lastlight 0.10.2 → 0.10.3

package/dist/providers.js

@@ -0,0 +1,245 @@
+/**
+ * Provider registry — single source of truth for the LLM providers Last Light
+ * knows how to wire end-to-end.
+ *
+ * pi-ai (`@earendil-works/pi-ai`) is provider-agnostic and supports 15+
+ * providers out of the box. Of those, only a subset is "wizard-able" here:
+ * they authenticate with a single API-key env var and expose a stable
+ * endpoint reachable from the sandbox egress firewall. Excluded are the
+ * OAuth-only providers (`openai-codex`, `github-copilot`), the multi-env
+ * Ambient-cred ones (`amazon-bedrock`, `google-vertex`, `azure-openai-*`,
+ * `cloudflare-*`), and the regional-CN variants.
+ *
+ * This registry is consumed by:
+ *   - `src/engine/llm.ts` — the cheap one-shot helper used by the
+ *     prompt screener + intent classifier. It builds requests for the
+ *     `openai-completions` family (which is most wizard-able providers —
+ *     Google and Mistral are routed through their OpenAI-compatible
+ *     endpoints) and the `anthropic-messages` family (Kimi for Coding,
+ *     MiniMax, Anthropic itself).
+ *   - `src/engine/agent-executor.ts` — forwards each provider's env var
+ *     into the sandbox so agentic-pi can auth.
+ *   - `src/sandbox/egress-allowlist.ts` — the SNI/firewall allowlist is
+ *     seeded from each provider's `host`.
+ *   - `src/cli/setup.ts` — the install wizard's step-4 provider picker.
+ *
+ * Keep this list aligned with pi-ai's provider registry. When pi-ai adds a
+ * new provider that we want to surface, add an entry here and everything
+ * else (forwarding, egress, wizard UI) follows automatically.
+ */
+/**
+ * The registry. Order matters — `defaultFastModel()` in `llm.ts` selects
+ * a fast model by iterating this list and picking the first provider
+ * whose env var is present. Always keep Anthropic first (best raw-latency
+ * cheap helper) then OpenAI then OpenRouter, then the rest grouped by
+ * families so the array is easy to scan.
+ */
+export const PROVIDERS = [
+    // ── Anthropic-messages family ───────────────────────────────────────
+    {
+        prefix: "anthropic",
+        displayName: "Anthropic",
+        envKey: "ANTHROPIC_API_KEY",
+        baseUrl: "https://api.anthropic.com/v1",
+        api: "anthropic-messages",
+        host: "anthropic.com",
+        fastModel: "claude-haiku-4-5-20251001",
+        sampleModel: "claude-sonnet-4-6",
+        keyPrefix: "sk-ant-",
+    },
+    {
+        prefix: "kimi-coding",
+        displayName: "Kimi for Coding (Moonshot)",
+        envKey: "KIMI_API_KEY",
+        baseUrl: "https://api.kimi.com/coding",
+        api: "anthropic-messages",
+        host: "kimi.com",
+        fastModel: "kimi-latest",
+        sampleModel: "kimi-latest",
+    },
+    {
+        prefix: "minimax",
+        displayName: "MiniMax",
+        envKey: "MINIMAX_API_KEY",
+        baseUrl: "https://api.minimax.io/anthropic",
+        api: "anthropic-messages",
+        host: "minimax.io",
+        fastModel: "MiniMax-M1",
+        sampleModel: "MiniMax-M2",
+    },
+    // ── OpenAI-completions family — first-party OpenAI ──────────────────
+    {
+        prefix: "openai",
+        displayName: "OpenAI",
+        envKey: "OPENAI_API_KEY",
+        baseUrl: "https://api.openai.com/v1",
+        api: "openai-completions",
+        host: "openai.com",
+        fastModel: "gpt-5.4-mini",
+        sampleModel: "gpt-5.5",
+        maxTokensField: "max_completion_tokens",
+        keyPrefix: "sk-",
+    },
+    // ── Google Gemini — routed through Google's OpenAI-compatible endpoint ──
+    {
+        prefix: "google",
+        displayName: "Google AI Studio (Gemini)",
+        envKey: "GEMINI_API_KEY",
+        baseUrl: "https://generativelanguage.googleapis.com/v1beta/openai",
+        api: "openai-completions",
+        host: "generativelanguage.googleapis.com",
+        fastModel: "gemini-2.5-flash",
+        sampleModel: "gemini-2.5-pro",
+        keyPrefix: "AIza",
+    },
+    // ── Mistral — Mistral exposes an OpenAI-compatible path ──────────────
+    {
+        prefix: "mistral",
+        displayName: "Mistral",
+        envKey: "MISTRAL_API_KEY",
+        baseUrl: "https://api.mistral.ai/v1",
+        api: "openai-completions",
+        host: "mistral.ai",
+        fastModel: "mistral-small-latest",
+        sampleModel: "mistral-large-latest",
+    },
+    // ── OpenAI-compatible inference specialists ──────────────────────────
+    {
+        prefix: "groq",
+        displayName: "Groq",
+        envKey: "GROQ_API_KEY",
+        baseUrl: "https://api.groq.com/openai/v1",
+        api: "openai-completions",
+        host: "groq.com",
+        fastModel: "llama-3.3-70b-versatile",
+        sampleModel: "llama-3.3-70b-versatile",
+    },
+    {
+        prefix: "cerebras",
+        displayName: "Cerebras",
+        envKey: "CEREBRAS_API_KEY",
+        baseUrl: "https://api.cerebras.ai/v1",
+        api: "openai-completions",
+        host: "cerebras.ai",
+        fastModel: "llama-3.3-70b",
+        sampleModel: "llama-3.3-70b",
+    },
+    {
+        prefix: "xai",
+        displayName: "xAI (Grok)",
+        envKey: "XAI_API_KEY",
+        baseUrl: "https://api.x.ai/v1",
+        api: "openai-completions",
+        host: "x.ai",
+        fastModel: "grok-3-mini",
+        sampleModel: "grok-4",
+    },
+    {
+        prefix: "huggingface",
+        displayName: "Hugging Face",
+        envKey: "HF_TOKEN",
+        baseUrl: "https://router.huggingface.co/v1",
+        api: "openai-completions",
+        host: "huggingface.co",
+        fastModel: "meta-llama/Llama-3.3-70B-Instruct",
+        sampleModel: "meta-llama/Llama-3.3-70B-Instruct",
+        keyPrefix: "hf_",
+    },
+    {
+        prefix: "moonshotai",
+        displayName: "Moonshot AI",
+        envKey: "MOONSHOT_API_KEY",
+        baseUrl: "https://api.moonshot.ai/v1",
+        api: "openai-completions",
+        host: "moonshot.ai",
+        fastModel: "kimi-k2",
+        sampleModel: "kimi-k2",
+    },
+    {
+        prefix: "nvidia",
+        displayName: "NVIDIA NIM",
+        envKey: "NVIDIA_API_KEY",
+        baseUrl: "https://integrate.api.nvidia.com/v1",
+        api: "openai-completions",
+        host: "integrate.api.nvidia.com",
+        fastModel: "meta/llama-3.3-70b-instruct",
+        sampleModel: "meta/llama-3.3-70b-instruct",
+    },
+    {
+        prefix: "fireworks",
+        displayName: "Fireworks",
+        envKey: "FIREWORKS_API_KEY",
+        baseUrl: "https://api.fireworks.ai/inference/v1",
+        api: "openai-completions",
+        host: "fireworks.ai",
+        fastModel: "accounts/fireworks/models/llama-v3p3-70b-instruct",
+        sampleModel: "accounts/fireworks/models/llama-v3p3-70b-instruct",
+    },
+    {
+        prefix: "together",
+        displayName: "Together",
+        envKey: "TOGETHER_API_KEY",
+        baseUrl: "https://api.together.ai/v1",
+        api: "openai-completions",
+        host: "together.ai",
+        fastModel: "meta-llama/Llama-3.3-70B-Instruct-Turbo",
+        sampleModel: "meta-llama/Llama-3.3-70B-Instruct-Turbo",
+    },
+    {
+        prefix: "deepseek",
+        displayName: "DeepSeek",
+        envKey: "DEEPSEEK_API_KEY",
+        baseUrl: "https://api.deepseek.com/v1",
+        api: "openai-completions",
+        host: "deepseek.com",
+        fastModel: "deepseek-chat",
+        sampleModel: "deepseek-chat",
+    },
+    {
+        prefix: "zai",
+        displayName: "Z.AI (GLM)",
+        envKey: "ZAI_API_KEY",
+        baseUrl: "https://api.z.ai/api/coding/paas/v4",
+        api: "openai-completions",
+        host: "z.ai",
+        fastModel: "glm-4.6",
+        sampleModel: "glm-4.6",
+    },
+    // ── OpenRouter — aggregator (take any pi.dev-listed model via one key) ──
+    {
+        prefix: "openrouter",
+        displayName: "OpenRouter (aggregator — Anthropic, Google, xAI, …)",
+        envKey: "OPENROUTER_API_KEY",
+        baseUrl: "https://openrouter.ai/api/v1",
+        api: "openai-completions",
+        host: "openrouter.ai",
+        fastModel: "google/gemini-2.5-flash",
+        sampleModel: "anthropic/claude-sonnet-4.5",
+        preserveNestedModelId: true,
+        extraHeaders: {
+            "HTTP-Referer": "https://github.com/cliftonc/lastlight",
+            "X-Title": "Last Light",
+        },
+        keyPrefix: "sk-or-",
+    },
+];
+const PREFIX_INDEX = new Map(PROVIDERS.map((p) => [p.prefix, p]));
+const ENV_INDEX = new Map(PROVIDERS.map((p) => [p.envKey, p]));
+export function providerByPrefix(prefix) {
+    return PREFIX_INDEX.get(prefix.toLowerCase());
+}
+export function providerByEnvKey(envKey) {
+    return ENV_INDEX.get(envKey);
+}
+/** All the env var names a harness must forward to reach every registered provider. */
+export const PROVIDER_ENV_KEYS = PROVIDERS.map((p) => p.envKey);
+/** All the hosts the sandbox egress firewall must allowlist to reach these providers. */
+export const PROVIDER_HOSTS = PROVIDERS.map((p) => p.host);
+/**
+ * Default model spec shipped with the harness. Keep aligned with the
+ * `OPENCODE_MODEL` default in `config/default.yaml` and the wizard's
+ * initial provider selection.
+ */
+export const DEFAULT_PROVIDER = "anthropic";
+export const DEFAULT_MODEL = "anthropic/claude-sonnet-4-6";
+//# sourceMappingURL=providers.js.map

package/dist/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AA0CH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,SAAS,GAA4B;IAChD,uEAAuE;IACvE;QACE,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,WAAW;QACxB,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,8BAA8B;QACvC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,2BAA2B;QACtC,WAAW,EAAE,mBAAmB;QAChC,SAAS,EAAE,SAAS;KACrB;IACD;QACE,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,4BAA4B;QACzC,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE,6BAA6B;QACtC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,aAAa;QACxB,WAAW,EAAE,aAAa;KAC3B;IACD;QACE,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE,kCAAkC;QAC3C,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,YAAY;QACvB,WAAW,EAAE,YAAY;KAC1B;IACD,uEAAuE;IACvE;QACE,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,gBAAgB;QACxB,OAAO,EAAE,2BAA2B;QACpC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,cAAc;QACzB,WAAW,EAAE,SAAS;QACtB,cAAc,EAAE,uBAAuB;QACvC,SAAS,EAAE,KAAK;KACjB;IACD,2EAA2E;IAC3E;QACE,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,2BAA2B;QACxC,MAAM,EAAE,gBAAgB;QACxB,OAAO,EAAE,yDAAyD;QAClE,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,mCAAmC;QACzC,SAAS,EAAE,kBAAkB;QAC7B,WAAW,EAAE,gBAAgB;QAC7B,SAAS,EAAE,MAAM;KAClB;IACD,wEAAwE;IACxE;QACE,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE,2BAA2B;QACpC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,sBAAsB;QACjC,WAAW,EAAE,sBAAsB;KACpC;IACD,wEAAwE;IACxE;QACE,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,MAAM;QACnB,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE,gCAAgC;QACzC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,yBAAyB;QACpC,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,4BAA4B;QACrC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,eAAe;QAC1B,WAAW,EAAE,eAAe;KAC7B;IACD;QACE,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,YAAY;QACzB,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,qBAAqB;QAC9B,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,aAAa;QACxB,WAAW,EAAE,QAAQ;KACtB;IACD;QACE,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,cAAc;QAC3B,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,kCAAkC;QAC3C,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,gBAAgB;QACtB,SAAS,EAAE,mCAAmC;QAC9C,WAAW,EAAE,mCAAmC;QAChD,SAAS,EAAE,KAAK;KACjB;IACD;QACE,MAAM,EAAE,YAAY;QACpB,WAAW,EAAE,aAAa;QAC1B,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,4BAA4B;QACrC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,SAAS;KACvB;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,YAAY;QACzB,MAAM,EAAE,gBAAgB;QACxB,OAAO,EAAE,qCAAqC;QAC9C,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,0BAA0B;QAChC,SAAS,EAAE,6BAA6B;QACxC,WAAW,EAAE,6BAA6B;KAC3C;IACD;QACE,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,WAAW;QACxB,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,uCAAuC;QAChD,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,mDAAmD;QAC9D,WAAW,EAAE,mDAAmD;KACjE;IACD;QACE,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,4BAA4B;QACrC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,yCAAyC;QACpD,WAAW,EAAE,yCAAyC;KACvD;IACD;QACE,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,6BAA6B;QACtC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,eAAe;QAC1B,WAAW,EAAE,eAAe;KAC7B;IACD;QACE,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,YAAY;QACzB,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,qCAAqC;QAC9C,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,SAAS;QACpB,WAAW,EAAE,SAAS;KACvB;IACD,2EAA2E;IAC3E;QACE,MAAM,EAAE,YAAY;QACpB,WAAW,EAAE,qDAAqD;QAClE,MAAM,EAAE,oBAAoB;QAC5B,OAAO,EAAE,8BAA8B;QACvC,GAAG,EAAE,oBAAoB;QACzB,IAAI,EAAE,eAAe;QACrB,SAAS,EAAE,yBAAyB;QACpC,WAAW,EAAE,6BAA6B;QAC1C,qBAAqB,EAAE,IAAI;QAC3B,YAAY,EAAE;YACZ,cAAc,EAAE,uCAAuC;YACvD,SAAS,EAAE,YAAY;SACxB;QACD,SAAS,EAAE,QAAQ;KACpB;CACF,CAAC;AAEF,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CACpC,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CACpC,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,OAAO,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,iBAAiB,GAAsB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnF,yFAAyF;AACzF,MAAM,CAAC,MAAM,cAAc,GAAsB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAC5C,MAAM,CAAC,MAAM,aAAa,GAAG,6BAA6B,CAAC"}

package/dist/sandbox/egress-allowlist.d.ts

@@ -43,6 +43,11 @@ export declare const GITHUB_HOSTS: readonly string[];
  * so the call originates from the host and these hosts aren't strictly
  * required inside the VM — they're kept here so a single allowlist can
  * cover both paths without surprises.
+ *
+ * The list is derived from the provider registry (`src/providers.ts`) —
+ * every wizard-able provider has a `host` entry there, so adding a new
+ * provider automatically seeds this allowlist. Each entry matches the
+ * apex AND all subdomains (see `normalizeAllowlistHost`).
  */
 export declare const PROVIDER_HOSTS: readonly string[];
 /**

package/dist/sandbox/egress-allowlist.js

@@ -1,4 +1,5 @@
 import { isIP } from "node:net";
+import { PROVIDER_HOSTS as REGISTRY_PROVIDER_HOSTS } from "../providers.js";
 /**
  * Single source of truth for sandbox HTTP egress allowlists.
  *
@@ -49,14 +50,13 @@ export const GITHUB_HOSTS = [
  * so the call originates from the host and these hosts aren't strictly
  * required inside the VM — they're kept here so a single allowlist can
  * cover both paths without surprises.
+ *
+ * The list is derived from the provider registry (`src/providers.ts`) —
+ * every wizard-able provider has a `host` entry there, so adding a new
+ * provider automatically seeds this allowlist. Each entry matches the
+ * apex AND all subdomains (see `normalizeAllowlistHost`).
  */
-export const PROVIDER_HOSTS = [
-    "anthropic.com",
-    "openai.com",
-    "openrouter.ai",
-    // Fireworks — api.fireworks.ai is the inference endpoint.
-    "fireworks.ai",
-];
+export const PROVIDER_HOSTS = REGISTRY_PROVIDER_HOSTS;
 /**
  * Public package registries the executor may hit during `npm install`,
  * etc. Apex-plus-subdomain matching covers auth / CDN / mirror

package/dist/sandbox/egress-allowlist.js.map

@@ -1 +1 @@
-{"version":3,"file":"egress-allowlist.js","sourceRoot":"","sources":["../../src/sandbox/egress-allowlist.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAEhC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,4EAA4E;IAC5E,YAAY;IACZ,mEAAmE;IACnE,uBAAuB;CACxB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,cAAc,GAAsB;IAC/C,eAAe;IACf,YAAY;IACZ,eAAe;IACf,0DAA0D;IAC1D,cAAc;CACf,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsB;IACvD,oBAAoB;IACpB,WAAW;IACX,aAAa;IACb,mEAAmE;IACnE,UAAU;IACV,kBAAkB;IAClB,8DAA8D;IAC9D,WAAW;IACX,yEAAyE;IACzE,YAAY;IACZ,OAAO;IACP,cAAc;IACd,wEAAwE;IACxE,iBAAiB;IACjB,YAAY;CACb,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD,GAAG,YAAY;IACf,GAAG,cAAc;IACjB,GAAG,sBAAsB;CAC1B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAEtC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAE9E,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;IACxB,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACjH,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC;eACT,CAAC,KAAK,EAAE;eACR,CAAC,KAAK,GAAG;eACT,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;eACxB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;eACjC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACrE,IAAI,UAAU;YAAE,OAAO,qBAAqB,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,OAAO,KAAK,KAAK,IAAI;eAChB,KAAK,KAAK,KAAK;eACf,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;eACvB,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;eACvB,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;eACvB,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;eACvB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;eACtB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,MAAM,GAAG,OAAO,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACpG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACpH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAuB,EAAE,QAA2B,EAAE;IACnF,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"egress-allowlist.js","sourceRoot":"","sources":["../../src/sandbox/egress-allowlist.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,cAAc,IAAI,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,4EAA4E;IAC5E,YAAY;IACZ,mEAAmE;IACnE,uBAAuB;CACxB,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,cAAc,GAAsB,uBAAuB,CAAC;AAEzE;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAsB;IACvD,oBAAoB;IACpB,WAAW;IACX,aAAa;IACb,mEAAmE;IACnE,UAAU;IACV,kBAAkB;IAClB,8DAA8D;IAC9D,WAAW;IACX,yEAAyE;IACzE,YAAY;IACZ,OAAO;IACP,cAAc;IACd,wEAAwE;IACxE,iBAAiB;IACjB,YAAY;CACb,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAsB;IAClD,GAAG,YAAY;IACf,GAAG,cAAc;IACjB,GAAG,sBAAsB;CAC1B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAEtC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC,CAAC;AAE9E,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;IACxB,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACjH,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC;eACT,CAAC,KAAK,EAAE;eACR,CAAC,KAAK,GAAG;eACT,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC;eACxB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;eACjC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACrE,IAAI,UAAU;YAAE,OAAO,qBAAqB,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7C,OAAO,KAAK,KAAK,IAAI;eAChB,KAAK,KAAK,KAAK;eACf,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;eACvB,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;eACvB,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;eACvB,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC;eACvB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;eACtB,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,MAAM,GAAG,OAAO,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACpG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,qBAAqB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACpH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAuB,EAAE,QAA2B,EAAE;IACnF,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,SAAS,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lastlight",
-  "version": "0.10.2",
+  "version": "0.10.3",
   "description": "GitHub repository maintenance agent — Agent SDK harness",
   "type": "module",
   "main": "dist/index.js",

package/plugins/lastlight/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin.json",
   "name": "lastlight",
   "displayName": "Last Light",
-  "version": "0.10.2",
+  "version": "0.10.3",
   "description": "Install, configure and operate Last Light (GitHub maintenance agent) — its server, CLI client, deployment overlay, and the Last Light Evals harness.",
   "author": {
     "name": "Clifton Cunningham"