@descryy/runtime-evidence-store 0.2.0 → 0.4.0

package/dist/evidence-store.js

@@ -1,19 +1,13 @@
 /**
- * Evidence store (plan §13; plan §36 gate 9 "evidence persistence").
- * Persistence keyed by executionId, backed by `node:sqlite` — mirrors
- * descry-core's choice (CLAUDE.md: "node:sqlite behind a driver
- * interface") for the same reason: zero native deps, no node-gyp-per-
- * platform distribution problem. A full swappable-driver abstraction
- * (descry-core's `SqlDriver`) is skipped here — one table, no real
- * swap-target in view — but the row-rehydration pattern is kept:
- * `node:sqlite` returns null-prototype row objects, which trips up
- * `JSON.stringify` and structural-equality checks in ways that are easy to
- * miss, so every row is spread into a plain object before use.
+ * Evidence store, keyed by executionId, backed by `node:sqlite` (mirrors
+ * descry-core's driver choice: zero native deps, no node-gyp problem). No
+ * swappable-driver abstraction here — one table, no swap target — but the
+ * row-rehydration pattern is kept: `node:sqlite` returns null-prototype
+ * rows, which trips up `JSON.stringify` and equality checks, so every row
+ * is spread into a plain object before use.
  *
- * `node:sqlite` is experimental in this Node version and prints an
- * `ExperimentalWarning`. descry-core's own policy is to suppress that only
- * at a CLI entrypoint, never in library code or tests — this package has
- * no entrypoint of its own, so nothing here suppresses it.
+ * `node:sqlite` prints an `ExperimentalWarning`; suppressed only at a CLI
+ * entrypoint by policy, and this package has none, so nothing suppresses it here.
  */
 import { DatabaseSync } from "node:sqlite";
 import { randomUUID } from "node:crypto";
@@ -49,18 +43,10 @@ export class EvidenceStore {
         collector_version TEXT NOT NULL
       );
       CREATE INDEX IF NOT EXISTS idx_evidence_execution ON evidence(execution_id);
-      -- §24's missing half. Evidence survived a process restart; the
-      -- execution that produced it did not -- it lived in
-      -- ExecutionController's memory and nowhere on disk, so after a
-      -- restart the store held rows keyed by an executionId that no longer
-      -- resolved to an application, a commit, or a configuration.
-      --
-      -- A NEW TABLE, never a new column on the evidence table. An added
-      -- table appears under CREATE TABLE IF NOT EXISTS on an existing store
-      -- file;
-      -- an added column would need a migration this package has no
-      -- mechanism for, and inventing one to persist a fingerprint would be
-      -- a schema-versioning decision taken sideways.
+      -- §24's missing half: evidence survived a restart, the execution
+      -- that produced it did not. A NEW TABLE, never a new evidence
+      -- column — an added column would need a migration this package has
+      -- no mechanism for.
       CREATE TABLE IF NOT EXISTS executions (
         execution_id TEXT PRIMARY KEY,
         application TEXT NOT NULL,
@@ -77,34 +63,23 @@ export class EvidenceStore {
       CREATE INDEX IF NOT EXISTS idx_evidence_service ON evidence(service);
       CREATE INDEX IF NOT EXISTS idx_evidence_node ON evidence(graph_node_id);
       CREATE INDEX IF NOT EXISTS idx_evidence_timestamp ON evidence(timestamp);
-      -- An expression index, because source_location is stored as JSON
-      -- rather than split into columns. Splitting it would be the faster
-      -- schema and would also mean migrating every existing store on disk;
-      -- the JSON stays authoritative and the index makes the file lookup a
-      -- seek instead of a scan.
+      -- Expression index — source_location stays JSON (splitting would mean
+      -- migrating every existing store) but this makes lookup a seek, not a scan.
       CREATE INDEX IF NOT EXISTS idx_evidence_source_file ON evidence(json_extract(source_location, '$.file'));
     `);
     }
     /**
-     * The only way to persist evidence. Redaction runs here, unconditionally
+     * The only way to persist evidence. Redaction runs here unconditionally
      * — `EvidenceInput` has no `redactionStatus` field a caller could set,
-     * so there is no way to write a record claiming redaction happened
-     * without redact() actually having run. This is the structural
-     * guarantee plan §28 asks for: "raw runtime evidence must not
-     * automatically become unrestricted AI context."
+     * so there's no way to write a record claiming redaction happened
+     * without it actually running (§28's structural guarantee).
      */
     write(input) {
-        // **Validated at the boundary, not trusted from the type system (§3).**
-        // `EvidenceInput` is typed, and inside one compiled program that is
-        // enough. It stops being enough the moment a value arrives from anywhere
-        // the compiler did not check — a JSON body, a stored row from another
-        // version, a hand-written fixture, a collector built against an older
-        // contract. §3's own rows are "invalid event rejected" and "unknown event
-        // handled explicitly", and a compile-time union answers neither.
-        //
-        // Throws rather than coerces. A caller writing an event type this build
-        // does not know is a bug, and the cheapest moment to say so is before the
-        // row exists.
+        // Validated at the boundary, not trusted from the type system — a
+        // compile-time union says nothing about a value from a JSON body, an
+        // old stored row, or a collector on an older contract. Throws rather
+        // than coerces: an unknown event type is a bug, cheapest to say so
+        // before the row exists.
         assertInVocabulary("eventType", input.eventType, RUNTIME_EVENT_TYPES);
         assertInVocabulary("source", input.source, EVIDENCE_SOURCES);
         const { payload, redactionStatus } = redact(input.payload, this.#redactionPolicy);
@@ -118,7 +93,7 @@ export class EvidenceStore {
             .run(evidence.evidenceId, evidence.executionId, evidence.timestamp, evidence.source, evidence.service, evidence.process, evidence.eventType, JSON.stringify(evidence.payload), evidence.traceId, evidence.requestId, evidence.correlationId, evidence.graphNodeId, evidence.sourceLocation ? JSON.stringify(evidence.sourceLocation) : null, evidence.stackTrace ? JSON.stringify(evidence.stackTrace) : null, evidence.confidence, evidence.redactionStatus, evidence.collectorVersion);
         return evidence;
     }
-    /** Every item this execution produced, oldest first — retrievable after the execution has ended, as long as the store is reopened against the same file (plan §36 gate 9). */
+    /** Every item this execution produced, oldest first — retrievable after the execution ends, as long as the store reopens against the same file. */
     getByExecution(executionId) {
         const rows = this.#db
             .prepare(`SELECT * FROM evidence WHERE execution_id = ? ORDER BY timestamp ASC`)
@@ -130,18 +105,12 @@ export class EvidenceStore {
         return row ? rowToEvidence(row) : null;
     }
     /**
-     * Every row whose enum fields this build cannot interpret (§3).
-     *
-     * The explicit runtime path for an unknown event. Reads the raw columns
-     * without rehydrating, so it works on precisely the store that `query()`
-     * refuses — a caller that hits the refusal can call this to learn which
-     * rows, which fields and which values, instead of having a throw and no
-     * next step.
-     *
-     * Deliberately reports rather than repairs. Rewriting an unknown
-     * `event_type` to something this build knows would be inventing an
-     * observation, and deleting the row would destroy evidence that a newer
-     * build can read perfectly well.
+     * Every row whose enum fields this build can't interpret. Reads raw
+     * columns without rehydrating, so it works on the store that `query()`
+     * refuses — gives a caller a next step instead of just a throw. Reports
+     * rather than repairs: rewriting an unknown value would invent an
+     * observation, and deleting the row would destroy evidence a newer build
+     * can read fine.
      */
     integrityCheck() {
         const rows = this.#db
@@ -163,19 +132,15 @@ export class EvidenceStore {
         return issues;
     }
     /**
-     * Persist the execution behind an `executionId` (§24).
+     * Persist the execution behind an `executionId`.
      *
-     * **The configuration is redacted on the way in, and that is not an
-     * over-application of §20.** Every one of §20's rows is about an evidence
-     * payload, but `configuration.services[x].command` is a command line, and
-     * a command line is one of the classic places a credential travels:
-     * `node server.mjs --api-key=…`. The same `redact()` the evidence write
-     * path uses runs here, on the same terms, and `redactedKeys` reports what
-     * it caught rather than leaving a caller to guess.
+     * The configuration is redacted on the way in too —
+     * `configuration.services[x].command` is a command line, a classic place
+     * a credential travels. Same `redact()` as the evidence write path;
+     * `redactedKeys` reports what it caught.
      *
-     * Re-recording the same `executionId` replaces the row. An execution is
-     * recorded once by the component that owns it; a second record for the
-     * same id is a re-run of that recording, not a second execution.
+     * Re-recording the same `executionId` replaces the row — a second record
+     * is a re-run of that recording, not a second execution.
      */
     recordExecution(input) {
         const { payload: configuration, redactedKeys } = redact(input.configuration, this.#redactionPolicy);
@@ -206,6 +171,32 @@ export class EvidenceStore {
             redactedKeys,
         };
     }
+    /**
+     * Every distinct `execution_id` in `evidence` with no matching row in
+     * `executions` — B7's enforcement half.
+     *
+     * **Deliberately a query a caller runs, not a `FOREIGN KEY` constraint.**
+     * This store tolerates legacy orphans on purpose — `replay()`'s own error
+     * message names that exact state as the one every store predating
+     * `recordExecution` is in, and this package's own tests write evidence
+     * against an unrecorded execution as a real, intentional case. A hard
+     * constraint would refuse those writes (and every other test in this
+     * repo's two packages that constructs a store and calls `write()` without
+     * first calling `recordExecution`, which is most of them) rather than
+     * merely reporting the gap. Call this from a fresh execution's own tests
+     * — never against a pre-existing on-disk store you did not build in the
+     * test — to catch a NEW orphan the moment one is introduced, without
+     * breaking the many legacy and standalone callers this store still has.
+     */
+    orphanedExecutionIds() {
+        const rows = this.#db
+            .prepare(`SELECT DISTINCT e.execution_id AS execution_id
+         FROM evidence e
+         LEFT JOIN executions x ON x.execution_id = e.execution_id
+         WHERE x.execution_id IS NULL`)
+            .all();
+        return rows.map((row) => row.execution_id);
+    }
     getExecution(executionId) {
         const row = this.#db.prepare(`SELECT * FROM executions WHERE execution_id = ?`).get(executionId);
         if (row === undefined)
@@ -222,19 +213,15 @@ export class EvidenceStore {
         };
     }
     /**
-     * Replay an execution's evidence (§24).
-     *
-     * **Replays evidence, not the application.** Nothing is spawned, driven or
-     * reissued; this returns what was recorded, in recorded order, so
-     * correlation, findings and an evidence package can be re-derived without
-     * booting anything. A replay that quietly re-executed would produce a *new*
-     * observation while claiming to reproduce an old one.
+     * Replay an execution's evidence. Replays evidence, not the application —
+     * nothing is spawned, driven or reissued, just returned in recorded
+     * order. A replay that re-executed would produce a *new* observation
+     * while claiming to reproduce an old one.
      *
      * Throws for an unrecorded execution rather than returning an empty
-     * replay. Evidence rows can exist for an `executionId` that was never
-     * recorded — that is precisely the pre-§24 state — and answering with
-     * "here is your replay, minus the execution" would present the gap as a
-     * result.
+     * replay — evidence rows can exist for an id that was never recorded,
+     * and answering with "here is your replay, minus the execution" would
+     * present the gap as a result.
      */
     replay(executionId, currentEnvironment) {
         const execution = this.getExecution(executionId);
@@ -261,11 +248,8 @@ export class EvidenceStore {
                     "observed nothing) and is not the same as an unrecorded execution, which throws.",
             });
         }
-        // getByExecution orders by timestamp, so this cannot detect a bad sort —
-        // it detects a recorded stream whose own timestamps were never
-        // monotonic, which means "recorded order" and "the order things
-        // happened" are not the same list and a reader replaying by index is
-        // reading a sequence that never occurred.
+        // Detects a recorded stream whose timestamps were never monotonic —
+        // "recorded order" and "the order things happened" diverge.
         for (let i = 1; i < evidence.length; i += 1) {
             if (evidence[i - 1].timestamp === evidence[i].timestamp)
                 continue;
@@ -284,28 +268,16 @@ export class EvidenceStore {
     /**
      * Record that correlation resolved this evidence to a graph node.
      *
-     * **Written because the correlation was never durable, and that made two
-     * of the evidence package's four selection tiers inert.** Found by
-     * mutation, not by reading: `assembleEvidencePackage`'s tier 2 queries
-     * `graphNodeId`, and a mutation that dropped the execution scope from that
-     * query changed nothing at all — because in the real pipeline no stored row
-     * has a `graphNodeId` to match. `graphNodeId` was set in memory at
-     * composition time, on a copy, and thrown away with the array that held it.
-     * Every downstream question of the form "what else named this node" was
-     * therefore answerable only for evidence some caller happened to still be
-     * holding.
-     *
-     * **Refuses to re-attribute to a different node.** One observation
-     * genuinely can name two graph entities (RT-052's backend exception names
-     * the endpoint in its text and the function in its stack), and the answer
-     * to that is `EvidenceAttribution` passed alongside the evidence — an
-     * output of correlation, not a property of the observation. Letting this
-     * method overwrite would silently discard the first correlation and leave
-     * the store asserting the second as if it were the only one. Idempotent
-     * for the same node, so re-running a correlation pass is safe.
+     * Written because correlation was never durable — `graphNodeId` was set
+     * in memory at composition time, on a copy, and thrown away with it,
+     * making two of the evidence package's four selection tiers inert.
+     * Found by mutation testing, not by reading.
      *
-     * Throws for an unknown `evidenceId`: a caller attributing evidence this
-     * store does not hold has a bug, and writing nothing would hide it.
+     * Refuses to re-attribute to a different node: one observation can
+     * genuinely name two graph entities (RT-052), and that's expressed as an
+     * `EvidenceAttribution` alongside the evidence, not by overwriting the
+     * stored one. Idempotent for the same node. Throws for an unknown
+     * `evidenceId` — a caller bug, not something to write around silently.
      */
     attribute(evidenceId, graphNodeId) {
         const existing = this.getById(evidenceId);
@@ -322,30 +294,17 @@ export class EvidenceStore {
         this.#db.prepare(`UPDATE evidence SET graph_node_id = ? WHERE evidence_id = ?`).run(graphNodeId, evidenceId);
     }
     /**
-     * The general query surface (§19).
+     * The general query surface. Before this, the store answered two
+     * questions (by id, by execution); five of six needed axes didn't exist.
      *
-     * Before this, the store answered two questions — by id and by execution —
-     * and §19 asks for six axes: trace, service, graph node, source location,
-     * time, and execution. **Five of the six did not exist**, which is
-     * invisible from "evidence persistence works" and was found by auditing
-     * the checklist rather than by anything failing.
+     * `executionId` is required and may be explicitly `null` — the
+     * load-bearing choice here. Making it optional-with-a-default risks a
+     * caller forgetting it and silently leaking evidence across executions;
+     * passing `null` is a deliberate statement that a cross-execution answer
+     * is wanted, same discipline `resolveSymbolNode` applies to `repo`.
      *
-     * **`executionId` is required and may be explicitly `null`, and that is
-     * the load-bearing design choice here.** Every other field is optional.
-     * Evidence not leaking between executions is a guarantee this repo
-     * enforces elsewhere (`composeFinding` excludes foreign executions with a
-     * named reason), and a query is the obvious way to lose it: ask for a
-     * trace id and quietly receive a prior run's evidence too. Making the
-     * field optional-with-a-default would mean the safe behaviour depends on
-     * remembering to pass something, which is how the default gets forgotten
-     * exactly once. Passing `null` is a deliberate statement that a
-     * cross-execution answer is wanted — the same discipline
-     * `resolveSymbolNode` applies to `repo`, where there is no honest default
-     * either.
-     *
-     * Criteria combine with AND. An empty criteria object plus a null
-     * execution returns everything, which is a real request (a store dump)
-     * and is spelled out rather than reachable by accident.
+     * Criteria combine with AND. Empty criteria + null execution returns
+     * everything — a real request (store dump), spelled out on purpose.
      */
     query(criteria) {
         const clauses = [];
@@ -354,11 +313,8 @@ export class EvidenceStore {
             clauses.push("execution_id = ?");
             params.push(criteria.executionId);
         }
-        // Each of these is an exact match, never a LIKE. A prefix or substring
-        // match on a trace id or a service name would return evidence about a
-        // *different* thing that happens to share a prefix -- RT-031's
-        // identity-proxy class, and the last place it belongs is the query
-        // layer that everything above reads through.
+        // Exact match, never LIKE — a prefix match would return evidence about
+        // a *different* thing sharing a prefix (RT-031's identity-proxy class).
         for (const [column, value] of [
             ["trace_id", criteria.traceId],
             ["request_id", criteria.requestId],
@@ -403,14 +359,10 @@ export class EvidenceStore {
         return rows.map(rowToEvidence);
     }
     /**
-     * Deletes every row whose own `timestamp` is older than `retentionMs`
-     * (constructor option) relative to `now` (defaults to the real current
-     * time; overridable so a test can purge without a real sleep). Never
-     * called automatically -- no timer, no call from `write()` -- a caller
-     * decides when retention actually runs. Throws rather than silently
-     * no-op-ing if `retentionMs` was never configured: a caller explicitly
-     * asking to purge with no policy in place is a configuration mistake
-     * worth surfacing, not masking.
+     * Deletes rows older than `retentionMs` relative to `now` (overridable
+     * for tests). Never called automatically. Throws rather than no-op-ing
+     * if `retentionMs` was never configured — purging with no policy is a
+     * config mistake worth surfacing.
      */
     purgeExpired(now = new Date()) {
         if (this.#retentionMs === null) {
@@ -424,14 +376,7 @@ export class EvidenceStore {
         this.#db.close();
     }
 }
-/**
- * Throws when a value is outside the vocabulary this build knows.
- *
- * The message names the value **and** the vocabulary, because the two useful
- * conclusions are opposite: an unknown value is either a typo (fix the caller)
- * or a newer contract (this build is the old one), and only seeing both lists
- * distinguishes them.
- */
+/** Throws when a value is outside this build's vocabulary. Names both the value and the vocabulary — an unknown value is either a typo or a newer contract, and only seeing both distinguishes them. */
 function assertInVocabulary(field, value, vocabulary) {
     if (vocabulary.includes(value))
         return;
@@ -442,21 +387,12 @@ function assertInVocabulary(field, value, vocabulary) {
 /**
  * Rehydrate a row, refusing one this build cannot interpret.
  *
- * **The previous version blind-cast every enum field** — `row.event_type as
- * Evidence["eventType"]` — which is a `as` that cannot fail and a value that
- * can. A store file written by a build with an extra `RuntimeEventType`, a
- * restored backup, or a hand-edited row produced a fully-typed `Evidence`
- * whose `eventType` no `switch` in this program handles, and nothing anywhere
- * said so. §3's "unknown event handled explicitly" row was open for exactly
- * this, and the handling could not be added upstream because there was no
- * point at which the unknown was ever recognised as unknown.
- *
- * **It throws rather than skipping.** Skipping would return fewer rows while
- * every caller treated the result as complete — the "unsupported silently
- * becomes no failure" shape, applied to a query result, which is the worst
- * place for it: `composeFinding` would compose over a subset and report
- * confidently. `integrityCheck()` exists so a caller facing this can find out
- * how bad it is without the throw being a dead end.
+ * Previously blind-cast every enum field (`as Evidence["eventType"]`) — an
+ * `as` that can't fail on a value that can. A store from a build with an
+ * extra event type produced a fully-typed `Evidence` no `switch` handled,
+ * silently. Throws rather than skips: skipping would let `composeFinding`
+ * compose over a subset and report confidently. `integrityCheck()` gives a
+ * caller a next step instead of a dead-end throw.
  */
 function rowToEvidence(raw) {
     const row = { ...raw };
@@ -487,14 +423,10 @@ function rowToEvidence(raw) {
 }
 /**
  * `serviceName -> command` out of an `ExecutionConfiguration`-shaped object.
- *
- * Written defensively against `unknown` rather than typed against
- * `ExecutionConfiguration`, because the configuration reaching this store has
- * already been through `redact()` and is no longer that type: a redacted
- * command is the string `[REDACTED]`, which is still a string, but a redacted
- * *services* object could in principle be a marker too. Reading it
- * structurally means a surprising shape yields an empty map rather than a
- * throw inside a persistence call.
+ * Written defensively against `unknown`, not typed against
+ * `ExecutionConfiguration` — the configuration has already been through
+ * `redact()` and may no longer match that shape. A surprising shape yields
+ * an empty map, not a throw inside a persistence call.
  */
 function serviceCommandsOf(configuration) {
     const services = configuration?.services;

package/dist/evidence-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"evidence-store.js","sourceRoot":"","sources":["../src/evidence-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,GAIpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,MAAM,EAAwB,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EACL,kBAAkB,EAClB,sBAAsB,GAKvB,MAAM,aAAa,CAAC;AAkErB,MAAM,OAAO,aAAa;IACxB,GAAG,CAAe;IAClB,gBAAgB,CAAkB;IAClC,YAAY,CAAgB;IAE5B,YAAY,OAA6B;QACvC,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;QACtD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;QAChD,IAAI,CAAC,GAAG,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAuDb,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,KAAoB;QACxB,wEAAwE;QACxE,oEAAoE;QACpE,yEAAyE;QACzE,sEAAsE;QACtE,sEAAsE;QACtE,0EAA0E;QAC1E,iEAAiE;QACjE,EAAE;QACF,wEAAwE;QACxE,0EAA0E;QAC1E,cAAc;QACd,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACtE,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAE7D,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAa,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;QAE5F,IAAI,CAAC,GAAG;aACL,OAAO,CACN;;;;qEAI6D,CAC9D;aACA,GAAG,CACF,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,WAAW,EACpB,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,SAAS,EAClB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAChC,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,aAAa,EACtB,QAAQ,CAAC,WAAW,EACpB,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,EACxE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAChE,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,eAAe,EACxB,QAAQ,CAAC,gBAAgB,CAC1B,CAAC;QAEJ,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,8KAA8K;IAC9K,cAAc,CAAC,WAAmB;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CAAC,sEAAsE,CAAC;aAC/E,GAAG,CAAC,WAAW,CAA6B,CAAC;QAChD,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,CAAC,UAAkB;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7F,OAAO,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAA6B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,cAAc;QAKZ,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CAAC,wEAAwE,CAAC;aACjF,GAAG,EAKH,CAAC;QAEJ,MAAM,MAAM,GAA2D,EAAE,CAAC;QAC1E,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI;gBACvC,CAAC,WAAW,EAAE,GAAG,CAAC,UAAU,EAAE,mBAAmB,CAAC;gBAClD,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC;gBACxC,CAAC,iBAAiB,EAAE,GAAG,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;aACrD,EAAE,CAAC;gBACX,IAAI,CAAE,UAAgC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvD,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,eAAe,CAAC,KAQf;QACC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACpG,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;QAC9F,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEhE,IAAI,CAAC,GAAG;aACL,OAAO,CACN;;;;;;;;;;;kDAW0C,CAC3C;aACA,GAAG,CACF,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,MAAM,EACZ,UAAU,EACV,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAC7B,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAC3B,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAC7B,CAAC;QAEJ,OAAO;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU;YACV,aAAa;YACb,WAAW;YACX,YAAY;SACb,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,WAAmB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,WAAW,CAElF,CAAC;QACd,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACxC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACvC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACrC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACjC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACtC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;YACvD,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAA2B;YAC7E,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAa;SACnE,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,MAAM,CAAC,WAAmB,EAAE,kBAA2C;QACrE,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,iCAAiC;gBAC/F,+FAA+F;gBAC/F,kFAAkF,CACrF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAClD,MAAM,OAAO,GACX,kBAAkB,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAoB,EAAE,CAAC;QAErC,MAAM,WAAW,GAAG,sBAAsB,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC3E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAqB;gBAC3B,MAAM,EACJ,wEAAwE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBAClG,mGAAmG;aACtG,CAAC,CAAC;QACL,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa;gBACnB,MAAM,EACJ,8FAA8F;oBAC9F,iFAAiF;aACpF,CAAC,CAAC;QACL,CAAC;QAED,yEAAyE;QACzE,+DAA+D;QAC/D,gEAAgE;QAChE,qEAAqE;QACrE,0CAA0C;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,IAAI,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAE,CAAC,SAAS;gBAAE,SAAS;YACpE,IAAI,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC,SAAS;gBAAE,SAAS;YAClE,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,sBAAsB;gBAC5B,MAAM,EACJ,+FAA+F;oBAC/F,2FAA2F;oBAC3F,8DAA8D;aACjE,CAAC,CAAC;YACH,MAAM;QACR,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACxE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,SAAS,CAAC,UAAkB,EAAE,WAAmB;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CACb,uBAAuB,UAAU,6BAA6B,QAAQ,CAAC,WAAW,gBAAgB;gBAChG,kBAAkB,WAAW,wDAAwD;gBACrF,8EAA8E,CACjF,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW;YAAE,OAAO;QACjD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAC/G,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,KAAK,CAAC,QAAuB;QAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAwB,EAAE,CAAC;QAEvC,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpC,CAAC;QAED,uEAAuE;QACvE,sEAAsE;QACtE,+DAA+D;QAC/D,mEAAmE;QACnE,6CAA6C;QAC7C,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI;YAC5B,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC;YAC9B,CAAC,YAAY,EAAE,QAAQ,CAAC,SAAS,CAAC;YAClC,CAAC,gBAAgB,EAAE,QAAQ,CAAC,aAAa,CAAC;YAC1C,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC;YAC7B,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC;YAC3B,CAAC,YAAY,EAAE,QAAQ,CAAC,SAAS,CAAC;YAClC,CAAC,eAAe,EAAE,QAAQ,CAAC,WAAW,CAAC;SAC/B,EAAE,CAAC;YACX,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YAC5D,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YAC5D,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QAED,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,+BAA+B;QAC/B,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE9D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CAAC,0BAA0B,KAAK,2BAA2B,KAAK,EAAE,CAAC;aAC1E,GAAG,CAAC,GAAG,MAAM,CAA6B,CAAC;QAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED;;;;;;;;;OASG;IACH,YAAY,CAAC,MAAY,IAAI,IAAI,EAAE;QACjC,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;CACF;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,KAAa,EAAE,KAAa,EAAE,UAA6B;IACrF,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IACvC,MAAM,IAAI,KAAK,CACb,kBAAkB,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI;QAC9F,8FAA8F;QAC9F,+EAA+E,CAClF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,aAAa,CAAC,GAAgB;IACrC,MAAM,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IACvB,kBAAkB,CAAC,WAAW,EAAE,GAAG,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACrE,kBAAkB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3D,kBAAkB,CAAC,iBAAiB,EAAE,GAAG,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAChF,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EAAE,GAAG,CAAC,MAA4B;QACxC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,GAAG,CAAC,UAAmC;QAClD,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAY;QAC3C,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,WAAW,EAAE,GAAG,CAAC,aAAa;QAC9B,cAAc,EAAE,GAAG,CAAC,eAAe;YACjC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAgC;YACjE,CAAC,CAAC,IAAI;QACR,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAA4B,CAAC,CAAC,CAAC,IAAI;QAC5F,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,eAAe,EAAE,GAAG,CAAC,gBAA+C;QACpE,gBAAgB,EAAE,GAAG,CAAC,iBAAiB;KACxC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,iBAAiB,CAAC,aAAsB;IAC/C,MAAM,QAAQ,GAAI,aAA+C,EAAE,QAAQ,CAAC;IAC5E,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACjE,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAmC,CAAC,EAAE,CAAC;QAClF,MAAM,OAAO,GAAI,OAAwC,EAAE,OAAO,CAAC;QACnE,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;IAC5D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"evidence-store.js","sourceRoot":"","sources":["../src/evidence-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,GAIpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,MAAM,EAAwB,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EACL,kBAAkB,EAClB,sBAAsB,GAKvB,MAAM,aAAa,CAAC;AA2DrB,MAAM,OAAO,aAAa;IACxB,GAAG,CAAe;IAClB,gBAAgB,CAAkB;IAClC,YAAY,CAAgB;IAE5B,YAAY,OAA6B;QACvC,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;QACtD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;QAChD,IAAI,CAAC,GAAG,GAAG,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA4Cb,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAoB;QACxB,kEAAkE;QAClE,qEAAqE;QACrE,qEAAqE;QACrE,mEAAmE;QACnE,yBAAyB;QACzB,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACtE,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAE7D,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAa,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;QAE5F,IAAI,CAAC,GAAG;aACL,OAAO,CACN;;;;qEAI6D,CAC9D;aACA,GAAG,CACF,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,WAAW,EACpB,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,SAAS,EAClB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAChC,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,aAAa,EACtB,QAAQ,CAAC,WAAW,EACpB,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,EACxE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAChE,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,eAAe,EACxB,QAAQ,CAAC,gBAAgB,CAC1B,CAAC;QAEJ,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,mJAAmJ;IACnJ,cAAc,CAAC,WAAmB;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CAAC,sEAAsE,CAAC;aAC/E,GAAG,CAAC,WAAW,CAA6B,CAAC;QAChD,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,CAAC,UAAkB;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7F,OAAO,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAA6B,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,CAAC;IAED;;;;;;;OAOG;IACH,cAAc;QAKZ,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CAAC,wEAAwE,CAAC;aACjF,GAAG,EAKH,CAAC;QAEJ,MAAM,MAAM,GAA2D,EAAE,CAAC;QAC1E,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI;gBACvC,CAAC,WAAW,EAAE,GAAG,CAAC,UAAU,EAAE,mBAAmB,CAAC;gBAClD,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC;gBACxC,CAAC,iBAAiB,EAAE,GAAG,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;aACrD,EAAE,CAAC;gBACX,IAAI,CAAE,UAAgC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACvD,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC7D,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;;OAUG;IACH,eAAe,CAAC,KAQf;QACC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACpG,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC;QAC9F,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAEhE,IAAI,CAAC,GAAG;aACL,OAAO,CACN;;;;;;;;;;;kDAW0C,CAC3C;aACA,GAAG,CACF,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,MAAM,EACZ,UAAU,EACV,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAC7B,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAC3B,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAC7B,CAAC;QAEJ,OAAO;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU;YACV,aAAa;YACb,WAAW;YACX,YAAY;SACb,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,oBAAoB;QAClB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CACN;;;sCAG8B,CAC/B;aACA,GAAG,EAAgC,CAAC;QACvC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC7C,CAAC;IAED,YAAY,CAAC,WAAmB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,WAAW,CAElF,CAAC;QACd,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACxC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACvC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACrC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACjC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACtC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;YACvD,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAA2B;YAC7E,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAa;SACnE,CAAC;IACJ,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,WAAmB,EAAE,kBAA2C;QACrE,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,qCAAqC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,iCAAiC;gBAC/F,+FAA+F;gBAC/F,kFAAkF,CACrF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAClD,MAAM,OAAO,GACX,kBAAkB,IAAI,kBAAkB,CAAC,iBAAiB,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAoB,EAAE,CAAC;QAErC,MAAM,WAAW,GAAG,sBAAsB,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC3E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAqB;gBAC3B,MAAM,EACJ,wEAAwE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBAClG,mGAAmG;aACtG,CAAC,CAAC;QACL,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,aAAa;gBACnB,MAAM,EACJ,8FAA8F;oBAC9F,iFAAiF;aACpF,CAAC,CAAC;QACL,CAAC;QAED,oEAAoE;QACpE,4DAA4D;QAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,IAAI,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAE,CAAC,SAAS;gBAAE,SAAS;YACpE,IAAI,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC,SAAS;gBAAE,SAAS;YAClE,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,sBAAsB;gBAC5B,MAAM,EACJ,+FAA+F;oBAC/F,2FAA2F;oBAC3F,8DAA8D;aACjE,CAAC,CAAC;YACH,MAAM;QACR,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IACxE,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,SAAS,CAAC,UAAkB,EAAE,WAAmB;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CACb,uBAAuB,UAAU,6BAA6B,QAAQ,CAAC,WAAW,gBAAgB;gBAChG,kBAAkB,WAAW,wDAAwD;gBACrF,8EAA8E,CACjF,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,KAAK,WAAW;YAAE,OAAO;QACjD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAC/G,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,QAAuB;QAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAwB,EAAE,CAAC;QAEvC,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpC,CAAC;QAED,uEAAuE;QACvE,wEAAwE;QACxE,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI;YAC5B,CAAC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC;YAC9B,CAAC,YAAY,EAAE,QAAQ,CAAC,SAAS,CAAC;YAClC,CAAC,gBAAgB,EAAE,QAAQ,CAAC,aAAa,CAAC;YAC1C,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC;YAC7B,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC;YAC3B,CAAC,YAAY,EAAE,QAAQ,CAAC,SAAS,CAAC;YAClC,CAAC,eAAe,EAAE,QAAQ,CAAC,WAAW,CAAC;SAC/B,EAAE,CAAC;YACX,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QAED,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YAC5D,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YAC5D,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QAED,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,+BAA+B;QAC/B,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE9D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG;aAClB,OAAO,CAAC,0BAA0B,KAAK,2BAA2B,KAAK,EAAE,CAAC;aAC1E,GAAG,CAAC,GAAG,MAAM,CAA6B,CAAC;QAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,MAAY,IAAI,IAAI,EAAE;QACjC,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;CACF;AAED,wMAAwM;AACxM,SAAS,kBAAkB,CAAC,KAAa,EAAE,KAAa,EAAE,UAA6B;IACrF,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO;IACvC,MAAM,IAAI,KAAK,CACb,kBAAkB,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,kBAAkB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI;QAC9F,8FAA8F;QAC9F,+EAA+E,CAClF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,aAAa,CAAC,GAAgB;IACrC,MAAM,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;IACvB,kBAAkB,CAAC,WAAW,EAAE,GAAG,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACrE,kBAAkB,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3D,kBAAkB,CAAC,iBAAiB,EAAE,GAAG,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAChF,OAAO;QACL,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EAAE,GAAG,CAAC,MAA4B;QACxC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,GAAG,CAAC,UAAmC;QAClD,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAY;QAC3C,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,WAAW,EAAE,GAAG,CAAC,aAAa;QAC9B,cAAc,EAAE,GAAG,CAAC,eAAe;YACjC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAgC;YACjE,CAAC,CAAC,IAAI;QACR,UAAU,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAA4B,CAAC,CAAC,CAAC,IAAI;QAC5F,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,eAAe,EAAE,GAAG,CAAC,gBAA+C;QACpE,gBAAgB,EAAE,GAAG,CAAC,iBAAiB;KACxC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,aAAsB;IAC/C,MAAM,QAAQ,GAAI,aAA+C,EAAE,QAAQ,CAAC;IAC5E,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACjE,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAmC,CAAC,EAAE,CAAC;QAClF,MAAM,OAAO,GAAI,OAAwC,EAAE,OAAO,CAAC;QACnE,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;IAC5D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/redaction.d.ts

@@ -1,45 +1,23 @@
 /**
- * Redaction (plan §28): "Raw runtime evidence must not automatically
- * become unrestricted AI context." This runs at write time, unconditionally
- * — `EvidenceStore.write` has no code path that skips it — rather than at
- * read time, because a read-time pass is one forgotten call site away from
- * failing (peer's framing, kept verbatim since it's exactly right).
+ * Redaction (plan §28): raw runtime evidence must not automatically become
+ * unrestricted AI context. Runs at write time, unconditionally — a
+ * read-time pass is one forgotten call site away from failing.
  *
- * Extends the original key-name-only pass with the two capabilities §28
- * names that a pure key-name walk structurally cannot reach:
+ * Extends the key-name-only pass with two capabilities a pure key walk
+ * can't reach: body filtering (bodies are JSON/text-*encoded strings*, not
+ * parsed objects, so a secret inside one was invisible to key matching —
+ * body-bearing keys are now parsed if JSON and recursed into, or
+ * pattern-scanned as text), and PII filtering, kept as a separate
+ * independently toggleable pattern from credentials.
  *
- * - **Body filtering.** `NETWORK_REQUEST`/`NETWORK_RESPONSE` evidence
- *   (`packages/browser`) carries `postData`/`body` as a JSON- or
- *   text-*encoded string*, not a parsed object -- the original redact()
- *   walks object structure, so a secret sitting inside that string (a
- *   `{"password": "hunter2"}` request body, say) was invisible to it
- *   regardless of how complete `SENSITIVE_KEY_PATTERN` was. Body-bearing
- *   keys now get parsed (if JSON) and recursed into with the same rules,
- *   or pattern-scanned as text otherwise.
- * - **PII-aware field filtering.** A separate, independently toggleable
- *   pattern from credentials -- these are different concerns with
- *   different owners in a real system (security vs. privacy), and
- *   collapsing them into one pattern would make either impossible to
- *   reason about or configure on its own.
+ * Configurable via `RedactionPolicy` (`EvidenceStoreOptions`). Every filter
+ * fails closed: content it can't classify at all is withheld wholesale
+ * rather than assumed safe. A marker replaces the value in place — the key
+ * survives so a reader can see *that* something was withheld.
  *
- * **Configurable by whom, refused how (the two questions this row asked to
- * have decided rather than defaulted):** by whoever constructs the
- * `EvidenceStore` (`RedactionPolicy`, plumbed through
- * `EvidenceStoreOptions` -- see `evidence-store.ts`), and every filter
- * fails closed, disclosed, not silent: a value the body/PII filter cannot
- * classify at all (not JSON, not text that looks safe to pattern-scan) is
- * withheld wholesale rather than passed through on the assumption that
- * "couldn't parse it" means "couldn't be sensitive." A marker replaces the
- * value in place -- the key survives, so a reader can see *that* something
- * was withheld, never just find it missing (same discipline the original
- * key-based pass already established with `[REDACTED]`).
- *
- * **Not a claim of completeness.** Pattern-based text scanning is
- * inherently partial -- a sensitive string shaped unlike every pattern
- * here passes through unredacted, honestly, not silently promised as
- * covered. What the "fail closed" guarantee actually claims: content this
- * module cannot even classify never leaks by default; content it can
- * classify gets the patterns below applied, not more.
+ * Not a claim of completeness — pattern-based text scanning is inherently
+ * partial. Fail-closed only claims: unclassifiable content never leaks by
+ * default; classifiable content gets the patterns below, not more.
  */
 import type { RedactionStatus } from "@descryy/runtime-contracts";
 export interface RedactionPolicy {
@@ -52,66 +30,33 @@ export interface RedactionResult {
     readonly payload: unknown;
     readonly redactionStatus: RedactionStatus;
     /**
-     * The **key paths** this call redacted by name — `"sessionId"`,
-     * `"headers.authorization"`, `"items[0].email"`. Key names only; no value
-     * ever appears here, which is what makes it safe to log, assert on, and
-     * hand to an operator auditing a policy.
-     *
-     * **Added because `redactionStatus` alone made a real bug invisible for
-     * the life of a package (RT-063).** `SENSITIVE_KEY_PATTERN`'s
-     * `session(id)?` alternative matches the literal key `sessionId`, and all
-     * three browser collectors carried `sessionId: session.sessionId` — an
-     * internal `BrowserSession` handle, not a credential. Every
-     * `NAVIGATION` / `CLICK` / `INPUT` / `NETWORK_*` / `CONSOLE_MESSAGE` that
-     * package ever produced had it silently replaced with a marker.
-     *
-     * The status flag could not reveal it. `redacted` is what a real payload
-     * is *expected* to report, so the one signal that existed said exactly
-     * what it would have said if nothing were wrong — the silent-degradation
-     * shape this repo keeps meeting, in a module whose whole job is to be
-     * trustworthy about what it touched.
+     * The key paths this call redacted by name — `"sessionId"`,
+     * `"headers.authorization"`. Key names only, no values, safe to log or
+     * assert on.
      *
-     * A collector author can now assert `redactedKeys` is empty for a benign
-     * payload, which is a claim the boolean cannot express.
+     * Added because `redactionStatus` alone hid a real bug (RT-063):
+     * `session(id)?` matched the literal key `sessionId`, an internal
+     * `BrowserSession` handle, not a credential — silently marker-replaced
+     * across every browser collector event, with `redacted` reporting
+     * exactly what it would say if nothing were wrong. A collector author
+     * can now assert `redactedKeys` is empty for a benign payload.
      *
-     * **Text-scan hits are not listed here.** A secret found inside a body
-     * string by pattern has no key path — it was matched in free text — and
-     * inventing one (`"body[chars 40-64]"`) would put a fragment of the
-     * surrounding value into a field documented as name-only. Those still
-     * flip `redactionStatus`; `redactedKeys` answers "which field did the
-     * policy hit by name", not "was anything redacted at all".
+     * Text-scan hits are NOT listed here — a match in free text has no key
+     * path, and inventing one would leak a value fragment into a field
+     * documented as name-only. Those still flip `redactionStatus`.
      */
     readonly redactedKeys: readonly string[];
 }
 export declare function redact(payload: unknown, policy?: RedactionPolicy): RedactionResult;
-/**
- * Which keys the default policy would redact, without redacting anything.
- *
- * The tool a collector author needs *before* shipping a payload shape: hand
- * it the key names, get back the ones that collide and would be wiped. The
- * `sessionId` collision (RT-063) was a name nobody thought to check against
- * a pattern list nobody thought to read, and the check costs one call.
- */
+/** Which keys the default policy would redact, without redacting anything — check a payload shape before shipping it (RT-063's `sessionId` collision cost one call to catch). */
 export declare function collidingKeys(keys: readonly string[], policy?: RedactionPolicy): readonly string[];
 /**
  * Redact credential values out of a command line, keeping the shape.
- *
- * Two forms, because a command line has two:
- *
- * - **Attached** -- `--api-key=SEKRET`, `TOKEN:abc`, `DB_PASSWORD=hunter2`.
- *   The name and the separator survive; only the value is replaced.
- * - **Detached** -- `["--api-key", "SEKRET"]` or `--api-key SEKRET`, where the
- *   secret is the *next* token. This is the form a naive per-token scanner
- *   misses entirely: `SEKRET` on its own carries nothing that marks it as a
- *   secret, and the only thing that does is the token before it.
- *
- * A detached flag at the very end of a command consumes nothing -- there is
- * no value to redact, and inventing one would corrupt the command.
- *
- * The name and separator are kept on purpose. A command redacted to
- * `[REDACTED]` wholesale is useless to the reader it was persisted for; a
- * command redacted to `node server.mjs --api-key=[REDACTED]` still answers
- * "what was run, and with what shape of argument".
+ * Two forms: attached (`--api-key=SEKRET`, name/separator survive) and
+ * detached (`--api-key SEKRET`, secret is the *next* token — what a naive
+ * per-token scanner misses). A detached flag at the end consumes nothing.
+ * Name/separator kept so a redacted command still answers "what was run,
+ * with what shape of argument", not just `[REDACTED]` wholesale.
  */
 export declare function redactCommand(value: string | readonly string[]): {
     value: string | string[];

package/dist/redaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AA2GlE,MAAM,WAAW,eAAe;IAC9B,4JAA4J;IAC5J,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,+FAA+F;IAC/F,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAID,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED,wBAAgB,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,GAAE,eAAoB,GAAG,eAAe,CAStF;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,GAAE,eAAoB,GAAG,SAAS,MAAM,EAAE,CAQtG;AA2HD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG;IAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAahH"}
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAkElE,MAAM,WAAW,eAAe;IAC9B,4JAA4J;IAC5J,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,+FAA+F;IAC/F,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAID,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED,wBAAgB,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,GAAE,eAAoB,GAAG,eAAe,CAStF;AAED,iLAAiL;AACjL,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,GAAE,eAAoB,GAAG,SAAS,MAAM,EAAE,CAQtG;AAoHD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG;IAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CAUhH"}