@agentdocumentformat/cli 0.7.6 → 0.7.8

package/dist/adf.mjs

@@ -9,7 +9,7 @@ import "./chunks/chunk-M2RX3S2T.mjs";
 
 // src/main/cli/bin.ts
 function version() {
-  return "0.7.6";
+  return "0.7.8";
 }
 var DAEMON_HELP = `Usage: adf daemon [--port <n>] [--host <h>] [--settings <file>]
        adf daemon start [--port <n>] [--force]
@@ -140,9 +140,9 @@ async function main(argv) {
       let { daemonPaths } = await import("./chunks/daemon-control-HKFVSQTQ.mjs");
       process.env.ADF_DAEMON_PIDFILE = daemonPaths(Number(process.env.ADF_DAEMON_PORT ?? 7385)).pidFile;
     }
-    return await import("./chunks/daemon-ZT5J445W.mjs"), -1;
+    return await import("./chunks/daemon-YDIK3AAM.mjs"), -1;
   }
-  let [{ runCli, tuiInvocation }, control] = await Promise.all([import("./chunks/cli-XORTCRZW.mjs"), import("./chunks/daemon-control-HKFVSQTQ.mjs")]);
+  let [{ runCli, tuiInvocation }, control] = await Promise.all([import("./chunks/cli-NMFIAR7Z.mjs"), import("./chunks/daemon-control-HKFVSQTQ.mjs")]);
   return tuiInvocation(argv) && process.env.NODE_ENV === void 0 && (process.env.NODE_ENV = "production", process.env.ADF_NODE_ENV_DEFAULTED = "1"), await runCli(argv, {
     fetch: globalThis.fetch.bind(globalThis),
     stdout: (text) => process.stdout.write(text),

package/dist/chunks/{App-U2XSNHUV.mjs → App-7RIIOHJJ.mjs}

@@ -140,7 +140,7 @@ import {
 } from "./chunk-KXEF4F4E.mjs";
 import {
   DaemonClient
-} from "./chunk-3UCKYP7P.mjs";
+} from "./chunk-VN7UH7I5.mjs";
 import {
   DaemonError,
   MAIN_LOOP,
@@ -154,10 +154,9 @@ import {
   savePrefs
 } from "./chunk-5QU5VY7N.mjs";
 import {
-  ADF_SKILLS_REGISTRY_URL,
   checkFetchTarget,
   context_breakdown_exports
-} from "./chunk-2WSQ7V6K.mjs";
+} from "./chunk-Y2QA53AN.mjs";
 import "./chunk-2NAP2ZF7.mjs";
 import "./chunk-5PO5PKRV.mjs";
 import "./chunk-VMHTYDH4.mjs";
@@ -204,6 +203,9 @@ import {
   external_exports
 } from "./chunk-ZJKXHM4Q.mjs";
 import "./chunk-RIX34QHC.mjs";
+import {
+  ADF_SKILLS_REGISTRY_URL
+} from "./chunk-G6PH7RPW.mjs";
 import "./chunk-CD3ATSXE.mjs";
 import {
   __export,

package/dist/chunks/{chunk-HPVFJYXR.mjs → chunk-ESP3VNMX.mjs}

@@ -81,7 +81,7 @@ var EnvironmentResolver = class {
         return "";
       }
     try {
-      let val = this.workspace.getIdentity(name.toLowerCase());
+      let val = this.workspace.getIdentityForCode(name.toLowerCase(), null);
       if (val) return val;
     } catch {
     }

package/dist/chunks/{chunk-2WSQ7V6K.mjs → chunk-G6PH7RPW.mjs}

@@ -8,9 +8,6 @@ import {
   AGENT_DEFAULTS,
   DEFAULT_TOOLS
 } from "./chunk-CD3ATSXE.mjs";
-import {
-  __export
-} from "./chunk-M2RX3S2T.mjs";
 
 // src/shared/constants/adf-defaults.ts
 var ADF_VERSION = "0.2", DOCS_GUIDES_URL = "https://raw.githubusercontent.com/christianbalevski/adf/main/docs/guides", ADF_SKILLS_REGISTRY_URL = "https://raw.githubusercontent.com/christianbalevski/adf/main/skills/registry.json", PROVIDER_TYPES = [
@@ -250,246 +247,6 @@ The \`ws_*\` tools manage your configured connections (schemas have the details)
 };
 var DEFAULT_COMPACTION_PROMPT = "You are a conversation compactor. Read the transcript between an AI agent and its environment and write a present-tense status briefing: bullets organized by topic, under 1500 words. Keep current task state, key decisions and their reasoning, exact paths, names, IDs, and values in play, pending work and next steps, constraints or preferences discovered, open questions and hunches the agent was carrying, and anything surprising or still unexplained. Keep exact details; a vague summary is useless. Keep every open thread; anything dropped here is gone. Transcript role tags carry the loop seq when known (`[USER S137]` / `[ASSISTANT S137]`), so when a bullet derives from specific messages, cite them (`[S137]`) and the summary stays traceable to the archived history in adf_audit.";
 
-// src/main/utils/ssrf-guard.ts
-import { lookup } from "node:dns/promises";
-import { isIP } from "node:net";
-var ALLOWED_FETCH_PROTOCOLS = /* @__PURE__ */ new Set(["http:", "https:"]), ALLOWED_CONNECT_PROTOCOLS = /* @__PURE__ */ new Set(["ws:", "wss:", "http:", "https:"]);
-function parseLooseIPv4(host) {
-  let parts = host.split(".");
-  if (parts.length < 1 || parts.length > 4) return null;
-  let nums = [];
-  for (let part of parts) {
-    if (part === "") return null;
-    let n;
-    if (/^0[xX][0-9a-fA-F]+$/.test(part)) n = parseInt(part.slice(2), 16);
-    else if (/^0[0-7]+$/.test(part)) n = parseInt(part.slice(1), 8);
-    else if (/^[0-9]+$/.test(part)) n = parseInt(part, 10);
-    else return null;
-    if (!Number.isFinite(n) || n < 0) return null;
-    nums.push(n);
-  }
-  for (let i = 0; i < nums.length - 1; i++) if (nums[i] > 255) return null;
-  let last = nums[nums.length - 1];
-  if (last >= Math.pow(256, 4 - nums.length + 1)) return null;
-  let value = last;
-  for (let i = 0; i < nums.length - 1; i++) value += nums[i] * Math.pow(256, 3 - i);
-  return [value >>> 24 & 255, value >>> 16 & 255, value >>> 8 & 255, value & 255].join(".");
-}
-function isBlockedIPv4(ip) {
-  let o = ip.split(".").map(Number);
-  if (o.length !== 4 || o.some((n) => !Number.isInteger(n) || n < 0 || n > 255)) return !1;
-  let [a, b, c] = o;
-  return a === 0 || a === 10 || a === 127 || a === 100 && b >= 64 && b <= 127 || a === 169 && b === 254 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 0 && c === 0 || a === 192 && b === 168 || a === 198 && (b === 18 || b === 19) || a >= 224;
-}
-function isBlockedIPv6(raw) {
-  let addr = raw.toLowerCase().replace(/^\[|\]$/g, "").split("%")[0];
-  if (addr === "::" || addr === "::1" || /^(0:){7}[01]$/.test(addr)) return !0;
-  let mapped = addr.match(/^::(?:ffff:(?:0{1,4}:)?)?((?:\d{1,3}\.){3}\d{1,3})$/);
-  if (mapped) return isBlockedIPv4(mapped[1]);
-  let head = addr.split(":")[0];
-  if (!head) return !1;
-  let h = parseInt(head, 16);
-  return Number.isNaN(h) ? !1 : (h & 65472) === 65152 || (h & 65024) === 64512 || (h & 65280) === 65280;
-}
-function isBlockedIpAddress(ip) {
-  let version = isIP(ip.replace(/^\[|\]$/g, ""));
-  return version === 4 ? isBlockedIPv4(ip) : version === 6 ? isBlockedIPv6(ip) : !1;
-}
-function isLinkLocalIp(ip) {
-  let bare = ip.replace(/^\[|\]$/g, "").split("%")[0], version = isIP(bare);
-  if (version === 4) {
-    let o = bare.split(".").map(Number);
-    return o[0] === 169 && o[1] === 254;
-  }
-  if (version === 6) {
-    let addr = bare.toLowerCase(), mapped = addr.match(/^::(?:ffff:(?:0{1,4}:)?)?((?:\d{1,3}\.){3}\d{1,3})$/);
-    if (mapped) {
-      let o = mapped[1].split(".").map(Number);
-      return o[0] === 169 && o[1] === 254;
-    }
-    let head = addr.split(":")[0], h = parseInt(head, 16);
-    return Number.isNaN(h) ? !1 : (h & 65472) === 65152;
-  }
-  return !1;
-}
-function isLoopbackIp(ip) {
-  let bare = ip.replace(/^\[|\]$/g, "").split("%")[0], version = isIP(bare);
-  if (version === 4) return bare.split(".").map(Number)[0] === 127;
-  if (version === 6) {
-    let addr = bare.toLowerCase();
-    if (addr === "::1" || /^(0:){7}1$/.test(addr)) return !0;
-    let mapped = addr.match(/^::(?:ffff:(?:0{1,4}:)?)?((?:\d{1,3}\.){3}\d{1,3})$/);
-    return mapped ? mapped[1].split(".").map(Number)[0] === 127 : !1;
-  }
-  return !1;
-}
-function isLoopbackHostname(host) {
-  let h = host.toLowerCase().replace(/\.$/, "");
-  return h === "localhost" || h === "localhost.localdomain" || h.endsWith(".localhost");
-}
-function isUnspecifiedIp(ip) {
-  let bare = ip.replace(/^\[|\]$/g, "").split("%")[0].toLowerCase();
-  if (bare === "0.0.0.0" || bare === "::" || /^(0{1,4}:){7}0{1,4}$/.test(bare)) return !0;
-  let mapped = bare.match(/^::(?:ffff:(?:0{1,4}:)?)?((?:\d{1,3}\.){3}\d{1,3})$/);
-  return mapped ? mapped[1] === "0.0.0.0" : !1;
-}
-function blockedMessage(target) {
-  return `Blocked by the sys_fetch SSRF guard: "${target}" is a private-network address (loopback is allowed by default). Set security.allow_local_fetch: true in your config to permit private/LAN fetches \u2014 an agent-initiated write to that setting raises an owner approval request.`;
-}
-function connectBlockedMessage(target) {
-  return `Blocked by the ws_connect SSRF guard: "${target}" is a private-network address (loopback is allowed by default). Set security.allow_local_fetch: true in your config to permit private/LAN connections \u2014 an agent-initiated write to that setting raises an owner approval request.`;
-}
-async function classifyHost(host) {
-  let loopbackHost = !1, candidates = [];
-  if (isIP(host))
-    candidates = [host];
-  else if (isLoopbackHostname(host))
-    loopbackHost = !0;
-  else {
-    let loose = parseLooseIPv4(host);
-    if (loose)
-      candidates = [loose];
-    else
-      try {
-        candidates = (await lookup(host, { all: !0, verbatim: !0 })).map((a) => a.address);
-      } catch {
-        return null;
-      }
-  }
-  return {
-    anyLinkLocal: candidates.some(isLinkLocalIp),
-    anyLoopback: loopbackHost || candidates.some(isLoopbackIp),
-    anyUnspecified: candidates.some(isUnspecifiedIp),
-    // Blocked classes minus loopback (private, CGNAT, unspecified, multicast, …)
-    // — loopback itself is allowed by default and only tier-gated per-port.
-    anyNonLoopbackBlocked: candidates.some((ip) => isBlockedIpAddress(ip) && !isLoopbackIp(ip))
-  };
-}
-function applyPolicy(target, port, path, cls, opts, overridableMessage) {
-  return cls.anyLinkLocal ? `Blocked: "${target}" is a link-local / cloud-metadata address, which is never fetchable (even with allow_local_fetch).` : (cls.anyLoopback || cls.anyUnspecified) && opts.daemonPort && port === opts.daemonPort ? `Blocked: "${target}" (port ${port}) is the local ADF daemon control API, which is never fetchable, even with allow_local_fetch.` : opts.ownOrigin && cls.anyLoopback && port === opts.ownOrigin.port && path.startsWith(opts.ownOrigin.pathPrefix) || opts.allowLocal ? null : cls.anyNonLoopbackBlocked ? overridableMessage(target) : null;
-}
-async function checkFetchTarget(rawUrl, opts = { allowLocal: !1 }) {
-  let url;
-  try {
-    url = new URL(rawUrl);
-  } catch {
-    return `Invalid URL: ${rawUrl}`;
-  }
-  if (!ALLOWED_FETCH_PROTOCOLS.has(url.protocol))
-    return `Blocked by the sys_fetch guard: only http and https URLs may be fetched (got "${url.protocol}").`;
-  let host = url.hostname.replace(/^\[|\]$/g, "");
-  if (!host) return `Invalid URL: ${rawUrl}`;
-  let port = url.port ? Number(url.port) : url.protocol === "https:" ? 443 : 80, cls = await classifyHost(host);
-  return cls ? applyPolicy(url.hostname, port, url.pathname, cls, opts, blockedMessage) : null;
-}
-async function checkConnectTarget(rawUrl, opts = { allowLocal: !1 }) {
-  let url;
-  try {
-    url = new URL(rawUrl);
-  } catch {
-    return `Invalid URL: ${rawUrl}`;
-  }
-  if (!ALLOWED_CONNECT_PROTOCOLS.has(url.protocol))
-    return `Blocked by the ws_connect guard: only ws, wss, http and https URLs may be connected (got "${url.protocol}").`;
-  let host = url.hostname.replace(/^\[|\]$/g, "");
-  if (!host) return `Invalid URL: ${rawUrl}`;
-  let secure = url.protocol === "wss:" || url.protocol === "https:", port = url.port ? Number(url.port) : secure ? 443 : 80, cls = await classifyHost(host);
-  return cls ? applyPolicy(url.hostname, port, url.pathname, cls, opts, connectBlockedMessage) : null;
-}
-
-// src/shared/utils/context-breakdown.ts
-var context_breakdown_exports = {};
-__export(context_breakdown_exports, {
-  DEFAULT_COMPACT_THRESHOLD: () => DEFAULT_COMPACT_THRESHOLD,
-  contextCategories: () => contextCategories,
-  contextTotal: () => contextTotal,
-  resolveCompactThreshold: () => resolveCompactThreshold,
-  resolveHostThreshold: () => resolveHostThreshold,
-  resolveLoopThreshold: () => resolveLoopThreshold
-});
-var DEFAULT_COMPACT_THRESHOLD = 1e5;
-function hostThreshold(config, model) {
-  let context = config?.context?.compact_threshold;
-  if (context != null) return { value: context, source: "agent" };
-  let fromModel = model?.compact_threshold;
-  return fromModel != null ? { value: fromModel, source: "model" } : { value: 1e5, source: "default" };
-}
-function resolveCompactThreshold(config, loop) {
-  if (!loop || loop === "main") return hostThreshold(config, config?.model);
-  let declared = config?.loops?.find((l) => l.name === loop);
-  return declared ? declared.compact_threshold != null ? { value: declared.compact_threshold, source: "loop" } : hostThreshold(config, declared.model ?? config?.model) : hostThreshold(config, config?.model);
-}
-function resolveHostThreshold(config) {
-  return resolveCompactThreshold(config).value;
-}
-function resolveLoopThreshold(config, loop) {
-  return resolveCompactThreshold(config, loop).value;
-}
-function contextTotal(b) {
-  return b.system_prompt_tokens + b.tools_total_tokens + b.messages_tokens + b.dynamic_instructions_tokens;
-}
-var byTokens = (list) => [...list].sort((a, b) => b.tokens - a.tokens);
-function contextCategories(b, maxItems = 12) {
-  let fileTokens = b.injected_files.reduce((sum, f) => sum + f.tokens, 0), parts = b.system_prompt_parts, out = [
-    {
-      id: "system",
-      key: "system",
-      label: "System prompt",
-      tokens: Math.max(0, b.system_prompt_tokens - fileTokens),
-      items: parts ? byTokens([
-        { name: "Base prompt and capability sections", tokens: parts.base_and_sections },
-        { name: "Agent instructions", tokens: parts.instructions },
-        { name: "Identity, loop roster, runtime blocks", tokens: parts.runtime_blocks }
-      ]).filter((i) => i.tokens > 0) : [],
-      note: "Base prompt, instructions and runtime blocks: sent with every request."
-    }
-  ];
-  b.injected_files.length > 0 && out.push({
-    id: "files",
-    key: "files",
-    label: "Injected files",
-    tokens: fileTokens,
-    count: b.injected_files.length,
-    items: byTokens(b.injected_files.map((f) => ({ name: f.path, tokens: f.tokens }))).slice(0, maxItems),
-    note: "{{path}} files rendered into the system prompt."
-  });
-  let builtIn = b.tool_groups.filter((g) => g.source === "built-in"), builtInTools = builtIn.flatMap((g) => g.tools);
-  out.push({
-    id: "tools",
-    key: "tools",
-    label: "Tools",
-    tokens: builtIn.reduce((sum, g) => sum + g.tokens, 0),
-    count: builtInTools.length,
-    items: byTokens(builtInTools).slice(0, maxItems),
-    note: "Built-in tool schemas: sent with every request."
-  });
-  for (let group of b.tool_groups)
-    group.source !== "built-in" && out.push({
-      id: `mcp:${group.source}`,
-      key: "mcp",
-      label: `MCP ${group.source}`,
-      tokens: group.tokens,
-      count: group.tools.length,
-      items: byTokens(group.tools).slice(0, maxItems),
-      note: `Tool schemas from the ${group.source} MCP server.`
-    });
-  return out.push({
-    id: "dynamic",
-    key: "dynamic",
-    label: "Dynamic instructions",
-    tokens: b.dynamic_instructions_tokens,
-    items: [],
-    note: "Per-turn runtime notes (context pressure, reminders)."
-  }), out.push({
-    id: "messages",
-    key: "messages",
-    label: "Conversation",
-    tokens: b.messages_tokens,
-    items: [],
-    note: "This loop\u2019s history, compaction summary included (estimate)."
-  }), byTokens(out);
-}
-
 export {
   DOCS_GUIDES_URL,
   ADF_SKILLS_REGISTRY_URL,
@@ -500,11 +257,5 @@ export {
   DEFAULT_BASE_PROMPT,
   DEFAULT_TOOL_PROMPTS,
   DEFAULT_DYNAMIC_PROMPTS,
-  DEFAULT_COMPACTION_PROMPT,
-  checkFetchTarget,
-  checkConnectTarget,
-  resolveCompactThreshold,
-  contextTotal,
-  contextCategories,
-  context_breakdown_exports
+  DEFAULT_COMPACTION_PROMPT
 };