@blackbox_ai/blackbox-cli-core 0.0.9 → 0.8.1

package/dist/src/encrypt/crypto-utils.js

@@ -0,0 +1,257 @@
+/**
+ * Low-level cryptographic utilities extracted from streaming-client.ts
+ */
+/**
+ * Convert Uint8Array to base64 string
+ */
+export const toB64 = (u8) => {
+    // Handle large arrays by chunking to avoid "Maximum call stack size exceeded"
+    if (u8.length > 8192) {
+        let result = '';
+        for (let i = 0; i < u8.length; i += 8192) {
+            const chunk = u8.slice(i, i + 8192);
+            result += String.fromCharCode.apply(null, Array.from(chunk));
+        }
+        return btoa(result);
+    }
+    return btoa(String.fromCharCode.apply(null, Array.from(u8)));
+};
+/**
+ * Convert base64 string to Uint8Array
+ */
+export const fromB64 = (b64) => new Uint8Array(Array.from(atob(b64), c => c.charCodeAt(0)));
+/**
+ * Generate a UUID for identification (moved from streaming-client.ts)
+ */
+export const generateUuid = () => 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, (c) => {
+    const r = Math.random() * 16 | 0;
+    const v = c === 'x' ? r : (r & 0x3 | 0x8);
+    return v.toString(16);
+});
+/**
+ * Generate a P-384 keypair for both ECDSA and ECDH operations (moved from streaming-client.ts)
+ * Reuses the same key material for both operations (matching Rust behavior)
+ */
+export async function generateKeyPair() {
+    // Generate a single P-384 keypair
+    const ecdsaKeyPair = await crypto.subtle.generateKey({ name: 'ECDSA', namedCurve: 'P-384' }, true, ['sign', 'verify']);
+    // Export the private key to reuse for ECDH
+    const pkcs8 = await crypto.subtle.exportKey('pkcs8', ecdsaKeyPair.privateKey);
+    // Import the same private key for ECDH operations
+    const ecdhPrivate = await crypto.subtle.importKey('pkcs8', pkcs8, { name: 'ECDH', namedCurve: 'P-384' }, false, ['deriveBits']);
+    return {
+        ecdhPrivate,
+        ecdsaPrivate: ecdsaKeyPair.privateKey,
+        ecdsaPublic: ecdsaKeyPair.publicKey
+    };
+}
+export function ecdsaRawToDer(raw) {
+    // raw is Uint8Array of length 96 for P-384: r(48) || s(48)
+    const n = raw.length / 2;
+    let r = new Uint8Array(raw.buffer.slice(0, n));
+    let s = new Uint8Array(raw.buffer.slice(n));
+    // Trim leading zeros
+    r = trimZeros(r);
+    s = trimZeros(s);
+    // Ensure positive (prepend 0x00 if high bit is set)
+    if (r[0] & 0x80) {
+        const padding = new Uint8Array([0x00]);
+        r = concatBytes(padding, r);
+    }
+    if (s[0] & 0x80) {
+        const padding = new Uint8Array([0x00]);
+        s = concatBytes(padding, s);
+    }
+    const rHeader = new Uint8Array([0x02, r.length]);
+    const rEnc = concatBytes(rHeader, r);
+    const sHeader = new Uint8Array([0x02, s.length]);
+    const sEnc = concatBytes(sHeader, s);
+    const seqLen = rEnc.length + sEnc.length;
+    const seqHeader = new Uint8Array([0x30, seqLen]);
+    const der = concatBytes(seqHeader, rEnc, sEnc);
+    return der;
+    function trimZeros(bytes) {
+        let i = 0;
+        while (i < bytes.length - 1 && bytes[i] === 0)
+            i++;
+        const trimmed = new Uint8Array(bytes.length - i);
+        for (let j = 0; j < trimmed.length; j++) {
+            trimmed[j] = bytes[i + j];
+        }
+        return trimmed;
+    }
+    function concatBytes(a, b, c) {
+        if (c) {
+            const total = a.length + b.length + c.length;
+            const out = new Uint8Array(total);
+            out.set(a, 0);
+            out.set(b, a.length);
+            out.set(c, a.length + b.length);
+            return out;
+        }
+        else {
+            const total = a.length + b.length;
+            const out = new Uint8Array(total);
+            out.set(a, 0);
+            out.set(b, a.length);
+            return out;
+        }
+    }
+}
+// Convert ASN.1 DER signature to WebCrypto raw format (r||s)
+export function ecdsaDerToRaw(der) {
+    // Parse DER: SEQUENCE { INTEGER r, INTEGER s }
+    if (der[0] !== 0x30) {
+        throw new Error('Invalid DER signature: not a SEQUENCE');
+    }
+    let offset = 2; // Skip SEQUENCE tag and length
+    // Parse r
+    if (der[offset] !== 0x02) {
+        throw new Error('Invalid DER signature: r not an INTEGER');
+    }
+    offset++;
+    const rLen = der[offset++];
+    let r = der.slice(offset, offset + rLen);
+    offset += rLen;
+    // Parse s
+    if (der[offset] !== 0x02) {
+        throw new Error('Invalid DER signature: s not an INTEGER');
+    }
+    offset++;
+    const sLen = der[offset++];
+    let s = der.slice(offset, offset + sLen);
+    // Remove leading zero padding if present
+    if (r[0] === 0x00 && r.length > 1)
+        r = r.slice(1);
+    if (s[0] === 0x00 && s.length > 1)
+        s = s.slice(1);
+    // Pad to 48 bytes for P-384
+    const targetLen = 48;
+    if (r.length < targetLen) {
+        const padded = new Uint8Array(targetLen);
+        padded.set(r, targetLen - r.length);
+        r = padded;
+    }
+    if (s.length < targetLen) {
+        const padded = new Uint8Array(targetLen);
+        padded.set(s, targetLen - s.length);
+        s = padded;
+    }
+    // Concatenate r || s
+    const raw = new Uint8Array(targetLen * 2);
+    raw.set(r, 0);
+    raw.set(s, targetLen);
+    return raw;
+}
+/**
+ * Serialize a WebCrypto ECDSA/ECDH public key to PEM (SPKI)
+ */
+export async function serializePublicKeyPem(publicKey) {
+    const spkiBytes = await crypto.subtle.exportKey('spki', publicKey);
+    const spkiArray = new Uint8Array(spkiBytes);
+    const b64 = toB64(spkiArray);
+    const lines = b64.match(/.{1,64}/g) || [];
+    const body = lines.join('\r\n');
+    return `-----BEGIN PUBLIC KEY-----\r\n${body}\r\n-----END PUBLIC KEY-----\r\n`;
+}
+/**
+ * Deserialize PEM (SPKI) public key string to Uint8Array bytes
+ */
+export function deserializePublicKeyPem(pem) {
+    const b64 = pem
+        .replace('-----BEGIN PUBLIC KEY-----', '')
+        .replace('-----END PUBLIC KEY-----', '')
+        .replace(/\s/g, '');
+    const binaryString = atob(b64);
+    const bytes = new Uint8Array(binaryString.length);
+    for (let i = 0; i < binaryString.length; i++) {
+        bytes[i] = binaryString.charCodeAt(i);
+    }
+    return bytes;
+}
+/**
+ * Derive a shared key using ECDH + HKDF (SHA-256) from local private key and server public key (SPKI)
+ * Matches the Rust implementation detail (using only X coordinate for HKDF input).
+ */
+export async function deriveSharedKey(localPrivateKey, serverPublicKeySpki) {
+    const serverPublicKey = await crypto.subtle.importKey('spki', serverPublicKeySpki.slice().buffer, { name: 'ECDH', namedCurve: 'P-384' }, false, []);
+    const sharedSecret = await crypto.subtle.deriveBits({ name: 'ECDH', public: serverPublicKey }, localPrivateKey, 384);
+    const sharedSecretBytes = new Uint8Array(sharedSecret);
+    // Use X coordinate only (48 bytes for P-384)
+    const xCoordinate = sharedSecretBytes.length === 48 ? sharedSecretBytes : sharedSecretBytes.slice(1, 49);
+    const hkdfKey = await crypto.subtle.importKey('raw', xCoordinate, 'HKDF', false, ['deriveBits']);
+    const derivedKey = await crypto.subtle.deriveBits({
+        name: 'HKDF',
+        hash: 'SHA-256',
+        salt: new Uint8Array(32), // 32 zero bytes for SHA-256
+        info: new TextEncoder().encode('handshake data'),
+    }, hkdfKey, 256);
+    return new Uint8Array(derivedKey);
+}
+/**
+ * Encrypt and sign a message using AES-GCM and ECDSA (moved from streaming-client.ts)
+ */
+export async function encryptAndSign(plaintext, sharedKey, signingKey, nonce) {
+    const plaintextBytes = new TextEncoder().encode(plaintext);
+    const iv = new Uint8Array(12);
+    crypto.getRandomValues(iv);
+    const aesKey = await crypto.subtle.importKey('raw', sharedKey.slice().buffer, { name: 'AES-GCM' }, false, ['encrypt']);
+    const ciphertext = await crypto.subtle.encrypt({ name: 'AES-GCM', iv }, aesKey, plaintextBytes);
+    const ciphertextArray = new Uint8Array(ciphertext);
+    const nonceBytes = new Uint8Array(8);
+    const view = new DataView(nonceBytes.buffer);
+    view.setBigUint64(0, BigInt(nonce), false);
+    const dataToSign = new Uint8Array(nonceBytes.length + iv.length + ciphertextArray.length);
+    dataToSign.set(nonceBytes, 0);
+    dataToSign.set(iv, nonceBytes.length);
+    dataToSign.set(ciphertextArray, nonceBytes.length + iv.length);
+    const rawSignature = new Uint8Array(await crypto.subtle.sign({ name: 'ECDSA', hash: 'SHA-256' }, signingKey, dataToSign));
+    // Convert to DER format if needed
+    let signature;
+    if (rawSignature[0] === 0x30) {
+        signature = rawSignature;
+    }
+    else {
+        signature = ecdsaRawToDer(rawSignature);
+    }
+    return {
+        nonce,
+        iv: toB64(iv),
+        ciphertext: toB64(ciphertextArray),
+        signature: toB64(signature)
+    };
+}
+/**
+ * Decrypt and verify a message using AES-GCM and ECDSA (moved from streaming-client.ts)
+ */
+export async function decryptAndVerify(payload, sharedKey, serverVerifyingKeySpki) {
+    const iv = new Uint8Array(Array.from(atob(payload.iv), c => c.charCodeAt(0)));
+    const ciphertext = new Uint8Array(Array.from(atob(payload.ciphertext), c => c.charCodeAt(0)));
+    const signatureBytes = new Uint8Array(Array.from(atob(payload.signature), c => c.charCodeAt(0)));
+    const nonceBytes = new Uint8Array(8);
+    const view = new DataView(nonceBytes.buffer);
+    view.setBigUint64(0, BigInt(payload.nonce), false);
+    const dataToVerify = new Uint8Array(nonceBytes.length + iv.length + ciphertext.length);
+    dataToVerify.set(nonceBytes, 0);
+    dataToVerify.set(iv, nonceBytes.length);
+    dataToVerify.set(ciphertext, nonceBytes.length + iv.length);
+    const serverVerifyingKey = await crypto.subtle.importKey('spki', serverVerifyingKeySpki.slice().buffer, { name: 'ECDSA', namedCurve: 'P-384' }, false, ['verify']);
+    // Convert DER signature to raw format for WebCrypto verification
+    let rawSignature;
+    if (signatureBytes[0] === 0x30) {
+        // DER format, convert to raw
+        rawSignature = ecdsaDerToRaw(signatureBytes);
+    }
+    else {
+        // Already raw format
+        rawSignature = signatureBytes;
+    }
+    const isValid = await crypto.subtle.verify({ name: 'ECDSA', hash: 'SHA-256' }, serverVerifyingKey, rawSignature, dataToVerify);
+    if (!isValid) {
+        throw new Error('Response signature verification failed');
+    }
+    const aesKey = await crypto.subtle.importKey('raw', sharedKey.slice().buffer, { name: 'AES-GCM' }, false, ['decrypt']);
+    const plaintext = await crypto.subtle.decrypt({ name: 'AES-GCM', iv }, aesKey, ciphertext);
+    return new TextDecoder().decode(plaintext);
+}
+//# sourceMappingURL=crypto-utils.js.map

package/dist/src/encrypt/crypto-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-utils.js","sourceRoot":"","sources":["../../../src/encrypt/crypto-utils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAQH;;GAEG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,EAAc,EAAU,EAAE;IAC9C,8EAA8E;IAC9E,IAAI,EAAE,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QACrB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YACpC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAW,EAAc,EAAE,CACjD,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE9D;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAW,EAAE,CACvC,sCAAsC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;IAC5D,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC,CAAC,CAAC;AAEL;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,kCAAkC;IAClC,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAClD,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,IAAI,EACJ,CAAC,MAAM,EAAE,QAAQ,CAAC,CACnB,CAAC;IAEF,2CAA2C;IAC3C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IAE9E,kDAAkD;IAClD,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC/C,OAAO,EACP,KAAK,EACL,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EACrC,KAAK,EACL,CAAC,YAAY,CAAC,CACf,CAAC;IAEF,OAAO;QACL,WAAW;QACX,YAAY,EAAE,YAAY,CAAC,UAAU;QACrC,WAAW,EAAE,YAAY,CAAC,SAAS;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAe;IAC3C,2DAA2D;IAC3D,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5C,qBAAqB;IACrB,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAEjB,oDAAoD;IACpD,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC9B,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAErC,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAErC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/C,OAAO,GAAG,CAAC;IAEX,SAAS,SAAS,CAAC,KAAiB;QAClC,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,CAAC,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,SAAS,WAAW,CAAC,CAAa,EAAE,CAAa,EAAE,CAAc;QAC/D,IAAI,CAAC,EAAE,CAAC;YACN,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;YAC7C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;YAClC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACd,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;YAChC,OAAO,GAAG,CAAC;QACb,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;YAClC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACd,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YACrB,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,aAAa,CAAC,GAAe;IAC3C,+CAA+C;IAC/C,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,+BAA+B;IAE/C,UAAU;IACV,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,EAAE,CAAC;IACT,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,MAAM,IAAI,IAAI,CAAC;IAEf,UAAU;IACV,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,EAAE,CAAC;IACT,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IAEzC,yCAAyC;IACzC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAElD,4BAA4B;IAC5B,MAAM,SAAS,GAAG,EAAE,CAAC;IACrB,IAAI,CAAC,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC,GAAG,MAAM,CAAC;IACb,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC,GAAG,MAAM,CAAC;IACb,CAAC;IAED,qBAAqB;IACrB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC1C,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACd,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACtB,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAoB;IAC9D,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,iCAAiC,IAAI,kCAAkC,CAAC;AACjF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAW;IACjD,MAAM,GAAG,GAAG,GAAG;SACZ,OAAO,CAAC,4BAA4B,EAAE,EAAE,CAAC;SACzC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC;SACvC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,KAAK,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,eAA0B,EAC1B,mBAA+B;IAE/B,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACnD,MAAM,EACN,mBAAmB,CAAC,KAAK,EAAE,CAAC,MAAM,EAClC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EACrC,KAAK,EACL,EAAE,CACH,CAAC;IAEF,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CACjD,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,EACzC,eAAe,EACf,GAAG,CACJ,CAAC;IAEF,MAAM,iBAAiB,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;IACvD,6CAA6C;IAC7C,MAAM,WAAW,GACf,iBAAiB,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEvF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAEjG,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAC/C;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,4BAA4B;QACtD,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC;KACjD,EACD,OAAO,EACP,GAAG,CACJ,CAAC;IAEF,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC;AAYD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,SAAqB,EACrB,UAAqB,EACrB,KAAa;IAEb,MAAM,cAAc,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAE3D,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAE3B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC1C,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CACzE,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC5C,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,cAAc,CAChD,CAAC;IAEF,MAAM,eAAe,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IAEnD,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAE3C,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1F,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC9B,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACtC,UAAU,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAE/D,MAAM,YAAY,GAAG,IAAI,UAAU,CACjC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,CACrF,CAAC;IAEF,kCAAkC;IAClC,IAAI,SAAS,CAAC;IACd,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7B,SAAS,GAAG,YAAY,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO;QACL,KAAK;QACL,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;QACb,UAAU,EAAE,KAAK,CAAC,eAAe,CAAC;QAClC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC;KAC5B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAyB,EACzB,SAAqB,EACrB,sBAAkC;IAElC,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9F,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjG,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAEnD,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACvF,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAChC,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACxC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAE5D,MAAM,kBAAkB,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACtD,MAAM,EAAE,sBAAsB,CAAC,KAAK,EAAE,CAAC,MAAM,EAC7C,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAC1D,CAAC;IAEF,iEAAiE;IACjE,IAAI,YAAY,CAAC;IACjB,IAAI,cAAc,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/B,6BAA6B;QAC7B,YAAY,GAAG,aAAa,CAAC,cAAc,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,qBAAqB;QACrB,YAAY,GAAG,cAAc,CAAC;IAChC,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACxC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,kBAAkB,EAAE,YAAY,EAAE,YAAY,CACnF,CAAC;IAEF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC1C,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CACzE,CAAC;IAEF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAC3C,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,CAC5C,CAAC;IAEF,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC7C,CAAC"}

package/dist/src/encrypt/history-manager.d.ts

@@ -0,0 +1,43 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+interface ChatMessage {
+    role: 'system' | 'user' | 'assistant';
+    content: string;
+    image_url?: string;
+}
+/**
+ * Configuration for history management
+ */
+export declare const HISTORY_CONFIG: {
+    maxHistoryBytes: number;
+    minMessagesToKeep: number;
+    maxMessagesToKeep: number;
+    truncationMarker: string;
+};
+/**
+ * Truncate history to fit within size limits while preserving context
+ *
+ * Strategy:
+ * 1. Always keep system message (if present)
+ * 2. Always keep the most recent messages
+ * 3. Truncate older messages if total size exceeds limit
+ * 4. Add truncation marker to indicate removed content
+ */
+export declare function truncateHistory(history: ChatMessage[]): ChatMessage[];
+/**
+ * Summarize truncated content for logging/debugging
+ */
+export declare function getHistorySummary(original: ChatMessage[], truncated: ChatMessage[]): string;
+/**
+ * Get the size of a message array in bytes (for payload size monitoring)
+ */
+export declare function getPayloadSize(messages: ChatMessage[]): number;
+/**
+ * Aggressively truncate to fit within a specific byte limit
+ * Used for retry logic when 413 errors occur
+ */
+export declare function truncateToSize(messages: ChatMessage[], maxBytes: number): ChatMessage[];
+export {};

package/dist/src/encrypt/history-manager.js

@@ -0,0 +1,164 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Configuration for history management
+ */
+export const HISTORY_CONFIG = {
+    // Maximum size of history in bytes before truncation
+    // VERY aggressive limit accounting for encryption overhead (~33%) and multiple keys
+    // 100KB plaintext → ~133KB encrypted → ~400KB with 3 keys
+    maxHistoryBytes: 100_000, // 100KB - extremely conservative
+    // Minimum number of messages to keep (system + recent exchanges)
+    minMessagesToKeep: 3, // system + 1 recent exchange
+    // Maximum number of messages to keep
+    maxMessagesToKeep: 6, // Very aggressive limit
+    // Truncation marker
+    truncationMarker: '[... earlier conversation truncated to reduce payload size ...]'
+};
+/**
+ * Calculate the approximate size of a message in bytes
+ */
+function getMessageSize(message) {
+    const contentSize = new TextEncoder().encode(message.content).length;
+    const imageSize = message.image_url
+        ? new TextEncoder().encode(message.image_url).length
+        : 0;
+    return contentSize + imageSize + 50; // +50 for JSON overhead
+}
+/**
+ * Calculate total size of message history
+ */
+function getTotalHistorySize(history) {
+    return history.reduce((total, msg) => total + getMessageSize(msg), 0);
+}
+/**
+ * Truncate history to fit within size limits while preserving context
+ *
+ * Strategy:
+ * 1. Always keep system message (if present)
+ * 2. Always keep the most recent messages
+ * 3. Truncate older messages if total size exceeds limit
+ * 4. Add truncation marker to indicate removed content
+ */
+export function truncateHistory(history) {
+    if (history.length === 0) {
+        return history;
+    }
+    const totalSize = getTotalHistorySize(history);
+    // If under limit, return as-is
+    if (totalSize <= HISTORY_CONFIG.maxHistoryBytes &&
+        history.length <= HISTORY_CONFIG.maxMessagesToKeep) {
+        return history;
+    }
+    // Separate system message from conversation
+    const systemMessage = history.find(msg => msg.role === 'system');
+    const conversationMessages = history.filter(msg => msg.role !== 'system');
+    // Always keep minimum recent messages
+    const recentMessages = conversationMessages.slice(-HISTORY_CONFIG.minMessagesToKeep);
+    // Build truncated history
+    const truncatedHistory = [];
+    // Add system message first
+    if (systemMessage) {
+        truncatedHistory.push(systemMessage);
+    }
+    // Calculate size so far
+    let currentSize = getTotalHistorySize(truncatedHistory);
+    const recentSize = getTotalHistorySize(recentMessages);
+    // Check if we need to add older messages
+    const remainingBudget = HISTORY_CONFIG.maxHistoryBytes - currentSize - recentSize;
+    if (remainingBudget > 1000 && conversationMessages.length > HISTORY_CONFIG.minMessagesToKeep) {
+        // Try to include some older messages within budget
+        const olderMessages = conversationMessages.slice(0, -HISTORY_CONFIG.minMessagesToKeep);
+        const includedOlder = [];
+        // Add older messages from most recent backwards until budget exhausted
+        for (let i = olderMessages.length - 1; i >= 0; i--) {
+            const msgSize = getMessageSize(olderMessages[i]);
+            if (currentSize + msgSize <= HISTORY_CONFIG.maxHistoryBytes - recentSize) {
+                includedOlder.unshift(olderMessages[i]);
+                currentSize += msgSize;
+            }
+            else {
+                break;
+            }
+        }
+        // If we truncated any messages, add marker
+        if (includedOlder.length < olderMessages.length) {
+            truncatedHistory.push({
+                role: 'assistant',
+                content: HISTORY_CONFIG.truncationMarker
+            });
+        }
+        truncatedHistory.push(...includedOlder);
+    }
+    else if (conversationMessages.length > HISTORY_CONFIG.minMessagesToKeep) {
+        // No budget for older messages, just add truncation marker
+        truncatedHistory.push({
+            role: 'assistant',
+            content: HISTORY_CONFIG.truncationMarker
+        });
+    }
+    // Add recent messages
+    truncatedHistory.push(...recentMessages);
+    return truncatedHistory;
+}
+/**
+ * Summarize truncated content for logging/debugging
+ */
+export function getHistorySummary(original, truncated) {
+    const originalSize = getTotalHistorySize(original);
+    const truncatedSize = getTotalHistorySize(truncated);
+    const savedBytes = originalSize - truncatedSize;
+    const savedPercent = ((savedBytes / originalSize) * 100).toFixed(1);
+    return `History truncated: ${original.length} → ${truncated.length} messages, ` +
+        `${(originalSize / 1024).toFixed(1)}KB → ${(truncatedSize / 1024).toFixed(1)}KB ` +
+        `(saved ${savedPercent}%)`;
+}
+/**
+ * Get the size of a message array in bytes (for payload size monitoring)
+ */
+export function getPayloadSize(messages) {
+    const json = JSON.stringify(messages);
+    return new TextEncoder().encode(json).length;
+}
+/**
+ * Aggressively truncate to fit within a specific byte limit
+ * Used for retry logic when 413 errors occur
+ */
+export function truncateToSize(messages, maxBytes) {
+    if (getPayloadSize(messages) <= maxBytes) {
+        return messages;
+    }
+    // Separate system message from conversation
+    const systemMessage = messages.find(msg => msg.role === 'system');
+    const conversationMessages = messages.filter(msg => msg.role !== 'system');
+    // Start with just system message + last 2 messages
+    let truncated = systemMessage ? [systemMessage] : [];
+    const recentMessages = conversationMessages.slice(-2);
+    truncated.push(...recentMessages);
+    // If still too large, try just system + last message
+    if (getPayloadSize(truncated) > maxBytes && conversationMessages.length > 0) {
+        truncated = systemMessage ? [systemMessage] : [];
+        truncated.push(conversationMessages[conversationMessages.length - 1]);
+    }
+    // If STILL too large, truncate the system message itself
+    if (getPayloadSize(truncated) > maxBytes && systemMessage) {
+        const systemSize = getMessageSize(systemMessage);
+        if (systemSize > maxBytes * 0.7) {
+            // System message is too large - truncate it
+            const truncatedSystem = {
+                ...systemMessage,
+                content: systemMessage.content.substring(0, Math.floor(maxBytes * 0.5)) +
+                    '\n\n[... system prompt truncated due to size constraints ...]'
+            };
+            truncated = [truncatedSystem];
+            if (conversationMessages.length > 0) {
+                truncated.push(conversationMessages[conversationMessages.length - 1]);
+            }
+        }
+    }
+    return truncated;
+}
+//# sourceMappingURL=history-manager.js.map

package/dist/src/encrypt/history-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"history-manager.js","sourceRoot":"","sources":["../../../src/encrypt/history-manager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,qDAAqD;IACrD,oFAAoF;IACpF,0DAA0D;IAC1D,eAAe,EAAE,OAAO,EAAE,iCAAiC;IAE3D,iEAAiE;IACjE,iBAAiB,EAAE,CAAC,EAAE,6BAA6B;IAEnD,qCAAqC;IACrC,iBAAiB,EAAE,CAAC,EAAE,wBAAwB;IAE9C,oBAAoB;IACpB,gBAAgB,EAAE,iEAAiE;CACpF,CAAC;AAEF;;GAEG;AACH,SAAS,cAAc,CAAC,OAAoB;IAC1C,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACrE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS;QACjC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM;QACpD,CAAC,CAAC,CAAC,CAAC;IACN,OAAO,WAAW,GAAG,SAAS,GAAG,EAAE,CAAC,CAAC,wBAAwB;AAC/D,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAAC,OAAsB;IACjD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,OAAsB;IACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAE/C,+BAA+B;IAC/B,IAAI,SAAS,IAAI,cAAc,CAAC,eAAe;QAC3C,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC,iBAAiB,EAAE,CAAC;QACvD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,4CAA4C;IAC5C,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IACjE,MAAM,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAE1E,sCAAsC;IACtC,MAAM,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;IAErF,0BAA0B;IAC1B,MAAM,gBAAgB,GAAkB,EAAE,CAAC;IAE3C,2BAA2B;IAC3B,IAAI,aAAa,EAAE,CAAC;QAClB,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACvC,CAAC;IAED,wBAAwB;IACxB,IAAI,WAAW,GAAG,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;IAEvD,yCAAyC;IACzC,MAAM,eAAe,GAAG,cAAc,CAAC,eAAe,GAAG,WAAW,GAAG,UAAU,CAAC;IAElF,IAAI,eAAe,GAAG,IAAI,IAAI,oBAAoB,CAAC,MAAM,GAAG,cAAc,CAAC,iBAAiB,EAAE,CAAC;QAC7F,mDAAmD;QACnD,MAAM,aAAa,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACvF,MAAM,aAAa,GAAkB,EAAE,CAAC;QAExC,uEAAuE;QACvE,KAAK,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,IAAI,WAAW,GAAG,OAAO,IAAI,cAAc,CAAC,eAAe,GAAG,UAAU,EAAE,CAAC;gBACzE,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxC,WAAW,IAAI,OAAO,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,MAAM;YACR,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,IAAI,aAAa,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC;YAChD,gBAAgB,CAAC,IAAI,CAAC;gBACpB,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,cAAc,CAAC,gBAAgB;aACzC,CAAC,CAAC;QACL,CAAC;QAED,gBAAgB,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;IAC1C,CAAC;SAAM,IAAI,oBAAoB,CAAC,MAAM,GAAG,cAAc,CAAC,iBAAiB,EAAE,CAAC;QAC1E,2DAA2D;QAC3D,gBAAgB,CAAC,IAAI,CAAC;YACpB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,cAAc,CAAC,gBAAgB;SACzC,CAAC,CAAC;IACL,CAAC;IAED,sBAAsB;IACtB,gBAAgB,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;IAEzC,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAuB,EAAE,SAAwB;IACjF,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,YAAY,GAAG,aAAa,CAAC;IAChD,MAAM,YAAY,GAAG,CAAC,CAAC,UAAU,GAAG,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAEpE,OAAO,sBAAsB,QAAQ,CAAC,MAAM,MAAM,SAAS,CAAC,MAAM,aAAa;QACxE,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;QACjF,UAAU,YAAY,IAAI,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,QAAuB;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAuB,EACvB,QAAgB;IAEhB,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,4CAA4C;IAC5C,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAClE,MAAM,oBAAoB,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAE3E,mDAAmD;IACnD,IAAI,SAAS,GAAkB,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,MAAM,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,SAAS,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;IAElC,qDAAqD;IACrD,IAAI,cAAc,CAAC,SAAS,CAAC,GAAG,QAAQ,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5E,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,yDAAyD;IACzD,IAAI,cAAc,CAAC,SAAS,CAAC,GAAG,QAAQ,IAAI,aAAa,EAAE,CAAC;QAC1D,MAAM,UAAU,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;QACjD,IAAI,UAAU,GAAG,QAAQ,GAAG,GAAG,EAAE,CAAC;YAChC,4CAA4C;YAC5C,MAAM,eAAe,GAAgB;gBACnC,GAAG,aAAa;gBAChB,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC;oBAC9D,+DAA+D;aACzE,CAAC;YACF,SAAS,GAAG,CAAC,eAAe,CAAC,CAAC;YAC9B,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpC,SAAS,CAAC,IAAI,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/src/encrypt/minimax-template.d.ts

@@ -0,0 +1,73 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { FunctionDeclaration } from '@google/genai';
+export interface MiniMaxMessage {
+    role: 'system' | 'user' | 'assistant' | 'tool';
+    content: string;
+    tool_calls?: Array<{
+        name: string;
+        arguments: Record<string, unknown>;
+    }>;
+    reasoning_content?: string;
+    current_date?: string;
+    current_location?: string;
+}
+export interface MiniMaxSystemMessage {
+    content?: string;
+    current_date?: string;
+    current_location?: string;
+}
+/**
+ * MiniMax template implementation based on the provided Jinja template
+ */
+export declare class MiniMaxTemplate {
+    private readonly toolcallBeginToken;
+    private readonly toolcallEndToken;
+    private readonly modelIdentity;
+    /**
+     * Render tools for MiniMax format
+     */
+    private renderToolNamespace;
+    /**
+     * Extract visible text from content (handles both string and array formats)
+     */
+    private visibleText;
+    /**
+     * Build system message with model identity and optional date/location
+     */
+    private buildSystemMessage;
+    /**
+     * Format tools for system prompt in MiniMax format
+     */
+    formatToolsForSystemPrompt(tools: FunctionDeclaration[]): string;
+    /**
+     * Apply MiniMax chat template to messages
+     */
+    applyTemplate(messages: MiniMaxMessage[], tools?: FunctionDeclaration[], systemMessage?: MiniMaxSystemMessage, addGenerationPrompt?: boolean): string;
+    /**
+     * Parse tool calls from MiniMax format response
+     */
+    parseToolCalls(text: string): Array<{
+        name: string;
+        arguments: Record<string, unknown>;
+    }>;
+    /**
+     * Remove tool call markup from text
+     */
+    removeToolCallMarkup(text: string): string;
+    /**
+     * Check if text contains MiniMax tool calls
+     */
+    hasToolCalls(text: string): boolean;
+    /**
+     * Escape regex special characters
+     */
+    private escapeRegex;
+}
+/**
+ * Factory function to create MiniMax template instance
+ */
+export declare function createMiniMaxTemplate(): MiniMaxTemplate;