@trenchwork/erosolar 1.1.30 → 1.1.32

package/dist/capabilities/binaryAnalysisCapability.d.ts

@@ -0,0 +1,7 @@
+import type { CapabilityContext, CapabilityContribution, CapabilityModule } from '../runtime/agentHost.js';
+export declare class BinaryAnalysisCapabilityModule implements CapabilityModule {
+    readonly id = "capability.binaryAnalysis";
+    readonly description = "Static binary analysis \u2014 file/strings/objdump/readelf/nm/checksec/ROPgadget/r2. Complements the Ghidra MCP server for fast non-decompilation queries.";
+    create(_context: CapabilityContext): Promise<CapabilityContribution>;
+}
+//# sourceMappingURL=binaryAnalysisCapability.d.ts.map

package/dist/capabilities/binaryAnalysisCapability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binaryAnalysisCapability.d.ts","sourceRoot":"","sources":["../../src/capabilities/binaryAnalysisCapability.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAgL3G,qBAAa,8BAA+B,YAAW,gBAAgB;IACrE,QAAQ,CAAC,EAAE,+BAA+B;IAC1C,QAAQ,CAAC,WAAW,gKAA2J;IAEzK,MAAM,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAU3E"}

package/dist/capabilities/binaryAnalysisCapability.js

@@ -0,0 +1,201 @@
+import { logDebug } from '../utils/debugLogger.js';
+import { runBinary, formatResult } from './_processRunner.js';
+function buildBinaryAnalysisTools() {
+    return [
+        {
+            name: 'bin_file',
+            description: 'Run `file` to identify a binary type.',
+            parameters: { type: 'object', properties: { path: { type: 'string' } }, required: ['path'] },
+            handler: async (args) => {
+                const argv = [String(args.path)];
+                const r = await runBinary('file', argv, { timeoutMs: 30_000 });
+                return formatResult('file', argv, r);
+            },
+        },
+        {
+            name: 'bin_strings',
+            description: 'Extract printable strings from a binary.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    path: { type: 'string' },
+                    minLength: { type: 'number', description: '-n minimum length (default 6)' },
+                    encoding: { type: 'string', description: '-e {s,S,l,b,L,B}' },
+                },
+                required: ['path'],
+            },
+            handler: async (args) => {
+                const argv = [];
+                const minLen = typeof args.minLength === 'number' ? Math.max(1, Math.floor(args.minLength)) : 6;
+                argv.push('-n', String(minLen));
+                if (args.encoding)
+                    argv.push('-e', String(args.encoding));
+                argv.push(String(args.path));
+                const r = await runBinary('strings', argv, { timeoutMs: 60_000 });
+                return formatResult('strings', argv, r);
+            },
+        },
+        {
+            name: 'bin_objdump',
+            description: 'Run objdump for headers / disassembly / sections / dynamic info / relocs / symbols.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    path: { type: 'string' },
+                    mode: { type: 'string', enum: ['disasm', 'headers', 'sections', 'dynamic', 'relocs', 'symbols'] },
+                    section: { type: 'string', description: 'Optional --section name to limit disasm scope' },
+                    intelSyntax: { type: 'boolean', description: 'Use -M intel for x86 disassembly' },
+                },
+                required: ['path', 'mode'],
+            },
+            handler: async (args) => {
+                const argv = [];
+                const mode = String(args.mode);
+                if (mode === 'disasm') {
+                    argv.push('-d');
+                    if (args.intelSyntax)
+                        argv.push('-M', 'intel');
+                    if (args.section)
+                        argv.push(`--section=${String(args.section)}`);
+                }
+                else if (mode === 'headers')
+                    argv.push('-h');
+                else if (mode === 'sections')
+                    argv.push('-x');
+                else if (mode === 'dynamic')
+                    argv.push('-T');
+                else if (mode === 'relocs')
+                    argv.push('-r');
+                else if (mode === 'symbols')
+                    argv.push('-t');
+                argv.push(String(args.path));
+                const r = await runBinary('objdump', argv, { timeoutMs: 2 * 60_000 });
+                return formatResult('objdump', argv, r);
+            },
+        },
+        {
+            name: 'bin_readelf',
+            description: 'Run readelf for ELF metadata (headers / sections / symbols / dynamic / notes / relocs / all).',
+            parameters: {
+                type: 'object',
+                properties: {
+                    path: { type: 'string' },
+                    mode: { type: 'string', enum: ['all', 'headers', 'sections', 'symbols', 'dynamic', 'notes', 'relocs'] },
+                },
+                required: ['path', 'mode'],
+            },
+            handler: async (args) => {
+                const mode = String(args.mode);
+                const flagMap = {
+                    all: '-a',
+                    headers: '-h',
+                    sections: '-S',
+                    symbols: '-s',
+                    dynamic: '-d',
+                    notes: '-n',
+                    relocs: '-r',
+                };
+                const flag = flagMap[mode] ?? '-a';
+                const argv = [flag, String(args.path)];
+                const r = await runBinary('readelf', argv, { timeoutMs: 60_000 });
+                return formatResult('readelf', argv, r);
+            },
+        },
+        {
+            name: 'bin_nm',
+            description: 'List symbols of a binary using nm.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    path: { type: 'string' },
+                    dynamic: { type: 'boolean' },
+                    demangle: { type: 'boolean' },
+                },
+                required: ['path'],
+            },
+            handler: async (args) => {
+                const argv = [];
+                if (args.dynamic)
+                    argv.push('-D');
+                if (args.demangle)
+                    argv.push('-C');
+                argv.push(String(args.path));
+                const r = await runBinary('nm', argv, { timeoutMs: 60_000 });
+                return formatResult('nm', argv, r);
+            },
+        },
+        {
+            name: 'bin_checksec',
+            description: 'Check binary security mitigations (NX, PIE, RELRO, Stack Canary, Fortify) via checksec.',
+            parameters: {
+                type: 'object',
+                properties: { path: { type: 'string' } },
+                required: ['path'],
+            },
+            handler: async (args) => {
+                const argv = ['--file=' + String(args.path)];
+                const r = await runBinary('checksec', argv, { timeoutMs: 30_000 });
+                return formatResult('checksec', argv, r);
+            },
+        },
+        {
+            name: 'bin_ropgadget',
+            description: 'Find ROP gadgets in a binary using ROPgadget.',
+            parameters: {
+                type: 'object',
+                properties: {
+                    path: { type: 'string' },
+                    filter: { type: 'string', description: 'Optional gadget filter (e.g. "pop rdi")' },
+                    maxGadgetLength: { type: 'number', description: '--depth value' },
+                },
+                required: ['path'],
+            },
+            handler: async (args) => {
+                const argv = ['--binary', String(args.path)];
+                if (args.filter)
+                    argv.push('--only', String(args.filter));
+                if (typeof args.maxGadgetLength === 'number') {
+                    argv.push('--depth', String(Math.max(1, Math.floor(args.maxGadgetLength))));
+                }
+                const r = await runBinary('ROPgadget', argv, { timeoutMs: 5 * 60_000 });
+                return formatResult('ROPgadget', argv, r);
+            },
+        },
+        {
+            name: 'bin_radare2_cmd',
+            description: 'Run a single radare2 command via -c (use -A to auto-analyze on load).',
+            parameters: {
+                type: 'object',
+                properties: {
+                    path: { type: 'string' },
+                    command: { type: 'string', description: 'r2 command (e.g. "afl", "pdf @ main")' },
+                    analyze: { type: 'boolean', description: 'Pass -A to auto-analyze (default true)' },
+                },
+                required: ['path', 'command'],
+            },
+            handler: async (args) => {
+                const argv = ['-q'];
+                if (args.analyze !== false)
+                    argv.push('-A');
+                argv.push('-c', String(args.command), String(args.path));
+                const r = await runBinary('r2', argv, { timeoutMs: 5 * 60_000 });
+                return formatResult('r2', argv, r);
+            },
+        },
+    ];
+}
+export class BinaryAnalysisCapabilityModule {
+    id = 'capability.binaryAnalysis';
+    description = 'Static binary analysis — file/strings/objdump/readelf/nm/checksec/ROPgadget/r2. Complements the Ghidra MCP server for fast non-decompilation queries.';
+    async create(_context) {
+        void _context;
+        logDebug('[BinAnalysis] Capability initialized');
+        const toolSuite = {
+            id: 'binaryAnalysis.tools',
+            description: 'Static binary analysis wrappers',
+            tools: buildBinaryAnalysisTools(),
+        };
+        return { id: this.id, description: this.description, toolSuite };
+    }
+}
+//# sourceMappingURL=binaryAnalysisCapability.js.map

package/dist/capabilities/binaryAnalysisCapability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binaryAnalysisCapability.js","sourceRoot":"","sources":["../../src/capabilities/binaryAnalysisCapability.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE9D,SAAS,wBAAwB;IAC/B,OAAO;QACL;YACE,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,uCAAuC;YACpD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE;YAC5F,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACjC,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC/D,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACvC,CAAC;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,0CAA0C;YACvD,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+BAA+B,EAAE;oBAC3E,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;iBAC9D;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,IAAI,GAAa,EAAE,CAAC;gBAC1B,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAChC,IAAI,IAAI,CAAC,QAAQ;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC1D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC7B,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;gBAClE,OAAO,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1C,CAAC;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,qFAAqF;YAClG,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE;oBACjG,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+CAA+C,EAAE;oBACzF,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,kCAAkC,EAAE;iBAClF;gBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;aAC3B;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,IAAI,GAAa,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAChB,IAAI,IAAI,CAAC,WAAW;wBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBAC/C,IAAI,IAAI,CAAC,OAAO;wBAAE,IAAI,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACnE,CAAC;qBAAM,IAAI,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;qBAC1C,IAAI,IAAI,KAAK,UAAU;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;qBACzC,IAAI,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;qBACxC,IAAI,IAAI,KAAK,QAAQ;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;qBACvC,IAAI,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC7B,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;gBACtE,OAAO,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1C,CAAC;SACF;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,+FAA+F;YAC5G,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE;iBACxG;gBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;aAC3B;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/B,MAAM,OAAO,GAA2B;oBACtC,GAAG,EAAE,IAAI;oBACT,OAAO,EAAE,IAAI;oBACb,QAAQ,EAAE,IAAI;oBACd,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,IAAI;oBACb,KAAK,EAAE,IAAI;oBACX,MAAM,EAAE,IAAI;iBACb,CAAC;gBACF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;gBACnC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvC,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;gBAClE,OAAO,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1C,CAAC;SACF;QACD;YACE,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,oCAAoC;YACjD,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oBAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;iBAC9B;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,IAAI,GAAa,EAAE,CAAC;gBAC1B,IAAI,IAAI,CAAC,OAAO;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClC,IAAI,IAAI,CAAC,QAAQ;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC7B,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC7D,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACrC,CAAC;SACF;QACD;YACE,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,yFAAyF;YACtG,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;gBACxC,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,IAAI,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC7C,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;gBACnE,OAAO,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC3C,CAAC;SACF;QACD;YACE,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,+CAA+C;YAC5D,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yCAAyC,EAAE;oBAClF,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE;iBAClE;gBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;aACnB;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC7C,IAAI,IAAI,CAAC,MAAM;oBAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC1D,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,EAAE,CAAC;oBAC7C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9E,CAAC;gBACD,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;gBACxE,OAAO,YAAY,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAC5C,CAAC;SACF;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,WAAW,EAAE,uEAAuE;YACpF,UAAU,EAAE;gBACV,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE;oBACjF,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,wCAAwC,EAAE;iBACpF;gBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;aAC9B;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACtB,MAAM,IAAI,GAAa,CAAC,IAAI,CAAC,CAAC;gBAC9B,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzD,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;gBACjE,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACrC,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,8BAA8B;IAChC,EAAE,GAAG,2BAA2B,CAAC;IACjC,WAAW,GAAG,uJAAuJ,CAAC;IAE/K,KAAK,CAAC,MAAM,CAAC,QAA2B;QACtC,KAAK,QAAQ,CAAC;QACd,QAAQ,CAAC,sCAAsC,CAAC,CAAC;QACjD,MAAM,SAAS,GAAc;YAC3B,EAAE,EAAE,sBAAsB;YAC1B,WAAW,EAAE,iCAAiC;YAC9C,KAAK,EAAE,wBAAwB,EAAE;SAClC,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC;IACnE,CAAC;CACF"}

package/dist/capabilities/editCapability.d.ts

@@ -0,0 +1,17 @@
+import type { CapabilityModule, CapabilityContext, CapabilityContribution } from '../runtime/agentHost.js';
+/**
+ * Edit Capability Module
+ *
+ * Provides surgical file editing via exact string replacement.
+ * This capability is essential for making targeted code changes without full file rewrites.
+ *
+ * Tools:
+ * - Edit: Exact string replacement with uniqueness checking
+ *
+ * Scope: filesystem:write
+ */
+export declare class EditCapabilityModule implements CapabilityModule {
+    readonly id = "capability.edit";
+    create(context: CapabilityContext): Promise<CapabilityContribution>;
+}
+//# sourceMappingURL=editCapability.d.ts.map

package/dist/capabilities/editCapability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"editCapability.d.ts","sourceRoot":"","sources":["../../src/capabilities/editCapability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAG3G;;;;;;;;;;GAUG;AACH,qBAAa,oBAAqB,YAAW,gBAAgB;IAC3D,QAAQ,CAAC,EAAE,qBAAqB;IAE1B,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAY1E"}

package/dist/capabilities/editCapability.js

@@ -0,0 +1,27 @@
+import { createEditTools } from '../tools/editTools.js';
+/**
+ * Edit Capability Module
+ *
+ * Provides surgical file editing via exact string replacement.
+ * This capability is essential for making targeted code changes without full file rewrites.
+ *
+ * Tools:
+ * - Edit: Exact string replacement with uniqueness checking
+ *
+ * Scope: filesystem:write
+ */
+export class EditCapabilityModule {
+    id = 'capability.edit';
+    async create(context) {
+        const tools = createEditTools(context.workingDir);
+        return {
+            id: 'edit.surgical_edits',
+            description: 'Surgical file editing via exact string replacement',
+            toolSuite: {
+                id: 'edit',
+                tools,
+            },
+        };
+    }
+}
+//# sourceMappingURL=editCapability.js.map

package/dist/capabilities/editCapability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"editCapability.js","sourceRoot":"","sources":["../../src/capabilities/editCapability.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD;;;;;;;;;;GAUG;AACH,MAAM,OAAO,oBAAoB;IACtB,EAAE,GAAG,iBAAiB,CAAC;IAEhC,KAAK,CAAC,MAAM,CAAC,OAA0B;QACrC,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAElD,OAAO;YACL,EAAE,EAAE,qBAAqB;YACzB,WAAW,EAAE,oDAAoD;YACjE,SAAS,EAAE;gBACT,EAAE,EAAE,MAAM;gBACV,KAAK;aACN;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/capabilities/engagementCapability.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Engagement → Target → Finding pipeline. Offsec-only.
+ *
+ * Wraps src/tools/engagementTools as a CapabilityModule. Loaded only
+ * for the variant-research / engagement-delivery profiles per the
+ * gating in src/runtime/profileGates.ts. The default coding profile
+ * (erosolar-code) cannot see these tools — see CLAUDE.md "Capability
+ * separation" + the v1.5 hardening test.
+ */
+import type { CapabilityContribution, CapabilityContext, CapabilityModule } from '../runtime/agentHost.js';
+export declare class EngagementCapabilityModule implements CapabilityModule {
+    readonly id = "capability.engagement";
+    create(_context: CapabilityContext): Promise<CapabilityContribution>;
+}
+//# sourceMappingURL=engagementCapability.d.ts.map

package/dist/capabilities/engagementCapability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engagementCapability.d.ts","sourceRoot":"","sources":["../../src/capabilities/engagementCapability.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3G,qBAAa,0BAA2B,YAAW,gBAAgB;IACjE,QAAQ,CAAC,EAAE,2BAA2B;IAEhC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CA6B3E"}

package/dist/capabilities/engagementCapability.js

@@ -0,0 +1,40 @@
+/**
+ * Engagement → Target → Finding pipeline. Offsec-only.
+ *
+ * Wraps src/tools/engagementTools as a CapabilityModule. Loaded only
+ * for the variant-research / engagement-delivery profiles per the
+ * gating in src/runtime/profileGates.ts. The default coding profile
+ * (erosolar-code) cannot see these tools — see CLAUDE.md "Capability
+ * separation" + the v1.5 hardening test.
+ */
+import { createEngagementTools, loadSelectionFromPortal } from '../tools/engagementTools.js';
+export class EngagementCapabilityModule {
+    id = 'capability.engagement';
+    async create(_context) {
+        void _context;
+        // Resume whatever selection the portal (or another CLI session)
+        // last wrote to users/<uid>/cli_state/selection. Best-effort —
+        // if auth is missing or the network is offline, the session
+        // still boots normally with no active selection.
+        const resumed = await loadSelectionFromPortal();
+        if (resumed?.engagementId) {
+            const trail = [resumed.engagementId, resumed.targetId, resumed.findingId]
+                .filter(Boolean).join(' › ');
+            process.stderr.write(`[engagement] Resumed from portal: ${trail}\n`);
+        }
+        return {
+            id: 'engagement.tools',
+            description: 'Engagement → Target → Finding pipeline. Manages contracts / task-orders / ' +
+                'bug-bounty programs and the variant-research lifecycle. Writes to ' +
+                'users/<uid>/engagements/<id>/targets/<tid>/findings/<fid> via Lambda. ' +
+                'Selection is auto-resumed from users/<uid>/cli_state/selection on boot, ' +
+                'so a portal-launched hunt lands directly in this session.',
+            toolSuite: {
+                id: 'engagement',
+                description: 'Engagement / target / finding tools',
+                tools: createEngagementTools(),
+            },
+        };
+    }
+}
+//# sourceMappingURL=engagementCapability.js.map

package/dist/capabilities/engagementCapability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engagementCapability.js","sourceRoot":"","sources":["../../src/capabilities/engagementCapability.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAE7F,MAAM,OAAO,0BAA0B;IAC5B,EAAE,GAAG,uBAAuB,CAAC;IAEtC,KAAK,CAAC,MAAM,CAAC,QAA2B;QACtC,KAAK,QAAQ,CAAC;QAEd,gEAAgE;QAChE,+DAA+D;QAC/D,4DAA4D;QAC5D,iDAAiD;QACjD,MAAM,OAAO,GAAG,MAAM,uBAAuB,EAAE,CAAC;QAChD,IAAI,OAAO,EAAE,YAAY,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC;iBACtE,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,KAAK,IAAI,CAAC,CAAC;QACvE,CAAC;QAED,OAAO;YACL,EAAE,EAAE,kBAAkB;YACtB,WAAW,EACT,4EAA4E;gBAC5E,oEAAoE;gBACpE,wEAAwE;gBACxE,0EAA0E;gBAC1E,2DAA2D;YAC7D,SAAS,EAAE;gBACT,EAAE,EAAE,YAAY;gBAChB,WAAW,EAAE,qCAAqC;gBAClD,KAAK,EAAE,qBAAqB,EAAE;aAC/B;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/capabilities/enhancedGitCapability.d.ts

@@ -0,0 +1,7 @@
+import type { CapabilityContribution, CapabilityContext, CapabilityModule } from '../runtime/agentHost.js';
+export declare class EnhancedGitCapabilityModule implements CapabilityModule {
+    readonly id = "capability.enhanced-git";
+    create(context: CapabilityContext): Promise<CapabilityContribution>;
+    private buildCommitMessage;
+}
+//# sourceMappingURL=enhancedGitCapability.d.ts.map

package/dist/capabilities/enhancedGitCapability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enhancedGitCapability.d.ts","sourceRoot":"","sources":["../../src/capabilities/enhancedGitCapability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAM3G,qBAAa,2BAA4B,YAAW,gBAAgB;IAClE,QAAQ,CAAC,EAAE,6BAA6B;IAElC,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAiOzE,OAAO,CAAC,kBAAkB;CAe3B"}

package/dist/capabilities/enhancedGitCapability.js

@@ -0,0 +1,220 @@
+import { exec } from 'node:child_process';
+import { promisify } from 'node:util';
+const execAsync = promisify(exec);
+export class EnhancedGitCapabilityModule {
+    id = 'capability.enhanced-git';
+    async create(context) {
+        return {
+            id: 'enhanced-git.tools',
+            description: 'Enhanced git workflow with smart commits and PR creation',
+            toolSuite: {
+                id: 'enhanced-git',
+                description: 'Advanced git operations including smart commits and PR management',
+                tools: [
+                    {
+                        name: 'git_smart_commit',
+                        description: `Create intelligent git commits following best practices.
+
+IMPORTANT: Only create commits when requested by the user. If unclear, ask first.
+
+Git Safety Protocol:
+- NEVER update the git config
+- NEVER run destructive/irreversible git commands (like push --force, hard reset, etc) unless the user explicitly requests them
+- NEVER skip hooks (--no-verify, --no-gpg-sign, etc) unless the user explicitly requests it
+- NEVER run force push to main/master, warn the user if they request it
+- Avoid git commit --amend. ONLY use --amend when either (1) user explicitly requested amend OR (2) adding edits from pre-commit hook
+- Before amending: ALWAYS check authorship (git log -1 --format='%an %ae')
+- NEVER commit changes unless the user explicitly asks you to
+
+When creating commits:
+1. Run git status and git diff to see all changes
+2. Run git log to see recent commit message style
+3. Analyze changes and draft commit message
+4. Add relevant untracked files to staging area
+5. Create commit with proper message format
+
+Commit message format:
+<subject line>
+
+<body explaining the changes>
+
+🤖 Generated with [AGI-CLI](https://github.com/agi-cli)
+
+Co-Authored-By: Claude <noreply@anthropic.com>
+
+Important notes:
+- DO NOT push to remote unless explicitly requested
+- NEVER use -i flag (interactive mode not supported)
+- If no changes, do not create empty commit
+- Always use HEREDOC for commit messages`,
+                        parameters: {
+                            type: 'object',
+                            properties: {
+                                message: {
+                                    type: 'string',
+                                    description: 'The commit message subject line',
+                                },
+                                body: {
+                                    type: 'string',
+                                    description: 'Optional commit message body',
+                                },
+                                files: {
+                                    type: 'array',
+                                    items: { type: 'string' },
+                                    description: 'Optional specific files to commit. If not provided, commits all staged changes.',
+                                },
+                            },
+                            required: ['message'],
+                        },
+                        handler: async (args) => {
+                            const { message, body, files } = args;
+                            try {
+                                // Check for changes
+                                const { stdout: statusOutput } = await execAsync('git status --porcelain', {
+                                    cwd: context.workingDir,
+                                });
+                                if (!statusOutput.trim()) {
+                                    return 'No changes to commit';
+                                }
+                                // Add files
+                                if (files && files.length > 0) {
+                                    for (const file of files) {
+                                        await execAsync(`git add "${file}"`, { cwd: context.workingDir });
+                                    }
+                                }
+                                else {
+                                    await execAsync('git add -A', { cwd: context.workingDir });
+                                }
+                                // Build commit message
+                                const fullMessage = this.buildCommitMessage(message, body);
+                                // Create commit
+                                const commitCommand = `git commit -m "$(cat <<'EOF'
+${fullMessage}
+EOF
+)"`;
+                                const { stdout, stderr } = await execAsync(commitCommand, {
+                                    cwd: context.workingDir,
+                                });
+                                return `Commit created successfully:\n\n${stdout}\n${stderr}`;
+                            }
+                            catch (error) {
+                                const message = error instanceof Error ? error.message : String(error);
+                                return `Error creating commit: ${message}`;
+                            }
+                        },
+                    },
+                    {
+                        name: 'git_create_pr',
+                        description: `Create a pull request using gh CLI.
+
+IMPORTANT: Only create PR when requested by the user.
+
+Steps for creating PR:
+1. Run git status, git diff, and git log to understand current branch state
+2. Check if branch tracks remote and is up to date
+3. Analyze all commits that will be included in PR
+4. Draft PR summary (not just latest commit, but ALL commits)
+5. Create branch if needed, push with -u flag if needed
+6. Create PR using gh pr create with proper format
+
+PR body format:
+## Summary
+<1-3 bullet points>
+
+## Test plan
+[Bulleted markdown checklist of TODOs for testing the pull request...]
+
+🤖 Generated with [AGI-CLI](https://github.com/agi-cli)
+
+Important:
+- Return the PR URL when done
+- Do not use TodoWrite or Task tools
+- Analyze ALL commits, not just the latest one`,
+                        parameters: {
+                            type: 'object',
+                            properties: {
+                                title: {
+                                    type: 'string',
+                                    description: 'The PR title',
+                                },
+                                body: {
+                                    type: 'string',
+                                    description: 'The PR body/description',
+                                },
+                                base: {
+                                    type: 'string',
+                                    description: 'Base branch (defaults to main)',
+                                },
+                                draft: {
+                                    type: 'boolean',
+                                    description: 'Create as draft PR',
+                                },
+                            },
+                            required: ['title', 'body'],
+                        },
+                        handler: async (args) => {
+                            const { title, body, base = 'main', draft = false } = args;
+                            try {
+                                // Check if gh CLI is available
+                                try {
+                                    await execAsync('gh --version', { cwd: context.workingDir });
+                                }
+                                catch {
+                                    return 'Error: gh CLI is not installed. Install it from https://cli.github.com/';
+                                }
+                                // Check current branch
+                                const { stdout: branchName } = await execAsync('git rev-parse --abbrev-ref HEAD', {
+                                    cwd: context.workingDir,
+                                });
+                                const currentBranch = branchName.trim();
+                                if (currentBranch === base) {
+                                    return `Error: Currently on ${base} branch. Create a feature branch first.`;
+                                }
+                                // Push if needed
+                                try {
+                                    const { stdout: trackingOutput } = await execAsync('git rev-parse --abbrev-ref --symbolic-full-name @{u}', { cwd: context.workingDir });
+                                    if (!trackingOutput.trim()) {
+                                        await execAsync(`git push -u origin ${currentBranch}`, {
+                                            cwd: context.workingDir,
+                                        });
+                                    }
+                                }
+                                catch {
+                                    // No tracking branch, push with -u
+                                    await execAsync(`git push -u origin ${currentBranch}`, {
+                                        cwd: context.workingDir,
+                                    });
+                                }
+                                // Create PR using heredoc
+                                const draftFlag = draft ? '--draft' : '';
+                                const prCommand = `gh pr create ${draftFlag} --base "${base}" --title "${title}" --body "$(cat <<'EOF'
+${body}
+EOF
+)"`;
+                                const { stdout } = await execAsync(prCommand, { cwd: context.workingDir });
+                                return `Pull request created successfully:\n\n${stdout}`;
+                            }
+                            catch (error) {
+                                const message = error instanceof Error ? error.message : String(error);
+                                return `Error creating pull request: ${message}`;
+                            }
+                        },
+                    },
+                ],
+            },
+        };
+    }
+    buildCommitMessage(subject, body) {
+        const parts = [subject];
+        if (body) {
+            parts.push('');
+            parts.push(body);
+        }
+        parts.push('');
+        parts.push('🤖 Generated with [AGI-CLI](https://github.com/agi-cli)');
+        parts.push('');
+        parts.push('Co-Authored-By: Claude <noreply@anthropic.com>');
+        return parts.join('\n');
+    }
+}
+//# sourceMappingURL=enhancedGitCapability.js.map

package/dist/capabilities/enhancedGitCapability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enhancedGitCapability.js","sourceRoot":"","sources":["../../src/capabilities/enhancedGitCapability.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;AAElC,MAAM,OAAO,2BAA2B;IAC7B,EAAE,GAAG,yBAAyB,CAAC;IAExC,KAAK,CAAC,MAAM,CAAC,OAA0B;QACrC,OAAO;YACL,EAAE,EAAE,oBAAoB;YACxB,WAAW,EAAE,0DAA0D;YACvE,SAAS,EAAE;gBACT,EAAE,EAAE,cAAc;gBAClB,WAAW,EAAE,mEAAmE;gBAChF,KAAK,EAAE;oBACL;wBACE,IAAI,EAAE,kBAAkB;wBACxB,WAAW,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yCAiCgB;wBAC7B,UAAU,EAAE;4BACV,IAAI,EAAE,QAAQ;4BACd,UAAU,EAAE;gCACV,OAAO,EAAE;oCACP,IAAI,EAAE,QAAQ;oCACd,WAAW,EAAE,iCAAiC;iCAC/C;gCACD,IAAI,EAAE;oCACJ,IAAI,EAAE,QAAQ;oCACd,WAAW,EAAE,8BAA8B;iCAC5C;gCACD,KAAK,EAAE;oCACL,IAAI,EAAE,OAAO;oCACb,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oCACzB,WAAW,EAAE,iFAAiF;iCAC/F;6BACF;4BACD,QAAQ,EAAE,CAAC,SAAS,CAAC;yBACtB;wBACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE;4BAC/C,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAIhC,CAAC;4BAEF,IAAI,CAAC;gCACH,oBAAoB;gCACpB,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,SAAS,CAAC,wBAAwB,EAAE;oCACzE,GAAG,EAAE,OAAO,CAAC,UAAU;iCACxB,CAAC,CAAC;gCAEH,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;oCACzB,OAAO,sBAAsB,CAAC;gCAChC,CAAC;gCAED,YAAY;gCACZ,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oCAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;wCACzB,MAAM,SAAS,CAAC,YAAY,IAAI,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;oCACpE,CAAC;gCACH,CAAC;qCAAM,CAAC;oCACN,MAAM,SAAS,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;gCAC7D,CAAC;gCAED,uBAAuB;gCACvB,MAAM,WAAW,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gCAE3D,gBAAgB;gCAChB,MAAM,aAAa,GAAG;EACpC,WAAW;;GAEV,CAAC;gCAEY,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE;oCACxD,GAAG,EAAE,OAAO,CAAC,UAAU;iCACxB,CAAC,CAAC;gCAEH,OAAO,mCAAmC,MAAM,KAAK,MAAM,EAAE,CAAC;4BAChE,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gCACvE,OAAO,0BAA0B,OAAO,EAAE,CAAC;4BAC7C,CAAC;wBACH,CAAC;qBACF;oBACD;wBACE,IAAI,EAAE,eAAe;wBACrB,WAAW,EAAE;;;;;;;;;;;;;;;;;;;;;;;;+CAwBsB;wBACnC,UAAU,EAAE;4BACV,IAAI,EAAE,QAAQ;4BACd,UAAU,EAAE;gCACV,KAAK,EAAE;oCACL,IAAI,EAAE,QAAQ;oCACd,WAAW,EAAE,cAAc;iCAC5B;gCACD,IAAI,EAAE;oCACJ,IAAI,EAAE,QAAQ;oCACd,WAAW,EAAE,yBAAyB;iCACvC;gCACD,IAAI,EAAE;oCACJ,IAAI,EAAE,QAAQ;oCACd,WAAW,EAAE,gCAAgC;iCAC9C;gCACD,KAAK,EAAE;oCACL,IAAI,EAAE,SAAS;oCACf,WAAW,EAAE,oBAAoB;iCAClC;6BACF;4BACD,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;yBAC5B;wBACD,OAAO,EAAE,KAAK,EAAE,IAA6B,EAAE,EAAE;4BAC/C,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,GAAG,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,GAAG,IAKrD,CAAC;4BAEF,IAAI,CAAC;gCACH,+BAA+B;gCAC/B,IAAI,CAAC;oCACH,MAAM,SAAS,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;gCAC/D,CAAC;gCAAC,MAAM,CAAC;oCACP,OAAO,yEAAyE,CAAC;gCACnF,CAAC;gCAED,uBAAuB;gCACvB,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,SAAS,CAAC,iCAAiC,EAAE;oCAChF,GAAG,EAAE,OAAO,CAAC,UAAU;iCACxB,CAAC,CAAC;gCAEH,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;gCAExC,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;oCAC3B,OAAO,uBAAuB,IAAI,yCAAyC,CAAC;gCAC9E,CAAC;gCAED,iBAAiB;gCACjB,IAAI,CAAC;oCACH,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,SAAS,CAChD,sDAAsD,EACtD,EAAE,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,CAC5B,CAAC;oCAEF,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC;wCAC3B,MAAM,SAAS,CAAC,sBAAsB,aAAa,EAAE,EAAE;4CACrD,GAAG,EAAE,OAAO,CAAC,UAAU;yCACxB,CAAC,CAAC;oCACL,CAAC;gCACH,CAAC;gCAAC,MAAM,CAAC;oCACP,mCAAmC;oCACnC,MAAM,SAAS,CAAC,sBAAsB,aAAa,EAAE,EAAE;wCACrD,GAAG,EAAE,OAAO,CAAC,UAAU;qCACxB,CAAC,CAAC;gCACL,CAAC;gCAED,0BAA0B;gCAC1B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;gCACzC,MAAM,SAAS,GAAG,gBAAgB,SAAS,YAAY,IAAI,cAAc,KAAK;EAC5F,IAAI;;GAEH,CAAC;gCAEY,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;gCAE3E,OAAO,yCAAyC,MAAM,EAAE,CAAC;4BAC3D,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gCACvE,OAAO,gCAAgC,OAAO,EAAE,CAAC;4BACnD,CAAC;wBACH,CAAC;qBACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAEO,kBAAkB,CAAC,OAAe,EAAE,IAAa;QACvD,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC;QAExB,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;QACtE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAE7D,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF"}

package/dist/capabilities/filesystemCapability.d.ts

@@ -0,0 +1,13 @@
+import type { CapabilityContribution, CapabilityContext, CapabilityModule } from '../runtime/agentHost.js';
+export interface FilesystemCapabilityOptions {
+    workingDir?: string;
+    id?: string;
+    description?: string;
+}
+export declare class FilesystemCapabilityModule implements CapabilityModule {
+    readonly id = "capability.filesystem";
+    private readonly options;
+    constructor(options?: FilesystemCapabilityOptions);
+    create(context: CapabilityContext): Promise<CapabilityContribution>;
+}
+//# sourceMappingURL=filesystemCapability.d.ts.map

package/dist/capabilities/filesystemCapability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystemCapability.d.ts","sourceRoot":"","sources":["../../src/capabilities/filesystemCapability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3G,MAAM,WAAW,2BAA2B;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,0BAA2B,YAAW,gBAAgB;IACjE,QAAQ,CAAC,EAAE,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8B;gBAE1C,OAAO,GAAE,2BAAgC;IAI/C,MAAM,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAe1E"}

package/dist/capabilities/filesystemCapability.js

@@ -0,0 +1,24 @@
+import { createFileTools } from '../tools/fileTools.js';
+export class FilesystemCapabilityModule {
+    id = 'capability.filesystem';
+    options;
+    constructor(options = {}) {
+        this.options = options;
+    }
+    async create(context) {
+        const workingDir = this.options.workingDir ?? context.workingDir;
+        return {
+            id: this.options.id ?? 'filesystem.tools.local',
+            description: this.options.description ?? 'Local file system access with deterministic diff summaries.',
+            toolSuite: {
+                id: 'fs',
+                description: 'File operations',
+                tools: createFileTools(workingDir),
+            },
+            metadata: {
+                workingDir,
+            },
+        };
+    }
+}
+//# sourceMappingURL=filesystemCapability.js.map

package/dist/capabilities/filesystemCapability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystemCapability.js","sourceRoot":"","sources":["../../src/capabilities/filesystemCapability.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAQxD,MAAM,OAAO,0BAA0B;IAC5B,EAAE,GAAG,uBAAuB,CAAC;IACrB,OAAO,CAA8B;IAEtD,YAAY,UAAuC,EAAE;QACnD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAA0B;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC;QACjE,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,wBAAwB;YAC/C,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,6DAA6D;YACtG,SAAS,EAAE;gBACT,EAAE,EAAE,IAAI;gBACR,WAAW,EAAE,iBAAiB;gBAC9B,KAAK,EAAE,eAAe,CAAC,UAAU,CAAC;aACnC;YACD,QAAQ,EAAE;gBACR,UAAU;aACX;SACF,CAAC;IACJ,CAAC;CACF"}