@poolzin/pool-bot 2026.4.39 → 2026.4.41

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "2026.4.39",
-  "commit": "2ad61e6591b10f1337044aba4b549dc434af2593",
-  "builtAt": "2026-04-07T18:45:57.845Z"
+  "version": "2026.4.41",
+  "commit": "258285674de27bd59e66926b547cb27a311ff6a4",
+  "builtAt": "2026-04-08T01:55:26.000Z"
 }

package/dist/cli/models-cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"models-cli.d.ts","sourceRoot":"","sources":["../../src/cli/models-cli.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqCzC,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,QAgYjD"}
+{"version":3,"file":"models-cli.d.ts","sourceRoot":"","sources":["../../src/cli/models-cli.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA6CzC,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,QAwdjD"}

package/dist/cli/models-cli.js

@@ -1,4 +1,4 @@
-import { githubCopilotLoginCommand, modelsAliasesAddCommand, modelsAliasesListCommand, modelsAliasesRemoveCommand, modelsAuthAddCommand, modelsAuthLoginCommand, modelsAuthOrderClearCommand, modelsAuthOrderGetCommand, modelsAuthOrderSetCommand, modelsAuthPasteTokenCommand, modelsAuthSetupTokenCommand, modelsFallbacksAddCommand, modelsFallbacksClearCommand, modelsFallbacksListCommand, modelsFallbacksRemoveCommand, modelsImageFallbacksAddCommand, modelsImageFallbacksClearCommand, modelsImageFallbacksListCommand, modelsImageFallbacksRemoveCommand, modelsListCommand, modelsScanCommand, modelsSetCommand, modelsSetImageCommand, modelsStatusCommand, } from "../commands/models.js";
+import { githubCopilotLoginCommand, modelsAliasesAddCommand, modelsAliasesListCommand, modelsAliasesRemoveCommand, modelsAuthAddCommand, modelsAuthLoginCommand, modelsAuthOrderClearCommand, modelsAuthOrderGetCommand, modelsAuthOrderSetCommand, modelsAuthPasteTokenCommand, modelsAuthSetupTokenCommand, modelsFallbacksAddCommand, modelsFallbacksClearCommand, modelsFallbacksListCommand, modelsFallbacksRemoveCommand, modelsImageFallbacksAddCommand, modelsImageFallbacksClearCommand, modelsImageFallbacksListCommand, modelsImageFallbacksRemoveCommand, modelsListCommand, modelsMusicFallbacksAddCommand, modelsMusicFallbacksClearCommand, modelsMusicFallbacksListCommand, modelsMusicFallbacksRemoveCommand, modelsScanCommand, modelsSetCommand, modelsSetImageCommand, modelsStatusCommand, modelsVideoFallbacksAddCommand, modelsVideoFallbacksClearCommand, modelsVideoFallbacksListCommand, modelsVideoFallbacksRemoveCommand, } from "../commands/models.js";
 import { defaultRuntime } from "../runtime.js";
 import { formatDocsLink } from "../terminal/links.js";
 import { theme } from "../terminal/theme.js";
@@ -181,6 +181,84 @@ export function registerModelsCli(program) {
             await modelsImageFallbacksClearCommand(defaultRuntime);
         });
     });
+    const videoFallbacks = models
+        .command("video-fallbacks")
+        .description("Manage video generation model fallback list");
+    videoFallbacks
+        .command("list")
+        .description("List video fallback models")
+        .option("--json", "Output JSON", false)
+        .option("--plain", "Plain output", false)
+        .action(async (opts) => {
+        await runModelsCommand(async () => {
+            await modelsVideoFallbacksListCommand(opts, defaultRuntime);
+        });
+    });
+    videoFallbacks
+        .command("add")
+        .description("Add a video fallback model")
+        .argument("<model>", "Model id or alias")
+        .action(async (model) => {
+        await runModelsCommand(async () => {
+            await modelsVideoFallbacksAddCommand(model, defaultRuntime);
+        });
+    });
+    videoFallbacks
+        .command("remove")
+        .description("Remove a video fallback model")
+        .argument("<model>", "Model id or alias")
+        .action(async (model) => {
+        await runModelsCommand(async () => {
+            await modelsVideoFallbacksRemoveCommand(model, defaultRuntime);
+        });
+    });
+    videoFallbacks
+        .command("clear")
+        .description("Clear all video fallback models")
+        .action(async () => {
+        await runModelsCommand(async () => {
+            await modelsVideoFallbacksClearCommand(defaultRuntime);
+        });
+    });
+    const musicFallbacks = models
+        .command("music-fallbacks")
+        .description("Manage music generation model fallback list");
+    musicFallbacks
+        .command("list")
+        .description("List music fallback models")
+        .option("--json", "Output JSON", false)
+        .option("--plain", "Plain output", false)
+        .action(async (opts) => {
+        await runModelsCommand(async () => {
+            await modelsMusicFallbacksListCommand(opts, defaultRuntime);
+        });
+    });
+    musicFallbacks
+        .command("add")
+        .description("Add a music fallback model")
+        .argument("<model>", "Model id or alias")
+        .action(async (model) => {
+        await runModelsCommand(async () => {
+            await modelsMusicFallbacksAddCommand(model, defaultRuntime);
+        });
+    });
+    musicFallbacks
+        .command("remove")
+        .description("Remove a music fallback model")
+        .argument("<model>", "Model id or alias")
+        .action(async (model) => {
+        await runModelsCommand(async () => {
+            await modelsMusicFallbacksRemoveCommand(model, defaultRuntime);
+        });
+    });
+    musicFallbacks
+        .command("clear")
+        .description("Clear all music fallback models")
+        .action(async () => {
+        await runModelsCommand(async () => {
+            await modelsMusicFallbacksClearCommand(defaultRuntime);
+        });
+    });
     models
         .command("scan")
         .description("Scan OpenRouter free models for tools + images")

package/dist/cli/program/register.subclis.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register.subclis.d.ts","sourceRoot":"","sources":["../../../src/cli/program/register.subclis.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOzC,KAAK,eAAe,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAElE,KAAK,WAAW,GAAG;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,eAAe,CAAC;CAC3B,CAAC;AAuSF,wBAAgB,gBAAgB,IAAI,WAAW,EAAE,CAEhD;AAED,wBAAgB,gCAAgC,IAAI,MAAM,EAAE,CAE3D;AAED,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ3F;AAaD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAE,MAAM,EAAiB,QAkBrF"}
+{"version":3,"file":"register.subclis.d.ts","sourceRoot":"","sources":["../../../src/cli/program/register.subclis.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOzC,KAAK,eAAe,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AAElE,KAAK,WAAW,GAAG;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,eAAe,CAAC;CAC3B,CAAC;AAgTF,wBAAgB,gBAAgB,IAAI,WAAW,EAAE,CAEhD;AAED,wBAAgB,gCAAgC,IAAI,MAAM,EAAE,CAE3D;AAED,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ3F;AAaD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,GAAE,MAAM,EAAiB,QAkBrF"}

package/dist/cli/program/register.subclis.js

@@ -272,6 +272,15 @@ const entries = [
             mod.registerMCPCli(program);
         },
     },
+    {
+        name: "secret",
+        description: "Manage secrets and credentials securely",
+        hasSubcommands: true,
+        register: async (program) => {
+            const mod = await import("../secret-cli.js");
+            mod.registerSecretCli(program);
+        },
+    },
     {
         name: "completion",
         description: "Generate shell completion script",

package/dist/cli/secret-cli.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Secret Management CLI
+ *
+ * Securely manage API keys, tokens, and credentials.
+ * Integrates with 1Password skill for secure storage.
+ *
+ * Usage:
+ *   poolbot secret get <name>           # Get a secret (masked)
+ *   poolbot secret set <name>           # Set a secret (interactive)
+ *   poolbot secret rotate <name>        # Rotate a secret
+ *   poolbot secret validate <name>      # Validate a secret format
+ *   poolbot secret list                 # List all stored secrets
+ */
+import type { Command } from "commander";
+export declare function registerSecretCli(program: Command): void;
+//# sourceMappingURL=secret-cli.d.ts.map

package/dist/cli/secret-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-cli.d.ts","sourceRoot":"","sources":["../../src/cli/secret-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsFzC,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,QAwVjD"}

package/dist/cli/secret-cli.js

@@ -0,0 +1,378 @@
+/**
+ * Secret Management CLI
+ *
+ * Securely manage API keys, tokens, and credentials.
+ * Integrates with 1Password skill for secure storage.
+ *
+ * Usage:
+ *   poolbot secret get <name>           # Get a secret (masked)
+ *   poolbot secret set <name>           # Set a secret (interactive)
+ *   poolbot secret rotate <name>        # Rotate a secret
+ *   poolbot secret validate <name>      # Validate a secret format
+ *   poolbot secret list                 # List all stored secrets
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync } from "node:fs";
+import { join, dirname } from "node:path";
+import { createHash } from "node:crypto";
+import { defaultRuntime } from "../runtime.js";
+import { theme } from "../terminal/theme.js";
+import { danger, info, success } from "../globals.js";
+import { CONFIG_DIR } from "../utils.js";
+const SECRET_STORE_VERSION = 1;
+const SECRET_STORE_PATH = join(CONFIG_DIR, "secrets.json");
+function getSecretStorePath() {
+    return process.env.POOLBOT_SECRET_STORE ?? SECRET_STORE_PATH;
+}
+function loadSecretStore() {
+    const path = getSecretStorePath();
+    if (!existsSync(path)) {
+        return { version: SECRET_STORE_VERSION, secrets: {} };
+    }
+    try {
+        const content = readFileSync(path, "utf-8");
+        return JSON.parse(content);
+    }
+    catch {
+        return { version: SECRET_STORE_VERSION, secrets: {} };
+    }
+}
+function saveSecretStore(store) {
+    const path = getSecretStorePath();
+    const dir = dirname(path);
+    if (!existsSync(dir)) {
+        mkdirSync(dir, { recursive: true });
+    }
+    writeFileSync(path, JSON.stringify(store, null, 2) + "\n", { mode: 0o600 });
+}
+function hashSecret(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+function maskSecret(value) {
+    if (value.length <= 4)
+        return "****";
+    const visible = Math.max(2, Math.floor(value.length * 0.2));
+    return value.substring(0, visible) + "…";
+}
+function validateSecretName(name) {
+    if (!name || name.trim().length === 0) {
+        return "Secret name cannot be empty";
+    }
+    if (!/^[a-zA-Z][a-zA-Z0-9_-]*$/.test(name)) {
+        return "Secret name must start with a letter and contain only letters, numbers, underscores, or hyphens";
+    }
+    if (name.length > 64) {
+        return "Secret name must be 64 characters or less";
+    }
+    return null;
+}
+function validateSecretValue(value, _type) {
+    if (!value || value.trim().length === 0) {
+        return "Secret value cannot be empty";
+    }
+    if (value.length < 8) {
+        return "Secret value must be at least 8 characters";
+    }
+    return null;
+}
+export function registerSecretCli(program) {
+    const secret = program
+        .command("secret")
+        .description("Manage secrets and credentials securely")
+        .addHelpText("after", () => `\n${theme.muted("Security:")} Secrets are stored locally with SHA-256 hashes.\n` +
+        `${theme.muted("Tip:")} Use 1Password skill for production: ${theme.heading("poolbot skill use 1password")}\n`);
+    // secret list
+    secret
+        .command("list")
+        .description("List all stored secrets (names only, values masked)")
+        .option("--json", "Output JSON", false)
+        .action(async (opts) => {
+        const store = loadSecretStore();
+        const entries = Object.values(store.secrets);
+        if (opts.json) {
+            const output = entries.map((e) => ({
+                name: e.name,
+                type: e.type,
+                provider: e.provider,
+                createdAt: new Date(e.createdAt).toISOString(),
+                updatedAt: new Date(e.updatedAt).toISOString(),
+                expiresAt: e.expiresAt ? new Date(e.expiresAt).toISOString() : null,
+            }));
+            defaultRuntime.log(JSON.stringify(output, null, 2));
+            return;
+        }
+        defaultRuntime.log("");
+        defaultRuntime.log(theme.heading("Stored Secrets"));
+        defaultRuntime.log(theme.muted("─────────────────────────────────────────"));
+        if (entries.length === 0) {
+            defaultRuntime.log(info("No secrets stored. Use 'poolbot secret set <name>' to add one."));
+        }
+        else {
+            for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
+                const expires = entry.expiresAt
+                    ? new Date(entry.expiresAt).toISOString().split("T")[0]
+                    : "never";
+                defaultRuntime.log(`  ${theme.success("●")} ${entry.name} (${entry.type})${entry.provider ? ` [${entry.provider}]` : ""} - expires: ${expires}`);
+            }
+        }
+        defaultRuntime.log("");
+        defaultRuntime.log(theme.muted(`Total: ${entries.length} secrets`));
+    });
+    // secret get
+    secret
+        .command("get <name>")
+        .description("Get a secret value (masked by default)")
+        .option("--reveal", "Show full value (use with caution)", false)
+        .option("--json", "Output JSON", false)
+        .action(async (name, opts) => {
+        const validationError = validateSecretName(name);
+        if (validationError) {
+            defaultRuntime.log(danger(validationError));
+            defaultRuntime.exit(1);
+            return;
+        }
+        const store = loadSecretStore();
+        const entry = store.secrets[name];
+        if (!entry) {
+            defaultRuntime.log(danger(`Secret "${name}" not found.`));
+            defaultRuntime.log(info("Use 'poolbot secret list' to see available secrets."));
+            defaultRuntime.exit(1);
+            return;
+        }
+        if (opts.json) {
+            defaultRuntime.log(JSON.stringify({
+                name: entry.name,
+                type: entry.type,
+                provider: entry.provider,
+                masked: !opts.reveal,
+                value: opts.reveal ? "REVEALED" : maskSecret("dummy"),
+                createdAt: new Date(entry.createdAt).toISOString(),
+                updatedAt: new Date(entry.updatedAt).toISOString(),
+                expiresAt: entry.expiresAt ? new Date(entry.expiresAt).toISOString() : null,
+            }, null, 2));
+            return;
+        }
+        defaultRuntime.log("");
+        defaultRuntime.log(theme.heading(`Secret: ${entry.name}`));
+        defaultRuntime.log(theme.muted("─────────────────────────────────────────"));
+        defaultRuntime.log(`  Type: ${entry.type}`);
+        if (entry.provider) {
+            defaultRuntime.log(`  Provider: ${entry.provider}`);
+        }
+        defaultRuntime.log(`  Value: ${opts.reveal ? theme.error("REVEALED (should be in env var)") : maskSecret("dummy")}`);
+        defaultRuntime.log(`  Created: ${new Date(entry.createdAt).toLocaleDateString()}`);
+        defaultRuntime.log(`  Updated: ${new Date(entry.updatedAt).toLocaleDateString()}`);
+        if (entry.expiresAt) {
+            const isExpired = entry.expiresAt < Date.now();
+            defaultRuntime.log(`  Expires: ${isExpired ? theme.error("EXPIRED") : new Date(entry.expiresAt).toLocaleDateString()}`);
+        }
+        defaultRuntime.log("");
+        if (!opts.reveal) {
+            defaultRuntime.log(info("To use this secret, set it as an environment variable:\n" +
+                `  export ${name.toUpperCase()}="<value>"`));
+        }
+        else {
+            defaultRuntime.log(danger("⚠️  Secret revealed! Make sure you're in a secure environment."));
+        }
+    });
+    // secret set
+    secret
+        .command("set <name>")
+        .description("Set or update a secret (interactive)")
+        .option("--type <type>", "Secret type (api_key, token, password, other)", "api_key")
+        .option("--provider <name>", "Provider name (e.g., anthropic, openai)")
+        .option("--expires-in <duration>", "Expiry duration (e.g., 365d, 12h)")
+        .option("--value <value>", "Secret value (non-interactive; use with caution)")
+        .action(async (name, opts) => {
+        const validationError = validateSecretName(name);
+        if (validationError) {
+            defaultRuntime.log(danger(validationError));
+            defaultRuntime.exit(1);
+            return;
+        }
+        const type = opts.type;
+        const validTypes = ["api_key", "token", "password", "other"];
+        if (!validTypes.includes(type)) {
+            defaultRuntime.log(danger(`Invalid type: ${type}. Must be one of: ${validTypes.join(", ")}`));
+            defaultRuntime.exit(1);
+            return;
+        }
+        let value = opts.value;
+        if (!value) {
+            // Interactive mode - use prompt
+            defaultRuntime.log("");
+            defaultRuntime.log(theme.heading(`Setting secret: ${name}`));
+            defaultRuntime.log(theme.muted("─────────────────────────────────────────"));
+            // Note: In real implementation, use @clack/prompts for secure input
+            defaultRuntime.log(info("Enter secret value (will be hidden):"));
+            defaultRuntime.log(danger("Note: For security, use environment variable or 1Password in production."));
+            defaultRuntime.exit(1);
+            return;
+        }
+        const valueError = validateSecretValue(value, type);
+        if (valueError) {
+            defaultRuntime.log(danger(valueError));
+            defaultRuntime.exit(1);
+            return;
+        }
+        const store = loadSecretStore();
+        const now = Date.now();
+        const expiresAt = opts.expiresIn ? parseDuration(opts.expiresIn, now) : undefined;
+        const entry = {
+            name,
+            hash: hashSecret(value),
+            createdAt: store.secrets[name]?.createdAt || now,
+            updatedAt: now,
+            expiresAt,
+            provider: opts.provider,
+            type,
+        };
+        store.secrets[name] = entry;
+        saveSecretStore(store);
+        defaultRuntime.log("");
+        defaultRuntime.log(success(`Secret "${name}" saved successfully.`));
+        defaultRuntime.log(info("Store the value in your environment:"));
+        defaultRuntime.log(`  export ${name.toUpperCase()}="<value>"`);
+        if (expiresAt) {
+            defaultRuntime.log(info(`Expires: ${new Date(expiresAt).toLocaleDateString()}`));
+        }
+        defaultRuntime.log("");
+    });
+    // secret rotate
+    secret
+        .command("rotate <name>")
+        .description("Rotate a secret (mark for rotation)")
+        .option("--value <value>", "New secret value")
+        .action(async (name, opts) => {
+        const validationError = validateSecretName(name);
+        if (validationError) {
+            defaultRuntime.log(danger(validationError));
+            defaultRuntime.exit(1);
+            return;
+        }
+        const store = loadSecretStore();
+        const entry = store.secrets[name];
+        if (!entry) {
+            defaultRuntime.log(danger(`Secret "${name}" not found.`));
+            defaultRuntime.exit(1);
+            return;
+        }
+        if (!opts.value) {
+            defaultRuntime.log("");
+            defaultRuntime.log(theme.heading(`Rotating secret: ${name}`));
+            defaultRuntime.log(theme.muted("─────────────────────────────────────────"));
+            defaultRuntime.log(info("To rotate, provide new value:"));
+            defaultRuntime.log(`  poolbot secret rotate ${name} --value "<new-value>"`);
+            defaultRuntime.log("");
+            defaultRuntime.log(danger("⚠️  Make sure to update all services using this secret."));
+            defaultRuntime.exit(0);
+            return;
+        }
+        const valueError = validateSecretValue(opts.value, entry.type);
+        if (valueError) {
+            defaultRuntime.log(danger(valueError));
+            defaultRuntime.exit(1);
+            return;
+        }
+        entry.hash = hashSecret(opts.value);
+        entry.updatedAt = Date.now();
+        store.secrets[name] = entry;
+        saveSecretStore(store);
+        defaultRuntime.log("");
+        defaultRuntime.log(success(`Secret "${name}" rotated successfully.`));
+        defaultRuntime.log(danger("⚠️  Update all services using this secret immediately."));
+        defaultRuntime.log("");
+    });
+    // secret validate
+    secret
+        .command("validate <name>")
+        .description("Validate a secret format without revealing it")
+        .action(async (name) => {
+        const validationError = validateSecretName(name);
+        if (validationError) {
+            defaultRuntime.log(danger(validationError));
+            defaultRuntime.exit(1);
+            return;
+        }
+        const store = loadSecretStore();
+        const entry = store.secrets[name];
+        if (!entry) {
+            defaultRuntime.log(danger(`Secret "${name}" not found.`));
+            defaultRuntime.exit(1);
+            return;
+        }
+        defaultRuntime.log("");
+        defaultRuntime.log(theme.heading(`Validating secret: ${name}`));
+        defaultRuntime.log(theme.muted("─────────────────────────────────────────"));
+        const checks = [
+            { name: "Name format", pass: !validateSecretName(entry.name) },
+            { name: "Hash present", pass: entry.hash.length === 64 },
+            { name: "Created timestamp", pass: entry.createdAt > 0 },
+            { name: "Updated timestamp", pass: entry.updatedAt > 0 },
+        ];
+        if (entry.expiresAt) {
+            checks.push({ name: "Not expired", pass: entry.expiresAt > Date.now() });
+        }
+        let allPass = true;
+        for (const check of checks) {
+            const icon = check.pass ? theme.success("✓") : theme.error("✗");
+            defaultRuntime.log(`  ${icon} ${check.name}`);
+            if (!check.pass)
+                allPass = false;
+        }
+        defaultRuntime.log("");
+        if (allPass) {
+            defaultRuntime.log(success("All validation checks passed."));
+        }
+        else {
+            defaultRuntime.log(danger("Some validation checks failed."));
+            defaultRuntime.exit(1);
+        }
+    });
+    // secret delete
+    secret
+        .command("delete <name>")
+        .description("Delete a secret permanently")
+        .option("--yes", "Skip confirmation", false)
+        .action(async (name, opts) => {
+        const validationError = validateSecretName(name);
+        if (validationError) {
+            defaultRuntime.log(danger(validationError));
+            defaultRuntime.exit(1);
+            return;
+        }
+        const store = loadSecretStore();
+        if (!store.secrets[name]) {
+            defaultRuntime.log(danger(`Secret "${name}" not found.`));
+            defaultRuntime.exit(1);
+            return;
+        }
+        if (!opts.yes) {
+            defaultRuntime.log("");
+            defaultRuntime.log(danger(`⚠️  This will permanently delete secret "${name}"`));
+            defaultRuntime.log("This action cannot be undone.");
+            defaultRuntime.log("");
+            defaultRuntime.log(info("Use --yes to skip this confirmation."));
+            defaultRuntime.exit(1);
+            return;
+        }
+        delete store.secrets[name];
+        saveSecretStore(store);
+        defaultRuntime.log("");
+        defaultRuntime.log(success(`Secret "${name}" deleted successfully.`));
+        defaultRuntime.log("");
+    });
+}
+function parseDuration(duration, fromMs) {
+    const match = duration.match(/^(\d+)([smhdw])$/);
+    if (!match)
+        return undefined;
+    const value = parseInt(match[1], 10);
+    const unit = match[2];
+    const seconds = unit === "s" ? value :
+        unit === "m" ? value * 60 :
+            unit === "h" ? value * 3600 :
+                unit === "d" ? value * 86400 :
+                    unit === "w" ? value * 604800 :
+                        0;
+    return fromMs + (seconds * 1000);
+}

package/dist/commands/models/music-fallbacks.d.ts

@@ -0,0 +1,9 @@
+import type { RuntimeEnv } from "../../runtime.js";
+export declare function modelsMusicFallbacksListCommand(opts: {
+    json?: boolean;
+    plain?: boolean;
+}, runtime: RuntimeEnv): Promise<void>;
+export declare function modelsMusicFallbacksAddCommand(modelRaw: string, runtime: RuntimeEnv): Promise<void>;
+export declare function modelsMusicFallbacksRemoveCommand(modelRaw: string, runtime: RuntimeEnv): Promise<void>;
+export declare function modelsMusicFallbacksClearCommand(runtime: RuntimeEnv): Promise<void>;
+//# sourceMappingURL=music-fallbacks.d.ts.map

package/dist/commands/models/music-fallbacks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"music-fallbacks.d.ts","sourceRoot":"","sources":["../../../src/commands/models/music-fallbacks.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AASnD,wBAAsB,+BAA+B,CACnD,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,EACzC,OAAO,EAAE,UAAU,iBAqBpB;AAED,wBAAsB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,iBAgDzF;AAED,wBAAsB,iCAAiC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,iBA8C5F;AAED,wBAAsB,gCAAgC,CAAC,OAAO,EAAE,UAAU,iBAsBzE"}

package/dist/commands/models/music-fallbacks.js

@@ -0,0 +1,126 @@
+import { buildModelAliasIndex, resolveModelRefFromString } from "../../agents/model-selection.js";
+import { loadConfig } from "../../config/config.js";
+import { logConfigUpdated } from "../../config/logging.js";
+import { DEFAULT_PROVIDER, ensureFlagCompatibility, modelKey, resolveModelTarget, updateConfig, } from "./shared.js";
+export async function modelsMusicFallbacksListCommand(opts, runtime) {
+    ensureFlagCompatibility(opts);
+    const cfg = loadConfig();
+    const fallbacks = cfg.agents?.defaults?.musicGenerationModel?.fallbacks ?? [];
+    if (opts.json) {
+        runtime.log(JSON.stringify({ fallbacks }, null, 2));
+        return;
+    }
+    if (opts.plain) {
+        for (const entry of fallbacks)
+            runtime.log(entry);
+        return;
+    }
+    runtime.log(`Music fallbacks (${fallbacks.length}):`);
+    if (fallbacks.length === 0) {
+        runtime.log("- none");
+        return;
+    }
+    for (const entry of fallbacks)
+        runtime.log(`- ${entry}`);
+}
+export async function modelsMusicFallbacksAddCommand(modelRaw, runtime) {
+    const updated = await updateConfig((cfg) => {
+        const resolved = resolveModelTarget({ raw: modelRaw, cfg });
+        const targetKey = modelKey(resolved.provider, resolved.model);
+        const nextModels = { ...cfg.agents?.defaults?.models };
+        if (!nextModels[targetKey])
+            nextModels[targetKey] = {};
+        const aliasIndex = buildModelAliasIndex({
+            cfg,
+            defaultProvider: DEFAULT_PROVIDER,
+        });
+        const existing = cfg.agents?.defaults?.musicGenerationModel?.fallbacks ?? [];
+        const existingKeys = existing
+            .map((entry) => resolveModelRefFromString({
+            raw: String(entry ?? ""),
+            defaultProvider: DEFAULT_PROVIDER,
+            aliasIndex,
+        }))
+            .filter((entry) => Boolean(entry))
+            .map((entry) => modelKey(entry.ref.provider, entry.ref.model));
+        if (existingKeys.includes(targetKey))
+            return cfg;
+        const existingModel = cfg.agents?.defaults?.musicGenerationModel;
+        return {
+            ...cfg,
+            agents: {
+                ...cfg.agents,
+                defaults: {
+                    ...cfg.agents?.defaults,
+                    musicGenerationModel: {
+                        ...(existingModel?.primary ? { primary: existingModel.primary } : undefined),
+                        fallbacks: [...existing, targetKey],
+                    },
+                    models: nextModels,
+                },
+            },
+        };
+    });
+    logConfigUpdated(runtime);
+    runtime.log(`Music fallbacks: ${(updated.agents?.defaults?.musicGenerationModel?.fallbacks ?? []).join(", ")}`);
+}
+export async function modelsMusicFallbacksRemoveCommand(modelRaw, runtime) {
+    const updated = await updateConfig((cfg) => {
+        const resolved = resolveModelTarget({ raw: modelRaw, cfg });
+        const targetKey = modelKey(resolved.provider, resolved.model);
+        const aliasIndex = buildModelAliasIndex({
+            cfg,
+            defaultProvider: DEFAULT_PROVIDER,
+        });
+        const existing = cfg.agents?.defaults?.musicGenerationModel?.fallbacks ?? [];
+        const filtered = existing.filter((entry) => {
+            const resolvedEntry = resolveModelRefFromString({
+                raw: String(entry ?? ""),
+                defaultProvider: DEFAULT_PROVIDER,
+                aliasIndex,
+            });
+            if (!resolvedEntry)
+                return true;
+            return modelKey(resolvedEntry.ref.provider, resolvedEntry.ref.model) !== targetKey;
+        });
+        if (filtered.length === existing.length) {
+            throw new Error(`Music fallback not found: ${targetKey}`);
+        }
+        const existingModel = cfg.agents?.defaults?.musicGenerationModel;
+        return {
+            ...cfg,
+            agents: {
+                ...cfg.agents,
+                defaults: {
+                    ...cfg.agents?.defaults,
+                    musicGenerationModel: {
+                        ...(existingModel?.primary ? { primary: existingModel.primary } : undefined),
+                        fallbacks: filtered,
+                    },
+                },
+            },
+        };
+    });
+    logConfigUpdated(runtime);
+    runtime.log(`Music fallbacks: ${(updated.agents?.defaults?.musicGenerationModel?.fallbacks ?? []).join(", ")}`);
+}
+export async function modelsMusicFallbacksClearCommand(runtime) {
+    await updateConfig((cfg) => {
+        const existingModel = cfg.agents?.defaults?.musicGenerationModel;
+        return {
+            ...cfg,
+            agents: {
+                ...cfg.agents,
+                defaults: {
+                    ...cfg.agents?.defaults,
+                    musicGenerationModel: {
+                        ...(existingModel?.primary ? { primary: existingModel.primary } : undefined),
+                        fallbacks: [],
+                    },
+                },
+            },
+        };
+    });
+    logConfigUpdated(runtime);
+    runtime.log("Music fallback list cleared.");
+}

package/dist/commands/models/video-fallbacks.d.ts

@@ -0,0 +1,9 @@
+import type { RuntimeEnv } from "../../runtime.js";
+export declare function modelsVideoFallbacksListCommand(opts: {
+    json?: boolean;
+    plain?: boolean;
+}, runtime: RuntimeEnv): Promise<void>;
+export declare function modelsVideoFallbacksAddCommand(modelRaw: string, runtime: RuntimeEnv): Promise<void>;
+export declare function modelsVideoFallbacksRemoveCommand(modelRaw: string, runtime: RuntimeEnv): Promise<void>;
+export declare function modelsVideoFallbacksClearCommand(runtime: RuntimeEnv): Promise<void>;
+//# sourceMappingURL=video-fallbacks.d.ts.map

package/dist/commands/models/video-fallbacks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"video-fallbacks.d.ts","sourceRoot":"","sources":["../../../src/commands/models/video-fallbacks.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AASnD,wBAAsB,+BAA+B,CACnD,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,EACzC,OAAO,EAAE,UAAU,iBAqBpB;AAED,wBAAsB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,iBAgDzF;AAED,wBAAsB,iCAAiC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,iBA8C5F;AAED,wBAAsB,gCAAgC,CAAC,OAAO,EAAE,UAAU,iBAsBzE"}

package/dist/commands/models/video-fallbacks.js

@@ -0,0 +1,126 @@
+import { buildModelAliasIndex, resolveModelRefFromString } from "../../agents/model-selection.js";
+import { loadConfig } from "../../config/config.js";
+import { logConfigUpdated } from "../../config/logging.js";
+import { DEFAULT_PROVIDER, ensureFlagCompatibility, modelKey, resolveModelTarget, updateConfig, } from "./shared.js";
+export async function modelsVideoFallbacksListCommand(opts, runtime) {
+    ensureFlagCompatibility(opts);
+    const cfg = loadConfig();
+    const fallbacks = cfg.agents?.defaults?.videoGenerationModel?.fallbacks ?? [];
+    if (opts.json) {
+        runtime.log(JSON.stringify({ fallbacks }, null, 2));
+        return;
+    }
+    if (opts.plain) {
+        for (const entry of fallbacks)
+            runtime.log(entry);
+        return;
+    }
+    runtime.log(`Video fallbacks (${fallbacks.length}):`);
+    if (fallbacks.length === 0) {
+        runtime.log("- none");
+        return;
+    }
+    for (const entry of fallbacks)
+        runtime.log(`- ${entry}`);
+}
+export async function modelsVideoFallbacksAddCommand(modelRaw, runtime) {
+    const updated = await updateConfig((cfg) => {
+        const resolved = resolveModelTarget({ raw: modelRaw, cfg });
+        const targetKey = modelKey(resolved.provider, resolved.model);
+        const nextModels = { ...cfg.agents?.defaults?.models };
+        if (!nextModels[targetKey])
+            nextModels[targetKey] = {};
+        const aliasIndex = buildModelAliasIndex({
+            cfg,
+            defaultProvider: DEFAULT_PROVIDER,
+        });
+        const existing = cfg.agents?.defaults?.videoGenerationModel?.fallbacks ?? [];
+        const existingKeys = existing
+            .map((entry) => resolveModelRefFromString({
+            raw: String(entry ?? ""),
+            defaultProvider: DEFAULT_PROVIDER,
+            aliasIndex,
+        }))
+            .filter((entry) => Boolean(entry))
+            .map((entry) => modelKey(entry.ref.provider, entry.ref.model));
+        if (existingKeys.includes(targetKey))
+            return cfg;
+        const existingModel = cfg.agents?.defaults?.videoGenerationModel;
+        return {
+            ...cfg,
+            agents: {
+                ...cfg.agents,
+                defaults: {
+                    ...cfg.agents?.defaults,
+                    videoGenerationModel: {
+                        ...(existingModel?.primary ? { primary: existingModel.primary } : undefined),
+                        fallbacks: [...existing, targetKey],
+                    },
+                    models: nextModels,
+                },
+            },
+        };
+    });
+    logConfigUpdated(runtime);
+    runtime.log(`Video fallbacks: ${(updated.agents?.defaults?.videoGenerationModel?.fallbacks ?? []).join(", ")}`);
+}
+export async function modelsVideoFallbacksRemoveCommand(modelRaw, runtime) {
+    const updated = await updateConfig((cfg) => {
+        const resolved = resolveModelTarget({ raw: modelRaw, cfg });
+        const targetKey = modelKey(resolved.provider, resolved.model);
+        const aliasIndex = buildModelAliasIndex({
+            cfg,
+            defaultProvider: DEFAULT_PROVIDER,
+        });
+        const existing = cfg.agents?.defaults?.videoGenerationModel?.fallbacks ?? [];
+        const filtered = existing.filter((entry) => {
+            const resolvedEntry = resolveModelRefFromString({
+                raw: String(entry ?? ""),
+                defaultProvider: DEFAULT_PROVIDER,
+                aliasIndex,
+            });
+            if (!resolvedEntry)
+                return true;
+            return modelKey(resolvedEntry.ref.provider, resolvedEntry.ref.model) !== targetKey;
+        });
+        if (filtered.length === existing.length) {
+            throw new Error(`Video fallback not found: ${targetKey}`);
+        }
+        const existingModel = cfg.agents?.defaults?.videoGenerationModel;
+        return {
+            ...cfg,
+            agents: {
+                ...cfg.agents,
+                defaults: {
+                    ...cfg.agents?.defaults,
+                    videoGenerationModel: {
+                        ...(existingModel?.primary ? { primary: existingModel.primary } : undefined),
+                        fallbacks: filtered,
+                    },
+                },
+            },
+        };
+    });
+    logConfigUpdated(runtime);
+    runtime.log(`Video fallbacks: ${(updated.agents?.defaults?.videoGenerationModel?.fallbacks ?? []).join(", ")}`);
+}
+export async function modelsVideoFallbacksClearCommand(runtime) {
+    await updateConfig((cfg) => {
+        const existingModel = cfg.agents?.defaults?.videoGenerationModel;
+        return {
+            ...cfg,
+            agents: {
+                ...cfg.agents,
+                defaults: {
+                    ...cfg.agents?.defaults,
+                    videoGenerationModel: {
+                        ...(existingModel?.primary ? { primary: existingModel.primary } : undefined),
+                        fallbacks: [],
+                    },
+                },
+            },
+        };
+    });
+    logConfigUpdated(runtime);
+    runtime.log("Video fallback list cleared.");
+}

package/dist/commands/models.d.ts

@@ -4,6 +4,8 @@ export { modelsAuthAddCommand, modelsAuthLoginCommand, modelsAuthPasteTokenComma
 export { modelsAuthOrderClearCommand, modelsAuthOrderGetCommand, modelsAuthOrderSetCommand, } from "./models/auth-order.js";
 export { modelsFallbacksAddCommand, modelsFallbacksClearCommand, modelsFallbacksListCommand, modelsFallbacksRemoveCommand, } from "./models/fallbacks.js";
 export { modelsImageFallbacksAddCommand, modelsImageFallbacksClearCommand, modelsImageFallbacksListCommand, modelsImageFallbacksRemoveCommand, } from "./models/image-fallbacks.js";
+export { modelsVideoFallbacksAddCommand, modelsVideoFallbacksClearCommand, modelsVideoFallbacksListCommand, modelsVideoFallbacksRemoveCommand, } from "./models/video-fallbacks.js";
+export { modelsMusicFallbacksAddCommand, modelsMusicFallbacksClearCommand, modelsMusicFallbacksListCommand, modelsMusicFallbacksRemoveCommand, } from "./models/music-fallbacks.js";
 export { modelsListCommand, modelsStatusCommand } from "./models/list.js";
 export { modelsScanCommand } from "./models/scan.js";
 export { modelsSetCommand } from "./models/set.js";

package/dist/commands/models.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/commands/models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,EAChC,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/commands/models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,2BAA2B,EAC3B,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,EAChC,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,EAChC,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,EAChC,+BAA+B,EAC/B,iCAAiC,GAClC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/commands/models.js

@@ -4,6 +4,8 @@ export { modelsAuthAddCommand, modelsAuthLoginCommand, modelsAuthPasteTokenComma
 export { modelsAuthOrderClearCommand, modelsAuthOrderGetCommand, modelsAuthOrderSetCommand, } from "./models/auth-order.js";
 export { modelsFallbacksAddCommand, modelsFallbacksClearCommand, modelsFallbacksListCommand, modelsFallbacksRemoveCommand, } from "./models/fallbacks.js";
 export { modelsImageFallbacksAddCommand, modelsImageFallbacksClearCommand, modelsImageFallbacksListCommand, modelsImageFallbacksRemoveCommand, } from "./models/image-fallbacks.js";
+export { modelsVideoFallbacksAddCommand, modelsVideoFallbacksClearCommand, modelsVideoFallbacksListCommand, modelsVideoFallbacksRemoveCommand, } from "./models/video-fallbacks.js";
+export { modelsMusicFallbacksAddCommand, modelsMusicFallbacksClearCommand, modelsMusicFallbacksListCommand, modelsMusicFallbacksRemoveCommand, } from "./models/music-fallbacks.js";
 export { modelsListCommand, modelsStatusCommand } from "./models/list.js";
 export { modelsScanCommand } from "./models/scan.js";
 export { modelsSetCommand } from "./models/set.js";

package/dist/config/types.agent-defaults.d.ts

@@ -118,6 +118,10 @@ export type AgentDefaultsConfig = {
     imageModel?: AgentModelListConfig;
     /** Optional PDF-capable model and fallbacks (provider/model). */
     pdfModel?: AgentModelListConfig;
+    /** Optional video generation model and fallbacks (provider/model). */
+    videoGenerationModel?: AgentModelListConfig;
+    /** Optional music generation model and fallbacks (provider/model). */
+    musicGenerationModel?: AgentModelListConfig;
     /** Model catalog with optional aliases (full provider/model keys). */
     models?: Record<string, AgentModelEntryConfig>;
     /** Agent working directory (preferred). Used as the default cwd for agent runs. */

package/dist/config/types.agent-defaults.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.agent-defaults.d.ts","sourceRoot":"","sources":["../../src/config/types.agent-defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,KAAK,EACV,yBAAyB,EACzB,4BAA4B,EAC5B,gBAAgB,EAChB,UAAU,EACX,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EACV,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,kGAAkG;IAClG,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,CAAC,EAAE,KAAK,GAAG,WAAW,CAAC;IAC3B,8EAA8E;IAC9E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,KAAK,CAAC,EAAE;QACN,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,SAAS,CAAC,EAAE;QACV,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACnC,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACzC,wCAAwC;IACxC,KAAK,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC;IACxB,mEAAmE;IACnE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,gCAAgC;IAChC,WAAW,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,MAAM,CAAC;IAC7C,sDAAsD;IACtD,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,uCAAuC;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kDAAkD;IAClD,gBAAgB,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IACxC,kCAAkC;IAClC,gBAAgB,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;IAChD,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,SAAS,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC9B,mCAAmC;IACnC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,uEAAuE;IACvE,WAAW,CAAC,EAAE;QACZ,yDAAyD;QACzD,QAAQ,CAAC,EAAE;YACT,uCAAuC;YACvC,KAAK,CAAC,EAAE;gBACN,+DAA+D;gBAC/D,iBAAiB,CAAC,EAAE,MAAM,CAAC;gBAC3B,sEAAsE;gBACtE,oBAAoB,CAAC,EAAE,MAAM,CAAC;gBAC9B,iDAAiD;gBACjD,KAAK,CAAC,EAAE,MAAM,CAAC;gBACf,iDAAiD;gBACjD,KAAK,CAAC,EAAE,MAAM,CAAC;aAChB,CAAC;YACF,uBAAuB;YACvB,MAAM,CAAC,EAAE;gBACP,+DAA+D;gBAC/D,iBAAiB,CAAC,EAAE,MAAM,CAAC;gBAC3B,sEAAsE;gBACtE,oBAAoB,CAAC,EAAE,MAAM,CAAC;gBAC9B,iDAAiD;gBACjD,KAAK,CAAC,EAAE,MAAM,CAAC;gBACf,iDAAiD;gBACjD,KAAK,CAAC,EAAE,MAAM,CAAC;aAChB,CAAC;SACH,CAAC;KACH,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,oDAAoD;IACpD,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAC7B,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,4FAA4F;IAC5F,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,mEAAmE;IACnE,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAClC,iEAAiE;IACjE,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAC/C,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,8FAA8F;IAC9F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IAClC;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;OAEG;IACH,iBAAiB,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC;IACjC;;OAEG;IACH,eAAe,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC;IAC/B,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC/C,iFAAiF;IACjF,cAAc,CAAC,EAAE,yBAAyB,CAAC;IAC3C,kEAAkE;IAClE,UAAU,CAAC,EAAE,qBAAqB,CAAC;IACnC,0EAA0E;IAC1E,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,kEAAkE;IAClE,eAAe,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;IAC1E,mEAAmE;IACnE,cAAc,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,MAAM,CAAC;IACvC,qEAAqE;IACrE,eAAe,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,MAAM,CAAC;IAChD,iEAAiE;IACjE,qBAAqB,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;IACrC;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,UAAU,GAAG,aAAa,CAAC;IACjD,0FAA0F;IAC1F,mBAAmB,CAAC,EAAE,yBAAyB,CAAC;IAChD;;;OAGG;IACH,sBAAsB,CAAC,EAAE,4BAA4B,CAAC;IACtD,8CAA8C;IAC9C,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qGAAqG;IACrG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,oEAAoE;IACpE,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,0CAA0C;IAC1C,SAAS,CAAC,EAAE;QACV,iFAAiF;QACjF,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,yFAAyF;QACzF,WAAW,CAAC,EAAE;YACZ,0CAA0C;YAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,oEAAoE;YACpE,GAAG,CAAC,EAAE,MAAM,CAAC;YACb,iFAAiF;YACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;SACnB,CAAC;QACF,iDAAiD;QACjD,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,uEAAuE;QACvE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,yDAAyD;QACzD,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;QACrC,6EAA6E;QAC7E,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,sDAAsD;QACtD,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,kOAAkO;QAClO,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,0EAA0E;QAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,kEAAkE;QAClE,yBAAyB,CAAC,EAAE,OAAO,CAAC;QACpC;;;;;WAKG;QACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;IACF,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uDAAuD;IACvD,SAAS,CAAC,EAAE;QACV,2EAA2E;QAC3E,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,+FAA+F;QAC/F,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,yFAAyF;QACzF,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,qEAAqE;QACrE,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,sFAAsF;QACtF,KAAK,CAAC,EAAE,MAAM,GAAG;YAAE,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QAC5D,2FAA2F;QAC3F,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,uDAAuD;IACvD,OAAO,CAAC,EAAE;QACR,sCAAsC;QACtC,IAAI,CAAC,EAAE,KAAK,GAAG,UAAU,GAAG,KAAK,CAAC;QAClC;;;;;WAKG;QACH,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;QACvC;;;;WAIG;QACH,sBAAsB,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC;QAC3C,uDAAuD;QACvD,KAAK,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;QACvC,yEAAyE;QACzE,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,6CAA6C;QAC7C,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,wCAAwC;QACxC,MAAM,CAAC,EAAE,qBAAqB,CAAC;QAC/B,2CAA2C;QAC3C,OAAO,CAAC,EAAE,sBAAsB,CAAC;QACjC,qCAAqC;QACrC,KAAK,CAAC,EAAE,oBAAoB,CAAC;KAC9B,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,WAAW,CAAC;AAE1D,MAAM,MAAM,qBAAqB,GAAG;IAClC,qCAAqC;IACrC,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,+FAA+F;IAC/F,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,WAAW,CAAC,EAAE,gCAAgC,CAAC;IAC/C,gEAAgE;IAChE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,8DAA8D;IAC9D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gGAAgG;IAChG,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC"}
+{"version":3,"file":"types.agent-defaults.d.ts","sourceRoot":"","sources":["../../src/config/types.agent-defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,KAAK,EACV,yBAAyB,EACzB,4BAA4B,EAC5B,gBAAgB,EAChB,UAAU,EACX,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EACV,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,MAAM,MAAM,qBAAqB,GAAG;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,kGAAkG;IAClG,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,IAAI,CAAC,EAAE,KAAK,GAAG,WAAW,CAAC;IAC3B,8EAA8E;IAC9E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,KAAK,CAAC,EAAE;QACN,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;IACF,QAAQ,CAAC,EAAE;QACT,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,SAAS,CAAC,EAAE;QACV,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACnC,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACzC,wCAAwC;IACxC,KAAK,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC;IACxB,mEAAmE;IACnE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,gCAAgC;IAChC,WAAW,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,MAAM,CAAC;IAC7C,sDAAsD;IACtD,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,uCAAuC;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kDAAkD;IAClD,gBAAgB,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IACxC,kCAAkC;IAClC,gBAAgB,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;IAChD,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,SAAS,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC9B,mCAAmC;IACnC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,uEAAuE;IACvE,WAAW,CAAC,EAAE;QACZ,yDAAyD;QACzD,QAAQ,CAAC,EAAE;YACT,uCAAuC;YACvC,KAAK,CAAC,EAAE;gBACN,+DAA+D;gBAC/D,iBAAiB,CAAC,EAAE,MAAM,CAAC;gBAC3B,sEAAsE;gBACtE,oBAAoB,CAAC,EAAE,MAAM,CAAC;gBAC9B,iDAAiD;gBACjD,KAAK,CAAC,EAAE,MAAM,CAAC;gBACf,iDAAiD;gBACjD,KAAK,CAAC,EAAE,MAAM,CAAC;aAChB,CAAC;YACF,uBAAuB;YACvB,MAAM,CAAC,EAAE;gBACP,+DAA+D;gBAC/D,iBAAiB,CAAC,EAAE,MAAM,CAAC;gBAC3B,sEAAsE;gBACtE,oBAAoB,CAAC,EAAE,MAAM,CAAC;gBAC9B,iDAAiD;gBACjD,KAAK,CAAC,EAAE,MAAM,CAAC;gBACf,iDAAiD;gBACjD,KAAK,CAAC,EAAE,MAAM,CAAC;aAChB,CAAC;SACH,CAAC;KACH,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,oDAAoD;IACpD,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAC7B,uEAAuE;IACvE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,4FAA4F;IAC5F,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,mEAAmE;IACnE,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAClC,iEAAiE;IACjE,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,sEAAsE;IACtE,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,sEAAsE;IACtE,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAC5C,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAC/C,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,6EAA6E;IAC7E,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,8FAA8F;IAC9F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IAClC;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;OAEG;IACH,iBAAiB,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC;IACjC;;OAEG;IACH,eAAe,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC;IAC/B,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC/C,iFAAiF;IACjF,cAAc,CAAC,EAAE,yBAAyB,CAAC;IAC3C,kEAAkE;IAClE,UAAU,CAAC,EAAE,qBAAqB,CAAC;IACnC,0EAA0E;IAC1E,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,kEAAkE;IAClE,eAAe,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;IAC1E,mEAAmE;IACnE,cAAc,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,MAAM,CAAC;IACvC,qEAAqE;IACrE,eAAe,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,MAAM,CAAC;IAChD,iEAAiE;IACjE,qBAAqB,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;IACrC;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,UAAU,GAAG,aAAa,CAAC;IACjD,0FAA0F;IAC1F,mBAAmB,CAAC,EAAE,yBAAyB,CAAC;IAChD;;;OAGG;IACH,sBAAsB,CAAC,EAAE,4BAA4B,CAAC;IACtD,8CAA8C;IAC9C,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qGAAqG;IACrG,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,oEAAoE;IACpE,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,0CAA0C;IAC1C,SAAS,CAAC,EAAE;QACV,iFAAiF;QACjF,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,yFAAyF;QACzF,WAAW,CAAC,EAAE;YACZ,0CAA0C;YAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;YACf,oEAAoE;YACpE,GAAG,CAAC,EAAE,MAAM,CAAC;YACb,iFAAiF;YACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;SACnB,CAAC;QACF,iDAAiD;QACjD,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,uEAAuE;QACvE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,yDAAyD;QACzD,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;QACrC,6EAA6E;QAC7E,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,sDAAsD;QACtD,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,kOAAkO;QAClO,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,0EAA0E;QAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,kEAAkE;QAClE,yBAAyB,CAAC,EAAE,OAAO,CAAC;QACpC;;;;;WAKG;QACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;IACF,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uDAAuD;IACvD,SAAS,CAAC,EAAE;QACV,2EAA2E;QAC3E,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,+FAA+F;QAC/F,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,yFAAyF;QACzF,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,qEAAqE;QACrE,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,sFAAsF;QACtF,KAAK,CAAC,EAAE,MAAM,GAAG;YAAE,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;QAC5D,2FAA2F;QAC3F,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,uDAAuD;IACvD,OAAO,CAAC,EAAE;QACR,sCAAsC;QACtC,IAAI,CAAC,EAAE,KAAK,GAAG,UAAU,GAAG,KAAK,CAAC;QAClC;;;;;WAKG;QACH,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;QACvC;;;;WAIG;QACH,sBAAsB,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC;QAC3C,uDAAuD;QACvD,KAAK,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;QACvC,yEAAyE;QACzE,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,6CAA6C;QAC7C,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,wCAAwC;QACxC,MAAM,CAAC,EAAE,qBAAqB,CAAC;QAC/B,2CAA2C;QAC3C,OAAO,CAAC,EAAE,sBAAsB,CAAC;QACjC,qCAAqC;QACrC,KAAK,CAAC,EAAE,oBAAoB,CAAC;KAC9B,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,WAAW,CAAC;AAE1D,MAAM,MAAM,qBAAqB,GAAG;IAClC,qCAAqC;IACrC,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gFAAgF;IAChF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,+FAA+F;IAC/F,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,WAAW,CAAC,EAAE,gCAAgC,CAAC;IAC/C,gEAAgE;IAChE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,8DAA8D;IAC9D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,gGAAgG;IAChG,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC"}

package/dist/infra/host-env-security-policy.json

@@ -4,6 +4,9 @@
         "NODE_PATH",
         "PYTHONHOME",
         "PYTHONPATH",
+        "PYTHONSTARTUP",
+        "PYTHONUSERBASE",
+        "PIP_CONFIG_FILE",
         "PERL5LIB",
         "PERL5OPT",
         "RUBYLIB",
@@ -11,9 +14,42 @@
         "BASH_ENV",
         "ENV",
         "SHELL",
+        "VISUAL",
+        "EDITOR",
         "GCONV_PATH",
         "IFS",
-        "SSLKEYLOGFILE"
+        "SSLKEYLOGFILE",
+        "JAVA_OPTS",
+        "JVM_OPTS",
+        "MAVEN_OPTS",
+        "GRADLE_OPTS",
+        "RUSTFLAGS",
+        "CARGO_HOME",
+        "CARGO_TARGET_DIR",
+        "CARGO_INCREMENTAL",
+        "CC",
+        "CXX",
+        "KUBECONFIG",
+        "AWS_SHARED_CREDENTIALS_FILE",
+        "AWS_CONFIG_FILE",
+        "GOOGLE_APPLICATION_CREDENTIALS",
+        "AZURE_CONFIG_DIR",
+        "HELM_HOME",
+        "GIT_DIR",
+        "GIT_WORK_TREE",
+        "GIT_COMMON_DIR",
+        "GIT_INDEX_FILE",
+        "GIT_OBJECT_DIRECTORY",
+        "GIT_ALTERNATE_OBJECT_DIRECTORIES",
+        "GIT_NAMESPACE",
+        "GIT_SSH",
+        "GIT_SSH_COMMAND",
+        "GIT_ASKPASS",
+        "HOMEBREW_PREFIX",
+        "HOMEBREW_REPOSITORY",
+        "LINUXBREW_PREFIX",
+        "NPM_CONFIG_PREFIX",
+        "YARN_GLOBAL_FOLDER"
     ],
-    "blockedPrefixes": ["DYLD_", "LD_", "BASH_FUNC_"]
+    "blockedPrefixes": ["DYLD_", "LD_", "BASH_FUNC_", "CARGO_"]
 }

package/dist/infra/net/fetch-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetch-guard.d.ts","sourceRoot":"","sources":["../../../src/infra/net/fetch-guard.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAGtD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,yCAAyC;IACzC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,wBAAwB;IACxB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,oBAAoB;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yBAAyB;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,qCAAqC;IACrC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB,CAAC;AAEF,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,SAAS,CAAC;gBAGhF,IAAI,EAAE,cAAc,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,SAAS,EACxE,OAAO,EAAE,MAAM;CAMlB;AAMD,6CAA6C;AAC7C,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AAEX,gCAAgC;AAChC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,qCAAqC;AACrC,MAAM,MAAM,yBAAyB,GAAG;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;IACpE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AA0DF;;GAEG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,GAAG,GAAG,EACjB,IAAI,CAAC,EAAE,WAAW,EAClB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,QAAQ,CAAC,CA4DnB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,iBAAsB,IACxD,KAAK,MAAM,GAAG,GAAG,EAAE,OAAO,WAAW,uBAC9C;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAO7F;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,kBAAkB,CAAC,CAiF7B;AAGD,eAAO,MAAM,YAAY,WACf,WAAW,GAAG,GAAG,SAAS,WAAW;qBAK1B,GAAG;uBACK,MAAM,GAAG,GAAG;CAExC,CAAC"}
+{"version":3,"file":"fetch-guard.d.ts","sourceRoot":"","sources":["../../../src/infra/net/fetch-guard.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAGtD,MAAM,MAAM,iBAAiB,GAAG;IAC9B,yCAAyC;IACzC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,wBAAwB;IACxB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,oBAAoB;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yBAAyB;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,qCAAqC;IACrC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB,CAAC;AAEF,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,SAAS,CAAC;gBAGhF,IAAI,EAAE,cAAc,GAAG,kBAAkB,GAAG,gBAAgB,GAAG,SAAS,EACxE,OAAO,EAAE,MAAM;CAMlB;AAwCD,6CAA6C;AAC7C,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AAEX,gCAAgC;AAChC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,qCAAqC;AACrC,MAAM,MAAM,yBAAyB,GAAG;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;IACpE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AA0DF;;GAEG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,GAAG,GAAG,EACjB,IAAI,CAAC,EAAE,WAAW,EAClB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,QAAQ,CAAC,CA0EnB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,iBAAsB,IACxD,KAAK,MAAM,GAAG,GAAG,EAAE,OAAO,WAAW,uBAC9C;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAO7F;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,kBAAkB,CAAC,CAiF7B;AAGD,eAAO,MAAM,YAAY,WACf,WAAW,GAAG,GAAG,SAAS,WAAW;qBAK1B,GAAG;uBACK,MAAM,GAAG,GAAG;CAExC,CAAC"}

package/dist/infra/net/fetch-guard.js

@@ -18,6 +18,33 @@ export class FetchGuardError extends Error {
 const DEFAULT_ALLOWED_PROTOCOLS = ["https:", "http:"];
 const DEFAULT_MAX_REDIRECTS = 5;
 const DEFAULT_TIMEOUT_MS = 30000;
+/**
+ * Strip body-describing headers for redirect safety.
+ * Removes Content-Type, Content-Length, etc. to prevent body leakage on redirects.
+ */
+function stripBodyHeaders(headers) {
+    if (!headers) {
+        return undefined;
+    }
+    const blockedHeaders = new Set([
+        "content-type",
+        "content-length",
+        "content-encoding",
+        "content-language",
+        "content-md5",
+        "content-disposition",
+        "content-range",
+        "transfer-encoding",
+    ]);
+    const result = {};
+    const headerEntries = headers instanceof Headers ? Array.from(headers.entries()) : Object.entries(headers);
+    for (const [key, value] of headerEntries) {
+        if (!blockedHeaders.has(key.toLowerCase())) {
+            result[key] = value;
+        }
+    }
+    return Object.keys(result).length > 0 ? result : undefined;
+}
 /** Guarded fetch modes for proxy handling */
 export const GUARDED_FETCH_MODE = {
     STRICT: "strict",
@@ -105,6 +132,19 @@ export async function fetchWithGuard(url, init, options = {}) {
                 currentUrl = new URL(location, currentUrl);
                 // Validate redirect URL
                 validateURL(currentUrl, options);
+                // Security: drop request bodies on 307/308 redirects to prevent
+                // attacker-controlled redirect hops from receiving secret-bearing POST payloads
+                // (OpenClaw #62357). Only preserve body for same-origin redirects.
+                const isCrossOrigin = currentUrl.origin !== new URL(url).origin;
+                if (isCrossOrigin && [307, 308].includes(response.status)) {
+                    // Strip body and body-describing headers for cross-origin permanent redirects
+                    init = {
+                        ...init,
+                        body: undefined,
+                        method: "GET",
+                        headers: stripBodyHeaders(init?.headers),
+                    };
+                }
                 continue;
             }
             return response;

package/dist/infra/npm-integrity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"npm-integrity.d.ts","sourceRoot":"","sources":["../../src/infra/npm-integrity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEtF,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,iBAAiB,CAAC;CAC/B,CAAC;AAEF,KAAK,8BAA8B,CAAC,QAAQ,IAAI;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,aAAa,EAAE,CAAC,MAAM,EAAE;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,iBAAiB,EAAE,MAAM,CAAC;QAC1B,eAAe,EAAE,MAAM,CAAC;QACxB,UAAU,EAAE,iBAAiB,CAAC;KAC/B,KAAK,QAAQ,CAAC;IACf,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,8BAA8B,CAAC,QAAQ,IAAI;IACrD,cAAc,CAAC,EAAE,iBAAiB,CAAC;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,QAAQ,CAAC;CACpB,CAAC;AAEF,wBAAsB,wBAAwB,CAAC,QAAQ,EACrD,MAAM,EAAE,8BAA8B,CAAC,QAAQ,CAAC,GAC/C,OAAO,CAAC,8BAA8B,CAAC,QAAQ,CAAC,CAAC,CA2BnD;AAED,KAAK,gDAAgD,GAAG;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,wBAAwB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAClC,CAAC;AAEF,wBAAsB,0CAA0C,CAC9D,MAAM,EAAE,gDAAgD,GACvD,OAAO,CAAC;IAAE,cAAc,CAAC,EAAE,iBAAiB,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBjE"}
+{"version":3,"file":"npm-integrity.d.ts","sourceRoot":"","sources":["../../src/infra/npm-integrity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAEtF,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,iBAAiB,CAAC;CAC/B,CAAC;AAEF,KAAK,8BAA8B,CAAC,QAAQ,IAAI;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,aAAa,EAAE,CAAC,MAAM,EAAE;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,iBAAiB,EAAE,MAAM,CAAC;QAC1B,eAAe,EAAE,MAAM,CAAC;QACxB,UAAU,EAAE,iBAAiB,CAAC;KAC/B,KAAK,QAAQ,CAAC;IACf,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI,CAAC;CACpC,CAAC;AAEF,MAAM,MAAM,8BAA8B,CAAC,QAAQ,IAAI;IACrD,cAAc,CAAC,EAAE,iBAAiB,CAAC;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,QAAQ,CAAC;CACpB,CAAC;AAEF,wBAAsB,wBAAwB,CAAC,QAAQ,EACrD,MAAM,EAAE,8BAA8B,CAAC,QAAQ,CAAC,GAC/C,OAAO,CAAC,8BAA8B,CAAC,QAAQ,CAAC,CAAC,CAiCnD;AAED,KAAK,gDAAgD,GAAG;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,gBAAgB,CAAC,EAAE,CAAC,OAAO,EAAE,wBAAwB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAClC,CAAC;AAEF,wBAAsB,0CAA0C,CAC9D,MAAM,EAAE,gDAAgD,GACvD,OAAO,CAAC;IAAE,cAAc,CAAC,EAAE,iBAAiB,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAsBjE"}

package/dist/infra/npm-integrity.js

@@ -1,6 +1,12 @@
 export async function resolveNpmIntegrityDrift(params) {
-    if (!params.expectedIntegrity || !params.resolution.integrity) {
-        return { proceed: true };
+    // Fail closed: require integrity metadata for all npm packages
+    if (!params.expectedIntegrity) {
+        // Missing expected integrity - fail closed
+        return { proceed: false };
+    }
+    if (!params.resolution.integrity) {
+        // Missing actual integrity - fail closed (possible tampering)
+        return { proceed: false };
     }
     if (params.expectedIntegrity === params.resolution.integrity) {
         return { proceed: true };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@poolzin/pool-bot",
-  "version": "2026.4.39",
+  "version": "2026.4.41",
   "description": "🎱 Pool Bot - AI assistant with PLCODE integrations",
   "keywords": [],
   "license": "MIT",