@phigon/observer 8.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +303 -0
- package/dist/bin/guardian-runner-darwin-amd64 +0 -0
- package/dist/bin/guardian-runner-darwin-arm64 +0 -0
- package/dist/bin/guardian-runner-linux-amd64 +0 -0
- package/dist/bin/guardian-runner-linux-arm64 +0 -0
- package/dist/bin/guardian-runner-windows-amd64.exe +0 -0
- package/dist/bin/guardian-runner-windows-arm64.exe +0 -0
- package/dist/src/action-policy.d.ts +38 -0
- package/dist/src/action-policy.d.ts.map +1 -0
- package/dist/src/action-policy.js +269 -0
- package/dist/src/action-policy.js.map +1 -0
- package/dist/src/activity/adapters/claude.d.ts +3 -0
- package/dist/src/activity/adapters/claude.d.ts.map +1 -0
- package/dist/src/activity/adapters/claude.js +89 -0
- package/dist/src/activity/adapters/claude.js.map +1 -0
- package/dist/src/activity/adapters/codex.d.ts +3 -0
- package/dist/src/activity/adapters/codex.d.ts.map +1 -0
- package/dist/src/activity/adapters/codex.js +277 -0
- package/dist/src/activity/adapters/codex.js.map +1 -0
- package/dist/src/activity/adapters/copilot.d.ts +2 -0
- package/dist/src/activity/adapters/copilot.d.ts.map +1 -0
- package/dist/src/activity/adapters/copilot.js +4 -0
- package/dist/src/activity/adapters/copilot.js.map +1 -0
- package/dist/src/activity/adapters/generic.d.ts +2 -0
- package/dist/src/activity/adapters/generic.d.ts.map +1 -0
- package/dist/src/activity/adapters/generic.js +4 -0
- package/dist/src/activity/adapters/generic.js.map +1 -0
- package/dist/src/activity/adapters/hermes.d.ts +2 -0
- package/dist/src/activity/adapters/hermes.d.ts.map +1 -0
- package/dist/src/activity/adapters/hermes.js +4 -0
- package/dist/src/activity/adapters/hermes.js.map +1 -0
- package/dist/src/activity/adapters/openai-compatible.d.ts +4 -0
- package/dist/src/activity/adapters/openai-compatible.d.ts.map +1 -0
- package/dist/src/activity/adapters/openai-compatible.js +116 -0
- package/dist/src/activity/adapters/openai-compatible.js.map +1 -0
- package/dist/src/activity/adapters/openclaw.d.ts +2 -0
- package/dist/src/activity/adapters/openclaw.d.ts.map +1 -0
- package/dist/src/activity/adapters/openclaw.js +4 -0
- package/dist/src/activity/adapters/openclaw.js.map +1 -0
- package/dist/src/activity/adapters/opencode.d.ts +3 -0
- package/dist/src/activity/adapters/opencode.d.ts.map +1 -0
- package/dist/src/activity/adapters/opencode.js +137 -0
- package/dist/src/activity/adapters/opencode.js.map +1 -0
- package/dist/src/activity/bridges.d.ts +7 -0
- package/dist/src/activity/bridges.d.ts.map +1 -0
- package/dist/src/activity/bridges.js +17 -0
- package/dist/src/activity/bridges.js.map +1 -0
- package/dist/src/activity/collector.d.ts +90 -0
- package/dist/src/activity/collector.d.ts.map +1 -0
- package/dist/src/activity/collector.js +706 -0
- package/dist/src/activity/collector.js.map +1 -0
- package/dist/src/activity/index.d.ts +14 -0
- package/dist/src/activity/index.d.ts.map +1 -0
- package/dist/src/activity/index.js +14 -0
- package/dist/src/activity/index.js.map +1 -0
- package/dist/src/activity/ingest.d.ts +15 -0
- package/dist/src/activity/ingest.d.ts.map +1 -0
- package/dist/src/activity/ingest.js +103 -0
- package/dist/src/activity/ingest.js.map +1 -0
- package/dist/src/activity/native-capabilities.d.ts +14 -0
- package/dist/src/activity/native-capabilities.d.ts.map +1 -0
- package/dist/src/activity/native-capabilities.js +85 -0
- package/dist/src/activity/native-capabilities.js.map +1 -0
- package/dist/src/activity/normalize.d.ts +17 -0
- package/dist/src/activity/normalize.d.ts.map +1 -0
- package/dist/src/activity/normalize.js +416 -0
- package/dist/src/activity/normalize.js.map +1 -0
- package/dist/src/activity/opencode-sqlite-source.d.ts +19 -0
- package/dist/src/activity/opencode-sqlite-source.d.ts.map +1 -0
- package/dist/src/activity/opencode-sqlite-source.js +305 -0
- package/dist/src/activity/opencode-sqlite-source.js.map +1 -0
- package/dist/src/activity/policy.d.ts +48 -0
- package/dist/src/activity/policy.d.ts.map +1 -0
- package/dist/src/activity/policy.js +436 -0
- package/dist/src/activity/policy.js.map +1 -0
- package/dist/src/activity/record.d.ts +7 -0
- package/dist/src/activity/record.d.ts.map +1 -0
- package/dist/src/activity/record.js +61 -0
- package/dist/src/activity/record.js.map +1 -0
- package/dist/src/activity/source-reader.d.ts +46 -0
- package/dist/src/activity/source-reader.d.ts.map +1 -0
- package/dist/src/activity/source-reader.js +594 -0
- package/dist/src/activity/source-reader.js.map +1 -0
- package/dist/src/activity/types.d.ts +21 -0
- package/dist/src/activity/types.d.ts.map +1 -0
- package/dist/src/activity/types.js +2 -0
- package/dist/src/activity/types.js.map +1 -0
- package/dist/src/agent-action-executor.d.ts +21 -0
- package/dist/src/agent-action-executor.d.ts.map +1 -0
- package/dist/src/agent-action-executor.js +248 -0
- package/dist/src/agent-action-executor.js.map +1 -0
- package/dist/src/agentic-guardian.d.ts +50 -0
- package/dist/src/agentic-guardian.d.ts.map +1 -0
- package/dist/src/agentic-guardian.js +220 -0
- package/dist/src/agentic-guardian.js.map +1 -0
- package/dist/src/atomic-replace.d.ts +4 -0
- package/dist/src/atomic-replace.d.ts.map +1 -0
- package/dist/src/atomic-replace.js +18 -0
- package/dist/src/atomic-replace.js.map +1 -0
- package/dist/src/cli.d.ts +11 -0
- package/dist/src/cli.d.ts.map +1 -0
- package/dist/src/cli.js +1244 -0
- package/dist/src/cli.js.map +1 -0
- package/dist/src/config.d.ts +68 -0
- package/dist/src/config.d.ts.map +1 -0
- package/dist/src/config.js +260 -0
- package/dist/src/config.js.map +1 -0
- package/dist/src/credential-store.d.ts +22 -0
- package/dist/src/credential-store.d.ts.map +1 -0
- package/dist/src/credential-store.js +91 -0
- package/dist/src/credential-store.js.map +1 -0
- package/dist/src/custom-agent-registry.d.ts +26 -0
- package/dist/src/custom-agent-registry.d.ts.map +1 -0
- package/dist/src/custom-agent-registry.js +288 -0
- package/dist/src/custom-agent-registry.js.map +1 -0
- package/dist/src/discovery/adapters/claude.d.ts +3 -0
- package/dist/src/discovery/adapters/claude.d.ts.map +1 -0
- package/dist/src/discovery/adapters/claude.js +26 -0
- package/dist/src/discovery/adapters/claude.js.map +1 -0
- package/dist/src/discovery/adapters/codex.d.ts +3 -0
- package/dist/src/discovery/adapters/codex.d.ts.map +1 -0
- package/dist/src/discovery/adapters/codex.js +23 -0
- package/dist/src/discovery/adapters/codex.js.map +1 -0
- package/dist/src/discovery/adapters/custom.d.ts +4 -0
- package/dist/src/discovery/adapters/custom.d.ts.map +1 -0
- package/dist/src/discovery/adapters/custom.js +24 -0
- package/dist/src/discovery/adapters/custom.js.map +1 -0
- package/dist/src/discovery/adapters/generic.d.ts +3 -0
- package/dist/src/discovery/adapters/generic.d.ts.map +1 -0
- package/dist/src/discovery/adapters/generic.js +126 -0
- package/dist/src/discovery/adapters/generic.js.map +1 -0
- package/dist/src/discovery/adapters/hermes.d.ts +3 -0
- package/dist/src/discovery/adapters/hermes.d.ts.map +1 -0
- package/dist/src/discovery/adapters/hermes.js +22 -0
- package/dist/src/discovery/adapters/hermes.js.map +1 -0
- package/dist/src/discovery/adapters/openclaw.d.ts +3 -0
- package/dist/src/discovery/adapters/openclaw.d.ts.map +1 -0
- package/dist/src/discovery/adapters/openclaw.js +22 -0
- package/dist/src/discovery/adapters/openclaw.js.map +1 -0
- package/dist/src/discovery/engine.d.ts +17 -0
- package/dist/src/discovery/engine.d.ts.map +1 -0
- package/dist/src/discovery/engine.js +164 -0
- package/dist/src/discovery/engine.js.map +1 -0
- package/dist/src/discovery/evidence.d.ts +29 -0
- package/dist/src/discovery/evidence.d.ts.map +1 -0
- package/dist/src/discovery/evidence.js +2 -0
- package/dist/src/discovery/evidence.js.map +1 -0
- package/dist/src/discovery/index.d.ts +11 -0
- package/dist/src/discovery/index.d.ts.map +1 -0
- package/dist/src/discovery/index.js +11 -0
- package/dist/src/discovery/index.js.map +1 -0
- package/dist/src/discovery/known-agent.d.ts +17 -0
- package/dist/src/discovery/known-agent.d.ts.map +1 -0
- package/dist/src/discovery/known-agent.js +193 -0
- package/dist/src/discovery/known-agent.js.map +1 -0
- package/dist/src/discovery/process-identity.d.ts +19 -0
- package/dist/src/discovery/process-identity.d.ts.map +1 -0
- package/dist/src/discovery/process-identity.js +73 -0
- package/dist/src/discovery/process-identity.js.map +1 -0
- package/dist/src/discovery/system-evidence.d.ts +9 -0
- package/dist/src/discovery/system-evidence.d.ts.map +1 -0
- package/dist/src/discovery/system-evidence.js +270 -0
- package/dist/src/discovery/system-evidence.js.map +1 -0
- package/dist/src/discovery/types.d.ts +21 -0
- package/dist/src/discovery/types.d.ts.map +1 -0
- package/dist/src/discovery/types.js +2 -0
- package/dist/src/discovery/types.js.map +1 -0
- package/dist/src/event-queue.d.ts +32 -0
- package/dist/src/event-queue.d.ts.map +1 -0
- package/dist/src/event-queue.js +125 -0
- package/dist/src/event-queue.js.map +1 -0
- package/dist/src/event-spool.d.ts +19 -0
- package/dist/src/event-spool.d.ts.map +1 -0
- package/dist/src/event-spool.js +350 -0
- package/dist/src/event-spool.js.map +1 -0
- package/dist/src/generated/phigon/v1/action_pb.d.ts +223 -0
- package/dist/src/generated/phigon/v1/action_pb.d.ts.map +1 -0
- package/dist/src/generated/phigon/v1/action_pb.js +96 -0
- package/dist/src/generated/phigon/v1/action_pb.js.map +1 -0
- package/dist/src/generated/phigon/v1/common_pb.d.ts +255 -0
- package/dist/src/generated/phigon/v1/common_pb.d.ts.map +1 -0
- package/dist/src/generated/phigon/v1/common_pb.js +242 -0
- package/dist/src/generated/phigon/v1/common_pb.js.map +1 -0
- package/dist/src/generated/phigon/v1/history_sync_pb.d.ts +119 -0
- package/dist/src/generated/phigon/v1/history_sync_pb.d.ts.map +1 -0
- package/dist/src/generated/phigon/v1/history_sync_pb.js +46 -0
- package/dist/src/generated/phigon/v1/history_sync_pb.js.map +1 -0
- package/dist/src/generated/phigon/v1/identity_pb.d.ts +235 -0
- package/dist/src/generated/phigon/v1/identity_pb.d.ts.map +1 -0
- package/dist/src/generated/phigon/v1/identity_pb.js +31 -0
- package/dist/src/generated/phigon/v1/identity_pb.js.map +1 -0
- package/dist/src/generated/phigon/v1/observer_service_pb.d.ts +362 -0
- package/dist/src/generated/phigon/v1/observer_service_pb.d.ts.map +1 -0
- package/dist/src/generated/phigon/v1/observer_service_pb.js +120 -0
- package/dist/src/generated/phigon/v1/observer_service_pb.js.map +1 -0
- package/dist/src/generated/phigon/v1/policy_pb.d.ts +456 -0
- package/dist/src/generated/phigon/v1/policy_pb.d.ts.map +1 -0
- package/dist/src/generated/phigon/v1/policy_pb.js +161 -0
- package/dist/src/generated/phigon/v1/policy_pb.js.map +1 -0
- package/dist/src/generated/phigon/v1/supervision_pb.d.ts +849 -0
- package/dist/src/generated/phigon/v1/supervision_pb.d.ts.map +1 -0
- package/dist/src/generated/phigon/v1/supervision_pb.js +384 -0
- package/dist/src/generated/phigon/v1/supervision_pb.js.map +1 -0
- package/dist/src/generated/phigon/v1/telemetry_pb.d.ts +761 -0
- package/dist/src/generated/phigon/v1/telemetry_pb.d.ts.map +1 -0
- package/dist/src/generated/phigon/v1/telemetry_pb.js +309 -0
- package/dist/src/generated/phigon/v1/telemetry_pb.js.map +1 -0
- package/dist/src/guardian-containment.d.ts +30 -0
- package/dist/src/guardian-containment.d.ts.map +1 -0
- package/dist/src/guardian-containment.js +113 -0
- package/dist/src/guardian-containment.js.map +1 -0
- package/dist/src/guardian-decision-journal.d.ts +29 -0
- package/dist/src/guardian-decision-journal.d.ts.map +1 -0
- package/dist/src/guardian-decision-journal.js +55 -0
- package/dist/src/guardian-decision-journal.js.map +1 -0
- package/dist/src/guardian-execution-manifest.d.ts +29 -0
- package/dist/src/guardian-execution-manifest.d.ts.map +1 -0
- package/dist/src/guardian-execution-manifest.js +95 -0
- package/dist/src/guardian-execution-manifest.js.map +1 -0
- package/dist/src/guardian-hosted-client.d.ts +10 -0
- package/dist/src/guardian-hosted-client.d.ts.map +1 -0
- package/dist/src/guardian-hosted-client.js +45 -0
- package/dist/src/guardian-hosted-client.js.map +1 -0
- package/dist/src/guardian-managed-exec.d.ts +21 -0
- package/dist/src/guardian-managed-exec.d.ts.map +1 -0
- package/dist/src/guardian-managed-exec.js +249 -0
- package/dist/src/guardian-managed-exec.js.map +1 -0
- package/dist/src/guardian-model-bridge.d.ts +13 -0
- package/dist/src/guardian-model-bridge.d.ts.map +1 -0
- package/dist/src/guardian-model-bridge.js +87 -0
- package/dist/src/guardian-model-bridge.js.map +1 -0
- package/dist/src/guardian-native.d.ts +3 -0
- package/dist/src/guardian-native.d.ts.map +1 -0
- package/dist/src/guardian-native.js +13 -0
- package/dist/src/guardian-native.js.map +1 -0
- package/dist/src/guardian-process-monitor.d.ts +20 -0
- package/dist/src/guardian-process-monitor.d.ts.map +1 -0
- package/dist/src/guardian-process-monitor.js +98 -0
- package/dist/src/guardian-process-monitor.js.map +1 -0
- package/dist/src/health.d.ts +35 -0
- package/dist/src/health.d.ts.map +1 -0
- package/dist/src/health.js +41 -0
- package/dist/src/health.js.map +1 -0
- package/dist/src/historical-identity-store.d.ts +20 -0
- package/dist/src/historical-identity-store.d.ts.map +1 -0
- package/dist/src/historical-identity-store.js +391 -0
- package/dist/src/historical-identity-store.js.map +1 -0
- package/dist/src/index.d.ts +14 -0
- package/dist/src/index.d.ts.map +1 -0
- package/dist/src/index.js +14 -0
- package/dist/src/index.js.map +1 -0
- package/dist/src/installation.d.ts +2 -0
- package/dist/src/installation.d.ts.map +1 -0
- package/dist/src/installation.js +44 -0
- package/dist/src/installation.js.map +1 -0
- package/dist/src/machine-command-executor.d.ts +28 -0
- package/dist/src/machine-command-executor.d.ts.map +1 -0
- package/dist/src/machine-command-executor.js +166 -0
- package/dist/src/machine-command-executor.js.map +1 -0
- package/dist/src/pair.d.ts +21 -0
- package/dist/src/pair.d.ts.map +1 -0
- package/dist/src/pair.js +125 -0
- package/dist/src/pair.js.map +1 -0
- package/dist/src/remove-machine.d.ts +15 -0
- package/dist/src/remove-machine.d.ts.map +1 -0
- package/dist/src/remove-machine.js +77 -0
- package/dist/src/remove-machine.js.map +1 -0
- package/dist/src/stream-client.d.ts +42 -0
- package/dist/src/stream-client.d.ts.map +1 -0
- package/dist/src/stream-client.js +867 -0
- package/dist/src/stream-client.js.map +1 -0
- package/dist/src/stream-state.d.ts +13 -0
- package/dist/src/stream-state.d.ts.map +1 -0
- package/dist/src/stream-state.js +128 -0
- package/dist/src/stream-state.js.map +1 -0
- package/dist/src/windows-process.d.ts +7 -0
- package/dist/src/windows-process.d.ts.map +1 -0
- package/dist/src/windows-process.js +17 -0
- package/dist/src/windows-process.js.map +1 -0
- package/package.json +78 -0
- package/scripts/install.mjs +308 -0
- package/scripts/managed-service.mjs +132 -0
- package/scripts/verify-guardian-release.mjs +42 -0
- package/scripts/windows-app-control.mjs +117 -0
|
@@ -0,0 +1,436 @@
|
|
|
1
|
+
import { createHash } from "node:crypto";
|
|
2
|
+
const defaultLimits = Object.freeze({
|
|
3
|
+
summaryBytes: 512,
|
|
4
|
+
contentBytes: 64 << 10,
|
|
5
|
+
toolArgumentsBytes: 128 << 10,
|
|
6
|
+
toolOutputBytes: 256 << 10,
|
|
7
|
+
terminalOutputBytes: 64 << 10,
|
|
8
|
+
vendorPayloadBytes: 512 << 10,
|
|
9
|
+
});
|
|
10
|
+
const builtInSecretPatterns = [
|
|
11
|
+
/\bsk-[A-Za-z0-9_-]{16,}\b/gu,
|
|
12
|
+
/\bgh[pousr]_[A-Za-z0-9]{20,}\b/gu,
|
|
13
|
+
/\bAKIA[0-9A-Z]{16}\b/gu,
|
|
14
|
+
/\bBearer\s+[A-Za-z0-9._~+/=-]{12,}\b/giu,
|
|
15
|
+
/(["']?(?:api[_-]?key|access[_-]?token|client[_-]?secret|password)["']?\s*[:=]\s*["']?)[^"',\s}]{6,}/giu,
|
|
16
|
+
];
|
|
17
|
+
const sensitiveFieldPattern = /(?:^|_)(?:api_?key|auth(?:orization)?|cookie|credential|password|passwd|private_?key|secret|session_?token|token)(?:$|_)/iu;
|
|
18
|
+
export class LocalPolicyEngine {
|
|
19
|
+
#collection;
|
|
20
|
+
#pathPatterns;
|
|
21
|
+
#limits;
|
|
22
|
+
constructor(collection, pathPatterns = [], limits = defaultLimits) {
|
|
23
|
+
this.#collection = collection;
|
|
24
|
+
this.#pathPatterns = pathPatterns;
|
|
25
|
+
this.#limits = limits;
|
|
26
|
+
}
|
|
27
|
+
summary(value) {
|
|
28
|
+
return this.#redactAndTruncate(value, this.#limits.summaryBytes).value;
|
|
29
|
+
}
|
|
30
|
+
allowsMetadata(category) {
|
|
31
|
+
return this.#collection[category];
|
|
32
|
+
}
|
|
33
|
+
content(value, category) {
|
|
34
|
+
if (!this.#collection[category]) {
|
|
35
|
+
return { redacted: true, truncated: false };
|
|
36
|
+
}
|
|
37
|
+
const text = stringValue(value);
|
|
38
|
+
if (text === "") {
|
|
39
|
+
return { value: "", redacted: false, truncated: false };
|
|
40
|
+
}
|
|
41
|
+
const limit = this.#limitFor(category);
|
|
42
|
+
return this.#redactAndTruncate(text, limit);
|
|
43
|
+
}
|
|
44
|
+
json(value, category) {
|
|
45
|
+
if (value === undefined)
|
|
46
|
+
return { redacted: false, truncated: false };
|
|
47
|
+
if (!this.#collection[category]) {
|
|
48
|
+
return { redacted: true, truncated: false };
|
|
49
|
+
}
|
|
50
|
+
const policySanitized = sanitizeStructuredValue(value, this.#collection);
|
|
51
|
+
const normalized = normalizeStructure(policySanitized.value, 0);
|
|
52
|
+
let serialized;
|
|
53
|
+
try {
|
|
54
|
+
serialized = JSON.stringify(normalized);
|
|
55
|
+
}
|
|
56
|
+
catch {
|
|
57
|
+
serialized = JSON.stringify({ _phigon: "unserializable" });
|
|
58
|
+
}
|
|
59
|
+
const limit = this.#limitFor(category);
|
|
60
|
+
const redacted = this.#redact(serialized);
|
|
61
|
+
if (Buffer.byteLength(redacted.value, "utf8") <= limit) {
|
|
62
|
+
return {
|
|
63
|
+
value: redacted.value,
|
|
64
|
+
redacted: policySanitized.changed || redacted.changed,
|
|
65
|
+
truncated: false,
|
|
66
|
+
};
|
|
67
|
+
}
|
|
68
|
+
return {
|
|
69
|
+
value: JSON.stringify({
|
|
70
|
+
_phigon: "truncated",
|
|
71
|
+
sha256: digest(redacted.value),
|
|
72
|
+
}),
|
|
73
|
+
redacted: true,
|
|
74
|
+
truncated: true,
|
|
75
|
+
};
|
|
76
|
+
}
|
|
77
|
+
vendorRecord(value) {
|
|
78
|
+
const original = serializeNormalized(value);
|
|
79
|
+
const recordDigest = digest(original);
|
|
80
|
+
if (!this.#collection.vendorPayload) {
|
|
81
|
+
return {
|
|
82
|
+
digest: recordDigest,
|
|
83
|
+
redacted: true,
|
|
84
|
+
truncated: false,
|
|
85
|
+
redactedFields: [],
|
|
86
|
+
};
|
|
87
|
+
}
|
|
88
|
+
const redactedFields = [];
|
|
89
|
+
const policySanitized = sanitizeStructuredValue(value, this.#collection, true);
|
|
90
|
+
const sanitized = sanitizeVendorStructure(policySanitized.value, "", redactedFields, (text) => this.#redact(text));
|
|
91
|
+
let serialized = serializeNormalized(sanitized);
|
|
92
|
+
let changed = policySanitized.changed ||
|
|
93
|
+
redactedFields.length > 0 ||
|
|
94
|
+
serialized !== original;
|
|
95
|
+
const limit = this.#limits.vendorPayloadBytes;
|
|
96
|
+
if (Buffer.byteLength(serialized, "utf8") > limit) {
|
|
97
|
+
serialized = JSON.stringify({
|
|
98
|
+
_phigon: "truncated",
|
|
99
|
+
sha256: digest(serialized),
|
|
100
|
+
});
|
|
101
|
+
changed = true;
|
|
102
|
+
return {
|
|
103
|
+
digest: recordDigest,
|
|
104
|
+
value: serialized,
|
|
105
|
+
redacted: changed,
|
|
106
|
+
truncated: true,
|
|
107
|
+
redactedFields,
|
|
108
|
+
};
|
|
109
|
+
}
|
|
110
|
+
return {
|
|
111
|
+
digest: recordDigest,
|
|
112
|
+
value: serialized,
|
|
113
|
+
redacted: changed,
|
|
114
|
+
truncated: false,
|
|
115
|
+
redactedFields,
|
|
116
|
+
};
|
|
117
|
+
}
|
|
118
|
+
identifier(raw, category) {
|
|
119
|
+
const text = stringValue(raw);
|
|
120
|
+
if (text === "")
|
|
121
|
+
return { digest: "", redacted: true };
|
|
122
|
+
const result = this.#redactAndTruncate(text, 8 << 10);
|
|
123
|
+
if (!this.#collection[category]) {
|
|
124
|
+
return { digest: digest(text), redacted: true };
|
|
125
|
+
}
|
|
126
|
+
return {
|
|
127
|
+
digest: digest(text),
|
|
128
|
+
value: result.value,
|
|
129
|
+
redacted: result.redacted,
|
|
130
|
+
};
|
|
131
|
+
}
|
|
132
|
+
safeName(value, fallback) {
|
|
133
|
+
const text = stringValue(value)
|
|
134
|
+
.replace(/[^A-Za-z0-9._:/-]+/gu, "-")
|
|
135
|
+
.replace(/^-+|-+$/gu, "")
|
|
136
|
+
.slice(0, 128);
|
|
137
|
+
return text || fallback;
|
|
138
|
+
}
|
|
139
|
+
#limitFor(category) {
|
|
140
|
+
if (category === "commandArguments") {
|
|
141
|
+
return this.#limits.toolArgumentsBytes;
|
|
142
|
+
}
|
|
143
|
+
if (category === "toolOutput")
|
|
144
|
+
return this.#limits.toolOutputBytes;
|
|
145
|
+
if (category === "terminalOutput") {
|
|
146
|
+
return this.#limits.terminalOutputBytes;
|
|
147
|
+
}
|
|
148
|
+
if (category === "vendorPayload") {
|
|
149
|
+
return this.#limits.vendorPayloadBytes;
|
|
150
|
+
}
|
|
151
|
+
return this.#limits.contentBytes;
|
|
152
|
+
}
|
|
153
|
+
#redactAndTruncate(value, limit) {
|
|
154
|
+
const redacted = this.#redact(value);
|
|
155
|
+
const truncated = truncateUTF8(redacted.value, limit);
|
|
156
|
+
return {
|
|
157
|
+
value: truncated.value,
|
|
158
|
+
redacted: redacted.changed,
|
|
159
|
+
truncated: truncated.truncated,
|
|
160
|
+
};
|
|
161
|
+
}
|
|
162
|
+
#redact(value) {
|
|
163
|
+
let result = value;
|
|
164
|
+
for (const pattern of this.#pathPatterns) {
|
|
165
|
+
if (pattern === "")
|
|
166
|
+
continue;
|
|
167
|
+
result = result.split(pattern).join("[REDACTED_PATH]");
|
|
168
|
+
}
|
|
169
|
+
for (const pattern of builtInSecretPatterns) {
|
|
170
|
+
pattern.lastIndex = 0;
|
|
171
|
+
result = result.replace(pattern, (_match, prefix) => typeof prefix === "string"
|
|
172
|
+
? `${prefix}[REDACTED_SECRET]`
|
|
173
|
+
: "[REDACTED_SECRET]");
|
|
174
|
+
}
|
|
175
|
+
return { value: result, changed: result !== value };
|
|
176
|
+
}
|
|
177
|
+
}
|
|
178
|
+
export function sanitizeStructuredValue(value, policy, failClosedUnclassifiedStrings = false) {
|
|
179
|
+
return sanitizeStructuredNode(value, policy, "", 0, undefined, failClosedUnclassifiedStrings);
|
|
180
|
+
}
|
|
181
|
+
export function truncateUTF8(value, maximumBytes) {
|
|
182
|
+
const bytes = Buffer.from(value, "utf8");
|
|
183
|
+
if (bytes.length <= maximumBytes) {
|
|
184
|
+
return { value, truncated: false };
|
|
185
|
+
}
|
|
186
|
+
let end = maximumBytes;
|
|
187
|
+
while (end > 0) {
|
|
188
|
+
try {
|
|
189
|
+
const decoded = new TextDecoder("utf-8", { fatal: true }).decode(bytes.subarray(0, end));
|
|
190
|
+
return { value: decoded, truncated: true };
|
|
191
|
+
}
|
|
192
|
+
catch {
|
|
193
|
+
end--;
|
|
194
|
+
}
|
|
195
|
+
}
|
|
196
|
+
return { value: "", truncated: true };
|
|
197
|
+
}
|
|
198
|
+
function normalizeStructure(value, depth) {
|
|
199
|
+
if (depth >= 8)
|
|
200
|
+
return "[MAX_DEPTH]";
|
|
201
|
+
if (value === null ||
|
|
202
|
+
typeof value === "boolean" ||
|
|
203
|
+
typeof value === "number") {
|
|
204
|
+
return value;
|
|
205
|
+
}
|
|
206
|
+
if (typeof value === "string")
|
|
207
|
+
return value.slice(0, 64 << 10);
|
|
208
|
+
if (typeof value === "bigint")
|
|
209
|
+
return value.toString();
|
|
210
|
+
if (Array.isArray(value)) {
|
|
211
|
+
return value
|
|
212
|
+
.slice(0, 256)
|
|
213
|
+
.map((item) => normalizeStructure(item, depth + 1));
|
|
214
|
+
}
|
|
215
|
+
if (typeof value === "object") {
|
|
216
|
+
const result = Object.create(null);
|
|
217
|
+
for (const key of Object.keys(value).sort().slice(0, 128)) {
|
|
218
|
+
result[key.slice(0, 128)] = normalizeStructure(value[key], depth + 1);
|
|
219
|
+
}
|
|
220
|
+
return result;
|
|
221
|
+
}
|
|
222
|
+
return String(value);
|
|
223
|
+
}
|
|
224
|
+
const policyRedactedValue = "[REDACTED_POLICY]";
|
|
225
|
+
function sanitizeStructuredNode(value, policy, key, depth, parent, failClosedUnclassifiedStrings = false, inheritedCategory) {
|
|
226
|
+
if (depth >= 16) {
|
|
227
|
+
return { value: "[MAX_DEPTH]", changed: true };
|
|
228
|
+
}
|
|
229
|
+
const explicitCategory = structuredCategory(key, parent);
|
|
230
|
+
const category = explicitCategory ?? inheritedCategory;
|
|
231
|
+
if (category !== undefined && !policy[category]) {
|
|
232
|
+
return { value: policyRedactedValue, changed: true };
|
|
233
|
+
}
|
|
234
|
+
if (typeof value === "string") {
|
|
235
|
+
if (failClosedUnclassifiedStrings &&
|
|
236
|
+
category === undefined &&
|
|
237
|
+
!isStructuralMetadataString(key, value, parent)) {
|
|
238
|
+
return { value: policyRedactedValue, changed: true };
|
|
239
|
+
}
|
|
240
|
+
if ((!policy.browserUrls && looksLikeURL(value)) ||
|
|
241
|
+
(!policy.filePaths && looksLikePath(value)) ||
|
|
242
|
+
(!policy.networkEndpoints && looksLikeNetworkEndpoint(value))) {
|
|
243
|
+
return { value: policyRedactedValue, changed: true };
|
|
244
|
+
}
|
|
245
|
+
return { value, changed: false };
|
|
246
|
+
}
|
|
247
|
+
if (Array.isArray(value)) {
|
|
248
|
+
let changed = false;
|
|
249
|
+
const result = value.slice(0, 2_048).map((item) => {
|
|
250
|
+
const child = sanitizeStructuredNode(item, policy, "", depth + 1, undefined, failClosedUnclassifiedStrings, category);
|
|
251
|
+
changed ||= child.changed;
|
|
252
|
+
return child.value;
|
|
253
|
+
});
|
|
254
|
+
return {
|
|
255
|
+
value: result,
|
|
256
|
+
changed: changed || result.length !== value.length,
|
|
257
|
+
};
|
|
258
|
+
}
|
|
259
|
+
if (value !== null && typeof value === "object") {
|
|
260
|
+
let changed = false;
|
|
261
|
+
const result = Object.create(null);
|
|
262
|
+
const keys = Object.keys(value).sort().slice(0, 1_024);
|
|
263
|
+
for (const childKey of keys) {
|
|
264
|
+
const child = sanitizeStructuredNode(value[childKey], policy, childKey, depth + 1, value, failClosedUnclassifiedStrings, category);
|
|
265
|
+
result[childKey] = child.value;
|
|
266
|
+
changed ||= child.changed;
|
|
267
|
+
}
|
|
268
|
+
return {
|
|
269
|
+
value: result,
|
|
270
|
+
changed: changed || keys.length !== Object.keys(value).length,
|
|
271
|
+
};
|
|
272
|
+
}
|
|
273
|
+
return { value, changed: false };
|
|
274
|
+
}
|
|
275
|
+
function structuredCategory(rawKey, parent) {
|
|
276
|
+
const key = rawKey.toLowerCase().replace(/[^a-z0-9]+/gu, "_");
|
|
277
|
+
const context = [
|
|
278
|
+
typeof parent?.["role"] === "string" ? parent["role"] : "",
|
|
279
|
+
typeof parent?.["type"] === "string" ? parent["type"] : "",
|
|
280
|
+
typeof parent?.["kind"] === "string" ? parent["kind"] : "",
|
|
281
|
+
].join(" ").toLowerCase();
|
|
282
|
+
if (/^(?:env|environment|environment_variables|env_vars|process_env)$/u.test(key)) {
|
|
283
|
+
return "environmentValues";
|
|
284
|
+
}
|
|
285
|
+
if (/^(?:path|file_path|filepath|filename|directory|dir|cwd|workdir|working_directory|repo|repository)$/u.test(key)) {
|
|
286
|
+
return "filePaths";
|
|
287
|
+
}
|
|
288
|
+
if (/^(?:file_content|contents|content_bytes)$/u.test(key)) {
|
|
289
|
+
return "fileContent";
|
|
290
|
+
}
|
|
291
|
+
if (/^(?:patch|diff|git_patch)$/u.test(key)) {
|
|
292
|
+
return "gitPatchContent";
|
|
293
|
+
}
|
|
294
|
+
if (/^(?:url|uri|href|origin)$/u.test(key)) {
|
|
295
|
+
return "browserUrls";
|
|
296
|
+
}
|
|
297
|
+
if (/^(?:html|page_content|browser_content|selector|target)$/u.test(key)) {
|
|
298
|
+
return "browserContent";
|
|
299
|
+
}
|
|
300
|
+
if (/^(?:endpoint|network_endpoint|host|hostname|ip|ip_address|port)$/u.test(key)) {
|
|
301
|
+
return "networkEndpoints";
|
|
302
|
+
}
|
|
303
|
+
if (/^(?:prompt|user_prompt|input_text)$/u.test(key)) {
|
|
304
|
+
return "promptContent";
|
|
305
|
+
}
|
|
306
|
+
if (/^(?:response|assistant_response|output_text)$/u.test(key)) {
|
|
307
|
+
return "responseContent";
|
|
308
|
+
}
|
|
309
|
+
if (/^(?:reasoning|analysis|chain_of_thought|thinking|thought)$/u.test(key)) {
|
|
310
|
+
return "reasoningContent";
|
|
311
|
+
}
|
|
312
|
+
if (/^(?:command|cmd|args|arguments|command_line|argv)$/u.test(key)) {
|
|
313
|
+
return "commandArguments";
|
|
314
|
+
}
|
|
315
|
+
if (/^(?:stdout|stderr|terminal_output)$/u.test(key)) {
|
|
316
|
+
return "terminalOutput";
|
|
317
|
+
}
|
|
318
|
+
if (/^(?:tool_output|result)$/u.test(key)) {
|
|
319
|
+
return "toolOutput";
|
|
320
|
+
}
|
|
321
|
+
if (key === "output") {
|
|
322
|
+
return /assistant|response|agent_message/u.test(context)
|
|
323
|
+
? "responseContent"
|
|
324
|
+
: "toolOutput";
|
|
325
|
+
}
|
|
326
|
+
if (key === "content" || key === "message") {
|
|
327
|
+
if (/user|prompt|input/u.test(context))
|
|
328
|
+
return "promptContent";
|
|
329
|
+
if (/reasoning|analysis|thinking|thought/u.test(context)) {
|
|
330
|
+
return "reasoningContent";
|
|
331
|
+
}
|
|
332
|
+
if (/assistant|response|output|agent_message/u.test(context)) {
|
|
333
|
+
return "responseContent";
|
|
334
|
+
}
|
|
335
|
+
return "fileContent";
|
|
336
|
+
}
|
|
337
|
+
if (key === "text") {
|
|
338
|
+
if (/reasoning|analysis|thinking|thought/u.test(context)) {
|
|
339
|
+
return "reasoningContent";
|
|
340
|
+
}
|
|
341
|
+
if (/user|prompt|input/u.test(context))
|
|
342
|
+
return "promptContent";
|
|
343
|
+
if (/assistant|response|output|agent_message/u.test(context)) {
|
|
344
|
+
return "responseContent";
|
|
345
|
+
}
|
|
346
|
+
}
|
|
347
|
+
return undefined;
|
|
348
|
+
}
|
|
349
|
+
function isStructuralMetadataString(rawKey, value, parent) {
|
|
350
|
+
const key = rawKey.toLowerCase().replace(/[^a-z0-9]+/gu, "_");
|
|
351
|
+
const parentType = [
|
|
352
|
+
typeof parent?.["type"] === "string" ? parent["type"] : "",
|
|
353
|
+
typeof parent?.["kind"] === "string" ? parent["kind"] : "",
|
|
354
|
+
].join(" ").toLowerCase();
|
|
355
|
+
const toolName = key === "name" &&
|
|
356
|
+
(/(?:function|tool)[_-]?(?:call|use|invocation)/u.test(parentType) ||
|
|
357
|
+
Object.hasOwn(parent ?? {}, "arguments"));
|
|
358
|
+
if (!toolName &&
|
|
359
|
+
!/^(?:id|type|kind|role|status|state|phase|model|provider|version|source|agent|session_id|call_id|tool_name)$/u.test(key)) {
|
|
360
|
+
return false;
|
|
361
|
+
}
|
|
362
|
+
return (value.length <= 256 &&
|
|
363
|
+
/^[A-Za-z0-9][A-Za-z0-9._:/@+-]*$/u.test(value));
|
|
364
|
+
}
|
|
365
|
+
function looksLikeURL(value) {
|
|
366
|
+
return /^(?:https?|wss?):\/\//iu.test(value.trim());
|
|
367
|
+
}
|
|
368
|
+
function looksLikePath(value) {
|
|
369
|
+
const trimmed = value.trim();
|
|
370
|
+
return /^(?:~[\\/]|\/(?!\/)|[A-Za-z]:[\\/]|\\\\)/u.test(trimmed);
|
|
371
|
+
}
|
|
372
|
+
function looksLikeNetworkEndpoint(value) {
|
|
373
|
+
const trimmed = value.trim();
|
|
374
|
+
return /^(?:\[[0-9A-Fa-f:]+\]|(?:\d{1,3}\.){3}\d{1,3}|[A-Za-z0-9.-]+\.[A-Za-z]{2,}):\d{1,5}$/u.test(trimmed);
|
|
375
|
+
}
|
|
376
|
+
function sanitizeVendorStructure(value, path, redactedFields, redact, depth = 0) {
|
|
377
|
+
if (depth >= 16)
|
|
378
|
+
return "[MAX_DEPTH]";
|
|
379
|
+
if (typeof value === "string") {
|
|
380
|
+
const bounded = value.slice(0, 256 << 10);
|
|
381
|
+
const result = redact(bounded);
|
|
382
|
+
if (result.changed && path !== "")
|
|
383
|
+
redactedFields.push(path);
|
|
384
|
+
return result.value;
|
|
385
|
+
}
|
|
386
|
+
if (value === null ||
|
|
387
|
+
typeof value === "boolean" ||
|
|
388
|
+
typeof value === "number") {
|
|
389
|
+
return value;
|
|
390
|
+
}
|
|
391
|
+
if (typeof value === "bigint")
|
|
392
|
+
return value.toString();
|
|
393
|
+
if (Array.isArray(value)) {
|
|
394
|
+
return value.slice(0, 2_048).map((item, index) => sanitizeVendorStructure(item, `${path}[${index}]`, redactedFields, redact, depth + 1));
|
|
395
|
+
}
|
|
396
|
+
if (typeof value === "object") {
|
|
397
|
+
const result = Object.create(null);
|
|
398
|
+
for (const key of Object.keys(value).sort().slice(0, 1_024)) {
|
|
399
|
+
const childPath = path === "" ? key : `${path}.${key}`;
|
|
400
|
+
if (sensitiveFieldPattern.test(key)) {
|
|
401
|
+
result[key] = "[REDACTED_SECRET]";
|
|
402
|
+
redactedFields.push(childPath);
|
|
403
|
+
continue;
|
|
404
|
+
}
|
|
405
|
+
result[key] = sanitizeVendorStructure(value[key], childPath, redactedFields, redact, depth + 1);
|
|
406
|
+
}
|
|
407
|
+
return result;
|
|
408
|
+
}
|
|
409
|
+
return String(value);
|
|
410
|
+
}
|
|
411
|
+
function serializeNormalized(value) {
|
|
412
|
+
try {
|
|
413
|
+
return JSON.stringify(normalizeStructure(value, 0));
|
|
414
|
+
}
|
|
415
|
+
catch {
|
|
416
|
+
return JSON.stringify({ _phigon: "unserializable" });
|
|
417
|
+
}
|
|
418
|
+
}
|
|
419
|
+
function stringValue(value) {
|
|
420
|
+
if (typeof value === "string")
|
|
421
|
+
return value;
|
|
422
|
+
if (value === undefined || value === null)
|
|
423
|
+
return "";
|
|
424
|
+
if (Buffer.isBuffer(value))
|
|
425
|
+
return value.toString("utf8");
|
|
426
|
+
try {
|
|
427
|
+
return JSON.stringify(normalizeStructure(value, 0));
|
|
428
|
+
}
|
|
429
|
+
catch {
|
|
430
|
+
return "";
|
|
431
|
+
}
|
|
432
|
+
}
|
|
433
|
+
function digest(value) {
|
|
434
|
+
return createHash("sha256").update(value).digest("hex");
|
|
435
|
+
}
|
|
436
|
+
//# sourceMappingURL=policy.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/activity/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAqDzC,MAAM,aAAa,GAAkB,MAAM,CAAC,MAAM,CAAC;IACjD,YAAY,EAAE,GAAG;IACjB,YAAY,EAAE,EAAE,IAAI,EAAE;IACtB,kBAAkB,EAAE,GAAG,IAAI,EAAE;IAC7B,eAAe,EAAE,GAAG,IAAI,EAAE;IAC1B,mBAAmB,EAAE,EAAE,IAAI,EAAE;IAC7B,kBAAkB,EAAE,GAAG,IAAI,EAAE;CAC9B,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAsB;IAC/C,6BAA6B;IAC7B,kCAAkC;IAClC,wBAAwB;IACxB,yCAAyC;IACzC,wGAAwG;CACzG,CAAC;AAEF,MAAM,qBAAqB,GACzB,4HAA4H,CAAC;AAE/H,MAAM,OAAO,iBAAiB;IACnB,WAAW,CAAmB;IAC9B,aAAa,CAAoB;IACjC,OAAO,CAAgB;IAEhC,YACE,UAA4B,EAC5B,eAAkC,EAAE,EACpC,SAAwB,aAAa;QAErC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;QAC9B,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IACxB,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC;IACzE,CAAC;IAED,cAAc,CAAC,QAA0B;QACvC,OAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,CACL,KAAc,EACd,QAAyB;QAEzB,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC9C,CAAC;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC1D,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,CACF,KAAc,EACd,QAA2C;QAE3C,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC9C,CAAC;QACD,MAAM,eAAe,GAAG,uBAAuB,CAC7C,KAAK,EACL,IAAI,CAAC,WAAW,CACjB,CAAC;QACF,MAAM,UAAU,GAAG,kBAAkB,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAChE,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACvD,OAAO;gBACL,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,QAAQ,EAAE,eAAe,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO;gBACrD,SAAS,EAAE,KAAK;aACjB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;gBACpB,OAAO,EAAE,WAAW;gBACpB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;aAC/B,CAAC;YACF,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI;SAChB,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,KAAc;QAOzB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC;YACpC,OAAO;gBACL,MAAM,EAAE,YAAY;gBACpB,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,KAAK;gBAChB,cAAc,EAAE,EAAE;aACnB,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,MAAM,eAAe,GAAG,uBAAuB,CAC7C,KAAK,EACL,IAAI,CAAC,WAAW,EAChB,IAAI,CACL,CAAC;QACF,MAAM,SAAS,GAAG,uBAAuB,CACvC,eAAe,CAAC,KAAK,EACrB,EAAE,EACF,cAAc,EACd,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAC7B,CAAC;QACF,IAAI,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,OAAO,GACT,eAAe,CAAC,OAAO;YACvB,cAAc,CAAC,MAAM,GAAG,CAAC;YACzB,UAAU,KAAK,QAAQ,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAC9C,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;YAClD,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC1B,OAAO,EAAE,WAAW;gBACpB,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC;aAC3B,CAAC,CAAC;YACH,OAAO,GAAG,IAAI,CAAC;YACf,OAAO;gBACL,MAAM,EAAE,YAAY;gBACpB,KAAK,EAAE,UAAU;gBACjB,QAAQ,EAAE,OAAO;gBACjB,SAAS,EAAE,IAAI;gBACf,cAAc;aACf,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,UAAU;YACjB,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,KAAK;YAChB,cAAc;SACf,CAAC;IACJ,CAAC;IAED,UAAU,CACR,GAAY,EACZ,QAA0D;QAE1D,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAClD,CAAC;QACD,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC;YACpB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,KAAc,EAAE,QAAgB;QACvC,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC;aAC5B,OAAO,CAAC,sBAAsB,EAAE,GAAG,CAAC;aACpC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;aACxB,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACjB,OAAO,IAAI,IAAI,QAAQ,CAAC;IAC1B,CAAC;IAED,SAAS,CAAC,QAAyB;QACjC,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;QACzC,CAAC;QACD,IAAI,QAAQ,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;QACnE,IAAI,QAAQ,KAAK,gBAAgB,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC1C,CAAC;QACD,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;QACzC,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;IACnC,CAAC;IAED,kBAAkB,CAChB,KAAa,EACb,KAAa;QAMb,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACtD,OAAO;YACL,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,QAAQ,EAAE,QAAQ,CAAC,OAAO;YAC1B,SAAS,EAAE,SAAS,CAAC,SAAS;SAC/B,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,KAAa;QACnB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACzC,IAAI,OAAO,KAAK,EAAE;gBAAE,SAAS;YAC7B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACzD,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,qBAAqB,EAAE,CAAC;YAC5C,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACtB,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAe,EAAE,EAAE,CAC3D,OAAO,MAAM,KAAK,QAAQ;gBACxB,CAAC,CAAC,GAAG,MAAM,mBAAmB;gBAC9B,CAAC,CAAC,mBAAmB,CACxB,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,KAAK,EAAE,CAAC;IACtD,CAAC;CACF;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAc,EACd,MAAwB,EACxB,6BAA6B,GAAG,KAAK;IAErC,OAAO,sBAAsB,CAC3B,KAAK,EACL,MAAM,EACN,EAAE,EACF,CAAC,EACD,SAAS,EACT,6BAA6B,CAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,KAAa,EACb,YAAoB;IAEpB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,GAAG,GAAG,YAAY,CAAC;IACvB,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAC9D,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CACvB,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,EAAE,CAAC;QACR,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,KAAa;IACvD,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,aAAa,CAAC;IACrC,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,SAAS;QAC1B,OAAO,KAAK,KAAK,QAAQ,EACzB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK;aACT,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aACb,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YAC1D,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,kBAAkB,CAC3C,KAAiC,CAAC,GAAG,CAAC,EACvC,KAAK,GAAG,CAAC,CACV,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAEhD,SAAS,sBAAsB,CAC7B,KAAc,EACd,MAAwB,EACxB,GAAW,EACX,KAAa,EACb,MAA0C,EAC1C,6BAA6B,GAAG,KAAK,EACrC,iBAA0C;IAE1C,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QAChB,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,gBAAgB,IAAI,iBAAiB,CAAC;IACvD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IACE,6BAA6B;YAC7B,QAAQ,KAAK,SAAS;YACtB,CAAC,0BAA0B,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,EAC/C,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACvD,CAAC;QACD,IACE,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;YAC5C,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC;YAC3C,CAAC,CAAC,MAAM,CAAC,gBAAgB,IAAI,wBAAwB,CAAC,KAAK,CAAC,CAAC,EAC7D,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACvD,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YAChD,MAAM,KAAK,GAAG,sBAAsB,CAClC,IAAI,EACJ,MAAM,EACN,EAAE,EACF,KAAK,GAAG,CAAC,EACT,SAAS,EACT,6BAA6B,EAC7B,QAAQ,CACT,CAAC;YACF,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;YAC1B,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,OAAO;YACL,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;SACnD,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACvD,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,sBAAsB,CACjC,KAAiC,CAAC,QAAQ,CAAC,EAC5C,MAAM,EACN,QAAQ,EACR,KAAK,GAAG,CAAC,EACT,KAAgC,EAChC,6BAA6B,EAC7B,QAAQ,CACT,CAAC;YACF,MAAM,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;YAC/B,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC;QAC5B,CAAC;QACD,OAAO;YACL,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;SAC9D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAc,EACd,MAA0C;IAE1C,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG;QACd,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QAC1D,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QAC1D,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;KAC3D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1B,IACE,mEAAmE,CAAC,IAAI,CACtE,GAAG,CACJ,EACD,CAAC;QACD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IACE,qGAAqG,CAAC,IAAI,CACxG,GAAG,CACJ,EACD,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,4CAA4C,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3D,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,IAAI,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,IAAI,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,IAAI,0DAA0D,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACzE,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,IACE,mEAAmE,CAAC,IAAI,CACtE,GAAG,CACJ,EACD,CAAC;QACD,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,IAAI,sCAAsC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,gDAAgD,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/D,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,IACE,6DAA6D,CAAC,IAAI,CAAC,GAAG,CAAC,EACvE,CAAC;QACD,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,IACE,qDAAqD,CAAC,IAAI,CAAC,GAAG,CAAC,EAC/D,CAAC;QACD,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,IAAI,sCAAsC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,IAAI,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QACrB,OAAO,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC;YACtD,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,YAAY,CAAC;IACnB,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QAC3C,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,eAAe,CAAC;QAC/D,IAAI,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QACD,IAAI,0CAA0C,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,IAAI,sCAAsC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QACD,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,eAAe,CAAC;QAC/D,IAAI,0CAA0C,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,OAAO,iBAAiB,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,0BAA0B,CACjC,MAAc,EACd,KAAa,EACb,MAA0C;IAE1C,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG;QACjB,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QAC1D,OAAO,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;KAC3D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1B,MAAM,QAAQ,GACZ,GAAG,KAAK,MAAM;QACd,CACE,gDAAgD,CAAC,IAAI,CAAC,UAAU,CAAC;YACjE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,WAAW,CAAC,CACzC,CAAC;IACJ,IACE,CAAC,QAAQ;QACT,CAAC,8GAA8G,CAAC,IAAI,CAClH,GAAG,CACJ,EACD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,KAAK,CAAC,MAAM,IAAI,GAAG;QACnB,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,CAChD,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,2CAA2C,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,uFAAuF,CAAC,IAAI,CACjG,OAAO,CACR,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAc,EACd,IAAY,EACZ,cAAwB,EACxB,MAAwE,EACxE,KAAK,GAAG,CAAC;IAET,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,aAAa,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,KAAK,EAAE;YAAE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IACD,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,SAAS;QAC1B,OAAO,KAAK,KAAK,QAAQ,EACzB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC/C,uBAAuB,CACrB,IAAI,EACJ,GAAG,IAAI,IAAI,KAAK,GAAG,EACnB,cAAc,EACd,MAAM,EACN,KAAK,GAAG,CAAC,CACV,CACF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;YAC5D,MAAM,SAAS,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;YACvD,IAAI,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC;gBAClC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAClC,KAAiC,CAAC,GAAG,CAAC,EACvC,SAAS,EACT,cAAc,EACd,MAAM,EACN,KAAK,GAAG,CAAC,CACV,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACrD,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC"}
|
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
export declare function objectValue(value: unknown): Record<string, unknown> | null;
|
|
2
|
+
export declare function stringField(value: unknown, field: string): string;
|
|
3
|
+
export declare function nestedField(value: unknown, ...fields: readonly string[]): unknown;
|
|
4
|
+
export declare function arrayField(value: unknown, field: string): readonly unknown[];
|
|
5
|
+
export declare function recordObservedAt(record: unknown, fallback: Date): Date;
|
|
6
|
+
export declare function extractText(value: unknown, depth?: number): string;
|
|
7
|
+
//# sourceMappingURL=record.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"record.d.ts","sourceRoot":"","sources":["../../../src/activity/record.ts"],"names":[],"mappings":"AAAA,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAI1E;AAED,wBAAgB,WAAW,CACzB,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,GACZ,MAAM,CAKR;AAED,wBAAgB,WAAW,CACzB,KAAK,EAAE,OAAO,EACd,GAAG,MAAM,EAAE,SAAS,MAAM,EAAE,GAC3B,OAAO,CAQT;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,GACZ,SAAS,OAAO,EAAE,CAGpB;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,IAAI,GACb,IAAI,CAQN;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,MAAM,CAmB7D"}
|
|
@@ -0,0 +1,61 @@
|
|
|
1
|
+
export function objectValue(value) {
|
|
2
|
+
return typeof value === "object" && value !== null
|
|
3
|
+
? value
|
|
4
|
+
: null;
|
|
5
|
+
}
|
|
6
|
+
export function stringField(value, field) {
|
|
7
|
+
const object = objectValue(value);
|
|
8
|
+
return typeof object?.[field] === "string"
|
|
9
|
+
? object[field]
|
|
10
|
+
: "";
|
|
11
|
+
}
|
|
12
|
+
export function nestedField(value, ...fields) {
|
|
13
|
+
let current = value;
|
|
14
|
+
for (const field of fields) {
|
|
15
|
+
const object = objectValue(current);
|
|
16
|
+
if (object === null)
|
|
17
|
+
return undefined;
|
|
18
|
+
current = object[field];
|
|
19
|
+
}
|
|
20
|
+
return current;
|
|
21
|
+
}
|
|
22
|
+
export function arrayField(value, field) {
|
|
23
|
+
const object = objectValue(value);
|
|
24
|
+
return Array.isArray(object?.[field]) ? object[field] : [];
|
|
25
|
+
}
|
|
26
|
+
export function recordObservedAt(record, fallback) {
|
|
27
|
+
for (const field of ["timestamp", "created_at", "createdAt", "time"]) {
|
|
28
|
+
const candidate = stringField(record, field);
|
|
29
|
+
if (candidate === "")
|
|
30
|
+
continue;
|
|
31
|
+
const parsed = new Date(candidate);
|
|
32
|
+
if (!Number.isNaN(parsed.getTime()))
|
|
33
|
+
return parsed;
|
|
34
|
+
}
|
|
35
|
+
return fallback;
|
|
36
|
+
}
|
|
37
|
+
export function extractText(value, depth = 0) {
|
|
38
|
+
if (depth >= 8)
|
|
39
|
+
return "";
|
|
40
|
+
if (typeof value === "string")
|
|
41
|
+
return value;
|
|
42
|
+
if (Array.isArray(value)) {
|
|
43
|
+
return value
|
|
44
|
+
.slice(0, 256)
|
|
45
|
+
.map((item) => extractText(item, depth + 1))
|
|
46
|
+
.filter(Boolean)
|
|
47
|
+
.join("\n");
|
|
48
|
+
}
|
|
49
|
+
const object = objectValue(value);
|
|
50
|
+
if (object === null)
|
|
51
|
+
return "";
|
|
52
|
+
for (const field of ["text", "message", "content", "output", "result"]) {
|
|
53
|
+
if (field in object) {
|
|
54
|
+
const text = extractText(object[field], depth + 1);
|
|
55
|
+
if (text !== "")
|
|
56
|
+
return text;
|
|
57
|
+
}
|
|
58
|
+
}
|
|
59
|
+
return "";
|
|
60
|
+
}
|
|
61
|
+
//# sourceMappingURL=record.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"record.js","sourceRoot":"","sources":["../../../src/activity/record.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAChD,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAAc,EACd,KAAa;IAEb,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,OAAO,MAAM,EAAE,CAAC,KAAK,CAAC,KAAK,QAAQ;QACxC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QACf,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAAc,EACd,GAAG,MAAyB;IAE5B,IAAI,OAAO,GAAY,KAAK,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACtC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,KAAc,EACd,KAAa;IAEb,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,MAAe,EACf,QAAc;IAEd,KAAK,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC;QACrE,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7C,IAAI,SAAS,KAAK,EAAE;YAAE,SAAS;QAC/B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAAE,OAAO,MAAM,CAAC;IACrD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IACnD,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK;aACT,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;aACb,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;aAC3C,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACvE,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACnD,IAAI,IAAI,KAAK,EAAE;gBAAE,OAAO,IAAI,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}
|
|
@@ -0,0 +1,46 @@
|
|
|
1
|
+
export type SourceReaderMode = "live" | "history";
|
|
2
|
+
export type ActivitySource = Readonly<{
|
|
3
|
+
adapterId: string;
|
|
4
|
+
roots: readonly string[];
|
|
5
|
+
format?: "jsonl" | "opencode-sqlite";
|
|
6
|
+
sourceDisplayName?: string;
|
|
7
|
+
}>;
|
|
8
|
+
export type SourceRecord = Readonly<{
|
|
9
|
+
adapterId: string;
|
|
10
|
+
sourceId: string;
|
|
11
|
+
sourceRecordId: string;
|
|
12
|
+
sourceDisplayName?: string;
|
|
13
|
+
observedAt: Date;
|
|
14
|
+
initialReplay?: boolean;
|
|
15
|
+
value: unknown;
|
|
16
|
+
}>;
|
|
17
|
+
export type SourceReaderMetrics = Readonly<{
|
|
18
|
+
files: number;
|
|
19
|
+
discoveredFiles: number;
|
|
20
|
+
records: number;
|
|
21
|
+
malformed: number;
|
|
22
|
+
oversized: number;
|
|
23
|
+
}>;
|
|
24
|
+
export type ActivitySourceCheckpoint = Readonly<{
|
|
25
|
+
generation: number;
|
|
26
|
+
cursors: ReadonlyMap<string, number>;
|
|
27
|
+
}>;
|
|
28
|
+
export declare class ActivityCursorStore {
|
|
29
|
+
#private;
|
|
30
|
+
constructor(dataDirectory: string);
|
|
31
|
+
load(): Promise<Map<string, number>>;
|
|
32
|
+
save(cursors: ReadonlyMap<string, number>): Promise<void>;
|
|
33
|
+
}
|
|
34
|
+
export declare class JSONLSourceReader {
|
|
35
|
+
#private;
|
|
36
|
+
constructor(dataDirectory: string, replayOnFirstStart?: boolean, initialReplayBytes?: number, initialReplaySessions?: number, mode?: SourceReaderMode);
|
|
37
|
+
scan(sources: readonly ActivitySource[], maxRecords?: number): Promise<Readonly<{
|
|
38
|
+
records: readonly SourceRecord[];
|
|
39
|
+
metrics: SourceReaderMetrics;
|
|
40
|
+
checkpoint: ActivitySourceCheckpoint;
|
|
41
|
+
complete: boolean;
|
|
42
|
+
}>>;
|
|
43
|
+
commit(checkpoint: ActivitySourceCheckpoint): Promise<void>;
|
|
44
|
+
}
|
|
45
|
+
export declare function expandedActivityRoot(root: string): string;
|
|
46
|
+
//# sourceMappingURL=source-reader.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"source-reader.d.ts","sourceRoot":"","sources":["../../../src/activity/source-reader.ts"],"names":[],"mappings":"AAyBA,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,SAAS,CAAC;AAElD,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,GAAG,iBAAiB,CAAC;IACrC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,EAAE,IAAI,CAAC;IACjB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAAC;AAOH,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC,CAAC,CAAC;AAUH,qBAAa,mBAAmB;;gBAIlB,aAAa,EAAE,MAAM;IAK3B,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAiDpC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;CA4BhE;AAED,qBAAa,iBAAiB;;gBAc1B,aAAa,EAAE,MAAM,EACrB,kBAAkB,UAAQ,EAC1B,kBAAkB,SAA4B,EAC9C,qBAAqB,SAAI,EACzB,IAAI,GAAE,gBAAyB;IAe3B,IAAI,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAC1E,QAAQ,CAAC;QACP,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;QACjC,OAAO,EAAE,mBAAmB,CAAC;QAC7B,UAAU,EAAE,wBAAwB,CAAC;QACrC,QAAQ,EAAE,OAAO,CAAC;KACnB,CAAC,CACH;IA2JK,MAAM,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;CA4LlE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAMzD"}
|