@aictrl/hush 0.1.0

package/dist/lib/dashboard.js

@@ -0,0 +1,152 @@
+import blessed from 'blessed';
+import contrib from 'blessed-contrib';
+/**
+ * hush 🛡️ Dashboard v2 - Terminal Edition
+ * Aligned with the official brand book and dashboard mockup.
+ */
+export class Dashboard {
+    screen;
+    grid;
+    // Components
+    log;
+    piiBreakdown;
+    vaultGauge;
+    latencySpark;
+    // Hero Stats (Boxes)
+    statBoxes;
+    // State
+    stats = {
+        redactedCount: 0,
+        requestCount: 0,
+        leaks: 0,
+        types: new Map(),
+        latency: [],
+    };
+    constructor() {
+        this.screen = blessed.screen({
+            smartCSR: true,
+            title: 'hush 🛡️ | Semantic Security Gateway'
+        });
+        this.grid = new contrib.grid({ rows: 12, cols: 12, screen: this.screen });
+        // --- ROW 1: HERO STATS (0-2) ---
+        this.statBoxes = {
+            protection: this.grid.set(0, 0, 2, 3, blessed.box, {
+                label: ' PROTECTION ',
+                content: '{center}{green-fg}ACTIVE{/green-fg}{/center}\n{center}127.0.0.1:4000{/center}',
+                tags: true,
+                border: { type: 'line', fg: 'green' }
+            }),
+            piiCount: this.grid.set(0, 3, 2, 3, blessed.box, {
+                label: ' PII PROTECTED ',
+                content: '{center}{bold}0{/bold}{/center}',
+                tags: true,
+                border: { type: 'line', fg: 'blue' }
+            }),
+            activePatterns: this.grid.set(0, 6, 2, 3, blessed.box, {
+                label: ' PATTERNS ',
+                content: '{center}{bold}6{/bold}{/center}',
+                tags: true,
+                border: { type: 'line', fg: 'yellow' }
+            }),
+            leakCount: this.grid.set(0, 9, 2, 3, blessed.box, {
+                label: ' LEAKS ',
+                content: '{center}{bold}0{/bold}{/center}',
+                tags: true,
+                border: { type: 'line', fg: 'white' }
+            })
+        };
+        // --- ROW 2: LIVE FEED & TYPE BREAKDOWN (2-9) ---
+        this.log = this.grid.set(2, 0, 7, 8, contrib.log, {
+            fg: 'green',
+            selectedFg: 'green',
+            label: ' Live Redaction Feed ',
+            border: { type: 'line', fg: 'cyan' }
+        });
+        this.piiBreakdown = this.grid.set(2, 8, 7, 4, contrib.bar, {
+            label: ' PII by Type ',
+            barWidth: 4,
+            barSpacing: 6,
+            xOffset: 0,
+            maxHeight: 10,
+        });
+        // --- ROW 3: VAULT & LATENCY (9-12) ---
+        this.vaultGauge = this.grid.set(9, 0, 3, 4, contrib.gauge, {
+            label: ' Vault Capacity ',
+            percent: [0],
+        });
+        this.latencySpark = this.grid.set(9, 4, 3, 8, contrib.sparkline, {
+            label: ' Redaction Latency (ms) ',
+            tags: true,
+            style: { fg: 'blue' }
+        });
+        // Quit keys
+        this.screen.key(['escape', 'q', 'C-c'], () => {
+            return process.exit(0);
+        });
+        this.render();
+    }
+    logRedaction(type, token) {
+        this.stats.redactedCount++;
+        this.stats.types.set(type, (this.stats.types.get(type) || 0) + 1);
+        // Log entry with color highlighting
+        const typeColor = this.getTypeColor(type);
+        this.log.log(`{${typeColor}-fg}${type.padEnd(5)}{/${typeColor}-fg} | {grey-fg}PROTECTED{/grey-fg} → {white-fg}${token}{/white-fg}`);
+        this.updateUI();
+    }
+    logRequest(path, durationMs = 0) {
+        this.stats.requestCount++;
+        if (durationMs > 0) {
+            this.stats.latency.push(durationMs);
+            if (this.stats.latency.length > 50)
+                this.stats.latency.shift();
+        }
+        this.updateUI();
+    }
+    getTypeColor(type) {
+        const colors = {
+            'EML': 'blue',
+            'IP4': 'yellow',
+            'SEC': 'red',
+            'CC': 'magenta',
+            'PHN': 'green'
+        };
+        return colors[type] || 'white';
+    }
+    updateUI() {
+        // Update Stat Boxes
+        this.statBoxes.piiCount.setContent(`{center}{bold}${this.stats.redactedCount}{/bold}{/center}`);
+        this.statBoxes.protection.setContent(`{center}{green-fg}ACTIVE{/green-fg}{/center}\n{center}${this.stats.requestCount} REQS{/center}`);
+        // Update Breakdown Bar Chart
+        const barData = {
+            titles: Array.from(this.stats.types.keys()),
+            data: Array.from(this.stats.types.values())
+        };
+        if (barData.titles.length > 0) {
+            this.piiBreakdown.setData(barData);
+        }
+        // Update Latency Sparkline
+        if (this.stats.latency.length > 0) {
+            this.latencySpark.setData(['Latency'], [this.stats.latency]);
+        }
+        // Update Vault Gauge (Simulated/Placeholder for now)
+        const vaultPercent = Math.min(100, Math.round((this.stats.redactedCount / 1000) * 100));
+        this.vaultGauge.setData([vaultPercent]);
+        this.render();
+    }
+    render() {
+        this.screen.render();
+    }
+    /**
+     * Get current dashboard statistics (for testing and programmatic access).
+     */
+    getStats() {
+        return {
+            redactedCount: this.stats.redactedCount,
+            requestCount: this.stats.requestCount,
+            leaks: this.stats.leaks,
+            types: new Map(this.stats.types),
+            latency: [...this.stats.latency],
+        };
+    }
+}
+//# sourceMappingURL=dashboard.js.map

package/dist/lib/dashboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard.js","sourceRoot":"","sources":["../../src/lib/dashboard.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,OAAO,MAAM,iBAAiB,CAAC;AAEtC;;;GAGG;AACH,MAAM,OAAO,SAAS;IACZ,MAAM,CAAyB;IAC/B,IAAI,CAAe;IAE3B,aAAa;IACL,GAAG,CAAM;IACT,YAAY,CAAM;IAClB,UAAU,CAAM;IAChB,YAAY,CAAM;IAE1B,qBAAqB;IACb,SAAS,CAKf;IAEF,QAAQ;IACA,KAAK,GAAG;QACd,aAAa,EAAE,CAAC;QAChB,YAAY,EAAE,CAAC;QACf,KAAK,EAAE,CAAC;QACR,KAAK,EAAE,IAAI,GAAG,EAAkB;QAChC,OAAO,EAAE,EAAc;KACxB,CAAC;IAEF;QACE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAC3B,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,sCAAsC;SAC9C,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAE1E,kCAAkC;QAClC,IAAI,CAAC,SAAS,GAAG;YACf,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE;gBACjD,KAAK,EAAE,cAAc;gBACrB,OAAO,EAAE,+EAA+E;gBACxF,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE;aACtC,CAAC;YACF,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE;gBAC/C,KAAK,EAAE,iBAAiB;gBACxB,OAAO,EAAE,iCAAiC;gBAC1C,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE;aACrC,CAAC;YACF,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE;gBACrD,KAAK,EAAE,YAAY;gBACnB,OAAO,EAAE,iCAAiC;gBAC1C,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE;aACvC,CAAC;YACF,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE;gBAChD,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE,iCAAiC;gBAC1C,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE;aACtC,CAAC;SACH,CAAC;QAEF,kDAAkD;QAClD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE;YAChD,EAAE,EAAE,OAAO;YACX,UAAU,EAAE,OAAO;YACnB,KAAK,EAAE,uBAAuB;YAC9B,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE;SACrC,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,GAAG,EAAE;YACzD,KAAK,EAAE,eAAe;YACtB,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;QAEH,wCAAwC;QACxC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE;YACzD,KAAK,EAAE,kBAAkB;YACzB,OAAO,EAAE,CAAC,CAAC,CAAC;SACb,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE;YAC/D,KAAK,EAAE,0BAA0B;YACjC,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;SACtB,CAAC,CAAC;QAEH,YAAY;QACZ,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,GAAG,EAAE;YAC3C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAEM,YAAY,CAAC,IAAY,EAAE,KAAa;QAC7C,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAElE,oCAAoC;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,SAAS,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,mDAAmD,KAAK,aAAa,CAAC,CAAC;QAEpI,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAEM,UAAU,CAAC,IAAY,EAAE,aAAqB,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QAC1B,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACpC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE;gBAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;IAClB,CAAC;IAEO,YAAY,CAAC,IAAY;QAC/B,MAAM,MAAM,GAA2B;YACrC,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,OAAO;SACf,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC;IACjC,CAAC;IAEO,QAAQ;QACd,oBAAoB;QACpB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,iBAAiB,IAAI,CAAC,KAAK,CAAC,aAAa,kBAAkB,CAAC,CAAC;QAChG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,yDAAyD,IAAI,CAAC,KAAK,CAAC,YAAY,gBAAgB,CAAC,CAAC;QAEvI,6BAA6B;QAC7B,MAAM,OAAO,GAAG;YACd,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;SAC5C,CAAC;QACF,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QAED,2BAA2B;QAC3B,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC;QAED,qDAAqD;QACrD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QAExC,IAAI,CAAC,MAAM,EAAE,CAAC;IAChB,CAAC;IAEO,MAAM;QACZ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAED;;OAEG;IACI,QAAQ;QACb,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa;YACvC,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY;YACrC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;YACvB,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YAChC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;SACjC,CAAC;IACJ,CAAC;CACF"}

package/dist/lib/logger.d.ts

@@ -0,0 +1,19 @@
+import pino from 'pino';
+/**
+ * Root logger instance.
+ *
+ * - JSON output in production (compatible with Google Cloud Logging)
+ * - pino-pretty in development for human-readable output
+ * - Redacts sensitive fields (tokens, passwords, API keys)
+ * - Configurable via LOG_LEVEL env var
+ */
+export declare const logger: pino.Logger<never, boolean>;
+/**
+ * Create a child logger scoped to a component.
+ *
+ * @example
+ * const log = createLogger('ws');
+ * log.info({ clientId }, 'Client connected');
+ */
+export declare function createLogger(component: string): pino.Logger<never, boolean>;
+//# sourceMappingURL=logger.d.ts.map

package/dist/lib/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/lib/logger.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAiBxB;;;;;;;GAOG;AACH,eAAO,MAAM,MAAM,6BAmCjB,CAAC;AAEH;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,+BAE7C"}

package/dist/lib/logger.js

@@ -0,0 +1,69 @@
+import pino from 'pino';
+const isProduction = process.env.NODE_ENV === 'production';
+const isDashboard = process.env.HUSH_DASHBOARD === 'true' || process.argv.includes('--dashboard');
+/**
+ * Pino level → Google Cloud Logging severity mapping.
+ */
+const severityMap = {
+    trace: 'DEBUG',
+    debug: 'DEBUG',
+    info: 'INFO',
+    warn: 'WARNING',
+    error: 'ERROR',
+    fatal: 'CRITICAL',
+};
+/**
+ * Root logger instance.
+ *
+ * - JSON output in production (compatible with Google Cloud Logging)
+ * - pino-pretty in development for human-readable output
+ * - Redacts sensitive fields (tokens, passwords, API keys)
+ * - Configurable via LOG_LEVEL env var
+ */
+export const logger = pino({
+    level: process.env.LOG_LEVEL || (isProduction ? 'info' : 'debug'),
+    formatters: {
+        level(label) {
+            return { severity: severityMap[label] || 'DEFAULT', level: label };
+        },
+    },
+    redact: {
+        paths: [
+            'token',
+            'accessToken',
+            'refreshToken',
+            'apiKey',
+            'password',
+            'idToken',
+            'authorization',
+            'secret',
+            'clientSecret',
+            '*.token',
+            '*.accessToken',
+            '*.refreshToken',
+            '*.apiKey',
+            '*.password',
+            '*.idToken',
+            '*.authorization',
+            '*.secret',
+            '*.clientSecret',
+        ],
+        censor: '[REDACTED]',
+    },
+    // Security: In dashboard mode, we MUST avoid stdout/stderr to prevent TUI corruption.
+    // We use standard pino-pretty for dev, and no transport for prod.
+    transport: isDashboard
+        ? { target: 'pino/file', options: { destination: 'hush.log', mkdir: true } }
+        : (isProduction ? undefined : { target: 'pino-pretty', options: { colorize: true } }),
+});
+/**
+ * Create a child logger scoped to a component.
+ *
+ * @example
+ * const log = createLogger('ws');
+ * log.info({ clientId }, 'Client connected');
+ */
+export function createLogger(component) {
+    return logger.child({ component });
+}
+//# sourceMappingURL=logger.js.map

package/dist/lib/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/lib/logger.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;AAC3D,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AAElG;;GAEG;AACH,MAAM,WAAW,GAA2B;IAC1C,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,SAAS;IACf,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,UAAU;CAClB,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;IACjE,UAAU,EAAE;QACV,KAAK,CAAC,KAAa;YACjB,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACrE,CAAC;KACF;IACD,MAAM,EAAE;QACN,KAAK,EAAE;YACL,OAAO;YACP,aAAa;YACb,cAAc;YACd,QAAQ;YACR,UAAU;YACV,SAAS;YACT,eAAe;YACf,QAAQ;YACR,cAAc;YACd,SAAS;YACT,eAAe;YACf,gBAAgB;YAChB,UAAU;YACV,YAAY;YACZ,WAAW;YACX,iBAAiB;YACjB,UAAU;YACV,gBAAgB;SACjB;QACD,MAAM,EAAE,YAAY;KACrB;IACD,sFAAsF;IACtF,kEAAkE;IAClE,SAAS,EAAE,WAAW;QACpB,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC5E,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;CACxF,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;AACrC,CAAC"}

package/dist/middleware/redactor.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Semantic Redactor Middleware
+ *
+ * Identifies and swaps PII (emails, keys, IP addresses) for persistent tokens.
+ * Interoperable with TokenVault for re-hydration.
+ */
+/**
+ * Result of a redaction operation.
+ */
+export interface RedactionResult {
+    /** The redacted content (string or object) */
+    content: any;
+    /** Whether any redaction took place */
+    hasRedacted: boolean;
+    /** Map of tokens to their original values */
+    tokens: Map<string, string>;
+}
+/**
+ * Redactor class for identifying and masking sensitive information.
+ */
+export declare class Redactor {
+    /**
+     * Common PII Regex patterns.
+     */
+    private static readonly PATTERNS;
+    /**
+     * Redact sensitive information from a JSON object or string.
+     *
+     * @param input - The string or object to redact.
+     * @returns A RedactionResult containing the masked content and the token map.
+     */
+    redact(input: any): RedactionResult;
+}
+//# sourceMappingURL=redactor.d.ts.map

package/dist/middleware/redactor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.d.ts","sourceRoot":"","sources":["../../src/middleware/redactor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,8CAA8C;IAC9C,OAAO,EAAE,GAAG,CAAC;IACb,uCAAuC;IACvC,WAAW,EAAE,OAAO,CAAC;IACrB,6CAA6C;IAC7C,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAED;;GAEG;AACH,qBAAa,QAAQ;IACnB;;OAEG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAa9B;IAEF;;;;;OAKG;IACI,MAAM,CAAC,KAAK,EAAE,GAAG,GAAG,eAAe;CAoG3C"}

package/dist/middleware/redactor.js

@@ -0,0 +1,119 @@
+/**
+ * Semantic Redactor Middleware
+ *
+ * Identifies and swaps PII (emails, keys, IP addresses) for persistent tokens.
+ * Interoperable with TokenVault for re-hydration.
+ */
+/**
+ * Redactor class for identifying and masking sensitive information.
+ */
+export class Redactor {
+    /**
+     * Common PII Regex patterns.
+     */
+    static PATTERNS = {
+        /** Email regex (ReDoS-safe: single character class with no nested quantifiers) */
+        EMAIL: /\b[a-zA-Z0-9._%+-]{1,64}@[a-zA-Z0-9.-]{1,253}\.[a-zA-Z]{2,63}\b/g,
+        /** IPv4 address regex */
+        IPV4: /\b(?:\d{1,3}\.){3}\d{1,3}\b/g,
+        /** IPv6 address regex */
+        IPV6: /(([0-9a-fA-F]{1,4}:){7,7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(:[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(ffff(:0{1,4}){0,1}:){0,1}((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]))/g,
+        /** Generic API Key / Secret pattern (robust version) */
+        SECRET: /(?:api[-_]?key|secret|password|token|bearer|auth)["']?\s*[:=]\s*["']?([a-zA-Z0-9\-_!@#$%^&*()=+]{16,})["']?/gi,
+        /** Credit Card (basic) */
+        CREDIT_CARD: /\b(?:\d[ -]*?){13,16}\b/g,
+        /** Phone Numbers (robust version) */
+        PHONE: /(?:^|[\s:;])(?:\+\d{1,3}[-. ]?)?\(?\d{2,4}\)?[-. ]\d{3,4}[-. ]\d{3,4}(?:\s*(?:ext|x)\s*\d+)?/g,
+    };
+    /**
+     * Redact sensitive information from a JSON object or string.
+     *
+     * @param input - The string or object to redact.
+     * @returns A RedactionResult containing the masked content and the token map.
+     */
+    redact(input) {
+        const tokens = new Map();
+        let hasRedacted = false;
+        // Deep copy input for safe modification if it's an object
+        const output = typeof input === 'object' && input !== null
+            ? JSON.parse(JSON.stringify(input))
+            : input;
+        const SENSITIVE_KEYS = ['apikey', 'secret', 'password', 'token', 'bearer', 'auth', 'credential'];
+        const process = (node, keyName) => {
+            // Check if the current key is sensitive
+            if (keyName && typeof node === 'string') {
+                const normalizedKey = keyName.toLowerCase().replace(/[-_]/g, '');
+                if (SENSITIVE_KEYS.some(k => normalizedKey.includes(k))) {
+                    hasRedacted = true;
+                    const token = `[SENSITIVE_SECRET_${tokens.size + 1}]`;
+                    tokens.set(token, node);
+                    return token;
+                }
+            }
+            if (typeof node === 'string') {
+                let text = node;
+                // Redact Emails
+                text = text.replace(Redactor.PATTERNS.EMAIL, (match) => {
+                    hasRedacted = true;
+                    const token = `[USER_EMAIL_${tokens.size + 1}]`;
+                    tokens.set(token, match);
+                    return token;
+                });
+                // Redact IP Addresses (v4)
+                text = text.replace(Redactor.PATTERNS.IPV4, (match) => {
+                    hasRedacted = true;
+                    const token = `[NETWORK_IP_${tokens.size + 1}]`;
+                    tokens.set(token, match);
+                    return token;
+                });
+                // Redact IP Addresses (v6)
+                text = text.replace(Redactor.PATTERNS.IPV6, (match) => {
+                    hasRedacted = true;
+                    const token = `[NETWORK_IP_V6_${tokens.size + 1}]`;
+                    tokens.set(token, match);
+                    return token;
+                });
+                // Redact Secrets in text (e.g. "api_key=...")
+                text = text.replace(Redactor.PATTERNS.SECRET, (match, p1) => {
+                    hasRedacted = true;
+                    const token = `[SENSITIVE_SECRET_${tokens.size + 1}]`;
+                    tokens.set(token, p1);
+                    return match.replace(p1, token);
+                });
+                // Redact Credit Cards
+                text = text.replace(Redactor.PATTERNS.CREDIT_CARD, (match) => {
+                    hasRedacted = true;
+                    const token = `[PAYMENT_CARD_${tokens.size + 1}]`;
+                    tokens.set(token, match);
+                    return token;
+                });
+                // Redact Phone Numbers
+                text = text.replace(Redactor.PATTERNS.PHONE, (match) => {
+                    hasRedacted = true;
+                    const token = `[PHONE_NUMBER_${tokens.size + 1}]`;
+                    tokens.set(token, match);
+                    return token;
+                });
+                return text;
+            }
+            if (Array.isArray(node)) {
+                return node.map(item => process(item));
+            }
+            if (node !== null && typeof node === 'object') {
+                const obj = {};
+                for (const [key, value] of Object.entries(node)) {
+                    obj[key] = process(value, key);
+                }
+                return obj;
+            }
+            return node;
+        };
+        const redactedContent = process(output);
+        return {
+            content: redactedContent,
+            hasRedacted,
+            tokens
+        };
+    }
+}
+//# sourceMappingURL=redactor.js.map

package/dist/middleware/redactor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.js","sourceRoot":"","sources":["../../src/middleware/redactor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAcH;;GAEG;AACH,MAAM,OAAO,QAAQ;IACnB;;OAEG;IACK,MAAM,CAAU,QAAQ,GAAG;QACjC,kFAAkF;QAClF,KAAK,EAAE,kEAAkE;QACzE,yBAAyB;QACzB,IAAI,EAAE,8BAA8B;QACpC,yBAAyB;QACzB,IAAI,EAAE,spBAAspB;QAC5pB,wDAAwD;QACxD,MAAM,EAAE,+GAA+G;QACvH,0BAA0B;QAC1B,WAAW,EAAE,0BAA0B;QACvC,qCAAqC;QACrC,KAAK,EAAE,+FAA+F;KACvG,CAAC;IAEF;;;;;OAKG;IACI,MAAM,CAAC,KAAU;QACtB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,IAAI,WAAW,GAAG,KAAK,CAAC;QAExB,0DAA0D;QAC1D,MAAM,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YACxD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACnC,CAAC,CAAC,KAAK,CAAC;QAEV,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QAEjG,MAAM,OAAO,GAAG,CAAC,IAAS,EAAE,OAAgB,EAAO,EAAE;YACnD,wCAAwC;YACxC,IAAI,OAAO,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxC,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACjE,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxD,WAAW,GAAG,IAAI,CAAC;oBACnB,MAAM,KAAK,GAAG,qBAAqB,MAAM,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC;oBACtD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;oBACxB,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,IAAI,IAAI,GAAG,IAAI,CAAC;gBAEhB,gBAAgB;gBAChB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;oBACrD,WAAW,GAAG,IAAI,CAAC;oBACnB,MAAM,KAAK,GAAG,eAAe,MAAM,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC;oBAChD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;oBACzB,OAAO,KAAK,CAAC;gBACf,CAAC,CAAC,CAAC;gBAEH,2BAA2B;gBAC3B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;oBACpD,WAAW,GAAG,IAAI,CAAC;oBACnB,MAAM,KAAK,GAAG,eAAe,MAAM,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC;oBAChD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;oBACzB,OAAO,KAAK,CAAC;gBACf,CAAC,CAAC,CAAC;gBAEH,2BAA2B;gBAC3B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;oBACpD,WAAW,GAAG,IAAI,CAAC;oBACnB,MAAM,KAAK,GAAG,kBAAkB,MAAM,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC;oBACnD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;oBACzB,OAAO,KAAK,CAAC;gBACf,CAAC,CAAC,CAAC;gBAEH,8CAA8C;gBAC9C,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;oBAC1D,WAAW,GAAG,IAAI,CAAC;oBACnB,MAAM,KAAK,GAAG,qBAAqB,MAAM,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC;oBACtD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBACtB,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;gBAClC,CAAC,CAAC,CAAC;gBAEH,sBAAsB;gBACtB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE;oBAC3D,WAAW,GAAG,IAAI,CAAC;oBACnB,MAAM,KAAK,GAAG,iBAAiB,MAAM,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC;oBAClD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;oBACzB,OAAO,KAAK,CAAC;gBACf,CAAC,CAAC,CAAC;gBAEH,uBAAuB;gBACvB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;oBACrD,WAAW,GAAG,IAAI,CAAC;oBACnB,MAAM,KAAK,GAAG,iBAAiB,MAAM,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC;oBAClD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;oBACzB,OAAO,KAAK,CAAC;gBACf,CAAC,CAAC,CAAC;gBAEH,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACzC,CAAC;YAED,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9C,MAAM,GAAG,GAAQ,EAAE,CAAC;gBACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChD,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACjC,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QAEF,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAExC,OAAO;YACL,OAAO,EAAE,eAAe;YACxB,WAAW;YACX,MAAM;SACP,CAAC;IACJ,CAAC"}

package/dist/vault/token-vault.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Local Token Vault
+ *
+ * Persistently stores the original cleartext values for tokens generated by the Redactor.
+ * Allows the local Proxy to re-hydrate results before returning them to the agent.
+ */
+/**
+ * Vault for storing and re-applying redacted tokens.
+ */
+export declare class TokenVault {
+    private vault;
+    private readonly ttl;
+    /**
+     * @param ttlMs - Time to live in milliseconds (default: 1 hour)
+     */
+    constructor(ttlMs?: number);
+    /**
+     * Save a set of tokens and their original values to the vault.
+     *
+     * @param tokens - Map of tokens to cleartext values.
+     */
+    saveTokens(tokens: Map<string, string>): void;
+    /**
+     * Re-hydrate a string or object containing tokens back into cleartext.
+     *
+     * @param input - The string or object containing tokens.
+     * @returns The original cleartext content.
+     */
+    rehydrate(input: any): any;
+    /**
+     * Create a stateful rehydrator for processing streaming chunks.
+     * Handles cases where tokens are split across chunks.
+     */
+    createStreamingRehydrator(): (chunk: string) => string;
+    /**
+     * Remove expired tokens from the vault.
+     */
+    private prune;
+    /**
+     * Get the original value for a specific token.
+     *
+     * @param token - The token to look up.
+     * @returns The original cleartext or undefined if not found.
+     */
+    get(token: string): string | undefined;
+    /**
+     * Clear the vault for a new session.
+     */
+    clear(): void;
+    /**
+     * Get the number of tokens currently in the vault.
+     */
+    get size(): number;
+}
+//# sourceMappingURL=token-vault.d.ts.map

package/dist/vault/token-vault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-vault.d.ts","sourceRoot":"","sources":["../../src/vault/token-vault.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,KAAK,CAAgE;IAC7E,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAE7B;;OAEG;gBACS,KAAK,GAAE,MAAuB;IAI1C;;;;OAIG;IACI,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI;IAQpD;;;;;OAKG;IACI,SAAS,CAAC,KAAK,EAAE,GAAG,GAAG,GAAG;IA0CjC;;;OAGG;IACI,yBAAyB,KAGtB,OAAO,MAAM,KAAG,MAAM;IA6BhC;;OAEG;IACH,OAAO,CAAC,KAAK;IASb;;;;;OAKG;IACI,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAK7C;;OAEG;IACI,KAAK,IAAI,IAAI;IAIpB;;OAEG;IACH,IAAW,IAAI,IAAI,MAAM,CAExB;CACF"}

package/dist/vault/token-vault.js

@@ -0,0 +1,138 @@
+/**
+ * Local Token Vault
+ *
+ * Persistently stores the original cleartext values for tokens generated by the Redactor.
+ * Allows the local Proxy to re-hydrate results before returning them to the agent.
+ */
+/**
+ * Vault for storing and re-applying redacted tokens.
+ */
+export class TokenVault {
+    vault = new Map();
+    ttl;
+    /**
+     * @param ttlMs - Time to live in milliseconds (default: 1 hour)
+     */
+    constructor(ttlMs = 60 * 60 * 1000) {
+        this.ttl = ttlMs;
+    }
+    /**
+     * Save a set of tokens and their original values to the vault.
+     *
+     * @param tokens - Map of tokens to cleartext values.
+     */
+    saveTokens(tokens) {
+        const now = Date.now();
+        for (const [token, value] of tokens) {
+            this.vault.set(token, { value, timestamp: now });
+        }
+        this.prune();
+    }
+    /**
+     * Re-hydrate a string or object containing tokens back into cleartext.
+     *
+     * @param input - The string or object containing tokens.
+     * @returns The original cleartext content.
+     */
+    rehydrate(input) {
+        // Return early if no tokens in vault
+        if (this.vault.size === 0)
+            return input;
+        // Security: Use structuredClone for safe deep copies (addresses review)
+        let output;
+        try {
+            output = typeof input === 'object' && input !== null
+                ? structuredClone(input)
+                : input;
+        }
+        catch (e) {
+            output = input;
+        }
+        const process = (node) => {
+            if (typeof node === 'string') {
+                let text = node;
+                // Efficiently replace all tokens
+                for (const [token, entry] of this.vault.entries()) {
+                    text = text.split(token).join(entry.value);
+                }
+                return text;
+            }
+            if (Array.isArray(node)) {
+                return node.map(item => process(item));
+            }
+            if (node !== null && typeof node === 'object') {
+                const obj = {};
+                for (const [key, value] of Object.entries(node)) {
+                    obj[key] = process(value);
+                }
+                return obj;
+            }
+            return node;
+        };
+        return process(output);
+    }
+    /**
+     * Create a stateful rehydrator for processing streaming chunks.
+     * Handles cases where tokens are split across chunks.
+     */
+    createStreamingRehydrator() {
+        let buffer = '';
+        return (chunk) => {
+            buffer += chunk;
+            // Check if any vault token could be split across chunks (partial match at end)
+            let holdBack = 0;
+            for (const [token] of this.vault.entries()) {
+                // Check if the end of the buffer is a prefix of any token
+                for (let prefixLen = 1; prefixLen < token.length; prefixLen++) {
+                    const prefix = token.substring(0, prefixLen);
+                    if (buffer.endsWith(prefix)) {
+                        holdBack = Math.max(holdBack, prefixLen);
+                    }
+                }
+            }
+            // Split buffer into releasable text and held-back portion
+            const releaseEnd = buffer.length - holdBack;
+            let text = buffer.substring(0, releaseEnd);
+            buffer = buffer.substring(releaseEnd);
+            // Replace all vault tokens in the releasable text
+            for (const [token, entry] of this.vault.entries()) {
+                text = text.split(token).join(entry.value);
+            }
+            return text;
+        };
+    }
+    /**
+     * Remove expired tokens from the vault.
+     */
+    prune() {
+        const now = Date.now();
+        for (const [token, entry] of this.vault.entries()) {
+            if (now - entry.timestamp > this.ttl) {
+                this.vault.delete(token);
+            }
+        }
+    }
+    /**
+     * Get the original value for a specific token.
+     *
+     * @param token - The token to look up.
+     * @returns The original cleartext or undefined if not found.
+     */
+    get(token) {
+        const entry = this.vault.get(token);
+        return entry?.value;
+    }
+    /**
+     * Clear the vault for a new session.
+     */
+    clear() {
+        this.vault.clear();
+    }
+    /**
+     * Get the number of tokens currently in the vault.
+     */
+    get size() {
+        return this.vault.size;
+    }
+}
+//# sourceMappingURL=token-vault.js.map

package/dist/vault/token-vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-vault.js","sourceRoot":"","sources":["../../src/vault/token-vault.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,OAAO,UAAU;IACb,KAAK,GAAsD,IAAI,GAAG,EAAE,CAAC;IAC5D,GAAG,CAAS;IAE7B;;OAEG;IACH,YAAY,QAAgB,EAAE,GAAG,EAAE,GAAG,IAAI;QACxC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC;IACnB,CAAC;IAED;;;;OAIG;IACI,UAAU,CAAC,MAA2B;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACI,SAAS,CAAC,KAAU;QACzB,qCAAqC;QACrC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAExC,wEAAwE;QACxE,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;gBAClD,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC;gBACxB,CAAC,CAAC,KAAK,CAAC;QACZ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,IAAS,EAAO,EAAE;YACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,IAAI,IAAI,GAAG,IAAI,CAAC;gBAChB,iCAAiC;gBACjC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;oBAClD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC7C,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YACzC,CAAC;YAED,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9C,MAAM,GAAG,GAAQ,EAAE,CAAC;gBACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChD,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC5B,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QAEF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAED;;;OAGG;IACI,yBAAyB;QAC9B,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,OAAO,CAAC,KAAa,EAAU,EAAE;YAC/B,MAAM,IAAI,KAAK,CAAC;YAEhB,+EAA+E;YAC/E,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC3C,0DAA0D;gBAC1D,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;oBAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;oBAC7C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;wBAC5B,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;oBAC3C,CAAC;gBACH,CAAC;YACH,CAAC;YAED,0DAA0D;YAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC;YAC5C,IAAI,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;YAC3C,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAEtC,kDAAkD;YAClD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;gBAClD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;YAED,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACrC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,GAAG,CAAC,KAAa;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpC,OAAO,KAAK,EAAE,KAAK,CAAC;IACtB,CAAC;IAED;;OAEG;IACI,KAAK;QACV,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,IAAW,IAAI;QACb,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;CACF"}