@shumai-one/shumai-agent 0.4.2 → 0.4.4

package/bin/chunk-07a5rjnq.js

@@ -0,0 +1,2 @@
+// @bun
+import{m,h,f}from"./shumai-agent-app.js";import{i}from"./chunk-y2adfzyt.js";var F=i(f()),d=i(m());var p=i(m()),b=i(h());import{createHash as K,createPrivateKey as _,createPublicKey as v,sign as B}from"crypto";import{promises as C}from"fs";import{homedir as q}from"os";import{dirname as U,join as R}from"path";class k{profileData;init;callerClientConfig;static REFRESH_THRESHOLD=300000;constructor(e,t,s){this.profileData=e,this.init=t,this.callerClientConfig=s}async loadCredentials(){let e=await this.loadToken();if(!e)throw new p.CredentialsProviderError(`Failed to load a token for session ${this.loginSession}, please re-authenticate using aws login`,{tryNextLink:!1,logger:this.logger});let t=e.accessToken,s=Date.now();if(new Date(t.expiresAt).getTime()-s<=k.REFRESH_THRESHOLD)return this.refresh(e);return this.toCredentials(e.accessToken)}get logger(){return this.init?.logger}get loginSession(){return this.profileData.login_session}toCredentials(e){return{accessKeyId:e.accessKeyId,secretAccessKey:e.secretAccessKey,sessionToken:e.sessionToken,accountId:e.accountId,expiration:new Date(e.expiresAt)}}async refresh(e){let t=await this.loadToken().catch(()=>e),s=Date.now(),r=new Date(t.accessToken.expiresAt).getTime(),n=new Date(e.accessToken.expiresAt).getTime(),o=r<=s&&n>s?e:t;if(new Date(o.accessToken.expiresAt).getTime()-Date.now()>k.REFRESH_THRESHOLD)return this.toCredentials(o.accessToken);let{SigninClient:u,CreateOAuth2TokenCommand:x}=await import("./chunk-as1vqgag.js"),{logger:E,userAgentAppId:S}=this.callerClientConfig??{},D=((a)=>a?.metadata?.handlerProtocol==="h2")(this.callerClientConfig?.requestHandler)?void 0:this.callerClientConfig?.requestHandler,w=this.profileData.region??await this.callerClientConfig?.region?.()??process.env.AWS_REGION,y=new u({credentials:{accessKeyId:"",secretAccessKey:""},region:w,requestHandler:D,logger:E,userAgentAppId:S,...this.init?.clientConfig});this.createDPoPInterceptor(y.middlewareStack);let P={tokenInput:{clientId:o.clientId,refreshToken:o.refreshToken,grantType:"refresh_token"}};try{let a=await y.send(new x(P)),{accessKeyId:l,secretAccessKey:T,sessionToken:g}=a.tokenOutput?.accessToken??{},{refreshToken:A,expiresIn:L}=a.tokenOutput??{};if(!l||!T||!g||!A)throw new p.CredentialsProviderError("Token refresh response missing required fields",{logger:this.logger,tryNextLink:!1});let O=(L??900)*1000,H=new Date(Date.now()+O),N={...o,accessToken:{...o.accessToken,accessKeyId:l,secretAccessKey:T,sessionToken:g,expiresAt:H.toISOString()},refreshToken:A};return await this.saveToken(N),this.toCredentials(N.accessToken)}catch(a){if(a.name==="AccessDeniedException"){let T=a.error,g;switch(T){case"TOKEN_EXPIRED":g="Your session has expired. Please reauthenticate.";break;case"USER_CREDENTIALS_CHANGED":g="Unable to refresh credentials because of a change in your password. Please reauthenticate with your new password.";break;case"INSUFFICIENT_PERMISSIONS":g="Unable to refresh credentials due to insufficient permissions. You may be missing permission for the 'CreateOAuth2Token' action.";break;default:g=`Failed to refresh token: ${String(a)}. Please re-authenticate using \`aws login\``}throw new p.CredentialsProviderError(g,{logger:this.logger,tryNextLink:!1})}if(new Date(o.accessToken.expiresAt).getTime()>Date.now())return this.logger?.warn?.(`Failed to refresh token: ${String(a)}. Using existing token until expiry.`),this.toCredentials(o.accessToken);throw new p.CredentialsProviderError(`Failed to refresh token: ${String(a)}. Please re-authenticate using aws login`,{logger:this.logger})}}async loadToken(){let e=this.getTokenFilePath();try{let t=await C.readFile(e,"utf8"),s=JSON.parse(t),r=["accessToken","clientId","refreshToken","dpopKey"].filter((n)=>!s[n]);if(!s.accessToken?.accountId)r.push("accountId");if(r.length>0)throw new p.CredentialsProviderError(`Token validation failed, missing fields: ${r.join(", ")}`,{logger:this.logger,tryNextLink:!1});return s}catch(t){throw new p.CredentialsProviderError(`Failed to load token from ${e}: ${String(t)}`,{logger:this.logger,tryNextLink:!1})}}async saveToken(e){let t=this.getTokenFilePath(),s=U(t);try{await C.mkdir(s,{recursive:!0})}catch(r){}await C.writeFile(t,JSON.stringify(e,null,2),"utf8")}getTokenFilePath(){let e=process.env.AWS_LOGIN_CACHE_DIRECTORY??R(q(),".aws","login","cache"),t=Buffer.from(this.loginSession,"utf8"),s=K("sha256").update(t).digest("hex");return R(e,`${s}.json`)}derToRawSignature(e){let t=2;if(e[t]!==2)throw Error("Invalid DER signature");t++;let s=e[t++],r=e.subarray(t,t+s);if(t+=s,e[t]!==2)throw Error("Invalid DER signature");t++;let n=e[t++],o=e.subarray(t,t+n);r=r[0]===0?r.subarray(1):r,o=o[0]===0?o.subarray(1):o;let c=Buffer.concat([Buffer.alloc(32-r.length),r]),u=Buffer.concat([Buffer.alloc(32-o.length),o]);return Buffer.concat([c,u])}createDPoPInterceptor(e){e.add((t)=>async(s)=>{if(b.HttpRequest.isInstance(s.request)){let r=s.request,n=`${r.protocol}//${r.hostname}${r.port?`:${r.port}`:""}${r.path}`,o=await this.generateDpop(r.method,n);r.headers={...r.headers,DPoP:o}}return t(s)},{step:"finalizeRequest",name:"dpopInterceptor",override:!0})}async generateDpop(e="POST",t){let s=await this.loadToken();try{let r=_({key:s.dpopKey,format:"pem",type:"sec1"}),o=v(r).export({format:"der",type:"spki"}),c=-1;for(let l=0;l<o.length;l++)if(o[l]===4){c=l;break}let u=o.slice(c+1,c+33),x=o.slice(c+33,c+65),E={alg:"ES256",typ:"dpop+jwt",jwk:{kty:"EC",crv:"P-256",x:u.toString("base64url"),y:x.toString("base64url")}},S={jti:crypto.randomUUID(),htm:e,htu:t,iat:Math.floor(Date.now()/1000)},I=Buffer.from(JSON.stringify(E)).toString("base64url"),D=Buffer.from(JSON.stringify(S)).toString("base64url"),w=`${I}.${D}`,y=B("sha256",Buffer.from(w),r),a=this.derToRawSignature(y).toString("base64url");return`${w}.${a}`}catch(r){throw new p.CredentialsProviderError(`Failed to generate Dpop proof: ${r instanceof Error?r.message:String(r)}`,{logger:this.logger,tryNextLink:!1})}}}var j=(e)=>async({callerClientConfig:t}={})=>{e?.logger?.debug?.("@aws-sdk/credential-providers - fromLoginCredentials");let s=await d.parseKnownFiles(e||{}),r=d.getProfileName({profile:e?.profile??t?.profile}),n=s[r];if(!n?.login_session)throw new d.CredentialsProviderError(`Profile ${r} does not contain login_session.`,{tryNextLink:!0,logger:e?.logger});let c=await new k(n,e,t).loadCredentials();return F.setCredentialFeature(c,"CREDENTIALS_LOGIN","AD")};export{j as fromLoginCredentials};

package/bin/chunk-1a493esq.js

@@ -0,0 +1,2 @@
+// @bun
+import{Bt,Rt}from"./shumai-agent-app.js";export{Bt as createKyselyAdapter,Rt as kyselyAdapter};

package/bin/chunk-1y3q1jce.js

@@ -0,0 +1,2 @@
+// @bun
+import{m,f}from"./shumai-agent-app.js";import{i}from"./chunk-y2adfzyt.js";var g=i(f()),t=i(m());import{readFileSync as T}from"fs";var d=(e)=>async(s)=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromWebToken");let{roleArn:o,roleSessionName:r,webIdentityToken:l,providerId:n,policyArns:E,policy:p,durationSeconds:_}=e,{roleAssumerWithWebIdentity:c}=e;if(!c){let{getDefaultRoleAssumerWithWebIdentity:S}=await import("./chunk-bbz8hcag.js");c=S({...e.clientConfig,credentialProviderLogger:e.logger,parentClientConfig:{...s?.callerClientConfig,...e.parentClientConfig}},e.clientPlugins)}return c({RoleArn:o,RoleSessionName:r??`aws-sdk-js-session-${Date.now()}`,WebIdentityToken:l,ProviderId:n,PolicyArns:E,Policy:p,DurationSeconds:_})};var a="AWS_WEB_IDENTITY_TOKEN_FILE",N="AWS_ROLE_ARN",I="AWS_ROLE_SESSION_NAME",y=(e={})=>async(s)=>{e.logger?.debug("@aws-sdk/credential-provider-web-identity - fromTokenFile");let o=e?.webIdentityTokenFile??process.env[a],r=e?.roleArn??process.env[N],l=e?.roleSessionName??process.env[I];if(!o||!r)throw new t.CredentialsProviderError("Web identity configuration not specified",{logger:e.logger});let n=await d({...e,webIdentityToken:t.externalDataInterceptor?.getTokenRecord?.()[o]??T(o,{encoding:"ascii"}),roleArn:r,roleSessionName:l})(s);if(o===process.env[a])g.setCredentialFeature(n,"CREDENTIALS_ENV_VARS_STS_WEB_ID_TOKEN","h");return n};export{y as fromTokenFile};

package/bin/chunk-2mcnt6jh.js

@@ -0,0 +1,8 @@
+// @bun
+import{R}from"./chunk-s1e2nv5w.js";import{y}from"./chunk-e7m6nsvr.js";import{U,be}from"./chunk-m8jmvj7p.js";import{ze,ve,I}from"./shumai-agent-app.js";class g extends Error{code;diagnosticDetails;constructor(r,t,n){super(r);this.name="PiMessagesResponseError",this.code=t,this.diagnosticDetails=n}}function x(r){try{let t=JSON.parse(r),n=t?.error;return t&&typeof n==="object"&&n!==null&&!Array.isArray(n)?t:void 0}catch{return}}function m(r){return r.length>8192?`${r.slice(0,8192)}\u2026`:r}function w(r,t,n){let e=typeof n?.error?.message==="string"?n.error.message:void 0,s=typeof n?.error?.code==="string"?n.error.code:void 0,a=e??t,o=s?` (${s})`:"";return`${r.status} ${r.statusText}: ${a}${o}`}function b(r,t,n,e){let s=x(e),a=typeof s?.error?.code==="string"?s.error.code:void 0;return new g(w(n,e,s),a,{version:1,provider:r.provider,model:r.id,url:t.toString(),status:n.status,statusText:n.statusText,error:s?.error,body:s?void 0:m(e),timestampMs:Date.now()})}function h(){return{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}}}function l(r,t){if(!t)return;ve(r,{type:"pi_messages_rewrite",timestamp:Date.now(),details:{...t}})}function k(r){let t={role:"assistant",content:[],api:r.api,provider:r.provider,model:r.id,usage:h(),stopReason:"stop",timestamp:Date.now()},n=new Map;return(e)=>{switch(e.type){case"done":return Object.assign(t,{stopReason:e.reason,usage:e.usage,responseId:e.responseId}),l(t,e.rewrite),{type:"done",reason:e.reason,message:t};case"error":return Object.assign(t,{stopReason:e.reason,usage:e.usage,errorMessage:e.errorMessage,responseId:e.responseId}),l(t,e.rewrite),{type:"error",reason:e.reason,error:t};case"start":break;case"text_start":t.content[e.contentIndex]={type:"text",text:""};break;case"text_delta":t.content[e.contentIndex].text+=e.delta;break;case"text_end":Object.assign(t.content[e.contentIndex],{text:e.content,textSignature:e.contentSignature});break;case"thinking_start":t.content[e.contentIndex]={type:"thinking",thinking:""};break;case"thinking_delta":t.content[e.contentIndex].thinking+=e.delta;break;case"thinking_end":Object.assign(t.content[e.contentIndex],{thinking:e.content,thinkingSignature:e.contentSignature,redacted:e.redacted});break;case"toolcall_start":t.content[e.contentIndex]={type:"toolCall",id:e.id,name:e.toolName,arguments:{}},n.set(e.contentIndex,"");break;case"toolcall_delta":{let s=`${n.get(e.contentIndex)??""}${e.delta}`;n.set(e.contentIndex,s),t.content[e.contentIndex].arguments=R(s);break}case"toolcall_end":return Object.assign(t.content[e.contentIndex],e.toolCall),n.delete(e.contentIndex),{type:"toolcall_end",contentIndex:e.contentIndex,toolCall:t.content[e.contentIndex],partial:t}}return{...e,partial:t}}}async function*E(r){let t=new TextDecoder,n=r.getReader(),e="";try{while(!0){let{done:s,value:a}=await n.read();e+=s?t.decode():t.decode(a,{stream:!0}),e=e.replace(/\r\n/g,`
+`);let o=e.indexOf(`
+
+`);while(o!==-1){let c=f(e.slice(0,o));if(c)yield c;e=e.slice(o+2),o=e.indexOf(`
+
+`)}if(s)break}if(e.trim()){let s=f(e);if(s)yield s}}finally{n.releaseLock()}}function f(r){let t=r.split(`
+`).find((n)=>n.startsWith("data:"))?.slice(5).trim();return t&&t!=="[DONE]"?JSON.parse(t):void 0}function _(r,t,n){let e=n?"aborted":"error",s={role:"assistant",content:[],api:r.api,provider:r.provider,model:r.id,usage:h(),stopReason:e,errorMessage:t instanceof Error?t.message:String(t),timestamp:Date.now()};if(!n&&t instanceof g)ve(s,ze("pi_messages_response_failure",t,t.diagnosticDetails));return{type:"error",reason:e,error:s}}function S(r,t){if(r)return r;return y("PI_CACHE_RETENTION",t)==="long"?"long":void 0}var M=(r,t,n)=>{let e=new I,s=k(r);return(async()=>{try{let a=n?.apiKey;if(!a)throw Error(`No API key provided for provider "${r.provider}"`);let o=new URL(`${r.baseUrl.replace(/\/+$/u,"")}/messages`);if(n?.debug)o.searchParams.set("debug","1");let c={model:r.id,context:t,options:{temperature:n?.temperature,maxTokens:n?.maxTokens,reasoning:n?.reasoning,cacheRetention:S(n?.cacheRetention,n?.env),sessionId:n?.sessionId,toolChoice:n?.toolChoice}},p=await n?.onPayload?.(c,r);if(p!==void 0)c=p;let i=await fetch(o,{method:"POST",headers:{authorization:`Bearer ${a}`,accept:"text/event-stream","content-type":"application/json",...be(n?.headers)},body:JSON.stringify(c),signal:n?.signal});if(await n?.onResponse?.({status:i.status,headers:U(i.headers)},r),!i.ok){let d=await i.text();throw b(r,o,i,d)}if(!i.body)throw Error(`${r.provider} response has no body`);for await(let d of E(i.body)){let u=s(d);if(e.push(u),u.type==="done"||u.type==="error")return}throw Error(`${r.provider} stream ended without a terminal event`)}catch(a){e.push(_(r,a,n?.signal?.aborted??!1))}})(),e},j=(r,t,n)=>{let e=n;return M(r,t,{...n,reasoning:n?.reasoning,toolChoice:e?.toolChoice,debug:e?.debug})};export{g as PiMessagesResponseError,M as stream,j as streamSimple};

package/bin/chunk-33n9p9q4.js

@@ -0,0 +1,3 @@
+// @bun
+function F(t){if(!(t instanceof Error))return{message:u(t),messageCarriesBody:!1};let e=t,n=r(e),s=f(e),d=s===void 0||t.message.includes(s);return{status:n,body:s,message:t.message,messageCarriesBody:d}}function r(t){if(typeof t.statusCode==="number")return t.statusCode;if(typeof t.status==="number")return t.status;if(typeof t.$metadata?.httpStatusCode==="number")return t.$metadata.httpStatusCode;if(typeof t.$response?.statusCode==="number")return t.$response.statusCode;return}function f(t){let e=o(t);if(e===void 0)return;let n=e.trim();if(n.length===0)return;return c(n,4000)}function o(t){if(typeof t.body==="string")return t.body;if(i(t.error))return u(t.error);let e=t.$response?.body;if(typeof e==="string")return e;if(a(e))return;if(i(e))return u(e);return}function a(t){return typeof t==="object"&&t!==null&&"pipe"in t&&typeof t.pipe==="function"}function i(t){return typeof t==="object"&&t!==null&&Object.keys(t).length>0}function Q(t,e){if(t.messageCarriesBody||t.status===void 0||t.body===void 0)return e!==void 0&&t.status!==void 0?`${e} (${t.status}): ${t.message}`:t.message;return e!==void 0?`${e} (${t.status}): ${t.body}`:`${t.status}: ${t.body}`}function c(t,e){if(t.length<=e)return t;return`${t.slice(0,e)}... [truncated ${t.length-e} chars]`}function u(t){try{let e=JSON.stringify(t);return e===void 0?String(t):e}catch{return String(t)}}
+export{F,Q};

package/bin/chunk-40bcg5we.js

@@ -0,0 +1,2 @@
+// @bun
+import{Ye,je}from"./shumai-agent-app.js";import{n}from"./chunk-y2adfzyt.js";var v=n(function(y,s){var{defineProperty:c,getOwnPropertyDescriptor:_,getOwnPropertyNames:k}=Object,l=Object.prototype.hasOwnProperty,u=(t,e)=>{for(var o in e)c(t,o,{get:e[o],enumerable:!0})},d=(t,e,o,a)=>{if(e&&typeof e==="object"||typeof e==="function"){for(let r of k(e))if(!l.call(t,r)&&r!==o)c(t,r,{get:()=>e[r],enumerable:!(a=_(e,r))||a.enumerable})}return t},O=(t)=>d(c({},"__esModule",{value:!0}),t),f={};u(f,{refreshToken:()=>j});s.exports=O(f);var p=Ye(),i=je();async function j(t){let e=t?.project,o=t?.team;if(!e&&!o){let r=(0,i.findProjectInfo)();e=r.projectId,o=r.teamId}else if(!e||!o){let r=(0,i.findProjectInfo)();e=e??r.projectId,o=o??r.teamId}if(!e)throw new p.VercelOidcTokenError("Failed to refresh OIDC token: No project specified. Try re-linking your project with `vc link`");let a=(0,i.loadToken)(e);if(!a||(0,i.isExpired)((0,i.getTokenPayload)(a.token),t?.expirationBufferMs)){let r=await(0,i.getVercelToken)({expirationBufferMs:t?.expirationBufferMs});if(a=await(0,i.getVercelOidcToken)(r,e,o),!a)throw new p.VercelOidcTokenError("Failed to refresh OIDC token");(0,i.saveToken)(a,e)}process.env.VERCEL_OIDC_TOKEN=a.token;return}});export default v();