@agent-native/dispatch 0.15.2 → 0.15.4

package/src/actions/query-staged-dataset.ts

@@ -1,126 +1,10 @@
-import { defineAction } from "@agent-native/core";
-import { runAggregateQuery } from "@agent-native/core/provider-api/staged-datasets-aggregate";
-import {
-  getStagedDatasetMeta,
-  getStagedDatasetRows,
-} from "@agent-native/core/provider-api/staged-datasets-store";
-import { getCredentialContext } from "@agent-native/core/server/request-context";
-import { z } from "zod";
+import { createQueryStagedDatasetAction } from "@agent-native/core/provider-api/actions/staged-datasets";
 
 import { DISPATCH_APP_ID } from "../server/lib/provider-api.js";
 
-const WhereSchema = z.object({
-  column: z.string().min(1),
-  op: z.enum([
-    "equals",
-    "not_equals",
-    "contains",
-    "not_contains",
-    "gt",
-    "gte",
-    "lt",
-    "lte",
-    "exists",
-    "not_exists",
-  ]),
-  value: z.unknown().optional(),
-});
-
-const AggregateFieldSchema = z.object({
-  column: z.string().min(1).describe("Column to aggregate."),
-  op: z
-    .enum(["sum", "avg", "count", "min", "max", "count_distinct"])
-    .describe("Aggregation function."),
-  as: z
-    .string()
-    .optional()
-    .describe("Output column name. Default: {op}_{column}."),
-});
-
-export default defineAction({
+export default createQueryStagedDatasetAction({
+  appId: DISPATCH_APP_ID,
   description:
     "Run a filter/aggregate/project query over a staged dataset previously written by provider-api-request (stageAs). Use after staging provider records, messages, documents, issues, events, or search results to count, group, filter, or project rows without re-fetching provider APIs.",
-  schema: z.object({
-    datasetId: z
-      .string()
-      .min(1)
-      .describe(
-        "Dataset id from provider-api-request stageAs result, or from list-staged-datasets.",
-      ),
-    where: z
-      .array(WhereSchema)
-      .optional()
-      .describe(
-        "Row-level filters (AND). Ops: equals, not_equals, contains, not_contains, gt, gte, lt, lte, exists, not_exists.",
-      ),
-    groupBy: z
-      .array(z.string().min(1))
-      .optional()
-      .describe(
-        "Column(s) to group by. Omit for a single aggregate over all rows.",
-      ),
-    aggregate: z
-      .array(AggregateFieldSchema)
-      .optional()
-      .describe(
-        "Aggregation operations. When set, non-group columns are aggregated. Omit to return raw rows.",
-      ),
-    select: z
-      .array(z.string().min(1))
-      .optional()
-      .describe("Column projection when aggregate is empty."),
-    orderBy: z.string().optional().describe("Sort output by this column."),
-    orderDir: z
-      .enum(["asc", "desc"])
-      .optional()
-      .describe("Sort direction (default asc)."),
-    limit: z.coerce
-      .number()
-      .int()
-      .min(1)
-      .max(10_000)
-      .optional()
-      .describe("Maximum rows to return (default all, max 10000)."),
-  }),
   http: false,
-  readOnly: true,
-  run: async (args) => {
-    const ctx = getCredentialContext();
-    if (!ctx) {
-      throw new Error("No authenticated context for query-staged-dataset.");
-    }
-
-    const meta = await getStagedDatasetMeta({
-      id: args.datasetId,
-      appId: DISPATCH_APP_ID,
-      ownerEmail: ctx.userEmail,
-    });
-    if (!meta) {
-      throw new Error(
-        `Dataset ${args.datasetId} not found (or belongs to a different owner/app).`,
-      );
-    }
-
-    const rows = await getStagedDatasetRows({
-      id: args.datasetId,
-      appId: DISPATCH_APP_ID,
-      ownerEmail: ctx.userEmail,
-    });
-
-    const result = runAggregateQuery(rows, {
-      where: args.where,
-      groupBy: args.groupBy,
-      aggregate: args.aggregate,
-      select: args.select,
-      orderBy: args.orderBy,
-      orderDir: args.orderDir,
-      limit: args.limit,
-    });
-
-    return {
-      dataset: { id: meta.id, name: meta.name, totalRows: meta.rowCount },
-      rowCount: result.length,
-      rows: result,
-    };
-  },
 });

package/src/components/layout/Layout.spec.tsx

@@ -168,7 +168,7 @@ describe("Dispatch NavContent", () => {
     expect(lists[0].querySelector("a")?.className).toContain("h-8 w-8");
   });
 
-  it("uses the quieter Analytics-style chat history and retains thread actions", async () => {
+  it("uses the shared chat history rail and retains thread actions", async () => {
     await act(async () => {
       root.render(
         <MemoryRouter initialEntries={["/chat/active-thread"]}>
@@ -184,18 +184,14 @@ describe("Dispatch NavContent", () => {
     expect(container.textContent).toContain("Earlier Dispatch work");
     expect(container.textContent).toContain("New chat");
     expect(container.textContent).toContain("5m");
-    const age = [...container.querySelectorAll("time")].find(
+    const age = [...container.querySelectorAll("span")].find(
       (element) => element.textContent === "5m",
     );
-    expect(age?.className).toContain("w-8");
-    expect(age?.className).toContain("shrink-0");
-    expect(age?.className).toContain("whitespace-nowrap");
-    expect(age?.className).toContain("tabular-nums");
-    expect(
-      [...container.querySelectorAll("div")].some((element) =>
-        element.className.includes("group/item"),
-      ),
-    ).toBe(true);
+    expect(age?.className).toContain("an-chat-history-row__timestamp");
+    const historyList = container.querySelector(
+      '[data-agent-native="chat-history-list"]',
+    );
+    expect(historyList?.className).toContain("an-chat-history--rail");
     expect(
       container.querySelector('img[src="/agent-native-icon-light.svg"]')
         ?.parentElement?.className,

package/src/components/layout/Layout.tsx

@@ -13,6 +13,10 @@ import { useActionQuery } from "@agent-native/core/client/hooks";
 import { useT } from "@agent-native/core/client/i18n";
 import { InvitationBanner, OrgSwitcher } from "@agent-native/core/client/org";
 import { FeedbackButton } from "@agent-native/core/client/ui";
+import {
+  ChatHistoryList,
+  type ChatHistoryItem,
+} from "@agent-native/toolkit/chat-history";
 import {
   IconActivity,
   IconArrowUpRight,
@@ -22,8 +26,6 @@ import {
   IconBrandTelegram,
   IconKey,
   IconChevronDown,
-  IconDots,
-  IconEdit,
   IconLayersSubtract,
   IconMessageQuestion,
   IconMessages,
@@ -42,10 +44,8 @@ import {
 import {
   useEffect,
   useMemo,
-  useRef,
   useState,
   type ComponentType,
-  type FormEvent,
   type ReactNode,
 } from "react";
 import { NavLink, useLocation, useNavigate } from "react-router";
@@ -57,7 +57,6 @@ import {
   DropdownMenuItem,
   DropdownMenuTrigger,
 } from "../ui/dropdown-menu";
-import { Input } from "../ui/input";
 import { Sheet, SheetContent, SheetDescription, SheetTitle } from "../ui/sheet";
 import { Skeleton } from "../ui/skeleton";
 import { Tooltip, TooltipContent, TooltipTrigger } from "../ui/tooltip";
@@ -348,10 +347,6 @@ function DispatchChatsSection({ onNavigate }: { onNavigate?: () => void }) {
     renameThread,
     refreshThreads,
   } = useChatThreads(undefined, "dispatch", undefined, { autoCreate: false });
-  const [renamingThreadId, setRenamingThreadId] = useState<string | null>(null);
-  const [renameDraft, setRenameDraft] = useState("");
-  const renameInputRef = useRef<HTMLInputElement | null>(null);
-  const committingRenameRef = useRef(false);
 
   const visibleThreads = useMemo(
     () =>
@@ -363,6 +358,22 @@ function DispatchChatsSection({ onNavigate }: { onNavigate?: () => void }) {
         .slice(0, 8),
     [activeThreadId, threads],
   );
+  const localPathname = localDispatchPath(location.pathname);
+  const displayedActiveThreadId =
+    threadIdFromPath(localPathname) ??
+    (localPathname === "/chat" ? null : activeThreadId);
+  const chatItems: ChatHistoryItem[] = visibleThreads.map((thread) => {
+    const title = threadTitle(thread, t("dispatch.sidebar.newChat"));
+    return {
+      id: thread.id,
+      title: <span title={title}>{title}</span>,
+      titleText: title,
+      timestamp:
+        thread.id === displayedActiveThreadId
+          ? ""
+          : formatThreadAge(threadUpdatedAt(thread)),
+    };
+  });
 
   useEffect(() => {
     const refresh = () => refreshThreads();
@@ -383,14 +394,6 @@ function DispatchChatsSection({ onNavigate }: { onNavigate?: () => void }) {
     };
   }, [refreshThreads]);
 
-  useEffect(() => {
-    if (!renamingThreadId) return;
-    requestAnimationFrame(() => {
-      renameInputRef.current?.focus();
-      renameInputRef.current?.select();
-    });
-  }, [renamingThreadId]);
-
   function openThread(threadId: string, options?: { isNew?: boolean }) {
     switchThread(threadId);
     navigateWithAgentChatViewTransition(
@@ -414,35 +417,6 @@ function DispatchChatsSection({ onNavigate }: { onNavigate?: () => void }) {
     if (threadId) openThread(threadId, { isNew: true });
   }
 
-  function startRenameThread(thread: ChatThreadSummary) {
-    committingRenameRef.current = false;
-    setRenameDraft(threadTitle(thread, t("dispatch.sidebar.newChat")));
-    setRenamingThreadId(thread.id);
-  }
-
-  function cancelRenameThread() {
-    committingRenameRef.current = true;
-    setRenamingThreadId(null);
-    setRenameDraft("");
-  }
-
-  async function commitRenameThread() {
-    if (committingRenameRef.current) return;
-    const threadId = renamingThreadId;
-    const title = renameDraft.trim();
-    if (!threadId) return;
-    committingRenameRef.current = true;
-    setRenamingThreadId(null);
-    setRenameDraft("");
-    if (title) await renameThread(threadId, title);
-    committingRenameRef.current = false;
-  }
-
-  function handleRenameSubmit(event: FormEvent<HTMLFormElement>) {
-    event.preventDefault();
-    void commitRenameThread();
-  }
-
   return (
     <div className="ms-4 min-w-0 space-y-0.5">
       {chatsLoading &&
@@ -456,105 +430,28 @@ function DispatchChatsSection({ onNavigate }: { onNavigate?: () => void }) {
             <Skeleton className="h-3 w-3/4 rounded" />
           </div>
         ))}
-      {visibleThreads.map((thread) => {
-        const localPathname = localDispatchPath(location.pathname);
-        const isActive =
-          thread.id ===
-          (threadIdFromPath(localPathname) ??
-            (localPathname === "/chat" ? null : activeThreadId));
-        const isRenaming = thread.id === renamingThreadId;
-        const title = threadTitle(thread, t("dispatch.sidebar.newChat"));
-        return (
-          <div
-            key={thread.id}
-            className={cn(
-              "group/item relative flex min-w-0 items-center rounded-lg transition-colors",
-              isActive
-                ? "bg-sidebar-accent text-sidebar-accent-foreground"
-                : "text-muted-foreground hover:bg-sidebar-accent/50 hover:text-foreground",
-            )}
-          >
-            {isRenaming ? (
-              <form
-                onSubmit={handleRenameSubmit}
-                className="flex min-w-0 flex-1 items-center px-1"
-              >
-                <Input
-                  ref={renameInputRef}
-                  value={renameDraft}
-                  onChange={(event) => setRenameDraft(event.target.value)}
-                  onBlur={() => void commitRenameThread()}
-                  onKeyDown={(event) => {
-                    if (event.key === "Escape") {
-                      event.preventDefault();
-                      cancelRenameThread();
-                    }
-                  }}
-                  maxLength={160}
-                  aria-label={t("dispatch.sidebar.renameThread", { title })}
-                  className="h-6 min-w-0 rounded-sm border-sidebar-border bg-background px-1.5 text-xs"
-                />
-              </form>
-            ) : (
-              <>
-                <Tooltip>
-                  <TooltipTrigger asChild>
-                    <button
-                      type="button"
-                      onClick={() => openThread(thread.id)}
-                      className="flex min-w-0 flex-1 cursor-pointer items-center gap-2 px-2 py-1.5 pe-1 text-start text-xs outline-none focus-visible:ring-2 focus-visible:ring-ring"
-                    >
-                      <span className="block min-w-0 flex-1 truncate">
-                        {title}
-                      </span>
-                      <time className="w-8 shrink-0 whitespace-nowrap text-end text-[11px] tabular-nums text-muted-foreground/60 transition-opacity group-hover/item:opacity-0 group-focus-within/item:opacity-0">
-                        {isActive
-                          ? ""
-                          : formatThreadAge(threadUpdatedAt(thread))}
-                      </time>
-                    </button>
-                  </TooltipTrigger>
-                  <TooltipContent side="right">{title}</TooltipContent>
-                </Tooltip>
-                <div className="pointer-events-none absolute end-1 top-1/2 flex -translate-y-1/2 items-center gap-0.5">
-                  <DropdownMenu>
-                    <Tooltip>
-                      <TooltipTrigger asChild>
-                        <DropdownMenuTrigger asChild>
-                          <button
-                            type="button"
-                            aria-label={t("dispatch.sidebar.chatOptions", {
-                              title,
-                            })}
-                            className="pointer-events-auto rounded p-0.5 text-muted-foreground/50 opacity-0 transition-[color,opacity] hover:text-foreground focus-visible:opacity-100 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring group-hover/item:opacity-100 group-focus-within/item:opacity-100 data-[state=open]:opacity-100 data-[state=open]:text-foreground"
-                          >
-                            <IconDots className="size-3" />
-                          </button>
-                        </DropdownMenuTrigger>
-                      </TooltipTrigger>
-                      <TooltipContent side="right">
-                        {t("dispatch.sidebar.chatOptions", { title })}
-                      </TooltipContent>
-                    </Tooltip>
-                    <DropdownMenuContent
-                      align="start"
-                      side="right"
-                      className="w-44"
-                    >
-                      <DropdownMenuItem
-                        onSelect={() => startRenameThread(thread)}
-                      >
-                        <IconEdit className="size-3.5" />
-                        {t("dispatch.sidebar.renameChat")}
-                      </DropdownMenuItem>
-                    </DropdownMenuContent>
-                  </DropdownMenu>
-                </div>
-              </>
-            )}
-          </div>
-        );
-      })}
+      {visibleThreads.length > 0 && (
+        <ChatHistoryList
+          items={chatItems}
+          activeId={displayedActiveThreadId}
+          onSelect={(threadId) => openThread(threadId)}
+          renameMaxLength={160}
+          onRename={(threadId, title) => void renameThread(threadId, title)}
+          labels={{
+            options: (item) =>
+              t("dispatch.sidebar.chatOptions", {
+                title: item.titleText ?? "",
+              }),
+            renameInput: (item) =>
+              t("dispatch.sidebar.renameThread", {
+                title: item.titleText ?? "",
+              }),
+            rename: t("dispatch.sidebar.renameChat"),
+          }}
+          variant="rail"
+          className="min-w-0"
+        />
+      )}
       <button
         type="button"
         onClick={() => void handleNewChat()}

package/dist/actions/provider-api-audit.d.ts

@@ -1,7 +0,0 @@
-export declare function sanitizeProviderApiAuditPath(path: unknown): string;
-export declare function buildProviderApiAuditSummary(args: {
-    method?: unknown;
-    provider?: unknown;
-    path?: unknown;
-}): string;
-//# sourceMappingURL=provider-api-audit.d.ts.map

package/dist/actions/provider-api-audit.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"provider-api-audit.d.ts","sourceRoot":"","sources":["../../src/actions/provider-api-audit.ts"],"names":[],"mappings":"AA8DA,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAclE;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE;IACjD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,GAAG,MAAM,CAKT"}

package/dist/actions/provider-api-audit.js

@@ -1,74 +0,0 @@
-const REDACTED = "[redacted]";
-const CREDENTIAL_NAME = /^(?:api[-_]?key|access[-_]?token|auth(?:orization)?|bearer|credential|password|secret|signature|sig|token|x-amz-credential|x-amz-signature)$/i;
-function decodePathSegment(segment) {
-    try {
-        return decodeURIComponent(segment);
-    }
-    catch {
-        return segment;
-    }
-}
-function looksLikeCredentialValue(segment) {
-    const value = decodePathSegment(segment);
-    if (/^eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/.test(value)) {
-        return true;
-    }
-    if (/^(?:sk|pk|rk|ghp|github_pat|xox[baprs]|ya29|AIza)[-_][A-Za-z0-9_-]+$/i.test(value)) {
-        return true;
-    }
-    return value.length >= 32 && /^[A-Za-z0-9._~-]+$/.test(value);
-}
-function sanitizePathname(pathname) {
-    let redactNext = false;
-    return pathname
-        .split("/")
-        .map((segment) => {
-        if (!segment)
-            return segment;
-        const decoded = decodePathSegment(segment);
-        if (redactNext) {
-            redactNext = false;
-            return REDACTED;
-        }
-        const assignment = decoded.match(/^([^=:]+)([=:])(.+)$/);
-        if (assignment && CREDENTIAL_NAME.test(assignment[1])) {
-            return `${assignment[1]}${assignment[2]}${REDACTED}`;
-        }
-        if (CREDENTIAL_NAME.test(decoded)) {
-            redactNext = true;
-            return segment;
-        }
-        return looksLikeCredentialValue(segment) ? REDACTED : segment;
-    })
-        .join("/");
-}
-function sanitizeQuery(search) {
-    if (!search)
-        return "";
-    const redacted = Array.from(new URLSearchParams(search).keys(), (key) => {
-        const safeKey = encodeURIComponent(key.slice(0, 100));
-        return `${safeKey}=${REDACTED}`;
-    });
-    return redacted.length > 0 ? `?${redacted.join("&")}` : "";
-}
-export function sanitizeProviderApiAuditPath(path) {
-    const raw = String(path ?? "");
-    const withoutFragment = raw.split("#", 1)[0] ?? "";
-    try {
-        const url = new URL(withoutFragment);
-        return `${url.protocol}//${url.host}${sanitizePathname(url.pathname)}${sanitizeQuery(url.search)}`;
-    }
-    catch {
-        const queryIndex = withoutFragment.indexOf("?");
-        const pathname = queryIndex >= 0 ? withoutFragment.slice(0, queryIndex) : withoutFragment;
-        const search = queryIndex >= 0 ? withoutFragment.slice(queryIndex + 1) : "";
-        return `${sanitizePathname(pathname)}${sanitizeQuery(search)}`;
-    }
-}
-export function buildProviderApiAuditSummary(args) {
-    const method = String(args.method || "GET").toUpperCase();
-    const provider = String(args.provider ?? "");
-    const path = sanitizeProviderApiAuditPath(args.path);
-    return `${method} ${provider} ${path}`.slice(0, 200);
-}
-//# sourceMappingURL=provider-api-audit.js.map

package/dist/actions/provider-api-audit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"provider-api-audit.js","sourceRoot":"","sources":["../../src/actions/provider-api-audit.ts"],"names":[],"mappings":"AAAA,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,MAAM,eAAe,GACnB,+IAA+I,CAAC;AAElJ,SAAS,iBAAiB,CAAC,OAAe;IACxC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAe;IAC/C,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,qDAAqD,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IACE,uEAAuE,CAAC,IAAI,CAC1E,KAAK,CACN,EACD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,OAAO,QAAQ;SACZ,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,IAAI,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC;QAC7B,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,UAAU,EAAE,CAAC;YACf,UAAU,GAAG,KAAK,CAAC;YACnB,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACzD,IAAI,UAAU,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;YACvD,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,UAAU,GAAG,IAAI,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IAChE,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,MAAc;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;QACtE,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACtD,OAAO,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAa;IACxD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC/B,MAAM,eAAe,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;QACrC,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACrG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,QAAQ,GACZ,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;QAC3E,MAAM,MAAM,GAAG,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;IACjE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAI5C;IACC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,GAAG,MAAM,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACvD,CAAC","sourcesContent":["const REDACTED = \"[redacted]\";\n\nconst CREDENTIAL_NAME =\n  /^(?:api[-_]?key|access[-_]?token|auth(?:orization)?|bearer|credential|password|secret|signature|sig|token|x-amz-credential|x-amz-signature)$/i;\n\nfunction decodePathSegment(segment: string): string {\n  try {\n    return decodeURIComponent(segment);\n  } catch {\n    return segment;\n  }\n}\n\nfunction looksLikeCredentialValue(segment: string): boolean {\n  const value = decodePathSegment(segment);\n  if (/^eyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+$/.test(value)) {\n    return true;\n  }\n  if (\n    /^(?:sk|pk|rk|ghp|github_pat|xox[baprs]|ya29|AIza)[-_][A-Za-z0-9_-]+$/i.test(\n      value,\n    )\n  ) {\n    return true;\n  }\n  return value.length >= 32 && /^[A-Za-z0-9._~-]+$/.test(value);\n}\n\nfunction sanitizePathname(pathname: string): string {\n  let redactNext = false;\n  return pathname\n    .split(\"/\")\n    .map((segment) => {\n      if (!segment) return segment;\n      const decoded = decodePathSegment(segment);\n      if (redactNext) {\n        redactNext = false;\n        return REDACTED;\n      }\n\n      const assignment = decoded.match(/^([^=:]+)([=:])(.+)$/);\n      if (assignment && CREDENTIAL_NAME.test(assignment[1]!)) {\n        return `${assignment[1]}${assignment[2]}${REDACTED}`;\n      }\n      if (CREDENTIAL_NAME.test(decoded)) {\n        redactNext = true;\n        return segment;\n      }\n      return looksLikeCredentialValue(segment) ? REDACTED : segment;\n    })\n    .join(\"/\");\n}\n\nfunction sanitizeQuery(search: string): string {\n  if (!search) return \"\";\n  const redacted = Array.from(new URLSearchParams(search).keys(), (key) => {\n    const safeKey = encodeURIComponent(key.slice(0, 100));\n    return `${safeKey}=${REDACTED}`;\n  });\n  return redacted.length > 0 ? `?${redacted.join(\"&\")}` : \"\";\n}\n\nexport function sanitizeProviderApiAuditPath(path: unknown): string {\n  const raw = String(path ?? \"\");\n  const withoutFragment = raw.split(\"#\", 1)[0] ?? \"\";\n\n  try {\n    const url = new URL(withoutFragment);\n    return `${url.protocol}//${url.host}${sanitizePathname(url.pathname)}${sanitizeQuery(url.search)}`;\n  } catch {\n    const queryIndex = withoutFragment.indexOf(\"?\");\n    const pathname =\n      queryIndex >= 0 ? withoutFragment.slice(0, queryIndex) : withoutFragment;\n    const search = queryIndex >= 0 ? withoutFragment.slice(queryIndex + 1) : \"\";\n    return `${sanitizePathname(pathname)}${sanitizeQuery(search)}`;\n  }\n}\n\nexport function buildProviderApiAuditSummary(args: {\n  method?: unknown;\n  provider?: unknown;\n  path?: unknown;\n}): string {\n  const method = String(args.method || \"GET\").toUpperCase();\n  const provider = String(args.provider ?? \"\");\n  const path = sanitizeProviderApiAuditPath(args.path);\n  return `${method} ${provider} ${path}`.slice(0, 200);\n}\n"]}

package/src/actions/provider-api-audit.ts

@@ -1,88 +0,0 @@
-const REDACTED = "[redacted]";
-
-const CREDENTIAL_NAME =
-  /^(?:api[-_]?key|access[-_]?token|auth(?:orization)?|bearer|credential|password|secret|signature|sig|token|x-amz-credential|x-amz-signature)$/i;
-
-function decodePathSegment(segment: string): string {
-  try {
-    return decodeURIComponent(segment);
-  } catch {
-    return segment;
-  }
-}
-
-function looksLikeCredentialValue(segment: string): boolean {
-  const value = decodePathSegment(segment);
-  if (/^eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/.test(value)) {
-    return true;
-  }
-  if (
-    /^(?:sk|pk|rk|ghp|github_pat|xox[baprs]|ya29|AIza)[-_][A-Za-z0-9_-]+$/i.test(
-      value,
-    )
-  ) {
-    return true;
-  }
-  return value.length >= 32 && /^[A-Za-z0-9._~-]+$/.test(value);
-}
-
-function sanitizePathname(pathname: string): string {
-  let redactNext = false;
-  return pathname
-    .split("/")
-    .map((segment) => {
-      if (!segment) return segment;
-      const decoded = decodePathSegment(segment);
-      if (redactNext) {
-        redactNext = false;
-        return REDACTED;
-      }
-
-      const assignment = decoded.match(/^([^=:]+)([=:])(.+)$/);
-      if (assignment && CREDENTIAL_NAME.test(assignment[1]!)) {
-        return `${assignment[1]}${assignment[2]}${REDACTED}`;
-      }
-      if (CREDENTIAL_NAME.test(decoded)) {
-        redactNext = true;
-        return segment;
-      }
-      return looksLikeCredentialValue(segment) ? REDACTED : segment;
-    })
-    .join("/");
-}
-
-function sanitizeQuery(search: string): string {
-  if (!search) return "";
-  const redacted = Array.from(new URLSearchParams(search).keys(), (key) => {
-    const safeKey = encodeURIComponent(key.slice(0, 100));
-    return `${safeKey}=${REDACTED}`;
-  });
-  return redacted.length > 0 ? `?${redacted.join("&")}` : "";
-}
-
-export function sanitizeProviderApiAuditPath(path: unknown): string {
-  const raw = String(path ?? "");
-  const withoutFragment = raw.split("#", 1)[0] ?? "";
-
-  try {
-    const url = new URL(withoutFragment);
-    return `${url.protocol}//${url.host}${sanitizePathname(url.pathname)}${sanitizeQuery(url.search)}`;
-  } catch {
-    const queryIndex = withoutFragment.indexOf("?");
-    const pathname =
-      queryIndex >= 0 ? withoutFragment.slice(0, queryIndex) : withoutFragment;
-    const search = queryIndex >= 0 ? withoutFragment.slice(queryIndex + 1) : "";
-    return `${sanitizePathname(pathname)}${sanitizeQuery(search)}`;
-  }
-}
-
-export function buildProviderApiAuditSummary(args: {
-  method?: unknown;
-  provider?: unknown;
-  path?: unknown;
-}): string {
-  const method = String(args.method || "GET").toUpperCase();
-  const provider = String(args.provider ?? "");
-  const path = sanitizeProviderApiAuditPath(args.path);
-  return `${method} ${provider} ${path}`.slice(0, 200);
-}