standout 0.5.34 → 0.5.36

package/dist/redact.js

@@ -1,37 +0,0 @@
-// Redacts secret-looking strings from any text before it leaves the machine
-// (prompt samples, conversation exchanges, etc.). Belt-and-suspenders alongside
-// code-fence stripping — users paste API keys / tokens inline in prompts.
-//
-// Patterns target high-entropy secret *values* (low false-positive), plus a
-// conservative "label = <long value>" form. Plain mentions of words like
-// "token" or env-var names like ANTHROPIC_API_KEY are intentionally left alone.
-const REDACTION = "[redacted]";
-const SECRET_PATTERNS = [
-    // Private key PEM blocks (whole block).
-    /-----BEGIN[A-Z ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z ]*PRIVATE KEY-----/g,
-    // Provider keys / tokens with distinctive prefixes.
-    /sk-ant-[A-Za-z0-9_-]{20,}/g,
-    /sk-(?:proj-)?[A-Za-z0-9]{20,}/g, // OpenAI
-    /npm_[A-Za-z0-9]{36}/g,
-    /gh[pousr]_[A-Za-z0-9]{36,}/g, // GitHub
-    /github_pat_[A-Za-z0-9_]{60,}/g,
-    /AKIA[0-9A-Z]{16}/g, // AWS access key id
-    /ASIA[0-9A-Z]{16}/g,
-    /AIza[0-9A-Za-z_-]{35}/g, // Google
-    /ya29\.[A-Za-z0-9_-]{20,}/g, // Google OAuth
-    /xox[baprs]-[A-Za-z0-9-]{10,}/g, // Slack
-    /[rs]k_(?:live|test)_[A-Za-z0-9]{20,}/g, // Stripe
-    /eyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{6,}/g, // JWT
-];
-// "api_key": "longvalue" / API_KEY=longvalue / bearer longvalue — redact only
-// the value, keep the label so the text still reads sensibly.
-const LABELED_SECRET = /\b(api[_-]?key|secret|token|password|passwd|authorization|bearer)\b(["'\s:=]{1,4})([A-Za-z0-9_\-./+]{20,})/gi;
-export function redactSecrets(text) {
-    if (!text)
-        return text;
-    let out = text;
-    for (const re of SECRET_PATTERNS)
-        out = out.replace(re, REDACTION);
-    out = out.replace(LABELED_SECRET, (_m, label, sep) => `${label}${sep}${REDACTION}`);
-    return out;
-}

package/dist/tools.d.ts

@@ -1,4 +0,0 @@
-import type Anthropic from "@anthropic-ai/sdk";
-import { type SubmitProfileOptions } from "./api.js";
-export declare const TOOLS: Anthropic.Tool[];
-export declare function executeTool(name: string, input: Record<string, unknown>, options?: SubmitProfileOptions): Promise<string>;

package/dist/tools.js

@@ -1,182 +0,0 @@
-import { execSync } from "child_process";
-import { createInterface } from "readline";
-import { enrichProfile, submitProfile, } from "./api.js";
-const MAX_OUTPUT = 50 * 1024; // 50KB
-const BLOCKED_PATTERNS = [
-    // Destructive
-    /\brm\s/,
-    /\brmdir\b/,
-    /\bmv\s/,
-    /\bmkdir\s/,
-    /\btouch\s/,
-    // Write redirects
-    />/,
-    /\bchmod\b/,
-    /\bchown\b/,
-    /\bsudo\b/,
-    // Package managers
-    /\bnpm install\b/,
-    /\bnpm i\b/,
-    /\bpip install\b/,
-    /\bbrew\s/,
-    /\byarn add\b/,
-    /\bpnpm add\b/,
-    // Execution
-    /\bbash -c\b/,
-    /\bsh -c\b/,
-    /\bpython -c\b/,
-    /\bnode -e\b/,
-    /\bperl -e\b/,
-    /\bruby -e\b/,
-    /\beval\s/,
-    // Git writes
-    /\bgit push\b/,
-    /\bgit commit\b/,
-    /\bgit reset\b/,
-    /\bgit checkout\b/,
-    /\bgit branch -[dD]\b/,
-    /\bgit merge\b/,
-    /\bgit rebase\b/,
-    /\bgit stash\b/,
-    // Network writes
-    /\bcurl\b.*-X\s*(POST|PUT|PATCH|DELETE)/i,
-    /\bcurl\b.*(-d|--data)\s/,
-    // Full paths to dangerous commands
-    /\/bin\/rm\b/,
-    /\/usr\/bin\/rm\b/,
-];
-function isCommandSafe(command) {
-    return !BLOCKED_PATTERNS.some((pattern) => pattern.test(command));
-}
-function executeBash(command) {
-    if (!isCommandSafe(command)) {
-        return "Error: Command blocked by read-only sandbox. Only read operations are allowed.";
-    }
-    try {
-        const output = execSync(command, {
-            timeout: 30000,
-            maxBuffer: 1024 * 1024,
-            encoding: "utf-8",
-            stdio: ["pipe", "pipe", "pipe"],
-        });
-        if (output.length > MAX_OUTPUT) {
-            return (output.slice(0, MAX_OUTPUT) +
-                `\n\n[Output truncated at ${MAX_OUTPUT} bytes]`);
-        }
-        return output;
-    }
-    catch (error) {
-        const err = error;
-        return `Error: ${err.stderr || err.message || "Command failed"}`;
-    }
-}
-async function askUser(question, options) {
-    process.stderr.write(`\n${question}\n`);
-    if (options?.length) {
-        options.forEach((opt, i) => {
-            process.stderr.write(`  ${i + 1}. ${opt}\n`);
-        });
-        process.stderr.write(`  ${options.length + 1}. Other (type your answer)\n`);
-    }
-    process.stderr.write("\n> ");
-    return new Promise((resolve) => {
-        const iface = createInterface({
-            input: process.stdin,
-            output: process.stderr,
-        });
-        iface.question("", (answer) => {
-            iface.close();
-            const trimmed = answer.trim();
-            if (options?.length) {
-                const num = parseInt(trimmed, 10);
-                if (num >= 1 && num <= options.length) {
-                    resolve(options[num - 1]);
-                    return;
-                }
-            }
-            resolve(trimmed);
-        });
-    });
-}
-export const TOOLS = [
-    {
-        name: "bash",
-        description: "Execute a bash command in a read-only sandbox. Destructive commands (rm, mv, git push, sudo, etc.) are blocked. Use for reading files, git log, curl GET, find, ls, etc.",
-        input_schema: {
-            type: "object",
-            properties: {
-                command: {
-                    type: "string",
-                    description: "The bash command to execute",
-                },
-            },
-            required: ["command"],
-        },
-    },
-    {
-        name: "ask_user",
-        description: "Ask the user a question interactively. Can provide predefined options or allow free-text input.",
-        input_schema: {
-            type: "object",
-            properties: {
-                question: {
-                    type: "string",
-                    description: "The question to ask",
-                },
-                options: {
-                    type: "array",
-                    items: { type: "string" },
-                    description: "Optional list of predefined answer choices",
-                },
-            },
-            required: ["question"],
-        },
-    },
-    {
-        name: "standout_enrich",
-        description: "Enrich a profile using Standout's data APIs. Supports: email_to_linkedin (resolve email to LinkedIn URL), linkedin_profile (get full LinkedIn profile), company (get company data by LinkedIn URL).",
-        input_schema: {
-            type: "object",
-            properties: {
-                type: {
-                    type: "string",
-                    enum: ["email_to_linkedin", "linkedin_profile", "company"],
-                    description: "Type of enrichment to perform",
-                },
-                value: {
-                    type: "string",
-                    description: "The value to enrich: email address, LinkedIn profile URL, or company LinkedIn URL",
-                },
-            },
-            required: ["type", "value"],
-        },
-    },
-    {
-        name: "standout_submit",
-        description: "Submit the completed developer profile to Standout. Call this after the user confirms they want to submit.",
-        input_schema: {
-            type: "object",
-            properties: {
-                profile: {
-                    type: "string",
-                    description: "The full profile JSON as a string",
-                },
-            },
-            required: ["profile"],
-        },
-    },
-];
-export async function executeTool(name, input, options = {}) {
-    switch (name) {
-        case "bash":
-            return executeBash(input.command);
-        case "ask_user":
-            return askUser(input.question, input.options);
-        case "standout_enrich":
-            return enrichProfile(input.type, input.value);
-        case "standout_submit":
-            return submitProfile(input.profile, options);
-        default:
-            return `Unknown tool: ${name}`;
-    }
-}

package/dist/twitter-scrape.d.ts

@@ -1 +0,0 @@
-export declare function scrapeTwitterHandle(): Promise<string | null>;

package/dist/twitter-scrape.js

@@ -1,48 +0,0 @@
-import { NAV_TIMEOUT_MS, scrapeFromChromeSession } from "./browser-session.js";
-async function extractTwitterHandle(context) {
-    const cookies = await context.cookies([
-        "https://x.com",
-        "https://twitter.com",
-    ]);
-    if (!cookies.find((c) => c.name === "auth_token"))
-        return null;
-    const page = await context.newPage();
-    try {
-        await page.goto("https://x.com/home", {
-            waitUntil: "domcontentloaded",
-            timeout: NAV_TIMEOUT_MS,
-        });
-        if (/\/(login|i\/flow\/login)/.test(page.url()))
-            return null;
-        try {
-            const link = page.locator('[data-testid="AppTabBar_Profile_Link"]');
-            await link.first().waitFor({ timeout: 5000 });
-            const href = await link.first().getAttribute("href");
-            if (href) {
-                const handle = href.replace(/^\//, "").trim();
-                if (handle && !handle.includes("/"))
-                    return handle;
-            }
-        }
-        catch {
-            // fall through
-        }
-        try {
-            const nameElem = page.locator('[data-testid="UserName"] span:has-text("@")');
-            const text = await nameElem.first().innerText({ timeout: 3000 });
-            const match = text.match(/@([A-Za-z0-9_]+)/);
-            if (match)
-                return match[1];
-        }
-        catch {
-            // skip
-        }
-        return null;
-    }
-    finally {
-        await page.close().catch(() => undefined);
-    }
-}
-export async function scrapeTwitterHandle() {
-    return scrapeFromChromeSession(extractTwitterHandle);
-}

package/dist/wrapped/aggregate.d.ts

@@ -1,6 +0,0 @@
-import type { WrappedAggregateView } from "./types.js";
-export declare function aggregateView(args: {
-    profile: Record<string, unknown>;
-    computed: Record<string, unknown>;
-    share_url: string;
-}): WrappedAggregateView;