@wunderio/wdrmcp 0.1.1

package/LICENSE

@@ -0,0 +1,185 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined in Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity exercising
+      permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or Object
+      form, made available under the License, as indicated by a copyright
+      notice that is included in or attached to the work (an example is
+      provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original Work and any Derivative Works thereof, and any modifications
+      thereto or additions to the Work or Derivative Works thereof, and any
+      larger work that includes the Work or such Derivative Works, submitted
+      to, or arising from contributions by, You to Licensor, including but
+      not limited to any communication that is distinctly identified as such
+      (including without limitation source code, object code, patches, and
+      documentation created or produced by You or based on the Work).
+
+      "Contributor" shall mean Licensor and any Legal Entity on behalf of
+      whom a Contribution has been received by Licensor and subsequently
+      incorporated within the Work.
+
+      "Patent Claims" of a Contributor shall mean the set of patent claims
+      owned or controlled by such Contributor, whether already acquired or
+      hereafter acquired, that would be infringed by some manner, permitted
+      by this License, of making, using, or selling its Contributions.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those Patent Claims of such
+      Contributor that are necessarily infringed by Contribution(s) that
+      would not have infringed the Patent Claims but for the combination of
+      such Contribution(s) with the Work to which such Contribution(s) were
+      submitted.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file, then any
+          Derivative Works that You distribute must include a readable
+          copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE from the Work, provided that
+          such additional attribution notices cannot be construed as
+          modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions of this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contribution.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2024 Wunder
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,141 @@
+# @wunderio/wdrmcp
+
+A generic MCP (Model Context Protocol) server that dynamically loads tool definitions from YAML configuration files and executes them in Docker containers or proxies them to remote MCP servers.
+
+Built with the [official MCP TypeScript SDK](https://github.com/modelcontextprotocol/typescript-sdk).
+
+## Features
+
+- **YAML-driven tool definitions** — define tools declaratively, no code changes needed
+- **Docker container execution** — run commands in Docker containers with security validation
+- **MCP server proxying** — proxy tool calls to remote MCP servers via HTTP JSON-RPC
+- **Dynamic tool discovery** — automatically fetch and expose tools from remote MCP servers
+- **Security** — container ownership validation, command injection prevention, argument validation
+- **DDEV integration** — built-in support for DDEV container naming and project scoping
+
+## Installation
+
+```bash
+npm install -g @wunderio/wdrmcp
+```
+
+Or use directly with npx:
+
+```bash
+npx @wunderio/wdrmcp --tools-config /path/to/tools-config
+```
+
+## Usage
+
+### CLI
+
+```bash
+wdrmcp --tools-config /path/to/tools-config [options]
+```
+
+**Options:**
+
+| Flag | Description | Default |
+|------|-------------|---------|
+| `--tools-config <path>` | Path to YAML tool config directory | *(required)* |
+| `--log-level <level>` | Log level (debug, info, warn, error) | `info` |
+| `--log-file <path>` | Log file path | `/tmp/wdrmcp.log` |
+
+**Environment variables:**
+
+| Variable | Description | Default |
+|----------|-------------|---------|
+| `DDEV_PROJECT` | DDEV project name | `default-project` |
+| `HOST_PROJECT_ROOT` | Host filesystem project root | `/workspace` |
+| `CONTAINER_PROJECT_ROOT` | Container filesystem project root | `/var/www/html` |
+
+### VS Code / GitHub Copilot Configuration
+
+```json
+{
+  "servers": {
+    "wdrmcp": {
+      "command": "npx",
+      "args": ["-y", "@wunderio/wdrmcp", "--tools-config", "/path/to/tools-config"],
+      "env": {
+        "DDEV_PROJECT": "my-project"
+      }
+    }
+  }
+}
+```
+
+## Tool Configuration Format
+
+Tools are defined in YAML files within the tools-config directory. Each file must contain a `tools` array.
+
+### Command Tool
+
+Executes shell commands in Docker containers:
+
+```yaml
+tools:
+  - name: my_tool
+    enabled: true
+    description: "What this tool does"
+    type: command
+    command_template: "my-command {arg1} {arg2}"
+    container: "ddev-{DDEV_PROJECT}-web"
+    user: "www-data"
+    shell: "/bin/bash"
+    default_args:
+      arg2: "default-value"
+    disallowed_commands:
+      - "rm"
+      - "shutdown"
+    validation_rules:
+      - pattern: "dangerous-pattern"
+        message: "This pattern is not allowed"
+    input_schema:
+      type: object
+      properties:
+        arg1:
+          type: string
+          description: "First argument"
+      required:
+        - arg1
+```
+
+### MCP Server Proxy Tool
+
+Proxies tool calls to a remote MCP server:
+
+```yaml
+tools:
+  - name: remote_tools
+    enabled: true
+    description: "Remote MCP server"
+    type: mcp_server
+    server_url: "http://localhost:8080"
+    expose_remote_tools: true
+    tool_prefix: "remote_"
+    timeout: 30
+    auth_token: "my-token"
+    verify_ssl: true
+```
+
+## Architecture
+
+```
+src/
+├── index.ts           # CLI entry point
+├── server.ts          # MCP server setup (tool registration with Zod schemas)
+├── registry.ts        # Tool registry (YAML loading, executor creation)
+├── executors/
+│   ├── base.ts        # Base executor interface
+│   ├── command.ts     # Docker container command executor
+│   └── mcp-proxy.ts   # Remote MCP server proxy executor
+├── docker.ts          # Docker exec & container validation
+├── config.ts          # CLI argument parsing
+├── logger.ts          # Stderr-only logger
+└── types.ts           # TypeScript type definitions
+```
+
+## License
+
+MIT

package/dist/config.d.ts

@@ -0,0 +1,6 @@
+/**
+ * CLI argument parsing and configuration loading.
+ */
+import type { BridgeConfig } from "./types.js";
+export declare function parseArgs(argv: string[]): BridgeConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAmB/C,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,YAAY,CA2CtD"}

package/dist/config.js

@@ -0,0 +1,59 @@
+/**
+ * CLI argument parsing and configuration loading.
+ */
+function printUsage() {
+    console.error(`
+Usage: wdrmcp --tools-config <path> [options]
+
+Options:
+  --tools-config <path>   Path to directory containing YAML tool configuration files (required)
+  --log-level <level>     Log level: debug, info, warn, error (default: info)
+  --log-file <path>       Path to log file (default: /tmp/wdrmcp.log)
+  --help                  Show this help message
+
+Environment variables:
+  DDEV_PROJECT            DDEV project name (default: "default-project")
+  HOST_PROJECT_ROOT       Host filesystem project root (default: /workspace)
+  CONTAINER_PROJECT_ROOT  Container filesystem project root (default: /var/www/html)
+`);
+}
+export function parseArgs(argv) {
+    const args = argv.slice(2); // Skip node and script path.
+    let toolsConfigPath;
+    let logLevel = "info";
+    let logFile = "/tmp/wdrmcp.log";
+    for (let i = 0; i < args.length; i++) {
+        switch (args[i]) {
+            case "--tools-config":
+                toolsConfigPath = args[++i];
+                break;
+            case "--log-level":
+                logLevel = args[++i];
+                break;
+            case "--log-file":
+                logFile = args[++i];
+                break;
+            case "--help":
+                printUsage();
+                process.exit(0);
+            default:
+                console.error(`Unknown argument: ${args[i]}`);
+                printUsage();
+                process.exit(1);
+        }
+    }
+    if (!toolsConfigPath) {
+        console.error("Error: --tools-config is required");
+        printUsage();
+        process.exit(1);
+    }
+    return {
+        toolsConfigPath,
+        ddevProject: process.env.DDEV_PROJECT ?? "default-project",
+        logLevel,
+        logFile,
+        hostProjectRoot: process.env.HOST_PROJECT_ROOT ?? "/workspace",
+        containerProjectRoot: process.env.CONTAINER_PROJECT_ROOT ?? "/var/www/html",
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,SAAS,UAAU;IACjB,OAAO,CAAC,KAAK,CAAC;;;;;;;;;;;;;CAaf,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,6BAA6B;IAEzD,IAAI,eAAmC,CAAC;IACxC,IAAI,QAAQ,GAA6B,MAAM,CAAC;IAChD,IAAI,OAAO,GAAuB,iBAAiB,CAAC;IAEpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,KAAK,gBAAgB;gBACnB,eAAe,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAC5B,MAAM;YACR,KAAK,aAAa;gBAChB,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAA6B,CAAC;gBACjD,MAAM;YACR,KAAK,YAAY;gBACf,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBACpB,MAAM;YACR,KAAK,QAAQ;gBACX,UAAU,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB;gBACE,OAAO,CAAC,KAAK,CAAC,qBAAqB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC9C,UAAU,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACnD,UAAU,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO;QACL,eAAe;QACf,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,iBAAiB;QAC1D,QAAQ;QACR,OAAO;QACP,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,YAAY;QAC9D,oBAAoB,EAClB,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,eAAe;KACxD,CAAC;AACJ,CAAC"}

package/dist/docker.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Docker executor — runs commands in Docker containers with security validation.
+ *
+ * Container ownership is validated once and cached. UID resolution is cached.
+ * Static safety checks (shell name, etc.) happen at construction time.
+ */
+export interface DockerExecOptions {
+    container: string;
+    command: string[];
+    user?: string;
+    shell?: string;
+}
+/**
+ * Validate that a container belongs to the expected DDEV project.
+ * Result is cached — subsequent calls for the same container return immediately.
+ */
+export declare function validateContainer(container: string, ddevProject: string): Promise<void>;
+/**
+ * Validate that static values don't contain dangerous shell characters.
+ * Call once at construction time, not per-execution.
+ */
+export declare function validateStaticSafety(values: string[]): void;
+/**
+ * Resolve `auto:uid-from-path` user syntax to an actual UID.
+ * Cached per container+path combination.
+ *
+ * Format: "auto:uid-from-path" or "auto:uid-from-path:/var/www/html"
+ */
+export declare function resolveContainerUser(user: string, container: string): Promise<string>;
+/**
+ * Execute a command inside a Docker container.
+ */
+export declare function dockerExec(options: DockerExecOptions): Promise<string>;
+//# sourceMappingURL=docker.d.ts.map

package/dist/docker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.d.ts","sourceRoot":"","sources":["../src/docker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAcH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAU3D;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CA8BjB;AAED;;GAEG;AACH,wBAAsB,UAAU,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ5E"}

package/dist/docker.js

@@ -0,0 +1,115 @@
+/**
+ * Docker executor — runs commands in Docker containers with security validation.
+ *
+ * Container ownership is validated once and cached. UID resolution is cached.
+ * Static safety checks (shell name, etc.) happen at construction time.
+ */
+import { execFile } from "node:child_process";
+import { getLogger } from "./logger.js";
+/** Characters considered dangerous in command arguments. */
+const DANGEROUS_CHARS = [";", "|", "&", ">", "<", "$", "`", "\n", "\r"];
+/** Cache of validated containers: "container:project" → true. */
+const validatedContainers = new Map();
+/** Cache of resolved UIDs: "container:path" → uid string. */
+const uidCache = new Map();
+/**
+ * Validate that a container belongs to the expected DDEV project.
+ * Result is cached — subsequent calls for the same container return immediately.
+ */
+export async function validateContainer(container, ddevProject) {
+    const cacheKey = `${container}:${ddevProject}`;
+    if (validatedContainers.has(cacheKey))
+        return;
+    const log = getLogger();
+    log.debug(`Validating container "${container}" for project "${ddevProject}"`);
+    try {
+        const format = `{{index .Config.Labels "com.ddev.site-name"}}`;
+        const labelValue = (await execCommand("docker", ["inspect", "--format", format, container])).trim();
+        if (ddevProject !== "default-project" && labelValue !== ddevProject) {
+            throw new Error(`Container "${container}" belongs to "${labelValue}", not "${ddevProject}"`);
+        }
+    }
+    catch (e) {
+        if (e.message.includes("belongs to"))
+            throw e;
+        // Container doesn't exist yet or docker inspect failed — warn but allow.
+        log.warn(`Container validation warning: ${e.message}`);
+    }
+    validatedContainers.set(cacheKey, true);
+    log.debug(`Container "${container}" validated (cached)`);
+}
+/**
+ * Validate that static values don't contain dangerous shell characters.
+ * Call once at construction time, not per-execution.
+ */
+export function validateStaticSafety(values) {
+    for (const val of values) {
+        for (const char of DANGEROUS_CHARS) {
+            if (val.includes(char)) {
+                throw new Error(`Dangerous character "${char}" in static value: "${val}"`);
+            }
+        }
+    }
+}
+/**
+ * Resolve `auto:uid-from-path` user syntax to an actual UID.
+ * Cached per container+path combination.
+ *
+ * Format: "auto:uid-from-path" or "auto:uid-from-path:/var/www/html"
+ */
+export async function resolveContainerUser(user, container) {
+    if (!user.startsWith("auto:uid-from-path"))
+        return user;
+    const parts = user.split(":");
+    const targetPath = parts.length > 2 ? parts[2] : "/var/www/html";
+    const cacheKey = `${container}:${targetPath}`;
+    const cached = uidCache.get(cacheKey);
+    if (cached)
+        return cached;
+    const log = getLogger();
+    try {
+        const result = await dockerExec({
+            container,
+            command: [`stat -c %u ${targetPath}`],
+            user: "root",
+            shell: "/bin/sh",
+        });
+        const uid = result.trim();
+        if (uid) {
+            log.info(`Resolved auto:uid-from-path:${targetPath} → UID ${uid} (cached)`);
+            uidCache.set(cacheKey, uid);
+            return uid;
+        }
+    }
+    catch (e) {
+        log.warn(`Error resolving UID: ${e}. Falling back to www-data`);
+    }
+    uidCache.set(cacheKey, "www-data");
+    return "www-data";
+}
+/**
+ * Execute a command inside a Docker container.
+ */
+export async function dockerExec(options) {
+    const { container, command, user, shell = "/bin/bash" } = options;
+    const dockerArgs = ["exec"];
+    if (user)
+        dockerArgs.push("-u", user);
+    dockerArgs.push(container, shell, "-c", command.join(" "));
+    return execCommand("docker", dockerArgs);
+}
+/**
+ * Async wrapper around child_process.execFile.
+ */
+function execCommand(cmd, args) {
+    return new Promise((resolve, reject) => {
+        execFile(cmd, args, { maxBuffer: 10 * 1024 * 1024, timeout: 120_000 }, (error, stdout, stderr) => {
+            if (error) {
+                reject(new Error(`Command failed: ${cmd} ${args.join(" ")}\n${stderr?.trim() || error.message}`));
+                return;
+            }
+            resolve(stdout);
+        });
+    });
+}
+//# sourceMappingURL=docker.js.map

package/dist/docker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.js","sourceRoot":"","sources":["../src/docker.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,4DAA4D;AAC5D,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAExE,iEAAiE;AACjE,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAmB,CAAC;AAEvD,6DAA6D;AAC7D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;AAS3C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAiB,EACjB,WAAmB;IAEnB,MAAM,QAAQ,GAAG,GAAG,SAAS,IAAI,WAAW,EAAE,CAAC;IAC/C,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO;IAE9C,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,GAAG,CAAC,KAAK,CAAC,yBAAyB,SAAS,kBAAkB,WAAW,GAAG,CAAC,CAAC;IAE9E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,+CAA+C,CAAC;QAC/D,MAAM,UAAU,GAAG,CACjB,MAAM,WAAW,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CACxE,CAAC,IAAI,EAAE,CAAC;QAET,IAAI,WAAW,KAAK,iBAAiB,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CACb,cAAc,SAAS,iBAAiB,UAAU,WAAW,WAAW,GAAG,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,MAAM,CAAC,CAAC;QACzD,yEAAyE;QACzE,GAAG,CAAC,IAAI,CAAC,iCAAkC,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,mBAAmB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACxC,GAAG,CAAC,KAAK,CAAC,cAAc,SAAS,sBAAsB,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAgB;IACnD,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,uBAAuB,GAAG,GAAG,CAC1D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAY,EACZ,SAAiB;IAEjB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC;QAAE,OAAO,IAAI,CAAC;IAExD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;IACjE,MAAM,QAAQ,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;IAE9C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;YAC9B,SAAS;YACT,OAAO,EAAE,CAAC,cAAc,UAAU,EAAE,CAAC;YACrC,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,IAAI,CAAC,+BAA+B,UAAU,UAAU,GAAG,WAAW,CAAC,CAAC;YAC5E,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC5B,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,4BAA4B,CAAC,CAAC;IAClE,CAAC;IAED,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACnC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAA0B;IACzD,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC;IAElE,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,IAAI,IAAI;QAAE,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAE3D,OAAO,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,GAAW,EAAE,IAAc;IAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CACN,GAAG,EACH,IAAI,EACJ,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EACjD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACxB,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CACJ,IAAI,KAAK,CACP,mBAAmB,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE,CAC/E,CACF,CAAC;gBACF,OAAO;YACT,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/executors/base.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=base.d.ts.map

package/dist/executors/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../src/executors/base.ts"],"names":[],"mappings":""}

package/dist/executors/base.js

@@ -0,0 +1,4 @@
+export {};
+// This file is intentionally empty — the abstract base class has been removed.
+// Executors now implement the ToolExecutor interface directly from types.ts.
+//# sourceMappingURL=base.js.map

package/dist/executors/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/executors/base.ts"],"names":[],"mappings":";AAAA,+EAA+E;AAC/E,6EAA6E"}

package/dist/executors/command.d.ts

@@ -0,0 +1,37 @@
+/**
+ * CommandToolExecutor — executes shell commands in Docker containers
+ * with argument substitution ({placeholder} syntax).
+ *
+ * Refactored from the Python version with these improvements:
+ *  - Static safety checks happen at construction time (not per-call)
+ *  - Container validation and UID resolution are cached in docker.ts
+ *  - Path normalization is an external preprocessor (not baked in)
+ *  - No abstract base class; implements ToolExecutor interface directly
+ */
+import type { ToolExecutionResult, ToolExecutor, ValidationRule } from "../types.js";
+export interface CommandExecutorOptions {
+    commandTemplate: string;
+    container: string;
+    ddevProject: string;
+    user?: string;
+    shell?: string;
+    defaultArgs?: Record<string, string>;
+    disallowedCommands?: string[];
+    validationRules?: ValidationRule[];
+}
+export declare class CommandToolExecutor implements ToolExecutor {
+    private readonly commandTemplate;
+    private readonly container;
+    private readonly ddevProject;
+    private readonly user;
+    private readonly shell;
+    private readonly defaultArgs;
+    private readonly disallowedCommands;
+    private readonly validationRules;
+    constructor(options: CommandExecutorOptions);
+    execute(args: Record<string, unknown>): Promise<ToolExecutionResult>;
+    validateArguments(args: Record<string, unknown>): void;
+    /** Check validation rules against a value. Returns error message or null. */
+    private checkRules;
+}
+//# sourceMappingURL=command.d.ts.map

package/dist/executors/command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../src/executors/command.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,OAAO,KAAK,EAAE,mBAAmB,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAErF,MAAM,WAAW,sBAAsB;IACrC,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;CACpC;AAED,qBAAa,mBAAoB,YAAW,YAAY;IACtD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAyB;IACrD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAc;IACjD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmB;gBAEvC,OAAO,EAAE,sBAAsB;IAcrC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAsD1E,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAiBtD,6EAA6E;IAC7E,OAAO,CAAC,UAAU;CAQnB"}