scoutline 0.1.0 → 0.2.0

package/dist/lib/output.d.ts

@@ -1,6 +1,19 @@
 /**
- * Output formatting for Scoutline
+ * Output formatting for Scoutline.
+ *
+ * This Module exposes the pure, invocation-local output contract from
+ * DESIGN.md §3: OUTPUT_MODES, OutputMode, isOutputMode,
+ * formatSuccessOutput, and formatErrorOutput. The pure `success` and
+ * `error` response builders are retained as utility constructors.
+ *
+ * P1-10 removed the mutable output surface: there is no module-level output
+ * mode, no mode setter/getter, no side-effecting success/error writers, no
+ * output-mode environment mutation, and no console writes or process
+ * termination here. Command presentation and process writes flow through
+ * `invokeCommand` and the Node Adapter.
  */
+export declare const OUTPUT_MODES: readonly ["data", "json", "pretty", "compact", "markdown", "refs", "tty"];
+export type OutputMode = (typeof OUTPUT_MODES)[number];
 export interface SuccessResponse<T = unknown> {
     success: true;
     data: T;
@@ -13,12 +26,45 @@ export interface ErrorResponse {
     help?: string;
 }
 export type Response<T = unknown> = SuccessResponse<T> | ErrorResponse;
-export type OutputMode = "data" | "json" | "pretty" | "compact" | "markdown" | "refs" | "tty";
-export declare function setOutputMode(mode: OutputMode): void;
-export declare function getOutputMode(): OutputMode;
+export declare function isOutputMode(value: unknown): value is OutputMode;
+/**
+ * Pure success formatter.
+ *
+ * - `data` mode emits the raw JSON-encoded data (no success envelope).
+ * - `json` / `pretty` modes emit the success envelope with the timestamp
+ *   taken from the injected `now` (defaults to `Date.now`). `pretty` uses
+ *   2-space indentation.
+ * - Text-oriented modes (`compact`, `markdown`, `refs`, `tty`) return the
+ *   explicitly selected command presentation override when `data` carries
+ *   one (i.e. `data.presentations[mode]` is a string). Otherwise they
+ *   fall back to the JSON-encoded data.
+ *
+ * The function performs no I/O and mutates no shared state.
+ */
+export declare function formatSuccessOutput<T>(data: T, mode: OutputMode, now?: () => number): string;
+/**
+ * Pure error formatter. Inspects the value through duck typing so this
+ * Module does not have to import from `./errors.js` (avoids a circular
+ * dependency with the error hierarchy).
+ *
+ * Recognises a ScoutlineError-shaped object (one carrying `message` and
+ * `code`) and surfaces `help` and `statusCode` when present. Plain
+ * `Error` instances and unknown values fall through to `UNKNOWN_ERROR`.
+ * `pretty` mode indents; all other modes emit compact JSON.
+ *
+ * The public envelope contains only the documented fields — `success`,
+ * `error`, `code`, optional `help`, optional `statusCode` — so stack,
+ * cause, raw response body, and any non-envelope property of the input
+ * are never serialised. Credential-shaped substrings inside `help` and
+ * `error` are redacted.
+ *
+ * The optional `secrets` argument lets a caller thread the credentials
+ * resolved from an injected environment (e.g. `MainDependencies.env`)
+ * into redaction, so a secret that exists only in the injected env —
+ * and not in ambient `process.env` — is still redacted (Fixup B — B3).
+ * When omitted, configured secrets are read from `process.env`.
+ */
+export declare function formatErrorOutput(value: unknown, mode: OutputMode, secrets?: string[]): string;
 export declare function success<T>(data: T): SuccessResponse<T>;
 export declare function error(message: string, code?: string, help?: string): ErrorResponse;
-export declare function output<T>(response: Response<T>): void;
-export declare function outputSuccess<T>(data: T): void;
-export declare function outputError(message: string, code?: string, help?: string): void;
 //# sourceMappingURL=output.d.ts.map

package/dist/lib/output.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/lib/output.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE,CAAC,CAAC;IACR,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,QAAQ,CAAC,CAAC,GAAG,OAAO,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC;AAEvE,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,GAAG,KAAK,CAAC;AAI9F,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAGpD;AAED,wBAAgB,aAAa,IAAI,UAAU,CAE1C;AAED,wBAAgB,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAMtD;AAED,wBAAgB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,aAAa,CAOlF;AAED,wBAAgB,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAGrD;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAwB9C;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAI/E"}
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../src/lib/output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH,eAAO,MAAM,YAAY,YACvB,MAAM,EACN,MAAM,EACN,QAAQ,EACR,SAAS,EACT,UAAU,EACV,MAAM,EACN,KAAK,CACG,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE,CAAC,CAAC;IACR,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,QAAQ,CAAC,CAAC,GAAG,OAAO,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC;AAEvE,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAEhE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,IAAI,EAAE,CAAC,EACP,IAAI,EAAE,UAAU,EAChB,GAAG,GAAE,MAAM,MAAiB,GAC3B,MAAM,CA2BR;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CA2C9F;AAWD,wBAAgB,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAMtD;AAED,wBAAgB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,aAAa,CAOlF"}

package/dist/lib/output.js

@@ -1,14 +1,133 @@
 /**
- * Output formatting for Scoutline
+ * Output formatting for Scoutline.
+ *
+ * This Module exposes the pure, invocation-local output contract from
+ * DESIGN.md §3: OUTPUT_MODES, OutputMode, isOutputMode,
+ * formatSuccessOutput, and formatErrorOutput. The pure `success` and
+ * `error` response builders are retained as utility constructors.
+ *
+ * P1-10 removed the mutable output surface: there is no module-level output
+ * mode, no mode setter/getter, no side-effecting success/error writers, no
+ * output-mode environment mutation, and no console writes or process
+ * termination here. Command presentation and process writes flow through
+ * `invokeCommand` and the Node Adapter.
  */
-let outputMode = process.env.ZAI_OUTPUT_MODE || "data";
-export function setOutputMode(mode) {
-    outputMode = mode;
-    process.env.ZAI_OUTPUT_MODE = mode;
+import { redactCredentialString, configuredSecrets } from "./redact.js";
+export const OUTPUT_MODES = [
+    "data",
+    "json",
+    "pretty",
+    "compact",
+    "markdown",
+    "refs",
+    "tty",
+];
+export function isOutputMode(value) {
+    return typeof value === "string" && OUTPUT_MODES.includes(value);
 }
-export function getOutputMode() {
-    return outputMode;
+/**
+ * Pure success formatter.
+ *
+ * - `data` mode emits the raw JSON-encoded data (no success envelope).
+ * - `json` / `pretty` modes emit the success envelope with the timestamp
+ *   taken from the injected `now` (defaults to `Date.now`). `pretty` uses
+ *   2-space indentation.
+ * - Text-oriented modes (`compact`, `markdown`, `refs`, `tty`) return the
+ *   explicitly selected command presentation override when `data` carries
+ *   one (i.e. `data.presentations[mode]` is a string). Otherwise they
+ *   fall back to the JSON-encoded data.
+ *
+ * The function performs no I/O and mutates no shared state.
+ */
+export function formatSuccessOutput(data, mode, now = Date.now) {
+    if (mode === "data") {
+        return JSON.stringify(data);
+    }
+    if (mode === "json" || mode === "pretty") {
+        const indent = mode === "pretty" ? 2 : 0;
+        return JSON.stringify({ success: true, data, timestamp: now() }, null, indent);
+    }
+    // Text-oriented modes: prefer an explicitly selected command
+    // presentation override carried on `data.presentations`.
+    if (data !== null &&
+        typeof data === "object" &&
+        "presentations" in data &&
+        data.presentations !== null &&
+        typeof data.presentations === "object") {
+        const presentations = data.presentations;
+        const override = presentations[mode];
+        if (typeof override === "string") {
+            return override;
+        }
+    }
+    return JSON.stringify(data);
 }
+/**
+ * Pure error formatter. Inspects the value through duck typing so this
+ * Module does not have to import from `./errors.js` (avoids a circular
+ * dependency with the error hierarchy).
+ *
+ * Recognises a ScoutlineError-shaped object (one carrying `message` and
+ * `code`) and surfaces `help` and `statusCode` when present. Plain
+ * `Error` instances and unknown values fall through to `UNKNOWN_ERROR`.
+ * `pretty` mode indents; all other modes emit compact JSON.
+ *
+ * The public envelope contains only the documented fields — `success`,
+ * `error`, `code`, optional `help`, optional `statusCode` — so stack,
+ * cause, raw response body, and any non-envelope property of the input
+ * are never serialised. Credential-shaped substrings inside `help` and
+ * `error` are redacted.
+ *
+ * The optional `secrets` argument lets a caller thread the credentials
+ * resolved from an injected environment (e.g. `MainDependencies.env`)
+ * into redaction, so a secret that exists only in the injected env —
+ * and not in ambient `process.env` — is still redacted (Fixup B — B3).
+ * When omitted, configured secrets are read from `process.env`.
+ */
+export function formatErrorOutput(value, mode, secrets) {
+    const indent = mode === "pretty" ? 2 : 0;
+    const resolvedSecrets = secrets ?? configuredSecrets();
+    let payload;
+    const isShapedError = value !== null && typeof value === "object" && "message" in value && "code" in value;
+    if (isShapedError) {
+        const err = value;
+        const rawError = typeof err.message === "string" ? err.message : String(err.message);
+        payload = {
+            success: false,
+            error: redactCredentialString(rawError, resolvedSecrets),
+            code: typeof err.code === "string" ? err.code : "UNKNOWN_ERROR",
+        };
+        if (typeof err.help === "string" && err.help.length > 0) {
+            payload.help = redactCredentialString(err.help, resolvedSecrets);
+        }
+        if (typeof err.statusCode === "number") {
+            payload.statusCode = err.statusCode;
+        }
+    }
+    else if (value instanceof Error) {
+        payload = {
+            success: false,
+            error: redactCredentialString(value.message, resolvedSecrets),
+            code: "UNKNOWN_ERROR",
+        };
+    }
+    else {
+        payload = {
+            success: false,
+            error: redactCredentialString(String(value), resolvedSecrets),
+            code: "UNKNOWN_ERROR",
+        };
+    }
+    return JSON.stringify(payload, null, indent);
+}
+// ---------------------------------------------------------------------------
+// Pure response builders. These construct plain response objects and perform
+// no I/O. They are retained as utility constructors; the side-effecting
+// mutable output surface (mode setter/getter, the success/error writers, the
+// module-level mode variable, output-mode env mutation, and process
+// termination) was removed in P1-10. Command presentation and process writes
+// now flow exclusively through `invokeCommand` and the Node Adapter.
+// ---------------------------------------------------------------------------
 export function success(data) {
     return {
         success: true,
@@ -24,36 +143,4 @@ export function error(message, code, help) {
         ...(help && { help }),
     };
 }
-export function output(response) {
-    const pretty = outputMode === "pretty";
-    console.log(JSON.stringify(response, null, pretty ? 2 : 0));
-}
-export function outputSuccess(data) {
-    // Search-specific text formats; data is expected to be a pre-formatted string.
-    if (outputMode === "compact" ||
-        outputMode === "markdown" ||
-        outputMode === "refs" ||
-        outputMode === "tty") {
-        if (typeof data === "string") {
-            console.log(data);
-            return;
-        }
-        console.log(JSON.stringify(data, null, 0));
-        return;
-    }
-    if (outputMode === "data") {
-        if (typeof data === "string") {
-            console.log(data);
-            return;
-        }
-        console.log(JSON.stringify(data, null, 0));
-        return;
-    }
-    output(success(data));
-}
-export function outputError(message, code, help) {
-    const pretty = outputMode === "pretty";
-    console.error(JSON.stringify(error(message, code, help), null, pretty ? 2 : 0));
-    process.exit(1);
-}
 //# sourceMappingURL=output.js.map

package/dist/lib/output.js.map

@@ -1 +1 @@
-{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/lib/output.ts"],"names":[],"mappings":"AAAA;;GAEG;AAmBH,IAAI,UAAU,GAAgB,OAAO,CAAC,GAAG,CAAC,eAA8B,IAAI,MAAM,CAAC;AAEnF,MAAM,UAAU,aAAa,CAAC,IAAgB;IAC5C,UAAU,GAAG,IAAI,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,OAAO,CAAI,IAAO;IAChC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,OAAe,EAAE,IAAa,EAAE,IAAa;IACjE,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,OAAO;QACd,GAAG,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,MAAM,CAAI,QAAqB;IAC7C,MAAM,MAAM,GAAG,UAAU,KAAK,QAAQ,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,aAAa,CAAI,IAAO;IACtC,+EAA+E;IAC/E,IACE,UAAU,KAAK,SAAS;QACxB,UAAU,KAAK,UAAU;QACzB,UAAU,KAAK,MAAM;QACrB,UAAU,KAAK,KAAK,EACpB,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IACD,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,IAAa,EAAE,IAAa;IACvE,MAAM,MAAM,GAAG,UAAU,KAAK,QAAQ,CAAC;IACvC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/lib/output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAExE,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,MAAM;IACN,MAAM;IACN,QAAQ;IACR,SAAS;IACT,UAAU;IACV,MAAM;IACN,KAAK;CACG,CAAC;AAmBX,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,YAAkC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAO,EACP,IAAgB,EAChB,GAAG,GAAiB,IAAI,CAAC,GAAG;IAE5B,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACjF,CAAC;IAED,6DAA6D;IAC7D,yDAAyD;IACzD,IACE,IAAI,KAAK,IAAI;QACb,OAAO,IAAI,KAAK,QAAQ;QACxB,eAAe,IAAI,IAAI;QACtB,IAAoC,CAAC,aAAa,KAAK,IAAI;QAC5D,OAAQ,IAAoC,CAAC,aAAa,KAAK,QAAQ,EACvE,CAAC;QACD,MAAM,aAAa,GAAI,IAAmD,CAAC,aAAa,CAAC;QACzF,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,IAAgB,EAAE,OAAkB;IACpF,MAAM,MAAM,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,eAAe,GAAG,OAAO,IAAI,iBAAiB,EAAE,CAAC;IAEvD,IAAI,OAAgC,CAAC;IAErC,MAAM,aAAa,GACjB,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,IAAI,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;IAEvF,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,KAKX,CAAC;QACF,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrF,OAAO,GAAG;YACR,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,sBAAsB,CAAC,QAAQ,EAAE,eAAe,CAAC;YACxD,IAAI,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe;SAChE,CAAC;QACF,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,OAAO,CAAC,IAAI,GAAG,sBAAsB,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YACvC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACtC,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAClC,OAAO,GAAG;YACR,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC;YAC7D,IAAI,EAAE,eAAe;SACtB,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,GAAG;YACR,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;YAC7D,IAAI,EAAE,eAAe;SACtB,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED,8EAA8E;AAC9E,6EAA6E;AAC7E,wEAAwE;AACxE,6EAA6E;AAC7E,oEAAoE;AACpE,6EAA6E;AAC7E,qEAAqE;AACrE,8EAA8E;AAE9E,MAAM,UAAU,OAAO,CAAI,IAAO;IAChC,OAAO;QACL,OAAO,EAAE,IAAI;QACb,IAAI;QACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,OAAe,EAAE,IAAa,EAAE,IAAa;IACjE,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,OAAO;QACd,GAAG,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;KACtB,CAAC;AACJ,CAAC"}

package/dist/lib/redact.d.ts

@@ -1,7 +1,66 @@
 /**
- * Redact sensitive values from tool metadata (for output + caching).
+ * Recursive Provider credential redaction (DESIGN.md §16).
+ *
+ * This Module is the single source of truth for stripping Provider
+ * credentials before any value leaves Scoutline's outward boundaries:
+ * formatted errors, cached metadata, quota failures, diagnostics output,
+ * and fatal shell errors.
+ *
+ * Redaction properties (Phase 4 P4-01):
+ *   - Case-insensitive for the canonical credential-shaped keys.
+ *   - Recursive through nested arrays and plain objects.
+ *   - Non-mutating — the original input is never modified.
+ *   - Secret-aware — every configured secret value is replaced inside
+ *     any string the value tree reaches, not just the configured key.
+ *   - Empty-safe — empty strings are never treated as a replacement token.
+ *
+ * The Module retains the legacy `redactSecrets(value, apiKey?)` and
+ * `redactTool(tool)` exports so existing call sites keep compiling.
+ * New code should pass an explicit array of secrets so every Provider's
+ * credential is covered in one pass.
  */
 import type { Tool } from "@utcp/sdk";
-export declare function redactSecrets(value: unknown, apiKey?: string): unknown;
-export declare function redactTool(tool: Tool): Tool;
+/**
+ * Replace credential-shaped substrings inside a single string. Useful
+ * for error messages and load-failure texts where the value is a flat
+ * string rather than a structured object.
+ *
+ * Replaces:
+ *   - Bearer authorization values (any case).
+ *   - x-api-key assignments (any case; `=`, `:`, or whitespace as the
+ *     key/value separator — covers both `x-api-key=value` and
+ *     `x-api-key value`).
+ *   - Z_AI_API_KEY, ZAI_API_KEY, MINIMAX_API_KEY assignments.
+ *   - The literal credentials passed in `extraSecrets` (each value is
+ *     replaced wherever it appears; empty strings are skipped).
+ */
+export declare function redactCredentialString(input: string, extraSecrets?: string | string[]): string;
+/**
+ * Resolve the configured Provider credential values from the current
+ * process environment. Returned values are deduplicated and empty
+ * entries skipped, so callers can pass the result directly to
+ * {@link redactSecrets}.
+ */
+export declare function configuredSecrets(env?: NodeJS.ProcessEnv): string[];
+/**
+ * Recursively redact credential values from an arbitrary tree.
+ *
+ * Accepts either a single string (back-compat overload) or an array of
+ * secret values. Returns a NEW value tree; the input is never mutated.
+ *
+ * Key matching is case-insensitive over {@link CREDENTIAL_KEYS}. Plain
+ * objects and arrays are descended into. Other object kinds (Date,
+ * typed arrays, class instances) are returned as-is so their internal
+ * state is not reflected.
+ */
+export declare function redactSecrets(value: unknown, secrets?: string | string[]): unknown;
+/**
+ * Redact credential-shaped fields from a Tool's metadata tree.
+ *
+ * Back-compat: when called with a single argument the function reads
+ * the configured Provider credentials from the current process
+ * environment. When called with an explicit secrets argument, the
+ * caller's value is used instead.
+ */
+export declare function redactTool(tool: Tool, secrets?: string | string[]): Tool;
 //# sourceMappingURL=redact.d.ts.map

package/dist/lib/redact.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/lib/redact.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAwBtC,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAoBtE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAI3C"}
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/lib/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAqBtC;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,MAAM,CA0B9F;AAuBD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,EAAE,CAOhF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO,CAiClF;AAQD;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAMxE"}

package/dist/lib/redact.js

@@ -1,50 +1,184 @@
 /**
- * Redact sensitive values from tool metadata (for output + caching).
+ * Recursive Provider credential redaction (DESIGN.md §16).
+ *
+ * This Module is the single source of truth for stripping Provider
+ * credentials before any value leaves Scoutline's outward boundaries:
+ * formatted errors, cached metadata, quota failures, diagnostics output,
+ * and fatal shell errors.
+ *
+ * Redaction properties (Phase 4 P4-01):
+ *   - Case-insensitive for the canonical credential-shaped keys.
+ *   - Recursive through nested arrays and plain objects.
+ *   - Non-mutating — the original input is never modified.
+ *   - Secret-aware — every configured secret value is replaced inside
+ *     any string the value tree reaches, not just the configured key.
+ *   - Empty-safe — empty strings are never treated as a replacement token.
+ *
+ * The Module retains the legacy `redactSecrets(value, apiKey?)` and
+ * `redactTool(tool)` exports so existing call sites keep compiling.
+ * New code should pass an explicit array of secrets so every Provider's
+ * credential is covered in one pass.
  */
-const REDACT_KEYS = new Set([
+/**
+ * Canonical credential-shaped key names. Lowercased so case-insensitive
+ * matching is a one-step compare. Covers every name DESIGN.md §16
+ * enumerates plus the common HTTP header aliases.
+ */
+const CREDENTIAL_KEYS = new Set([
     "authorization",
-    "Authorization",
+    "x-api-key",
     "api_key",
-    "apiKey",
+    "apikey",
     "access_token",
     "token",
-    "Z_AI_API_KEY",
-    "ZAI_API_KEY",
+    "z_ai_api_key",
+    "zai_api_key",
+    "minimax_api_key",
 ]);
-function redactString(value, apiKey) {
-    let result = value;
-    if (apiKey && result.includes(apiKey)) {
-        result = result.replaceAll(apiKey, "[REDACTED]");
-    }
-    if (/^Bearer\s+\S+/.test(result)) {
-        result = result.replace(/Bearer\s+\S+/, "Bearer [REDACTED]");
+const REDACTED = "[REDACTED]";
+/**
+ * Replace credential-shaped substrings inside a single string. Useful
+ * for error messages and load-failure texts where the value is a flat
+ * string rather than a structured object.
+ *
+ * Replaces:
+ *   - Bearer authorization values (any case).
+ *   - x-api-key assignments (any case; `=`, `:`, or whitespace as the
+ *     key/value separator — covers both `x-api-key=value` and
+ *     `x-api-key value`).
+ *   - Z_AI_API_KEY, ZAI_API_KEY, MINIMAX_API_KEY assignments.
+ *   - The literal credentials passed in `extraSecrets` (each value is
+ *     replaced wherever it appears; empty strings are skipped).
+ */
+export function redactCredentialString(input, extraSecrets) {
+    if (typeof input !== "string")
+        return input;
+    let result = input;
+    result = result.replace(/Bearer\s+\S+/gi, REDACTED);
+    // Fixup C — W3: the class accepts either `=`, `:`, or any whitespace
+    // as the key/value separator. The trailing `\S+` consumes the secret
+    // value; the entire `key + separator + value` span is replaced with
+    // the redaction marker.
+    result = result.replace(/x-api-key[\s=:]+[^\s,;"'`]+/gi, REDACTED);
+    result = result.replace(/Z_AI_API_KEY\s*=\s*\S+/gi, REDACTED);
+    result = result.replace(/ZAI_API_KEY\s*=\s*\S+/gi, REDACTED);
+    result = result.replace(/MINIMAX_API_KEY\s*=\s*\S+/gi, REDACTED);
+    // Embedded credential substrings inside URLs, e.g.
+    // `https://user:secret@host/path`. Catches both `https://` and
+    // `http://` schemes and replaces the entire URL with the marker so
+    // the user info does not leak.
+    result = result.replace(/https?:\/\/[^\s/:]+:[^\s@\/]+@[^\s/]+/gi, REDACTED);
+    const secrets = normalizeSecrets(extraSecrets);
+    for (const secret of secrets) {
+        if (secret.length === 0)
+            continue;
+        // Escape regex meta characters so a secret containing characters
+        // like `.` or `+` does not accidentally broaden the replacement.
+        const escaped = secret.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+        result = result.replace(new RegExp(escaped, "g"), REDACTED);
     }
     return result;
 }
-export function redactSecrets(value, apiKey) {
-    if (typeof value === "string") {
-        return redactString(value, apiKey);
+/**
+ * Normalise the `secrets` argument to a deduplicated array of
+ * non-empty strings. A `undefined` argument yields an empty list;
+ * a single string yields `[string]`; an array yields the filtered
+ * list.
+ */
+function normalizeSecrets(secrets) {
+    if (secrets === undefined)
+        return [];
+    const list = Array.isArray(secrets) ? secrets : [secrets];
+    const out = [];
+    const seen = new Set();
+    for (const item of list) {
+        if (typeof item !== "string")
+            continue;
+        if (item.length === 0)
+            continue;
+        if (seen.has(item))
+            continue;
+        seen.add(item);
+        out.push(item);
+    }
+    return out;
+}
+/**
+ * Resolve the configured Provider credential values from the current
+ * process environment. Returned values are deduplicated and empty
+ * entries skipped, so callers can pass the result directly to
+ * {@link redactSecrets}.
+ */
+export function configuredSecrets(env = process.env) {
+    const candidates = [
+        env.Z_AI_API_KEY,
+        env.ZAI_API_KEY,
+        env.MINIMAX_API_KEY,
+    ];
+    return normalizeSecrets(candidates.filter((c) => typeof c === "string"));
+}
+/**
+ * Recursively redact credential values from an arbitrary tree.
+ *
+ * Accepts either a single string (back-compat overload) or an array of
+ * secret values. Returns a NEW value tree; the input is never mutated.
+ *
+ * Key matching is case-insensitive over {@link CREDENTIAL_KEYS}. Plain
+ * objects and arrays are descended into. Other object kinds (Date,
+ * typed arrays, class instances) are returned as-is so their internal
+ * state is not reflected.
+ */
+export function redactSecrets(value, secrets) {
+    const normalized = normalizeSecrets(secrets);
+    // Fast path: primitive value or null/undefined.
+    if (value === null || value === undefined)
+        return value;
+    const t = typeof value;
+    if (t === "string") {
+        return redactCredentialString(value, normalized);
     }
+    if (t !== "object")
+        return value;
+    // Recurse through arrays.
     if (Array.isArray(value)) {
-        return value.map((item) => redactSecrets(item, apiKey));
+        return value.map((item) => redactSecrets(item, normalized));
     }
-    if (value && typeof value === "object") {
-        const obj = value;
-        const output = {};
-        for (const [key, child] of Object.entries(obj)) {
-            if (REDACT_KEYS.has(key)) {
-                output[key] = "[REDACTED]";
-                continue;
-            }
-            output[key] = redactSecrets(child, apiKey);
+    // Skip exotic non-plain objects: Date, TypedArrays, Map, Set,
+    // class instances. Plain objects descend; everything else is left
+    // untouched to avoid reflecting internal state.
+    if (!isPlainObject(value)) {
+        return value;
+    }
+    const input = value;
+    const output = {};
+    for (const key of Object.keys(input)) {
+        if (CREDENTIAL_KEYS.has(key.toLowerCase())) {
+            output[key] = REDACTED;
+            continue;
         }
-        return output;
+        output[key] = redactSecrets(input[key], normalized);
     }
-    return value;
+    return output;
+}
+function isPlainObject(value) {
+    if (value === null || typeof value !== "object")
+        return false;
+    const proto = Object.getPrototypeOf(value);
+    return proto === Object.prototype || proto === null;
 }
-export function redactTool(tool) {
-    const apiKey = process.env.Z_AI_API_KEY || process.env.ZAI_API_KEY;
+/**
+ * Redact credential-shaped fields from a Tool's metadata tree.
+ *
+ * Back-compat: when called with a single argument the function reads
+ * the configured Provider credentials from the current process
+ * environment. When called with an explicit secrets argument, the
+ * caller's value is used instead.
+ */
+export function redactTool(tool, secrets) {
+    const resolved = secrets === undefined
+        ? configuredSecrets()
+        : normalizeSecrets(secrets);
     const clone = JSON.parse(JSON.stringify(tool));
-    return redactSecrets(clone, apiKey);
+    return redactSecrets(clone, resolved);
 }
 //# sourceMappingURL=redact.js.map

package/dist/lib/redact.js.map

@@ -1 +1 @@
-{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/lib/redact.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,eAAe;IACf,eAAe;IACf,SAAS;IACT,QAAQ;IACR,cAAc;IACd,OAAO;IACP,cAAc;IACd,aAAa;CACd,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,KAAa,EAAE,MAAe;IAClD,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,MAAe;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;gBAC3B,SAAS;YACX,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAU;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAS,CAAC;IACvD,OAAO,aAAa,CAAC,KAAK,EAAE,MAAM,CAAS,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/lib/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH;;;;GAIG;AACH,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,eAAe;IACf,WAAW;IACX,SAAS;IACT,QAAQ;IACR,cAAc;IACd,OAAO;IACP,cAAc;IACd,aAAa;IACb,iBAAiB;CAClB,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAa,EAAE,YAAgC;IACpF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACpD,qEAAqE;IACrE,qEAAqE;IACrE,oEAAoE;IACpE,wBAAwB;IACxB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,+BAA+B,EAAE,QAAQ,CAAC,CAAC;IACnE,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,0BAA0B,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC;IAC7D,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,6BAA6B,EAAE,QAAQ,CAAC,CAAC;IACjE,mDAAmD;IACnD,+DAA+D;IAC/D,mEAAmE;IACnE,+BAA+B;IAC/B,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,yCAAyC,EAAE,QAAQ,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC/C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAClC,iEAAiE;QACjE,iEAAiE;QACjE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,OAA2B;IACnD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QACvC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACpE,MAAM,UAAU,GAA8B;QAC5C,GAAG,CAAC,YAAY;QAChB,GAAG,CAAC,WAAW;QACf,GAAG,CAAC,eAAe;KACpB,CAAC;IACF,OAAO,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,OAA2B;IACvE,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAE7C,gDAAgD;IAChD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,CAAC,GAAG,OAAO,KAAK,CAAC;IACvB,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnB,OAAO,sBAAsB,CAAC,KAAe,EAAE,UAAU,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAEjC,0BAA0B;IAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,8DAA8D;IAC9D,kEAAkE;IAClE,gDAAgD;IAChD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;YACvB,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACtD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,IAAU,EAAE,OAA2B;IAChE,MAAM,QAAQ,GAAG,OAAO,KAAK,SAAS;QACpC,CAAC,CAAC,iBAAiB,EAAE;QACrB,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAS,CAAC;IACvD,OAAO,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAS,CAAC;AAChD,CAAC"}

package/dist/lib/tty.d.ts

@@ -36,25 +36,12 @@ interface SearchResultLike {
     occurrences?: number;
 }
 export declare function formatSearchResultsPretty(results: SearchResultLike[]): string;
-interface QuotaLike {
-    plan?: string;
-    timeWindow?: {
-        used?: number;
-        limit?: number;
-        remaining?: number;
-        percentage?: number;
-        windowHours?: number;
-        resetsIn?: string | null;
-        byTool?: Array<{
-            modelCode?: string;
-            usage?: number;
-        }>;
-    } | null;
-    tokens?: {
-        percentage?: number;
-        resetsIn?: string | null;
-    } | null;
-}
-export declare function formatQuotaPretty(q: QuotaLike): string;
+import type { QuotaDashboard } from "../capabilities/quota.js";
+/**
+ * Provider-neutral TTY rendering of a {@link QuotaDashboard}. Each
+ * Provider entry is labelled with its Provider id and each category by
+ * its normalized name; progress bars represent the REMAINING percentage.
+ */
+export declare function formatQuotaDashboard(dashboard: QuotaDashboard): string;
 export {};
 //# sourceMappingURL=tty.d.ts.map

package/dist/lib/tty.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tty.d.ts","sourceRoot":"","sources":["../../src/lib/tty.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,KAAK,OAAO,GAAG,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;AAUrC,eAAO,MAAM,KAAK;IAChB,IAAI;IACJ,GAAG;IACH,IAAI;IACJ,KAAK;IACL,MAAM;IACN,GAAG;IACH,OAAO;IACP,IAAI;CACL,CAAC;AAEF,wBAAgB,KAAK,IAAI,OAAO,CAE/B;AAED,uFAAuF;AACvF,wBAAgB,cAAc,CAC5B,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,IAAI,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAClD,KAAK,GAAG,SAAS,CAKnB;AAED,UAAU,gBAAgB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAe7E;AAED,UAAU,SAAS;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE;QACX,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,MAAM,CAAC,EAAE,KAAK,CAAC;YAAE,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;KACxD,GAAG,IAAI,CAAC;IACT,MAAM,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACnE;AAUD,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,SAAS,GAAG,MAAM,CAqCtD"}
+{"version":3,"file":"tty.d.ts","sourceRoot":"","sources":["../../src/lib/tty.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,KAAK,OAAO,GAAG,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;AAUrC,eAAO,MAAM,KAAK;IAChB,IAAI;IACJ,GAAG;IACH,IAAI;IACJ,KAAK;IACL,MAAM;IACN,GAAG;IACH,OAAO;IACP,IAAI;CACL,CAAC;AAEF,wBAAgB,KAAK,IAAI,OAAO,CAE/B;AAED,uFAAuF;AACvF,wBAAgB,cAAc,CAC5B,cAAc,EAAE,MAAM,GAAG,SAAS,EAClC,IAAI,EAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,GAClD,KAAK,GAAG,SAAS,CAKnB;AAED,UAAU,gBAAgB;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAe7E;AAED,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAsE/D;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,cAAc,GAAG,MAAM,CAkBtE"}