@a1hvdy/cc-openclaw 0.3.2

package/dist/src/types.d.ts

@@ -0,0 +1,489 @@
+/**
+ * Shared types for openclaw-claude-code plugin
+ */
+import type { ModelPricing, ProviderName, ModelDef } from './models.js';
+export type { ModelPricing, ProviderName, ModelDef };
+export { getModelPricing, overrideModelPricing, _resetPricingOverrides, getModelList, resolveAlias, resolveEngineAndModel, resolveProvider, getContextWindow, isGeminiModel, isClaudeModel, estimateTokens, lookupModelStrict, getAliases, } from './models.js';
+export declare const MODEL_ALIASES: Record<string, string>;
+export type PermissionMode = 'acceptEdits' | 'bypassPermissions' | 'default' | 'delegate' | 'dontAsk' | 'plan' | 'auto';
+export type EffortLevel = 'low' | 'medium' | 'high' | 'max' | 'auto';
+export type EngineType = 'claude' | 'codex' | 'gemini' | 'cursor' | 'custom';
+export interface CustomEngineConfig {
+    /** Display name for this engine (used in logs and session IDs) */
+    name: string;
+    /** Binary path or command name, e.g. 'my-agent' or '/usr/local/bin/my-agent' */
+    bin: string;
+    /**
+     * Environment variable name that overrides `bin` at runtime.
+     * e.g. 'MY_AGENT_BIN' — the value of that env var takes precedence over `bin`.
+     */
+    binEnv?: string;
+    /**
+     * true  = persistent subprocess (Claude Code style: start once, JSON I/O on stdin/stdout)
+     * false = one-shot per send (Gemini/Codex style: spawn per message)
+     * @default false
+     */
+    persistent?: boolean;
+    /**
+     * CLI flag mappings. Each key is an OpenClaw concept; the value is the CLI
+     * flag string your agent expects. Omit any flag your CLI doesn't support.
+     *
+     * Example for a Claude Code-compatible CLI:
+     * ```json
+     * {
+     *   "print": "-p",
+     *   "outputFormat": "--output-format",
+     *   "outputFormatValue": "stream-json",
+     *   "inputFormat": "--input-format",
+     *   "inputFormatValue": "stream-json",
+     *   "skipPermissions": "-y",
+     *   "permissionMode": "--permission-mode",
+     *   "model": "--model",
+     *   "systemPrompt": "--system-prompt",
+     *   "appendSystemPrompt": "--append-system-prompt",
+     *   "maxTurns": "--max-turns",
+     *   "resume": "--resume",
+     *   "verbose": "--verbose",
+     *   "replayUserMessages": "--replay-user-messages",
+     *   "includePartialMessages": "--include-partial-messages"
+     * }
+     * ```
+     */
+    args: {
+        /** Flag for non-interactive / print mode, e.g. '-p' */
+        print?: string;
+        /** Flag for output format, e.g. '--output-format' */
+        outputFormat?: string;
+        /** Value for stream-json output format, e.g. 'stream-json' */
+        outputFormatValue?: string;
+        /** Flag for input format (persistent mode only), e.g. '--input-format' */
+        inputFormat?: string;
+        /** Value for stream-json input format, e.g. 'stream-json' */
+        inputFormatValue?: string;
+        /** Flag to skip all permissions, e.g. '-y' or '--dangerously-skip-permissions' */
+        skipPermissions?: string;
+        /** Flag for permission mode, e.g. '--permission-mode' */
+        permissionMode?: string;
+        /** Flag for model selection, e.g. '--model' */
+        model?: string;
+        /** Flag for system prompt override, e.g. '--system-prompt' */
+        systemPrompt?: string;
+        /** Flag for appending to system prompt, e.g. '--append-system-prompt' */
+        appendSystemPrompt?: string;
+        /** Flag for max agent turns, e.g. '--max-turns' */
+        maxTurns?: string;
+        /** Flag for resuming a session, e.g. '--resume' */
+        resume?: string;
+        /** Flag for verbose output, e.g. '--verbose' */
+        verbose?: string;
+        /** Flag for replaying user messages, e.g. '--replay-user-messages' (persistent only) */
+        replayUserMessages?: string;
+        /** Flag for including partial messages, e.g. '--include-partial-messages' (persistent only) */
+        includePartialMessages?: string;
+        /** Flag for effort level, e.g. '--effort' */
+        effort?: string;
+        /** Flag for workspace/cwd, e.g. '--workspace' (one-shot only; overrides cwd) */
+        workspace?: string;
+        /** Additional static arguments always appended to the CLI invocation */
+        extra?: string[];
+    };
+    /**
+     * Maps OpenClaw permission mode names to CLI-specific values.
+     * e.g. { bypassPermissions: 'yolo', default: 'sandbox' }
+     * If omitted, mode names are passed through as-is.
+     */
+    permissionModes?: Record<string, string>;
+    /**
+     * Default pricing per 1M tokens (for cost estimation when model is unknown).
+     * Falls back to { input: 0, output: 0 } if omitted.
+     */
+    pricing?: {
+        input: number;
+        output: number;
+        cached?: number;
+    };
+    /** Context window size in tokens. @default 200000 */
+    contextWindow?: number;
+    /** Extra environment variables to set when spawning the CLI process */
+    env?: Record<string, string>;
+    /**
+     * Regex patterns to sanitize from stderr output (e.g. API key patterns).
+     * Applied as global replacements with '***'.
+     */
+    sanitizePatterns?: string[];
+}
+export interface SessionConfig {
+    name: string;
+    cwd: string;
+    engine?: EngineType;
+    model?: string;
+    baseUrl?: string;
+    permissionMode: PermissionMode;
+    allowedTools?: string[];
+    disallowedTools?: string[];
+    tools?: string[];
+    maxTurns?: number;
+    maxBudgetUsd?: number;
+    systemPrompt?: string;
+    appendSystemPrompt?: string;
+    dangerouslySkipPermissions?: boolean;
+    agents?: Record<string, {
+        description?: string;
+        prompt: string;
+    }>;
+    agent?: string;
+    customSessionId?: string;
+    sessionName?: string;
+    claudeResumeId?: string;
+    resumeSessionId?: string;
+    forkSession?: boolean;
+    addDir?: string[];
+    effort?: EffortLevel;
+    modelOverrides?: Record<string, string>;
+    enableAutoMode?: boolean;
+    resolvedModel?: string;
+    bare?: boolean;
+    worktree?: string | boolean;
+    fallbackModel?: string;
+    jsonSchema?: string;
+    mcpConfig?: string | string[];
+    settings?: string;
+    noSessionPersistence?: boolean;
+    betas?: string | string[];
+    enableAgentTeams?: boolean;
+    /** Stream hook lifecycle events (PreToolUse/PostToolUse) */
+    includeHookEvents?: boolean;
+    /** Delegate permission prompts to an MCP tool for non-interactive use */
+    permissionPromptTool?: string;
+    /** Move cwd/env/git status from system prompt to user message for better prompt cache hits */
+    excludeDynamicSystemPromptSections?: boolean;
+    /** Enable debug output for specific categories (e.g. "api", "mcp") */
+    debug?: string | string[];
+    /** Write debug output to file instead of stderr */
+    debugFile?: string;
+    /** Resume session linked to a GitHub PR number or URL */
+    fromPr?: string;
+    /** MCP channel subscriptions (research preview) */
+    channels?: string | string[];
+    /** Load development MCP channels */
+    dangerouslyLoadDevelopmentChannels?: string | string[];
+    /** Enable 1-hour prompt cache TTL (vs default 5-min) */
+    enablePromptCaching1H?: boolean;
+    /** Custom engine configuration — required when engine is 'custom' */
+    customEngine?: CustomEngineConfig;
+}
+export interface SessionStats {
+    turns: number;
+    toolCalls: number;
+    toolErrors: number;
+    tokensIn: number;
+    tokensOut: number;
+    cachedTokens: number;
+    costUsd: number;
+    isReady: boolean;
+    startTime: string | null;
+    lastActivity: string | null;
+    /**
+     * Approximate context window utilization (0-100).
+     * Estimated as (tokensIn + tokensOut) / 200,000 * 100.
+     * Claude Code does not expose exact context usage via the JSON protocol,
+     * so this is a best-effort heuristic that may overcount on long conversations.
+     */
+    contextPercent: number;
+    /** Total API retry attempts during this session */
+    retries: number;
+    /** Last API retry error category (e.g. "overloaded", "rate_limit") */
+    lastRetryError?: string;
+}
+export interface HookConfig {
+    onToolError?: string;
+    onContextHigh?: string;
+    onStop?: string;
+    onTurnComplete?: string;
+    onStopFailure?: string;
+}
+export interface ActiveSession {
+    config: SessionConfig;
+    claudeSessionId?: string;
+    created: string;
+    stats: SessionStats;
+    hooks: HookConfig;
+    paused: boolean;
+    busy: boolean;
+    currentEffort?: EffortLevel;
+}
+export interface SendOptions {
+    effort?: EffortLevel;
+    plan?: boolean;
+    autoResume?: boolean;
+    timeout?: number;
+    stream?: boolean;
+    onChunk?: (chunk: string) => void;
+    onEvent?: (event: StreamEvent) => void;
+}
+export interface StreamEvent {
+    type: string;
+    subtype?: string;
+    session_id?: string;
+    message?: {
+        content?: Array<{
+            type: string;
+            text?: string;
+        }>;
+        usage?: {
+            input_tokens?: number;
+            output_tokens?: number;
+            cache_read_input_tokens?: number;
+        };
+    };
+    result?: string;
+    is_error?: boolean;
+    num_turns?: number;
+    total_cost_usd?: number;
+    [key: string]: unknown;
+}
+export interface SessionInfo {
+    name: string;
+    claudeSessionId?: string;
+    created: string;
+    cwd: string;
+    model?: string;
+    paused: boolean;
+    stats: SessionStats;
+}
+export interface SendResult {
+    output: string;
+    sessionId?: string;
+    error?: string;
+    events: StreamEvent[];
+}
+export interface GrepMatch {
+    time: string;
+    type: string;
+    content: string;
+}
+export interface AgentInfo {
+    name: string;
+    file: string;
+    description: string;
+}
+export interface SkillInfo {
+    name: string;
+    hasSkillMd: boolean;
+    description: string;
+}
+export interface RuleInfo {
+    name: string;
+    file: string;
+    description: string;
+    paths: string;
+    condition: string;
+}
+export interface SessionSendOptions {
+    effort?: EffortLevel;
+    plan?: boolean;
+    waitForComplete?: boolean;
+    timeout?: number;
+    callbacks?: StreamCallbacks;
+}
+export interface StreamCallbacks {
+    onText?: (text: string) => void;
+    onToolUse?: (event: unknown) => void;
+    onToolResult?: (event: unknown) => void;
+}
+export interface TurnResult {
+    text: string;
+    event: StreamEvent;
+}
+export interface CostBreakdown {
+    model: string;
+    tokensIn: number;
+    tokensOut: number;
+    cachedTokens: number;
+    pricing: {
+        inputPer1M: number;
+        outputPer1M: number;
+        cachedPer1M: number | undefined;
+    };
+    breakdown: {
+        inputCost: number;
+        cachedCost: number;
+        outputCost: number;
+    };
+    totalUsd: number;
+}
+export interface ISession {
+    sessionId?: string;
+    readonly pid?: number;
+    readonly isReady: boolean;
+    readonly isPaused: boolean;
+    readonly isBusy: boolean;
+    /** Initialise the engine subprocess. Engine-specific; config passed via constructor. */
+    start(): Promise<this>;
+    stop(): void;
+    pause(): void;
+    resume(): void;
+    send(message: string | unknown[], options?: SessionSendOptions): Promise<TurnResult | {
+        requestId: number;
+        sent: boolean;
+    }>;
+    getStats(): SessionStats & {
+        sessionId?: string;
+        uptime: number;
+    };
+    getHistory(limit?: number): Array<{
+        time: string;
+        type: string;
+        event: unknown;
+    }>;
+    getCost(): CostBreakdown;
+    compact(summary?: string): Promise<TurnResult | {
+        requestId: number;
+        sent: boolean;
+    }>;
+    getEffort(): EffortLevel;
+    setEffort(level: EffortLevel): void;
+    resolveModel(alias: string): string;
+    on(event: string, listener: (...args: unknown[]) => void): this;
+    once(event: string, listener: (...args: unknown[]) => void): this;
+    emit(event: string, ...args: unknown[]): boolean;
+    removeListener(event: string, listener: (...args: unknown[]) => void): this;
+}
+export interface PluginConfig {
+    claudeBin: string;
+    defaultModel?: string;
+    defaultPermissionMode: PermissionMode;
+    defaultEffort: EffortLevel;
+    maxConcurrentSessions: number;
+    sessionTtlMinutes: number;
+    proxy?: ProxyConfig;
+    /** Override or extend model pricing at runtime without a new release. */
+    pricingOverrides?: Record<string, Partial<ModelPricing>>;
+}
+export interface ProxyConfig {
+    enabled: boolean;
+    bigModel: string;
+    smallModel: string;
+}
+export interface InboxMessage {
+    from: string;
+    text: string;
+    timestamp: string;
+    read: boolean;
+    summary?: string;
+}
+export interface UltraplanResult {
+    id: string;
+    status: 'running' | 'completed' | 'error' | 'timeout';
+    plan?: string;
+    sessionName: string;
+    startTime: string;
+    endTime?: string;
+    error?: string;
+}
+export interface UltrareviewResult {
+    id: string;
+    status: 'running' | 'completed' | 'error';
+    councilId: string;
+    findings?: string;
+    agentCount: number;
+    startTime: string;
+    endTime?: string;
+    error?: string;
+}
+export type CouncilEventType = 'session-start' | 'round-start' | 'agent-start' | 'agent-chunk' | 'agent-tool' | 'agent-complete' | 'round-end' | 'complete' | 'error';
+export interface CouncilEvent {
+    type: CouncilEventType;
+    sessionId: string;
+    timestamp: string;
+    round?: number;
+    agent?: string;
+    content?: string;
+    consensus?: boolean;
+    status?: string;
+    task?: string;
+    error?: string;
+    tool?: string;
+    toolInput?: string;
+    toolStatus?: 'start' | 'end';
+}
+export interface AgentPersona {
+    name: string;
+    emoji: string;
+    persona: string;
+    engine?: EngineType;
+    role?: string;
+    model?: string;
+    baseUrl?: string;
+    permissionMode?: PermissionMode;
+    customEngine?: CustomEngineConfig;
+}
+export interface CouncilConfig {
+    name?: string;
+    agents: AgentPersona[];
+    maxRounds: number;
+    projectDir: string;
+    agentTimeoutMs?: number;
+    maxTurnsPerAgent?: number;
+    maxBudgetUsd?: number;
+    defaultPermissionMode?: PermissionMode;
+}
+export interface AgentResponse {
+    agent: string;
+    round: number;
+    content: string;
+    consensus: boolean;
+    sessionKey: string;
+    timestamp: string;
+}
+export interface CouncilSession {
+    id: string;
+    task: string;
+    config: CouncilConfig;
+    responses: AgentResponse[];
+    status: 'running' | 'consensus' | 'awaiting_user' | 'max_rounds' | 'error' | 'accepted' | 'rejected';
+    startTime: string;
+    endTime?: string;
+    finalSummary?: string;
+    compactContext?: string;
+}
+export type CouncilFileStatus = 'clean' | 'needs_rework' | 'redundant' | 'missing';
+export interface CouncilChangedFile {
+    file: string;
+    status: CouncilFileStatus;
+    insertions: number;
+    deletions: number;
+    note?: string;
+}
+export interface CouncilReviewResult {
+    councilId: string;
+    projectDir: string;
+    status: 'consensus' | 'max_rounds' | 'error';
+    rounds: number;
+    planExists: boolean;
+    planContent?: string;
+    changedFiles: CouncilChangedFile[];
+    branches: string[];
+    worktrees: string[];
+    reviews: string[];
+    agentSummaries: Array<{
+        agent: string;
+        consensus: boolean;
+        preview: string;
+    }>;
+    /** Reviewer guidance loaded from configs/council-reviewer-prompt.md */
+    reviewerGuidance: string;
+}
+export interface CouncilAcceptResult {
+    councilId: string;
+    branchesDeleted: string[];
+    worktreesRemoved: string[];
+    planDeleted: boolean;
+    reviewsDeleted: boolean;
+}
+export interface CouncilRejectResult {
+    councilId: string;
+    planRewritten: boolean;
+    feedback: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAExE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AACrD,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,YAAY,EACZ,YAAY,EACZ,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,UAAU,GACX,MAAM,aAAa,CAAC;AAGrB,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAgB,CAAC;AAIlE,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,mBAAmB,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;AAExH,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;AAIrE,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAc7E,MAAM,WAAW,kBAAkB;IACjC,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAC;IAEb,gFAAgF;IAChF,GAAG,EAAE,MAAM,CAAC;IAEZ;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,IAAI,EAAE;QACJ,uDAAuD;QACvD,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,qDAAqD;QACrD,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,8DAA8D;QAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,0EAA0E;QAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,6DAA6D;QAC7D,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,kFAAkF;QAClF,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,yDAAyD;QACzD,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,+CAA+C;QAC/C,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,8DAA8D;QAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,yEAAyE;QACzE,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,mDAAmD;QACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,mDAAmD;QACnD,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,gDAAgD;QAChD,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,wFAAwF;QACxF,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,+FAA+F;QAC/F,sBAAsB,CAAC,EAAE,MAAM,CAAC;QAChC,6CAA6C;QAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,gFAAgF;QAChF,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,wEAAwE;QACxE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;KAClB,CAAC;IAEF;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEzC;;;OAGG;IACH,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAE7D,qDAAqD;IACrD,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE7B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAID,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,cAAc,CAAC;IAE/B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAEjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAErC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAElB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAE3B,4DAA4D;IAC5D,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,yEAAyE;IACzE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,8FAA8F;IAC9F,kCAAkC,CAAC,EAAE,OAAO,CAAC;IAC7C,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC1B,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,oCAAoC;IACpC,kCAAkC,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACvD,wDAAwD;IACxD,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,qEAAqE;IACrE,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAID,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B;;;;;OAKG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,mDAAmD;IACnD,OAAO,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAID,MAAM,WAAW,UAAU;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAID,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,aAAa,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,YAAY,CAAC;IACpB,KAAK,EAAE,UAAU,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,aAAa,CAAC,EAAE,WAAW,CAAC;CAC7B;AAID,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;CACxC;AAID,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACjD,KAAK,CAAC,EAAE;YACN,YAAY,CAAC,EAAE,MAAM,CAAC;YACtB,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,uBAAuB,CAAC,EAAE,MAAM,CAAC;SAClC,CAAC;KACH,CAAC;IACF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAID,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,YAAY,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,eAAe,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACrC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACzC;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,WAAW,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC;IACtF,SAAS,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACzE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAOD,MAAM,WAAW,QAAQ;IAEvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAGtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAGzB,wFAAwF;IACxF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,IAAI,IAAI,CAAC;IACb,KAAK,IAAI,IAAI,CAAC;IACd,MAAM,IAAI,IAAI,CAAC;IAGf,IAAI,CACF,OAAO,EAAE,MAAM,GAAG,OAAO,EAAE,EAC3B,OAAO,CAAC,EAAE,kBAAkB,GAC3B,OAAO,CAAC,UAAU,GAAG;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAG9D,QAAQ,IAAI,YAAY,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAClE,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAClF,OAAO,IAAI,aAAa,CAAC;IAGzB,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACtF,SAAS,IAAI,WAAW,CAAC;IACzB,SAAS,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAAC;IAGpC,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IAGpC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IAChE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;IAClE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACjD,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;CAC7E;AAID,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qBAAqB,EAAE,cAAc,CAAC;IACtC,aAAa,EAAE,WAAW,CAAC;IAC3B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,OAAO,GAAG,SAAS,CAAC;IACtD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,OAAO,CAAC;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,MAAM,MAAM,gBAAgB,GACxB,eAAe,GACf,aAAa,GACb,aAAa,GACb,aAAa,GACb,YAAY,GACZ,gBAAgB,GAChB,WAAW,GACX,UAAU,GACV,OAAO,CAAC;AAEZ,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,gBAAgB,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qBAAqB,CAAC,EAAE,cAAc,CAAC;CACxC;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,eAAe,GAAG,YAAY,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;IACrG,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAID,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,cAAc,GAAG,WAAW,GAAG,SAAS,CAAC;AAEnF,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,iBAAiB,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,kBAAkB,EAAE,CAAC;IACnC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,cAAc,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9E,uEAAuE;IACvE,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE,OAAO,CAAC;IACrB,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB"}

package/dist/src/types.js

@@ -0,0 +1,8 @@
+/**
+ * Shared types for openclaw-claude-code plugin
+ */
+import { getAliases } from './models.js';
+export { getModelPricing, overrideModelPricing, _resetPricingOverrides, getModelList, resolveAlias, resolveEngineAndModel, resolveProvider, getContextWindow, isGeminiModel, isClaudeModel, estimateTokens, lookupModelStrict, getAliases, } from './models.js';
+// Backward compat: MODEL_ALIASES as a static object
+export const MODEL_ALIASES = getAliases();
+//# sourceMappingURL=types.js.map

package/dist/src/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,YAAY,EACZ,YAAY,EACZ,qBAAqB,EACrB,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,UAAU,GACX,MAAM,aAAa,CAAC;AAErB,oDAAoD;AACpD,MAAM,CAAC,MAAM,aAAa,GAA2B,UAAU,EAAE,CAAC"}

package/dist/src/validation.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Shared validation utilities for input sanitization.
+ *
+ * Used by both the plugin tool handlers (index.ts) and the embedded HTTP
+ * server (embedded-server.ts) to ensure consistent protection regardless
+ * of entry point.
+ */
+/**
+ * Resolve and validate a working directory path.
+ *
+ * Prevents path traversal and blocks access to system-critical and
+ * sensitive directories. Resolves symlinks where possible to defeat
+ * symlink-based bypasses.
+ */
+export declare function sanitizeCwd(cwd: string | undefined): string | undefined;
+/**
+ * Validate that a string is a syntactically valid regular expression.
+ *
+ * Returns the compiled RegExp if valid, throws on invalid syntax.
+ * Note: this validates syntax only — it does not detect catastrophic
+ * backtracking (ReDoS) patterns.
+ */
+export declare function validateRegex(pattern: string): RegExp;
+/**
+ * Validate a resource name (agent, skill, rule) to prevent path injection.
+ *
+ * Only allows alphanumeric characters, hyphens, and underscores.
+ * Rejects empty strings, dots, slashes, spaces, and any other characters
+ * that could be used for path traversal.
+ */
+export declare function validateName(name: string): string;
+//# sourceMappingURL=validation.d.ts.map

package/dist/src/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/validation.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAgBH;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAqDvE;AAID;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAMrD;AAMD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKjD"}

package/dist/src/validation.js

@@ -0,0 +1,104 @@
+/**
+ * Shared validation utilities for input sanitization.
+ *
+ * Used by both the plugin tool handlers (index.ts) and the embedded HTTP
+ * server (embedded-server.ts) to ensure consistent protection regardless
+ * of entry point.
+ */
+import * as path from 'node:path';
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+// ─── Blocked Path Prefixes ─────────────────────────────────────────────────
+/** System-critical directories that must never be used as a working directory */
+const BLOCKED_PREFIXES = ['/etc', '/proc', '/sys', '/var/run', '/var/log', '/boot', '/sbin'];
+/** Sensitive directories under the user's home that must never be used as cwd */
+const BLOCKED_HOME_SUBDIRS = ['.ssh', '.gnupg', '.aws', '.config/gcloud'];
+// ─── sanitizeCwd ────────────────────────────────────────────────────────────
+/**
+ * Resolve and validate a working directory path.
+ *
+ * Prevents path traversal and blocks access to system-critical and
+ * sensitive directories. Resolves symlinks where possible to defeat
+ * symlink-based bypasses.
+ */
+export function sanitizeCwd(cwd) {
+    if (!cwd)
+        return undefined;
+    // Logical path: resolves .. and . but does NOT follow symlinks.
+    // This catches the obvious cases (/etc, /var/run, /sbin) on all platforms.
+    const logical = path.resolve(cwd);
+    // Real path: follows symlinks. This catches symlink-based bypasses
+    // (e.g. /tmp/safe → /etc). Falls back to logical for non-existent paths.
+    let real;
+    try {
+        real = fs.realpathSync(cwd);
+    }
+    catch {
+        real = logical;
+    }
+    // Collect all paths to check — logical, real, and their de-prefixed
+    // variants for macOS where /etc → /private/etc, /var → /private/var.
+    const pathsToCheck = new Set([logical, real]);
+    for (const p of [logical, real]) {
+        if (p.startsWith('/private/')) {
+            pathsToCheck.add(p.slice('/private'.length));
+        }
+    }
+    // Block filesystem root
+    for (const check of pathsToCheck) {
+        if (check === '/') {
+            throw new Error(`Unsafe working directory: ${logical}`);
+        }
+    }
+    // Block system-critical prefixes
+    for (const check of pathsToCheck) {
+        for (const prefix of BLOCKED_PREFIXES) {
+            if (check === prefix || check.startsWith(prefix + '/')) {
+                throw new Error(`Unsafe working directory: ${logical}`);
+            }
+        }
+    }
+    // Block sensitive home subdirectories
+    const home = os.homedir();
+    for (const check of pathsToCheck) {
+        for (const subdir of BLOCKED_HOME_SUBDIRS) {
+            const sensitive = path.join(home, subdir);
+            if (check === sensitive || check.startsWith(sensitive + '/')) {
+                throw new Error(`Unsafe working directory: ${logical}`);
+            }
+        }
+    }
+    return real;
+}
+// ─── validateRegex ──────────────────────────────────────────────────────────
+/**
+ * Validate that a string is a syntactically valid regular expression.
+ *
+ * Returns the compiled RegExp if valid, throws on invalid syntax.
+ * Note: this validates syntax only — it does not detect catastrophic
+ * backtracking (ReDoS) patterns.
+ */
+export function validateRegex(pattern) {
+    try {
+        return new RegExp(pattern, 'i');
+    }
+    catch (err) {
+        throw new Error(`Invalid regex pattern: ${err.message}`);
+    }
+}
+// ─── validateName ───────────────────────────────────────────────────────────
+const VALID_NAME = /^[a-zA-Z0-9_-]+$/;
+/**
+ * Validate a resource name (agent, skill, rule) to prevent path injection.
+ *
+ * Only allows alphanumeric characters, hyphens, and underscores.
+ * Rejects empty strings, dots, slashes, spaces, and any other characters
+ * that could be used for path traversal.
+ */
+export function validateName(name) {
+    if (!name || !VALID_NAME.test(name)) {
+        throw new Error(`Invalid name '${name}': must be non-empty and match /^[a-zA-Z0-9_-]+$/`);
+    }
+    return name;
+}
+//# sourceMappingURL=validation.js.map

package/dist/src/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../src/validation.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,8EAA8E;AAE9E,iFAAiF;AACjF,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAE7F,iFAAiF;AACjF,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;AAE1E,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,GAAuB;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE3B,gEAAgE;IAChE,2EAA2E;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAElC,mEAAmE;IACnE,yEAAyE;IACzE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,OAAO,CAAC;IACjB,CAAC;IAED,oEAAoE;IACpE,qEAAqE;IACrE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9B,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;YACtC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,KAAK,MAAM,MAAM,IAAI,oBAAoB,EAAE,CAAC;YAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,GAAG,GAAG,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,0BAA2B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAEtC;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,mDAAmD,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}