reeboot 1.3.6 → 1.4.0

package/dist/config.d.ts

@@ -1,4 +1,109 @@
 import { z } from 'zod';
+declare const McpPermissionsSchema: z.ZodObject<{
+    network: z.ZodDefault<z.ZodBoolean>;
+    filesystem: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    network: boolean;
+    filesystem: boolean;
+}, {
+    network?: boolean | undefined;
+    filesystem?: boolean | undefined;
+}>;
+declare const McpServerSchema: z.ZodObject<{
+    name: z.ZodString;
+    command: z.ZodString;
+    args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    permissions: z.ZodDefault<z.ZodObject<{
+        network: z.ZodDefault<z.ZodBoolean>;
+        filesystem: z.ZodDefault<z.ZodBoolean>;
+    }, "strip", z.ZodTypeAny, {
+        network: boolean;
+        filesystem: boolean;
+    }, {
+        network?: boolean | undefined;
+        filesystem?: boolean | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    command: string;
+    args: string[];
+    env: Record<string, string>;
+    permissions: {
+        network: boolean;
+        filesystem: boolean;
+    };
+}, {
+    name: string;
+    command: string;
+    args?: string[] | undefined;
+    env?: Record<string, string> | undefined;
+    permissions?: {
+        network?: boolean | undefined;
+        filesystem?: boolean | undefined;
+    } | undefined;
+}>;
+declare const McpConfigSchema: z.ZodObject<{
+    servers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        command: z.ZodString;
+        args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        permissions: z.ZodDefault<z.ZodObject<{
+            network: z.ZodDefault<z.ZodBoolean>;
+            filesystem: z.ZodDefault<z.ZodBoolean>;
+        }, "strip", z.ZodTypeAny, {
+            network: boolean;
+            filesystem: boolean;
+        }, {
+            network?: boolean | undefined;
+            filesystem?: boolean | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        command: string;
+        args: string[];
+        env: Record<string, string>;
+        permissions: {
+            network: boolean;
+            filesystem: boolean;
+        };
+    }, {
+        name: string;
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        permissions?: {
+            network?: boolean | undefined;
+            filesystem?: boolean | undefined;
+        } | undefined;
+    }>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    servers: {
+        name: string;
+        command: string;
+        args: string[];
+        env: Record<string, string>;
+        permissions: {
+            network: boolean;
+            filesystem: boolean;
+        };
+    }[];
+}, {
+    servers?: {
+        name: string;
+        command: string;
+        args?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        permissions?: {
+            network?: boolean | undefined;
+            filesystem?: boolean | undefined;
+        } | undefined;
+    }[] | undefined;
+}>;
+export type McpPermissions = z.infer<typeof McpPermissionsSchema>;
+export type McpServerConfig = z.infer<typeof McpServerSchema>;
+export type McpConfig = z.infer<typeof McpConfigSchema>;
 declare const SkillsConfigSchema: z.ZodObject<{
     permanent: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
     ephemeral_ttl_minutes: z.ZodDefault<z.ZodNumber>;
@@ -39,6 +144,27 @@ declare const HeartbeatConfigSchema: z.ZodObject<{
     interval?: string | undefined;
     contextId?: string | undefined;
 }>;
+declare const ContextConfigEntrySchema: z.ZodObject<{
+    name: z.ZodString;
+    tools: z.ZodDefault<z.ZodObject<{
+        whitelist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        whitelist: string[];
+    }, {
+        whitelist?: string[] | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    tools: {
+        whitelist: string[];
+    };
+}, {
+    name: string;
+    tools?: {
+        whitelist?: string[] | undefined;
+    } | undefined;
+}>;
+export type ContextConfig = z.infer<typeof ContextConfigEntrySchema>;
 export declare const ConfigSchema: z.ZodObject<{
     agent: z.ZodDefault<z.ZodObject<{
         name: z.ZodDefault<z.ZodString>;
@@ -83,34 +209,52 @@ export declare const ConfigSchema: z.ZodObject<{
     }>>;
     channels: z.ZodDefault<z.ZodObject<{
         web: z.ZodDefault<z.ZodObject<{
+            trust: z.ZodDefault<z.ZodEnum<["owner", "end-user"]>>;
+            trusted_senders: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
             enabled: z.ZodDefault<z.ZodBoolean>;
             port: z.ZodDefault<z.ZodNumber>;
         }, "strip", z.ZodTypeAny, {
             enabled: boolean;
             port: number;
+            trust: "owner" | "end-user";
+            trusted_senders: string[];
         }, {
             enabled?: boolean | undefined;
             port?: number | undefined;
+            trust?: "owner" | "end-user" | undefined;
+            trusted_senders?: string[] | undefined;
         }>>;
         whatsapp: z.ZodDefault<z.ZodObject<{
+            trust: z.ZodDefault<z.ZodEnum<["owner", "end-user"]>>;
+            trusted_senders: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
             enabled: z.ZodDefault<z.ZodBoolean>;
         }, "strip", z.ZodTypeAny, {
             enabled: boolean;
+            trust: "owner" | "end-user";
+            trusted_senders: string[];
         }, {
             enabled?: boolean | undefined;
+            trust?: "owner" | "end-user" | undefined;
+            trusted_senders?: string[] | undefined;
         }>>;
         signal: z.ZodDefault<z.ZodObject<{
+            trust: z.ZodDefault<z.ZodEnum<["owner", "end-user"]>>;
+            trusted_senders: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
             enabled: z.ZodDefault<z.ZodBoolean>;
             phoneNumber: z.ZodDefault<z.ZodString>;
             apiPort: z.ZodDefault<z.ZodNumber>;
             pollInterval: z.ZodDefault<z.ZodNumber>;
         }, "strip", z.ZodTypeAny, {
             enabled: boolean;
+            trust: "owner" | "end-user";
+            trusted_senders: string[];
             phoneNumber: string;
             apiPort: number;
             pollInterval: number;
         }, {
             enabled?: boolean | undefined;
+            trust?: "owner" | "end-user" | undefined;
+            trusted_senders?: string[] | undefined;
             phoneNumber?: string | undefined;
             apiPort?: number | undefined;
             pollInterval?: number | undefined;
@@ -119,12 +263,18 @@ export declare const ConfigSchema: z.ZodObject<{
         web: {
             enabled: boolean;
             port: number;
+            trust: "owner" | "end-user";
+            trusted_senders: string[];
         };
         whatsapp: {
             enabled: boolean;
+            trust: "owner" | "end-user";
+            trusted_senders: string[];
         };
         signal: {
             enabled: boolean;
+            trust: "owner" | "end-user";
+            trusted_senders: string[];
             phoneNumber: string;
             apiPort: number;
             pollInterval: number;
@@ -133,12 +283,18 @@ export declare const ConfigSchema: z.ZodObject<{
         web?: {
             enabled?: boolean | undefined;
             port?: number | undefined;
+            trust?: "owner" | "end-user" | undefined;
+            trusted_senders?: string[] | undefined;
         } | undefined;
         whatsapp?: {
             enabled?: boolean | undefined;
+            trust?: "owner" | "end-user" | undefined;
+            trusted_senders?: string[] | undefined;
         } | undefined;
         signal?: {
             enabled?: boolean | undefined;
+            trust?: "owner" | "end-user" | undefined;
+            trusted_senders?: string[] | undefined;
             phoneNumber?: string | undefined;
             apiPort?: number | undefined;
             pollInterval?: number | undefined;
@@ -175,6 +331,8 @@ export declare const ConfigSchema: z.ZodObject<{
             custom_compaction: z.ZodDefault<z.ZodBoolean>;
             scheduler_tool: z.ZodDefault<z.ZodBoolean>;
             token_meter: z.ZodDefault<z.ZodBoolean>;
+            mcp: z.ZodDefault<z.ZodBoolean>;
+            injection_guard: z.ZodDefault<z.ZodBoolean>;
         }, "strip", z.ZodTypeAny, {
             sandbox: boolean;
             confirm_destructive: boolean;
@@ -184,6 +342,8 @@ export declare const ConfigSchema: z.ZodObject<{
             custom_compaction: boolean;
             scheduler_tool: boolean;
             token_meter: boolean;
+            mcp: boolean;
+            injection_guard: boolean;
         }, {
             sandbox?: boolean | undefined;
             confirm_destructive?: boolean | undefined;
@@ -193,6 +353,8 @@ export declare const ConfigSchema: z.ZodObject<{
             custom_compaction?: boolean | undefined;
             scheduler_tool?: boolean | undefined;
             token_meter?: boolean | undefined;
+            mcp?: boolean | undefined;
+            injection_guard?: boolean | undefined;
         }>>;
     }, "strip", z.ZodTypeAny, {
         core: {
@@ -204,6 +366,8 @@ export declare const ConfigSchema: z.ZodObject<{
             custom_compaction: boolean;
             scheduler_tool: boolean;
             token_meter: boolean;
+            mcp: boolean;
+            injection_guard: boolean;
         };
     }, {
         core?: {
@@ -215,6 +379,8 @@ export declare const ConfigSchema: z.ZodObject<{
             custom_compaction?: boolean | undefined;
             scheduler_tool?: boolean | undefined;
             token_meter?: boolean | undefined;
+            mcp?: boolean | undefined;
+            injection_guard?: boolean | undefined;
         } | undefined;
     }>>;
     routing: z.ZodDefault<z.ZodObject<{
@@ -313,10 +479,144 @@ export declare const ConfigSchema: z.ZodObject<{
         ephemeral_ttl_minutes?: number | undefined;
         catalog_path?: string | undefined;
     }>>;
+    mcp: z.ZodDefault<z.ZodObject<{
+        servers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            command: z.ZodString;
+            args: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+            permissions: z.ZodDefault<z.ZodObject<{
+                network: z.ZodDefault<z.ZodBoolean>;
+                filesystem: z.ZodDefault<z.ZodBoolean>;
+            }, "strip", z.ZodTypeAny, {
+                network: boolean;
+                filesystem: boolean;
+            }, {
+                network?: boolean | undefined;
+                filesystem?: boolean | undefined;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            name: string;
+            command: string;
+            args: string[];
+            env: Record<string, string>;
+            permissions: {
+                network: boolean;
+                filesystem: boolean;
+            };
+        }, {
+            name: string;
+            command: string;
+            args?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+            permissions?: {
+                network?: boolean | undefined;
+                filesystem?: boolean | undefined;
+            } | undefined;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        servers: {
+            name: string;
+            command: string;
+            args: string[];
+            env: Record<string, string>;
+            permissions: {
+                network: boolean;
+                filesystem: boolean;
+            };
+        }[];
+    }, {
+        servers?: {
+            name: string;
+            command: string;
+            args?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+            permissions?: {
+                network?: boolean | undefined;
+                filesystem?: boolean | undefined;
+            } | undefined;
+        }[] | undefined;
+    }>>;
+    permissions: z.ZodDefault<z.ZodObject<{
+        violations: z.ZodDefault<z.ZodObject<{
+            log: z.ZodDefault<z.ZodBoolean>;
+        }, "strip", z.ZodTypeAny, {
+            log: boolean;
+        }, {
+            log?: boolean | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        violations: {
+            log: boolean;
+        };
+    }, {
+        violations?: {
+            log?: boolean | undefined;
+        } | undefined;
+    }>>;
+    security: z.ZodDefault<z.ZodObject<{
+        injection_guard: z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            external_source_tools: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            enabled: boolean;
+            external_source_tools: string[];
+        }, {
+            enabled?: boolean | undefined;
+            external_source_tools?: string[] | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        injection_guard: {
+            enabled: boolean;
+            external_source_tools: string[];
+        };
+    }, {
+        injection_guard?: {
+            enabled?: boolean | undefined;
+            external_source_tools?: string[] | undefined;
+        } | undefined;
+    }>>;
+    contexts: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        tools: z.ZodDefault<z.ZodObject<{
+            whitelist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            whitelist: string[];
+        }, {
+            whitelist?: string[] | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        tools: {
+            whitelist: string[];
+        };
+    }, {
+        name: string;
+        tools?: {
+            whitelist?: string[] | undefined;
+        } | undefined;
+    }>, "many">>;
 }, "strip", z.ZodTypeAny, {
     sandbox: {
         mode: "os" | "docker";
     };
+    mcp: {
+        servers: {
+            name: string;
+            command: string;
+            args: string[];
+            env: Record<string, string>;
+            permissions: {
+                network: boolean;
+                filesystem: boolean;
+            };
+        }[];
+    };
+    permissions: {
+        violations: {
+            log: boolean;
+        };
+    };
     agent: {
         name: string;
         runner: string;
@@ -332,12 +632,18 @@ export declare const ConfigSchema: z.ZodObject<{
         web: {
             enabled: boolean;
             port: number;
+            trust: "owner" | "end-user";
+            trusted_senders: string[];
         };
         whatsapp: {
             enabled: boolean;
+            trust: "owner" | "end-user";
+            trusted_senders: string[];
         };
         signal: {
             enabled: boolean;
+            trust: "owner" | "end-user";
+            trusted_senders: string[];
             phoneNumber: string;
             apiPort: number;
             pollInterval: number;
@@ -359,6 +665,8 @@ export declare const ConfigSchema: z.ZodObject<{
             custom_compaction: boolean;
             scheduler_tool: boolean;
             token_meter: boolean;
+            mcp: boolean;
+            injection_guard: boolean;
         };
     };
     routing: {
@@ -393,10 +701,39 @@ export declare const ConfigSchema: z.ZodObject<{
         ephemeral_ttl_minutes: number;
         catalog_path: string;
     };
+    security: {
+        injection_guard: {
+            enabled: boolean;
+            external_source_tools: string[];
+        };
+    };
+    contexts: {
+        name: string;
+        tools: {
+            whitelist: string[];
+        };
+    }[];
 }, {
     sandbox?: {
         mode?: "os" | "docker" | undefined;
     } | undefined;
+    mcp?: {
+        servers?: {
+            name: string;
+            command: string;
+            args?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+            permissions?: {
+                network?: boolean | undefined;
+                filesystem?: boolean | undefined;
+            } | undefined;
+        }[] | undefined;
+    } | undefined;
+    permissions?: {
+        violations?: {
+            log?: boolean | undefined;
+        } | undefined;
+    } | undefined;
     agent?: {
         name?: string | undefined;
         runner?: string | undefined;
@@ -412,12 +749,18 @@ export declare const ConfigSchema: z.ZodObject<{
         web?: {
             enabled?: boolean | undefined;
             port?: number | undefined;
+            trust?: "owner" | "end-user" | undefined;
+            trusted_senders?: string[] | undefined;
         } | undefined;
         whatsapp?: {
             enabled?: boolean | undefined;
+            trust?: "owner" | "end-user" | undefined;
+            trusted_senders?: string[] | undefined;
         } | undefined;
         signal?: {
             enabled?: boolean | undefined;
+            trust?: "owner" | "end-user" | undefined;
+            trusted_senders?: string[] | undefined;
             phoneNumber?: string | undefined;
             apiPort?: number | undefined;
             pollInterval?: number | undefined;
@@ -439,6 +782,8 @@ export declare const ConfigSchema: z.ZodObject<{
             custom_compaction?: boolean | undefined;
             scheduler_tool?: boolean | undefined;
             token_meter?: boolean | undefined;
+            mcp?: boolean | undefined;
+            injection_guard?: boolean | undefined;
         } | undefined;
     } | undefined;
     routing?: {
@@ -473,6 +818,18 @@ export declare const ConfigSchema: z.ZodObject<{
         ephemeral_ttl_minutes?: number | undefined;
         catalog_path?: string | undefined;
     } | undefined;
+    security?: {
+        injection_guard?: {
+            enabled?: boolean | undefined;
+            external_source_tools?: string[] | undefined;
+        } | undefined;
+    } | undefined;
+    contexts?: {
+        name: string;
+        tools?: {
+            whitelist?: string[] | undefined;
+        } | undefined;
+    }[] | undefined;
 }>;
 export type Config = z.infer<typeof ConfigSchema>;
 export type SearchConfig = z.infer<typeof SearchConfigSchema>;

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiCxB,QAAA,MAAM,kBAAkB;;;;;;;;;;;;EAItB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAuD9D,QAAA,MAAM,kBAAkB;;;;;;;;;;;;EAItB,CAAC;AAEH,QAAA,MAAM,qBAAqB;;;;;;;;;;;;EAIzB,CAAC;AAEH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAavB,CAAC;AAEH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAClD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAIpE,eAAO,MAAM,aAAa,EAAE,MAA+B,CAAC;AAI5D,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAID,wBAAgB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAyCtD;AAID,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAepE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA+BxB,QAAA,MAAM,oBAAoB;;;;;;;;;EAGxB,CAAC;AAEH,QAAA,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMnB,CAAC;AAEH,QAAA,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEnB,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAC9D,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAMxD,QAAA,MAAM,kBAAkB;;;;;;;;;;;;EAItB,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AA+D9D,QAAA,MAAM,kBAAkB;;;;;;;;;;;;EAItB,CAAC;AAEH,QAAA,MAAM,qBAAqB;;;;;;;;;;;;EAIzB,CAAC;AAuBH,QAAA,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;EAG5B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAErE,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiBvB,CAAC;AAEH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAClD,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAIpE,eAAO,MAAM,aAAa,EAAE,MAA+B,CAAC;AAI5D,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAID,wBAAgB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAyCtD;AAID,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAepE"}

package/dist/config.js

@@ -24,6 +24,22 @@ const ExtensionsCoreConfigSchema = z.object({
     custom_compaction: z.boolean().default(true),
     scheduler_tool: z.boolean().default(true),
     token_meter: z.boolean().default(true),
+    mcp: z.boolean().default(true),
+    injection_guard: z.boolean().default(true),
+});
+const McpPermissionsSchema = z.object({
+    network: z.boolean().default(false),
+    filesystem: z.boolean().default(false),
+});
+const McpServerSchema = z.object({
+    name: z.string().min(1),
+    command: z.string().min(1),
+    args: z.array(z.string()).default([]),
+    env: z.record(z.string()).default({}),
+    permissions: McpPermissionsSchema.default({}),
+});
+const McpConfigSchema = z.object({
+    servers: z.array(McpServerSchema).default([]),
 });
 const ExtensionsConfigSchema = z.object({
     core: ExtensionsCoreConfigSchema.default({}),
@@ -33,18 +49,25 @@ const SkillsConfigSchema = z.object({
     ephemeral_ttl_minutes: z.number().int().min(1).default(60),
     catalog_path: z.string().default(''),
 });
+const ChannelTrustFields = {
+    trust: z.enum(['owner', 'end-user']).default('owner'),
+    trusted_senders: z.array(z.string()).default([]),
+};
 const WebChannelSchema = z.object({
     enabled: z.boolean().default(true),
     port: z.number().int().default(3000),
+    ...ChannelTrustFields,
 });
 const WhatsAppChannelSchema = z.object({
     enabled: z.boolean().default(false),
+    ...ChannelTrustFields,
 });
 const SignalChannelSchema = z.object({
     enabled: z.boolean().default(false),
     phoneNumber: z.string().default(''),
     apiPort: z.number().int().default(8080),
     pollInterval: z.number().int().default(1000),
+    ...ChannelTrustFields,
 });
 const ChannelsConfigSchema = z.object({
     web: WebChannelSchema.default({}),
@@ -85,6 +108,26 @@ const HeartbeatConfigSchema = z.object({
     interval: z.string().default('every 5m'),
     contextId: z.string().default('main'),
 });
+const ViolationConfigSchema = z.object({
+    log: z.boolean().default(true),
+});
+const PermissionsConfigSchema = z.object({
+    violations: ViolationConfigSchema.default({}),
+});
+const InjectionGuardConfigSchema = z.object({
+    enabled: z.boolean().default(true),
+    external_source_tools: z.array(z.string()).default(['fetch_url', 'web_fetch']),
+});
+const SecurityConfigSchema = z.object({
+    injection_guard: InjectionGuardConfigSchema.default({}),
+});
+const ContextToolsSchema = z.object({
+    whitelist: z.array(z.string()).default([]),
+});
+const ContextConfigEntrySchema = z.object({
+    name: z.string(),
+    tools: ContextToolsSchema.default({}),
+});
 export const ConfigSchema = z.object({
     agent: AgentConfigSchema.default({}),
     channels: ChannelsConfigSchema.default({}),
@@ -98,6 +141,10 @@ export const ConfigSchema = z.object({
     search: SearchConfigSchema.default({}),
     heartbeat: HeartbeatConfigSchema.default({}),
     skills: SkillsConfigSchema.default({}),
+    mcp: McpConfigSchema.default({}),
+    permissions: PermissionsConfigSchema.default({}),
+    security: SecurityConfigSchema.default({}),
+    contexts: z.array(ContextConfigEntrySchema).default([]),
 });
 // ─── Defaults ────────────────────────────────────────────────────────────────
 export const defaultConfig = ConfigSchema.parse({});

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACpF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAU,OAAO,EAAE,MAAM,IAAI,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAEhF,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAChC,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ;CACzD,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9C,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1C,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACvC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC5C,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACvC,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,0BAA0B,CAAC,OAAO,CAAC,EAAE,CAAC;CAC7C,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACrC,CAAC,CAAC;AAGH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACrC,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACpC,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACvC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAC7C,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,GAAG,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;IACjC,QAAQ,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;CACxC,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CAC7C,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACpF,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC;IAChC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACnD,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CACvD,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC9C,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,UAAU;CACpE,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACrC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvG,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC;CAC5D,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;CACtC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;IACpC,QAAQ,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACtC,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,eAAe,EAAE,2BAA2B,CAAC,OAAO,CAAC,EAAE,CAAC;IACxD,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACtC,SAAS,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;CACvC,CAAC,CAAC;AAMH,gFAAgF;AAEhF,MAAM,CAAC,MAAM,aAAa,GAAW,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAE5D,gFAAgF;AAEhF,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;AACpD,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,UAAU,CAAC,UAAmB;IAC5C,MAAM,IAAI,GAAG,UAAU,IAAI,oBAAoB,EAAE,CAAC;IAElD,IAAI,GAAG,GAAY,EAAE,CAAC;IAEtB,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEvC,uCAAuC;IACvC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACjB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAClC,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,iBAA+C,CAAC;QAC1E,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;IAC/B,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACtD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,UAAmB;IAC5D,MAAM,IAAI,GAAG,UAAU,IAAI,oBAAoB,EAAE,CAAC;IAElD,0BAA0B;IAC1B,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAE3B,0BAA0B;IAC1B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9C,wEAAwE;IACxE,0EAA0E;IAC1E,8EAA8E;IAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC9E,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACjE,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACpF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAU,OAAO,EAAE,MAAM,IAAI,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAEhF,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAChC,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ;CACzD,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9C,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1C,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACvC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC5C,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACtC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAC3C,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAK,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACvC,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAS,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAM,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,IAAI,EAAS,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,GAAG,EAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C,WAAW,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;CAC9C,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC9C,CAAC,CAAC;AAMH,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,0BAA0B,CAAC,OAAO,CAAC,EAAE,CAAC;CAC7C,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACrC,CAAC,CAAC;AAGH,MAAM,kBAAkB,GAAG;IACzB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACrD,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACjD,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACpC,GAAG,kBAAkB;CACtB,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,GAAG,kBAAkB;CACtB,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACvC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC5C,GAAG,kBAAkB;CACtB,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,GAAG,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;IACjC,QAAQ,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;CACxC,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CAC7C,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACpF,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC;IAChC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACnD,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CACvD,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC9C,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,UAAU;CACpE,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACrC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvG,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC;CAC5D,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;CACtC,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;CAC9C,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;CAC/E,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,eAAe,EAAE,0BAA0B,CAAC,OAAO,CAAC,EAAE,CAAC;CACxD,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC3C,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;CACtC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;IACpC,QAAQ,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACtC,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,eAAe,EAAE,2BAA2B,CAAC,OAAO,CAAC,EAAE,CAAC;IACxD,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACtC,SAAS,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;IACtC,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAChC,WAAW,EAAE,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,QAAQ,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxD,CAAC,CAAC;AAMH,gFAAgF;AAEhF,MAAM,CAAC,MAAM,aAAa,GAAW,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAE5D,gFAAgF;AAEhF,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;AACpD,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,UAAU,CAAC,UAAmB;IAC5C,MAAM,IAAI,GAAG,UAAU,IAAI,oBAAoB,EAAE,CAAC;IAElD,IAAI,GAAG,GAAY,EAAE,CAAC;IAEtB,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEvC,uCAAuC;IACvC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACjB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAClC,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,iBAA+C,CAAC;QAC1E,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;IAC/B,CAAC;IAED,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACtD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,UAAmB;IAC5D,MAAM,IAAI,GAAG,UAAU,IAAI,oBAAoB,EAAE,CAAC;IAElD,0BAA0B;IAC1B,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAE3B,0BAA0B;IAC1B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9C,wEAAwE;IACxE,0EAA0E;IAC1E,8EAA8E;IAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,mBAAmB,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC9E,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACjE,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAC5B,CAAC"}

package/dist/extensions/injection-guard.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Injection Guard Extension
+ *
+ * Defends against prompt injection attacks via two layers:
+ *   - Layer 1 (message wrapping): done in PiAgentRunner.prompt() — not here
+ *   - Layer 2 (external content policy): injects a standing instruction into
+ *     the system prompt via before_agent_start, reminding the model to treat
+ *     results from declared external-source tools as data only.
+ */
+import type { ExtensionAPI } from '@mariozechner/pi-coding-agent';
+import type { Config } from '../config.js';
+export default function injectionGuardExtension(pi: ExtensionAPI, config: Config): void;
+//# sourceMappingURL=injection-guard.d.ts.map

package/dist/extensions/injection-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection-guard.d.ts","sourceRoot":"","sources":["../../src/extensions/injection-guard.ts"],"names":[],"mappings":"AACA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE3C,MAAM,CAAC,OAAO,UAAU,uBAAuB,CAAC,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAqBtF"}