Function createDockerTools

src/tools/experiment-code-update.ts:48–602

* Create tools that operate within a Docker container

(
  sessionId: string,
  modelProvider: ModelProvider,
)

 * Create tools that operate within a Docker container
 */
async function createDockerTools(
  sessionId: string,
  modelProvider: ModelProvider,
) {
  const docker = await getDockerModule();

  // Create command executor for bash tool
  const executeCommand = async (command: string) => {
    logger.info("Docker bash tool executing command", { sessionId, command });

    const allowedCommands = [
      "ls",
      "cat",
      "find",
      "git",
      "mkdir",
      "cd",
      "npm",
      "pnpm",
      "gh",
    ];
    const forbiddenGitConfigPatterns = [
      "git config user.email",
      "git config --global user.email",
      "git config user.name",
      "git config --global user.name",
    ];
    const baseCommand = command.trim().split(/\s+/)[0];

    if (!allowedCommands.includes(baseCommand)) {
      const errorMsg = `Command '${baseCommand}' is not allowed. Only ${allowedCommands.join(", ")} are permitted.`;
      logger.error("Docker bash tool command not allowed", {
        sessionId,
        command,
        baseCommand,
        allowedCommands,
      });
      throw new Error(errorMsg);
    }

    if (
      forbiddenGitConfigPatterns.some((pattern) => command.includes(pattern))
    ) {
      const errorMsg =
        "Commands that modify git user.name or user.email are forbidden. Use the existing repository configuration.";
      logger.error("Docker bash tool command forbidden", {
        sessionId,
        command,
        forbiddenPatterns: forbiddenGitConfigPatterns,
      });
      throw new Error(errorMsg);
    }

    try {
      const { stdout, stderr, exitCode } = await docker.execCommand(sessionId, [
        "/bin/sh",
        "-c",
        command,