@ai-setting/roy-agent-core 1.7.53 → 1.7.56

package/dist/env/workflow/utils/agent-session-metadata.d.ts

@@ -9,6 +9,19 @@ export declare function updateAgentSessionStatus(agentSessions: AgentSessionRef[
  * Convenience wrapper over updateAgentSessionStatus for symmetry with Failed/Stopped.
  */
 export declare function markAgentSessionCompleted(agentSessions: AgentSessionRef[] | undefined, nodeId: string): AgentSessionRef[];
+/**
+ * Register (or refresh) a node's agent sub-session reference.
+ *
+ * Replaces an existing entry for the same `nodeId` (refresh + reset to
+ * 'active') or appends a new one. Returns a new array; does not mutate input.
+ *
+ * Task #4412 C1: this used to be inline in `AgentNode.createAgentSubSession()`
+ * operating directly on the metadata it had just read, which loses entries when
+ * sibling agent nodes register concurrently. Extracted here so the engine can
+ * run it *inside* its serialized metadata queue (where the array it receives is
+ * guaranteed to be the current one).
+ */
+export declare function upsertAgentSession(agentSessions: AgentSessionRef[] | undefined, nodeId: string, agentSessionId: string): AgentSessionRef[];
 /**
  * Mark a single node's agent session as 'failed'.
  */

package/dist/env/workflow/utils/index.js

@@ -14,24 +14,24 @@ import {
   hasClosedOutputContract,
   validateTemplateContracts,
   validateWorkflowDefinition
-} from "../../../shared/@ai-setting/roy-agent-core-na73mym1.js";
+} from "../../../shared/@ai-setting/roy-agent-core-202v00x4.js";
 import {
   TemplateResolver,
   init_template_resolver,
   resolveTemplateString,
   resolveTemplates
-} from "../../../shared/@ai-setting/roy-agent-core-tjg71zqp.js";
+} from "../../../shared/@ai-setting/roy-agent-core-3mc6vmvj.js";
 import {
   getFromMapWithNormalization,
   init_node_id_utils
 } from "../../../shared/@ai-setting/roy-agent-core-ddwa0n6h.js";
-import"../../../shared/@ai-setting/roy-agent-core-8s9jd2qy.js";
+import"../../../shared/@ai-setting/roy-agent-core-nra8vfrs.js";
 import"../../../shared/@ai-setting/roy-agent-core-jrj30vq3.js";
 import"../../../shared/@ai-setting/roy-agent-core-e25xkv53.js";
 import {
   TracedAs,
   init_decorator
-} from "../../../shared/@ai-setting/roy-agent-core-dsevjbck.js";
+} from "../../../shared/@ai-setting/roy-agent-core-b599jgyd.js";
 import"../../../shared/@ai-setting/roy-agent-core-8seq65bp.js";
 import"../../../shared/@ai-setting/roy-agent-core-jnszp0jq.js";
 import {
@@ -208,7 +208,7 @@ class ExecutionStateBuilder {
   }
 }
 __legacyDecorateClassTS([
-  TracedAs("recovery.builder.build", { recordParams: true, recordResult: true, log: true })
+  TracedAs("recovery.builder.build", { recordParams: true, recordResult: false, log: true })
 ], ExecutionStateBuilder.prototype, "build", null);
 __legacyDecorateClassTS([
   TracedAs("recovery.builder.parseMessages", { recordParams: true, recordResult: true, log: true })

package/dist/env/workflow/utils/redact-command-secrets.d.ts

@@ -0,0 +1,70 @@
+/**
+ * @fileoverview redact-command-secrets.ts — Mask inline secrets in shell commands
+ * before they are embedded in a user/agent-visible error message (Task #4392 P0-2).
+ *
+ * Background: #4385 §5.5 diff-1 asks for `Tool exited with code N` to be enriched
+ * with the command that was run. That command may legitimately contain inline
+ * credentials (`twine upload --password=...`, `curl -H "Authorization: Bearer ..."`,
+ * `PIP_INDEX_TOKEN=... npm publish`), which must NOT leak into:
+ *   - `workflow.node.end` session messages,
+ *   - trace span attributes,
+ *   - the LLM context of the next turn.
+ *
+ * This helper is a *best-effort* shell-string masker (complementary to
+ * `sensitive-redact.ts`, which only redacts object **field names**). It never
+ * tries to parse shell; it matches the common credential shapes:
+ *
+ *   1. `KEY=value` / `KEY: value` / `--flag value` / `--flag=value`
+ *      where KEY looks sensitive (`ASSIGNMENT_RE`, `FLAG_RE`).
+ *   2. `<Scheme> <credential>` auth headers — `Authorization: Bearer <token>`,
+ *      `Basic <base64>`, `Token <value>`, `Digest <value>` (`AUTH_SCHEME_RE`).
+ *      The value is a *separate* word from the scheme, hence its own rule.
+ *   3. URL query credentials — `?token=`, `&api_key=`, `&secret=`, `&sig=`
+ *      (`URL_QUERY_RE`).
+ *   4. URL userinfo credentials — `https://user:pass@host` (`URL_USERINFO_RE`).
+ *   5. Short-option credentials — `curl -u user:pass`, `docker login -p <pw>`,
+ *      `mysql -pVALUE` (`SHORT_CRED_RE`).
+ *
+ * ## Why rules 2–5 exist (Task #4419, from #4417 §B-1)
+ *
+ * The original implementation only had rules 1, and its bare-value branch stops
+ * at the first whitespace. `Authorization: Bearer <token>` is *two* words, so it
+ * masked `Bearer` and left the token intact. #4417 measured 9 of 14 real command
+ * shapes still leaking. Rules 2–5 close those holes.
+ *
+ * ## Ordering / idempotency
+ *
+ * The rules are applied in a fixed order and each rule already skips values that
+ * equal the `[REDACTED]` sentinel, so `redact(redact(x)) === redact(x)` holds.
+ * Rule 2 is applied **before** rule 1: rule 1 would otherwise see
+ * `Authorization: Bearer` and mask only the scheme word, leaving an
+ * `Authorization: [REDACTED] <token>` remainder that rule 2 can no longer anchor.
+ *
+ * ## Non-goals
+ *
+ * - No shell parsing / word-splitting (quoting, `$VAR` expansion, heredocs).
+ * - Environment-variable *references* (`$TOKEN`, `${TOKEN}`) are left alone —
+ *   the variable name is not itself a secret, and masking it destroys the
+ *   diagnostic value of the message.
+ */
+/**
+ * Mask inline secrets inside a single shell command string.
+ *
+ * Idempotent: masked values (`[REDACTED]`) are left as-is.
+ *
+ * @param command - The raw command string (may be multi-line).
+ * @returns The command with sensitive values replaced by `[REDACTED]`.
+ */
+export declare function redactCommandSecrets(command: string): string;
+/**
+ * Collapse a multi-line command into a single readable line and truncate it.
+ *
+ * Rationale: error messages are rendered as one line in `workflow.node.end`
+ * messages and in most logs; embedding raw newlines makes them unreadable and
+ * breaks naive `grep`-based diagnosis.
+ *
+ * @param command - Raw command (possibly multi-line, possibly huge).
+ * @param maxLen - Maximum length of the returned string (default 120).
+ * @returns Single-line, whitespace-normalized, truncated command.
+ */
+export declare function summarizeCommand(command: string, maxLen?: number): string;

package/dist/env/workflow/utils/shell-dialect-lint.d.ts

@@ -0,0 +1,75 @@
+/**
+ * @fileoverview Shell dialect lint for workflow `tool` node commands
+ * (Task #4392 P0-3; root cause proven in Task #4385 §3.2.1).
+ *
+ * ## Why this exists
+ *
+ * The built-in `bash` tool spawns its command with Node's
+ * `child_process.spawn(command, [], { shell: true })`
+ * (see `env/tool/built-in/bash-effect.ts`). On POSIX, `shell: true` resolves to
+ * **`/bin/sh`**, which on Debian/Ubuntu is a symlink to **dash** — *not* bash.
+ *
+ * Every bash-only construct therefore fails inside a workflow tool node. Worse,
+ * half of them fail **silently**:
+ *
+ * | construct            | dash behaviour                | exit | loud? |
+ * | -------------------- | ----------------------------- | ---- | ----- |
+ * | `set -o pipefail`    | `Illegal option -o pipefail`  | 2    | ✅    |
+ * | `${PIPESTATUS[0]}`   | `Bad substitution`            | 2    | ✅    |
+ * | `${V//a/b}`          | `Bad substitution`            | 2    | ✅    |
+ * | `${BASH_SOURCE[0]}`  | `Bad substitution`            | 2    | ✅    |
+ * | `A=(1 2 3)`          | `Syntax error: "(" unexpected`| 2    | ✅    |
+ * | `function f() {}`    | `Syntax error: "(" unexpected`| 2    | ✅    |
+ * | `[[ ... ]]`          | `[[: not found`               | 127  | ✅    |
+ * | `source <file>`      | `source: not found`           | 0    | ❌    |
+ * | `echo -e "a\tb"`     | prints a literal `-e`         | 0    | ❌    |
+ * | `$RANDOM`            | empty string                  | 0    | ❌    |
+ *
+ * Task #4385 measured **63** `/bin/sh:` signature hits across 45 sessions, and
+ * these account for 27 of the workflow-creator's `exit 2` failures.
+ *
+ * ## Severity policy
+ *
+ * These findings are **warnings, never errors**. The 76 workflows already in
+ * `workflows.db` must keep validating cleanly, and a `dash`-safe workflow can
+ * legitimately contain the *string* `pipefail` inside an embedded heredoc that
+ * is executed by `bash -c` on purpose. Blocking on a heuristic regex would be
+ * wrong; surfacing it loudly for the author to judge is right.
+ *
+ * ## What is deliberately NOT flagged
+ *
+ * - `. <file>` (POSIX dot-command) — the correct replacement for `source`.
+ * - `$?`, `$0`, `$1`… — POSIX.
+ * - `[ ... ]` — POSIX test.
+ * - `sed 's/a/b/'` — no `${...}` involved.
+ * - Text inside shell **comments** (`# ...`) — cannot fail at runtime.
+ */
+/** A single detected bash-ism. */
+export interface ShellDialectFinding {
+    /** Stable rule name, e.g. `pipefail`. Used in machine-readable output. */
+    name: string;
+    /** Actionable replacement hint written for an LLM/tool author to act on. */
+    fix: string;
+    /** Short excerpt of the offending command (surrounding context). */
+    excerpt: string;
+}
+/**
+ * Detect bash-only constructs in a shell command intended for the `bash` tool.
+ *
+ * @param command - The raw command string (from `config.command`).
+ * @returns One finding per *distinct* rule that matched. Repeated occurrences of
+ *          the same rule are collapsed (a 50-line script using `$RANDOM` ten
+ *          times should produce one warning, not ten).
+ */
+export declare function lintShellDialect(command: string): ShellDialectFinding[];
+/**
+ * Render findings as one actionable line each, prefixed with the node id.
+ *
+ * Format is deliberately stable so it can be asserted in tests and grepped in
+ * logs:
+ *   `[shell-dialect] node "build-x" uses bash-only "pipefail": <fix> | near: <excerpt>`
+ *
+ * @param nodeId - The workflow node id that owns the command.
+ * @param findings - Output of `lintShellDialect`.
+ */
+export declare function formatShellDialectFindings(nodeId: string, findings: ShellDialectFinding[]): string[];

package/dist/env/workflow/utils/validate-workflow-definition.d.ts

@@ -13,6 +13,14 @@
  *     read `.result` off a **tool** node (which has no such field) and the
  *     engine silently substituted an empty string.
  *
+ *   Layer 3 — **Shell dialect lint** (Task #4392 P0-3, see
+ *     `shell-dialect-lint.ts`): the `bash` tool spawns with `shell: true`,
+ *     i.e. `/bin/sh` = dash. bash-only constructs (`set -o pipefail`,
+ *     `${PIPESTATUS[0]}`, `[[ ]]`, `source`, arrays, `$RANDOM`, `echo -e`, ...)
+ *     either fail loudly or -- worse -- silently no-op. Reported as **warning**
+ *     only: existing registered workflows must not be invalidated by a
+ *     heuristic regex.
+ *
  * Wraps everything in a defensive try/catch so callers (workflow_add tool,
  * `workflow add` CLI, workflow_validate tool, TaskTagPlugin.extractWorkflow)
  * always get a consistent `{ valid, errors, warnings, infos }` shape — even
@@ -46,6 +54,14 @@ export interface ValidateWorkflowOptions {
      * incrementally).
      */
     skipTemplateContracts?: boolean;
+    /**
+     * Skip the Layer-3 shell-dialect lint. Defaults to `false`.
+     *
+     * Layer 3 emits **warnings only**, so there is rarely a reason to disable it;
+     * this switch exists for corpus/regression tests that pin the exact warning
+     * set of already-registered workflows.
+     */
+    lintShellDialect?: boolean;
 }
 /**
  * Validate a workflow definition (structure + template contracts).
@@ -55,3 +71,9 @@ export interface ValidateWorkflowOptions {
  * @returns `{ valid, errors, warnings, infos, findings }` — never throws.
  */
 export declare function validateWorkflowDefinition(definition: unknown, options?: ValidateWorkflowOptions): ValidateWorkflowResult;
+/**
+ * Walk every `tool` node of a definition and lint its shell command(s).
+ *
+ * @returns Formatted, actionable warning lines (empty when clean).
+ */
+export declare function collectShellDialectWarnings(definition: unknown): string[];

package/dist/index.d.ts

@@ -18,7 +18,7 @@ export type { ToolContext } from "./env/tool/types";
 export type { ToolHookContext } from "./env/tool/tool-component";
 export { AgentComponent, type AgentComponentConfig, type AgentContext, AgentComponentConfigSchema, type Plugin, type HookPoint, type HookContext, } from "./env/agent";
 export { AgentRegistry, type AgentDefinition, type AgentType, type AgentConfig, type ExportOptions, } from "./env/agent/agent-registry";
-export { LogTraceComponent, type LogTraceConfig, type LogTraceComponentOptions, LogTraceConfigSchema, Traced, TracedAs, TracedLightweight, wrapFunction, type TracedOptions, createLogger, getLogDir, setLogDirOverride, setQuietMode, isQuietMode, getLogLevels, getLogLevel, setLoggerConfigComponent, SQLiteSpanStorage, type SpanContext, type SpanAttributes, type Span, type TraceInfo, type SpanStorage, type LogLevel, type LoggerConfig, type ILogger, SpanKind, SpanStatus, OTelTracerProvider, getTracerProvider, resetTracerProvider, type OTelTracer, type OTelSpan, type SpanOptions, propagation, } from "./env/log-trace";
+export { LogTraceComponent, type LogTraceConfig, type LogTraceComponentOptions, LogTraceConfigSchema, Traced, TracedAs, TracedLightweight, wrapFunction, type TracedOptions, createLogger, getLogDir, setLogDirOverride, setQuietMode, isQuietMode, getLogLevels, getLogLevel, setLoggerConfigComponent, SQLiteSpanStorage, type SpanContext, type SpanAttributes, type Span, type TraceInfo, type SpanStorage, type LogLevel, type LoggerConfig, type ILogger, SpanKind, SpanStatus, OTelTracerProvider, getTracerProvider, resetTracerProvider, type OTelTracer, type OTelSpan, type SpanOptions, propagation, isTraceFullMode, resetTraceFullModeCache, llmInvokeParamFilter, llmInvokeResultFilter, messagesParamFilter, toolExecParamFilter, toolInvokeParamFilter, toolExecResultFilter, embedParamFilter, embedResultFilter, envQueryParamFilter, agentRunParamFilter, recordSessionMessagesParamFilter, } from "./env/log-trace";
 export { DebugComponent, TraceFormatter, TreeFormatter, ReplFormatter, type TraceDataSource, type TraceParserOptions, } from "./env/debug";
 export type { TraceEntry, TraceTreeNode, ParserOptions, LogDiscoveryOptions, TraceIdInfo, TraceSummary, TraceAction, LogLevel as DebugLogLevel, FormatOptions, } from "./env/debug";
 export { PromptComponent, type PromptComponentOptions, } from "./env/prompt/prompt-component";

package/dist/index.js

@@ -8,10 +8,10 @@ import {
   grepTool,
   readFileTool,
   writeFileTool
-} from "./shared/@ai-setting/roy-agent-core-athdr2m0.js";
+} from "./shared/@ai-setting/roy-agent-core-4zy2v3br.js";
 import {
   ConfigComponent
-} from "./shared/@ai-setting/roy-agent-core-qamktze3.js";
+} from "./shared/@ai-setting/roy-agent-core-qyqnmz8c.js";
 import {
   getUnderstandImageLLMProvider,
   resetUnderstandImageLLMProvider,
@@ -21,7 +21,7 @@ import {
 import {
   PromptComponent,
   PromptStore
-} from "./shared/@ai-setting/roy-agent-core-stnddvx9.js";
+} from "./shared/@ai-setting/roy-agent-core-6qgq7h1g.js";
 import {
   LLMComponent,
   LLMConfigSchema,
@@ -29,17 +29,11 @@ import {
   ModelLimitsSchema,
   ProviderCapabilitiesSchema,
   ProviderConfigSchema
-} from "./shared/@ai-setting/roy-agent-core-p8ak03s0.js";
+} from "./shared/@ai-setting/roy-agent-core-q7zksbw0.js";
 import"./shared/@ai-setting/roy-agent-core-adg9ghbt.js";
-import {
-  ATTACH_FILE_MAX_BYTES,
-  isMediaType,
-  parseImageInput,
-  sniffMimeType
-} from "./shared/@ai-setting/roy-agent-core-zjdzk1gg.js";
 import {
   MemoryComponent
-} from "./shared/@ai-setting/roy-agent-core-ak4dc3kg.js";
+} from "./shared/@ai-setting/roy-agent-core-gn8f4rhs.js";
 import"./shared/@ai-setting/roy-agent-core-g1s2h0e5.js";
 import {
   MemoryPlugin,
@@ -47,7 +41,7 @@ import {
 } from "./shared/@ai-setting/roy-agent-core-j5c3chtn.js";
 import {
   DebugComponent
-} from "./shared/@ai-setting/roy-agent-core-k25gv86p.js";
+} from "./shared/@ai-setting/roy-agent-core-0b3fdnn3.js";
 import {
   ReplFormatter,
   TraceFormatter,
@@ -55,30 +49,30 @@ import {
 } from "./shared/@ai-setting/roy-agent-core-rvv6ydff.js";
 import {
   SkillComponent
-} from "./shared/@ai-setting/roy-agent-core-2gay3sjt.js";
+} from "./shared/@ai-setting/roy-agent-core-yg247mk4.js";
 import"./shared/@ai-setting/roy-agent-core-psvxt4c9.js";
 import"./shared/@ai-setting/roy-agent-core-3ztzc83c.js";
 import {
   closeDatabase
-} from "./shared/@ai-setting/roy-agent-core-978b6wfx.js";
-import"./shared/@ai-setting/roy-agent-core-nde5gzta.js";
+} from "./shared/@ai-setting/roy-agent-core-5psjwd08.js";
+import"./shared/@ai-setting/roy-agent-core-m8n0dffe.js";
 import {
   BaseEnvironment,
   generateDescendingId,
   generateId
-} from "./shared/@ai-setting/roy-agent-core-4sx6sdb2.js";
+} from "./shared/@ai-setting/roy-agent-core-d4jpn06f.js";
 import {
   TaskComponent
-} from "./shared/@ai-setting/roy-agent-core-39xejr39.js";
+} from "./shared/@ai-setting/roy-agent-core-e0wbq0qq.js";
 import"./shared/@ai-setting/roy-agent-core-amkqnyzy.js";
 import {
   SQLiteTaskStore,
   getDefaultTaskDbPath
-} from "./shared/@ai-setting/roy-agent-core-qm9jda8p.js";
-import"./shared/@ai-setting/roy-agent-core-7g03zkkb.js";
+} from "./shared/@ai-setting/roy-agent-core-3kz6934b.js";
+import"./shared/@ai-setting/roy-agent-core-pemxr5n4.js";
 import"./shared/@ai-setting/roy-agent-core-rn57psp0.js";
 import"./shared/@ai-setting/roy-agent-core-8gxth0eh.js";
-import"./shared/@ai-setting/roy-agent-core-p2r27era.js";
+import"./shared/@ai-setting/roy-agent-core-vmg30n5x.js";
 import"./shared/@ai-setting/roy-agent-core-tbrn9wdm.js";
 import {
   BountyIMInstance,
@@ -92,7 +86,7 @@ import {
   larkCliHandler,
   resolveBountyIMSystemPrompt,
   timerHandler
-} from "./shared/@ai-setting/roy-agent-core-ph5qbqcx.js";
+} from "./shared/@ai-setting/roy-agent-core-2044fbsd.js";
 import {
   BUILT_IN_EVENT_SOURCE_TYPES,
   BUILT_IN_EVENT_SOURCE_TYPE_LIST,
@@ -105,33 +99,33 @@ import {
 import {
   LogTraceComponent,
   LogTraceConfigSchema
-} from "./shared/@ai-setting/roy-agent-core-rnwr39b0.js";
+} from "./shared/@ai-setting/roy-agent-core-w7hnjhvx.js";
 import {
   TaskTagPlugin,
   createAutoTaskPlugin
-} from "./shared/@ai-setting/roy-agent-core-hch2geta.js";
+} from "./shared/@ai-setting/roy-agent-core-ezsyyjxw.js";
 import {
   EventStoreImpl,
   getSharedEventStore,
   resetSharedEventStore,
   setSharedEventStore
-} from "./shared/@ai-setting/roy-agent-core-yhsssn86.js";
+} from "./shared/@ai-setting/roy-agent-core-zmeka63k.js";
 import {
   TaskHookPoints
 } from "./shared/@ai-setting/roy-agent-core-1pg0fepg.js";
 import {
   getBuiltInPrompt,
   getBuiltInPromptNames
-} from "./shared/@ai-setting/roy-agent-core-gdsqp6j8.js";
-import"./shared/@ai-setting/roy-agent-core-brwzs8wf.js";
-import"./shared/@ai-setting/roy-agent-core-j8e92gj8.js";
+} from "./shared/@ai-setting/roy-agent-core-6masakz4.js";
+import"./shared/@ai-setting/roy-agent-core-xcq04fq0.js";
+import"./shared/@ai-setting/roy-agent-core-nntphgww.js";
 import {
   WorkflowComponent
-} from "./shared/@ai-setting/roy-agent-core-4vpk40ss.js";
+} from "./shared/@ai-setting/roy-agent-core-nhk0dsxr.js";
 import {
   init_node_registry_helper,
   registerDecoratorNodeType
-} from "./shared/@ai-setting/roy-agent-core-vrsxhw9e.js";
+} from "./shared/@ai-setting/roy-agent-core-e677am8e.js";
 import {
   Edge,
   NodeAs,
@@ -140,53 +134,53 @@ import {
   createWorkflowFromClass
 } from "./shared/@ai-setting/roy-agent-core-h0x19xgn.js";
 import"./shared/@ai-setting/roy-agent-core-1ce3fqrk.js";
-import"./shared/@ai-setting/roy-agent-core-vvxb9522.js";
+import"./shared/@ai-setting/roy-agent-core-0bmk44ye.js";
 import {
   SessionComponent
-} from "./shared/@ai-setting/roy-agent-core-yd21n6c7.js";
+} from "./shared/@ai-setting/roy-agent-core-bwzy00t2.js";
 import {
   MemorySessionStore
-} from "./shared/@ai-setting/roy-agent-core-h93v6p6y.js";
+} from "./shared/@ai-setting/roy-agent-core-tc7gw38m.js";
 import"./shared/@ai-setting/roy-agent-core-hhrg314p.js";
-import"./shared/@ai-setting/roy-agent-core-7evvpfwc.js";
-import"./shared/@ai-setting/roy-agent-core-35s1w7tc.js";
+import"./shared/@ai-setting/roy-agent-core-5rxs0ra3.js";
+import"./shared/@ai-setting/roy-agent-core-v2188rnk.js";
 import"./shared/@ai-setting/roy-agent-core-6atd905e.js";
-import"./shared/@ai-setting/roy-agent-core-6167phd4.js";
-import"./shared/@ai-setting/roy-agent-core-x8n1r7h4.js";
+import"./shared/@ai-setting/roy-agent-core-833t16n1.js";
+import"./shared/@ai-setting/roy-agent-core-n3b7ztms.js";
 import"./shared/@ai-setting/roy-agent-core-1db4vpc6.js";
 import"./shared/@ai-setting/roy-agent-core-ze068vc9.js";
-import"./shared/@ai-setting/roy-agent-core-fs36xgcs.js";
-import"./shared/@ai-setting/roy-agent-core-9csa89jx.js";
+import"./shared/@ai-setting/roy-agent-core-3dkzqqsd.js";
+import"./shared/@ai-setting/roy-agent-core-r9qe0ghe.js";
 import"./shared/@ai-setting/roy-agent-core-7exqwax1.js";
-import"./shared/@ai-setting/roy-agent-core-na73mym1.js";
-import"./shared/@ai-setting/roy-agent-core-tjg71zqp.js";
+import"./shared/@ai-setting/roy-agent-core-202v00x4.js";
+import"./shared/@ai-setting/roy-agent-core-3mc6vmvj.js";
 import"./shared/@ai-setting/roy-agent-core-ddwa0n6h.js";
-import"./shared/@ai-setting/roy-agent-core-8s9jd2qy.js";
+import"./shared/@ai-setting/roy-agent-core-nra8vfrs.js";
 import"./shared/@ai-setting/roy-agent-core-jrj30vq3.js";
 import"./shared/@ai-setting/roy-agent-core-rvxg1wps.js";
 import {
   CommandsComponent
-} from "./shared/@ai-setting/roy-agent-core-zd3ddm4k.js";
+} from "./shared/@ai-setting/roy-agent-core-qjjf4tjb.js";
 import {
   AgentComponent,
   AgentComponentConfigSchema
-} from "./shared/@ai-setting/roy-agent-core-3tv1q6f2.js";
+} from "./shared/@ai-setting/roy-agent-core-9nv586rw.js";
 import {
   ToolComponent,
   ToolRegistry,
   ToolValidator
-} from "./shared/@ai-setting/roy-agent-core-fvs48d38.js";
+} from "./shared/@ai-setting/roy-agent-core-98aa9r0x.js";
 import"./shared/@ai-setting/roy-agent-core-kzg1jwt8.js";
 import {
   AgentRegistry
-} from "./shared/@ai-setting/roy-agent-core-rx16h2m1.js";
+} from "./shared/@ai-setting/roy-agent-core-97eyghsp.js";
 import {
   XDG_PATHS,
   getXDGPath,
   getXDGPaths
 } from "./shared/@ai-setting/roy-agent-core-qxnbvgwe.js";
-import"./shared/@ai-setting/roy-agent-core-dv714bqh.js";
-import"./shared/@ai-setting/roy-agent-core-pk1b3kvf.js";
+import"./shared/@ai-setting/roy-agent-core-wafk25ff.js";
+import"./shared/@ai-setting/roy-agent-core-ns3pbyz4.js";
 import {
   buildOpencodeHeaders,
   createInvokeConfig,
@@ -195,7 +189,13 @@ import {
   isOpencodeEndpoint,
   isOpencodeProvider,
   parseModelString
-} from "./shared/@ai-setting/roy-agent-core-zy3hqfwg.js";
+} from "./shared/@ai-setting/roy-agent-core-yv9x4wmg.js";
+import {
+  ATTACH_FILE_MAX_BYTES,
+  isMediaType,
+  parseImageInput,
+  sniffMimeType
+} from "./shared/@ai-setting/roy-agent-core-zjdzk1gg.js";
 import"./shared/@ai-setting/roy-agent-core-c1v263jn.js";
 import {
   AskUserError,
@@ -203,14 +203,14 @@ import {
 } from "./shared/@ai-setting/roy-agent-core-e25xkv53.js";
 import {
   PluginComponent
-} from "./shared/@ai-setting/roy-agent-core-t37wbysj.js";
+} from "./shared/@ai-setting/roy-agent-core-5gw6w424.js";
 import"./shared/@ai-setting/roy-agent-core-64f22h1g.js";
 import {
   BasePlugin
 } from "./shared/@ai-setting/roy-agent-core-az13yzmc.js";
 import {
   McpComponent
-} from "./shared/@ai-setting/roy-agent-core-dwx9hjwx.js";
+} from "./shared/@ai-setting/roy-agent-core-c6at31ra.js";
 import"./shared/@ai-setting/roy-agent-core-8t7wny6v.js";
 import {
   AgentError,
@@ -226,25 +226,38 @@ import {
 import"./shared/@ai-setting/roy-agent-core-7hh0brvs.js";
 import {
   BaseComponent
-} from "./shared/@ai-setting/roy-agent-core-tdbv7ff4.js";
+} from "./shared/@ai-setting/roy-agent-core-40xzbjtm.js";
 import {
   createHook,
   createPriorityHook,
   init_hook
-} from "./shared/@ai-setting/roy-agent-core-qcspfszy.js";
+} from "./shared/@ai-setting/roy-agent-core-gngjkw3b.js";
 import {
   HookManager,
   globalHookManager
-} from "./shared/@ai-setting/roy-agent-core-4z3rq5gw.js";
-import"./shared/@ai-setting/roy-agent-core-k8b440n3.js";
-import"./shared/@ai-setting/roy-agent-core-5apmk4qw.js";
+} from "./shared/@ai-setting/roy-agent-core-1pnfkspm.js";
+import"./shared/@ai-setting/roy-agent-core-16t0zfbk.js";
+import"./shared/@ai-setting/roy-agent-core-jszgaevt.js";
 import {
   Traced,
   TracedAs,
   TracedLightweight,
+  agentRunParamFilter,
+  embedParamFilter,
+  embedResultFilter,
+  envQueryParamFilter,
   init_decorator,
+  isTraceFullMode,
+  llmInvokeParamFilter,
+  llmInvokeResultFilter,
+  messagesParamFilter,
+  recordSessionMessagesParamFilter,
+  resetTraceFullModeCache,
+  toolExecParamFilter,
+  toolExecResultFilter,
+  toolInvokeParamFilter,
   wrapFunction
-} from "./shared/@ai-setting/roy-agent-core-dsevjbck.js";
+} from "./shared/@ai-setting/roy-agent-core-b599jgyd.js";
 import {
   OTelTracerProvider,
   SpanKind,
@@ -504,6 +517,9 @@ export {
   wrapFunction,
   validateEventSourceConfig,
   understandImageTool,
+  toolInvokeParamFilter,
+  toolExecResultFilter,
+  toolExecParamFilter,
   timerHandler,
   sniffMimeType,
   setUnderstandImageLLMProvider,
@@ -514,14 +530,20 @@ export {
   resolveBountyIMSystemPrompt,
   resetUnderstandImageLLMProvider,
   resetTracerProvider,
+  resetTraceFullModeCache,
   resetSharedEventStore,
   registerDecoratorNodeType,
+  recordSessionMessagesParamFilter,
   readFileTool,
   propagation,
   parseModelString,
   parseImageInput,
+  messagesParamFilter,
+  llmInvokeResultFilter,
+  llmInvokeParamFilter,
   larkCliHandler,
   isValidEventSourceType,
+  isTraceFullMode,
   isRoyError,
   isQuietMode,
   isOpencodeProvider,
@@ -552,6 +574,9 @@ export {
   generateId,
   generateDescendingId,
   extractMetadata,
+  envQueryParamFilter,
+  embedResultFilter,
+  embedParamFilter,
   editFileTool,
   createWorkflowFromClass,
   createPriorityHook,
@@ -568,6 +593,7 @@ export {
   buildDefaultBountyIMSystemPrompt,
   bountyIMHandler,
   bashTool,
+  agentRunParamFilter,
   XDG_PATHS,
   WorkflowEdges,
   WorkflowComponent,

package/dist/shared/@ai-setting/{roy-agent-core-k25gv86p.js → roy-agent-core-0b3fdnn3.js}

@@ -4,7 +4,7 @@ import {
 } from "./roy-agent-core-rvv6ydff.js";
 import {
   BaseComponent
-} from "./roy-agent-core-tdbv7ff4.js";
+} from "./roy-agent-core-40xzbjtm.js";
 import {
   __require
 } from "./roy-agent-core-fs0mn2jk.js";