paper-search-cli 0.3.1 → 0.3.2

package/dist/infrastructure/security/SecurityUtils.js

@@ -0,0 +1,357 @@
+/**
+ * Security utilities for sanitizing and validating data
+ * Provides comprehensive protection against security vulnerabilities
+ */
+/**
+ * Comprehensive request sanitization to remove sensitive data
+ * @param config - Axios request configuration
+ * @returns Sanitized configuration copy
+ */
+export function sanitizeRequest(config) {
+    if (!config)
+        return config;
+    // Deep clone to avoid mutating original
+    let sanitized;
+    try {
+        sanitized = JSON.parse(JSON.stringify(config));
+    }
+    catch {
+        // If JSON serialization fails, return redacted version
+        return { __redacted: 'Failed to sanitize - potentially circular reference' };
+    }
+    // Sanitize headers
+    if (sanitized.headers) {
+        sanitized.headers = sanitizeHeaders(sanitized.headers);
+    }
+    // Sanitize URL parameters
+    if (sanitized.params) {
+        sanitized.params = sanitizeParams(sanitized.params);
+    }
+    // Sanitize request body
+    if (sanitized.data) {
+        sanitized.data = sanitizeBody(sanitized.data);
+    }
+    // Sanitize URL
+    if (sanitized.url) {
+        sanitized.url = sanitizeUrl(sanitized.url);
+    }
+    return sanitized;
+}
+/**
+ * Sanitize headers to remove sensitive information
+ */
+export function sanitizeHeaders(headers) {
+    if (!headers)
+        return headers;
+    const sanitized = { ...headers };
+    // Patterns for sensitive headers (case-insensitive)
+    const sensitivePatterns = [
+        /^api[-_]?key$/i,
+        /^x[-_]api[-_]key$/i,
+        /^authorization$/i,
+        /^x[-_]apikey$/i,
+        /^access[-_]token$/i,
+        /^bearer$/i,
+        /^x[-_]auth[-_]token$/i,
+        /^cookie$/i,
+        /^set[-_]cookie$/i,
+        /^x[-_]csrf[-_]token$/i,
+        /^x[-_]forwarded[-_]for$/i, // May contain IP
+        /^referer$/i, // May contain sensitive URLs
+        /^user[-_]agent$/i // May contain system info
+    ];
+    Object.keys(sanitized).forEach(key => {
+        const lowerKey = key.toLowerCase();
+        // Check against patterns
+        if (sensitivePatterns.some(pattern => pattern.test(key))) {
+            sanitized[key] = '***REDACTED***';
+        }
+        // Also check values that might contain tokens
+        if (typeof sanitized[key] === 'string') {
+            if (sanitized[key].match(/^(Bearer|Basic)\s+/i) ||
+                sanitized[key].match(/^[a-zA-Z0-9_-]{20,}$/) || // Likely token
+                sanitized[key].includes('session=') ||
+                sanitized[key].includes('token=')) {
+                sanitized[key] = '***REDACTED***';
+            }
+        }
+    });
+    return sanitized;
+}
+/**
+ * Sanitize URL parameters
+ */
+export function sanitizeParams(params) {
+    if (!params)
+        return params;
+    const sanitized = { ...params };
+    Object.keys(sanitized).forEach(key => {
+        const lowerKey = key.toLowerCase();
+        // Check for common sensitive parameter names
+        if (lowerKey.includes('api_key') ||
+            lowerKey.includes('apikey') ||
+            lowerKey.includes('token') ||
+            lowerKey.includes('secret') ||
+            lowerKey.includes('password') ||
+            lowerKey.includes('private') ||
+            lowerKey.includes('auth')) {
+            sanitized[key] = '***REDACTED***';
+        }
+        // Mask values that look like tokens
+        if (typeof sanitized[key] === 'string' &&
+            sanitized[key].match(/^[a-zA-Z0-9_-]{16,}$/)) {
+            sanitized[key] = sanitized[key].substring(0, 4) + '***';
+        }
+    });
+    return sanitized;
+}
+/**
+ * Sanitize request body
+ */
+export function sanitizeBody(body) {
+    if (!body)
+        return body;
+    // For objects, recursively sanitize
+    if (typeof body === 'object' && body !== null) {
+        // Handle arrays
+        if (Array.isArray(body)) {
+            return body.map(item => sanitizeBody(item));
+        }
+        // Handle objects
+        const sanitized = {};
+        for (const [key, value] of Object.entries(body)) {
+            const lowerKey = key.toLowerCase();
+            // Check for sensitive keys
+            if (lowerKey.includes('password') ||
+                lowerKey.includes('secret') ||
+                lowerKey.includes('token') ||
+                lowerKey.includes('api_key') ||
+                lowerKey.includes('private')) {
+                sanitized[key] = '***REDACTED***';
+            }
+            else {
+                sanitized[key] = sanitizeBody(value);
+            }
+        }
+        return sanitized;
+    }
+    // For strings, check if it looks like a token
+    if (typeof body === 'string') {
+        if (body.match(/^(Bearer|Basic)\s+/i)) {
+            return body.replace(/\s+\S+/, ' ***REDACTED***');
+        }
+        if (body.match(/^[a-zA-Z0-9_-]{32,}$/)) {
+            return body.substring(0, 8) + '***';
+        }
+    }
+    return body;
+}
+/**
+ * Sanitize URL to remove sensitive query parameters
+ */
+export function sanitizeUrl(url) {
+    if (!url)
+        return url;
+    try {
+        const urlObj = new URL(url);
+        // Remove sensitive query parameters
+        const sensitiveParams = ['api_key', 'apikey', 'token', 'secret', 'auth'];
+        let hasSensitiveParams = false;
+        sensitiveParams.forEach(param => {
+            if (urlObj.searchParams.has(param)) {
+                urlObj.searchParams.set(param, '***REDACTED***');
+                hasSensitiveParams = true;
+            }
+        });
+        // If we modified parameters, add indicator
+        if (hasSensitiveParams) {
+            return urlObj.toString() + '#sanitized';
+        }
+        return url;
+    }
+    catch {
+        // If URL parsing fails, mask the entire URL
+        return '***REDACTED_URL***';
+    }
+}
+/**
+ * Validate and sanitize a DOI string
+ */
+export function sanitizeDoi(doi) {
+    if (!doi || typeof doi !== 'string') {
+        return { valid: false, sanitized: '', error: 'DOI must be a non-empty string' };
+    }
+    // Remove whitespace and common prefixes
+    let sanitized = doi.trim();
+    // Remove common DOI URL prefixes
+    const prefixes = [
+        'https://doi.org/',
+        'http://doi.org/',
+        'https://dx.doi.org/',
+        'http://dx.doi.org/',
+        'doi:',
+        'DOI:'
+    ];
+    for (const prefix of prefixes) {
+        if (sanitized.toLowerCase().startsWith(prefix.toLowerCase())) {
+            sanitized = sanitized.substring(prefix.length);
+            break;
+        }
+    }
+    // Basic DOI format validation
+    // DOI should start with "10." followed by digits and then any characters
+    const doiPattern = /^10\.\d{4,}(\.\d+)*\/\S+$/;
+    if (!doiPattern.test(sanitized)) {
+        return { valid: false, sanitized: '', error: 'Invalid DOI format' };
+    }
+    // Additional safety checks
+    if (sanitized.length > 256) {
+        return { valid: false, sanitized: '', error: 'DOI too long (max 256 characters)' };
+    }
+    // Check for suspicious patterns
+    if (sanitized.includes('<') || sanitized.includes('>') ||
+        sanitized.includes('"') || sanitized.includes("'")) {
+        return { valid: false, sanitized: '', error: 'DOI contains invalid characters' };
+    }
+    return { valid: true, sanitized: sanitized };
+}
+/**
+ * Escape query value for different contexts
+ */
+export function escapeQueryValue(value, context = 'general') {
+    if (!value)
+        return '';
+    // Remove null bytes and control characters
+    let escaped = value.replace(/[\x00-\x1F\x7F]/g, '');
+    switch (context) {
+        case 'springer':
+            escaped = escaped
+                .replace(/"/g, '\\"') // Escape quotes
+                .replace(/[()]/g, '') // Remove parentheses
+                .replace(/;/g, '') // Remove semicolons
+                .replace(/\/\*/g, '') // Remove SQL comment start
+                .replace(/\*\//g, ''); // Remove SQL comment end
+            break;
+        case 'wos':
+            // For WoS, only remove quotes and parentheses if not user-provided field query
+            if (!escaped.includes('TS=') && !escaped.includes('TI=') &&
+                !escaped.includes('AU=') && !escaped.includes('SO=')) {
+                escaped = escaped
+                    .replace(/"/g, '') // Remove quotes
+                    .replace(/[()]/g, '') // Remove parentheses
+                    .trim();
+            }
+            break;
+        default:
+            escaped = escaped
+                .replace(/["<>]/g, '') // Remove quotes and angle brackets
+                .replace(/\/\/+/g, '') // Remove multiple slashes
+                .trim();
+    }
+    // Length limit to prevent DoS
+    if (escaped.length > 200) {
+        escaped = escaped.substring(0, 200);
+    }
+    return escaped.trim();
+}
+/**
+ * Validate query complexity to prevent DoS
+ */
+export function validateQueryComplexity(query, options = {}) {
+    const maxLength = options.maxLength || 1000;
+    const maxBooleanOperators = options.maxBooleanOperators || 10;
+    if (!query)
+        return { valid: true };
+    // Check length
+    if (query.length > maxLength) {
+        return {
+            valid: false,
+            error: `Query too long (max ${maxLength} characters)`
+        };
+    }
+    // Count boolean operators
+    const booleanOperators = query.match(/\b(AND|OR|NOT)\b/gi) || [];
+    if (booleanOperators.length > maxBooleanOperators) {
+        return {
+            valid: false,
+            error: `Query too complex (max ${maxBooleanOperators} boolean operators)`
+        };
+    }
+    // Check for potential injection patterns
+    const injectionPatterns = [
+        /;\s*(drop|delete|update|insert|exec|union)/i,
+        /\/\*.*\*\//s, // SQL comments
+        /\/\/.*/, // Line comments
+        /\b(select|insert|update|delete|drop|create|alter|exec|execute|union)\b.*\b(from|where|and|or)\b/i,
+        /[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]/ // Control characters
+    ];
+    for (const pattern of injectionPatterns) {
+        if (pattern.test(query)) {
+            return {
+                valid: false,
+                error: 'Query contains potentially dangerous patterns'
+            };
+        }
+    }
+    return { valid: true };
+}
+/**
+ * Create a timeout wrapper for promises
+ */
+export function withTimeout(promise, ms, message) {
+    let timer;
+    const timeout = new Promise((_, reject) => {
+        timer = setTimeout(() => {
+            reject(new Error(message || `Operation timed out after ${ms}ms`));
+        }, ms);
+    });
+    return Promise.race([promise, timeout]).finally(() => clearTimeout(timer));
+}
+/**
+ * Generate a correlation ID for request tracking
+ */
+export function generateCorrelationId() {
+    return `${Date.now()}-${Math.random().toString(36).substring(2, 15)}`;
+}
+/**
+ * Mask sensitive data in strings
+ */
+export function maskSensitiveData(str) {
+    if (!str || str.length < 8)
+        return '***';
+    const visibleChars = Math.min(4, Math.floor(str.length / 4));
+    return str.substring(0, visibleChars) +
+        '*'.repeat(str.length - visibleChars * 2) +
+        str.substring(str.length - visibleChars);
+}
+/**
+ * Check if a string looks like an API key or token
+ */
+export function looksLikeToken(str) {
+    if (!str || typeof str !== 'string')
+        return false;
+    // Common token patterns
+    const tokenPatterns = [
+        /^[a-zA-Z0-9_-]{20,}$/, // Long alphanumeric
+        /^Bearer\s+[a-zA-Z0-9_-]+$/, // Bearer token
+        /^Basic\s+[A-Za-z0-9+/=]+$/, // Basic auth
+        /^[0-9a-f]{32,}$/i, // Hex token
+        /^[A-Za-z0-9+/]{20,}={0,2}$/ // Base64-like
+    ];
+    return tokenPatterns.some(pattern => pattern.test(str));
+}
+export default {
+    sanitizeRequest,
+    sanitizeHeaders,
+    sanitizeParams,
+    sanitizeBody,
+    sanitizeUrl,
+    sanitizeDoi,
+    escapeQueryValue,
+    validateQueryComplexity,
+    withTimeout,
+    generateCorrelationId,
+    maskSensitiveData,
+    looksLikeToken
+};
+//# sourceMappingURL=SecurityUtils.js.map

package/dist/infrastructure/security/SecurityUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityUtils.js","sourceRoot":"","sources":["../../../src/infrastructure/security/SecurityUtils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAW;IACzC,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAE3B,wCAAwC;IACxC,IAAI,SAAc,CAAC;IACnB,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;QACvD,OAAO,EAAE,UAAU,EAAE,qDAAqD,EAAE,CAAC;IAC/E,CAAC;IAED,mBAAmB;IACnB,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtB,SAAS,CAAC,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,0BAA0B;IAC1B,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACrB,SAAS,CAAC,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IAED,wBAAwB;IACxB,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;QACnB,SAAS,CAAC,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,eAAe;IACf,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC;QAClB,SAAS,CAAC,GAAG,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAA4B;IAC1D,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAE7B,MAAM,SAAS,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;IAEjC,oDAAoD;IACpD,MAAM,iBAAiB,GAAG;QACxB,gBAAgB;QAChB,oBAAoB;QACpB,kBAAkB;QAClB,gBAAgB;QAChB,oBAAoB;QACpB,WAAW;QACX,uBAAuB;QACvB,WAAW;QACX,kBAAkB;QAClB,uBAAuB;QACvB,0BAA0B,EAAE,iBAAiB;QAC7C,YAAY,EAAE,6BAA6B;QAC3C,kBAAkB,CAAC,0BAA0B;KAC9C,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QACnC,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAEnC,yBAAyB;QACzB,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACzD,SAAS,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC;QACpC,CAAC;QAED,8CAA8C;QAC9C,IAAI,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;YACvC,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;gBAC3C,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,IAAI,eAAe;gBAC/D,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;gBACnC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtC,SAAS,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAA2B;IACxD,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAE3B,MAAM,SAAS,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAEhC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QACnC,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAEnC,6CAA6C;QAC7C,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC5B,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC3B,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC1B,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC3B,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC7B,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC5B,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,SAAS,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC;QACpC,CAAC;QAED,oCAAoC;QACpC,IAAI,OAAO,SAAS,CAAC,GAAG,CAAC,KAAK,QAAQ;YAClC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACjD,SAAS,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAS;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,oCAAoC;IACpC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9C,gBAAgB;QAChB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,CAAC;QAED,iBAAiB;QACjB,MAAM,SAAS,GAAQ,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YAEnC,2BAA2B;YAC3B,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;gBAC7B,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC3B,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC1B,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAC5B,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjC,SAAS,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,8CAA8C;IAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;QACtC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC;IAErB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAE5B,oCAAoC;QACpC,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzE,IAAI,kBAAkB,GAAG,KAAK,CAAC;QAE/B,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YAC9B,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;gBACjD,kBAAkB,GAAG,IAAI,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,2CAA2C;QAC3C,IAAI,kBAAkB,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC,QAAQ,EAAE,GAAG,YAAY,CAAC;QAC1C,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,4CAA4C;QAC5C,OAAO,oBAAoB,CAAC;IAC9B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;IAClF,CAAC;IAED,wCAAwC;IACxC,IAAI,SAAS,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAE3B,iCAAiC;IACjC,MAAM,QAAQ,GAAG;QACf,kBAAkB;QAClB,iBAAiB;QACjB,qBAAqB;QACrB,oBAAoB;QACpB,MAAM;QACN,MAAM;KACP,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC7D,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM;QACR,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,yEAAyE;IACzE,MAAM,UAAU,GAAG,2BAA2B,CAAC;IAE/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IACtE,CAAC;IAED,2BAA2B;IAC3B,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;IACrF,CAAC;IAED,gCAAgC;IAChC,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;QAClD,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;IACnF,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAa,EACb,UAA0C,SAAS;IAEnD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAEtB,2CAA2C;IAC3C,IAAI,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAEpD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,UAAU;YACb,OAAO,GAAG,OAAO;iBACd,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAE,gBAAgB;iBACtC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAG,qBAAqB;iBAC5C,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAM,oBAAoB;iBAC3C,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAG,2BAA2B;iBAClD,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAE,yBAAyB;YACnD,MAAM;QACR,KAAK,KAAK;YACR,+EAA+E;YAC/E,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACpD,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,OAAO,GAAG,OAAO;qBACd,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAK,gBAAgB;qBACtC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAE,qBAAqB;qBAC3C,IAAI,EAAE,CAAC;YACZ,CAAC;YACD,MAAM;QACR;YACE,OAAO,GAAG,OAAO;iBACd,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAE,mCAAmC;iBAC1D,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAE,0BAA0B;iBACjD,IAAI,EAAE,CAAC;IACd,CAAC;IAED,8BAA8B;IAC9B,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACzB,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,UAAgE,EAAE;IAElE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;IAC5C,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC;IAE9D,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAEnC,eAAe;IACf,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC7B,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,uBAAuB,SAAS,cAAc;SACtD,CAAC;IACJ,CAAC;IAED,0BAA0B;IAC1B,MAAM,gBAAgB,GAAG,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;IACjE,IAAI,gBAAgB,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QAClD,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,0BAA0B,mBAAmB,qBAAqB;SAC1E,CAAC;IACJ,CAAC;IAED,yCAAyC;IACzC,MAAM,iBAAiB,GAAG;QACxB,6CAA6C;QAC7C,aAAa,EAAG,eAAe;QAC/B,QAAQ,EAAQ,gBAAgB;QAChC,kGAAkG;QAClG,kCAAkC,CAAE,qBAAqB;KAC1D,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,+CAA+C;aACvD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CACzB,OAAmB,EACnB,EAAU,EACV,OAAgB;IAEhB,IAAI,KAAoC,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;QAC/C,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,6BAA6B,EAAE,IAAI,CAAC,CAAC,CAAC;QACpE,CAAC,EAAE,EAAE,CAAC,CAAC;IACT,CAAC,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAEzC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC;QAC9B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,YAAY,GAAG,CAAC,CAAC;QACzC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAElD,wBAAwB;IACxB,MAAM,aAAa,GAAG;QACpB,sBAAsB,EAAY,oBAAoB;QACtD,2BAA2B,EAAO,eAAe;QACjD,2BAA2B,EAAO,aAAa;QAC/C,kBAAkB,EAAiB,YAAY;QAC/C,4BAA4B,CAAO,cAAc;KAClD,CAAC;IAEF,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,eAAe;IACb,eAAe;IACf,eAAe;IACf,cAAc;IACd,YAAY;IACZ,WAAW;IACX,WAAW;IACX,gBAAgB;IAChB,uBAAuB;IACvB,WAAW;IACX,qBAAqB;IACrB,iBAAiB;IACjB,cAAc;CACf,CAAC"}

package/dist/management/capability-profile/index.d.ts

@@ -0,0 +1,18 @@
+export type CapabilityStatus = 'available' | 'degraded' | 'unavailable';
+export interface CapabilityEntry {
+    id: 'metadata_search' | 'citation_expansion' | 'body_snippet_search' | 'journal_metrics' | 'pdf_discovery' | 'entitled_access';
+    status: CapabilityStatus;
+    reason: string;
+    configured: string[];
+    missing: string[];
+    sourceGroups?: Record<string, string[]>;
+    requiredKeys?: string[];
+    optionalKeys?: string[];
+}
+export interface CapabilityProfile {
+    ok: boolean;
+    entries: CapabilityEntry[];
+    summary: Record<string, CapabilityStatus>;
+}
+export declare function buildCapabilityProfile(): CapabilityProfile;
+//# sourceMappingURL=index.d.ts.map

package/dist/management/capability-profile/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/management/capability-profile/index.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa,CAAC;AAExE,MAAM,WAAW,eAAe;IAC9B,EAAE,EACE,iBAAiB,GACjB,oBAAoB,GACpB,qBAAqB,GACrB,iBAAiB,GACjB,eAAe,GACf,iBAAiB,CAAC;IACtB,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACxC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC3C;AAmDD,wBAAgB,sBAAsB,IAAI,iBAAiB,CAe1D"}

package/dist/management/capability-profile/index.js

@@ -0,0 +1,167 @@
+import { CONFIG_KEYS, listConfigEntries } from '../config/index.js';
+const METADATA_FREE_SOURCES = [
+    'crossref',
+    'openalex',
+    'pubmed',
+    'pmc',
+    'europepmc',
+    'arxiv',
+    'biorxiv',
+    'medrxiv',
+    'semantic',
+    'iacr',
+    'core',
+    'openaire',
+    'googlescholar',
+    'dblp',
+    'acm',
+    'usenix',
+    'openreview'
+];
+const METADATA_ENTITLED_SOURCES = ['webofscience', 'sciencedirect', 'springer', 'scopus', 'ieee'];
+const OPEN_ACCESS_SOURCES = [
+    'arxiv',
+    'biorxiv',
+    'medrxiv',
+    'pmc',
+    'europepmc',
+    'core',
+    'openaire',
+    'unpaywall',
+    'openalex_oa_metadata',
+    'semantic_open_access_pdf',
+    'springer_open_access',
+    'sciencedirect_open_access',
+    'scopus_open_access_metadata',
+    'iacr'
+];
+const ENTITLED_ACCESS_SOURCES = ['webofscience', 'sciencedirect', 'scopus', 'springer', 'ieee', 'wiley_tdm'];
+const SCIHUB_SOURCES = ['scihub'];
+const ENTITLED_KEY_BY_SOURCE = {
+    webofscience: ['WOS_API_KEY'],
+    sciencedirect: ['ELSEVIER_API_KEY'],
+    scopus: ['ELSEVIER_API_KEY'],
+    springer: ['SPRINGER_API_KEY'],
+    ieee: ['IEEE_API_KEY'],
+    wiley_tdm: ['WILEY_TDM_TOKEN']
+};
+export function buildCapabilityProfile() {
+    const configuredKeys = configuredConfigKeys();
+    const entries = [
+        metadataSearchEntry(configuredKeys),
+        citationExpansionEntry(),
+        bodySnippetSearchEntry(configuredKeys),
+        journalMetricsEntry(configuredKeys),
+        pdfDiscoveryEntry(configuredKeys),
+        entitledAccessEntry(configuredKeys)
+    ];
+    return {
+        ok: entries.some(entry => entry.status === 'available' || entry.status === 'degraded'),
+        entries,
+        summary: Object.fromEntries(entries.map(entry => [entry.id, entry.status]))
+    };
+}
+function metadataSearchEntry(configuredKeys) {
+    const configuredEntitled = METADATA_ENTITLED_SOURCES.filter(source => keysConfigured(configuredKeys, ENTITLED_KEY_BY_SOURCE[source] || []));
+    const missingEntitled = METADATA_ENTITLED_SOURCES.filter(source => !configuredEntitled.includes(source));
+    return {
+        id: 'metadata_search',
+        status: 'available',
+        reason: `Free metadata sources are available (${METADATA_FREE_SOURCES.join(', ')}). Sci-Hub is excluded from metadata_search; entitled metadata sources are ${configuredEntitled.length ? `configured for ${configuredEntitled.join(', ')}` : 'not configured'}.`,
+        configured: [...METADATA_FREE_SOURCES, ...configuredEntitled],
+        missing: missingEntitled,
+        sourceGroups: {
+            free_sources: METADATA_FREE_SOURCES,
+            entitled_sources: configuredEntitled,
+            missing_entitled_sources: missingEntitled
+        },
+        optionalKeys: unique(Object.values(ENTITLED_KEY_BY_SOURCE).flat())
+    };
+}
+function citationExpansionEntry() {
+    return {
+        id: 'citation_expansion',
+        status: 'available',
+        reason: 'Semantic Scholar Graph API citation expansion is available; SEMANTIC_SCHOLAR_API_KEY is optional for higher quota.',
+        configured: ['semantic_scholar_graph'],
+        missing: [],
+        sourceGroups: {
+            citation_sources: ['semantic_scholar_graph']
+        },
+        optionalKeys: ['SEMANTIC_SCHOLAR_API_KEY']
+    };
+}
+function bodySnippetSearchEntry(configuredKeys) {
+    const hasKey = configuredKeys.has('SEMANTIC_SCHOLAR_API_KEY');
+    return {
+        id: 'body_snippet_search',
+        status: hasKey ? 'available' : 'unavailable',
+        reason: hasKey
+            ? 'SEMANTIC_SCHOLAR_API_KEY is configured, so Semantic Scholar Open Access body snippet search can run.'
+            : 'SEMANTIC_SCHOLAR_API_KEY is missing; metadata search still works, but body snippet search cannot run.',
+        configured: hasKey ? ['semantic_snippet_index'] : [],
+        missing: hasKey ? [] : ['SEMANTIC_SCHOLAR_API_KEY'],
+        requiredKeys: ['SEMANTIC_SCHOLAR_API_KEY']
+    };
+}
+function journalMetricsEntry(configuredKeys) {
+    const hasKey = configuredKeys.has('EASYSCHOLAR_KEY');
+    return {
+        id: 'journal_metrics',
+        status: hasKey ? 'available' : 'unavailable',
+        reason: hasKey
+            ? 'EASYSCHOLAR_KEY is configured, so EasyScholar journal metrics can run.'
+            : 'EASYSCHOLAR_KEY is missing; journal metrics are unavailable until the EasyScholar SecretKey is configured.',
+        configured: hasKey ? ['easyscholar'] : [],
+        missing: hasKey ? [] : ['EASYSCHOLAR_KEY'],
+        requiredKeys: ['EASYSCHOLAR_KEY']
+    };
+}
+function pdfDiscoveryEntry(configuredKeys) {
+    const configuredEntitled = ENTITLED_ACCESS_SOURCES.filter(source => keysConfigured(configuredKeys, ENTITLED_KEY_BY_SOURCE[source] || []));
+    const missingEntitled = ENTITLED_ACCESS_SOURCES.filter(source => !configuredEntitled.includes(source));
+    return {
+        id: 'pdf_discovery',
+        status: configuredEntitled.length > 0 ? 'available' : 'degraded',
+        reason: configuredEntitled.length > 0
+            ? `Open-access PDF discovery, entitled access sources (${configuredEntitled.join(', ')}), and Sci-Hub final fallback are available.`
+            : 'Open-access PDF discovery and Sci-Hub final fallback are available; entitled access sources are not configured.',
+        configured: [...OPEN_ACCESS_SOURCES, ...configuredEntitled, ...SCIHUB_SOURCES],
+        missing: missingEntitled,
+        sourceGroups: {
+            open_access_sources: OPEN_ACCESS_SOURCES,
+            entitled_access_sources: configuredEntitled,
+            missing_entitled_access_sources: missingEntitled,
+            scihub_sources: SCIHUB_SOURCES
+        },
+        optionalKeys: unique(Object.values(ENTITLED_KEY_BY_SOURCE).flat())
+    };
+}
+function entitledAccessEntry(configuredKeys) {
+    const configured = ENTITLED_ACCESS_SOURCES.filter(source => keysConfigured(configuredKeys, ENTITLED_KEY_BY_SOURCE[source] || []));
+    const missing = ENTITLED_ACCESS_SOURCES.filter(source => !configured.includes(source));
+    return {
+        id: 'entitled_access',
+        status: configured.length > 0 ? 'available' : 'unavailable',
+        reason: configured.length > 0
+            ? `User-specific access is configured for ${configured.join(', ')}.`
+            : 'No publisher, database, TDM, or institutional access keys are configured.',
+        configured,
+        missing,
+        sourceGroups: {
+            configured_sources: configured,
+            missing_sources: missing
+        },
+        requiredKeys: unique(Object.values(ENTITLED_KEY_BY_SOURCE).flat())
+    };
+}
+function configuredConfigKeys() {
+    return new Set(listConfigEntries(false).filter(entry => entry.configured).map(entry => entry.key));
+}
+function keysConfigured(configuredKeys, keys) {
+    return keys.length > 0 && keys.some(key => configuredKeys.has(key));
+}
+function unique(values) {
+    return [...new Set(values.filter(key => CONFIG_KEYS.includes(key)))];
+}
+//# sourceMappingURL=index.js.map

package/dist/management/capability-profile/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/management/capability-profile/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AA2BpE,MAAM,qBAAqB,GAAG;IAC5B,UAAU;IACV,UAAU;IACV,QAAQ;IACR,KAAK;IACL,WAAW;IACX,OAAO;IACP,SAAS;IACT,SAAS;IACT,UAAU;IACV,MAAM;IACN,MAAM;IACN,UAAU;IACV,eAAe;IACf,MAAM;IACN,KAAK;IACL,QAAQ;IACR,YAAY;CACb,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAAC,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAClG,MAAM,mBAAmB,GAAG;IAC1B,OAAO;IACP,SAAS;IACT,SAAS;IACT,KAAK;IACL,WAAW;IACX,MAAM;IACN,UAAU;IACV,WAAW;IACX,sBAAsB;IACtB,0BAA0B;IAC1B,sBAAsB;IACtB,2BAA2B;IAC3B,6BAA6B;IAC7B,MAAM;CACP,CAAC;AACF,MAAM,uBAAuB,GAAG,CAAC,cAAc,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AAC7G,MAAM,cAAc,GAAG,CAAC,QAAQ,CAAC,CAAC;AAElC,MAAM,sBAAsB,GAA6B;IACvD,YAAY,EAAE,CAAC,aAAa,CAAC;IAC7B,aAAa,EAAE,CAAC,kBAAkB,CAAC;IACnC,MAAM,EAAE,CAAC,kBAAkB,CAAC;IAC5B,QAAQ,EAAE,CAAC,kBAAkB,CAAC;IAC9B,IAAI,EAAE,CAAC,cAAc,CAAC;IACtB,SAAS,EAAE,CAAC,iBAAiB,CAAC;CAC/B,CAAC;AAEF,MAAM,UAAU,sBAAsB;IACpC,MAAM,cAAc,GAAG,oBAAoB,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAsB;QACjC,mBAAmB,CAAC,cAAc,CAAC;QACnC,sBAAsB,EAAE;QACxB,sBAAsB,CAAC,cAAc,CAAC;QACtC,mBAAmB,CAAC,cAAc,CAAC;QACnC,iBAAiB,CAAC,cAAc,CAAC;QACjC,mBAAmB,CAAC,cAAc,CAAC;KACpC,CAAC;IACF,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;QACtF,OAAO;QACP,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAiC;KAC5G,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,cAA2B;IACtD,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,sBAAsB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5I,MAAM,eAAe,GAAG,yBAAyB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACzG,OAAO;QACL,EAAE,EAAE,iBAAiB;QACrB,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,wCAAwC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,8EAA8E,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,GAAG;QACjQ,UAAU,EAAE,CAAC,GAAG,qBAAqB,EAAE,GAAG,kBAAkB,CAAC;QAC7D,OAAO,EAAE,eAAe;QACxB,YAAY,EAAE;YACZ,YAAY,EAAE,qBAAqB;YACnC,gBAAgB,EAAE,kBAAkB;YACpC,wBAAwB,EAAE,eAAe;SAC1C;QACD,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,IAAI,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB;IAC7B,OAAO;QACL,EAAE,EAAE,oBAAoB;QACxB,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,oHAAoH;QAC5H,UAAU,EAAE,CAAC,wBAAwB,CAAC;QACtC,OAAO,EAAE,EAAE;QACX,YAAY,EAAE;YACZ,gBAAgB,EAAE,CAAC,wBAAwB,CAAC;SAC7C;QACD,YAAY,EAAE,CAAC,0BAA0B,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,cAA2B;IACzD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC9D,OAAO;QACL,EAAE,EAAE,qBAAqB;QACzB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa;QAC5C,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,sGAAsG;YACxG,CAAC,CAAC,uGAAuG;QAC3G,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,EAAE;QACpD,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC;QACnD,YAAY,EAAE,CAAC,0BAA0B,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,cAA2B;IACtD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACrD,OAAO;QACL,EAAE,EAAE,iBAAiB;QACrB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa;QAC5C,MAAM,EAAE,MAAM;YACZ,CAAC,CAAC,wEAAwE;YAC1E,CAAC,CAAC,4GAA4G;QAChH,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE;QACzC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAC1C,YAAY,EAAE,CAAC,iBAAiB,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,cAA2B;IACpD,MAAM,kBAAkB,GAAG,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,sBAAsB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1I,MAAM,eAAe,GAAG,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACvG,OAAO;QACL,EAAE,EAAE,eAAe;QACnB,MAAM,EAAE,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU;QAChE,MAAM,EAAE,kBAAkB,CAAC,MAAM,GAAG,CAAC;YACnC,CAAC,CAAC,uDAAuD,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,8CAA8C;YACpI,CAAC,CAAC,iHAAiH;QACrH,UAAU,EAAE,CAAC,GAAG,mBAAmB,EAAE,GAAG,kBAAkB,EAAE,GAAG,cAAc,CAAC;QAC9E,OAAO,EAAE,eAAe;QACxB,YAAY,EAAE;YACZ,mBAAmB,EAAE,mBAAmB;YACxC,uBAAuB,EAAE,kBAAkB;YAC3C,+BAA+B,EAAE,eAAe;YAChD,cAAc,EAAE,cAAc;SAC/B;QACD,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,IAAI,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,cAA2B;IACtD,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,sBAAsB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAClI,MAAM,OAAO,GAAG,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACvF,OAAO;QACL,EAAE,EAAE,iBAAiB;QACrB,MAAM,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa;QAC3D,MAAM,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC;YAC3B,CAAC,CAAC,0CAA0C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACpE,CAAC,CAAC,2EAA2E;QAC/E,UAAU;QACV,OAAO;QACP,YAAY,EAAE;YACZ,kBAAkB,EAAE,UAAU;YAC9B,eAAe,EAAE,OAAO;SACzB;QACD,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,IAAI,EAAE,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO,IAAI,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,cAAc,CAAC,cAA2B,EAAE,IAAc;IACjE,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,MAAM,CAAC,MAAgB;IAC9B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAE,WAAiC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC"}

package/dist/management/config/index.d.ts

@@ -0,0 +1,2 @@
+export * from '../../config/ConfigService.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/management/config/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/management/config/index.ts"],"names":[],"mappings":"AAAA,cAAc,+BAA+B,CAAC"}

package/dist/management/config/index.js

@@ -0,0 +1,2 @@
+export * from '../../config/ConfigService.js';
+//# sourceMappingURL=index.js.map

package/dist/management/config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/management/config/index.ts"],"names":[],"mappings":"AAAA,cAAc,+BAA+B,CAAC"}

package/dist/management/diagnostics/index.d.ts

@@ -0,0 +1,43 @@
+export interface ApiRequirement {
+    id: string;
+    platform: string;
+    capability: string;
+    tools: string[];
+    keyGroups: string[][];
+    optionalKeyGroups?: string[][];
+    productAccess?: string;
+    commonFailures: string[];
+    actions: string[];
+}
+export interface RequirementStatus extends ApiRequirement {
+    configured: boolean;
+    configuredGroups: string[][];
+    missingGroups: string[][];
+}
+export interface Diagnostic {
+    severity: 'info' | 'warning' | 'error';
+    category: 'missing_config' | 'invalid_key' | 'permission' | 'query_or_filter' | 'rate_limit' | 'timeout' | 'zero_results' | 'partial_failure' | 'unsupported';
+    platform?: string;
+    tool?: string;
+    summary: string;
+    likelyCauses: string[];
+    actions: string[];
+    relatedConfigKeys: string[];
+}
+interface DiagnosticContext {
+    tool?: string;
+    platform?: string;
+    sources?: string;
+}
+interface ToolResultContext extends DiagnosticContext {
+    args?: Record<string, unknown>;
+    data?: unknown;
+    message?: string;
+}
+export declare const API_REQUIREMENTS: ApiRequirement[];
+export declare function getRequirementStatus(): RequirementStatus[];
+export declare function diagnoseToolResult(context: ToolResultContext): Diagnostic | undefined;
+export declare function diagnoseError(error: any, context?: DiagnosticContext): Diagnostic | undefined;
+export declare function diagnosticContextFromCli(command: string, positionals: string[], flags: Record<string, unknown>): DiagnosticContext;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/management/diagnostics/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/management/diagnostics/index.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,MAAM,EAAE,EAAE,CAAC;IAC7B,aAAa,EAAE,MAAM,EAAE,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IACvC,QAAQ,EACJ,gBAAgB,GAChB,aAAa,GACb,YAAY,GACZ,iBAAiB,GACjB,YAAY,GACZ,SAAS,GACT,cAAc,GACd,iBAAiB,GACjB,aAAa,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,UAAU,iBAAiB;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,iBAAkB,SAAQ,iBAAiB;IACnD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,eAAO,MAAM,gBAAgB,EAAE,cAAc,EA+O5C,CAAC;AAmBF,wBAAgB,oBAAoB,IAAI,iBAAiB,EAAE,CAW1D;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,GAAG,UAAU,GAAG,SAAS,CAmBrF;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,GAAE,iBAAsB,GAAG,UAAU,GAAG,SAAS,CA2JjG;AAED,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,iBAAiB,CAsBlI"}