@openagentpack/sdk 0.0.2-beta.0

package/dist/session-events.d.ts

@@ -0,0 +1,13 @@
+import { P as ProviderSessionEvent, al as SessionEvent } from './session-event-CmiO8Gqv.js';
+import 'zod';
+
+declare function sanitizeSessionEvents(events: ProviderSessionEvent[], options?: {
+    includeRaw?: boolean;
+}): SessionEvent[];
+declare function sanitizeSessionEvent(event: ProviderSessionEvent, options?: {
+    includeRaw?: boolean;
+}): SessionEvent;
+
+declare function toSessionEvent(raw: Record<string, unknown>): ProviderSessionEvent;
+
+export { sanitizeSessionEvent, sanitizeSessionEvents, toSessionEvent as toBailianSessionEvent };

package/dist/session-events.js

@@ -0,0 +1,202 @@
+import {
+  toSessionEvent
+} from "./chunk-GAAU67HX.js";
+
+// src/redaction.ts
+var REDACTED = "[redacted]";
+var SENSITIVE_QUERY_KEYS = /* @__PURE__ */ new Set([
+  "access_key",
+  "access_key_id",
+  "accesskeyid",
+  "api_key",
+  "apikey",
+  "authorization",
+  "credential",
+  "expires",
+  "ossaccesskeyid",
+  "policy",
+  "security-token",
+  "signature",
+  "token",
+  "x-oss-access-key-id",
+  "x-oss-credential",
+  "x-oss-date",
+  "x-oss-expires",
+  "x-oss-security-token",
+  "x-oss-signature",
+  "x-amz-credential",
+  "x-amz-date",
+  "x-amz-expires",
+  "x-amz-security-token",
+  "x-amz-signature"
+]);
+var IMAGE_EXTENSIONS = /* @__PURE__ */ new Set(["png", "jpg", "jpeg", "gif", "webp", "svg", "bmp", "avif", "ico"]);
+var VIDEO_EXTENSIONS = /* @__PURE__ */ new Set(["mp4", "webm", "mov", "m4v", "avi", "mkv"]);
+var AUDIO_EXTENSIONS = /* @__PURE__ */ new Set(["mp3", "wav", "m4a", "ogg", "aac", "flac", "opus"]);
+var DOWNLOAD_EXTENSIONS = /* @__PURE__ */ new Set([
+  "pdf",
+  "zip",
+  "rar",
+  "7z",
+  "tar",
+  "gz",
+  "doc",
+  "docx",
+  "xls",
+  "xlsx",
+  "ppt",
+  "pptx",
+  "csv",
+  "txt",
+  "md",
+  "json",
+  "epub",
+  "html"
+]);
+var MARKDOWN_LINK_RE = /!?\[[^\]]*\]\((https?:\/\/[^)\s]+)\)/g;
+function redactSensitiveText(value) {
+  const preservedUrls = [];
+  const withPlaceholders = value.replace(MARKDOWN_LINK_RE, (match, url) => {
+    if (!shouldPreserveMarkdownMediaUrl(url, match.startsWith("!"))) {
+      return match;
+    }
+    const index = preservedUrls.length;
+    preservedUrls.push(url);
+    return match.replace(url, mediaUrlPlaceholder(index));
+  });
+  let result = redactKeyValuePairs(redactUrls(withPlaceholders));
+  for (let i = 0; i < preservedUrls.length; i++) {
+    result = result.replaceAll(mediaUrlPlaceholder(i), preservedUrls[i]);
+  }
+  return result;
+}
+function mediaUrlPlaceholder(index) {
+  return `__AGENTS_PRESERVED_MEDIA_URL_${index}__`;
+}
+function shouldPreserveMarkdownMediaUrl(url, isImageSyntax) {
+  if (isImageSyntax) return true;
+  const ext = mediaExtensionFromUrl(url);
+  if (!ext) return false;
+  return IMAGE_EXTENSIONS.has(ext) || VIDEO_EXTENSIONS.has(ext) || AUDIO_EXTENSIONS.has(ext) || DOWNLOAD_EXTENSIONS.has(ext);
+}
+function mediaExtensionFromUrl(url) {
+  try {
+    const match = new URL(url).pathname.match(/\.([a-z0-9]+)$/i);
+    return match ? match[1].toLowerCase() : null;
+  } catch {
+    return null;
+  }
+}
+function redactUrls(value) {
+  return value.replace(/https?:\/\/[^\s)\]'"<>]+/g, (candidate) => {
+    try {
+      const url = new URL(candidate);
+      let redacted = false;
+      for (const key of Array.from(url.searchParams.keys())) {
+        if (isSensitiveQueryKey(key)) {
+          url.searchParams.set(key, REDACTED);
+          redacted = true;
+        }
+      }
+      return redacted ? url.toString() : candidate;
+    } catch {
+      return candidate;
+    }
+  });
+}
+function redactKeyValuePairs(value) {
+  return value.replace(
+    /\b(api[_-]?key|access[_-]?key(?:_id)?|authorization|credential|ossaccesskeyid|secret|signature|token)\b\s*[:=]\s*["']?[^"',\s)}\]]+/gi,
+    (_match, key) => `${key}: ${REDACTED}`
+  );
+}
+function isSensitiveQueryKey(key) {
+  const normalized = key.toLowerCase();
+  return SENSITIVE_QUERY_KEYS.has(normalized) || normalized.startsWith("x-oss-") || normalized.startsWith("x-amz-");
+}
+
+// src/internal/core/session-event-sanitizer.ts
+var DEFAULT_TEXT_LIMIT = 4e3;
+var TOOL_TEXT_LIMIT = 8e3;
+function sanitizeSessionEvents(events, options = {}) {
+  return events.map((event) => sanitizeSessionEvent(event, options));
+}
+function sanitizeSessionEvent(event, options = {}) {
+  const isToolEvent = event.type === "tool_result" || event.type === "tool_use";
+  const textLimit = isToolEvent ? TOOL_TEXT_LIMIT : DEFAULT_TEXT_LIMIT;
+  const primarySource = event.content ?? (event.type === "tool_use" ? event.tool_input : void 0);
+  const primary = sanitizeOptionalText(primarySource, textLimit);
+  const raw = options.includeRaw ? sanitizeUnknown(event.raw, TOOL_TEXT_LIMIT * 2) : void 0;
+  const redacted = Boolean(primary?.redacted || raw?.redacted);
+  const truncated = Boolean(primary?.truncated || raw?.truncated);
+  const content = [];
+  if (primary?.value !== void 0) content.push({ type: "text", text: primary.value });
+  const metadata = {};
+  if (event.tool_name !== void 0) metadata.tool_name = event.tool_name;
+  if (event.tool_input !== void 0) metadata.tool_input = event.tool_input;
+  if (event.status !== void 0) metadata.status = event.status;
+  if (event.stop_reason !== void 0) metadata.stop_reason = event.stop_reason;
+  if (event.type !== "unknown") metadata.display_bucket = event.type;
+  if (event.artifact) metadata.artifact = event.artifact;
+  if (redacted) metadata.redacted = true;
+  if (truncated) metadata.truncated = true;
+  if (raw !== void 0) metadata.raw = raw.value;
+  const result = { type: event.raw_type };
+  if (event.role !== void 0) result.role = event.role;
+  if (content.length > 0) result.content = content;
+  if (Object.keys(metadata).length > 0) result.metadata = metadata;
+  if (event.type === "error") {
+    result.is_error = true;
+    if (primary?.value) result.message = primary.value;
+  }
+  return result;
+}
+function sanitizeOptionalText(value, limit) {
+  if (value === void 0) return void 0;
+  return sanitizeText(value, limit);
+}
+function sanitizeUnknown(value, limit) {
+  if (typeof value === "string") return sanitizeText(value, limit);
+  if (value === null || typeof value !== "object") {
+    return {
+      value,
+      redacted: false,
+      truncated: false
+    };
+  }
+  const serialized = safeStringify(value);
+  const sanitized = sanitizeText(serialized, limit);
+  return {
+    ...sanitized,
+    value: parseJsonOrText(sanitized.value)
+  };
+}
+function sanitizeText(value, limit) {
+  const redacted = redactSensitiveText(value);
+  const truncated = redacted.length > limit;
+  return {
+    value: truncated ? `${redacted.slice(0, limit)}
+...[truncated ${redacted.length - limit} chars]` : redacted,
+    redacted: redacted !== value,
+    truncated
+  };
+}
+function safeStringify(value) {
+  try {
+    return JSON.stringify(value, null, 2);
+  } catch {
+    return String(value);
+  }
+}
+function parseJsonOrText(value) {
+  try {
+    return JSON.parse(value);
+  } catch {
+    return value;
+  }
+}
+export {
+  sanitizeSessionEvent,
+  sanitizeSessionEvents,
+  toSessionEvent as toBailianSessionEvent
+};

package/package.json

@@ -0,0 +1,74 @@
+{
+  "name": "@openagentpack/sdk",
+  "version": "0.0.2-beta.0",
+  "description": "OpenAgentPack SDK (Node-compatible runtime)",
+  "license": "Apache-2.0",
+  "keywords": [
+    "ai-agents",
+    "infrastructure-as-code",
+    "sdk",
+    "mcp",
+    "typescript"
+  ],
+  "homepage": "https://github.com/modelstudioai/OpenAgentPack/tree/main/packages/sdk#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/modelstudioai/OpenAgentPack.git",
+    "directory": "packages/sdk"
+  },
+  "bugs": {
+    "url": "https://github.com/modelstudioai/OpenAgentPack/issues"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "bun": "./dist/index.js",
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./session-events": {
+      "bun": "./dist/session-events.js",
+      "types": "./dist/session-events.d.ts",
+      "import": "./dist/session-events.js"
+    },
+    "./scan-lifecycle": {
+      "bun": "./dist/scan-lifecycle.js",
+      "types": "./dist/scan-lifecycle.d.ts",
+      "import": "./dist/scan-lifecycle.js"
+    },
+    "./file-lifecycle": {
+      "bun": "./dist/file-lifecycle.js",
+      "types": "./dist/file-lifecycle.d.ts",
+      "import": "./dist/file-lifecycle.js"
+    }
+  },
+  "files": [
+    "dist",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "bun test",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "jszip": "^3.10.1",
+    "yaml": "^2.9.0",
+    "zod": "^4.4.3"
+  },
+  "devDependencies": {
+    "@types/bun": "^1.3.14",
+    "typescript": "^6.0.3"
+  }
+}