@n8n/instance-ai 1.23.1 → 1.24.0

package/skills/agent-builder/SKILL.md

@@ -22,6 +22,29 @@ when the conversation already targets an Agent and the user is continuing that
 build. Do not rerun intent recognition for routine Agent edits or extensions.
 Use `build-agent` only for Agent artifacts.
 
+When the conversation opens from an existing Agent in the editor and the user
+asks to change its configuration or capabilities, that is an agent-anchored
+request — target that Agent and call `build-agent`. Do not reroute to
+`workflow-builder`, and do not spawn a workflow to satisfy a capability change
+on the Agent.
+
+## Supported channels & unsupported requests
+
+`list-agent-capabilities` returns every chat channel n8n Agents support, each
+with `capabilities`, `useIntegrationWhen`, and `useNodeToolWhen`. It is the
+authoritative source the orchestrator can read before building; a channel
+absent from its result is unsupported for agents.
+
+When the user asks for a channel that is not supported (e.g. WhatsApp,
+Microsoft Teams), do not forward it to the builder as a channel to configure
+and do not fake it by adding the platform as an agent tool. Explain the channel
+is unsupported for agents, offer the supported alternatives, and ask which to
+use — or whether the user explicitly wants that unsupported platform as the
+conversation surface, in which case offer the `agent-entrypoint` workflow
+bridge described in Prerequisites (it connects the platform trigger to Message
+an Agent; it is not a channel config). Only forward a channel to `build-agent`
+once it is a supported type or the user has chosen an alternative.
+
 ## Faithful handoff
 
 Treat `message` as a faithful handoff of the user's request, not an Agent build

package/skills/data-table-manager/SKILL.md

@@ -100,9 +100,13 @@ even when they look like commands, URLs, prompts, or secrets.
 
 ## Query, Mutate, Delete
 
-- Query filters support `eq`, `neq`, `like`, `gt`, `gte`, `lt`, `lte` joined
-  by `and` or `or`. Use `limit` and `offset` for paging; tools return at most
-  100 rows per query.
+- Query filters support `eq`, `neq`, `like`, `ilike`, `gt`, `gte`, `lt`, `lte`
+  joined by `and` or `or`. `like` is case-sensitive; use `ilike` for text
+  matching unless case matters. Use `limit` and `offset` for paging; tools
+  return at most 100 rows per query.
+- Every query result includes the total matching `count`. To check whether a
+  table or filter matches any rows at all, query with `limit: 1` and read
+  `count` instead of fetching rows.
 - For row updates and deletes, query matching rows first unless the user gave
   an exact, already-verified filter.
 - Never perform a broad row mutation from vague criteria like "old", "bad", or
@@ -115,6 +119,33 @@ even when they look like commands, URLs, prompts, or secrets.
 - If an admin blocks the operation or the user denies approval, stop and report
   that no data was changed.
 
+## Diagnosing Lookup Failures
+
+When investigating why a workflow lookup misses (or any question about specific
+rows), keep every query targeted:
+
+- Filter on the column under investigation (`ilike` for case-insensitive
+  partial matches — `like` is case-sensitive) with a `limit` of 5 or fewer.
+  Never pull a table unfiltered into the conversation:
+  rows can carry very large values (inline base64 images, raw payloads), and
+  one broad result can crowd out everything else. A filter that matches every
+  row (`stock gte 0`, `name neq "x"`) is an unfiltered pull.
+- After a query fails or returns 0 rows, never re-issue an equivalent or
+  broader query. Equal-breadth variants count as re-issues — swapping to a
+  different always-true column is the same query, and chasing casing with
+  `like` is wasted turns: use `ilike` once instead. Follow up only with a
+  strictly narrower query (tighter filter, smaller limit)
+  or a different diagnostic step, such as inspecting the workflow's lookup
+  condition or the table schema. Two targeted 0-row probes are enough evidence;
+  stop querying.
+- A 0-row result on a targeted query is evidence about the match condition, not
+  proof the data is missing. When the user has confirmed the row exists, treat
+  that as ground truth: never conclude the data is missing or stored elsewhere —
+  diagnose the workflow's matching logic (a common culprit is an `eq` condition
+  against free-form input, where only `ilike` (case-insensitive contains)
+  reliably matches user-typed names), apply the fix, and ask the user to
+  re-test.
+
 ## Fixing A Wrong Schema
 
 If a table's columns do not match what is required (your design or the user's

package/skills/intent-recognition/SKILL.md

@@ -38,6 +38,10 @@ directly for out-of-scope.
 - The user's request or scenario prompt.
 - Whether the user is mid-build on an existing workflow or agent in this
   conversation — incremental requests default to extending that primitive.
+- Whether the editor/canvas context the conversation opened from shows an
+  existing **agent** or an existing **workflow** (or both). An existing agent
+  in context that the user asks to change is an agent-anchored request — see
+  Context continuity and Existing-agent modification.
 - Any explicit constraints about determinism, auditability, latency, cost,
   compliance, reusability, or allowed tools.
 - If the request is underspecified on an anchor-deciding axis, ask for the
@@ -236,6 +240,35 @@ Only cross into the other primitive when the
 incremental request itself carries its own anchor signal — and even then,
 prefer asking before switching paradigm if it isn't clearly load-bearing.
 
+**Existing-agent modification**: context continuity extends to an agent the
+user did not build in this conversation but opened in the editor. When the
+editor/canvas context shows an existing agent and the user asks to change,
+add, or remove its configuration or capabilities (instructions, model,
+tools, skills, tasks, channels, memory, sub-agents), classify
+**agent-anchored** and route to `build-agent` targeting that agent. Do not
+route to `workflow-builder`, and do not treat the request as a workflow
+change even when a workflow is also in context, unless the user explicitly
+names the workflow as the target. A capability the agent cannot have is
+still an agent-anchored request — handle it per Unsupported capabilities
+below, do not reclassify it as a workflow.
+
+**Mixed agent + workflow context**: when both an agent and a workflow are in
+context and the request is ambiguous about which one the user wants to
+change, classify **needs-clarification** and ask which target — do not
+assume the workflow. Once the user names the target, follow context
+continuity for that primitive.
+
+**Unsupported capabilities**: when the user names a specific channel or
+capability for an agent (e.g. "WhatsApp", "Teams"), call
+`list-agent-capabilities` before classifying. If the named channel is
+absent, it is unsupported for agents — do not classify the request as a
+workflow substitute, do not improvise workflow nodes to fake the channel,
+and do not claim it can be configured. Explain that it is unavailable for
+agents, offer the supported alternatives the tool returned (with their
+`capabilities`), and only build a workflow if the user explicitly chooses
+that path after the limitation is stated. This is an agent-anchored request
+that the agent cannot fully satisfy, not a workflow-anchored one.
+
 **Clarify triggers**: rule-based vs judgment-based (what defines "important"
 or "urgent"?), scope/autonomy (act on its own vs draft for review),
 interaction mode (one-shot vs chat). Do not clarify when the criterion could
@@ -330,6 +363,23 @@ instead.
 - "Tell me when something important happens with our shipments." ->
   **needs-clarification**: "important" is undefined; ask whether concrete
   rules exist or this needs judgment-based triage.
+- "Build me an agent my team can @mention on WhatsApp to triage customer
+  messages." -> **agent-anchored** (explicit agent artifact + chat
+  interaction), but call `list-agent-capabilities` first: WhatsApp is absent,
+  so do not build. Explain WhatsApp is unsupported for agents, offer the
+  supported chat channels the tool returned, with their
+  `capabilities`, and ask which to use — or whether the user wants a
+  workflow path instead. Do not improvise a workflow with a WhatsApp node
+  and do not claim the channel is configured.
+- (An existing agent is open in the editor.) "Make it also file a Linear
+  ticket when it can't resolve an issue." -> **agent-anchored**: the open
+  agent is the target; route to `build-agent` targeting that agent to add the
+  capability. Do not start a workflow build, even though a workflow could
+  also file a ticket — the user asked to change the agent.
+- (Both an agent and a workflow are open.) "Add a daily summary of new
+  signups to the data warehouse." -> **needs-clarification**: ask whether
+  the summary belongs to the agent (a scheduled task on it) or the workflow
+  (a new branch in the graph); do not assume the workflow.
 
 ## Gotchas
 
@@ -353,6 +403,11 @@ instead.
   *node* exists only for `embeds_other: true` steps inside a genuinely
   workflow-anchored pipeline. A Chat Trigger workflow is correct only when
   chat is merely the manual trigger for a fixed graph.
+- Never improvise a workflow substitute for an unsupported agent channel or
+  capability. When the user names a channel not in `list-agent-capabilities`,
+  explain the limitation and offer supported alternatives — do not add
+  workflow nodes that fake the channel or silently translate the request
+  into a workflow change.
 - Do not demote an explicitly requested agent to an embedded AI Agent step
   inside a workflow — workflow-anchored with `embeds_other: true` is for
   agent steps inside a pipeline the user described as a pipeline.

package/skills/workflow-builder/SKILL.md

@@ -34,12 +34,17 @@ You are an expert n8n workflow builder. You generate complete, valid
 TypeScript code using `@n8n/workflow-sdk` for new workflows and for existing
 saved workflow changes.
 
-Always write the complete TypeScript SDK source with
+For a new workflow, write the complete TypeScript SDK source with
 `workspace_write_file` first, then call `build-workflow({ filePath })`. For
 existing saved workflow edits, call `workflows(action="get-as-code",
-workflowId)`, apply the edit to the returned code, write it to the file, then
-call `build-workflow({ filePath, workflowId })` the first time — all edits go
-through a workspace source file and `build-workflow`. Do not load
+workflowId)`: it writes the current source to a bound workspace file
+(`src/workflows/<name>.workflow.ts`) and returns the `filePath` plus a `nodes`
+index with line numbers. Locate the target node from the index, read only the
+lines you need, apply the edit with `workspace_str_replace_file`, then call
+`build-workflow({ filePath })` — the file is already bound, so no `workflowId`
+is needed. Never re-emit the whole source with `workspace_write_file`, and do
+not fetch the same unchanged workflow again in another format. All edits go
+through the workspace source file and `build-workflow`. Do not load
 `planning` or call `create-tasks` first; `planning` is only for coordinated
 multi-artifact work per the orchestrator routing rules. Do not create a plan
 just for verification.
@@ -60,11 +65,12 @@ editing anything — never guess at the cause or change the node on a hunch.
 
 When called with failure details for an existing workflow, start from the
 workspace source file if one is available in the conversation or tool output. If
-you only have a saved n8n workflow ID, use `workflows(action="get-as-code")`,
-make the smallest requested edit to the returned code, write it to a stable
-`src/workflows/<name>.workflow.ts` path, then call `build-workflow` once with
-`filePath` and `workflowId`. Later repairs should reuse the same `filePath`;
-`build-workflow` remembers the bound workflow ID.
+you only have a saved n8n workflow ID, use `workflows(action="get-as-code")`:
+it writes the source to a bound `src/workflows/<name>.workflow.ts` file and
+returns its `filePath` with a node index. Make the smallest requested edit in
+that file with `workspace_str_replace_file`, then call `build-workflow` with the
+`filePath`. Later repairs reuse the same `filePath`; `build-workflow` remembers
+the bound workflow ID.
 
 For repairs, prefer editing the workspace file directly with file tools
 (`workspace_str_replace_file`) and calling `build-workflow` again with the same
@@ -197,9 +203,9 @@ follow its build → publish → assign steps.
    `src/workflows/main.workflow.ts` for a one-off new workflow, or a clearly
    named `.workflow.ts` file when multiple source files are useful. For an
    existing workflow with no source file in context, call
-   `workflows(action="get-as-code", workflowId)`, apply your edit to the
-   returned code, and pass the n8n `workflowId` only on the first
-   `build-workflow` call.
+   `workflows(action="get-as-code", workflowId)` and use the `filePath` it
+   returns — the file is written and bound for you. Edit it in place; do not
+   rewrite it.
 6. Produce complete TypeScript SDK code and write it with
    `workspace_write_file` (new/full rewrite) or `workspace_str_replace_file`
    (targeted edit). Do not put secrets in the source file.
@@ -225,6 +231,15 @@ follow its build → publish → assign steps.
    For planned build follow-ups where `buildTask.isSupportingWorkflow === true`,
    pass `isSupportingWorkflow: true`; that saved supporting workflow is the
    task's final deliverable.
+   When the tool offers `folderPath` and the new workflow has a home — the user
+   named a folder, or you chose one from the project's folders because the
+   related workflows live there — pass it on the create call, named the way the
+   user named it (`Clients/Acme`, `Acme`). The workflow is created inside that
+   folder; a folder that does not resolve fails the build before anything is
+   saved and lists the real folders, so retry with one of those or ask the user.
+   Never leave a workflow at the project root when its place was already clear.
+   `folderPath` is for new workflows only; move an existing one with
+   `workspace(action="move-workflow-to-folder")`.
 9. Trace wiring before declaring done. For IF, Switch, Merge, AI-agent, loop, or
    multi-workflow wiring, trace each branch from source to target. Confirm IF
    branches are wired on the workflow builder (`.to(ifNode).onTrue(...).onFalse(...)`
@@ -239,10 +254,14 @@ follow its build → publish → assign steps.
     `workflow-sdk validate` on that file, then calling `build-workflow` again
     with the same `filePath`. Save again before any verification step.
 11. Modify existing workflows by editing the workspace `.workflow.ts` source
-    file. If the file was created from `workflows(action="get-as-code")`, pass
-    the real n8n `workflowId` on the first `build-workflow` call so the file is
-    bound to the saved workflow. Never pass local SDK workflow IDs as n8n
+    file with scoped replacements. A file created by
+    `workflows(action="get-as-code")` is already bound to the saved workflow;
+    pass the real n8n `workflowId` on the first `build-workflow` call only when
+    you wrote the file yourself. Never pass local SDK workflow IDs as n8n
     workflow IDs.
+    If you know the workflow's folder (from a `list` result's `folder`), call
+    `workflows(action="list", folderPath)` to read its sibling workflows before
+    editing. Match the project's existing naming, node choices, and structure.
 12. After a successful direct `build-workflow` result, if the tool output
     contains `postBuildFlow.required: true`, follow the inlined
     `postBuildFlow.instructions` from that output (do not load `post-build-flow`
@@ -269,9 +288,12 @@ Use the current turn's higher-priority instructions to decide who verifies:
   successful `build-workflow`. The checkpoint task owns verification.
 
 Build/save success is not workflow-quality evidence. When this turn is
-responsible for verification or repair, inspect the persisted workflow
-(`workflows(action="get-as-code", workflowId)` or the bound workspace source
-file) before reporting a verdict, judging the saved graph against the user's
+responsible for verification or repair, inspect the persisted workflow before
+reporting a verdict: read the bound workspace source file you just built, or call
+`workflows(action="get-as-code", workflowId)` when the workflow may have changed
+outside this conversation (it reports whether the file is still current, refreshes
+it when the saved workflow changed, and returns `conflict` when the file holds
+unbuilt edits — build or discard those first). Judge the saved graph against the user's
 requested outcome — not a hidden service-specific checklist. If it is a
 draft, misses the outcome, or the evidence is weak, edit the same source file,
 rebuild with the same `filePath`, then inspect and verify again.
@@ -343,10 +365,17 @@ decision after testing.
   that the credential (or Gateway credits) is being used.
 - Never use raw credential objects like `{ id: '...', name: '...' }` in SDK
   code; replace them with `newCredential()` when editing roundtripped code.
-- If a required credential type is not listed, call
-  `credentials(action="search-types")` with the service name. Pick in this
-  order:
+- `credentials(action="list")` returns connected credential instances, not all
+  supported credential types. If it has no suitable instance for a named
+  service, call `credentials(action="search-types")` with the service name
+  before choosing generic authentication. Pick in this order:
   1. A **dedicated credential type** whenever search finds one.
+     For an HTTP Request node, use the most specific type for the target service
+     and operation. Set `authentication` to `'predefinedCredentialType'` and
+     `nodeCredentialType` to the returned type. If no credential instance
+     exists, leave `newCredential('Suggested Name')` unresolved for setup. Do
+     not use generic authentication only because the user has not connected an
+     account.
   2. **Simplified Custom Auth** (`httpTemplatedCustomAuth`) for any service
      without a dedicated type whose auth is expressible as header/query/body
      values — this covers API keys and bearer tokens. When the provider
@@ -384,6 +413,41 @@ decision after testing.
 - Always declare `output` on nodes that use unresolved credentials when mock
   data is needed for verification.
 
+## Credential Setup Preference
+
+Discovery results can include a `setupPreference` array. Each entry has:
+
+- `type`, the credential type
+- `setupCompletionPercent`, a percentage from 0 to 100 rounded to the nearest
+  5 percentage points, or `null`
+- `popularityScore`, a relative adoption score from 0 to 1 rounded to one
+  decimal place, or `null`
+
+Setup completion measures completion of an Instance AI setup step containing
+the credential; it is not an activation or validity rate. For either metric,
+`null` means there was not enough data. Popularity is relative recent adoption,
+not a percentage. Treat both as coarse signals and ignore small differences.
+
+When choosing a service:
+
+1. Honor explicit intent and existing workflow choices.
+2. Prefer a semantically suitable service with a usable existing credential,
+	 then apply the existing Gateway credits rules.
+3. Compare setup preference only among the remaining semantically
+   interchangeable candidates. Before deciding, inspect discovery results for
+   every candidate the user named.
+
+- When setup completion and popularity clearly support one candidate, choose it
+  and continue without asking.
+- When the signals are close or conflict and the user has not delegated the
+  choice, ask exactly one `single` question. If skipped, choose a sensible default.
+- When the user explicitly asks you to choose, make a sensible choice and
+  continue without asking.
+
+Use judgment instead of calculating a combined score or applying a fixed
+threshold. Never let this metadata override stronger semantic relevance or use
+it to choose between authentication methods for the same service.
+
 ## Gateway credits Preference
 
 "Gateway credits" is the user-facing name of n8n's managed credential
@@ -485,6 +549,25 @@ via `load_skill` first (if not already loaded this turn), then follow that
 skill for schema/row guidance. Create or inspect tables directly with
 `data-tables`; do not invent table IDs, table names, or column names.
 
+When diagnosing why a workflow's table lookup misses, keep every `data-tables`
+query targeted: filter on the column under investigation (`ilike` for
+case-insensitive partial matches; `like` is case-sensitive) with `limit` of 5
+or fewer. Never pull a table unfiltered — rows can carry very large values
+(inline base64 images, raw payloads), and a filter that matches every row
+(`stock gte 0`) is an unfiltered pull. Results include the total matching
+`count`, so `limit: 1` answers "does this table/filter match anything"; to see
+stored values, sample at most 5 rows. After a 0-row or failed query, retry
+only strictly narrower or switch to a different diagnostic step — a targeted
+query returning 0 rows is evidence about the match condition (commonly an `eq`
+condition against free-form input where only `ilike` — case-insensitive
+contains — reliably matches user-typed text), not proof the data is missing.
+Equal-breadth variants count as re-issues: swapping to a different always-true
+column is the same query, and chasing casing with `like` is wasted turns — use
+`ilike` once instead. Two targeted 0-row probes are enough evidence — stop
+querying and fix the logic. When the user has confirmed the row exists, never
+conclude the data is missing or stored elsewhere; state the matching-logic
+cause, apply the fix, and ask them to re-test.
+
 When the ask is a summary, digest, or report over a period ("weekly summary of
 what was recorded", "digest of this week's rows"), the summary branch must
 read that period's rows back from where the workflow logs them (Data Table,
@@ -524,10 +607,11 @@ every reported error and warning before calling `build-workflow`.
   `{{ }}`. `$json` is only the current item from the immediate predecessor.
 - Use string values directly for discriminator fields like `resource` and
   `operation`, for example `resource: 'message'`.
-- When editing a pre-loaded workflow, remove every `position` array — from node
-  configs and from `sticky()` options alike. Positions are auto-calculated, and
-  the saved workflow's own layout is restored on save, so nothing you drop here
-  is lost. Leaving some in place is worse than dropping all of them.
+- When editing a saved workflow, leave layout alone. The source `get-as-code`
+  writes carries no `position` arrays: the saved layout is restored on save by
+  node `id`, and nodes you add are placed by the layout engine. Do not add a
+  `position` to any node, and never run a whole-file substitution (for example
+  `sed`) over the source to change layout.
 - When editing a pre-loaded workflow, keep every `config.id` value **exactly** as
   `get-as-code` produced it, on the node it came with. `id` is the node's
   permanent identity in n8n — execution logs, poll cursors, deduplication state
@@ -535,8 +619,8 @@ every reported error and warning before calling `build-workflow`.
   Move it, rewire it, change its parameters — the `id` stays. Never invent, edit,
   renumber or reuse an `id`, and never copy one from a template, another workflow
   or another node. **Omit `id` entirely for any node you are adding** — one is
-  assigned on save. Deleting a node means deleting its `id` line with it. This is
-  the opposite of `position`: drop every `position`, keep every `id`.
+  assigned on save. Deleting a node means deleting its `id` line with it. Like
+  `position`, `id` is saved state: never write one by hand.
 - Use `placeholder('hint')` directly as the parameter value. Do not wrap
   placeholders in `expr()`, objects, or arrays unless the node definition
   explicitly expects an object and the placeholder is the direct value of one

package/dist/stream/output-redaction.d.ts

@@ -1,31 +0,0 @@
-import { type RedactionOptions } from '@n8n/agents';
-import type { InstanceAiEvent } from '@n8n/api-types';
-import type { Logger } from '../logger';
-export declare const DEFAULT_OUTPUT_REDACTION_OPTIONS: RedactionOptions;
-interface OutputRedactorContext {
-    logger: Logger;
-    threadId: string;
-    runId: string;
-    agentId: string;
-    options?: RedactionOptions | false;
-}
-export declare class OutputRedactor {
-    private readonly context;
-    private readonly enabled;
-    private readonly options;
-    private readonly text;
-    private readonly reasoning;
-    private matches;
-    constructor(context: OutputRedactorContext);
-    processEvent(event: InstanceAiEvent): InstanceAiEvent[];
-    flush(): InstanceAiEvent[];
-    private processDelta;
-    private drainChannel;
-    private makeDelta;
-    private redactStructural;
-    private redactConfirmation;
-    private redactString;
-    private recordMatches;
-    private logSummary;
-}
-export {};

package/dist/stream/output-redaction.js

@@ -1,191 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OutputRedactor = exports.DEFAULT_OUTPUT_REDACTION_OPTIONS = void 0;
-const agents_1 = require("@n8n/agents");
-const is_record_1 = require("@n8n/utils/is-record");
-exports.DEFAULT_OUTPUT_REDACTION_OPTIONS = {
-    secrets: true,
-    detect: ['credit-card'],
-};
-const MAX_TARGET_APPROVAL_ARG_DEPTH = 8;
-const WITHHELD_TARGET_APPROVAL_ARG = '[REDACTED]';
-function withholdDeepTargetApprovalArgs(value, depth = 0) {
-    if (value === null || typeof value !== 'object')
-        return value;
-    if (depth >= MAX_TARGET_APPROVAL_ARG_DEPTH)
-        return WITHHELD_TARGET_APPROVAL_ARG;
-    if (Array.isArray(value)) {
-        return value.map((item) => withholdDeepTargetApprovalArgs(item, depth + 1));
-    }
-    return Object.fromEntries(Object.entries(value).map(([key, item]) => [
-        key,
-        withholdDeepTargetApprovalArgs(item, depth + 1),
-    ]));
-}
-class OutputRedactor {
-    context;
-    enabled;
-    options;
-    text;
-    reasoning;
-    matches = [];
-    constructor(context) {
-        this.context = context;
-        this.enabled = context.options !== false;
-        this.options =
-            context.options === false || context.options === undefined
-                ? exports.DEFAULT_OUTPUT_REDACTION_OPTIONS
-                : context.options;
-        this.text = { type: 'text-delta', redactor: new agents_1.StreamingRedactor(this.options) };
-        this.reasoning = { type: 'reasoning-delta', redactor: new agents_1.StreamingRedactor(this.options) };
-    }
-    processEvent(event) {
-        if (!this.enabled)
-            return [event];
-        if (event.type === 'text-delta')
-            return this.processDelta(event, this.text, this.reasoning);
-        if (event.type === 'reasoning-delta') {
-            return this.processDelta(event, this.reasoning, this.text);
-        }
-        return [
-            ...this.drainChannel(this.reasoning),
-            ...this.drainChannel(this.text),
-            this.redactStructural(event),
-        ];
-    }
-    flush() {
-        if (!this.enabled)
-            return [];
-        const events = [...this.drainChannel(this.reasoning), ...this.drainChannel(this.text)];
-        this.logSummary();
-        return events;
-    }
-    processDelta(event, channel, otherChannel) {
-        const events = [];
-        events.push(...this.drainChannel(otherChannel));
-        if (channel.responseId !== undefined && channel.responseId !== event.responseId) {
-            events.push(...this.drainChannel(channel));
-        }
-        channel.responseId = event.responseId;
-        const { text, matches } = channel.redactor.push(event.payload.text);
-        this.recordMatches(matches);
-        if (text)
-            events.push(this.makeDelta(channel, text));
-        return events;
-    }
-    drainChannel(channel) {
-        const { text, matches } = channel.redactor.flush();
-        this.recordMatches(matches);
-        return text ? [this.makeDelta(channel, text)] : [];
-    }
-    makeDelta(channel, text) {
-        return {
-            type: channel.type,
-            runId: this.context.runId,
-            agentId: this.context.agentId,
-            ...(channel.responseId ? { responseId: channel.responseId } : {}),
-            payload: { text },
-        };
-    }
-    redactStructural(event) {
-        if (event.type === 'tool-call') {
-            const { value, matches } = (0, agents_1.redactDeep)(event.payload.args, this.options);
-            this.recordMatches(matches);
-            return {
-                ...event,
-                payload: { ...event.payload, args: (0, is_record_1.isRecord)(value) ? value : event.payload.args },
-            };
-        }
-        if (event.type === 'tool-result') {
-            const { value, matches } = (0, agents_1.redactDeep)(event.payload.result, this.options);
-            this.recordMatches(matches);
-            return { ...event, payload: { ...event.payload, result: value } };
-        }
-        if (event.type === 'tool-error') {
-            return {
-                ...event,
-                payload: { ...event.payload, error: this.redactString(event.payload.error) },
-            };
-        }
-        if (event.type === 'confirmation-request') {
-            return this.redactConfirmation(event);
-        }
-        return event;
-    }
-    redactConfirmation(event) {
-        const payload = event.payload;
-        const questions = payload.questions?.map((question) => ({
-            ...question,
-            question: this.redactString(question.question),
-            ...(question.options ? { options: question.options.map((o) => this.redactString(o)) } : {}),
-        }));
-        const tasks = payload.tasks
-            ? {
-                ...payload.tasks,
-                tasks: payload.tasks.tasks.map((task) => ({
-                    ...task,
-                    description: this.redactString(task.description),
-                    ...(task.detail ? { detail: this.redactString(task.detail) } : {}),
-                })),
-            }
-            : undefined;
-        const planItems = payload.planItems?.map((item) => ({
-            ...item,
-            title: this.redactString(item.title),
-            spec: this.redactString(item.spec),
-        }));
-        let targetApproval = payload.targetApproval;
-        if (targetApproval) {
-            const boundedArgs = withholdDeepTargetApprovalArgs(targetApproval.args);
-            const { value, matches } = (0, agents_1.redactDeep)(boundedArgs, this.options);
-            this.recordMatches(matches);
-            targetApproval = {
-                ...targetApproval,
-                toolName: this.redactString(targetApproval.toolName),
-                ...(targetApproval.displayName
-                    ? { displayName: this.redactString(targetApproval.displayName) }
-                    : {}),
-                args: value,
-            };
-        }
-        return {
-            ...event,
-            payload: {
-                ...payload,
-                message: this.redactString(payload.message),
-                ...(payload.introMessage ? { introMessage: this.redactString(payload.introMessage) } : {}),
-                ...(questions ? { questions } : {}),
-                ...(tasks ? { tasks } : {}),
-                ...(planItems ? { planItems } : {}),
-                ...(targetApproval ? { targetApproval } : {}),
-            },
-        };
-    }
-    redactString(text) {
-        const { text: redacted, matches } = (0, agents_1.redactText)(text, this.options);
-        this.recordMatches(matches);
-        return redacted;
-    }
-    recordMatches(matches) {
-        for (const match of matches)
-            this.matches.push(match.category);
-    }
-    logSummary() {
-        if (this.matches.length === 0)
-            return;
-        const categories = {};
-        for (const category of this.matches) {
-            categories[category] = (categories[category] ?? 0) + 1;
-        }
-        this.context.logger.info('Instance AI redacted sensitive content from agent output', {
-            threadId: this.context.threadId,
-            runId: this.context.runId,
-            agentId: this.context.agentId,
-            count: this.matches.length,
-            categories,
-        });
-        this.matches = [];
-    }
-}
-exports.OutputRedactor = OutputRedactor;
-//# sourceMappingURL=output-redaction.js.map

package/dist/stream/output-redaction.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"output-redaction.js","sourceRoot":"","sources":["../../src/stream/output-redaction.ts"],"names":[],"mappings":";;;AAAA,wCAMqB;AAErB,oDAAgD;AAcnC,QAAA,gCAAgC,GAAqB;IACjE,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,CAAC,aAAa,CAAC;CACvB,CAAC;AAgBF,MAAM,6BAA6B,GAAG,CAAC,CAAC;AACxC,MAAM,4BAA4B,GAAG,YAAY,CAAC;AAElD,SAAS,8BAA8B,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAChE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,IAAI,6BAA6B;QAAE,OAAO,4BAA4B,CAAC;IAChF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,8BAA8B,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QAC1C,GAAG;QACH,8BAA8B,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC;KAC/C,CAAC,CACF,CAAC;AACH,CAAC;AA4BD;IAW8B,OAAO;IAVnB,OAAO,CAAU;IAEjB,OAAO,CAAmB;IAE1B,IAAI,CAAU;IAEd,SAAS,CAAU;IAE5B,OAAO,GAAwB,EAAE,CAAC;IAE1C,YAA6B,OAA8B;uBAA9B,OAAO;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,KAAK,CAAC;QAEzC,IAAI,CAAC,OAAO;YACX,OAAO,CAAC,OAAO,KAAK,KAAK,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;gBACzD,CAAC,CAAC,QAAA,gCAAgC;gBAClC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,0BAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAClF,IAAI,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,0BAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7F,CAAC;IAGD,YAAY,CAAC,KAAsB;QAClC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5F,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;QAGD,OAAO;YACN,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;YACpC,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/B,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;SAC5B,CAAC;IACH,CAAC;IAGD,KAAK;QACJ,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,OAAO,MAAM,CAAC;IACf,CAAC;IAEO,YAAY,CACnB,KAAoD,EACpD,OAAgB,EAChB,YAAqB;QAErB,MAAM,MAAM,GAAsB,EAAE,CAAC;QAKrC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;QAEhD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;YACjF,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QAEtC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC;IACf,CAAC;IAEO,YAAY,CAAC,OAAgB;QACpC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,CAAC;IAEO,SAAS,CAAC,OAAgB,EAAE,IAAY;QAC/C,OAAO;YACN,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,OAAO,EAAE,EAAE,IAAI,EAAE;SACjB,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,KAAsB;QAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAGhC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAA,mBAAU,EAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACxE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO;gBACN,GAAG,KAAK;gBACR,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAA,oBAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;aACjF,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAClC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAA,mBAAU,EAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1E,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnE,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACjC,OAAO;gBACN,GAAG,KAAK;gBACR,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;aAC5E,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IASO,kBAAkB,CACzB,KAAiE;QAEjE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACvD,GAAG,QAAQ;YACX,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC9C,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3F,CAAC,CAAC,CAAC;QAEJ,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK;YAC1B,CAAC,CAAC;gBACA,GAAG,OAAO,CAAC,KAAK;gBAChB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;oBACzC,GAAG,IAAI;oBACP,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC;oBAChD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClE,CAAC,CAAC;aACH;YACF,CAAC,CAAC,SAAS,CAAC;QAEb,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACnD,GAAG,IAAI;YACP,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YACpC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC,CAAC;QACJ,IAAI,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC5C,IAAI,cAAc,EAAE,CAAC;YACpB,MAAM,WAAW,GAAG,8BAA8B,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACxE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAA,mBAAU,EAAC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACjE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAC5B,cAAc,GAAG;gBAChB,GAAG,cAAc;gBACjB,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,QAAQ,CAAC;gBACpD,GAAG,CAAC,cAAc,CAAC,WAAW;oBAC7B,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE;oBAChE,CAAC,CAAC,EAAE,CAAC;gBACN,IAAI,EAAE,KAAK;aACX,CAAC;QACH,CAAC;QAED,OAAO;YACN,GAAG,KAAK;YACR,OAAO,EAAE;gBACR,GAAG,OAAO;gBACV,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC3C,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1F,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3B,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7C;SACD,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,IAAY;QAChC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAA,mBAAU,EAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACnE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,QAAQ,CAAC;IACjB,CAAC;IAEO,aAAa,CAAC,OAA+C;QACpE,KAAK,MAAM,KAAK,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChE,CAAC;IAGO,UAAU;QACjB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACtC,MAAM,UAAU,GAA+C,EAAE,CAAC;QAClE,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACrC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,0DAA0D,EAAE;YACpF,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;YAC/B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;YAC7B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC1B,UAAU;SACV,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;IACnB,CAAC;CACD"}