@useconductor/conductor 1.0.0

package/dist/plugins/builtin/shell.js

@@ -0,0 +1,310 @@
+import { execFile } from 'child_process';
+import { promisify } from 'util';
+import * as fs from 'fs/promises';
+import * as path from 'path';
+const execFileAsync = promisify(execFile);
+// Whitelist of safe commands — no shell interpretation
+const SAFE_COMMANDS = new Set([
+    'ls',
+    'cat',
+    'head',
+    'tail',
+    'wc',
+    'grep',
+    'find',
+    'stat',
+    'file',
+    'pwd',
+    'whoami',
+    'date',
+    'uptime',
+    'df',
+    'du',
+    'free',
+    'top',
+    'git',
+    'node',
+    'npm',
+    'pnpm',
+    'yarn',
+    'python',
+    'python3',
+    'pip',
+    'pip3',
+    'make',
+    'cmake',
+    'cargo',
+    'go',
+    'rustc',
+    'gcc',
+    'clang',
+    'curl',
+    'wget',
+    'ssh',
+    'scp',
+    'rsync',
+    'docker',
+    'docker-compose',
+    'kubectl',
+    'helm',
+    'terraform',
+    'ansible',
+    'vault',
+    'psql',
+    'mysql',
+    'mongosh',
+    'redis-cli',
+    'jq',
+    'yq',
+    'sed',
+    'awk',
+    'cut',
+    'sort',
+    'uniq',
+    'tr',
+    'xargs',
+    'zip',
+    'unzip',
+    'tar',
+    'gzip',
+    'chmod',
+    'chown',
+    'mkdir',
+    'rmdir',
+    'cp',
+    'mv',
+    'rm',
+    'touch',
+    'ln',
+    'diff',
+    'patch',
+    'md5sum',
+    'sha256sum',
+    'sha1sum',
+]);
+// Dangerous patterns that are never allowed even with approval
+const DANGEROUS_PATTERNS = [
+    /\brm\s+-rf\s+\/\b/,
+    /\bmkfs\b/,
+    /\bdd\s+if\b/,
+    /\bchmod\s+[0-7]*777\s+\/\b/,
+    /\bchown\s+-R\s+\S+\s+\/\b/,
+    /\b:\(\)\{\s*:\|:\s*&\s*\}\s*;:\b/, // fork bomb
+    /\/dev\/(zero|null|random|urandom)/,
+    /\bnc\s+-[el]/, // netcat listener
+    /\bpython.*-c.*import.*socket/,
+    /\bbash\s+-i/,
+    /\beval\b/,
+    /\bcurl.*\|\s*(ba)?sh\b/,
+    /\bwget.*-O-.*\|\s*(ba)?sh\b/,
+];
+function isDangerous(cmd) {
+    for (const pattern of DANGEROUS_PATTERNS) {
+        if (pattern.test(cmd)) {
+            return { safe: false, reason: `Command matches dangerous pattern: ${pattern.source}` };
+        }
+    }
+    return { safe: true };
+}
+function validatePathArg(arg) {
+    const resolved = path.resolve(arg);
+    if (resolved.includes('..') && !resolved.startsWith(process.cwd())) {
+        throw new Error(`COND-FS-001: Path traversal detected: ${arg}. Paths must be within the current working directory.`);
+    }
+    return resolved;
+}
+export class ShellPlugin {
+    name = 'shell';
+    description = 'Safe shell command execution with approval workflow and path validation';
+    version = '1.0.0';
+    async initialize(_conductor) { }
+    isConfigured() {
+        return true;
+    }
+    async runCommand(cmd, args, cwd) {
+        const workingDir = cwd ? validatePathArg(cwd) : process.cwd();
+        try {
+            const { stdout, stderr } = await execFileAsync(cmd, args, {
+                timeout: 120000,
+                maxBuffer: 10 * 1024 * 1024, // 10MB
+                cwd: workingDir,
+            });
+            return { stdout: stdout.trim(), stderr: stderr.trim(), exitCode: 0 };
+        }
+        catch (err) {
+            if (err && typeof err === 'object' && 'code' in err) {
+                const e = err;
+                return {
+                    stdout: (e.stdout ?? '').trim(),
+                    stderr: (e.stderr ?? '').trim(),
+                    exitCode: e.code ?? 1,
+                };
+            }
+            throw err;
+        }
+    }
+    getTools() {
+        return [
+            {
+                name: 'shell_run',
+                description: 'Run a shell command. Commands are validated against a safety whitelist. Dangerous commands are blocked entirely.',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        command: { type: 'string', description: 'Command to run (e.g. "ls -la")' },
+                        cwd: { type: 'string', description: 'Working directory (must be within current project)' },
+                    },
+                    required: ['command'],
+                },
+                handler: async (input) => {
+                    const parts = input.command.trim().split(/\s+/);
+                    const cmd = parts[0];
+                    if (!cmd)
+                        throw new Error('COND-SYS-001: Empty command provided to shell executor.');
+                    if (!SAFE_COMMANDS.has(cmd)) {
+                        throw new Error(`COND-SEC-001: Command "${cmd}" is not in the safe command whitelist. Allowed commands: ${Array.from(SAFE_COMMANDS).sort().join(', ')}. Review the whitelist in shell.ts for approved commands.`);
+                    }
+                    const safety = isDangerous(input.command);
+                    if (!safety.safe)
+                        throw new Error(`COND-SEC-002: ${safety.reason ?? 'Command blocked by safety check'}. Review DANGEROUS_PATTERNS in shell.ts for blocked patterns.`);
+                    const result = await this.runCommand(cmd, parts.slice(1), input.cwd);
+                    return {
+                        command: input.command,
+                        cwd: input.cwd ?? process.cwd(),
+                        exit_code: result.exitCode,
+                        stdout: result.stdout,
+                        stderr: result.stderr,
+                    };
+                },
+                requiresApproval: true,
+            },
+            {
+                name: 'shell_read_file',
+                description: 'Read the contents of a file',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        path: { type: 'string', description: 'File path to read' },
+                        limit: { type: 'number', description: 'Maximum bytes to read', default: 100000 },
+                    },
+                    required: ['path'],
+                },
+                handler: async (input) => {
+                    const filePath = validatePathArg(input.path);
+                    const stat = await fs.stat(filePath);
+                    if (!stat.isFile())
+                        throw new Error(`COND-FS-002: Not a file: ${input.path}. Verify the path exists and is a regular file.`);
+                    const limit = input.limit ?? 100000;
+                    if (stat.size > limit)
+                        throw new Error(`COND-FS-003: File too large (${stat.size} bytes). Limit: ${limit} bytes. Use shell_run with head command for large files, or increase the limit parameter.`);
+                    const content = await fs.readFile(filePath, 'utf-8');
+                    return { path: input.path, size: stat.size, content };
+                },
+            },
+            {
+                name: 'shell_write_file',
+                description: 'Write content to a file. Creates parent directories if needed.',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        path: { type: 'string', description: 'File path to write' },
+                        content: { type: 'string', description: 'Content to write' },
+                    },
+                    required: ['path', 'content'],
+                },
+                handler: async (input) => {
+                    const filePath = validatePathArg(input.path);
+                    await fs.mkdir(path.dirname(filePath), { recursive: true });
+                    await fs.writeFile(filePath, input.content, 'utf-8');
+                    return { path: input.path, bytes_written: Buffer.byteLength(input.content, 'utf-8') };
+                },
+                requiresApproval: true,
+            },
+            {
+                name: 'shell_list_dir',
+                description: 'List directory contents',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        path: { type: 'string', description: 'Directory path', default: '.' },
+                        recursive: { type: 'boolean', description: 'List recursively', default: false },
+                    },
+                },
+                handler: async (input) => {
+                    const dirPath = validatePathArg(input.path ?? '.');
+                    const stat = await fs.stat(dirPath);
+                    if (!stat.isDirectory())
+                        throw new Error(`COND-FS-004: Not a directory: ${input.path}. Verify the path exists and is a directory.`);
+                    if (input.recursive) {
+                        const { glob } = await import('glob');
+                        const matches = await glob(input.pattern ?? '**/*', { cwd: dirPath, nodir: false });
+                        return {
+                            path: input.path ?? '.',
+                            pattern: input.pattern ?? '**/*',
+                            entries: matches.slice(0, 500),
+                            truncated: matches.length > 500,
+                        };
+                    }
+                    const entries = await fs.readdir(dirPath, { withFileTypes: true });
+                    return {
+                        path: input.path ?? '.',
+                        entries: entries.map((e) => ({
+                            name: e.name,
+                            type: e.isDirectory() ? 'directory' : e.isFile() ? 'file' : 'other',
+                        })),
+                    };
+                },
+            },
+            {
+                name: 'shell_search_files',
+                description: 'Search for files by name pattern',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        path: { type: 'string', description: 'Directory to search in', default: '.' },
+                        pattern: { type: 'string', description: 'Glob pattern (e.g. "*.ts", "**/*.test.ts")' },
+                    },
+                    required: ['pattern'],
+                },
+                handler: async (input) => {
+                    const dirPath = validatePathArg(input.path ?? '.');
+                    const { glob } = await import('glob');
+                    const matches = await glob(input.pattern, { cwd: dirPath, nodir: false });
+                    return {
+                        path: input.path ?? '.',
+                        pattern: input.pattern,
+                        matches: matches.slice(0, 200),
+                        truncated: matches.length > 200,
+                    };
+                },
+            },
+            {
+                name: 'shell_search_content',
+                description: 'Search file contents using grep',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        pattern: { type: 'string', description: 'Regex pattern to search for' },
+                        path: { type: 'string', description: 'Directory to search in', default: '.' },
+                        include: { type: 'string', description: 'File glob to include (e.g. "*.ts")' },
+                    },
+                    required: ['pattern'],
+                },
+                handler: async (input) => {
+                    const dirPath = validatePathArg(input.path ?? '.');
+                    const args = ['-rn', '--color=never', input.pattern, dirPath];
+                    if (input.include)
+                        args.push('--include', input.include);
+                    const result = await this.runCommand('grep', args);
+                    if (result.exitCode === 1)
+                        return { pattern: input.pattern, matches: [] };
+                    if (result.exitCode > 1)
+                        throw new Error(`COND-SYS-002: Grep command failed with exit code ${result.exitCode}. Error: ${result.stderr}`);
+                    const lines = result.stdout.split('\n').slice(0, 100);
+                    return { pattern: input.pattern, matches: lines, truncated: result.stdout.split('\n').length > 100 };
+                },
+            },
+        ];
+    }
+}
+//# sourceMappingURL=shell.js.map

package/dist/plugins/builtin/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../../src/plugins/builtin/shell.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,uDAAuD;AACvD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,IAAI;IACJ,KAAK;IACL,MAAM;IACN,MAAM;IACN,IAAI;IACJ,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,KAAK;IACL,KAAK;IACL,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,SAAS;IACT,KAAK;IACL,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,IAAI;IACJ,OAAO;IACP,KAAK;IACL,OAAO;IACP,MAAM;IACN,MAAM;IACN,KAAK;IACL,KAAK;IACL,OAAO;IACP,QAAQ;IACR,gBAAgB;IAChB,SAAS;IACT,MAAM;IACN,WAAW;IACX,SAAS;IACT,OAAO;IACP,MAAM;IACN,OAAO;IACP,SAAS;IACT,WAAW;IACX,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,IAAI;IACJ,OAAO;IACP,KAAK;IACL,OAAO;IACP,KAAK;IACL,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,OAAO;IACP,IAAI;IACJ,MAAM;IACN,OAAO;IACP,QAAQ;IACR,WAAW;IACX,SAAS;CACV,CAAC,CAAC;AAEH,+DAA+D;AAC/D,MAAM,kBAAkB,GAAG;IACzB,mBAAmB;IACnB,UAAU;IACV,aAAa;IACb,4BAA4B;IAC5B,2BAA2B;IAC3B,kCAAkC,EAAE,YAAY;IAChD,mCAAmC;IACnC,cAAc,EAAE,kBAAkB;IAClC,8BAA8B;IAC9B,aAAa;IACb,UAAU;IACV,wBAAwB;IACxB,6BAA6B;CAC9B,CAAC;AAEF,SAAS,WAAW,CAAC,GAAW;IAC9B,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACzF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CACb,yCAAyC,GAAG,uDAAuD,CACpG,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,OAAO,WAAW;IACtB,IAAI,GAAG,OAAO,CAAC;IACf,WAAW,GAAG,yEAAyE,CAAC;IACxF,OAAO,GAAG,OAAO,CAAC;IAElB,KAAK,CAAC,UAAU,CAAC,UAAqB,IAAkB,CAAC;IACzD,YAAY;QACV,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,GAAW,EACX,IAAc,EACd,GAAY;QAEZ,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE;gBACxD,OAAO,EAAE,MAAM;gBACf,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO;gBACpC,GAAG,EAAE,UAAU;aAChB,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACvE,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;gBACpD,MAAM,CAAC,GAAG,GAA0D,CAAC;gBACrE,OAAO;oBACL,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;oBAC/B,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;oBAC/B,QAAQ,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC;iBACtB,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,QAAQ;QACN,OAAO;YACL;gBACE,IAAI,EAAE,WAAW;gBACjB,WAAW,EACT,kHAAkH;gBACpH,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;wBAC1E,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oDAAoD,EAAE;qBAC3F;oBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;iBACtB;gBACD,OAAO,EAAE,KAAK,EAAE,KAAwC,EAAE,EAAE;oBAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAChD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBAErB,IAAI,CAAC,GAAG;wBAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;oBACrF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC5B,MAAM,IAAI,KAAK,CACb,0BAA0B,GAAG,6DAA6D,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,2DAA2D,CACjM,CAAC;oBACJ,CAAC;oBAED,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBAC1C,IAAI,CAAC,MAAM,CAAC,IAAI;wBACd,MAAM,IAAI,KAAK,CACb,iBAAiB,MAAM,CAAC,MAAM,IAAI,iCAAiC,+DAA+D,CACnI,CAAC;oBAEJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;oBACrE,OAAO;wBACL,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;wBAC/B,SAAS,EAAE,MAAM,CAAC,QAAQ;wBAC1B,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;qBACtB,CAAC;gBACJ,CAAC;gBACD,gBAAgB,EAAE,IAAI;aACvB;YACD;gBACE,IAAI,EAAE,iBAAiB;gBACvB,WAAW,EAAE,6BAA6B;gBAC1C,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;wBAC1D,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM,EAAE;qBACjF;oBACD,QAAQ,EAAE,CAAC,MAAM,CAAC;iBACnB;gBACD,OAAO,EAAE,KAAK,EAAE,KAAuC,EAAE,EAAE;oBACzD,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC7C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACrC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;wBAChB,MAAM,IAAI,KAAK,CAAC,4BAA4B,KAAK,CAAC,IAAI,iDAAiD,CAAC,CAAC;oBAC3G,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC;oBACpC,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK;wBACnB,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,CAAC,IAAI,mBAAmB,KAAK,2FAA2F,CAC7J,CAAC;oBACJ,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBACrD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;gBACxD,CAAC;aACF;YACD;gBACE,IAAI,EAAE,kBAAkB;gBACxB,WAAW,EAAE,gEAAgE;gBAC7E,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE;wBAC3D,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kBAAkB,EAAE;qBAC7D;oBACD,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;iBAC9B;gBACD,OAAO,EAAE,KAAK,EAAE,KAAwC,EAAE,EAAE;oBAC1D,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC7C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC5D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBACrD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBACxF,CAAC;gBACD,gBAAgB,EAAE,IAAI;aACvB;YACD;gBACE,IAAI,EAAE,gBAAgB;gBACtB,WAAW,EAAE,yBAAyB;gBACtC,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE;wBACrE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE;qBAChF;iBACF;gBACD,OAAO,EAAE,KAAK,EAAE,KAA+D,EAAE,EAAE;oBACjF,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;oBACnD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;wBACrB,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,CAAC,IAAI,8CAA8C,CAAC,CAAC;oBAC7G,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;wBACpB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;wBACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;wBACpF,OAAO;4BACL,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,GAAG;4BACvB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,MAAM;4BAChC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;4BAC9B,SAAS,EAAE,OAAO,CAAC,MAAM,GAAG,GAAG;yBAChC,CAAC;oBACJ,CAAC;oBACD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;oBACnE,OAAO;wBACL,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,GAAG;wBACvB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;4BACZ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;yBACpE,CAAC,CAAC;qBACJ,CAAC;gBACJ,CAAC;aACF;YACD;gBACE,IAAI,EAAE,oBAAoB;gBAC1B,WAAW,EAAE,kCAAkC;gBAC/C,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE,OAAO,EAAE,GAAG,EAAE;wBAC7E,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4CAA4C,EAAE;qBACvF;oBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;iBACtB;gBACD,OAAO,EAAE,KAAK,EAAE,KAAyC,EAAE,EAAE;oBAC3D,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;oBACnD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;oBACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;oBAC1E,OAAO;wBACL,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,GAAG;wBACvB,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;wBAC9B,SAAS,EAAE,OAAO,CAAC,MAAM,GAAG,GAAG;qBAChC,CAAC;gBACJ,CAAC;aACF;YACD;gBACE,IAAI,EAAE,sBAAsB;gBAC5B,WAAW,EAAE,iCAAiC;gBAC9C,WAAW,EAAE;oBACX,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE;wBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6BAA6B,EAAE;wBACvE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,wBAAwB,EAAE,OAAO,EAAE,GAAG,EAAE;wBAC7E,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oCAAoC,EAAE;qBAC/E;oBACD,QAAQ,EAAE,CAAC,SAAS,CAAC;iBACtB;gBACD,OAAO,EAAE,KAAK,EAAE,KAA2D,EAAE,EAAE;oBAC7E,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;oBACnD,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC9D,IAAI,KAAK,CAAC,OAAO;wBAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;oBACzD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;oBACnD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;wBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;oBAC1E,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC;wBACrB,MAAM,IAAI,KAAK,CACb,oDAAoD,MAAM,CAAC,QAAQ,YAAY,MAAM,CAAC,MAAM,EAAE,CAC/F,CAAC;oBACJ,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;oBACtD,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBACvG,CAAC;aACF;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/plugins/builtin/slack.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Slack Plugin — TheAlxLabs / Conductor
+ *
+ * Send messages, read channels, search, and manage Slack workspaces.
+ * Uses Slack Web API with a Bot User OAuth Token.
+ *
+ * Setup:
+ *   1. Go to https://api.slack.com/apps and create an app
+ *   2. Under "OAuth & Permissions", add these bot scopes:
+ *      chat:write, channels:read, channels:history, users:read,
+ *      search:read, files:write, reactions:write, im:write
+ *   3. Install the app to your workspace and copy the Bot User OAuth Token
+ *   4. Run: conductor slack setup
+ *      (or: conductor plugins config slack bot_token xoxb-...)
+ *
+ * Keychain entry: slack/bot_token
+ */
+import { Plugin, PluginTool } from '../manager.js';
+import { Conductor } from '../../core/conductor.js';
+export declare class SlackPlugin implements Plugin {
+    name: string;
+    description: string;
+    version: string;
+    private keychain;
+    initialize(conductor: Conductor): Promise<void>;
+    isConfigured(): boolean;
+    private getToken;
+    private slackFetch;
+    getTools(): PluginTool[];
+}
+//# sourceMappingURL=slack.d.ts.map

package/dist/plugins/builtin/slack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack.d.ts","sourceRoot":"","sources":["../../../src/plugins/builtin/slack.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAGpD,qBAAa,WAAY,YAAW,MAAM;IACxC,IAAI,SAAW;IACf,WAAW,SAAuE;IAClF,OAAO,SAAW;IAElB,OAAO,CAAC,QAAQ,CAAY;IAEtB,UAAU,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,YAAY,IAAI,OAAO;YAIT,QAAQ;YAQR,UAAU;IA6CxB,QAAQ,IAAI,UAAU,EAAE;CA4OzB"}

package/dist/plugins/builtin/slack.js

@@ -0,0 +1,295 @@
+/**
+ * Slack Plugin — TheAlxLabs / Conductor
+ *
+ * Send messages, read channels, search, and manage Slack workspaces.
+ * Uses Slack Web API with a Bot User OAuth Token.
+ *
+ * Setup:
+ *   1. Go to https://api.slack.com/apps and create an app
+ *   2. Under "OAuth & Permissions", add these bot scopes:
+ *      chat:write, channels:read, channels:history, users:read,
+ *      search:read, files:write, reactions:write, im:write
+ *   3. Install the app to your workspace and copy the Bot User OAuth Token
+ *   4. Run: conductor slack setup
+ *      (or: conductor plugins config slack bot_token xoxb-...)
+ *
+ * Keychain entry: slack/bot_token
+ */
+import { Keychain } from '../../security/keychain.js';
+export class SlackPlugin {
+    name = 'slack';
+    description = 'Send messages, read channels, search, and manage Slack workspaces';
+    version = '1.0.0';
+    keychain;
+    async initialize(conductor) {
+        this.keychain = new Keychain(conductor.getConfig().getConfigDir());
+    }
+    isConfigured() {
+        return true;
+    }
+    async getToken() {
+        const token = await this.keychain.get('slack', 'bot_token');
+        if (!token) {
+            throw new Error('Slack bot token not configured.\nRun: conductor slack setup');
+        }
+        return token;
+    }
+    async slackFetch(method, params = {}, httpMethod = 'GET') {
+        const token = await this.getToken();
+        const base = 'https://slack.com/api';
+        let url;
+        let init;
+        if (httpMethod === 'POST') {
+            url = `${base}/${method}`;
+            init = {
+                method: 'POST',
+                headers: {
+                    Authorization: `Bearer ${token}`,
+                    'Content-Type': 'application/json; charset=utf-8',
+                },
+                body: JSON.stringify(params),
+            };
+        }
+        else {
+            const qs = new URLSearchParams(Object.fromEntries(Object.entries(params)
+                .filter(([, v]) => v !== undefined && v !== null)
+                .map(([k, v]) => [k, String(v)]))).toString();
+            url = `${base}/${method}${qs ? '?' + qs : ''}`;
+            init = {
+                headers: { Authorization: `Bearer ${token}` },
+            };
+        }
+        const res = await fetch(url, init);
+        if (!res.ok)
+            throw new Error(`Slack HTTP ${res.status}: ${res.statusText}`);
+        const data = (await res.json());
+        if (!data.ok) {
+            throw new Error(`Slack API error: ${data.error ?? JSON.stringify(data)}`);
+        }
+        return data;
+    }
+    getTools() {
+        return [
+            // ── slack_send_message ─────────────────────────────────────────────────
+            {
+                name: 'slack_send_message',
+                description: 'Send a message to a Slack channel or user (DM)',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        channel: {
+                            type: 'string',
+                            description: 'Channel name (e.g. #general), channel ID, or user ID for DM',
+                        },
+                        text: {
+                            type: 'string',
+                            description: 'Message text (supports Slack markdown)',
+                        },
+                        thread_ts: {
+                            type: 'string',
+                            description: 'Thread timestamp to reply to (optional)',
+                        },
+                    },
+                    required: ['channel', 'text'],
+                },
+                requiresApproval: true,
+                handler: async ({ channel, text, thread_ts }) => {
+                    const data = await this.slackFetch('chat.postMessage', { channel, text, ...(thread_ts ? { thread_ts } : {}) }, 'POST');
+                    return {
+                        ok: true,
+                        channel: data.channel,
+                        ts: data.ts,
+                        message: data.message?.text,
+                    };
+                },
+            },
+            // ── slack_channels ─────────────────────────────────────────────────────
+            {
+                name: 'slack_channels',
+                description: 'List all public channels in the workspace',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        limit: {
+                            type: 'number',
+                            description: 'Max channels to return (default 50)',
+                        },
+                    },
+                },
+                handler: async ({ limit = 50 }) => {
+                    const data = await this.slackFetch('conversations.list', {
+                        limit,
+                        types: 'public_channel',
+                        exclude_archived: true,
+                    });
+                    return {
+                        count: data.channels.length,
+                        channels: data.channels.map((c) => ({
+                            id: c.id,
+                            name: c.name,
+                            topic: c.topic?.value || '',
+                            memberCount: c.num_members,
+                            isPrivate: c.is_private,
+                        })),
+                    };
+                },
+            },
+            // ── slack_read_channel ─────────────────────────────────────────────────
+            {
+                name: 'slack_read_channel',
+                description: 'Read recent messages from a Slack channel',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        channel: {
+                            type: 'string',
+                            description: 'Channel ID or name (e.g. C01234 or general)',
+                        },
+                        limit: {
+                            type: 'number',
+                            description: 'Number of messages to fetch (default 20)',
+                        },
+                    },
+                    required: ['channel'],
+                },
+                handler: async ({ channel, limit = 20 }) => {
+                    // Resolve name to ID if needed
+                    let channelId = channel;
+                    if (!channel.startsWith('C') && !channel.startsWith('D')) {
+                        const list = await this.slackFetch('conversations.list', {
+                            limit: 200,
+                            types: 'public_channel,private_channel',
+                        });
+                        const name = channel.replace(/^#/, '');
+                        const found = list.channels.find((c) => c.name === name);
+                        if (!found)
+                            throw new Error(`Channel "${channel}" not found`);
+                        channelId = found.id;
+                    }
+                    const data = await this.slackFetch('conversations.history', {
+                        channel: channelId,
+                        limit,
+                    });
+                    return {
+                        channel: channelId,
+                        count: data.messages.length,
+                        messages: data.messages.map((m) => ({
+                            ts: m.ts,
+                            user: m.user ?? m.bot_id ?? 'unknown',
+                            text: m.text,
+                            threadReplies: m.reply_count ?? 0,
+                            reactions: (m.reactions ?? []).map((r) => `${r.name}×${r.count}`),
+                        })),
+                    };
+                },
+            },
+            // ── slack_search ───────────────────────────────────────────────────────
+            {
+                name: 'slack_search',
+                description: 'Search messages across all Slack channels',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        query: {
+                            type: 'string',
+                            description: 'Search query (supports Slack modifiers like in:#channel, from:@user)',
+                        },
+                        limit: {
+                            type: 'number',
+                            description: 'Max results (default 10)',
+                        },
+                    },
+                    required: ['query'],
+                },
+                handler: async ({ query, limit = 10 }) => {
+                    const data = await this.slackFetch('search.messages', {
+                        query,
+                        count: limit,
+                        sort: 'timestamp',
+                        sort_dir: 'desc',
+                    });
+                    const messages = data.messages?.matches ?? [];
+                    return {
+                        total: data.messages?.total ?? 0,
+                        count: messages.length,
+                        results: messages.map((m) => ({
+                            channel: m.channel?.name ?? m.channel?.id,
+                            user: m.username ?? m.user,
+                            text: m.text,
+                            ts: m.ts,
+                            permalink: m.permalink,
+                        })),
+                    };
+                },
+            },
+            // ── slack_users ────────────────────────────────────────────────────────
+            {
+                name: 'slack_users',
+                description: 'List workspace members or look up a specific user',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        query: {
+                            type: 'string',
+                            description: 'Filter by name or email (optional)',
+                        },
+                        limit: {
+                            type: 'number',
+                            description: 'Max users to return (default 50)',
+                        },
+                    },
+                },
+                handler: async ({ query, limit = 50 }) => {
+                    const data = await this.slackFetch('users.list', { limit: 200 });
+                    let members = data.members.filter((u) => !u.is_bot && !u.deleted && u.id !== 'USLACKBOT');
+                    if (query) {
+                        const q = query.toLowerCase();
+                        members = members.filter((u) => (u.real_name ?? '').toLowerCase().includes(q) ||
+                            (u.name ?? '').toLowerCase().includes(q) ||
+                            (u.profile?.email ?? '').toLowerCase().includes(q));
+                    }
+                    return {
+                        count: Math.min(members.length, limit),
+                        users: members.slice(0, limit).map((u) => ({
+                            id: u.id,
+                            name: u.real_name ?? u.name,
+                            username: u.name,
+                            email: u.profile?.email ?? null,
+                            title: u.profile?.title ?? null,
+                            timezone: u.tz ?? null,
+                        })),
+                    };
+                },
+            },
+            // ── slack_add_reaction ─────────────────────────────────────────────────
+            {
+                name: 'slack_add_reaction',
+                description: 'Add an emoji reaction to a Slack message',
+                inputSchema: {
+                    type: 'object',
+                    properties: {
+                        channel: {
+                            type: 'string',
+                            description: 'Channel ID containing the message',
+                        },
+                        timestamp: {
+                            type: 'string',
+                            description: 'Message timestamp (ts field)',
+                        },
+                        emoji: {
+                            type: 'string',
+                            description: 'Emoji name without colons (e.g. "thumbsup", "white_check_mark")',
+                        },
+                    },
+                    required: ['channel', 'timestamp', 'emoji'],
+                },
+                requiresApproval: true,
+                handler: async ({ channel, timestamp, emoji }) => {
+                    await this.slackFetch('reactions.add', { channel, timestamp, name: emoji.replace(/:/g, '') }, 'POST');
+                    return { ok: true, emoji, channel, timestamp };
+                },
+            },
+        ];
+    }
+}
+//# sourceMappingURL=slack.js.map