@signetai/core 0.226.9 → 0.226.14

package/dist/llm-model-catalog.js

@@ -19,12 +19,14 @@ var __toESM = (mod, isNodeMode, target) => {
   }
   target = mod != null ? __create(__getProtoOf(mod)) : {};
   const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
-  for (let key of __getOwnPropNames(mod))
-    if (!__hasOwnProp.call(to, key))
-      __defProp(to, key, {
-        get: __accessProp.bind(mod, key),
-        enumerable: true
-      });
+  if (mod && typeof mod === "object" || typeof mod === "function") {
+    for (let key of __getOwnPropNames(mod))
+      if (!__hasOwnProp.call(to, key))
+        __defProp(to, key, {
+          get: __accessProp.bind(mod, key),
+          enumerable: true
+        });
+  }
   if (canCache)
     cache.set(mod, to);
   return to;
@@ -130,8 +132,8 @@ function modelDefaultForProvider(provider) {
   return MODEL_DEFAULTS[provider];
 }
 export {
-  modelPresetsForProvider,
-  modelDefaultForProvider,
+  MODEL_DEFAULTS,
   PIPELINE_MODEL_CATALOG,
-  MODEL_DEFAULTS
+  modelDefaultForProvider,
+  modelPresetsForProvider
 };

package/dist/migrations/154-transcript-capture-source-identity.d.ts

@@ -0,0 +1,3 @@
+import type { MigrationDb } from "./contract";
+export declare function up(db: MigrationDb): void;
+//# sourceMappingURL=154-transcript-capture-source-identity.d.ts.map

package/dist/migrations/154-transcript-capture-source-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"154-transcript-capture-source-identity.d.ts","sourceRoot":"","sources":["../../src/migrations/154-transcript-capture-source-identity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAQ9C,wBAAgB,EAAE,CAAC,EAAE,EAAE,WAAW,GAAG,IAAI,CAsBxC"}

package/dist/migrations/155-source-sync-failures.d.ts

@@ -0,0 +1,4 @@
+/** Migration 155: durable per-item outcomes for bounded source traversal. */
+import type { MigrationDb } from "./contract";
+export declare function up(db: MigrationDb): void;
+//# sourceMappingURL=155-source-sync-failures.d.ts.map

package/dist/migrations/155-source-sync-failures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"155-source-sync-failures.d.ts","sourceRoot":"","sources":["../../src/migrations/155-source-sync-failures.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,wBAAgB,EAAE,CAAC,EAAE,EAAE,WAAW,GAAG,IAAI,CAsBxC"}

package/dist/migrations/156-embedding-repair-checkpoints.d.ts

@@ -0,0 +1,10 @@
+import type { MigrationDb } from "./contract";
+/**
+ * Durable operation state for bounded, resumable embedding repairs.
+ *
+ * The embedding repair lease serializes provider work; this table keeps the
+ * caller-visible operation state across daemon restarts so a full sweep can
+ * resume without replaying an unbounded request.
+ */
+export declare function up(db: MigrationDb): void;
+//# sourceMappingURL=156-embedding-repair-checkpoints.d.ts.map

package/dist/migrations/156-embedding-repair-checkpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"156-embedding-repair-checkpoints.d.ts","sourceRoot":"","sources":["../../src/migrations/156-embedding-repair-checkpoints.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;;;GAMG;AACH,wBAAgB,EAAE,CAAC,EAAE,EAAE,WAAW,GAAG,IAAI,CAoBxC"}

package/dist/migrations/157-embedding-repair-progress.d.ts

@@ -0,0 +1,8 @@
+import type { MigrationDb } from "./contract";
+/**
+ * Splits agent-visible repair progress from the singleton provider admission
+ * budget. The lease and hourly window remain global, while completion
+ * diagnostics are keyed by the agent whose memories were repaired.
+ */
+export declare function up(db: MigrationDb): void;
+//# sourceMappingURL=157-embedding-repair-progress.d.ts.map

package/dist/migrations/157-embedding-repair-progress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"157-embedding-repair-progress.d.ts","sourceRoot":"","sources":["../../src/migrations/157-embedding-repair-progress.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;GAIG;AACH,wBAAgB,EAAE,CAAC,EAAE,EAAE,WAAW,GAAG,IAAI,CAmBxC"}

package/dist/migrations/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAsB,WAAW,EAAE,MAAM,YAAY,CAAC;AA0J7E,YAAY,EAAE,SAAS,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE7E,oEAAoE;AACpE,eAAO,MAAM,UAAU,EAAE,SAAS,SAAS,EAiuC1C,CAAC;AA6MF;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,WAAW,GAAG,OAAO,CAiB7D;AAED,6CAA6C;AAC7C,eAAO,MAAM,qBAAqB,QAAkD,CAAC;AAsBrF;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,WAAW,GAAG,IAAI,CAiDnD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/migrations/index.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAsB,WAAW,EAAE,MAAM,YAAY,CAAC;AA4J7E,YAAY,EAAE,SAAS,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE7E,oEAAoE;AACpE,eAAO,MAAM,UAAU,EAAE,SAAS,SAAS,EAqwC1C,CAAC;AA6MF;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,WAAW,GAAG,OAAO,CAiB7D;AAED,6CAA6C;AAC7C,eAAO,MAAM,qBAAqB,QAAkD,CAAC;AAsBrF;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,WAAW,GAAG,IAAI,CAiDnD"}

package/dist/pipeline-providers.js

@@ -19,12 +19,14 @@ var __toESM = (mod, isNodeMode, target) => {
   }
   target = mod != null ? __create(__getProtoOf(mod)) : {};
   const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
-  for (let key of __getOwnPropNames(mod))
-    if (!__hasOwnProp.call(to, key))
-      __defProp(to, key, {
-        get: __accessProp.bind(mod, key),
-        enumerable: true
-      });
+  if (mod && typeof mod === "object" || typeof mod === "function") {
+    for (let key of __getOwnPropNames(mod))
+      if (!__hasOwnProp.call(to, key))
+        __defProp(to, key, {
+          get: __accessProp.bind(mod, key),
+          enumerable: true
+        });
+  }
   if (canCache)
     cache.set(mod, to);
   return to;
@@ -160,12 +162,12 @@ function defaultPipelineModel(provider) {
   return modelDefaultForProvider(provider);
 }
 export {
-  isSynthesisProvider,
-  isPipelineProvider,
-  defaultPipelineModel,
-  SYNTHESIS_PROVIDER_CHOICES,
-  PIPELINE_PROVIDER_CHOICES,
-  OPENCODE_PIPELINE_SYSTEM_PROMPT,
+  DEFAULT_PIPELINE_TIMEOUT_MS,
   OPENCODE_PIPELINE_AGENT,
-  DEFAULT_PIPELINE_TIMEOUT_MS
+  OPENCODE_PIPELINE_SYSTEM_PROMPT,
+  PIPELINE_PROVIDER_CHOICES,
+  SYNTHESIS_PROVIDER_CHOICES,
+  defaultPipelineModel,
+  isPipelineProvider,
+  isSynthesisProvider
 };

package/dist/recall.js

@@ -19,12 +19,14 @@ var __toESM = (mod, isNodeMode, target) => {
   }
   target = mod != null ? __create(__getProtoOf(mod)) : {};
   const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
-  for (let key of __getOwnPropNames(mod))
-    if (!__hasOwnProp.call(to, key))
-      __defProp(to, key, {
-        get: __accessProp.bind(mod, key),
-        enumerable: true
-      });
+  if (mod && typeof mod === "object" || typeof mod === "function") {
+    for (let key of __getOwnPropNames(mod))
+      if (!__hasOwnProp.call(to, key))
+        __defProp(to, key, {
+          get: __accessProp.bind(mod, key),
+          enumerable: true
+        });
+  }
   if (canCache)
     cache.set(mod, to);
   return to;
@@ -322,14 +324,14 @@ function emptyHookRecallResponse(query, extras) {
   };
 }
 export {
-  withHookRecallCompat,
-  partitionRecallRows,
-  parseRecallPayload,
-  parseRecallMeta,
-  normalizeStructuredMemoryPayload,
-  formatRecallText,
-  emptyHookRecallResponse,
-  buildRememberRequestBody,
+  applyRecallScoreThreshold,
   buildRecallRequestBody,
-  applyRecallScoreThreshold
+  buildRememberRequestBody,
+  emptyHookRecallResponse,
+  formatRecallText,
+  normalizeStructuredMemoryPayload,
+  parseRecallMeta,
+  parseRecallPayload,
+  partitionRecallRows,
+  withHookRecallCompat
 };

package/dist/secrets-keyring-child.d.ts

@@ -0,0 +1,2 @@
+export declare function runSecretKeyringChild(): Promise<void>;
+//# sourceMappingURL=secrets-keyring-child.d.ts.map

package/dist/secrets-keyring-child.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-keyring-child.d.ts","sourceRoot":"","sources":["../src/secrets-keyring-child.ts"],"names":[],"mappings":"AA0FA,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC,CAO3D"}

package/dist/secrets-keyring-child.js

@@ -0,0 +1,209 @@
+import { createRequire } from "node:module";
+var __create = Object.create;
+var __getProtoOf = Object.getPrototypeOf;
+var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+function __accessProp(key) {
+  return this[key];
+}
+var __toESMCache_node;
+var __toESMCache_esm;
+var __toESM = (mod, isNodeMode, target) => {
+  var canCache = mod != null && typeof mod === "object";
+  if (canCache) {
+    var cache = isNodeMode ? __toESMCache_node ??= new WeakMap : __toESMCache_esm ??= new WeakMap;
+    var cached = cache.get(mod);
+    if (cached)
+      return cached;
+  }
+  target = mod != null ? __create(__getProtoOf(mod)) : {};
+  const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
+  if (mod && typeof mod === "object" || typeof mod === "function") {
+    for (let key of __getOwnPropNames(mod))
+      if (!__hasOwnProp.call(to, key))
+        __defProp(to, key, {
+          get: __accessProp.bind(mod, key),
+          enumerable: true
+        });
+  }
+  if (canCache)
+    cache.set(mod, to);
+  return to;
+};
+var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: __exportSetter.bind(all, name)
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+
+// src/secrets-keyring-child.ts
+import { createRequire as createRequire2 } from "node:module";
+
+// src/child-process.ts
+import {
+  execFile as nodeExecFile,
+  execFileSync as nodeExecFileSync,
+  execSync as nodeExecSync,
+  spawn as nodeSpawn,
+  spawnSync as nodeSpawnSync
+} from "node:child_process";
+import { promisify } from "node:util";
+function withWindowsHide(options) {
+  return {
+    ...options ?? {},
+    windowsHide: options?.windowsHide ?? true
+  };
+}
+function isOptions(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function withWindowsHideArgument(args, firstOptionIndex) {
+  const normalized = [...args];
+  const optionIndex = normalized.findIndex((value, index) => index >= firstOptionIndex && isOptions(value));
+  if (optionIndex >= 0) {
+    normalized[optionIndex] = withWindowsHide(normalized[optionIndex]);
+    return normalized;
+  }
+  const placeholderIndex = normalized.findIndex((value, index) => index >= firstOptionIndex && (value === undefined || value === null));
+  if (placeholderIndex >= 0) {
+    normalized[placeholderIndex] = withWindowsHide(undefined);
+    return normalized;
+  }
+  const callbackIndex = normalized.findIndex((value, index) => index >= firstOptionIndex && typeof value === "function");
+  normalized.splice(callbackIndex >= 0 ? callbackIndex : normalized.length, 0, { windowsHide: true });
+  return normalized;
+}
+function withSpawnDefaults(options) {
+  if (options?.shell !== undefined && options.shell !== false) {
+    throw new TypeError("spawnHidden does not allow shell execution");
+  }
+  return {
+    ...withWindowsHide(options),
+    shell: false
+  };
+}
+var spawnHidden = (command, argsOrOptions, options) => {
+  if (Array.isArray(argsOrOptions))
+    return nodeSpawn(command, argsOrOptions, withSpawnDefaults(options));
+  return nodeSpawn(command, withSpawnDefaults(options ?? argsOrOptions));
+};
+var spawnSyncHidden = (command, argsOrOptions, options) => {
+  if (Array.isArray(argsOrOptions))
+    return nodeSpawnSync(command, argsOrOptions, withSpawnDefaults(options));
+  return nodeSpawnSync(command, withSpawnDefaults(options ?? argsOrOptions));
+};
+var nodeExecFileAsync = promisify(nodeExecFile);
+var execFileHiddenImpl = (...args) => Reflect.apply(nodeExecFile, undefined, withWindowsHideArgument(args, 1));
+Object.defineProperty(execFileHiddenImpl, promisify.custom, {
+  value: (...args) => Reflect.apply(nodeExecFileAsync, undefined, withWindowsHideArgument(args, 1))
+});
+var execFileHidden = execFileHiddenImpl;
+var execSyncHidden = (...args) => Reflect.apply(nodeExecSync, undefined, withWindowsHideArgument(args, 1));
+var execFileSyncHidden = (...args) => Reflect.apply(nodeExecFileSync, undefined, withWindowsHideArgument(args, 1));
+
+// src/secrets-keyring-child.ts
+var MAX_REQUEST_BYTES = 64 * 1024;
+var require2 = createRequire2(import.meta.url);
+function safeError(error) {
+  return (error instanceof Error ? error.message : String(error)).replace(/[\r\n\0]/g, " ").slice(0, 500);
+}
+function classify(error) {
+  const detail = safeError(error).toLowerCase();
+  if (/noentry|no entry|no such item|item.*not found|credential.*missing|does not exist/.test(detail))
+    return "missing";
+  if (/locked|interaction|required|authfailed|authentication|islocked|prompt/.test(detail))
+    return "locked";
+  if (/permission|access denied|denied/.test(detail))
+    return "permission-denied";
+  if (/unsupported|not implemented|dbus|secret service|keyutils|connection|unavailable|no such file/.test(detail))
+    return "unavailable";
+  return "corrupt";
+}
+function loadModule() {
+  const override = process.env.SIGNET_KEYRING_NATIVE_MODULE_PATH?.trim();
+  if (override !== undefined && override.length > 0) {
+    const absolute = override.startsWith("/") || /^\\\\[^\\]+\\[^\\]+/.test(override) || /^[A-Za-z]:[\\/]/.test(override);
+    if (!absolute)
+      throw new Error("Native keyring module path must be absolute");
+    return require2(override);
+  }
+  return require2("@napi-rs/keyring");
+}
+function linuxAvailability() {
+  if (process.platform !== "linux")
+    return null;
+  if (process.env.SIGNET_SECRETS_LINUX_KEYRING === "keyutils")
+    return { state: "unsupported", message: "Linux keyutils is not an implicit Signet secrets backend" };
+  if (!process.env.DBUS_SESSION_BUS_ADDRESS)
+    return { state: "unavailable", message: "Linux Secret Service requires a user D-Bus session" };
+  try {
+    execFileSyncHidden("busctl", ["--user", "status", "org.freedesktop.secrets"], {
+      stdio: "ignore",
+      timeout: 1000
+    });
+    return null;
+  } catch {
+    return { state: "unavailable", message: "Linux Secret Service is not registered on the user D-Bus session" };
+  }
+}
+function parseRequest(raw) {
+  const value = JSON.parse(raw);
+  if (value.op !== "get" && value.op !== "set" && value.op !== "status")
+    throw new Error("Invalid keyring operation");
+  if (typeof value.service !== "string" || value.service.length === 0 || value.service.length > 512)
+    throw new Error("Invalid keyring service");
+  if (typeof value.account !== "string" || value.account.length === 0 || value.account.length > 512)
+    throw new Error("Invalid keyring account");
+  if (value.op === "set" && (typeof value.value !== "string" || value.value.length > 16 * 1024))
+    throw new Error("Invalid keyring value");
+  return value;
+}
+async function readRequest() {
+  let raw = "";
+  for await (const chunk of process.stdin) {
+    raw += String(chunk);
+    if (Buffer.byteLength(raw, "utf8") > MAX_REQUEST_BYTES)
+      throw new Error("Keyring request exceeds its limit");
+  }
+  return parseRequest(raw.trim());
+}
+async function execute(request) {
+  const unavailable = linuxAvailability();
+  if (unavailable !== null)
+    return unavailable;
+  const module = loadModule();
+  const entry = new module.AsyncEntry(request.service, request.account);
+  if (request.op === "set") {
+    await entry.setPassword(request.value ?? "");
+    return { state: "found", value: request.value ?? "" };
+  }
+  const value = await entry.getPassword();
+  return value === undefined || value === null || value.length === 0 ? { state: "missing" } : { state: "found", value };
+}
+async function runSecretKeyringChild() {
+  try {
+    const result = await execute(await readRequest());
+    process.stdout.write(`${JSON.stringify({ ok: true, result })}
+`);
+  } catch (error) {
+    process.stdout.write(`${JSON.stringify({ ok: false, state: classify(error), message: safeError(error) })}
+`);
+  }
+}
+if (__require.main == __require.module)
+  await runSecretKeyringChild();
+export {
+  runSecretKeyringChild
+};

package/dist/secrets-keyring.d.ts

@@ -8,11 +8,17 @@ export interface SecretKeyringAdapter {
     readonly platform: string;
     readonly service: string;
     readonly account: string;
-    get(): Promise<SecretKeyringResult>;
-    set(value: string): Promise<SecretKeyringResult>;
-    getStatus?(): SecretKeyringResult;
+    readonly get: () => Promise<SecretKeyringResult>;
+    readonly set: (value: string) => Promise<SecretKeyringResult>;
+    readonly getStatus?: () => Promise<SecretKeyringResult>;
+}
+interface SecretKeyringHelperOverride {
+    readonly entryPath: string;
+    readonly deadlineMs: number;
 }
 export declare function getSecretKeyring(workspace: string): SecretKeyringAdapter;
 export declare function setSecretKeyringForTests(adapter: SecretKeyringAdapter | null): void;
+export declare function setSecretKeyringHelperForTests(override: SecretKeyringHelperOverride | null): void;
 export declare function resetSecretKeyringModuleForTests(): void;
+export {};
 //# sourceMappingURL=secrets-keyring.d.ts.map

package/dist/secrets-keyring.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secrets-keyring.d.ts","sourceRoot":"","sources":["../src/secrets-keyring.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,kBAAkB,GAC3B,OAAO,GACP,SAAS,GACT,QAAQ,GACR,aAAa,GACb,mBAAmB,GACnB,SAAS,GACT,aAAa,CAAC;AAEjB,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,GAAG,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACpC,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjD,SAAS,CAAC,IAAI,mBAAmB,CAAC;CAClC;AA2KD,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,CAExE;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAInF;AAED,wBAAgB,gCAAgC,IAAI,IAAI,CAGvD"}
+{"version":3,"file":"secrets-keyring.d.ts","sourceRoot":"","sources":["../src/secrets-keyring.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,kBAAkB,GAC3B,OAAO,GACP,SAAS,GACT,QAAQ,GACR,aAAa,GACb,mBAAmB,GACnB,SAAS,GACT,aAAa,CAAC;AAEjB,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjD,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACxD;AAED,UAAU,2BAA2B;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC5B;AAqKD,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,oBAAoB,CAExE;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAEnF;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,2BAA2B,GAAG,IAAI,GAAG,IAAI,CAEjG;AAED,wBAAgB,gCAAgC,IAAI,IAAI,CAEvD"}

package/dist/secrets.d.ts

@@ -82,7 +82,7 @@ export declare function listLocalSecretNames(options?: {
 export declare function deleteLocalSecret(name: string): Promise<boolean>;
 export type LocalSecretProviderV1 = SecretProviderV1;
 export declare const localSecretProvider: LocalSecretProviderV1;
-export declare function getLocalSecretProviderHealth(): SecretProviderHealthV1;
+export declare function getLocalSecretProviderHealth(): Promise<SecretProviderHealthV1>;
 /**
  * Spawn a subprocess with one or more secrets injected as environment
  * variables. The agent only supplies references (env var names), never

package/dist/secrets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAsBH,OAAO,EAGN,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;AAEzF,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAEjF;AAyCD,MAAM,WAAW,UAAU;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEhF,MAAM,WAAW,aAAa;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,mBAAmB,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAQD,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC;IACtD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAC;IACnE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtE,MAAM,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;CAC9D;AAMD,KAAK,iBAAiB,GAAG,MAAM,MAAM,GAAG,SAAS,CAAC;AAoElD,qBAAa,kBAAmB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAEhB,MAAM,EAAE,mBAAmB;CAMvC;AAoED,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAGrF;AAED,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAG1F;AAsND,KAAK,qBAAqB,GAAG,aAAa,GAAG,cAAc,CAAC;AAC5D,KAAK,4BAA4B,GAAG,CAAC,KAAK,EAAE,qBAAqB,EAAE,EAAE,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;AAGxF,yFAAyF;AACzF,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,4BAA4B,GAAG,IAAI,GAAG,IAAI,CAEjG;AAwCD,KAAK,wBAAwB,GAAG,eAAe,GAAG,mBAAmB,CAAC;AACtE,KAAK,2BAA2B,GAAG,CAAC,KAAK,EAAE,wBAAwB,KAAK,IAAI,CAAC;AAG7E,gFAAgF;AAChF,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,2BAA2B,GAAG,IAAI,GAAG,IAAI,CAE/F;AAqND,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA6B/E;AASD,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAcvE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGpD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE/C;AAED,wBAAgB,oBAAoB,CAAC,OAAO,GAAE;IAAE,eAAe,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,MAAM,EAAE,CAI1F;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAUtE;AAYD,MAAM,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAErD,eAAO,MAAM,mBAAmB,EAAE,qBAiCjC,CAAC;AAmBF,wBAAgB,4BAA4B,IAAI,sBAAsB,CAkCrE;AAOD;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACpC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,OAAO,GAAE,iBAAsB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAqLrB;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGnE;AAmBD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAIxD"}
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAsBH,OAAO,EAGN,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;AAEzF,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAEjF;AAyCD,MAAM,WAAW,UAAU;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEhF,MAAM,WAAW,aAAa;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,mBAAmB,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,UAAU,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAQD,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAC;IACtD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAC;IACnE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtE,MAAM,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;CAC9D;AAMD,KAAK,iBAAiB,GAAG,MAAM,MAAM,GAAG,SAAS,CAAC;AAoElD,qBAAa,kBAAmB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAEhB,MAAM,EAAE,mBAAmB;CAMvC;AAoED,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAGrF;AAED,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,oBAAoB,GAAG,IAAI,GAAG,IAAI,CAG1F;AAsND,KAAK,qBAAqB,GAAG,aAAa,GAAG,cAAc,CAAC;AAC5D,KAAK,4BAA4B,GAAG,CAAC,KAAK,EAAE,qBAAqB,EAAE,EAAE,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;AAGxF,yFAAyF;AACzF,wBAAgB,iCAAiC,CAAC,IAAI,EAAE,4BAA4B,GAAG,IAAI,GAAG,IAAI,CAEjG;AAwCD,KAAK,wBAAwB,GAAG,eAAe,GAAG,mBAAmB,CAAC;AACtE,KAAK,2BAA2B,GAAG,CAAC,KAAK,EAAE,wBAAwB,KAAK,IAAI,CAAC;AAG7E,gFAAgF;AAChF,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,2BAA2B,GAAG,IAAI,GAAG,IAAI,CAE/F;AAqND,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA6B/E;AASD,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAcvE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGpD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE/C;AAED,wBAAgB,oBAAoB,CAAC,OAAO,GAAE;IAAE,eAAe,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,MAAM,EAAE,CAI1F;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAUtE;AAYD,MAAM,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AAErD,eAAO,MAAM,mBAAmB,EAAE,qBAiCjC,CAAC;AAmBF,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,sBAAsB,CAAC,CAgCpF;AAOD;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACpC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,OAAO,GAAE,iBAAsB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAqLrB;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGnE;AAmBD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAIxD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@signetai/core",
-  "version": "0.226.9",
+  "version": "0.226.14",
   "license": "Apache-2.0",
   "description": "Core library for Signet - portable AI agent identity",
   "type": "module",
@@ -30,7 +30,7 @@
     "!dist/**/__tests__/**"
   ],
   "scripts": {
-    "build": "bun build ./src/index.ts ./src/pipeline-providers.ts ./src/llm-model-catalog.ts ./src/recall.ts --outdir ./dist --target node --external better-sqlite3 && bun run build:types",
+    "build": "bun build ./src/index.ts ./src/pipeline-providers.ts ./src/llm-model-catalog.ts ./src/recall.ts ./src/secrets-keyring-child.ts --outdir ./dist --target node --external better-sqlite3 && bun run build:types",
     "build:types": "tsc --emitDeclarationOnly --declaration --outDir dist",
     "dev": "bun --watch src/index.ts",
     "test": "bun test",