@namzu/sdk 2.0.0 → 3.0.0

package/dist/compaction/wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../src/compaction/wire.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAgB,MAAM,YAAY,CAAA;AAElF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,SAAS,QAAQ,EAAE,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAA;IACnC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;IACvC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAA;IACvC,QAAQ,CAAC,WAAW,EAAE,SAAS,cAAc,EAAE,CAAA;IAC/C,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAA;IAC5C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAClD;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,mBAAmB,GAAG,oBAAoB,CAevF;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAClC,QAAQ,EAAE,oBAAoB,EAC9B,MAAM,EAAE,gBAAgB,GACtB,mBAAmB,CAiBrB"}

package/dist/compaction/wire.js

@@ -0,0 +1,45 @@
+import { WorkingStateManager } from './manager.js';
+export function snapshotWorkingState(manager) {
+    const state = manager.getState();
+    return {
+        task: state.task,
+        plan: [...state.plan],
+        files: [...state.files.values()],
+        decisions: [...state.decisions],
+        failures: [...state.failures],
+        discoveries: [...state.discoveries],
+        environment: [...state.environment],
+        toolResults: [...state.toolResults],
+        userRequirements: [...state.userRequirements],
+        assistantNotes: [...state.assistantNotes],
+        evicted: { ...state.evicted },
+    };
+}
+/**
+ * Rebuild a manager from a snapshot.
+ *
+ * Restores the state DIRECTLY rather than replaying the extractors over
+ * the restored messages. Re-extraction would be both lossy — the messages
+ * the first pass compacted away are gone, so there is nothing left to
+ * extract them from — and non-idempotent, producing a state that differs
+ * from the one that was summarized.
+ */
+export function restoreWorkingState(snapshot, config) {
+    const manager = new WorkingStateManager(config);
+    const state = {
+        task: snapshot.task,
+        plan: [...snapshot.plan],
+        files: new Map(snapshot.files.map((f) => [f.path, f])),
+        decisions: [...snapshot.decisions],
+        failures: [...snapshot.failures],
+        discoveries: [...snapshot.discoveries],
+        environment: [...snapshot.environment],
+        toolResults: [...snapshot.toolResults],
+        userRequirements: [...snapshot.userRequirements],
+        assistantNotes: [...snapshot.assistantNotes],
+        evicted: { ...snapshot.evicted },
+    };
+    manager.replaceState(state);
+    return manager;
+}
+//# sourceMappingURL=wire.js.map

package/dist/compaction/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../src/compaction/wire.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AA2ClD,MAAM,UAAU,oBAAoB,CAAC,OAA4B;IAChE,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAA;IAChC,OAAO;QACN,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;QACrB,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAChC,SAAS,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;QAC/B,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC7B,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;QACnC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;QACnC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;QACnC,gBAAgB,EAAE,CAAC,GAAG,KAAK,CAAC,gBAAgB,CAAC;QAC7C,cAAc,EAAE,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC;QACzC,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE;KAC7B,CAAA;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAClC,QAA8B,EAC9B,MAAwB;IAExB,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAC/C,MAAM,KAAK,GAAiB;QAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC;QACxB,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACtD,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC;QAClC,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAChC,WAAW,EAAE,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC;QACtC,WAAW,EAAE,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC;QACtC,WAAW,EAAE,CAAC,GAAG,QAAQ,CAAC,WAAW,CAAC;QACtC,gBAAgB,EAAE,CAAC,GAAG,QAAQ,CAAC,gBAAgB,CAAC;QAChD,cAAc,EAAE,CAAC,GAAG,QAAQ,CAAC,cAAc,CAAC;QAC5C,OAAO,EAAE,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE;KAChC,CAAA;IACD,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;IAC3B,OAAO,OAAO,CAAA;AACf,CAAC"}

package/dist/config/runtime.d.ts

@@ -37,11 +37,63 @@ export declare const CompactionConfigSchema: z.ZodObject<{
      * window-pressure instead of being a silent no-op.
      */
     contextWindowTokens: z.ZodOptional<z.ZodNumber>;
+    /** Fraction of the context window at which a compaction pass fires. */
     triggerThreshold: z.ZodDefault<z.ZodNumber>;
+    /**
+     * Fraction the pass must get the context BELOW to be worth keeping.
+     *
+     * This is hysteresis, and without it compaction can thrash: a pass that
+     * only shaves the context from 0.72 to 0.71 of the window leaves the
+     * trigger armed, so the next iteration compacts again — paying a
+     * summarization call and busting the prompt-cache prefix each time, for
+     * nothing. A pass that cannot reach this level logs the shortfall and
+     * the run continues rather than repeating a move that does not work.
+     *
+     * The field was declared and set by the shipped CLI but read by nothing;
+     * the choice was to implement it or delete it, and thrash is a real
+     * failure mode once the trigger actually fires.
+     */
     resetThreshold: z.ZodDefault<z.ZodNumber>;
     keepRecentMessages: z.ZodDefault<z.ZodNumber>;
+    /**
+     * Before summarizing destructively, clear the OUTPUT of old, large tool
+     * results in place.
+     *
+     * Compaction paraphrases the agent's own reasoning away — the decisions,
+     * the false starts it learned from, the exact wording of a plan. That is
+     * a heavy price for a context problem usually caused by something much
+     * dumber: a few enormous tool outputs the agent already read and moved
+     * past. Clearing those reclaims most of the same tokens while keeping
+     * every message verbatim, and it is safe where trimming is not, because
+     * nothing moves — the `tool_use` ↔ `tool_result` pairing is untouched by
+     * construction.
+     *
+     * If the clear gets the context back under `triggerThreshold`, the
+     * summarization pass is skipped entirely. Set `false` to go straight to
+     * summarization.
+     */
+    clearToolResults: z.ZodDefault<z.ZodBoolean>;
+    /** Most recent tool results left alone — the agent is likely still using them. */
+    keepRecentToolResults: z.ZodDefault<z.ZodNumber>;
+    /**
+     * Don't clear results smaller than this. Below it the placeholder is
+     * comparable in size to the output, so the churn buys nothing and costs
+     * the model a confusing hole in its history.
+     */
+    minToolResultCharsToClear: z.ZodDefault<z.ZodNumber>;
+    /** Tools whose output is never cleared, by name. */
+    preserveToolResultsFrom: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     maxToolResults: z.ZodDefault<z.ZodNumber>;
     maxListSize: z.ZodDefault<z.ZodNumber>;
+    /**
+     * Entries pinned at the head of each capped list, never evicted.
+     *
+     * Eviction used to drop the OLDEST entry, so a long run silently
+     * deleted the decision that set its approach while keeping the last
+     * twenty-five incidental notes. The early entries are the load-bearing
+     * ones and the recent ones are still in the un-compacted tail.
+     */
+    keepFirstEntries: z.ZodDefault<z.ZodNumber>;
     llmVerification: z.ZodDefault<z.ZodBoolean>;
     llmVerificationMaxTokens: z.ZodDefault<z.ZodNumber>;
     richStateThreshold: z.ZodDefault<z.ZodNumber>;
@@ -55,8 +107,12 @@ export declare const CompactionConfigSchema: z.ZodObject<{
     triggerThreshold: number;
     resetThreshold: number;
     keepRecentMessages: number;
+    clearToolResults: boolean;
+    keepRecentToolResults: number;
+    minToolResultCharsToClear: number;
     maxToolResults: number;
     maxListSize: number;
+    keepFirstEntries: number;
     llmVerification: boolean;
     llmVerificationMaxTokens: number;
     richStateThreshold: number;
@@ -66,14 +122,20 @@ export declare const CompactionConfigSchema: z.ZodObject<{
     maxCharsPerRequirement: number;
     maxCharsPerTask: number;
     contextWindowTokens?: number | undefined;
+    preserveToolResultsFrom?: string[] | undefined;
 }, {
     strategy?: "disabled" | "structured" | "sliding-window" | undefined;
     contextWindowTokens?: number | undefined;
     triggerThreshold?: number | undefined;
     resetThreshold?: number | undefined;
     keepRecentMessages?: number | undefined;
+    clearToolResults?: boolean | undefined;
+    keepRecentToolResults?: number | undefined;
+    minToolResultCharsToClear?: number | undefined;
+    preserveToolResultsFrom?: string[] | undefined;
     maxToolResults?: number | undefined;
     maxListSize?: number | undefined;
+    keepFirstEntries?: number | undefined;
     llmVerification?: boolean | undefined;
     llmVerificationMaxTokens?: number | undefined;
     richStateThreshold?: number | undefined;
@@ -177,11 +239,63 @@ export declare const RuntimeConfigSchema: z.ZodObject<{
          * window-pressure instead of being a silent no-op.
          */
         contextWindowTokens: z.ZodOptional<z.ZodNumber>;
+        /** Fraction of the context window at which a compaction pass fires. */
         triggerThreshold: z.ZodDefault<z.ZodNumber>;
+        /**
+         * Fraction the pass must get the context BELOW to be worth keeping.
+         *
+         * This is hysteresis, and without it compaction can thrash: a pass that
+         * only shaves the context from 0.72 to 0.71 of the window leaves the
+         * trigger armed, so the next iteration compacts again — paying a
+         * summarization call and busting the prompt-cache prefix each time, for
+         * nothing. A pass that cannot reach this level logs the shortfall and
+         * the run continues rather than repeating a move that does not work.
+         *
+         * The field was declared and set by the shipped CLI but read by nothing;
+         * the choice was to implement it or delete it, and thrash is a real
+         * failure mode once the trigger actually fires.
+         */
         resetThreshold: z.ZodDefault<z.ZodNumber>;
         keepRecentMessages: z.ZodDefault<z.ZodNumber>;
+        /**
+         * Before summarizing destructively, clear the OUTPUT of old, large tool
+         * results in place.
+         *
+         * Compaction paraphrases the agent's own reasoning away — the decisions,
+         * the false starts it learned from, the exact wording of a plan. That is
+         * a heavy price for a context problem usually caused by something much
+         * dumber: a few enormous tool outputs the agent already read and moved
+         * past. Clearing those reclaims most of the same tokens while keeping
+         * every message verbatim, and it is safe where trimming is not, because
+         * nothing moves — the `tool_use` ↔ `tool_result` pairing is untouched by
+         * construction.
+         *
+         * If the clear gets the context back under `triggerThreshold`, the
+         * summarization pass is skipped entirely. Set `false` to go straight to
+         * summarization.
+         */
+        clearToolResults: z.ZodDefault<z.ZodBoolean>;
+        /** Most recent tool results left alone — the agent is likely still using them. */
+        keepRecentToolResults: z.ZodDefault<z.ZodNumber>;
+        /**
+         * Don't clear results smaller than this. Below it the placeholder is
+         * comparable in size to the output, so the churn buys nothing and costs
+         * the model a confusing hole in its history.
+         */
+        minToolResultCharsToClear: z.ZodDefault<z.ZodNumber>;
+        /** Tools whose output is never cleared, by name. */
+        preserveToolResultsFrom: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         maxToolResults: z.ZodDefault<z.ZodNumber>;
         maxListSize: z.ZodDefault<z.ZodNumber>;
+        /**
+         * Entries pinned at the head of each capped list, never evicted.
+         *
+         * Eviction used to drop the OLDEST entry, so a long run silently
+         * deleted the decision that set its approach while keeping the last
+         * twenty-five incidental notes. The early entries are the load-bearing
+         * ones and the recent ones are still in the un-compacted tail.
+         */
+        keepFirstEntries: z.ZodDefault<z.ZodNumber>;
         llmVerification: z.ZodDefault<z.ZodBoolean>;
         llmVerificationMaxTokens: z.ZodDefault<z.ZodNumber>;
         richStateThreshold: z.ZodDefault<z.ZodNumber>;
@@ -195,8 +309,12 @@ export declare const RuntimeConfigSchema: z.ZodObject<{
         triggerThreshold: number;
         resetThreshold: number;
         keepRecentMessages: number;
+        clearToolResults: boolean;
+        keepRecentToolResults: number;
+        minToolResultCharsToClear: number;
         maxToolResults: number;
         maxListSize: number;
+        keepFirstEntries: number;
         llmVerification: boolean;
         llmVerificationMaxTokens: number;
         richStateThreshold: number;
@@ -206,14 +324,20 @@ export declare const RuntimeConfigSchema: z.ZodObject<{
         maxCharsPerRequirement: number;
         maxCharsPerTask: number;
         contextWindowTokens?: number | undefined;
+        preserveToolResultsFrom?: string[] | undefined;
     }, {
         strategy?: "disabled" | "structured" | "sliding-window" | undefined;
         contextWindowTokens?: number | undefined;
         triggerThreshold?: number | undefined;
         resetThreshold?: number | undefined;
         keepRecentMessages?: number | undefined;
+        clearToolResults?: boolean | undefined;
+        keepRecentToolResults?: number | undefined;
+        minToolResultCharsToClear?: number | undefined;
+        preserveToolResultsFrom?: string[] | undefined;
         maxToolResults?: number | undefined;
         maxListSize?: number | undefined;
+        keepFirstEntries?: number | undefined;
         llmVerification?: boolean | undefined;
         llmVerificationMaxTokens?: number | undefined;
         richStateThreshold?: number | undefined;
@@ -245,16 +369,6 @@ export declare const RuntimeConfigSchema: z.ZodObject<{
         breakerFailureThreshold?: number | undefined;
         breakerResetTimeoutMs?: number | undefined;
     }>>;
-    promptCache: z.ZodOptional<z.ZodObject<{
-        enabled: z.ZodDefault<z.ZodBoolean>;
-        strategy: z.ZodDefault<z.ZodEnum<["auto", "disabled"]>>;
-    }, "strip", z.ZodTypeAny, {
-        enabled: boolean;
-        strategy: "auto" | "disabled";
-    }, {
-        enabled?: boolean | undefined;
-        strategy?: "auto" | "disabled" | undefined;
-    }>>;
     plugins: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         autoDiscovery: z.ZodDefault<z.ZodBoolean>;
@@ -277,21 +391,21 @@ export declare const RuntimeConfigSchema: z.ZodObject<{
         timeoutMs: z.ZodDefault<z.ZodNumber>;
         memoryLimitMb: z.ZodDefault<z.ZodNumber>;
         maxProcesses: z.ZodDefault<z.ZodNumber>;
-        cleanupOnDestroy: z.ZodDefault<z.ZodBoolean>;
+        requireIsolation: z.ZodDefault<z.ZodArray<z.ZodEnum<["filesystem", "network", "process"]>, "many">>;
     }, "strip", z.ZodTypeAny, {
         enabled: boolean;
         provider: "local";
         timeoutMs: number;
         memoryLimitMb: number;
         maxProcesses: number;
-        cleanupOnDestroy: boolean;
+        requireIsolation: ("filesystem" | "network" | "process")[];
     }, {
         enabled?: boolean | undefined;
         provider?: "local" | undefined;
         timeoutMs?: number | undefined;
         memoryLimitMb?: number | undefined;
         maxProcesses?: number | undefined;
-        cleanupOnDestroy?: boolean | undefined;
+        requireIsolation?: ("filesystem" | "network" | "process")[] | undefined;
     }>>;
 }, "strip", z.ZodTypeAny, {
     timeoutMs: number;
@@ -300,8 +414,12 @@ export declare const RuntimeConfigSchema: z.ZodObject<{
         triggerThreshold: number;
         resetThreshold: number;
         keepRecentMessages: number;
+        clearToolResults: boolean;
+        keepRecentToolResults: number;
+        minToolResultCharsToClear: number;
         maxToolResults: number;
         maxListSize: number;
+        keepFirstEntries: number;
         llmVerification: boolean;
         llmVerificationMaxTokens: number;
         richStateThreshold: number;
@@ -311,26 +429,13 @@ export declare const RuntimeConfigSchema: z.ZodObject<{
         maxCharsPerRequirement: number;
         maxCharsPerTask: number;
         contextWindowTokens?: number | undefined;
+        preserveToolResultsFrom?: string[] | undefined;
     };
     model: string;
     temperature: number;
     tokenBudget: number;
     maxResponseTokens: number;
     maxIterations: number;
-    sandbox?: {
-        enabled: boolean;
-        provider: "local";
-        timeoutMs: number;
-        memoryLimitMb: number;
-        maxProcesses: number;
-        cleanupOnDestroy: boolean;
-    } | undefined;
-    plugins?: {
-        enabled: boolean;
-        autoDiscovery: boolean;
-        allowedScopes: ("user" | "project")[];
-        hookTimeoutMs: number;
-    } | undefined;
     taskRouter?: {
         default?: string | null | undefined;
         compaction?: string | null | undefined;
@@ -348,34 +453,35 @@ export declare const RuntimeConfigSchema: z.ZodObject<{
         breakerFailureThreshold: number;
         breakerResetTimeoutMs: number;
     } | undefined;
-    promptCache?: {
+    plugins?: {
         enabled: boolean;
-        strategy: "auto" | "disabled";
+        autoDiscovery: boolean;
+        allowedScopes: ("user" | "project")[];
+        hookTimeoutMs: number;
     } | undefined;
-}, {
-    timeoutMs?: number | undefined;
     sandbox?: {
-        enabled?: boolean | undefined;
-        provider?: "local" | undefined;
-        timeoutMs?: number | undefined;
-        memoryLimitMb?: number | undefined;
-        maxProcesses?: number | undefined;
-        cleanupOnDestroy?: boolean | undefined;
-    } | undefined;
-    plugins?: {
-        enabled?: boolean | undefined;
-        autoDiscovery?: boolean | undefined;
-        allowedScopes?: ("user" | "project")[] | undefined;
-        hookTimeoutMs?: number | undefined;
+        enabled: boolean;
+        provider: "local";
+        timeoutMs: number;
+        memoryLimitMb: number;
+        maxProcesses: number;
+        requireIsolation: ("filesystem" | "network" | "process")[];
     } | undefined;
+}, {
+    timeoutMs?: number | undefined;
     compaction?: {
         strategy?: "disabled" | "structured" | "sliding-window" | undefined;
         contextWindowTokens?: number | undefined;
         triggerThreshold?: number | undefined;
         resetThreshold?: number | undefined;
         keepRecentMessages?: number | undefined;
+        clearToolResults?: boolean | undefined;
+        keepRecentToolResults?: number | undefined;
+        minToolResultCharsToClear?: number | undefined;
+        preserveToolResultsFrom?: string[] | undefined;
         maxToolResults?: number | undefined;
         maxListSize?: number | undefined;
+        keepFirstEntries?: number | undefined;
         llmVerification?: boolean | undefined;
         llmVerificationMaxTokens?: number | undefined;
         richStateThreshold?: number | undefined;
@@ -407,9 +513,19 @@ export declare const RuntimeConfigSchema: z.ZodObject<{
         breakerFailureThreshold?: number | undefined;
         breakerResetTimeoutMs?: number | undefined;
     } | undefined;
-    promptCache?: {
+    plugins?: {
         enabled?: boolean | undefined;
-        strategy?: "auto" | "disabled" | undefined;
+        autoDiscovery?: boolean | undefined;
+        allowedScopes?: ("user" | "project")[] | undefined;
+        hookTimeoutMs?: number | undefined;
+    } | undefined;
+    sandbox?: {
+        enabled?: boolean | undefined;
+        provider?: "local" | undefined;
+        timeoutMs?: number | undefined;
+        memoryLimitMb?: number | undefined;
+        maxProcesses?: number | undefined;
+        requireIsolation?: ("filesystem" | "network" | "process")[] | undefined;
     } | undefined;
 }>;
 export type RuntimeConfig = z.infer<typeof RuntimeConfigSchema>;

package/dist/config/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/config/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AAE/D,OAAO,EAAE,mBAAmB,EAAE,CAAA;AAE9B,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;GAUvB,CAAA;AAEZ,eAAO,MAAM,sBAAsB;;IAElC;;;;;;;OAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwBF,CAAA;AAEF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAErE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;EAO/B,CAAA;AAEF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEjE,eAAO,MAAM,uBAAuB;;;;;;;;;EAGlC,CAAA;AAEF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;EAKpC,CAAA;AAEF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAE3E,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA5D/B;;;;;;;WAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkEF,CAAA;AAEF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAE/D,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,aAAa,CAAiC,CAAA"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/config/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AAE/D,OAAO,EAAE,mBAAmB,EAAE,CAAA;AAE9B,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;GAUvB,CAAA;AAEZ,eAAO,MAAM,sBAAsB;;IAElC;;;;;;;OAOG;;IAEH,uEAAuE;;IAEvE;;;;;;;;;;;;;OAaG;;;IAIH;;;;;;;;;;;;;;;;OAgBG;;IAEH,kFAAkF;;IAElF;;;;OAIG;;IAEH,oDAAoD;;;;IAKpD;;;;;;;OAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUF,CAAA;AAEF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAA;AAErE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;EAO/B,CAAA;AAEF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEjE,eAAO,MAAM,uBAAuB;;;;;;;;;EAGlC,CAAA;AAEF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;EAKpC,CAAA;AAEF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAA;AAE3E,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAzG/B;;;;;;;WAOG;;QAEH,uEAAuE;;QAEvE;;;;;;;;;;;;;WAaG;;;QAIH;;;;;;;;;;;;;;;;WAgBG;;QAEH,kFAAkF;;QAElF;;;;WAIG;;QAEH,oDAAoD;;;;QAKpD;;;;;;;WAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmDF,CAAA;AAEF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAE/D,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,aAAa,CAAiC,CAAA"}

package/dist/config/runtime.js

@@ -23,21 +23,64 @@ export const CompactionConfigSchema = z.object({
      * `tokenBudget` unlimited (0) set this so compaction fires on
      * window-pressure instead of being a silent no-op.
      */
-    // Every field below counts something — tokens, messages, characters,
-    // sentences. `z.number().positive()` was the wrong validator for all of them:
-    // Zod's base number check rejects only non-numbers and NaN, so `Infinity` and
-    // `0.5` both passed. `Infinity` is the dangerous one, because it turns a bound
-    // into a no-op rather than an error — `convoTextBudget: Infinity` makes the
-    // verifier's `charCount > budget` test never true, so `truncateMessages` stops
-    // truncating and the WHOLE history is pasted into the verification prompt.
-    // A fraction is merely nonsense (`keepRecentMessages: 2.5`). `.int()` rejects
-    // both: `Number.isInteger` is false for Infinity and for any fraction.
     contextWindowTokens: z.number().int().positive().optional(),
+    /** Fraction of the context window at which a compaction pass fires. */
     triggerThreshold: z.number().min(0).max(1).default(0.7),
+    /**
+     * Fraction the pass must get the context BELOW to be worth keeping.
+     *
+     * This is hysteresis, and without it compaction can thrash: a pass that
+     * only shaves the context from 0.72 to 0.71 of the window leaves the
+     * trigger armed, so the next iteration compacts again — paying a
+     * summarization call and busting the prompt-cache prefix each time, for
+     * nothing. A pass that cannot reach this level logs the shortfall and
+     * the run continues rather than repeating a move that does not work.
+     *
+     * The field was declared and set by the shipped CLI but read by nothing;
+     * the choice was to implement it or delete it, and thrash is a real
+     * failure mode once the trigger actually fires.
+     */
     resetThreshold: z.number().min(0).max(1).default(0.4),
     keepRecentMessages: z.number().int().positive().default(4),
+    /**
+     * Before summarizing destructively, clear the OUTPUT of old, large tool
+     * results in place.
+     *
+     * Compaction paraphrases the agent's own reasoning away — the decisions,
+     * the false starts it learned from, the exact wording of a plan. That is
+     * a heavy price for a context problem usually caused by something much
+     * dumber: a few enormous tool outputs the agent already read and moved
+     * past. Clearing those reclaims most of the same tokens while keeping
+     * every message verbatim, and it is safe where trimming is not, because
+     * nothing moves — the `tool_use` ↔ `tool_result` pairing is untouched by
+     * construction.
+     *
+     * If the clear gets the context back under `triggerThreshold`, the
+     * summarization pass is skipped entirely. Set `false` to go straight to
+     * summarization.
+     */
+    clearToolResults: z.boolean().default(true),
+    /** Most recent tool results left alone — the agent is likely still using them. */
+    keepRecentToolResults: z.number().min(0).default(3),
+    /**
+     * Don't clear results smaller than this. Below it the placeholder is
+     * comparable in size to the output, so the churn buys nothing and costs
+     * the model a confusing hole in its history.
+     */
+    minToolResultCharsToClear: z.number().min(0).default(1_000),
+    /** Tools whose output is never cleared, by name. */
+    preserveToolResultsFrom: z.array(z.string()).optional(),
     maxToolResults: z.number().int().positive().default(30),
     maxListSize: z.number().int().positive().default(25),
+    /**
+     * Entries pinned at the head of each capped list, never evicted.
+     *
+     * Eviction used to drop the OLDEST entry, so a long run silently
+     * deleted the decision that set its approach while keeping the last
+     * twenty-five incidental notes. The early entries are the load-bearing
+     * ones and the recent ones are still in the un-compacted tail.
+     */
+    keepFirstEntries: z.number().min(0).default(3),
     llmVerification: z.boolean().default(true),
     llmVerificationMaxTokens: z.number().int().positive().default(2048),
     richStateThreshold: z.number().int().positive().default(15),
@@ -49,11 +92,11 @@ export const CompactionConfigSchema = z.object({
 });
 export const AgentBusConfigSchema = z.object({
     enabled: z.boolean().default(false),
-    lockTimeoutMs: z.number().positive().default(60_000),
-    lockAcquireTimeoutMs: z.number().positive().default(5_000),
-    maxLocksPerAgent: z.number().positive().default(10),
-    breakerFailureThreshold: z.number().positive().default(5),
-    breakerResetTimeoutMs: z.number().positive().default(30_000),
+    lockTimeoutMs: z.number().int().positive().default(60_000),
+    lockAcquireTimeoutMs: z.number().int().positive().default(5_000),
+    maxLocksPerAgent: z.number().int().positive().default(10),
+    breakerFailureThreshold: z.number().int().positive().default(5),
+    breakerResetTimeoutMs: z.number().int().positive().default(30_000),
 });
 export const PromptCacheConfigSchema = z.object({
     enabled: z.boolean().default(true),
@@ -63,19 +106,18 @@ export const PluginRuntimeConfigSchema = z.object({
     enabled: z.boolean().default(false),
     autoDiscovery: z.boolean().default(true),
     allowedScopes: z.array(z.enum(['project', 'user'])).default(['project', 'user']),
-    hookTimeoutMs: z.number().positive().default(HOOK_TIMEOUT_MS),
+    hookTimeoutMs: z.number().int().positive().default(HOOK_TIMEOUT_MS),
 });
 export const RuntimeConfigSchema = z.object({
     model: z.string().default('qwen/qwen3.6-plus:free'),
     temperature: z.number().min(0).max(2).default(0.3),
     tokenBudget: z.number().nonnegative().default(100_000),
-    maxResponseTokens: z.number().positive().default(8192),
-    timeoutMs: z.number().positive().default(600_000),
-    maxIterations: z.number().positive().default(200),
+    maxResponseTokens: z.number().int().positive().default(8192),
+    timeoutMs: z.number().int().positive().default(600_000),
+    maxIterations: z.number().int().positive().default(200),
     taskRouter: TaskRouterConfigSchema,
     compaction: CompactionConfigSchema.default({}),
     agentBus: AgentBusConfigSchema.optional(),
-    promptCache: PromptCacheConfigSchema.optional(),
     plugins: PluginRuntimeConfigSchema.optional(),
     sandbox: SandboxConfigSchema.optional(),
 });

package/dist/config/runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/config/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AAE/D,OAAO,EAAE,mBAAmB,EAAE,CAAA;AAE9B,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACrC,MAAM,CAAC;IACP,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAChC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;CAC7B,CAAC;KACD,QAAQ,EAAE,CAAA;AAEZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IACpF;;;;;;;OAOG;IACH,qEAAqE;IACrE,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,4EAA4E;IAC5E,+EAA+E;IAC/E,2EAA2E;IAC3E,8EAA8E;IAC9E,uEAAuE;IACvE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACvD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACrD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1C,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnE,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3D,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAC5D,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACzD,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAChE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;CACzD,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACpD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;CAC5D,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACtD,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACxC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAChF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;CAC7D,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACnD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAClD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACtD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACtD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACjD,UAAU,EAAE,sBAAsB;IAClC,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IACzC,WAAW,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC/C,OAAO,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IAC7C,OAAO,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,gBAAgB,GAA4B,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA"}
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/config/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAA;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AAE/D,OAAO,EAAE,mBAAmB,EAAE,CAAA;AAE9B,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACrC,MAAM,CAAC;IACP,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAChC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;CAC7B,CAAC;KACD,QAAQ,EAAE,CAAA;AAEZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IACpF;;;;;;;OAOG;IACH,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3D,uEAAuE;IACvE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACvD;;;;;;;;;;;;;OAaG;IACH,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACrD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAE1D;;;;;;;;;;;;;;;;OAgBG;IACH,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3C,kFAAkF;IAClF,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD;;;;OAIG;IACH,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3D,oDAAoD;IACpD,uBAAuB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAEvD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD;;;;;;;OAOG;IACH,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9C,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1C,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnE,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3D,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAC5D,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACzD,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAChE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;CACzD,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAC1D,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAChE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACzD,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;CAClE,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACtD,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACxC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAChF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC;CACnE,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACnD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAClD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACtD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC5D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACvD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACvD,UAAU,EAAE,sBAAsB;IAClC,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IAC7C,OAAO,EAAE,mBAAmB,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,gBAAgB,GAA4B,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA"}

package/dist/connector/builtins/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../src/connector/builtins/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EACX,UAAU,EACV,cAAc,EACd,sBAAsB,EACtB,eAAe,EACf,mBAAmB,EAGnB,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAgBnD,qBAAa,aAAc,SAAQ,aAAa,CAAC,mBAAmB,CAAC;IACpE,QAAQ,CAAC,EAAE,EAAG,WAAW,CAAS;IAClC,QAAQ,CAAC,IAAI,oBAAmB;IAChC,QAAQ,CAAC,WAAW,8DAA6D;IACjF,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAS;IAChD,QAAQ,CAAC,YAAY;;;;;;;;;;;;OAA4B;IACjD,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,CAMlC;IAED,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,cAAc,CAA6B;IACnD,OAAO,CAAC,SAAS,CAAS;IAEpB,OAAO,CAAC,MAAM,EAAE,mBAAmB,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IActE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ3B,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAgB/B,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC;YAiBhE,SAAS;IAoDvB,OAAO,CAAC,kBAAkB;CAmC1B"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../src/connector/builtins/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EACX,UAAU,EACV,cAAc,EACd,sBAAsB,EACtB,eAAe,EACf,mBAAmB,EAGnB,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AA8BnD,qBAAa,aAAc,SAAQ,aAAa,CAAC,mBAAmB,CAAC;IACpE,QAAQ,CAAC,EAAE,EAAG,WAAW,CAAS;IAClC,QAAQ,CAAC,IAAI,oBAAmB;IAChC,QAAQ,CAAC,WAAW,8DAA6D;IACjF,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAS;IAChD,QAAQ,CAAC,YAAY;;;;;;;;;;;;OAA4B;IACjD,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,CAMlC;IAED,OAAO,CAAC,OAAO,CAAK;IACpB,OAAO,CAAC,cAAc,CAA6B;IACnD,OAAO,CAAC,SAAS,CAAS;IAEpB,OAAO,CAAC,MAAM,EAAE,mBAAmB,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IActE,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ3B,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAgB/B,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,sBAAsB,CAAC;YAiBhE,SAAS;IAoDvB,OAAO,CAAC,kBAAkB;CAmC1B"}

package/dist/connector/builtins/http.js

@@ -12,6 +12,19 @@ const HttpRequestInputSchema = z.object({
     query: z.record(z.string()).optional(),
     body: z.unknown().optional(),
 });
+// `baseUrl` is tenant-configured and reaches this at connect time (see
+// manager/connector/tenant.ts), so it must not go through a `/+$` regex: on a
+// string that fails to match at the tail (e.g. a long run of slashes followed
+// by one more character), the engine backtracks that quantifier at every
+// starting position, which is O(n^2) work a single hostile tenant can force
+// onto the shared event loop. A manual scan is O(n) with no backtracking.
+function stripTrailingSlashes(value) {
+    let end = value.length;
+    while (end > 0 && value[end - 1] === '/') {
+        end--;
+    }
+    return value.slice(0, end);
+}
 export class HttpConnector extends BaseConnector {
     id = 'conn_http';
     name = 'HTTP Connector';
@@ -31,7 +44,7 @@ export class HttpConnector extends BaseConnector {
     async connect(config, auth) {
         this.config = config;
         this.auth = auth;
-        this.baseUrl = config.baseUrl.replace(/\/+$/, '');
+        this.baseUrl = stripTrailingSlashes(config.baseUrl);
         this.defaultHeaders = config.defaultHeaders ?? {};
         this.timeoutMs = config.timeoutMs ?? 30_000;
         if (auth) {

package/dist/connector/builtins/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/connector/builtins/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAUvB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAEnD,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACzB,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;CAC3D,CAAC,CAAA;AAEF,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAA;AAEF,MAAM,OAAO,aAAc,SAAQ,aAAkC;IAC3D,EAAE,GAAG,WAAoB,CAAA;IACzB,IAAI,GAAG,gBAAgB,CAAA;IACvB,WAAW,GAAG,0DAA0D,CAAA;IACxE,cAAc,GAAmB,MAAM,CAAA;IACvC,YAAY,GAAG,yBAAyB,CAAA;IACxC,OAAO,GAAsB;QACrC;YACC,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,iDAAiD;YAC9D,WAAW,EAAE,sBAAsB;SACnC;KACD,CAAA;IAEO,OAAO,GAAG,EAAE,CAAA;IACZ,cAAc,GAA2B,EAAE,CAAA;IAC3C,SAAS,GAAG,MAAM,CAAA;IAE1B,KAAK,CAAC,OAAO,CAAC,MAA2B,EAAE,IAAiB;QAC3D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACjD,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,EAAE,CAAA;QACjD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAA;QAE3C,IAAI,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAA;QAClE,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,+BAA+B,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED,KAAK,CAAC,UAAU;QACf,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,IAAI,CAAC,IAAI,GAAG,SAAS,CAAA;QACrB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAA;QACjB,IAAI,CAAC,cAAc,GAAG,EAAE,CAAA;QACxB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;IAC7C,CAAC;IAED,KAAK,CAAC,WAAW;QAChB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAA;QAC/B,IAAI,CAAC;YACJ,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;YACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAA;YAC3D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;gBAC1C,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,UAAU,CAAC,MAAM;aACzB,CAAC,CAAA;YACF,YAAY,CAAC,OAAO,CAAC,CAAA;YACrB,OAAO,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAA;QAC5C,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAA;QACb,CAAC;IACF,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,KAAc;QAC3C,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,KAAK,CAAqB,CAAA;QAE3F,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAA;QAE3F,OAAO;YACN,OAAO,EAAE,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;YACpD,MAAM,EAAE,MAAM;YACd,UAAU;YACV,QAAQ,EAAE;gBACT,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC7B;SACD,CAAA;IACF,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,KAAuB;QAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAA;QACnD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACjC,CAAC;QACF,CAAC;QAED,MAAM,OAAO,GAA2B;YACvC,GAAG,IAAI,CAAC,cAAc;YACtB,GAAG,KAAK,CAAC,OAAO;SAChB,CAAA;QAED,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACxE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAA;QAC7C,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAEpE,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;gBAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO;gBACP,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBACvE,MAAM,EAAE,UAAU,CAAC,MAAM;aACzB,CAAC,CAAA;YAEF,MAAM,eAAe,GAA2B,EAAE,CAAA;YAClD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBACvC,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YAC7B,CAAC,CAAC,CAAA;YAEF,IAAI,IAAa,CAAA;YACjB,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;YAC9D,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC9C,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YAC7B,CAAC;iBAAM,CAAC;gBACP,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YAC7B,CAAC;YAED,OAAO;gBACN,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,OAAO,EAAE,eAAe;gBACxB,IAAI;aACJ,CAAA;QACF,CAAC;gBAAS,CAAC;YACV,YAAY,CAAC,OAAO,CAAC,CAAA;QACtB,CAAC;IACF,CAAC;IAEO,kBAAkB,CAAC,IAAgB;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAA;QACpC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,SAAS,CAAC,CAAC,CAAC;gBAChB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;gBAC3B,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;gBACxF,OAAO;oBACN,CAAC,KAAK,CAAC,UAAU,IAAI,WAAW,CAAC,EAAE,MAAM;iBACzC,CAAA;YACF,CAAC;YACD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACf,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;gBACzB,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;gBACrF,OAAO,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAA;YAC5C,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACd,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;gBAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;gBAC/B,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;oBACzB,MAAM,IAAI,KAAK,CACd,0EAA0E,CAC1E,CAAA;gBACF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAA;gBAC/C,OAAO,EAAE,aAAa,EAAE,SAAS,OAAO,EAAE,EAAE,CAAA;YAC7C,CAAC;YACD,KAAK,MAAM,CAAC;YACZ,KAAK,QAAQ,CAAC;YACd,KAAK,QAAQ;gBACZ,OAAO,EAAE,CAAA;YACV,OAAO,CAAC,CAAC,CAAC;gBACT,MAAM,WAAW,GAAU,IAAI,CAAC,IAAI,CAAA;gBACpC,MAAM,IAAI,KAAK,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAA;YACvD,CAAC;QACF,CAAC;IACF,CAAC;CACD"}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/connector/builtins/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAUvB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAEnD,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACzB,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;CAC3D,CAAC,CAAA;AAEF,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACtC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAA;AAEF,uEAAuE;AACvE,8EAA8E;AAC9E,8EAA8E;AAC9E,yEAAyE;AACzE,4EAA4E;AAC5E,0EAA0E;AAC1E,SAAS,oBAAoB,CAAC,KAAa;IAC1C,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,CAAA;IACtB,OAAO,GAAG,GAAG,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QAC1C,GAAG,EAAE,CAAA;IACN,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,OAAO,aAAc,SAAQ,aAAkC;IAC3D,EAAE,GAAG,WAAoB,CAAA;IACzB,IAAI,GAAG,gBAAgB,CAAA;IACvB,WAAW,GAAG,0DAA0D,CAAA;IACxE,cAAc,GAAmB,MAAM,CAAA;IACvC,YAAY,GAAG,yBAAyB,CAAA;IACxC,OAAO,GAAsB;QACrC;YACC,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,iDAAiD;YAC9D,WAAW,EAAE,sBAAsB;SACnC;KACD,CAAA;IAEO,OAAO,GAAG,EAAE,CAAA;IACZ,cAAc,GAA2B,EAAE,CAAA;IAC3C,SAAS,GAAG,MAAM,CAAA;IAE1B,KAAK,CAAC,OAAO,CAAC,MAA2B,EAAE,IAAiB;QAC3D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,OAAO,GAAG,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACnD,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,EAAE,CAAA;QACjD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAA;QAE3C,IAAI,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAA;QAClE,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,+BAA+B,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;IAC7D,CAAC;IAED,KAAK,CAAC,UAAU;QACf,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,IAAI,CAAC,IAAI,GAAG,SAAS,CAAA;QACrB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAA;QACjB,IAAI,CAAC,cAAc,GAAG,EAAE,CAAA;QACxB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;IAC7C,CAAC;IAED,KAAK,CAAC,WAAW;QAChB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAA;QAC/B,IAAI,CAAC;YACJ,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;YACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAA;YAC3D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;gBAC1C,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,UAAU,CAAC,MAAM;aACzB,CAAC,CAAA;YACF,YAAY,CAAC,OAAO,CAAC,CAAA;YACrB,OAAO,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAA;QAC5C,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAA;QACb,CAAC;IACF,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,KAAc;QAC3C,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,KAAK,CAAqB,CAAA;QAE3F,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAA;QAE3F,OAAO;YACN,OAAO,EAAE,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;YACpD,MAAM,EAAE,MAAM;YACd,UAAU;YACV,QAAQ,EAAE;gBACT,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC7B;SACD,CAAA;IACF,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,KAAuB;QAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAA;QACnD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YACjC,CAAC;QACF,CAAC;QAED,MAAM,OAAO,GAA2B;YACvC,GAAG,IAAI,CAAC,cAAc;YACtB,GAAG,KAAK,CAAC,OAAO;SAChB,CAAA;QAED,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACxE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAA;QAC7C,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAEpE,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;gBAC5C,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO;gBACP,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;gBACvE,MAAM,EAAE,UAAU,CAAC,MAAM;aACzB,CAAC,CAAA;YAEF,MAAM,eAAe,GAA2B,EAAE,CAAA;YAClD,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBACvC,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YAC7B,CAAC,CAAC,CAAA;YAEF,IAAI,IAAa,CAAA;YACjB,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;YAC9D,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC9C,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YAC7B,CAAC;iBAAM,CAAC;gBACP,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YAC7B,CAAC;YAED,OAAO;gBACN,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,OAAO,EAAE,eAAe;gBACxB,IAAI;aACJ,CAAA;QACF,CAAC;gBAAS,CAAC;YACV,YAAY,CAAC,OAAO,CAAC,CAAA;QACtB,CAAC;IACF,CAAC;IAEO,kBAAkB,CAAC,IAAgB;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAA;QACpC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,SAAS,CAAC,CAAC,CAAC;gBAChB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;gBAC3B,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;gBACxF,OAAO;oBACN,CAAC,KAAK,CAAC,UAAU,IAAI,WAAW,CAAC,EAAE,MAAM;iBACzC,CAAA;YACF,CAAC;YACD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACf,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;gBACzB,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;gBACrF,OAAO,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAA;YAC5C,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACd,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;gBAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;gBAC/B,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;oBACzB,MAAM,IAAI,KAAK,CACd,0EAA0E,CAC1E,CAAA;gBACF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAA;gBAC/C,OAAO,EAAE,aAAa,EAAE,SAAS,OAAO,EAAE,EAAE,CAAA;YAC7C,CAAC;YACD,KAAK,MAAM,CAAC;YACZ,KAAK,QAAQ,CAAC;YACd,KAAK,QAAQ;gBACZ,OAAO,EAAE,CAAA;YACV,OAAO,CAAC,CAAC,CAAC;gBACT,MAAM,WAAW,GAAU,IAAI,CAAC,IAAI,CAAA;gBACpC,MAAM,IAAI,KAAK,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAA;YACvD,CAAC;QACF,CAAC;IACF,CAAC;CACD"}

package/dist/connector/builtins/http.test.js

@@ -57,6 +57,18 @@ describe('HttpConnector', () => {
             await c.execute('request', { method: 'GET', path: 'x' });
             expect(fetchMock).toHaveBeenCalledWith('https://api.example.com/x', expect.any(Object));
         });
+        it('strips trailing slashes in linear time (js/polynomial-redos regression)', async () => {
+            // A long run of slashes followed by one more character is the
+            // pathological case for a `/+$` regex: the tail never matches, so a
+            // backtracking engine retries the quantifier at every start position.
+            // This must stay well under the ~500ms the vulnerable regex took at
+            // this size (see connect() history) to prove the O(n) fix held.
+            const c = new HttpConnector();
+            const hostile = `https://api.example.com/${'/'.repeat(30_000)}a`;
+            const start = Date.now();
+            await c.connect({ baseUrl: hostile, timeoutMs: 30_000 });
+            expect(Date.now() - start).toBeLessThan(200);
+        });
         it('disconnect clears internal state; execute after disconnect treats baseUrl as empty', async () => {
             const c = new HttpConnector();
             await c.connect({ baseUrl: 'https://api.example.com', timeoutMs: 30_000 });