@jterrats/open-orchestra 1.0.17 → 1.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (235) hide show
  1. package/CHANGELOG.md +44 -0
  2. package/CLAUDE.md +1 -0
  3. package/dist/active-runtime-store.d.ts +18 -0
  4. package/dist/active-runtime-store.js +75 -0
  5. package/dist/active-runtime-store.js.map +1 -0
  6. package/dist/chat-api-errors.d.ts +7 -0
  7. package/dist/chat-api-errors.js +15 -0
  8. package/dist/chat-api-errors.js.map +1 -0
  9. package/dist/chat-api-message-persistence.d.ts +12 -0
  10. package/dist/chat-api-message-persistence.js +125 -0
  11. package/dist/chat-api-message-persistence.js.map +1 -0
  12. package/dist/chat-api-records.d.ts +35 -0
  13. package/dist/chat-api-records.js +94 -0
  14. package/dist/chat-api-records.js.map +1 -0
  15. package/dist/chat-api-service.d.ts +32 -0
  16. package/dist/chat-api-service.js +120 -0
  17. package/dist/chat-api-service.js.map +1 -0
  18. package/dist/chat-api-storage.d.ts +1 -0
  19. package/dist/chat-api-storage.js +14 -0
  20. package/dist/chat-api-storage.js.map +1 -0
  21. package/dist/chat-api-types.d.ts +81 -0
  22. package/dist/chat-api-types.js +2 -0
  23. package/dist/chat-api-types.js.map +1 -0
  24. package/dist/chat-compliance-service.d.ts +60 -0
  25. package/dist/chat-compliance-service.js +241 -0
  26. package/dist/chat-compliance-service.js.map +1 -0
  27. package/dist/chat-event-stream.d.ts +13 -0
  28. package/dist/chat-event-stream.js +124 -0
  29. package/dist/chat-event-stream.js.map +1 -0
  30. package/dist/chat-pagination.d.ts +6 -0
  31. package/dist/chat-pagination.js +64 -0
  32. package/dist/chat-pagination.js.map +1 -0
  33. package/dist/chat-storage-actor-validation.d.ts +4 -0
  34. package/dist/chat-storage-actor-validation.js +65 -0
  35. package/dist/chat-storage-actor-validation.js.map +1 -0
  36. package/dist/chat-storage-content-policy.d.ts +6 -0
  37. package/dist/chat-storage-content-policy.js +84 -0
  38. package/dist/chat-storage-content-policy.js.map +1 -0
  39. package/dist/chat-storage-errors.d.ts +20 -0
  40. package/dist/chat-storage-errors.js +17 -0
  41. package/dist/chat-storage-errors.js.map +1 -0
  42. package/dist/chat-storage-local-files.d.ts +17 -0
  43. package/dist/chat-storage-local-files.js +78 -0
  44. package/dist/chat-storage-local-files.js.map +1 -0
  45. package/dist/chat-storage-local-paths.d.ts +6 -0
  46. package/dist/chat-storage-local-paths.js +124 -0
  47. package/dist/chat-storage-local-paths.js.map +1 -0
  48. package/dist/chat-storage-local-projection.d.ts +10 -0
  49. package/dist/chat-storage-local-projection.js +55 -0
  50. package/dist/chat-storage-local-projection.js.map +1 -0
  51. package/dist/chat-storage-local-records.d.ts +13 -0
  52. package/dist/chat-storage-local-records.js +56 -0
  53. package/dist/chat-storage-local-records.js.map +1 -0
  54. package/dist/chat-storage-local.d.ts +6 -0
  55. package/dist/chat-storage-local.js +114 -0
  56. package/dist/chat-storage-local.js.map +1 -0
  57. package/dist/chat-storage-validation.d.ts +10 -0
  58. package/dist/chat-storage-validation.js +100 -0
  59. package/dist/chat-storage-validation.js.map +1 -0
  60. package/dist/chat-storage.d.ts +16 -0
  61. package/dist/chat-storage.js +4 -0
  62. package/dist/chat-storage.js.map +1 -0
  63. package/dist/chat-workflow-timeline.d.ts +17 -0
  64. package/dist/chat-workflow-timeline.js +210 -0
  65. package/dist/chat-workflow-timeline.js.map +1 -0
  66. package/dist/{workspace-claude-settings.d.ts → claude-settings.d.ts} +22 -3
  67. package/dist/{workspace-claude-settings.js → claude-settings.js} +28 -9
  68. package/dist/claude-settings.js.map +1 -0
  69. package/dist/command-init.d.ts +2 -0
  70. package/dist/command-init.js +150 -0
  71. package/dist/command-init.js.map +1 -0
  72. package/dist/command-manifest.js +1 -1
  73. package/dist/command-manifest.js.map +1 -1
  74. package/dist/commands.d.ts +1 -1
  75. package/dist/commands.js +1 -140
  76. package/dist/commands.js.map +1 -1
  77. package/dist/constants.d.ts +1 -0
  78. package/dist/constants.js +1 -0
  79. package/dist/constants.js.map +1 -1
  80. package/dist/context-runtime-preprocessor.d.ts +41 -0
  81. package/dist/context-runtime-preprocessor.js +199 -0
  82. package/dist/context-runtime-preprocessor.js.map +1 -0
  83. package/dist/cursor-settings.d.ts +25 -0
  84. package/dist/cursor-settings.js +72 -0
  85. package/dist/cursor-settings.js.map +1 -0
  86. package/dist/health-commands.js +43 -3
  87. package/dist/health-commands.js.map +1 -1
  88. package/dist/model-aliases.d.ts +5 -0
  89. package/dist/model-aliases.js +37 -0
  90. package/dist/model-aliases.js.map +1 -0
  91. package/dist/ollama-provider.js +25 -0
  92. package/dist/ollama-provider.js.map +1 -1
  93. package/dist/phase-playbooks.js +11 -0
  94. package/dist/phase-playbooks.js.map +1 -1
  95. package/dist/provider-agent-wrapper.js +14 -0
  96. package/dist/provider-agent-wrapper.js.map +1 -1
  97. package/dist/qa-e2e-artifacts.js +71 -3
  98. package/dist/qa-e2e-artifacts.js.map +1 -1
  99. package/dist/runtime-adapters.js +56 -0
  100. package/dist/runtime-adapters.js.map +1 -1
  101. package/dist/runtime-bootstrap.js +32 -22
  102. package/dist/runtime-bootstrap.js.map +1 -1
  103. package/dist/runtime-child-prompt.js +8 -0
  104. package/dist/runtime-child-prompt.js.map +1 -1
  105. package/dist/runtime-context-manifest.d.ts +4 -1
  106. package/dist/runtime-context-manifest.js +59 -3
  107. package/dist/runtime-context-manifest.js.map +1 -1
  108. package/dist/runtime-execution-adapters.js +19 -0
  109. package/dist/runtime-execution-adapters.js.map +1 -1
  110. package/dist/runtime-execution-renderer.js +4 -0
  111. package/dist/runtime-execution-renderer.js.map +1 -1
  112. package/dist/runtime-execution.js +13 -82
  113. package/dist/runtime-execution.js.map +1 -1
  114. package/dist/runtime-hooks.d.ts +46 -0
  115. package/dist/runtime-hooks.js +95 -0
  116. package/dist/runtime-hooks.js.map +1 -0
  117. package/dist/runtime-parent-actions.js +5 -0
  118. package/dist/runtime-parent-actions.js.map +1 -1
  119. package/dist/runtime-spawn-bridge.js +1 -0
  120. package/dist/runtime-spawn-bridge.js.map +1 -1
  121. package/dist/runtime-spawn-guidance.js +15 -61
  122. package/dist/runtime-spawn-guidance.js.map +1 -1
  123. package/dist/security/chat-guardrail-policy.d.ts +7 -0
  124. package/dist/security/chat-guardrail-policy.js +61 -0
  125. package/dist/security/chat-guardrail-policy.js.map +1 -0
  126. package/dist/security/chat-guardrail-types.d.ts +65 -0
  127. package/dist/security/chat-guardrail-types.js +2 -0
  128. package/dist/security/chat-guardrail-types.js.map +1 -0
  129. package/dist/security/chat-guardrail-validation.d.ts +9 -0
  130. package/dist/security/chat-guardrail-validation.js +64 -0
  131. package/dist/security/chat-guardrail-validation.js.map +1 -0
  132. package/dist/security/chat-guardrails.d.ts +3 -0
  133. package/dist/security/chat-guardrails.js +136 -0
  134. package/dist/security/chat-guardrails.js.map +1 -0
  135. package/dist/security/content-classifier.js +33 -1
  136. package/dist/security/content-classifier.js.map +1 -1
  137. package/dist/security/payment-card-detection.d.ts +3 -0
  138. package/dist/security/payment-card-detection.js +48 -0
  139. package/dist/security/payment-card-detection.js.map +1 -0
  140. package/dist/security/policy-types.d.ts +1 -1
  141. package/dist/security/provider-egress-policy.d.ts +27 -0
  142. package/dist/security/provider-egress-policy.js +72 -0
  143. package/dist/security/provider-egress-policy.js.map +1 -0
  144. package/dist/security/public-api-auth.d.ts +20 -0
  145. package/dist/security/public-api-auth.js +55 -0
  146. package/dist/security/public-api-auth.js.map +1 -0
  147. package/dist/security/public-api-policy.d.ts +8 -0
  148. package/dist/security/public-api-policy.js +40 -0
  149. package/dist/security/public-api-policy.js.map +1 -0
  150. package/dist/security/redaction.js +44 -13
  151. package/dist/security/redaction.js.map +1 -1
  152. package/dist/security/restricted-content-quarantine.d.ts +17 -0
  153. package/dist/security/restricted-content-quarantine.js +50 -0
  154. package/dist/security/restricted-content-quarantine.js.map +1 -0
  155. package/dist/security/restricted-data-classifier.d.ts +9 -0
  156. package/dist/security/restricted-data-classifier.js +358 -0
  157. package/dist/security/restricted-data-classifier.js.map +1 -0
  158. package/dist/skills-render.js +7 -14
  159. package/dist/skills-render.js.map +1 -1
  160. package/dist/telemetry-redaction.d.ts +2 -0
  161. package/dist/telemetry-redaction.js +25 -2
  162. package/dist/telemetry-redaction.js.map +1 -1
  163. package/dist/types/chat.d.ts +203 -0
  164. package/dist/types/chat.js +10 -0
  165. package/dist/types/chat.js.map +1 -0
  166. package/dist/types/model-config.d.ts +4 -0
  167. package/dist/types/public-api.d.ts +75 -0
  168. package/dist/types/public-api.js +2 -0
  169. package/dist/types/public-api.js.map +1 -0
  170. package/dist/types/restricted-data.d.ts +69 -0
  171. package/dist/types/restricted-data.js +8 -0
  172. package/dist/types/restricted-data.js.map +1 -0
  173. package/dist/types/restricted-fragment.d.ts +82 -0
  174. package/dist/types/restricted-fragment.js +14 -0
  175. package/dist/types/restricted-fragment.js.map +1 -0
  176. package/dist/types/runtime.d.ts +12 -0
  177. package/dist/types.d.ts +6 -0
  178. package/dist/types.js.map +1 -1
  179. package/dist/web-api.js +24 -0
  180. package/dist/web-api.js.map +1 -1
  181. package/dist/web-artifact-parsers.d.ts +6 -0
  182. package/dist/web-artifact-parsers.js +266 -0
  183. package/dist/web-artifact-parsers.js.map +1 -0
  184. package/dist/web-artifact-types.d.ts +76 -0
  185. package/dist/web-artifact-types.js +2 -0
  186. package/dist/web-artifact-types.js.map +1 -0
  187. package/dist/web-artifacts.d.ts +2 -43
  188. package/dist/web-artifacts.js +106 -57
  189. package/dist/web-artifacts.js.map +1 -1
  190. package/dist/web-chat-route-inputs.d.ts +11 -0
  191. package/dist/web-chat-route-inputs.js +156 -0
  192. package/dist/web-chat-route-inputs.js.map +1 -0
  193. package/dist/web-chat-routes.d.ts +7 -0
  194. package/dist/web-chat-routes.js +213 -0
  195. package/dist/web-chat-routes.js.map +1 -0
  196. package/dist/web-console/assets/index-CJup1cIA.css +1 -0
  197. package/dist/web-console/assets/index-CVDOfipu.js +11 -0
  198. package/dist/web-console/index.html +2 -2
  199. package/dist/web-evidence.d.ts +1 -1
  200. package/dist/web-evidence.js +9 -2
  201. package/dist/web-evidence.js.map +1 -1
  202. package/dist/web-public-route-inputs.d.ts +14 -0
  203. package/dist/web-public-route-inputs.js +136 -0
  204. package/dist/web-public-route-inputs.js.map +1 -0
  205. package/dist/web-public-routes.d.ts +6 -0
  206. package/dist/web-public-routes.js +194 -0
  207. package/dist/web-public-routes.js.map +1 -0
  208. package/dist/web-public-service.d.ts +16 -0
  209. package/dist/web-public-service.js +154 -0
  210. package/dist/web-public-service.js.map +1 -0
  211. package/dist/workflow-services.js +5 -0
  212. package/dist/workflow-services.js.map +1 -1
  213. package/dist/workspace-runtime-bootstrap.js +15 -4
  214. package/dist/workspace-runtime-bootstrap.js.map +1 -1
  215. package/docs/chat-audit-retention.md +76 -0
  216. package/docs/chat-provider-provenance-ledger.md +75 -0
  217. package/docs/context-runtime-preprocessing.md +37 -0
  218. package/docs/orchestra-mvp.md +8 -2
  219. package/docs/public-api-contract.md +43 -0
  220. package/docs/release-test-matrix.md +14 -14
  221. package/docs/restricted-fragment-storage-contract.md +147 -0
  222. package/docs/runtime-adapters.md +40 -7
  223. package/docs/site-manifest.json +128 -30
  224. package/package.json +5 -2
  225. package/site/dist/_headers +9 -0
  226. package/site/dist/_redirects +2 -0
  227. package/site/dist/architecture.mmd +61 -0
  228. package/site/dist/assets/index-Bi8l6tCE.js +10 -0
  229. package/site/dist/assets/index-BsCLqY__.css +1 -0
  230. package/site/dist/favicon.svg +19 -0
  231. package/site/dist/index.html +28 -0
  232. package/site/package.json +19 -0
  233. package/dist/web-console/assets/index-BHs7OIv8.css +0 -1
  234. package/dist/web-console/assets/index-BJuVTqfQ.js +0 -11
  235. package/dist/workspace-claude-settings.js.map +0 -1
@@ -0,0 +1,358 @@
1
+ import { createHash } from "node:crypto";
2
+ import { hasPaymentCardLikeValue, redactPaymentCardLikeValues, } from "./payment-card-detection.js";
3
+ const passwordPattern = /\b(pass(?:word|phrase)?|pwd)\s*[:=]\s*(?:"[^"]{8,}"|'[^']{8,}'|[^\s"']{8,})/gi;
4
+ const bearerPattern = /\bbearer\s+[a-z0-9._~+/=-]{16,}/gi;
5
+ const secretAssignmentPattern = /\b(api[_-]?key|access[_-]?token|auth[_-]?token|client[_-]?secret|secret|session[_-]?token|token|webhook[_-]?secret)\s*[:=]\s*(?:"[^"]{12,}"|'[^']{12,}'|[^\s"']{12,})/gi;
6
+ const jwtPattern = /\beyJ[a-z0-9_-]{8,}[.][a-z0-9_-]{8,}[.][a-z0-9_-]{8,}\b/gi;
7
+ const privateKeyPattern = keyBlockPattern("(?:[A-Z0-9 ]+ )?");
8
+ const openSshPrivateKeyPattern = keyBlockPattern("OPENSSH ");
9
+ const cvvPattern = /\b(cvv|cvc|card security code)\s*[:=]\s*\d{3,4}\b/gi;
10
+ const ssnPattern = /\b\d{3}-\d{2}-\d{4}\b/g;
11
+ const passportKeywords = ["passport", "passport number", "passport no."];
12
+ const licenseKeywords = [
13
+ "driver license",
14
+ "driver's license",
15
+ "license number",
16
+ "dl",
17
+ ];
18
+ const taxIdentifierKeywords = ["tax id", "tin", "ein"];
19
+ const bankAccountKeywords = [
20
+ "routing",
21
+ "routing number",
22
+ "account",
23
+ "account number",
24
+ "account no.",
25
+ ];
26
+ const restrictedRules = [
27
+ rule("password", "password_assignment", "restricted.password.assignment", {
28
+ marker: "[REDACTED_PASSWORD]",
29
+ summary: "content contains password-shaped credential text",
30
+ detect: (text) => countMatches(text, passwordPattern),
31
+ redact: (text) => redactAssignment(text, passwordPattern, "[REDACTED_PASSWORD]"),
32
+ }),
33
+ rule("secret", "bearer_token", "restricted.secret.bearer-token", {
34
+ marker: "[REDACTED_SECRET]",
35
+ summary: "content contains bearer token text",
36
+ detect: (text) => countMatches(text, bearerPattern),
37
+ redact: (text) => replaceMatches(text, bearerPattern, "[REDACTED_SECRET]"),
38
+ }),
39
+ rule("secret", "secret_assignment", "restricted.secret.assignment", {
40
+ marker: "[REDACTED_SECRET]",
41
+ summary: "content contains token, key, or secret assignment text",
42
+ detect: (text) => countMatches(text, secretAssignmentPattern),
43
+ redact: (text) => redactAssignment(text, secretAssignmentPattern, "[REDACTED_SECRET]"),
44
+ }),
45
+ rule("secret", "jwt_token", "restricted.secret.jwt", {
46
+ marker: "[REDACTED_SECRET]",
47
+ summary: "content contains JWT-shaped token text",
48
+ detect: (text) => countMatches(text, jwtPattern),
49
+ redact: (text) => replaceMatches(text, jwtPattern, "[REDACTED_SECRET]"),
50
+ }),
51
+ rule("private_key", "pem_private_key", "restricted.private-key.pem", {
52
+ marker: "[REDACTED_PRIVATE_KEY]",
53
+ summary: "content contains private signing key material",
54
+ detect: (text) => countMatches(text, privateKeyPattern),
55
+ redact: (text) => replaceMatches(text, privateKeyPattern, "[REDACTED_PRIVATE_KEY]"),
56
+ }),
57
+ rule("private_key", "openssh_private_key", "restricted.private-key.openssh", {
58
+ marker: "[REDACTED_PRIVATE_KEY]",
59
+ summary: "content contains OpenSSH private key material",
60
+ detect: (text) => countMatches(text, openSshPrivateKeyPattern),
61
+ redact: (text) => replaceMatches(text, openSshPrivateKeyPattern, "[REDACTED_PRIVATE_KEY]"),
62
+ }),
63
+ rule("payment_data", "payment_card_pan", "restricted.payment.pan", {
64
+ marker: "[REDACTED_PAYMENT_DATA]",
65
+ summary: "content contains payment-card-like account number text",
66
+ detect: (text) => (hasPaymentCardLikeValue(text) ? 1 : 0),
67
+ redact: (text) => redactPaymentCardLikeValues(text, "[REDACTED_PAYMENT_DATA]"),
68
+ }),
69
+ rule("payment_data", "payment_card_cvv", "restricted.payment.cvv", {
70
+ marker: "[REDACTED_PAYMENT_DATA]",
71
+ summary: "content contains payment card verification code text",
72
+ detect: (text) => countMatches(text, cvvPattern),
73
+ redact: (text) => redactAssignment(text, cvvPattern, "[REDACTED_PAYMENT_DATA]"),
74
+ }),
75
+ rule("sensitive_pii", "ssn", "restricted.pii.ssn", {
76
+ marker: "[REDACTED_SENSITIVE_PII]",
77
+ summary: "content contains government identifier text",
78
+ detect: (text) => countMatches(text, ssnPattern),
79
+ redact: (text) => replaceMatches(text, ssnPattern, "[REDACTED_SENSITIVE_PII]"),
80
+ }),
81
+ rule("sensitive_pii", "passport", "restricted.pii.passport", {
82
+ marker: "[REDACTED_SENSITIVE_PII]",
83
+ summary: "content contains passport identifier text",
84
+ detect: (text) => findKeywordValueRanges(text, passportKeywords, alphaNumericValue(6, 9))
85
+ .length,
86
+ redact: (text) => redactRanges(text, findKeywordValueRanges(text, passportKeywords, alphaNumericValue(6, 9)), "[REDACTED_SENSITIVE_PII]"),
87
+ }),
88
+ rule("sensitive_pii", "driver_license", "restricted.pii.driver-license", {
89
+ marker: "[REDACTED_SENSITIVE_PII]",
90
+ summary: "content contains driver license identifier text",
91
+ detect: (text) => findKeywordValueRanges(text, licenseKeywords, alphaNumericDashValue(6, 20)).length,
92
+ redact: (text) => redactRanges(text, findKeywordValueRanges(text, licenseKeywords, alphaNumericDashValue(6, 20)), "[REDACTED_SENSITIVE_PII]"),
93
+ }),
94
+ rule("sensitive_pii", "tax_identifier", "restricted.pii.tax-identifier", {
95
+ marker: "[REDACTED_SENSITIVE_PII]",
96
+ summary: "content contains tax identifier text",
97
+ detect: (text) => findKeywordValueRanges(text, taxIdentifierKeywords, taxIdentifierValue)
98
+ .length,
99
+ redact: (text) => redactRanges(text, findKeywordValueRanges(text, taxIdentifierKeywords, taxIdentifierValue), "[REDACTED_SENSITIVE_PII]"),
100
+ }),
101
+ rule("sensitive_pii", "bank_account", "restricted.pii.bank-account", {
102
+ marker: "[REDACTED_SENSITIVE_PII]",
103
+ summary: "content contains financial account identifier text",
104
+ detect: (text) => findKeywordValueRanges(text, bankAccountKeywords, digitValue(8, 17))
105
+ .length,
106
+ redact: (text) => redactRanges(text, findKeywordValueRanges(text, bankAccountKeywords, digitValue(8, 17)), "[REDACTED_SENSITIVE_PII]"),
107
+ }),
108
+ ];
109
+ export function classifyRestrictedData(text) {
110
+ const findings = [];
111
+ let redactedText = text;
112
+ for (const ruleDefinition of restrictedRules) {
113
+ const occurrenceCount = ruleDefinition.detect(text);
114
+ if (occurrenceCount < 1)
115
+ continue;
116
+ findings.push(toFinding(ruleDefinition, occurrenceCount));
117
+ redactedText = ruleDefinition.redact(redactedText);
118
+ }
119
+ return {
120
+ hasRestrictedData: findings.length > 0,
121
+ findings,
122
+ redactedText,
123
+ redactionCount: findings.reduce((sum, finding) => sum + finding.occurrenceCount, 0),
124
+ };
125
+ }
126
+ export function evaluateRestrictedBoundaryPolicy(request) {
127
+ const categories = uniqueCategories(request.classification.findings);
128
+ const recommendations = uniqueRecommendations(categories);
129
+ const isBlocked = recommendations.includes("block");
130
+ return {
131
+ decisionId: decisionIdFor(request, categories, recommendations),
132
+ requestId: request.requestId,
133
+ boundary: request.boundary,
134
+ outcome: isBlocked ? "block" : "allow",
135
+ categories,
136
+ recommendations,
137
+ redactionCount: request.classification.redactionCount,
138
+ providerEgress: isBlocked ? "denied" : "allowed",
139
+ rawPersistence: isBlocked ? "forbidden" : "allowed",
140
+ sanitizedReasons: sanitizedReasons(request.classification.findings),
141
+ auditSummary: auditSummaryFor(request.boundary, categories),
142
+ };
143
+ }
144
+ export function restrictedAuditEventForClassification(input) {
145
+ const findings = input.classification.findings.map((finding) => ({
146
+ category: finding.category,
147
+ ruleId: finding.ruleId,
148
+ confidence: finding.confidence,
149
+ severity: finding.severity,
150
+ occurrenceCount: finding.occurrenceCount,
151
+ redactionMarker: finding.redactionMarker,
152
+ summary: finding.summary,
153
+ }));
154
+ const categories = uniqueCategories(input.classification.findings);
155
+ return {
156
+ schemaVersion: 1,
157
+ eventType: input.eventType,
158
+ sourceId: input.sourceId,
159
+ ...(input.decision?.boundary ? { boundary: input.decision.boundary } : {}),
160
+ ...(input.decision?.requestId
161
+ ? { requestId: input.decision.requestId }
162
+ : {}),
163
+ ...(input.decision?.decisionId
164
+ ? { decisionId: input.decision.decisionId }
165
+ : {}),
166
+ categories,
167
+ findings,
168
+ redactionCount: input.classification.redactionCount,
169
+ redactionMarkers: uniqueRedactionMarkers(input.classification.findings),
170
+ sanitizedReasons: sanitizedReasons(input.classification.findings),
171
+ rawContentIncluded: false,
172
+ ...(input.decision?.providerEgress
173
+ ? { providerEgress: input.decision.providerEgress }
174
+ : {}),
175
+ ...(input.decision?.rawPersistence
176
+ ? { rawPersistence: input.decision.rawPersistence }
177
+ : {}),
178
+ };
179
+ }
180
+ function rule(category, kind, ruleId, input) {
181
+ return {
182
+ category,
183
+ kind,
184
+ ruleId,
185
+ ...input,
186
+ };
187
+ }
188
+ function toFinding(ruleDefinition, occurrenceCount) {
189
+ return {
190
+ category: ruleDefinition.category,
191
+ kind: ruleDefinition.kind,
192
+ ruleId: ruleDefinition.ruleId,
193
+ confidence: "high",
194
+ severity: "critical",
195
+ occurrenceCount,
196
+ redactionMarker: ruleDefinition.marker,
197
+ summary: ruleDefinition.summary,
198
+ };
199
+ }
200
+ function countMatches(text, pattern) {
201
+ pattern.lastIndex = 0;
202
+ return text.match(pattern)?.length ?? 0;
203
+ }
204
+ function keyBlockPattern(labelPattern) {
205
+ const keyLabel = `${labelPattern}PRIVATE KEY-{5}`;
206
+ return new RegExp(`-{5}BEGIN ${keyLabel}[\\s\\S]+?-{5}END ${keyLabel}`, "g");
207
+ }
208
+ function replaceMatches(text, pattern, replacement) {
209
+ pattern.lastIndex = 0;
210
+ return text.replace(pattern, replacement);
211
+ }
212
+ function redactAssignment(text, pattern, replacement) {
213
+ pattern.lastIndex = 0;
214
+ return text.replace(pattern, (match) => {
215
+ const separatorIndex = match.search(/[:=]/);
216
+ if (separatorIndex < 0)
217
+ return replacement;
218
+ return `${match.slice(0, separatorIndex + 1)} ${replacement}`;
219
+ });
220
+ }
221
+ function findKeywordValueRanges(text, keywords, valueMatcher) {
222
+ const lower = text.toLowerCase();
223
+ const ranges = [];
224
+ for (const keyword of keywords) {
225
+ let searchFrom = 0;
226
+ const normalizedKeyword = keyword.toLowerCase();
227
+ while (searchFrom < lower.length) {
228
+ const keywordStart = lower.indexOf(normalizedKeyword, searchFrom);
229
+ if (keywordStart < 0)
230
+ break;
231
+ searchFrom = keywordStart + normalizedKeyword.length;
232
+ if (!hasKeywordBoundaries(lower, keywordStart, normalizedKeyword.length)) {
233
+ continue;
234
+ }
235
+ const valueStart = skipValuePrefix(text, searchFrom);
236
+ const valueEnd = valueMatcher(text, valueStart);
237
+ if (valueEnd > valueStart) {
238
+ ranges.push({ start: keywordStart, end: valueEnd });
239
+ }
240
+ }
241
+ }
242
+ return mergeRanges(ranges);
243
+ }
244
+ function hasKeywordBoundaries(text, start, length) {
245
+ return (!isIdentifierChar(text[start - 1] ?? "") &&
246
+ !isIdentifierChar(text[start + length] ?? ""));
247
+ }
248
+ function skipValuePrefix(text, offset) {
249
+ let cursor = offset;
250
+ while (cursor < text.length && isWhitespace(text[cursor]))
251
+ cursor += 1;
252
+ if (text[cursor] === ":" || text[cursor] === "=")
253
+ cursor += 1;
254
+ while (cursor < text.length && isWhitespace(text[cursor]))
255
+ cursor += 1;
256
+ return cursor;
257
+ }
258
+ function alphaNumericValue(minLength, maxLength) {
259
+ return boundedValue((value) => /[A-Za-z0-9]/.test(value), minLength, maxLength);
260
+ }
261
+ function alphaNumericDashValue(minLength, maxLength) {
262
+ return boundedValue((value) => /[A-Za-z0-9-]/.test(value), minLength, maxLength);
263
+ }
264
+ function digitValue(minLength, maxLength) {
265
+ return boundedValue((value) => /[0-9]/.test(value), minLength, maxLength);
266
+ }
267
+ function taxIdentifierValue(text, offset) {
268
+ let cursor = offset;
269
+ let digits = 0;
270
+ while (cursor < text.length &&
271
+ (/[0-9]/.test(text[cursor]) || text[cursor] === "-")) {
272
+ if (/[0-9]/.test(text[cursor]))
273
+ digits += 1;
274
+ cursor += 1;
275
+ }
276
+ return digits === 9 && !isIdentifierChar(text[cursor] ?? "")
277
+ ? cursor
278
+ : offset;
279
+ }
280
+ function boundedValue(isAllowed, minLength, maxLength) {
281
+ return (text, offset) => {
282
+ let cursor = offset;
283
+ while (cursor < text.length && isAllowed(text[cursor])) {
284
+ cursor += 1;
285
+ if (cursor - offset > maxLength)
286
+ return offset;
287
+ }
288
+ const length = cursor - offset;
289
+ return length >= minLength && !isIdentifierChar(text[cursor] ?? "")
290
+ ? cursor
291
+ : offset;
292
+ };
293
+ }
294
+ function mergeRanges(ranges) {
295
+ return ranges
296
+ .sort((left, right) => left.start - right.start)
297
+ .filter((range, index, sorted) => index === 0 || range.start >= sorted[index - 1].end);
298
+ }
299
+ function redactRanges(text, ranges, replacement) {
300
+ return ranges
301
+ .slice()
302
+ .reverse()
303
+ .reduce((redacted, range) => `${redacted.slice(0, range.start)}${replacement}${redacted.slice(range.end)}`, text);
304
+ }
305
+ function isWhitespace(value) {
306
+ return value === " " || value === "\t" || value === "\n" || value === "\r";
307
+ }
308
+ function isIdentifierChar(value) {
309
+ return /[A-Za-z0-9_-]/.test(value);
310
+ }
311
+ function uniqueCategories(findings) {
312
+ return [...new Set(findings.map((finding) => finding.category))];
313
+ }
314
+ function uniqueRecommendations(categories) {
315
+ const recommendations = categories.flatMap(recommendationsForCategory);
316
+ return [...new Set(recommendations)];
317
+ }
318
+ function uniqueRedactionMarkers(findings) {
319
+ return [...new Set(findings.map((finding) => finding.redactionMarker))];
320
+ }
321
+ function recommendationsForCategory(category) {
322
+ if (category === "payment_data") {
323
+ return ["block", "redact", "tokenize", "purge"];
324
+ }
325
+ if (category === "sensitive_pii") {
326
+ return ["block", "redact", "encrypt", "tokenize", "purge"];
327
+ }
328
+ return ["block", "redact", "purge"];
329
+ }
330
+ function sanitizedReasons(findings) {
331
+ if (findings.length === 0)
332
+ return ["no restricted data detected"];
333
+ return findings.map((finding) => {
334
+ return `${finding.ruleId}: ${finding.summary}`;
335
+ });
336
+ }
337
+ function auditSummaryFor(boundary, categories) {
338
+ if (categories.length === 0)
339
+ return `${boundary}: allow restricted-data check`;
340
+ return `${boundary}: blocked restricted-data categories ${categories.join(", ")}`;
341
+ }
342
+ function decisionIdFor(request, categories, recommendations) {
343
+ const findingSummary = request.classification.findings
344
+ .map((finding) => `${finding.ruleId}:${finding.occurrenceCount}`)
345
+ .join("|");
346
+ const digest = createHash("sha256")
347
+ .update([
348
+ request.requestId,
349
+ request.boundary,
350
+ categories.join(","),
351
+ recommendations.join(","),
352
+ findingSummary,
353
+ ].join("|"))
354
+ .digest("base64url")
355
+ .slice(0, 16);
356
+ return `restricted-policy-${digest}`;
357
+ }
358
+ //# sourceMappingURL=restricted-data-classifier.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"restricted-data-classifier.js","sourceRoot":"","sources":["../../src/security/restricted-data-classifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AAsBrC,MAAM,eAAe,GACnB,+EAA+E,CAAC;AAClF,MAAM,aAAa,GAAG,mCAAmC,CAAC;AAC1D,MAAM,uBAAuB,GAC3B,yKAAyK,CAAC;AAC5K,MAAM,UAAU,GAAG,2DAA2D,CAAC;AAC/E,MAAM,iBAAiB,GAAG,eAAe,CAAC,kBAAkB,CAAC,CAAC;AAC9D,MAAM,wBAAwB,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;AAC7D,MAAM,UAAU,GAAG,qDAAqD,CAAC;AACzE,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAC5C,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,iBAAiB,EAAE,cAAc,CAAC,CAAC;AACzE,MAAM,eAAe,GAAG;IACtB,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;IAChB,IAAI;CACL,CAAC;AACF,MAAM,qBAAqB,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACvD,MAAM,mBAAmB,GAAG;IAC1B,SAAS;IACT,gBAAgB;IAChB,SAAS;IACT,gBAAgB;IAChB,aAAa;CACd,CAAC;AAEF,MAAM,eAAe,GAAG;IACtB,IAAI,CAAC,UAAU,EAAE,qBAAqB,EAAE,gCAAgC,EAAE;QACxE,MAAM,EAAE,qBAAqB;QAC7B,OAAO,EAAE,kDAAkD;QAC3D,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,eAAe,CAAC;QACrD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,gBAAgB,CAAC,IAAI,EAAE,eAAe,EAAE,qBAAqB,CAAC;KACjE,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,gCAAgC,EAAE;QAC/D,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,oCAAoC;QAC7C,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,aAAa,CAAC;QACnD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,mBAAmB,CAAC;KAC3E,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,8BAA8B,EAAE;QAClE,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,wDAAwD;QACjE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,uBAAuB,CAAC;QAC7D,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,EAAE,mBAAmB,CAAC;KACvE,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;QACnD,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,wCAAwC;QACjD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC;QAChD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,mBAAmB,CAAC;KACxE,CAAC;IACF,IAAI,CAAC,aAAa,EAAE,iBAAiB,EAAE,4BAA4B,EAAE;QACnE,MAAM,EAAE,wBAAwB;QAChC,OAAO,EAAE,+CAA+C;QACxD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,iBAAiB,CAAC;QACvD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,cAAc,CAAC,IAAI,EAAE,iBAAiB,EAAE,wBAAwB,CAAC;KACpE,CAAC;IACF,IAAI,CAAC,aAAa,EAAE,qBAAqB,EAAE,gCAAgC,EAAE;QAC3E,MAAM,EAAE,wBAAwB;QAChC,OAAO,EAAE,+CAA+C;QACxD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,wBAAwB,CAAC;QAC9D,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,cAAc,CAAC,IAAI,EAAE,wBAAwB,EAAE,wBAAwB,CAAC;KAC3E,CAAC;IACF,IAAI,CAAC,cAAc,EAAE,kBAAkB,EAAE,wBAAwB,EAAE;QACjE,MAAM,EAAE,yBAAyB;QACjC,OAAO,EAAE,wDAAwD;QACjE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,2BAA2B,CAAC,IAAI,EAAE,yBAAyB,CAAC;KAC/D,CAAC;IACF,IAAI,CAAC,cAAc,EAAE,kBAAkB,EAAE,wBAAwB,EAAE;QACjE,MAAM,EAAE,yBAAyB;QACjC,OAAO,EAAE,sDAAsD;QAC/D,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC;QAChD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,yBAAyB,CAAC;KAChE,CAAC;IACF,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,oBAAoB,EAAE;QACjD,MAAM,EAAE,0BAA0B;QAClC,OAAO,EAAE,6CAA6C;QACtD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC;QAChD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,0BAA0B,CAAC;KAC/D,CAAC;IACF,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,yBAAyB,EAAE;QAC3D,MAAM,EAAE,0BAA0B;QAClC,OAAO,EAAE,2CAA2C;QACpD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;aACpE,MAAM;QACX,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,YAAY,CACV,IAAI,EACJ,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EACvE,0BAA0B,CAC3B;KACJ,CAAC;IACF,IAAI,CAAC,eAAe,EAAE,gBAAgB,EAAE,+BAA+B,EAAE;QACvE,MAAM,EAAE,0BAA0B;QAClC,OAAO,EAAE,iDAAiD;QAC1D,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,sBAAsB,CACpB,IAAI,EACJ,eAAe,EACf,qBAAqB,CAAC,CAAC,EAAE,EAAE,CAAC,CAC7B,CAAC,MAAM;QACV,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,YAAY,CACV,IAAI,EACJ,sBAAsB,CACpB,IAAI,EACJ,eAAe,EACf,qBAAqB,CAAC,CAAC,EAAE,EAAE,CAAC,CAC7B,EACD,0BAA0B,CAC3B;KACJ,CAAC;IACF,IAAI,CAAC,eAAe,EAAE,gBAAgB,EAAE,+BAA+B,EAAE;QACvE,MAAM,EAAE,0BAA0B;QAClC,OAAO,EAAE,sCAAsC;QAC/C,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,sBAAsB,CAAC,IAAI,EAAE,qBAAqB,EAAE,kBAAkB,CAAC;aACpE,MAAM;QACX,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,YAAY,CACV,IAAI,EACJ,sBAAsB,CAAC,IAAI,EAAE,qBAAqB,EAAE,kBAAkB,CAAC,EACvE,0BAA0B,CAC3B;KACJ,CAAC;IACF,IAAI,CAAC,eAAe,EAAE,cAAc,EAAE,6BAA6B,EAAE;QACnE,MAAM,EAAE,0BAA0B;QAClC,OAAO,EAAE,oDAAoD;QAC7D,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,sBAAsB,CAAC,IAAI,EAAE,mBAAmB,EAAE,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;aACjE,MAAM;QACX,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,YAAY,CACV,IAAI,EACJ,sBAAsB,CAAC,IAAI,EAAE,mBAAmB,EAAE,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EACpE,0BAA0B,CAC3B;KACJ,CAAC;CACM,CAAC;AAEX,MAAM,UAAU,sBAAsB,CACpC,IAAY;IAEZ,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;QAC7C,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,eAAe,GAAG,CAAC;YAAE,SAAS;QAClC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC;QAC1D,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IACD,OAAO;QACL,iBAAiB,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC;QACtC,QAAQ;QACR,YAAY;QACZ,cAAc,EAAE,QAAQ,CAAC,MAAM,CAC7B,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,GAAG,OAAO,CAAC,eAAe,EAC/C,CAAC,CACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,OAAwC;IAExC,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACrE,MAAM,eAAe,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO;QACL,UAAU,EAAE,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,eAAe,CAAC;QAC/D,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;QACtC,UAAU;QACV,eAAe;QACf,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,cAAc;QACrD,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QAChD,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QACnD,gBAAgB,EAAE,gBAAgB,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC;QACnE,YAAY,EAAE,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,KAKrD;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC/D,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC,CAAC;IACJ,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACnE,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS;YAC3B,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE;YACzC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU;YAC5B,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE;YAC3C,CAAC,CAAC,EAAE,CAAC;QACP,UAAU;QACV,QAAQ;QACR,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,cAAc;QACnD,gBAAgB,EAAE,sBAAsB,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC;QACvE,gBAAgB,EAAE,gBAAgB,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC;QACjE,kBAAkB,EAAE,KAAK;QACzB,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc;YAChC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE;YACnD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc;YAChC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE;YACnD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CACX,QAAgC,EAChC,IAAY,EACZ,MAAc,EACd,KAA+D;IAE/D,OAAO;QACL,QAAQ;QACR,IAAI;QACJ,MAAM;QACN,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,cAAkC,EAClC,eAAuB;IAEvB,OAAO;QACL,QAAQ,EAAE,cAAc,CAAC,QAAQ;QACjC,IAAI,EAAE,cAAc,CAAC,IAAI;QACzB,MAAM,EAAE,cAAc,CAAC,MAAM;QAC7B,UAAU,EAAE,MAAM;QAClB,QAAQ,EAAE,UAAU;QACpB,eAAe;QACf,eAAe,EAAE,cAAc,CAAC,MAAM;QACtC,OAAO,EAAE,cAAc,CAAC,OAAO;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,OAAe;IACjD,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,eAAe,CAAC,YAAoB;IAC3C,MAAM,QAAQ,GAAG,GAAG,YAAY,iBAAiB,CAAC;IAClD,OAAO,IAAI,MAAM,CAAC,aAAa,QAAQ,qBAAqB,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,cAAc,CACrB,IAAY,EACZ,OAAe,EACf,WAAmB;IAEnB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAY,EACZ,OAAe,EACf,WAAmB;IAEnB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACrC,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,cAAc,GAAG,CAAC;YAAE,OAAO,WAAW,CAAC;QAC3C,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC;AASD,SAAS,sBAAsB,CAC7B,IAAY,EACZ,QAAkB,EAClB,YAA0B;IAE1B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAChD,OAAO,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;YAClE,IAAI,YAAY,GAAG,CAAC;gBAAE,MAAM;YAC5B,UAAU,GAAG,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC;YACrD,IACE,CAAC,oBAAoB,CAAC,KAAK,EAAE,YAAY,EAAE,iBAAiB,CAAC,MAAM,CAAC,EACpE,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAChD,IAAI,QAAQ,GAAG,UAAU,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAY,EACZ,KAAa,EACb,MAAc;IAEd,OAAO,CACL,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,MAAc;IACnD,IAAI,MAAM,GAAG,MAAM,CAAC;IACpB,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAE,CAAC;QAAE,MAAM,IAAI,CAAC,CAAC;IACxE,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG;QAAE,MAAM,IAAI,CAAC,CAAC;IAC9D,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAE,CAAC;QAAE,MAAM,IAAI,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB,EAAE,SAAiB;IAC7D,OAAO,YAAY,CACjB,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EACpC,SAAS,EACT,SAAS,CACV,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,SAAiB,EACjB,SAAiB;IAEjB,OAAO,YAAY,CACjB,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EACrC,SAAS,EACT,SAAS,CACV,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,EAAE,SAAiB;IACtD,OAAO,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,MAAc;IACtD,IAAI,MAAM,GAAG,MAAM,CAAC;IACpB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OACE,MAAM,GAAG,IAAI,CAAC,MAAM;QACpB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,EACrD,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAE,CAAC;YAAE,MAAM,IAAI,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,CAAC;IACd,CAAC;IACD,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1D,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,MAAM,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CACnB,SAAqC,EACrC,SAAiB,EACjB,SAAiB;IAEjB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QACtB,IAAI,MAAM,GAAG,MAAM,CAAC;QACpB,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAE,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,CAAC,CAAC;YACZ,IAAI,MAAM,GAAG,MAAM,GAAG,SAAS;gBAAE,OAAO,MAAM,CAAC;QACjD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;QAC/B,OAAO,MAAM,IAAI,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjE,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,MAAM,CAAC;IACb,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAmB;IACtC,OAAO,MAAM;SACV,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;SAC/C,MAAM,CACL,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CACvB,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,GAAG,CACvD,CAAC;AACN,CAAC;AAED,SAAS,YAAY,CACnB,IAAY,EACZ,MAAmB,EACnB,WAAmB;IAEnB,OAAO,MAAM;SACV,KAAK,EAAE;SACP,OAAO,EAAE;SACT,MAAM,CACL,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAClB,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAC/E,IAAI,CACL,CAAC;AACN,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC;AAC7E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAiC;IAEjC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,qBAAqB,CAC5B,UAAoC;IAEpC,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAiC;IAC/D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,0BAA0B,CACjC,QAAgC;IAEhC,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QAChC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;QACjC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAiC;IACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAClE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,OAAO,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,QAAqD,EACrD,UAAoC;IAEpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QACzB,OAAO,GAAG,QAAQ,+BAA+B,CAAC;IACpD,OAAO,GAAG,QAAQ,wCAAwC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,aAAa,CACpB,OAAwC,EACxC,UAAoC,EACpC,eAAqD;IAErD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ;SACnD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;SAChE,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CACL;QACE,OAAO,CAAC,SAAS;QACjB,OAAO,CAAC,QAAQ;QAChB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QACpB,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;QACzB,cAAc;KACf,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ;SACA,MAAM,CAAC,WAAW,CAAC;SACnB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,qBAAqB,MAAM,EAAE,CAAC;AACvC,CAAC"}
@@ -1,5 +1,6 @@
1
1
  import { uniqueSortedStrings } from "./collection-utils.js";
2
2
  import { queryMemory, recordMemoryEvent, renderMemoryPacket, } from "./memory.js";
3
+ import { runtimeExecutionAdapters } from "./runtime-execution-adapters.js";
3
4
  import { listSkills } from "./skills-catalog-service.js";
4
5
  import { planSkillsForTask } from "./skills-planning.js";
5
6
  export async function renderSkills({ target, taskId, skillIds, root = process.cwd(), }) {
@@ -42,22 +43,14 @@ async function resolveRenderSkills({ taskId, skillIds, root, }) {
42
43
  return plan.selected.map((item) => item.skill);
43
44
  }
44
45
  function renderForTarget(target, skills, sourceGroups, taskId, memory) {
45
- if (target === "cursor") {
46
- return renderMarkdown(skills, sourceGroups, taskId, "Cursor Skill Context", "Use these Open Orchestra skills as task-scoped Cursor rules.", memory);
47
- }
48
- if (target === "windsurf") {
49
- return renderMarkdown(skills, sourceGroups, taskId, "Windsurf Skill Context", "Use these Open Orchestra skills as task-scoped Windsurf rules.", memory);
50
- }
51
- if (target === "claude") {
52
- return renderMarkdown(skills, sourceGroups, taskId, "Claude Skill Context", "Load only these Open Orchestra skills for this task.", memory);
53
- }
54
- if (target === "codex") {
55
- return renderMarkdown(skills, sourceGroups, taskId, "Codex Skill Context", "Apply these Open Orchestra skills while preserving AGENTS.md instructions.", memory);
56
- }
57
- if (target === "vscode") {
46
+ const adapter = runtimeExecutionAdapters.find((a) => a.target === target);
47
+ if (adapter?.skillRenderFormat === "json") {
58
48
  return JSON.stringify({ taskId, sourceGroups, skills, memory }, null, 2);
59
49
  }
60
- return renderMarkdown(skills, sourceGroups, taskId, "Open Orchestra Skill Context", "Provider-agnostic skill context for this task.", memory);
50
+ const title = adapter?.skillContextTitle ?? "Open Orchestra Skill Context";
51
+ const intro = adapter?.skillContextIntro ??
52
+ "Provider-agnostic skill context for this task.";
53
+ return renderMarkdown(skills, sourceGroups, taskId, title, intro, memory);
61
54
  }
62
55
  function renderMarkdown(skills, sourceGroups, taskId, title, intro, memory) {
63
56
  const lines = [
@@ -1 +1 @@
1
- {"version":3,"file":"skills-render.js","sourceRoot":"","sources":["../src/skills-render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EACjC,MAAM,EACN,MAAM,EACN,QAAQ,EACR,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,GAMrB;IAQC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,mBAAmB,CACtC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAC9C,CAAC;IACF,MAAM,WAAW,GAAG,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,IAAI,EAAE,uBAAuB;QAC7B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,IAAI;KACL,CAAC,CAAC;IACH,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO;QACL,MAAM;QACN,MAAM;QACN,MAAM;QACN,YAAY;QACZ,MAAM;QACN,OAAO,EAAE,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,EACjC,MAAM,EACN,QAAQ,EACR,IAAI,GAKL;IACC,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YACzB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,eAAe,CACtB,MAAyB,EACzB,MAAe,EACf,YAAsB,EACtB,MAAe,EACf,MAAqB;IAErB,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,cAAc,CACnB,MAAM,EACN,YAAY,EACZ,MAAM,EACN,sBAAsB,EACtB,8DAA8D,EAC9D,MAAM,CACP,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1B,OAAO,cAAc,CACnB,MAAM,EACN,YAAY,EACZ,MAAM,EACN,wBAAwB,EACxB,gEAAgE,EAChE,MAAM,CACP,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,cAAc,CACnB,MAAM,EACN,YAAY,EACZ,MAAM,EACN,sBAAsB,EACtB,sDAAsD,EACtD,MAAM,CACP,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,cAAc,CACnB,MAAM,EACN,YAAY,EACZ,MAAM,EACN,qBAAqB,EACrB,4EAA4E,EAC5E,MAAM,CACP,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,cAAc,CACnB,MAAM,EACN,YAAY,EACZ,MAAM,EACN,8BAA8B,EAC9B,gDAAgD,EAChD,MAAM,CACP,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,MAAe,EACf,YAAsB,EACtB,MAA0B,EAC1B,KAAa,EACb,KAAa,EACb,MAAqB;IAErB,MAAM,KAAK,GAAG;QACZ,KAAK,KAAK,EAAE;QACZ,EAAE;QACF,KAAK;QACL,EAAE;QACF,SAAS,MAAM,IAAI,0BAA0B,EAAE;QAC/C,EAAE;QACF,kBAAkB;QAClB,EAAE;QACF,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QAC5C,EAAE;QACF,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,MAAM,KAAK,CAAC,IAAI,EAAE,EAClB,EAAE,EACF,OAAO,KAAK,CAAC,EAAE,EAAE,EACjB,EAAE,EACF,KAAK,CAAC,OAAO,EACb,EAAE,EACF,eAAe,EACf,EAAE,EACF,KAAK,KAAK,CAAC,KAAK,EAAE,EAClB,EAAE,EACF,eAAe,EACf,EAAE,EACF,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,KAAK,WAAW,EAAE,CAAC,EAC9D,EAAE,EACF,cAAc,EACd,EAAE,EACF,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,EACpD,EAAE,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
1
+ {"version":3,"file":"skills-render.js","sourceRoot":"","sources":["../src/skills-render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EACjC,MAAM,EACN,MAAM,EACN,QAAQ,EACR,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,GAMrB;IAQC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,mBAAmB,CACtC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAC9C,CAAC;IACF,MAAM,WAAW,GAAG,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,IAAI,EAAE,uBAAuB;QAC7B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,IAAI;KACL,CAAC,CAAC;IACH,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO;QACL,MAAM;QACN,MAAM;QACN,MAAM;QACN,YAAY;QACZ,MAAM;QACN,OAAO,EAAE,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,EACjC,MAAM,EACN,QAAQ,EACR,IAAI,GAKL;IACC,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YACzB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,eAAe,CACtB,MAAyB,EACzB,MAAe,EACf,YAAsB,EACtB,MAAe,EACf,MAAqB;IAErB,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAC1E,IAAI,OAAO,EAAE,iBAAiB,KAAK,MAAM,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,EAAE,iBAAiB,IAAI,8BAA8B,CAAC;IAC3E,MAAM,KAAK,GACT,OAAO,EAAE,iBAAiB;QAC1B,gDAAgD,CAAC;IACnD,OAAO,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,cAAc,CACrB,MAAe,EACf,YAAsB,EACtB,MAA0B,EAC1B,KAAa,EACb,KAAa,EACb,MAAqB;IAErB,MAAM,KAAK,GAAG;QACZ,KAAK,KAAK,EAAE;QACZ,EAAE;QACF,KAAK;QACL,EAAE;QACF,SAAS,MAAM,IAAI,0BAA0B,EAAE;QAC/C,EAAE;QACF,kBAAkB;QAClB,EAAE;QACF,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QAC5C,EAAE;QACF,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,MAAM,KAAK,CAAC,IAAI,EAAE,EAClB,EAAE,EACF,OAAO,KAAK,CAAC,EAAE,EAAE,EACjB,EAAE,EACF,KAAK,CAAC,OAAO,EACb,EAAE,EACF,eAAe,EACf,EAAE,EACF,KAAK,KAAK,CAAC,KAAK,EAAE,EAClB,EAAE,EACF,eAAe,EACf,EAAE,EACF,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,KAAK,WAAW,EAAE,CAAC,EAC9D,EAAE,EACF,cAAc,EACd,EAAE,EACF,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,EACpD,EAAE,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
@@ -1,6 +1,8 @@
1
+ import type { RestrictedDataAuditEvent } from "./types/restricted-data.js";
1
2
  export interface TelemetryRedactionReport {
2
3
  redactedFields: string[];
3
4
  blockedFields: string[];
5
+ restrictedEvents?: RestrictedDataAuditEvent[];
4
6
  }
5
7
  export declare function redactTelemetryData<T>(value: T): {
6
8
  value: T;
@@ -1,3 +1,4 @@
1
+ import { classifyRestrictedData, restrictedAuditEventForClassification, } from "./security/restricted-data-classifier.js";
1
2
  export function redactTelemetryData(value) {
2
3
  const report = {
3
4
  redactedFields: [],
@@ -45,9 +46,26 @@ function redactString(value, fieldPath, report) {
45
46
  output = applyRedactionReplacement(output, pattern, replacement);
46
47
  }
47
48
  if (output !== value) {
49
+ addRedactedField(report, fieldPath);
50
+ }
51
+ const restrictedClassification = classifyRestrictedData(output);
52
+ if (!restrictedClassification.hasRestrictedData)
53
+ return output;
54
+ addRedactedField(report, fieldPath);
55
+ report.restrictedEvents = [
56
+ ...(report.restrictedEvents ?? []),
57
+ restrictedAuditEventForClassification({
58
+ eventType: "restricted_telemetry_redacted",
59
+ sourceId: fieldPath || "telemetry",
60
+ classification: restrictedClassification,
61
+ }),
62
+ ];
63
+ return restrictedClassification.redactedText;
64
+ }
65
+ function addRedactedField(report, fieldPath) {
66
+ if (!report.redactedFields.includes(fieldPath)) {
48
67
  report.redactedFields.push(fieldPath);
49
68
  }
50
- return output;
51
69
  }
52
70
  function redactEmailLikeTokens(value) {
53
71
  const parts = [];
@@ -86,9 +104,14 @@ function applyRedactionReplacement(value, pattern, replacement) {
86
104
  return value.replace(pattern, replacement);
87
105
  }
88
106
  export function mergeRedactionReports(reports) {
89
- return {
107
+ const restrictedEvents = reports.flatMap((report) => report.restrictedEvents ?? []);
108
+ const merged = {
90
109
  redactedFields: Array.from(new Set(reports.flatMap((report) => report.redactedFields))),
91
110
  blockedFields: Array.from(new Set(reports.flatMap((report) => report.blockedFields))),
92
111
  };
112
+ if (restrictedEvents.length > 0) {
113
+ merged.restrictedEvents = restrictedEvents;
114
+ }
115
+ return merged;
93
116
  }
94
117
  //# sourceMappingURL=telemetry-redaction.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"telemetry-redaction.js","sourceRoot":"","sources":["../src/telemetry-redaction.ts"],"names":[],"mappings":"AAKA,MAAM,UAAU,mBAAmB,CAAI,KAAQ;IAI7C,MAAM,MAAM,GAA6B;QACvC,cAAc,EAAE,EAAE;QAClB,aAAa,EAAE,EAAE;KAClB,CAAC;IACF,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,CAAM,CAAC;IACrD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,WAAW,CAClB,KAAc,EACd,YAAsB,EACtB,MAAgC;IAEhC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,YAAY,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC/B,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YAC1C,GAAG;YACH,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;SACrD,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CACnB,KAAa,EACb,SAAiB,EACjB,MAAgC;IAEhC,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,YAAY,GAA0D;QAC1E,CAAC,yCAAyC,EAAE,kBAAkB,CAAC;QAC/D,CAAC,4BAA4B,EAAE,yBAAyB,CAAC;QACzD;YACE,6CAA6C;YAC7C,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB;SACrD;QACD;YACE,iEAAiE;YACjE,kBAAkB;SACnB;QACD,CAAC,mBAAmB,EAAE,wBAAwB,CAAC;KAChD,CAAC;IACF,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,YAAY,EAAE,CAAC;QAClD,MAAM,GAAG,yBAAyB,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACjE,KAAK,GAAG,EAAE,CAAC;YACb,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,KAAK,IAAI,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,QAAQ,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC;AAC7E,CAAC;AAED,SAAS,yBAAyB,CAChC,KAAa,EACb,OAAe,EACf,WAAiD;IAEjD,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAmC;IAEnC,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,IAAI,CACxB,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAC5D;QACD,aAAa,EAAE,KAAK,CAAC,IAAI,CACvB,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAC3D;KACF,CAAC;AACJ,CAAC"}
1
+ {"version":3,"file":"telemetry-redaction.js","sourceRoot":"","sources":["../src/telemetry-redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,qCAAqC,GACtC,MAAM,0CAA0C,CAAC;AASlD,MAAM,UAAU,mBAAmB,CAAI,KAAQ;IAI7C,MAAM,MAAM,GAA6B;QACvC,cAAc,EAAE,EAAE;QAClB,aAAa,EAAE,EAAE;KAClB,CAAC;IACF,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,CAAM,CAAC;IACrD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,WAAW,CAClB,KAAc,EACd,YAAsB,EACtB,MAAgC;IAEhC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,YAAY,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC/B,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YAC1C,GAAG;YACH,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;SACrD,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CACnB,KAAa,EACb,SAAiB,EACjB,MAAgC;IAEhC,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,YAAY,GAA0D;QAC1E,CAAC,yCAAyC,EAAE,kBAAkB,CAAC;QAC/D,CAAC,4BAA4B,EAAE,yBAAyB,CAAC;QACzD;YACE,6CAA6C;YAC7C,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB;SACrD;QACD;YACE,iEAAiE;YACjE,kBAAkB;SACnB;QACD,CAAC,mBAAmB,EAAE,wBAAwB,CAAC;KAChD,CAAC;IACF,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,YAAY,EAAE,CAAC;QAClD,MAAM,GAAG,yBAAyB,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,wBAAwB,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,wBAAwB,CAAC,iBAAiB;QAAE,OAAO,MAAM,CAAC;IAC/D,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpC,MAAM,CAAC,gBAAgB,GAAG;QACxB,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAClC,qCAAqC,CAAC;YACpC,SAAS,EAAE,+BAA+B;YAC1C,QAAQ,EAAE,SAAS,IAAI,WAAW;YAClC,cAAc,EAAE,wBAAwB;SACzC,CAAC;KACH,CAAC;IACF,OAAO,wBAAwB,CAAC,YAAY,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAgC,EAChC,SAAiB;IAEjB,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACjE,KAAK,GAAG,EAAE,CAAC;YACb,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,KAAK,IAAI,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,QAAQ,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC;AAC7E,CAAC;AAED,SAAS,yBAAyB,CAChC,KAAa,EACb,OAAe,EACf,WAAiD;IAEjD,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAmC;IAEnC,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CACtC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAC1C,CAAC;IACF,MAAM,MAAM,GAA6B;QACvC,cAAc,EAAE,KAAK,CAAC,IAAI,CACxB,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAC5D;QACD,aAAa,EAAE,KAAK,CAAC,IAAI,CACvB,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAC3D;KACF,CAAC;IACF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}