openhorse 0.1.5

package/dist/tools/bash_security.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Bash Security Module
+ *
+ * Provides safety checks and sandbox options for command execution.
+ */
+/**
+ * Commands that are considered read-only and safe to execute without confirmation.
+ * These commands only read data and do not modify the filesystem.
+ */
+export declare const READ_ONLY_COMMANDS: string[];
+/**
+ * Dangerous command patterns that should always be blocked or require confirmation.
+ */
+export declare const DANGEROUS_PATTERNS: {
+    pattern: RegExp;
+    reason: string;
+}[];
+/**
+ * Potentially destructive patterns that should ask for confirmation.
+ */
+export declare const POTENTIALLY_DESTRUCTIVE_PATTERNS: RegExp[];
+/**
+ * Check if a command is read-only and safe to execute without confirmation.
+ */
+export declare function isReadOnlyCommand(cmd: string): boolean;
+/**
+ * Check if a command matches dangerous patterns.
+ * Returns the first matched dangerous pattern, or null if safe.
+ */
+export declare function checkDangerousCommand(cmd: string): {
+    pattern: RegExp;
+    reason: string;
+} | null;
+/**
+ * Check if a command is potentially destructive.
+ */
+export declare function isPotentiallyDestructive(cmd: string): boolean;
+/**
+ * Get the security assessment for a command.
+ */
+export declare function assessCommandSecurity(cmd: string): {
+    level: 'safe' | 'caution' | 'dangerous' | 'blocked';
+    reason?: string;
+    isReadOnly: boolean;
+};
+/**
+ * Sandbox execution options.
+ */
+export interface SandboxOptions {
+    mode: 'none' | 'docker' | 'bubblewrap';
+    container?: string;
+    timeout?: number;
+    network?: boolean;
+}
+/**
+ * Default sandbox options (disabled).
+ */
+export declare const DEFAULT_SANDBOX_OPTIONS: SandboxOptions;
+/**
+ * Wrap command for sandbox execution.
+ * Returns the modified command for sandbox execution.
+ */
+export declare function wrapForSandbox(cmd: string, options: SandboxOptions): string;
+//# sourceMappingURL=bash_security.d.ts.map

package/dist/tools/bash_security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash_security.d.ts","sourceRoot":"","sources":["../../src/tools/bash_security.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AACH,eAAO,MAAM,kBAAkB,UAoH9B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;GAiC9B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,gCAAgC,UAW5C,CAAC;AAEF;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAmCtD;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAO7F;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAO7D;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG;IAClD,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;CACrB,CAkCA;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,YAAY,CAAC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB,EAAE,cAErC,CAAC;AAEF;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,MAAM,CAkB3E"}

package/dist/tools/bash_security.js

@@ -0,0 +1,291 @@
+"use strict";
+/**
+ * Bash Security Module
+ *
+ * Provides safety checks and sandbox options for command execution.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_SANDBOX_OPTIONS = exports.POTENTIALLY_DESTRUCTIVE_PATTERNS = exports.DANGEROUS_PATTERNS = exports.READ_ONLY_COMMANDS = void 0;
+exports.isReadOnlyCommand = isReadOnlyCommand;
+exports.checkDangerousCommand = checkDangerousCommand;
+exports.isPotentiallyDestructive = isPotentiallyDestructive;
+exports.assessCommandSecurity = assessCommandSecurity;
+exports.wrapForSandbox = wrapForSandbox;
+/**
+ * Commands that are considered read-only and safe to execute without confirmation.
+ * These commands only read data and do not modify the filesystem.
+ */
+exports.READ_ONLY_COMMANDS = [
+    // File listing/reading
+    'ls',
+    'dir',
+    'cat',
+    'head',
+    'tail',
+    'less',
+    'more',
+    'file',
+    'stat',
+    'wc',
+    'du',
+    'tree',
+    'find',
+    'locate',
+    'which',
+    'whereis',
+    // File searching
+    'grep',
+    'egrep',
+    'fgrep',
+    'rg',
+    'ag',
+    'ack',
+    'sed', // when without -i flag
+    'awk',
+    'cut',
+    'sort',
+    'uniq',
+    'tr',
+    'diff',
+    'cmp',
+    // Git read operations
+    'git status',
+    'git log',
+    'git diff',
+    'git show',
+    'git branch', // listing branches
+    'git tag', // listing tags
+    'git remote',
+    'git rev-parse',
+    'git ls-files',
+    'git ls-tree',
+    // Package/dependency info
+    'npm list',
+    'npm info',
+    'npm view',
+    'npm search',
+    'npm outdated',
+    'yarn list',
+    'yarn info',
+    'pnpm list',
+    'pnpm info',
+    // Node/Python version
+    'node --version',
+    'node -v',
+    'npm --version',
+    'npm -v',
+    'yarn --version',
+    'pnpm --version',
+    'python --version',
+    'python -V',
+    'python3 --version',
+    'pip --version',
+    'pip3 --version',
+    // System info
+    'echo',
+    'printenv',
+    'env',
+    'whoami',
+    'hostname',
+    'date',
+    'uptime',
+    'uname',
+    'arch',
+    'pwd',
+    'id',
+    'groups',
+    'getent',
+    // Network info (read-only)
+    'ping',
+    'curl', // when without file output
+    'wget', // when without file output
+    'nslookup',
+    'dig',
+    'host',
+    'ip',
+    'ifconfig',
+    'netstat',
+    // Process info
+    'ps',
+    'top',
+    'htop',
+    'jobs',
+    // JSON/YAML processing (read-only when no file write)
+    'jq',
+    'yq',
+    // Help/version commands
+    'help',
+    'man',
+    'info',
+    'whatis',
+    '--help',
+    '-h',
+    '--version',
+    '-V',
+];
+/**
+ * Dangerous command patterns that should always be blocked or require confirmation.
+ */
+exports.DANGEROUS_PATTERNS = [
+    // Filesystem destruction
+    { pattern: /rm\s+-rf\s+\/$/, reason: 'Attempting to delete root directory' },
+    { pattern: /rm\s+-rf\s+~$/, reason: 'Attempting to delete home directory' },
+    { pattern: /rm\s+-rf\s+\*/, reason: 'Attempting to delete all files in current directory' },
+    { pattern: /rm\s+-rf\s+\.\//, reason: 'Attempting to delete current directory contents' },
+    // Disk operations
+    { pattern: /mkfs/, reason: 'Attempting to format filesystem' },
+    { pattern: /dd\s+of=\/dev/, reason: 'Attempting to write directly to disk device' },
+    { pattern: /fdisk/, reason: 'Attempting to modify disk partitions' },
+    // Fork bombs
+    { pattern: /:\(\)\s*\{/, reason: 'Fork bomb detected' },
+    { pattern: /\|\:\&/, reason: 'Fork bomb variant detected' },
+    // System modification
+    { pattern: /chmod\s+-R\s+777/, reason: 'Attempting to make all files executable' },
+    { pattern: /chown\s+-R/, reason: 'Attempting to change ownership recursively' },
+    // Package removal
+    { pattern: /apt\s+remove/, reason: 'Attempting to remove system packages' },
+    { pattern: /apt-get\s+remove/, reason: 'Attempting to remove system packages' },
+    { pattern: /yum\s+remove/, reason: 'Attempting to remove system packages' },
+    { pattern: /brew\s+uninstall/, reason: 'Attempting to remove packages' },
+    // Process killing (mass)
+    { pattern: /kill\s+-9\s+-1/, reason: 'Attempting to kill all processes' },
+    { pattern: /pkill\s+-9/, reason: 'Attempting to force kill processes' },
+    // Network dangerous
+    { pattern: /iptables\s+-F/, reason: 'Attempting to flush firewall rules' },
+    { pattern: /iptables\s+-P\s+INPUT\s+DROP/, reason: 'Attempting to block all incoming traffic' },
+];
+/**
+ * Potentially destructive patterns that should ask for confirmation.
+ */
+exports.POTENTIALLY_DESTRUCTIVE_PATTERNS = [
+    /rm\s+-[rf]/,
+    /rm\s+.*\s+-[rf]/,
+    /chmod/,
+    /chown/,
+    /kill/,
+    /pkill/,
+    /mv\s+.*\s+\/dev\/null/,
+    />\s*\/dev\/sda/,
+    /curl.*>\s*\//,
+    /wget.*-O\s*\//,
+];
+/**
+ * Check if a command is read-only and safe to execute without confirmation.
+ */
+function isReadOnlyCommand(cmd) {
+    const trimmedCmd = cmd.trim();
+    // Check exact matches first
+    if (exports.READ_ONLY_COMMANDS.includes(trimmedCmd)) {
+        return true;
+    }
+    // Check if command starts with a read-only command
+    const baseCmd = trimmedCmd.split(' ')[0];
+    if (exports.READ_ONLY_COMMANDS.includes(baseCmd)) {
+        // Additional checks for commands that might modify files
+        if (baseCmd === 'sed' && trimmedCmd.includes('-i')) {
+            return false; // sed -i modifies files
+        }
+        if (baseCmd === 'curl' && trimmedCmd.includes('>')) {
+            return false; // curl with output redirect writes file
+        }
+        if (baseCmd === 'wget' && /-O|--output-document/.test(trimmedCmd)) {
+            return false; // wget -O writes file
+        }
+        return true;
+    }
+    // Check for git read commands
+    if (trimmedCmd.startsWith('git ')) {
+        const gitCmd = trimmedCmd.slice(4).trim();
+        for (const roGitCmd of exports.READ_ONLY_COMMANDS.filter(c => c.startsWith('git '))) {
+            if (gitCmd.startsWith(roGitCmd.slice(4))) {
+                return true;
+            }
+        }
+    }
+    return false;
+}
+/**
+ * Check if a command matches dangerous patterns.
+ * Returns the first matched dangerous pattern, or null if safe.
+ */
+function checkDangerousCommand(cmd) {
+    for (const { pattern, reason } of exports.DANGEROUS_PATTERNS) {
+        if (pattern.test(cmd)) {
+            return { pattern, reason };
+        }
+    }
+    return null;
+}
+/**
+ * Check if a command is potentially destructive.
+ */
+function isPotentiallyDestructive(cmd) {
+    for (const pattern of exports.POTENTIALLY_DESTRUCTIVE_PATTERNS) {
+        if (pattern.test(cmd)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Get the security assessment for a command.
+ */
+function assessCommandSecurity(cmd) {
+    // Check for blocked commands
+    const dangerousMatch = checkDangerousCommand(cmd);
+    if (dangerousMatch) {
+        return {
+            level: 'blocked',
+            reason: dangerousMatch.reason,
+            isReadOnly: false,
+        };
+    }
+    // Check for read-only commands
+    if (isReadOnlyCommand(cmd)) {
+        return {
+            level: 'safe',
+            isReadOnly: true,
+        };
+    }
+    // Check for potentially destructive commands
+    if (isPotentiallyDestructive(cmd)) {
+        return {
+            level: 'caution',
+            reason: 'Command may have destructive effects',
+            isReadOnly: false,
+        };
+    }
+    // Default: ask for confirmation for unknown commands
+    return {
+        level: 'caution',
+        reason: 'Command requires confirmation',
+        isReadOnly: false,
+    };
+}
+/**
+ * Default sandbox options (disabled).
+ */
+exports.DEFAULT_SANDBOX_OPTIONS = {
+    mode: 'none',
+};
+/**
+ * Wrap command for sandbox execution.
+ * Returns the modified command for sandbox execution.
+ */
+function wrapForSandbox(cmd, options) {
+    if (options.mode === 'none') {
+        return cmd;
+    }
+    if (options.mode === 'docker') {
+        const container = options.container || 'openhorse-sandbox';
+        const networkFlag = options.network ? '' : '--network none';
+        return `docker exec ${networkFlag} ${container} sh -c '${cmd.replace(/'/g, "'\\''")}'`;
+    }
+    if (options.mode === 'bubblewrap') {
+        // bubblewrap (bwrap) for Linux sandboxing
+        const networkFlag = options.network ? '' : '--unshare-net';
+        return `bwrap ${networkFlag} --ro-bind /usr /usr --ro-bind /lib /lib --ro-bind /bin /bin --bind /tmp /tmp --proc /proc --dev-bind /dev /dev sh -c '${cmd.replace(/'/g, "'\\''")}'`;
+    }
+    return cmd;
+}
+//# sourceMappingURL=bash_security.js.map

package/dist/tools/bash_security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bash_security.js","sourceRoot":"","sources":["../../src/tools/bash_security.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAqLH,8CAmCC;AAMD,sDAOC;AAKD,4DAOC;AAKD,sDAsCC;AAuBD,wCAkBC;AAnUD;;;GAGG;AACU,QAAA,kBAAkB,GAAG;IAChC,uBAAuB;IACvB,IAAI;IACJ,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,SAAS;IAET,iBAAiB;IACjB,MAAM;IACN,OAAO;IACP,OAAO;IACP,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,KAAK,EAAG,uBAAuB;IAC/B,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,IAAI;IACJ,MAAM;IACN,KAAK;IAEL,sBAAsB;IACtB,YAAY;IACZ,SAAS;IACT,UAAU;IACV,UAAU;IACV,YAAY,EAAG,mBAAmB;IAClC,SAAS,EAAM,eAAe;IAC9B,YAAY;IACZ,eAAe;IACf,cAAc;IACd,aAAa;IAEb,0BAA0B;IAC1B,UAAU;IACV,UAAU;IACV,UAAU;IACV,YAAY;IACZ,cAAc;IACd,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IAEX,sBAAsB;IACtB,gBAAgB;IAChB,SAAS;IACT,eAAe;IACf,QAAQ;IACR,gBAAgB;IAChB,gBAAgB;IAChB,kBAAkB;IAClB,WAAW;IACX,mBAAmB;IACnB,eAAe;IACf,gBAAgB;IAEhB,cAAc;IACd,MAAM;IACN,UAAU;IACV,KAAK;IACL,QAAQ;IACR,UAAU;IACV,MAAM;IACN,QAAQ;IACR,OAAO;IACP,MAAM;IACN,KAAK;IACL,IAAI;IACJ,QAAQ;IACR,QAAQ;IAER,2BAA2B;IAC3B,MAAM;IACN,MAAM,EAAI,2BAA2B;IACrC,MAAM,EAAI,2BAA2B;IACrC,UAAU;IACV,KAAK;IACL,MAAM;IACN,IAAI;IACJ,UAAU;IACV,SAAS;IAET,eAAe;IACf,IAAI;IACJ,KAAK;IACL,MAAM;IACN,MAAM;IAEN,sDAAsD;IACtD,IAAI;IACJ,IAAI;IAEJ,wBAAwB;IACxB,MAAM;IACN,KAAK;IACL,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,IAAI;IACJ,WAAW;IACX,IAAI;CACL,CAAC;AAEF;;GAEG;AACU,QAAA,kBAAkB,GAAG;IAChC,yBAAyB;IACzB,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,qCAAqC,EAAE;IAC5E,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,qCAAqC,EAAE;IAC3E,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,qDAAqD,EAAE;IAC3F,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,iDAAiD,EAAE;IAEzF,kBAAkB;IAClB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,iCAAiC,EAAE;IAC9D,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,6CAA6C,EAAE;IACnF,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,sCAAsC,EAAE;IAEpE,aAAa;IACb,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,oBAAoB,EAAE;IACvD,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,4BAA4B,EAAE;IAE3D,sBAAsB;IACtB,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,yCAAyC,EAAE;IAClF,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,4CAA4C,EAAE;IAE/E,kBAAkB;IAClB,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,sCAAsC,EAAE;IAC3E,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,sCAAsC,EAAE;IAC/E,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,sCAAsC,EAAE;IAC3E,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,+BAA+B,EAAE;IAExE,yBAAyB;IACzB,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,kCAAkC,EAAE;IACzE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,oCAAoC,EAAE;IAEvE,oBAAoB;IACpB,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,oCAAoC,EAAE;IAC1E,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,0CAA0C,EAAE;CAChG,CAAC;AAEF;;GAEG;AACU,QAAA,gCAAgC,GAAG;IAC9C,YAAY;IACZ,iBAAiB;IACjB,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,uBAAuB;IACvB,gBAAgB;IAChB,cAAc;IACd,eAAe;CAChB,CAAC;AAEF;;GAEG;AACH,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAE9B,4BAA4B;IAC5B,IAAI,0BAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mDAAmD;IACnD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,0BAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,yDAAyD;QACzD,IAAI,OAAO,KAAK,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC,CAAC,wBAAwB;QACxC,CAAC;QACD,IAAI,OAAO,KAAK,MAAM,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC,CAAC,wCAAwC;QACxD,CAAC;QACD,IAAI,OAAO,KAAK,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAClE,OAAO,KAAK,CAAC,CAAC,sBAAsB;QACtC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,8BAA8B;IAC9B,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,KAAK,MAAM,QAAQ,IAAI,0BAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC5E,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,GAAW;IAC/C,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,0BAAkB,EAAE,CAAC;QACrD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,wBAAwB,CAAC,GAAW;IAClD,KAAK,MAAM,OAAO,IAAI,wCAAgC,EAAE,CAAC;QACvD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAgB,qBAAqB,CAAC,GAAW;IAK/C,6BAA6B;IAC7B,MAAM,cAAc,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,cAAc,CAAC,MAAM;YAC7B,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,+BAA+B;IAC/B,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,KAAK,EAAE,MAAM;YACb,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAED,6CAA6C;IAC7C,IAAI,wBAAwB,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,MAAM,EAAE,sCAAsC;YAC9C,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,qDAAqD;IACrD,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,+BAA+B;QACvC,UAAU,EAAE,KAAK;KAClB,CAAC;AACJ,CAAC;AAYD;;GAEG;AACU,QAAA,uBAAuB,GAAmB;IACrD,IAAI,EAAE,MAAM;CACb,CAAC;AAEF;;;GAGG;AACH,SAAgB,cAAc,CAAC,GAAW,EAAE,OAAuB;IACjE,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,mBAAmB,CAAC;QAC3D,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC5D,OAAO,eAAe,WAAW,IAAI,SAAS,WAAW,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;IACzF,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClC,0CAA0C;QAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;QAC3D,OAAO,SAAS,WAAW,0HAA0H,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;IACrL,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/tools/index.d.ts

@@ -0,0 +1,23 @@
+/**
+ * openhorse - 工具集
+ *
+ * 定义 Agent 可用的工具（Tool System v2）：
+ *   - read_file: 读取文件内容
+ *   - write_file: 写入文件
+ *   - list_files: 列出目录
+ *   - exec_command: 执行 shell 命令
+ *
+ * 使用 buildTool() 工厂模式。
+ */
+import { type OpenHorseTool } from '../framework/tool';
+export declare const TOOLS: OpenHorseTool[];
+/**
+ * 执行一个工具调用，返回结构化结果字符串
+ */
+export declare function executeTool(name: string, args: Record<string, unknown>): Promise<string>;
+/**
+ * 获取可用工具名称列表
+ */
+export declare function getToolNames(): string;
+export { READ_ONLY_COMMANDS, DANGEROUS_PATTERNS, POTENTIALLY_DESTRUCTIVE_PATTERNS, isReadOnlyCommand, checkDangerousCommand, isPotentiallyDestructive, assessCommandSecurity, wrapForSandbox, type SandboxOptions, DEFAULT_SANDBOX_OPTIONS, } from './bash_security';
+//# sourceMappingURL=index.d.ts.map

package/dist/tools/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tools/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAMH,OAAO,EAAa,KAAK,aAAa,EAAqC,MAAM,mBAAmB,CAAC;AA6BrG,eAAO,MAAM,KAAK,EAAE,aAAa,EA0kBhC,CAAC;AAkXF;;GAEG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CA+B9F;AAED;;GAEG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAGD,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,gCAAgC,EAChC,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,cAAc,EACd,KAAK,cAAc,EACnB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC"}