@copilotkit/aimock 1.44.0 → 1.45.0

package/dist/journal.js

@@ -76,12 +76,43 @@ function systemMessageEqual(a, b) {
 * (ignoring sequenceIndex). Used to group sequenced fixtures.
 */
 function matchCriteriaEqual(a, b) {
-	return fieldEqual(a.userMessage, b.userMessage) && systemMessageEqual(a.systemMessage, b.systemMessage) && fieldEqual(a.inputText, b.inputText) && fieldEqual(a.toolCallId, b.toolCallId) && fieldEqual(a.toolName, b.toolName) && fieldEqual(a.model, b.model) && fieldEqual(a.responseFormat, b.responseFormat) && fieldEqual(a.predicate, b.predicate) && fieldEqual(a.endpoint, b.endpoint) && fieldEqual(a.turnIndex, b.turnIndex) && fieldEqual(a.hasToolResult, b.hasToolResult) && fieldEqual(a.toolResultContains, b.toolResultContains) && fieldEqual(a.context, b.context);
+	return fieldEqual(a.userMessage, b.userMessage) && systemMessageEqual(a.systemMessage, b.systemMessage) && fieldEqual(a.inputText, b.inputText) && fieldEqual(a.toolCallId, b.toolCallId) && fieldEqual(a.toolName, b.toolName) && fieldEqual(a.toolNamespace, b.toolNamespace) && fieldEqual(a.model, b.model) && fieldEqual(a.responseFormat, b.responseFormat) && fieldEqual(a.predicate, b.predicate) && fieldEqual(a.endpoint, b.endpoint) && fieldEqual(a.turnIndex, b.turnIndex) && fieldEqual(a.hasToolResult, b.hasToolResult) && fieldEqual(a.toolResultContains, b.toolResultContains) && fieldEqual(a.context, b.context);
 }
+/** Count-map keys resolve through `identity`, so every alias of a fixture finds its caller entry. */
+var FixtureCountMap = class extends Map {
+	constructor(identity) {
+		super();
+		this.identity = identity;
+	}
+	get(key) {
+		return super.get(this.identity(key));
+	}
+	has(key) {
+		return super.has(this.identity(key));
+	}
+	set(key, value) {
+		return super.set(this.identity(key), value);
+	}
+	delete(key) {
+		return super.delete(this.identity(key));
+	}
+};
 var Journal = class {
 	entries = [];
 	matchedFixtures = /* @__PURE__ */ new WeakMap();
+	/** The fixture a request was served from, where the entry names its caller fixture instead. */
+	servedFixtures = /* @__PURE__ */ new WeakMap();
 	fixtureMatchCountsByTestId = /* @__PURE__ */ new Map();
+	/** An extended server's view of a fixture to the caller's fixture (configureFixtureViewSource). */
+	fixtureViewSource = (fixture) => fixture;
+	fixtureCountIdentity = (fixture) => fixture;
+	/** The key a fixture is counted under: the caller's object behind any view or copy. */
+	fixtureCountKey = (fixture) => this.fixtureCountIdentity(this.fixtureViewSource(fixture));
+	createFixtureCountMap = () => /* @__PURE__ */ new Map();
+	fixtureCountIdentityConfigured = false;
+	fixtureViewSourceConfigured = false;
+	counterTestIds = /* @__PURE__ */ new Set();
+	misbehaviorCountersByTestId = /* @__PURE__ */ new Map();
 	maxEntries;
 	fixtureCountsMaxTestIds;
 	onAdd;
@@ -124,7 +155,16 @@ var Journal = class {
 			...entry,
 			body: capBody(entry.body)
 		};
-		if (matchedFixture) this.matchedFixtures.set(full, matchedFixture);
+		const fixture = full.response.fixture;
+		const source = fixture ? this.fixtureCountKey(fixture) : fixture;
+		if (fixture && source !== fixture) {
+			full.response = {
+				...full.response,
+				fixture: source
+			};
+			this.servedFixtures.set(full, fixture);
+		}
+		if (matchedFixture) this.matchedFixtures.set(full, this.fixtureCountKey(matchedFixture));
 		this.entries.push(full);
 		if (this.maxEntries > 0 && this.entries.length > this.maxEntries) this.entries.shift();
 		this.onAdd?.(full);
@@ -151,7 +191,16 @@ var Journal = class {
 		return this.entries.length > 0 ? this.entries[this.entries.length - 1] : null;
 	}
 	findByFixture(fixture) {
-		return this.entries.filter((e) => (this.matchedFixtures.get(e) ?? e.response.fixture) === fixture);
+		const key = this.fixtureCountKey(fixture);
+		return this.entries.filter((e) => (this.matchedFixtures.get(e) ?? e.response.fixture) === key);
+	}
+	/**
+	* @internal The fixture `entry`'s request was served from: the extended
+	* view or the per-addition copy when the entry names the caller's fixture
+	* behind it, otherwise `entry.response.fixture`. The journal JSON shows it.
+	*/
+	servedFixture(entry) {
+		return this.servedFixtures.get(entry) ?? entry.response.fixture;
 	}
 	/**
 	* READ-ONLY accessor. Returns the existing count map for `testId`, or an
@@ -161,7 +210,7 @@ var Journal = class {
 	* `getOrCreateFixtureMatchCountsForTest`.
 	*/
 	getFixtureMatchCountsForTest(testId) {
-		return this.fixtureMatchCountsByTestId.get(testId) ?? /* @__PURE__ */ new Map();
+		return this.fixtureMatchCountsByTestId.get(testId) ?? this.createFixtureCountMap();
 	}
 	/**
 	* WRITE path: get the count map for `testId`, inserting a fresh empty Map
@@ -172,15 +221,83 @@ var Journal = class {
 	getOrCreateFixtureMatchCountsForTest(testId) {
 		let counts = this.fixtureMatchCountsByTestId.get(testId);
 		if (!counts) {
-			counts = /* @__PURE__ */ new Map();
+			counts = this.createFixtureCountMap();
 			this.fixtureMatchCountsByTestId.set(testId, counts);
-			if (this.fixtureCountsMaxTestIds > 0 && this.fixtureMatchCountsByTestId.size > this.fixtureCountsMaxTestIds) {
-				const oldest = this.fixtureMatchCountsByTestId.keys().next().value;
-				if (oldest !== void 0) this.fixtureMatchCountsByTestId.delete(oldest);
-			}
+			this.admitCounterTestId(testId);
 		}
 		return counts;
 	}
+	/** Match and fault mutations share one admission order and capacity. */
+	admitCounterTestId(testId) {
+		this.counterTestIds.add(testId);
+		if (this.fixtureCountsMaxTestIds > 0 && this.counterTestIds.size > this.fixtureCountsMaxTestIds) {
+			const oldest = this.counterTestIds.values().next().value;
+			if (oldest !== void 0) {
+				this.counterTestIds.delete(oldest);
+				this.fixtureMatchCountsByTestId.delete(oldest);
+				this.misbehaviorCountersByTestId.delete(oldest);
+			}
+		}
+	}
+	getOrCreateMisbehaviorCounter(key) {
+		let sources = this.misbehaviorCountersByTestId.get(key.testId);
+		if (!sources) {
+			sources = /* @__PURE__ */ new Map();
+			this.misbehaviorCountersByTestId.set(key.testId, sources);
+			this.admitCounterTestId(key.testId);
+		}
+		let entries = sources.get(key.sourceKey);
+		if (!entries) {
+			entries = /* @__PURE__ */ new Map();
+			sources.set(key.sourceKey, entries);
+		}
+		let counter = entries.get(key.entryIndex);
+		if (!counter) {
+			counter = {
+				ordinal: 0,
+				firings: 0
+			};
+			entries.set(key.entryIndex, counter);
+		}
+		return counter;
+	}
+	getFiringCount(key) {
+		return this.misbehaviorCountersByTestId.get(key.testId)?.get(key.sourceKey)?.get(key.entryIndex)?.firings ?? 0;
+	}
+	nextOrdinal(key) {
+		return this.getOrCreateMisbehaviorCounter(key).ordinal++;
+	}
+	recordFiring(key) {
+		this.getOrCreateMisbehaviorCounter(key).firings++;
+	}
+	clearMisbehaviorCounters(testId) {
+		if (testId !== void 0) {
+			this.misbehaviorCountersByTestId.delete(testId);
+			if (!this.fixtureMatchCountsByTestId.has(testId)) this.counterTestIds.delete(testId);
+		} else {
+			this.misbehaviorCountersByTestId.clear();
+			for (const id of this.counterTestIds) if (!this.fixtureMatchCountsByTestId.has(id)) this.counterTestIds.delete(id);
+		}
+	}
+	/** @internal LLMock configures caller count identity before serving requests. */
+	configureFixtureCountIdentity(identity) {
+		if (this.fixtureCountIdentityConfigured || this.fixtureMatchCountsByTestId.size > 0) throw new Error("Fixture count identity must be configured once before counting");
+		this.fixtureCountIdentity = identity;
+		this.createFixtureCountMap = () => new FixtureCountMap(this.fixtureCountKey);
+		this.fixtureCountIdentityConfigured = true;
+	}
+	/**
+	* @internal A server with `responsesTools: "extended"` matches each fixture
+	* through its extended view. `source` maps a view back to the caller's
+	* fixture, so counts, `findByFixture` and `JournalEntry.response.fixture`
+	* keep the caller's object. Configured once, before counting.
+	*/
+	configureFixtureViewSource(source) {
+		if (this.fixtureViewSourceConfigured || this.fixtureMatchCountsByTestId.size > 0) throw new Error("Fixture view source must be configured once before counting");
+		this.fixtureViewSource = source;
+		this.createFixtureCountMap = () => new FixtureCountMap(this.fixtureCountKey);
+		this.fixtureViewSourceConfigured = true;
+	}
 	getFixtureMatchCount(fixture, testId = DEFAULT_TEST_ID) {
 		return this.getFixtureMatchCountsForTest(testId).get(fixture) ?? 0;
 	}
@@ -188,14 +305,19 @@ var Journal = class {
 		const counts = this.getOrCreateFixtureMatchCountsForTest(testId);
 		counts.set(fixture, (counts.get(fixture) ?? 0) + 1);
 		if (fixture.match.sequenceIndex !== void 0 && allFixtures) for (const sibling of allFixtures) {
-			if (sibling === fixture) continue;
+			if (this.fixtureCountKey(sibling) === this.fixtureCountKey(fixture)) continue;
 			if (sibling.match.sequenceIndex === void 0) continue;
 			if (matchCriteriaEqual(fixture.match, sibling.match)) counts.set(sibling, (counts.get(sibling) ?? 0) + 1);
 		}
 	}
 	clearMatchCounts(testId) {
-		if (testId !== void 0) this.fixtureMatchCountsByTestId.delete(testId);
-		else this.fixtureMatchCountsByTestId.clear();
+		if (testId !== void 0) {
+			this.fixtureMatchCountsByTestId.delete(testId);
+			this.clearMisbehaviorCounters(testId);
+		} else {
+			this.fixtureMatchCountsByTestId.clear();
+			this.clearMisbehaviorCounters();
+		}
 	}
 	/**
 	* Clear ONLY the request journal entries, preserving fixture match-counts.
@@ -209,7 +331,7 @@ var Journal = class {
 	}
 	clear() {
 		this.entries = [];
-		this.fixtureMatchCountsByTestId.clear();
+		this.clearMatchCounts();
 	}
 	get size() {
 		return this.entries.length;

package/dist/journal.js.map

@@ -1 +1 @@
-{"version":3,"file":"journal.js","names":[],"sources":["../src/journal.ts"],"sourcesContent":["import { generateId } from \"./helpers.js\";\nimport type {\n  ChatCompletionRequest,\n  Fixture,\n  FixtureMatch,\n  JournalBody,\n  JournalEntry,\n} from \"./types.js\";\nimport { DEFAULT_TEST_ID } from \"./constants.js\";\nexport { DEFAULT_TEST_ID } from \"./constants.js\";\n\n/**\n * Maximum UTF-8 byte length of a serialized request body retained in a\n * journal entry. Bodies whose JSON serialization exceeds this byte size are\n * replaced with a truncation marker.\n *\n * Only the request `body` field is capped here. `headers` and `path` are\n * retained uncapped, but they are naturally bounded by Node's default ~16 KB\n * maximum HTTP header size, so the per-entry overhead beyond the body cap\n * remains small. Combined with the journal's maxEntries limit (default 1000),\n * the total `JSON.stringify(journal.getAll())` output stays well under V8's\n * ~512 MB string limit even at maximum capacity.\n */\nconst JOURNAL_BODY_CAP_BYTES = 64 * 1024; // 64 KB\n\n/**\n * If `body` serializes to more than JOURNAL_BODY_CAP_BYTES (in UTF-8 bytes),\n * replace it with a truncation marker. Returns the original body when within\n * the cap, or null when `body` is null.\n *\n * The gate uses Buffer.byteLength (UTF-8 bytes) rather than .length (UTF-16\n * code units) to match the constant name and to correctly cap multibyte\n * content (e.g. CJK/emoji) whose code-unit count falls under the threshold\n * but whose byte size does not.\n */\nfunction capBody(body: JournalBody | null): JournalBody | null {\n  if (body === null) return null;\n  const serialized = JSON.stringify(body);\n  if (Buffer.byteLength(serialized, \"utf8\") <= JOURNAL_BODY_CAP_BYTES) return body;\n  // The marker is not a chat request, and `JournalBody` no longer claims it is\n  // — downstream consumers (e.g. GET /journal) treat the body as opaque JSON.\n  return {\n    __aimock_truncated: true,\n    originalByteSize: Buffer.byteLength(serialized, \"utf8\"),\n    note: \"body truncated by aimock journal cap (64 KB limit)\",\n  };\n}\n\n/**\n * Narrow a journaled body to a chat-completion request.\n *\n * `JournalEntry.body` is a union (see {@link JournalBody}): most entries hold a\n * chat request, but the fine-tuning create payload and this module's own\n * truncation marker do not. Anything reading `messages`, `model` or the rest of\n * the chat shape off a journal entry — inside aimock or in a consumer's test\n * — goes through here, so an entry that is not a chat request fails as a\n * `false` it can assert on rather than as an undefined property three accesses\n * later.\n *\n * `messages` is the discriminator because it is the one required field no\n * other journaled shape carries.\n */\nexport function isChatCompletionBody(\n  body: JournalBody | null | undefined,\n): body is ChatCompletionRequest {\n  return (\n    body !== null &&\n    body !== undefined &&\n    Array.isArray((body as { messages?: unknown }).messages) &&\n    typeof (body as { model?: unknown }).model === \"string\"\n  );\n}\n\n/**\n * Compare two field values, handling RegExp by source+flags rather than reference.\n */\nfunction fieldEqual(a: unknown, b: unknown): boolean {\n  if (a instanceof RegExp && b instanceof RegExp)\n    return a.source === b.source && a.flags === b.flags;\n  return a === b;\n}\n\n/**\n * Compare two systemMessage values. Handles string, string[], and RegExp.\n * Both-undefined is treated as equal.\n */\nfunction systemMessageEqual(\n  a: string | string[] | RegExp | undefined,\n  b: string | string[] | RegExp | undefined,\n): boolean {\n  if (a === undefined && b === undefined) return true;\n  if (a === undefined || b === undefined) return false;\n  if (typeof a === \"string\" && typeof b === \"string\") return a === b;\n  if (Array.isArray(a) && Array.isArray(b))\n    return a.length === b.length && a.every((v, i) => v === b[i]);\n  if (a instanceof RegExp && b instanceof RegExp)\n    return a.source === b.source && a.flags === b.flags;\n  return false;\n}\n\n/**\n * Check whether two fixture match objects have the same criteria\n * (ignoring sequenceIndex). Used to group sequenced fixtures.\n */\nfunction matchCriteriaEqual(a: FixtureMatch, b: FixtureMatch): boolean {\n  return (\n    fieldEqual(a.userMessage, b.userMessage) &&\n    systemMessageEqual(a.systemMessage, b.systemMessage) &&\n    fieldEqual(a.inputText, b.inputText) &&\n    fieldEqual(a.toolCallId, b.toolCallId) &&\n    fieldEqual(a.toolName, b.toolName) &&\n    fieldEqual(a.model, b.model) &&\n    fieldEqual(a.responseFormat, b.responseFormat) &&\n    fieldEqual(a.predicate, b.predicate) &&\n    fieldEqual(a.endpoint, b.endpoint) &&\n    fieldEqual(a.turnIndex, b.turnIndex) &&\n    fieldEqual(a.hasToolResult, b.hasToolResult) &&\n    fieldEqual(a.toolResultContains, b.toolResultContains) &&\n    fieldEqual(a.context, b.context)\n  );\n}\n\nexport interface JournalOptions {\n  /**\n   * Maximum number of entries to retain. When exceeded, oldest entries are\n   * dropped FIFO. Set to 0 (or omit) for unbounded retention (the historical\n   * default — suitable for short-lived test runs only). Negative values are\n   * rejected at the CLI parse layer; programmatically they are treated as 0\n   * (unbounded) for back-compat.\n   *\n   * Long-running servers (e.g. mock proxies in CI/demo environments) should\n   * always set a finite cap: every request appends an entry holding the\n   * request body + headers + fixture reference, and without a cap the\n   * journal grows until the process OOMs.\n   */\n  maxEntries?: number;\n  /**\n   * Maximum number of unique testIds retained in the fixture match-count\n   * map (`fixtureMatchCountsByTestId`). When exceeded, the oldest testId\n   * (by first-insertion order) is evicted FIFO. Set to 0 (or omit) for\n   * unbounded retention. Negative values are rejected at the CLI parse\n   * layer; programmatically they are treated as 0 (unbounded) for\n   * back-compat. Without a cap this map can grow over time in long-running\n   * servers that see many unique testIds.\n   */\n  fixtureCountsMaxTestIds?: number;\n  /**\n   * Called with every entry {@link Journal.add} creates, right after it is\n   * recorded. The hook exists so an embedder can attribute an entry to the\n   * request that produced it WITHOUT touching each of the ~100 `journal.add`\n   * call sites spread across the handler modules: the server binds the entry\n   * to the in-flight `IncomingMessage` here, and its error arm then amends\n   * that exact object rather than guessing from a caller-supplied header.\n   *\n   * The entry is already recorded when the hook runs, so a hook that throws\n   * does not lose the write — but it does propagate out of `add` into the\n   * caller's error path, so a hook must not throw.\n   */\n  onAdd?: (entry: JournalEntry) => void;\n}\n\nexport class Journal {\n  private entries: JournalEntry[] = [];\n  private readonly matchedFixtures = new WeakMap<JournalEntry, Fixture>();\n  private readonly fixtureMatchCountsByTestId: Map<string, Map<Fixture, number>> = new Map();\n  private readonly maxEntries: number;\n  private readonly fixtureCountsMaxTestIds: number;\n  private readonly onAdd?: (entry: JournalEntry) => void;\n\n  constructor(options: JournalOptions = {}) {\n    this.onAdd = options.onAdd;\n    // Treat 0 or negative as \"unbounded\" to preserve prior behavior when\n    // the option is omitted or explicitly disabled.\n    const cap = options.maxEntries;\n    this.maxEntries = cap !== undefined && cap > 0 ? cap : 0;\n    const testIdCap = options.fixtureCountsMaxTestIds;\n    this.fixtureCountsMaxTestIds = testIdCap !== undefined && testIdCap > 0 ? testIdCap : 0;\n  }\n\n  /**\n   * The per-test-id cap on fixture match-count maps, for an MCP mount to pass\n   * to `McpFakeStore.setMaxTestIds`. Always a non-negative safe integer, `0`\n   * meaning unbounded, and never throws, whatever option was passed:\n   * omitted, zero, negative or `NaN` is `0`; `Infinity` or a value above\n   * `Number.MAX_SAFE_INTEGER` (never reached) is `0`; a fraction of 1 or more\n   * is rounded down (`1.5` evicts at 2 ids, so it keeps 1). For these values\n   * it is the number of test ids the journal keeps.\n   *\n   * An option between 0 and 1 is the exception. The journal keeps no test id\n   * (each new count map is evicted as soon as it is made, so counts never\n   * advance), and a store cap cannot say \"keep none\" because `0` is\n   * unbounded. The getter returns `1`, the smallest bounded cap, so a store\n   * given it keeps 1 test id where the journal keeps 0.\n   */\n  get fixtureCountsMaxTestIdsCap(): number {\n    const cap = this.fixtureCountsMaxTestIds;\n    if (!(cap > 0) || cap > Number.MAX_SAFE_INTEGER) return 0;\n    return Math.max(1, Math.floor(cap));\n  }\n\n  /** Backwards-compatible accessor — returns the default (no testId) count map. */\n  get fixtureMatchCounts(): Map<Fixture, number> {\n    return this.getFixtureMatchCountsForTest(DEFAULT_TEST_ID);\n  }\n\n  /** @internal matchedFixture preserves identity when Live supplies safe diagnostics. */\n  add(entry: Omit<JournalEntry, \"id\" | \"timestamp\">, matchedFixture?: Fixture): JournalEntry {\n    const full: JournalEntry = {\n      id: generateId(\"req\"),\n      timestamp: Date.now(),\n      ...entry,\n      body: capBody(entry.body),\n    };\n    if (matchedFixture) this.matchedFixtures.set(full, matchedFixture);\n    this.entries.push(full);\n    // FIFO eviction when over capacity. Array.prototype.shift() is O(n)\n    // regardless of how many we drop per add; we accept it at small caps\n    // (default 1000) because the constant factor is tiny and this runs once\n    // per request. For much larger caps, switch to a ring buffer for true\n    // O(1) eviction.\n    if (this.maxEntries > 0 && this.entries.length > this.maxEntries) {\n      this.entries.shift();\n    }\n    this.onAdd?.(full);\n    return full;\n  }\n\n  /**\n   * Return every entry, or with `limit` the most recent `limit` entries.\n   * `0` returns `[]` — exactly what `GET /__aimock/journal?limit=0` answers.\n   * `slice(-0)` is `slice(0)`, so a `0` used to return the ENTIRE journal; it\n   * is special-cased so the library and the HTTP route agree. This is a public\n   * library API, so odd limits are tolerated rather than thrown on: a\n   * non-finite limit (`NaN`, `Infinity`) means \"no limit\", a fractional limit\n   * floors, and any limit at or below `0` asks for nothing.\n   */\n  getAll(opts?: { limit?: number }): JournalEntry[] {\n    if (opts?.limit !== undefined && Number.isFinite(opts.limit)) {\n      const limit = Math.floor(opts.limit);\n      if (limit <= 0) return [];\n      return this.entries.slice(-limit);\n    }\n    return this.entries.slice();\n  }\n\n  getLast(): JournalEntry | null {\n    return this.entries.length > 0 ? this.entries[this.entries.length - 1] : null;\n  }\n\n  findByFixture(fixture: Fixture): JournalEntry[] {\n    return this.entries.filter(\n      (e) => (this.matchedFixtures.get(e) ?? e.response.fixture) === fixture,\n    );\n  }\n\n  /**\n   * READ-ONLY accessor. Returns the existing count map for `testId`, or an\n   * empty transient Map if none exists. Does NOT insert into the cache and\n   * does NOT trigger FIFO eviction — callers may read freely without\n   * perturbing cache state. For the write path, see\n   * `getOrCreateFixtureMatchCountsForTest`.\n   */\n  getFixtureMatchCountsForTest(testId: string): Map<Fixture, number> {\n    return this.fixtureMatchCountsByTestId.get(testId) ?? new Map();\n  }\n\n  /**\n   * WRITE path: get the count map for `testId`, inserting a fresh empty Map\n   * if missing and running FIFO eviction when the testId cap is exceeded.\n   * Only callers that intend to mutate the map (e.g. incrementing a count)\n   * should use this.\n   */\n  private getOrCreateFixtureMatchCountsForTest(testId: string): Map<Fixture, number> {\n    let counts = this.fixtureMatchCountsByTestId.get(testId);\n    if (!counts) {\n      counts = new Map();\n      this.fixtureMatchCountsByTestId.set(testId, counts);\n      // FIFO eviction when over capacity. JS Map preserves insertion order,\n      // so the first key returned by keys() is the oldest. Same O(n) shift\n      // caveat as `entries`: acceptable at small caps (createServer\n      // default 500; a bare Journal is unbounded).\n      if (\n        this.fixtureCountsMaxTestIds > 0 &&\n        this.fixtureMatchCountsByTestId.size > this.fixtureCountsMaxTestIds\n      ) {\n        const oldest = this.fixtureMatchCountsByTestId.keys().next().value;\n        if (oldest !== undefined) {\n          this.fixtureMatchCountsByTestId.delete(oldest);\n        }\n      }\n    }\n    return counts;\n  }\n\n  getFixtureMatchCount(fixture: Fixture, testId = DEFAULT_TEST_ID): number {\n    return this.getFixtureMatchCountsForTest(testId).get(fixture) ?? 0;\n  }\n\n  incrementFixtureMatchCount(\n    fixture: Fixture,\n    allFixtures?: readonly Fixture[],\n    testId = DEFAULT_TEST_ID,\n  ): void {\n    const counts = this.getOrCreateFixtureMatchCountsForTest(testId);\n    counts.set(fixture, (counts.get(fixture) ?? 0) + 1);\n    // When a sequenced fixture matches, also increment all siblings with matching criteria\n    if (fixture.match.sequenceIndex !== undefined && allFixtures) {\n      for (const sibling of allFixtures) {\n        if (sibling === fixture) continue;\n        if (sibling.match.sequenceIndex === undefined) continue;\n        if (matchCriteriaEqual(fixture.match, sibling.match)) {\n          counts.set(sibling, (counts.get(sibling) ?? 0) + 1);\n        }\n      }\n    }\n  }\n\n  clearMatchCounts(testId?: string): void {\n    if (testId !== undefined) {\n      this.fixtureMatchCountsByTestId.delete(testId);\n    } else {\n      this.fixtureMatchCountsByTestId.clear();\n    }\n  }\n\n  /**\n   * Clear ONLY the request journal entries, preserving fixture match-counts.\n   * Match-counts are fixture-matching/sequencing state, not journal data, so\n   * clearing the journal must not silently rewind sequenced fixtures. Used by\n   * `POST /__aimock/reset/journal`. For a full reset (entries + match-counts),\n   * use `clear()` instead.\n   */\n  clearEntries(): void {\n    this.entries = [];\n  }\n\n  clear(): void {\n    this.entries = [];\n    this.fixtureMatchCountsByTestId.clear();\n  }\n\n  get size(): number {\n    return this.entries.length;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAuBA,MAAM,yBAAyB,KAAK;;;;;;;;;;;AAYpC,SAAS,QAAQ,MAA8C;AAC7D,KAAI,SAAS,KAAM,QAAO;CAC1B,MAAM,aAAa,KAAK,UAAU,KAAK;AACvC,KAAI,OAAO,WAAW,YAAY,OAAO,IAAI,uBAAwB,QAAO;AAG5E,QAAO;EACL,oBAAoB;EACpB,kBAAkB,OAAO,WAAW,YAAY,OAAO;EACvD,MAAM;EACP;;;;;;;;;;;;;;;;AAiBH,SAAgB,qBACd,MAC+B;AAC/B,QACE,SAAS,QACT,SAAS,UACT,MAAM,QAAS,KAAgC,SAAS,IACxD,OAAQ,KAA6B,UAAU;;;;;AAOnD,SAAS,WAAW,GAAY,GAAqB;AACnD,KAAI,aAAa,UAAU,aAAa,OACtC,QAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE;AAChD,QAAO,MAAM;;;;;;AAOf,SAAS,mBACP,GACA,GACS;AACT,KAAI,MAAM,UAAa,MAAM,OAAW,QAAO;AAC/C,KAAI,MAAM,UAAa,MAAM,OAAW,QAAO;AAC/C,KAAI,OAAO,MAAM,YAAY,OAAO,MAAM,SAAU,QAAO,MAAM;AACjE,KAAI,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ,EAAE,CACtC,QAAO,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,GAAG,MAAM,MAAM,EAAE,GAAG;AAC/D,KAAI,aAAa,UAAU,aAAa,OACtC,QAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE;AAChD,QAAO;;;;;;AAOT,SAAS,mBAAmB,GAAiB,GAA0B;AACrE,QACE,WAAW,EAAE,aAAa,EAAE,YAAY,IACxC,mBAAmB,EAAE,eAAe,EAAE,cAAc,IACpD,WAAW,EAAE,WAAW,EAAE,UAAU,IACpC,WAAW,EAAE,YAAY,EAAE,WAAW,IACtC,WAAW,EAAE,UAAU,EAAE,SAAS,IAClC,WAAW,EAAE,OAAO,EAAE,MAAM,IAC5B,WAAW,EAAE,gBAAgB,EAAE,eAAe,IAC9C,WAAW,EAAE,WAAW,EAAE,UAAU,IACpC,WAAW,EAAE,UAAU,EAAE,SAAS,IAClC,WAAW,EAAE,WAAW,EAAE,UAAU,IACpC,WAAW,EAAE,eAAe,EAAE,cAAc,IAC5C,WAAW,EAAE,oBAAoB,EAAE,mBAAmB,IACtD,WAAW,EAAE,SAAS,EAAE,QAAQ;;AA2CpC,IAAa,UAAb,MAAqB;CACnB,AAAQ,UAA0B,EAAE;CACpC,AAAiB,kCAAkB,IAAI,SAAgC;CACvE,AAAiB,6CAAgE,IAAI,KAAK;CAC1F,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAEjB,YAAY,UAA0B,EAAE,EAAE;AACxC,OAAK,QAAQ,QAAQ;EAGrB,MAAM,MAAM,QAAQ;AACpB,OAAK,aAAa,QAAQ,UAAa,MAAM,IAAI,MAAM;EACvD,MAAM,YAAY,QAAQ;AAC1B,OAAK,0BAA0B,cAAc,UAAa,YAAY,IAAI,YAAY;;;;;;;;;;;;;;;;;CAkBxF,IAAI,6BAAqC;EACvC,MAAM,MAAM,KAAK;AACjB,MAAI,EAAE,MAAM,MAAM,MAAM,OAAO,iBAAkB,QAAO;AACxD,SAAO,KAAK,IAAI,GAAG,KAAK,MAAM,IAAI,CAAC;;;CAIrC,IAAI,qBAA2C;AAC7C,SAAO,KAAK,6BAA6B,gBAAgB;;;CAI3D,IAAI,OAA+C,gBAAwC;EACzF,MAAM,OAAqB;GACzB,IAAI,WAAW,MAAM;GACrB,WAAW,KAAK,KAAK;GACrB,GAAG;GACH,MAAM,QAAQ,MAAM,KAAK;GAC1B;AACD,MAAI,eAAgB,MAAK,gBAAgB,IAAI,MAAM,eAAe;AAClE,OAAK,QAAQ,KAAK,KAAK;AAMvB,MAAI,KAAK,aAAa,KAAK,KAAK,QAAQ,SAAS,KAAK,WACpD,MAAK,QAAQ,OAAO;AAEtB,OAAK,QAAQ,KAAK;AAClB,SAAO;;;;;;;;;;;CAYT,OAAO,MAA2C;AAChD,MAAI,MAAM,UAAU,UAAa,OAAO,SAAS,KAAK,MAAM,EAAE;GAC5D,MAAM,QAAQ,KAAK,MAAM,KAAK,MAAM;AACpC,OAAI,SAAS,EAAG,QAAO,EAAE;AACzB,UAAO,KAAK,QAAQ,MAAM,CAAC,MAAM;;AAEnC,SAAO,KAAK,QAAQ,OAAO;;CAG7B,UAA+B;AAC7B,SAAO,KAAK,QAAQ,SAAS,IAAI,KAAK,QAAQ,KAAK,QAAQ,SAAS,KAAK;;CAG3E,cAAc,SAAkC;AAC9C,SAAO,KAAK,QAAQ,QACjB,OAAO,KAAK,gBAAgB,IAAI,EAAE,IAAI,EAAE,SAAS,aAAa,QAChE;;;;;;;;;CAUH,6BAA6B,QAAsC;AACjE,SAAO,KAAK,2BAA2B,IAAI,OAAO,oBAAI,IAAI,KAAK;;;;;;;;CASjE,AAAQ,qCAAqC,QAAsC;EACjF,IAAI,SAAS,KAAK,2BAA2B,IAAI,OAAO;AACxD,MAAI,CAAC,QAAQ;AACX,4BAAS,IAAI,KAAK;AAClB,QAAK,2BAA2B,IAAI,QAAQ,OAAO;AAKnD,OACE,KAAK,0BAA0B,KAC/B,KAAK,2BAA2B,OAAO,KAAK,yBAC5C;IACA,MAAM,SAAS,KAAK,2BAA2B,MAAM,CAAC,MAAM,CAAC;AAC7D,QAAI,WAAW,OACb,MAAK,2BAA2B,OAAO,OAAO;;;AAIpD,SAAO;;CAGT,qBAAqB,SAAkB,SAAS,iBAAyB;AACvE,SAAO,KAAK,6BAA6B,OAAO,CAAC,IAAI,QAAQ,IAAI;;CAGnE,2BACE,SACA,aACA,SAAS,iBACH;EACN,MAAM,SAAS,KAAK,qCAAqC,OAAO;AAChE,SAAO,IAAI,UAAU,OAAO,IAAI,QAAQ,IAAI,KAAK,EAAE;AAEnD,MAAI,QAAQ,MAAM,kBAAkB,UAAa,YAC/C,MAAK,MAAM,WAAW,aAAa;AACjC,OAAI,YAAY,QAAS;AACzB,OAAI,QAAQ,MAAM,kBAAkB,OAAW;AAC/C,OAAI,mBAAmB,QAAQ,OAAO,QAAQ,MAAM,CAClD,QAAO,IAAI,UAAU,OAAO,IAAI,QAAQ,IAAI,KAAK,EAAE;;;CAM3D,iBAAiB,QAAuB;AACtC,MAAI,WAAW,OACb,MAAK,2BAA2B,OAAO,OAAO;MAE9C,MAAK,2BAA2B,OAAO;;;;;;;;;CAW3C,eAAqB;AACnB,OAAK,UAAU,EAAE;;CAGnB,QAAc;AACZ,OAAK,UAAU,EAAE;AACjB,OAAK,2BAA2B,OAAO;;CAGzC,IAAI,OAAe;AACjB,SAAO,KAAK,QAAQ"}
+{"version":3,"file":"journal.js","names":[],"sources":["../src/journal.ts"],"sourcesContent":["import { generateId } from \"./helpers.js\";\nimport type {\n  ChatCompletionRequest,\n  Fixture,\n  FixtureMatch,\n  JournalBody,\n  JournalEntry,\n  MisbehaviorCounterKey,\n  MisbehaviorCounters,\n} from \"./types.js\";\nimport { DEFAULT_TEST_ID } from \"./constants.js\";\nexport { DEFAULT_TEST_ID } from \"./constants.js\";\n\n/**\n * Maximum UTF-8 byte length of a serialized request body retained in a\n * journal entry. Bodies whose JSON serialization exceeds this byte size are\n * replaced with a truncation marker.\n *\n * Only the request `body` field is capped here. `headers` and `path` are\n * retained uncapped, but they are naturally bounded by Node's default ~16 KB\n * maximum HTTP header size, so the per-entry overhead beyond the body cap\n * remains small. Combined with the journal's maxEntries limit (default 1000),\n * the total `JSON.stringify(journal.getAll())` output stays well under V8's\n * ~512 MB string limit even at maximum capacity.\n */\nconst JOURNAL_BODY_CAP_BYTES = 64 * 1024; // 64 KB\n\n/**\n * If `body` serializes to more than JOURNAL_BODY_CAP_BYTES (in UTF-8 bytes),\n * replace it with a truncation marker. Returns the original body when within\n * the cap, or null when `body` is null.\n *\n * The gate uses Buffer.byteLength (UTF-8 bytes) rather than .length (UTF-16\n * code units) to match the constant name and to correctly cap multibyte\n * content (e.g. CJK/emoji) whose code-unit count falls under the threshold\n * but whose byte size does not.\n */\nfunction capBody(body: JournalBody | null): JournalBody | null {\n  if (body === null) return null;\n  const serialized = JSON.stringify(body);\n  if (Buffer.byteLength(serialized, \"utf8\") <= JOURNAL_BODY_CAP_BYTES) return body;\n  // The marker is not a chat request, and `JournalBody` no longer claims it is\n  // — downstream consumers (e.g. GET /journal) treat the body as opaque JSON.\n  return {\n    __aimock_truncated: true,\n    originalByteSize: Buffer.byteLength(serialized, \"utf8\"),\n    note: \"body truncated by aimock journal cap (64 KB limit)\",\n  };\n}\n\n/**\n * Narrow a journaled body to a chat-completion request.\n *\n * `JournalEntry.body` is a union (see {@link JournalBody}): most entries hold a\n * chat request, but the fine-tuning create payload and this module's own\n * truncation marker do not. Anything reading `messages`, `model` or the rest of\n * the chat shape off a journal entry — inside aimock or in a consumer's test\n * — goes through here, so an entry that is not a chat request fails as a\n * `false` it can assert on rather than as an undefined property three accesses\n * later.\n *\n * `messages` is the discriminator because it is the one required field no\n * other journaled shape carries.\n */\nexport function isChatCompletionBody(\n  body: JournalBody | null | undefined,\n): body is ChatCompletionRequest {\n  return (\n    body !== null &&\n    body !== undefined &&\n    Array.isArray((body as { messages?: unknown }).messages) &&\n    typeof (body as { model?: unknown }).model === \"string\"\n  );\n}\n\n/**\n * Compare two field values, handling RegExp by source+flags rather than reference.\n */\nfunction fieldEqual(a: unknown, b: unknown): boolean {\n  if (a instanceof RegExp && b instanceof RegExp)\n    return a.source === b.source && a.flags === b.flags;\n  return a === b;\n}\n\n/**\n * Compare two systemMessage values. Handles string, string[], and RegExp.\n * Both-undefined is treated as equal.\n */\nfunction systemMessageEqual(\n  a: string | string[] | RegExp | undefined,\n  b: string | string[] | RegExp | undefined,\n): boolean {\n  if (a === undefined && b === undefined) return true;\n  if (a === undefined || b === undefined) return false;\n  if (typeof a === \"string\" && typeof b === \"string\") return a === b;\n  if (Array.isArray(a) && Array.isArray(b))\n    return a.length === b.length && a.every((v, i) => v === b[i]);\n  if (a instanceof RegExp && b instanceof RegExp)\n    return a.source === b.source && a.flags === b.flags;\n  return false;\n}\n\n/**\n * Check whether two fixture match objects have the same criteria\n * (ignoring sequenceIndex). Used to group sequenced fixtures.\n */\nfunction matchCriteriaEqual(a: FixtureMatch, b: FixtureMatch): boolean {\n  return (\n    fieldEqual(a.userMessage, b.userMessage) &&\n    systemMessageEqual(a.systemMessage, b.systemMessage) &&\n    fieldEqual(a.inputText, b.inputText) &&\n    fieldEqual(a.toolCallId, b.toolCallId) &&\n    fieldEqual(a.toolName, b.toolName) &&\n    fieldEqual(a.toolNamespace, b.toolNamespace) &&\n    fieldEqual(a.model, b.model) &&\n    fieldEqual(a.responseFormat, b.responseFormat) &&\n    fieldEqual(a.predicate, b.predicate) &&\n    fieldEqual(a.endpoint, b.endpoint) &&\n    fieldEqual(a.turnIndex, b.turnIndex) &&\n    fieldEqual(a.hasToolResult, b.hasToolResult) &&\n    fieldEqual(a.toolResultContains, b.toolResultContains) &&\n    fieldEqual(a.context, b.context)\n  );\n}\n\n/** Count-map keys resolve through `identity`, so every alias of a fixture finds its caller entry. */\nclass FixtureCountMap extends Map<Fixture, number> {\n  constructor(private readonly identity: (fixture: Fixture) => Fixture) {\n    super();\n  }\n\n  override get(key: Fixture): number | undefined {\n    return super.get(this.identity(key));\n  }\n\n  override has(key: Fixture): boolean {\n    return super.has(this.identity(key));\n  }\n\n  override set(key: Fixture, value: number): this {\n    return super.set(this.identity(key), value);\n  }\n\n  override delete(key: Fixture): boolean {\n    return super.delete(this.identity(key));\n  }\n}\n\nexport interface JournalOptions {\n  /**\n   * Maximum number of entries to retain. When exceeded, oldest entries are\n   * dropped FIFO. Set to 0 (or omit) for unbounded retention (the historical\n   * default — suitable for short-lived test runs only). Negative values are\n   * rejected at the CLI parse layer; programmatically they are treated as 0\n   * (unbounded) for back-compat.\n   *\n   * Long-running servers (e.g. mock proxies in CI/demo environments) should\n   * always set a finite cap: every request appends an entry holding the\n   * request body + headers + fixture reference, and without a cap the\n   * journal grows until the process OOMs.\n   */\n  maxEntries?: number;\n  /**\n   * Maximum number of unique testIds retained across fixture match-count\n   * and misbehavior counters. When exceeded, the oldest testId\n   * (by first-insertion order) is evicted FIFO. Set to 0 (or omit) for\n   * unbounded retention. Negative values are rejected at the CLI parse\n   * layer; programmatically they are treated as 0 (unbounded) for\n   * back-compat. Without a cap this map can grow over time in long-running\n   * servers that see many unique testIds.\n   */\n  fixtureCountsMaxTestIds?: number;\n  /**\n   * Called with every entry {@link Journal.add} creates, right after it is\n   * recorded. The hook exists so an embedder can attribute an entry to the\n   * request that produced it WITHOUT touching each of the ~100 `journal.add`\n   * call sites spread across the handler modules: the server binds the entry\n   * to the in-flight `IncomingMessage` here, and its error arm then amends\n   * that exact object rather than guessing from a caller-supplied header.\n   *\n   * The entry is already recorded when the hook runs, so a hook that throws\n   * does not lose the write — but it does propagate out of `add` into the\n   * caller's error path, so a hook must not throw.\n   */\n  onAdd?: (entry: JournalEntry) => void;\n}\n\nexport class Journal implements MisbehaviorCounters {\n  private entries: JournalEntry[] = [];\n  private readonly matchedFixtures = new WeakMap<JournalEntry, Fixture>();\n  /** The fixture a request was served from, where the entry names its caller fixture instead. */\n  private readonly servedFixtures = new WeakMap<JournalEntry, Fixture>();\n  private readonly fixtureMatchCountsByTestId: Map<string, Map<Fixture, number>> = new Map();\n  /** An extended server's view of a fixture to the caller's fixture (configureFixtureViewSource). */\n  private fixtureViewSource = (fixture: Fixture): Fixture => fixture;\n  private fixtureCountIdentity = (fixture: Fixture): Fixture => fixture;\n  /** The key a fixture is counted under: the caller's object behind any view or copy. */\n  private readonly fixtureCountKey = (fixture: Fixture): Fixture =>\n    this.fixtureCountIdentity(this.fixtureViewSource(fixture));\n  private createFixtureCountMap = (): Map<Fixture, number> => new Map();\n  private fixtureCountIdentityConfigured = false;\n  private fixtureViewSourceConfigured = false;\n  private readonly counterTestIds = new Set<string>();\n  private readonly misbehaviorCountersByTestId = new Map<\n    string,\n    Map<string, Map<number, { ordinal: number; firings: number }>>\n  >();\n  private readonly maxEntries: number;\n  private readonly fixtureCountsMaxTestIds: number;\n  private readonly onAdd?: (entry: JournalEntry) => void;\n\n  constructor(options: JournalOptions = {}) {\n    this.onAdd = options.onAdd;\n    // Treat 0 or negative as \"unbounded\" to preserve prior behavior when\n    // the option is omitted or explicitly disabled.\n    const cap = options.maxEntries;\n    this.maxEntries = cap !== undefined && cap > 0 ? cap : 0;\n    const testIdCap = options.fixtureCountsMaxTestIds;\n    this.fixtureCountsMaxTestIds = testIdCap !== undefined && testIdCap > 0 ? testIdCap : 0;\n  }\n\n  /**\n   * The per-test-id cap on fixture match-count maps, for an MCP mount to pass\n   * to `McpFakeStore.setMaxTestIds`. Always a non-negative safe integer, `0`\n   * meaning unbounded, and never throws, whatever option was passed:\n   * omitted, zero, negative or `NaN` is `0`; `Infinity` or a value above\n   * `Number.MAX_SAFE_INTEGER` (never reached) is `0`; a fraction of 1 or more\n   * is rounded down (`1.5` evicts at 2 ids, so it keeps 1). For these values\n   * it is the number of test ids the journal keeps.\n   *\n   * An option between 0 and 1 is the exception. The journal keeps no test id\n   * (each new count map is evicted as soon as it is made, so counts never\n   * advance), and a store cap cannot say \"keep none\" because `0` is\n   * unbounded. The getter returns `1`, the smallest bounded cap, so a store\n   * given it keeps 1 test id where the journal keeps 0.\n   */\n  get fixtureCountsMaxTestIdsCap(): number {\n    const cap = this.fixtureCountsMaxTestIds;\n    if (!(cap > 0) || cap > Number.MAX_SAFE_INTEGER) return 0;\n    return Math.max(1, Math.floor(cap));\n  }\n\n  /** Backwards-compatible accessor — returns the default (no testId) count map. */\n  get fixtureMatchCounts(): Map<Fixture, number> {\n    return this.getFixtureMatchCountsForTest(DEFAULT_TEST_ID);\n  }\n\n  /** @internal matchedFixture preserves identity when Live supplies safe diagnostics. */\n  add(entry: Omit<JournalEntry, \"id\" | \"timestamp\">, matchedFixture?: Fixture): JournalEntry {\n    const full: JournalEntry = {\n      id: generateId(\"req\"),\n      timestamp: Date.now(),\n      ...entry,\n      body: capBody(entry.body),\n    };\n    // A request is served from an extended server's view of a fixture, or\n    // from LLMock's per-addition copy with misbehavior enabled; the entry\n    // names the caller's fixture behind it, as in 1.44.0.\n    const fixture = full.response.fixture;\n    const source = fixture ? this.fixtureCountKey(fixture) : fixture;\n    if (fixture && source !== fixture) {\n      full.response = { ...full.response, fixture: source };\n      this.servedFixtures.set(full, fixture);\n    }\n    if (matchedFixture) this.matchedFixtures.set(full, this.fixtureCountKey(matchedFixture));\n    this.entries.push(full);\n    // FIFO eviction when over capacity. Array.prototype.shift() is O(n)\n    // regardless of how many we drop per add; we accept it at small caps\n    // (default 1000) because the constant factor is tiny and this runs once\n    // per request. For much larger caps, switch to a ring buffer for true\n    // O(1) eviction.\n    if (this.maxEntries > 0 && this.entries.length > this.maxEntries) {\n      this.entries.shift();\n    }\n    this.onAdd?.(full);\n    return full;\n  }\n\n  /**\n   * Return every entry, or with `limit` the most recent `limit` entries.\n   * `0` returns `[]` — exactly what `GET /__aimock/journal?limit=0` answers.\n   * `slice(-0)` is `slice(0)`, so a `0` used to return the ENTIRE journal; it\n   * is special-cased so the library and the HTTP route agree. This is a public\n   * library API, so odd limits are tolerated rather than thrown on: a\n   * non-finite limit (`NaN`, `Infinity`) means \"no limit\", a fractional limit\n   * floors, and any limit at or below `0` asks for nothing.\n   */\n  getAll(opts?: { limit?: number }): JournalEntry[] {\n    if (opts?.limit !== undefined && Number.isFinite(opts.limit)) {\n      const limit = Math.floor(opts.limit);\n      if (limit <= 0) return [];\n      return this.entries.slice(-limit);\n    }\n    return this.entries.slice();\n  }\n\n  getLast(): JournalEntry | null {\n    return this.entries.length > 0 ? this.entries[this.entries.length - 1] : null;\n  }\n\n  findByFixture(fixture: Fixture): JournalEntry[] {\n    const key = this.fixtureCountKey(fixture);\n    return this.entries.filter((e) => (this.matchedFixtures.get(e) ?? e.response.fixture) === key);\n  }\n\n  /**\n   * @internal The fixture `entry`'s request was served from: the extended\n   * view or the per-addition copy when the entry names the caller's fixture\n   * behind it, otherwise `entry.response.fixture`. The journal JSON shows it.\n   */\n  servedFixture(entry: JournalEntry): Fixture | null {\n    return this.servedFixtures.get(entry) ?? entry.response.fixture;\n  }\n\n  /**\n   * READ-ONLY accessor. Returns the existing count map for `testId`, or an\n   * empty transient Map if none exists. Does NOT insert into the cache and\n   * does NOT trigger FIFO eviction — callers may read freely without\n   * perturbing cache state. For the write path, see\n   * `getOrCreateFixtureMatchCountsForTest`.\n   */\n  getFixtureMatchCountsForTest(testId: string): Map<Fixture, number> {\n    return this.fixtureMatchCountsByTestId.get(testId) ?? this.createFixtureCountMap();\n  }\n\n  /**\n   * WRITE path: get the count map for `testId`, inserting a fresh empty Map\n   * if missing and running FIFO eviction when the testId cap is exceeded.\n   * Only callers that intend to mutate the map (e.g. incrementing a count)\n   * should use this.\n   */\n  private getOrCreateFixtureMatchCountsForTest(testId: string): Map<Fixture, number> {\n    let counts = this.fixtureMatchCountsByTestId.get(testId);\n    if (!counts) {\n      counts = this.createFixtureCountMap();\n      this.fixtureMatchCountsByTestId.set(testId, counts);\n      this.admitCounterTestId(testId);\n    }\n    return counts;\n  }\n\n  /** Match and fault mutations share one admission order and capacity. */\n  private admitCounterTestId(testId: string): void {\n    this.counterTestIds.add(testId);\n    if (\n      this.fixtureCountsMaxTestIds > 0 &&\n      this.counterTestIds.size > this.fixtureCountsMaxTestIds\n    ) {\n      const oldest = this.counterTestIds.values().next().value;\n      if (oldest !== undefined) {\n        this.counterTestIds.delete(oldest);\n        this.fixtureMatchCountsByTestId.delete(oldest);\n        this.misbehaviorCountersByTestId.delete(oldest);\n      }\n    }\n  }\n\n  private getOrCreateMisbehaviorCounter(key: MisbehaviorCounterKey) {\n    let sources = this.misbehaviorCountersByTestId.get(key.testId);\n    if (!sources) {\n      sources = new Map();\n      this.misbehaviorCountersByTestId.set(key.testId, sources);\n      this.admitCounterTestId(key.testId);\n    }\n    let entries = sources.get(key.sourceKey);\n    if (!entries) {\n      entries = new Map();\n      sources.set(key.sourceKey, entries);\n    }\n    let counter = entries.get(key.entryIndex);\n    if (!counter) {\n      counter = { ordinal: 0, firings: 0 };\n      entries.set(key.entryIndex, counter);\n    }\n    return counter;\n  }\n\n  getFiringCount(key: MisbehaviorCounterKey): number {\n    return (\n      this.misbehaviorCountersByTestId.get(key.testId)?.get(key.sourceKey)?.get(key.entryIndex)\n        ?.firings ?? 0\n    );\n  }\n\n  nextOrdinal(key: MisbehaviorCounterKey): number {\n    return this.getOrCreateMisbehaviorCounter(key).ordinal++;\n  }\n\n  recordFiring(key: MisbehaviorCounterKey): void {\n    this.getOrCreateMisbehaviorCounter(key).firings++;\n  }\n\n  clearMisbehaviorCounters(testId?: string): void {\n    if (testId !== undefined) {\n      this.misbehaviorCountersByTestId.delete(testId);\n      if (!this.fixtureMatchCountsByTestId.has(testId)) this.counterTestIds.delete(testId);\n    } else {\n      this.misbehaviorCountersByTestId.clear();\n      for (const id of this.counterTestIds) {\n        if (!this.fixtureMatchCountsByTestId.has(id)) this.counterTestIds.delete(id);\n      }\n    }\n  }\n\n  /** @internal LLMock configures caller count identity before serving requests. */\n  configureFixtureCountIdentity(identity: (fixture: Fixture) => Fixture): void {\n    if (this.fixtureCountIdentityConfigured || this.fixtureMatchCountsByTestId.size > 0) {\n      throw new Error(\"Fixture count identity must be configured once before counting\");\n    }\n    this.fixtureCountIdentity = identity;\n    this.createFixtureCountMap = () => new FixtureCountMap(this.fixtureCountKey);\n    this.fixtureCountIdentityConfigured = true;\n  }\n\n  /**\n   * @internal A server with `responsesTools: \"extended\"` matches each fixture\n   * through its extended view. `source` maps a view back to the caller's\n   * fixture, so counts, `findByFixture` and `JournalEntry.response.fixture`\n   * keep the caller's object. Configured once, before counting.\n   */\n  configureFixtureViewSource(source: (fixture: Fixture) => Fixture): void {\n    if (this.fixtureViewSourceConfigured || this.fixtureMatchCountsByTestId.size > 0) {\n      throw new Error(\"Fixture view source must be configured once before counting\");\n    }\n    this.fixtureViewSource = source;\n    this.createFixtureCountMap = () => new FixtureCountMap(this.fixtureCountKey);\n    this.fixtureViewSourceConfigured = true;\n  }\n\n  getFixtureMatchCount(fixture: Fixture, testId = DEFAULT_TEST_ID): number {\n    return this.getFixtureMatchCountsForTest(testId).get(fixture) ?? 0;\n  }\n\n  incrementFixtureMatchCount(\n    fixture: Fixture,\n    allFixtures?: readonly Fixture[],\n    testId = DEFAULT_TEST_ID,\n  ): void {\n    const counts = this.getOrCreateFixtureMatchCountsForTest(testId);\n    counts.set(fixture, (counts.get(fixture) ?? 0) + 1);\n    // When a sequenced fixture matches, also increment all siblings with matching criteria\n    if (fixture.match.sequenceIndex !== undefined && allFixtures) {\n      for (const sibling of allFixtures) {\n        if (this.fixtureCountKey(sibling) === this.fixtureCountKey(fixture)) continue;\n        if (sibling.match.sequenceIndex === undefined) continue;\n        if (matchCriteriaEqual(fixture.match, sibling.match)) {\n          counts.set(sibling, (counts.get(sibling) ?? 0) + 1);\n        }\n      }\n    }\n  }\n\n  clearMatchCounts(testId?: string): void {\n    if (testId !== undefined) {\n      this.fixtureMatchCountsByTestId.delete(testId);\n      this.clearMisbehaviorCounters(testId);\n    } else {\n      this.fixtureMatchCountsByTestId.clear();\n      this.clearMisbehaviorCounters();\n    }\n  }\n\n  /**\n   * Clear ONLY the request journal entries, preserving fixture match-counts.\n   * Match-counts are fixture-matching/sequencing state, not journal data, so\n   * clearing the journal must not silently rewind sequenced fixtures. Used by\n   * `POST /__aimock/reset/journal`. For a full reset (entries + match-counts),\n   * use `clear()` instead.\n   */\n  clearEntries(): void {\n    this.entries = [];\n  }\n\n  clear(): void {\n    this.entries = [];\n    this.clearMatchCounts();\n  }\n\n  get size(): number {\n    return this.entries.length;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAyBA,MAAM,yBAAyB,KAAK;;;;;;;;;;;AAYpC,SAAS,QAAQ,MAA8C;AAC7D,KAAI,SAAS,KAAM,QAAO;CAC1B,MAAM,aAAa,KAAK,UAAU,KAAK;AACvC,KAAI,OAAO,WAAW,YAAY,OAAO,IAAI,uBAAwB,QAAO;AAG5E,QAAO;EACL,oBAAoB;EACpB,kBAAkB,OAAO,WAAW,YAAY,OAAO;EACvD,MAAM;EACP;;;;;;;;;;;;;;;;AAiBH,SAAgB,qBACd,MAC+B;AAC/B,QACE,SAAS,QACT,SAAS,UACT,MAAM,QAAS,KAAgC,SAAS,IACxD,OAAQ,KAA6B,UAAU;;;;;AAOnD,SAAS,WAAW,GAAY,GAAqB;AACnD,KAAI,aAAa,UAAU,aAAa,OACtC,QAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE;AAChD,QAAO,MAAM;;;;;;AAOf,SAAS,mBACP,GACA,GACS;AACT,KAAI,MAAM,UAAa,MAAM,OAAW,QAAO;AAC/C,KAAI,MAAM,UAAa,MAAM,OAAW,QAAO;AAC/C,KAAI,OAAO,MAAM,YAAY,OAAO,MAAM,SAAU,QAAO,MAAM;AACjE,KAAI,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ,EAAE,CACtC,QAAO,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,GAAG,MAAM,MAAM,EAAE,GAAG;AAC/D,KAAI,aAAa,UAAU,aAAa,OACtC,QAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE;AAChD,QAAO;;;;;;AAOT,SAAS,mBAAmB,GAAiB,GAA0B;AACrE,QACE,WAAW,EAAE,aAAa,EAAE,YAAY,IACxC,mBAAmB,EAAE,eAAe,EAAE,cAAc,IACpD,WAAW,EAAE,WAAW,EAAE,UAAU,IACpC,WAAW,EAAE,YAAY,EAAE,WAAW,IACtC,WAAW,EAAE,UAAU,EAAE,SAAS,IAClC,WAAW,EAAE,eAAe,EAAE,cAAc,IAC5C,WAAW,EAAE,OAAO,EAAE,MAAM,IAC5B,WAAW,EAAE,gBAAgB,EAAE,eAAe,IAC9C,WAAW,EAAE,WAAW,EAAE,UAAU,IACpC,WAAW,EAAE,UAAU,EAAE,SAAS,IAClC,WAAW,EAAE,WAAW,EAAE,UAAU,IACpC,WAAW,EAAE,eAAe,EAAE,cAAc,IAC5C,WAAW,EAAE,oBAAoB,EAAE,mBAAmB,IACtD,WAAW,EAAE,SAAS,EAAE,QAAQ;;;AAKpC,IAAM,kBAAN,cAA8B,IAAqB;CACjD,YAAY,AAAiB,UAAyC;AACpE,SAAO;EADoB;;CAI7B,AAAS,IAAI,KAAkC;AAC7C,SAAO,MAAM,IAAI,KAAK,SAAS,IAAI,CAAC;;CAGtC,AAAS,IAAI,KAAuB;AAClC,SAAO,MAAM,IAAI,KAAK,SAAS,IAAI,CAAC;;CAGtC,AAAS,IAAI,KAAc,OAAqB;AAC9C,SAAO,MAAM,IAAI,KAAK,SAAS,IAAI,EAAE,MAAM;;CAG7C,AAAS,OAAO,KAAuB;AACrC,SAAO,MAAM,OAAO,KAAK,SAAS,IAAI,CAAC;;;AA2C3C,IAAa,UAAb,MAAoD;CAClD,AAAQ,UAA0B,EAAE;CACpC,AAAiB,kCAAkB,IAAI,SAAgC;;CAEvE,AAAiB,iCAAiB,IAAI,SAAgC;CACtE,AAAiB,6CAAgE,IAAI,KAAK;;CAE1F,AAAQ,qBAAqB,YAA8B;CAC3D,AAAQ,wBAAwB,YAA8B;;CAE9D,AAAiB,mBAAmB,YAClC,KAAK,qBAAqB,KAAK,kBAAkB,QAAQ,CAAC;CAC5D,AAAQ,8CAAoD,IAAI,KAAK;CACrE,AAAQ,iCAAiC;CACzC,AAAQ,8BAA8B;CACtC,AAAiB,iCAAiB,IAAI,KAAa;CACnD,AAAiB,8CAA8B,IAAI,KAGhD;CACH,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAEjB,YAAY,UAA0B,EAAE,EAAE;AACxC,OAAK,QAAQ,QAAQ;EAGrB,MAAM,MAAM,QAAQ;AACpB,OAAK,aAAa,QAAQ,UAAa,MAAM,IAAI,MAAM;EACvD,MAAM,YAAY,QAAQ;AAC1B,OAAK,0BAA0B,cAAc,UAAa,YAAY,IAAI,YAAY;;;;;;;;;;;;;;;;;CAkBxF,IAAI,6BAAqC;EACvC,MAAM,MAAM,KAAK;AACjB,MAAI,EAAE,MAAM,MAAM,MAAM,OAAO,iBAAkB,QAAO;AACxD,SAAO,KAAK,IAAI,GAAG,KAAK,MAAM,IAAI,CAAC;;;CAIrC,IAAI,qBAA2C;AAC7C,SAAO,KAAK,6BAA6B,gBAAgB;;;CAI3D,IAAI,OAA+C,gBAAwC;EACzF,MAAM,OAAqB;GACzB,IAAI,WAAW,MAAM;GACrB,WAAW,KAAK,KAAK;GACrB,GAAG;GACH,MAAM,QAAQ,MAAM,KAAK;GAC1B;EAID,MAAM,UAAU,KAAK,SAAS;EAC9B,MAAM,SAAS,UAAU,KAAK,gBAAgB,QAAQ,GAAG;AACzD,MAAI,WAAW,WAAW,SAAS;AACjC,QAAK,WAAW;IAAE,GAAG,KAAK;IAAU,SAAS;IAAQ;AACrD,QAAK,eAAe,IAAI,MAAM,QAAQ;;AAExC,MAAI,eAAgB,MAAK,gBAAgB,IAAI,MAAM,KAAK,gBAAgB,eAAe,CAAC;AACxF,OAAK,QAAQ,KAAK,KAAK;AAMvB,MAAI,KAAK,aAAa,KAAK,KAAK,QAAQ,SAAS,KAAK,WACpD,MAAK,QAAQ,OAAO;AAEtB,OAAK,QAAQ,KAAK;AAClB,SAAO;;;;;;;;;;;CAYT,OAAO,MAA2C;AAChD,MAAI,MAAM,UAAU,UAAa,OAAO,SAAS,KAAK,MAAM,EAAE;GAC5D,MAAM,QAAQ,KAAK,MAAM,KAAK,MAAM;AACpC,OAAI,SAAS,EAAG,QAAO,EAAE;AACzB,UAAO,KAAK,QAAQ,MAAM,CAAC,MAAM;;AAEnC,SAAO,KAAK,QAAQ,OAAO;;CAG7B,UAA+B;AAC7B,SAAO,KAAK,QAAQ,SAAS,IAAI,KAAK,QAAQ,KAAK,QAAQ,SAAS,KAAK;;CAG3E,cAAc,SAAkC;EAC9C,MAAM,MAAM,KAAK,gBAAgB,QAAQ;AACzC,SAAO,KAAK,QAAQ,QAAQ,OAAO,KAAK,gBAAgB,IAAI,EAAE,IAAI,EAAE,SAAS,aAAa,IAAI;;;;;;;CAQhG,cAAc,OAAqC;AACjD,SAAO,KAAK,eAAe,IAAI,MAAM,IAAI,MAAM,SAAS;;;;;;;;;CAU1D,6BAA6B,QAAsC;AACjE,SAAO,KAAK,2BAA2B,IAAI,OAAO,IAAI,KAAK,uBAAuB;;;;;;;;CASpF,AAAQ,qCAAqC,QAAsC;EACjF,IAAI,SAAS,KAAK,2BAA2B,IAAI,OAAO;AACxD,MAAI,CAAC,QAAQ;AACX,YAAS,KAAK,uBAAuB;AACrC,QAAK,2BAA2B,IAAI,QAAQ,OAAO;AACnD,QAAK,mBAAmB,OAAO;;AAEjC,SAAO;;;CAIT,AAAQ,mBAAmB,QAAsB;AAC/C,OAAK,eAAe,IAAI,OAAO;AAC/B,MACE,KAAK,0BAA0B,KAC/B,KAAK,eAAe,OAAO,KAAK,yBAChC;GACA,MAAM,SAAS,KAAK,eAAe,QAAQ,CAAC,MAAM,CAAC;AACnD,OAAI,WAAW,QAAW;AACxB,SAAK,eAAe,OAAO,OAAO;AAClC,SAAK,2BAA2B,OAAO,OAAO;AAC9C,SAAK,4BAA4B,OAAO,OAAO;;;;CAKrD,AAAQ,8BAA8B,KAA4B;EAChE,IAAI,UAAU,KAAK,4BAA4B,IAAI,IAAI,OAAO;AAC9D,MAAI,CAAC,SAAS;AACZ,6BAAU,IAAI,KAAK;AACnB,QAAK,4BAA4B,IAAI,IAAI,QAAQ,QAAQ;AACzD,QAAK,mBAAmB,IAAI,OAAO;;EAErC,IAAI,UAAU,QAAQ,IAAI,IAAI,UAAU;AACxC,MAAI,CAAC,SAAS;AACZ,6BAAU,IAAI,KAAK;AACnB,WAAQ,IAAI,IAAI,WAAW,QAAQ;;EAErC,IAAI,UAAU,QAAQ,IAAI,IAAI,WAAW;AACzC,MAAI,CAAC,SAAS;AACZ,aAAU;IAAE,SAAS;IAAG,SAAS;IAAG;AACpC,WAAQ,IAAI,IAAI,YAAY,QAAQ;;AAEtC,SAAO;;CAGT,eAAe,KAAoC;AACjD,SACE,KAAK,4BAA4B,IAAI,IAAI,OAAO,EAAE,IAAI,IAAI,UAAU,EAAE,IAAI,IAAI,WAAW,EACrF,WAAW;;CAInB,YAAY,KAAoC;AAC9C,SAAO,KAAK,8BAA8B,IAAI,CAAC;;CAGjD,aAAa,KAAkC;AAC7C,OAAK,8BAA8B,IAAI,CAAC;;CAG1C,yBAAyB,QAAuB;AAC9C,MAAI,WAAW,QAAW;AACxB,QAAK,4BAA4B,OAAO,OAAO;AAC/C,OAAI,CAAC,KAAK,2BAA2B,IAAI,OAAO,CAAE,MAAK,eAAe,OAAO,OAAO;SAC/E;AACL,QAAK,4BAA4B,OAAO;AACxC,QAAK,MAAM,MAAM,KAAK,eACpB,KAAI,CAAC,KAAK,2BAA2B,IAAI,GAAG,CAAE,MAAK,eAAe,OAAO,GAAG;;;;CAMlF,8BAA8B,UAA+C;AAC3E,MAAI,KAAK,kCAAkC,KAAK,2BAA2B,OAAO,EAChF,OAAM,IAAI,MAAM,iEAAiE;AAEnF,OAAK,uBAAuB;AAC5B,OAAK,8BAA8B,IAAI,gBAAgB,KAAK,gBAAgB;AAC5E,OAAK,iCAAiC;;;;;;;;CASxC,2BAA2B,QAA6C;AACtE,MAAI,KAAK,+BAA+B,KAAK,2BAA2B,OAAO,EAC7E,OAAM,IAAI,MAAM,8DAA8D;AAEhF,OAAK,oBAAoB;AACzB,OAAK,8BAA8B,IAAI,gBAAgB,KAAK,gBAAgB;AAC5E,OAAK,8BAA8B;;CAGrC,qBAAqB,SAAkB,SAAS,iBAAyB;AACvE,SAAO,KAAK,6BAA6B,OAAO,CAAC,IAAI,QAAQ,IAAI;;CAGnE,2BACE,SACA,aACA,SAAS,iBACH;EACN,MAAM,SAAS,KAAK,qCAAqC,OAAO;AAChE,SAAO,IAAI,UAAU,OAAO,IAAI,QAAQ,IAAI,KAAK,EAAE;AAEnD,MAAI,QAAQ,MAAM,kBAAkB,UAAa,YAC/C,MAAK,MAAM,WAAW,aAAa;AACjC,OAAI,KAAK,gBAAgB,QAAQ,KAAK,KAAK,gBAAgB,QAAQ,CAAE;AACrE,OAAI,QAAQ,MAAM,kBAAkB,OAAW;AAC/C,OAAI,mBAAmB,QAAQ,OAAO,QAAQ,MAAM,CAClD,QAAO,IAAI,UAAU,OAAO,IAAI,QAAQ,IAAI,KAAK,EAAE;;;CAM3D,iBAAiB,QAAuB;AACtC,MAAI,WAAW,QAAW;AACxB,QAAK,2BAA2B,OAAO,OAAO;AAC9C,QAAK,yBAAyB,OAAO;SAChC;AACL,QAAK,2BAA2B,OAAO;AACvC,QAAK,0BAA0B;;;;;;;;;;CAWnC,eAAqB;AACnB,OAAK,UAAU,EAAE;;CAGnB,QAAc;AACZ,OAAK,UAAU,EAAE;AACjB,OAAK,kBAAkB;;CAGzB,IAAI,OAAe;AACjB,SAAO,KAAK,QAAQ"}

package/dist/live-sanitize.cjs

@@ -1,4 +1,5 @@
 const require_live_fixture = require('./live-fixture.cjs');
+const require_record_sanitize = require('./record-sanitize.cjs');
 
 //#region src/live-sanitize.ts
 var LiveUnsafeExportError = class extends Error {
@@ -8,7 +9,6 @@ var LiveUnsafeExportError = class extends Error {
 		this.name = "LiveUnsafeExportError";
 	}
 };
-const credentialKey = /^(?:authorization|proxy-authorization|cookie|set-cookie|x-api-key|api[_-]?key|access[_-]?token|refresh[_-]?token|client[_-]?secret|password|secret|token|sec-websocket-protocol)$/i;
 const semanticKey = new Set([
 	"instructions",
 	"content",
@@ -37,9 +37,6 @@ const redacted = "[REDACTED]";
 function fail() {
 	throw new LiveUnsafeExportError();
 }
-function decodeUrlComponent(value) {
-	return new URLSearchParams(`value=${value.replace(/\+/g, "%2B").replace(/&/g, "%26")}`).get("value");
-}
 function escapePointer(key) {
 	return key.replace(/~/g, "~0").replace(/\//g, "~1");
 }
@@ -111,32 +108,7 @@ function sanitizeLiveTranscript(transcript, secretValues = [], credentialFields
 			setIdentifier(result.entries[binding.entry].event, binding.pointer, identity.value);
 			binding.name = identity.name;
 		}
-		function sanitizeUrl(value) {
-			if (!/^[a-z][a-z0-9+.-]*:\/\//i.test(value)) return value;
-			let url;
-			try {
-				url = new URL(value);
-			} catch {
-				return value;
-			}
-			if (hasSecret(decodeUrlComponent(url.pathname))) fail();
-			let changed = false;
-			if (url.username || url.password) {
-				url.username = "";
-				url.password = "";
-				changed = true;
-			}
-			for (const [key, val] of [...url.searchParams]) if (credentialKey.test(key) || hasSecret(key) || hasSecret(val)) {
-				url.searchParams.delete(key);
-				changed = true;
-			}
-			const decodedHash = decodeUrlComponent(url.hash);
-			if (url.hash && (hasSecret(decodedHash) || /(?:token|secret|password|api[_-]?key)=/i.test(decodedHash))) {
-				url.hash = "";
-				changed = true;
-			}
-			return changed ? url.href : value;
-		}
+		const sanitizeUrl = (v) => require_record_sanitize.scrubUrl(v, hasSecret, fail);
 		function providerMetadata(pointer) {
 			const match = /^\/entries\/(\d+)\/event\/event\/(?:response\/(?:user|prompt_cache_key|safety_identifier)|item\/encrypted_content)$/.exec(pointer);
 			if (!match) return false;
@@ -168,13 +140,13 @@ function sanitizeLiveTranscript(transcript, secretValues = [], credentialFields
 					continue;
 				}
 				const protectedBranch = semantic || semanticKey.has(key);
-				const removable = !protectedBranch && (metadata || credentialKey.test(key));
+				const removable = !protectedBranch && (metadata || require_record_sanitize.CREDENTIAL_KEY.test(key));
 				if (descriptors.has(pointer)) {
 					if (!removable) fail();
 					handled.add(pointer);
 					continue;
 				}
-				if (!semantic && credentialKey.test(key)) continue;
+				if (!semantic && require_record_sanitize.CREDENTIAL_KEY.test(key)) continue;
 				if (hasSecret(key)) {
 					if (!metadata || protectedBranch) fail();
 					continue;

package/dist/live-sanitize.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"live-sanitize.cjs","names":["validateLiveTranscript"],"sources":["../src/live-sanitize.ts"],"sourcesContent":["import { validateLiveTranscript } from \"./live-fixture.js\";\nimport type { LiveJson, LiveObject, LiveOptions, LiveTranscript } from \"./live-types.js\";\n\n/** Exact transcript-rooted pointer to an observed removable credential metadata field. */\nexport interface LiveCredentialField {\n  readonly pointer: string;\n}\n\nexport class LiveUnsafeExportError extends Error {\n  readonly category = \"unsafe-export\";\n  constructor() {\n    // Never reflect untrusted values, keys, pointers, or validation errors.\n    super(\"unsafe-export: Live transcript cannot be retained safely\");\n    this.name = \"LiveUnsafeExportError\";\n  }\n}\n\nconst credentialKey =\n  /^(?:authorization|proxy-authorization|cookie|set-cookie|x-api-key|api[_-]?key|access[_-]?token|refresh[_-]?token|client[_-]?secret|password|secret|token|sec-websocket-protocol)$/i;\n// These branches carry conversation, tool schema, or PCM semantics. A key named\n// \"authorization\" inside tool parameters is a schema property, not a header.\nconst semanticKey = new Set([\n  \"instructions\",\n  \"content\",\n  \"delta\",\n  \"audio\",\n  \"arguments\",\n  \"output\",\n  \"input\",\n  \"tools\",\n  \"parameters\",\n  \"client\",\n  \"text\",\n  \"thinking\",\n]);\nconst metadataKey = new Set([\"metadata\", \"headers\", \"diagnostics\"]);\nconst unsafeKey = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\nconst redacted = \"[REDACTED]\";\nfunction fail(): never {\n  throw new LiveUnsafeExportError();\n}\nfunction decodeUrlComponent(value: string): string {\n  // Tolerate malformed escapes while exposing encoded secrets. Protect literal\n  // form separators so the entire component remains one value.\n  return new URLSearchParams(`value=${value.replace(/\\+/g, \"%2B\").replace(/&/g, \"%26\")}`).get(\n    \"value\",\n  )!;\n}\nfunction escapePointer(key: string): string {\n  return key.replace(/~/g, \"~0\").replace(/\\//g, \"~1\");\n}\nfunction parts(pointer: string): string[] {\n  if (!pointer.startsWith(\"/\") || /~(?![01])/u.test(pointer)) fail();\n  const keys = pointer\n    .slice(1)\n    .split(\"/\")\n    .map((key) => key.replace(/~1/g, \"/\").replace(/~0/g, \"~\"));\n  if (keys.some((key) => unsafeKey.has(key))) fail();\n  return keys;\n}\nfunction child(value: LiveJson, key: string): LiveJson {\n  if (!value || typeof value !== \"object\" || !Object.hasOwn(value, key)) fail();\n  if (Array.isArray(value)) {\n    if (!/^(0|[1-9]\\d*)$/.test(key)) fail();\n    return value[Number(key)];\n  }\n  return value[key];\n}\nfunction setIdentifier(event: LiveObject, pointer: string, value: string): void {\n  const keys = parts(pointer);\n  const last = keys.pop();\n  if (last === undefined) fail();\n  let parent: LiveJson = event;\n  for (const key of keys) parent = child(parent, key);\n  if (typeof child(parent, last) !== \"string\" || !parent || typeof parent !== \"object\") fail();\n  if (Array.isArray(parent)) parent[Number(last)] = value;\n  else parent[last] = value;\n}\n\n/**\n * Sanitize a separately retained successful capture; never mutate the relay.\n * Validation supplies the reviewed identifier descriptors and causal checks.\n * Credential descriptors supplement the built-in policy, not permission to\n * delete arbitrary protocol operands. Ambiguous secret-bearing data fails closed.\n */\nexport function sanitizeLiveTranscript(\n  transcript: LiveTranscript,\n  secretValues: readonly string[] = [],\n  credentialFields: readonly LiveCredentialField[] = [],\n  validationOptions: Omit<LiveOptions, \"secretValues\"> = {},\n): LiveTranscript {\n  try {\n    const result = validateLiveTranscript(transcript, validationOptions);\n    if (!Array.isArray(secretValues) || secretValues.some((s) => typeof s !== \"string\")) fail();\n    const secrets = [...new Set(secretValues.filter((s) => s.length))].sort(\n      (a, b) => b.length - a.length,\n    );\n    const hasSecret = (value: string) => secrets.some((secret) => value.includes(secret));\n    const replaceSecrets = (value: string) => {\n      for (const secret of secrets) value = value.split(secret).join(redacted);\n      return value;\n    };\n    const descriptors = new Set(\n      credentialFields.map((field) => {\n        parts(field.pointer);\n        return field.pointer;\n      }),\n    );\n    const handled = new Set<string>();\n    // Names themselves may have been derived from provider IDs. Replace both\n    // the annotation names and only their explicitly annotated operand values.\n    const originalIds = new Set<string>();\n    for (const binding of result.bindings) {\n      let value: LiveJson = result.entries[binding.entry].event;\n      for (const key of parts(binding.pointer)) value = child(value, key);\n      if (typeof value !== \"string\") fail();\n      originalIds.add(value);\n    }\n    let nextId = 1;\n    const identities = new Map<string, { name: string; value: string }>();\n    for (const binding of result.bindings) {\n      let identity = identities.get(binding.name);\n      if (!identity) {\n        const index = identities.size + 1;\n        while (originalIds.has(`live-id-${nextId}`)) nextId++;\n        identity = { name: `binding-${index}`, value: `live-id-${nextId++}` };\n        identities.set(binding.name, identity);\n      }\n      setIdentifier(result.entries[binding.entry].event, binding.pointer, identity.value);\n      binding.name = identity.name;\n    }\n    function sanitizeUrl(value: string): string {\n      // Leave non-URLs and clean URLs byte-for-byte intact.\n      if (!/^[a-z][a-z0-9+.-]*:\\/\\//i.test(value)) return value;\n      let url: URL;\n      try {\n        url = new URL(value);\n      } catch {\n        return value;\n      }\n      // A path identifies the resource; changing it could change replay semantics.\n      if (hasSecret(decodeUrlComponent(url.pathname))) fail();\n      let changed = false;\n      if (url.username || url.password) {\n        url.username = \"\";\n        url.password = \"\";\n        changed = true;\n      }\n      for (const [key, val] of [...url.searchParams]) {\n        if (credentialKey.test(key) || hasSecret(key) || hasSecret(val)) {\n          url.searchParams.delete(key);\n          changed = true;\n        }\n      }\n      const decodedHash = decodeUrlComponent(url.hash);\n      if (\n        url.hash &&\n        (hasSecret(decodedHash) || /(?:token|secret|password|api[_-]?key)=/i.test(decodedHash))\n      ) {\n        url.hash = \"\";\n        changed = true;\n      }\n      return changed ? url.href : value;\n    }\n    function providerMetadata(pointer: string): boolean {\n      const match =\n        /^\\/entries\\/(\\d+)\\/event\\/event\\/(?:response\\/(?:user|prompt_cache_key|safety_identifier)|item\\/encrypted_content)$/.exec(\n          pointer,\n        );\n      if (!match) return false;\n      const event = result.entries[Number(match[1])].event;\n      const nested = event.event;\n      if (\n        event.type !== \"response.event\" ||\n        !nested ||\n        typeof nested !== \"object\" ||\n        Array.isArray(nested)\n      )\n        return false;\n      if (!pointer.endsWith(\"/item/encrypted_content\")) {\n        return [\"response.created\", \"response.in_progress\", \"response.completed\"].includes(\n          String(nested.type),\n        );\n      }\n      const item = nested.item;\n      return (\n        [\"response.output_item.added\", \"response.output_item.done\"].includes(String(nested.type)) &&\n        !!item &&\n        typeof item === \"object\" &&\n        !Array.isArray(item) &&\n        item.type === \"reasoning\"\n      );\n    }\n    function visit(value: LiveJson, path: string, metadata = false, semantic = false): LiveJson {\n      if (typeof value === \"string\") {\n        const url = sanitizeUrl(value);\n        if ((hasSecret(value) || url !== value) && (!metadata || semantic)) fail();\n        return metadata && !semantic ? replaceSecrets(url) : value;\n      }\n      if (Array.isArray(value))\n        return value.map((item, i) => visit(item, `${path}/${i}`, metadata, semantic));\n      if (!value || typeof value !== \"object\") return value;\n      const output: LiveObject = {};\n      for (const [key, item] of Object.entries(value)) {\n        const pointer = `${path}/${escapePointer(key)}`;\n        // Exact retained metadata sites from the reviewed v3 sanitation\n        // evidence. Never infer these by equal values or similar field names.\n        if (providerMetadata(pointer) && (typeof item === \"string\" || item === null)) {\n          if (descriptors.has(pointer)) handled.add(pointer);\n          else output[key] = typeof item === \"string\" ? redacted : item;\n          continue;\n        }\n        const protectedBranch = semantic || semanticKey.has(key);\n        const removable = !protectedBranch && (metadata || credentialKey.test(key));\n        if (descriptors.has(pointer)) {\n          if (!removable) fail();\n          handled.add(pointer);\n          continue;\n        }\n        if (!semantic && credentialKey.test(key)) continue;\n        if (hasSecret(key)) {\n          if (!metadata || protectedBranch) fail();\n          continue;\n        }\n        output[key] = visit(item, pointer, metadata || metadataKey.has(key), protectedBranch);\n      }\n      return output;\n    }\n    // Validation clones all bounded JSON, including unknown metadata. Preserve\n    // those fields, then validate again to catch any semantic deletion.\n    const cleaned = visit(result as LiveTranscript & LiveObject, \"\");\n    if (handled.size !== descriptors.size || hasSecret(JSON.stringify(cleaned))) fail();\n    return validateLiveTranscript(cleaned, validationOptions);\n  } catch {\n    fail();\n  }\n}\n"],"mappings":";;;AAQA,IAAa,wBAAb,cAA2C,MAAM;CAC/C,AAAS,WAAW;CACpB,cAAc;AAEZ,QAAM,2DAA2D;AACjE,OAAK,OAAO;;;AAIhB,MAAM,gBACJ;AAGF,MAAM,cAAc,IAAI,IAAI;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AACF,MAAM,cAAc,IAAI,IAAI;CAAC;CAAY;CAAW;CAAc,CAAC;AACnE,MAAM,YAAY,IAAI,IAAI;CAAC;CAAa;CAAe;CAAY,CAAC;AACpE,MAAM,WAAW;AACjB,SAAS,OAAc;AACrB,OAAM,IAAI,uBAAuB;;AAEnC,SAAS,mBAAmB,OAAuB;AAGjD,QAAO,IAAI,gBAAgB,SAAS,MAAM,QAAQ,OAAO,MAAM,CAAC,QAAQ,MAAM,MAAM,GAAG,CAAC,IACtF,QACD;;AAEH,SAAS,cAAc,KAAqB;AAC1C,QAAO,IAAI,QAAQ,MAAM,KAAK,CAAC,QAAQ,OAAO,KAAK;;AAErD,SAAS,MAAM,SAA2B;AACxC,KAAI,CAAC,QAAQ,WAAW,IAAI,IAAI,aAAa,KAAK,QAAQ,CAAE,OAAM;CAClE,MAAM,OAAO,QACV,MAAM,EAAE,CACR,MAAM,IAAI,CACV,KAAK,QAAQ,IAAI,QAAQ,OAAO,IAAI,CAAC,QAAQ,OAAO,IAAI,CAAC;AAC5D,KAAI,KAAK,MAAM,QAAQ,UAAU,IAAI,IAAI,CAAC,CAAE,OAAM;AAClD,QAAO;;AAET,SAAS,MAAM,OAAiB,KAAuB;AACrD,KAAI,CAAC,SAAS,OAAO,UAAU,YAAY,CAAC,OAAO,OAAO,OAAO,IAAI,CAAE,OAAM;AAC7E,KAAI,MAAM,QAAQ,MAAM,EAAE;AACxB,MAAI,CAAC,iBAAiB,KAAK,IAAI,CAAE,OAAM;AACvC,SAAO,MAAM,OAAO,IAAI;;AAE1B,QAAO,MAAM;;AAEf,SAAS,cAAc,OAAmB,SAAiB,OAAqB;CAC9E,MAAM,OAAO,MAAM,QAAQ;CAC3B,MAAM,OAAO,KAAK,KAAK;AACvB,KAAI,SAAS,OAAW,OAAM;CAC9B,IAAI,SAAmB;AACvB,MAAK,MAAM,OAAO,KAAM,UAAS,MAAM,QAAQ,IAAI;AACnD,KAAI,OAAO,MAAM,QAAQ,KAAK,KAAK,YAAY,CAAC,UAAU,OAAO,WAAW,SAAU,OAAM;AAC5F,KAAI,MAAM,QAAQ,OAAO,CAAE,QAAO,OAAO,KAAK,IAAI;KAC7C,QAAO,QAAQ;;;;;;;;AAStB,SAAgB,uBACd,YACA,eAAkC,EAAE,EACpC,mBAAmD,EAAE,EACrD,oBAAuD,EAAE,EACzC;AAChB,KAAI;EACF,MAAM,SAASA,4CAAuB,YAAY,kBAAkB;AACpE,MAAI,CAAC,MAAM,QAAQ,aAAa,IAAI,aAAa,MAAM,MAAM,OAAO,MAAM,SAAS,CAAE,OAAM;EAC3F,MAAM,UAAU,CAAC,GAAG,IAAI,IAAI,aAAa,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAChE,GAAG,MAAM,EAAE,SAAS,EAAE,OACxB;EACD,MAAM,aAAa,UAAkB,QAAQ,MAAM,WAAW,MAAM,SAAS,OAAO,CAAC;EACrF,MAAM,kBAAkB,UAAkB;AACxC,QAAK,MAAM,UAAU,QAAS,SAAQ,MAAM,MAAM,OAAO,CAAC,KAAK,SAAS;AACxE,UAAO;;EAET,MAAM,cAAc,IAAI,IACtB,iBAAiB,KAAK,UAAU;AAC9B,SAAM,MAAM,QAAQ;AACpB,UAAO,MAAM;IACb,CACH;EACD,MAAM,0BAAU,IAAI,KAAa;EAGjC,MAAM,8BAAc,IAAI,KAAa;AACrC,OAAK,MAAM,WAAW,OAAO,UAAU;GACrC,IAAI,QAAkB,OAAO,QAAQ,QAAQ,OAAO;AACpD,QAAK,MAAM,OAAO,MAAM,QAAQ,QAAQ,CAAE,SAAQ,MAAM,OAAO,IAAI;AACnE,OAAI,OAAO,UAAU,SAAU,OAAM;AACrC,eAAY,IAAI,MAAM;;EAExB,IAAI,SAAS;EACb,MAAM,6BAAa,IAAI,KAA8C;AACrE,OAAK,MAAM,WAAW,OAAO,UAAU;GACrC,IAAI,WAAW,WAAW,IAAI,QAAQ,KAAK;AAC3C,OAAI,CAAC,UAAU;IACb,MAAM,QAAQ,WAAW,OAAO;AAChC,WAAO,YAAY,IAAI,WAAW,SAAS,CAAE;AAC7C,eAAW;KAAE,MAAM,WAAW;KAAS,OAAO,WAAW;KAAY;AACrE,eAAW,IAAI,QAAQ,MAAM,SAAS;;AAExC,iBAAc,OAAO,QAAQ,QAAQ,OAAO,OAAO,QAAQ,SAAS,SAAS,MAAM;AACnF,WAAQ,OAAO,SAAS;;EAE1B,SAAS,YAAY,OAAuB;AAE1C,OAAI,CAAC,2BAA2B,KAAK,MAAM,CAAE,QAAO;GACpD,IAAI;AACJ,OAAI;AACF,UAAM,IAAI,IAAI,MAAM;WACd;AACN,WAAO;;AAGT,OAAI,UAAU,mBAAmB,IAAI,SAAS,CAAC,CAAE,OAAM;GACvD,IAAI,UAAU;AACd,OAAI,IAAI,YAAY,IAAI,UAAU;AAChC,QAAI,WAAW;AACf,QAAI,WAAW;AACf,cAAU;;AAEZ,QAAK,MAAM,CAAC,KAAK,QAAQ,CAAC,GAAG,IAAI,aAAa,CAC5C,KAAI,cAAc,KAAK,IAAI,IAAI,UAAU,IAAI,IAAI,UAAU,IAAI,EAAE;AAC/D,QAAI,aAAa,OAAO,IAAI;AAC5B,cAAU;;GAGd,MAAM,cAAc,mBAAmB,IAAI,KAAK;AAChD,OACE,IAAI,SACH,UAAU,YAAY,IAAI,0CAA0C,KAAK,YAAY,GACtF;AACA,QAAI,OAAO;AACX,cAAU;;AAEZ,UAAO,UAAU,IAAI,OAAO;;EAE9B,SAAS,iBAAiB,SAA0B;GAClD,MAAM,QACJ,sHAAsH,KACpH,QACD;AACH,OAAI,CAAC,MAAO,QAAO;GACnB,MAAM,QAAQ,OAAO,QAAQ,OAAO,MAAM,GAAG,EAAE;GAC/C,MAAM,SAAS,MAAM;AACrB,OACE,MAAM,SAAS,oBACf,CAAC,UACD,OAAO,WAAW,YAClB,MAAM,QAAQ,OAAO,CAErB,QAAO;AACT,OAAI,CAAC,QAAQ,SAAS,0BAA0B,CAC9C,QAAO;IAAC;IAAoB;IAAwB;IAAqB,CAAC,SACxE,OAAO,OAAO,KAAK,CACpB;GAEH,MAAM,OAAO,OAAO;AACpB,UACE,CAAC,8BAA8B,4BAA4B,CAAC,SAAS,OAAO,OAAO,KAAK,CAAC,IACzF,CAAC,CAAC,QACF,OAAO,SAAS,YAChB,CAAC,MAAM,QAAQ,KAAK,IACpB,KAAK,SAAS;;EAGlB,SAAS,MAAM,OAAiB,MAAc,WAAW,OAAO,WAAW,OAAiB;AAC1F,OAAI,OAAO,UAAU,UAAU;IAC7B,MAAM,MAAM,YAAY,MAAM;AAC9B,SAAK,UAAU,MAAM,IAAI,QAAQ,WAAW,CAAC,YAAY,UAAW,OAAM;AAC1E,WAAO,YAAY,CAAC,WAAW,eAAe,IAAI,GAAG;;AAEvD,OAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,MAAM,KAAK,MAAM,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,KAAK,UAAU,SAAS,CAAC;AAChF,OAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;GAChD,MAAM,SAAqB,EAAE;AAC7B,QAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,MAAM,EAAE;IAC/C,MAAM,UAAU,GAAG,KAAK,GAAG,cAAc,IAAI;AAG7C,QAAI,iBAAiB,QAAQ,KAAK,OAAO,SAAS,YAAY,SAAS,OAAO;AAC5E,SAAI,YAAY,IAAI,QAAQ,CAAE,SAAQ,IAAI,QAAQ;SAC7C,QAAO,OAAO,OAAO,SAAS,WAAW,WAAW;AACzD;;IAEF,MAAM,kBAAkB,YAAY,YAAY,IAAI,IAAI;IACxD,MAAM,YAAY,CAAC,oBAAoB,YAAY,cAAc,KAAK,IAAI;AAC1E,QAAI,YAAY,IAAI,QAAQ,EAAE;AAC5B,SAAI,CAAC,UAAW,OAAM;AACtB,aAAQ,IAAI,QAAQ;AACpB;;AAEF,QAAI,CAAC,YAAY,cAAc,KAAK,IAAI,CAAE;AAC1C,QAAI,UAAU,IAAI,EAAE;AAClB,SAAI,CAAC,YAAY,gBAAiB,OAAM;AACxC;;AAEF,WAAO,OAAO,MAAM,MAAM,SAAS,YAAY,YAAY,IAAI,IAAI,EAAE,gBAAgB;;AAEvF,UAAO;;EAIT,MAAM,UAAU,MAAM,QAAuC,GAAG;AAChE,MAAI,QAAQ,SAAS,YAAY,QAAQ,UAAU,KAAK,UAAU,QAAQ,CAAC,CAAE,OAAM;AACnF,SAAOA,4CAAuB,SAAS,kBAAkB;SACnD;AACN,QAAM"}
+{"version":3,"file":"live-sanitize.cjs","names":["validateLiveTranscript","scrubUrl","credentialKey"],"sources":["../src/live-sanitize.ts"],"sourcesContent":["import { validateLiveTranscript } from \"./live-fixture.js\";\nimport { CREDENTIAL_KEY as credentialKey, scrubUrl } from \"./record-sanitize.js\";\nimport type { LiveJson, LiveObject, LiveOptions, LiveTranscript } from \"./live-types.js\";\n\n/** Exact transcript-rooted pointer to an observed removable credential metadata field. */\nexport interface LiveCredentialField {\n  readonly pointer: string;\n}\n\nexport class LiveUnsafeExportError extends Error {\n  readonly category = \"unsafe-export\";\n  constructor() {\n    // Never reflect untrusted values, keys, pointers, or validation errors.\n    super(\"unsafe-export: Live transcript cannot be retained safely\");\n    this.name = \"LiveUnsafeExportError\";\n  }\n}\n\n// These branches carry conversation, tool schema, or PCM semantics. A key named\n// \"authorization\" inside tool parameters is a schema property, not a header.\nconst semanticKey = new Set([\n  \"instructions\",\n  \"content\",\n  \"delta\",\n  \"audio\",\n  \"arguments\",\n  \"output\",\n  \"input\",\n  \"tools\",\n  \"parameters\",\n  \"client\",\n  \"text\",\n  \"thinking\",\n]);\nconst metadataKey = new Set([\"metadata\", \"headers\", \"diagnostics\"]);\nconst unsafeKey = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\nconst redacted = \"[REDACTED]\";\nfunction fail(): never {\n  throw new LiveUnsafeExportError();\n}\nfunction escapePointer(key: string): string {\n  return key.replace(/~/g, \"~0\").replace(/\\//g, \"~1\");\n}\nfunction parts(pointer: string): string[] {\n  if (!pointer.startsWith(\"/\") || /~(?![01])/u.test(pointer)) fail();\n  const keys = pointer\n    .slice(1)\n    .split(\"/\")\n    .map((key) => key.replace(/~1/g, \"/\").replace(/~0/g, \"~\"));\n  if (keys.some((key) => unsafeKey.has(key))) fail();\n  return keys;\n}\nfunction child(value: LiveJson, key: string): LiveJson {\n  if (!value || typeof value !== \"object\" || !Object.hasOwn(value, key)) fail();\n  if (Array.isArray(value)) {\n    if (!/^(0|[1-9]\\d*)$/.test(key)) fail();\n    return value[Number(key)];\n  }\n  return value[key];\n}\nfunction setIdentifier(event: LiveObject, pointer: string, value: string): void {\n  const keys = parts(pointer);\n  const last = keys.pop();\n  if (last === undefined) fail();\n  let parent: LiveJson = event;\n  for (const key of keys) parent = child(parent, key);\n  if (typeof child(parent, last) !== \"string\" || !parent || typeof parent !== \"object\") fail();\n  if (Array.isArray(parent)) parent[Number(last)] = value;\n  else parent[last] = value;\n}\n\n/**\n * Sanitize a separately retained successful capture; never mutate the relay.\n * Validation supplies the reviewed identifier descriptors and causal checks.\n * Credential descriptors supplement the built-in policy, not permission to\n * delete arbitrary protocol operands. Ambiguous secret-bearing data fails closed.\n */\nexport function sanitizeLiveTranscript(\n  transcript: LiveTranscript,\n  secretValues: readonly string[] = [],\n  credentialFields: readonly LiveCredentialField[] = [],\n  validationOptions: Omit<LiveOptions, \"secretValues\"> = {},\n): LiveTranscript {\n  try {\n    const result = validateLiveTranscript(transcript, validationOptions);\n    if (!Array.isArray(secretValues) || secretValues.some((s) => typeof s !== \"string\")) fail();\n    const secrets = [...new Set(secretValues.filter((s) => s.length))].sort(\n      (a, b) => b.length - a.length,\n    );\n    const hasSecret = (value: string) => secrets.some((secret) => value.includes(secret));\n    const replaceSecrets = (value: string) => {\n      for (const secret of secrets) value = value.split(secret).join(redacted);\n      return value;\n    };\n    const descriptors = new Set(\n      credentialFields.map((field) => {\n        parts(field.pointer);\n        return field.pointer;\n      }),\n    );\n    const handled = new Set<string>();\n    // Names themselves may have been derived from provider IDs. Replace both\n    // the annotation names and only their explicitly annotated operand values.\n    const originalIds = new Set<string>();\n    for (const binding of result.bindings) {\n      let value: LiveJson = result.entries[binding.entry].event;\n      for (const key of parts(binding.pointer)) value = child(value, key);\n      if (typeof value !== \"string\") fail();\n      originalIds.add(value);\n    }\n    let nextId = 1;\n    const identities = new Map<string, { name: string; value: string }>();\n    for (const binding of result.bindings) {\n      let identity = identities.get(binding.name);\n      if (!identity) {\n        const index = identities.size + 1;\n        while (originalIds.has(`live-id-${nextId}`)) nextId++;\n        identity = { name: `binding-${index}`, value: `live-id-${nextId++}` };\n        identities.set(binding.name, identity);\n      }\n      setIdentifier(result.entries[binding.entry].event, binding.pointer, identity.value);\n      binding.name = identity.name;\n    }\n    const sanitizeUrl = (v: string) => scrubUrl(v, hasSecret, fail);\n    function providerMetadata(pointer: string): boolean {\n      const match =\n        /^\\/entries\\/(\\d+)\\/event\\/event\\/(?:response\\/(?:user|prompt_cache_key|safety_identifier)|item\\/encrypted_content)$/.exec(\n          pointer,\n        );\n      if (!match) return false;\n      const event = result.entries[Number(match[1])].event;\n      const nested = event.event;\n      if (\n        event.type !== \"response.event\" ||\n        !nested ||\n        typeof nested !== \"object\" ||\n        Array.isArray(nested)\n      )\n        return false;\n      if (!pointer.endsWith(\"/item/encrypted_content\")) {\n        return [\"response.created\", \"response.in_progress\", \"response.completed\"].includes(\n          String(nested.type),\n        );\n      }\n      const item = nested.item;\n      return (\n        [\"response.output_item.added\", \"response.output_item.done\"].includes(String(nested.type)) &&\n        !!item &&\n        typeof item === \"object\" &&\n        !Array.isArray(item) &&\n        item.type === \"reasoning\"\n      );\n    }\n    function visit(value: LiveJson, path: string, metadata = false, semantic = false): LiveJson {\n      if (typeof value === \"string\") {\n        const url = sanitizeUrl(value);\n        if ((hasSecret(value) || url !== value) && (!metadata || semantic)) fail();\n        return metadata && !semantic ? replaceSecrets(url) : value;\n      }\n      if (Array.isArray(value))\n        return value.map((item, i) => visit(item, `${path}/${i}`, metadata, semantic));\n      if (!value || typeof value !== \"object\") return value;\n      const output: LiveObject = {};\n      for (const [key, item] of Object.entries(value)) {\n        const pointer = `${path}/${escapePointer(key)}`;\n        // Exact retained metadata sites from the reviewed v3 sanitation\n        // evidence. Never infer these by equal values or similar field names.\n        if (providerMetadata(pointer) && (typeof item === \"string\" || item === null)) {\n          if (descriptors.has(pointer)) handled.add(pointer);\n          else output[key] = typeof item === \"string\" ? redacted : item;\n          continue;\n        }\n        const protectedBranch = semantic || semanticKey.has(key);\n        const removable = !protectedBranch && (metadata || credentialKey.test(key));\n        if (descriptors.has(pointer)) {\n          if (!removable) fail();\n          handled.add(pointer);\n          continue;\n        }\n        if (!semantic && credentialKey.test(key)) continue;\n        if (hasSecret(key)) {\n          if (!metadata || protectedBranch) fail();\n          continue;\n        }\n        output[key] = visit(item, pointer, metadata || metadataKey.has(key), protectedBranch);\n      }\n      return output;\n    }\n    // Validation clones all bounded JSON, including unknown metadata. Preserve\n    // those fields, then validate again to catch any semantic deletion.\n    const cleaned = visit(result as LiveTranscript & LiveObject, \"\");\n    if (handled.size !== descriptors.size || hasSecret(JSON.stringify(cleaned))) fail();\n    return validateLiveTranscript(cleaned, validationOptions);\n  } catch {\n    fail();\n  }\n}\n"],"mappings":";;;;AASA,IAAa,wBAAb,cAA2C,MAAM;CAC/C,AAAS,WAAW;CACpB,cAAc;AAEZ,QAAM,2DAA2D;AACjE,OAAK,OAAO;;;AAMhB,MAAM,cAAc,IAAI,IAAI;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AACF,MAAM,cAAc,IAAI,IAAI;CAAC;CAAY;CAAW;CAAc,CAAC;AACnE,MAAM,YAAY,IAAI,IAAI;CAAC;CAAa;CAAe;CAAY,CAAC;AACpE,MAAM,WAAW;AACjB,SAAS,OAAc;AACrB,OAAM,IAAI,uBAAuB;;AAEnC,SAAS,cAAc,KAAqB;AAC1C,QAAO,IAAI,QAAQ,MAAM,KAAK,CAAC,QAAQ,OAAO,KAAK;;AAErD,SAAS,MAAM,SAA2B;AACxC,KAAI,CAAC,QAAQ,WAAW,IAAI,IAAI,aAAa,KAAK,QAAQ,CAAE,OAAM;CAClE,MAAM,OAAO,QACV,MAAM,EAAE,CACR,MAAM,IAAI,CACV,KAAK,QAAQ,IAAI,QAAQ,OAAO,IAAI,CAAC,QAAQ,OAAO,IAAI,CAAC;AAC5D,KAAI,KAAK,MAAM,QAAQ,UAAU,IAAI,IAAI,CAAC,CAAE,OAAM;AAClD,QAAO;;AAET,SAAS,MAAM,OAAiB,KAAuB;AACrD,KAAI,CAAC,SAAS,OAAO,UAAU,YAAY,CAAC,OAAO,OAAO,OAAO,IAAI,CAAE,OAAM;AAC7E,KAAI,MAAM,QAAQ,MAAM,EAAE;AACxB,MAAI,CAAC,iBAAiB,KAAK,IAAI,CAAE,OAAM;AACvC,SAAO,MAAM,OAAO,IAAI;;AAE1B,QAAO,MAAM;;AAEf,SAAS,cAAc,OAAmB,SAAiB,OAAqB;CAC9E,MAAM,OAAO,MAAM,QAAQ;CAC3B,MAAM,OAAO,KAAK,KAAK;AACvB,KAAI,SAAS,OAAW,OAAM;CAC9B,IAAI,SAAmB;AACvB,MAAK,MAAM,OAAO,KAAM,UAAS,MAAM,QAAQ,IAAI;AACnD,KAAI,OAAO,MAAM,QAAQ,KAAK,KAAK,YAAY,CAAC,UAAU,OAAO,WAAW,SAAU,OAAM;AAC5F,KAAI,MAAM,QAAQ,OAAO,CAAE,QAAO,OAAO,KAAK,IAAI;KAC7C,QAAO,QAAQ;;;;;;;;AAStB,SAAgB,uBACd,YACA,eAAkC,EAAE,EACpC,mBAAmD,EAAE,EACrD,oBAAuD,EAAE,EACzC;AAChB,KAAI;EACF,MAAM,SAASA,4CAAuB,YAAY,kBAAkB;AACpE,MAAI,CAAC,MAAM,QAAQ,aAAa,IAAI,aAAa,MAAM,MAAM,OAAO,MAAM,SAAS,CAAE,OAAM;EAC3F,MAAM,UAAU,CAAC,GAAG,IAAI,IAAI,aAAa,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAChE,GAAG,MAAM,EAAE,SAAS,EAAE,OACxB;EACD,MAAM,aAAa,UAAkB,QAAQ,MAAM,WAAW,MAAM,SAAS,OAAO,CAAC;EACrF,MAAM,kBAAkB,UAAkB;AACxC,QAAK,MAAM,UAAU,QAAS,SAAQ,MAAM,MAAM,OAAO,CAAC,KAAK,SAAS;AACxE,UAAO;;EAET,MAAM,cAAc,IAAI,IACtB,iBAAiB,KAAK,UAAU;AAC9B,SAAM,MAAM,QAAQ;AACpB,UAAO,MAAM;IACb,CACH;EACD,MAAM,0BAAU,IAAI,KAAa;EAGjC,MAAM,8BAAc,IAAI,KAAa;AACrC,OAAK,MAAM,WAAW,OAAO,UAAU;GACrC,IAAI,QAAkB,OAAO,QAAQ,QAAQ,OAAO;AACpD,QAAK,MAAM,OAAO,MAAM,QAAQ,QAAQ,CAAE,SAAQ,MAAM,OAAO,IAAI;AACnE,OAAI,OAAO,UAAU,SAAU,OAAM;AACrC,eAAY,IAAI,MAAM;;EAExB,IAAI,SAAS;EACb,MAAM,6BAAa,IAAI,KAA8C;AACrE,OAAK,MAAM,WAAW,OAAO,UAAU;GACrC,IAAI,WAAW,WAAW,IAAI,QAAQ,KAAK;AAC3C,OAAI,CAAC,UAAU;IACb,MAAM,QAAQ,WAAW,OAAO;AAChC,WAAO,YAAY,IAAI,WAAW,SAAS,CAAE;AAC7C,eAAW;KAAE,MAAM,WAAW;KAAS,OAAO,WAAW;KAAY;AACrE,eAAW,IAAI,QAAQ,MAAM,SAAS;;AAExC,iBAAc,OAAO,QAAQ,QAAQ,OAAO,OAAO,QAAQ,SAAS,SAAS,MAAM;AACnF,WAAQ,OAAO,SAAS;;EAE1B,MAAM,eAAe,MAAcC,iCAAS,GAAG,WAAW,KAAK;EAC/D,SAAS,iBAAiB,SAA0B;GAClD,MAAM,QACJ,sHAAsH,KACpH,QACD;AACH,OAAI,CAAC,MAAO,QAAO;GACnB,MAAM,QAAQ,OAAO,QAAQ,OAAO,MAAM,GAAG,EAAE;GAC/C,MAAM,SAAS,MAAM;AACrB,OACE,MAAM,SAAS,oBACf,CAAC,UACD,OAAO,WAAW,YAClB,MAAM,QAAQ,OAAO,CAErB,QAAO;AACT,OAAI,CAAC,QAAQ,SAAS,0BAA0B,CAC9C,QAAO;IAAC;IAAoB;IAAwB;IAAqB,CAAC,SACxE,OAAO,OAAO,KAAK,CACpB;GAEH,MAAM,OAAO,OAAO;AACpB,UACE,CAAC,8BAA8B,4BAA4B,CAAC,SAAS,OAAO,OAAO,KAAK,CAAC,IACzF,CAAC,CAAC,QACF,OAAO,SAAS,YAChB,CAAC,MAAM,QAAQ,KAAK,IACpB,KAAK,SAAS;;EAGlB,SAAS,MAAM,OAAiB,MAAc,WAAW,OAAO,WAAW,OAAiB;AAC1F,OAAI,OAAO,UAAU,UAAU;IAC7B,MAAM,MAAM,YAAY,MAAM;AAC9B,SAAK,UAAU,MAAM,IAAI,QAAQ,WAAW,CAAC,YAAY,UAAW,OAAM;AAC1E,WAAO,YAAY,CAAC,WAAW,eAAe,IAAI,GAAG;;AAEvD,OAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,MAAM,KAAK,MAAM,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,KAAK,UAAU,SAAS,CAAC;AAChF,OAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;GAChD,MAAM,SAAqB,EAAE;AAC7B,QAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,MAAM,EAAE;IAC/C,MAAM,UAAU,GAAG,KAAK,GAAG,cAAc,IAAI;AAG7C,QAAI,iBAAiB,QAAQ,KAAK,OAAO,SAAS,YAAY,SAAS,OAAO;AAC5E,SAAI,YAAY,IAAI,QAAQ,CAAE,SAAQ,IAAI,QAAQ;SAC7C,QAAO,OAAO,OAAO,SAAS,WAAW,WAAW;AACzD;;IAEF,MAAM,kBAAkB,YAAY,YAAY,IAAI,IAAI;IACxD,MAAM,YAAY,CAAC,oBAAoB,YAAYC,uCAAc,KAAK,IAAI;AAC1E,QAAI,YAAY,IAAI,QAAQ,EAAE;AAC5B,SAAI,CAAC,UAAW,OAAM;AACtB,aAAQ,IAAI,QAAQ;AACpB;;AAEF,QAAI,CAAC,YAAYA,uCAAc,KAAK,IAAI,CAAE;AAC1C,QAAI,UAAU,IAAI,EAAE;AAClB,SAAI,CAAC,YAAY,gBAAiB,OAAM;AACxC;;AAEF,WAAO,OAAO,MAAM,MAAM,SAAS,YAAY,YAAY,IAAI,IAAI,EAAE,gBAAgB;;AAEvF,UAAO;;EAIT,MAAM,UAAU,MAAM,QAAuC,GAAG;AAChE,MAAI,QAAQ,SAAS,YAAY,QAAQ,UAAU,KAAK,UAAU,QAAQ,CAAC,CAAE,OAAM;AACnF,SAAOF,4CAAuB,SAAS,kBAAkB;SACnD;AACN,QAAM"}

package/dist/live-sanitize.js

@@ -1,4 +1,5 @@
 import { validateLiveTranscript } from "./live-fixture.js";
+import { CREDENTIAL_KEY, scrubUrl } from "./record-sanitize.js";
 
 //#region src/live-sanitize.ts
 var LiveUnsafeExportError = class extends Error {
@@ -8,7 +9,6 @@ var LiveUnsafeExportError = class extends Error {
 		this.name = "LiveUnsafeExportError";
 	}
 };
-const credentialKey = /^(?:authorization|proxy-authorization|cookie|set-cookie|x-api-key|api[_-]?key|access[_-]?token|refresh[_-]?token|client[_-]?secret|password|secret|token|sec-websocket-protocol)$/i;
 const semanticKey = new Set([
 	"instructions",
 	"content",
@@ -37,9 +37,6 @@ const redacted = "[REDACTED]";
 function fail() {
 	throw new LiveUnsafeExportError();
 }
-function decodeUrlComponent(value) {
-	return new URLSearchParams(`value=${value.replace(/\+/g, "%2B").replace(/&/g, "%26")}`).get("value");
-}
 function escapePointer(key) {
 	return key.replace(/~/g, "~0").replace(/\//g, "~1");
 }
@@ -111,32 +108,7 @@ function sanitizeLiveTranscript(transcript, secretValues = [], credentialFields
 			setIdentifier(result.entries[binding.entry].event, binding.pointer, identity.value);
 			binding.name = identity.name;
 		}
-		function sanitizeUrl(value) {
-			if (!/^[a-z][a-z0-9+.-]*:\/\//i.test(value)) return value;
-			let url;
-			try {
-				url = new URL(value);
-			} catch {
-				return value;
-			}
-			if (hasSecret(decodeUrlComponent(url.pathname))) fail();
-			let changed = false;
-			if (url.username || url.password) {
-				url.username = "";
-				url.password = "";
-				changed = true;
-			}
-			for (const [key, val] of [...url.searchParams]) if (credentialKey.test(key) || hasSecret(key) || hasSecret(val)) {
-				url.searchParams.delete(key);
-				changed = true;
-			}
-			const decodedHash = decodeUrlComponent(url.hash);
-			if (url.hash && (hasSecret(decodedHash) || /(?:token|secret|password|api[_-]?key)=/i.test(decodedHash))) {
-				url.hash = "";
-				changed = true;
-			}
-			return changed ? url.href : value;
-		}
+		const sanitizeUrl = (v) => scrubUrl(v, hasSecret, fail);
 		function providerMetadata(pointer) {
 			const match = /^\/entries\/(\d+)\/event\/event\/(?:response\/(?:user|prompt_cache_key|safety_identifier)|item\/encrypted_content)$/.exec(pointer);
 			if (!match) return false;
@@ -168,13 +140,13 @@ function sanitizeLiveTranscript(transcript, secretValues = [], credentialFields
 					continue;
 				}
 				const protectedBranch = semantic || semanticKey.has(key);
-				const removable = !protectedBranch && (metadata || credentialKey.test(key));
+				const removable = !protectedBranch && (metadata || CREDENTIAL_KEY.test(key));
 				if (descriptors.has(pointer)) {
 					if (!removable) fail();
 					handled.add(pointer);
 					continue;
 				}
-				if (!semantic && credentialKey.test(key)) continue;
+				if (!semantic && CREDENTIAL_KEY.test(key)) continue;
 				if (hasSecret(key)) {
 					if (!metadata || protectedBranch) fail();
 					continue;

package/dist/live-sanitize.js.map

@@ -1 +1 @@
-{"version":3,"file":"live-sanitize.js","names":[],"sources":["../src/live-sanitize.ts"],"sourcesContent":["import { validateLiveTranscript } from \"./live-fixture.js\";\nimport type { LiveJson, LiveObject, LiveOptions, LiveTranscript } from \"./live-types.js\";\n\n/** Exact transcript-rooted pointer to an observed removable credential metadata field. */\nexport interface LiveCredentialField {\n  readonly pointer: string;\n}\n\nexport class LiveUnsafeExportError extends Error {\n  readonly category = \"unsafe-export\";\n  constructor() {\n    // Never reflect untrusted values, keys, pointers, or validation errors.\n    super(\"unsafe-export: Live transcript cannot be retained safely\");\n    this.name = \"LiveUnsafeExportError\";\n  }\n}\n\nconst credentialKey =\n  /^(?:authorization|proxy-authorization|cookie|set-cookie|x-api-key|api[_-]?key|access[_-]?token|refresh[_-]?token|client[_-]?secret|password|secret|token|sec-websocket-protocol)$/i;\n// These branches carry conversation, tool schema, or PCM semantics. A key named\n// \"authorization\" inside tool parameters is a schema property, not a header.\nconst semanticKey = new Set([\n  \"instructions\",\n  \"content\",\n  \"delta\",\n  \"audio\",\n  \"arguments\",\n  \"output\",\n  \"input\",\n  \"tools\",\n  \"parameters\",\n  \"client\",\n  \"text\",\n  \"thinking\",\n]);\nconst metadataKey = new Set([\"metadata\", \"headers\", \"diagnostics\"]);\nconst unsafeKey = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\nconst redacted = \"[REDACTED]\";\nfunction fail(): never {\n  throw new LiveUnsafeExportError();\n}\nfunction decodeUrlComponent(value: string): string {\n  // Tolerate malformed escapes while exposing encoded secrets. Protect literal\n  // form separators so the entire component remains one value.\n  return new URLSearchParams(`value=${value.replace(/\\+/g, \"%2B\").replace(/&/g, \"%26\")}`).get(\n    \"value\",\n  )!;\n}\nfunction escapePointer(key: string): string {\n  return key.replace(/~/g, \"~0\").replace(/\\//g, \"~1\");\n}\nfunction parts(pointer: string): string[] {\n  if (!pointer.startsWith(\"/\") || /~(?![01])/u.test(pointer)) fail();\n  const keys = pointer\n    .slice(1)\n    .split(\"/\")\n    .map((key) => key.replace(/~1/g, \"/\").replace(/~0/g, \"~\"));\n  if (keys.some((key) => unsafeKey.has(key))) fail();\n  return keys;\n}\nfunction child(value: LiveJson, key: string): LiveJson {\n  if (!value || typeof value !== \"object\" || !Object.hasOwn(value, key)) fail();\n  if (Array.isArray(value)) {\n    if (!/^(0|[1-9]\\d*)$/.test(key)) fail();\n    return value[Number(key)];\n  }\n  return value[key];\n}\nfunction setIdentifier(event: LiveObject, pointer: string, value: string): void {\n  const keys = parts(pointer);\n  const last = keys.pop();\n  if (last === undefined) fail();\n  let parent: LiveJson = event;\n  for (const key of keys) parent = child(parent, key);\n  if (typeof child(parent, last) !== \"string\" || !parent || typeof parent !== \"object\") fail();\n  if (Array.isArray(parent)) parent[Number(last)] = value;\n  else parent[last] = value;\n}\n\n/**\n * Sanitize a separately retained successful capture; never mutate the relay.\n * Validation supplies the reviewed identifier descriptors and causal checks.\n * Credential descriptors supplement the built-in policy, not permission to\n * delete arbitrary protocol operands. Ambiguous secret-bearing data fails closed.\n */\nexport function sanitizeLiveTranscript(\n  transcript: LiveTranscript,\n  secretValues: readonly string[] = [],\n  credentialFields: readonly LiveCredentialField[] = [],\n  validationOptions: Omit<LiveOptions, \"secretValues\"> = {},\n): LiveTranscript {\n  try {\n    const result = validateLiveTranscript(transcript, validationOptions);\n    if (!Array.isArray(secretValues) || secretValues.some((s) => typeof s !== \"string\")) fail();\n    const secrets = [...new Set(secretValues.filter((s) => s.length))].sort(\n      (a, b) => b.length - a.length,\n    );\n    const hasSecret = (value: string) => secrets.some((secret) => value.includes(secret));\n    const replaceSecrets = (value: string) => {\n      for (const secret of secrets) value = value.split(secret).join(redacted);\n      return value;\n    };\n    const descriptors = new Set(\n      credentialFields.map((field) => {\n        parts(field.pointer);\n        return field.pointer;\n      }),\n    );\n    const handled = new Set<string>();\n    // Names themselves may have been derived from provider IDs. Replace both\n    // the annotation names and only their explicitly annotated operand values.\n    const originalIds = new Set<string>();\n    for (const binding of result.bindings) {\n      let value: LiveJson = result.entries[binding.entry].event;\n      for (const key of parts(binding.pointer)) value = child(value, key);\n      if (typeof value !== \"string\") fail();\n      originalIds.add(value);\n    }\n    let nextId = 1;\n    const identities = new Map<string, { name: string; value: string }>();\n    for (const binding of result.bindings) {\n      let identity = identities.get(binding.name);\n      if (!identity) {\n        const index = identities.size + 1;\n        while (originalIds.has(`live-id-${nextId}`)) nextId++;\n        identity = { name: `binding-${index}`, value: `live-id-${nextId++}` };\n        identities.set(binding.name, identity);\n      }\n      setIdentifier(result.entries[binding.entry].event, binding.pointer, identity.value);\n      binding.name = identity.name;\n    }\n    function sanitizeUrl(value: string): string {\n      // Leave non-URLs and clean URLs byte-for-byte intact.\n      if (!/^[a-z][a-z0-9+.-]*:\\/\\//i.test(value)) return value;\n      let url: URL;\n      try {\n        url = new URL(value);\n      } catch {\n        return value;\n      }\n      // A path identifies the resource; changing it could change replay semantics.\n      if (hasSecret(decodeUrlComponent(url.pathname))) fail();\n      let changed = false;\n      if (url.username || url.password) {\n        url.username = \"\";\n        url.password = \"\";\n        changed = true;\n      }\n      for (const [key, val] of [...url.searchParams]) {\n        if (credentialKey.test(key) || hasSecret(key) || hasSecret(val)) {\n          url.searchParams.delete(key);\n          changed = true;\n        }\n      }\n      const decodedHash = decodeUrlComponent(url.hash);\n      if (\n        url.hash &&\n        (hasSecret(decodedHash) || /(?:token|secret|password|api[_-]?key)=/i.test(decodedHash))\n      ) {\n        url.hash = \"\";\n        changed = true;\n      }\n      return changed ? url.href : value;\n    }\n    function providerMetadata(pointer: string): boolean {\n      const match =\n        /^\\/entries\\/(\\d+)\\/event\\/event\\/(?:response\\/(?:user|prompt_cache_key|safety_identifier)|item\\/encrypted_content)$/.exec(\n          pointer,\n        );\n      if (!match) return false;\n      const event = result.entries[Number(match[1])].event;\n      const nested = event.event;\n      if (\n        event.type !== \"response.event\" ||\n        !nested ||\n        typeof nested !== \"object\" ||\n        Array.isArray(nested)\n      )\n        return false;\n      if (!pointer.endsWith(\"/item/encrypted_content\")) {\n        return [\"response.created\", \"response.in_progress\", \"response.completed\"].includes(\n          String(nested.type),\n        );\n      }\n      const item = nested.item;\n      return (\n        [\"response.output_item.added\", \"response.output_item.done\"].includes(String(nested.type)) &&\n        !!item &&\n        typeof item === \"object\" &&\n        !Array.isArray(item) &&\n        item.type === \"reasoning\"\n      );\n    }\n    function visit(value: LiveJson, path: string, metadata = false, semantic = false): LiveJson {\n      if (typeof value === \"string\") {\n        const url = sanitizeUrl(value);\n        if ((hasSecret(value) || url !== value) && (!metadata || semantic)) fail();\n        return metadata && !semantic ? replaceSecrets(url) : value;\n      }\n      if (Array.isArray(value))\n        return value.map((item, i) => visit(item, `${path}/${i}`, metadata, semantic));\n      if (!value || typeof value !== \"object\") return value;\n      const output: LiveObject = {};\n      for (const [key, item] of Object.entries(value)) {\n        const pointer = `${path}/${escapePointer(key)}`;\n        // Exact retained metadata sites from the reviewed v3 sanitation\n        // evidence. Never infer these by equal values or similar field names.\n        if (providerMetadata(pointer) && (typeof item === \"string\" || item === null)) {\n          if (descriptors.has(pointer)) handled.add(pointer);\n          else output[key] = typeof item === \"string\" ? redacted : item;\n          continue;\n        }\n        const protectedBranch = semantic || semanticKey.has(key);\n        const removable = !protectedBranch && (metadata || credentialKey.test(key));\n        if (descriptors.has(pointer)) {\n          if (!removable) fail();\n          handled.add(pointer);\n          continue;\n        }\n        if (!semantic && credentialKey.test(key)) continue;\n        if (hasSecret(key)) {\n          if (!metadata || protectedBranch) fail();\n          continue;\n        }\n        output[key] = visit(item, pointer, metadata || metadataKey.has(key), protectedBranch);\n      }\n      return output;\n    }\n    // Validation clones all bounded JSON, including unknown metadata. Preserve\n    // those fields, then validate again to catch any semantic deletion.\n    const cleaned = visit(result as LiveTranscript & LiveObject, \"\");\n    if (handled.size !== descriptors.size || hasSecret(JSON.stringify(cleaned))) fail();\n    return validateLiveTranscript(cleaned, validationOptions);\n  } catch {\n    fail();\n  }\n}\n"],"mappings":";;;AAQA,IAAa,wBAAb,cAA2C,MAAM;CAC/C,AAAS,WAAW;CACpB,cAAc;AAEZ,QAAM,2DAA2D;AACjE,OAAK,OAAO;;;AAIhB,MAAM,gBACJ;AAGF,MAAM,cAAc,IAAI,IAAI;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AACF,MAAM,cAAc,IAAI,IAAI;CAAC;CAAY;CAAW;CAAc,CAAC;AACnE,MAAM,YAAY,IAAI,IAAI;CAAC;CAAa;CAAe;CAAY,CAAC;AACpE,MAAM,WAAW;AACjB,SAAS,OAAc;AACrB,OAAM,IAAI,uBAAuB;;AAEnC,SAAS,mBAAmB,OAAuB;AAGjD,QAAO,IAAI,gBAAgB,SAAS,MAAM,QAAQ,OAAO,MAAM,CAAC,QAAQ,MAAM,MAAM,GAAG,CAAC,IACtF,QACD;;AAEH,SAAS,cAAc,KAAqB;AAC1C,QAAO,IAAI,QAAQ,MAAM,KAAK,CAAC,QAAQ,OAAO,KAAK;;AAErD,SAAS,MAAM,SAA2B;AACxC,KAAI,CAAC,QAAQ,WAAW,IAAI,IAAI,aAAa,KAAK,QAAQ,CAAE,OAAM;CAClE,MAAM,OAAO,QACV,MAAM,EAAE,CACR,MAAM,IAAI,CACV,KAAK,QAAQ,IAAI,QAAQ,OAAO,IAAI,CAAC,QAAQ,OAAO,IAAI,CAAC;AAC5D,KAAI,KAAK,MAAM,QAAQ,UAAU,IAAI,IAAI,CAAC,CAAE,OAAM;AAClD,QAAO;;AAET,SAAS,MAAM,OAAiB,KAAuB;AACrD,KAAI,CAAC,SAAS,OAAO,UAAU,YAAY,CAAC,OAAO,OAAO,OAAO,IAAI,CAAE,OAAM;AAC7E,KAAI,MAAM,QAAQ,MAAM,EAAE;AACxB,MAAI,CAAC,iBAAiB,KAAK,IAAI,CAAE,OAAM;AACvC,SAAO,MAAM,OAAO,IAAI;;AAE1B,QAAO,MAAM;;AAEf,SAAS,cAAc,OAAmB,SAAiB,OAAqB;CAC9E,MAAM,OAAO,MAAM,QAAQ;CAC3B,MAAM,OAAO,KAAK,KAAK;AACvB,KAAI,SAAS,OAAW,OAAM;CAC9B,IAAI,SAAmB;AACvB,MAAK,MAAM,OAAO,KAAM,UAAS,MAAM,QAAQ,IAAI;AACnD,KAAI,OAAO,MAAM,QAAQ,KAAK,KAAK,YAAY,CAAC,UAAU,OAAO,WAAW,SAAU,OAAM;AAC5F,KAAI,MAAM,QAAQ,OAAO,CAAE,QAAO,OAAO,KAAK,IAAI;KAC7C,QAAO,QAAQ;;;;;;;;AAStB,SAAgB,uBACd,YACA,eAAkC,EAAE,EACpC,mBAAmD,EAAE,EACrD,oBAAuD,EAAE,EACzC;AAChB,KAAI;EACF,MAAM,SAAS,uBAAuB,YAAY,kBAAkB;AACpE,MAAI,CAAC,MAAM,QAAQ,aAAa,IAAI,aAAa,MAAM,MAAM,OAAO,MAAM,SAAS,CAAE,OAAM;EAC3F,MAAM,UAAU,CAAC,GAAG,IAAI,IAAI,aAAa,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAChE,GAAG,MAAM,EAAE,SAAS,EAAE,OACxB;EACD,MAAM,aAAa,UAAkB,QAAQ,MAAM,WAAW,MAAM,SAAS,OAAO,CAAC;EACrF,MAAM,kBAAkB,UAAkB;AACxC,QAAK,MAAM,UAAU,QAAS,SAAQ,MAAM,MAAM,OAAO,CAAC,KAAK,SAAS;AACxE,UAAO;;EAET,MAAM,cAAc,IAAI,IACtB,iBAAiB,KAAK,UAAU;AAC9B,SAAM,MAAM,QAAQ;AACpB,UAAO,MAAM;IACb,CACH;EACD,MAAM,0BAAU,IAAI,KAAa;EAGjC,MAAM,8BAAc,IAAI,KAAa;AACrC,OAAK,MAAM,WAAW,OAAO,UAAU;GACrC,IAAI,QAAkB,OAAO,QAAQ,QAAQ,OAAO;AACpD,QAAK,MAAM,OAAO,MAAM,QAAQ,QAAQ,CAAE,SAAQ,MAAM,OAAO,IAAI;AACnE,OAAI,OAAO,UAAU,SAAU,OAAM;AACrC,eAAY,IAAI,MAAM;;EAExB,IAAI,SAAS;EACb,MAAM,6BAAa,IAAI,KAA8C;AACrE,OAAK,MAAM,WAAW,OAAO,UAAU;GACrC,IAAI,WAAW,WAAW,IAAI,QAAQ,KAAK;AAC3C,OAAI,CAAC,UAAU;IACb,MAAM,QAAQ,WAAW,OAAO;AAChC,WAAO,YAAY,IAAI,WAAW,SAAS,CAAE;AAC7C,eAAW;KAAE,MAAM,WAAW;KAAS,OAAO,WAAW;KAAY;AACrE,eAAW,IAAI,QAAQ,MAAM,SAAS;;AAExC,iBAAc,OAAO,QAAQ,QAAQ,OAAO,OAAO,QAAQ,SAAS,SAAS,MAAM;AACnF,WAAQ,OAAO,SAAS;;EAE1B,SAAS,YAAY,OAAuB;AAE1C,OAAI,CAAC,2BAA2B,KAAK,MAAM,CAAE,QAAO;GACpD,IAAI;AACJ,OAAI;AACF,UAAM,IAAI,IAAI,MAAM;WACd;AACN,WAAO;;AAGT,OAAI,UAAU,mBAAmB,IAAI,SAAS,CAAC,CAAE,OAAM;GACvD,IAAI,UAAU;AACd,OAAI,IAAI,YAAY,IAAI,UAAU;AAChC,QAAI,WAAW;AACf,QAAI,WAAW;AACf,cAAU;;AAEZ,QAAK,MAAM,CAAC,KAAK,QAAQ,CAAC,GAAG,IAAI,aAAa,CAC5C,KAAI,cAAc,KAAK,IAAI,IAAI,UAAU,IAAI,IAAI,UAAU,IAAI,EAAE;AAC/D,QAAI,aAAa,OAAO,IAAI;AAC5B,cAAU;;GAGd,MAAM,cAAc,mBAAmB,IAAI,KAAK;AAChD,OACE,IAAI,SACH,UAAU,YAAY,IAAI,0CAA0C,KAAK,YAAY,GACtF;AACA,QAAI,OAAO;AACX,cAAU;;AAEZ,UAAO,UAAU,IAAI,OAAO;;EAE9B,SAAS,iBAAiB,SAA0B;GAClD,MAAM,QACJ,sHAAsH,KACpH,QACD;AACH,OAAI,CAAC,MAAO,QAAO;GACnB,MAAM,QAAQ,OAAO,QAAQ,OAAO,MAAM,GAAG,EAAE;GAC/C,MAAM,SAAS,MAAM;AACrB,OACE,MAAM,SAAS,oBACf,CAAC,UACD,OAAO,WAAW,YAClB,MAAM,QAAQ,OAAO,CAErB,QAAO;AACT,OAAI,CAAC,QAAQ,SAAS,0BAA0B,CAC9C,QAAO;IAAC;IAAoB;IAAwB;IAAqB,CAAC,SACxE,OAAO,OAAO,KAAK,CACpB;GAEH,MAAM,OAAO,OAAO;AACpB,UACE,CAAC,8BAA8B,4BAA4B,CAAC,SAAS,OAAO,OAAO,KAAK,CAAC,IACzF,CAAC,CAAC,QACF,OAAO,SAAS,YAChB,CAAC,MAAM,QAAQ,KAAK,IACpB,KAAK,SAAS;;EAGlB,SAAS,MAAM,OAAiB,MAAc,WAAW,OAAO,WAAW,OAAiB;AAC1F,OAAI,OAAO,UAAU,UAAU;IAC7B,MAAM,MAAM,YAAY,MAAM;AAC9B,SAAK,UAAU,MAAM,IAAI,QAAQ,WAAW,CAAC,YAAY,UAAW,OAAM;AAC1E,WAAO,YAAY,CAAC,WAAW,eAAe,IAAI,GAAG;;AAEvD,OAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,MAAM,KAAK,MAAM,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,KAAK,UAAU,SAAS,CAAC;AAChF,OAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;GAChD,MAAM,SAAqB,EAAE;AAC7B,QAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,MAAM,EAAE;IAC/C,MAAM,UAAU,GAAG,KAAK,GAAG,cAAc,IAAI;AAG7C,QAAI,iBAAiB,QAAQ,KAAK,OAAO,SAAS,YAAY,SAAS,OAAO;AAC5E,SAAI,YAAY,IAAI,QAAQ,CAAE,SAAQ,IAAI,QAAQ;SAC7C,QAAO,OAAO,OAAO,SAAS,WAAW,WAAW;AACzD;;IAEF,MAAM,kBAAkB,YAAY,YAAY,IAAI,IAAI;IACxD,MAAM,YAAY,CAAC,oBAAoB,YAAY,cAAc,KAAK,IAAI;AAC1E,QAAI,YAAY,IAAI,QAAQ,EAAE;AAC5B,SAAI,CAAC,UAAW,OAAM;AACtB,aAAQ,IAAI,QAAQ;AACpB;;AAEF,QAAI,CAAC,YAAY,cAAc,KAAK,IAAI,CAAE;AAC1C,QAAI,UAAU,IAAI,EAAE;AAClB,SAAI,CAAC,YAAY,gBAAiB,OAAM;AACxC;;AAEF,WAAO,OAAO,MAAM,MAAM,SAAS,YAAY,YAAY,IAAI,IAAI,EAAE,gBAAgB;;AAEvF,UAAO;;EAIT,MAAM,UAAU,MAAM,QAAuC,GAAG;AAChE,MAAI,QAAQ,SAAS,YAAY,QAAQ,UAAU,KAAK,UAAU,QAAQ,CAAC,CAAE,OAAM;AACnF,SAAO,uBAAuB,SAAS,kBAAkB;SACnD;AACN,QAAM"}
+{"version":3,"file":"live-sanitize.js","names":["credentialKey"],"sources":["../src/live-sanitize.ts"],"sourcesContent":["import { validateLiveTranscript } from \"./live-fixture.js\";\nimport { CREDENTIAL_KEY as credentialKey, scrubUrl } from \"./record-sanitize.js\";\nimport type { LiveJson, LiveObject, LiveOptions, LiveTranscript } from \"./live-types.js\";\n\n/** Exact transcript-rooted pointer to an observed removable credential metadata field. */\nexport interface LiveCredentialField {\n  readonly pointer: string;\n}\n\nexport class LiveUnsafeExportError extends Error {\n  readonly category = \"unsafe-export\";\n  constructor() {\n    // Never reflect untrusted values, keys, pointers, or validation errors.\n    super(\"unsafe-export: Live transcript cannot be retained safely\");\n    this.name = \"LiveUnsafeExportError\";\n  }\n}\n\n// These branches carry conversation, tool schema, or PCM semantics. A key named\n// \"authorization\" inside tool parameters is a schema property, not a header.\nconst semanticKey = new Set([\n  \"instructions\",\n  \"content\",\n  \"delta\",\n  \"audio\",\n  \"arguments\",\n  \"output\",\n  \"input\",\n  \"tools\",\n  \"parameters\",\n  \"client\",\n  \"text\",\n  \"thinking\",\n]);\nconst metadataKey = new Set([\"metadata\", \"headers\", \"diagnostics\"]);\nconst unsafeKey = new Set([\"__proto__\", \"constructor\", \"prototype\"]);\nconst redacted = \"[REDACTED]\";\nfunction fail(): never {\n  throw new LiveUnsafeExportError();\n}\nfunction escapePointer(key: string): string {\n  return key.replace(/~/g, \"~0\").replace(/\\//g, \"~1\");\n}\nfunction parts(pointer: string): string[] {\n  if (!pointer.startsWith(\"/\") || /~(?![01])/u.test(pointer)) fail();\n  const keys = pointer\n    .slice(1)\n    .split(\"/\")\n    .map((key) => key.replace(/~1/g, \"/\").replace(/~0/g, \"~\"));\n  if (keys.some((key) => unsafeKey.has(key))) fail();\n  return keys;\n}\nfunction child(value: LiveJson, key: string): LiveJson {\n  if (!value || typeof value !== \"object\" || !Object.hasOwn(value, key)) fail();\n  if (Array.isArray(value)) {\n    if (!/^(0|[1-9]\\d*)$/.test(key)) fail();\n    return value[Number(key)];\n  }\n  return value[key];\n}\nfunction setIdentifier(event: LiveObject, pointer: string, value: string): void {\n  const keys = parts(pointer);\n  const last = keys.pop();\n  if (last === undefined) fail();\n  let parent: LiveJson = event;\n  for (const key of keys) parent = child(parent, key);\n  if (typeof child(parent, last) !== \"string\" || !parent || typeof parent !== \"object\") fail();\n  if (Array.isArray(parent)) parent[Number(last)] = value;\n  else parent[last] = value;\n}\n\n/**\n * Sanitize a separately retained successful capture; never mutate the relay.\n * Validation supplies the reviewed identifier descriptors and causal checks.\n * Credential descriptors supplement the built-in policy, not permission to\n * delete arbitrary protocol operands. Ambiguous secret-bearing data fails closed.\n */\nexport function sanitizeLiveTranscript(\n  transcript: LiveTranscript,\n  secretValues: readonly string[] = [],\n  credentialFields: readonly LiveCredentialField[] = [],\n  validationOptions: Omit<LiveOptions, \"secretValues\"> = {},\n): LiveTranscript {\n  try {\n    const result = validateLiveTranscript(transcript, validationOptions);\n    if (!Array.isArray(secretValues) || secretValues.some((s) => typeof s !== \"string\")) fail();\n    const secrets = [...new Set(secretValues.filter((s) => s.length))].sort(\n      (a, b) => b.length - a.length,\n    );\n    const hasSecret = (value: string) => secrets.some((secret) => value.includes(secret));\n    const replaceSecrets = (value: string) => {\n      for (const secret of secrets) value = value.split(secret).join(redacted);\n      return value;\n    };\n    const descriptors = new Set(\n      credentialFields.map((field) => {\n        parts(field.pointer);\n        return field.pointer;\n      }),\n    );\n    const handled = new Set<string>();\n    // Names themselves may have been derived from provider IDs. Replace both\n    // the annotation names and only their explicitly annotated operand values.\n    const originalIds = new Set<string>();\n    for (const binding of result.bindings) {\n      let value: LiveJson = result.entries[binding.entry].event;\n      for (const key of parts(binding.pointer)) value = child(value, key);\n      if (typeof value !== \"string\") fail();\n      originalIds.add(value);\n    }\n    let nextId = 1;\n    const identities = new Map<string, { name: string; value: string }>();\n    for (const binding of result.bindings) {\n      let identity = identities.get(binding.name);\n      if (!identity) {\n        const index = identities.size + 1;\n        while (originalIds.has(`live-id-${nextId}`)) nextId++;\n        identity = { name: `binding-${index}`, value: `live-id-${nextId++}` };\n        identities.set(binding.name, identity);\n      }\n      setIdentifier(result.entries[binding.entry].event, binding.pointer, identity.value);\n      binding.name = identity.name;\n    }\n    const sanitizeUrl = (v: string) => scrubUrl(v, hasSecret, fail);\n    function providerMetadata(pointer: string): boolean {\n      const match =\n        /^\\/entries\\/(\\d+)\\/event\\/event\\/(?:response\\/(?:user|prompt_cache_key|safety_identifier)|item\\/encrypted_content)$/.exec(\n          pointer,\n        );\n      if (!match) return false;\n      const event = result.entries[Number(match[1])].event;\n      const nested = event.event;\n      if (\n        event.type !== \"response.event\" ||\n        !nested ||\n        typeof nested !== \"object\" ||\n        Array.isArray(nested)\n      )\n        return false;\n      if (!pointer.endsWith(\"/item/encrypted_content\")) {\n        return [\"response.created\", \"response.in_progress\", \"response.completed\"].includes(\n          String(nested.type),\n        );\n      }\n      const item = nested.item;\n      return (\n        [\"response.output_item.added\", \"response.output_item.done\"].includes(String(nested.type)) &&\n        !!item &&\n        typeof item === \"object\" &&\n        !Array.isArray(item) &&\n        item.type === \"reasoning\"\n      );\n    }\n    function visit(value: LiveJson, path: string, metadata = false, semantic = false): LiveJson {\n      if (typeof value === \"string\") {\n        const url = sanitizeUrl(value);\n        if ((hasSecret(value) || url !== value) && (!metadata || semantic)) fail();\n        return metadata && !semantic ? replaceSecrets(url) : value;\n      }\n      if (Array.isArray(value))\n        return value.map((item, i) => visit(item, `${path}/${i}`, metadata, semantic));\n      if (!value || typeof value !== \"object\") return value;\n      const output: LiveObject = {};\n      for (const [key, item] of Object.entries(value)) {\n        const pointer = `${path}/${escapePointer(key)}`;\n        // Exact retained metadata sites from the reviewed v3 sanitation\n        // evidence. Never infer these by equal values or similar field names.\n        if (providerMetadata(pointer) && (typeof item === \"string\" || item === null)) {\n          if (descriptors.has(pointer)) handled.add(pointer);\n          else output[key] = typeof item === \"string\" ? redacted : item;\n          continue;\n        }\n        const protectedBranch = semantic || semanticKey.has(key);\n        const removable = !protectedBranch && (metadata || credentialKey.test(key));\n        if (descriptors.has(pointer)) {\n          if (!removable) fail();\n          handled.add(pointer);\n          continue;\n        }\n        if (!semantic && credentialKey.test(key)) continue;\n        if (hasSecret(key)) {\n          if (!metadata || protectedBranch) fail();\n          continue;\n        }\n        output[key] = visit(item, pointer, metadata || metadataKey.has(key), protectedBranch);\n      }\n      return output;\n    }\n    // Validation clones all bounded JSON, including unknown metadata. Preserve\n    // those fields, then validate again to catch any semantic deletion.\n    const cleaned = visit(result as LiveTranscript & LiveObject, \"\");\n    if (handled.size !== descriptors.size || hasSecret(JSON.stringify(cleaned))) fail();\n    return validateLiveTranscript(cleaned, validationOptions);\n  } catch {\n    fail();\n  }\n}\n"],"mappings":";;;;AASA,IAAa,wBAAb,cAA2C,MAAM;CAC/C,AAAS,WAAW;CACpB,cAAc;AAEZ,QAAM,2DAA2D;AACjE,OAAK,OAAO;;;AAMhB,MAAM,cAAc,IAAI,IAAI;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AACF,MAAM,cAAc,IAAI,IAAI;CAAC;CAAY;CAAW;CAAc,CAAC;AACnE,MAAM,YAAY,IAAI,IAAI;CAAC;CAAa;CAAe;CAAY,CAAC;AACpE,MAAM,WAAW;AACjB,SAAS,OAAc;AACrB,OAAM,IAAI,uBAAuB;;AAEnC,SAAS,cAAc,KAAqB;AAC1C,QAAO,IAAI,QAAQ,MAAM,KAAK,CAAC,QAAQ,OAAO,KAAK;;AAErD,SAAS,MAAM,SAA2B;AACxC,KAAI,CAAC,QAAQ,WAAW,IAAI,IAAI,aAAa,KAAK,QAAQ,CAAE,OAAM;CAClE,MAAM,OAAO,QACV,MAAM,EAAE,CACR,MAAM,IAAI,CACV,KAAK,QAAQ,IAAI,QAAQ,OAAO,IAAI,CAAC,QAAQ,OAAO,IAAI,CAAC;AAC5D,KAAI,KAAK,MAAM,QAAQ,UAAU,IAAI,IAAI,CAAC,CAAE,OAAM;AAClD,QAAO;;AAET,SAAS,MAAM,OAAiB,KAAuB;AACrD,KAAI,CAAC,SAAS,OAAO,UAAU,YAAY,CAAC,OAAO,OAAO,OAAO,IAAI,CAAE,OAAM;AAC7E,KAAI,MAAM,QAAQ,MAAM,EAAE;AACxB,MAAI,CAAC,iBAAiB,KAAK,IAAI,CAAE,OAAM;AACvC,SAAO,MAAM,OAAO,IAAI;;AAE1B,QAAO,MAAM;;AAEf,SAAS,cAAc,OAAmB,SAAiB,OAAqB;CAC9E,MAAM,OAAO,MAAM,QAAQ;CAC3B,MAAM,OAAO,KAAK,KAAK;AACvB,KAAI,SAAS,OAAW,OAAM;CAC9B,IAAI,SAAmB;AACvB,MAAK,MAAM,OAAO,KAAM,UAAS,MAAM,QAAQ,IAAI;AACnD,KAAI,OAAO,MAAM,QAAQ,KAAK,KAAK,YAAY,CAAC,UAAU,OAAO,WAAW,SAAU,OAAM;AAC5F,KAAI,MAAM,QAAQ,OAAO,CAAE,QAAO,OAAO,KAAK,IAAI;KAC7C,QAAO,QAAQ;;;;;;;;AAStB,SAAgB,uBACd,YACA,eAAkC,EAAE,EACpC,mBAAmD,EAAE,EACrD,oBAAuD,EAAE,EACzC;AAChB,KAAI;EACF,MAAM,SAAS,uBAAuB,YAAY,kBAAkB;AACpE,MAAI,CAAC,MAAM,QAAQ,aAAa,IAAI,aAAa,MAAM,MAAM,OAAO,MAAM,SAAS,CAAE,OAAM;EAC3F,MAAM,UAAU,CAAC,GAAG,IAAI,IAAI,aAAa,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAChE,GAAG,MAAM,EAAE,SAAS,EAAE,OACxB;EACD,MAAM,aAAa,UAAkB,QAAQ,MAAM,WAAW,MAAM,SAAS,OAAO,CAAC;EACrF,MAAM,kBAAkB,UAAkB;AACxC,QAAK,MAAM,UAAU,QAAS,SAAQ,MAAM,MAAM,OAAO,CAAC,KAAK,SAAS;AACxE,UAAO;;EAET,MAAM,cAAc,IAAI,IACtB,iBAAiB,KAAK,UAAU;AAC9B,SAAM,MAAM,QAAQ;AACpB,UAAO,MAAM;IACb,CACH;EACD,MAAM,0BAAU,IAAI,KAAa;EAGjC,MAAM,8BAAc,IAAI,KAAa;AACrC,OAAK,MAAM,WAAW,OAAO,UAAU;GACrC,IAAI,QAAkB,OAAO,QAAQ,QAAQ,OAAO;AACpD,QAAK,MAAM,OAAO,MAAM,QAAQ,QAAQ,CAAE,SAAQ,MAAM,OAAO,IAAI;AACnE,OAAI,OAAO,UAAU,SAAU,OAAM;AACrC,eAAY,IAAI,MAAM;;EAExB,IAAI,SAAS;EACb,MAAM,6BAAa,IAAI,KAA8C;AACrE,OAAK,MAAM,WAAW,OAAO,UAAU;GACrC,IAAI,WAAW,WAAW,IAAI,QAAQ,KAAK;AAC3C,OAAI,CAAC,UAAU;IACb,MAAM,QAAQ,WAAW,OAAO;AAChC,WAAO,YAAY,IAAI,WAAW,SAAS,CAAE;AAC7C,eAAW;KAAE,MAAM,WAAW;KAAS,OAAO,WAAW;KAAY;AACrE,eAAW,IAAI,QAAQ,MAAM,SAAS;;AAExC,iBAAc,OAAO,QAAQ,QAAQ,OAAO,OAAO,QAAQ,SAAS,SAAS,MAAM;AACnF,WAAQ,OAAO,SAAS;;EAE1B,MAAM,eAAe,MAAc,SAAS,GAAG,WAAW,KAAK;EAC/D,SAAS,iBAAiB,SAA0B;GAClD,MAAM,QACJ,sHAAsH,KACpH,QACD;AACH,OAAI,CAAC,MAAO,QAAO;GACnB,MAAM,QAAQ,OAAO,QAAQ,OAAO,MAAM,GAAG,EAAE;GAC/C,MAAM,SAAS,MAAM;AACrB,OACE,MAAM,SAAS,oBACf,CAAC,UACD,OAAO,WAAW,YAClB,MAAM,QAAQ,OAAO,CAErB,QAAO;AACT,OAAI,CAAC,QAAQ,SAAS,0BAA0B,CAC9C,QAAO;IAAC;IAAoB;IAAwB;IAAqB,CAAC,SACxE,OAAO,OAAO,KAAK,CACpB;GAEH,MAAM,OAAO,OAAO;AACpB,UACE,CAAC,8BAA8B,4BAA4B,CAAC,SAAS,OAAO,OAAO,KAAK,CAAC,IACzF,CAAC,CAAC,QACF,OAAO,SAAS,YAChB,CAAC,MAAM,QAAQ,KAAK,IACpB,KAAK,SAAS;;EAGlB,SAAS,MAAM,OAAiB,MAAc,WAAW,OAAO,WAAW,OAAiB;AAC1F,OAAI,OAAO,UAAU,UAAU;IAC7B,MAAM,MAAM,YAAY,MAAM;AAC9B,SAAK,UAAU,MAAM,IAAI,QAAQ,WAAW,CAAC,YAAY,UAAW,OAAM;AAC1E,WAAO,YAAY,CAAC,WAAW,eAAe,IAAI,GAAG;;AAEvD,OAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,MAAM,KAAK,MAAM,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,KAAK,UAAU,SAAS,CAAC;AAChF,OAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;GAChD,MAAM,SAAqB,EAAE;AAC7B,QAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,MAAM,EAAE;IAC/C,MAAM,UAAU,GAAG,KAAK,GAAG,cAAc,IAAI;AAG7C,QAAI,iBAAiB,QAAQ,KAAK,OAAO,SAAS,YAAY,SAAS,OAAO;AAC5E,SAAI,YAAY,IAAI,QAAQ,CAAE,SAAQ,IAAI,QAAQ;SAC7C,QAAO,OAAO,OAAO,SAAS,WAAW,WAAW;AACzD;;IAEF,MAAM,kBAAkB,YAAY,YAAY,IAAI,IAAI;IACxD,MAAM,YAAY,CAAC,oBAAoB,YAAYA,eAAc,KAAK,IAAI;AAC1E,QAAI,YAAY,IAAI,QAAQ,EAAE;AAC5B,SAAI,CAAC,UAAW,OAAM;AACtB,aAAQ,IAAI,QAAQ;AACpB;;AAEF,QAAI,CAAC,YAAYA,eAAc,KAAK,IAAI,CAAE;AAC1C,QAAI,UAAU,IAAI,EAAE;AAClB,SAAI,CAAC,YAAY,gBAAiB,OAAM;AACxC;;AAEF,WAAO,OAAO,MAAM,MAAM,SAAS,YAAY,YAAY,IAAI,IAAI,EAAE,gBAAgB;;AAEvF,UAAO;;EAIT,MAAM,UAAU,MAAM,QAAuC,GAAG;AAChE,MAAI,QAAQ,SAAS,YAAY,QAAQ,UAAU,KAAK,UAAU,QAAQ,CAAC,CAAE,OAAM;AACnF,SAAO,uBAAuB,SAAS,kBAAkB;SACnD;AACN,QAAM"}