@su-record/vibe 2.7.2 → 2.7.5

package/dist/agent/tools/send-slack.js

@@ -0,0 +1,63 @@
+/**
+ * send_slack Tool - Slack message sending
+ * Phase 3: Slack Channel
+ *
+ * Security: channelId is not exposed as a parameter, bound via AsyncLocalStorage
+ * Concurrency: AsyncLocalStorage ensures channel isolation between concurrent requests
+ */
+import { AsyncLocalStorage } from 'node:async_hooks';
+const sendSlackParameters = {
+    type: 'object',
+    properties: {
+        message: { type: 'string', description: 'Message text to send' },
+        channel: { type: 'string', description: 'Target channel ID (requires allowlist check)' },
+        thread_ts: { type: 'string', description: 'Thread timestamp for replies' },
+    },
+    required: ['message'],
+};
+// AsyncLocalStorage for per-request channel isolation
+const channelIdStore = new AsyncLocalStorage();
+// channelId-specific sendFn registry (sendFn may differ per channel)
+const boundContexts = new Map();
+export function bindSendSlack(channelId, sendFn, allowedChannelIds) {
+    boundContexts.set(channelId, { sendFn, allowedChannelIds });
+}
+export function unbindSendSlack(channelId) {
+    boundContexts.delete(channelId);
+}
+/**
+ * Run callback within a channelId-bound AsyncLocalStorage context.
+ * AgentLoop should wrap message processing with this function.
+ */
+export function runInSlackContext(channelId, fn) {
+    return channelIdStore.run(channelId, fn);
+}
+async function handleSendSlack(args) {
+    const { message, channel, thread_ts } = args;
+    const channelId = channelIdStore.getStore();
+    const ctx = channelId ? boundContexts.get(channelId) : undefined;
+    if (!channelId || !ctx) {
+        return 'Error: Slack send function not bound to current channel context';
+    }
+    // If explicit channel provided, validate against allowlist
+    const targetChannel = channel || channelId;
+    if (channel && !ctx.allowedChannelIds.includes(channel)) {
+        return `Error: Channel ${channel} is not in allowlist`;
+    }
+    try {
+        await ctx.sendFn(targetChannel, message, { thread_ts });
+        return `Message sent to channel ${targetChannel}`;
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return `Send failed: ${msg}`;
+    }
+}
+export const sendSlackTool = {
+    name: 'send_slack',
+    description: 'Send a message to the current Slack channel',
+    parameters: sendSlackParameters,
+    handler: handleSendSlack,
+    scope: 'write',
+};
+//# sourceMappingURL=send-slack.js.map

package/dist/agent/tools/send-slack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send-slack.js","sourceRoot":"","sources":["../../../src/agent/tools/send-slack.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAIrD,MAAM,mBAAmB,GAAe;IACtC,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE;QAChE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8CAA8C,EAAE;QACxF,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8BAA8B,EAAE;KAC3E;IACD,QAAQ,EAAE,CAAC,SAAS,CAAC;CACtB,CAAC;AASF,sDAAsD;AACtD,MAAM,cAAc,GAAG,IAAI,iBAAiB,EAAU,CAAC;AAEvD,qEAAqE;AACrE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAuB,CAAC;AAErD,MAAM,UAAU,aAAa,CAC3B,SAAiB,EACjB,MAAc,EACd,iBAA2B;IAE3B,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAI,SAAiB,EAAE,EAAW;IACjE,OAAO,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAA6B;IAC1D,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAiE,CAAC;IAE1G,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEjE,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,OAAO,iEAAiE,CAAC;IAC3E,CAAC;IAED,2DAA2D;IAC3D,MAAM,aAAa,GAAG,OAAO,IAAI,SAAS,CAAC;IAC3C,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,OAAO,kBAAkB,OAAO,sBAAsB,CAAC;IACzD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACxD,OAAO,2BAA2B,aAAa,EAAE,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,gBAAgB,GAAG,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAmB;IAC3C,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE,6CAA6C;IAC1D,UAAU,EAAE,mBAAmB;IAC/B,OAAO,EAAE,eAAe;IACxB,KAAK,EAAE,OAAO;CACf,CAAC"}

package/dist/agent/tools/send-telegram.d.ts

@@ -0,0 +1,20 @@
+/**
+ * send_telegram Tool - Telegram 메시지 전송
+ * Phase 3: Function Calling Tool Definitions
+ *
+ * 보안: chatId는 파라미터로 받지 않고 AsyncLocalStorage로 요청 스코프에 바인딩
+ * 동시성: AsyncLocalStorage로 동시 요청 간 chatId 격리 보장
+ */
+import type { ToolDefinition } from '../types.js';
+import type { TelegramSendOptions } from '../../router/types.js';
+type SendFn = (chatId: string, text: string, options?: TelegramSendOptions) => Promise<void>;
+export declare function bindSendTelegram(chatId: string, sendFn: SendFn): void;
+export declare function unbindSendTelegram(chatId: string): void;
+/**
+ * 요청 스코프 내에서 chatId를 AsyncLocalStorage에 바인딩하고 콜백 실행
+ * AgentLoop에서 메시지 처리 시 이 함수로 감싸서 호출
+ */
+export declare function runInChatContext<T>(chatId: string, fn: () => T): T;
+export declare const sendTelegramTool: ToolDefinition;
+export {};
+//# sourceMappingURL=send-telegram.d.ts.map

package/dist/agent/tools/send-telegram.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"send-telegram.d.ts","sourceRoot":"","sources":["../../../src/agent/tools/send-telegram.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAWjE,KAAK,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAQ7F,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACb,IAAI,CAEN;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAEvD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAElE;AAsBD,eAAO,MAAM,gBAAgB,EAAE,cAM9B,CAAC"}

package/dist/agent/tools/send-telegram.js

@@ -0,0 +1,58 @@
+/**
+ * send_telegram Tool - Telegram 메시지 전송
+ * Phase 3: Function Calling Tool Definitions
+ *
+ * 보안: chatId는 파라미터로 받지 않고 AsyncLocalStorage로 요청 스코프에 바인딩
+ * 동시성: AsyncLocalStorage로 동시 요청 간 chatId 격리 보장
+ */
+import { AsyncLocalStorage } from 'node:async_hooks';
+const sendTelegramParameters = {
+    type: 'object',
+    properties: {
+        text: { type: 'string', description: 'Message text to send' },
+        parseMode: { type: 'string', enum: ['HTML', 'Markdown'], description: 'Message parse mode' },
+    },
+    required: ['text'],
+};
+// AsyncLocalStorage로 요청별 chatId 격리
+const chatIdStore = new AsyncLocalStorage();
+// chatId별 sendFn 등록 (Map은 유지 — sendFn은 chatId별로 다를 수 있음)
+const boundContexts = new Map();
+export function bindSendTelegram(chatId, sendFn) {
+    boundContexts.set(chatId, { sendFn });
+}
+export function unbindSendTelegram(chatId) {
+    boundContexts.delete(chatId);
+}
+/**
+ * 요청 스코프 내에서 chatId를 AsyncLocalStorage에 바인딩하고 콜백 실행
+ * AgentLoop에서 메시지 처리 시 이 함수로 감싸서 호출
+ */
+export function runInChatContext(chatId, fn) {
+    return chatIdStore.run(chatId, fn);
+}
+async function handleSendTelegram(args) {
+    const { text, parseMode } = args;
+    const chatId = chatIdStore.getStore();
+    const ctx = chatId ? boundContexts.get(chatId) : undefined;
+    if (!chatId || !ctx) {
+        return 'Error: Telegram send function not bound to current chat context';
+    }
+    try {
+        const format = parseMode === 'HTML' ? 'html' : parseMode === 'Markdown' ? 'markdown' : 'text';
+        await ctx.sendFn(chatId, text, { format });
+        return `Message sent to chat ${chatId}`;
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return `Send failed: ${msg}`;
+    }
+}
+export const sendTelegramTool = {
+    name: 'send_telegram',
+    description: 'Send a message to the current Telegram chat',
+    parameters: sendTelegramParameters,
+    handler: handleSendTelegram,
+    scope: 'write',
+};
+//# sourceMappingURL=send-telegram.js.map

package/dist/agent/tools/send-telegram.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send-telegram.js","sourceRoot":"","sources":["../../../src/agent/tools/send-telegram.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAKrD,MAAM,sBAAsB,GAAe;IACzC,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE;QAC7D,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE;KAC7F;IACD,QAAQ,EAAE,CAAC,MAAM,CAAC;CACnB,CAAC;AAIF,mCAAmC;AACnC,MAAM,WAAW,GAAG,IAAI,iBAAiB,EAAU,CAAC;AAEpD,yDAAyD;AACzD,MAAM,aAAa,GAAG,IAAI,GAAG,EAA8B,CAAC;AAE5D,MAAM,UAAU,gBAAgB,CAC9B,MAAc,EACd,MAAc;IAEd,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAI,MAAc,EAAE,EAAW;IAC7D,OAAO,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAA6B;IAC7D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAyD,CAAC;IAEtF,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE3D,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QACpB,OAAO,iEAAiE,CAAC;IAC3E,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9F,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3C,OAAO,wBAAwB,MAAM,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,gBAAgB,GAAG,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAmB;IAC9C,IAAI,EAAE,eAAe;IACrB,WAAW,EAAE,6CAA6C;IAC1D,UAAU,EAAE,sBAAsB;IAClC,OAAO,EAAE,kBAAkB;IAC3B,KAAK,EAAE,OAAO;CACf,CAAC"}

package/dist/agent/tools/vision-analyze.d.ts

@@ -0,0 +1,11 @@
+/**
+ * vision_analyze Tool - Analyze image file with Gemini Vision
+ * Phase 3: Function Calling Tool Definitions
+ *
+ * Security: Path validation (cwd/tmpdir only, no symlinks)
+ */
+import type { ToolDefinition } from '../types.js';
+import type { GeminiVision } from '../../interface/vision/index.js';
+export declare function runInVisionAnalyzeContext<T>(vision: GeminiVision, fn: () => T): T;
+export declare const visionAnalyzeTool: ToolDefinition;
+//# sourceMappingURL=vision-analyze.d.ts.map

package/dist/agent/tools/vision-analyze.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vision-analyze.d.ts","sourceRoot":"","sources":["../../../src/agent/tools/vision-analyze.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAsBpE,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAEjF;AAyFD,eAAO,MAAM,iBAAiB,EAAE,cAO/B,CAAC"}

package/dist/agent/tools/vision-analyze.js

@@ -0,0 +1,103 @@
+/**
+ * vision_analyze Tool - Analyze image file with Gemini Vision
+ * Phase 3: Function Calling Tool Definitions
+ *
+ * Security: Path validation (cwd/tmpdir only, no symlinks)
+ */
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { readFile, realpath, stat } from 'node:fs/promises';
+import { resolve, relative, extname } from 'node:path';
+import { tmpdir } from 'node:os';
+const visionAnalyzeParameters = {
+    type: 'object',
+    properties: {
+        imagePath: { type: 'string', description: 'Path to image file' },
+        prompt: { type: 'string', description: 'Analysis prompt for Gemini Vision' },
+        mode: {
+            type: 'string',
+            enum: ['rest', 'live'],
+            description: 'Analysis mode: rest (default) or live (WebSocket)',
+        },
+    },
+    required: ['imagePath', 'prompt'],
+};
+const ALLOWED_EXTENSIONS = new Set(['.png', '.jpg', '.jpeg', '.gif', '.webp', '.bmp']);
+const MAX_FILE_SIZE_BYTES = 10 * 1024 * 1024; // 10MB
+// AsyncLocalStorage for vision instance isolation
+const visionStore = new AsyncLocalStorage();
+export function runInVisionAnalyzeContext(vision, fn) {
+    return visionStore.run(vision, fn);
+}
+async function validateImagePath(imagePath) {
+    const cwd = process.cwd();
+    const tmpDir = tmpdir();
+    // Resolve to absolute path
+    const absolutePath = resolve(imagePath);
+    // Resolve symlinks
+    let realPath;
+    try {
+        realPath = await realpath(absolutePath);
+    }
+    catch {
+        throw new Error(`File not found: ${imagePath}`);
+    }
+    // Check if path is under cwd or tmpdir
+    const relToCwd = relative(cwd, realPath);
+    const relToTmp = relative(tmpDir, realPath);
+    const isUnderCwd = !relToCwd.startsWith('..') && !relToCwd.startsWith('/');
+    const isUnderTmp = !relToTmp.startsWith('..') && !relToTmp.startsWith('/');
+    if (!isUnderCwd && !isUnderTmp) {
+        throw new Error(`Security: Image path must be under project directory or temp directory: ${imagePath}`);
+    }
+    // Check file extension
+    const ext = extname(realPath).toLowerCase();
+    if (!ALLOWED_EXTENSIONS.has(ext)) {
+        throw new Error(`Invalid image format: ${ext}. Allowed: ${Array.from(ALLOWED_EXTENSIONS).join(', ')}`);
+    }
+    // Check file size
+    const stats = await stat(realPath);
+    if (stats.size > MAX_FILE_SIZE_BYTES) {
+        throw new Error(`Image too large: ${(stats.size / 1024 / 1024).toFixed(2)}MB (max 10MB)`);
+    }
+    return realPath;
+}
+async function handleVisionAnalyze(args) {
+    const { imagePath, prompt, mode = 'rest' } = args;
+    const vision = visionStore.getStore();
+    if (!vision) {
+        return 'Error: Vision service not available in current context';
+    }
+    try {
+        const validatedPath = await validateImagePath(imagePath);
+        const imageBuffer = await readFile(validatedPath);
+        // Use live mode (WebSocket) if requested and available
+        if (mode === 'live') {
+            // Try to use VisionInterface's analyzeLive method via AsyncLocalStorage
+            // For now, fall back to REST if not available
+            const visionInterface = vision.analyzeLive;
+            if (visionInterface) {
+                const imageBase64 = imageBuffer.toString('base64');
+                const result = await visionInterface.call(vision, imageBase64, prompt);
+                return result;
+            }
+            // Fallback to REST
+            const result = await vision.analyzeImage(imageBuffer, prompt);
+            return result;
+        }
+        // Default REST mode
+        const result = await vision.analyzeImage(imageBuffer, prompt);
+        return result;
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return `Vision analysis failed: ${msg}`;
+    }
+}
+export const visionAnalyzeTool = {
+    name: 'vision_analyze',
+    description: 'Analyze an image file with Gemini Vision (supports png, jpg, jpeg, gif, webp, bmp). Use mode=live for WebSocket streaming.',
+    parameters: visionAnalyzeParameters,
+    handler: handleVisionAnalyze,
+    scope: 'read',
+};
+//# sourceMappingURL=vision-analyze.js.map

package/dist/agent/tools/vision-analyze.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vision-analyze.js","sourceRoot":"","sources":["../../../src/agent/tools/vision-analyze.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAQ,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAIjC,MAAM,uBAAuB,GAAe;IAC1C,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE;QAChE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mCAAmC,EAAE;QAC5E,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,WAAW,EAAE,mDAAmD;SACjE;KACF;IACD,QAAQ,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC;CAClC,CAAC;AAEF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AACvF,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AAErD,kDAAkD;AAClD,MAAM,WAAW,GAAG,IAAI,iBAAiB,EAAgB,CAAC;AAE1D,MAAM,UAAU,yBAAyB,CAAI,MAAoB,EAAE,EAAW;IAC5E,OAAO,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,2BAA2B;IAC3B,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAExC,mBAAmB;IACnB,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,mBAAmB,SAAS,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,uCAAuC;IACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE5C,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAE3E,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,2EAA2E,SAAS,EAAE,CACvF,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,yBAAyB,GAAG,cAAc,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtF,CAAC;IACJ,CAAC;IAED,kBAAkB;IAClB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACb,oBAAoB,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CACzE,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAA6B;IAC9D,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,GAAG,MAAM,EAAE,GAAG,IAI5C,CAAC;IAEF,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,wDAAwD,CAAC;IAClE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAC;QAElD,uDAAuD;QACvD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,wEAAwE;YACxE,8CAA8C;YAC9C,MAAM,eAAe,GAAI,MAAmF,CAAC,WAAW,CAAC;YACzH,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACnD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;gBACvE,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,mBAAmB;YACnB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC9D,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,oBAAoB;QACpB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,2BAA2B,GAAG,EAAE,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAmB;IAC/C,IAAI,EAAE,gBAAgB;IACtB,WAAW,EACT,4HAA4H;IAC9H,UAAU,EAAE,uBAAuB;IACnC,OAAO,EAAE,mBAAmB;IAC5B,KAAK,EAAE,MAAM;CACd,CAAC"}

package/dist/agent/tools/vision-capture.d.ts

@@ -0,0 +1,13 @@
+/**
+ * vision_capture Tool - Screen capture and Gemini vision analysis
+ * Phase 3: Function Calling Tool Definitions
+ *
+ * Security: GeminiVision instance bound via AsyncLocalStorage
+ */
+import type { ToolDefinition } from '../types.js';
+import type { GeminiVision } from '../../interface/vision/index.js';
+export declare function bindVisionCapture(vision: GeminiVision): void;
+export declare function unbindVisionCapture(): void;
+export declare function runInVisionContext<T>(vision: GeminiVision, fn: () => T): T;
+export declare const visionCaptureTool: ToolDefinition;
+//# sourceMappingURL=vision-capture.d.ts.map

package/dist/agent/tools/vision-capture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vision-capture.d.ts","sourceRoot":"","sources":["../../../src/agent/tools/vision-capture.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAmCpE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAE5D;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAE1E;AA4CD,eAAO,MAAM,iBAAiB,EAAE,cAM/B,CAAC"}

package/dist/agent/tools/vision-capture.js

@@ -0,0 +1,87 @@
+/**
+ * vision_capture Tool - Screen capture and Gemini vision analysis
+ * Phase 3: Function Calling Tool Definitions
+ *
+ * Security: GeminiVision instance bound via AsyncLocalStorage
+ */
+import { AsyncLocalStorage } from 'node:async_hooks';
+import { ScreenCapture } from '../../interface/vision/index.js';
+const visionCaptureParameters = {
+    type: 'object',
+    properties: {
+        area: {
+            type: 'string',
+            enum: ['full', 'region'],
+            description: 'Capture area (full screen or region)',
+        },
+        region: {
+            type: 'object',
+            properties: {
+                x: { type: 'number', description: 'X coordinate' },
+                y: { type: 'number', description: 'Y coordinate' },
+                w: { type: 'number', description: 'Width' },
+                h: { type: 'number', description: 'Height' },
+            },
+            required: ['x', 'y', 'w', 'h'],
+            description: 'Region to capture (required if area=region)',
+        },
+        prompt: { type: 'string', description: 'Analysis prompt for Gemini Vision' },
+        mode: {
+            type: 'string',
+            enum: ['rest', 'live'],
+            description: 'Analysis mode: rest (default) or live (WebSocket)',
+        },
+    },
+    required: ['prompt'],
+};
+// AsyncLocalStorage for vision instance isolation
+const visionStore = new AsyncLocalStorage();
+export function bindVisionCapture(vision) {
+    // Vision instance is bound per-request, no persistent storage needed
+}
+export function unbindVisionCapture() {
+    // No-op, cleanup handled by AsyncLocalStorage
+}
+export function runInVisionContext(vision, fn) {
+    return visionStore.run(vision, fn);
+}
+async function handleVisionCapture(args) {
+    const { area, region, prompt, mode = 'rest' } = args;
+    const vision = visionStore.getStore();
+    if (!vision) {
+        return 'Error: Vision service not available in current context';
+    }
+    try {
+        const captureOptions = area === 'region' && region
+            ? { area: 'region', region }
+            : { area: 'full' };
+        const imageBuffer = await ScreenCapture.capture(captureOptions);
+        // Use live mode (WebSocket) if requested and available
+        if (mode === 'live') {
+            const visionInterface = vision.analyzeLive;
+            if (visionInterface) {
+                const imageBase64 = imageBuffer.toString('base64');
+                const result = await visionInterface.call(vision, imageBase64, prompt);
+                return result;
+            }
+            // Fallback to REST
+            const result = await vision.analyzeImage(imageBuffer, prompt);
+            return result;
+        }
+        // Default REST mode
+        const result = await vision.analyzeImage(imageBuffer, prompt);
+        return result;
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return `Vision capture failed: ${msg}`;
+    }
+}
+export const visionCaptureTool = {
+    name: 'vision_capture',
+    description: 'Capture screen and analyze with Gemini Vision. Use mode=live for WebSocket streaming.',
+    parameters: visionCaptureParameters,
+    handler: handleVisionCapture,
+    scope: 'read',
+};
+//# sourceMappingURL=vision-capture.js.map

package/dist/agent/tools/vision-capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vision-capture.js","sourceRoot":"","sources":["../../../src/agent/tools/vision-capture.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAGrD,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAEhE,MAAM,uBAAuB,GAAe;IAC1C,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;YACxB,WAAW,EAAE,sCAAsC;SACpD;QACD,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE;gBAClD,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE;gBAClD,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE;gBAC3C,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE;aAC7C;YACD,QAAQ,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;YAC9B,WAAW,EAAE,6CAA6C;SAC3D;QACD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mCAAmC,EAAE;QAC5E,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,WAAW,EAAE,mDAAmD;SACjE;KACF;IACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;CACrB,CAAC;AAEF,kDAAkD;AAClD,MAAM,WAAW,GAAG,IAAI,iBAAiB,EAAgB,CAAC;AAE1D,MAAM,UAAU,iBAAiB,CAAC,MAAoB;IACpD,qEAAqE;AACvE,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,8CAA8C;AAChD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAI,MAAoB,EAAE,EAAW;IACrE,OAAO,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAA6B;IAC9D,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,MAAM,EAAE,GAAG,IAK/C,CAAC;IAEF,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,wDAAwD,CAAC;IAClE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,KAAK,QAAQ,IAAI,MAAM;YAChD,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,MAAM,EAAE;YACrC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC;QAE9B,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAEhE,uDAAuD;QACvD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,MAAM,eAAe,GAAI,MAAmF,CAAC,WAAW,CAAC;YACzH,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,WAAW,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACnD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;gBACvE,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,mBAAmB;YACnB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC9D,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,oBAAoB;QACpB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,0BAA0B,GAAG,EAAE,CAAC;IACzC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAmB;IAC/C,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,uFAAuF;IACpG,UAAU,EAAE,uBAAuB;IACnC,OAAO,EAAE,mBAAmB;IAC5B,KAAK,EAAE,MAAM;CACd,CAAC"}

package/dist/agent/tools/web-browse.d.ts

@@ -0,0 +1,20 @@
+/**
+ * web_browse Tool - URL 내용 읽기 (SSRF 방지)
+ * Phase 3: Function Calling Tool Definitions
+ *
+ * 보안:
+ * - Scheme/Port 제한: http/https, 80/443만 허용
+ * - Private IP 차단: 10.x, 172.16-31.x, 192.168.x, 127.x, 169.254.x, ::1
+ * - 메타데이터 IP 차단: 169.254.169.254
+ * - Redirect: 수동 루프, 각 hop마다 IP 재검증 (최대 3회)
+ */
+import type { ToolDefinition } from '../types.js';
+export declare function isPrivateIP(ip: string): boolean;
+export declare function validateUrl(urlStr: string): URL;
+/**
+ * DNS를 해석하고 모든 주소가 public IP인지 검증한 뒤, 첫 번째 safe IP 반환.
+ * DNS rebinding 방지: 반환된 IP를 직접 연결에 사용하여 TOCTOU 제거.
+ */
+export declare function resolveToSafeIP(hostname: string): Promise<string>;
+export declare const webBrowseTool: ToolDefinition;
+//# sourceMappingURL=web-browse.d.ts.map

package/dist/agent/tools/web-browse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-browse.d.ts","sourceRoot":"","sources":["../../../src/agent/tools/web-browse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,aAAa,CAAC;AAsB9D,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAkB/C;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAe/C;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAwBvE;AAoGD,eAAO,MAAM,aAAa,EAAE,cAM3B,CAAC"}

package/dist/agent/tools/web-browse.js

@@ -0,0 +1,196 @@
+/**
+ * web_browse Tool - URL 내용 읽기 (SSRF 방지)
+ * Phase 3: Function Calling Tool Definitions
+ *
+ * 보안:
+ * - Scheme/Port 제한: http/https, 80/443만 허용
+ * - Private IP 차단: 10.x, 172.16-31.x, 192.168.x, 127.x, 169.254.x, ::1
+ * - 메타데이터 IP 차단: 169.254.169.254
+ * - Redirect: 수동 루프, 각 hop마다 IP 재검증 (최대 3회)
+ */
+import * as dns from 'node:dns/promises';
+import * as http from 'node:http';
+import * as https from 'node:https';
+const FETCH_TIMEOUT_MS = 10_000;
+const MAX_REDIRECTS = 3;
+const MAX_RESPONSE_SIZE = 50_000; // 50KB text
+const MAX_BODY_BUFFER = MAX_RESPONSE_SIZE * 2; // 응답 스트리밍 중 메모리 제한
+const webBrowseParameters = {
+    type: 'object',
+    properties: {
+        url: { type: 'string', description: 'URL to fetch' },
+        extractMode: {
+            type: 'string',
+            enum: ['text', 'summary'],
+            description: 'Extract mode: text or summary (default: text)',
+        },
+    },
+    required: ['url'],
+};
+// === SSRF Protection ===
+export function isPrivateIP(ip) {
+    // IPv4 private ranges
+    if (/^10\./.test(ip))
+        return true;
+    if (/^172\.(1[6-9]|2\d|3[01])\./.test(ip))
+        return true;
+    if (/^192\.168\./.test(ip))
+        return true;
+    if (/^127\./.test(ip))
+        return true;
+    if (/^169\.254\./.test(ip))
+        return true;
+    if (ip === '0.0.0.0')
+        return true;
+    // IPv6 private ranges
+    if (ip === '::1')
+        return true;
+    if (/^fc/i.test(ip) || /^fd/i.test(ip))
+        return true;
+    if (/^fe8/i.test(ip) || /^fe9/i.test(ip) || /^fea/i.test(ip) || /^feb/i.test(ip))
+        return true;
+    // AWS/GCP metadata
+    if (ip === '169.254.169.254')
+        return true;
+    return false;
+}
+export function validateUrl(urlStr) {
+    const parsed = new URL(urlStr);
+    // Scheme check
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+        throw new Error(`Blocked scheme: ${parsed.protocol} (only http/https allowed)`);
+    }
+    // Port check
+    const port = parsed.port || (parsed.protocol === 'https:' ? '443' : '80');
+    if (port !== '80' && port !== '443') {
+        throw new Error(`Blocked port: ${port} (only 80/443 allowed)`);
+    }
+    return parsed;
+}
+/**
+ * DNS를 해석하고 모든 주소가 public IP인지 검증한 뒤, 첫 번째 safe IP 반환.
+ * DNS rebinding 방지: 반환된 IP를 직접 연결에 사용하여 TOCTOU 제거.
+ */
+export async function resolveToSafeIP(hostname) {
+    // IPv4
+    try {
+        const addrs = await dns.resolve4(hostname);
+        for (const addr of addrs) {
+            if (isPrivateIP(addr))
+                throw new Error(`Private IP access blocked: ${addr}`);
+        }
+        if (addrs.length > 0)
+            return addrs[0];
+    }
+    catch (err) {
+        if (err instanceof Error && err.message.includes('Private IP'))
+            throw err;
+    }
+    // IPv6 fallback
+    try {
+        const addrs = await dns.resolve6(hostname);
+        for (const addr of addrs) {
+            if (isPrivateIP(addr))
+                throw new Error(`Private IPv6 access blocked: ${addr}`);
+        }
+        if (addrs.length > 0)
+            return addrs[0];
+    }
+    catch (err) {
+        if (err instanceof Error && err.message.includes('Private IP'))
+            throw err;
+    }
+    throw new Error(`DNS resolution failed for ${hostname}`);
+}
+/**
+ * 검증된 IP로 직접 HTTP(S) 요청. DNS를 재해석하지 않으므로 rebinding 불가.
+ * - hostname → resolvedIP로 연결
+ * - Host 헤더 → 원래 hostname (virtual hosting)
+ * - servername → 원래 hostname (TLS SNI + 인증서 검증)
+ */
+function pinnedRequest(parsed, resolvedIP) {
+    return new Promise((resolve, reject) => {
+        const isHttps = parsed.protocol === 'https:';
+        const mod = isHttps ? https : http;
+        const port = parsed.port || (isHttps ? '443' : '80');
+        const options = {
+            hostname: resolvedIP,
+            port: Number(port),
+            path: parsed.pathname + parsed.search,
+            method: 'GET',
+            headers: { 'User-Agent': 'VIBE-Agent/1.0', Host: parsed.host },
+            timeout: FETCH_TIMEOUT_MS,
+            ...(isHttps ? { servername: parsed.hostname } : {}),
+        };
+        const req = mod.request(options, (res) => {
+            const chunks = [];
+            let totalSize = 0;
+            res.on('data', (chunk) => {
+                totalSize += chunk.length;
+                if (totalSize <= MAX_BODY_BUFFER)
+                    chunks.push(chunk);
+            });
+            res.on('end', () => {
+                resolve({
+                    statusCode: res.statusCode ?? 0,
+                    headers: res.headers,
+                    body: Buffer.concat(chunks).toString('utf8'),
+                });
+            });
+            res.on('error', reject);
+        });
+        req.on('error', reject);
+        req.on('timeout', () => { req.destroy(); reject(new Error('Fetch timed out')); });
+        req.end();
+    });
+}
+async function safeFetch(urlStr, redirectCount = 0) {
+    if (redirectCount > MAX_REDIRECTS) {
+        throw new Error(`Too many redirects (max ${MAX_REDIRECTS})`);
+    }
+    const parsed = validateUrl(urlStr);
+    const resolvedIP = await resolveToSafeIP(parsed.hostname);
+    const { statusCode, headers, body } = await pinnedRequest(parsed, resolvedIP);
+    // Handle redirects — 각 hop마다 resolveToSafeIP로 재검증
+    if (statusCode >= 300 && statusCode < 400) {
+        const location = headers.location;
+        if (!location)
+            throw new Error('Redirect without Location header');
+        const redirectUrl = new URL(location, urlStr).toString();
+        return safeFetch(redirectUrl, redirectCount + 1);
+    }
+    if (statusCode < 200 || statusCode >= 300) {
+        throw new Error(`HTTP ${statusCode}`);
+    }
+    if (body.length > MAX_RESPONSE_SIZE) {
+        return body.substring(0, MAX_RESPONSE_SIZE) + '\n\n[...truncated]';
+    }
+    return body;
+}
+// === Tool Handler ===
+async function handleWebBrowse(args) {
+    const { url } = args;
+    try {
+        const rawContent = await safeFetch(url);
+        // Basic HTML tag stripping for text mode
+        const textContent = rawContent
+            .replace(/<script[\s\S]*?<\/script>/gi, '')
+            .replace(/<style[\s\S]*?<\/style>/gi, '')
+            .replace(/<[^>]+>/g, ' ')
+            .replace(/\s+/g, ' ')
+            .trim();
+        return textContent || '(empty page)';
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return `Browse failed: ${msg}`;
+    }
+}
+export const webBrowseTool = {
+    name: 'web_browse',
+    description: 'Fetch and read web page content from a URL (with SSRF protection)',
+    parameters: webBrowseParameters,
+    handler: handleWebBrowse,
+    scope: 'read',
+};
+//# sourceMappingURL=web-browse.js.map

package/dist/agent/tools/web-browse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-browse.js","sourceRoot":"","sources":["../../../src/agent/tools/web-browse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,GAAG,MAAM,mBAAmB,CAAC;AACzC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAGpC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAC,YAAY;AAC9C,MAAM,eAAe,GAAG,iBAAiB,GAAG,CAAC,CAAC,CAAC,mBAAmB;AAElE,MAAM,mBAAmB,GAAe;IACtC,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE;QACpD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;YACzB,WAAW,EAAE,+CAA+C;SAC7D;KACF;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;CAClB,CAAC;AAEF,0BAA0B;AAE1B,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,sBAAsB;IACtB,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAElC,sBAAsB;IACtB,IAAI,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9F,mBAAmB;IACnB,IAAI,EAAE,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAE1C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAE/B,eAAe;IACf,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAC,QAAQ,4BAA4B,CAAC,CAAC;IAClF,CAAC;IAED,aAAa;IACb,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1E,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,wBAAwB,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAgB;IACpD,OAAO;IACP,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,WAAW,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,MAAM,GAAG,CAAC;IAC5E,CAAC;IAED,gBAAgB;IAChB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,WAAW,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,MAAM,GAAG,CAAC;IAC5E,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CACpB,MAAW,EACX,UAAkB;IAElB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAErD,MAAM,OAAO,GAAyB;YACpC,QAAQ,EAAE,UAAU;YACpB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;YAClB,IAAI,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM;YACrC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;YAC9D,OAAO,EAAE,gBAAgB;YACzB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpD,CAAC;QAEF,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvC,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC/B,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;gBAC1B,IAAI,SAAS,IAAI,eAAe;oBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvD,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,OAAO,CAAC;oBACN,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;oBAC/B,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;iBAC7C,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,MAAc,EAAE,aAAa,GAAG,CAAC;IACxD,IAAI,aAAa,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,2BAA2B,aAAa,GAAG,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1D,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAE9E,kDAAkD;IAClD,IAAI,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACnE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QACzD,OAAO,SAAS,CAAC,WAAW,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,UAAU,GAAG,GAAG,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,QAAQ,UAAU,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACpC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,iBAAiB,CAAC,GAAG,oBAAoB,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uBAAuB;AAEvB,KAAK,UAAU,eAAe,CAAC,IAA6B;IAC1D,MAAM,EAAE,GAAG,EAAE,GAAG,IAAyD,CAAC;IAE1E,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;QAExC,yCAAyC;QACzC,MAAM,WAAW,GAAG,UAAU;aAC3B,OAAO,CAAC,6BAA6B,EAAE,EAAE,CAAC;aAC1C,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC;aACxC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;aACxB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;aACpB,IAAI,EAAE,CAAC;QAEV,OAAO,WAAW,IAAI,cAAc,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,kBAAkB,GAAG,EAAE,CAAC;IACjC,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAmB;IAC3C,IAAI,EAAE,YAAY;IAClB,WAAW,EAAE,mEAAmE;IAChF,UAAU,EAAE,mBAAmB;IAC/B,OAAO,EAAE,eAAe;IACxB,KAAK,EAAE,MAAM;CACd,CAAC"}