@namzu/sdk 27.0.0 → 28.0.0

package/dist/connector/web/guarded-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guarded-fetch.js","sourceRoot":"","sources":["../../../src/connector/web/guarded-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AAE/B,OAAO,EAEN,oBAAoB,GAGpB,MAAM,YAAY,CAAA;AAEnB;;;;;;;;;;;;;;GAcG;AAEH,yEAAyE;AACzE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;AAEpD,MAAM,qBAAqB,GAAG,CAAC,CAAA;AAC/B,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AACzC,MAAM,kBAAkB,GAAG,MAAM,CAAA;AAEjC;;;;;;;;GAQG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAA;AAmC5F;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;IAC1B,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC5C,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAA;QAC5B,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA,CAAC,WAAW;QACtC,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAA,CAAC,UAAU;QACpC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAA,CAAC,UAAU;QAC3D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA,CAAC,UAAU;QAClD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAA,CAAC,mCAAmC;QAC3E,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA,CAAC,iBAAiB;QAC1C,IAAI,CAAC,IAAI,GAAG;YAAE,OAAO,IAAI,CAAA,CAAC,yBAAyB;QACnD,OAAO,KAAK,CAAA;IACb,CAAC;IACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;QAC3D,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAClD,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAA,CAAC,aAAa;QACvD,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA,CAAC,wBAAwB;QAC9D,+DAA+D;QAC/D,kEAAkE;QAClE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAA;QAC3D,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;QACnD,OAAO,KAAK,CAAA;IACb,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED,MAAM,OAAO,oBAAoB;IACH;IAA7B,YAA6B,SAA6B,EAAE;QAA/B,WAAM,GAAN,MAAM,CAAyB;IAAG,CAAC;IAEhE,IAAY,YAAY;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,qBAAqB,CAAA;IACzD,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,aAAa,CAAC,MAAc;QACzC,IAAI,GAAQ,CAAA;QACZ,IAAI,CAAC;YACJ,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;QACtB,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,oBAAoB,CAAC,IAAI,MAAM,iBAAiB,EAAE;gBAC3D,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,QAAQ;aAChB,CAAC,CAAA;QACH,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxC,gEAAgE;YAChE,iEAAiE;YACjE,0CAA0C;YAC1C,MAAM,IAAI,oBAAoB,CAC7B,YAAY,GAAG,CAAC,QAAQ,sCAAsC,EAC9D,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CACjC,CAAA;QACF,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;QACnE,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,oBAAoB,CAAC,YAAY,QAAQ,gCAAgC,EAAE;gBACpF,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,cAAc;aACtB,CAAC,CAAA;QACH,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,qBAAqB,KAAK,IAAI;YAAE,OAAO,GAAG,CAAA;QAE1D,uEAAuE;QACvE,sEAAsE;QACtE,qDAAqD;QACrD,EAAE;QACF,qEAAqE;QACrE,oEAAoE;QACpE,sEAAsE;QACtE,sEAAsE;QACtE,2DAA2D;QAC3D,MAAM,OAAO,GACZ,IAAI,CAAC,MAAM,CAAC,OAAO;YACnB,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;QACpF,IAAI,SAA4B,CAAA;QAChC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpB,SAAS,GAAG,CAAC,QAAQ,CAAC,CAAA;QACvB,CAAC;aAAM,CAAC;YACP,IAAI,CAAC;gBACJ,SAAS,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAA;YACpC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,gEAAgE;gBAChE,+DAA+D;gBAC/D,+DAA+D;gBAC/D,gEAAgE;gBAChE,gEAAgE;gBAChE,MAAM,IAAI,oBAAoB,CAC7B,YAAY,QAAQ,iCAAiC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,6CAA6C,EAClJ,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAC1C,CAAA;YACF,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,oBAAoB,CAAC,YAAY,QAAQ,kCAAkC,EAAE;oBACtF,GAAG,EAAE,MAAM;oBACX,MAAM,EAAE,iBAAiB;iBACzB,CAAC,CAAA;YACH,CAAC;QACF,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/B,MAAM,IAAI,oBAAoB,CAC7B,YAAY,QAAQ,sBAAsB,OAAO,mCAAmC,EACpF,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAC1C,CAAA;YACF,CAAC;QACF,CAAC;QACD,OAAO,GAAG,CAAA;IACX,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAwB;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;QACrD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAA;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,iBAAiB,CAAA;QAE1D,MAAM,OAAO,GAA2B,EAAE,CAAA;QAC1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;QACnE,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAA;QACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;QAC3D,qEAAqE;QACrE,iEAAiE;QACjE,UAAU;QACV,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAE9E,IAAI,CAAC;YACJ,MAAM,SAAS,GAAa,EAAE,CAAA;YAC9B,IAAI,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAEnD,KAAK,IAAI,GAAG,GAAG,CAAC,GAAI,GAAG,EAAE,EAAE,CAAC;gBAC3B,IAAI,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;oBAC7B,MAAM,IAAI,oBAAoB,CAC7B,iBAAiB,IAAI,CAAC,YAAY,oBAAoB,OAAO,CAAC,GAAG,IAAI,EACrE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAC9C,CAAA;gBACF,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAA;gBAElC,gEAAgE;gBAChE,+DAA+D;gBAC/D,+DAA+D;gBAC/D,sCAAsC;gBACtC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE;oBACvC,OAAO;oBACP,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;iBACpB,CAAC,CAAA;gBAEF,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;gBACjD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,EAAE,CAAC;oBACjE,6DAA6D;oBAC7D,8DAA8D;oBAC9D,uDAAuD;oBACvD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;oBACvC,IAAI,CAAC;wBACJ,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;oBACpD,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACd,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;4BACzC,MAAM,IAAI,oBAAoB,CAC7B,oBAAoB,OAAO,CAAC,QAAQ,EAAE,iBAAiB,IAAI,CAAC,QAAQ,EAAE,yBAAyB,GAAG,CAAC,OAAO,EAAE,EAC5G,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CACnD,CAAA;wBACF,CAAC;wBACD,MAAM,GAAG,CAAA;oBACV,CAAC;oBACD,SAAQ;gBACT,CAAC;gBAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;gBAClC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAA;gBACpD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;gBACxF,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,SAAS,CAAA;gBAErE,OAAO;oBACN,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE;oBACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;oBACrD,IAAI;oBACJ,SAAS;oBACT,SAAS;iBACT,CAAA;YACF,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,YAAY,CAAC,QAAQ,CAAC,CAAA;QACvB,CAAC;IACF,CAAC;CACD"}

package/dist/connector/web/index.d.ts

@@ -0,0 +1,5 @@
+export { GuardedFetchProvider, isPrivateAddress } from './guarded-fetch.js';
+export type { GuardedFetchConfig } from './guarded-fetch.js';
+export { WebFetchRefusedError } from './types.js';
+export type { WebFetchProvider, WebFetchRefusalReason, WebFetchRequest, WebFetchResult, WebSearchHit, WebSearchProvider, WebSearchRequest, WebSearchResult, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/connector/web/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/connector/web/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC3E,YAAY,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AACjD,YAAY,EACX,gBAAgB,EAChB,qBAAqB,EACrB,eAAe,EACf,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,GACf,MAAM,YAAY,CAAA"}

package/dist/connector/web/index.js

@@ -0,0 +1,7 @@
+// Reaching the web, as a seam. Fetching is implemented here because its
+// rules are about the network and the same everywhere; searching is not,
+// and ships with no vendor. See `types.ts` for why that asymmetry is the
+// design rather than an omission.
+export { GuardedFetchProvider, isPrivateAddress } from './guarded-fetch.js';
+export { WebFetchRefusedError } from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/connector/web/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/connector/web/index.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,kCAAkC;AAClC,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAE3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA"}

package/dist/connector/web/types.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Reaching the web, as a seam rather than as a bundled vendor.
+ *
+ * Two providers, and they are separated on purpose. **Fetching a URL is a
+ * capability this kernel can implement**: the rules are about the network
+ * and the same everywhere, so a wrong answer is a defect rather than a
+ * preference. **Searching is not.** Every search backend has its own
+ * account, its own terms, its own result shape and its own opinion about
+ * what a result even is, and picking one here would make that choice for
+ * every consumer while adding a dependency nobody asked for.
+ *
+ * So `WebFetchProvider` ships with a guarded implementation and
+ * `WebSearchProvider` ships with none. A host that wants search brings one.
+ * That asymmetry is the design, not an omission — see
+ * `GuardedFetchProvider` for what "guarded" is doing the work of.
+ */
+export interface WebFetchRequest {
+    readonly url: string;
+    /** Extra headers. The provider may refuse or strip some; see the guard. */
+    readonly headers?: Readonly<Record<string, string>>;
+    readonly signal?: AbortSignal;
+}
+export interface WebFetchResult {
+    readonly url: string;
+    readonly status: number;
+    readonly contentType?: string;
+    readonly body: string;
+    /**
+     * Whether the body was cut off at the size cap.
+     *
+     * Reported, never silent. A truncated page that reads as complete is a
+     * model concluding something from a document whose second half it never
+     * saw — the same rule the tool-output cap and the background job buffer
+     * already follow.
+     */
+    readonly truncated: boolean;
+    /** Every URL in the redirect chain, in order, including the final one. */
+    readonly redirects: readonly string[];
+}
+/** Why a fetch was refused before it left the process. */
+export type WebFetchRefusalReason = 'scheme' | 'private-address' | 'redirect-limit' | 'redirect-target' | 'blocked-host';
+export declare class WebFetchRefusedError extends Error {
+    readonly details: {
+        url: string;
+        reason: WebFetchRefusalReason;
+    };
+    constructor(message: string, details: {
+        url: string;
+        reason: WebFetchRefusalReason;
+    });
+}
+export interface WebFetchProvider {
+    fetch(request: WebFetchRequest): Promise<WebFetchResult>;
+}
+export interface WebSearchRequest {
+    readonly query: string;
+    readonly limit?: number;
+    readonly signal?: AbortSignal;
+}
+export interface WebSearchHit {
+    readonly title: string;
+    readonly url: string;
+    /**
+     * The backend's own excerpt, when it has one.
+     *
+     * Not synthesised here. A snippet this kernel wrote would be a claim
+     * about a page nobody fetched, and a model citing it would be citing us.
+     */
+    readonly snippet?: string;
+}
+export interface WebSearchResult {
+    readonly query: string;
+    readonly hits: readonly WebSearchHit[];
+}
+/**
+ * Search, which this kernel does NOT implement.
+ *
+ * Declared so the tool surface and the wiring can exist without a vendor,
+ * and so a host's backend has a shape to satisfy rather than a convention
+ * to guess at. There is deliberately no default: a search provider means an
+ * account, terms of service, and a result shape, and choosing one here
+ * would choose it for every consumer.
+ */
+export interface WebSearchProvider {
+    search(request: WebSearchRequest): Promise<WebSearchResult>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/connector/web/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/connector/web/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACnD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC7B;AAED,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;CACrC;AAED,0DAA0D;AAC1D,MAAM,MAAM,qBAAqB,GAC9B,QAAQ,GACR,iBAAiB,GACjB,gBAAgB,GAChB,iBAAiB,GACjB,cAAc,CAAA;AAEjB,qBAAa,oBAAqB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,qBAAqB,CAAA;KAAE,CAAA;gBAEpD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,qBAAqB,CAAA;KAAE;CAKpF;AAED,MAAM,WAAW,gBAAgB;IAChC,KAAK,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC,CAAA;CACxD;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC7B;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,SAAS,YAAY,EAAE,CAAA;CACtC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IACjC,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;CAC3D"}

package/dist/connector/web/types.js

@@ -0,0 +1,25 @@
+/**
+ * Reaching the web, as a seam rather than as a bundled vendor.
+ *
+ * Two providers, and they are separated on purpose. **Fetching a URL is a
+ * capability this kernel can implement**: the rules are about the network
+ * and the same everywhere, so a wrong answer is a defect rather than a
+ * preference. **Searching is not.** Every search backend has its own
+ * account, its own terms, its own result shape and its own opinion about
+ * what a result even is, and picking one here would make that choice for
+ * every consumer while adding a dependency nobody asked for.
+ *
+ * So `WebFetchProvider` ships with a guarded implementation and
+ * `WebSearchProvider` ships with none. A host that wants search brings one.
+ * That asymmetry is the design, not an omission — see
+ * `GuardedFetchProvider` for what "guarded" is doing the work of.
+ */
+export class WebFetchRefusedError extends Error {
+    details;
+    constructor(message, details) {
+        super(message);
+        this.name = 'WebFetchRefusedError';
+        this.details = details;
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/connector/web/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/connector/web/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAmCH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACrC,OAAO,CAAgD;IAEhE,YAAY,OAAe,EAAE,OAAuD;QACnF,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAA;QAClC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACvB,CAAC;CACD"}

package/dist/constants/acp/index.d.ts

@@ -0,0 +1,97 @@
+/**
+ * The agent-client protocol's version and method set, pinned.
+ *
+ * A table rather than string literals scattered through the server, because
+ * the two things that go wrong with a wire protocol are a method spelled
+ * differently in one place and a method implemented but never advertised.
+ * Both are invisible at compile time and both present to a client as "that
+ * agent does not support this".
+ *
+ * `bridge/acp/server.ts` authors its handler map independently and a test
+ * compares the two SETS in both directions: a handler with no entry here
+ * fails, and an entry here with no handler fails. That is the only
+ * arrangement where the comparison can fail — deriving the handlers from
+ * this table would make the test a tautology, which is the shape
+ * `a-check-that-cannot-fail` names.
+ *
+ * Zero imports, deliberately: this is read by the types module, the server,
+ * and the CLI command, and a constant table that pulls in a dependency
+ * becomes a cycle the moment one of those three moves.
+ */
+/**
+ * The protocol revision this bridge speaks.
+ *
+ * A number, matching the wire field, and pinned rather than negotiated
+ * downward. A client asking for a version this does not implement is told
+ * what it does implement; guessing that an older client can be served by a
+ * newer agent is how a protocol bridge produces a session that half works.
+ */
+export declare const ACP_PROTOCOL_VERSION = 1;
+/** Methods a client calls on this agent. */
+export declare const ACP_METHODS: {
+    readonly INITIALIZE: "initialize";
+    readonly SESSION_NEW: "session/new";
+    readonly SESSION_PROMPT: "session/prompt";
+    readonly SESSION_CANCEL: "session/cancel";
+    readonly SESSION_LOAD: "session/load";
+};
+export type AcpMethod = (typeof ACP_METHODS)[keyof typeof ACP_METHODS];
+/**
+ * Notifications this agent sends the client.
+ *
+ * Separate from `ACP_METHODS` because the drift test is about what a client
+ * may CALL. Mixing the two directions into one table would make that test
+ * demand a handler for a message this side only ever sends.
+ */
+export declare const ACP_CLIENT_NOTIFICATIONS: {
+    readonly SESSION_UPDATE: "session/update";
+};
+/**
+ * REQUESTS this agent makes of the client, which it answers.
+ *
+ * Distinct from a notification: each carries an id and this side waits for
+ * the response. That direction is what makes a permission prompt possible at
+ * all — the agent has a question and cannot proceed until the human behind
+ * the client answers it.
+ */
+export declare const ACP_CLIENT_REQUESTS: {
+    readonly REQUEST_PERMISSION: "session/request_permission";
+    readonly FS_READ: "fs/read_text_file";
+    readonly FS_WRITE: "fs/write_text_file";
+};
+/**
+ * JSON-RPC error codes this bridge answers with.
+ *
+ * `METHOD_NOT_FOUND` is the one with a behavioural requirement attached: an
+ * unknown method is answered and the connection STAYS OPEN. A bridge that
+ * closed on an unrecognised call would make a client's feature probe fatal.
+ */
+export declare const ACP_ERROR_CODES: {
+    readonly PARSE_ERROR: -32700;
+    readonly INVALID_REQUEST: -32600;
+    readonly METHOD_NOT_FOUND: -32601;
+    readonly INVALID_PARAMS: -32602;
+    readonly INTERNAL_ERROR: -32603;
+};
+/**
+ * The capability a client must declare before a session is created.
+ *
+ * Approval routing is a later change, so a session that could not ask a
+ * human anything must not be created at all: it would run with every tool
+ * auto-approved, which is not a degraded version of asking — it is the
+ * opposite of it. The refusal names this string so a client author knows
+ * what to send.
+ */
+export declare const ACP_PERMISSION_CAPABILITY = "permission";
+/**
+ * The capability that lets the EDITOR's buffers be the source of truth.
+ *
+ * Optional, unlike `permission`. A client that does not declare it gets an
+ * agent reading and writing the disk, which is correct and is what every
+ * non-editor peer wants. A client that DOES declare it is telling this
+ * agent that the file on disk may be stale — the user has unsaved changes —
+ * and that reading disk anyway would show the model a version of the file
+ * nobody is looking at.
+ */
+export declare const ACP_FILESYSTEM_CAPABILITY = "fs";
+//# sourceMappingURL=index.d.ts.map

package/dist/constants/acp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/constants/acp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,IAAI,CAAA;AAErC,4CAA4C;AAC5C,eAAO,MAAM,WAAW;;;;;;CAMd,CAAA;AAEV,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAEtE;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB;;CAE3B,CAAA;AAEV;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB;;;;CAItB,CAAA;AAEV;;;;;;GAMG;AACH,eAAO,MAAM,eAAe;;;;;;CAMlB,CAAA;AAEV;;;;;;;;GAQG;AACH,eAAO,MAAM,yBAAyB,eAAe,CAAA;AAErD;;;;;;;;;GASG;AACH,eAAO,MAAM,yBAAyB,OAAO,CAAA"}

package/dist/constants/acp/index.js

@@ -0,0 +1,96 @@
+/**
+ * The agent-client protocol's version and method set, pinned.
+ *
+ * A table rather than string literals scattered through the server, because
+ * the two things that go wrong with a wire protocol are a method spelled
+ * differently in one place and a method implemented but never advertised.
+ * Both are invisible at compile time and both present to a client as "that
+ * agent does not support this".
+ *
+ * `bridge/acp/server.ts` authors its handler map independently and a test
+ * compares the two SETS in both directions: a handler with no entry here
+ * fails, and an entry here with no handler fails. That is the only
+ * arrangement where the comparison can fail — deriving the handlers from
+ * this table would make the test a tautology, which is the shape
+ * `a-check-that-cannot-fail` names.
+ *
+ * Zero imports, deliberately: this is read by the types module, the server,
+ * and the CLI command, and a constant table that pulls in a dependency
+ * becomes a cycle the moment one of those three moves.
+ */
+/**
+ * The protocol revision this bridge speaks.
+ *
+ * A number, matching the wire field, and pinned rather than negotiated
+ * downward. A client asking for a version this does not implement is told
+ * what it does implement; guessing that an older client can be served by a
+ * newer agent is how a protocol bridge produces a session that half works.
+ */
+export const ACP_PROTOCOL_VERSION = 1;
+/** Methods a client calls on this agent. */
+export const ACP_METHODS = {
+    INITIALIZE: 'initialize',
+    SESSION_NEW: 'session/new',
+    SESSION_PROMPT: 'session/prompt',
+    SESSION_CANCEL: 'session/cancel',
+    SESSION_LOAD: 'session/load',
+};
+/**
+ * Notifications this agent sends the client.
+ *
+ * Separate from `ACP_METHODS` because the drift test is about what a client
+ * may CALL. Mixing the two directions into one table would make that test
+ * demand a handler for a message this side only ever sends.
+ */
+export const ACP_CLIENT_NOTIFICATIONS = {
+    SESSION_UPDATE: 'session/update',
+};
+/**
+ * REQUESTS this agent makes of the client, which it answers.
+ *
+ * Distinct from a notification: each carries an id and this side waits for
+ * the response. That direction is what makes a permission prompt possible at
+ * all — the agent has a question and cannot proceed until the human behind
+ * the client answers it.
+ */
+export const ACP_CLIENT_REQUESTS = {
+    REQUEST_PERMISSION: 'session/request_permission',
+    FS_READ: 'fs/read_text_file',
+    FS_WRITE: 'fs/write_text_file',
+};
+/**
+ * JSON-RPC error codes this bridge answers with.
+ *
+ * `METHOD_NOT_FOUND` is the one with a behavioural requirement attached: an
+ * unknown method is answered and the connection STAYS OPEN. A bridge that
+ * closed on an unrecognised call would make a client's feature probe fatal.
+ */
+export const ACP_ERROR_CODES = {
+    PARSE_ERROR: -32700,
+    INVALID_REQUEST: -32600,
+    METHOD_NOT_FOUND: -32601,
+    INVALID_PARAMS: -32602,
+    INTERNAL_ERROR: -32603,
+};
+/**
+ * The capability a client must declare before a session is created.
+ *
+ * Approval routing is a later change, so a session that could not ask a
+ * human anything must not be created at all: it would run with every tool
+ * auto-approved, which is not a degraded version of asking — it is the
+ * opposite of it. The refusal names this string so a client author knows
+ * what to send.
+ */
+export const ACP_PERMISSION_CAPABILITY = 'permission';
+/**
+ * The capability that lets the EDITOR's buffers be the source of truth.
+ *
+ * Optional, unlike `permission`. A client that does not declare it gets an
+ * agent reading and writing the disk, which is correct and is what every
+ * non-editor peer wants. A client that DOES declare it is telling this
+ * agent that the file on disk may be stale — the user has unsaved changes —
+ * and that reading disk anyway would show the model a version of the file
+ * nobody is looking at.
+ */
+export const ACP_FILESYSTEM_CAPABILITY = 'fs';
+//# sourceMappingURL=index.js.map

package/dist/constants/acp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/constants/acp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAA;AAErC,4CAA4C;AAC5C,MAAM,CAAC,MAAM,WAAW,GAAG;IAC1B,UAAU,EAAE,YAAY;IACxB,WAAW,EAAE,aAAa;IAC1B,cAAc,EAAE,gBAAgB;IAChC,cAAc,EAAE,gBAAgB;IAChC,YAAY,EAAE,cAAc;CACnB,CAAA;AAIV;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACvC,cAAc,EAAE,gBAAgB;CACvB,CAAA;AAEV;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAClC,kBAAkB,EAAE,4BAA4B;IAChD,OAAO,EAAE,mBAAmB;IAC5B,QAAQ,EAAE,oBAAoB;CACrB,CAAA;AAEV;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC9B,WAAW,EAAE,CAAC,KAAK;IACnB,eAAe,EAAE,CAAC,KAAK;IACvB,gBAAgB,EAAE,CAAC,KAAK;IACxB,cAAc,EAAE,CAAC,KAAK;IACtB,cAAc,EAAE,CAAC,KAAK;CACb,CAAA;AAEV;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,YAAY,CAAA;AAErD;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAA"}

package/dist/constants/authorization/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/constants/authorization/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,yBAAyB,MAAM,CAAA"}

package/dist/constants/authorization/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/constants/authorization/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAA"}

package/dist/constants/credential-env-keys.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Credential-bearing environment variable KEY NAMES, in one place.
+ *
+ * A leaf with no imports, beside `secret-patterns.ts` and holding the
+ * complement of it: that file matches credential VALUES, this one matches
+ * the names variables carry them under. Neither re-declares the other's,
+ * because a value pattern and a key name answer different questions and a
+ * table that tried to do both would be wrong at whichever end it was not
+ * written for.
+ *
+ * Two readers, and that is the point of moving it here. The host-bash
+ * environment scrub uses it to decide what a shell command must not
+ * inherit, and `EnvCredentialProvider` uses it to decide what counts as a
+ * credential it can resolve. Those were about to become two tables — the
+ * CLI's provider registry already keeps a third, of `envVars` per provider
+ * — and a name in one and not another means a variable the CLI reads a
+ * credential from and the scrub happily hands to a shell.
+ */
+/**
+ * Key-name patterns that mark an inherited variable as credential-shaped.
+ *
+ * Matched case-insensitively against the whole key. Deliberately broad: a
+ * false positive costs a command one variable it can be handed back
+ * explicitly, while a false negative costs a leaked secret that cannot be
+ * recalled from a transcript.
+ */
+export declare const CREDENTIAL_KEY_PATTERNS: readonly RegExp[];
+/**
+ * Keys that are credential-bearing but whose names match none of the patterns
+ * above. Kept as an explicit list so each entry is a decision somebody can
+ * read, rather than a pattern nobody can evaluate.
+ */
+export declare const CREDENTIAL_KEY_EXACT: ReadonlySet<string>;
+/** True when an inherited variable's name marks it as credential-shaped. */
+export declare function isCredentialEnvKey(key: string): boolean;
+//# sourceMappingURL=credential-env-keys.d.ts.map

package/dist/constants/credential-env-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-env-keys.d.ts","sourceRoot":"","sources":["../../src/constants/credential-env-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAapD,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CASnD,CAAA;AAEF,4EAA4E;AAC5E,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGvD"}

package/dist/constants/credential-env-keys.js

@@ -0,0 +1,62 @@
+/**
+ * Credential-bearing environment variable KEY NAMES, in one place.
+ *
+ * A leaf with no imports, beside `secret-patterns.ts` and holding the
+ * complement of it: that file matches credential VALUES, this one matches
+ * the names variables carry them under. Neither re-declares the other's,
+ * because a value pattern and a key name answer different questions and a
+ * table that tried to do both would be wrong at whichever end it was not
+ * written for.
+ *
+ * Two readers, and that is the point of moving it here. The host-bash
+ * environment scrub uses it to decide what a shell command must not
+ * inherit, and `EnvCredentialProvider` uses it to decide what counts as a
+ * credential it can resolve. Those were about to become two tables — the
+ * CLI's provider registry already keeps a third, of `envVars` per provider
+ * — and a name in one and not another means a variable the CLI reads a
+ * credential from and the scrub happily hands to a shell.
+ */
+/**
+ * Key-name patterns that mark an inherited variable as credential-shaped.
+ *
+ * Matched case-insensitively against the whole key. Deliberately broad: a
+ * false positive costs a command one variable it can be handed back
+ * explicitly, while a false negative costs a leaked secret that cannot be
+ * recalled from a transcript.
+ */
+export const CREDENTIAL_KEY_PATTERNS = [
+    /KEY/i,
+    /SECRET/i,
+    /TOKEN/i,
+    /PASSWORD/i,
+    /PASSWD/i,
+    /CREDENTIAL/i,
+    /(^|_)AUTH(_|$)/i,
+    /PRIVATE/i,
+    /SESSION_ID/i,
+    /COOKIE/i,
+    /SIGNATURE/i,
+    /(^|_)PAT(_|$)/i,
+];
+/**
+ * Keys that are credential-bearing but whose names match none of the patterns
+ * above. Kept as an explicit list so each entry is a decision somebody can
+ * read, rather than a pattern nobody can evaluate.
+ */
+export const CREDENTIAL_KEY_EXACT = new Set([
+    'AWS_SESSION_TOKEN',
+    'AWS_SECURITY_TOKEN',
+    'GOOGLE_APPLICATION_CREDENTIALS',
+    'NPM_CONFIG__AUTH',
+    'GH_ENTERPRISE_TOKEN',
+    'DOCKER_AUTH_CONFIG',
+    'KUBECONFIG',
+    'NETRC',
+]);
+/** True when an inherited variable's name marks it as credential-shaped. */
+export function isCredentialEnvKey(key) {
+    if (CREDENTIAL_KEY_EXACT.has(key.toUpperCase()))
+        return true;
+    return CREDENTIAL_KEY_PATTERNS.some((pattern) => pattern.test(key));
+}
+//# sourceMappingURL=credential-env-keys.js.map

package/dist/constants/credential-env-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-env-keys.js","sourceRoot":"","sources":["../../src/constants/credential-env-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACzD,MAAM;IACN,SAAS;IACT,QAAQ;IACR,WAAW;IACX,SAAS;IACT,aAAa;IACb,iBAAiB;IACjB,UAAU;IACV,aAAa;IACb,SAAS;IACT,YAAY;IACZ,gBAAgB;CAChB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IAChE,mBAAmB;IACnB,oBAAoB;IACpB,gCAAgC;IAChC,kBAAkB;IAClB,qBAAqB;IACrB,oBAAoB;IACpB,YAAY;IACZ,OAAO;CACP,CAAC,CAAA;AAEF,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC7C,IAAI,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5D,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AACpE,CAAC"}

package/dist/constants/index.d.ts

@@ -1,3 +1,4 @@
+export * from './acp/index.js';
 export * from './a2a/index.js';
 export * from './advisory/index.js';
 export * from './compaction/index.js';
@@ -10,8 +11,9 @@ export * from './agent/index.js';
 export * from './continuation.js';
 export * from './limits.js';
 export * from './bus/index.js';
-export * from './verification/index.js';
+export * from './authorization/index.js';
 export * from './emergency.js';
 export * from './plugin/index.js';
 export * from './sandbox/index.js';
+export * from './secret-patterns.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/constants/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/constants/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qBAAqB,CAAA;AACnC,cAAc,uBAAuB,CAAA;AACrC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qBAAqB,CAAA;AACnC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,aAAa,CAAA;AAC3B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,yBAAyB,CAAA;AACvC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/constants/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qBAAqB,CAAA;AACnC,cAAc,uBAAuB,CAAA;AACrC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qBAAqB,CAAA;AACnC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,aAAa,CAAA;AAC3B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,0BAA0B,CAAA;AACxC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,sBAAsB,CAAA"}

package/dist/constants/index.js

@@ -1,3 +1,4 @@
+export * from './acp/index.js';
 export * from './a2a/index.js';
 export * from './advisory/index.js';
 export * from './compaction/index.js';
@@ -10,8 +11,9 @@ export * from './agent/index.js';
 export * from './continuation.js';
 export * from './limits.js';
 export * from './bus/index.js';
-export * from './verification/index.js';
+export * from './authorization/index.js';
 export * from './emergency.js';
 export * from './plugin/index.js';
 export * from './sandbox/index.js';
+export * from './secret-patterns.js';
 //# sourceMappingURL=index.js.map

package/dist/constants/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/constants/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qBAAqB,CAAA;AACnC,cAAc,uBAAuB,CAAA;AACrC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qBAAqB,CAAA;AACnC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,aAAa,CAAA;AAC3B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,yBAAyB,CAAA;AACvC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/constants/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAA;AAC9B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qBAAqB,CAAA;AACnC,cAAc,uBAAuB,CAAA;AACrC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,qBAAqB,CAAA;AACnC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,cAAc,sBAAsB,CAAA;AACpC,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,aAAa,CAAA;AAC3B,cAAc,gBAAgB,CAAA;AAC9B,cAAc,0BAA0B,CAAA;AACxC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,mBAAmB,CAAA;AACjC,cAAc,oBAAoB,CAAA;AAClC,cAAc,sBAAsB,CAAA"}

package/dist/constants/secret-patterns.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Credential shapes redacted before they leave this tree, in one place.
+ *
+ * Two tables evolved independently and disagreed:
+ *
+ *  - `runtime/query/guardrail-presets.ts` carried eight vendor-prefix-anchored
+ *    patterns, private and unexported, deliberately narrow — a loose
+ *    "looks like a secret" regex over model output produces false positives
+ *    on ordinary code, and a redactor that fires on the wrong thing gets
+ *    switched off, at which point it protects nothing.
+ *  - `provider/errors.ts` carried a broader, field-name-aware set (a
+ *    generic key-prefix pattern, a bearer-header pattern, and a JSON
+ *    field-name scrubber that catches a secret by the key it sits under
+ *    regardless of value shape) because the narrow approach had already
+ *    proven insufficient there: a vendor error body echoes the request,
+ *    and a request can carry a credential shape the narrow table never
+ *    anticipated.
+ *
+ * Both live here now, as two exported sets rather than one, because the
+ * cost of a false positive is not the same at the two call sites:
+ *
+ *  - `OUTPUT_SECRET_PATTERNS` (the original narrow eight) is what
+ *    `secretRedactionGuardrail` matches against MODEL OUTPUT. A false
+ *    positive there rewrites the answer the caller asked for, so it stays
+ *    narrow on purpose.
+ *  - `LOG_SECRET_PATTERNS` (the union of both tables) is for text that is
+ *    being logged or carried in an error's `detail`, never returned as the
+ *    answer itself. A false positive there redacts one word out of a
+ *    diagnostic line nobody was going to copy-paste as a credential, which
+ *    is a cost worth paying for the wider net.
+ *
+ * `SecretPattern` label strings are never returned to the caller verbatim —
+ * consumers replace a match with `[REDACTED:<label>]`, not the matched
+ * text, so a `label` here should never itself carry anything secret.
+ *
+ * Zero imports. This is a leaf module on purpose: `utils/logger.ts` is
+ * imported by most of `runtime/query/`, so pulling this table back out of
+ * `runtime/query` would have made it a same-package import cycle, and a
+ * cycle on a security-relevant table fails as a TDZ error or a
+ * partially-initialised module — quietly, in the worst possible place.
+ * Keeping this file leaf-only is what lets `runtime/query/guardrail-presets.ts`
+ * and `provider/errors.ts` both import from it without one importing the
+ * other.
+ */
+export type SecretPattern = readonly [label: string, pattern: RegExp];
+/**
+ * The narrow, prefix-anchored set. Unchanged from the table this replaces —
+ * same labels, same regexes, same order — because moving it was the whole
+ * point of this module and widening it was not: `secretRedactionGuardrail`
+ * still needs a redactor precise enough that it never gets switched off.
+ */
+export declare const OUTPUT_SECRET_PATTERNS: readonly SecretPattern[];
+/**
+ * The union: every pattern above, plus everything `provider/errors.ts`
+ * carried that the narrow set did not cover — a generic key-prefix catch,
+ * a bearer-header pattern, and a JSON field-name scrubber.
+ *
+ * Two adjustments over a plain concatenation, both required so that
+ * deleting any ONE entry changes behaviour for exactly the shape that
+ * entry names, which is what the test suite for this module pins:
+ *
+ *  - `github-token` uses the wider `{20,}` threshold `provider/errors.ts`
+ *    used, not the guardrail's `{36,}` — the union takes the broader of
+ *    two disagreeing thresholds for the same vendor, never the narrower.
+ *  - The two broad `sk-`-family entries each carry a negative lookahead
+ *    excluding the `sk-ant-` and `sk-proj-` shapes, which a plain
+ *    `sk-`/`pk-`/`rk-` prefix scan would otherwise ALSO match. Without the
+ *    lookaheads, deleting the narrower entry for one of those shapes leaves a
+ *    value of that shape still caught — by the broad entries, in array order —
+ *    so the redaction succeeds while the label names the wrong issuer.
+ *
+ *    A mislabelled redaction is not a cosmetic problem: the label is what an
+ *    operator greps for when rotating one credential and not another. That is
+ *    also why the mutation check deletes each entry in turn and asserts only
+ *    its own sample breaks.
+ */
+export declare const LOG_SECRET_PATTERNS: readonly SecretPattern[];
+//# sourceMappingURL=secret-patterns.d.ts.map

package/dist/constants/secret-patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-patterns.d.ts","sourceRoot":"","sources":["../../src/constants/secret-patterns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,MAAM,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;AAErE;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,aAAa,EAS1D,CAAA;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,aAAa,EAavD,CAAA"}