@5ss/ai-tools 2.11.1

package/dist/modules/content-type/index.js

@@ -0,0 +1,66 @@
+import { n as defineModule, r as defineTool } from "../../define-CvpJ_pNP.js";
+import { n as extensionFromMediaType, r as mediaTypeFromPath, t as allExtensionsFromMediaType } from "../../content-type-CORxaxcv.js";
+import { z } from "zod";
+//#region src/modules/content-type/module.ts
+const getTypeInput = z.object({ path: z.string().min(1).describe("File path, filename, or extension (with or without leading dot), for example report.pdf or pdf") });
+const getTypeOutput = z.object({ media_type: z.string().nullable().describe("Content type (MIME), or null when unrecognized") });
+const getExtensionInput = z.object({ media_type: z.string().min(1).describe("Content type; optional charset is ignored, for example text/html; charset=utf-8") });
+const getExtensionOutput = z.object({ extension: z.string().nullable().describe("Preferred file extension without a leading dot, or null") });
+const getAllExtensionsOutput = z.object({ extensions: z.array(z.string()).describe("All known extensions for the type (may be empty)") });
+const contentTypeGetTool = defineTool({
+	id: "content-type-get",
+	name: "getContentType",
+	description: "Look up the media type for a file path, filename, or extension. Use when another tool requires a media type and only the name or extension is known. Returns null for an unknown extension.",
+	inputSchema: getTypeInput,
+	outputSchema: getTypeOutput,
+	sideEffect: "none",
+	runtime: "both",
+	execute: async (input) => {
+		const mediaType = mediaTypeFromPath(input.path);
+		return getTypeOutput.parse({ media_type: mediaType ?? null });
+	}
+});
+const contentTypeExtensionTool = defineTool({
+	id: "content-type-extension",
+	name: "getContentTypeExtension",
+	description: "Look up the preferred file extension for a media type. Use when naming an output whose media type is known. Charset parameters are ignored; returns null when unknown.",
+	inputSchema: getExtensionInput,
+	outputSchema: getExtensionOutput,
+	sideEffect: "none",
+	runtime: "both",
+	execute: async (input) => {
+		const extension = extensionFromMediaType(input.media_type);
+		return getExtensionOutput.parse({ extension: extension ?? null });
+	}
+});
+const contentTypeExtensionsTool = defineTool({
+	id: "content-type-extensions",
+	name: "getContentTypeExtensions",
+	description: "List all known file extensions for a content type (for example image/jpeg → jpeg, jpg, jpe). Empty when unknown.",
+	inputSchema: getExtensionInput,
+	outputSchema: getAllExtensionsOutput,
+	sideEffect: "none",
+	runtime: "both",
+	execute: async (input) => {
+		return getAllExtensionsOutput.parse({ extensions: [...allExtensionsFromMediaType(input.media_type)] });
+	}
+});
+const contentTypeModule = defineModule({
+	id: "content-type",
+	title: "Content Type",
+	description: "Look up media types from extensions and extensions from media types. This does not inspect file bytes.",
+	runtime: "both",
+	auth: { type: "none" },
+	categories: ["utility", "content"],
+	classification: "standard",
+	tags: ["mime", "pure"],
+	tools: [
+		contentTypeGetTool,
+		contentTypeExtensionTool,
+		contentTypeExtensionsTool
+	]
+});
+//#endregion
+export { contentTypeExtensionTool, contentTypeExtensionsTool, contentTypeGetTool, contentTypeModule };
+
+//# sourceMappingURL=index.js.map

package/dist/modules/content-type/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/modules/content-type/module.ts"],"sourcesContent":["import { z } from 'zod'\n\nimport { defineModule, defineTool } from '../../core/define'\nimport { allExtensionsFromMediaType, extensionFromMediaType, mediaTypeFromPath } from '../../shared/content-type'\n\nconst getTypeInput = z.object({\n\tpath: z\n\t\t.string()\n\t\t.min(1)\n\t\t.describe('File path, filename, or extension (with or without leading dot), for example report.pdf or pdf')\n})\n\nconst getTypeOutput = z.object({\n\tmedia_type: z.string().nullable().describe('Content type (MIME), or null when unrecognized')\n})\n\nconst getExtensionInput = z.object({\n\tmedia_type: z\n\t\t.string()\n\t\t.min(1)\n\t\t.describe('Content type; optional charset is ignored, for example text/html; charset=utf-8')\n})\n\nconst getExtensionOutput = z.object({\n\textension: z.string().nullable().describe('Preferred file extension without a leading dot, or null')\n})\n\nconst getAllExtensionsOutput = z.object({\n\textensions: z.array(z.string()).describe('All known extensions for the type (may be empty)')\n})\n\nexport const contentTypeGetTool = defineTool({\n\tid: 'content-type-get',\n\tname: 'getContentType',\n\tdescription:\n\t\t'Look up the media type for a file path, filename, or extension. Use when another tool requires a media type and only the name or extension is known. Returns null for an unknown extension.',\n\tinputSchema: getTypeInput,\n\toutputSchema: getTypeOutput,\n\tsideEffect: 'none',\n\truntime: 'both',\n\texecute: async (input) => {\n\t\tconst mediaType = mediaTypeFromPath(input.path)\n\t\treturn getTypeOutput.parse({ media_type: mediaType ?? null })\n\t}\n})\n\nexport const contentTypeExtensionTool = defineTool({\n\tid: 'content-type-extension',\n\tname: 'getContentTypeExtension',\n\tdescription:\n\t\t'Look up the preferred file extension for a media type. Use when naming an output whose media type is known. Charset parameters are ignored; returns null when unknown.',\n\tinputSchema: getExtensionInput,\n\toutputSchema: getExtensionOutput,\n\tsideEffect: 'none',\n\truntime: 'both',\n\texecute: async (input) => {\n\t\tconst extension = extensionFromMediaType(input.media_type)\n\t\treturn getExtensionOutput.parse({ extension: extension ?? null })\n\t}\n})\n\nexport const contentTypeExtensionsTool = defineTool({\n\tid: 'content-type-extensions',\n\tname: 'getContentTypeExtensions',\n\tdescription:\n\t\t'List all known file extensions for a content type (for example image/jpeg → jpeg, jpg, jpe). Empty when unknown.',\n\tinputSchema: getExtensionInput,\n\toutputSchema: getAllExtensionsOutput,\n\tsideEffect: 'none',\n\truntime: 'both',\n\texecute: async (input) => {\n\t\treturn getAllExtensionsOutput.parse({\n\t\t\textensions: [...allExtensionsFromMediaType(input.media_type)]\n\t\t})\n\t}\n})\n\nexport const contentTypeModule = defineModule({\n\tid: 'content-type',\n\ttitle: 'Content Type',\n\tdescription: 'Look up media types from extensions and extensions from media types. This does not inspect file bytes.',\n\truntime: 'both',\n\tauth: { type: 'none' },\n\tcategories: ['utility', 'content'],\n\tclassification: 'standard',\n\ttags: ['mime', 'pure'],\n\ttools: [contentTypeGetTool, contentTypeExtensionTool, contentTypeExtensionsTool]\n})\n"],"mappings":";;;;AAKA,MAAM,eAAe,EAAE,OAAO,EAC7B,MAAM,EACJ,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,SAAS,gGAAgG,EAC5G,CAAC;AAED,MAAM,gBAAgB,EAAE,OAAO,EAC9B,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,gDAAgD,EAC5F,CAAC;AAED,MAAM,oBAAoB,EAAE,OAAO,EAClC,YAAY,EACV,OAAO,CAAC,CACR,IAAI,CAAC,CAAC,CACN,SAAS,iFAAiF,EAC7F,CAAC;AAED,MAAM,qBAAqB,EAAE,OAAO,EACnC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,yDAAyD,EACpG,CAAC;AAED,MAAM,yBAAyB,EAAE,OAAO,EACvC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,kDAAkD,EAC5F,CAAC;AAED,MAAa,qBAAqB,WAAW;CAC5C,IAAI;CACJ,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS,OAAO,UAAU;EACzB,MAAM,YAAY,kBAAkB,MAAM,IAAI;EAC9C,OAAO,cAAc,MAAM,EAAE,YAAY,aAAa,KAAK,CAAC;CAC7D;AACD,CAAC;AAED,MAAa,2BAA2B,WAAW;CAClD,IAAI;CACJ,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS,OAAO,UAAU;EACzB,MAAM,YAAY,uBAAuB,MAAM,UAAU;EACzD,OAAO,mBAAmB,MAAM,EAAE,WAAW,aAAa,KAAK,CAAC;CACjE;AACD,CAAC;AAED,MAAa,4BAA4B,WAAW;CACnD,IAAI;CACJ,MAAM;CACN,aACC;CACD,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS,OAAO,UAAU;EACzB,OAAO,uBAAuB,MAAM,EACnC,YAAY,CAAC,GAAG,2BAA2B,MAAM,UAAU,CAAC,EAC7D,CAAC;CACF;AACD,CAAC;AAED,MAAa,oBAAoB,aAAa;CAC7C,IAAI;CACJ,OAAO;CACP,aAAa;CACb,SAAS;CACT,MAAM,EAAE,MAAM,OAAO;CACrB,YAAY,CAAC,WAAW,SAAS;CACjC,gBAAgB;CAChB,MAAM,CAAC,QAAQ,MAAM;CACrB,OAAO;EAAC;EAAoB;EAA0B;CAAyB;AAChF,CAAC"}

package/dist/modules/crypto/index.d.ts

@@ -0,0 +1,115 @@
+import { a as ModuleDefinition, s as ToolDefinition } from "../../types-Ccb0DXY9.js";
+import "../../index-CZX5OeOF.js";
+import { z } from "zod";
+//#region src/modules/crypto/contracts.d.ts
+declare const MAX_CRYPTO_INPUT_CHARS = 1400000;
+declare const cryptoAuthSchema: z.ZodObject<{
+  hmac_keys: z.ZodRecord<z.ZodString, z.ZodString>;
+}, z.core.$strip>;
+declare const cryptoAlgorithmSchema: z.ZodEnum<{
+  "SHA-256": "SHA-256";
+  "SHA-384": "SHA-384";
+  "SHA-512": "SHA-512";
+}>;
+declare const cryptoHashInputSchema: z.ZodObject<{
+  body: z.ZodString;
+  encoding: z.ZodEnum<{
+    base64: "base64";
+    utf8: "utf8";
+  }>;
+  algorithm: z.ZodEnum<{
+    "SHA-256": "SHA-256";
+    "SHA-384": "SHA-384";
+    "SHA-512": "SHA-512";
+  }>;
+}, z.core.$strip>;
+declare const cryptoHashOutputSchema: z.ZodObject<{
+  digest_base64: z.ZodString;
+}, z.core.$strip>;
+declare const cryptoHmacSignInputSchema: z.ZodObject<{
+  body: z.ZodString;
+  encoding: z.ZodEnum<{
+    base64: "base64";
+    utf8: "utf8";
+  }>;
+  key_id: z.ZodString;
+  algorithm: z.ZodEnum<{
+    "SHA-256": "SHA-256";
+    "SHA-384": "SHA-384";
+    "SHA-512": "SHA-512";
+  }>;
+}, z.core.$strip>;
+declare const cryptoHmacSignOutputSchema: z.ZodObject<{
+  signature_base64: z.ZodString;
+}, z.core.$strip>;
+declare const cryptoHmacVerifyInputSchema: z.ZodObject<{
+  body: z.ZodString;
+  encoding: z.ZodEnum<{
+    base64: "base64";
+    utf8: "utf8";
+  }>;
+  key_id: z.ZodString;
+  algorithm: z.ZodEnum<{
+    "SHA-256": "SHA-256";
+    "SHA-384": "SHA-384";
+    "SHA-512": "SHA-512";
+  }>;
+  signature_base64: z.ZodString;
+}, z.core.$strip>;
+declare const cryptoHmacVerifyOutputSchema: z.ZodObject<{
+  valid: z.ZodBoolean;
+}, z.core.$strip>;
+declare const cryptoRandomBytesInputSchema: z.ZodObject<{
+  byte_length: z.ZodInt;
+}, z.core.$strip>;
+declare const cryptoRandomBytesOutputSchema: z.ZodObject<{
+  body_base64: z.ZodString;
+}, z.core.$strip>;
+type CryptoAuth = z.infer<typeof cryptoAuthSchema>;
+type CryptoAlgorithm = z.infer<typeof cryptoAlgorithmSchema>;
+type CryptoHashInput = z.infer<typeof cryptoHashInputSchema>;
+type CryptoHmacSignInput = z.infer<typeof cryptoHmacSignInputSchema>;
+type CryptoHmacVerifyInput = z.infer<typeof cryptoHmacVerifyInputSchema>;
+type CryptoRandomBytesInput = z.infer<typeof cryptoRandomBytesInputSchema>;
+//#endregion
+//#region src/modules/crypto/domain.d.ts
+declare function hashData(input: CryptoHashInput): Promise<string>;
+declare function signHmac(auth: CryptoAuth, input: CryptoHmacSignInput): Promise<string>;
+declare function verifyHmac(auth: CryptoAuth, input: CryptoHmacVerifyInput): Promise<boolean>;
+//#endregion
+//#region src/modules/crypto/module.d.ts
+declare const cryptoHashTool: ToolDefinition<{
+  body: string;
+  encoding: "base64" | "utf8";
+  algorithm: "SHA-256" | "SHA-384" | "SHA-512";
+}, {
+  digest_base64: string;
+}>;
+declare const cryptoHmacSignTool: ToolDefinition<{
+  body: string;
+  encoding: "base64" | "utf8";
+  key_id: string;
+  algorithm: "SHA-256" | "SHA-384" | "SHA-512";
+}, {
+  signature_base64: string;
+}>;
+declare const cryptoHmacVerifyTool: ToolDefinition<{
+  body: string;
+  encoding: "base64" | "utf8";
+  key_id: string;
+  algorithm: "SHA-256" | "SHA-384" | "SHA-512";
+  signature_base64: string;
+}, {
+  valid: boolean;
+}>;
+declare const cryptoRandomBytesTool: ToolDefinition<{
+  byte_length: number;
+}, {
+  body_base64: string;
+}>;
+declare const cryptoModule: ModuleDefinition<{
+  hmac_keys: Record<string, string>;
+}>;
+//#endregion
+export { type CryptoAlgorithm, type CryptoAuth, type CryptoHashInput, type CryptoHmacSignInput, type CryptoHmacVerifyInput, type CryptoRandomBytesInput, MAX_CRYPTO_INPUT_CHARS, cryptoAlgorithmSchema, cryptoAuthSchema, cryptoHashInputSchema, cryptoHashOutputSchema, cryptoHashTool, cryptoHmacSignInputSchema, cryptoHmacSignOutputSchema, cryptoHmacSignTool, cryptoHmacVerifyInputSchema, cryptoHmacVerifyOutputSchema, cryptoHmacVerifyTool, cryptoModule, cryptoRandomBytesInputSchema, cryptoRandomBytesOutputSchema, cryptoRandomBytesTool, hashData, signHmac, verifyHmac };
+//# sourceMappingURL=index.d.ts.map

package/dist/modules/crypto/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/modules/crypto/contracts.ts","../../../src/modules/crypto/domain.ts","../../../src/modules/crypto/module.ts"],"mappings":";;;;cAEa;cAEA,kBAAgB,EAAA;;GAE3B,EAAA,KAAA;cAEW,uBAAqB,EAAA;;;;;cAOrB,uBAAqB,EAAA;;;;;;;;;;;GAEhC,EAAA,KAAA;cAEW,wBAAsB,EAAA;;GAEjC,EAAA,KAAA;cAEW,2BAAyB,EAAA;;;;;;;;;;;;GAGpC,EAAA,KAAA;cAEW,4BAA0B,EAAA;;GAErC,EAAA,KAAA;cAEW,6BAA2B,EAAA;;;;;;;;;;;;;GAEtC,EAAA,KAAA;cAEW,8BAA4B,EAAA;;GAEvC,EAAA,KAAA;cAEW,8BAA4B,EAAA;;GAEvC,EAAA,KAAA;cAEW,+BAA6B,EAAA;;GAExC,EAAA,KAAA;KAEU,aAAa,EAAE,aAAa;KAC5B,kBAAkB,EAAE,aAAa;KACjC,kBAAkB,EAAE,aAAa;KACjC,sBAAsB,EAAE,aAAa;KACrC,wBAAwB,EAAE,aAAa;KACvC,yBAAyB,EAAE,aAAa;;;iBCjB9B,SAAS,OAAO,kBAAkB;iBAKlC,SAAS,MAAM,YAAY,OAAO,sBAAsB;iBAMxD,WAAW,MAAM,YAAY,OAAO,wBAAwB;;;cC/BrE,gBAAA;;;;;;;cAWA,oBAAA;;;;;;;;cAcA,sBAAA;;;;;;;;;cAcA,uBAAA;;;;;cAcA,cAAA;aAAA"}

package/dist/modules/crypto/index.js

@@ -0,0 +1,139 @@
+import { t as ToolError } from "../../errors-DoSpNHvs.js";
+import { n as defineModule, r as defineTool } from "../../define-CvpJ_pNP.js";
+import { n as requireAuth } from "../../provider-CgDAlg6K.js";
+import { a as toArrayBuffer, n as bytesToBase64, o as utf8ToBytes, t as base64ToBytes } from "../../bytes-BxpimpQx.js";
+import { z } from "zod";
+//#region src/modules/crypto/contracts.ts
+const MAX_CRYPTO_INPUT_CHARS = 14e5;
+const cryptoAuthSchema = z.object({ hmac_keys: z.record(z.string().min(1), z.string().min(1)).describe("Base64 HMAC keys indexed by host-defined id") });
+const cryptoAlgorithmSchema = z.enum([
+	"SHA-256",
+	"SHA-384",
+	"SHA-512"
+]);
+const encodedBodySchema = z.object({
+	body: z.string().max(MAX_CRYPTO_INPUT_CHARS).describe("Data encoded as specified by encoding"),
+	encoding: z.enum(["utf8", "base64"]).describe("How body is encoded")
+});
+const cryptoHashInputSchema = encodedBodySchema.extend({ algorithm: cryptoAlgorithmSchema.describe("SHA-2 digest algorithm") });
+const cryptoHashOutputSchema = z.object({ digest_base64: z.string().describe("Digest encoded as base64") });
+const cryptoHmacSignInputSchema = encodedBodySchema.extend({
+	key_id: z.string().min(1).describe("Identifier of a bound signing key"),
+	algorithm: cryptoAlgorithmSchema.describe("SHA-2 HMAC algorithm")
+});
+const cryptoHmacSignOutputSchema = z.object({ signature_base64: z.string().describe("HMAC signature encoded as base64") });
+const cryptoHmacVerifyInputSchema = cryptoHmacSignInputSchema.extend({ signature_base64: z.string().min(1).describe("Base64 HMAC signature to verify") });
+const cryptoHmacVerifyOutputSchema = z.object({ valid: z.boolean() });
+const cryptoRandomBytesInputSchema = z.object({ byte_length: z.int().min(1).max(4096).describe("Number of random bytes to generate") });
+const cryptoRandomBytesOutputSchema = z.object({ body_base64: z.string().describe("Random bytes encoded as base64") });
+//#endregion
+//#region src/modules/crypto/domain.ts
+function bodyBytes(input) {
+	return input.encoding === "base64" ? base64ToBytes(input.body) : utf8ToBytes(input.body);
+}
+function keyBytes(auth, keyId) {
+	const value = auth.hmac_keys[keyId];
+	if (!value) throw new ToolError("HMAC key id is not bound", {
+		code: "not_found",
+		details: { key_id: keyId }
+	});
+	return base64ToBytes(value);
+}
+async function importHmacKey(auth, keyId, algorithm) {
+	try {
+		return await crypto.subtle.importKey("raw", toArrayBuffer(keyBytes(auth, keyId)), {
+			name: "HMAC",
+			hash: algorithm
+		}, false, ["sign", "verify"]);
+	} catch (error) {
+		throw new ToolError("Failed to load HMAC key", {
+			code: "bad_auth",
+			cause: error
+		});
+	}
+}
+async function hashData(input) {
+	const digest = await crypto.subtle.digest(input.algorithm, toArrayBuffer(bodyBytes(input)));
+	return bytesToBase64(new Uint8Array(digest));
+}
+async function signHmac(auth, input) {
+	const key = await importHmacKey(auth, input.key_id, input.algorithm);
+	const signature = await crypto.subtle.sign("HMAC", key, toArrayBuffer(bodyBytes(input)));
+	return bytesToBase64(new Uint8Array(signature));
+}
+async function verifyHmac(auth, input) {
+	const key = await importHmacKey(auth, input.key_id, input.algorithm);
+	try {
+		return await crypto.subtle.verify("HMAC", key, toArrayBuffer(base64ToBytes(input.signature_base64)), toArrayBuffer(bodyBytes(input)));
+	} catch {
+		return false;
+	}
+}
+//#endregion
+//#region src/modules/crypto/module.ts
+const cryptoHashTool = defineTool({
+	id: "crypto-hash",
+	name: "hashData",
+	description: "Compute a SHA-256, SHA-384, or SHA-512 digest for UTF-8 or base64 input.",
+	inputSchema: cryptoHashInputSchema,
+	outputSchema: cryptoHashOutputSchema,
+	sideEffect: "none",
+	runtime: "both",
+	execute: async (input) => cryptoHashOutputSchema.parse({ digest_base64: await hashData(input) })
+});
+const cryptoHmacSignTool = defineTool({
+	id: "crypto-hmac-sign",
+	name: "signHmac",
+	description: "Create an HMAC signature with a bound key id and the selected SHA-2 algorithm.",
+	inputSchema: cryptoHmacSignInputSchema,
+	outputSchema: cryptoHmacSignOutputSchema,
+	sideEffect: "none",
+	runtime: "both",
+	execute: async (input, ctx) => cryptoHmacSignOutputSchema.parse({ signature_base64: await signHmac(requireAuth(ctx, cryptoAuthSchema), input) })
+});
+const cryptoHmacVerifyTool = defineTool({
+	id: "crypto-hmac-verify",
+	name: "verifyHmac",
+	description: "Verify a base64 HMAC signature with a bound key id and the selected SHA-2 algorithm.",
+	inputSchema: cryptoHmacVerifyInputSchema,
+	outputSchema: cryptoHmacVerifyOutputSchema,
+	sideEffect: "none",
+	runtime: "both",
+	execute: async (input, ctx) => cryptoHmacVerifyOutputSchema.parse({ valid: await verifyHmac(requireAuth(ctx, cryptoAuthSchema), input) })
+});
+const cryptoRandomBytesTool = defineTool({
+	id: "crypto-random-bytes",
+	name: "generateRandomBytes",
+	description: "Generate up to 4096 cryptographically secure random bytes and return them as base64.",
+	inputSchema: cryptoRandomBytesInputSchema,
+	outputSchema: cryptoRandomBytesOutputSchema,
+	sideEffect: "none",
+	runtime: "both",
+	execute: async (input) => {
+		const bytes = crypto.getRandomValues(new Uint8Array(input.byte_length));
+		return cryptoRandomBytesOutputSchema.parse({ body_base64: bytesToBase64(bytes) });
+	}
+});
+const cryptoModule = defineModule({
+	id: "crypto",
+	title: "Crypto",
+	description: "Hash data, sign and verify HMAC values, and generate secure random bytes.",
+	runtime: "both",
+	auth: {
+		type: "custom",
+		schema: cryptoAuthSchema
+	},
+	categories: ["security", "utility"],
+	classification: "standard",
+	tags: ["digest", "hmac"],
+	tools: [
+		cryptoHashTool,
+		cryptoHmacSignTool,
+		cryptoHmacVerifyTool,
+		cryptoRandomBytesTool
+	]
+});
+//#endregion
+export { MAX_CRYPTO_INPUT_CHARS, cryptoAlgorithmSchema, cryptoAuthSchema, cryptoHashInputSchema, cryptoHashOutputSchema, cryptoHashTool, cryptoHmacSignInputSchema, cryptoHmacSignOutputSchema, cryptoHmacSignTool, cryptoHmacVerifyInputSchema, cryptoHmacVerifyOutputSchema, cryptoHmacVerifyTool, cryptoModule, cryptoRandomBytesInputSchema, cryptoRandomBytesOutputSchema, cryptoRandomBytesTool, hashData, signHmac, verifyHmac };
+
+//# sourceMappingURL=index.js.map

package/dist/modules/crypto/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/modules/crypto/contracts.ts","../../../src/modules/crypto/domain.ts","../../../src/modules/crypto/module.ts"],"sourcesContent":["import { z } from 'zod'\n\nexport const MAX_CRYPTO_INPUT_CHARS = 1_400_000\n\nexport const cryptoAuthSchema = z.object({\n\thmac_keys: z.record(z.string().min(1), z.string().min(1)).describe('Base64 HMAC keys indexed by host-defined id')\n})\n\nexport const cryptoAlgorithmSchema = z.enum(['SHA-256', 'SHA-384', 'SHA-512'])\n\nconst encodedBodySchema = z.object({\n\tbody: z.string().max(MAX_CRYPTO_INPUT_CHARS).describe('Data encoded as specified by encoding'),\n\tencoding: z.enum(['utf8', 'base64']).describe('How body is encoded')\n})\n\nexport const cryptoHashInputSchema = encodedBodySchema.extend({\n\talgorithm: cryptoAlgorithmSchema.describe('SHA-2 digest algorithm')\n})\n\nexport const cryptoHashOutputSchema = z.object({\n\tdigest_base64: z.string().describe('Digest encoded as base64')\n})\n\nexport const cryptoHmacSignInputSchema = encodedBodySchema.extend({\n\tkey_id: z.string().min(1).describe('Identifier of a bound signing key'),\n\talgorithm: cryptoAlgorithmSchema.describe('SHA-2 HMAC algorithm')\n})\n\nexport const cryptoHmacSignOutputSchema = z.object({\n\tsignature_base64: z.string().describe('HMAC signature encoded as base64')\n})\n\nexport const cryptoHmacVerifyInputSchema = cryptoHmacSignInputSchema.extend({\n\tsignature_base64: z.string().min(1).describe('Base64 HMAC signature to verify')\n})\n\nexport const cryptoHmacVerifyOutputSchema = z.object({\n\tvalid: z.boolean()\n})\n\nexport const cryptoRandomBytesInputSchema = z.object({\n\tbyte_length: z.int().min(1).max(4_096).describe('Number of random bytes to generate')\n})\n\nexport const cryptoRandomBytesOutputSchema = z.object({\n\tbody_base64: z.string().describe('Random bytes encoded as base64')\n})\n\nexport type CryptoAuth = z.infer<typeof cryptoAuthSchema>\nexport type CryptoAlgorithm = z.infer<typeof cryptoAlgorithmSchema>\nexport type CryptoHashInput = z.infer<typeof cryptoHashInputSchema>\nexport type CryptoHmacSignInput = z.infer<typeof cryptoHmacSignInputSchema>\nexport type CryptoHmacVerifyInput = z.infer<typeof cryptoHmacVerifyInputSchema>\nexport type CryptoRandomBytesInput = z.infer<typeof cryptoRandomBytesInputSchema>\n","import { ToolError } from '../../core/errors'\nimport { base64ToBytes, bytesToBase64, toArrayBuffer, utf8ToBytes } from '../../shared/bytes'\nimport type {\n\tCryptoAlgorithm,\n\tCryptoAuth,\n\tCryptoHashInput,\n\tCryptoHmacSignInput,\n\tCryptoHmacVerifyInput\n} from './contracts'\n\nfunction bodyBytes(input: { body: string; encoding: 'utf8' | 'base64' }): Uint8Array {\n\treturn input.encoding === 'base64' ? base64ToBytes(input.body) : utf8ToBytes(input.body)\n}\n\nfunction keyBytes(auth: CryptoAuth, keyId: string): Uint8Array {\n\tconst value = auth.hmac_keys[keyId]\n\tif (!value) {\n\t\tthrow new ToolError('HMAC key id is not bound', { code: 'not_found', details: { key_id: keyId } })\n\t}\n\treturn base64ToBytes(value)\n}\n\nasync function importHmacKey(auth: CryptoAuth, keyId: string, algorithm: CryptoAlgorithm): Promise<CryptoKey> {\n\ttry {\n\t\treturn await crypto.subtle.importKey(\n\t\t\t'raw',\n\t\t\ttoArrayBuffer(keyBytes(auth, keyId)),\n\t\t\t{ name: 'HMAC', hash: algorithm },\n\t\t\tfalse,\n\t\t\t['sign', 'verify']\n\t\t)\n\t} catch (error) {\n\t\tthrow new ToolError('Failed to load HMAC key', { code: 'bad_auth', cause: error })\n\t}\n}\n\nexport async function hashData(input: CryptoHashInput): Promise<string> {\n\tconst digest = await crypto.subtle.digest(input.algorithm, toArrayBuffer(bodyBytes(input)))\n\treturn bytesToBase64(new Uint8Array(digest))\n}\n\nexport async function signHmac(auth: CryptoAuth, input: CryptoHmacSignInput): Promise<string> {\n\tconst key = await importHmacKey(auth, input.key_id, input.algorithm)\n\tconst signature = await crypto.subtle.sign('HMAC', key, toArrayBuffer(bodyBytes(input)))\n\treturn bytesToBase64(new Uint8Array(signature))\n}\n\nexport async function verifyHmac(auth: CryptoAuth, input: CryptoHmacVerifyInput): Promise<boolean> {\n\tconst key = await importHmacKey(auth, input.key_id, input.algorithm)\n\ttry {\n\t\treturn await crypto.subtle.verify(\n\t\t\t'HMAC',\n\t\t\tkey,\n\t\t\ttoArrayBuffer(base64ToBytes(input.signature_base64)),\n\t\t\ttoArrayBuffer(bodyBytes(input))\n\t\t)\n\t} catch {\n\t\treturn false\n\t}\n}\n","import { requireAuth } from '../../core/provider'\nimport { defineModule, defineTool } from '../../core/define'\nimport { bytesToBase64 } from '../../shared/bytes'\nimport {\n\tcryptoAuthSchema,\n\tcryptoHashInputSchema,\n\tcryptoHashOutputSchema,\n\tcryptoHmacSignInputSchema,\n\tcryptoHmacSignOutputSchema,\n\tcryptoHmacVerifyInputSchema,\n\tcryptoHmacVerifyOutputSchema,\n\tcryptoRandomBytesInputSchema,\n\tcryptoRandomBytesOutputSchema\n} from './contracts'\nimport { hashData, signHmac, verifyHmac } from './domain'\n\nexport const cryptoHashTool = defineTool({\n\tid: 'crypto-hash',\n\tname: 'hashData',\n\tdescription: 'Compute a SHA-256, SHA-384, or SHA-512 digest for UTF-8 or base64 input.',\n\tinputSchema: cryptoHashInputSchema,\n\toutputSchema: cryptoHashOutputSchema,\n\tsideEffect: 'none',\n\truntime: 'both',\n\texecute: async (input) => cryptoHashOutputSchema.parse({ digest_base64: await hashData(input) })\n})\n\nexport const cryptoHmacSignTool = defineTool({\n\tid: 'crypto-hmac-sign',\n\tname: 'signHmac',\n\tdescription: 'Create an HMAC signature with a bound key id and the selected SHA-2 algorithm.',\n\tinputSchema: cryptoHmacSignInputSchema,\n\toutputSchema: cryptoHmacSignOutputSchema,\n\tsideEffect: 'none',\n\truntime: 'both',\n\texecute: async (input, ctx) =>\n\t\tcryptoHmacSignOutputSchema.parse({\n\t\t\tsignature_base64: await signHmac(requireAuth(ctx, cryptoAuthSchema), input)\n\t\t})\n})\n\nexport const cryptoHmacVerifyTool = defineTool({\n\tid: 'crypto-hmac-verify',\n\tname: 'verifyHmac',\n\tdescription: 'Verify a base64 HMAC signature with a bound key id and the selected SHA-2 algorithm.',\n\tinputSchema: cryptoHmacVerifyInputSchema,\n\toutputSchema: cryptoHmacVerifyOutputSchema,\n\tsideEffect: 'none',\n\truntime: 'both',\n\texecute: async (input, ctx) =>\n\t\tcryptoHmacVerifyOutputSchema.parse({\n\t\t\tvalid: await verifyHmac(requireAuth(ctx, cryptoAuthSchema), input)\n\t\t})\n})\n\nexport const cryptoRandomBytesTool = defineTool({\n\tid: 'crypto-random-bytes',\n\tname: 'generateRandomBytes',\n\tdescription: 'Generate up to 4096 cryptographically secure random bytes and return them as base64.',\n\tinputSchema: cryptoRandomBytesInputSchema,\n\toutputSchema: cryptoRandomBytesOutputSchema,\n\tsideEffect: 'none',\n\truntime: 'both',\n\texecute: async (input) => {\n\t\tconst bytes = crypto.getRandomValues(new Uint8Array(input.byte_length))\n\t\treturn cryptoRandomBytesOutputSchema.parse({ body_base64: bytesToBase64(bytes) })\n\t}\n})\n\nexport const cryptoModule = defineModule({\n\tid: 'crypto',\n\ttitle: 'Crypto',\n\tdescription: 'Hash data, sign and verify HMAC values, and generate secure random bytes.',\n\truntime: 'both',\n\tauth: { type: 'custom', schema: cryptoAuthSchema },\n\tcategories: ['security', 'utility'],\n\tclassification: 'standard',\n\ttags: ['digest', 'hmac'],\n\ttools: [cryptoHashTool, cryptoHmacSignTool, cryptoHmacVerifyTool, cryptoRandomBytesTool]\n})\n"],"mappings":";;;;;;AAEA,MAAa,yBAAyB;AAEtC,MAAa,mBAAmB,EAAE,OAAO,EACxC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,6CAA6C,EACjH,CAAC;AAED,MAAa,wBAAwB,EAAE,KAAK;CAAC;CAAW;CAAW;AAAS,CAAC;AAE7E,MAAM,oBAAoB,EAAE,OAAO;CAClC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,sBAAsB,CAAC,CAAC,SAAS,uCAAuC;CAC7F,UAAU,EAAE,KAAK,CAAC,QAAQ,QAAQ,CAAC,CAAC,CAAC,SAAS,qBAAqB;AACpE,CAAC;AAED,MAAa,wBAAwB,kBAAkB,OAAO,EAC7D,WAAW,sBAAsB,SAAS,wBAAwB,EACnE,CAAC;AAED,MAAa,yBAAyB,EAAE,OAAO,EAC9C,eAAe,EAAE,OAAO,CAAC,CAAC,SAAS,0BAA0B,EAC9D,CAAC;AAED,MAAa,4BAA4B,kBAAkB,OAAO;CACjE,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,mCAAmC;CACtE,WAAW,sBAAsB,SAAS,sBAAsB;AACjE,CAAC;AAED,MAAa,6BAA6B,EAAE,OAAO,EAClD,kBAAkB,EAAE,OAAO,CAAC,CAAC,SAAS,kCAAkC,EACzE,CAAC;AAED,MAAa,8BAA8B,0BAA0B,OAAO,EAC3E,kBAAkB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,iCAAiC,EAC/E,CAAC;AAED,MAAa,+BAA+B,EAAE,OAAO,EACpD,OAAO,EAAE,QAAQ,EAClB,CAAC;AAED,MAAa,+BAA+B,EAAE,OAAO,EACpD,aAAa,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAK,CAAC,CAAC,SAAS,oCAAoC,EACrF,CAAC;AAED,MAAa,gCAAgC,EAAE,OAAO,EACrD,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS,gCAAgC,EAClE,CAAC;;;ACpCD,SAAS,UAAU,OAAkE;CACpF,OAAO,MAAM,aAAa,WAAW,cAAc,MAAM,IAAI,IAAI,YAAY,MAAM,IAAI;AACxF;AAEA,SAAS,SAAS,MAAkB,OAA2B;CAC9D,MAAM,QAAQ,KAAK,UAAU;CAC7B,IAAI,CAAC,OACJ,MAAM,IAAI,UAAU,4BAA4B;EAAE,MAAM;EAAa,SAAS,EAAE,QAAQ,MAAM;CAAE,CAAC;CAElG,OAAO,cAAc,KAAK;AAC3B;AAEA,eAAe,cAAc,MAAkB,OAAe,WAAgD;CAC7G,IAAI;EACH,OAAO,MAAM,OAAO,OAAO,UAC1B,OACA,cAAc,SAAS,MAAM,KAAK,CAAC,GACnC;GAAE,MAAM;GAAQ,MAAM;EAAU,GAChC,OACA,CAAC,QAAQ,QAAQ,CAClB;CACD,SAAS,OAAO;EACf,MAAM,IAAI,UAAU,2BAA2B;GAAE,MAAM;GAAY,OAAO;EAAM,CAAC;CAClF;AACD;AAEA,eAAsB,SAAS,OAAyC;CACvE,MAAM,SAAS,MAAM,OAAO,OAAO,OAAO,MAAM,WAAW,cAAc,UAAU,KAAK,CAAC,CAAC;CAC1F,OAAO,cAAc,IAAI,WAAW,MAAM,CAAC;AAC5C;AAEA,eAAsB,SAAS,MAAkB,OAA6C;CAC7F,MAAM,MAAM,MAAM,cAAc,MAAM,MAAM,QAAQ,MAAM,SAAS;CACnE,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,cAAc,UAAU,KAAK,CAAC,CAAC;CACvF,OAAO,cAAc,IAAI,WAAW,SAAS,CAAC;AAC/C;AAEA,eAAsB,WAAW,MAAkB,OAAgD;CAClG,MAAM,MAAM,MAAM,cAAc,MAAM,MAAM,QAAQ,MAAM,SAAS;CACnE,IAAI;EACH,OAAO,MAAM,OAAO,OAAO,OAC1B,QACA,KACA,cAAc,cAAc,MAAM,gBAAgB,CAAC,GACnD,cAAc,UAAU,KAAK,CAAC,CAC/B;CACD,QAAQ;EACP,OAAO;CACR;AACD;;;AC3CA,MAAa,iBAAiB,WAAW;CACxC,IAAI;CACJ,MAAM;CACN,aAAa;CACb,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS,OAAO,UAAU,uBAAuB,MAAM,EAAE,eAAe,MAAM,SAAS,KAAK,EAAE,CAAC;AAChG,CAAC;AAED,MAAa,qBAAqB,WAAW;CAC5C,IAAI;CACJ,MAAM;CACN,aAAa;CACb,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS,OAAO,OAAO,QACtB,2BAA2B,MAAM,EAChC,kBAAkB,MAAM,SAAS,YAAY,KAAK,gBAAgB,GAAG,KAAK,EAC3E,CAAC;AACH,CAAC;AAED,MAAa,uBAAuB,WAAW;CAC9C,IAAI;CACJ,MAAM;CACN,aAAa;CACb,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS,OAAO,OAAO,QACtB,6BAA6B,MAAM,EAClC,OAAO,MAAM,WAAW,YAAY,KAAK,gBAAgB,GAAG,KAAK,EAClE,CAAC;AACH,CAAC;AAED,MAAa,wBAAwB,WAAW;CAC/C,IAAI;CACJ,MAAM;CACN,aAAa;CACb,aAAa;CACb,cAAc;CACd,YAAY;CACZ,SAAS;CACT,SAAS,OAAO,UAAU;EACzB,MAAM,QAAQ,OAAO,gBAAgB,IAAI,WAAW,MAAM,WAAW,CAAC;EACtE,OAAO,8BAA8B,MAAM,EAAE,aAAa,cAAc,KAAK,EAAE,CAAC;CACjF;AACD,CAAC;AAED,MAAa,eAAe,aAAa;CACxC,IAAI;CACJ,OAAO;CACP,aAAa;CACb,SAAS;CACT,MAAM;EAAE,MAAM;EAAU,QAAQ;CAAiB;CACjD,YAAY,CAAC,YAAY,SAAS;CAClC,gBAAgB;CAChB,MAAM,CAAC,UAAU,MAAM;CACvB,OAAO;EAAC;EAAgB;EAAoB;EAAsB;CAAqB;AACxF,CAAC"}