@nekzus/liop 2.4.0 → 2.4.1

package/dist/bin/agent.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { LiopServer } from '../chunk-UBOQZVV5.js';
+import { LiopServer } from '../chunk-DPW7RMAS.js';
 import '../chunk-JIJPZFR2.js';
 import { LiopMcpRouter } from '../chunk-GKV6M2PQ.js';
 import '../chunk-32ADSAJS.js';

package/dist/bridge.js

@@ -1,4 +1,4 @@
-export { LiopMcpBridge, LiopStreamBridge } from './chunk-4LQPDN3W.js';
+export { LiopMcpBridge, LiopStreamBridge } from './chunk-OLG56LGQ.js';
 import './chunk-PYKRQAER.js';
 import './chunk-72MNYFR6.js';
 //# sourceMappingURL=bridge.js.map

package/dist/{chunk-UBOQZVV5.js → chunk-DPW7RMAS.js}

@@ -3363,7 +3363,7 @@ Data structure: ${schemaDigest}. Full schema: resource ${uri}. Guidelines: resou
   resetFieldBudget(clientId, toolName) {
     if (clientId === "__proto__" || clientId === "constructor" || clientId === "prototype" || toolName && (toolName === "__proto__" || toolName === "constructor" || toolName === "prototype")) {
       log.warn(
-        `[LiopServer] Blocked resetFieldBudget call due to prototype pollution keys.`
+        `[LiopServer] Rejected resetFieldBudget for unsafe clientId/toolName: ${clientId}`
       );
       return;
     }
@@ -3380,10 +3380,10 @@ Data structure: ${schemaDigest}. Full schema: resource ${uri}. Guidelines: resou
       try {
         this.executeWithBudgetLock(storePath, (budget) => {
           if (toolName) {
-            if (budget[clientId]) {
+            if (Object.hasOwn(budget, clientId) && budget[clientId]) {
               delete budget[clientId][toolName];
             }
-          } else {
+          } else if (Object.hasOwn(budget, clientId)) {
             delete budget[clientId];
           }
           return { result: void 0, updatedBudget: budget };
@@ -3401,12 +3401,22 @@ Data structure: ${schemaDigest}. Full schema: resource ${uri}. Guidelines: resou
   getPersistentBudget(storePath) {
     try {
       if (!fs2.existsSync(storePath)) {
-        return {};
+        return /* @__PURE__ */ Object.create(null);
       }
       const content = fs2.readFileSync(storePath, "utf-8");
-      return JSON.parse(content || "{}");
+      const parsed = JSON.parse(content || "{}");
+      if (parsed && typeof parsed === "object") {
+        const clean = /* @__PURE__ */ Object.create(null);
+        for (const [k, v] of Object.entries(parsed)) {
+          if (k !== "__proto__" && k !== "constructor" && k !== "prototype") {
+            clean[k] = v;
+          }
+        }
+        return clean;
+      }
+      return /* @__PURE__ */ Object.create(null);
     } catch {
-      return {};
+      return /* @__PURE__ */ Object.create(null);
     }
   }
   savePersistentBudget(storePath, budget) {
@@ -3504,5 +3514,5 @@ Data structure: ${schemaDigest}. Full schema: resource ${uri}. Guidelines: resou
 };
 
 export { AUTH_DEFAULTS, AuditLogger, GENESIS_HASH, JwtValidator, LiopRpcServer, LiopServer, NerScanner, PII_PATTERNS, PII_PRESETS, PiiScanner, computeEntryHash, createOAuthServer, globalAuditLogger };
-//# sourceMappingURL=chunk-UBOQZVV5.js.map
-//# sourceMappingURL=chunk-UBOQZVV5.js.map
+//# sourceMappingURL=chunk-DPW7RMAS.js.map
+//# sourceMappingURL=chunk-DPW7RMAS.js.map