signetai 0.200.29 → 0.203.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/mcp-stdio.js CHANGED
@@ -1,4 +1,5 @@
1
1
  #!/usr/bin/env node
2
+ import { createRequire } from "node:module";
2
3
  var __create = Object.create;
3
4
  var __getProtoOf = Object.getPrototypeOf;
4
5
  var __defProp = Object.defineProperty;
@@ -43,6 +44,7 @@ var __export = (target, all) => {
43
44
  set: __exportSetter.bind(all, name)
44
45
  });
45
46
  };
47
+ var __require = /* @__PURE__ */ createRequire(import.meta.url);
46
48
 
47
49
  // ../../node_modules/.bun/ajv@8.18.0/node_modules/ajv/dist/compile/codegen/code.js
48
50
  var require_code = __commonJS((exports) => {
@@ -6724,6 +6726,591 @@ var require_base64_js = __commonJS((exports) => {
6724
6726
  }
6725
6727
  });
6726
6728
 
6729
+ // ../../node_modules/.bun/@napi-rs+keyring-linux-x64-musl@1.3.0/node_modules/@napi-rs/keyring-linux-x64-musl/keyring.linux-x64-musl.node
6730
+ var require_keyring_linux_x64_musl = __commonJS((exports, module3) => {
6731
+ module3.exports = __require("./keyring.linux-x64-musl-gxd42x54.node");
6732
+ });
6733
+
6734
+ // ../../node_modules/.bun/@napi-rs+keyring-linux-x64-musl@1.3.0/node_modules/@napi-rs/keyring-linux-x64-musl/package.json
6735
+ var require_package = __commonJS((exports, module3) => {
6736
+ module3.exports = {
6737
+ name: "@napi-rs/keyring-linux-x64-musl",
6738
+ version: "1.3.0",
6739
+ cpu: [
6740
+ "x64"
6741
+ ],
6742
+ main: "keyring.linux-x64-musl.node",
6743
+ files: [
6744
+ "keyring.linux-x64-musl.node"
6745
+ ],
6746
+ description: "https://github.com/hwchen/keyring-rs Node.js binding via https://napi.rs",
6747
+ keywords: [
6748
+ "napi-rs",
6749
+ "NAPI",
6750
+ "N-API",
6751
+ "Rust",
6752
+ "node-addon",
6753
+ "node-addon-api"
6754
+ ],
6755
+ license: "MIT",
6756
+ engines: {
6757
+ node: ">= 10"
6758
+ },
6759
+ repository: "https://github.com/Brooooooklyn/keyring-node",
6760
+ publishConfig: {
6761
+ registry: "https://registry.npmjs.org/",
6762
+ access: "public"
6763
+ },
6764
+ os: [
6765
+ "linux"
6766
+ ],
6767
+ libc: [
6768
+ "musl"
6769
+ ]
6770
+ };
6771
+ });
6772
+
6773
+ // ../../node_modules/.bun/@napi-rs+keyring-linux-x64-gnu@1.3.0/node_modules/@napi-rs/keyring-linux-x64-gnu/keyring.linux-x64-gnu.node
6774
+ var require_keyring_linux_x64_gnu = __commonJS((exports, module3) => {
6775
+ module3.exports = __require("./keyring.linux-x64-gnu-0wbgnj90.node");
6776
+ });
6777
+
6778
+ // ../../node_modules/.bun/@napi-rs+keyring-linux-x64-gnu@1.3.0/node_modules/@napi-rs/keyring-linux-x64-gnu/package.json
6779
+ var require_package2 = __commonJS((exports, module3) => {
6780
+ module3.exports = {
6781
+ name: "@napi-rs/keyring-linux-x64-gnu",
6782
+ version: "1.3.0",
6783
+ cpu: [
6784
+ "x64"
6785
+ ],
6786
+ main: "keyring.linux-x64-gnu.node",
6787
+ files: [
6788
+ "keyring.linux-x64-gnu.node"
6789
+ ],
6790
+ description: "https://github.com/hwchen/keyring-rs Node.js binding via https://napi.rs",
6791
+ keywords: [
6792
+ "napi-rs",
6793
+ "NAPI",
6794
+ "N-API",
6795
+ "Rust",
6796
+ "node-addon",
6797
+ "node-addon-api"
6798
+ ],
6799
+ license: "MIT",
6800
+ engines: {
6801
+ node: ">= 10"
6802
+ },
6803
+ repository: "https://github.com/Brooooooklyn/keyring-node",
6804
+ publishConfig: {
6805
+ registry: "https://registry.npmjs.org/",
6806
+ access: "public"
6807
+ },
6808
+ os: [
6809
+ "linux"
6810
+ ],
6811
+ libc: [
6812
+ "glibc"
6813
+ ]
6814
+ };
6815
+ });
6816
+
6817
+ // ../../node_modules/.bun/@napi-rs+keyring@1.3.0/node_modules/@napi-rs/keyring/index.js
6818
+ var require_keyring = __commonJS((exports, module3) => {
6819
+ var __filename = "/home/runner/work/signetai/signetai/node_modules/.bun/@napi-rs+keyring@1.3.0/node_modules/@napi-rs/keyring/index.js";
6820
+ var { createRequire: createRequire5 } = __require("node:module");
6821
+ __require = createRequire5(__filename);
6822
+ var { readFileSync: readFileSync3 } = __require("node:fs");
6823
+ var nativeBinding = null;
6824
+ var loadErrors = [];
6825
+ var isMusl = () => {
6826
+ let musl = false;
6827
+ if (process.platform === "linux") {
6828
+ musl = isMuslFromFilesystem();
6829
+ if (musl === null) {
6830
+ musl = isMuslFromReport();
6831
+ }
6832
+ if (musl === null) {
6833
+ musl = isMuslFromChildProcess();
6834
+ }
6835
+ }
6836
+ return musl;
6837
+ };
6838
+ var isFileMusl = (f) => f.includes("libc.musl-") || f.includes("ld-musl-");
6839
+ var isMuslFromFilesystem = () => {
6840
+ try {
6841
+ return readFileSync3("/usr/bin/ldd", "utf-8").includes("musl");
6842
+ } catch {
6843
+ return null;
6844
+ }
6845
+ };
6846
+ var isMuslFromReport = () => {
6847
+ let report = null;
6848
+ if (typeof process.report?.getReport === "function") {
6849
+ process.report.excludeNetwork = true;
6850
+ report = process.report.getReport();
6851
+ }
6852
+ if (!report) {
6853
+ return null;
6854
+ }
6855
+ if (report.header && report.header.glibcVersionRuntime) {
6856
+ return false;
6857
+ }
6858
+ if (Array.isArray(report.sharedObjects)) {
6859
+ if (report.sharedObjects.some(isFileMusl)) {
6860
+ return true;
6861
+ }
6862
+ }
6863
+ return false;
6864
+ };
6865
+ var isMuslFromChildProcess = () => {
6866
+ try {
6867
+ return __require("child_process").execSync("ldd --version", { encoding: "utf8" }).includes("musl");
6868
+ } catch (e) {
6869
+ return false;
6870
+ }
6871
+ };
6872
+ function requireNative() {
6873
+ if (process.env.NAPI_RS_NATIVE_LIBRARY_PATH) {
6874
+ try {
6875
+ nativeBinding = __require(process.env.NAPI_RS_NATIVE_LIBRARY_PATH);
6876
+ } catch (err) {
6877
+ loadErrors.push(err);
6878
+ }
6879
+ } else if (process.platform === "android") {
6880
+ if (process.arch === "arm64") {
6881
+ try {
6882
+ return (()=>{throw new Error("Cannot require module "+"./keyring.android-arm64.node");})();
6883
+ } catch (e) {
6884
+ loadErrors.push(e);
6885
+ }
6886
+ try {
6887
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-android-arm64");})();
6888
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-android-arm64/package.json");})().version;
6889
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
6890
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
6891
+ }
6892
+ return binding;
6893
+ } catch (e) {
6894
+ loadErrors.push(e);
6895
+ }
6896
+ } else if (process.arch === "arm") {
6897
+ try {
6898
+ return (()=>{throw new Error("Cannot require module "+"./keyring.android-arm-eabi.node");})();
6899
+ } catch (e) {
6900
+ loadErrors.push(e);
6901
+ }
6902
+ try {
6903
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-android-arm-eabi");})();
6904
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-android-arm-eabi/package.json");})().version;
6905
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
6906
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
6907
+ }
6908
+ return binding;
6909
+ } catch (e) {
6910
+ loadErrors.push(e);
6911
+ }
6912
+ } else {
6913
+ loadErrors.push(new Error(`Unsupported architecture on Android ${process.arch}`));
6914
+ }
6915
+ } else if (process.platform === "win32") {
6916
+ if (process.arch === "x64") {
6917
+ try {
6918
+ return (()=>{throw new Error("Cannot require module "+"./keyring.win32-x64-msvc.node");})();
6919
+ } catch (e) {
6920
+ loadErrors.push(e);
6921
+ }
6922
+ try {
6923
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-win32-x64-msvc");})();
6924
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-win32-x64-msvc/package.json");})().version;
6925
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
6926
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
6927
+ }
6928
+ return binding;
6929
+ } catch (e) {
6930
+ loadErrors.push(e);
6931
+ }
6932
+ } else if (process.arch === "ia32") {
6933
+ try {
6934
+ return (()=>{throw new Error("Cannot require module "+"./keyring.win32-ia32-msvc.node");})();
6935
+ } catch (e) {
6936
+ loadErrors.push(e);
6937
+ }
6938
+ try {
6939
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-win32-ia32-msvc");})();
6940
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-win32-ia32-msvc/package.json");})().version;
6941
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
6942
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
6943
+ }
6944
+ return binding;
6945
+ } catch (e) {
6946
+ loadErrors.push(e);
6947
+ }
6948
+ } else if (process.arch === "arm64") {
6949
+ try {
6950
+ return (()=>{throw new Error("Cannot require module "+"./keyring.win32-arm64-msvc.node");})();
6951
+ } catch (e) {
6952
+ loadErrors.push(e);
6953
+ }
6954
+ try {
6955
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-win32-arm64-msvc");})();
6956
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-win32-arm64-msvc/package.json");})().version;
6957
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
6958
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
6959
+ }
6960
+ return binding;
6961
+ } catch (e) {
6962
+ loadErrors.push(e);
6963
+ }
6964
+ } else {
6965
+ loadErrors.push(new Error(`Unsupported architecture on Windows: ${process.arch}`));
6966
+ }
6967
+ } else if (process.platform === "darwin") {
6968
+ try {
6969
+ return (()=>{throw new Error("Cannot require module "+"./keyring.darwin-universal.node");})();
6970
+ } catch (e) {
6971
+ loadErrors.push(e);
6972
+ }
6973
+ try {
6974
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-darwin-universal");})();
6975
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-darwin-universal/package.json");})().version;
6976
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
6977
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
6978
+ }
6979
+ return binding;
6980
+ } catch (e) {
6981
+ loadErrors.push(e);
6982
+ }
6983
+ if (process.arch === "x64") {
6984
+ try {
6985
+ return (()=>{throw new Error("Cannot require module "+"./keyring.darwin-x64.node");})();
6986
+ } catch (e) {
6987
+ loadErrors.push(e);
6988
+ }
6989
+ try {
6990
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-darwin-x64");})();
6991
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-darwin-x64/package.json");})().version;
6992
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
6993
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
6994
+ }
6995
+ return binding;
6996
+ } catch (e) {
6997
+ loadErrors.push(e);
6998
+ }
6999
+ } else if (process.arch === "arm64") {
7000
+ try {
7001
+ return (()=>{throw new Error("Cannot require module "+"./keyring.darwin-arm64.node");})();
7002
+ } catch (e) {
7003
+ loadErrors.push(e);
7004
+ }
7005
+ try {
7006
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-darwin-arm64");})();
7007
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-darwin-arm64/package.json");})().version;
7008
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
7009
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
7010
+ }
7011
+ return binding;
7012
+ } catch (e) {
7013
+ loadErrors.push(e);
7014
+ }
7015
+ } else {
7016
+ loadErrors.push(new Error(`Unsupported architecture on macOS: ${process.arch}`));
7017
+ }
7018
+ } else if (process.platform === "freebsd") {
7019
+ if (process.arch === "x64") {
7020
+ try {
7021
+ return (()=>{throw new Error("Cannot require module "+"./keyring.freebsd-x64.node");})();
7022
+ } catch (e) {
7023
+ loadErrors.push(e);
7024
+ }
7025
+ try {
7026
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-freebsd-x64");})();
7027
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-freebsd-x64/package.json");})().version;
7028
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
7029
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
7030
+ }
7031
+ return binding;
7032
+ } catch (e) {
7033
+ loadErrors.push(e);
7034
+ }
7035
+ } else if (process.arch === "arm64") {
7036
+ try {
7037
+ return (()=>{throw new Error("Cannot require module "+"./keyring.freebsd-arm64.node");})();
7038
+ } catch (e) {
7039
+ loadErrors.push(e);
7040
+ }
7041
+ try {
7042
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-freebsd-arm64");})();
7043
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-freebsd-arm64/package.json");})().version;
7044
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
7045
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
7046
+ }
7047
+ return binding;
7048
+ } catch (e) {
7049
+ loadErrors.push(e);
7050
+ }
7051
+ } else {
7052
+ loadErrors.push(new Error(`Unsupported architecture on FreeBSD: ${process.arch}`));
7053
+ }
7054
+ } else if (process.platform === "linux") {
7055
+ if (process.arch === "x64") {
7056
+ if (isMusl()) {
7057
+ try {
7058
+ return (()=>{throw new Error("Cannot require module "+"./keyring.linux-x64-musl.node");})();
7059
+ } catch (e) {
7060
+ loadErrors.push(e);
7061
+ }
7062
+ try {
7063
+ const binding = require_keyring_linux_x64_musl();
7064
+ const bindingPackageVersion = require_package().version;
7065
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
7066
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
7067
+ }
7068
+ return binding;
7069
+ } catch (e) {
7070
+ loadErrors.push(e);
7071
+ }
7072
+ } else {
7073
+ try {
7074
+ return (()=>{throw new Error("Cannot require module "+"./keyring.linux-x64-gnu.node");})();
7075
+ } catch (e) {
7076
+ loadErrors.push(e);
7077
+ }
7078
+ try {
7079
+ const binding = require_keyring_linux_x64_gnu();
7080
+ const bindingPackageVersion = require_package2().version;
7081
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
7082
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
7083
+ }
7084
+ return binding;
7085
+ } catch (e) {
7086
+ loadErrors.push(e);
7087
+ }
7088
+ }
7089
+ } else if (process.arch === "arm64") {
7090
+ if (isMusl()) {
7091
+ try {
7092
+ return (()=>{throw new Error("Cannot require module "+"./keyring.linux-arm64-musl.node");})();
7093
+ } catch (e) {
7094
+ loadErrors.push(e);
7095
+ }
7096
+ try {
7097
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-linux-arm64-musl");})();
7098
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-linux-arm64-musl/package.json");})().version;
7099
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
7100
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
7101
+ }
7102
+ return binding;
7103
+ } catch (e) {
7104
+ loadErrors.push(e);
7105
+ }
7106
+ } else {
7107
+ try {
7108
+ return (()=>{throw new Error("Cannot require module "+"./keyring.linux-arm64-gnu.node");})();
7109
+ } catch (e) {
7110
+ loadErrors.push(e);
7111
+ }
7112
+ try {
7113
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-linux-arm64-gnu");})();
7114
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-linux-arm64-gnu/package.json");})().version;
7115
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
7116
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
7117
+ }
7118
+ return binding;
7119
+ } catch (e) {
7120
+ loadErrors.push(e);
7121
+ }
7122
+ }
7123
+ } else if (process.arch === "arm") {
7124
+ if (isMusl()) {
7125
+ try {
7126
+ return (()=>{throw new Error("Cannot require module "+"./keyring.linux-arm-musleabihf.node");})();
7127
+ } catch (e) {
7128
+ loadErrors.push(e);
7129
+ }
7130
+ try {
7131
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-linux-arm-musleabihf");})();
7132
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-linux-arm-musleabihf/package.json");})().version;
7133
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
7134
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
7135
+ }
7136
+ return binding;
7137
+ } catch (e) {
7138
+ loadErrors.push(e);
7139
+ }
7140
+ } else {
7141
+ try {
7142
+ return (()=>{throw new Error("Cannot require module "+"./keyring.linux-arm-gnueabihf.node");})();
7143
+ } catch (e) {
7144
+ loadErrors.push(e);
7145
+ }
7146
+ try {
7147
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-linux-arm-gnueabihf");})();
7148
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-linux-arm-gnueabihf/package.json");})().version;
7149
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
7150
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
7151
+ }
7152
+ return binding;
7153
+ } catch (e) {
7154
+ loadErrors.push(e);
7155
+ }
7156
+ }
7157
+ } else if (process.arch === "riscv64") {
7158
+ if (isMusl()) {
7159
+ try {
7160
+ return (()=>{throw new Error("Cannot require module "+"./keyring.linux-riscv64-musl.node");})();
7161
+ } catch (e) {
7162
+ loadErrors.push(e);
7163
+ }
7164
+ try {
7165
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-linux-riscv64-musl");})();
7166
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-linux-riscv64-musl/package.json");})().version;
7167
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
7168
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
7169
+ }
7170
+ return binding;
7171
+ } catch (e) {
7172
+ loadErrors.push(e);
7173
+ }
7174
+ } else {
7175
+ try {
7176
+ return (()=>{throw new Error("Cannot require module "+"./keyring.linux-riscv64-gnu.node");})();
7177
+ } catch (e) {
7178
+ loadErrors.push(e);
7179
+ }
7180
+ try {
7181
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-linux-riscv64-gnu");})();
7182
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-linux-riscv64-gnu/package.json");})().version;
7183
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
7184
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
7185
+ }
7186
+ return binding;
7187
+ } catch (e) {
7188
+ loadErrors.push(e);
7189
+ }
7190
+ }
7191
+ } else if (process.arch === "ppc64") {
7192
+ try {
7193
+ return (()=>{throw new Error("Cannot require module "+"./keyring.linux-ppc64-gnu.node");})();
7194
+ } catch (e) {
7195
+ loadErrors.push(e);
7196
+ }
7197
+ try {
7198
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-linux-ppc64-gnu");})();
7199
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-linux-ppc64-gnu/package.json");})().version;
7200
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
7201
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
7202
+ }
7203
+ return binding;
7204
+ } catch (e) {
7205
+ loadErrors.push(e);
7206
+ }
7207
+ } else if (process.arch === "s390x") {
7208
+ try {
7209
+ return (()=>{throw new Error("Cannot require module "+"./keyring.linux-s390x-gnu.node");})();
7210
+ } catch (e) {
7211
+ loadErrors.push(e);
7212
+ }
7213
+ try {
7214
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-linux-s390x-gnu");})();
7215
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-linux-s390x-gnu/package.json");})().version;
7216
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
7217
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
7218
+ }
7219
+ return binding;
7220
+ } catch (e) {
7221
+ loadErrors.push(e);
7222
+ }
7223
+ } else {
7224
+ loadErrors.push(new Error(`Unsupported architecture on Linux: ${process.arch}`));
7225
+ }
7226
+ } else if (process.platform === "openharmony") {
7227
+ if (process.arch === "arm64") {
7228
+ try {
7229
+ return (()=>{throw new Error("Cannot require module "+"./keyring.openharmony-arm64.node");})();
7230
+ } catch (e) {
7231
+ loadErrors.push(e);
7232
+ }
7233
+ try {
7234
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-openharmony-arm64");})();
7235
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-openharmony-arm64/package.json");})().version;
7236
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
7237
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
7238
+ }
7239
+ return binding;
7240
+ } catch (e) {
7241
+ loadErrors.push(e);
7242
+ }
7243
+ } else if (process.arch === "x64") {
7244
+ try {
7245
+ return (()=>{throw new Error("Cannot require module "+"./keyring.openharmony-x64.node");})();
7246
+ } catch (e) {
7247
+ loadErrors.push(e);
7248
+ }
7249
+ try {
7250
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-openharmony-x64");})();
7251
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-openharmony-x64/package.json");})().version;
7252
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
7253
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
7254
+ }
7255
+ return binding;
7256
+ } catch (e) {
7257
+ loadErrors.push(e);
7258
+ }
7259
+ } else if (process.arch === "arm") {
7260
+ try {
7261
+ return (()=>{throw new Error("Cannot require module "+"./keyring.openharmony-arm.node");})();
7262
+ } catch (e) {
7263
+ loadErrors.push(e);
7264
+ }
7265
+ try {
7266
+ const binding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-openharmony-arm");})();
7267
+ const bindingPackageVersion = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-openharmony-arm/package.json");})().version;
7268
+ if (bindingPackageVersion !== "1.3.0" && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== "0") {
7269
+ throw new Error(`Native binding package version mismatch, expected 1.3.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`);
7270
+ }
7271
+ return binding;
7272
+ } catch (e) {
7273
+ loadErrors.push(e);
7274
+ }
7275
+ } else {
7276
+ loadErrors.push(new Error(`Unsupported architecture on OpenHarmony: ${process.arch}`));
7277
+ }
7278
+ } else {
7279
+ loadErrors.push(new Error(`Unsupported OS: ${process.platform}, architecture: ${process.arch}`));
7280
+ }
7281
+ }
7282
+ nativeBinding = requireNative();
7283
+ if (!nativeBinding || process.env.NAPI_RS_FORCE_WASI) {
7284
+ try {
7285
+ nativeBinding = (()=>{throw new Error("Cannot require module "+"./keyring.wasi.cjs");})();
7286
+ } catch (err) {
7287
+ if (process.env.NAPI_RS_FORCE_WASI) {
7288
+ loadErrors.push(err);
7289
+ }
7290
+ }
7291
+ if (!nativeBinding) {
7292
+ try {
7293
+ nativeBinding = (()=>{throw new Error("Cannot require module "+"@napi-rs/keyring-wasm32-wasi");})();
7294
+ } catch (err) {
7295
+ if (process.env.NAPI_RS_FORCE_WASI) {
7296
+ loadErrors.push(err);
7297
+ }
7298
+ }
7299
+ }
7300
+ }
7301
+ if (!nativeBinding) {
7302
+ if (loadErrors.length > 0) {
7303
+ throw new Error(`Cannot find native binding. ` + `npm has a bug related to optional dependencies (https://github.com/npm/cli/issues/4828). ` + "Please try `npm i` again after removing both package-lock.json and node_modules directory.", { cause: loadErrors });
7304
+ }
7305
+ throw new Error(`Failed to load native binding`);
7306
+ }
7307
+ module3.exports = nativeBinding;
7308
+ module3.exports.AsyncEntry = nativeBinding.AsyncEntry;
7309
+ module3.exports.Entry = nativeBinding.Entry;
7310
+ module3.exports.findCredentials = nativeBinding.findCredentials;
7311
+ module3.exports.findCredentialsAsync = nativeBinding.findCredentialsAsync;
7312
+ });
7313
+
6727
7314
  // ../../platform/daemon/src/mcp-stdio.ts
6728
7315
  import { existsSync as existsSync12, statSync as statSync3 } from "node:fs";
6729
7316
  import { isAbsolute } from "node:path";
@@ -29385,13 +29972,13 @@ var EMPTY_COMPLETION_RESULT = {
29385
29972
  };
29386
29973
 
29387
29974
  // ../../platform/core/dist/index.js
29388
- import { createRequire } from "node:module";
29975
+ import { createRequire as createRequire2 } from "node:module";
29389
29976
  import { dirname, join } from "node:path";
29390
29977
  import { fileURLToPath } from "node:url";
29391
29978
  import { createHash } from "node:crypto";
29392
29979
  import { homedir as homedir2 } from "os";
29393
29980
  import { join as join2 } from "path";
29394
- import { createRequire as createRequire2 } from "node:module";
29981
+ import { createRequire as createRequire22 } from "node:module";
29395
29982
  import { existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync4, renameSync as renameSync2, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "node:fs";
29396
29983
  import { homedir as homedir5 } from "node:os";
29397
29984
  import { dirname as dirname4, join as join7, resolve as resolve2 } from "node:path";
@@ -29429,7 +30016,7 @@ var __toESM2 = (mod, isNodeMode, target) => {
29429
30016
  return to;
29430
30017
  };
29431
30018
  var __commonJS2 = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
29432
- var __require = /* @__PURE__ */ createRequire(import.meta.url);
30019
+ var __require2 = /* @__PURE__ */ createRequire2(import.meta.url);
29433
30020
  var require_identity = __commonJS2((exports) => {
29434
30021
  var ALIAS = Symbol.for("yaml.alias");
29435
30022
  var DOC = Symbol.for("yaml.document");
@@ -30967,7 +31554,7 @@ ${ctx.indent}`;
30967
31554
  exports.stringifyPair = stringifyPair;
30968
31555
  });
30969
31556
  var require_log = __commonJS2((exports) => {
30970
- var node_process = __require("process");
31557
+ var node_process = __require2("process");
30971
31558
  function debug(logLevel, ...messages) {
30972
31559
  if (logLevel === "debug")
30973
31560
  console.log(...messages);
@@ -31768,7 +32355,7 @@ var require_schema2 = __commonJS2((exports) => {
31768
32355
  exports.schema = schema;
31769
32356
  });
31770
32357
  var require_binary = __commonJS2((exports) => {
31771
- var node_buffer = __require("buffer");
32358
+ var node_buffer = __require2("buffer");
31772
32359
  var Scalar = require_Scalar();
31773
32360
  var stringifyString = require_stringifyString();
31774
32361
  var binary = {
@@ -34075,7 +34662,7 @@ var require_compose_doc = __commonJS2((exports) => {
34075
34662
  exports.composeDoc = composeDoc;
34076
34663
  });
34077
34664
  var require_composer = __commonJS2((exports) => {
34078
- var node_process = __require("process");
34665
+ var node_process = __require2("process");
34079
34666
  var directives = require_directives();
34080
34667
  var Document = require_Document();
34081
34668
  var errors3 = require_errors2();
@@ -35286,7 +35873,7 @@ var require_line_counter = __commonJS2((exports) => {
35286
35873
  exports.LineCounter = LineCounter;
35287
35874
  });
35288
35875
  var require_parser = __commonJS2((exports) => {
35289
- var node_process = __require("process");
35876
+ var node_process = __require2("process");
35290
35877
  var cst = require_cst();
35291
35878
  var lexer = require_lexer();
35292
35879
  function includesToken(list, type) {
@@ -40925,6 +41512,12 @@ function up131(db) {
40925
41512
  ON dreaming_evidence_consumption(agent_id, pass_id, delivered_offset, source_length);
40926
41513
  `);
40927
41514
  }
41515
+ function up132(db) {
41516
+ db.exec(`
41517
+ CREATE INDEX IF NOT EXISTS idx_epistemic_assertions_observer_entity
41518
+ ON epistemic_assertions(agent_id, subject_entity_id, status, asserted_at DESC, created_at DESC);
41519
+ `);
41520
+ }
40928
41521
  var MIGRATIONS = [
40929
41522
  {
40930
41523
  version: 1,
@@ -41973,6 +42566,12 @@ var MIGRATIONS = [
41973
42566
  name: "dreaming-evidence-consumption",
41974
42567
  up: up131,
41975
42568
  artifacts: { tables: ["dreaming_evidence_consumption"] }
42569
+ },
42570
+ {
42571
+ version: 132,
42572
+ name: "observer-scoped-epistemic-assertions",
42573
+ up: up132,
42574
+ artifacts: { tables: ["epistemic_assertions"] }
41976
42575
  }
41977
42576
  ];
41978
42577
  var LATEST_SCHEMA_VERSION = MIGRATIONS[MIGRATIONS.length - 1]?.version ?? 0;
@@ -42151,7 +42750,7 @@ function resolveSignetDaemonUrl(opts = {}) {
42151
42750
  }
42152
42751
  var native = null;
42153
42752
  try {
42154
- const esmRequire = createRequire2(import.meta.url);
42753
+ const esmRequire = createRequire22(import.meta.url);
42155
42754
  native = esmRequire("@signet/native");
42156
42755
  } catch {}
42157
42756
  var SIGNET_SECRETS_PLUGIN_ID = "signet.secrets";
@@ -42526,7 +43125,7 @@ function classifyEntityQuality(name, type) {
42526
43125
  }
42527
43126
 
42528
43127
  // ../../platform/daemon/src/db-helpers.ts
42529
- import { createRequire as createRequire5 } from "node:module";
43128
+ import { createRequire as createRequire4 } from "node:module";
42530
43129
 
42531
43130
  // ../../platform/daemon/src/db-accessor.ts
42532
43131
  import {
@@ -43258,7 +43857,7 @@ var migrationBackupDeps = {
43258
43857
  // ../../platform/daemon/src/db-helpers.ts
43259
43858
  var native2 = null;
43260
43859
  try {
43261
- const esmRequire = createRequire5(import.meta.url);
43860
+ const esmRequire = createRequire4(import.meta.url);
43262
43861
  native2 = esmRequire("@signet/native");
43263
43862
  } catch {}
43264
43863
  function tableExists4(db, name) {
@@ -43595,7 +44194,7 @@ function findEpisodicSourceAgentIds(db, from) {
43595
44194
  }
43596
44195
  function searchEpisodicSources(db, params) {
43597
44196
  const query = params.query.trim();
43598
- const limit = Math.max(1, Math.min(Math.floor(params.limit ?? 20), 50));
44197
+ const limit = params.limit === null ? null : Math.max(1, Math.min(Math.floor(params.limit ?? 20), 50));
43599
44198
  const like = `%${query}%`;
43600
44199
  const sinceArgs = params.since !== undefined ? [params.since, EPISODIC_CAPTURED_AT_FLOOR] : [];
43601
44200
  const beforeArgs = params.before !== undefined ? [params.before] : [];
@@ -43677,7 +44276,7 @@ UNION ALL
43677
44276
  ${union3}
43678
44277
  )
43679
44278
  ORDER BY julianday(captured_at) DESC, kind ASC, id ASC
43680
- LIMIT ?`).all(...branches.flatMap((branch) => branch.args), limit);
44279
+ LIMIT ${limit === null ? -1 : "?"}`).all(...branches.flatMap((branch) => branch.args), ...limit === null ? [] : [limit]);
43681
44280
  return rows.map((row) => readEpisodicSource(db, { agentId: params.agentId, from: `${row.kind}:${row.id}` })).filter((source) => source !== null);
43682
44281
  }
43683
44282
 
@@ -46034,6 +46633,9 @@ function validateSource(db, agentId, sourceKind, sourceId) {
46034
46633
  throw new Error(`Derived memory provenance source kind is not supported: ${sourceKind}`);
46035
46634
  }
46036
46635
  }
46636
+ function validateDerivedMemorySourceInTx(db, input) {
46637
+ validateSource(db, input.agentId, input.sourceKind, input.sourceId);
46638
+ }
46037
46639
  function required4(value, field) {
46038
46640
  const normalized = value.trim();
46039
46641
  if (!normalized)
@@ -46055,7 +46657,7 @@ function linkDerivedMemorySourcesInTx(db, input) {
46055
46657
  if (seen.has(key))
46056
46658
  continue;
46057
46659
  seen.add(key);
46058
- validateSource(db, agentId, sourceKind, sourceId);
46660
+ validateDerivedMemorySourceInTx(db, { agentId, sourceKind, sourceId });
46059
46661
  insert.run(derivedMemoryId, sourceKind, sourceId, source.sourcePath?.trim() || null, agentId, createdAt);
46060
46662
  }
46061
46663
  }
@@ -49582,6 +50184,141 @@ import {
49582
50184
  } from "node:fs";
49583
50185
  import { join as join11 } from "node:path";
49584
50186
 
50187
+ // ../../platform/daemon/src/secrets-keyring.ts
50188
+ import { execFileSync } from "node:child_process";
50189
+ import { createHash as createHash3 } from "node:crypto";
50190
+ import { createRequire as createRequire5 } from "node:module";
50191
+ var SERVICE = "ai.signet.secrets";
50192
+ var require3 = createRequire5(import.meta.url);
50193
+ var modulePromise = null;
50194
+ var syncModule;
50195
+ var adapterForTests = null;
50196
+ function workspaceAccount(workspace) {
50197
+ return createHash3("sha256").update(workspace).digest("hex").slice(0, 32);
50198
+ }
50199
+ function errorMessage(error51) {
50200
+ return error51 instanceof Error ? error51.message : String(error51);
50201
+ }
50202
+ function classifyError(error51) {
50203
+ const message = errorMessage(error51);
50204
+ const code = typeof error51 === "object" && error51 !== null && "code" in error51 ? String(error51.code) : "";
50205
+ const detail = `${code} ${message}`.toLowerCase();
50206
+ if (/noentry|no entry|no such item|item.*not found|credential.*missing|does not exist/.test(detail)) {
50207
+ return { state: "missing", message };
50208
+ }
50209
+ if (/locked|interaction|required|authfailed|authentication|islocked|prompt/.test(detail)) {
50210
+ return { state: "locked", message };
50211
+ }
50212
+ if (/permission|access denied|denied/.test(detail)) {
50213
+ return { state: "permission-denied", message };
50214
+ }
50215
+ if (/unsupported|not implemented|dbus|secret service|keyutils|connection|unavailable|no such file/.test(detail)) {
50216
+ return { state: "unavailable", message };
50217
+ }
50218
+ return { state: "corrupt", message };
50219
+ }
50220
+ async function loadModule() {
50221
+ modulePromise ??= Promise.resolve().then(() => __toESM(require_keyring(), 1)).catch(() => null);
50222
+ return modulePromise;
50223
+ }
50224
+ function loadModuleSync() {
50225
+ if (syncModule !== undefined)
50226
+ return syncModule;
50227
+ try {
50228
+ const mod = require3("@napi-rs/keyring");
50229
+ syncModule = mod;
50230
+ } catch {
50231
+ syncModule = null;
50232
+ }
50233
+ return syncModule;
50234
+ }
50235
+ function linuxKeyringAvailable() {
50236
+ if (process.platform !== "linux")
50237
+ return null;
50238
+ if (process.env.SIGNET_SECRETS_LINUX_KEYRING === "keyutils") {
50239
+ return { state: "unsupported", message: "Linux keyutils is not an implicit Signet secrets backend" };
50240
+ }
50241
+ if (!process.env.DBUS_SESSION_BUS_ADDRESS) {
50242
+ return {
50243
+ state: "unavailable",
50244
+ message: "Linux Secret Service requires a user D-Bus session; no prompt or desktop session is available"
50245
+ };
50246
+ }
50247
+ try {
50248
+ execFileSync("busctl", ["--user", "status", "org.freedesktop.secrets"], {
50249
+ stdio: "ignore",
50250
+ timeout: 1000
50251
+ });
50252
+ return null;
50253
+ } catch {
50254
+ return {
50255
+ state: "unavailable",
50256
+ message: "Linux Secret Service is not registered on the user D-Bus session"
50257
+ };
50258
+ }
50259
+ }
50260
+
50261
+ class NativeSecretKeyringAdapter {
50262
+ platform = process.platform;
50263
+ service = SERVICE;
50264
+ account;
50265
+ constructor(workspace) {
50266
+ this.account = workspaceAccount(workspace);
50267
+ }
50268
+ async entry() {
50269
+ const mod = await loadModule();
50270
+ if (!mod)
50271
+ return null;
50272
+ return new mod.AsyncEntry(this.service, this.account);
50273
+ }
50274
+ async get() {
50275
+ const linuxUnavailable = linuxKeyringAvailable();
50276
+ if (linuxUnavailable)
50277
+ return linuxUnavailable;
50278
+ try {
50279
+ const entry = await this.entry();
50280
+ if (!entry)
50281
+ return { state: "unsupported", message: "The native keyring module is not installed for this platform" };
50282
+ const value = await entry.getPassword();
50283
+ return value === undefined || value === null || value.length === 0 ? { state: "missing" } : { state: "found", value };
50284
+ } catch (error51) {
50285
+ return classifyError(error51);
50286
+ }
50287
+ }
50288
+ async set(value) {
50289
+ const linuxUnavailable = linuxKeyringAvailable();
50290
+ if (linuxUnavailable)
50291
+ return linuxUnavailable;
50292
+ try {
50293
+ const entry = await this.entry();
50294
+ if (!entry)
50295
+ return { state: "unsupported", message: "The native keyring module is not installed for this platform" };
50296
+ await entry.setPassword(value);
50297
+ return { state: "found", value };
50298
+ } catch (error51) {
50299
+ return classifyError(error51);
50300
+ }
50301
+ }
50302
+ getStatus() {
50303
+ const linuxUnavailable = linuxKeyringAvailable();
50304
+ if (linuxUnavailable)
50305
+ return linuxUnavailable;
50306
+ try {
50307
+ const mod = loadModuleSync();
50308
+ if (!mod)
50309
+ return { state: "unsupported", message: "The native keyring module is not installed for this platform" };
50310
+ const entry = new mod.Entry(this.service, this.account);
50311
+ const value = entry.getPassword();
50312
+ return value === undefined || value === null || value.length === 0 ? { state: "missing" } : { state: "found", value };
50313
+ } catch (error51) {
50314
+ return classifyError(error51);
50315
+ }
50316
+ }
50317
+ }
50318
+ function getSecretKeyring(workspace) {
50319
+ return adapterForTests ?? new NativeSecretKeyringAdapter(workspace);
50320
+ }
50321
+
49585
50322
  // ../../platform/daemon/src/plugins/audit.ts
49586
50323
  import { appendFileSync as appendFileSync2, existsSync as existsSync8, mkdirSync as mkdirSync6, readFileSync as readFileSync3 } from "node:fs";
49587
50324
  import { dirname as dirname8, join as join10 } from "node:path";
@@ -49967,6 +50704,33 @@ var MAX_SECRET_EXEC_RETAINED_JOBS = MAX_SECRET_EXEC_RUNNING_JOBS + MAX_SECRET_EX
49967
50704
  var SECRET_STORE_TEMP_PREFIX = "secrets.enc.tmp-";
49968
50705
  var secretExecJobs = new Map;
49969
50706
  var secretExecJobRequests = new Map;
50707
+ var NATIVE_STORE_VERSION = 2;
50708
+ var DEGRADED_WARNING_FILE = ".degraded-warning";
50709
+ var KEYRING_ACCOUNT_SCOPE = "workspace";
50710
+
50711
+ class SecretKeyringError extends Error {
50712
+ state;
50713
+ retryable;
50714
+ constructor(result) {
50715
+ super(result.message ?? `Secrets keyring is ${result.state}`);
50716
+ this.name = "SecretKeyringError";
50717
+ this.state = result.state;
50718
+ this.retryable = result.state === "locked" || result.state === "unavailable";
50719
+ }
50720
+ }
50721
+ function decodeKeyringValue(result) {
50722
+ if (result.value === undefined)
50723
+ throw new SecretKeyringError({ state: "corrupt", message: "Keyring returned no master key" });
50724
+ try {
50725
+ const key = Buffer.from(result.value, "base64");
50726
+ if (key.length !== 32 || key.toString("base64") !== result.value) {
50727
+ throw new Error("master key is not valid canonical base64");
50728
+ }
50729
+ return new Uint8Array(key);
50730
+ } catch (error51) {
50731
+ throw new SecretKeyringError({ state: "corrupt", message: error51 instanceof Error ? error51.message : String(error51) });
50732
+ }
50733
+ }
49970
50734
  function isSecretStoreTempProcessLive(name) {
49971
50735
  const pid = name.slice(SECRET_STORE_TEMP_PREFIX.length).split("-", 1)[0];
49972
50736
  if (!/^\d+$/.test(pid))
@@ -50007,9 +50771,44 @@ function loadStore() {
50007
50771
  throw new Error(`Failed to read secrets store: ${message}`);
50008
50772
  }
50009
50773
  }
50774
+ function healthForKeyringState(result) {
50775
+ const checkedAt = new Date().toISOString();
50776
+ const message = result.message ?? `Native secrets keyring is ${result.state}`;
50777
+ if (result.state === "missing" || result.state === "locked" || result.state === "unavailable" || result.state === "unsupported") {
50778
+ return { status: "degraded", message, checkedAt };
50779
+ }
50780
+ if (result.state === "permission-denied" || result.state === "corrupt") {
50781
+ return { status: "unhealthy", message, checkedAt };
50782
+ }
50783
+ return { status: "healthy", checkedAt };
50784
+ }
50010
50785
  function getLocalSecretProviderHealth() {
50011
50786
  try {
50012
- loadStore();
50787
+ const store = loadStore();
50788
+ if (existsSync9(join11(getSecretsDir(), DEGRADED_WARNING_FILE))) {
50789
+ return {
50790
+ status: "degraded",
50791
+ message: "Using legacy machine-id-obfuscated secrets encryption because no native keyring is available",
50792
+ checkedAt: new Date().toISOString()
50793
+ };
50794
+ }
50795
+ if (store.version === NATIVE_STORE_VERSION || store.provider === "native-keyring") {
50796
+ const keyring = getSecretKeyring(`${KEYRING_ACCOUNT_SCOPE}:${getAgentsDir2()}`);
50797
+ const state = keyring.getStatus?.();
50798
+ if (state && state.state !== "found")
50799
+ return healthForKeyringState(state);
50800
+ if (state) {
50801
+ try {
50802
+ decodeKeyringValue(state);
50803
+ } catch (error51) {
50804
+ return {
50805
+ status: "degraded",
50806
+ message: `Native secrets keyring is corrupt: ${error51 instanceof Error ? error51.message : String(error51)}`,
50807
+ checkedAt: new Date().toISOString()
50808
+ };
50809
+ }
50810
+ }
50811
+ }
50013
50812
  return { status: "healthy", checkedAt: new Date().toISOString() };
50014
50813
  } catch (err) {
50015
50814
  return {
@@ -50029,9 +50828,12 @@ function parseSecretsStore(value) {
50029
50828
  if (!isRecord6(value)) {
50030
50829
  throw new Error("store must be a JSON object");
50031
50830
  }
50032
- if (value.version !== 1) {
50831
+ if (value.version !== 1 && value.version !== NATIVE_STORE_VERSION) {
50033
50832
  throw new Error("unsupported secrets store version");
50034
50833
  }
50834
+ if (value.version === NATIVE_STORE_VERSION && value.provider !== "native-keyring") {
50835
+ throw new Error("native-keyring store is missing its provider marker");
50836
+ }
50035
50837
  if (!isRecord6(value.secrets)) {
50036
50838
  throw new Error("secrets field must be an object");
50037
50839
  }
@@ -50050,7 +50852,11 @@ function parseSecretsStore(value) {
50050
50852
  updated: entry.updated
50051
50853
  };
50052
50854
  }
50053
- return { version: 1, secrets };
50855
+ return {
50856
+ version: value.version,
50857
+ ...value.provider === "native-keyring" ? { provider: value.provider } : {},
50858
+ secrets
50859
+ };
50054
50860
  }
50055
50861
  function isRecord6(value) {
50056
50862
  return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -1,43 +1,43 @@
1
1
  {
2
2
  "schemaVersion": 1,
3
- "version": "0.200.29",
3
+ "version": "0.203.0",
4
4
  "assets": [
5
5
  {
6
6
  "name": "signet-darwin-arm64",
7
7
  "platform": "darwin-arm64",
8
- "sha256": "070f47f7c7384c63ed22cd050f5ecda695d860561bdaa5bbd610d669b133c6f6",
9
- "size": 126836512
8
+ "sha256": "48acd1da77a0d3f4aec3ec252179a5491d2a475c6fe27c2483e7247b615310c1",
9
+ "size": 128223520
10
10
  },
11
11
  {
12
12
  "name": "signet-darwin-x64",
13
13
  "platform": "darwin-x64",
14
- "sha256": "9c956f962276691215a4151fbcde10612014c6ddf1ab2f3bc948815914b025df",
15
- "size": 131795520
14
+ "sha256": "c8c182d7f2aa361c6e18a256b426f21664f43e66f4d24d9cc3a82ecc99cb53a7",
15
+ "size": 133204544
16
16
  },
17
17
  {
18
18
  "name": "signet-linux-arm64",
19
19
  "platform": "linux-arm64",
20
- "sha256": "52371dac6491bccb4763ff0001e2a9e67ac2da6c7e62e164975b2437524aa7cc",
21
- "size": 171358286
20
+ "sha256": "1aadb4fdb065171de19784874a032b96bc82793dbfe2591fee80b13894f31c7c",
21
+ "size": 177773237
22
22
  },
23
23
  {
24
24
  "name": "signet-linux-x64",
25
25
  "platform": "linux-x64",
26
- "sha256": "63e06af6390013f1b6e51a268034db09446a6fcbbe685e93301b8af912fedb3f",
27
- "size": 173732868
26
+ "sha256": "80f42205cf1691f8d377814eb167c7b5544a75d4e70d09160ea544a2bd332183",
27
+ "size": 180736536
28
28
  },
29
29
  {
30
30
  "name": "signet-win32-x64.exe",
31
31
  "platform": "win32-x64",
32
- "sha256": "3deec2638896e6b8dca41d006bee6248af5ef06ea99c3f72a3112f569fe29393",
33
- "size": 181857280
32
+ "sha256": "7403620452e6f2f7300a511fb2535a1bb0798709fcd99c6994807d4d27b89d1c",
33
+ "size": 184614400
34
34
  }
35
35
  ],
36
36
  "components": {
37
37
  "connectors": {
38
- "url": "signet-connectors-0.200.29.tar.gz",
39
- "sha256": "679fef3f9547c7283d431e322e1d60bd9aef67f3787c46b77872ac8fa4eb5a08",
40
- "size": 21944
38
+ "url": "signet-connectors-0.203.0.tar.gz",
39
+ "sha256": "61e30ef3a8a38d84be6b79a580991a73eaba580ceaad1078c9354cb5833e372c",
40
+ "size": 21943
41
41
  }
42
42
  }
43
43
  }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "signetai",
3
- "version": "0.200.29",
3
+ "version": "0.203.0",
4
4
  "description": "Signet native CLI installer wrapper",
5
5
  "type": "module",
6
6
  "bin": {
@@ -65,10 +65,10 @@
65
65
  "access": "public"
66
66
  },
67
67
  "optionalDependencies": {
68
- "signetai-darwin-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.200.29/signetai-darwin-arm64-0.200.29.tgz",
69
- "signetai-darwin-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.200.29/signetai-darwin-x64-0.200.29.tgz",
70
- "signetai-linux-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.200.29/signetai-linux-arm64-0.200.29.tgz",
71
- "signetai-linux-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.200.29/signetai-linux-x64-0.200.29.tgz",
72
- "signetai-win32-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.200.29/signetai-win32-x64-0.200.29.tgz"
68
+ "signetai-darwin-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.203.0/signetai-darwin-arm64-0.203.0.tgz",
69
+ "signetai-darwin-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.203.0/signetai-darwin-x64-0.203.0.tgz",
70
+ "signetai-linux-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.203.0/signetai-linux-arm64-0.203.0.tgz",
71
+ "signetai-linux-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.203.0/signetai-linux-x64-0.203.0.tgz",
72
+ "signetai-win32-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.203.0/signetai-win32-x64-0.203.0.tgz"
73
73
  }
74
74
  }