@zibby/core 2.0.2 → 2.0.4

package/dist/strategies/utils/openai-proxy-formatter.js

@@ -1,9 +1,9 @@
-import h from"axios";import{homedir as _}from"node:os";import{join as S}from"node:path";import{existsSync as P,readFileSync as k}from"node:fs";import{toJSONSchema as A}from"zod";import f from"chalk";var l={debug:0,info:1,warn:2,error:3,silent:4},g=class{constructor(){this._level=this._getLogLevel()}_getLogLevel(){if(process.env.ZIBBY_DEBUG==="true")return l.debug;if(process.env.ZIBBY_VERBOSE==="true")return l.info;let a=process.env.LOG_LEVEL?.toLowerCase();return a&&a in l?l[a]:l.info}_shouldLog(a){return l[a]>=this._level}_formatMessage(a,o,d={}){let r=new Date().toISOString(),s=`${this._getPrefix(a)} ${o}`;return Object.keys(d).length>0&&(s+=f.dim(` ${JSON.stringify(d)}`)),s}_getPrefix(a){return{debug:f.gray("[DEBUG]"),info:f.cyan("[INFO]"),warn:f.yellow("[WARN]"),error:f.red("\u274C [ERROR]")}[a]||""}debug(a,o){this._shouldLog("debug")&&console.log(this._formatMessage("debug",a,o))}info(a,o){this._shouldLog("info")&&console.log(this._formatMessage("info",a,o))}warn(a,o){this._shouldLog("warn")&&console.warn(this._formatMessage("warn",a,o))}error(a,o){this._shouldLog("error")&&console.error(this._formatMessage("error",a,o))}setLevel(a){a in l&&(this._level=l[a])}getLevel(){return Object.keys(l).find(a=>l[a]===this._level)}},i=new g;var x=[{alias:"auto",canonicalId:"claude-sonnet-4-6",vendor:"claude",family:"claude-sonnet-4",isDefault:!0},{alias:"opus-4.8",canonicalId:"claude-opus-4-8",vendor:"claude",label:"Claude \xB7 Opus 4.8",family:"claude-opus-4",pickerVisible:!0},{alias:"opus-4-8",canonicalId:"claude-opus-4-8",vendor:"claude",family:"claude-opus-4",aliasOf:"opus-4.8"},{alias:"opus-5",canonicalId:"claude-opus-5",vendor:"claude",label:"Claude \xB7 Opus 5",family:"claude-opus-5",pickerVisible:!0},{alias:"claude-opus-5",canonicalId:"claude-opus-5",vendor:"claude",family:"claude-opus-5",aliasOf:"opus-5"},{alias:"sonnet-5",canonicalId:"claude-sonnet-5",vendor:"claude",label:"Claude \xB7 Sonnet 5",family:"claude-sonnet-5",pickerVisible:!0},{alias:"claude-sonnet-5",canonicalId:"claude-sonnet-5",vendor:"claude",family:"claude-sonnet-5",aliasOf:"sonnet-5"},{alias:"fable-5",canonicalId:"claude-fable-5",vendor:"claude",label:"Claude \xB7 Fable 5",family:"claude-fable-5",pickerVisible:!0},{alias:"claude-fable-5",canonicalId:"claude-fable-5",vendor:"claude",family:"claude-fable-5",aliasOf:"fable-5"},{alias:"sonnet-4.8",canonicalId:"claude-sonnet-4-6",vendor:"claude",family:"claude-sonnet-4"},{alias:"sonnet-4-8",canonicalId:"claude-sonnet-4-6",vendor:"claude",family:"claude-sonnet-4",aliasOf:"sonnet-4.8"},{alias:"opus-4.7",canonicalId:"claude-opus-4-7",vendor:"claude",label:"Claude \xB7 Opus 4.7",family:"claude-opus-4",pickerVisible:!0},{alias:"opus-4-7",canonicalId:"claude-opus-4-7",vendor:"claude",family:"claude-opus-4",aliasOf:"opus-4.7"},{alias:"sonnet-4.7",canonicalId:"claude-sonnet-4-6",vendor:"claude",family:"claude-sonnet-4"},{alias:"sonnet-4-7",canonicalId:"claude-sonnet-4-6",vendor:"claude",family:"claude-sonnet-4",aliasOf:"sonnet-4.7"},{alias:"sonnet-4.6",canonicalId:"claude-sonnet-4-6",vendor:"claude",label:"Claude \xB7 Sonnet 4.6",family:"claude-sonnet-4",pickerVisible:!0,aliasOf:"auto"},{alias:"sonnet-4-6",canonicalId:"claude-sonnet-4-6",vendor:"claude",family:"claude-sonnet-4",aliasOf:"auto"},{alias:"opus-4.6",canonicalId:"claude-opus-4-6",vendor:"claude",label:"Claude \xB7 Opus 4.6",family:"claude-opus-4",pickerVisible:!0},{alias:"opus-4-6",canonicalId:"claude-opus-4-6",vendor:"claude",family:"claude-opus-4",aliasOf:"opus-4.6"},{alias:"sonnet-4.5",canonicalId:"claude-sonnet-4-5-20250929",vendor:"claude",label:"Claude \xB7 Sonnet 4.5",family:"claude-sonnet-4",pickerVisible:!0},{alias:"sonnet-4-5",canonicalId:"claude-sonnet-4-5-20250929",vendor:"claude",family:"claude-sonnet-4",aliasOf:"sonnet-4.5"},{alias:"opus-4.5",canonicalId:"claude-opus-4-5-20251101",vendor:"claude",label:"Claude \xB7 Opus 4.5",family:"claude-opus-4",pickerVisible:!0},{alias:"opus-4-5",canonicalId:"claude-opus-4-5-20251101",vendor:"claude",family:"claude-opus-4",aliasOf:"opus-4.5"},{alias:"haiku-4.5",canonicalId:"claude-haiku-4-5-20251001",vendor:"claude",label:"Claude \xB7 Haiku 4.5",family:"claude-haiku-4"},{alias:"haiku-4-5",canonicalId:"claude-haiku-4-5-20251001",vendor:"claude",family:"claude-haiku-4",aliasOf:"haiku-4.5"},{alias:"claude-opus-4-8",canonicalId:"claude-opus-4-8",vendor:"claude",family:"claude-opus-4",aliasOf:"opus-4.8"},{alias:"claude-sonnet-4-8",canonicalId:"claude-sonnet-4-6",vendor:"claude",family:"claude-sonnet-4",aliasOf:"sonnet-4.8"},{alias:"claude-opus-4-7",canonicalId:"claude-opus-4-7",vendor:"claude",family:"claude-opus-4",aliasOf:"opus-4.7"},{alias:"claude-sonnet-4-7",canonicalId:"claude-sonnet-4-6",vendor:"claude",family:"claude-sonnet-4",aliasOf:"sonnet-4.7"},{alias:"claude-sonnet-4-6",canonicalId:"claude-sonnet-4-6",vendor:"claude",family:"claude-sonnet-4",aliasOf:"auto"},{alias:"claude-opus-4-6",canonicalId:"claude-opus-4-6",vendor:"claude",family:"claude-opus-4",aliasOf:"opus-4.6"},{alias:"claude-sonnet-4-5-20250929",canonicalId:"claude-sonnet-4-5-20250929",vendor:"claude",family:"claude-sonnet-4",aliasOf:"sonnet-4.5"},{alias:"claude-opus-4-5-20251101",canonicalId:"claude-opus-4-5-20251101",vendor:"claude",family:"claude-opus-4",aliasOf:"opus-4.5"},{alias:"claude-haiku-4-5-20251001",canonicalId:"claude-haiku-4-5-20251001",vendor:"claude",family:"claude-haiku-4",aliasOf:"haiku-4.5"},{alias:"claude-opus-4-20250514",canonicalId:"claude-opus-4-20250514",vendor:"claude",family:"claude-opus-4",aliasOf:"opus-4.5"},{alias:"auto",canonicalId:"gpt-5.6-luna",vendor:"codex",family:"gpt-5",isDefault:!0},{alias:"o4-mini",canonicalId:"o4-mini",vendor:"codex",label:"Codex \xB7 o4-mini",family:"o4-mini",pickerVisible:!0},{alias:"o3",canonicalId:"o3",vendor:"codex",family:"o3"},{alias:"o3-mini",canonicalId:"o3-mini",vendor:"codex",family:"o3-mini"},{alias:"codex-mini",canonicalId:"codex-mini-latest",vendor:"codex",family:"codex-mini"},{alias:"gpt-4o",canonicalId:"gpt-4o",vendor:"codex",label:"Codex \xB7 GPT-4o",family:"gpt-4o",pickerVisible:!0},{alias:"gpt-4o-mini",canonicalId:"gpt-4o-mini",vendor:"codex",label:"Codex \xB7 GPT-4o mini",family:"gpt-4o-mini",pickerVisible:!0},{alias:"gpt-5.2-codex",canonicalId:"gpt-5.2-codex",vendor:"codex",label:"Codex \xB7 GPT-5.2",family:"gpt-5",pickerVisible:!0},{alias:"gpt-5.2",canonicalId:"gpt-5.2",vendor:"codex",label:"Codex \xB7 GPT-5.2 base",family:"gpt-5",pickerVisible:!0},{alias:"gpt-5.3",canonicalId:"gpt-5.3",vendor:"codex",label:"Codex \xB7 GPT-5.3",family:"gpt-5",pickerVisible:!0},{alias:"gpt-5.3-codex",canonicalId:"gpt-5.3-codex",vendor:"codex",family:"gpt-5"},{alias:"gpt-5.4",canonicalId:"gpt-5.4",vendor:"codex",label:"Codex \xB7 GPT-5.4",family:"gpt-5"},{alias:"gpt-5.5",canonicalId:"gpt-5.5",vendor:"codex",label:"Codex \xB7 GPT-5.5",family:"gpt-5",pickerVisible:!0},{alias:"gpt-5.6-luna",canonicalId:"gpt-5.6-luna",vendor:"codex",label:"Codex \xB7 GPT-5.6 Luna",family:"gpt-5",pickerVisible:!0},{alias:"gpt-5.6-terra",canonicalId:"gpt-5.6-terra",vendor:"codex",label:"Codex \xB7 GPT-5.6 Terra",family:"gpt-5",pickerVisible:!0},{alias:"auto",canonicalId:"gemini-3-pro",vendor:"gemini",family:"gemini-3",isDefault:!0},{alias:"gemini-3-pro",canonicalId:"gemini-3-pro",vendor:"gemini",label:"Gemini \xB7 3 Pro",family:"gemini-3",pickerVisible:!0},{alias:"gemini-3-flash",canonicalId:"gemini-3-flash",vendor:"gemini",label:"Gemini \xB7 3 Flash",family:"gemini-3",pickerVisible:!0},{alias:"gemini-2.5-pro",canonicalId:"gemini-2.5-pro",vendor:"gemini",label:"Gemini \xB7 2.5 Pro",family:"gemini-2.5",pickerVisible:!0},{alias:"gemini-2.5-flash",canonicalId:"gemini-2.5-flash",vendor:"gemini",label:"Gemini \xB7 2.5 Flash",family:"gemini-2.5",pickerVisible:!0}];function m(e){let a={};for(let o of x)o.vendor===e&&(a[o.alias]=o.canonicalId);return a}var y={ASSISTANT:"gpt-5.4-nano-2026-03-17",CLAUDE:"claude-sonnet-4-6",CURSOR:"auto",CODEX:"o4-mini",GEMINI:"gemini-3-pro",OPENAI_POSTPROCESSING:"gpt-4o-mini"};var D=m("claude"),$=m("codex"),w=m("gemini"),I={CURSOR_AGENT_DEFAULT:1200*1e3,OPENAI_REQUEST:18e4};function T(){if(process.env.OPENAI_PROXY_TOKEN)return i.debug("[Auth] Using OPENAI_PROXY_TOKEN (ECS execution)"),process.env.OPENAI_PROXY_TOKEN;if(process.env.ZIBBY_USER_TOKEN)return i.debug("[Auth] Using ZIBBY_USER_TOKEN (CI/CD PAT)"),process.env.ZIBBY_USER_TOKEN;try{let e=S(_(),".zibby","config.json");if(P(e)){let a=JSON.parse(k(e,"utf-8"));if(a.sessionToken)return i.debug("[Auth] Using session token from zibby login"),a.sessionToken}}catch(e){i.debug(`[Auth] Could not read zibby login session: ${e.message}`)}return null}function C(){return process.env.OPENAI_PROXY_URL?process.env.OPENAI_PROXY_URL.replace(/\/v1\/?$/,""):"https://api-prod.zibby.app/openai-proxy"}function u(e){if(!(typeof e!="object"||e===null)){if(Object.keys(e).length===0){e.type="object",e.additionalProperties=!0;return}if(e.type||(e.properties?e.type="object":e.items&&(e.type="array")),e.type==="object")if(e.properties){for(let[a,o]of Object.entries(e.properties))o.type==="object"&&o.additionalProperties&&o.additionalProperties!==!1&&(!o.properties||Object.keys(o.properties).length===0)&&(e.properties[a]={type:["object","null"]});e.additionalProperties=!1,e.required=Object.keys(e.properties),Object.values(e.properties).forEach(u)}else"additionalProperties"in e||(e.additionalProperties=!0);e.type==="array"&&e.items&&u(e.items),e.anyOf&&e.anyOf.forEach(u),e.oneOf&&e.oneOf.forEach(u),e.allOf&&e.allOf.forEach(u)}}async function K(e,a){i.info("\u{1F527} [OpenAI Proxy] Formatting structured output...");let o=T();if(!o)throw new Error("Authentication required for structured output processing.\n  Local development: Run `zibby login`\n  CI/CD: Set ZIBBY_USER_TOKEN environment variable (Personal Access Token from UI settings)");let d=C();i.info(`\u{1F517} Using OpenAI proxy: ${d}`);let r=A(a),t=r;if(r.$ref&&r.definitions){let n=r.$ref.split("/").pop();t=r.definitions[n]||r,i.debug(`Extracted schema from $ref: ${n}`)}delete t.$schema,u(t);let s=4e5,O=e;e.length>s&&(i.warn(`\u26A0\uFE0F  [OpenAI Proxy] Raw text (${e.length} chars) exceeds limit, keeping last ${s} chars`),O=`... [truncated early content] ...
+import h from"axios";import{homedir as _}from"node:os";import{join as S}from"node:path";import{existsSync as P,readFileSync as k}from"node:fs";import{toJSONSchema as A}from"zod";import f from"chalk";var l={debug:0,info:1,warn:2,error:3,silent:4},g=class{constructor(){this._level=this._getLogLevel()}_getLogLevel(){if(process.env.ZIBBY_DEBUG==="true")return l.debug;if(process.env.ZIBBY_VERBOSE==="true")return l.info;let o=process.env.LOG_LEVEL?.toLowerCase();return o&&o in l?l[o]:l.info}_shouldLog(o){return l[o]>=this._level}_formatMessage(o,a,d={}){let r=new Date().toISOString(),s=`${this._getPrefix(o)} ${a}`;return Object.keys(d).length>0&&(s+=f.dim(` ${JSON.stringify(d)}`)),s}_getPrefix(o){return{debug:f.gray("[DEBUG]"),info:f.cyan("[INFO]"),warn:f.yellow("[WARN]"),error:f.red("\u274C [ERROR]")}[o]||""}debug(o,a){this._shouldLog("debug")&&console.log(this._formatMessage("debug",o,a))}info(o,a){this._shouldLog("info")&&console.log(this._formatMessage("info",o,a))}warn(o,a){this._shouldLog("warn")&&console.warn(this._formatMessage("warn",o,a))}error(o,a){this._shouldLog("error")&&console.error(this._formatMessage("error",o,a))}setLevel(o){o in l&&(this._level=l[o])}getLevel(){return Object.keys(l).find(o=>l[o]===this._level)}},i=new g;var x=[{alias:"opus-4.8",canonicalId:"claude-opus-4-8",vendor:"claude",label:"Claude \xB7 Opus 4.8",family:"claude-opus-4",pickerVisible:!0},{alias:"opus-4-8",canonicalId:"claude-opus-4-8",vendor:"claude",family:"claude-opus-4",aliasOf:"opus-4.8"},{alias:"opus-5",canonicalId:"claude-opus-5",vendor:"claude",label:"Claude \xB7 Opus 5",family:"claude-opus-5",pickerVisible:!0},{alias:"claude-opus-5",canonicalId:"claude-opus-5",vendor:"claude",family:"claude-opus-5",aliasOf:"opus-5"},{alias:"sonnet-5",canonicalId:"claude-sonnet-5",vendor:"claude",label:"Claude \xB7 Sonnet 5",family:"claude-sonnet-5",pickerVisible:!0},{alias:"claude-sonnet-5",canonicalId:"claude-sonnet-5",vendor:"claude",family:"claude-sonnet-5",aliasOf:"sonnet-5"},{alias:"fable-5",canonicalId:"claude-fable-5",vendor:"claude",label:"Claude \xB7 Fable 5",family:"claude-fable-5",pickerVisible:!0},{alias:"claude-fable-5",canonicalId:"claude-fable-5",vendor:"claude",family:"claude-fable-5",aliasOf:"fable-5"},{alias:"sonnet-4.8",canonicalId:"claude-sonnet-4-6",vendor:"claude",family:"claude-sonnet-4"},{alias:"sonnet-4-8",canonicalId:"claude-sonnet-4-6",vendor:"claude",family:"claude-sonnet-4",aliasOf:"sonnet-4.8"},{alias:"opus-4.7",canonicalId:"claude-opus-4-7",vendor:"claude",label:"Claude \xB7 Opus 4.7",family:"claude-opus-4",pickerVisible:!0},{alias:"opus-4-7",canonicalId:"claude-opus-4-7",vendor:"claude",family:"claude-opus-4",aliasOf:"opus-4.7"},{alias:"sonnet-4.7",canonicalId:"claude-sonnet-4-6",vendor:"claude",family:"claude-sonnet-4"},{alias:"sonnet-4-7",canonicalId:"claude-sonnet-4-6",vendor:"claude",family:"claude-sonnet-4",aliasOf:"sonnet-4.7"},{alias:"sonnet-4.6",canonicalId:"claude-sonnet-4-6",vendor:"claude",label:"Claude \xB7 Sonnet 4.6",family:"claude-sonnet-4",pickerVisible:!0},{alias:"sonnet-4-6",canonicalId:"claude-sonnet-4-6",vendor:"claude",family:"claude-sonnet-4",aliasOf:"sonnet-4.6"},{alias:"opus-4.6",canonicalId:"claude-opus-4-6",vendor:"claude",label:"Claude \xB7 Opus 4.6",family:"claude-opus-4",pickerVisible:!0},{alias:"opus-4-6",canonicalId:"claude-opus-4-6",vendor:"claude",family:"claude-opus-4",aliasOf:"opus-4.6"},{alias:"sonnet-4.5",canonicalId:"claude-sonnet-4-5-20250929",vendor:"claude",label:"Claude \xB7 Sonnet 4.5",family:"claude-sonnet-4",pickerVisible:!0},{alias:"sonnet-4-5",canonicalId:"claude-sonnet-4-5-20250929",vendor:"claude",family:"claude-sonnet-4",aliasOf:"sonnet-4.5"},{alias:"opus-4.5",canonicalId:"claude-opus-4-5-20251101",vendor:"claude",label:"Claude \xB7 Opus 4.5",family:"claude-opus-4",pickerVisible:!0},{alias:"opus-4-5",canonicalId:"claude-opus-4-5-20251101",vendor:"claude",family:"claude-opus-4",aliasOf:"opus-4.5"},{alias:"haiku-4.5",canonicalId:"claude-haiku-4-5-20251001",vendor:"claude",label:"Claude \xB7 Haiku 4.5",family:"claude-haiku-4"},{alias:"haiku-4-5",canonicalId:"claude-haiku-4-5-20251001",vendor:"claude",family:"claude-haiku-4",aliasOf:"haiku-4.5"},{alias:"claude-opus-4-8",canonicalId:"claude-opus-4-8",vendor:"claude",family:"claude-opus-4",aliasOf:"opus-4.8"},{alias:"claude-sonnet-4-8",canonicalId:"claude-sonnet-4-6",vendor:"claude",family:"claude-sonnet-4",aliasOf:"sonnet-4.8"},{alias:"claude-opus-4-7",canonicalId:"claude-opus-4-7",vendor:"claude",family:"claude-opus-4",aliasOf:"opus-4.7"},{alias:"claude-sonnet-4-7",canonicalId:"claude-sonnet-4-6",vendor:"claude",family:"claude-sonnet-4",aliasOf:"sonnet-4.7"},{alias:"claude-sonnet-4-6",canonicalId:"claude-sonnet-4-6",vendor:"claude",family:"claude-sonnet-4",aliasOf:"sonnet-4.6"},{alias:"claude-opus-4-6",canonicalId:"claude-opus-4-6",vendor:"claude",family:"claude-opus-4",aliasOf:"opus-4.6"},{alias:"claude-sonnet-4-5-20250929",canonicalId:"claude-sonnet-4-5-20250929",vendor:"claude",family:"claude-sonnet-4",aliasOf:"sonnet-4.5"},{alias:"claude-opus-4-5-20251101",canonicalId:"claude-opus-4-5-20251101",vendor:"claude",family:"claude-opus-4",aliasOf:"opus-4.5"},{alias:"claude-haiku-4-5-20251001",canonicalId:"claude-haiku-4-5-20251001",vendor:"claude",family:"claude-haiku-4",aliasOf:"haiku-4.5"},{alias:"claude-opus-4-20250514",canonicalId:"claude-opus-4-20250514",vendor:"claude",family:"claude-opus-4",aliasOf:"opus-4.5"},{alias:"o4-mini",canonicalId:"o4-mini",vendor:"codex",label:"Codex \xB7 o4-mini",family:"o4-mini",pickerVisible:!0},{alias:"o3",canonicalId:"o3",vendor:"codex",family:"o3"},{alias:"o3-mini",canonicalId:"o3-mini",vendor:"codex",family:"o3-mini"},{alias:"codex-mini",canonicalId:"codex-mini-latest",vendor:"codex",family:"codex-mini"},{alias:"gpt-4o",canonicalId:"gpt-4o",vendor:"codex",label:"Codex \xB7 GPT-4o",family:"gpt-4o",pickerVisible:!0},{alias:"gpt-4o-mini",canonicalId:"gpt-4o-mini",vendor:"codex",label:"Codex \xB7 GPT-4o mini",family:"gpt-4o-mini",pickerVisible:!0},{alias:"gpt-5.2-codex",canonicalId:"gpt-5.2-codex",vendor:"codex",label:"Codex \xB7 GPT-5.2",family:"gpt-5",pickerVisible:!0},{alias:"gpt-5.2",canonicalId:"gpt-5.2",vendor:"codex",label:"Codex \xB7 GPT-5.2 base",family:"gpt-5",pickerVisible:!0},{alias:"gpt-5.3",canonicalId:"gpt-5.3",vendor:"codex",label:"Codex \xB7 GPT-5.3",family:"gpt-5",pickerVisible:!0},{alias:"gpt-5.3-codex",canonicalId:"gpt-5.3-codex",vendor:"codex",family:"gpt-5"},{alias:"gpt-5.4",canonicalId:"gpt-5.4",vendor:"codex",label:"Codex \xB7 GPT-5.4",family:"gpt-5"},{alias:"gpt-5.5",canonicalId:"gpt-5.5",vendor:"codex",label:"Codex \xB7 GPT-5.5",family:"gpt-5",pickerVisible:!0},{alias:"gpt-5.6-luna",canonicalId:"gpt-5.6-luna",vendor:"codex",label:"Codex \xB7 GPT-5.6 Luna",family:"gpt-5",pickerVisible:!0},{alias:"gpt-5.6-terra",canonicalId:"gpt-5.6-terra",vendor:"codex",label:"Codex \xB7 GPT-5.6 Terra",family:"gpt-5",pickerVisible:!0},{alias:"gemini-3-pro",canonicalId:"gemini-3-pro",vendor:"gemini",label:"Gemini \xB7 3 Pro",family:"gemini-3",pickerVisible:!0},{alias:"gemini-3-flash",canonicalId:"gemini-3-flash",vendor:"gemini",label:"Gemini \xB7 3 Flash",family:"gemini-3",pickerVisible:!0},{alias:"gemini-2.5-pro",canonicalId:"gemini-2.5-pro",vendor:"gemini",label:"Gemini \xB7 2.5 Pro",family:"gemini-2.5",pickerVisible:!0},{alias:"gemini-2.5-flash",canonicalId:"gemini-2.5-flash",vendor:"gemini",label:"Gemini \xB7 2.5 Flash",family:"gemini-2.5",pickerVisible:!0}];function m(e){let o={};for(let a of x)a.vendor===e&&(o[a.alias]=a.canonicalId);return o}var y={ASSISTANT:"gpt-5.4-nano-2026-03-17",CLAUDE:"claude-sonnet-4-6",CURSOR:"auto",CODEX:"o4-mini",GEMINI:"gemini-3-pro",OPENAI_POSTPROCESSING:"gpt-4o-mini"};var $=m("claude"),w=m("codex"),M=m("gemini"),I={CURSOR_AGENT_DEFAULT:1200*1e3,OPENAI_REQUEST:18e4};function T(){if(process.env.OPENAI_PROXY_TOKEN)return i.debug("[Auth] Using OPENAI_PROXY_TOKEN (ECS execution)"),process.env.OPENAI_PROXY_TOKEN;if(process.env.ZIBBY_USER_TOKEN)return i.debug("[Auth] Using ZIBBY_USER_TOKEN (CI/CD PAT)"),process.env.ZIBBY_USER_TOKEN;try{let e=S(_(),".zibby","config.json");if(P(e)){let o=JSON.parse(k(e,"utf-8"));if(o.sessionToken)return i.debug("[Auth] Using session token from zibby login"),o.sessionToken}}catch(e){i.debug(`[Auth] Could not read zibby login session: ${e.message}`)}return null}function C(){return process.env.OPENAI_PROXY_URL?process.env.OPENAI_PROXY_URL.replace(/\/v1\/?$/,""):"https://api-prod.zibby.app/openai-proxy"}function u(e){if(!(typeof e!="object"||e===null)){if(Object.keys(e).length===0){e.type="object",e.additionalProperties=!0;return}if(e.type||(e.properties?e.type="object":e.items&&(e.type="array")),e.type==="object")if(e.properties){for(let[o,a]of Object.entries(e.properties))a.type==="object"&&a.additionalProperties&&a.additionalProperties!==!1&&(!a.properties||Object.keys(a.properties).length===0)&&(e.properties[o]={type:["object","null"]});e.additionalProperties=!1,e.required=Object.keys(e.properties),Object.values(e.properties).forEach(u)}else"additionalProperties"in e||(e.additionalProperties=!0);e.type==="array"&&e.items&&u(e.items),e.anyOf&&e.anyOf.forEach(u),e.oneOf&&e.oneOf.forEach(u),e.allOf&&e.allOf.forEach(u)}}async function K(e,o){i.info("\u{1F527} [OpenAI Proxy] Formatting structured output...");let a=T();if(!a)throw new Error("Authentication required for structured output processing.\n  Local development: Run `zibby login`\n  CI/CD: Set ZIBBY_USER_TOKEN environment variable (Personal Access Token from UI settings)");let d=C();i.info(`\u{1F517} Using OpenAI proxy: ${d}`);let r=A(o),t=r;if(r.$ref&&r.definitions){let n=r.$ref.split("/").pop();t=r.definitions[n]||r,i.debug(`Extracted schema from $ref: ${n}`)}delete t.$schema,u(t);let s=4e5,O=e;e.length>s&&(i.warn(`\u26A0\uFE0F  [OpenAI Proxy] Raw text (${e.length} chars) exceeds limit, keeping last ${s} chars`),O=`... [truncated early content] ...
 ${e.slice(-s)}`);let b=`Extract and format the following information into structured JSON matching the schema.
 
 RAW CONTENT:
 ${O}
 
-Extract all relevant information and format it according to the schema. If any required fields are missing, do your best to infer them from the content.`,v={model:y.OPENAI_POSTPROCESSING,messages:[{role:"user",content:b}],response_format:{type:"json_schema",json_schema:{name:"extract",schema:t,strict:!0}}};i.info(`\u{1F4E4} Sending to OpenAI proxy: model=${y.OPENAI_POSTPROCESSING}, schema keys=${Object.keys(t.properties||{}).join(", ")}`),i.debug(`   Schema size: ${JSON.stringify(t).length} chars`),i.debug(`   Prompt size: ${b.length} chars`);try{let n={"Content-Type":"application/json"};process.env.OPENAI_PROXY_TOKEN?(n["x-proxy-token"]=o,n["x-execution-id"]=process.env.EXECUTION_ID||""):(n.Authorization=`Bearer ${o}`,n["x-api-key"]=process.env.ZIBBY_API_KEY||"",n["x-execution-id"]=process.env.EXECUTION_ID||"");let c=(await h.post(d,v,{headers:n,timeout:I.OPENAI_REQUEST})).data?.choices?.[0]?.message?.content;if(!c)throw new Error("OpenAI proxy returned empty response");let E=JSON.parse(c);return i.info("\u2705 Successfully formatted with OpenAI proxy"),{structured:E,raw:e}}catch(n){if(n.response){let p=n.response.status,c=n.response.data;throw i.error(`\u274C OpenAI proxy request failed: ${p}`),i.error(`   Status: ${p}`),i.error(`   Response: ${JSON.stringify(c,null,2)}`),p===401||p===403?new Error(`Authentication failed for OpenAI proxy.
+Extract all relevant information and format it according to the schema. If any required fields are missing, do your best to infer them from the content.`,v={model:y.OPENAI_POSTPROCESSING,messages:[{role:"user",content:b}],response_format:{type:"json_schema",json_schema:{name:"extract",schema:t,strict:!0}}};i.info(`\u{1F4E4} Sending to OpenAI proxy: model=${y.OPENAI_POSTPROCESSING}, schema keys=${Object.keys(t.properties||{}).join(", ")}`),i.debug(`   Schema size: ${JSON.stringify(t).length} chars`),i.debug(`   Prompt size: ${b.length} chars`);try{let n={"Content-Type":"application/json"};process.env.OPENAI_PROXY_TOKEN?(n["x-proxy-token"]=a,n["x-execution-id"]=process.env.EXECUTION_ID||""):(n.Authorization=`Bearer ${a}`,n["x-api-key"]=process.env.ZIBBY_API_KEY||"",n["x-execution-id"]=process.env.EXECUTION_ID||"");let c=(await h.post(d,v,{headers:n,timeout:I.OPENAI_REQUEST})).data?.choices?.[0]?.message?.content;if(!c)throw new Error("OpenAI proxy returned empty response");let E=JSON.parse(c);return i.info("\u2705 Successfully formatted with OpenAI proxy"),{structured:E,raw:e}}catch(n){if(n.response){let p=n.response.status,c=n.response.data;throw i.error(`\u274C OpenAI proxy request failed: ${p}`),i.error(`   Status: ${p}`),i.error(`   Response: ${JSON.stringify(c,null,2)}`),p===401||p===403?new Error(`Authentication failed for OpenAI proxy.
   Run \`zibby login\` or set ZIBBY_USER_TOKEN environment variable.
   Response: ${JSON.stringify(c)}`,{cause:n}):new Error(`Failed to format Cursor output: ${c?.error?.message||"Unknown error"}`,{cause:n})}throw i.error(`\u274C OpenAI proxy request failed: ${n.message}`),new Error(`Failed to format output: ${n.message}`,{cause:n})}}export{K as formatWithOpenAIProxy};

package/dist/utils/repo-clone.js

@@ -1 +1 @@
-import{execSync as v}from"node:child_process";import{existsSync as A,mkdirSync as N}from"node:fs";import{join as C}from"node:path";function y(t,e,r,o,s="clone"){try{t(`git -C "${e}" remote set-url origin "${r}"`,{stdio:"pipe"})}catch(c){let i=String(c&&c.message||c);o&&(i=i.split(o).join("***")),console.error(`[${s}] WARNING: failed to strip token from .git/config: ${i}`)}}import{existsSync as L,readFileSync as j}from"node:fs";import{homedir as P}from"node:os";import{join as K}from"node:path";var Z=Object.freeze(["github.com","gitlab.com"]);function u(t){try{return new URL(t).hostname.toLowerCase()}catch{return""}}function E(t){if(typeof t!="string"||t===""||/[\\\x00-\x20\x7f]/.test(t))return"";let e;try{e=new URL(t)}catch{return""}return e.protocol!=="https:"?"":e.hostname.toLowerCase()}function x(t=process.env){let e=t&&(t.GITLAB_URL||t.GITLAB_INSTANCE_URL)||"";return u(e)}function m(t={}){if(t.gitlabHost){let e=String(t.gitlabHost).trim().toLowerCase();return e?e.includes("://")?u(e):e.replace(/:\d+$/,""):""}return x()}function O(t,e={}){if(t==="github.com")return"github";if(t==="gitlab.com")return"gitlab";let r=m(e);return r&&t===r?"gitlab":null}function b(t={},e={}){let r=t&&(t.cloneUrl||t.url)||"",o=u(r);if(!o)return null;let s=t.provider==="github"||t.provider==="gitlab"?t.provider:null,c=$(t,e),i=O(o,c?{gitlabHost:c}:{});return i?s&&s!==i?null:i:s==="gitlab"?"gitlab":null}function $(t,e={}){let r=m(e);return r||(t&&t.provider==="gitlab"?E(t.cloneUrl||t.url||""):"")}function T(t={},e="",r={}){let o=t&&(t.cloneUrl||t.url)||"";if(!o||!e||!b(t,r))return o;let s=$(t,r);return k(o,e,s?{gitlabHost:s}:{})}function k(t,e,r={}){if(!t||!e)return t;let o=E(t);if(!o)return t;if(o==="github.com")return t.replace(/^https:\/\/(?:[^@/]+@)?github\.com(?=[:/]|$)/i,`https://x-access-token:${e}@github.com`);if(o==="gitlab.com")return t.replace(/^https:\/\/(?:[^@/]+@)?gitlab\.com(?=[:/]|$)/i,`https://oauth2:${e}@gitlab.com`);let s=m(r);if(s&&o===s){let c=s.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),i=new RegExp(`^https:\\/\\/(?:[^@/]+@)?${c}(?=[:/]|$)`,"i");return t.replace(i,`https://oauth2:${e}@${s}`)}return t}async function Q(t={}){let{baseDir:e="/workspace/repos",repos:r=null,depth:o=1,branch:s=null}=t,c=process.env.REPOS;if(!c)throw new Error("REPOS environment variable not set. Are you running in a Zibby workflow container?");let i;try{i=JSON.parse(c)}catch(n){throw new Error(`Failed to parse REPOS env var: ${n.message}`,{cause:n})}if(!Array.isArray(i)||i.length===0)throw new Error("No repositories configured for this project");let w=r?i.filter(n=>r.includes(n.name)):i;if(w.length===0)throw new Error(`No matching repositories found. Available: ${i.map(n=>n.name).join(", ")}`);A(e)||N(e,{recursive:!0});let l={};return await Promise.all(w.map(async n=>{let a=n.cloneUrl||n.url;if(!a){console.error(`Repository "${n.name}" has no clone URL`),l[n.name]=null;return}let f=b(n);if(!f){console.error(`Refusing to clone ${n.name}: '${u(a)||a}' is not a recognized VCS host (expected github.com, gitlab.com, or the self-hosted GitLab named by GITLAB_URL/GITLAB_INSTANCE_URL${n.provider?`; the repo declares provider='${n.provider}'`:""}). No token was sent.`),l[n.name]=null;return}let p=f==="gitlab"?process.env.GITLAB_TOKEN:process.env.GITHUB_TOKEN;if(!p){console.error(`${f.toUpperCase()}_TOKEN not set, skipping ${n.name}`),l[n.name]=null;return}let _=n.name.replace(/\//g,"-"),h=C(e,_),d=T({...n,cloneUrl:a},p);if(d===a){console.error(`Refusing to clone ${n.name}: could not safely attach credentials to '${a}' (an https:// URL on an exact trusted host is required). No token was sent.`),l[n.name]=null;return}let g=["clone"];o>0&&g.push("--depth",o.toString()),s&&g.push("--branch",s),g.push(d,h);let R=`git ${g.join(" ")}`;console.log(`Cloning ${n.name} (${f}) to ${h}...`);try{v(R,{stdio:"pipe",env:{...process.env,GIT_TERMINAL_PROMPT:"0"}}),y(v,h,a,p,`cloneRepo:${n.name}`),console.log(`Repository ${n.name} cloned successfully`),l[n.name]=h}catch(I){let S=I.message.replace(p,"***").replace(d,a);console.error(`Failed to clone ${n.name}: ${S}`),l[n.name]=null}})),l}export{Q as cloneRepo};
+import{execSync as v}from"node:child_process";import{existsSync as A,mkdirSync as N}from"node:fs";import{join as C}from"node:path";function y(t,e,r,o,s="clone"){try{t(`git -C "${e}" remote set-url origin "${r}"`,{stdio:"pipe"})}catch(c){let i=String(c&&c.message||c);o&&(i=i.split(o).join("***")),console.error(`[${s}] WARNING: failed to strip token from .git/config: ${i}`)}}import{existsSync as L,readFileSync as j}from"node:fs";import{homedir as P}from"node:os";import{join as K}from"node:path";var Z=Object.freeze(["github.com","gitlab.com"]);function u(t){try{return new URL(t).hostname.toLowerCase()}catch{return""}}function E(t){if(typeof t!="string"||t===""||/[\\\x00-\x20\x7f]/.test(t))return"";let e;try{e=new URL(t)}catch{return""}return e.protocol!=="https:"?"":e.hostname.toLowerCase()}function x(t=process.env){let e=t&&(t.GITLAB_URL||t.GITLAB_INSTANCE_URL)||"";return u(e)}function m(t={}){if(t.gitlabHost){let e=String(t.gitlabHost).trim().toLowerCase();return e?e.includes("://")?u(e):e.replace(/:\d+$/,""):""}return x()}function O(t,e={}){if(t==="github.com")return"github";if(t==="gitlab.com")return"gitlab";let r=m(e);return r&&t===r?"gitlab":null}function b(t={},e={}){let r=t&&(t.cloneUrl||t.url)||"",o=u(r);if(!o)return null;let s=t.provider==="github"||t.provider==="gitlab"?t.provider:null,c=$(t,e),i=O(o,c?{gitlabHost:c}:{});return i?s&&s!==i?null:i:s==="gitlab"?"gitlab":null}function $(t,e={}){let r=m(e);return r||(t&&t.provider==="gitlab"?E(t.cloneUrl||t.url||""):"")}function T(t={},e="",r={}){let o=t&&(t.cloneUrl||t.url)||"";if(!o||!e||!b(t,r))return o;let s=$(t,r);return k(o,e,s?{gitlabHost:s}:{})}function k(t,e,r={}){if(!t||!e)return t;let o=E(t);if(!o)return t;if(o==="github.com")return t.replace(/^https:\/\/(?:[^@/]+@)?github\.com(?=[:/]|$)/i,`https://x-access-token:${e}@github.com`);if(o==="gitlab.com")return t.replace(/^https:\/\/(?:[^@/]+@)?gitlab\.com(?=[:/]|$)/i,`https://oauth2:${e}@gitlab.com`);let s=m(r);if(s&&o===s){let c=s.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),i=new RegExp(`^https:\\/\\/(?:[^@/]+@)?${c}(?=[:/]|$)`,"i");return t.replace(i,`https://oauth2:${e}@${s}`)}return t}async function Q(t={}){let{baseDir:e="/workspace/repos",repos:r=null,depth:o=1,branch:s=null}=t,c=process.env.REPOS;if(!c)throw new Error("REPOS environment variable not set. Are you running in a Zibby workflow container?");let i;try{i=JSON.parse(c)}catch(n){throw new Error(`Failed to parse REPOS env var: ${n.message}`,{cause:n})}if(!Array.isArray(i)||i.length===0)throw new Error("No repositories configured for this project");let w=r?i.filter(n=>r.includes(n.name)):i;if(w.length===0)throw new Error(`No matching repositories found. Available: ${i.map(n=>n.name).join(", ")}`);A(e)||N(e,{recursive:!0});let l={};return await Promise.all(w.map(async n=>{let a=n.cloneUrl||n.url;if(!a){console.error(`Repository "${n.name}" has no clone URL`),l[n.name]=null;return}let f=b(n);if(!f){console.error(`Refusing to clone ${n.name}: '${u(a)||a}' is not a recognized VCS host (expected github.com, gitlab.com, or the self-hosted GitLab named by GITLAB_URL/GITLAB_INSTANCE_URL${n.provider?`; the repo declares provider='${n.provider}'`:""}). No token was sent.`),l[n.name]=null;return}let p=f==="gitlab"?process.env.GITLAB_TOKEN:process.env.GITHUB_TOKEN;if(!p){console.error(`${f.toUpperCase()}_TOKEN not set, skipping ${n.name}`),l[n.name]=null;return}let _=n.name.replace(/\//g,"-"),h=C(e,_),g=T({...n,cloneUrl:a},p);if(g===a){console.error(`Refusing to clone ${n.name}: could not safely attach credentials to '${a}' (an https:// URL on an exact trusted host is required). No token was sent.`),l[n.name]=null;return}let d=["clone"];o>0&&d.push("--depth",o.toString()),s&&d.push("--branch",s),d.push(g,h);let R=`git ${d.join(" ")}`;console.log(`Cloning ${n.name} (${f}) to ${h}...`);try{v(R,{stdio:"pipe",env:{...process.env,GIT_TERMINAL_PROMPT:"0"}}),y(v,h,a,p,`cloneRepo:${n.name}`),console.log(`Repository ${n.name} cloned successfully`),l[n.name]=h}catch(I){let S=I.message.replace(p,"***").replace(g,a);console.error(`Failed to clone ${n.name}: ${S}`),l[n.name]=null}})),l}export{Q as cloneRepo};

package/dist/utils/repos.js

@@ -1,2 +1,2 @@
-import{execSync as y}from"node:child_process";import{existsSync as _,mkdirSync as k}from"node:fs";import{join as T,resolve as A}from"node:path";function b(t,e,o,n,s="clone"){try{t(`git -C "${e}" remote set-url origin "${o}"`,{stdio:"pipe"})}catch(r){let i=String(r&&r.message||r);n&&(i=i.split(n).join("***")),console.error(`[${s}] WARNING: failed to strip token from .git/config: ${i}`)}}import{existsSync as U,readFileSync as P}from"node:fs";import{homedir as H}from"node:os";import{join as K}from"node:path";var Y=Object.freeze(["github.com","gitlab.com"]);function a(t){try{return new URL(t).hostname.toLowerCase()}catch{return""}}function m(t){if(typeof t!="string"||t===""||/[\\\x00-\x20\x7f]/.test(t))return"";let e;try{e=new URL(t)}catch{return""}return e.protocol!=="https:"?"":e.hostname.toLowerCase()}function R(t=process.env){let e=t&&(t.GITLAB_URL||t.GITLAB_INSTANCE_URL)||"";return a(e)}function h(t={}){if(t.gitlabHost){let e=String(t.gitlabHost).trim().toLowerCase();return e?e.includes("://")?a(e):e.replace(/:\d+$/,""):""}return R()}function x(t,e={}){if(t==="github.com")return"github";if(t==="gitlab.com")return"gitlab";let o=h(e);return o&&t===o?"gitlab":null}function d(t={},e={}){let o=t&&(t.cloneUrl||t.url)||"",n=a(o);if(!n)return null;let s=t.provider==="github"||t.provider==="gitlab"?t.provider:null,r=w(t,e),i=x(n,r?{gitlabHost:r}:{});return i?s&&s!==i?null:i:s==="gitlab"?"gitlab":null}function w(t,e={}){let o=h(e);return o||(t&&t.provider==="gitlab"?m(t.cloneUrl||t.url||""):"")}function E(t={},e="",o={}){let n=t&&(t.cloneUrl||t.url)||"";if(!n||!e||!d(t,o))return n;let s=w(t,o);return S(n,e,s?{gitlabHost:s}:{})}function S(t,e,o={}){if(!t||!e)return t;let n=m(t);if(!n)return t;if(n==="github.com")return t.replace(/^https:\/\/(?:[^@/]+@)?github\.com(?=[:/]|$)/i,`https://x-access-token:${e}@github.com`);if(n==="gitlab.com")return t.replace(/^https:\/\/(?:[^@/]+@)?gitlab\.com(?=[:/]|$)/i,`https://oauth2:${e}@gitlab.com`);let s=h(o);if(s&&n===s){let r=s.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),i=new RegExp(`^https:\\/\\/(?:[^@/]+@)?${r}(?=[:/]|$)`,"i");return t.replace(i,`https://oauth2:${e}@${s}`)}return t}var I="/workspace/repos",O=".zibby/repos";function $(){return process.env.REPOS?I:A(process.cwd(),O)}function C(t){return String(t).replace(/\//g,"-")}function N(){let t=process.env.REPOS;if(!t)return[];try{let e=JSON.parse(t);return Array.isArray(e)?e:[]}catch{return[]}}function g(t={}){let e=t.baseDir||$();return N().map((n,s)=>{let r=T(e,C(n.name));return{name:n.name,url:n.cloneUrl||n.url||null,branch:n.branch||null,provider:n.provider||"github",localPath:r,isCheckedOut:_(T(r,".git")),primary:s===0}})}function v(t,e={}){let o=g(e);return o.length===0?null:t?o.find(n=>n.name===t)||null:o[0]}function Q(t,e={}){let o=v(t,e);return o?o.localPath:null}async function X(t,e={}){let{branch:o=null,depth:n=1,baseDir:s=$()}=e,r=v(t,{baseDir:s});if(!r){let c=g({baseDir:s}).map(f=>f.name).join(", ")||"(none)";throw new Error(`No repo "${t||"primary"}" configured for this workflow. Available: ${c}. Configure repos under project integrations, or set the REPOS env var.`)}if(r.isCheckedOut)return r.localPath;if(!r.url)throw new Error(`Repo "${r.name}" has no clone URL configured.`);let i=d(r);if(!i)throw new Error(`Cannot clone ${r.name}: '${a(r.url)||r.url}' is not a recognized VCS host (expected github.com, gitlab.com, or the self-hosted GitLab named by GITLAB_URL/GITLAB_INSTANCE_URL${r.provider?`; the repo declares provider='${r.provider}'`:""}). No token was sent.`);let u=i==="gitlab"?process.env.GITLAB_TOKEN:process.env.GITHUB_TOKEN;if(!u)throw new Error(`${i==="gitlab"?"GITLAB_TOKEN":"GITHUB_TOKEN"} not set \u2014 cannot clone ${r.name}. Connect the integration under project settings.`);_(s)||k(s,{recursive:!0});let p=E(r,u);if(p===r.url)throw new Error(`Cannot clone ${r.name}: could not safely attach credentials to '${r.url}' (an https:// URL on an exact trusted host is required). No token was sent.`);let l=["clone"];n>0&&l.push("--depth",String(n)),(o||r.branch)&&l.push("--branch",o||r.branch),l.push(p,r.localPath);try{y(`git ${l.join(" ")}`,{stdio:"pipe",env:{...process.env,GIT_TERMINAL_PROMPT:"0"}})}catch(c){let f=String(c.message||c).replace(u,"***").replace(p,r.url);throw new Error(`Failed to clone ${r.name}: ${f}`,{cause:c})}return b(y,r.localPath,r.url,u,`ensureRepo:${r.name}`),r.localPath}function tt(t={}){let e=g(t);if(e.length===0)return null;let o=["## Available repositories",""];for(let n of e){let s=n.isCheckedOut?"already checked out at":"will be checked out to",r=n.primary?" (primary)":"";o.push(`- \`${n.name}\`${r} \u2014 ${s} \`${n.localPath}\``)}return o.push(""),o.push(`To materialize a repo: call the \`git_checkout\` skill with the repo name (e.g. \`git_checkout({ url: "${e[0].name}" })\`). In code, \`import { ensureRepo } from "@zibby/core"\` and \`await ensureRepo()\` returns the local path (clones on first call, no-op after).`),o.join(`
+import{execSync as y}from"node:child_process";import{existsSync as _,mkdirSync as x}from"node:fs";import{join as T,resolve as I}from"node:path";function b(t,e,o,n,s="clone"){try{t(`git -C "${e}" remote set-url origin "${o}"`,{stdio:"pipe"})}catch(r){let i=String(r&&r.message||r);n&&(i=i.split(n).join("***")),console.error(`[${s}] WARNING: failed to strip token from .git/config: ${i}`)}}import{existsSync as L,readFileSync as P}from"node:fs";import{homedir as H}from"node:os";import{join as K}from"node:path";var Y=Object.freeze(["github.com","gitlab.com"]);function a(t){try{return new URL(t).hostname.toLowerCase()}catch{return""}}function m(t){if(typeof t!="string"||t===""||/[\\\x00-\x20\x7f]/.test(t))return"";let e;try{e=new URL(t)}catch{return""}return e.protocol!=="https:"?"":e.hostname.toLowerCase()}function R(t=process.env){let e=t&&(t.GITLAB_URL||t.GITLAB_INSTANCE_URL)||"";return a(e)}function h(t={}){if(t.gitlabHost){let e=String(t.gitlabHost).trim().toLowerCase();return e?e.includes("://")?a(e):e.replace(/:\d+$/,""):""}return R()}function A(t,e={}){if(t==="github.com")return"github";if(t==="gitlab.com")return"gitlab";let o=h(e);return o&&t===o?"gitlab":null}function d(t={},e={}){let o=t&&(t.cloneUrl||t.url)||"",n=a(o);if(!n)return null;let s=t.provider==="github"||t.provider==="gitlab"?t.provider:null,r=w(t,e),i=A(n,r?{gitlabHost:r}:{});return i?s&&s!==i?null:i:s==="gitlab"?"gitlab":null}function w(t,e={}){let o=h(e);return o||(t&&t.provider==="gitlab"?m(t.cloneUrl||t.url||""):"")}function E(t={},e="",o={}){let n=t&&(t.cloneUrl||t.url)||"";if(!n||!e||!d(t,o))return n;let s=w(t,o);return k(n,e,s?{gitlabHost:s}:{})}function k(t,e,o={}){if(!t||!e)return t;let n=m(t);if(!n)return t;if(n==="github.com")return t.replace(/^https:\/\/(?:[^@/]+@)?github\.com(?=[:/]|$)/i,`https://x-access-token:${e}@github.com`);if(n==="gitlab.com")return t.replace(/^https:\/\/(?:[^@/]+@)?gitlab\.com(?=[:/]|$)/i,`https://oauth2:${e}@gitlab.com`);let s=h(o);if(s&&n===s){let r=s.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),i=new RegExp(`^https:\\/\\/(?:[^@/]+@)?${r}(?=[:/]|$)`,"i");return t.replace(i,`https://oauth2:${e}@${s}`)}return t}var S="/workspace/repos",O=".zibby/repos";function $(){return process.env.REPOS?S:I(process.cwd(),O)}function C(t){return String(t).replace(/\//g,"-")}function N(){let t=process.env.REPOS;if(!t)return[];try{let e=JSON.parse(t);return Array.isArray(e)?e:[]}catch{return[]}}function g(t={}){let e=t.baseDir||$();return N().map((n,s)=>{let r=T(e,C(n.name));return{name:n.name,url:n.cloneUrl||n.url||null,branch:n.branch||null,provider:n.provider||"github",localPath:r,isCheckedOut:_(T(r,".git")),primary:s===0}})}function v(t,e={}){let o=g(e);return o.length===0?null:t?o.find(n=>n.name===t)||null:o[0]}function Q(t,e={}){let o=v(t,e);return o?o.localPath:null}async function X(t,e={}){let{branch:o=null,depth:n=1,baseDir:s=$()}=e,r=v(t,{baseDir:s});if(!r){let c=g({baseDir:s}).map(f=>f.name).join(", ")||"(none)";throw new Error(`No repo "${t||"primary"}" configured for this workflow. Available: ${c}. Configure repos under project integrations, or set the REPOS env var.`)}if(r.isCheckedOut)return r.localPath;if(!r.url)throw new Error(`Repo "${r.name}" has no clone URL configured.`);let i=d(r);if(!i)throw new Error(`Cannot clone ${r.name}: '${a(r.url)||r.url}' is not a recognized VCS host (expected github.com, gitlab.com, or the self-hosted GitLab named by GITLAB_URL/GITLAB_INSTANCE_URL${r.provider?`; the repo declares provider='${r.provider}'`:""}). No token was sent.`);let u=i==="gitlab"?process.env.GITLAB_TOKEN:process.env.GITHUB_TOKEN;if(!u)throw new Error(`${i==="gitlab"?"GITLAB_TOKEN":"GITHUB_TOKEN"} not set \u2014 cannot clone ${r.name}. Connect the integration under project settings.`);_(s)||x(s,{recursive:!0});let p=E(r,u);if(p===r.url)throw new Error(`Cannot clone ${r.name}: could not safely attach credentials to '${r.url}' (an https:// URL on an exact trusted host is required). No token was sent.`);let l=["clone"];n>0&&l.push("--depth",String(n)),(o||r.branch)&&l.push("--branch",o||r.branch),l.push(p,r.localPath);try{y(`git ${l.join(" ")}`,{stdio:"pipe",env:{...process.env,GIT_TERMINAL_PROMPT:"0"}})}catch(c){let f=String(c.message||c).replace(u,"***").replace(p,r.url);throw new Error(`Failed to clone ${r.name}: ${f}`,{cause:c})}return b(y,r.localPath,r.url,u,`ensureRepo:${r.name}`),r.localPath}function tt(t={}){let e=g(t);if(e.length===0)return null;let o=["## Available repositories",""];for(let n of e){let s=n.isCheckedOut?"already checked out at":"will be checked out to",r=n.primary?" (primary)":"";o.push(`- \`${n.name}\`${r} \u2014 ${s} \`${n.localPath}\``)}return o.push(""),o.push(`To materialize a repo: call the \`git_checkout\` skill with the repo name (e.g. \`git_checkout({ url: "${e[0].name}" })\`). In code, \`import { ensureRepo } from "@zibby/core"\` and \`await ensureRepo()\` returns the local path (clones on first call, no-op after).`),o.join(`
 `)}export{tt as buildRepoContextHint,X as ensureRepo,v as getRepo,g as listRepos,Q as repoPath};

package/dist/utils/secure-git.js

@@ -1 +1 @@
-import{existsSync as v,readFileSync as x}from"node:fs";import{homedir as I}from"node:os";import{join as k}from"node:path";var w=new Map,$={github:"GITHUB_TOKEN",gitlab:"GITLAB_TOKEN",sentry:"SENTRY_AUTH_TOKEN",slack:"SLACK_BOT_TOKEN"};function O(){let t=process.env.ZIBBY_SELF_HOST;return t!=null&&t!==""&&t!=="0"&&t.toLowerCase()!=="false"}function S(){if(process.env.PROJECT_API_TOKEN)return process.env.PROJECT_API_TOKEN;if(process.env.ZIBBY_USER_TOKEN)return process.env.ZIBBY_USER_TOKEN;try{let t=k(I(),".zibby","config.json");return v(t)&&JSON.parse(x(t,"utf-8")).sessionToken||null}catch{return null}}function A(){return process.env.ZIBBY_ACCOUNT_API_URL?process.env.ZIBBY_ACCOUNT_API_URL.replace(/\/$/,""):(process.env.ZIBBY_ENV||"prod")==="local"?"http://localhost:3001":process.env.ZIBBY_PROD_ACCOUNT_API_URL||"https://api-prod.zibby.app"}async function m(t){if(O()){let c=$[t];if(c&&process.env[c])return{token:process.env[c]}}let e=Date.now(),n=w.get(t);if(n&&n.expiresAt>e)return n.data;let r=S();if(!r)throw new Error("Missing session credential: neither PROJECT_API_TOKEN nor ZIBBY_USER_TOKEN is set in this process env (and no ~/.zibby/config.json session). If this is an MCP skill child, the spawning skill must forward them \u2014 check the skill's envKeys / resolve() env (see @zibby/skills backend-session-env-contract). Interactive CLI: run `zibby login`.");let s=`${A()}/integrations/token/${t}`,i=await fetch(s,{method:"GET",headers:{Authorization:`Bearer ${r}`}});if(!i.ok){let c=await i.text().catch(()=>"");if(i.status===404){let u="";try{u=String(JSON.parse(c)?.error||"").trim()}catch{}throw new Error(u||`${t} is not connected. Connect it at https://studio.zibby.dev/integrations`)}throw i.status===401||i.status===403?new Error("Session expired. Run `zibby login` to re-authenticate."):new Error(`Failed to resolve ${t} token (${i.status}): ${c}`)}let o=await i.json();if(!o||typeof o!="object")throw new Error(`Invalid response from ${t} token endpoint: expected object, got ${typeof o}`);if(t==="jira"){if(!o.token||typeof o.token!="string")throw new Error(`Invalid jira token response: token is ${typeof o.token}, expected string`);if(!o.cloudId)throw new Error("Invalid jira token response: missing cloudId")}else if(t==="github"&&(!o.token||typeof o.token!="string"))throw new Error(`Invalid github token response: token is ${typeof o.token}, expected string`);let f=((o.expiresInSec||3e3)-120)*1e3;return w.set(t,{data:o,expiresAt:e+f}),o}var z=Object.freeze(["github.com","gitlab.com"]);function b(t){try{return new URL(t).hostname.toLowerCase()}catch{return""}}function g(t){if(typeof t!="string"||t===""||/[\\\x00-\x20\x7f]/.test(t))return"";let e;try{e=new URL(t)}catch{return""}return e.protocol!=="https:"?"":e.hostname.toLowerCase()}function C(t=process.env){let e=t&&(t.GITLAB_URL||t.GITLAB_INSTANCE_URL)||"";return b(e)}function p(t={}){if(t.gitlabHost){let e=String(t.gitlabHost).trim().toLowerCase();return e?e.includes("://")?b(e):e.replace(/:\d+$/,""):""}return C()}function B(t,e={}){let n=g(t);if(!n)return!1;if(n==="github.com"||n==="gitlab.com")return!0;let r=p(e);return!!(r&&n===r)}function E(t,e={}){if(t==="github.com")return"github";if(t==="gitlab.com")return"gitlab";let n=p(e);return n&&t===n?"gitlab":null}function R(t={},e={}){let n=t&&(t.cloneUrl||t.url)||"",r=b(n);if(!r)return null;let s=t.provider==="github"||t.provider==="gitlab"?t.provider:null,i=T(t,e),o=E(r,i?{gitlabHost:i}:{});return o?s&&s!==o?null:o:s==="gitlab"?"gitlab":null}function T(t,e={}){let n=p(e);return n||(t&&t.provider==="gitlab"?g(t.cloneUrl||t.url||""):"")}function G(t={},e="",n={}){let r=t&&(t.cloneUrl||t.url)||"";if(!r||!e||!R(t,n))return r;let s=T(t,n);return _(r,e,s?{gitlabHost:s}:{})}function _(t,e,n={}){if(!t||!e)return t;let r=g(t);if(!r)return t;if(r==="github.com")return t.replace(/^https:\/\/(?:[^@/]+@)?github\.com(?=[:/]|$)/i,`https://x-access-token:${e}@github.com`);if(r==="gitlab.com")return t.replace(/^https:\/\/(?:[^@/]+@)?gitlab\.com(?=[:/]|$)/i,`https://oauth2:${e}@gitlab.com`);let s=p(n);if(s&&r===s){let i=s.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),o=new RegExp(`^https:\\/\\/(?:[^@/]+@)?${i}(?=[:/]|$)`,"i");return t.replace(o,`https://oauth2:${e}@${s}`)}return t}function N(t){return t&&String(t).replace(/^(https:\/\/)[^@/]+@/i,"$1")}function H(t,e){let n=t==null?"":String(t);return e&&(n=n.split(e).join("***")),n=n.replace(/(https?:\/\/)(?:x-access-token|oauth2):[^@\s/]+@/gi,"$1"),n=n.replace(/(https?:\/\/)[^@\s/:]+:[^@\s/]+@/gi,"$1"),n}async function F(t,e,n){try{await t("git",["remote","set-url","origin",N(n)],e)}catch(r){console.warn(`\u26A0\uFE0F  could not scrub token from origin remote (continuing): ${r?.message||r}`)}}async function Y({run:t,repoPath:e,repoUrl:n,branch:r,token:s,resolveToken:i=m,gitlabHost:o}={}){if(typeof t!="function")throw new Error("securePush: `run` (a spawn wrapper resolving {code,stdout,stderr}) is required");if(!r)throw new Error("securePush: `branch` is required");let f=p({gitlabHost:o}),c=g(n),u=B(n,{gitlabHost:f}),l=s||"";if(!l&&u&&typeof i=="function"){let h=E(c,{gitlabHost:f});if(h)try{l=(await i(h))?.token||""}catch{}}else!l&&!u&&console.warn(`\u26A0\uFE0F push target host '${c||"(unparseable)"}' is not a trusted VCS host \u2014 refusing to mint a token`);let d=l&&u,y=d?_(n,l,{gitlabHost:f}):"origin",a=await t("git",["push",y,r],e);if(!a||a.code!==0){let h=H(a&&a.stderr||"",l);throw new Error(`git push failed (exit ${a?a.code:"?"}): ${String(h).slice(-500)}`)}return{code:a.code,stdout:a.stdout,stderr:a.stderr,pushedAuthed:!!d,target:d?"<authed>":"origin"}}export{z as TRUSTED_VCS_HOSTS,_ as authedUrl,G as authedUrlForRepo,b as hostnameOf,B as isTrustedVcsHost,E as providerForHost,R as providerForRepo,H as redactGitSecrets,g as safeVcsHostname,F as scrubRemoteToTokenless,Y as securePush,C as selfHostGitlabHost,N as tokenlessUrl};
+import{existsSync as v,readFileSync as x}from"node:fs";import{homedir as I}from"node:os";import{join as k}from"node:path";var w=new Map,O={github:"GITHUB_TOKEN",gitlab:"GITLAB_TOKEN",sentry:"SENTRY_AUTH_TOKEN",slack:"SLACK_BOT_TOKEN"};function $(){let t=process.env.ZIBBY_SELF_HOST;return t!=null&&t!==""&&t!=="0"&&t.toLowerCase()!=="false"}function A(){if(process.env.PROJECT_API_TOKEN)return process.env.PROJECT_API_TOKEN;if(process.env.ZIBBY_USER_TOKEN)return process.env.ZIBBY_USER_TOKEN;try{let t=k(I(),".zibby","config.json");return v(t)&&JSON.parse(x(t,"utf-8")).sessionToken||null}catch{return null}}function S(){return process.env.ZIBBY_ACCOUNT_API_URL?process.env.ZIBBY_ACCOUNT_API_URL.replace(/\/$/,""):(process.env.ZIBBY_ENV||"prod")==="local"?"http://localhost:3001":process.env.ZIBBY_PROD_ACCOUNT_API_URL||"https://api-prod.zibby.app"}async function m(t){if($()){let c=O[t];if(c&&process.env[c])return{token:process.env[c]}}let e=Date.now(),n=w.get(t);if(n&&n.expiresAt>e)return n.data;let r=A();if(!r)throw new Error("Missing session credential: neither PROJECT_API_TOKEN nor ZIBBY_USER_TOKEN is set in this process env (and no ~/.zibby/config.json session). If this is an MCP skill child, the spawning skill must forward them \u2014 check the skill's envKeys / resolve() env (see @zibby/skills backend-session-env-contract). Interactive CLI: run `zibby login`.");let s=`${S()}/integrations/token/${t}`,i=await fetch(s,{method:"GET",headers:{Authorization:`Bearer ${r}`}});if(!i.ok){let c=await i.text().catch(()=>"");if(i.status===404){let u="";try{u=String(JSON.parse(c)?.error||"").trim()}catch{}throw new Error(u||`${t} is not connected. Connect it at https://studio.zibby.dev/integrations`)}throw i.status===401||i.status===403?new Error("Session expired. Run `zibby login` to re-authenticate."):new Error(`Failed to resolve ${t} token (${i.status}): ${c}`)}let o=await i.json();if(!o||typeof o!="object")throw new Error(`Invalid response from ${t} token endpoint: expected object, got ${typeof o}`);if(t==="jira"){if(!o.token||typeof o.token!="string")throw new Error(`Invalid jira token response: token is ${typeof o.token}, expected string`);if(!o.cloudId&&!o.instanceUrl&&!o.baseUrl)throw new Error("Invalid jira token response: carries neither cloudId (OAuth connection) nor instanceUrl (API-token connection) \u2014 reconnect Jira.")}else if(t==="github"&&(!o.token||typeof o.token!="string"))throw new Error(`Invalid github token response: token is ${typeof o.token}, expected string`);let f=((o.expiresInSec||3e3)-120)*1e3;return w.set(t,{data:o,expiresAt:e+f}),o}var z=Object.freeze(["github.com","gitlab.com"]);function b(t){try{return new URL(t).hostname.toLowerCase()}catch{return""}}function g(t){if(typeof t!="string"||t===""||/[\\\x00-\x20\x7f]/.test(t))return"";let e;try{e=new URL(t)}catch{return""}return e.protocol!=="https:"?"":e.hostname.toLowerCase()}function C(t=process.env){let e=t&&(t.GITLAB_URL||t.GITLAB_INSTANCE_URL)||"";return b(e)}function h(t={}){if(t.gitlabHost){let e=String(t.gitlabHost).trim().toLowerCase();return e?e.includes("://")?b(e):e.replace(/:\d+$/,""):""}return C()}function B(t,e={}){let n=g(t);if(!n)return!1;if(n==="github.com"||n==="gitlab.com")return!0;let r=h(e);return!!(r&&n===r)}function E(t,e={}){if(t==="github.com")return"github";if(t==="gitlab.com")return"gitlab";let n=h(e);return n&&t===n?"gitlab":null}function R(t={},e={}){let n=t&&(t.cloneUrl||t.url)||"",r=b(n);if(!r)return null;let s=t.provider==="github"||t.provider==="gitlab"?t.provider:null,i=T(t,e),o=E(r,i?{gitlabHost:i}:{});return o?s&&s!==o?null:o:s==="gitlab"?"gitlab":null}function T(t,e={}){let n=h(e);return n||(t&&t.provider==="gitlab"?g(t.cloneUrl||t.url||""):"")}function G(t={},e="",n={}){let r=t&&(t.cloneUrl||t.url)||"";if(!r||!e||!R(t,n))return r;let s=T(t,n);return _(r,e,s?{gitlabHost:s}:{})}function _(t,e,n={}){if(!t||!e)return t;let r=g(t);if(!r)return t;if(r==="github.com")return t.replace(/^https:\/\/(?:[^@/]+@)?github\.com(?=[:/]|$)/i,`https://x-access-token:${e}@github.com`);if(r==="gitlab.com")return t.replace(/^https:\/\/(?:[^@/]+@)?gitlab\.com(?=[:/]|$)/i,`https://oauth2:${e}@gitlab.com`);let s=h(n);if(s&&r===s){let i=s.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),o=new RegExp(`^https:\\/\\/(?:[^@/]+@)?${i}(?=[:/]|$)`,"i");return t.replace(o,`https://oauth2:${e}@${s}`)}return t}function U(t){return t&&String(t).replace(/^(https:\/\/)[^@/]+@/i,"$1")}function N(t,e){let n=t==null?"":String(t);return e&&(n=n.split(e).join("***")),n=n.replace(/(https?:\/\/)(?:x-access-token|oauth2):[^@\s/]+@/gi,"$1"),n=n.replace(/(https?:\/\/)[^@\s/:]+:[^@\s/]+@/gi,"$1"),n}async function F(t,e,n){try{await t("git",["remote","set-url","origin",U(n)],e)}catch(r){console.warn(`\u26A0\uFE0F  could not scrub token from origin remote (continuing): ${r?.message||r}`)}}async function Y({run:t,repoPath:e,repoUrl:n,branch:r,token:s,resolveToken:i=m,gitlabHost:o}={}){if(typeof t!="function")throw new Error("securePush: `run` (a spawn wrapper resolving {code,stdout,stderr}) is required");if(!r)throw new Error("securePush: `branch` is required");let f=h({gitlabHost:o}),c=g(n),u=B(n,{gitlabHost:f}),l=s||"";if(!l&&u&&typeof i=="function"){let p=E(c,{gitlabHost:f});if(p)try{l=(await i(p))?.token||""}catch{}}else!l&&!u&&console.warn(`\u26A0\uFE0F push target host '${c||"(unparseable)"}' is not a trusted VCS host \u2014 refusing to mint a token`);let d=l&&u,y=d?_(n,l,{gitlabHost:f}):"origin",a=await t("git",["push",y,r],e);if(!a||a.code!==0){let p=N(a&&a.stderr||"",l);throw new Error(`git push failed (exit ${a?a.code:"?"}): ${String(p).slice(-500)}`)}return{code:a.code,stdout:a.stdout,stderr:a.stderr,pushedAuthed:!!d,target:d?"<authed>":"origin"}}export{z as TRUSTED_VCS_HOSTS,_ as authedUrl,G as authedUrlForRepo,b as hostnameOf,B as isTrustedVcsHost,E as providerForHost,R as providerForRepo,N as redactGitSecrets,g as safeVcsHostname,F as scrubRemoteToTokenless,Y as securePush,C as selfHostGitlabHost,U as tokenlessUrl};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zibby/core",
-  "version": "2.0.2",
+  "version": "2.0.4",
   "description": "Core test automation engine with multi-agent and multi-MCP support",
   "type": "module",
   "main": "dist/index.js",
@@ -69,9 +69,9 @@
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@openai/codex-sdk": "^0.143.0",
     "@playwright/mcp": "^0.0.70",
-    "@zibby/agent-workflow": "2.0.2",
-    "@zibby/mcp-browser": "2.0.2",
-    "@zibby/skill-ids": "2.0.2",
+    "@zibby/agent-workflow": "2.0.4",
+    "@zibby/mcp-browser": "2.0.4",
+    "@zibby/skill-ids": "2.0.4",
     "acorn": "^8.15.0",
     "acorn-walk": "^8.3.5",
     "axios": "^1.15.0",