@bywaretech/bysentinel-core 0.1.0

package/dist/analysis/validate.js

@@ -0,0 +1,116 @@
+const SEVERITIES = ["low", "medium", "high", "critical"];
+const CATEGORIES = [
+    "bug",
+    "performance",
+    "security",
+    "dependency",
+    "configuration",
+    "external-service",
+    "unknown",
+];
+/**
+ * Validate a model's JSON output before it is trusted/stored. Accepts a raw
+ * string (possibly wrapped in ```json fences) or an already-parsed object.
+ */
+export function validateAnalysis(input) {
+    let obj = input;
+    if (typeof input === "string") {
+        const parsed = safeParse(input);
+        if (!parsed.ok)
+            return { ok: false, errors: [parsed.error] };
+        obj = parsed.value;
+    }
+    if (typeof obj !== "object" || obj === null) {
+        return { ok: false, errors: ["analysis is not an object"] };
+    }
+    const o = obj;
+    const errors = [];
+    const str = (k, required) => {
+        const v = o[k];
+        if (v === undefined) {
+            if (required)
+                errors.push(`${k} is required`);
+            return undefined;
+        }
+        if (typeof v !== "string")
+            errors.push(`${k} must be a string`);
+        return v;
+    };
+    str("summary", true);
+    str("likelyCause", true);
+    str("suggestedFix", true);
+    str("examplePatch", false);
+    str("confidenceReason", false);
+    if (!SEVERITIES.includes(o.severity)) {
+        errors.push(`severity must be one of ${SEVERITIES.join(", ")}`);
+    }
+    if (!CATEGORIES.includes(o.category)) {
+        errors.push(`category must be one of ${CATEGORIES.join(", ")}`);
+    }
+    if (typeof o.confidence !== "number" || o.confidence < 0 || o.confidence > 1) {
+        errors.push("confidence must be a number between 0 and 1");
+    }
+    if (o.affectedArea !== undefined) {
+        if (typeof o.affectedArea !== "object" || o.affectedArea === null) {
+            errors.push("affectedArea must be an object");
+        }
+    }
+    if (o.securityImpact !== undefined) {
+        const si = o.securityImpact;
+        if (typeof si !== "object" || si === null || typeof si.hasSensitiveDataRisk !== "boolean") {
+            errors.push("securityImpact.hasSensitiveDataRisk must be a boolean");
+        }
+    }
+    if (o.causalChain !== undefined) {
+        if (!Array.isArray(o.causalChain) ||
+            !o.causalChain.every((l) => l != null && typeof l.cause === "string")) {
+            errors.push("causalChain must be an array of { cause: string }");
+        }
+    }
+    if (o.bottleneck !== undefined) {
+        const b = o.bottleneck;
+        if (typeof b !== "object" || b === null || typeof b.step !== "string") {
+            errors.push("bottleneck.step must be a string");
+        }
+    }
+    if (errors.length)
+        return { ok: false, errors };
+    return { ok: true, value: obj };
+}
+function tryParse(candidate) {
+    try {
+        return { ok: true, value: JSON.parse(candidate) };
+    }
+    catch {
+        return { ok: false };
+    }
+}
+function safeParse(input) {
+    const trimmed = input.trim();
+    // 1. Direct parse first. This is the common case and, crucially, handles
+    //    clean JSON whose string values contain their own ``` fenced code blocks
+    //    (e.g. examplePatch with a ```javascript snippet). Stripping fences first
+    //    would wrongly extract that inner block.
+    const direct = tryParse(trimmed);
+    if (direct.ok)
+        return direct;
+    // 2. The whole response is wrapped in a fence: ```json { ... } ``` — strip it
+    //    only when the fence encloses the entire message (anchored), not when a
+    //    fence merely appears somewhere inside.
+    const fenced = trimmed.match(/^```(?:json)?\s*([\s\S]*?)```$/i);
+    if (fenced?.[1]) {
+        const inner = tryParse(fenced[1].trim());
+        if (inner.ok)
+            return inner;
+    }
+    // 3. Last resort: grab the outermost {...}.
+    const start = trimmed.indexOf("{");
+    const end = trimmed.lastIndexOf("}");
+    if (start >= 0 && end > start) {
+        const obj = tryParse(trimmed.slice(start, end + 1));
+        if (obj.ok)
+            return obj;
+    }
+    return { ok: false, error: "response is not valid JSON" };
+}
+//# sourceMappingURL=validate.js.map

package/dist/analysis/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/analysis/validate.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAAiB,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AACvE,MAAM,UAAU,GAAiB;IAC/B,KAAK;IACL,aAAa;IACb,UAAU;IACV,YAAY;IACZ,eAAe;IACf,kBAAkB;IAClB,SAAS;CACV,CAAC;AAMF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,GAAG,GAAY,KAAK,CAAC;IACzB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7D,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC;IACrB,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,2BAA2B,CAAC,EAAE,CAAC;IAC9D,CAAC;IACD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,QAAiB,EAAE,EAAE;QAC3C,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACf,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,IAAI,QAAQ;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC9C,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAChE,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACrB,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IACzB,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAC1B,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAC3B,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IAE/B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAsB,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,2BAA2B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAsB,CAAC,EAAE,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,2BAA2B,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QAC7E,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAClE,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,EAAE,GAAG,CAAC,CAAC,cAAyC,CAAC;QACvD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI,IAAI,OAAO,EAAE,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YAC1F,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAChC,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;YAC7B,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAClB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,OAAQ,CAA6B,CAAC,KAAK,KAAK,QAAQ,CAC7E,EACD,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,UAAqC,CAAC;QAClD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtE,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAkC,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,QAAQ,CAAC,SAAiB;IACjC,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAE7B,yEAAyE;IACzE,6EAA6E;IAC7E,8EAA8E;IAC9E,6CAA6C;IAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAE7B,8EAA8E;IAC9E,4EAA4E;IAC5E,4CAA4C;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAChE,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;IAC7B,CAAC;IAED,4CAA4C;IAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,IAAI,CAAC,IAAI,GAAG,GAAG,KAAK,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACpD,IAAI,GAAG,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC;IACzB,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;AAC5D,CAAC"}

package/dist/fingerprint.d.ts

@@ -0,0 +1,19 @@
+import type { ErrorInfo } from "./types/event.js";
+export interface FingerprintInput {
+    project: string;
+    environment: string;
+    error?: Pick<ErrorInfo, "type" | "stack">;
+    functionName?: string;
+}
+/**
+ * Normalize a stack trace so semantically-identical errors hash the same:
+ * strips line/column numbers, absolute paths, hex addresses, uuids and digits
+ * that vary per invocation. Keeps the top frames' call sites.
+ */
+export declare function normalizeStack(stack: string | undefined, maxFrames?: number): string;
+/**
+ * Stable fingerprint:
+ *   project + environment + error.type + normalized stack + function name
+ */
+export declare function fingerprint(input: FingerprintInput): string;
+//# sourceMappingURL=fingerprint.d.ts.map

package/dist/fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.d.ts","sourceRoot":"","sources":["../src/fingerprint.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAElD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC;IAC1C,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,SAAI,GAAG,MAAM,CAuB/E;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAS3D"}

package/dist/fingerprint.js

@@ -0,0 +1,42 @@
+import { createHash } from "node:crypto";
+/**
+ * Normalize a stack trace so semantically-identical errors hash the same:
+ * strips line/column numbers, absolute paths, hex addresses, uuids and digits
+ * that vary per invocation. Keeps the top frames' call sites.
+ */
+export function normalizeStack(stack, maxFrames = 5) {
+    if (!stack)
+        return "";
+    const frames = stack
+        .split("\n")
+        .map((l) => l.trim())
+        .filter((l) => l.startsWith("at "));
+    const normalized = (frames.length ? frames : stack.split("\n"))
+        .slice(0, maxFrames)
+        .map((line) => line
+        .replace(/\(.*?\)/g, "") // drop file location parens
+        .replace(/[A-Za-z]:\\[^\s)]+|\/[^\s):]+/g, "") // drop paths
+        .replace(/:\d+:\d+/g, "") // line:col
+        .replace(/0x[0-9a-f]+/gi, "") // addresses
+        .replace(/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/gi, "") // uuid
+        .replace(/\d+/g, "") // remaining digits
+        .replace(/\s+/g, " ")
+        .trim())
+        .filter(Boolean);
+    return normalized.join(" | ");
+}
+/**
+ * Stable fingerprint:
+ *   project + environment + error.type + normalized stack + function name
+ */
+export function fingerprint(input) {
+    const parts = [
+        input.project,
+        input.environment,
+        input.error?.type ?? "unknown",
+        normalizeStack(input.error?.stack),
+        input.functionName ?? "",
+    ];
+    return createHash("sha256").update(parts.join("\n")).digest("hex").slice(0, 32);
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../src/fingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAUzC;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAyB,EAAE,SAAS,GAAG,CAAC;IACrE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,MAAM,GAAG,KAAK;SACjB,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAEtC,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SAC5D,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;SACnB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,IAAI;SACD,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,4BAA4B;SACpD,OAAO,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC,aAAa;SAC3D,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW;SACpC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,YAAY;SACzC,OAAO,CAAC,gEAAgE,EAAE,EAAE,CAAC,CAAC,OAAO;SACrF,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,mBAAmB;SACvC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CACV;SACA,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnB,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAuB;IACjD,MAAM,KAAK,GAAG;QACZ,KAAK,CAAC,OAAO;QACb,KAAK,CAAC,WAAW;QACjB,KAAK,CAAC,KAAK,EAAE,IAAI,IAAI,SAAS;QAC9B,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC;QAClC,KAAK,CAAC,YAAY,IAAI,EAAE;KACzB,CAAC;IACF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+export * from "./types/index.js";
+export * from "./redaction/index.js";
+export { detectSecuritySignals } from "./security/signals.js";
+export { fingerprint, normalizeStack, type FingerprintInput } from "./fingerprint.js";
+export { Timeline, type ExecutionTimeline, type TimelineStep, type TimelineStepStatus, type TimelineBottleneck, type TimelineOptions, } from "./timeline/timeline.js";
+export { ANALYZER_SYSTEM_PROMPT, buildAnalysisUserPrompt, type BuildPromptOptions, } from "./analysis/prompt.js";
+export { analyzeIncident, buildHeuristicAnalysis, type AnalyzeIncidentOptions, type HeuristicAnalysisOptions, } from "./analysis/analyzer.js";
+export { validateAnalysis, type ValidationResult } from "./analysis/validate.js";
+export type { AIProvider, AICompletionRequest, AICompletionResult, ProviderConfig, ProviderFactory, AnalyzeOutcome, } from "./providers/types.js";
+export { newEventId, nowIso } from "./util/id.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,kBAAkB,CAAC;AAGjC,cAAc,sBAAsB,CAAC;AAGrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAG9D,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGtF,OAAO,EACL,QAAQ,EACR,KAAK,iBAAiB,EACtB,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,eAAe,GACrB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,KAAK,kBAAkB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,wBAAwB,GAC9B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAGjF,YAAY,EACV,UAAU,EACV,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,cAAc,GACf,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,17 @@
+// Types
+export * from "./types/index.js";
+// Redaction / secret detection
+export * from "./redaction/index.js";
+// Security signal detection
+export { detectSecuritySignals } from "./security/signals.js";
+// Fingerprinting
+export { fingerprint, normalizeStack } from "./fingerprint.js";
+// Execution timeline / bottleneck
+export { Timeline, } from "./timeline/timeline.js";
+// AI analysis helpers
+export { ANALYZER_SYSTEM_PROMPT, buildAnalysisUserPrompt, } from "./analysis/prompt.js";
+export { analyzeIncident, buildHeuristicAnalysis, } from "./analysis/analyzer.js";
+export { validateAnalysis } from "./analysis/validate.js";
+// Utilities
+export { newEventId, nowIso } from "./util/id.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,QAAQ;AACR,cAAc,kBAAkB,CAAC;AAEjC,+BAA+B;AAC/B,cAAc,sBAAsB,CAAC;AAErC,4BAA4B;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,iBAAiB;AACjB,OAAO,EAAE,WAAW,EAAE,cAAc,EAAyB,MAAM,kBAAkB,CAAC;AAEtF,kCAAkC;AAClC,OAAO,EACL,QAAQ,GAMT,MAAM,wBAAwB,CAAC;AAEhC,sBAAsB;AACtB,OAAO,EACL,sBAAsB,EACtB,uBAAuB,GAExB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,eAAe,EACf,sBAAsB,GAGvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAyB,MAAM,wBAAwB,CAAC;AAYjF,YAAY;AACZ,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC"}

package/dist/providers/types.d.ts

@@ -0,0 +1,51 @@
+import type { AIAnalysisResult } from "../types/analysis.js";
+export interface AICompletionRequest {
+    systemPrompt: string;
+    userPrompt: string;
+    model: string;
+    /** 0..1, lower is more deterministic. */
+    temperature?: number;
+    maxTokens?: number;
+    /** Ask the provider for JSON output when supported. */
+    jsonMode?: boolean;
+    signal?: AbortSignal;
+}
+export interface AICompletionResult {
+    /** Raw text returned by the model (still needs validation). */
+    content: string;
+    model: string;
+    usage?: {
+        promptTokens?: number;
+        completionTokens?: number;
+    };
+}
+/**
+ * Common surface every provider (OpenAI, OpenRouter, Anthropic, Ollama, custom)
+ * implements. Providers only do transport; JSON parsing/validation lives in the
+ * worker via `validateAnalysis`.
+ */
+export interface AIProvider {
+    readonly name: string;
+    /** True for providers that run locally (Ollama/LM Studio). Used by strict mode. */
+    readonly isLocal: boolean;
+    complete(request: AICompletionRequest): Promise<AICompletionResult>;
+}
+export interface ProviderFactory {
+    (config: ProviderConfig): AIProvider;
+}
+export interface ProviderConfig {
+    apiKey?: string;
+    baseUrl?: string;
+    /** Provider-specific extras. */
+    [key: string]: unknown;
+}
+/** Result type helper the worker uses after validation. */
+export interface AnalyzeOutcome {
+    raw: string;
+    analysis?: AIAnalysisResult;
+    errors?: string[];
+    provider?: string;
+    model?: string;
+    usage?: AICompletionResult["usage"];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/providers/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/providers/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,+DAA+D;IAC/D,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9D;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mFAAmF;IACnF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,eAAe;IAC9B,CAAC,MAAM,EAAE,cAAc,GAAG,UAAU,CAAC;CACtC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC;CACrC"}

package/dist/providers/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/providers/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/providers/types.ts"],"names":[],"mappings":""}

package/dist/redaction/entropy.d.ts

@@ -0,0 +1,11 @@
+/** Shannon entropy in bits-per-character for a string. */
+export declare function shannonEntropy(value: string): number;
+/**
+ * Heuristic: does this token look like an opaque high-entropy secret?
+ * Tuned to avoid flagging normal words, sentences and hex ids that are short.
+ */
+export declare function looksHighEntropy(value: string, { minLength, minEntropy }?: {
+    minLength?: number;
+    minEntropy?: number;
+}): boolean;
+//# sourceMappingURL=entropy.d.ts.map

package/dist/redaction/entropy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entropy.d.ts","sourceRoot":"","sources":["../../src/redaction/entropy.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAWpD;AAID;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,EAAE,SAAc,EAAE,UAAgB,EAAE,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACrF,OAAO,CAYT"}

package/dist/redaction/entropy.js

@@ -0,0 +1,35 @@
+/** Shannon entropy in bits-per-character for a string. */
+export function shannonEntropy(value) {
+    if (value.length === 0)
+        return 0;
+    const freq = new Map();
+    for (const ch of value)
+        freq.set(ch, (freq.get(ch) ?? 0) + 1);
+    let entropy = 0;
+    for (const count of freq.values()) {
+        const p = count / value.length;
+        entropy -= p * Math.log2(p);
+    }
+    return entropy;
+}
+const TOKEN_CHARS = /^[A-Za-z0-9+/_=.-]+$/;
+/**
+ * Heuristic: does this token look like an opaque high-entropy secret?
+ * Tuned to avoid flagging normal words, sentences and hex ids that are short.
+ */
+export function looksHighEntropy(value, { minLength = 24, minEntropy = 4.0 } = {}) {
+    const token = value.trim();
+    if (token.length < minLength)
+        return false;
+    if (!TOKEN_CHARS.test(token))
+        return false;
+    // Require a mix of character classes so long slugs/paths don't trip it.
+    const classes = Number(/[a-z]/.test(token)) +
+        Number(/[A-Z]/.test(token)) +
+        Number(/[0-9]/.test(token)) +
+        Number(/[+/_=.-]/.test(token));
+    if (classes < 2)
+        return false;
+    return shannonEntropy(token) >= minEntropy;
+}
+//# sourceMappingURL=entropy.js.map

package/dist/redaction/entropy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entropy.js","sourceRoot":"","sources":["../../src/redaction/entropy.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,EAAE,IAAI,KAAK;QAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAE9D,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAC/B,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAE3C;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAa,EACb,EAAE,SAAS,GAAG,EAAE,EAAE,UAAU,GAAG,GAAG,KAAkD,EAAE;IAEtF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3C,wEAAwE;IACxE,MAAM,OAAO,GACX,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACjC,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC;AAC7C,CAAC"}

package/dist/redaction/index.d.ts

@@ -0,0 +1,4 @@
+export { redact, redactString, KEY_RULES, VALUE_PATTERNS } from "./redactor.js";
+export { luhnValid, normalizeKey, keyRuleFor, type RedactionCategory } from "./patterns.js";
+export { shannonEntropy, looksHighEntropy } from "./entropy.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/redaction/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/redaction/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC5F,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC"}

package/dist/redaction/index.js

@@ -0,0 +1,4 @@
+export { redact, redactString, KEY_RULES, VALUE_PATTERNS } from "./redactor.js";
+export { luhnValid, normalizeKey, keyRuleFor } from "./patterns.js";
+export { shannonEntropy, looksHighEntropy } from "./entropy.js";
+//# sourceMappingURL=index.js.map

package/dist/redaction/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/redaction/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAA0B,MAAM,eAAe,CAAC;AAC5F,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC"}

package/dist/redaction/patterns.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Value- and key-based redaction rules.
+ *
+ * Ordering matters: more specific patterns must run before generic ones
+ * (e.g. `sk-ant-` before `sk-`, JWT before Bearer). The redactor applies
+ * `VALUE_PATTERNS` in array order.
+ */
+export type RedactionCategory = "pii" | "secret" | "payment" | "email" | "phone";
+export interface ValuePattern {
+    name: string;
+    category: RedactionCategory;
+    regex: RegExp;
+    replacement: string;
+    /** Optional guard: return false to keep the original match. */
+    validate?: (match: string) => boolean;
+}
+/** Luhn checksum used to avoid redacting arbitrary 16-digit numbers. */
+export declare function luhnValid(digits: string): boolean;
+/**
+ * Applied in order. All regexes are global so `String.replace` hits every match.
+ */
+export declare const VALUE_PATTERNS: ValuePattern[];
+/**
+ * Key-name rules. Keys are normalized (lowercased, non-alphanumerics stripped)
+ * before matching so `card_number`, `cardNumber` and `card-number` all match.
+ */
+export interface KeyRule {
+    keys: string[];
+    category: RedactionCategory;
+    replacement: string;
+}
+export declare const KEY_RULES: KeyRule[];
+export declare function normalizeKey(key: string): string;
+export declare function keyRuleFor(key: string): KeyRule | undefined;
+//# sourceMappingURL=patterns.d.ts.map

package/dist/redaction/patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../../src/redaction/patterns.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;AAEjF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;CACvC;AAED,wEAAwE;AACxE,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAejD;AAED;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,YAAY,EAkHxC,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,SAAS,EAAE,OAAO,EA6C9B,CAAC;AAEF,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAOD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAE3D"}

package/dist/redaction/patterns.js

@@ -0,0 +1,198 @@
+/**
+ * Value- and key-based redaction rules.
+ *
+ * Ordering matters: more specific patterns must run before generic ones
+ * (e.g. `sk-ant-` before `sk-`, JWT before Bearer). The redactor applies
+ * `VALUE_PATTERNS` in array order.
+ */
+/** Luhn checksum used to avoid redacting arbitrary 16-digit numbers. */
+export function luhnValid(digits) {
+    const num = digits.replace(/\D/g, "");
+    if (num.length < 13 || num.length > 19)
+        return false;
+    let sum = 0;
+    let alt = false;
+    for (let i = num.length - 1; i >= 0; i--) {
+        let d = num.charCodeAt(i) - 48;
+        if (alt) {
+            d *= 2;
+            if (d > 9)
+                d -= 9;
+        }
+        sum += d;
+        alt = !alt;
+    }
+    return sum % 10 === 0;
+}
+/**
+ * Applied in order. All regexes are global so `String.replace` hits every match.
+ */
+export const VALUE_PATTERNS = [
+    // ── Secrets (most specific first) ─────────────────────────────
+    {
+        name: "private-key",
+        category: "secret",
+        regex: /-----BEGIN (?:RSA |EC |DSA |OPENSSH |PGP |ENCRYPTED )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |DSA |OPENSSH |PGP |ENCRYPTED )?PRIVATE KEY-----/g,
+        replacement: "[REDACTED_PRIVATE_KEY]",
+    },
+    {
+        name: "jwt",
+        category: "secret",
+        regex: /eyJ[A-Za-z0-9_-]+\.eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g,
+        replacement: "[REDACTED_JWT]",
+    },
+    {
+        name: "bearer-token",
+        category: "secret",
+        regex: /Bearer\s+[A-Za-z0-9\-._~+/]+=*/gi,
+        replacement: "[REDACTED_BEARER_TOKEN]",
+    },
+    {
+        name: "basic-auth",
+        category: "secret",
+        regex: /Basic\s+[A-Za-z0-9+/]+=*/g,
+        replacement: "[REDACTED_BASIC_AUTH]",
+    },
+    {
+        name: "aws-access-key-id",
+        category: "secret",
+        regex: /\b(?:AKIA|ASIA|AIDA|AROA)[0-9A-Z]{16}\b/g,
+        replacement: "[REDACTED_AWS_ACCESS_KEY_ID]",
+    },
+    {
+        name: "github-token",
+        category: "secret",
+        regex: /\bgh[pousr]_[A-Za-z0-9]{36,255}\b/g,
+        replacement: "[REDACTED_GITHUB_TOKEN]",
+    },
+    {
+        name: "gitlab-token",
+        category: "secret",
+        regex: /\bglpat-[A-Za-z0-9_-]{20,}\b/g,
+        replacement: "[REDACTED_GITLAB_TOKEN]",
+    },
+    {
+        name: "slack-token",
+        category: "secret",
+        regex: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g,
+        replacement: "[REDACTED_SLACK_TOKEN]",
+    },
+    {
+        name: "stripe-key",
+        category: "secret",
+        regex: /\b(?:sk|rk|pk)_(?:live|test)_[A-Za-z0-9]{16,}\b/g,
+        replacement: "[REDACTED_STRIPE_KEY]",
+    },
+    {
+        name: "anthropic-key",
+        category: "secret",
+        regex: /\bsk-ant-[A-Za-z0-9_-]{20,}\b/g,
+        replacement: "[REDACTED_ANTHROPIC_KEY]",
+    },
+    {
+        name: "openai-key",
+        category: "secret",
+        regex: /\bsk-(?:proj-)?[A-Za-z0-9_-]{20,}\b/g,
+        replacement: "[REDACTED_OPENAI_KEY]",
+    },
+    {
+        name: "database-url",
+        category: "secret",
+        regex: /\b(?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|rediss|amqp):\/\/[^\s"'<>]+/gi,
+        replacement: "[REDACTED_DATABASE_URL]",
+    },
+    // ── Payment ───────────────────────────────────────────────────
+    {
+        name: "credit-card",
+        category: "payment",
+        // 13–19 digits optionally grouped by spaces or dashes.
+        regex: /\b(?:\d[ -]?){13,19}\b/g,
+        replacement: "[REDACTED_CARD]",
+        validate: luhnValid,
+    },
+    // ── PII (Brazil-focused + general) ────────────────────────────
+    {
+        name: "cnpj",
+        category: "pii",
+        regex: /\b\d{2}\.?\d{3}\.?\d{3}\/?\d{4}-?\d{2}\b/g,
+        replacement: "[REDACTED_CNPJ]",
+    },
+    {
+        name: "cpf",
+        category: "pii",
+        regex: /\b\d{3}\.\d{3}\.\d{3}-\d{2}\b/g,
+        replacement: "[REDACTED_CPF]",
+    },
+    // ── Contact info (toggled separately) ─────────────────────────
+    {
+        name: "email",
+        category: "email",
+        regex: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g,
+        replacement: "[REDACTED_EMAIL]",
+    },
+    {
+        name: "phone-br",
+        category: "phone",
+        // +55 (11) 91234-5678 and common variants.
+        regex: /\b(?:\+?55\s?)?(?:\(?\d{2}\)?[\s.-]?)?9?\d{4}[\s.-]?\d{4}\b/g,
+        replacement: "[REDACTED_PHONE]",
+    },
+];
+export const KEY_RULES = [
+    { keys: ["password", "passwd", "pwd"], category: "secret", replacement: "[REDACTED_PASSWORD]" },
+    {
+        keys: ["authorization", "authtoken", "accesstoken", "refreshtoken", "idtoken"],
+        category: "secret",
+        replacement: "[REDACTED_AUTHORIZATION]",
+    },
+    { keys: ["cookie", "setcookie"], category: "secret", replacement: "[REDACTED_COOKIE]" },
+    {
+        keys: ["sessionid", "session", "sid"],
+        category: "secret",
+        replacement: "[REDACTED_SESSION_ID]",
+    },
+    {
+        keys: ["apikey", "secret", "clientsecret", "token", "webhooksecret", "privatekey"],
+        category: "secret",
+        replacement: "[REDACTED_SECRET]",
+    },
+    {
+        keys: ["awssecretaccesskey", "awssecretkey", "awssessiontoken"],
+        category: "secret",
+        replacement: "[REDACTED_AWS_SECRET]",
+    },
+    {
+        keys: ["databaseurl", "connectionstring", "dburl"],
+        category: "secret",
+        replacement: "[REDACTED_DATABASE_URL]",
+    },
+    // PII
+    { keys: ["cpf"], category: "pii", replacement: "[REDACTED_CPF]" },
+    { keys: ["cnpj"], category: "pii", replacement: "[REDACTED_CNPJ]" },
+    { keys: ["rg"], category: "pii", replacement: "[REDACTED_RG]" },
+    { keys: ["passport", "passaporte"], category: "pii", replacement: "[REDACTED_PASSPORT]" },
+    {
+        keys: ["bankaccount", "accountnumber", "iban", "agencia", "conta"],
+        category: "pii",
+        replacement: "[REDACTED_BANK_ACCOUNT]",
+    },
+    // Payment
+    { keys: ["cardnumber", "pan", "ccnumber"], category: "payment", replacement: "[REDACTED_CARD]" },
+    { keys: ["cvv", "cvc", "securitycode"], category: "payment", replacement: "[REDACTED_CVV]" },
+    { keys: ["pixkey", "pix"], category: "payment", replacement: "[REDACTED_PIX_KEY]" },
+    // Contact
+    { keys: ["email", "mail"], category: "email", replacement: "[REDACTED_EMAIL]" },
+    { keys: ["phone", "telefone", "celular", "mobile"], category: "phone", replacement: "[REDACTED_PHONE]" },
+];
+export function normalizeKey(key) {
+    return key.toLowerCase().replace(/[^a-z0-9]/g, "");
+}
+const KEY_LOOKUP = new Map();
+for (const rule of KEY_RULES) {
+    for (const k of rule.keys)
+        KEY_LOOKUP.set(k, rule);
+}
+export function keyRuleFor(key) {
+    return KEY_LOOKUP.get(normalizeKey(key));
+}
+//# sourceMappingURL=patterns.js.map

package/dist/redaction/patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../../src/redaction/patterns.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAaH,wEAAwE;AACxE,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,IAAI,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,GAAG,EAAE,CAAC;YACR,CAAC,IAAI,CAAC,CAAC;YACP,IAAI,CAAC,GAAG,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,GAAG,IAAI,CAAC,CAAC;QACT,GAAG,GAAG,CAAC,GAAG,CAAC;IACb,CAAC;IACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAmB;IAC5C,iEAAiE;IACjE;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EACH,qJAAqJ;QACvJ,WAAW,EAAE,wBAAwB;KACtC;IACD;QACE,IAAI,EAAE,KAAK;QACX,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,uDAAuD;QAC9D,WAAW,EAAE,gBAAgB;KAC9B;IACD;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,0CAA0C;QACjD,WAAW,EAAE,8BAA8B;KAC5C;IACD;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EAAE,yBAAyB;KACvC;IACD;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,wBAAwB;KACtC;IACD;QACE,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,kDAAkD;QACzD,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,0BAA0B;KACxC;IACD;QACE,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,kFAAkF;QACzF,WAAW,EAAE,yBAAyB;KACvC;IAED,iEAAiE;IACjE;QACE,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,SAAS;QACnB,uDAAuD;QACvD,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,iBAAiB;QAC9B,QAAQ,EAAE,SAAS;KACpB;IAED,iEAAiE;IACjE;QACE,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,2CAA2C;QAClD,WAAW,EAAE,iBAAiB;KAC/B;IACD;QACE,IAAI,EAAE,KAAK;QACX,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,gBAAgB;KAC9B;IAED,iEAAiE;IACjE;QACE,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,qDAAqD;QAC5D,WAAW,EAAE,kBAAkB;KAChC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,OAAO;QACjB,2CAA2C;QAC3C,KAAK,EAAE,8DAA8D;QACrE,WAAW,EAAE,kBAAkB;KAChC;CACF,CAAC;AAYF,MAAM,CAAC,MAAM,SAAS,GAAc;IAClC,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE;IAC/F;QACE,IAAI,EAAE,CAAC,eAAe,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,CAAC;QAC9E,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,0BAA0B;KACxC;IACD,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACvF;QACE,IAAI,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC;QACrC,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,CAAC;QAClF,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,mBAAmB;KACjC;IACD;QACE,IAAI,EAAE,CAAC,oBAAoB,EAAE,cAAc,EAAE,iBAAiB,CAAC;QAC/D,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,uBAAuB;KACrC;IACD;QACE,IAAI,EAAE,CAAC,aAAa,EAAE,kBAAkB,EAAE,OAAO,CAAC;QAClD,QAAQ,EAAE,QAAQ;QAClB,WAAW,EAAE,yBAAyB;KACvC;IACD,MAAM;IACN,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,gBAAgB,EAAE;IACjE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE;IACnE,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE;IAC/D,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE;IACzF;QACE,IAAI,EAAE,CAAC,aAAa,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC;QAClE,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,yBAAyB;KACvC;IACD,UAAU;IACV,EAAE,IAAI,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE;IAChG,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE;IAC5F,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,oBAAoB,EAAE;IACnF,UAAU;IACV,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE;IAC/E,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE;CACzG,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAAmB,CAAC;AAC9C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI;QAAE,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC"}