langflower 0.1.0 → 0.1.1

package/vendor/tools/dist/builtins/walk-files.d.ts

@@ -1,16 +0,0 @@
-/** Always skip these directory names (ts-scan-style), even with --no-ignore. */
-export declare const WALK_EXCLUDE_DIR_NAMES: readonly ["node_modules", "dist", "build", ".git"];
-export declare const globToRegExp: (pattern: string) => RegExp;
-export type WalkFilesOptions = {
-    readonly respectGitignore?: boolean;
-    readonly signal?: AbortSignal;
-    /** Stop collecting after this many files (default unlimited). */
-    readonly maxFiles?: number;
-    /** Yield to the event loop every N directory entries (default 32). */
-    readonly yieldEvery?: number;
-};
-/**
- * Async recursive file walk. Third arg may be `respectGitignore` boolean
- * (legacy) or {@link WalkFilesOptions}.
- */
-export declare const walkFiles: (root: string, dir: string, options?: boolean | WalkFilesOptions) => Promise<readonly string[]>;

package/vendor/tools/dist/builtins/walk-files.js

@@ -1,100 +0,0 @@
-import fs from 'node:fs/promises';
-import path from 'node:path';
-import { loadGitIgnoreMatcher } from '../gitignore.js';
-/** Always skip these directory names (ts-scan-style), even with --no-ignore. */
-export const WALK_EXCLUDE_DIR_NAMES = [
-    'node_modules',
-    'dist',
-    'build',
-    '.git',
-];
-export const globToRegExp = (pattern) => {
-    const escaped = pattern
-        .replace(/\\/g, '/')
-        .replace(/[.+^${}()|[\]\\]/g, '\\$&')
-        .replace(/\*\*/g, '::DOUBLESTAR::')
-        .replace(/\*/g, '[^/]*')
-        .replace(/\?/g, '[^/]')
-        .replace(/::DOUBLESTAR::/g, '.*');
-    return new RegExp(`^${escaped}$`);
-};
-const normalizeOptions = (options) => typeof options === 'boolean' ? { respectGitignore: options } : options;
-const yieldEventLoop = () => new Promise((resolve) => {
-    setImmediate(resolve);
-});
-const throwIfAborted = (signal) => {
-    if (signal?.aborted) {
-        throw new Error('aborted');
-    }
-};
-/**
- * Async recursive file walk. Third arg may be `respectGitignore` boolean
- * (legacy) or {@link WalkFilesOptions}.
- */
-export const walkFiles = async (root, dir, options = true) => {
-    const opts = normalizeOptions(options);
-    const respectGitignore = opts.respectGitignore !== false;
-    const yieldEvery = opts.yieldEvery ?? 32;
-    const matcher = respectGitignore
-        ? await loadGitIgnoreMatcher(root)
-        : { ignores: () => false };
-    const out = [];
-    const visitedDirs = new Set();
-    let steps = 0;
-    const visit = async (absoluteDir) => {
-        throwIfAborted(opts.signal);
-        let realDir;
-        try {
-            realDir = await fs.realpath(absoluteDir);
-        }
-        catch {
-            return;
-        }
-        if (visitedDirs.has(realDir)) {
-            return;
-        }
-        visitedDirs.add(realDir);
-        let entries;
-        try {
-            entries = await fs.readdir(absoluteDir, { withFileTypes: true });
-        }
-        catch {
-            return;
-        }
-        for (const entry of entries) {
-            throwIfAborted(opts.signal);
-            steps += 1;
-            if (steps % yieldEvery === 0) {
-                await yieldEventLoop();
-                throwIfAborted(opts.signal);
-            }
-            if (entry.isDirectory() &&
-                WALK_EXCLUDE_DIR_NAMES.includes(entry.name)) {
-                continue;
-            }
-            const absolute = path.join(absoluteDir, entry.name);
-            const relative = path
-                .relative(root, absolute)
-                .split(path.sep)
-                .join('/');
-            if (matcher.ignores(relative, entry.isDirectory())) {
-                continue;
-            }
-            if (entry.isSymbolicLink()) {
-                continue;
-            }
-            if (entry.isDirectory()) {
-                await visit(absolute);
-            }
-            else if (entry.isFile()) {
-                out.push(relative);
-                if (opts.maxFiles !== undefined &&
-                    out.length >= opts.maxFiles) {
-                    return;
-                }
-            }
-        }
-    };
-    await visit(dir);
-    return out;
-};

package/vendor/tools/dist/builtins/write/tool.d.ts

@@ -1,25 +0,0 @@
-import type { HandlerContext } from '../types.js';
-export declare const writeTool: {
-    readonly id: "write";
-    readonly registration: {
-        readonly toolId: "write";
-        readonly name: "write";
-        readonly description: "Write or overwrite a file (creates parent directories). Prefer create for new-only files.";
-        readonly inputSchema: {
-            readonly type: "object";
-            readonly properties: {
-                readonly path: {
-                    readonly type: "string";
-                    readonly description: "Project-relative file path";
-                };
-                readonly content: {
-                    readonly type: "string";
-                    readonly description: "Full file contents";
-                };
-            };
-            readonly required: readonly ["path", "content"];
-            readonly additionalProperties: false;
-        };
-    };
-    readonly invoke: (ctx: HandlerContext, args: Readonly<Record<string, unknown>>) => Promise<string>;
-};

package/vendor/tools/dist/builtins/write/tool.js

@@ -1,40 +0,0 @@
-import fs from 'node:fs/promises';
-import path from 'node:path';
-import { resolveProjectPath } from '../../path-sandbox.js';
-import { asString } from '../args.js';
-import { fenceOptions } from '../fence.js';
-const invoke = async (ctx, args) => {
-    const userPath = asString(args, 'path');
-    const content = asString(args, 'content');
-    if (userPath === undefined || content === undefined) {
-        throw new Error('write requires string arguments «path» and «content».');
-    }
-    const absolute = resolveProjectPath(ctx.projectRoot, userPath, fenceOptions(ctx));
-    await fs.mkdir(path.dirname(absolute), { recursive: true });
-    await fs.writeFile(absolute, content, 'utf8');
-    return `Wrote «${userPath}» (${content.length} chars).`;
-};
-export const writeTool = {
-    id: 'write',
-    registration: {
-        toolId: 'write',
-        name: 'write',
-        description: 'Write or overwrite a file (creates parent directories). Prefer create for new-only files.',
-        inputSchema: {
-            type: 'object',
-            properties: {
-                path: {
-                    type: 'string',
-                    description: 'Project-relative file path',
-                },
-                content: {
-                    type: 'string',
-                    description: 'Full file contents',
-                },
-            },
-            required: ['path', 'content'],
-            additionalProperties: false,
-        },
-    },
-    invoke,
-};

package/vendor/tools/dist/create-crawl-context.d.ts

@@ -1,22 +0,0 @@
-/** Structural match for node-sdk `CrawlSavedPage`. */
-export type CrawlSavedPage = {
-    readonly url: string;
-    readonly html: string;
-    readonly text: string;
-    readonly title?: string;
-    readonly savedPath: string;
-};
-/** Structural match for node-sdk `CrawlContext`. */
-export type CrawlContext = {
-    readonly runId: string;
-    readonly savePage: (page: {
-        readonly url: string;
-        readonly html: string;
-        readonly text: string;
-        readonly title?: string;
-    }) => Promise<CrawlSavedPage>;
-};
-/**
- * Persist crawl pages under `<project>/.langflower/crawl/{runId}/`.
- */
-export declare const createCrawlContext: (projectDir: string, runId: string) => CrawlContext;

package/vendor/tools/dist/create-crawl-context.js

@@ -1,34 +0,0 @@
-import fs from 'node:fs/promises';
-import path from 'node:path';
-const sanitizeSegment = (value) => value.replace(/[^a-zA-Z0-9._-]+/g, '_').slice(0, 80);
-/**
- * Persist crawl pages under `<project>/.langflower/crawl/{runId}/`.
- */
-export const createCrawlContext = (projectDir, runId) => {
-    const safeRunId = sanitizeSegment(runId || 'run');
-    const rootDir = path.join(projectDir, '.langflower', 'crawl', safeRunId);
-    let sequence = 0;
-    return {
-        runId: safeRunId,
-        savePage: async (page) => {
-            await fs.mkdir(rootDir, { recursive: true });
-            sequence += 1;
-            const stem = `${String(sequence).padStart(4, '0')}-${sanitizeSegment(page.url)}`;
-            const fileName = `${stem}.json`;
-            const savedPath = path.join(rootDir, fileName);
-            const record = {
-                url: page.url,
-                html: page.html,
-                text: page.text,
-                ...(page.title !== undefined && page.title.length > 0
-                    ? { title: page.title }
-                    : {}),
-                savedPath: path
-                    .relative(projectDir, savedPath)
-                    .replace(/\\/g, '/'),
-            };
-            await fs.writeFile(savedPath, `${JSON.stringify(record, null, 2)}\n`, 'utf8');
-            return record;
-        },
-    };
-};

package/vendor/tools/dist/create-memory-context.d.ts

@@ -1,12 +0,0 @@
-export type MemoryContext = {
-    readonly runId: string;
-    readonly get: (key: string) => Promise<string | undefined>;
-    readonly set: (key: string, value: string) => Promise<void>;
-    readonly list: () => Promise<readonly string[]>;
-    readonly delete: (key: string) => Promise<boolean>;
-};
-/**
- * Run-scoped key/value store under `.langflower/runs/{runId}/memory/`.
- */
-export declare const createMemoryContext: (projectDir: string, runId: string) => MemoryContext;
-//# sourceMappingURL=create-memory-context.d.ts.map

package/vendor/tools/dist/create-memory-context.js

@@ -1,84 +0,0 @@
-import fs from 'node:fs/promises';
-import path from 'node:path';
-const sanitizeKey = (key) => {
-    const trimmed = key.trim();
-    if (trimmed.length === 0) {
-        throw new Error('Memory key is required.');
-    }
-    if (trimmed.includes('..') ||
-        trimmed.includes('/') ||
-        trimmed.includes('\\')) {
-        throw new Error(`Invalid memory key «${key}».`);
-    }
-    return trimmed.replace(/[^a-zA-Z0-9._-]+/g, '_').slice(0, 120);
-};
-const sanitizeRunId = (runId) => (runId || 'run').replace(/[^a-zA-Z0-9._-]+/g, '_').slice(0, 80);
-/**
- * Run-scoped key/value store under `.langflower/runs/{runId}/memory/`.
- */
-export const createMemoryContext = (projectDir, runId) => {
-    const safeRunId = sanitizeRunId(runId);
-    const rootDir = path.join(projectDir, '.langflower', 'runs', safeRunId, 'memory');
-    const filePath = (key) => path.join(rootDir, `${sanitizeKey(key)}.txt`);
-    return {
-        runId: safeRunId,
-        get: async (key) => {
-            try {
-                return await fs.readFile(filePath(key), 'utf8');
-            }
-            catch (error) {
-                const code = error !== null &&
-                    typeof error === 'object' &&
-                    'code' in error
-                    ? String(error.code)
-                    : '';
-                if (code === 'ENOENT') {
-                    return undefined;
-                }
-                throw error;
-            }
-        },
-        set: async (key, value) => {
-            await fs.mkdir(rootDir, { recursive: true });
-            await fs.writeFile(filePath(key), value, 'utf8');
-        },
-        list: async () => {
-            try {
-                const entries = await fs.readdir(rootDir);
-                return entries
-                    .filter((name) => name.endsWith('.txt'))
-                    .map((name) => name.slice(0, -'.txt'.length))
-                    .sort((a, b) => a.localeCompare(b));
-            }
-            catch (error) {
-                const code = error !== null &&
-                    typeof error === 'object' &&
-                    'code' in error
-                    ? String(error.code)
-                    : '';
-                if (code === 'ENOENT') {
-                    return [];
-                }
-                throw error;
-            }
-        },
-        delete: async (key) => {
-            try {
-                await fs.unlink(filePath(key));
-                return true;
-            }
-            catch (error) {
-                const code = error !== null &&
-                    typeof error === 'object' &&
-                    'code' in error
-                    ? String(error.code)
-                    : '';
-                if (code === 'ENOENT') {
-                    return false;
-                }
-                throw error;
-            }
-        },
-    };
-};
-//# sourceMappingURL=create-memory-context.js.map

package/vendor/tools/dist/create-project-files-context.d.ts

@@ -1,19 +0,0 @@
-/**
- * Permission-free project file I/O for palette graph nodes (Text Read/Write/Append).
- * Author placing the node is the allow decision — no HITL ask.
- * Absolute paths are rejected; only project-relative paths under the fence.
- */
-export type ProjectFilesContext = {
-    readonly read: (relativePath: string) => Promise<string>;
-    readonly write: (relativePath: string, content: string) => Promise<void>;
-    readonly append: (relativePath: string, content: string, delimiter: string) => Promise<void>;
-};
-export type CreateProjectFilesContextOptions = {
-    readonly projectRoot: string;
-    readonly denyPaths?: readonly string[];
-};
-/**
- * Project-root file helpers for graph nodes. Fence + deny list only —
- * no permission gate (unlike harness builtins).
- */
-export declare const createProjectFilesContext: (options: CreateProjectFilesContextOptions) => ProjectFilesContext;

package/vendor/tools/dist/create-project-files-context.js

@@ -1,75 +0,0 @@
-import fs from 'node:fs/promises';
-import path from 'node:path';
-import { formatNotFound, resolveProjectPath } from './path-sandbox.js';
-const assertProjectRelativePath = (userPath) => {
-    const trimmed = userPath.trim();
-    if (trimmed.length === 0) {
-        throw new Error('Path is required.');
-    }
-    if (path.isAbsolute(trimmed)) {
-        throw new Error(`Absolute paths are not allowed: «${userPath}». Use a path relative to the project root.`);
-    }
-    return trimmed;
-};
-const resolveRelativeUnderProject = (projectRoot, userPath, denyPaths) => {
-    const relative = assertProjectRelativePath(userPath);
-    return resolveProjectPath(projectRoot, relative, {
-        ...(denyPaths !== undefined ? { denyPaths } : {}),
-        allowedRoots: [],
-    });
-};
-/**
- * Project-root file helpers for graph nodes. Fence + deny list only —
- * no permission gate (unlike harness builtins).
- */
-export const createProjectFilesContext = (options) => {
-    const projectRoot = options.projectRoot;
-    const denyPaths = options.denyPaths;
-    const resolve = (userPath) => resolveRelativeUnderProject(projectRoot, userPath, denyPaths);
-    return {
-        read: async (relativePath) => {
-            const absolute = resolve(relativePath);
-            try {
-                return await fs.readFile(absolute, 'utf8');
-            }
-            catch (error) {
-                const code = error !== null &&
-                    typeof error === 'object' &&
-                    'code' in error
-                    ? String(error.code)
-                    : '';
-                if (code === 'ENOENT') {
-                    throw new Error(await formatNotFound(absolute, relativePath.trim()));
-                }
-                throw error;
-            }
-        },
-        write: async (relativePath, content) => {
-            const absolute = resolve(relativePath);
-            await fs.mkdir(path.dirname(absolute), { recursive: true });
-            await fs.writeFile(absolute, content, 'utf8');
-        },
-        append: async (relativePath, content, delimiter) => {
-            const absolute = resolve(relativePath);
-            let existing = '';
-            try {
-                existing = await fs.readFile(absolute, 'utf8');
-            }
-            catch (error) {
-                const code = error !== null &&
-                    typeof error === 'object' &&
-                    'code' in error
-                    ? String(error.code)
-                    : '';
-                if (code !== 'ENOENT') {
-                    throw error;
-                }
-            }
-            const next = existing.length === 0
-                ? content
-                : `${existing}${delimiter}${content}`;
-            await fs.mkdir(path.dirname(absolute), { recursive: true });
-            await fs.writeFile(absolute, next, 'utf8');
-        },
-    };
-};

package/vendor/tools/dist/create-project-harness.d.ts

@@ -1,33 +0,0 @@
-import type { Harness, ToolInvokeCall, ToolInvokeResult } from './harness-types.js';
-import { type PermissionAskRequest, type PermissionConfig, type PermissionDecision } from './permission.js';
-export type { Harness, ToolInvokeCall, ToolInvokeResult };
-export type { BuiltinToolRegistration } from './harness-types.js';
-export type { PermissionAskRequest, PermissionConfig };
-export type CreateHarnessOptions = {
-    readonly projectRoot: string;
-    readonly denyPaths?: readonly string[];
-    /**
-     * Absolute (or project-relative) directories trusted outside the project
-     * root — e.g. an Obsidian vault (`harness.allowedRoots` in jsonc).
-     */
-    readonly allowedRoots?: readonly string[];
-    /**
-     * When false (default), bash handler refuses even after permission allow.
-     * Server sets true and relies on {@link permission} for ask/deny.
-     */
-    readonly bashEnabled?: boolean;
-    /** OpenCode-style rules from `langflower.jsonc` (merged over defaults). */
-    readonly permission?: PermissionConfig;
-    /**
-     * Called when policy resolves to `ask`. Return allow/deny.
-     * Missing callback + ask → fail closed (deny).
-     */
-    readonly requestPermission?: (request: PermissionAskRequest) => Promise<PermissionDecision>;
-};
-/**
- * Project-root sandboxed harness for Langflower **builtin** agent tools.
- * Domain/custom tools expose `ToolHandle.invoke` (imported from
- * `@langflower/tools` domain configs) — not via a hidden toolId registry here.
- */
-export declare const createProjectHarness: (options: CreateHarnessOptions) => Harness;
-export { BUILTIN_TOOL_IDS, isBuiltinToolId } from './builtins/catalog.js';

package/vendor/tools/dist/create-project-harness.js

@@ -1,64 +0,0 @@
-import { BUILTIN_REGISTRATIONS, BUILTIN_TOOL_IDS, invokeBuiltin, isBuiltinToolId, } from './builtins/catalog.js';
-import { deniedToolResult, gateToolCall } from './gate-tool-call.js';
-import { DEFAULT_PERMISSION_CONFIG, permissionDetailForCall, } from './permission.js';
-/**
- * Project-root sandboxed harness for Langflower **builtin** agent tools.
- * Domain/custom tools expose `ToolHandle.invoke` (imported from
- * `@langflower/tools` domain configs) — not via a hidden toolId registry here.
- */
-export const createProjectHarness = (options) => {
-    const ctx = {
-        projectRoot: options.projectRoot,
-        denyPaths: options.denyPaths ?? [],
-        allowedRoots: options.allowedRoots ?? [],
-        bashEnabled: options.bashEnabled === true,
-    };
-    const permission = {
-        ...DEFAULT_PERMISSION_CONFIG,
-        ...(options.permission ?? {}),
-    };
-    const grants = new Set();
-    const gate = (toolId, detail) => gateToolCall({
-        toolId,
-        detail,
-        grants,
-        permission,
-        ...(options.requestPermission !== undefined
-            ? { requestPermission: options.requestPermission }
-            : {}),
-    });
-    return {
-        listBuiltinRegistrations: () => BUILTIN_REGISTRATIONS,
-        authorize: async (call) => {
-            const toolId = call.toolId.trim();
-            const detail = permissionDetailForCall(toolId, call.args);
-            return gate(toolId, detail);
-        },
-        invoke: async (call) => {
-            const toolId = call.toolId.trim();
-            if (!isBuiltinToolId(toolId)) {
-                return {
-                    ok: false,
-                    text: `Unknown builtin tool «${call.toolId}». Available: ${BUILTIN_TOOL_IDS.join(', ')}. Domain/custom tools must expose registration.handler (import from @langflower/tools), not harness toolId lookup.`,
-                };
-            }
-            const detail = permissionDetailForCall(toolId, call.args);
-            const access = await gate(toolId, detail);
-            if (access === 'deny') {
-                return deniedToolResult(toolId, detail);
-            }
-            try {
-                const invokeCtx = call.signal === undefined
-                    ? ctx
-                    : { ...ctx, signal: call.signal };
-                const text = await invokeBuiltin(toolId, invokeCtx, call.args);
-                return { ok: true, text };
-            }
-            catch (error) {
-                const text = error instanceof Error ? error.message : String(error);
-                return { ok: false, text };
-            }
-        },
-    };
-};
-export { BUILTIN_TOOL_IDS, isBuiltinToolId } from './builtins/catalog.js';

package/vendor/tools/dist/create-web-fetch.d.ts

@@ -1,27 +0,0 @@
-/** Options for SSRF-guarded HTTP GET (`createWebFetch`). */
-export type WebFetchRequest = {
-    readonly url: string;
-    readonly timeoutMs?: number;
-    readonly maxBytes?: number;
-};
-/** Result of one `createWebFetch` call. */
-export type WebFetchResult = {
-    readonly ok: boolean;
-    readonly status: number;
-    readonly url: string;
-    readonly headers: Readonly<Record<string, string>>;
-    readonly body: string;
-    readonly error?: string;
-};
-export type CreateWebFetchOptions = {
-    readonly allowedHosts?: readonly string[];
-    /** Injected for tests; defaults to undici `fetch` with DNS pin. */
-    readonly fetchImpl?: typeof fetch;
-};
-/**
- * SSRF-guarded HTTP GET for crawl / Fetch URL nodes.
- * Validates every redirect hop; truncates body at `maxBytes`.
- * Default path pins DNS via undici Agent; injected `fetchImpl` skips pin
- * (tests) but still runs {@link assertUrlSafeForFetch} per hop.
- */
-export declare const createWebFetch: (options?: CreateWebFetchOptions) => ((request: WebFetchRequest) => Promise<WebFetchResult>);