@hoilab/ada-cli 0.84.22 → 0.85.1

package/dist/core/secretos/index.js

@@ -0,0 +1,385 @@
+import * as crypto from "node:crypto";
+import * as fs from "node:fs";
+import * as os from "node:os";
+import * as path from "node:path";
+import { parse as parseYaml } from "yaml";
+import { logger } from "../utils/logger.js";
+import { SecretObfuscator } from "./obfuscator.js";
+import { sanitizeSecretFriendlyName, secretEntriesNeedPlaceholderKey } from "./placeholder.js";
+import { compileSecretRegex } from "./regex.js";
+import { regexHasUnresolvableShortMatchFallback } from "./replacement.js";
+/**
+ * Built-in credential-shaped tokens (GitHub/GitLab/OpenAI/Anthropic-style API
+ * keys), equivalente a `SENSITIVE_TOKEN_RE` de pi-ai en omp. Sin entropy-gate:
+ * un falso positivo solo sobre-ofusca y el round-trip es lossless.
+ */
+export const SENSITIVE_TOKEN_RE = /(?<![a-zA-Z0-9_*-])(gh[opusr]_[a-zA-Z0-9_*]{36,}|github_pat_[a-zA-Z0-9_*]{36,}|glpat-[a-zA-Z0-9_*-]{20,}|sk-proj-[a-zA-Z0-9_*-]{36,}|sk-ant-[a-zA-Z0-9_*-]{36,}|sk-[a-zA-Z0-9_*-]{48,})(?![a-zA-Z0-9_*-])/gi;
+/** $XDG_STATE_HOME/ada/secret-placeholder.key (fallback ~/.ada/agent/secret-placeholder.key). */
+export function getSecretPlaceholderKeyPath() {
+    const xdgState = process.env.XDG_STATE_HOME;
+    if (xdgState && path.isAbsolute(xdgState))
+        return path.join(xdgState, "ada", "secret-placeholder.key");
+    return path.join(os.homedir(), ".ada", "agent", "secret-placeholder.key");
+}
+function isEnoent(err) {
+    return typeof err === "object" && err !== null && "code" in err && err.code === "ENOENT";
+}
+/** Código errno de un error de fs sin fabricar una forma no comprobada. */
+function errnoCode(err) {
+    if (typeof err === "object" && err !== null && "code" in err) {
+        const code = err.code;
+        if (typeof code === "string")
+            return code;
+    }
+    return undefined;
+}
+const PLACEHOLDER_KEY_RE = /^[A-Za-z0-9_-]{43}$/;
+const cachedPlaceholderKeys = new Map();
+/**
+ * Per-install secret key for the placeholder digest. Persisted under XDG state
+ * and never sent to a provider, so model-visible placeholders cannot be reversed
+ * by dictionary-hashing candidate secrets. Stable across sessions so persisted
+ * transcripts deobfuscate consistently. Defaults to `getSecretPlaceholderKeyPath()`
+ * — `$XDG_STATE_HOME/ada/secret-placeholder.key` (or `~/.ada/agent/secret-placeholder.key`
+ * without XDG).
+ */
+export async function getSecretPlaceholderKey(keyDir) {
+    const keyPath = keyDir ? path.join(keyDir, "secret-placeholder.key") : getSecretPlaceholderKeyPath();
+    const cached = cachedPlaceholderKeys.get(keyPath);
+    if (cached !== undefined)
+        return cached;
+    const existing = await readPlaceholderKeyFile(keyPath, false);
+    if (existing !== undefined) {
+        cachedPlaceholderKeys.set(keyPath, existing);
+        return existing;
+    }
+    const generated = crypto.randomBytes(32).toString("base64url");
+    await fs.promises.mkdir(path.dirname(keyPath), { recursive: true });
+    try {
+        await fs.promises.writeFile(keyPath, generated, { flag: "wx", mode: 0o600 });
+        cachedPlaceholderKeys.set(keyPath, generated);
+        return generated;
+    }
+    catch (err) {
+        if (errnoCode(err) !== "EEXIST")
+            throw err;
+        // Another process won the create race but may still be mid-write: `wx`
+        // creates the file empty before the bytes land. Wait for non-empty content
+        // instead of caching an empty key (which would be a known, dictionaryable
+        // key and would not match tokens other processes persist with the real key).
+        const winner = await readPlaceholderKeyFile(keyPath, true);
+        if (winner === undefined) {
+            throw new Error(`secret placeholder key at ${keyPath} exists but is empty or unreadable`);
+        }
+        cachedPlaceholderKeys.set(keyPath, winner);
+        return winner;
+    }
+}
+/** Return an existing placeholder key for redaction without creating a new key file. */
+export async function getExistingSecretPlaceholderKey(keyDir) {
+    const keyPath = keyDir ? path.join(keyDir, "secret-placeholder.key") : getSecretPlaceholderKeyPath();
+    const cached = cachedPlaceholderKeys.get(keyPath);
+    if (cached !== undefined)
+        return cached;
+    // Redaction-only: this key is loaded solely to redact an existing key file from
+    // provider-visible tool output, never to mint placeholders. A truncated/corrupt
+    // or unreadable key must NOT block startup for replace-only/no-secret sessions —
+    // an invalid key is not a usable HMAC anyway, and a tool reading the same file
+    // gets the same bytes, so there is nothing sensitive to redact.
+    let existing;
+    try {
+        existing = await readPlaceholderKeyFile(keyPath, true);
+    }
+    catch {
+        return undefined;
+    }
+    if (existing !== undefined)
+        cachedPlaceholderKeys.set(keyPath, existing);
+    return existing;
+}
+// Process-stable fallback for the sync lazy path when the key file cannot be
+// persisted (e.g. unwritable config root on a headless run). Memoized so
+// re-obfuscation within the process stays idempotent; placeholders simply lose
+// cross-session stability, matching `defaultPlaceholderKey()` in obfuscator.ts.
+let ephemeralSyncPlaceholderKey;
+/**
+ * Synchronous variant of `getSecretPlaceholderKey` for the lazy key provider
+ * `SecretObfuscator` invokes inside its synchronous `obfuscate()` path when a
+ * built-in credential-pattern entry first matches session content. Never
+ * throws: an unreadable or unwritable key file degrades to a process-ephemeral
+ * key (with a warning) instead of breaking the session.
+ */
+export function getSecretPlaceholderKeySync(keyDir) {
+    const keyPath = keyDir ? path.join(keyDir, "secret-placeholder.key") : getSecretPlaceholderKeyPath();
+    const cached = cachedPlaceholderKeys.get(keyPath);
+    if (cached !== undefined)
+        return cached;
+    try {
+        const existing = fs.readFileSync(keyPath, "utf8").trim();
+        if (PLACEHOLDER_KEY_RE.test(existing)) {
+            cachedPlaceholderKeys.set(keyPath, existing);
+            return existing;
+        }
+    }
+    catch {
+        // Missing or unreadable — attempt creation below.
+    }
+    const generated = crypto.randomBytes(32).toString("base64url");
+    try {
+        fs.mkdirSync(path.dirname(keyPath), { recursive: true });
+        fs.writeFileSync(keyPath, generated, { flag: "wx", mode: 0o600 });
+        cachedPlaceholderKeys.set(keyPath, generated);
+        return generated;
+    }
+    catch (err) {
+        if (errnoCode(err) === "EEXIST") {
+            // Another process won the create race; accept its key if valid.
+            try {
+                const winner = fs.readFileSync(keyPath, "utf8").trim();
+                if (PLACEHOLDER_KEY_RE.test(winner)) {
+                    cachedPlaceholderKeys.set(keyPath, winner);
+                    return winner;
+                }
+            }
+            catch {
+                // Fall through to the ephemeral key.
+            }
+        }
+        logger.warn("Could not persist secret placeholder key, using a process-ephemeral key", {
+            path: keyPath,
+            error: String(err),
+        });
+        ephemeralSyncPlaceholderKey ??= crypto.randomBytes(32).toString("base64url");
+        return ephemeralSyncPlaceholderKey;
+    }
+}
+/** Read and validate the key file, optionally retrying briefly until a valid key lands. */
+async function readPlaceholderKeyFile(keyPath, retry) {
+    const attempts = retry ? 50 : 1;
+    let invalidValue;
+    for (let attempt = 0; attempt < attempts; attempt++) {
+        if (attempt > 0)
+            await new Promise((resolve) => setTimeout(resolve, 10));
+        try {
+            const value = (await fs.promises.readFile(keyPath, "utf8")).trim();
+            if (PLACEHOLDER_KEY_RE.test(value))
+                return value;
+            if (value.length > 0)
+                invalidValue = value;
+        }
+        catch (err) {
+            if (isEnoent(err))
+                return undefined;
+            throw err;
+        }
+    }
+    if (invalidValue !== undefined) {
+        throw new Error(`secret placeholder key at ${keyPath} is invalid`);
+    }
+    return undefined;
+}
+export { deobfuscateSessionContext, deobfuscateToolArguments, obfuscateAgentMessages, obfuscateMessages, obfuscateProviderContext, } from "./message-transform.js";
+export { SecretObfuscator } from "./obfuscator.js";
+export { secretEntriesNeedPlaceholderKey, secretEntryNeedsPlaceholderKey } from "./placeholder.js";
+/**
+ * Load secrets from project-local and global secrets.yml files.
+ * Project-local entries override global entries with matching content.
+ */
+export async function loadSecrets(cwd, agentDir) {
+    const projectPath = path.join(cwd, ".ada", "secrets.yml");
+    const globalPath = path.join(agentDir, "secrets.yml");
+    const globalEntries = await loadSecretsFile(globalPath);
+    const projectEntries = await loadSecretsFile(projectPath);
+    if (globalEntries.length === 0)
+        return projectEntries;
+    if (projectEntries.length === 0)
+        return globalEntries;
+    // Merge: project overrides global by content match
+    const projectContents = new Set(projectEntries.map((e) => e.content));
+    const merged = [...globalEntries.filter((e) => !projectContents.has(e.content)), ...projectEntries];
+    return merged;
+}
+/** Minimum env var value length to consider as a secret. */
+const MIN_ENV_VALUE_LENGTH = 8;
+/** Env var name patterns that indicate secret values. */
+const SECRET_ENV_PATTERNS = /(?:KEY|SECRET|TOKEN|PASSWORD|PASS|AUTH|CREDENTIAL|PRIVATE|OAUTH)(?:_|$)/i;
+/** Collect environment variable values that look like secrets. */
+export function collectEnvSecrets() {
+    const entries = [];
+    const seen = new Set();
+    for (const [name, value] of Object.entries(process.env)) {
+        if (!value || value.length < MIN_ENV_VALUE_LENGTH)
+            continue;
+        if (!SECRET_ENV_PATTERNS.test(name))
+            continue;
+        if (seen.has(value))
+            continue;
+        seen.add(value);
+        entries.push({ type: "plain", content: value, mode: "obfuscate" });
+    }
+    return entries;
+}
+/**
+ * Built-in entries covering credential-shaped tokens (GitHub/GitLab/OpenAI-style
+ * API keys) that are NOT configured via secrets.yml or the environment. Without
+ * these, such a token in a tool result falls through to pi-ai's irreversible
+ * provider-boundary redaction (`[openai_token_redacted]`); the model then echoes
+ * that placeholder into edit-tool `old_string`, which can never match the real
+ * bytes on disk (issue #6968). Routing the same shapes through the obfuscator
+ * mints reversible keyed placeholders that `deobfuscateToolArguments` restores
+ * before tool execution, keeping exact-match edits working while the credential
+ * bytes still never reach the provider. Unlike the pi-ai redaction there is no
+ * entropy gate here — a false positive only over-obfuscates, which stays
+ * transparent because the round trip is lossless.
+ */
+export function builtinCredentialSecretEntries() {
+    return [
+        {
+            type: "regex",
+            content: SENSITIVE_TOKEN_RE.source,
+            flags: "i",
+            mode: "obfuscate",
+            friendlyName: "Credential",
+        },
+    ];
+}
+/**
+ * Build the session secret obfuscator from every configured source: secrets.yml
+ * (project + global), secret-shaped environment variables, and the built-in
+ * credential patterns. Callers gate on `secrets.enabled`.
+ *
+ * Only CONFIGURED entries force startup key creation: a configured
+ * obfuscate-mode secret — or a default (no custom `replacement`) replace-mode
+ * regex whose key-derived idempotent fallback marker needs a stable key across
+ * restarts (see `secretEntryNeedsPlaceholderKey`) — mints placeholders as soon
+ * as the obfuscator is built. The built-in credential-pattern entry matches
+ * dynamically, so it resolves the persisted key lazily on first match instead
+ * of creating the key file for every secrets-enabled session.
+ *
+ * When no configured entry produced an active secret but a persisted key
+ * exists, returns a redaction-only obfuscator so a tool read of the key file
+ * does not ship the reusable HMAC key to the provider. Returns undefined when
+ * there is nothing to protect.
+ *
+ * `keyDir` is the explicit agent dir override for the placeholder-key file
+ * (default XDG/agent location when omitted).
+ */
+export async function buildSecretObfuscator(cwd, agentDir, keyDir) {
+    const fileEntries = await logger.time("loadSecrets", () => loadSecrets(cwd, agentDir));
+    const envEntries = collectEnvSecrets();
+    // Built-in credential-pattern entries come last so user-configured entries
+    // (plain literals, custom regexes) take precedence in the scan order.
+    const allEntries = [...envEntries, ...fileEntries, ...builtinCredentialSecretEntries()];
+    const needsPlaceholderKey = secretEntriesNeedPlaceholderKey([...envEntries, ...fileEntries]);
+    const placeholderKey = needsPlaceholderKey
+        ? await getSecretPlaceholderKey(keyDir)
+        : await getExistingSecretPlaceholderKey(keyDir);
+    let obfuscator;
+    if (allEntries.length > 0) {
+        obfuscator = new SecretObfuscator(allEntries, placeholderKey ?? (() => getSecretPlaceholderKeySync(keyDir)));
+    }
+    if (obfuscator?.hasSecrets() !== true && placeholderKey !== undefined) {
+        obfuscator = new SecretObfuscator([{ type: "plain", mode: "replace", content: placeholderKey }], placeholderKey);
+    }
+    return obfuscator;
+}
+async function loadSecretsFile(filePath) {
+    try {
+        const text = await fs.promises.readFile(filePath, "utf8");
+        const raw = parseYaml(text);
+        if (!Array.isArray(raw)) {
+            logger.warn("secrets.yml must be a YAML array", { path: filePath });
+            return [];
+        }
+        const entries = [];
+        for (let i = 0; i < raw.length; i++) {
+            const entry = raw[i];
+            if (!validateEntry(entry, filePath, i))
+                continue;
+            const friendlyName = loadFriendlyName(entry, filePath, i);
+            entries.push({
+                type: entry.type,
+                content: entry.content,
+                mode: entry.mode ?? "obfuscate",
+                replacement: entry.replacement,
+                flags: entry.flags,
+                friendlyName,
+            });
+        }
+        return entries;
+    }
+    catch (err) {
+        if (isEnoent(err))
+            return [];
+        logger.warn("Failed to load secrets.yml", { path: filePath, error: String(err) });
+        return [];
+    }
+}
+// Validates the friendlyName but returns it UNSANITIZED: `SecretObfuscator`'s
+// own `#createPlaceholder` sanitizes it again and, critically, needs the raw
+// string for `#friendlyNameCollidesWithSecret`'s regex-collision check — a
+// case-sensitive/punctuated regex pattern (e.g. `tok_[a-z0-9]+`) only matches
+// the label as it was actually written, not an already-uppercased,
+// separator-stripped rendering of it. Pre-sanitizing here would silently
+// defeat that check for every `secrets.yml`-loaded entry.
+function loadFriendlyName(entry, filePath, index) {
+    if (entry.friendlyName === undefined)
+        return undefined;
+    if (typeof entry.friendlyName !== "string") {
+        logger.warn(`secrets.yml[${index}]: friendlyName must be a string`, { path: filePath });
+        return undefined;
+    }
+    if (sanitizeSecretFriendlyName(entry.friendlyName) === undefined) {
+        logger.warn(`secrets.yml[${index}]: friendlyName must contain at least one letter or digit`, { path: filePath });
+        return undefined;
+    }
+    return entry.friendlyName;
+}
+function validateEntry(entry, filePath, index) {
+    if (entry === null || typeof entry !== "object") {
+        logger.warn(`secrets.yml[${index}]: entry must be an object`, { path: filePath });
+        return false;
+    }
+    const e = entry;
+    if (e.type !== "plain" && e.type !== "regex") {
+        logger.warn(`secrets.yml[${index}]: type must be "plain" or "regex"`, { path: filePath });
+        return false;
+    }
+    if (typeof e.content !== "string" || e.content.length === 0) {
+        logger.warn(`secrets.yml[${index}]: content must be a non-empty string`, { path: filePath });
+        return false;
+    }
+    if (e.mode !== undefined && e.mode !== "obfuscate" && e.mode !== "replace") {
+        logger.warn(`secrets.yml[${index}]: mode must be "obfuscate" or "replace"`, { path: filePath });
+        return false;
+    }
+    if (e.replacement !== undefined && typeof e.replacement !== "string") {
+        logger.warn(`secrets.yml[${index}]: replacement must be a string`, { path: filePath });
+        return false;
+    }
+    if (e.flags !== undefined && typeof e.flags !== "string") {
+        logger.warn(`secrets.yml[${index}]: flags must be a string`, { path: filePath });
+        return false;
+    }
+    if (e.type === "regex") {
+        let regex;
+        try {
+            regex = compileSecretRegex(e.content, e.flags);
+        }
+        catch (error) {
+            logger.warn(`secrets.yml[${index}]: invalid regex pattern`, {
+                path: filePath,
+                pattern: e.content,
+                error: String(error),
+            });
+            return false;
+        }
+        const mode = e.mode ?? "obfuscate";
+        if (mode === "replace" && e.replacement === undefined && regexHasUnresolvableShortMatchFallback(regex)) {
+            logger.warn(`secrets.yml[${index}]: regex matches every 1-2 character candidate with no custom replacement, so a match can never be redacted distinctly from itself`, { path: filePath, pattern: e.content });
+            return false;
+        }
+    }
+    return true;
+}
+//# sourceMappingURL=index.js.map

package/dist/core/secretos/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/secretos/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAqB,CAAC;AAC7C,OAAO,EAAoB,gBAAgB,EAAE,MAAM,iBAAkB,CAAC;AACtE,OAAO,EAAE,0BAA0B,EAAE,+BAA+B,EAAE,MAAM,kBAAmB,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAa,CAAC;AACjD,OAAO,EAAE,sCAAsC,EAAE,MAAM,kBAAmB,CAAC;AAE3E;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAC9B,6MAA6M,CAAC;AAE/M,iGAAiG;AACjG,MAAM,UAAU,2BAA2B;IAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAC5C,IAAI,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,wBAAwB,CAAC,CAAC;IACvG,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,wBAAwB,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC7B,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC;AAC1F,CAAC;AAED,2EAA2E;AAC3E,SAAS,SAAS,CAAC,GAAY;IAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACtB,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;IAC3C,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AACjD,MAAM,qBAAqB,GAAG,IAAI,GAAG,EAAkB,CAAC;AAExD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,MAAe;IAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC,2BAA2B,EAAE,CAAC;IACrG,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAExC,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,qBAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7C,OAAO,QAAQ,CAAC;IACjB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/D,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,IAAI,CAAC;QACJ,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7E,qBAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;QAC3C,uEAAuE;QACvE,2EAA2E;QAC3E,0EAA0E;QAC1E,6EAA6E;QAC7E,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,oCAAoC,CAAC,CAAC;QAC3F,CAAC;QACD,qBAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC;IACf,CAAC;AACF,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,MAAe;IACpE,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC,2BAA2B,EAAE,CAAC;IACrG,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,gFAAgF;IAChF,gFAAgF;IAChF,iFAAiF;IACjF,+EAA+E;IAC/E,gEAAgE;IAChE,IAAI,QAA4B,CAAC;IACjC,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS;QAAE,qBAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzE,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,6EAA6E;AAC7E,yEAAyE;AACzE,+EAA+E;AAC/E,gFAAgF;AAChF,IAAI,2BAA+C,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAe;IAC1D,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAAC,2BAA2B,EAAE,CAAC;IACrG,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvC,qBAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC7C,OAAO,QAAQ,CAAC;QACjB,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,kDAAkD;IACnD,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC/D,IAAI,CAAC;QACJ,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,qBAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,CAAC;YACjC,gEAAgE;YAChE,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBACvD,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBACrC,qBAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBAC3C,OAAO,MAAM,CAAC;gBACf,CAAC;YACF,CAAC;YAAC,MAAM,CAAC;gBACR,qCAAqC;YACtC,CAAC;QACF,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,yEAAyE,EAAE;YACtF,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;SAClB,CAAC,CAAC;QACH,2BAA2B,KAAK,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC7E,OAAO,2BAA2B,CAAC;IACpC,CAAC;AACF,CAAC;AAED,2FAA2F;AAC3F,KAAK,UAAU,sBAAsB,CAAC,OAAe,EAAE,KAAc;IACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,YAAgC,CAAC;IACrC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;QACrD,IAAI,OAAO,GAAG,CAAC;YAAE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnE,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YACjD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,YAAY,GAAG,KAAK,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,SAAS,CAAC;YACpC,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC;IACD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,6BAA6B,OAAO,aAAa,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAID,OAAO,EACN,yBAAyB,EACzB,wBAAwB,EACxB,sBAAsB,EACtB,iBAAiB,EACjB,wBAAwB,GACxB,MAAM,wBAAyB,CAAC;AACjC,OAAO,EAAoB,gBAAgB,EAAE,MAAM,iBAAkB,CAAC;AACtE,OAAO,EAAE,+BAA+B,EAAE,8BAA8B,EAAE,MAAM,kBAAmB,CAAC;AAEpG;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,QAAgB;IAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAEtD,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,CAAC;IAE1D,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC;IACtD,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC;IAEtD,mDAAmD;IACnD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,cAAc,CAAC,CAAC;IACpG,OAAO,MAAM,CAAC;AACf,CAAC;AAED,4DAA4D;AAC5D,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B,yDAAyD;AACzD,MAAM,mBAAmB,GAAG,0EAA0E,CAAC;AAEvG,kEAAkE;AAClE,MAAM,UAAU,iBAAiB;IAChC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,oBAAoB;YAAE,SAAS;QAC5D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC9C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,8BAA8B;IAC7C,OAAO;QACN;YACC,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,kBAAkB,CAAC,MAAM;YAClC,KAAK,EAAE,GAAG;YACV,IAAI,EAAE,WAAW;YACjB,YAAY,EAAE,YAAY;SAC1B;KACD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,GAAW,EACX,QAAgB,EAChB,MAAe;IAEf,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvF,MAAM,UAAU,GAAG,iBAAiB,EAAE,CAAC;IACvC,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,UAAU,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,WAAW,EAAE,GAAG,8BAA8B,EAAE,CAAC,CAAC;IACxF,MAAM,mBAAmB,GAAG,+BAA+B,CAAC,CAAC,GAAG,UAAU,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;IAC7F,MAAM,cAAc,GAAG,mBAAmB;QACzC,CAAC,CAAC,MAAM,uBAAuB,CAAC,MAAM,CAAC;QACvC,CAAC,CAAC,MAAM,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,UAAwC,CAAC;IAC7C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,UAAU,GAAG,IAAI,gBAAgB,CAAC,UAAU,EAAE,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,UAAU,EAAE,UAAU,EAAE,KAAK,IAAI,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACvE,UAAU,GAAG,IAAI,gBAAgB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB;IAC9C,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpE,OAAO,EAAE,CAAC;QACX,CAAC;QACD,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAAE,SAAS;YACjD,MAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,WAAW;gBAC/B,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,YAAY;aACZ,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,CAAC;IACX,CAAC;AACF,CAAC;AAED,8EAA8E;AAC9E,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,mEAAmE;AACnE,yEAAyE;AACzE,0DAA0D;AAC1D,SAAS,gBAAgB,CAAC,KAAqB,EAAE,QAAgB,EAAE,KAAa;IAC/E,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACvD,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,kCAAkC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,0BAA0B,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,2DAA2D,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjH,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC,YAAY,CAAC;AAC3B,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,QAAgB,EAAE,KAAa;IACrE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,4BAA4B,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAClF,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,oCAAoC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1F,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,uCAAuC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7F,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,0CAA0C,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChG,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,iCAAiC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvF,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,2BAA2B,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjF,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACxB,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACJ,KAAK,GAAG,kBAAkB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,eAAe,KAAK,0BAA0B,EAAE;gBAC3D,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;aACpB,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,WAAW,CAAC;QACnC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,IAAI,sCAAsC,CAAC,KAAK,CAAC,EAAE,CAAC;YACxG,MAAM,CAAC,IAAI,CACV,eAAe,KAAK,oIAAoI,EACxJ,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CACtC,CAAC;YACF,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/core/secretos/message-transform.d.ts

@@ -0,0 +1,44 @@
+import type { AgentMessage } from "@earendil-works/pi-agent-core";
+import type { AssistantMessage, Context, Message } from "@earendil-works/pi-ai";
+import type { SessionContext } from "../session-manager\.ts";
+import type { SecretObfuscator } from "./obfuscator\.ts";
+/**
+ * Restore secret placeholders for local display. Only message kinds the model
+ * can echo back carry placeholders; local-only kinds pass through untouched.
+ */
+export declare function deobfuscateSessionContext(sessionContext: SessionContext, obfuscator: SecretObfuscator | undefined): SessionContext;
+export declare function deobfuscateAgentMessages(obfuscator: SecretObfuscator, messages: AgentMessage[]): AgentMessage[];
+/**
+ * Restore placeholders in assistant content: visible text and tool-call
+ * arguments. Thinking and signatures are opaque provider-replay/hidden-reasoning
+ * data and pass through byte-identical.
+ */
+export declare function deobfuscateAssistantContent(obfuscator: SecretObfuscator, content: AssistantMessage["content"]): AssistantMessage["content"];
+/**
+ * Restore placeholders inside a tool call's arguments. Arguments are arbitrary
+ * model-authored JSON, so tool-call arguments are the ONLY place a recursive
+ * JSON walk runs.
+ */
+export declare function deobfuscateToolArguments(obfuscator: SecretObfuscator, args: Record<string, unknown>): Record<string, unknown>;
+/** Redact secrets inside a tool call's arguments (same JSON-walk exception as {@link deobfuscateToolArguments}). */
+export declare function obfuscateToolArguments(obfuscator: SecretObfuscator, args: Record<string, unknown>, sharedRegexSecretValues?: ReadonlySet<string>): Record<string, unknown>;
+/**
+ * Redact secrets from outbound messages. User messages and tool results are
+ * obfuscated. Assistant replay content is re-obfuscated too, because session
+ * restoration expands keyed placeholders locally before the next provider
+ * request. Inline image bytes are never walked.
+ */
+export declare function obfuscateMessages(obfuscator: SecretObfuscator, messages: Message[]): Message[];
+/**
+ * Variante para `AgentMessage[]` (evento "context" de extensiones): los roles
+ * que llegan al proveedor (user/assistant/toolResult) pasan por el mismo
+ * pipeline con valores de regex compartidos; el resto de mensajes del agente
+ * (branchSummary, compactionSummary, custom…) va intacto.
+ */
+export declare function obfuscateAgentMessages(obfuscator: SecretObfuscator, messages: AgentMessage[]): AgentMessage[];
+/**
+ * Redact outbound provider context. Only conversation messages are rewritten;
+ * the static system prompt and tool schemas pass through unchanged.
+ */
+export declare function obfuscateProviderContext(obfuscator: SecretObfuscator | undefined, context: Context): Context;
+//# sourceMappingURL=message-transform.d.ts.map

package/dist/core/secretos/message-transform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-transform.d.ts","sourceRoot":"","sources":["../../../src/core/secretos/message-transform.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAgB,OAAO,EAAe,MAAM,uBAAuB,CAAC;AAC3G,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAa,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAOpE;;;GAGG;AACH,wBAAgB,yBAAyB,CACxC,cAAc,EAAE,cAAc,EAC9B,UAAU,EAAE,gBAAgB,GAAG,SAAS,GACtC,cAAc,CAIhB;AAED,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CA4B/G;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAC1C,UAAU,EAAE,gBAAgB,EAC5B,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC,GAClC,gBAAgB,CAAC,SAAS,CAAC,CAqB7B;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACvC,UAAU,EAAE,gBAAgB,EAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGzB;AAED,oHAAoH;AACpH,wBAAgB,sBAAsB,CACrC,UAAU,EAAE,gBAAgB,EAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,uBAAuB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAC3C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAOzB;AAmGD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAG9F;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAU7G;AA+BD;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,gBAAgB,GAAG,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAI5G"}