feat: implement tool registry and add various tools for HTTP, file operations, SSH, and Matrix messaging

tools/ssh.go

@@ -0,0 +1,83 @@
+package tools
+
+import (
+	"context"
+	"fmt"
+	"strings"
+
+	"github.com/enmanuel/agents/internal/config"
+	corespecs "github.com/enmanuel/agents/pkg/tools"
+	"github.com/enmanuel/agents/shell/ssh"
+)
+
+// NewSSHCommand creates an ssh_command tool that executes remote commands via SSH.
+// Validates targets against cfg.AllowedTargets and commands against cfg.ForbiddenCommands.
+func NewSSHCommand(cfg config.SSHToolCfg, exec *ssh.Executor) Tool {
+	return Tool{
+		Def: Def{
+			Name:        "ssh_command",
+			Description: "Execute a command on a remote server via SSH.",
+			Parameters: []Param{
+				{Name: "target", Type: "string", Description: "The SSH target name (e.g. production, staging)", Required: true},
+				{Name: "command", Type: "string", Description: "The shell command to execute", Required: true},
+			},
+		},
+		Exec: func(ctx context.Context, args map[string]any) Result {
+			target := getString(args, "target")
+			command := getString(args, "command")
+			if target == "" || command == "" {
+				return Result{Err: fmt.Errorf("ssh_command: target and command are required")}
+			}
+
+			if err := validateTarget(target, cfg.AllowedTargets); err != nil {
+				return Result{Err: err}
+			}
+			if err := validateCommand(command, cfg.ForbiddenCommands); err != nil {
+				return Result{Err: err}
+			}
+
+			timeout := "30s"
+			if cfg.Timeout > 0 {
+				timeout = cfg.Timeout.String()
+			}
+
+			res := exec.Execute(ctx, corespecs.SSHCommandSpec{
+				Target:  target,
+				Command: command,
+				Timeout: timeout,
+			})
+
+			if res.Err != nil {
+				return Result{Err: fmt.Errorf("ssh_command: %w", res.Err)}
+			}
+
+			output := res.Stdout
+			if res.Stderr != "" {
+				output += "\nstderr: " + res.Stderr
+			}
+			return Result{Output: output}
+		},
+	}
+}
+
+func validateTarget(target string, allowed []string) error {
+	if len(allowed) == 0 {
+		return nil
+	}
+	for _, a := range allowed {
+		if target == a {
+			return nil
+		}
+	}
+	return fmt.Errorf("ssh target %q not in allowed list", target)
+}
+
+func validateCommand(command string, forbidden []string) error {
+	lower := strings.ToLower(command)
+	for _, f := range forbidden {
+		if strings.Contains(lower, strings.ToLower(f)) {
+			return fmt.Errorf("ssh command contains forbidden pattern %q", f)
+		}
+	}
+	return nil
+}