winhelm-mcp 1.1.0

package/dist/config/config-manager.d.ts

@@ -0,0 +1,50 @@
+import type { ServerConfig } from "../types/index.js";
+export interface CommandLogEntry {
+    id: string;
+    timestamp: string;
+    command: string;
+    cwd?: string;
+    exitCode: number;
+    durationMs: number;
+    timedOut: boolean;
+}
+export declare function isWildcardAllowAll(dirs: string[] | undefined): boolean;
+export declare class ConfigManager {
+    private static instance;
+    private config;
+    private configFilePath;
+    private executionHistory;
+    private readonly maxHistoryLength;
+    private constructor();
+    private loadConfigSync;
+    static getInstance(customConfigPath?: string): ConfigManager;
+    static resetInstance(customConfigPath?: string): ConfigManager;
+    getConfigFilePath(): string;
+    /**
+     * Initialize config by reading from file, custom path, or in-memory override object
+     */
+    init(configOrPath?: string | Partial<ServerConfig>): Promise<void>;
+    isReadOnly(): boolean;
+    getConfig(): Readonly<ServerConfig>;
+    updateConfig(updates: Partial<ServerConfig>, persist?: boolean): Promise<void>;
+    /**
+     * Validate if a command is allowed to run
+     */
+    isCommandAllowed(command: string): {
+        allowed: boolean;
+        reason?: string;
+    };
+    /**
+     * Validate if a filesystem path is permitted under allowedDirectories
+     */
+    isPathAllowed(targetPath: string): {
+        allowed: boolean;
+        reason?: string;
+    };
+    /**
+     * Record command execution for auditing
+     */
+    logExecution(entry: CommandLogEntry): void;
+    getHistory(): ReadonlyArray<CommandLogEntry>;
+}
+//# sourceMappingURL=config-manager.d.ts.map

package/dist/config/config-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-manager.d.ts","sourceRoot":"","sources":["../../src/config/config-manager.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGtD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,OAAO,CAMtE;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAA8B;IACrD,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,gBAAgB,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAO;IAExC,OAAO,eA8BN;IAED,OAAO,CAAC,cAAc;IAkBtB,OAAc,WAAW,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,aAAa,CAOlE;IAED,OAAc,aAAa,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,aAAa,CAGpE;IAEM,iBAAiB,IAAI,MAAM,CAEjC;IAED;;OAEG;IACU,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAyD9E;IAEM,UAAU,IAAI,OAAO,CAE3B;IAEM,SAAS,IAAI,QAAQ,CAAC,YAAY,CAAC,CAEzC;IAEY,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,EAAE,OAAO,UAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAYxF;IAED;;OAEG;IACI,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAmD9E;IAED;;OAEG;IACI,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAuE9E;IAED;;OAEG;IACI,YAAY,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAKhD;IAEM,UAAU,IAAI,aAAa,CAAC,eAAe,CAAC,CAElD;CACF"}

package/dist/config/config-manager.js

@@ -0,0 +1,300 @@
+import fs from "node:fs/promises";
+import { existsSync, realpathSync, readFileSync } from "node:fs";
+import path from "node:path";
+import os from "node:os";
+import { DEFAULT_CONFIG, DEFAULT_BLOCKED_PATTERNS } from "./default-config.js";
+export function isWildcardAllowAll(dirs) {
+    if (!dirs || dirs.length === 0)
+        return false;
+    return dirs.some((d) => {
+        const trimmed = d.trim().toLowerCase();
+        return trimmed === "*" || trimmed === "all";
+    });
+}
+export class ConfigManager {
+    static instance = null;
+    config;
+    configFilePath;
+    executionHistory = [];
+    maxHistoryLength = 500;
+    constructor(customConfigPath) {
+        this.config = { ...DEFAULT_CONFIG };
+        if (customConfigPath) {
+            this.configFilePath = path.resolve(customConfigPath);
+            this.loadConfigSync();
+            return;
+        }
+        // Check multiple candidate locations so external MCP clients (Claude/Cursor) find it regardless of CWD
+        const candidates = [
+            path.resolve(process.cwd(), "winhelm.config.json"),
+            path.resolve(process.cwd(), "win-commander.config.json"),
+            process.argv[1] ? path.resolve(path.dirname(process.argv[1]), "..", "winhelm.config.json") : "",
+            process.argv[1] ? path.resolve(path.dirname(process.argv[1]), "winhelm.config.json") : "",
+            process.execPath ? path.resolve(path.dirname(process.execPath), "..", "winhelm.config.json") : "",
+            process.execPath ? path.resolve(path.dirname(process.execPath), "winhelm.config.json") : "",
+            path.join(os.homedir(), ".winhelm", "config.json"),
+            path.join(os.homedir(), ".win-commander", "config.json"),
+        ].filter(Boolean);
+        let chosen = candidates[0];
+        for (const c of candidates) {
+            if (existsSync(c)) {
+                chosen = c;
+                break;
+            }
+        }
+        this.configFilePath = chosen;
+        this.loadConfigSync();
+    }
+    loadConfigSync() {
+        if (this.configFilePath && existsSync(this.configFilePath)) {
+            try {
+                const raw = readFileSync(this.configFilePath, "utf-8");
+                const cleanRaw = raw.charCodeAt(0) === 0xfeff ? raw.slice(1) : raw;
+                if (!cleanRaw.trim())
+                    return;
+                const parsed = JSON.parse(cleanRaw);
+                this.config = {
+                    ...this.config,
+                    ...parsed,
+                };
+            }
+            catch (err) {
+                console.error(`[ConfigManager] FATAL: Syntax error in configuration file (${this.configFilePath}):`, err.message);
+                throw new Error(`Failed to parse configuration file (${this.configFilePath}): ${err.message}`);
+            }
+        }
+    }
+    static getInstance(customConfigPath) {
+        if (!ConfigManager.instance) {
+            ConfigManager.instance = new ConfigManager(customConfigPath);
+        }
+        else if (customConfigPath && ConfigManager.instance.configFilePath !== path.resolve(customConfigPath)) {
+            ConfigManager.instance = new ConfigManager(customConfigPath);
+        }
+        return ConfigManager.instance;
+    }
+    static resetInstance(customConfigPath) {
+        ConfigManager.instance = new ConfigManager(customConfigPath);
+        return ConfigManager.instance;
+    }
+    getConfigFilePath() {
+        return this.configFilePath;
+    }
+    /**
+     * Initialize config by reading from file, custom path, or in-memory override object
+     */
+    async init(configOrPath) {
+        if (configOrPath && typeof configOrPath === "object") {
+            this.config = {
+                ...this.config,
+                ...configOrPath,
+            };
+            return;
+        }
+        if (typeof configOrPath === "string") {
+            this.configFilePath = path.resolve(configOrPath);
+        }
+        try {
+            if (existsSync(this.configFilePath)) {
+                const raw = await fs.readFile(this.configFilePath, "utf-8");
+                const cleanRaw = raw.charCodeAt(0) === 0xfeff ? raw.slice(1) : raw;
+                if (cleanRaw.trim()) {
+                    const parsed = JSON.parse(cleanRaw);
+                    this.config = {
+                        ...this.config,
+                        ...parsed,
+                    };
+                    console.log(`[ConfigManager] Loaded configuration from ${this.configFilePath}`);
+                }
+            }
+            else if (typeof configOrPath === "string") {
+                console.warn(`[ConfigManager] Specified config file not found: ${this.configFilePath}`);
+            }
+        }
+        catch (err) {
+            console.error(`[ConfigManager] FATAL: Could not read config file (${this.configFilePath}):`, err.message);
+            throw new Error(`Failed to load configuration file (${this.configFilePath}): ${err.message}`);
+        }
+        // Apply environment variables overrides
+        if (process.env.MCP_AUTH_TOKEN) {
+            this.config.authToken = process.env.MCP_AUTH_TOKEN;
+        }
+        if (process.env.MCP_ALLOWED_DIRECTORIES) {
+            this.config.allowedDirectories = process.env.MCP_ALLOWED_DIRECTORIES.split(",")
+                .map((p) => p.trim())
+                .filter(Boolean);
+        }
+        if (process.env.MCP_BLOCKED_COMMANDS) {
+            const extraBlocked = process.env.MCP_BLOCKED_COMMANDS.split(",")
+                .map((c) => c.trim().toLowerCase())
+                .filter(Boolean);
+            this.config.blockedCommands = Array.from(new Set([...this.config.blockedCommands, ...extraBlocked]));
+        }
+        if (process.env.MCP_ALLOWED_HOSTS) {
+            const extraHosts = process.env.MCP_ALLOWED_HOSTS.split(",")
+                .map((h) => h.trim().toLowerCase())
+                .filter(Boolean);
+            const existing = this.config.allowedHosts || [];
+            this.config.allowedHosts = Array.from(new Set([...existing, ...extraHosts]));
+        }
+        if (process.env.MCP_READ_ONLY === "true" || process.env.MCP_READ_ONLY === "1") {
+            this.config.readOnly = true;
+        }
+    }
+    isReadOnly() {
+        return !!this.config.readOnly;
+    }
+    getConfig() {
+        return this.config;
+    }
+    async updateConfig(updates, persist = false) {
+        this.config = { ...this.config, ...updates };
+        if (!persist)
+            return;
+        try {
+            const dir = path.dirname(this.configFilePath);
+            if (!existsSync(dir)) {
+                await fs.mkdir(dir, { recursive: true });
+            }
+            await fs.writeFile(this.configFilePath, JSON.stringify(this.config, null, 2), "utf-8");
+        }
+        catch (err) {
+            console.error(`[ConfigManager] Failed to persist config to ${this.configFilePath}:`, err);
+        }
+    }
+    /**
+     * Validate if a command is allowed to run
+     */
+    isCommandAllowed(command) {
+        const normalized = command.trim().toLowerCase();
+        for (const blocked of this.config.blockedCommands) {
+            if (normalized.includes(blocked.toLowerCase())) {
+                return {
+                    allowed: false,
+                    reason: `Command execution blocked by security policy: matches blocked pattern "${blocked}"`,
+                };
+            }
+        }
+        // Check regex blocked patterns
+        const patterns = this.config.blockedCommandPatterns || DEFAULT_BLOCKED_PATTERNS;
+        for (const pattern of patterns) {
+            try {
+                const regex = new RegExp(pattern, "i");
+                if (regex.test(command)) {
+                    return {
+                        allowed: false,
+                        reason: `Command execution blocked by security policy: matches dangerous pattern "${pattern}"`,
+                    };
+                }
+            }
+            catch {
+                // ignore invalid custom regex pattern
+            }
+        }
+        // If allowSystemExecution is explicitly false, strictly block referencing unallowed drives in commands
+        if (this.config.allowSystemExecution === false) {
+            if (this.config.allowedDirectories &&
+                this.config.allowedDirectories.length > 0 &&
+                !isWildcardAllowAll(this.config.allowedDirectories)) {
+                const driveMatches = command.match(/\b([a-zA-Z]):(?=[\\/\s"']|$)/g);
+                if (driveMatches) {
+                    for (const match of driveMatches) {
+                        const driveLetter = match[0].toUpperCase() + ":\\";
+                        const check = this.isPathAllowed(driveLetter);
+                        if (!check.allowed) {
+                            return {
+                                allowed: false,
+                                reason: `Command execution blocked: references forbidden drive "${match}" outside allowedDirectories (${this.config.allowedDirectories.join(", ")})`,
+                            };
+                        }
+                    }
+                }
+            }
+        }
+        return { allowed: true };
+    }
+    /**
+     * Validate if a filesystem path is permitted under allowedDirectories
+     */
+    isPathAllowed(targetPath) {
+        if (isWildcardAllowAll(this.config.allowedDirectories)) {
+            return { allowed: true };
+        }
+        if (!this.config.allowedDirectories || this.config.allowedDirectories.length === 0) {
+            return {
+                allowed: false,
+                reason: `Access to path "${targetPath}" is blocked: no allowedDirectories configured. Set allowedDirectories to specific paths, or ["*"] to allow all (not recommended for public exposure).`,
+            };
+        }
+        let resolvedTarget = path.resolve(targetPath);
+        // Resolve symlinks / junctions to prevent directory traversal escapes
+        try {
+            if (existsSync(resolvedTarget)) {
+                resolvedTarget = realpathSync(resolvedTarget);
+            }
+            else {
+                // If file doesn't exist yet, resolve the nearest existing parent directory
+                let cur = path.dirname(resolvedTarget);
+                while (cur && !existsSync(cur)) {
+                    const parent = path.dirname(cur);
+                    if (parent === cur)
+                        break;
+                    cur = parent;
+                }
+                if (existsSync(cur)) {
+                    const realCur = realpathSync(cur);
+                    const rel = path.relative(cur, resolvedTarget);
+                    resolvedTarget = path.resolve(realCur, rel);
+                }
+            }
+        }
+        catch {
+            // fallback to path.resolve if realpath fails
+        }
+        const normTarget = resolvedTarget.toLowerCase();
+        const targetWithSep = normTarget.endsWith(path.sep)
+            ? normTarget
+            : normTarget + path.sep;
+        const isAllowed = this.config.allowedDirectories.some((dir) => {
+            let cleanDir = dir.trim();
+            // Handle drive letter variations e.g. "D:", "D", "d:\", "d:/"
+            if (/^[a-zA-Z]:?[\\/]?$/.test(cleanDir)) {
+                cleanDir = cleanDir[0].toUpperCase() + ":\\";
+            }
+            let resolvedDir = path.resolve(cleanDir);
+            try {
+                if (existsSync(resolvedDir)) {
+                    resolvedDir = realpathSync(resolvedDir);
+                }
+            }
+            catch {
+                // fallback
+            }
+            let normDir = resolvedDir.toLowerCase();
+            if (!normDir.endsWith(path.sep)) {
+                normDir += path.sep;
+            }
+            return targetWithSep.startsWith(normDir) || normTarget === normDir.slice(0, -1);
+        });
+        if (!isAllowed) {
+            return {
+                allowed: false,
+                reason: `Access to path "${targetPath}" is forbidden by allowedDirectories policy. Allowed roots: ${this.config.allowedDirectories.join(", ")}`,
+            };
+        }
+        return { allowed: true };
+    }
+    /**
+     * Record command execution for auditing
+     */
+    logExecution(entry) {
+        this.executionHistory.push(entry);
+        if (this.executionHistory.length > this.maxHistoryLength) {
+            this.executionHistory.shift();
+        }
+    }
+    getHistory() {
+        return this.executionHistory;
+    }
+}
+//# sourceMappingURL=config-manager.js.map

package/dist/config/config-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-manager.js","sourceRoot":"","sources":["../../src/config/config-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAY/E,MAAM,UAAU,kBAAkB,CAAC,IAA0B;IAC3D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACrB,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACvC,OAAO,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,KAAK,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,aAAa;IAChB,MAAM,CAAC,QAAQ,GAAyB,IAAI,CAAC;IAC7C,MAAM,CAAe;IACrB,cAAc,CAAS;IACvB,gBAAgB,GAAsB,EAAE,CAAC;IAChC,gBAAgB,GAAG,GAAG,CAAC;IAExC,YAAoB,gBAAyB;QAC3C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,CAAC;QAEpC,IAAI,gBAAgB,EAAE,CAAC;YACrB,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACrD,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,uGAAuG;QACvG,MAAM,UAAU,GAAG;YACjB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,qBAAqB,CAAC;YAClD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,2BAA2B,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE;YACzF,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE;YACjG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE;YAC3F,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,gBAAgB,EAAE,aAAa,CAAC;SACzD,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAElB,IAAI,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClB,MAAM,GAAG,CAAC,CAAC;gBACX,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;QAC7B,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC;IAEO,cAAc;QACpB,IAAI,IAAI,CAAC,cAAc,IAAI,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;gBACvD,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;gBACnE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE;oBAAE,OAAO;gBAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACpC,IAAI,CAAC,MAAM,GAAG;oBACZ,GAAG,IAAI,CAAC,MAAM;oBACd,GAAG,MAAM;iBACV,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,8DAA8D,IAAI,CAAC,cAAc,IAAI,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;gBAC7H,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,cAAc,MAAO,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5G,CAAC;QACH,CAAC;IACH,CAAC;IAEM,MAAM,CAAC,WAAW,CAAC,gBAAyB;QACjD,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC5B,aAAa,CAAC,QAAQ,GAAG,IAAI,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,gBAAgB,IAAI,aAAa,CAAC,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACxG,aAAa,CAAC,QAAQ,GAAG,IAAI,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,aAAa,CAAC,QAAQ,CAAC;IAChC,CAAC;IAEM,MAAM,CAAC,aAAa,CAAC,gBAAyB;QACnD,aAAa,CAAC,QAAQ,GAAG,IAAI,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAC7D,OAAO,aAAa,CAAC,QAAQ,CAAC;IAChC,CAAC;IAEM,iBAAiB;QACtB,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,IAAI,CAAC,YAA6C;QAC7D,IAAI,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrD,IAAI,CAAC,MAAM,GAAG;gBACZ,GAAG,IAAI,CAAC,MAAM;gBACd,GAAG,YAAY;aAChB,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;gBACpC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;gBAC5D,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;gBACnE,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;oBACpB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBACpC,IAAI,CAAC,MAAM,GAAG;wBACZ,GAAG,IAAI,CAAC,MAAM;wBACd,GAAG,MAAM;qBACV,CAAC;oBACF,OAAO,CAAC,GAAG,CAAC,6CAA6C,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;gBAClF,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;gBAC5C,OAAO,CAAC,IAAI,CAAC,oDAAoD,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,sDAAsD,IAAI,CAAC,cAAc,IAAI,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;YACrH,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,cAAc,MAAO,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3G,CAAC;QAED,wCAAwC;QACxC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QACrD,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,KAAK,CAAC,GAAG,CAAC;iBAC5E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;YACrC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC;iBAC7D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;iBAClC,MAAM,CAAC,OAAO,CAAC,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QACvG,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC;iBACxD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;iBAClC,MAAM,CAAC,OAAO,CAAC,CAAC;YACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,GAAG,EAAE,CAAC;YAC9E,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC;IAEM,UAAU;QACf,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;IAChC,CAAC;IAEM,SAAS;QACd,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,OAA8B,EAAE,OAAO,GAAG,KAAK;QACvE,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC9C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACzF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,+CAA+C,IAAI,CAAC,cAAc,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED;;OAEG;IACI,gBAAgB,CAAC,OAAe;QACrC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAChD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAClD,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC/C,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,0EAA0E,OAAO,GAAG;iBAC7F,CAAC;YACJ,CAAC;QACH,CAAC;QAED,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,IAAI,wBAAwB,CAAC;QAChF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBACvC,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBACxB,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,4EAA4E,OAAO,GAAG;qBAC/F,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,sCAAsC;YACxC,CAAC;QACH,CAAC;QAED,uGAAuG;QACvG,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,KAAK,KAAK,EAAE,CAAC;YAC/C,IACE,IAAI,CAAC,MAAM,CAAC,kBAAkB;gBAC9B,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC;gBACzC,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,EACnD,CAAC;gBACD,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACpE,IAAI,YAAY,EAAE,CAAC;oBACjB,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;wBACjC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC;wBACnD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;wBAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;4BACnB,OAAO;gCACL,OAAO,EAAE,KAAK;gCACd,MAAM,EAAE,0DAA0D,KAAK,iCAAiC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;6BACrJ,CAAC;wBACJ,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACI,aAAa,CAAC,UAAkB;QACrC,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACvD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnF,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,mBAAmB,UAAU,wJAAwJ;aAC9L,CAAC;QACJ,CAAC;QAED,IAAI,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9C,sEAAsE;QACtE,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC/B,cAAc,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,2EAA2E;gBAC3E,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBACvC,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACjC,IAAI,MAAM,KAAK,GAAG;wBAAE,MAAM;oBAC1B,GAAG,GAAG,MAAM,CAAC;gBACf,CAAC;gBACD,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACpB,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;oBAClC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;oBAC/C,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,6CAA6C;QAC/C,CAAC;QAED,MAAM,UAAU,GAAG,cAAc,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;YACjD,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC;QAE1B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YAC5D,IAAI,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAC1B,8DAA8D;YAC9D,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxC,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC;YAC/C,CAAC;YAED,IAAI,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC;gBACH,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;oBAC5B,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,WAAW;YACb,CAAC;YAED,IAAI,OAAO,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC;YACtB,CAAC;YAED,OAAO,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,mBAAmB,UAAU,+DAA+D,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAChJ,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACI,YAAY,CAAC,KAAsB;QACxC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACzD,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAChC,CAAC;IACH,CAAC;IAEM,UAAU;QACf,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;CACF"}

package/dist/config/default-config.d.ts

@@ -0,0 +1,4 @@
+import type { ServerConfig } from "../types/index.js";
+export declare const DEFAULT_BLOCKED_PATTERNS: string[];
+export declare const DEFAULT_CONFIG: ServerConfig;
+//# sourceMappingURL=default-config.d.ts.map

package/dist/config/default-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-config.d.ts","sourceRoot":"","sources":["../../src/config/default-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,eAAO,MAAM,wBAAwB,EAAE,MAAM,EAmB5C,CAAC;AAEF,eAAO,MAAM,cAAc,EAAE,YA0B5B,CAAC"}

package/dist/config/default-config.js

@@ -0,0 +1,48 @@
+export const DEFAULT_BLOCKED_PATTERNS = [
+    "\\bdiskpart(\\b|\\.exe)",
+    "\\binitialize-disk\\b",
+    "\\bclear-disk\\b",
+    "\\bformat-volume\\b",
+    "\\bformat-disk\\b",
+    "\\breg(\\s+|\\.exe\\s+)delete\\s+hklm",
+    "\\bbcdedit(\\b|\\.exe)",
+    "\\bbootrec(\\b|\\.exe)",
+    "\\bnet(\\s+|\\.exe\\s+)user\\s+.*\\/add",
+    "\\btakeown(\\s+|\\.exe\\s+).*(/f|-f)",
+    "\\bicacls(\\s+|\\.exe\\s+).*(\\/grant|-grant)",
+    "\\bmimikatz",
+    "\\bprocdump.*lsass",
+    "comsvcs\\.dll",
+    "\\bformat(\\s+|\\.com\\s+)[a-zA-Z]:",
+    "\\brmdir(\\s+|\\.exe\\s+).*[\\/\\-]s",
+    "\\bdel(\\s+|\\.exe\\s+).*[\\/\\-]s.*[\\/\\-]q.*[a-zA-Z]:\\\\",
+    "\\bremove-item\\b.*-recurse.*-force.*[a-zA-Z]:\\\\",
+];
+export const DEFAULT_CONFIG = {
+    blockedCommands: [
+        "format-volume",
+        "format-disk",
+        "clear-disk",
+        "stop-computer",
+        "restart-computer",
+        "rmdir /s /q c:\\",
+        "del /f /s /q c:\\",
+        "remove-item -recurse -force c:\\",
+    ],
+    blockedCommandPatterns: [...DEFAULT_BLOCKED_PATTERNS],
+    allowedDirectories: [], // Empty means BLOCKED by default (fail-closed). Use ["*"] or ["all"] to allow full access.
+    allowSystemExecution: true, // Allows invoking runtimes on C: (Python/Node/Git) while restricting workspace file writes
+    fileReadLineLimit: 2000,
+    defaultTimeoutMs: 60000,
+    telemetryEnabled: false,
+    authToken: null,
+    readOnly: false,
+    rateLimitPerMinute: 120,
+    profile: "full",
+    allowedHosts: ["localhost", "127.0.0.1", "[::1]", "*.ts.net"],
+    searchExcludeDirs: ["dist", "logs", "build", "out"],
+    preferPwsh: true,
+    sessionIdleTimeoutMs: 45 * 60 * 1000,
+    maxConcurrentSessions: 100,
+};
+//# sourceMappingURL=default-config.js.map

package/dist/config/default-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-config.js","sourceRoot":"","sources":["../../src/config/default-config.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,wBAAwB,GAAa;IAChD,yBAAyB;IACzB,uBAAuB;IACvB,kBAAkB;IAClB,qBAAqB;IACrB,mBAAmB;IACnB,uCAAuC;IACvC,wBAAwB;IACxB,wBAAwB;IACxB,yCAAyC;IACzC,sCAAsC;IACtC,+CAA+C;IAC/C,aAAa;IACb,oBAAoB;IACpB,eAAe;IACf,qCAAqC;IACrC,sCAAsC;IACtC,8DAA8D;IAC9D,oDAAoD;CACrD,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAiB;IAC1C,eAAe,EAAE;QACf,eAAe;QACf,aAAa;QACb,YAAY;QACZ,eAAe;QACf,kBAAkB;QAClB,kBAAkB;QAClB,mBAAmB;QACnB,kCAAkC;KACnC;IACD,sBAAsB,EAAE,CAAC,GAAG,wBAAwB,CAAC;IACrD,kBAAkB,EAAE,EAAE,EAAE,2FAA2F;IACnH,oBAAoB,EAAE,IAAI,EAAE,2FAA2F;IACvH,iBAAiB,EAAE,IAAI;IACvB,gBAAgB,EAAE,KAAK;IACvB,gBAAgB,EAAE,KAAK;IACvB,SAAS,EAAE,IAAI;IACf,QAAQ,EAAE,KAAK;IACf,kBAAkB,EAAE,GAAG;IACvB,OAAO,EAAE,MAAM;IACf,YAAY,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,CAAC;IAC7D,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC;IACnD,UAAU,EAAE,IAAI;IAChB,oBAAoB,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IACpC,qBAAqB,EAAE,GAAG;CAC3B,CAAC"}

package/dist/config/profiles.d.ts

@@ -0,0 +1,16 @@
+/**
+ * WinHelm Tool Profiles
+ * Allows AI agents to load only required tools to optimize context window and tokens
+ */
+export type ToolProfile = "full" | "core" | "dev" | "sysadmin" | "minimal" | "custom";
+export interface ProfileDefinition {
+    name: string;
+    description: string;
+    tools: string[];
+    includesResource: boolean;
+}
+export declare const PROFILES: Record<ToolProfile, ProfileDefinition>;
+export declare function resolveCustomTools(baseProfile?: ToolProfile, toolsArg?: string, configCustomTools?: string[]): string[] | undefined;
+export declare function isToolInProfile(toolName: string, profile?: ToolProfile, customTools?: string[]): boolean;
+export declare function isValidProfile(profile: string): profile is ToolProfile;
+//# sourceMappingURL=profiles.d.ts.map

package/dist/config/profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profiles.d.ts","sourceRoot":"","sources":["../../src/config/profiles.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEtF,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAsK3D,CAAC;AAEF,wBAAgB,kBAAkB,CAChC,WAAW,GAAE,WAAoB,EACjC,QAAQ,CAAC,EAAE,MAAM,EACjB,iBAAiB,CAAC,EAAE,MAAM,EAAE,GAC3B,MAAM,EAAE,GAAG,SAAS,CA0BtB;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,WAAoB,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAMhH;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,IAAI,WAAW,CAEtE"}

package/dist/config/profiles.js

@@ -0,0 +1,208 @@
+/**
+ * WinHelm Tool Profiles
+ * Allows AI agents to load only required tools to optimize context window and tokens
+ */
+export const PROFILES = {
+    minimal: {
+        name: "Minimal",
+        description: "6 essential tools for small models (Claude Haiku, Llama 8B, local LLMs) with ~85% token reduction",
+        tools: [
+            "terminal_run",
+            "file_read",
+            "file_write",
+            "file_list",
+            "file_search",
+            "system_info",
+        ],
+        includesResource: false,
+    },
+    core: {
+        name: "Core",
+        description: "15 essential tools for daily coding and file operations",
+        tools: [
+            "terminal_run",
+            "file_read",
+            "file_write",
+            "file_edit",
+            "file_list",
+            "file_search",
+            "file_copy",
+            "file_move",
+            "file_tail",
+            "file_hash",
+            "file_delete_safe",
+            "system_info",
+            "gpu_info",
+            "process_list",
+            "port_check",
+        ],
+        includesResource: false,
+    },
+    dev: {
+        name: "Developer",
+        description: "28 tools for software engineering, background tasks, ripgrep, archives, HTTP API testing, PDF reports, and previews",
+        tools: [
+            "terminal_run",
+            "file_read",
+            "file_write",
+            "file_edit",
+            "file_list",
+            "file_search",
+            "file_copy",
+            "file_move",
+            "file_tail",
+            "file_hash",
+            "file_delete_safe",
+            "system_info",
+            "gpu_info",
+            "process_list",
+            "port_check",
+            "terminal_task_start",
+            "terminal_task_list",
+            "terminal_task_logs",
+            "terminal_task_send",
+            "terminal_task_kill",
+            "file_search_ripgrep",
+            "archive_zip",
+            "archive_unzip",
+            "http_ping",
+            "http_request",
+            "pdf_generate",
+            "system_open",
+            "file_preview",
+        ],
+        includesResource: true,
+    },
+    sysadmin: {
+        name: "System Admin",
+        description: "37 tools for IT management, services, event logs, network, background tasks, ripgrep, archives, and desktop automation (all except pdf_generate)",
+        tools: [
+            "terminal_run",
+            "file_read",
+            "file_write",
+            "file_edit",
+            "file_list",
+            "file_search",
+            "file_copy",
+            "file_move",
+            "file_tail",
+            "file_hash",
+            "file_delete_safe",
+            "system_info",
+            "gpu_info",
+            "process_list",
+            "port_check",
+            "process_kill",
+            "eventlog_query",
+            "network_info",
+            "service_list",
+            "service_status",
+            "service_control",
+            "screen_capture",
+            "system_open",
+            "clipboard_get",
+            "clipboard_set",
+            "notification_send",
+            "http_ping",
+            "http_request",
+            "terminal_task_start",
+            "terminal_task_list",
+            "terminal_task_logs",
+            "terminal_task_send",
+            "terminal_task_kill",
+            "file_search_ripgrep",
+            "archive_zip",
+            "archive_unzip",
+            "file_preview",
+        ],
+        includesResource: true,
+    },
+    full: {
+        name: "Full Suite",
+        description: "All 38 native Windows tools and interactive preview resources",
+        tools: [
+            "terminal_run",
+            "terminal_task_start",
+            "terminal_task_list",
+            "terminal_task_logs",
+            "terminal_task_send",
+            "terminal_task_kill",
+            "file_read",
+            "file_write",
+            "file_edit",
+            "file_list",
+            "file_search",
+            "file_delete_safe",
+            "file_move",
+            "file_copy",
+            "archive_zip",
+            "archive_unzip",
+            "file_tail",
+            "file_hash",
+            "file_search_ripgrep",
+            "pdf_generate",
+            "file_preview",
+            "clipboard_get",
+            "clipboard_set",
+            "screen_capture",
+            "system_open",
+            "notification_send",
+            "system_info",
+            "gpu_info",
+            "process_list",
+            "process_kill",
+            "port_check",
+            "eventlog_query",
+            "service_list",
+            "service_status",
+            "service_control",
+            "http_ping",
+            "http_request",
+            "network_info",
+        ],
+        includesResource: true,
+    },
+    custom: {
+        name: "Custom",
+        description: "User-defined tool selection via --tools or config.json",
+        tools: [],
+        includesResource: true,
+    },
+};
+export function resolveCustomTools(baseProfile = "full", toolsArg, configCustomTools) {
+    if (!toolsArg && (!configCustomTools || configCustomTools.length === 0)) {
+        return undefined;
+    }
+    const rawList = toolsArg
+        ? toolsArg.split(",").map((t) => t.trim()).filter(Boolean)
+        : configCustomTools || [];
+    const hasAdd = rawList.some((t) => t.startsWith("+"));
+    const hasRemove = rawList.some((t) => t.startsWith("-"));
+    if (hasAdd || hasRemove) {
+        const baseTools = new Set((PROFILES[baseProfile] || PROFILES.full).tools);
+        for (const item of rawList) {
+            if (item.startsWith("+")) {
+                baseTools.add(item.slice(1).trim());
+            }
+            else if (item.startsWith("-")) {
+                baseTools.delete(item.slice(1).trim());
+            }
+            else {
+                baseTools.add(item);
+            }
+        }
+        return Array.from(baseTools);
+    }
+    return rawList;
+}
+export function isToolInProfile(toolName, profile = "full", customTools) {
+    if (customTools && customTools.length > 0) {
+        return customTools.includes(toolName);
+    }
+    const p = PROFILES[profile] || PROFILES.full;
+    return p.tools.includes(toolName);
+}
+export function isValidProfile(profile) {
+    return profile in PROFILES;
+}
+//# sourceMappingURL=profiles.js.map