@excitedjs/dreamux-utils 0.5.2-beta.242 → 0.6.0-beta.243

package/dist/index.d.ts

@@ -8,4 +8,5 @@ export * from './activity-scan.js';
 export * from './unsupported-feature.js';
 export * from './runtime-state-fence.js';
 export * from './json-invoke.js';
+export * from './redaction.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC"}

package/dist/index.js

@@ -8,4 +8,5 @@ export * from './activity-scan.js';
 export * from './unsupported-feature.js';
 export * from './runtime-state-fence.js';
 export * from './json-invoke.js';
+export * from './redaction.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC"}

package/dist/json-invoke.d.ts

@@ -1,9 +1,10 @@
 /**
  * The failure boundary for a one-request/one-result JSON invocation.
  *
- * A `JsonInvokeResult` needs a producing side, and this is all of it: a marker
- * a deep implementation can throw when it knows what the caller did wrong, and
- * a runner that turns exactly that marker into the settled `ok: false` answer.
+ * A one-request/one-result call needs a producing side, and this is all of it:
+ * a marker a deep implementation can throw when it knows what the caller did
+ * wrong, and a runner that turns exactly that marker into the settled
+ * `ok: false` answer.
  *
  * The marker exists so a refusal does not have to be plumbed by hand out of an
  * argument parser, a policy check, or whatever else is five frames down. It
@@ -15,9 +16,24 @@
  * result, and turning it into one here would be the exact mistake this boundary
  * exists to prevent.
  */
-import type { JsonInvokeResult } from '@excitedjs/dreamux-types';
+/**
+ * The settled shape, declared here rather than imported.
+ *
+ * This package knows no Dreamux contracts: `@excitedjs/dreamux-types` is the
+ * type set an *external provider* compiles against, and a utility every layer
+ * calls must not reach into it. The shape is structural and identical to that
+ * package's `JsonInvokeResult`, so a caller that names the contract assigns one
+ * of these to it without a cast.
+ */
+export type SettledInvoke<TValue> = {
+    readonly ok: true;
+    readonly value: TValue;
+} | {
+    readonly ok: false;
+    readonly message: string;
+};
 export declare class PublicInvokeFailure extends Error {
     constructor(message: string);
 }
-export declare function settleJsonInvoke<TValue>(body: () => Promise<TValue>): Promise<JsonInvokeResult<TValue>>;
+export declare function settleJsonInvoke<TValue>(body: () => Promise<TValue>): Promise<SettledInvoke<TValue>>;
 //# sourceMappingURL=json-invoke.d.ts.map

package/dist/json-invoke.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"json-invoke.d.ts","sourceRoot":"","sources":["../src/json-invoke.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAsB,gBAAgB,CAAC,MAAM,EAC3C,IAAI,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,GAC1B,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CASnC"}
+{"version":3,"file":"json-invoke.d.ts","sourceRoot":"","sources":["../src/json-invoke.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,CAAC,MAAM,IAC5B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAED,wBAAsB,gBAAgB,CAAC,MAAM,EAC3C,IAAI,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,GAC1B,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAShC"}

package/dist/json-invoke.js.map

@@ -1 +1 @@
-{"version":3,"file":"json-invoke.js","sourceRoot":"","sources":["../src/json-invoke.ts"],"names":[],"mappings":"AAmBA,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAA2B;IAE3B,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/C,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"json-invoke.js","sourceRoot":"","sources":["../src/json-invoke.ts"],"names":[],"mappings":"AA+BA,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAA2B;IAE3B,IAAI,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/C,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/redaction.d.ts

@@ -0,0 +1,90 @@
+/**
+ * What a conversation, a log line, and a printed config must not publish
+ * verbatim. One capability with two ways in, because a caller has one of two
+ * things: text, or structure.
+ *
+ * `redactText` is for text — a command line, an assistant message, a serialized
+ * payload — and finds secrets by shape. `isSecretKeyName` is for structure,
+ * where a field's *name* already says the value is a secret and no shape
+ * matching is needed or wanted. They share one list of secret key names, which
+ * is why this module exists: that list used to be written out three times, and
+ * the three copies had drifted.
+ */
+/**
+ * A value shaped like JSON, declared here rather than imported.
+ *
+ * JSON is not a Dreamux concept, and this package deliberately knows no Dreamux
+ * contracts: `@excitedjs/dreamux-types` is the type set an *external provider*
+ * compiles against, so a utility every layer calls must not reach into it — not
+ * even for a type. The shape is structural, so a caller holding that package's
+ * `JsonValue` passes one of these without a cast.
+ */
+export type JsonValue = null | boolean | number | string | readonly JsonValue[] | {
+    readonly [key: string]: JsonValue;
+};
+/**
+ * Redaction never truncates. How much of a payload a surface can show is that
+ * surface's own limit, applied where it sends. Cutting here would hand every
+ * surface an already-damaged value — a JSON result that no longer parses —
+ * with no way to get it back.
+ */
+export interface RedactedText {
+    value: string;
+    redacted: boolean;
+}
+/**
+ * Whether a field's *name* says its value is a secret.
+ *
+ * Structure needs no shape matching: a caller holding `{ api_key: "..." }`
+ * knows the value is a secret whatever it looks like, and a low-entropy or
+ * oddly-punctuated one would slip past every pattern. The substring test is
+ * deliberate, so `feishu_app_secret` and `refreshToken` both count.
+ */
+export declare function isSecretKeyName(key: string): boolean;
+/**
+ * Replace, in place, every value whose key names a secret — at any depth.
+ *
+ * The caller owns a parsed, mutable structure it is about to display, and this
+ * is the one thing it must not show. Values are destroyed rather than masked
+ * by shape, because the key already settled the question.
+ */
+export declare function redactSecretKeyValues(value: unknown): void;
+/**
+ * Rewrite what displayed text must not publish verbatim.
+ *
+ * Two different jobs share this function. Secrets are *destroyed* — a token has
+ * no legible form worth keeping. Paths are only *renamed*: a reader still needs
+ * to know which file was touched, so the workspace becomes `.` and this host's
+ * home becomes `~`, exactly the way the operator's own shell prints them. Order
+ * matters: the workspace usually sits under the home, so relativizing it first
+ * keeps the shorter, more useful form.
+ *
+ * `homePaths` is explicit so this stays pure and never depends on
+ * process-global resolution state.
+ */
+export declare function redactText(value: string, cwd: string, homePaths: readonly string[]): RedactedText;
+/**
+ * Redact a JSON value by walking it, not by reading its serialization.
+ *
+ * Text is the wrong level for a payload that has structure. Serializing first
+ * hides every string inside escapes — `{"client_secret":"x"}` written into a
+ * field becomes `{\"client_secret\":\"x\"}`, where the key no longer sits
+ * beside its separator and no pattern tuned for text can see it, at any nesting
+ * depth. Walking removes the problem instead of chasing it: each level of
+ * structure is peeled by the caller that parsed it, so every string this
+ * reaches is ordinary text, which is the one thing `redactText` is good at.
+ *
+ * Two rules, and a key outranks a shape. A field whose *name* says secret has
+ * its value destroyed whatever it looks like, which is what catches the
+ * low-entropy and oddly-punctuated values no pattern would. Every other string
+ * goes through `redactText`. Numbers and booleans carry neither a secret worth
+ * masking nor a path worth renaming, so they travel as they are.
+ *
+ * The result is a new value; the input is not touched. Because the structure
+ * survives, a caller that serializes afterwards always gets valid JSON.
+ */
+export declare function redactJson(value: JsonValue | null, cwd: string, homePaths: readonly string[]): {
+    value: JsonValue | null;
+    redacted: boolean;
+};
+//# sourceMappingURL=redaction.d.ts.map

package/dist/redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AAEH;;;;;;;;GAQG;AACH,MAAM,MAAM,SAAS,GACjB,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,SAAS,SAAS,EAAE,GACpB;IAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAsE1C;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE;AAElE;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAa1D;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,UAAU,CACxB,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,YAAY,CAmBd;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,UAAU,CACxB,KAAK,EAAE,SAAS,GAAG,IAAI,EACvB,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B;IAAE,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,CA0BhD"}

package/dist/redaction.js

@@ -0,0 +1,231 @@
+import { isPlainObject } from './config-validate.js';
+/**
+ * The key names that mean "the value beside me is a secret". Written once and
+ * compiled into both the inline text pattern and the bare-name test, so the
+ * names a log line hides and the names a tool argument hides cannot drift
+ * apart again.
+ */
+const SECRET_KEY_NAMES = [
+    'secret',
+    'password',
+    'passwd',
+    'token',
+    'authorization',
+    'cookie',
+    'credential',
+    'api[_-]?key',
+    'private[_-]?key',
+    'client[_-]?secret',
+].join('|');
+const BACKTICK = '`';
+/**
+ * `key: value` / `key=value` pairs whose key names a secret. The value is one
+ * quoted string (a JSON string with its escapes, or a shell-style single- or
+ * back-quoted one) or one bare word. A bare word stops at whitespace, a
+ * separator, a quote, or a closing bracket, so the shape *around* the secret
+ * survives: a `token: xyz` phrase inside a quoted string does not swallow the
+ * quote and bracket that close it.
+ *
+ * This reads *text*, so what it sees is one level of quoting. A caller holding
+ * a structure walks it instead and hands each string leaf here on its own —
+ * that is what `redactJson` is for, and it is why this pattern does not try to
+ * understand a JSON string nested inside another. A regex cannot count nesting
+ * depth; the walk does not have to.
+ */
+const INLINE_SECRET_RE = new RegExp(String.raw `(["']?\b(?:` +
+    SECRET_KEY_NAMES +
+    String.raw `)\b["']?)(\s*[:=]\s*)(` +
+    String.raw `"(?:[^"\\]|\\.)*"` + '|' +
+    String.raw `'[^']*'` + '|' +
+    BACKTICK + `[^${BACKTICK}]*` + BACKTICK + '|' +
+    String.raw `[^\s,;"'` + BACKTICK + String.raw `)\]}]+)`, 'giu');
+const SECRET_KEY_NAME_RE = new RegExp(`(?:${SECRET_KEY_NAMES})`, 'iu');
+const BEARER_RE = /\bBearer\s+[A-Za-z0-9._~+/-]+=*/giu;
+const PRIVATE_KEY_RE = /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z0-9 ]*PRIVATE KEY-----/giu;
+const JWT_RE = /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/gu;
+const COMMON_ACCESS_KEY_RE = /\b(?:AKIA|ASIA|AKLT)[A-Z0-9]{12,}\b/gu;
+/**
+ * What may sit inside a path without ending it.
+ *
+ * A prefix only counts as a path when the characters around it agree that it is
+ * one: `~/work` is this operator's home, `/home/alicexyz` is somebody else's
+ * directory that merely starts with the same letters, and `not/home/alice` is a
+ * fragment of a longer path that was never rooted here. Letters, digits, and
+ * the separators/punctuation that appear inside real path segments continue a
+ * token; anything else — whitespace, a quote, a colon, a comma — ends it.
+ * Two narrower exceptions are handled at a match: a period closes prose only
+ * when what follows is already a boundary, and a preceding slash starts a path
+ * only when it completes a URL scheme's `://`.
+ */
+const PATH_TOKEN_CHARACTER_RE = /[\p{L}\p{N}_.~\\/-]/u;
+/**
+ * Whether a field's *name* says its value is a secret.
+ *
+ * Structure needs no shape matching: a caller holding `{ api_key: "..." }`
+ * knows the value is a secret whatever it looks like, and a low-entropy or
+ * oddly-punctuated one would slip past every pattern. The substring test is
+ * deliberate, so `feishu_app_secret` and `refreshToken` both count.
+ */
+export function isSecretKeyName(key) {
+    return SECRET_KEY_NAME_RE.test(key);
+}
+/**
+ * Replace, in place, every value whose key names a secret — at any depth.
+ *
+ * The caller owns a parsed, mutable structure it is about to display, and this
+ * is the one thing it must not show. Values are destroyed rather than masked
+ * by shape, because the key already settled the question.
+ */
+export function redactSecretKeyValues(value) {
+    if (Array.isArray(value)) {
+        for (const item of value)
+            redactSecretKeyValues(item);
+        return;
+    }
+    if (!isPlainObject(value))
+        return;
+    for (const [key, child] of Object.entries(value)) {
+        if (isSecretKeyName(key)) {
+            value[key] = '<redacted>';
+            continue;
+        }
+        redactSecretKeyValues(child);
+    }
+}
+/**
+ * Rewrite what displayed text must not publish verbatim.
+ *
+ * Two different jobs share this function. Secrets are *destroyed* — a token has
+ * no legible form worth keeping. Paths are only *renamed*: a reader still needs
+ * to know which file was touched, so the workspace becomes `.` and this host's
+ * home becomes `~`, exactly the way the operator's own shell prints them. Order
+ * matters: the workspace usually sits under the home, so relativizing it first
+ * keeps the shorter, more useful form.
+ *
+ * `homePaths` is explicit so this stays pure and never depends on
+ * process-global resolution state.
+ */
+export function redactText(value, cwd, homePaths) {
+    let redacted = replacePathPrefix(value, cwd, '.', '', true);
+    redacted = redacted.replace(PRIVATE_KEY_RE, '<redacted-private-key>');
+    for (const homePath of homePaths) {
+        redacted = replacePathPrefix(redacted, homePath, '~', '~', false);
+    }
+    redacted = redacted.replace(BEARER_RE, 'Bearer <redacted>');
+    redacted = redacted.replace(JWT_RE, '<redacted-jwt>');
+    redacted = redacted.replace(COMMON_ACCESS_KEY_RE, '<redacted-access-key>');
+    redacted = redacted.replace(INLINE_SECRET_RE, (_match, key, separator, secret) => {
+        // A quoted secret stays a quoted (now empty of meaning) string, so the
+        // text around it keeps whatever grammar it had — JSON included.
+        const quote = /^["'`]/u.test(secret) ? secret[0] : '';
+        return `${key}${separator}${quote}<redacted>${quote}`;
+    });
+    return { value: redacted, redacted: redacted !== value };
+}
+/**
+ * Redact a JSON value by walking it, not by reading its serialization.
+ *
+ * Text is the wrong level for a payload that has structure. Serializing first
+ * hides every string inside escapes — `{"client_secret":"x"}` written into a
+ * field becomes `{\"client_secret\":\"x\"}`, where the key no longer sits
+ * beside its separator and no pattern tuned for text can see it, at any nesting
+ * depth. Walking removes the problem instead of chasing it: each level of
+ * structure is peeled by the caller that parsed it, so every string this
+ * reaches is ordinary text, which is the one thing `redactText` is good at.
+ *
+ * Two rules, and a key outranks a shape. A field whose *name* says secret has
+ * its value destroyed whatever it looks like, which is what catches the
+ * low-entropy and oddly-punctuated values no pattern would. Every other string
+ * goes through `redactText`. Numbers and booleans carry neither a secret worth
+ * masking nor a path worth renaming, so they travel as they are.
+ *
+ * The result is a new value; the input is not touched. Because the structure
+ * survives, a caller that serializes afterwards always gets valid JSON.
+ */
+export function redactJson(value, cwd, homePaths) {
+    let redacted = false;
+    const walk = (node) => {
+        if (typeof node === 'string') {
+            const result = redactText(node, cwd, homePaths);
+            redacted ||= result.redacted;
+            return result.value;
+        }
+        if (Array.isArray(node))
+            return node.map(walk);
+        if (node === null || typeof node !== 'object')
+            return node;
+        // Built with `Object.fromEntries` because it creates own properties. A
+        // plain `out[key] = ...` would not: a payload carrying its own `__proto__`
+        // member — ordinary data, which is exactly what `JSON.parse` builds it as —
+        // would reach the prototype setter instead and disappear from the result.
+        const entries = Object.entries(node).map(([key, child]) => {
+            if (isSecretKeyName(key)) {
+                redacted = true;
+                return [key, '<redacted>'];
+            }
+            return [key, walk(child)];
+        });
+        return Object.fromEntries(entries);
+    };
+    return value === null
+        ? { value: null, redacted: false }
+        : { value: walk(value), redacted };
+}
+/**
+ * Replace every occurrence of `rawPrefix` that is actually the head of a path.
+ *
+ * Scanning for a known prefix is what makes this honest where a regex is not: a
+ * pattern like `/home/<name>/...` matches any string of that *shape*, including
+ * a directory on some other machine quoted in a log, and blanking those costs
+ * legibility for no privacy gain. Only the prefixes this host really uses are
+ * offered here, and each hit must still be bounded on both sides — preceded by
+ * a non-path character and followed by a separator or the end of a token.
+ *
+ * A hit with a path continuing after it (`<prefix>/rest`) takes
+ * `nestedReplacement`, and `stripNestedSeparator` drops the separator with it so
+ * a workspace `<cwd>/rest` turns into `rest`. A hit that ends there takes
+ * `exactReplacement`, so a bare workspace becomes `.`.
+ */
+function replacePathPrefix(value, rawPrefix, exactReplacement, nestedReplacement, stripNestedSeparator) {
+    const prefix = rawPrefix.replace(/[\\/]+$/u, '');
+    if (prefix === '')
+        return value;
+    let cursor = 0;
+    let searchFrom = 0;
+    let result = '';
+    while (searchFrom < value.length) {
+        const matchAt = value.indexOf(prefix, searchFrom);
+        if (matchAt < 0)
+            break;
+        const suffixAt = matchAt + prefix.length;
+        const next = value[suffixAt];
+        const nested = next === '/' || next === '\\';
+        const ends = isPathPrefixEnd(value, suffixAt);
+        if (isPathPrefixBoundary(value, matchAt) && (nested || ends)) {
+            result += value.slice(cursor, matchAt);
+            result += nested ? nestedReplacement : exactReplacement;
+            cursor = suffixAt + (nested && stripNestedSeparator ? 1 : 0);
+            searchFrom = cursor;
+            continue;
+        }
+        searchFrom = suffixAt;
+    }
+    return cursor === 0 ? value : result + value.slice(cursor);
+}
+function isPathPrefixBoundary(value, matchAt) {
+    if (matchAt === 0 || isPathTokenBoundary(value[matchAt - 1]))
+        return true;
+    return matchAt >= 3 && value.slice(matchAt - 3, matchAt) === '://';
+}
+function isPathPrefixEnd(value, suffixAt) {
+    const next = value[suffixAt];
+    if (next === undefined)
+        return true;
+    return next === '.'
+        ? isPathTokenBoundary(value[suffixAt + 1])
+        : isPathTokenBoundary(next);
+}
+function isPathTokenBoundary(character) {
+    return character === undefined || !PATH_TOKEN_CHARACTER_RE.test(character);
+}
+//# sourceMappingURL=redaction.js.map

package/dist/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAgCrD;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG;IACvB,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,OAAO;IACP,eAAe;IACf,QAAQ;IACR,YAAY;IACZ,aAAa;IACb,iBAAiB;IACjB,mBAAmB;CACpB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,MAAM,QAAQ,GAAG,GAAG,CAAC;AAErB;;;;;;;;;;;;;GAaG;AACH,MAAM,gBAAgB,GAAG,IAAI,MAAM,CACjC,MAAM,CAAC,GAAG,CAAA,aAAa;IACrB,gBAAgB;IAChB,MAAM,CAAC,GAAG,CAAA,wBAAwB;IAClC,MAAM,CAAC,GAAG,CAAA,mBAAmB,GAAG,GAAG;IACnC,MAAM,CAAC,GAAG,CAAA,SAAS,GAAG,GAAG;IACzB,QAAQ,GAAG,KAAK,QAAQ,IAAI,GAAG,QAAQ,GAAG,GAAG;IAC7C,MAAM,CAAC,GAAG,CAAA,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAA,SAAS,EACvD,KAAK,CACN,CAAC;AAEF,MAAM,kBAAkB,GAAG,IAAI,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,IAAI,CAAC,CAAC;AAEvE,MAAM,SAAS,GAAG,oCAAoC,CAAC;AACvD,MAAM,cAAc,GAAG,qFAAqF,CAAC;AAC7G,MAAM,MAAM,GAAG,kEAAkE,CAAC;AAClF,MAAM,oBAAoB,GAAG,uCAAuC,CAAC;AAErE;;;;;;;;;;;;GAYG;AACH,MAAM,uBAAuB,GAAG,sBAAsB,CAAC;AAUvD;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,UAAU,CACxB,KAAa,EACb,GAAW,EACX,SAA4B;IAE5B,IAAI,QAAQ,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;IAC5D,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,wBAAwB,CAAC,CAAC;IACtE,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;IACD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC5D,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACtD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,CAAC;IAC3E,QAAQ,GAAG,QAAQ,CAAC,OAAO,CACzB,gBAAgB,EAChB,CAAC,MAAM,EAAE,GAAW,EAAE,SAAiB,EAAE,MAAc,EAAE,EAAE;QACzD,uEAAuE;QACvE,gEAAgE;QAChE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,OAAO,GAAG,GAAG,GAAG,SAAS,GAAG,KAAK,aAAa,KAAK,EAAE,CAAC;IACxD,CAAC,CACF,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,KAAK,KAAK,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,UAAU,CACxB,KAAuB,EACvB,GAAW,EACX,SAA4B;IAE5B,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,IAAI,GAAG,CAAC,IAAe,EAAa,EAAE;QAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;YAChD,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAC;YAC7B,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3D,uEAAuE;QACvE,2EAA2E;QAC3E,4EAA4E;QAC5E,0EAA0E;QAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAuB,EAAE;YAC7E,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,QAAQ,GAAG,IAAI,CAAC;gBAChB,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAC7B,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC,CAAC;IACF,OAAO,KAAK,KAAK,IAAI;QACnB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;QAClC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAS,iBAAiB,CACxB,KAAa,EACb,SAAiB,EACjB,gBAAwB,EACxB,iBAAyB,EACzB,oBAA6B;IAE7B,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IAEhC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,OAAO,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAClD,IAAI,OAAO,GAAG,CAAC;YAAE,MAAM;QAEvB,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC;QAC7C,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACvC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,gBAAgB,CAAC;YACxD,MAAM,GAAG,QAAQ,GAAG,CAAC,MAAM,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7D,UAAU,GAAG,MAAM,CAAC;YACpB,SAAS;QACX,CAAC;QACD,UAAU,GAAG,QAAQ,CAAC;IACxB,CAAC;IACD,OAAO,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAE,OAAe;IAC1D,IAAI,OAAO,KAAK,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,OAAO,OAAO,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,EAAE,OAAO,CAAC,KAAK,KAAK,CAAC;AACrE,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,QAAgB;IACtD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,IAAI,KAAK,GAAG;QACjB,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,mBAAmB,CAAC,SAA6B;IACxD,OAAO,SAAS,KAAK,SAAS,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAC7E,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@excitedjs/dreamux-utils",
-  "version": "0.5.2-beta.242",
-  "description": "Pure shared utilities for Dreamux providers and host: neutral config-validation primitives, OS/filesystem helpers, completion-body resolution, and inbound-turn render helpers. Depends on @excitedjs/dreamux-types only, never on @excitedjs/dreamux core (issue excitedjs/dreamux#209).",
+  "version": "0.6.0-beta.243",
+  "description": "Pure shared utilities for Dreamux providers and host: neutral config-validation primitives, OS/filesystem helpers, completion-body resolution, and inbound-turn render helpers. Depends on nothing: not on @excitedjs/dreamux core, and not on @excitedjs/dreamux-types, which is the type set external providers compile against.",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -26,9 +26,6 @@
     "README.md",
     "LICENSE"
   ],
-  "dependencies": {
-    "@excitedjs/dreamux-types": "0.11.0-beta.242"
-  },
   "devDependencies": {
     "@types/node": "^22.10.0",
     "eslint": "^9.39.0",