@hasna/mementos 0.14.86 → 0.14.87

package/dist/cli/helpers.d.ts

@@ -0,0 +1,150 @@
+import type { Command } from "commander";
+import type { Memory, MemoryCategory, MemoryScope } from "../types/index.js";
+import type { Entity, EntityType } from "../types/index.js";
+export declare function getPackageVersion(): string;
+export declare function importanceColor(importance: number): (s: string) => string;
+export declare function colorScope(scope: MemoryScope): string;
+export declare function colorCategory(category: MemoryCategory): string;
+export declare function colorImportance(importance: number): string;
+export declare function colorEntityType(type: string, suffix?: string): string;
+export declare function resolveEntityArg(nameOrId: string, type?: EntityType): Entity;
+export declare function outputJson(data: unknown): void;
+export declare const DEFAULT_COMPACT_LIMIT = 20;
+export declare const DEFAULT_SEARCH_LIMIT = 10;
+export declare const DEFAULT_SNIPPET_LENGTH = 72;
+export declare function positiveIntOrDefault(value: unknown, fallback: number): number;
+export declare function cursorOrOffset(cursor: unknown, offset: unknown): number | undefined;
+export declare function truncateText(value: string | null | undefined, max?: number): string;
+export interface PagedFetchResult<T> {
+    rows: T[];
+    /**
+     * true = more rows exist; false = the end was reached; undefined = the
+     * server did not say (an older server without the pagination contract —
+     * the walk falls back to a short-page heuristic).
+     */
+    has_more: boolean | undefined;
+    next_cursor: number | null;
+}
+/**
+ * Collect rows across bounded pages (BUG 2796806b). The server caps every
+ * single response (1000 rows for list surfaces), so a request for more than
+ * one page — or for the full population — must walk pages.
+ *
+ * `target` is the number of rows the caller will display; the walk probes one
+ * row past it so `hasMore` is truthful and a "use --cursor N for more" hint is
+ * honest. With `target` undefined every matching row is collected.
+ *
+ * Guarded against cursor cycles and runaway page counts (mirrors the SDK's
+ * traversal guards). Termination: the server's `has_more: false`, or a page
+ * shorter than requested when the server carries no signal, or `target` rows
+ * collected.
+ */
+export declare function collectPagedRows<T>(fetchPage: (offset: number, limit: number) => PagedFetchResult<T>, target: number | undefined, offset: number, opts?: {
+    pageSize?: number;
+    maxPages?: number;
+}): {
+    rows: T[];
+    hasMore: boolean;
+};
+export declare function printPageHint(opts: {
+    shown: number;
+    limit: number;
+    offset?: number;
+    hasMore: boolean;
+    command: string;
+    detailHint?: string;
+}): void;
+/**
+ * Resolve output format from local command flag, global flag, or --json alias.
+ * Priority: localFmt > global --format > --json > "compact"
+ */
+export declare function getOutputFormat(program: Command, localFmt?: string): string;
+/**
+ * Simple YAML output — no library dependency.
+ * Arrays of objects: each item as `- key: value` block.
+ * Single objects: `key: value` per line.
+ */
+export declare function outputYaml(data: unknown): void;
+export declare function formatMemoryLine(m: Memory, opts?: {
+    valueLength?: number;
+    preferSummary?: boolean;
+}): string;
+export declare function formatMemoryDetail(m: Memory): string;
+export declare function makeHandleError(program: Command): (e: unknown) => never;
+export declare function resolveMemoryId(partialId: string): string;
+/**
+ * Resolve an `--agent` filter value to the agent id the store actually indexes.
+ *
+ * WHY THIS EXISTS. Every read command declared `--agent <name>` and then used
+ * the raw string as an agent ID. A registered NAME therefore matched nothing,
+ * and — because an empty list is a legal answer — the miss was reported as
+ * "No memories found." at rc=0 with empty stderr. A real name and a fabricated
+ * string produced byte-identical output, so no caller could tell an empty set
+ * from a mistyped one. The fleet's compliance check for the mementos-discipline
+ * rule is `list --agent <seat>`, which meant it reported every seat as
+ * non-compliant regardless of truth: a check that cannot pass.
+ *
+ * RESOLUTION IS DELEGATED, NOT REIMPLEMENTED. `getAgent` already does
+ * id -> case-insensitive name -> unique partial id (returning null when a
+ * partial is ambiguous), it is what the `save` path uses since #43, and it is
+ * MODE-AWARE — in API mode it resolves through `GET /agents/<value>` rather
+ * than SQL. A local-only lookup here would have worked on a developer box and
+ * failed on the fleet, which runs in API mode.
+ *
+ * ON A MISS: WARN AND PASS THE RAW VALUE THROUGH.
+ *
+ *   - WARN rather than THROW. The save path throws (#43) because there rc=0 was
+ *     illusory: the write silently landed in the unowned bucket and destroyed
+ *     what was there. A read filter destroys nothing, and callers legitimately
+ *     treat an empty list as a scriptable answer, so the sibling contract to
+ *     match is `todos list --assigned <bogus>`, which warns at rc=0. Same class,
+ *     opposite verb, deliberately different remedy.
+ *   - The warning goes to STDERR so `--format json` stays parseable on stdout.
+ *   - PASSING THE RAW VALUE THROUGH, rather than dropping the filter, is the
+ *     load-bearing half. Dropping it is what `search` and `info-stale` did, and
+ *     it WIDENS the query: an unresolvable agent then returns every agent's
+ *     rows. Zero rows is a visible failure; other agents' rows returned as
+ *     yours is an invisible one. Passing the raw value keeps the query narrow
+ *     and also cannot regress a caller whose id has no `agents` row — measured
+ *     0 such rows across 8340 memories at the time of the fix, but the store is
+ *     not frozen.
+ */
+export declare function resolveAgentFilter(nameOrId: string | undefined): string | undefined;
+/**
+ * Resolve a key-or-id argument to a Memory object.
+ * Tries key lookup first (with optional scope/agent/project filters), then partial ID.
+ */
+export declare function resolveKeyOrId(keyOrId: string, opts: {
+    scope?: string;
+    agent?: string;
+    project?: string;
+}, globalOpts: GlobalOpts): Memory | null;
+export declare function formatWatchLine(m: Memory): string;
+export declare function sendNotification(m: Memory): void;
+export interface GlobalOpts {
+    project?: string;
+    json?: boolean;
+    format?: string;
+    agent?: string;
+    session?: string;
+}
+export declare function diffLines(oldText: string, newText: string): void;
+export declare function diffMemory(memoryId: string, opts: {
+    version?: string;
+}, globalOpts: GlobalOpts): void;
+export declare const VALID_SCOPES: string[];
+export declare const VALID_CATEGORIES: string[];
+/** Navigate a nested object using dot-notation key path */
+export declare function getNestedValue(obj: Record<string, unknown>, path: string): unknown;
+/** Set a nested value using dot-notation key path */
+export declare function setNestedValue(obj: Record<string, unknown>, path: string, value: unknown): void;
+/** Remove a nested key using dot-notation key path */
+export declare function deleteNestedKey(obj: Record<string, unknown>, path: string): void;
+/** Parse a CLI value: try JSON.parse for numbers/booleans/arrays, fall back to string */
+export declare function parseConfigValue(raw: string): unknown;
+/** Validate a config key/value pair against known constraints */
+export declare function validateConfigKeyValue(key: string, value: unknown, DEFAULT_CONFIG: unknown): string | null;
+export declare function getConfigPath(): string;
+export declare function readFileConfig(): Record<string, unknown>;
+export declare function writeFileConfig(data: Record<string, unknown>): void;
+//# sourceMappingURL=helpers.d.ts.map

package/dist/cli/helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helpers.d.ts","sourceRoot":"","sources":["../../src/cli/helpers.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,KAAK,EACV,MAAM,EACN,cAAc,EACd,WAAW,EAEZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAM5D,wBAAgB,iBAAiB,IAAI,MAAM,CAe1C;AAsBD,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAKzE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAErD;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAE9D;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE1D;AAoBD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,MAAM,CAGjE;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,MAAM,CAqB5E;AAMD,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAE9C;AAED,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAI7E;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAMnF;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,GAAG,SAAyB,GAAG,MAAM,CAKnG;AAMD,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,IAAI,EAAE,CAAC,EAAE,CAAC;IACV;;;;OAIG;IACH,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAChC,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,gBAAgB,CAAC,CAAC,CAAC,EACjE,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAClD;IAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAoCjC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,IAAI,CAYP;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAM3E;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAuE9C;AAED,wBAAgB,gBAAgB,CAC9B,CAAC,EAAE,MAAM,EACT,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,OAAO,CAAA;CAAO,GAC3D,MAAM,CASR;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CA6BpD;AAMD,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,EAAE,OAAO,KAAK,KAAK,CAYvE;AAMD,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAWzD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CASnF;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,EAC1D,UAAU,EAAE,UAAU,GACrB,MAAM,GAAG,IAAI,CA2Bf;AAMD,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAgBjD;AAED,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAchD;AAMD,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAMD,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAyBhE;AAED,wBAAgB,UAAU,CACxB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,EAC1B,UAAU,EAAE,UAAU,GACrB,IAAI,CAuIN;AAMD,eAAO,MAAM,YAAY,UAA6C,CAAC;AACvE,eAAO,MAAM,gBAAgB,UAAiD,CAAC;AAE/E,2DAA2D;AAC3D,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAQlF;AAED,qDAAqD;AACrD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAW/F;AAED,sDAAsD;AACtD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAShF;AAED,yFAAyF;AACzF,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAMrD;AAED,iEAAiE;AACjE,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CA0C1G;AAED,wBAAgB,aAAa,IAAI,MAAM,CAGtC;AAED,wBAAgB,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAcxD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAMnE"}

package/dist/cli/index.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env bun
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.tsx"],"names":[],"mappings":""}

package/dist/cli/index.js

@@ -1011,7 +1011,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
         this._exitCallback = (err) => {
           if (err.code !== "commander.executeSubCommandAsync") {
             throw err;
-          }
+          } else {}
         };
       }
       return this;
@@ -5019,6 +5019,30 @@ function redactSecrets(text) {
   }
   return result;
 }
+function redactValueTree(value) {
+  if (typeof value === "string")
+    return redactSecrets(value);
+  if (Array.isArray(value))
+    return value.map(redactValueTree);
+  if (value !== null && typeof value === "object") {
+    const out = {};
+    for (const [k, v] of Object.entries(value)) {
+      out[k] = redactValueTree(v);
+    }
+    return out;
+  }
+  return value;
+}
+function redactMemoryForOutput(memory) {
+  return {
+    ...memory,
+    key: redactSecrets(memory.key),
+    value: redactSecrets(memory.value),
+    summary: memory.summary ? redactSecrets(memory.summary) : null,
+    when_to_use: memory.when_to_use ? redactSecrets(memory.when_to_use) : null,
+    metadata: redactValueTree(memory.metadata)
+  };
+}
 var REDACTED = "[REDACTED]", SECRET_PATTERNS;
 var init_redact = __esm(() => {
   SECRET_PATTERNS = [
@@ -9952,6 +9976,7 @@ var init_auto_memory = __esm(() => {
 // src/db/webhook_hooks.ts
 var exports_webhook_hooks = {};
 __export(exports_webhook_hooks, {
+  validateWebhookHandlerUrl: () => validateWebhookHandlerUrl,
   updateWebhookHook: () => updateWebhookHook,
   recordWebhookInvocation: () => recordWebhookInvocation,
   listWebhookHooks: () => listWebhookHooks,
@@ -9959,6 +9984,8 @@ __export(exports_webhook_hooks, {
   deleteWebhookHook: () => deleteWebhookHook,
   createWebhookHook: () => createWebhookHook
 });
+import { isIP } from "net";
+import { lookup as dnsLookup } from "dns/promises";
 function parseRow(row) {
   return {
     id: row["id"],
@@ -9975,7 +10002,153 @@ function parseRow(row) {
     failureCount: row["failure_count"]
   };
 }
-function createWebhookHook(input, db) {
+function isBlockedIpv4(parts) {
+  const a = parts[0];
+  const b = parts[1];
+  if (a === 0)
+    return true;
+  if (a === 127)
+    return true;
+  if (a === 169 && b === 254)
+    return true;
+  if (a === 10)
+    return true;
+  if (a === 172 && b >= 16 && b <= 31)
+    return true;
+  if (a === 192 && b === 168)
+    return true;
+  return false;
+}
+function isBlockedIpv6(bytes) {
+  const mapped = bytes.slice(0, 10).every((b) => b === 0) && bytes[10] === 255 && bytes[11] === 255;
+  if (mapped)
+    return isBlockedIpv4(bytes.slice(12, 16));
+  if (bytes.every((b) => b === 0))
+    return true;
+  if (bytes.slice(0, 15).every((b) => b === 0) && bytes[15] === 1)
+    return true;
+  if ((bytes[0] & 254) === 252)
+    return true;
+  if (bytes[0] === 254 && (bytes[1] & 192) === 128)
+    return true;
+  return false;
+}
+function quadToGroups(quad) {
+  const nums = quad.split(".").map((p) => Number(p));
+  const [a, b, c, d] = nums;
+  const valid = [a, b, c, d].every((n) => n !== undefined && Number.isInteger(n) && n >= 0 && n <= 255);
+  if (!valid)
+    return null;
+  return [a << 8 | b, c << 8 | d];
+}
+function parseIpv6Bytes(host) {
+  const groups = host.split("::");
+  if (groups.length > 2)
+    return null;
+  const headRaw = groups[0] ?? "";
+  const tailRaw = groups[1] ?? "";
+  const head = headRaw === "" ? [] : headRaw.split(":");
+  const tail = tailRaw === "" ? [] : tailRaw.split(":");
+  const headNums = [];
+  for (const g of head) {
+    if (!/^[0-9a-f]{1,4}$/i.test(g))
+      return null;
+    headNums.push(parseInt(g, 16));
+  }
+  const tailNums = [];
+  for (const g of tail) {
+    if (/^\d+\.\d+\.\d+\.\d+$/.test(g)) {
+      const quads = quadToGroups(g);
+      if (!quads)
+        return null;
+      tailNums.push(...quads);
+    } else if (/^[0-9a-f]{1,4}$/i.test(g)) {
+      tailNums.push(parseInt(g, 16));
+    } else {
+      return null;
+    }
+  }
+  const hasCompression = groups.length === 2;
+  if (!hasCompression && headNums.length !== 8)
+    return null;
+  if (hasCompression && headNums.length + tailNums.length >= 8)
+    return null;
+  const zeros = 8 - headNums.length - tailNums.length;
+  const all = [...headNums, ...new Array(zeros).fill(0), ...tailNums];
+  const bytes = [];
+  for (const n of all) {
+    bytes.push(n >> 8 & 255, n & 255);
+  }
+  return bytes;
+}
+function defaultResolveHost(hostname2) {
+  return dnsLookup(hostname2, { all: true, verbatim: true });
+}
+function assertResolvedAddressPublic(address, url) {
+  const version = isIP(address);
+  if (version === 4) {
+    if (isBlockedIpv4(address.split(".").map((p) => Number(p)))) {
+      throw new Error(`${BLOCKED_TARGET_MESSAGE}: "${url}"`);
+    }
+  } else if (version === 6) {
+    const bytes = parseIpv6Bytes(address);
+    if (!bytes || isBlockedIpv6(bytes)) {
+      throw new Error(`${BLOCKED_TARGET_MESSAGE}: "${url}"`);
+    }
+  } else {
+    throw new Error(`${BLOCKED_TARGET_MESSAGE}: "${url}"`);
+  }
+}
+async function validateWebhookHandlerUrl(url, opts) {
+  const resolveHost = opts?.lookup ?? defaultResolveHost;
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    throw new Error(`Invalid webhook handler URL "${url}" \u2014 must be a valid http(s) URL`);
+  }
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+    throw new Error(`Invalid webhook handler URL "${url}" \u2014 only http and https are allowed`);
+  }
+  if (parsed.username || parsed.password) {
+    throw new Error(`Invalid webhook handler URL "${url}" \u2014 embedded credentials are not allowed`);
+  }
+  const host = parsed.hostname.replace(/^\[|\]$/g, "").toLowerCase();
+  if (host === "localhost" || host.endsWith(".localhost")) {
+    throw new Error(`${BLOCKED_TARGET_MESSAGE}: "${url}"`);
+  }
+  const version = isIP(host);
+  if (version === 4 || version === 6) {
+    if (version === 4) {
+      if (isBlockedIpv4(host.split(".").map((p) => Number(p)))) {
+        throw new Error(`${BLOCKED_TARGET_MESSAGE}: "${url}"`);
+      }
+    } else {
+      const bytes = parseIpv6Bytes(host);
+      if (!bytes || isBlockedIpv6(bytes)) {
+        throw new Error(`${BLOCKED_TARGET_MESSAGE}: "${url}"`);
+      }
+    }
+    return;
+  }
+  if (/^[0-9]+(\.[0-9]+)*$/.test(host) || /^0x[0-9a-f]+$/i.test(host) || host.includes("%")) {
+    throw new Error(`${BLOCKED_TARGET_MESSAGE}: "${url}"`);
+  }
+  let addrs;
+  try {
+    addrs = await resolveHost(host);
+  } catch {
+    throw new Error(`${BLOCKED_TARGET_MESSAGE}: "${url}"`);
+  }
+  if (addrs.length === 0) {
+    throw new Error(`${BLOCKED_TARGET_MESSAGE}: "${url}"`);
+  }
+  for (const { address } of addrs) {
+    assertResolvedAddressPublic(address, url);
+  }
+}
+async function createWebhookHook(input, db, opts) {
+  await validateWebhookHandlerUrl(input.handlerUrl, opts);
   if (!db && isApiMode()) {
     const { data } = apiJson("POST", "/webhooks", {
       type: input.type,
@@ -10093,6 +10266,7 @@ function recordWebhookInvocation(id, success, db) {
     d.run("UPDATE webhook_hooks SET invocation_count = invocation_count + 1, failure_count = failure_count + 1 WHERE id = ?", [id]);
   }
 }
+var BLOCKED_TARGET_MESSAGE = "Invalid webhook handler URL \u2014 loopback, link-local, and private network targets are not allowed";
 var init_webhook_hooks = __esm(() => {
   init_database();
   init_api_mode();
@@ -10711,6 +10885,7 @@ var init_contradiction = __esm(() => {
 var exports_built_in_hooks = {};
 __export(exports_built_in_hooks, {
   reloadWebhooks: () => reloadWebhooks,
+  makeWebhookHandler: () => makeWebhookHandler,
   loadWebhooksFromDb: () => loadWebhooksFromDb
 });
 async function getAutoMemory() {
@@ -10720,13 +10895,19 @@ async function getAutoMemory() {
   }
   return _processConversationTurn;
 }
-function loadWebhooksFromDb() {
+async function loadWebhooksFromDb() {
   if (_webhooksLoaded)
     return;
   _webhooksLoaded = true;
   try {
     const webhooks = listWebhookHooks({ enabled: true });
     for (const wh of webhooks) {
+      try {
+        await validateWebhookHandlerUrl(wh.handlerUrl);
+      } catch (err) {
+        console.error(`[hooks] Skipping webhook ${wh.id} (${wh.type}): ${err instanceof Error ? err.message : String(err)}`);
+        continue;
+      }
       hookRegistry.register({
         type: wh.type,
         blocking: wh.blocking,
@@ -10744,9 +10925,10 @@ function loadWebhooksFromDb() {
     console.error("[hooks] Failed to load webhooks from DB:", err);
   }
 }
-function makeWebhookHandler(webhookId, url) {
+function makeWebhookHandler(webhookId, url, opts) {
   return async (context) => {
     try {
+      await validateWebhookHandlerUrl(url, opts);
       const res = await fetch(url, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
@@ -10759,9 +10941,9 @@ function makeWebhookHandler(webhookId, url) {
     }
   };
 }
-function reloadWebhooks() {
+async function reloadWebhooks() {
   _webhooksLoaded = false;
-  loadWebhooksFromDb();
+  await loadWebhooksFromDb();
 }
 var _processConversationTurn = null, _webhooksLoaded = false;
 var init_built_in_hooks = __esm(() => {
@@ -27383,7 +27565,7 @@ class JSONSchemaGenerator {
               if (val === undefined) {
                 if (this.unrepresentable === "throw") {
                   throw new Error("Literal `undefined` cannot be represented in JSON Schema");
-                }
+                } else {}
               } else if (typeof val === "bigint") {
                 if (this.unrepresentable === "throw") {
                   throw new Error("BigInt literals cannot be represented in JSON Schema");
@@ -49033,7 +49215,7 @@ var require_tracestate_impl = __commonJS((exports) => {
           const value = listMember.slice(i + 1, part.length);
           if ((0, tracestate_validators_1.validateKey)(key) && (0, tracestate_validators_1.validateValue)(value)) {
             agg.set(key, value);
-          }
+          } else {}
         }
         return agg;
       }, new Map);
@@ -65226,6 +65408,7 @@ function registerRecallCommand(program2) {
 // src/cli/commands/memory-cmd-list.ts
 init_projects();
 init_memories();
+init_redact();
 init_helpers();
 import chalk12 from "chalk";
 import { resolve as resolve7 } from "path";
@@ -65273,36 +65456,37 @@ function registerListCommand(program2) {
         };
       }, limit, offset);
       const memories = hasMore && limit !== undefined ? collected.slice(0, limit) : collected;
+      const sanitized = memories.map(redactMemoryForOutput);
       if (fmt === "json") {
-        outputJson(memories);
+        outputJson(sanitized);
         return;
       }
       if (fmt === "csv") {
         console.log("key,value,scope,category,importance,id");
-        for (const m of memories) {
+        for (const m of sanitized) {
           const v = m.value.replace(/"/g, '""');
           console.log(`"${m.key}","${v}",${m.scope},${m.category},${m.importance},${m.id.slice(0, 8)}`);
         }
         return;
       }
       if (fmt === "yaml") {
-        outputYaml(memories);
+        outputYaml(sanitized);
         return;
       }
-      if (memories.length === 0) {
+      if (sanitized.length === 0) {
         console.log(chalk12.yellow("No memories found."));
         return;
       }
-      console.log(chalk12.bold(`${memories.length}${hasMore ? "+" : ""} memor${memories.length === 1 ? "y" : "ies"}:`));
-      for (const m of memories) {
+      console.log(chalk12.bold(`${sanitized.length}${hasMore ? "+" : ""} memor${sanitized.length === 1 ? "y" : "ies"}:`));
+      for (const m of sanitized) {
         console.log(formatMemoryLine(m, {
           valueLength: opts.verbose ? 120 : 64,
           preferSummary: !opts.verbose
         }));
       }
       printPageHint({
-        shown: memories.length,
-        limit: limit ?? memories.length,
+        shown: sanitized.length,
+        limit: limit ?? sanitized.length,
         offset,
         hasMore,
         command: "mementos list",
@@ -68572,7 +68756,7 @@ By type:`));
   webhooksCmd.command("create <type> <url>").description("Create a persistent webhook hook").option("--blocking", "Block the operation until the webhook responds").option("--priority <n>", "Hook priority (default 50)", "50").option("--agent <id>", "Scope to specific agent").option("--project <id>", "Scope to specific project").option("--description <text>", "Human-readable description").action(async (type, url, opts) => {
     const { createWebhookHook: createWebhookHook2 } = await Promise.resolve().then(() => (init_webhook_hooks(), exports_webhook_hooks));
     const { reloadWebhooks: reloadWebhooks2 } = await Promise.resolve().then(() => (init_built_in_hooks(), exports_built_in_hooks));
-    const wh = createWebhookHook2({
+    const wh = await createWebhookHook2({
       type,
       handlerUrl: url,
       blocking: opts.blocking ?? false,
@@ -68581,7 +68765,7 @@ By type:`));
       projectId: opts.project,
       description: opts.description
     });
-    reloadWebhooks2();
+    await reloadWebhooks2();
     console.log(chalk31.green("\u2713 Webhook created"));
     console.log(`  ID:   ${chalk31.cyan(wh.id)}`);
     console.log(`  Type: ${wh.type}`);
@@ -68602,7 +68786,7 @@ By type:`));
     const { reloadWebhooks: reloadWebhooks2 } = await Promise.resolve().then(() => (init_built_in_hooks(), exports_built_in_hooks));
     const updated = updateWebhookHook2(id, { enabled: true });
     if (updated) {
-      reloadWebhooks2();
+      await reloadWebhooks2();
       console.log(chalk31.green(`\u2713 Webhook ${id} enabled`));
     } else {
       console.error(chalk31.red(`Webhook not found: ${id}`));
@@ -68614,7 +68798,7 @@ By type:`));
     const { reloadWebhooks: reloadWebhooks2 } = await Promise.resolve().then(() => (init_built_in_hooks(), exports_built_in_hooks));
     const updated = updateWebhookHook2(id, { enabled: false });
     if (updated) {
-      reloadWebhooks2();
+      await reloadWebhooks2();
       console.log(chalk31.yellow(`\u2298 Webhook ${id} disabled`));
     } else {
       console.error(chalk31.red(`Webhook not found: ${id}`));

package/dist/cli/register-all.d.ts

@@ -0,0 +1,17 @@
+import type { Command } from "commander";
+/**
+ * Attach EVERY command group to `program`, in the order the CLI presents them.
+ *
+ * This is the single registration list. `index.tsx` calls it to build the real
+ * CLI, and `global-options.test.ts` calls it to walk the real option tables — so
+ * the structural short-flag guard cannot silently check a smaller tree than the
+ * one that ships.
+ *
+ * That drift was real: the guard originally re-listed 11 groups by hand while
+ * the CLI wired 15 sources, leaving `init`, `project-panel`, `brains` and the
+ * `@hasna/events` groups (`events`, `webhooks`) unwalked. Seven live `-j`
+ * collisions sat in that blind spot while the guard reported clean. Adding a
+ * command group here is now the only step required for it to be covered.
+ */
+export declare function registerAllCommands(program: Command): Command;
+//# sourceMappingURL=register-all.d.ts.map

package/dist/cli/register-all.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-all.d.ts","sourceRoot":"","sources":["../../src/cli/register-all.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkBzC;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAiB7D"}

package/dist/cli/startup-side-effects.d.ts

@@ -0,0 +1,9 @@
+import type { Command } from "commander";
+/**
+ * Mark a command as having no startup database access, and return it so it can
+ * be used inline at the end of a builder chain.
+ */
+export declare function withoutStartupDbAccess<T extends Command>(command: T): T;
+/** Whether the command about to run has opted out of the startup DB access. */
+export declare function skipsStartupDbAccess(command: Command | undefined): boolean;
+//# sourceMappingURL=startup-side-effects.d.ts.map

package/dist/cli/startup-side-effects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-side-effects.d.ts","sourceRoot":"","sources":["../../src/cli/startup-side-effects.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIzC;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,SAAS,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAGvE;AAED,+EAA+E;AAC/E,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,SAAS,GAAG,OAAO,CAE1E"}

package/dist/db/__fixtures__/fail-closed-stub-server.d.ts

@@ -0,0 +1,2 @@
+declare const server: Bun.Server<undefined>;
+//# sourceMappingURL=fail-closed-stub-server.d.ts.map

package/dist/db/__fixtures__/fail-closed-stub-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fail-closed-stub-server.d.ts","sourceRoot":"","sources":["../../../src/db/__fixtures__/fail-closed-stub-server.ts"],"names":[],"mappings":"AAqBA,QAAA,MAAM,MAAM,uBAyCV,CAAC"}

package/dist/db/__fixtures__/list-filter-capture-server.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=list-filter-capture-server.d.ts.map

package/dist/db/__fixtures__/list-filter-capture-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-filter-capture-server.d.ts","sourceRoot":"","sources":["../../../src/db/__fixtures__/list-filter-capture-server.ts"],"names":[],"mappings":""}

package/dist/db/__fixtures__/list-filter-client-runner.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=list-filter-client-runner.d.ts.map

package/dist/db/__fixtures__/list-filter-client-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-filter-client-runner.d.ts","sourceRoot":"","sources":["../../../src/db/__fixtures__/list-filter-client-runner.ts"],"names":[],"mappings":""}

package/dist/db/acl.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Memory Access Control Lists (ACLs).
+ *
+ * Fine-grained permissions beyond scopes: read-only, read-write, admin
+ * per agent per key pattern. Default: no ACLs = full access (backward compat).
+ */
+import { SqliteAdapter as Database } from "../storage.js";
+export type AclPermission = "read" | "readwrite" | "admin";
+export interface MemoryAcl {
+    id: string;
+    agent_id: string;
+    key_pattern: string;
+    permission: AclPermission;
+    project_id: string | null;
+    created_at: string;
+}
+/**
+ * Set an ACL rule. Upserts by agent_id + key_pattern.
+ */
+export declare function setAcl(agentId: string, keyPattern: string, permission: AclPermission, projectId?: string, db?: Database): MemoryAcl;
+/**
+ * List ACLs for an agent.
+ */
+export declare function listAcls(agentId: string, db?: Database): MemoryAcl[];
+/**
+ * Remove an ACL rule.
+ */
+export declare function removeAcl(id: string, db?: Database): boolean;
+/**
+ * Check if an agent has the required permission for a memory key.
+ * Returns true if allowed (no ACLs = full access).
+ */
+export declare function checkPermission(agentId: string, memoryKey: string, requiredPermission: "read" | "write", db?: Database): boolean;
+//# sourceMappingURL=acl.d.ts.map

package/dist/db/acl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acl.d.ts","sourceRoot":"","sources":["../../src/db/acl.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC;AAG1D,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,WAAW,GAAG,OAAO,CAAC;AAE3D,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,aAAa,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,wBAAgB,MAAM,CACpB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,aAAa,EACzB,SAAS,CAAC,EAAE,MAAM,EAClB,EAAE,CAAC,EAAE,QAAQ,GACZ,SAAS,CAeX;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,SAAS,EAAE,CAGpE;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,GAAG,OAAO,CAI5D;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,kBAAkB,EAAE,MAAM,GAAG,OAAO,EACpC,EAAE,CAAC,EAAE,QAAQ,GACZ,OAAO,CAqBT"}