@mxf-dev/core 1.0.0 → 2.0.0

package/dist/utils/MxpEncryption.js

@@ -14,14 +14,28 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**
  * MXP Encryption Utilities
  *
- * Simple encryption/decryption using a shared key from environment variables.
+ * Encryption/decryption using a shared key from environment variables.
  * Uses AES-256-GCM for authenticated encryption.
+ *
+ * ## Failure policy
+ *
+ * Encryption is a security boundary, so there is no degraded mode:
+ *
+ * - `encrypt()` / `decrypt()` return `null` ONLY to mean "encryption is not
+ *   configured" (no MXP_ENCRYPTION_KEY). That is a deliberate, operator-chosen
+ *   state, not a failure.
+ * - Any actual crypto failure — bad key, bad IV, failed authentication tag,
+ *   unsupported algorithm — THROWS.
+ *
+ * Earlier versions returned the plaintext payload when encryption threw
+ * (`return encrypted || payload`), so a crypto fault silently put cleartext on
+ * the wire while the caller believed it was encrypted.
  */
 import * as crypto from 'crypto';
 import { requireEnv } from './env.js';
@@ -70,7 +84,11 @@ export class MxpEncryption {
         return this.isEnabled && this.encryptionKey !== null;
     }
     /**
-     * Encrypt an MXP payload
+     * Encrypt an MXP payload.
+     *
+     * @returns The encrypted payload, or null if encryption is not configured.
+     * @throws If encryption IS configured but the cipher fails. Never returns
+     *         plaintext.
      */
     encrypt(payload) {
         if (!this.isEncryptionEnabled()) {
@@ -97,21 +115,23 @@ export class MxpEncryption {
             };
         }
         catch (error) {
-            logger.error(`Encryption failed: ${error}`);
-            return null;
+            const message = error instanceof Error ? error.message : String(error);
+            logger.error(`Encryption failed: ${message}`);
+            throw new Error(`MXP encryption failed: ${message}`);
         }
     }
     /**
-     * Decrypt an encrypted payload
+     * Decrypt an encrypted payload.
+     *
+     * @throws If encryption is not configured, the algorithm is unsupported, or
+     *         the ciphertext fails authentication.
      */
     decrypt(encryptedPayload) {
         if (!this.isEncryptionEnabled()) {
-            logger.error('Cannot decrypt - encryption not configured');
-            return null;
+            throw new Error('Cannot decrypt MXP payload: encryption is not configured. Set MXP_ENCRYPTION_KEY and MXP_ENCRYPTION_SALT.');
         }
         if (encryptedPayload.algorithm !== MxpEncryptionAlgorithm.AES_256_GCM) {
-            logger.error(`Unsupported encryption algorithm: ${encryptedPayload.algorithm}`);
-            return null;
+            throw new Error(`Unsupported MXP encryption algorithm: ${encryptedPayload.algorithm}`);
         }
         try {
             // Decode from base64
@@ -121,7 +141,7 @@ export class MxpEncryption {
             // Create decipher
             const decipher = crypto.createDecipheriv('aes-256-gcm', this.encryptionKey, iv);
             decipher.setAuthTag(authTag);
-            // Decrypt
+            // Decrypt — final() throws if the authentication tag does not match
             const decrypted = Buffer.concat([
                 decipher.update(encrypted),
                 decipher.final()
@@ -130,22 +150,34 @@ export class MxpEncryption {
             return JSON.parse(decrypted.toString('utf8'));
         }
         catch (error) {
-            logger.error(`Decryption failed: ${error}`);
-            return null;
+            const message = error instanceof Error ? error.message : String(error);
+            logger.error(`Decryption failed: ${message}`);
+            throw new Error(`MXP decryption failed: ${message}`);
         }
     }
     /**
-     * Encrypt a full message payload (for convenience)
+     * Encrypt a full message payload.
+     *
+     * @returns The encrypted payload, or the original payload when encryption
+     *          is not configured.
+     * @throws If encryption is configured but fails.
      */
     encryptMessage(payload) {
         if (!this.isEncryptionEnabled()) {
-            return payload; // Return unencrypted if encryption is disabled
+            return payload; // Encryption not configured — caller opted out
         }
         const encrypted = this.encrypt(payload);
-        return encrypted || payload; // Fallback to unencrypted on error
+        if (!encrypted) {
+            // isEncryptionEnabled() was true, so encrypt() either returns a
+            // payload or throws. Reaching here means the two disagree.
+            throw new Error('MXP encryption is enabled but produced no payload');
+        }
+        return encrypted;
     }
     /**
-     * Decrypt a message payload (with type checking)
+     * Decrypt a message payload (with type checking).
+     *
+     * @throws If the payload is encrypted and decryption fails.
      */
     decryptMessage(payload) {
         // Check if it's an encrypted payload

package/dist/utils/MxpEncryption.js.map

@@ -1 +1 @@
-{"version":3,"file":"MxpEncryption.js","sourceRoot":"","sources":["../../src/utils/MxpEncryption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;GAKG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAgC,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AACxG,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;AAE7D;;GAEG;AACH,MAAM,OAAO,aAAa;IACd,MAAM,CAAC,QAAQ,CAAgB;IAC/B,aAAa,GAAkB,IAAI,CAAC;IACpC,SAAS,GAAY,KAAK,CAAC;IAEnC;QACI,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC7B,CAAC;IAEM,MAAM,CAAC,WAAW;QACrB,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC1B,aAAa,CAAC,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;QACjD,CAAC;QACD,OAAO,aAAa,CAAC,QAAQ,CAAC;IAClC,CAAC;IAED;;OAEG;IACK,iBAAiB;QACrB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACjD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,OAAO,CAAC,CAAC,kBAAkB;QAE3F,IAAI,SAAS,EAAE,CAAC;YACZ,gEAAgE;YAChE,mEAAmE;YACnE,qDAAqD;YACrD,MAAM,IAAI,GAAG,UAAU,CACnB,qBAAqB,EACrB,qGAAqG,CACxG,CAAC;YACF,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC9E,IAAI,CAAC,SAAS,GAAG,gBAAgB,CAAC;QACtC,CAAC;aAAM,CAAC;YACJ,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;YAChE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QAC3B,CAAC;IACL,CAAC;IAED;;OAEG;IACI,mBAAmB;QACtB,OAAO,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC;IACzD,CAAC;IAED;;OAEG;IACI,OAAO,CAAC,OAAmB;QAC9B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,CAAC;YACD,2CAA2C;YAC3C,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAElC,gBAAgB;YAChB,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,aAAc,EAAE,EAAE,CAAC,CAAC;YAE7E,sBAAsB;YACtB,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC5B,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC;gBACpC,MAAM,CAAC,KAAK,EAAE;aACjB,CAAC,CAAC;YAEH,6BAA6B;YAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAEpC,OAAO;gBACH,SAAS,EAAE,sBAAsB,CAAC,WAAW;gBAC7C,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAClC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACzB,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;aACtC,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;OAEG;IACI,OAAO,CAAC,gBAAkC;QAC7C,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC9B,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,gBAAgB,CAAC,SAAS,KAAK,sBAAsB,CAAC,WAAW,EAAE,CAAC;YACpE,MAAM,CAAC,KAAK,CAAC,qCAAqC,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC;YAChF,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,CAAC;YACD,qBAAqB;YACrB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC/D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAEhE,kBAAkB;YAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,aAAc,EAAE,EAAE,CAAC,CAAC;YACjF,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAE7B,UAAU;YACV,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC5B,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;gBAC1B,QAAQ,CAAC,KAAK,EAAE;aACnB,CAAC,CAAC;YAEH,yBAAyB;YACzB,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED;;OAEG;IACI,cAAc,CAAC,OAAmB;QACrC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC,CAAC,+CAA+C;QACnE,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,SAAS,IAAI,OAAO,CAAC,CAAC,mCAAmC;IACpE,CAAC;IAED;;OAEG;IACI,cAAc,CAAC,OAAsC;QACxD,qCAAqC;QACrC,IAAI,WAAW,IAAI,OAAO,IAAI,MAAM,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC,OAAO,CAAC,OAA2B,CAAC,CAAC;QACrD,CAAC;QAED,yBAAyB;QACzB,OAAO,OAAqB,CAAC;IACjC,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,iBAAiB;QAC3B,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;CACJ;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC"}
+{"version":3,"file":"MxpEncryption.js","sourceRoot":"","sources":["../../src/utils/MxpEncryption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAgC,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AACxG,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;AAE7D;;GAEG;AACH,MAAM,OAAO,aAAa;IACd,MAAM,CAAC,QAAQ,CAAgB;IAC/B,aAAa,GAAkB,IAAI,CAAC;IACpC,SAAS,GAAY,KAAK,CAAC;IAEnC;QACI,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC7B,CAAC;IAEM,MAAM,CAAC,WAAW;QACrB,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;YAC1B,aAAa,CAAC,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;QACjD,CAAC;QACD,OAAO,aAAa,CAAC,QAAQ,CAAC;IAClC,CAAC;IAED;;OAEG;IACK,iBAAiB;QACrB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACjD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,OAAO,CAAC,CAAC,kBAAkB;QAE3F,IAAI,SAAS,EAAE,CAAC;YACZ,gEAAgE;YAChE,mEAAmE;YACnE,qDAAqD;YACrD,MAAM,IAAI,GAAG,UAAU,CACnB,qBAAqB,EACrB,qGAAqG,CACxG,CAAC;YACF,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC9E,IAAI,CAAC,SAAS,GAAG,gBAAgB,CAAC;QACtC,CAAC;aAAM,CAAC;YACJ,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;YAChE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QAC3B,CAAC;IACL,CAAC;IAED;;OAEG;IACI,mBAAmB;QACtB,OAAO,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC;IACzD,CAAC;IAED;;;;;;OAMG;IACI,OAAO,CAAC,OAAmB;QAC9B,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,IAAI,CAAC;YACD,2CAA2C;YAC3C,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAElC,gBAAgB;YAChB,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,aAAc,EAAE,EAAE,CAAC,CAAC;YAE7E,sBAAsB;YACtB,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC5B,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC;gBACpC,MAAM,CAAC,KAAK,EAAE;aACjB,CAAC,CAAC;YAEH,6BAA6B;YAC7B,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAEpC,OAAO;gBACH,SAAS,EAAE,sBAAsB,CAAC,WAAW;gBAC7C,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAClC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACzB,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;aACtC,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,KAAK,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACI,OAAO,CAAC,gBAAkC;QAC7C,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACX,2GAA2G,CAC9G,CAAC;QACN,CAAC;QAED,IAAI,gBAAgB,CAAC,SAAS,KAAK,sBAAsB,CAAC,WAAW,EAAE,CAAC;YACpE,MAAM,IAAI,KAAK,CAAC,yCAAyC,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,CAAC;YACD,qBAAqB;YACrB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC/D,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAEhE,kBAAkB;YAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,aAAc,EAAE,EAAE,CAAC,CAAC;YACjF,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAE7B,oEAAoE;YACpE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC5B,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;gBAC1B,QAAQ,CAAC,KAAK,EAAE;aACnB,CAAC,CAAC;YAEH,yBAAyB;YACzB,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,KAAK,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,EAAE,CAAC,CAAC;QACzD,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACI,cAAc,CAAC,OAAmB;QACrC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC,CAAC,+CAA+C;QACnE,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,gEAAgE;YAChE,2DAA2D;YAC3D,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAED;;;;OAIG;IACI,cAAc,CAAC,OAAsC;QACxD,qCAAqC;QACrC,IAAI,WAAW,IAAI,OAAO,IAAI,MAAM,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC,OAAO,CAAC,OAA2B,CAAC,CAAC;QACrD,CAAC;QAED,yBAAyB;QACzB,OAAO,OAAqB,CAAC;IACjC,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,iBAAiB;QAC3B,OAAO,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;CACJ;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC"}

package/dist/utils/ParameterNormalizer.d.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**

package/dist/utils/ParameterNormalizer.js

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**

package/dist/utils/PromptTemplateReplacer.d.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**

package/dist/utils/PromptTemplateReplacer.js

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**

package/dist/utils/TokenEstimator.d.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**

package/dist/utils/TokenEstimator.js

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**

package/dist/utils/ToolPaginationUtils.d.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 import { Logger } from './Logger.js';

package/dist/utils/ToolPaginationUtils.js

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**

package/dist/utils/toon/eligibility.d.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**

package/dist/utils/toon/eligibility.js

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 import { Logger } from '../Logger.js';

package/dist/utils/toon/encoder.d.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**

package/dist/utils/toon/encoder.js

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 import { evaluateEligibility, extractEligibleArrays } from './eligibility.js';

package/dist/utils/toon/formatter.d.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**

package/dist/utils/toon/formatter.js

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 import { encodeForPrompt } from './encoder.js';

package/dist/utils/toon/index.d.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**

package/dist/utils/toon/index.js

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**

package/dist/utils/toon/metrics.d.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**

package/dist/utils/toon/metrics.js

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 import { Logger } from '../Logger.js';

package/dist/utils/toon/types.d.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**

package/dist/utils/toon/types.js

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 export {};

package/dist/utils/validation.d.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**

package/dist/utils/validation.js

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 /**

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@mxf-dev/core",
-  "version": "1.0.0",
+  "version": "2.0.0",
   "description": "Model Exchange Framework core: events, schemas, types, services, and protocol contracts",
   "type": "module",
   "license": "Apache-2.0",
   "author": "Brad Anderson <BradA1878@pm.me>",
   "repository": {
     "type": "git",
-    "url": "https://github.com/mxf-dev/mxf",
+    "url": "https://github.com/BradA1878/model-exchange-framework",
     "directory": "packages/core"
   },
   "engines": {
@@ -37,7 +37,6 @@
     "README.md",
     "LICENSE"
   ],
-  "sideEffects": false,
   "scripts": {
     "build": "tsc -b",
     "clean": "rm -rf dist tsconfig.tsbuildinfo",
@@ -45,27 +44,38 @@
   },
   "dependencies": {
     "@google/genai": "^0.9.0",
+    "@mozilla/readability": "^0.6.0",
     "@msgpack/msgpack": "^3.1.2",
     "ajv": "^8.17.1",
     "ajv-formats": "^3.0.1",
-    "bcrypt": "^5.1.1",
     "dockerode": "^4.0.2",
+    "dompurify": "^3.2.4",
+    "html-to-text": "^9.0.5",
+    "jsdom": "^26.0.0",
     "meilisearch": "^0.53.0",
     "mongoose": "^8.10.2",
     "openai": "^4.95.1",
-    "puppeteer": "^24.11.2",
     "rxjs": "^7.8.2",
+    "turndown": "^7.2.0",
     "uuid": "^9.0.1",
     "zod": "^3.24.3"
   },
   "peerDependencies": {
     "@tensorflow/tfjs": "^4.22.0",
+    "bcrypt": "^5.1.1",
+    "puppeteer": "^24.11.2",
     "socket.io": "^4.7.2"
   },
   "peerDependenciesMeta": {
     "@tensorflow/tfjs": {
       "optional": true
     },
+    "bcrypt": {
+      "optional": true
+    },
+    "puppeteer": {
+      "optional": true
+    },
     "socket.io": {
       "optional": true
     }
@@ -74,7 +84,12 @@
     "@tensorflow/tfjs": "^4.22.0",
     "@types/bcrypt": "^5.0.2",
     "@types/dockerode": "^3.3.24",
+    "@types/html-to-text": "^9.0.4",
+    "@types/jsdom": "^21.1.7",
     "@types/node": "^20.10.5",
+    "@types/turndown": "^5.0.5",
+    "bcrypt": "^5.1.1",
+    "puppeteer": "^24.11.2",
     "socket.io": "^4.7.2",
     "typescript": "^5.2.2"
   },

package/src/adapters/FrameworkAdapter.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  */
 
 /**
@@ -123,7 +123,7 @@ export abstract class FrameworkAdapter {
 
     constructor(config: FrameworkAdapterConfig) {
         this.config = config;
-        this.logger = new Logger('FrameworkAdapter');
+        this.logger = new Logger('info', 'FrameworkAdapter');
 
         this.logger.info('Initialized framework adapter', {
             frameworkName: config.frameworkName,

package/src/adapters/index.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/config/ConfigManager.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 
@@ -25,6 +25,7 @@
  * Enables dynamic configuration of agent behaviors and capabilities.
  */
 
+import { readFile } from 'node:fs/promises';
 import { Observable, from } from 'rxjs';
 import { map } from 'rxjs/operators';
 import { Logger } from '../utils/Logger.js';
@@ -750,24 +751,55 @@ export class ConfigManager implements IConfigManager {
     }
     
     /**
-     * Load configuration from a file
-     * @param filePath - Path to configuration file
+     * Load configuration from a JSON file and merge it over the defaults.
+     *
+     * Errors are surfaced through the Observable: a missing file, unreadable
+     * file, or malformed JSON is a configuration error the caller must see.
+     * (This method previously logged "not fully implemented" and handed back the
+     * current config, so callers believed they had loaded a file they had not.)
+     *
+     * @param filePath - Path to a JSON configuration file
+     * @returns Observable of the merged configuration
      */
     public loadConfigFromFile(filePath: string): Observable<SdkConfig> {
-        // In a browser environment, we would use fetch
-        // In Node.js, we would use fs.readFile
-        
-        // This is a simplified implementation that assumes we're in a Node.js environment
-        try {
-            // Note: In a real implementation, this would be asynchronous
-            // For now, we'll just return the current config
-            this.logger.warn(`loadConfigFromFile not fully implemented. File path: ${filePath}`);
-            
-            return from(Promise.resolve(this.config));
-        } catch (error) {
-            this.logger.error(`Failed to load configuration from file: ${error}`);
-            return from(Promise.resolve(this.config));
+        if (typeof filePath !== 'string' || filePath.trim() === '') {
+            throw new Error('loadConfigFromFile requires a non-empty file path');
         }
+
+        const load = async (): Promise<SdkConfig> => {
+            let fileContents: string;
+            try {
+                fileContents = await readFile(filePath, 'utf8');
+            } catch (error) {
+                const message = error instanceof Error ? error.message : String(error);
+                this.logger.error(`Failed to read configuration file '${filePath}': ${message}`);
+                throw new Error(`Failed to read configuration file '${filePath}': ${message}`);
+            }
+
+            let parsed: unknown;
+            try {
+                parsed = JSON.parse(fileContents);
+            } catch (error) {
+                const message = error instanceof Error ? error.message : String(error);
+                this.logger.error(`Configuration file '${filePath}' is not valid JSON: ${message}`);
+                throw new Error(`Configuration file '${filePath}' is not valid JSON: ${message}`);
+            }
+
+            if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+                throw new Error(`Configuration file '${filePath}' must contain a JSON object`);
+            }
+
+            // Merge, validate and emit CONFIG_UPDATED through the normal path.
+            this.config = this.mergeConfigs(DEFAULT_CONFIG, parsed as Partial<SdkConfig>);
+            this.validateConfig();
+            this.emitConfigUpdated(['all']);
+
+            this.logger.info(`Loaded configuration from '${filePath}'`);
+
+            return this.config;
+        };
+
+        return from(load());
     }
     
     /**
@@ -1397,10 +1429,11 @@ export class ConfigManager implements IConfigManager {
             data,
             { source: 'ConfigManager' }
         );
-        // Emit to client bus - will propagate to server via shared eventSubject
+        // Emit once. Both buses push into the SAME RxJS Subject (see EventBus.ts),
+        // so emitting on both delivered every local subscriber two copies of the
+        // event. The client bus is the right one here: ConfigManager runs in the
+        // SDK, and the shared Subject already carries the event to server-side
+        // subscribers.
         EventBus.client.emit(ConfigEvents.CHANNEL_SYSTEM_LLM_CHANGED, payload);
-
-        // Also emit to server bus to ensure propagation
-        EventBus.server.emit(ConfigEvents.CHANNEL_SYSTEM_LLM_CHANGED, payload);
     }
 }

package/src/config/McpPromptsConfig.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/config/ModelContextLimits.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/config/PromptCompactionConfig.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/config/PromptConfig.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/config/ServerConfig.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */
 

package/src/config/dag.config.ts

@@ -14,7 +14,7 @@
  * limitations under the License.
  *
  * @author Brad Anderson <BradA1878@pm.me>
- * @repository https://github.com/mxf-dev/mxf
+ * @repository https://github.com/BradA1878/model-exchange-framework
  * @documentation https://mxf-dev.github.io/mxf/
  */