@omnicross/core 0.1.10 → 0.2.1

package/dist/chunk-HCOQQAZE.cjs

@@ -0,0 +1,123 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }// src/outbound-api/auditRedact.ts
+var AUDIT_REDACTED = "***REDACTED***";
+var RULES = [
+  // `sk-…` family (Anthropic sk-ant-, omnicross sk-omnicross-, OpenAI sk-proj-/sk-).
+  { re: /\bsk-[A-Za-z0-9_-]{6,}/g, replace: AUDIT_REDACTED },
+  // Google API keys.
+  { re: /\bAIza[A-Za-z0-9_-]{10,}/g, replace: AUDIT_REDACTED },
+  // `Bearer <token>` (auth headers echoed into a body / SSE error).
+  { re: /\bBearer\s+[A-Za-z0-9._~+/=-]{6,}/gi, replace: `Bearer ${AUDIT_REDACTED}` },
+  // Inline `x-api-key` / `api-key` / `authorization` label followed by a value.
+  {
+    re: /\b(x-api-key|api[_-]?key|authorization)(["']?\s*[:=]\s*["']?)[A-Za-z0-9._~+/=-]{6,}/gi,
+    replace: `$1$2${AUDIT_REDACTED}`
+  },
+  // `x-goog-api-key` header echoed inline.
+  {
+    re: /\b(x-goog-api-key)(["']?\s*[:=]\s*["']?)[A-Za-z0-9._~+/=-]{6,}/gi,
+    replace: `$1$2${AUDIT_REDACTED}`
+  }
+];
+function redactEncryptedContentValue(value) {
+  if (!value || typeof value !== "object") return false;
+  if (Array.isArray(value)) {
+    let changed2 = false;
+    for (const item of value) changed2 = redactEncryptedContentValue(item) || changed2;
+    return changed2;
+  }
+  let changed = false;
+  const record = value;
+  for (const [key, nested] of Object.entries(record)) {
+    if (key === "encrypted_content") {
+      record[key] = AUDIT_REDACTED;
+      changed = true;
+    } else {
+      changed = redactEncryptedContentValue(nested) || changed;
+    }
+  }
+  return changed;
+}
+function redactJsonValue(text) {
+  try {
+    const parsed = JSON.parse(text);
+    return redactEncryptedContentValue(parsed) ? JSON.stringify(parsed) : null;
+  } catch (e) {
+    return null;
+  }
+}
+function redactEncryptedContentSse(text) {
+  return text.replace(/^(\s*data:\s*)([^\r\n]*)(\r?)$/gm, (line, prefix, payload, cr) => {
+    if (!payload || payload.trim() === "[DONE]") return line;
+    const redacted = redactJsonValue(payload.trim());
+    return redacted === null ? line : `${prefix}${redacted}${cr}`;
+  });
+}
+function findJsonLikeValueEnd(text, start) {
+  const first = text[start];
+  if (first === '"' || first === "'") {
+    let escaped = false;
+    for (let index = start + 1; index < text.length; index += 1) {
+      const char = text[index];
+      if (escaped) escaped = false;
+      else if (char === "\\") escaped = true;
+      else if (char === first) return index + 1;
+    }
+    return text.length;
+  }
+  if (first === "{" || first === "[") {
+    const opening = first;
+    const closing = first === "{" ? "}" : "]";
+    let depth = 0;
+    let quote = "";
+    let escaped = false;
+    for (let index = start; index < text.length; index += 1) {
+      const char = text[index];
+      if (quote) {
+        if (escaped) escaped = false;
+        else if (char === "\\") escaped = true;
+        else if (char === quote) quote = "";
+        continue;
+      }
+      if (char === '"' || char === "'") quote = char;
+      else if (char === opening) depth += 1;
+      else if (char === closing && --depth === 0) return index + 1;
+    }
+    return text.length;
+  }
+  let end = start;
+  while (end < text.length && !/[\r\n,}\]]/.test(text[end])) end += 1;
+  return end;
+}
+function redactEncryptedContentText(text) {
+  const key = /["']encrypted_content["']\s*:\s*/g;
+  let output = "";
+  let cursor = 0;
+  for (; ; ) {
+    const match = key.exec(text);
+    if (!match) break;
+    const valueStart = match.index + match[0].length;
+    const valueEnd = findJsonLikeValueEnd(text, valueStart);
+    output += text.slice(cursor, valueStart) + JSON.stringify(AUDIT_REDACTED);
+    cursor = valueEnd;
+    key.lastIndex = valueEnd;
+  }
+  return cursor === 0 ? text : output + text.slice(cursor);
+}
+function redactEncryptedContent(text) {
+  const completeJson = redactJsonValue(text);
+  if (completeJson !== null) return completeJson;
+  return redactEncryptedContentText(redactEncryptedContentSse(text));
+}
+function redactAuditText(text) {
+  if (typeof text !== "string" || text.length === 0) return _nullishCoalesce(text, () => ( ""));
+  let out = redactEncryptedContent(text);
+  for (const { re, replace } of RULES) {
+    out = out.replace(re, replace);
+  }
+  return out;
+}
+
+
+
+
+exports.AUDIT_REDACTED = AUDIT_REDACTED; exports.redactAuditText = redactAuditText;