palaryn 0.1.0

package/dist/src/executor/http-executor.js

@@ -0,0 +1,333 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpExecutor = void 0;
+exports.isPrivateIP = isPrivateIP;
+const http = __importStar(require("http"));
+const https = __importStar(require("https"));
+const dns = __importStar(require("dns"));
+const net = __importStar(require("net"));
+const url_1 = require("url");
+/** Maximum response body size in bytes (10 MB) */
+const MAX_RESPONSE_BODY_BYTES = 10 * 1024 * 1024;
+/**
+ * Check whether an IP address belongs to a private/reserved range.
+ * Blocks: loopback, link-local, private (RFC 1918), metadata endpoints,
+ * broadcast, multicast, and IPv6 equivalents.
+ */
+function isPrivateIP(ip) {
+    // IPv4 checks
+    if (net.isIPv4(ip)) {
+        const parts = ip.split('.').map(Number);
+        const [a, b] = parts;
+        // Loopback: 127.0.0.0/8
+        if (a === 127)
+            return true;
+        // Link-local: 169.254.0.0/16 (includes cloud metadata 169.254.169.254)
+        if (a === 169 && b === 254)
+            return true;
+        // Private: 10.0.0.0/8
+        if (a === 10)
+            return true;
+        // Private: 172.16.0.0/12
+        if (a === 172 && b >= 16 && b <= 31)
+            return true;
+        // Private: 192.168.0.0/16
+        if (a === 192 && b === 168)
+            return true;
+        // Current network: 0.0.0.0/8
+        if (a === 0)
+            return true;
+        // Broadcast
+        if (ip === '255.255.255.255')
+            return true;
+        // Multicast: 224.0.0.0/4
+        if (a >= 224 && a <= 239)
+            return true;
+        return false;
+    }
+    // IPv6 checks
+    if (net.isIPv6(ip)) {
+        const normalized = ip.toLowerCase();
+        // Loopback: ::1
+        if (normalized === '::1')
+            return true;
+        // Unspecified: ::
+        if (normalized === '::')
+            return true;
+        // Link-local: fe80::/10
+        if (normalized.startsWith('fe80:'))
+            return true;
+        // Unique local: fc00::/7
+        if (normalized.startsWith('fc') || normalized.startsWith('fd'))
+            return true;
+        // IPv4-mapped IPv6: ::ffff:x.x.x.x
+        const v4Mapped = /^::ffff:(\d+\.\d+\.\d+\.\d+)$/i.exec(normalized);
+        if (v4Mapped)
+            return isPrivateIP(v4Mapped[1]);
+        return false;
+    }
+    return false;
+}
+/**
+ * Resolve a hostname and verify the resolved IP is not private/internal.
+ * Returns the pinned IP address to prevent DNS TOCTOU rebinding attacks.
+ * Prevents SSRF attacks targeting internal services or cloud metadata.
+ */
+function validateResolvedIP(hostname) {
+    // Direct IP addresses — check immediately
+    if (net.isIP(hostname)) {
+        if (isPrivateIP(hostname)) {
+            return Promise.reject(new Error(`SSRF blocked: resolved IP ${hostname} is a private/reserved address`));
+        }
+        return Promise.resolve(hostname);
+    }
+    return new Promise((resolve, reject) => {
+        dns.lookup(hostname, { all: true }, (err, addresses) => {
+            if (err)
+                return reject(err);
+            if (!addresses || addresses.length === 0) {
+                return reject(new Error(`DNS lookup failed: no addresses found for "${hostname}"`));
+            }
+            for (const addr of addresses) {
+                if (isPrivateIP(addr.address)) {
+                    return reject(new Error(`SSRF blocked: hostname "${hostname}" resolved to private IP ${addr.address}`));
+                }
+            }
+            // Return the first resolved IP for DNS pinning
+            resolve(addresses[0].address);
+        });
+    });
+}
+class HttpExecutor {
+    constructor(config) {
+        /** Set to false to disable SSRF protection (for testing only). */
+        this.ssrfProtectionEnabled = true;
+        this.config = config;
+        this.cache = new Map();
+    }
+    // Execute an HTTP request based on ToolCall args
+    async execute(toolCall) {
+        const { method = 'GET', url, headers = {}, body } = toolCall.args;
+        if (!url || typeof url !== 'string') {
+            throw new Error('Missing or invalid URL in tool call args');
+        }
+        // SSRF protection: block requests to private/internal IPs and pin DNS
+        let pinnedIP;
+        if (this.ssrfProtectionEnabled) {
+            const parsedUrl = new url_1.URL(url);
+            pinnedIP = await validateResolvedIP(parsedUrl.hostname);
+        }
+        // Check cache for GET requests
+        if (method === 'GET' && this.config.cache.enabled) {
+            const cacheKey = this.getCacheKey(url, headers);
+            const cached = this.getFromCache(cacheKey);
+            if (cached)
+                return cached;
+        }
+        // Determine timeout from constraints or config
+        const timeoutMs = toolCall.constraints?.timeout_ms || this.config.http.timeout_ms;
+        // Execute with retries
+        let lastError = null;
+        const maxRetries = this.config.http.max_retries;
+        for (let attempt = 0; attempt <= maxRetries; attempt++) {
+            try {
+                const output = await this.makeRequest(method, url, headers, body, timeoutMs, pinnedIP);
+                // Cache successful GET responses
+                if (method === 'GET' && this.config.cache.enabled && output.http_status && output.http_status < 400) {
+                    const cacheKey = this.getCacheKey(url, headers);
+                    this.setCache(cacheKey, output);
+                }
+                return output;
+            }
+            catch (err) {
+                lastError = err instanceof Error ? err : new Error(String(err));
+                // Don't retry on client errors (4xx) except 429
+                if (lastError.message.includes('HTTP 4') && !lastError.message.includes('HTTP 429')) {
+                    throw lastError;
+                }
+                // Don't retry on SSRF blocks
+                if (lastError.message.includes('SSRF blocked')) {
+                    throw lastError;
+                }
+                // Wait before retry with exponential backoff
+                if (attempt < maxRetries) {
+                    const backoffMs = this.config.http.backoff_base_ms * Math.pow(2, attempt);
+                    await this.sleep(backoffMs);
+                }
+            }
+        }
+        throw lastError || new Error('Request failed after retries');
+    }
+    // Make a single HTTP request using Node.js built-in http/https
+    // When pinnedIP is provided (from SSRF DNS validation), the TCP connection
+    // goes to that IP while the Host header and TLS SNI use the original hostname,
+    // preventing DNS rebinding attacks.
+    makeRequest(method, url, headers, body, timeoutMs, pinnedIP) {
+        return new Promise((resolve, reject) => {
+            const parsedUrl = new url_1.URL(url);
+            const isHttps = parsedUrl.protocol === 'https:';
+            const transport = isHttps ? https : http;
+            const bodyStr = body ? (typeof body === 'string' ? body : JSON.stringify(body)) : undefined;
+            const requestHeaders = { ...headers };
+            if (bodyStr && !requestHeaders['content-type'] && !requestHeaders['Content-Type']) {
+                requestHeaders['Content-Type'] = 'application/json';
+            }
+            if (bodyStr) {
+                requestHeaders['Content-Length'] = Buffer.byteLength(bodyStr).toString();
+            }
+            // Preserve original Host header when connecting to pinned IP
+            if (pinnedIP && parsedUrl.hostname !== pinnedIP) {
+                requestHeaders['Host'] = parsedUrl.host;
+            }
+            const options = {
+                hostname: pinnedIP || parsedUrl.hostname,
+                port: parsedUrl.port || (isHttps ? 443 : 80),
+                path: parsedUrl.pathname + parsedUrl.search,
+                method: method.toUpperCase(),
+                headers: requestHeaders,
+                timeout: timeoutMs,
+            };
+            // When using pinned IP with HTTPS, set servername for correct TLS SNI
+            if (pinnedIP && isHttps) {
+                options.servername = parsedUrl.hostname;
+            }
+            // Pin DNS resolution to the pre-validated IP to prevent TOCTOU rebinding
+            if (pinnedIP) {
+                const family = pinnedIP.includes(':') ? 6 : 4;
+                const agent = new (isHttps ? https : http).Agent({
+                    lookup: (_hostname, _options, callback) => {
+                        callback(null, pinnedIP, family);
+                    },
+                });
+                options.agent = agent;
+            }
+            const req = transport.request(options, (res) => {
+                let data = '';
+                let receivedBytes = 0;
+                let aborted = false;
+                res.on('data', (chunk) => {
+                    if (aborted)
+                        return;
+                    receivedBytes += Buffer.byteLength(chunk);
+                    if (receivedBytes > MAX_RESPONSE_BODY_BYTES) {
+                        aborted = true;
+                        req.destroy();
+                        reject(new Error(`Response body exceeds maximum size of ${MAX_RESPONSE_BODY_BYTES} bytes`));
+                        return;
+                    }
+                    data += chunk;
+                });
+                res.on('end', () => {
+                    if (aborted)
+                        return;
+                    let parsedBody = data;
+                    const contentType = res.headers['content-type'] || '';
+                    if (contentType.includes('application/json')) {
+                        try {
+                            parsedBody = JSON.parse(data);
+                        }
+                        catch {
+                            parsedBody = data;
+                        }
+                    }
+                    // Convert response headers to Record<string, string>
+                    const responseHeaders = {};
+                    for (const [key, value] of Object.entries(res.headers)) {
+                        if (value)
+                            responseHeaders[key] = Array.isArray(value) ? value.join(', ') : value;
+                    }
+                    resolve({
+                        http_status: res.statusCode || 0,
+                        body: parsedBody,
+                        headers: responseHeaders,
+                    });
+                });
+            });
+            req.on('error', (err) => reject(err));
+            req.on('timeout', () => {
+                req.destroy();
+                reject(new Error(`Request timeout after ${timeoutMs}ms`));
+            });
+            if (bodyStr) {
+                req.write(bodyStr);
+            }
+            req.end();
+        });
+    }
+    // Cache key generation
+    getCacheKey(url, headers) {
+        // Use URL + sorted header keys that affect response (Accept, Authorization)
+        const relevantHeaders = ['accept', 'authorization'];
+        const headerStr = relevantHeaders
+            .map(h => `${h}:${headers[h] || headers[h.charAt(0).toUpperCase() + h.slice(1)] || ''}`)
+            .join('|');
+        return `${url}|${headerStr}`;
+    }
+    // Get from cache
+    getFromCache(key) {
+        const entry = this.cache.get(key);
+        if (!entry)
+            return null;
+        if (Date.now() > entry.expiresAt) {
+            this.cache.delete(key);
+            return null;
+        }
+        return entry.output;
+    }
+    // Set cache entry
+    setCache(key, output) {
+        this.cache.set(key, {
+            output,
+            expiresAt: Date.now() + this.config.cache.ttl_ms,
+        });
+        // Evict old entries if cache gets too large
+        if (this.cache.size > 1000) {
+            const oldest = this.cache.keys().next().value;
+            if (oldest)
+                this.cache.delete(oldest);
+        }
+    }
+    // Clear cache
+    clearCache() {
+        this.cache.clear();
+    }
+    // Sleep utility
+    sleep(ms) {
+        return new Promise(resolve => setTimeout(resolve, ms));
+    }
+}
+exports.HttpExecutor = HttpExecutor;
+//# sourceMappingURL=http-executor.js.map

package/dist/src/executor/http-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-executor.js","sourceRoot":"","sources":["../../../src/executor/http-executor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA,kCA0CC;AA5DD,2CAA6B;AAC7B,6CAA+B;AAC/B,yCAA2B;AAC3B,yCAA2B;AAC3B,6BAA0B;AAM1B,kDAAkD;AAClD,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD;;;;GAIG;AACH,SAAgB,WAAW,CAAC,EAAU;IACpC,cAAc;IACd,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;QACrB,wBAAwB;QACxB,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC3B,uEAAuE;QACvE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACxC,sBAAsB;QACtB,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,yBAAyB;QACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QACjD,0BAA0B;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACxC,6BAA6B;QAC7B,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACzB,YAAY;QACZ,IAAI,EAAE,KAAK,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAC1C,yBAAyB;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,cAAc;IACd,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QACnB,MAAM,UAAU,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,gBAAgB;QAChB,IAAI,UAAU,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACtC,kBAAkB;QAClB,IAAI,UAAU,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACrC,wBAAwB;QACxB,IAAI,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAChD,yBAAyB;QACzB,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5E,mCAAmC;QACnC,MAAM,QAAQ,GAAG,gCAAgC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnE,IAAI,QAAQ;YAAE,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,0CAA0C;IAC1C,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvB,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6BAA6B,QAAQ,gCAAgC,CAAC,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE;YACrD,IAAI,GAAG;gBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzC,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,8CAA8C,QAAQ,GAAG,CAAC,CAAC,CAAC;YACtF,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;gBAC7B,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC9B,OAAO,MAAM,CACX,IAAI,KAAK,CAAC,2BAA2B,QAAQ,4BAA4B,IAAI,CAAC,OAAO,EAAE,CAAC,CACzF,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,+CAA+C;YAC/C,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAOD,MAAa,YAAY;IAMvB,YAAY,MAAsB;QAHlC,kEAAkE;QAC3D,0BAAqB,GAAY,IAAI,CAAC;QAG3C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC;IACzB,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,OAAO,CAAC,QAAkB;QAC9B,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,EAAE,OAAO,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;QAElE,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,sEAAsE;QACtE,IAAI,QAA4B,CAAC;QACjC,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,IAAI,SAAG,CAAC,GAAG,CAAC,CAAC;YAC/B,QAAQ,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC1D,CAAC;QAED,+BAA+B;QAC/B,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;QAED,+CAA+C;QAC/C,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,EAAE,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QAElF,uBAAuB;QACvB,IAAI,SAAS,GAAiB,IAAI,CAAC;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;QAEhD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAEvF,iCAAiC;gBACjC,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,GAAG,GAAG,EAAE,CAAC;oBACpG,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;oBAChD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAClC,CAAC;gBAED,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,SAAS,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAEhE,gDAAgD;gBAChD,IAAI,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;oBACpF,MAAM,SAAS,CAAC;gBAClB,CAAC;gBAED,6BAA6B;gBAC7B,IAAI,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;oBAC/C,MAAM,SAAS,CAAC;gBAClB,CAAC;gBAED,6CAA6C;gBAC7C,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;oBACzB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;oBAC1E,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC9B,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,SAAS,IAAI,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC/D,CAAC;IAED,+DAA+D;IAC/D,2EAA2E;IAC3E,+EAA+E;IAC/E,oCAAoC;IAC5B,WAAW,CACjB,MAAc,EACd,GAAW,EACX,OAA+B,EAC/B,IAAa,EACb,SAAiB,EACjB,QAAiB;QAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,SAAS,GAAG,IAAI,SAAG,CAAC,GAAG,CAAC,CAAC;YAC/B,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC;YAChD,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YAEzC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAE5F,MAAM,cAAc,GAA2B,EAAE,GAAG,OAAO,EAAE,CAAC;YAC9D,IAAI,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,EAAE,CAAC;gBAClF,cAAc,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YACtD,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,cAAc,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC3E,CAAC;YACD,6DAA6D;YAC7D,IAAI,QAAQ,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAChD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC;YAC1C,CAAC;YAED,MAAM,OAAO,GAAkD;gBAC7D,QAAQ,EAAE,QAAQ,IAAI,SAAS,CAAC,QAAQ;gBACxC,IAAI,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,MAAM;gBAC3C,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;gBAC5B,OAAO,EAAE,cAAc;gBACvB,OAAO,EAAE,SAAS;aACnB,CAAC;YAEF,sEAAsE;YACtE,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC;YAC1C,CAAC;YAED,yEAAyE;YACzE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;oBAC/C,MAAM,EAAE,CAAC,SAAiB,EAAE,QAAa,EAAE,QAAkB,EAAE,EAAE;wBAC/D,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;oBACnC,CAAC;iBACK,CAAC,CAAC;gBACV,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;YACxB,CAAC;YAED,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC7C,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,IAAI,aAAa,GAAG,CAAC,CAAC;gBACtB,IAAI,OAAO,GAAG,KAAK,CAAC;gBAEpB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;oBACvB,IAAI,OAAO;wBAAE,OAAO;oBACpB,aAAa,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;oBAC1C,IAAI,aAAa,GAAG,uBAAuB,EAAE,CAAC;wBAC5C,OAAO,GAAG,IAAI,CAAC;wBACf,GAAG,CAAC,OAAO,EAAE,CAAC;wBACd,MAAM,CAAC,IAAI,KAAK,CAAC,yCAAyC,uBAAuB,QAAQ,CAAC,CAAC,CAAC;wBAC5F,OAAO;oBACT,CAAC;oBACD,IAAI,IAAI,KAAK,CAAC;gBAChB,CAAC,CAAC,CAAC;gBACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,IAAI,OAAO;wBAAE,OAAO;oBACpB,IAAI,UAAU,GAAY,IAAI,CAAC;oBAC/B,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;oBACtD,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;wBAC7C,IAAI,CAAC;4BAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC;4BAAC,UAAU,GAAG,IAAI,CAAC;wBAAC,CAAC;oBACrE,CAAC;oBAED,qDAAqD;oBACrD,MAAM,eAAe,GAA2B,EAAE,CAAC;oBACnD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;wBACvD,IAAI,KAAK;4BAAE,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;oBACpF,CAAC;oBAED,OAAO,CAAC;wBACN,WAAW,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;wBAChC,IAAI,EAAE,UAAU;wBAChB,OAAO,EAAE,eAAe;qBACzB,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;gBACrB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,SAAS,IAAI,CAAC,CAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;YAEH,IAAI,OAAO,EAAE,CAAC;gBACZ,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACrB,CAAC;YACD,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,uBAAuB;IACf,WAAW,CAAC,GAAW,EAAE,OAA+B;QAC9D,4EAA4E;QAC5E,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,eAAe;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;aACvF,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,GAAG,GAAG,IAAI,SAAS,EAAE,CAAC;IAC/B,CAAC;IAED,iBAAiB;IACT,YAAY,CAAC,GAAW;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IAED,kBAAkB;IACV,QAAQ,CAAC,GAAW,EAAE,MAAkB;QAC9C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YAClB,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM;SACjD,CAAC,CAAC;QACH,4CAA4C;QAC5C,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC9C,IAAI,MAAM;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,cAAc;IACd,UAAU;QACR,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,gBAAgB;IACR,KAAK,CAAC,EAAU;QACtB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;CACF;AAjOD,oCAiOC"}

package/dist/src/executor/index.d.ts

@@ -0,0 +1,6 @@
+export { ToolExecutor } from './interfaces';
+export { ExecutorRegistry } from './registry';
+export { HttpExecutor } from './http-executor';
+export { NoopExecutor } from './noop-executor';
+export { SlackExecutor } from './slack-executor';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/executor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/executor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/src/executor/index.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SlackExecutor = exports.NoopExecutor = exports.HttpExecutor = exports.ExecutorRegistry = void 0;
+var registry_1 = require("./registry");
+Object.defineProperty(exports, "ExecutorRegistry", { enumerable: true, get: function () { return registry_1.ExecutorRegistry; } });
+var http_executor_1 = require("./http-executor");
+Object.defineProperty(exports, "HttpExecutor", { enumerable: true, get: function () { return http_executor_1.HttpExecutor; } });
+var noop_executor_1 = require("./noop-executor");
+Object.defineProperty(exports, "NoopExecutor", { enumerable: true, get: function () { return noop_executor_1.NoopExecutor; } });
+var slack_executor_1 = require("./slack-executor");
+Object.defineProperty(exports, "SlackExecutor", { enumerable: true, get: function () { return slack_executor_1.SlackExecutor; } });
+//# sourceMappingURL=index.js.map

package/dist/src/executor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/executor/index.ts"],"names":[],"mappings":";;;AACA,uCAA8C;AAArC,4GAAA,gBAAgB,OAAA;AACzB,iDAA+C;AAAtC,6GAAA,YAAY,OAAA;AACrB,iDAA+C;AAAtC,6GAAA,YAAY,OAAA;AACrB,mDAAiD;AAAxC,+GAAA,aAAa,OAAA"}

package/dist/src/executor/interfaces.d.ts

@@ -0,0 +1,11 @@
+import { ToolCall } from '../types/tool-call';
+import { ToolOutput } from '../types/tool-result';
+/**
+ * Base interface for all tool executors.
+ * Implement this to add support for new tool types (Slack, Git, DB, etc.).
+ */
+export interface ToolExecutor {
+    /** Execute a tool call and return the output */
+    execute(toolCall: ToolCall): Promise<ToolOutput>;
+}
+//# sourceMappingURL=interfaces.d.ts.map

package/dist/src/executor/interfaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.d.ts","sourceRoot":"","sources":["../../../src/executor/interfaces.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,OAAO,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAClD"}

package/dist/src/executor/interfaces.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=interfaces.js.map

package/dist/src/executor/interfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interfaces.js","sourceRoot":"","sources":["../../../src/executor/interfaces.ts"],"names":[],"mappings":""}

package/dist/src/executor/noop-executor.d.ts

@@ -0,0 +1,13 @@
+import { ToolCall } from '../types/tool-call';
+import { ToolOutput } from '../types/tool-result';
+import { ToolExecutor } from './interfaces';
+/**
+ * No-op executor that returns a canned response without making any external calls.
+ * Useful for dry-run policy testing, development, and unit tests.
+ */
+export declare class NoopExecutor implements ToolExecutor {
+    private response;
+    constructor(response?: Partial<ToolOutput>);
+    execute(toolCall: ToolCall): Promise<ToolOutput>;
+}
+//# sourceMappingURL=noop-executor.d.ts.map

package/dist/src/executor/noop-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"noop-executor.d.ts","sourceRoot":"","sources":["../../../src/executor/noop-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C;;;GAGG;AACH,qBAAa,YAAa,YAAW,YAAY;IAC/C,OAAO,CAAC,QAAQ,CAAa;gBAEjB,QAAQ,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC;IAQpC,OAAO,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;CAGvD"}

package/dist/src/executor/noop-executor.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NoopExecutor = void 0;
+/**
+ * No-op executor that returns a canned response without making any external calls.
+ * Useful for dry-run policy testing, development, and unit tests.
+ */
+class NoopExecutor {
+    constructor(response) {
+        this.response = {
+            http_status: response?.http_status ?? 200,
+            body: response?.body ?? { dry_run: true, tool: 'noop' },
+            headers: response?.headers ?? {},
+        };
+    }
+    async execute(toolCall) {
+        return { ...this.response };
+    }
+}
+exports.NoopExecutor = NoopExecutor;
+//# sourceMappingURL=noop-executor.js.map

package/dist/src/executor/noop-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"noop-executor.js","sourceRoot":"","sources":["../../../src/executor/noop-executor.ts"],"names":[],"mappings":";;;AAIA;;;GAGG;AACH,MAAa,YAAY;IAGvB,YAAY,QAA8B;QACxC,IAAI,CAAC,QAAQ,GAAG;YACd,WAAW,EAAE,QAAQ,EAAE,WAAW,IAAI,GAAG;YACzC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE;YACvD,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,EAAE;SACjC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAkB;QAC9B,OAAO,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC;CACF;AAdD,oCAcC"}

package/dist/src/executor/registry.d.ts

@@ -0,0 +1,30 @@
+import { ToolCall } from '../types/tool-call';
+import { ToolOutput } from '../types/tool-result';
+import { ToolExecutor } from './interfaces';
+/**
+ * Registry that maps tool name patterns to executor instances.
+ * Patterns are matched in registration order; first match wins.
+ *
+ * Usage:
+ *   registry.register('http.*', httpExecutor);      // glob-like
+ *   registry.register('http.request', httpExecutor); // exact match
+ *   registry.register('slack.*', slackExecutor);
+ *   registry.register('*', fallbackExecutor);        // catch-all
+ */
+export declare class ExecutorRegistry {
+    private entries;
+    /** Register an executor for a tool name pattern. Patterns support * as wildcard.
+     *  If prepend is true, the entry is added at the front (higher priority than existing). */
+    register(pattern: string, executor: ToolExecutor, prepend?: boolean): void;
+    /** Find the executor for a tool name. Returns undefined if no match. */
+    resolve(toolName: string): ToolExecutor | undefined;
+    /** Execute a tool call by resolving the executor from the tool name. */
+    execute(toolCall: ToolCall): Promise<ToolOutput>;
+    /** List all registered patterns (for debugging/introspection) */
+    listPatterns(): string[];
+    /** Check if any executor is registered for a tool name */
+    has(toolName: string): boolean;
+    /** Remove all registered executors */
+    clear(): void;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/src/executor/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/executor/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C;;;;;;;;;GASG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CAAyE;IAExF;+FAC2F;IAC3F,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,UAAQ,GAAG,IAAI;IAWxE,wEAAwE;IACxE,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IASnD,wEAAwE;IAClE,OAAO,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IAQtD,iEAAiE;IACjE,YAAY,IAAI,MAAM,EAAE;IAIxB,0DAA0D;IAC1D,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAI9B,sCAAsC;IACtC,KAAK,IAAI,IAAI;CAGd"}

package/dist/src/executor/registry.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExecutorRegistry = void 0;
+/**
+ * Registry that maps tool name patterns to executor instances.
+ * Patterns are matched in registration order; first match wins.
+ *
+ * Usage:
+ *   registry.register('http.*', httpExecutor);      // glob-like
+ *   registry.register('http.request', httpExecutor); // exact match
+ *   registry.register('slack.*', slackExecutor);
+ *   registry.register('*', fallbackExecutor);        // catch-all
+ */
+class ExecutorRegistry {
+    constructor() {
+        this.entries = [];
+    }
+    /** Register an executor for a tool name pattern. Patterns support * as wildcard.
+     *  If prepend is true, the entry is added at the front (higher priority than existing). */
+    register(pattern, executor, prepend = false) {
+        // Convert glob pattern to regex: "http.*" -> /^http\..*$/
+        const escaped = pattern.replace(/[.+?^${}()|[\]\\]/g, '\\$&').replace(/\*/g, '.*');
+        const regex = new RegExp(`^${escaped}$`);
+        if (prepend) {
+            this.entries.unshift({ pattern, regex, executor });
+        }
+        else {
+            this.entries.push({ pattern, regex, executor });
+        }
+    }
+    /** Find the executor for a tool name. Returns undefined if no match. */
+    resolve(toolName) {
+        for (const entry of this.entries) {
+            if (entry.regex.test(toolName)) {
+                return entry.executor;
+            }
+        }
+        return undefined;
+    }
+    /** Execute a tool call by resolving the executor from the tool name. */
+    async execute(toolCall) {
+        const executor = this.resolve(toolCall.tool.name);
+        if (!executor) {
+            throw new Error(`No executor registered for tool "${toolCall.tool.name}"`);
+        }
+        return executor.execute(toolCall);
+    }
+    /** List all registered patterns (for debugging/introspection) */
+    listPatterns() {
+        return this.entries.map(e => e.pattern);
+    }
+    /** Check if any executor is registered for a tool name */
+    has(toolName) {
+        return this.resolve(toolName) !== undefined;
+    }
+    /** Remove all registered executors */
+    clear() {
+        this.entries = [];
+    }
+}
+exports.ExecutorRegistry = ExecutorRegistry;
+//# sourceMappingURL=registry.js.map

package/dist/src/executor/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/executor/registry.ts"],"names":[],"mappings":";;;AAIA;;;;;;;;;GASG;AACH,MAAa,gBAAgB;IAA7B;QACU,YAAO,GAAsE,EAAE,CAAC;IAgD1F,CAAC;IA9CC;+FAC2F;IAC3F,QAAQ,CAAC,OAAe,EAAE,QAAsB,EAAE,OAAO,GAAG,KAAK;QAC/D,0DAA0D;QAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC;QACzC,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,OAAO,CAAC,QAAgB;QACtB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,OAAO,KAAK,CAAC,QAAQ,CAAC;YACxB,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,OAAO,CAAC,QAAkB;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,iEAAiE;IACjE,YAAY;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,0DAA0D;IAC1D,GAAG,CAAC,QAAgB;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC;IAC9C,CAAC;IAED,sCAAsC;IACtC,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;IACpB,CAAC;CACF;AAjDD,4CAiDC"}

package/dist/src/executor/slack-executor.d.ts

@@ -0,0 +1,24 @@
+import { ToolCall } from '../types/tool-call';
+import { ToolOutput } from '../types/tool-result';
+import { ToolExecutor } from './interfaces';
+/**
+ * Slack executor using the @slack/web-api WebClient.
+ * Handles tool calls with tool name `slack.*` (e.g., slack.post_message).
+ */
+export declare class SlackExecutor implements ToolExecutor {
+    private client;
+    constructor(token: string);
+    execute(toolCall: ToolCall): Promise<ToolOutput>;
+    /**
+     * Resolve the Slack action from either `args.action` or the tool name suffix.
+     * e.g., tool name "slack.post_message" yields action "post_message".
+     */
+    private resolveAction;
+    private postMessage;
+    private updateMessage;
+    private addReaction;
+    private listChannels;
+    private channelHistory;
+    private uploadFile;
+}
+//# sourceMappingURL=slack-executor.d.ts.map

package/dist/src/executor/slack-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-executor.d.ts","sourceRoot":"","sources":["../../../src/executor/slack-executor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C;;;GAGG;AACH,qBAAa,aAAc,YAAW,YAAY;IAChD,OAAO,CAAC,MAAM,CAAY;gBAEd,KAAK,EAAE,MAAM;IAInB,OAAO,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC;IAqBtD;;;OAGG;IACH,OAAO,CAAC,aAAa;YAeP,WAAW;YAoBX,aAAa;YAwBb,WAAW;YAuBX,YAAY;YAYZ,cAAc;YAkBd,UAAU;CAsBzB"}