negotium 0.1.19 → 0.1.20

package/dist/agent-helpers.js

@@ -1907,6 +1907,19 @@ function vaultListWithValues(userId) {
 function vaultList(userId) {
   return activeVaultDatabase().prepare("SELECT key, description FROM vault WHERE user_id = ? ORDER BY key").all(userId);
 }
+function vaultSubstituteDetailed(userId, text) {
+  const entries = new Map(vaultListWithValues(userId).map((entry) => [entry.key, entry.value]));
+  const usedKeys = new Set;
+  const substituted = text.replace(/\{\{([^}]+)\}\}/g, (match, rawKey) => {
+    const key = normalizeVaultKey(rawKey);
+    const value = entries.get(key);
+    if (value === undefined)
+      return match;
+    usedKeys.add(key);
+    return value;
+  });
+  return { text: substituted, usedKeys: [...usedKeys] };
+}
 function valueReferencesVaultKey(userId, value) {
   const keys = new Set(vaultList(userId).map((entry) => entry.key));
   const visit = (candidate) => {
@@ -2533,9 +2546,7 @@ var MCP_CATALOG = {
   vault: {
     ...commonRuntimeMcpPolicy("vault"),
     build({ userId, agent }) {
-      const args = [`--user-id=${userId}`];
-      if (agent === "codex")
-        args.push("--http-only=true");
+      const args = [`--user-id=${userId}`, "--list-only=true"];
       return buildStdioMcpServer(agent, VAULT_SERVER, args);
     }
   }
@@ -2757,6 +2768,7 @@ function getMcpServersForQuery(opts) {
 var defaultHost = {
   getMcpServersForQuery,
   redactVaultSecrets,
+  substituteVaultSecrets: (userId, value) => vaultSubstituteDetailed(userId, value).text,
   referencesRuntimeSecretStorage,
   shouldRedirectVaultTool,
   claudeCodeExecutablePath: () => CLAUDE_EXECUTABLE,
@@ -2779,12 +2791,12 @@ function hostedMcpServers(opts) {
 function redactHostedSecrets(userId, value) {
   return activeHost().redactVaultSecrets(userId, value);
 }
+function substituteHostedSecrets(userId, value) {
+  return activeHost().substituteVaultSecrets(userId, value);
+}
 function referencesHostedSecretStorage(value) {
   return activeHost().referencesRuntimeSecretStorage(value);
 }
-function shouldRedirectHostedVaultTool(userId, toolName, input) {
-  return activeHost().shouldRedirectVaultTool(userId, toolName, input);
-}
 function hostedClaudeCodeExecutablePath() {
   return activeHost().claudeCodeExecutablePath();
 }
@@ -2836,6 +2848,9 @@ var CLAUDE_DEFAULT_DISALLOWED_TOOLS = [
   "TaskGet"
 ];
 var CLAUDE_NATIVE_AGENT_TOOLS = ["Task", "Agent", "TaskOutput", "TaskStop"];
+function substituteClaudeToolInput(userId, input) {
+  return deepMapStrings(input, (value) => substituteHostedSecrets(userId, value));
+}
 function buildClaudeDisallowedTools(extra = undefined) {
   return [
     ...new Set([
@@ -3074,14 +3089,14 @@ async function* claudeProvider(opts) {
                 };
               }
               const userId = opts.userId ?? "";
-              if (!shouldRedirectHostedVaultTool(userId, tool_name, tool_input)) {
+              const withVault = substituteClaudeToolInput(userId, tool_input);
+              if (JSON.stringify(withVault) === JSON.stringify(tool_input)) {
                 return { continue: true };
               }
               return {
                 hookSpecificOutput: {
                   hookEventName: "PreToolUse",
-                  permissionDecision: "deny",
-                  permissionDecisionReason: VAULT_BROKER_REDIRECT_ERROR
+                  updatedInput: withVault
                 }
               };
             }
@@ -3306,7 +3321,7 @@ import { createRequire } from "module";
 import { dirname as dirname6, join as join11 } from "path";
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.1.19";
+var NEGOTIUM_VERSION = "0.1.20";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 var NEGOTIUM_MODEL_CATALOG = "negotium-model-catalog.json";
@@ -3941,14 +3956,12 @@ function buildMaestroDisallowedTools(callerDisallowedTools = []) {
 function buildVaultHook(userId) {
   return {
     name: "vault-guard",
-    pre({ toolName, input }) {
+    pre({ input }) {
       if (referencesHostedSecretStorage(input)) {
         return { decision: "block", error: "Runtime secret storage access is not permitted" };
       }
-      if (shouldRedirectHostedVaultTool(userId, toolName, input)) {
-        return { decision: "block", error: VAULT_BROKER_REDIRECT_ERROR };
-      }
-      return { decision: "allow" };
+      const substituted = deepMapStrings(input, (value) => substituteHostedSecrets(userId, value));
+      return JSON.stringify(substituted) === JSON.stringify(input) ? { decision: "allow" } : { decision: "modify", input: substituted };
     },
     post({ output }) {
       const redacted = redactHostedSecrets(userId, output);
@@ -6242,4 +6255,4 @@ export {
   VAULT_BROKER_REDIRECT_ERROR
 };
 
-//# debugId=305266BD0EF55A1F64756E2164756E21
+//# debugId=03A8268BD14CA74064756E2164756E21