negotium 0.1.22 → 0.1.23

package/dist/cron.js

@@ -1832,6 +1832,14 @@ var init_sensitive_path = __esm(() => {
 });
 
 // ../../packages/core/src/agents/vault-tool-policy.ts
+function leafToolName(toolName) {
+  const parts = toolName.split("__");
+  return parts.at(-1) ?? toolName;
+}
+function shouldSubstituteVaultToolInput(toolName) {
+  const leaf = leafToolName(toolName);
+  return leaf.startsWith("browser_") || DIRECT_VAULT_EXECUTION_TOOLS.has(leaf);
+}
 function createVaultToolPolicy(host) {
   function isVaultBrokerTool(toolName) {
     return toolName.includes("vault_run") || toolName.includes("vault_http_request");
@@ -1855,7 +1863,7 @@ function createVaultToolPolicy(host) {
   }
   return { isVaultBrokerTool, referencesRuntimeSecretStorage, shouldRedirectVaultTool };
 }
-var SENSITIVE_RUNTIME_NAMES, defaultVaultToolPolicy, isVaultBrokerTool, referencesRuntimeSecretStorage, shouldRedirectVaultTool;
+var SENSITIVE_RUNTIME_NAMES, DIRECT_VAULT_EXECUTION_TOOLS, defaultVaultToolPolicy, isVaultBrokerTool, referencesRuntimeSecretStorage, shouldRedirectVaultTool;
 var init_vault_tool_policy = __esm(() => {
   init_sensitive_path();
   SENSITIVE_RUNTIME_NAMES = [
@@ -1864,6 +1872,7 @@ var init_vault_tool_policy = __esm(() => {
     "runtime-mcp-secret",
     "sessions.db"
   ];
+  DIRECT_VAULT_EXECUTION_TOOLS = new Set(["Bash", "WebFetch"]);
   defaultVaultToolPolicy = createVaultToolPolicy({
     isSensitivePath,
     valueReferencesVaultKey: () => false
@@ -2979,7 +2988,9 @@ var DEFAULT_CONTEXT_WARNING_RATIO = 0.8;
 import { spawn as spawn2 } from "child_process";
 import { existsSync as existsSync8, readFileSync as readFileSync6 } from "fs";
 import { query } from "@anthropic-ai/claude-agent-sdk";
-function substituteClaudeToolInput(userId, input) {
+function substituteClaudeToolInput(userId, toolName, input) {
+  if (!shouldSubstituteVaultToolInput(toolName))
+    return input;
   return deepMapStrings(input, (value) => substituteHostedSecrets(userId, value));
 }
 function buildClaudeDisallowedTools(extra = undefined) {
@@ -3212,7 +3223,7 @@ async function* claudeProvider(opts) {
                 };
               }
               const userId = opts.userId ?? "";
-              const withVault = substituteClaudeToolInput(userId, tool_input);
+              const withVault = substituteClaudeToolInput(userId, tool_name, tool_input);
               if (JSON.stringify(withVault) === JSON.stringify(tool_input)) {
                 return { continue: true };
               }
@@ -3429,6 +3440,7 @@ var CLAUDE_DEFAULT_DISALLOWED_TOOLS, CLAUDE_NATIVE_AGENT_TOOLS, CLAUDE_IMAGE_MAX
 var init_claude_provider = __esm(async () => {
   init_claude_registry();
   await init_execution_host();
+  init_vault_tool_policy();
   init_file_events();
   init_logger();
   CLAUDE_DEFAULT_DISALLOWED_TOOLS = [
@@ -3451,7 +3463,7 @@ var init_claude_provider = __esm(async () => {
 });
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.1.22";
+var NEGOTIUM_VERSION = "0.1.23";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn as spawn3 } from "child_process";
@@ -4089,10 +4101,12 @@ function buildMaestroDisallowedTools(callerDisallowedTools = []) {
 function buildVaultHook(userId) {
   return {
     name: "vault-guard",
-    pre({ input }) {
+    pre({ toolName, input }) {
       if (referencesHostedSecretStorage(input)) {
         return { decision: "block", error: "Runtime secret storage access is not permitted" };
       }
+      if (!shouldSubstituteVaultToolInput(toolName))
+        return { decision: "allow" };
       const substituted = deepMapStrings(input, (value) => substituteHostedSecrets(userId, value));
       return JSON.stringify(substituted) === JSON.stringify(input) ? { decision: "allow" } : { decision: "modify", input: substituted };
     },
@@ -4150,6 +4164,7 @@ var MAESTRO_DEFAULT_MAX_TOKENS = 32768, PROVIDER_ASK_USER_TOOL = "AskUserQuestio
 var init_maestro_provider = __esm(async () => {
   init_maestro_bootstrap_env();
   await init_execution_host();
+  init_vault_tool_policy();
   MAESTRO_NATIVE_TASK_TOOLS = [
     "TaskCreate",
     "TaskUpdate",
@@ -13941,4 +13956,4 @@ export {
   CRON_CONTEXT_RETAIN_TURNS
 };
 
-//# debugId=B45862ECC407392D64756E2164756E21
+//# debugId=9CE363245A572F6F64756E2164756E21