@agent-native/core 0.15.11 → 0.15.12

package/dist/tools/proxy-security.js

@@ -1,158 +0,0 @@
-const HEADER_NAME_RE = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;
-const BLOCKED_OUTBOUND_HEADERS = new Set([
-    "connection",
-    "content-length",
-    "cookie",
-    "forwarded",
-    "host",
-    "keep-alive",
-    "origin",
-    "proxy-authenticate",
-    "proxy-authorization",
-    "referer",
-    "set-cookie",
-    "te",
-    "trailer",
-    "transfer-encoding",
-    "upgrade",
-    "x-forwarded-for",
-    "x-forwarded-host",
-    "x-forwarded-proto",
-]);
-export const MAX_TOOL_PROXY_RESPONSE_SIZE = 1024 * 1024;
-const ALLOWED_METHODS = new Set([
-    "GET",
-    "POST",
-    "PUT",
-    "PATCH",
-    "DELETE",
-    "HEAD",
-]);
-export function normalizeToolProxyMethod(value) {
-    const method = String(value || "GET").toUpperCase();
-    return ALLOWED_METHODS.has(method) ? method : null;
-}
-export function sanitizeOutboundHeaders(value) {
-    if (!value || typeof value !== "object" || Array.isArray(value))
-        return {};
-    const headers = {};
-    for (const [name, rawValue] of Object.entries(value)) {
-        const lower = name.toLowerCase();
-        if (!HEADER_NAME_RE.test(name) || BLOCKED_OUTBOUND_HEADERS.has(lower)) {
-            continue;
-        }
-        if (rawValue === undefined || rawValue === null)
-            continue;
-        const headerValue = String(rawValue);
-        if (/[\r\n]/.test(headerValue))
-            continue;
-        headers[name] = headerValue;
-    }
-    return headers;
-}
-export function collectSecretValues(...groups) {
-    const values = new Set();
-    for (const group of groups) {
-        for (const value of group ?? []) {
-            if (value)
-                values.add(value);
-        }
-    }
-    return [...values].sort((a, b) => b.length - a.length);
-}
-export function redactSecrets(value, secretValues) {
-    if (secretValues.length === 0)
-        return value;
-    if (typeof value === "string") {
-        return redactString(value, secretValues);
-    }
-    if (Array.isArray(value)) {
-        return value.map((item) => redactSecrets(item, secretValues));
-    }
-    if (value && typeof value === "object") {
-        return Object.fromEntries(Object.entries(value).map(([key, entry]) => [
-            key,
-            redactSecrets(entry, secretValues),
-        ]));
-    }
-    return value;
-}
-export function redactString(text, secretValues) {
-    let out = text;
-    for (const secret of secretValues) {
-        for (const candidate of redactionCandidates(secret)) {
-            if (candidate)
-                out = out.split(candidate).join("[redacted]");
-        }
-    }
-    return out;
-}
-function redactionCandidates(secret) {
-    const candidates = new Set([secret]);
-    try {
-        candidates.add(encodeURIComponent(secret));
-    }
-    catch { }
-    try {
-        candidates.add(encodeURI(secret));
-    }
-    catch { }
-    return [...candidates].sort((a, b) => b.length - a.length);
-}
-export async function readResponseTextWithLimit(response, maxBytes = MAX_TOOL_PROXY_RESPONSE_SIZE) {
-    const contentLength = response.headers.get("content-length");
-    if (contentLength && Number(contentLength) > maxBytes) {
-        return {
-            text: `(response too large - ${contentLength} bytes, max ${maxBytes})`,
-            truncated: true,
-            size: Number(contentLength),
-        };
-    }
-    const reader = response.body?.getReader?.();
-    if (!reader) {
-        const buffer = await response.arrayBuffer();
-        if (buffer.byteLength > maxBytes) {
-            return {
-                text: `(response truncated - ${buffer.byteLength} bytes, max ${maxBytes})`,
-                truncated: true,
-                size: buffer.byteLength,
-            };
-        }
-        return {
-            text: new TextDecoder().decode(buffer),
-            truncated: false,
-            size: buffer.byteLength,
-        };
-    }
-    const chunks = [];
-    let total = 0;
-    while (true) {
-        const { done, value } = await reader.read();
-        if (done)
-            break;
-        if (!value)
-            continue;
-        total += value.byteLength;
-        if (total > maxBytes) {
-            await reader.cancel().catch(() => { });
-            return {
-                text: `(response truncated - ${total} bytes, max ${maxBytes})`,
-                truncated: true,
-                size: total,
-            };
-        }
-        chunks.push(value);
-    }
-    const buffer = new Uint8Array(total);
-    let offset = 0;
-    for (const chunk of chunks) {
-        buffer.set(chunk, offset);
-        offset += chunk.byteLength;
-    }
-    return {
-        text: new TextDecoder().decode(buffer),
-        truncated: false,
-        size: total,
-    };
-}
-//# sourceMappingURL=proxy-security.js.map

package/dist/tools/proxy-security.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"proxy-security.js","sourceRoot":"","sources":["../../src/tools/proxy-security.ts"],"names":[],"mappings":"AAAA,MAAM,cAAc,GAAG,+BAA+B,CAAC;AAEvD,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC;IACvC,YAAY;IACZ,gBAAgB;IAChB,QAAQ;IACR,WAAW;IACX,MAAM;IACN,YAAY;IACZ,QAAQ;IACR,oBAAoB;IACpB,qBAAqB;IACrB,SAAS;IACT,YAAY;IACZ,IAAI;IACJ,SAAS;IACT,mBAAmB;IACnB,SAAS;IACT,iBAAiB;IACjB,kBAAkB;IAClB,mBAAmB;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,GAAG,IAAI,CAAC;AAExD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,KAAK;IACL,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACpD,OAAO,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE3E,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACtE,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAC1D,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,SAAS;QACzC,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,GAAG,MAAwC;IAE3C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,KAAK,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YAChC,IAAI,KAAK;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,aAAa,CAAI,KAAQ,EAAE,YAAsB;IAC/D,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,YAAY,CAAC,KAAK,EAAE,YAAY,CAAM,CAAC;IAChD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,CAAM,CAAC;IACrE,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YAC1C,GAAG;YACH,aAAa,CAAC,KAAK,EAAE,YAAY,CAAC;SACnC,CAAC,CACE,CAAC;IACT,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,YAAsB;IAC/D,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;QAClC,KAAK,MAAM,SAAS,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,IAAI,SAAS;gBAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc;IACzC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,UAAU,CAAC,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,IAAI,CAAC;QACH,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IACV,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,QAAkB,EAClB,QAAQ,GAAG,4BAA4B;IAEvC,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC7D,IAAI,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,QAAQ,EAAE,CAAC;QACtD,OAAO;YACL,IAAI,EAAE,yBAAyB,aAAa,eAAe,QAAQ,GAAG;YACtE,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;IAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC;YACjC,OAAO;gBACL,IAAI,EAAE,yBAAyB,MAAM,CAAC,UAAU,eAAe,QAAQ,GAAG;gBAC1E,SAAS,EAAE,IAAI;gBACf,IAAI,EAAE,MAAM,CAAC,UAAU;aACxB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,MAAM,CAAC,UAAU;SACxB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;QAC1B,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;YACrB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACtC,OAAO;gBACL,IAAI,EAAE,yBAAyB,KAAK,eAAe,QAAQ,GAAG;gBAC9D,SAAS,EAAE,IAAI;gBACf,IAAI,EAAE,KAAK;aACZ,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IAED,OAAO;QACL,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QACtC,SAAS,EAAE,KAAK;QAChB,IAAI,EAAE,KAAK;KACZ,CAAC;AACJ,CAAC","sourcesContent":["const HEADER_NAME_RE = /^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/;\n\nconst BLOCKED_OUTBOUND_HEADERS = new Set([\n  \"connection\",\n  \"content-length\",\n  \"cookie\",\n  \"forwarded\",\n  \"host\",\n  \"keep-alive\",\n  \"origin\",\n  \"proxy-authenticate\",\n  \"proxy-authorization\",\n  \"referer\",\n  \"set-cookie\",\n  \"te\",\n  \"trailer\",\n  \"transfer-encoding\",\n  \"upgrade\",\n  \"x-forwarded-for\",\n  \"x-forwarded-host\",\n  \"x-forwarded-proto\",\n]);\n\nexport const MAX_TOOL_PROXY_RESPONSE_SIZE = 1024 * 1024;\n\nconst ALLOWED_METHODS = new Set([\n  \"GET\",\n  \"POST\",\n  \"PUT\",\n  \"PATCH\",\n  \"DELETE\",\n  \"HEAD\",\n]);\n\nexport function normalizeToolProxyMethod(value: unknown): string | null {\n  const method = String(value || \"GET\").toUpperCase();\n  return ALLOWED_METHODS.has(method) ? method : null;\n}\n\nexport function sanitizeOutboundHeaders(\n  value: unknown,\n): Record<string, string> {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return {};\n\n  const headers: Record<string, string> = {};\n  for (const [name, rawValue] of Object.entries(value)) {\n    const lower = name.toLowerCase();\n    if (!HEADER_NAME_RE.test(name) || BLOCKED_OUTBOUND_HEADERS.has(lower)) {\n      continue;\n    }\n    if (rawValue === undefined || rawValue === null) continue;\n    const headerValue = String(rawValue);\n    if (/[\\r\\n]/.test(headerValue)) continue;\n    headers[name] = headerValue;\n  }\n  return headers;\n}\n\nexport function collectSecretValues(\n  ...groups: Array<Array<string> | undefined>\n): string[] {\n  const values = new Set<string>();\n  for (const group of groups) {\n    for (const value of group ?? []) {\n      if (value) values.add(value);\n    }\n  }\n  return [...values].sort((a, b) => b.length - a.length);\n}\n\nexport function redactSecrets<T>(value: T, secretValues: string[]): T {\n  if (secretValues.length === 0) return value;\n  if (typeof value === \"string\") {\n    return redactString(value, secretValues) as T;\n  }\n  if (Array.isArray(value)) {\n    return value.map((item) => redactSecrets(item, secretValues)) as T;\n  }\n  if (value && typeof value === \"object\") {\n    return Object.fromEntries(\n      Object.entries(value).map(([key, entry]) => [\n        key,\n        redactSecrets(entry, secretValues),\n      ]),\n    ) as T;\n  }\n  return value;\n}\n\nexport function redactString(text: string, secretValues: string[]): string {\n  let out = text;\n  for (const secret of secretValues) {\n    for (const candidate of redactionCandidates(secret)) {\n      if (candidate) out = out.split(candidate).join(\"[redacted]\");\n    }\n  }\n  return out;\n}\n\nfunction redactionCandidates(secret: string): string[] {\n  const candidates = new Set([secret]);\n  try {\n    candidates.add(encodeURIComponent(secret));\n  } catch {}\n  try {\n    candidates.add(encodeURI(secret));\n  } catch {}\n  return [...candidates].sort((a, b) => b.length - a.length);\n}\n\nexport async function readResponseTextWithLimit(\n  response: Response,\n  maxBytes = MAX_TOOL_PROXY_RESPONSE_SIZE,\n): Promise<{ text: string; truncated: boolean; size: number }> {\n  const contentLength = response.headers.get(\"content-length\");\n  if (contentLength && Number(contentLength) > maxBytes) {\n    return {\n      text: `(response too large - ${contentLength} bytes, max ${maxBytes})`,\n      truncated: true,\n      size: Number(contentLength),\n    };\n  }\n\n  const reader = response.body?.getReader?.();\n  if (!reader) {\n    const buffer = await response.arrayBuffer();\n    if (buffer.byteLength > maxBytes) {\n      return {\n        text: `(response truncated - ${buffer.byteLength} bytes, max ${maxBytes})`,\n        truncated: true,\n        size: buffer.byteLength,\n      };\n    }\n    return {\n      text: new TextDecoder().decode(buffer),\n      truncated: false,\n      size: buffer.byteLength,\n    };\n  }\n\n  const chunks: Uint8Array[] = [];\n  let total = 0;\n  while (true) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    if (!value) continue;\n    total += value.byteLength;\n    if (total > maxBytes) {\n      await reader.cancel().catch(() => {});\n      return {\n        text: `(response truncated - ${total} bytes, max ${maxBytes})`,\n        truncated: true,\n        size: total,\n      };\n    }\n    chunks.push(value);\n  }\n\n  const buffer = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    buffer.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n\n  return {\n    text: new TextDecoder().decode(buffer),\n    truncated: false,\n    size: total,\n  };\n}\n"]}

package/dist/tools/routes.d.ts

@@ -1,2 +0,0 @@
-export declare function createToolsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<unknown>>;
-//# sourceMappingURL=routes.d.ts.map

package/dist/tools/routes.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/tools/routes.ts"],"names":[],"mappings":"AA+CA,wBAAgB,kBAAkB,2FA8BjC"}