@pellux/goodvibes-sdk 0.21.30 → 0.21.34

package/dist/_internal/platform/tools/worklist/index.js

@@ -2,6 +2,7 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { dirname } from 'node:path';
 import { resolveScopedDirectory } from '../../runtime/surface-root.js';
 import { WORKLIST_TOOL_SCHEMA } from './schema.js';
+import { toRecord } from '../../utils/record-coerce.js';
 function summarizeWorklist(record) {
     const openCount = record.items.filter((item) => item.status === 'open').length;
     const doneCount = record.items.filter((item) => item.status === 'done').length;
@@ -41,7 +42,7 @@ export function createWorklistTool(options) {
         definition: {
             name: 'worklist',
             description: 'Manage durable worklists and checklist items for execution planning and follow-up.',
-            parameters: WORKLIST_TOOL_SCHEMA,
+            parameters: toRecord(WORKLIST_TOOL_SCHEMA),
             sideEffects: ['workflow', 'state'],
             concurrency: 'serial',
         },

package/dist/_internal/platform/types/errors.d.ts

@@ -1,3 +1,4 @@
+import { GoodVibesSdkError } from '../../errors/index.js';
 /** SDK-owned platform module. This implementation is maintained in goodvibes-sdk. */
 /** HTTP status codes that indicate transient failures eligible for retry. Single source of truth. */
 export declare const RETRYABLE_STATUS_CODES: readonly number[];
@@ -22,48 +23,49 @@ export interface ProviderErrorOptions extends AppErrorOptions {
     readonly statusCode?: number;
 }
 /** Base class for all application errors. Provides a machine-readable code and recoverability hint. */
-export declare class AppError extends Error {
+export declare class AppError extends GoodVibesSdkError {
     readonly code: string;
     readonly recoverable: boolean;
+    /** HTTP status code (backward-compat alias for `status`). */
     readonly statusCode?: number;
-    readonly category?: ErrorCategory;
+    /** Human-readable guidance (backward-compat alias for `hint`). */
     readonly guidance?: string;
+    /** Additional detail string not present on GoodVibesSdkError. */
     readonly detail?: string;
-    readonly source?: ErrorSource;
-    readonly provider?: string;
-    readonly operation?: string;
-    readonly phase?: string;
-    readonly requestId?: string;
-    readonly providerCode?: string;
-    readonly providerType?: string;
-    readonly retryAfterMs?: number;
+    /** Raw provider message before normalisation. */
     readonly rawMessage?: string;
     constructor(message: string, code: string, recoverable: boolean, options?: AppErrorOptions);
 }
 /** Thrown when configuration is invalid or cannot be loaded. Non-recoverable. */
 export declare class ConfigError extends AppError {
+    readonly code: 'CONFIG_ERROR';
     constructor(message: string);
 }
 /** Thrown when an LLM provider API call fails. Recoverable when statusCode is in RETRYABLE_STATUS_CODES. */
 export declare class ProviderError extends AppError {
+    readonly code: 'PROVIDER_ERROR';
     constructor(message: string, statusCode?: number);
     constructor(message: string, options?: ProviderErrorOptions);
 }
 /** Thrown when a tool execution fails. Recoverable by default. */
 export declare class ToolError extends AppError {
     readonly toolName: string;
+    readonly code: 'TOOL_ERROR';
     constructor(message: string, toolName: string);
 }
 /** Thrown for ACP (Agent Control Protocol) errors. Recoverable by default. */
 export declare class AcpError extends AppError {
+    readonly code: 'ACP_ERROR';
     constructor(message: string);
 }
 /** Thrown when an operation is denied due to insufficient permissions. Non-recoverable. */
 export declare class PermissionError extends AppError {
+    readonly code: 'PERMISSION_DENIED';
     constructor(message: string);
 }
 /** Thrown when the renderer encounters a failure. Recoverable by default. */
 export declare class RenderError extends AppError {
+    readonly code: 'RENDER_ERROR';
     constructor(message: string);
 }
 /**

package/dist/_internal/platform/types/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/types/errors.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAErF,qGAAqG;AACrG,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAAoB,CAAC;AAEzE,MAAM,MAAM,aAAa,GACrB,gBAAgB,GAChB,eAAe,GACf,SAAS,GACT,YAAY,GACZ,SAAS,GACT,SAAS,GACT,aAAa,GACb,WAAW,GACX,YAAY,GACZ,MAAM,GACN,QAAQ,GACR,UAAU,GACV,SAAS,GACT,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,MAAM,WAAW,GACnB,UAAU,GACV,MAAM,GACN,WAAW,GACX,QAAQ,GACR,YAAY,GACZ,SAAS,GACT,QAAQ,GACR,KAAK,GACL,SAAS,CAAC;AAEd,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IAC3D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAgED,uGAAuG;AACvG,qBAAa,QAAS,SAAQ,KAAK;aAiBf,IAAI,EAAE,MAAM;aACZ,WAAW,EAAE,OAAO;IAjBtC,SAAgB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpC,SAAgB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzC,SAAgB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClC,SAAgB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChC,SAAgB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrC,SAAgB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClC,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnC,SAAgB,KAAK,CAAC,EAAE,MAAM,CAAC;IAC/B,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnC,SAAgB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtC,SAAgB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtC,SAAgB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtC,SAAgB,UAAU,CAAC,EAAE,MAAM,CAAC;gBAGlC,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,OAAO,EACpC,OAAO,GAAE,eAAoB;CAkBhC;AAED,iFAAiF;AACjF,qBAAa,WAAY,SAAQ,QAAQ;gBAC3B,OAAO,EAAE,MAAM;CAM5B;AAED,4GAA4G;AAC5G,qBAAa,aAAc,SAAQ,QAAQ;gBAC7B,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;gBACpC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB;CAoB5D;AAED,kEAAkE;AAClE,qBAAa,SAAU,SAAQ,QAAQ;aACQ,QAAQ,EAAE,MAAM;gBAAjD,OAAO,EAAE,MAAM,EAAkB,QAAQ,EAAE,MAAM;CAM9D;AAED,8EAA8E;AAC9E,qBAAa,QAAS,SAAQ,QAAQ;gBACxB,OAAO,EAAE,MAAM;CAK5B;AAED,2FAA2F;AAC3F,qBAAa,eAAgB,SAAQ,QAAQ;gBAC/B,OAAO,EAAE,MAAM;CAM5B;AAED,6EAA6E;AAC7E,qBAAa,WAAY,SAAQ,QAAQ;gBAC3B,OAAO,EAAE,MAAM;CAK5B;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAW7D;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAehE;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAQnE"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/types/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,qFAAqF;AAErF,qGAAqG;AACrG,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAAoB,CAAC;AAEzE,MAAM,MAAM,aAAa,GACrB,gBAAgB,GAChB,eAAe,GACf,SAAS,GACT,YAAY,GACZ,SAAS,GACT,SAAS,GACT,aAAa,GACb,WAAW,GACX,YAAY,GACZ,MAAM,GACN,QAAQ,GACR,UAAU,GACV,SAAS,GACT,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,MAAM,WAAW,GACnB,UAAU,GACV,MAAM,GACN,WAAW,GACX,QAAQ,GACR,YAAY,GACZ,SAAS,GACT,QAAQ,GACR,KAAK,GACL,SAAS,CAAC;AAEd,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IAC3D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAgED,uGAAuG;AACvG,qBAAa,QAAS,SAAQ,iBAAiB;aAY3B,IAAI,EAAE,MAAM;aACZ,WAAW,EAAE,OAAO;IAZtC,6DAA6D;IAC7D,SAAgB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpC,kEAAkE;IAClE,SAAgB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClC,iEAAiE;IACjE,SAAgB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChC,iDAAiD;IACjD,SAAgB,UAAU,CAAC,EAAE,MAAM,CAAC;gBAGlC,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,OAAO,EACpC,OAAO,GAAE,eAAoB;CAuBhC;AAED,iFAAiF;AACjF,qBAAa,WAAY,SAAQ,QAAQ;IACvC,SAAiB,IAAI,EAAE,cAAc,CAAC;gBAC1B,OAAO,EAAE,MAAM;CAM5B;AAED,4GAA4G;AAC5G,qBAAa,aAAc,SAAQ,QAAQ;IACzC,SAAiB,IAAI,EAAE,gBAAgB,CAAC;gBAC5B,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM;gBACpC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB;CAoB5D;AAED,kEAAkE;AAClE,qBAAa,SAAU,SAAQ,QAAQ;aAEQ,QAAQ,EAAE,MAAM;IAD7D,SAAiB,IAAI,EAAE,YAAY,CAAC;gBACxB,OAAO,EAAE,MAAM,EAAkB,QAAQ,EAAE,MAAM;CAM9D;AAED,8EAA8E;AAC9E,qBAAa,QAAS,SAAQ,QAAQ;IACpC,SAAiB,IAAI,EAAE,WAAW,CAAC;gBACvB,OAAO,EAAE,MAAM;CAK5B;AAED,2FAA2F;AAC3F,qBAAa,eAAgB,SAAQ,QAAQ;IAC3C,SAAiB,IAAI,EAAE,mBAAmB,CAAC;gBAC/B,OAAO,EAAE,MAAM;CAM5B;AAED,6EAA6E;AAC7E,qBAAa,WAAY,SAAQ,QAAQ;IACvC,SAAiB,IAAI,EAAE,cAAc,CAAC;gBAC1B,OAAO,EAAE,MAAM;CAK5B;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAW7D;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAehE;AAED;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAQnE"}

package/dist/_internal/platform/types/errors.js

@@ -1,3 +1,4 @@
+import { GoodVibesSdkError } from '../../errors/index.js';
 /** SDK-owned platform module. This implementation is maintained in goodvibes-sdk. */
 /** HTTP status codes that indicate transient failures eligible for retry. Single source of truth. */
 export const RETRYABLE_STATUS_CODES = [429, 500, 503];
@@ -78,39 +79,39 @@ function inferRetryAfterMs(message, statusCode, explicitRetryAfterMs) {
     return parseInt(match[1], 10) * 1000;
 }
 /** Base class for all application errors. Provides a machine-readable code and recoverability hint. */
-export class AppError extends Error {
+export class AppError extends GoodVibesSdkError {
     code;
     recoverable;
+    /** HTTP status code (backward-compat alias for `status`). */
     statusCode;
-    category;
+    /** Human-readable guidance (backward-compat alias for `hint`). */
     guidance;
+    /** Additional detail string not present on GoodVibesSdkError. */
     detail;
-    source;
-    provider;
-    operation;
-    phase;
-    requestId;
-    providerCode;
-    providerType;
-    retryAfterMs;
+    /** Raw provider message before normalisation. */
     rawMessage;
     constructor(message, code, recoverable, options = {}) {
-        super(message);
+        super(message, {
+            code,
+            recoverable,
+            category: options.category,
+            source: options.source,
+            status: options.statusCode,
+            hint: options.guidance,
+            provider: options.provider,
+            operation: options.operation,
+            phase: options.phase,
+            requestId: options.requestId,
+            providerCode: options.providerCode,
+            providerType: options.providerType,
+            retryAfterMs: options.retryAfterMs,
+        });
         this.code = code;
         this.recoverable = recoverable;
         this.name = this.constructor.name;
         this.statusCode = options.statusCode;
-        this.category = options.category;
         this.guidance = options.guidance;
         this.detail = options.detail;
-        this.source = options.source;
-        this.provider = options.provider;
-        this.operation = options.operation;
-        this.phase = options.phase;
-        this.requestId = options.requestId;
-        this.providerCode = options.providerCode;
-        this.providerType = options.providerType;
-        this.retryAfterMs = options.retryAfterMs;
         this.rawMessage = options.rawMessage;
     }
 }

package/dist/_internal/platform/utils/error-display.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error-display.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/utils/error-display.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,aAAa,EAAE,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,KAAK,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC9H,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAsBnF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,iCAAkC,SAAQ,oBAAoB;IAC7E,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAmJD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,yBAA8B,GAAG,eAAe,CA4CvG;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,yBAA8B,GAAG,MAAM,CAE9F;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,yBAA8B,GAAG,MAAM,CAU3F;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,yBAA8B,GAAG,yBAAyB,CAkBzH;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,iCAAsC,GAAG,aAAa,CA0D9G;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAEnF"}
+{"version":3,"file":"error-display.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/utils/error-display.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,aAAa,EAAE,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,KAAK,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC9H,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAuBnF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,iCAAkC,SAAQ,oBAAoB;IAC7E,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAmJD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,yBAA8B,GAAG,eAAe,CA6CvG;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,yBAA8B,GAAG,MAAM,CAE9F;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,yBAA8B,GAAG,MAAM,CAU3F;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,yBAA8B,GAAG,yBAAyB,CAkBzH;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,iCAAsC,GAAG,aAAa,CA0D9G;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAEnF"}

package/dist/_internal/platform/utils/error-display.js

@@ -1,4 +1,5 @@
 import { AppError, ProviderError } from '../types/errors.js';
+import { redactSensitiveData } from './redaction.js';
 const MAX_ERROR_LENGTH = 240;
 const NETWORK_ERROR_PATTERNS = [
     {
@@ -177,7 +178,8 @@ function extractErrorMessage(error) {
     return String(error);
 }
 export function normalizeError(error, options = {}) {
-    const rawMessage = extractErrorMessage(error);
+    // OBS-24: Redact Bearer tokens and API keys before any further processing.
+    const rawMessage = redactSensitiveData(extractErrorMessage(error));
     const statusCode = error instanceof AppError
         ? error.statusCode
         : error && typeof error === 'object' && 'statusCode' in error && typeof error.statusCode === 'number'
@@ -188,9 +190,9 @@ export function normalizeError(error, options = {}) {
     const provider = options.provider ?? (error instanceof AppError ? error.provider : undefined);
     const cleanedMessage = cleanMessage(rawMessage, options.fallbackMessage);
     const network = getNetworkErrorMessage(rawMessage, provider);
-    const category = error instanceof AppError && error.category
+    const category = (error instanceof AppError && error.category
         ? error.category
-        : network?.category ?? inferCategory(cleanedMessage, statusCode);
+        : network?.category ?? inferCategory(cleanedMessage, statusCode));
     const source = inferSource(error, options.source);
     const summary = buildSummary(network?.summary ?? cleanedMessage, {
         requestId: error instanceof AppError ? error.requestId : undefined,
@@ -256,7 +258,7 @@ export function toProviderError(error, options = {}) {
     if (error instanceof ProviderError) {
         return new ProviderError(error.message, {
             statusCode: error.statusCode ?? options.statusCode,
-            category: error.category ?? options.category,
+            category: (error.category ?? options.category),
             guidance: error.guidance ?? options.guidance,
             detail: error.detail ?? options.detail,
             source: 'provider',

package/dist/_internal/platform/utils/fetch-with-timeout.d.ts

@@ -1,3 +1,20 @@
+/**
+ * Sanitize a URL for logging: strip query params that might contain secrets.
+ * @internal Exported for testing only.
+ */
+export declare function sanitizeUrlForLog(url: string | URL | Request): string;
+/**
+ * instrumentedFetch — wraps the global fetch with structured OUTBOUND_HTTP logging.
+ *
+ * Use this in place of bare `fetch()` for non-streaming outbound HTTP calls where
+ * observability is required. For streaming calls (SSE/chat completions) where the
+ * caller already manages an AbortController, use fetch() directly — those streams
+ * manage their own lifecycle and do not benefit from this wrapper.
+ *
+ * @param url    - The URL or Request to fetch.
+ * @param init   - Standard RequestInit (optional).
+ */
+export declare function instrumentedFetch(url: string | URL | Request, init?: RequestInit): Promise<Response>;
 /**
  * fetchWithTimeout — wraps the global fetch with an AbortController timeout.
  *

package/dist/_internal/platform/utils/fetch-with-timeout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetch-with-timeout.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/utils/fetch-with-timeout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAC3B,IAAI,CAAC,EAAE,WAAW,EAClB,SAAS,SAAS,GACjB,OAAO,CAAC,QAAQ,CAAC,CAkBnB"}
+{"version":3,"file":"fetch-with-timeout.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/utils/fetch-with-timeout.ts"],"names":[],"mappings":"AAWA;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,GAAG,MAAM,CAarE;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAC3B,IAAI,CAAC,EAAE,WAAW,GACjB,OAAO,CAAC,QAAQ,CAAC,CAkBnB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAC3B,IAAI,CAAC,EAAE,WAAW,EAClB,SAAS,SAAS,GACjB,OAAO,CAAC,QAAQ,CAAC,CAkBnB"}

package/dist/_internal/platform/utils/fetch-with-timeout.js

@@ -1,3 +1,62 @@
+import { logger } from './logger.js';
+/**
+ * Sensitive query-parameter keys to strip from logged URLs.
+ * Values are replaced with "[redacted]" in OUTBOUND_HTTP log entries.
+ */
+const SENSITIVE_PARAMS = new Set([
+    'key', 'api_key', 'apikey', 'token', 'secret',
+    'access_token', 'apiToken', 'api-key',
+]);
+/**
+ * Sanitize a URL for logging: strip query params that might contain secrets.
+ * @internal Exported for testing only.
+ */
+export function sanitizeUrlForLog(url) {
+    try {
+        const raw = url instanceof Request ? url.url : String(url);
+        const parsed = new URL(raw);
+        for (const key of parsed.searchParams.keys()) {
+            if (SENSITIVE_PARAMS.has(key.toLowerCase())) {
+                parsed.searchParams.set(key, '[redacted]');
+            }
+        }
+        return `${parsed.origin}${parsed.pathname}${parsed.search ? parsed.search : ''}`;
+    }
+    catch {
+        return '[unparseable-url]';
+    }
+}
+/**
+ * instrumentedFetch — wraps the global fetch with structured OUTBOUND_HTTP logging.
+ *
+ * Use this in place of bare `fetch()` for non-streaming outbound HTTP calls where
+ * observability is required. For streaming calls (SSE/chat completions) where the
+ * caller already manages an AbortController, use fetch() directly — those streams
+ * manage their own lifecycle and do not benefit from this wrapper.
+ *
+ * @param url    - The URL or Request to fetch.
+ * @param init   - Standard RequestInit (optional).
+ */
+export async function instrumentedFetch(url, init) {
+    const startMs = Date.now();
+    const method = init?.method ?? 'GET';
+    const safeUrl = sanitizeUrlForLog(url);
+    let status = -1;
+    try {
+        const res = await fetch(url, init);
+        status = res.status;
+        return res;
+    }
+    finally {
+        logger.info('OUTBOUND_HTTP', {
+            type: 'OUTBOUND_HTTP',
+            method,
+            url: safeUrl,
+            status,
+            latencyMs: Date.now() - startMs,
+        });
+    }
+}
 /**
  * fetchWithTimeout — wraps the global fetch with an AbortController timeout.
  *

package/dist/_internal/platform/utils/record-coerce.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Widen an arbitrary value to a plain Record<string, unknown> for generic dispatch.
+ *
+ * Use this helper in place of the verbose double-cast idiom
+ * `value as unknown as Record<string, unknown>`. It is intentionally
+ * a thin cast — no runtime validation — because the call sites all operate on
+ * values that are structurally objects at runtime; the cast is only needed to
+ * satisfy TypeScript's type system at the generic-dispatch boundary.
+ */
+export declare function toRecord(value: unknown): Record<string, unknown>;
+//# sourceMappingURL=record-coerce.d.ts.map

package/dist/_internal/platform/utils/record-coerce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-coerce.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/utils/record-coerce.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEhE"}

package/dist/_internal/platform/utils/record-coerce.js

@@ -0,0 +1,12 @@
+/**
+ * Widen an arbitrary value to a plain Record<string, unknown> for generic dispatch.
+ *
+ * Use this helper in place of the verbose double-cast idiom
+ * `value as unknown as Record<string, unknown>`. It is intentionally
+ * a thin cast — no runtime validation — because the call sites all operate on
+ * values that are structurally objects at runtime; the cast is only needed to
+ * satisfy TypeScript's type system at the generic-dispatch boundary.
+ */
+export function toRecord(value) {
+    return value;
+}

package/dist/_internal/platform/utils/redaction.js

@@ -15,7 +15,7 @@ const REDACT_PATTERNS = [
     { pattern: /[A-Za-z]:\\Users\\[A-Za-z0-9_.-]+/g, replacement: 'C:\\Users\\[REDACTED]' },
 ];
 const SECRET_KEY_PATTERN = /(^|[_-])(authorization|token|secret|password|passwd|cookie|credential|api[_-]?key|access[_-]?token|refresh[_-]?token|session[_-]?(id|token)?)([_-]|$)/i;
-const CONTENT_KEY_PATTERN = /(^|[_-])(prompt|response|content|body|text|stdout|stderr|output|input|reasoning|transcript|command|arguments|query|detail|summary|message)([_-]|$)/i;
+const CONTENT_KEY_PATTERN = /(^|[_-])(prompt|response|content|accumulated|body|text|stdout|stderr|output|input|reasoning|transcript|command|arguments|query|detail|summary|message)([_-]|$)/i;
 function redactTextValue(value, key) {
     if (key && SECRET_KEY_PATTERN.test(key))
         return '[REDACTED]';

package/dist/_internal/platform/utils/ring-buffer.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Generic fixed-capacity ring buffer (circular buffer).
+ *
+ * All writes are O(1). When the buffer is full the oldest entry is silently
+ * evicted (FIFO). Reading all entries is O(n) where n ≤ capacity.
+ *
+ * This is the canonical ring-buffer utility for the SDK. Prefer this over
+ * ad-hoc implementations when bounded-memory queues are needed.
+ */
+/**
+ * A generic ring buffer with a fixed capacity.
+ *
+ * Entries are stored in insertion order. When the buffer is full the oldest
+ * entry is overwritten (FIFO eviction). All push operations are O(1).
+ */
+export declare class RingBuffer<T> {
+    private readonly _buf;
+    private _head;
+    private _count;
+    readonly capacity: number;
+    constructor(capacity: number);
+    /** Number of entries currently stored (≤ capacity). */
+    get size(): number;
+    /** True when the buffer holds at least one entry. */
+    get isEmpty(): boolean;
+    /**
+     * Push an entry into the buffer.
+     *
+     * If the buffer is full the oldest entry is evicted to make room.
+     * Always O(1).
+     */
+    push(item: T): void;
+    /**
+     * Return all entries in insertion order (oldest → newest).
+     *
+     * Allocates a new array of length `size` per call.
+     */
+    toArray(): T[];
+    /**
+     * Return the N most recent entries in insertion order (oldest → newest).
+     *
+     * If `n >= size` returns the same result as `toArray()`.
+     */
+    takeLast(n: number): T[];
+    /**
+     * Return the N most recent entries in reverse insertion order (newest → oldest).
+     *
+     * Useful for "latest first" display without an extra `.reverse()` call.
+     */
+    takeLastReversed(n: number): T[];
+    /** Remove all entries and reset internal state. Capacity is preserved. */
+    clear(): void;
+}
+//# sourceMappingURL=ring-buffer.d.ts.map

package/dist/_internal/platform/utils/ring-buffer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ring-buffer.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/utils/ring-buffer.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;GAKG;AACH,qBAAa,UAAU,CAAC,CAAC;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IACzC,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,MAAM,CAAK;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,QAAQ,EAAE,MAAM;IAM5B,uDAAuD;IACvD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,qDAAqD;IACrD,IAAI,OAAO,IAAI,OAAO,CAErB;IAED;;;;;OAKG;IACH,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI;IAMnB;;;;OAIG;IACH,OAAO,IAAI,CAAC,EAAE;IAUd;;;;OAIG;IACH,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE;IAMxB;;;;OAIG;IACH,gBAAgB,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE;IAYhC,0EAA0E;IAC1E,KAAK,IAAI,IAAI;CAKd"}

package/dist/_internal/platform/utils/ring-buffer.js

@@ -0,0 +1,96 @@
+/**
+ * Generic fixed-capacity ring buffer (circular buffer).
+ *
+ * All writes are O(1). When the buffer is full the oldest entry is silently
+ * evicted (FIFO). Reading all entries is O(n) where n ≤ capacity.
+ *
+ * This is the canonical ring-buffer utility for the SDK. Prefer this over
+ * ad-hoc implementations when bounded-memory queues are needed.
+ */
+/**
+ * A generic ring buffer with a fixed capacity.
+ *
+ * Entries are stored in insertion order. When the buffer is full the oldest
+ * entry is overwritten (FIFO eviction). All push operations are O(1).
+ */
+export class RingBuffer {
+    _buf;
+    _head = 0; // next-write slot
+    _count = 0; // current occupancy (≤ capacity)
+    capacity;
+    constructor(capacity) {
+        if (capacity < 1)
+            throw new RangeError(`RingBuffer capacity must be >= 1, got ${capacity}`);
+        this.capacity = capacity;
+        this._buf = new Array(capacity).fill(undefined);
+    }
+    /** Number of entries currently stored (≤ capacity). */
+    get size() {
+        return this._count;
+    }
+    /** True when the buffer holds at least one entry. */
+    get isEmpty() {
+        return this._count === 0;
+    }
+    /**
+     * Push an entry into the buffer.
+     *
+     * If the buffer is full the oldest entry is evicted to make room.
+     * Always O(1).
+     */
+    push(item) {
+        this._buf[this._head] = item;
+        this._head = (this._head + 1) % this.capacity;
+        if (this._count < this.capacity)
+            this._count++;
+    }
+    /**
+     * Return all entries in insertion order (oldest → newest).
+     *
+     * Allocates a new array of length `size` per call.
+     */
+    toArray() {
+        if (this._count === 0)
+            return [];
+        const result = new Array(this._count);
+        const oldest = this._count < this.capacity ? 0 : this._head;
+        for (let i = 0; i < this._count; i++) {
+            result[i] = this._buf[(oldest + i) % this.capacity];
+        }
+        return result;
+    }
+    /**
+     * Return the N most recent entries in insertion order (oldest → newest).
+     *
+     * If `n >= size` returns the same result as `toArray()`.
+     */
+    takeLast(n) {
+        if (n <= 0)
+            return [];
+        const all = this.toArray();
+        return n >= all.length ? all : all.slice(all.length - n);
+    }
+    /**
+     * Return the N most recent entries in reverse insertion order (newest → oldest).
+     *
+     * Useful for "latest first" display without an extra `.reverse()` call.
+     */
+    takeLastReversed(n) {
+        if (n <= 0)
+            return [];
+        const count = Math.min(n, this._count);
+        const result = new Array(count);
+        for (let i = 0; i < count; i++) {
+            // Walk backwards from head-1 (most recent write)
+            const idx = (this._head - 1 - i + this.capacity) % this.capacity;
+            result[i] = this._buf[idx];
+        }
+        return result;
+    }
+    /** Remove all entries and reset internal state. Capacity is preserved. */
+    clear() {
+        this._buf.fill(undefined);
+        this._head = 0;
+        this._count = 0;
+    }
+}

package/dist/_internal/platform/utils/shell-split.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Split a shell command string into an argument array.
+ * Handles double-quoted strings, single-quoted strings, and backslash escapes.
+ *
+ * @example
+ * shellSplit('echo hello world')      // ['echo', 'hello', 'world']
+ * shellSplit('echo "hello world"')    // ['echo', 'hello world']
+ * shellSplit('path/with\\ space')     // ['path/with space']
+ */
+export declare function shellSplit(input: string): string[];
+//# sourceMappingURL=shell-split.d.ts.map

package/dist/_internal/platform/utils/shell-split.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell-split.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/utils/shell-split.ts"],"names":[],"mappings":"AAaA;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CA8DlD"}

package/dist/_internal/platform/utils/shell-split.js

@@ -0,0 +1,83 @@
+// ---------------------------------------------------------------------------
+// shellSplit — POSIX-compatible word tokenizer
+// ---------------------------------------------------------------------------
+// Splits a shell command string into tokens, respecting:
+//   - Double-quoted strings: preserve spaces, process \\ and \" escapes
+//   - Single-quoted strings: preserve spaces, no escape processing
+//   - Backslash escapes outside quotes
+//   - Whitespace separation
+//
+// Does NOT support: subshell expansion, glob expansion, variable substitution.
+// Intended for splitting trigger action strings into argv arrays for Bun.spawn.
+// ---------------------------------------------------------------------------
+/**
+ * Split a shell command string into an argument array.
+ * Handles double-quoted strings, single-quoted strings, and backslash escapes.
+ *
+ * @example
+ * shellSplit('echo hello world')      // ['echo', 'hello', 'world']
+ * shellSplit('echo "hello world"')    // ['echo', 'hello world']
+ * shellSplit('path/with\\ space')     // ['path/with space']
+ */
+export function shellSplit(input) {
+    const tokens = [];
+    let i = 0;
+    const len = input.length;
+    while (i < len) {
+        // Skip leading whitespace between tokens
+        if (/\s/.test(input[i])) {
+            i++;
+            continue;
+        }
+        // Accumulate one token
+        let token = '';
+        while (i < len && !/\s/.test(input[i])) {
+            const ch = input[i];
+            if (ch === '"') {
+                // Double-quoted region: process \\ and \" escapes
+                i++;
+                while (i < len && input[i] !== '"') {
+                    if (input[i] === '\\' && i + 1 < len) {
+                        const next = input[i + 1];
+                        // Only process recognised escapes inside double quotes
+                        if (next === '"' || next === '\\') {
+                            token += next;
+                            i += 2;
+                        }
+                        else {
+                            token += input[i];
+                            i++;
+                        }
+                    }
+                    else {
+                        token += input[i];
+                        i++;
+                    }
+                }
+                i++; // consume closing "
+            }
+            else if (ch === "'") {
+                // Single-quoted region: no escape processing
+                i++;
+                while (i < len && input[i] !== "'") {
+                    token += input[i];
+                    i++;
+                }
+                i++; // consume closing '
+            }
+            else if (ch === '\\' && i + 1 < len) {
+                // Backslash escape outside quotes
+                token += input[i + 1];
+                i += 2;
+            }
+            else {
+                token += ch;
+                i++;
+            }
+        }
+        if (token.length > 0) {
+            tokens.push(token);
+        }
+    }
+    return tokens;
+}

package/dist/_internal/platform/version.js

@@ -1,6 +1,6 @@
 import { readFileSync } from 'node:fs';
 import { join } from 'node:path';
-let version = '0.21.30';
+let version = '0.21.31';
 try {
     const pkg = JSON.parse(readFileSync(join(import.meta.dir, '..', '..', 'package.json'), 'utf-8'));
     version = pkg.version ?? version;

package/dist/_internal/platform/voice/providers/deepgram.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deepgram.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/voice/providers/deepgram.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAkBjD,wBAAgB,sBAAsB,IAAI,aAAa,CAwDtD"}
+{"version":3,"file":"deepgram.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/voice/providers/deepgram.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAmBjD,wBAAgB,sBAAsB,IAAI,aAAa,CAwDtD"}

package/dist/_internal/platform/voice/providers/deepgram.js

@@ -1,4 +1,5 @@
 import { buildStatus, normalizeBaseUrl, readFirstEnv, resolveAudioInput, } from './shared.js';
+import { instrumentedFetch } from '../../utils/fetch-with-timeout.js';
 export function createDeepgramProvider() {
     const envVars = ['DEEPGRAM_API_KEY'];
     const baseUrlEnvVars = ['DEEPGRAM_BASE_URL', 'DEEPGRAM_API_BASE'];
@@ -25,7 +26,7 @@ export function createDeepgramProvider() {
             if (request.language?.trim())
                 url.searchParams.set('language', request.language.trim());
             url.searchParams.set('smart_format', 'true');
-            const response = await fetch(url, {
+            const response = await instrumentedFetch(url, {
                 method: 'POST',
                 headers: {
                     Authorization: `Token ${apiKey}`,

package/dist/_internal/platform/voice/providers/elevenlabs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"elevenlabs.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/voice/providers/elevenlabs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,aAAa,EAGd,MAAM,aAAa,CAAC;AAqGrB,wBAAgB,wBAAwB,IAAI,aAAa,CAkSxD"}
+{"version":3,"file":"elevenlabs.d.ts","sourceRoot":"","sources":["../../../../../src/_internal/platform/voice/providers/elevenlabs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,aAAa,EAGd,MAAM,aAAa,CAAC;AAsGrB,wBAAgB,wBAAwB,IAAI,aAAa,CAkSxD"}