palaryn 0.1.0 → 0.3.2

package/dist/src/executor/shell-executor.js

@@ -0,0 +1,119 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ShellExecutor = void 0;
+const child_process_1 = require("child_process");
+/**
+ * Shell executor for sandboxed command execution.
+ * Handles tool calls with tool name `shell.*` (e.g., shell.exec).
+ * Uses execFile (not exec) to prevent shell injection.
+ * Empty allowlist by default - nothing runs until configured.
+ */
+class ShellExecutor {
+    constructor(config) {
+        this.config = config;
+    }
+    async execute(toolCall) {
+        const action = this.resolveAction(toolCall);
+        switch (action) {
+            case 'exec':
+                return this.exec(toolCall);
+            default:
+                throw new Error(`Unsupported shell action: ${action}`);
+        }
+    }
+    resolveAction(toolCall) {
+        if (toolCall.args.action && typeof toolCall.args.action === 'string') {
+            return toolCall.args.action;
+        }
+        const toolName = toolCall.tool.name;
+        const dotIndex = toolName.indexOf('.');
+        if (dotIndex !== -1) {
+            return toolName.substring(dotIndex + 1);
+        }
+        throw new Error(`Unsupported shell action: ${toolName}`);
+    }
+    isCommandAllowed(command) {
+        return this.config.allowed_commands.includes(command);
+    }
+    isCommandBlocked(command, args) {
+        const fullCommand = [command, ...args].join(' ');
+        // Check config blocked_commands
+        if (this.config.blocked_commands) {
+            for (const blocked of this.config.blocked_commands) {
+                if (command === blocked || fullCommand.includes(blocked)) {
+                    return true;
+                }
+            }
+        }
+        // Check default blocklist
+        for (const blocked of ShellExecutor.DEFAULT_BLOCKED) {
+            if (fullCommand.includes(blocked)) {
+                return true;
+            }
+        }
+        return false;
+    }
+    async exec(toolCall) {
+        const { command, args: cmdArgs, cwd, env, timeout_ms } = toolCall.args;
+        if (!command || typeof command !== 'string') {
+            throw new Error('Missing or invalid "command" argument for shell.exec');
+        }
+        if (!this.isCommandAllowed(command)) {
+            throw new Error(`Command "${command}" is not in the allowed commands list`);
+        }
+        const argsList = Array.isArray(cmdArgs) ? cmdArgs.map(String) : [];
+        if (this.isCommandBlocked(command, argsList)) {
+            throw new Error(`Command "${command}" with the given arguments is blocked`);
+        }
+        const timeoutMs = (typeof timeout_ms === 'number' ? timeout_ms : null) || this.config.timeout_ms;
+        const workingDir = (typeof cwd === 'string' ? cwd : null) || this.config.cwd;
+        return new Promise((resolve, reject) => {
+            const child = (0, child_process_1.execFile)(command, argsList, {
+                timeout: timeoutMs,
+                maxBuffer: this.config.max_output_bytes,
+                cwd: workingDir || undefined,
+                env: env && typeof env === 'object' ? { ...process.env, ...env } : undefined,
+            }, (error, stdout, stderr) => {
+                if (error && !('code' in error)) {
+                    reject(error);
+                    return;
+                }
+                const exitCode = error && 'code' in error ? error.code : 0;
+                const stdoutStr = typeof stdout === 'string' ? stdout : '';
+                const stderrStr = typeof stderr === 'string' ? stderr : '';
+                // Enforce max_output_bytes on combined output
+                const totalBytes = Buffer.byteLength(stdoutStr) + Buffer.byteLength(stderrStr);
+                if (totalBytes > this.config.max_output_bytes) {
+                    resolve({
+                        body: stdoutStr.substring(0, this.config.max_output_bytes),
+                        exit_code: exitCode,
+                        stderr: stderrStr.substring(0, 1024),
+                        metadata: { truncated: true, total_bytes: totalBytes },
+                    });
+                    return;
+                }
+                resolve({
+                    body: stdoutStr,
+                    exit_code: exitCode,
+                    stderr: stderrStr || undefined,
+                });
+            });
+            // Safety: ensure child process is cleaned up
+            child.on('error', reject);
+        });
+    }
+}
+exports.ShellExecutor = ShellExecutor;
+/** Default blocklist of dangerous commands/patterns */
+ShellExecutor.DEFAULT_BLOCKED = [
+    'rm -rf /',
+    'rm -rf /*',
+    'dd',
+    'mkfs',
+    'fdisk',
+    'format',
+    ':(){:|:&};:',
+    'chmod -R 777 /',
+    'chown -R',
+];
+//# sourceMappingURL=shell-executor.js.map

package/dist/src/executor/shell-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-executor.js","sourceRoot":"","sources":["../../../src/executor/shell-executor.ts"],"names":[],"mappings":";;;AAAA,iDAAyC;AAMzC;;;;;GAKG;AACH,MAAa,aAAa;IAgBxB,YAAY,MAA2B;QACrC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAkB;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE5C,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7B;gBACE,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,QAAkB;QACtC,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACrE,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QAC9B,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QACpC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;YACpB,OAAO,QAAQ,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;IAC3D,CAAC;IAEO,gBAAgB,CAAC,OAAe;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAEO,gBAAgB,CAAC,OAAe,EAAE,IAAc;QACtD,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEjD,gCAAgC;QAChC,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBACnD,IAAI,OAAO,KAAK,OAAO,IAAI,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBACzD,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,KAAK,MAAM,OAAO,IAAI,aAAa,CAAC,eAAe,EAAE,CAAC;YACpD,IAAI,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClC,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,QAAkB;QACnC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;QAEvE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,YAAY,OAAO,uCAAuC,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,QAAQ,GAAa,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAE7E,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,YAAY,OAAO,uCAAuC,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;QACjG,MAAM,UAAU,GAAG,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QAE7E,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjD,MAAM,KAAK,GAAG,IAAA,wBAAQ,EACpB,OAAO,EACP,QAAQ,EACR;gBACE,OAAO,EAAE,SAAS;gBAClB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;gBACvC,GAAG,EAAE,UAAU,IAAI,SAAS;gBAC5B,GAAG,EAAE,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAI,GAA8B,EAAE,CAAC,CAAC,CAAC,SAAS;aACzG,EACD,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;gBACxB,IAAI,KAAK,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,EAAE,CAAC;oBAChC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBAED,MAAM,QAAQ,GAAG,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAE,KAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjF,MAAM,SAAS,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,MAAM,SAAS,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAE3D,8CAA8C;gBAC9C,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;gBAC/E,IAAI,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;oBAC9C,OAAO,CAAC;wBACN,IAAI,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;wBAC1D,SAAS,EAAE,QAAQ;wBACnB,MAAM,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC;wBACpC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE;qBACvD,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,OAAO,CAAC;oBACN,IAAI,EAAE,SAAS;oBACf,SAAS,EAAE,QAAQ;oBACnB,MAAM,EAAE,SAAS,IAAI,SAAS;iBAC/B,CAAC,CAAC;YACL,CAAC,CACF,CAAC;YAEF,6CAA6C;YAC7C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;;AAtIH,sCAuIC;AApIC,uDAAuD;AAC/B,6BAAe,GAAG;IACxC,UAAU;IACV,WAAW;IACX,IAAI;IACJ,MAAM;IACN,OAAO;IACP,QAAQ;IACR,aAAa;IACb,gBAAgB;IAChB,UAAU;CACX,CAAC"}

package/dist/src/executor/sql-executor.d.ts

@@ -0,0 +1,29 @@
+import { ToolCall } from '../types/tool-call';
+import { ToolOutput } from '../types/tool-result';
+import { ToolExecutor } from './interfaces';
+import { SQLExecutorConfig } from '../types/config';
+/**
+ * SQL executor for parameterized database queries.
+ * Handles tool calls with tool name `sql.*` (e.g., sql.query, sql.execute).
+ * Enforces read_only mode, table blocklists, and query timeouts.
+ */
+export declare class SQLExecutor implements ToolExecutor {
+    private pool;
+    private config;
+    constructor(config: SQLExecutorConfig);
+    execute(toolCall: ToolCall): Promise<ToolOutput>;
+    private resolveAction;
+    /**
+     * Check if the query references any blocked tables.
+     */
+    private checkBlockedTables;
+    /**
+     * Check if a query is a read-only SELECT statement.
+     */
+    private isReadOnly;
+    private query;
+    private sqlExecute;
+    /** Close the connection pool. */
+    close(): Promise<void>;
+}
+//# sourceMappingURL=sql-executor.d.ts.map

package/dist/src/executor/sql-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-executor.d.ts","sourceRoot":"","sources":["../../../src/executor/sql-executor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD;;;;GAIG;AACH,qBAAa,WAAY,YAAW,YAAY;IAC9C,OAAO,CAAC,IAAI,CAAO;IACnB,OAAO,CAAC,MAAM,CAAoB;gBAEtB,MAAM,EAAE,iBAAiB;IAQ/B,OAAO,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IAatD,OAAO,CAAC,aAAa;IAcrB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IA4B1B;;OAEG;IACH,OAAO,CAAC,UAAU;YAOJ,KAAK;YA0BL,UAAU;IAwBxB,iCAAiC;IAC3B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B"}

package/dist/src/executor/sql-executor.js

@@ -0,0 +1,114 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SQLExecutor = void 0;
+const pg_1 = require("pg");
+/**
+ * SQL executor for parameterized database queries.
+ * Handles tool calls with tool name `sql.*` (e.g., sql.query, sql.execute).
+ * Enforces read_only mode, table blocklists, and query timeouts.
+ */
+class SQLExecutor {
+    constructor(config) {
+        this.config = config;
+        this.pool = new pg_1.Pool({
+            connectionString: config.connection_string,
+            statement_timeout: config.timeout_ms,
+        });
+    }
+    async execute(toolCall) {
+        const action = this.resolveAction(toolCall);
+        switch (action) {
+            case 'query':
+                return this.query(toolCall);
+            case 'execute':
+                return this.sqlExecute(toolCall);
+            default:
+                throw new Error(`Unsupported SQL action: ${action}`);
+        }
+    }
+    resolveAction(toolCall) {
+        if (toolCall.args.action && typeof toolCall.args.action === 'string') {
+            return toolCall.args.action;
+        }
+        const toolName = toolCall.tool.name;
+        const dotIndex = toolName.indexOf('.');
+        if (dotIndex !== -1) {
+            return toolName.substring(dotIndex + 1);
+        }
+        throw new Error(`Unsupported SQL action: ${toolName}`);
+    }
+    /**
+     * Check if the query references any blocked tables.
+     */
+    checkBlockedTables(query) {
+        const blocked = this.config.blocked_tables;
+        if (!blocked || blocked.length === 0)
+            return;
+        // Extract table names from common SQL patterns
+        const tablePatterns = [
+            /\bFROM\s+([a-zA-Z_][\w.]*)/gi,
+            /\bJOIN\s+([a-zA-Z_][\w.]*)/gi,
+            /\bINTO\s+([a-zA-Z_][\w.]*)/gi,
+            /\bUPDATE\s+([a-zA-Z_][\w.]*)/gi,
+            /\bTABLE\s+([a-zA-Z_][\w.]*)/gi,
+        ];
+        const referencedTables = new Set();
+        for (const pattern of tablePatterns) {
+            let match;
+            while ((match = pattern.exec(query)) !== null) {
+                referencedTables.add(match[1].toLowerCase());
+            }
+        }
+        for (const table of referencedTables) {
+            if (blocked.some(b => table === b.toLowerCase())) {
+                throw new Error(`Access to table "${table}" is blocked`);
+            }
+        }
+    }
+    /**
+     * Check if a query is a read-only SELECT statement.
+     */
+    isReadOnly(query) {
+        const trimmed = query.trim().toUpperCase();
+        // Allow SELECT, WITH ... SELECT, EXPLAIN
+        return /^(SELECT|WITH\s|EXPLAIN\s)/i.test(trimmed) &&
+            !/\b(INSERT|UPDATE|DELETE|DROP|ALTER|CREATE|TRUNCATE|GRANT|REVOKE)\b/i.test(trimmed);
+    }
+    async query(toolCall) {
+        const { query, params } = toolCall.args;
+        if (!query || typeof query !== 'string') {
+            throw new Error('Missing or invalid "query" argument for sql.query');
+        }
+        if (!this.isReadOnly(query)) {
+            throw new Error('sql.query only allows read-only (SELECT) statements');
+        }
+        this.checkBlockedTables(query);
+        const result = await this.pool.query(query, Array.isArray(params) ? params : undefined);
+        const rows = result.rows.slice(0, this.config.max_rows);
+        return {
+            body: rows,
+            rows_affected: result.rowCount ?? 0,
+        };
+    }
+    async sqlExecute(toolCall) {
+        const { query, params } = toolCall.args;
+        if (!query || typeof query !== 'string') {
+            throw new Error('Missing or invalid "query" argument for sql.execute');
+        }
+        if (this.config.read_only) {
+            throw new Error('sql.execute is disabled: executor is in read_only mode');
+        }
+        this.checkBlockedTables(query);
+        const result = await this.pool.query(query, Array.isArray(params) ? params : undefined);
+        return {
+            body: result.rows?.slice(0, this.config.max_rows) ?? [],
+            rows_affected: result.rowCount ?? 0,
+        };
+    }
+    /** Close the connection pool. */
+    async close() {
+        await this.pool.end();
+    }
+}
+exports.SQLExecutor = SQLExecutor;
+//# sourceMappingURL=sql-executor.js.map

package/dist/src/executor/sql-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-executor.js","sourceRoot":"","sources":["../../../src/executor/sql-executor.ts"],"names":[],"mappings":";;;AAAA,2BAA0B;AAM1B;;;;GAIG;AACH,MAAa,WAAW;IAItB,YAAY,MAAyB;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,IAAI,SAAI,CAAC;YACnB,gBAAgB,EAAE,MAAM,CAAC,iBAAiB;YAC1C,iBAAiB,EAAE,MAAM,CAAC,UAAU;SACrC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAkB;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE5C,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC9B,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACnC;gBACE,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,QAAkB;QACtC,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACrE,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QAC9B,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QACpC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;YACpB,OAAO,QAAQ,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,EAAE,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,KAAa;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;QAC3C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAE7C,+CAA+C;QAC/C,MAAM,aAAa,GAAG;YACpB,8BAA8B;YAC9B,8BAA8B;YAC9B,8BAA8B;YAC9B,gCAAgC;YAChC,+BAA+B;SAChC,CAAC;QAEF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC3C,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;YACpC,IAAI,KAAK,CAAC;YACV,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC9C,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;YACrC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,cAAc,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,KAAa;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,yCAAyC;QACzC,OAAO,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC;YAChD,CAAC,qEAAqE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzF,CAAC;IAEO,KAAK,CAAC,KAAK,CAAC,QAAkB;QACpC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;QAExC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAE/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAClC,KAAK,EACL,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAC3C,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAExD,OAAO;YACL,IAAI,EAAE,IAAI;YACV,aAAa,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;SACpC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,QAAkB;QACzC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;QAExC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAE/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAClC,KAAK,EACL,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAC3C,CAAC;QAEF,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE;YACvD,aAAa,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;SACpC,CAAC;IACJ,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACxB,CAAC;CACF;AAtID,kCAsIC"}

package/dist/src/executor/websocket-executor.d.ts

@@ -0,0 +1,26 @@
+import { ToolCall } from '../types/tool-call';
+import { ToolOutput } from '../types/tool-result';
+import { ToolExecutor } from './interfaces';
+import { WebSocketExecutorConfig } from '../types/config';
+/**
+ * WebSocket executor for managed WebSocket connections.
+ * Handles tool calls with tool name `ws.*` (e.g., ws.connect, ws.send, ws.close).
+ * Manages a connection pool by connection_id with URL allowlisting.
+ */
+export declare class WebSocketExecutor implements ToolExecutor {
+    private config;
+    private connections;
+    constructor(config: WebSocketExecutorConfig);
+    execute(toolCall: ToolCall): Promise<ToolOutput>;
+    private resolveAction;
+    /**
+     * Check if a URL matches any of the allowed URL patterns.
+     */
+    private isUrlAllowed;
+    private connect;
+    private send;
+    private wsClose;
+    /** Close all managed connections. */
+    closeAll(): Promise<void>;
+}
+//# sourceMappingURL=websocket-executor.d.ts.map

package/dist/src/executor/websocket-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocket-executor.d.ts","sourceRoot":"","sources":["../../../src/executor/websocket-executor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAQ1D;;;;GAIG;AACH,qBAAa,iBAAkB,YAAW,YAAY;IACpD,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,WAAW,CAA6C;gBAEpD,MAAM,EAAE,uBAAuB;IAIrC,OAAO,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IAetD,OAAO,CAAC,aAAa;IAcrB;;OAEG;IACH,OAAO,CAAC,YAAY;YAiBN,OAAO;YA6CP,IAAI;YA8DJ,OAAO;IAqBrB,qCAAqC;IAC/B,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAMhC"}

package/dist/src/executor/websocket-executor.js

@@ -0,0 +1,205 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebSocketExecutor = void 0;
+const ws_1 = __importDefault(require("ws"));
+const crypto = __importStar(require("crypto"));
+/**
+ * WebSocket executor for managed WebSocket connections.
+ * Handles tool calls with tool name `ws.*` (e.g., ws.connect, ws.send, ws.close).
+ * Manages a connection pool by connection_id with URL allowlisting.
+ */
+class WebSocketExecutor {
+    constructor(config) {
+        this.connections = new Map();
+        this.config = config;
+    }
+    async execute(toolCall) {
+        const action = this.resolveAction(toolCall);
+        switch (action) {
+            case 'connect':
+                return this.connect(toolCall);
+            case 'send':
+                return this.send(toolCall);
+            case 'close':
+                return this.wsClose(toolCall);
+            default:
+                throw new Error(`Unsupported WebSocket action: ${action}`);
+        }
+    }
+    resolveAction(toolCall) {
+        if (toolCall.args.action && typeof toolCall.args.action === 'string') {
+            return toolCall.args.action;
+        }
+        const toolName = toolCall.tool.name;
+        const dotIndex = toolName.indexOf('.');
+        if (dotIndex !== -1) {
+            return toolName.substring(dotIndex + 1);
+        }
+        throw new Error(`Unsupported WebSocket action: ${toolName}`);
+    }
+    /**
+     * Check if a URL matches any of the allowed URL patterns.
+     */
+    isUrlAllowed(url) {
+        if (!this.config.allowed_urls || this.config.allowed_urls.length === 0) {
+            return false;
+        }
+        for (const pattern of this.config.allowed_urls) {
+            // Convert glob-like pattern to regex
+            const escaped = pattern.replace(/[.+?^${}()|[\]\\]/g, '\\$&').replace(/\*/g, '.*');
+            const regex = new RegExp(`^${escaped}$`);
+            if (regex.test(url)) {
+                return true;
+            }
+        }
+        return false;
+    }
+    async connect(toolCall) {
+        const { url, connection_id: providedId } = toolCall.args;
+        if (!url || typeof url !== 'string') {
+            throw new Error('Missing or invalid "url" argument for ws.connect');
+        }
+        if (!this.isUrlAllowed(url)) {
+            throw new Error(`URL "${url}" is not in the allowed URLs list`);
+        }
+        const connectionId = (typeof providedId === 'string' ? providedId : null)
+            || crypto.randomUUID();
+        return new Promise((resolve, reject) => {
+            const timeout = setTimeout(() => {
+                ws.close();
+                reject(new Error(`WebSocket connection timeout after ${this.config.connect_timeout_ms}ms`));
+            }, this.config.connect_timeout_ms);
+            const ws = new ws_1.default(url, {
+                maxPayload: this.config.max_message_size_bytes,
+            });
+            ws.on('open', () => {
+                clearTimeout(timeout);
+                this.connections.set(connectionId, {
+                    ws,
+                    url,
+                    createdAt: Date.now(),
+                });
+                resolve({
+                    body: { connected: true, connection_id: connectionId },
+                    metadata: { url },
+                });
+            });
+            ws.on('error', (err) => {
+                clearTimeout(timeout);
+                reject(new Error(`WebSocket connection failed: ${err.message}`));
+            });
+        });
+    }
+    async send(toolCall) {
+        const { connection_id, message, wait_for_response } = toolCall.args;
+        if (!connection_id || typeof connection_id !== 'string') {
+            throw new Error('Missing or invalid "connection_id" argument for ws.send');
+        }
+        if (message === undefined || message === null) {
+            throw new Error('Missing "message" argument for ws.send');
+        }
+        const conn = this.connections.get(connection_id);
+        if (!conn) {
+            throw new Error(`No connection found with id "${connection_id}"`);
+        }
+        if (conn.ws.readyState !== ws_1.default.OPEN) {
+            this.connections.delete(connection_id);
+            throw new Error(`Connection "${connection_id}" is no longer open`);
+        }
+        const data = typeof message === 'string' ? message : JSON.stringify(message);
+        if (Buffer.byteLength(data) > this.config.max_message_size_bytes) {
+            throw new Error(`Message size exceeds max allowed ${this.config.max_message_size_bytes} bytes`);
+        }
+        return new Promise((resolve, reject) => {
+            if (wait_for_response) {
+                const responseTimeout = setTimeout(() => {
+                    conn.ws.removeAllListeners('message');
+                    resolve({
+                        body: null,
+                        metadata: { connection_id, timeout: true },
+                    });
+                }, this.config.connect_timeout_ms);
+                conn.ws.once('message', (responseData) => {
+                    clearTimeout(responseTimeout);
+                    resolve({
+                        body: responseData.toString(),
+                        metadata: { connection_id },
+                    });
+                });
+            }
+            conn.ws.send(data, (err) => {
+                if (err) {
+                    reject(new Error(`Failed to send message: ${err.message}`));
+                    return;
+                }
+                if (!wait_for_response) {
+                    resolve({
+                        body: { sent: true },
+                        metadata: { connection_id },
+                    });
+                }
+            });
+        });
+    }
+    async wsClose(toolCall) {
+        const { connection_id } = toolCall.args;
+        if (!connection_id || typeof connection_id !== 'string') {
+            throw new Error('Missing or invalid "connection_id" argument for ws.close');
+        }
+        const conn = this.connections.get(connection_id);
+        if (!conn) {
+            throw new Error(`No connection found with id "${connection_id}"`);
+        }
+        conn.ws.close();
+        this.connections.delete(connection_id);
+        return {
+            body: { closed: true },
+            metadata: { connection_id },
+        };
+    }
+    /** Close all managed connections. */
+    async closeAll() {
+        for (const [id, conn] of this.connections) {
+            conn.ws.close();
+            this.connections.delete(id);
+        }
+    }
+}
+exports.WebSocketExecutor = WebSocketExecutor;
+//# sourceMappingURL=websocket-executor.js.map

package/dist/src/executor/websocket-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"websocket-executor.js","sourceRoot":"","sources":["../../../src/executor/websocket-executor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAA2B;AAC3B,+CAAiC;AAYjC;;;;GAIG;AACH,MAAa,iBAAiB;IAI5B,YAAY,MAA+B;QAFnC,gBAAW,GAAmC,IAAI,GAAG,EAAE,CAAC;QAG9D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAkB;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE5C,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAChC,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7B,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAChC;gBACE,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,QAAkB;QACtC,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACrE,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QAC9B,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QACpC,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;YACpB,OAAO,QAAQ,CAAC,SAAS,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,GAAW;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC/C,qCAAqC;YACrC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACnF,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAkB;QACtC,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;QAEzD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,mCAAmC,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;eACpE,MAAM,CAAC,UAAU,EAAE,CAAC;QAEzB,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC;YAC9F,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAEnC,MAAM,EAAE,GAAG,IAAI,YAAS,CAAC,GAAG,EAAE;gBAC5B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,sBAAsB;aAC/C,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;gBACjB,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE;oBACjC,EAAE;oBACF,GAAG;oBACH,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CAAC;gBAEH,OAAO,CAAC;oBACN,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE;oBACtD,QAAQ,EAAE,EAAE,GAAG,EAAE;iBAClB,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;gBAC5B,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,QAAkB;QACnC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;QAEpE,IAAI,CAAC,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QAED,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,gCAAgC,aAAa,GAAG,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,KAAK,YAAS,CAAC,IAAI,EAAE,CAAC;YAC1C,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,eAAe,aAAa,qBAAqB,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAE7E,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,MAAM,CAAC,sBAAsB,QAAQ,CAAC,CAAC;QAClG,CAAC;QAED,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACjD,IAAI,iBAAiB,EAAE,CAAC;gBACtB,MAAM,eAAe,GAAG,UAAU,CAAC,GAAG,EAAE;oBACtC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;oBACtC,OAAO,CAAC;wBACN,IAAI,EAAE,IAAI;wBACV,QAAQ,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE;qBAC3C,CAAC,CAAC;gBACL,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBAEnC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,YAA4B,EAAE,EAAE;oBACvD,YAAY,CAAC,eAAe,CAAC,CAAC;oBAC9B,OAAO,CAAC;wBACN,IAAI,EAAE,YAAY,CAAC,QAAQ,EAAE;wBAC7B,QAAQ,EAAE,EAAE,aAAa,EAAE;qBAC5B,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,GAAW,EAAE,EAAE;gBACjC,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;oBAC5D,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACvB,OAAO,CAAC;wBACN,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;wBACpB,QAAQ,EAAE,EAAE,aAAa,EAAE;qBAC5B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAkB;QACtC,MAAM,EAAE,aAAa,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;QAExC,IAAI,CAAC,aAAa,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,gCAAgC,aAAa,GAAG,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAEvC,OAAO;YACL,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;YACtB,QAAQ,EAAE,EAAE,aAAa,EAAE;SAC5B,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,KAAK,CAAC,QAAQ;QACZ,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1C,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;CACF;AAhMD,8CAgMC"}

package/dist/src/interceptor/index.d.ts

@@ -0,0 +1,2 @@
+export { ProviderInterceptor, ProviderToolBlock } from './provider-interceptor';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/interceptor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/interceptor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/src/interceptor/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProviderInterceptor = void 0;
+var provider_interceptor_1 = require("./provider-interceptor");
+Object.defineProperty(exports, "ProviderInterceptor", { enumerable: true, get: function () { return provider_interceptor_1.ProviderInterceptor; } });
+//# sourceMappingURL=index.js.map

package/dist/src/interceptor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/interceptor/index.ts"],"names":[],"mappings":";;;AAAA,+DAAgF;AAAvE,2HAAA,mBAAmB,OAAA"}

package/dist/src/interceptor/provider-interceptor.d.ts

@@ -0,0 +1,36 @@
+import { ProviderInterceptConfig } from '../types/config';
+export interface ProviderToolBlock {
+    provider: 'claude' | 'openai' | 'gemini' | 'unknown';
+    tool_name: string;
+    tool_type: string;
+    inputs: Record<string, unknown>;
+    outputs?: unknown;
+    block_index: number;
+}
+type Provider = ProviderToolBlock['provider'];
+export declare class ProviderInterceptor {
+    private urlPatterns;
+    private scanInputs;
+    private scanOutputs;
+    constructor(config: ProviderInterceptConfig);
+    /** Check if a URL matches any provider pattern */
+    matchesProvider(url: string): boolean;
+    /** Detect which provider a URL belongs to */
+    detectProvider(url: string): Provider;
+    /** Extract tool blocks from a request body (pre-execution) */
+    extractFromRequest(body: unknown, provider: string): ProviderToolBlock[];
+    /** Extract tool blocks from a response body (post-execution) */
+    extractFromResponse(body: unknown, provider: string): ProviderToolBlock[];
+    /** Get all inputs as a flat object for DLP scanning */
+    flattenInputsForDLP(blocks: ProviderToolBlock[]): Record<string, unknown>;
+    /** Get all outputs as a flat object for DLP scanning */
+    flattenOutputsForDLP(blocks: ProviderToolBlock[]): Record<string, unknown>;
+    private extractClaudeRequest;
+    private extractClaudeResponse;
+    private extractOpenAIRequest;
+    private extractOpenAIResponse;
+    private extractGeminiRequest;
+    private extractGeminiResponse;
+}
+export {};
+//# sourceMappingURL=provider-interceptor.d.ts.map

package/dist/src/interceptor/provider-interceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-interceptor.d.ts","sourceRoot":"","sources":["../../../src/interceptor/provider-interceptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,KAAK,QAAQ,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;AAyB9C,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,WAAW,CAAW;IAC9B,OAAO,CAAC,UAAU,CAAU;IAC5B,OAAO,CAAC,WAAW,CAAU;gBAEjB,MAAM,EAAE,uBAAuB;IAS3C,kDAAkD;IAClD,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIrC,6CAA6C;IAC7C,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ;IAOrC,8DAA8D;IAC9D,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,iBAAiB,EAAE;IAcxE,gEAAgE;IAChE,mBAAmB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,iBAAiB,EAAE;IAczE,uDAAuD;IACvD,mBAAmB,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAUzE,wDAAwD;IACxD,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAY1E,OAAO,CAAC,oBAAoB;IAkC5B,OAAO,CAAC,qBAAqB;IAsB7B,OAAO,CAAC,oBAAoB;IAwB5B,OAAO,CAAC,qBAAqB;IA6B7B,OAAO,CAAC,oBAAoB;IAwB5B,OAAO,CAAC,qBAAqB;CAyB9B"}