chore: import upstream snapshot with attribution

tools/interactive_shell/actions/cli_command.py

@@ -0,0 +1,60 @@
+"""CLI command tool."""
+
+from __future__ import annotations
+
+from typing import Any
+
+from core.agent_harness.tools.tool_context import (
+    ActionToolContext,
+    capability_available_from_sources,
+    execute_with_action_context,
+    object_schema,
+    string_property,
+)
+from core.tool_framework.registered_tool import RegisteredTool
+from tools.interactive_shell.cli import run_opensre_cli_command
+from tools.interactive_shell.subprocess import require_subprocess_presenter
+
+
+def execute_cli_command_tool(args: dict[str, Any], ctx: ActionToolContext) -> bool:
+    payload = str(args.get("payload", "")).strip()
+    if not payload:
+        return False
+    run_opensre_cli_command(payload, require_subprocess_presenter(ctx))
+    return True
+
+
+def run_cli_command(*, payload: str, context: Any) -> dict[str, Any]:
+    return execute_with_action_context({"payload": payload}, context, execute_cli_command_tool)
+
+
+cli_exec_tool = RegisteredTool(
+    name="cli_exec",
+    description=(
+        "Run an `opensre` CLI subcommand payload (without the leading `opensre ` prefix). "
+        "Prefer allowed operational families such as health/status/list/show/integrations/"
+        "synthetic checks; avoid unrelated or dangerous payloads."
+    ),
+    input_schema=object_schema(
+        properties={
+            "payload": string_property(
+                description=(
+                    "CLI payload passed to `opensre` without the leading command prefix "
+                    "(for example: `integrations list`, `health`, `synthetic run ...`). "
+                    "Must not start with `opensre `."
+                ),
+                min_length=1,
+            )
+        },
+        required=("payload",),
+    ),
+    source="interactive_shell",
+    surfaces=("action",),
+    parallel_safe=False,
+    accepts_runtime_context=True,
+    run=run_cli_command,
+    is_available=lambda sources: capability_available_from_sources(sources, "cli_commands"),
+)
+
+
+__all__ = ["cli_exec_tool", "execute_cli_command_tool"]