agentix-cli 0.49.0 → 0.50.0

package/dist/chunk-7DXE264B.js

@@ -1,2 +0,0 @@
-var r=new Set(["cli","chat-cli","exec","tui","dashboard","admin","test-drive","workflow-editor","voice","opencode","mcp","ntfy"]),a=new Set(["telegram","whatsapp","slack","discord","gitlab","github","api","a2a","mesh","subagent","compaction","cron","workflow","business","heartbeat","selftest"]);function n(e){let t=(e??"").toLowerCase().split("@")[0];return r.has(t)?"operator":a.has(t)?"internal":"external"}var s=[/\bglpat-[A-Za-z0-9_-]{16,}/,/\bgh[pousr]_[A-Za-z0-9]{30,}/,/\bgithub_pat_[A-Za-z0-9_]{20,}/,/\bsk-ant-[A-Za-z0-9_-]{16,}/,/\bsk-(proj-)?[A-Za-z0-9_-]{20,}/,/\bxox[abprs]-[A-Za-z0-9-]{10,}/,/\bAKIA[0-9A-Z]{16}\b/,/\bAIza[0-9A-Za-z_-]{35}\b/,/\b\d{8,10}:[A-Za-z0-9_-]{35}\b/,/-----BEGIN [A-Z ]*PRIVATE KEY-----/,/\beyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/,/\b(password|passwd|pwd|secret|api[_-]?key|access[_-]?key|token)\s*[:=]\s*["']?[^\s"',;]{8,}/i,/\b[a-z][a-z0-9+.-]*:\/\/[^\s:/@]+:[^\s:/@]{6,}@/i];function o(e){return s.some(t=>t.test(e))}function i(e){return e.source.trust??n(e.source.channel)}function c(e){return e==="external"?"held":void 0}function u(e){return e.category==="secret"||o(e.content)||e.review==="rejected"||e.review==="held"?!1:i(e)==="external"?e.review==="approved":!0}export{n as a,o as b,i as c,c as d,u as e};
-//# sourceMappingURL=chunk-7DXE264B.js.map

package/dist/chunk-7DXE264B.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/agents/memory-trust.ts"],"sourcesContent":["// --- What extracted memory may keep, and what it may inject ---\n//\n// Facts are extracted from conversations after every reply and injected\n// into later tasks of the same agent, in any chat. Three rules keep that\n// from becoming a leak or a persistent prompt injection:\n//\n//   1. Secrets are never stored or injected. A credential pasted into one\n//      chat must not follow the agent into every other chat.\n//   2. Every fact records how far its source can be trusted, from the\n//      channel it came through.\n//   3. Facts from external sources (webhooks, public widgets, anything\n//      unknown) are held out of injection until someone approves them:\n//      anybody can write to those channels.\n//\n// Pure functions, unit tested.\n\nexport type SourceTrust =\n  /** Only the operator can reach it: CLI, dashboard, local voice and TUI. */\n  | \"operator\"\n  /** Authenticated people or peers: allow-listed chat senders, forge\n   *  project members, mesh callers. */\n  | \"internal\"\n  /** Anyone can write to it. */\n  | \"external\"\n\nexport type FactReview = \"held\" | \"approved\" | \"rejected\"\n\nconst OPERATOR_CHANNELS = new Set([\n  \"cli\", \"chat-cli\", \"exec\", \"tui\", \"dashboard\", \"admin\", \"test-drive\",\n  \"workflow-editor\", \"voice\", \"opencode\", \"mcp\", \"ntfy\",\n])\n\n/** People behind an allow-list or project membership, mesh peers, and\n *  this node's own automation. New extraction skips the machine channels\n *  (cron, workflow, a2a) anyway; older facts from them keep working. */\nconst INTERNAL_CHANNELS = new Set([\n  \"telegram\", \"whatsapp\", \"slack\", \"discord\", \"gitlab\", \"github\",\n  \"api\", \"a2a\", \"mesh\", \"subagent\", \"compaction\",\n  \"cron\", \"workflow\", \"business\", \"heartbeat\", \"selftest\",\n])\n\n/** Trust for a fact's source channel. Channels carry a node suffix\n *  (\"telegram@peer-server\"). Anything else, including web-chat,\n *  public-api, webhooks and channels added later, is external. */\nexport function trustForChannel(channel: string | undefined): SourceTrust {\n  const base = (channel ?? \"\").toLowerCase().split(\"@\")[0]\n  if (OPERATOR_CHANNELS.has(base)) return \"operator\"\n  if (INTERNAL_CHANNELS.has(base)) return \"internal\"\n  return \"external\"\n}\n\n// Shapes of credentials. Deliberately specific: each pattern is a known\n// token format or an explicit assignment, so ordinary prose about \"the\n// token\" or \"a password reset\" is not caught.\nconst SECRET_PATTERNS: RegExp[] = [\n  /\\bglpat-[A-Za-z0-9_-]{16,}/,                        // GitLab PAT\n  /\\bgh[pousr]_[A-Za-z0-9]{30,}/,                     // GitHub tokens\n  /\\bgithub_pat_[A-Za-z0-9_]{20,}/,\n  /\\bsk-ant-[A-Za-z0-9_-]{16,}/,                      // Anthropic\n  /\\bsk-(proj-)?[A-Za-z0-9_-]{20,}/,                  // OpenAI-style\n  /\\bxox[abprs]-[A-Za-z0-9-]{10,}/,                   // Slack\n  /\\bAKIA[0-9A-Z]{16}\\b/,                             // AWS access key\n  /\\bAIza[0-9A-Za-z_-]{35}\\b/,                        // Google API key\n  /\\b\\d{8,10}:[A-Za-z0-9_-]{35}\\b/,                   // Telegram bot token\n  /-----BEGIN [A-Z ]*PRIVATE KEY-----/,\n  /\\beyJ[A-Za-z0-9_-]{10,}\\.eyJ[A-Za-z0-9_-]{10,}\\.[A-Za-z0-9_-]{10,}/, // JWT\n  /\\b(password|passwd|pwd|secret|api[_-]?key|access[_-]?key|token)\\s*[:=]\\s*[\"']?[^\\s\"',;]{8,}/i,\n  /\\b[a-z][a-z0-9+.-]*:\\/\\/[^\\s:/@]+:[^\\s:/@]{6,}@/i,  // URL with user:password@\n]\n\nexport function containsSecret(text: string): boolean {\n  return SECRET_PATTERNS.some((p) => p.test(text))\n}\n\n/** The fields of a stored fact this module reads. Older facts have no\n *  trust or review; trust then comes from their source channel. */\nexport interface FactTrustFields {\n  category: string\n  content: string\n  source: { channel: string; trust?: SourceTrust }\n  review?: FactReview\n}\n\nexport function factTrust(f: FactTrustFields): SourceTrust {\n  return f.source.trust ?? trustForChannel(f.source.channel)\n}\n\n/** Whether a new fact from this source waits for review before use. */\nexport function initialReview(trust: SourceTrust): FactReview | undefined {\n  return trust === \"external\" ? \"held\" : undefined\n}\n\n/** Whether a stored fact may be injected into a prompt. */\nexport function isInjectable(f: FactTrustFields): boolean {\n  if (f.category === \"secret\" || containsSecret(f.content)) return false\n  if (f.review === \"rejected\" || f.review === \"held\") return false\n  if (factTrust(f) === \"external\") return f.review === \"approved\"\n  return true\n}\n"],"mappings":"AA2BA,IAAMA,EAAoB,IAAI,IAAI,CAChC,MAAO,WAAY,OAAQ,MAAO,YAAa,QAAS,aACxD,kBAAmB,QAAS,WAAY,MAAO,MACjD,CAAC,EAKKC,EAAoB,IAAI,IAAI,CAChC,WAAY,WAAY,QAAS,UAAW,SAAU,SACtD,MAAO,MAAO,OAAQ,WAAY,aAClC,OAAQ,WAAY,WAAY,YAAa,UAC/C,CAAC,EAKM,SAASC,EAAgBC,EAA0C,CACxE,IAAMC,GAAQD,GAAW,IAAI,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC,EACvD,OAAIH,EAAkB,IAAII,CAAI,EAAU,WACpCH,EAAkB,IAAIG,CAAI,EAAU,WACjC,UACT,CAKA,IAAMC,EAA4B,CAChC,6BACA,+BACA,iCACA,8BACA,kCACA,iCACA,uBACA,4BACA,iCACA,qCACA,qEACA,+FACA,kDACF,EAEO,SAASC,EAAeC,EAAuB,CACpD,OAAOF,EAAgB,KAAMG,GAAMA,EAAE,KAAKD,CAAI,CAAC,CACjD,CAWO,SAASE,EAAUC,EAAiC,CACzD,OAAOA,EAAE,OAAO,OAASR,EAAgBQ,EAAE,OAAO,OAAO,CAC3D,CAGO,SAASC,EAAcC,EAA4C,CACxE,OAAOA,IAAU,WAAa,OAAS,MACzC,CAGO,SAASC,EAAaH,EAA6B,CAExD,OADIA,EAAE,WAAa,UAAYJ,EAAeI,EAAE,OAAO,GACnDA,EAAE,SAAW,YAAcA,EAAE,SAAW,OAAe,GACvDD,EAAUC,CAAC,IAAM,WAAmBA,EAAE,SAAW,WAC9C,EACT","names":["OPERATOR_CHANNELS","INTERNAL_CHANNELS","trustForChannel","channel","base","SECRET_PATTERNS","containsSecret","text","p","factTrust","f","initialReview","trust","isInjectable"]}

package/dist/memory-extract-YZI2QZVR.js

@@ -1,2 +0,0 @@
-import{b as a}from"./chunk-DVNIFP7S.js";import"./chunk-7DXE264B.js";import"./chunk-FIOB3MEX.js";export{a as extractMemories};
-//# sourceMappingURL=memory-extract-YZI2QZVR.js.map

package/dist/processes-XWRGOLMT.js

@@ -1,2 +0,0 @@
-import{a}from"./chunk-GCHUE3TN.js";import"./chunk-DLKRPK5M.js";import"./chunk-LQRBGQIR.js";import"./chunk-FIOB3MEX.js";export{a as renderProcessesPage};
-//# sourceMappingURL=processes-XWRGOLMT.js.map