agentic-flow 3.0.0 → 3.2.0

package/dist/integrations/agent-booster.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Agent Booster edits: in-process library first, `npx` CLI as the fallback.
+ *
+ * `agent-booster` is an optionalDependency. When it is installed (the default)
+ * edits run in-process through its WASM engine. When it is not, we fall back
+ * to the pinned CLI via `npx --yes agent-booster@0.2.2 apply`, which is what
+ * the MCP server always did before (and which downloads on first use).
+ */
+export declare const AGENT_BOOSTER_CLI = "agent-booster@0.2.2";
+export interface BoosterEditResult {
+    output: string;
+    success: boolean;
+    latency: number;
+    confidence: number;
+    strategy: string;
+    /** How the edit was applied. */
+    via: 'library' | 'npx';
+}
+type BoosterInstance = {
+    apply(input: {
+        code: string;
+        edit: string;
+        language: string;
+    }): Promise<Omit<BoosterEditResult, 'via'>>;
+};
+/** The in-process Agent Booster, or null when the optional package is absent. */
+export declare function getAgentBoosterLibrary(): Promise<BoosterInstance | null>;
+/** Apply `edit` to `code`. Never shells out when the library is installed. */
+export declare function applyAgentBoosterEdit(code: string, edit: string, language: string, options?: {
+    npxTimeoutMs?: number;
+}): Promise<BoosterEditResult>;
+/** Test hook. */
+export declare function _resetAgentBoosterForTests(): void;
+export {};
+//# sourceMappingURL=agent-booster.d.ts.map

package/dist/integrations/agent-booster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-booster.d.ts","sourceRoot":"","sources":["../../src/integrations/agent-booster.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,eAAO,MAAM,iBAAiB,wBAAwB,CAAC;AAEvD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,GAAG,EAAE,SAAS,GAAG,KAAK,CAAC;CACxB;AAED,KAAK,eAAe,GAAG;IACrB,KAAK,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAC;CACzG,CAAC;AAIF,iFAAiF;AACjF,wBAAgB,sBAAsB,IAAI,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CASxE;AAED,8EAA8E;AAC9E,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO,GACtC,OAAO,CAAC,iBAAiB,CAAC,CAc5B;AAED,iBAAiB;AACjB,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD"}

package/dist/integrations/agent-booster.js

@@ -0,0 +1,45 @@
+/**
+ * Agent Booster edits: in-process library first, `npx` CLI as the fallback.
+ *
+ * `agent-booster` is an optionalDependency. When it is installed (the default)
+ * edits run in-process through its WASM engine. When it is not, we fall back
+ * to the pinned CLI via `npx --yes agent-booster@0.2.2 apply`, which is what
+ * the MCP server always did before (and which downloads on first use).
+ */
+import { execFileSync } from 'node:child_process';
+import { importOptional } from './optional.js';
+export const AGENT_BOOSTER_CLI = 'agent-booster@0.2.2';
+let instance = null;
+/** The in-process Agent Booster, or null when the optional package is absent. */
+export function getAgentBoosterLibrary() {
+    if (!instance) {
+        instance = importOptional('agent-booster').then((mod) => {
+            const Ctor = mod?.AgentBooster ?? mod?.default?.AgentBooster ?? mod?.default;
+            if (typeof Ctor !== 'function')
+                return null;
+            return new Ctor({ confidenceThreshold: 0.5, maxChunks: 100 });
+        });
+    }
+    return instance;
+}
+/** Apply `edit` to `code`. Never shells out when the library is installed. */
+export async function applyAgentBoosterEdit(code, edit, language, options = {}) {
+    const lib = await getAgentBoosterLibrary();
+    if (lib) {
+        const r = await lib.apply({ code, edit, language });
+        return { ...r, via: 'library' };
+    }
+    const stdout = execFileSync('npx', ['--yes', AGENT_BOOSTER_CLI, 'apply', '--language', language], {
+        shell: false,
+        encoding: 'utf-8',
+        input: JSON.stringify({ code, edit }),
+        maxBuffer: 10 * 1024 * 1024,
+        timeout: options.npxTimeoutMs ?? 30000,
+    });
+    return { ...JSON.parse(stdout), via: 'npx' };
+}
+/** Test hook. */
+export function _resetAgentBoosterForTests() {
+    instance = null;
+}
+//# sourceMappingURL=agent-booster.js.map

package/dist/integrations/agent-booster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-booster.js","sourceRoot":"","sources":["../../src/integrations/agent-booster.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,MAAM,CAAC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAgBvD,IAAI,QAAQ,GAA2C,IAAI,CAAC;AAE5D,iFAAiF;AACjF,MAAM,UAAU,sBAAsB;IACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,cAAc,CAAM,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YAC3D,MAAM,IAAI,GAAG,GAAG,EAAE,YAAY,IAAI,GAAG,EAAE,OAAO,EAAE,YAAY,IAAI,GAAG,EAAE,OAAO,CAAC;YAC7E,IAAI,OAAO,IAAI,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC;YAC5C,OAAO,IAAI,IAAI,CAAC,EAAE,mBAAmB,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAoB,CAAC;QACnF,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,IAAY,EACZ,QAAgB,EAChB,UAAqC,EAAE;IAEvC,MAAM,GAAG,GAAG,MAAM,sBAAsB,EAAE,CAAC;IAC3C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpD,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE;QAChG,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACrC,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;QAC3B,OAAO,EAAE,OAAO,CAAC,YAAY,IAAI,KAAK;KACvC,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AAC/C,CAAC;AAED,iBAAiB;AACjB,MAAM,UAAU,0BAA0B;IACxC,QAAQ,GAAG,IAAI,CAAC;AAClB,CAAC","sourcesContent":["/**\n * Agent Booster edits: in-process library first, `npx` CLI as the fallback.\n *\n * `agent-booster` is an optionalDependency. When it is installed (the default)\n * edits run in-process through its WASM engine. When it is not, we fall back\n * to the pinned CLI via `npx --yes agent-booster@0.2.2 apply`, which is what\n * the MCP server always did before (and which downloads on first use).\n */\n\nimport { execFileSync } from 'node:child_process';\nimport { importOptional } from './optional.js';\n\nexport const AGENT_BOOSTER_CLI = 'agent-booster@0.2.2';\n\nexport interface BoosterEditResult {\n  output: string;\n  success: boolean;\n  latency: number;\n  confidence: number;\n  strategy: string;\n  /** How the edit was applied. */\n  via: 'library' | 'npx';\n}\n\ntype BoosterInstance = {\n  apply(input: { code: string; edit: string; language: string }): Promise<Omit<BoosterEditResult, 'via'>>;\n};\n\nlet instance: Promise<BoosterInstance | null> | null = null;\n\n/** The in-process Agent Booster, or null when the optional package is absent. */\nexport function getAgentBoosterLibrary(): Promise<BoosterInstance | null> {\n  if (!instance) {\n    instance = importOptional<any>('agent-booster').then((mod) => {\n      const Ctor = mod?.AgentBooster ?? mod?.default?.AgentBooster ?? mod?.default;\n      if (typeof Ctor !== 'function') return null;\n      return new Ctor({ confidenceThreshold: 0.5, maxChunks: 100 }) as BoosterInstance;\n    });\n  }\n  return instance;\n}\n\n/** Apply `edit` to `code`. Never shells out when the library is installed. */\nexport async function applyAgentBoosterEdit(\n  code: string,\n  edit: string,\n  language: string,\n  options: { npxTimeoutMs?: number } = {},\n): Promise<BoosterEditResult> {\n  const lib = await getAgentBoosterLibrary();\n  if (lib) {\n    const r = await lib.apply({ code, edit, language });\n    return { ...r, via: 'library' };\n  }\n  const stdout = execFileSync('npx', ['--yes', AGENT_BOOSTER_CLI, 'apply', '--language', language], {\n    shell: false,\n    encoding: 'utf-8',\n    input: JSON.stringify({ code, edit }),\n    maxBuffer: 10 * 1024 * 1024,\n    timeout: options.npxTimeoutMs ?? 30000,\n  });\n  return { ...JSON.parse(stdout), via: 'npx' };\n}\n\n/** Test hook. */\nexport function _resetAgentBoosterForTests(): void {\n  instance = null;\n}\n"]}

package/dist/integrations/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * agentic-flow/integrations — programmatic access to the optional ruvnet
+ * package integrations (each with a built-in fallback).
+ */
+export { scanPromptInjection, promptInjectionEngine, getInjectionPolicy } from './prompt-injection.js';
+export type { InjectionScan, InjectionThreat, InjectionPolicy, InjectionSeverity } from './prompt-injection.js';
+export { partitionTaskGraph } from './task-partition.js';
+export type { TaskDependency, TaskPartition } from './task-partition.js';
+export { solveLinearSystem, pageRank } from './sublinear.js';
+export type { LinearSolveResult, PageRankResult, MatrixInput, SparseEntry } from './sublinear.js';
+export { applyAgentBoosterEdit, getAgentBoosterLibrary } from './agent-booster.js';
+export type { BoosterEditResult } from './agent-booster.js';
+export { OnnxWasmTextEmbedder, getOnnxWasmEmbedder, loadOnnxWasmModule, onnxWasmModelCached } from './onnx-wasm-embedder.js';
+export { isOptionalInstalled } from './optional.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/integrations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/integrations/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACvG,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAChH,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC7D,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClG,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACnF,YAAY,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC7H,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC"}

package/dist/integrations/index.js

@@ -0,0 +1,11 @@
+/**
+ * agentic-flow/integrations — programmatic access to the optional ruvnet
+ * package integrations (each with a built-in fallback).
+ */
+export { scanPromptInjection, promptInjectionEngine, getInjectionPolicy } from './prompt-injection.js';
+export { partitionTaskGraph } from './task-partition.js';
+export { solveLinearSystem, pageRank } from './sublinear.js';
+export { applyAgentBoosterEdit, getAgentBoosterLibrary } from './agent-booster.js';
+export { OnnxWasmTextEmbedder, getOnnxWasmEmbedder, loadOnnxWasmModule, onnxWasmModelCached } from './onnx-wasm-embedder.js';
+export { isOptionalInstalled } from './optional.js';
+//# sourceMappingURL=index.js.map

package/dist/integrations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/integrations/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAEvG,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE7D,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAEnF,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC7H,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC","sourcesContent":["/**\n * agentic-flow/integrations — programmatic access to the optional ruvnet\n * package integrations (each with a built-in fallback).\n */\n\nexport { scanPromptInjection, promptInjectionEngine, getInjectionPolicy } from './prompt-injection.js';\nexport type { InjectionScan, InjectionThreat, InjectionPolicy, InjectionSeverity } from './prompt-injection.js';\nexport { partitionTaskGraph } from './task-partition.js';\nexport type { TaskDependency, TaskPartition } from './task-partition.js';\nexport { solveLinearSystem, pageRank } from './sublinear.js';\nexport type { LinearSolveResult, PageRankResult, MatrixInput, SparseEntry } from './sublinear.js';\nexport { applyAgentBoosterEdit, getAgentBoosterLibrary } from './agent-booster.js';\nexport type { BoosterEditResult } from './agent-booster.js';\nexport { OnnxWasmTextEmbedder, getOnnxWasmEmbedder, loadOnnxWasmModule, onnxWasmModelCached } from './onnx-wasm-embedder.js';\nexport { isOptionalInstalled } from './optional.js';\n"]}

package/dist/integrations/onnx-wasm-embedder.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Real text embeddings through `ruvector-onnx-embeddings-wasm` (all-MiniLM-L6-v2, 384-d).
+ *
+ * Packaging note: ruvector-onnx-embeddings-wasm 0.1.0-0.1.2 declares
+ * `"type": "module"` but ships wasm-bindgen's CommonJS (nodejs target) glue,
+ * which assigns `module.exports`. `import()` therefore throws
+ * "module is not defined in ES module scope", and `require()` fails the same
+ * way because Node treats the file as ESM. We compile the glue explicitly as
+ * CommonJS. If a future release ships real ESM, plain `import()` is used.
+ *
+ * Model: the WASM runtime cannot load the quantized ONNX graph agentic-flow's
+ * OptimizedEmbedder uses by default (it fails on an Unsqueeze node), so this
+ * uses the full-precision Xenova/all-MiniLM-L6-v2 model (~91 MB) plus its
+ * tokenizer.json. Both live in the same model directory OptimizedEmbedder uses
+ * (`~/.agentic-flow/models`, override with `AGENTIC_FLOW_MODEL_DIR`); the ONNX
+ * file name matches OptimizedEmbedder's `all-MiniLM-L6-v2-full` registry entry,
+ * so either component can reuse the other's download.
+ *
+ * Downloads happen on first use unless any of these is set:
+ * `AGENTIC_FLOW_OFFLINE=1`, `HF_HUB_OFFLINE=1`, `AGENTIC_FLOW_EMBEDDINGS_DOWNLOAD=0`.
+ * Nothing here writes to stdout (the MCP stdio server owns it).
+ */
+export declare const ONNX_WASM_PACKAGE = "ruvector-onnx-embeddings-wasm";
+export declare const ONNX_WASM_DIMENSION = 384;
+interface WasmEmbedderHandle {
+    embedOne(text: string): Float32Array;
+    dimension(): number;
+}
+export interface OnnxWasmModule {
+    WasmEmbedder: new (modelBytes: Uint8Array, tokenizerJson: string) => WasmEmbedderHandle;
+    cosineSimilarity(a: Float32Array, b: Float32Array): number;
+    version(): string;
+}
+/** Load the WASM glue (see the packaging note above), or null when absent. */
+export declare function loadOnnxWasmModule(): Promise<OnnxWasmModule | null>;
+export declare function onnxWasmModelDir(): string;
+export declare function onnxWasmDownloadAllowed(): boolean;
+/** Whether model + tokenizer are already on disk (no network needed). */
+export declare function onnxWasmModelCached(dir?: string): boolean;
+/** A loaded all-MiniLM-L6-v2 embedder. `embed` is async to match other embedders. */
+export declare class OnnxWasmTextEmbedder {
+    private readonly handle;
+    readonly dimension: number;
+    readonly source: "onnx-wasm";
+    private constructor();
+    /** Build an embedder, or null when the package or the model is unavailable. */
+    static create(options?: {
+        modelDir?: string;
+    }): Promise<OnnxWasmTextEmbedder | null>;
+    embedSync(text: string): Float32Array;
+    embed(text: string): Promise<Float32Array>;
+    embedBatch(texts: string[]): Promise<Float32Array[]>;
+}
+/** Process-wide embedder (loaded once), or null. */
+export declare function getOnnxWasmEmbedder(): Promise<OnnxWasmTextEmbedder | null>;
+/** Test hook. */
+export declare function _resetOnnxWasmForTests(): void;
+export {};
+//# sourceMappingURL=onnx-wasm-embedder.d.ts.map

package/dist/integrations/onnx-wasm-embedder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onnx-wasm-embedder.d.ts","sourceRoot":"","sources":["../../src/integrations/onnx-wasm-embedder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAQH,eAAO,MAAM,iBAAiB,kCAAkC,CAAC;AACjE,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAOvC,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAAC;IACrC,SAAS,IAAI,MAAM,CAAC;CACrB;AACD,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,KAAK,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,KAAK,kBAAkB,CAAC;IACxF,gBAAgB,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,GAAG,MAAM,CAAC;IAC3D,OAAO,IAAI,MAAM,CAAC;CACnB;AAID,8EAA8E;AAC9E,wBAAgB,kBAAkB,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAsBnE;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAgB,uBAAuB,IAAI,OAAO,CAQjD;AAED,yEAAyE;AACzE,wBAAgB,mBAAmB,CAAC,GAAG,SAAqB,GAAG,OAAO,CAErE;AAqBD,qFAAqF;AACrF,qBAAa,oBAAoB;IAIX,OAAO,CAAC,QAAQ,CAAC,MAAM;IAH3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAG,WAAW,CAAU;IAEvC,OAAO;IAIP,+EAA+E;WAClE,MAAM,CAAC,OAAO,GAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAiB9F,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY;IAI/B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAI1C,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;CAG3D;AAID,oDAAoD;AACpD,wBAAgB,mBAAmB,IAAI,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAG1E;AAED,iBAAiB;AACjB,wBAAgB,sBAAsB,IAAI,IAAI,CAG7C"}

package/dist/integrations/onnx-wasm-embedder.js

@@ -0,0 +1,145 @@
+/**
+ * Real text embeddings through `ruvector-onnx-embeddings-wasm` (all-MiniLM-L6-v2, 384-d).
+ *
+ * Packaging note: ruvector-onnx-embeddings-wasm 0.1.0-0.1.2 declares
+ * `"type": "module"` but ships wasm-bindgen's CommonJS (nodejs target) glue,
+ * which assigns `module.exports`. `import()` therefore throws
+ * "module is not defined in ES module scope", and `require()` fails the same
+ * way because Node treats the file as ESM. We compile the glue explicitly as
+ * CommonJS. If a future release ships real ESM, plain `import()` is used.
+ *
+ * Model: the WASM runtime cannot load the quantized ONNX graph agentic-flow's
+ * OptimizedEmbedder uses by default (it fails on an Unsqueeze node), so this
+ * uses the full-precision Xenova/all-MiniLM-L6-v2 model (~91 MB) plus its
+ * tokenizer.json. Both live in the same model directory OptimizedEmbedder uses
+ * (`~/.agentic-flow/models`, override with `AGENTIC_FLOW_MODEL_DIR`); the ONNX
+ * file name matches OptimizedEmbedder's `all-MiniLM-L6-v2-full` registry entry,
+ * so either component can reuse the other's download.
+ *
+ * Downloads happen on first use unless any of these is set:
+ * `AGENTIC_FLOW_OFFLINE=1`, `HF_HUB_OFFLINE=1`, `AGENTIC_FLOW_EMBEDDINGS_DOWNLOAD=0`.
+ * Nothing here writes to stdout (the MCP stdio server owns it).
+ */
+import Module from 'node:module';
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { resolveOptional } from './optional.js';
+export const ONNX_WASM_PACKAGE = 'ruvector-onnx-embeddings-wasm';
+export const ONNX_WASM_DIMENSION = 384;
+const MODEL_FILE = 'all-MiniLM-L6-v2-full.onnx';
+const TOKENIZER_FILE = 'all-MiniLM-L6-v2.tokenizer.json';
+const MODEL_URL = 'https://huggingface.co/Xenova/all-MiniLM-L6-v2/resolve/main/onnx/model.onnx';
+const TOKENIZER_URL = 'https://huggingface.co/Xenova/all-MiniLM-L6-v2/resolve/main/tokenizer.json';
+let modulePromise = null;
+/** Load the WASM glue (see the packaging note above), or null when absent. */
+export function loadOnnxWasmModule() {
+    if (!modulePromise) {
+        modulePromise = (async () => {
+            const entry = resolveOptional(ONNX_WASM_PACKAGE);
+            if (!entry)
+                return null;
+            try {
+                const source = readFileSync(entry, 'utf8');
+                if (/\bmodule\.exports\b/.test(source)) {
+                    const M = Module;
+                    const mod = new M(entry, null);
+                    mod.filename = entry;
+                    mod.paths = M._nodeModulePaths(dirname(entry));
+                    mod._compile(source, entry);
+                    return mod.exports;
+                }
+                return (await import(ONNX_WASM_PACKAGE));
+            }
+            catch {
+                return null;
+            }
+        })();
+    }
+    return modulePromise;
+}
+export function onnxWasmModelDir() {
+    return process.env.AGENTIC_FLOW_MODEL_DIR || join(homedir(), '.agentic-flow', 'models');
+}
+export function onnxWasmDownloadAllowed() {
+    const off = (v) => v === '1' || v === 'true';
+    return !(off(process.env.AGENTIC_FLOW_OFFLINE) ||
+        off(process.env.HF_HUB_OFFLINE) ||
+        process.env.AGENTIC_FLOW_EMBEDDINGS_DOWNLOAD === '0' ||
+        process.env.AGENTIC_FLOW_EMBEDDINGS_DOWNLOAD === 'false');
+}
+/** Whether model + tokenizer are already on disk (no network needed). */
+export function onnxWasmModelCached(dir = onnxWasmModelDir()) {
+    return existsSync(join(dir, MODEL_FILE)) && existsSync(join(dir, TOKENIZER_FILE));
+}
+async function download(url, target) {
+    const res = await fetch(url);
+    if (!res.ok)
+        throw new Error(`download failed ${res.status} ${res.statusText}: ${url}`);
+    const bytes = new Uint8Array(await res.arrayBuffer());
+    const tmp = `${target}.${process.pid}.part`;
+    writeFileSync(tmp, bytes, { mode: 0o600 });
+    renameSync(tmp, target);
+}
+async function ensureModelFiles(dir) {
+    if (onnxWasmModelCached(dir))
+        return true;
+    if (!onnxWasmDownloadAllowed())
+        return false;
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    process.stderr.write(`[agentic-flow] downloading all-MiniLM-L6-v2 (~91 MB) to ${dir}\n`);
+    if (!existsSync(join(dir, TOKENIZER_FILE)))
+        await download(TOKENIZER_URL, join(dir, TOKENIZER_FILE));
+    if (!existsSync(join(dir, MODEL_FILE)))
+        await download(MODEL_URL, join(dir, MODEL_FILE));
+    return true;
+}
+/** A loaded all-MiniLM-L6-v2 embedder. `embed` is async to match other embedders. */
+export class OnnxWasmTextEmbedder {
+    handle;
+    dimension;
+    source = 'onnx-wasm';
+    constructor(handle) {
+        this.handle = handle;
+        this.dimension = handle.dimension();
+    }
+    /** Build an embedder, or null when the package or the model is unavailable. */
+    static async create(options = {}) {
+        const mod = await loadOnnxWasmModule();
+        if (!mod)
+            return null;
+        const dir = options.modelDir ?? onnxWasmModelDir();
+        try {
+            if (!(await ensureModelFiles(dir)))
+                return null;
+            const handle = new mod.WasmEmbedder(new Uint8Array(readFileSync(join(dir, MODEL_FILE))), readFileSync(join(dir, TOKENIZER_FILE), 'utf8'));
+            return new OnnxWasmTextEmbedder(handle);
+        }
+        catch (err) {
+            process.stderr.write(`[agentic-flow] ONNX WASM embedder unavailable: ${err?.message ?? err}\n`);
+            return null;
+        }
+    }
+    embedSync(text) {
+        return this.handle.embedOne(text);
+    }
+    async embed(text) {
+        return this.handle.embedOne(text);
+    }
+    async embedBatch(texts) {
+        return texts.map((t) => this.handle.embedOne(t));
+    }
+}
+let shared = null;
+/** Process-wide embedder (loaded once), or null. */
+export function getOnnxWasmEmbedder() {
+    if (!shared)
+        shared = OnnxWasmTextEmbedder.create();
+    return shared;
+}
+/** Test hook. */
+export function _resetOnnxWasmForTests() {
+    shared = null;
+    modulePromise = null;
+}
+//# sourceMappingURL=onnx-wasm-embedder.js.map

package/dist/integrations/onnx-wasm-embedder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onnx-wasm-embedder.js","sourceRoot":"","sources":["../../src/integrations/onnx-wasm-embedder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,MAAM,CAAC,MAAM,iBAAiB,GAAG,+BAA+B,CAAC;AACjE,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEvC,MAAM,UAAU,GAAG,4BAA4B,CAAC;AAChD,MAAM,cAAc,GAAG,iCAAiC,CAAC;AACzD,MAAM,SAAS,GAAG,6EAA6E,CAAC;AAChG,MAAM,aAAa,GAAG,4EAA4E,CAAC;AAYnG,IAAI,aAAa,GAA0C,IAAI,CAAC;AAEhE,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB;IAChC,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,aAAa,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,MAAM,KAAK,GAAG,eAAe,CAAC,iBAAiB,CAAC,CAAC;YACjD,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC3C,IAAI,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBACvC,MAAM,CAAC,GAAG,MAAa,CAAC;oBACxB,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;oBAC/B,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC;oBACrB,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC/C,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;oBAC5B,OAAO,GAAG,CAAC,OAAyB,CAAC;gBACvC,CAAC;gBACD,OAAO,CAAC,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAA8B,CAAC;YACxE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,MAAM,GAAG,GAAG,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,CAAC;IACjE,OAAO,CAAC,CACN,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;QACrC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,gCAAgC,KAAK,GAAG;QACpD,OAAO,CAAC,GAAG,CAAC,gCAAgC,KAAK,OAAO,CACzD,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,mBAAmB,CAAC,GAAG,GAAG,gBAAgB,EAAE;IAC1D,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,MAAc;IACjD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,OAAO,CAAC;IAC5C,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3C,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAW;IACzC,IAAI,mBAAmB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,CAAC,uBAAuB,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7C,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,2DAA2D,GAAG,IAAI,CAAC,CAAC;IACzF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAAE,MAAM,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;IACrG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAAE,MAAM,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;IACzF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qFAAqF;AACrF,MAAM,OAAO,oBAAoB;IAIM;IAH5B,SAAS,CAAS;IAClB,MAAM,GAAG,WAAoB,CAAC;IAEvC,YAAqC,MAA0B;QAA1B,WAAM,GAAN,MAAM,CAAoB;QAC7D,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IACtC,CAAC;IAED,+EAA+E;IAC/E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAiC,EAAE;QACrD,MAAM,GAAG,GAAG,MAAM,kBAAkB,EAAE,CAAC;QACvC,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACnD,IAAI,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAChD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,CACjC,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,EACnD,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAChD,CAAC;YACF,OAAO,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,GAAG,EAAE,OAAO,IAAI,GAAG,IAAI,CAAC,CAAC;YAChG,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,SAAS,CAAC,IAAY;QACpB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAe;QAC9B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;CACF;AAED,IAAI,MAAM,GAAgD,IAAI,CAAC;AAE/D,oDAAoD;AACpD,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC,MAAM;QAAE,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,CAAC;IACpD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iBAAiB;AACjB,MAAM,UAAU,sBAAsB;IACpC,MAAM,GAAG,IAAI,CAAC;IACd,aAAa,GAAG,IAAI,CAAC;AACvB,CAAC","sourcesContent":["/**\n * Real text embeddings through `ruvector-onnx-embeddings-wasm` (all-MiniLM-L6-v2, 384-d).\n *\n * Packaging note: ruvector-onnx-embeddings-wasm 0.1.0-0.1.2 declares\n * `\"type\": \"module\"` but ships wasm-bindgen's CommonJS (nodejs target) glue,\n * which assigns `module.exports`. `import()` therefore throws\n * \"module is not defined in ES module scope\", and `require()` fails the same\n * way because Node treats the file as ESM. We compile the glue explicitly as\n * CommonJS. If a future release ships real ESM, plain `import()` is used.\n *\n * Model: the WASM runtime cannot load the quantized ONNX graph agentic-flow's\n * OptimizedEmbedder uses by default (it fails on an Unsqueeze node), so this\n * uses the full-precision Xenova/all-MiniLM-L6-v2 model (~91 MB) plus its\n * tokenizer.json. Both live in the same model directory OptimizedEmbedder uses\n * (`~/.agentic-flow/models`, override with `AGENTIC_FLOW_MODEL_DIR`); the ONNX\n * file name matches OptimizedEmbedder's `all-MiniLM-L6-v2-full` registry entry,\n * so either component can reuse the other's download.\n *\n * Downloads happen on first use unless any of these is set:\n * `AGENTIC_FLOW_OFFLINE=1`, `HF_HUB_OFFLINE=1`, `AGENTIC_FLOW_EMBEDDINGS_DOWNLOAD=0`.\n * Nothing here writes to stdout (the MCP stdio server owns it).\n */\n\nimport Module from 'node:module';\nimport { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { dirname, join } from 'node:path';\nimport { resolveOptional } from './optional.js';\n\nexport const ONNX_WASM_PACKAGE = 'ruvector-onnx-embeddings-wasm';\nexport const ONNX_WASM_DIMENSION = 384;\n\nconst MODEL_FILE = 'all-MiniLM-L6-v2-full.onnx';\nconst TOKENIZER_FILE = 'all-MiniLM-L6-v2.tokenizer.json';\nconst MODEL_URL = 'https://huggingface.co/Xenova/all-MiniLM-L6-v2/resolve/main/onnx/model.onnx';\nconst TOKENIZER_URL = 'https://huggingface.co/Xenova/all-MiniLM-L6-v2/resolve/main/tokenizer.json';\n\ninterface WasmEmbedderHandle {\n  embedOne(text: string): Float32Array;\n  dimension(): number;\n}\nexport interface OnnxWasmModule {\n  WasmEmbedder: new (modelBytes: Uint8Array, tokenizerJson: string) => WasmEmbedderHandle;\n  cosineSimilarity(a: Float32Array, b: Float32Array): number;\n  version(): string;\n}\n\nlet modulePromise: Promise<OnnxWasmModule | null> | null = null;\n\n/** Load the WASM glue (see the packaging note above), or null when absent. */\nexport function loadOnnxWasmModule(): Promise<OnnxWasmModule | null> {\n  if (!modulePromise) {\n    modulePromise = (async () => {\n      const entry = resolveOptional(ONNX_WASM_PACKAGE);\n      if (!entry) return null;\n      try {\n        const source = readFileSync(entry, 'utf8');\n        if (/\\bmodule\\.exports\\b/.test(source)) {\n          const M = Module as any;\n          const mod = new M(entry, null);\n          mod.filename = entry;\n          mod.paths = M._nodeModulePaths(dirname(entry));\n          mod._compile(source, entry);\n          return mod.exports as OnnxWasmModule;\n        }\n        return (await import(ONNX_WASM_PACKAGE)) as unknown as OnnxWasmModule;\n      } catch {\n        return null;\n      }\n    })();\n  }\n  return modulePromise;\n}\n\nexport function onnxWasmModelDir(): string {\n  return process.env.AGENTIC_FLOW_MODEL_DIR || join(homedir(), '.agentic-flow', 'models');\n}\n\nexport function onnxWasmDownloadAllowed(): boolean {\n  const off = (v: string | undefined) => v === '1' || v === 'true';\n  return !(\n    off(process.env.AGENTIC_FLOW_OFFLINE) ||\n    off(process.env.HF_HUB_OFFLINE) ||\n    process.env.AGENTIC_FLOW_EMBEDDINGS_DOWNLOAD === '0' ||\n    process.env.AGENTIC_FLOW_EMBEDDINGS_DOWNLOAD === 'false'\n  );\n}\n\n/** Whether model + tokenizer are already on disk (no network needed). */\nexport function onnxWasmModelCached(dir = onnxWasmModelDir()): boolean {\n  return existsSync(join(dir, MODEL_FILE)) && existsSync(join(dir, TOKENIZER_FILE));\n}\n\nasync function download(url: string, target: string): Promise<void> {\n  const res = await fetch(url);\n  if (!res.ok) throw new Error(`download failed ${res.status} ${res.statusText}: ${url}`);\n  const bytes = new Uint8Array(await res.arrayBuffer());\n  const tmp = `${target}.${process.pid}.part`;\n  writeFileSync(tmp, bytes, { mode: 0o600 });\n  renameSync(tmp, target);\n}\n\nasync function ensureModelFiles(dir: string): Promise<boolean> {\n  if (onnxWasmModelCached(dir)) return true;\n  if (!onnxWasmDownloadAllowed()) return false;\n  mkdirSync(dir, { recursive: true, mode: 0o700 });\n  process.stderr.write(`[agentic-flow] downloading all-MiniLM-L6-v2 (~91 MB) to ${dir}\\n`);\n  if (!existsSync(join(dir, TOKENIZER_FILE))) await download(TOKENIZER_URL, join(dir, TOKENIZER_FILE));\n  if (!existsSync(join(dir, MODEL_FILE))) await download(MODEL_URL, join(dir, MODEL_FILE));\n  return true;\n}\n\n/** A loaded all-MiniLM-L6-v2 embedder. `embed` is async to match other embedders. */\nexport class OnnxWasmTextEmbedder {\n  readonly dimension: number;\n  readonly source = 'onnx-wasm' as const;\n\n  private constructor(private readonly handle: WasmEmbedderHandle) {\n    this.dimension = handle.dimension();\n  }\n\n  /** Build an embedder, or null when the package or the model is unavailable. */\n  static async create(options: { modelDir?: string } = {}): Promise<OnnxWasmTextEmbedder | null> {\n    const mod = await loadOnnxWasmModule();\n    if (!mod) return null;\n    const dir = options.modelDir ?? onnxWasmModelDir();\n    try {\n      if (!(await ensureModelFiles(dir))) return null;\n      const handle = new mod.WasmEmbedder(\n        new Uint8Array(readFileSync(join(dir, MODEL_FILE))),\n        readFileSync(join(dir, TOKENIZER_FILE), 'utf8'),\n      );\n      return new OnnxWasmTextEmbedder(handle);\n    } catch (err: any) {\n      process.stderr.write(`[agentic-flow] ONNX WASM embedder unavailable: ${err?.message ?? err}\\n`);\n      return null;\n    }\n  }\n\n  embedSync(text: string): Float32Array {\n    return this.handle.embedOne(text);\n  }\n\n  async embed(text: string): Promise<Float32Array> {\n    return this.handle.embedOne(text);\n  }\n\n  async embedBatch(texts: string[]): Promise<Float32Array[]> {\n    return texts.map((t) => this.handle.embedOne(t));\n  }\n}\n\nlet shared: Promise<OnnxWasmTextEmbedder | null> | null = null;\n\n/** Process-wide embedder (loaded once), or null. */\nexport function getOnnxWasmEmbedder(): Promise<OnnxWasmTextEmbedder | null> {\n  if (!shared) shared = OnnxWasmTextEmbedder.create();\n  return shared;\n}\n\n/** Test hook. */\nexport function _resetOnnxWasmForTests(): void {\n  shared = null;\n  modulePromise = null;\n}\n"]}

package/dist/integrations/optional.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Optional ecosystem packages — one place to load them.
+ *
+ * Every package loaded here is an `optionalDependency` of agentic-flow: npm
+ * installs it by default, but it may be missing (`--omit=optional`, an
+ * unsupported platform, a failed native build). Callers therefore always get
+ * either the module or `null`, never a throw, and keep a built-in fallback.
+ *
+ * Two loaders:
+ * - `requireOptional` is synchronous (createRequire) for CommonJS packages that
+ *   must be usable from synchronous code paths (e.g. input validation).
+ * - `importOptional` is asynchronous for ESM packages.
+ *
+ * Results (including "not installed") are cached per specifier.
+ */
+/** Synchronously load a CommonJS optional package, or return null. */
+export declare function requireOptional<T = any>(specifier: string): T | null;
+/**
+ * Whether a package is installed, without loading it. ESM-only packages whose
+ * exports map has no require/default condition (sublinear-time-solver) cannot
+ * be require.resolve()d, but that error itself proves the package is there.
+ */
+export declare function isOptionalInstalled(specifier: string): boolean;
+/** Asynchronously import an optional package (ESM or CJS), or return null. */
+export declare function importOptional<T = any>(specifier: string, options?: {
+    quietStdout?: boolean;
+}): Promise<T | null>;
+/** Why the last load of `specifier` failed, if it did. */
+export declare function optionalLoadError(specifier: string): string | undefined;
+/** Resolve a package's entry file without loading it, or null if absent. */
+export declare function resolveOptional(specifier: string): string | null;
+/**
+ * Run `fn` with `console.log`/`console.info` sent to stderr.
+ *
+ * The MCP stdio server speaks JSON-RPC over stdout, so a dependency that
+ * prints a banner (sublinear-time-solver does, from `console.log`) would
+ * corrupt the protocol stream. Only the console methods are patched — never
+ * `process.stdout.write` — so a protocol frame written by the server while
+ * `fn` is pending still reaches stdout.
+ */
+export declare function withStdoutToStderr<T>(fn: () => Promise<T> | T): Promise<T>;
+/** Test hook: forget cached load results. */
+export declare function _resetOptionalCache(): void;
+//# sourceMappingURL=optional.d.ts.map

package/dist/integrations/optional.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"optional.d.ts","sourceRoot":"","sources":["../../src/integrations/optional.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAUH,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,CAAC,GAAG,GAAG,EAAE,SAAS,EAAE,MAAM,GAAG,CAAC,GAAG,IAAI,CAWpE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAO9D;AAED,8EAA8E;AAC9E,wBAAsB,cAAc,CAAC,CAAC,GAAG,GAAG,EAC1C,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAA;CAAO,GACtC,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAenB;AAED,0DAA0D;AAC1D,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEvE;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMhE;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAWhF;AAED,6CAA6C;AAC7C,wBAAgB,mBAAmB,IAAI,IAAI,CAG1C"}

package/dist/integrations/optional.js

@@ -0,0 +1,107 @@
+/**
+ * Optional ecosystem packages — one place to load them.
+ *
+ * Every package loaded here is an `optionalDependency` of agentic-flow: npm
+ * installs it by default, but it may be missing (`--omit=optional`, an
+ * unsupported platform, a failed native build). Callers therefore always get
+ * either the module or `null`, never a throw, and keep a built-in fallback.
+ *
+ * Two loaders:
+ * - `requireOptional` is synchronous (createRequire) for CommonJS packages that
+ *   must be usable from synchronous code paths (e.g. input validation).
+ * - `importOptional` is asynchronous for ESM packages.
+ *
+ * Results (including "not installed") are cached per specifier.
+ */
+import { createRequire } from 'node:module';
+const nodeRequire = createRequire(import.meta.url);
+const syncCache = new Map();
+const asyncCache = new Map();
+/** Synchronously load a CommonJS optional package, or return null. */
+export function requireOptional(specifier) {
+    const cached = syncCache.get(specifier);
+    if (cached)
+        return cached.mod;
+    let entry;
+    try {
+        entry = { mod: nodeRequire(specifier) };
+    }
+    catch (err) {
+        entry = { mod: null, error: err?.message ?? String(err) };
+    }
+    syncCache.set(specifier, entry);
+    return entry.mod;
+}
+/**
+ * Whether a package is installed, without loading it. ESM-only packages whose
+ * exports map has no require/default condition (sublinear-time-solver) cannot
+ * be require.resolve()d, but that error itself proves the package is there.
+ */
+export function isOptionalInstalled(specifier) {
+    try {
+        nodeRequire.resolve(specifier);
+        return true;
+    }
+    catch (err) {
+        return err?.code === 'ERR_PACKAGE_PATH_NOT_EXPORTED';
+    }
+}
+/** Asynchronously import an optional package (ESM or CJS), or return null. */
+export async function importOptional(specifier, options = {}) {
+    let pending = asyncCache.get(specifier);
+    if (!pending) {
+        pending = (async () => {
+            try {
+                const load = () => import(specifier);
+                const mod = options.quietStdout ? await withStdoutToStderr(load) : await load();
+                return { mod };
+            }
+            catch (err) {
+                return { mod: null, error: err?.message ?? String(err) };
+            }
+        })();
+        asyncCache.set(specifier, pending);
+    }
+    return (await pending).mod;
+}
+/** Why the last load of `specifier` failed, if it did. */
+export function optionalLoadError(specifier) {
+    return syncCache.get(specifier)?.error;
+}
+/** Resolve a package's entry file without loading it, or null if absent. */
+export function resolveOptional(specifier) {
+    try {
+        return nodeRequire.resolve(specifier);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Run `fn` with `console.log`/`console.info` sent to stderr.
+ *
+ * The MCP stdio server speaks JSON-RPC over stdout, so a dependency that
+ * prints a banner (sublinear-time-solver does, from `console.log`) would
+ * corrupt the protocol stream. Only the console methods are patched — never
+ * `process.stdout.write` — so a protocol frame written by the server while
+ * `fn` is pending still reaches stdout.
+ */
+export async function withStdoutToStderr(fn) {
+    const originalLog = console.log;
+    const originalInfo = console.info;
+    console.log = (...args) => console.error(...args);
+    console.info = (...args) => console.error(...args);
+    try {
+        return await fn();
+    }
+    finally {
+        console.log = originalLog;
+        console.info = originalInfo;
+    }
+}
+/** Test hook: forget cached load results. */
+export function _resetOptionalCache() {
+    syncCache.clear();
+    asyncCache.clear();
+}
+//# sourceMappingURL=optional.js.map

package/dist/integrations/optional.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"optional.js","sourceRoot":"","sources":["../../src/integrations/optional.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAGnD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAsB,CAAC;AAChD,MAAM,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;AAE1D,sEAAsE;AACtE,MAAM,UAAU,eAAe,CAAU,SAAiB;IACxD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,GAAe,CAAC;IAC1C,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,KAAK,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC5D,CAAC;IACD,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChC,OAAO,KAAK,CAAC,GAAe,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,IAAI,CAAC;QACH,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,GAAG,EAAE,IAAI,KAAK,+BAA+B,CAAC;IACvD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,UAAqC,EAAE;IAEvC,IAAI,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,GAAG,CAAC,KAAK,IAAyB,EAAE;YACzC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACrC,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;gBAChF,OAAO,EAAE,GAAG,EAAE,CAAC;YACjB,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3D,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,CAAC,MAAM,OAAO,CAAC,CAAC,GAAe,CAAC;AACzC,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,OAAO,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC;AACzC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAI,EAAwB;IAClE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAChC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAClC,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7D,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;QAC1B,OAAO,CAAC,IAAI,GAAG,YAAY,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,mBAAmB;IACjC,SAAS,CAAC,KAAK,EAAE,CAAC;IAClB,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC","sourcesContent":["/**\n * Optional ecosystem packages — one place to load them.\n *\n * Every package loaded here is an `optionalDependency` of agentic-flow: npm\n * installs it by default, but it may be missing (`--omit=optional`, an\n * unsupported platform, a failed native build). Callers therefore always get\n * either the module or `null`, never a throw, and keep a built-in fallback.\n *\n * Two loaders:\n * - `requireOptional` is synchronous (createRequire) for CommonJS packages that\n *   must be usable from synchronous code paths (e.g. input validation).\n * - `importOptional` is asynchronous for ESM packages.\n *\n * Results (including \"not installed\") are cached per specifier.\n */\n\nimport { createRequire } from 'node:module';\n\nconst nodeRequire = createRequire(import.meta.url);\n\ntype CacheEntry = { mod: any | null; error?: string };\nconst syncCache = new Map<string, CacheEntry>();\nconst asyncCache = new Map<string, Promise<CacheEntry>>();\n\n/** Synchronously load a CommonJS optional package, or return null. */\nexport function requireOptional<T = any>(specifier: string): T | null {\n  const cached = syncCache.get(specifier);\n  if (cached) return cached.mod as T | null;\n  let entry: CacheEntry;\n  try {\n    entry = { mod: nodeRequire(specifier) };\n  } catch (err: any) {\n    entry = { mod: null, error: err?.message ?? String(err) };\n  }\n  syncCache.set(specifier, entry);\n  return entry.mod as T | null;\n}\n\n/**\n * Whether a package is installed, without loading it. ESM-only packages whose\n * exports map has no require/default condition (sublinear-time-solver) cannot\n * be require.resolve()d, but that error itself proves the package is there.\n */\nexport function isOptionalInstalled(specifier: string): boolean {\n  try {\n    nodeRequire.resolve(specifier);\n    return true;\n  } catch (err: any) {\n    return err?.code === 'ERR_PACKAGE_PATH_NOT_EXPORTED';\n  }\n}\n\n/** Asynchronously import an optional package (ESM or CJS), or return null. */\nexport async function importOptional<T = any>(\n  specifier: string,\n  options: { quietStdout?: boolean } = {},\n): Promise<T | null> {\n  let pending = asyncCache.get(specifier);\n  if (!pending) {\n    pending = (async (): Promise<CacheEntry> => {\n      try {\n        const load = () => import(specifier);\n        const mod = options.quietStdout ? await withStdoutToStderr(load) : await load();\n        return { mod };\n      } catch (err: any) {\n        return { mod: null, error: err?.message ?? String(err) };\n      }\n    })();\n    asyncCache.set(specifier, pending);\n  }\n  return (await pending).mod as T | null;\n}\n\n/** Why the last load of `specifier` failed, if it did. */\nexport function optionalLoadError(specifier: string): string | undefined {\n  return syncCache.get(specifier)?.error;\n}\n\n/** Resolve a package's entry file without loading it, or null if absent. */\nexport function resolveOptional(specifier: string): string | null {\n  try {\n    return nodeRequire.resolve(specifier);\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Run `fn` with `console.log`/`console.info` sent to stderr.\n *\n * The MCP stdio server speaks JSON-RPC over stdout, so a dependency that\n * prints a banner (sublinear-time-solver does, from `console.log`) would\n * corrupt the protocol stream. Only the console methods are patched — never\n * `process.stdout.write` — so a protocol frame written by the server while\n * `fn` is pending still reaches stdout.\n */\nexport async function withStdoutToStderr<T>(fn: () => Promise<T> | T): Promise<T> {\n  const originalLog = console.log;\n  const originalInfo = console.info;\n  console.log = (...args: unknown[]) => console.error(...args);\n  console.info = (...args: unknown[]) => console.error(...args);\n  try {\n    return await fn();\n  } finally {\n    console.log = originalLog;\n    console.info = originalInfo;\n  }\n}\n\n/** Test hook: forget cached load results. */\nexport function _resetOptionalCache(): void {\n  syncCache.clear();\n  asyncCache.clear();\n}\n"]}

package/dist/integrations/prompt-injection.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Prompt-injection screening for task text.
+ *
+ * Uses the optional `aidefence` package (53 curated patterns across encodings
+ * and obfuscation variants) when installed, and a small built-in pattern set
+ * otherwise. Only the `aidefence/dist/detection` subpath is loaded: the package
+ * root starts an Express server stack, the detection engine has no deps.
+ *
+ * Policy (env `AGENTIC_FLOW_PROMPT_INJECTION`):
+ * - `block` (default): reject `critical` findings, warn on the rest
+ * - `strict`: reject `critical` and `high`, warn on the rest
+ * - `warn`: never reject, warn on every finding
+ * - `off`: do not scan
+ *
+ * `high` is not rejected by default because legitimate agent prompts often
+ * trip it — "You are now a code reviewer…" matches aidefence's role-switch rule.
+ */
+export type InjectionSeverity = 'low' | 'medium' | 'high' | 'critical';
+export type InjectionPolicy = 'block' | 'strict' | 'warn' | 'off';
+export interface InjectionThreat {
+    id: string;
+    type: string;
+    severity: InjectionSeverity;
+    confidence: number;
+    description: string;
+    match?: string;
+}
+export interface InjectionScan {
+    safe: boolean;
+    maxSeverity: InjectionSeverity | null;
+    threats: InjectionThreat[];
+    /** Which engine produced the result. */
+    engine: 'aidefence' | 'builtin' | 'disabled';
+    /** What the active policy decided. */
+    decision: 'allow' | 'warn' | 'block';
+}
+interface AidefenceDetector {
+    detect(text: string): {
+        safe: boolean;
+        maxSeverity: InjectionSeverity | null;
+        threats: Array<InjectionThreat & Record<string, unknown>>;
+    };
+}
+export declare function getInjectionPolicy(): InjectionPolicy;
+/** Scan `text` for prompt-injection attempts under the active policy. */
+export declare function scanPromptInjection(text: string, policy?: InjectionPolicy): InjectionScan;
+/** Which engine `scanPromptInjection` will use. */
+export declare function promptInjectionEngine(): 'aidefence' | 'builtin';
+/** Test hook: `null` forces the built-in engine, `undefined` restores auto-detection. */
+export declare function _setInjectionDetectorForTests(d: AidefenceDetector | null | undefined): void;
+export {};
+//# sourceMappingURL=prompt-injection.d.ts.map

package/dist/integrations/prompt-injection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-injection.d.ts","sourceRoot":"","sources":["../../src/integrations/prompt-injection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AACvE,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC;AAElE,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,CAAC;IACd,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACtC,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,wCAAwC;IACxC,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC;IAC7C,sCAAsC;IACtC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;CACtC;AAED,UAAU,iBAAiB;IACzB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG;QACpB,IAAI,EAAE,OAAO,CAAC;QACd,WAAW,EAAE,iBAAiB,GAAG,IAAI,CAAC;QACtC,OAAO,EAAE,KAAK,CAAC,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KAC3D,CAAC;CACH;AA2CD,wBAAgB,kBAAkB,IAAI,eAAe,CAKpD;AA0BD,yEAAyE;AACzE,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,eAAsC,GAAG,aAAa,CAwB/G;AAED,mDAAmD;AACnD,wBAAgB,qBAAqB,IAAI,WAAW,GAAG,SAAS,CAE/D;AAED,yFAAyF;AACzF,wBAAgB,6BAA6B,CAAC,CAAC,EAAE,iBAAiB,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,CAE3F"}