@ganju/utils 0.0.1

package/dist/sdkConstants.d.ts

@@ -0,0 +1,15 @@
+export declare const CUSTOM_CODE_BINDING_TOKEN = "GANJU_TOOL_TOKEN";
+export declare const CUSTOM_CODE_BINDING_BROKER = "GANJU_BROKER";
+export declare const CUSTOM_CODE_BROKER_ORIGIN = "https://broker.ganju.internal";
+export declare const CUSTOM_CODE_BROKER_PATH_CONNECTION = "/connection";
+export declare const CUSTOM_CODE_BROKER_PATH_SECRET = "/secret";
+export declare const CUSTOM_CODE_BROKER_PATH_RESOURCES_SEARCH = "/resources/search";
+export declare const CUSTOM_CODE_BROKER_PATH_RESOURCES_READ = "/resources/read";
+export declare const CUSTOM_CODE_BROKER_PATH_RESOURCES_LIST = "/resources/list";
+export declare const CUSTOM_CODE_BROKER_PATH_RESOURCES_CREATE = "/resources/create";
+export declare const CUSTOM_CODE_BROKER_PATH_RESOURCES_DELETE = "/resources/delete";
+export declare const CUSTOM_CODE_BROKER_PATH_SEND_FILE = "/send-file";
+export declare const CUSTOM_CODE_HEALTH_TOOL = "__ganju_health";
+export declare const CUSTOM_CODE_MAX_LOGS = 50;
+export declare const CUSTOM_CODE_MAX_LOG_LENGTH = 2000;
+//# sourceMappingURL=sdkConstants.d.ts.map

package/dist/sdkConstants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdkConstants.d.ts","sourceRoot":"","sources":["../src/sdkConstants.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,yBAAyB,qBAAqB,CAAC;AAC5D,eAAO,MAAM,0BAA0B,iBAAiB,CAAC;AAKzD,eAAO,MAAM,yBAAyB,kCAAkC,CAAC;AACzE,eAAO,MAAM,kCAAkC,gBAAgB,CAAC;AAChE,eAAO,MAAM,8BAA8B,YAAY,CAAC;AACxD,eAAO,MAAM,wCAAwC,sBAAsB,CAAC;AAC5E,eAAO,MAAM,sCAAsC,oBAAoB,CAAC;AACxE,eAAO,MAAM,sCAAsC,oBAAoB,CAAC;AACxE,eAAO,MAAM,wCAAwC,sBAAsB,CAAC;AAC5E,eAAO,MAAM,wCAAwC,sBAAsB,CAAC;AAC5E,eAAO,MAAM,iCAAiC,eAAe,CAAC;AAO9D,eAAO,MAAM,uBAAuB,mBAAmB,CAAC;AAKxD,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,0BAA0B,OAAQ,CAAC"}

package/dist/sdkConstants.js

@@ -0,0 +1,43 @@
+"use strict";
+// The handful of constants that get bundled into every customer's deployed
+// script, split out from the main constants module for exactly that reason.
+//
+// `@ganju/utils/constants` is one large object literal, so a bundler cannot drop
+// the keys a consumer doesn't touch — importing it from the SDK pulled ~70KB of
+// plan limits, MIME tables and vendor scopes into every uploaded Worker to reach
+// fourteen strings. These live here instead, and the main module re-exports them
+// so there is still one definition of each.
+//
+// The rule for this file: nothing lands here unless the SDK reads it at runtime,
+// and it imports nothing.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CUSTOM_CODE_MAX_LOG_LENGTH = exports.CUSTOM_CODE_MAX_LOGS = exports.CUSTOM_CODE_HEALTH_TOOL = exports.CUSTOM_CODE_BROKER_PATH_SEND_FILE = exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_DELETE = exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_CREATE = exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_LIST = exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_READ = exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_SEARCH = exports.CUSTOM_CODE_BROKER_PATH_SECRET = exports.CUSTOM_CODE_BROKER_PATH_CONNECTION = exports.CUSTOM_CODE_BROKER_ORIGIN = exports.CUSTOM_CODE_BINDING_BROKER = exports.CUSTOM_CODE_BINDING_TOKEN = void 0;
+// Bindings injected into every user script at upload time. The token is a
+// secret_text binding rotated on each publish; the broker is a service binding.
+// Names are part of the SDK's contract with the script, so they can't be
+// renamed without breaking already-deployed code.
+exports.CUSTOM_CODE_BINDING_TOKEN = 'GANJU_TOOL_TOKEN';
+exports.CUSTOM_CODE_BINDING_BROKER = 'GANJU_BROKER';
+// Broker routes, called by user code through the service binding above with
+// `Authorization: Bearer <GANJU_TOOL_TOKEN>`. The origin is arbitrary — a
+// service binding ignores the hostname.
+exports.CUSTOM_CODE_BROKER_ORIGIN = 'https://broker.ganju.internal';
+exports.CUSTOM_CODE_BROKER_PATH_CONNECTION = '/connection';
+exports.CUSTOM_CODE_BROKER_PATH_SECRET = '/secret';
+exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_SEARCH = '/resources/search';
+exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_READ = '/resources/read';
+exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_LIST = '/resources/list';
+exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_CREATE = '/resources/create';
+exports.CUSTOM_CODE_BROKER_PATH_RESOURCES_DELETE = '/resources/delete';
+exports.CUSTOM_CODE_BROKER_PATH_SEND_FILE = '/send-file';
+// The reserved tool name the publish pipeline calls against a freshly uploaded
+// script to ask which tools it actually exports — which is what turns "the
+// manifest declares lookup-order but the code exports lookupOrder" from a
+// call-time mystery into a publish-time error. Underscore-prefixed so it can
+// never collide with a declared name.
+exports.CUSTOM_CODE_HEALTH_TOOL = '__ganju_health';
+// How many ctx.log() lines travel back with a result. Logs are buffered inside
+// the isolate and returned in the response rather than sent to the broker line
+// by line — a log call shouldn't cost a network round trip.
+exports.CUSTOM_CODE_MAX_LOGS = 50;
+exports.CUSTOM_CODE_MAX_LOG_LENGTH = 2_000;

package/dist/slackSend.d.ts

@@ -0,0 +1,38 @@
+export type SlackOperation = 'post-message' | 'upload-file';
+export interface SlackSendRequest {
+    accessToken: string;
+    operation: SlackOperation;
+    channel: string;
+    threadTs?: string;
+    text?: string;
+    mrkdwn?: boolean;
+    blocks?: unknown[];
+    title?: string;
+    initialComment?: string;
+}
+export interface SlackSendRemoteResourceRequest {
+    slack: {
+        accessToken: string;
+        channel: string;
+        threadTs?: string;
+        title?: string;
+        initialComment?: string;
+    };
+    remote: {
+        url: string;
+        transport: string;
+        authHeader?: {
+            name: string;
+            value: string;
+        } | null;
+        uri: string;
+        timeoutMs: number;
+    };
+}
+export interface SlackSendResponse {
+    id: string;
+    channel?: string;
+    ts?: string;
+    permalink?: string;
+}
+//# sourceMappingURL=slackSend.d.ts.map

package/dist/slackSend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slackSend.d.ts","sourceRoot":"","sources":["../src/slackSend.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,cAAc,GAAG,cAAc,GAAG,aAAa,CAAC;AAE5D,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,cAAc,CAAC;IAG1B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAGlB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;IAGnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAOD,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE;QACL,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,MAAM,EAAE;QACN,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,EAAE,MAAM,CAAC;QAElB,UAAU,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QACpD,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAIhC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}

package/dist/slackSend.js

@@ -0,0 +1,14 @@
+"use strict";
+// Wire protocol shared between the MCP worker (which builds the request) and
+// the resource-handler container (which talks to the Slack Web API).
+//
+// post-message: simple chat.postMessage. No attachments. Worker could call
+// Slack directly, but we route through the container to keep one auth/error
+// path for the slack provider and so future block-kit composition can grow
+// without bloating the worker bundle.
+//
+// upload-file: Slack's new external-upload flow is three round trips
+// (files.getUploadURLExternal → PUT bytes → files.completeUploadExternal).
+// The bytes ride in as a multipart `attachment` field; the container
+// streams them out to Slack's signed URL.
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/slug.d.ts

@@ -0,0 +1,5 @@
+export declare const generateRandomSlug: () => string;
+export declare const generateRandomToken: (byteLength?: number) => string;
+export declare const isReservedSlug: (slug: string) => boolean;
+export declare const isValidSlugFormat: (slug: string) => boolean;
+//# sourceMappingURL=slug.d.ts.map

package/dist/slug.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slug.d.ts","sourceRoot":"","sources":["../src/slug.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,kBAAkB,QAAO,MAIrC,CAAC;AAGF,eAAO,MAAM,mBAAmB,GAC9B,mBAA6C,KAC5C,MAIF,CAAC;AAEF,eAAO,MAAM,cAAc,GAAI,MAAM,MAAM,KAAG,OACZ,CAAC;AAEnC,eAAO,MAAM,iBAAiB,GAAI,MAAM,MAAM,KAAG,OAIxB,CAAC"}

package/dist/slug.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isValidSlugFormat = exports.isReservedSlug = exports.generateRandomToken = exports.generateRandomSlug = void 0;
+const constants_1 = require("./constants");
+const SLUG_BYTES = 16;
+const SLUG_PATTERN = /^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$/;
+const RESERVED = new Set(constants_1.constants.RESERVED_SLUGS);
+const toHex = (bytes) => {
+    let hex = '';
+    for (const b of bytes) {
+        hex += b.toString(16).padStart(2, '0');
+    }
+    return hex;
+};
+const generateRandomSlug = () => {
+    const bytes = new Uint8Array(SLUG_BYTES);
+    crypto.getRandomValues(bytes);
+    return toHex(bytes);
+};
+exports.generateRandomSlug = generateRandomSlug;
+// Opaque, unguessable token — used as the public handle for an invitation.
+const generateRandomToken = (byteLength = constants_1.constants.INVITATION_TOKEN_BYTES) => {
+    const bytes = new Uint8Array(byteLength);
+    crypto.getRandomValues(bytes);
+    return toHex(bytes);
+};
+exports.generateRandomToken = generateRandomToken;
+const isReservedSlug = (slug) => RESERVED.has(slug.toLowerCase());
+exports.isReservedSlug = isReservedSlug;
+const isValidSlugFormat = (slug) => typeof slug === 'string' &&
+    slug.length >= 3 &&
+    slug.length <= 63 &&
+    SLUG_PATTERN.test(slug);
+exports.isValidSlugFormat = isValidSlugFormat;

package/dist/slugifyTitle.d.ts

@@ -0,0 +1,2 @@
+export declare const slugifyTitle: (title: string) => string;
+//# sourceMappingURL=slugifyTitle.d.ts.map

package/dist/slugifyTitle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slugifyTitle.d.ts","sourceRoot":"","sources":["../src/slugifyTitle.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,YAAY,GAAI,OAAO,MAAM,KAAG,MAIjB,CAAC"}

package/dist/slugifyTitle.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.slugifyTitle = void 0;
+// Lowercase a human title into a slug usable as a command name / MCP id —
+// shared by prompts and resources (anything titled), so it's deliberately
+// generic rather than prompt-specific.
+const slugifyTitle = (title) => title
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, '_')
+    .replace(/^_+|_+$/g, '');
+exports.slugifyTitle = slugifyTitle;

package/dist/sources.d.ts

@@ -0,0 +1,43 @@
+export interface Source {
+    resourceId: string;
+    uri: string;
+    title: string;
+    sourceType: 'FILE' | 'WEBSITE' | 'CUSTOM_CODE';
+    mimeType: string;
+    fileName: string | null;
+    pageNumber?: number;
+    chunkIndex?: number;
+    score?: number;
+    excerpt?: string;
+}
+export interface ResourceUrlContext {
+    apiUrl: string;
+    organizationId: string;
+    projectId: string;
+}
+/**
+ * Does this source resolve to bytes we serve, rather than to a URL a reader can
+ * open?
+ *
+ * The distinction the two formatters below need is "download link or web link",
+ * and for a long time that was the same question as "is it a FILE". It stopped
+ * being once a tool could write a resource: a script-created one holds bytes
+ * exactly as an upload does, and its uri is a `resource://` address that means
+ * nothing to a browser. Formatting it as a web link produced a dead button in
+ * whichever channel the answer went to.
+ */
+export declare const isDownloadableSource: (sourceType: Source["sourceType"]) => boolean;
+export declare const isResourceSourceEnabled: (resource: {
+    showSource?: string | null;
+} | null | undefined) => boolean;
+export declare const safeHostname: (url: string) => string | null;
+export declare const buildResourceDownloadUrl: (ctx: ResourceUrlContext, resourceId: string, pageNumber?: number) => string;
+export interface SourceButton {
+    text: string;
+    url: string;
+}
+export declare const formatSourcesAsButtons: (sources: Source[], ctx: ResourceUrlContext, options?: {
+    maxLabelLength?: number;
+}) => SourceButton[];
+export declare const formatSourcesAsMarkdown: (sources: Source[], ctx: ResourceUrlContext) => string;
+//# sourceMappingURL=sources.d.ts.map

package/dist/sources.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sources.d.ts","sourceRoot":"","sources":["../src/sources.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,MAAM;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,CAAC;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,oBAAoB,GAAI,YAAY,MAAM,CAAC,YAAY,CAAC,KAAG,OAEb,CAAC;AAE5D,eAAO,MAAM,uBAAuB,GAClC,UAAU;IAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,KAC1D,OAEwB,CAAC;AAE5B,eAAO,MAAM,YAAY,GAAI,KAAK,MAAM,KAAG,MAAM,GAAG,IAGnD,CAAC;AAEF,eAAO,MAAM,wBAAwB,GACnC,KAAK,kBAAkB,EACvB,YAAY,MAAM,EAClB,aAAa,MAAM,KAClB,MAGF,CAAC;AAEF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;CACb;AAKD,eAAO,MAAM,sBAAsB,GACjC,SAAS,MAAM,EAAE,EACjB,KAAK,kBAAkB,EACvB,UAAU;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,KACpC,YAAY,EAwBd,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAClC,SAAS,MAAM,EAAE,EACjB,KAAK,kBAAkB,KACtB,MAmBF,CAAC"}

package/dist/sources.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatSourcesAsMarkdown = exports.formatSourcesAsButtons = exports.buildResourceDownloadUrl = exports.safeHostname = exports.isResourceSourceEnabled = exports.isDownloadableSource = void 0;
+const constants_1 = require("./constants");
+/**
+ * Does this source resolve to bytes we serve, rather than to a URL a reader can
+ * open?
+ *
+ * The distinction the two formatters below need is "download link or web link",
+ * and for a long time that was the same question as "is it a FILE". It stopped
+ * being once a tool could write a resource: a script-created one holds bytes
+ * exactly as an upload does, and its uri is a `resource://` address that means
+ * nothing to a browser. Formatting it as a web link produced a dead button in
+ * whichever channel the answer went to.
+ */
+const isDownloadableSource = (sourceType) => sourceType === constants_1.constants.RESOURCE_SOURCE_TYPE_FILE ||
+    sourceType === constants_1.constants.RESOURCE_SOURCE_TYPE_CUSTOM_CODE;
+exports.isDownloadableSource = isDownloadableSource;
+const isResourceSourceEnabled = (resource) => (resource?.showSource ?? constants_1.constants.STATUS_ACTIVE) !==
+    constants_1.constants.STATUS_DISABLED;
+exports.isResourceSourceEnabled = isResourceSourceEnabled;
+const safeHostname = (url) => {
+    if (!URL.canParse(url))
+        return null;
+    return new URL(url).hostname.replace(/^www\./, '');
+};
+exports.safeHostname = safeHostname;
+const buildResourceDownloadUrl = (ctx, resourceId, pageNumber) => {
+    const fragment = pageNumber ? `#page=${pageNumber}` : '';
+    return `${ctx.apiUrl}/organization/${ctx.organizationId}/project/${ctx.projectId}/artifact/resource/${resourceId}/download${fragment}`;
+};
+exports.buildResourceDownloadUrl = buildResourceDownloadUrl;
+const truncateLabel = (text, max) => text.length <= max ? text : `${text.slice(0, max - 1)}…`;
+const formatSourcesAsButtons = (sources, ctx, options) => {
+    const maxLabelLength = options?.maxLabelLength ?? 60;
+    return sources.map((source, index) => {
+        const position = index + 1;
+        if ((0, exports.isDownloadableSource)(source.sourceType)) {
+            const label = source.fileName || source.title;
+            const pageSuffix = source.pageNumber ? ` · p.${source.pageNumber}` : '';
+            const url = (0, exports.buildResourceDownloadUrl)(ctx, source.resourceId, source.pageNumber);
+            return {
+                text: truncateLabel(`${position} ${label}${pageSuffix}`, maxLabelLength),
+                url
+            };
+        }
+        const domain = (0, exports.safeHostname)(source.uri);
+        const base = domain ? `${domain} — ${source.title}` : source.title;
+        return {
+            text: truncateLabel(`${position} ${base}`, maxLabelLength),
+            url: source.uri
+        };
+    });
+};
+exports.formatSourcesAsButtons = formatSourcesAsButtons;
+const formatSourcesAsMarkdown = (sources, ctx) => {
+    if (sources.length === 0)
+        return '';
+    const lines = sources.map((source, index) => {
+        const position = index + 1;
+        if ((0, exports.isDownloadableSource)(source.sourceType)) {
+            const label = source.fileName || source.title;
+            const pageSuffix = source.pageNumber ? ` · p. ${source.pageNumber}` : '';
+            const url = (0, exports.buildResourceDownloadUrl)(ctx, source.resourceId, source.pageNumber);
+            return `${position}. [${label}${pageSuffix}](${url})`;
+        }
+        const domain = (0, exports.safeHostname)(source.uri);
+        const label = domain ? `${domain} — ${source.title}` : source.title;
+        return `${position}. [${label}](${source.uri})`;
+    });
+    return `**Sources**\n${lines.join('\n')}`;
+};
+exports.formatSourcesAsMarkdown = formatSourcesAsMarkdown;

package/dist/ssrf.d.ts

@@ -0,0 +1,3 @@
+export declare const ipv4InPrivateRange: (host: string) => boolean;
+export declare const isBlockedHost: (hostname: string) => boolean;
+//# sourceMappingURL=ssrf.d.ts.map

package/dist/ssrf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf.d.ts","sourceRoot":"","sources":["../src/ssrf.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,kBAAkB,GAAI,MAAM,MAAM,KAAG,OAWjD,CAAC;AAEF,eAAO,MAAM,aAAa,GAAI,UAAU,MAAM,KAAG,OAehD,CAAC"}

package/dist/ssrf.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isBlockedHost = exports.ipv4InPrivateRange = void 0;
+// Literal-host SSRF screening shared by the proxied tool dispatchers
+// (http-endpoint, mcp-proxy). The Workers runtime can't resolve DNS, so we can
+// only screen literal hosts and IPs (not DNS rebinding). Private/loopback/
+// link-local ranges are always rejected; callers may further narrow with an
+// allowlist.
+const ipv4InPrivateRange = (host) => {
+    const parts = host.split('.');
+    if (parts.length !== 4)
+        return false;
+    const octets = parts.map(p => Number(p));
+    if (octets.some(o => !Number.isInteger(o) || o < 0 || o > 255))
+        return false;
+    const [a, b] = octets;
+    if (a === 127 || a === 10 || a === 0)
+        return true; // loopback / private / "this host"
+    if (a === 169 && b === 254)
+        return true; // link-local (incl. cloud metadata)
+    if (a === 192 && b === 168)
+        return true; // private
+    if (a === 172 && b >= 16 && b <= 31)
+        return true; // private
+    return false;
+};
+exports.ipv4InPrivateRange = ipv4InPrivateRange;
+const isBlockedHost = (hostname) => {
+    const host = hostname.toLowerCase().replace(/^\[|\]$/g, '');
+    if (!host)
+        return true;
+    if (host === 'localhost' || host.endsWith('.localhost'))
+        return true;
+    if (host === '::1' || host === '::')
+        return true;
+    // IPv6 link-local (fe80::/10) and unique-local (fc00::/7).
+    if (host.startsWith('fe80:') ||
+        host.startsWith('fc') ||
+        host.startsWith('fd')) {
+        return true;
+    }
+    if ((0, exports.ipv4InPrivateRange)(host))
+        return true;
+    return false;
+};
+exports.isBlockedHost = isBlockedHost;

package/dist/tallyUsageKinds.d.ts

@@ -0,0 +1,9 @@
+export interface UsageTally {
+    tool: number;
+    prompt: number;
+    resource: number;
+}
+export declare const tallyUsageKinds: (items: {
+    kind: string;
+}[]) => UsageTally;
+//# sourceMappingURL=tallyUsageKinds.d.ts.map

package/dist/tallyUsageKinds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tallyUsageKinds.d.ts","sourceRoot":"","sources":["../src/tallyUsageKinds.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAKD,eAAO,MAAM,eAAe,GAAI,OAAO;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EAAE,KAAG,UAQ3D,CAAC"}

package/dist/tallyUsageKinds.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tallyUsageKinds = void 0;
+const constants_1 = require("./constants");
+// Count a batch of invocations by usage kind. Shared by the channel runner and
+// the MCP flush so both feed the artifact's denormalized usage totals the same
+// way (anything that isn't tool/prompt/resource — protocol noise — is ignored).
+const tallyUsageKinds = (items) => {
+    const tally = { tool: 0, prompt: 0, resource: 0 };
+    for (const { kind } of items) {
+        if (kind === constants_1.constants.USAGE_KIND_TOOL)
+            tally.tool += 1;
+        else if (kind === constants_1.constants.USAGE_KIND_PROMPT)
+            tally.prompt += 1;
+        else if (kind === constants_1.constants.USAGE_KIND_RESOURCE)
+            tally.resource += 1;
+    }
+    return tally;
+};
+exports.tallyUsageKinds = tallyUsageKinds;

package/dist/telegramSend.d.ts

@@ -0,0 +1,28 @@
+export interface TelegramSendRequest {
+    botToken: string;
+    chatId: number;
+    replyToMessageId?: number;
+    caption?: string;
+    parseMode?: 'HTML' | 'Markdown' | 'MarkdownV2';
+}
+export interface TelegramSendResponse {
+    ok: boolean;
+    result?: {
+        message_id: number;
+    };
+    description?: string;
+}
+export interface TelegramSendRemoteResourceRequest {
+    telegram: TelegramSendRequest;
+    remote: {
+        url: string;
+        transport: string;
+        authHeader?: {
+            name: string;
+            value: string;
+        } | null;
+        uri: string;
+        timeoutMs: number;
+    };
+}
+//# sourceMappingURL=telegramSend.d.ts.map

package/dist/telegramSend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telegramSend.d.ts","sourceRoot":"","sources":["../src/telegramSend.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,YAAY,CAAC;CAChD;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,CAAC,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAQD,MAAM,WAAW,iCAAiC;IAChD,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,MAAM,EAAE;QACN,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,EAAE,MAAM,CAAC;QAElB,UAAU,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QACpD,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;CACH"}

package/dist/telegramSend.js

@@ -0,0 +1,9 @@
+"use strict";
+// Wire protocol shared between the worker (which constructs the request) and
+// the resource-handler container (which parses it and calls the Telegram Bot
+// API). Worker sends a multipart/form-data POST with one `metadata` field
+// (JSON matching TelegramSendRequest) and exactly one `file` field (binary).
+//
+// Telegram supports one media object per send call, so unlike Gmail this is
+// always a single attachment.
+Object.defineProperty(exports, "__esModule", { value: true });