@enricai/barnacle 1.12.78 → 1.12.80

package/dist/lib/logging.js

@@ -3,6 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.PII_REDACTING_LOG_HOOKS = void 0;
 exports.splitLargeMessage = splitLargeMessage;
 exports.extendLogger = extendLogger;
 exports.getScriptLogger = getScriptLogger;
@@ -11,6 +12,7 @@ const date_fns_1 = require("date-fns");
 const pino_1 = __importDefault(require("pino"));
 const datadog_1 = require("./datadog");
 const env_1 = require("./env");
+const pii_redaction_1 = require("./pii-redaction");
 const nodeEnv = (0, env_1.getNodeEnv)();
 const isDevelopment = nodeEnv === "development";
 const isTest = nodeEnv === "test";
@@ -60,6 +62,17 @@ const formatters = {
         return { level: label };
     },
 };
+/**
+ * Scrubs registered request values from every argument before pino formats
+ * the line. `redact` only matches object keys; log messages are interpolated
+ * strings, so values have to be matched by content. Child loggers (e.g.
+ * Fastify's `request.log`) inherit pino hooks. Exported for direct testing.
+ */
+exports.PII_REDACTING_LOG_HOOKS = {
+    logMethod(args, method) {
+        method.apply(this, args.map((arg) => (0, pii_redaction_1.redactPiiDeep)(arg)));
+    },
+};
 /**
  * Splits a message that exceeds CloudWatch's 256KB per-event cap. Prefers
  * newline / space boundaries so chunks stay readable; falls back to a
@@ -117,7 +130,10 @@ function getChunkPrefix(index, totalChunks) {
 }
 function logWithSplitting(originalLogFn, obj, ...args) {
     if (typeof obj === "string") {
-        const chunks = splitLargeMessage(obj);
+        // The redaction hook sees one chunk at a time, so a value cut in half by
+        // the split would match in neither; scrub the whole message first.
+        const whole = splitLargeMessage(obj);
+        const chunks = whole.length > 1 ? splitLargeMessage((0, pii_redaction_1.redactPii)(obj)) : whole;
         chunks.forEach((chunk, index) => {
             const prefix = getChunkPrefix(index, chunks.length);
             originalLogFn(`${prefix}${chunk}`, ...args);
@@ -174,6 +190,7 @@ function getScriptLogger(name) {
     return extendLogger((0, pino_1.default)({
         name: getLogName(name, defaultAppName),
         level: process.env.LOG_LEVEL ?? "info",
+        hooks: exports.PII_REDACTING_LOG_HOOKS,
         transport,
     }));
 }
@@ -200,6 +217,7 @@ function getLogger({ name, level }) {
         },
         timestamp: getTimestamp,
         formatters,
+        hooks: exports.PII_REDACTING_LOG_HOOKS,
         mixin: ddEnabled ? ddMixin : undefined,
         redact: {
             paths: redactPaths,

package/dist/lib/logging.js.map

@@ -1 +1 @@
-{"version":3,"file":"logging.js","sourceRoot":"","sources":["../../src/lib/logging.ts"],"names":[],"mappings":";;;;;;;;;AAAA,uCAAqC;AACrC,gDAAwB;AAExB,2CAA0C;AAC1C,mCAA2D;AAG3D,MAAM,OAAO,GAAG,IAAA,gBAAU,GAAE,CAAC;AAC7B,MAAM,aAAa,GAAG,OAAO,KAAK,aAAa,CAAC;AAChD,MAAM,MAAM,GAAG,OAAO,KAAK,MAAM,CAAC;AAClC,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5F,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,UAAU,CAAC;AAC1D,MAAM,SAAS,GAAG,IAAA,gBAAU,EAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;AAExD;;;GAGG;AACH,MAAM,uBAAuB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC3C,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,CAAC;AACxC,MAAM,gBAAgB,GAAG,uBAAuB,GAAG,sBAAsB,CAAC;AAE1E,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,MAAM,SAAS,GAAG,aAAa;IAC7B,CAAC,CAAC;QACE,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE;YACP,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,cAAc;YAC7B,MAAM,EAAE,cAAc;SACvB;KACF;IACH,CAAC,CAAC,SAAS,CAAC;AAEd,SAAS,YAAY;IACnB,OAAO,YAAY,IAAA,oBAAS,EAAC,IAAI,IAAI,EAAE,CAAC,GAAG,CAAC;AAC9C,CAAC;AAED,MAAM,WAAW,GAAG;IAClB,UAAU;IACV,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,eAAe;IACf,QAAQ;IACR,YAAY;IACZ,SAAS;IACT,UAAU;IACV,UAAU;IACV,iBAAiB;IACjB,2BAA2B;IAC3B,oBAAoB;CACrB,CAAC;AAEF,uEAAuE;AACvE,oEAAoE;AACpE,MAAM,UAAU,GAAG;IACjB,KAAK,EAAE,CAAC,KAAa,EAAqB,EAAE;QAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;CACF,CAAC;AAIF;;;;;;;;GAQG;AACH,2BAAkC,OAAe,EAAE,OAAO,GAAW,gBAAgB;IACnF,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAEvD,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC;QAC3B,OAAO,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAChD,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAEnD,OAAO,CAAC,UAAU,EAAE,GAAG,iBAAiB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,OAAe;IACtD,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,CAAC;IAC5B,IAAI,YAAY,GAAG,OAAO,EAAE,CAAC;QAC3B,OAAO,YAAY,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,UAAU,GAAG,OAAO,EAAE,CAAC;QACzB,OAAO,UAAU,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe,EAAE,OAAe;IAC7D,mEAAmE;IACnE,kEAAkE;IAClE,qEAAqE;IACrE,oEAAoE;IACpE,oEAAoE;IACpE,IAAI,qBAAqB,GAAG,CAAC,CAAC;IAC9B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QACtE,IAAI,SAAS,GAAG,QAAQ,GAAG,OAAO,EAAE,CAAC;YACnC,MAAM;QACR,CAAC;QACD,SAAS,IAAI,QAAQ,CAAC;QACtB,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC;QACvB,qBAAqB,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,OAAO,qBAAqB,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,WAAmB;IACxD,OAAO,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,WAAW,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,aAA0B,EAAE,GAAY,EAAE,GAAG,IAAe;IACpF,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACpD,aAAa,CAAC,GAAG,MAAM,GAAG,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,OAAe;IAC/C,OAAO,GAAG,OAAO,MAAM,IAAI,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;GAMG;AACH,sBAA6B,MAAmB;IAC9C,MAAM,cAAc,GAAG,MAAgB,CAAC;IAExC,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAgB,CAAC;IAC7E,MAAM,aAAa,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAgB,CAAC;IAC/E,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAgB,CAAC;IAC7E,MAAM,aAAa,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAgB,CAAC;IAE/E,cAAc,CAAC,IAAI,GAAG,CAAC,GAAY,EAAE,GAAG,IAAe,EAAQ,EAAE;QAC/D,gBAAgB,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,cAAc,CAAC,KAAK,GAAG,CAAC,GAAY,EAAE,GAAG,IAAe,EAAQ,EAAE;QAChE,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC;IAEF,cAAc,CAAC,IAAI,GAAG,CAAC,GAAY,EAAE,GAAG,IAAe,EAAQ,EAAE;QAC/D,gBAAgB,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,cAAc,CAAC,KAAK,GAAG,CAAC,GAAY,EAAE,GAAG,IAAe,EAAQ,EAAE;QAChE,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC;IAEF,cAAc,CAAC,cAAc,GAAG,CAAC,KAAc,EAAE,GAAY,EAAQ,EAAE;QACrE,MAAM,OAAO,GACX,KAAK,YAAY,KAAK;YACpB,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,KAAK,EAAE;YAC3C,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,gBAAgB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,yBAAgC,IAAY;IAC1C,OAAO,YAAY,CACjB,IAAA,cAAI,EAAC;QACH,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC;QACtC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM;QACtC,SAAS;KACV,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,mBAA0B,EAAE,IAAI,EAAE,KAAK,EAAoC;IACzE,MAAM,OAAO,GAAuB;QAClC,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC;QACtC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,mBAAmB;QACvD,IAAI,EAAE;YACJ,OAAO,EAAE,cAAc;YACvB,GAAG,EAAE,OAAO;YACZ,GAAG,CAAC,SAAS,IAAI;gBACf,EAAE,EAAE;oBACF,OAAO,EAAE,IAAA,YAAM,EAAC,YAAY,EAAE,UAAU,CAAC;oBACzC,OAAO,EAAE,IAAA,YAAM,EAAC,YAAY,EAAE,OAAO,CAAC;oBACtC,GAAG,EAAE,IAAA,YAAM,EAAC,QAAQ,EAAE,OAAO,CAAC;iBAC/B;aACF,CAAC;SACH;QACD,SAAS,EAAE,YAAY;QACvB,UAAU;QACV,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACtC,MAAM,EAAE;YACN,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,YAAY;SACrB;QACD,SAAS;KACV,CAAC;IAEF,OAAO,YAAY,CAAC,IAAA,cAAI,EAAC,OAAO,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,OAAO;IACd,MAAM,IAAI,GAAG,IAAA,mBAAS,GAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC3B,OAAO,EAAE,aAAa,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC1E,CAAC"}
+{"version":3,"file":"logging.js","sourceRoot":"","sources":["../../src/lib/logging.ts"],"names":[],"mappings":";;;;;;;;;;AAAA,uCAAqC;AACrC,gDAAwB;AAExB,2CAA0C;AAC1C,mCAA2D;AAC3D,uDAA+D;AAG/D,MAAM,OAAO,GAAG,IAAA,gBAAU,GAAE,CAAC;AAC7B,MAAM,aAAa,GAAG,OAAO,KAAK,aAAa,CAAC;AAChD,MAAM,MAAM,GAAG,OAAO,KAAK,MAAM,CAAC;AAClC,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5F,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,UAAU,CAAC;AAC1D,MAAM,SAAS,GAAG,IAAA,gBAAU,EAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;AAExD;;;GAGG;AACH,MAAM,uBAAuB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC3C,MAAM,sBAAsB,GAAG,CAAC,GAAG,IAAI,CAAC;AACxC,MAAM,gBAAgB,GAAG,uBAAuB,GAAG,sBAAsB,CAAC;AAE1E,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,MAAM,SAAS,GAAG,aAAa;IAC7B,CAAC,CAAC;QACE,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE;YACP,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,cAAc;YAC7B,MAAM,EAAE,cAAc;SACvB;KACF;IACH,CAAC,CAAC,SAAS,CAAC;AAEd,SAAS,YAAY;IACnB,OAAO,YAAY,IAAA,oBAAS,EAAC,IAAI,IAAI,EAAE,CAAC,GAAG,CAAC;AAC9C,CAAC;AAED,MAAM,WAAW,GAAG;IAClB,UAAU;IACV,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,eAAe;IACf,QAAQ;IACR,YAAY;IACZ,SAAS;IACT,UAAU;IACV,UAAU;IACV,iBAAiB;IACjB,2BAA2B;IAC3B,oBAAoB;CACrB,CAAC;AAEF,uEAAuE;AACvE,oEAAoE;AACpE,MAAM,UAAU,GAAG;IACjB,KAAK,EAAE,CAAC,KAAa,EAAqB,EAAE;QAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC1B,CAAC;CACF,CAAC;AAIF;;;;;GAKG;AACU,QAAA,uBAAuB,GAAgC;IAClE,SAAS,CAAC,IAAI,EAAE,MAAM;QACpB,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAA,6BAAa,EAAC,GAAG,CAAC,CAA8B,CAAC,CAAC;IACzF,CAAC;CACF,CAAC;AAEF;;;;;;;;GAQG;AACH,2BAAkC,OAAe,EAAE,OAAO,GAAW,gBAAgB;IACnF,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAEvD,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC;QAC3B,OAAO,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAChD,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAEnD,OAAO,CAAC,UAAU,EAAE,GAAG,iBAAiB,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,OAAe;IACtD,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,CAAC;IAC5B,IAAI,YAAY,GAAG,OAAO,EAAE,CAAC;QAC3B,OAAO,YAAY,GAAG,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,UAAU,GAAG,OAAO,EAAE,CAAC;QACzB,OAAO,UAAU,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe,EAAE,OAAe;IAC7D,mEAAmE;IACnE,kEAAkE;IAClE,qEAAqE;IACrE,oEAAoE;IACpE,oEAAoE;IACpE,IAAI,qBAAqB,GAAG,CAAC,CAAC;IAC9B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QACtE,IAAI,SAAS,GAAG,QAAQ,GAAG,OAAO,EAAE,CAAC;YACnC,MAAM;QACR,CAAC;QACD,SAAS,IAAI,QAAQ,CAAC;QACtB,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC;QACvB,qBAAqB,GAAG,OAAO,CAAC;IAClC,CAAC;IAED,OAAO,qBAAqB,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,WAAmB;IACxD,OAAO,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,WAAW,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,aAA0B,EAAE,GAAY,EAAE,GAAG,IAAe;IACpF,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,yEAAyE;QACzE,mEAAmE;QACnE,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAA,yBAAS,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC5E,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9B,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACpD,aAAa,CAAC,GAAG,MAAM,GAAG,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,OAAe;IAC/C,OAAO,GAAG,OAAO,MAAM,IAAI,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;GAMG;AACH,sBAA6B,MAAmB;IAC9C,MAAM,cAAc,GAAG,MAAgB,CAAC;IAExC,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAgB,CAAC;IAC7E,MAAM,aAAa,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAgB,CAAC;IAC/E,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAgB,CAAC;IAC7E,MAAM,aAAa,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAgB,CAAC;IAE/E,cAAc,CAAC,IAAI,GAAG,CAAC,GAAY,EAAE,GAAG,IAAe,EAAQ,EAAE;QAC/D,gBAAgB,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,cAAc,CAAC,KAAK,GAAG,CAAC,GAAY,EAAE,GAAG,IAAe,EAAQ,EAAE;QAChE,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC;IAEF,cAAc,CAAC,IAAI,GAAG,CAAC,GAAY,EAAE,GAAG,IAAe,EAAQ,EAAE;QAC/D,gBAAgB,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,cAAc,CAAC,KAAK,GAAG,CAAC,GAAY,EAAE,GAAG,IAAe,EAAQ,EAAE;QAChE,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC;IAEF,cAAc,CAAC,cAAc,GAAG,CAAC,KAAc,EAAE,GAAY,EAAQ,EAAE;QACrE,MAAM,OAAO,GACX,KAAK,YAAY,KAAK;YACpB,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,KAAK,EAAE;YAC3C,CAAC,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,gBAAgB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,yBAAgC,IAAY;IAC1C,OAAO,YAAY,CACjB,IAAA,cAAI,EAAC;QACH,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC;QACtC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM;QACtC,KAAK,EAAE,QAAA,uBAAuB;QAC9B,SAAS;KACV,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,mBAA0B,EAAE,IAAI,EAAE,KAAK,EAAoC;IACzE,MAAM,OAAO,GAAuB;QAClC,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC;QACtC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,mBAAmB;QACvD,IAAI,EAAE;YACJ,OAAO,EAAE,cAAc;YACvB,GAAG,EAAE,OAAO;YACZ,GAAG,CAAC,SAAS,IAAI;gBACf,EAAE,EAAE;oBACF,OAAO,EAAE,IAAA,YAAM,EAAC,YAAY,EAAE,UAAU,CAAC;oBACzC,OAAO,EAAE,IAAA,YAAM,EAAC,YAAY,EAAE,OAAO,CAAC;oBACtC,GAAG,EAAE,IAAA,YAAM,EAAC,QAAQ,EAAE,OAAO,CAAC;iBAC/B;aACF,CAAC;SACH;QACD,SAAS,EAAE,YAAY;QACvB,UAAU;QACV,KAAK,EAAE,QAAA,uBAAuB;QAC9B,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACtC,MAAM,EAAE;YACN,KAAK,EAAE,WAAW;YAClB,MAAM,EAAE,YAAY;SACrB;QACD,SAAS;KACV,CAAC;IAEF,OAAO,YAAY,CAAC,IAAA,cAAI,EAAC,OAAO,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,OAAO;IACd,MAAM,IAAI,GAAG,IAAA,mBAAS,GAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC3B,OAAO,EAAE,aAAa,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC1E,CAAC"}

package/dist/lib/pii-redaction.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Value-aware redaction of request data from every string barnacle writes out
+ * (logs, telemetry NDJSON/S3, error envelopes).
+ *
+ * Flow instructions, log lines and error messages carry request values as free
+ * text ("Fill in the Email field with 'x@y.com'"), so key-based redaction (pino
+ * `redact`) never sees them. Instead, each dispatch registers its request
+ * body's values here and every sink scrubs occurrences of them. How each field
+ * is matched comes from the plugin's {@link RedactionPolicy}; the engine itself
+ * knows no field names.
+ *
+ * The registry is process-global rather than request-scoped: pooled browser
+ * sessions and Stagehand callbacks log outside the request's async context,
+ * and scrubbing one run's values from another concurrent run's output is a
+ * harmless over-redaction.
+ */
+import { z } from "zod/v4";
+import type { RedactionPolicy, SensitiveVariables, TokenizedText } from "../types/pii-redaction";
+/**
+ * Runtime mirror of {@link RedactionPolicy} for plugins the type system cannot
+ * check (plain-JS modules, JSON manifests). Strict, because a mistyped field
+ * would silently leave values unprotected, and a string where an array belongs
+ * would be substring-matched by `includes`.
+ */
+export declare const REDACTION_POLICY_SCHEMA: z.ZodObject<{
+    persistKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    publicKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    skipKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    wordKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    digitKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    tokenizeKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+/**
+ * Records a plugin's redaction policy so sinks that only see a `siteId`
+ * (submission telemetry) can apply it. Called once per plugin at route
+ * registration.
+ */
+export declare function registerRedactionPolicy(siteId: string, policy: RedactionPolicy | undefined): void;
+/** The policy a plugin declared, or `undefined` (fail-closed defaults). */
+export declare function redactionPolicyFor(siteId: string): RedactionPolicy | undefined;
+/**
+ * Registers a request body so its values are scrubbed from all output until
+ * {@link releaseSensitiveValues} plus a grace period. The body is the one
+ * place the engine sees the caller's data; the plugin's policy says how each
+ * field should be matched, and unlisted fields are matched as literals.
+ */
+export declare function registerSensitiveValues(runId: string, payload: unknown, policy?: RedactionPolicy): void;
+/**
+ * Schedules a run's values for removal. The grace period keeps late output
+ * (teardown logs, deferred telemetry, pooled-session callbacks) scrubbed.
+ */
+export declare function releaseSensitiveValues(runId: string, graceMs?: number): void;
+/**
+ * Registers a value minted inside the engine (e.g. a throwaway account
+ * password) that never appears in the inbound payload but must never be
+ * written out either.
+ */
+export declare function registerSecretValue(value: string, ttlMs?: number): void;
+/**
+ * Replaces only the registered secrets (see {@link registerSecretValue}) in
+ * `text` with `<Secret>`. For prompts that must keep the applicant's ordinary
+ * values — an LLM judge deciding whether "Ann" landed in First Name needs
+ * "Ann" — but must never carry a credential.
+ */
+export declare function redactSecrets(text: string): string;
+/**
+ * Replaces every registered sensitive value in `text` with `<FieldName>`.
+ * Cheap no-op when nothing is registered, so it is safe on every log line.
+ */
+export declare function redactPii(text: string): string;
+/**
+ * Structural variant of {@link redactPii} for log/telemetry objects. Errors
+ * become plain `{ type, message, stack }` objects (the shape pino's err
+ * serializer emits) so their messages can be scrubbed too. Other class
+ * instances (Fastify's request/reply, Buffers, URLs) are returned untouched:
+ * their pino serializers read prototype getters a plain copy would drop.
+ */
+export declare function redactPiiDeep(value: unknown, depth?: number): unknown;
+/**
+ * Reduces a typed/selected value to its shape (`Aaaa`, `99/99/9999`) for
+ * diagnostics: format mismatches stay debuggable (and usable as rephrase
+ * evidence) without the value itself — including short answers like "Yes"
+ * that are too common to register for redaction.
+ */
+export declare function maskValueShape(text: string, maxLength?: number): string;
+/**
+ * Swaps registered request values (and engine-minted secrets) in a Stagehand
+ * instruction for `%Name%` tokens, returning the `variables` map Stagehand
+ * substitutes back only when it performs the action — so the values never
+ * reach the LLM prompt, Browserbase's instruction cache or the call telemetry.
+ * Each token maps to the exact text it replaced, so the typed value is
+ * byte-identical to the untokenized instruction's.
+ */
+export declare function tokenizeSensitiveValues(text: string): TokenizedText;
+/** Replaces `%Name%` tokens with their values (names matched case-insensitively — LLMs re-case them). */
+export declare function detokenize(text: string, variables: SensitiveVariables): string;
+/**
+ * Tokens left in `text` that `variables` cannot resolve — an LLM-invented
+ * `%Name%` would otherwise be typed into the form verbatim.
+ */
+export declare function unresolvedTokens(text: string, variables: SensitiveVariables): string[];
+/** Test-only: clears the registry between cases. */
+export declare function resetSensitiveValuesForTests(): void;
+//# sourceMappingURL=pii-redaction.d.ts.map

package/dist/lib/pii-redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii-redaction.d.ts","sourceRoot":"","sources":["../../src/lib/pii-redaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AA0ChG;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB;;;;;;;kBASzB,CAAC;AAIZ;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,SAAS,GAAG,IAAI,CAGjG;AAED,2EAA2E;AAC3E,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAE9E;AAmHD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,EAChB,MAAM,CAAC,EAAE,eAAe,GACvB,IAAI,CAUN;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,MAAiC,GACzC,IAAI,CAQN;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,GAAE,MAAgC,GAAG,IAAI,CAQhG;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAWlD;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQ9C;AAOD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,OAAO,CAqBhE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,SAAK,GAAG,MAAM,CAMnE;AAkDD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAiBnE;AAED,yGAAyG;AACzG,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,kBAAkB,GAAG,MAAM,CAO9E;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,kBAAkB,GAAG,MAAM,EAAE,CAKtF;AAED,oDAAoD;AACpD,wBAAgB,4BAA4B,IAAI,IAAI,CAInD"}

package/dist/lib/pii-redaction.js

@@ -0,0 +1,397 @@
+"use strict";
+/**
+ * Value-aware redaction of request data from every string barnacle writes out
+ * (logs, telemetry NDJSON/S3, error envelopes).
+ *
+ * Flow instructions, log lines and error messages carry request values as free
+ * text ("Fill in the Email field with 'x@y.com'"), so key-based redaction (pino
+ * `redact`) never sees them. Instead, each dispatch registers its request
+ * body's values here and every sink scrubs occurrences of them. How each field
+ * is matched comes from the plugin's {@link RedactionPolicy}; the engine itself
+ * knows no field names.
+ *
+ * The registry is process-global rather than request-scoped: pooled browser
+ * sessions and Stagehand callbacks log outside the request's async context,
+ * and scrubbing one run's values from another concurrent run's output is a
+ * harmless over-redaction.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REDACTION_POLICY_SCHEMA = void 0;
+exports.registerRedactionPolicy = registerRedactionPolicy;
+exports.redactionPolicyFor = redactionPolicyFor;
+exports.registerSensitiveValues = registerSensitiveValues;
+exports.releaseSensitiveValues = releaseSensitiveValues;
+exports.registerSecretValue = registerSecretValue;
+exports.redactSecrets = redactSecrets;
+exports.redactPii = redactPii;
+exports.redactPiiDeep = redactPiiDeep;
+exports.maskValueShape = maskValueShape;
+exports.tokenizeSensitiveValues = tokenizeSensitiveValues;
+exports.detokenize = detokenize;
+exports.unresolvedTokens = unresolvedTokens;
+exports.resetSensitiveValuesForTests = resetSensitiveValuesForTests;
+const min_1 = require("libphonenumber-js/min");
+const lru_cache_1 = require("lru-cache");
+const v4_1 = require("zod/v4");
+const MIN_WORD_LENGTH = 2;
+const MIN_LITERAL_LENGTH = 4;
+/** Registry key prefix for {@link registerSecretValue} entries. */
+const SECRET_KEY_PREFIX = "secret:";
+const MIN_DIGITS = 4;
+const DEFAULT_RELEASE_GRACE_MS = 10 * 60 * 1000;
+/** Upper bound on any registration — far beyond a run's task timeout, so a run that never releases (crash) still ages out. */
+const MAX_REGISTRATION_TTL_MS = 2 * 60 * 60 * 1000;
+/** Far above concurrent runs + their grace windows + minted secrets; only bounds memory. */
+const MAX_REGISTRY_ENTRIES = 10_000;
+const MAX_DEEP_REDACT_DEPTH = 6;
+let compiled = null;
+const registry = new lru_cache_1.LRUCache({
+    max: MAX_REGISTRY_ENTRIES,
+    ttlAutopurge: true,
+    dispose: () => {
+        compiled = null;
+    },
+});
+/**
+ * Runtime mirror of {@link RedactionPolicy} for plugins the type system cannot
+ * check (plain-JS modules, JSON manifests). Strict, because a mistyped field
+ * would silently leave values unprotected, and a string where an array belongs
+ * would be substring-matched by `includes`.
+ */
+exports.REDACTION_POLICY_SCHEMA = v4_1.z
+    .object({
+    persistKeys: v4_1.z.array(v4_1.z.string()).optional(),
+    publicKeys: v4_1.z.array(v4_1.z.string()).optional(),
+    skipKeys: v4_1.z.array(v4_1.z.string()).optional(),
+    wordKeys: v4_1.z.array(v4_1.z.string()).optional(),
+    digitKeys: v4_1.z.array(v4_1.z.string()).optional(),
+    tokenizeKeys: v4_1.z.array(v4_1.z.string()).optional(),
+})
+    .strict();
+const policies = new Map();
+/**
+ * Records a plugin's redaction policy so sinks that only see a `siteId`
+ * (submission telemetry) can apply it. Called once per plugin at route
+ * registration.
+ */
+function registerRedactionPolicy(siteId, policy) {
+    if (policy)
+        policies.set(siteId, policy);
+    else
+        policies.delete(siteId);
+}
+/** The policy a plugin declared, or `undefined` (fail-closed defaults). */
+function redactionPolicyFor(siteId) {
+    return policies.get(siteId);
+}
+function escapeRegExp(value) {
+    return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function wordMatcher(value, label) {
+    return {
+        pattern: new RegExp(`(?<![\\p{L}\\p{N}])${escapeRegExp(value)}(?![\\p{L}\\p{N}])`, "giu"),
+        label,
+        valueLength: value.length,
+    };
+}
+const DIGIT_SEPARATOR = "[\\s().\\-]*";
+function digitRun(digits) {
+    return digits.split("").join(DIGIT_SEPARATOR);
+}
+/**
+ * Matches a value by its digits however they are formatted. An international
+ * (`+…`) value also matches its national number with or without the country
+ * code, and its national format (e.g. a UK trunk `0`), since country codes
+ * vary in length and only a numbering-plan library can split them.
+ */
+function digitMatcher(value, label) {
+    const digits = value.replace(/\D/g, "");
+    if (digits.length < MIN_DIGITS)
+        return null;
+    const alternatives = new Set([digitRun(digits)]);
+    const phone = value.trim().startsWith("+") ? (0, min_1.parsePhoneNumberFromString)(value) : undefined;
+    if (phone) {
+        alternatives.add(`(?:\\+?${phone.countryCallingCode}${DIGIT_SEPARATOR})?(?:\\(0\\)${DIGIT_SEPARATOR})?${digitRun(phone.nationalNumber)}`);
+        alternatives.add(digitRun(phone.formatNational().replace(/\D/g, "")));
+    }
+    return {
+        // The optional leading "+(" is consumed so "(555) 123-4567" is replaced whole.
+        pattern: new RegExp(`(?<!\\d)\\+?\\(?(?:${[...alternatives].join("|")})(?!\\d)`, "g"),
+        label,
+        valueLength: value.length,
+    };
+}
+function literalMatcher(value, label) {
+    return { pattern: new RegExp(escapeRegExp(value), "g"), label, valueLength: value.length };
+}
+function baseMatcherFor(kind, value, label) {
+    if (kind === "digit")
+        return digitMatcher(value, label) ?? literalMatcher(value, label);
+    if (kind === "word")
+        return value.length >= MIN_WORD_LENGTH ? wordMatcher(value, label) : null;
+    return value.length >= MIN_LITERAL_LENGTH ? literalMatcher(value, label) : null;
+}
+function tokenScopeFor(kind, value, tokenize) {
+    if (!tokenize)
+        return "never";
+    return kind === "digit" || /[\d@\s]/.test(value) ? "anywhere" : "value-span";
+}
+function matcherFor(kind, value, label, tokenize) {
+    const base = baseMatcherFor(kind, value, label);
+    return base ? { ...base, tokenScope: tokenScopeFor(kind, value, tokenize) } : null;
+}
+function collectMatchers(value, kind, label, tokenize, out) {
+    if (typeof value === "string") {
+        const matcher = matcherFor(kind, value.trim(), label, tokenize);
+        if (matcher)
+            out.push(matcher);
+        return;
+    }
+    if (Array.isArray(value)) {
+        for (const item of value)
+            collectMatchers(item, kind, label, tokenize, out);
+        return;
+    }
+    if (value !== null && typeof value === "object" && !Buffer.isBuffer(value)) {
+        for (const nested of Object.values(value)) {
+            collectMatchers(nested, kind, label, tokenize, out);
+        }
+    }
+}
+function matchKindFor(key, policy) {
+    if (policy?.persistKeys?.includes(key) ||
+        policy?.publicKeys?.includes(key) ||
+        policy?.skipKeys?.includes(key)) {
+        return null;
+    }
+    if (policy?.digitKeys?.includes(key))
+        return "digit";
+    if (policy?.wordKeys?.includes(key))
+        return "word";
+    return "literal";
+}
+function activeMatchers() {
+    if (compiled)
+        return compiled;
+    // Longest literals first so "Mary Ann" is replaced before "Mary".
+    compiled = [...registry.values()].flat().sort((a, b) => b.valueLength - a.valueLength);
+    return compiled;
+}
+/**
+ * Registers a request body so its values are scrubbed from all output until
+ * {@link releaseSensitiveValues} plus a grace period. The body is the one
+ * place the engine sees the caller's data; the plugin's policy says how each
+ * field should be matched, and unlisted fields are matched as literals.
+ */
+function registerSensitiveValues(runId, payload, policy) {
+    if (payload === null || typeof payload !== "object")
+        return;
+    const matchers = [];
+    for (const [key, value] of Object.entries(payload)) {
+        const kind = matchKindFor(key, policy);
+        const tokenize = policy?.tokenizeKeys?.includes(key) ?? false;
+        if (kind)
+            collectMatchers(value, kind, key, tokenize, matchers);
+    }
+    registry.set(runId, matchers, { ttl: MAX_REGISTRATION_TTL_MS });
+    compiled = null;
+}
+/**
+ * Schedules a run's values for removal. The grace period keeps late output
+ * (teardown logs, deferred telemetry, pooled-session callbacks) scrubbed.
+ */
+function releaseSensitiveValues(runId, graceMs = DEFAULT_RELEASE_GRACE_MS) {
+    const matchers = registry.get(runId);
+    if (!matchers)
+        return;
+    if (graceMs <= 0) {
+        registry.delete(runId);
+        return;
+    }
+    registry.set(runId, matchers, { ttl: graceMs });
+}
+/**
+ * Registers a value minted inside the engine (e.g. a throwaway account
+ * password) that never appears in the inbound payload but must never be
+ * written out either.
+ */
+function registerSecretValue(value, ttlMs = MAX_REGISTRATION_TTL_MS) {
+    if (value.length < MIN_LITERAL_LENGTH)
+        return;
+    registry.set(`${SECRET_KEY_PREFIX}${value}`, [{ ...literalMatcher(value, "Secret"), tokenScope: "anywhere" }], { ttl: ttlMs });
+    compiled = null;
+}
+/**
+ * Replaces only the registered secrets (see {@link registerSecretValue}) in
+ * `text` with `<Secret>`. For prompts that must keep the applicant's ordinary
+ * values — an LLM judge deciding whether "Ann" landed in First Name needs
+ * "Ann" — but must never carry a credential.
+ */
+function redactSecrets(text) {
+    if (registry.size === 0 || text.length === 0)
+        return text;
+    let out = text;
+    for (const [key, matchers] of registry.entries()) {
+        if (!key.startsWith(SECRET_KEY_PREFIX))
+            continue;
+        for (const { pattern, label } of matchers) {
+            pattern.lastIndex = 0;
+            out = out.replace(pattern, `<${label}>`);
+        }
+    }
+    return out;
+}
+/**
+ * Replaces every registered sensitive value in `text` with `<FieldName>`.
+ * Cheap no-op when nothing is registered, so it is safe on every log line.
+ */
+function redactPii(text) {
+    if (registry.size === 0 || text.length === 0)
+        return text;
+    let out = text;
+    for (const { pattern, label } of activeMatchers()) {
+        pattern.lastIndex = 0;
+        out = out.replace(pattern, `<${label}>`);
+    }
+    return out;
+}
+function isPlainObject(value) {
+    const proto = Object.getPrototypeOf(value);
+    return proto === Object.prototype || proto === null;
+}
+/**
+ * Structural variant of {@link redactPii} for log/telemetry objects. Errors
+ * become plain `{ type, message, stack }` objects (the shape pino's err
+ * serializer emits) so their messages can be scrubbed too. Other class
+ * instances (Fastify's request/reply, Buffers, URLs) are returned untouched:
+ * their pino serializers read prototype getters a plain copy would drop.
+ */
+function redactPiiDeep(value, depth = 0) {
+    if (registry.size === 0)
+        return value;
+    if (typeof value === "string")
+        return redactPii(value);
+    if (depth >= MAX_DEEP_REDACT_DEPTH || value === null || typeof value !== "object")
+        return value;
+    if (value instanceof Error) {
+        return {
+            type: value.name,
+            message: redactPii(value.message),
+            stack: value.stack ? redactPii(value.stack) : undefined,
+            ...(value.cause === undefined ? {} : { cause: redactPiiDeep(value.cause, depth + 1) }),
+            ...redactPiiDeep({ ...value }, depth + 1),
+        };
+    }
+    if (Array.isArray(value))
+        return value.map((item) => redactPiiDeep(item, depth + 1));
+    if (!isPlainObject(value))
+        return value;
+    return Object.fromEntries(Object.entries(value).map(([key, nested]) => [
+        key,
+        redactPiiDeep(nested, depth + 1),
+    ]));
+}
+/**
+ * Reduces a typed/selected value to its shape (`Aaaa`, `99/99/9999`) for
+ * diagnostics: format mismatches stay debuggable (and usable as rephrase
+ * evidence) without the value itself — including short answers like "Yes"
+ * that are too common to register for redaction.
+ */
+function maskValueShape(text, maxLength = 40) {
+    return text
+        .slice(0, maxLength)
+        .replace(/\p{Lu}/gu, "A")
+        .replace(/\p{Ll}/gu, "a")
+        .replace(/\p{N}/gu, "9");
+}
+/**
+ * Value positions in an instruction: a quoted or bare value introduced by
+ * with/type/enter, e.g. "fill it with 'Ann'", "Fill in Last Name with Smith".
+ */
+const VALUE_SPAN = /\b(?:with|type|enter)\s+(?:'[^']*'|"[^"]*"|[^\s'",;.][^'",;]*?(?=\s*(?:$|[,;]|\.(?:\s|$)|\s(?:in|into|if|then|and|on)\b)))/giu;
+const TOKEN_REFERENCE = /%([A-Za-z][A-Za-z0-9_]*)%/g;
+/** `%E2%`-style percent-encoded bytes look like tokens but are URL text. */
+const PERCENT_ENCODED_BYTE = /^[0-9A-Fa-f]{2}$/;
+function valueSpans(text) {
+    return [...text.matchAll(VALUE_SPAN)].map((m) => [m.index, m.index + m[0].length]);
+}
+/** Non-overlapping value occurrences in `text`, longest registered value first. */
+function claimTokenRanges(text) {
+    const spans = valueSpans(text);
+    const claims = [];
+    for (const matcher of activeMatchers()) {
+        if (matcher.tokenScope === "never")
+            continue;
+        for (const m of text.matchAll(matcher.pattern)) {
+            const start = m.index;
+            const end = start + m[0].length;
+            const inSpan = spans.some(([s, e]) => start >= s && end <= e);
+            if (matcher.tokenScope === "value-span" && !inSpan)
+                continue;
+            if (claims.some((c) => start < c.end && end > c.start))
+                continue;
+            claims.push({ start, end, label: matcher.label });
+        }
+    }
+    return claims.sort((a, b) => a.start - b.start);
+}
+/** `Email`, then `Email_2`, `Email_3`… for further distinct texts under one label. */
+function nextVariableName(label, taken) {
+    const base = label.replace(/[^A-Za-z0-9_]/g, "") || "Value";
+    if (!(base in taken))
+        return base;
+    const siblings = Object.keys(taken).filter((n) => n === base || n.startsWith(`${base}_`));
+    return `${base}_${siblings.length + 1}`;
+}
+/**
+ * Swaps registered request values (and engine-minted secrets) in a Stagehand
+ * instruction for `%Name%` tokens, returning the `variables` map Stagehand
+ * substitutes back only when it performs the action — so the values never
+ * reach the LLM prompt, Browserbase's instruction cache or the call telemetry.
+ * Each token maps to the exact text it replaced, so the typed value is
+ * byte-identical to the untokenized instruction's.
+ */
+function tokenizeSensitiveValues(text) {
+    if (registry.size === 0 || text.length === 0)
+        return { text, variables: {} };
+    const claims = claimTokenRanges(text);
+    if (claims.length === 0)
+        return { text, variables: {} };
+    const variables = {};
+    const nameByText = new Map();
+    let out = "";
+    let cursor = 0;
+    for (const { start, end, label } of claims) {
+        const matched = text.slice(start, end);
+        const name = nameByText.get(matched) ?? nextVariableName(label, variables);
+        nameByText.set(matched, name);
+        variables[name] = matched;
+        out += `${text.slice(cursor, start)}%${name}%`;
+        cursor = end;
+    }
+    return { text: out + text.slice(cursor), variables };
+}
+/** Replaces `%Name%` tokens with their values (names matched case-insensitively — LLMs re-case them). */
+function detokenize(text, variables) {
+    if (Object.keys(variables).length === 0)
+        return text;
+    const byLowerName = new Map(Object.entries(variables).map(([k, v]) => [k.toLowerCase(), v]));
+    return text.replace(TOKEN_REFERENCE, (m, name) => byLowerName.get(name.toLowerCase()) ?? m);
+}
+/**
+ * Tokens left in `text` that `variables` cannot resolve — an LLM-invented
+ * `%Name%` would otherwise be typed into the form verbatim.
+ */
+function unresolvedTokens(text, variables) {
+    const known = new Set(Object.keys(variables).map((k) => k.toLowerCase()));
+    return [...text.matchAll(TOKEN_REFERENCE)]
+        .map((m) => m[1] ?? "")
+        .filter((name) => !PERCENT_ENCODED_BYTE.test(name) && !known.has(name.toLowerCase()));
+}
+/** Test-only: clears the registry between cases. */
+function resetSensitiveValuesForTests() {
+    registry.clear();
+    policies.clear();
+    compiled = null;
+}
+//# sourceMappingURL=pii-redaction.js.map

package/dist/lib/pii-redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii-redaction.js","sourceRoot":"","sources":["../../src/lib/pii-redaction.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;;;;;;;;;;;;;;AAEH,+CAAmE;AACnE,yCAAqC;AACrC,+BAA2B;AAI3B,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,mEAAmE;AACnE,MAAM,iBAAiB,GAAG,SAAS,CAAC;AACpC,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAChD,8HAA8H;AAC9H,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACnD,4FAA4F;AAC5F,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAoBhC,IAAI,QAAQ,GAA8B,IAAI,CAAC;AAE/C,MAAM,QAAQ,GAAG,IAAI,oBAAQ,CAA6B;IACxD,GAAG,EAAE,oBAAoB;IACzB,YAAY,EAAE,IAAI;IAClB,OAAO,EAAE,GAAG,EAAE;QACZ,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;CACF,CAAC,CAAC;AAEH;;;;;GAKG;AACU,QAAA,uBAAuB,GAAG,MAAC;KACrC,MAAM,CAAC;IACN,WAAW,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC3C,UAAU,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,QAAQ,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,QAAQ,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzC,YAAY,EAAE,MAAC,CAAC,KAAK,CAAC,MAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;AAEpD;;;;GAIG;AACH,iCAAwC,MAAc,EAAE,MAAmC;IACzF,IAAI,MAAM;QAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;;QACpC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,2EAA2E;AAC3E,4BAAmC,MAAc;IAC/C,OAAO,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,KAAa;IAC/C,OAAO;QACL,OAAO,EAAE,IAAI,MAAM,CAAC,sBAAsB,YAAY,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC;QACzF,KAAK;QACL,WAAW,EAAE,KAAK,CAAC,MAAM;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAAG,cAAc,CAAC;AAEvC,SAAS,QAAQ,CAAC,MAAc;IAC9B,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa;IAChD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,MAAM,GAAG,UAAU;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,gCAA0B,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,IAAI,KAAK,EAAE,CAAC;QACV,YAAY,CAAC,GAAG,CACd,UAAU,KAAK,CAAC,kBAAkB,GAAG,eAAe,eAAe,eAAe,KAAK,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CACxH,CAAC;QACF,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,OAAO;QACL,+EAA+E;QAC/E,OAAO,EAAE,IAAI,MAAM,CAAC,sBAAsB,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC;QACrF,KAAK;QACL,WAAW,EAAE,KAAK,CAAC,MAAM;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,KAAa;IAClD,OAAO,EAAE,OAAO,EAAE,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AAC7F,CAAC;AAID,SAAS,cAAc,CAAC,IAAe,EAAE,KAAa,EAAE,KAAa;IACnE,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACxF,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/F,OAAO,KAAK,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAClF,CAAC;AAED,SAAS,aAAa,CAAC,IAAe,EAAE,KAAa,EAAE,QAAiB;IACtE,IAAI,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC;IAC9B,OAAO,IAAI,KAAK,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC;AAC/E,CAAC;AAED,SAAS,UAAU,CACjB,IAAe,EACf,KAAa,EACb,KAAa,EACb,QAAiB;IAEjB,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACrF,CAAC;AAED,SAAS,eAAe,CACtB,KAAc,EACd,IAAe,EACf,KAAa,EACb,QAAiB,EACjB,GAAuB;IAEvB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChE,IAAI,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC5E,OAAO;IACT,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,EAAE,CAAC;YACrE,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,MAAmC;IACpE,IACE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC;QAClC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,GAAG,CAAC;QACjC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,EAC/B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACrD,IAAI,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACnD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,kEAAkE;IAClE,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;IACvF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,iCACE,KAAa,EACb,OAAgB,EAChB,MAAwB;IAExB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO;IAC5D,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAkC,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC;QAC9D,IAAI,IAAI;YAAE,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClE,CAAC;IACD,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,uBAAuB,EAAE,CAAC,CAAC;IAChE,QAAQ,GAAG,IAAI,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,gCACE,KAAa,EACb,OAAO,GAAW,wBAAwB;IAE1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACjB,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO;IACT,CAAC;IACD,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,6BAAoC,KAAa,EAAE,KAAK,GAAW,uBAAuB;IACxF,IAAI,KAAK,CAAC,MAAM,GAAG,kBAAkB;QAAE,OAAO;IAC9C,QAAQ,CAAC,GAAG,CACV,GAAG,iBAAiB,GAAG,KAAK,EAAE,EAC9B,CAAC,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,EAChE,EAAE,GAAG,EAAE,KAAK,EAAE,CACf,CAAC;IACF,QAAQ,GAAG,IAAI,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,uBAA8B,IAAY;IACxC,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC;YAAE,SAAS;QACjD,KAAK,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC1C,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACtB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,KAAK,GAAG,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,mBAA0B,IAAY;IACpC,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,cAAc,EAAE,EAAE,CAAC;QAClD,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,KAAK,GAAG,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,uBAA8B,KAAc,EAAE,KAAK,GAAG,CAAC;IACrD,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,KAAK,IAAI,qBAAqB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChG,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;YACjC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;YACvD,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;YACtF,GAAI,aAAa,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,KAAK,GAAG,CAAC,CAA6B;SACvE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACrF,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;QACtE,GAAG;QACH,aAAa,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC;KACjC,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,wBAA+B,IAAY,EAAE,SAAS,GAAG,EAAE;IACzD,OAAO,IAAI;SACR,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;SACnB,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,GACd,+HAA+H,CAAC;AAElI,MAAM,eAAe,GAAG,4BAA4B,CAAC;AAErD,4EAA4E;AAC5E,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AAQhD,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,mFAAmF;AACnF,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,EAAE,CAAC;QACvC,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO;YAAE,SAAS;QAC7C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;YACtB,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAChC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;YAC9D,IAAI,OAAO,CAAC,UAAU,KAAK,YAAY,IAAI,CAAC,MAAM;gBAAE,SAAS;YAC7D,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC;gBAAE,SAAS;YACjE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;AAClD,CAAC;AAED,sFAAsF;AACtF,SAAS,gBAAgB,CAAC,KAAa,EAAE,KAAyB;IAChE,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC;IAC5D,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;IAC1F,OAAO,GAAG,IAAI,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;;;GAOG;AACH,iCAAwC,IAAY;IAClD,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC7E,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACxD,MAAM,SAAS,GAAuB,EAAE,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC7C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,MAAM,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC3E,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9B,SAAS,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;QAC1B,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,IAAI,GAAG,CAAC;QAC/C,MAAM,GAAG,GAAG,CAAC;IACf,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;AACvD,CAAC;AAED,yGAAyG;AACzG,oBAA2B,IAAY,EAAE,SAA6B;IACpE,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7F,OAAO,IAAI,CAAC,OAAO,CACjB,eAAe,EACf,CAAC,CAAC,EAAE,IAAY,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAC9D,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,0BAAiC,IAAY,EAAE,SAA6B;IAC1E,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;SACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACtB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,oDAAoD;AACpD;IACE,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjB,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjB,QAAQ,GAAG,IAAI,CAAC;AAClB,CAAC"}

package/dist/lib/random.d.ts

@@ -24,7 +24,9 @@ export declare function pickRandom<T>(arr: readonly T[]): T;
  * password field but has no caller-supplied secret to splice — recon-captured
  * credentials must never leak into a generated flow, and a fixed literal would
  * be a shared secret across every run. `node:crypto`'s CSPRNG (not `Math.random`,
- * which backs the jitter helpers above) keeps the value unguessable.
+ * which backs the jitter helpers above) keeps the value unguessable. The value
+ * is registered for redaction because flows embed it in step instructions that
+ * reach logs and telemetry.
  */
 export declare function generateThrowawayPassword(): string;
 //# sourceMappingURL=random.d.ts.map

package/dist/lib/random.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"random.d.ts","sourceRoot":"","sources":["../../src/lib/random.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAGnE;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAGlD;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,CAElD"}
+{"version":3,"file":"random.d.ts","sourceRoot":"","sources":["../../src/lib/random.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAGnE;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAGlD;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,CAIlD"}