// Public barrel for @oscharko-dev/keiko-tools — the safe tool-execution layer (ADR-0006 + ADR-
// 0017). Combines the root tool host surface (errors, sandbox, exec, patch, registry, schemas,
// writer, terminal-policy, types) with the browser CDP sub-surface (validators, cdp-client,
// errors, session, types). The browser surface lives behind a per-file shim at
// `src/tools/browser/index.ts` so cross-tree callers (src/ui/browser.ts, src/ui/deps.ts) keep
// their `../tools/browser/index.js` imports unchanged via that shim. No subpath export.
export { DEFAULT_COMMAND_RULES, DEFAULT_ENV_ALLOWLIST, DEFAULT_PATCH_LIMITS, DEFAULT_SANDBOX_POLICY, DEFAULT_TOOL_HOST_CONFIG, resolveToolHostConfig, } from "./types.js";
// ─── Tool error taxonomy (re-exported from keiko-security; package-self-contained) ──
export { CommandCancelledError, CommandDeniedError, CommandTimeoutError, OutputLimitError, PatchApplyDisabledError, PatchApplyError, PatchValidationError, TOOL_CODES, ToolArgumentError, ToolError, UnknownToolError, } from "./errors.js";
// ─── Sandbox decisions + env build + command allowlist ──────────────────────────────
export { buildSandboxEnv, collectSensitiveEnvValues, isCommandAllowed, } from "./sandbox.js";
// ─── Command execution boundary ─────────────────────────────────────────────────────
export { runCommand, } from "./exec.js";
// ─── Patch workflow ─────────────────────────────────────────────────────────────────
export { applyPatch, renderDryRun, validatePatch, } from "./patch.js";
export { normalizeUnifiedDiffHunks } from "./patch-normalize.js";
export { parseUnifiedDiff, PatchParseError } from "./patch-parse.js";
export { computeFileContent } from "./patch-content.js";
// ─── Tool definitions (model-facing JSON-Schema table) ──────────────────────────────
export { TOOL_DEFINITIONS } from "./schemas.js";
// ─── Tool host implementation ───────────────────────────────────────────────────────
export { WorkspaceToolHost } from "./registry.js";
// ─── Terminal-policy: command-allowlist gate used by the terminal BFF ───────────────
// `terminal-policy.ts` re-exports the symbol surface src/ui/terminal.ts depends on. Surface
// every name it exports so the shim at src/tools/terminal-policy.ts can forward from here.
export * from "./terminal-policy.js";
// ─── Browser sub-surface (ADR-0017) ─────────────────────────────────────────────────
export { BROWSER_ERROR_CODES, BrowserToolError } from "./browser/errors.js";
export { isLoopbackHost, isLoopbackUrl, normalizeCdpPort, normalizeNavigateUrl, } from "./browser/validators.js";
export { CdpClient, PERMITTED_CDP_METHODS, } from "./browser/cdp-client.js";
export { createBrowserSessionManager, } from "./browser/session.js";
// ─── Package version ────────────────────────────────────────────────────────────────
export { KEIKO_TOOLS_VERSION } from "./version.js";
