which is NOT batch context — so %% passes through literally as two %
+    // characters. This breaks tools like git that use % in format strings
+    // (e.g., --format=%H), because git interprets %% as its own escape for
+    // literal %. User-provided text that might contain %VAR% patterns should
+    // be passed via stdin (e.g., git commit --file -) rather than as args.
+    let escaped = arg;
+    // Step 1: If the arg contains spaces, tabs, or double quotes, wrap it in
+    // double quotes so cmd.exe keeps it as a single token.
+    if (/[ \t"]/.test(arg)) {
+        // Replace newlines with spaces — cmd.exe treats \n as a command-line
+        // terminator even inside double quotes, so literal newlines cannot be
+        // passed via command args. Tools that need newline-preserving input
+        // should use RunOptions.stdin instead (e.g., git commit --file -).
+        escaped = escaped.replace(/\r?\n/g, " ");
+        // Escape internal double quotes by doubling them
+        escaped = escaped.replace(/"/g, '""');
+        return `"${escaped}"`;
+    }
+    // Step 2: For unquoted args, caret-escape cmd.exe metacharacters.
+    // The caret itself must be escaped first so that carets we insert
+    // are not themselves re-escaped.
     escaped = escaped.replace(/\^/g, "^^");
     escaped = escaped.replace(/&/g, "^&");
     escaped = escaped.replace(/\|/g, "^|");
@@ -44,16 +65,20 @@ export function escapeCmdArg(arg) {
  */
 export function run(cmd, args, opts) {
     return new Promise((resolve, reject) => {
+        // Determine shell mode: default to true on Windows (for .cmd/.bat wrappers),
+        // but allow callers to override (e.g., git uses shell:false to avoid cmd.exe
+        // mangling format strings that contain < > characters).
+        const useShell = opts?.shell ?? process.platform === "win32";
         // On Windows with shell mode, escape cmd.exe metacharacters to prevent
         // environment variable expansion and command injection via special chars.
         // See escapeCmdArg() for details on what is escaped and why.
-        const safeArgs = process.platform === "win32" ? args.map(escapeCmdArg) : args;
-        execFile(cmd, safeArgs, {
+        const safeArgs = useShell && process.platform === "win32" ? args.map(escapeCmdArg) : args;
+        const child = execFile(cmd, safeArgs, {
             cwd: opts?.cwd,
             timeout: opts?.timeout ?? 60_000,
             env: opts?.env ? { ...process.env, ...opts.env } : undefined,
             maxBuffer: 10 * 1024 * 1024, // 10 MB
-            shell: process.platform === "win32",
+            shell: useShell,
         }, (error, stdout, stderr) => {
             if (error) {
                 const errno = error;
@@ -85,6 +110,12 @@ export function run(cmd, args, opts) {
                 stderr: sanitizeErrorOutput(stripAnsi(stderr)),
             });
         });
+        // Pipe stdin data if provided, then close the stream so the child
+        // process knows input is complete (e.g., `git commit --file -`).
+        if (opts?.stdin != null) {
+            child.stdin?.write(opts.stdin);
+            child.stdin?.end();
+        }
     });
 }
 //# sourceMappingURL=runner.js.map

package/dist/runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"runner.js","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAgBpD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,mDAAmD;IACnD,IAAI,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAEtC,iEAAiE;IACjE,oEAAoE;IACpE,0DAA0D;IAC1D,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAEtC,wDAAwD;IACxD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAEtC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,IAAc,EAAE,IAAiB;IAChE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,uEAAuE;QACvE,0EAA0E;QAC1E,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAE9E,QAAQ,CACN,GAAG,EACH,QAAQ,EACR;YACE,GAAG,EAAE,IAAI,EAAE,GAAG;YACd,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,MAAM;YAChC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;YAC5D,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,QAAQ;YACrC,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;SACpC,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACxB,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,KAAK,GAAG,KAA8B,CAAC;gBAE7C,wDAAwD;gBACxD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC5B,MAAM,CACJ,IAAI,KAAK,CACP,uBAAuB,GAAG,uDAAuD,CAClF,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACtD,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;oBAC5E,OAAO;gBACT,CAAC;gBAED,mEAAmE;gBACnE,iEAAiE;gBACjE,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACjC,MAAM,CACJ,IAAI,KAAK,CACP,YAAY,GAAG,qBAAqB,IAAI,EAAE,OAAO,IAAI,MAAM,sBAAsB,KAAK,CAAC,MAAM,IAAI,CAClG,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,4DAA4D;gBAC5D,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;gBACtC,IAAI,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;oBAC9C,MAAM,CACJ,IAAI,KAAK,CACP,uBAAuB,GAAG,uDAAuD,CAClF,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;YACH,CAAC;YAED,OAAO,CAAC;gBACN,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvE,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC;gBACzB,MAAM,EAAE,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;aAC/C,CAAC,CAAC;QACL,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../src/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAwBpD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,sEAAsE;IACtE,uEAAuE;IACvE,yEAAyE;IACzE,uEAAuE;IACvE,IAAI,OAAO,GAAG,GAAG,CAAC;IAElB,yEAAyE;IACzE,uDAAuD;IACvD,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,qEAAqE;QACrE,sEAAsE;QACtE,oEAAoE;QACpE,mEAAmE;QACnE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACzC,iDAAiD;QACjD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtC,OAAO,IAAI,OAAO,GAAG,CAAC;IACxB,CAAC;IAED,kEAAkE;IAClE,kEAAkE;IAClE,iCAAiC;IACjC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACvC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAEtC,wDAAwD;IACxD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAEtC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,IAAc,EAAE,IAAiB;IAChE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,6EAA6E;QAC7E,6EAA6E;QAC7E,wDAAwD;QACxD,MAAM,QAAQ,GAAG,IAAI,EAAE,KAAK,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAE7D,uEAAuE;QACvE,0EAA0E;QAC1E,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAE1F,MAAM,KAAK,GAAG,QAAQ,CACpB,GAAG,EACH,QAAQ,EACR;YACE,GAAG,EAAE,IAAI,EAAE,GAAG;YACd,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,MAAM;YAChC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS;YAC5D,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,QAAQ;YACrC,KAAK,EAAE,QAAQ;SAChB,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACxB,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,KAAK,GAAG,KAA8B,CAAC;gBAE7C,wDAAwD;gBACxD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC5B,MAAM,CACJ,IAAI,KAAK,CACP,uBAAuB,GAAG,uDAAuD,CAClF,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACtD,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;oBAC5E,OAAO;gBACT,CAAC;gBAED,mEAAmE;gBACnE,iEAAiE;gBACjE,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACjC,MAAM,CACJ,IAAI,KAAK,CACP,YAAY,GAAG,qBAAqB,IAAI,EAAE,OAAO,IAAI,MAAM,sBAAsB,KAAK,CAAC,MAAM,IAAI,CAClG,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,4DAA4D;gBAC5D,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;gBACtC,IAAI,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;oBAC9C,MAAM,CACJ,IAAI,KAAK,CACP,uBAAuB,GAAG,uDAAuD,CAClF,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;YACH,CAAC;YAED,OAAO,CAAC;gBACN,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvE,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC;gBACzB,MAAM,EAAE,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;aAC/C,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,kEAAkE;QAClE,iEAAiE;QACjE,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC;YACxB,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/tool-filter.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Granular tool selection — allows users to enable/disable individual tools
+ * via environment variables.
+ *
+ * Environment variable precedence:
+ *   1. `PARE_TOOLS` — universal filter across all servers.
+ *      Format: comma-separated `server:tool` pairs.
+ *      Example: `PARE_TOOLS=git:status,git:log,npm:install`
+ *
+ *   2. `PARE_{SERVER}_TOOLS` — per-server filter.
+ *      Format: comma-separated tool names.
+ *      Example: `PARE_GIT_TOOLS=status,log`
+ *
+ *   3. No env vars → all tools enabled (default).
+ *
+ * Universal (`PARE_TOOLS`) takes precedence over per-server env vars.
+ */
+/**
+ * Determines whether a tool should be registered based on environment variables.
+ *
+ * @param serverName - The server identifier (e.g., "git", "npm", "docker").
+ * @param toolName - The tool name (e.g., "status", "log", "install").
+ * @returns `true` if the tool should be registered, `false` if filtered out.
+ */
+export declare function shouldRegisterTool(serverName: string, toolName: string): boolean;
+//# sourceMappingURL=tool-filter.d.ts.map

package/dist/tool-filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-filter.d.ts","sourceRoot":"","sources":["../src/tool-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAiBhF"}

package/dist/tool-filter.js

@@ -0,0 +1,43 @@
+/**
+ * Granular tool selection — allows users to enable/disable individual tools
+ * via environment variables.
+ *
+ * Environment variable precedence:
+ *   1. `PARE_TOOLS` — universal filter across all servers.
+ *      Format: comma-separated `server:tool` pairs.
+ *      Example: `PARE_TOOLS=git:status,git:log,npm:install`
+ *
+ *   2. `PARE_{SERVER}_TOOLS` — per-server filter.
+ *      Format: comma-separated tool names.
+ *      Example: `PARE_GIT_TOOLS=status,log`
+ *
+ *   3. No env vars → all tools enabled (default).
+ *
+ * Universal (`PARE_TOOLS`) takes precedence over per-server env vars.
+ */
+/**
+ * Determines whether a tool should be registered based on environment variables.
+ *
+ * @param serverName - The server identifier (e.g., "git", "npm", "docker").
+ * @param toolName - The tool name (e.g., "status", "log", "install").
+ * @returns `true` if the tool should be registered, `false` if filtered out.
+ */
+export function shouldRegisterTool(serverName, toolName) {
+    const universal = process.env.PARE_TOOLS;
+    if (universal !== undefined) {
+        if (universal.trim() === "")
+            return false;
+        const allowed = universal.split(",").map((s) => s.trim());
+        return allowed.includes(`${serverName}:${toolName}`);
+    }
+    const envKey = `PARE_${serverName.toUpperCase().replace(/-/g, "_")}_TOOLS`;
+    const perServer = process.env[envKey];
+    if (perServer !== undefined) {
+        if (perServer.trim() === "")
+            return false;
+        const allowed = perServer.split(",").map((s) => s.trim());
+        return allowed.includes(toolName);
+    }
+    return true;
+}
+//# sourceMappingURL=tool-filter.js.map

package/dist/tool-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-filter.js","sourceRoot":"","sources":["../src/tool-filter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB,EAAE,QAAgB;IACrE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACzC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,UAAU,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC;IAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QAC1C,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paretools/shared",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "description": "Shared utilities for Pare MCP servers",
   "license": "MIT",
   "keywords": [