clinkx 0.2.3 → 1.0.0

package/dist/context-builder/schema.js

@@ -0,0 +1,399 @@
+import { z } from "zod";
+import { zodToJsonSchema } from "zod-to-json-schema";
+import { InvalidParamsError } from "../errors.js";
+import { validateCallerRunId } from "./run-id.js";
+import { assertTaskSecretsGated, resolveAllowSecrets, } from "./secrets.js";
+export const CONTEXT_BUILDER_INTENT_PROFILES = [
+    "handoff_small",
+    "implementation_medium",
+    "review_deep",
+];
+export const CONTEXT_BUILDER_PUBLIC_BUDGET_DEFAULTS = Object.freeze({
+    max_estimated_tokens: 24_000,
+    max_files: 200,
+    max_scan_files: 10_000,
+    max_bytes_per_file: 1_000_000,
+    max_total_bytes: 5_000_000,
+    max_search_results: 1_000,
+});
+export const CONTEXT_BUILDER_PUBLIC_BUDGET_HARD_LIMITS = Object.freeze({
+    max_estimated_tokens: 200_000,
+    max_files: 300,
+    max_scan_files: 50_000,
+    max_bytes_per_file: 1_000_000,
+    max_total_bytes: 5_000_000,
+    max_search_results: 5_000,
+});
+export const CONTEXT_BUILDER_DELEGATE_DEFAULTS = Object.freeze({
+    timeout_seconds: 120,
+    max_response_chars: 20_000,
+    failure_policy: "fallback",
+    finalizer_min_score: 8.5,
+});
+export const CONTEXT_BUILDER_DELEGATE_HARD_LIMITS = Object.freeze({
+    timeout_seconds: 600,
+    max_response_chars: 200_000,
+});
+export const CONTEXT_BUILDER_INTENT_PROFILE_DEFAULTS = Object.freeze({
+    handoff_small: {
+        budget: {
+            max_estimated_tokens: 12_000,
+            max_files: 80,
+            max_scan_files: 5_000,
+            max_bytes_per_file: 1_000_000,
+            max_total_bytes: 2_500_000,
+            max_search_results: 500,
+        },
+        delegate: {
+            timeout_seconds: 90,
+            max_response_chars: 12_000,
+        },
+        finalizer_enabled: false,
+    },
+    implementation_medium: {
+        budget: {
+            max_estimated_tokens: 48_000,
+            max_files: 200,
+            max_scan_files: 15_000,
+            max_bytes_per_file: 1_000_000,
+            max_total_bytes: 5_000_000,
+            max_search_results: 1_500,
+        },
+        delegate: {
+            timeout_seconds: 120,
+            max_response_chars: 20_000,
+        },
+        finalizer_enabled: false,
+    },
+    review_deep: {
+        budget: {
+            max_estimated_tokens: 96_000,
+            max_files: 300,
+            max_scan_files: 30_000,
+            max_bytes_per_file: 1_000_000,
+            max_total_bytes: 5_000_000,
+            max_search_results: 3_000,
+        },
+        delegate: {
+            timeout_seconds: 180,
+            max_response_chars: 40_000,
+        },
+        finalizer_enabled: true,
+    },
+});
+const ContextBuilderProfileSchema = z.enum(CONTEXT_BUILDER_INTENT_PROFILES);
+export const ContextBuilderAdapterBudgetDefaultsSchema = z
+    .object({
+    max_estimated_tokens: z
+        .number()
+        .int()
+        .positive()
+        .max(CONTEXT_BUILDER_PUBLIC_BUDGET_HARD_LIMITS.max_estimated_tokens)
+        .optional(),
+    max_files: z
+        .number()
+        .int()
+        .positive()
+        .max(CONTEXT_BUILDER_PUBLIC_BUDGET_HARD_LIMITS.max_files)
+        .optional(),
+    max_scan_files: z
+        .number()
+        .int()
+        .positive()
+        .max(CONTEXT_BUILDER_PUBLIC_BUDGET_HARD_LIMITS.max_scan_files)
+        .optional(),
+    max_bytes_per_file: z
+        .number()
+        .int()
+        .positive()
+        .max(CONTEXT_BUILDER_PUBLIC_BUDGET_HARD_LIMITS.max_bytes_per_file)
+        .optional(),
+    max_total_bytes: z
+        .number()
+        .int()
+        .positive()
+        .max(CONTEXT_BUILDER_PUBLIC_BUDGET_HARD_LIMITS.max_total_bytes)
+        .optional(),
+    max_search_results: z
+        .number()
+        .int()
+        .positive()
+        .max(CONTEXT_BUILDER_PUBLIC_BUDGET_HARD_LIMITS.max_search_results)
+        .optional(),
+})
+    .strict();
+const ContextBuilderBudgetSchema = ContextBuilderAdapterBudgetDefaultsSchema.default({});
+const NonBlankStringSchema = z.string().trim().min(1);
+const CONTEXT_BUILDER_SEARCH_TERM_MAX_CHARS = 256;
+const CONTEXT_BUILDER_SEARCH_TERMS_MAX_UTF8_BYTES = 4_096;
+const TaskSchema = NonBlankStringSchema.max(4_000).describe("Task for context curation");
+const DelegateProviderConfigSchema = z
+    .object({
+    cli_name: NonBlankStringSchema,
+    role: NonBlankStringSchema,
+})
+    .strict();
+const DelegateFinalizerConfigSchema = DelegateProviderConfigSchema.extend({
+    enabled: z.boolean().optional(),
+    min_score: z
+        .number()
+        .min(0)
+        .max(10)
+        .default(CONTEXT_BUILDER_DELEGATE_DEFAULTS.finalizer_min_score),
+}).strict();
+const DisabledDelegateSchema = z
+    .object({
+    enabled: z.literal(false).default(false),
+})
+    .strict();
+const EnabledDelegateSchema = z
+    .object({
+    enabled: z.literal(true),
+    curator: DelegateProviderConfigSchema,
+    finalizer: DelegateFinalizerConfigSchema,
+    timeout_seconds: z
+        .number()
+        .int()
+        .min(1)
+        .max(CONTEXT_BUILDER_DELEGATE_HARD_LIMITS.timeout_seconds)
+        .optional(),
+    max_response_chars: z
+        .number()
+        .int()
+        .positive()
+        .max(CONTEXT_BUILDER_DELEGATE_HARD_LIMITS.max_response_chars)
+        .optional(),
+    failure_policy: z
+        .enum(["fallback", "fail"])
+        .optional(),
+})
+    .strict();
+const DelegateSchema = z
+    .union([EnabledDelegateSchema, DisabledDelegateSchema])
+    .default({ enabled: false });
+/**
+ * Strict context_builder input schema. Delegate provider names are explicit
+ * request fields; no curator or finalizer provider defaults are hardcoded.
+ */
+export const ContextBuilderInputSchema = z
+    .object({
+    task: TaskSchema,
+    allow_secrets: z.boolean().optional(),
+    // Frozen v1 input schema: `profile` is an additive optional v1 extension.
+    profile: ContextBuilderProfileSchema.optional(),
+    roots: z.array(NonBlankStringSchema).max(8).optional(),
+    focus_paths: z.array(NonBlankStringSchema).max(200).default([]),
+    include_globs: z.array(NonBlankStringSchema).max(50).default([]),
+    exclude_globs: z.array(NonBlankStringSchema).max(100).default([]),
+    search_terms: z.array(NonBlankStringSchema).max(20).default([]),
+    budget: ContextBuilderBudgetSchema,
+    delegate: DelegateSchema,
+    run_id: z.string().optional().transform(validateOptionalRunId),
+    debug: z.boolean().default(false),
+})
+    .strict()
+    .transform((input) => ({
+    ...input,
+    roots: input.roots ?? [process.cwd()],
+    budget: resolveContextBuilderProfileBudget(input.profile, compactContextBuilderBudgetInput(input.budget)),
+    delegate: resolveContextBuilderProfileDelegate(input.profile, input.delegate),
+}));
+export const SELECTION_DISPOSITIONS = [
+    "full",
+    "slices",
+    "codemap_only",
+];
+export const SelectionDispositionSchema = z.enum(SELECTION_DISPOSITIONS);
+const REFINE_CONTEXT_RUN_MAX_OPS = 100;
+const REFINE_CONTEXT_RUN_MAX_PATHS = CONTEXT_BUILDER_PUBLIC_BUDGET_HARD_LIMITS.max_files;
+const REFINE_CONTEXT_RUN_MAX_RANGES = 100;
+const RefinePathsSchema = z
+    .array(NonBlankStringSchema)
+    .min(1)
+    .max(REFINE_CONTEXT_RUN_MAX_PATHS);
+const RefineLineRangeSchema = z
+    .object({
+    start_line: z.number().int().positive(),
+    end_line: z.number().int().positive(),
+})
+    .strict()
+    .refine((range) => range.end_line >= range.start_line, {
+    message: "end_line must be greater than or equal to start_line",
+    path: ["end_line"],
+});
+const RefineOpSchema = z.discriminatedUnion("op", [
+    z
+        .object({
+        op: z.literal("add"),
+        paths: RefinePathsSchema,
+        mode: SelectionDispositionSchema.default("full"),
+    })
+        .strict(),
+    z
+        .object({
+        op: z.literal("remove"),
+        paths: RefinePathsSchema,
+    })
+        .strict(),
+    z
+        .object({
+        op: z.literal("set_slices"),
+        path: NonBlankStringSchema,
+        ranges: z
+            .array(RefineLineRangeSchema)
+            .min(1)
+            .max(REFINE_CONTEXT_RUN_MAX_RANGES),
+    })
+        .strict(),
+    z
+        .object({
+        op: z.literal("promote"),
+        paths: RefinePathsSchema,
+    })
+        .strict(),
+    z
+        .object({
+        op: z.literal("demote"),
+        paths: RefinePathsSchema,
+    })
+        .strict(),
+]);
+export const RefineContextRunInputSchema = z
+    .object({
+    prior_run_id: z.string().transform(validateCallerRunId),
+    allow_secrets: z.boolean().optional(),
+    ops: z.array(RefineOpSchema).min(1).max(REFINE_CONTEXT_RUN_MAX_OPS),
+})
+    .strict();
+export function parseContextBuilderInput(input) {
+    const result = ContextBuilderInputSchema.safeParse(input);
+    if (!result.success) {
+        throw new InvalidParamsError(`Invalid context_builder input: ${result.error.issues
+            .map((issue) => issue.message)
+            .join("; ")}`);
+    }
+    validateContextBuilderSearchTerms(result.data.search_terms);
+    const allowSecrets = resolveAllowSecrets(result.data.allow_secrets);
+    assertTaskSecretsGated(result.data.task, allowSecrets);
+    return {
+        ...result.data,
+        allow_secrets: allowSecrets,
+    };
+}
+function validateContextBuilderSearchTerms(searchTerms) {
+    let aggregateBytes = 0;
+    for (const [index, term] of searchTerms.entries()) {
+        let charCount = 0;
+        for (const _char of term) {
+            charCount += 1;
+            if (charCount > CONTEXT_BUILDER_SEARCH_TERM_MAX_CHARS) {
+                throw new InvalidParamsError(`context_builder search_terms[${index}] must be <= ${CONTEXT_BUILDER_SEARCH_TERM_MAX_CHARS} characters`);
+            }
+        }
+        aggregateBytes += Buffer.byteLength(term, "utf8");
+    }
+    if (aggregateBytes > CONTEXT_BUILDER_SEARCH_TERMS_MAX_UTF8_BYTES) {
+        throw new InvalidParamsError(`context_builder search_terms must total <= ${CONTEXT_BUILDER_SEARCH_TERMS_MAX_UTF8_BYTES} UTF-8 bytes after trimming`);
+    }
+}
+export function normalizeContextBuilderPublicBudget(budget = {}) {
+    const maxEstimatedTokens = budget.max_estimated_tokens ??
+        CONTEXT_BUILDER_PUBLIC_BUDGET_DEFAULTS.max_estimated_tokens;
+    const normalized = {
+        max_estimated_tokens: maxEstimatedTokens,
+        target_estimated_tokens: Math.floor(0.9 * maxEstimatedTokens),
+        max_files: budget.max_files ?? CONTEXT_BUILDER_PUBLIC_BUDGET_DEFAULTS.max_files,
+        max_scan_files: budget.max_scan_files ??
+            CONTEXT_BUILDER_PUBLIC_BUDGET_DEFAULTS.max_scan_files,
+        max_bytes_per_file: budget.max_bytes_per_file ??
+            CONTEXT_BUILDER_PUBLIC_BUDGET_DEFAULTS.max_bytes_per_file,
+        max_total_bytes: budget.max_total_bytes ??
+            CONTEXT_BUILDER_PUBLIC_BUDGET_DEFAULTS.max_total_bytes,
+        max_search_results: budget.max_search_results ??
+            CONTEXT_BUILDER_PUBLIC_BUDGET_DEFAULTS.max_search_results,
+    };
+    for (const [key, value] of Object.entries(normalized)) {
+        if (key === "target_estimated_tokens") {
+            continue;
+        }
+        const hardLimit = CONTEXT_BUILDER_PUBLIC_BUDGET_HARD_LIMITS[key];
+        if (!Number.isInteger(value) || value <= 0 || value > hardLimit) {
+            throw new InvalidParamsError(`context_builder budget.${key} must be a positive integer <= ${hardLimit}`);
+        }
+    }
+    return normalized;
+}
+export function resolveContextBuilderAdapterBudgetInput(args) {
+    const profileBudget = args.profile == null
+        ? {}
+        : CONTEXT_BUILDER_INTENT_PROFILE_DEFAULTS[args.profile].budget;
+    // Precedence (lowest -> highest): profile defaults < adapter budget_defaults
+    // < explicit. Adapter defaults override profile per-key (a profile only fills
+    // keys the adapter does not set), so an explicitly-selected provider budget
+    // takes effect even under a default profile. Explicit request/cb_budget_*
+    // still wins over everything.
+    return {
+        ...profileBudget,
+        ...(args.adapterDefaults ?? {}),
+        ...(args.explicit ?? {}),
+    };
+}
+export function resolveContextBuilderProfileBudget(profile, budget = {}) {
+    const profileBudget = profile == null ? {} : CONTEXT_BUILDER_INTENT_PROFILE_DEFAULTS[profile].budget;
+    return normalizeContextBuilderPublicBudget({
+        ...profileBudget,
+        ...budget,
+    });
+}
+function resolveContextBuilderProfileDelegate(profile, delegate) {
+    if (!delegate.enabled) {
+        return delegate;
+    }
+    const profileDelegate = profile == null
+        ? {}
+        : CONTEXT_BUILDER_INTENT_PROFILE_DEFAULTS[profile].delegate;
+    return {
+        ...delegate,
+        timeout_seconds: delegate.timeout_seconds ??
+            profileDelegate.timeout_seconds ??
+            CONTEXT_BUILDER_DELEGATE_DEFAULTS.timeout_seconds,
+        max_response_chars: delegate.max_response_chars ??
+            profileDelegate.max_response_chars ??
+            CONTEXT_BUILDER_DELEGATE_DEFAULTS.max_response_chars,
+        failure_policy: delegate.failure_policy ??
+            CONTEXT_BUILDER_DELEGATE_DEFAULTS.failure_policy,
+    };
+}
+function compactContextBuilderBudgetInput(budget) {
+    return {
+        ...(budget.max_estimated_tokens == null
+            ? {}
+            : { max_estimated_tokens: budget.max_estimated_tokens }),
+        ...(budget.max_files == null ? {} : { max_files: budget.max_files }),
+        ...(budget.max_scan_files == null
+            ? {}
+            : { max_scan_files: budget.max_scan_files }),
+        ...(budget.max_bytes_per_file == null
+            ? {}
+            : { max_bytes_per_file: budget.max_bytes_per_file }),
+        ...(budget.max_total_bytes == null
+            ? {}
+            : { max_total_bytes: budget.max_total_bytes }),
+        ...(budget.max_search_results == null
+            ? {}
+            : { max_search_results: budget.max_search_results }),
+    };
+}
+export function contextBuilderJsonSchema() {
+    return zodToJsonSchema(ContextBuilderInputSchema, {
+        target: "jsonSchema7",
+        $refStrategy: "none",
+    });
+}
+function validateOptionalRunId(runId) {
+    if (runId == null) {
+        return undefined;
+    }
+    return validateCallerRunId(runId);
+}
+//# sourceMappingURL=schema.js.map

package/dist/context-builder/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/context-builder/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EACL,sBAAsB,EACtB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAgBtB,MAAM,CAAC,MAAM,+BAA+B,GAAG;IAC7C,eAAe;IACf,uBAAuB;IACvB,aAAa;CACL,CAAC;AAKX,MAAM,CAAC,MAAM,sCAAsC,GAAG,MAAM,CAAC,MAAM,CAAC;IAClE,oBAAoB,EAAE,MAAM;IAC5B,SAAS,EAAE,GAAG;IACd,cAAc,EAAE,MAAM;IACtB,kBAAkB,EAAE,SAAS;IAC7B,eAAe,EAAE,SAAS;IAC1B,kBAAkB,EAAE,KAAK;CAE4B,CAAC,CAAC;AAEzD,MAAM,CAAC,MAAM,yCAAyC,GAAG,MAAM,CAAC,MAAM,CAAC;IACrE,oBAAoB,EAAE,OAAO;IAC7B,SAAS,EAAE,GAAG;IACd,cAAc,EAAE,MAAM;IACtB,kBAAkB,EAAE,SAAS;IAC7B,eAAe,EAAE,SAAS;IAC1B,kBAAkB,EAAE,KAAK;CAE4B,CAAC,CAAC;AAEzD,MAAM,CAAC,MAAM,iCAAiC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7D,eAAe,EAAE,GAAG;IACpB,kBAAkB,EAAE,MAAM;IAC1B,cAAc,EAAE,UAAU;IAC1B,mBAAmB,EAAE,GAAG;CAChB,CAAC,CAAC;AAEZ,MAAM,CAAC,MAAM,oCAAoC,GAAG,MAAM,CAAC,MAAM,CAAC;IAChE,eAAe,EAAE,GAAG;IACpB,kBAAkB,EAAE,OAAO;CACnB,CAAC,CAAC;AAWZ,MAAM,CAAC,MAAM,uCAAuC,GAAG,MAAM,CAAC,MAAM,CAAC;IACnE,aAAa,EAAE;QACb,MAAM,EAAE;YACN,oBAAoB,EAAE,MAAM;YAC5B,SAAS,EAAE,EAAE;YACb,cAAc,EAAE,KAAK;YACrB,kBAAkB,EAAE,SAAS;YAC7B,eAAe,EAAE,SAAS;YAC1B,kBAAkB,EAAE,GAAG;SACxB;QACD,QAAQ,EAAE;YACR,eAAe,EAAE,EAAE;YACnB,kBAAkB,EAAE,MAAM;SAC3B;QACD,iBAAiB,EAAE,KAAK;KACzB;IACD,qBAAqB,EAAE;QACrB,MAAM,EAAE;YACN,oBAAoB,EAAE,MAAM;YAC5B,SAAS,EAAE,GAAG;YACd,cAAc,EAAE,MAAM;YACtB,kBAAkB,EAAE,SAAS;YAC7B,eAAe,EAAE,SAAS;YAC1B,kBAAkB,EAAE,KAAK;SAC1B;QACD,QAAQ,EAAE;YACR,eAAe,EAAE,GAAG;YACpB,kBAAkB,EAAE,MAAM;SAC3B;QACD,iBAAiB,EAAE,KAAK;KACzB;IACD,WAAW,EAAE;QACX,MAAM,EAAE;YACN,oBAAoB,EAAE,MAAM;YAC5B,SAAS,EAAE,GAAG;YACd,cAAc,EAAE,MAAM;YACtB,kBAAkB,EAAE,SAAS;YAC7B,eAAe,EAAE,SAAS;YAC1B,kBAAkB,EAAE,KAAK;SAC1B;QACD,QAAQ,EAAE;YACR,eAAe,EAAE,GAAG;YACpB,kBAAkB,EAAE,MAAM;SAC3B;QACD,iBAAiB,EAAE,IAAI;KACxB;CACiF,CAAC,CAAC;AAEtF,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;AAE5E,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC;KACvD,MAAM,CAAC;IACN,oBAAoB,EAAE,CAAC;SACpB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,yCAAyC,CAAC,oBAAoB,CAAC;SACnE,QAAQ,EAAE;IACb,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,yCAAyC,CAAC,SAAS,CAAC;SACxD,QAAQ,EAAE;IACb,cAAc,EAAE,CAAC;SACd,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,yCAAyC,CAAC,cAAc,CAAC;SAC7D,QAAQ,EAAE;IACb,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,yCAAyC,CAAC,kBAAkB,CAAC;SACjE,QAAQ,EAAE;IACb,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,yCAAyC,CAAC,eAAe,CAAC;SAC9D,QAAQ,EAAE;IACb,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,yCAAyC,CAAC,kBAAkB,CAAC;SACjE,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,0BAA0B,GAC9B,yCAAyC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAExD,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACtD,MAAM,qCAAqC,GAAG,GAAG,CAAC;AAClD,MAAM,2CAA2C,GAAG,KAAK,CAAC;AAC1D,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CACzD,2BAA2B,CAC5B,CAAC;AACF,MAAM,4BAA4B,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,QAAQ,EAAE,oBAAoB;IAC9B,IAAI,EAAE,oBAAoB;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AACZ,MAAM,6BAA6B,GAAG,4BAA4B,CAAC,MAAM,CAAC;IACxE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,OAAO,CAAC,iCAAiC,CAAC,mBAAmB,CAAC;CAClE,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,sBAAsB,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AACZ,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACxB,OAAO,EAAE,4BAA4B;IACrC,SAAS,EAAE,6BAA6B;IACxC,eAAe,EAAE,CAAC;SACf,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,oCAAoC,CAAC,eAAe,CAAC;SACzD,QAAQ,EAAE;IACb,kBAAkB,EAAE,CAAC;SAClB,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,GAAG,CAAC,oCAAoC,CAAC,kBAAkB,CAAC;SAC5D,QAAQ,EAAE;IACb,cAAc,EAAE,CAAC;SACd,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;SAC1B,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AACZ,MAAM,cAAc,GAAG,CAAC;KACrB,KAAK,CAAC,CAAC,qBAAqB,EAAE,sBAAsB,CAAC,CAAC;KACtD,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAoB/B;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,IAAI,EAAE,UAAU;IAChB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,0EAA0E;IAC1E,OAAO,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IAC/C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/D,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/D,MAAM,EAAE,0BAA0B;IAClC,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,SAAS,CAAC,qBAAqB,CAAC;IAC9D,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAClC,CAAC;KACD,MAAM,EAAE;KACR,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrB,GAAG,KAAK;IACR,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IACrC,MAAM,EAAE,kCAAkC,CACxC,KAAK,CAAC,OAAO,EACb,gCAAgC,CAAC,KAAK,CAAC,MAAM,CAAC,CAC/C;IACD,QAAQ,EAAE,oCAAoC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC;CAC9E,CAAC,CAAC,CAAC;AAON,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,MAAM;IACN,QAAQ;IACR,cAAc;CACN,CAAC;AAIX,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;AAEzE,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC,MAAM,4BAA4B,GAChC,yCAAyC,CAAC,SAAS,CAAC;AACtD,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAE1C,MAAM,iBAAiB,GAAG,CAAC;KACxB,KAAK,CAAC,oBAAoB,CAAC;KAC3B,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,4BAA4B,CAAC,CAAC;AAErC,MAAM,qBAAqB,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,UAAU,EAAE;IACrD,OAAO,EAAE,sDAAsD;IAC/D,IAAI,EAAE,CAAC,UAAU,CAAC;CACnB,CAAC,CAAC;AAEL,MAAM,cAAc,GAAG,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE;IAChD,CAAC;SACE,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,KAAK,EAAE,iBAAiB;QACxB,IAAI,EAAE,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC;KACjD,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACvB,KAAK,EAAE,iBAAiB;KACzB,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QAC3B,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE,CAAC;aACN,KAAK,CAAC,qBAAqB,CAAC;aAC5B,GAAG,CAAC,CAAC,CAAC;aACN,GAAG,CAAC,6BAA6B,CAAC;KACtC,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QACxB,KAAK,EAAE,iBAAiB;KACzB,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACvB,KAAK,EAAE,iBAAiB;KACzB,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,mBAAmB,CAAC;IACvD,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC;CACpE,CAAC;KACD,MAAM,EAAE,CAAC;AAMZ,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,kBAAkB,CAC1B,kCAAkC,MAAM,CAAC,KAAK,CAAC,MAAM;aAClD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;aAC7B,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,iCAAiC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACpE,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACvD,OAAO;QACL,GAAG,MAAM,CAAC,IAAI;QACd,aAAa,EAAE,YAAY;KAC5B,CAAC;AACJ,CAAC;AAED,SAAS,iCAAiC,CAAC,WAA8B;IACvE,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QAClD,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,SAAS,IAAI,CAAC,CAAC;YACf,IAAI,SAAS,GAAG,qCAAqC,EAAE,CAAC;gBACtD,MAAM,IAAI,kBAAkB,CAC1B,gCAAgC,KAAK,gBAAgB,qCAAqC,aAAa,CACxG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,cAAc,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,cAAc,GAAG,2CAA2C,EAAE,CAAC;QACjE,MAAM,IAAI,kBAAkB,CAC1B,8CAA8C,2CAA2C,6BAA6B,CACvH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,SAA0C,EAAE;IAE5C,MAAM,kBAAkB,GACtB,MAAM,CAAC,oBAAoB;QAC3B,sCAAsC,CAAC,oBAAoB,CAAC;IAE9D,MAAM,UAAU,GAAG;QACjB,oBAAoB,EAAE,kBAAkB;QACxC,uBAAuB,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,kBAAkB,CAAC;QAC7D,SAAS,EACP,MAAM,CAAC,SAAS,IAAI,sCAAsC,CAAC,SAAS;QACtE,cAAc,EACZ,MAAM,CAAC,cAAc;YACrB,sCAAsC,CAAC,cAAc;QACvD,kBAAkB,EAChB,MAAM,CAAC,kBAAkB;YACzB,sCAAsC,CAAC,kBAAkB;QAC3D,eAAe,EACb,MAAM,CAAC,eAAe;YACtB,sCAAsC,CAAC,eAAe;QACxD,kBAAkB,EAChB,MAAM,CAAC,kBAAkB;YACzB,sCAAsC,CAAC,kBAAkB;KAC5D,CAAC;IAEF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,IAAI,GAAG,KAAK,yBAAyB,EAAE,CAAC;YACtC,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GACb,yCAAyC,CACvC,GAA4C,CAC7C,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;YAChE,MAAM,IAAI,kBAAkB,CAC1B,0BAA0B,GAAG,kCAAkC,SAAS,EAAE,CAC3E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,uCAAuC,CAAC,IAIvD;IACC,MAAM,aAAa,GACjB,IAAI,CAAC,OAAO,IAAI,IAAI;QAClB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,uCAAuC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAEnE,6EAA6E;IAC7E,8EAA8E;IAC9E,4EAA4E;IAC5E,0EAA0E;IAC1E,8BAA8B;IAC9B,OAAO;QACL,GAAG,aAAa;QAChB,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,OAAgD,EAChD,SAA0C,EAAE;IAE5C,MAAM,aAAa,GACjB,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,uCAAuC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAEjF,OAAO,mCAAmC,CAAC;QACzC,GAAG,aAAa;QAChB,GAAG,MAAM;KACV,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oCAAoC,CAC3C,OAAgD,EAChD,QAAwC;IAExC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,eAAe,GAInB,OAAO,IAAI,IAAI;QACb,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,uCAAuC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;IAEhE,OAAO;QACL,GAAG,QAAQ;QACX,eAAe,EACb,QAAQ,CAAC,eAAe;YACxB,eAAe,CAAC,eAAe;YAC/B,iCAAiC,CAAC,eAAe;QACnD,kBAAkB,EAChB,QAAQ,CAAC,kBAAkB;YAC3B,eAAe,CAAC,kBAAkB;YAClC,iCAAiC,CAAC,kBAAkB;QACtD,cAAc,EACZ,QAAQ,CAAC,cAAc;YACvB,iCAAiC,CAAC,cAAc;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CACvC,MAAkD;IAElD,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,oBAAoB,IAAI,IAAI;YACrC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAC1D,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI;YAC/B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,kBAAkB,IAAI,IAAI;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACtD,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,IAAI;YAChC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,kBAAkB,IAAI,IAAI;YACnC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,CAAC;KACvD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,eAAe,CAAC,yBAAyB,EAAE;QAChD,MAAM,EAAE,aAAa;QACrB,YAAY,EAAE,MAAM;KACrB,CAA4B,CAAC;AAChC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAyB;IACtD,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC"}

package/dist/context-builder/secrets.d.ts

@@ -0,0 +1,41 @@
+export type SecretFindingKind = "path" | "content";
+export type SecretFinding = {
+    kind: SecretFindingKind;
+    confidence: "high";
+    provenance: string;
+    line?: number;
+};
+export type SecretContentSanitization = {
+    status: "unchanged";
+    content: string;
+    findings: readonly SecretFinding[];
+} | {
+    status: "redacted";
+    content: string;
+    findings: readonly SecretFinding[];
+} | {
+    status: "blocked";
+    content: "";
+    findings: readonly SecretFinding[];
+};
+export declare function scanSecretPath(rootRelativePath: string): SecretFinding[];
+export declare function scanHighConfidenceSecretContent(text: string): SecretFinding[];
+export declare function isBlockingSecretFinding(finding: SecretFinding): boolean;
+export declare function redactHighConfidenceAssignmentSecrets(text: string): string;
+/**
+ * Sanitizes one bounded text body. The residual callback is deliberately a
+ * separate lexical detector and runs for every opt-out sanitization, including
+ * content the primary assignment grammar did not classify.
+ */
+export declare function sanitizeHighConfidenceSecretContent(text: string, residualDetector?: (value: string) => boolean): SecretContentSanitization;
+/**
+ * Independent fail-closed backstop for every opt-out content body. This does
+ * not call the assignment iterator: it recognizes sensitive key contexts and
+ * YAML block continuations with a separate, intentionally conservative lexer.
+ */
+export declare function hasConservativeResidualSecret(text: string): boolean;
+export declare function hasDisallowedSecretMaterial(text: string, allowSecrets: boolean): boolean;
+export declare function assertNoHighConfidenceSecretsInTask(task: string): void;
+export declare function assertTaskSecretsGated(task: string, allowSecrets: boolean): void;
+export declare function resolveAllowSecrets(explicit: boolean | undefined): boolean;
+export declare function hasHighConfidenceSecret(text: string): boolean;