sdlc-agent-4-enterprise-server 1.0.0

package/dist/modules/web/handlers/GitBrowseHandler.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Handler for git_clone_browse tool.
+ * Browses GitHub/GitLab repos via REST API.
+ */
+import type { ToolResult } from '../../../types/tool.js';
+import type { WebModuleConfig } from '../models/WebModuleConfig.js';
+import { RateLimiter } from '../middleware/RateLimiter.js';
+export declare class GitBrowseHandler {
+    private rateLimiter;
+    private config;
+    constructor(rateLimiter: RateLimiter, config: WebModuleConfig);
+    handle(args: Record<string, unknown>): Promise<ToolResult>;
+    private github;
+    private gitlab;
+    private formatGH;
+}

package/dist/modules/web/handlers/GitBrowseHandler.js

@@ -0,0 +1,73 @@
+/**
+ * Handler for git_clone_browse tool.
+ * Browses GitHub/GitLab repos via REST API.
+ */
+import { parseGitUrl } from '../utils/GitUrlParser.js';
+import { WebToolError } from '../models/WebError.js';
+import { successResult, errorResult } from '../models/WebToolResult.js';
+export class GitBrowseHandler {
+    rateLimiter;
+    config;
+    constructor(rateLimiter, config) {
+        this.rateLimiter = rateLimiter;
+        this.config = config;
+    }
+    async handle(args) {
+        try {
+            const repoUrl = args.repo_url;
+            const operation = args.operation || 'readme';
+            const filePath = args.path;
+            const ref = args.ref || 'HEAD';
+            const token = args.token;
+            this.rateLimiter.consumeOrThrow('git_clone_browse');
+            const parsed = parseGitUrl(repoUrl);
+            const headers = { 'User-Agent': this.config.userAgent };
+            if (token)
+                headers['Authorization'] = `Bearer ${token}`;
+            if (parsed.host === 'github.com') {
+                return await this.github(parsed.owner, parsed.repo, operation, filePath, ref, headers);
+            }
+            return await this.gitlab(parsed.owner, parsed.repo, operation, filePath, ref, headers);
+        }
+        catch (err) {
+            if (err instanceof WebToolError)
+                return errorResult(err);
+            return errorResult(new WebToolError('TIMEOUT', err.message));
+        }
+    }
+    async github(owner, repo, op, path, ref, headers) {
+        const base = `https://api.github.com/repos/${owner}/${repo}`;
+        const url = op === 'tree' ? `${base}/git/trees/${ref}?recursive=1`
+            : op === 'read_file' ? `${base}/contents/${path}?ref=${ref}` : `${base}/readme`;
+        const res = await fetch(url, { headers, signal: AbortSignal.timeout(this.config.timeoutMs) });
+        if (res.status === 404)
+            throw new WebToolError('DNS_FAILED', 'Repository or file not found');
+        if (!res.ok)
+            throw new WebToolError('TIMEOUT', `GitHub API error: ${res.status}`);
+        const data = await res.json();
+        return successResult(this.formatGH(op, data, owner, repo, ref));
+    }
+    async gitlab(owner, repo, op, path, ref, headers) {
+        const pid = encodeURIComponent(`${owner}/${repo}`);
+        const base = `https://gitlab.com/api/v4/projects/${pid}/repository`;
+        const url = op === 'tree' ? `${base}/tree?recursive=true&ref=${ref}`
+            : op === 'read_file' ? `${base}/files/${encodeURIComponent(path || '')}/raw?ref=${ref}`
+                : `${base}/files/README.md/raw?ref=${ref || 'main'}`;
+        const res = await fetch(url, { headers, signal: AbortSignal.timeout(this.config.timeoutMs) });
+        if (res.status === 404)
+            throw new WebToolError('DNS_FAILED', 'Not found');
+        if (!res.ok)
+            throw new WebToolError('TIMEOUT', `GitLab error: ${res.status}`);
+        const content = op === 'tree' ? await res.json() : await res.text();
+        return successResult({ content, repo: `${owner}/${repo}`, ref });
+    }
+    formatGH(op, data, owner, repo, ref) {
+        if (op === 'tree') {
+            const tree = data.tree || [];
+            return { tree: tree.map(f => ({ path: f.path, type: f.type, size: f.size })), repo: `${owner}/${repo}`, ref, total_files: tree.length };
+        }
+        const content = data.encoding === 'base64' ? Buffer.from(data.content, 'base64').toString() : data.content;
+        return { content, path: data.path, size: data.size, encoding: 'utf-8' };
+    }
+}
+//# sourceMappingURL=GitBrowseHandler.js.map

package/dist/modules/web/handlers/GitBrowseHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitBrowseHandler.js","sourceRoot":"","sources":["../../../../src/modules/web/handlers/GitBrowseHandler.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAExE,MAAM,OAAO,gBAAgB;IACP;IAAkC;IAAtD,YAAoB,WAAwB,EAAU,MAAuB;QAAzD,gBAAW,GAAX,WAAW,CAAa;QAAU,WAAM,GAAN,MAAM,CAAiB;IAAG,CAAC;IAEjF,KAAK,CAAC,MAAM,CAAC,IAA6B;QACxC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,QAAkB,CAAC;YACxC,MAAM,SAAS,GAAI,IAAI,CAAC,SAAoB,IAAI,QAAQ,CAAC;YACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAA0B,CAAC;YACjD,MAAM,GAAG,GAAI,IAAI,CAAC,GAAc,IAAI,MAAM,CAAC;YAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAA2B,CAAC;YAC/C,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YACpC,MAAM,OAAO,GAA2B,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAChF,IAAI,KAAK;gBAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;YAExD,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACjC,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YACzF,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACzF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,YAAY;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;YACzD,OAAO,WAAW,CAAC,IAAI,YAAY,CAAC,SAAS,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,IAAY,EAAE,EAAU,EAAE,IAAa,EAAE,GAAY,EAAE,OAAgC;QACzH,MAAM,IAAI,GAAG,gCAAgC,KAAK,IAAI,IAAI,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,cAAc,GAAG,cAAc;YAChE,CAAC,CAAC,EAAE,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,aAAa,IAAI,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,SAAS,CAAC;QAClF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC9F,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,YAAY,CAAC,YAAY,EAAE,8BAA8B,CAAC,CAAC;QAC7F,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAA6B,CAAC;QACzD,OAAO,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,IAAY,EAAE,EAAU,EAAE,IAAa,EAAE,GAAY,EAAE,OAAgC;QACzH,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,sCAAsC,GAAG,aAAa,CAAC;QACpE,MAAM,GAAG,GAAG,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,4BAA4B,GAAG,EAAE;YAClE,CAAC,CAAC,EAAE,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI,UAAU,kBAAkB,CAAC,IAAI,IAAI,EAAE,CAAC,YAAY,GAAG,EAAE;gBACvF,CAAC,CAAC,GAAG,IAAI,4BAA4B,GAAG,IAAI,MAAM,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC9F,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,YAAY,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QAC1E,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,iBAAiB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACpE,OAAO,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACnE,CAAC;IAEO,QAAQ,CAAC,EAAU,EAAE,IAA6B,EAAE,KAAa,EAAE,IAAY,EAAE,GAAY;QACnG,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,GAAI,IAAI,CAAC,IAA6D,IAAI,EAAE,CAAC;YACvF,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,KAAK,IAAI,IAAI,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1I,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAiB,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;QACrH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC1E,CAAC;CACF"}

package/dist/modules/web/handlers/ReadWebpageHandler.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Handler for read_webpage tool. Renders JS pages via Playwright.
+ */
+import type { ToolResult } from '../../../types/tool.js';
+import type { WebModuleConfig } from '../models/WebModuleConfig.js';
+import { SsrfGuard } from '../middleware/SsrfGuard.js';
+import { RateLimiter } from '../middleware/RateLimiter.js';
+import { ContentTruncator } from '../middleware/ContentTruncator.js';
+export declare class ReadWebpageHandler {
+    private ssrfGuard;
+    private rateLimiter;
+    private truncator;
+    private config;
+    private browser;
+    private activeContexts;
+    constructor(ssrfGuard: SsrfGuard, rateLimiter: RateLimiter, truncator: ContentTruncator, config: WebModuleConfig);
+    handle(args: Record<string, unknown>): Promise<ToolResult>;
+    private getBrowser;
+    shutdown(): Promise<void>;
+}

package/dist/modules/web/handlers/ReadWebpageHandler.js

@@ -0,0 +1,70 @@
+/**
+ * Handler for read_webpage tool. Renders JS pages via Playwright.
+ */
+import { validateUrl } from '../utils/UrlValidator.js';
+import { WebToolError } from '../models/WebError.js';
+import { successResult, errorResult } from '../models/WebToolResult.js';
+export class ReadWebpageHandler {
+    ssrfGuard;
+    rateLimiter;
+    truncator;
+    config;
+    browser = null;
+    activeContexts = 0;
+    constructor(ssrfGuard, rateLimiter, truncator, config) {
+        this.ssrfGuard = ssrfGuard;
+        this.rateLimiter = rateLimiter;
+        this.truncator = truncator;
+        this.config = config;
+    }
+    async handle(args) {
+        try {
+            const url = args.url;
+            const waitFor = args.wait_for || 'networkidle';
+            const selector = args.selector;
+            const timeout = args.timeout || this.config.timeoutMs;
+            const blockRes = args.block_resources || ['image', 'font', 'media'];
+            validateUrl(url);
+            await this.ssrfGuard.validate(url);
+            this.rateLimiter.consumeOrThrow('read_webpage');
+            if (this.activeContexts >= this.config.maxBrowserContexts)
+                throw new WebToolError('RATE_LIMITED', 'Max browser contexts reached');
+            const browser = await this.getBrowser();
+            const ctx = await browser.newContext({ userAgent: this.config.userAgent });
+            this.activeContexts++;
+            try {
+                const page = await ctx.newPage();
+                await page.route('**/*', r => blockRes.includes(r.request().resourceType()) ? r.abort() : r.continue());
+                const wt = waitFor === 'networkidle' ? 'networkidle' : waitFor === 'load' ? 'load' : 'domcontentloaded';
+                await page.goto(url, { timeout, waitUntil: wt });
+                if (waitFor === 'selector' && selector)
+                    await page.waitForSelector(selector, { timeout });
+                const content = selector ? (await page.locator(selector).textContent()) || '' : await page.innerText('body');
+                const title = await page.title();
+                const truncated = this.truncator.truncate(content);
+                return successResult({ content: truncated.content, title, url: page.url(), metadata: { partial: truncated.truncated } });
+            }
+            finally {
+                await ctx.close();
+                this.activeContexts--;
+            }
+        }
+        catch (err) {
+            if (err instanceof WebToolError)
+                return errorResult(err);
+            return errorResult(new WebToolError('BROWSER_FAILED', err.message));
+        }
+    }
+    async getBrowser() {
+        if (!this.browser) {
+            const { chromium } = await import('playwright');
+            this.browser = await chromium.launch({ headless: true });
+        }
+        return this.browser;
+    }
+    async shutdown() { if (this.browser) {
+        await this.browser.close();
+        this.browser = null;
+    } }
+}
+//# sourceMappingURL=ReadWebpageHandler.js.map

package/dist/modules/web/handlers/ReadWebpageHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReadWebpageHandler.js","sourceRoot":"","sources":["../../../../src/modules/web/handlers/ReadWebpageHandler.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAGxE,MAAM,OAAO,kBAAkB;IAIT;IAA8B;IAAkC;IAAqC;IAHjH,OAAO,GAAmB,IAAI,CAAC;IAC/B,cAAc,GAAG,CAAC,CAAC;IAE3B,YAAoB,SAAoB,EAAU,WAAwB,EAAU,SAA2B,EAAU,MAAuB;QAA5H,cAAS,GAAT,SAAS,CAAW;QAAU,gBAAW,GAAX,WAAW,CAAa;QAAU,cAAS,GAAT,SAAS,CAAkB;QAAU,WAAM,GAAN,MAAM,CAAiB;IAAG,CAAC;IAEpJ,KAAK,CAAC,MAAM,CAAC,IAA6B;QACxC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAa,CAAC;YAC/B,MAAM,OAAO,GAAI,IAAI,CAAC,QAAmB,IAAI,aAAa,CAAC;YAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAA8B,CAAC;YACrD,MAAM,OAAO,GAAI,IAAI,CAAC,OAAkB,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YAClE,MAAM,QAAQ,GAAI,IAAI,CAAC,eAA4B,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YAClF,WAAW,CAAC,GAAG,CAAC,CAAC;YACjB,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;YAChD,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB;gBAAE,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,8BAA8B,CAAC,CAAC;YAElI,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;YAC3E,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACxG,MAAM,EAAE,GAAG,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC;gBACxG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAW,EAAE,CAAC,CAAC;gBAC1D,IAAI,OAAO,KAAK,UAAU,IAAI,QAAQ;oBAAE,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC1F,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBAC7G,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBACjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACnD,OAAO,aAAa,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC3H,CAAC;oBAAS,CAAC;gBAAC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,YAAY;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;YACzD,OAAO,WAAW,CAAC,IAAI,YAAY,CAAC,gBAAgB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YAAC,IAAI,CAAC,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QACjI,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,QAAQ,KAAoB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IAAC,CAAC,CAAC,CAAC;CAC3G"}

package/dist/modules/web/handlers/WebSearchHandler.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Handler for the web_search tool.
+ * Searches via SearXNG with DuckDuckGo fallback.
+ */
+import type { ToolResult } from '../../../types/tool.js';
+import type { WebModuleConfig } from '../models/WebModuleConfig.js';
+import { RateLimiter } from '../middleware/RateLimiter.js';
+export declare class WebSearchHandler {
+    private rateLimiter;
+    private config;
+    constructor(rateLimiter: RateLimiter, config: WebModuleConfig);
+    handle(args: Record<string, unknown>): Promise<ToolResult>;
+    private searchSearXNG;
+    private searchDuckDuckGo;
+}

package/dist/modules/web/handlers/WebSearchHandler.js

@@ -0,0 +1,50 @@
+/**
+ * Handler for the web_search tool.
+ * Searches via SearXNG with DuckDuckGo fallback.
+ */
+import { WebToolError } from '../models/WebError.js';
+import { successResult, errorResult } from '../models/WebToolResult.js';
+export class WebSearchHandler {
+    rateLimiter;
+    config;
+    constructor(rateLimiter, config) {
+        this.rateLimiter = rateLimiter;
+        this.config = config;
+    }
+    async handle(args) {
+        try {
+            const query = args.query;
+            if (!query?.trim())
+                throw new WebToolError('INVALID_URL', 'Search query cannot be empty');
+            const numResults = Math.min(args.num_results || 5, 10);
+            const category = args.category || 'general';
+            const language = args.language || 'en';
+            this.rateLimiter.consumeOrThrow('web_search');
+            const results = await this.searchSearXNG(query, numResults, category, language)
+                .catch(() => this.searchDuckDuckGo(query, numResults));
+            return successResult({ results, total_found: results.length, search_engine: 'searxng' });
+        }
+        catch (err) {
+            if (err instanceof WebToolError)
+                return errorResult(err);
+            return errorResult(new WebToolError('TIMEOUT', err.message));
+        }
+    }
+    async searchSearXNG(query, num, cat, lang) {
+        const url = `${this.config.searxngUrl}/search?q=${encodeURIComponent(query)}&format=json&categories=${cat}&language=${lang}`;
+        const res = await fetch(url, { signal: AbortSignal.timeout(this.config.timeoutMs) });
+        if (!res.ok)
+            throw new Error(`SearXNG error: ${res.status}`);
+        const data = await res.json();
+        return (data.results || []).slice(0, num).map(r => ({ title: r.title, url: r.url, snippet: r.content }));
+    }
+    async searchDuckDuckGo(query, num) {
+        const url = `https://api.duckduckgo.com/?q=${encodeURIComponent(query)}&format=json&no_html=1`;
+        const res = await fetch(url, { signal: AbortSignal.timeout(this.config.timeoutMs) });
+        if (!res.ok)
+            throw new WebToolError('TIMEOUT', 'Search service temporarily unavailable');
+        const data = await res.json();
+        return (data.RelatedTopics || []).slice(0, num).map(r => ({ title: r.Text?.slice(0, 60) || '', url: r.FirstURL || '', snippet: r.Text || '' }));
+    }
+}
+//# sourceMappingURL=WebSearchHandler.js.map

package/dist/modules/web/handlers/WebSearchHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebSearchHandler.js","sourceRoot":"","sources":["../../../../src/modules/web/handlers/WebSearchHandler.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAIxE,MAAM,OAAO,gBAAgB;IACP;IAAkC;IAAtD,YAAoB,WAAwB,EAAU,MAAuB;QAAzD,gBAAW,GAAX,WAAW,CAAa;QAAU,WAAM,GAAN,MAAM,CAAiB;IAAG,CAAC;IAEjF,KAAK,CAAC,MAAM,CAAC,IAA6B;QACxC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAe,CAAC;YACnC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE;gBAAE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,8BAA8B,CAAC,CAAC;YAC1F,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAE,IAAI,CAAC,WAAsB,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAI,IAAI,CAAC,QAAmB,IAAI,SAAS,CAAC;YACxD,MAAM,QAAQ,GAAI,IAAI,CAAC,QAAmB,IAAI,IAAI,CAAC;YACnD,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;YAE9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC;iBAC5E,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;YACzD,OAAO,aAAa,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,YAAY;gBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;YACzD,OAAO,WAAW,CAAC,IAAI,YAAY,CAAC,SAAS,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,GAAW,EAAE,GAAW,EAAE,IAAY;QAC/E,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,aAAa,kBAAkB,CAAC,KAAK,CAAC,2BAA2B,GAAG,aAAa,IAAI,EAAE,CAAC;QAC7H,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAyE,CAAC;QACrG,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC3G,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,KAAa,EAAE,GAAW;QACvD,MAAM,GAAG,GAAG,iCAAiC,kBAAkB,CAAC,KAAK,CAAC,wBAAwB,CAAC;QAC/F,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,wCAAwC,CAAC,CAAC;QACzF,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAkE,CAAC;QAC9F,OAAO,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAClJ,CAAC;CACF"}

package/dist/modules/web/middleware/ContentTruncator.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Content size enforcement middleware.
+ * Truncates responses exceeding configured maximum size.
+ */
+export interface TruncateResult {
+    content: string;
+    truncated: boolean;
+    originalLength: number;
+}
+export declare class ContentTruncator {
+    private maxBytes;
+    constructor(maxKb: number);
+    truncate(content: string, customMax?: number): TruncateResult;
+}

package/dist/modules/web/middleware/ContentTruncator.js

@@ -0,0 +1,23 @@
+/**
+ * Content size enforcement middleware.
+ * Truncates responses exceeding configured maximum size.
+ */
+export class ContentTruncator {
+    maxBytes;
+    constructor(maxKb) {
+        this.maxBytes = maxKb * 1024;
+    }
+    truncate(content, customMax) {
+        const limit = customMax ?? this.maxBytes;
+        const originalLength = content.length;
+        if (content.length <= limit) {
+            return { content, truncated: false, originalLength };
+        }
+        return {
+            content: content.slice(0, limit),
+            truncated: true,
+            originalLength,
+        };
+    }
+}
+//# sourceMappingURL=ContentTruncator.js.map

package/dist/modules/web/middleware/ContentTruncator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContentTruncator.js","sourceRoot":"","sources":["../../../../src/modules/web/middleware/ContentTruncator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,MAAM,OAAO,gBAAgB;IACnB,QAAQ,CAAS;IAEzB,YAAY,KAAa;QACvB,IAAI,CAAC,QAAQ,GAAG,KAAK,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED,QAAQ,CAAC,OAAe,EAAE,SAAkB;QAC1C,MAAM,KAAK,GAAG,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC;QACzC,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;QACtC,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QACvD,CAAC;QACD,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;YAChC,SAAS,EAAE,IAAI;YACf,cAAc;SACf,CAAC;IACJ,CAAC;CACF"}

package/dist/modules/web/middleware/RateLimiter.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Token bucket rate limiter for WebModule tools.
+ * Each tool gets an independent bucket with configurable RPM.
+ */
+export interface ConsumeResult {
+    allowed: boolean;
+    remaining: number;
+    resetMs: number;
+}
+export declare class RateLimiter {
+    private buckets;
+    private maxTokens;
+    private refillRate;
+    constructor(rpm: number);
+    consume(toolName: string): ConsumeResult;
+    consumeOrThrow(toolName: string): void;
+    private getBucket;
+    private refill;
+}

package/dist/modules/web/middleware/RateLimiter.js

@@ -0,0 +1,49 @@
+/**
+ * Token bucket rate limiter for WebModule tools.
+ * Each tool gets an independent bucket with configurable RPM.
+ */
+import { WebToolError } from '../models/WebError.js';
+export class RateLimiter {
+    buckets = new Map();
+    maxTokens;
+    refillRate;
+    constructor(rpm) {
+        this.maxTokens = rpm;
+        this.refillRate = rpm / 60_000;
+    }
+    consume(toolName) {
+        const bucket = this.getBucket(toolName);
+        this.refill(bucket);
+        if (bucket.tokens >= 1) {
+            bucket.tokens -= 1;
+            return { allowed: true, remaining: Math.floor(bucket.tokens), resetMs: 0 };
+        }
+        const resetMs = Math.ceil((1 - bucket.tokens) / this.refillRate);
+        return { allowed: false, remaining: 0, resetMs };
+    }
+    consumeOrThrow(toolName) {
+        const result = this.consume(toolName);
+        if (!result.allowed) {
+            throw new WebToolError('RATE_LIMITED', `Rate limit exceeded. Reset in ${Math.ceil(result.resetMs / 1000)}s`, { remaining: 0, resetMs: result.resetMs });
+        }
+    }
+    getBucket(toolName) {
+        if (!this.buckets.has(toolName)) {
+            this.buckets.set(toolName, {
+                tokens: this.maxTokens,
+                maxTokens: this.maxTokens,
+                refillRate: this.refillRate,
+                lastRefill: Date.now(),
+            });
+        }
+        return this.buckets.get(toolName);
+    }
+    refill(bucket) {
+        const now = Date.now();
+        const elapsed = now - bucket.lastRefill;
+        const tokensToAdd = elapsed * bucket.refillRate;
+        bucket.tokens = Math.min(bucket.maxTokens, bucket.tokens + tokensToAdd);
+        bucket.lastRefill = now;
+    }
+}
+//# sourceMappingURL=RateLimiter.js.map

package/dist/modules/web/middleware/RateLimiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RateLimiter.js","sourceRoot":"","sources":["../../../../src/modules/web/middleware/RateLimiter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAerD,MAAM,OAAO,WAAW;IACd,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzC,SAAS,CAAS;IAClB,UAAU,CAAS;IAE3B,YAAY,GAAW;QACrB,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,GAAG,GAAG,MAAM,CAAC;IACjC,CAAC;IAED,OAAO,CAAC,QAAgB;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;YACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC7E,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QACjE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;IACnD,CAAC;IAED,cAAc,CAAC,QAAgB;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,YAAY,CAAC,cAAc,EACnC,iCAAiC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EACpE,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,QAAgB;QAChC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE;gBACzB,MAAM,EAAE,IAAI,CAAC,SAAS;gBACtB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;aACvB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC;IACrC,CAAC;IAEO,MAAM,CAAC,MAAmB;QAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;QACxC,MAAM,WAAW,GAAG,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC;QAChD,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC;QACxE,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;IAC1B,CAAC;CACF"}

package/dist/modules/web/middleware/SsrfGuard.d.ts

@@ -0,0 +1,18 @@
+/**
+ * SSRF (Server-Side Request Forgery) protection middleware.
+ * Validates URLs against blocklisted IP ranges and protocols.
+ */
+export declare class SsrfGuard {
+    private blocklist;
+    private allowedProtocols;
+    constructor(blocklist: string[]);
+    validate(urlStr: string): Promise<string>;
+    isBlocked(ip: string): boolean;
+    private parseUrl;
+    private checkProtocol;
+    private resolveHost;
+    private checkIp;
+    private isPrivateIp;
+    private isPrivateIpv4;
+    private isPrivateIpv6;
+}

package/dist/modules/web/middleware/SsrfGuard.js

@@ -0,0 +1,89 @@
+/**
+ * SSRF (Server-Side Request Forgery) protection middleware.
+ * Validates URLs against blocklisted IP ranges and protocols.
+ */
+import { WebToolError } from '../models/WebError.js';
+import * as dns from 'dns/promises';
+import * as net from 'net';
+export class SsrfGuard {
+    blocklist;
+    allowedProtocols = new Set(['http:', 'https:']);
+    constructor(blocklist) {
+        this.blocklist = blocklist;
+    }
+    async validate(urlStr) {
+        const url = this.parseUrl(urlStr);
+        this.checkProtocol(url);
+        const ip = await this.resolveHost(url.hostname);
+        this.checkIp(ip);
+        return ip;
+    }
+    isBlocked(ip) {
+        return this.isPrivateIp(ip);
+    }
+    parseUrl(urlStr) {
+        try {
+            return new URL(urlStr);
+        }
+        catch {
+            throw new WebToolError('INVALID_URL', `Invalid URL: ${urlStr}`);
+        }
+    }
+    checkProtocol(url) {
+        if (!this.allowedProtocols.has(url.protocol)) {
+            throw new WebToolError('INVALID_URL', `Protocol not allowed: ${url.protocol}`);
+        }
+    }
+    async resolveHost(hostname) {
+        if (net.isIP(hostname))
+            return hostname;
+        try {
+            const addrs = await dns.resolve4(hostname);
+            if (!addrs.length)
+                throw new WebToolError('DNS_FAILED', `No addresses: ${hostname}`);
+            return addrs[0];
+        }
+        catch (err) {
+            if (err instanceof WebToolError)
+                throw err;
+            throw new WebToolError('DNS_FAILED', `Cannot resolve: ${hostname}`);
+        }
+    }
+    checkIp(ip) {
+        if (this.isPrivateIp(ip)) {
+            throw new WebToolError('SSRF_BLOCKED', `Blocked internal IP: ${ip}`, { ip });
+        }
+    }
+    isPrivateIp(ip) {
+        if (net.isIPv6(ip))
+            return this.isPrivateIpv6(ip);
+        return this.isPrivateIpv4(ip);
+    }
+    isPrivateIpv4(ip) {
+        const parts = ip.split('.').map(Number);
+        if (parts[0] === 127)
+            return true;
+        if (parts[0] === 10)
+            return true;
+        if (parts[0] === 172 && parts[1] >= 16 && parts[1] <= 31)
+            return true;
+        if (parts[0] === 192 && parts[1] === 168)
+            return true;
+        if (parts[0] === 169 && parts[1] === 254)
+            return true;
+        if (parts[0] === 0)
+            return true;
+        return false;
+    }
+    isPrivateIpv6(ip) {
+        const normalized = ip.toLowerCase();
+        if (normalized === '::1')
+            return true;
+        if (normalized.startsWith('fc') || normalized.startsWith('fd'))
+            return true;
+        if (normalized.startsWith('fe80'))
+            return true;
+        return false;
+    }
+}
+//# sourceMappingURL=SsrfGuard.js.map

package/dist/modules/web/middleware/SsrfGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SsrfGuard.js","sourceRoot":"","sources":["../../../../src/modules/web/middleware/SsrfGuard.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAE3B,MAAM,OAAO,SAAS;IACZ,SAAS,CAAW;IACpB,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAExD,YAAY,SAAmB;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACxB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,SAAS,CAAC,EAAU;QAClB,OAAO,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAEO,QAAQ,CAAC,MAAc;QAC7B,IAAI,CAAC;YAAC,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAC/B,MAAM,CAAC;YAAC,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,gBAAgB,MAAM,EAAE,CAAC,CAAC;QAAC,CAAC;IAC5E,CAAC;IAEO,aAAa,CAAC,GAAQ;QAC5B,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,yBAAyB,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,QAAgB;QACxC,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,MAAM,IAAI,YAAY,CAAC,YAAY,EAAE,iBAAiB,QAAQ,EAAE,CAAC,CAAC;YACrF,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,YAAY;gBAAE,MAAM,GAAG,CAAC;YAC3C,MAAM,IAAI,YAAY,CAAC,YAAY,EAAE,mBAAmB,QAAQ,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,EAAU;QACxB,IAAI,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,wBAAwB,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,EAAU;QAC5B,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC;IAEO,aAAa,CAAC,EAAU;QAC9B,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAClC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QACjC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QACtE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACtD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACtD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,aAAa,CAAC,EAAU;QAC9B,MAAM,UAAU,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,UAAU,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACtC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5E,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/modules/web/models/WebError.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Custom error class for WebModule tools.
+ * Each error carries a machine-readable code for consistent error responses.
+ */
+export type WebErrorCode = 'SSRF_BLOCKED' | 'RATE_LIMITED' | 'TIMEOUT' | 'CONTENT_TOO_LARGE' | 'INVALID_URL' | 'DNS_FAILED' | 'BLOCKED_EXTENSION' | 'BROWSER_FAILED';
+export declare class WebToolError extends Error {
+    readonly code: WebErrorCode;
+    readonly details?: Record<string, unknown> | undefined;
+    constructor(code: WebErrorCode, message: string, details?: Record<string, unknown> | undefined);
+}

package/dist/modules/web/models/WebError.js

@@ -0,0 +1,15 @@
+/**
+ * Custom error class for WebModule tools.
+ * Each error carries a machine-readable code for consistent error responses.
+ */
+export class WebToolError extends Error {
+    code;
+    details;
+    constructor(code, message, details) {
+        super(message);
+        this.code = code;
+        this.details = details;
+        this.name = 'WebToolError';
+    }
+}
+//# sourceMappingURL=WebError.js.map

package/dist/modules/web/models/WebError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebError.js","sourceRoot":"","sources":["../../../../src/modules/web/models/WebError.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAYH,MAAM,OAAO,YAAa,SAAQ,KAAK;IAEnB;IAEA;IAHlB,YACkB,IAAkB,EAClC,OAAe,EACC,OAAiC;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAc;QAElB,YAAO,GAAP,OAAO,CAA0B;QAGjD,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF"}

package/dist/modules/web/models/WebModuleConfig.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Configuration interface for WebModule.
+ * All values have sensible defaults, overridable via environment variables.
+ */
+export interface WebModuleConfig {
+    searxngUrl: string;
+    rateLimitRpm: number;
+    timeoutMs: number;
+    maxResponseKb: number;
+    maxDownloadMb: number;
+    maxBrowserContexts: number;
+    blockedExtensions: string[];
+    ssrfBlocklist: string[];
+    userAgent: string;
+    workspace: string;
+}
+export declare function loadWebConfig(workspace: string): WebModuleConfig;

package/dist/modules/web/models/WebModuleConfig.js

@@ -0,0 +1,22 @@
+/**
+ * Configuration interface for WebModule.
+ * All values have sensible defaults, overridable via environment variables.
+ */
+export function loadWebConfig(workspace) {
+    return {
+        searxngUrl: process.env.WEB_SEARXNG_URL || 'http://localhost:8080',
+        rateLimitRpm: parseInt(process.env.WEB_RATE_LIMIT_RPM || '10', 10),
+        timeoutMs: parseInt(process.env.WEB_TIMEOUT_MS || '30000', 10),
+        maxResponseKb: parseInt(process.env.WEB_MAX_RESPONSE_KB || '100', 10),
+        maxDownloadMb: parseInt(process.env.WEB_MAX_DOWNLOAD_MB || '50', 10),
+        maxBrowserContexts: parseInt(process.env.WEB_MAX_BROWSER_CONTEXTS || '3', 10),
+        blockedExtensions: ['.exe', '.bat', '.cmd', '.ps1', '.sh', '.msi', '.scr'],
+        ssrfBlocklist: [
+            '127.0.0.0/8', '10.0.0.0/8', '172.16.0.0/12',
+            '192.168.0.0/16', '169.254.0.0/16', '::1/128', 'fc00::/7',
+        ],
+        userAgent: process.env.WEB_USER_AGENT || 'Kiro-WebModule/1.0',
+        workspace,
+    };
+}
+//# sourceMappingURL=WebModuleConfig.js.map

package/dist/modules/web/models/WebModuleConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebModuleConfig.js","sourceRoot":"","sources":["../../../../src/modules/web/models/WebModuleConfig.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAeH,MAAM,UAAU,aAAa,CAAC,SAAiB;IAC7C,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,uBAAuB;QAClE,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,EAAE,EAAE,CAAC;QAClE,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,EAAE,EAAE,CAAC;QAC9D,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,KAAK,EAAE,EAAE,CAAC;QACrE,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAI,EAAE,EAAE,CAAC;QACpE,kBAAkB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,GAAG,EAAE,EAAE,CAAC;QAC7E,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;QAC1E,aAAa,EAAE;YACb,aAAa,EAAE,YAAY,EAAE,eAAe;YAC5C,gBAAgB,EAAE,gBAAgB,EAAE,SAAS,EAAE,UAAU;SAC1D;QACD,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,oBAAoB;QAC7D,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/modules/web/models/WebToolResult.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Result type helpers for WebModule tool responses.
+ */
+import type { ToolResult } from '../../../types/tool.js';
+import { WebToolError } from './WebError.js';
+export declare function successResult(data: unknown): ToolResult;
+export declare function errorResult(error: WebToolError): ToolResult;

package/dist/modules/web/models/WebToolResult.js

@@ -0,0 +1,19 @@
+/**
+ * Result type helpers for WebModule tool responses.
+ */
+export function successResult(data) {
+    return {
+        content: [{ type: 'text', text: JSON.stringify(data, null, 2) }],
+        isError: false,
+    };
+}
+export function errorResult(error) {
+    return {
+        content: [{
+                type: 'text',
+                text: JSON.stringify({ error: error.code, message: error.message, ...error.details }),
+            }],
+        isError: true,
+    };
+}
+//# sourceMappingURL=WebToolResult.js.map

package/dist/modules/web/models/WebToolResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebToolResult.js","sourceRoot":"","sources":["../../../../src/modules/web/models/WebToolResult.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,MAAM,UAAU,aAAa,CAAC,IAAa;IACzC,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAmB;IAC7C,OAAO;QACL,OAAO,EAAE,CAAC;gBACR,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;aACtF,CAAC;QACF,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC"}

package/dist/modules/web/utils/GitUrlParser.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Git URL parser for GitHub/GitLab repositories.
+ * Extracts host, owner, repo, optional path and ref from URLs.
+ */
+export interface ParsedGitUrl {
+    host: string;
+    owner: string;
+    repo: string;
+    path?: string;
+    ref?: string;
+}
+export declare function parseGitUrl(urlStr: string): ParsedGitUrl;