wunderland 0.46.0 → 0.48.0

package/dist/cli/extensions/installer.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Detects the project's package manager by checking for lockfiles.
+ * Priority: pnpm > yarn > bun > npm (fallback).
+ */
+export declare function detectPackageManager(cwd?: string): 'pnpm' | 'yarn' | 'bun' | 'npm';
+/**
+ * Installs an npm package using the detected package manager.
+ * Returns true on success, false on failure (logs stderr).
+ */
+export declare function installExtension(packageName: string, opts?: {
+    cwd?: string;
+    dev?: boolean;
+}): Promise<boolean>;
+/**
+ * Uninstalls an npm package.
+ */
+export declare function uninstallExtension(packageName: string, opts?: {
+    cwd?: string;
+}): Promise<boolean>;
+//# sourceMappingURL=installer.d.ts.map

package/dist/cli/extensions/installer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.d.ts","sourceRoot":"","sources":["../../../src/cli/extensions/installer.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,CAMlF;AAgBD;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GACrC,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACtB,OAAO,CAAC,OAAO,CAAC,CAclB"}

package/dist/cli/extensions/installer.js

@@ -0,0 +1,71 @@
+import { existsSync } from 'node:fs';
+import { execSync } from 'node:child_process';
+import { join } from 'node:path';
+/**
+ * Detects the project's package manager by checking for lockfiles.
+ * Priority: pnpm > yarn > bun > npm (fallback).
+ */
+export function detectPackageManager(cwd) {
+    const dir = cwd ?? process.cwd();
+    if (existsSync(join(dir, 'pnpm-lock.yaml')))
+        return 'pnpm';
+    if (existsSync(join(dir, 'yarn.lock')))
+        return 'yarn';
+    if (existsSync(join(dir, 'bun.lockb')))
+        return 'bun';
+    return 'npm';
+}
+const ADD_CMD = {
+    pnpm: 'pnpm add',
+    yarn: 'yarn add',
+    bun: 'bun add',
+    npm: 'npm install',
+};
+const REMOVE_CMD = {
+    pnpm: 'pnpm remove',
+    yarn: 'yarn remove',
+    bun: 'bun remove',
+    npm: 'npm uninstall',
+};
+/**
+ * Installs an npm package using the detected package manager.
+ * Returns true on success, false on failure (logs stderr).
+ */
+export async function installExtension(packageName, opts) {
+    const pm = detectPackageManager(opts?.cwd);
+    const devFlag = opts?.dev ? ' -D' : '';
+    const cmd = `${ADD_CMD[pm]}${devFlag} ${packageName}`;
+    try {
+        execSync(cmd, {
+            cwd: opts?.cwd ?? process.cwd(),
+            stdio: ['ignore', 'pipe', 'pipe'],
+            timeout: 120_000,
+        });
+        return true;
+    }
+    catch (err) {
+        const stderr = err?.stderr?.toString() ?? err?.message ?? 'Unknown error';
+        console.error(`Failed to install ${packageName}: ${stderr}`);
+        return false;
+    }
+}
+/**
+ * Uninstalls an npm package.
+ */
+export async function uninstallExtension(packageName, opts) {
+    const pm = detectPackageManager(opts?.cwd);
+    const cmd = `${REMOVE_CMD[pm]} ${packageName}`;
+    try {
+        execSync(cmd, {
+            cwd: opts?.cwd ?? process.cwd(),
+            stdio: ['ignore', 'pipe', 'pipe'],
+            timeout: 60_000,
+        });
+        return true;
+    }
+    catch (err) {
+        console.error(`Failed to uninstall ${packageName}: ${err?.message}`);
+        return false;
+    }
+}
+//# sourceMappingURL=installer.js.map

package/dist/cli/extensions/installer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installer.js","sourceRoot":"","sources":["../../../src/cli/extensions/installer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,MAAM,GAAG,GAAG,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACjC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3D,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACtD,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,GAA2B;IACtC,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,UAAU;IAChB,GAAG,EAAE,SAAS;IACd,GAAG,EAAE,aAAa;CACnB,CAAC;AAEF,MAAM,UAAU,GAA2B;IACzC,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,aAAa;IACnB,GAAG,EAAE,YAAY;IACjB,GAAG,EAAE,eAAe;CACrB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,IAAsC;IAEtC,MAAM,EAAE,GAAG,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC,GAAG,OAAO,IAAI,WAAW,EAAE,CAAC;IACtD,IAAI,CAAC;QACH,QAAQ,CAAC,GAAG,EAAE;YACZ,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;YAC/B,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,OAAO,IAAI,eAAe,CAAC;QAC1E,OAAO,CAAC,KAAK,CAAC,qBAAqB,WAAW,KAAK,MAAM,EAAE,CAAC,CAAC;QAC7D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB,EACnB,IAAuB;IAEvB,MAAM,EAAE,GAAG,oBAAoB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC;IAC/C,IAAI,CAAC;QACH,QAAQ,CAAC,GAAG,EAAE;YACZ,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;YAC/B,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,uBAAuB,WAAW,KAAK,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACrE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/cli/extensions/recommender.d.ts

@@ -0,0 +1,20 @@
+export interface ExtensionRecommendation {
+    extensionId: string;
+    packageName: string;
+    reason: 'credential_detected' | 'skill_requires' | 'preset_default';
+    displayName: string;
+    envVar?: string;
+}
+/**
+ * Scans environment for known API keys and recommends matching extensions.
+ * Skips extensions that are already enabled.
+ */
+export declare function getRecommendations(opts: {
+    env?: Record<string, string | undefined>;
+    enabledExtensions?: string[];
+}): Promise<ExtensionRecommendation[]>;
+/**
+ * Formats recommendations as a CLI-friendly table.
+ */
+export declare function formatRecommendations(recs: ExtensionRecommendation[]): string;
+//# sourceMappingURL=recommender.d.ts.map

package/dist/cli/extensions/recommender.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recommender.d.ts","sourceRoot":"","sources":["../../../src/cli/extensions/recommender.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,qBAAqB,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;IACpE,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AA8ED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAwBrC;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,uBAAuB,EAAE,GAAG,MAAM,CAQ7E"}

package/dist/cli/extensions/recommender.js

@@ -0,0 +1,109 @@
+/**
+ * Credential-to-extension mapping.
+ * Each entry maps one or more env vars to an extension that should be suggested.
+ */
+const CREDENTIAL_MAP = [
+    {
+        envVars: ['NEWSAPI_API_KEY'],
+        allRequired: false,
+        extensionId: 'news-search',
+        packageName: '@framers/agentos-ext-news-search',
+        displayName: 'News Search (NewsAPI)',
+    },
+    {
+        envVars: ['SERPER_API_KEY'],
+        allRequired: false,
+        extensionId: 'web-search',
+        packageName: '@framers/agentos-ext-web-search',
+        displayName: 'Web Search (Serper)',
+    },
+    {
+        envVars: ['GIPHY_API_KEY'],
+        allRequired: false,
+        extensionId: 'giphy',
+        packageName: '@framers/agentos-ext-giphy',
+        displayName: 'Giphy',
+    },
+    {
+        envVars: ['ELEVENLABS_API_KEY'],
+        allRequired: false,
+        extensionId: 'voice-synthesis',
+        packageName: '@framers/agentos-ext-voice-synthesis',
+        displayName: 'Voice Synthesis (ElevenLabs)',
+    },
+    {
+        envVars: ['GITHUB_TOKEN'],
+        allRequired: false,
+        extensionId: 'github',
+        packageName: '@framers/agentos-ext-github',
+        displayName: 'GitHub',
+    },
+    {
+        envVars: ['TELEGRAM_BOT_TOKEN'],
+        allRequired: false,
+        extensionId: 'telegram',
+        packageName: '@framers/agentos-ext-telegram',
+        displayName: 'Telegram',
+    },
+    {
+        envVars: ['DISCORD_BOT_TOKEN'],
+        allRequired: false,
+        extensionId: 'discord',
+        packageName: '@framers/agentos-ext-discord',
+        displayName: 'Discord',
+    },
+    {
+        envVars: ['GOOGLE_CLIENT_ID', 'GOOGLE_CLIENT_SECRET', 'GOOGLE_REFRESH_TOKEN'],
+        allRequired: true,
+        extensionId: 'email-gmail',
+        packageName: '@framers/agentos-ext-email-gmail',
+        displayName: 'Gmail',
+    },
+    {
+        envVars: ['GOOGLE_CLIENT_ID', 'GOOGLE_CLIENT_SECRET', 'GOOGLE_REFRESH_TOKEN'],
+        allRequired: true,
+        extensionId: 'calendar-google',
+        packageName: '@framers/agentos-ext-calendar-google',
+        displayName: 'Google Calendar',
+    },
+];
+/**
+ * Scans environment for known API keys and recommends matching extensions.
+ * Skips extensions that are already enabled.
+ */
+export async function getRecommendations(opts) {
+    const env = opts.env ?? process.env;
+    const enabled = new Set(opts.enabledExtensions ?? []);
+    const recs = [];
+    for (const mapping of CREDENTIAL_MAP) {
+        if (enabled.has(mapping.extensionId))
+            continue;
+        const hasCredentials = mapping.allRequired
+            ? mapping.envVars.every((v) => !!env[v])
+            : mapping.envVars.some((v) => !!env[v]);
+        if (!hasCredentials)
+            continue;
+        recs.push({
+            extensionId: mapping.extensionId,
+            packageName: mapping.packageName,
+            reason: 'credential_detected',
+            displayName: mapping.displayName,
+            envVar: mapping.envVars[0],
+        });
+    }
+    return recs;
+}
+/**
+ * Formats recommendations as a CLI-friendly table.
+ */
+export function formatRecommendations(recs) {
+    if (recs.length === 0)
+        return '';
+    const lines = ['', '  Recommended extensions (credentials detected):', ''];
+    for (const r of recs) {
+        lines.push(`    ${r.displayName} (${r.extensionId}) — ${r.envVar} found`);
+    }
+    lines.push('');
+    return lines.join('\n');
+}
+//# sourceMappingURL=recommender.js.map

package/dist/cli/extensions/recommender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recommender.js","sourceRoot":"","sources":["../../../src/cli/extensions/recommender.ts"],"names":[],"mappings":"AAQA;;;GAGG;AACH,MAAM,cAAc,GAMf;IACH;QACE,OAAO,EAAE,CAAC,iBAAiB,CAAC;QAC5B,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,kCAAkC;QAC/C,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,OAAO,EAAE,CAAC,gBAAgB,CAAC;QAC3B,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,YAAY;QACzB,WAAW,EAAE,iCAAiC;QAC9C,WAAW,EAAE,qBAAqB;KACnC;IACD;QACE,OAAO,EAAE,CAAC,eAAe,CAAC;QAC1B,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,4BAA4B;QACzC,WAAW,EAAE,OAAO;KACrB;IACD;QACE,OAAO,EAAE,CAAC,oBAAoB,CAAC;QAC/B,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE,sCAAsC;QACnD,WAAW,EAAE,8BAA8B;KAC5C;IACD;QACE,OAAO,EAAE,CAAC,cAAc,CAAC;QACzB,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,QAAQ;QACrB,WAAW,EAAE,6BAA6B;QAC1C,WAAW,EAAE,QAAQ;KACtB;IACD;QACE,OAAO,EAAE,CAAC,oBAAoB,CAAC;QAC/B,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,+BAA+B;QAC5C,WAAW,EAAE,UAAU;KACxB;IACD;QACE,OAAO,EAAE,CAAC,mBAAmB,CAAC;QAC9B,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,SAAS;QACtB,WAAW,EAAE,8BAA8B;QAC3C,WAAW,EAAE,SAAS;KACvB;IACD;QACE,OAAO,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,sBAAsB,CAAC;QAC7E,WAAW,EAAE,IAAI;QACjB,WAAW,EAAE,aAAa;QAC1B,WAAW,EAAE,kCAAkC;QAC/C,WAAW,EAAE,OAAO;KACrB;IACD;QACE,OAAO,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,sBAAsB,CAAC;QAC7E,WAAW,EAAE,IAAI;QACjB,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE,sCAAsC;QACnD,WAAW,EAAE,iBAAiB;KAC/B;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAGxC;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,IAAI,GAA8B,EAAE,CAAC;IAE3C,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;YAAE,SAAS;QAE/C,MAAM,cAAc,GAAG,OAAO,CAAC,WAAW;YACxC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACxC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1C,IAAI,CAAC,cAAc;YAAE,SAAS;QAE9B,IAAI,CAAC,IAAI,CAAC;YACR,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM,EAAE,qBAAqB;YAC7B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAA+B;IACnE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,CAAC,EAAE,EAAE,kDAAkD,EAAE,EAAE,CAAC,CAAC;IAC3E,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,OAAO,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC;IAC5E,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/cli/extensions/secret-prompter.d.ts

@@ -0,0 +1,22 @@
+export interface SecretPromptResult {
+    key: string;
+    envVar: string;
+    value: string;
+    persisted: boolean;
+}
+interface SecretRequirement {
+    id: string;
+    envVar: string;
+    signupUrl?: string;
+    freeTier?: string;
+}
+/**
+ * Prompts user for missing API keys required by an extension.
+ * Persists entered values to .env in the project root.
+ */
+export declare function promptForMissingSecrets(secrets: SecretRequirement[], opts?: {
+    cwd?: string;
+    nonInteractive?: boolean;
+}): Promise<SecretPromptResult[]>;
+export {};
+//# sourceMappingURL=secret-prompter.d.ts.map

package/dist/cli/extensions/secret-prompter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-prompter.d.ts","sourceRoot":"","sources":["../../../src/cli/extensions/secret-prompter.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,UAAU,iBAAiB;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,iBAAiB,EAAE,EAC5B,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,GAChD,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAqC/B"}

package/dist/cli/extensions/secret-prompter.js

@@ -0,0 +1,67 @@
+import { readFileSync, appendFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { createInterface } from 'node:readline';
+/**
+ * Prompts user for missing API keys required by an extension.
+ * Persists entered values to .env in the project root.
+ */
+export async function promptForMissingSecrets(secrets, opts) {
+    const results = [];
+    const envPath = join(opts?.cwd ?? process.cwd(), '.env');
+    // Parse existing .env to avoid duplicates
+    const existing = parseEnvFile(envPath);
+    for (const secret of secrets) {
+        // Skip if already in environment or .env
+        if (process.env[secret.envVar] || existing[secret.envVar])
+            continue;
+        if (opts?.nonInteractive) {
+            console.log(`  ⚠ ${secret.envVar} required — set it in .env or environment`);
+            continue;
+        }
+        console.log(`\n  ${secret.id} requires ${secret.envVar}`);
+        if (secret.signupUrl)
+            console.log(`  Sign up: ${secret.signupUrl}`);
+        if (secret.freeTier)
+            console.log(`  Free tier: ${secret.freeTier}`);
+        const value = await askLine(`  Enter ${secret.envVar} (or press Enter to skip): `);
+        if (!value)
+            continue;
+        // Append to .env
+        const line = `\n# Added by wunderland marketplace install\n${secret.envVar}=${value}\n`;
+        appendFileSync(envPath, line, 'utf8');
+        process.env[secret.envVar] = value;
+        results.push({
+            key: secret.id,
+            envVar: secret.envVar,
+            value,
+            persisted: true,
+        });
+    }
+    return results;
+}
+function parseEnvFile(path) {
+    if (!existsSync(path))
+        return {};
+    const content = readFileSync(path, 'utf8');
+    const vars = {};
+    for (const line of content.split('\n')) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith('#'))
+            continue;
+        const eqIdx = trimmed.indexOf('=');
+        if (eqIdx > 0) {
+            vars[trimmed.slice(0, eqIdx).trim()] = trimmed.slice(eqIdx + 1).trim();
+        }
+    }
+    return vars;
+}
+function askLine(prompt) {
+    return new Promise((resolve) => {
+        const rl = createInterface({ input: process.stdin, output: process.stdout });
+        rl.question(prompt, (answer) => {
+            rl.close();
+            resolve(answer.trim());
+        });
+    });
+}
+//# sourceMappingURL=secret-prompter.js.map

package/dist/cli/extensions/secret-prompter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-prompter.js","sourceRoot":"","sources":["../../../src/cli/extensions/secret-prompter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAgBhD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAA4B,EAC5B,IAAiD;IAEjD,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IAEzD,0CAA0C;IAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAEvC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,yCAAyC;QACzC,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,SAAS;QAEpE,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,MAAM,2CAA2C,CAAC,CAAC;YAC7E,SAAS;QACX,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,EAAE,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEpE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,WAAW,MAAM,CAAC,MAAM,6BAA6B,CAAC,CAAC;QACnF,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,iBAAiB;QACjB,MAAM,IAAI,GAAG,gDAAgD,MAAM,CAAC,MAAM,IAAI,KAAK,IAAI,CAAC;QACxF,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QAEnC,OAAO,CAAC,IAAI,CAAC;YACX,GAAG,EAAE,MAAM,CAAC,EAAE;YACd,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK;YACL,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,MAAc;IAC7B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7E,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;YAC7B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/config/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * @fileoverview Agent configuration loading, validation, and resolution.
+ *
+ * Provides the full config pipeline: load from disk or object, validate against
+ * the Wunderland agent-config schema, merge with presets and personas, and
+ * resolve the effective runtime configuration including LLM credentials.
+ *
+ * @module wunderland/config
+ */
+export { loadAgentConfig, resolveLlmConfig, resolveProviderId } from './load.js';
+export type { ResolvedLlmConfig } from './load.js';
+export { validateWunderlandAgentConfig } from './schema.js';
+export { WunderlandConfigError } from './errors.js';
+export type { WunderlandConfigIssue } from './errors.js';
+export { resolveEffectiveAgentConfig, buildDiscoveryOptionsFromAgentConfig, } from './effective-agent-config.js';
+export type { EffectiveAgentConfigResult } from './effective-agent-config.js';
+export { resolveConfiguredPersonas, resolveSelectedPersonaId, summarizePersona, extractSystemPromptFromPersona, extractHexacoTraitsFromPersona, buildRagConfigFromPersona, } from './persona-registry.js';
+export type { ResolvedPersonaEntry, PersonaSummary, ResolvedPersonaCatalog, } from './persona-registry.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/config/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACjF,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAGnD,OAAO,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AAG5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,YAAY,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGzD,OAAO,EACL,2BAA2B,EAC3B,oCAAoC,GACrC,MAAM,6BAA6B,CAAC;AACrC,YAAY,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAG9E,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,EAChB,8BAA8B,EAC9B,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,oBAAoB,EACpB,cAAc,EACd,sBAAsB,GACvB,MAAM,uBAAuB,CAAC"}

package/dist/config/index.js

@@ -0,0 +1,20 @@
+/**
+ * @fileoverview Agent configuration loading, validation, and resolution.
+ *
+ * Provides the full config pipeline: load from disk or object, validate against
+ * the Wunderland agent-config schema, merge with presets and personas, and
+ * resolve the effective runtime configuration including LLM credentials.
+ *
+ * @module wunderland/config
+ */
+// ── Config loading & LLM resolution ────────────────────────────────────────
+export { loadAgentConfig, resolveLlmConfig, resolveProviderId } from './load.js';
+// ── Schema validation ──────────────────────────────────────────────────────
+export { validateWunderlandAgentConfig } from './schema.js';
+// ── Error types ────────────────────────────────────────────────────────────
+export { WunderlandConfigError } from './errors.js';
+// ── Effective agent config (preset + persona merge) ────────────────────────
+export { resolveEffectiveAgentConfig, buildDiscoveryOptionsFromAgentConfig, } from './effective-agent-config.js';
+// ── Persona registry ───────────────────────────────────────────────────────
+export { resolveConfiguredPersonas, resolveSelectedPersonaId, summarizePersona, extractSystemPromptFromPersona, extractHexacoTraitsFromPersona, buildRagConfigFromPersona, } from './persona-registry.js';
+//# sourceMappingURL=index.js.map

package/dist/config/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/config/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,8EAA8E;AAC9E,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAGjF,8EAA8E;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AAE5D,8EAA8E;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGpD,8EAA8E;AAC9E,OAAO,EACL,2BAA2B,EAC3B,oCAAoC,GACrC,MAAM,6BAA6B,CAAC;AAGrC,8EAA8E;AAC9E,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,EAChB,8BAA8B,EAC9B,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC"}

package/dist/guardrails/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @fileoverview Content guardrails for agent safety.
+ *
+ * Provides the {@link CitizenModeGuardrail} which enforces the "no prompting"
+ * policy when an agent operates in Public (Citizen) mode on Wonderland.
+ *
+ * @module wunderland/guardrails
+ */
+export { CitizenModeGuardrail, type CitizenGuardrailAction, type CitizenGuardrailResult, } from './CitizenModeGuardrail.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/guardrails/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/guardrails/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,oBAAoB,EACpB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,GAC5B,MAAM,2BAA2B,CAAC"}

package/dist/guardrails/index.js

@@ -0,0 +1,10 @@
+/**
+ * @fileoverview Content guardrails for agent safety.
+ *
+ * Provides the {@link CitizenModeGuardrail} which enforces the "no prompting"
+ * policy when an agent operates in Public (Citizen) mode on Wonderland.
+ *
+ * @module wunderland/guardrails
+ */
+export { CitizenModeGuardrail, } from './CitizenModeGuardrail.js';
+//# sourceMappingURL=index.js.map

package/dist/guardrails/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/guardrails/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,oBAAoB,GAGrB,MAAM,2BAA2B,CAAC"}

package/dist/voice/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @fileoverview Voice and speech subsystem barrel exports.
+ *
+ * Re-exports the speech provider catalog utilities (TTS/STT provider lookup,
+ * configuration helpers, environment overrides) and the telephony call-client
+ * primitives (CallManager, codec conversion, SpeechRuntime).
+ *
+ * @module wunderland/voice
+ */
+export { DEFAULT_VOICE_EXTENSIONS, getDefaultVoiceExtensions, getSpeechProviders, getSpeechProviderEntry, isSpeechProviderConfigured, normalizePreferredSpeechProviderId, createSpeechExtensionEnvOverrides, getPreferredRuntimeTtsProviderId, fileExtensionForSpeechMimeType, } from './speech-catalog.js';
+export type { SpeechProviderDefaults } from './speech-catalog.js';
+export { CallManager, convertPcmToMulaw8k, convertMulawToPcm16, escapeXml, validateE164, BuiltInAdaptiveVadProvider, ElevenLabsTextToSpeechProvider, OpenAITextToSpeechProvider, OpenAIWhisperSpeechToTextProvider, SpeechProviderRegistry, SpeechRuntime, SpeechSession, createSpeechRuntime, createSpeechRuntimeFromEnv, findSpeechProviderCatalogEntry, getDefaultSpeechProviderId, getSpeechProviderCatalog, getSpeechProviderKinds, } from './call-client.js';
+export type { IVoiceCallProvider, InitiateCallInput, InitiateCallResult, HangupCallInput, PlayTtsInput, StartListeningInput, StopListeningInput, CallManagerEventType, CallManagerEvent, CallManagerEventHandler, SpeechAudioInput, SpeechProviderCatalogEntry, SpeechProviderKind, SpeechRuntimeConfig, SpeechRuntimeSessionConfig, SpeechSessionConfig, SpeechSessionState, SpeechSynthesisOptions, SpeechSynthesisResult, SpeechToTextProvider, SpeechTranscriptionOptions, SpeechTranscriptionResult, SpeechVadProvider, TextToSpeechProvider, WakeWordProvider, } from './call-client.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/voice/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/voice/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,kBAAkB,EAClB,sBAAsB,EACtB,0BAA0B,EAC1B,kCAAkC,EAClC,iCAAiC,EACjC,gCAAgC,EAChC,8BAA8B,GAC/B,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAGlE,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,mBAAmB,EACnB,SAAS,EACT,YAAY,EACZ,0BAA0B,EAC1B,8BAA8B,EAC9B,0BAA0B,EAC1B,iCAAiC,EACjC,sBAAsB,EACtB,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,0BAA0B,EAC1B,8BAA8B,EAC9B,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,uBAAuB,EACvB,gBAAgB,EAChB,0BAA0B,EAC1B,kBAAkB,EAClB,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,EAC1B,yBAAyB,EACzB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC"}

package/dist/voice/index.js

@@ -0,0 +1,14 @@
+/**
+ * @fileoverview Voice and speech subsystem barrel exports.
+ *
+ * Re-exports the speech provider catalog utilities (TTS/STT provider lookup,
+ * configuration helpers, environment overrides) and the telephony call-client
+ * primitives (CallManager, codec conversion, SpeechRuntime).
+ *
+ * @module wunderland/voice
+ */
+// ── Speech catalog (TTS/STT provider utilities) ───────────────────────────
+export { DEFAULT_VOICE_EXTENSIONS, getDefaultVoiceExtensions, getSpeechProviders, getSpeechProviderEntry, isSpeechProviderConfigured, normalizePreferredSpeechProviderId, createSpeechExtensionEnvOverrides, getPreferredRuntimeTtsProviderId, fileExtensionForSpeechMimeType, } from './speech-catalog.js';
+// ── Call client (telephony + speech runtime re-exports) ───────────────────
+export { CallManager, convertPcmToMulaw8k, convertMulawToPcm16, escapeXml, validateE164, BuiltInAdaptiveVadProvider, ElevenLabsTextToSpeechProvider, OpenAITextToSpeechProvider, OpenAIWhisperSpeechToTextProvider, SpeechProviderRegistry, SpeechRuntime, SpeechSession, createSpeechRuntime, createSpeechRuntimeFromEnv, findSpeechProviderCatalogEntry, getDefaultSpeechProviderId, getSpeechProviderCatalog, getSpeechProviderKinds, } from './call-client.js';
+//# sourceMappingURL=index.js.map

package/dist/voice/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/voice/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,6EAA6E;AAC7E,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,kBAAkB,EAClB,sBAAsB,EACtB,0BAA0B,EAC1B,kCAAkC,EAClC,iCAAiC,EACjC,gCAAgC,EAChC,8BAA8B,GAC/B,MAAM,qBAAqB,CAAC;AAG7B,6EAA6E;AAC7E,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,mBAAmB,EACnB,SAAS,EACT,YAAY,EACZ,0BAA0B,EAC1B,8BAA8B,EAC9B,0BAA0B,EAC1B,iCAAiC,EACjC,sBAAsB,EACtB,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,0BAA0B,EAC1B,8BAA8B,EAC9B,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wunderland",
-  "version": "0.46.0",
+  "version": "0.48.0",
   "description": "Autonomous AI agent framework with cognitive memory, infinite-context graph-based RAG, and HEXACO personality modeling — built on OpenClaw with 5-tier prompt-injection defense, adaptive HyDE retrieval, observational memory with Ebbinghaus decay, 37 channel integrations, and a zero-config CLI",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -26,6 +26,30 @@
       "import": "./dist/advanced/*.js",
       "types": "./dist/advanced/*.d.ts"
     },
+    "./config": {
+      "import": "./dist/config/index.js",
+      "types": "./dist/config/index.d.ts"
+    },
+    "./security": {
+      "import": "./dist/security/index.js",
+      "types": "./dist/security/index.d.ts"
+    },
+    "./runtime": {
+      "import": "./dist/runtime/index.js",
+      "types": "./dist/runtime/index.d.ts"
+    },
+    "./storage": {
+      "import": "./dist/storage/index.js",
+      "types": "./dist/storage/index.d.ts"
+    },
+    "./guardrails": {
+      "import": "./dist/guardrails/index.js",
+      "types": "./dist/guardrails/index.d.ts"
+    },
+    "./voice": {
+      "import": "./dist/voice/index.js",
+      "types": "./dist/voice/index.d.ts"
+    },
     "./discovery": {
       "import": "./dist/discovery/index.js",
       "types": "./dist/discovery/index.d.ts"