@agentproto/redaction 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Jeremy (agentik.net)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,70 @@
+# @agentproto/redaction
+
+Vendor-neutral **Redactor** port for scrubbing outbound payloads at an egress
+boundary — loggers, telemetry sinks, session tracers — before they leave the
+process.
+
+This package is a **leaf**: it owns the port and depends on no runtime.
+Consumers depend on it. It is also dependency-free and has no network access
+or credential handling in v1 — every built-in redactor is a pure, local
+transform. Being "off by default" is the CONSUMER's job; this package only
+provides the transforms.
+
+## The port
+
+```ts
+import type { Redactor, RedactionContext, JsonValue } from "@agentproto/redaction"
+
+interface Redactor {
+  readonly slug: string
+  redact(value: JsonValue, ctx: RedactionContext): JsonValue
+}
+```
+
+`RedactionContext` carries the `field` being redacted (`"prompt"`, `"input"`,
+`"output"`, `"tool-args"`, `"tool-result"`, `"metadata"`) and an optional
+`sessionId`.
+
+## Built-in redactors
+
+- `noneRedactor` — passthrough, returns the value unchanged.
+- `denyListRedactor(opts?)` — deep, immutable walk that masks the value of any
+  object entry whose key matches a deny pattern (`password`, `token`,
+  `secret`, `authorization`, `cookie`, `credential`, etc, case-insensitive).
+  Recurses into nested objects and array elements. Never mutates the input.
+- `truncateRedactor(opts?)` — caps long strings (default 2000 chars) and long
+  arrays (default 100 elements), leaving a `"…[+N chars]"` / `"…[+N items]"`
+  marker. Recurses into nested structures. Never mutates the input.
+- `chainRedactors(redactors, slug?)` — applies each redactor in order, output
+  feeding the next.
+
+```ts
+import { chainRedactors, denyListRedactor, truncateRedactor } from "@agentproto/redaction"
+
+const redactor = chainRedactors([denyListRedactor(), truncateRedactor()])
+const safe = redactor.redact(payload, { field: "tool-args" })
+```
+
+## Catalog and resolver
+
+`REDACTOR_CATALOG` lists the built-in backends (`none`, `deny-list`,
+`truncate`) by slug, each with a `description`, `needsCreds` flag, and a
+`build(options?)` factory. `resolveRedactor(spec?)` turns a declarative
+`RedactorSpec` into a `Redactor`:
+
+```ts
+import { resolveRedactor } from "@agentproto/redaction"
+
+resolveRedactor() // noneRedactor
+resolveRedactor("deny-list")
+resolveRedactor({ slug: "truncate", options: { maxStringLength: 500 } })
+resolveRedactor(["deny-list", "truncate"]) // chained, in order
+```
+
+External/PII-detection providers (e.g. Presidio) are intentionally OUT of
+v1 — they would resolve over the network and carry `needsCreds: true` in a
+future catalog entry.
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Vendor-neutral Redactor port.
+ *
+ * This package OWNS the redaction contract so any egress boundary (loggers,
+ * telemetry sinks, session tracers) can depend on a single interface without
+ * pulling in a kernel. It is a LEAF — it imports nothing from a runtime;
+ * runtimes depend on IT. No network, no credentials in v1: every built-in
+ * redactor here is a pure, local transform.
+ *
+ * Being "off by default" is the CONSUMER's job — this package only provides
+ * the transforms; a tracer or logger decides whether and how to apply one.
+ *
+ * Future work (OUT of this package for v1): external/PII-detection providers
+ * (e.g. Presidio) would resolve over the network and carry `needsCreds: true`
+ * in {@link RedactorCatalogEntry}. None are included here.
+ */
+/** Recursive JSON value, defined locally so the package stays dependency-free. */
+type JsonValue = string | number | boolean | null | {
+    readonly [key: string]: JsonValue;
+} | readonly JsonValue[];
+/** Which part of an outbound payload is being redacted. */
+type RedactionField = "prompt" | "input" | "output" | "tool-args" | "tool-result" | "metadata";
+/** Context passed to a redactor alongside the value it is scrubbing. */
+interface RedactionContext {
+    readonly field: RedactionField;
+    readonly sessionId?: string;
+}
+/** A pluggable transform applied to an outbound payload before it leaves the process. */
+interface Redactor {
+    readonly slug: string;
+    redact(value: JsonValue, ctx: RedactionContext): JsonValue;
+}
+/** A catalog entry describing a buildable redactor backend. */
+interface RedactorCatalogEntry {
+    readonly slug: string;
+    readonly description: string;
+    readonly needsCreds: boolean;
+    build(options?: JsonValue): Redactor;
+}
+/**
+ * Declarative spec resolved to a {@link Redactor} by {@link resolveRedactor}.
+ * A string is a bare catalog slug; an object carries per-slug options; an
+ * array chains multiple specs in order (each spec's output feeds the next).
+ */
+type RedactorSpec = string | {
+    readonly slug: string;
+    readonly options?: JsonValue;
+} | readonly RedactorSpec[];
+
+/** Passthrough redactor — returns the value unchanged. */
+declare const noneRedactor: Redactor;
+interface DenyListRedactorOptions {
+    readonly extraKeys?: readonly (string | RegExp)[];
+    readonly placeholder?: string;
+}
+/**
+ * Deep, immutable walk that masks the VALUE of every object entry whose KEY
+ * matches a deny pattern (case-insensitive substring/regex match), regardless
+ * of that value's type. Recurses into nested objects and array elements.
+ * Never mutates the input — always returns a new structure.
+ */
+declare function denyListRedactor(opts?: DenyListRedactorOptions): Redactor;
+interface TruncateRedactorOptions {
+    readonly maxStringLength?: number;
+    readonly maxArrayLength?: number;
+}
+/**
+ * Caps long strings and long arrays so oversized payloads don't leave the
+ * process. Recurses into nested objects/arrays. Never mutates the input.
+ */
+declare function truncateRedactor(opts?: TruncateRedactorOptions): Redactor;
+interface ValueScanRedactorOptions {
+    readonly placeholder?: string;
+    /** Extra whole-match secret patterns (use the `g` flag). */
+    readonly extraPatterns?: readonly RegExp[];
+}
+/**
+ * Deep, immutable walk that scans every STRING VALUE for well-known secret
+ * shapes and masks the matched substring — catching a credential leaked in a
+ * value whose key ISN'T denied (e.g. `{ note: "use sk-live-abc…" }`), which the
+ * key-based {@link denyListRedactor} cannot see. Surrounding text is preserved,
+ * and an `Authorization`-style `Bearer`/`Basic` scheme keeps the scheme word
+ * while masking only the token. Never mutates the input.
+ */
+declare function valueScanRedactor(opts?: ValueScanRedactorOptions): Redactor;
+/** Applies each redactor in order — the output of one feeds the next. */
+declare function chainRedactors(redactors: readonly Redactor[], slug?: string): Redactor;
+
+/** Static catalog of built-in redactor backends. All v1 entries are local, dependency-free transforms. */
+declare const REDACTOR_CATALOG: Readonly<Record<string, RedactorCatalogEntry>>;
+/**
+ * Resolve a {@link RedactorSpec} to a concrete {@link Redactor}.
+ * - `undefined` / `"none"` / `[]` resolve to {@link noneRedactor}.
+ * - A slug string resolves via the catalog's `build()`; throws on unknown slugs.
+ * - `{ slug, options }` resolves via the catalog's `build(options)`.
+ * - An array resolves each member and chains them in order.
+ */
+declare function resolveRedactor(spec?: RedactorSpec): Redactor;
+
+export { type DenyListRedactorOptions, type JsonValue, REDACTOR_CATALOG, type RedactionContext, type RedactionField, type Redactor, type RedactorCatalogEntry, type RedactorSpec, type TruncateRedactorOptions, type ValueScanRedactorOptions, chainRedactors, denyListRedactor, noneRedactor, resolveRedactor, truncateRedactor, valueScanRedactor };

package/dist/index.mjs

@@ -0,0 +1,291 @@
+/**
+ * @agentproto/redaction v0.1.0
+ * Vendor-neutral Redactor port + built-in redactors + catalog/resolver.
+ */
+
+// src/redactors.ts
+function isJsonArray(value) {
+  return Array.isArray(value);
+}
+function isJsonObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var noneRedactor = {
+  slug: "none",
+  redact(value) {
+    return value;
+  }
+};
+var DEFAULT_DENY_PATTERNS = [
+  "authorization",
+  "password",
+  "passwd",
+  "secret",
+  "token",
+  "apikey",
+  "api[-_]?key",
+  "access[-_]?key",
+  "client[-_]?secret",
+  "bearer",
+  "cookie",
+  "session[-_]?id",
+  "private[-_]?key",
+  "credential"
+];
+function escapeRegExp(literal) {
+  return literal.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function toKeyPattern(key) {
+  if (key instanceof RegExp) {
+    return new RegExp(key.source, key.flags.includes("i") ? key.flags : `${key.flags}i`);
+  }
+  return new RegExp(escapeRegExp(key), "i");
+}
+function denyListRedactor(opts = {}) {
+  const placeholder = opts.placeholder ?? "[redacted]";
+  const patterns = [
+    ...DEFAULT_DENY_PATTERNS.map((pattern) => new RegExp(pattern, "i")),
+    ...(opts.extraKeys ?? []).map(toKeyPattern)
+  ];
+  function keyIsDenied(key) {
+    return patterns.some((pattern) => pattern.test(key));
+  }
+  function walk(value) {
+    if (isJsonArray(value)) {
+      return value.map((element) => walk(element));
+    }
+    if (isJsonObject(value)) {
+      const result = {};
+      for (const [key, entryValue] of Object.entries(value)) {
+        result[key] = keyIsDenied(key) ? placeholder : walk(entryValue);
+      }
+      return result;
+    }
+    return value;
+  }
+  return {
+    slug: "deny-list",
+    redact(value) {
+      return walk(value);
+    }
+  };
+}
+function truncateRedactor(opts = {}) {
+  const maxStringLength = opts.maxStringLength ?? 2e3;
+  const maxArrayLength = opts.maxArrayLength ?? 100;
+  function walk(value) {
+    if (typeof value === "string") {
+      if (value.length <= maxStringLength) {
+        return value;
+      }
+      const extra = value.length - maxStringLength;
+      return `${value.slice(0, maxStringLength)}\u2026[+${extra} chars]`;
+    }
+    if (isJsonArray(value)) {
+      const walked = value.map((element) => walk(element));
+      if (walked.length <= maxArrayLength) {
+        return walked;
+      }
+      const extra = walked.length - maxArrayLength;
+      return [...walked.slice(0, maxArrayLength), `\u2026[+${extra} items]`];
+    }
+    if (isJsonObject(value)) {
+      const result = {};
+      for (const [key, entryValue] of Object.entries(value)) {
+        result[key] = walk(entryValue);
+      }
+      return result;
+    }
+    return value;
+  }
+  return {
+    slug: "truncate",
+    redact(value) {
+      return walk(value);
+    }
+  };
+}
+var DEFAULT_SECRET_PATTERNS = [
+  // PEM private key block (masked whole).
+  /-----BEGIN[A-Z ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z ]*PRIVATE KEY-----/g,
+  // JWT — header.payload.signature.
+  /\beyJ[A-Za-z0-9_-]{8,}\.eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g,
+  // OpenAI / Anthropic / Stripe-style prefixed keys: sk-, sk-ant-, sk_live_, …
+  /\bsk[-_](?:ant[-_]|proj[-_]|live[-_]|test[-_])?[A-Za-z0-9]{16,}\b/g,
+  // AWS access key id.
+  /\bAKIA[0-9A-Z]{16}\b/g,
+  // GitHub token — ghp_/gho_/ghu_/ghs_/ghr_.
+  /\bgh[pousr]_[A-Za-z0-9]{36,}\b/g,
+  // Slack token.
+  /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g,
+  // Google API key.
+  /\bAIza[0-9A-Za-z_-]{35}\b/g
+];
+function valueScanRedactor(opts = {}) {
+  const placeholder = opts.placeholder ?? "[redacted]";
+  const patterns = [...DEFAULT_SECRET_PATTERNS, ...opts.extraPatterns ?? []];
+  function scan(input) {
+    let out = input.replace(
+      /\b(Bearer|Basic)\s+[A-Za-z0-9._~+/=-]{12,}/gi,
+      (_match, scheme) => `${scheme} ${placeholder}`
+    );
+    for (const pattern of patterns) {
+      out = out.replace(pattern, placeholder);
+    }
+    return out;
+  }
+  function walk(value) {
+    if (typeof value === "string") {
+      return scan(value);
+    }
+    if (isJsonArray(value)) {
+      return value.map((element) => walk(element));
+    }
+    if (isJsonObject(value)) {
+      const result = {};
+      for (const [key, entryValue] of Object.entries(value)) {
+        result[key] = walk(entryValue);
+      }
+      return result;
+    }
+    return value;
+  }
+  return {
+    slug: "value-scan",
+    redact(value) {
+      return walk(value);
+    }
+  };
+}
+function chainRedactors(redactors, slug) {
+  const chainSlug = slug ?? redactors.map((redactor) => redactor.slug).join("+");
+  return {
+    slug: chainSlug,
+    redact(value, ctx) {
+      return redactors.reduce((acc, redactor) => redactor.redact(acc, ctx), value);
+    }
+  };
+}
+
+// src/catalog.ts
+function isJsonObject2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function toDenyListOptions(options) {
+  const placeholderValue = options.placeholder;
+  const extraKeysValue = options.extraKeys;
+  return {
+    placeholder: typeof placeholderValue === "string" ? placeholderValue : void 0,
+    extraKeys: Array.isArray(extraKeysValue) ? extraKeysValue.filter((entry) => typeof entry === "string") : void 0
+  };
+}
+function toTruncateOptions(options) {
+  const maxStringLengthValue = options.maxStringLength;
+  const maxArrayLengthValue = options.maxArrayLength;
+  return {
+    maxStringLength: typeof maxStringLengthValue === "number" ? maxStringLengthValue : void 0,
+    maxArrayLength: typeof maxArrayLengthValue === "number" ? maxArrayLengthValue : void 0
+  };
+}
+function toValueScanOptions(options) {
+  const placeholderValue = options.placeholder;
+  return {
+    placeholder: typeof placeholderValue === "string" ? placeholderValue : void 0
+  };
+}
+var REDACTOR_CATALOG = {
+  none: {
+    slug: "none",
+    description: "Passthrough \u2014 returns the value unchanged.",
+    needsCreds: false,
+    build() {
+      return noneRedactor;
+    }
+  },
+  "deny-list": {
+    slug: "deny-list",
+    description: "Deep, immutable walk that masks values whose object key matches a deny pattern (credentials, tokens, cookies, etc).",
+    needsCreds: false,
+    build(options) {
+      if (options === void 0) {
+        return denyListRedactor();
+      }
+      if (!isJsonObject2(options)) {
+        throw new Error("deny-list redactor options must be a JSON object");
+      }
+      return denyListRedactor(toDenyListOptions(options));
+    }
+  },
+  truncate: {
+    slug: "truncate",
+    description: "Caps long strings and long arrays so oversized payloads don't leave the process.",
+    needsCreds: false,
+    build(options) {
+      if (options === void 0) {
+        return truncateRedactor();
+      }
+      if (!isJsonObject2(options)) {
+        throw new Error("truncate redactor options must be a JSON object");
+      }
+      return truncateRedactor(toTruncateOptions(options));
+    }
+  },
+  "value-scan": {
+    slug: "value-scan",
+    description: "Deep walk that scans string VALUES for well-known secret shapes (prefixed API keys, JWTs, PEM private keys, cloud tokens) and masks the match, regardless of key. Complements deny-list, which only masks by key.",
+    needsCreds: false,
+    build(options) {
+      if (options === void 0) {
+        return valueScanRedactor();
+      }
+      if (!isJsonObject2(options)) {
+        throw new Error("value-scan redactor options must be a JSON object");
+      }
+      return valueScanRedactor(toValueScanOptions(options));
+    }
+  },
+  secrets: {
+    slug: "secrets",
+    description: "Recommended default for egress: deny-list (mask by key) chained with value-scan (mask secret shapes in values). Catches a credential whether it sits under a sensitive key or is embedded in an innocuous one.",
+    needsCreds: false,
+    build() {
+      return chainRedactors([denyListRedactor(), valueScanRedactor()], "secrets");
+    }
+  }
+};
+function isRedactorSpecObject(spec) {
+  return typeof spec === "object" && spec !== null && !Array.isArray(spec);
+}
+function resolveOne(slug, options) {
+  const entry = REDACTOR_CATALOG[slug];
+  if (entry === void 0) {
+    const known = Object.keys(REDACTOR_CATALOG).join(", ");
+    throw new Error(`unknown redactor slug: ${slug} (known slugs: ${known})`);
+  }
+  return entry.build(options);
+}
+function resolveRedactor(spec) {
+  if (spec === void 0) {
+    return noneRedactor;
+  }
+  if (Array.isArray(spec)) {
+    if (spec.length === 0) {
+      return noneRedactor;
+    }
+    return chainRedactors(spec.map((member) => resolveRedactor(member)));
+  }
+  if (typeof spec === "string") {
+    if (spec === "none") {
+      return noneRedactor;
+    }
+    return resolveOne(spec);
+  }
+  if (isRedactorSpecObject(spec)) {
+    return resolveOne(spec.slug, spec.options);
+  }
+  throw new Error("invalid redactor spec");
+}
+
+export { REDACTOR_CATALOG, chainRedactors, denyListRedactor, noneRedactor, resolveRedactor, truncateRedactor, valueScanRedactor };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/redactors.ts","../src/catalog.ts"],"names":["isJsonObject"],"mappings":";;;;;;AAEA,SAAS,YAAY,KAAA,EAAiD;AACpE,EAAA,OAAO,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5B;AAEA,SAAS,aAAa,KAAA,EAAkE;AACtF,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,KAAA,KAAU,QAAQ,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;AAGO,IAAM,YAAA,GAAyB;AAAA,EACpC,IAAA,EAAM,MAAA;AAAA,EACN,OAAO,KAAA,EAAO;AACZ,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAGA,IAAM,qBAAA,GAA2C;AAAA,EAC/C,eAAA;AAAA,EACA,UAAA;AAAA,EACA,QAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EACA,QAAA;AAAA,EACA,aAAA;AAAA,EACA,gBAAA;AAAA,EACA,mBAAA;AAAA,EACA,QAAA;AAAA,EACA,QAAA;AAAA,EACA,gBAAA;AAAA,EACA,iBAAA;AAAA,EACA;AACF,CAAA;AAEA,SAAS,aAAa,OAAA,EAAyB;AAC7C,EAAA,OAAO,OAAA,CAAQ,OAAA,CAAQ,qBAAA,EAAuB,MAAM,CAAA;AACtD;AAEA,SAAS,aAAa,GAAA,EAA8B;AAClD,EAAA,IAAI,eAAe,MAAA,EAAQ;AACzB,IAAA,OAAO,IAAI,MAAA,CAAO,GAAA,CAAI,MAAA,EAAQ,IAAI,KAAA,CAAM,QAAA,CAAS,GAAG,CAAA,GAAI,GAAA,CAAI,KAAA,GAAQ,CAAA,EAAG,GAAA,CAAI,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,EACrF;AACA,EAAA,OAAO,IAAI,MAAA,CAAO,YAAA,CAAa,GAAG,GAAG,GAAG,CAAA;AAC1C;AAaO,SAAS,gBAAA,CAAiB,IAAA,GAAgC,EAAC,EAAa;AAC7E,EAAA,MAAM,WAAA,GAAc,KAAK,WAAA,IAAe,YAAA;AACxC,EAAA,MAAM,QAAA,GAA8B;AAAA,IAClC,GAAG,sBAAsB,GAAA,CAAI,CAAC,YAAY,IAAI,MAAA,CAAO,OAAA,EAAS,GAAG,CAAC,CAAA;AAAA,IAClE,IAAI,IAAA,CAAK,SAAA,IAAa,EAAC,EAAG,IAAI,YAAY;AAAA,GAC5C;AAEA,EAAA,SAAS,YAAY,GAAA,EAAsB;AACzC,IAAA,OAAO,SAAS,IAAA,CAAK,CAAC,YAAY,OAAA,CAAQ,IAAA,CAAK,GAAG,CAAC,CAAA;AAAA,EACrD;AAEA,EAAA,SAAS,KAAK,KAAA,EAA6B;AACzC,IAAA,IAAI,WAAA,CAAY,KAAK,CAAA,EAAG;AACtB,MAAA,OAAO,MAAM,GAAA,CAAI,CAAC,OAAA,KAAY,IAAA,CAAK,OAAO,CAAC,CAAA;AAAA,IAC7C;AACA,IAAA,IAAI,YAAA,CAAa,KAAK,CAAA,EAAG;AACvB,MAAA,MAAM,SAAuC,EAAC;AAC9C,MAAA,KAAA,MAAW,CAAC,GAAA,EAAK,UAAU,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AACrD,QAAA,MAAA,CAAO,GAAG,CAAA,GAAI,WAAA,CAAY,GAAG,CAAA,GAAI,WAAA,GAAc,KAAK,UAAU,CAAA;AAAA,MAChE;AACA,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,WAAA;AAAA,IACN,OAAO,KAAA,EAAO;AACZ,MAAA,OAAO,KAAK,KAAK,CAAA;AAAA,IACnB;AAAA,GACF;AACF;AAWO,SAAS,gBAAA,CAAiB,IAAA,GAAgC,EAAC,EAAa;AAC7E,EAAA,MAAM,eAAA,GAAkB,KAAK,eAAA,IAAmB,GAAA;AAChD,EAAA,MAAM,cAAA,GAAiB,KAAK,cAAA,IAAkB,GAAA;AAE9C,EAAA,SAAS,KAAK,KAAA,EAA6B;AACzC,IAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,MAAA,IAAI,KAAA,CAAM,UAAU,eAAA,EAAiB;AACnC,QAAA,OAAO,KAAA;AAAA,MACT;AACA,MAAA,MAAM,KAAA,GAAQ,MAAM,MAAA,GAAS,eAAA;AAC7B,MAAA,OAAO,GAAG,KAAA,CAAM,KAAA,CAAM,GAAG,eAAe,CAAC,WAAM,KAAK,CAAA,OAAA,CAAA;AAAA,IACtD;AACA,IAAA,IAAI,WAAA,CAAY,KAAK,CAAA,EAAG;AACtB,MAAA,MAAM,SAAS,KAAA,CAAM,GAAA,CAAI,CAAC,OAAA,KAAY,IAAA,CAAK,OAAO,CAAC,CAAA;AACnD,MAAA,IAAI,MAAA,CAAO,UAAU,cAAA,EAAgB;AACnC,QAAA,OAAO,MAAA;AAAA,MACT;AACA,MAAA,MAAM,KAAA,GAAQ,OAAO,MAAA,GAAS,cAAA;AAC9B,MAAA,OAAO,CAAC,GAAG,MAAA,CAAO,KAAA,CAAM,GAAG,cAAc,CAAA,EAAG,CAAA,QAAA,EAAM,KAAK,CAAA,OAAA,CAAS,CAAA;AAAA,IAClE;AACA,IAAA,IAAI,YAAA,CAAa,KAAK,CAAA,EAAG;AACvB,MAAA,MAAM,SAAuC,EAAC;AAC9C,MAAA,KAAA,MAAW,CAAC,GAAA,EAAK,UAAU,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AACrD,QAAA,MAAA,CAAO,GAAG,CAAA,GAAI,IAAA,CAAK,UAAU,CAAA;AAAA,MAC/B;AACA,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,UAAA;AAAA,IACN,OAAO,KAAA,EAAO;AACZ,MAAA,OAAO,KAAK,KAAK,CAAA;AAAA,IACnB;AAAA,GACF;AACF;AAOA,IAAM,uBAAA,GAA6C;AAAA;AAAA,EAEjD,2EAAA;AAAA;AAAA,EAEA,oEAAA;AAAA;AAAA,EAEA,oEAAA;AAAA;AAAA,EAEA,uBAAA;AAAA;AAAA,EAEA,iCAAA;AAAA;AAAA,EAEA,mCAAA;AAAA;AAAA,EAEA;AACF,CAAA;AAgBO,SAAS,iBAAA,CAAkB,IAAA,GAAiC,EAAC,EAAa;AAC/E,EAAA,MAAM,WAAA,GAAc,KAAK,WAAA,IAAe,YAAA;AACxC,EAAA,MAAM,QAAA,GAA8B,CAAC,GAAG,uBAAA,EAAyB,GAAI,IAAA,CAAK,aAAA,IAAiB,EAAG,CAAA;AAE9F,EAAA,SAAS,KAAK,KAAA,EAAuB;AAEnC,IAAA,IAAI,MAAM,KAAA,CAAM,OAAA;AAAA,MACd,8CAAA;AAAA,MACA,CAAC,MAAA,EAAgB,MAAA,KAAmB,CAAA,EAAG,MAAM,IAAI,WAAW,CAAA;AAAA,KAC9D;AACA,IAAA,KAAA,MAAW,WAAW,QAAA,EAAU;AAC9B,MAAA,GAAA,GAAM,GAAA,CAAI,OAAA,CAAQ,OAAA,EAAS,WAAW,CAAA;AAAA,IACxC;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AAEA,EAAA,SAAS,KAAK,KAAA,EAA6B;AACzC,IAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,MAAA,OAAO,KAAK,KAAK,CAAA;AAAA,IACnB;AACA,IAAA,IAAI,WAAA,CAAY,KAAK,CAAA,EAAG;AACtB,MAAA,OAAO,MAAM,GAAA,CAAI,CAAC,OAAA,KAAY,IAAA,CAAK,OAAO,CAAC,CAAA;AAAA,IAC7C;AACA,IAAA,IAAI,YAAA,CAAa,KAAK,CAAA,EAAG;AACvB,MAAA,MAAM,SAAuC,EAAC;AAC9C,MAAA,KAAA,MAAW,CAAC,GAAA,EAAK,UAAU,KAAK,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,EAAG;AACrD,QAAA,MAAA,CAAO,GAAG,CAAA,GAAI,IAAA,CAAK,UAAU,CAAA;AAAA,MAC/B;AACA,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,YAAA;AAAA,IACN,OAAO,KAAA,EAAO;AACZ,MAAA,OAAO,KAAK,KAAK,CAAA;AAAA,IACnB;AAAA,GACF;AACF;AAGO,SAAS,cAAA,CAAe,WAAgC,IAAA,EAAyB;AACtF,EAAA,MAAM,SAAA,GAAY,IAAA,IAAQ,SAAA,CAAU,GAAA,CAAI,CAAC,aAAa,QAAA,CAAS,IAAI,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA;AAC7E,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,SAAA;AAAA,IACN,MAAA,CAAO,OAAO,GAAA,EAAK;AACjB,MAAA,OAAO,SAAA,CAAU,MAAA,CAAO,CAAC,GAAA,EAAK,QAAA,KAAa,SAAS,MAAA,CAAO,GAAA,EAAK,GAAG,CAAA,EAAG,KAAK,CAAA;AAAA,IAC7E;AAAA,GACF;AACF;;;AClNA,SAASA,cAAa,KAAA,EAAkE;AACtF,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,KAAA,KAAU,QAAQ,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;AAOA,SAAS,kBAAkB,OAAA,EAAyE;AAClG,EAAA,MAAM,mBAAmB,OAAA,CAAQ,WAAA;AACjC,EAAA,MAAM,iBAAiB,OAAA,CAAQ,SAAA;AAC/B,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,OAAO,gBAAA,KAAqB,QAAA,GAAW,gBAAA,GAAmB,MAAA;AAAA,IACvE,SAAA,EAAW,KAAA,CAAM,OAAA,CAAQ,cAAc,CAAA,GACnC,cAAA,CAAe,MAAA,CAAO,CAAC,KAAA,KAA2B,OAAO,KAAA,KAAU,QAAQ,CAAA,GAC3E;AAAA,GACN;AACF;AAEA,SAAS,kBAAkB,OAAA,EAAyE;AAClG,EAAA,MAAM,uBAAuB,OAAA,CAAQ,eAAA;AACrC,EAAA,MAAM,sBAAsB,OAAA,CAAQ,cAAA;AACpC,EAAA,OAAO;AAAA,IACL,eAAA,EAAiB,OAAO,oBAAA,KAAyB,QAAA,GAAW,oBAAA,GAAuB,MAAA;AAAA,IACnF,cAAA,EAAgB,OAAO,mBAAA,KAAwB,QAAA,GAAW,mBAAA,GAAsB;AAAA,GAClF;AACF;AAOA,SAAS,mBAAmB,OAAA,EAEC;AAC3B,EAAA,MAAM,mBAAmB,OAAA,CAAQ,WAAA;AACjC,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,OAAO,gBAAA,KAAqB,QAAA,GAAW,gBAAA,GAAmB;AAAA,GACzE;AACF;AAGO,IAAM,gBAAA,GAAmE;AAAA,EAC9E,IAAA,EAAM;AAAA,IACJ,IAAA,EAAM,MAAA;AAAA,IACN,WAAA,EAAa,iDAAA;AAAA,IACb,UAAA,EAAY,KAAA;AAAA,IACZ,KAAA,GAAQ;AACN,MAAA,OAAO,YAAA;AAAA,IACT;AAAA,GACF;AAAA,EACA,WAAA,EAAa;AAAA,IACX,IAAA,EAAM,WAAA;AAAA,IACN,WAAA,EACE,qHAAA;AAAA,IAEF,UAAA,EAAY,KAAA;AAAA,IACZ,MAAM,OAAA,EAAS;AACb,MAAA,IAAI,YAAY,MAAA,EAAW;AACzB,QAAA,OAAO,gBAAA,EAAiB;AAAA,MAC1B;AACA,MAAA,IAAI,CAACA,aAAAA,CAAa,OAAO,CAAA,EAAG;AAC1B,QAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,MACpE;AACA,MAAA,OAAO,gBAAA,CAAiB,iBAAA,CAAkB,OAAO,CAAC,CAAA;AAAA,IACpD;AAAA,GACF;AAAA,EACA,QAAA,EAAU;AAAA,IACR,IAAA,EAAM,UAAA;AAAA,IACN,WAAA,EAAa,kFAAA;AAAA,IACb,UAAA,EAAY,KAAA;AAAA,IACZ,MAAM,OAAA,EAAS;AACb,MAAA,IAAI,YAAY,MAAA,EAAW;AACzB,QAAA,OAAO,gBAAA,EAAiB;AAAA,MAC1B;AACA,MAAA,IAAI,CAACA,aAAAA,CAAa,OAAO,CAAA,EAAG;AAC1B,QAAA,MAAM,IAAI,MAAM,iDAAiD,CAAA;AAAA,MACnE;AACA,MAAA,OAAO,gBAAA,CAAiB,iBAAA,CAAkB,OAAO,CAAC,CAAA;AAAA,IACpD;AAAA,GACF;AAAA,EACA,YAAA,EAAc;AAAA,IACZ,IAAA,EAAM,YAAA;AAAA,IACN,WAAA,EACE,mNAAA;AAAA,IAGF,UAAA,EAAY,KAAA;AAAA,IACZ,MAAM,OAAA,EAAS;AACb,MAAA,IAAI,YAAY,MAAA,EAAW;AACzB,QAAA,OAAO,iBAAA,EAAkB;AAAA,MAC3B;AACA,MAAA,IAAI,CAACA,aAAAA,CAAa,OAAO,CAAA,EAAG;AAC1B,QAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,MACrE;AACA,MAAA,OAAO,iBAAA,CAAkB,kBAAA,CAAmB,OAAO,CAAC,CAAA;AAAA,IACtD;AAAA,GACF;AAAA,EACA,OAAA,EAAS;AAAA,IACP,IAAA,EAAM,SAAA;AAAA,IACN,WAAA,EACE,gNAAA;AAAA,IAGF,UAAA,EAAY,KAAA;AAAA,IACZ,KAAA,GAAQ;AACN,MAAA,OAAO,eAAe,CAAC,gBAAA,IAAoB,iBAAA,EAAmB,GAAG,SAAS,CAAA;AAAA,IAC5E;AAAA;AAEJ;AAEA,SAAS,qBACP,IAAA,EACiE;AACjE,EAAA,OAAO,OAAO,SAAS,QAAA,IAAY,IAAA,KAAS,QAAQ,CAAC,KAAA,CAAM,QAAQ,IAAI,CAAA;AACzE;AAEA,SAAS,UAAA,CAAW,MAAc,OAAA,EAA+B;AAC/D,EAAA,MAAM,KAAA,GAAQ,iBAAiB,IAAI,CAAA;AACnC,EAAA,IAAI,UAAU,MAAA,EAAW;AACvB,IAAA,MAAM,QAAQ,MAAA,CAAO,IAAA,CAAK,gBAAgB,CAAA,CAAE,KAAK,IAAI,CAAA;AACrD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,uBAAA,EAA0B,IAAI,CAAA,eAAA,EAAkB,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,EAC1E;AACA,EAAA,OAAO,KAAA,CAAM,MAAM,OAAO,CAAA;AAC5B;AASO,SAAS,gBAAgB,IAAA,EAA+B;AAC7D,EAAA,IAAI,SAAS,MAAA,EAAW;AACtB,IAAA,OAAO,YAAA;AAAA,EACT;AACA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AACvB,IAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACrB,MAAA,OAAO,YAAA;AAAA,IACT;AACA,IAAA,OAAO,cAAA,CAAe,KAAK,GAAA,CAAI,CAAC,WAAW,eAAA,CAAgB,MAAM,CAAC,CAAC,CAAA;AAAA,EACrE;AACA,EAAA,IAAI,OAAO,SAAS,QAAA,EAAU;AAC5B,IAAA,IAAI,SAAS,MAAA,EAAQ;AACnB,MAAA,OAAO,YAAA;AAAA,IACT;AACA,IAAA,OAAO,WAAW,IAAI,CAAA;AAAA,EACxB;AACA,EAAA,IAAI,oBAAA,CAAqB,IAAI,CAAA,EAAG;AAC9B,IAAA,OAAO,UAAA,CAAW,IAAA,CAAK,IAAA,EAAM,IAAA,CAAK,OAAO,CAAA;AAAA,EAC3C;AACA,EAAA,MAAM,IAAI,MAAM,uBAAuB,CAAA;AACzC","file":"index.mjs","sourcesContent":["import type { JsonValue, Redactor } from \"./types.js\"\n\nfunction isJsonArray(value: JsonValue): value is readonly JsonValue[] {\n  return Array.isArray(value)\n}\n\nfunction isJsonObject(value: JsonValue): value is { readonly [key: string]: JsonValue } {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n\n/** Passthrough redactor — returns the value unchanged. */\nexport const noneRedactor: Redactor = {\n  slug: \"none\",\n  redact(value) {\n    return value\n  },\n}\n\n/** Default case-insensitive deny patterns, matched if a key CONTAINS them. */\nconst DEFAULT_DENY_PATTERNS: readonly string[] = [\n  \"authorization\",\n  \"password\",\n  \"passwd\",\n  \"secret\",\n  \"token\",\n  \"apikey\",\n  \"api[-_]?key\",\n  \"access[-_]?key\",\n  \"client[-_]?secret\",\n  \"bearer\",\n  \"cookie\",\n  \"session[-_]?id\",\n  \"private[-_]?key\",\n  \"credential\",\n]\n\nfunction escapeRegExp(literal: string): string {\n  return literal.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\")\n}\n\nfunction toKeyPattern(key: string | RegExp): RegExp {\n  if (key instanceof RegExp) {\n    return new RegExp(key.source, key.flags.includes(\"i\") ? key.flags : `${key.flags}i`)\n  }\n  return new RegExp(escapeRegExp(key), \"i\")\n}\n\nexport interface DenyListRedactorOptions {\n  readonly extraKeys?: readonly (string | RegExp)[]\n  readonly placeholder?: string\n}\n\n/**\n * Deep, immutable walk that masks the VALUE of every object entry whose KEY\n * matches a deny pattern (case-insensitive substring/regex match), regardless\n * of that value's type. Recurses into nested objects and array elements.\n * Never mutates the input — always returns a new structure.\n */\nexport function denyListRedactor(opts: DenyListRedactorOptions = {}): Redactor {\n  const placeholder = opts.placeholder ?? \"[redacted]\"\n  const patterns: readonly RegExp[] = [\n    ...DEFAULT_DENY_PATTERNS.map((pattern) => new RegExp(pattern, \"i\")),\n    ...(opts.extraKeys ?? []).map(toKeyPattern),\n  ]\n\n  function keyIsDenied(key: string): boolean {\n    return patterns.some((pattern) => pattern.test(key))\n  }\n\n  function walk(value: JsonValue): JsonValue {\n    if (isJsonArray(value)) {\n      return value.map((element) => walk(element))\n    }\n    if (isJsonObject(value)) {\n      const result: { [key: string]: JsonValue } = {}\n      for (const [key, entryValue] of Object.entries(value)) {\n        result[key] = keyIsDenied(key) ? placeholder : walk(entryValue)\n      }\n      return result\n    }\n    return value\n  }\n\n  return {\n    slug: \"deny-list\",\n    redact(value) {\n      return walk(value)\n    },\n  }\n}\n\nexport interface TruncateRedactorOptions {\n  readonly maxStringLength?: number\n  readonly maxArrayLength?: number\n}\n\n/**\n * Caps long strings and long arrays so oversized payloads don't leave the\n * process. Recurses into nested objects/arrays. Never mutates the input.\n */\nexport function truncateRedactor(opts: TruncateRedactorOptions = {}): Redactor {\n  const maxStringLength = opts.maxStringLength ?? 2000\n  const maxArrayLength = opts.maxArrayLength ?? 100\n\n  function walk(value: JsonValue): JsonValue {\n    if (typeof value === \"string\") {\n      if (value.length <= maxStringLength) {\n        return value\n      }\n      const extra = value.length - maxStringLength\n      return `${value.slice(0, maxStringLength)}…[+${extra} chars]`\n    }\n    if (isJsonArray(value)) {\n      const walked = value.map((element) => walk(element))\n      if (walked.length <= maxArrayLength) {\n        return walked\n      }\n      const extra = walked.length - maxArrayLength\n      return [...walked.slice(0, maxArrayLength), `…[+${extra} items]`]\n    }\n    if (isJsonObject(value)) {\n      const result: { [key: string]: JsonValue } = {}\n      for (const [key, entryValue] of Object.entries(value)) {\n        result[key] = walk(entryValue)\n      }\n      return result\n    }\n    return value\n  }\n\n  return {\n    slug: \"truncate\",\n    redact(value) {\n      return walk(value)\n    },\n  }\n}\n\n/**\n * Well-known secret shapes, matched inside STRING VALUES regardless of the key\n * they sit under. All patterns are prefix-anchored and linear (no nested\n * quantifiers over overlapping classes) so they can't backtrack pathologically.\n */\nconst DEFAULT_SECRET_PATTERNS: readonly RegExp[] = [\n  // PEM private key block (masked whole).\n  /-----BEGIN[A-Z ]*PRIVATE KEY-----[\\s\\S]*?-----END[A-Z ]*PRIVATE KEY-----/g,\n  // JWT — header.payload.signature.\n  /\\beyJ[A-Za-z0-9_-]{8,}\\.eyJ[A-Za-z0-9_-]{8,}\\.[A-Za-z0-9_-]{8,}\\b/g,\n  // OpenAI / Anthropic / Stripe-style prefixed keys: sk-, sk-ant-, sk_live_, …\n  /\\bsk[-_](?:ant[-_]|proj[-_]|live[-_]|test[-_])?[A-Za-z0-9]{16,}\\b/g,\n  // AWS access key id.\n  /\\bAKIA[0-9A-Z]{16}\\b/g,\n  // GitHub token — ghp_/gho_/ghu_/ghs_/ghr_.\n  /\\bgh[pousr]_[A-Za-z0-9]{36,}\\b/g,\n  // Slack token.\n  /\\bxox[baprs]-[A-Za-z0-9-]{10,}\\b/g,\n  // Google API key.\n  /\\bAIza[0-9A-Za-z_-]{35}\\b/g,\n]\n\nexport interface ValueScanRedactorOptions {\n  readonly placeholder?: string\n  /** Extra whole-match secret patterns (use the `g` flag). */\n  readonly extraPatterns?: readonly RegExp[]\n}\n\n/**\n * Deep, immutable walk that scans every STRING VALUE for well-known secret\n * shapes and masks the matched substring — catching a credential leaked in a\n * value whose key ISN'T denied (e.g. `{ note: \"use sk-live-abc…\" }`), which the\n * key-based {@link denyListRedactor} cannot see. Surrounding text is preserved,\n * and an `Authorization`-style `Bearer`/`Basic` scheme keeps the scheme word\n * while masking only the token. Never mutates the input.\n */\nexport function valueScanRedactor(opts: ValueScanRedactorOptions = {}): Redactor {\n  const placeholder = opts.placeholder ?? \"[redacted]\"\n  const patterns: readonly RegExp[] = [...DEFAULT_SECRET_PATTERNS, ...(opts.extraPatterns ?? [])]\n\n  function scan(input: string): string {\n    // Scheme-preserving first: keep \"Bearer\"/\"Basic\", mask the token after it.\n    let out = input.replace(\n      /\\b(Bearer|Basic)\\s+[A-Za-z0-9._~+/=-]{12,}/gi,\n      (_match: string, scheme: string) => `${scheme} ${placeholder}`,\n    )\n    for (const pattern of patterns) {\n      out = out.replace(pattern, placeholder)\n    }\n    return out\n  }\n\n  function walk(value: JsonValue): JsonValue {\n    if (typeof value === \"string\") {\n      return scan(value)\n    }\n    if (isJsonArray(value)) {\n      return value.map((element) => walk(element))\n    }\n    if (isJsonObject(value)) {\n      const result: { [key: string]: JsonValue } = {}\n      for (const [key, entryValue] of Object.entries(value)) {\n        result[key] = walk(entryValue)\n      }\n      return result\n    }\n    return value\n  }\n\n  return {\n    slug: \"value-scan\",\n    redact(value) {\n      return walk(value)\n    },\n  }\n}\n\n/** Applies each redactor in order — the output of one feeds the next. */\nexport function chainRedactors(redactors: readonly Redactor[], slug?: string): Redactor {\n  const chainSlug = slug ?? redactors.map((redactor) => redactor.slug).join(\"+\")\n  return {\n    slug: chainSlug,\n    redact(value, ctx) {\n      return redactors.reduce((acc, redactor) => redactor.redact(acc, ctx), value)\n    },\n  }\n}\n","import {\n  chainRedactors,\n  denyListRedactor,\n  noneRedactor,\n  truncateRedactor,\n  valueScanRedactor,\n} from \"./redactors.js\"\nimport type {\n  DenyListRedactorOptions,\n  TruncateRedactorOptions,\n  ValueScanRedactorOptions,\n} from \"./redactors.js\"\nimport type { JsonValue, Redactor, RedactorCatalogEntry, RedactorSpec } from \"./types.js\"\n\nfunction isJsonObject(value: JsonValue): value is { readonly [key: string]: JsonValue } {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value)\n}\n\n/**\n * Builds deny-list options from JSON. Only string `extraKeys` can round-trip\n * through JSON (a `RegExp` cannot); pass `RegExp` entries by calling\n * {@link denyListRedactor} directly instead of through the catalog.\n */\nfunction toDenyListOptions(options: { readonly [key: string]: JsonValue }): DenyListRedactorOptions {\n  const placeholderValue = options.placeholder\n  const extraKeysValue = options.extraKeys\n  return {\n    placeholder: typeof placeholderValue === \"string\" ? placeholderValue : undefined,\n    extraKeys: Array.isArray(extraKeysValue)\n      ? extraKeysValue.filter((entry): entry is string => typeof entry === \"string\")\n      : undefined,\n  }\n}\n\nfunction toTruncateOptions(options: { readonly [key: string]: JsonValue }): TruncateRedactorOptions {\n  const maxStringLengthValue = options.maxStringLength\n  const maxArrayLengthValue = options.maxArrayLength\n  return {\n    maxStringLength: typeof maxStringLengthValue === \"number\" ? maxStringLengthValue : undefined,\n    maxArrayLength: typeof maxArrayLengthValue === \"number\" ? maxArrayLengthValue : undefined,\n  }\n}\n\n/**\n * Builds value-scan options from JSON. Only `placeholder` round-trips through\n * JSON; `extraPatterns` are `RegExp` and must be passed by calling\n * {@link valueScanRedactor} directly.\n */\nfunction toValueScanOptions(options: {\n  readonly [key: string]: JsonValue\n}): ValueScanRedactorOptions {\n  const placeholderValue = options.placeholder\n  return {\n    placeholder: typeof placeholderValue === \"string\" ? placeholderValue : undefined,\n  }\n}\n\n/** Static catalog of built-in redactor backends. All v1 entries are local, dependency-free transforms. */\nexport const REDACTOR_CATALOG: Readonly<Record<string, RedactorCatalogEntry>> = {\n  none: {\n    slug: \"none\",\n    description: \"Passthrough — returns the value unchanged.\",\n    needsCreds: false,\n    build() {\n      return noneRedactor\n    },\n  },\n  \"deny-list\": {\n    slug: \"deny-list\",\n    description:\n      \"Deep, immutable walk that masks values whose object key matches a deny pattern \" +\n      \"(credentials, tokens, cookies, etc).\",\n    needsCreds: false,\n    build(options) {\n      if (options === undefined) {\n        return denyListRedactor()\n      }\n      if (!isJsonObject(options)) {\n        throw new Error(\"deny-list redactor options must be a JSON object\")\n      }\n      return denyListRedactor(toDenyListOptions(options))\n    },\n  },\n  truncate: {\n    slug: \"truncate\",\n    description: \"Caps long strings and long arrays so oversized payloads don't leave the process.\",\n    needsCreds: false,\n    build(options) {\n      if (options === undefined) {\n        return truncateRedactor()\n      }\n      if (!isJsonObject(options)) {\n        throw new Error(\"truncate redactor options must be a JSON object\")\n      }\n      return truncateRedactor(toTruncateOptions(options))\n    },\n  },\n  \"value-scan\": {\n    slug: \"value-scan\",\n    description:\n      \"Deep walk that scans string VALUES for well-known secret shapes (prefixed API \" +\n      \"keys, JWTs, PEM private keys, cloud tokens) and masks the match, regardless of \" +\n      \"key. Complements deny-list, which only masks by key.\",\n    needsCreds: false,\n    build(options) {\n      if (options === undefined) {\n        return valueScanRedactor()\n      }\n      if (!isJsonObject(options)) {\n        throw new Error(\"value-scan redactor options must be a JSON object\")\n      }\n      return valueScanRedactor(toValueScanOptions(options))\n    },\n  },\n  secrets: {\n    slug: \"secrets\",\n    description:\n      \"Recommended default for egress: deny-list (mask by key) chained with value-scan \" +\n      \"(mask secret shapes in values). Catches a credential whether it sits under a \" +\n      \"sensitive key or is embedded in an innocuous one.\",\n    needsCreds: false,\n    build() {\n      return chainRedactors([denyListRedactor(), valueScanRedactor()], \"secrets\")\n    },\n  },\n}\n\nfunction isRedactorSpecObject(\n  spec: RedactorSpec,\n): spec is { readonly slug: string; readonly options?: JsonValue } {\n  return typeof spec === \"object\" && spec !== null && !Array.isArray(spec)\n}\n\nfunction resolveOne(slug: string, options?: JsonValue): Redactor {\n  const entry = REDACTOR_CATALOG[slug]\n  if (entry === undefined) {\n    const known = Object.keys(REDACTOR_CATALOG).join(\", \")\n    throw new Error(`unknown redactor slug: ${slug} (known slugs: ${known})`)\n  }\n  return entry.build(options)\n}\n\n/**\n * Resolve a {@link RedactorSpec} to a concrete {@link Redactor}.\n * - `undefined` / `\"none\"` / `[]` resolve to {@link noneRedactor}.\n * - A slug string resolves via the catalog's `build()`; throws on unknown slugs.\n * - `{ slug, options }` resolves via the catalog's `build(options)`.\n * - An array resolves each member and chains them in order.\n */\nexport function resolveRedactor(spec?: RedactorSpec): Redactor {\n  if (spec === undefined) {\n    return noneRedactor\n  }\n  if (Array.isArray(spec)) {\n    if (spec.length === 0) {\n      return noneRedactor\n    }\n    return chainRedactors(spec.map((member) => resolveRedactor(member)))\n  }\n  if (typeof spec === \"string\") {\n    if (spec === \"none\") {\n      return noneRedactor\n    }\n    return resolveOne(spec)\n  }\n  if (isRedactorSpecObject(spec)) {\n    return resolveOne(spec.slug, spec.options)\n  }\n  throw new Error(\"invalid redactor spec\")\n}\n"]}

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@agentproto/redaction",
+  "version": "0.2.0",
+  "description": "agentproto/redaction — vendor-neutral Redactor port + built-in redactors (none, deny-list, truncate, chain) and a catalog/resolver so any egress boundary can scrub outbound payloads before they leave the process.",
+  "keywords": [
+    "agentproto",
+    "redaction",
+    "pii",
+    "privacy",
+    "egress",
+    "open-standard",
+    "agentic"
+  ],
+  "homepage": "https://agentik.net/docs",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/agentproto/ts",
+    "directory": "packages/redaction"
+  },
+  "bugs": {
+    "url": "https://github.com/agentproto/ts/issues"
+  },
+  "license": "MIT",
+  "type": "module",
+  "main": "dist/index.mjs",
+  "module": "dist/index.mjs",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "default": "./dist/index.mjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@types/node": "^25.6.2",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3",
+    "vitest": "^3.2.4",
+    "@agentproto/tooling": "0.1.0-alpha.0"
+  },
+  "scripts": {
+    "dev": "tsup --watch",
+    "build": "tsup",
+    "clean": "rm -rf dist",
+    "check-types": "tsc --noEmit",
+    "test": "vitest run --passWithNoTests",
+    "test:watch": "vitest"
+  }
+}