airlock-bot 0.0.1 → 0.2.1

package/dist/audit/db.js

@@ -0,0 +1,121 @@
+import Database from 'better-sqlite3';
+export class AuditDb {
+    db;
+    stmts;
+    constructor(dbPath) {
+        this.db = new Database(dbPath);
+        this.init();
+        this.prepareStatements();
+    }
+    init() {
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS audit_log (
+        id          INTEGER PRIMARY KEY AUTOINCREMENT,
+        ts          TEXT    NOT NULL,
+        agent_id    TEXT    NOT NULL,
+        tool        TEXT    NOT NULL,
+        args        TEXT    NOT NULL,
+        result      TEXT    NOT NULL,
+        error       TEXT,
+        duration_ms INTEGER,
+        hitl_code   TEXT
+      );
+      CREATE INDEX IF NOT EXISTS idx_audit_ts       ON audit_log(ts);
+      CREATE INDEX IF NOT EXISTS idx_audit_agent_id ON audit_log(agent_id);
+      CREATE INDEX IF NOT EXISTS idx_audit_tool     ON audit_log(tool);
+
+      CREATE TABLE IF NOT EXISTS hitl_queue (
+        id          TEXT    PRIMARY KEY,
+        code        TEXT    NOT NULL UNIQUE,
+        agent_id    TEXT    NOT NULL,
+        tool        TEXT    NOT NULL,
+        args        TEXT    NOT NULL,
+        status      TEXT    NOT NULL DEFAULT 'pending',
+        reason      TEXT,
+        created_at  TEXT    NOT NULL,
+        resolved_at TEXT
+      );
+      CREATE INDEX IF NOT EXISTS idx_hitl_status ON hitl_queue(status);
+      CREATE INDEX IF NOT EXISTS idx_hitl_code   ON hitl_queue(code);
+    `);
+    }
+    prepareStatements() {
+        this.stmts = {
+            insertAudit: this.db.prepare(`
+        INSERT INTO audit_log (ts, agent_id, tool, args, result, error, duration_ms, hitl_code)
+        VALUES (@ts, @agent_id, @tool, @args, @result, @error, @duration_ms, @hitl_code)
+      `),
+            insertHitl: this.db.prepare(`
+        INSERT INTO hitl_queue (id, code, agent_id, tool, args, status, created_at)
+        VALUES (@id, @code, @agent_id, @tool, @args, @status, @created_at)
+      `),
+            updateHitlStatus: this.db.prepare(`
+        UPDATE hitl_queue SET status = @status, reason = @reason, resolved_at = @resolved_at WHERE id = @id
+      `),
+            getHitlByCode: this.db.prepare('SELECT * FROM hitl_queue WHERE code = ?'),
+            getHitlById: this.db.prepare('SELECT * FROM hitl_queue WHERE id = ?'),
+            getPendingHitl: this.db.prepare("SELECT * FROM hitl_queue WHERE status = 'pending' ORDER BY created_at ASC"),
+            cleanupAudit: this.db.prepare('DELETE FROM audit_log WHERE ts < ?'),
+            cleanupHitl: this.db.prepare("DELETE FROM hitl_queue WHERE status != 'pending' AND resolved_at < ?"),
+        };
+    }
+    insertAudit(entry) {
+        this.stmts.insertAudit.run({
+            error: null,
+            duration_ms: null,
+            hitl_code: null,
+            ...entry,
+        });
+    }
+    queryAudit(filters) {
+        const conditions = [];
+        const params = {};
+        if (filters.agent) {
+            conditions.push('agent_id = @agent');
+            params.agent = filters.agent;
+        }
+        if (filters.tool) {
+            conditions.push('tool = @tool');
+            params.tool = filters.tool;
+        }
+        if (filters.since) {
+            conditions.push('ts >= @since');
+            params.since = filters.since;
+        }
+        const where = conditions.length ? `WHERE ${conditions.join(' AND ')}` : '';
+        const limit = Math.max(1, Math.min(filters.limit ?? 100, 10000));
+        params.limit = limit;
+        return this.db
+            .prepare(`SELECT * FROM audit_log ${where} ORDER BY ts DESC LIMIT @limit`)
+            .all(params);
+    }
+    insertHitl(entry) {
+        this.stmts.insertHitl.run(entry);
+    }
+    updateHitlStatus(id, status, reason) {
+        this.stmts.updateHitlStatus.run({
+            id,
+            status,
+            reason: reason ?? null,
+            resolved_at: new Date().toISOString(),
+        });
+    }
+    getHitlByCode(code) {
+        return this.stmts.getHitlByCode.get(code);
+    }
+    getHitlById(id) {
+        return this.stmts.getHitlById.get(id);
+    }
+    getPendingHitl() {
+        return this.stmts.getPendingHitl.all();
+    }
+    cleanup(retentionDays) {
+        const cutoff = new Date(Date.now() - retentionDays * 86400_000).toISOString();
+        this.stmts.cleanupAudit.run(cutoff);
+        this.stmts.cleanupHitl.run(cutoff);
+    }
+    close() {
+        this.db.close();
+    }
+}
+//# sourceMappingURL=db.js.map

package/dist/audit/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../src/audit/db.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AA0BtC,MAAM,OAAO,OAAO;IACV,EAAE,CAAoB;IACtB,KAAK,CASX;IAEF,YAAY,MAAc;QACxB,IAAI,CAAC,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAEO,IAAI;QACV,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA6BZ,CAAC,CAAC;IACL,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC,KAAK,GAAG;YACX,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;OAG5B,CAAC;YACF,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;OAG3B,CAAC;YACF,gBAAgB,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;OAEjC,CAAC;YACF,aAAa,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,yCAAyC,CAAC;YACzE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uCAAuC,CAAC;YACrE,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAC7B,2EAA2E,CAC5E;YACD,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC;YACnE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAC1B,sEAAsE,CACvE;SACF,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,KAA6B;QACvC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC;YACzB,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,IAAI;YACf,GAAG,KAAK;SACT,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,OAKV;QACC,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,MAAM,GAA4B,EAAE,CAAC;QAE3C,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACrC,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC/B,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC7B,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAChC,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC/B,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;QAErB,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CAAC,2BAA2B,KAAK,gCAAgC,CAAC;aACzE,GAAG,CAAC,MAAM,CAAiB,CAAC;IACjC,CAAC;IAED,UAAU,CAAC,KAAqB;QAC9B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED,gBAAgB,CAAC,EAAU,EAAE,MAAgC,EAAE,MAAe;QAC5E,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC;YAC9B,EAAE;YACF,MAAM;YACN,MAAM,EAAE,MAAM,IAAI,IAAI;YACtB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAA+B,CAAC;IAC1E,CAAC;IAED,WAAW,CAAC,EAAU;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAA+B,CAAC;IACtE,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAsB,CAAC;IAC7D,CAAC;IAED,OAAO,CAAC,aAAqB;QAC3B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,GAAG,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9E,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;CACF"}

package/dist/audit/logger.d.ts

@@ -0,0 +1,25 @@
+import type { AuditEntry, HitlQueueEntry } from './db.js';
+import type { AuditConfig } from '../config/schema.js';
+export declare class AuditLogger {
+    private db;
+    private redactPatterns;
+    private retentionDays;
+    private cleanupTimer?;
+    constructor(config: AuditConfig);
+    log(entry: Omit<AuditEntry, 'id' | 'ts'>): void;
+    recent(n: number): AuditEntry[];
+    query(filters: {
+        agent?: string;
+        tool?: string;
+        since?: string;
+        limit?: number;
+    }): AuditEntry[];
+    insertHitl(entry: HitlQueueEntry): void;
+    updateHitlStatus(id: string, status: HitlQueueEntry['status'], reason?: string): void;
+    getHitlByCode(code: string): HitlQueueEntry | undefined;
+    getHitlById(id: string): HitlQueueEntry | undefined;
+    getPendingHitl(): HitlQueueEntry[];
+    startDailyCleanup(): void;
+    stop(): void;
+}
+//# sourceMappingURL=logger.d.ts.map

package/dist/audit/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/audit/logger.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,qBAAa,WAAW;IACtB,OAAO,CAAC,EAAE,CAAU;IACpB,OAAO,CAAC,cAAc,CAAW;IACjC,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,YAAY,CAAC,CAAiB;gBAE1B,MAAM,EAAE,WAAW;IAM/B,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC,GAAG,IAAI;IAY/C,MAAM,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,EAAE;IAI/B,KAAK,CAAC,OAAO,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,UAAU,EAAE;IAK/F,UAAU,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI;IAGvC,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;IAGrF,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAGvD,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAGnD,cAAc,IAAI,cAAc,EAAE;IAIlC,iBAAiB,IAAI,IAAI;IAOzB,IAAI,IAAI,IAAI;CAIb"}

package/dist/audit/logger.js

@@ -0,0 +1,58 @@
+import { AuditDb } from './db.js';
+import { redactFields } from './redactor.js';
+export class AuditLogger {
+    db;
+    redactPatterns;
+    retentionDays;
+    cleanupTimer;
+    constructor(config) {
+        this.db = new AuditDb(config.db_path);
+        this.redactPatterns = config.redact_fields;
+        this.retentionDays = config.retention_days;
+    }
+    log(entry) {
+        let args = entry.args;
+        try {
+            const parsed = JSON.parse(args);
+            const redacted = redactFields(parsed, this.redactPatterns);
+            args = JSON.stringify(redacted);
+        }
+        catch {
+            // not valid JSON, store as-is
+        }
+        this.db.insertAudit({ ...entry, args, ts: new Date().toISOString() });
+    }
+    recent(n) {
+        return this.db.queryAudit({ limit: n });
+    }
+    query(filters) {
+        return this.db.queryAudit(filters);
+    }
+    // HITL queue delegation
+    insertHitl(entry) {
+        this.db.insertHitl(entry);
+    }
+    updateHitlStatus(id, status, reason) {
+        this.db.updateHitlStatus(id, status, reason);
+    }
+    getHitlByCode(code) {
+        return this.db.getHitlByCode(code);
+    }
+    getHitlById(id) {
+        return this.db.getHitlById(id);
+    }
+    getPendingHitl() {
+        return this.db.getPendingHitl();
+    }
+    startDailyCleanup() {
+        this.cleanupTimer = setInterval(() => {
+            this.db.cleanup(this.retentionDays);
+        }, 86400_000);
+        this.cleanupTimer.unref();
+    }
+    stop() {
+        clearInterval(this.cleanupTimer);
+        this.db.close();
+    }
+}
+//# sourceMappingURL=logger.js.map

package/dist/audit/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/audit/logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAI7C,MAAM,OAAO,WAAW;IACd,EAAE,CAAU;IACZ,cAAc,CAAW;IACzB,aAAa,CAAS;IACtB,YAAY,CAAkB;IAEtC,YAAY,MAAmB;QAC7B,IAAI,CAAC,EAAE,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC;IAC7C,CAAC;IAED,GAAG,CAAC,KAAoC;QACtC,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;YAC3D,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YAC3D,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,CAAC,CAAS;QACd,OAAO,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,OAA0E;QAC9E,OAAO,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,wBAAwB;IACxB,UAAU,CAAC,KAAqB;QAC9B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,gBAAgB,CAAC,EAAU,EAAE,MAAgC,EAAE,MAAe;QAC5E,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IACD,aAAa,CAAC,IAAY;QACxB,OAAO,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,WAAW,CAAC,EAAU;QACpB,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;IACD,cAAc;QACZ,OAAO,IAAI,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC;IAClC,CAAC;IAED,iBAAiB;QACf,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YACnC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACtC,CAAC,EAAE,SAAS,CAAC,CAAC;QACd,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI;QACF,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;CACF"}

package/dist/audit/redactor.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Recursively redact fields matching any of the given patterns (case-insensitive substring match).
+ */
+export declare function redactFields(obj: unknown, fieldPatterns: string[]): unknown;
+//# sourceMappingURL=redactor.d.ts.map

package/dist/audit/redactor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.d.ts","sourceRoot":"","sources":["../../src/audit/redactor.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,OAAO,CAiB3E"}

package/dist/audit/redactor.js

@@ -0,0 +1,27 @@
+/**
+ * Recursively redact fields matching any of the given patterns (case-insensitive substring match).
+ */
+export function redactFields(obj, fieldPatterns) {
+    if (obj === null || obj === undefined)
+        return obj;
+    if (typeof obj !== 'object')
+        return obj;
+    if (Array.isArray(obj)) {
+        return obj.map((item) => redactFields(item, fieldPatterns));
+    }
+    const result = {};
+    for (const [key, value] of Object.entries(obj)) {
+        if (shouldRedact(key, fieldPatterns)) {
+            result[key] = '[REDACTED]';
+        }
+        else {
+            result[key] = redactFields(value, fieldPatterns);
+        }
+    }
+    return result;
+}
+function shouldRedact(key, patterns) {
+    const lower = key.toLowerCase();
+    return patterns.some((p) => lower.includes(p.toLowerCase()));
+}
+//# sourceMappingURL=redactor.js.map

package/dist/audit/redactor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.js","sourceRoot":"","sources":["../../src/audit/redactor.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,GAAY,EAAE,aAAuB;IAChE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAClD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAExC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;QAC1E,IAAI,YAAY,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,QAAkB;IACnD,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAC/D,CAAC"}

package/dist/backend/cli/adapter.d.ts

@@ -0,0 +1,23 @@
+import type { Tool } from '@modelcontextprotocol/sdk/types.js';
+import type { BackendAdapter } from '../types.js';
+import type { ToolCall, ToolResult } from '../../types.js';
+import { type CliConfig } from '../../config/schema.js';
+export interface CliAdapterOptions {
+    maxOutputBytes?: number;
+}
+export declare class CliBackendAdapter implements BackendAdapter {
+    private configKey;
+    private config;
+    readonly id: string;
+    private commands;
+    private shell;
+    private defaultCwd?;
+    private maxOutputBytes;
+    constructor(configKey: string, config: CliConfig, options?: CliAdapterOptions);
+    listTools(): Promise<Tool[]>;
+    call(toolCall: ToolCall): Promise<ToolResult>;
+    stop(): Promise<void>;
+    private exec;
+    private buildInputSchema;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/backend/cli/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/backend/cli/adapter.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAoB,KAAK,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAM1E,MAAM,WAAW,iBAAiB;IAChC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,iBAAkB,YAAW,cAAc;IAQpD,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,MAAM;IARhB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,QAAQ,CAAmD;IACnE,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,cAAc,CAAS;gBAGrB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,SAAS,EACzB,OAAO,CAAC,EAAE,iBAAiB;IA+B7B,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAUtB,IAAI,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IA4B7C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAE3B,OAAO,CAAC,IAAI;IAsEZ,OAAO,CAAC,gBAAgB;CAgCzB"}

package/dist/backend/cli/adapter.js

@@ -0,0 +1,176 @@
+import { spawn } from 'child_process';
+import { readFileSync } from 'fs';
+import { parse as parseYaml } from 'yaml';
+import { z } from 'zod';
+import { CliCommandConfig } from '../../config/schema.js';
+import { buildCommand } from './builder.js';
+import { childLogger } from '../../util/logger.js';
+const log = childLogger('cli-adapter');
+export class CliBackendAdapter {
+    configKey;
+    config;
+    id;
+    commands;
+    shell;
+    defaultCwd;
+    maxOutputBytes;
+    constructor(configKey, config, options) {
+        this.configKey = configKey;
+        this.config = config;
+        this.maxOutputBytes = options?.maxOutputBytes ?? config.max_output_bytes;
+        this.id = `cli:${configKey}`;
+        this.shell = config.shell ?? '/bin/sh';
+        this.defaultCwd = config.cwd;
+        // Merge discovered commands with inline commands (inline takes precedence)
+        this.commands = { ...config.commands };
+        if (config.discovered) {
+            try {
+                const raw = readFileSync(config.discovered, 'utf-8');
+                const parsed = parseYaml(raw);
+                const obj = parsed;
+                if (obj?.commands && typeof obj.commands === 'object') {
+                    const validated = z.record(CliCommandConfig).safeParse(obj.commands);
+                    if (validated.success) {
+                        this.commands = { ...validated.data, ...this.commands };
+                    }
+                    else {
+                        log.warn({ err: validated.error, path: config.discovered }, 'Discovered CLI config has invalid commands, skipping');
+                    }
+                }
+            }
+            catch (err) {
+                log.warn({ err, path: config.discovered }, 'Failed to load discovered CLI config');
+            }
+        }
+    }
+    listTools() {
+        return Promise.resolve(Object.entries(this.commands).map(([name, cmd]) => ({
+            name: `${this.configKey}/${name}`,
+            description: cmd.description ?? `CLI command: ${cmd.exec}`,
+            inputSchema: this.buildInputSchema(cmd),
+        })));
+    }
+    async call(toolCall) {
+        const prefix = `${this.configKey}/`;
+        if (!toolCall.tool.startsWith(prefix)) {
+            return {
+                success: false,
+                error: `Tool "${toolCall.tool}" does not belong to adapter "${this.id}"`,
+            };
+        }
+        const commandName = toolCall.tool.slice(prefix.length);
+        const cmdConfig = this.commands[commandName];
+        if (!cmdConfig) {
+            return { success: false, error: `Unknown CLI command: ${commandName}` };
+        }
+        let fullCommand;
+        try {
+            fullCommand = buildCommand(cmdConfig, toolCall.args);
+        }
+        catch (err) {
+            return { success: false, error: err instanceof Error ? err.message : String(err) };
+        }
+        const cwd = cmdConfig.cwd ?? this.defaultCwd;
+        const timeoutMs = cmdConfig.timeout * 1000;
+        return this.exec(fullCommand, cwd, timeoutMs);
+    }
+    async stop() { }
+    exec(command, cwd, timeoutMs = 30000) {
+        return new Promise((resolve) => {
+            const child = spawn(this.shell, ['-c', command], {
+                cwd,
+                stdio: ['ignore', 'pipe', 'pipe'],
+            });
+            let stdout = '';
+            let stderr = '';
+            let stdoutBytes = 0;
+            let stderrBytes = 0;
+            let stdoutTruncated = false;
+            let stderrTruncated = false;
+            let timedOut = false;
+            child.stdout.on('data', (chunk) => {
+                stdoutBytes += chunk.byteLength;
+                if (stdoutBytes <= this.maxOutputBytes) {
+                    stdout += chunk.toString();
+                }
+                else if (!stdoutTruncated) {
+                    stdoutTruncated = true;
+                }
+            });
+            child.stderr.on('data', (chunk) => {
+                stderrBytes += chunk.byteLength;
+                if (stderrBytes <= this.maxOutputBytes) {
+                    stderr += chunk.toString();
+                }
+                else if (!stderrTruncated) {
+                    stderrTruncated = true;
+                }
+            });
+            const timer = setTimeout(() => {
+                timedOut = true;
+                child.kill('SIGTERM');
+                setTimeout(() => {
+                    try {
+                        child.kill('SIGKILL');
+                    }
+                    catch {
+                        // process may have already exited
+                    }
+                }, 2000);
+            }, timeoutMs);
+            child.on('close', (code) => {
+                clearTimeout(timer);
+                const truncated = stdoutTruncated || stderrTruncated;
+                if (timedOut) {
+                    resolve({
+                        success: false,
+                        error: `Command timed out after ${timeoutMs}ms`,
+                        metadata: { duration_ms: timeoutMs, truncated },
+                    });
+                    return;
+                }
+                resolve({
+                    success: code === 0,
+                    data: { exit_code: code, stdout, stderr },
+                    error: code !== 0 ? `Exit code ${code}: ${stderr.trim()}` : undefined,
+                    metadata: { truncated },
+                });
+            });
+            child.on('error', (err) => {
+                clearTimeout(timer);
+                resolve({ success: false, error: err.message });
+            });
+        });
+    }
+    buildInputSchema(cmd) {
+        const properties = {};
+        const required = [];
+        for (const [name, param] of Object.entries(cmd.params)) {
+            const prop = {};
+            switch (param.type) {
+                case 'number':
+                    prop.type = 'number';
+                    break;
+                case 'boolean':
+                    prop.type = 'boolean';
+                    break;
+                default:
+                    prop.type = 'string';
+                    break;
+            }
+            if (param.description)
+                prop.description = param.description;
+            if (param.default !== undefined)
+                prop.default = param.default;
+            properties[name] = prop;
+            if (param.required)
+                required.push(name);
+        }
+        return {
+            type: 'object',
+            properties,
+            ...(required.length > 0 ? { required } : {}),
+        };
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/backend/cli/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/backend/cli/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,gBAAgB,EAAkB,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,MAAM,GAAG,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;AAMvC,MAAM,OAAO,iBAAiB;IAQlB;IACA;IARD,EAAE,CAAS;IACZ,QAAQ,CAAmD;IAC3D,KAAK,CAAS;IACd,UAAU,CAAU;IACpB,cAAc,CAAS;IAE/B,YACU,SAAiB,EACjB,MAAiB,EACzB,OAA2B;QAFnB,cAAS,GAAT,SAAS,CAAQ;QACjB,WAAM,GAAN,MAAM,CAAW;QAGzB,IAAI,CAAC,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,MAAM,CAAC,gBAAgB,CAAC;QACzE,IAAI,CAAC,EAAE,GAAG,OAAO,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC;QACvC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC;QAE7B,2EAA2E;QAC3E,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBACrD,MAAM,MAAM,GAAY,SAAS,CAAC,GAAG,CAAC,CAAC;gBACvC,MAAM,GAAG,GAAG,MAAwC,CAAC;gBACrD,IAAI,GAAG,EAAE,QAAQ,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBACtD,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBACrE,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;wBACtB,IAAI,CAAC,QAAQ,GAAG,EAAE,GAAG,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC1D,CAAC;yBAAM,CAAC;wBACN,GAAG,CAAC,IAAI,CACN,EAAE,GAAG,EAAE,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,EACjD,sDAAsD,CACvD,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,sCAAsC,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS;QACP,OAAO,OAAO,CAAC,OAAO,CACpB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE;YACjC,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,gBAAgB,GAAG,CAAC,IAAI,EAAE;YAC1D,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC;SACxC,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAkB;QAC3B,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC;QACpC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,SAAS,QAAQ,CAAC,IAAI,iCAAiC,IAAI,CAAC,EAAE,GAAG;aACzE,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE7C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,WAAW,EAAE,EAAE,CAAC;QAC1E,CAAC;QAED,IAAI,WAAmB,CAAC;QACxB,IAAI,CAAC;YACH,WAAW,GAAG,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACrF,CAAC;QAED,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC;QAC7C,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,GAAG,IAAI,CAAC;QAE3C,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,IAAI,KAAmB,CAAC;IAEtB,IAAI,CAAC,OAAe,EAAE,GAAY,EAAE,SAAS,GAAG,KAAK;QAC3D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;gBAC/C,GAAG;gBACH,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,WAAW,GAAG,CAAC,CAAC;YACpB,IAAI,WAAW,GAAG,CAAC,CAAC;YACpB,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC;gBAChC,IAAI,WAAW,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;oBACvC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC7B,CAAC;qBAAM,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC5B,eAAe,GAAG,IAAI,CAAC;gBACzB,CAAC;YACH,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC;gBAChC,IAAI,WAAW,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;oBACvC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC7B,CAAC;qBAAM,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC5B,eAAe,GAAG,IAAI,CAAC;gBACzB,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,UAAU,CAAC,GAAG,EAAE;oBACd,IAAI,CAAC;wBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACxB,CAAC;oBAAC,MAAM,CAAC;wBACP,kCAAkC;oBACpC,CAAC;gBACH,CAAC,EAAE,IAAI,CAAC,CAAC;YACX,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACzB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,SAAS,GAAG,eAAe,IAAI,eAAe,CAAC;gBACrD,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO,CAAC;wBACN,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,2BAA2B,SAAS,IAAI;wBAC/C,QAAQ,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE;qBAChD,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC;oBACN,OAAO,EAAE,IAAI,KAAK,CAAC;oBACnB,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE;oBACzC,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,aAAa,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;oBACrE,QAAQ,EAAE,EAAE,SAAS,EAAE;iBACxB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,gBAAgB,CAAC,GAAqB;QAC5C,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,GAA4B,EAAE,CAAC;YAEzC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnB,KAAK,QAAQ;oBACX,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;oBACrB,MAAM;gBACR,KAAK,SAAS;oBACZ,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;oBACtB,MAAM;gBACR;oBACE,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;oBACrB,MAAM;YACV,CAAC;YAED,IAAI,KAAK,CAAC,WAAW;gBAAE,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YAC5D,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;gBAAE,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YAE9D,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACxB,IAAI,KAAK,CAAC,QAAQ;gBAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QAED,OAAO;YACL,IAAI,EAAE,QAAiB;YACvB,UAAU;YACV,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7C,CAAC;IACJ,CAAC;CACF"}

package/dist/backend/cli/builder.d.ts

@@ -0,0 +1,3 @@
+import type { CliCommandConfig } from '../../config/schema.js';
+export declare function buildCommand(config: CliCommandConfig, args: Record<string, unknown>): string;
+//# sourceMappingURL=builder.d.ts.map

package/dist/backend/cli/builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder.d.ts","sourceRoot":"","sources":["../../../src/backend/cli/builder.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/D,wBAAgB,YAAY,CAC1B,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,MAAM,CA8DR"}

package/dist/backend/cli/builder.js

@@ -0,0 +1,52 @@
+import { escapeShellArg } from './escaper.js';
+export function buildCommand(config, args) {
+    let cmd = config.exec;
+    const usedParams = new Set();
+    // Template interpolation: replace {param} placeholders
+    cmd = cmd.replace(/\{(\w+)\}/g, (match, paramName) => {
+        const paramConfig = config.params[paramName];
+        const value = args[paramName];
+        if (value === undefined || value === null) {
+            if (paramConfig?.required) {
+                throw new Error(`Required parameter "${paramName}" is missing`);
+            }
+            return ''; // Remove unreplaced optional placeholders
+        }
+        usedParams.add(paramName);
+        return escapeShellArg(String(value));
+    });
+    // Append flag-based params not consumed by template interpolation
+    const flagParts = [];
+    for (const [paramName, paramConfig] of Object.entries(config.params)) {
+        if (usedParams.has(paramName))
+            continue;
+        const value = args[paramName];
+        if (value === undefined || value === null) {
+            if (paramConfig.required) {
+                throw new Error(`Required parameter "${paramName}" is missing`);
+            }
+            continue;
+        }
+        if (paramConfig.positional) {
+            flagParts.push(escapeShellArg(String(value)));
+            continue;
+        }
+        if (paramConfig.type === 'boolean') {
+            if (value === true && paramConfig.flag) {
+                flagParts.push(paramConfig.flag);
+            }
+            continue;
+        }
+        if (paramConfig.flag) {
+            flagParts.push(paramConfig.flag);
+            flagParts.push(escapeShellArg(String(value)));
+        }
+    }
+    // Clean up any leftover empty segments from removed placeholders
+    cmd = cmd.replace(/\s{2,}/g, ' ').trim();
+    if (flagParts.length > 0) {
+        cmd = cmd + ' ' + flagParts.join(' ');
+    }
+    return cmd;
+}
+//# sourceMappingURL=builder.js.map

package/dist/backend/cli/builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builder.js","sourceRoot":"","sources":["../../../src/backend/cli/builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAG9C,MAAM,UAAU,YAAY,CAC1B,MAAwB,EACxB,IAA6B;IAE7B,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC;IAEtB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IAErC,uDAAuD;IACvD,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,SAAiB,EAAE,EAAE;QAC3D,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QAE9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,IAAI,WAAW,EAAE,QAAQ,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,cAAc,CAAC,CAAC;YAClE,CAAC;YACD,OAAO,EAAE,CAAC,CAAC,0CAA0C;QACvD,CAAC;QAED,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1B,OAAO,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,kEAAkE;IAClE,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACrE,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,SAAS;QAExC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QAE9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,cAAc,CAAC,CAAC;YAClE,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;YAC3B,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QAED,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,KAAK,KAAK,IAAI,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;gBACvC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC;YACrB,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YACjC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAEzC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/backend/cli/escaper.d.ts

@@ -0,0 +1,2 @@
+export declare function escapeShellArg(value: string): string;
+//# sourceMappingURL=escaper.d.ts.map

package/dist/backend/cli/escaper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"escaper.d.ts","sourceRoot":"","sources":["../../../src/backend/cli/escaper.ts"],"names":[],"mappings":"AAAA,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMpD"}

package/dist/backend/cli/escaper.js

@@ -0,0 +1,8 @@
+export function escapeShellArg(value) {
+    if (value.includes('\0')) {
+        throw new Error('Shell argument must not contain null bytes');
+    }
+    // Wrap in single quotes; escape internal single quotes as '\''
+    return "'" + value.replace(/'/g, "'\\''") + "'";
+}
+//# sourceMappingURL=escaper.js.map

package/dist/backend/cli/escaper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"escaper.js","sourceRoot":"","sources":["../../../src/backend/cli/escaper.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,+DAA+D;IAC/D,OAAO,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC;AAClD,CAAC"}

package/dist/backend/exec-adapter.d.ts

@@ -0,0 +1,13 @@
+import type { Tool } from '@modelcontextprotocol/sdk/types.js';
+import type { BackendAdapter } from './types.js';
+import type { ToolCall, ToolResult } from '../types.js';
+import type { AgentConfig } from '../config/schema.js';
+export declare class ExecBackendAdapter implements BackendAdapter {
+    private agents;
+    readonly id = "builtin:exec";
+    constructor(agents: Record<string, AgentConfig>);
+    listTools(): Promise<Tool[]>;
+    call(toolCall: ToolCall): Promise<ToolResult>;
+    stop(): Promise<void>;
+}
+//# sourceMappingURL=exec-adapter.d.ts.map

package/dist/backend/exec-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec-adapter.d.ts","sourceRoot":"","sources":["../../src/backend/exec-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,oCAAoC,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAExD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,qBAAa,kBAAmB,YAAW,cAAc;IAG3C,OAAO,CAAC,MAAM;IAF1B,QAAQ,CAAC,EAAE,kBAAkB;gBAET,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC;IAEvD,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAItB,IAAI,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IA8B7C,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAC5B"}

package/dist/backend/exec-adapter.js

@@ -0,0 +1,39 @@
+import { buildExecTool, executeExec } from '../tools/exec.js';
+export class ExecBackendAdapter {
+    agents;
+    id = 'builtin:exec';
+    constructor(agents) {
+        this.agents = agents;
+    }
+    listTools() {
+        return Promise.resolve([buildExecTool()]);
+    }
+    async call(toolCall) {
+        if (toolCall.tool !== 'exec/run') {
+            return { success: false, error: `Unknown exec tool: ${toolCall.tool}` };
+        }
+        const agent = this.agents[toolCall.agentId];
+        if (!agent) {
+            return { success: false, error: `Unknown agent: ${toolCall.agentId}` };
+        }
+        const command = toolCall.args['command'];
+        if (typeof command !== 'string') {
+            return { success: false, error: 'Missing or invalid "command" argument' };
+        }
+        const cwd = typeof toolCall.args['cwd'] === 'string' ? toolCall.args['cwd'] : undefined;
+        const timeoutMs = typeof toolCall.args['timeout_ms'] === 'number' ? toolCall.args['timeout_ms'] : undefined;
+        try {
+            const data = await executeExec(command, agent, cwd, timeoutMs);
+            return {
+                success: true,
+                data,
+                metadata: { duration_ms: data.duration_ms },
+            };
+        }
+        catch (err) {
+            return { success: false, error: err instanceof Error ? err.message : String(err) };
+        }
+    }
+    async stop() { }
+}
+//# sourceMappingURL=exec-adapter.js.map

package/dist/backend/exec-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec-adapter.js","sourceRoot":"","sources":["../../src/backend/exec-adapter.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG9D,MAAM,OAAO,kBAAkB;IAGT;IAFX,EAAE,GAAG,cAAc,CAAC;IAE7B,YAAoB,MAAmC;QAAnC,WAAM,GAAN,MAAM,CAA6B;IAAG,CAAC;IAE3D,SAAS;QACP,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAkB;QAC3B,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACjC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,sBAAsB,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1E,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACzE,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;QAC5E,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxF,MAAM,SAAS,GACb,OAAO,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE5F,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YAC/D,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI;gBACJ,QAAQ,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE;aAC5C,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACrF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,KAAmB,CAAC;CAC/B"}

package/dist/backend/factory.d.ts

@@ -0,0 +1,9 @@
+import type { BackendAdapter } from './types.js';
+import type { Config } from '../config/loader.js';
+import type { ClientPool } from '../pool/pool.js';
+/**
+ * Build all BackendAdapter instances from the gateway config.
+ * MCP adapters wrap the existing ClientPool; CLI and API adapters are standalone.
+ */
+export declare function buildAdapters(config: Config, pool: ClientPool): BackendAdapter[];
+//# sourceMappingURL=factory.d.ts.map