@tanstack/ai-code-mode 0.3.7 → 0.3.9

package/dist/esm/validate-bindings.js

@@ -1,105 +1,116 @@
-const DANGEROUS_WORDS = /* @__PURE__ */ new Set([
-  "password",
-  "passwd",
-  "pwd",
-  "passcode",
-  "secret",
-  "token",
-  "credential",
-  "credentials",
-  "authorization",
-  "jwt",
-  "bearer"
+//#region src/validate-bindings.ts
+/**
+* Single words that on their own signal "this is a credential".
+* Matched after splitting a parameter name into camelCase/snake/kebab words.
+* So `accessToken` → `['access', 'token']` → matches `token`,
+* but `tokenizer` → `['tokenizer']` → does NOT match `token`.
+*/
+var DANGEROUS_WORDS = /* @__PURE__ */ new Set([
+	"password",
+	"passwd",
+	"pwd",
+	"passcode",
+	"secret",
+	"token",
+	"credential",
+	"credentials",
+	"authorization",
+	"jwt",
+	"bearer"
 ]);
-const COMPOUND_PATTERNS = [
-  "apikey",
-  "accesskey",
-  "authkey",
-  "privatekey",
-  "clientsecret",
-  "webhooksecret"
+/**
+* Compound patterns matched as substrings of the normalized (lowercased,
+* separator-stripped) parameter name. Catches forms like `openai_api_key`,
+* `x-api-key`, and `webhookSecret`.
+*/
+var COMPOUND_PATTERNS = [
+	"apikey",
+	"accesskey",
+	"authkey",
+	"privatekey",
+	"clientsecret",
+	"webhooksecret"
 ];
 function splitIntoWords(name) {
-  return name.replace(/[_\-\s]+/g, " ").replace(/([a-z0-9])([A-Z])/g, "$1 $2").toLowerCase().split(/\s+/).filter(Boolean);
+	return name.replace(/[_\-\s]+/g, " ").replace(/([a-z0-9])([A-Z])/g, "$1 $2").toLowerCase().split(/\s+/).filter(Boolean);
 }
 function looksLikeSecret(name) {
-  const words = splitIntoWords(name);
-  if (words.some((w) => DANGEROUS_WORDS.has(w))) return true;
-  const normalized = name.replace(/[_\-\s]/g, "").toLowerCase();
-  return COMPOUND_PATTERNS.some((p) => normalized.includes(p));
+	if (splitIntoWords(name).some((w) => DANGEROUS_WORDS.has(w))) return true;
+	const normalized = name.replace(/[_\-\s]/g, "").toLowerCase();
+	return COMPOUND_PATTERNS.some((p) => normalized.includes(p));
 }
 function resolveRef(ref, root) {
-  const match = ref.match(/^#\/(\$defs|definitions)\/(.+)$/);
-  if (!match) return void 0;
-  const bucket = match[1];
-  const key = match[2];
-  return key === void 0 ? void 0 : root[bucket]?.[key];
+	const match = ref.match(/^#\/(\$defs|definitions)\/(.+)$/);
+	if (!match) return void 0;
+	const bucket = match[1];
+	const key = match[2];
+	return key === void 0 ? void 0 : root[bucket]?.[key];
 }
 function findSecretParams(schema, root, seen, path, found) {
-  if (!schema || typeof schema !== "object" || seen.has(schema)) return;
-  seen.add(schema);
-  if (schema.properties && typeof schema.properties === "object") {
-    for (const [paramName, sub] of Object.entries(schema.properties)) {
-      if (looksLikeSecret(paramName)) {
-        found.push({ path: [...path, paramName], name: paramName });
-      }
-      findSecretParams(sub, root, seen, [...path, paramName], found);
-    }
-  }
-  if (Array.isArray(schema.items)) {
-    schema.items.forEach(
-      (s, i) => findSecretParams(s, root, seen, [...path, `[${i}]`], found)
-    );
-  } else if (schema.items && typeof schema.items === "object") {
-    findSecretParams(schema.items, root, seen, [...path, "[]"], found);
-  }
-  if (schema.additionalProperties && typeof schema.additionalProperties === "object") {
-    findSecretParams(schema.additionalProperties, root, seen, path, found);
-  }
-  for (const key of ["anyOf", "oneOf", "allOf"]) {
-    const arr = schema[key];
-    if (Array.isArray(arr)) {
-      arr.forEach((s) => findSecretParams(s, root, seen, path, found));
-    }
-  }
-  if (typeof schema.$ref === "string") {
-    const target = resolveRef(schema.$ref, root);
-    if (target) findSecretParams(target, root, seen, path, found);
-  }
+	if (!schema || typeof schema !== "object" || seen.has(schema)) return;
+	seen.add(schema);
+	if (schema.properties && typeof schema.properties === "object") for (const [paramName, sub] of Object.entries(schema.properties)) {
+		if (looksLikeSecret(paramName)) found.push({
+			path: [...path, paramName],
+			name: paramName
+		});
+		findSecretParams(sub, root, seen, [...path, paramName], found);
+	}
+	if (Array.isArray(schema.items)) schema.items.forEach((s, i) => findSecretParams(s, root, seen, [...path, `[${i}]`], found));
+	else if (schema.items && typeof schema.items === "object") findSecretParams(schema.items, root, seen, [...path, "[]"], found);
+	if (schema.additionalProperties && typeof schema.additionalProperties === "object") findSecretParams(schema.additionalProperties, root, seen, path, found);
+	for (const key of [
+		"anyOf",
+		"oneOf",
+		"allOf"
+	]) {
+		const arr = schema[key];
+		if (Array.isArray(arr)) arr.forEach((s) => findSecretParams(s, root, seen, path, found));
+	}
+	if (typeof schema.$ref === "string") {
+		const target = resolveRef(schema.$ref, root);
+		if (target) findSecretParams(target, root, seen, path, found);
+	}
 }
 function buildMessage(toolName, paramPath) {
-  return `[TanStack AI Code Mode] Tool "${toolName}" has parameter "${paramPath.join(".")}" that looks like a secret. Code Mode executes LLM-generated code — any value passed through this parameter is accessible to generated code and could be exfiltrated. Keep secrets in your server-side tool implementation instead of passing them as tool parameters.`;
+	return `[TanStack AI Code Mode] Tool "${toolName}" has parameter "${paramPath.join(".")}" that looks like a secret. Code Mode executes LLM-generated code — any value passed through this parameter is accessible to generated code and could be exfiltrated. Keep secrets in your server-side tool implementation instead of passing them as tool parameters.`;
 }
+/**
+* Scan tool input schemas for parameter names that look like secrets.
+* Emits a warning (or invokes the configured handler) for each match.
+*
+* Recurses into nested object properties, array items, union branches
+* (anyOf/oneOf/allOf), additionalProperties, and `$ref` targets that
+* resolve within the same schema's `$defs`/`definitions`.
+*
+* Best-effort heuristic, not a security boundary.
+*/
 function warnIfBindingsExposeSecrets(tools, options = {}) {
-  const { handler = "warn", dedupCache } = options;
-  if (handler === "ignore") return;
-  for (const tool of tools) {
-    const schema = tool.inputSchema;
-    if (!schema) continue;
-    const found = [];
-    findSecretParams(schema, schema, /* @__PURE__ */ new Set(), [], found);
-    for (const entry of found) {
-      const dedupKey = `${tool.name}::${entry.path.join(".")}`;
-      if (dedupCache) {
-        if (dedupCache.has(dedupKey)) continue;
-        dedupCache.add(dedupKey);
-      }
-      const info = {
-        toolName: tool.name,
-        paramName: entry.name,
-        paramPath: entry.path
-      };
-      if (typeof handler === "function") {
-        handler(info);
-      } else if (handler === "throw") {
-        throw new Error(buildMessage(tool.name, entry.path));
-      } else {
-        console.warn(buildMessage(tool.name, entry.path));
-      }
-    }
-  }
+	const { handler = "warn", dedupCache } = options;
+	if (handler === "ignore") return;
+	for (const tool of tools) {
+		const schema = tool.inputSchema;
+		if (!schema) continue;
+		const found = [];
+		findSecretParams(schema, schema, /* @__PURE__ */ new Set(), [], found);
+		for (const entry of found) {
+			const dedupKey = `${tool.name}::${entry.path.join(".")}`;
+			if (dedupCache) {
+				if (dedupCache.has(dedupKey)) continue;
+				dedupCache.add(dedupKey);
+			}
+			const info = {
+				toolName: tool.name,
+				paramName: entry.name,
+				paramPath: entry.path
+			};
+			if (typeof handler === "function") handler(info);
+			else if (handler === "throw") throw new Error(buildMessage(tool.name, entry.path));
+			else console.warn(buildMessage(tool.name, entry.path));
+		}
+	}
 }
-export {
-  warnIfBindingsExposeSecrets
-};
-//# sourceMappingURL=validate-bindings.js.map
+//#endregion
+export { warnIfBindingsExposeSecrets };
+
+//# sourceMappingURL=validate-bindings.js.map

package/dist/esm/validate-bindings.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate-bindings.js","sources":["../../src/validate-bindings.ts"],"sourcesContent":["/**\n * Single words that on their own signal \"this is a credential\".\n * Matched after splitting a parameter name into camelCase/snake/kebab words.\n * So `accessToken` → `['access', 'token']` → matches `token`,\n * but `tokenizer` → `['tokenizer']` → does NOT match `token`.\n */\nconst DANGEROUS_WORDS = new Set<string>([\n  'password',\n  'passwd',\n  'pwd',\n  'passcode',\n  'secret',\n  'token',\n  'credential',\n  'credentials',\n  'authorization',\n  'jwt',\n  'bearer',\n])\n\n/**\n * Compound patterns matched as substrings of the normalized (lowercased,\n * separator-stripped) parameter name. Catches forms like `openai_api_key`,\n * `x-api-key`, and `webhookSecret`.\n */\nconst COMPOUND_PATTERNS = [\n  'apikey',\n  'accesskey',\n  'authkey',\n  'privatekey',\n  'clientsecret',\n  'webhooksecret',\n] as const\n\nexport interface SecretParameterInfo {\n  toolName: string\n  paramName: string\n  paramPath: Array<string>\n}\n\nexport type SecretParameterHandler =\n  | 'warn'\n  | 'throw'\n  | 'ignore'\n  | ((info: SecretParameterInfo) => void)\n\ninterface ToolLike {\n  name: string\n  inputSchema?: Record<string, unknown>\n}\n\ninterface JsonSchemaLike {\n  type?: string\n  properties?: Record<string, JsonSchemaLike>\n  items?: JsonSchemaLike | Array<JsonSchemaLike>\n  anyOf?: Array<JsonSchemaLike>\n  oneOf?: Array<JsonSchemaLike>\n  allOf?: Array<JsonSchemaLike>\n  additionalProperties?: boolean | JsonSchemaLike\n  $ref?: string\n  $defs?: Record<string, JsonSchemaLike>\n  definitions?: Record<string, JsonSchemaLike>\n}\n\nfunction splitIntoWords(name: string): Array<string> {\n  return name\n    .replace(/[_\\-\\s]+/g, ' ')\n    .replace(/([a-z0-9])([A-Z])/g, '$1 $2')\n    .toLowerCase()\n    .split(/\\s+/)\n    .filter(Boolean)\n}\n\nfunction looksLikeSecret(name: string): boolean {\n  const words = splitIntoWords(name)\n  if (words.some((w) => DANGEROUS_WORDS.has(w))) return true\n  const normalized = name.replace(/[_\\-\\s]/g, '').toLowerCase()\n  return COMPOUND_PATTERNS.some((p) => normalized.includes(p))\n}\n\nfunction resolveRef(\n  ref: string,\n  root: JsonSchemaLike,\n): JsonSchemaLike | undefined {\n  const match = ref.match(/^#\\/(\\$defs|definitions)\\/(.+)$/)\n  if (!match) return undefined\n  const bucket = match[1] as '$defs' | 'definitions'\n  const key = match[2]\n  return key === undefined ? undefined : root[bucket]?.[key]\n}\n\nfunction findSecretParams(\n  schema: JsonSchemaLike | undefined,\n  root: JsonSchemaLike,\n  seen: Set<object>,\n  path: Array<string>,\n  found: Array<{ path: Array<string>; name: string }>,\n): void {\n  if (!schema || typeof schema !== 'object' || seen.has(schema)) return\n  seen.add(schema)\n\n  if (schema.properties && typeof schema.properties === 'object') {\n    for (const [paramName, sub] of Object.entries(schema.properties)) {\n      if (looksLikeSecret(paramName)) {\n        found.push({ path: [...path, paramName], name: paramName })\n      }\n      findSecretParams(sub, root, seen, [...path, paramName], found)\n    }\n  }\n\n  if (Array.isArray(schema.items)) {\n    schema.items.forEach((s, i) =>\n      findSecretParams(s, root, seen, [...path, `[${i}]`], found),\n    )\n  } else if (schema.items && typeof schema.items === 'object') {\n    findSecretParams(schema.items, root, seen, [...path, '[]'], found)\n  }\n\n  if (\n    schema.additionalProperties &&\n    typeof schema.additionalProperties === 'object'\n  ) {\n    findSecretParams(schema.additionalProperties, root, seen, path, found)\n  }\n\n  for (const key of ['anyOf', 'oneOf', 'allOf'] as const) {\n    const arr = schema[key]\n    if (Array.isArray(arr)) {\n      arr.forEach((s) => findSecretParams(s, root, seen, path, found))\n    }\n  }\n\n  if (typeof schema.$ref === 'string') {\n    const target = resolveRef(schema.$ref, root)\n    if (target) findSecretParams(target, root, seen, path, found)\n  }\n}\n\nfunction buildMessage(toolName: string, paramPath: Array<string>): string {\n  return (\n    `[TanStack AI Code Mode] Tool \"${toolName}\" has parameter \"${paramPath.join('.')}\" ` +\n    `that looks like a secret. Code Mode executes LLM-generated code — any ` +\n    `value passed through this parameter is accessible to generated code and ` +\n    `could be exfiltrated. Keep secrets in your server-side tool implementation ` +\n    `instead of passing them as tool parameters.`\n  )\n}\n\n/**\n * Scan tool input schemas for parameter names that look like secrets.\n * Emits a warning (or invokes the configured handler) for each match.\n *\n * Recurses into nested object properties, array items, union branches\n * (anyOf/oneOf/allOf), additionalProperties, and `$ref` targets that\n * resolve within the same schema's `$defs`/`definitions`.\n *\n * Best-effort heuristic, not a security boundary.\n */\nexport function warnIfBindingsExposeSecrets(\n  tools: Array<ToolLike>,\n  options: {\n    handler?: SecretParameterHandler\n    dedupCache?: Set<string>\n  } = {},\n): void {\n  const { handler = 'warn', dedupCache } = options\n  if (handler === 'ignore') return\n\n  for (const tool of tools) {\n    const schema = tool.inputSchema as JsonSchemaLike | undefined\n    if (!schema) continue\n\n    const found: Array<{ path: Array<string>; name: string }> = []\n    findSecretParams(schema, schema, new Set(), [], found)\n\n    for (const entry of found) {\n      const dedupKey = `${tool.name}::${entry.path.join('.')}`\n      if (dedupCache) {\n        if (dedupCache.has(dedupKey)) continue\n        dedupCache.add(dedupKey)\n      }\n\n      const info: SecretParameterInfo = {\n        toolName: tool.name,\n        paramName: entry.name,\n        paramPath: entry.path,\n      }\n\n      if (typeof handler === 'function') {\n        handler(info)\n      } else if (handler === 'throw') {\n        throw new Error(buildMessage(tool.name, entry.path))\n      } else {\n        console.warn(buildMessage(tool.name, entry.path))\n      }\n    }\n  }\n}\n"],"names":[],"mappings":"AAMA,MAAM,sCAAsB,IAAY;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAOD,MAAM,oBAAoB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAgCA,SAAS,eAAe,MAA6B;AACnD,SAAO,KACJ,QAAQ,aAAa,GAAG,EACxB,QAAQ,sBAAsB,OAAO,EACrC,cACA,MAAM,KAAK,EACX,OAAO,OAAO;AACnB;AAEA,SAAS,gBAAgB,MAAuB;AAC9C,QAAM,QAAQ,eAAe,IAAI;AACjC,MAAI,MAAM,KAAK,CAAC,MAAM,gBAAgB,IAAI,CAAC,CAAC,EAAG,QAAO;AACtD,QAAM,aAAa,KAAK,QAAQ,YAAY,EAAE,EAAE,YAAA;AAChD,SAAO,kBAAkB,KAAK,CAAC,MAAM,WAAW,SAAS,CAAC,CAAC;AAC7D;AAEA,SAAS,WACP,KACA,MAC4B;AAC5B,QAAM,QAAQ,IAAI,MAAM,iCAAiC;AACzD,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,SAAS,MAAM,CAAC;AACtB,QAAM,MAAM,MAAM,CAAC;AACnB,SAAO,QAAQ,SAAY,SAAY,KAAK,MAAM,IAAI,GAAG;AAC3D;AAEA,SAAS,iBACP,QACA,MACA,MACA,MACA,OACM;AACN,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,KAAK,IAAI,MAAM,EAAG;AAC/D,OAAK,IAAI,MAAM;AAEf,MAAI,OAAO,cAAc,OAAO,OAAO,eAAe,UAAU;AAC9D,eAAW,CAAC,WAAW,GAAG,KAAK,OAAO,QAAQ,OAAO,UAAU,GAAG;AAChE,UAAI,gBAAgB,SAAS,GAAG;AAC9B,cAAM,KAAK,EAAE,MAAM,CAAC,GAAG,MAAM,SAAS,GAAG,MAAM,WAAW;AAAA,MAC5D;AACA,uBAAiB,KAAK,MAAM,MAAM,CAAC,GAAG,MAAM,SAAS,GAAG,KAAK;AAAA,IAC/D;AAAA,EACF;AAEA,MAAI,MAAM,QAAQ,OAAO,KAAK,GAAG;AAC/B,WAAO,MAAM;AAAA,MAAQ,CAAC,GAAG,MACvB,iBAAiB,GAAG,MAAM,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,GAAG,KAAK;AAAA,IAAA;AAAA,EAE9D,WAAW,OAAO,SAAS,OAAO,OAAO,UAAU,UAAU;AAC3D,qBAAiB,OAAO,OAAO,MAAM,MAAM,CAAC,GAAG,MAAM,IAAI,GAAG,KAAK;AAAA,EACnE;AAEA,MACE,OAAO,wBACP,OAAO,OAAO,yBAAyB,UACvC;AACA,qBAAiB,OAAO,sBAAsB,MAAM,MAAM,MAAM,KAAK;AAAA,EACvE;AAEA,aAAW,OAAO,CAAC,SAAS,SAAS,OAAO,GAAY;AACtD,UAAM,MAAM,OAAO,GAAG;AACtB,QAAI,MAAM,QAAQ,GAAG,GAAG;AACtB,UAAI,QAAQ,CAAC,MAAM,iBAAiB,GAAG,MAAM,MAAM,MAAM,KAAK,CAAC;AAAA,IACjE;AAAA,EACF;AAEA,MAAI,OAAO,OAAO,SAAS,UAAU;AACnC,UAAM,SAAS,WAAW,OAAO,MAAM,IAAI;AAC3C,QAAI,OAAQ,kBAAiB,QAAQ,MAAM,MAAM,MAAM,KAAK;AAAA,EAC9D;AACF;AAEA,SAAS,aAAa,UAAkB,WAAkC;AACxE,SACE,iCAAiC,QAAQ,oBAAoB,UAAU,KAAK,GAAG,CAAC;AAMpF;AAYO,SAAS,4BACd,OACA,UAGI,IACE;AACN,QAAM,EAAE,UAAU,QAAQ,WAAA,IAAe;AACzC,MAAI,YAAY,SAAU;AAE1B,aAAW,QAAQ,OAAO;AACxB,UAAM,SAAS,KAAK;AACpB,QAAI,CAAC,OAAQ;AAEb,UAAM,QAAsD,CAAA;AAC5D,qBAAiB,QAAQ,QAAQ,oBAAI,OAAO,CAAA,GAAI,KAAK;AAErD,eAAW,SAAS,OAAO;AACzB,YAAM,WAAW,GAAG,KAAK,IAAI,KAAK,MAAM,KAAK,KAAK,GAAG,CAAC;AACtD,UAAI,YAAY;AACd,YAAI,WAAW,IAAI,QAAQ,EAAG;AAC9B,mBAAW,IAAI,QAAQ;AAAA,MACzB;AAEA,YAAM,OAA4B;AAAA,QAChC,UAAU,KAAK;AAAA,QACf,WAAW,MAAM;AAAA,QACjB,WAAW,MAAM;AAAA,MAAA;AAGnB,UAAI,OAAO,YAAY,YAAY;AACjC,gBAAQ,IAAI;AAAA,MACd,WAAW,YAAY,SAAS;AAC9B,cAAM,IAAI,MAAM,aAAa,KAAK,MAAM,MAAM,IAAI,CAAC;AAAA,MACrD,OAAO;AACL,gBAAQ,KAAK,aAAa,KAAK,MAAM,MAAM,IAAI,CAAC;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AACF;"}
+{"version":3,"file":"validate-bindings.js","names":[],"sources":["../../src/validate-bindings.ts"],"sourcesContent":["/**\n * Single words that on their own signal \"this is a credential\".\n * Matched after splitting a parameter name into camelCase/snake/kebab words.\n * So `accessToken` → `['access', 'token']` → matches `token`,\n * but `tokenizer` → `['tokenizer']` → does NOT match `token`.\n */\nconst DANGEROUS_WORDS = new Set<string>([\n  'password',\n  'passwd',\n  'pwd',\n  'passcode',\n  'secret',\n  'token',\n  'credential',\n  'credentials',\n  'authorization',\n  'jwt',\n  'bearer',\n])\n\n/**\n * Compound patterns matched as substrings of the normalized (lowercased,\n * separator-stripped) parameter name. Catches forms like `openai_api_key`,\n * `x-api-key`, and `webhookSecret`.\n */\nconst COMPOUND_PATTERNS = [\n  'apikey',\n  'accesskey',\n  'authkey',\n  'privatekey',\n  'clientsecret',\n  'webhooksecret',\n] as const\n\nexport interface SecretParameterInfo {\n  toolName: string\n  paramName: string\n  paramPath: Array<string>\n}\n\nexport type SecretParameterHandler =\n  | 'warn'\n  | 'throw'\n  | 'ignore'\n  | ((info: SecretParameterInfo) => void)\n\ninterface ToolLike {\n  name: string\n  inputSchema?: Record<string, unknown>\n}\n\ninterface JsonSchemaLike {\n  type?: string\n  properties?: Record<string, JsonSchemaLike>\n  items?: JsonSchemaLike | Array<JsonSchemaLike>\n  anyOf?: Array<JsonSchemaLike>\n  oneOf?: Array<JsonSchemaLike>\n  allOf?: Array<JsonSchemaLike>\n  additionalProperties?: boolean | JsonSchemaLike\n  $ref?: string\n  $defs?: Record<string, JsonSchemaLike>\n  definitions?: Record<string, JsonSchemaLike>\n}\n\nfunction splitIntoWords(name: string): Array<string> {\n  return name\n    .replace(/[_\\-\\s]+/g, ' ')\n    .replace(/([a-z0-9])([A-Z])/g, '$1 $2')\n    .toLowerCase()\n    .split(/\\s+/)\n    .filter(Boolean)\n}\n\nfunction looksLikeSecret(name: string): boolean {\n  const words = splitIntoWords(name)\n  if (words.some((w) => DANGEROUS_WORDS.has(w))) return true\n  const normalized = name.replace(/[_\\-\\s]/g, '').toLowerCase()\n  return COMPOUND_PATTERNS.some((p) => normalized.includes(p))\n}\n\nfunction resolveRef(\n  ref: string,\n  root: JsonSchemaLike,\n): JsonSchemaLike | undefined {\n  const match = ref.match(/^#\\/(\\$defs|definitions)\\/(.+)$/)\n  if (!match) return undefined\n  const bucket = match[1] as '$defs' | 'definitions'\n  const key = match[2]\n  return key === undefined ? undefined : root[bucket]?.[key]\n}\n\nfunction findSecretParams(\n  schema: JsonSchemaLike | undefined,\n  root: JsonSchemaLike,\n  seen: Set<object>,\n  path: Array<string>,\n  found: Array<{ path: Array<string>; name: string }>,\n): void {\n  if (!schema || typeof schema !== 'object' || seen.has(schema)) return\n  seen.add(schema)\n\n  if (schema.properties && typeof schema.properties === 'object') {\n    for (const [paramName, sub] of Object.entries(schema.properties)) {\n      if (looksLikeSecret(paramName)) {\n        found.push({ path: [...path, paramName], name: paramName })\n      }\n      findSecretParams(sub, root, seen, [...path, paramName], found)\n    }\n  }\n\n  if (Array.isArray(schema.items)) {\n    schema.items.forEach((s, i) =>\n      findSecretParams(s, root, seen, [...path, `[${i}]`], found),\n    )\n  } else if (schema.items && typeof schema.items === 'object') {\n    findSecretParams(schema.items, root, seen, [...path, '[]'], found)\n  }\n\n  if (\n    schema.additionalProperties &&\n    typeof schema.additionalProperties === 'object'\n  ) {\n    findSecretParams(schema.additionalProperties, root, seen, path, found)\n  }\n\n  for (const key of ['anyOf', 'oneOf', 'allOf'] as const) {\n    const arr = schema[key]\n    if (Array.isArray(arr)) {\n      arr.forEach((s) => findSecretParams(s, root, seen, path, found))\n    }\n  }\n\n  if (typeof schema.$ref === 'string') {\n    const target = resolveRef(schema.$ref, root)\n    if (target) findSecretParams(target, root, seen, path, found)\n  }\n}\n\nfunction buildMessage(toolName: string, paramPath: Array<string>): string {\n  return (\n    `[TanStack AI Code Mode] Tool \"${toolName}\" has parameter \"${paramPath.join('.')}\" ` +\n    `that looks like a secret. Code Mode executes LLM-generated code — any ` +\n    `value passed through this parameter is accessible to generated code and ` +\n    `could be exfiltrated. Keep secrets in your server-side tool implementation ` +\n    `instead of passing them as tool parameters.`\n  )\n}\n\n/**\n * Scan tool input schemas for parameter names that look like secrets.\n * Emits a warning (or invokes the configured handler) for each match.\n *\n * Recurses into nested object properties, array items, union branches\n * (anyOf/oneOf/allOf), additionalProperties, and `$ref` targets that\n * resolve within the same schema's `$defs`/`definitions`.\n *\n * Best-effort heuristic, not a security boundary.\n */\nexport function warnIfBindingsExposeSecrets(\n  tools: Array<ToolLike>,\n  options: {\n    handler?: SecretParameterHandler\n    dedupCache?: Set<string>\n  } = {},\n): void {\n  const { handler = 'warn', dedupCache } = options\n  if (handler === 'ignore') return\n\n  for (const tool of tools) {\n    const schema = tool.inputSchema as JsonSchemaLike | undefined\n    if (!schema) continue\n\n    const found: Array<{ path: Array<string>; name: string }> = []\n    findSecretParams(schema, schema, new Set(), [], found)\n\n    for (const entry of found) {\n      const dedupKey = `${tool.name}::${entry.path.join('.')}`\n      if (dedupCache) {\n        if (dedupCache.has(dedupKey)) continue\n        dedupCache.add(dedupKey)\n      }\n\n      const info: SecretParameterInfo = {\n        toolName: tool.name,\n        paramName: entry.name,\n        paramPath: entry.path,\n      }\n\n      if (typeof handler === 'function') {\n        handler(info)\n      } else if (handler === 'throw') {\n        throw new Error(buildMessage(tool.name, entry.path))\n      } else {\n        console.warn(buildMessage(tool.name, entry.path))\n      }\n    }\n  }\n}\n"],"mappings":";;;;;;;AAMA,IAAM,kCAAkB,IAAI,IAAY;CACtC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF,CAAC;;;;;;AAOD,IAAM,oBAAoB;CACxB;CACA;CACA;CACA;CACA;CACA;AACF;AAgCA,SAAS,eAAe,MAA6B;CACnD,OAAO,KACJ,QAAQ,aAAa,GAAG,CAAC,CACzB,QAAQ,sBAAsB,OAAO,CAAC,CACtC,YAAY,CAAC,CACb,MAAM,KAAK,CAAC,CACZ,OAAO,OAAO;AACnB;AAEA,SAAS,gBAAgB,MAAuB;CAE9C,IADc,eAAe,IACzB,CAAA,CAAM,MAAM,MAAM,gBAAgB,IAAI,CAAC,CAAC,GAAG,OAAO;CACtD,MAAM,aAAa,KAAK,QAAQ,YAAY,EAAE,CAAC,CAAC,YAAY;CAC5D,OAAO,kBAAkB,MAAM,MAAM,WAAW,SAAS,CAAC,CAAC;AAC7D;AAEA,SAAS,WACP,KACA,MAC4B;CAC5B,MAAM,QAAQ,IAAI,MAAM,iCAAiC;CACzD,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,MAAM,SAAS,MAAM;CACrB,MAAM,MAAM,MAAM;CAClB,OAAO,QAAQ,KAAA,IAAY,KAAA,IAAY,KAAK,OAAO,GAAG;AACxD;AAEA,SAAS,iBACP,QACA,MACA,MACA,MACA,OACM;CACN,IAAI,CAAC,UAAU,OAAO,WAAW,YAAY,KAAK,IAAI,MAAM,GAAG;CAC/D,KAAK,IAAI,MAAM;CAEf,IAAI,OAAO,cAAc,OAAO,OAAO,eAAe,UACpD,KAAK,MAAM,CAAC,WAAW,QAAQ,OAAO,QAAQ,OAAO,UAAU,GAAG;EAChE,IAAI,gBAAgB,SAAS,GAC3B,MAAM,KAAK;GAAE,MAAM,CAAC,GAAG,MAAM,SAAS;GAAG,MAAM;EAAU,CAAC;EAE5D,iBAAiB,KAAK,MAAM,MAAM,CAAC,GAAG,MAAM,SAAS,GAAG,KAAK;CAC/D;CAGF,IAAI,MAAM,QAAQ,OAAO,KAAK,GAC5B,OAAO,MAAM,SAAS,GAAG,MACvB,iBAAiB,GAAG,MAAM,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,EAAE,GAAG,KAAK,CAC5D;MACK,IAAI,OAAO,SAAS,OAAO,OAAO,UAAU,UACjD,iBAAiB,OAAO,OAAO,MAAM,MAAM,CAAC,GAAG,MAAM,IAAI,GAAG,KAAK;CAGnE,IACE,OAAO,wBACP,OAAO,OAAO,yBAAyB,UAEvC,iBAAiB,OAAO,sBAAsB,MAAM,MAAM,MAAM,KAAK;CAGvE,KAAK,MAAM,OAAO;EAAC;EAAS;EAAS;CAAO,GAAY;EACtD,MAAM,MAAM,OAAO;EACnB,IAAI,MAAM,QAAQ,GAAG,GACnB,IAAI,SAAS,MAAM,iBAAiB,GAAG,MAAM,MAAM,MAAM,KAAK,CAAC;CAEnE;CAEA,IAAI,OAAO,OAAO,SAAS,UAAU;EACnC,MAAM,SAAS,WAAW,OAAO,MAAM,IAAI;EAC3C,IAAI,QAAQ,iBAAiB,QAAQ,MAAM,MAAM,MAAM,KAAK;CAC9D;AACF;AAEA,SAAS,aAAa,UAAkB,WAAkC;CACxE,OACE,iCAAiC,SAAS,mBAAmB,UAAU,KAAK,GAAG,EAAE;AAMrF;;;;;;;;;;;AAYA,SAAgB,4BACd,OACA,UAGI,CAAC,GACC;CACN,MAAM,EAAE,UAAU,QAAQ,eAAe;CACzC,IAAI,YAAY,UAAU;CAE1B,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,SAAS,KAAK;EACpB,IAAI,CAAC,QAAQ;EAEb,MAAM,QAAsD,CAAC;EAC7D,iBAAiB,QAAQ,wBAAQ,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK;EAErD,KAAK,MAAM,SAAS,OAAO;GACzB,MAAM,WAAW,GAAG,KAAK,KAAK,IAAI,MAAM,KAAK,KAAK,GAAG;GACrD,IAAI,YAAY;IACd,IAAI,WAAW,IAAI,QAAQ,GAAG;IAC9B,WAAW,IAAI,QAAQ;GACzB;GAEA,MAAM,OAA4B;IAChC,UAAU,KAAK;IACf,WAAW,MAAM;IACjB,WAAW,MAAM;GACnB;GAEA,IAAI,OAAO,YAAY,YACrB,QAAQ,IAAI;QACP,IAAI,YAAY,SACrB,MAAM,IAAI,MAAM,aAAa,KAAK,MAAM,MAAM,IAAI,CAAC;QAEnD,QAAQ,KAAK,aAAa,KAAK,MAAM,MAAM,IAAI,CAAC;EAEpD;CACF;AACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tanstack/ai-code-mode",
-  "version": "0.3.7",
+  "version": "0.3.9",
   "description": "Secure TypeScript Code Mode for TanStack AI agents to execute sandboxed tool orchestration programs.",
   "author": "Tanner Linsley",
   "license": "MIT",
@@ -54,19 +54,19 @@
   },
   "peerDependencies": {
     "zod": "^3.0.0 || ^4.0.0",
-    "@tanstack/ai": "0.41.0"
+    "@tanstack/ai": "0.43.0"
   },
   "devDependencies": {
     "@vitest/coverage-v8": "4.0.14",
     "zod": "^4.2.0",
-    "@tanstack/ai": "0.41.0"
+    "@tanstack/ai": "0.43.0"
   },
   "scripts": {
     "build": "vite build",
     "clean": "premove ./build ./dist",
-    "lint:fix": "eslint ./src --fix",
+    "lint:fix": "oxlint src --type-aware --fix",
     "test:build": "publint --strict",
-    "test:eslint": "eslint ./src",
+    "test:oxlint": "oxlint src --type-aware",
     "test:lib": "vitest",
     "test:lib:dev": "pnpm test:lib --watch",
     "test:types": "tsc"

package/skills/ai-code-mode/SKILL.md

@@ -9,7 +9,7 @@ description: >
   execution progress via code_mode:* custom events in useChat.
 type: core
 library: tanstack-ai
-library_version: '0.10.0'
+library_version: '0.3.8'
 sources:
   - 'TanStack/ai:docs/code-mode/code-mode.md'
   - 'TanStack/ai:docs/code-mode/code-mode-isolates.md'

package/dist/esm/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;"}