localant 1.0.0

package/packages/gateway/dist/stores/config-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.js","sourceRoot":"","sources":["../../src/stores/config-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAe,aAAa,EAAE,QAAQ,EAAiB,MAAM,kBAAkB,CAAC;AAErG,gFAAgF;AAChF,MAAM,OAAO,WAAW;IACb,KAAK,CAAW;IAEzB,YAAY,IAAa;QACvB,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,uEAAuE;IACvE,iBAAiB;QACf,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACrB,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3G,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC3D,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,IAAI;QACF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;YACvE,OAAO,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,aAAa,EAAE,CAAC;QACzB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,MAAc;QACjB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1F,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,+DAA+D;IAC/D,MAAM,CAAC,KAAsB;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,QAAQ;QACN,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9D,CAAC;CACF"}

package/packages/gateway/dist/stores/secret-vault.d.ts

@@ -0,0 +1,23 @@
+import type { AppPaths } from "@localant/shared";
+/**
+ * Local secret vault. Values are encrypted at rest with AES-256-GCM using a
+ * key derived from the auth token + machine-local salt. Secret *values* are
+ * never returned by listing operations and never logged.
+ */
+export declare class SecretVault {
+    private readonly file;
+    private readonly key;
+    constructor(paths: AppPaths, token: string);
+    private read;
+    private write;
+    private encrypt;
+    private decrypt;
+    set(name: string, value: string): void;
+    get(name: string): string | undefined;
+    remove(name: string): boolean;
+    /** Names only — never values. */
+    list(): string[];
+    /** All current secret values, for redaction purposes only. */
+    allValues(): string[];
+}
+//# sourceMappingURL=secret-vault.d.ts.map

package/packages/gateway/dist/stores/secret-vault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-vault.d.ts","sourceRoot":"","sources":["../../src/stores/secret-vault.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjD;;;;GAIG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;gBAEjB,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM;IAK1C,OAAO,CAAC,IAAI;IAQZ,OAAO,CAAC,KAAK;IAIb,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,OAAO;IAYf,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAMtC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAKrC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAQ7B,iCAAiC;IACjC,IAAI,IAAI,MAAM,EAAE;IAIhB,8DAA8D;IAC9D,SAAS,IAAI,MAAM,EAAE;CAKtB"}

package/packages/gateway/dist/stores/secret-vault.js

@@ -0,0 +1,74 @@
+import fs from "node:fs";
+import crypto from "node:crypto";
+/**
+ * Local secret vault. Values are encrypted at rest with AES-256-GCM using a
+ * key derived from the auth token + machine-local salt. Secret *values* are
+ * never returned by listing operations and never logged.
+ */
+export class SecretVault {
+    file;
+    key;
+    constructor(paths, token) {
+        this.file = paths.secretsFile;
+        this.key = crypto.createHash("sha256").update(`cla-vault:${token}`).digest();
+    }
+    read() {
+        try {
+            return JSON.parse(fs.readFileSync(this.file, "utf8"));
+        }
+        catch {
+            return {};
+        }
+    }
+    write(data) {
+        fs.writeFileSync(this.file, JSON.stringify(data), { mode: 0o600 });
+    }
+    encrypt(value) {
+        const iv = crypto.randomBytes(12);
+        const cipher = crypto.createCipheriv("aes-256-gcm", this.key, iv);
+        const enc = Buffer.concat([cipher.update(value, "utf8"), cipher.final()]);
+        const tag = cipher.getAuthTag();
+        return `${iv.toString("base64")}.${tag.toString("base64")}.${enc.toString("base64")}`;
+    }
+    decrypt(blob) {
+        try {
+            const [ivB, tagB, encB] = blob.split(".");
+            if (!ivB || !tagB || !encB)
+                return undefined;
+            const decipher = crypto.createDecipheriv("aes-256-gcm", this.key, Buffer.from(ivB, "base64"));
+            decipher.setAuthTag(Buffer.from(tagB, "base64"));
+            return Buffer.concat([decipher.update(Buffer.from(encB, "base64")), decipher.final()]).toString("utf8");
+        }
+        catch {
+            return undefined;
+        }
+    }
+    set(name, value) {
+        const data = this.read();
+        data[name] = this.encrypt(value);
+        this.write(data);
+    }
+    get(name) {
+        const blob = this.read()[name];
+        return blob ? this.decrypt(blob) : undefined;
+    }
+    remove(name) {
+        const data = this.read();
+        if (!(name in data))
+            return false;
+        delete data[name];
+        this.write(data);
+        return true;
+    }
+    /** Names only — never values. */
+    list() {
+        return Object.keys(this.read()).sort();
+    }
+    /** All current secret values, for redaction purposes only. */
+    allValues() {
+        return Object.keys(this.read())
+            .map((k) => this.get(k))
+            .filter((v) => typeof v === "string" && v.length > 0);
+    }
+}
+//# sourceMappingURL=secret-vault.js.map

package/packages/gateway/dist/stores/secret-vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-vault.js","sourceRoot":"","sources":["../../src/stores/secret-vault.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,MAAM,MAAM,aAAa,CAAC;AAGjC;;;;GAIG;AACH,MAAM,OAAO,WAAW;IACL,IAAI,CAAS;IACb,GAAG,CAAS;IAE7B,YAAY,KAAe,EAAE,KAAa;QACxC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC;QAC9B,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/E,CAAC;IAEO,IAAI;QACV,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAA2B,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAA4B;QACxC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IAEO,OAAO,CAAC,KAAa;QAC3B,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAChC,OAAO,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IACxF,CAAC;IAEO,OAAO,CAAC,IAAY;QAC1B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;gBAAE,OAAO,SAAS,CAAC;YAC7C,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC9F,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;YACjD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1G,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,GAAG,CAAC,IAAY,EAAE,KAAa;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,GAAG,CAAC,IAAY;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/C,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,iCAAiC;IACjC,IAAI;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,8DAA8D;IAC9D,SAAS;QACP,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;aACvB,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvE,CAAC;CACF"}

package/packages/gateway/dist/tools/adapters.d.ts

@@ -0,0 +1,8 @@
+import type { Gateway } from "../gateway.js";
+/**
+ * Adapters bridge external systems (OpenClaw, Desktop Commander) and arbitrary
+ * MCP servers. They never expose external tools to ChatGPT unmediated — every
+ * call flows back through the gateway's permission + approval + audit pipeline.
+ */
+export declare function registerAdapterTools(gw: Gateway): void;
+//# sourceMappingURL=adapters.d.ts.map

package/packages/gateway/dist/tools/adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../../src/tools/adapters.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAE7C;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,OAAO,GAAG,IAAI,CAqKtD"}

package/packages/gateway/dist/tools/adapters.js

@@ -0,0 +1,178 @@
+import { z } from "zod";
+import { commandExists, execFileSafe } from "../util/exec.js";
+/**
+ * Adapters bridge external systems (OpenClaw, Desktop Commander) and arbitrary
+ * MCP servers. They never expose external tools to ChatGPT unmediated — every
+ * call flows back through the gateway's permission + approval + audit pipeline.
+ */
+export function registerAdapterTools(gw) {
+    const r = gw.registry;
+    // ---------- OpenClaw ----------
+    const openclawHint = "OpenClaw was not detected. Install it and ensure the `openclaw` CLI is on PATH, then retry.";
+    r.register({
+        name: "openclaw_status",
+        description: "Check whether OpenClaw is installed and reachable.",
+        risk: 0,
+        inputSchema: z.object({}).strip(),
+        handler: async () => {
+            const available = await commandExists("openclaw");
+            return { available, hint: available ? undefined : openclawHint };
+        },
+    });
+    r.register({
+        name: "openclaw_list_skills",
+        description: "List OpenClaw skills (via the openclaw CLI).",
+        risk: 1,
+        inputSchema: z.object({}).strip(),
+        handler: async () => requireCli("openclaw", ["skills", "list"], openclawHint),
+    });
+    r.register({
+        name: "openclaw_list_sessions",
+        description: "List OpenClaw sessions.",
+        risk: 1,
+        inputSchema: z.object({}).strip(),
+        handler: async () => requireCli("openclaw", ["sessions", "list"], openclawHint),
+    });
+    r.register({
+        name: "openclaw_get_session_history",
+        description: "Get an OpenClaw session history.",
+        risk: 1,
+        inputSchema: z.object({ sessionId: z.string() }),
+        handler: async (i) => requireCli("openclaw", ["sessions", "show", i.sessionId], openclawHint),
+    });
+    r.register({
+        name: "openclaw_list_nodes",
+        description: "List OpenClaw nodes.",
+        risk: 1,
+        inputSchema: z.object({}).strip(),
+        handler: async () => requireCli("openclaw", ["nodes", "list"], openclawHint),
+    });
+    r.register({
+        name: "openclaw_run_skill",
+        description: "Run an OpenClaw skill. Requires approval (risk 3).",
+        risk: 3,
+        inputSchema: z.object({ skill: z.string(), args: z.array(z.string()).default([]) }),
+        summarize: (i) => `openclaw run ${i.skill}`,
+        handler: async (i) => requireCli("openclaw", ["skills", "run", i.skill, ...i.args], openclawHint),
+    });
+    r.register({
+        name: "openclaw_send_session",
+        description: "Send a message to an OpenClaw session. Requires approval (risk 3).",
+        risk: 3,
+        inputSchema: z.object({ sessionId: z.string(), message: z.string() }),
+        summarize: (i) => `openclaw send -> ${i.sessionId}`,
+        handler: async (i) => requireCli("openclaw", ["sessions", "send", i.sessionId, i.message], openclawHint),
+    });
+    r.register({
+        name: "openclaw_node_command",
+        description: "Run a command on an OpenClaw node. Requires approval (risk 3).",
+        risk: 3,
+        inputSchema: z.object({ node: z.string(), command: z.string() }),
+        summarize: (i) => `openclaw node ${i.node}`,
+        handler: async (i) => requireCli("openclaw", ["nodes", "exec", i.node, i.command], openclawHint),
+    });
+    // ---------- Desktop Commander ----------
+    r.register({
+        name: "desktop_commander_status",
+        description: "Check whether the Desktop Commander MCP server is configured.",
+        risk: 0,
+        inputSchema: z.object({}).strip(),
+        handler: () => {
+            const configured = Boolean(gw.config().mcpServers["desktop-commander"]);
+            return { configured, hint: configured ? undefined : "Register it with mcp_server_register (name: desktop-commander)." };
+        },
+    });
+    r.register({
+        name: "desktop_commander_list_tools",
+        description: "List tools exposed by a registered Desktop Commander MCP server.",
+        risk: 1,
+        inputSchema: z.object({}).strip(),
+        handler: () => {
+            const s = gw.config().mcpServers["desktop-commander"];
+            if (!s)
+                throw new Error("desktop-commander not registered. Use mcp_server_register.");
+            return { note: "Tool discovery flows through the MCP bridge (mcp_server_list_tools)." };
+        },
+    });
+    r.register({
+        name: "desktop_commander_run_tool",
+        description: "Run a Desktop Commander tool through the gated MCP bridge. Risk 3.",
+        risk: 3,
+        inputSchema: z.object({ tool: z.string(), input: z.unknown().default({}) }),
+        summarize: (i) => `desktop-commander ${i.tool}`,
+        handler: (i) => gw.bridge.callTool("desktop-commander", i.tool, i.input ?? {}),
+    });
+    // ---------- Existing MCP server bridge ----------
+    r.register({
+        name: "mcp_server_list",
+        description: "List registered downstream MCP servers.",
+        risk: 0,
+        inputSchema: z.object({}).strip(),
+        handler: () => ({ servers: gw.config().mcpServers }),
+    });
+    r.register({
+        name: "mcp_server_register",
+        description: "Register a downstream MCP server (stdio) to bridge through the gateway.",
+        risk: 2,
+        inputSchema: z.object({
+            name: z.string(),
+            command: z.string(),
+            args: z.array(z.string()).default([]),
+            enabled: z.boolean().default(false),
+        }),
+        summarize: (i) => `register mcp server ${i.name}`,
+        handler: (i) => {
+            const cfg = gw.config();
+            const next = { ...cfg, mcpServers: { ...cfg.mcpServers, [i.name]: { command: i.command, args: i.args, transport: "stdio", enabled: i.enabled } } };
+            gw.saveConfig(next);
+            return { registered: i.name, enabled: i.enabled };
+        },
+    });
+    r.register({
+        name: "mcp_server_unregister",
+        description: "Remove a registered downstream MCP server.",
+        risk: 2,
+        inputSchema: z.object({ name: z.string() }),
+        handler: (i) => {
+            const cfg = gw.config();
+            const servers = { ...cfg.mcpServers };
+            delete servers[i.name];
+            gw.saveConfig({ ...cfg, mcpServers: servers });
+            return { removed: i.name };
+        },
+    });
+    r.register({
+        name: "mcp_server_status",
+        description: "Show status for a registered downstream MCP server.",
+        risk: 0,
+        inputSchema: z.object({ name: z.string() }),
+        handler: (i) => {
+            const s = gw.config().mcpServers[i.name];
+            return s ? { name: i.name, ...s } : { error: "not found" };
+        },
+    });
+    r.register({
+        name: "mcp_server_list_tools",
+        description: "List tools of a downstream MCP server (connects lazily).",
+        risk: 1,
+        inputSchema: z.object({ name: z.string() }),
+        handler: (i) => gw.bridge.listTools(i.name),
+    });
+    r.register({
+        name: "mcp_server_run_tool",
+        description: "Invoke a tool on a downstream MCP server through the gateway. Risk 3.",
+        risk: 3,
+        inputSchema: z.object({ name: z.string(), tool: z.string(), input: z.unknown().default({}) }),
+        summarize: (i) => `${i.name}.${i.tool}`,
+        handler: (i) => gw.bridge.callTool(i.name, i.tool, i.input ?? {}),
+    });
+}
+async function requireCli(cmd, args, hint) {
+    if (!(await commandExists(cmd)))
+        throw new Error(hint);
+    const res = await execFileSafe(cmd, args, { timeoutMs: 60_000, maxOutputBytes: 100_000 });
+    if (res.code !== 0)
+        throw new Error(`${cmd} ${args.join(" ")} failed: ${res.stderr || res.stdout}`);
+    return { output: res.stdout };
+}
+//# sourceMappingURL=adapters.js.map

package/packages/gateway/dist/tools/adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../../src/tools/adapters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAG9D;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAW;IAC9C,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;IAEtB,iCAAiC;IACjC,MAAM,YAAY,GAChB,6FAA6F,CAAC;IAEhG,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,oDAAoD;QACjE,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE;QACjC,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;YAClD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;QACnE,CAAC;KACF,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,8CAA8C;QAC3D,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE;QACjC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC;KAC9E,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,yBAAyB;QACtC,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE;QACjC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC;KAChF,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,8BAA8B;QACpC,WAAW,EAAE,kCAAkC;QAC/C,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,YAAY,CAAC;KAC9F,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,sBAAsB;QACnC,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE;QACjC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC;KAC7E,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,oDAAoD;QACjE,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACnF,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,KAAK,EAAE;QAC3C,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC;KAClG,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,oEAAoE;QACjF,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACrE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,SAAS,EAAE;QACnD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;KACzG,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,gEAAgE;QAC7E,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAChE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE;QAC3C,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;KACjG,CAAC,CAAC;IAEH,0CAA0C;IAC1C,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,+DAA+D;QAC5E,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE;QACjC,OAAO,EAAE,GAAG,EAAE;YACZ,MAAM,UAAU,GAAG,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC;YACxE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iEAAiE,EAAE,CAAC;QAC1H,CAAC;KACF,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,8BAA8B;QACpC,WAAW,EAAE,kEAAkE;QAC/E,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE;QACjC,OAAO,EAAE,GAAG,EAAE;YACZ,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;YACtD,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;YACtF,OAAO,EAAE,IAAI,EAAE,sEAAsE,EAAE,CAAC;QAC1F,CAAC;KACF,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,oEAAoE;QACjF,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QAC3E,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,IAAI,EAAE;QAC/C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,EAAG,CAAC,CAAC,KAAiC,IAAI,EAAE,CAAC;KAC5G,CAAC,CAAC;IAEH,mDAAmD;IACnD,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,yCAAyC;QACtD,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE;QACjC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,CAAC;KACrD,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,yEAAyE;QACtF,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;YAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;SACpC,CAAC;QACF,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,CAAC,IAAI,EAAE;QACjD,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACb,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,EAAE,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,OAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC;YAC5J,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;QACpD,CAAC;KACF,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,4CAA4C;QACzD,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACb,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,EAAE,CAAC;YACtC,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACvB,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/C,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,CAAC;KACF,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,qDAAqD;QAClE,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACb,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACzC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAC7D,CAAC;KACF,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,0DAA0D;QACvE,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAC3C,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;KAC5C,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,uEAAuE;QACpF,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7F,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE;QACvC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAG,CAAC,CAAC,KAAiC,IAAI,EAAE,CAAC;KAC/F,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,IAAc,EAAE,IAAY;IACjE,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1F,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACpG,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;AAChC,CAAC"}

package/packages/gateway/dist/tools/adb.d.ts

@@ -0,0 +1,3 @@
+import type { Gateway } from "../gateway.js";
+export declare function registerAdbTools(gw: Gateway): void;
+//# sourceMappingURL=adb.d.ts.map

package/packages/gateway/dist/tools/adb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adb.d.ts","sourceRoot":"","sources":["../../src/tools/adb.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAc7C,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,OAAO,GAAG,IAAI,CA6ClD"}

package/packages/gateway/dist/tools/adb.js

@@ -0,0 +1,60 @@
+import path from "node:path";
+import { z } from "zod";
+import { commandExists, execFileSafe } from "../util/exec.js";
+async function adb(args, serial) {
+    if (!(await commandExists("adb"))) {
+        throw new Error("adb not found on PATH. Install Android platform-tools to use ADB tools.");
+    }
+    const full = serial ? ["-s", serial, ...args] : args;
+    const res = await execFileSafe("adb", full, { timeoutMs: 60_000, maxOutputBytes: 200_000 });
+    if (res.code !== 0)
+        throw new Error(`adb ${args.join(" ")} failed: ${res.stderr || res.stdout}`);
+    return res.stdout;
+}
+const dev = z.object({ serial: z.string().optional() });
+export function registerAdbTools(gw) {
+    const r = gw.registry;
+    r.register({ name: "adb_list_devices", description: "List connected Android devices.", risk: 0, inputSchema: z.object({}).strip(), handler: async () => ({ output: await adb(["devices", "-l"]) }) });
+    r.register({ name: "adb_get_current_activity", description: "Get the foreground activity.", risk: 0, inputSchema: dev, handler: async (i) => ({ output: await adb(["shell", "dumpsys", "activity", "activities"], i.serial) }) });
+    r.register({
+        name: "adb_screenshot",
+        description: "Capture a screenshot to the device and report the path.",
+        risk: 1,
+        inputSchema: dev,
+        handler: async (i) => {
+            await adb(["shell", "screencap", "-p", "/sdcard/cla_screen.png"], i.serial);
+            return { devicePath: "/sdcard/cla_screen.png", note: "Use adb_pull_screenshot to fetch it." };
+        },
+    });
+    r.register({
+        name: "adb_pull_screenshot",
+        description: "Pull the captured screenshot into the workspace directory.",
+        risk: 1,
+        inputSchema: dev,
+        handler: async (i) => {
+            const dest = path.join(gw.paths.workspaceDir, `adb-${Date.now()}.png`);
+            await adb(["pull", "/sdcard/cla_screen.png", dest], i.serial);
+            return { localPath: dest };
+        },
+    });
+    r.register({ name: "adb_tap", description: "Tap at x,y.", risk: 3, inputSchema: dev.extend({ x: z.number().int(), y: z.number().int() }), summarize: (i) => `adb tap ${i.x},${i.y}`, handler: async (i) => ({ output: await adb(["shell", "input", "tap", String(i.x), String(i.y)], i.serial) }) });
+    r.register({ name: "adb_swipe", description: "Swipe between coordinates.", risk: 3, inputSchema: dev.extend({ x1: z.number().int(), y1: z.number().int(), x2: z.number().int(), y2: z.number().int(), ms: z.number().int().default(300) }), summarize: () => "adb swipe", handler: async (i) => ({ output: await adb(["shell", "input", "swipe", String(i.x1), String(i.y1), String(i.x2), String(i.y2), String(i.ms)], i.serial) }) });
+    r.register({ name: "adb_input_text", description: "Type text on the device (audited).", risk: 3, inputSchema: dev.extend({ text: z.string() }), summarize: () => "adb input text", handler: async (i) => ({ output: await adb(["shell", "input", "text", i.text.replace(/ /g, "%s")], i.serial) }) });
+    r.register({ name: "adb_keyevent", description: "Send a key event (e.g. 4 = BACK).", risk: 3, inputSchema: dev.extend({ keycode: z.number().int() }), summarize: (i) => `adb keyevent ${i.keycode}`, handler: async (i) => ({ output: await adb(["shell", "input", "keyevent", String(i.keycode)], i.serial) }) });
+    r.register({ name: "adb_logcat", description: "Dump recent logcat output.", risk: 1, inputSchema: dev.extend({ lines: z.number().int().min(1).max(2000).default(200) }), handler: async (i) => ({ output: await adb(["logcat", "-d", "-t", String(i.lines)], i.serial) }) });
+    r.register({ name: "adb_clear_logcat", description: "Clear the logcat buffer.", risk: 2, inputSchema: dev, summarize: () => "adb logcat -c", handler: async (i) => ({ output: await adb(["logcat", "-c"], i.serial) }) });
+    r.register({ name: "adb_start_app", description: "Start an app by package/activity.", risk: 3, inputSchema: dev.extend({ component: z.string() }), summarize: (i) => `adb start ${i.component}`, handler: async (i) => ({ output: await adb(["shell", "am", "start", "-n", i.component], i.serial) }) });
+    r.register({ name: "adb_stop_app", description: "Force-stop an app by package.", risk: 3, inputSchema: dev.extend({ pkg: z.string() }), summarize: (i) => `adb stop ${i.pkg}`, handler: async (i) => ({ output: await adb(["shell", "am", "force-stop", i.pkg], i.serial) }) });
+    r.register({
+        name: "adb_install_apk",
+        description: "Install an APK (path must be inside an allowed directory). Requires approval (risk 3).",
+        risk: 3,
+        inputSchema: dev.extend({ apkPath: z.string() }),
+        summarize: (i) => `adb install ${i.apkPath}`,
+        handler: async (i) => {
+            const resolved = gw.pathGuard.assertAccess(i.apkPath, "read");
+            return { output: await adb(["install", "-r", resolved], i.serial) };
+        },
+    });
+}
+//# sourceMappingURL=adb.js.map

package/packages/gateway/dist/tools/adb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adb.js","sourceRoot":"","sources":["../../src/tools/adb.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAG9D,KAAK,UAAU,GAAG,CAAC,IAAc,EAAE,MAAe;IAChD,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5F,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACjG,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAExD,MAAM,UAAU,gBAAgB,CAAC,EAAW;IAC1C,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;IAEtB,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,iCAAiC,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACtM,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,WAAW,EAAE,8BAA8B,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAClO,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,yDAAyD;QACtE,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,GAAG;QAChB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACnB,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,wBAAwB,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YAC5E,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,IAAI,EAAE,sCAAsC,EAAE,CAAC;QAChG,CAAC;KACF,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,4DAA4D;QACzE,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,GAAG;QAChB,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACnB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACvE,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,wBAAwB,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YAC9D,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;KACF,CAAC,CAAC;IACH,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACrS,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACxa,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,oCAAoC,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACtS,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,mCAAmC,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACnT,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,4BAA4B,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7Q,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,eAAe,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1N,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,WAAW,EAAE,mCAAmC,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACzS,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,+BAA+B,EAAE,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAChR,CAAC,CAAC,QAAQ,CAAC;QACT,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,wFAAwF;QACrG,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAChD,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;QAC5C,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACnB,MAAM,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/packages/gateway/dist/tools/article.d.ts

@@ -0,0 +1,3 @@
+import type { Gateway } from "../gateway.js";
+export declare function registerArticleTools(gw: Gateway): void;
+//# sourceMappingURL=article.d.ts.map

package/packages/gateway/dist/tools/article.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"article.d.ts","sourceRoot":"","sources":["../../src/tools/article.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAuB7C,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,OAAO,GAAG,IAAI,CAwMtD"}