@copilotkit/aimock 1.42.0 → 1.43.0

package/dist/live-sanitize.js

@@ -0,0 +1,196 @@
+import { validateLiveTranscript } from "./live-fixture.js";
+
+//#region src/live-sanitize.ts
+var LiveUnsafeExportError = class extends Error {
+	category = "unsafe-export";
+	constructor() {
+		super("unsafe-export: Live transcript cannot be retained safely");
+		this.name = "LiveUnsafeExportError";
+	}
+};
+const credentialKey = /^(?:authorization|proxy-authorization|cookie|set-cookie|x-api-key|api[_-]?key|access[_-]?token|refresh[_-]?token|client[_-]?secret|password|secret|token|sec-websocket-protocol)$/i;
+const semanticKey = new Set([
+	"instructions",
+	"content",
+	"delta",
+	"audio",
+	"arguments",
+	"output",
+	"input",
+	"tools",
+	"parameters",
+	"client",
+	"text",
+	"thinking"
+]);
+const metadataKey = new Set([
+	"metadata",
+	"headers",
+	"diagnostics"
+]);
+const unsafeKey = new Set([
+	"__proto__",
+	"constructor",
+	"prototype"
+]);
+const redacted = "[REDACTED]";
+function fail() {
+	throw new LiveUnsafeExportError();
+}
+function decodeUrlComponent(value) {
+	return new URLSearchParams(`value=${value.replace(/\+/g, "%2B").replace(/&/g, "%26")}`).get("value");
+}
+function escapePointer(key) {
+	return key.replace(/~/g, "~0").replace(/\//g, "~1");
+}
+function parts(pointer) {
+	if (!pointer.startsWith("/") || /~(?![01])/u.test(pointer)) fail();
+	const keys = pointer.slice(1).split("/").map((key) => key.replace(/~1/g, "/").replace(/~0/g, "~"));
+	if (keys.some((key) => unsafeKey.has(key))) fail();
+	return keys;
+}
+function child(value, key) {
+	if (!value || typeof value !== "object" || !Object.hasOwn(value, key)) fail();
+	if (Array.isArray(value)) {
+		if (!/^(0|[1-9]\d*)$/.test(key)) fail();
+		return value[Number(key)];
+	}
+	return value[key];
+}
+function setIdentifier(event, pointer, value) {
+	const keys = parts(pointer);
+	const last = keys.pop();
+	if (last === void 0) fail();
+	let parent = event;
+	for (const key of keys) parent = child(parent, key);
+	if (typeof child(parent, last) !== "string" || !parent || typeof parent !== "object") fail();
+	if (Array.isArray(parent)) parent[Number(last)] = value;
+	else parent[last] = value;
+}
+/**
+* Sanitize a separately retained successful capture; never mutate the relay.
+* Validation supplies the reviewed identifier descriptors and causal checks.
+* Credential descriptors supplement the built-in policy, not permission to
+* delete arbitrary protocol operands. Ambiguous secret-bearing data fails closed.
+*/
+function sanitizeLiveTranscript(transcript, secretValues = [], credentialFields = [], validationOptions = {}) {
+	try {
+		const result = validateLiveTranscript(transcript, validationOptions);
+		if (!Array.isArray(secretValues) || secretValues.some((s) => typeof s !== "string")) fail();
+		const secrets = [...new Set(secretValues.filter((s) => s.length))].sort((a, b) => b.length - a.length);
+		const hasSecret = (value) => secrets.some((secret) => value.includes(secret));
+		const replaceSecrets = (value) => {
+			for (const secret of secrets) value = value.split(secret).join(redacted);
+			return value;
+		};
+		const descriptors = new Set(credentialFields.map((field) => {
+			parts(field.pointer);
+			return field.pointer;
+		}));
+		const handled = /* @__PURE__ */ new Set();
+		const originalIds = /* @__PURE__ */ new Set();
+		for (const binding of result.bindings) {
+			let value = result.entries[binding.entry].event;
+			for (const key of parts(binding.pointer)) value = child(value, key);
+			if (typeof value !== "string") fail();
+			originalIds.add(value);
+		}
+		let nextId = 1;
+		const identities = /* @__PURE__ */ new Map();
+		for (const binding of result.bindings) {
+			let identity = identities.get(binding.name);
+			if (!identity) {
+				const index = identities.size + 1;
+				while (originalIds.has(`live-id-${nextId}`)) nextId++;
+				identity = {
+					name: `binding-${index}`,
+					value: `live-id-${nextId++}`
+				};
+				identities.set(binding.name, identity);
+			}
+			setIdentifier(result.entries[binding.entry].event, binding.pointer, identity.value);
+			binding.name = identity.name;
+		}
+		function sanitizeUrl(value) {
+			if (!/^[a-z][a-z0-9+.-]*:\/\//i.test(value)) return value;
+			let url;
+			try {
+				url = new URL(value);
+			} catch {
+				return value;
+			}
+			if (hasSecret(decodeUrlComponent(url.pathname))) fail();
+			let changed = false;
+			if (url.username || url.password) {
+				url.username = "";
+				url.password = "";
+				changed = true;
+			}
+			for (const [key, val] of [...url.searchParams]) if (credentialKey.test(key) || hasSecret(key) || hasSecret(val)) {
+				url.searchParams.delete(key);
+				changed = true;
+			}
+			const decodedHash = decodeUrlComponent(url.hash);
+			if (url.hash && (hasSecret(decodedHash) || /(?:token|secret|password|api[_-]?key)=/i.test(decodedHash))) {
+				url.hash = "";
+				changed = true;
+			}
+			return changed ? url.href : value;
+		}
+		function providerMetadata(pointer) {
+			const match = /^\/entries\/(\d+)\/event\/event\/(?:response\/(?:user|prompt_cache_key|safety_identifier)|item\/encrypted_content)$/.exec(pointer);
+			if (!match) return false;
+			const event = result.entries[Number(match[1])].event;
+			const nested = event.event;
+			if (event.type !== "response.event" || !nested || typeof nested !== "object" || Array.isArray(nested)) return false;
+			if (!pointer.endsWith("/item/encrypted_content")) return [
+				"response.created",
+				"response.in_progress",
+				"response.completed"
+			].includes(String(nested.type));
+			const item = nested.item;
+			return ["response.output_item.added", "response.output_item.done"].includes(String(nested.type)) && !!item && typeof item === "object" && !Array.isArray(item) && item.type === "reasoning";
+		}
+		function visit(value, path, metadata = false, semantic = false) {
+			if (typeof value === "string") {
+				const url = sanitizeUrl(value);
+				if ((hasSecret(value) || url !== value) && (!metadata || semantic)) fail();
+				return metadata && !semantic ? replaceSecrets(url) : value;
+			}
+			if (Array.isArray(value)) return value.map((item, i) => visit(item, `${path}/${i}`, metadata, semantic));
+			if (!value || typeof value !== "object") return value;
+			const output = {};
+			for (const [key, item] of Object.entries(value)) {
+				const pointer = `${path}/${escapePointer(key)}`;
+				if (providerMetadata(pointer) && (typeof item === "string" || item === null)) {
+					if (descriptors.has(pointer)) handled.add(pointer);
+					else output[key] = typeof item === "string" ? redacted : item;
+					continue;
+				}
+				const protectedBranch = semantic || semanticKey.has(key);
+				const removable = !protectedBranch && (metadata || credentialKey.test(key));
+				if (descriptors.has(pointer)) {
+					if (!removable) fail();
+					handled.add(pointer);
+					continue;
+				}
+				if (!semantic && credentialKey.test(key)) continue;
+				if (hasSecret(key)) {
+					if (!metadata || protectedBranch) fail();
+					continue;
+				}
+				output[key] = visit(item, pointer, metadata || metadataKey.has(key), protectedBranch);
+			}
+			return output;
+		}
+		const cleaned = visit(result, "");
+		if (handled.size !== descriptors.size || hasSecret(JSON.stringify(cleaned))) fail();
+		return validateLiveTranscript(cleaned, validationOptions);
+	} catch {
+		fail();
+	}
+}
+
+//#endregion
+export { sanitizeLiveTranscript };
+//# sourceMappingURL=live-sanitize.js.map

package/dist/live-sanitize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-sanitize.js","names":[],"sources":["../src/live-sanitize.ts"],"sourcesContent":["import { validateLiveTranscript } from \"./live-fixture.js\";\nimport type { LiveJson, LiveObject, LiveOptions, LiveTranscript } from \"./live-types.js\";\n\n/** Exact transcript-rooted pointer to an observed removable credential metadata field. */\nexport interface LiveCredentialField {\n  readonly pointer: string;\n}\n\nexport class LiveUnsafeExportError extends Error {\n  readonly category = \"unsafe-export\";\n  constructor() {\n    // Never reflect untrusted values, keys, pointers, or validation errors.\n    super(\"unsafe-export: Live transcript cannot be retained safely\");\n    this.name = \"LiveUnsafeExportError\";\n  }\n}\n\nconst credentialKey =\n  /^(?:authorization|proxy-authorization|cookie|set-cookie|x-api-key|api[_-]?key|access[_-]?token|refresh[_-]?token|client[_-]?secret|password|secret|token|sec-websocket-protocol)$/i;\n// These branches carry conversation, tool schema, or PCM semantics. A key named\n// \"authorization\" inside tool parameters is a schema property, not a header.\nconst semanticKey = new Set([\n  \"instructions\",\n  \"content\",\n  \"delta\",\n  \"audio\",\n  \"arguments\",\n  \"output\",\n  \"input\",\n  \"tools\",\n  \"parameters\",\n  \"client\",\n  \"text\",\n  \"thinking\",\n]);\nconst metadataKey = new Set([\"metadata\", \"headers\", \"diagnostics\"]);\nconst unsafeKey = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\nconst redacted = \"[REDACTED]\";\nfunction fail(): never {\n  throw new LiveUnsafeExportError();\n}\nfunction decodeUrlComponent(value: string): string {\n  // Tolerate malformed escapes while exposing encoded secrets. Protect literal\n  // form separators so the entire component remains one value.\n  return new URLSearchParams(`value=${value.replace(/\\+/g, \"%2B\").replace(/&/g, \"%26\")}`).get(\n    \"value\",\n  )!;\n}\nfunction escapePointer(key: string): string {\n  return key.replace(/~/g, \"~0\").replace(/\\//g, \"~1\");\n}\nfunction parts(pointer: string): string[] {\n  if (!pointer.startsWith(\"/\") || /~(?![01])/u.test(pointer)) fail();\n  const keys = pointer\n    .slice(1)\n    .split(\"/\")\n    .map((key) => key.replace(/~1/g, \"/\").replace(/~0/g, \"~\"));\n  if (keys.some((key) => unsafeKey.has(key))) fail();\n  return keys;\n}\nfunction child(value: LiveJson, key: string): LiveJson {\n  if (!value || typeof value !== \"object\" || !Object.hasOwn(value, key)) fail();\n  if (Array.isArray(value)) {\n    if (!/^(0|[1-9]\\d*)$/.test(key)) fail();\n    return value[Number(key)];\n  }\n  return value[key];\n}\nfunction setIdentifier(event: LiveObject, pointer: string, value: string): void {\n  const keys = parts(pointer);\n  const last = keys.pop();\n  if (last === undefined) fail();\n  let parent: LiveJson = event;\n  for (const key of keys) parent = child(parent, key);\n  if (typeof child(parent, last) !== \"string\" || !parent || typeof parent !== \"object\") fail();\n  if (Array.isArray(parent)) parent[Number(last)] = value;\n  else parent[last] = value;\n}\n\n/**\n * Sanitize a separately retained successful capture; never mutate the relay.\n * Validation supplies the reviewed identifier descriptors and causal checks.\n * Credential descriptors supplement the built-in policy, not permission to\n * delete arbitrary protocol operands. Ambiguous secret-bearing data fails closed.\n */\nexport function sanitizeLiveTranscript(\n  transcript: LiveTranscript,\n  secretValues: readonly string[] = [],\n  credentialFields: readonly LiveCredentialField[] = [],\n  validationOptions: Omit<LiveOptions, \"secretValues\"> = {},\n): LiveTranscript {\n  try {\n    const result = validateLiveTranscript(transcript, validationOptions);\n    if (!Array.isArray(secretValues) || secretValues.some((s) => typeof s !== \"string\")) fail();\n    const secrets = [...new Set(secretValues.filter((s) => s.length))].sort(\n      (a, b) => b.length - a.length,\n    );\n    const hasSecret = (value: string) => secrets.some((secret) => value.includes(secret));\n    const replaceSecrets = (value: string) => {\n      for (const secret of secrets) value = value.split(secret).join(redacted);\n      return value;\n    };\n    const descriptors = new Set(\n      credentialFields.map((field) => {\n        parts(field.pointer);\n        return field.pointer;\n      }),\n    );\n    const handled = new Set<string>();\n    // Names themselves may have been derived from provider IDs. Replace both\n    // the annotation names and only their explicitly annotated operand values.\n    const originalIds = new Set<string>();\n    for (const binding of result.bindings) {\n      let value: LiveJson = result.entries[binding.entry].event;\n      for (const key of parts(binding.pointer)) value = child(value, key);\n      if (typeof value !== \"string\") fail();\n      originalIds.add(value);\n    }\n    let nextId = 1;\n    const identities = new Map<string, { name: string; value: string }>();\n    for (const binding of result.bindings) {\n      let identity = identities.get(binding.name);\n      if (!identity) {\n        const index = identities.size + 1;\n        while (originalIds.has(`live-id-${nextId}`)) nextId++;\n        identity = { name: `binding-${index}`, value: `live-id-${nextId++}` };\n        identities.set(binding.name, identity);\n      }\n      setIdentifier(result.entries[binding.entry].event, binding.pointer, identity.value);\n      binding.name = identity.name;\n    }\n    function sanitizeUrl(value: string): string {\n      // Leave non-URLs and clean URLs byte-for-byte intact.\n      if (!/^[a-z][a-z0-9+.-]*:\\/\\//i.test(value)) return value;\n      let url: URL;\n      try {\n        url = new URL(value);\n      } catch {\n        return value;\n      }\n      // A path identifies the resource; changing it could change replay semantics.\n      if (hasSecret(decodeUrlComponent(url.pathname))) fail();\n      let changed = false;\n      if (url.username || url.password) {\n        url.username = \"\";\n        url.password = \"\";\n        changed = true;\n      }\n      for (const [key, val] of [...url.searchParams]) {\n        if (credentialKey.test(key) || hasSecret(key) || hasSecret(val)) {\n          url.searchParams.delete(key);\n          changed = true;\n        }\n      }\n      const decodedHash = decodeUrlComponent(url.hash);\n      if (\n        url.hash &&\n        (hasSecret(decodedHash) || /(?:token|secret|password|api[_-]?key)=/i.test(decodedHash))\n      ) {\n        url.hash = \"\";\n        changed = true;\n      }\n      return changed ? url.href : value;\n    }\n    function providerMetadata(pointer: string): boolean {\n      const match =\n        /^\\/entries\\/(\\d+)\\/event\\/event\\/(?:response\\/(?:user|prompt_cache_key|safety_identifier)|item\\/encrypted_content)$/.exec(\n          pointer,\n        );\n      if (!match) return false;\n      const event = result.entries[Number(match[1])].event;\n      const nested = event.event;\n      if (\n        event.type !== \"response.event\" ||\n        !nested ||\n        typeof nested !== \"object\" ||\n        Array.isArray(nested)\n      )\n        return false;\n      if (!pointer.endsWith(\"/item/encrypted_content\")) {\n        return [\"response.created\", \"response.in_progress\", \"response.completed\"].includes(\n          String(nested.type),\n        );\n      }\n      const item = nested.item;\n      return (\n        [\"response.output_item.added\", \"response.output_item.done\"].includes(String(nested.type)) &&\n        !!item &&\n        typeof item === \"object\" &&\n        !Array.isArray(item) &&\n        item.type === \"reasoning\"\n      );\n    }\n    function visit(value: LiveJson, path: string, metadata = false, semantic = false): LiveJson {\n      if (typeof value === \"string\") {\n        const url = sanitizeUrl(value);\n        if ((hasSecret(value) || url !== value) && (!metadata || semantic)) fail();\n        return metadata && !semantic ? replaceSecrets(url) : value;\n      }\n      if (Array.isArray(value))\n        return value.map((item, i) => visit(item, `${path}/${i}`, metadata, semantic));\n      if (!value || typeof value !== \"object\") return value;\n      const output: LiveObject = {};\n      for (const [key, item] of Object.entries(value)) {\n        const pointer = `${path}/${escapePointer(key)}`;\n        // Exact retained metadata sites from the reviewed v3 sanitation\n        // evidence. Never infer these by equal values or similar field names.\n        if (providerMetadata(pointer) && (typeof item === \"string\" || item === null)) {\n          if (descriptors.has(pointer)) handled.add(pointer);\n          else output[key] = typeof item === \"string\" ? redacted : item;\n          continue;\n        }\n        const protectedBranch = semantic || semanticKey.has(key);\n        const removable = !protectedBranch && (metadata || credentialKey.test(key));\n        if (descriptors.has(pointer)) {\n          if (!removable) fail();\n          handled.add(pointer);\n          continue;\n        }\n        if (!semantic && credentialKey.test(key)) continue;\n        if (hasSecret(key)) {\n          if (!metadata || protectedBranch) fail();\n          continue;\n        }\n        output[key] = visit(item, pointer, metadata || metadataKey.has(key), protectedBranch);\n      }\n      return output;\n    }\n    // Validation clones all bounded JSON, including unknown metadata. Preserve\n    // those fields, then validate again to catch any semantic deletion.\n    const cleaned = visit(result as LiveTranscript & LiveObject, \"\");\n    if (handled.size !== descriptors.size || hasSecret(JSON.stringify(cleaned))) fail();\n    return validateLiveTranscript(cleaned, validationOptions);\n  } catch {\n    fail();\n  }\n}\n"],"mappings":";;;AAQA,IAAa,wBAAb,cAA2C,MAAM;CAC/C,AAAS,WAAW;CACpB,cAAc;AAEZ,QAAM,2DAA2D;AACjE,OAAK,OAAO;;;AAIhB,MAAM,gBACJ;AAGF,MAAM,cAAc,IAAI,IAAI;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AACF,MAAM,cAAc,IAAI,IAAI;CAAC;CAAY;CAAW;CAAc,CAAC;AACnE,MAAM,YAAY,IAAI,IAAI;CAAC;CAAa;CAAe;CAAY,CAAC;AACpE,MAAM,WAAW;AACjB,SAAS,OAAc;AACrB,OAAM,IAAI,uBAAuB;;AAEnC,SAAS,mBAAmB,OAAuB;AAGjD,QAAO,IAAI,gBAAgB,SAAS,MAAM,QAAQ,OAAO,MAAM,CAAC,QAAQ,MAAM,MAAM,GAAG,CAAC,IACtF,QACD;;AAEH,SAAS,cAAc,KAAqB;AAC1C,QAAO,IAAI,QAAQ,MAAM,KAAK,CAAC,QAAQ,OAAO,KAAK;;AAErD,SAAS,MAAM,SAA2B;AACxC,KAAI,CAAC,QAAQ,WAAW,IAAI,IAAI,aAAa,KAAK,QAAQ,CAAE,OAAM;CAClE,MAAM,OAAO,QACV,MAAM,EAAE,CACR,MAAM,IAAI,CACV,KAAK,QAAQ,IAAI,QAAQ,OAAO,IAAI,CAAC,QAAQ,OAAO,IAAI,CAAC;AAC5D,KAAI,KAAK,MAAM,QAAQ,UAAU,IAAI,IAAI,CAAC,CAAE,OAAM;AAClD,QAAO;;AAET,SAAS,MAAM,OAAiB,KAAuB;AACrD,KAAI,CAAC,SAAS,OAAO,UAAU,YAAY,CAAC,OAAO,OAAO,OAAO,IAAI,CAAE,OAAM;AAC7E,KAAI,MAAM,QAAQ,MAAM,EAAE;AACxB,MAAI,CAAC,iBAAiB,KAAK,IAAI,CAAE,OAAM;AACvC,SAAO,MAAM,OAAO,IAAI;;AAE1B,QAAO,MAAM;;AAEf,SAAS,cAAc,OAAmB,SAAiB,OAAqB;CAC9E,MAAM,OAAO,MAAM,QAAQ;CAC3B,MAAM,OAAO,KAAK,KAAK;AACvB,KAAI,SAAS,OAAW,OAAM;CAC9B,IAAI,SAAmB;AACvB,MAAK,MAAM,OAAO,KAAM,UAAS,MAAM,QAAQ,IAAI;AACnD,KAAI,OAAO,MAAM,QAAQ,KAAK,KAAK,YAAY,CAAC,UAAU,OAAO,WAAW,SAAU,OAAM;AAC5F,KAAI,MAAM,QAAQ,OAAO,CAAE,QAAO,OAAO,KAAK,IAAI;KAC7C,QAAO,QAAQ;;;;;;;;AAStB,SAAgB,uBACd,YACA,eAAkC,EAAE,EACpC,mBAAmD,EAAE,EACrD,oBAAuD,EAAE,EACzC;AAChB,KAAI;EACF,MAAM,SAAS,uBAAuB,YAAY,kBAAkB;AACpE,MAAI,CAAC,MAAM,QAAQ,aAAa,IAAI,aAAa,MAAM,MAAM,OAAO,MAAM,SAAS,CAAE,OAAM;EAC3F,MAAM,UAAU,CAAC,GAAG,IAAI,IAAI,aAAa,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAChE,GAAG,MAAM,EAAE,SAAS,EAAE,OACxB;EACD,MAAM,aAAa,UAAkB,QAAQ,MAAM,WAAW,MAAM,SAAS,OAAO,CAAC;EACrF,MAAM,kBAAkB,UAAkB;AACxC,QAAK,MAAM,UAAU,QAAS,SAAQ,MAAM,MAAM,OAAO,CAAC,KAAK,SAAS;AACxE,UAAO;;EAET,MAAM,cAAc,IAAI,IACtB,iBAAiB,KAAK,UAAU;AAC9B,SAAM,MAAM,QAAQ;AACpB,UAAO,MAAM;IACb,CACH;EACD,MAAM,0BAAU,IAAI,KAAa;EAGjC,MAAM,8BAAc,IAAI,KAAa;AACrC,OAAK,MAAM,WAAW,OAAO,UAAU;GACrC,IAAI,QAAkB,OAAO,QAAQ,QAAQ,OAAO;AACpD,QAAK,MAAM,OAAO,MAAM,QAAQ,QAAQ,CAAE,SAAQ,MAAM,OAAO,IAAI;AACnE,OAAI,OAAO,UAAU,SAAU,OAAM;AACrC,eAAY,IAAI,MAAM;;EAExB,IAAI,SAAS;EACb,MAAM,6BAAa,IAAI,KAA8C;AACrE,OAAK,MAAM,WAAW,OAAO,UAAU;GACrC,IAAI,WAAW,WAAW,IAAI,QAAQ,KAAK;AAC3C,OAAI,CAAC,UAAU;IACb,MAAM,QAAQ,WAAW,OAAO;AAChC,WAAO,YAAY,IAAI,WAAW,SAAS,CAAE;AAC7C,eAAW;KAAE,MAAM,WAAW;KAAS,OAAO,WAAW;KAAY;AACrE,eAAW,IAAI,QAAQ,MAAM,SAAS;;AAExC,iBAAc,OAAO,QAAQ,QAAQ,OAAO,OAAO,QAAQ,SAAS,SAAS,MAAM;AACnF,WAAQ,OAAO,SAAS;;EAE1B,SAAS,YAAY,OAAuB;AAE1C,OAAI,CAAC,2BAA2B,KAAK,MAAM,CAAE,QAAO;GACpD,IAAI;AACJ,OAAI;AACF,UAAM,IAAI,IAAI,MAAM;WACd;AACN,WAAO;;AAGT,OAAI,UAAU,mBAAmB,IAAI,SAAS,CAAC,CAAE,OAAM;GACvD,IAAI,UAAU;AACd,OAAI,IAAI,YAAY,IAAI,UAAU;AAChC,QAAI,WAAW;AACf,QAAI,WAAW;AACf,cAAU;;AAEZ,QAAK,MAAM,CAAC,KAAK,QAAQ,CAAC,GAAG,IAAI,aAAa,CAC5C,KAAI,cAAc,KAAK,IAAI,IAAI,UAAU,IAAI,IAAI,UAAU,IAAI,EAAE;AAC/D,QAAI,aAAa,OAAO,IAAI;AAC5B,cAAU;;GAGd,MAAM,cAAc,mBAAmB,IAAI,KAAK;AAChD,OACE,IAAI,SACH,UAAU,YAAY,IAAI,0CAA0C,KAAK,YAAY,GACtF;AACA,QAAI,OAAO;AACX,cAAU;;AAEZ,UAAO,UAAU,IAAI,OAAO;;EAE9B,SAAS,iBAAiB,SAA0B;GAClD,MAAM,QACJ,sHAAsH,KACpH,QACD;AACH,OAAI,CAAC,MAAO,QAAO;GACnB,MAAM,QAAQ,OAAO,QAAQ,OAAO,MAAM,GAAG,EAAE;GAC/C,MAAM,SAAS,MAAM;AACrB,OACE,MAAM,SAAS,oBACf,CAAC,UACD,OAAO,WAAW,YAClB,MAAM,QAAQ,OAAO,CAErB,QAAO;AACT,OAAI,CAAC,QAAQ,SAAS,0BAA0B,CAC9C,QAAO;IAAC;IAAoB;IAAwB;IAAqB,CAAC,SACxE,OAAO,OAAO,KAAK,CACpB;GAEH,MAAM,OAAO,OAAO;AACpB,UACE,CAAC,8BAA8B,4BAA4B,CAAC,SAAS,OAAO,OAAO,KAAK,CAAC,IACzF,CAAC,CAAC,QACF,OAAO,SAAS,YAChB,CAAC,MAAM,QAAQ,KAAK,IACpB,KAAK,SAAS;;EAGlB,SAAS,MAAM,OAAiB,MAAc,WAAW,OAAO,WAAW,OAAiB;AAC1F,OAAI,OAAO,UAAU,UAAU;IAC7B,MAAM,MAAM,YAAY,MAAM;AAC9B,SAAK,UAAU,MAAM,IAAI,QAAQ,WAAW,CAAC,YAAY,UAAW,OAAM;AAC1E,WAAO,YAAY,CAAC,WAAW,eAAe,IAAI,GAAG;;AAEvD,OAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,MAAM,KAAK,MAAM,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,KAAK,UAAU,SAAS,CAAC;AAChF,OAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;GAChD,MAAM,SAAqB,EAAE;AAC7B,QAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,MAAM,EAAE;IAC/C,MAAM,UAAU,GAAG,KAAK,GAAG,cAAc,IAAI;AAG7C,QAAI,iBAAiB,QAAQ,KAAK,OAAO,SAAS,YAAY,SAAS,OAAO;AAC5E,SAAI,YAAY,IAAI,QAAQ,CAAE,SAAQ,IAAI,QAAQ;SAC7C,QAAO,OAAO,OAAO,SAAS,WAAW,WAAW;AACzD;;IAEF,MAAM,kBAAkB,YAAY,YAAY,IAAI,IAAI;IACxD,MAAM,YAAY,CAAC,oBAAoB,YAAY,cAAc,KAAK,IAAI;AAC1E,QAAI,YAAY,IAAI,QAAQ,EAAE;AAC5B,SAAI,CAAC,UAAW,OAAM;AACtB,aAAQ,IAAI,QAAQ;AACpB;;AAEF,QAAI,CAAC,YAAY,cAAc,KAAK,IAAI,CAAE;AAC1C,QAAI,UAAU,IAAI,EAAE;AAClB,SAAI,CAAC,YAAY,gBAAiB,OAAM;AACxC;;AAEF,WAAO,OAAO,MAAM,MAAM,SAAS,YAAY,YAAY,IAAI,IAAI,EAAE,gBAAgB;;AAEvF,UAAO;;EAIT,MAAM,UAAU,MAAM,QAAuC,GAAG;AAChE,MAAI,QAAQ,SAAS,YAAY,QAAQ,UAAU,KAAK,UAAU,QAAQ,CAAC,CAAE,OAAM;AACnF,SAAO,uBAAuB,SAAS,kBAAkB;SACnD;AACN,QAAM"}

package/dist/live-types.d.cts

@@ -0,0 +1,71 @@
+//#region src/live-types.d.ts
+type LiveJson = null | boolean | number | string | LiveJson[] | {
+  [key: string]: LiveJson;
+};
+type LiveObject = {
+  [key: string]: LiveJson;
+};
+type LiveMode = "client" | "managed";
+interface LivePosition {
+  command: number;
+  audioBytes: number;
+}
+interface LiveBinding {
+  entry: number;
+  pointer: string;
+  name: string;
+  action: "define" | "reference";
+  owner: "client" | "server";
+  origin?: "observed" | "imported-context";
+}
+interface LiveEntry {
+  direction: "client" | "server";
+  atMs: number;
+  event: LiveObject;
+  barrier?: LivePosition;
+}
+interface LiveTranscript {
+  version: 1;
+  model: "gpt-live-1";
+  mode: LiveMode;
+  audio: {
+    encoding: "pcm16le";
+    sampleRateHz: 24000;
+    channels: 1;
+  };
+  configuration: LiveObject;
+  entries: LiveEntry[];
+  bindings: LiveBinding[];
+  capture: {
+    source: "authored" | "provider";
+    complete: true;
+    terminalEntry: number;
+    provenance?: {
+      host: string;
+      path: "/v1/live/sessions";
+      observedAt: string;
+      referenceVersion: string;
+      sanitationVersion: 1;
+    };
+  };
+}
+interface LiveFixtureResponse {
+  live: LiveTranscript;
+  liveTiming?: "recorded" | "immediate";
+}
+interface LiveOptions {
+  maxSessions?: number;
+  maxMessageBytes?: number;
+  maxBufferedBytes?: number;
+  maxWriteBytes?: number;
+  maxDecodedAudioBytes?: number;
+  maxDurationMs?: number;
+  idleTimeoutMs?: number;
+  mismatchTimeoutMs?: number;
+  secretValues?: string[];
+}
+type LiveFailureCategory = "invalid-client" | "fixture-mismatch" | "protocol-divergence" | "upstream-auth" | "upstream-access" | "upstream-connect" | "timeout" | "resource-limit" | "incomplete-capture" | "unsafe-export";
+//# sourceMappingURL=live-types.d.ts.map
+//#endregion
+export { LiveBinding, LiveEntry, LiveFailureCategory, LiveFixtureResponse, LiveJson, LiveMode, LiveObject, LiveOptions, LivePosition, LiveTranscript };
+//# sourceMappingURL=live-types.d.cts.map

package/dist/live-types.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-types.d.cts","names":[],"sources":["../src/live-types.ts"],"sourcesContent":[],"mappings":";KAAY,QAAA,sCAA8C;EAA9C,CAAA,GAAA,EAAA,MAAQ,CAAA,EAAoE,QAApE;CAAA;AAAsC,KAC9C,UAAA,GAD8C;MAA8B,EAAA,MAAA,CAAA,EAC9C,QAD8C;CAAQ;AACpF,KACA,QAAA,GADU,QAAoB,GAAA,SAAQ;AACtC,UACK,YAAA,CADG;EACH,OAAA,EAAA,MAAY;EAIZ,UAAA,EAAA,MAAW;AAQ5B;AAA0B,UART,WAAA,CAQS;OAGjB,EAAA,MAAA;SACG,EAAA,MAAA;EAAY,IAAA,EAAA,MAAA;EAEP,MAAA,EAAA,QAAA,GAAc,WAAA;EAAA,KAAA,EAAA,QAAA,GAAA,QAAA;QAGvB,CAAA,EAAA,UAAA,GAAA,kBAAA;;AAGG,UAZM,SAAA,CAYN;WACC,EAAA,QAAA,GAAA,QAAA;EAAW,IAAA,EAAA,MAAA;EAcN,KAAA,EAxBR,UAwBQ;EAIA,OAAA,CAAA,EA3BL,YA2BgB;AAW5B;UApCiB,cAAA;;;QAGT;;;;;;iBAES;WACN;YACC;;;;;;;;;;;;;;UAcK,mBAAA;QACT;;;UAGS,WAAA;;;;;;;;;;;KAWL,mBAAA"}

package/dist/live-types.d.ts

@@ -0,0 +1,71 @@
+//#region src/live-types.d.ts
+type LiveJson = null | boolean | number | string | LiveJson[] | {
+  [key: string]: LiveJson;
+};
+type LiveObject = {
+  [key: string]: LiveJson;
+};
+type LiveMode = "client" | "managed";
+interface LivePosition {
+  command: number;
+  audioBytes: number;
+}
+interface LiveBinding {
+  entry: number;
+  pointer: string;
+  name: string;
+  action: "define" | "reference";
+  owner: "client" | "server";
+  origin?: "observed" | "imported-context";
+}
+interface LiveEntry {
+  direction: "client" | "server";
+  atMs: number;
+  event: LiveObject;
+  barrier?: LivePosition;
+}
+interface LiveTranscript {
+  version: 1;
+  model: "gpt-live-1";
+  mode: LiveMode;
+  audio: {
+    encoding: "pcm16le";
+    sampleRateHz: 24000;
+    channels: 1;
+  };
+  configuration: LiveObject;
+  entries: LiveEntry[];
+  bindings: LiveBinding[];
+  capture: {
+    source: "authored" | "provider";
+    complete: true;
+    terminalEntry: number;
+    provenance?: {
+      host: string;
+      path: "/v1/live/sessions";
+      observedAt: string;
+      referenceVersion: string;
+      sanitationVersion: 1;
+    };
+  };
+}
+interface LiveFixtureResponse {
+  live: LiveTranscript;
+  liveTiming?: "recorded" | "immediate";
+}
+interface LiveOptions {
+  maxSessions?: number;
+  maxMessageBytes?: number;
+  maxBufferedBytes?: number;
+  maxWriteBytes?: number;
+  maxDecodedAudioBytes?: number;
+  maxDurationMs?: number;
+  idleTimeoutMs?: number;
+  mismatchTimeoutMs?: number;
+  secretValues?: string[];
+}
+type LiveFailureCategory = "invalid-client" | "fixture-mismatch" | "protocol-divergence" | "upstream-auth" | "upstream-access" | "upstream-connect" | "timeout" | "resource-limit" | "incomplete-capture" | "unsafe-export";
+//# sourceMappingURL=live-types.d.ts.map
+//#endregion
+export { LiveBinding, LiveEntry, LiveFailureCategory, LiveFixtureResponse, LiveJson, LiveMode, LiveObject, LiveOptions, LivePosition, LiveTranscript };
+//# sourceMappingURL=live-types.d.ts.map

package/dist/live-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-types.d.ts","names":[],"sources":["../src/live-types.ts"],"sourcesContent":[],"mappings":";KAAY,QAAA,sCAA8C;EAA9C,CAAA,GAAA,EAAA,MAAQ,CAAA,EAAoE,QAApE;CAAA;AAAsC,KAC9C,UAAA,GAD8C;MAA8B,EAAA,MAAA,CAAA,EAC9C,QAD8C;CAAQ;AACpF,KACA,QAAA,GADU,QAAoB,GAAA,SAAQ;AACtC,UACK,YAAA,CADG;EACH,OAAA,EAAA,MAAY;EAIZ,UAAA,EAAA,MAAW;AAQ5B;AAA0B,UART,WAAA,CAQS;OAGjB,EAAA,MAAA;SACG,EAAA,MAAA;EAAY,IAAA,EAAA,MAAA;EAEP,MAAA,EAAA,QAAA,GAAc,WAAA;EAAA,KAAA,EAAA,QAAA,GAAA,QAAA;QAGvB,CAAA,EAAA,UAAA,GAAA,kBAAA;;AAGG,UAZM,SAAA,CAYN;WACC,EAAA,QAAA,GAAA,QAAA;EAAW,IAAA,EAAA,MAAA;EAcN,KAAA,EAxBR,UAwBQ;EAIA,OAAA,CAAA,EA3BL,YA2BgB;AAW5B;UApCiB,cAAA;;;QAGT;;;;;;iBAES;WACN;YACC;;;;;;;;;;;;;;UAcK,mBAAA;QACT;;;UAGS,WAAA;;;;;;;;;;;KAWL,mBAAA"}

package/dist/llmock.cjs

@@ -1,5 +1,8 @@
+const require_helpers = require('./helpers.cjs');
+const require_live_fixture = require('./live-fixture.cjs');
 const require_fixture_loader = require('./fixture-loader.cjs');
 const require_fal = require('./fal.cjs');
+const require_elevenlabs_voice = require('./elevenlabs-voice.cjs');
 const require_server = require('./server.cjs');
 
 //#region src/llmock.ts
@@ -14,29 +17,38 @@ var LLMock = class LLMock {
 	resolvedInboundAuth;
 	constructor(options, resolvedInboundAuth) {
 		this.options = options ?? {};
+		if (this.options.live !== void 0) require_live_fixture.normalizeLiveOptions(this.options.live);
 		this.resolvedInboundAuth = resolvedInboundAuth;
 	}
+	normalizeFixture(fixture) {
+		if (require_helpers.isLiveResponse(fixture.response) || fixture.match.endpoint === "openai-live" && typeof fixture.response !== "function") return {
+			...fixture,
+			match: { ...fixture.match },
+			response: require_live_fixture.normalizeLiveFixture(fixture.response, this.options.live)
+		};
+		return fixture;
+	}
 	addFixture(fixture) {
-		this.fixtures.push(fixture);
+		this.fixtures.push(this.normalizeFixture(fixture));
 		return this;
 	}
 	addFixtures(fixtures) {
-		this.fixtures.push(...fixtures);
+		this.fixtures.push(...fixtures.map((fixture) => this.normalizeFixture(fixture)));
 		return this;
 	}
 	prependFixture(fixture) {
-		this.fixtures.unshift(fixture);
+		this.fixtures.unshift(this.normalizeFixture(fixture));
 		return this;
 	}
 	getFixtures() {
 		return this.fixtures;
 	}
 	loadFixtureFile(filePath) {
-		this.fixtures.push(...require_fixture_loader.loadFixtureFile(filePath));
+		this.fixtures.push(...require_fixture_loader.loadFixtureFile(filePath, void 0, this.options.live));
 		return this;
 	}
 	loadFixtureDir(dirPath) {
-		this.fixtures.push(...require_fixture_loader.loadFixturesFromDir(dirPath));
+		this.fixtures.push(...require_fixture_loader.loadFixturesFromDir(dirPath, void 0, this.options.live));
 		return this;
 	}
 	/**
@@ -51,23 +63,29 @@ var LLMock = class LLMock {
 			throw new Error(`addFixturesFromJSON: invalid JSON — ${err instanceof Error ? err.message : String(err)}`);
 		}
 		else entries = input;
-		const converted = entries.map((e) => require_fixture_loader.entryToFixture(e));
-		const errors = require_fixture_loader.validateFixtures(converted).filter((i) => i.severity === "error");
+		const converted = entries.map((e) => require_fixture_loader.entryToFixture(e, void 0, this.options.live));
+		const errors = require_fixture_loader.validateFixtures(converted, this.options.live).filter((i) => i.severity === "error");
 		if (errors.length > 0) throw new Error(`Fixture validation failed: ${JSON.stringify(errors)}`);
 		this.fixtures.push(...converted);
 		return this;
 	}
 	clearFixtures() {
-		this.fixtures.length = 0;
+		require_fixture_loader.clearFixtureQueue(this.fixtures);
 		return this;
 	}
 	on(match, response, opts) {
 		return this.addFixture({
 			match,
-			response: typeof response === "function" ? response : require_fixture_loader.normalizeResponse(response),
+			response: typeof response === "function" ? response : require_fixture_loader.normalizeResponse(response, this.options.live),
 			...opts
 		});
 	}
+	onLive(match, transcript, opts) {
+		return this.on({
+			...match,
+			endpoint: "openai-live"
+		}, { live: transcript }, opts);
+	}
 	onMessage(pattern, response, opts) {
 		return this.on({ userMessage: pattern }, response, opts);
 	}
@@ -165,6 +183,15 @@ var LLMock = class LLMock {
 			response
 		});
 	}
+	onElevenLabsVoiceDesign(description, response) {
+		return this.addFixture({
+			match: {
+				userMessage: description,
+				endpoint: "elevenlabs-voice-design"
+			},
+			response: require_elevenlabs_voice.voiceDesignToJson(response)
+		});
+	}
 	onFalAudio(prompt, response, model) {
 		return this.addFixture({
 			match: {
@@ -233,38 +260,12 @@ var LLMock = class LLMock {
 	/**
 	* Queue a one-shot error that will be returned for the next matching
 	* request, then automatically removed. Implemented as an internal fixture
-	* with a `predicate` that always matches (so it fires first) and spliced
-	* at the front of the fixture list.
+	* inserted at the front of the fixture list; see `queueOneShotError` for
+	* the endpoint gate and the served-not-evaluated consumption rule.
 	*/
 	nextRequestError(status, errorBody) {
 		if (!require_fixture_loader.isInjectableStatus(status)) throw new RangeError(`nextRequestError: invalid status ${String(status)} — must be ${require_fixture_loader.INJECTED_STATUS_RANGE}`);
-		const errorResponse = {
-			error: {
-				message: errorBody?.message ?? "Injected error",
-				type: errorBody?.type ?? "server_error",
-				code: errorBody?.code
-			},
-			status
-		};
-		const errorEndpointCompatible = (req) => {
-			const reqEndpoint = req._endpointType;
-			if (reqEndpoint === void 0 || reqEndpoint === "chat" || reqEndpoint === "embedding" || reqEndpoint.startsWith("realtime") || reqEndpoint === "fal") return true;
-			return false;
-		};
-		const fixture = {
-			match: { predicate: errorEndpointCompatible },
-			response: errorResponse
-		};
-		this.fixtures.unshift(fixture);
-		const original = fixture.match.predicate;
-		fixture.match.predicate = (req) => {
-			const result = original(req);
-			if (result) {
-				const idx = this.fixtures.indexOf(fixture);
-				if (idx !== -1) this.fixtures.splice(idx, 1);
-			}
-			return result;
-		};
+		require_fixture_loader.queueOneShotError(this.fixtures, status, errorBody);
 		return this;
 	}
 	mount(path, handler) {
@@ -286,8 +287,12 @@ var LLMock = class LLMock {
 	getLastRequest() {
 		return this.journal.getLast();
 	}
+	/**
+	* Clear the request journal. Fixture match-counts (sequencing state) are
+	* left intact — use `resetMatchCounts()` for those.
+	*/
 	clearRequests() {
-		this.journal.clear();
+		this.journal.clearEntries();
 	}
 	resetMatchCounts(testId) {
 		if (this.serverInstance) this.serverInstance.journal.clearMatchCounts(testId);
@@ -335,8 +340,10 @@ var LLMock = class LLMock {
 	* NOT ALL OF THIS IS PER-INSTANCE. `performFullReset` clears module-global
 	* state as well: the Gemini interaction and event-id counters
 	* (`resetInteractionCounter` / `resetEventIdCounter` in
-	* `./gemini-interactions.js`) and the fal.ai job/queue maps (`falJobs`,
-	* `falQueueStates`). With two `LLMock` instances live in one process,
+	* `./gemini-interactions.js`), the fal.ai job/queue maps (`falJobs`,
+	* `falQueueStates`), the fine-tuning job store (`clearFineTuningStore`),
+	* and the ElevenLabs Voice Design store (`clearElevenLabsVoices`). With two
+	* `LLMock` instances live in one process,
 	* `a.reset()` rewinds the Gemini id sequence that `b` is mid-way through —
 	* `b` then re-emits `aimock-int-0` / `evt_1`, ids it has already handed
 	* out — and drops `b`'s in-flight fal jobs. Give each instance its own
@@ -365,6 +372,10 @@ var LLMock = class LLMock {
 		}));
 		return this.serverInstance.url;
 	}
+	closeLiveSessions(testId) {
+		this.serverInstance?.closeLiveSessions(testId);
+		return this;
+	}
 	async stop() {
 		if (!this.serverInstance) throw new Error("Server not started");
 		const { server } = this.serverInstance;