@yuaone/tools 0.1.0

package/dist/grep.js

@@ -0,0 +1,177 @@
+/**
+ * @yuaone/tools — grep tool
+ *
+ * Searches file contents using regex patterns.
+ * - Node.js built-in implementation (no ripgrep dependency)
+ * - Glob-based file filtering
+ * - Context lines support
+ * - Max 100 result lines
+ */
+import { readFile, stat } from 'node:fs/promises';
+import fg from 'fast-glob';
+import { BaseTool } from './base-tool.js';
+const DEFAULT_MAX_RESULTS = 50;
+const ABSOLUTE_MAX_RESULTS = 100;
+const DEFAULT_CONTEXT = 0;
+export class GrepTool extends BaseTool {
+    name = 'grep';
+    description = 'Search file contents using a regex pattern. ' +
+        'Returns matching lines with file paths and line numbers.';
+    riskLevel = 'low';
+    parameters = {
+        pattern: {
+            type: 'string',
+            description: 'Regular expression pattern to search for',
+            required: true,
+        },
+        path: {
+            type: 'string',
+            description: 'Search path relative to project root (default: project root)',
+            required: false,
+        },
+        glob: {
+            type: 'string',
+            description: 'File pattern filter (e.g., "*.ts", "*.{ts,tsx}")',
+            required: false,
+        },
+        maxResults: {
+            type: 'number',
+            description: `Maximum results to return (default: ${DEFAULT_MAX_RESULTS}, max: ${ABSOLUTE_MAX_RESULTS})`,
+            required: false,
+            default: DEFAULT_MAX_RESULTS,
+        },
+        context: {
+            type: 'number',
+            description: 'Number of context lines before and after each match (default: 0)',
+            required: false,
+            default: DEFAULT_CONTEXT,
+        },
+    };
+    async execute(args, workDir) {
+        const toolCallId = args._toolCallId ?? '';
+        const pattern = args.pattern;
+        const searchPath = args.path;
+        const globPattern = args.glob;
+        const maxResults = Math.min(args.maxResults ?? DEFAULT_MAX_RESULTS, ABSOLUTE_MAX_RESULTS);
+        const contextLines = args.context ?? DEFAULT_CONTEXT;
+        if (!pattern) {
+            return this.fail(toolCallId, 'Missing required parameter: pattern');
+        }
+        // Compile regex
+        let regex;
+        try {
+            regex = new RegExp(pattern, 'g');
+        }
+        catch (err) {
+            return this.fail(toolCallId, `Invalid regex pattern: ${err.message}`);
+        }
+        // Resolve search path
+        let searchDir = workDir;
+        if (searchPath) {
+            try {
+                searchDir = this.validatePath(searchPath, workDir);
+            }
+            catch (err) {
+                return this.fail(toolCallId, err.message);
+            }
+        }
+        // Check if searchDir is a file or directory
+        let isFile = false;
+        try {
+            const s = await stat(searchDir);
+            isFile = s.isFile();
+        }
+        catch {
+            return this.fail(toolCallId, `Path not found: ${searchPath ?? '.'}`);
+        }
+        // Collect files to search
+        let files;
+        if (isFile) {
+            files = [searchDir];
+        }
+        else {
+            const fileGlob = globPattern ?? '**/*';
+            try {
+                files = await fg(fileGlob, {
+                    cwd: searchDir,
+                    absolute: true,
+                    ignore: ['**/node_modules/**', '**/.git/**', '**/dist/**', '**/build/**'],
+                    onlyFiles: true,
+                    followSymbolicLinks: false,
+                });
+            }
+            catch (err) {
+                return this.fail(toolCallId, `Glob error: ${err.message}`);
+            }
+        }
+        // Search files
+        const matches = [];
+        let totalMatches = 0;
+        for (const filePath of files) {
+            if (matches.length >= maxResults)
+                break;
+            let content;
+            try {
+                content = await readFile(filePath, 'utf-8');
+            }
+            catch {
+                continue; // Skip unreadable files (binary, permissions, etc.)
+            }
+            const lines = content.split('\n');
+            for (let i = 0; i < lines.length; i++) {
+                // Reset regex state
+                regex.lastIndex = 0;
+                if (!regex.test(lines[i]))
+                    continue;
+                totalMatches++;
+                if (matches.length >= maxResults)
+                    continue; // Keep counting but stop collecting
+                const relativePath = filePath.startsWith(workDir)
+                    ? filePath.slice(workDir.length + 1)
+                    : filePath;
+                const match = {
+                    file: relativePath,
+                    line: i + 1,
+                    content: lines[i],
+                };
+                if (contextLines > 0) {
+                    match.contextBefore = lines.slice(Math.max(0, i - contextLines), i);
+                    match.contextAfter = lines.slice(i + 1, Math.min(lines.length, i + 1 + contextLines));
+                }
+                matches.push(match);
+            }
+        }
+        const truncated = totalMatches > maxResults;
+        // Format output
+        const outputLines = [];
+        for (const m of matches) {
+            if (m.contextBefore && m.contextBefore.length > 0) {
+                for (let j = 0; j < m.contextBefore.length; j++) {
+                    const lineNum = m.line - m.contextBefore.length + j;
+                    outputLines.push(`  ${m.file}:${lineNum}: ${m.contextBefore[j]}`);
+                }
+            }
+            outputLines.push(`> ${m.file}:${m.line}: ${m.content}`);
+            if (m.contextAfter && m.contextAfter.length > 0) {
+                for (let j = 0; j < m.contextAfter.length; j++) {
+                    outputLines.push(`  ${m.file}:${m.line + 1 + j}: ${m.contextAfter[j]}`);
+                }
+            }
+            if (m.contextBefore || m.contextAfter) {
+                outputLines.push('--');
+            }
+        }
+        if (truncated) {
+            outputLines.push(`\n... (showing ${matches.length} of ${totalMatches} total matches)`);
+        }
+        const output = outputLines.length > 0
+            ? outputLines.join('\n')
+            : `No matches found for pattern: ${pattern}`;
+        return this.ok(toolCallId, output, {
+            totalMatches,
+            matchesReturned: matches.length,
+            truncated,
+        });
+    }
+}
+//# sourceMappingURL=grep.js.map

package/dist/grep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grep.js","sourceRoot":"","sources":["../src/grep.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,MAAM,WAAW,CAAC;AAE3B,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B,MAAM,OAAO,QAAS,SAAQ,QAAQ;IAC3B,IAAI,GAAG,MAAM,CAAC;IACd,WAAW,GAClB,8CAA8C;QAC9C,0DAA0D,CAAC;IACpD,SAAS,GAAc,KAAK,CAAC;IAE7B,UAAU,GAAiC;QAClD,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,0CAA0C;YACvD,QAAQ,EAAE,IAAI;SACf;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,8DAA8D;YAC3E,QAAQ,EAAE,KAAK;SAChB;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,kDAAkD;YAC/D,QAAQ,EAAE,KAAK;SAChB;QACD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,uCAAuC,mBAAmB,UAAU,oBAAoB,GAAG;YACxG,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,mBAAmB;SAC7B;QACD,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,kEAAkE;YAC/E,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,eAAe;SACzB;KACF,CAAC;IAEF,KAAK,CAAC,OAAO,CAAC,IAA6B,EAAE,OAAe;QAC1D,MAAM,UAAU,GAAI,IAAI,CAAC,WAAsB,IAAI,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,OAA6B,CAAC;QACnD,MAAM,UAAU,GAAG,IAAI,CAAC,IAA0B,CAAC;QACnD,MAAM,WAAW,GAAG,IAAI,CAAC,IAA0B,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CACxB,IAAI,CAAC,UAAqB,IAAI,mBAAmB,EAClD,oBAAoB,CACrB,CAAC;QACF,MAAM,YAAY,GAAI,IAAI,CAAC,OAAkB,IAAI,eAAe,CAAC;QAEjE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,qCAAqC,CAAC,CAAC;QACtE,CAAC;QAED,gBAAgB;QAChB,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,0BAA2B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,sBAAsB;QACtB,IAAI,SAAS,GAAG,OAAO,CAAC;QACxB,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;YAChC,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,UAAU,IAAI,GAAG,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,0BAA0B;QAC1B,IAAI,KAAe,CAAC;QACpB,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,WAAW,IAAI,MAAM,CAAC;YACvC,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,EAAE;oBACzB,GAAG,EAAE,SAAS;oBACd,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,CAAC,oBAAoB,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,CAAC;oBACzE,SAAS,EAAE,IAAI;oBACf,mBAAmB,EAAE,KAAK;iBAC3B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAgB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QAED,eAAe;QACf,MAAM,OAAO,GAAgB,EAAE,CAAC;QAChC,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;YAC7B,IAAI,OAAO,CAAC,MAAM,IAAI,UAAU;gBAAE,MAAM;YAExC,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,CAAC,oDAAoD;YAChE,CAAC;YAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,oBAAoB;gBACpB,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;gBACpB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBAAE,SAAS;gBAEpC,YAAY,EAAE,CAAC;gBACf,IAAI,OAAO,CAAC,MAAM,IAAI,UAAU;oBAAE,SAAS,CAAC,oCAAoC;gBAEhF,MAAM,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;oBAC/C,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;oBACpC,CAAC,CAAC,QAAQ,CAAC;gBAEb,MAAM,KAAK,GAAc;oBACvB,IAAI,EAAE,YAAY;oBAClB,IAAI,EAAE,CAAC,GAAG,CAAC;oBACX,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;iBAClB,CAAC;gBAEF,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;oBACrB,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,KAAK,CAC/B,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,EAC7B,CAAC,CACF,CAAC;oBACF,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,KAAK,CAC9B,CAAC,GAAG,CAAC,EACL,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,CAC7C,CAAC;gBACJ,CAAC;gBAED,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,YAAY,GAAG,UAAU,CAAC;QAE5C,gBAAgB;QAChB,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAChD,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;oBACpD,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,OAAO,KAAK,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpE,CAAC;YACH,CAAC;YACD,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACxD,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC/C,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC1E,CAAC;YACH,CAAC;YACD,IAAI,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;gBACtC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,IAAI,SAAS,EAAE,CAAC;YACd,WAAW,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,MAAM,OAAO,YAAY,iBAAiB,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC;YACnC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YACxB,CAAC,CAAC,iCAAiC,OAAO,EAAE,CAAC;QAE/C,OAAO,IAAI,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE;YACjC,YAAY;YACZ,eAAe,EAAE,OAAO,CAAC,MAAM;YAC/B,SAAS;SACV,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @yuaone/tools — YUAN Agent Tool Implementations
+ *
+ * Provides the complete tool system for the YUAN coding agent:
+ * file_read, file_write, file_edit, shell_exec, grep, glob, git_ops, test_run, code_search, security_scan
+ */
+export type { ToolDefinition, ToolCall, ToolResult, ToolParameterSchema, } from '@yuaone/core';
+export type { ParameterDef, RiskLevel, FileReadInput, FileReadOutput, FileWriteInput, FileWriteOutput, FileEditInput, FileEditOutput, ShellExecInput, ShellExecOutput, GrepInput, GrepMatch, GrepOutput, GlobInput, GlobOutput, GitOperation, GitOpsInput, GitOpsOutput, TestRunInput, TestRunOutput, CodeSearchMode, CodeSearchInput, CodeSearchResult, CodeSearchOutput, } from './types.js';
+export { BaseTool } from './base-tool.js';
+export { FileReadTool } from './file-read.js';
+export { FileWriteTool } from './file-write.js';
+export { FileEditTool } from './file-edit.js';
+export { ShellExecTool } from './shell-exec.js';
+export { GrepTool } from './grep.js';
+export { GlobTool } from './glob.js';
+export { GitOpsTool } from './git-ops.js';
+export { TestRunTool } from './test-run.js';
+export { CodeSearchTool } from './code-search.js';
+export { SecurityScanTool } from './security-scan.js';
+export type { SecurityFinding, SecurityReport, FindingSeverity } from './security-scan.js';
+export { BrowserTool } from './browser-tool.js';
+export { ToolRegistry, createDefaultRegistry, createDesignRegistry } from './tool-registry.js';
+export { DevServerManager } from './dev-server-manager.js';
+export type { DevServerManagerEvents } from './dev-server-manager.js';
+export { DesignSnapshotTool, DesignScreenshotTool, DesignNavigateTool, DesignResizeTool, DesignInspectTool, DesignScrollTool, createDesignTools, setDesignBrowserSession, clearDesignBrowserSession, } from './design-tools.js';
+export { validatePath, validateNoShellMeta, validateCommand, isSensitiveFile, isBinaryFile, isImageFile, truncateOutput, detectLanguage, } from './validators.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,YAAY,EACV,cAAc,EACd,QAAQ,EACR,UAAU,EACV,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAGtB,YAAY,EACV,YAAY,EACZ,SAAS,EACT,aAAa,EACb,cAAc,EACd,cAAc,EACd,eAAe,EACf,aAAa,EACb,cAAc,EACd,cAAc,EACd,eAAe,EACf,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,UAAU,EACV,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC3F,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAG/F,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,YAAY,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAGtE,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,YAAY,EACZ,WAAW,EACX,cAAc,EACd,cAAc,GACf,MAAM,iBAAiB,CAAC"}

package/dist/index.js

@@ -0,0 +1,29 @@
+/**
+ * @yuaone/tools — YUAN Agent Tool Implementations
+ *
+ * Provides the complete tool system for the YUAN coding agent:
+ * file_read, file_write, file_edit, shell_exec, grep, glob, git_ops, test_run, code_search, security_scan
+ */
+// Base class
+export { BaseTool } from './base-tool.js';
+// Tool implementations
+export { FileReadTool } from './file-read.js';
+export { FileWriteTool } from './file-write.js';
+export { FileEditTool } from './file-edit.js';
+export { ShellExecTool } from './shell-exec.js';
+export { GrepTool } from './grep.js';
+export { GlobTool } from './glob.js';
+export { GitOpsTool } from './git-ops.js';
+export { TestRunTool } from './test-run.js';
+export { CodeSearchTool } from './code-search.js';
+export { SecurityScanTool } from './security-scan.js';
+export { BrowserTool } from './browser-tool.js';
+// Registry
+export { ToolRegistry, createDefaultRegistry, createDesignRegistry } from './tool-registry.js';
+// Dev Server Manager (Design Mode)
+export { DevServerManager } from './dev-server-manager.js';
+// Design Mode Tools
+export { DesignSnapshotTool, DesignScreenshotTool, DesignNavigateTool, DesignResizeTool, DesignInspectTool, DesignScrollTool, createDesignTools, setDesignBrowserSession, clearDesignBrowserSession, } from './design-tools.js';
+// Validators
+export { validatePath, validateNoShellMeta, validateCommand, isSensitiveFile, isBinaryFile, isImageFile, truncateOutput, detectLanguage, } from './validators.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAsCH,aAAa;AACb,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,uBAAuB;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,WAAW;AACX,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE/F,mCAAmC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3D,oBAAoB;AACpB,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAE3B,aAAa;AACb,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,YAAY,EACZ,WAAW,EACX,cAAc,EACd,cAAc,GACf,MAAM,iBAAiB,CAAC"}

package/dist/security-scan.d.ts

@@ -0,0 +1,62 @@
+/**
+ * @module security-scan
+ * @description Security scanning tool for YUAN agent.
+ * Checks for common security vulnerabilities in code:
+ * - Hardcoded secrets (API keys, passwords, tokens, AWS keys, private keys)
+ * - Dangerous code patterns (eval, innerHTML, SQL injection, command injection)
+ * - Dependency vulnerabilities (npm/pnpm audit)
+ * - File permission issues
+ *
+ * No external dependencies -- pure TypeScript + node:fs + node:child_process.
+ */
+import type { ParameterDef, RiskLevel } from './types.js';
+import type { ToolResult } from '@yuaone/core';
+import { BaseTool } from './base-tool.js';
+/** Severity classification for security findings */
+export type FindingSeverity = 'critical' | 'high' | 'medium' | 'low';
+/** A single security finding */
+export interface SecurityFinding {
+    /** Category of the finding */
+    type: string;
+    /** File where the issue was found */
+    file: string;
+    /** Line number (1-based) */
+    line: number;
+    /** The offending line (redacted if secret) */
+    code: string;
+    /** Human-readable description of the issue */
+    description: string;
+    /** Recommended fix */
+    recommendation: string;
+}
+/** Full security scan report */
+export interface SecurityReport {
+    /** Security score 0-100 (100 = clean) */
+    score: number;
+    /** Critical severity findings */
+    critical: SecurityFinding[];
+    /** High severity findings */
+    high: SecurityFinding[];
+    /** Medium severity findings */
+    medium: SecurityFinding[];
+    /** Low severity findings */
+    low: SecurityFinding[];
+    /** Human-readable summary */
+    summary: string;
+}
+export declare class SecurityScanTool extends BaseTool {
+    readonly name = "security_scan";
+    readonly description: string;
+    readonly riskLevel: RiskLevel;
+    readonly parameters: Record<string, ParameterDef>;
+    execute(args: Record<string, unknown>, workDir: string): Promise<ToolResult>;
+}
+/**
+ * Run a full security scan on the given directory.
+ *
+ * @param scanDir - Directory to scan recursively
+ * @param skipAudit - If true, skip npm/pnpm audit
+ * @returns SecurityReport
+ */
+export declare function runSecurityScan(scanDir: string, skipAudit?: boolean): Promise<SecurityReport>;
+//# sourceMappingURL=security-scan.d.ts.map

package/dist/security-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-scan.d.ts","sourceRoot":"","sources":["../src/security-scan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,OAAO,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAM1C,oDAAoD;AACpD,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAErE,gCAAgC;AAChC,MAAM,WAAW,eAAe;IAC9B,8BAA8B;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,gCAAgC;AAChC,MAAM,WAAW,cAAc;IAC7B,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,6BAA6B;IAC7B,IAAI,EAAE,eAAe,EAAE,CAAC;IACxB,+BAA+B;IAC/B,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1B,4BAA4B;IAC5B,GAAG,EAAE,eAAe,EAAE,CAAC;IACvB,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAC;CACjB;AA2ID,qBAAa,gBAAiB,SAAQ,QAAQ;IAC5C,QAAQ,CAAC,IAAI,mBAAmB;IAChC,QAAQ,CAAC,WAAW,SAG6D;IACjF,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAS;IAEtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAY/C;IAEI,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAsBnF;AAID;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,UAAQ,GAAG,OAAO,CAAC,cAAc,CAAC,CAsCjG"}