@orcareplay/core 0.1.0

package/dist/redaction.js

@@ -0,0 +1,245 @@
+import { createHash, randomBytes } from 'node:crypto';
+/** Bump when a rule is added or changed, so old traces stay interpretable. */
+// Bumped when a rule's *name* or pattern changes, because both reach the trace: the placeholder is
+// `<secret:<kind>:<hash>>`, and a reader comparing two traces needs to know the policy differed
+// rather than the content. v2 renamed `openai_key` to `sk_api_key`; v3 stopped the entropy sweep
+// eating protocol identifiers (`id`, `tool_use_id`, `tool_call_id`).
+export const REDACTION_POLICY_VERSION = 3;
+/** Environment capture is allowlist-only (spec §5). Everything else is denied. */
+export const DEFAULT_ENV_ALLOWLIST = [
+    'TERM',
+    'LANG',
+    'LC_ALL',
+    'PATH',
+    'HOME',
+    'SHELL',
+    'TZ',
+    'USER',
+    'PWD',
+];
+/**
+ * Request headers whose value is never written, whatever it looks like (spec §5).
+ *
+ * The single list. There were three — here, in the recording proxy, and in the TLS interceptor —
+ * and they had drifted: `api-key` and `x-goog-api-key` were known to exactly one of them, so the
+ * same Azure or Google credential was stripped on the intercepted path and written on the recorded
+ * one. Nothing about a header set that has to stay identical in three places will keep it that
+ * way, so it is defined once and imported.
+ */
+export const AUTH_REQUEST_HEADERS = [
+    'authorization',
+    'x-api-key',
+    // Azure OpenAI sends the key under its own name, and Google under another.
+    'api-key',
+    'x-goog-api-key',
+    'cookie',
+    'proxy-authorization',
+];
+/** A response can hand out credentials too. `set-cookie` is a session, not metadata. */
+export const AUTH_RESPONSE_HEADERS = ['set-cookie'];
+/** Every header name whose value is never written, in either direction. */
+export const AUTH_HEADERS = [...AUTH_REQUEST_HEADERS, ...AUTH_RESPONSE_HEADERS];
+/**
+ * Order matters: a PEM block or a JWT contains base64 that the narrower rules would otherwise
+ * chew into pieces, leaving fragments of key material on disk.
+ */
+const RULES = [
+    {
+        kind: 'private_key',
+        pattern: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?(?:-----END [A-Z ]*PRIVATE KEY-----|$)/g,
+    },
+    { kind: 'jwt', pattern: /eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g },
+    // `sk-` is not an OpenAI prefix, it is the convention half the industry copied: OpenAI's
+    // `sk-proj-`, Anthropic's `sk-ant-`, OrcaRouter's `sk-orca-` and a dozen gateways all match here.
+    // The rule name reaches the trace, `redactions.json` and the placeholder, so calling every one of
+    // them an OpenAI key told a reader something false about where their credential came from.
+    { kind: 'sk_api_key', pattern: /sk-[A-Za-z0-9_-]{16,}/g },
+    // Every GitHub credential prefix, `ghr_` (refresh) included: it outlives the access token it
+    // renews, so leaving it to the entropy sweep would miss the longest-lived secret of the set.
+    { kind: 'github_token', pattern: /gh[posur]_[A-Za-z0-9]{20,}/g },
+    { kind: 'aws_access_key_id', pattern: /AKIA[0-9A-Z]{16}/g },
+    { kind: 'slack_token', pattern: /xox[baprs]-[A-Za-z0-9-]{10,}/g },
+    { kind: 'google_api_key', pattern: /AIza[0-9A-Za-z_-]{35}/g },
+];
+const TOKEN = /[A-Za-z0-9_-]{20,}/g;
+const PLACEHOLDER = /<secret:[a-z_]+:[0-9a-f]{8}>/g;
+const MIN_ENTROPY_LENGTH = 20;
+const ENTROPY_BITS_PER_CHAR = 4.0;
+/** Shannon entropy of the token's own character distribution, in bits per character. */
+function entropy(token) {
+    const freq = new Map();
+    for (const ch of token)
+        freq.set(ch, (freq.get(ch) ?? 0) + 1);
+    let bits = 0;
+    for (const n of freq.values()) {
+        const p = n / token.length;
+        bits -= p * Math.log2(p);
+    }
+    return bits;
+}
+/**
+ * A long identifier clears 4 bits/char on length alone: `getUserAuthenticationTokenFromRequest`
+ * scores 4.08. Agent traces are mostly source code, so redacting identifiers would corrupt the
+ * payloads the trace exists to preserve. Requiring both digits and letters keeps every random
+ * token (base64url has a digit with p≈0.98 at 20 chars) and drops prose-shaped ones.
+ */
+function looksRandom(token) {
+    return /[0-9]/.test(token) && /[A-Za-z]/.test(token);
+}
+/**
+ * Protocol identifiers, which are not secrets and must survive a recording verbatim.
+ *
+ * A `tool_use` id is generated per call, means nothing outside its own conversation, and the API
+ * requires it to match `^[a-zA-Z0-9_-]+$`. It is also ~25 characters of mixed-case base62, so the
+ * entropy sweep took it every time — and a fork replays recorded assistant turns, the agent echoes
+ * those ids back, and the placeholder then arrives at the live API, which rejects the request:
+ *
+ *   messages.1.content.2.tool_use.id: String should match pattern '^[a-zA-Z0-9_-]+$'
+ *
+ * So `orca compare`, the feature the tool is pitched on, could not work against any real recording.
+ * Found by forking one, which no fixture could have shown.
+ *
+ * This shields these values from the *entropy heuristic* only. The pattern rules run first and are
+ * untouched, so a real credential parked under a key called `id` is still redacted by shape — what
+ * is relaxed is the guess, not the detection. The value must already look like a protocol id
+ * (`^[A-Za-z0-9_-]*$`, the shape the API demands); anything else under that key is left to the
+ * ordinary sweep.
+ *
+ * The quotes are matched as `\\*"` because a response body is stored as a *string* inside the
+ * event's JSON, so by the time the scanner sees it the text reads `\\"id\\":\\"toolu_…\\"`. A
+ * pattern that only accepted bare quotes matched nothing where it mattered and passed its own test,
+ * which is how the first version of this shipped and still broke every fork.
+ */
+const PROTOCOL_ID_VALUE = /(\\*")(?:id|tool_use_id|tool_call_id)\1\s*:\s*\1[A-Za-z0-9_-]*\1/g;
+/**
+ * The same problem with a different alphabet. An Anthropic `thinking` block carries a `signature`
+ * over its own contents, and the API rejects a turn whose signature does not verify — so a fork,
+ * which replays recorded assistant turns for the agent to echo back, died on
+ * `messages.1.content.0: Invalid \`signature\` in \`thinking\` block`. It is base64, not an
+ * identifier, hence a second shape.
+ *
+ * It is not a credential either: it authenticates thinking text the trace already holds in full, so
+ * keeping it costs no secrecy that was not already spent.
+ */
+const PROTOCOL_SIGNATURE_VALUE = /(\\*")signature\1\s*:\s*\1[A-Za-z0-9+/=_-]*\1/g;
+/** Regions the entropy sweep must not touch: what it already replaced, and what is not a secret. */
+function spansOf(value) {
+    const spans = [];
+    for (const m of value.matchAll(PLACEHOLDER))
+        spans.push([m.index, m.index + m[0].length]);
+    for (const m of value.matchAll(PROTOCOL_ID_VALUE))
+        spans.push([m.index, m.index + m[0].length]);
+    for (const m of value.matchAll(PROTOCOL_SIGNATURE_VALUE)) {
+        spans.push([m.index, m.index + m[0].length]);
+    }
+    return spans;
+}
+/**
+ * Write-path redactor (spec §5).
+ *
+ * The placeholder is `<secret:kind:hash8>` where hash8 is sha256(salt + secret) truncated, so the
+ * same secret always yields the same placeholder — replay still matches structurally — while the
+ * secret itself is unrecoverable. The salt is per run and never written down, which is what stops
+ * a short secret from being brute-forced out of a published trace.
+ */
+export class Redactor {
+    #salt;
+    #envAllowlist;
+    #records = new Map();
+    constructor(opts = {}) {
+        this.#salt = opts.salt ?? randomBytes(16).toString('hex');
+        this.#envAllowlist = new Set(opts.envAllowlist ?? DEFAULT_ENV_ALLOWLIST);
+    }
+    redactString(s, context) {
+        const hits = new Map();
+        const value = this.#scan(s, context, hits);
+        this.#merge(hits);
+        return { value, hits: [...hits.values()] };
+    }
+    redactHeaders(headers) {
+        const hits = new Map();
+        const value = {};
+        for (const [name, raw] of Object.entries(headers)) {
+            const lower = name.toLowerCase();
+            const context = `header:${lower}`;
+            value[name] = AUTH_HEADERS.includes(lower)
+                ? this.#hit(`header_${lower.replace(/-/g, '_')}`, raw, context, hits)
+                : this.#scan(raw, context, hits);
+        }
+        this.#merge(hits);
+        return { value, hits: [...hits.values()] };
+    }
+    redactEnv(env) {
+        const hits = new Map();
+        const out = {};
+        for (const key of this.#envAllowlist) {
+            const raw = env[key];
+            if (raw === undefined)
+                continue;
+            out[key] = this.#scan(raw, `env:${key}`, hits);
+        }
+        this.#merge(hits);
+        return out;
+    }
+    /** Every removal so far, aggregated by rule and identifier. Never contains a value. */
+    records() {
+        return [...this.#records.values()].map((r) => ({ ...r }));
+    }
+    rulesFired() {
+        const out = {};
+        for (const r of this.#records.values())
+            out[r.rule] = (out[r.rule] ?? 0) + r.count;
+        return out;
+    }
+    #scan(input, context, hits) {
+        let value = input;
+        for (const rule of RULES) {
+            value = value.replace(rule.pattern, (m) => this.#hit(rule.kind, m, context, hits));
+        }
+        return this.#scanEntropy(value, context, hits);
+    }
+    #scanEntropy(value, context, hits) {
+        // Placeholders already written by the pattern rules must not be rescanned as tokens.
+        const spans = spansOf(value);
+        let out = '';
+        let cut = 0;
+        for (const m of value.matchAll(TOKEN)) {
+            const token = m[0];
+            const start = m.index;
+            if (spans.some(([a, b]) => start >= a && start < b))
+                continue;
+            if (token.length < MIN_ENTROPY_LENGTH || !looksRandom(token))
+                continue;
+            if (entropy(token) <= ENTROPY_BITS_PER_CHAR)
+                continue;
+            out += value.slice(cut, start) + this.#hit('high_entropy', token, context, hits);
+            cut = start + token.length;
+        }
+        return out + value.slice(cut);
+    }
+    #hit(kind, secret, context, hits) {
+        const hash8 = createHash('sha256').update(this.#salt).update(secret).digest('hex').slice(0, 8);
+        const placeholder = `<secret:${kind}:${hash8}>`;
+        const identifier = context ? `${context}:${hash8}` : hash8;
+        // `\0` as an escape, not a raw NUL byte: a literal NUL in the source makes git classify
+        // this file as binary, so every diff of the redactor — the one file that most needs reading in
+        // review — comes out as "Bin 7248 -> 7441 bytes" instead of lines.
+        const key = `${kind}\0${identifier}`;
+        const seen = hits.get(key);
+        if (seen)
+            seen.count += 1;
+        else
+            hits.set(key, { rule: kind, identifier, placeholder, count: 1 });
+        return placeholder;
+    }
+    #merge(hits) {
+        for (const [key, hit] of hits) {
+            const seen = this.#records.get(key);
+            if (seen)
+                seen.count += hit.count;
+            else
+                this.#records.set(key, { ...hit });
+        }
+    }
+}
+//# sourceMappingURL=redaction.js.map

package/dist/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAGtD,8EAA8E;AAC9E,mGAAmG;AACnG,gGAAgG;AAChG,iGAAiG;AACjG,qEAAqE;AACrE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C,kFAAkF;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;IACP,IAAI;IACJ,MAAM;IACN,KAAK;CACN,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,eAAe;IACf,WAAW;IACX,2EAA2E;IAC3E,SAAS;IACT,gBAAgB;IAChB,QAAQ;IACR,qBAAqB;CACtB,CAAC;AAEF,wFAAwF;AACxF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,YAAY,CAAC,CAAC;AAEpD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAG,oBAAoB,EAAE,GAAG,qBAAqB,CAAC,CAAC;AAOhF;;;GAGG;AACH,MAAM,KAAK,GAAW;IACpB;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,mFAAmF;KAC7F;IACD,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,gEAAgE,EAAE;IAC1F,yFAAyF;IACzF,kGAAkG;IAClG,kGAAkG;IAClG,2FAA2F;IAC3F,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,wBAAwB,EAAE;IACzD,6FAA6F;IAC7F,6FAA6F;IAC7F,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,6BAA6B,EAAE;IAChE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,mBAAmB,EAAE;IAC3D,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,+BAA+B,EAAE;IACjE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,wBAAwB,EAAE;CAC9D,CAAC;AAEF,MAAM,KAAK,GAAG,qBAAqB,CAAC;AACpC,MAAM,WAAW,GAAG,+BAA+B,CAAC;AACpD,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,wFAAwF;AACxF,SAAS,OAAO,CAAC,KAAa;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,EAAE,IAAI,KAAK;QAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9D,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,iBAAiB,GAAG,mEAAmE,CAAC;AAE9F;;;;;;;;;GASG;AACH,MAAM,wBAAwB,GAAG,gDAAgD,CAAC;AAElF,oGAAoG;AACpG,SAAS,OAAO,CAAC,KAAa;IAC5B,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1F,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAChG,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAcD;;;;;;;GAOG;AACH,MAAM,OAAO,QAAQ;IACV,KAAK,CAAS;IACd,aAAa,CAAc;IAC3B,QAAQ,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEvD,YAAY,OAAyB,EAAE;QACrC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,qBAAqB,CAAC,CAAC;IAC3E,CAAC;IAED,YAAY,CAAC,CAAS,EAAE,OAAgB;QACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAA2B,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IAC7C,CAAC;IAED,aAAa,CAAC,OAA+B;QAC3C,MAAM,IAAI,GAAG,IAAI,GAAG,EAA2B,CAAC;QAChD,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAClD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,UAAU,KAAK,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACxC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC;gBACrE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IAC7C,CAAC;IAED,SAAS,CAAC,GAAuC;QAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,EAA2B,CAAC;QAChD,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;YACrB,IAAI,GAAG,KAAK,SAAS;gBAAE,SAAS;YAChC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,uFAAuF;IACvF,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,UAAU;QACR,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QACnF,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,KAAa,EAAE,OAA2B,EAAE,IAAkC;QAClF,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,YAAY,CACV,KAAa,EACb,OAA2B,EAC3B,IAAkC;QAElC,qFAAqF;QACrF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACnB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;YACtB,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;gBAAE,SAAS;YAC9D,IAAI,KAAK,CAAC,MAAM,GAAG,kBAAkB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBAAE,SAAS;YACvE,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,qBAAqB;gBAAE,SAAS;YACtD,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YACjF,GAAG,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;QAC7B,CAAC;QACD,OAAO,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,IAAI,CACF,IAAY,EACZ,MAAc,EACd,OAA2B,EAC3B,IAAkC;QAElC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/F,MAAM,WAAW,GAAG,WAAW,IAAI,IAAI,KAAK,GAAG,CAAC;QAChD,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QAC3D,wFAAwF;QACxF,+FAA+F;QAC/F,mEAAmE;QACnE,MAAM,GAAG,GAAG,GAAG,IAAI,KAAK,UAAU,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,IAAI;YAAE,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;;YACrB,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACtE,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,IAAkC;QACvC,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,IAAI;gBAAE,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC;;gBAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;CACF"}

package/dist/writer.d.ts

@@ -0,0 +1,66 @@
+import type { Actor, AdapterInfo, EventType, Manifest, Payload, TraceEvent } from '@orcareplay/schema';
+export interface TraceWriterInit {
+    /** Defaults to a fresh `run_<12 hex>`. */
+    runId?: string;
+    adapter: AdapterInfo;
+    argv: string[];
+    cwd: string;
+    orcaVersion: string;
+    envAllowlist?: string[];
+    /**
+     * Fork provenance (spec §1). Set on a run produced by forking another. The manifest is what
+     * every out-of-process reader sees first — `orca gc` deciding whether a run may be deleted, a
+     * third-party tool, the Python SDK — so recording this only as an event leaves those readers
+     * looking at an orphan.
+     */
+    parentRun?: string;
+    forkPoint?: number;
+    forkModel?: string;
+}
+/** The parts of an event a caller supplies; the writer stamps the rest. */
+export interface EventInit {
+    type: EventType;
+    actor: Actor;
+    turn?: number;
+    causes?: number[];
+    attrs?: Record<string, unknown>;
+    payload?: Payload;
+    /**
+     * When the event actually happened, for anything captured out of band.
+     *
+     * Shell and MCP frames are drained from disk after the agent exits, so stamping them at write
+     * time puts every one of them at the end of the run — `ts` and `mono_us` describing the drain
+     * rather than the event, which spec §2.1 makes authoritative for duration. Supplying the real
+     * moment is what lets them interleave with the model turns they happened between.
+     */
+    occurredAt?: Date;
+}
+/**
+ * Append-only writer for one run (spec §2).
+ *
+ * Every event takes the same path to disk — spill, redact, validate, append — because a redactor
+ * that can be bypassed by one caller is not a redactor. Serialized bytes are scrubbed rather than
+ * individual fields, so a secret hiding in a key, a nested string, or an attrs value is caught
+ * regardless of shape.
+ */
+export declare class TraceWriter {
+    #private;
+    private constructor();
+    static create(runsDir: string, init: TraceWriterInit): Promise<TraceWriter>;
+    /**
+     * Record the repository state the run started from (spec §1).
+     *
+     * A setter rather than a constructor argument because the honest answer needs the run directory
+     * to exist: the dirty check has to exclude orca's own files, or every run in a clean checkout
+     * reports dirty. So the caller reads it once the capture layer is up and hands it back, and it
+     * lands in the manifest at close alongside the counts.
+     */
+    setGit(info: Manifest['git']): void;
+    get runDir(): string;
+    get runId(): string;
+    /** The seq the next event will be given, which is also the number written so far. */
+    get seq(): number;
+    append(init: EventInit): Promise<TraceEvent>;
+    close(exitCode?: number): Promise<Manifest>;
+}
+//# sourceMappingURL=writer.d.ts.map

package/dist/writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.d.ts","sourceRoot":"","sources":["../src/writer.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,KAAK,EACL,WAAW,EACX,SAAS,EACT,QAAQ,EACR,OAAO,EACP,UAAU,EACX,MAAM,oBAAoB,CAAC;AAc5B,MAAM,WAAW,eAAe;IAC9B,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,WAAW,CAAC;IACrB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,2EAA2E;AAC3E,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,KAAK,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,IAAI,CAAC;CACnB;AAED;;;;;;;GAOG;AACH,qBAAa,WAAW;;IAgBtB,OAAO;WAgBM,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC;IAqCjF;;;;;;;OAOG;IACH,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,IAAI;IAInC,IAAI,MAAM,IAAI,MAAM,CAEnB;IAED,IAAI,KAAK,IAAI,MAAM,CAElB;IAED,qFAAqF;IACrF,IAAI,GAAG,IAAI,MAAM,CAEhB;IAEK,MAAM,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;IAmB5C,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;CAuElD"}

package/dist/writer.js

@@ -0,0 +1,182 @@
+import { randomBytes } from 'node:crypto';
+import { mkdir, open, writeFile } from 'node:fs/promises';
+import { arch, platform } from 'node:os';
+import { join } from 'node:path';
+import { INLINE_PAYLOAD_LIMIT, RUN_ID_PATTERN, SCHEMA_VERSION, assertEvent, assertManifest, } from '@orcareplay/schema';
+import { BlobStore, sha256File } from './blobs.js';
+import { REDACTION_POLICY_VERSION, Redactor } from './redaction.js';
+const FILE_MODE = 0o600;
+const DIR_MODE = 0o700;
+/**
+ * Append-only writer for one run (spec §2).
+ *
+ * Every event takes the same path to disk — spill, redact, validate, append — because a redactor
+ * that can be bypassed by one caller is not a redactor. Serialized bytes are scrubbed rather than
+ * individual fields, so a secret hiding in a key, a nested string, or an attrs value is caught
+ * regardless of shape.
+ */
+export class TraceWriter {
+    #runDir;
+    #runId;
+    #eventsPath;
+    #blobs;
+    #redactor;
+    #handle;
+    #base;
+    #started = process.hrtime.bigint();
+    #startedAtMs = Date.now();
+    #seq = 0;
+    #turn = 0;
+    #git;
+    #tail = Promise.resolve();
+    #sealed;
+    constructor(runId, runDir, base, redactor, handle) {
+        this.#runId = runId;
+        this.#runDir = runDir;
+        this.#eventsPath = join(runDir, 'events.jsonl');
+        this.#blobs = new BlobStore(join(runDir, 'blobs'));
+        this.#redactor = redactor;
+        this.#handle = handle;
+        this.#base = base;
+    }
+    static async create(runsDir, init) {
+        const runId = init.runId ?? `run_${randomBytes(6).toString('hex')}`;
+        if (!RUN_ID_PATTERN.test(runId))
+            throw new Error(`not a valid run id: ${JSON.stringify(runId)}`);
+        const runDir = join(runsDir, runId);
+        await mkdir(runDir, { recursive: true, mode: DIR_MODE });
+        // One redactor for the whole run: the salt stays constant, so a secret seen in the environment
+        // and again in a payload gets the same placeholder, and every removal lands in redactions.json.
+        const redactor = new Redactor(init.envAllowlist === undefined ? {} : { envAllowlist: init.envAllowlist });
+        const base = {
+            schema_version: SCHEMA_VERSION,
+            run_id: runId,
+            created_at: new Date().toISOString(),
+            orca_version: init.orcaVersion,
+            adapter: init.adapter,
+            argv: init.argv,
+            cwd: init.cwd,
+            env_allowlisted: redactor.redactEnv(process.env),
+            platform: { os: platform(), arch: arch(), node: process.version },
+            // Spread conditionally: the schema forbids unknown keys and a plain recording must carry no
+            // provenance at all, rather than three nulls that readers would have to special-case.
+            ...(init.parentRun === undefined ? {} : { parent_run: init.parentRun }),
+            ...(init.forkPoint === undefined ? {} : { fork_point: init.forkPoint }),
+            ...(init.forkModel === undefined ? {} : { fork_model: init.forkModel }),
+        };
+        assertManifest(base);
+        await writeFile(join(runDir, 'manifest.json'), `${JSON.stringify(base, null, 2)}\n`, {
+            mode: FILE_MODE,
+        });
+        const handle = await open(join(runDir, 'events.jsonl'), 'a', FILE_MODE);
+        return new TraceWriter(runId, runDir, base, redactor, handle);
+    }
+    /**
+     * Record the repository state the run started from (spec §1).
+     *
+     * A setter rather than a constructor argument because the honest answer needs the run directory
+     * to exist: the dirty check has to exclude orca's own files, or every run in a clean checkout
+     * reports dirty. So the caller reads it once the capture layer is up and hands it back, and it
+     * lands in the manifest at close alongside the counts.
+     */
+    setGit(info) {
+        this.#git = info;
+    }
+    get runDir() {
+        return this.#runDir;
+    }
+    get runId() {
+        return this.#runId;
+    }
+    /** The seq the next event will be given, which is also the number written so far. */
+    get seq() {
+        return this.#seq;
+    }
+    async append(init) {
+        if (this.#sealed)
+            throw new Error(`run ${this.#runId} is closed`);
+        // Clocks are read at call time so they describe the event, not the queue drain; seq is
+        // assigned inside the queue so a rejected event leaves no hole in the dense order.
+        const when = init.occurredAt ?? new Date();
+        const ts = when.toISOString();
+        // Monotonic for events stamped now; derived from the wall clock for one that happened earlier,
+        // since there is no hrtime reading to recover. Clamped at zero rather than going negative for a
+        // frame whose clock ran slightly behind the run's start.
+        const mono_us = init.occurredAt
+            ? Math.max(0, (when.getTime() - this.#startedAtMs) * 1000)
+            : Number((process.hrtime.bigint() - this.#started) / 1000n);
+        const turn = init.turn ?? this.#turn;
+        this.#turn = turn;
+        const written = this.#tail.then(() => this.#write(ts, mono_us, turn, init));
+        this.#tail = written.catch(() => undefined);
+        return written;
+    }
+    async close(exitCode) {
+        if (this.#sealed)
+            return this.#sealed;
+        await this.#tail;
+        await this.#handle.sync();
+        await this.#handle.close();
+        const blobs = await this.#blobs.count();
+        const manifest = {
+            ...this.#base,
+            ended_at: new Date().toISOString(),
+            counts: { events: this.#seq, blobs },
+            redaction: {
+                policy_version: REDACTION_POLICY_VERSION,
+                rules_fired: this.#redactor.rulesFired(),
+            },
+            integrity: { events_sha256: await sha256File(this.#eventsPath), blob_count: blobs },
+            // Conditional for the same reason the fork keys are: the schema forbids unknown keys, and a
+            // run outside a repository should carry no git block rather than three empty fields.
+            ...(this.#git === undefined || Object.keys(this.#git).length === 0 ? {} : { git: this.#git }),
+        };
+        if (exitCode !== undefined)
+            manifest.exit_code = exitCode;
+        assertManifest(manifest);
+        const redactions = {
+            policy_version: REDACTION_POLICY_VERSION,
+            records: this.#redactor.records(),
+        };
+        await writeFile(join(this.#runDir, 'redactions.json'), `${JSON.stringify(redactions, null, 2)}\n`, {
+            mode: FILE_MODE,
+        });
+        await writeFile(join(this.#runDir, 'manifest.json'), `${JSON.stringify(manifest, null, 2)}\n`, {
+            mode: FILE_MODE,
+        });
+        this.#sealed = manifest;
+        return manifest;
+    }
+    async #write(ts, mono_us, turn, init) {
+        const seq = this.#seq;
+        const removed = [];
+        let payload = init.payload;
+        if (payload !== undefined) {
+            const json = JSON.stringify(payload);
+            if (Buffer.byteLength(json) > INLINE_PAYLOAD_LIMIT) {
+                const scrubbed = this.#redactor.redactString(json, `event:${seq}:payload`);
+                removed.push(...scrubbed.hits.map((h) => h.identifier));
+                payload = await this.#blobs.put(scrubbed.value, 'application/json');
+            }
+        }
+        const event = { seq, ts, mono_us, turn, type: init.type, actor: init.actor };
+        if (init.causes !== undefined)
+            event.causes = init.causes;
+        if (init.attrs !== undefined)
+            event.attrs = init.attrs;
+        if (payload !== undefined)
+            event.payload = payload;
+        // Placeholders contain no quote or backslash, so scrubbing the serialized line cannot make it
+        // unparseable — and if it ever did, the parse throws and the event is never written.
+        const scrubbed = this.#redactor.redactString(JSON.stringify(event), `event:${seq}`);
+        removed.push(...scrubbed.hits.map((h) => h.identifier));
+        const out = JSON.parse(scrubbed.value);
+        if (removed.length > 0)
+            out.redacted = [...new Set(removed)];
+        assertEvent(out);
+        await this.#handle.write(`${JSON.stringify(out)}\n`);
+        this.#seq = seq + 1;
+        return out;
+    }
+}
+//# sourceMappingURL=writer.js.map

package/dist/writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writer.js","sourceRoot":"","sources":["../src/writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AASjC,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,WAAW,EACX,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAEpE,MAAM,SAAS,GAAG,KAAK,CAAC;AACxB,MAAM,QAAQ,GAAG,KAAK,CAAC;AAwCvB;;;;;;;GAOG;AACH,MAAM,OAAO,WAAW;IACb,OAAO,CAAS;IAChB,MAAM,CAAS;IACf,WAAW,CAAS;IACpB,MAAM,CAAY;IAClB,SAAS,CAAW;IACpB,OAAO,CAAa;IACpB,KAAK,CAAW;IAChB,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACnC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACnC,IAAI,GAAG,CAAC,CAAC;IACT,KAAK,GAAG,CAAC,CAAC;IACV,IAAI,CAAkB;IACtB,KAAK,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC5C,OAAO,CAAuB;IAE9B,YACE,KAAa,EACb,MAAc,EACd,IAAc,EACd,QAAkB,EAClB,MAAkB;QAElB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,IAAqB;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEzD,+FAA+F;QAC/F,gGAAgG;QAChG,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAC3B,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAC3E,CAAC;QACF,MAAM,IAAI,GAAa;YACrB,cAAc,EAAE,cAAc;YAC9B,MAAM,EAAE,KAAK;YACb,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,YAAY,EAAE,IAAI,CAAC,WAAW;YAC9B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,eAAe,EAAE,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC;YAChD,QAAQ,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE;YACjE,4FAA4F;YAC5F,sFAAsF;YACtF,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;YACvE,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;YACvE,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;SACxE,CAAC;QACF,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YACnF,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QACxE,OAAO,IAAI,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,IAAqB;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,qFAAqF;IACrF,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAe;QAC1B,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,MAAM,YAAY,CAAC,CAAC;QAClE,uFAAuF;QACvF,mFAAmF;QACnF,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC;QAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC9B,+FAA+F;QAC/F,gGAAgG;QAChG,yDAAyD;QACzD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU;YAC7B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;YAC1D,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,QAAiB;QAC3B,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC1B,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAE3B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAa;YACzB,GAAG,IAAI,CAAC,KAAK;YACb,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YACpC,SAAS,EAAE;gBACT,cAAc,EAAE,wBAAwB;gBACxC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE;aACzC;YACD,SAAS,EAAE,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE;YACnF,4FAA4F;YAC5F,qFAAqF;YACrF,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;SAC9F,CAAC;QACF,IAAI,QAAQ,KAAK,SAAS;YAAE,QAAQ,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1D,cAAc,CAAC,QAAQ,CAAC,CAAC;QAEzB,MAAM,UAAU,GAAG;YACjB,cAAc,EAAE,wBAAwB;YACxC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE;SAClC,CAAC;QACF,MAAM,SAAS,CACb,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,EACrC,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAC1C;YACE,IAAI,EAAE,SAAS;SAChB,CACF,CAAC;QACF,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAC7F,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,OAAe,EAAE,IAAY,EAAE,IAAe;QACrE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,oBAAoB,EAAE,CAAC;gBACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,GAAG,UAAU,CAAC,CAAC;gBAC3E,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;gBACxD,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAe,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QACzF,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1D,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACvD,IAAI,OAAO,KAAK,SAAS;YAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAEnD,8FAA8F;QAC9F,qFAAqF;QACrF,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,SAAS,GAAG,EAAE,CAAC,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAe,CAAC;QACrD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAE7D,WAAW,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC;QACpB,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/package.json

@@ -0,0 +1,18 @@
+{
+  "name": "@orcareplay/core",
+  "version": "0.1.0",
+  "type": "module",
+  "license": "Apache-2.0",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": "./dist/index.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@orcareplay/plugin-api": "0.1.0",
+    "@orcareplay/schema": "0.1.0"
+  }
+}