@jterrats/open-orchestra 1.0.17 → 1.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +44 -0
- package/CLAUDE.md +1 -0
- package/dist/active-runtime-store.d.ts +18 -0
- package/dist/active-runtime-store.js +75 -0
- package/dist/active-runtime-store.js.map +1 -0
- package/dist/chat-api-errors.d.ts +7 -0
- package/dist/chat-api-errors.js +15 -0
- package/dist/chat-api-errors.js.map +1 -0
- package/dist/chat-api-message-persistence.d.ts +12 -0
- package/dist/chat-api-message-persistence.js +125 -0
- package/dist/chat-api-message-persistence.js.map +1 -0
- package/dist/chat-api-records.d.ts +35 -0
- package/dist/chat-api-records.js +94 -0
- package/dist/chat-api-records.js.map +1 -0
- package/dist/chat-api-service.d.ts +32 -0
- package/dist/chat-api-service.js +120 -0
- package/dist/chat-api-service.js.map +1 -0
- package/dist/chat-api-storage.d.ts +1 -0
- package/dist/chat-api-storage.js +14 -0
- package/dist/chat-api-storage.js.map +1 -0
- package/dist/chat-api-types.d.ts +81 -0
- package/dist/chat-api-types.js +2 -0
- package/dist/chat-api-types.js.map +1 -0
- package/dist/chat-compliance-service.d.ts +60 -0
- package/dist/chat-compliance-service.js +241 -0
- package/dist/chat-compliance-service.js.map +1 -0
- package/dist/chat-event-stream.d.ts +13 -0
- package/dist/chat-event-stream.js +124 -0
- package/dist/chat-event-stream.js.map +1 -0
- package/dist/chat-pagination.d.ts +6 -0
- package/dist/chat-pagination.js +64 -0
- package/dist/chat-pagination.js.map +1 -0
- package/dist/chat-storage-actor-validation.d.ts +4 -0
- package/dist/chat-storage-actor-validation.js +65 -0
- package/dist/chat-storage-actor-validation.js.map +1 -0
- package/dist/chat-storage-content-policy.d.ts +6 -0
- package/dist/chat-storage-content-policy.js +84 -0
- package/dist/chat-storage-content-policy.js.map +1 -0
- package/dist/chat-storage-errors.d.ts +20 -0
- package/dist/chat-storage-errors.js +17 -0
- package/dist/chat-storage-errors.js.map +1 -0
- package/dist/chat-storage-local-files.d.ts +17 -0
- package/dist/chat-storage-local-files.js +78 -0
- package/dist/chat-storage-local-files.js.map +1 -0
- package/dist/chat-storage-local-paths.d.ts +6 -0
- package/dist/chat-storage-local-paths.js +124 -0
- package/dist/chat-storage-local-paths.js.map +1 -0
- package/dist/chat-storage-local-projection.d.ts +10 -0
- package/dist/chat-storage-local-projection.js +55 -0
- package/dist/chat-storage-local-projection.js.map +1 -0
- package/dist/chat-storage-local-records.d.ts +13 -0
- package/dist/chat-storage-local-records.js +56 -0
- package/dist/chat-storage-local-records.js.map +1 -0
- package/dist/chat-storage-local.d.ts +6 -0
- package/dist/chat-storage-local.js +114 -0
- package/dist/chat-storage-local.js.map +1 -0
- package/dist/chat-storage-validation.d.ts +10 -0
- package/dist/chat-storage-validation.js +100 -0
- package/dist/chat-storage-validation.js.map +1 -0
- package/dist/chat-storage.d.ts +16 -0
- package/dist/chat-storage.js +4 -0
- package/dist/chat-storage.js.map +1 -0
- package/dist/chat-workflow-timeline.d.ts +17 -0
- package/dist/chat-workflow-timeline.js +210 -0
- package/dist/chat-workflow-timeline.js.map +1 -0
- package/dist/{workspace-claude-settings.d.ts → claude-settings.d.ts} +22 -3
- package/dist/{workspace-claude-settings.js → claude-settings.js} +28 -9
- package/dist/claude-settings.js.map +1 -0
- package/dist/command-init.d.ts +2 -0
- package/dist/command-init.js +150 -0
- package/dist/command-init.js.map +1 -0
- package/dist/command-manifest.js +1 -1
- package/dist/command-manifest.js.map +1 -1
- package/dist/commands.d.ts +1 -1
- package/dist/commands.js +1 -140
- package/dist/commands.js.map +1 -1
- package/dist/constants.d.ts +1 -0
- package/dist/constants.js +1 -0
- package/dist/constants.js.map +1 -1
- package/dist/context-runtime-preprocessor.d.ts +41 -0
- package/dist/context-runtime-preprocessor.js +199 -0
- package/dist/context-runtime-preprocessor.js.map +1 -0
- package/dist/cursor-settings.d.ts +25 -0
- package/dist/cursor-settings.js +72 -0
- package/dist/cursor-settings.js.map +1 -0
- package/dist/health-commands.js +43 -3
- package/dist/health-commands.js.map +1 -1
- package/dist/model-aliases.d.ts +5 -0
- package/dist/model-aliases.js +37 -0
- package/dist/model-aliases.js.map +1 -0
- package/dist/ollama-provider.js +25 -0
- package/dist/ollama-provider.js.map +1 -1
- package/dist/phase-playbooks.js +11 -0
- package/dist/phase-playbooks.js.map +1 -1
- package/dist/provider-agent-wrapper.js +14 -0
- package/dist/provider-agent-wrapper.js.map +1 -1
- package/dist/qa-e2e-artifacts.js +71 -3
- package/dist/qa-e2e-artifacts.js.map +1 -1
- package/dist/runtime-adapters.js +56 -0
- package/dist/runtime-adapters.js.map +1 -1
- package/dist/runtime-bootstrap.js +32 -22
- package/dist/runtime-bootstrap.js.map +1 -1
- package/dist/runtime-child-prompt.js +8 -0
- package/dist/runtime-child-prompt.js.map +1 -1
- package/dist/runtime-context-manifest.d.ts +4 -1
- package/dist/runtime-context-manifest.js +59 -3
- package/dist/runtime-context-manifest.js.map +1 -1
- package/dist/runtime-execution-adapters.js +19 -0
- package/dist/runtime-execution-adapters.js.map +1 -1
- package/dist/runtime-execution-renderer.js +4 -0
- package/dist/runtime-execution-renderer.js.map +1 -1
- package/dist/runtime-execution.js +13 -82
- package/dist/runtime-execution.js.map +1 -1
- package/dist/runtime-hooks.d.ts +46 -0
- package/dist/runtime-hooks.js +95 -0
- package/dist/runtime-hooks.js.map +1 -0
- package/dist/runtime-parent-actions.js +5 -0
- package/dist/runtime-parent-actions.js.map +1 -1
- package/dist/runtime-spawn-bridge.js +1 -0
- package/dist/runtime-spawn-bridge.js.map +1 -1
- package/dist/runtime-spawn-guidance.js +15 -61
- package/dist/runtime-spawn-guidance.js.map +1 -1
- package/dist/security/chat-guardrail-policy.d.ts +7 -0
- package/dist/security/chat-guardrail-policy.js +61 -0
- package/dist/security/chat-guardrail-policy.js.map +1 -0
- package/dist/security/chat-guardrail-types.d.ts +65 -0
- package/dist/security/chat-guardrail-types.js +2 -0
- package/dist/security/chat-guardrail-types.js.map +1 -0
- package/dist/security/chat-guardrail-validation.d.ts +9 -0
- package/dist/security/chat-guardrail-validation.js +64 -0
- package/dist/security/chat-guardrail-validation.js.map +1 -0
- package/dist/security/chat-guardrails.d.ts +3 -0
- package/dist/security/chat-guardrails.js +136 -0
- package/dist/security/chat-guardrails.js.map +1 -0
- package/dist/security/content-classifier.js +33 -1
- package/dist/security/content-classifier.js.map +1 -1
- package/dist/security/payment-card-detection.d.ts +3 -0
- package/dist/security/payment-card-detection.js +48 -0
- package/dist/security/payment-card-detection.js.map +1 -0
- package/dist/security/policy-types.d.ts +1 -1
- package/dist/security/provider-egress-policy.d.ts +27 -0
- package/dist/security/provider-egress-policy.js +72 -0
- package/dist/security/provider-egress-policy.js.map +1 -0
- package/dist/security/public-api-auth.d.ts +20 -0
- package/dist/security/public-api-auth.js +55 -0
- package/dist/security/public-api-auth.js.map +1 -0
- package/dist/security/public-api-policy.d.ts +8 -0
- package/dist/security/public-api-policy.js +40 -0
- package/dist/security/public-api-policy.js.map +1 -0
- package/dist/security/redaction.js +44 -13
- package/dist/security/redaction.js.map +1 -1
- package/dist/security/restricted-content-quarantine.d.ts +17 -0
- package/dist/security/restricted-content-quarantine.js +50 -0
- package/dist/security/restricted-content-quarantine.js.map +1 -0
- package/dist/security/restricted-data-classifier.d.ts +9 -0
- package/dist/security/restricted-data-classifier.js +358 -0
- package/dist/security/restricted-data-classifier.js.map +1 -0
- package/dist/skills-render.js +7 -14
- package/dist/skills-render.js.map +1 -1
- package/dist/telemetry-redaction.d.ts +2 -0
- package/dist/telemetry-redaction.js +25 -2
- package/dist/telemetry-redaction.js.map +1 -1
- package/dist/types/chat.d.ts +203 -0
- package/dist/types/chat.js +10 -0
- package/dist/types/chat.js.map +1 -0
- package/dist/types/model-config.d.ts +4 -0
- package/dist/types/public-api.d.ts +75 -0
- package/dist/types/public-api.js +2 -0
- package/dist/types/public-api.js.map +1 -0
- package/dist/types/restricted-data.d.ts +69 -0
- package/dist/types/restricted-data.js +8 -0
- package/dist/types/restricted-data.js.map +1 -0
- package/dist/types/restricted-fragment.d.ts +82 -0
- package/dist/types/restricted-fragment.js +14 -0
- package/dist/types/restricted-fragment.js.map +1 -0
- package/dist/types/runtime.d.ts +12 -0
- package/dist/types.d.ts +6 -0
- package/dist/types.js.map +1 -1
- package/dist/web-api.js +24 -0
- package/dist/web-api.js.map +1 -1
- package/dist/web-artifact-parsers.d.ts +6 -0
- package/dist/web-artifact-parsers.js +266 -0
- package/dist/web-artifact-parsers.js.map +1 -0
- package/dist/web-artifact-types.d.ts +76 -0
- package/dist/web-artifact-types.js +2 -0
- package/dist/web-artifact-types.js.map +1 -0
- package/dist/web-artifacts.d.ts +2 -43
- package/dist/web-artifacts.js +106 -57
- package/dist/web-artifacts.js.map +1 -1
- package/dist/web-chat-route-inputs.d.ts +11 -0
- package/dist/web-chat-route-inputs.js +156 -0
- package/dist/web-chat-route-inputs.js.map +1 -0
- package/dist/web-chat-routes.d.ts +7 -0
- package/dist/web-chat-routes.js +213 -0
- package/dist/web-chat-routes.js.map +1 -0
- package/dist/web-console/assets/index-CJup1cIA.css +1 -0
- package/dist/web-console/assets/index-CVDOfipu.js +11 -0
- package/dist/web-console/index.html +2 -2
- package/dist/web-evidence.d.ts +1 -1
- package/dist/web-evidence.js +9 -2
- package/dist/web-evidence.js.map +1 -1
- package/dist/web-public-route-inputs.d.ts +14 -0
- package/dist/web-public-route-inputs.js +136 -0
- package/dist/web-public-route-inputs.js.map +1 -0
- package/dist/web-public-routes.d.ts +6 -0
- package/dist/web-public-routes.js +194 -0
- package/dist/web-public-routes.js.map +1 -0
- package/dist/web-public-service.d.ts +16 -0
- package/dist/web-public-service.js +154 -0
- package/dist/web-public-service.js.map +1 -0
- package/dist/workflow-services.js +5 -0
- package/dist/workflow-services.js.map +1 -1
- package/dist/workspace-runtime-bootstrap.js +15 -4
- package/dist/workspace-runtime-bootstrap.js.map +1 -1
- package/docs/chat-audit-retention.md +76 -0
- package/docs/chat-provider-provenance-ledger.md +75 -0
- package/docs/context-runtime-preprocessing.md +37 -0
- package/docs/orchestra-mvp.md +8 -2
- package/docs/public-api-contract.md +43 -0
- package/docs/release-test-matrix.md +14 -14
- package/docs/restricted-fragment-storage-contract.md +147 -0
- package/docs/runtime-adapters.md +40 -7
- package/docs/site-manifest.json +128 -30
- package/package.json +5 -2
- package/site/dist/_headers +9 -0
- package/site/dist/_redirects +2 -0
- package/site/dist/architecture.mmd +61 -0
- package/site/dist/assets/index-Bi8l6tCE.js +10 -0
- package/site/dist/assets/index-BsCLqY__.css +1 -0
- package/site/dist/favicon.svg +19 -0
- package/site/dist/index.html +28 -0
- package/site/package.json +19 -0
- package/dist/web-console/assets/index-BHs7OIv8.css +0 -1
- package/dist/web-console/assets/index-BJuVTqfQ.js +0 -11
- package/dist/workspace-claude-settings.js.map +0 -1
|
@@ -0,0 +1,358 @@
|
|
|
1
|
+
import { createHash } from "node:crypto";
|
|
2
|
+
import { hasPaymentCardLikeValue, redactPaymentCardLikeValues, } from "./payment-card-detection.js";
|
|
3
|
+
const passwordPattern = /\b(pass(?:word|phrase)?|pwd)\s*[:=]\s*(?:"[^"]{8,}"|'[^']{8,}'|[^\s"']{8,})/gi;
|
|
4
|
+
const bearerPattern = /\bbearer\s+[a-z0-9._~+/=-]{16,}/gi;
|
|
5
|
+
const secretAssignmentPattern = /\b(api[_-]?key|access[_-]?token|auth[_-]?token|client[_-]?secret|secret|session[_-]?token|token|webhook[_-]?secret)\s*[:=]\s*(?:"[^"]{12,}"|'[^']{12,}'|[^\s"']{12,})/gi;
|
|
6
|
+
const jwtPattern = /\beyJ[a-z0-9_-]{8,}[.][a-z0-9_-]{8,}[.][a-z0-9_-]{8,}\b/gi;
|
|
7
|
+
const privateKeyPattern = keyBlockPattern("(?:[A-Z0-9 ]+ )?");
|
|
8
|
+
const openSshPrivateKeyPattern = keyBlockPattern("OPENSSH ");
|
|
9
|
+
const cvvPattern = /\b(cvv|cvc|card security code)\s*[:=]\s*\d{3,4}\b/gi;
|
|
10
|
+
const ssnPattern = /\b\d{3}-\d{2}-\d{4}\b/g;
|
|
11
|
+
const passportKeywords = ["passport", "passport number", "passport no."];
|
|
12
|
+
const licenseKeywords = [
|
|
13
|
+
"driver license",
|
|
14
|
+
"driver's license",
|
|
15
|
+
"license number",
|
|
16
|
+
"dl",
|
|
17
|
+
];
|
|
18
|
+
const taxIdentifierKeywords = ["tax id", "tin", "ein"];
|
|
19
|
+
const bankAccountKeywords = [
|
|
20
|
+
"routing",
|
|
21
|
+
"routing number",
|
|
22
|
+
"account",
|
|
23
|
+
"account number",
|
|
24
|
+
"account no.",
|
|
25
|
+
];
|
|
26
|
+
const restrictedRules = [
|
|
27
|
+
rule("password", "password_assignment", "restricted.password.assignment", {
|
|
28
|
+
marker: "[REDACTED_PASSWORD]",
|
|
29
|
+
summary: "content contains password-shaped credential text",
|
|
30
|
+
detect: (text) => countMatches(text, passwordPattern),
|
|
31
|
+
redact: (text) => redactAssignment(text, passwordPattern, "[REDACTED_PASSWORD]"),
|
|
32
|
+
}),
|
|
33
|
+
rule("secret", "bearer_token", "restricted.secret.bearer-token", {
|
|
34
|
+
marker: "[REDACTED_SECRET]",
|
|
35
|
+
summary: "content contains bearer token text",
|
|
36
|
+
detect: (text) => countMatches(text, bearerPattern),
|
|
37
|
+
redact: (text) => replaceMatches(text, bearerPattern, "[REDACTED_SECRET]"),
|
|
38
|
+
}),
|
|
39
|
+
rule("secret", "secret_assignment", "restricted.secret.assignment", {
|
|
40
|
+
marker: "[REDACTED_SECRET]",
|
|
41
|
+
summary: "content contains token, key, or secret assignment text",
|
|
42
|
+
detect: (text) => countMatches(text, secretAssignmentPattern),
|
|
43
|
+
redact: (text) => redactAssignment(text, secretAssignmentPattern, "[REDACTED_SECRET]"),
|
|
44
|
+
}),
|
|
45
|
+
rule("secret", "jwt_token", "restricted.secret.jwt", {
|
|
46
|
+
marker: "[REDACTED_SECRET]",
|
|
47
|
+
summary: "content contains JWT-shaped token text",
|
|
48
|
+
detect: (text) => countMatches(text, jwtPattern),
|
|
49
|
+
redact: (text) => replaceMatches(text, jwtPattern, "[REDACTED_SECRET]"),
|
|
50
|
+
}),
|
|
51
|
+
rule("private_key", "pem_private_key", "restricted.private-key.pem", {
|
|
52
|
+
marker: "[REDACTED_PRIVATE_KEY]",
|
|
53
|
+
summary: "content contains private signing key material",
|
|
54
|
+
detect: (text) => countMatches(text, privateKeyPattern),
|
|
55
|
+
redact: (text) => replaceMatches(text, privateKeyPattern, "[REDACTED_PRIVATE_KEY]"),
|
|
56
|
+
}),
|
|
57
|
+
rule("private_key", "openssh_private_key", "restricted.private-key.openssh", {
|
|
58
|
+
marker: "[REDACTED_PRIVATE_KEY]",
|
|
59
|
+
summary: "content contains OpenSSH private key material",
|
|
60
|
+
detect: (text) => countMatches(text, openSshPrivateKeyPattern),
|
|
61
|
+
redact: (text) => replaceMatches(text, openSshPrivateKeyPattern, "[REDACTED_PRIVATE_KEY]"),
|
|
62
|
+
}),
|
|
63
|
+
rule("payment_data", "payment_card_pan", "restricted.payment.pan", {
|
|
64
|
+
marker: "[REDACTED_PAYMENT_DATA]",
|
|
65
|
+
summary: "content contains payment-card-like account number text",
|
|
66
|
+
detect: (text) => (hasPaymentCardLikeValue(text) ? 1 : 0),
|
|
67
|
+
redact: (text) => redactPaymentCardLikeValues(text, "[REDACTED_PAYMENT_DATA]"),
|
|
68
|
+
}),
|
|
69
|
+
rule("payment_data", "payment_card_cvv", "restricted.payment.cvv", {
|
|
70
|
+
marker: "[REDACTED_PAYMENT_DATA]",
|
|
71
|
+
summary: "content contains payment card verification code text",
|
|
72
|
+
detect: (text) => countMatches(text, cvvPattern),
|
|
73
|
+
redact: (text) => redactAssignment(text, cvvPattern, "[REDACTED_PAYMENT_DATA]"),
|
|
74
|
+
}),
|
|
75
|
+
rule("sensitive_pii", "ssn", "restricted.pii.ssn", {
|
|
76
|
+
marker: "[REDACTED_SENSITIVE_PII]",
|
|
77
|
+
summary: "content contains government identifier text",
|
|
78
|
+
detect: (text) => countMatches(text, ssnPattern),
|
|
79
|
+
redact: (text) => replaceMatches(text, ssnPattern, "[REDACTED_SENSITIVE_PII]"),
|
|
80
|
+
}),
|
|
81
|
+
rule("sensitive_pii", "passport", "restricted.pii.passport", {
|
|
82
|
+
marker: "[REDACTED_SENSITIVE_PII]",
|
|
83
|
+
summary: "content contains passport identifier text",
|
|
84
|
+
detect: (text) => findKeywordValueRanges(text, passportKeywords, alphaNumericValue(6, 9))
|
|
85
|
+
.length,
|
|
86
|
+
redact: (text) => redactRanges(text, findKeywordValueRanges(text, passportKeywords, alphaNumericValue(6, 9)), "[REDACTED_SENSITIVE_PII]"),
|
|
87
|
+
}),
|
|
88
|
+
rule("sensitive_pii", "driver_license", "restricted.pii.driver-license", {
|
|
89
|
+
marker: "[REDACTED_SENSITIVE_PII]",
|
|
90
|
+
summary: "content contains driver license identifier text",
|
|
91
|
+
detect: (text) => findKeywordValueRanges(text, licenseKeywords, alphaNumericDashValue(6, 20)).length,
|
|
92
|
+
redact: (text) => redactRanges(text, findKeywordValueRanges(text, licenseKeywords, alphaNumericDashValue(6, 20)), "[REDACTED_SENSITIVE_PII]"),
|
|
93
|
+
}),
|
|
94
|
+
rule("sensitive_pii", "tax_identifier", "restricted.pii.tax-identifier", {
|
|
95
|
+
marker: "[REDACTED_SENSITIVE_PII]",
|
|
96
|
+
summary: "content contains tax identifier text",
|
|
97
|
+
detect: (text) => findKeywordValueRanges(text, taxIdentifierKeywords, taxIdentifierValue)
|
|
98
|
+
.length,
|
|
99
|
+
redact: (text) => redactRanges(text, findKeywordValueRanges(text, taxIdentifierKeywords, taxIdentifierValue), "[REDACTED_SENSITIVE_PII]"),
|
|
100
|
+
}),
|
|
101
|
+
rule("sensitive_pii", "bank_account", "restricted.pii.bank-account", {
|
|
102
|
+
marker: "[REDACTED_SENSITIVE_PII]",
|
|
103
|
+
summary: "content contains financial account identifier text",
|
|
104
|
+
detect: (text) => findKeywordValueRanges(text, bankAccountKeywords, digitValue(8, 17))
|
|
105
|
+
.length,
|
|
106
|
+
redact: (text) => redactRanges(text, findKeywordValueRanges(text, bankAccountKeywords, digitValue(8, 17)), "[REDACTED_SENSITIVE_PII]"),
|
|
107
|
+
}),
|
|
108
|
+
];
|
|
109
|
+
export function classifyRestrictedData(text) {
|
|
110
|
+
const findings = [];
|
|
111
|
+
let redactedText = text;
|
|
112
|
+
for (const ruleDefinition of restrictedRules) {
|
|
113
|
+
const occurrenceCount = ruleDefinition.detect(text);
|
|
114
|
+
if (occurrenceCount < 1)
|
|
115
|
+
continue;
|
|
116
|
+
findings.push(toFinding(ruleDefinition, occurrenceCount));
|
|
117
|
+
redactedText = ruleDefinition.redact(redactedText);
|
|
118
|
+
}
|
|
119
|
+
return {
|
|
120
|
+
hasRestrictedData: findings.length > 0,
|
|
121
|
+
findings,
|
|
122
|
+
redactedText,
|
|
123
|
+
redactionCount: findings.reduce((sum, finding) => sum + finding.occurrenceCount, 0),
|
|
124
|
+
};
|
|
125
|
+
}
|
|
126
|
+
export function evaluateRestrictedBoundaryPolicy(request) {
|
|
127
|
+
const categories = uniqueCategories(request.classification.findings);
|
|
128
|
+
const recommendations = uniqueRecommendations(categories);
|
|
129
|
+
const isBlocked = recommendations.includes("block");
|
|
130
|
+
return {
|
|
131
|
+
decisionId: decisionIdFor(request, categories, recommendations),
|
|
132
|
+
requestId: request.requestId,
|
|
133
|
+
boundary: request.boundary,
|
|
134
|
+
outcome: isBlocked ? "block" : "allow",
|
|
135
|
+
categories,
|
|
136
|
+
recommendations,
|
|
137
|
+
redactionCount: request.classification.redactionCount,
|
|
138
|
+
providerEgress: isBlocked ? "denied" : "allowed",
|
|
139
|
+
rawPersistence: isBlocked ? "forbidden" : "allowed",
|
|
140
|
+
sanitizedReasons: sanitizedReasons(request.classification.findings),
|
|
141
|
+
auditSummary: auditSummaryFor(request.boundary, categories),
|
|
142
|
+
};
|
|
143
|
+
}
|
|
144
|
+
export function restrictedAuditEventForClassification(input) {
|
|
145
|
+
const findings = input.classification.findings.map((finding) => ({
|
|
146
|
+
category: finding.category,
|
|
147
|
+
ruleId: finding.ruleId,
|
|
148
|
+
confidence: finding.confidence,
|
|
149
|
+
severity: finding.severity,
|
|
150
|
+
occurrenceCount: finding.occurrenceCount,
|
|
151
|
+
redactionMarker: finding.redactionMarker,
|
|
152
|
+
summary: finding.summary,
|
|
153
|
+
}));
|
|
154
|
+
const categories = uniqueCategories(input.classification.findings);
|
|
155
|
+
return {
|
|
156
|
+
schemaVersion: 1,
|
|
157
|
+
eventType: input.eventType,
|
|
158
|
+
sourceId: input.sourceId,
|
|
159
|
+
...(input.decision?.boundary ? { boundary: input.decision.boundary } : {}),
|
|
160
|
+
...(input.decision?.requestId
|
|
161
|
+
? { requestId: input.decision.requestId }
|
|
162
|
+
: {}),
|
|
163
|
+
...(input.decision?.decisionId
|
|
164
|
+
? { decisionId: input.decision.decisionId }
|
|
165
|
+
: {}),
|
|
166
|
+
categories,
|
|
167
|
+
findings,
|
|
168
|
+
redactionCount: input.classification.redactionCount,
|
|
169
|
+
redactionMarkers: uniqueRedactionMarkers(input.classification.findings),
|
|
170
|
+
sanitizedReasons: sanitizedReasons(input.classification.findings),
|
|
171
|
+
rawContentIncluded: false,
|
|
172
|
+
...(input.decision?.providerEgress
|
|
173
|
+
? { providerEgress: input.decision.providerEgress }
|
|
174
|
+
: {}),
|
|
175
|
+
...(input.decision?.rawPersistence
|
|
176
|
+
? { rawPersistence: input.decision.rawPersistence }
|
|
177
|
+
: {}),
|
|
178
|
+
};
|
|
179
|
+
}
|
|
180
|
+
function rule(category, kind, ruleId, input) {
|
|
181
|
+
return {
|
|
182
|
+
category,
|
|
183
|
+
kind,
|
|
184
|
+
ruleId,
|
|
185
|
+
...input,
|
|
186
|
+
};
|
|
187
|
+
}
|
|
188
|
+
function toFinding(ruleDefinition, occurrenceCount) {
|
|
189
|
+
return {
|
|
190
|
+
category: ruleDefinition.category,
|
|
191
|
+
kind: ruleDefinition.kind,
|
|
192
|
+
ruleId: ruleDefinition.ruleId,
|
|
193
|
+
confidence: "high",
|
|
194
|
+
severity: "critical",
|
|
195
|
+
occurrenceCount,
|
|
196
|
+
redactionMarker: ruleDefinition.marker,
|
|
197
|
+
summary: ruleDefinition.summary,
|
|
198
|
+
};
|
|
199
|
+
}
|
|
200
|
+
function countMatches(text, pattern) {
|
|
201
|
+
pattern.lastIndex = 0;
|
|
202
|
+
return text.match(pattern)?.length ?? 0;
|
|
203
|
+
}
|
|
204
|
+
function keyBlockPattern(labelPattern) {
|
|
205
|
+
const keyLabel = `${labelPattern}PRIVATE KEY-{5}`;
|
|
206
|
+
return new RegExp(`-{5}BEGIN ${keyLabel}[\\s\\S]+?-{5}END ${keyLabel}`, "g");
|
|
207
|
+
}
|
|
208
|
+
function replaceMatches(text, pattern, replacement) {
|
|
209
|
+
pattern.lastIndex = 0;
|
|
210
|
+
return text.replace(pattern, replacement);
|
|
211
|
+
}
|
|
212
|
+
function redactAssignment(text, pattern, replacement) {
|
|
213
|
+
pattern.lastIndex = 0;
|
|
214
|
+
return text.replace(pattern, (match) => {
|
|
215
|
+
const separatorIndex = match.search(/[:=]/);
|
|
216
|
+
if (separatorIndex < 0)
|
|
217
|
+
return replacement;
|
|
218
|
+
return `${match.slice(0, separatorIndex + 1)} ${replacement}`;
|
|
219
|
+
});
|
|
220
|
+
}
|
|
221
|
+
function findKeywordValueRanges(text, keywords, valueMatcher) {
|
|
222
|
+
const lower = text.toLowerCase();
|
|
223
|
+
const ranges = [];
|
|
224
|
+
for (const keyword of keywords) {
|
|
225
|
+
let searchFrom = 0;
|
|
226
|
+
const normalizedKeyword = keyword.toLowerCase();
|
|
227
|
+
while (searchFrom < lower.length) {
|
|
228
|
+
const keywordStart = lower.indexOf(normalizedKeyword, searchFrom);
|
|
229
|
+
if (keywordStart < 0)
|
|
230
|
+
break;
|
|
231
|
+
searchFrom = keywordStart + normalizedKeyword.length;
|
|
232
|
+
if (!hasKeywordBoundaries(lower, keywordStart, normalizedKeyword.length)) {
|
|
233
|
+
continue;
|
|
234
|
+
}
|
|
235
|
+
const valueStart = skipValuePrefix(text, searchFrom);
|
|
236
|
+
const valueEnd = valueMatcher(text, valueStart);
|
|
237
|
+
if (valueEnd > valueStart) {
|
|
238
|
+
ranges.push({ start: keywordStart, end: valueEnd });
|
|
239
|
+
}
|
|
240
|
+
}
|
|
241
|
+
}
|
|
242
|
+
return mergeRanges(ranges);
|
|
243
|
+
}
|
|
244
|
+
function hasKeywordBoundaries(text, start, length) {
|
|
245
|
+
return (!isIdentifierChar(text[start - 1] ?? "") &&
|
|
246
|
+
!isIdentifierChar(text[start + length] ?? ""));
|
|
247
|
+
}
|
|
248
|
+
function skipValuePrefix(text, offset) {
|
|
249
|
+
let cursor = offset;
|
|
250
|
+
while (cursor < text.length && isWhitespace(text[cursor]))
|
|
251
|
+
cursor += 1;
|
|
252
|
+
if (text[cursor] === ":" || text[cursor] === "=")
|
|
253
|
+
cursor += 1;
|
|
254
|
+
while (cursor < text.length && isWhitespace(text[cursor]))
|
|
255
|
+
cursor += 1;
|
|
256
|
+
return cursor;
|
|
257
|
+
}
|
|
258
|
+
function alphaNumericValue(minLength, maxLength) {
|
|
259
|
+
return boundedValue((value) => /[A-Za-z0-9]/.test(value), minLength, maxLength);
|
|
260
|
+
}
|
|
261
|
+
function alphaNumericDashValue(minLength, maxLength) {
|
|
262
|
+
return boundedValue((value) => /[A-Za-z0-9-]/.test(value), minLength, maxLength);
|
|
263
|
+
}
|
|
264
|
+
function digitValue(minLength, maxLength) {
|
|
265
|
+
return boundedValue((value) => /[0-9]/.test(value), minLength, maxLength);
|
|
266
|
+
}
|
|
267
|
+
function taxIdentifierValue(text, offset) {
|
|
268
|
+
let cursor = offset;
|
|
269
|
+
let digits = 0;
|
|
270
|
+
while (cursor < text.length &&
|
|
271
|
+
(/[0-9]/.test(text[cursor]) || text[cursor] === "-")) {
|
|
272
|
+
if (/[0-9]/.test(text[cursor]))
|
|
273
|
+
digits += 1;
|
|
274
|
+
cursor += 1;
|
|
275
|
+
}
|
|
276
|
+
return digits === 9 && !isIdentifierChar(text[cursor] ?? "")
|
|
277
|
+
? cursor
|
|
278
|
+
: offset;
|
|
279
|
+
}
|
|
280
|
+
function boundedValue(isAllowed, minLength, maxLength) {
|
|
281
|
+
return (text, offset) => {
|
|
282
|
+
let cursor = offset;
|
|
283
|
+
while (cursor < text.length && isAllowed(text[cursor])) {
|
|
284
|
+
cursor += 1;
|
|
285
|
+
if (cursor - offset > maxLength)
|
|
286
|
+
return offset;
|
|
287
|
+
}
|
|
288
|
+
const length = cursor - offset;
|
|
289
|
+
return length >= minLength && !isIdentifierChar(text[cursor] ?? "")
|
|
290
|
+
? cursor
|
|
291
|
+
: offset;
|
|
292
|
+
};
|
|
293
|
+
}
|
|
294
|
+
function mergeRanges(ranges) {
|
|
295
|
+
return ranges
|
|
296
|
+
.sort((left, right) => left.start - right.start)
|
|
297
|
+
.filter((range, index, sorted) => index === 0 || range.start >= sorted[index - 1].end);
|
|
298
|
+
}
|
|
299
|
+
function redactRanges(text, ranges, replacement) {
|
|
300
|
+
return ranges
|
|
301
|
+
.slice()
|
|
302
|
+
.reverse()
|
|
303
|
+
.reduce((redacted, range) => `${redacted.slice(0, range.start)}${replacement}${redacted.slice(range.end)}`, text);
|
|
304
|
+
}
|
|
305
|
+
function isWhitespace(value) {
|
|
306
|
+
return value === " " || value === "\t" || value === "\n" || value === "\r";
|
|
307
|
+
}
|
|
308
|
+
function isIdentifierChar(value) {
|
|
309
|
+
return /[A-Za-z0-9_-]/.test(value);
|
|
310
|
+
}
|
|
311
|
+
function uniqueCategories(findings) {
|
|
312
|
+
return [...new Set(findings.map((finding) => finding.category))];
|
|
313
|
+
}
|
|
314
|
+
function uniqueRecommendations(categories) {
|
|
315
|
+
const recommendations = categories.flatMap(recommendationsForCategory);
|
|
316
|
+
return [...new Set(recommendations)];
|
|
317
|
+
}
|
|
318
|
+
function uniqueRedactionMarkers(findings) {
|
|
319
|
+
return [...new Set(findings.map((finding) => finding.redactionMarker))];
|
|
320
|
+
}
|
|
321
|
+
function recommendationsForCategory(category) {
|
|
322
|
+
if (category === "payment_data") {
|
|
323
|
+
return ["block", "redact", "tokenize", "purge"];
|
|
324
|
+
}
|
|
325
|
+
if (category === "sensitive_pii") {
|
|
326
|
+
return ["block", "redact", "encrypt", "tokenize", "purge"];
|
|
327
|
+
}
|
|
328
|
+
return ["block", "redact", "purge"];
|
|
329
|
+
}
|
|
330
|
+
function sanitizedReasons(findings) {
|
|
331
|
+
if (findings.length === 0)
|
|
332
|
+
return ["no restricted data detected"];
|
|
333
|
+
return findings.map((finding) => {
|
|
334
|
+
return `${finding.ruleId}: ${finding.summary}`;
|
|
335
|
+
});
|
|
336
|
+
}
|
|
337
|
+
function auditSummaryFor(boundary, categories) {
|
|
338
|
+
if (categories.length === 0)
|
|
339
|
+
return `${boundary}: allow restricted-data check`;
|
|
340
|
+
return `${boundary}: blocked restricted-data categories ${categories.join(", ")}`;
|
|
341
|
+
}
|
|
342
|
+
function decisionIdFor(request, categories, recommendations) {
|
|
343
|
+
const findingSummary = request.classification.findings
|
|
344
|
+
.map((finding) => `${finding.ruleId}:${finding.occurrenceCount}`)
|
|
345
|
+
.join("|");
|
|
346
|
+
const digest = createHash("sha256")
|
|
347
|
+
.update([
|
|
348
|
+
request.requestId,
|
|
349
|
+
request.boundary,
|
|
350
|
+
categories.join(","),
|
|
351
|
+
recommendations.join(","),
|
|
352
|
+
findingSummary,
|
|
353
|
+
].join("|"))
|
|
354
|
+
.digest("base64url")
|
|
355
|
+
.slice(0, 16);
|
|
356
|
+
return `restricted-policy-${digest}`;
|
|
357
|
+
}
|
|
358
|
+
//# sourceMappingURL=restricted-data-classifier.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"restricted-data-classifier.js","sourceRoot":"","sources":["../../src/security/restricted-data-classifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AAsBrC,MAAM,eAAe,GACnB,+EAA+E,CAAC;AAClF,MAAM,aAAa,GAAG,mCAAmC,CAAC;AAC1D,MAAM,uBAAuB,GAC3B,yKAAyK,CAAC;AAC5K,MAAM,UAAU,GAAG,2DAA2D,CAAC;AAC/E,MAAM,iBAAiB,GAAG,eAAe,CAAC,kBAAkB,CAAC,CAAC;AAC9D,MAAM,wBAAwB,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;AAC7D,MAAM,UAAU,GAAG,qDAAqD,CAAC;AACzE,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAC5C,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,iBAAiB,EAAE,cAAc,CAAC,CAAC;AACzE,MAAM,eAAe,GAAG;IACtB,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;IAChB,IAAI;CACL,CAAC;AACF,MAAM,qBAAqB,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACvD,MAAM,mBAAmB,GAAG;IAC1B,SAAS;IACT,gBAAgB;IAChB,SAAS;IACT,gBAAgB;IAChB,aAAa;CACd,CAAC;AAEF,MAAM,eAAe,GAAG;IACtB,IAAI,CAAC,UAAU,EAAE,qBAAqB,EAAE,gCAAgC,EAAE;QACxE,MAAM,EAAE,qBAAqB;QAC7B,OAAO,EAAE,kDAAkD;QAC3D,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,eAAe,CAAC;QACrD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,gBAAgB,CAAC,IAAI,EAAE,eAAe,EAAE,qBAAqB,CAAC;KACjE,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,gCAAgC,EAAE;QAC/D,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,oCAAoC;QAC7C,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,aAAa,CAAC;QACnD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,mBAAmB,CAAC;KAC3E,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,mBAAmB,EAAE,8BAA8B,EAAE;QAClE,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,wDAAwD;QACjE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,uBAAuB,CAAC;QAC7D,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,EAAE,mBAAmB,CAAC;KACvE,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE;QACnD,MAAM,EAAE,mBAAmB;QAC3B,OAAO,EAAE,wCAAwC;QACjD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC;QAChD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,mBAAmB,CAAC;KACxE,CAAC;IACF,IAAI,CAAC,aAAa,EAAE,iBAAiB,EAAE,4BAA4B,EAAE;QACnE,MAAM,EAAE,wBAAwB;QAChC,OAAO,EAAE,+CAA+C;QACxD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,iBAAiB,CAAC;QACvD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,cAAc,CAAC,IAAI,EAAE,iBAAiB,EAAE,wBAAwB,CAAC;KACpE,CAAC;IACF,IAAI,CAAC,aAAa,EAAE,qBAAqB,EAAE,gCAAgC,EAAE;QAC3E,MAAM,EAAE,wBAAwB;QAChC,OAAO,EAAE,+CAA+C;QACxD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,wBAAwB,CAAC;QAC9D,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,cAAc,CAAC,IAAI,EAAE,wBAAwB,EAAE,wBAAwB,CAAC;KAC3E,CAAC;IACF,IAAI,CAAC,cAAc,EAAE,kBAAkB,EAAE,wBAAwB,EAAE;QACjE,MAAM,EAAE,yBAAyB;QACjC,OAAO,EAAE,wDAAwD;QACjE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,2BAA2B,CAAC,IAAI,EAAE,yBAAyB,CAAC;KAC/D,CAAC;IACF,IAAI,CAAC,cAAc,EAAE,kBAAkB,EAAE,wBAAwB,EAAE;QACjE,MAAM,EAAE,yBAAyB;QACjC,OAAO,EAAE,sDAAsD;QAC/D,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC;QAChD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,gBAAgB,CAAC,IAAI,EAAE,UAAU,EAAE,yBAAyB,CAAC;KAChE,CAAC;IACF,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,oBAAoB,EAAE;QACjD,MAAM,EAAE,0BAA0B;QAClC,OAAO,EAAE,6CAA6C;QACtD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC;QAChD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,0BAA0B,CAAC;KAC/D,CAAC;IACF,IAAI,CAAC,eAAe,EAAE,UAAU,EAAE,yBAAyB,EAAE;QAC3D,MAAM,EAAE,0BAA0B;QAClC,OAAO,EAAE,2CAA2C;QACpD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;aACpE,MAAM;QACX,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,YAAY,CACV,IAAI,EACJ,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EACvE,0BAA0B,CAC3B;KACJ,CAAC;IACF,IAAI,CAAC,eAAe,EAAE,gBAAgB,EAAE,+BAA+B,EAAE;QACvE,MAAM,EAAE,0BAA0B;QAClC,OAAO,EAAE,iDAAiD;QAC1D,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,sBAAsB,CACpB,IAAI,EACJ,eAAe,EACf,qBAAqB,CAAC,CAAC,EAAE,EAAE,CAAC,CAC7B,CAAC,MAAM;QACV,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,YAAY,CACV,IAAI,EACJ,sBAAsB,CACpB,IAAI,EACJ,eAAe,EACf,qBAAqB,CAAC,CAAC,EAAE,EAAE,CAAC,CAC7B,EACD,0BAA0B,CAC3B;KACJ,CAAC;IACF,IAAI,CAAC,eAAe,EAAE,gBAAgB,EAAE,+BAA+B,EAAE;QACvE,MAAM,EAAE,0BAA0B;QAClC,OAAO,EAAE,sCAAsC;QAC/C,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,sBAAsB,CAAC,IAAI,EAAE,qBAAqB,EAAE,kBAAkB,CAAC;aACpE,MAAM;QACX,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,YAAY,CACV,IAAI,EACJ,sBAAsB,CAAC,IAAI,EAAE,qBAAqB,EAAE,kBAAkB,CAAC,EACvE,0BAA0B,CAC3B;KACJ,CAAC;IACF,IAAI,CAAC,eAAe,EAAE,cAAc,EAAE,6BAA6B,EAAE;QACnE,MAAM,EAAE,0BAA0B;QAClC,OAAO,EAAE,oDAAoD;QAC7D,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,sBAAsB,CAAC,IAAI,EAAE,mBAAmB,EAAE,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;aACjE,MAAM;QACX,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,YAAY,CACV,IAAI,EACJ,sBAAsB,CAAC,IAAI,EAAE,mBAAmB,EAAE,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EACpE,0BAA0B,CAC3B;KACJ,CAAC;CACM,CAAC;AAEX,MAAM,UAAU,sBAAsB,CACpC,IAAY;IAEZ,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,IAAI,YAAY,GAAG,IAAI,CAAC;IACxB,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;QAC7C,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,eAAe,GAAG,CAAC;YAAE,SAAS;QAClC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC;QAC1D,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACrD,CAAC;IACD,OAAO;QACL,iBAAiB,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC;QACtC,QAAQ;QACR,YAAY;QACZ,cAAc,EAAE,QAAQ,CAAC,MAAM,CAC7B,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,GAAG,OAAO,CAAC,eAAe,EAC/C,CAAC,CACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,OAAwC;IAExC,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACrE,MAAM,eAAe,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO;QACL,UAAU,EAAE,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,eAAe,CAAC;QAC/D,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;QACtC,UAAU;QACV,eAAe;QACf,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,cAAc;QACrD,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;QAChD,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QACnD,gBAAgB,EAAE,gBAAgB,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC;QACnE,YAAY,EAAE,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,KAKrD;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC/D,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC,CAAC,CAAC;IACJ,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACnE,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS;YAC3B,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE;YACzC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU;YAC5B,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE;YAC3C,CAAC,CAAC,EAAE,CAAC;QACP,UAAU;QACV,QAAQ;QACR,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,cAAc;QACnD,gBAAgB,EAAE,sBAAsB,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC;QACvE,gBAAgB,EAAE,gBAAgB,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC;QACjE,kBAAkB,EAAE,KAAK;QACzB,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc;YAChC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE;YACnD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc;YAChC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE;YACnD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CACX,QAAgC,EAChC,IAAY,EACZ,MAAc,EACd,KAA+D;IAE/D,OAAO;QACL,QAAQ;QACR,IAAI;QACJ,MAAM;QACN,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,cAAkC,EAClC,eAAuB;IAEvB,OAAO;QACL,QAAQ,EAAE,cAAc,CAAC,QAAQ;QACjC,IAAI,EAAE,cAAc,CAAC,IAAI;QACzB,MAAM,EAAE,cAAc,CAAC,MAAM;QAC7B,UAAU,EAAE,MAAM;QAClB,QAAQ,EAAE,UAAU;QACpB,eAAe;QACf,eAAe,EAAE,cAAc,CAAC,MAAM;QACtC,OAAO,EAAE,cAAc,CAAC,OAAO;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,OAAe;IACjD,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,eAAe,CAAC,YAAoB;IAC3C,MAAM,QAAQ,GAAG,GAAG,YAAY,iBAAiB,CAAC;IAClD,OAAO,IAAI,MAAM,CAAC,aAAa,QAAQ,qBAAqB,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,cAAc,CACrB,IAAY,EACZ,OAAe,EACf,WAAmB;IAEnB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAY,EACZ,OAAe,EACf,WAAmB;IAEnB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;IACtB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACrC,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,cAAc,GAAG,CAAC;YAAE,OAAO,WAAW,CAAC;QAC3C,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC;AASD,SAAS,sBAAsB,CAC7B,IAAY,EACZ,QAAkB,EAClB,YAA0B;IAE1B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAChD,OAAO,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACjC,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;YAClE,IAAI,YAAY,GAAG,CAAC;gBAAE,MAAM;YAC5B,UAAU,GAAG,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC;YACrD,IACE,CAAC,oBAAoB,CAAC,KAAK,EAAE,YAAY,EAAE,iBAAiB,CAAC,MAAM,CAAC,EACpE,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAChD,IAAI,QAAQ,GAAG,UAAU,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAY,EACZ,KAAa,EACb,MAAc;IAEd,OAAO,CACL,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,MAAc;IACnD,IAAI,MAAM,GAAG,MAAM,CAAC;IACpB,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAE,CAAC;QAAE,MAAM,IAAI,CAAC,CAAC;IACxE,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG;QAAE,MAAM,IAAI,CAAC,CAAC;IAC9D,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAE,CAAC;QAAE,MAAM,IAAI,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB,EAAE,SAAiB;IAC7D,OAAO,YAAY,CACjB,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EACpC,SAAS,EACT,SAAS,CACV,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,SAAiB,EACjB,SAAiB;IAEjB,OAAO,YAAY,CACjB,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EACrC,SAAS,EACT,SAAS,CACV,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,EAAE,SAAiB;IACtD,OAAO,YAAY,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,MAAc;IACtD,IAAI,MAAM,GAAG,MAAM,CAAC;IACpB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OACE,MAAM,GAAG,IAAI,CAAC,MAAM;QACpB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAE,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,EACrD,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAE,CAAC;YAAE,MAAM,IAAI,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,CAAC;IACd,CAAC;IACD,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1D,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,MAAM,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CACnB,SAAqC,EACrC,SAAiB,EACjB,SAAiB;IAEjB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QACtB,IAAI,MAAM,GAAG,MAAM,CAAC;QACpB,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAE,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,CAAC,CAAC;YACZ,IAAI,MAAM,GAAG,MAAM,GAAG,SAAS;gBAAE,OAAO,MAAM,CAAC;QACjD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;QAC/B,OAAO,MAAM,IAAI,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjE,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,MAAM,CAAC;IACb,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAmB;IACtC,OAAO,MAAM;SACV,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;SAC/C,MAAM,CACL,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CACvB,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,GAAG,CACvD,CAAC;AACN,CAAC;AAED,SAAS,YAAY,CACnB,IAAY,EACZ,MAAmB,EACnB,WAAmB;IAEnB,OAAO,MAAM;SACV,KAAK,EAAE;SACP,OAAO,EAAE;SACT,MAAM,CACL,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAClB,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,WAAW,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAC/E,IAAI,CACL,CAAC;AACN,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC;AAC7E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,gBAAgB,CACvB,QAAiC;IAEjC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,qBAAqB,CAC5B,UAAoC;IAEpC,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAiC;IAC/D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,0BAA0B,CACjC,QAAgC;IAEhC,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QAChC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;QACjC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAiC;IACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAClE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,OAAO,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,QAAqD,EACrD,UAAoC;IAEpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QACzB,OAAO,GAAG,QAAQ,+BAA+B,CAAC;IACpD,OAAO,GAAG,QAAQ,wCAAwC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,aAAa,CACpB,OAAwC,EACxC,UAAoC,EACpC,eAAqD;IAErD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ;SACnD,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;SAChE,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CACL;QACE,OAAO,CAAC,SAAS;QACjB,OAAO,CAAC,QAAQ;QAChB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QACpB,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;QACzB,cAAc;KACf,CAAC,IAAI,CAAC,GAAG,CAAC,CACZ;SACA,MAAM,CAAC,WAAW,CAAC;SACnB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,qBAAqB,MAAM,EAAE,CAAC;AACvC,CAAC"}
|
package/dist/skills-render.js
CHANGED
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import { uniqueSortedStrings } from "./collection-utils.js";
|
|
2
2
|
import { queryMemory, recordMemoryEvent, renderMemoryPacket, } from "./memory.js";
|
|
3
|
+
import { runtimeExecutionAdapters } from "./runtime-execution-adapters.js";
|
|
3
4
|
import { listSkills } from "./skills-catalog-service.js";
|
|
4
5
|
import { planSkillsForTask } from "./skills-planning.js";
|
|
5
6
|
export async function renderSkills({ target, taskId, skillIds, root = process.cwd(), }) {
|
|
@@ -42,22 +43,14 @@ async function resolveRenderSkills({ taskId, skillIds, root, }) {
|
|
|
42
43
|
return plan.selected.map((item) => item.skill);
|
|
43
44
|
}
|
|
44
45
|
function renderForTarget(target, skills, sourceGroups, taskId, memory) {
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
}
|
|
48
|
-
if (target === "windsurf") {
|
|
49
|
-
return renderMarkdown(skills, sourceGroups, taskId, "Windsurf Skill Context", "Use these Open Orchestra skills as task-scoped Windsurf rules.", memory);
|
|
50
|
-
}
|
|
51
|
-
if (target === "claude") {
|
|
52
|
-
return renderMarkdown(skills, sourceGroups, taskId, "Claude Skill Context", "Load only these Open Orchestra skills for this task.", memory);
|
|
53
|
-
}
|
|
54
|
-
if (target === "codex") {
|
|
55
|
-
return renderMarkdown(skills, sourceGroups, taskId, "Codex Skill Context", "Apply these Open Orchestra skills while preserving AGENTS.md instructions.", memory);
|
|
56
|
-
}
|
|
57
|
-
if (target === "vscode") {
|
|
46
|
+
const adapter = runtimeExecutionAdapters.find((a) => a.target === target);
|
|
47
|
+
if (adapter?.skillRenderFormat === "json") {
|
|
58
48
|
return JSON.stringify({ taskId, sourceGroups, skills, memory }, null, 2);
|
|
59
49
|
}
|
|
60
|
-
|
|
50
|
+
const title = adapter?.skillContextTitle ?? "Open Orchestra Skill Context";
|
|
51
|
+
const intro = adapter?.skillContextIntro ??
|
|
52
|
+
"Provider-agnostic skill context for this task.";
|
|
53
|
+
return renderMarkdown(skills, sourceGroups, taskId, title, intro, memory);
|
|
61
54
|
}
|
|
62
55
|
function renderMarkdown(skills, sourceGroups, taskId, title, intro, memory) {
|
|
63
56
|
const lines = [
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"skills-render.js","sourceRoot":"","sources":["../src/skills-render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EACjC,MAAM,EACN,MAAM,EACN,QAAQ,EACR,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,GAMrB;IAQC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,mBAAmB,CACtC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAC9C,CAAC;IACF,MAAM,WAAW,GAAG,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,IAAI,EAAE,uBAAuB;QAC7B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,IAAI;KACL,CAAC,CAAC;IACH,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO;QACL,MAAM;QACN,MAAM;QACN,MAAM;QACN,YAAY;QACZ,MAAM;QACN,OAAO,EAAE,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,EACjC,MAAM,EACN,QAAQ,EACR,IAAI,GAKL;IACC,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YACzB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,eAAe,CACtB,MAAyB,EACzB,MAAe,EACf,YAAsB,EACtB,MAAe,EACf,MAAqB;IAErB,
|
|
1
|
+
{"version":3,"file":"skills-render.js","sourceRoot":"","sources":["../src/skills-render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,EACjC,MAAM,EACN,MAAM,EACN,QAAQ,EACR,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,GAMrB;IAQC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,mBAAmB,CACtC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAC9C,CAAC;IACF,MAAM,WAAW,GAAG,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,IAAI,EAAE,uBAAuB;QAC7B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,IAAI;KACL,CAAC,CAAC;IACH,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO;QACL,MAAM;QACN,MAAM;QACN,MAAM;QACN,YAAY;QACZ,MAAM;QACN,OAAO,EAAE,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,EACjC,MAAM,EACN,QAAQ,EACR,IAAI,GAKL;IACC,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;QAC7B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;YACzB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,eAAe,CACtB,MAAyB,EACzB,MAAe,EACf,YAAsB,EACtB,MAAe,EACf,MAAqB;IAErB,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAC1E,IAAI,OAAO,EAAE,iBAAiB,KAAK,MAAM,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,EAAE,iBAAiB,IAAI,8BAA8B,CAAC;IAC3E,MAAM,KAAK,GACT,OAAO,EAAE,iBAAiB;QAC1B,gDAAgD,CAAC;IACnD,OAAO,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,cAAc,CACrB,MAAe,EACf,YAAsB,EACtB,MAA0B,EAC1B,KAAa,EACb,KAAa,EACb,MAAqB;IAErB,MAAM,KAAK,GAAG;QACZ,KAAK,KAAK,EAAE;QACZ,EAAE;QACF,KAAK;QACL,EAAE;QACF,SAAS,MAAM,IAAI,0BAA0B,EAAE;QAC/C,EAAE;QACF,kBAAkB;QAClB,EAAE;QACF,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC;QAC5C,EAAE;QACF,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,MAAM,KAAK,CAAC,IAAI,EAAE,EAClB,EAAE,EACF,OAAO,KAAK,CAAC,EAAE,EAAE,EACjB,EAAE,EACF,KAAK,CAAC,OAAO,EACb,EAAE,EACF,eAAe,EACf,EAAE,EACF,KAAK,KAAK,CAAC,KAAK,EAAE,EAClB,EAAE,EACF,eAAe,EACf,EAAE,EACF,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,KAAK,WAAW,EAAE,CAAC,EAC9D,EAAE,EACF,cAAc,EACd,EAAE,EACF,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,QAAQ,EAAE,CAAC,EACpD,EAAE,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
|
|
@@ -1,6 +1,8 @@
|
|
|
1
|
+
import type { RestrictedDataAuditEvent } from "./types/restricted-data.js";
|
|
1
2
|
export interface TelemetryRedactionReport {
|
|
2
3
|
redactedFields: string[];
|
|
3
4
|
blockedFields: string[];
|
|
5
|
+
restrictedEvents?: RestrictedDataAuditEvent[];
|
|
4
6
|
}
|
|
5
7
|
export declare function redactTelemetryData<T>(value: T): {
|
|
6
8
|
value: T;
|
|
@@ -1,3 +1,4 @@
|
|
|
1
|
+
import { classifyRestrictedData, restrictedAuditEventForClassification, } from "./security/restricted-data-classifier.js";
|
|
1
2
|
export function redactTelemetryData(value) {
|
|
2
3
|
const report = {
|
|
3
4
|
redactedFields: [],
|
|
@@ -45,9 +46,26 @@ function redactString(value, fieldPath, report) {
|
|
|
45
46
|
output = applyRedactionReplacement(output, pattern, replacement);
|
|
46
47
|
}
|
|
47
48
|
if (output !== value) {
|
|
49
|
+
addRedactedField(report, fieldPath);
|
|
50
|
+
}
|
|
51
|
+
const restrictedClassification = classifyRestrictedData(output);
|
|
52
|
+
if (!restrictedClassification.hasRestrictedData)
|
|
53
|
+
return output;
|
|
54
|
+
addRedactedField(report, fieldPath);
|
|
55
|
+
report.restrictedEvents = [
|
|
56
|
+
...(report.restrictedEvents ?? []),
|
|
57
|
+
restrictedAuditEventForClassification({
|
|
58
|
+
eventType: "restricted_telemetry_redacted",
|
|
59
|
+
sourceId: fieldPath || "telemetry",
|
|
60
|
+
classification: restrictedClassification,
|
|
61
|
+
}),
|
|
62
|
+
];
|
|
63
|
+
return restrictedClassification.redactedText;
|
|
64
|
+
}
|
|
65
|
+
function addRedactedField(report, fieldPath) {
|
|
66
|
+
if (!report.redactedFields.includes(fieldPath)) {
|
|
48
67
|
report.redactedFields.push(fieldPath);
|
|
49
68
|
}
|
|
50
|
-
return output;
|
|
51
69
|
}
|
|
52
70
|
function redactEmailLikeTokens(value) {
|
|
53
71
|
const parts = [];
|
|
@@ -86,9 +104,14 @@ function applyRedactionReplacement(value, pattern, replacement) {
|
|
|
86
104
|
return value.replace(pattern, replacement);
|
|
87
105
|
}
|
|
88
106
|
export function mergeRedactionReports(reports) {
|
|
89
|
-
|
|
107
|
+
const restrictedEvents = reports.flatMap((report) => report.restrictedEvents ?? []);
|
|
108
|
+
const merged = {
|
|
90
109
|
redactedFields: Array.from(new Set(reports.flatMap((report) => report.redactedFields))),
|
|
91
110
|
blockedFields: Array.from(new Set(reports.flatMap((report) => report.blockedFields))),
|
|
92
111
|
};
|
|
112
|
+
if (restrictedEvents.length > 0) {
|
|
113
|
+
merged.restrictedEvents = restrictedEvents;
|
|
114
|
+
}
|
|
115
|
+
return merged;
|
|
93
116
|
}
|
|
94
117
|
//# sourceMappingURL=telemetry-redaction.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"telemetry-redaction.js","sourceRoot":"","sources":["../src/telemetry-redaction.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"telemetry-redaction.js","sourceRoot":"","sources":["../src/telemetry-redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,qCAAqC,GACtC,MAAM,0CAA0C,CAAC;AASlD,MAAM,UAAU,mBAAmB,CAAI,KAAQ;IAI7C,MAAM,MAAM,GAA6B;QACvC,cAAc,EAAE,EAAE;QAClB,aAAa,EAAE,EAAE;KAClB,CAAC;IACF,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,CAAM,CAAC;IACrD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,WAAW,CAClB,KAAc,EACd,YAAsB,EACtB,MAAgC;IAEhC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,YAAY,CAAC,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC/B,WAAW,CAAC,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YAC1C,GAAG;YACH,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;SACrD,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CACnB,KAAa,EACb,SAAiB,EACjB,MAAgC;IAEhC,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,YAAY,GAA0D;QAC1E,CAAC,yCAAyC,EAAE,kBAAkB,CAAC;QAC/D,CAAC,4BAA4B,EAAE,yBAAyB,CAAC;QACzD;YACE,6CAA6C;YAC7C,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB;SACrD;QACD;YACE,iEAAiE;YACjE,kBAAkB;SACnB;QACD,CAAC,mBAAmB,EAAE,wBAAwB,CAAC;KAChD,CAAC;IACF,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,YAAY,EAAE,CAAC;QAClD,MAAM,GAAG,yBAAyB,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,wBAAwB,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,CAAC,wBAAwB,CAAC,iBAAiB;QAAE,OAAO,MAAM,CAAC;IAC/D,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpC,MAAM,CAAC,gBAAgB,GAAG;QACxB,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;QAClC,qCAAqC,CAAC;YACpC,SAAS,EAAE,+BAA+B;YAC1C,QAAQ,EAAE,SAAS,IAAI,WAAW;YAClC,cAAc,EAAE,wBAAwB;SACzC,CAAC;KACH,CAAC;IACF,OAAO,wBAAwB,CAAC,YAAY,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAgC,EAChC,SAAiB;IAEjB,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACjE,KAAK,GAAG,EAAE,CAAC;YACb,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,KAAK,IAAI,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,QAAQ,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,QAAQ,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC;AAC7E,CAAC;AAED,SAAS,yBAAyB,CAChC,KAAa,EACb,OAAe,EACf,WAAiD;IAEjD,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAmC;IAEnC,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CACtC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAC1C,CAAC;IACF,MAAM,MAAM,GAA6B;QACvC,cAAc,EAAE,KAAK,CAAC,IAAI,CACxB,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAC5D;QACD,aAAa,EAAE,KAAK,CAAC,IAAI,CACvB,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAC3D;KACF,CAAC;IACF,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
|