@trenchwork/erosolar 1.1.30 → 1.1.32

package/dist/core/reviewerGuard.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Constitutional reviewer-agent guard. Runs between user-configured
+ * shell hooks and the actual tool handler. Two layers:
+ *
+ *   1. **Hardcoded heuristic guard (always on)**. Catches the
+ *      well-known catastrophic patterns (rm -rf /, curl-to-shell,
+ *      anything that targets a path outside the workspace AND
+ *      destroys data). Cheap, deterministic, no LLM call.
+ *
+ *   2. **LLM reviewer (gated by EROSOLAR_REVIEWER=1)**. Sends the
+ *      proposed tool call + a brief constitution to a small, cheap
+ *      reviewer model (Anthropic Haiku by default). Returns one of
+ *      `approve | refine | veto` with a reason. The decision is
+ *      logged to Firestore at reviewer_log/{uid}/decisions/{id} for
+ *      operator review.
+ *
+ * The reviewer fails *open* on any error (network blip, unparseable
+ * model response, missing API key). Refusing-by-default would brick
+ * the CLI for users without the reviewer model configured. Instead,
+ * a failure is itself an audit-log event the operator can review.
+ */
+export interface ReviewDecision {
+    decision: 'approve' | 'refine' | 'veto';
+    reason: string;
+    source: 'heuristic' | 'llm' | 'disabled' | 'error';
+}
+export declare function buildReviewPrompt(toolName: string, args: unknown): string;
+export declare function parseReviewDecision(text: string): ReviewDecision | null;
+/**
+ * Review a proposed tool call. Decision flow:
+ *   1. Heuristic veto patterns — if any match, veto immediately (no LLM).
+ *   2. If EROSOLAR_REVIEWER env is on AND ANTHROPIC_API_KEY is present,
+ *      call the reviewer model.
+ *   3. Otherwise, approve.
+ */
+export declare function reviewToolCall(toolName: string, args: unknown): Promise<ReviewDecision>;
+//# sourceMappingURL=reviewerGuard.d.ts.map

package/dist/core/reviewerGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewerGuard.d.ts","sourceRoot":"","sources":["../../src/core/reviewerGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,WAAW,GAAG,KAAK,GAAG,UAAU,GAAG,OAAO,CAAC;CACpD;AAwGD,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAazE;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAWvE;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,CAmC7F"}

package/dist/core/reviewerGuard.js

@@ -0,0 +1,188 @@
+/**
+ * Constitutional reviewer-agent guard. Runs between user-configured
+ * shell hooks and the actual tool handler. Two layers:
+ *
+ *   1. **Hardcoded heuristic guard (always on)**. Catches the
+ *      well-known catastrophic patterns (rm -rf /, curl-to-shell,
+ *      anything that targets a path outside the workspace AND
+ *      destroys data). Cheap, deterministic, no LLM call.
+ *
+ *   2. **LLM reviewer (gated by EROSOLAR_REVIEWER=1)**. Sends the
+ *      proposed tool call + a brief constitution to a small, cheap
+ *      reviewer model (Anthropic Haiku by default). Returns one of
+ *      `approve | refine | veto` with a reason. The decision is
+ *      logged to Firestore at reviewer_log/{uid}/decisions/{id} for
+ *      operator review.
+ *
+ * The reviewer fails *open* on any error (network blip, unparseable
+ * model response, missing API key). Refusing-by-default would brick
+ * the CLI for users without the reviewer model configured. Instead,
+ * a failure is itself an audit-log event the operator can review.
+ */
+const CONSTITUTION = `You are the constitutional reviewer for a CLI agent that holds offsec
+tooling. Before any tool call fires, you say approve / refine / veto.
+
+PRINCIPLES (most important first):
+
+1. Operator authorization is the load-bearing assumption. The user has
+   pre-authorized targets via the rulebook + their own engagement
+   scope. You don't second-guess that. You DO catch drift: tools
+   targeting hosts/files/URLs that have nothing to do with the recent
+   conversation.
+
+2. Coordinated disclosure is pinned. Any tool call whose effect is to
+   exfiltrate, sell, or silently retain a finding without sending it
+   through hackerone / vendor PSIRT / CERT-CC / published-advisory /
+   internal-writeup must be vetoed. "Broker" / "buyer" / "private
+   sale" in args means veto.
+
+3. Destructive operations on shared infrastructure get refined. rm -rf
+   on a path the agent didn't itself create, force-push to main,
+   DROP TABLE on prod-shaped DBs — these get a refine with a tighter
+   scope suggestion, not a veto (the operator can override).
+
+4. Scope creep beats target drift. "We were investigating X but the
+   agent now wants to scan Y" gets a veto. "We were on phase.recon
+   but the agent skipped to phase.disclose" gets a refine.
+
+5. Fail open. If you can't decide, approve with reason="uncertain —
+   approving conservatively". Refusing every uncertain call locks the
+   CLI for no benefit.`;
+const VETO_PATTERNS_BASH = [
+    // rm -rf where the target is the filesystem root, $HOME, or ~ as the
+    // full atom (not a path prefix). The lookahead requires a shell-
+    // separator or end-of-string immediately after, so `rm -rf /tmp/x`
+    // is allowed and `rm -rf /` / `rm -rf $HOME` are vetoed.
+    { pattern: /\brm\s+-[a-zA-Z]*r[a-zA-Z]*f?\s+(?:\/|\$HOME|~)(?=\s|$|;|&|\|)/, reason: 'rm -rf on filesystem root, $HOME, or ~' },
+    // dd / mkfs to block devices
+    { pattern: /\bdd\s+if=\/dev\/(?:zero|random|urandom)\s+of=\/(?:dev\/[hsv]d[a-z]|[A-Za-z])/, reason: 'dd-zero/random to a block device or filesystem root' },
+    { pattern: /\bmkfs\b.*\/dev\/[hsv]d[a-z]/, reason: 'mkfs targeting a block device' },
+    // fork bomb
+    { pattern: /:\(\)\s*\{\s*:\|:&\s*\}\s*;\s*:/, reason: 'fork bomb' },
+    // curl/wget piped to shell. Match wget/curl, any non-pipe/separator
+    // text up to the first |, then a shell name as the next word.
+    { pattern: /\bcurl\b[^|;&]*\|\s*(?:bash|sh|zsh|fish)\b/i, reason: 'curl-to-shell' },
+    { pattern: /\bwget\b[^|;&]*\|\s*(?:bash|sh|zsh|fish)\b/i, reason: 'wget-to-shell' },
+];
+const VETO_PATTERNS_DISCLOSURE = /\b(?:broker|brokerage|zerodium|crowdfense|silent\s+sale|private\s+buyer|sell\s+(?:exploit|0day|zero[- ]day))\b/i;
+function heuristicReview(toolName, args) {
+    if (toolName === 'Bash' || toolName === 'kali_sqlmap' /* … other shell-shaped tools */) {
+        const cmd = args?.command || '';
+        for (const { pattern, reason } of VETO_PATTERNS_BASH) {
+            if (pattern.test(cmd)) {
+                return { decision: 'veto', reason, source: 'heuristic' };
+            }
+        }
+    }
+    // Cross-tool: any args field that looks like a brokerage handoff is
+    // a hard veto regardless of the tool surface.
+    const argsJson = JSON.stringify(args ?? {});
+    if (VETO_PATTERNS_DISCLOSURE.test(argsJson)) {
+        return { decision: 'veto', reason: 'disclosure path resembles brokerage / private sale', source: 'heuristic' };
+    }
+    return null; // no heuristic verdict — defer to LLM (or approve)
+}
+function isLlmReviewerEnabled() {
+    const v = (process.env['EROSOLAR_REVIEWER'] || '').toLowerCase();
+    return v === '1' || v === 'true' || v === 'on';
+}
+let cachedReviewer = null;
+let reviewerInitFailed = false;
+async function getLlmReviewer() {
+    if (reviewerInitFailed)
+        return null;
+    if (cachedReviewer)
+        return cachedReviewer;
+    if (!process.env['ANTHROPIC_API_KEY']) {
+        reviewerInitFailed = true;
+        return null;
+    }
+    try {
+        const { createProvider, hasProvider } = await import('../providers/providerFactory.js');
+        if (!hasProvider('anthropic')) {
+            // Provider plugin not registered yet — happens when reviewerGuard
+            // runs before agent boot completes the registration. Mark as
+            // failed (we'll fail open) and let the next boot retry.
+            reviewerInitFailed = true;
+            return null;
+        }
+        cachedReviewer = createProvider({
+            provider: 'anthropic',
+            model: process.env['EROSOLAR_REVIEWER_MODEL'] || 'claude-haiku-4-5-20251001',
+        });
+        return cachedReviewer;
+    }
+    catch {
+        reviewerInitFailed = true;
+        return null;
+    }
+}
+export function buildReviewPrompt(toolName, args) {
+    return [
+        CONSTITUTION,
+        '',
+        '## Proposed tool call',
+        `tool: ${toolName}`,
+        `args: ${JSON.stringify(args, null, 2).slice(0, 4000)}`,
+        '',
+        '## Output',
+        'Reply with ONLY a JSON object on a single line:',
+        '{"decision": "approve" | "refine" | "veto", "reason": "≤200 chars"}',
+        'No preamble, no markdown fences, no commentary.',
+    ].join('\n');
+}
+export function parseReviewDecision(text) {
+    const match = text.match(/\{[\s\S]*?\}/);
+    if (!match)
+        return null;
+    try {
+        const obj = JSON.parse(match[0]);
+        const d = String(obj.decision || '').toLowerCase();
+        if (d === 'approve' || d === 'refine' || d === 'veto') {
+            return { decision: d, reason: String(obj.reason || '').slice(0, 200), source: 'llm' };
+        }
+    }
+    catch { /* fall through */ }
+    return null;
+}
+/**
+ * Review a proposed tool call. Decision flow:
+ *   1. Heuristic veto patterns — if any match, veto immediately (no LLM).
+ *   2. If EROSOLAR_REVIEWER env is on AND ANTHROPIC_API_KEY is present,
+ *      call the reviewer model.
+ *   3. Otherwise, approve.
+ */
+export async function reviewToolCall(toolName, args) {
+    const heuristic = heuristicReview(toolName, args);
+    if (heuristic)
+        return heuristic;
+    if (!isLlmReviewerEnabled()) {
+        return { decision: 'approve', reason: 'reviewer disabled', source: 'disabled' };
+    }
+    const reviewer = await getLlmReviewer();
+    if (!reviewer) {
+        return { decision: 'approve', reason: 'no LLM reviewer configured', source: 'disabled' };
+    }
+    try {
+        const prompt = buildReviewPrompt(toolName, args);
+        const res = await reviewer.generate([{ role: 'user', content: prompt }], []);
+        const text = res.type === 'message' ? res.content : (res.content ?? '');
+        const parsed = parseReviewDecision(text);
+        if (!parsed) {
+            return {
+                decision: 'approve',
+                reason: 'unparseable reviewer response — failing open',
+                source: 'error',
+            };
+        }
+        return parsed;
+    }
+    catch (err) {
+        return {
+            decision: 'approve',
+            reason: `reviewer error: ${err.message.slice(0, 100)} — failing open`,
+            source: 'error',
+        };
+    }
+}
+//# sourceMappingURL=reviewerGuard.js.map

package/dist/core/reviewerGuard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewerGuard.js","sourceRoot":"","sources":["../../src/core/reviewerGuard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAUH,MAAM,YAAY,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBA4BE,CAAC;AAExB,MAAM,kBAAkB,GAA0C;IAChE,qEAAqE;IACrE,iEAAiE;IACjE,mEAAmE;IACnE,yDAAyD;IACzD,EAAE,OAAO,EAAE,gEAAgE,EAAE,MAAM,EAAE,wCAAwC,EAAE;IAC/H,6BAA6B;IAC7B,EAAE,OAAO,EAAE,+EAA+E,EAAE,MAAM,EAAE,qDAAqD,EAAE;IAC3J,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,+BAA+B,EAAE;IACpF,YAAY;IACZ,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,WAAW,EAAE;IACnE,oEAAoE;IACpE,8DAA8D;IAC9D,EAAE,OAAO,EAAE,6CAA6C,EAAE,MAAM,EAAE,eAAe,EAAE;IACnF,EAAE,OAAO,EAAE,6CAA6C,EAAE,MAAM,EAAE,eAAe,EAAE;CACpF,CAAC;AAEF,MAAM,wBAAwB,GAAG,iHAAiH,CAAC;AAEnJ,SAAS,eAAe,CAAC,QAAgB,EAAE,IAAa;IACtD,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,aAAa,CAAC,gCAAgC,EAAE,CAAC;QACvF,MAAM,GAAG,GAAI,IAA6B,EAAE,OAAO,IAAI,EAAE,CAAC;QAC1D,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,kBAAkB,EAAE,CAAC;YACrD,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YAC3D,CAAC;QACH,CAAC;IACH,CAAC;IACD,oEAAoE;IACpE,8CAA8C;IAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC5C,IAAI,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,oDAAoD,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjH,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,mDAAmD;AAClE,CAAC;AAED,SAAS,oBAAoB;IAC3B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC;AACjD,CAAC;AAED,IAAI,cAAc,GAAuB,IAAI,CAAC;AAC9C,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAE/B,KAAK,UAAU,cAAc;IAC3B,IAAI,kBAAkB;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACtC,kBAAkB,GAAG,IAAI,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QACxF,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9B,kEAAkE;YAClE,6DAA6D;YAC7D,wDAAwD;YACxD,kBAAkB,GAAG,IAAI,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,cAAc,GAAG,cAAc,CAAC;YAC9B,QAAQ,EAAE,WAAW;YACrB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,2BAA2B;SAC7E,CAAC,CAAC;QACH,OAAO,cAAc,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB,GAAG,IAAI,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,IAAa;IAC/D,OAAO;QACL,YAAY;QACZ,EAAE;QACF,uBAAuB;QACvB,SAAS,QAAQ,EAAE;QACnB,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE;QACvD,EAAE;QACF,WAAW;QACX,iDAAiD;QACjD,qEAAqE;QACrE,iDAAiD;KAClD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAA6C,CAAC;QAC7E,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;YACtD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACxF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,IAAa;IAClE,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAEhC,IAAI,CAAC,oBAAoB,EAAE,EAAE,CAAC;QAC5B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAClF,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAE,CAAC;IACxC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,4BAA4B,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC3F,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,CACjC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EACnC,EAAE,CACH,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;gBACL,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE,8CAA8C;gBACtD,MAAM,EAAE,OAAO;aAChB,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,mBAAoB,GAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,iBAAiB;YAChF,MAAM,EAAE,OAAO;SAChB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/core/schemaValidator.d.ts

@@ -0,0 +1,49 @@
+import type { JSONSchemaObject } from './types.js';
+/**
+ * Enhanced validation error with structured error information
+ */
+export declare class ToolArgumentValidationError extends Error {
+    readonly issues: readonly string[];
+    readonly toolName: string;
+    constructor(toolName: string, issues: string[]);
+}
+/**
+ * Runtime type guards for tool argument validation
+ */
+export declare namespace TypeGuards {
+    /**
+     * Type guard for string values
+     */
+    function isString(value: unknown): value is string;
+    /**
+     * Type guard for number values
+     */
+    function isNumber(value: unknown): value is number;
+    /**
+     * Type guard for boolean values
+     */
+    function isBoolean(value: unknown): value is boolean;
+    /**
+     * Type guard for array values
+     */
+    function isArray(value: unknown): value is unknown[];
+    /**
+     * Type guard for object values
+     */
+    function isObject(value: unknown): value is Record<string, unknown>;
+    /**
+     * Type guard for non-null values
+     */
+    function isNotNull(value: unknown): value is NonNullable<unknown>;
+    /**
+     * Type guard for enum values
+     */
+    function isEnum<T extends string>(value: unknown, enumValues: readonly T[]): value is T;
+}
+/**
+ * Coerce loosely-typed tool arguments into their declared schema types.
+ * This makes tools resilient to providers that emit boolean/number values as strings.
+ */
+export declare function coerceToolArguments(schema: JSONSchemaObject | undefined, args: Record<string, unknown>): Record<string, unknown>;
+export declare function validateToolArguments(toolName: string, schema: JSONSchemaObject | undefined, args: Record<string, unknown>): void;
+//# sourceMappingURL=schemaValidator.d.ts.map

package/dist/core/schemaValidator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemaValidator.d.ts","sourceRoot":"","sources":["../../src/core/schemaValidator.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAmB,gBAAgB,EAAsB,MAAM,YAAY,CAAC;AAExF;;GAEG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;CAM/C;AAED;;GAEG;AACH,yBAAiB,UAAU,CAAC;IAC1B;;OAEG;IACH,SAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD;IAED;;OAEG;IACH,SAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAExD;IAED;;OAEG;IACH,SAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,OAAO,CAE1D;IAED;;OAEG;IACH,SAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,OAAO,EAAE,CAE1D;IAED;;OAEG;IACH,SAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;IAED;;OAEG;IACH,SAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAAC,OAAO,CAAC,CAEvE;IAED;;OAEG;IACH,SAAgB,MAAM,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC,CAE7F;CACF;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,gBAAgB,GAAG,SAAS,EACpC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiCzB;AAoCD,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,gBAAgB,GAAG,SAAS,EACpC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,IAAI,CA6BN"}

package/dist/core/schemaValidator.js

@@ -0,0 +1,234 @@
+/**
+ * Enhanced validation error with structured error information
+ */
+export class ToolArgumentValidationError extends Error {
+    issues;
+    toolName;
+    constructor(toolName, issues) {
+        super(formatMessage(toolName, issues));
+        this.name = 'ToolArgumentValidationError';
+        this.issues = issues;
+        this.toolName = toolName;
+    }
+}
+/**
+ * Runtime type guards for tool argument validation
+ */
+export var TypeGuards;
+(function (TypeGuards) {
+    /**
+     * Type guard for string values
+     */
+    function isString(value) {
+        return typeof value === 'string';
+    }
+    TypeGuards.isString = isString;
+    /**
+     * Type guard for number values
+     */
+    function isNumber(value) {
+        return typeof value === 'number' && !Number.isNaN(value);
+    }
+    TypeGuards.isNumber = isNumber;
+    /**
+     * Type guard for boolean values
+     */
+    function isBoolean(value) {
+        return typeof value === 'boolean';
+    }
+    TypeGuards.isBoolean = isBoolean;
+    /**
+     * Type guard for array values
+     */
+    function isArray(value) {
+        return Array.isArray(value);
+    }
+    TypeGuards.isArray = isArray;
+    /**
+     * Type guard for object values
+     */
+    function isObject(value) {
+        return typeof value === 'object' && value !== null && !Array.isArray(value);
+    }
+    TypeGuards.isObject = isObject;
+    /**
+     * Type guard for non-null values
+     */
+    function isNotNull(value) {
+        return value !== undefined && value !== null;
+    }
+    TypeGuards.isNotNull = isNotNull;
+    /**
+     * Type guard for enum values
+     */
+    function isEnum(value, enumValues) {
+        return TypeGuards.isString(value) && enumValues.includes(value);
+    }
+    TypeGuards.isEnum = isEnum;
+})(TypeGuards || (TypeGuards = {}));
+/**
+ * Coerce loosely-typed tool arguments into their declared schema types.
+ * This makes tools resilient to providers that emit boolean/number values as strings.
+ */
+export function coerceToolArguments(schema, args) {
+    if (!schema || schema.type !== 'object' || !schema.properties) {
+        return args;
+    }
+    const coerced = { ...args };
+    for (const [key, definition] of Object.entries(schema.properties)) {
+        if (!Object.hasOwn(args, key)) {
+            continue;
+        }
+        const value = args[key];
+        if (value === undefined || value === null) {
+            continue;
+        }
+        switch (definition.type) {
+            case 'boolean': {
+                const normalized = coerceBoolean(value);
+                coerced[key] = normalized;
+                break;
+            }
+            case 'number': {
+                const normalized = coerceNumber(value);
+                coerced[key] = normalized;
+                break;
+            }
+            default:
+                break;
+        }
+    }
+    return coerced;
+}
+function coerceBoolean(value) {
+    if (typeof value === 'boolean') {
+        return value;
+    }
+    if (typeof value === 'number') {
+        if (value === 1)
+            return true;
+        if (value === 0)
+            return false;
+    }
+    if (typeof value === 'string') {
+        const trimmed = value.trim().toLowerCase();
+        if (trimmed === 'true' || trimmed === '1')
+            return true;
+        if (trimmed === 'false' || trimmed === '0')
+            return false;
+    }
+    return value;
+}
+function coerceNumber(value) {
+    if (typeof value === 'number') {
+        // Reject NaN, Infinity, and -Infinity
+        if (!Number.isFinite(value)) {
+            return value; // Return as-is to fail validation
+        }
+        return value;
+    }
+    if (typeof value === 'string' && value.trim().length > 0) {
+        const parsed = Number(value);
+        // Only accept finite numbers
+        if (Number.isFinite(parsed)) {
+            return parsed;
+        }
+    }
+    return value;
+}
+export function validateToolArguments(toolName, schema, args) {
+    if (!schema || schema.type !== 'object') {
+        return;
+    }
+    const errors = [];
+    const properties = schema.properties ?? {};
+    const required = Array.isArray(schema.required) ? schema.required : [];
+    for (const property of required) {
+        if (!hasArgument(args, property)) {
+            errors.push(`Missing required property "${property}".`);
+        }
+    }
+    for (const [key, value] of Object.entries(args)) {
+        const definition = properties[key];
+        if (!definition) {
+            // Silently ignore unknown properties - models sometimes hallucinate extra params
+            // This is more lenient than strict JSON schema validation but prevents errors
+            // when models pass extra parameters that don't affect tool behavior
+            continue;
+        }
+        validateSchemaProperty(definition, value, key, errors);
+    }
+    if (errors.length) {
+        throw new ToolArgumentValidationError(toolName, errors);
+    }
+}
+function validateSchemaProperty(definition, value, path, errors) {
+    switch (definition.type) {
+        case 'string': {
+            if (typeof value !== 'string') {
+                errors.push(`Argument "${path}" must be a string.`);
+                return;
+            }
+            if (definition.enum && !definition.enum.includes(value)) {
+                errors.push(`Argument "${path}" must be one of: ${definition.enum.map((entry) => `"${entry}"`).join(', ')}.`);
+            }
+            if (typeof definition.minLength === 'number' && value.length < definition.minLength) {
+                errors.push(`Argument "${path}" must be at least ${definition.minLength} character${definition.minLength === 1 ? '' : 's'} long.`);
+            }
+            return;
+        }
+        case 'number': {
+            if (typeof value !== 'number' || !Number.isFinite(value)) {
+                errors.push(`Argument "${path}" must be a finite number.`);
+                return;
+            }
+            // Validate minimum constraint
+            if (typeof definition.minimum === 'number' && value < definition.minimum) {
+                errors.push(`Argument "${path}" must be at least ${definition.minimum}.`);
+            }
+            // Validate maximum constraint
+            if (typeof definition.maximum === 'number' && value > definition.maximum) {
+                errors.push(`Argument "${path}" must be at most ${definition.maximum}.`);
+            }
+            return;
+        }
+        case 'boolean': {
+            if (typeof value !== 'boolean') {
+                errors.push(`Argument "${path}" must be a boolean.`);
+            }
+            return;
+        }
+        case 'array': {
+            if (!Array.isArray(value)) {
+                errors.push(`Argument "${path}" must be an array.`);
+                return;
+            }
+            validateArrayItems(definition, value, path, errors);
+            return;
+        }
+        default:
+            return;
+    }
+}
+function validateArrayItems(definition, value, path, errors) {
+    const itemSchema = definition.items;
+    if (!itemSchema) {
+        return;
+    }
+    for (let index = 0; index < value.length; index += 1) {
+        const entry = value[index];
+        validateSchemaProperty(itemSchema, entry, `${path}[${index}]`, errors);
+    }
+}
+function hasArgument(args, key) {
+    if (!Object.hasOwn(args, key)) {
+        return false;
+    }
+    const value = args[key];
+    return value !== undefined && value !== null;
+}
+function formatMessage(toolName, issues) {
+    const detail = issues.join(' ');
+    return `Invalid arguments for "${toolName}": ${detail}`;
+}
+//# sourceMappingURL=schemaValidator.js.map

package/dist/core/schemaValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemaValidator.js","sourceRoot":"","sources":["../../src/core/schemaValidator.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAC3C,MAAM,CAAoB;IAC1B,QAAQ,CAAS;IAE1B,YAAY,QAAgB,EAAE,MAAgB;QAC5C,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,KAAW,UAAU,CAiD1B;AAjDD,WAAiB,UAAU;IACzB;;OAEG;IACH,SAAgB,QAAQ,CAAC,KAAc;QACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;IACnC,CAAC;IAFe,mBAAQ,WAEvB,CAAA;IAED;;OAEG;IACH,SAAgB,QAAQ,CAAC,KAAc;QACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IAFe,mBAAQ,WAEvB,CAAA;IAED;;OAEG;IACH,SAAgB,SAAS,CAAC,KAAc;QACtC,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;IACpC,CAAC;IAFe,oBAAS,YAExB,CAAA;IAED;;OAEG;IACH,SAAgB,OAAO,CAAC,KAAc;QACpC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAFe,kBAAO,UAEtB,CAAA;IAED;;OAEG;IACH,SAAgB,QAAQ,CAAC,KAAc;QACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9E,CAAC;IAFe,mBAAQ,WAEvB,CAAA;IAED;;OAEG;IACH,SAAgB,SAAS,CAAC,KAAc;QACtC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;IAC/C,CAAC;IAFe,oBAAS,YAExB,CAAA;IAED;;OAEG;IACH,SAAgB,MAAM,CAAmB,KAAc,EAAE,UAAwB;QAC/E,OAAO,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAU,CAAC,CAAC;IACvE,CAAC;IAFe,iBAAM,SAErB,CAAA;AACH,CAAC,EAjDgB,UAAU,KAAV,UAAU,QAiD1B;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAoC,EACpC,IAA6B;IAE7B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAC;IAErD,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,SAAS;QACX,CAAC;QAED,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;YACxB,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;gBACxC,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;gBAC1B,MAAM;YACR,CAAC;YACD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBACvC,OAAO,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;gBAC1B,MAAM;YACR,CAAC;YACD;gBACE,MAAM;QACV,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAChC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACvD,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,sCAAsC;QACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,CAAC,kCAAkC;QAClD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,6BAA6B;QAC7B,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,MAAoC,EACpC,IAA6B;IAE7B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAEvE,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,8BAA8B,QAAQ,IAAI,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,iFAAiF;YACjF,8EAA8E;YAC9E,oEAAoE;YACpE,SAAS;QACX,CAAC;QACD,sBAAsB,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,2BAA2B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,UAA8B,EAC9B,KAAc,EACd,IAAY,EACZ,MAAgB;IAEhB,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,qBAAqB,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,IAAI,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxD,MAAM,CAAC,IAAI,CACT,aAAa,IAAI,qBAAqB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjG,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,CAAC;gBACpF,MAAM,CAAC,IAAI,CACT,aAAa,IAAI,sBAAsB,UAAU,CAAC,SAAS,aACzD,UAAU,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACpC,QAAQ,CACT,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,4BAA4B,CAAC,CAAC;gBAC3D,OAAO;YACT,CAAC;YACD,8BAA8B;YAC9B,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;gBACzE,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,sBAAsB,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC;YAC5E,CAAC;YACD,8BAA8B;YAC9B,IAAI,OAAO,UAAU,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;gBACzE,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,qBAAqB,UAAU,CAAC,OAAO,GAAG,CAAC,CAAC;YAC3E,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,sBAAsB,CAAC,CAAC;YACvD,CAAC;YACD,OAAO;QACT,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,qBAAqB,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,kBAAkB,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD;YACE,OAAO;IACX,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,UAA2B,EAC3B,KAAgB,EAChB,IAAY,EACZ,MAAgB;IAEhB,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC;IACpC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,sBAAsB,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,MAAM,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAA6B,EAAE,GAAW;IAC7D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,MAAgB;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,0BAA0B,QAAQ,MAAM,MAAM,EAAE,CAAC;AAC1D,CAAC"}

package/dist/core/secretStore.d.ts

@@ -0,0 +1,48 @@
+import type { ProviderId } from './types.js';
+export type SecretName = 'DEEPSEEK_API_KEY' | 'TAVILY_API_KEY';
+export interface SecretDefinition {
+    id: SecretName;
+    label: string;
+    description: string;
+    envVar: SecretName;
+    providers: ProviderId[];
+}
+export declare class MissingSecretError extends Error {
+    readonly secret: SecretDefinition;
+    constructor(secret: SecretDefinition);
+}
+export declare function listSecretDefinitions(): SecretDefinition[];
+export declare function getSecretDefinition(id: SecretName): SecretDefinition | null;
+export declare function getSecretValue(id: SecretName): string | null;
+/**
+ * Load all stored secrets into process.env at startup.
+ * This ensures secrets are available before any provider checks.
+ *
+ * IMPORTANT: Stored secrets always take precedence over environment variables
+ * for provider API keys. This ensures keys set via /secrets are used even if
+ * the user has old/stale keys exported in their shell environment.
+ */
+export declare function loadAllSecrets(): void;
+export declare function setSecretValue(id: SecretName, rawValue: string): void;
+export declare function maskSecret(value: string): string;
+export declare function ensureSecretForProvider(provider: ProviderId): string;
+export declare function getSecretDefinitionForProvider(provider: ProviderId): SecretDefinition | null;
+/**
+ * Sanitize error messages to remove potential API keys and secrets.
+ * This prevents accidental token leakage in logs, error reports, and console output.
+ *
+ * @param message - The error message or string to sanitize
+ * @returns The sanitized string with secrets replaced by [REDACTED]
+ */
+export declare function sanitizeErrorMessage(message: string): string;
+/**
+ * Sanitize an Error object's message and stack trace.
+ * Returns a new error message string with secrets removed.
+ */
+export declare function sanitizeError(error: Error): string;
+/**
+ * Create a safe error message from an unknown error value.
+ * Ensures no secrets are leaked regardless of error type.
+ */
+export declare function safeErrorMessage(error: unknown): string;
+//# sourceMappingURL=secretStore.d.ts.map

package/dist/core/secretStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretStore.d.ts","sourceRoot":"","sources":["../../src/core/secretStore.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,MAAM,UAAU,GAClB,kBAAkB,GAClB,gBAAgB,CAAC;AAErB,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,UAAU,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,UAAU,EAAE,CAAC;CACzB;AA2BD,qBAAa,kBAAmB,SAAQ,KAAK;aACf,MAAM,EAAE,gBAAgB;gBAAxB,MAAM,EAAE,gBAAgB;CAIrD;AAED,wBAAgB,qBAAqB,IAAI,gBAAgB,EAAE,CAE1D;AAED,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,UAAU,GAAG,gBAAgB,GAAG,IAAI,CAE3E;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAc5D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,IAAI,IAAI,CASrC;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAUrE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUhD;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,UAAU,GAAG,MAAM,CAQpE;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,UAAU,GAAG,gBAAgB,GAAG,IAAI,CAE5F;AAgFD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA4B5D;AAoCD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAQlD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQvD"}