@sigil0/looking-glass 0.1.0

package/dist/tools/registry.js

@@ -0,0 +1,188 @@
+import { Ajv } from "ajv";
+import { toFunctionTool } from "./types.js";
+import { configuredCredentialValues, redactSensitiveText, redactSensitiveValue } from "../security.js";
+const RISK_RANK = {
+    read: 0,
+    write: 1,
+    shell: 2,
+    persistent: 3,
+    critical: 4,
+};
+function effectiveRisk(tool, args, context) {
+    const classified = tool.classifyRisk?.(args, context) ?? tool.risk;
+    if (!(classified in RISK_RANK))
+        throw new Error(`Tool ${tool.name} returned an invalid risk classification`);
+    return RISK_RANK[classified] >= RISK_RANK[tool.risk] ? classified : tool.risk;
+}
+function canonicalValue(value) {
+    if (Array.isArray(value))
+        return value.map(canonicalValue);
+    if (value && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value)
+            .sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0)
+            .map(([key, item]) => [key, canonicalValue(item)]));
+    }
+    return value;
+}
+export function toolApprovalSignature(tool, args) {
+    return JSON.stringify(["tool-action", 1, tool, canonicalValue(args)]);
+}
+function utf8Prefix(value, maxBytes) {
+    const data = Buffer.from(value);
+    let end = Math.min(data.length, Math.max(0, maxBytes));
+    const decoder = new TextDecoder("utf-8", { fatal: true });
+    while (end > 0) {
+        try {
+            return decoder.decode(data.subarray(0, end));
+        }
+        catch {
+            end -= 1;
+        }
+    }
+    return "";
+}
+function boundToolResult(name, result, context) {
+    result = { ...result, output: redactSensitiveText(result.output, configuredCredentialValues(context.config)) };
+    const limit = Math.max(1, context.modelOutputBytes ?? context.config.tools.maxOutputBytes);
+    if (Buffer.byteLength(result.output) <= limit)
+        return result;
+    const artifact = (result.artifactUri ? context.artifacts.get(result.artifactUri) : null)
+        ?? context.artifacts.save(context.sessionId, `${name}-output`, result.output, { tool: name });
+    const artifactUri = artifact.uri;
+    const suffix = `\n\n[Output truncated to the model budget. Full output: ${artifactUri}]`;
+    const output = Buffer.byteLength(suffix) >= limit
+        ? utf8Prefix(`[Truncated: ${artifactUri}]`, limit)
+        : `${utf8Prefix(result.output, limit - Buffer.byteLength(suffix))}${suffix}`;
+    return {
+        ...result,
+        output,
+        artifactUri,
+        truncated: true,
+    };
+}
+export class ToolDeniedError extends Error {
+    constructor(message = "Tool execution denied by user") {
+        super(message);
+        this.name = "ToolDeniedError";
+    }
+}
+export class ToolPreflightError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ToolPreflightError";
+    }
+}
+function needsApproval(mode, risk) {
+    if (mode === "unrestricted")
+        return false;
+    if (risk === "critical")
+        return true;
+    if (mode === "review")
+        return risk !== "read";
+    return risk === "shell" || risk === "persistent";
+}
+export class ToolRegistry {
+    tools = new Map();
+    ajv = new Ajv({ allErrors: true, strict: true, allowUnionTypes: true });
+    register(tool) {
+        if (this.tools.has(tool.name))
+            throw new Error(`Tool already registered: ${tool.name}`);
+        this.tools.set(tool.name, { tool, validate: this.ajv.compile(tool.parameters) });
+        return this;
+    }
+    definitions() {
+        return [...this.tools.values()].map(({ tool }) => toFunctionTool(tool));
+    }
+    get(name) {
+        return this.tools.get(name)?.tool ?? null;
+    }
+    parseArguments(name, raw) {
+        const registered = this.tools.get(name);
+        if (!registered)
+            throw new Error(`Unknown tool: ${name}`);
+        let args;
+        try {
+            args = JSON.parse(raw);
+        }
+        catch (error) {
+            throw new Error(`Invalid JSON arguments for ${name}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        if (!registered.validate(args)) {
+            const detail = this.ajv.errorsText(registered.validate.errors, { separator: "; " });
+            throw new Error(`Invalid arguments for ${name}: ${detail}`);
+        }
+        return args;
+    }
+    async execute(name, args, context) {
+        const registered = this.tools.get(name);
+        if (!registered)
+            throw new Error(`Unknown tool: ${name}`);
+        context.signal.throwIfAborted();
+        let risk;
+        try {
+            risk = effectiveRisk(registered.tool, args, context);
+        }
+        catch (error) {
+            throw new ToolPreflightError(error instanceof Error ? error.message : String(error));
+        }
+        const approvalArgs = redactSensitiveValue(args, configuredCredentialValues(context.config));
+        let signature;
+        let legacySignatures;
+        try {
+            signature = registered.tool.approvalSignature?.(approvalArgs, context) ?? toolApprovalSignature(name, approvalArgs);
+            legacySignatures = registered.tool.legacyApprovalSignatures?.(approvalArgs, context) ?? [];
+        }
+        catch (error) {
+            throw new ToolPreflightError(error instanceof Error ? error.message : String(error));
+        }
+        const mode = context.approvalMode ?? context.config.tools.approval;
+        const authorizationSessionId = context.authorizationSessionId ?? context.sessionId;
+        const remembered = [signature, ...legacySignatures]
+            .some((candidate) => context.sessions.hasCommandApproval(authorizationSessionId, candidate));
+        const automatedRemembered = Boolean(context.automated && remembered);
+        const execute = async () => {
+            return boundToolResult(name, await registered.tool.execute(args, context), context);
+        };
+        if (context.readOnly && mode !== "unrestricted" && risk !== "read" && !automatedRemembered) {
+            throw new ToolDeniedError("Tool execution denied by read-only session policy");
+        }
+        if (context.automated && (name === "ask_user" || name === "schedule_create") && !automatedRemembered) {
+            throw new ToolDeniedError("Tool execution denied by noninteractive scheduled-session policy");
+        }
+        if (remembered && (!context.automated || automatedRemembered)) {
+            context.signal.throwIfAborted();
+            return execute();
+        }
+        if (needsApproval(mode, risk)) {
+            if (context.automated) {
+                throw new ToolDeniedError("Tool execution requires an interactive or remembered approval");
+            }
+            const decision = await context.approve({
+                tool: name,
+                risk,
+                summary: registered.tool.summarize(approvalArgs),
+                details: [
+                    JSON.stringify(approvalArgs, null, 2),
+                    registered.tool.approvalDescription
+                        ? `Always approve scope:\n${registered.tool.approvalDescription(approvalArgs, context)}`
+                        : "",
+                ].filter(Boolean).join("\n\n"),
+                canAlwaysApprove: true,
+            });
+            context.signal.throwIfAborted();
+            if (decision === "always") {
+                const currentSignature = registered.tool.approvalSignature?.(approvalArgs, context);
+                if (currentSignature && currentSignature !== signature) {
+                    throw new ToolPreflightError("Command execution context changed while approval was pending; review it again");
+                }
+                context.sessions.registerCommandApproval(authorizationSessionId, signature);
+            }
+            else if (decision !== "once") {
+                throw new ToolDeniedError();
+            }
+        }
+        context.signal.throwIfAborted();
+        return execute();
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/tools/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/tools/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAyB,MAAM,KAAK,CAAC;AAIjD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAOvG,MAAM,SAAS,GAAsC;IACnD,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,CAAC;IACR,UAAU,EAAE,CAAC;IACb,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,SAAS,aAAa,CAAC,IAAe,EAAE,IAAa,EAAE,OAAoB;IACzE,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC;IACnE,IAAI,CAAC,CAAC,UAAU,IAAI,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,0CAA0C,CAAC,CAAC;IAC7G,OAAO,SAAS,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;AAChF,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aAC7C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACnE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CACrD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,IAAa;IAC/D,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,QAAgB;IACjD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC;QACf,IAAI,CAAC;YACH,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,IAAI,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,MAAkB,EAAE,OAAoB;IAC7E,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;IAC/G,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC3F,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK;QAAE,OAAO,MAAM,CAAC;IAC7D,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;WACnF,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,IAAI,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAChG,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC;IACjC,MAAM,MAAM,GAAG,2DAA2D,WAAW,GAAG,CAAC;IACzF,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK;QAC/C,CAAC,CAAC,UAAU,CAAC,eAAe,WAAW,GAAG,EAAE,KAAK,CAAC;QAClD,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC;IAC/E,OAAO;QACL,GAAG,MAAM;QACT,MAAM;QACN,WAAW;QACX,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAO,GAAG,+BAA+B;QACnD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,SAAS,aAAa,CAAC,IAAkB,EAAE,IAAuB;IAChE,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAC1C,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,KAAK,MAAM,CAAC;IAC9C,OAAO,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,YAAY,CAAC;AACnD,CAAC;AAED,MAAM,OAAO,YAAY;IACN,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC1C,GAAG,GAAG,IAAI,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzF,QAAQ,CAAC,IAAe;QACtB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,WAAW;QACT,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;IAC5C,CAAC;IAED,cAAc,CAAC,IAAY,EAAE,GAAW;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QAC1D,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnH,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,IAAa,EAAE,OAAoB;QAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAChC,IAAI,IAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,IAAI,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kBAAkB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,YAAY,GAAG,oBAAoB,CAAC,IAAI,EAAE,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5F,IAAI,SAAiB,CAAC;QACtB,IAAI,gBAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,qBAAqB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YACpH,gBAAgB,GAAG,UAAU,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,kBAAkB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QACnE,MAAM,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,IAAI,OAAO,CAAC,SAAS,CAAC;QACnF,MAAM,UAAU,GAAG,CAAC,SAAS,EAAE,GAAG,gBAAgB,CAAC;aAChD,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/F,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,KAAK,IAAyB,EAAE;YAC9C,OAAO,eAAe,CAAC,IAAI,EAAE,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;QACtF,CAAC,CAAC;QACF,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3F,MAAM,IAAI,eAAe,CAAC,mDAAmD,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,iBAAiB,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACrG,MAAM,IAAI,eAAe,CAAC,kEAAkE,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,UAAU,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,mBAAmB,CAAC,EAAE,CAAC;YAC9D,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChC,OAAO,OAAO,EAAE,CAAC;QACnB,CAAC;QACD,IAAI,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YAC9B,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,MAAM,IAAI,eAAe,CAAC,+DAA+D,CAAC,CAAC;YAC7F,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC;gBACrC,IAAI,EAAE,IAAI;gBACV,IAAI;gBACF,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;gBAClD,OAAO,EAAE;oBACP,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;oBACrC,UAAU,CAAC,IAAI,CAAC,mBAAmB;wBACjC,CAAC,CAAC,0BAA0B,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE,OAAO,CAAC,EAAE;wBACxF,CAAC,CAAC,EAAE;iBACP,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC9B,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,gBAAgB,GAAG,UAAU,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;gBACpF,IAAI,gBAAgB,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;oBACvD,MAAM,IAAI,kBAAkB,CAAC,+EAA+E,CAAC,CAAC;gBAChH,CAAC;gBACD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;YAC9E,CAAC;iBAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBAC/B,MAAM,IAAI,eAAe,EAAE,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAChC,OAAO,OAAO,EAAE,CAAC;IACnB,CAAC;CACF"}

package/dist/tools/safety.d.ts

@@ -0,0 +1,9 @@
+import type { ToolRisk } from "./types.js";
+export declare function bashCommandRisk(command: string): ToolRisk;
+export declare function bashExecutionRisk(command: string): ToolRisk;
+export declare function bashApprovalExecutable(command: string): string | null;
+export declare function isSensitiveMutationPath(path: string): boolean;
+export declare function patchRisk(patch: string): ToolRisk;
+export declare function workspacePatchRisk(workspace: string, patch: string): ToolRisk;
+export declare function shellEnvironment(base?: NodeJS.ProcessEnv, excludedKeys?: Iterable<string>): NodeJS.ProcessEnv;
+//# sourceMappingURL=safety.d.ts.map

package/dist/tools/safety.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.d.ts","sourceRoot":"","sources":["../../src/tools/safety.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAwE3C,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAGzD;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAE3D;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA6ErE;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAI7D;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,CASjD;AAED,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,CAG7E;AAED,wBAAgB,gBAAgB,CAC9B,IAAI,GAAE,MAAM,CAAC,UAAwB,EACrC,YAAY,GAAE,QAAQ,CAAC,MAAM,CAAM,GAClC,MAAM,CAAC,UAAU,CAUnB"}

package/dist/tools/safety.js

@@ -0,0 +1,199 @@
+import { resolve } from "node:path";
+const SHELL_ACCESS_PATH = String.raw `(?:(?:~|\$(?:HOME|\{HOME\})|\/root|\/home\/[^\/\s]+|\.)?\/?\.ssh(?:\/\S*)?|\/?etc\/(?:ssh|sudoers(?:\.d)?|pam\.d|network|netplan|NetworkManager\/system-connections)(?:\/\S*)?|\/?etc\/(?:passwd|shadow|group|gshadow))`;
+const CRITICAL_SHELL_PATTERNS = [
+    /(^|[;&|()\s])(?:rm|rmdir|unlink|shred|wipefs|mkfs(?:\.\w+)?|fdisk|parted|dd|truncate)(?:\s|$)/i,
+    /(^|[;&|()\s])find\b[^\n;&|]*(?:-delete|-exec\s+(?:rm|rmdir|shred))\b/i,
+    /(^|[;&|()\s])(?:chmod|chown|chgrp|setfacl|setcap|visudo)(?:\s|$)/i,
+    /(^|[;&|()\s])(?:userdel|usermod|deluser|groupdel|groupmod|passwd|chpasswd)(?:\s|$)/i,
+    /(^|[;&|()\s])(?:mount|umount|swapon|swapoff|cryptsetup|losetup|lvm|pvcreate|vgcreate|lvcreate)(?:\s|$)/i,
+    /(^|[;&|()\s])(?:reboot|shutdown|poweroff|halt|init|telinit)(?:\s|$)/i,
+    /(^|[;&|()\s])systemctl\b[^\n;&|]*\bisolate\b/i,
+    /(^|[;&|()\s])systemctl\b[^\n;&|]*(?:stop|restart|reload|disable|mask|kill)\b[^\n;&|]*(?:ssh(?:d)?|network(?:ing)?|systemd-networkd|networkmanager|firewalld|ufw|tailscaled|wg-quick)(?:\.service)?\b/i,
+    /(^|[;&|()\s])service\s+(?:ssh(?:d)?|network(?:ing)?|firewalld|ufw|tailscaled)\s+(?:stop|restart|reload)\b/i,
+    /(^|[;&|()\s])loginctl\s+terminate-user\b/i,
+    /(^|[;&|()\s])(?:kill|killall|pkill)\b[^\n;&|]*(?:ssh(?:d)?|networkmanager|systemd-networkd|tailscaled)\b/i,
+    /(^|[;&|()\s])(?:iptables|ip6tables)\b[^\n;&|]*\s-(?:A|D|F|I|N|P|R|X|Z)\b/i,
+    /(^|[;&|()\s])nft\s+(?:add|delete|destroy|flush|insert|replace|reset)\b/i,
+    /(^|[;&|()\s])ufw\s+(?:allow|deny|delete|disable|enable|insert|reject|reset|route)\b/i,
+    /(^|[;&|()\s])firewall-cmd\b[^\n;&|]*(?:--add-|--remove-|--set-|--reload|--complete-reload|--runtime-to-permanent)\b/i,
+    /(^|[;&|()\s])ipset\s+(?:add|del|destroy|flush|restore|swap)\b/i,
+    /(^|[;&|()\s])tc\s+\S+\s+(?:add|change|delete|replace)\b/i,
+    /(^|[;&|()\s])(?:route\s+(?:add|del)|ifconfig\s+\S+\s+\S+)/i,
+    /(^|[;&|()\s])nmcli\b[^\n;&|]*(?:\b(?:add|delete|down|modify|off|on|up)\b)/i,
+    /(^|[;&|()\s])networkctl\s+(?:edit|reconfigure|reload)\b/i,
+    /(^|[;&|()\s])resolvectl\s+(?:default-route|dns|domain|llmnr|mdns|revert)\b/i,
+    /(^|[;&|()\s])wg\s+set\b/i,
+    /(^|[;&|()\s])wg-quick\s+(?:down|up)\b/i,
+    /(^|[;&|()\s])tailscale\s+(?:down|lock|logout|set|switch|up)\b/i,
+    /(^|[;&|()\s])sysctl\s+(?:-w\s+)?[\w.-]+=\S+/i,
+    /(^|[;&|()\s])hostnamectl\s+set-\S+\b/i,
+    /(^|[;&|()\s])ip\s+(?:addr|address|link|route|rule|netns|neigh|tunnel)\s+(?:add|del|delete|replace|set|flush|change)\b/i,
+    /(^|[;&|()\s])(?:ssh-keygen|visudo)(?:\s|$)/i,
+    /(^|[;&|()\s])(?:terraform|tofu)\s+destroy\b/i,
+    /(^|[;&|()\s])(?:aws|gcloud|az|doctl|heroku|pulumi|nomad|vault|consul)\b[^\n;&|]*\b(?:delete|destroy|remove|terminate)\b/i,
+    /(^|[;&|()\s])kubectl\b[^\n;&|]*\b(?:delete|drain)\b/i,
+    /(^|[;&|()\s])helm\s+uninstall\b/i,
+    /(^|[;&|()\s])docker\b[^\n;&|]*\b(?:prune|rm|rmi)\b/i,
+    /(^|[;&|()\s])(?:podman|nerdctl)(?:\s+compose)?\s+(?:prune|rm|rmi|down)\b/i,
+    /(^|[;&|()\s])git\b[^\n;&|]*\b(?:clean|reset\s+--hard|checkout\s+--|restore|branch\s+-[dD]|tag\s+-d|remote\s+remove)(?:\s|$)/i,
+    /(^|[;&|()\s])git(?:(?:\s+-C\s+\S+)|(?:\s+-c\s+\S+)|(?:\s+--(?:git-dir|work-tree)(?:=\S+|\s+\S+))|(?:\s+--\S+))*\s+push\b[^\n;&|]*(?:--delete\b|(?:^|\s)-d(?:\s|$)|--force(?:-with-lease)?\b|--mirror\b|--prune\b|(?:^|\s)-f(?:\s|$)|(?:^|\s)\+\S+|(?:^|\s):\S+)/i,
+    /(^|[;&|()\s])gh\b[^\n;&|]*\bdelete\b/i,
+    /(^|[;&|()\s])(?:npm|pnpm|yarn)\s+unpublish\b/i,
+    /(^|[;&|()\s])(?:apt|apt-get|dnf|yum|pacman|zypper|apk|snap|flatpak)\s+(?:remove|purge|autoremove|uninstall)\b/i,
+    /(^|[;&|()\s])curl\b[^\n;&|]*(?:-[Xx]\s*DELETE|--request\s+DELETE)\b/i,
+    /(^|[;&|()\s])crontab\s+-r\b/i,
+    /(^|[;&|()\s"'])(?:psql|mysql|mariadb|sqlite3|redis-cli|mongosh|mongo)\b[^\n;&|]*\b(?:DELETE\s+FROM|DROP\s+(?:DATABASE|SCHEMA|TABLE|INDEX|VIEW)|TRUNCATE\s+(?:DATABASE|SCHEMA|TABLE))\b/i,
+    /(^|[;&|()\s"'])redis-cli\b[^\n;&|]*\b(?:DEL|UNLINK|FLUSHDB|FLUSHALL|GETDEL)\b/i,
+    /(^|[;&|()\s"'])(?:mongosh|mongo)\b[^\n;&|]*\b(?:deleteOne|deleteMany|dropDatabase|drop|remove)\s*\(/i,
+    new RegExp(String.raw `(?:>{1,2}\|?|<>|&>)\s*["']?${SHELL_ACCESS_PATH}`, "i"),
+    new RegExp(String.raw `(^|[;&|()\s])sed\s+-i\b[^\n;&|]*[\s"']${SHELL_ACCESS_PATH}`, "i"),
+    new RegExp(String.raw `(^|[;&|()\s])tee\b(?:\s+-\S+)*\s+["']?${SHELL_ACCESS_PATH}["']?(?:\s|$|[;&|])`, "i"),
+    new RegExp(String.raw `(^|[;&|()\s])(?:cp|mv|install)\b[^\n;&|]*[\s"']${SHELL_ACCESS_PATH}["']?\s*(?:$|[;&|])`, "i"),
+    new RegExp(String.raw `(^|[;&|()\s])(?:cp|mv|install)\b[^\n;&|]*(?:--target-directory(?:=|\s+)|-t\s+)["']?${SHELL_ACCESS_PATH}`, "i"),
+];
+const ACCESS_LOCKOUT_PATCH_PATH = /(?:^|\/)(?:\.ssh|authorized_keys|etc\/(?:ssh|sudoers(?:\.d)?|pam\.d|network|netplan|NetworkManager\/system-connections))(?:\/|$)/i;
+const NON_EXECUTABLE_SHELL_WORDS = new Set([
+    ".", "!",
+    "case", "coproc", "do", "done", "elif", "else", "esac", "fi", "for", "function", "if", "in", "select", "then", "until", "while",
+]);
+function normalizedShellText(command) {
+    return command
+        .replace(/\\([A-Za-z])/g, "$1")
+        .replace(/(["'])([A-Za-z][\w.-]*)\1/g, "$2")
+        .replace(/(?<=[A-Za-z])["']{2}(?=[A-Za-z])/g, "")
+        .replace(/(^|[;&|()\s])\/(?:usr\/)?s?bin\/(?=[\w.-])/g, "$1");
+}
+export function bashCommandRisk(command) {
+    const normalized = normalizedShellText(command);
+    return CRITICAL_SHELL_PATTERNS.some((pattern) => pattern.test(normalized)) ? "critical" : "shell";
+}
+export function bashExecutionRisk(command) {
+    return bashCommandRisk(command);
+}
+export function bashApprovalExecutable(command) {
+    if (!command.trim())
+        return null;
+    const words = [];
+    let word = "";
+    let started = false;
+    let quote = null;
+    let escaped = false;
+    const finishWord = () => {
+        if (!started)
+            return;
+        words.push(word);
+        word = "";
+        started = false;
+    };
+    const hasExecutable = () => {
+        const candidate = words.at(-1);
+        return Boolean(candidate && !/^[A-Za-z_][A-Za-z0-9_]*(?:\+)?=/.test(candidate));
+    };
+    for (let index = 0; index < command.length; index += 1) {
+        const character = command[index];
+        if (escaped) {
+            word += character;
+            started = true;
+            escaped = false;
+            continue;
+        }
+        if (quote === "single") {
+            if (character === "'")
+                quote = null;
+            else
+                word += character;
+            started = true;
+            continue;
+        }
+        if (quote === "double") {
+            if (character === '"')
+                quote = null;
+            else if (character === "\\")
+                escaped = true;
+            else {
+                if (character === "`" || (character === "$" && command[index + 1] === "("))
+                    return null;
+                word += character;
+            }
+            started = true;
+            continue;
+        }
+        if (character === "\\") {
+            escaped = true;
+            started = true;
+            continue;
+        }
+        if (character === "'") {
+            quote = "single";
+            started = true;
+            continue;
+        }
+        if (character === '"') {
+            quote = "double";
+            started = true;
+            continue;
+        }
+        if (/\s/.test(character)) {
+            finishWord();
+            if (hasExecutable())
+                break;
+            continue;
+        }
+        if (character === "#" && !started)
+            break;
+        if (";&|(){}<>`".includes(character)) {
+            if (!started)
+                return null;
+            finishWord();
+            break;
+        }
+        if (character === "$" && command[index + 1] === "(")
+            return null;
+        word += character;
+        started = true;
+    }
+    if (quote || escaped)
+        return null;
+    finishWord();
+    const executable = words.find((candidate) => !/^[A-Za-z_][A-Za-z0-9_]*(?:\+)?=/.test(candidate));
+    if (!executable || /[$*?\[]/.test(executable) || NON_EXECUTABLE_SHELL_WORDS.has(executable))
+        return null;
+    const systemExecutable = /^\/(?:usr\/)?(?:s?bin)\/([^/]+)$/.exec(executable)?.[1];
+    return systemExecutable ?? executable;
+}
+export function isSensitiveMutationPath(path) {
+    const normalized = resolve("/", path.replaceAll("\\", "/")).slice(1);
+    if (ACCESS_LOCKOUT_PATCH_PATH.test(normalized))
+        return true;
+    return /(?:^|\/)etc\/(?:passwd|shadow|group|gshadow)$/.test(normalized);
+}
+export function patchRisk(patch) {
+    for (const line of patch.split("\n")) {
+        if (line.startsWith("*** Delete File:"))
+            return "critical";
+        const path = /^(?:\*\*\* (?:Add|Update) File:|\*\*\* Move to:)\s*(.+)$/.exec(line)?.[1]?.trim();
+        if (path) {
+            if (isSensitiveMutationPath(path))
+                return "critical";
+        }
+    }
+    return "write";
+}
+export function workspacePatchRisk(workspace, patch) {
+    void workspace;
+    return patchRisk(patch);
+}
+export function shellEnvironment(base = process.env, excludedKeys = []) {
+    const env = { ...base };
+    for (const key of Object.keys(env)) {
+        if (key.startsWith("BASH_FUNC_"))
+            delete env[key];
+    }
+    for (const key of ["BASH_ENV", "ENV", "SHELLOPTS", "BASHOPTS", "CDPATH", "GLOBIGNORE", "PROMPT_COMMAND", "RIPGREP_CONFIG_PATH"]) {
+        delete env[key];
+    }
+    for (const key of excludedKeys)
+        delete env[key];
+    return env;
+}
+//# sourceMappingURL=safety.js.map

package/dist/tools/safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../src/tools/safety.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,iBAAiB,GAAG,MAAM,CAAC,GAAG,CAAA,yNAAyN,CAAC;AAE9P,MAAM,uBAAuB,GAAa;IACxC,gGAAgG;IAChG,uEAAuE;IACvE,mEAAmE;IACnE,qFAAqF;IACrF,yGAAyG;IACzG,sEAAsE;IACtE,+CAA+C;IAC/C,uMAAuM;IACvM,4GAA4G;IAC5G,2CAA2C;IAC3C,2GAA2G;IAC3G,2EAA2E;IAC3E,yEAAyE;IACzE,sFAAsF;IACtF,sHAAsH;IACtH,gEAAgE;IAChE,0DAA0D;IAC1D,4DAA4D;IAC5D,4EAA4E;IAC5E,0DAA0D;IAC1D,6EAA6E;IAC7E,0BAA0B;IAC1B,wCAAwC;IACxC,gEAAgE;IAChE,8CAA8C;IAC9C,uCAAuC;IACvC,wHAAwH;IACxH,6CAA6C;IAC7C,8CAA8C;IAC9C,0HAA0H;IAC1H,sDAAsD;IACtD,kCAAkC;IAClC,qDAAqD;IACrD,2EAA2E;IAC3E,8HAA8H;IAC9H,kQAAkQ;IAClQ,uCAAuC;IACvC,+CAA+C;IAC/C,gHAAgH;IAChH,sEAAsE;IACtE,8BAA8B;IAC9B,yLAAyL;IACzL,gFAAgF;IAChF,sGAAsG;IACtG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,8BAA8B,iBAAiB,EAAE,EAAE,GAAG,CAAC;IAC5E,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,yCAAyC,iBAAiB,EAAE,EAAE,GAAG,CAAC;IACvF,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,yCAAyC,iBAAiB,qBAAqB,EAAE,GAAG,CAAC;IAC1G,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,kDAAkD,iBAAiB,qBAAqB,EAAE,GAAG,CAAC;IACnH,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,sFAAsF,iBAAiB,EAAE,EAAE,GAAG,CAAC;CACrI,CAAC;AAEF,MAAM,yBAAyB,GAAG,mIAAmI,CAAC;AAEtK,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAC;IACzC,GAAG,EAAE,GAAG;IACR,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;CAChI,CAAC,CAAC;AAEH,SAAS,mBAAmB,CAAC,OAAe;IAC1C,OAAO,OAAO;SACX,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC;SAC9B,OAAO,CAAC,4BAA4B,EAAE,IAAI,CAAC;SAC3C,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC;SAChD,OAAO,CAAC,6CAA6C,EAAE,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;AACpG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAK,GAA+B,IAAI,CAAC;IAC7C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,UAAU,GAAG,GAAS,EAAE;QAC5B,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,GAAG,EAAE,CAAC;QACV,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,GAAY,EAAE;QAClC,MAAM,SAAS,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC,SAAS,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC;IACF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAE,CAAC;QAClC,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,IAAI,SAAS,CAAC;YAClB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,GAAG,KAAK,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,IAAI,SAAS,KAAK,GAAG;gBAAE,KAAK,GAAG,IAAI,CAAC;;gBAC/B,IAAI,IAAI,SAAS,CAAC;YACvB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,IAAI,SAAS,KAAK,GAAG;gBAAE,KAAK,GAAG,IAAI,CAAC;iBAC/B,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,GAAG,IAAI,CAAC;iBACvC,CAAC;gBACJ,IAAI,SAAS,KAAK,GAAG,IAAI,CAAC,SAAS,KAAK,GAAG,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACxF,IAAI,IAAI,SAAS,CAAC;YACpB,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,GAAG,QAAQ,CAAC;YACjB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,GAAG,QAAQ,CAAC;YACjB,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACzB,UAAU,EAAE,CAAC;YACb,IAAI,aAAa,EAAE;gBAAE,MAAM;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,SAAS,KAAK,GAAG,IAAI,CAAC,OAAO;YAAE,MAAM;QACzC,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC1B,UAAU,EAAE,CAAC;YACb,MAAM;QACR,CAAC;QACD,IAAI,SAAS,KAAK,GAAG,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACjE,IAAI,IAAI,SAAS,CAAC;QAClB,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,IAAI,KAAK,IAAI,OAAO;QAAE,OAAO,IAAI,CAAC;IAClC,UAAU,EAAE,CAAC;IACb,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,iCAAiC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IACjG,IAAI,CAAC,UAAU,IAAI,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,0BAA0B,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACzG,MAAM,gBAAgB,GAAG,kCAAkC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClF,OAAO,gBAAgB,IAAI,UAAU,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,yBAAyB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,OAAO,+CAA+C,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC;YAAE,OAAO,UAAU,CAAC;QAC3D,MAAM,IAAI,GAAG,0DAA0D,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAChG,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,uBAAuB,CAAC,IAAI,CAAC;gBAAE,OAAO,UAAU,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,KAAa;IACjE,KAAK,SAAS,CAAC;IACf,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,OAA0B,OAAO,CAAC,GAAG,EACrC,eAAiC,EAAE;IAEnC,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IACxB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC;YAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IACpD,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,gBAAgB,EAAE,qBAAqB,CAAC,EAAE,CAAC;QAChI,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,YAAY;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/tools/schedule.d.ts

@@ -0,0 +1,4 @@
+import type { SchedulerStore } from "../scheduler/store.js";
+import type { GlassTool } from "./types.js";
+export declare function createScheduleTools(store: SchedulerStore): GlassTool[];
+//# sourceMappingURL=schedule.d.ts.map

package/dist/tools/schedule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule.d.ts","sourceRoot":"","sources":["../../src/tools/schedule.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AA+C5C,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,cAAc,GAAG,SAAS,EAAE,CA6JtE"}

package/dist/tools/schedule.js

@@ -0,0 +1,191 @@
+import { isWithin, resolveWorkspacePath } from "./paths.js";
+import { bashCommandRisk } from "./safety.js";
+function formatJob(job) {
+    if (!job)
+        return "Job not found.";
+    const action = job.kind === "reminder" ? job.message : job.kind === "session_prompt" ? job.prompt : job.command;
+    return [
+        `id: ${job.id}`,
+        `kind: ${job.kind}`,
+        `schedule: ${job.scheduleKind} ${job.schedule}${job.scheduleKind === "cron" ? ` (${job.timezone})` : ""}`,
+        `next: ${job.nextDue === null ? "none" : new Date(job.nextDue).toISOString()}`,
+        `state: ${job.enabled ? "enabled" : "disabled"}${job.blockedReason ? `, blocked: ${job.blockedReason}` : ""}`,
+        `action: ${action ?? ""}`,
+    ].join("\n");
+}
+function canManageJob(job, context) {
+    if (job.kind === "session_prompt")
+        return job.sessionId === context.sessionId;
+    if (job.kind === "command") {
+        const root = resolveWorkspacePath(context.workspace, ".");
+        return job.cwd !== null && isWithin(root, job.cwd);
+    }
+    return true;
+}
+export function createScheduleTools(store) {
+    const create = {
+        name: "schedule_create",
+        description: "Create a persistent reminder, deterministic shell command, or prompt for this persistent session. Use only after an explicit user request.",
+        risk: "persistent",
+        classifyRisk: (args) => args.kind === "command" && args.command && bashCommandRisk(args.command) === "critical"
+            ? "critical"
+            : "persistent",
+        parameters: {
+            type: "object",
+            properties: {
+                kind: { type: "string", enum: ["reminder", "command", "session_prompt"] },
+                schedule_kind: { type: "string", enum: ["once", "cron"] },
+                schedule: { type: "string", minLength: 1, description: "ISO timestamp with offset, or exactly five cron fields" },
+                timezone: { type: ["string", "null"], description: "IANA timezone for cron schedules" },
+                message: { type: ["string", "null"] },
+                command: { type: ["string", "null"] },
+                prompt: { type: ["string", "null"], description: "Prompt to run later in the current persistent session" },
+                cwd: { type: ["string", "null"], description: "Workspace-relative command directory" },
+                timeout_ms: { type: ["integer", "null"], minimum: 100, maximum: 3600000 },
+            },
+            required: ["kind", "schedule_kind", "schedule", "timezone", "message", "command", "prompt", "cwd", "timeout_ms"],
+            additionalProperties: false,
+        },
+        summarize: (args) => {
+            const action = args.kind === "reminder" ? args.message : args.kind === "session_prompt" ? args.prompt : args.command;
+            return `Create ${args.schedule_kind} ${args.kind}: ${action ?? ""} at ${args.schedule}`;
+        },
+        async execute(args, context) {
+            const timezone = args.timezone ?? context.config.scheduler.timezone;
+            if (args.kind === "reminder") {
+                if (!args.message || args.command || args.prompt || args.cwd || args.timeout_ms) {
+                    throw new Error("Reminder schedules require message and no command fields");
+                }
+                const job = store.createReminder({
+                    message: args.message,
+                    scheduleKind: args.schedule_kind,
+                    schedule: args.schedule,
+                    timezone,
+                });
+                return { output: `Persistent reminder created.\n${formatJob(job)}` };
+            }
+            if (args.kind === "session_prompt") {
+                if (!args.prompt || args.message || args.command || args.cwd || args.timeout_ms) {
+                    throw new Error("Session prompt schedules require prompt and no command fields");
+                }
+                const job = store.createSessionPrompt({
+                    sessionId: context.sessionId,
+                    prompt: args.prompt,
+                    scheduleKind: args.schedule_kind,
+                    schedule: args.schedule,
+                    timezone,
+                    startGraceMs: context.config.scheduler.commandStartGraceMs,
+                    outputBytes: context.config.scheduler.commandOutputBytes,
+                });
+                return { output: `Persistent session prompt created.\n${formatJob(job)}` };
+            }
+            if (!args.command || args.message || args.prompt)
+                throw new Error("Command schedules require command and no message or prompt");
+            const cwd = args.cwd ? resolveWorkspacePath(context.workspace, args.cwd) : context.workspace;
+            const job = store.createCommand({
+                command: args.command,
+                cwd,
+                scheduleKind: args.schedule_kind,
+                schedule: args.schedule,
+                timezone,
+                startGraceMs: context.config.scheduler.commandStartGraceMs,
+                timeoutMs: args.timeout_ms ?? context.config.scheduler.commandTimeoutMs,
+                outputBytes: context.config.scheduler.commandOutputBytes,
+            });
+            return { output: `Persistent command created.\n${formatJob(job)}` };
+        },
+    };
+    const list = {
+        name: "schedule_list",
+        description: "List persistent schedules and optionally unread scheduler inbox results.",
+        risk: "read",
+        parameters: {
+            type: "object",
+            properties: { include_inbox: { type: "boolean" } },
+            required: ["include_inbox"],
+            additionalProperties: false,
+        },
+        summarize: () => "List persistent schedules",
+        async execute(args, context) {
+            const jobs = store.listJobs().filter((job) => canManageJob(job, context));
+            const sections = [jobs.length > 0 ? jobs.map((job) => formatJob(job)).join("\n\n") : "No schedules."];
+            if (args.include_inbox) {
+                const inbox = store.listInboxForJobs(jobs.map((job) => job.id), { unackedOnly: true, limit: 50 });
+                sections.push(inbox.length > 0
+                    ? `Unread inbox:\n${inbox.map((item) => `${item.id}: ${item.message} (${new Date(item.createdAt).toISOString()})`).join("\n")}`
+                    : "Unread inbox: empty");
+            }
+            return { output: sections.join("\n\n") };
+        },
+    };
+    const manage = {
+        name: "schedule_manage",
+        description: "Pause, resume, delete, run immediately, or acknowledge a persistent schedule item.",
+        risk: "persistent",
+        classifyRisk: (args) => {
+            if (args.action === "delete")
+                return "critical";
+            const job = store.getJob(args.id);
+            if (job?.kind === "command"
+                && (args.action === "resume" || args.action === "run_now" || args.action === "resolve_unknown")
+                && bashCommandRisk(job.command ?? "") === "critical")
+                return "critical";
+            return "persistent";
+        },
+        parameters: {
+            type: "object",
+            properties: {
+                action: { type: "string", enum: ["pause", "resume", "delete", "run_now", "ack_inbox", "resolve_unknown"] },
+                id: { type: "string", minLength: 1 },
+            },
+            required: ["action", "id"],
+            additionalProperties: false,
+        },
+        summarize: (args) => {
+            if (args.action === "ack_inbox")
+                return `Acknowledge scheduler inbox item ${args.id}`;
+            const job = store.getJob(args.id);
+            if (!job)
+                return `${args.action} missing schedule ${args.id}`;
+            const action = job.kind === "reminder" ? job.message : job.kind === "session_prompt" ? job.prompt : job.command;
+            return [
+                `${args.action} ${job.kind} schedule ${job.id}`,
+                `${job.scheduleKind}:${job.schedule} (${job.timezone})`,
+                job.cwd ? `cwd: ${job.cwd}` : "",
+                `Exact action: ${action ?? ""}`,
+            ].filter(Boolean).join("\n");
+        },
+        async execute(args, context) {
+            if (args.action === "ack_inbox") {
+                const id = Number(args.id);
+                if (!Number.isSafeInteger(id) || id < 1)
+                    throw new Error("Inbox id must be a positive integer");
+                const item = store.getInbox(id);
+                if (!item)
+                    return { output: `Inbox item ${id} is missing.` };
+                const job = store.getJob(item.jobId);
+                if (!job || !canManageJob(job, context))
+                    throw new Error("Scheduler item belongs to another workspace or session");
+                return { output: store.ackInbox(id) ? `Acknowledged inbox item ${id}.` : `Inbox item ${id} was already acknowledged or missing.` };
+            }
+            const job = store.getJob(args.id);
+            if (!job)
+                throw new Error(`Schedule not found: ${args.id}`);
+            if (!canManageJob(job, context))
+                throw new Error("Schedule belongs to another workspace or session");
+            if (args.action === "pause")
+                return { output: `Paused.\n${formatJob(store.pauseJob(args.id))}` };
+            if (args.action === "resume")
+                return { output: `Resumed.\n${formatJob(store.resumeJob(args.id))}` };
+            if (args.action === "resolve_unknown") {
+                return { output: `Unknown outcome acknowledged.\n${formatJob(store.acknowledgeUnknown(args.id))}` };
+            }
+            if (args.action === "delete")
+                return { output: `Deleted.\n${formatJob(store.deleteJob(args.id))}` };
+            const run = store.runNow(args.id);
+            return { output: `Queued occurrence ${run.id} with state ${run.state}.` };
+        },
+    };
+    return [create, list, manage];
+}
+//# sourceMappingURL=schedule.js.map