localant 1.0.0

package/packages/gateway/dist/tools/filesystem.js

@@ -0,0 +1,141 @@
+import { z } from "zod";
+export function registerFilesystemTools(gw) {
+    const r = gw.registry;
+    r.register({
+        name: "fs_list_allowed_directories",
+        description: "List directories the gateway is allowed to access.",
+        risk: 0,
+        inputSchema: z.object({}).strip(),
+        handler: () => ({ allowed: gw.pathGuard.allowed() }),
+    });
+    r.register({
+        name: "fs_add_allowed_directory",
+        description: "Add a directory to the filesystem allowlist.",
+        risk: 2,
+        inputSchema: z.object({ path: z.string() }),
+        summarize: (i) => `allow directory ${i.path}`,
+        handler: (i) => {
+            const cfg = gw.config();
+            const dirs = Array.from(new Set([...cfg.security.allowedDirectories, i.path]));
+            gw.saveConfig({ ...cfg, security: { ...cfg.security, allowedDirectories: dirs } });
+            return { allowed: gw.pathGuard.allowed() };
+        },
+    });
+    r.register({
+        name: "fs_remove_allowed_directory",
+        description: "Remove a directory from the filesystem allowlist.",
+        risk: 2,
+        inputSchema: z.object({ path: z.string() }),
+        handler: (i) => {
+            const cfg = gw.config();
+            const dirs = cfg.security.allowedDirectories.filter((d) => d !== i.path);
+            gw.saveConfig({ ...cfg, security: { ...cfg.security, allowedDirectories: dirs } });
+            return { allowed: gw.pathGuard.allowed() };
+        },
+    });
+    r.register({
+        name: "fs_list_files",
+        description: "List files in a directory inside the allowlist.",
+        risk: 0,
+        inputSchema: z.object({ path: z.string() }),
+        handler: (i) => gw.fs.listFiles(i.path),
+    });
+    r.register({
+        name: "fs_read_file",
+        description: "Read a text file inside the allowlist.",
+        risk: 0,
+        inputSchema: z.object({ path: z.string() }),
+        handler: (i) => ({ path: i.path, content: gw.fs.readFile(i.path) }),
+    });
+    r.register({
+        name: "fs_read_file_range",
+        description: "Read a line range from a file (1-indexed, inclusive).",
+        risk: 0,
+        inputSchema: z.object({ path: z.string(), startLine: z.number().int().min(1), endLine: z.number().int().min(1) }),
+        handler: (i) => ({ path: i.path, content: gw.fs.readRange(i.path, i.startLine, i.endLine) }),
+    });
+    r.register({
+        name: "fs_search_files",
+        description: "Find files by glob pattern under a directory.",
+        risk: 0,
+        inputSchema: z.object({ path: z.string(), pattern: z.string(), limit: z.number().int().min(1).max(1000).default(200) }),
+        handler: (i) => ({ matches: gw.fs.searchFiles(i.path, i.pattern, i.limit) }),
+    });
+    r.register({
+        name: "fs_search_content",
+        description: "Search file contents for a substring under a directory.",
+        risk: 0,
+        inputSchema: z.object({ path: z.string(), query: z.string(), limit: z.number().int().min(1).max(1000).default(200) }),
+        handler: (i) => ({ matches: gw.fs.searchContent(i.path, i.query, i.limit) }),
+    });
+    r.register({
+        name: "fs_get_file_info",
+        description: "Get metadata for a file or directory.",
+        risk: 0,
+        inputSchema: z.object({ path: z.string() }),
+        handler: (i) => gw.fs.getInfo(i.path),
+    });
+    r.register({
+        name: "fs_write_draft_file",
+        description: "Create a NEW draft file. Refuses to overwrite existing files.",
+        risk: 1,
+        inputSchema: z.object({ path: z.string(), content: z.string() }),
+        summarize: (i) => `write draft ${i.path}`,
+        handler: (i) => gw.fs.writeDraft(i.path, i.content),
+    });
+    r.register({
+        name: "fs_create_file",
+        description: "Create a file, optionally overwriting (a backup is kept on overwrite).",
+        risk: 2,
+        inputSchema: z.object({ path: z.string(), content: z.string(), overwrite: z.boolean().default(false) }),
+        summarize: (i) => `create file ${i.path}${i.overwrite ? " (overwrite)" : ""}`,
+        handler: (i) => gw.fs.createFile(i.path, i.content, i.overwrite),
+    });
+    r.register({
+        name: "fs_apply_patch_with_backup",
+        description: "Replace an existing file's contents, keeping a backup.",
+        risk: 2,
+        inputSchema: z.object({ path: z.string(), content: z.string() }),
+        summarize: (i) => `patch file ${i.path}`,
+        handler: (i) => gw.fs.applyPatchWithBackup(i.path, i.content),
+    });
+    r.register({
+        name: "fs_move_file",
+        description: "Move/rename a file within the allowlist.",
+        risk: 2,
+        inputSchema: z.object({ from: z.string(), to: z.string() }),
+        summarize: (i) => `move ${i.from} -> ${i.to}`,
+        handler: (i) => gw.fs.moveFile(i.from, i.to),
+    });
+    r.register({
+        name: "fs_delete_file_with_approval",
+        description: "Delete a file (a backup is kept). Requires approval.",
+        risk: 3,
+        inputSchema: z.object({ path: z.string() }),
+        summarize: (i) => `delete file ${i.path}`,
+        handler: (i) => gw.fs.deleteFile(i.path),
+    });
+    r.register({
+        name: "fs_backup_file",
+        description: "Create a backup of a file.",
+        risk: 1,
+        inputSchema: z.object({ path: z.string() }),
+        handler: (i) => gw.fs.backup(i.path),
+    });
+    r.register({
+        name: "fs_restore_backup",
+        description: "Restore a previously created backup by id.",
+        risk: 2,
+        inputSchema: z.object({ id: z.string() }),
+        summarize: (i) => `restore backup ${i.id}`,
+        handler: (i) => gw.fs.restoreBackup(i.id),
+    });
+    r.register({
+        name: "fs_list_backups",
+        description: "List available file backups.",
+        risk: 0,
+        inputSchema: z.object({}).strip(),
+        handler: () => gw.fs.listBackups(),
+    });
+}
+//# sourceMappingURL=filesystem.js.map

package/packages/gateway/dist/tools/filesystem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem.js","sourceRoot":"","sources":["../../src/tools/filesystem.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,UAAU,uBAAuB,CAAC,EAAW;IACjD,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;IAEtB,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,oDAAoD;QACjE,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE;QACjC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;KACrD,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,8CAA8C;QAC3D,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,IAAI,EAAE;QAC7C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACb,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC/E,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACnF,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,CAAC;KACF,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,mDAAmD;QAChE,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACb,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;YACzE,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACnF,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7C,CAAC;KACF,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,iDAAiD;QAC9D,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;KACxC,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,wCAAwC;QACrD,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,uDAAuD;QACpE,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACjH,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KAC7F,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,+CAA+C;QAC5D,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvH,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;KAC7E,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,yDAAyD;QACtE,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACrH,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;KAC7E,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,uCAAuC;QACpD,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;KACtC,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,+DAA+D;QAC5E,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAChE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE;QACzC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;KACpD,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,wEAAwE;QACrF,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvG,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7E,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC;KACjE,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,wDAAwD;QACrE,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAChE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE;QACxC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;KAC9D,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,0CAA0C;QACvD,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3D,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,EAAE;QAC7C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,8BAA8B;QACpC,WAAW,EAAE,sDAAsD;QACnE,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE;QACzC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;KACzC,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,4BAA4B;QACzC,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;KACrC,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,4CAA4C;QACzD,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,EAAE;QAC1C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,8BAA8B;QAC3C,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE;QACjC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE;KACnC,CAAC,CAAC;AACL,CAAC"}

package/packages/gateway/dist/tools/git.d.ts

@@ -0,0 +1,3 @@
+import type { Gateway } from "../gateway.js";
+export declare function registerGitTools(gw: Gateway): void;
+//# sourceMappingURL=git.d.ts.map

package/packages/gateway/dist/tools/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../src/tools/git.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAQ7C,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,OAAO,GAAG,IAAI,CAqFlD"}

package/packages/gateway/dist/tools/git.js

@@ -0,0 +1,92 @@
+import { z } from "zod";
+/** Resolve a project id or raw path to a filesystem path. */
+function resolveRepo(gw, repoOrId) {
+    const project = gw.projects.get(repoOrId);
+    return project ? project.path : repoOrId;
+}
+export function registerGitTools(gw) {
+    const r = gw.registry;
+    const repoArg = z.object({ repo: z.string().describe("Project id/name or path") });
+    r.register({
+        name: "git_status",
+        description: "Show git status for a project or repo path.",
+        risk: 0,
+        inputSchema: repoArg,
+        handler: async (i) => ({ output: await gw.git.status(resolveRepo(gw, i.repo)) }),
+    });
+    r.register({
+        name: "git_diff",
+        description: "Show the working-tree diff.",
+        risk: 0,
+        inputSchema: repoArg,
+        handler: async (i) => ({ output: await gw.git.diff(resolveRepo(gw, i.repo)) }),
+    });
+    r.register({
+        name: "git_diff_file",
+        description: "Show the diff for a single file.",
+        risk: 0,
+        inputSchema: z.object({ repo: z.string(), file: z.string() }),
+        handler: async (i) => ({ output: await gw.git.diffFile(resolveRepo(gw, i.repo), i.file) }),
+    });
+    r.register({
+        name: "git_list_changed_files",
+        description: "List changed files (porcelain).",
+        risk: 0,
+        inputSchema: repoArg,
+        handler: async (i) => ({ output: await gw.git.listChangedFiles(resolveRepo(gw, i.repo)) }),
+    });
+    r.register({
+        name: "git_branch",
+        description: "List branches.",
+        risk: 0,
+        inputSchema: repoArg,
+        handler: async (i) => ({ output: await gw.git.branch(resolveRepo(gw, i.repo)) }),
+    });
+    r.register({
+        name: "git_log",
+        description: "Show recent commit log.",
+        risk: 0,
+        inputSchema: z.object({ repo: z.string(), n: z.number().int().min(1).max(200).default(20) }),
+        handler: async (i) => ({ output: await gw.git.log(resolveRepo(gw, i.repo), i.n) }),
+    });
+    r.register({
+        name: "git_create_patch",
+        description: "Create a patch of current changes.",
+        risk: 0,
+        inputSchema: repoArg,
+        handler: async (i) => ({ patch: await gw.git.createPatch(resolveRepo(gw, i.repo)) }),
+    });
+    r.register({
+        name: "git_create_branch",
+        description: "Create and checkout a new branch.",
+        risk: 2,
+        inputSchema: z.object({ repo: z.string(), name: z.string() }),
+        summarize: (i) => `git branch ${i.name}`,
+        handler: async (i) => ({ output: await gw.git.createBranch(resolveRepo(gw, i.repo), i.name) }),
+    });
+    r.register({
+        name: "git_checkout_branch",
+        description: "Checkout an existing branch.",
+        risk: 2,
+        inputSchema: z.object({ repo: z.string(), name: z.string() }),
+        summarize: (i) => `git checkout ${i.name}`,
+        handler: async (i) => ({ output: await gw.git.checkoutBranch(resolveRepo(gw, i.repo), i.name) }),
+    });
+    r.register({
+        name: "git_commit",
+        description: "Commit changes with a message (optionally git add -A first).",
+        risk: 3,
+        inputSchema: z.object({ repo: z.string(), message: z.string(), addAll: z.boolean().default(true) }),
+        summarize: (i) => `git commit: ${i.message.slice(0, 60)}`,
+        handler: async (i) => ({ output: await gw.git.commit(resolveRepo(gw, i.repo), i.message, i.addAll) }),
+    });
+    r.register({
+        name: "git_restore_file",
+        description: "Discard changes to a file (git restore).",
+        risk: 3,
+        inputSchema: z.object({ repo: z.string(), file: z.string() }),
+        summarize: (i) => `git restore ${i.file}`,
+        handler: async (i) => ({ output: await gw.git.restoreFile(resolveRepo(gw, i.repo), i.file) }),
+    });
+}
+//# sourceMappingURL=git.js.map

package/packages/gateway/dist/tools/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/tools/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,6DAA6D;AAC7D,SAAS,WAAW,CAAC,EAAW,EAAE,QAAgB;IAChD,MAAM,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1C,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAAW;IAC1C,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;IACtB,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC;IAEnF,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,6CAA6C;QAC1D,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;KACjF,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,6BAA6B;QAC1C,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,kCAAkC;QAC/C,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;KAC3F,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,iCAAiC;QAC9C,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;KAC3F,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,gBAAgB;QAC7B,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;KACjF,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,yBAAyB;QACtC,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5F,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACnF,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,oCAAoC;QACjD,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,OAAO;QACpB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;KACrF,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,mCAAmC;QAChD,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7D,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE;QACxC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;KAC/F,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,8BAA8B;QAC3C,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7D,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE;QAC1C,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;KACjG,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,8DAA8D;QAC3E,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACnG,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QACzD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;KACtG,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,0CAA0C;QACvD,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7D,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE;QACzC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;KAC9F,CAAC,CAAC;AACL,CAAC"}

package/packages/gateway/dist/tools/index.d.ts

@@ -0,0 +1,4 @@
+import type { Gateway } from "../gateway.js";
+/** Register every built-in tool family onto the gateway registry. */
+export declare function registerAllTools(gw: Gateway): void;
+//# sourceMappingURL=index.d.ts.map

package/packages/gateway/dist/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAc7C,qEAAqE;AACrE,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,OAAO,GAAG,IAAI,CAclD"}

package/packages/gateway/dist/tools/index.js

@@ -0,0 +1,29 @@
+import { registerSystemTools } from "./system.js";
+import { registerAuditTools, registerApprovalTools } from "./audit-approval.js";
+import { registerProjectTools } from "./project.js";
+import { registerFilesystemTools } from "./filesystem.js";
+import { registerGitTools } from "./git.js";
+import { registerShellTools } from "./shell.js";
+import { registerSkillTools } from "./skill.js";
+import { registerCodingAgentTools } from "./coding-agent.js";
+import { registerAdbTools } from "./adb.js";
+import { registerBrowserTools } from "./browser.js";
+import { registerArticleTools } from "./article.js";
+import { registerAdapterTools } from "./adapters.js";
+/** Register every built-in tool family onto the gateway registry. */
+export function registerAllTools(gw) {
+    registerSystemTools(gw);
+    registerAuditTools(gw);
+    registerApprovalTools(gw);
+    registerProjectTools(gw);
+    registerFilesystemTools(gw);
+    registerGitTools(gw);
+    registerShellTools(gw);
+    registerSkillTools(gw);
+    registerCodingAgentTools(gw);
+    registerAdbTools(gw);
+    registerBrowserTools(gw);
+    registerArticleTools(gw);
+    registerAdapterTools(gw);
+}
+//# sourceMappingURL=index.js.map

package/packages/gateway/dist/tools/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,qEAAqE;AACrE,MAAM,UAAU,gBAAgB,CAAC,EAAW;IAC1C,mBAAmB,CAAC,EAAE,CAAC,CAAC;IACxB,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACvB,qBAAqB,CAAC,EAAE,CAAC,CAAC;IAC1B,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACzB,uBAAuB,CAAC,EAAE,CAAC,CAAC;IAC5B,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACrB,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACvB,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACvB,wBAAwB,CAAC,EAAE,CAAC,CAAC;IAC7B,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACrB,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACzB,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACzB,oBAAoB,CAAC,EAAE,CAAC,CAAC;AAC3B,CAAC"}

package/packages/gateway/dist/tools/project.d.ts

@@ -0,0 +1,3 @@
+import type { Gateway } from "../gateway.js";
+export declare function registerProjectTools(gw: Gateway): void;
+//# sourceMappingURL=project.d.ts.map

package/packages/gateway/dist/tools/project.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.d.ts","sourceRoot":"","sources":["../../src/tools/project.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,OAAO,GAAG,IAAI,CAyFtD"}

package/packages/gateway/dist/tools/project.js

@@ -0,0 +1,86 @@
+import { z } from "zod";
+export function registerProjectTools(gw) {
+    const r = gw.registry;
+    r.register({
+        name: "project_list",
+        description: "List registered local projects.",
+        risk: 0,
+        inputSchema: z.object({}).strip(),
+        handler: () => gw.projects.list(),
+    });
+    r.register({
+        name: "project_register",
+        description: "Register a local project directory (must be inside an allowed directory).",
+        risk: 1,
+        inputSchema: z.object({ path: z.string(), name: z.string().optional() }),
+        summarize: (i) => `register project ${i.name ?? i.path}`,
+        handler: (i) => gw.projects.register(i.path, i.name),
+    });
+    r.register({
+        name: "project_unregister",
+        description: "Remove a project from the registry (does not delete files).",
+        risk: 1,
+        inputSchema: z.object({ id: z.string() }),
+        handler: (i) => ({ removed: gw.projects.unregister(i.id) }),
+    });
+    r.register({
+        name: "project_get",
+        description: "Get a project by id or name.",
+        risk: 0,
+        inputSchema: z.object({ id: z.string() }),
+        handler: (i) => gw.projects.get(i.id) ?? { error: "not found" },
+    });
+    r.register({
+        name: "project_status",
+        description: "Get project details plus current git status.",
+        risk: 0,
+        inputSchema: z.object({ id: z.string() }),
+        handler: async (i) => {
+            const p = gw.projects.get(i.id);
+            if (!p)
+                return { error: "not found" };
+            let git;
+            try {
+                git = await gw.git.status(p.path);
+            }
+            catch (e) {
+                git = `(not a git repo or error: ${e.message})`;
+            }
+            return { project: p, git };
+        },
+    });
+    r.register({
+        name: "project_set_validate_command",
+        description: "Set the validate command for a project (e.g. 'pnpm validate').",
+        risk: 1,
+        inputSchema: z.object({ id: z.string(), command: z.string() }),
+        handler: (i) => gw.projects.update(i.id, { validateCommand: i.command }),
+    });
+    r.register({
+        name: "project_set_test_command",
+        description: "Set the test command for a project.",
+        risk: 1,
+        inputSchema: z.object({ id: z.string(), command: z.string() }),
+        handler: (i) => gw.projects.update(i.id, { testCommand: i.command }),
+    });
+    r.register({
+        name: "project_set_default_agent",
+        description: "Set the default coding agent for a project.",
+        risk: 1,
+        inputSchema: z.object({ id: z.string(), agent: z.string() }),
+        handler: (i) => gw.projects.update(i.id, { defaultAgent: i.agent }),
+    });
+    r.register({
+        name: "project_detect_stack",
+        description: "Detect the tech stack of a project directory.",
+        risk: 0,
+        inputSchema: z.object({ id: z.string() }),
+        handler: (i) => {
+            const p = gw.projects.get(i.id);
+            if (!p)
+                return { error: "not found" };
+            return { stack: gw.projects.detectStack(p.path) };
+        },
+    });
+}
+//# sourceMappingURL=project.js.map

package/packages/gateway/dist/tools/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../../src/tools/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,UAAU,oBAAoB,CAAC,EAAW;IAC9C,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;IAEtB,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,iCAAiC;QAC9C,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE;QACjC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE;KAClC,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,2EAA2E;QACxF,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;QACxE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE;QACxD,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;KACrD,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,6DAA6D;QAC1E,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;KAC5D,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,8BAA8B;QAC3C,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE;KAChE,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,8CAA8C;QAC3D,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACnB,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChC,IAAI,CAAC,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YACtC,IAAI,GAAuB,CAAC;YAC5B,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACpC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,GAAG,GAAG,6BAA8B,CAAW,CAAC,OAAO,GAAG,CAAC;YAC7D,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC;QAC7B,CAAC;KACF,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,8BAA8B;QACpC,WAAW,EAAE,gEAAgE;QAC7E,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9D,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;KACzE,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,qCAAqC;QAClD,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9D,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;KACrE,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,6CAA6C;QAC1D,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5D,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;KACpE,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,+CAA+C;QAC5D,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACb,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAChC,IAAI,CAAC,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YACtC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/packages/gateway/dist/tools/shell.d.ts

@@ -0,0 +1,3 @@
+import type { Gateway } from "../gateway.js";
+export declare function registerShellTools(gw: Gateway): void;
+//# sourceMappingURL=shell.d.ts.map

package/packages/gateway/dist/tools/shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../src/tools/shell.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,OAAO,GAAG,IAAI,CA0GpD"}

package/packages/gateway/dist/tools/shell.js

@@ -0,0 +1,98 @@
+import { z } from "zod";
+import { nanoid } from "nanoid";
+export function registerShellTools(gw) {
+    const r = gw.registry;
+    r.register({
+        name: "shell_list_allowed_commands",
+        description: "List the command prefixes that may be run without approval.",
+        risk: 0,
+        inputSchema: z.object({}).strip(),
+        handler: () => ({ allowed: gw.commandGuard.allowed(), blocked: gw.config().security.blockedCommandTokens }),
+    });
+    r.register({
+        name: "shell_add_allowed_command",
+        description: "Add a command prefix to the allowlist.",
+        risk: 2,
+        inputSchema: z.object({ command: z.string() }),
+        summarize: (i) => `allow command '${i.command}'`,
+        handler: (i) => {
+            const cfg = gw.config();
+            const cmds = Array.from(new Set([...cfg.security.allowedCommands, i.command]));
+            gw.saveConfig({ ...cfg, security: { ...cfg.security, allowedCommands: cmds } });
+            return { allowed: gw.commandGuard.allowed() };
+        },
+    });
+    r.register({
+        name: "shell_remove_allowed_command",
+        description: "Remove a command prefix from the allowlist.",
+        risk: 2,
+        inputSchema: z.object({ command: z.string() }),
+        handler: (i) => {
+            const cfg = gw.config();
+            const cmds = cfg.security.allowedCommands.filter((c) => c !== i.command);
+            gw.saveConfig({ ...cfg, security: { ...cfg.security, allowedCommands: cmds } });
+            return { allowed: gw.commandGuard.allowed() };
+        },
+    });
+    r.register({
+        name: "shell_run_allowed_command",
+        description: "Run a command from the allowlist. Pipelines/redirection/chaining are rejected.",
+        risk: 1,
+        inputSchema: z.object({ command: z.string(), cwd: z.string().optional() }),
+        summarize: (i) => `run '${i.command}'`,
+        handler: (i) => gw.shell.runAllowed(i.command, i.cwd),
+    });
+    r.register({
+        name: "shell_request_command_approval",
+        description: "Request approval to run a command that is NOT on the allowlist. Returns an approval id; once approved, call shell_run_approved_command.",
+        risk: 0,
+        inputSchema: z.object({ command: z.string(), reason: z.string().default("") }),
+        handler: (i, ctx) => {
+            const req = gw.approvals.create({
+                tool: "shell_run_approved_command",
+                risk: 3,
+                requirement: "single",
+                reason: i.reason || "Run a non-allowlisted command.",
+                summary: `run '${i.command}'`,
+                caller: ctx.caller,
+                sessionId: ctx.sessionId,
+            });
+            return {
+                approvalId: req.id,
+                message: `Approval requested. Approve with: localant approvals approve ${req.id}, then call shell_run_approved_command.`,
+            };
+        },
+    });
+    r.register({
+        name: "shell_run_approved_command",
+        description: "Run an arbitrary command (still subject to the hard blocklist). Requires approval (risk 3).",
+        risk: 3,
+        inputSchema: z.object({ command: z.string(), cwd: z.string().optional() }),
+        summarize: (i) => `run (approved) '${i.command}'`,
+        handler: (i) => gw.shell.runApproved(i.command, i.cwd),
+    });
+    r.register({
+        name: "shell_list_processes",
+        description: "List tracked long-running processes.",
+        risk: 0,
+        inputSchema: z.object({}).strip(),
+        handler: () => gw.shell.listProcesses(),
+    });
+    r.register({
+        name: "shell_get_process_output",
+        description: "Get captured output of a tracked process.",
+        risk: 0,
+        inputSchema: z.object({ id: z.string() }),
+        handler: (i) => gw.shell.getOutput(i.id),
+    });
+    r.register({
+        name: "shell_stop_process",
+        description: "Stop a tracked process.",
+        risk: 2,
+        inputSchema: z.object({ id: z.string() }),
+        summarize: (i) => `stop process ${i.id}`,
+        handler: (i) => gw.shell.stopProcess(i.id),
+    });
+    void nanoid;
+}
+//# sourceMappingURL=shell.js.map

package/packages/gateway/dist/tools/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/tools/shell.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGhC,MAAM,UAAU,kBAAkB,CAAC,EAAW;IAC5C,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;IAEtB,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,6DAA6D;QAC1E,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE;QACjC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC;KAC5G,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,wCAAwC;QACrD,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,OAAO,GAAG;QAChD,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACb,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC/E,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YAChF,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,CAAC;KACF,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,8BAA8B;QACpC,WAAW,EAAE,6CAA6C;QAC1D,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACb,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;YACzE,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YAChF,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,CAAC;KACF,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,gFAAgF;QAC7F,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC1E,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,OAAO,GAAG;QACtC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC;KACtD,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,gCAAgC;QACtC,WAAW,EACT,yIAAyI;QAC3I,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9E,OAAO,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;YAClB,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC;gBAC9B,IAAI,EAAE,4BAA4B;gBAClC,IAAI,EAAE,CAAC;gBACP,WAAW,EAAE,QAAQ;gBACrB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,gCAAgC;gBACpD,OAAO,EAAE,QAAQ,CAAC,CAAC,OAAO,GAAG;gBAC7B,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,SAAS,EAAE,GAAG,CAAC,SAAS;aACzB,CAAC,CAAC;YACH,OAAO;gBACL,UAAU,EAAE,GAAG,CAAC,EAAE;gBAClB,OAAO,EAAE,gEAAgE,GAAG,CAAC,EAAE,yCAAyC;aACzH,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,4BAA4B;QAClC,WAAW,EACT,6FAA6F;QAC/F,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC1E,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,OAAO,GAAG;QACjD,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC;KACvD,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,sCAAsC;QACnD,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE;QACjC,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE;KACxC,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,2CAA2C;QACxD,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;KACzC,CAAC,CAAC;IAEH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,yBAAyB;QACtC,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,EAAE;QACxC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3C,CAAC,CAAC;IAEH,KAAK,MAAM,CAAC;AACd,CAAC"}

package/packages/gateway/dist/tools/skill.d.ts

@@ -0,0 +1,3 @@
+import type { Gateway } from "../gateway.js";
+export declare function registerSkillTools(gw: Gateway): void;
+//# sourceMappingURL=skill.d.ts.map

package/packages/gateway/dist/tools/skill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill.d.ts","sourceRoot":"","sources":["../../src/tools/skill.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAe7C,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,OAAO,GAAG,IAAI,CAuNpD"}