@elizaos/plugin-personal-assistant 2.0.3-beta.5 → 2.0.3-beta.7

package/dist/lifeops/privacy-egress.d.ts

@@ -0,0 +1,92 @@
+import type { ActionResult, HandlerCallback, IAgentRuntime, Memory } from "@elizaos/core";
+import type { LifeOpsConnectorGrant } from "../contracts/index.js";
+export declare const LIFEOPS_EGRESS_DATA_CLASSES: readonly ["metadata", "snippet", "body", "recipients_attendees", "health", "payments", "browser_activity", "drafts", "send_targets", "deep_links"];
+export type LifeOpsEgressDataClass = (typeof LIFEOPS_EGRESS_DATA_CLASSES)[number];
+export declare const LIFEOPS_ACCOUNT_PRIVACY_SCOPES: readonly ["owner_only", "metadata_only", "shared"];
+export type LifeOpsAccountPrivacyScope = (typeof LIFEOPS_ACCOUNT_PRIVACY_SCOPES)[number];
+export type LifeOpsEgressActor = "owner" | "non_owner" | "route_owner";
+export interface LifeOpsEgressContext {
+    actor: LifeOpsEgressActor;
+    agentId?: string;
+    entityId?: string | null;
+}
+export interface LifeOpsConnectorAccountPrivacyPolicy {
+    id: string;
+    agentId: string;
+    provider: string;
+    connectorAccountId: string;
+    visibilityScope: LifeOpsAccountPrivacyScope;
+    allowedDataClasses: LifeOpsEgressDataClass[];
+    metadata: Record<string, unknown>;
+    createdAt: string;
+    updatedAt: string;
+}
+export type LifeOpsConnectorAccountPrivacyInput = Pick<LifeOpsConnectorAccountPrivacyPolicy, "agentId" | "provider" | "connectorAccountId"> & Partial<Pick<LifeOpsConnectorAccountPrivacyPolicy, "id" | "visibilityScope" | "allowedDataClasses" | "metadata">>;
+export declare const DEFAULT_LIFEOPS_ACCOUNT_PRIVACY_SCOPE: LifeOpsAccountPrivacyScope;
+export declare function isLifeOpsEgressDataClass(value: unknown): value is LifeOpsEgressDataClass;
+export declare function normalizeLifeOpsEgressDataClasses(value: unknown): LifeOpsEgressDataClass[];
+export declare function normalizeLifeOpsAccountPrivacyScope(value: unknown): LifeOpsAccountPrivacyScope;
+export declare function createLifeOpsEgressContext(args: {
+    isOwner: boolean;
+    agentId?: string;
+    entityId?: string | null;
+}): LifeOpsEgressContext;
+export declare function createLifeOpsRouteEgressContext(args: {
+    agentId?: string;
+    adminEntityId?: string | null;
+}): LifeOpsEgressContext;
+export declare function createLifeOpsMessageEgressContext(args: {
+    runtime: IAgentRuntime;
+    message: Memory;
+    hasOwnerAccess: (runtime: IAgentRuntime, message: Memory) => Promise<boolean>;
+}): Promise<LifeOpsEgressContext>;
+export declare function canEgress(context: LifeOpsEgressContext, dataClass: LifeOpsEgressDataClass, policy?: LifeOpsConnectorAccountPrivacyPolicy | null): boolean;
+export declare function canSurfaceConnectorAccountData(args: {
+    context: LifeOpsEgressContext;
+    provider: string;
+    connectorAccountId?: string | null;
+    dataClass: LifeOpsEgressDataClass;
+    policy?: LifeOpsConnectorAccountPrivacyPolicy | null;
+}): boolean;
+export declare function redactTextForEgress(value: string | null | undefined, args: {
+    context: LifeOpsEgressContext;
+    dataClass: LifeOpsEgressDataClass;
+    policy?: LifeOpsConnectorAccountPrivacyPolicy | null;
+    replacement?: string;
+}): string;
+export declare function redactUrlForEgress(value: string | null | undefined, args: {
+    context: LifeOpsEgressContext;
+    policy?: LifeOpsConnectorAccountPrivacyPolicy | null;
+}): string | null;
+export declare function filterActionResultForEgress(result: ActionResult, args: {
+    context: LifeOpsEgressContext;
+    dataClasses: readonly LifeOpsEgressDataClass[];
+    policy?: LifeOpsConnectorAccountPrivacyPolicy | null;
+    redactedText?: string;
+}): ActionResult;
+export declare function callbackWithPrivacy(callback: HandlerCallback | undefined, result: ActionResult, args: {
+    context: LifeOpsEgressContext;
+    dataClasses: readonly LifeOpsEgressDataClass[];
+    policy?: LifeOpsConnectorAccountPrivacyPolicy | null;
+    source: string;
+    action: string;
+}): Promise<ActionResult>;
+export declare function connectorAccountPrivacyKey(provider: string, connectorAccountId: string): string;
+export declare function mapConnectorAccountPrivacyPolicies(policies: readonly LifeOpsConnectorAccountPrivacyPolicy[]): Map<string, LifeOpsConnectorAccountPrivacyPolicy>;
+export declare function normalizeConnectorAccountId(value: unknown): string | null;
+export declare function deriveConnectorAccountId(args: {
+    provider: string;
+    side?: string | null;
+    identity?: Record<string, unknown> | null;
+    identityEmail?: string | null;
+    cloudConnectionId?: string | null;
+    grantId?: string | null;
+}): string | null;
+export declare function grantScopedConnectorAccountId(args: {
+    provider: string;
+    side?: string | null;
+    grantId: string;
+}): string;
+export declare function deriveConnectorAccountIdFromGrant(grant: Pick<LifeOpsConnectorGrant, "id" | "provider" | "side" | "identity" | "identityEmail" | "cloudConnectionId" | "metadata">): string;
+export declare function createConnectorAccountPrivacyPolicy(input: LifeOpsConnectorAccountPrivacyInput, now?: string): LifeOpsConnectorAccountPrivacyPolicy;
+//# sourceMappingURL=privacy-egress.d.ts.map

package/dist/lifeops/privacy-egress.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-egress.d.ts","sourceRoot":"","sources":["../../src/lifeops/privacy-egress.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,YAAY,EACZ,eAAe,EACf,aAAa,EACb,MAAM,EACP,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAEnE,eAAO,MAAM,2BAA2B,oJAW9B,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/C,eAAO,MAAM,8BAA8B,oDAIjC,CAAC;AAEX,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC;AAElD,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,WAAW,GAAG,aAAa,CAAC;AAEvE,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,oCAAoC;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,0BAA0B,CAAC;IAC5C,kBAAkB,EAAE,sBAAsB,EAAE,CAAC;IAC7C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,mCAAmC,GAAG,IAAI,CACpD,oCAAoC,EACpC,SAAS,GAAG,UAAU,GAAG,oBAAoB,CAC9C,GACC,OAAO,CACL,IAAI,CACF,oCAAoC,EACpC,IAAI,GAAG,iBAAiB,GAAG,oBAAoB,GAAG,UAAU,CAC7D,CACF,CAAC;AAEJ,eAAO,MAAM,qCAAqC,EAAE,0BACtC,CAAC;AAOf,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,sBAAsB,CAEjC;AAED,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,OAAO,GACb,sBAAsB,EAAE,CAU1B;AAED,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,OAAO,GACb,0BAA0B,CAI5B;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GAAG,oBAAoB,CAMvB;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B,GAAG,oBAAoB,CAMvB;AAED,wBAAsB,iCAAiC,CAAC,IAAI,EAAE;IAC5D,OAAO,EAAE,aAAa,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/E,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAOhC;AAED,wBAAgB,SAAS,CACvB,OAAO,EAAE,oBAAoB,EAC7B,SAAS,EAAE,sBAAsB,EACjC,MAAM,CAAC,EAAE,oCAAoC,GAAG,IAAI,GACnD,OAAO,CAgBT;AAED,wBAAgB,8BAA8B,CAAC,IAAI,EAAE;IACnD,OAAO,EAAE,oBAAoB,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,SAAS,EAAE,sBAAsB,CAAC;IAClC,MAAM,CAAC,EAAE,oCAAoC,GAAG,IAAI,CAAC;CACtD,GAAG,OAAO,CAQV;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,IAAI,EAAE;IACJ,OAAO,EAAE,oBAAoB,CAAC;IAC9B,SAAS,EAAE,sBAAsB,CAAC;IAClC,MAAM,CAAC,EAAE,oCAAoC,GAAG,IAAI,CAAC;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GACA,MAAM,CAKR;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,IAAI,EAAE;IACJ,OAAO,EAAE,oBAAoB,CAAC;IAC9B,MAAM,CAAC,EAAE,oCAAoC,GAAG,IAAI,CAAC;CACtD,GACA,MAAM,GAAG,IAAI,CAGf;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE;IACJ,OAAO,EAAE,oBAAoB,CAAC;IAC9B,WAAW,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC/C,MAAM,CAAC,EAAE,oCAAoC,GAAG,IAAI,CAAC;IACrD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GACA,YAAY,CAad;AAED,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,eAAe,GAAG,SAAS,EACrC,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE;IACJ,OAAO,EAAE,oBAAoB,CAAC;IAC9B,WAAW,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC/C,MAAM,CAAC,EAAE,oCAAoC,GAAG,IAAI,CAAC;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,GACA,OAAO,CAAC,YAAY,CAAC,CAQvB;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,kBAAkB,EAAE,MAAM,GACzB,MAAM,CAER;AAED,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,SAAS,oCAAoC,EAAE,GACxD,GAAG,CAAC,MAAM,EAAE,oCAAoC,CAAC,CAOnD;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAIzE;AAiCD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC1C,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB,GAAG,MAAM,GAAG,IAAI,CAuBhB;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAIT;AAED,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,IAAI,CACT,qBAAqB,EACnB,IAAI,GACJ,UAAU,GACV,MAAM,GACN,UAAU,GACV,eAAe,GACf,mBAAmB,GACnB,UAAU,CACb,GACA,MAAM,CAqBR;AAED,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,mCAAmC,EAC1C,GAAG,SAA2B,GAC7B,oCAAoC,CAkBtC"}

package/dist/lifeops/privacy-egress.js

@@ -0,0 +1,230 @@
+import crypto from "node:crypto";
+const LIFEOPS_EGRESS_DATA_CLASSES = [
+  "metadata",
+  "snippet",
+  "body",
+  "recipients_attendees",
+  "health",
+  "payments",
+  "browser_activity",
+  "drafts",
+  "send_targets",
+  "deep_links"
+];
+const LIFEOPS_ACCOUNT_PRIVACY_SCOPES = [
+  "owner_only",
+  "metadata_only",
+  "shared"
+];
+const DEFAULT_LIFEOPS_ACCOUNT_PRIVACY_SCOPE = "owner_only";
+const DATA_CLASS_SET = new Set(LIFEOPS_EGRESS_DATA_CLASSES);
+const ACCOUNT_PRIVACY_SCOPE_SET = new Set(
+  LIFEOPS_ACCOUNT_PRIVACY_SCOPES
+);
+function isLifeOpsEgressDataClass(value) {
+  return typeof value === "string" && DATA_CLASS_SET.has(value);
+}
+function normalizeLifeOpsEgressDataClasses(value) {
+  if (!Array.isArray(value)) return [];
+  const classes = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const entry of value) {
+    if (!isLifeOpsEgressDataClass(entry) || seen.has(entry)) continue;
+    seen.add(entry);
+    classes.push(entry);
+  }
+  return classes;
+}
+function normalizeLifeOpsAccountPrivacyScope(value) {
+  return typeof value === "string" && ACCOUNT_PRIVACY_SCOPE_SET.has(value) ? value : DEFAULT_LIFEOPS_ACCOUNT_PRIVACY_SCOPE;
+}
+function createLifeOpsEgressContext(args) {
+  return {
+    actor: args.isOwner ? "owner" : "non_owner",
+    agentId: args.agentId,
+    entityId: args.entityId ?? null
+  };
+}
+function createLifeOpsRouteEgressContext(args) {
+  return {
+    actor: "route_owner",
+    agentId: args.agentId,
+    entityId: args.adminEntityId ?? null
+  };
+}
+async function createLifeOpsMessageEgressContext(args) {
+  return createLifeOpsEgressContext({
+    isOwner: await args.hasOwnerAccess(args.runtime, args.message),
+    agentId: args.runtime.agentId,
+    entityId: typeof args.message.entityId === "string" ? args.message.entityId : null
+  });
+}
+function canEgress(context, dataClass, policy) {
+  if (context.actor === "owner" || context.actor === "route_owner") {
+    return true;
+  }
+  const visibilityScope = policy?.visibilityScope ?? DEFAULT_LIFEOPS_ACCOUNT_PRIVACY_SCOPE;
+  if (visibilityScope === "owner_only") {
+    return false;
+  }
+  if (visibilityScope === "metadata_only") {
+    return dataClass === "metadata";
+  }
+  return policy?.allowedDataClasses.includes(dataClass) ?? dataClass === "metadata";
+}
+function canSurfaceConnectorAccountData(args) {
+  if (args.provider.trim().length === 0) {
+    return false;
+  }
+  if (!args.connectorAccountId) {
+    return canEgress(args.context, args.dataClass, args.policy);
+  }
+  return canEgress(args.context, args.dataClass, args.policy);
+}
+function redactTextForEgress(value, args) {
+  if (canEgress(args.context, args.dataClass, args.policy)) {
+    return value ?? "";
+  }
+  return args.replacement ?? "[hidden by LifeOps privacy]";
+}
+function redactUrlForEgress(value, args) {
+  if (!value) return null;
+  return canEgress(args.context, "deep_links", args.policy) ? value : null;
+}
+function filterActionResultForEgress(result, args) {
+  const canSurface = args.dataClasses.every(
+    (dataClass) => canEgress(args.context, dataClass, args.policy)
+  );
+  if (canSurface) return result;
+  return {
+    ...result,
+    text: args.redactedText ?? "Result hidden by LifeOps privacy policy.",
+    data: {
+      privacyFiltered: true,
+      originalSuccess: result.success
+    }
+  };
+}
+async function callbackWithPrivacy(callback, result, args) {
+  const filtered = filterActionResultForEgress(result, args);
+  await callback?.({
+    text: filtered.text ?? "",
+    source: args.source,
+    action: args.action
+  });
+  return filtered;
+}
+function connectorAccountPrivacyKey(provider, connectorAccountId) {
+  return `${provider}:${connectorAccountId}`;
+}
+function mapConnectorAccountPrivacyPolicies(policies) {
+  return new Map(
+    policies.map((policy) => [
+      connectorAccountPrivacyKey(policy.provider, policy.connectorAccountId),
+      policy
+    ])
+  );
+}
+function normalizeConnectorAccountId(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+function digestConnectorAccountComponent(value) {
+  return crypto.createHash("sha256").update(value).digest("hex").slice(0, 32);
+}
+function readString(value) {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+function readIdentityEmail(identity) {
+  return readString(identity.email) ?? readString(identity.emailAddress) ?? readString(identity.primaryEmail);
+}
+function readIdentityStableId(identity) {
+  return readString(identity.sub) ?? readString(identity.id) ?? readString(identity.accountId) ?? readString(identity.userId) ?? readString(identity.phone) ?? readString(identity.handle);
+}
+function deriveConnectorAccountId(args) {
+  const provider = args.provider.trim().toLowerCase();
+  if (!provider) return null;
+  const side = (args.side ?? "owner").trim().toLowerCase() || "owner";
+  const identity = args.identity ?? {};
+  const email = readString(args.identityEmail)?.toLowerCase() ?? readIdentityEmail(identity)?.toLowerCase();
+  if (email) {
+    return `${provider}:${side}:email:${digestConnectorAccountComponent(email)}`;
+  }
+  const stableIdentity = readIdentityStableId(identity);
+  if (stableIdentity) {
+    return `${provider}:${side}:identity:${digestConnectorAccountComponent(stableIdentity)}`;
+  }
+  const cloudConnectionId = readString(args.cloudConnectionId);
+  if (cloudConnectionId) {
+    return `${provider}:${side}:cloud:${digestConnectorAccountComponent(cloudConnectionId)}`;
+  }
+  return null;
+}
+function grantScopedConnectorAccountId(args) {
+  const provider = args.provider.trim().toLowerCase();
+  const side = (args.side ?? "owner").trim().toLowerCase() || "owner";
+  return `${provider}:${side}:grant:${digestConnectorAccountComponent(args.grantId)}`;
+}
+function deriveConnectorAccountIdFromGrant(grant) {
+  const explicit = normalizeConnectorAccountId(
+    grant.metadata.connectorAccountId
+  );
+  if (explicit) return explicit;
+  return deriveConnectorAccountId({
+    provider: grant.provider,
+    side: grant.side,
+    identity: grant.identity,
+    identityEmail: grant.identityEmail,
+    cloudConnectionId: grant.cloudConnectionId,
+    grantId: grant.id
+  }) ?? grantScopedConnectorAccountId({
+    provider: grant.provider,
+    side: grant.side,
+    grantId: grant.id
+  });
+}
+function createConnectorAccountPrivacyPolicy(input, now = (/* @__PURE__ */ new Date()).toISOString()) {
+  return {
+    id: input.id ?? `acct_priv_${digestConnectorAccountComponent(
+      `${input.agentId}:${input.provider}:${input.connectorAccountId}`
+    )}`,
+    agentId: input.agentId,
+    provider: input.provider,
+    connectorAccountId: input.connectorAccountId,
+    visibilityScope: normalizeLifeOpsAccountPrivacyScope(input.visibilityScope),
+    allowedDataClasses: normalizeLifeOpsEgressDataClasses(
+      input.allowedDataClasses
+    ),
+    metadata: input.metadata ?? {},
+    createdAt: now,
+    updatedAt: now
+  };
+}
+export {
+  DEFAULT_LIFEOPS_ACCOUNT_PRIVACY_SCOPE,
+  LIFEOPS_ACCOUNT_PRIVACY_SCOPES,
+  LIFEOPS_EGRESS_DATA_CLASSES,
+  callbackWithPrivacy,
+  canEgress,
+  canSurfaceConnectorAccountData,
+  connectorAccountPrivacyKey,
+  createConnectorAccountPrivacyPolicy,
+  createLifeOpsEgressContext,
+  createLifeOpsMessageEgressContext,
+  createLifeOpsRouteEgressContext,
+  deriveConnectorAccountId,
+  deriveConnectorAccountIdFromGrant,
+  filterActionResultForEgress,
+  grantScopedConnectorAccountId,
+  isLifeOpsEgressDataClass,
+  mapConnectorAccountPrivacyPolicies,
+  normalizeConnectorAccountId,
+  normalizeLifeOpsAccountPrivacyScope,
+  normalizeLifeOpsEgressDataClasses,
+  redactTextForEgress,
+  redactUrlForEgress
+};
+//# sourceMappingURL=privacy-egress.js.map

package/dist/lifeops/privacy-egress.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/lifeops/privacy-egress.ts"],"sourcesContent":["import crypto from \"node:crypto\";\nimport type {\n  ActionResult,\n  HandlerCallback,\n  IAgentRuntime,\n  Memory,\n} from \"@elizaos/core\";\nimport type { LifeOpsConnectorGrant } from \"../contracts/index.js\";\n\nexport const LIFEOPS_EGRESS_DATA_CLASSES = [\n  \"metadata\",\n  \"snippet\",\n  \"body\",\n  \"recipients_attendees\",\n  \"health\",\n  \"payments\",\n  \"browser_activity\",\n  \"drafts\",\n  \"send_targets\",\n  \"deep_links\",\n] as const;\n\nexport type LifeOpsEgressDataClass =\n  (typeof LIFEOPS_EGRESS_DATA_CLASSES)[number];\n\nexport const LIFEOPS_ACCOUNT_PRIVACY_SCOPES = [\n  \"owner_only\",\n  \"metadata_only\",\n  \"shared\",\n] as const;\n\nexport type LifeOpsAccountPrivacyScope =\n  (typeof LIFEOPS_ACCOUNT_PRIVACY_SCOPES)[number];\n\nexport type LifeOpsEgressActor = \"owner\" | \"non_owner\" | \"route_owner\";\n\nexport interface LifeOpsEgressContext {\n  actor: LifeOpsEgressActor;\n  agentId?: string;\n  entityId?: string | null;\n}\n\nexport interface LifeOpsConnectorAccountPrivacyPolicy {\n  id: string;\n  agentId: string;\n  provider: string;\n  connectorAccountId: string;\n  visibilityScope: LifeOpsAccountPrivacyScope;\n  allowedDataClasses: LifeOpsEgressDataClass[];\n  metadata: Record<string, unknown>;\n  createdAt: string;\n  updatedAt: string;\n}\n\nexport type LifeOpsConnectorAccountPrivacyInput = Pick<\n  LifeOpsConnectorAccountPrivacyPolicy,\n  \"agentId\" | \"provider\" | \"connectorAccountId\"\n> &\n  Partial<\n    Pick<\n      LifeOpsConnectorAccountPrivacyPolicy,\n      \"id\" | \"visibilityScope\" | \"allowedDataClasses\" | \"metadata\"\n    >\n  >;\n\nexport const DEFAULT_LIFEOPS_ACCOUNT_PRIVACY_SCOPE: LifeOpsAccountPrivacyScope =\n  \"owner_only\";\n\nconst DATA_CLASS_SET = new Set<string>(LIFEOPS_EGRESS_DATA_CLASSES);\nconst ACCOUNT_PRIVACY_SCOPE_SET = new Set<string>(\n  LIFEOPS_ACCOUNT_PRIVACY_SCOPES,\n);\n\nexport function isLifeOpsEgressDataClass(\n  value: unknown,\n): value is LifeOpsEgressDataClass {\n  return typeof value === \"string\" && DATA_CLASS_SET.has(value);\n}\n\nexport function normalizeLifeOpsEgressDataClasses(\n  value: unknown,\n): LifeOpsEgressDataClass[] {\n  if (!Array.isArray(value)) return [];\n  const classes: LifeOpsEgressDataClass[] = [];\n  const seen = new Set<LifeOpsEgressDataClass>();\n  for (const entry of value) {\n    if (!isLifeOpsEgressDataClass(entry) || seen.has(entry)) continue;\n    seen.add(entry);\n    classes.push(entry);\n  }\n  return classes;\n}\n\nexport function normalizeLifeOpsAccountPrivacyScope(\n  value: unknown,\n): LifeOpsAccountPrivacyScope {\n  return typeof value === \"string\" && ACCOUNT_PRIVACY_SCOPE_SET.has(value)\n    ? (value as LifeOpsAccountPrivacyScope)\n    : DEFAULT_LIFEOPS_ACCOUNT_PRIVACY_SCOPE;\n}\n\nexport function createLifeOpsEgressContext(args: {\n  isOwner: boolean;\n  agentId?: string;\n  entityId?: string | null;\n}): LifeOpsEgressContext {\n  return {\n    actor: args.isOwner ? \"owner\" : \"non_owner\",\n    agentId: args.agentId,\n    entityId: args.entityId ?? null,\n  };\n}\n\nexport function createLifeOpsRouteEgressContext(args: {\n  agentId?: string;\n  adminEntityId?: string | null;\n}): LifeOpsEgressContext {\n  return {\n    actor: \"route_owner\",\n    agentId: args.agentId,\n    entityId: args.adminEntityId ?? null,\n  };\n}\n\nexport async function createLifeOpsMessageEgressContext(args: {\n  runtime: IAgentRuntime;\n  message: Memory;\n  hasOwnerAccess: (runtime: IAgentRuntime, message: Memory) => Promise<boolean>;\n}): Promise<LifeOpsEgressContext> {\n  return createLifeOpsEgressContext({\n    isOwner: await args.hasOwnerAccess(args.runtime, args.message),\n    agentId: args.runtime.agentId,\n    entityId:\n      typeof args.message.entityId === \"string\" ? args.message.entityId : null,\n  });\n}\n\nexport function canEgress(\n  context: LifeOpsEgressContext,\n  dataClass: LifeOpsEgressDataClass,\n  policy?: LifeOpsConnectorAccountPrivacyPolicy | null,\n): boolean {\n  if (context.actor === \"owner\" || context.actor === \"route_owner\") {\n    return true;\n  }\n\n  const visibilityScope =\n    policy?.visibilityScope ?? DEFAULT_LIFEOPS_ACCOUNT_PRIVACY_SCOPE;\n  if (visibilityScope === \"owner_only\") {\n    return false;\n  }\n  if (visibilityScope === \"metadata_only\") {\n    return dataClass === \"metadata\";\n  }\n  return (\n    policy?.allowedDataClasses.includes(dataClass) ?? dataClass === \"metadata\"\n  );\n}\n\nexport function canSurfaceConnectorAccountData(args: {\n  context: LifeOpsEgressContext;\n  provider: string;\n  connectorAccountId?: string | null;\n  dataClass: LifeOpsEgressDataClass;\n  policy?: LifeOpsConnectorAccountPrivacyPolicy | null;\n}): boolean {\n  if (args.provider.trim().length === 0) {\n    return false;\n  }\n  if (!args.connectorAccountId) {\n    return canEgress(args.context, args.dataClass, args.policy);\n  }\n  return canEgress(args.context, args.dataClass, args.policy);\n}\n\nexport function redactTextForEgress(\n  value: string | null | undefined,\n  args: {\n    context: LifeOpsEgressContext;\n    dataClass: LifeOpsEgressDataClass;\n    policy?: LifeOpsConnectorAccountPrivacyPolicy | null;\n    replacement?: string;\n  },\n): string {\n  if (canEgress(args.context, args.dataClass, args.policy)) {\n    return value ?? \"\";\n  }\n  return args.replacement ?? \"[hidden by LifeOps privacy]\";\n}\n\nexport function redactUrlForEgress(\n  value: string | null | undefined,\n  args: {\n    context: LifeOpsEgressContext;\n    policy?: LifeOpsConnectorAccountPrivacyPolicy | null;\n  },\n): string | null {\n  if (!value) return null;\n  return canEgress(args.context, \"deep_links\", args.policy) ? value : null;\n}\n\nexport function filterActionResultForEgress(\n  result: ActionResult,\n  args: {\n    context: LifeOpsEgressContext;\n    dataClasses: readonly LifeOpsEgressDataClass[];\n    policy?: LifeOpsConnectorAccountPrivacyPolicy | null;\n    redactedText?: string;\n  },\n): ActionResult {\n  const canSurface = args.dataClasses.every((dataClass) =>\n    canEgress(args.context, dataClass, args.policy),\n  );\n  if (canSurface) return result;\n  return {\n    ...result,\n    text: args.redactedText ?? \"Result hidden by LifeOps privacy policy.\",\n    data: {\n      privacyFiltered: true,\n      originalSuccess: result.success,\n    },\n  };\n}\n\nexport async function callbackWithPrivacy(\n  callback: HandlerCallback | undefined,\n  result: ActionResult,\n  args: {\n    context: LifeOpsEgressContext;\n    dataClasses: readonly LifeOpsEgressDataClass[];\n    policy?: LifeOpsConnectorAccountPrivacyPolicy | null;\n    source: string;\n    action: string;\n  },\n): Promise<ActionResult> {\n  const filtered = filterActionResultForEgress(result, args);\n  await callback?.({\n    text: filtered.text ?? \"\",\n    source: args.source,\n    action: args.action,\n  });\n  return filtered;\n}\n\nexport function connectorAccountPrivacyKey(\n  provider: string,\n  connectorAccountId: string,\n): string {\n  return `${provider}:${connectorAccountId}`;\n}\n\nexport function mapConnectorAccountPrivacyPolicies(\n  policies: readonly LifeOpsConnectorAccountPrivacyPolicy[],\n): Map<string, LifeOpsConnectorAccountPrivacyPolicy> {\n  return new Map(\n    policies.map((policy) => [\n      connectorAccountPrivacyKey(policy.provider, policy.connectorAccountId),\n      policy,\n    ]),\n  );\n}\n\nexport function normalizeConnectorAccountId(value: unknown): string | null {\n  if (typeof value !== \"string\") return null;\n  const trimmed = value.trim();\n  return trimmed.length > 0 ? trimmed : null;\n}\n\nfunction digestConnectorAccountComponent(value: string): string {\n  return crypto.createHash(\"sha256\").update(value).digest(\"hex\").slice(0, 32);\n}\n\nfunction readString(value: unknown): string | null {\n  if (typeof value !== \"string\") return null;\n  const trimmed = value.trim();\n  return trimmed.length > 0 ? trimmed : null;\n}\n\nfunction readIdentityEmail(identity: Record<string, unknown>): string | null {\n  return (\n    readString(identity.email) ??\n    readString(identity.emailAddress) ??\n    readString(identity.primaryEmail)\n  );\n}\n\nfunction readIdentityStableId(\n  identity: Record<string, unknown>,\n): string | null {\n  return (\n    readString(identity.sub) ??\n    readString(identity.id) ??\n    readString(identity.accountId) ??\n    readString(identity.userId) ??\n    readString(identity.phone) ??\n    readString(identity.handle)\n  );\n}\n\nexport function deriveConnectorAccountId(args: {\n  provider: string;\n  side?: string | null;\n  identity?: Record<string, unknown> | null;\n  identityEmail?: string | null;\n  cloudConnectionId?: string | null;\n  grantId?: string | null;\n}): string | null {\n  const provider = args.provider.trim().toLowerCase();\n  if (!provider) return null;\n  const side = (args.side ?? \"owner\").trim().toLowerCase() || \"owner\";\n  const identity = args.identity ?? {};\n  const email =\n    readString(args.identityEmail)?.toLowerCase() ??\n    readIdentityEmail(identity)?.toLowerCase();\n  if (email) {\n    return `${provider}:${side}:email:${digestConnectorAccountComponent(email)}`;\n  }\n\n  const stableIdentity = readIdentityStableId(identity);\n  if (stableIdentity) {\n    return `${provider}:${side}:identity:${digestConnectorAccountComponent(stableIdentity)}`;\n  }\n\n  const cloudConnectionId = readString(args.cloudConnectionId);\n  if (cloudConnectionId) {\n    return `${provider}:${side}:cloud:${digestConnectorAccountComponent(cloudConnectionId)}`;\n  }\n\n  return null;\n}\n\nexport function grantScopedConnectorAccountId(args: {\n  provider: string;\n  side?: string | null;\n  grantId: string;\n}): string {\n  const provider = args.provider.trim().toLowerCase();\n  const side = (args.side ?? \"owner\").trim().toLowerCase() || \"owner\";\n  return `${provider}:${side}:grant:${digestConnectorAccountComponent(args.grantId)}`;\n}\n\nexport function deriveConnectorAccountIdFromGrant(\n  grant: Pick<\n    LifeOpsConnectorGrant,\n    | \"id\"\n    | \"provider\"\n    | \"side\"\n    | \"identity\"\n    | \"identityEmail\"\n    | \"cloudConnectionId\"\n    | \"metadata\"\n  >,\n): string {\n  const explicit = normalizeConnectorAccountId(\n    grant.metadata.connectorAccountId,\n  );\n  if (explicit) return explicit;\n\n  return (\n    deriveConnectorAccountId({\n      provider: grant.provider,\n      side: grant.side,\n      identity: grant.identity,\n      identityEmail: grant.identityEmail,\n      cloudConnectionId: grant.cloudConnectionId,\n      grantId: grant.id,\n    }) ??\n    grantScopedConnectorAccountId({\n      provider: grant.provider,\n      side: grant.side,\n      grantId: grant.id,\n    })\n  );\n}\n\nexport function createConnectorAccountPrivacyPolicy(\n  input: LifeOpsConnectorAccountPrivacyInput,\n  now = new Date().toISOString(),\n): LifeOpsConnectorAccountPrivacyPolicy {\n  return {\n    id:\n      input.id ??\n      `acct_priv_${digestConnectorAccountComponent(\n        `${input.agentId}:${input.provider}:${input.connectorAccountId}`,\n      )}`,\n    agentId: input.agentId,\n    provider: input.provider,\n    connectorAccountId: input.connectorAccountId,\n    visibilityScope: normalizeLifeOpsAccountPrivacyScope(input.visibilityScope),\n    allowedDataClasses: normalizeLifeOpsEgressDataClasses(\n      input.allowedDataClasses,\n    ),\n    metadata: input.metadata ?? {},\n    createdAt: now,\n    updatedAt: now,\n  };\n}\n"],"mappings":"AAAA,OAAO,YAAY;AASZ,MAAM,8BAA8B;AAAA,EACzC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAKO,MAAM,iCAAiC;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AACF;AAoCO,MAAM,wCACX;AAEF,MAAM,iBAAiB,IAAI,IAAY,2BAA2B;AAClE,MAAM,4BAA4B,IAAI;AAAA,EACpC;AACF;AAEO,SAAS,yBACd,OACiC;AACjC,SAAO,OAAO,UAAU,YAAY,eAAe,IAAI,KAAK;AAC9D;AAEO,SAAS,kCACd,OAC0B;AAC1B,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACnC,QAAM,UAAoC,CAAC;AAC3C,QAAM,OAAO,oBAAI,IAA4B;AAC7C,aAAW,SAAS,OAAO;AACzB,QAAI,CAAC,yBAAyB,KAAK,KAAK,KAAK,IAAI,KAAK,EAAG;AACzD,SAAK,IAAI,KAAK;AACd,YAAQ,KAAK,KAAK;AAAA,EACpB;AACA,SAAO;AACT;AAEO,SAAS,oCACd,OAC4B;AAC5B,SAAO,OAAO,UAAU,YAAY,0BAA0B,IAAI,KAAK,IAClE,QACD;AACN;AAEO,SAAS,2BAA2B,MAIlB;AACvB,SAAO;AAAA,IACL,OAAO,KAAK,UAAU,UAAU;AAAA,IAChC,SAAS,KAAK;AAAA,IACd,UAAU,KAAK,YAAY;AAAA,EAC7B;AACF;AAEO,SAAS,gCAAgC,MAGvB;AACvB,SAAO;AAAA,IACL,OAAO;AAAA,IACP,SAAS,KAAK;AAAA,IACd,UAAU,KAAK,iBAAiB;AAAA,EAClC;AACF;AAEA,eAAsB,kCAAkC,MAItB;AAChC,SAAO,2BAA2B;AAAA,IAChC,SAAS,MAAM,KAAK,eAAe,KAAK,SAAS,KAAK,OAAO;AAAA,IAC7D,SAAS,KAAK,QAAQ;AAAA,IACtB,UACE,OAAO,KAAK,QAAQ,aAAa,WAAW,KAAK,QAAQ,WAAW;AAAA,EACxE,CAAC;AACH;AAEO,SAAS,UACd,SACA,WACA,QACS;AACT,MAAI,QAAQ,UAAU,WAAW,QAAQ,UAAU,eAAe;AAChE,WAAO;AAAA,EACT;AAEA,QAAM,kBACJ,QAAQ,mBAAmB;AAC7B,MAAI,oBAAoB,cAAc;AACpC,WAAO;AAAA,EACT;AACA,MAAI,oBAAoB,iBAAiB;AACvC,WAAO,cAAc;AAAA,EACvB;AACA,SACE,QAAQ,mBAAmB,SAAS,SAAS,KAAK,cAAc;AAEpE;AAEO,SAAS,+BAA+B,MAMnC;AACV,MAAI,KAAK,SAAS,KAAK,EAAE,WAAW,GAAG;AACrC,WAAO;AAAA,EACT;AACA,MAAI,CAAC,KAAK,oBAAoB;AAC5B,WAAO,UAAU,KAAK,SAAS,KAAK,WAAW,KAAK,MAAM;AAAA,EAC5D;AACA,SAAO,UAAU,KAAK,SAAS,KAAK,WAAW,KAAK,MAAM;AAC5D;AAEO,SAAS,oBACd,OACA,MAMQ;AACR,MAAI,UAAU,KAAK,SAAS,KAAK,WAAW,KAAK,MAAM,GAAG;AACxD,WAAO,SAAS;AAAA,EAClB;AACA,SAAO,KAAK,eAAe;AAC7B;AAEO,SAAS,mBACd,OACA,MAIe;AACf,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,UAAU,KAAK,SAAS,cAAc,KAAK,MAAM,IAAI,QAAQ;AACtE;AAEO,SAAS,4BACd,QACA,MAMc;AACd,QAAM,aAAa,KAAK,YAAY;AAAA,IAAM,CAAC,cACzC,UAAU,KAAK,SAAS,WAAW,KAAK,MAAM;AAAA,EAChD;AACA,MAAI,WAAY,QAAO;AACvB,SAAO;AAAA,IACL,GAAG;AAAA,IACH,MAAM,KAAK,gBAAgB;AAAA,IAC3B,MAAM;AAAA,MACJ,iBAAiB;AAAA,MACjB,iBAAiB,OAAO;AAAA,IAC1B;AAAA,EACF;AACF;AAEA,eAAsB,oBACpB,UACA,QACA,MAOuB;AACvB,QAAM,WAAW,4BAA4B,QAAQ,IAAI;AACzD,QAAM,WAAW;AAAA,IACf,MAAM,SAAS,QAAQ;AAAA,IACvB,QAAQ,KAAK;AAAA,IACb,QAAQ,KAAK;AAAA,EACf,CAAC;AACD,SAAO;AACT;AAEO,SAAS,2BACd,UACA,oBACQ;AACR,SAAO,GAAG,QAAQ,IAAI,kBAAkB;AAC1C;AAEO,SAAS,mCACd,UACmD;AACnD,SAAO,IAAI;AAAA,IACT,SAAS,IAAI,CAAC,WAAW;AAAA,MACvB,2BAA2B,OAAO,UAAU,OAAO,kBAAkB;AAAA,MACrE;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAEO,SAAS,4BAA4B,OAA+B;AACzE,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,SAAS,gCAAgC,OAAuB;AAC9D,SAAO,OAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK,EAAE,MAAM,GAAG,EAAE;AAC5E;AAEA,SAAS,WAAW,OAA+B;AACjD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAM,UAAU,MAAM,KAAK;AAC3B,SAAO,QAAQ,SAAS,IAAI,UAAU;AACxC;AAEA,SAAS,kBAAkB,UAAkD;AAC3E,SACE,WAAW,SAAS,KAAK,KACzB,WAAW,SAAS,YAAY,KAChC,WAAW,SAAS,YAAY;AAEpC;AAEA,SAAS,qBACP,UACe;AACf,SACE,WAAW,SAAS,GAAG,KACvB,WAAW,SAAS,EAAE,KACtB,WAAW,SAAS,SAAS,KAC7B,WAAW,SAAS,MAAM,KAC1B,WAAW,SAAS,KAAK,KACzB,WAAW,SAAS,MAAM;AAE9B;AAEO,SAAS,yBAAyB,MAOvB;AAChB,QAAM,WAAW,KAAK,SAAS,KAAK,EAAE,YAAY;AAClD,MAAI,CAAC,SAAU,QAAO;AACtB,QAAM,QAAQ,KAAK,QAAQ,SAAS,KAAK,EAAE,YAAY,KAAK;AAC5D,QAAM,WAAW,KAAK,YAAY,CAAC;AACnC,QAAM,QACJ,WAAW,KAAK,aAAa,GAAG,YAAY,KAC5C,kBAAkB,QAAQ,GAAG,YAAY;AAC3C,MAAI,OAAO;AACT,WAAO,GAAG,QAAQ,IAAI,IAAI,UAAU,gCAAgC,KAAK,CAAC;AAAA,EAC5E;AAEA,QAAM,iBAAiB,qBAAqB,QAAQ;AACpD,MAAI,gBAAgB;AAClB,WAAO,GAAG,QAAQ,IAAI,IAAI,aAAa,gCAAgC,cAAc,CAAC;AAAA,EACxF;AAEA,QAAM,oBAAoB,WAAW,KAAK,iBAAiB;AAC3D,MAAI,mBAAmB;AACrB,WAAO,GAAG,QAAQ,IAAI,IAAI,UAAU,gCAAgC,iBAAiB,CAAC;AAAA,EACxF;AAEA,SAAO;AACT;AAEO,SAAS,8BAA8B,MAInC;AACT,QAAM,WAAW,KAAK,SAAS,KAAK,EAAE,YAAY;AAClD,QAAM,QAAQ,KAAK,QAAQ,SAAS,KAAK,EAAE,YAAY,KAAK;AAC5D,SAAO,GAAG,QAAQ,IAAI,IAAI,UAAU,gCAAgC,KAAK,OAAO,CAAC;AACnF;AAEO,SAAS,kCACd,OAUQ;AACR,QAAM,WAAW;AAAA,IACf,MAAM,SAAS;AAAA,EACjB;AACA,MAAI,SAAU,QAAO;AAErB,SACE,yBAAyB;AAAA,IACvB,UAAU,MAAM;AAAA,IAChB,MAAM,MAAM;AAAA,IACZ,UAAU,MAAM;AAAA,IAChB,eAAe,MAAM;AAAA,IACrB,mBAAmB,MAAM;AAAA,IACzB,SAAS,MAAM;AAAA,EACjB,CAAC,KACD,8BAA8B;AAAA,IAC5B,UAAU,MAAM;AAAA,IAChB,MAAM,MAAM;AAAA,IACZ,SAAS,MAAM;AAAA,EACjB,CAAC;AAEL;AAEO,SAAS,oCACd,OACA,OAAM,oBAAI,KAAK,GAAE,YAAY,GACS;AACtC,SAAO;AAAA,IACL,IACE,MAAM,MACN,aAAa;AAAA,MACX,GAAG,MAAM,OAAO,IAAI,MAAM,QAAQ,IAAI,MAAM,kBAAkB;AAAA,IAChE,CAAC;AAAA,IACH,SAAS,MAAM;AAAA,IACf,UAAU,MAAM;AAAA,IAChB,oBAAoB,MAAM;AAAA,IAC1B,iBAAiB,oCAAoC,MAAM,eAAe;AAAA,IAC1E,oBAAoB;AAAA,MAClB,MAAM;AAAA,IACR;AAAA,IACA,UAAU,MAAM,YAAY,CAAC;AAAA,IAC7B,WAAW;AAAA,IACX,WAAW;AAAA,EACb;AACF;","names":[]}

package/dist/lifeops/privacy.d.ts

@@ -0,0 +1,49 @@
+import { type ConnectorAccount, type IAgentRuntime, type PrivacyLevel } from "@elizaos/core";
+/**
+ * The audience receiving content surfaced from a connector account.
+ *
+ * - `owner`: the account owner (always allowed by every privacy level).
+ * - `team`: a team or admin role user.
+ * - `agent_message_recipient`: any non-team participant addressing the agent.
+ * - `public`: a broadcast surface (public posts, etc.).
+ */
+export type LifeOpsAudience = "owner" | "team" | "agent_message_recipient" | "public";
+/**
+ * Returns true when an account at the given `privacy` level may be surfaced
+ * to the given `audience`.
+ *
+ * Lattice:
+ *   owner_only   -> owner
+ *   team_visible -> owner | team
+ *   semi_public  -> owner | team | agent_message_recipient
+ *   public       -> any
+ */
+export declare function canSurfaceForAudience(privacy: PrivacyLevel, audience: LifeOpsAudience): boolean;
+export interface CanSurfaceAccountDataOptions {
+    runtime: IAgentRuntime;
+    provider: string;
+    accountId: string;
+    audience: LifeOpsAudience;
+}
+/**
+ * Resolve a connector account and apply `canSurfaceForAudience` against the
+ * stored privacy level. Returns false if the account cannot be loaded — the
+ * caller must not surface the data.
+ */
+export declare function canSurfaceAccountData(opts: CanSurfaceAccountDataOptions): Promise<boolean>;
+/**
+ * Filter a list of connector accounts down to those that may be surfaced to
+ * the given audience. Logs a structured debug line indicating how many were
+ * filtered out — does not log any account data.
+ */
+export declare function filterAccountsForAudience(accounts: readonly ConnectorAccount[], audience: LifeOpsAudience, context?: {
+    provider: string;
+    runtime?: IAgentRuntime;
+}): ConnectorAccount[];
+export declare const LIFEOPS_REDACTED_PLACEHOLDER = "[redacted: owner_only]";
+/**
+ * Choose the replacement text for a redacted account when the privacy level
+ * blocks surfacing to the audience.
+ */
+export declare function redactedPlaceholder(privacy: PrivacyLevel): string;
+//# sourceMappingURL=privacy.d.ts.map

package/dist/lifeops/privacy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.d.ts","sourceRoot":"","sources":["../../src/lifeops/privacy.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,gBAAgB,EAIrB,KAAK,aAAa,EAElB,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAEvB;;;;;;;GAOG;AACH,MAAM,MAAM,eAAe,GACvB,OAAO,GACP,MAAM,GACN,yBAAyB,GACzB,QAAQ,CAAC;AAEb;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,YAAY,EACrB,QAAQ,EAAE,eAAe,GACxB,OAAO,CAcT;AAED,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,aAAa,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,eAAe,CAAC;CAC3B;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,OAAO,CAAC,CAYlB;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,EACrC,QAAQ,EAAE,eAAe,EACzB,OAAO,GAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,aAAa,CAAA;CAEnD,GACA,gBAAgB,EAAE,CAiBpB;AAED,eAAO,MAAM,4BAA4B,2BAA2B,CAAC;AAErE;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,YAAY,GAAG,MAAM,CAIjE"}

package/dist/lifeops/privacy.js

@@ -0,0 +1,66 @@
+import {
+  DEFAULT_PRIVACY_LEVEL,
+  getAccountPrivacy,
+  getConnectorAccountManager,
+  logger
+} from "@elizaos/core";
+function canSurfaceForAudience(privacy, audience) {
+  if (audience === "owner") return true;
+  switch (privacy) {
+    case "owner_only":
+      return false;
+    case "team_visible":
+      return audience === "team";
+    case "semi_public":
+      return audience === "team" || audience === "agent_message_recipient";
+    case "public":
+      return true;
+    default:
+      return false;
+  }
+}
+async function canSurfaceAccountData(opts) {
+  const provider = opts.provider.trim().toLowerCase();
+  const accountId = opts.accountId.trim();
+  if (!provider || !accountId) {
+    return false;
+  }
+  const manager = getConnectorAccountManager(opts.runtime);
+  const account = await manager.getAccount(provider, accountId);
+  if (!account) {
+    return false;
+  }
+  return canSurfaceForAudience(getAccountPrivacy(account), opts.audience);
+}
+function filterAccountsForAudience(accounts, audience, context = {
+  provider: "unknown"
+}) {
+  const allowed = [];
+  let filtered = 0;
+  for (const account of accounts) {
+    const privacy = getAccountPrivacy(account);
+    if (canSurfaceForAudience(privacy, audience)) {
+      allowed.push(account);
+    } else {
+      filtered += 1;
+    }
+  }
+  if (filtered > 0) {
+    logger.debug(
+      `[LifeOpsPrivacy] filtered ${filtered} accounts of provider ${context.provider} for audience ${audience}`
+    );
+  }
+  return allowed;
+}
+const LIFEOPS_REDACTED_PLACEHOLDER = "[redacted: owner_only]";
+function redactedPlaceholder(privacy) {
+  return privacy === DEFAULT_PRIVACY_LEVEL ? LIFEOPS_REDACTED_PLACEHOLDER : `[redacted: ${privacy}]`;
+}
+export {
+  LIFEOPS_REDACTED_PLACEHOLDER,
+  canSurfaceAccountData,
+  canSurfaceForAudience,
+  filterAccountsForAudience,
+  redactedPlaceholder
+};
+//# sourceMappingURL=privacy.js.map

package/dist/lifeops/privacy.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/lifeops/privacy.ts"],"sourcesContent":["import {\n  type ConnectorAccount,\n  DEFAULT_PRIVACY_LEVEL,\n  getAccountPrivacy,\n  getConnectorAccountManager,\n  type IAgentRuntime,\n  logger,\n  type PrivacyLevel,\n} from \"@elizaos/core\";\n\n/**\n * The audience receiving content surfaced from a connector account.\n *\n * - `owner`: the account owner (always allowed by every privacy level).\n * - `team`: a team or admin role user.\n * - `agent_message_recipient`: any non-team participant addressing the agent.\n * - `public`: a broadcast surface (public posts, etc.).\n */\nexport type LifeOpsAudience =\n  | \"owner\"\n  | \"team\"\n  | \"agent_message_recipient\"\n  | \"public\";\n\n/**\n * Returns true when an account at the given `privacy` level may be surfaced\n * to the given `audience`.\n *\n * Lattice:\n *   owner_only   -> owner\n *   team_visible -> owner | team\n *   semi_public  -> owner | team | agent_message_recipient\n *   public       -> any\n */\nexport function canSurfaceForAudience(\n  privacy: PrivacyLevel,\n  audience: LifeOpsAudience,\n): boolean {\n  if (audience === \"owner\") return true;\n  switch (privacy) {\n    case \"owner_only\":\n      return false;\n    case \"team_visible\":\n      return audience === \"team\";\n    case \"semi_public\":\n      return audience === \"team\" || audience === \"agent_message_recipient\";\n    case \"public\":\n      return true;\n    default:\n      return false;\n  }\n}\n\nexport interface CanSurfaceAccountDataOptions {\n  runtime: IAgentRuntime;\n  provider: string;\n  accountId: string;\n  audience: LifeOpsAudience;\n}\n\n/**\n * Resolve a connector account and apply `canSurfaceForAudience` against the\n * stored privacy level. Returns false if the account cannot be loaded — the\n * caller must not surface the data.\n */\nexport async function canSurfaceAccountData(\n  opts: CanSurfaceAccountDataOptions,\n): Promise<boolean> {\n  const provider = opts.provider.trim().toLowerCase();\n  const accountId = opts.accountId.trim();\n  if (!provider || !accountId) {\n    return false;\n  }\n  const manager = getConnectorAccountManager(opts.runtime);\n  const account = await manager.getAccount(provider, accountId);\n  if (!account) {\n    return false;\n  }\n  return canSurfaceForAudience(getAccountPrivacy(account), opts.audience);\n}\n\n/**\n * Filter a list of connector accounts down to those that may be surfaced to\n * the given audience. Logs a structured debug line indicating how many were\n * filtered out — does not log any account data.\n */\nexport function filterAccountsForAudience(\n  accounts: readonly ConnectorAccount[],\n  audience: LifeOpsAudience,\n  context: { provider: string; runtime?: IAgentRuntime } = {\n    provider: \"unknown\",\n  },\n): ConnectorAccount[] {\n  const allowed: ConnectorAccount[] = [];\n  let filtered = 0;\n  for (const account of accounts) {\n    const privacy = getAccountPrivacy(account);\n    if (canSurfaceForAudience(privacy, audience)) {\n      allowed.push(account);\n    } else {\n      filtered += 1;\n    }\n  }\n  if (filtered > 0) {\n    logger.debug(\n      `[LifeOpsPrivacy] filtered ${filtered} accounts of provider ${context.provider} for audience ${audience}`,\n    );\n  }\n  return allowed;\n}\n\nexport const LIFEOPS_REDACTED_PLACEHOLDER = \"[redacted: owner_only]\";\n\n/**\n * Choose the replacement text for a redacted account when the privacy level\n * blocks surfacing to the audience.\n */\nexport function redactedPlaceholder(privacy: PrivacyLevel): string {\n  return privacy === DEFAULT_PRIVACY_LEVEL\n    ? LIFEOPS_REDACTED_PLACEHOLDER\n    : `[redacted: ${privacy}]`;\n}\n"],"mappings":"AAAA;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,OAEK;AA0BA,SAAS,sBACd,SACA,UACS;AACT,MAAI,aAAa,QAAS,QAAO;AACjC,UAAQ,SAAS;AAAA,IACf,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,aAAa;AAAA,IACtB,KAAK;AACH,aAAO,aAAa,UAAU,aAAa;AAAA,IAC7C,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAcA,eAAsB,sBACpB,MACkB;AAClB,QAAM,WAAW,KAAK,SAAS,KAAK,EAAE,YAAY;AAClD,QAAM,YAAY,KAAK,UAAU,KAAK;AACtC,MAAI,CAAC,YAAY,CAAC,WAAW;AAC3B,WAAO;AAAA,EACT;AACA,QAAM,UAAU,2BAA2B,KAAK,OAAO;AACvD,QAAM,UAAU,MAAM,QAAQ,WAAW,UAAU,SAAS;AAC5D,MAAI,CAAC,SAAS;AACZ,WAAO;AAAA,EACT;AACA,SAAO,sBAAsB,kBAAkB,OAAO,GAAG,KAAK,QAAQ;AACxE;AAOO,SAAS,0BACd,UACA,UACA,UAAyD;AAAA,EACvD,UAAU;AACZ,GACoB;AACpB,QAAM,UAA8B,CAAC;AACrC,MAAI,WAAW;AACf,aAAW,WAAW,UAAU;AAC9B,UAAM,UAAU,kBAAkB,OAAO;AACzC,QAAI,sBAAsB,SAAS,QAAQ,GAAG;AAC5C,cAAQ,KAAK,OAAO;AAAA,IACtB,OAAO;AACL,kBAAY;AAAA,IACd;AAAA,EACF;AACA,MAAI,WAAW,GAAG;AAChB,WAAO;AAAA,MACL,6BAA6B,QAAQ,yBAAyB,QAAQ,QAAQ,iBAAiB,QAAQ;AAAA,IACzG;AAAA,EACF;AACA,SAAO;AACT;AAEO,MAAM,+BAA+B;AAMrC,SAAS,oBAAoB,SAA+B;AACjE,SAAO,YAAY,wBACf,+BACA,cAAc,OAAO;AAC3B;","names":[]}

package/dist/lifeops/redact-sensitive-data.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Redact PII / secrets from arbitrary nested values before they land in
+ * audit-event payloads or error logs.
+ *
+ * The redactor walks the value depth-first and replaces any string assigned
+ * to a sensitive key with a redaction token. Email-looking substrings are also
+ * redacted in otherwise non-sensitive strings so audit context remains useful
+ * without leaking arbitrary addresses. Long subjects / bodies are truncated to
+ * a fixed prefix after PII redaction so an audit trail still has enough context
+ * to debug, but cannot be used to leak the full message body.
+ *
+ * Sensitive key names (matched case-insensitively, exact name OR substring
+ * for the obvious credential terms):
+ *
+ *   - body, snippet, subject, fromEmail, toList, to, from, email
+ *   - password, token, secret, apiKey, authorization
+ */
+interface RedactOptions {
+    readonly subjectPreview?: number;
+    readonly bodyPreview?: number;
+}
+/**
+ * Redact a value (object, array, or primitive) for safe inclusion in audit
+ * events or log lines. Strings under sensitive keys are replaced with a
+ * redaction token; subjects/bodies are truncated.
+ *
+ * The function is non-mutating — callers receive a fresh structure and the
+ * input value is left intact.
+ */
+export declare function redactSensitiveData<T>(value: T, opts?: RedactOptions): T;
+export {};
+//# sourceMappingURL=redact-sensitive-data.d.ts.map

package/dist/lifeops/redact-sensitive-data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-sensitive-data.d.ts","sourceRoot":"","sources":["../../src/lifeops/redact-sensitive-data.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAoCH,UAAU,aAAa;IACrB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAkFD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,GAAE,aAAkB,GAAG,CAAC,CAE5E"}

package/dist/lifeops/redact-sensitive-data.js

@@ -0,0 +1,98 @@
+const REDACTED = "[REDACTED]";
+const REDACTED_EMAIL = "[REDACTED_EMAIL]";
+const DEFAULT_SUBJECT_PREVIEW = 20;
+const DEFAULT_BODY_PREVIEW = 30;
+const EMAIL_ADDRESS_PATTERN = /\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/gi;
+const FULL_REDACT_KEYS = /* @__PURE__ */ new Set([
+  "password",
+  "token",
+  "secret",
+  "apikey",
+  "api_key",
+  "authorization"
+]);
+const EMAIL_LIKE_KEYS = /* @__PURE__ */ new Set([
+  "fromemail",
+  "tolist",
+  "to",
+  "from",
+  "email",
+  "cc",
+  "bcc",
+  "ccemail",
+  "bccemail",
+  "replyto"
+]);
+const SUBJECT_KEYS = /* @__PURE__ */ new Set(["subject"]);
+const BODY_KEYS = /* @__PURE__ */ new Set(["body", "bodytext", "snippet", "preview"]);
+const FULL_REDACT_SUBSTRINGS = ["password", "secret", "apikey", "token"];
+function isFullRedactKey(normalizedKey) {
+  if (FULL_REDACT_KEYS.has(normalizedKey)) return true;
+  for (const needle of FULL_REDACT_SUBSTRINGS) {
+    if (normalizedKey.includes(needle)) return true;
+  }
+  return false;
+}
+function shortenSubject(value, max) {
+  if (value.length <= max) return value;
+  return `${value.slice(0, max).trimEnd()}\u2026`;
+}
+function shortenBody(value, max) {
+  if (value.length <= max) return value;
+  return `${value.slice(0, max).trimEnd()}\u2026 [+${value.length - max} chars]`;
+}
+function redactEmailAddresses(value) {
+  return value.replace(EMAIL_ADDRESS_PATTERN, REDACTED_EMAIL);
+}
+function redactString(rawKey, value, opts) {
+  const key = rawKey.toLowerCase();
+  if (isFullRedactKey(key)) {
+    return REDACTED;
+  }
+  if (EMAIL_LIKE_KEYS.has(key)) {
+    return REDACTED;
+  }
+  const valueWithoutEmails = redactEmailAddresses(value);
+  if (SUBJECT_KEYS.has(key)) {
+    return shortenSubject(
+      valueWithoutEmails,
+      opts.subjectPreview ?? DEFAULT_SUBJECT_PREVIEW
+    );
+  }
+  if (BODY_KEYS.has(key)) {
+    return shortenBody(
+      valueWithoutEmails,
+      opts.bodyPreview ?? DEFAULT_BODY_PREVIEW
+    );
+  }
+  return valueWithoutEmails;
+}
+function redactValue(rawKey, value, opts, seen) {
+  if (value === null || value === void 0) return value;
+  if (typeof value === "string") {
+    return redactString(rawKey, value, opts);
+  }
+  if (Array.isArray(value)) {
+    if (seen.has(value)) return "[Circular]";
+    seen.add(value);
+    return value.map((entry) => redactValue(rawKey, entry, opts, seen));
+  }
+  if (typeof value === "object") {
+    const obj = value;
+    if (seen.has(obj)) return "[Circular]";
+    seen.add(obj);
+    const out = {};
+    for (const [k, v] of Object.entries(obj)) {
+      out[k] = redactValue(k, v, opts, seen);
+    }
+    return out;
+  }
+  return value;
+}
+function redactSensitiveData(value, opts = {}) {
+  return redactValue("", value, opts, /* @__PURE__ */ new WeakSet());
+}
+export {
+  redactSensitiveData
+};
+//# sourceMappingURL=redact-sensitive-data.js.map

package/dist/lifeops/redact-sensitive-data.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/lifeops/redact-sensitive-data.ts"],"sourcesContent":["/**\n * Redact PII / secrets from arbitrary nested values before they land in\n * audit-event payloads or error logs.\n *\n * The redactor walks the value depth-first and replaces any string assigned\n * to a sensitive key with a redaction token. Email-looking substrings are also\n * redacted in otherwise non-sensitive strings so audit context remains useful\n * without leaking arbitrary addresses. Long subjects / bodies are truncated to\n * a fixed prefix after PII redaction so an audit trail still has enough context\n * to debug, but cannot be used to leak the full message body.\n *\n * Sensitive key names (matched case-insensitively, exact name OR substring\n * for the obvious credential terms):\n *\n *   - body, snippet, subject, fromEmail, toList, to, from, email\n *   - password, token, secret, apiKey, authorization\n */\n\nconst REDACTED = \"[REDACTED]\";\nconst REDACTED_EMAIL = \"[REDACTED_EMAIL]\";\nconst DEFAULT_SUBJECT_PREVIEW = 20;\nconst DEFAULT_BODY_PREVIEW = 30;\nconst EMAIL_ADDRESS_PATTERN = /\\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\\.[A-Z]{2,}\\b/gi;\n\nconst FULL_REDACT_KEYS = new Set([\n  \"password\",\n  \"token\",\n  \"secret\",\n  \"apikey\",\n  \"api_key\",\n  \"authorization\",\n]);\n\nconst EMAIL_LIKE_KEYS = new Set([\n  \"fromemail\",\n  \"tolist\",\n  \"to\",\n  \"from\",\n  \"email\",\n  \"cc\",\n  \"bcc\",\n  \"ccemail\",\n  \"bccemail\",\n  \"replyto\",\n]);\n\nconst SUBJECT_KEYS = new Set([\"subject\"]);\nconst BODY_KEYS = new Set([\"body\", \"bodytext\", \"snippet\", \"preview\"]);\n\n/** Substring match for credential-ish keys we always want fully redacted. */\nconst FULL_REDACT_SUBSTRINGS = [\"password\", \"secret\", \"apikey\", \"token\"];\n\ninterface RedactOptions {\n  readonly subjectPreview?: number;\n  readonly bodyPreview?: number;\n}\n\nfunction isFullRedactKey(normalizedKey: string): boolean {\n  if (FULL_REDACT_KEYS.has(normalizedKey)) return true;\n  for (const needle of FULL_REDACT_SUBSTRINGS) {\n    if (normalizedKey.includes(needle)) return true;\n  }\n  return false;\n}\n\nfunction shortenSubject(value: string, max: number): string {\n  if (value.length <= max) return value;\n  return `${value.slice(0, max).trimEnd()}…`;\n}\n\nfunction shortenBody(value: string, max: number): string {\n  if (value.length <= max) return value;\n  return `${value.slice(0, max).trimEnd()}… [+${value.length - max} chars]`;\n}\n\nfunction redactEmailAddresses(value: string): string {\n  return value.replace(EMAIL_ADDRESS_PATTERN, REDACTED_EMAIL);\n}\n\nfunction redactString(\n  rawKey: string,\n  value: string,\n  opts: RedactOptions,\n): string {\n  const key = rawKey.toLowerCase();\n  if (isFullRedactKey(key)) {\n    return REDACTED;\n  }\n  if (EMAIL_LIKE_KEYS.has(key)) {\n    return REDACTED;\n  }\n  const valueWithoutEmails = redactEmailAddresses(value);\n  if (SUBJECT_KEYS.has(key)) {\n    return shortenSubject(\n      valueWithoutEmails,\n      opts.subjectPreview ?? DEFAULT_SUBJECT_PREVIEW,\n    );\n  }\n  if (BODY_KEYS.has(key)) {\n    return shortenBody(\n      valueWithoutEmails,\n      opts.bodyPreview ?? DEFAULT_BODY_PREVIEW,\n    );\n  }\n  return valueWithoutEmails;\n}\n\nfunction redactValue(\n  rawKey: string,\n  value: unknown,\n  opts: RedactOptions,\n  seen: WeakSet<object>,\n): unknown {\n  if (value === null || value === undefined) return value;\n  if (typeof value === \"string\") {\n    return redactString(rawKey, value, opts);\n  }\n  if (Array.isArray(value)) {\n    if (seen.has(value)) return \"[Circular]\";\n    seen.add(value);\n    // Arrays use the parent key for redaction context (e.g. `toList: [...]`).\n    return value.map((entry) => redactValue(rawKey, entry, opts, seen));\n  }\n  if (typeof value === \"object\") {\n    const obj = value as Record<string, unknown>;\n    if (seen.has(obj)) return \"[Circular]\";\n    seen.add(obj);\n    const out: Record<string, unknown> = {};\n    for (const [k, v] of Object.entries(obj)) {\n      out[k] = redactValue(k, v, opts, seen);\n    }\n    return out;\n  }\n  // numbers / booleans / bigint / symbol — pass through unchanged.\n  return value;\n}\n\n/**\n * Redact a value (object, array, or primitive) for safe inclusion in audit\n * events or log lines. Strings under sensitive keys are replaced with a\n * redaction token; subjects/bodies are truncated.\n *\n * The function is non-mutating — callers receive a fresh structure and the\n * input value is left intact.\n */\nexport function redactSensitiveData<T>(value: T, opts: RedactOptions = {}): T {\n  return redactValue(\"\", value, opts, new WeakSet()) as T;\n}\n"],"mappings":"AAkBA,MAAM,WAAW;AACjB,MAAM,iBAAiB;AACvB,MAAM,0BAA0B;AAChC,MAAM,uBAAuB;AAC7B,MAAM,wBAAwB;AAE9B,MAAM,mBAAmB,oBAAI,IAAI;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,kBAAkB,oBAAI,IAAI;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,MAAM,eAAe,oBAAI,IAAI,CAAC,SAAS,CAAC;AACxC,MAAM,YAAY,oBAAI,IAAI,CAAC,QAAQ,YAAY,WAAW,SAAS,CAAC;AAGpE,MAAM,yBAAyB,CAAC,YAAY,UAAU,UAAU,OAAO;AAOvE,SAAS,gBAAgB,eAAgC;AACvD,MAAI,iBAAiB,IAAI,aAAa,EAAG,QAAO;AAChD,aAAW,UAAU,wBAAwB;AAC3C,QAAI,cAAc,SAAS,MAAM,EAAG,QAAO;AAAA,EAC7C;AACA,SAAO;AACT;AAEA,SAAS,eAAe,OAAe,KAAqB;AAC1D,MAAI,MAAM,UAAU,IAAK,QAAO;AAChC,SAAO,GAAG,MAAM,MAAM,GAAG,GAAG,EAAE,QAAQ,CAAC;AACzC;AAEA,SAAS,YAAY,OAAe,KAAqB;AACvD,MAAI,MAAM,UAAU,IAAK,QAAO;AAChC,SAAO,GAAG,MAAM,MAAM,GAAG,GAAG,EAAE,QAAQ,CAAC,YAAO,MAAM,SAAS,GAAG;AAClE;AAEA,SAAS,qBAAqB,OAAuB;AACnD,SAAO,MAAM,QAAQ,uBAAuB,cAAc;AAC5D;AAEA,SAAS,aACP,QACA,OACA,MACQ;AACR,QAAM,MAAM,OAAO,YAAY;AAC/B,MAAI,gBAAgB,GAAG,GAAG;AACxB,WAAO;AAAA,EACT;AACA,MAAI,gBAAgB,IAAI,GAAG,GAAG;AAC5B,WAAO;AAAA,EACT;AACA,QAAM,qBAAqB,qBAAqB,KAAK;AACrD,MAAI,aAAa,IAAI,GAAG,GAAG;AACzB,WAAO;AAAA,MACL;AAAA,MACA,KAAK,kBAAkB;AAAA,IACzB;AAAA,EACF;AACA,MAAI,UAAU,IAAI,GAAG,GAAG;AACtB,WAAO;AAAA,MACL;AAAA,MACA,KAAK,eAAe;AAAA,IACtB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,YACP,QACA,OACA,MACA,MACS;AACT,MAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,aAAa,QAAQ,OAAO,IAAI;AAAA,EACzC;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,QAAI,KAAK,IAAI,KAAK,EAAG,QAAO;AAC5B,SAAK,IAAI,KAAK;AAEd,WAAO,MAAM,IAAI,CAAC,UAAU,YAAY,QAAQ,OAAO,MAAM,IAAI,CAAC;AAAA,EACpE;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,MAAM;AACZ,QAAI,KAAK,IAAI,GAAG,EAAG,QAAO;AAC1B,SAAK,IAAI,GAAG;AACZ,UAAM,MAA+B,CAAC;AACtC,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,GAAG;AACxC,UAAI,CAAC,IAAI,YAAY,GAAG,GAAG,MAAM,IAAI;AAAA,IACvC;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAUO,SAAS,oBAAuB,OAAU,OAAsB,CAAC,GAAM;AAC5E,SAAO,YAAY,IAAI,OAAO,MAAM,oBAAI,QAAQ,CAAC;AACnD;","names":[]}