@dharma-ai-labs/agent-fabric-evidence-reduction 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.d.ts +101 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +192 -0
- package/dist/index.js.map +1 -0
- package/dist/index.test.d.ts +2 -0
- package/dist/index.test.d.ts.map +1 -0
- package/dist/index.test.js +106 -0
- package/dist/index.test.js.map +1 -0
- package/package.json +17 -0
package/dist/index.d.ts
ADDED
|
@@ -0,0 +1,101 @@
|
|
|
1
|
+
import { type EvidenceState } from '@dharma-ai-labs/agent-fabric-contracts';
|
|
2
|
+
import type { OrganizationPolicy } from '@dharma-ai-labs/agent-fabric-policy';
|
|
3
|
+
import type { ProviderSession } from '@dharma-ai-labs/agent-fabric-provider-adapters';
|
|
4
|
+
export interface RedactionStats {
|
|
5
|
+
classes: Set<string>;
|
|
6
|
+
redactedValues: number;
|
|
7
|
+
excludedPaths: number;
|
|
8
|
+
inputBytes: number;
|
|
9
|
+
outputBytes: number;
|
|
10
|
+
}
|
|
11
|
+
export interface AgentEvent {
|
|
12
|
+
schema: 'dharma.agent-event/v1';
|
|
13
|
+
eventId: string;
|
|
14
|
+
organizationId: string;
|
|
15
|
+
deviceId: string;
|
|
16
|
+
workspaceId: string;
|
|
17
|
+
provider: ProviderSession['provider'];
|
|
18
|
+
sessionId: string;
|
|
19
|
+
sequence: number;
|
|
20
|
+
occurredAt: string;
|
|
21
|
+
kind: string;
|
|
22
|
+
coverage: EvidenceState;
|
|
23
|
+
contentRefs: string[];
|
|
24
|
+
payload: Record<string, unknown>;
|
|
25
|
+
source: {
|
|
26
|
+
nativeEventId: string | null;
|
|
27
|
+
sourceKind: string;
|
|
28
|
+
localLocatorId: string | null;
|
|
29
|
+
};
|
|
30
|
+
skillBundleId: string | null;
|
|
31
|
+
providerModel: string | null;
|
|
32
|
+
}
|
|
33
|
+
export interface TrajectoryCapsule {
|
|
34
|
+
schema: 'dharma.trajectory-capsule/v1';
|
|
35
|
+
trajectoryId: string;
|
|
36
|
+
revision: number;
|
|
37
|
+
previousRevisionHash: string | null;
|
|
38
|
+
organizationId: string;
|
|
39
|
+
deviceId: string;
|
|
40
|
+
workspaceId: string;
|
|
41
|
+
provider: string;
|
|
42
|
+
sessionId: string;
|
|
43
|
+
taskId: string | null;
|
|
44
|
+
timeRange: {
|
|
45
|
+
start: string;
|
|
46
|
+
end: string;
|
|
47
|
+
};
|
|
48
|
+
status: 'completed' | 'partial';
|
|
49
|
+
evidenceMode: OrganizationPolicy['evidence']['defaultMode'];
|
|
50
|
+
coverage: {
|
|
51
|
+
state: 'observed' | 'partial';
|
|
52
|
+
admittedSessions: number;
|
|
53
|
+
excludedSessions: number;
|
|
54
|
+
missingFields: string[];
|
|
55
|
+
};
|
|
56
|
+
repoState: Record<string, unknown>;
|
|
57
|
+
skillState: Record<string, unknown>;
|
|
58
|
+
events: AgentEvent[];
|
|
59
|
+
contentIndex: Array<{
|
|
60
|
+
contentId: string;
|
|
61
|
+
kind: string;
|
|
62
|
+
bytes: number;
|
|
63
|
+
uploaded: boolean;
|
|
64
|
+
availableLocally: boolean;
|
|
65
|
+
mimeType: string | null;
|
|
66
|
+
normalizedPath: string | null;
|
|
67
|
+
}>;
|
|
68
|
+
validationResults: unknown[];
|
|
69
|
+
redactionReceipt: {
|
|
70
|
+
policyRevision: string;
|
|
71
|
+
classes: string[];
|
|
72
|
+
redactedValues: number;
|
|
73
|
+
excludedPaths: number;
|
|
74
|
+
inputBytes: number;
|
|
75
|
+
outputBytes: number;
|
|
76
|
+
};
|
|
77
|
+
localEvidenceAvailable: Array<{
|
|
78
|
+
contentId: string;
|
|
79
|
+
kind: string;
|
|
80
|
+
bytes: number;
|
|
81
|
+
}>;
|
|
82
|
+
capsuleHash: string;
|
|
83
|
+
createdAt: string;
|
|
84
|
+
}
|
|
85
|
+
type RedactionOptions = {
|
|
86
|
+
pseudonymizeIdentity?: boolean;
|
|
87
|
+
};
|
|
88
|
+
declare function redactValue(value: unknown, stats: RedactionStats, key?: string, options?: RedactionOptions): unknown;
|
|
89
|
+
export declare function buildTrajectoryCapsule(input: {
|
|
90
|
+
organizationId: string;
|
|
91
|
+
deviceId: string;
|
|
92
|
+
workspaceId: string;
|
|
93
|
+
session: ProviderSession;
|
|
94
|
+
policy: OrganizationPolicy;
|
|
95
|
+
rawContentId: string;
|
|
96
|
+
rawBytes: number;
|
|
97
|
+
rawKind?: 'raw-provider-session' | 'raw-provider-turn';
|
|
98
|
+
createdAt?: string;
|
|
99
|
+
}): TrajectoryCapsule;
|
|
100
|
+
export { redactValue };
|
|
101
|
+
//# sourceMappingURL=index.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAClG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,KAAK,EAAE,eAAe,EAAgB,MAAM,gDAAgD,CAAC;AAYpG,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,uBAAuB,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;IACxB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,EAAE;QAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC5F,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,8BAA8B,CAAC;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC;IAChC,YAAY,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC,CAAC;IAC5D,QAAQ,EAAE;QAAE,KAAK,EAAE,UAAU,GAAG,SAAS,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACzH,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,YAAY,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,gBAAgB,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAC9K,iBAAiB,EAAE,OAAO,EAAE,CAAC;IAC7B,gBAAgB,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IACxJ,sBAAsB,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAClF,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAUD,KAAK,gBAAgB,GAAG;IAAE,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAmC3D,iBAAS,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,SAAK,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAwB7G;AAkBD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,eAAe,CAAC;IACzB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,sBAAsB,GAAG,mBAAmB,CAAC;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,iBAAiB,CAiGpB;AAED,OAAO,EAAE,WAAW,EAAE,CAAC"}
|
package/dist/index.js
ADDED
|
@@ -0,0 +1,192 @@
|
|
|
1
|
+
import { createHash } from 'node:crypto';
|
|
2
|
+
import { basename } from 'node:path';
|
|
3
|
+
import { canonicalize, sha256 } from '@dharma-ai-labs/agent-fabric-contracts';
|
|
4
|
+
const SECRET_PATTERNS = [
|
|
5
|
+
{ name: 'private_key', pattern: /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/g },
|
|
6
|
+
{ name: 'github_token', pattern: /\b(?:gh[opusr]_[A-Za-z0-9_]{20,}|github_pat_[A-Za-z0-9_]{20,})\b/g },
|
|
7
|
+
{ name: 'openai_key', pattern: /\bsk-[A-Za-z0-9_-]{20,}\b/g },
|
|
8
|
+
{ name: 'aws_access_key', pattern: /\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/g },
|
|
9
|
+
{ name: 'jwt', pattern: /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g },
|
|
10
|
+
{ name: 'connection_string', pattern: /\b(?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?):\/\/[^\s"']+/gi },
|
|
11
|
+
{ name: 'authorization', pattern: /\b(?:authorization|api[_-]?key|access[_-]?token|secret)\s*[:=]\s*["']?[A-Za-z0-9_./+=-]{12,}["']?/gi },
|
|
12
|
+
];
|
|
13
|
+
function deterministicUuid(value) {
|
|
14
|
+
const bytes = createHash('sha256').update(value).digest().subarray(0, 16);
|
|
15
|
+
bytes[6] = ((bytes[6] ?? 0) & 0x0f) | 0x50;
|
|
16
|
+
bytes[8] = ((bytes[8] ?? 0) & 0x3f) | 0x80;
|
|
17
|
+
const hex = bytes.toString('hex');
|
|
18
|
+
return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
|
|
19
|
+
}
|
|
20
|
+
const LOCAL_PATH_PATTERNS = [
|
|
21
|
+
/\/(?:home|Users)\/[A-Za-z0-9._-]+(?:\/[^\s"'<>|,}\]]+)*/g,
|
|
22
|
+
/\b[A-Za-z]:\\{1,}[^\s"'<>|,}\]]+/g,
|
|
23
|
+
/\\{2,}(?:wsl(?:\.localhost)?\\{1,})?[^\s"'<>|,}\]]+/gi,
|
|
24
|
+
];
|
|
25
|
+
function redactString(value, stats, options) {
|
|
26
|
+
stats.inputBytes += Buffer.byteLength(value);
|
|
27
|
+
let output = value.replaceAll('\u0000', () => {
|
|
28
|
+
stats.classes.add('invalid_unicode_nul');
|
|
29
|
+
stats.redactedValues += 1;
|
|
30
|
+
return '[REMOVED:nul]';
|
|
31
|
+
});
|
|
32
|
+
for (const rule of SECRET_PATTERNS) {
|
|
33
|
+
output = output.replace(rule.pattern, () => {
|
|
34
|
+
stats.classes.add(rule.name);
|
|
35
|
+
stats.redactedValues += 1;
|
|
36
|
+
return `[REDACTED:${rule.name}]`;
|
|
37
|
+
});
|
|
38
|
+
}
|
|
39
|
+
if (options.pseudonymizeIdentity) {
|
|
40
|
+
for (const pattern of LOCAL_PATH_PATTERNS) {
|
|
41
|
+
output = output.replace(pattern, () => {
|
|
42
|
+
stats.classes.add('local_path');
|
|
43
|
+
stats.redactedValues += 1;
|
|
44
|
+
return '[REDACTED:local_path]';
|
|
45
|
+
});
|
|
46
|
+
}
|
|
47
|
+
}
|
|
48
|
+
stats.outputBytes += Buffer.byteLength(output);
|
|
49
|
+
return output;
|
|
50
|
+
}
|
|
51
|
+
function redactValue(value, stats, key = '', options = {}) {
|
|
52
|
+
if (/^(authorization|cookie|set-cookie|password|secret|token|api[_-]?key)$/i.test(key)) {
|
|
53
|
+
if (value !== null && value !== undefined) {
|
|
54
|
+
stats.classes.add('sensitive_field');
|
|
55
|
+
stats.redactedValues += 1;
|
|
56
|
+
}
|
|
57
|
+
return '[REDACTED:sensitive_field]';
|
|
58
|
+
}
|
|
59
|
+
if (options.pseudonymizeIdentity && /^(cwd|source[_-]?path|workspace[_-]?path|local[_-]?path)$/i.test(key) && typeof value === 'string') {
|
|
60
|
+
stats.inputBytes += Buffer.byteLength(value);
|
|
61
|
+
stats.outputBytes += Buffer.byteLength('[REDACTED:local_path]');
|
|
62
|
+
stats.classes.add('local_path');
|
|
63
|
+
stats.redactedValues += 1;
|
|
64
|
+
return '[REDACTED:local_path]';
|
|
65
|
+
}
|
|
66
|
+
if (typeof value === 'string')
|
|
67
|
+
return redactString(value, stats, options);
|
|
68
|
+
if (Array.isArray(value))
|
|
69
|
+
return value.map((item) => redactValue(item, stats, '', options));
|
|
70
|
+
if (value && typeof value === 'object') {
|
|
71
|
+
return Object.fromEntries(Object.entries(value).map(([childKey, child]) => [
|
|
72
|
+
childKey,
|
|
73
|
+
redactValue(child, stats, childKey, options),
|
|
74
|
+
]));
|
|
75
|
+
}
|
|
76
|
+
return value;
|
|
77
|
+
}
|
|
78
|
+
function nativeEventId(record) {
|
|
79
|
+
for (const key of ['id', 'event_id', 'eventId', 'call_id', 'callId']) {
|
|
80
|
+
const value = record.native[key];
|
|
81
|
+
if (typeof value === 'string')
|
|
82
|
+
return value;
|
|
83
|
+
}
|
|
84
|
+
return null;
|
|
85
|
+
}
|
|
86
|
+
function providerModel(record) {
|
|
87
|
+
for (const key of ['model', 'model_name', 'modelName']) {
|
|
88
|
+
const value = record.native[key];
|
|
89
|
+
if (typeof value === 'string')
|
|
90
|
+
return value;
|
|
91
|
+
}
|
|
92
|
+
return null;
|
|
93
|
+
}
|
|
94
|
+
export function buildTrajectoryCapsule(input) {
|
|
95
|
+
const stats = {
|
|
96
|
+
classes: new Set(), redactedValues: 0, excludedPaths: 0, inputBytes: 0, outputBytes: 0,
|
|
97
|
+
};
|
|
98
|
+
const trajectoryId = deterministicUuid(`${input.organizationId}:${input.deviceId}:${input.session.provider}:${input.session.sessionId}`);
|
|
99
|
+
const seen = new Set();
|
|
100
|
+
const events = [];
|
|
101
|
+
for (const [index, record] of input.session.records.entries()) {
|
|
102
|
+
const payload = redactValue(record.native, stats, '', {
|
|
103
|
+
pseudonymizeIdentity: input.policy.evidence.pseudonymizeIdentity,
|
|
104
|
+
});
|
|
105
|
+
const fingerprint = sha256(canonicalize({ kind: record.kind, payload }));
|
|
106
|
+
if (seen.has(fingerprint))
|
|
107
|
+
continue;
|
|
108
|
+
seen.add(fingerprint);
|
|
109
|
+
events.push({
|
|
110
|
+
schema: 'dharma.agent-event/v1',
|
|
111
|
+
eventId: deterministicUuid(`${trajectoryId}:${index}:${fingerprint}`),
|
|
112
|
+
organizationId: input.organizationId,
|
|
113
|
+
deviceId: input.deviceId,
|
|
114
|
+
workspaceId: input.workspaceId,
|
|
115
|
+
provider: input.session.provider,
|
|
116
|
+
sessionId: input.session.sessionId,
|
|
117
|
+
sequence: events.length,
|
|
118
|
+
occurredAt: record.timestamp ? new Date(record.timestamp).toISOString() : input.session.startedAt,
|
|
119
|
+
kind: record.kind,
|
|
120
|
+
coverage: input.session.coverage,
|
|
121
|
+
contentRefs: [],
|
|
122
|
+
payload,
|
|
123
|
+
source: {
|
|
124
|
+
nativeEventId: nativeEventId(record),
|
|
125
|
+
sourceKind: String(record.native.type ?? record.native.kind ?? 'unknown'),
|
|
126
|
+
localLocatorId: sha256(`${basename(record.sourcePath)}:${record.line}`),
|
|
127
|
+
},
|
|
128
|
+
skillBundleId: null,
|
|
129
|
+
providerModel: providerModel(record),
|
|
130
|
+
});
|
|
131
|
+
}
|
|
132
|
+
const createdAt = input.createdAt ?? input.session.endedAt;
|
|
133
|
+
const base = {
|
|
134
|
+
schema: 'dharma.trajectory-capsule/v1',
|
|
135
|
+
trajectoryId,
|
|
136
|
+
revision: 1,
|
|
137
|
+
previousRevisionHash: null,
|
|
138
|
+
organizationId: input.organizationId,
|
|
139
|
+
deviceId: input.deviceId,
|
|
140
|
+
workspaceId: input.workspaceId,
|
|
141
|
+
provider: input.session.provider,
|
|
142
|
+
sessionId: input.session.sessionId,
|
|
143
|
+
taskId: null,
|
|
144
|
+
timeRange: { start: input.session.startedAt, end: input.session.endedAt },
|
|
145
|
+
status: input.session.coverage === 'observed' ? 'completed' : 'partial',
|
|
146
|
+
evidenceMode: input.policy.evidence.defaultMode,
|
|
147
|
+
coverage: {
|
|
148
|
+
state: input.session.coverage === 'observed' ? 'observed' : 'partial',
|
|
149
|
+
admittedSessions: 1,
|
|
150
|
+
excludedSessions: 0,
|
|
151
|
+
missingFields: input.session.coverage === 'observed' ? [] : ['workspace_on_some_events'],
|
|
152
|
+
},
|
|
153
|
+
repoState: {},
|
|
154
|
+
skillState: {},
|
|
155
|
+
events,
|
|
156
|
+
contentIndex: [{
|
|
157
|
+
contentId: input.rawContentId,
|
|
158
|
+
kind: input.rawKind || 'raw-provider-session',
|
|
159
|
+
bytes: input.rawBytes,
|
|
160
|
+
uploaded: false,
|
|
161
|
+
availableLocally: true,
|
|
162
|
+
mimeType: 'application/x-ndjson',
|
|
163
|
+
normalizedPath: null,
|
|
164
|
+
}],
|
|
165
|
+
validationResults: [],
|
|
166
|
+
redactionReceipt: {
|
|
167
|
+
policyRevision: input.policy.revision,
|
|
168
|
+
classes: [...stats.classes].sort(),
|
|
169
|
+
redactedValues: stats.redactedValues,
|
|
170
|
+
excludedPaths: stats.excludedPaths,
|
|
171
|
+
inputBytes: stats.inputBytes,
|
|
172
|
+
outputBytes: stats.outputBytes,
|
|
173
|
+
},
|
|
174
|
+
localEvidenceAvailable: [{ contentId: input.rawContentId, kind: input.rawKind || 'raw-provider-session', bytes: input.rawBytes }],
|
|
175
|
+
createdAt,
|
|
176
|
+
};
|
|
177
|
+
while (Buffer.byteLength(canonicalize(base)) > input.policy.evidence.maximumCapsuleBytes && base.events.length > 1) {
|
|
178
|
+
base.events.shift();
|
|
179
|
+
base.events.forEach((event, index) => { event.sequence = index; });
|
|
180
|
+
base.coverage.state = 'partial';
|
|
181
|
+
base.status = 'partial';
|
|
182
|
+
if (!base.coverage.missingFields.includes('events_collapsed_for_size')) {
|
|
183
|
+
base.coverage.missingFields.push('events_collapsed_for_size');
|
|
184
|
+
}
|
|
185
|
+
}
|
|
186
|
+
if (Buffer.byteLength(canonicalize(base)) > input.policy.evidence.maximumCapsuleBytes) {
|
|
187
|
+
throw new Error('Trajectory capsule cannot fit the organization maximumCapsuleBytes policy.');
|
|
188
|
+
}
|
|
189
|
+
return { ...base, capsuleHash: sha256(canonicalize(base)) };
|
|
190
|
+
}
|
|
191
|
+
export { redactValue };
|
|
192
|
+
//# sourceMappingURL=index.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAsB,MAAM,wCAAwC,CAAC;AAIlG,MAAM,eAAe,GAA6C;IAChE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,2GAA2G,EAAE;IAC7I,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,mEAAmE,EAAE;IACtG,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,4BAA4B,EAAE;IAC7D,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gCAAgC,EAAE;IACrE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,iEAAiE,EAAE;IAC3F,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,8DAA8D,EAAE;IACtG,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,qGAAqG,EAAE;CAC1I,CAAC;AAuDF,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1E,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3C,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7G,CAAC;AAID,MAAM,mBAAmB,GAAG;IAC1B,0DAA0D;IAC1D,mCAAmC;IACnC,uDAAuD;CACxD,CAAC;AAEF,SAAS,YAAY,CAAC,KAAa,EAAE,KAAqB,EAAE,OAAyB;IACnF,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE;QAC3C,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACzC,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC;QAC1B,OAAO,eAAe,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACzC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC;YAC1B,OAAO,aAAa,IAAI,CAAC,IAAI,GAAG,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACjC,KAAK,MAAM,OAAO,IAAI,mBAAmB,EAAE,CAAC;YAC1C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE;gBACpC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAChC,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC;gBAC1B,OAAO,uBAAuB,CAAC;YACjC,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,KAAK,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAqB,EAAE,GAAG,GAAG,EAAE,EAAE,UAA4B,EAAE;IAClG,IAAI,wEAAwE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvF,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YACrC,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,4BAA4B,CAAC;IACtC,CAAC;IACD,IAAI,OAAO,CAAC,oBAAoB,IAAI,4DAA4D,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxI,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7C,KAAK,CAAC,WAAW,IAAI,MAAM,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC;QAChE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAChC,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC;QAC1B,OAAO,uBAAuB,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5F,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YACpG,QAAQ;YACR,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC;SAC7C,CAAC,CAAC,CAAC;IACN,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,MAAoB;IACzC,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;QACrE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,MAAoB;IACzC,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAUtC;IACC,MAAM,KAAK,GAAmB;QAC5B,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC;KACvF,CAAC;IACF,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACzI,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;YACpD,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB;SACjE,CAA4B,CAAC;QAC9B,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,SAAS;QACpC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC;YACV,MAAM,EAAE,uBAAuB;YAC/B,OAAO,EAAE,iBAAiB,CAAC,GAAG,YAAY,IAAI,KAAK,IAAI,WAAW,EAAE,CAAC;YACrE,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;YAChC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;YAClC,QAAQ,EAAE,MAAM,CAAC,MAAM;YACvB,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS;YACjG,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;YAChC,WAAW,EAAE,EAAE;YACf,OAAO;YACP,MAAM,EAAE;gBACN,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC;gBACpC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC;gBACzE,cAAc,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;aACxE;YACD,aAAa,EAAE,IAAI;YACnB,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC;SACrC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;IAC3D,MAAM,IAAI,GAAG;QACX,MAAM,EAAE,8BAAuC;QAC/C,YAAY;QACZ,QAAQ,EAAE,CAAC;QACX,oBAAoB,EAAE,IAAI;QAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;QAChC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;QAClC,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE;QACzE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,WAAoB,CAAC,CAAC,CAAC,SAAkB;QACzF,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW;QAC/C,QAAQ,EAAE;YACR,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,UAAmB,CAAC,CAAC,CAAC,SAAkB;YACvF,gBAAgB,EAAE,CAAC;YACnB,gBAAgB,EAAE,CAAC;YACnB,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC;SACzF;QACD,SAAS,EAAE,EAAE;QACb,UAAU,EAAE,EAAE;QACd,MAAM;QACN,YAAY,EAAE,CAAC;gBACb,SAAS,EAAE,KAAK,CAAC,YAAY;gBAC7B,IAAI,EAAE,KAAK,CAAC,OAAO,IAAI,sBAAsB;gBAC7C,KAAK,EAAE,KAAK,CAAC,QAAQ;gBACrB,QAAQ,EAAE,KAAK;gBACf,gBAAgB,EAAE,IAAI;gBACtB,QAAQ,EAAE,sBAAsB;gBAChC,cAAc,EAAE,IAAI;aACrB,CAAC;QACF,iBAAiB,EAAE,EAAE;QACrB,gBAAgB,EAAE;YAChB,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;YACrC,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;YAClC,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B;QACD,sBAAsB,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,IAAI,sBAAsB,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjI,SAAS;KACV,CAAC;IAEF,OAAO,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,QAAQ,CAAC,KAAK,GAAG,SAAS,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../src/index.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,106 @@
|
|
|
1
|
+
import assert from 'node:assert/strict';
|
|
2
|
+
import test from 'node:test';
|
|
3
|
+
import { buildTrajectoryCapsule } from './index.js';
|
|
4
|
+
const policy = {
|
|
5
|
+
schema: 'dharma.organization-policy/v1', organizationId: 'org_test', revision: 'rev_1',
|
|
6
|
+
evidence: {
|
|
7
|
+
defaultMode: 'deep', registeredWorkspaceOnly: true, excludePaths: [], maximumCapsuleBytes: 100_000,
|
|
8
|
+
maximumDailyUploadBytes: 1_000_000, maximumExpansionBytes: 100_000,
|
|
9
|
+
pseudonymizeIdentity: true,
|
|
10
|
+
},
|
|
11
|
+
tasks: { defaultNetwork: 'deny', defaultGit: 'task_branch', allowedCommands: {}, writePaths: [], requireLocalConfirmationFor: [] },
|
|
12
|
+
skills: { automaticInstall: true, automaticPromotionMaxRisk: 'R2', canaryPercent: 10 },
|
|
13
|
+
retention: {}, budgets: {},
|
|
14
|
+
};
|
|
15
|
+
test('capsule strips secrets and remains deterministic', () => {
|
|
16
|
+
const session = {
|
|
17
|
+
provider: 'codex',
|
|
18
|
+
sessionId: 'session_test',
|
|
19
|
+
sourcePath: '/private/source.jsonl',
|
|
20
|
+
workspace: '/repo',
|
|
21
|
+
coverage: 'observed',
|
|
22
|
+
startedAt: '2026-08-03T00:00:00.000Z',
|
|
23
|
+
endedAt: '2026-08-03T00:00:01.000Z',
|
|
24
|
+
records: [{
|
|
25
|
+
native: { type: 'user_message', cwd: '/repo', authorization: 'Bearer secret-secret-secret', text: 'token ghp_123456789012345678901234567890' },
|
|
26
|
+
sourcePath: '/private/source.jsonl', line: 1, workspace: '/repo', timestamp: '2026-08-03T00:00:00.000Z', kind: 'user_message',
|
|
27
|
+
}],
|
|
28
|
+
};
|
|
29
|
+
const capsule = buildTrajectoryCapsule({
|
|
30
|
+
organizationId: 'org_test', deviceId: 'device_test', workspaceId: 'workspace_test', session,
|
|
31
|
+
policy, rawContentId: `sha256:${'a'.repeat(64)}`, rawBytes: 100, rawKind: 'raw-provider-turn',
|
|
32
|
+
createdAt: '2026-08-03T00:00:02.000Z',
|
|
33
|
+
});
|
|
34
|
+
const encoded = JSON.stringify(capsule);
|
|
35
|
+
assert.equal(encoded.includes('secret-secret-secret'), false);
|
|
36
|
+
assert.equal(encoded.includes('ghp_123'), false);
|
|
37
|
+
assert.equal(encoded.includes('/private/source.jsonl'), false);
|
|
38
|
+
assert.equal(encoded.includes('/repo'), false);
|
|
39
|
+
assert.equal(capsule.redactionReceipt.classes.includes('local_path'), true);
|
|
40
|
+
assert.ok(capsule.redactionReceipt.redactedValues >= 2);
|
|
41
|
+
assert.equal(capsule.contentIndex[0]?.kind, 'raw-provider-turn');
|
|
42
|
+
assert.equal(capsule.localEvidenceAvailable[0]?.kind, 'raw-provider-turn');
|
|
43
|
+
});
|
|
44
|
+
test('bounded expansion redacts Unix, Windows, and WSL-local paths when identity is pseudonymized', async () => {
|
|
45
|
+
const { redactValue } = await import('./index.js');
|
|
46
|
+
const stats = { classes: new Set(), redactedValues: 0, excludedPaths: 0, inputBytes: 0, outputBytes: 0 };
|
|
47
|
+
const raw = [
|
|
48
|
+
'{"cwd":"/home/alice/company/private-repo"}',
|
|
49
|
+
'{"cwd":"C:\\\\Users\\\\alice\\\\company\\\\private-repo"}',
|
|
50
|
+
'{"cwd":"\\\\\\\\wsl.localhost\\\\Ubuntu\\\\home\\\\alice\\\\private-repo"}',
|
|
51
|
+
].join('\n');
|
|
52
|
+
const redacted = String(redactValue(raw, stats, '', { pseudonymizeIdentity: true }));
|
|
53
|
+
assert.equal(redacted.includes('/home/alice'), false);
|
|
54
|
+
assert.equal(redacted.includes('C:\\\\Users'), false);
|
|
55
|
+
assert.equal(redacted.includes('wsl.localhost'), false);
|
|
56
|
+
assert.equal(stats.classes.has('local_path'), true);
|
|
57
|
+
assert.equal(stats.redactedValues, 3);
|
|
58
|
+
});
|
|
59
|
+
test('identical source sessions produce an identical capsule revision hash', () => {
|
|
60
|
+
const session = {
|
|
61
|
+
provider: 'codex',
|
|
62
|
+
sessionId: 'session_retry',
|
|
63
|
+
sourcePath: '/private/retry.jsonl',
|
|
64
|
+
workspace: '/repo',
|
|
65
|
+
coverage: 'observed',
|
|
66
|
+
startedAt: '2026-08-03T00:00:00.000Z',
|
|
67
|
+
endedAt: '2026-08-03T00:00:01.000Z',
|
|
68
|
+
records: [{
|
|
69
|
+
native: { type: 'assistant_message', text: 'deterministic evidence' },
|
|
70
|
+
sourcePath: '/private/retry.jsonl', line: 1, workspace: '/repo',
|
|
71
|
+
timestamp: '2026-08-03T00:00:01.000Z', kind: 'assistant_message',
|
|
72
|
+
}],
|
|
73
|
+
};
|
|
74
|
+
const input = {
|
|
75
|
+
organizationId: 'org_test', deviceId: 'device_test', workspaceId: 'workspace_test', session,
|
|
76
|
+
policy, rawContentId: `sha256:${'b'.repeat(64)}`, rawBytes: 100,
|
|
77
|
+
rawKind: 'raw-provider-turn',
|
|
78
|
+
};
|
|
79
|
+
const first = buildTrajectoryCapsule(input);
|
|
80
|
+
const second = buildTrajectoryCapsule(input);
|
|
81
|
+
assert.equal(first.createdAt, session.endedAt);
|
|
82
|
+
assert.equal(second.capsuleHash, first.capsuleHash);
|
|
83
|
+
});
|
|
84
|
+
test('capsule removes NUL characters rejected by Postgres jsonb', () => {
|
|
85
|
+
const session = {
|
|
86
|
+
provider: 'codex',
|
|
87
|
+
sessionId: 'session_nul',
|
|
88
|
+
sourcePath: '/private/nul.jsonl',
|
|
89
|
+
workspace: '/repo',
|
|
90
|
+
coverage: 'observed',
|
|
91
|
+
startedAt: '2026-08-03T00:00:00.000Z',
|
|
92
|
+
endedAt: '2026-08-03T00:00:01.000Z',
|
|
93
|
+
records: [{
|
|
94
|
+
native: { type: 'assistant_message', text: 'before\u0000after' },
|
|
95
|
+
sourcePath: '/private/nul.jsonl', line: 1, workspace: '/repo',
|
|
96
|
+
timestamp: '2026-08-03T00:00:01.000Z', kind: 'assistant_message',
|
|
97
|
+
}],
|
|
98
|
+
};
|
|
99
|
+
const capsule = buildTrajectoryCapsule({
|
|
100
|
+
organizationId: 'org_test', deviceId: 'device_test', workspaceId: 'workspace_test', session,
|
|
101
|
+
policy, rawContentId: `sha256:${'c'.repeat(64)}`, rawBytes: 12,
|
|
102
|
+
});
|
|
103
|
+
assert.equal(JSON.stringify(capsule).includes('\\u0000'), false);
|
|
104
|
+
assert.equal(capsule.redactionReceipt.classes.includes('invalid_unicode_nul'), true);
|
|
105
|
+
});
|
|
106
|
+
//# sourceMappingURL=index.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"index.test.js","sourceRoot":"","sources":["../src/index.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,MAAM,GAAuB;IACjC,MAAM,EAAE,+BAA+B,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO;IACtF,QAAQ,EAAE;QACR,WAAW,EAAE,MAAM,EAAE,uBAAuB,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,mBAAmB,EAAE,OAAO;QAClG,uBAAuB,EAAE,SAAS,EAAE,qBAAqB,EAAE,OAAO;QAClE,oBAAoB,EAAE,IAAI;KAC3B;IACD,KAAK,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,eAAe,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,2BAA2B,EAAE,EAAE,EAAE;IAClI,MAAM,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE;IACtF,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;CAC3B,CAAC;AAEF,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAC5D,MAAM,OAAO,GAAG;QACd,QAAQ,EAAE,OAAgB;QAC1B,SAAS,EAAE,cAAc;QACzB,UAAU,EAAE,uBAAuB;QACnC,SAAS,EAAE,OAAO;QAClB,QAAQ,EAAE,UAAmB;QAC7B,SAAS,EAAE,0BAA0B;QACrC,OAAO,EAAE,0BAA0B;QACnC,OAAO,EAAE,CAAC;gBACR,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,6BAA6B,EAAE,IAAI,EAAE,0CAA0C,EAAE;gBAC9I,UAAU,EAAE,uBAAuB,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,0BAA0B,EAAE,IAAI,EAAE,cAAc;aAC9H,CAAC;KACH,CAAC;IACF,MAAM,OAAO,GAAG,sBAAsB,CAAC;QACrC,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO;QAC3F,MAAM,EAAE,YAAY,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,mBAAmB;QAC7F,SAAS,EAAE,0BAA0B;KACtC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5E,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;IACjE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;AAC7E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;IAC7G,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,IAAI,GAAG,EAAU,EAAE,cAAc,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IACjH,MAAM,GAAG,GAAG;QACV,4CAA4C;QAC5C,2DAA2D;QAC3D,4EAA4E;KAC7E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,CAAC;IACxD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sEAAsE,EAAE,GAAG,EAAE;IAChF,MAAM,OAAO,GAAG;QACd,QAAQ,EAAE,OAAgB;QAC1B,SAAS,EAAE,eAAe;QAC1B,UAAU,EAAE,sBAAsB;QAClC,SAAS,EAAE,OAAO;QAClB,QAAQ,EAAE,UAAmB;QAC7B,SAAS,EAAE,0BAA0B;QACrC,OAAO,EAAE,0BAA0B;QACnC,OAAO,EAAE,CAAC;gBACR,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,wBAAwB,EAAE;gBACrE,UAAU,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO;gBAC/D,SAAS,EAAE,0BAA0B,EAAE,IAAI,EAAE,mBAAmB;aACjE,CAAC;KACH,CAAC;IACF,MAAM,KAAK,GAAG;QACZ,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO;QAC3F,MAAM,EAAE,YAAY,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG;QAC/D,OAAO,EAAE,mBAA4B;KACtC,CAAC;IACF,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,OAAO,GAAG;QACd,QAAQ,EAAE,OAAgB;QAC1B,SAAS,EAAE,aAAa;QACxB,UAAU,EAAE,oBAAoB;QAChC,SAAS,EAAE,OAAO;QAClB,QAAQ,EAAE,UAAmB;QAC7B,SAAS,EAAE,0BAA0B;QACrC,OAAO,EAAE,0BAA0B;QACnC,OAAO,EAAE,CAAC;gBACR,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,mBAAmB,EAAE;gBAChE,UAAU,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO;gBAC7D,SAAS,EAAE,0BAA0B,EAAE,IAAI,EAAE,mBAAmB;aACjE,CAAC;KACH,CAAC;IACF,MAAM,OAAO,GAAG,sBAAsB,CAAC;QACrC,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO;QAC3F,MAAM,EAAE,YAAY,EAAE,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE;KAC/D,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;IACjE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,IAAI,CAAC,CAAC;AACvF,CAAC,CAAC,CAAC"}
|
package/package.json
ADDED
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "@dharma-ai-labs/agent-fabric-evidence-reduction",
|
|
3
|
+
"version": "0.1.0",
|
|
4
|
+
"type": "module",
|
|
5
|
+
"main": "dist/index.js",
|
|
6
|
+
"types": "dist/index.d.ts",
|
|
7
|
+
"repository": { "type": "git", "url": "git+https://github.com/dharma-ai-labs/dharma-agent-fabric.git", "directory": "packages/evidence-reduction" },
|
|
8
|
+
"exports": { ".": "./dist/index.js" },
|
|
9
|
+
"files": ["dist"],
|
|
10
|
+
"publishConfig": { "access": "public", "provenance": true },
|
|
11
|
+
"scripts": { "test": "node --test dist/*.test.js" },
|
|
12
|
+
"dependencies": {
|
|
13
|
+
"@dharma-ai-labs/agent-fabric-contracts": "0.1.0",
|
|
14
|
+
"@dharma-ai-labs/agent-fabric-policy": "0.1.0",
|
|
15
|
+
"@dharma-ai-labs/agent-fabric-provider-adapters": "0.1.0"
|
|
16
|
+
}
|
|
17
|
+
}
|