@desplega.ai/agent-swarm 1.165.0 → 1.166.0

package/dist/cli-cvk6yzw5.js

@@ -1,40 +0,0 @@
-import {
-  buildAgentFsLiveUrl,
-  buildCombFileUrl,
-  getAppUrl,
-  init_constants
-} from "./cli-gd4favx9.js";
-import {
-  __esm
-} from "./cli-bc05qbss.js";
-
-// src/utils/task-attachment-links.ts
-function shellQuote(value) {
-  return `'${value.replace(/'/g, `'\\''`)}'`;
-}
-function taskAttachmentFetchCommand(taskId, attachmentId, name) {
-  const url = `$MCP_BASE_URL/api/fs/tasks/${taskId}/files/${attachmentId}/raw`;
-  const outPath = shellQuote(`/tmp/attachments/${attachmentId}/${name.replace(/\//g, "_")}`);
-  return `curl -s -H "Authorization: Bearer \${AGENT_SWARM_API_KEY:-$API_KEY}" -H "X-Agent-ID: $AGENT_ID" "${url}" --create-dirs -o ${outPath}`;
-}
-function taskAttachmentDisplayUrl(attachment, opts = {}) {
-  if (attachment.kind === "url")
-    return attachment.url ?? "";
-  if (attachment.kind === "page") {
-    return attachment.pageId ? `${getAppUrl()}/pages/${attachment.pageId}` : "page:";
-  }
-  if (attachment.providerId === "agent-fs" || attachment.kind === "agent-fs") {
-    const file = { path: attachment.path, orgId: attachment.orgId, driveId: attachment.driveId };
-    const combUrl = opts.comb === false ? null : buildCombFileUrl(file);
-    return combUrl ?? buildAgentFsLiveUrl(file) ?? `agent-fs:${attachment.path ?? ""}`;
-  }
-  if (attachment.providerId === "local-fs" || attachment.kind === "shared-fs") {
-    return `${getAppUrl()}/api/fs/tasks/${attachment.taskId}/files/${attachment.id}/raw`;
-  }
-  return attachment.path ?? attachment.providerKey ?? "";
-}
-var init_task_attachment_links = __esm(() => {
-  init_constants();
-});
-
-export { taskAttachmentFetchCommand, taskAttachmentDisplayUrl, init_task_attachment_links };

package/dist/cli-h1spv8v4.js

@@ -1,427 +0,0 @@
-import {
-  __esm
-} from "./cli-bc05qbss.js";
-
-// src/utils/secret-scrubber.ts
-function normalizeKey(key) {
-  if (!/[a-z.-]/.test(key))
-    return key;
-  let out = key;
-  if (/[a-z]/.test(out) && /[A-Z]/.test(out)) {
-    out = out.replace(/([a-z0-9])([A-Z])/g, "$1_$2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1_$2");
-  }
-  return out.replace(/[.-]/g, "_").toUpperCase();
-}
-function escapedForms(value) {
-  const forms = new Set([value, value.replace(/[\\$"`]/g, "\\$&"), value.replaceAll("'", "'\\''")]);
-  for (const form of [...forms])
-    forms.add(JSON.stringify(form).slice(1, -1));
-  return [...forms];
-}
-function quoted(open, close, item, lineItem) {
-  return `${open}(?:(?:${lineItem})*${close}|(?:${item})*${close}${QUOTE_EOL}|(?:${lineItem})*)`;
-}
-function isSensitiveKeyPath(key) {
-  if (isSensitiveKey(key))
-    return true;
-  const dot = key.lastIndexOf(".");
-  return dot >= 0 && isSensitiveKey(key.slice(dot + 1));
-}
-function redactAssignment(match, key, value) {
-  if (!isSensitiveKeyPath(key))
-    return match;
-  let open = "";
-  let close = "";
-  for (const quote of ["\\\"", '"', "'"]) {
-    if (!value.startsWith(quote))
-      continue;
-    open = quote;
-    if (value.length >= quote.length * 2 && value.endsWith(quote))
-      close = quote;
-    break;
-  }
-  const inner = value.slice(open.length, value.length - close.length);
-  if (inner === "" || /^\[REDACTED:[^\]]*\]$/.test(inner))
-    return match;
-  return `${key}=${open}[REDACTED:${key}]${close}`;
-}
-function isPlaceholderValue(value) {
-  return value === "" || value.includes("[REDACTED") || /^[$<*%{]/.test(value) || /^(?:null|none|nil|true|false|yes|no|undefined|~)$/i.test(value) || /^[+-]?\d+(?:\.\d+)?$/.test(value);
-}
-function looksLikeCode(value) {
-  return /[()[\]{};,]/.test(value) || /^[A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*)+$/.test(value) || /^[A-Za-z_]+$/.test(value) && value.length < 16;
-}
-function redactLineValue(match, lead, key, sep, value) {
-  if (!isSensitiveKeyPath(key))
-    return match;
-  const quote = /^(?:\\"|"|')/.exec(value)?.[0] ?? "";
-  const inner = quote ? value.slice(quote.length, -quote.length) : value;
-  if (isPlaceholderValue(inner) || !quote && looksLikeCode(inner))
-    return match;
-  return `${lead}${key}${sep}${quote}[REDACTED:${key}]${quote}`;
-}
-function jsonStringEnd(text, start, escaped) {
-  let innerEscape = false;
-  for (let i = start;i < text.length; i++) {
-    let ch = text[i];
-    if (ch === "\r" || ch === `
-`)
-      return -(i + 1);
-    const at = i;
-    if (escaped) {
-      if (ch === '"')
-        return -(i + 1);
-      if (ch === "\\") {
-        ch = text[++i];
-        if (ch === undefined || ch === "\r" || ch === `
-`)
-          return -(i + 1);
-        if (ch !== "\\" && ch !== '"')
-          ch = "x";
-      }
-    }
-    if (innerEscape)
-      innerEscape = false;
-    else if (ch === "\\")
-      innerEscape = true;
-    else if (ch === '"')
-      return at;
-  }
-  return -(text.length + 1);
-}
-function redactJsonValues(text, re, escaped) {
-  let out = "";
-  let last = 0;
-  re.lastIndex = 0;
-  for (let m = re.exec(text);m; m = re.exec(text)) {
-    const key = m[1] ?? "";
-    if (!isSensitiveKeyPath(key))
-      continue;
-    const valueStart = m.index + m[0].length;
-    const end = jsonStringEnd(text, valueStart, escaped);
-    if (end < 0) {
-      re.lastIndex = Math.max(re.lastIndex, -end - 2);
-      continue;
-    }
-    re.lastIndex = end + 1;
-    if (isPlaceholderValue(text.slice(valueStart, end)))
-      continue;
-    out += `${text.slice(last, valueStart)}[REDACTED:${key}]`;
-    last = end;
-  }
-  return last === 0 ? text : out + text.slice(last);
-}
-function redactHeader(match, name, sep, value) {
-  if (/^[A-Za-z_]+$/.test(value) && value.length < 16)
-    return match;
-  return `${name}${sep}[REDACTED:${name.toLowerCase().replace(/-/g, "_")}]`;
-}
-function scrubKeyContext(text) {
-  let out = text;
-  if (out.includes("PRIVATE KEY")) {
-    out = out.replace(PEM_RE, (match, begin, body, end) => body === PEM_MARKER ? match : `${begin}${PEM_MARKER}${end}`);
-  }
-  if (/authorization|x-api-key/i.test(out)) {
-    out = out.replace(AUTH_HEADER_RE, redactHeader).replace(API_KEY_HEADER_RE, redactHeader);
-  }
-  if (out.includes("--password")) {
-    out = out.replace(CURL_PASSWORD_RE, (match, flag, pw) => isPlaceholderValue(pw) ? match : `${flag}[REDACTED:curl_password]`);
-  }
-  if (/(?:^|\s)-(?:u|U|-user|-proxy-user)\b/.test(out)) {
-    out = out.replace(CURL_USER_RE, (match, prefix, user, pw) => isPlaceholderValue(pw) || pw === user ? match : `${prefix}[REDACTED:curl_password]`);
-  }
-  if (out.includes("://")) {
-    out = out.replace(URL_USERINFO_RE, (match, prefix, pw) => isPlaceholderValue(pw) ? match : `${prefix}[REDACTED:url_password]`);
-  }
-  if (out.includes('"')) {
-    out = redactJsonValues(out, JSON_KEY_RE, false);
-    if (out.includes("\\\""))
-      out = redactJsonValues(out, ESCAPED_JSON_KEY_RE, true);
-  }
-  if (out.includes(":"))
-    out = out.replace(YAML_KEY_RE, redactLineValue);
-  return out;
-}
-function snapshotEnv() {
-  const parts = [];
-  for (const key of Object.keys(process.env).sort()) {
-    if (!isSensitiveKey(key))
-      continue;
-    const v = process.env[key];
-    if (!v)
-      continue;
-    parts.push(`${key}=${v.length}`);
-  }
-  return parts.join("|");
-}
-function isSensitiveKey(key) {
-  const cached = sensitiveKeyVerdicts.get(key);
-  if (cached !== undefined)
-    return cached;
-  const verdict = computeIsSensitiveKey(key);
-  if (sensitiveKeyVerdicts.size >= MAX_KEY_VERDICTS)
-    sensitiveKeyVerdicts.clear();
-  sensitiveKeyVerdicts.set(key, verdict);
-  return verdict;
-}
-function computeIsSensitiveKey(key) {
-  const normalized = normalizeKey(key);
-  if (NON_SECRET_EXCEPTIONS.has(normalized))
-    return false;
-  if (SENSITIVE_KEY_EXACT.has(normalized))
-    return true;
-  if (registeredSensitiveKeys.has(key) || registeredSensitiveKeys.has(normalized))
-    return true;
-  for (const suffix of SENSITIVE_KEY_SUFFIXES) {
-    if (normalized.endsWith(suffix))
-      return true;
-  }
-  if (/^codex_oauth(_\d+)?$/.test(key))
-    return true;
-  return false;
-}
-function buildCache() {
-  const entries = [];
-  const seen = new Set;
-  for (const [key, rawValue] of Object.entries(process.env)) {
-    if (!rawValue)
-      continue;
-    if (!isSensitiveKey(key))
-      continue;
-    const candidates = rawValue.includes(",") ? [rawValue, ...rawValue.split(",").map((s) => s.trim())] : [rawValue];
-    for (const candidate of candidates) {
-      if (!candidate)
-        continue;
-      if (candidate.length < MIN_VALUE_LENGTH)
-        continue;
-      for (const form of escapedForms(candidate)) {
-        if (seen.has(form))
-          continue;
-        seen.add(form);
-        entries.push({ value: form, name: key });
-      }
-    }
-  }
-  entries.sort((a, b) => b.value.length - a.value.length);
-  return { entries, snapshotKey: snapshotEnv() };
-}
-function getCache() {
-  const current = snapshotEnv();
-  if (!cache || cache.snapshotKey !== current) {
-    cache = buildCache();
-  }
-  return cache;
-}
-function scrubSecrets(text) {
-  if (text == null)
-    return "";
-  if (text.length === 0)
-    return text;
-  let out = text;
-  const { entries } = getCache();
-  for (const { value, name } of entries) {
-    if (out.includes(value)) {
-      out = out.split(value).join(`[REDACTED:${name}]`);
-    }
-  }
-  for (const [value, name] of volatileSecrets) {
-    if (out.includes(value)) {
-      out = out.split(value).join(`[REDACTED:${name}]`);
-    }
-  }
-  for (const { name, re } of TOKEN_REGEXES) {
-    out = out.replace(re, `[REDACTED:${name}]`);
-  }
-  out = out.replace(ASSIGNMENT_RE, redactAssignment);
-  if (out.includes("="))
-    out = out.replace(INI_ASSIGNMENT_RE, redactLineValue);
-  return scrubKeyContext(out);
-}
-function scrubObject(value, seen = new WeakSet) {
-  if (value === null || value === undefined)
-    return value;
-  if (typeof value === "string")
-    return scrubSecrets(value);
-  if (typeof value !== "object")
-    return value;
-  if (seen.has(value)) {
-    return "[Circular]";
-  }
-  seen.add(value);
-  if (Array.isArray(value)) {
-    return value.map((item) => scrubObject(item, seen));
-  }
-  const out = {};
-  for (const [key, child] of Object.entries(value)) {
-    out[key] = scrubObject(child, seen);
-  }
-  return out;
-}
-function refreshSecretScrubberCache() {
-  cache = null;
-}
-function registerVolatileSecret(value, name) {
-  if (value.length < MIN_VALUE_LENGTH)
-    return;
-  for (const form of escapedForms(value))
-    volatileSecrets.set(form, name);
-}
-function registerSensitiveKeyName(key) {
-  if (registeredSensitiveKeys.has(key))
-    return;
-  registeredSensitiveKeys.add(key);
-  sensitiveKeyVerdicts.clear();
-  cache = null;
-}
-var SENSITIVE_KEY_EXACT, SENSITIVE_KEY_SUFFIXES, NON_SECRET_EXCEPTIONS, MIN_VALUE_LENGTH = 12, QUOTE_EOL, JSON_DQ, RAW_DQ, SQ, BARE, ASSIGNMENT_RE, LINE_START, LINE_END, LINE_VALUE, INI_ASSIGNMENT_RE, YAML_KEY_RE, JSON_KEY, JSON_KEY_RE, ESCAPED_JSON_KEY_RE, TOKEN68, HEADER_SEP, AUTH_HEADER_RE, API_KEY_HEADER_RE, CURL_PASSWORD_RE, CURL_USER_RE, URL_USERINFO_RE, PEM_RE, PEM_MARKER = "[REDACTED:private_key]", TB, TOKEN_REGEXES, cache = null, volatileSecrets, registeredSensitiveKeys, sensitiveKeyVerdicts, MAX_KEY_VERDICTS = 4096;
-var init_secret_scrubber = __esm(() => {
-  SENSITIVE_KEY_EXACT = new Set([
-    "API_KEY",
-    "SECRETS_ENCRYPTION_KEY",
-    "GITHUB_TOKEN",
-    "GITLAB_TOKEN",
-    "AZURE_DEVOPS_TOKEN",
-    "AZURE_DEVOPS_EXT_PAT",
-    "CLAUDE_CODE_OAUTH_TOKEN",
-    "ANTHROPIC_API_KEY",
-    "OPENAI_API_KEY",
-    "OPENROUTER_API_KEY",
-    "SLACK_BOT_TOKEN",
-    "SLACK_SIGNING_SECRET",
-    "SLACK_CLIENT_SECRET",
-    "SLACK_USER_TOKEN",
-    "SLACK_APP_TOKEN",
-    "SENTRY_AUTH_TOKEN",
-    "VERCEL_TOKEN",
-    "RESEND_API_KEY",
-    "AGENTMAIL_API_KEY",
-    "API_AGENT_FS_API_KEY",
-    "AGENT_FS_API_KEY",
-    "BUSINESS_USE_API_KEY",
-    "QA_USE_API_KEY",
-    "DOCS_API_KEY",
-    "DOKPLOY_API_KEY",
-    "DEVTO_API_KEY",
-    "ELEVENLABS_API_KEY",
-    "ENGINY_API_KEY",
-    "OPENFORT_API_KEY",
-    "OPENFORT_TEST_SECRET_KEY",
-    "OPENFORT_TEST_WALLET_PRIVATE_KEY",
-    "OPENFORT_WALLET_SECRET",
-    "TURSO_API_TOKEN",
-    "TURSO_DB_TOKEN",
-    "TURSO_X_POSTS_DB_TOKEN",
-    "BROWSER_USE_API_KEY",
-    "PLAUSIBLE_API_KEY",
-    "IMGFLIP_PASSWORD",
-    "GSC_SERVICE_ACCOUNT_BASE64",
-    "LINEAR_API_KEY",
-    "LINEAR_OAUTH_CLIENT_SECRET",
-    "OTEL_EXPORTER_OTLP_HEADERS",
-    "SIGNOZ_INGESTION_KEY",
-    "SECRET",
-    "PASSWORD",
-    "PASSWD",
-    "TOKEN",
-    "PRIVATE_KEY",
-    "APIKEY",
-    "ACCESS_TOKEN",
-    "REFRESH_TOKEN",
-    "CLIENT_SECRET",
-    "AUTHORIZATION",
-    "CREDENTIALS"
-  ]);
-  SENSITIVE_KEY_SUFFIXES = [
-    "_API_KEY",
-    "_TOKEN",
-    "_SECRET",
-    "_PASSWORD",
-    "_PASS",
-    "_PRIVATE_KEY",
-    "_ACCESS_KEY",
-    "_SECRET_KEY",
-    "_APIKEY",
-    "_AUTH_HEADER",
-    "_CREDENTIALS",
-    "_DSN",
-    "_DEPLOY_KEY"
-  ];
-  NON_SECRET_EXCEPTIONS = new Set([
-    "MCP_BASE_URL",
-    "APP_URL",
-    "API_URL",
-    "TEMPLATE_REGISTRY_URL",
-    "GOOGLE_APPLICATION_CREDENTIALS",
-    "PAGE_TOKEN",
-    "NEXT_PAGE_TOKEN",
-    "PREV_PAGE_TOKEN",
-    "NEXT_TOKEN",
-    "CONTINUATION_TOKEN",
-    "SYNC_TOKEN",
-    "NEXT_SYNC_TOKEN"
-  ]);
-  QUOTE_EOL = String.raw`(?=$|[\r\n]|\\[rn]|")`;
-  JSON_DQ = quoted(String.raw`\\"(?!\$)`, String.raw`\\"`, String.raw`\\\\(?:\\\\|\\"|[^\\"])|\\[^\\"]|[^"\\]`, String.raw`\\\\(?:\\\\|\\"|[^\\"\r\n])|\\[^\\"nr\r\n]|[^"\\\r\n]`);
-  RAW_DQ = quoted(`"(?!\\$)`, `"`, String.raw`\\[\s\S]|[^"\\]`, String.raw`\\[^\r\n]|[^"\\\r\n]`);
-  SQ = quoted(`'`, `'`, String.raw`[^'\\]|'\\\\?''|\\[\s\S]`, String.raw`[^'\\\r\n]|'\\\\?''|\\[^nr\r\n]`);
-  BARE = String.raw`(?!\$)(?:\\[^nrtu"\s]|[^\s"'\\])+`;
-  ASSIGNMENT_RE = new RegExp(String.raw`(?:(?<=\\[nrt])|(?<![\w\\.]))([A-Za-z_][A-Za-z0-9_.]*)=(?!=)(${JSON_DQ}|${RAW_DQ}|${SQ}|${BARE})`, "g");
-  LINE_START = String.raw`(?:^|(?<=\\[nr]))`;
-  LINE_END = String.raw`(?=[ \t]*(?:$|\r|\\[nr]|"))`;
-  LINE_VALUE = String.raw`"[^"\\\r\n]*"|'[^'\\\r\n]*'|\\"[^"\\\r\n]*\\"|[^\s"'\\]+`;
-  INI_ASSIGNMENT_RE = new RegExp(String.raw`${LINE_START}([ \t]*)([A-Za-z_][\w.]*)([ \t]*=[ \t]*)(${LINE_VALUE})${LINE_END}`, "gm");
-  YAML_KEY_RE = new RegExp(String.raw`${LINE_START}([ \t]*(?:-[ \t]+)?)([A-Za-z_][\w.-]*)([ \t]*:[ \t]+)(${LINE_VALUE})${LINE_END}`, "gm");
-  JSON_KEY = String.raw`[A-Za-z_][\w.-]{0,63}`;
-  JSON_KEY_RE = new RegExp(String.raw`"(${JSON_KEY})"[ \t]*:[ \t]*"`, "g");
-  ESCAPED_JSON_KEY_RE = new RegExp(String.raw`\\"(${JSON_KEY})\\"[ \t]*:[ \t]*\\"`, "g");
-  TOKEN68 = String.raw`[A-Za-z0-9._~+/=-]{8,}(?![A-Za-z0-9._~+/=\[-])`;
-  HEADER_SEP = String.raw`\\?["']?[ \t]*:[ \t]*\\?["']?`;
-  AUTH_HEADER_RE = new RegExp(String.raw`(?<![\w-])((?:proxy-)?authorization)(${HEADER_SEP}(?:bearer|basic|token|bot)[ \t]+)(${TOKEN68})`, "gi");
-  API_KEY_HEADER_RE = new RegExp(String.raw`(?<![\w-])(x-api-key)(${HEADER_SEP})(${TOKEN68})`, "gi");
-  CURL_PASSWORD_RE = /(?<=^|[\s'"])(--password(?:[ \t]+|=)\\?["']?)([^\s"'\\]+)/g;
-  CURL_USER_RE = /(?<=^|[\s'"])((?:-u|-U|--user|--proxy-user)(?:[ \t]+|=)\\?["']?([^\s"'\\:@]+):)([^\s"'\\@]+)/g;
-  URL_USERINFO_RE = /(?<![a-z0-9+.-])([a-z][a-z0-9+.-]{0,31}:\/\/[^\s/:@?#"'\\]+:)([^\s/@?#"'\\]+)(?=@)/gi;
-  PEM_RE = /(-----BEGIN [A-Z0-9 ]{0,32}PRIVATE KEY(?: BLOCK)?-----)((?:(?!-----)[\s\S]){1,16384})(-----END [A-Z0-9 ]{0,32}PRIVATE KEY(?: BLOCK)?-----)/g;
-  TB = String.raw`(?:(?<=\\[nrtbfu0])|(?<!\w))`;
-  TOKEN_REGEXES = [
-    { name: "github_pat", re: /github_pat_[A-Za-z0-9_]{20,}/g },
-    { name: "github_token", re: new RegExp(String.raw`${TB}gh[pousr]_[A-Za-z0-9]{20,}\b`, "g") },
-    { name: "acp_session_token", re: new RegExp(String.raw`${TB}aseph_[A-Za-z0-9]{20,}\b`, "g") },
-    { name: "gitlab_pat", re: new RegExp(String.raw`${TB}glpat-[A-Za-z0-9_-]{20,}\b`, "g") },
-    {
-      name: "azure_devops_pat",
-      re: new RegExp(String.raw`${TB}[A-Za-z0-9]{76}AZDO[A-Za-z0-9]{4}\b`, "g")
-    },
-    { name: "anthropic_key", re: new RegExp(String.raw`${TB}sk-ant-[A-Za-z0-9_-]{20,}\b`, "g") },
-    { name: "openai_proj_key", re: new RegExp(String.raw`${TB}sk-proj-[A-Za-z0-9_-]{20,}\b`, "g") },
-    {
-      name: "openrouter_key",
-      re: new RegExp(String.raw`${TB}sk-or-(?:v1-)?[A-Za-z0-9_-]{20,}\b`, "g")
-    },
-    { name: "sk_key", re: new RegExp(String.raw`${TB}sk-[A-Za-z0-9]{20,}\b`, "g") },
-    { name: "slack_token", re: new RegExp(String.raw`${TB}xox[baprseo]-[A-Za-z0-9-]{10,}\b`, "g") },
-    { name: "aws_access_key", re: new RegExp(String.raw`${TB}AKIA[0-9A-Z]{16}\b`, "g") },
-    { name: "google_api_key", re: new RegExp(String.raw`${TB}AIza[A-Za-z0-9_-]{35}\b`, "g") },
-    {
-      name: "jwt",
-      re: new RegExp(String.raw`${TB}eyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b`, "g")
-    },
-    {
-      name: "signoz_ingestion_key",
-      re: new RegExp(String.raw`${TB}signoz-ingestion-key=[A-Za-z0-9._~+/-]{20,}={0,2}\b`, "g")
-    },
-    { name: "linear_oauth", re: new RegExp(String.raw`${TB}lin_oauth_[A-Za-z0-9_-]{10,}\b`, "g") },
-    { name: "linear_api", re: new RegExp(String.raw`${TB}lin_api_[A-Za-z0-9_-]{10,}\b`, "g") },
-    { name: "npm_token", re: new RegExp(String.raw`${TB}npm_[A-Za-z0-9_-]{20,}\b`, "g") },
-    {
-      name: "atlassian_token",
-      re: new RegExp(String.raw`${TB}ATATT[A-Za-z0-9_-]{20,}\b`, "g")
-    },
-    { name: "mcp_token", re: new RegExp(String.raw`${TB}aswt_[A-Za-z0-9]{20,}\b`, "g") }
-  ];
-  volatileSecrets = new Map;
-  registeredSensitiveKeys = new Set;
-  sensitiveKeyVerdicts = new Map;
-});
-
-export { isSensitiveKey, scrubSecrets, scrubObject, refreshSecretScrubberCache, registerVolatileSecret, registerSensitiveKeyName, init_secret_scrubber };

package/dist/cli-jqt9hrnz.js

@@ -1,168 +0,0 @@
-import {
-  cosineSimilarity,
-  deserializeEmbedding,
-  getEmbeddingProvider,
-  init_embedding,
-  serializeEmbedding
-} from "./cli-yhmwmv0g.js";
-import {
-  getDbClient,
-  init_db
-} from "./cli-qdv8kgz7.js";
-import {
-  init_secret_scrubber,
-  scrubSecrets
-} from "./cli-h1spv8v4.js";
-
-// src/be/scripts/embeddings.ts
-init_secret_scrubber();
-init_db();
-init_embedding();
-var providerOverride = null;
-function embeddingProvider() {
-  return providerOverride ?? getEmbeddingProvider();
-}
-function scriptEmbeddingText(script) {
-  return scrubSecrets([script.description, script.intent, script.signatureJson].join(`
-`));
-}
-function rowToScript(row) {
-  return {
-    id: row.id,
-    name: row.name,
-    scope: row.scope,
-    scopeId: row.scopeId ?? null,
-    source: row.source,
-    description: row.description,
-    intent: row.intent,
-    signatureJson: row.signatureJson,
-    argsJsonSchema: row.argsJsonSchema ?? null,
-    contentHash: row.contentHash,
-    version: row.version,
-    isScratch: row.isScratch === 1,
-    typeChecked: row.typeChecked === 1,
-    fsMode: row.fsMode,
-    createdByAgentId: row.createdByAgentId ?? null,
-    createdAt: row.createdAt,
-    updatedAt: row.updatedAt
-  };
-}
-async function embedScript(script) {
-  const text = scriptEmbeddingText(script);
-  const provider = embeddingProvider();
-  const embedding = await provider.embed(text);
-  if (!embedding)
-    return;
-  if (embedding.length !== provider.dimensions) {
-    console.error(`[script-embed] dimension mismatch for "${script.name}": expected=${provider.dimensions} got=${embedding.length}, skipping`);
-    return;
-  }
-  await getDbClient().run(`INSERT INTO script_embeddings (
-      scriptId, embedding, embeddingModel, embeddedText, embeddedAt
-    )
-    VALUES (?, ?, ?, ?, ?)
-    ON CONFLICT(scriptId) DO UPDATE SET
-      embedding = excluded.embedding,
-      embeddingModel = excluded.embeddingModel,
-      embeddedText = excluded.embeddedText,
-      embeddedAt = excluded.embeddedAt`, [script.id, serializeEmbedding(embedding), provider.name, text, new Date().toISOString()]);
-}
-async function candidateRows(scope, scopeId) {
-  const params = [];
-  let where = "s.isScratch = 0";
-  if (scope === "global") {
-    where += " AND s.scope = 'global' AND s.scopeId IS NULL";
-  } else if (scope === "agent") {
-    where += " AND s.scope = 'agent' AND s.scopeId = ?";
-    params.push(scopeId ?? "");
-  } else if (scopeId) {
-    where += " AND ((s.scope = 'agent' AND s.scopeId = ?) OR (s.scope = 'global' AND s.scopeId IS NULL))";
-    params.push(scopeId);
-  } else {
-    where += " AND s.scope = 'global' AND s.scopeId IS NULL";
-  }
-  return getDbClient().query(`SELECT
-      s.*,
-      e.scriptId,
-      e.embedding,
-      e.embeddingModel,
-      e.embeddedText,
-      e.embeddedAt
-    FROM script_embeddings e
-    JOIN scripts s ON s.id = e.scriptId
-    WHERE ${where}`, params);
-}
-async function scriptRows(scope, scopeId) {
-  const params = [];
-  let where = "isScratch = 0";
-  if (scope === "global") {
-    where += " AND scope = 'global' AND scopeId IS NULL";
-  } else if (scope === "agent") {
-    where += " AND scope = 'agent' AND scopeId = ?";
-    params.push(scopeId ?? "");
-  } else if (scopeId) {
-    where += " AND ((scope = 'agent' AND scopeId = ?) OR (scope = 'global' AND scopeId IS NULL))";
-    params.push(scopeId);
-  } else {
-    where += " AND scope = 'global' AND scopeId IS NULL";
-  }
-  return getDbClient().query(`SELECT *, NULL as scriptId, NULL as embedding, NULL as embeddingModel, NULL as embeddedText, NULL as embeddedAt FROM scripts WHERE ${where}`, params);
-}
-function nameMatchBonus(script, query) {
-  const trimmed = query.trim().toLowerCase();
-  if (!trimmed)
-    return 0;
-  return script.name.toLowerCase().includes(trimmed) ? 1 : 0;
-}
-async function lexicalFallback(args) {
-  const query = args.query.trim().toLowerCase();
-  return (await scriptRows(args.scope, args.scopeId)).map(rowToScript).filter((script) => {
-    if (!query)
-      return true;
-    return [script.name, script.description, script.intent].join(`
-`).toLowerCase().includes(query);
-  }).map((script) => {
-    const bonus = nameMatchBonus(script, args.query);
-    return {
-      script,
-      score: bonus || 0.5,
-      semanticScore: 0,
-      nameMatchBonus: bonus
-    };
-  }).sort((a, b) => b.score - a.score).slice(0, args.limit ?? 10);
-}
-async function searchScripts(args) {
-  const provider = embeddingProvider();
-  const queryEmbedding = await provider.embed(args.query);
-  if (!queryEmbedding)
-    return lexicalFallback(args);
-  const candidates = await candidateRows(args.scope, args.scopeId);
-  if (candidates.length === 0)
-    return lexicalFallback(args);
-  const results = [];
-  for (const row of candidates) {
-    const stored = deserializeEmbedding(row.embedding);
-    if (stored.length !== queryEmbedding.length)
-      continue;
-    const script = rowToScript(row);
-    const semanticScore = cosineSimilarity(queryEmbedding, stored);
-    const bonus = nameMatchBonus(script, args.query);
-    results.push({
-      script,
-      score: 0.7 * semanticScore + 0.3 * bonus,
-      semanticScore,
-      nameMatchBonus: bonus
-    });
-  }
-  if (results.length === 0)
-    return lexicalFallback(args);
-  return results.sort((a, b) => b.score - a.score).slice(0, args.limit ?? 10);
-}
-async function reembedAllScripts() {
-  const rows = await getDbClient().query("SELECT *, NULL as scriptId, NULL as embedding, NULL as embeddingModel, NULL as embeddedText, NULL as embeddedAt FROM scripts WHERE isScratch = 0 ORDER BY updatedAt ASC");
-  for (const row of rows) {
-    await embedScript(rowToScript(row));
-  }
-}
-
-export { embeddingProvider, embedScript, searchScripts, reembedAllScripts };