@trenchwork/erosolar 1.1.29 → 1.1.30

package/dist/core/reviewerGuard.d.ts

@@ -1,37 +0,0 @@
-/**
- * Constitutional reviewer-agent guard. Runs between user-configured
- * shell hooks and the actual tool handler. Two layers:
- *
- *   1. **Hardcoded heuristic guard (always on)**. Catches the
- *      well-known catastrophic patterns (rm -rf /, curl-to-shell,
- *      anything that targets a path outside the workspace AND
- *      destroys data). Cheap, deterministic, no LLM call.
- *
- *   2. **LLM reviewer (gated by EROSOLAR_REVIEWER=1)**. Sends the
- *      proposed tool call + a brief constitution to a small, cheap
- *      reviewer model (Anthropic Haiku by default). Returns one of
- *      `approve | refine | veto` with a reason. The decision is
- *      logged to Firestore at reviewer_log/{uid}/decisions/{id} for
- *      operator review.
- *
- * The reviewer fails *open* on any error (network blip, unparseable
- * model response, missing API key). Refusing-by-default would brick
- * the CLI for users without the reviewer model configured. Instead,
- * a failure is itself an audit-log event the operator can review.
- */
-export interface ReviewDecision {
-    decision: 'approve' | 'refine' | 'veto';
-    reason: string;
-    source: 'heuristic' | 'llm' | 'disabled' | 'error';
-}
-export declare function buildReviewPrompt(toolName: string, args: unknown): string;
-export declare function parseReviewDecision(text: string): ReviewDecision | null;
-/**
- * Review a proposed tool call. Decision flow:
- *   1. Heuristic veto patterns — if any match, veto immediately (no LLM).
- *   2. If EROSOLAR_REVIEWER env is on AND ANTHROPIC_API_KEY is present,
- *      call the reviewer model.
- *   3. Otherwise, approve.
- */
-export declare function reviewToolCall(toolName: string, args: unknown): Promise<ReviewDecision>;
-//# sourceMappingURL=reviewerGuard.d.ts.map

package/dist/core/reviewerGuard.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"reviewerGuard.d.ts","sourceRoot":"","sources":["../../src/core/reviewerGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,GAAG,KAAK,GAAG,UAAU,GAAG,OAAO,CAAC;CACpD;AAwGD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAazE;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAWvE;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAmC7F"}

package/dist/core/reviewerGuard.js

@@ -1,188 +0,0 @@
-/**
- * Constitutional reviewer-agent guard. Runs between user-configured
- * shell hooks and the actual tool handler. Two layers:
- *
- *   1. **Hardcoded heuristic guard (always on)**. Catches the
- *      well-known catastrophic patterns (rm -rf /, curl-to-shell,
- *      anything that targets a path outside the workspace AND
- *      destroys data). Cheap, deterministic, no LLM call.
- *
- *   2. **LLM reviewer (gated by EROSOLAR_REVIEWER=1)**. Sends the
- *      proposed tool call + a brief constitution to a small, cheap
- *      reviewer model (Anthropic Haiku by default). Returns one of
- *      `approve | refine | veto` with a reason. The decision is
- *      logged to Firestore at reviewer_log/{uid}/decisions/{id} for
- *      operator review.
- *
- * The reviewer fails *open* on any error (network blip, unparseable
- * model response, missing API key). Refusing-by-default would brick
- * the CLI for users without the reviewer model configured. Instead,
- * a failure is itself an audit-log event the operator can review.
- */
-const CONSTITUTION = `You are the constitutional reviewer for a CLI agent that holds offsec
-tooling. Before any tool call fires, you say approve / refine / veto.
-
-PRINCIPLES (most important first):
-
-1. Operator authorization is the load-bearing assumption. The user has
-   pre-authorized targets via the rulebook + their own engagement
-   scope. You don't second-guess that. You DO catch drift: tools
-   targeting hosts/files/URLs that have nothing to do with the recent
-   conversation.
-
-2. Coordinated disclosure is pinned. Any tool call whose effect is to
-   exfiltrate, sell, or silently retain a finding without sending it
-   through hackerone / vendor PSIRT / CERT-CC / published-advisory /
-   internal-writeup must be vetoed. "Broker" / "buyer" / "private
-   sale" in args means veto.
-
-3. Destructive operations on shared infrastructure get refined. rm -rf
-   on a path the agent didn't itself create, force-push to main,
-   DROP TABLE on prod-shaped DBs — these get a refine with a tighter
-   scope suggestion, not a veto (the operator can override).
-
-4. Scope creep beats target drift. "We were investigating X but the
-   agent now wants to scan Y" gets a veto. "We were on phase.recon
-   but the agent skipped to phase.disclose" gets a refine.
-
-5. Fail open. If you can't decide, approve with reason="uncertain —
-   approving conservatively". Refusing every uncertain call locks the
-   CLI for no benefit.`;
-const VETO_PATTERNS_BASH = [
-    // rm -rf where the target is the filesystem root, $HOME, or ~ as the
-    // full atom (not a path prefix). The lookahead requires a shell-
-    // separator or end-of-string immediately after, so `rm -rf /tmp/x`
-    // is allowed and `rm -rf /` / `rm -rf $HOME` are vetoed.
-    { pattern: /\brm\s+-[a-zA-Z]*r[a-zA-Z]*f?\s+(?:\/|\$HOME|~)(?=\s|$|;|&|\|)/, reason: 'rm -rf on filesystem root, $HOME, or ~' },
-    // dd / mkfs to block devices
-    { pattern: /\bdd\s+if=\/dev\/(?:zero|random|urandom)\s+of=\/(?:dev\/[hsv]d[a-z]|[A-Za-z])/, reason: 'dd-zero/random to a block device or filesystem root' },
-    { pattern: /\bmkfs\b.*\/dev\/[hsv]d[a-z]/, reason: 'mkfs targeting a block device' },
-    // fork bomb
-    { pattern: /:\(\)\s*\{\s*:\|:&\s*\}\s*;\s*:/, reason: 'fork bomb' },
-    // curl/wget piped to shell. Match wget/curl, any non-pipe/separator
-    // text up to the first |, then a shell name as the next word.
-    { pattern: /\bcurl\b[^|;&]*\|\s*(?:bash|sh|zsh|fish)\b/i, reason: 'curl-to-shell' },
-    { pattern: /\bwget\b[^|;&]*\|\s*(?:bash|sh|zsh|fish)\b/i, reason: 'wget-to-shell' },
-];
-const VETO_PATTERNS_DISCLOSURE = /\b(?:broker|brokerage|zerodium|crowdfense|silent\s+sale|private\s+buyer|sell\s+(?:exploit|0day|zero[- ]day))\b/i;
-function heuristicReview(toolName, args) {
-    if (toolName === 'Bash' || toolName === 'kali_sqlmap' /* … other shell-shaped tools */) {
-        const cmd = args?.command || '';
-        for (const { pattern, reason } of VETO_PATTERNS_BASH) {
-            if (pattern.test(cmd)) {
-                return { decision: 'veto', reason, source: 'heuristic' };
-            }
-        }
-    }
-    // Cross-tool: any args field that looks like a brokerage handoff is
-    // a hard veto regardless of the tool surface.
-    const argsJson = JSON.stringify(args ?? {});
-    if (VETO_PATTERNS_DISCLOSURE.test(argsJson)) {
-        return { decision: 'veto', reason: 'disclosure path resembles brokerage / private sale', source: 'heuristic' };
-    }
-    return null; // no heuristic verdict — defer to LLM (or approve)
-}
-function isLlmReviewerEnabled() {
-    const v = (process.env['EROSOLAR_REVIEWER'] || '').toLowerCase();
-    return v === '1' || v === 'true' || v === 'on';
-}
-let cachedReviewer = null;
-let reviewerInitFailed = false;
-async function getLlmReviewer() {
-    if (reviewerInitFailed)
-        return null;
-    if (cachedReviewer)
-        return cachedReviewer;
-    if (!process.env['ANTHROPIC_API_KEY']) {
-        reviewerInitFailed = true;
-        return null;
-    }
-    try {
-        const { createProvider, hasProvider } = await import('../providers/providerFactory.js');
-        if (!hasProvider('anthropic')) {
-            // Provider plugin not registered yet — happens when reviewerGuard
-            // runs before agent boot completes the registration. Mark as
-            // failed (we'll fail open) and let the next boot retry.
-            reviewerInitFailed = true;
-            return null;
-        }
-        cachedReviewer = createProvider({
-            provider: 'anthropic',
-            model: process.env['EROSOLAR_REVIEWER_MODEL'] || 'claude-haiku-4-5-20251001',
-        });
-        return cachedReviewer;
-    }
-    catch {
-        reviewerInitFailed = true;
-        return null;
-    }
-}
-export function buildReviewPrompt(toolName, args) {
-    return [
-        CONSTITUTION,
-        '',
-        '## Proposed tool call',
-        `tool: ${toolName}`,
-        `args: ${JSON.stringify(args, null, 2).slice(0, 4000)}`,
-        '',
-        '## Output',
-        'Reply with ONLY a JSON object on a single line:',
-        '{"decision": "approve" | "refine" | "veto", "reason": "≤200 chars"}',
-        'No preamble, no markdown fences, no commentary.',
-    ].join('\n');
-}
-export function parseReviewDecision(text) {
-    const match = text.match(/\{[\s\S]*?\}/);
-    if (!match)
-        return null;
-    try {
-        const obj = JSON.parse(match[0]);
-        const d = String(obj.decision || '').toLowerCase();
-        if (d === 'approve' || d === 'refine' || d === 'veto') {
-            return { decision: d, reason: String(obj.reason || '').slice(0, 200), source: 'llm' };
-        }
-    }
-    catch { /* fall through */ }
-    return null;
-}
-/**
- * Review a proposed tool call. Decision flow:
- *   1. Heuristic veto patterns — if any match, veto immediately (no LLM).
- *   2. If EROSOLAR_REVIEWER env is on AND ANTHROPIC_API_KEY is present,
- *      call the reviewer model.
- *   3. Otherwise, approve.
- */
-export async function reviewToolCall(toolName, args) {
-    const heuristic = heuristicReview(toolName, args);
-    if (heuristic)
-        return heuristic;
-    if (!isLlmReviewerEnabled()) {
-        return { decision: 'approve', reason: 'reviewer disabled', source: 'disabled' };
-    }
-    const reviewer = await getLlmReviewer();
-    if (!reviewer) {
-        return { decision: 'approve', reason: 'no LLM reviewer configured', source: 'disabled' };
-    }
-    try {
-        const prompt = buildReviewPrompt(toolName, args);
-        const res = await reviewer.generate([{ role: 'user', content: prompt }], []);
-        const text = res.type === 'message' ? res.content : (res.content ?? '');
-        const parsed = parseReviewDecision(text);
-        if (!parsed) {
-            return {
-                decision: 'approve',
-                reason: 'unparseable reviewer response — failing open',
-                source: 'error',
-            };
-        }
-        return parsed;
-    }
-    catch (err) {
-        return {
-            decision: 'approve',
-            reason: `reviewer error: ${err.message.slice(0, 100)} — failing open`,
-            source: 'error',
-        };
-    }
-}
-//# sourceMappingURL=reviewerGuard.js.map

package/dist/core/reviewerGuard.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"reviewerGuard.js","sourceRoot":"","sources":["../../src/core/reviewerGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAUH,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBA4BE,CAAC;AAExB,MAAM,kBAAkB,GAA0C;IAChE,qEAAqE;IACrE,iEAAiE;IACjE,mEAAmE;IACnE,yDAAyD;IACzD,EAAE,OAAO,EAAE,gEAAgE,EAAE,MAAM,EAAE,wCAAwC,EAAE;IAC/H,6BAA6B;IAC7B,EAAE,OAAO,EAAE,+EAA+E,EAAE,MAAM,EAAE,qDAAqD,EAAE;IAC3J,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,+BAA+B,EAAE;IACpF,YAAY;IACZ,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,WAAW,EAAE;IACnE,oEAAoE;IACpE,8DAA8D;IAC9D,EAAE,OAAO,EAAE,6CAA6C,EAAE,MAAM,EAAE,eAAe,EAAE;IACnF,EAAE,OAAO,EAAE,6CAA6C,EAAE,MAAM,EAAE,eAAe,EAAE;CACpF,CAAC;AAEF,MAAM,wBAAwB,GAAG,iHAAiH,CAAC;AAEnJ,SAAS,eAAe,CAAC,QAAgB,EAAE,IAAa;IACtD,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,aAAa,CAAC,gCAAgC,EAAE,CAAC;QACvF,MAAM,GAAG,GAAI,IAA6B,EAAE,OAAO,IAAI,EAAE,CAAC;QAC1D,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,kBAAkB,EAAE,CAAC;YACrD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YAC3D,CAAC;QACH,CAAC;IACH,CAAC;IACD,oEAAoE;IACpE,8CAA8C;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5C,IAAI,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,oDAAoD,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjH,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,mDAAmD;AAClE,CAAC;AAED,SAAS,oBAAoB;IAC3B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC;AACjD,CAAC;AAED,IAAI,cAAc,GAAuB,IAAI,CAAC;AAC9C,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAE/B,KAAK,UAAU,cAAc;IAC3B,IAAI,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACtC,kBAAkB,GAAG,IAAI,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QACxF,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9B,kEAAkE;YAClE,6DAA6D;YAC7D,wDAAwD;YACxD,kBAAkB,GAAG,IAAI,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,cAAc,GAAG,cAAc,CAAC;YAC9B,QAAQ,EAAE,WAAW;YACrB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,2BAA2B;SAC7E,CAAC,CAAC;QACH,OAAO,cAAc,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB,GAAG,IAAI,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,IAAa;IAC/D,OAAO;QACL,YAAY;QACZ,EAAE;QACF,uBAAuB;QACvB,SAAS,QAAQ,EAAE;QACnB,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE;QACvD,EAAE;QACF,WAAW;QACX,iDAAiD;QACjD,qEAAqE;QACrE,iDAAiD;KAClD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAA6C,CAAC;QAC7E,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;YACtD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACxF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,IAAa;IAClE,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAEhC,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;QAC5B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAClF,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAE,CAAC;IACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,4BAA4B,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC3F,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,CACjC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EACnC,EAAE,CACH,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,8CAA8C;gBACtD,MAAM,EAAE,OAAO;aAChB,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,mBAAoB,GAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,iBAAiB;YAChF,MAAM,EAAE,OAAO;SAChB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/core/schemaValidator.d.ts

@@ -1,49 +0,0 @@
-import type { JSONSchemaObject } from './types.js';
-/**
- * Enhanced validation error with structured error information
- */
-export declare class ToolArgumentValidationError extends Error {
-    readonly issues: readonly string[];
-    readonly toolName: string;
-    constructor(toolName: string, issues: string[]);
-}
-/**
- * Runtime type guards for tool argument validation
- */
-export declare namespace TypeGuards {
-    /**
-     * Type guard for string values
-     */
-    function isString(value: unknown): value is string;
-    /**
-     * Type guard for number values
-     */
-    function isNumber(value: unknown): value is number;
-    /**
-     * Type guard for boolean values
-     */
-    function isBoolean(value: unknown): value is boolean;
-    /**
-     * Type guard for array values
-     */
-    function isArray(value: unknown): value is unknown[];
-    /**
-     * Type guard for object values
-     */
-    function isObject(value: unknown): value is Record<string, unknown>;
-    /**
-     * Type guard for non-null values
-     */
-    function isNotNull(value: unknown): value is NonNullable<unknown>;
-    /**
-     * Type guard for enum values
-     */
-    function isEnum<T extends string>(value: unknown, enumValues: readonly T[]): value is T;
-}
-/**
- * Coerce loosely-typed tool arguments into their declared schema types.
- * This makes tools resilient to providers that emit boolean/number values as strings.
- */
-export declare function coerceToolArguments(schema: JSONSchemaObject | undefined, args: Record<string, unknown>): Record<string, unknown>;
-export declare function validateToolArguments(toolName: string, schema: JSONSchemaObject | undefined, args: Record<string, unknown>): void;
-//# sourceMappingURL=schemaValidator.d.ts.map

package/dist/core/schemaValidator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemaValidator.d.ts","sourceRoot":"","sources":["../../src/core/schemaValidator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAmB,gBAAgB,EAAsB,MAAM,YAAY,CAAC;AAExF;;GAEG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;CAM/C;AAED;;GAEG;AACH,yBAAiB,UAAU,CAAC;IAC1B;;OAEG;IACH,SAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD;IAED;;OAEG;IACH,SAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD;IAED;;OAEG;IACH,SAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,OAAO,CAE1D;IAED;;OAEG;IACH,SAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,OAAO,EAAE,CAE1D;IAED;;OAEG;IACH,SAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;IAED;;OAEG;IACH,SAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAAC,OAAO,CAAC,CAEvE;IAED;;OAEG;IACH,SAAgB,MAAM,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC,CAE7F;CACF;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,gBAAgB,GAAG,SAAS,EACpC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiCzB;AAoCD,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,gBAAgB,GAAG,SAAS,EACpC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,IAAI,CA6BN"}

package/dist/core/schemaValidator.js

@@ -1,234 +0,0 @@
-/**
- * Enhanced validation error with structured error information
- */
-export class ToolArgumentValidationError extends Error {
-    issues;
-    toolName;
-    constructor(toolName, issues) {
-        super(formatMessage(toolName, issues));
-        this.name = 'ToolArgumentValidationError';
-        this.issues = issues;
-        this.toolName = toolName;
-    }
-}
-/**
- * Runtime type guards for tool argument validation
- */
-export var TypeGuards;
-(function (TypeGuards) {
-    /**
-     * Type guard for string values
-     */
-    function isString(value) {
-        return typeof value === 'string';
-    }
-    TypeGuards.isString = isString;
-    /**
-     * Type guard for number values
-     */
-    function isNumber(value) {
-        return typeof value === 'number' && !Number.isNaN(value);
-    }
-    TypeGuards.isNumber = isNumber;
-    /**
-     * Type guard for boolean values
-     */
-    function isBoolean(value) {
-        return typeof value === 'boolean';
-    }
-    TypeGuards.isBoolean = isBoolean;
-    /**
-     * Type guard for array values
-     */
-    function isArray(value) {
-        return Array.isArray(value);
-    }
-    TypeGuards.isArray = isArray;
-    /**
-     * Type guard for object values
-     */
-    function isObject(value) {
-        return typeof value === 'object' && value !== null && !Array.isArray(value);
-    }
-    TypeGuards.isObject = isObject;
-    /**
-     * Type guard for non-null values
-     */
-    function isNotNull(value) {
-        return value !== undefined && value !== null;
-    }
-    TypeGuards.isNotNull = isNotNull;
-    /**
-     * Type guard for enum values
-     */
-    function isEnum(value, enumValues) {
-        return TypeGuards.isString(value) && enumValues.includes(value);
-    }
-    TypeGuards.isEnum = isEnum;
-})(TypeGuards || (TypeGuards = {}));
-/**
- * Coerce loosely-typed tool arguments into their declared schema types.
- * This makes tools resilient to providers that emit boolean/number values as strings.
- */
-export function coerceToolArguments(schema, args) {
-    if (!schema || schema.type !== 'object' || !schema.properties) {
-        return args;
-    }
-    const coerced = { ...args };
-    for (const [key, definition] of Object.entries(schema.properties)) {
-        if (!Object.hasOwn(args, key)) {
-            continue;
-        }
-        const value = args[key];
-        if (value === undefined || value === null) {
-            continue;
-        }
-        switch (definition.type) {
-            case 'boolean': {
-                const normalized = coerceBoolean(value);
-                coerced[key] = normalized;
-                break;
-            }
-            case 'number': {
-                const normalized = coerceNumber(value);
-                coerced[key] = normalized;
-                break;
-            }
-            default:
-                break;
-        }
-    }
-    return coerced;
-}
-function coerceBoolean(value) {
-    if (typeof value === 'boolean') {
-        return value;
-    }
-    if (typeof value === 'number') {
-        if (value === 1)
-            return true;
-        if (value === 0)
-            return false;
-    }
-    if (typeof value === 'string') {
-        const trimmed = value.trim().toLowerCase();
-        if (trimmed === 'true' || trimmed === '1')
-            return true;
-        if (trimmed === 'false' || trimmed === '0')
-            return false;
-    }
-    return value;
-}
-function coerceNumber(value) {
-    if (typeof value === 'number') {
-        // Reject NaN, Infinity, and -Infinity
-        if (!Number.isFinite(value)) {
-            return value; // Return as-is to fail validation
-        }
-        return value;
-    }
-    if (typeof value === 'string' && value.trim().length > 0) {
-        const parsed = Number(value);
-        // Only accept finite numbers
-        if (Number.isFinite(parsed)) {
-            return parsed;
-        }
-    }
-    return value;
-}
-export function validateToolArguments(toolName, schema, args) {
-    if (!schema || schema.type !== 'object') {
-        return;
-    }
-    const errors = [];
-    const properties = schema.properties ?? {};
-    const required = Array.isArray(schema.required) ? schema.required : [];
-    for (const property of required) {
-        if (!hasArgument(args, property)) {
-            errors.push(`Missing required property "${property}".`);
-        }
-    }
-    for (const [key, value] of Object.entries(args)) {
-        const definition = properties[key];
-        if (!definition) {
-            // Silently ignore unknown properties - models sometimes hallucinate extra params
-            // This is more lenient than strict JSON schema validation but prevents errors
-            // when models pass extra parameters that don't affect tool behavior
-            continue;
-        }
-        validateSchemaProperty(definition, value, key, errors);
-    }
-    if (errors.length) {
-        throw new ToolArgumentValidationError(toolName, errors);
-    }
-}
-function validateSchemaProperty(definition, value, path, errors) {
-    switch (definition.type) {
-        case 'string': {
-            if (typeof value !== 'string') {
-                errors.push(`Argument "${path}" must be a string.`);
-                return;
-            }
-            if (definition.enum && !definition.enum.includes(value)) {
-                errors.push(`Argument "${path}" must be one of: ${definition.enum.map((entry) => `"${entry}"`).join(', ')}.`);
-            }
-            if (typeof definition.minLength === 'number' && value.length < definition.minLength) {
-                errors.push(`Argument "${path}" must be at least ${definition.minLength} character${definition.minLength === 1 ? '' : 's'} long.`);
-            }
-            return;
-        }
-        case 'number': {
-            if (typeof value !== 'number' || !Number.isFinite(value)) {
-                errors.push(`Argument "${path}" must be a finite number.`);
-                return;
-            }
-            // Validate minimum constraint
-            if (typeof definition.minimum === 'number' && value < definition.minimum) {
-                errors.push(`Argument "${path}" must be at least ${definition.minimum}.`);
-            }
-            // Validate maximum constraint
-            if (typeof definition.maximum === 'number' && value > definition.maximum) {
-                errors.push(`Argument "${path}" must be at most ${definition.maximum}.`);
-            }
-            return;
-        }
-        case 'boolean': {
-            if (typeof value !== 'boolean') {
-                errors.push(`Argument "${path}" must be a boolean.`);
-            }
-            return;
-        }
-        case 'array': {
-            if (!Array.isArray(value)) {
-                errors.push(`Argument "${path}" must be an array.`);
-                return;
-            }
-            validateArrayItems(definition, value, path, errors);
-            return;
-        }
-        default:
-            return;
-    }
-}
-function validateArrayItems(definition, value, path, errors) {
-    const itemSchema = definition.items;
-    if (!itemSchema) {
-        return;
-    }
-    for (let index = 0; index < value.length; index += 1) {
-        const entry = value[index];
-        validateSchemaProperty(itemSchema, entry, `${path}[${index}]`, errors);
-    }
-}
-function hasArgument(args, key) {
-    if (!Object.hasOwn(args, key)) {
-        return false;
-    }
-    const value = args[key];
-    return value !== undefined && value !== null;
-}
-function formatMessage(toolName, issues) {
-    const detail = issues.join(' ');
-    return `Invalid arguments for "${toolName}": ${detail}`;
-}
-//# sourceMappingURL=schemaValidator.js.map

package/dist/core/schemaValidator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemaValidator.js","sourceRoot":"","sources":["../../src/core/schemaValidator.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAC3C,MAAM,CAAoB;IAC1B,QAAQ,CAAS;IAE1B,YAAY,QAAgB,EAAE,MAAgB;QAC5C,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,KAAW,UAAU,CAiD1B;AAjDD,WAAiB,UAAU;IACzB;;OAEG;IACH,SAAgB,QAAQ,CAAC,KAAc;QACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;IACnC,CAAC;IAFe,mBAAQ,WAEvB,CAAA;IAED;;OAEG;IACH,SAAgB,QAAQ,CAAC,KAAc;QACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IAFe,mBAAQ,WAEvB,CAAA;IAED;;OAEG;IACH,SAAgB,SAAS,CAAC,KAAc;QACtC,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;IACpC,CAAC;IAFe,oBAAS,YAExB,CAAA;IAED;;OAEG;IACH,SAAgB,OAAO,CAAC,KAAc;QACpC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAFe,kBAAO,UAEtB,CAAA;IAED;;OAEG;IACH,SAAgB,QAAQ,CAAC,KAAc;QACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC;IAFe,mBAAQ,WAEvB,CAAA;IAED;;OAEG;IACH,SAAgB,SAAS,CAAC,KAAc;QACtC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;IAC/C,CAAC;IAFe,oBAAS,YAExB,CAAA;IAED;;OAEG;IACH,SAAgB,MAAM,CAAmB,KAAc,EAAE,UAAwB;QAC/E,OAAO,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAU,CAAC,CAAC;IACvE,CAAC;IAFe,iBAAM,SAErB,CAAA;AACH,CAAC,EAjDgB,UAAU,KAAV,UAAU,QAiD1B;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAoC,EACpC,IAA6B;IAE7B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAC;IAErD,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,SAAS;QACX,CAAC;QAED,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;YACxB,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;gBACxC,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;gBAC1B,MAAM;YACR,CAAC;YACD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBACvC,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;gBAC1B,MAAM;YACR,CAAC;YACD;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAChC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACvD,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,sCAAsC;QACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,CAAC,kCAAkC;QAClD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,6BAA6B;QAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,MAAoC,EACpC,IAA6B;IAE7B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAEvE,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,8BAA8B,QAAQ,IAAI,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,iFAAiF;YACjF,8EAA8E;YAC9E,oEAAoE;YACpE,SAAS;QACX,CAAC;QACD,sBAAsB,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,UAA8B,EAC9B,KAAc,EACd,IAAY,EACZ,MAAgB;IAEhB,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,qBAAqB,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,IAAI,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxD,MAAM,CAAC,IAAI,CACT,aAAa,IAAI,qBAAqB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjG,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;gBACpF,MAAM,CAAC,IAAI,CACT,aAAa,IAAI,sBAAsB,UAAU,CAAC,SAAS,aACzD,UAAU,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACpC,QAAQ,CACT,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,4BAA4B,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YACD,8BAA8B;YAC9B,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;gBACzE,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,sBAAsB,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC;YAC5E,CAAC;YACD,8BAA8B;YAC9B,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;gBACzE,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,qBAAqB,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,sBAAsB,CAAC,CAAC;YACvD,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,qBAAqB,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,kBAAkB,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD;YACE,OAAO;IACX,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,UAA2B,EAC3B,KAAgB,EAChB,IAAY,EACZ,MAAgB;IAEhB,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC;IACpC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,sBAAsB,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,MAAM,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B,EAAE,GAAW;IAC7D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,MAAgB;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,0BAA0B,QAAQ,MAAM,MAAM,EAAE,CAAC;AAC1D,CAAC"}

package/dist/core/secretStore.d.ts

@@ -1,48 +0,0 @@
-import type { ProviderId } from './types.js';
-export type SecretName = 'DEEPSEEK_API_KEY' | 'TAVILY_API_KEY';
-export interface SecretDefinition {
-    id: SecretName;
-    label: string;
-    description: string;
-    envVar: SecretName;
-    providers: ProviderId[];
-}
-export declare class MissingSecretError extends Error {
-    readonly secret: SecretDefinition;
-    constructor(secret: SecretDefinition);
-}
-export declare function listSecretDefinitions(): SecretDefinition[];
-export declare function getSecretDefinition(id: SecretName): SecretDefinition | null;
-export declare function getSecretValue(id: SecretName): string | null;
-/**
- * Load all stored secrets into process.env at startup.
- * This ensures secrets are available before any provider checks.
- *
- * IMPORTANT: Stored secrets always take precedence over environment variables
- * for provider API keys. This ensures keys set via /secrets are used even if
- * the user has old/stale keys exported in their shell environment.
- */
-export declare function loadAllSecrets(): void;
-export declare function setSecretValue(id: SecretName, rawValue: string): void;
-export declare function maskSecret(value: string): string;
-export declare function ensureSecretForProvider(provider: ProviderId): string;
-export declare function getSecretDefinitionForProvider(provider: ProviderId): SecretDefinition | null;
-/**
- * Sanitize error messages to remove potential API keys and secrets.
- * This prevents accidental token leakage in logs, error reports, and console output.
- *
- * @param message - The error message or string to sanitize
- * @returns The sanitized string with secrets replaced by [REDACTED]
- */
-export declare function sanitizeErrorMessage(message: string): string;
-/**
- * Sanitize an Error object's message and stack trace.
- * Returns a new error message string with secrets removed.
- */
-export declare function sanitizeError(error: Error): string;
-/**
- * Create a safe error message from an unknown error value.
- * Ensures no secrets are leaked regardless of error type.
- */
-export declare function safeErrorMessage(error: unknown): string;
-//# sourceMappingURL=secretStore.d.ts.map

package/dist/core/secretStore.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"secretStore.d.ts","sourceRoot":"","sources":["../../src/core/secretStore.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,MAAM,UAAU,GAClB,kBAAkB,GAClB,gBAAgB,CAAC;AAErB,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,UAAU,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,UAAU,EAAE,CAAC;CACzB;AA2BD,qBAAa,kBAAmB,SAAQ,KAAK;aACf,MAAM,EAAE,gBAAgB;gBAAxB,MAAM,EAAE,gBAAgB;CAIrD;AAED,wBAAgB,qBAAqB,IAAI,gBAAgB,EAAE,CAE1D;AAED,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,UAAU,GAAG,gBAAgB,GAAG,IAAI,CAE3E;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAc5D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,IAAI,IAAI,CASrC;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAUrE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUhD;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,UAAU,GAAG,MAAM,CAQpE;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,UAAU,GAAG,gBAAgB,GAAG,IAAI,CAE5F;AAgFD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA4B5D;AAoCD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAQlD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQvD"}