negotium 0.1.22 → 0.1.23

package/dist/agent-helpers.js

@@ -1794,6 +1794,15 @@ var SENSITIVE_RUNTIME_NAMES = [
   "runtime-mcp-secret",
   "sessions.db"
 ];
+var DIRECT_VAULT_EXECUTION_TOOLS = new Set(["Bash", "WebFetch"]);
+function leafToolName(toolName) {
+  const parts = toolName.split("__");
+  return parts.at(-1) ?? toolName;
+}
+function shouldSubstituteVaultToolInput(toolName) {
+  const leaf = leafToolName(toolName);
+  return leaf.startsWith("browser_") || DIRECT_VAULT_EXECUTION_TOOLS.has(leaf);
+}
 var VAULT_BROKER_REDIRECT_ERROR = "Vault broker redirection is disabled; use {{KEY}} directly in normal tool inputs.";
 function createVaultToolPolicy(host) {
   function isVaultBrokerTool(toolName) {
@@ -2831,7 +2840,9 @@ var CLAUDE_DEFAULT_DISALLOWED_TOOLS = [
   "TaskGet"
 ];
 var CLAUDE_NATIVE_AGENT_TOOLS = ["Task", "Agent", "TaskOutput", "TaskStop"];
-function substituteClaudeToolInput(userId, input) {
+function substituteClaudeToolInput(userId, toolName, input) {
+  if (!shouldSubstituteVaultToolInput(toolName))
+    return input;
   return deepMapStrings(input, (value) => substituteHostedSecrets(userId, value));
 }
 function buildClaudeDisallowedTools(extra = undefined) {
@@ -3072,7 +3083,7 @@ async function* claudeProvider(opts) {
                 };
               }
               const userId = opts.userId ?? "";
-              const withVault = substituteClaudeToolInput(userId, tool_input);
+              const withVault = substituteClaudeToolInput(userId, tool_name, tool_input);
               if (JSON.stringify(withVault) === JSON.stringify(tool_input)) {
                 return { continue: true };
               }
@@ -3304,7 +3315,7 @@ import { createRequire } from "module";
 import { dirname as dirname6, join as join11 } from "path";
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.1.22";
+var NEGOTIUM_VERSION = "0.1.23";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 var NEGOTIUM_MODEL_CATALOG = "negotium-model-catalog.json";
@@ -3939,10 +3950,12 @@ function buildMaestroDisallowedTools(callerDisallowedTools = []) {
 function buildVaultHook(userId) {
   return {
     name: "vault-guard",
-    pre({ input }) {
+    pre({ toolName, input }) {
       if (referencesHostedSecretStorage(input)) {
         return { decision: "block", error: "Runtime secret storage access is not permitted" };
       }
+      if (!shouldSubstituteVaultToolInput(toolName))
+        return { decision: "allow" };
       const substituted = deepMapStrings(input, (value) => substituteHostedSecrets(userId, value));
       return JSON.stringify(substituted) === JSON.stringify(input) ? { decision: "allow" } : { decision: "modify", input: substituted };
     },
@@ -6348,4 +6361,4 @@ export {
   VAULT_BROKER_REDIRECT_ERROR
 };
 
-//# debugId=386290251F1B5ABD64756E2164756E21
+//# debugId=26F98623C1C9180664756E2164756E21