crewly 1.8.8 → 1.8.9

package/dist/backend/backend/src/services/agent/crewly-agent/model-manager.js

@@ -1,310 +0,0 @@
-/**
- * Crewly Agent Model Manager
- *
- * Multi-provider model factory that creates AI SDK model instances
- * from configuration. Supports Anthropic, OpenAI, Google, DeepSeek, and
- * Ollama providers.
- *
- * API keys for cloud providers are resolved through the settings service
- * (skill → runtime → global → env var) and injected into process.env so the
- * provider SDKs can pick them up:
- * - ANTHROPIC_API_KEY
- * - OPENAI_API_KEY
- * - GOOGLE_GENERATIVE_AI_API_KEY
- * - DEEPSEEK_API_KEY (DeepSeek; served via OpenAI-compatible API)
- *
- * Ollama runs locally and does not require an API key.
- * Configure the Ollama base URL via OLLAMA_BASE_URL (default: http://localhost:11434).
- *
- * @module services/agent/crewly-agent/model-manager
- */
-import { CREWLY_AGENT_DEFAULTS } from './types.js';
-import { getSettingsService } from '../../settings/settings.service.js';
-import { teeAndParse } from './deepseek-sse-transform.js';
-/**
- * Base URL for DeepSeek's OpenAI-compatible chat completions endpoint.
- * DeepSeek implements /chat/completions only — not /responses — so we
- * must route via the `.chat(modelId)` factory of @ai-sdk/openai's
- * createOpenAI() return value. Extracted per CLAUDE.md no-hardcoded-values rule.
- */
-const DEEPSEEK_BASE_URL = 'https://api.deepseek.com/v1';
-/**
- * Factory for creating AI SDK language model instances from configuration.
- *
- * Uses dynamic imports to avoid loading provider SDKs that aren't needed,
- * keeping the startup cost minimal when only one provider is used.
- *
- * @example
- * ```typescript
- * const manager = new ModelManager();
- * const model = await manager.getModel({ provider: 'anthropic', modelId: 'claude-sonnet-4-20250514' });
- * ```
- */
-export class ModelManager {
-    /** Cached provider module references to avoid re-importing */
-    providerCache = new Map();
-    /**
-     * Per-instance buffer of parsed DeepSeek-R1 reasoning_content from in-flight
-     * and recently-completed HTTP calls. Each `streamText` call to a DeepSeek
-     * model triggers one or more fetch calls (one per agentic step); each fetch
-     * appends its parsed reasoning to this buffer. Consumer (agent-runner) reads
-     * via `consumeDeepseekReasoning()` after `await streamResult` and the buffer
-     * resets to `''` on read.
-     *
-     * **Concurrency:** AgentRunner uses one ModelManager per session and calls
-     * streamText serially per session (the rate limiter enforces this).
-     * Cross-session concurrency is not a concern because each AgentRunner gets
-     * its own ModelManager via `new ModelManager()` in the constructor.
-     */
-    deepseekReasoningBuffer = '';
-    /** Tracks in-flight parsed-SSE handles so we can wait for drain on consume. */
-    deepseekParsedHandles = [];
-    /**
-     * Get an AI SDK language model instance for the given configuration.
-     *
-     * Resolves API keys from settings (with override chain) and injects them
-     * into the environment before creating the model, so provider SDKs can find them.
-     *
-     * @param config - Model configuration specifying provider and model ID
-     * @returns AI SDK LanguageModel instance ready for use with generateText
-     * @throws Error if the provider is unknown or the SDK is not installed
-     */
-    async getModel(config = CREWLY_AGENT_DEFAULTS.DEFAULT_MODEL) {
-        // Ensure the provider's API key is in the environment from settings
-        await this.ensureApiKeyInEnv(config.provider);
-        const providerFn = await this.getProviderFunction(config.provider);
-        return providerFn(config.modelId);
-    }
-    /**
-     * Get provider function, using cache for repeated calls.
-     *
-     * @param provider - Provider name
-     * @returns Function that creates a model from a model ID string
-     */
-    async getProviderFunction(provider) {
-        const cached = this.providerCache.get(provider);
-        if (cached)
-            return cached;
-        let providerFn;
-        try {
-            switch (provider) {
-                case 'anthropic': {
-                    const { anthropic } = await import('@ai-sdk/anthropic');
-                    providerFn = (modelId) => anthropic(modelId);
-                    break;
-                }
-                case 'openai': {
-                    const { openai } = await import('@ai-sdk/openai');
-                    providerFn = (modelId) => openai(modelId);
-                    break;
-                }
-                case 'google': {
-                    const { google } = await import('@ai-sdk/google');
-                    providerFn = (modelId) => google(modelId);
-                    break;
-                }
-                case 'ollama': {
-                    const { createOllama } = await import('ollama-ai-provider');
-                    const baseURL = process.env.OLLAMA_BASE_URL || CREWLY_AGENT_DEFAULTS.OLLAMA_BASE_URL;
-                    const ollamaProvider = createOllama({ baseURL });
-                    // ollama-ai-provider exports LanguageModelV1 which is compatible but
-                    // doesn't extend the newer LanguageModel union — safe to cast.
-                    providerFn = (modelId) => ollamaProvider(modelId);
-                    break;
-                }
-                case 'deepseek': {
-                    // DeepSeek API is OpenAI-compatible — reuse the OpenAI SDK with a custom baseURL.
-                    // IMPORTANT: must call deepseekProvider.chat(modelId), NOT deepseekProvider(modelId).
-                    // The bare function-call form on @ai-sdk/openai >=3.x routes to /responses, which
-                    // DeepSeek does not implement — it only exposes /chat/completions. The .chat factory
-                    // forces the chat-completions path. See PR #400 review for full trace.
-                    //
-                    // **I2 — reasoning_content extraction:**
-                    // Pass a custom `fetch` that tees the SSE response body. One branch flows
-                    // through to AI SDK unmodified (zero impact on existing behavior); the other
-                    // branch is parsed for `delta.reasoning_content` text and accumulated into
-                    // `this.deepseekReasoningBuffer`, which agent-runner consumes after
-                    // streamResult drains. See deepseek-sse-transform.ts for the parser.
-                    const { createOpenAI } = await import('@ai-sdk/openai');
-                    const customFetch = this.makeDeepseekFetch();
-                    const deepseekProvider = createOpenAI({
-                        baseURL: DEEPSEEK_BASE_URL,
-                        apiKey: process.env.DEEPSEEK_API_KEY,
-                        fetch: customFetch,
-                    });
-                    providerFn = (modelId) => deepseekProvider.chat(modelId);
-                    break;
-                }
-                default:
-                    throw new Error(`Unknown model provider: ${provider}`);
-            }
-        }
-        catch (error) {
-            if (error instanceof Error && error.message.startsWith('Unknown model provider:')) {
-                throw error;
-            }
-            throw new Error(`Failed to load provider SDK for '${provider}'. Is the package installed? ` +
-                `Original error: ${error instanceof Error ? error.message : String(error)}`);
-        }
-        this.providerCache.set(provider, providerFn);
-        return providerFn;
-    }
-    /**
-     * Check which providers have API keys configured (settings + env vars).
-     *
-     * @returns Object indicating which providers are available
-     */
-    async getAvailableProviders() {
-        const settingsService = getSettingsService();
-        const context = { runtime: 'crewly-agent' };
-        const [geminiKey, anthropicKey, openaiKey, deepseekKey] = await Promise.all([
-            settingsService.getApiKey('gemini', context),
-            settingsService.getApiKey('anthropic', context),
-            settingsService.getApiKey('openai', context),
-            settingsService.getApiKey('deepseek', context),
-        ]);
-        return {
-            anthropic: !!anthropicKey,
-            openai: !!openaiKey,
-            google: !!geminiKey,
-            ollama: true, // Ollama runs locally, always "available" if installed
-            deepseek: !!deepseekKey,
-        };
-    }
-    /**
-     * Map model provider name to API key provider name.
-     * Only applicable for cloud providers wired through the settings service
-     * (anthropic, openai, google, deepseek). Ollama runs locally and is
-     * excluded.
-     *
-     * @param provider - Cloud model provider
-     * @returns Corresponding ApiKeyProvider name
-     */
-    static providerToApiKeyProvider(provider) {
-        return provider === 'google' ? 'gemini' : provider;
-    }
-    /**
-     * Ensure the API key for a provider is available in process.env
-     * by resolving it from settings if not already present.
-     *
-     * No-op for 'ollama' (runs locally, no key required). All other providers —
-     * including 'deepseek' — flow through the settings service so users can
-     * configure them from the UI without touching env vars.
-     *
-     * @param provider - The model provider
-     */
-    async ensureApiKeyInEnv(provider) {
-        if (provider === 'ollama')
-            return; // Ollama is local, no API key needed
-        const apiKeyProvider = ModelManager.providerToApiKeyProvider(provider);
-        const settingsService = getSettingsService();
-        const key = await settingsService.getApiKey(apiKeyProvider, { runtime: 'crewly-agent' });
-        if (!key)
-            return;
-        // Set env vars so the provider SDKs can find them.
-        // Always override — settings keys take priority over stale env vars.
-        switch (provider) {
-            case 'anthropic':
-                process.env.ANTHROPIC_API_KEY = key;
-                break;
-            case 'openai':
-                process.env.OPENAI_API_KEY = key;
-                break;
-            case 'google':
-                process.env.GOOGLE_GENERATIVE_AI_API_KEY = key;
-                break;
-            case 'deepseek':
-                process.env.DEEPSEEK_API_KEY = key;
-                break;
-        }
-    }
-    /**
-     * Clear the provider cache (useful for testing or reconfiguration).
-     * Also clears any buffered DeepSeek reasoning so a fresh test/run starts clean.
-     */
-    clearCache() {
-        this.providerCache.clear();
-        this.deepseekReasoningBuffer = '';
-        this.deepseekParsedHandles = [];
-    }
-    /**
-     * Build the custom fetch wrapper for the DeepSeek provider.
-     *
-     * Returns a function with the same signature as `globalThis.fetch` that:
-     * 1. Calls native fetch with the supplied input/init.
-     * 2. If the response is a streaming SSE body, tees it and parses one branch
-     *    for `delta.reasoning_content`, accumulating into `this.deepseekReasoningBuffer`.
-     * 3. Returns a new Response wrapping the un-tampered passthrough branch as
-     *    its body, so AI SDK consumes exactly the bytes DeepSeek sent.
-     *
-     * If the response is not an SSE stream (e.g. error JSON, no body), it is
-     * returned unchanged.
-     *
-     * **Why a method, not a free function:** the wrapper closes over `this` to
-     * append to the per-instance reasoning buffer. Each ModelManager instance
-     * has its own buffer (one per AgentRunner per session).
-     */
-    makeDeepseekFetch() {
-        return async (input, init) => {
-            // Cast through `any` because @ai-sdk/openai's fetch type is the standard
-            // global fetch shape; we re-export native fetch behavior identically.
-            const response = await globalThis.fetch(input, init);
-            // Only intercept successful streaming responses. Non-stream errors
-            // (4xx/5xx with JSON body) and empty bodies pass through untouched.
-            if (!response.ok || !response.body)
-                return response;
-            const contentType = response.headers.get('content-type') ?? '';
-            if (!contentType.includes('text/event-stream'))
-                return response;
-            const parsed = teeAndParse(response.body);
-            this.deepseekParsedHandles.push(parsed);
-            // Wrap into a new Response with the passthrough branch as body.
-            // Headers, status, and statusText are copied so AI SDK sees an identical
-            // response shape.
-            return new Response(parsed.passthroughBody, {
-                status: response.status,
-                statusText: response.statusText,
-                headers: response.headers,
-            });
-        };
-    }
-    /**
-     * Drain any in-flight DeepSeek SSE parser branches and return the accumulated
-     * `reasoning_content` string. Resets the buffer to `''` on each call (consume
-     * semantics).
-     *
-     * **Caller contract:** call AFTER `await streamResult` resolves in agent-runner.
-     * The AI SDK consumer branch must have been fully drained for the parser branch
-     * (which lags slightly due to tee buffering) to have caught up.
-     *
-     * **Multi-step accumulation:** if a single `streamText` call made multiple HTTP
-     * calls (one per agentic step), reasoning from all steps is concatenated in
-     * call order — not separated by step boundary. This matches the user-facing
-     * mental model of "what was the model's full chain of thought for this turn."
-     *
-     * **Returns `null` if no reasoning was captured.** Empty string means a fetch
-     * happened but produced no reasoning content (e.g. non-R1 DeepSeek model).
-     */
-    async consumeDeepseekReasoning() {
-        const handles = this.deepseekParsedHandles;
-        this.deepseekParsedHandles = [];
-        if (handles.length === 0) {
-            const buffered = this.deepseekReasoningBuffer;
-            this.deepseekReasoningBuffer = '';
-            return buffered || null;
-        }
-        // Wait for all parser branches to finish draining (they should already be
-        // done if AI SDK consumer drained, but allow up to one event-loop tick).
-        for (const h of handles) {
-            if (!h.isDrained()) {
-                // Yield once so the parser background reader can flush.
-                await new Promise((r) => setImmediate(r));
-            }
-            this.deepseekReasoningBuffer += h.getReasoning();
-        }
-        const out = this.deepseekReasoningBuffer;
-        this.deepseekReasoningBuffer = '';
-        return out || null;
-    }
-}
-//# sourceMappingURL=model-manager.js.map

package/dist/backend/backend/src/services/agent/crewly-agent/model-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"model-manager.js","sourceRoot":"","sources":["../../../../../../../backend/src/services/agent/crewly-agent/model-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAwC,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAExE,OAAO,EAAE,WAAW,EAA0B,MAAM,6BAA6B,CAAC;AAElF;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;AAExD;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,YAAY;IACvB,8DAA8D;IACtD,aAAa,GAAG,IAAI,GAAG,EAAqD,CAAC;IAErF;;;;;;;;;;;;OAYG;IACK,uBAAuB,GAAG,EAAE,CAAC;IAErC,+EAA+E;IACvE,qBAAqB,GAAwB,EAAE,CAAC;IAExD;;;;;;;;;OASG;IACH,KAAK,CAAC,QAAQ,CAAC,SAAsB,qBAAqB,CAAC,aAAa;QACtE,oEAAoE;QACpE,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAE9C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnE,OAAO,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,mBAAmB,CAAC,QAAuB;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,IAAI,UAA8C,CAAC;QAEnD,IAAI,CAAC;YACH,QAAQ,QAAQ,EAAE,CAAC;gBACjB,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;oBACxD,UAAU,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;oBACrD,MAAM;gBACR,CAAC;gBACD,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBAClD,UAAU,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBAClD,MAAM;gBACR,CAAC;gBACD,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBAClD,UAAU,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBAClD,MAAM;gBACR,CAAC;gBACD,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;oBAC5D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,qBAAqB,CAAC,eAAe,CAAC;oBACrF,MAAM,cAAc,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;oBACjD,qEAAqE;oBACrE,+DAA+D;oBAC/D,UAAU,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAA6B,CAAC;oBACtF,MAAM;gBACR,CAAC;gBACD,KAAK,UAAU,CAAC,CAAC,CAAC;oBAChB,kFAAkF;oBAClF,sFAAsF;oBACtF,kFAAkF;oBAClF,qFAAqF;oBACrF,uEAAuE;oBACvE,EAAE;oBACF,yCAAyC;oBACzC,0EAA0E;oBAC1E,6EAA6E;oBAC7E,2EAA2E;oBAC3E,oEAAoE;oBACpE,qEAAqE;oBACrE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;oBACxD,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBAC7C,MAAM,gBAAgB,GAAG,YAAY,CAAC;wBACpC,OAAO,EAAE,iBAAiB;wBAC1B,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB;wBACpC,KAAK,EAAE,WAAiD;qBACzD,CAAC,CAAC;oBACH,UAAU,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACjE,MAAM;gBACR,CAAC;gBACD;oBACE,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC;gBAClF,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,KAAK,CACb,oCAAoC,QAAQ,+BAA+B;gBAC3E,mBAAmB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5E,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC7C,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,qBAAqB;QACzB,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;QAE5C,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1E,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC5C,eAAe,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC;YAC/C,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC5C,eAAe,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC;SAC/C,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,CAAC,CAAC,YAAY;YACzB,MAAM,EAAE,CAAC,CAAC,SAAS;YACnB,MAAM,EAAE,CAAC,CAAC,SAAS;YACnB,MAAM,EAAE,IAAI,EAAE,uDAAuD;YACrE,QAAQ,EAAE,CAAC,CAAC,WAAW;SACxB,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,MAAM,CAAC,wBAAwB,CAAC,QAA0C;QAChF,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IACrD,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,iBAAiB,CAAC,QAAuB;QACrD,IAAI,QAAQ,KAAK,QAAQ;YAAE,OAAO,CAAC,qCAAqC;QACxE,MAAM,cAAc,GAAG,YAAY,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QACvE,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QAEzF,IAAI,CAAC,GAAG;YAAE,OAAO;QAEjB,mDAAmD;QACnD,qEAAqE;QACrE,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,WAAW;gBACd,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,GAAG,CAAC;gBACpC,MAAM;YACR,KAAK,QAAQ;gBACX,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC;gBACjC,MAAM;YACR,KAAK,QAAQ;gBACX,OAAO,CAAC,GAAG,CAAC,4BAA4B,GAAG,GAAG,CAAC;gBAC/C,MAAM;YACR,KAAK,UAAU;gBACb,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,GAAG,CAAC;gBACnC,MAAM;QACV,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,uBAAuB,GAAG,EAAE,CAAC;QAClC,IAAI,CAAC,qBAAqB,GAAG,EAAE,CAAC;IAClC,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACK,iBAAiB;QACvB,OAAO,KAAK,EAAE,KAAc,EAAE,IAAc,EAAqB,EAAE;YACjE,yEAAyE;YACzE,sEAAsE;YACtE,MAAM,QAAQ,GAAa,MAAO,UAAU,CAAC,KAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAExE,mEAAmE;YACnE,oEAAoE;YACpE,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;gBAAE,OAAO,QAAQ,CAAC;YACpD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAC/D,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,mBAAmB,CAAC;gBAAE,OAAO,QAAQ,CAAC;YAEhE,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAExC,gEAAgE;YAChE,yEAAyE;YACzE,kBAAkB;YAClB,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE;gBAC1C,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,wBAAwB;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC;QAC3C,IAAI,CAAC,qBAAqB,GAAG,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC;YAC9C,IAAI,CAAC,uBAAuB,GAAG,EAAE,CAAC;YAClC,OAAO,QAAQ,IAAI,IAAI,CAAC;QAC1B,CAAC;QACD,0EAA0E;QAC1E,yEAAyE;QACzE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;gBACnB,wDAAwD;gBACxD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,CAAC;YACD,IAAI,CAAC,uBAAuB,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;QACnD,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,uBAAuB,CAAC;QACzC,IAAI,CAAC,uBAAuB,GAAG,EAAE,CAAC;QAClC,OAAO,GAAG,IAAI,IAAI,CAAC;IACrB,CAAC;CACF"}

package/dist/backend/backend/src/services/agent/crewly-agent/output-filter.service.d.ts

@@ -1,91 +0,0 @@
-/**
- * Output Filter Service — API Key Redaction
- *
- * Scans all agent text output for API key patterns and replaces them
- * with [REDACTED] before the output reaches users or logs.
- *
- * Detects patterns from major providers (OpenAI, Anthropic, Google, AWS)
- * as well as generic key/token/secret assignments.
- *
- * @module services/agent/crewly-agent/output-filter.service
- *
- * @example
- * ```typescript
- * const filter = new OutputFilterService();
- * const safe = filter.redact('My key is sk-abc123xyz');
- * // => 'My key is [REDACTED]'
- * ```
- */
-/**
- * A single API key detection pattern with a label for audit logging.
- */
-export interface KeyPattern {
-    /** Regex to match the key in text */
-    pattern: RegExp;
-    /** Human-readable label for audit/logging */
-    label: string;
-}
-/**
- * Result of scanning text for API keys.
- */
-export interface ScanResult {
-    /** Whether any keys were detected */
-    detected: boolean;
-    /** Number of keys found */
-    count: number;
-    /** Labels of the matched patterns */
-    matchedPatterns: string[];
-    /** Redacted text with keys replaced */
-    redactedText: string;
-}
-/**
- * API key patterns for major providers and generic secrets.
- *
- * Each pattern uses word boundaries or lookbehind/lookahead to minimize
- * false positives while catching real key formats.
- */
-export declare const API_KEY_PATTERNS: readonly KeyPattern[];
-/** Replacement text for redacted keys */
-export declare const REDACTION_PLACEHOLDER = "[REDACTED]";
-/**
- * Service that scans and redacts API keys from agent output text.
- */
-export declare class OutputFilterService {
-    private readonly patterns;
-    /**
-     * Creates a new OutputFilterService.
-     * @param customPatterns - Optional additional patterns to detect (appended to defaults)
-     */
-    constructor(customPatterns?: KeyPattern[]);
-    /**
-     * Scans text for API keys and returns detailed results.
-     *
-     * @param text - Text to scan for API keys
-     * @returns Scan result with detection info and redacted text
-     */
-    scan(text: string): ScanResult;
-    /**
-     * Redacts all API keys in the given text.
-     * Convenience method that returns only the redacted string.
-     *
-     * @param text - Text to redact
-     * @returns Text with all detected API keys replaced with [REDACTED]
-     */
-    redact(text: string): string;
-    /**
-     * Checks if text contains any API keys without modifying it.
-     *
-     * @param text - Text to check
-     * @returns True if any API key patterns are detected
-     */
-    containsKeys(text: string): boolean;
-    /**
-     * Redacts API keys from a structured object (recursively scans string values).
-     * Useful for sanitizing tool call arguments and results before logging.
-     *
-     * @param obj - Object to scan and redact
-     * @returns Deep copy with all string values redacted
-     */
-    redactObject(obj: unknown): unknown;
-}
-//# sourceMappingURL=output-filter.service.d.ts.map

package/dist/backend/backend/src/services/agent/crewly-agent/output-filter.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"output-filter.service.d.ts","sourceRoot":"","sources":["../../../../../../../backend/src/services/agent/crewly-agent/output-filter.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,qCAAqC;IACrC,QAAQ,EAAE,OAAO,CAAC;IAClB,2BAA2B;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,uCAAuC;IACvC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,EAAE,SAAS,UAAU,EAqBxC,CAAC;AAEX,yCAAyC;AACzC,eAAO,MAAM,qBAAqB,eAAe,CAAC;AAElD;;GAEG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IAEjD;;;OAGG;gBACS,cAAc,CAAC,EAAE,UAAU,EAAE;IAMzC;;;;;OAKG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU;IA4B9B;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI5B;;;;;OAKG;IACH,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IASnC;;;;;;OAMG;IACH,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO;CAgBpC"}

package/dist/backend/backend/src/services/agent/crewly-agent/output-filter.service.js

@@ -1,143 +0,0 @@
-/**
- * Output Filter Service — API Key Redaction
- *
- * Scans all agent text output for API key patterns and replaces them
- * with [REDACTED] before the output reaches users or logs.
- *
- * Detects patterns from major providers (OpenAI, Anthropic, Google, AWS)
- * as well as generic key/token/secret assignments.
- *
- * @module services/agent/crewly-agent/output-filter.service
- *
- * @example
- * ```typescript
- * const filter = new OutputFilterService();
- * const safe = filter.redact('My key is sk-abc123xyz');
- * // => 'My key is [REDACTED]'
- * ```
- */
-/**
- * API key patterns for major providers and generic secrets.
- *
- * Each pattern uses word boundaries or lookbehind/lookahead to minimize
- * false positives while catching real key formats.
- */
-export const API_KEY_PATTERNS = [
-    // OpenAI: sk-<org>-<rest> or sk-<48+ chars>
-    { pattern: /\bsk-[A-Za-z0-9_-]{20,}/g, label: 'OpenAI API Key' },
-    // Anthropic: sk-ant-api03-<rest>
-    { pattern: /\bsk-ant-[A-Za-z0-9_-]{20,}/g, label: 'Anthropic API Key' },
-    // Google AI: AIza<rest>
-    { pattern: /\bAIza[A-Za-z0-9_-]{30,}/g, label: 'Google API Key' },
-    // AWS Access Key: AKIA<16 alphanumeric>
-    { pattern: /\bAKIA[A-Z0-9]{16}\b/g, label: 'AWS Access Key' },
-    // AWS Secret Key (often follows access key)
-    { pattern: /(?<=aws_secret_access_key\s*[=:]\s*)[A-Za-z0-9/+=]{30,}/g, label: 'AWS Secret Key' },
-    // GitHub tokens: ghp_, gho_, ghu_, ghs_, ghr_
-    { pattern: /\bgh[pousr]_[A-Za-z0-9_]{30,}/g, label: 'GitHub Token' },
-    // Stripe: sk_live_ or sk_test_
-    { pattern: /\bsk_(live|test)_[A-Za-z0-9]{20,}/g, label: 'Stripe API Key' },
-    // Supabase anon/service keys (JWT-like, start with eyJ)
-    { pattern: /\beyJ[A-Za-z0-9_-]{50,}\.[A-Za-z0-9_-]{50,}\.[A-Za-z0-9_-]{20,}/g, label: 'JWT Token' },
-    // Generic key=value patterns (key, token, secret, password, api_key, apikey)
-    { pattern: /(?<=(?:api[_-]?key|api[_-]?secret|api[_-]?token|secret[_-]?key|access[_-]?token|auth[_-]?token|password|secret)\s*[=:]\s*["']?)[A-Za-z0-9_/+=.-]{16,}/gi, label: 'Generic Secret' },
-    // Environment variable assignments with sensitive names
-    { pattern: /(?<=(?:ANTHROPIC_API_KEY|OPENAI_API_KEY|GOOGLE_API_KEY|AWS_SECRET_ACCESS_KEY|STRIPE_SECRET_KEY|SUPABASE_SERVICE_ROLE_KEY|DATABASE_URL|REDIS_URL)\s*=\s*["']?)[^\s"']{8,}/g, label: 'Environment Variable Secret' },
-];
-/** Replacement text for redacted keys */
-export const REDACTION_PLACEHOLDER = '[REDACTED]';
-/**
- * Service that scans and redacts API keys from agent output text.
- */
-export class OutputFilterService {
-    patterns;
-    /**
-     * Creates a new OutputFilterService.
-     * @param customPatterns - Optional additional patterns to detect (appended to defaults)
-     */
-    constructor(customPatterns) {
-        this.patterns = customPatterns
-            ? [...API_KEY_PATTERNS, ...customPatterns]
-            : API_KEY_PATTERNS;
-    }
-    /**
-     * Scans text for API keys and returns detailed results.
-     *
-     * @param text - Text to scan for API keys
-     * @returns Scan result with detection info and redacted text
-     */
-    scan(text) {
-        if (!text) {
-            return { detected: false, count: 0, matchedPatterns: [], redactedText: text };
-        }
-        let redacted = text;
-        let totalCount = 0;
-        const matchedLabels = new Set();
-        for (const { pattern, label } of this.patterns) {
-            // Reset regex lastIndex for global patterns
-            const regex = new RegExp(pattern.source, pattern.flags);
-            const matches = redacted.match(regex);
-            if (matches) {
-                totalCount += matches.length;
-                matchedLabels.add(label);
-                redacted = redacted.replace(regex, REDACTION_PLACEHOLDER);
-            }
-        }
-        return {
-            detected: totalCount > 0,
-            count: totalCount,
-            matchedPatterns: Array.from(matchedLabels),
-            redactedText: redacted,
-        };
-    }
-    /**
-     * Redacts all API keys in the given text.
-     * Convenience method that returns only the redacted string.
-     *
-     * @param text - Text to redact
-     * @returns Text with all detected API keys replaced with [REDACTED]
-     */
-    redact(text) {
-        return this.scan(text).redactedText;
-    }
-    /**
-     * Checks if text contains any API keys without modifying it.
-     *
-     * @param text - Text to check
-     * @returns True if any API key patterns are detected
-     */
-    containsKeys(text) {
-        if (!text)
-            return false;
-        for (const { pattern } of this.patterns) {
-            const regex = new RegExp(pattern.source, pattern.flags);
-            if (regex.test(text))
-                return true;
-        }
-        return false;
-    }
-    /**
-     * Redacts API keys from a structured object (recursively scans string values).
-     * Useful for sanitizing tool call arguments and results before logging.
-     *
-     * @param obj - Object to scan and redact
-     * @returns Deep copy with all string values redacted
-     */
-    redactObject(obj) {
-        if (typeof obj === 'string') {
-            return this.redact(obj);
-        }
-        if (Array.isArray(obj)) {
-            return obj.map((item) => this.redactObject(item));
-        }
-        if (typeof obj === 'object' && obj !== null) {
-            const result = {};
-            for (const [key, value] of Object.entries(obj)) {
-                result[key] = this.redactObject(value);
-            }
-            return result;
-        }
-        return obj;
-    }
-}
-//# sourceMappingURL=output-filter.service.js.map

package/dist/backend/backend/src/services/agent/crewly-agent/output-filter.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"output-filter.service.js","sourceRoot":"","sources":["../../../../../../../backend/src/services/agent/crewly-agent/output-filter.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AA0BH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA0B;IACrD,4CAA4C;IAC5C,EAAE,OAAO,EAAE,0BAA0B,EAAE,KAAK,EAAE,gBAAgB,EAAE;IAChE,iCAAiC;IACjC,EAAE,OAAO,EAAE,8BAA8B,EAAE,KAAK,EAAE,mBAAmB,EAAE;IACvE,wBAAwB;IACxB,EAAE,OAAO,EAAE,2BAA2B,EAAE,KAAK,EAAE,gBAAgB,EAAE;IACjE,wCAAwC;IACxC,EAAE,OAAO,EAAE,uBAAuB,EAAE,KAAK,EAAE,gBAAgB,EAAE;IAC7D,4CAA4C;IAC5C,EAAE,OAAO,EAAE,0DAA0D,EAAE,KAAK,EAAE,gBAAgB,EAAE;IAChG,8CAA8C;IAC9C,EAAE,OAAO,EAAE,gCAAgC,EAAE,KAAK,EAAE,cAAc,EAAE;IACpE,+BAA+B;IAC/B,EAAE,OAAO,EAAE,oCAAoC,EAAE,KAAK,EAAE,gBAAgB,EAAE;IAC1E,wDAAwD;IACxD,EAAE,OAAO,EAAE,kEAAkE,EAAE,KAAK,EAAE,WAAW,EAAE;IACnG,6EAA6E;IAC7E,EAAE,OAAO,EAAE,yJAAyJ,EAAE,KAAK,EAAE,gBAAgB,EAAE;IAC/L,wDAAwD;IACxD,EAAE,OAAO,EAAE,2KAA2K,EAAE,KAAK,EAAE,6BAA6B,EAAE;CACtN,CAAC;AAEX,yCAAyC;AACzC,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAElD;;GAEG;AACH,MAAM,OAAO,mBAAmB;IACb,QAAQ,CAAwB;IAEjD;;;OAGG;IACH,YAAY,cAA6B;QACvC,IAAI,CAAC,QAAQ,GAAG,cAAc;YAC5B,CAAC,CAAC,CAAC,GAAG,gBAAgB,EAAE,GAAG,cAAc,CAAC;YAC1C,CAAC,CAAC,gBAAgB,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,IAAI,CAAC,IAAY;QACf,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAChF,CAAC;QAED,IAAI,QAAQ,GAAG,IAAI,CAAC;QACpB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,aAAa,GAAgB,IAAI,GAAG,EAAE,CAAC;QAE7C,KAAK,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/C,4CAA4C;YAC5C,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,OAAO,EAAE,CAAC;gBACZ,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;gBAC7B,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACzB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,UAAU,GAAG,CAAC;YACxB,KAAK,EAAE,UAAU;YACjB,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;YAC1C,YAAY,EAAE,QAAQ;SACvB,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC;IACtC,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,IAAY;QACvB,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QACpC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;OAMG;IACH,YAAY,CAAC,GAAY;QACvB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC5C,MAAM,MAAM,GAA4B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YACzC,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/backend/backend/src/services/agent/crewly-agent/prompt-guard.service.d.ts

@@ -1,103 +0,0 @@
-/**
- * Prompt Guard Service — Prompt Injection Protection
- *
- * Detects and blocks prompt injection attempts that try to extract API keys,
- * secrets, or sensitive environment variables through agent commands.
- *
- * Integrates with the tool registry to block dangerous bash commands and
- * logs blocked attempts to the audit trail.
- *
- * @module services/agent/crewly-agent/prompt-guard.service
- *
- * @example
- * ```typescript
- * const guard = new PromptGuardService();
- * const result = guard.checkCommand('echo $ANTHROPIC_API_KEY');
- * // { blocked: true, reason: 'Key extraction attempt: echo env var', pattern: '...' }
- * ```
- */
-import type { AuditEntry } from './types.js';
-/**
- * A pattern that detects key extraction attempts.
- */
-export interface GuardPattern {
-    /** Regex to match the dangerous command or prompt */
-    pattern: RegExp;
-    /** Human-readable reason for blocking */
-    reason: string;
-    /** Category for audit logging */
-    category: 'env_extraction' | 'key_dump' | 'prompt_injection' | 'file_exfiltration';
-}
-/**
- * Result of a prompt guard check.
- */
-export interface GuardCheckResult {
-    /** Whether the command/prompt was blocked */
-    blocked: boolean;
-    /** Reason for blocking (empty if not blocked) */
-    reason: string;
-    /** Category of the threat (undefined if not blocked) */
-    category?: GuardPattern['category'];
-    /** The matched pattern source (for audit logging) */
-    matchedPattern?: string;
-}
-/**
- * Patterns that detect attempts to extract API keys or secrets via bash commands.
- */
-export declare const KEY_EXTRACTION_PATTERNS: readonly GuardPattern[];
-/**
- * Prompt-level injection patterns (detected in natural language prompts, not just commands).
- */
-export declare const PROMPT_INJECTION_PATTERNS: readonly GuardPattern[];
-/**
- * Additional blocked command patterns for tool-registry.ts integration.
- * These extend the existing BLOCKED_COMMAND_PATTERNS with key extraction blocks.
- */
-export declare const KEY_EXTRACTION_BLOCKED_COMMANDS: RegExp[];
-/**
- * Service that detects and blocks prompt injection and key extraction attempts.
- */
-export declare class PromptGuardService {
-    private readonly commandPatterns;
-    private readonly promptPatterns;
-    /**
-     * Creates a new PromptGuardService.
-     *
-     * @param additionalCommandPatterns - Extra command-level patterns
-     * @param additionalPromptPatterns - Extra prompt-level patterns
-     */
-    constructor(additionalCommandPatterns?: GuardPattern[], additionalPromptPatterns?: GuardPattern[]);
-    /**
-     * Checks a bash command for key extraction attempts.
-     *
-     * @param command - Raw bash command string
-     * @returns Guard check result
-     */
-    checkCommand(command: string): GuardCheckResult;
-    /**
-     * Checks a user/agent prompt for injection attempts targeting secrets.
-     *
-     * @param prompt - The text prompt or message
-     * @returns Guard check result
-     */
-    checkPrompt(prompt: string): GuardCheckResult;
-    /**
-     * Checks both command and prompt patterns.
-     * Use this for comprehensive scanning of any agent input.
-     *
-     * @param text - Text to check (command or prompt)
-     * @returns Guard check result
-     */
-    check(text: string): GuardCheckResult;
-    /**
-     * Creates an audit entry for a blocked attempt.
-     *
-     * @param sessionName - Agent session that triggered the block
-     * @param toolName - Tool that was used (e.g. 'bash_exec')
-     * @param command - The blocked command
-     * @param guardResult - The guard check result
-     * @returns AuditEntry suitable for the audit log
-     */
-    createAuditEntry(sessionName: string, toolName: string, command: string, guardResult: GuardCheckResult): AuditEntry;
-}
-//# sourceMappingURL=prompt-guard.service.d.ts.map