//#region src/gateway/security/dangerous-tools.ts
/**
* Tools denied via Gateway HTTP tool invoke endpoints by default.
*
* These are high-risk because they enable command execution, file mutation,
* session orchestration, or control-plane actions that don't belong on a
* non-interactive HTTP surface.
*/
const DEFAULT_GATEWAY_HTTP_TOOL_DENY = [
	"exec",
	"spawn",
	"shell",
	"fs_write",
	"fs_delete",
	"fs_move",
	"apply_patch",
	"sessions_spawn",
	"sessions_send",
	"cron",
	"gateway",
	"nodes"
];
const DANGEROUS_TOOL_SET = new Set(DEFAULT_GATEWAY_HTTP_TOOL_DENY);
/**
* Check whether a tool name is in the default HTTP deny list.
*/
function isDangerousHttpTool(toolName) {
	return DANGEROUS_TOOL_SET.has(toolName.toLowerCase());
}
/**
* Filter a list of tool names, removing those on the HTTP deny list.
* Returns only the safe tools.
*/
function filterDangerousHttpTools(toolNames) {
	const allowed = [];
	const denied = [];
	for (const name of toolNames) if (isDangerousHttpTool(name)) denied.push(name);
	else allowed.push(name);
	return {
		allowed,
		denied
	};
}
//#endregion
export { DEFAULT_GATEWAY_HTTP_TOOL_DENY, filterDangerousHttpTools, isDangerousHttpTool };

//# sourceMappingURL=dangerous-tools.js.map