@pinta-ai/pinta-codex 1.2.4 → 1.4.0

package/dist/core/otlp.js

@@ -1,192 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ulidToTraceId = ulidToTraceId;
-exports.newSpanId = newSpanId;
-exports.buildOtlpPayload = buildOtlpPayload;
-exports.mergeBatch = mergeBatch;
-const crypto_1 = __importDefault(require("crypto"));
-const os_1 = __importDefault(require("os"));
-const redact_js_1 = require("./redact.js");
-const PLUGIN_VERSION = "1.2.0"; // keep in sync with .codex-plugin/plugin.json
-/**
- * Resolve the Codex CLI version from an explicit env if present.
- * Hooks run as short-lived processes, so we keep this intentionally simple.
- */
-let cachedCliVersion = null;
-function getCodexVersion() {
-    if (cachedCliVersion !== null)
-        return cachedCliVersion;
-    cachedCliVersion = process.env.CODEX_CLI_VERSION || "unknown";
-    return cachedCliVersion;
-}
-const CROCKFORD = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
-/**
- * Convert a 26-char Crockford ULID into 32 lowercase hex chars (16 bytes)
- * suitable for an OTLP traceId. Decoding is straightforward because each
- * Crockford char carries 5 bits and 26 chars = 130 bits; we keep the low
- * 128 bits (the spec already pads timestamp+randomness into 128 bits).
- */
-function ulidToTraceId(ulid) {
-    if (ulid.length !== 26) {
-        throw new Error(`ulidToTraceId: expected 26 chars, got ${ulid.length}`);
-    }
-    // Decode to a BigInt then to 16-byte big-endian buffer.
-    let n = 0n;
-    for (const ch of ulid) {
-        const idx = CROCKFORD.indexOf(ch);
-        if (idx < 0)
-            throw new Error(`ulidToTraceId: invalid Crockford char "${ch}"`);
-        n = (n << 5n) | BigInt(idx);
-    }
-    // Mask to 128 bits (drop the top 2 bits of the 130-bit decode).
-    const mask = (1n << 128n) - 1n;
-    n &= mask;
-    // Render as 32 hex chars, lowercase.
-    return n.toString(16).padStart(32, "0");
-}
-/** Generate a fresh 16-hex-char (8-byte) span ID. */
-function newSpanId() {
-    return crypto_1.default.randomBytes(8).toString("hex");
-}
-/**
- * Attribute keys for which redaction (Tier 1) is skipped. Truncation (Tier 3)
- * still applies. These are identifiers, enums, or our own resource attrs that
- * are known-safe and where false-positive masking would hurt more than help.
- */
-const SKIP_REDACT_KEYS = new Set([
-    "codex.hook",
-    "codex.tool_name",
-    "codex.tool_use_id",
-    "codex.session_id",
-    "codex.transcript_path",
-    "codex.cwd",
-    "codex.permission_mode",
-]);
-function maybeRedactString(key, raw) {
-    // Spec §3: truncate first, then redact.
-    const truncated = (0, redact_js_1.truncate)(raw);
-    if (SKIP_REDACT_KEYS.has(key))
-        return truncated;
-    // Bash context only applies when this key may carry shell command text.
-    // flattenEvent emits codex.tool_input as a single JSON-stringified attribute
-    // (no nested flattening today), so strict equality matches actual behavior.
-    // If nested flattening is ever added, re-evaluate to avoid extending bash
-    // context to unrelated nested keys (e.g. codex.tool_input.file_path).
-    const context = key === "codex.tool_input" || key === "codex.tool_response"
-        ? "bash"
-        : undefined;
-    return (0, redact_js_1.redact)(truncated, { context });
-}
-/** Convert a JS value into an OTLP attribute value. Returns null to omit. */
-function toOtlpValue(key, v) {
-    if (v === null || v === undefined)
-        return null;
-    switch (typeof v) {
-        case "string":
-            return { stringValue: maybeRedactString(key, v) };
-        case "boolean":
-            return { boolValue: v };
-        case "number":
-            if (Number.isInteger(v))
-                return { intValue: v };
-            return { doubleValue: v };
-        case "object":
-            try {
-                return { stringValue: maybeRedactString(key, JSON.stringify(v)) };
-            }
-            catch {
-                return { stringValue: maybeRedactString(key, String(v)) };
-            }
-        default:
-            return { stringValue: maybeRedactString(key, String(v)) };
-    }
-}
-function snakeCase(hookEventName) {
-    // "PreToolUse" → "pre_tool_use"
-    return hookEventName
-        .replace(/([a-z0-9])([A-Z])/g, "$1_$2")
-        .replace(/([A-Z])([A-Z][a-z])/g, "$1_$2")
-        .toLowerCase();
-}
-function flattenEvent(event) {
-    const out = [];
-    // Discriminator first so the Pinta backend's detectIngestType hits it cheaply.
-    out.push({ key: "ingest.type", value: { stringValue: "codex" } });
-    // Always set codex.hook explicitly so server queries have a canonical key
-    // regardless of incoming field name.
-    out.push({ key: "codex.hook", value: { stringValue: event.hook_event_name } });
-    for (const [k, v] of Object.entries(event)) {
-        if (k === "hook_event_name")
-            continue; // covered by codex.hook above
-        const key = `codex.${k}`;
-        const value = toOtlpValue(key, v);
-        if (value === null)
-            continue;
-        out.push({ key, value });
-    }
-    return out;
-}
-function resourceAttrs() {
-    return [
-        { key: "service.name", value: { stringValue: "codex" } },
-        { key: "service.version", value: { stringValue: getCodexVersion() } },
-        { key: "telemetry.sdk.name", value: { stringValue: "pinta-codex" } },
-        { key: "telemetry.sdk.language", value: { stringValue: "nodejs" } },
-        { key: "telemetry.sdk.version", value: { stringValue: PLUGIN_VERSION } },
-        { key: "process.pid", value: { intValue: process.pid } },
-        { key: "process.owner", value: { stringValue: os_1.default.userInfo().username } },
-        { key: "host.name", value: { stringValue: os_1.default.hostname() } },
-        { key: "host.arch", value: { stringValue: os_1.default.arch() } },
-    ];
-}
-function buildOtlpPayload(args) {
-    const ts = args.now ?? Date.now();
-    const tsNano = (BigInt(ts) * 1000000n).toString();
-    const attrs = flattenEvent(args.event);
-    if (args.guard) {
-        attrs.push({ key: 'pinta.guard.decision', value: { stringValue: args.guard.decision.toLowerCase() } }, { key: 'pinta.guard.duration_ms', value: { intValue: args.guard.durationMs } });
-        if (args.guard.reason) {
-            attrs.push({ key: 'pinta.guard.matched_rule', value: { stringValue: args.guard.reason } });
-        }
-        if (args.guard.failOpenReason) {
-            attrs.push({ key: 'pinta.guard.fail_open_reason', value: { stringValue: args.guard.failOpenReason } });
-        }
-    }
-    const span = {
-        traceId: ulidToTraceId(args.traceId),
-        spanId: newSpanId(),
-        name: `codex.${snakeCase(args.event.hook_event_name)}`,
-        kind: 1, // SPAN_KIND_INTERNAL
-        startTimeUnixNano: tsNano,
-        endTimeUnixNano: tsNano,
-        attributes: attrs,
-    };
-    return {
-        resourceSpans: [
-            {
-                resource: { attributes: resourceAttrs() },
-                scopeSpans: [
-                    {
-                        scope: { name: "pinta-codex", version: PLUGIN_VERSION },
-                        spans: [span],
-                    },
-                ],
-            },
-        ],
-    };
-}
-/**
- * Combine multiple per-hook payloads into a single OTLP payload by
- * concatenating their resourceSpans arrays. The Pinta backend's parser
- * iterates over resourceSpans natively.
- */
-function mergeBatch(payloads) {
-    const out = [];
-    for (const p of payloads)
-        out.push(...p.resourceSpans);
-    return { resourceSpans: out };
-}
-//# sourceMappingURL=otlp.js.map

package/dist/core/otlp.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"otlp.js","sourceRoot":"","sources":["../../src/core/otlp.ts"],"names":[],"mappings":";;;;;AA0DA,sCAgBC;AAGD,8BAEC;AA6FD,4CA2CC;AAOD,gCAIC;AAlOD,oDAA4B;AAC5B,4CAAoB;AAEpB,2CAA+C;AAG/C,MAAM,cAAc,GAAG,OAAO,CAAC,CAAC,8CAA8C;AAE9E;;;GAGG;AACH,IAAI,gBAAgB,GAAkB,IAAI,CAAC;AAC3C,SAAS,eAAe;IACtB,IAAI,gBAAgB,KAAK,IAAI;QAAE,OAAO,gBAAgB,CAAC;IACvD,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS,CAAC;IAC9D,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAiCD,MAAM,SAAS,GAAG,kCAAkC,CAAC;AAErD;;;;;GAKG;AACH,SAAgB,aAAa,CAAC,IAAY;IACxC,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,wDAAwD;IACxD,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;QAC9E,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,gEAAgE;IAChE,MAAM,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC,IAAI,IAAI,CAAC;IACV,qCAAqC;IACrC,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,qDAAqD;AACrD,SAAgB,SAAS;IACvB,OAAO,gBAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IACpD,YAAY;IACZ,iBAAiB;IACjB,mBAAmB;IACnB,kBAAkB;IAClB,uBAAuB;IACvB,WAAW;IACX,uBAAuB;CACxB,CAAC,CAAC;AAEH,SAAS,iBAAiB,CAAC,GAAW,EAAE,GAAW;IACjD,wCAAwC;IACxC,MAAM,SAAS,GAAG,IAAA,oBAAQ,EAAC,GAAG,CAAC,CAAC;IAChC,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,wEAAwE;IACxE,6EAA6E;IAC7E,4EAA4E;IAC5E,0EAA0E;IAC1E,sEAAsE;IACtE,MAAM,OAAO,GAAG,GAAG,KAAK,kBAAkB,IAAI,GAAG,KAAK,qBAAqB;QACzE,CAAC,CAAE,MAAgB;QACnB,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,IAAA,kBAAM,EAAC,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,6EAA6E;AAC7E,SAAS,WAAW,CAAC,GAAW,EAAE,CAAU;IAC1C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC/C,QAAQ,OAAO,CAAC,EAAE,CAAC;QACjB,KAAK,QAAQ;YACX,OAAO,EAAE,WAAW,EAAE,iBAAiB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;QACpD,KAAK,SAAS;YACZ,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC1B,KAAK,QAAQ;YACX,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;gBAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YAChD,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;QAC5B,KAAK,QAAQ;YACX,IAAI,CAAC;gBACH,OAAO,EAAE,WAAW,EAAE,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,WAAW,EAAE,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,CAAC;QACH;YACE,OAAO,EAAE,WAAW,EAAE,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,aAAqB;IACtC,gCAAgC;IAChC,OAAO,aAAa;SACjB,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACtC,OAAO,CAAC,sBAAsB,EAAE,OAAO,CAAC;SACxC,WAAW,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,KAAgB;IACpC,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,+EAA+E;IAC/E,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAClE,0EAA0E;IAC1E,qCAAqC;IACrC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC/E,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,iBAAiB;YAAE,SAAS,CAAC,8BAA8B;QACrE,MAAM,GAAG,GAAG,SAAS,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC7B,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa;IACpB,OAAO;QACL,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE;QACxD,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,EAAE;QACrE,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE;QACpE,EAAE,GAAG,EAAE,wBAAwB,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE;QACnE,EAAE,GAAG,EAAE,uBAAuB,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,cAAc,EAAE,EAAE;QACxE,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE;QACxD,EAAE,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,YAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE;QACxE,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,YAAE,CAAC,QAAQ,EAAE,EAAE,EAAE;QAC3D,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,YAAE,CAAC,IAAI,EAAE,EAAE,EAAE;KACxD,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAAC,IAKhC;IACC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,QAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,KAAK,CAAC,IAAI,CACR,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,EAAE,EAC1F,EAAE,GAAG,EAAE,yBAAyB,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAC/E,CAAC;QACF,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,0BAA0B,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,8BAA8B,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAa;QACrB,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QACpC,MAAM,EAAE,SAAS,EAAE;QACnB,IAAI,EAAE,SAAS,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE;QACtD,IAAI,EAAE,CAAC,EAAE,qBAAqB;QAC9B,iBAAiB,EAAE,MAAM;QACzB,eAAe,EAAE,MAAM;QACvB,UAAU,EAAE,KAAK;KAClB,CAAC;IACF,OAAO;QACL,aAAa,EAAE;YACb;gBACE,QAAQ,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,EAAE;gBACzC,UAAU,EAAE;oBACV;wBACE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE;wBACvD,KAAK,EAAE,CAAC,IAAI,CAAC;qBACd;iBACF;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,UAAU,CAAC,QAAuB;IAChD,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;IACvD,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;AAChC,CAAC"}

package/dist/core/redact.d.ts

@@ -1,57 +0,0 @@
-export interface RedactOptions {
-    /**
-     * Optional context hint that enables context-gated patterns. Currently
-     * only "bash" enables `cli_password_short` (-p<pass>) since matching it
-     * outside Bash command text is too noisy.
-     */
-    context?: "bash";
-}
-/** Tier 3 cap: per-string byte limit before truncation. */
-export declare const MAX_BYTES = 102400;
-/**
- * Truncate input by UTF-8 byte length. Appends `…[TRUNCATED:<origByteLen>]`
- * to indicate elision. Returns input unchanged when within cap.
- *
- * Uses Buffer for accurate byte counting; slices on byte boundary then
- * decodes — may produce a U+FFFD if the boundary lands mid-codepoint, which
- * is acceptable for telemetry.
- */
-export declare function truncate(input: string): string;
-export interface Pattern {
-    /** Token type printed inside `[REDACTED:<type>]`. */
-    type: string;
-    /** Regex with global flag (`g`). Multiline (`m`) for line-anchored ones. */
-    regex: RegExp;
-    /**
-     * Capture group index whose substring is replaced. 0 (default) = whole match.
-     * Use a positive group when the pattern brackets context that should be
-     * preserved (e.g. `postgres://user:<pwd>@` keeps the URL shape intact).
-     */
-    captureGroup?: number;
-    /**
-     * If set, this pattern only applies when `RedactOptions.context` equals
-     * the listed value. Used for false-positive-prone shapes.
-     */
-    requireContext?: "bash";
-}
-export declare const PATTERNS: ReadonlyArray<Pattern>;
-interface Match {
-    start: number;
-    end: number;
-    replaceStart: number;
-    replaceEnd: number;
-    type: string;
-}
-export declare function collectMatches(input: string, opts: RedactOptions): Match[];
-export declare function resolveOverlaps(matches: Match[]): Match[];
-export declare function applyMatches(input: string, matches: Match[]): string;
-/**
- * Mask high-confidence secret patterns in `input`. Returns a new string with
- * matched substrings replaced by `[REDACTED:<type>]`.
- *
- * - `opts.context = "bash"` enables context-gated patterns.
- * - Truncation is NOT applied here — see `truncate()`. The caller decides
- *   the order (spec §3 Tier 3: truncate first, then redact).
- */
-export declare function redact(input: string, opts?: RedactOptions): string;
-export {};

package/dist/core/redact.js

@@ -1,149 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PATTERNS = exports.MAX_BYTES = void 0;
-exports.truncate = truncate;
-exports.collectMatches = collectMatches;
-exports.resolveOverlaps = resolveOverlaps;
-exports.applyMatches = applyMatches;
-exports.redact = redact;
-/** Tier 3 cap: per-string byte limit before truncation. */
-exports.MAX_BYTES = 102400;
-/**
- * Truncate input by UTF-8 byte length. Appends `…[TRUNCATED:<origByteLen>]`
- * to indicate elision. Returns input unchanged when within cap.
- *
- * Uses Buffer for accurate byte counting; slices on byte boundary then
- * decodes — may produce a U+FFFD if the boundary lands mid-codepoint, which
- * is acceptable for telemetry.
- */
-function truncate(input) {
-    const buf = Buffer.from(input, "utf-8");
-    if (buf.length <= exports.MAX_BYTES)
-        return input;
-    const head = buf.subarray(0, exports.MAX_BYTES).toString("utf-8");
-    return `${head}…[TRUNCATED:${buf.length}]`;
-}
-exports.PATTERNS = [
-    { type: "aws_access_key", regex: /AKIA[0-9A-Z]{16}/g },
-    {
-        type: "aws_secret_key",
-        // Context word `aws_secret`/`AWS_SECRET` (with optional separator) followed
-        // by an assignment-ish character then a 40-char base64-ish blob.
-        regex: /(?:aws[_-]?secret(?:[_-]?(?:access)?[_-]?key)?)\s*[:=]\s*["']?([A-Za-z0-9/+=]{40})(?![A-Za-z0-9/+=])/gi,
-        captureGroup: 1,
-    },
-    {
-        type: "gcp_service_account",
-        // Whole JSON blob starting with the service-account discriminator.
-        regex: /\{[\s\S]{0,200}?"type"\s*:\s*"service_account"[\s\S]*?\}/g,
-    },
-    { type: "github_token", regex: /gh[pousr]_[A-Za-z0-9]{36,}/g },
-    { type: "gitlab_token", regex: /glpat-[A-Za-z0-9_-]{20}/g },
-    { type: "slack_token", regex: /xox[abrsp]-[0-9A-Za-z-]{10,}/g },
-    { type: "openai_key", regex: /sk-(?:proj-)?[A-Za-z0-9_-]{40,}/g },
-    { type: "anthropic_key", regex: /sk-ant-[A-Za-z0-9_-]{50,}/g },
-    { type: "stripe_key", regex: /(?:sk|rk|pk)_(?:live|test)_[A-Za-z0-9]{20,}/g },
-    {
-        type: "jwt",
-        regex: /eyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g,
-    },
-    {
-        type: "private_key_block",
-        regex: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,
-    },
-    { type: "bearer_token", regex: /bearer\s+([A-Za-z0-9._~+/=-]{12,})/gi, captureGroup: 1 },
-    { type: "basic_auth", regex: /basic\s+([A-Za-z0-9+/=]{12,})/gi, captureGroup: 1 },
-    {
-        type: "db_url_password",
-        regex: /\b(?:postgres|postgresql|mysql|mariadb|mongodb(?:\+srv)?|redis):\/\/[^:\s/]+:([^@\s]+)@/gi,
-        captureGroup: 1,
-    },
-    {
-        type: "cli_password_flag",
-        regex: /(?:--password|--pass|--pwd)[=\s]([^\s'"]+)/g,
-        captureGroup: 1,
-    },
-    {
-        type: "cli_password_short",
-        // mysql -p<pass>; only on bash context.
-        regex: /\s-p([^\s'"]+)/g,
-        captureGroup: 1,
-        requireContext: "bash",
-    },
-    {
-        type: "env_var_secret",
-        // Known false positive: trailing `[A-Z0-9_]*` is greedy, so names like
-        // `OPENAI_API_KEY_DESCRIPTION=Used` still match. Acceptable for Bronze.
-        regex: /^(?:export\s+)?([A-Z][A-Z0-9_]*(?:KEY|SECRET|TOKEN|PASSWORD|PASSWD|PWD|API_KEY)[A-Z0-9_]*)\s*=\s*["']?([^\s"'\n]+)/gm,
-        captureGroup: 2,
-    },
-];
-function collectMatches(input, opts) {
-    const out = [];
-    for (const pattern of exports.PATTERNS) {
-        if (pattern.requireContext && pattern.requireContext !== opts.context)
-            continue;
-        const re = new RegExp(pattern.regex.source, pattern.regex.flags);
-        let m;
-        while ((m = re.exec(input)) !== null) {
-            const cg = pattern.captureGroup ?? 0;
-            const captured = m[cg];
-            if (captured === undefined) {
-                if (m.index === re.lastIndex)
-                    re.lastIndex++;
-                continue;
-            }
-            const start = m.index;
-            const end = m.index + m[0].length;
-            const replaceStart = start + m[0].indexOf(captured);
-            const replaceEnd = replaceStart + captured.length;
-            out.push({ start, end, replaceStart, replaceEnd, type: pattern.type });
-            if (m.index === re.lastIndex)
-                re.lastIndex++; // guard against zero-length
-        }
-    }
-    return out;
-}
-function resolveOverlaps(matches) {
-    const sorted = [...matches].sort((a, b) => {
-        if (a.start !== b.start)
-            return a.start - b.start;
-        return (b.end - b.start) - (a.end - a.start); // longer whole-match wins on tie
-    });
-    const kept = [];
-    let lastEnd = -1;
-    for (const m of sorted) {
-        if (m.start < lastEnd)
-            continue; // overlapping later match dropped
-        kept.push(m);
-        lastEnd = m.end;
-    }
-    return kept;
-}
-function applyMatches(input, matches) {
-    // Apply right-to-left so earlier indices remain valid.
-    const sorted = [...matches].sort((a, b) => b.replaceStart - a.replaceStart);
-    let out = input;
-    for (const m of sorted) {
-        out = out.slice(0, m.replaceStart) + `[REDACTED:${m.type}]` + out.slice(m.replaceEnd);
-    }
-    return out;
-}
-/**
- * Mask high-confidence secret patterns in `input`. Returns a new string with
- * matched substrings replaced by `[REDACTED:<type>]`.
- *
- * - `opts.context = "bash"` enables context-gated patterns.
- * - Truncation is NOT applied here — see `truncate()`. The caller decides
- *   the order (spec §3 Tier 3: truncate first, then redact).
- */
-function redact(input, opts = {}) {
-    if (input.length === 0)
-        return input;
-    const all = collectMatches(input, opts);
-    if (all.length === 0)
-        return input;
-    const kept = resolveOverlaps(all);
-    return applyMatches(input, kept);
-}
-//# sourceMappingURL=redact.js.map

package/dist/core/redact.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/core/redact.ts"],"names":[],"mappings":";;;AAoBA,4BAKC;AAoFD,wCAsBC;AAED,0CAaC;AAED,oCAQC;AAUD,wBAMC;AAnKD,2DAA2D;AAC9C,QAAA,SAAS,GAAG,MAAM,CAAC;AAEhC;;;;;;;GAOG;AACH,SAAgB,QAAQ,CAAC,KAAa;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,GAAG,CAAC,MAAM,IAAI,iBAAS;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,iBAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1D,OAAO,GAAG,IAAI,eAAe,GAAG,CAAC,MAAM,GAAG,CAAC;AAC7C,CAAC;AAoBY,QAAA,QAAQ,GAA2B;IAC9C,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,mBAAmB,EAAE;IACtD;QACE,IAAI,EAAE,gBAAgB;QACtB,4EAA4E;QAC5E,iEAAiE;QACjE,KAAK,EAAE,wGAAwG;QAC/G,YAAY,EAAE,CAAC;KAChB;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,mEAAmE;QACnE,KAAK,EAAE,2DAA2D;KACnE;IACD,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,6BAA6B,EAAE;IAC9D,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,0BAA0B,EAAE;IAC3D,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,+BAA+B,EAAE;IAC/D,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,kCAAkC,EAAE;IACjE,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,4BAA4B,EAAE;IAC9D,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,8CAA8C,EAAE;IAC7E;QACE,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,mEAAmE;KAC3E;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,6EAA6E;KACrF;IACD,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,sCAAsC,EAAE,YAAY,EAAE,CAAC,EAAE;IACxF,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,iCAAiC,EAAE,YAAY,EAAE,CAAC,EAAE;IACjF;QACE,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,2FAA2F;QAClG,YAAY,EAAE,CAAC;KAChB;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,KAAK,EAAE,6CAA6C;QACpD,YAAY,EAAE,CAAC;KAChB;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,wCAAwC;QACxC,KAAK,EAAE,iBAAiB;QACxB,YAAY,EAAE,CAAC;QACf,cAAc,EAAE,MAAM;KACvB;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,uEAAuE;QACvE,wEAAwE;QACxE,KAAK,EAAE,sHAAsH;QAC7H,YAAY,EAAE,CAAC;KAChB;CACF,CAAC;AAUF,SAAgB,cAAc,CAAC,KAAa,EAAE,IAAmB;IAC/D,MAAM,GAAG,GAAY,EAAE,CAAC;IACxB,KAAK,MAAM,OAAO,IAAI,gBAAQ,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC,OAAO;YAAE,SAAS;QAChF,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC;YACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YACvB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,SAAS;oBAAE,EAAE,CAAC,SAAS,EAAE,CAAC;gBAC7C,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;YACtB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAClC,MAAM,YAAY,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACpD,MAAM,UAAU,GAAG,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC;YAClD,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YACvE,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,SAAS;gBAAE,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,4BAA4B;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,eAAe,CAAC,OAAgB;IAC9C,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;QAClD,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,iCAAiC;IACjF,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAY,EAAE,CAAC;IACzB,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,KAAK,GAAG,OAAO;YAAE,SAAS,CAAC,kCAAkC;QACnE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,YAAY,CAAC,KAAa,EAAE,OAAgB;IAC1D,uDAAuD;IACvD,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC;IAC5E,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,MAAM,CAAC,KAAa,EAAE,OAAsB,EAAE;IAC5D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC"}

package/dist/core/retry-queue.d.ts

@@ -1,26 +0,0 @@
-import type { OtlpPayload } from "./otlp.js";
-export interface QueueEntry {
-    savedAt: string;
-    payload: OtlpPayload;
-}
-export declare class RetryQueue {
-    private filePath;
-    private lockPath;
-    constructor(pluginData: string);
-    /** Append a single payload. Best-effort: any IO error is swallowed (logged to stderr). */
-    enqueue(payload: OtlpPayload): void;
-    /**
-     * Read all entries oldest-first. Returns [] if the file does not exist or is unreadable.
-     * Does NOT delete the file — callers handle persistence via `rewrite`.
-     */
-    readAll(): QueueEntry[];
-    /** Replace the queue with the given entries (or delete the file when empty). */
-    rewrite(entries: QueueEntry[]): void;
-    /**
-     * Try to acquire the lock for ~LOCK_TIMEOUT_MS. Returns true on success.
-     * Caller MUST call `release()` if true is returned.
-     */
-    tryAcquireLock(): boolean;
-    release(): void;
-    private trim;
-}

package/dist/core/retry-queue.js

@@ -1,127 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RetryQueue = void 0;
-const fs_1 = __importDefault(require("fs"));
-const path_1 = __importDefault(require("path"));
-const MAX_ENTRIES = 1000;
-const LOCK_TIMEOUT_MS = 50;
-const LOCK_POLL_MS = 5;
-class RetryQueue {
-    filePath;
-    lockPath;
-    constructor(pluginData) {
-        this.filePath = path_1.default.join(pluginData, "failed-spans.jsonl");
-        this.lockPath = this.filePath + ".lock";
-    }
-    /** Append a single payload. Best-effort: any IO error is swallowed (logged to stderr). */
-    enqueue(payload) {
-        try {
-            fs_1.default.mkdirSync(path_1.default.dirname(this.filePath), { recursive: true });
-            const line = JSON.stringify({ savedAt: new Date().toISOString(), payload }) + "\n";
-            fs_1.default.appendFileSync(this.filePath, line);
-            this.trim();
-        }
-        catch (err) {
-            process.stderr.write(`[pinta-codex] retry-queue enqueue failed: ${err}\n`);
-        }
-    }
-    /**
-     * Read all entries oldest-first. Returns [] if the file does not exist or is unreadable.
-     * Does NOT delete the file — callers handle persistence via `rewrite`.
-     */
-    readAll() {
-        try {
-            const raw = fs_1.default.readFileSync(this.filePath, "utf-8");
-            const out = [];
-            for (const line of raw.split("\n")) {
-                if (!line.trim())
-                    continue;
-                try {
-                    out.push(JSON.parse(line));
-                }
-                catch {
-                    // skip malformed line
-                }
-            }
-            return out;
-        }
-        catch {
-            return [];
-        }
-    }
-    /** Replace the queue with the given entries (or delete the file when empty). */
-    rewrite(entries) {
-        try {
-            if (entries.length === 0) {
-                if (fs_1.default.existsSync(this.filePath))
-                    fs_1.default.unlinkSync(this.filePath);
-                return;
-            }
-            fs_1.default.mkdirSync(path_1.default.dirname(this.filePath), { recursive: true });
-            fs_1.default.writeFileSync(this.filePath, entries.map((e) => JSON.stringify(e)).join("\n") + "\n");
-        }
-        catch (err) {
-            process.stderr.write(`[pinta-codex] retry-queue rewrite failed: ${err}\n`);
-        }
-    }
-    /**
-     * Try to acquire the lock for ~LOCK_TIMEOUT_MS. Returns true on success.
-     * Caller MUST call `release()` if true is returned.
-     */
-    tryAcquireLock() {
-        const start = Date.now();
-        fs_1.default.mkdirSync(path_1.default.dirname(this.lockPath), { recursive: true });
-        while (Date.now() - start < LOCK_TIMEOUT_MS) {
-            try {
-                const fd = fs_1.default.openSync(this.lockPath, "wx");
-                fs_1.default.writeSync(fd, String(process.pid));
-                fs_1.default.closeSync(fd);
-                return true;
-            }
-            catch (err) {
-                if (err?.code !== "EEXIST") {
-                    process.stderr.write(`[pinta-codex] retry-queue lock open failed: ${err}\n`);
-                    return false;
-                }
-                // Stale lock detection: if mtime is older than 30s, drop it.
-                try {
-                    const st = fs_1.default.statSync(this.lockPath);
-                    if (Date.now() - st.mtimeMs > 30_000) {
-                        fs_1.default.unlinkSync(this.lockPath);
-                        continue;
-                    }
-                }
-                catch {
-                    /* ignore */
-                }
-                const wait = LOCK_POLL_MS;
-                const end = Date.now() + wait;
-                while (Date.now() < end) {
-                    /* spin briefly; sync only because hooks are short-lived */
-                }
-            }
-        }
-        return false;
-    }
-    release() {
-        try {
-            fs_1.default.unlinkSync(this.lockPath);
-        }
-        catch {
-            /* already gone */
-        }
-    }
-    trim() {
-        const entries = this.readAll();
-        if (entries.length <= MAX_ENTRIES)
-            return;
-        const drop = entries.length - MAX_ENTRIES;
-        process.stderr.write(`[pinta-codex] retry-queue full, dropping ${drop} oldest entries\n`);
-        this.rewrite(entries.slice(drop));
-    }
-}
-exports.RetryQueue = RetryQueue;
-//# sourceMappingURL=retry-queue.js.map

package/dist/core/retry-queue.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"retry-queue.js","sourceRoot":"","sources":["../../src/core/retry-queue.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AACpB,gDAAwB;AAGxB,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,YAAY,GAAG,CAAC,CAAC;AAOvB,MAAa,UAAU;IACb,QAAQ,CAAS;IACjB,QAAQ,CAAS;IAEzB,YAAY,UAAkB;QAC5B,IAAI,CAAC,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1C,CAAC;IAED,0FAA0F;IAC1F,OAAO,CAAC,OAAoB;QAC1B,IAAI,CAAC;YACH,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC;YACnF,YAAE,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,GAAG,IAAI,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpD,MAAM,GAAG,GAAiB,EAAE,CAAC;YAC7B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;oBAAE,SAAS;gBAC3B,IAAI,CAAC;oBACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC7B,CAAC;gBAAC,MAAM,CAAC;oBACP,sBAAsB;gBACxB,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,OAAO,CAAC,OAAqB;QAC3B,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,IAAI,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAAE,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,YAAE,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,GAAG,IAAI,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,eAAe,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,YAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBAC5C,YAAE,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;gBACtC,YAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACjB,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,IAAI,GAAG,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,GAAG,IAAI,CAAC,CAAC;oBAC7E,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,6DAA6D;gBAC7D,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,YAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACtC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC;wBACrC,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;wBAC7B,SAAS;oBACX,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,YAAY;gBACd,CAAC;gBACD,MAAM,IAAI,GAAG,YAAY,CAAC;gBAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;gBAC9B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;oBACxB,2DAA2D;gBAC7D,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO;QACL,IAAI,CAAC;YACH,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;IAEO,IAAI;QACV,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW;YAAE,OAAO;QAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC;QAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,IAAI,mBAAmB,CAAC,CAAC;QAC1F,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,CAAC;CACF;AA9GD,gCA8GC"}

package/dist/core/trace.d.ts

@@ -1,10 +0,0 @@
-import type { PintaCodexConfig } from "./config.js";
-export declare class TraceManager {
-    private tracePath;
-    constructor(config: PintaCodexConfig);
-    /** Start a new trace for each user prompt hook. */
-    newTrace(): string;
-    /** Return the current trace id, creating one when needed. */
-    currentTrace(): string;
-    private save;
-}

package/dist/core/trace.js

@@ -1,61 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TraceManager = void 0;
-const fs_1 = __importDefault(require("fs"));
-const path_1 = __importDefault(require("path"));
-const crypto_1 = __importDefault(require("crypto"));
-const CROCKFORD = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
-function generateUlid() {
-    const now = Date.now();
-    // 10 chars timestamp (48-bit ms)
-    let ts = "";
-    let t = now;
-    for (let i = 0; i < 10; i++) {
-        ts = CROCKFORD[t & 31] + ts;
-        t = Math.floor(t / 32);
-    }
-    // 16 chars randomness (80-bit)
-    const rand = crypto_1.default.randomBytes(10);
-    let r = "";
-    for (let i = 0; i < 10; i++) {
-        r += CROCKFORD[rand[i] & 31];
-    }
-    // pad to 16 chars
-    while (r.length < 16)
-        r += CROCKFORD[0];
-    return ts + r;
-}
-class TraceManager {
-    tracePath;
-    constructor(config) {
-        this.tracePath = config.tracePath;
-    }
-    /** Start a new trace for each user prompt hook. */
-    newTrace() {
-        const traceId = generateUlid();
-        this.save(traceId);
-        return traceId;
-    }
-    /** Return the current trace id, creating one when needed. */
-    currentTrace() {
-        try {
-            const data = fs_1.default.readFileSync(this.tracePath, "utf-8");
-            const { traceId } = JSON.parse(data);
-            if (traceId)
-                return traceId;
-        }
-        catch {
-            // no trace file yet
-        }
-        return this.newTrace();
-    }
-    save(traceId) {
-        fs_1.default.mkdirSync(path_1.default.dirname(this.tracePath), { recursive: true });
-        fs_1.default.writeFileSync(this.tracePath, JSON.stringify({ traceId }));
-    }
-}
-exports.TraceManager = TraceManager;
-//# sourceMappingURL=trace.js.map

package/dist/core/trace.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"trace.js","sourceRoot":"","sources":["../../src/core/trace.ts"],"names":[],"mappings":";;;;;;AAAA,4CAAoB;AACpB,gDAAwB;AACxB,oDAA4B;AAG5B,MAAM,SAAS,GAAG,kCAAkC,CAAC;AAErD,SAAS,YAAY;IACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,iCAAiC;IACjC,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,IAAI,CAAC,GAAG,GAAG,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,EAAE,GAAG,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;QAC5B,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACzB,CAAC;IACD,+BAA+B;IAC/B,MAAM,IAAI,GAAG,gBAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/B,CAAC;IACD,kBAAkB;IAClB,OAAO,CAAC,CAAC,MAAM,GAAG,EAAE;QAAE,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC;IACxC,OAAO,EAAE,GAAG,CAAC,CAAC;AAChB,CAAC;AAED,MAAa,YAAY;IACf,SAAS,CAAS;IAE1B,YAAY,MAAwB;QAClC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACpC,CAAC;IAED,mDAAmD;IACnD,QAAQ;QACN,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnB,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,6DAA6D;IAC7D,YAAY;QACV,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,YAAE,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACtD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAEO,IAAI,CAAC,OAAe;QAC1B,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,YAAE,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC;CACF;AA9BD,oCA8BC"}