@copilotkit/aimock 1.42.1 → 1.44.0

package/dist/live-replay.js

@@ -0,0 +1,285 @@
+import { randomUUID } from "node:crypto";
+
+//#region src/live-replay.ts
+function boundedJson(root, limit) {
+	let budget = limit;
+	function visit(value, depth) {
+		if (depth > 32 || --budget < 0) return false;
+		if (typeof value === "string") {
+			budget -= Buffer.byteLength(value);
+			return budget >= 0;
+		}
+		if (value === null || typeof value === "boolean") return true;
+		if (typeof value === "number") return Number.isFinite(value);
+		if (typeof value !== "object") return false;
+		const prototype = Object.getPrototypeOf(value);
+		if (Array.isArray(value) ? prototype !== Array.prototype : prototype !== Object.prototype && prototype !== null) return false;
+		for (const key of Object.keys(value)) {
+			if ([
+				"__proto__",
+				"constructor",
+				"prototype"
+			].includes(key)) return false;
+			budget -= Buffer.byteLength(key);
+			const descriptor = Object.getOwnPropertyDescriptor(value, key);
+			if (!descriptor || !("value" in descriptor) || !visit(descriptor.value, depth + 1)) return false;
+		}
+		return budget >= 0;
+	}
+	return visit(root, 0);
+}
+function canonical(value) {
+	if (Array.isArray(value)) return `[${value.map(canonical).join(",")}]`;
+	if (value !== null && typeof value === "object") return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${canonical(value[key])}`).join(",")}}`;
+	return JSON.stringify(value);
+}
+function field(event, pointer) {
+	const parts = pointer.slice(1).split("/").map((p) => p.replace(/~1/g, "/").replace(/~0/g, "~"));
+	const key = parts.pop();
+	let parent = event;
+	for (const part of parts) {
+		if (parent === null || typeof parent !== "object") throw new Error("missing identifier");
+		parent = Array.isArray(parent) ? parent[Number(part)] : parent[part];
+	}
+	if (parent === null || typeof parent !== "object" || !Object.hasOwn(parent, key)) throw new Error("missing identifier");
+	return {
+		parent,
+		key
+	};
+}
+function read(event, pointer) {
+	const { parent, key } = field(event, pointer);
+	return Array.isArray(parent) ? parent[Number(key)] : parent[key];
+}
+function replace(event, pointer, value) {
+	const { parent, key } = field(event, pointer);
+	if (Array.isArray(parent)) parent[Number(key)] = value;
+	else parent[key] = value;
+}
+function namespace(binding) {
+	const p = binding.pointer;
+	if (p.endsWith("client_event_id")) return "client-event";
+	if (p === "/event_id") return `${binding.owner}-event`;
+	if (p === "/session/id") return "session";
+	if (p === "/delegation/id" || p === "/delegation_id") return "delegation";
+	if (p.endsWith("/call_id")) return "tool-call";
+	if (p === "/event/item/id" || p === "/event/item_id") return "response-item";
+	return "response";
+}
+function decode(value, remaining) {
+	if (typeof value !== "string" || value.length % 4 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value)) throw new Error("invalid audio");
+	const size = value.length / 4 * 3 - (value.endsWith("==") ? 2 : value.endsWith("=") ? 1 : 0);
+	if (size % 2 || size > remaining) throw new Error("invalid audio size");
+	const bytes = Buffer.from(value, "base64");
+	if (bytes.toString("base64") !== value) throw new Error("invalid audio encoding");
+	return bytes;
+}
+/** Accepts synchronously; the single output pump alone waits for transport pressure.
+* The caller supplies a validated, immutable transcript and owns cancellation of send(). */
+function createLiveReplay(transcript, options) {
+	if (!Number.isFinite(options.replaySpeed) || options.replaySpeed <= 0) throw new Error("replaySpeed must be positive");
+	const { limits } = options;
+	const annotations = /* @__PURE__ */ new Map();
+	for (const binding of transcript.bindings) {
+		const bucket = annotations.get(binding.entry) ?? [];
+		bucket.push(binding);
+		annotations.set(binding.entry, bucket);
+	}
+	for (const bucket of annotations.values()) bucket.sort((a, b) => Number(a.action === "reference") - Number(b.action === "reference"));
+	const tape = [];
+	const servers = [];
+	const audioChunks = /* @__PURE__ */ new Map();
+	let fixtureBytes = 0;
+	for (const [index, entry] of transcript.entries.entries()) {
+		if (entry.direction === "server") {
+			servers.push(index);
+			continue;
+		}
+		if (entry.event.type !== "session.input_audio.append") {
+			tape.push({
+				kind: "control",
+				index
+			});
+			continue;
+		}
+		const bytes = decode(entry.event.audio, limits.maxDecodedAudioBytes - fixtureBytes);
+		fixtureBytes += bytes.length;
+		const metadata = { ...entry.event };
+		delete metadata.audio;
+		const previous = tape.at(-1);
+		if (annotations.has(index)) {
+			tape.push({
+				kind: "control",
+				index
+			});
+			continue;
+		}
+		if (previous?.kind === "audio" && canonical(previous.metadata) === canonical(metadata)) audioChunks.get(previous).push(bytes);
+		else {
+			const run = {
+				kind: "audio",
+				bytes,
+				metadata
+			};
+			tape.push(run);
+			audioChunks.set(run, [bytes]);
+		}
+	}
+	for (const [run, chunks] of audioChunks) run.bytes = Buffer.concat(chunks);
+	audioChunks.clear();
+	const values = /* @__PURE__ */ new Map();
+	const reverse = /* @__PURE__ */ new Map();
+	let cursor = 0, offset = 0, command = 0, audioBytes = 0, totalAudio = 0, next = 0;
+	let stopped = false, sending = false, start;
+	let timer;
+	const created = Date.now();
+	let lastActivity = created, missingSince = created;
+	function close() {
+		if (stopped) return;
+		stopped = true;
+		if (timer !== void 0) clearTimeout(timer);
+		timer = void 0;
+		options.signal.removeEventListener("abort", close);
+	}
+	function fail(category, detail) {
+		if (!stopped) {
+			close();
+			options.fail(category, detail);
+		}
+	}
+	function bind(binding, value) {
+		const existing = values.get(binding.name);
+		if (binding.action === "reference") {
+			if (existing !== value) throw new Error("identifier reference mismatch");
+		} else {
+			const key = JSON.stringify([namespace(binding), value]);
+			if (existing !== void 0 || reverse.has(key)) throw new Error("identifier bijection mismatch");
+			values.set(binding.name, value);
+			reverse.set(key, binding.name);
+		}
+	}
+	function eligible() {
+		const barrier = transcript.entries[servers[next]]?.barrier;
+		return barrier !== void 0 && (command > barrier.command || command === barrier.command && audioBytes >= barrier.audioBytes);
+	}
+	function due() {
+		return options.timing === "immediate" ? 0 : transcript.entries[servers[next]].atMs / options.replaySpeed;
+	}
+	function schedule() {
+		if (stopped) return;
+		if (timer !== void 0) clearTimeout(timer);
+		const now = Date.now();
+		const deadlines = [(start ?? created) + limits.maxDurationMs, lastActivity + limits.idleTimeoutMs];
+		if (cursor < tape.length && (next >= servers.length || !eligible())) deadlines.push(missingSince + limits.mismatchTimeoutMs);
+		if (!sending && start !== void 0 && next < servers.length && eligible()) deadlines.push(start + due());
+		timer = setTimeout(tick, Math.max(0, Math.min(2147483647, Math.min(...deadlines) - now)));
+	}
+	function tick() {
+		timer = void 0;
+		if (stopped) return;
+		const now = Date.now();
+		if (now >= (start ?? created) + limits.maxDurationMs || now >= lastActivity + limits.idleTimeoutMs) {
+			fail("timeout", "live replay deadline exceeded");
+			return;
+		}
+		if (cursor < tape.length && (next >= servers.length || !eligible()) && now >= missingSince + limits.mismatchTimeoutMs) {
+			fail("fixture-mismatch", "expected client input deadline exceeded");
+			return;
+		}
+		if (!sending && start !== void 0 && next < servers.length && eligible() && now >= start + due()) pump();
+		schedule();
+	}
+	async function pump() {
+		sending = true;
+		try {
+			while (!stopped && start !== void 0 && next < servers.length && eligible() && Date.now() >= start + due()) {
+				const index = servers[next];
+				const event = structuredClone(transcript.entries[index].event);
+				for (const binding of annotations.get(index) ?? []) {
+					if (binding.action === "define") bind(binding, `aimock-${randomUUID()}`);
+					const value = values.get(binding.name);
+					if (value === void 0) throw new Error("unavailable identifier");
+					replace(event, binding.pointer, value);
+				}
+				if (Buffer.byteLength(JSON.stringify(event)) > limits.maxWriteBytes) {
+					fail("resource-limit", "live output exceeds write limit");
+					break;
+				}
+				await options.send(event);
+				if (stopped) break;
+				next++;
+				lastActivity = Date.now();
+				missingSince = Date.now();
+				if (next === servers.length) close();
+			}
+		} catch {
+			fail("protocol-divergence", "live output failed");
+		} finally {
+			sending = false;
+			schedule();
+		}
+	}
+	function accept(event) {
+		if (stopped) return;
+		try {
+			if (!boundedJson(event, limits.maxMessageBytes)) {
+				fail("invalid-client", "live input must be bounded JSON");
+				return;
+			}
+			if (Buffer.byteLength(JSON.stringify(event)) > limits.maxMessageBytes) {
+				fail("resource-limit", "live input exceeds message limit");
+				return;
+			}
+			let expected = tape[cursor];
+			const metadata = { ...event };
+			delete metadata.audio;
+			while (expected?.kind === "audio" && offset === expected.bytes.length && !(event.audio === "" && canonical(metadata) === canonical(expected.metadata))) {
+				expected = tape[++cursor];
+				offset = 0;
+			}
+			if (!expected) throw new Error("unexpected client input");
+			if (expected.kind === "audio") {
+				const bytes = decode(event.audio, Math.min(limits.maxDecodedAudioBytes - totalAudio, expected.bytes.length - offset));
+				if (canonical(metadata) !== canonical(expected.metadata) || !bytes.equals(expected.bytes.subarray(offset, offset + bytes.length))) throw new Error("audio mismatch");
+				offset += bytes.length;
+				audioBytes += bytes.length;
+				totalAudio += bytes.length;
+			} else {
+				const template = structuredClone(transcript.entries[expected.index].event);
+				for (const binding of annotations.get(expected.index) ?? []) {
+					const value = read(event, binding.pointer);
+					if (typeof value !== "string" || !value.length) throw new Error("missing identifier");
+					bind(binding, value);
+					replace(template, binding.pointer, value);
+				}
+				if (canonical(template) !== canonical(event)) throw new Error("command mismatch");
+				if (event.type === "session.input_audio.append") {
+					const bytes = decode(event.audio, limits.maxDecodedAudioBytes - totalAudio);
+					audioBytes += bytes.length;
+					totalAudio += bytes.length;
+				} else {
+					command++;
+					audioBytes = 0;
+				}
+				cursor++;
+			}
+			start ??= Date.now();
+			lastActivity = Date.now();
+			missingSince = Date.now();
+			schedule();
+		} catch {
+			fail("fixture-mismatch", "client input does not match live fixture");
+		}
+	}
+	options.signal.addEventListener("abort", close, { once: true });
+	if (options.signal.aborted) close();
+	else schedule();
+	return {
+		accept,
+		close
+	};
+}
+
+//#endregion
+export { createLiveReplay };
+//# sourceMappingURL=live-replay.js.map

package/dist/live-replay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-replay.js","names":[],"sources":["../src/live-replay.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport type {\n  LiveBinding,\n  LiveFailureCategory,\n  LiveJson,\n  LiveObject,\n  LiveOptions,\n  LiveTranscript,\n} from \"./live-types.js\";\n\nexport interface LiveReplayOptions {\n  send: (event: LiveObject) => Promise<void>;\n  fail: (category: LiveFailureCategory, detail: string) => void;\n  signal: AbortSignal;\n  replaySpeed: number;\n  timing: \"recorded\" | \"immediate\";\n  limits: Required<LiveOptions>;\n}\n// Inspect descriptors before serialization: in-process callers must not smuggle\n// getters, cycles, prototypes, or unbounded nesting into the receive path.\nfunction boundedJson(root: LiveObject, limit: number): boolean {\n  let budget = limit;\n  function visit(value: LiveJson, depth: number): boolean {\n    if (depth > 32 || --budget < 0) return false;\n    if (typeof value === \"string\") {\n      budget -= Buffer.byteLength(value);\n      return budget >= 0;\n    }\n    if (value === null || typeof value === \"boolean\") return true;\n    if (typeof value === \"number\") return Number.isFinite(value);\n    if (typeof value !== \"object\") return false;\n    const prototype = Object.getPrototypeOf(value);\n    if (\n      Array.isArray(value)\n        ? prototype !== Array.prototype\n        : prototype !== Object.prototype && prototype !== null\n    )\n      return false;\n    for (const key of Object.keys(value)) {\n      if ([\"__proto__\", \"constructor\", \"prototype\"].includes(key)) return false;\n      budget -= Buffer.byteLength(key);\n      const descriptor = Object.getOwnPropertyDescriptor(value, key);\n      if (!descriptor || !(\"value\" in descriptor) || !visit(descriptor.value, depth + 1))\n        return false;\n    }\n    return budget >= 0;\n  }\n  return visit(root, 0);\n}\nfunction canonical(value: LiveJson): string {\n  if (Array.isArray(value)) return `[${value.map(canonical).join(\",\")}]`;\n  if (value !== null && typeof value === \"object\")\n    return `{${Object.keys(value)\n      .sort()\n      .map((key) => `${JSON.stringify(key)}:${canonical(value[key])}`)\n      .join(\",\")}}`;\n  return JSON.stringify(value);\n}\nfunction field(\n  event: LiveObject,\n  pointer: string,\n): { parent: LiveObject | LiveJson[]; key: string } {\n  const parts = pointer\n    .slice(1)\n    .split(\"/\")\n    .map((p) => p.replace(/~1/g, \"/\").replace(/~0/g, \"~\"));\n  const key = parts.pop()!;\n  let parent: LiveJson = event;\n  for (const part of parts) {\n    if (parent === null || typeof parent !== \"object\") throw new Error(\"missing identifier\");\n    parent = Array.isArray(parent) ? parent[Number(part)] : parent[part];\n  }\n  if (parent === null || typeof parent !== \"object\" || !Object.hasOwn(parent, key))\n    throw new Error(\"missing identifier\");\n  return { parent, key };\n}\nfunction read(event: LiveObject, pointer: string): LiveJson {\n  const { parent, key } = field(event, pointer);\n  return Array.isArray(parent) ? parent[Number(key)] : parent[key];\n}\nfunction replace(event: LiveObject, pointer: string, value: string): void {\n  const { parent, key } = field(event, pointer);\n  if (Array.isArray(parent)) parent[Number(key)] = value;\n  else parent[key] = value;\n}\n// Namespace comes from the reviewed operand, never the author's arbitrary binding name.\nfunction namespace(binding: LiveBinding): string {\n  const p = binding.pointer;\n  if (p.endsWith(\"client_event_id\")) return \"client-event\";\n  if (p === \"/event_id\") return `${binding.owner}-event`;\n  if (p === \"/session/id\") return \"session\";\n  if (p === \"/delegation/id\" || p === \"/delegation_id\") return \"delegation\";\n  if (p.endsWith(\"/call_id\")) return \"tool-call\";\n  if (p === \"/event/item/id\" || p === \"/event/item_id\") return \"response-item\";\n  return \"response\";\n}\nfunction decode(value: LiveJson, remaining: number): Buffer {\n  if (\n    typeof value !== \"string\" ||\n    value.length % 4 ||\n    !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(value)\n  )\n    throw new Error(\"invalid audio\");\n  const size = (value.length / 4) * 3 - (value.endsWith(\"==\") ? 2 : value.endsWith(\"=\") ? 1 : 0);\n  if (size % 2 || size > remaining) throw new Error(\"invalid audio size\");\n  const bytes = Buffer.from(value, \"base64\");\n  if (bytes.toString(\"base64\") !== value) throw new Error(\"invalid audio encoding\");\n  return bytes;\n}\ninterface Control {\n  kind: \"control\";\n  index: number;\n}\ninterface Audio {\n  kind: \"audio\";\n  bytes: Buffer;\n  metadata: LiveObject;\n}\n\n/** Accepts synchronously; the single output pump alone waits for transport pressure.\n * The caller supplies a validated, immutable transcript and owns cancellation of send(). */\nexport function createLiveReplay(\n  transcript: LiveTranscript,\n  options: LiveReplayOptions,\n): { accept(event: LiveObject): void; close(): void } {\n  if (!Number.isFinite(options.replaySpeed) || options.replaySpeed <= 0)\n    throw new Error(\"replaySpeed must be positive\");\n  const { limits } = options;\n  const annotations = new Map<number, LiveBinding[]>();\n  for (const binding of transcript.bindings) {\n    const bucket = annotations.get(binding.entry) ?? [];\n    bucket.push(binding);\n    annotations.set(binding.entry, bucket);\n  }\n  for (const bucket of annotations.values())\n    bucket.sort((a, b) => Number(a.action === \"reference\") - Number(b.action === \"reference\"));\n  const tape: (Control | Audio)[] = [];\n  const servers: number[] = [];\n  const audioChunks = new Map<Audio, Buffer[]>();\n  let fixtureBytes = 0;\n  for (const [index, entry] of transcript.entries.entries()) {\n    if (entry.direction === \"server\") {\n      servers.push(index);\n      continue;\n    }\n    if (entry.event.type !== \"session.input_audio.append\") {\n      tape.push({ kind: \"control\", index });\n      continue;\n    }\n    const bytes = decode(entry.event.audio, limits.maxDecodedAudioBytes - fixtureBytes);\n    fixtureBytes += bytes.length;\n    const metadata = { ...entry.event };\n    delete metadata.audio;\n    const previous = tape.at(-1);\n    // Annotated audio commands retain their original frame boundary. Plain PCM runs\n    // coalesce across intervening server output, never across a client control.\n    if (annotations.has(index)) {\n      tape.push({ kind: \"control\", index });\n      continue;\n    }\n    if (previous?.kind === \"audio\" && canonical(previous.metadata) === canonical(metadata))\n      audioChunks.get(previous)!.push(bytes);\n    else {\n      const run: Audio = { kind: \"audio\", bytes, metadata };\n      tape.push(run);\n      audioChunks.set(run, [bytes]);\n    }\n  }\n  for (const [run, chunks] of audioChunks) run.bytes = Buffer.concat(chunks);\n  audioChunks.clear();\n  const values = new Map<string, string>();\n  const reverse = new Map<string, string>();\n  let cursor = 0,\n    offset = 0,\n    command = 0,\n    audioBytes = 0,\n    totalAudio = 0,\n    next = 0;\n  let stopped = false,\n    sending = false,\n    start: number | undefined;\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const created = Date.now();\n  let lastActivity = created,\n    missingSince = created;\n  function close() {\n    if (stopped) return;\n    stopped = true;\n    if (timer !== undefined) clearTimeout(timer);\n    timer = undefined;\n    options.signal.removeEventListener(\"abort\", close);\n  }\n  function fail(category: LiveFailureCategory, detail: string) {\n    if (!stopped) {\n      close();\n      options.fail(category, detail);\n    }\n  }\n  function bind(binding: LiveBinding, value: string) {\n    const existing = values.get(binding.name);\n    if (binding.action === \"reference\") {\n      if (existing !== value) throw new Error(\"identifier reference mismatch\");\n    } else {\n      const key = JSON.stringify([namespace(binding), value]);\n      if (existing !== undefined || reverse.has(key))\n        throw new Error(\"identifier bijection mismatch\");\n      values.set(binding.name, value);\n      reverse.set(key, binding.name);\n    }\n  }\n  function eligible() {\n    const barrier = transcript.entries[servers[next]]?.barrier;\n    return (\n      barrier !== undefined &&\n      (command > barrier.command ||\n        (command === barrier.command && audioBytes >= barrier.audioBytes))\n    );\n  }\n  function due() {\n    return options.timing === \"immediate\"\n      ? 0\n      : transcript.entries[servers[next]].atMs / options.replaySpeed;\n  }\n  function schedule() {\n    if (stopped) return;\n    if (timer !== undefined) clearTimeout(timer);\n    const now = Date.now();\n    const deadlines = [\n      (start ?? created) + limits.maxDurationMs,\n      lastActivity + limits.idleTimeoutMs,\n    ];\n    if (cursor < tape.length && (next >= servers.length || !eligible()))\n      deadlines.push(missingSince + limits.mismatchTimeoutMs);\n    if (!sending && start !== undefined && next < servers.length && eligible())\n      deadlines.push(start + due());\n    timer = setTimeout(tick, Math.max(0, Math.min(2_147_483_647, Math.min(...deadlines) - now)));\n  }\n  function tick() {\n    timer = undefined;\n    if (stopped) return;\n    const now = Date.now();\n    if (\n      now >= (start ?? created) + limits.maxDurationMs ||\n      now >= lastActivity + limits.idleTimeoutMs\n    ) {\n      fail(\"timeout\", \"live replay deadline exceeded\");\n      return;\n    }\n    if (\n      cursor < tape.length &&\n      (next >= servers.length || !eligible()) &&\n      now >= missingSince + limits.mismatchTimeoutMs\n    ) {\n      fail(\"fixture-mismatch\", \"expected client input deadline exceeded\");\n      return;\n    }\n    if (\n      !sending &&\n      start !== undefined &&\n      next < servers.length &&\n      eligible() &&\n      now >= start + due()\n    )\n      void pump();\n    schedule();\n  }\n  async function pump() {\n    sending = true;\n    try {\n      while (\n        !stopped &&\n        start !== undefined &&\n        next < servers.length &&\n        eligible() &&\n        Date.now() >= start + due()\n      ) {\n        const index = servers[next];\n        const event = structuredClone(transcript.entries[index].event);\n        for (const binding of annotations.get(index) ?? []) {\n          if (binding.action === \"define\") bind(binding, `aimock-${randomUUID()}`);\n          const value = values.get(binding.name);\n          if (value === undefined) throw new Error(\"unavailable identifier\");\n          replace(event, binding.pointer, value);\n        }\n        if (Buffer.byteLength(JSON.stringify(event)) > limits.maxWriteBytes) {\n          fail(\"resource-limit\", \"live output exceeds write limit\");\n          break;\n        }\n        await options.send(event);\n        if (stopped) break;\n        next++;\n        lastActivity = Date.now();\n        missingSince = Date.now();\n        if (next === servers.length) close();\n      }\n    } catch {\n      fail(\"protocol-divergence\", \"live output failed\");\n    } finally {\n      sending = false;\n      schedule();\n    }\n  }\n  function accept(event: LiveObject): void {\n    if (stopped) return;\n    try {\n      if (!boundedJson(event, limits.maxMessageBytes)) {\n        fail(\"invalid-client\", \"live input must be bounded JSON\");\n        return;\n      }\n      if (Buffer.byteLength(JSON.stringify(event)) > limits.maxMessageBytes) {\n        fail(\"resource-limit\", \"live input exceeds message limit\");\n        return;\n      }\n      let expected = tape[cursor];\n      const metadata = { ...event };\n      delete metadata.audio;\n      // Empty frames do not advance PCM position, even at the end of a run.\n      // Move past exhausted runs when the next input changes metadata or supplies\n      // more bytes/a control, without crossing an unfinished run or control.\n      while (\n        expected?.kind === \"audio\" &&\n        offset === expected.bytes.length &&\n        !(event.audio === \"\" && canonical(metadata) === canonical(expected.metadata))\n      ) {\n        expected = tape[++cursor];\n        offset = 0;\n      }\n      if (!expected) throw new Error(\"unexpected client input\");\n      if (expected.kind === \"audio\") {\n        const bytes = decode(\n          event.audio,\n          Math.min(limits.maxDecodedAudioBytes - totalAudio, expected.bytes.length - offset),\n        );\n        if (\n          canonical(metadata) !== canonical(expected.metadata) ||\n          !bytes.equals(expected.bytes.subarray(offset, offset + bytes.length))\n        )\n          throw new Error(\"audio mismatch\");\n        offset += bytes.length;\n        audioBytes += bytes.length;\n        totalAudio += bytes.length;\n      } else {\n        const template = structuredClone(transcript.entries[expected.index].event);\n        for (const binding of annotations.get(expected.index) ?? []) {\n          const value = read(event, binding.pointer);\n          if (typeof value !== \"string\" || !value.length) throw new Error(\"missing identifier\");\n          bind(binding, value);\n          replace(template, binding.pointer, value);\n        }\n        if (canonical(template) !== canonical(event)) throw new Error(\"command mismatch\");\n        if (event.type === \"session.input_audio.append\") {\n          const bytes = decode(event.audio, limits.maxDecodedAudioBytes - totalAudio);\n          audioBytes += bytes.length;\n          totalAudio += bytes.length;\n        } else {\n          command++;\n          audioBytes = 0;\n        }\n        cursor++;\n      }\n      start ??= Date.now();\n      lastActivity = Date.now();\n      missingSince = Date.now();\n      schedule();\n    } catch {\n      fail(\"fixture-mismatch\", \"client input does not match live fixture\");\n    }\n  }\n  options.signal.addEventListener(\"abort\", close, { once: true });\n  if (options.signal.aborted) close();\n  else schedule();\n  return { accept, close };\n}\n"],"mappings":";;;AAoBA,SAAS,YAAY,MAAkB,OAAwB;CAC7D,IAAI,SAAS;CACb,SAAS,MAAM,OAAiB,OAAwB;AACtD,MAAI,QAAQ,MAAM,EAAE,SAAS,EAAG,QAAO;AACvC,MAAI,OAAO,UAAU,UAAU;AAC7B,aAAU,OAAO,WAAW,MAAM;AAClC,UAAO,UAAU;;AAEnB,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAW,QAAO;AACzD,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,SAAS,MAAM;AAC5D,MAAI,OAAO,UAAU,SAAU,QAAO;EACtC,MAAM,YAAY,OAAO,eAAe,MAAM;AAC9C,MACE,MAAM,QAAQ,MAAM,GAChB,cAAc,MAAM,YACpB,cAAc,OAAO,aAAa,cAAc,KAEpD,QAAO;AACT,OAAK,MAAM,OAAO,OAAO,KAAK,MAAM,EAAE;AACpC,OAAI;IAAC;IAAa;IAAe;IAAY,CAAC,SAAS,IAAI,CAAE,QAAO;AACpE,aAAU,OAAO,WAAW,IAAI;GAChC,MAAM,aAAa,OAAO,yBAAyB,OAAO,IAAI;AAC9D,OAAI,CAAC,cAAc,EAAE,WAAW,eAAe,CAAC,MAAM,WAAW,OAAO,QAAQ,EAAE,CAChF,QAAO;;AAEX,SAAO,UAAU;;AAEnB,QAAO,MAAM,MAAM,EAAE;;AAEvB,SAAS,UAAU,OAAyB;AAC1C,KAAI,MAAM,QAAQ,MAAM,CAAE,QAAO,IAAI,MAAM,IAAI,UAAU,CAAC,KAAK,IAAI,CAAC;AACpE,KAAI,UAAU,QAAQ,OAAO,UAAU,SACrC,QAAO,IAAI,OAAO,KAAK,MAAM,CAC1B,MAAM,CACN,KAAK,QAAQ,GAAG,KAAK,UAAU,IAAI,CAAC,GAAG,UAAU,MAAM,KAAK,GAAG,CAC/D,KAAK,IAAI,CAAC;AACf,QAAO,KAAK,UAAU,MAAM;;AAE9B,SAAS,MACP,OACA,SACkD;CAClD,MAAM,QAAQ,QACX,MAAM,EAAE,CACR,MAAM,IAAI,CACV,KAAK,MAAM,EAAE,QAAQ,OAAO,IAAI,CAAC,QAAQ,OAAO,IAAI,CAAC;CACxD,MAAM,MAAM,MAAM,KAAK;CACvB,IAAI,SAAmB;AACvB,MAAK,MAAM,QAAQ,OAAO;AACxB,MAAI,WAAW,QAAQ,OAAO,WAAW,SAAU,OAAM,IAAI,MAAM,qBAAqB;AACxF,WAAS,MAAM,QAAQ,OAAO,GAAG,OAAO,OAAO,KAAK,IAAI,OAAO;;AAEjE,KAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,CAAC,OAAO,OAAO,QAAQ,IAAI,CAC9E,OAAM,IAAI,MAAM,qBAAqB;AACvC,QAAO;EAAE;EAAQ;EAAK;;AAExB,SAAS,KAAK,OAAmB,SAA2B;CAC1D,MAAM,EAAE,QAAQ,QAAQ,MAAM,OAAO,QAAQ;AAC7C,QAAO,MAAM,QAAQ,OAAO,GAAG,OAAO,OAAO,IAAI,IAAI,OAAO;;AAE9D,SAAS,QAAQ,OAAmB,SAAiB,OAAqB;CACxE,MAAM,EAAE,QAAQ,QAAQ,MAAM,OAAO,QAAQ;AAC7C,KAAI,MAAM,QAAQ,OAAO,CAAE,QAAO,OAAO,IAAI,IAAI;KAC5C,QAAO,OAAO;;AAGrB,SAAS,UAAU,SAA8B;CAC/C,MAAM,IAAI,QAAQ;AAClB,KAAI,EAAE,SAAS,kBAAkB,CAAE,QAAO;AAC1C,KAAI,MAAM,YAAa,QAAO,GAAG,QAAQ,MAAM;AAC/C,KAAI,MAAM,cAAe,QAAO;AAChC,KAAI,MAAM,oBAAoB,MAAM,iBAAkB,QAAO;AAC7D,KAAI,EAAE,SAAS,WAAW,CAAE,QAAO;AACnC,KAAI,MAAM,oBAAoB,MAAM,iBAAkB,QAAO;AAC7D,QAAO;;AAET,SAAS,OAAO,OAAiB,WAA2B;AAC1D,KACE,OAAO,UAAU,YACjB,MAAM,SAAS,KACf,CAAC,mEAAmE,KAAK,MAAM,CAE/E,OAAM,IAAI,MAAM,gBAAgB;CAClC,MAAM,OAAQ,MAAM,SAAS,IAAK,KAAK,MAAM,SAAS,KAAK,GAAG,IAAI,MAAM,SAAS,IAAI,GAAG,IAAI;AAC5F,KAAI,OAAO,KAAK,OAAO,UAAW,OAAM,IAAI,MAAM,qBAAqB;CACvE,MAAM,QAAQ,OAAO,KAAK,OAAO,SAAS;AAC1C,KAAI,MAAM,SAAS,SAAS,KAAK,MAAO,OAAM,IAAI,MAAM,yBAAyB;AACjF,QAAO;;;;AAcT,SAAgB,iBACd,YACA,SACoD;AACpD,KAAI,CAAC,OAAO,SAAS,QAAQ,YAAY,IAAI,QAAQ,eAAe,EAClE,OAAM,IAAI,MAAM,+BAA+B;CACjD,MAAM,EAAE,WAAW;CACnB,MAAM,8BAAc,IAAI,KAA4B;AACpD,MAAK,MAAM,WAAW,WAAW,UAAU;EACzC,MAAM,SAAS,YAAY,IAAI,QAAQ,MAAM,IAAI,EAAE;AACnD,SAAO,KAAK,QAAQ;AACpB,cAAY,IAAI,QAAQ,OAAO,OAAO;;AAExC,MAAK,MAAM,UAAU,YAAY,QAAQ,CACvC,QAAO,MAAM,GAAG,MAAM,OAAO,EAAE,WAAW,YAAY,GAAG,OAAO,EAAE,WAAW,YAAY,CAAC;CAC5F,MAAM,OAA4B,EAAE;CACpC,MAAM,UAAoB,EAAE;CAC5B,MAAM,8BAAc,IAAI,KAAsB;CAC9C,IAAI,eAAe;AACnB,MAAK,MAAM,CAAC,OAAO,UAAU,WAAW,QAAQ,SAAS,EAAE;AACzD,MAAI,MAAM,cAAc,UAAU;AAChC,WAAQ,KAAK,MAAM;AACnB;;AAEF,MAAI,MAAM,MAAM,SAAS,8BAA8B;AACrD,QAAK,KAAK;IAAE,MAAM;IAAW;IAAO,CAAC;AACrC;;EAEF,MAAM,QAAQ,OAAO,MAAM,MAAM,OAAO,OAAO,uBAAuB,aAAa;AACnF,kBAAgB,MAAM;EACtB,MAAM,WAAW,EAAE,GAAG,MAAM,OAAO;AACnC,SAAO,SAAS;EAChB,MAAM,WAAW,KAAK,GAAG,GAAG;AAG5B,MAAI,YAAY,IAAI,MAAM,EAAE;AAC1B,QAAK,KAAK;IAAE,MAAM;IAAW;IAAO,CAAC;AACrC;;AAEF,MAAI,UAAU,SAAS,WAAW,UAAU,SAAS,SAAS,KAAK,UAAU,SAAS,CACpF,aAAY,IAAI,SAAS,CAAE,KAAK,MAAM;OACnC;GACH,MAAM,MAAa;IAAE,MAAM;IAAS;IAAO;IAAU;AACrD,QAAK,KAAK,IAAI;AACd,eAAY,IAAI,KAAK,CAAC,MAAM,CAAC;;;AAGjC,MAAK,MAAM,CAAC,KAAK,WAAW,YAAa,KAAI,QAAQ,OAAO,OAAO,OAAO;AAC1E,aAAY,OAAO;CACnB,MAAM,yBAAS,IAAI,KAAqB;CACxC,MAAM,0BAAU,IAAI,KAAqB;CACzC,IAAI,SAAS,GACX,SAAS,GACT,UAAU,GACV,aAAa,GACb,aAAa,GACb,OAAO;CACT,IAAI,UAAU,OACZ,UAAU,OACV;CACF,IAAI;CACJ,MAAM,UAAU,KAAK,KAAK;CAC1B,IAAI,eAAe,SACjB,eAAe;CACjB,SAAS,QAAQ;AACf,MAAI,QAAS;AACb,YAAU;AACV,MAAI,UAAU,OAAW,cAAa,MAAM;AAC5C,UAAQ;AACR,UAAQ,OAAO,oBAAoB,SAAS,MAAM;;CAEpD,SAAS,KAAK,UAA+B,QAAgB;AAC3D,MAAI,CAAC,SAAS;AACZ,UAAO;AACP,WAAQ,KAAK,UAAU,OAAO;;;CAGlC,SAAS,KAAK,SAAsB,OAAe;EACjD,MAAM,WAAW,OAAO,IAAI,QAAQ,KAAK;AACzC,MAAI,QAAQ,WAAW,aACrB;OAAI,aAAa,MAAO,OAAM,IAAI,MAAM,gCAAgC;SACnE;GACL,MAAM,MAAM,KAAK,UAAU,CAAC,UAAU,QAAQ,EAAE,MAAM,CAAC;AACvD,OAAI,aAAa,UAAa,QAAQ,IAAI,IAAI,CAC5C,OAAM,IAAI,MAAM,gCAAgC;AAClD,UAAO,IAAI,QAAQ,MAAM,MAAM;AAC/B,WAAQ,IAAI,KAAK,QAAQ,KAAK;;;CAGlC,SAAS,WAAW;EAClB,MAAM,UAAU,WAAW,QAAQ,QAAQ,QAAQ;AACnD,SACE,YAAY,WACX,UAAU,QAAQ,WAChB,YAAY,QAAQ,WAAW,cAAc,QAAQ;;CAG5D,SAAS,MAAM;AACb,SAAO,QAAQ,WAAW,cACtB,IACA,WAAW,QAAQ,QAAQ,OAAO,OAAO,QAAQ;;CAEvD,SAAS,WAAW;AAClB,MAAI,QAAS;AACb,MAAI,UAAU,OAAW,cAAa,MAAM;EAC5C,MAAM,MAAM,KAAK,KAAK;EACtB,MAAM,YAAY,EACf,SAAS,WAAW,OAAO,eAC5B,eAAe,OAAO,cACvB;AACD,MAAI,SAAS,KAAK,WAAW,QAAQ,QAAQ,UAAU,CAAC,UAAU,EAChE,WAAU,KAAK,eAAe,OAAO,kBAAkB;AACzD,MAAI,CAAC,WAAW,UAAU,UAAa,OAAO,QAAQ,UAAU,UAAU,CACxE,WAAU,KAAK,QAAQ,KAAK,CAAC;AAC/B,UAAQ,WAAW,MAAM,KAAK,IAAI,GAAG,KAAK,IAAI,YAAe,KAAK,IAAI,GAAG,UAAU,GAAG,IAAI,CAAC,CAAC;;CAE9F,SAAS,OAAO;AACd,UAAQ;AACR,MAAI,QAAS;EACb,MAAM,MAAM,KAAK,KAAK;AACtB,MACE,QAAQ,SAAS,WAAW,OAAO,iBACnC,OAAO,eAAe,OAAO,eAC7B;AACA,QAAK,WAAW,gCAAgC;AAChD;;AAEF,MACE,SAAS,KAAK,WACb,QAAQ,QAAQ,UAAU,CAAC,UAAU,KACtC,OAAO,eAAe,OAAO,mBAC7B;AACA,QAAK,oBAAoB,0CAA0C;AACnE;;AAEF,MACE,CAAC,WACD,UAAU,UACV,OAAO,QAAQ,UACf,UAAU,IACV,OAAO,QAAQ,KAAK,CAEpB,CAAK,MAAM;AACb,YAAU;;CAEZ,eAAe,OAAO;AACpB,YAAU;AACV,MAAI;AACF,UACE,CAAC,WACD,UAAU,UACV,OAAO,QAAQ,UACf,UAAU,IACV,KAAK,KAAK,IAAI,QAAQ,KAAK,EAC3B;IACA,MAAM,QAAQ,QAAQ;IACtB,MAAM,QAAQ,gBAAgB,WAAW,QAAQ,OAAO,MAAM;AAC9D,SAAK,MAAM,WAAW,YAAY,IAAI,MAAM,IAAI,EAAE,EAAE;AAClD,SAAI,QAAQ,WAAW,SAAU,MAAK,SAAS,UAAU,YAAY,GAAG;KACxE,MAAM,QAAQ,OAAO,IAAI,QAAQ,KAAK;AACtC,SAAI,UAAU,OAAW,OAAM,IAAI,MAAM,yBAAyB;AAClE,aAAQ,OAAO,QAAQ,SAAS,MAAM;;AAExC,QAAI,OAAO,WAAW,KAAK,UAAU,MAAM,CAAC,GAAG,OAAO,eAAe;AACnE,UAAK,kBAAkB,kCAAkC;AACzD;;AAEF,UAAM,QAAQ,KAAK,MAAM;AACzB,QAAI,QAAS;AACb;AACA,mBAAe,KAAK,KAAK;AACzB,mBAAe,KAAK,KAAK;AACzB,QAAI,SAAS,QAAQ,OAAQ,QAAO;;UAEhC;AACN,QAAK,uBAAuB,qBAAqB;YACzC;AACR,aAAU;AACV,aAAU;;;CAGd,SAAS,OAAO,OAAyB;AACvC,MAAI,QAAS;AACb,MAAI;AACF,OAAI,CAAC,YAAY,OAAO,OAAO,gBAAgB,EAAE;AAC/C,SAAK,kBAAkB,kCAAkC;AACzD;;AAEF,OAAI,OAAO,WAAW,KAAK,UAAU,MAAM,CAAC,GAAG,OAAO,iBAAiB;AACrE,SAAK,kBAAkB,mCAAmC;AAC1D;;GAEF,IAAI,WAAW,KAAK;GACpB,MAAM,WAAW,EAAE,GAAG,OAAO;AAC7B,UAAO,SAAS;AAIhB,UACE,UAAU,SAAS,WACnB,WAAW,SAAS,MAAM,UAC1B,EAAE,MAAM,UAAU,MAAM,UAAU,SAAS,KAAK,UAAU,SAAS,SAAS,GAC5E;AACA,eAAW,KAAK,EAAE;AAClB,aAAS;;AAEX,OAAI,CAAC,SAAU,OAAM,IAAI,MAAM,0BAA0B;AACzD,OAAI,SAAS,SAAS,SAAS;IAC7B,MAAM,QAAQ,OACZ,MAAM,OACN,KAAK,IAAI,OAAO,uBAAuB,YAAY,SAAS,MAAM,SAAS,OAAO,CACnF;AACD,QACE,UAAU,SAAS,KAAK,UAAU,SAAS,SAAS,IACpD,CAAC,MAAM,OAAO,SAAS,MAAM,SAAS,QAAQ,SAAS,MAAM,OAAO,CAAC,CAErE,OAAM,IAAI,MAAM,iBAAiB;AACnC,cAAU,MAAM;AAChB,kBAAc,MAAM;AACpB,kBAAc,MAAM;UACf;IACL,MAAM,WAAW,gBAAgB,WAAW,QAAQ,SAAS,OAAO,MAAM;AAC1E,SAAK,MAAM,WAAW,YAAY,IAAI,SAAS,MAAM,IAAI,EAAE,EAAE;KAC3D,MAAM,QAAQ,KAAK,OAAO,QAAQ,QAAQ;AAC1C,SAAI,OAAO,UAAU,YAAY,CAAC,MAAM,OAAQ,OAAM,IAAI,MAAM,qBAAqB;AACrF,UAAK,SAAS,MAAM;AACpB,aAAQ,UAAU,QAAQ,SAAS,MAAM;;AAE3C,QAAI,UAAU,SAAS,KAAK,UAAU,MAAM,CAAE,OAAM,IAAI,MAAM,mBAAmB;AACjF,QAAI,MAAM,SAAS,8BAA8B;KAC/C,MAAM,QAAQ,OAAO,MAAM,OAAO,OAAO,uBAAuB,WAAW;AAC3E,mBAAc,MAAM;AACpB,mBAAc,MAAM;WACf;AACL;AACA,kBAAa;;AAEf;;AAEF,aAAU,KAAK,KAAK;AACpB,kBAAe,KAAK,KAAK;AACzB,kBAAe,KAAK,KAAK;AACzB,aAAU;UACJ;AACN,QAAK,oBAAoB,2CAA2C;;;AAGxE,SAAQ,OAAO,iBAAiB,SAAS,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/D,KAAI,QAAQ,OAAO,QAAS,QAAO;KAC9B,WAAU;AACf,QAAO;EAAE;EAAQ;EAAO"}

package/dist/live-sanitize.cjs

@@ -0,0 +1,196 @@
+const require_live_fixture = require('./live-fixture.cjs');
+
+//#region src/live-sanitize.ts
+var LiveUnsafeExportError = class extends Error {
+	category = "unsafe-export";
+	constructor() {
+		super("unsafe-export: Live transcript cannot be retained safely");
+		this.name = "LiveUnsafeExportError";
+	}
+};
+const credentialKey = /^(?:authorization|proxy-authorization|cookie|set-cookie|x-api-key|api[_-]?key|access[_-]?token|refresh[_-]?token|client[_-]?secret|password|secret|token|sec-websocket-protocol)$/i;
+const semanticKey = new Set([
+	"instructions",
+	"content",
+	"delta",
+	"audio",
+	"arguments",
+	"output",
+	"input",
+	"tools",
+	"parameters",
+	"client",
+	"text",
+	"thinking"
+]);
+const metadataKey = new Set([
+	"metadata",
+	"headers",
+	"diagnostics"
+]);
+const unsafeKey = new Set([
+	"__proto__",
+	"constructor",
+	"prototype"
+]);
+const redacted = "[REDACTED]";
+function fail() {
+	throw new LiveUnsafeExportError();
+}
+function decodeUrlComponent(value) {
+	return new URLSearchParams(`value=${value.replace(/\+/g, "%2B").replace(/&/g, "%26")}`).get("value");
+}
+function escapePointer(key) {
+	return key.replace(/~/g, "~0").replace(/\//g, "~1");
+}
+function parts(pointer) {
+	if (!pointer.startsWith("/") || /~(?![01])/u.test(pointer)) fail();
+	const keys = pointer.slice(1).split("/").map((key) => key.replace(/~1/g, "/").replace(/~0/g, "~"));
+	if (keys.some((key) => unsafeKey.has(key))) fail();
+	return keys;
+}
+function child(value, key) {
+	if (!value || typeof value !== "object" || !Object.hasOwn(value, key)) fail();
+	if (Array.isArray(value)) {
+		if (!/^(0|[1-9]\d*)$/.test(key)) fail();
+		return value[Number(key)];
+	}
+	return value[key];
+}
+function setIdentifier(event, pointer, value) {
+	const keys = parts(pointer);
+	const last = keys.pop();
+	if (last === void 0) fail();
+	let parent = event;
+	for (const key of keys) parent = child(parent, key);
+	if (typeof child(parent, last) !== "string" || !parent || typeof parent !== "object") fail();
+	if (Array.isArray(parent)) parent[Number(last)] = value;
+	else parent[last] = value;
+}
+/**
+* Sanitize a separately retained successful capture; never mutate the relay.
+* Validation supplies the reviewed identifier descriptors and causal checks.
+* Credential descriptors supplement the built-in policy, not permission to
+* delete arbitrary protocol operands. Ambiguous secret-bearing data fails closed.
+*/
+function sanitizeLiveTranscript(transcript, secretValues = [], credentialFields = [], validationOptions = {}) {
+	try {
+		const result = require_live_fixture.validateLiveTranscript(transcript, validationOptions);
+		if (!Array.isArray(secretValues) || secretValues.some((s) => typeof s !== "string")) fail();
+		const secrets = [...new Set(secretValues.filter((s) => s.length))].sort((a, b) => b.length - a.length);
+		const hasSecret = (value) => secrets.some((secret) => value.includes(secret));
+		const replaceSecrets = (value) => {
+			for (const secret of secrets) value = value.split(secret).join(redacted);
+			return value;
+		};
+		const descriptors = new Set(credentialFields.map((field) => {
+			parts(field.pointer);
+			return field.pointer;
+		}));
+		const handled = /* @__PURE__ */ new Set();
+		const originalIds = /* @__PURE__ */ new Set();
+		for (const binding of result.bindings) {
+			let value = result.entries[binding.entry].event;
+			for (const key of parts(binding.pointer)) value = child(value, key);
+			if (typeof value !== "string") fail();
+			originalIds.add(value);
+		}
+		let nextId = 1;
+		const identities = /* @__PURE__ */ new Map();
+		for (const binding of result.bindings) {
+			let identity = identities.get(binding.name);
+			if (!identity) {
+				const index = identities.size + 1;
+				while (originalIds.has(`live-id-${nextId}`)) nextId++;
+				identity = {
+					name: `binding-${index}`,
+					value: `live-id-${nextId++}`
+				};
+				identities.set(binding.name, identity);
+			}
+			setIdentifier(result.entries[binding.entry].event, binding.pointer, identity.value);
+			binding.name = identity.name;
+		}
+		function sanitizeUrl(value) {
+			if (!/^[a-z][a-z0-9+.-]*:\/\//i.test(value)) return value;
+			let url;
+			try {
+				url = new URL(value);
+			} catch {
+				return value;
+			}
+			if (hasSecret(decodeUrlComponent(url.pathname))) fail();
+			let changed = false;
+			if (url.username || url.password) {
+				url.username = "";
+				url.password = "";
+				changed = true;
+			}
+			for (const [key, val] of [...url.searchParams]) if (credentialKey.test(key) || hasSecret(key) || hasSecret(val)) {
+				url.searchParams.delete(key);
+				changed = true;
+			}
+			const decodedHash = decodeUrlComponent(url.hash);
+			if (url.hash && (hasSecret(decodedHash) || /(?:token|secret|password|api[_-]?key)=/i.test(decodedHash))) {
+				url.hash = "";
+				changed = true;
+			}
+			return changed ? url.href : value;
+		}
+		function providerMetadata(pointer) {
+			const match = /^\/entries\/(\d+)\/event\/event\/(?:response\/(?:user|prompt_cache_key|safety_identifier)|item\/encrypted_content)$/.exec(pointer);
+			if (!match) return false;
+			const event = result.entries[Number(match[1])].event;
+			const nested = event.event;
+			if (event.type !== "response.event" || !nested || typeof nested !== "object" || Array.isArray(nested)) return false;
+			if (!pointer.endsWith("/item/encrypted_content")) return [
+				"response.created",
+				"response.in_progress",
+				"response.completed"
+			].includes(String(nested.type));
+			const item = nested.item;
+			return ["response.output_item.added", "response.output_item.done"].includes(String(nested.type)) && !!item && typeof item === "object" && !Array.isArray(item) && item.type === "reasoning";
+		}
+		function visit(value, path, metadata = false, semantic = false) {
+			if (typeof value === "string") {
+				const url = sanitizeUrl(value);
+				if ((hasSecret(value) || url !== value) && (!metadata || semantic)) fail();
+				return metadata && !semantic ? replaceSecrets(url) : value;
+			}
+			if (Array.isArray(value)) return value.map((item, i) => visit(item, `${path}/${i}`, metadata, semantic));
+			if (!value || typeof value !== "object") return value;
+			const output = {};
+			for (const [key, item] of Object.entries(value)) {
+				const pointer = `${path}/${escapePointer(key)}`;
+				if (providerMetadata(pointer) && (typeof item === "string" || item === null)) {
+					if (descriptors.has(pointer)) handled.add(pointer);
+					else output[key] = typeof item === "string" ? redacted : item;
+					continue;
+				}
+				const protectedBranch = semantic || semanticKey.has(key);
+				const removable = !protectedBranch && (metadata || credentialKey.test(key));
+				if (descriptors.has(pointer)) {
+					if (!removable) fail();
+					handled.add(pointer);
+					continue;
+				}
+				if (!semantic && credentialKey.test(key)) continue;
+				if (hasSecret(key)) {
+					if (!metadata || protectedBranch) fail();
+					continue;
+				}
+				output[key] = visit(item, pointer, metadata || metadataKey.has(key), protectedBranch);
+			}
+			return output;
+		}
+		const cleaned = visit(result, "");
+		if (handled.size !== descriptors.size || hasSecret(JSON.stringify(cleaned))) fail();
+		return require_live_fixture.validateLiveTranscript(cleaned, validationOptions);
+	} catch {
+		fail();
+	}
+}
+
+//#endregion
+exports.sanitizeLiveTranscript = sanitizeLiveTranscript;
+//# sourceMappingURL=live-sanitize.cjs.map

package/dist/live-sanitize.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-sanitize.cjs","names":["validateLiveTranscript"],"sources":["../src/live-sanitize.ts"],"sourcesContent":["import { validateLiveTranscript } from \"./live-fixture.js\";\nimport type { LiveJson, LiveObject, LiveOptions, LiveTranscript } from \"./live-types.js\";\n\n/** Exact transcript-rooted pointer to an observed removable credential metadata field. */\nexport interface LiveCredentialField {\n  readonly pointer: string;\n}\n\nexport class LiveUnsafeExportError extends Error {\n  readonly category = \"unsafe-export\";\n  constructor() {\n    // Never reflect untrusted values, keys, pointers, or validation errors.\n    super(\"unsafe-export: Live transcript cannot be retained safely\");\n    this.name = \"LiveUnsafeExportError\";\n  }\n}\n\nconst credentialKey =\n  /^(?:authorization|proxy-authorization|cookie|set-cookie|x-api-key|api[_-]?key|access[_-]?token|refresh[_-]?token|client[_-]?secret|password|secret|token|sec-websocket-protocol)$/i;\n// These branches carry conversation, tool schema, or PCM semantics. A key named\n// \"authorization\" inside tool parameters is a schema property, not a header.\nconst semanticKey = new Set([\n  \"instructions\",\n  \"content\",\n  \"delta\",\n  \"audio\",\n  \"arguments\",\n  \"output\",\n  \"input\",\n  \"tools\",\n  \"parameters\",\n  \"client\",\n  \"text\",\n  \"thinking\",\n]);\nconst metadataKey = new Set([\"metadata\", \"headers\", \"diagnostics\"]);\nconst unsafeKey = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\nconst redacted = \"[REDACTED]\";\nfunction fail(): never {\n  throw new LiveUnsafeExportError();\n}\nfunction decodeUrlComponent(value: string): string {\n  // Tolerate malformed escapes while exposing encoded secrets. Protect literal\n  // form separators so the entire component remains one value.\n  return new URLSearchParams(`value=${value.replace(/\\+/g, \"%2B\").replace(/&/g, \"%26\")}`).get(\n    \"value\",\n  )!;\n}\nfunction escapePointer(key: string): string {\n  return key.replace(/~/g, \"~0\").replace(/\\//g, \"~1\");\n}\nfunction parts(pointer: string): string[] {\n  if (!pointer.startsWith(\"/\") || /~(?![01])/u.test(pointer)) fail();\n  const keys = pointer\n    .slice(1)\n    .split(\"/\")\n    .map((key) => key.replace(/~1/g, \"/\").replace(/~0/g, \"~\"));\n  if (keys.some((key) => unsafeKey.has(key))) fail();\n  return keys;\n}\nfunction child(value: LiveJson, key: string): LiveJson {\n  if (!value || typeof value !== \"object\" || !Object.hasOwn(value, key)) fail();\n  if (Array.isArray(value)) {\n    if (!/^(0|[1-9]\\d*)$/.test(key)) fail();\n    return value[Number(key)];\n  }\n  return value[key];\n}\nfunction setIdentifier(event: LiveObject, pointer: string, value: string): void {\n  const keys = parts(pointer);\n  const last = keys.pop();\n  if (last === undefined) fail();\n  let parent: LiveJson = event;\n  for (const key of keys) parent = child(parent, key);\n  if (typeof child(parent, last) !== \"string\" || !parent || typeof parent !== \"object\") fail();\n  if (Array.isArray(parent)) parent[Number(last)] = value;\n  else parent[last] = value;\n}\n\n/**\n * Sanitize a separately retained successful capture; never mutate the relay.\n * Validation supplies the reviewed identifier descriptors and causal checks.\n * Credential descriptors supplement the built-in policy, not permission to\n * delete arbitrary protocol operands. Ambiguous secret-bearing data fails closed.\n */\nexport function sanitizeLiveTranscript(\n  transcript: LiveTranscript,\n  secretValues: readonly string[] = [],\n  credentialFields: readonly LiveCredentialField[] = [],\n  validationOptions: Omit<LiveOptions, \"secretValues\"> = {},\n): LiveTranscript {\n  try {\n    const result = validateLiveTranscript(transcript, validationOptions);\n    if (!Array.isArray(secretValues) || secretValues.some((s) => typeof s !== \"string\")) fail();\n    const secrets = [...new Set(secretValues.filter((s) => s.length))].sort(\n      (a, b) => b.length - a.length,\n    );\n    const hasSecret = (value: string) => secrets.some((secret) => value.includes(secret));\n    const replaceSecrets = (value: string) => {\n      for (const secret of secrets) value = value.split(secret).join(redacted);\n      return value;\n    };\n    const descriptors = new Set(\n      credentialFields.map((field) => {\n        parts(field.pointer);\n        return field.pointer;\n      }),\n    );\n    const handled = new Set<string>();\n    // Names themselves may have been derived from provider IDs. Replace both\n    // the annotation names and only their explicitly annotated operand values.\n    const originalIds = new Set<string>();\n    for (const binding of result.bindings) {\n      let value: LiveJson = result.entries[binding.entry].event;\n      for (const key of parts(binding.pointer)) value = child(value, key);\n      if (typeof value !== \"string\") fail();\n      originalIds.add(value);\n    }\n    let nextId = 1;\n    const identities = new Map<string, { name: string; value: string }>();\n    for (const binding of result.bindings) {\n      let identity = identities.get(binding.name);\n      if (!identity) {\n        const index = identities.size + 1;\n        while (originalIds.has(`live-id-${nextId}`)) nextId++;\n        identity = { name: `binding-${index}`, value: `live-id-${nextId++}` };\n        identities.set(binding.name, identity);\n      }\n      setIdentifier(result.entries[binding.entry].event, binding.pointer, identity.value);\n      binding.name = identity.name;\n    }\n    function sanitizeUrl(value: string): string {\n      // Leave non-URLs and clean URLs byte-for-byte intact.\n      if (!/^[a-z][a-z0-9+.-]*:\\/\\//i.test(value)) return value;\n      let url: URL;\n      try {\n        url = new URL(value);\n      } catch {\n        return value;\n      }\n      // A path identifies the resource; changing it could change replay semantics.\n      if (hasSecret(decodeUrlComponent(url.pathname))) fail();\n      let changed = false;\n      if (url.username || url.password) {\n        url.username = \"\";\n        url.password = \"\";\n        changed = true;\n      }\n      for (const [key, val] of [...url.searchParams]) {\n        if (credentialKey.test(key) || hasSecret(key) || hasSecret(val)) {\n          url.searchParams.delete(key);\n          changed = true;\n        }\n      }\n      const decodedHash = decodeUrlComponent(url.hash);\n      if (\n        url.hash &&\n        (hasSecret(decodedHash) || /(?:token|secret|password|api[_-]?key)=/i.test(decodedHash))\n      ) {\n        url.hash = \"\";\n        changed = true;\n      }\n      return changed ? url.href : value;\n    }\n    function providerMetadata(pointer: string): boolean {\n      const match =\n        /^\\/entries\\/(\\d+)\\/event\\/event\\/(?:response\\/(?:user|prompt_cache_key|safety_identifier)|item\\/encrypted_content)$/.exec(\n          pointer,\n        );\n      if (!match) return false;\n      const event = result.entries[Number(match[1])].event;\n      const nested = event.event;\n      if (\n        event.type !== \"response.event\" ||\n        !nested ||\n        typeof nested !== \"object\" ||\n        Array.isArray(nested)\n      )\n        return false;\n      if (!pointer.endsWith(\"/item/encrypted_content\")) {\n        return [\"response.created\", \"response.in_progress\", \"response.completed\"].includes(\n          String(nested.type),\n        );\n      }\n      const item = nested.item;\n      return (\n        [\"response.output_item.added\", \"response.output_item.done\"].includes(String(nested.type)) &&\n        !!item &&\n        typeof item === \"object\" &&\n        !Array.isArray(item) &&\n        item.type === \"reasoning\"\n      );\n    }\n    function visit(value: LiveJson, path: string, metadata = false, semantic = false): LiveJson {\n      if (typeof value === \"string\") {\n        const url = sanitizeUrl(value);\n        if ((hasSecret(value) || url !== value) && (!metadata || semantic)) fail();\n        return metadata && !semantic ? replaceSecrets(url) : value;\n      }\n      if (Array.isArray(value))\n        return value.map((item, i) => visit(item, `${path}/${i}`, metadata, semantic));\n      if (!value || typeof value !== \"object\") return value;\n      const output: LiveObject = {};\n      for (const [key, item] of Object.entries(value)) {\n        const pointer = `${path}/${escapePointer(key)}`;\n        // Exact retained metadata sites from the reviewed v3 sanitation\n        // evidence. Never infer these by equal values or similar field names.\n        if (providerMetadata(pointer) && (typeof item === \"string\" || item === null)) {\n          if (descriptors.has(pointer)) handled.add(pointer);\n          else output[key] = typeof item === \"string\" ? redacted : item;\n          continue;\n        }\n        const protectedBranch = semantic || semanticKey.has(key);\n        const removable = !protectedBranch && (metadata || credentialKey.test(key));\n        if (descriptors.has(pointer)) {\n          if (!removable) fail();\n          handled.add(pointer);\n          continue;\n        }\n        if (!semantic && credentialKey.test(key)) continue;\n        if (hasSecret(key)) {\n          if (!metadata || protectedBranch) fail();\n          continue;\n        }\n        output[key] = visit(item, pointer, metadata || metadataKey.has(key), protectedBranch);\n      }\n      return output;\n    }\n    // Validation clones all bounded JSON, including unknown metadata. Preserve\n    // those fields, then validate again to catch any semantic deletion.\n    const cleaned = visit(result as LiveTranscript & LiveObject, \"\");\n    if (handled.size !== descriptors.size || hasSecret(JSON.stringify(cleaned))) fail();\n    return validateLiveTranscript(cleaned, validationOptions);\n  } catch {\n    fail();\n  }\n}\n"],"mappings":";;;AAQA,IAAa,wBAAb,cAA2C,MAAM;CAC/C,AAAS,WAAW;CACpB,cAAc;AAEZ,QAAM,2DAA2D;AACjE,OAAK,OAAO;;;AAIhB,MAAM,gBACJ;AAGF,MAAM,cAAc,IAAI,IAAI;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AACF,MAAM,cAAc,IAAI,IAAI;CAAC;CAAY;CAAW;CAAc,CAAC;AACnE,MAAM,YAAY,IAAI,IAAI;CAAC;CAAa;CAAe;CAAY,CAAC;AACpE,MAAM,WAAW;AACjB,SAAS,OAAc;AACrB,OAAM,IAAI,uBAAuB;;AAEnC,SAAS,mBAAmB,OAAuB;AAGjD,QAAO,IAAI,gBAAgB,SAAS,MAAM,QAAQ,OAAO,MAAM,CAAC,QAAQ,MAAM,MAAM,GAAG,CAAC,IACtF,QACD;;AAEH,SAAS,cAAc,KAAqB;AAC1C,QAAO,IAAI,QAAQ,MAAM,KAAK,CAAC,QAAQ,OAAO,KAAK;;AAErD,SAAS,MAAM,SAA2B;AACxC,KAAI,CAAC,QAAQ,WAAW,IAAI,IAAI,aAAa,KAAK,QAAQ,CAAE,OAAM;CAClE,MAAM,OAAO,QACV,MAAM,EAAE,CACR,MAAM,IAAI,CACV,KAAK,QAAQ,IAAI,QAAQ,OAAO,IAAI,CAAC,QAAQ,OAAO,IAAI,CAAC;AAC5D,KAAI,KAAK,MAAM,QAAQ,UAAU,IAAI,IAAI,CAAC,CAAE,OAAM;AAClD,QAAO;;AAET,SAAS,MAAM,OAAiB,KAAuB;AACrD,KAAI,CAAC,SAAS,OAAO,UAAU,YAAY,CAAC,OAAO,OAAO,OAAO,IAAI,CAAE,OAAM;AAC7E,KAAI,MAAM,QAAQ,MAAM,EAAE;AACxB,MAAI,CAAC,iBAAiB,KAAK,IAAI,CAAE,OAAM;AACvC,SAAO,MAAM,OAAO,IAAI;;AAE1B,QAAO,MAAM;;AAEf,SAAS,cAAc,OAAmB,SAAiB,OAAqB;CAC9E,MAAM,OAAO,MAAM,QAAQ;CAC3B,MAAM,OAAO,KAAK,KAAK;AACvB,KAAI,SAAS,OAAW,OAAM;CAC9B,IAAI,SAAmB;AACvB,MAAK,MAAM,OAAO,KAAM,UAAS,MAAM,QAAQ,IAAI;AACnD,KAAI,OAAO,MAAM,QAAQ,KAAK,KAAK,YAAY,CAAC,UAAU,OAAO,WAAW,SAAU,OAAM;AAC5F,KAAI,MAAM,QAAQ,OAAO,CAAE,QAAO,OAAO,KAAK,IAAI;KAC7C,QAAO,QAAQ;;;;;;;;AAStB,SAAgB,uBACd,YACA,eAAkC,EAAE,EACpC,mBAAmD,EAAE,EACrD,oBAAuD,EAAE,EACzC;AAChB,KAAI;EACF,MAAM,SAASA,4CAAuB,YAAY,kBAAkB;AACpE,MAAI,CAAC,MAAM,QAAQ,aAAa,IAAI,aAAa,MAAM,MAAM,OAAO,MAAM,SAAS,CAAE,OAAM;EAC3F,MAAM,UAAU,CAAC,GAAG,IAAI,IAAI,aAAa,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAChE,GAAG,MAAM,EAAE,SAAS,EAAE,OACxB;EACD,MAAM,aAAa,UAAkB,QAAQ,MAAM,WAAW,MAAM,SAAS,OAAO,CAAC;EACrF,MAAM,kBAAkB,UAAkB;AACxC,QAAK,MAAM,UAAU,QAAS,SAAQ,MAAM,MAAM,OAAO,CAAC,KAAK,SAAS;AACxE,UAAO;;EAET,MAAM,cAAc,IAAI,IACtB,iBAAiB,KAAK,UAAU;AAC9B,SAAM,MAAM,QAAQ;AACpB,UAAO,MAAM;IACb,CACH;EACD,MAAM,0BAAU,IAAI,KAAa;EAGjC,MAAM,8BAAc,IAAI,KAAa;AACrC,OAAK,MAAM,WAAW,OAAO,UAAU;GACrC,IAAI,QAAkB,OAAO,QAAQ,QAAQ,OAAO;AACpD,QAAK,MAAM,OAAO,MAAM,QAAQ,QAAQ,CAAE,SAAQ,MAAM,OAAO,IAAI;AACnE,OAAI,OAAO,UAAU,SAAU,OAAM;AACrC,eAAY,IAAI,MAAM;;EAExB,IAAI,SAAS;EACb,MAAM,6BAAa,IAAI,KAA8C;AACrE,OAAK,MAAM,WAAW,OAAO,UAAU;GACrC,IAAI,WAAW,WAAW,IAAI,QAAQ,KAAK;AAC3C,OAAI,CAAC,UAAU;IACb,MAAM,QAAQ,WAAW,OAAO;AAChC,WAAO,YAAY,IAAI,WAAW,SAAS,CAAE;AAC7C,eAAW;KAAE,MAAM,WAAW;KAAS,OAAO,WAAW;KAAY;AACrE,eAAW,IAAI,QAAQ,MAAM,SAAS;;AAExC,iBAAc,OAAO,QAAQ,QAAQ,OAAO,OAAO,QAAQ,SAAS,SAAS,MAAM;AACnF,WAAQ,OAAO,SAAS;;EAE1B,SAAS,YAAY,OAAuB;AAE1C,OAAI,CAAC,2BAA2B,KAAK,MAAM,CAAE,QAAO;GACpD,IAAI;AACJ,OAAI;AACF,UAAM,IAAI,IAAI,MAAM;WACd;AACN,WAAO;;AAGT,OAAI,UAAU,mBAAmB,IAAI,SAAS,CAAC,CAAE,OAAM;GACvD,IAAI,UAAU;AACd,OAAI,IAAI,YAAY,IAAI,UAAU;AAChC,QAAI,WAAW;AACf,QAAI,WAAW;AACf,cAAU;;AAEZ,QAAK,MAAM,CAAC,KAAK,QAAQ,CAAC,GAAG,IAAI,aAAa,CAC5C,KAAI,cAAc,KAAK,IAAI,IAAI,UAAU,IAAI,IAAI,UAAU,IAAI,EAAE;AAC/D,QAAI,aAAa,OAAO,IAAI;AAC5B,cAAU;;GAGd,MAAM,cAAc,mBAAmB,IAAI,KAAK;AAChD,OACE,IAAI,SACH,UAAU,YAAY,IAAI,0CAA0C,KAAK,YAAY,GACtF;AACA,QAAI,OAAO;AACX,cAAU;;AAEZ,UAAO,UAAU,IAAI,OAAO;;EAE9B,SAAS,iBAAiB,SAA0B;GAClD,MAAM,QACJ,sHAAsH,KACpH,QACD;AACH,OAAI,CAAC,MAAO,QAAO;GACnB,MAAM,QAAQ,OAAO,QAAQ,OAAO,MAAM,GAAG,EAAE;GAC/C,MAAM,SAAS,MAAM;AACrB,OACE,MAAM,SAAS,oBACf,CAAC,UACD,OAAO,WAAW,YAClB,MAAM,QAAQ,OAAO,CAErB,QAAO;AACT,OAAI,CAAC,QAAQ,SAAS,0BAA0B,CAC9C,QAAO;IAAC;IAAoB;IAAwB;IAAqB,CAAC,SACxE,OAAO,OAAO,KAAK,CACpB;GAEH,MAAM,OAAO,OAAO;AACpB,UACE,CAAC,8BAA8B,4BAA4B,CAAC,SAAS,OAAO,OAAO,KAAK,CAAC,IACzF,CAAC,CAAC,QACF,OAAO,SAAS,YAChB,CAAC,MAAM,QAAQ,KAAK,IACpB,KAAK,SAAS;;EAGlB,SAAS,MAAM,OAAiB,MAAc,WAAW,OAAO,WAAW,OAAiB;AAC1F,OAAI,OAAO,UAAU,UAAU;IAC7B,MAAM,MAAM,YAAY,MAAM;AAC9B,SAAK,UAAU,MAAM,IAAI,QAAQ,WAAW,CAAC,YAAY,UAAW,OAAM;AAC1E,WAAO,YAAY,CAAC,WAAW,eAAe,IAAI,GAAG;;AAEvD,OAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,MAAM,KAAK,MAAM,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,KAAK,UAAU,SAAS,CAAC;AAChF,OAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;GAChD,MAAM,SAAqB,EAAE;AAC7B,QAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,MAAM,EAAE;IAC/C,MAAM,UAAU,GAAG,KAAK,GAAG,cAAc,IAAI;AAG7C,QAAI,iBAAiB,QAAQ,KAAK,OAAO,SAAS,YAAY,SAAS,OAAO;AAC5E,SAAI,YAAY,IAAI,QAAQ,CAAE,SAAQ,IAAI,QAAQ;SAC7C,QAAO,OAAO,OAAO,SAAS,WAAW,WAAW;AACzD;;IAEF,MAAM,kBAAkB,YAAY,YAAY,IAAI,IAAI;IACxD,MAAM,YAAY,CAAC,oBAAoB,YAAY,cAAc,KAAK,IAAI;AAC1E,QAAI,YAAY,IAAI,QAAQ,EAAE;AAC5B,SAAI,CAAC,UAAW,OAAM;AACtB,aAAQ,IAAI,QAAQ;AACpB;;AAEF,QAAI,CAAC,YAAY,cAAc,KAAK,IAAI,CAAE;AAC1C,QAAI,UAAU,IAAI,EAAE;AAClB,SAAI,CAAC,YAAY,gBAAiB,OAAM;AACxC;;AAEF,WAAO,OAAO,MAAM,MAAM,SAAS,YAAY,YAAY,IAAI,IAAI,EAAE,gBAAgB;;AAEvF,UAAO;;EAIT,MAAM,UAAU,MAAM,QAAuC,GAAG;AAChE,MAAI,QAAQ,SAAS,YAAY,QAAQ,UAAU,KAAK,UAAU,QAAQ,CAAC,CAAE,OAAM;AACnF,SAAOA,4CAAuB,SAAS,kBAAkB;SACnD;AACN,QAAM"}