@yuaone/tools 0.1.0

package/dist/validators.js

@@ -0,0 +1,218 @@
+/**
+ * @yuaone/tools — Common validation utilities
+ *
+ * Security-first validators for path traversal, shell injection,
+ * sensitive file detection, binary detection, and output truncation.
+ *
+ * Security rules SSOT: @yuaone/core/security.ts
+ * This module delegates to the SSOT and provides tool-specific wrappers.
+ */
+import { resolve, relative, extname, sep, dirname } from 'node:path';
+import { open } from 'node:fs/promises';
+import { realpathSync, existsSync } from 'node:fs';
+import { validateCommand as coreValidateCommand, isSensitiveFile as securityIsSensitiveFile, SHELL_META_PATTERN, } from '@yuaone/core';
+// ─── Symlink-Aware Path Resolution ──────────────────────────────────
+/**
+ * Resolve a path and verify that it (and its symlink target) stays within the
+ * allowed project directory. Defends against symlink-based path traversal.
+ *
+ * @returns `{ valid, resolved, reason? }` — `resolved` is the real path if valid.
+ */
+export function resolveAndValidatePath(filePath, projectRoot) {
+    const resolved = resolve(projectRoot, filePath);
+    const normalizedRoot = resolve(projectRoot);
+    // Check the resolved string first
+    if (!resolved.startsWith(normalizedRoot + sep) && resolved !== normalizedRoot) {
+        return { valid: false, resolved, reason: 'path escapes project directory' };
+    }
+    // If file exists, resolve symlinks and check again
+    if (existsSync(resolved)) {
+        try {
+            const real = realpathSync(resolved);
+            if (!real.startsWith(normalizedRoot + sep) && real !== normalizedRoot) {
+                return { valid: false, resolved: real, reason: 'symlink target escapes project directory' };
+            }
+            return { valid: true, resolved: real };
+        }
+        catch {
+            return { valid: false, resolved, reason: 'cannot resolve symlink' };
+        }
+    }
+    // File doesn't exist yet — check parent directories for symlinks
+    let current = dirname(resolved);
+    while (current !== normalizedRoot && current.startsWith(normalizedRoot)) {
+        if (existsSync(current)) {
+            try {
+                const realParent = realpathSync(current);
+                if (!realParent.startsWith(normalizedRoot + sep) && realParent !== normalizedRoot) {
+                    return { valid: false, resolved, reason: 'parent directory is a symlink escaping project' };
+                }
+            }
+            catch {
+                // Can't resolve — safer to reject
+                return { valid: false, resolved, reason: 'cannot resolve parent symlink' };
+            }
+            break; // Found existing parent, it's safe
+        }
+        current = dirname(current);
+    }
+    return { valid: true, resolved };
+}
+// ─── Path Traversal Defence ─────────────────────────────────────────
+/**
+ * Resolve and validate a path to ensure it stays within workDir.
+ * Returns the resolved absolute path.
+ * Throws on path traversal attempts (including symlink-based).
+ */
+export function validatePath(inputPath, workDir) {
+    // Reject null bytes
+    if (inputPath.includes('\0')) {
+        throw new Error('Path contains null byte');
+    }
+    const resolved = resolve(workDir, inputPath);
+    const rel = relative(workDir, resolved);
+    // rel must not start with '..' and must not be absolute (outside workDir)
+    if (rel.startsWith('..') || resolve(rel) === rel) {
+        throw new Error(`Path traversal detected: "${inputPath}" resolves outside workDir "${workDir}"`);
+    }
+    // Symlink defence: verify the real path stays within workDir
+    const symlinkCheck = resolveAndValidatePath(inputPath, workDir);
+    if (!symlinkCheck.valid) {
+        throw new Error(`Symlink traversal blocked: "${inputPath}" — ${symlinkCheck.reason}`);
+    }
+    return symlinkCheck.resolved;
+}
+// ─── Shell Metacharacter Defence ────────────────────────────────────
+/**
+ * Validate that neither executable nor args contain shell metacharacters.
+ * Prevents shell injection when using execFile.
+ * Delegates to SHELL_META_PATTERN from @yuaone/core/security (SSOT).
+ */
+export function validateNoShellMeta(executable, args) {
+    if (SHELL_META_PATTERN.test(executable)) {
+        throw new Error(`Shell metacharacter in executable: ${executable}`);
+    }
+    for (const arg of args) {
+        if (SHELL_META_PATTERN.test(arg)) {
+            throw new Error(`Shell metacharacter in arg: ${arg}`);
+        }
+    }
+}
+// ─── Blocked Commands (delegates to @yuaone/core/security SSOT) ───────
+/**
+ * Check whether an executable + args combination is blocked.
+ * Throws with explanation if blocked.
+ * Delegates to @yuaone/core/security.validateCommand (SSOT).
+ */
+export function validateCommand(executable, args) {
+    const result = coreValidateCommand(executable, args);
+    if (!result.allowed) {
+        throw new Error(result.reason ?? 'Command blocked by security policy');
+    }
+}
+// ─── Sensitive File Detection (delegates to @yuaone/core/security SSOT) ───
+/**
+ * Check whether a file path matches known sensitive file patterns.
+ * Delegates to @yuaone/core/security.isSensitiveFile (SSOT).
+ */
+export function isSensitiveFile(filePath) {
+    return securityIsSensitiveFile(filePath);
+}
+// ─── Binary File Detection ──────────────────────────────────────────
+const TEXT_EXTENSIONS = new Set([
+    '.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs',
+    '.json', '.yaml', '.yml', '.toml', '.xml', '.html', '.htm',
+    '.css', '.scss', '.less', '.sass',
+    '.md', '.mdx', '.txt', '.csv', '.tsv',
+    '.py', '.rb', '.go', '.rs', '.java', '.kt', '.scala',
+    '.c', '.cpp', '.h', '.hpp', '.cs', '.swift', '.m',
+    '.sh', '.bash', '.zsh', '.fish', '.ps1', '.bat', '.cmd',
+    '.sql', '.graphql', '.gql', '.prisma',
+    '.vue', '.svelte', '.astro',
+    '.env', '.gitignore', '.dockerignore', '.editorconfig',
+    '.lock', '.cfg', '.ini', '.conf',
+    'Makefile', 'Dockerfile', 'Jenkinsfile', 'Procfile',
+]);
+const IMAGE_EXTENSIONS = new Set([
+    '.png', '.jpg', '.jpeg', '.gif', '.bmp', '.webp',
+    '.svg', '.ico', '.tiff', '.tif',
+]);
+/**
+ * Check whether a file is likely binary by extension and (optionally) content sniffing.
+ */
+export async function isBinaryFile(filePath) {
+    const ext = extname(filePath).toLowerCase();
+    if (TEXT_EXTENSIONS.has(ext))
+        return false;
+    if (IMAGE_EXTENSIONS.has(ext))
+        return true;
+    // Sniff first 8KB for null bytes (avoid reading entire file)
+    try {
+        const fh = await open(filePath, 'r');
+        try {
+            const buf = Buffer.alloc(8192);
+            const { bytesRead } = await fh.read(buf, 0, 8192, 0);
+            const sample = buf.subarray(0, bytesRead);
+            for (let i = 0; i < sample.length; i++) {
+                if (sample[i] === 0)
+                    return true;
+            }
+            return false;
+        }
+        finally {
+            await fh.close();
+        }
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Check whether a file is an image.
+ */
+export function isImageFile(filePath) {
+    const ext = extname(filePath).toLowerCase();
+    return IMAGE_EXTENSIONS.has(ext);
+}
+// ─── Output Truncation ─────────────────────────────────────────────
+const DEFAULT_MAX_BYTES = 50_000; // 50KB
+/**
+ * Truncate output to maxBytes. Uses head/tail strategy.
+ */
+export function truncateOutput(output, maxBytes = DEFAULT_MAX_BYTES) {
+    if (output.length <= maxBytes)
+        return output;
+    const head = Math.floor(maxBytes * 0.4);
+    const tail = Math.floor(maxBytes * 0.4);
+    const truncated = output.length - head - tail;
+    return (output.slice(0, head) +
+        `\n\n... (${truncated} chars truncated) ...\n\n` +
+        output.slice(-tail));
+}
+// ─── Language Detection (by extension) ──────────────────────────────
+const EXT_TO_LANGUAGE = {
+    '.ts': 'typescript', '.tsx': 'tsx', '.js': 'javascript', '.jsx': 'jsx',
+    '.mjs': 'javascript', '.cjs': 'javascript',
+    '.json': 'json', '.yaml': 'yaml', '.yml': 'yaml', '.toml': 'toml',
+    '.xml': 'xml', '.html': 'html', '.htm': 'html',
+    '.css': 'css', '.scss': 'scss', '.less': 'less',
+    '.md': 'markdown', '.mdx': 'mdx', '.txt': 'plaintext',
+    '.py': 'python', '.rb': 'ruby', '.go': 'go', '.rs': 'rust',
+    '.java': 'java', '.kt': 'kotlin', '.scala': 'scala',
+    '.c': 'c', '.cpp': 'cpp', '.h': 'c', '.hpp': 'cpp',
+    '.cs': 'csharp', '.swift': 'swift',
+    '.sh': 'bash', '.bash': 'bash', '.zsh': 'zsh',
+    '.sql': 'sql', '.graphql': 'graphql',
+    '.vue': 'vue', '.svelte': 'svelte',
+    '.dockerfile': 'dockerfile',
+};
+export function detectLanguage(filePath) {
+    const ext = extname(filePath).toLowerCase();
+    const basename = filePath.split('/').pop() ?? '';
+    if (basename === 'Dockerfile')
+        return 'dockerfile';
+    if (basename === 'Makefile')
+        return 'makefile';
+    return EXT_TO_LANGUAGE[ext] ?? 'plaintext';
+}
+//# sourceMappingURL=validators.js.map

package/dist/validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validators.js","sourceRoot":"","sources":["../src/validators.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAa,UAAU,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EACL,eAAe,IAAI,mBAAmB,EACtC,eAAe,IAAI,uBAAuB,EAC1C,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAEtB,uEAAuE;AAEvE;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,WAAmB;IAEnB,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAE5C,kCAAkC;IAClC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,GAAG,GAAG,CAAC,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QAC9E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IAC9E,CAAC;IAED,mDAAmD;IACnD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,GAAG,GAAG,CAAC,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;gBACtE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;YAC9F,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;QACtE,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,IAAI,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAChC,OAAO,OAAO,KAAK,cAAc,IAAI,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACxE,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;gBACzC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,GAAG,GAAG,CAAC,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;oBAClF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;gBAC9F,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;gBAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;YAC7E,CAAC;YACD,MAAM,CAAC,mCAAmC;QAC5C,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACnC,CAAC;AAED,uEAAuE;AAEvE;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,OAAe;IAC7D,oBAAoB;IACpB,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAExC,0EAA0E;IAC1E,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,6BAA6B,SAAS,+BAA+B,OAAO,GAAG,CAChF,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,MAAM,YAAY,GAAG,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,+BAA+B,SAAS,OAAO,YAAY,CAAC,MAAM,EAAE,CACrE,CAAC;IACJ,CAAC;IAED,OAAO,YAAY,CAAC,QAAQ,CAAC;AAC/B,CAAC;AAED,uEAAuE;AAEvE;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,IAAc;IACpE,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,sCAAsC,UAAU,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;AACH,CAAC;AAED,yEAAyE;AAEzE;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB,EAAE,IAAc;IAChE,MAAM,MAAM,GAAG,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,oCAAoC,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,6EAA6E;AAE7E;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,OAAO,uBAAuB,CAAC,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,uEAAuE;AAEvE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAC1D,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO;IACjC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACrC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ;IACpD,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI;IACjD,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IACvD,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS;IACrC,MAAM,EAAE,SAAS,EAAE,QAAQ;IAC3B,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe;IACtD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO;IAChC,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU;CACpD,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO;IAChD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAChC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAE5C,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,6DAA6D;IAC7D,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAC;YACnC,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,OAAO,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,sEAAsE;AAEtE,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAC,OAAO;AAEzC;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,WAAmB,iBAAiB;IACjF,IAAI,MAAM,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,MAAM,CAAC;IAE7C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IAE9C,OAAO,CACL,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;QACrB,YAAY,SAAS,2BAA2B;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CACpB,CAAC;AACJ,CAAC;AAED,uEAAuE;AAEvE,MAAM,eAAe,GAA2B;IAC9C,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK;IACtE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY;IAC1C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IACjE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC9C,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAC/C,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW;IACrD,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM;IAC1D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO;IACnD,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK;IAClD,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO;IAClC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK;IAC7C,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS;IACpC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ;IAClC,aAAa,EAAE,YAAY;CAC5B,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAEjD,IAAI,QAAQ,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC;IACnD,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAE/C,OAAO,eAAe,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC;AAC7C,CAAC"}

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@yuaone/tools",
+  "version": "0.1.0",
+  "description": "YUAN Agent Tool Implementations",
+  "license": "AGPL-3.0",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": ["dist/", "README.md", "LICENSE"],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/yuaone/yuan.git",
+    "directory": "packages/yuan-tools"
+  },
+  "homepage": "https://github.com/yuaone/yuan#readme",
+  "bugs": {
+    "url": "https://github.com/yuaone/yuan/issues"
+  },
+  "keywords": ["coding-agent", "ai", "tools", "file-operations", "shell"],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "clean": "rm -rf dist",
+    "lint": "tsc --noEmit",
+    "test": "node --test dist/__tests__/*.test.js"
+  },
+  "dependencies": {
+    "@yuaone/core": "workspace:*",
+    "fast-glob": "^3.3.3",
+    "playwright": "^1.52.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.3.5",
+    "typescript": "^5.7.0"
+  }
+}