@eddacraft/kindling-adapter-opencode 0.1.0

package/dist/opencode/filter.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Content filtering and safety utilities
+ *
+ * Provides filters to prevent accidental secret capture and reduce noise:
+ * - Content truncation for large outputs
+ * - Pattern-based secret detection
+ * - File path filtering
+ */
+/**
+ * Maximum content length before truncation (characters)
+ */
+export declare const MAX_CONTENT_LENGTH = 50000;
+/**
+ * Options for content filtering
+ */
+export interface FilterOptions {
+    /**
+     * Maximum content length before truncation
+     */
+    maxLength?: number;
+    /**
+     * Whether to detect and mask secrets
+     */
+    maskSecrets?: boolean;
+    /**
+     * Whether to append truncation notice
+     */
+    showTruncationNotice?: boolean;
+}
+/**
+ * Truncate content if it exceeds max length
+ *
+ * @param content - Content to truncate
+ * @param options - Filter options
+ * @returns Truncated content with optional notice
+ */
+export declare function truncateContent(content: string, options?: FilterOptions): string;
+/**
+ * Detect if content contains potential secrets
+ *
+ * @param content - Content to check
+ * @returns True if content likely contains secrets
+ */
+export declare function containsSecrets(content: string): boolean;
+/**
+ * Mask potential secrets in content
+ *
+ * Replaces patterns that look like secrets with [REDACTED]
+ *
+ * @param content - Content to mask
+ * @returns Content with secrets masked
+ */
+export declare function maskSecrets(content: string): string;
+/**
+ * Filter content with all safety rules
+ *
+ * Applies truncation and optional secret masking
+ *
+ * @param content - Content to filter
+ * @param options - Filter options
+ * @returns Filtered content
+ */
+export declare function filterContent(content: string, options?: FilterOptions): string;
+/**
+ * Check if a file path should be excluded from capture
+ *
+ * @param path - File path to check
+ * @returns True if path should be excluded
+ */
+export declare function isExcludedPath(path: string): boolean;
+/**
+ * Filter tool result fields
+ *
+ * For certain tools, only capture specific fields to reduce noise
+ *
+ * @param toolName - Name of the tool
+ * @param result - Tool result object
+ * @returns Filtered result
+ */
+export declare function filterToolResult(_toolName: string, result: unknown): unknown;
+/**
+ * Create a redaction reason string
+ *
+ * @param reason - Reason for redaction
+ * @returns Formatted redaction message
+ */
+export declare function createRedactionReason(reason: string): string;
+//# sourceMappingURL=filter.d.ts.map

package/dist/opencode/filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter.d.ts","sourceRoot":"","sources":["../../src/opencode/filter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;GAEG;AACH,eAAO,MAAM,kBAAkB,QAAQ,CAAC;AAgCxC;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB;;OAEG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;OAEG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,aAAkB,GAC1B,MAAM,CAkBR;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAKxD;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAiBnD;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,aAAkB,GAC1B,MAAM,CAcR;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,OAAO,GACd,OAAO,CAMT;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE5D"}

package/dist/opencode/filter.js

@@ -0,0 +1,150 @@
+/**
+ * Content filtering and safety utilities
+ *
+ * Provides filters to prevent accidental secret capture and reduce noise:
+ * - Content truncation for large outputs
+ * - Pattern-based secret detection
+ * - File path filtering
+ */
+/**
+ * Maximum content length before truncation (characters)
+ */
+export const MAX_CONTENT_LENGTH = 50000; // 50KB
+/**
+ * Common secret patterns to detect in content
+ */
+const SECRET_PATTERNS = [
+    // API keys and tokens
+    /['"]?(?:api[-_]?key|apikey|token|secret|password|passwd|pwd)['"]?\s*[:=]\s*['"]?([^\s'"]+)['"]?/gi,
+    // AWS keys
+    /(?:AWS|aws)[-_]?(?:SECRET|secret)[-_]?(?:ACCESS|access)[-_]?(?:KEY|key)\s*[:=]\s*['"]?([A-Za-z0-9/+=]{40})['"]?/g,
+    // Generic API tokens (long alphanumeric strings with mixed chars that look like tokens)
+    // Must have at least one digit AND one letter AND be 32+ chars
+    /\b(?=.*[0-9])(?=.*[A-Za-z])[A-Za-z0-9]{32,}\b/g,
+    // Bearer tokens
+    /Bearer\s+([A-Za-z0-9\-._~+/]+=*)/gi,
+    // Basic auth
+    /Basic\s+([A-Za-z0-9+/]+=*)/gi,
+];
+/**
+ * File paths that should be excluded from capture
+ */
+const EXCLUDED_PATHS = [
+    /node_modules/,
+    /\.git\//,
+    /\.env$/,
+    /\.pem$/,
+    /\.key$/,
+    /credentials/i,
+    /secrets/i,
+];
+/**
+ * Truncate content if it exceeds max length
+ *
+ * @param content - Content to truncate
+ * @param options - Filter options
+ * @returns Truncated content with optional notice
+ */
+export function truncateContent(content, options = {}) {
+    const { maxLength = MAX_CONTENT_LENGTH, showTruncationNotice = true, } = options;
+    if (content.length <= maxLength) {
+        return content;
+    }
+    const truncated = content.substring(0, maxLength);
+    if (showTruncationNotice) {
+        const remaining = content.length - maxLength;
+        return `${truncated}\n\n[Truncated ${remaining} characters]`;
+    }
+    return truncated;
+}
+/**
+ * Detect if content contains potential secrets
+ *
+ * @param content - Content to check
+ * @returns True if content likely contains secrets
+ */
+export function containsSecrets(content) {
+    return SECRET_PATTERNS.some(pattern => {
+        pattern.lastIndex = 0; // Reset regex state
+        return pattern.test(content);
+    });
+}
+/**
+ * Mask potential secrets in content
+ *
+ * Replaces patterns that look like secrets with [REDACTED]
+ *
+ * @param content - Content to mask
+ * @returns Content with secrets masked
+ */
+export function maskSecrets(content) {
+    let masked = content;
+    for (const pattern of SECRET_PATTERNS) {
+        pattern.lastIndex = 0; // Reset regex state
+        masked = masked.replace(pattern, (match) => {
+            // Keep the key name but mask the value
+            if (match.includes(':') || match.includes('=')) {
+                const parts = match.split(/[:=]/);
+                return `${parts[0]}=[REDACTED]`;
+            }
+            // For bearer/basic tokens and long strings, just redact
+            return '[REDACTED]';
+        });
+    }
+    return masked;
+}
+/**
+ * Filter content with all safety rules
+ *
+ * Applies truncation and optional secret masking
+ *
+ * @param content - Content to filter
+ * @param options - Filter options
+ * @returns Filtered content
+ */
+export function filterContent(content, options = {}) {
+    const { maskSecrets: shouldMask = false } = options;
+    let filtered = content;
+    // Apply secret masking if enabled
+    if (shouldMask && containsSecrets(filtered)) {
+        filtered = maskSecrets(filtered);
+    }
+    // Apply truncation
+    filtered = truncateContent(filtered, options);
+    return filtered;
+}
+/**
+ * Check if a file path should be excluded from capture
+ *
+ * @param path - File path to check
+ * @returns True if path should be excluded
+ */
+export function isExcludedPath(path) {
+    return EXCLUDED_PATHS.some(pattern => pattern.test(path));
+}
+/**
+ * Filter tool result fields
+ *
+ * For certain tools, only capture specific fields to reduce noise
+ *
+ * @param toolName - Name of the tool
+ * @param result - Tool result object
+ * @returns Filtered result
+ */
+export function filterToolResult(_toolName, result) {
+    // For now, return as-is
+    // Future: implement allowlists for specific tools
+    // e.g., for 'read_file', only capture first N lines
+    // for 'list_dir', limit number of entries
+    return result;
+}
+/**
+ * Create a redaction reason string
+ *
+ * @param reason - Reason for redaction
+ * @returns Formatted redaction message
+ */
+export function createRedactionReason(reason) {
+    return `[Content redacted: ${reason}]`;
+}
+//# sourceMappingURL=filter.js.map

package/dist/opencode/filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter.js","sourceRoot":"","sources":["../../src/opencode/filter.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC,CAAC,OAAO;AAEhD;;GAEG;AACH,MAAM,eAAe,GAAG;IACtB,sBAAsB;IACtB,mGAAmG;IACnG,WAAW;IACX,kHAAkH;IAClH,wFAAwF;IACxF,+DAA+D;IAC/D,gDAAgD;IAChD,gBAAgB;IAChB,oCAAoC;IACpC,aAAa;IACb,8BAA8B;CAC/B,CAAC;AAEF;;GAEG;AACH,MAAM,cAAc,GAAG;IACrB,cAAc;IACd,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,UAAU;CACX,CAAC;AAsBF;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,UAAyB,EAAE;IAE3B,MAAM,EACJ,SAAS,GAAG,kBAAkB,EAC9B,oBAAoB,GAAG,IAAI,GAC5B,GAAG,OAAO,CAAC;IAEZ,IAAI,OAAO,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAElD,IAAI,oBAAoB,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;QAC7C,OAAO,GAAG,SAAS,kBAAkB,SAAS,cAAc,CAAC;IAC/D,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE;QACpC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,oBAAoB;QAC3C,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,IAAI,MAAM,GAAG,OAAO,CAAC;IAErB,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,oBAAoB;QAC3C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YACzC,uCAAuC;YACvC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAClC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC;YAClC,CAAC;YACD,wDAAwD;YACxD,OAAO,YAAY,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAe,EACf,UAAyB,EAAE;IAE3B,MAAM,EAAE,WAAW,EAAE,UAAU,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAEpD,IAAI,QAAQ,GAAG,OAAO,CAAC;IAEvB,kCAAkC;IAClC,IAAI,UAAU,IAAI,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,mBAAmB;IACnB,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAE9C,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,EACjB,MAAe;IAEf,wBAAwB;IACxB,kDAAkD;IAClD,oDAAoD;IACpD,0CAA0C;IAC1C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,OAAO,sBAAsB,MAAM,GAAG,CAAC;AACzC,CAAC"}

package/dist/opencode/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * OpenCode adapter - Event mapping and ingestion
+ */
+export * from './events.js';
+export * from './mapping.js';
+export * from './provenance.js';
+export * from './session.js';
+export * from './filter.js';
+export * from './commands/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/opencode/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/opencode/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC"}

package/dist/opencode/index.js

@@ -0,0 +1,10 @@
+/**
+ * OpenCode adapter - Event mapping and ingestion
+ */
+export * from './events.js';
+export * from './mapping.js';
+export * from './provenance.js';
+export * from './session.js';
+export * from './filter.js';
+export * from './commands/index.js';
+//# sourceMappingURL=index.js.map

package/dist/opencode/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/opencode/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC"}

package/dist/opencode/mapping.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Event to observation mapping
+ *
+ * Maps OpenCode events to Kindling observations with provenance.
+ */
+import type { ObservationKind, ObservationInput } from '@eddacraft/kindling-core';
+import type { OpenCodeEvent } from './events.js';
+/**
+ * Mapping from OpenCode event types to Kindling observation kinds
+ */
+export declare const EVENT_TO_KIND_MAP: Record<string, ObservationKind>;
+/**
+ * Result of event mapping
+ */
+export interface MapEventResult {
+    /** Successfully mapped observation */
+    observation?: ObservationInput;
+    /** Error if mapping failed */
+    error?: string;
+    /** Whether this event should be skipped */
+    skip?: boolean;
+}
+/**
+ * Map an OpenCode event to a Kindling observation
+ *
+ * @param event - OpenCode event to map
+ * @returns Mapped observation or error
+ */
+export declare function mapEvent(event: OpenCodeEvent): MapEventResult;
+/**
+ * Batch map multiple events
+ *
+ * @param events - Events to map
+ * @returns Array of mapped observations (skipped events excluded)
+ */
+export declare function mapEvents(events: OpenCodeEvent[]): ObservationInput[];
+//# sourceMappingURL=mapping.d.ts.map

package/dist/opencode/mapping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mapping.d.ts","sourceRoot":"","sources":["../../src/opencode/mapping.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAClF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AASjD;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAMpD,CAAC;AAEX;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,sCAAsC;IACtC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,8BAA8B;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,cAAc,CA2C7D;AA2GD;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,gBAAgB,EAAE,CAerE"}

package/dist/opencode/mapping.js

@@ -0,0 +1,160 @@
+/**
+ * Event to observation mapping
+ *
+ * Maps OpenCode events to Kindling observations with provenance.
+ */
+import { extractToolCallProvenance, extractCommandProvenance, extractFileDiffProvenance, extractErrorProvenance, extractMessageProvenance, } from './provenance.js';
+/**
+ * Mapping from OpenCode event types to Kindling observation kinds
+ */
+export const EVENT_TO_KIND_MAP = {
+    tool_call: 'tool_call',
+    command: 'command',
+    file_change: 'file_diff',
+    error: 'error',
+    message: 'message',
+};
+/**
+ * Map an OpenCode event to a Kindling observation
+ *
+ * @param event - OpenCode event to map
+ * @returns Mapped observation or error
+ */
+export function mapEvent(event) {
+    // Skip session lifecycle events (handled separately)
+    if (event.type === 'session_start' || event.type === 'session_end') {
+        return { skip: true };
+    }
+    // Get observation kind
+    const kind = EVENT_TO_KIND_MAP[event.type];
+    if (!kind) {
+        return {
+            error: `Unknown event type: ${event.type}`,
+        };
+    }
+    // Extract content
+    const content = extractContent(event);
+    if (!content) {
+        return {
+            error: `Could not extract content from event type: ${event.type}`,
+        };
+    }
+    // Extract provenance
+    const provenance = extractProvenance(event);
+    // Build scope IDs
+    const scopeIds = {
+        sessionId: event.sessionId,
+    };
+    if (event.repoId) {
+        scopeIds.repoId = event.repoId;
+    }
+    // Return observation input
+    return {
+        observation: {
+            kind,
+            content,
+            provenance,
+            scopeIds,
+        },
+    };
+}
+/**
+ * Extract content string from event
+ */
+function extractContent(event) {
+    switch (event.type) {
+        case 'tool_call':
+            return formatToolCallContent(event);
+        case 'command':
+            return formatCommandContent(event);
+        case 'file_change':
+            return formatFileChangeContent(event);
+        case 'error':
+            return event.message;
+        case 'message':
+            return event.content;
+        default:
+            return null;
+    }
+}
+/**
+ * Format tool call as human-readable content
+ */
+function formatToolCallContent(event) {
+    const parts = [`Tool: ${event.toolName}`];
+    if (event.result) {
+        const resultStr = typeof event.result === 'string' ? event.result : JSON.stringify(event.result, null, 2);
+        parts.push(resultStr);
+    }
+    if (event.error) {
+        parts.push(`Error: ${event.error}`);
+    }
+    return parts.join('\n\n');
+}
+/**
+ * Format command as human-readable content
+ */
+function formatCommandContent(event) {
+    const parts = [`$ ${event.command}`];
+    if (event.stdout) {
+        parts.push(event.stdout);
+    }
+    if (event.stderr) {
+        parts.push(`stderr: ${event.stderr}`);
+    }
+    parts.push(`Exit code: ${event.exitCode}`);
+    return parts.join('\n\n');
+}
+/**
+ * Format file change as human-readable content
+ */
+function formatFileChangeContent(event) {
+    const parts = [`Modified files:\n${event.paths.map((p) => `  ${p}`).join('\n')}`];
+    if (event.additions !== undefined || event.deletions !== undefined) {
+        parts.push(`+${event.additions || 0} -${event.deletions || 0}`);
+    }
+    if (event.diff) {
+        parts.push(event.diff);
+    }
+    return parts.join('\n\n');
+}
+/**
+ * Extract provenance from event
+ */
+function extractProvenance(event) {
+    switch (event.type) {
+        case 'tool_call':
+            return extractToolCallProvenance(event);
+        case 'command':
+            return extractCommandProvenance(event);
+        case 'file_change':
+            return extractFileDiffProvenance(event);
+        case 'error':
+            return extractErrorProvenance(event);
+        case 'message':
+            return extractMessageProvenance(event);
+        default:
+            return {};
+    }
+}
+/**
+ * Batch map multiple events
+ *
+ * @param events - Events to map
+ * @returns Array of mapped observations (skipped events excluded)
+ */
+export function mapEvents(events) {
+    const observations = [];
+    for (const event of events) {
+        const result = mapEvent(event);
+        if (result.observation) {
+            observations.push(result.observation);
+        }
+        else if (result.error) {
+            console.warn(`Failed to map event: ${result.error}`, event);
+        }
+        // Skip events are silently ignored
+    }
+    return observations;
+}
+//# sourceMappingURL=mapping.js.map

package/dist/opencode/mapping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mapping.js","sourceRoot":"","sources":["../../src/opencode/mapping.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AAEzB;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAoC;IAChE,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,SAAS;IAClB,WAAW,EAAE,WAAW;IACxB,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;CACV,CAAC;AAcX;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAoB;IAC3C,qDAAqD;IACrD,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACnE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;IAED,uBAAuB;IACvB,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,KAAK,EAAE,uBAAuB,KAAK,CAAC,IAAI,EAAE;SAC3C,CAAC;IACJ,CAAC;IAED,kBAAkB;IAClB,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,8CAA8C,KAAK,CAAC,IAAI,EAAE;SAClE,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAE5C,kBAAkB;IAClB,MAAM,QAAQ,GAA2B;QACvC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;IAEF,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACjC,CAAC;IAED,2BAA2B;IAC3B,OAAO;QACL,WAAW,EAAE;YACX,IAAI;YACJ,OAAO;YACP,UAAU;YACV,QAAQ;SACT;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,KAAoB;IAC1C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,WAAW;YACd,OAAO,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAEtC,KAAK,SAAS;YACZ,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAErC,KAAK,aAAa;YAChB,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAExC,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,OAAO,CAAC;QAEvB,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,OAAO,CAAC;QAEvB;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,KAA4C;IACzE,MAAM,KAAK,GAAG,CAAC,SAAS,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAE1C,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,SAAS,GACb,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IAED,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,KAA0C;IACtE,MAAM,KAAK,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAErC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAE3C,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,KAA8C;IAC7E,MAAM,KAAK,GAAG,CAAC,oBAAoB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAElF,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACnE,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,KAAK,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,KAAoB;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,WAAW;YACd,OAAO,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAE1C,KAAK,SAAS;YACZ,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAEzC,KAAK,aAAa;YAChB,OAAO,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAE1C,KAAK,OAAO;YACV,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAEvC,KAAK,SAAS;YACZ,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAEzC;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,MAAuB;IAC/C,MAAM,YAAY,GAAuB,EAAE,CAAC;IAE5C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE/B,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACxC,CAAC;aAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;QAC9D,CAAC;QACD,mCAAmC;IACrC,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/opencode/provenance.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Provenance extraction for OpenCode events
+ *
+ * Extracts structured metadata from events for queryability and explainability.
+ */
+import type { ToolCallEvent, CommandEvent, FileChangeEvent, ErrorEvent, MessageEvent } from './events.js';
+/**
+ * Extract provenance from tool call event
+ */
+export declare function extractToolCallProvenance(event: ToolCallEvent): Record<string, unknown>;
+/**
+ * Extract provenance from command event
+ */
+export declare function extractCommandProvenance(event: CommandEvent): Record<string, unknown>;
+/**
+ * Extract provenance from file change event
+ */
+export declare function extractFileDiffProvenance(event: FileChangeEvent): Record<string, unknown>;
+/**
+ * Extract provenance from error event
+ */
+export declare function extractErrorProvenance(event: ErrorEvent): Record<string, unknown>;
+/**
+ * Extract provenance from message event
+ */
+export declare function extractMessageProvenance(event: MessageEvent): Record<string, unknown>;
+//# sourceMappingURL=provenance.d.ts.map

package/dist/opencode/provenance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.d.ts","sourceRoot":"","sources":["../../src/opencode/provenance.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,aAAa,EACb,YAAY,EACZ,eAAe,EACf,UAAU,EACV,YAAY,EACb,MAAM,aAAa,CAAC;AAErB;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQvF;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQrF;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAOzF;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMjF;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMrF"}

package/dist/opencode/provenance.js

@@ -0,0 +1,105 @@
+/**
+ * Provenance extraction for OpenCode events
+ *
+ * Extracts structured metadata from events for queryability and explainability.
+ */
+/**
+ * Extract provenance from tool call event
+ */
+export function extractToolCallProvenance(event) {
+    return {
+        toolName: event.toolName,
+        // Sanitize args to remove sensitive data
+        args: sanitizeArgs(event.args),
+        duration_ms: event.duration_ms,
+        hasError: !!event.error,
+    };
+}
+/**
+ * Extract provenance from command event
+ */
+export function extractCommandProvenance(event) {
+    return {
+        // Only store the command name, not full args (may contain secrets)
+        cmd: extractCommandName(event.command),
+        exitCode: event.exitCode,
+        cwd: event.cwd,
+        hasStderr: !!event.stderr,
+    };
+}
+/**
+ * Extract provenance from file change event
+ */
+export function extractFileDiffProvenance(event) {
+    return {
+        paths: event.paths,
+        additions: event.additions,
+        deletions: event.deletions,
+        fileCount: event.paths.length,
+    };
+}
+/**
+ * Extract provenance from error event
+ */
+export function extractErrorProvenance(event) {
+    return {
+        source: event.source,
+        // Truncate stack trace to avoid excessive storage
+        stackPreview: event.stack?.substring(0, 200),
+    };
+}
+/**
+ * Extract provenance from message event
+ */
+export function extractMessageProvenance(event) {
+    return {
+        role: event.role,
+        model: event.model,
+        length: event.content.length,
+    };
+}
+/**
+ * Sanitize tool arguments to remove sensitive data
+ */
+function sanitizeArgs(args) {
+    const sanitized = {};
+    for (const [key, value] of Object.entries(args)) {
+        // Skip known sensitive fields
+        if (isSensitiveField(key)) {
+            sanitized[key] = '[REDACTED]';
+            continue;
+        }
+        // Truncate long string values
+        if (typeof value === 'string' && value.length > 100) {
+            sanitized[key] = value.substring(0, 100) + '...';
+        }
+        else {
+            sanitized[key] = value;
+        }
+    }
+    return sanitized;
+}
+/**
+ * Check if a field name suggests sensitive data
+ */
+function isSensitiveField(fieldName) {
+    const lowerName = fieldName.toLowerCase();
+    const sensitivePatterns = [
+        'password',
+        'token',
+        'secret',
+        'key',
+        'auth',
+        'credential',
+    ];
+    return sensitivePatterns.some(pattern => lowerName.includes(pattern));
+}
+/**
+ * Extract just the command name from a full command string
+ */
+function extractCommandName(command) {
+    // Get first word (command name) without args
+    const parts = command.trim().split(/\s+/);
+    return parts[0] || command;
+}
+//# sourceMappingURL=provenance.js.map

package/dist/opencode/provenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.js","sourceRoot":"","sources":["../../src/opencode/provenance.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAoB;IAC5D,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,yCAAyC;QACzC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;QAC9B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK;KACxB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAmB;IAC1D,OAAO;QACL,mEAAmE;QACnE,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC;QACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM;KAC1B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAAsB;IAC9D,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;KAC9B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAiB;IACtD,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,kDAAkD;QAClD,YAAY,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAmB;IAC1D,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;KAC7B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,IAA6B;IACjD,MAAM,SAAS,GAA4B,EAAE,CAAC;IAE9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,8BAA8B;QAC9B,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YAC9B,SAAS;QACX,CAAC;QAED,8BAA8B;QAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACpD,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,SAAiB;IACzC,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IAC1C,MAAM,iBAAiB,GAAG;QACxB,UAAU;QACV,OAAO;QACP,QAAQ;QACR,KAAK;QACL,MAAM;QACN,YAAY;KACb,CAAC;IAEF,OAAO,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,OAAe;IACzC,6CAA6C;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;AAC7B,CAAC"}