clodds 1.1.0

package/dist/tools/email.js

@@ -0,0 +1,131 @@
+"use strict";
+/**
+ * Email Tool - send email via SMTP (nodemailer) with sendmail fallback
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createEmailTool = createEmailTool;
+const child_process_1 = require("child_process");
+const nodemailer_1 = __importDefault(require("nodemailer"));
+const logger_1 = require("../utils/logger");
+function formatAddress(input) {
+    if (typeof input === 'string')
+        return input;
+    const name = input.name?.trim();
+    if (!name)
+        return input.email;
+    const safeName = name.replace(/"/g, '\\"');
+    return `"${safeName}" <${input.email}>`;
+}
+function toAddressList(list) {
+    if (!list || list.length === 0)
+        return undefined;
+    return list.map(formatAddress);
+}
+function buildSendmailMessage(opts) {
+    const headers = [];
+    headers.push(`From: ${formatAddress(opts.from)}`);
+    headers.push(`To: ${opts.to.map(formatAddress).join(', ')}`);
+    const cc = toAddressList(opts.cc);
+    if (cc)
+        headers.push(`Cc: ${cc.join(', ')}`);
+    const bcc = toAddressList(opts.bcc);
+    if (bcc)
+        headers.push(`Bcc: ${bcc.join(', ')}`);
+    const replyTo = opts.replyTo ? formatAddress(opts.replyTo) : null;
+    if (replyTo)
+        headers.push(`Reply-To: ${replyTo}`);
+    headers.push(`Subject: ${opts.subject}`);
+    headers.push('MIME-Version: 1.0');
+    headers.push('Content-Type: text/plain; charset=utf-8');
+    headers.push('Content-Transfer-Encoding: 8bit');
+    return `${headers.join('\n')}\n\n${opts.text}\n`;
+}
+function hasSendmail() {
+    const res = (0, child_process_1.spawnSync)('sendmail', ['-V'], { stdio: 'ignore' });
+    const errCode = res.error?.code;
+    return res.status === 0 || errCode !== 'ENOENT';
+}
+function loadSmtpConfig() {
+    const host = process.env.SMTP_HOST?.trim();
+    if (!host)
+        return null;
+    const port = parseInt(process.env.SMTP_PORT || '', 10) || 587;
+    const secureEnv = (process.env.SMTP_SECURE || '').toLowerCase();
+    const secure = secureEnv === 'true' || secureEnv === '1' || port === 465;
+    const user = process.env.SMTP_USER?.trim();
+    const pass = process.env.SMTP_PASS;
+    return { host, port, secure, user: user || undefined, pass: pass || undefined };
+}
+async function sendViaSmtp(opts, smtp) {
+    const transport = nodemailer_1.default.createTransport({
+        host: smtp.host,
+        port: smtp.port,
+        secure: smtp.secure,
+        auth: smtp.user && smtp.pass ? { user: smtp.user, pass: smtp.pass } : undefined,
+    });
+    await transport.verify();
+    await transport.sendMail({
+        from: formatAddress(opts.from),
+        to: toAddressList(opts.to)?.join(', '),
+        cc: toAddressList(opts.cc)?.join(', '),
+        bcc: toAddressList(opts.bcc)?.join(', '),
+        replyTo: opts.replyTo ? formatAddress(opts.replyTo) : undefined,
+        subject: opts.subject,
+        text: opts.text,
+    });
+}
+function sendViaSendmail(opts) {
+    const message = buildSendmailMessage(opts);
+    const result = (0, child_process_1.spawnSync)('sendmail', ['-t', '-i'], {
+        input: message,
+        encoding: 'utf8',
+        stdio: ['pipe', 'pipe', 'pipe'],
+    });
+    if (result.status !== 0) {
+        const stderr = result.stderr?.toString() || 'Unknown sendmail error';
+        throw new Error(stderr);
+    }
+}
+function createEmailTool() {
+    const smtp = loadSmtpConfig();
+    return {
+        isAvailable() {
+            return Boolean(smtp) || hasSendmail();
+        },
+        async send(options) {
+            if (!options.to || options.to.length === 0) {
+                throw new Error('Email requires at least one recipient');
+            }
+            if (options.dryRun) {
+                logger_1.logger.info({ to: options.to.length, subject: options.subject }, 'Email dry run');
+                return { ok: true, message: 'dry-run' };
+            }
+            if (smtp) {
+                try {
+                    await sendViaSmtp(options, smtp);
+                    logger_1.logger.info({ subject: options.subject, via: 'smtp' }, 'Email sent');
+                    return { ok: true, message: 'sent:smtp' };
+                }
+                catch (error) {
+                    logger_1.logger.warn({ error }, 'SMTP send failed; falling back to sendmail');
+                }
+            }
+            if (!hasSendmail()) {
+                throw new Error('No email transport available. Configure SMTP_* or install sendmail.');
+            }
+            try {
+                sendViaSendmail(options);
+                logger_1.logger.info({ subject: options.subject, via: 'sendmail' }, 'Email sent');
+                return { ok: true, message: 'sent:sendmail' };
+            }
+            catch (error) {
+                logger_1.logger.error({ error }, 'Email send failed');
+                throw error;
+            }
+        },
+    };
+}
+//# sourceMappingURL=email.js.map

package/dist/tools/email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email.js","sourceRoot":"","sources":["../../src/tools/email.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;AA8HH,0CA0CC;AAtKD,iDAA0C;AAC1C,4DAAoC;AACpC,4CAAyC;AA+BzC,SAAS,aAAa,CAAC,KAA4B;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC;IAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,OAAO,IAAI,QAAQ,MAAM,KAAK,CAAC,KAAK,GAAG,CAAC;AAC1C,CAAC;AAED,SAAS,aAAa,CAAC,IAAmC;IACxD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACjD,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAsB;IAClD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,SAAS,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAE7D,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClC,IAAI,EAAE;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAE7C,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,GAAG;QAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEhD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClE,IAAI,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,OAAO,EAAE,CAAC,CAAC;IAElD,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAClC,OAAO,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAEhD,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,GAAG,GAAG,IAAA,yBAAS,EAAC,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAI,GAAG,CAAC,KAA2C,EAAE,IAAI,CAAC;IACvE,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,QAAQ,CAAC;AAClD,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;IAC9D,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAChE,MAAM,MAAM,GAAG,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC;IAEzE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IAEnC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,SAAS,EAAE,IAAI,EAAE,IAAI,IAAI,SAAS,EAAE,CAAC;AAClF,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAsB,EAAE,IAAgB;IACjE,MAAM,SAAS,GAAG,oBAAU,CAAC,eAAe,CAAC;QAC3C,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC,CAAC;IAEH,MAAM,SAAS,CAAC,MAAM,EAAE,CAAC;IAEzB,MAAM,SAAS,CAAC,QAAQ,CAAC;QACvB,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9B,EAAE,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC;QACtC,EAAE,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC;QACtC,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC;QACxC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/D,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,IAAsB;IAC7C,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAE3C,MAAM,MAAM,GAAG,IAAA,yBAAS,EAAC,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;QACjD,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;KAChC,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,wBAAwB,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,SAAgB,eAAe;IAC7B,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAE9B,OAAO;QACL,WAAW;YACT,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;QACxC,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,OAAyB;YAClC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC3D,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,eAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;gBAClF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YAC1C,CAAC;YAED,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC;oBACH,MAAM,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBACjC,eAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC;oBACrE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;gBAC5C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,eAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,4CAA4C,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;YAED,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;YACzF,CAAC;YAED,IAAI,CAAC;gBACH,eAAe,CAAC,OAAO,CAAC,CAAC;gBACzB,eAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,YAAY,CAAC,CAAC;gBACzE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,eAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,mBAAmB,CAAC,CAAC;gBAC7C,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/exec.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Exec Tool - Clawdbot-style shell command execution
+ *
+ * Features:
+ * - Execute commands in workspace directory
+ * - Timeout support
+ * - Background execution
+ * - Elevated privileges (with approval)
+ * - TTY support for interactive commands
+ * - Approval gating via ExecApprovalsManager
+ */
+/** Exec options */
+export interface ExecOptions {
+    /** Working directory (defaults to workspace) */
+    cwd?: string;
+    /** Timeout in milliseconds */
+    timeout?: number;
+    /** Run in background */
+    background?: boolean;
+    /** Use elevated privileges */
+    elevated?: boolean;
+    /** Sandbox mode enforcement */
+    sandboxMode?: 'off' | 'docker';
+    /** Docker sandbox configuration */
+    sandbox?: {
+        image?: string;
+        networkEnabled?: boolean;
+        memory?: string;
+        cpus?: number;
+        readonly?: boolean;
+    };
+    /** Environment variables to add */
+    env?: Record<string, string>;
+    /** Max output size in bytes */
+    maxOutput?: number;
+    /** Agent ID for approval checking */
+    agentId?: string;
+    /** Session ID for approval tracking */
+    sessionId?: string;
+    /** Skip approval check (use with caution) */
+    skipApproval?: boolean;
+    /** Provider name for elevated permission checks */
+    provider?: string;
+    /** Sender ID for elevated permission checks */
+    senderId?: string;
+    /** Channel ID for elevated permission checks */
+    channelId?: string;
+    /** User roles for elevated permission checks */
+    roles?: string[];
+}
+/** Exec result */
+export interface ExecResult {
+    stdout: string;
+    stderr: string;
+    exitCode: number | null;
+    signal: string | null;
+    timedOut: boolean;
+    /** Process ID if running in background */
+    pid?: number;
+}
+export interface ExecTool {
+    /** Execute a command */
+    run(command: string, options?: ExecOptions): Promise<ExecResult>;
+    /** List background processes */
+    listBackground(): Array<{
+        pid: number;
+        command: string;
+        startedAt: Date;
+        running: boolean;
+    }>;
+    /** Get background process output */
+    getOutput(pid: number): {
+        stdout: string;
+        stderr: string;
+    } | null;
+    /** Kill a background process */
+    kill(pid: number): boolean;
+    /** Clear completed background processes */
+    clearCompleted(): number;
+}
+export declare function createExecTool(workspaceDir: string, defaultAgentId?: string): ExecTool;

package/dist/tools/exec.js

@@ -0,0 +1,373 @@
+"use strict";
+/**
+ * Exec Tool - Clawdbot-style shell command execution
+ *
+ * Features:
+ * - Execute commands in workspace directory
+ * - Timeout support
+ * - Background execution
+ * - Elevated privileges (with approval)
+ * - TTY support for interactive commands
+ * - Approval gating via ExecApprovalsManager
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createExecTool = createExecTool;
+const child_process_1 = require("child_process");
+const logger_1 = require("../utils/logger");
+const index_1 = require("../permissions/index");
+const backgroundProcesses = new Map();
+const DEFAULT_TIMEOUT = 30000; // 30 seconds
+const DEFAULT_MAX_OUTPUT = 1024 * 1024; // 1MB
+const DEFAULT_DOCKER_IMAGE = process.env.CLODDS_SANDBOX_IMAGE || 'debian:bookworm-slim';
+function runProcess(command, args, options = {}) {
+    return new Promise((resolve) => {
+        const child = (0, child_process_1.spawn)(command, args, {
+            cwd: options.cwd,
+            env: options.env,
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        let stdout = '';
+        let stderr = '';
+        let timedOut = false;
+        const timeoutId = options.timeout && options.timeout > 0
+            ? setTimeout(() => {
+                timedOut = true;
+                child.kill('SIGTERM');
+                setTimeout(() => {
+                    if (!child.killed)
+                        child.kill('SIGKILL');
+                }, 1000);
+            }, options.timeout)
+            : null;
+        child.stdout?.on('data', (data) => {
+            stdout += data.toString();
+        });
+        child.stderr?.on('data', (data) => {
+            stderr += data.toString();
+        });
+        child.on('close', (code) => {
+            if (timeoutId)
+                clearTimeout(timeoutId);
+            resolve({
+                stdout: stdout.trim(),
+                stderr: timedOut ? (stderr || 'Process timed out') : stderr.trim(),
+                exitCode: timedOut ? 124 : code ?? 1,
+            });
+        });
+        child.on('error', (err) => {
+            if (timeoutId)
+                clearTimeout(timeoutId);
+            resolve({
+                stdout: '',
+                stderr: err.message,
+                exitCode: 1,
+            });
+        });
+    });
+}
+async function runInDockerSandbox(command, cwd, workspaceRoot, env, timeout, sandbox) {
+    // Ensure cwd is within the workspace sandbox root.
+    (0, index_1.assertSandboxPath)(cwd, { root: workspaceRoot, allowSymlinks: false });
+    const image = sandbox.image || DEFAULT_DOCKER_IMAGE;
+    const networkEnabled = sandbox.networkEnabled ?? false;
+    const readonly = sandbox.readonly ?? false;
+    // Basic docker availability check.
+    const dockerInfo = await runProcess('docker', ['info'], { timeout: 5000 });
+    if (dockerInfo.exitCode !== 0) {
+        return {
+            stdout: '',
+            stderr: dockerInfo.stderr || 'Docker is not available',
+            exitCode: 127,
+            signal: null,
+            timedOut: false,
+        };
+    }
+    const containerName = `clodds-sbx-${Date.now().toString(36)}-${Math.random()
+        .toString(36)
+        .slice(2, 8)}`;
+    const dockerArgs = [
+        'run',
+        '--name',
+        containerName,
+        '--rm',
+        '-d',
+        '--cap-drop',
+        'ALL',
+        '--security-opt',
+        'no-new-privileges',
+        '--pids-limit',
+        '256',
+        '-v',
+        `${cwd}:/workspace${readonly ? ':ro' : ''}`,
+        '-w',
+        '/workspace',
+        '--network',
+        networkEnabled ? 'bridge' : 'none',
+    ];
+    if (sandbox.memory) {
+        dockerArgs.push('-m', sandbox.memory);
+    }
+    if (sandbox.cpus) {
+        dockerArgs.push('--cpus', String(sandbox.cpus));
+    }
+    dockerArgs.push(image, 'sh', '-lc', command);
+    const started = await runProcess('docker', dockerArgs, { env, timeout: 15000 });
+    if (started.exitCode !== 0) {
+        return {
+            stdout: started.stdout,
+            stderr: started.stderr || 'Failed to start docker sandbox',
+            exitCode: started.exitCode,
+            signal: null,
+            timedOut: false,
+        };
+    }
+    let timedOut = false;
+    let exitCode = null;
+    const waitPromise = runProcess('docker', ['wait', containerName], {
+        env,
+        timeout: Math.max(timeout, 1000),
+    });
+    const timeoutPromise = new Promise((resolve) => {
+        setTimeout(async () => {
+            timedOut = true;
+            await runProcess('docker', ['kill', '-s', 'TERM', containerName], { env, timeout: 3000 });
+            setTimeout(() => {
+                void runProcess('docker', ['kill', '-s', 'KILL', containerName], {
+                    env,
+                    timeout: 3000,
+                });
+            }, 1000);
+            resolve({ exitCode: 124 });
+        }, timeout);
+    });
+    const waitResult = await Promise.race([waitPromise, timeoutPromise]);
+    if ('stdout' in waitResult) {
+        const parsed = parseInt(waitResult.stdout, 10);
+        exitCode = Number.isFinite(parsed) ? parsed : waitResult.exitCode;
+    }
+    else {
+        exitCode = waitResult.exitCode;
+    }
+    const logs = await runProcess('docker', ['logs', containerName], {
+        env,
+        timeout: 10000,
+    });
+    // Best-effort cleanup (container may already be removed).
+    void runProcess('docker', ['rm', '-f', containerName], { env, timeout: 5000 });
+    return {
+        stdout: logs.stdout,
+        stderr: logs.stderr,
+        exitCode: exitCode ?? 1,
+        signal: null,
+        timedOut,
+    };
+}
+function createExecTool(workspaceDir, defaultAgentId = 'default') {
+    return {
+        async run(command, options = {}) {
+            const cwd = options.cwd || workspaceDir;
+            const timeout = options.timeout || DEFAULT_TIMEOUT;
+            const maxOutput = options.maxOutput || DEFAULT_MAX_OUTPUT;
+            const agentId = options.agentId || defaultAgentId;
+            const sandboxMode = options.sandboxMode || (process.env.CLODDS_SANDBOX_MODE === 'docker' ? 'docker' : 'off');
+            logger_1.logger.info({ command, cwd, background: options.background, agentId }, 'Executing command');
+            // =========================================================================
+            // APPROVAL GATING - Check command against allowlist/approval system
+            // =========================================================================
+            if (!options.skipApproval) {
+                const approvalResult = await index_1.execApprovals.checkCommand(agentId, command, {
+                    sessionId: options.sessionId,
+                    skipApproval: false,
+                });
+                if (!approvalResult.allowed) {
+                    logger_1.logger.warn({ command, reason: approvalResult.reason, agentId }, 'Command blocked by approval system');
+                    return {
+                        stdout: '',
+                        stderr: `Command blocked: ${approvalResult.reason}`,
+                        exitCode: 126, // Standard "permission denied" exit code
+                        signal: null,
+                        timedOut: false,
+                    };
+                }
+                logger_1.logger.debug({ command, reason: approvalResult.reason, entry: approvalResult.entry?.id }, 'Command approved');
+            }
+            // Build environment
+            const env = {
+                ...process.env,
+                ...options.env,
+            };
+            // Handle elevated execution - requires explicit permission check
+            let finalCommand = command;
+            if (options.elevated) {
+                // Check if elevated permissions are allowed for this user/context
+                const canElevate = options.provider && options.senderId
+                    ? index_1.elevatedPermissions.isAllowed(options.provider, options.senderId, options.channelId, options.roles)
+                    : false;
+                if (!canElevate) {
+                    logger_1.logger.warn({ command, agentId }, 'Elevated execution denied - not authorized');
+                    return {
+                        stdout: '',
+                        stderr: 'Elevated execution denied: User not authorized for elevated privileges',
+                        exitCode: 126,
+                        signal: null,
+                        timedOut: false,
+                    };
+                }
+                // Require an explicit approval decision for the elevated form.
+                const elevatedApproval = await index_1.execApprovals.checkCommand(agentId, `sudo ${command}`, {
+                    sessionId: options.sessionId,
+                    skipApproval: false,
+                });
+                if (!elevatedApproval.allowed) {
+                    logger_1.logger.warn({ command, reason: elevatedApproval.reason, agentId }, 'Elevated command blocked by approval system');
+                    return {
+                        stdout: '',
+                        stderr: `Elevated command blocked: ${elevatedApproval.reason}`,
+                        exitCode: 126,
+                        signal: null,
+                        timedOut: false,
+                    };
+                }
+                logger_1.logger.warn({ command, agentId, senderId: options.senderId }, 'Elevated execution approved');
+                // Use non-interactive sudo to avoid hanging on password prompts.
+                finalCommand = `sudo -n -- ${command}`;
+            }
+            // Enforce docker sandboxing when configured.
+            if (sandboxMode === 'docker' && !options.background) {
+                logger_1.logger.info({ command, cwd }, 'Executing command in Docker sandbox');
+                const sandboxConfig = options.sandbox || {};
+                return runInDockerSandbox(finalCommand, cwd, workspaceDir, env, timeout, sandboxConfig);
+            }
+            return new Promise((resolve) => {
+                const child = (0, child_process_1.spawn)('sh', ['-c', finalCommand], {
+                    cwd,
+                    env,
+                    stdio: ['pipe', 'pipe', 'pipe'],
+                });
+                let stdout = '';
+                let stderr = '';
+                let timedOut = false;
+                // Handle background mode
+                if (options.background) {
+                    const bgProcess = {
+                        pid: child.pid,
+                        command,
+                        startedAt: new Date(),
+                        process: child,
+                        stdout: [],
+                        stderr: [],
+                    };
+                    child.stdout?.on('data', (data) => {
+                        bgProcess.stdout.push(data.toString());
+                    });
+                    child.stderr?.on('data', (data) => {
+                        bgProcess.stderr.push(data.toString());
+                    });
+                    backgroundProcesses.set(child.pid, bgProcess);
+                    resolve({
+                        stdout: '',
+                        stderr: '',
+                        exitCode: null,
+                        signal: null,
+                        timedOut: false,
+                        pid: child.pid,
+                    });
+                    return;
+                }
+                // Collect output with size limits
+                child.stdout?.on('data', (data) => {
+                    if (stdout.length < maxOutput) {
+                        stdout += data.toString();
+                    }
+                });
+                child.stderr?.on('data', (data) => {
+                    if (stderr.length < maxOutput) {
+                        stderr += data.toString();
+                    }
+                });
+                // Set timeout
+                const timeoutId = setTimeout(() => {
+                    timedOut = true;
+                    child.kill('SIGTERM');
+                    setTimeout(() => {
+                        if (!child.killed) {
+                            child.kill('SIGKILL');
+                        }
+                    }, 1000);
+                }, timeout);
+                child.on('close', (code, signal) => {
+                    clearTimeout(timeoutId);
+                    // Truncate output if needed
+                    if (stdout.length > maxOutput) {
+                        stdout = stdout.slice(0, maxOutput) + '\n... (output truncated)';
+                    }
+                    if (stderr.length > maxOutput) {
+                        stderr = stderr.slice(0, maxOutput) + '\n... (output truncated)';
+                    }
+                    resolve({
+                        stdout: stdout.trim(),
+                        stderr: stderr.trim(),
+                        exitCode: code,
+                        signal: signal,
+                        timedOut,
+                    });
+                });
+                child.on('error', (err) => {
+                    clearTimeout(timeoutId);
+                    resolve({
+                        stdout: '',
+                        stderr: err.message,
+                        exitCode: 1,
+                        signal: null,
+                        timedOut: false,
+                    });
+                });
+            });
+        },
+        listBackground() {
+            return Array.from(backgroundProcesses.values()).map((bp) => ({
+                pid: bp.pid,
+                command: bp.command,
+                startedAt: bp.startedAt,
+                running: !bp.process.killed && bp.process.exitCode === null,
+            }));
+        },
+        getOutput(pid) {
+            const bp = backgroundProcesses.get(pid);
+            if (!bp)
+                return null;
+            return {
+                stdout: bp.stdout.join(''),
+                stderr: bp.stderr.join(''),
+            };
+        },
+        kill(pid) {
+            const bp = backgroundProcesses.get(pid);
+            if (!bp)
+                return false;
+            try {
+                bp.process.kill('SIGTERM');
+                setTimeout(() => {
+                    if (!bp.process.killed) {
+                        bp.process.kill('SIGKILL');
+                    }
+                }, 1000);
+                return true;
+            }
+            catch {
+                return false;
+            }
+        },
+        clearCompleted() {
+            let cleared = 0;
+            for (const [pid, bp] of backgroundProcesses) {
+                if (bp.process.killed || bp.process.exitCode !== null) {
+                    backgroundProcesses.delete(pid);
+                    cleared++;
+                }
+            }
+            return cleared;
+        },
+    };
+}
+//# sourceMappingURL=exec.js.map

package/dist/tools/exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.js","sourceRoot":"","sources":["../../src/tools/exec.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AAgRH,wCAuPC;AArgBD,iDAAoD;AAEpD,4CAAyC;AACzC,gDAI8B;AA+D9B,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAA6B,CAAC;AAEjE,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,aAAa;AAC5C,MAAM,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM;AAC9C,MAAM,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,sBAAsB,CAAC;AAExF,SAAS,UAAU,CACjB,OAAe,EACf,IAAc,EACd,UAAuE,EAAE;IAEzE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,OAAO,EAAE,IAAI,EAAE;YACjC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,MAAM,SAAS,GACb,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC;YACpC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;gBACd,QAAQ,GAAG,IAAI,CAAC;gBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,UAAU,CAAC,GAAG,EAAE;oBACd,IAAI,CAAC,KAAK,CAAC,MAAM;wBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3C,CAAC,EAAE,IAAI,CAAC,CAAC;YACX,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC;YACrB,CAAC,CAAC,IAAI,CAAC;QAEX,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAChC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAChC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,OAAO,CAAC;gBACN,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;gBACrB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,mBAAmB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBAClE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;aACrC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,IAAI,SAAS;gBAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,OAAO,CAAC;gBACN,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,GAAG,CAAC,OAAO;gBACnB,QAAQ,EAAE,CAAC;aACZ,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,OAAe,EACf,GAAW,EACX,aAAqB,EACrB,GAAsB,EACtB,OAAe,EACf,OAA4C;IAE5C,mDAAmD;IACnD,IAAA,yBAAiB,EAAC,GAAG,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;IAEtE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,oBAAoB,CAAC;IACpD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC;IAE3C,mCAAmC;IACnC,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,yBAAyB;YACtD,QAAQ,EAAE,GAAG;YACb,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE;SACzE,QAAQ,CAAC,EAAE,CAAC;SACZ,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAEjB,MAAM,UAAU,GAAG;QACjB,KAAK;QACL,QAAQ;QACR,aAAa;QACb,MAAM;QACN,IAAI;QACJ,YAAY;QACZ,KAAK;QACL,gBAAgB;QAChB,mBAAmB;QACnB,cAAc;QACd,KAAK;QACL,IAAI;QACJ,GAAG,GAAG,cAAc,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3C,IAAI;QACJ,YAAY;QACZ,WAAW;QACX,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;KACnC,CAAC;IAEF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAE7C,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,gCAAgC;YAC1D,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;SAChB,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,QAAQ,GAAkB,IAAI,CAAC;IAEnC,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE;QAChE,GAAG;QACH,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC;KACjC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,IAAI,OAAO,CAAuB,CAAC,OAAO,EAAE,EAAE;QACnE,UAAU,CAAC,KAAK,IAAI,EAAE;YACpB,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1F,UAAU,CAAC,GAAG,EAAE;gBACd,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE;oBAC/D,GAAG;oBACH,OAAO,EAAE,IAAI;iBACd,CAAC,CAAC;YACL,CAAC,EAAE,IAAI,CAAC,CAAC;YACT,OAAO,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7B,CAAC,EAAE,OAAO,CAAC,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;IACrE,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC/C,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IACjC,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE;QAC/D,GAAG;QACH,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IAEH,0DAA0D;IAC1D,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/E,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,QAAQ,IAAI,CAAC;QACvB,MAAM,EAAE,IAAI;QACZ,QAAQ;KACT,CAAC;AACJ,CAAC;AAwBD,SAAgB,cAAc,CAAC,YAAoB,EAAE,iBAAyB,SAAS;IACrF,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,GAAG,EAAE;YAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,YAAY,CAAC;YACxC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC;YACnD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;YAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC;YAClD,MAAM,WAAW,GACf,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAE3F,eAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,mBAAmB,CAAC,CAAC;YAE5F,4EAA4E;YAC5E,oEAAoE;YACpE,4EAA4E;YAC5E,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;gBAC1B,MAAM,cAAc,GAAG,MAAM,qBAAa,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE;oBACxE,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,YAAY,EAAE,KAAK;iBACpB,CAAC,CAAC;gBAEH,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;oBAC5B,eAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,oCAAoC,CAAC,CAAC;oBACvG,OAAO;wBACL,MAAM,EAAE,EAAE;wBACV,MAAM,EAAE,oBAAoB,cAAc,CAAC,MAAM,EAAE;wBACnD,QAAQ,EAAE,GAAG,EAAE,yCAAyC;wBACxD,MAAM,EAAE,IAAI;wBACZ,QAAQ,EAAE,KAAK;qBAChB,CAAC;gBACJ,CAAC;gBAED,eAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,kBAAkB,CAAC,CAAC;YAChH,CAAC;YAED,oBAAoB;YACpB,MAAM,GAAG,GAAG;gBACV,GAAG,OAAO,CAAC,GAAG;gBACd,GAAG,OAAO,CAAC,GAAG;aACf,CAAC;YAEF,iEAAiE;YACjE,IAAI,YAAY,GAAG,OAAO,CAAC;YAC3B,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,kEAAkE;gBAClE,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;oBACrD,CAAC,CAAC,2BAAmB,CAAC,SAAS,CAC3B,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,KAAK,CACd;oBACH,CAAC,CAAC,KAAK,CAAC;gBAEV,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,eAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,4CAA4C,CAAC,CAAC;oBAChF,OAAO;wBACL,MAAM,EAAE,EAAE;wBACV,MAAM,EAAE,wEAAwE;wBAChF,QAAQ,EAAE,GAAG;wBACb,MAAM,EAAE,IAAI;wBACZ,QAAQ,EAAE,KAAK;qBAChB,CAAC;gBACJ,CAAC;gBAED,+DAA+D;gBAC/D,MAAM,gBAAgB,GAAG,MAAM,qBAAa,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,OAAO,EAAE,EAAE;oBACpF,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,YAAY,EAAE,KAAK;iBACpB,CAAC,CAAC;gBAEH,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;oBAC9B,eAAM,CAAC,IAAI,CACT,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,EACrD,6CAA6C,CAC9C,CAAC;oBACF,OAAO;wBACL,MAAM,EAAE,EAAE;wBACV,MAAM,EAAE,6BAA6B,gBAAgB,CAAC,MAAM,EAAE;wBAC9D,QAAQ,EAAE,GAAG;wBACb,MAAM,EAAE,IAAI;wBACZ,QAAQ,EAAE,KAAK;qBAChB,CAAC;gBACJ,CAAC;gBAED,eAAM,CAAC,IAAI,CACT,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,EAChD,6BAA6B,CAC9B,CAAC;gBACF,iEAAiE;gBACjE,YAAY,GAAG,cAAc,OAAO,EAAE,CAAC;YACzC,CAAC;YAED,6CAA6C;YAC7C,IAAI,WAAW,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBACpD,eAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,qCAAqC,CAAC,CAAC;gBACrE,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;gBAC5C,OAAO,kBAAkB,CAAC,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;YAC1F,CAAC;YAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC7B,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,IAAI,EAAE,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE;oBAC9C,GAAG;oBACH,GAAG;oBACH,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;iBAChC,CAAC,CAAC;gBAEH,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;gBAErB,yBAAyB;gBACzB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;oBACvB,MAAM,SAAS,GAAsB;wBACnC,GAAG,EAAE,KAAK,CAAC,GAAI;wBACf,OAAO;wBACP,SAAS,EAAE,IAAI,IAAI,EAAE;wBACrB,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,EAAE;wBACV,MAAM,EAAE,EAAE;qBACX,CAAC;oBAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;wBAChC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACzC,CAAC,CAAC,CAAC;oBAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;wBAChC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACzC,CAAC,CAAC,CAAC;oBAEH,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,GAAI,EAAE,SAAS,CAAC,CAAC;oBAE/C,OAAO,CAAC;wBACN,MAAM,EAAE,EAAE;wBACV,MAAM,EAAE,EAAE;wBACV,QAAQ,EAAE,IAAI;wBACd,MAAM,EAAE,IAAI;wBACZ,QAAQ,EAAE,KAAK;wBACf,GAAG,EAAE,KAAK,CAAC,GAAG;qBACf,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,kCAAkC;gBAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBAChC,IAAI,MAAM,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;wBAC9B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC5B,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBAChC,IAAI,MAAM,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;wBAC9B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC5B,CAAC;gBACH,CAAC,CAAC,CAAC;gBAEH,cAAc;gBACd,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;oBAChC,QAAQ,GAAG,IAAI,CAAC;oBAChB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACtB,UAAU,CAAC,GAAG,EAAE;wBACd,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;4BAClB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;wBACxB,CAAC;oBACH,CAAC,EAAE,IAAI,CAAC,CAAC;gBACX,CAAC,EAAE,OAAO,CAAC,CAAC;gBAEZ,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;oBACjC,YAAY,CAAC,SAAS,CAAC,CAAC;oBAExB,4BAA4B;oBAC5B,IAAI,MAAM,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;wBAC9B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,0BAA0B,CAAC;oBACnE,CAAC;oBACD,IAAI,MAAM,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;wBAC9B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,0BAA0B,CAAC;oBACnE,CAAC;oBAED,OAAO,CAAC;wBACN,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;wBACrB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;wBACrB,QAAQ,EAAE,IAAI;wBACd,MAAM,EAAE,MAAM;wBACd,QAAQ;qBACT,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;oBACxB,YAAY,CAAC,SAAS,CAAC,CAAC;oBACxB,OAAO,CAAC;wBACN,MAAM,EAAE,EAAE;wBACV,MAAM,EAAE,GAAG,CAAC,OAAO;wBACnB,QAAQ,EAAE,CAAC;wBACX,MAAM,EAAE,IAAI;wBACZ,QAAQ,EAAE,KAAK;qBAChB,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC;QAED,cAAc;YACZ,OAAO,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC3D,GAAG,EAAE,EAAE,CAAC,GAAG;gBACX,OAAO,EAAE,EAAE,CAAC,OAAO;gBACnB,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,OAAO,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI;aAC5D,CAAC,CAAC,CAAC;QACN,CAAC;QAED,SAAS,CAAC,GAAG;YACX,MAAM,EAAE,GAAG,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAErB,OAAO;gBACL,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;aAC3B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,GAAG;YACN,MAAM,EAAE,GAAG,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,CAAC,EAAE;gBAAE,OAAO,KAAK,CAAC;YAEtB,IAAI,CAAC;gBACH,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3B,UAAU,CAAC,GAAG,EAAE;oBACd,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;wBACvB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC7B,CAAC;gBACH,CAAC,EAAE,IAAI,CAAC,CAAC;gBACT,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,cAAc;YACZ,IAAI,OAAO,GAAG,CAAC,CAAC;YAChB,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,mBAAmB,EAAE,CAAC;gBAC5C,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACtD,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAChC,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/files.d.ts

@@ -0,0 +1,46 @@
+/**
+ * File Operations Tool - safe workspace file manipulation
+ */
+export interface FileReadOptions {
+    encoding?: BufferEncoding;
+    maxBytes?: number;
+}
+export interface FileWriteOptions {
+    encoding?: BufferEncoding;
+    append?: boolean;
+    createDirs?: boolean;
+}
+export interface FileEdit {
+    find: string | RegExp;
+    replace: string;
+    all?: boolean;
+}
+export interface FileEditOptions {
+    encoding?: BufferEncoding;
+    createIfMissing?: boolean;
+}
+export interface FileListOptions {
+    recursive?: boolean;
+    limit?: number;
+    includeDirs?: boolean;
+}
+export interface FileSearchOptions {
+    recursive?: boolean;
+    limit?: number;
+    encoding?: BufferEncoding;
+}
+export interface FileTool {
+    read(filePath: string, options?: FileReadOptions): string;
+    write(filePath: string, content: string, options?: FileWriteOptions): void;
+    edit(filePath: string, edits: FileEdit[], options?: FileEditOptions): {
+        updated: boolean;
+        content: string;
+    };
+    list(dirPath?: string, options?: FileListOptions): string[];
+    search(dirPath: string, needle: string | RegExp, options?: FileSearchOptions): Array<{
+        path: string;
+        line: number;
+        preview: string;
+    }>;
+}
+export declare function createFileTool(workspaceRoot: string): FileTool;